]> git.proxmox.com Git - mirror_ubuntu-bionic-kernel.git/commitdiff
net: Add non-mainline source for rtl8192cu wlan
authorpopcornmix <popcornmix@gmail.com>
Mon, 3 Sep 2012 16:10:23 +0000 (17:10 +0100)
committerKleber Sacilotto de Souza <kleber.souza@canonical.com>
Wed, 15 Aug 2018 17:22:50 +0000 (19:22 +0200)
Add non-mainline source for rtl8192cu wireless driver version v4.0.2_9000 as
this is widely used. Disable older rtlwifi driver.

8192cu needs old wireless extensions

The obsolete WIRELESS_EXT configuration is used
by the old Realtek code and is needed for AP support.

8192cu: CONFIG_AP_MODE hardcoded in autoconf.h

rtl8192c_rf6052: PHY_RFShadowRefresh(): fix off-by-one

Signed-off-by: Marc Kleine-Budde <mkl@blackshift.org>
rtl8192cu: Add PID for D-Link DWA 131

174 files changed:
drivers/net/wireless/realtek/Kconfig
drivers/net/wireless/realtek/Makefile
drivers/net/wireless/realtek/rtl8192cu/Kconfig [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/Makefile [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/clean [new file with mode: 0755]
drivers/net/wireless/realtek/rtl8192cu/core/efuse/rtw_efuse.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/core/rtw_ap.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/core/rtw_br_ext.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/core/rtw_cmd.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/core/rtw_debug.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/core/rtw_eeprom.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/core/rtw_ieee80211.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/core/rtw_io.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/core/rtw_ioctl_query.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/core/rtw_ioctl_rtl.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/core/rtw_ioctl_set.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/core/rtw_iol.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/core/rtw_mlme.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/core/rtw_mlme_ext.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/core/rtw_mp.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/core/rtw_mp_ioctl.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/core/rtw_p2p.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/core/rtw_pwrctrl.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/core/rtw_recv.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/core/rtw_rf.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/core/rtw_security.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/core/rtw_sreset.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/core/rtw_sta_mgt.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/core/rtw_tdls.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/core/rtw_wlan_util.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/core/rtw_xmit.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/hal/HalPwrSeqCmd.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/hal/dm.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/hal/dm.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/hal/hal_com.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/hal/hal_intf.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/rtl8192c_cmd.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/rtl8192c_dm.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/rtl8192c_hal_init.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/rtl8192c_mp.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/rtl8192c_phycfg.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/rtl8192c_rf6052.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/rtl8192c_rxdesc.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/rtl8192c_sreset.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/rtl8192c_xmit.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/usb/Hal8192CUHWImg.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/usb/Hal8192CUHWImg_wowlan.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/usb/rtl8192cu_led.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/usb/rtl8192cu_recv.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/usb/rtl8192cu_xmit.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/usb/usb_halinit.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/usb/usb_ops_ce.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/usb/usb_ops_linux.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/usb/usb_ops_xp.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/ifcfg-wlan0 [new file with mode: 0755]
drivers/net/wireless/realtek/rtl8192cu/include/Hal8192CEHWImg.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/Hal8192CPhyCfg.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/Hal8192CPhyReg.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/Hal8192CUHWImg.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/Hal8192CUHWImg_wowlan.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/Hal8192DEHWImg.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/Hal8192DPhyCfg.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/Hal8192DPhyReg.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/Hal8192DUHWImg.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/Hal8192DUHWImg_wowlan.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/HalPwrSeqCmd.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/autoconf.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/basic_types.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/byteorder/big_endian.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/byteorder/generic.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/byteorder/little_endian.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/byteorder/swab.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/byteorder/swabb.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/circ_buf.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/cmd_osdep.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/drv_conf.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/drv_types.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/drv_types_ce.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/drv_types_linux.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/drv_types_sdio.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/drv_types_xp.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/ethernet.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/h2clbk.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/hal_com.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/hal_intf.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/ieee80211.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/ieee80211_ext.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/if_ether.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/ioctl_cfg80211.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/ip.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/linux/wireless.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/mlme_osdep.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/mp_custom_oid.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/nic_spec.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/osdep_ce_service.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/osdep_intf.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/osdep_service.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/pci_hal.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/pci_ops.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/pci_osintf.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/recv_osdep.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtl8192c_cmd.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtl8192c_dm.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtl8192c_event.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtl8192c_hal.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtl8192c_led.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtl8192c_recv.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtl8192c_rf.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtl8192c_spec.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtl8192c_sreset.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtl8192c_xmit.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtl8192d_cmd.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtl8192d_dm.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtl8192d_hal.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtl8192d_led.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtl8192d_recv.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtl8192d_rf.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtl8192d_spec.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtl8192d_xmit.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtw_android.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtw_ap.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtw_br_ext.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtw_byteorder.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtw_cmd.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtw_debug.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtw_eeprom.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtw_efuse.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtw_event.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtw_ht.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtw_io.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtw_ioctl.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtw_ioctl_query.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtw_ioctl_rtl.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtw_ioctl_set.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtw_iol.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtw_led.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtw_mlme.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtw_mlme_ext.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtw_mp.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtw_mp_ioctl.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtw_mp_phy_regdef.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtw_p2p.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtw_pwrctrl.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtw_qos.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtw_recv.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtw_rf.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtw_security.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtw_sreset.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtw_tdls.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtw_version.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/rtw_xmit.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/sta_info.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/usb_hal.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/usb_ops.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/usb_ops_linux.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/usb_osintf.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/usb_vendor_req.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/wifi.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/wlan_bssdef.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/include/xmit_osdep.h [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/os_dep/linux/ioctl_cfg80211.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/os_dep/linux/ioctl_linux.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/os_dep/linux/mlme_linux.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/os_dep/linux/os_intfs.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/os_dep/linux/pci_intf.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/os_dep/linux/pci_ops_linux.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/os_dep/linux/recv_linux.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/os_dep/linux/rtw_android.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/os_dep/linux/usb_intf.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/os_dep/linux/usb_ops_linux.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/os_dep/linux/xmit_linux.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/os_dep/osdep_service.c [new file with mode: 0644]
drivers/net/wireless/realtek/rtl8192cu/runwpa [new file with mode: 0755]
drivers/net/wireless/realtek/rtl8192cu/wlan0dhcp [new file with mode: 0755]

index 8a8ba200396400f9b5ac4906be76845a7d7a31d0..7df19ad9485671aee5f16ff660ac300637028c2d 100644 (file)
@@ -13,6 +13,7 @@ if WLAN_VENDOR_REALTEK
 
 source "drivers/net/wireless/realtek/rtl818x/Kconfig"
 source "drivers/net/wireless/realtek/rtlwifi/Kconfig"
+source "drivers/net/wireless/realtek/rtl8192cu/Kconfig"
 source "drivers/net/wireless/realtek/rtl8xxxu/Kconfig"
 
 endif # WLAN_VENDOR_REALTEK
index 9c78deb5eea94f71320563b37a8b73f9e6a815f2..e5407ed508336cae404091a0b72e44470a9cc782 100644 (file)
@@ -5,5 +5,6 @@
 obj-$(CONFIG_RTL8180)          += rtl818x/
 obj-$(CONFIG_RTL8187)          += rtl818x/
 obj-$(CONFIG_RTLWIFI)          += rtlwifi/
+obj-$(CONFIG_RTL8192CU)                += rtl8192cu/
 obj-$(CONFIG_RTL8XXXU)         += rtl8xxxu/
 
diff --git a/drivers/net/wireless/realtek/rtl8192cu/Kconfig b/drivers/net/wireless/realtek/rtl8192cu/Kconfig
new file mode 100644 (file)
index 0000000..cd7830b
--- /dev/null
@@ -0,0 +1,9 @@
+config RTL8192CU
+       tristate "Realtek 8192C USB WiFi"
+       depends on MAC80211 && USB
+       select CFG80211_WEXT
+       select WIRELESS_EXT
+       select WEXT_PRIV
+       ---help---
+         This option adds the Realtek RTL8192CU USB device such as Edimax EW-7811Un.
+
diff --git a/drivers/net/wireless/realtek/rtl8192cu/Makefile b/drivers/net/wireless/realtek/rtl8192cu/Makefile
new file mode 100644 (file)
index 0000000..bc137ab
--- /dev/null
@@ -0,0 +1,615 @@
+EXTRA_CFLAGS += $(USER_EXTRA_CFLAGS)
+EXTRA_CFLAGS += -O1
+#EXTRA_CFLAGS += -O3
+#EXTRA_CFLAGS += -Wall
+#EXTRA_CFLAGS += -Wextra
+#EXTRA_CFLAGS += -Werror
+#EXTRA_CFLAGS += -pedantic
+#EXTRA_CFLAGS += -Wshadow -Wpointer-arith -Wcast-qual -Wstrict-prototypes -Wmissing-prototypes
+
+EXTRA_CFLAGS += -Wno-unused-variable
+EXTRA_CFLAGS += -Wno-unused-value
+EXTRA_CFLAGS += -Wno-unused-label
+EXTRA_CFLAGS += -Wno-unused-parameter
+EXTRA_CFLAGS += -Wno-unused-function
+EXTRA_CFLAGS += -Wno-unused
+
+EXTRA_CFLAGS += -Wno-uninitialized
+
+EXTRA_CFLAGS += -I$(src)/include
+
+CONFIG_AUTOCFG_CP = n
+
+CONFIG_RTL8192C = y
+CONFIG_RTL8192D = n
+CONFIG_RTL8723A = n
+
+CONFIG_USB_HCI = y
+CONFIG_PCI_HCI = n
+CONFIG_SDIO_HCI = n
+
+CONFIG_MP_INCLUDED = n
+CONFIG_POWER_SAVING = y
+CONFIG_USB_AUTOSUSPEND = n
+CONFIG_HW_PWRP_DETECTION = n
+CONFIG_WIFI_TEST = n
+CONFIG_BT_COEXISTENCE = n
+CONFIG_RTL8192CU_REDEFINE_1X1 = n
+CONFIG_INTEL_WIDI = n
+CONFIG_WAKE_ON_WLAN = n
+
+CONFIG_PLATFORM_I386_PC = y
+CONFIG_PLATFORM_TI_AM3517 = n
+CONFIG_PLATFORM_ANDROID_X86 = n
+CONFIG_PLATFORM_JB_X86 = n
+CONFIG_PLATFORM_ARM_S3C2K4 = n
+CONFIG_PLATFORM_ARM_PXA2XX = n
+CONFIG_PLATFORM_ARM_S3C6K4 = n
+CONFIG_PLATFORM_MIPS_RMI = n
+CONFIG_PLATFORM_RTD2880B = n
+CONFIG_PLATFORM_MIPS_AR9132 = n
+CONFIG_PLATFORM_RTK_DMP = n
+CONFIG_PLATFORM_MIPS_PLM = n
+CONFIG_PLATFORM_MSTAR389 = n
+CONFIG_PLATFORM_MT53XX = n
+CONFIG_PLATFORM_ARM_MX51_241H = n
+CONFIG_PLATFORM_FS_MX61 = n
+CONFIG_PLATFORM_ACTIONS_ATJ227X = n
+CONFIG_PLATFORM_TEGRA3_CARDHU = n
+CONFIG_PLATFORM_TEGRA4_DALMORE = n
+CONFIG_PLATFORM_ARM_TCC8900 = n
+CONFIG_PLATFORM_ARM_TCC8920 = n
+CONFIG_PLATFORM_ARM_TCC8920_JB42 = n
+CONFIG_PLATFORM_ARM_RK2818 = n
+CONFIG_PLATFORM_ARM_TI_PANDA = n
+CONFIG_PLATFORM_MIPS_JZ4760 = n
+CONFIG_PLATFORM_DMP_PHILIPS = n
+CONFIG_PLATFORM_TI_DM365 = n
+CONFIG_PLATFORM_MN10300 = n
+CONFIG_PLATFORM_MSTAR_TITANIA12 = n
+CONFIG_PLATFORM_MSTAR_A3 = n
+CONFIG_PLATFORM_ARM_SUNxI = n
+CONFIG_PLATFORM_ARM_SUN6I = n
+
+CONFIG_DRVEXT_MODULE = n
+
+export TopDIR ?= $(shell pwd)
+
+
+ifeq ($(CONFIG_RTL8192C), y)
+
+RTL871X = rtl8192c
+
+ifeq ($(CONFIG_USB_HCI), y)
+MODULE_NAME = 8192cu
+FW_FILES := hal/$(RTL871X)/usb/Hal8192CUHWImg.o
+ifneq ($(CONFIG_WAKE_ON_WLAN), n)
+FW_FILES += hal/$(RTL871X)/usb/Hal8192CUHWImg_wowlan.o
+endif
+endif
+ifeq ($(CONFIG_PCI_HCI), y)
+MODULE_NAME = 8192ce
+FW_FILES := hal/$(RTL871X)/pci/Hal8192CEHWImg.o
+endif
+
+CHIP_FILES := \
+       hal/$(RTL871X)/$(RTL871X)_sreset.o \
+       hal/$(RTL871X)/$(RTL871X)_xmit.o
+CHIP_FILES += $(FW_FILES)
+endif
+
+ifeq ($(CONFIG_RTL8192D), y)
+
+RTL871X = rtl8192d
+
+ifeq ($(CONFIG_USB_HCI), y)
+MODULE_NAME = 8192du
+FW_FILES := hal/$(RTL871X)/usb/Hal8192DUHWImg.o
+ifneq ($(CONFIG_WAKE_ON_WLAN), n)
+FW_FILES += hal/$(RTL871X)/usb/Hal8192DUHWImg_wowlan.o
+endif
+endif
+ifeq ($(CONFIG_PCI_HCI), y)
+MODULE_NAME = 8192de
+FW_FILES := hal/$(RTL871X)/pci/Hal8192DEHWImg.o
+endif
+
+CHIP_FILES := \
+       hal/$(RTL871X)/$(RTL871X)_xmit.o
+CHIP_FILES += $(FW_FILES)
+endif
+
+ifeq ($(CONFIG_RTL8723A), y)
+
+RTL871X = rtl8723a
+
+ifeq ($(CONFIG_SDIO_HCI), y)
+MODULE_NAME = 8723as
+FW_FILES := hal/$(RTL871X)/sdio/Hal8723SHWImg.o
+endif
+
+ifeq ($(CONFIG_USB_HCI), y)
+MODULE_NAME = 8723au
+FW_FILES := hal/$(RTL871X)/usb/Hal8723UHWImg.o
+endif
+
+ifeq ($(CONFIG_PCI_HCI), y)
+MODULE_NAME = 8723ae
+FW_FILES := hal/$(RTL871X)/pci/Hal8723EHWImg.o
+endif
+
+PWRSEQ_FILES := hal/HalPwrSeqCmd.o \
+                               hal/$(RTL871X)/Hal8723PwrSeq.o
+
+CHIP_FILES += $(FW_FILES) $(PWRSEQ_FILES)
+
+endif
+
+ifeq ($(CONFIG_SDIO_HCI), y)
+HCI_NAME = sdio
+endif
+
+ifeq ($(CONFIG_USB_HCI), y)
+HCI_NAME = usb
+endif
+
+ifeq ($(CONFIG_PCI_HCI), y)
+HCI_NAME = pci
+endif
+
+
+_OS_INTFS_FILES :=     os_dep/osdep_service.o \
+                       os_dep/linux/os_intfs.o \
+                       os_dep/linux/$(HCI_NAME)_intf.o \
+                       os_dep/linux/$(HCI_NAME)_ops_linux.o \
+                       os_dep/linux/ioctl_linux.o \
+                       os_dep/linux/xmit_linux.o \
+                       os_dep/linux/mlme_linux.o \
+                       os_dep/linux/recv_linux.o \
+                       os_dep/linux/ioctl_cfg80211.o \
+                       os_dep/linux/rtw_android.o
+
+
+_HAL_INTFS_FILES :=    hal/hal_intf.o \
+                       hal/hal_com.o \
+                       hal/dm.o \
+                       hal/$(RTL871X)/$(RTL871X)_hal_init.o \
+                       hal/$(RTL871X)/$(RTL871X)_phycfg.o \
+                       hal/$(RTL871X)/$(RTL871X)_rf6052.o \
+                       hal/$(RTL871X)/$(RTL871X)_dm.o \
+                       hal/$(RTL871X)/$(RTL871X)_rxdesc.o \
+                       hal/$(RTL871X)/$(RTL871X)_cmd.o \
+                       hal/$(RTL871X)/$(HCI_NAME)/$(HCI_NAME)_halinit.o \
+                       hal/$(RTL871X)/$(HCI_NAME)/rtl$(MODULE_NAME)_led.o \
+                       hal/$(RTL871X)/$(HCI_NAME)/rtl$(MODULE_NAME)_xmit.o \
+                       hal/$(RTL871X)/$(HCI_NAME)/rtl$(MODULE_NAME)_recv.o
+
+ifeq ($(CONFIG_SDIO_HCI), y)
+_HAL_INTFS_FILES += hal/$(RTL871X)/$(HCI_NAME)/$(HCI_NAME)_ops.o
+else
+_HAL_INTFS_FILES += hal/$(RTL871X)/$(HCI_NAME)/$(HCI_NAME)_ops_linux.o
+endif
+
+ifeq ($(CONFIG_MP_INCLUDED), y)
+_HAL_INTFS_FILES += hal/$(RTL871X)/$(RTL871X)_mp.o
+endif
+
+_HAL_INTFS_FILES += $(CHIP_FILES)
+
+
+ifeq ($(CONFIG_AUTOCFG_CP), y)
+$(shell cp $(TopDIR)/autoconf_$(RTL871X)_$(HCI_NAME)_linux.h $(TopDIR)/include/autoconf.h)
+endif
+
+
+ifeq ($(CONFIG_USB_HCI), y)
+ifeq ($(CONFIG_USB_AUTOSUSPEND), y)
+EXTRA_CFLAGS += -DCONFIG_USB_AUTOSUSPEND
+endif
+endif
+
+ifeq ($(CONFIG_POWER_SAVING), y)
+EXTRA_CFLAGS += -DCONFIG_POWER_SAVING
+endif
+
+ifeq ($(CONFIG_HW_PWRP_DETECTION), y)
+EXTRA_CFLAGS += -DCONFIG_HW_PWRP_DETECTION
+endif
+
+ifeq ($(CONFIG_WIFI_TEST), y)
+EXTRA_CFLAGS += -DCONFIG_WIFI_TEST
+endif
+
+ifeq ($(CONFIG_BT_COEXISTENCE), y)
+EXTRA_CFLAGS += -DCONFIG_BT_COEXISTENCE
+endif
+
+ifeq ($(CONFIG_RTL8192CU_REDEFINE_1X1), y)
+EXTRA_CFLAGS += -DRTL8192C_RECONFIG_TO_1T1R
+endif
+
+ifeq ($(CONFIG_WAKE_ON_WLAN), y)
+EXTRA_CFLAGS += -DCONFIG_WAKE_ON_WLAN
+endif
+
+ifeq ($(CONFIG_INTEL_WIDI), y)
+EXTRA_CFLAGS += -DCONFIG_INTEL_WIDI
+endif
+
+ifeq ($(CONFIG_PLATFORM_I386_PC), y)
+EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN
+SUBARCH := $(shell uname -m | sed -e s/i.86/i386/)
+ARCH ?= $(SUBARCH)
+CROSS_COMPILE ?=
+KVER  := $(shell uname -r)
+KSRC := /lib/modules/$(KVER)/build
+MODDESTDIR := /lib/modules/$(KVER)/kernel/drivers/net/wireless/
+INSTALL_PREFIX :=
+endif
+
+ifeq ($(CONFIG_PLATFORM_TI_AM3517), y)
+EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN -DCONFIG_PLATFORM_ANDROID -DCONFIG_PLATFORM_SHUTTLE
+CROSS_COMPILE := arm-eabi-
+KSRC := $(shell pwd)/../../../Android/kernel
+ARCH := arm
+endif
+
+ifeq ($(CONFIG_PLATFORM_MSTAR_TITANIA12), y)
+EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN -DCONFIG_PLATFORM_MSTAR -DCONFIG_PLATFORM_MSTAR_TITANIA12
+ARCH:=mips
+CROSS_COMPILE:= /usr/src/Mstar_kernel/mips-4.3/bin/mips-linux-gnu-
+KVER:= 2.6.28.9
+KSRC:= /usr/src/Mstar_kernel/2.6.28.9/
+endif
+
+ifeq ($(CONFIG_PLATFORM_MSTAR_A3), y)
+EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN -DCONFIG_PLATFORM_MSTAR -DCONFIG_PLATFORM_MSTAR_A3
+ARCH:=arm
+CROSS_COMPILE:= arm-none-linux-gnueabi-
+KVER:= 2.6.35.11
+KSRC:= /home/gary/PERFORCE/THEALE/RedLion/2.6.35.11/
+MODULE_NAME = wlan
+endif
+
+ifeq ($(CONFIG_PLATFORM_ANDROID_X86), y)
+EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN
+SUBARCH := $(shell uname -m | sed -e s/i.86/i386/)
+ARCH := $(SUBARCH)
+CROSS_COMPILE := /media/DATA-2/android-x86/ics-x86_20120130/prebuilt/linux-x86/toolchain/i686-unknown-linux-gnu-4.2.1/bin/i686-unknown-linux-gnu-
+KSRC := /media/DATA-2/android-x86/ics-x86_20120130/out/target/product/generic_x86/obj/kernel
+MODULE_NAME :=wlan
+endif
+
+ifeq ($(CONFIG_PLATFORM_JB_X86), y)
+EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN
+EXTRA_CFLAGS += -DCONFIG_CONCURRENT_MODE
+EXTRA_CFLAGS += -DCONFIG_IOCTL_CFG80211 -DRTW_USE_CFG80211_STA_EVENT
+EXTRA_CFLAGS += -DCONFIG_P2P_IPS
+SUBARCH := $(shell uname -m | sed -e s/i.86/i386/)
+ARCH := $(SUBARCH)
+CROSS_COMPILE := /home/android_sdk/android-x86_JB/prebuilts/gcc/linux-x86/x86/i686-linux-android-4.7/bin/i686-linux-android-
+KSRC := /home/android_sdk/android-x86_JB/out/target/product/x86/obj/kernel/
+MODULE_NAME :=wlan
+endif
+
+ifeq ($(CONFIG_PLATFORM_ARM_PXA2XX), y)
+EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN
+ARCH := arm
+CROSS_COMPILE := arm-none-linux-gnueabi-
+KVER  := 2.6.34.1
+KSRC ?= /usr/src/linux-2.6.34.1
+endif
+
+ifeq ($(CONFIG_PLATFORM_ARM_S3C2K4), y)
+EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN
+ARCH := arm
+CROSS_COMPILE := arm-linux-
+KVER  := 2.6.24.7_$(ARCH)
+KSRC := /usr/src/kernels/linux-$(KVER)
+endif
+
+ifeq ($(CONFIG_PLATFORM_ARM_S3C6K4), y)
+EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN
+ARCH := arm
+CROSS_COMPILE := arm-none-linux-gnueabi-
+KVER  := 2.6.34.1
+KSRC ?= /usr/src/linux-2.6.34.1
+endif
+
+ifeq ($(CONFIG_PLATFORM_RTD2880B), y)
+EXTRA_CFLAGS += -DCONFIG_BIG_ENDIAN -DCONFIG_PLATFORM_RTD2880B
+ARCH:=
+CROSS_COMPILE:=
+KVER:=
+KSRC:=
+endif
+
+ifeq ($(CONFIG_PLATFORM_MIPS_RMI), y)
+EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN
+ARCH:=mips
+CROSS_COMPILE:=mipsisa32r2-uclibc-
+KVER:=
+KSRC:= /root/work/kernel_realtek
+endif
+
+ifeq ($(CONFIG_PLATFORM_MIPS_PLM), y)
+EXTRA_CFLAGS += -DCONFIG_BIG_ENDIAN
+ARCH:=mips
+CROSS_COMPILE:=mipsisa32r2-uclibc-
+KVER:=
+KSRC:= /root/work/kernel_realtek
+endif
+
+ifeq ($(CONFIG_PLATFORM_MSTAR389), y)
+EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN -DCONFIG_PLATFORM_MSTAR389
+ARCH:=mips
+CROSS_COMPILE:= mips-linux-gnu-
+KVER:= 2.6.28.10
+KSRC:= /home/mstar/mstar_linux/2.6.28.9/
+endif
+
+ifeq ($(CONFIG_PLATFORM_MIPS_AR9132), y)
+EXTRA_CFLAGS += -DCONFIG_BIG_ENDIAN
+ARCH := mips
+CROSS_COMPILE := mips-openwrt-linux-
+KSRC := /home/alex/test_openwrt/tmp/linux-2.6.30.9
+endif
+
+ifeq ($(CONFIG_PLATFORM_DMP_PHILIPS), y)
+EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN -DRTK_DMP_PLATFORM
+ARCH := mips
+#CROSS_COMPILE:=/usr/local/msdk-4.3.6-mips-EL-2.6.12.6-0.9.30.3/bin/mipsel-linux-
+CROSS_COMPILE:=/usr/local/toolchain_mipsel/bin/mipsel-linux-
+KSRC ?=/usr/local/Jupiter/linux-2.6.12
+endif
+
+ifeq ($(CONFIG_PLATFORM_RTK_DMP), y)
+EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN -DRTK_DMP_PLATFORM
+ARCH:=mips
+CROSS_COMPILE:=mipsel-linux-
+KVER:=
+KSRC ?= /usr/src/DMP_Kernel/jupiter/linux-2.6.12
+endif
+
+ifeq ($(CONFIG_PLATFORM_MT53XX), y)
+EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN -DCONFIG_PLATFORM_MT53XX
+ARCH:= arm
+CROSS_COMPILE:= arm11_mtk_le-
+KVER:= 2.6.27
+KSRC?= /proj/mtk00802/BD_Compare/BDP/Dev/BDP_V301/BDP_Linux/linux-2.6.27
+endif
+
+ifeq ($(CONFIG_PLATFORM_ARM_MX51_241H), y)
+EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN -DCONFIG_WISTRON_PLATFORM
+ARCH := arm
+CROSS_COMPILE := /opt/freescale/usr/local/gcc-4.1.2-glibc-2.5-nptl-3/arm-none-linux-gnueabi/bin/arm-none-linux-gnueabi-
+KVER  := 2.6.31
+KSRC ?= /lib/modules/2.6.31-770-g0e46b52/source
+endif
+
+ifeq ($(CONFIG_PLATFORM_FS_MX61), y)
+EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN
+ARCH := arm
+CROSS_COMPILE := /home/share/CusEnv/FreeScale/arm-eabi-4.4.3/bin/arm-eabi-
+KSRC ?= /home/share/CusEnv/FreeScale/FS_kernel_env
+endif
+
+
+
+ifeq ($(CONFIG_PLATFORM_ACTIONS_ATJ227X), y)
+EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN -DCONFIG_PLATFORM_ACTIONS_ATJ227X
+ARCH := mips
+CROSS_COMPILE := /home/cnsd4/project/actions/tools-2.6.27/bin/mipsel-linux-gnu-
+KVER  := 2.6.27
+KSRC := /home/cnsd4/project/actions/linux-2.6.27.28
+endif
+
+ifeq ($(CONFIG_PLATFORM_TI_DM365), y)
+EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN -DCONFIG_PLATFORM_TI_DM365
+ARCH := arm
+CROSS_COMPILE := /home/cnsd4/Appro/mv_pro_5.0/montavista/pro/devkit/arm/v5t_le/bin/arm_v5t_le-
+KVER  := 2.6.18
+KSRC := /home/cnsd4/Appro/mv_pro_5.0/montavista/pro/devkit/lsp/ti-davinci/linux-dm365
+endif
+
+ifeq ($(CONFIG_PLATFORM_TEGRA3_CARDHU), y)
+EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN
+# default setting for Android 4.1, 4.2
+EXTRA_CFLAGS += -DRTW_ENABLE_WIFI_CONTROL_FUNC
+EXTRA_CFLAGS += -DCONFIG_CONCURRENT_MODE
+EXTRA_CFLAGS += -DCONFIG_IOCTL_CFG80211 -DRTW_USE_CFG80211_STA_EVENT
+EXTRA_CFLAGS += -DCONFIG_P2P_IPS
+ARCH := arm
+CROSS_COMPILE := /home/android_sdk/nvidia/tegra-16r3-partner-android-4.1_20120723/prebuilt/linux-x86/toolchain/arm-eabi-4.4.3/bin/arm-eabi-
+KSRC := /home/android_sdk/nvidia/tegra-16r3-partner-android-4.1_20120723/out/target/product/cardhu/obj/KERNEL
+MODULE_NAME := wlan
+endif
+
+ifeq ($(CONFIG_PLATFORM_TEGRA4_DALMORE), y)
+EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN
+# default setting for Android 4.1, 4.2
+EXTRA_CFLAGS += -DRTW_ENABLE_WIFI_CONTROL_FUNC
+EXTRA_CFLAGS += -DCONFIG_CONCURRENT_MODE
+EXTRA_CFLAGS += -DCONFIG_IOCTL_CFG80211 -DRTW_USE_CFG80211_STA_EVENT
+EXTRA_CFLAGS += -DCONFIG_P2P_IPS
+ARCH := arm
+CROSS_COMPILE := /home/android_sdk/nvidia/tegra-17r9-partner-android-4.2-dalmore_20130131/prebuilts/gcc/linux-x86/arm/arm-eabi-4.6/bin/arm-eabi-
+KSRC := /home/android_sdk/nvidia/tegra-17r9-partner-android-4.2-dalmore_20130131/out/target/product/dalmore/obj/KERNEL
+MODULE_NAME := wlan
+endif
+
+ifeq ($(CONFIG_PLATFORM_ARM_TCC8900), y)
+EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN
+ARCH := arm
+CROSS_COMPILE := /home/android_sdk/Telechips/SDK_2304_20110613/prebuilt/linux-x86/toolchain/arm-eabi-4.4.3/bin/arm-eabi-
+KSRC := /home/android_sdk/Telechips/SDK_2304_20110613/kernel
+MODULE_NAME := wlan
+endif
+
+ifeq ($(CONFIG_PLATFORM_ARM_TCC8920), y)
+EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN
+ARCH := arm
+CROSS_COMPILE := /home/android_sdk/Telechips/v12.06_r1-tcc-android-4.0.4/prebuilt/linux-x86/toolchain/arm-eabi-4.4.3/bin/arm-eabi-
+KSRC := /home/android_sdk/Telechips/v12.06_r1-tcc-android-4.0.4/kernel
+MODULE_NAME := wlan
+endif
+
+ifeq ($(CONFIG_PLATFORM_ARM_TCC8920_JB42), y)
+EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN
+# default setting for Android 4.1, 4.2
+EXTRA_CFLAGS += -DCONFIG_CONCURRENT_MODE
+EXTRA_CFLAGS += -DCONFIG_IOCTL_CFG80211 -DRTW_USE_CFG80211_STA_EVENT
+EXTRA_CFLAGS += -DCONFIG_P2P_IPS
+ARCH := arm
+CROSS_COMPILE := /home/android_sdk/Telechips/v13.03_r1-tcc-android-4.2.2_ds_patched/prebuilts/gcc/linux-x86/arm/arm-eabi-4.6/bin/arm-eabi-
+KSRC := /home/android_sdk/Telechips/v13.03_r1-tcc-android-4.2.2_ds_patched/kernel
+MODULE_NAME := wlan
+endif
+
+ifeq ($(CONFIG_PLATFORM_ARM_RK2818), y)
+EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN -DCONFIG_PLATFORM_ANDROID -DCONFIG_PLATFORM_ROCKCHIPS -DCONFIG_MINIMAL_MEMORY_USAGE
+ARCH := arm
+CROSS_COMPILE := /usr/src/release_fae_version/toolchain/arm-eabi-4.4.0/bin/arm-eabi-
+KSRC := /usr/src/release_fae_version/kernel25_A7_281x
+MODULE_NAME := wlan
+endif
+
+ifeq ($(CONFIG_PLATFORM_ARM_TI_PANDA), y)
+EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN #-DCONFIG_MINIMAL_MEMORY_USAGE
+ARCH := arm
+#CROSS_COMPILE := /media/DATA-1/aosp/ics-aosp_20111227/prebuilt/linux-x86/toolchain/arm-eabi-4.4.3/bin/arm-eabi-
+#KSRC := /media/DATA-1/aosp/android-omap-panda-3.0_20120104
+CROSS_COMPILE := /media/DATA-1/android-4.0/prebuilt/linux-x86/toolchain/arm-eabi-4.4.3/bin/arm-eabi-
+KSRC := /media/DATA-1/android-4.0/panda_kernel/omap
+MODULE_NAME := wlan
+endif
+
+ifeq ($(CONFIG_PLATFORM_MIPS_JZ4760), y)
+EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN -DCONFIG_MINIMAL_MEMORY_USAGE
+ARCH ?= mips
+CROSS_COMPILE ?= /mnt/sdb5/Ingenic/Umido/mips-4.3/bin/mips-linux-gnu-
+KSRC ?= /mnt/sdb5/Ingenic/Umido/kernel
+endif
+
+#Add setting for MN10300
+ifeq ($(CONFIG_PLATFORM_MN10300), y)
+EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN -DCONFIG_PLATFORM_MN10300
+ARCH := mn10300
+CROSS_COMPILE := mn10300-linux-
+KVER := 2.6.32.2
+KSRC := /home/winuser/work/Plat_sLD2T_V3010/usr/src/linux-2.6.32.2
+INSTALL_PREFIX :=
+endif
+
+ifeq ($(CONFIG_PLATFORM_ARM_SUNxI), y)
+EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN -DCONFIG_PLATFORM_ARM_SUNxI
+ARCH := arm
+CROSS_COMPILE := arm-none-linux-gnueabi-
+KVER  := 3.0.8
+#KSRC:= ../lichee/linux-3.0/
+endif
+
+ifeq ($(CONFIG_PLATFORM_ARM_SUN6I), y)
+EXTRA_CFLAGS += -DCONFIG_LITTLE_ENDIAN
+EXTRA_CFLAGS += -DCONFIG_PLATFORM_ARM_SUN6I
+EXTRA_CFLAGS += -DCONFIG_USE_USB_BUFFER_ALLOC_TX
+EXTRA_CFLAGS += -DCONFIG_TRAFFIC_PROTECT
+# default setting for Android 4.1, 4.2
+EXTRA_CFLAGS += -DCONFIG_CONCURRENT_MODE
+EXTRA_CFLAGS += -DCONFIG_IOCTL_CFG80211 -DRTW_USE_CFG80211_STA_EVENT
+EXTRA_CFLAGS += -DCONFIG_P2P_IPS
+ARCH := arm
+CROSS_COMPILE := arm-none-linux-gnueabi-
+KVER  := 3.3.0
+#KSRC:= ../lichee/linux-3.3/
+endif
+
+ifneq ($(USER_MODULE_NAME),)
+MODULE_NAME := $(USER_MODULE_NAME)
+endif
+
+ifeq ($(CONFIG_MP_INCLUDED), y)
+MODULE_NAME := $(MODULE_NAME)_mp
+EXTRA_CFLAGS += -DCONFIG_MP_INCLUDED
+endif
+
+
+ifneq ($(KERNELRELEASE),)
+
+
+rtk_core :=    core/rtw_cmd.o \
+               core/rtw_security.o \
+               core/rtw_debug.o \
+               core/rtw_io.o \
+               core/rtw_ioctl_query.o \
+               core/rtw_ioctl_set.o \
+               core/rtw_ieee80211.o \
+               core/rtw_mlme.o \
+               core/rtw_mlme_ext.o \
+               core/rtw_wlan_util.o \
+               core/rtw_pwrctrl.o \
+               core/rtw_rf.o \
+               core/rtw_recv.o \
+               core/rtw_sta_mgt.o \
+               core/rtw_ap.o \
+               core/rtw_xmit.o \
+               core/rtw_p2p.o \
+               core/rtw_tdls.o \
+               core/rtw_br_ext.o \
+               core/rtw_iol.o \
+               core/rtw_sreset.o
+
+$(MODULE_NAME)-y += $(rtk_core)
+
+$(MODULE_NAME)-$(CONFIG_INTEL_WIDI) += core/rtw_intel_widi.o
+
+$(MODULE_NAME)-y += core/efuse/rtw_efuse.o
+
+$(MODULE_NAME)-y += $(_HAL_INTFS_FILES)
+
+$(MODULE_NAME)-y += $(_OS_INTFS_FILES)
+
+$(MODULE_NAME)-$(CONFIG_MP_INCLUDED) += core/rtw_mp.o \
+                                       core/rtw_mp_ioctl.o
+
+obj-$(CONFIG_RTL8192CU) := $(MODULE_NAME).o
+
+else
+
+export CONFIG_RTL8192CU = m
+
+all: modules
+
+modules:
+       $(MAKE) ARCH=$(ARCH) CROSS_COMPILE=$(CROSS_COMPILE) -C $(KSRC) M=$(shell pwd)  modules
+
+strip:
+       $(CROSS_COMPILE)strip $(MODULE_NAME).ko --strip-unneeded
+
+install:
+       install -p -m 644 $(MODULE_NAME).ko  $(MODDESTDIR)
+       /sbin/depmod -a ${KVER}
+
+uninstall:
+       rm -f $(MODDESTDIR)/$(MODULE_NAME).ko
+       /sbin/depmod -a ${KVER}
+
+
+config_r:
+       @echo "make config"
+       /bin/bash script/Configure script/config.in
+
+.PHONY: modules clean
+
+clean:
+       rm -fr *.mod.c *.mod *.o .*.cmd *.ko *~
+       rm .tmp_versions -fr ; rm Module.symvers -fr
+       rm -fr Module.markers ; rm -fr modules.order
+       cd core/efuse ; rm -fr *.mod.c *.mod *.o .*.cmd *.ko
+       cd core ; rm -fr *.mod.c *.mod *.o .*.cmd *.ko
+       cd hal/$(RTL871X)/$(HCI_NAME) ; rm -fr *.mod.c *.mod *.o .*.cmd *.ko
+       cd hal/$(RTL871X) ; rm -fr *.mod.c *.mod *.o .*.cmd *.ko
+       cd hal ; rm -fr *.mod.c *.mod *.o .*.cmd *.ko
+       cd os_dep/linux ; rm -fr *.mod.c *.mod *.o .*.cmd *.ko
+       cd os_dep ; rm -fr *.mod.c *.mod *.o .*.cmd *.ko
+endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/clean b/drivers/net/wireless/realtek/rtl8192cu/clean
new file mode 100755 (executable)
index 0000000..8766421
--- /dev/null
@@ -0,0 +1,5 @@
+#!/bin/bash
+rmmod 8192cu
+rmmod 8192ce
+rmmod 8192du
+rmmod 8192de
diff --git a/drivers/net/wireless/realtek/rtl8192cu/core/efuse/rtw_efuse.c b/drivers/net/wireless/realtek/rtl8192cu/core/efuse/rtw_efuse.c
new file mode 100644 (file)
index 0000000..c7f2b67
--- /dev/null
@@ -0,0 +1,1145 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#define _RTW_EFUSE_C_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+
+#include <rtw_efuse.h>
+
+
+
+/*------------------------Define local variable------------------------------*/
+u8     fakeEfuseBank=0;
+u32    fakeEfuseUsedBytes=0;
+u8     fakeEfuseContent[EFUSE_MAX_HW_SIZE]={0};
+u8     fakeEfuseInitMap[EFUSE_MAX_MAP_LEN]={0};
+u8     fakeEfuseModifiedMap[EFUSE_MAX_MAP_LEN]={0};
+
+u32    BTEfuseUsedBytes=0;
+u8     BTEfuseContent[EFUSE_MAX_BT_BANK][EFUSE_MAX_HW_SIZE];
+u8     BTEfuseInitMap[EFUSE_BT_MAX_MAP_LEN]={0};
+u8     BTEfuseModifiedMap[EFUSE_BT_MAX_MAP_LEN]={0};
+
+u32    fakeBTEfuseUsedBytes=0;
+u8     fakeBTEfuseContent[EFUSE_MAX_BT_BANK][EFUSE_MAX_HW_SIZE];
+u8     fakeBTEfuseInitMap[EFUSE_BT_MAX_MAP_LEN]={0};
+u8     fakeBTEfuseModifiedMap[EFUSE_BT_MAX_MAP_LEN]={0};
+/*------------------------Define local variable------------------------------*/
+
+//------------------------------------------------------------------------------
+#define REG_EFUSE_CTRL         0x0030
+#define EFUSE_CTRL                     REG_EFUSE_CTRL          // E-Fuse Control.
+//------------------------------------------------------------------------------
+
+BOOLEAN
+Efuse_Read1ByteFromFakeContent(
+       IN              PADAPTER        pAdapter,
+       IN              u16             Offset,
+       IN OUT  u8              *Value  );
+BOOLEAN
+Efuse_Read1ByteFromFakeContent(
+       IN              PADAPTER        pAdapter,
+       IN              u16             Offset,
+       IN OUT  u8              *Value  )
+{
+       if(Offset >= EFUSE_MAX_HW_SIZE)
+       {
+               return _FALSE;
+       }
+       //DbgPrint("Read fake content, offset = %d\n", Offset);
+       if(fakeEfuseBank == 0)
+               *Value = fakeEfuseContent[Offset];
+       else
+               *Value = fakeBTEfuseContent[fakeEfuseBank-1][Offset];
+       return _TRUE;
+}
+
+BOOLEAN
+Efuse_Write1ByteToFakeContent(
+       IN              PADAPTER        pAdapter,
+       IN              u16             Offset,
+       IN              u8              Value   );
+BOOLEAN
+Efuse_Write1ByteToFakeContent(
+       IN              PADAPTER        pAdapter,
+       IN              u16             Offset,
+       IN              u8              Value   )
+{
+       if(Offset >= EFUSE_MAX_HW_SIZE)
+       {
+               return _FALSE;
+       }
+       if(fakeEfuseBank == 0)
+               fakeEfuseContent[Offset] = Value;
+       else
+       {
+               fakeBTEfuseContent[fakeEfuseBank-1][Offset] = Value;
+       }
+       return _TRUE;
+}
+
+/*-----------------------------------------------------------------------------
+ * Function:   Efuse_PowerSwitch
+ *
+ * Overview:   When we want to enable write operation, we should change to
+ *                             pwr on state. When we stop write, we should switch to 500k mode
+ *                             and disable LDO 2.5V.
+ *
+ * Input:       NONE
+ *
+ * Output:      NONE
+ *
+ * Return:      NONE
+ *
+ * Revised History:
+ * When                        Who             Remark
+ * 11/17/2008  MHC             Create Version 0.
+ *
+ *---------------------------------------------------------------------------*/
+VOID
+Efuse_PowerSwitch(
+       IN      PADAPTER        pAdapter,
+       IN      u8              bWrite,
+       IN      u8              PwrState)
+{
+       pAdapter->HalFunc.EfusePowerSwitch(pAdapter, bWrite, PwrState);
+}
+
+/*-----------------------------------------------------------------------------
+ * Function:   efuse_GetCurrentSize
+ *
+ * Overview:   Get current efuse size!!!
+ *
+ * Input:       NONE
+ *
+ * Output:      NONE
+ *
+ * Return:      NONE
+ *
+ * Revised History:
+ * When                        Who             Remark
+ * 11/16/2008  MHC             Create Version 0.
+ *
+ *---------------------------------------------------------------------------*/
+u16
+Efuse_GetCurrentSize(
+       IN PADAPTER             pAdapter,
+       IN u8                   efuseType,
+       IN BOOLEAN              bPseudoTest)
+{
+       u16 ret=0;
+
+       ret = pAdapter->HalFunc.EfuseGetCurrentSize(pAdapter, efuseType, bPseudoTest);
+
+       return ret;
+}
+
+/*  11/16/2008 MH Add description. Get current efuse area enabled word!!. */
+u8
+Efuse_CalculateWordCnts(IN u8  word_en)
+{
+       u8 word_cnts = 0;
+       if(!(word_en & BIT(0))) word_cnts++; // 0 : write enable
+       if(!(word_en & BIT(1))) word_cnts++;
+       if(!(word_en & BIT(2))) word_cnts++;
+       if(!(word_en & BIT(3))) word_cnts++;
+       return word_cnts;
+}
+
+//
+//     Description:
+//             Execute E-Fuse read byte operation.
+//             Refered from SD1 Richard.
+//
+//     Assumption:
+//             1. Boot from E-Fuse and successfully auto-load.
+//             2. PASSIVE_LEVEL (USB interface)
+//
+//     Created by Roger, 2008.10.21.
+//
+VOID
+ReadEFuseByte(
+               PADAPTER        Adapter,
+               u16                     _offset,
+               u8                      *pbuf,
+               IN BOOLEAN      bPseudoTest)
+{
+       u32     value32;
+       u8      readbyte;
+       u16     retry;
+       //u32 start=rtw_get_current_time();
+
+       if(bPseudoTest)
+       {
+               Efuse_Read1ByteFromFakeContent(Adapter, _offset, pbuf);
+               return;
+       }
+
+       //Write Address
+       rtw_write8(Adapter, EFUSE_CTRL+1, (_offset & 0xff));
+       readbyte = rtw_read8(Adapter, EFUSE_CTRL+2);
+       rtw_write8(Adapter, EFUSE_CTRL+2, ((_offset >> 8) & 0x03) | (readbyte & 0xfc));
+
+       //Write bit 32 0
+       readbyte = rtw_read8(Adapter, EFUSE_CTRL+3);
+       rtw_write8(Adapter, EFUSE_CTRL+3, (readbyte & 0x7f));
+
+       //Check bit 32 read-ready
+       retry = 0;
+       value32 = rtw_read32(Adapter, EFUSE_CTRL);
+       //while(!(((value32 >> 24) & 0xff) & 0x80)  && (retry<10))
+       while(!(((value32 >> 24) & 0xff) & 0x80)  && (retry<10000))
+       {
+               value32 = rtw_read32(Adapter, EFUSE_CTRL);
+               retry++;
+       }
+
+       // 20100205 Joseph: Add delay suggested by SD1 Victor.
+       // This fix the problem that Efuse read error in high temperature condition.
+       // Designer says that there shall be some delay after ready bit is set, or the
+       // result will always stay on last data we read.
+       rtw_udelay_os(50);
+       value32 = rtw_read32(Adapter, EFUSE_CTRL);
+
+       *pbuf = (u8)(value32 & 0xff);
+       //DBG_871X("ReadEFuseByte _offset:%08u, in %d ms\n",_offset ,rtw_get_passing_time_ms(start));
+
+}
+
+
+//
+//     Description:
+//             1. Execute E-Fuse read byte operation according as map offset and
+//                 save to E-Fuse table.
+//             2. Refered from SD1 Richard.
+//
+//     Assumption:
+//             1. Boot from E-Fuse and successfully auto-load.
+//             2. PASSIVE_LEVEL (USB interface)
+//
+//     Created by Roger, 2008.10.21.
+//
+//     2008/12/12 MH   1. Reorganize code flow and reserve bytes. and add description.
+//                                     2. Add efuse utilization collect.
+//     2008/12/22 MH   Read Efuse must check if we write section 1 data again!!! Sec1
+//                                     write addr must be after sec5.
+//
+
+VOID
+efuse_ReadEFuse(
+       PADAPTER        Adapter,
+       u8              efuseType,
+       u16             _offset,
+       u16             _size_byte,
+       u8              *pbuf,
+       IN      BOOLEAN bPseudoTest
+       );
+VOID
+efuse_ReadEFuse(
+       PADAPTER        Adapter,
+       u8              efuseType,
+       u16             _offset,
+       u16             _size_byte,
+       u8              *pbuf,
+       IN      BOOLEAN bPseudoTest
+       )
+{
+       Adapter->HalFunc.ReadEFuse(Adapter, efuseType, _offset, _size_byte, pbuf, bPseudoTest);
+}
+
+VOID
+EFUSE_GetEfuseDefinition(
+       IN              PADAPTER        pAdapter,
+       IN              u8              efuseType,
+       IN              u8              type,
+       OUT             void            *pOut,
+       IN              BOOLEAN         bPseudoTest
+       )
+{
+       pAdapter->HalFunc.EFUSEGetEfuseDefinition(pAdapter, efuseType, type, pOut, bPseudoTest);
+}
+
+/*-----------------------------------------------------------------------------
+ * Function:   EFUSE_Read1Byte
+ *
+ * Overview:   Copy from WMAC fot EFUSE read 1 byte.
+ *
+ * Input:       NONE
+ *
+ * Output:      NONE
+ *
+ * Return:      NONE
+ *
+ * Revised History:
+ * When                        Who             Remark
+ * 09/23/2008  MHC             Copy from WMAC.
+ *
+ *---------------------------------------------------------------------------*/
+u8
+EFUSE_Read1Byte(
+       IN      PADAPTER        Adapter,
+       IN      u16             Address)
+{
+       u8      data;
+       u8      Bytetemp = {0x00};
+       u8      temp = {0x00};
+       u32     k=0;
+       u16     contentLen=0;
+
+       EFUSE_GetEfuseDefinition(Adapter, EFUSE_WIFI , TYPE_EFUSE_REAL_CONTENT_LEN, (PVOID)&contentLen, _FALSE);
+
+       if (Address < contentLen)       //E-fuse 512Byte
+       {
+               //Write E-fuse Register address bit0~7
+               temp = Address & 0xFF;
+               rtw_write8(Adapter, EFUSE_CTRL+1, temp);
+               Bytetemp = rtw_read8(Adapter, EFUSE_CTRL+2);
+               //Write E-fuse Register address bit8~9
+               temp = ((Address >> 8) & 0x03) | (Bytetemp & 0xFC);
+               rtw_write8(Adapter, EFUSE_CTRL+2, temp);
+
+               //Write 0x30[31]=0
+               Bytetemp = rtw_read8(Adapter, EFUSE_CTRL+3);
+               temp = Bytetemp & 0x7F;
+               rtw_write8(Adapter, EFUSE_CTRL+3, temp);
+
+               //Wait Write-ready (0x30[31]=1)
+               Bytetemp = rtw_read8(Adapter, EFUSE_CTRL+3);
+               while(!(Bytetemp & 0x80))
+               {
+                       Bytetemp = rtw_read8(Adapter, EFUSE_CTRL+3);
+                       k++;
+                       if(k==1000)
+                       {
+                               k=0;
+                               break;
+                       }
+               }
+               data=rtw_read8(Adapter, EFUSE_CTRL);
+               return data;
+       }
+       else
+               return 0xFF;
+
+}/* EFUSE_Read1Byte */
+
+/*-----------------------------------------------------------------------------
+ * Function:   EFUSE_Write1Byte
+ *
+ * Overview:   Copy from WMAC fot EFUSE write 1 byte.
+ *
+ * Input:       NONE
+ *
+ * Output:      NONE
+ *
+ * Return:      NONE
+ *
+ * Revised History:
+ * When                        Who             Remark
+ * 09/23/2008  MHC             Copy from WMAC.
+ *
+ *---------------------------------------------------------------------------*/
+
+void
+EFUSE_Write1Byte(
+       IN      PADAPTER        Adapter,
+       IN      u16             Address,
+       IN      u8              Value);
+void
+EFUSE_Write1Byte(
+       IN      PADAPTER        Adapter,
+       IN      u16             Address,
+       IN      u8              Value)
+{
+       u8      Bytetemp = {0x00};
+       u8      temp = {0x00};
+       u32     k=0;
+       u16     contentLen=0;
+
+       //RT_TRACE(COMP_EFUSE, DBG_LOUD, ("Addr=%x Data =%x\n", Address, Value));
+       EFUSE_GetEfuseDefinition(Adapter, EFUSE_WIFI , TYPE_EFUSE_REAL_CONTENT_LEN, (PVOID)&contentLen, _FALSE);
+
+       if( Address < contentLen)       //E-fuse 512Byte
+       {
+               rtw_write8(Adapter, EFUSE_CTRL, Value);
+
+               //Write E-fuse Register address bit0~7
+               temp = Address & 0xFF;
+               rtw_write8(Adapter, EFUSE_CTRL+1, temp);
+               Bytetemp = rtw_read8(Adapter, EFUSE_CTRL+2);
+
+               //Write E-fuse Register address bit8~9
+               temp = ((Address >> 8) & 0x03) | (Bytetemp & 0xFC);
+               rtw_write8(Adapter, EFUSE_CTRL+2, temp);
+
+               //Write 0x30[31]=1
+               Bytetemp = rtw_read8(Adapter, EFUSE_CTRL+3);
+               temp = Bytetemp | 0x80;
+               rtw_write8(Adapter, EFUSE_CTRL+3, temp);
+
+               //Wait Write-ready (0x30[31]=0)
+               Bytetemp = rtw_read8(Adapter, EFUSE_CTRL+3);
+               while(Bytetemp & 0x80)
+               {
+                       Bytetemp = rtw_read8(Adapter, EFUSE_CTRL+3);
+                       k++;
+                       if(k==100)
+                       {
+                               k=0;
+                               break;
+                       }
+               }
+       }
+}/* EFUSE_Write1Byte */
+
+/*  11/16/2008 MH Read one byte from real Efuse. */
+u8
+efuse_OneByteRead(
+       IN      PADAPTER        pAdapter,
+       IN      u16                     addr,
+       IN      u8                      *data,
+       IN      BOOLEAN         bPseudoTest)
+{
+       u8      tmpidx = 0;
+       u8      bResult;
+
+       if(bPseudoTest)
+       {
+               bResult = Efuse_Read1ByteFromFakeContent(pAdapter, addr, data);
+               return bResult;
+       }
+       // -----------------e-fuse reg ctrl ---------------------------------
+       //address
+       rtw_write8(pAdapter, EFUSE_CTRL+1, (u8)(addr&0xff));
+       rtw_write8(pAdapter, EFUSE_CTRL+2, ((u8)((addr>>8) &0x03) ) |
+       (rtw_read8(pAdapter, EFUSE_CTRL+2)&0xFC ));
+
+       rtw_write8(pAdapter, EFUSE_CTRL+3,  0x72);//read cmd
+
+       while(!(0x80 &rtw_read8(pAdapter, EFUSE_CTRL+3))&&(tmpidx<100))
+       {
+               tmpidx++;
+       }
+       if(tmpidx<100)
+       {
+               *data=rtw_read8(pAdapter, EFUSE_CTRL);
+               bResult = _TRUE;
+       }
+       else
+       {
+               *data = 0xff;
+               bResult = _FALSE;
+       }
+       return bResult;
+}
+
+/*  11/16/2008 MH Write one byte to reald Efuse. */
+u8
+efuse_OneByteWrite(
+       IN      PADAPTER        pAdapter,
+       IN      u16                     addr,
+       IN      u8                      data,
+       IN      BOOLEAN         bPseudoTest)
+{
+       u8      tmpidx = 0;
+       u8      bResult;
+
+       if(bPseudoTest)
+       {
+               bResult = Efuse_Write1ByteToFakeContent(pAdapter, addr, data);
+               return bResult;
+       }
+       //RT_TRACE(COMP_EFUSE, DBG_LOUD, ("Addr = %x Data=%x\n", addr, data));
+
+       //return        0;
+
+       // -----------------e-fuse reg ctrl ---------------------------------
+       //address
+       rtw_write8(pAdapter, EFUSE_CTRL+1, (u8)(addr&0xff));
+       rtw_write8(pAdapter, EFUSE_CTRL+2,
+       (rtw_read8(pAdapter, EFUSE_CTRL+2)&0xFC )|(u8)((addr>>8)&0x03) );
+       rtw_write8(pAdapter, EFUSE_CTRL, data);//data
+
+       rtw_write8(pAdapter, EFUSE_CTRL+3, 0xF2);//write cmd
+
+       while((0x80 &  rtw_read8(pAdapter, EFUSE_CTRL+3)) && (tmpidx<100) ){
+               tmpidx++;
+       }
+
+       if(tmpidx<100)
+       {
+               bResult = _TRUE;
+       }
+       else
+       {
+               bResult = _FALSE;
+       }
+
+       return bResult;
+}
+
+int
+Efuse_PgPacketRead(    IN      PADAPTER        pAdapter,
+                                       IN      u8                      offset,
+                                       IN      u8                      *data,
+                                       IN      BOOLEAN         bPseudoTest)
+{
+       int     ret=0;
+
+       ret =  pAdapter->HalFunc.Efuse_PgPacketRead(pAdapter, offset, data, bPseudoTest);
+
+       return ret;
+}
+
+int
+Efuse_PgPacketWrite(IN PADAPTER        pAdapter,
+                                       IN      u8                      offset,
+                                       IN      u8                      word_en,
+                                       IN      u8                      *data,
+                                       IN      BOOLEAN         bPseudoTest)
+{
+       int ret;
+
+       ret =  pAdapter->HalFunc.Efuse_PgPacketWrite(pAdapter, offset, word_en, data, bPseudoTest);
+
+       return ret;
+}
+
+/*-----------------------------------------------------------------------------
+ * Function:   efuse_WordEnableDataRead
+ *
+ * Overview:   Read allowed word in current efuse section data.
+ *
+ * Input:       NONE
+ *
+ * Output:      NONE
+ *
+ * Return:      NONE
+ *
+ * Revised History:
+ * When                        Who             Remark
+ * 11/16/2008  MHC             Create Version 0.
+ * 11/21/2008  MHC             Fix Write bug when we only enable late word.
+ *
+ *---------------------------------------------------------------------------*/
+void
+efuse_WordEnableDataRead(IN    u8      word_en,
+                                                       IN      u8      *sourdata,
+                                                       IN      u8      *targetdata)
+{
+       if (!(word_en&BIT(0)))
+       {
+               targetdata[0] = sourdata[0];
+               targetdata[1] = sourdata[1];
+       }
+       if (!(word_en&BIT(1)))
+       {
+               targetdata[2] = sourdata[2];
+               targetdata[3] = sourdata[3];
+       }
+       if (!(word_en&BIT(2)))
+       {
+               targetdata[4] = sourdata[4];
+               targetdata[5] = sourdata[5];
+       }
+       if (!(word_en&BIT(3)))
+       {
+               targetdata[6] = sourdata[6];
+               targetdata[7] = sourdata[7];
+       }
+}
+
+
+u8
+Efuse_WordEnableDataWrite(     IN      PADAPTER        pAdapter,
+                                                       IN      u16             efuse_addr,
+                                                       IN      u8              word_en,
+                                                       IN      u8              *data,
+                                                       IN      BOOLEAN         bPseudoTest)
+{
+       u8      ret=0;
+
+       ret =  pAdapter->HalFunc.Efuse_WordEnableDataWrite(pAdapter, efuse_addr, word_en, data, bPseudoTest);
+
+       return ret;
+}
+
+static u8 efuse_read8(PADAPTER padapter, u16 address, u8 *value)
+{
+       return efuse_OneByteRead(padapter,address, value, _FALSE);
+}
+
+static u8 efuse_write8(PADAPTER padapter, u16 address, u8 *value)
+{
+       return efuse_OneByteWrite(padapter,address, *value, _FALSE);
+}
+
+/*
+ * read/wirte raw efuse data
+ */
+u8 rtw_efuse_access(PADAPTER padapter, u8 bWrite, u16 start_addr, u16 cnts, u8 *data)
+{
+       int i = 0;
+       u16     real_content_len = 0, max_available_size = 0;
+       u8 res = _FAIL ;
+       u8 (*rw8)(PADAPTER, u16, u8*);
+
+       EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_EFUSE_REAL_CONTENT_LEN, (PVOID)&real_content_len, _FALSE);
+       EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, (PVOID)&max_available_size, _FALSE);
+
+       if (start_addr > real_content_len)
+               return _FAIL;
+
+       if (_TRUE == bWrite) {
+               if ((start_addr + cnts) > max_available_size)
+                       return _FAIL;
+               rw8 = &efuse_write8;
+       } else
+               rw8 = &efuse_read8;
+
+       Efuse_PowerSwitch(padapter, bWrite, _TRUE);
+
+       // e-fuse one byte read / write
+       for (i = 0; i < cnts; i++) {
+               if (start_addr >= real_content_len) {
+                       res = _FAIL;
+                       break;
+               }
+
+               res = rw8(padapter, start_addr++, data++);
+               if (_FAIL == res) break;
+       }
+
+       Efuse_PowerSwitch(padapter, bWrite, _FALSE);
+
+       return res;
+}
+//------------------------------------------------------------------------------
+u16 efuse_GetMaxSize(PADAPTER padapter)
+{
+       u16     max_size;
+       EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI , TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, (PVOID)&max_size, _FALSE);
+       return max_size;
+}
+//------------------------------------------------------------------------------
+u8 efuse_GetCurrentSize(PADAPTER padapter, u16 *size)
+{
+       Efuse_PowerSwitch(padapter, _FALSE, _TRUE);
+       *size = Efuse_GetCurrentSize(padapter, EFUSE_WIFI, _FALSE);
+       Efuse_PowerSwitch(padapter, _FALSE, _FALSE);
+
+       return _SUCCESS;
+}
+//------------------------------------------------------------------------------
+u8 rtw_efuse_map_read(PADAPTER padapter, u16 addr, u16 cnts, u8 *data)
+{
+       u16     mapLen=0;
+
+       EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_EFUSE_MAP_LEN, (PVOID)&mapLen, _FALSE);
+
+       if ((addr + cnts) > mapLen)
+               return _FAIL;
+
+       Efuse_PowerSwitch(padapter, _FALSE, _TRUE);
+
+       efuse_ReadEFuse(padapter, EFUSE_WIFI, addr, cnts, data, _FALSE);
+
+       Efuse_PowerSwitch(padapter, _FALSE, _FALSE);
+
+       return _SUCCESS;
+}
+//------------------------------------------------------------------------------
+u8 rtw_efuse_map_write(PADAPTER padapter, u16 addr, u16 cnts, u8 *data)
+{
+       u8      offset, word_en;
+       u8      *map;
+       u8      newdata[PGPKT_DATA_SIZE];
+       s32     i, j, idx;
+       u8      ret = _SUCCESS;
+       u16     mapLen=0;
+
+       EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_EFUSE_MAP_LEN, (PVOID)&mapLen, _FALSE);
+
+       if ((addr + cnts) > mapLen)
+               return _FAIL;
+
+       map = rtw_zmalloc(mapLen);
+       if(map == NULL){
+               return _FAIL;
+       }
+
+       ret = rtw_efuse_map_read(padapter, 0, mapLen, map);
+       if (ret == _FAIL) goto exit;
+
+       Efuse_PowerSwitch(padapter, _TRUE, _TRUE);
+
+       offset = (addr >> 3);
+       word_en = 0xF;
+       _rtw_memset(newdata, 0xFF, PGPKT_DATA_SIZE);
+       i = addr & 0x7; // index of one package
+       j = 0;          // index of new package
+       idx = 0;        // data index
+
+       if (i & 0x1) {
+               // odd start
+               if (data[idx] != map[addr+idx]) {
+                       word_en &= ~BIT(i >> 1);
+                       newdata[i-1] = map[addr+idx-1];
+                       newdata[i] = data[idx];
+               }
+               i++;
+               idx++;
+       }
+       do {
+               for (; i < PGPKT_DATA_SIZE; i += 2)
+               {
+                       if (cnts == idx) break;
+                       if ((cnts - idx) == 1) {
+                               if (data[idx] != map[addr+idx]) {
+                                       word_en &= ~BIT(i >> 1);
+                                       newdata[i] = data[idx];
+                                       newdata[i+1] = map[addr+idx+1];
+                               }
+                               idx++;
+                               break;
+                       } else {
+                               if ((data[idx] != map[addr+idx]) ||
+                                   (data[idx+1] != map[addr+idx+1]))
+                               {
+                                       word_en &= ~BIT(i >> 1);
+                                       newdata[i] = data[idx];
+                                       newdata[i+1] = data[idx + 1];
+                               }
+                               idx += 2;
+                       }
+                       if (idx == cnts) break;
+               }
+
+               if (word_en != 0xF) {
+                       ret = Efuse_PgPacketWrite(padapter, offset, word_en, newdata, _FALSE);
+                       DBG_871X("offset=%x \n",offset);
+                       DBG_871X("word_en=%x \n",word_en);
+
+                       for(i=0;i<PGPKT_DATA_SIZE;i++)
+                       {
+                               DBG_871X("data=%x \t",newdata[i]);
+                       }
+                       if (ret == _FAIL) break;
+               }
+
+               if (idx == cnts) break;
+
+               offset++;
+               i = 0;
+               j = 0;
+               word_en = 0xF;
+               _rtw_memset(newdata, 0xFF, PGPKT_DATA_SIZE);
+       } while (1);
+
+       Efuse_PowerSwitch(padapter, _TRUE, _FALSE);
+
+exit:
+
+       rtw_mfree(map, mapLen);
+
+       return ret;
+}
+
+
+/*-----------------------------------------------------------------------------
+ * Function:   Efuse_ReadAllMap
+ *
+ * Overview:   Read All Efuse content
+ *
+ * Input:       NONE
+ *
+ * Output:      NONE
+ *
+ * Return:      NONE
+ *
+ * Revised History:
+ * When                        Who             Remark
+ * 11/11/2008  MHC             Create Version 0.
+ *
+ *---------------------------------------------------------------------------*/
+VOID
+Efuse_ReadAllMap(
+       IN              PADAPTER        pAdapter,
+       IN              u8              efuseType,
+       IN OUT  u8              *Efuse,
+       IN              BOOLEAN         bPseudoTest);
+VOID
+Efuse_ReadAllMap(
+       IN              PADAPTER        pAdapter,
+       IN              u8              efuseType,
+       IN OUT  u8              *Efuse,
+       IN              BOOLEAN         bPseudoTest)
+{
+       u16     mapLen=0;
+
+       Efuse_PowerSwitch(pAdapter,_FALSE, _TRUE);
+
+       EFUSE_GetEfuseDefinition(pAdapter, efuseType, TYPE_EFUSE_MAP_LEN, (PVOID)&mapLen, bPseudoTest);
+
+       efuse_ReadEFuse(pAdapter, efuseType, 0, mapLen, Efuse, bPseudoTest);
+
+       Efuse_PowerSwitch(pAdapter,_FALSE, _FALSE);
+}
+
+/*-----------------------------------------------------------------------------
+ * Function:   efuse_ShadowRead1Byte
+ *                     efuse_ShadowRead2Byte
+ *                     efuse_ShadowRead4Byte
+ *
+ * Overview:   Read from efuse init map by one/two/four bytes !!!!!
+ *
+ * Input:       NONE
+ *
+ * Output:      NONE
+ *
+ * Return:      NONE
+ *
+ * Revised History:
+ * When                        Who             Remark
+ * 11/12/2008  MHC             Create Version 0.
+ *
+ *---------------------------------------------------------------------------*/
+static VOID
+efuse_ShadowRead1Byte(
+       IN      PADAPTER        pAdapter,
+       IN      u16             Offset,
+       IN OUT  u8              *Value)
+{
+       EEPROM_EFUSE_PRIV *pEEPROM = GET_EEPROM_EFUSE_PRIV(pAdapter);
+
+       *Value = pEEPROM->efuse_eeprom_data[Offset];
+
+}      // EFUSE_ShadowRead1Byte
+
+//---------------Read Two Bytes
+static VOID
+efuse_ShadowRead2Byte(
+       IN      PADAPTER        pAdapter,
+       IN      u16             Offset,
+       IN OUT  u16             *Value)
+{
+       EEPROM_EFUSE_PRIV *pEEPROM = GET_EEPROM_EFUSE_PRIV(pAdapter);
+
+       *Value = pEEPROM->efuse_eeprom_data[Offset];
+       *Value |= pEEPROM->efuse_eeprom_data[Offset+1]<<8;
+
+}      // EFUSE_ShadowRead2Byte
+
+//---------------Read Four Bytes
+static VOID
+efuse_ShadowRead4Byte(
+       IN      PADAPTER        pAdapter,
+       IN      u16             Offset,
+       IN OUT  u32             *Value)
+{
+       EEPROM_EFUSE_PRIV *pEEPROM = GET_EEPROM_EFUSE_PRIV(pAdapter);
+
+       *Value = pEEPROM->efuse_eeprom_data[Offset];
+       *Value |= pEEPROM->efuse_eeprom_data[Offset+1]<<8;
+       *Value |= pEEPROM->efuse_eeprom_data[Offset+2]<<16;
+       *Value |= pEEPROM->efuse_eeprom_data[Offset+3]<<24;
+
+}      // efuse_ShadowRead4Byte
+
+
+/*-----------------------------------------------------------------------------
+ * Function:   efuse_ShadowWrite1Byte
+ *                     efuse_ShadowWrite2Byte
+ *                     efuse_ShadowWrite4Byte
+ *
+ * Overview:   Write efuse modify map by one/two/four byte.
+ *
+ * Input:       NONE
+ *
+ * Output:      NONE
+ *
+ * Return:      NONE
+ *
+ * Revised History:
+ * When                        Who             Remark
+ * 11/12/2008  MHC             Create Version 0.
+ *
+ *---------------------------------------------------------------------------*/
+#ifdef PLATFORM
+static VOID
+efuse_ShadowWrite1Byte(
+       IN      PADAPTER        pAdapter,
+       IN      u16             Offset,
+       IN      u8              Value);
+#endif //PLATFORM
+static VOID
+efuse_ShadowWrite1Byte(
+       IN      PADAPTER        pAdapter,
+       IN      u16             Offset,
+       IN      u8              Value)
+{
+       EEPROM_EFUSE_PRIV *pEEPROM = GET_EEPROM_EFUSE_PRIV(pAdapter);
+
+       pEEPROM->efuse_eeprom_data[Offset] = Value;
+
+}      // efuse_ShadowWrite1Byte
+
+//---------------Write Two Bytes
+static VOID
+efuse_ShadowWrite2Byte(
+       IN      PADAPTER        pAdapter,
+       IN      u16             Offset,
+       IN      u16             Value)
+{
+       EEPROM_EFUSE_PRIV *pEEPROM = GET_EEPROM_EFUSE_PRIV(pAdapter);
+
+       pEEPROM->efuse_eeprom_data[Offset] = Value&0x00FF;
+       pEEPROM->efuse_eeprom_data[Offset+1] = Value>>8;
+
+}      // efuse_ShadowWrite1Byte
+
+//---------------Write Four Bytes
+static VOID
+efuse_ShadowWrite4Byte(
+       IN      PADAPTER        pAdapter,
+       IN      u16             Offset,
+       IN      u32             Value)
+{
+       EEPROM_EFUSE_PRIV *pEEPROM = GET_EEPROM_EFUSE_PRIV(pAdapter);
+
+       pEEPROM->efuse_eeprom_data[Offset] = (u8)(Value&0x000000FF);
+       pEEPROM->efuse_eeprom_data[Offset+1] = (u8)((Value>>8)&0x0000FF);
+       pEEPROM->efuse_eeprom_data[Offset+2] = (u8)((Value>>16)&0x00FF);
+       pEEPROM->efuse_eeprom_data[Offset+3] = (u8)((Value>>24)&0xFF);
+
+}      // efuse_ShadowWrite1Byte
+
+/*-----------------------------------------------------------------------------
+ * Function:   EFUSE_ShadowMapUpdate
+ *
+ * Overview:   Transfer current EFUSE content to shadow init and modify map.
+ *
+ * Input:       NONE
+ *
+ * Output:      NONE
+ *
+ * Return:      NONE
+ *
+ * Revised History:
+ * When                        Who             Remark
+ * 11/13/2008  MHC             Create Version 0.
+ *
+ *---------------------------------------------------------------------------*/
+void EFUSE_ShadowMapUpdate(
+       IN PADAPTER     pAdapter,
+       IN u8           efuseType,
+       IN BOOLEAN      bPseudoTest)
+{
+       EEPROM_EFUSE_PRIV *pEEPROM = GET_EEPROM_EFUSE_PRIV(pAdapter);
+       u16     mapLen=0;
+
+       EFUSE_GetEfuseDefinition(pAdapter, efuseType, TYPE_EFUSE_MAP_LEN, (PVOID)&mapLen, bPseudoTest);
+
+       if (pEEPROM->bautoload_fail_flag == _TRUE)
+       {
+               _rtw_memset(pEEPROM->efuse_eeprom_data, 0xFF, mapLen);
+       }
+       else
+       {
+               #ifdef CONFIG_ADAPTOR_INFO_CACHING_FILE
+               if(_SUCCESS != retriveAdaptorInfoFile(pAdapter->registrypriv.adaptor_info_caching_file_path, pEEPROM)) {
+               #endif
+
+               Efuse_ReadAllMap(pAdapter, efuseType, pEEPROM->efuse_eeprom_data, bPseudoTest);
+
+               #ifdef CONFIG_ADAPTOR_INFO_CACHING_FILE
+                       storeAdaptorInfoFile(pAdapter->registrypriv.adaptor_info_caching_file_path, pEEPROM);
+               }
+               #endif
+       }
+
+       //PlatformMoveMemory((PVOID)&pHalData->EfuseMap[EFUSE_MODIFY_MAP][0],
+       //(PVOID)&pHalData->EfuseMap[EFUSE_INIT_MAP][0], mapLen);
+}// EFUSE_ShadowMapUpdate
+
+
+/*-----------------------------------------------------------------------------
+ * Function:   EFUSE_ShadowRead
+ *
+ * Overview:   Read from efuse init map !!!!!
+ *
+ * Input:       NONE
+ *
+ * Output:      NONE
+ *
+ * Return:      NONE
+ *
+ * Revised History:
+ * When                        Who             Remark
+ * 11/12/2008  MHC             Create Version 0.
+ *
+ *---------------------------------------------------------------------------*/
+void
+EFUSE_ShadowRead(
+       IN              PADAPTER        pAdapter,
+       IN              u8              Type,
+       IN              u16             Offset,
+       IN OUT  u32             *Value  )
+{
+       if (Type == 1)
+               efuse_ShadowRead1Byte(pAdapter, Offset, (u8 *)Value);
+       else if (Type == 2)
+               efuse_ShadowRead2Byte(pAdapter, Offset, (u16 *)Value);
+       else if (Type == 4)
+               efuse_ShadowRead4Byte(pAdapter, Offset, (u32 *)Value);
+
+}      // EFUSE_ShadowRead
+
+/*-----------------------------------------------------------------------------
+ * Function:   EFUSE_ShadowWrite
+ *
+ * Overview:   Write efuse modify map for later update operation to use!!!!!
+ *
+ * Input:       NONE
+ *
+ * Output:      NONE
+ *
+ * Return:      NONE
+ *
+ * Revised History:
+ * When                        Who             Remark
+ * 11/12/2008  MHC             Create Version 0.
+ *
+ *---------------------------------------------------------------------------*/
+VOID
+EFUSE_ShadowWrite(
+       IN      PADAPTER        pAdapter,
+       IN      u8              Type,
+       IN      u16             Offset,
+       IN OUT  u32             Value);
+VOID
+EFUSE_ShadowWrite(
+       IN      PADAPTER        pAdapter,
+       IN      u8              Type,
+       IN      u16             Offset,
+       IN OUT  u32             Value)
+{
+#if (MP_DRIVER == 0)
+       return;
+#endif
+
+       if (Type == 1)
+               efuse_ShadowWrite1Byte(pAdapter, Offset, (u8)Value);
+       else if (Type == 2)
+               efuse_ShadowWrite2Byte(pAdapter, Offset, (u16)Value);
+       else if (Type == 4)
+               efuse_ShadowWrite4Byte(pAdapter, Offset, (u32)Value);
+
+}      // EFUSE_ShadowWrite
+
+VOID
+Efuse_InitSomeVar(
+       IN              PADAPTER        pAdapter
+       );
+VOID
+Efuse_InitSomeVar(
+       IN              PADAPTER        pAdapter
+       )
+{
+       u8 i;
+
+       _rtw_memset((PVOID)&fakeEfuseContent[0], 0xff, EFUSE_MAX_HW_SIZE);
+       _rtw_memset((PVOID)&fakeEfuseInitMap[0], 0xff, EFUSE_MAX_MAP_LEN);
+       _rtw_memset((PVOID)&fakeEfuseModifiedMap[0], 0xff, EFUSE_MAX_MAP_LEN);
+
+       for(i=0; i<EFUSE_MAX_BT_BANK; i++)
+       {
+               _rtw_memset((PVOID)&BTEfuseContent[i][0], EFUSE_MAX_HW_SIZE, 0xff);
+       }
+       _rtw_memset((PVOID)&BTEfuseInitMap[0], 0xff, EFUSE_BT_MAX_MAP_LEN);
+       _rtw_memset((PVOID)&BTEfuseModifiedMap[0], 0xff, EFUSE_BT_MAX_MAP_LEN);
+
+       for(i=0; i<EFUSE_MAX_BT_BANK; i++)
+       {
+               _rtw_memset((PVOID)&fakeBTEfuseContent[i][0], 0xff, EFUSE_MAX_HW_SIZE);
+       }
+       _rtw_memset((PVOID)&fakeBTEfuseInitMap[0], 0xff, EFUSE_BT_MAX_MAP_LEN);
+       _rtw_memset((PVOID)&fakeBTEfuseModifiedMap[0], 0xff, EFUSE_BT_MAX_MAP_LEN);
+}
+
+#ifdef PLATFORM_LINUX
+#ifdef CONFIG_ADAPTOR_INFO_CACHING_FILE
+//#include <rtw_eeprom.h>
+
+ int isAdaptorInfoFileValid(void)
+{
+       return _TRUE;
+}
+
+int storeAdaptorInfoFile(char *path, struct eeprom_priv * eeprom_priv)
+{
+       int ret =_SUCCESS;
+
+       if(path && eeprom_priv) {
+               ret = rtw_store_to_file(path, eeprom_priv->efuse_eeprom_data, EEPROM_MAX_SIZE);
+               if(ret == EEPROM_MAX_SIZE)
+                       ret = _SUCCESS;
+               else
+                       ret = _FAIL;
+       } else {
+               DBG_871X("%s NULL pointer\n",__FUNCTION__);
+               ret =  _FAIL;
+       }
+       return ret;
+}
+
+int retriveAdaptorInfoFile(char *path, struct eeprom_priv * eeprom_priv)
+{
+       int ret = _SUCCESS;
+       mm_segment_t oldfs;
+       struct file *fp;
+
+       if(path && eeprom_priv) {
+
+               ret = rtw_retrive_from_file(path, eeprom_priv->efuse_eeprom_data, EEPROM_MAX_SIZE);
+
+               if(ret == EEPROM_MAX_SIZE)
+                       ret = _SUCCESS;
+               else
+                       ret = _FAIL;
+
+               #if 0
+               if(isAdaptorInfoFileValid()) {
+                       return 0;
+               } else {
+                       return _FAIL;
+               }
+               #endif
+
+       } else {
+               DBG_871X("%s NULL pointer\n",__FUNCTION__);
+               ret = _FAIL;
+       }
+       return ret;
+}
+#endif //CONFIG_ADAPTOR_INFO_CACHING_FILE
+#endif //PLATFORM_LINUX
diff --git a/drivers/net/wireless/realtek/rtl8192cu/core/rtw_ap.c b/drivers/net/wireless/realtek/rtl8192cu/core/rtw_ap.c
new file mode 100644 (file)
index 0000000..cd7e5f3
--- /dev/null
@@ -0,0 +1,2939 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#define _RTW_AP_C_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <wifi.h>
+
+
+#ifdef CONFIG_AP_MODE
+
+extern unsigned char   RTW_WPA_OUI[];
+extern unsigned char   WMM_OUI[];
+extern unsigned char   WPS_OUI[];
+extern unsigned char   P2P_OUI[];
+extern unsigned char   WFD_OUI[];
+
+void init_mlme_ap_info(_adapter *padapter)
+{
+       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+       struct sta_priv *pstapriv = &padapter->stapriv;
+       struct wlan_acl_pool *pacl_list = &pstapriv->acl_list;
+
+
+       _rtw_spinlock_init(&pmlmepriv->bcn_update_lock);
+
+       //for ACL
+       _rtw_init_queue(&pacl_list->acl_node_q);
+
+       //pmlmeext->bstart_bss = _FALSE;
+
+       start_ap_mode(padapter);
+}
+
+void free_mlme_ap_info(_adapter *padapter)
+{
+       _irqL irqL;
+       struct sta_info *psta=NULL;
+       struct sta_priv *pstapriv = &padapter->stapriv;
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       //stop_ap_mode(padapter);
+
+       pmlmepriv->update_bcn = _FALSE;
+       pmlmeext->bstart_bss = _FALSE;
+
+       rtw_sta_flush(padapter);
+
+       pmlmeinfo->state = _HW_STATE_NOLINK_;
+
+       //free_assoc_sta_resources
+       rtw_free_all_stainfo(padapter);
+
+       //free bc/mc sta_info
+       psta = rtw_get_bcmc_stainfo(padapter);
+       _enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
+       rtw_free_stainfo(padapter, psta);
+       _exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
+
+
+       _rtw_spinlock_free(&pmlmepriv->bcn_update_lock);
+
+}
+
+static void update_BCNTIM(_adapter *padapter)
+{
+       struct sta_priv *pstapriv = &padapter->stapriv;
+       struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
+       WLAN_BSSID_EX *pnetwork_mlmeext = &(pmlmeinfo->network);
+       unsigned char *pie = pnetwork_mlmeext->IEs;
+
+       //DBG_871X("%s\n", __FUNCTION__);
+
+       //update TIM IE
+       //if(pstapriv->tim_bitmap)
+       if(_TRUE)
+       {
+               u8 *p, *dst_ie, *premainder_ie=NULL, *pbackup_remainder_ie=NULL;
+               u16 tim_bitmap_le;
+               uint offset, tmp_len, tim_ielen, tim_ie_offset, remainder_ielen;
+
+               tim_bitmap_le = cpu_to_le16(pstapriv->tim_bitmap);
+
+               p = rtw_get_ie(pie + _FIXED_IE_LENGTH_, _TIM_IE_, &tim_ielen, pnetwork_mlmeext->IELength - _FIXED_IE_LENGTH_);
+               if (p != NULL && tim_ielen>0)
+               {
+                       tim_ielen += 2;
+
+                       premainder_ie = p+tim_ielen;
+
+                       tim_ie_offset = (sint)(p -pie);
+
+                       remainder_ielen = pnetwork_mlmeext->IELength - tim_ie_offset - tim_ielen;
+
+                       //append TIM IE from dst_ie offset
+                       dst_ie = p;
+               }
+               else
+               {
+                       tim_ielen = 0;
+
+                       //calucate head_len
+                       offset = _FIXED_IE_LENGTH_;
+
+                       /* get ssid_ie len */
+                       p = rtw_get_ie(pie + _BEACON_IE_OFFSET_, _SSID_IE_, &tmp_len, (pnetwork_mlmeext->IELength - _BEACON_IE_OFFSET_));
+                       if (p !=  NULL)
+                               offset += tmp_len+2;
+
+                       // get supported rates len
+                       p = rtw_get_ie(pie + _BEACON_IE_OFFSET_, _SUPPORTEDRATES_IE_, &tmp_len, (pnetwork_mlmeext->IELength - _BEACON_IE_OFFSET_));
+                       if (p !=  NULL)
+                       {
+                               offset += tmp_len+2;
+                       }
+
+                       //DS Parameter Set IE, len=3
+                       offset += 3;
+
+                       premainder_ie = pie + offset;
+
+                       remainder_ielen = pnetwork_mlmeext->IELength - offset - tim_ielen;
+
+                       //append TIM IE from offset
+                       dst_ie = pie + offset;
+
+               }
+
+
+               if(remainder_ielen>0)
+               {
+                       pbackup_remainder_ie = rtw_malloc(remainder_ielen);
+                       if(pbackup_remainder_ie && premainder_ie)
+                               _rtw_memcpy(pbackup_remainder_ie, premainder_ie, remainder_ielen);
+               }
+
+               *dst_ie++=_TIM_IE_;
+
+               if((pstapriv->tim_bitmap&0xff00) && (pstapriv->tim_bitmap&0x00fc))
+                       tim_ielen = 5;
+               else
+                       tim_ielen = 4;
+
+               *dst_ie++= tim_ielen;
+
+               *dst_ie++=0;//DTIM count
+               *dst_ie++=1;//DTIM peroid
+
+               if(pstapriv->tim_bitmap&BIT(0))//for bc/mc frames
+                       *dst_ie++ = BIT(0);//bitmap ctrl
+               else
+                       *dst_ie++ = 0;
+
+               if(tim_ielen==4)
+               {
+                       *dst_ie++ = *(u8*)&tim_bitmap_le;
+               }
+               else if(tim_ielen==5)
+               {
+                       _rtw_memcpy(dst_ie, &tim_bitmap_le, 2);
+                       dst_ie+=2;
+               }
+
+               //copy remainder IE
+               if(pbackup_remainder_ie)
+               {
+                       _rtw_memcpy(dst_ie, pbackup_remainder_ie, remainder_ielen);
+
+                       rtw_mfree(pbackup_remainder_ie, remainder_ielen);
+               }
+
+               offset =  (uint)(dst_ie - pie);
+               pnetwork_mlmeext->IELength = offset + remainder_ielen;
+
+       }
+
+#ifndef CONFIG_INTERRUPT_BASED_TXBCN
+#if defined(CONFIG_USB_HCI) || defined(CONFIG_SDIO_HCI) || defined(CONFIG_GSPI_HCI)
+       set_tx_beacon_cmd(padapter);
+#endif
+#endif //!CONFIG_INTERRUPT_BASED_TXBCN
+
+
+}
+
+void rtw_add_bcn_ie(_adapter *padapter, WLAN_BSSID_EX *pnetwork, u8 index, u8 *data, u8 len)
+{
+       PNDIS_802_11_VARIABLE_IEs       pIE;
+       u8      bmatch = _FALSE;
+       u8      *pie = pnetwork->IEs;
+       u8      *p, *dst_ie, *premainder_ie=NULL, *pbackup_remainder_ie=NULL;
+       u32     i, offset, ielen, ie_offset, remainder_ielen = 0;
+
+       for (i = sizeof(NDIS_802_11_FIXED_IEs); i < pnetwork->IELength;)
+       {
+               pIE = (PNDIS_802_11_VARIABLE_IEs)(pnetwork->IEs + i);
+
+               if (pIE->ElementID > index)
+               {
+                       break;
+               }
+               else if(pIE->ElementID == index) // already exist the same IE
+               {
+                       p = (u8 *)pIE;
+                       ielen = pIE->Length;
+                       bmatch = _TRUE;
+                       break;
+               }
+
+               p = (u8 *)pIE;
+               ielen = pIE->Length;
+               i += (pIE->Length + 2);
+       }
+
+       if (p != NULL && ielen>0)
+       {
+               ielen += 2;
+
+               premainder_ie = p+ielen;
+
+               ie_offset = (sint)(p -pie);
+
+               remainder_ielen = pnetwork->IELength - ie_offset - ielen;
+
+               if(bmatch)
+                       dst_ie = p;
+               else
+                       dst_ie = (p+ielen);
+       }
+
+       if(remainder_ielen>0)
+       {
+               pbackup_remainder_ie = rtw_malloc(remainder_ielen);
+               if(pbackup_remainder_ie && premainder_ie)
+                       _rtw_memcpy(pbackup_remainder_ie, premainder_ie, remainder_ielen);
+       }
+
+       *dst_ie++=index;
+       *dst_ie++=len;
+
+       _rtw_memcpy(dst_ie, data, len);
+       dst_ie+=len;
+
+       //copy remainder IE
+       if(pbackup_remainder_ie)
+       {
+               _rtw_memcpy(dst_ie, pbackup_remainder_ie, remainder_ielen);
+
+               rtw_mfree(pbackup_remainder_ie, remainder_ielen);
+       }
+
+       offset =  (uint)(dst_ie - pie);
+       pnetwork->IELength = offset + remainder_ielen;
+}
+
+void rtw_remove_bcn_ie(_adapter *padapter, WLAN_BSSID_EX *pnetwork, u8 index)
+{
+       u8 *p, *dst_ie, *premainder_ie=NULL, *pbackup_remainder_ie=NULL;
+       uint offset, ielen, ie_offset, remainder_ielen = 0;
+       u8      *pie = pnetwork->IEs;
+
+       p = rtw_get_ie(pie + _FIXED_IE_LENGTH_, index, &ielen, pnetwork->IELength - _FIXED_IE_LENGTH_);
+       if (p != NULL && ielen>0)
+       {
+               ielen += 2;
+
+               premainder_ie = p+ielen;
+
+               ie_offset = (sint)(p -pie);
+
+               remainder_ielen = pnetwork->IELength - ie_offset - ielen;
+
+               dst_ie = p;
+       }
+       else {
+               return;
+       }
+
+       if(remainder_ielen>0)
+       {
+               pbackup_remainder_ie = rtw_malloc(remainder_ielen);
+               if(pbackup_remainder_ie && premainder_ie)
+                       _rtw_memcpy(pbackup_remainder_ie, premainder_ie, remainder_ielen);
+       }
+
+       //copy remainder IE
+       if(pbackup_remainder_ie)
+       {
+               _rtw_memcpy(dst_ie, pbackup_remainder_ie, remainder_ielen);
+
+               rtw_mfree(pbackup_remainder_ie, remainder_ielen);
+       }
+
+       offset =  (uint)(dst_ie - pie);
+       pnetwork->IELength = offset + remainder_ielen;
+}
+
+
+u8 chk_sta_is_alive(struct sta_info *psta);
+u8 chk_sta_is_alive(struct sta_info *psta)
+{
+       u8 ret = _FALSE;
+       #ifdef DBG_EXPIRATION_CHK
+       DBG_871X("sta:"MAC_FMT", rssi:%d, rx:"STA_PKTS_FMT", expire_to:%u, %s%ssq_len:%u\n"
+               , MAC_ARG(psta->hwaddr)
+               , psta->rssi_stat.UndecoratedSmoothedPWDB
+               //, STA_RX_PKTS_ARG(psta)
+               , STA_RX_PKTS_DIFF_ARG(psta)
+               , psta->expire_to
+               , psta->state&WIFI_SLEEP_STATE?"PS, ":""
+               , psta->state&WIFI_STA_ALIVE_CHK_STATE?"SAC, ":""
+               , psta->sleepq_len
+       );
+       #endif
+
+       //if(sta_last_rx_pkts(psta) == sta_rx_pkts(psta))
+       if((psta->sta_stats.last_rx_data_pkts + psta->sta_stats.last_rx_ctrl_pkts) == (psta->sta_stats.rx_data_pkts + psta->sta_stats.rx_ctrl_pkts))
+       {
+               #if 0
+               if(psta->state&WIFI_SLEEP_STATE)
+                       ret = _TRUE;
+               #endif
+       }
+       else
+       {
+               ret = _TRUE;
+       }
+
+       sta_update_last_rx_pkts(psta);
+
+       return ret;
+}
+
+void   expire_timeout_chk(_adapter *padapter)
+{
+       _irqL irqL;
+       _list   *phead, *plist;
+       u8 updated;
+       struct sta_info *psta=NULL;
+       struct sta_priv *pstapriv = &padapter->stapriv;
+       u8 chk_alive_num = 0;
+       char chk_alive_list[NUM_STA];
+       int i;
+
+       _enter_critical_bh(&pstapriv->auth_list_lock, &irqL);
+
+       phead = &pstapriv->auth_list;
+       plist = get_next(phead);
+
+       //check auth_queue
+       #ifdef DBG_EXPIRATION_CHK
+       if (rtw_end_of_queue_search(phead, plist) == _FALSE) {
+               DBG_871X(FUNC_NDEV_FMT" auth_list, cnt:%u\n"
+                       , FUNC_NDEV_ARG(padapter->pnetdev), pstapriv->auth_list_cnt);
+       }
+       #endif
+       while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
+       {
+               psta = LIST_CONTAINOR(plist, struct sta_info, auth_list);
+               plist = get_next(plist);
+
+               if(psta->expire_to>0)
+               {
+                       psta->expire_to--;
+                       if (psta->expire_to == 0)
+                       {
+                               rtw_list_delete(&psta->auth_list);
+                               pstapriv->auth_list_cnt--;
+
+                               DBG_871X("auth expire %02X%02X%02X%02X%02X%02X\n",
+                                       psta->hwaddr[0],psta->hwaddr[1],psta->hwaddr[2],psta->hwaddr[3],psta->hwaddr[4],psta->hwaddr[5]);
+
+                               _exit_critical_bh(&pstapriv->auth_list_lock, &irqL);
+
+                               _enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
+                               rtw_free_stainfo(padapter, psta);
+                               _exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
+
+                               _enter_critical_bh(&pstapriv->auth_list_lock, &irqL);
+                       }
+               }
+
+       }
+
+       _exit_critical_bh(&pstapriv->auth_list_lock, &irqL);
+
+       psta = NULL;
+
+
+       _enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+
+       phead = &pstapriv->asoc_list;
+       plist = get_next(phead);
+
+       //check asoc_queue
+       #ifdef DBG_EXPIRATION_CHK
+       if (rtw_end_of_queue_search(phead, plist) == _FALSE) {
+               DBG_871X(FUNC_NDEV_FMT" asoc_list, cnt:%u\n"
+                       , FUNC_NDEV_ARG(padapter->pnetdev), pstapriv->asoc_list_cnt);
+       }
+       #endif
+       while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
+       {
+               psta = LIST_CONTAINOR(plist, struct sta_info, asoc_list);
+               plist = get_next(plist);
+
+               if (chk_sta_is_alive(psta) || !psta->expire_to) {
+                       psta->expire_to = pstapriv->expire_to;
+                       psta->keep_alive_trycnt = 0;
+                       #ifdef CONFIG_TX_MCAST2UNI
+                       psta->under_exist_checking = 0;
+                       #endif  // CONFIG_TX_MCAST2UNI
+               } else {
+                       psta->expire_to--;
+               }
+
+#ifndef CONFIG_ACTIVE_KEEP_ALIVE_CHECK
+#ifdef CONFIG_TX_MCAST2UNI
+               if ( (psta->flags & WLAN_STA_HT) && (psta->htpriv.agg_enable_bitmap || psta->under_exist_checking) ) {
+                       // check sta by delba(addba) for 11n STA
+                       // ToDo: use CCX report to check for all STAs
+                       //DBG_871X("asoc check by DELBA/ADDBA! (pstapriv->expire_to=%d s)(psta->expire_to=%d s), [%02x, %d]\n", pstapriv->expire_to*2, psta->expire_to*2, psta->htpriv.agg_enable_bitmap, psta->under_exist_checking);
+
+                       if ( psta->expire_to <= (pstapriv->expire_to - 50 ) ) {
+                               DBG_871X("asoc expire by DELBA/ADDBA! (%d s)\n", (pstapriv->expire_to-psta->expire_to)*2);
+                               psta->under_exist_checking = 0;
+                               psta->expire_to = 0;
+                       } else if ( psta->expire_to <= (pstapriv->expire_to - 3) && (psta->under_exist_checking==0)) {
+                               DBG_871X("asoc check by DELBA/ADDBA! (%d s)\n", (pstapriv->expire_to-psta->expire_to)*2);
+                               psta->under_exist_checking = 1;
+                               //tear down TX AMPDU
+                               send_delba(padapter, 1, psta->hwaddr);// // originator
+                               psta->htpriv.agg_enable_bitmap = 0x0;//reset
+                               psta->htpriv.candidate_tid_bitmap = 0x0;//reset
+                       }
+               }
+#endif // CONFIG_TX_MCAST2UNI
+#endif //CONFIG_ACTIVE_KEEP_ALIVE_CHECK
+
+               if (psta->expire_to <= 0)
+               {
+                       #ifdef CONFIG_ACTIVE_KEEP_ALIVE_CHECK
+                       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
+
+                       if (padapter->registrypriv.wifi_spec == 1)
+                       {
+                               psta->expire_to = pstapriv->expire_to;
+                               continue;
+                       }
+
+                       if (psta->state & WIFI_SLEEP_STATE) {
+                               if (!(psta->state & WIFI_STA_ALIVE_CHK_STATE)) {
+                                       //to check if alive by another methods if staion is at ps mode.
+                                       psta->expire_to = pstapriv->expire_to;
+                                       psta->state |= WIFI_STA_ALIVE_CHK_STATE;
+
+                                       //DBG_871X("alive chk, sta:" MAC_FMT " is at ps mode!\n", MAC_ARG(psta->hwaddr));
+
+                                       //to update bcn with tim_bitmap for this station
+                                       pstapriv->tim_bitmap |= BIT(psta->aid);
+                                       update_beacon(padapter, _TIM_IE_, NULL, _FALSE);
+
+                                       if(!pmlmeext->active_keep_alive_check)
+                                               continue;
+                               }
+                       }
+
+                       if (pmlmeext->active_keep_alive_check) {
+                               int stainfo_offset;
+
+                               stainfo_offset = rtw_stainfo_offset(pstapriv, psta);
+                               if (stainfo_offset_valid(stainfo_offset)) {
+                                       chk_alive_list[chk_alive_num++] = stainfo_offset;
+                               }
+
+                               continue;
+                       }
+                       #endif /* CONFIG_ACTIVE_KEEP_ALIVE_CHECK */
+
+                       rtw_list_delete(&psta->asoc_list);
+                       pstapriv->asoc_list_cnt--;
+
+                       DBG_871X("asoc expire "MAC_FMT", state=0x%x\n", MAC_ARG(psta->hwaddr), psta->state);
+                       updated = ap_free_sta(padapter, psta, _FALSE, WLAN_REASON_DEAUTH_LEAVING);
+               }
+               else
+               {
+                       /* TODO: Aging mechanism to digest frames in sleep_q to avoid running out of xmitframe */
+                       if (psta->sleepq_len > (NR_XMITFRAME/pstapriv->asoc_list_cnt)
+                               && padapter->xmitpriv.free_xmitframe_cnt < (NR_XMITFRAME/pstapriv->asoc_list_cnt/2)
+                       ){
+                               DBG_871X("%s sta:"MAC_FMT", sleepq_len:%u, free_xmitframe_cnt:%u, asoc_list_cnt:%u, clear sleep_q\n", __func__
+                                       , MAC_ARG(psta->hwaddr)
+                                       , psta->sleepq_len, padapter->xmitpriv.free_xmitframe_cnt, pstapriv->asoc_list_cnt);
+                               wakeup_sta_to_xmit(padapter, psta);
+                       }
+               }
+       }
+
+       _exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+
+#ifdef CONFIG_ACTIVE_KEEP_ALIVE_CHECK
+if (chk_alive_num) {
+
+       u8 backup_oper_channel=0;
+       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
+       /* switch to correct channel of current network  before issue keep-alive frames */
+       if (rtw_get_oper_ch(padapter) != pmlmeext->cur_channel) {
+               backup_oper_channel = rtw_get_oper_ch(padapter);
+               SelectChannel(padapter, pmlmeext->cur_channel);
+       }
+
+       /* issue null data to check sta alive*/
+       for (i = 0; i < chk_alive_num; i++) {
+
+               int ret = _FAIL;
+
+               psta = rtw_get_stainfo_by_offset(pstapriv, chk_alive_list[i]);
+               if(!(psta->state &_FW_LINKED))
+                       continue;
+
+               if (psta->state & WIFI_SLEEP_STATE)
+                       ret = issue_nulldata(padapter, psta->hwaddr, 0, 1, 50);
+               else
+                       ret = issue_nulldata(padapter, psta->hwaddr, 0, 3, 50);
+
+               psta->keep_alive_trycnt++;
+               if (ret == _SUCCESS)
+               {
+                       DBG_871X("asoc check, sta(" MAC_FMT ") is alive\n", MAC_ARG(psta->hwaddr));
+                       psta->expire_to = pstapriv->expire_to;
+                       psta->keep_alive_trycnt = 0;
+                       continue;
+               }
+               else if (psta->keep_alive_trycnt <= 3)
+               {
+                       DBG_871X("ack check for asoc expire, keep_alive_trycnt=%d\n", psta->keep_alive_trycnt);
+                       psta->expire_to = 1;
+                       continue;
+               }
+
+               psta->keep_alive_trycnt = 0;
+
+               DBG_871X("asoc expire "MAC_FMT", state=0x%x\n", MAC_ARG(psta->hwaddr), psta->state);
+               _enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+               if (rtw_is_list_empty(&psta->asoc_list)==_FALSE) {
+                       rtw_list_delete(&psta->asoc_list);
+                       pstapriv->asoc_list_cnt--;
+                       updated = ap_free_sta(padapter, psta, _FALSE, WLAN_REASON_DEAUTH_LEAVING);
+               }
+               _exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+
+       }
+
+       if (backup_oper_channel>0) /* back to the original operation channel */
+               SelectChannel(padapter, backup_oper_channel);
+}
+#endif /* CONFIG_ACTIVE_KEEP_ALIVE_CHECK */
+
+       associated_clients_update(padapter, updated);
+}
+
+
+static void add_RATid(_adapter *padapter, struct sta_info *psta)
+{
+       int i;
+       u8 rf_type;
+       u32 init_rate=0;
+       unsigned char sta_band = 0, raid, shortGIrate = _FALSE;
+       unsigned char limit;
+       unsigned int tx_ra_bitmap=0;
+       struct ht_priv  *psta_ht = NULL;
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+       WLAN_BSSID_EX *pcur_network = (WLAN_BSSID_EX *)&pmlmepriv->cur_network.network;
+
+
+       if(psta)
+               psta_ht = &psta->htpriv;
+       else
+               return;
+
+       //b/g mode ra_bitmap
+       for (i=0; i<sizeof(psta->bssrateset); i++)
+       {
+               if (psta->bssrateset[i])
+                       tx_ra_bitmap |= rtw_get_bit_value_from_ieee_value(psta->bssrateset[i]&0x7f);
+       }
+
+       //n mode ra_bitmap
+       if(psta_ht->ht_option)
+       {
+               rtw_hal_get_hwreg(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
+               if(rf_type == RF_2T2R)
+                       limit=16;// 2R
+               else
+                       limit=8;//  1R
+
+               for (i=0; i<limit; i++) {
+                       if (psta_ht->ht_cap.supp_mcs_set[i/8] & BIT(i%8))
+                               tx_ra_bitmap |= BIT(i+12);
+               }
+
+               //max short GI rate
+               shortGIrate = psta_ht->sgi;
+       }
+
+
+#if 0//gtest
+       if(get_rf_mimo_mode(padapter) == RTL8712_RF_2T2R)
+       {
+               //is this a 2r STA?
+               if((pstat->tx_ra_bitmap & 0x0ff00000) != 0 && !(priv->pshare->has_2r_sta & BIT(pstat->aid)))
+               {
+                       priv->pshare->has_2r_sta |= BIT(pstat->aid);
+                       if(rtw_read16(padapter, 0x102501f6) != 0xffff)
+                       {
+                               rtw_write16(padapter, 0x102501f6, 0xffff);
+                               reset_1r_sta_RA(priv, 0xffff);
+                               Switch_1SS_Antenna(priv, 3);
+                       }
+               }
+               else// bg or 1R STA?
+               {
+                       if((priv->pmib->dot11BssType.net_work_type & WIRELESS_11N) && pstat->ht_cap_len && priv->pshare->has_2r_sta == 0)
+                       {
+                               if(rtw_read16(padapter, 0x102501f6) != 0x7777)
+                               { // MCS7 SGI
+                                       rtw_write16(padapter, 0x102501f6,0x7777);
+                                       reset_1r_sta_RA(priv, 0x7777);
+                                       Switch_1SS_Antenna(priv, 2);
+                               }
+                       }
+               }
+
+       }
+
+       if ((pstat->rssi_level < 1) || (pstat->rssi_level > 3))
+       {
+               if (pstat->rssi >= priv->pshare->rf_ft_var.raGoDownUpper)
+                       pstat->rssi_level = 1;
+               else if ((pstat->rssi >= priv->pshare->rf_ft_var.raGoDown20MLower) ||
+                       ((priv->pshare->is_40m_bw) && (pstat->ht_cap_len) &&
+                       (pstat->rssi >= priv->pshare->rf_ft_var.raGoDown40MLower) &&
+                       (pstat->ht_cap_buf.ht_cap_info & cpu_to_le16(_HTCAP_SUPPORT_CH_WDTH_))))
+                       pstat->rssi_level = 2;
+               else
+                       pstat->rssi_level = 3;
+       }
+
+       // rate adaptive by rssi
+       if ((priv->pmib->dot11BssType.net_work_type & WIRELESS_11N) && pstat->ht_cap_len)
+       {
+               if ((get_rf_mimo_mode(priv) == MIMO_1T2R) || (get_rf_mimo_mode(priv) == MIMO_1T1R))
+               {
+                       switch (pstat->rssi_level) {
+                               case 1:
+                                       pstat->tx_ra_bitmap &= 0x100f0000;
+                                       break;
+                               case 2:
+                                       pstat->tx_ra_bitmap &= 0x100ff000;
+                                       break;
+                               case 3:
+                                       if (priv->pshare->is_40m_bw)
+                                               pstat->tx_ra_bitmap &= 0x100ff005;
+                                       else
+                                               pstat->tx_ra_bitmap &= 0x100ff001;
+
+                                       break;
+                       }
+               }
+               else
+               {
+                       switch (pstat->rssi_level) {
+                               case 1:
+                                       pstat->tx_ra_bitmap &= 0x1f0f0000;
+                                       break;
+                               case 2:
+                                       pstat->tx_ra_bitmap &= 0x1f0ff000;
+                                       break;
+                               case 3:
+                                       if (priv->pshare->is_40m_bw)
+                                               pstat->tx_ra_bitmap &= 0x000ff005;
+                                       else
+                                               pstat->tx_ra_bitmap &= 0x000ff001;
+
+                                       break;
+                       }
+
+                       // Don't need to mask high rates due to new rate adaptive parameters
+                       //if (pstat->is_broadcom_sta)           // use MCS12 as the highest rate vs. Broadcom sta
+                       //      pstat->tx_ra_bitmap &= 0x81ffffff;
+
+                       // NIC driver will report not supporting MCS15 and MCS14 in asoc req
+                       //if (pstat->is_rtl8190_sta && !pstat->is_2t_mimo_sta)
+                       //      pstat->tx_ra_bitmap &= 0x83ffffff;              // if Realtek 1x2 sta, don't use MCS15 and MCS14
+               }
+       }
+       else if ((priv->pmib->dot11BssType.net_work_type & WIRELESS_11G) && isErpSta(pstat))
+       {
+               switch (pstat->rssi_level) {
+                       case 1:
+                               pstat->tx_ra_bitmap &= 0x00000f00;
+                               break;
+                       case 2:
+                               pstat->tx_ra_bitmap &= 0x00000ff0;
+                               break;
+                       case 3:
+                               pstat->tx_ra_bitmap &= 0x00000ff5;
+                               break;
+               }
+       }
+       else
+       {
+               pstat->tx_ra_bitmap &= 0x0000000d;
+       }
+
+       // disable tx short GI when station cannot rx MCS15(AP is 2T2R)
+       // disable tx short GI when station cannot rx MCS7 (AP is 1T2R or 1T1R)
+       // if there is only 1r STA and we are 2T2R, DO NOT mask SGI rate
+       if ((!(pstat->tx_ra_bitmap & 0x8000000) && (priv->pshare->has_2r_sta > 0) && (get_rf_mimo_mode(padapter) == RTL8712_RF_2T2R)) ||
+                (!(pstat->tx_ra_bitmap & 0x80000) && (get_rf_mimo_mode(padapter) != RTL8712_RF_2T2R)))
+       {
+               pstat->tx_ra_bitmap &= ~BIT(28);
+       }
+#endif
+
+       if ( pcur_network->Configuration.DSConfig > 14 ) {
+               // 5G band
+               if (tx_ra_bitmap & 0xffff000)
+                       sta_band |= WIRELESS_11_5N | WIRELESS_11A;
+               else
+                       sta_band |= WIRELESS_11A;
+       } else {
+               if (tx_ra_bitmap & 0xffff000)
+                       sta_band |= WIRELESS_11_24N | WIRELESS_11G | WIRELESS_11B;
+               else if (tx_ra_bitmap & 0xff0)
+                       sta_band |= WIRELESS_11G |WIRELESS_11B;
+               else
+                       sta_band |= WIRELESS_11B;
+       }
+
+       raid = networktype_to_raid(sta_band);
+       init_rate = get_highest_rate_idx(tx_ra_bitmap&0x0fffffff)&0x3f;
+
+       if (psta->aid < NUM_STA)
+       {
+               u8 arg = 0;
+
+               arg = psta->mac_id&0x1f;
+
+               arg |= BIT(7);//support entry 2~31
+
+               if (shortGIrate==_TRUE)
+                       arg |= BIT(5);
+
+               tx_ra_bitmap |= ((raid<<28)&0xf0000000);
+
+               DBG_871X("%s=> mac_id:%d , raid:%d , bitmap=0x%x, arg=0x%x\n",
+                       __FUNCTION__ , psta->mac_id, raid ,tx_ra_bitmap, arg);
+
+               //bitmap[0:27] = tx_rate_bitmap
+               //bitmap[28:31]= Rate Adaptive id
+               //arg[0:4] = macid
+               //arg[5] = Short GI
+               rtw_hal_add_ra_tid(padapter, tx_ra_bitmap, arg);
+
+               if (shortGIrate==_TRUE)
+                       init_rate |= BIT(6);
+
+               //set ra_id, init_rate
+               psta->raid = raid;
+               psta->init_rate = init_rate;
+
+       }
+       else
+       {
+               DBG_871X("station aid %d exceed the max number\n", psta->aid);
+       }
+
+}
+
+static void update_bmc_sta(_adapter *padapter)
+{
+       _irqL   irqL;
+       u32 init_rate=0;
+       unsigned char   network_type, raid;
+       int i, supportRateNum = 0;
+       unsigned int tx_ra_bitmap=0;
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+       WLAN_BSSID_EX *pcur_network = (WLAN_BSSID_EX *)&pmlmepriv->cur_network.network;
+       struct sta_info *psta = rtw_get_bcmc_stainfo(padapter);
+
+       if(psta)
+       {
+               psta->aid = 0;//default set to 0
+               //psta->mac_id = psta->aid+4;
+               psta->mac_id = psta->aid + 1;
+
+               psta->qos_option = 0;
+               psta->htpriv.ht_option = _FALSE;
+
+               psta->ieee8021x_blocked = 0;
+
+               _rtw_memset((void*)&psta->sta_stats, 0, sizeof(struct stainfo_stats));
+
+               //psta->dot118021XPrivacy = _NO_PRIVACY_;//!!! remove it, because it has been set before this.
+
+
+
+               //prepare for add_RATid
+               supportRateNum = rtw_get_rateset_len((u8*)&pcur_network->SupportedRates);
+               network_type = rtw_check_network_type((u8*)&pcur_network->SupportedRates, supportRateNum, 1);
+
+               _rtw_memcpy(psta->bssrateset, &pcur_network->SupportedRates, supportRateNum);
+               psta->bssratelen = supportRateNum;
+
+               //b/g mode ra_bitmap
+               for (i=0; i<supportRateNum; i++)
+               {
+                       if (psta->bssrateset[i])
+                               tx_ra_bitmap |= rtw_get_bit_value_from_ieee_value(psta->bssrateset[i]&0x7f);
+               }
+
+               if ( pcur_network->Configuration.DSConfig > 14 ) {
+                       //force to A mode. 5G doesn't support CCK rates
+                       network_type = WIRELESS_11A;
+                       tx_ra_bitmap = 0x150; // 6, 12, 24 Mbps
+               } else {
+                       //force to b mode
+                       network_type = WIRELESS_11B;
+                       tx_ra_bitmap = 0xf;
+               }
+
+               //tx_ra_bitmap = update_basic_rate(pcur_network->SupportedRates, supportRateNum);
+
+               raid = networktype_to_raid(network_type);
+               init_rate = get_highest_rate_idx(tx_ra_bitmap&0x0fffffff)&0x3f;
+
+               //DBG_871X("Add id %d val %08x to ratr for bmc sta\n", psta->aid, tx_ra_bitmap);
+
+               //if(pHalData->fw_ractrl == _TRUE)
+               {
+                       u8 arg = 0;
+
+                       arg = psta->mac_id&0x1f;
+
+                       arg |= BIT(7);
+
+                       //if (shortGIrate==_TRUE)
+                       //      arg |= BIT(5);
+
+                       tx_ra_bitmap |= ((raid<<28)&0xf0000000);
+
+                       DBG_871X("update_bmc_sta, mask=0x%x, arg=0x%x\n", tx_ra_bitmap, arg);
+
+                       //bitmap[0:27] = tx_rate_bitmap
+                       //bitmap[28:31]= Rate Adaptive id
+                       //arg[0:4] = macid
+                       //arg[5] = Short GI
+                       rtw_hal_add_ra_tid(padapter, tx_ra_bitmap, arg);
+
+               }
+
+               //set ra_id, init_rate
+               psta->raid = raid;
+               psta->init_rate = init_rate;
+
+               _enter_critical_bh(&psta->lock, &irqL);
+               psta->state = _FW_LINKED;
+               _exit_critical_bh(&psta->lock, &irqL);
+
+       }
+       else
+       {
+               DBG_871X("add_RATid_bmc_sta error!\n");
+       }
+
+}
+
+//notes:
+//AID: 1~MAX for sta and 0 for bc/mc in ap/adhoc mode
+//MAC_ID = AID+1 for sta in ap/adhoc mode
+//MAC_ID = 1 for bc/mc for sta/ap/adhoc
+//MAC_ID = 0 for bssid for sta/ap/adhoc
+//CAM_ID = //0~3 for default key, cmd_id=macid + 3, macid=aid+1;
+
+void update_sta_info_apmode(_adapter *padapter, struct sta_info *psta)
+{
+       _irqL   irqL;
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+       struct security_priv *psecuritypriv = &padapter->securitypriv;
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct ht_priv  *phtpriv_ap = &pmlmepriv->htpriv;
+       struct ht_priv  *phtpriv_sta = &psta->htpriv;
+
+       //set intf_tag to if1
+       //psta->intf_tag = 0;
+
+       //psta->mac_id = psta->aid+4;
+       psta->mac_id = psta->aid+1;
+
+       if(psecuritypriv->dot11AuthAlgrthm==dot11AuthAlgrthm_8021X)
+               psta->ieee8021x_blocked = _TRUE;
+       else
+               psta->ieee8021x_blocked = _FALSE;
+
+
+       //update sta's cap
+
+       //ERP
+       VCS_update(padapter, psta);
+
+       //HT related cap
+       if(phtpriv_sta->ht_option)
+       {
+               //check if sta supports rx ampdu
+               phtpriv_sta->ampdu_enable = phtpriv_ap->ampdu_enable;
+
+               //check if sta support s Short GI
+               if((phtpriv_sta->ht_cap.cap_info & phtpriv_ap->ht_cap.cap_info) & cpu_to_le16(IEEE80211_HT_CAP_SGI_20|IEEE80211_HT_CAP_SGI_40))
+               {
+                       phtpriv_sta->sgi = _TRUE;
+               }
+
+               // bwmode
+               if((phtpriv_sta->ht_cap.cap_info & phtpriv_ap->ht_cap.cap_info) & cpu_to_le16(IEEE80211_HT_CAP_SUP_WIDTH))
+               {
+                       //phtpriv_sta->bwmode = HT_CHANNEL_WIDTH_40;
+                       phtpriv_sta->bwmode = pmlmeext->cur_bwmode;
+                       phtpriv_sta->ch_offset = pmlmeext->cur_ch_offset;
+
+               }
+
+               psta->qos_option = _TRUE;
+
+       }
+       else
+       {
+               phtpriv_sta->ampdu_enable = _FALSE;
+
+               phtpriv_sta->sgi = _FALSE;
+               phtpriv_sta->bwmode = HT_CHANNEL_WIDTH_20;
+               phtpriv_sta->ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+       }
+
+       //Rx AMPDU
+       send_delba(padapter, 0, psta->hwaddr);// recipient
+
+       //TX AMPDU
+       send_delba(padapter, 1, psta->hwaddr);// // originator
+       phtpriv_sta->agg_enable_bitmap = 0x0;//reset
+       phtpriv_sta->candidate_tid_bitmap = 0x0;//reset
+
+
+       //todo: init other variables
+
+       _rtw_memset((void*)&psta->sta_stats, 0, sizeof(struct stainfo_stats));
+
+
+       //add ratid
+       //add_RATid(padapter, psta);//move to ap_sta_info_defer_update()
+
+
+       _enter_critical_bh(&psta->lock, &irqL);
+       psta->state |= _FW_LINKED;
+       _exit_critical_bh(&psta->lock, &irqL);
+
+
+}
+
+static void update_hw_ht_param(_adapter *padapter)
+{
+       unsigned char           max_AMPDU_len;
+       unsigned char           min_MPDU_spacing;
+       struct registry_priv     *pregpriv = &padapter->registrypriv;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       DBG_871X("%s\n", __FUNCTION__);
+
+
+       //handle A-MPDU parameter field
+       /*
+               AMPDU_para [1:0]:Max AMPDU Len => 0:8k , 1:16k, 2:32k, 3:64k
+               AMPDU_para [4:2]:Min MPDU Start Spacing
+       */
+       max_AMPDU_len = pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x03;
+
+       min_MPDU_spacing = (pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x1c) >> 2;
+
+       rtw_hal_set_hwreg(padapter, HW_VAR_AMPDU_MIN_SPACE, (u8 *)(&min_MPDU_spacing));
+
+       rtw_hal_set_hwreg(padapter, HW_VAR_AMPDU_FACTOR, (u8 *)(&max_AMPDU_len));
+
+       //
+       // Config SM Power Save setting
+       //
+       pmlmeinfo->SM_PS = (pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info & 0x0C) >> 2;
+       if(pmlmeinfo->SM_PS == WLAN_HT_CAP_SM_PS_STATIC)
+       {
+               /*u8 i;
+               //update the MCS rates
+               for (i = 0; i < 16; i++)
+               {
+                       pmlmeinfo->HT_caps.HT_cap_element.MCS_rate[i] &= MCS_rate_1R[i];
+               }*/
+               DBG_871X("%s(): WLAN_HT_CAP_SM_PS_STATIC\n",__FUNCTION__);
+       }
+
+       //
+       // Config current HT Protection mode.
+       //
+       //pmlmeinfo->HT_protection = pmlmeinfo->HT_info.infos[1] & 0x3;
+
+}
+
+static void start_bss_network(_adapter *padapter, u8 *pbuf)
+{
+       u8 *p;
+       u8 val8, cur_channel, cur_bwmode, cur_ch_offset;
+       u16 bcn_interval;
+       u32     acparm;
+       int     ie_len;
+       struct registry_priv     *pregpriv = &padapter->registrypriv;
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+       struct security_priv* psecuritypriv=&(padapter->securitypriv);
+       WLAN_BSSID_EX *pnetwork = (WLAN_BSSID_EX *)&pmlmepriv->cur_network.network;
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       WLAN_BSSID_EX *pnetwork_mlmeext = &(pmlmeinfo->network);
+       struct HT_info_element *pht_info=NULL;
+#ifdef CONFIG_P2P
+       struct wifidirect_info  *pwdinfo = &(padapter->wdinfo);
+#endif //CONFIG_P2P
+       u8 cbw40_enable=0;
+       u8 change_band = _FALSE;
+       //DBG_871X("%s\n", __FUNCTION__);
+
+       bcn_interval = (u16)pnetwork->Configuration.BeaconPeriod;
+       cur_channel = pnetwork->Configuration.DSConfig;
+       cur_bwmode = HT_CHANNEL_WIDTH_20;;
+       cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+
+
+       //check if there is wps ie,
+       //if there is wpsie in beacon, the hostapd will update beacon twice when stating hostapd,
+       //and at first time the security ie ( RSN/WPA IE) will not include in beacon.
+       if(NULL == rtw_get_wps_ie(pnetwork->IEs+_FIXED_IE_LENGTH_, pnetwork->IELength-_FIXED_IE_LENGTH_, NULL, NULL))
+       {
+               pmlmeext->bstart_bss = _TRUE;
+       }
+
+       //todo: update wmm, ht cap
+       //pmlmeinfo->WMM_enable;
+       //pmlmeinfo->HT_enable;
+       if(pmlmepriv->qospriv.qos_option)
+               pmlmeinfo->WMM_enable = _TRUE;
+
+       if(pmlmepriv->htpriv.ht_option)
+       {
+               pmlmeinfo->WMM_enable = _TRUE;
+               pmlmeinfo->HT_enable = _TRUE;
+               //pmlmeinfo->HT_info_enable = _TRUE;
+               //pmlmeinfo->HT_caps_enable = _TRUE;
+
+               update_hw_ht_param(padapter);
+       }
+
+
+       if(pmlmepriv->cur_network.join_res != _TRUE) //setting only at  first time
+       {
+               //WEP Key will be set before this function, do not clear CAM.
+               if ((psecuritypriv->dot11PrivacyAlgrthm != _WEP40_) && (psecuritypriv->dot11PrivacyAlgrthm != _WEP104_))
+                       flush_all_cam_entry(padapter);  //clear CAM
+       }
+
+       //set MSR to AP_Mode
+       Set_MSR(padapter, _HW_STATE_AP_);
+
+       //Set BSSID REG
+       rtw_hal_set_hwreg(padapter, HW_VAR_BSSID, pnetwork->MacAddress);
+
+       //Set EDCA param reg
+#ifdef CONFIG_CONCURRENT_MODE
+       acparm = 0x005ea42b;
+#else
+       acparm = 0x002F3217; // VO
+#endif
+       rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VO, (u8 *)(&acparm));
+       acparm = 0x005E4317; // VI
+       rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VI, (u8 *)(&acparm));
+       //acparm = 0x00105320; // BE
+       acparm = 0x005ea42b;
+       rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BE, (u8 *)(&acparm));
+       acparm = 0x0000A444; // BK
+       rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BK, (u8 *)(&acparm));
+
+       //Set Security
+       val8 = (psecuritypriv->dot11AuthAlgrthm == dot11AuthAlgrthm_8021X)? 0xcc: 0xcf;
+       rtw_hal_set_hwreg(padapter, HW_VAR_SEC_CFG, (u8 *)(&val8));
+
+       //Beacon Control related register
+       rtw_hal_set_hwreg(padapter, HW_VAR_BEACON_INTERVAL, (u8 *)(&bcn_interval));
+
+       if(pmlmepriv->cur_network.join_res != _TRUE) //setting only at  first time
+       {
+               u32 initialgain;
+
+               initialgain = 0x1e;
+
+
+               //disable dynamic functions, such as high power, DIG
+               //Save_DM_Func_Flag(padapter);
+               //Switch_DM_Func(padapter, DYNAMIC_FUNC_DISABLE, _FALSE);
+
+#ifdef CONFIG_CONCURRENT_MODE
+               if(padapter->adapter_type > PRIMARY_ADAPTER)
+               {
+                       if(rtw_buddy_adapter_up(padapter))
+                       {
+                               _adapter *pbuddy_adapter = padapter->pbuddy_adapter;
+
+                               //turn on dynamic functions on PRIMARY_ADAPTER, dynamic functions only runs at PRIMARY_ADAPTER
+                               Switch_DM_Func(pbuddy_adapter, DYNAMIC_FUNC_DIG|DYNAMIC_FUNC_HP|DYNAMIC_FUNC_SS, _TRUE);
+
+                               rtw_hal_set_hwreg(pbuddy_adapter, HW_VAR_INITIAL_GAIN, (u8 *)(&initialgain));
+                       }
+               }
+               else
+#endif
+               {
+                       //turn on dynamic functions
+                       Switch_DM_Func(padapter, DYNAMIC_FUNC_DIG|DYNAMIC_FUNC_HP|DYNAMIC_FUNC_SS, _TRUE);
+
+                       rtw_hal_set_hwreg(padapter, HW_VAR_INITIAL_GAIN, (u8 *)(&initialgain));
+               }
+
+       }
+
+       //set channel, bwmode
+       p = rtw_get_ie((pnetwork->IEs + sizeof(NDIS_802_11_FIXED_IEs)), _HT_ADD_INFO_IE_, &ie_len, (pnetwork->IELength - sizeof(NDIS_802_11_FIXED_IEs)));
+       if( p && ie_len)
+       {
+               pht_info = (struct HT_info_element *)(p+2);
+
+               if( pmlmeext->cur_channel > 14 )
+               {
+                       if( pregpriv->cbw40_enable & BIT(1) )
+                               cbw40_enable = 1;
+               }
+               else
+                       if( pregpriv->cbw40_enable & BIT(0) )
+                               cbw40_enable = 1;
+
+               if ((cbw40_enable) &&    (pht_info->infos[0] & BIT(2)))
+               {
+                       //switch to the 40M Hz mode
+                       //pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_40;
+                       cur_bwmode = HT_CHANNEL_WIDTH_40;
+                       switch (pht_info->infos[0] & 0x3)
+                       {
+                               case 1:
+                                       //pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
+                                       cur_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
+                                       break;
+
+                               case 3:
+                                       //pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
+                                       cur_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
+                                       break;
+
+                               default:
+                                       //pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+                                       cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+                                       break;
+                       }
+
+               }
+
+       }
+
+#ifdef CONFIG_DUALMAC_CONCURRENT
+       dc_set_ap_channel_bandwidth(padapter, cur_channel, cur_ch_offset, cur_bwmode);
+#else
+       //TODO: need to judge the phy parameters on concurrent mode for single phy
+       //set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
+#ifdef CONFIG_CONCURRENT_MODE
+       if(!check_buddy_fwstate(padapter, _FW_LINKED|_FW_UNDER_LINKING|_FW_UNDER_SURVEY))
+       {
+               set_channel_bwmode(padapter, cur_channel, cur_ch_offset, cur_bwmode);
+       }
+       else if(check_buddy_fwstate(padapter, _FW_LINKED)==_TRUE)//only second adapter can enter AP Mode
+       {
+               _adapter *pbuddy_adapter = padapter->pbuddy_adapter;
+               struct mlme_ext_priv *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
+
+               //To sync cur_channel/cur_bwmode/cur_ch_offset with primary adapter
+               DBG_871X("primary iface is at linked state, sync cur_channel/cur_bwmode/cur_ch_offset\n");
+               DBG_871X("primary adapter, CH=%d, BW=%d, offset=%d\n", pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_bwmode, pbuddy_mlmeext->cur_ch_offset);
+               DBG_871X("second adapter, CH=%d, BW=%d, offset=%d\n", cur_channel, cur_bwmode, cur_ch_offset);
+
+               if((cur_channel <= 14 && pbuddy_mlmeext->cur_channel >= 36) ||
+               (cur_channel >= 36 && pbuddy_mlmeext->cur_channel <= 14))
+                       change_band = _TRUE;
+
+               cur_channel = pbuddy_mlmeext->cur_channel;
+               if(cur_bwmode == HT_CHANNEL_WIDTH_40)
+               {
+                       if(pht_info)
+                               pht_info->infos[0] &= ~(BIT(0)|BIT(1));
+
+                       if(pbuddy_mlmeext->cur_bwmode == HT_CHANNEL_WIDTH_40)
+                       {
+                               cur_ch_offset = pbuddy_mlmeext->cur_ch_offset;
+
+                               //to update cur_ch_offset value in beacon
+                               if(pht_info)
+                               {
+                                       switch(cur_ch_offset)
+                                       {
+                                               case HAL_PRIME_CHNL_OFFSET_LOWER:
+                                                       pht_info->infos[0] |= 0x1;
+                                                       break;
+                                               case HAL_PRIME_CHNL_OFFSET_UPPER:
+                                                       pht_info->infos[0] |= 0x3;
+                                                       break;
+                                               case HAL_PRIME_CHNL_OFFSET_DONT_CARE:
+                                               default:
+                                                       break;
+                                       }
+                               }
+
+                       }
+                       else if(pbuddy_mlmeext->cur_bwmode == HT_CHANNEL_WIDTH_20)
+                       {
+                               cur_bwmode = HT_CHANNEL_WIDTH_20;
+                               cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+
+                               if(cur_channel>0 && cur_channel<5)
+                               {
+                                       if(pht_info)
+                                               pht_info->infos[0] |= 0x1;
+
+                                       cur_bwmode = HT_CHANNEL_WIDTH_40;
+                                       cur_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
+                               }
+
+                               if(cur_channel>7 && cur_channel<(14+1))
+                               {
+                                       if(pht_info)
+                                               pht_info->infos[0] |= 0x3;
+
+                                       cur_bwmode = HT_CHANNEL_WIDTH_40;
+                                       cur_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
+                               }
+
+                               set_channel_bwmode(padapter, cur_channel, cur_ch_offset, cur_bwmode);
+                       }
+
+               }
+
+               // to update channel value in beacon
+               pnetwork->Configuration.DSConfig = cur_channel;
+               p = rtw_get_ie((pnetwork->IEs + sizeof(NDIS_802_11_FIXED_IEs)), _DSSET_IE_, &ie_len, (pnetwork->IELength - sizeof(NDIS_802_11_FIXED_IEs)));
+               if(p && ie_len>0)
+                       *(p + 2) = cur_channel;
+
+               if(pht_info)
+                       pht_info->primary_channel = cur_channel;
+
+               //set buddy adapter channel, bandwidth, offeset to current adapter
+               pmlmeext->cur_channel = cur_channel;
+               pmlmeext->cur_bwmode = cur_bwmode;
+               pmlmeext->cur_ch_offset = cur_ch_offset;
+
+               //buddy interface band is different from current interface, update ERP, support rate, ext support rate IE
+               if(change_band == _TRUE)
+                       change_band_update_ie(padapter, pnetwork);
+       }
+#else
+       set_channel_bwmode(padapter, cur_channel, cur_ch_offset, cur_bwmode);
+#endif //CONFIG_CONCURRENT_MODE
+
+       DBG_871X("CH=%d, BW=%d, offset=%d\n", cur_channel, cur_bwmode, cur_ch_offset);
+
+       //
+       pmlmeext->cur_channel = cur_channel;
+       pmlmeext->cur_bwmode = cur_bwmode;
+       pmlmeext->cur_ch_offset = cur_ch_offset;
+#endif //CONFIG_DUALMAC_CONCURRENT
+       pmlmeext->cur_wireless_mode = pmlmepriv->cur_network.network_type;
+
+       //update cur_wireless_mode
+       update_wireless_mode(padapter);
+
+       //update RRSR after set channel and bandwidth
+       UpdateBrateTbl(padapter, pnetwork->SupportedRates);
+       rtw_hal_set_hwreg(padapter, HW_VAR_BASIC_RATE, pnetwork->SupportedRates);
+
+       //udpate capability after cur_wireless_mode updated
+       update_capinfo(padapter, rtw_get_capability((WLAN_BSSID_EX *)pnetwork));
+
+       //let pnetwork_mlmeext == pnetwork_mlme.
+       _rtw_memcpy(pnetwork_mlmeext, pnetwork, pnetwork->Length);
+
+#ifdef CONFIG_P2P
+       _rtw_memcpy(pwdinfo->p2p_group_ssid, pnetwork->Ssid.Ssid, pnetwork->Ssid.SsidLength);
+       pwdinfo->p2p_group_ssid_len = pnetwork->Ssid.SsidLength;
+#endif //CONFIG_P2P
+
+       if(_TRUE == pmlmeext->bstart_bss)
+       {
+               update_beacon(padapter, _TIM_IE_, NULL, _FALSE);
+
+#ifndef CONFIG_INTERRUPT_BASED_TXBCN //other case will  tx beacon when bcn interrupt coming in.
+#if defined(CONFIG_USB_HCI) || defined(CONFIG_SDIO_HCI) || defined(CONFIG_GSPI_HCI)
+               //issue beacon frame
+               if(send_beacon(padapter)==_FAIL)
+               {
+                       DBG_871X("issue_beacon, fail!\n");
+               }
+#endif
+#endif //!CONFIG_INTERRUPT_BASED_TXBCN
+
+       }
+
+
+       //update bc/mc sta_info
+       update_bmc_sta(padapter);
+
+       //pmlmeext->bstart_bss = _TRUE;
+
+}
+
+int rtw_check_beacon_data(_adapter *padapter, u8 *pbuf,  int len)
+{
+       int ret=_SUCCESS;
+       u8 *p;
+       u8 *pHT_caps_ie=NULL;
+       u8 *pHT_info_ie=NULL;
+       struct sta_info *psta = NULL;
+       u16 cap, ht_cap=_FALSE;
+       uint ie_len = 0;
+       int group_cipher, pairwise_cipher;
+       u8      channel, network_type, supportRate[NDIS_802_11_LENGTH_RATES_EX];
+       int supportRateNum = 0;
+       u8 OUI1[] = {0x00, 0x50, 0xf2,0x01};
+       u8 wps_oui[4]={0x0,0x50,0xf2,0x04};
+       u8 WMM_PARA_IE[] = {0x00, 0x50, 0xf2, 0x02, 0x01, 0x01};
+       struct registry_priv *pregistrypriv = &padapter->registrypriv;
+       struct security_priv *psecuritypriv = &padapter->securitypriv;
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+       WLAN_BSSID_EX *pbss_network = (WLAN_BSSID_EX *)&pmlmepriv->cur_network.network;
+       struct sta_priv *pstapriv = &padapter->stapriv;
+       u8 *ie = pbss_network->IEs;
+
+
+       /* SSID */
+       /* Supported rates */
+       /* DS Params */
+       /* WLAN_EID_COUNTRY */
+       /* ERP Information element */
+       /* Extended supported rates */
+       /* WPA/WPA2 */
+       /* Wi-Fi Wireless Multimedia Extensions */
+       /* ht_capab, ht_oper */
+       /* WPS IE */
+
+       DBG_871X("%s, len=%d\n", __FUNCTION__, len);
+
+       if(check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
+               return _FAIL;
+
+
+       if(len>MAX_IE_SZ)
+               return _FAIL;
+
+       pbss_network->IELength = len;
+
+       _rtw_memset(ie, 0, MAX_IE_SZ);
+
+       _rtw_memcpy(ie, pbuf, pbss_network->IELength);
+
+
+       if(pbss_network->InfrastructureMode!=Ndis802_11APMode)
+               return _FAIL;
+
+       pbss_network->Rssi = 0;
+
+       _rtw_memcpy(pbss_network->MacAddress, myid(&(padapter->eeprompriv)), ETH_ALEN);
+
+       //beacon interval
+       p = rtw_get_beacon_interval_from_ie(ie);//ie + 8;       // 8: TimeStamp, 2: Beacon Interval 2:Capability
+       //pbss_network->Configuration.BeaconPeriod = le16_to_cpu(*(unsigned short*)p);
+       pbss_network->Configuration.BeaconPeriod = RTW_GET_LE16(p);
+
+       //capability
+       //cap = *(unsigned short *)rtw_get_capability_from_ie(ie);
+       //cap = le16_to_cpu(cap);
+       cap = RTW_GET_LE16(ie);
+
+       //SSID
+       p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _SSID_IE_, &ie_len, (pbss_network->IELength -_BEACON_IE_OFFSET_));
+       if(p && ie_len>0)
+       {
+               _rtw_memset(&pbss_network->Ssid, 0, sizeof(NDIS_802_11_SSID));
+               _rtw_memcpy(pbss_network->Ssid.Ssid, (p + 2), ie_len);
+               pbss_network->Ssid.SsidLength = ie_len;
+       }
+
+       //chnnel
+       channel = 0;
+       pbss_network->Configuration.Length = 0;
+       p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _DSSET_IE_, &ie_len, (pbss_network->IELength - _BEACON_IE_OFFSET_));
+       if(p && ie_len>0)
+               channel = *(p + 2);
+
+       pbss_network->Configuration.DSConfig = channel;
+
+
+       _rtw_memset(supportRate, 0, NDIS_802_11_LENGTH_RATES_EX);
+       // get supported rates
+       p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _SUPPORTEDRATES_IE_, &ie_len, (pbss_network->IELength - _BEACON_IE_OFFSET_));
+       if (p !=  NULL)
+       {
+               _rtw_memcpy(supportRate, p+2, ie_len);
+               supportRateNum = ie_len;
+       }
+
+       //get ext_supported rates
+       p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _EXT_SUPPORTEDRATES_IE_, &ie_len, pbss_network->IELength - _BEACON_IE_OFFSET_);
+       if (p !=  NULL)
+       {
+               _rtw_memcpy(supportRate+supportRateNum, p+2, ie_len);
+               supportRateNum += ie_len;
+
+       }
+
+       network_type = rtw_check_network_type(supportRate, supportRateNum, channel);
+
+       rtw_set_supported_rate(pbss_network->SupportedRates, network_type);
+
+
+       //parsing ERP_IE
+       p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _ERPINFO_IE_, &ie_len, (pbss_network->IELength - _BEACON_IE_OFFSET_));
+       if(p && ie_len>0)
+       {
+               ERP_IE_handler(padapter, (PNDIS_802_11_VARIABLE_IEs)p);
+       }
+
+       //update privacy/security
+       if (cap & BIT(4))
+               pbss_network->Privacy = 1;
+       else
+               pbss_network->Privacy = 0;
+
+       psecuritypriv->wpa_psk = 0;
+
+       //wpa2
+       group_cipher = 0; pairwise_cipher = 0;
+       psecuritypriv->wpa2_group_cipher = _NO_PRIVACY_;
+       psecuritypriv->wpa2_pairwise_cipher = _NO_PRIVACY_;
+       p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _RSN_IE_2_, &ie_len, (pbss_network->IELength - _BEACON_IE_OFFSET_));
+       if(p && ie_len>0)
+       {
+               if(rtw_parse_wpa2_ie(p, ie_len+2, &group_cipher, &pairwise_cipher) == _SUCCESS)
+               {
+                       psecuritypriv->dot11AuthAlgrthm= dot11AuthAlgrthm_8021X;
+
+                       psecuritypriv->dot8021xalg = 1;//psk,  todo:802.1x
+                       psecuritypriv->wpa_psk |= BIT(1);
+
+                       psecuritypriv->wpa2_group_cipher = group_cipher;
+                       psecuritypriv->wpa2_pairwise_cipher = pairwise_cipher;
+#if 0
+                       switch(group_cipher)
+                       {
+                               case WPA_CIPHER_NONE:
+                               psecuritypriv->wpa2_group_cipher = _NO_PRIVACY_;
+                               break;
+                               case WPA_CIPHER_WEP40:
+                               psecuritypriv->wpa2_group_cipher = _WEP40_;
+                               break;
+                               case WPA_CIPHER_TKIP:
+                               psecuritypriv->wpa2_group_cipher = _TKIP_;
+                               break;
+                               case WPA_CIPHER_CCMP:
+                               psecuritypriv->wpa2_group_cipher = _AES_;
+                               break;
+                               case WPA_CIPHER_WEP104:
+                               psecuritypriv->wpa2_group_cipher = _WEP104_;
+                               break;
+                       }
+
+                       switch(pairwise_cipher)
+                       {
+                               case WPA_CIPHER_NONE:
+                               psecuritypriv->wpa2_pairwise_cipher = _NO_PRIVACY_;
+                               break;
+                               case WPA_CIPHER_WEP40:
+                               psecuritypriv->wpa2_pairwise_cipher = _WEP40_;
+                               break;
+                               case WPA_CIPHER_TKIP:
+                               psecuritypriv->wpa2_pairwise_cipher = _TKIP_;
+                               break;
+                               case WPA_CIPHER_CCMP:
+                               psecuritypriv->wpa2_pairwise_cipher = _AES_;
+                               break;
+                               case WPA_CIPHER_WEP104:
+                               psecuritypriv->wpa2_pairwise_cipher = _WEP104_;
+                               break;
+                       }
+#endif
+               }
+
+       }
+
+       //wpa
+       ie_len = 0;
+       group_cipher = 0; pairwise_cipher = 0;
+       psecuritypriv->wpa_group_cipher = _NO_PRIVACY_;
+       psecuritypriv->wpa_pairwise_cipher = _NO_PRIVACY_;
+       for (p = ie + _BEACON_IE_OFFSET_; ;p += (ie_len + 2))
+       {
+               p = rtw_get_ie(p, _SSN_IE_1_, &ie_len, (pbss_network->IELength - _BEACON_IE_OFFSET_ - (ie_len + 2)));
+               if ((p) && (_rtw_memcmp(p+2, OUI1, 4)))
+               {
+                       if(rtw_parse_wpa_ie(p, ie_len+2, &group_cipher, &pairwise_cipher) == _SUCCESS)
+                       {
+                               psecuritypriv->dot11AuthAlgrthm= dot11AuthAlgrthm_8021X;
+
+                               psecuritypriv->dot8021xalg = 1;//psk,  todo:802.1x
+
+                               psecuritypriv->wpa_psk |= BIT(0);
+
+                               psecuritypriv->wpa_group_cipher = group_cipher;
+                               psecuritypriv->wpa_pairwise_cipher = pairwise_cipher;
+
+#if 0
+                               switch(group_cipher)
+                               {
+                                       case WPA_CIPHER_NONE:
+                                       psecuritypriv->wpa_group_cipher = _NO_PRIVACY_;
+                                       break;
+                                       case WPA_CIPHER_WEP40:
+                                       psecuritypriv->wpa_group_cipher = _WEP40_;
+                                       break;
+                                       case WPA_CIPHER_TKIP:
+                                       psecuritypriv->wpa_group_cipher = _TKIP_;
+                                       break;
+                                       case WPA_CIPHER_CCMP:
+                                       psecuritypriv->wpa_group_cipher = _AES_;
+                                       break;
+                                       case WPA_CIPHER_WEP104:
+                                       psecuritypriv->wpa_group_cipher = _WEP104_;
+                                       break;
+                               }
+
+                               switch(pairwise_cipher)
+                               {
+                                       case WPA_CIPHER_NONE:
+                                       psecuritypriv->wpa_pairwise_cipher = _NO_PRIVACY_;
+                                       break;
+                                       case WPA_CIPHER_WEP40:
+                                       psecuritypriv->wpa_pairwise_cipher = _WEP40_;
+                                       break;
+                                       case WPA_CIPHER_TKIP:
+                                       psecuritypriv->wpa_pairwise_cipher = _TKIP_;
+                                       break;
+                                       case WPA_CIPHER_CCMP:
+                                       psecuritypriv->wpa_pairwise_cipher = _AES_;
+                                       break;
+                                       case WPA_CIPHER_WEP104:
+                                       psecuritypriv->wpa_pairwise_cipher = _WEP104_;
+                                       break;
+                               }
+#endif
+                       }
+
+                       break;
+
+               }
+
+               if ((p == NULL) || (ie_len == 0))
+               {
+                               break;
+               }
+
+       }
+
+       //wmm
+       ie_len = 0;
+       pmlmepriv->qospriv.qos_option = 0;
+       if(pregistrypriv->wmm_enable)
+       {
+               for (p = ie + _BEACON_IE_OFFSET_; ;p += (ie_len + 2))
+               {
+                       p = rtw_get_ie(p, _VENDOR_SPECIFIC_IE_, &ie_len, (pbss_network->IELength - _BEACON_IE_OFFSET_ - (ie_len + 2)));
+                       if((p) && _rtw_memcmp(p+2, WMM_PARA_IE, 6))
+                       {
+                               pmlmepriv->qospriv.qos_option = 1;
+
+                               *(p+8) |= BIT(7);//QoS Info, support U-APSD
+
+                               /* disable all ACM bits since the WMM admission control is not supported */
+                               *(p + 10) &= ~BIT(4); /* BE */
+                               *(p + 14) &= ~BIT(4); /* BK */
+                               *(p + 18) &= ~BIT(4); /* VI */
+                               *(p + 22) &= ~BIT(4); /* VO */
+
+                               break;
+                       }
+
+                       if ((p == NULL) || (ie_len == 0))
+                       {
+                               break;
+                       }
+               }
+       }
+
+       //parsing HT_CAP_IE
+       p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _HT_CAPABILITY_IE_, &ie_len, (pbss_network->IELength - _BEACON_IE_OFFSET_));
+       if(p && ie_len>0)
+       {
+               u8 rf_type;
+
+               struct rtw_ieee80211_ht_cap *pht_cap = (struct rtw_ieee80211_ht_cap *)(p+2);
+
+               pHT_caps_ie=p;
+
+
+               ht_cap = _TRUE;
+               network_type |= WIRELESS_11_24N;
+
+
+               rtw_hal_get_hwreg(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
+
+               if((psecuritypriv->wpa_pairwise_cipher & WPA_CIPHER_CCMP) ||
+                       (psecuritypriv->wpa2_pairwise_cipher & WPA_CIPHER_CCMP))
+               {
+                       pht_cap->ampdu_params_info |= (IEEE80211_HT_CAP_AMPDU_DENSITY&(0x07<<2));
+               }
+               else
+               {
+                       pht_cap->ampdu_params_info |= (IEEE80211_HT_CAP_AMPDU_DENSITY&0x00);
+               }
+
+               pht_cap->ampdu_params_info |= (IEEE80211_HT_CAP_AMPDU_FACTOR & 0x03); //set  Max Rx AMPDU size  to 64K
+
+               if(rf_type == RF_1T1R)
+               {
+                       pht_cap->supp_mcs_set[0] = 0xff;
+                       pht_cap->supp_mcs_set[1] = 0x0;
+               }
+
+               _rtw_memcpy(&pmlmepriv->htpriv.ht_cap, p+2, ie_len);
+
+       }
+
+       //parsing HT_INFO_IE
+       p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _HT_ADD_INFO_IE_, &ie_len, (pbss_network->IELength - _BEACON_IE_OFFSET_));
+       if(p && ie_len>0)
+       {
+               pHT_info_ie=p;
+       }
+
+       switch(network_type)
+       {
+               case WIRELESS_11B:
+                       pbss_network->NetworkTypeInUse = Ndis802_11DS;
+                       break;
+               case WIRELESS_11G:
+               case WIRELESS_11BG:
+             case WIRELESS_11G_24N:
+               case WIRELESS_11BG_24N:
+                       pbss_network->NetworkTypeInUse = Ndis802_11OFDM24;
+                       break;
+               case WIRELESS_11A:
+                       pbss_network->NetworkTypeInUse = Ndis802_11OFDM5;
+                       break;
+               default :
+                       pbss_network->NetworkTypeInUse = Ndis802_11OFDM24;
+                       break;
+       }
+
+       pmlmepriv->cur_network.network_type = network_type;
+
+
+       pmlmepriv->htpriv.ht_option = _FALSE;
+#ifdef CONFIG_80211N_HT
+       if( (psecuritypriv->wpa2_pairwise_cipher&WPA_CIPHER_TKIP) ||
+                     (psecuritypriv->wpa_pairwise_cipher&WPA_CIPHER_TKIP))
+       {
+               //todo:
+               //ht_cap = _FALSE;
+       }
+
+       //ht_cap
+       if(pregistrypriv->ht_enable && ht_cap==_TRUE)
+       {
+               pmlmepriv->htpriv.ht_option = _TRUE;
+               pmlmepriv->qospriv.qos_option = 1;
+
+               if(pregistrypriv->ampdu_enable==1)
+               {
+                       pmlmepriv->htpriv.ampdu_enable = _TRUE;
+               }
+
+               HT_caps_handler(padapter, (PNDIS_802_11_VARIABLE_IEs)pHT_caps_ie);
+
+               HT_info_handler(padapter, (PNDIS_802_11_VARIABLE_IEs)pHT_info_ie);
+       }
+#endif
+
+
+       pbss_network->Length = get_WLAN_BSSID_EX_sz((WLAN_BSSID_EX  *)pbss_network);
+
+       //issue beacon to start bss network
+       start_bss_network(padapter, (u8*)pbss_network);
+
+
+       //alloc sta_info for ap itself
+       psta = rtw_get_stainfo(&padapter->stapriv, pbss_network->MacAddress);
+       if(!psta)
+       {
+               psta = rtw_alloc_stainfo(&padapter->stapriv, pbss_network->MacAddress);
+               if (psta == NULL)
+               {
+                       return _FAIL;
+               }
+       }
+       psta->state |= WIFI_AP_STATE;           //Aries, add,fix bug of flush_cam_entry at STOP AP mode , 0724
+       rtw_indicate_connect( padapter);
+
+       pmlmepriv->cur_network.join_res = _TRUE;//for check if already set beacon
+
+       //update bc/mc sta_info
+       //update_bmc_sta(padapter);
+
+       return ret;
+
+}
+
+void rtw_set_macaddr_acl(_adapter *padapter, int mode)
+{
+       struct sta_priv *pstapriv = &padapter->stapriv;
+       struct wlan_acl_pool *pacl_list = &pstapriv->acl_list;
+
+       DBG_871X("%s, mode=%d\n", __func__, mode);
+
+       pacl_list->mode = mode;
+}
+
+int rtw_acl_add_sta(_adapter *padapter, u8 *addr)
+{
+       _irqL irqL;
+       _list   *plist, *phead;
+       u8 added = _FALSE;
+       int i, ret=0;
+       struct rtw_wlan_acl_node *paclnode;
+       struct sta_priv *pstapriv = &padapter->stapriv;
+       struct wlan_acl_pool *pacl_list = &pstapriv->acl_list;
+       _queue  *pacl_node_q =&pacl_list->acl_node_q;
+
+       DBG_871X("%s(acl_num=%d)=" MAC_FMT "\n", __func__, pacl_list->num, MAC_ARG(addr));
+
+       if((NUM_ACL-1) < pacl_list->num)
+               return (-1);
+
+
+       _enter_critical_bh(&(pacl_node_q->lock), &irqL);
+
+       phead = get_list_head(pacl_node_q);
+       plist = get_next(phead);
+
+       while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
+       {
+               paclnode = LIST_CONTAINOR(plist, struct rtw_wlan_acl_node, list);
+               plist = get_next(plist);
+
+               if(_rtw_memcmp(paclnode->addr, addr, ETH_ALEN))
+               {
+                       if(paclnode->valid == _TRUE)
+                       {
+                               added = _TRUE;
+                               DBG_871X("%s, sta has been added\n", __func__);
+                               break;
+                       }
+               }
+       }
+
+       _exit_critical_bh(&(pacl_node_q->lock), &irqL);
+
+
+       if(added == _TRUE)
+               return ret;
+
+
+       _enter_critical_bh(&(pacl_node_q->lock), &irqL);
+
+       for(i=0; i< NUM_ACL; i++)
+       {
+               paclnode = &pacl_list->aclnode[i];
+
+               if(paclnode->valid == _FALSE)
+               {
+                       _rtw_init_listhead(&paclnode->list);
+
+                       _rtw_memcpy(paclnode->addr, addr, ETH_ALEN);
+
+                       paclnode->valid = _TRUE;
+
+                       rtw_list_insert_tail(&paclnode->list, get_list_head(pacl_node_q));
+
+                       pacl_list->num++;
+
+                       break;
+               }
+       }
+
+       DBG_871X("%s, acl_num=%d\n", __func__, pacl_list->num);
+
+       _exit_critical_bh(&(pacl_node_q->lock), &irqL);
+
+       return ret;
+}
+
+int rtw_acl_remove_sta(_adapter *padapter, u8 *addr)
+{
+       _irqL irqL;
+       _list   *plist, *phead;
+       int i, ret=0;
+       struct rtw_wlan_acl_node *paclnode;
+       struct sta_priv *pstapriv = &padapter->stapriv;
+       struct wlan_acl_pool *pacl_list = &pstapriv->acl_list;
+       _queue  *pacl_node_q =&pacl_list->acl_node_q;
+
+       DBG_871X("%s(acl_num=%d)=" MAC_FMT "\n", __func__, pacl_list->num, MAC_ARG(addr));
+
+       _enter_critical_bh(&(pacl_node_q->lock), &irqL);
+
+       phead = get_list_head(pacl_node_q);
+       plist = get_next(phead);
+
+       while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
+       {
+               paclnode = LIST_CONTAINOR(plist, struct rtw_wlan_acl_node, list);
+               plist = get_next(plist);
+
+               if(_rtw_memcmp(paclnode->addr, addr, ETH_ALEN))
+               {
+                       if(paclnode->valid == _TRUE)
+                       {
+                               paclnode->valid = _FALSE;
+
+                               rtw_list_delete(&paclnode->list);
+
+                               pacl_list->num--;
+                       }
+               }
+       }
+
+       _exit_critical_bh(&(pacl_node_q->lock), &irqL);
+
+       DBG_871X("%s, acl_num=%d\n", __func__, pacl_list->num);
+
+       return ret;
+
+}
+
+#ifdef CONFIG_NATIVEAP_MLME
+
+static void update_bcn_fixed_ie(_adapter *padapter)
+{
+       DBG_871X("%s\n", __FUNCTION__);
+
+}
+
+static void update_bcn_erpinfo_ie(_adapter *padapter)
+{
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       WLAN_BSSID_EX *pnetwork = &(pmlmeinfo->network);
+       unsigned char *p, *ie = pnetwork->IEs;
+       u32 len = 0;
+
+       DBG_871X("%s, ERP_enable=%d\n", __FUNCTION__, pmlmeinfo->ERP_enable);
+
+       if(!pmlmeinfo->ERP_enable)
+               return;
+
+       //parsing ERP_IE
+       p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _ERPINFO_IE_, &len, (pnetwork->IELength - _BEACON_IE_OFFSET_));
+       if(p && len>0)
+       {
+               PNDIS_802_11_VARIABLE_IEs pIE = (PNDIS_802_11_VARIABLE_IEs)p;
+
+               if (pmlmepriv->num_sta_non_erp == 1)
+                       pIE->data[0] |= RTW_ERP_INFO_NON_ERP_PRESENT|RTW_ERP_INFO_USE_PROTECTION;
+               else
+                       pIE->data[0] &= ~(RTW_ERP_INFO_NON_ERP_PRESENT|RTW_ERP_INFO_USE_PROTECTION);
+
+               if(pmlmepriv->num_sta_no_short_preamble > 0)
+                       pIE->data[0] |= RTW_ERP_INFO_BARKER_PREAMBLE_MODE;
+               else
+                       pIE->data[0] &= ~(RTW_ERP_INFO_BARKER_PREAMBLE_MODE);
+
+               ERP_IE_handler(padapter, pIE);
+       }
+
+}
+
+static void update_bcn_htcap_ie(_adapter *padapter)
+{
+       DBG_871X("%s\n", __FUNCTION__);
+
+}
+
+static void update_bcn_htinfo_ie(_adapter *padapter)
+{
+       DBG_871X("%s\n", __FUNCTION__);
+
+}
+
+static void update_bcn_rsn_ie(_adapter *padapter)
+{
+       DBG_871X("%s\n", __FUNCTION__);
+
+}
+
+static void update_bcn_wpa_ie(_adapter *padapter)
+{
+       DBG_871X("%s\n", __FUNCTION__);
+
+}
+
+static void update_bcn_wmm_ie(_adapter *padapter)
+{
+       DBG_871X("%s\n", __FUNCTION__);
+
+}
+
+static void update_bcn_wps_ie(_adapter *padapter)
+{
+       u8 *pwps_ie=NULL, *pwps_ie_src, *premainder_ie, *pbackup_remainder_ie=NULL;
+       uint wps_ielen=0, wps_offset, remainder_ielen;
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       WLAN_BSSID_EX *pnetwork = &(pmlmeinfo->network);
+       unsigned char *ie = pnetwork->IEs;
+       u32 ielen = pnetwork->IELength;
+
+
+       DBG_871X("%s\n", __FUNCTION__);
+
+       pwps_ie = rtw_get_wps_ie(ie+_FIXED_IE_LENGTH_, ielen-_FIXED_IE_LENGTH_, NULL, &wps_ielen);
+
+       if(pwps_ie==NULL || wps_ielen==0)
+               return;
+
+       wps_offset = (uint)(pwps_ie-ie);
+
+       premainder_ie = pwps_ie + wps_ielen;
+
+       remainder_ielen = ielen - wps_offset - wps_ielen;
+
+       if(remainder_ielen>0)
+       {
+               pbackup_remainder_ie = rtw_malloc(remainder_ielen);
+               if(pbackup_remainder_ie)
+                       _rtw_memcpy(pbackup_remainder_ie, premainder_ie, remainder_ielen);
+       }
+
+
+       pwps_ie_src = pmlmepriv->wps_beacon_ie;
+       if(pwps_ie_src == NULL)
+               return;
+
+
+       wps_ielen = (uint)pwps_ie_src[1];//to get ie data len
+       if((wps_offset+wps_ielen+2+remainder_ielen)<=MAX_IE_SZ)
+       {
+               _rtw_memcpy(pwps_ie, pwps_ie_src, wps_ielen+2);
+               pwps_ie += (wps_ielen+2);
+
+               if(pbackup_remainder_ie)
+                       _rtw_memcpy(pwps_ie, pbackup_remainder_ie, remainder_ielen);
+
+               //update IELength
+               pnetwork->IELength = wps_offset + (wps_ielen+2) + remainder_ielen;
+       }
+
+       if(pbackup_remainder_ie)
+               rtw_mfree(pbackup_remainder_ie, remainder_ielen);
+
+}
+
+static void update_bcn_p2p_ie(_adapter *padapter)
+{
+
+}
+
+static void update_bcn_vendor_spec_ie(_adapter *padapter, u8*oui)
+{
+       DBG_871X("%s\n", __FUNCTION__);
+
+       if(_rtw_memcmp(RTW_WPA_OUI, oui, 4))
+       {
+               update_bcn_wpa_ie(padapter);
+       }
+       else if(_rtw_memcmp(WMM_OUI, oui, 4))
+       {
+               update_bcn_wmm_ie(padapter);
+       }
+       else if(_rtw_memcmp(WPS_OUI, oui, 4))
+       {
+               update_bcn_wps_ie(padapter);
+       }
+       else if(_rtw_memcmp(P2P_OUI, oui, 4))
+       {
+               update_bcn_p2p_ie(padapter);
+       }
+       else
+       {
+               DBG_871X("unknown OUI type!\n");
+       }
+
+
+}
+
+void update_beacon(_adapter *padapter, u8 ie_id, u8 *oui, u8 tx)
+{
+       _irqL irqL;
+       struct mlme_priv *pmlmepriv;
+       struct mlme_ext_priv    *pmlmeext;
+       //struct mlme_ext_info  *pmlmeinfo;
+
+       //DBG_871X("%s\n", __FUNCTION__);
+
+       if(!padapter)
+               return;
+
+       pmlmepriv = &(padapter->mlmepriv);
+       pmlmeext = &(padapter->mlmeextpriv);
+       //pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       if(_FALSE == pmlmeext->bstart_bss)
+               return;
+
+       _enter_critical_bh(&pmlmepriv->bcn_update_lock, &irqL);
+
+       switch(ie_id)
+       {
+               case 0xFF:
+
+                       update_bcn_fixed_ie(padapter);//8: TimeStamp, 2: Beacon Interval 2:Capability
+
+                       break;
+
+               case _TIM_IE_:
+
+                       update_BCNTIM(padapter);
+
+                       break;
+
+               case _ERPINFO_IE_:
+
+                       update_bcn_erpinfo_ie(padapter);
+
+                       break;
+
+               case _HT_CAPABILITY_IE_:
+
+                       update_bcn_htcap_ie(padapter);
+
+                       break;
+
+               case _RSN_IE_2_:
+
+                       update_bcn_rsn_ie(padapter);
+
+                       break;
+
+               case _HT_ADD_INFO_IE_:
+
+                       update_bcn_htinfo_ie(padapter);
+
+                       break;
+
+               case _VENDOR_SPECIFIC_IE_:
+
+                       update_bcn_vendor_spec_ie(padapter, oui);
+
+                       break;
+
+               default:
+                       break;
+       }
+
+       pmlmepriv->update_bcn = _TRUE;
+
+       _exit_critical_bh(&pmlmepriv->bcn_update_lock, &irqL);
+
+#ifndef CONFIG_INTERRUPT_BASED_TXBCN
+#if defined(CONFIG_USB_HCI) || defined(CONFIG_SDIO_HCI) || defined(CONFIG_GSPI_HCI)
+       if(tx)
+       {
+               //send_beacon(padapter);//send_beacon must execute on TSR level
+               set_tx_beacon_cmd(padapter);
+       }
+#else
+       {
+               //PCI will issue beacon when BCN interrupt occurs.
+       }
+#endif
+#endif //!CONFIG_INTERRUPT_BASED_TXBCN
+
+}
+
+#ifdef CONFIG_80211N_HT
+
+/*
+op_mode
+Set to 0 (HT pure) under the followign conditions
+       - all STAs in the BSS are 20/40 MHz HT in 20/40 MHz BSS or
+       - all STAs in the BSS are 20 MHz HT in 20 MHz BSS
+Set to 1 (HT non-member protection) if there may be non-HT STAs
+       in both the primary and the secondary channel
+Set to 2 if only HT STAs are associated in BSS,
+       however and at least one 20 MHz HT STA is associated
+Set to 3 (HT mixed mode) when one or more non-HT STAs are associated
+       (currently non-GF HT station is considered as non-HT STA also)
+*/
+static int rtw_ht_operation_update(_adapter *padapter)
+{
+       u16 cur_op_mode, new_op_mode;
+       int op_mode_changes = 0;
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+       struct ht_priv  *phtpriv_ap = &pmlmepriv->htpriv;
+
+       if(pmlmepriv->htpriv.ht_option == _TRUE)
+               return 0;
+
+       //if (!iface->conf->ieee80211n || iface->conf->ht_op_mode_fixed)
+       //      return 0;
+
+       DBG_871X("%s current operation mode=0x%X\n",
+                  __FUNCTION__, pmlmepriv->ht_op_mode);
+
+       if (!(pmlmepriv->ht_op_mode & HT_INFO_OPERATION_MODE_NON_GF_DEVS_PRESENT)
+           && pmlmepriv->num_sta_ht_no_gf) {
+               pmlmepriv->ht_op_mode |=
+                       HT_INFO_OPERATION_MODE_NON_GF_DEVS_PRESENT;
+               op_mode_changes++;
+       } else if ((pmlmepriv->ht_op_mode &
+                   HT_INFO_OPERATION_MODE_NON_GF_DEVS_PRESENT) &&
+                  pmlmepriv->num_sta_ht_no_gf == 0) {
+               pmlmepriv->ht_op_mode &=
+                       ~HT_INFO_OPERATION_MODE_NON_GF_DEVS_PRESENT;
+               op_mode_changes++;
+       }
+
+       if (!(pmlmepriv->ht_op_mode & HT_INFO_OPERATION_MODE_NON_HT_STA_PRESENT) &&
+           (pmlmepriv->num_sta_no_ht || pmlmepriv->olbc_ht)) {
+               pmlmepriv->ht_op_mode |= HT_INFO_OPERATION_MODE_NON_HT_STA_PRESENT;
+               op_mode_changes++;
+       } else if ((pmlmepriv->ht_op_mode &
+                   HT_INFO_OPERATION_MODE_NON_HT_STA_PRESENT) &&
+                  (pmlmepriv->num_sta_no_ht == 0 && !pmlmepriv->olbc_ht)) {
+               pmlmepriv->ht_op_mode &=
+                       ~HT_INFO_OPERATION_MODE_NON_HT_STA_PRESENT;
+               op_mode_changes++;
+       }
+
+       /* Note: currently we switch to the MIXED op mode if HT non-greenfield
+        * station is associated. Probably it's a theoretical case, since
+        * it looks like all known HT STAs support greenfield.
+        */
+       new_op_mode = 0;
+       if (pmlmepriv->num_sta_no_ht ||
+           (pmlmepriv->ht_op_mode & HT_INFO_OPERATION_MODE_NON_GF_DEVS_PRESENT))
+               new_op_mode = OP_MODE_MIXED;
+       else if ((phtpriv_ap->ht_cap.cap_info & IEEE80211_HT_CAP_SUP_WIDTH)
+                && pmlmepriv->num_sta_ht_20mhz)
+               new_op_mode = OP_MODE_20MHZ_HT_STA_ASSOCED;
+       else if (pmlmepriv->olbc_ht)
+               new_op_mode = OP_MODE_MAY_BE_LEGACY_STAS;
+       else
+               new_op_mode = OP_MODE_PURE;
+
+       cur_op_mode = pmlmepriv->ht_op_mode & HT_INFO_OPERATION_MODE_OP_MODE_MASK;
+       if (cur_op_mode != new_op_mode) {
+               pmlmepriv->ht_op_mode &= ~HT_INFO_OPERATION_MODE_OP_MODE_MASK;
+               pmlmepriv->ht_op_mode |= new_op_mode;
+               op_mode_changes++;
+       }
+
+       DBG_871X("%s new operation mode=0x%X changes=%d\n",
+                  __FUNCTION__, pmlmepriv->ht_op_mode, op_mode_changes);
+
+       return op_mode_changes;
+
+}
+
+#endif /* CONFIG_80211N_HT */
+
+void associated_clients_update(_adapter *padapter, u8 updated)
+{
+       //update associcated stations cap.
+       if(updated == _TRUE)
+       {
+               _irqL irqL;
+               _list   *phead, *plist;
+               struct sta_info *psta=NULL;
+               struct sta_priv *pstapriv = &padapter->stapriv;
+
+               _enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+
+               phead = &pstapriv->asoc_list;
+               plist = get_next(phead);
+
+               //check asoc_queue
+               while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
+               {
+                       psta = LIST_CONTAINOR(plist, struct sta_info, asoc_list);
+
+                       plist = get_next(plist);
+
+                       VCS_update(padapter, psta);
+               }
+
+               _exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+
+       }
+
+}
+
+/* called > TSR LEVEL for USB or SDIO Interface*/
+void bss_cap_update_on_sta_join(_adapter *padapter, struct sta_info *psta)
+{
+       u8 beacon_updated = _FALSE;
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+       struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
+
+
+#if 0
+       if (!(psta->capability & WLAN_CAPABILITY_SHORT_PREAMBLE) &&
+           !psta->no_short_preamble_set) {
+               psta->no_short_preamble_set = 1;
+               pmlmepriv->num_sta_no_short_preamble++;
+               if ((pmlmeext->cur_wireless_mode > WIRELESS_11B) &&
+                    (pmlmepriv->num_sta_no_short_preamble == 1))
+                       ieee802_11_set_beacons(hapd->iface);
+       }
+#endif
+
+
+       if(!(psta->flags & WLAN_STA_SHORT_PREAMBLE))
+       {
+               if(!psta->no_short_preamble_set)
+               {
+                       psta->no_short_preamble_set = 1;
+
+                       pmlmepriv->num_sta_no_short_preamble++;
+
+                       if ((pmlmeext->cur_wireless_mode > WIRELESS_11B) &&
+                               (pmlmepriv->num_sta_no_short_preamble == 1))
+                       {
+                               beacon_updated = _TRUE;
+                               update_beacon(padapter, 0xFF, NULL, _TRUE);
+                       }
+
+               }
+       }
+       else
+       {
+               if(psta->no_short_preamble_set)
+               {
+                       psta->no_short_preamble_set = 0;
+
+                       pmlmepriv->num_sta_no_short_preamble--;
+
+                       if ((pmlmeext->cur_wireless_mode > WIRELESS_11B) &&
+                               (pmlmepriv->num_sta_no_short_preamble == 0))
+                       {
+                               beacon_updated = _TRUE;
+                               update_beacon(padapter, 0xFF, NULL, _TRUE);
+                       }
+
+               }
+       }
+
+#if 0
+       if (psta->flags & WLAN_STA_NONERP && !psta->nonerp_set) {
+               psta->nonerp_set = 1;
+               pmlmepriv->num_sta_non_erp++;
+               if (pmlmepriv->num_sta_non_erp == 1)
+                       ieee802_11_set_beacons(hapd->iface);
+       }
+#endif
+
+       if(psta->flags & WLAN_STA_NONERP)
+       {
+               if(!psta->nonerp_set)
+               {
+                       psta->nonerp_set = 1;
+
+                       pmlmepriv->num_sta_non_erp++;
+
+                       if (pmlmepriv->num_sta_non_erp == 1)
+                       {
+                               beacon_updated = _TRUE;
+                               update_beacon(padapter, _ERPINFO_IE_, NULL, _TRUE);
+                       }
+               }
+
+       }
+       else
+       {
+               if(psta->nonerp_set)
+               {
+                       psta->nonerp_set = 0;
+
+                       pmlmepriv->num_sta_non_erp--;
+
+                       if (pmlmepriv->num_sta_non_erp == 0)
+                       {
+                               beacon_updated = _TRUE;
+                               update_beacon(padapter, _ERPINFO_IE_, NULL, _TRUE);
+                       }
+               }
+
+       }
+
+
+#if 0
+       if (!(psta->capability & WLAN_CAPABILITY_SHORT_SLOT) &&
+           !psta->no_short_slot_time_set) {
+               psta->no_short_slot_time_set = 1;
+               pmlmepriv->num_sta_no_short_slot_time++;
+               if ((pmlmeext->cur_wireless_mode > WIRELESS_11B) &&
+                   (pmlmepriv->num_sta_no_short_slot_time == 1))
+                       ieee802_11_set_beacons(hapd->iface);
+       }
+#endif
+
+       if(!(psta->capability & WLAN_CAPABILITY_SHORT_SLOT))
+       {
+               if(!psta->no_short_slot_time_set)
+               {
+                       psta->no_short_slot_time_set = 1;
+
+                       pmlmepriv->num_sta_no_short_slot_time++;
+
+                       if ((pmlmeext->cur_wireless_mode > WIRELESS_11B) &&
+                                (pmlmepriv->num_sta_no_short_slot_time == 1))
+                       {
+                               beacon_updated = _TRUE;
+                               update_beacon(padapter, 0xFF, NULL, _TRUE);
+                       }
+
+               }
+       }
+       else
+       {
+               if(psta->no_short_slot_time_set)
+               {
+                       psta->no_short_slot_time_set = 0;
+
+                       pmlmepriv->num_sta_no_short_slot_time--;
+
+                       if ((pmlmeext->cur_wireless_mode > WIRELESS_11B) &&
+                                (pmlmepriv->num_sta_no_short_slot_time == 0))
+                       {
+                               beacon_updated = _TRUE;
+                               update_beacon(padapter, 0xFF, NULL, _TRUE);
+                       }
+               }
+       }
+
+#ifdef CONFIG_80211N_HT
+
+       if (psta->flags & WLAN_STA_HT)
+       {
+               u16 ht_capab = le16_to_cpu(psta->htpriv.ht_cap.cap_info);
+
+               DBG_871X("HT: STA " MAC_FMT " HT Capabilities "
+                          "Info: 0x%04x\n", MAC_ARG(psta->hwaddr), ht_capab);
+
+               if (psta->no_ht_set) {
+                       psta->no_ht_set = 0;
+                       pmlmepriv->num_sta_no_ht--;
+               }
+
+               if ((ht_capab & IEEE80211_HT_CAP_GRN_FLD) == 0) {
+                       if (!psta->no_ht_gf_set) {
+                               psta->no_ht_gf_set = 1;
+                               pmlmepriv->num_sta_ht_no_gf++;
+                       }
+                       DBG_871X("%s STA " MAC_FMT " - no "
+                                  "greenfield, num of non-gf stations %d\n",
+                                  __FUNCTION__, MAC_ARG(psta->hwaddr),
+                                  pmlmepriv->num_sta_ht_no_gf);
+               }
+
+               if ((ht_capab & IEEE80211_HT_CAP_SUP_WIDTH) == 0) {
+                       if (!psta->ht_20mhz_set) {
+                               psta->ht_20mhz_set = 1;
+                               pmlmepriv->num_sta_ht_20mhz++;
+                       }
+                       DBG_871X("%s STA " MAC_FMT " - 20 MHz HT, "
+                                  "num of 20MHz HT STAs %d\n",
+                                  __FUNCTION__, MAC_ARG(psta->hwaddr),
+                                  pmlmepriv->num_sta_ht_20mhz);
+               }
+
+       }
+       else
+       {
+               if (!psta->no_ht_set) {
+                       psta->no_ht_set = 1;
+                       pmlmepriv->num_sta_no_ht++;
+               }
+               if(pmlmepriv->htpriv.ht_option == _TRUE) {
+                       DBG_871X("%s STA " MAC_FMT
+                                  " - no HT, num of non-HT stations %d\n",
+                                  __FUNCTION__, MAC_ARG(psta->hwaddr),
+                                  pmlmepriv->num_sta_no_ht);
+               }
+       }
+
+       if (rtw_ht_operation_update(padapter) > 0)
+       {
+               update_beacon(padapter, _HT_CAPABILITY_IE_, NULL, _FALSE);
+               update_beacon(padapter, _HT_ADD_INFO_IE_, NULL, _TRUE);
+       }
+
+#endif /* CONFIG_80211N_HT */
+
+       //update associcated stations cap.
+       associated_clients_update(padapter,  beacon_updated);
+
+       DBG_871X("%s, updated=%d\n", __func__, beacon_updated);
+
+}
+
+u8 bss_cap_update_on_sta_leave(_adapter *padapter, struct sta_info *psta)
+{
+       u8 beacon_updated = _FALSE;
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+       struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
+
+       if(!psta)
+               return beacon_updated;
+
+       if (psta->no_short_preamble_set) {
+               psta->no_short_preamble_set = 0;
+               pmlmepriv->num_sta_no_short_preamble--;
+               if (pmlmeext->cur_wireless_mode > WIRELESS_11B
+                   && pmlmepriv->num_sta_no_short_preamble == 0)
+               {
+                       beacon_updated = _TRUE;
+                       update_beacon(padapter, 0xFF, NULL, _TRUE);
+               }
+       }
+
+       if (psta->nonerp_set) {
+               psta->nonerp_set = 0;
+               pmlmepriv->num_sta_non_erp--;
+               if (pmlmepriv->num_sta_non_erp == 0)
+               {
+                       beacon_updated = _TRUE;
+                       update_beacon(padapter, _ERPINFO_IE_, NULL, _TRUE);
+               }
+       }
+
+       if (psta->no_short_slot_time_set) {
+               psta->no_short_slot_time_set = 0;
+               pmlmepriv->num_sta_no_short_slot_time--;
+               if (pmlmeext->cur_wireless_mode > WIRELESS_11B
+                   && pmlmepriv->num_sta_no_short_slot_time == 0)
+               {
+                       beacon_updated = _TRUE;
+                       update_beacon(padapter, 0xFF, NULL, _TRUE);
+               }
+       }
+
+#ifdef CONFIG_80211N_HT
+
+       if (psta->no_ht_gf_set) {
+               psta->no_ht_gf_set = 0;
+               pmlmepriv->num_sta_ht_no_gf--;
+       }
+
+       if (psta->no_ht_set) {
+               psta->no_ht_set = 0;
+               pmlmepriv->num_sta_no_ht--;
+       }
+
+       if (psta->ht_20mhz_set) {
+               psta->ht_20mhz_set = 0;
+               pmlmepriv->num_sta_ht_20mhz--;
+       }
+
+       if (rtw_ht_operation_update(padapter) > 0)
+       {
+               update_beacon(padapter, _HT_CAPABILITY_IE_, NULL, _FALSE);
+               update_beacon(padapter, _HT_ADD_INFO_IE_, NULL, _TRUE);
+       }
+
+#endif /* CONFIG_80211N_HT */
+
+       //update associcated stations cap.
+       //associated_clients_update(padapter,  beacon_updated); //move it to avoid deadlock
+
+       DBG_871X("%s, updated=%d\n", __func__, beacon_updated);
+
+       return beacon_updated;
+
+}
+
+u8 ap_free_sta(_adapter *padapter, struct sta_info *psta, bool active, u16 reason)
+{
+       _irqL irqL;
+       u8 beacon_updated = _FALSE;
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct sta_priv *pstapriv = &padapter->stapriv;
+
+       if(!psta)
+               return beacon_updated;
+
+       if (active == _TRUE)
+       {
+#ifdef CONFIG_80211N_HT
+               //tear down Rx AMPDU
+               send_delba(padapter, 0, psta->hwaddr);// recipient
+
+               //tear down TX AMPDU
+               send_delba(padapter, 1, psta->hwaddr);// // originator
+
+#endif //CONFIG_80211N_HT
+
+               issue_deauth(padapter, psta->hwaddr, reason);
+       }
+
+       psta->htpriv.agg_enable_bitmap = 0x0;//reset
+       psta->htpriv.candidate_tid_bitmap = 0x0;//reset
+
+
+       //report_del_sta_event(padapter, psta->hwaddr, reason);
+
+       //clear cam entry / key
+       //clear_cam_entry(padapter, (psta->mac_id + 3));
+       rtw_clearstakey_cmd(padapter, (u8*)psta, (u8)(psta->mac_id + 3), _TRUE);
+
+
+       _enter_critical_bh(&psta->lock, &irqL);
+       psta->state &= ~_FW_LINKED;
+       _exit_critical_bh(&psta->lock, &irqL);
+
+       #ifdef CONFIG_IOCTL_CFG80211
+       if (1) {
+               #ifdef COMPAT_KERNEL_RELEASE
+               rtw_cfg80211_indicate_sta_disassoc(padapter, psta->hwaddr, reason);
+               #elif (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) && !defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
+               rtw_cfg80211_indicate_sta_disassoc(padapter, psta->hwaddr, reason);
+               #else //(LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) && !defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
+               /* will call rtw_cfg80211_indicate_sta_disassoc() in cmd_thread for old API context */
+               #endif //(LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) && !defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
+       } else
+       #endif //CONFIG_IOCTL_CFG80211
+       {
+               rtw_indicate_sta_disassoc_event(padapter, psta);
+       }
+
+       report_del_sta_event(padapter, psta->hwaddr, reason);
+
+       beacon_updated = bss_cap_update_on_sta_leave(padapter, psta);
+
+       _enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
+       rtw_free_stainfo(padapter, psta);
+       _exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
+
+
+       return beacon_updated;
+
+}
+
+int rtw_ap_inform_ch_switch(_adapter *padapter, u8 new_ch, u8 ch_offset)
+{
+       _irqL irqL;
+       _list   *phead, *plist;
+       int ret=0;
+       struct sta_info *psta = NULL;
+       struct sta_priv *pstapriv = &padapter->stapriv;
+       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       u8 bc_addr[ETH_ALEN] = {0xff,0xff,0xff,0xff,0xff,0xff};
+
+       if((pmlmeinfo->state&0x03) != WIFI_FW_AP_STATE)
+               return ret;
+
+       DBG_871X(FUNC_NDEV_FMT" with ch:%u, offset:%u\n",
+               FUNC_NDEV_ARG(padapter->pnetdev), new_ch, ch_offset);
+
+       _enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+       phead = &pstapriv->asoc_list;
+       plist = get_next(phead);
+
+       /* for each sta in asoc_queue */
+       while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
+       {
+               psta = LIST_CONTAINOR(plist, struct sta_info, asoc_list);
+               plist = get_next(plist);
+
+               issue_action_spct_ch_switch(padapter, psta->hwaddr, new_ch, ch_offset);
+               psta->expire_to = ((pstapriv->expire_to * 2) > 5) ? 5 : (pstapriv->expire_to * 2);
+       }
+       _exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+
+       issue_action_spct_ch_switch(padapter, bc_addr, new_ch, ch_offset);
+
+       return ret;
+}
+
+int rtw_sta_flush(_adapter *padapter)
+{
+       _irqL irqL;
+       _list   *phead, *plist;
+       int ret=0;
+       struct sta_info *psta = NULL;
+       struct sta_priv *pstapriv = &padapter->stapriv;
+       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       u8 bc_addr[ETH_ALEN] = {0xff,0xff,0xff,0xff,0xff,0xff};
+       u8 chk_alive_num = 0;
+       char chk_alive_list[NUM_STA];
+       int i;
+
+       DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(padapter->pnetdev));
+
+       if((pmlmeinfo->state&0x03) != WIFI_FW_AP_STATE)
+               return ret;
+
+       _enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+       phead = &pstapriv->asoc_list;
+       plist = get_next(phead);
+
+       while ((rtw_end_of_queue_search(phead, plist)) == _FALSE) {
+               int stainfo_offset;
+
+               psta = LIST_CONTAINOR(plist, struct sta_info, asoc_list);
+               plist = get_next(plist);
+
+               /* Remove sta from asoc_list */
+               rtw_list_delete(&psta->asoc_list);
+               pstapriv->asoc_list_cnt--;
+
+               /* Keep sta for ap_free_sta() beyond this asoc_list loop */
+               stainfo_offset = rtw_stainfo_offset(pstapriv, psta);
+               if (stainfo_offset_valid(stainfo_offset)) {
+                       chk_alive_list[chk_alive_num++] = stainfo_offset;
+               }
+       }
+       _exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+
+
+       /* For each sta in chk_alive_list, call ap_free_sta */
+       for (i = 0; i < chk_alive_num; i++) {
+               psta = rtw_get_stainfo_by_offset(pstapriv, chk_alive_list[i]);
+               ap_free_sta(padapter, psta, _TRUE, WLAN_REASON_DEAUTH_LEAVING);
+       }
+
+       issue_deauth(padapter, bc_addr, WLAN_REASON_DEAUTH_LEAVING);
+
+       associated_clients_update(padapter, _TRUE);
+
+       return ret;
+
+}
+
+/* called > TSR LEVEL for USB or SDIO Interface*/
+void sta_info_update(_adapter *padapter, struct sta_info *psta)
+{
+       int flags = psta->flags;
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+
+
+       //update wmm cap.
+       if(WLAN_STA_WME&flags)
+               psta->qos_option = 1;
+       else
+               psta->qos_option = 0;
+
+       if(pmlmepriv->qospriv.qos_option == 0)
+               psta->qos_option = 0;
+
+
+#ifdef CONFIG_80211N_HT
+       //update 802.11n ht cap.
+       if(WLAN_STA_HT&flags)
+       {
+               psta->htpriv.ht_option = _TRUE;
+               psta->qos_option = 1;
+       }
+       else
+       {
+               psta->htpriv.ht_option = _FALSE;
+       }
+
+       if(pmlmepriv->htpriv.ht_option == _FALSE)
+               psta->htpriv.ht_option = _FALSE;
+#endif
+
+
+       update_sta_info_apmode(padapter, psta);
+
+
+}
+
+/* called >= TSR LEVEL for USB or SDIO Interface*/
+void ap_sta_info_defer_update(_adapter *padapter, struct sta_info *psta)
+{
+       if(psta->state & _FW_LINKED)
+       {
+               //add ratid
+               add_RATid(padapter, psta);
+       }
+}
+
+/* restore hw setting from sw data structures */
+void rtw_ap_restore_network(_adapter *padapter)
+{
+       struct mlme_priv *mlmepriv = &padapter->mlmepriv;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       struct sta_priv * pstapriv = &padapter->stapriv;
+       struct sta_info *psta;
+       struct security_priv* psecuritypriv=&(padapter->securitypriv);
+       _irqL irqL;
+       _list   *phead, *plist;
+       u8 chk_alive_num = 0;
+       char chk_alive_list[NUM_STA];
+       int i;
+
+       rtw_setopmode_cmd(padapter, Ndis802_11APMode);
+
+       set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
+
+       start_bss_network(padapter, (u8*)&mlmepriv->cur_network.network);
+
+       if((padapter->securitypriv.dot11PrivacyAlgrthm == _TKIP_) ||
+               (padapter->securitypriv.dot11PrivacyAlgrthm == _AES_))
+       {
+               /* restore group key, WEP keys is restored in ips_leave() */
+               rtw_set_key(padapter, psecuritypriv, psecuritypriv->dot118021XGrpKeyid, 0);
+       }
+
+       /* per sta pairwise key and settings */
+       if((padapter->securitypriv.dot11PrivacyAlgrthm != _TKIP_) &&
+               (padapter->securitypriv.dot11PrivacyAlgrthm != _AES_)) {
+               return;
+       }
+
+       _enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+
+       phead = &pstapriv->asoc_list;
+       plist = get_next(phead);
+
+       while ((rtw_end_of_queue_search(phead, plist)) == _FALSE) {
+               int stainfo_offset;
+
+               psta = LIST_CONTAINOR(plist, struct sta_info, asoc_list);
+               plist = get_next(plist);
+
+               stainfo_offset = rtw_stainfo_offset(pstapriv, psta);
+               if (stainfo_offset_valid(stainfo_offset)) {
+                       chk_alive_list[chk_alive_num++] = stainfo_offset;
+               }
+       }
+
+       _exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+
+       for (i = 0; i < chk_alive_num; i++) {
+               psta = rtw_get_stainfo_by_offset(pstapriv, chk_alive_list[i]);
+
+               if (psta == NULL) {
+                       DBG_871X(FUNC_ADPT_FMT" sta_info is null\n", FUNC_ADPT_ARG(padapter));
+               } else if (psta->state &_FW_LINKED) {
+                       Update_RA_Entry(padapter, psta->mac_id);
+                       //pairwise key
+                       rtw_setstakey_cmd(padapter, (unsigned char *)psta, _TRUE);
+               }
+       }
+
+}
+
+void start_ap_mode(_adapter *padapter)
+{
+       int i;
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+       struct sta_priv *pstapriv = &padapter->stapriv;
+       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
+       struct wlan_acl_pool *pacl_list = &pstapriv->acl_list;
+
+       pmlmepriv->update_bcn = _FALSE;
+
+       //init_mlme_ap_info(padapter);
+       pmlmeext->bstart_bss = _FALSE;
+
+       pmlmepriv->num_sta_non_erp = 0;
+
+       pmlmepriv->num_sta_no_short_slot_time = 0;
+
+       pmlmepriv->num_sta_no_short_preamble = 0;
+
+       pmlmepriv->num_sta_ht_no_gf = 0;
+
+       pmlmepriv->num_sta_no_ht = 0;
+
+       pmlmepriv->num_sta_ht_20mhz = 0;
+
+       pmlmepriv->olbc = _FALSE;
+
+       pmlmepriv->olbc_ht = _FALSE;
+
+#ifdef CONFIG_80211N_HT
+       pmlmepriv->ht_op_mode = 0;
+#endif
+
+       for(i=0; i<NUM_STA; i++)
+               pstapriv->sta_aid[i] = NULL;
+
+       pmlmepriv->wps_beacon_ie = NULL;
+       pmlmepriv->wps_probe_resp_ie = NULL;
+       pmlmepriv->wps_assoc_resp_ie = NULL;
+
+       pmlmepriv->p2p_beacon_ie = NULL;
+       pmlmepriv->p2p_probe_resp_ie = NULL;
+
+
+       //for ACL
+       _rtw_init_listhead(&(pacl_list->acl_node_q.queue));
+       pacl_list->num = 0;
+       pacl_list->mode = 0;
+       for(i = 0; i < NUM_ACL; i++)
+       {
+               _rtw_init_listhead(&pacl_list->aclnode[i].list);
+               pacl_list->aclnode[i].valid = _FALSE;
+       }
+
+}
+
+void stop_ap_mode(_adapter *padapter)
+{
+       _irqL irqL;
+       _list   *phead, *plist;
+       struct rtw_wlan_acl_node *paclnode;
+       struct sta_info *psta=NULL;
+       struct sta_priv *pstapriv = &padapter->stapriv;
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
+       struct wlan_acl_pool *pacl_list = &pstapriv->acl_list;
+       _queue  *pacl_node_q =&pacl_list->acl_node_q;
+
+       pmlmepriv->update_bcn = _FALSE;
+       pmlmeext->bstart_bss = _FALSE;
+       //_rtw_spinlock_free(&pmlmepriv->bcn_update_lock);
+
+       //reset and init security priv , this can refine with rtw_reset_securitypriv
+       _rtw_memset((unsigned char *)&padapter->securitypriv, 0, sizeof (struct security_priv));
+       padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeOpen;
+       padapter->securitypriv.ndisencryptstatus = Ndis802_11WEPDisabled;
+
+       //for ACL
+       _enter_critical_bh(&(pacl_node_q->lock), &irqL);
+       phead = get_list_head(pacl_node_q);
+       plist = get_next(phead);
+       while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
+       {
+               paclnode = LIST_CONTAINOR(plist, struct rtw_wlan_acl_node, list);
+               plist = get_next(plist);
+
+               if(paclnode->valid == _TRUE)
+               {
+                       paclnode->valid = _FALSE;
+
+                       rtw_list_delete(&paclnode->list);
+
+                       pacl_list->num--;
+               }
+       }
+       _exit_critical_bh(&(pacl_node_q->lock), &irqL);
+
+       DBG_871X("%s, free acl_node_queue, num=%d\n", __func__, pacl_list->num);
+
+       rtw_sta_flush(padapter);
+
+       //free_assoc_sta_resources
+       rtw_free_all_stainfo(padapter);
+
+       psta = rtw_get_bcmc_stainfo(padapter);
+       _enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
+       rtw_free_stainfo(padapter, psta);
+       _exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
+
+       rtw_init_bcmc_stainfo(padapter);
+
+       rtw_free_mlme_priv_ie_data(pmlmepriv);
+
+}
+
+#endif //CONFIG_NATIVEAP_MLME
+#endif //CONFIG_AP_MODE
diff --git a/drivers/net/wireless/realtek/rtl8192cu/core/rtw_br_ext.c b/drivers/net/wireless/realtek/rtl8192cu/core/rtw_br_ext.c
new file mode 100644 (file)
index 0000000..a5ac601
--- /dev/null
@@ -0,0 +1,1699 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#define _RTW_BR_EXT_C_
+
+#ifdef __KERNEL__
+#include <linux/if_arp.h>
+#include <net/ip.h>
+#include <net/ipx.h>
+#include <linux/atalk.h>
+#include <linux/udp.h>
+#include <linux/if_pppox.h>
+#endif
+
+#if 1  // rtw_wifi_driver
+#include <drv_conf.h>
+#include <drv_types.h>
+#include "rtw_br_ext.h"
+#else  // rtw_wifi_driver
+#include "./8192cd_cfg.h"
+
+#ifndef __KERNEL__
+#include "./sys-support.h"
+#endif
+
+#include "./8192cd.h"
+#include "./8192cd_headers.h"
+#include "./8192cd_br_ext.h"
+#include "./8192cd_debug.h"
+#endif // rtw_wifi_driver
+
+#ifdef CL_IPV6_PASS
+#ifdef __KERNEL__
+#include <linux/ipv6.h>
+#include <linux/icmpv6.h>
+#include <net/ndisc.h>
+#include <net/checksum.h>
+#endif
+#endif
+
+#ifdef CONFIG_BR_EXT
+
+//#define BR_EXT_DEBUG
+
+#define NAT25_IPV4             01
+#define NAT25_IPV6             02
+#define NAT25_IPX              03
+#define NAT25_APPLE            04
+#define NAT25_PPPOE            05
+
+#define RTL_RELAY_TAG_LEN (ETH_ALEN)
+#define TAG_HDR_LEN            4
+
+#define MAGIC_CODE             0x8186
+#define MAGIC_CODE_LEN 2
+#define WAIT_TIME_PPPOE        5       // waiting time for pppoe server in sec
+
+/*-----------------------------------------------------------------
+  How database records network address:
+           0    1    2    3    4    5    6    7    8    9   10
+        |----|----|----|----|----|----|----|----|----|----|----|
+  IPv4  |type|                             |      IP addr      |
+  IPX   |type|      Net addr     |          Node addr          |
+  IPX   |type|      Net addr     |Sckt addr|
+  Apple |type| Network |node|
+  PPPoE |type|   SID   |           AC MAC            |
+-----------------------------------------------------------------*/
+
+
+//Find a tag in pppoe frame and return the pointer
+static __inline__ unsigned char *__nat25_find_pppoe_tag(struct pppoe_hdr *ph, unsigned short type)
+{
+       unsigned char *cur_ptr, *start_ptr;
+       unsigned short tagLen, tagType;
+
+       start_ptr = cur_ptr = (unsigned char *)ph->tag;
+       while((cur_ptr - start_ptr) < ntohs(ph->length)) {
+               // prevent un-alignment access
+               tagType = (unsigned short)((cur_ptr[0] << 8) + cur_ptr[1]);
+               tagLen  = (unsigned short)((cur_ptr[2] << 8) + cur_ptr[3]);
+               if(tagType == type)
+                       return cur_ptr;
+               cur_ptr = cur_ptr + TAG_HDR_LEN + tagLen;
+       }
+       return 0;
+}
+
+
+static __inline__ int __nat25_add_pppoe_tag(struct sk_buff *skb, struct pppoe_tag *tag)
+{
+       struct pppoe_hdr *ph = (struct pppoe_hdr *)(skb->data + ETH_HLEN);
+       int data_len;
+
+       data_len = tag->tag_len + TAG_HDR_LEN;
+       if (skb_tailroom(skb) < data_len) {
+               _DEBUG_ERR("skb_tailroom() failed in add SID tag!\n");
+               return -1;
+       }
+
+       skb_put(skb, data_len);
+       // have a room for new tag
+       memmove(((unsigned char *)ph->tag + data_len), (unsigned char *)ph->tag, ntohs(ph->length));
+       ph->length = htons(ntohs(ph->length) + data_len);
+       memcpy((unsigned char *)ph->tag, tag, data_len);
+       return data_len;
+}
+
+static int skb_pull_and_merge(struct sk_buff *skb, unsigned char *src, int len)
+{
+       int tail_len;
+       unsigned long end, tail;
+
+       if ((src+len) > skb_tail_pointer(skb) || skb->len < len)
+               return -1;
+
+       tail = (unsigned long)skb_tail_pointer(skb);
+       end = (unsigned long)src+len;
+       if (tail < end)
+               return -1;
+
+       tail_len = (int)(tail-end);
+       if (tail_len > 0)
+               memmove(src, src+len, tail_len);
+
+       skb_trim(skb, skb->len-len);
+       return 0;
+}
+
+static __inline__ unsigned long __nat25_timeout(_adapter *priv)
+{
+       unsigned long timeout;
+
+       timeout = jiffies - NAT25_AGEING_TIME*HZ;
+
+       return timeout;
+}
+
+
+static __inline__ int  __nat25_has_expired(_adapter *priv,
+                               struct nat25_network_db_entry *fdb)
+{
+       if(time_before_eq(fdb->ageing_timer, __nat25_timeout(priv)))
+               return 1;
+
+       return 0;
+}
+
+
+static __inline__ void __nat25_generate_ipv4_network_addr(unsigned char *networkAddr,
+                               unsigned int *ipAddr)
+{
+       memset(networkAddr, 0, MAX_NETWORK_ADDR_LEN);
+
+       networkAddr[0] = NAT25_IPV4;
+       memcpy(networkAddr+7, (unsigned char *)ipAddr, 4);
+}
+
+
+static __inline__ void __nat25_generate_ipx_network_addr_with_node(unsigned char *networkAddr,
+                               unsigned int *ipxNetAddr, unsigned char *ipxNodeAddr)
+{
+       memset(networkAddr, 0, MAX_NETWORK_ADDR_LEN);
+
+       networkAddr[0] = NAT25_IPX;
+       memcpy(networkAddr+1, (unsigned char *)ipxNetAddr, 4);
+       memcpy(networkAddr+5, ipxNodeAddr, 6);
+}
+
+
+static __inline__ void __nat25_generate_ipx_network_addr_with_socket(unsigned char *networkAddr,
+                               unsigned int *ipxNetAddr, unsigned short *ipxSocketAddr)
+{
+       memset(networkAddr, 0, MAX_NETWORK_ADDR_LEN);
+
+       networkAddr[0] = NAT25_IPX;
+       memcpy(networkAddr+1, (unsigned char *)ipxNetAddr, 4);
+       memcpy(networkAddr+5, (unsigned char *)ipxSocketAddr, 2);
+}
+
+
+static __inline__ void __nat25_generate_apple_network_addr(unsigned char *networkAddr,
+                               unsigned short *network, unsigned char *node)
+{
+       memset(networkAddr, 0, MAX_NETWORK_ADDR_LEN);
+
+       networkAddr[0] = NAT25_APPLE;
+       memcpy(networkAddr+1, (unsigned char *)network, 2);
+       networkAddr[3] = *node;
+}
+
+
+static __inline__ void __nat25_generate_pppoe_network_addr(unsigned char *networkAddr,
+                               unsigned char *ac_mac, unsigned short *sid)
+{
+       memset(networkAddr, 0, MAX_NETWORK_ADDR_LEN);
+
+       networkAddr[0] = NAT25_PPPOE;
+       memcpy(networkAddr+1, (unsigned char *)sid, 2);
+       memcpy(networkAddr+3, (unsigned char *)ac_mac, 6);
+}
+
+
+#ifdef CL_IPV6_PASS
+static  void __nat25_generate_ipv6_network_addr(unsigned char *networkAddr,
+                               unsigned int *ipAddr)
+{
+       memset(networkAddr, 0, MAX_NETWORK_ADDR_LEN);
+
+       networkAddr[0] = NAT25_IPV6;
+       memcpy(networkAddr+1, (unsigned char *)ipAddr, 16);
+}
+
+
+static unsigned char *scan_tlv(unsigned char *data, int len, unsigned char tag, unsigned char len8b)
+{
+       while (len > 0) {
+               if (*data == tag && *(data+1) == len8b && len >= len8b*8)
+                       return data+2;
+
+               len -= (*(data+1))*8;
+               data += (*(data+1))*8;
+       }
+       return NULL;
+}
+
+
+static int update_nd_link_layer_addr(unsigned char *data, int len, unsigned char *replace_mac)
+{
+       struct icmp6hdr *icmphdr = (struct icmp6hdr *)data;
+       unsigned char *mac;
+
+       if (icmphdr->icmp6_type == NDISC_ROUTER_SOLICITATION) {
+               if (len >= 8) {
+                       mac = scan_tlv(&data[8], len-8, 1, 1);
+                       if (mac) {
+                               _DEBUG_INFO("Router Solicitation, replace MAC From: %02x:%02x:%02x:%02x:%02x:%02x, To: %02x:%02x:%02x:%02x:%02x:%02x\n",
+                                       mac[0],mac[1],mac[2],mac[3],mac[4],mac[5],
+                                       replace_mac[0],replace_mac[1],replace_mac[2],replace_mac[3],replace_mac[4],replace_mac[5]);
+                               memcpy(mac, replace_mac, 6);
+                               return 1;
+                       }
+               }
+       }
+       else if (icmphdr->icmp6_type == NDISC_ROUTER_ADVERTISEMENT) {
+               if (len >= 16) {
+                       mac = scan_tlv(&data[16], len-16, 1, 1);
+                       if (mac) {
+                               _DEBUG_INFO("Router Advertisement, replace MAC From: %02x:%02x:%02x:%02x:%02x:%02x, To: %02x:%02x:%02x:%02x:%02x:%02x\n",
+                                       mac[0],mac[1],mac[2],mac[3],mac[4],mac[5],
+                                       replace_mac[0],replace_mac[1],replace_mac[2],replace_mac[3],replace_mac[4],replace_mac[5]);
+                               memcpy(mac, replace_mac, 6);
+                               return 1;
+                       }
+               }
+       }
+       else if (icmphdr->icmp6_type == NDISC_NEIGHBOUR_SOLICITATION) {
+               if (len >= 24) {
+                       mac = scan_tlv(&data[24], len-24, 1, 1);
+                       if (mac) {
+                               _DEBUG_INFO("Neighbor Solicitation, replace MAC From: %02x:%02x:%02x:%02x:%02x:%02x, To: %02x:%02x:%02x:%02x:%02x:%02x\n",
+                                       mac[0],mac[1],mac[2],mac[3],mac[4],mac[5],
+                                       replace_mac[0],replace_mac[1],replace_mac[2],replace_mac[3],replace_mac[4],replace_mac[5]);
+                               memcpy(mac, replace_mac, 6);
+                               return 1;
+                       }
+               }
+       }
+       else if (icmphdr->icmp6_type == NDISC_NEIGHBOUR_ADVERTISEMENT) {
+               if (len >= 24) {
+                       mac = scan_tlv(&data[24], len-24, 2, 1);
+                       if (mac) {
+                               _DEBUG_INFO("Neighbor Advertisement, replace MAC From: %02x:%02x:%02x:%02x:%02x:%02x, To: %02x:%02x:%02x:%02x:%02x:%02x\n",
+                                       mac[0],mac[1],mac[2],mac[3],mac[4],mac[5],
+                                       replace_mac[0],replace_mac[1],replace_mac[2],replace_mac[3],replace_mac[4],replace_mac[5]);
+                               memcpy(mac, replace_mac, 6);
+                               return 1;
+                       }
+               }
+       }
+       else if (icmphdr->icmp6_type == NDISC_REDIRECT) {
+               if (len >= 40) {
+                       mac = scan_tlv(&data[40], len-40, 2, 1);
+                       if (mac) {
+                               _DEBUG_INFO("Redirect,  replace MAC From: %02x:%02x:%02x:%02x:%02x:%02x, To: %02x:%02x:%02x:%02x:%02x:%02x\n",
+                                       mac[0],mac[1],mac[2],mac[3],mac[4],mac[5],
+                                       replace_mac[0],replace_mac[1],replace_mac[2],replace_mac[3],replace_mac[4],replace_mac[5]);
+                               memcpy(mac, replace_mac, 6);
+                               return 1;
+                       }
+               }
+       }
+       return 0;
+}
+
+
+static void convert_ipv6_mac_to_mc(struct sk_buff *skb)
+{
+       struct ipv6hdr *iph = (struct ipv6hdr *)(skb->data + ETH_HLEN);
+       unsigned char *dst_mac = skb->data;
+
+       //dst_mac[0] = 0xff;
+       //dst_mac[1] = 0xff;
+       /*modified by qinjunjie,ipv6 multicast address ix 0x33-33-xx-xx-xx-xx*/
+       dst_mac[0] = 0x33;
+       dst_mac[1] = 0x33;
+       memcpy(&dst_mac[2], &iph->daddr.s6_addr32[3], 4);
+       #if defined(__LINUX_2_6__)
+       /*modified by qinjunjie,warning:should not remove next line*/
+       skb->pkt_type = PACKET_MULTICAST;
+       #endif
+}
+#endif /* CL_IPV6_PASS */
+
+
+static __inline__ int __nat25_network_hash(unsigned char *networkAddr)
+{
+       if(networkAddr[0] == NAT25_IPV4)
+       {
+               unsigned long x;
+
+               x = networkAddr[7] ^ networkAddr[8] ^ networkAddr[9] ^ networkAddr[10];
+
+               return x & (NAT25_HASH_SIZE - 1);
+       }
+       else if(networkAddr[0] == NAT25_IPX)
+       {
+               unsigned long x;
+
+               x = networkAddr[1] ^ networkAddr[2] ^ networkAddr[3] ^ networkAddr[4] ^ networkAddr[5] ^
+                       networkAddr[6] ^ networkAddr[7] ^ networkAddr[8] ^ networkAddr[9] ^ networkAddr[10];
+
+               return x & (NAT25_HASH_SIZE - 1);
+       }
+       else if(networkAddr[0] == NAT25_APPLE)
+       {
+               unsigned long x;
+
+               x = networkAddr[1] ^ networkAddr[2] ^ networkAddr[3];
+
+               return x & (NAT25_HASH_SIZE - 1);
+       }
+       else if(networkAddr[0] == NAT25_PPPOE)
+       {
+               unsigned long x;
+
+               x = networkAddr[0] ^ networkAddr[1] ^ networkAddr[2] ^ networkAddr[3] ^ networkAddr[4] ^ networkAddr[5] ^ networkAddr[6] ^ networkAddr[7] ^ networkAddr[8];
+
+               return x & (NAT25_HASH_SIZE - 1);
+       }
+#ifdef CL_IPV6_PASS
+       else if(networkAddr[0] == NAT25_IPV6)
+       {
+               unsigned long x;
+
+               x = networkAddr[1] ^ networkAddr[2] ^ networkAddr[3] ^ networkAddr[4] ^ networkAddr[5] ^
+                       networkAddr[6] ^ networkAddr[7] ^ networkAddr[8] ^ networkAddr[9] ^ networkAddr[10] ^
+                       networkAddr[11] ^ networkAddr[12] ^ networkAddr[13] ^ networkAddr[14] ^ networkAddr[15] ^
+                       networkAddr[16];
+
+               return x & (NAT25_HASH_SIZE - 1);
+       }
+#endif
+       else
+       {
+               unsigned long x = 0;
+               int i;
+
+               for (i=0; i<MAX_NETWORK_ADDR_LEN; i++)
+                       x ^= networkAddr[i];
+
+               return x & (NAT25_HASH_SIZE - 1);
+       }
+}
+
+
+static __inline__ void __network_hash_link(_adapter *priv,
+                               struct nat25_network_db_entry *ent, int hash)
+{
+       // Caller must _enter_critical_bh already!
+       //_irqL irqL;
+       //_enter_critical_bh(&priv->br_ext_lock, &irqL);
+
+       ent->next_hash = priv->nethash[hash];
+       if(ent->next_hash != NULL)
+               ent->next_hash->pprev_hash = &ent->next_hash;
+       priv->nethash[hash] = ent;
+       ent->pprev_hash = &priv->nethash[hash];
+
+       //_exit_critical_bh(&priv->br_ext_lock, &irqL);
+}
+
+
+static __inline__ void __network_hash_unlink(struct nat25_network_db_entry *ent)
+{
+       // Caller must _enter_critical_bh already!
+       //_irqL irqL;
+       //_enter_critical_bh(&priv->br_ext_lock, &irqL);
+
+       *(ent->pprev_hash) = ent->next_hash;
+       if(ent->next_hash != NULL)
+               ent->next_hash->pprev_hash = ent->pprev_hash;
+       ent->next_hash = NULL;
+       ent->pprev_hash = NULL;
+
+       //_exit_critical_bh(&priv->br_ext_lock, &irqL);
+}
+
+
+static int __nat25_db_network_lookup_and_replace(_adapter *priv,
+                               struct sk_buff *skb, unsigned char *networkAddr)
+{
+       struct nat25_network_db_entry *db;
+       _irqL irqL;
+       _enter_critical_bh(&priv->br_ext_lock, &irqL);
+
+       db = priv->nethash[__nat25_network_hash(networkAddr)];
+       while (db != NULL)
+       {
+               if(!memcmp(db->networkAddr, networkAddr, MAX_NETWORK_ADDR_LEN))
+               {
+                       if(!__nat25_has_expired(priv, db))
+                       {
+                               // replace the destination mac address
+                               memcpy(skb->data, db->macAddr, ETH_ALEN);
+                               atomic_inc(&db->use_count);
+
+#ifdef CL_IPV6_PASS
+                               DEBUG_INFO("NAT25: Lookup M:%02x%02x%02x%02x%02x%02x N:%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x"
+                                                       "%02x%02x%02x%02x%02x%02x\n",
+                                       db->macAddr[0],
+                                       db->macAddr[1],
+                                       db->macAddr[2],
+                                       db->macAddr[3],
+                                       db->macAddr[4],
+                                       db->macAddr[5],
+                                       db->networkAddr[0],
+                                       db->networkAddr[1],
+                                       db->networkAddr[2],
+                                       db->networkAddr[3],
+                                       db->networkAddr[4],
+                                       db->networkAddr[5],
+                                       db->networkAddr[6],
+                                       db->networkAddr[7],
+                                       db->networkAddr[8],
+                                       db->networkAddr[9],
+                                       db->networkAddr[10],
+                                       db->networkAddr[11],
+                                       db->networkAddr[12],
+                                       db->networkAddr[13],
+                                       db->networkAddr[14],
+                                       db->networkAddr[15],
+                                       db->networkAddr[16]);
+#else
+                               DEBUG_INFO("NAT25: Lookup M:%02x%02x%02x%02x%02x%02x N:%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x\n",
+                                       db->macAddr[0],
+                                       db->macAddr[1],
+                                       db->macAddr[2],
+                                       db->macAddr[3],
+                                       db->macAddr[4],
+                                       db->macAddr[5],
+                                       db->networkAddr[0],
+                                       db->networkAddr[1],
+                                       db->networkAddr[2],
+                                       db->networkAddr[3],
+                                       db->networkAddr[4],
+                                       db->networkAddr[5],
+                                       db->networkAddr[6],
+                                       db->networkAddr[7],
+                                       db->networkAddr[8],
+                                       db->networkAddr[9],
+                                       db->networkAddr[10]);
+#endif
+                       }
+                       _exit_critical_bh(&priv->br_ext_lock, &irqL);
+                       return 1;
+               }
+
+               db = db->next_hash;
+       }
+
+       _exit_critical_bh(&priv->br_ext_lock, &irqL);
+       return 0;
+}
+
+
+static void __nat25_db_network_insert(_adapter *priv,
+                               unsigned char *macAddr, unsigned char *networkAddr)
+{
+       struct nat25_network_db_entry *db;
+       int hash;
+       _irqL irqL;
+       _enter_critical_bh(&priv->br_ext_lock, &irqL);
+
+       hash = __nat25_network_hash(networkAddr);
+       db = priv->nethash[hash];
+       while (db != NULL)
+       {
+               if(!memcmp(db->networkAddr, networkAddr, MAX_NETWORK_ADDR_LEN))
+               {
+                       memcpy(db->macAddr, macAddr, ETH_ALEN);
+                       db->ageing_timer = jiffies;
+                       _exit_critical_bh(&priv->br_ext_lock, &irqL);
+                       return;
+               }
+
+               db = db->next_hash;
+       }
+
+       db = (struct nat25_network_db_entry *) rtw_malloc(sizeof(*db));
+       if(db == NULL) {
+               _exit_critical_bh(&priv->br_ext_lock, &irqL);
+               return;
+       }
+
+       memcpy(db->networkAddr, networkAddr, MAX_NETWORK_ADDR_LEN);
+       memcpy(db->macAddr, macAddr, ETH_ALEN);
+       atomic_set(&db->use_count, 1);
+       db->ageing_timer = jiffies;
+
+       __network_hash_link(priv, db, hash);
+
+       _exit_critical_bh(&priv->br_ext_lock, &irqL);
+}
+
+
+static void __nat25_db_print(_adapter *priv)
+{
+       _irqL irqL;
+       _enter_critical_bh(&priv->br_ext_lock, &irqL);
+
+#ifdef BR_EXT_DEBUG
+       static int counter = 0;
+       int i, j;
+       struct nat25_network_db_entry *db;
+
+       counter++;
+       if((counter % 16) != 0)
+               return;
+
+       for(i=0, j=0; i<NAT25_HASH_SIZE; i++)
+       {
+               db = priv->nethash[i];
+
+               while (db != NULL)
+               {
+#ifdef CL_IPV6_PASS
+                       panic_printk("NAT25: DB(%d) H(%02d) C(%d) M:%02x%02x%02x%02x%02x%02x N:%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x"
+                                       "%02x%02x%02x%02x%02x%02x\n",
+                               j,
+                               i,
+                               atomic_read(&db->use_count),
+                               db->macAddr[0],
+                               db->macAddr[1],
+                               db->macAddr[2],
+                               db->macAddr[3],
+                               db->macAddr[4],
+                               db->macAddr[5],
+                               db->networkAddr[0],
+                               db->networkAddr[1],
+                               db->networkAddr[2],
+                               db->networkAddr[3],
+                               db->networkAddr[4],
+                               db->networkAddr[5],
+                               db->networkAddr[6],
+                               db->networkAddr[7],
+                               db->networkAddr[8],
+                               db->networkAddr[9],
+                               db->networkAddr[10],
+                               db->networkAddr[11],
+                               db->networkAddr[12],
+                               db->networkAddr[13],
+                               db->networkAddr[14],
+                               db->networkAddr[15],
+                               db->networkAddr[16]);
+#else
+                       panic_printk("NAT25: DB(%d) H(%02d) C(%d) M:%02x%02x%02x%02x%02x%02x N:%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x\n",
+                               j,
+                               i,
+                               atomic_read(&db->use_count),
+                               db->macAddr[0],
+                               db->macAddr[1],
+                               db->macAddr[2],
+                               db->macAddr[3],
+                               db->macAddr[4],
+                               db->macAddr[5],
+                               db->networkAddr[0],
+                               db->networkAddr[1],
+                               db->networkAddr[2],
+                               db->networkAddr[3],
+                               db->networkAddr[4],
+                               db->networkAddr[5],
+                               db->networkAddr[6],
+                               db->networkAddr[7],
+                               db->networkAddr[8],
+                               db->networkAddr[9],
+                               db->networkAddr[10]);
+#endif
+                       j++;
+
+                       db = db->next_hash;
+               }
+       }
+#endif
+
+       _exit_critical_bh(&priv->br_ext_lock, &irqL);
+}
+
+
+
+
+/*
+ *     NAT2.5 interface
+ */
+
+void nat25_db_cleanup(_adapter *priv)
+{
+       int i;
+       _irqL irqL;
+       _enter_critical_bh(&priv->br_ext_lock, &irqL);
+
+       for(i=0; i<NAT25_HASH_SIZE; i++)
+       {
+               struct nat25_network_db_entry *f;
+               f = priv->nethash[i];
+               while (f != NULL) {
+                       struct nat25_network_db_entry *g;
+
+                       g = f->next_hash;
+                       if(priv->scdb_entry == f)
+                       {
+                               memset(priv->scdb_mac, 0, ETH_ALEN);
+                               memset(priv->scdb_ip, 0, 4);
+                               priv->scdb_entry = NULL;
+                       }
+                       __network_hash_unlink(f);
+                       rtw_mfree((u8 *) f, sizeof(struct nat25_network_db_entry));
+
+                       f = g;
+               }
+       }
+
+       _exit_critical_bh(&priv->br_ext_lock, &irqL);
+}
+
+
+void nat25_db_expire(_adapter *priv)
+{
+       int i;
+       _irqL irqL;
+       _enter_critical_bh(&priv->br_ext_lock, &irqL);
+
+       //if(!priv->ethBrExtInfo.nat25_disable)
+       {
+               for (i=0; i<NAT25_HASH_SIZE; i++)
+               {
+                       struct nat25_network_db_entry *f;
+                       f = priv->nethash[i];
+
+                       while (f != NULL)
+                       {
+                               struct nat25_network_db_entry *g;
+                               g = f->next_hash;
+
+                               if(__nat25_has_expired(priv, f))
+                               {
+                                       if(atomic_dec_and_test(&f->use_count))
+                                       {
+#ifdef BR_EXT_DEBUG
+#ifdef CL_IPV6_PASS
+                                               panic_printk("NAT25 Expire H(%02d) M:%02x%02x%02x%02x%02x%02x N:%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x"
+                                                               "%02x%02x%02x%02x%02x%02x\n",
+                                                       i,
+                                                       f->macAddr[0],
+                                                       f->macAddr[1],
+                                                       f->macAddr[2],
+                                                       f->macAddr[3],
+                                                       f->macAddr[4],
+                                                       f->macAddr[5],
+                                                       f->networkAddr[0],
+                                                       f->networkAddr[1],
+                                                       f->networkAddr[2],
+                                                       f->networkAddr[3],
+                                                       f->networkAddr[4],
+                                                       f->networkAddr[5],
+                                                       f->networkAddr[6],
+                                                       f->networkAddr[7],
+                                                       f->networkAddr[8],
+                                                       f->networkAddr[9],
+                                                       f->networkAddr[10],
+                                                       f->networkAddr[11],
+                                                       f->networkAddr[12],
+                                                       f->networkAddr[13],
+                                                       f->networkAddr[14],
+                                                       f->networkAddr[15],
+                                                       f->networkAddr[16]);
+#else
+
+                                               panic_printk("NAT25 Expire H(%02d) M:%02x%02x%02x%02x%02x%02x N:%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x\n",
+                                                       i,
+                                                       f->macAddr[0],
+                                                       f->macAddr[1],
+                                                       f->macAddr[2],
+                                                       f->macAddr[3],
+                                                       f->macAddr[4],
+                                                       f->macAddr[5],
+                                                       f->networkAddr[0],
+                                                       f->networkAddr[1],
+                                                       f->networkAddr[2],
+                                                       f->networkAddr[3],
+                                                       f->networkAddr[4],
+                                                       f->networkAddr[5],
+                                                       f->networkAddr[6],
+                                                       f->networkAddr[7],
+                                                       f->networkAddr[8],
+                                                       f->networkAddr[9],
+                                                       f->networkAddr[10]);
+#endif
+#endif
+                                               if(priv->scdb_entry == f)
+                                               {
+                                                       memset(priv->scdb_mac, 0, ETH_ALEN);
+                                                       memset(priv->scdb_ip, 0, 4);
+                                                       priv->scdb_entry = NULL;
+                                               }
+                                               __network_hash_unlink(f);
+                                               rtw_mfree((u8 *) f, sizeof(struct nat25_network_db_entry));
+                                       }
+                               }
+
+                               f = g;
+                       }
+               }
+       }
+
+       _exit_critical_bh(&priv->br_ext_lock, &irqL);
+}
+
+
+#ifdef SUPPORT_TX_MCAST2UNI
+static int checkIPMcAndReplace(_adapter *priv, struct sk_buff *skb, unsigned int *dst_ip)
+{
+       struct stat_info        *pstat;
+       struct list_head        *phead, *plist;
+       int i;
+
+       phead = &priv->asoc_list;
+       plist = phead->next;
+
+       while (plist != phead) {
+               pstat = list_entry(plist, struct stat_info, asoc_list);
+               plist = plist->next;
+
+               if (pstat->ipmc_num == 0)
+                       continue;
+
+               for (i=0; i<MAX_IP_MC_ENTRY; i++) {
+                       if (pstat->ipmc[i].used && !memcmp(&pstat->ipmc[i].mcmac[3], ((unsigned char *)dst_ip)+1, 3)) {
+                               memcpy(skb->data, pstat->ipmc[i].mcmac, ETH_ALEN);
+                               return 1;
+                       }
+               }
+       }
+       return 0;
+}
+#endif
+
+int nat25_db_handle(_adapter *priv, struct sk_buff *skb, int method)
+{
+       unsigned short protocol;
+       unsigned char networkAddr[MAX_NETWORK_ADDR_LEN];
+
+       if(skb == NULL)
+               return -1;
+
+       if((method <= NAT25_MIN) || (method >= NAT25_MAX))
+               return -1;
+
+       protocol = *((unsigned short *)(skb->data + 2 * ETH_ALEN));
+
+       /*---------------------------------------------------*/
+       /*                 Handle IP frame                   */
+       /*---------------------------------------------------*/
+       if(protocol == __constant_htons(ETH_P_IP))
+       {
+               struct iphdr* iph = (struct iphdr *)(skb->data + ETH_HLEN);
+
+               if(((unsigned char*)(iph) + (iph->ihl<<2)) >= (skb->data + ETH_HLEN + skb->len))
+               {
+                       DEBUG_WARN("NAT25: malformed IP packet !\n");
+                       return -1;
+               }
+
+               switch(method)
+               {
+                       case NAT25_CHECK:
+                               return -1;
+
+                       case NAT25_INSERT:
+                               {
+                                       //some muticast with source IP is all zero, maybe other case is illegal
+                                       //in class A, B, C, host address is all zero or all one is illegal
+                                       if (iph->saddr == 0)
+                                               return 0;
+                                       DEBUG_INFO("NAT25: Insert IP, SA=%08x, DA=%08x\n", iph->saddr, iph->daddr);
+                                       __nat25_generate_ipv4_network_addr(networkAddr, &iph->saddr);
+                                       //record source IP address and , source mac address into db
+                                       __nat25_db_network_insert(priv, skb->data+ETH_ALEN, networkAddr);
+
+                                       __nat25_db_print(priv);
+                               }
+                               return 0;
+
+                       case NAT25_LOOKUP:
+                               {
+                                       DEBUG_INFO("NAT25: Lookup IP, SA=%08x, DA=%08x\n", iph->saddr, iph->daddr);
+#ifdef SUPPORT_TX_MCAST2UNI
+                                       if (priv->pshare->rf_ft_var.mc2u_disable ||
+                                                       ((((OPMODE & (WIFI_STATION_STATE|WIFI_ASOC_STATE))
+                                                       == (WIFI_STATION_STATE|WIFI_ASOC_STATE)) &&
+                                                       !checkIPMcAndReplace(priv, skb, &iph->daddr)) ||
+                                                       (OPMODE & WIFI_ADHOC_STATE)))
+#endif
+                                       {
+                                               __nat25_generate_ipv4_network_addr(networkAddr, &iph->daddr);
+
+                                               if (!__nat25_db_network_lookup_and_replace(priv, skb, networkAddr)) {
+                                                       if (*((unsigned char *)&iph->daddr + 3) == 0xff) {
+                                                               // L2 is unicast but L3 is broadcast, make L2 bacome broadcast
+                                                               DEBUG_INFO("NAT25: Set DA as boardcast\n");
+                                                               memset(skb->data, 0xff, ETH_ALEN);
+                                                       }
+                                                       else {
+                                                               // forward unknow IP packet to upper TCP/IP
+                                                               DEBUG_INFO("NAT25: Replace DA with BR's MAC\n");
+                                                               if ( (*(u32 *)priv->br_mac) == 0 && (*(u16 *)(priv->br_mac+4)) == 0 ) {
+                                                                       void netdev_br_init(struct net_device *netdev);
+                                                                       printk("Re-init netdev_br_init() due to br_mac==0!\n");
+                                                                       netdev_br_init(priv->pnetdev);
+                                                               }
+                                                               memcpy(skb->data, priv->br_mac, ETH_ALEN);
+                                                       }
+                                               }
+                                       }
+                               }
+                               return 0;
+
+                       default:
+                               return -1;
+               }
+       }
+
+       /*---------------------------------------------------*/
+       /*                 Handle ARP frame                  */
+       /*---------------------------------------------------*/
+       else if(protocol == __constant_htons(ETH_P_ARP))
+       {
+               struct arphdr *arp = (struct arphdr *)(skb->data + ETH_HLEN);
+               unsigned char *arp_ptr = (unsigned char *)(arp + 1);
+               unsigned int *sender, *target;
+
+               if(arp->ar_pro != __constant_htons(ETH_P_IP))
+               {
+                       DEBUG_WARN("NAT25: arp protocol unknown (%4x)!\n", htons(arp->ar_pro));
+                       return -1;
+               }
+
+               switch(method)
+               {
+                       case NAT25_CHECK:
+                               return 0;       // skb_copy for all ARP frame
+
+                       case NAT25_INSERT:
+                               {
+                                       DEBUG_INFO("NAT25: Insert ARP, MAC=%02x%02x%02x%02x%02x%02x\n", arp_ptr[0],
+                                               arp_ptr[1], arp_ptr[2], arp_ptr[3], arp_ptr[4], arp_ptr[5]);
+
+                                       // change to ARP sender mac address to wlan STA address
+                                        memcpy(arp_ptr, GET_MY_HWADDR(priv), ETH_ALEN);
+
+                                       arp_ptr += arp->ar_hln;
+                                       sender = (unsigned int *)arp_ptr;
+
+                                       __nat25_generate_ipv4_network_addr(networkAddr, sender);
+
+                                       __nat25_db_network_insert(priv, skb->data+ETH_ALEN, networkAddr);
+
+                                       __nat25_db_print(priv);
+                               }
+                               return 0;
+
+                       case NAT25_LOOKUP:
+                               {
+                                       DEBUG_INFO("NAT25: Lookup ARP\n");
+
+                                       arp_ptr += arp->ar_hln;
+                                       sender = (unsigned int *)arp_ptr;
+                                       arp_ptr += (arp->ar_hln + arp->ar_pln);
+                                       target = (unsigned int *)arp_ptr;
+
+                                       __nat25_generate_ipv4_network_addr(networkAddr, target);
+
+                                       __nat25_db_network_lookup_and_replace(priv, skb, networkAddr);
+
+                                       // change to ARP target mac address to Lookup result
+                                       arp_ptr = (unsigned char *)(arp + 1);
+                                       arp_ptr += (arp->ar_hln + arp->ar_pln);
+                                       memcpy(arp_ptr, skb->data, ETH_ALEN);
+                               }
+                               return 0;
+
+                       default:
+                               return -1;
+               }
+       }
+
+       /*---------------------------------------------------*/
+       /*         Handle IPX and Apple Talk frame           */
+       /*---------------------------------------------------*/
+       else if((protocol == __constant_htons(ETH_P_IPX)) ||
+               (protocol <= __constant_htons(ETH_FRAME_LEN)))
+       {
+               unsigned char ipx_header[2] = {0xFF, 0xFF};
+               struct ipxhdr   *ipx = NULL;
+               struct elapaarp *ea = NULL;
+               struct ddpehdr  *ddp = NULL;
+               unsigned char *framePtr = skb->data + ETH_HLEN;
+
+               if(protocol == __constant_htons(ETH_P_IPX))
+               {
+                       DEBUG_INFO("NAT25: Protocol=IPX (Ethernet II)\n");
+                       ipx = (struct ipxhdr *)framePtr;
+               }
+               else if(protocol <= __constant_htons(ETH_FRAME_LEN))
+               {
+                       if(!memcmp(ipx_header, framePtr, 2))
+                       {
+                               DEBUG_INFO("NAT25: Protocol=IPX (Ethernet 802.3)\n");
+                               ipx = (struct ipxhdr *)framePtr;
+                       }
+                       else
+                       {
+                               unsigned char ipx_8022_type =  0xE0;
+                               unsigned char snap_8022_type = 0xAA;
+
+                               if(*framePtr == snap_8022_type)
+                               {
+                                       unsigned char ipx_snap_id[5] = {0x0, 0x0, 0x0, 0x81, 0x37};             // IPX SNAP ID
+                                       unsigned char aarp_snap_id[5] = {0x00, 0x00, 0x00, 0x80, 0xF3}; // Apple Talk AARP SNAP ID
+                                       unsigned char ddp_snap_id[5] = {0x08, 0x00, 0x07, 0x80, 0x9B};  // Apple Talk DDP SNAP ID
+
+                                       framePtr += 3;  // eliminate the 802.2 header
+
+                                       if(!memcmp(ipx_snap_id, framePtr, 5))
+                                       {
+                                               framePtr += 5;  // eliminate the SNAP header
+
+                                               DEBUG_INFO("NAT25: Protocol=IPX (Ethernet SNAP)\n");
+                                               ipx = (struct ipxhdr *)framePtr;
+                                       }
+                                       else if(!memcmp(aarp_snap_id, framePtr, 5))
+                                       {
+                                               framePtr += 5;  // eliminate the SNAP header
+
+                                               ea = (struct elapaarp *)framePtr;
+                                       }
+                                       else if(!memcmp(ddp_snap_id, framePtr, 5))
+                                       {
+                                               framePtr += 5;  // eliminate the SNAP header
+
+                                               ddp = (struct ddpehdr *)framePtr;
+                                       }
+                                       else
+                                       {
+                                               DEBUG_WARN("NAT25: Protocol=Ethernet SNAP %02x%02x%02x%02x%02x\n", framePtr[0],
+                                                       framePtr[1], framePtr[2], framePtr[3], framePtr[4]);
+                                               return -1;
+                                       }
+                               }
+                               else if(*framePtr == ipx_8022_type)
+                               {
+                                       framePtr += 3;  // eliminate the 802.2 header
+
+                                       if(!memcmp(ipx_header, framePtr, 2))
+                                       {
+                                               DEBUG_INFO("NAT25: Protocol=IPX (Ethernet 802.2)\n");
+                                               ipx = (struct ipxhdr *)framePtr;
+                                       }
+                                       else
+                                               return -1;
+                               }
+                               else
+                                       return -1;
+                       }
+               }
+               else
+                       return -1;
+
+               /*   IPX   */
+               if(ipx != NULL)
+               {
+                       switch(method)
+                       {
+                               case NAT25_CHECK:
+                                       if(!memcmp(skb->data+ETH_ALEN, ipx->ipx_source.node, ETH_ALEN))
+                                       {
+                                               DEBUG_INFO("NAT25: Check IPX skb_copy\n");
+                                               return 0;
+                                       }
+                                       return -1;
+
+                               case NAT25_INSERT:
+                                       {
+                                               DEBUG_INFO("NAT25: Insert IPX, Dest=%08x,%02x%02x%02x%02x%02x%02x,%04x Source=%08x,%02x%02x%02x%02x%02x%02x,%04x\n",
+                                                       ipx->ipx_dest.net,
+                                                       ipx->ipx_dest.node[0],
+                                                       ipx->ipx_dest.node[1],
+                                                       ipx->ipx_dest.node[2],
+                                                       ipx->ipx_dest.node[3],
+                                                       ipx->ipx_dest.node[4],
+                                                       ipx->ipx_dest.node[5],
+                                                       ipx->ipx_dest.sock,
+                                                       ipx->ipx_source.net,
+                                                       ipx->ipx_source.node[0],
+                                                       ipx->ipx_source.node[1],
+                                                       ipx->ipx_source.node[2],
+                                                       ipx->ipx_source.node[3],
+                                                       ipx->ipx_source.node[4],
+                                                       ipx->ipx_source.node[5],
+                                                       ipx->ipx_source.sock);
+
+                                               if(!memcmp(skb->data+ETH_ALEN, ipx->ipx_source.node, ETH_ALEN))
+                                               {
+                                                       DEBUG_INFO("NAT25: Use IPX Net, and Socket as network addr\n");
+
+                                                       __nat25_generate_ipx_network_addr_with_socket(networkAddr, &ipx->ipx_source.net, &ipx->ipx_source.sock);
+
+                                                       // change IPX source node addr to wlan STA address
+                                                        memcpy(ipx->ipx_source.node, GET_MY_HWADDR(priv), ETH_ALEN);
+                                               }
+                                               else
+                                               {
+                                                       __nat25_generate_ipx_network_addr_with_node(networkAddr, &ipx->ipx_source.net, ipx->ipx_source.node);
+                                               }
+
+                                               __nat25_db_network_insert(priv, skb->data+ETH_ALEN, networkAddr);
+
+                                               __nat25_db_print(priv);
+                                       }
+                                       return 0;
+
+                               case NAT25_LOOKUP:
+                                       {
+                                                if(!memcmp(GET_MY_HWADDR(priv), ipx->ipx_dest.node, ETH_ALEN))
+                                               {
+                                                       DEBUG_INFO("NAT25: Lookup IPX, Modify Destination IPX Node addr\n");
+
+                                                       __nat25_generate_ipx_network_addr_with_socket(networkAddr, &ipx->ipx_dest.net, &ipx->ipx_dest.sock);
+
+                                                       __nat25_db_network_lookup_and_replace(priv, skb, networkAddr);
+
+                                                       // replace IPX destination node addr with Lookup destination MAC addr
+                                                       memcpy(ipx->ipx_dest.node, skb->data, ETH_ALEN);
+                                               }
+                                               else
+                                               {
+                                                       __nat25_generate_ipx_network_addr_with_node(networkAddr, &ipx->ipx_dest.net, ipx->ipx_dest.node);
+
+                                                       __nat25_db_network_lookup_and_replace(priv, skb, networkAddr);
+                                               }
+                                       }
+                                       return 0;
+
+                               default:
+                                       return -1;
+                       }
+               }
+
+               /*   AARP   */
+               else if(ea != NULL)
+               {
+                       /* Sanity check fields. */
+                       if(ea->hw_len != ETH_ALEN || ea->pa_len != AARP_PA_ALEN)
+                       {
+                               DEBUG_WARN("NAT25: Appletalk AARP Sanity check fail!\n");
+                               return -1;
+                       }
+
+                       switch(method)
+                       {
+                               case NAT25_CHECK:
+                                       return 0;
+
+                               case NAT25_INSERT:
+                                       {
+                                               // change to AARP source mac address to wlan STA address
+                                                memcpy(ea->hw_src, GET_MY_HWADDR(priv), ETH_ALEN);
+
+                                               DEBUG_INFO("NAT25: Insert AARP, Source=%d,%d Destination=%d,%d\n",
+                                                       ea->pa_src_net,
+                                                       ea->pa_src_node,
+                                                       ea->pa_dst_net,
+                                                       ea->pa_dst_node);
+
+                                               __nat25_generate_apple_network_addr(networkAddr, &ea->pa_src_net, &ea->pa_src_node);
+
+                                               __nat25_db_network_insert(priv, skb->data+ETH_ALEN, networkAddr);
+
+                                               __nat25_db_print(priv);
+                                       }
+                                       return 0;
+
+                               case NAT25_LOOKUP:
+                                       {
+                                               DEBUG_INFO("NAT25: Lookup AARP, Source=%d,%d Destination=%d,%d\n",
+                                                       ea->pa_src_net,
+                                                       ea->pa_src_node,
+                                                       ea->pa_dst_net,
+                                                       ea->pa_dst_node);
+
+                                               __nat25_generate_apple_network_addr(networkAddr, &ea->pa_dst_net, &ea->pa_dst_node);
+
+                                               __nat25_db_network_lookup_and_replace(priv, skb, networkAddr);
+
+                                               // change to AARP destination mac address to Lookup result
+                                               memcpy(ea->hw_dst, skb->data, ETH_ALEN);
+                                       }
+                                       return 0;
+
+                               default:
+                                       return -1;
+                       }
+               }
+
+               /*   DDP   */
+               else if(ddp != NULL)
+               {
+                       switch(method)
+                       {
+                               case NAT25_CHECK:
+                                       return -1;
+
+                               case NAT25_INSERT:
+                                       {
+                                               DEBUG_INFO("NAT25: Insert DDP, Source=%d,%d Destination=%d,%d\n",
+                                                       ddp->deh_snet,
+                                                       ddp->deh_snode,
+                                                       ddp->deh_dnet,
+                                                       ddp->deh_dnode);
+
+                                               __nat25_generate_apple_network_addr(networkAddr, &ddp->deh_snet, &ddp->deh_snode);
+
+                                               __nat25_db_network_insert(priv, skb->data+ETH_ALEN, networkAddr);
+
+                                               __nat25_db_print(priv);
+                                       }
+                                       return 0;
+
+                               case NAT25_LOOKUP:
+                                       {
+                                               DEBUG_INFO("NAT25: Lookup DDP, Source=%d,%d Destination=%d,%d\n",
+                                                       ddp->deh_snet,
+                                                       ddp->deh_snode,
+                                                       ddp->deh_dnet,
+                                                       ddp->deh_dnode);
+
+                                               __nat25_generate_apple_network_addr(networkAddr, &ddp->deh_dnet, &ddp->deh_dnode);
+
+                                               __nat25_db_network_lookup_and_replace(priv, skb, networkAddr);
+                                       }
+                                       return 0;
+
+                               default:
+                                       return -1;
+                       }
+               }
+
+               return -1;
+       }
+
+       /*---------------------------------------------------*/
+       /*                Handle PPPoE frame                 */
+       /*---------------------------------------------------*/
+       else if((protocol == __constant_htons(ETH_P_PPP_DISC)) ||
+               (protocol == __constant_htons(ETH_P_PPP_SES)))
+       {
+               struct pppoe_hdr *ph = (struct pppoe_hdr *)(skb->data + ETH_HLEN);
+               unsigned short *pMagic;
+
+               switch(method)
+               {
+                       case NAT25_CHECK:
+                               if (ph->sid == 0)
+                                       return 0;
+                               return 1;
+
+                       case NAT25_INSERT:
+                               if(ph->sid == 0)        // Discovery phase according to tag
+                               {
+                                       if(ph->code == PADI_CODE || ph->code == PADR_CODE)
+                                       {
+                                               if (priv->ethBrExtInfo.addPPPoETag) {
+                                                       struct pppoe_tag *tag, *pOldTag;
+                                                       unsigned char tag_buf[40];
+                                                       int old_tag_len=0;
+
+                                                       tag = (struct pppoe_tag *)tag_buf;
+                                                       pOldTag = (struct pppoe_tag *)__nat25_find_pppoe_tag(ph, ntohs(PTT_RELAY_SID));
+                                                       if (pOldTag) { // if SID existed, copy old value and delete it
+                                                               old_tag_len = ntohs(pOldTag->tag_len);
+                                                               if (old_tag_len+TAG_HDR_LEN+MAGIC_CODE_LEN+RTL_RELAY_TAG_LEN > sizeof(tag_buf)) {
+                                                                       DEBUG_ERR("SID tag length too long!\n");
+                                                                       return -1;
+                                                               }
+
+                                                               memcpy(tag->tag_data+MAGIC_CODE_LEN+RTL_RELAY_TAG_LEN,
+                                                                       pOldTag->tag_data, old_tag_len);
+
+                                                               if (skb_pull_and_merge(skb, (unsigned char *)pOldTag, TAG_HDR_LEN+old_tag_len) < 0) {
+                                                                       DEBUG_ERR("call skb_pull_and_merge() failed in PADI/R packet!\n");
+                                                                       return -1;
+                                                               }
+                                                               ph->length = htons(ntohs(ph->length)-TAG_HDR_LEN-old_tag_len);
+                                                       }
+
+                                                       tag->tag_type = PTT_RELAY_SID;
+                                                       tag->tag_len = htons(MAGIC_CODE_LEN+RTL_RELAY_TAG_LEN+old_tag_len);
+
+                                                       // insert the magic_code+client mac in relay tag
+                                                       pMagic = (unsigned short *)tag->tag_data;
+                                                       *pMagic = htons(MAGIC_CODE);
+                                                       memcpy(tag->tag_data+MAGIC_CODE_LEN, skb->data+ETH_ALEN, ETH_ALEN);
+
+                                                       //Add relay tag
+                                                       if(__nat25_add_pppoe_tag(skb, tag) < 0)
+                                                               return -1;
+
+                                                       DEBUG_INFO("NAT25: Insert PPPoE, forward %s packet\n",
+                                                                                       (ph->code == PADI_CODE ? "PADI" : "PADR"));
+                                               }
+                                               else { // not add relay tag
+                                                       if (priv->pppoe_connection_in_progress &&
+                                                                       memcmp(skb->data+ETH_ALEN, priv->pppoe_addr, ETH_ALEN))  {
+                                                               DEBUG_ERR("Discard PPPoE packet due to another PPPoE connection is in progress!\n");
+                                                               return -2;
+                                                       }
+
+                                                       if (priv->pppoe_connection_in_progress == 0)
+                                                               memcpy(priv->pppoe_addr, skb->data+ETH_ALEN, ETH_ALEN);
+
+                                                       priv->pppoe_connection_in_progress = WAIT_TIME_PPPOE;
+                                               }
+                                       }
+                                       else
+                                               return -1;
+                               }
+                               else    // session phase
+                               {
+                                               DEBUG_INFO("NAT25: Insert PPPoE, insert session packet to %s\n", skb->dev->name);
+
+                                               __nat25_generate_pppoe_network_addr(networkAddr, skb->data, &(ph->sid));
+
+                                               __nat25_db_network_insert(priv, skb->data+ETH_ALEN, networkAddr);
+
+                                               __nat25_db_print(priv);
+
+                                               if (!priv->ethBrExtInfo.addPPPoETag &&
+                                                               priv->pppoe_connection_in_progress &&
+                                                                       !memcmp(skb->data+ETH_ALEN, priv->pppoe_addr, ETH_ALEN))
+                                                       priv->pppoe_connection_in_progress = 0;
+                               }
+                               return 0;
+
+                       case NAT25_LOOKUP:
+                               if(ph->code == PADO_CODE || ph->code == PADS_CODE)
+                               {
+                                       if (priv->ethBrExtInfo.addPPPoETag) {
+                                               struct pppoe_tag *tag;
+                                               unsigned char *ptr;
+                                               unsigned short tagType, tagLen;
+                                               int offset=0;
+
+                                               if((ptr = __nat25_find_pppoe_tag(ph, ntohs(PTT_RELAY_SID))) == 0) {
+                                                       DEBUG_ERR("Fail to find PTT_RELAY_SID in FADO!\n");
+                                                       return -1;
+                                               }
+
+                                               tag = (struct pppoe_tag *)ptr;
+                                               tagType = (unsigned short)((ptr[0] << 8) + ptr[1]);
+                                               tagLen = (unsigned short)((ptr[2] << 8) + ptr[3]);
+
+                                               if((tagType != ntohs(PTT_RELAY_SID)) || (tagLen < (MAGIC_CODE_LEN+RTL_RELAY_TAG_LEN))) {
+                                                       DEBUG_ERR("Invalid PTT_RELAY_SID tag length [%d]!\n", tagLen);
+                                                       return -1;
+                                               }
+
+                                               pMagic = (unsigned short *)tag->tag_data;
+                                               if (ntohs(*pMagic) != MAGIC_CODE) {
+                                                       DEBUG_ERR("Can't find MAGIC_CODE in %s packet!\n",
+                                                               (ph->code == PADO_CODE ? "PADO" : "PADS"));
+                                                       return -1;
+                                               }
+
+                                               memcpy(skb->data, tag->tag_data+MAGIC_CODE_LEN, ETH_ALEN);
+
+                                               if (tagLen > MAGIC_CODE_LEN+RTL_RELAY_TAG_LEN)
+                                                       offset = TAG_HDR_LEN;
+
+                                               if (skb_pull_and_merge(skb, ptr+offset, TAG_HDR_LEN+MAGIC_CODE_LEN+RTL_RELAY_TAG_LEN-offset) < 0) {
+                                                       DEBUG_ERR("call skb_pull_and_merge() failed in PADO packet!\n");
+                                                       return -1;
+                                               }
+                                               ph->length = htons(ntohs(ph->length)-(TAG_HDR_LEN+MAGIC_CODE_LEN+RTL_RELAY_TAG_LEN-offset));
+                                               if (offset > 0)
+                                                       tag->tag_len = htons(tagLen-MAGIC_CODE_LEN-RTL_RELAY_TAG_LEN);
+
+                                               DEBUG_INFO("NAT25: Lookup PPPoE, forward %s Packet from %s\n",
+                                                       (ph->code == PADO_CODE ? "PADO" : "PADS"),      skb->dev->name);
+                                       }
+                                       else { // not add relay tag
+                                               if (!priv->pppoe_connection_in_progress) {
+                                                       DEBUG_ERR("Discard PPPoE packet due to no connection in progresss!\n");
+                                                       return -1;
+                                               }
+                                               memcpy(skb->data, priv->pppoe_addr, ETH_ALEN);
+                                               priv->pppoe_connection_in_progress = WAIT_TIME_PPPOE;
+                                       }
+                               }
+                               else {
+                                       if(ph->sid != 0)
+                                       {
+                                               DEBUG_INFO("NAT25: Lookup PPPoE, lookup session packet from %s\n", skb->dev->name);
+                                               __nat25_generate_pppoe_network_addr(networkAddr, skb->data+ETH_ALEN, &(ph->sid));
+
+                                               __nat25_db_network_lookup_and_replace(priv, skb, networkAddr);
+
+                                               __nat25_db_print(priv);
+                                       }
+                                       else
+                                               return -1;
+
+                               }
+                               return 0;
+
+                       default:
+                               return -1;
+               }
+       }
+
+       /*---------------------------------------------------*/
+       /*                 Handle EAP frame                  */
+       /*---------------------------------------------------*/
+       else if(protocol == __constant_htons(0x888e))
+       {
+               switch(method)
+               {
+                       case NAT25_CHECK:
+                               return -1;
+
+                       case NAT25_INSERT:
+                               return 0;
+
+                       case NAT25_LOOKUP:
+                               return 0;
+
+                       default:
+                               return -1;
+               }
+       }
+
+       /*---------------------------------------------------*/
+       /*         Handle C-Media proprietary frame          */
+       /*---------------------------------------------------*/
+       else if((protocol == __constant_htons(0xe2ae)) ||
+               (protocol == __constant_htons(0xe2af)))
+       {
+               switch(method)
+               {
+                       case NAT25_CHECK:
+                               return -1;
+
+                       case NAT25_INSERT:
+                               return 0;
+
+                       case NAT25_LOOKUP:
+                               return 0;
+
+                       default:
+                               return -1;
+               }
+       }
+
+       /*---------------------------------------------------*/
+       /*         Handle IPV6 frame                                                              */
+       /*---------------------------------------------------*/
+#ifdef CL_IPV6_PASS
+       else if(protocol == __constant_htons(ETH_P_IPV6))
+       {
+               struct ipv6hdr *iph = (struct ipv6hdr *)(skb->data + ETH_HLEN);
+
+               if (sizeof(*iph) >= (skb->len - ETH_HLEN))
+               {
+                       DEBUG_WARN("NAT25: malformed IPv6 packet !\n");
+                       return -1;
+               }
+
+               switch(method)
+               {
+                       case NAT25_CHECK:
+                               if (skb->data[0] & 1)
+                                       return 0;
+                               return -1;
+
+                       case NAT25_INSERT:
+                               {
+                                       DEBUG_INFO("NAT25: Insert IP, SA=%4x:%4x:%4x:%4x:%4x:%4x:%4x:%4x,"
+                                                                       " DA=%4x:%4x:%4x:%4x:%4x:%4x:%4x:%4x\n",
+                                               iph->saddr.s6_addr16[0],iph->saddr.s6_addr16[1],iph->saddr.s6_addr16[2],iph->saddr.s6_addr16[3],
+                                               iph->saddr.s6_addr16[4],iph->saddr.s6_addr16[5],iph->saddr.s6_addr16[6],iph->saddr.s6_addr16[7],
+                                               iph->daddr.s6_addr16[0],iph->daddr.s6_addr16[1],iph->daddr.s6_addr16[2],iph->daddr.s6_addr16[3],
+                                               iph->daddr.s6_addr16[4],iph->daddr.s6_addr16[5],iph->daddr.s6_addr16[6],iph->daddr.s6_addr16[7]);
+
+                                       if (memcmp(&iph->saddr, "\x0\x0\x0\x0\x0\x0\x0\x0\x0\x0\x0\x0\x0\x0\x0\x0", 16)) {
+                                               __nat25_generate_ipv6_network_addr(networkAddr, (unsigned int *)&iph->saddr);
+                                               __nat25_db_network_insert(priv, skb->data+ETH_ALEN, networkAddr);
+                                               __nat25_db_print(priv);
+
+                                               if (iph->nexthdr == IPPROTO_ICMPV6 &&
+                                                               skb->len > (ETH_HLEN +  sizeof(*iph) + 4)) {
+                                                       if (update_nd_link_layer_addr(skb->data + ETH_HLEN + sizeof(*iph),
+                                                                skb->len - ETH_HLEN - sizeof(*iph), GET_MY_HWADDR(priv))) {
+                                                               struct icmp6hdr  *hdr = (struct icmp6hdr *)(skb->data + ETH_HLEN + sizeof(*iph));
+                                                               hdr->icmp6_cksum = 0;
+                                                               hdr->icmp6_cksum = csum_ipv6_magic(&iph->saddr, &iph->daddr,
+                                                                                               iph->payload_len,
+                                                                                               IPPROTO_ICMPV6,
+                                                                                               csum_partial((__u8 *)hdr, iph->payload_len, 0));
+                                                       }
+                                               }
+                                       }
+                               }
+                               return 0;
+
+                       case NAT25_LOOKUP:
+                               DEBUG_INFO("NAT25: Lookup IP, SA=%4x:%4x:%4x:%4x:%4x:%4x:%4x:%4x,"
+                                                               " DA=%4x:%4x:%4x:%4x:%4x:%4x:%4x:%4x\n",
+                                               iph->saddr.s6_addr16[0],iph->saddr.s6_addr16[1],iph->saddr.s6_addr16[2],iph->saddr.s6_addr16[3],
+                                               iph->saddr.s6_addr16[4],iph->saddr.s6_addr16[5],iph->saddr.s6_addr16[6],iph->saddr.s6_addr16[7],
+                                               iph->daddr.s6_addr16[0],iph->daddr.s6_addr16[1],iph->daddr.s6_addr16[2],iph->daddr.s6_addr16[3],
+                                               iph->daddr.s6_addr16[4],iph->daddr.s6_addr16[5],iph->daddr.s6_addr16[6],iph->daddr.s6_addr16[7]);
+
+
+                               __nat25_generate_ipv6_network_addr(networkAddr, (unsigned int *)&iph->daddr);
+                               if (!__nat25_db_network_lookup_and_replace(priv, skb, networkAddr)) {
+#ifdef SUPPORT_RX_UNI2MCAST
+                                       if (iph->daddr.s6_addr[0] == 0xff)
+                                               convert_ipv6_mac_to_mc(skb);
+#endif
+                               }
+                               return 0;
+
+                       default:
+                               return -1;
+               }
+       }
+#endif // CL_IPV6_PASS
+
+       return -1;
+}
+
+
+int nat25_handle_frame(_adapter *priv, struct sk_buff *skb)
+{
+#ifdef BR_EXT_DEBUG
+       if((!priv->ethBrExtInfo.nat25_disable) && (!(skb->data[0] & 1)))
+       {
+               panic_printk("NAT25: Input Frame: DA=%02x%02x%02x%02x%02x%02x SA=%02x%02x%02x%02x%02x%02x\n",
+                       skb->data[0],
+                       skb->data[1],
+                       skb->data[2],
+                       skb->data[3],
+                       skb->data[4],
+                       skb->data[5],
+                       skb->data[6],
+                       skb->data[7],
+                       skb->data[8],
+                       skb->data[9],
+                       skb->data[10],
+                       skb->data[11]);
+       }
+#endif
+
+       if(!(skb->data[0] & 1))
+       {
+               int is_vlan_tag=0, i, retval=0;
+               unsigned short vlan_hdr=0;
+
+               if (*((unsigned short *)(skb->data+ETH_ALEN*2)) == __constant_htons(ETH_P_8021Q)) {
+                       is_vlan_tag = 1;
+                       vlan_hdr = *((unsigned short *)(skb->data+ETH_ALEN*2+2));
+                       for (i=0; i<6; i++)
+                               *((unsigned short *)(skb->data+ETH_ALEN*2+2-i*2)) = *((unsigned short *)(skb->data+ETH_ALEN*2-2-i*2));
+                       skb_pull(skb, 4);
+               }
+
+               if (!priv->ethBrExtInfo.nat25_disable)
+               {
+                       _irqL irqL;
+                       _enter_critical_bh(&priv->br_ext_lock, &irqL);
+                       /*
+                        *      This function look up the destination network address from
+                        *      the NAT2.5 database. Return value = -1 means that the
+                        *      corresponding network protocol is NOT support.
+                        */
+                       if (!priv->ethBrExtInfo.nat25sc_disable &&
+                               (*((unsigned short *)(skb->data+ETH_ALEN*2)) == __constant_htons(ETH_P_IP)) &&
+                               !memcmp(priv->scdb_ip, skb->data+ETH_HLEN+16, 4)) {
+                               memcpy(skb->data, priv->scdb_mac, ETH_ALEN);
+
+                               _exit_critical_bh(&priv->br_ext_lock, &irqL);
+                       }
+                       else {
+                               _exit_critical_bh(&priv->br_ext_lock, &irqL);
+
+                               retval = nat25_db_handle(priv, skb, NAT25_LOOKUP);
+                       }
+               }
+               else {
+                       if (((*((unsigned short *)(skb->data+ETH_ALEN*2)) == __constant_htons(ETH_P_IP)) &&
+                                       !memcmp(priv->br_ip, skb->data+ETH_HLEN+16, 4)) ||
+                               ((*((unsigned short *)(skb->data+ETH_ALEN*2)) == __constant_htons(ETH_P_ARP)) &&
+                                       !memcmp(priv->br_ip, skb->data+ETH_HLEN+24, 4))) {
+                               // for traffic to upper TCP/IP
+                               retval = nat25_db_handle(priv, skb, NAT25_LOOKUP);
+                       }
+               }
+
+               if (is_vlan_tag) {
+                       skb_push(skb, 4);
+                       for (i=0; i<6; i++)
+                               *((unsigned short *)(skb->data+i*2)) = *((unsigned short *)(skb->data+4+i*2));
+                       *((unsigned short *)(skb->data+ETH_ALEN*2)) = __constant_htons(ETH_P_8021Q);
+                       *((unsigned short *)(skb->data+ETH_ALEN*2+2)) = vlan_hdr;
+               }
+
+               if(retval == -1) {
+                       //DEBUG_ERR("NAT25: Lookup fail!\n");
+                       return -1;
+               }
+       }
+
+       return 0;
+}
+
+#if 0
+void mac_clone(_adapter *priv, unsigned char *addr)
+{
+       struct sockaddr sa;
+
+       memcpy(sa.sa_data, addr, ETH_ALEN);
+       DEBUG_INFO("MAC Clone: Addr=%02x%02x%02x%02x%02x%02x\n",
+               addr[0], addr[1], addr[2], addr[3], addr[4], addr[5]);
+       rtl8192cd_set_hwaddr(priv->dev, &sa);
+}
+
+
+int mac_clone_handle_frame(_adapter *priv, struct sk_buff *skb)
+{
+       if(priv->ethBrExtInfo.macclone_enable && !priv->macclone_completed)
+       {
+               if(!(skb->data[ETH_ALEN] & 1))  //// check any other particular MAC add
+               {
+                        if(memcmp(skb->data+ETH_ALEN, GET_MY_HWADDR(priv), ETH_ALEN) &&
+                               ((priv->dev->br_port) &&
+                                memcmp(skb->data+ETH_ALEN, priv->br_mac, ETH_ALEN)))
+                       {
+                               mac_clone(priv, skb->data+ETH_ALEN);
+                               priv->macclone_completed = 1;
+                       }
+               }
+       }
+
+       return 0;
+}
+#endif // 0
+
+#define SERVER_PORT                    67
+#define CLIENT_PORT                    68
+#define DHCP_MAGIC                     0x63825363
+#define BROADCAST_FLAG         0x8000
+
+struct dhcpMessage {
+       u_int8_t op;
+       u_int8_t htype;
+       u_int8_t hlen;
+       u_int8_t hops;
+       u_int32_t xid;
+       u_int16_t secs;
+       u_int16_t flags;
+       u_int32_t ciaddr;
+       u_int32_t yiaddr;
+       u_int32_t siaddr;
+       u_int32_t giaddr;
+       u_int8_t chaddr[16];
+       u_int8_t sname[64];
+       u_int8_t file[128];
+       u_int32_t cookie;
+       u_int8_t options[308]; /* 312 - cookie */
+};
+
+void dhcp_flag_bcast(_adapter *priv, struct sk_buff *skb)
+{
+       if(skb == NULL)
+               return;
+
+       if(!priv->ethBrExtInfo.dhcp_bcst_disable)
+       {
+               unsigned short protocol = *((unsigned short *)(skb->data + 2 * ETH_ALEN));
+
+               if(protocol == __constant_htons(ETH_P_IP)) // IP
+               {
+                       struct iphdr* iph = (struct iphdr *)(skb->data + ETH_HLEN);
+
+                       if(iph->protocol == IPPROTO_UDP) // UDP
+                       {
+                               struct udphdr *udph = (struct udphdr *)((SIZE_PTR)iph + (iph->ihl << 2));
+
+                               if((udph->source == __constant_htons(CLIENT_PORT))
+                                       && (udph->dest == __constant_htons(SERVER_PORT))) // DHCP request
+                               {
+                                       struct dhcpMessage *dhcph =
+                                               (struct dhcpMessage *)((SIZE_PTR)udph + sizeof(struct udphdr));
+
+                                       if(dhcph->cookie == __constant_htonl(DHCP_MAGIC)) // match magic word
+                                       {
+                                               if(!(dhcph->flags & htons(BROADCAST_FLAG))) // if not broadcast
+                                               {
+                                                       register int sum = 0;
+
+                                                       DEBUG_INFO("DHCP: change flag of DHCP request to broadcast.\n");
+                                                       // or BROADCAST flag
+                                                       dhcph->flags |= htons(BROADCAST_FLAG);
+                                                       // recalculate checksum
+                                                       sum = ~(udph->check) & 0xffff;
+                                                       sum += dhcph->flags;
+                                                       while(sum >> 16)
+                                                               sum = (sum & 0xffff) + (sum >> 16);
+                                                       udph->check = ~sum;
+                                               }
+                                       }
+                               }
+                       }
+               }
+       }
+}
+
+
+void *scdb_findEntry(_adapter *priv, unsigned char *macAddr,
+                               unsigned char *ipAddr)
+{
+       unsigned char networkAddr[MAX_NETWORK_ADDR_LEN];
+       struct nat25_network_db_entry *db;
+       int hash;
+       //_irqL irqL;
+       //_enter_critical_bh(&priv->br_ext_lock, &irqL);
+
+       __nat25_generate_ipv4_network_addr(networkAddr, (unsigned int *)ipAddr);
+       hash = __nat25_network_hash(networkAddr);
+       db = priv->nethash[hash];
+       while (db != NULL)
+       {
+               if(!memcmp(db->networkAddr, networkAddr, MAX_NETWORK_ADDR_LEN)) {
+                       //_exit_critical_bh(&priv->br_ext_lock, &irqL);
+                       return (void *)db;
+               }
+
+               db = db->next_hash;
+       }
+
+       //_exit_critical_bh(&priv->br_ext_lock, &irqL);
+       return NULL;
+}
+
+#endif // CONFIG_BR_EXT
diff --git a/drivers/net/wireless/realtek/rtl8192cu/core/rtw_cmd.c b/drivers/net/wireless/realtek/rtl8192cu/core/rtw_cmd.c
new file mode 100644 (file)
index 0000000..2455304
--- /dev/null
@@ -0,0 +1,3034 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#define _RTW_CMD_C_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <recv_osdep.h>
+#include <cmd_osdep.h>
+#include <mlme_osdep.h>
+#include <rtw_byteorder.h>
+#ifdef CONFIG_BR_EXT
+#include <rtw_br_ext.h>
+#endif //CONFIG_BR_EXT
+/*
+Caller and the rtw_cmd_thread can protect cmd_q by spin_lock.
+No irqsave is necessary.
+*/
+
+sint   _rtw_init_cmd_priv (struct      cmd_priv *pcmdpriv)
+{
+       sint res=_SUCCESS;
+
+_func_enter_;
+
+       _rtw_init_sema(&(pcmdpriv->cmd_queue_sema), 0);
+       //_rtw_init_sema(&(pcmdpriv->cmd_done_sema), 0);
+       _rtw_init_sema(&(pcmdpriv->terminate_cmdthread_sema), 0);
+
+
+       _rtw_init_queue(&(pcmdpriv->cmd_queue));
+
+       //allocate DMA-able/Non-Page memory for cmd_buf and rsp_buf
+
+       pcmdpriv->cmd_seq = 1;
+
+       pcmdpriv->cmd_allocated_buf = rtw_zmalloc(MAX_CMDSZ + CMDBUFF_ALIGN_SZ);
+
+       if (pcmdpriv->cmd_allocated_buf == NULL){
+               res= _FAIL;
+               goto exit;
+       }
+
+       pcmdpriv->cmd_buf = pcmdpriv->cmd_allocated_buf  +  CMDBUFF_ALIGN_SZ - ( (SIZE_PTR)(pcmdpriv->cmd_allocated_buf) & (CMDBUFF_ALIGN_SZ-1));
+
+       pcmdpriv->rsp_allocated_buf = rtw_zmalloc(MAX_RSPSZ + 4);
+
+       if (pcmdpriv->rsp_allocated_buf == NULL){
+               res= _FAIL;
+               goto exit;
+       }
+
+       pcmdpriv->rsp_buf = pcmdpriv->rsp_allocated_buf  +  4 - ( (SIZE_PTR)(pcmdpriv->rsp_allocated_buf) & 3);
+
+       pcmdpriv->cmd_issued_cnt = pcmdpriv->cmd_done_cnt = pcmdpriv->rsp_cnt = 0;
+
+exit:
+
+_func_exit_;
+
+       return res;
+
+}
+
+#ifdef CONFIG_C2H_WK
+static void c2h_wk_callback(_workitem *work);
+#endif
+sint _rtw_init_evt_priv(struct evt_priv *pevtpriv)
+{
+       sint res=_SUCCESS;
+
+_func_enter_;
+
+#ifdef CONFIG_H2CLBK
+       _rtw_init_sema(&(pevtpriv->lbkevt_done), 0);
+       pevtpriv->lbkevt_limit = 0;
+       pevtpriv->lbkevt_num = 0;
+       pevtpriv->cmdevt_parm = NULL;
+#endif
+
+       //allocate DMA-able/Non-Page memory for cmd_buf and rsp_buf
+       ATOMIC_SET(&pevtpriv->event_seq, 0);
+       pevtpriv->evt_done_cnt = 0;
+
+#ifdef CONFIG_EVENT_THREAD_MODE
+
+       _rtw_init_sema(&(pevtpriv->evt_notify), 0);
+       _rtw_init_sema(&(pevtpriv->terminate_evtthread_sema), 0);
+
+       pevtpriv->evt_allocated_buf = rtw_zmalloc(MAX_EVTSZ + 4);
+       if (pevtpriv->evt_allocated_buf == NULL){
+               res= _FAIL;
+               goto exit;
+               }
+       pevtpriv->evt_buf = pevtpriv->evt_allocated_buf  +  4 - ((unsigned int)(pevtpriv->evt_allocated_buf) & 3);
+
+
+#ifdef CONFIG_SDIO_HCI
+       pevtpriv->allocated_c2h_mem = rtw_zmalloc(C2H_MEM_SZ +4);
+
+       if (pevtpriv->allocated_c2h_mem == NULL){
+               res= _FAIL;
+               goto exit;
+       }
+
+       pevtpriv->c2h_mem = pevtpriv->allocated_c2h_mem +  4\
+       - ( (u32)(pevtpriv->allocated_c2h_mem) & 3);
+#ifdef PLATFORM_OS_XP
+       pevtpriv->pc2h_mdl= IoAllocateMdl((u8 *)pevtpriv->c2h_mem, C2H_MEM_SZ , FALSE, FALSE, NULL);
+
+       if(pevtpriv->pc2h_mdl == NULL){
+               res= _FAIL;
+               goto exit;
+       }
+       MmBuildMdlForNonPagedPool(pevtpriv->pc2h_mdl);
+#endif
+#endif //end of CONFIG_SDIO_HCI
+
+       _rtw_init_queue(&(pevtpriv->evt_queue));
+
+exit:
+
+#endif //end of CONFIG_EVENT_THREAD_MODE
+
+#ifdef CONFIG_C2H_WK
+       _init_workitem(&pevtpriv->c2h_wk, c2h_wk_callback, NULL);
+       pevtpriv->c2h_wk_alive = _FALSE;
+       pevtpriv->c2h_queue = rtw_cbuf_alloc(C2H_QUEUE_MAX_LEN+1);
+#endif
+
+_func_exit_;
+
+       return res;
+}
+
+void _rtw_free_evt_priv (struct        evt_priv *pevtpriv)
+{
+_func_enter_;
+
+       RT_TRACE(_module_rtl871x_cmd_c_,_drv_info_,("+_rtw_free_evt_priv \n"));
+
+#ifdef CONFIG_EVENT_THREAD_MODE
+       _rtw_free_sema(&(pevtpriv->evt_notify));
+       _rtw_free_sema(&(pevtpriv->terminate_evtthread_sema));
+
+
+       if (pevtpriv->evt_allocated_buf)
+               rtw_mfree(pevtpriv->evt_allocated_buf, MAX_EVTSZ + 4);
+#endif
+
+#ifdef CONFIG_C2H_WK
+       _cancel_workitem_sync(&pevtpriv->c2h_wk);
+       while(pevtpriv->c2h_wk_alive)
+               rtw_msleep_os(10);
+
+       while (!rtw_cbuf_empty(pevtpriv->c2h_queue)) {
+               void *c2h;
+               if ((c2h = rtw_cbuf_pop(pevtpriv->c2h_queue)) != NULL
+                       && c2h != (void *)pevtpriv) {
+                       rtw_mfree(c2h, 16);
+               }
+       }
+       rtw_cbuf_free(pevtpriv->c2h_queue);
+#endif
+
+       RT_TRACE(_module_rtl871x_cmd_c_,_drv_info_,("-_rtw_free_evt_priv \n"));
+
+_func_exit_;
+
+}
+
+void _rtw_free_cmd_priv (struct        cmd_priv *pcmdpriv)
+{
+_func_enter_;
+
+       if(pcmdpriv){
+               _rtw_spinlock_free(&(pcmdpriv->cmd_queue.lock));
+               _rtw_free_sema(&(pcmdpriv->cmd_queue_sema));
+               //_rtw_free_sema(&(pcmdpriv->cmd_done_sema));
+               _rtw_free_sema(&(pcmdpriv->terminate_cmdthread_sema));
+
+               if (pcmdpriv->cmd_allocated_buf)
+                       rtw_mfree(pcmdpriv->cmd_allocated_buf, MAX_CMDSZ + CMDBUFF_ALIGN_SZ);
+
+               if (pcmdpriv->rsp_allocated_buf)
+                       rtw_mfree(pcmdpriv->rsp_allocated_buf, MAX_RSPSZ + 4);
+       }
+_func_exit_;
+}
+
+/*
+Calling Context:
+
+rtw_enqueue_cmd can only be called between kernel thread,
+since only spin_lock is used.
+
+ISR/Call-Back functions can't call this sub-function.
+
+*/
+
+sint   _rtw_enqueue_cmd(_queue *queue, struct cmd_obj *obj)
+{
+       _irqL irqL;
+
+_func_enter_;
+
+       if (obj == NULL)
+               goto exit;
+
+       //_enter_critical_bh(&queue->lock, &irqL);
+       _enter_critical(&queue->lock, &irqL);
+
+       rtw_list_insert_tail(&obj->list, &queue->queue);
+
+       //_exit_critical_bh(&queue->lock, &irqL);
+       _exit_critical(&queue->lock, &irqL);
+
+exit:
+
+_func_exit_;
+
+       return _SUCCESS;
+}
+
+struct cmd_obj *_rtw_dequeue_cmd(_queue *queue)
+{
+       _irqL irqL;
+       struct cmd_obj *obj;
+
+_func_enter_;
+
+       //_enter_critical_bh(&(queue->lock), &irqL);
+       _enter_critical(&queue->lock, &irqL);
+       if (rtw_is_list_empty(&(queue->queue)))
+               obj = NULL;
+       else
+       {
+               obj = LIST_CONTAINOR(get_next(&(queue->queue)), struct cmd_obj, list);
+               rtw_list_delete(&obj->list);
+       }
+
+       //_exit_critical_bh(&(queue->lock), &irqL);
+       _exit_critical(&queue->lock, &irqL);
+
+_func_exit_;
+
+       return obj;
+}
+
+u32    rtw_init_cmd_priv(struct cmd_priv *pcmdpriv)
+{
+       u32     res;
+_func_enter_;
+       res = _rtw_init_cmd_priv (pcmdpriv);
+_func_exit_;
+       return res;
+}
+
+u32    rtw_init_evt_priv (struct       evt_priv *pevtpriv)
+{
+       int     res;
+_func_enter_;
+       res = _rtw_init_evt_priv(pevtpriv);
+_func_exit_;
+       return res;
+}
+
+void rtw_free_evt_priv (struct evt_priv *pevtpriv)
+{
+_func_enter_;
+       RT_TRACE(_module_rtl871x_cmd_c_,_drv_info_,("rtw_free_evt_priv\n"));
+       _rtw_free_evt_priv(pevtpriv);
+_func_exit_;
+}
+
+void rtw_free_cmd_priv (struct cmd_priv *pcmdpriv)
+{
+_func_enter_;
+       RT_TRACE(_module_rtl871x_cmd_c_,_drv_info_,("rtw_free_cmd_priv\n"));
+       _rtw_free_cmd_priv(pcmdpriv);
+_func_exit_;
+}
+
+int rtw_cmd_filter(struct cmd_priv *pcmdpriv, struct cmd_obj *cmd_obj);
+int rtw_cmd_filter(struct cmd_priv *pcmdpriv, struct cmd_obj *cmd_obj)
+{
+       u8 bAllow = _FALSE; //set to _TRUE to allow enqueuing cmd when hw_init_completed is _FALSE
+
+       #ifdef SUPPORT_HW_RFOFF_DETECTED
+       //To decide allow or not
+       if(     (pcmdpriv->padapter->pwrctrlpriv.bHWPwrPindetect)
+               &&(!pcmdpriv->padapter->registrypriv.usbss_enable)
+       )
+       {
+               if(cmd_obj->cmdcode == GEN_CMD_CODE(_Set_Drv_Extra) )
+               {
+                       struct drvextra_cmd_parm        *pdrvextra_cmd_parm = (struct drvextra_cmd_parm *)cmd_obj->parmbuf;
+                       if(pdrvextra_cmd_parm->ec_id == POWER_SAVING_CTRL_WK_CID)
+                       {
+                               //DBG_871X("==>enqueue POWER_SAVING_CTRL_WK_CID\n");
+                               bAllow = _TRUE;
+                       }
+               }
+       }
+       #endif
+
+       if(cmd_obj->cmdcode == GEN_CMD_CODE(_SetChannelPlan))
+               bAllow = _TRUE;
+
+       if( (pcmdpriv->padapter->hw_init_completed ==_FALSE && bAllow == _FALSE)
+               || pcmdpriv->cmdthd_running== _FALSE    //com_thread not running
+       )
+       {
+               //DBG_871X("%s:%s: drop cmdcode:%u, hw_init_completed:%u, cmdthd_running:%u\n", caller_func, __FUNCTION__,
+               //      cmd_obj->cmdcode,
+               //      pcmdpriv->padapter->hw_init_completed,
+               //      pcmdpriv->cmdthd_running
+               //);
+
+               return _FAIL;
+       }
+       return _SUCCESS;
+}
+
+
+
+u32 rtw_enqueue_cmd(struct cmd_priv *pcmdpriv, struct cmd_obj *cmd_obj)
+{
+       int res = _FAIL;
+       PADAPTER padapter = pcmdpriv->padapter;
+
+_func_enter_;
+
+       if (cmd_obj == NULL) {
+               goto exit;
+       }
+
+       cmd_obj->padapter = padapter;
+
+#ifdef CONFIG_CONCURRENT_MODE
+       //change pcmdpriv to primary's pcmdpriv
+       if (padapter->adapter_type != PRIMARY_ADAPTER && padapter->pbuddy_adapter)
+               pcmdpriv = &(padapter->pbuddy_adapter->cmdpriv);
+#endif
+
+       if( _FAIL == (res=rtw_cmd_filter(pcmdpriv, cmd_obj)) ) {
+               rtw_free_cmd_obj(cmd_obj);
+               goto exit;
+       }
+
+       res = _rtw_enqueue_cmd(&pcmdpriv->cmd_queue, cmd_obj);
+
+       if(res == _SUCCESS)
+               _rtw_up_sema(&pcmdpriv->cmd_queue_sema);
+
+exit:
+
+_func_exit_;
+
+       return res;
+}
+
+struct cmd_obj *rtw_dequeue_cmd(struct cmd_priv *pcmdpriv)
+{
+       struct cmd_obj *cmd_obj;
+
+_func_enter_;
+
+       cmd_obj = _rtw_dequeue_cmd(&pcmdpriv->cmd_queue);
+
+_func_exit_;
+       return cmd_obj;
+}
+
+void rtw_cmd_clr_isr(struct    cmd_priv *pcmdpriv)
+{
+_func_enter_;
+       pcmdpriv->cmd_done_cnt++;
+       //_rtw_up_sema(&(pcmdpriv->cmd_done_sema));
+_func_exit_;
+}
+
+void rtw_free_cmd_obj(struct cmd_obj *pcmd)
+{
+_func_enter_;
+
+       if((pcmd->cmdcode!=_JoinBss_CMD_) &&(pcmd->cmdcode!= _CreateBss_CMD_))
+       {
+               //free parmbuf in cmd_obj
+               rtw_mfree((unsigned char*)pcmd->parmbuf, pcmd->cmdsz);
+       }
+
+       if(pcmd->rsp!=NULL)
+       {
+               if(pcmd->rspsz!= 0)
+               {
+                       //free rsp in cmd_obj
+                       rtw_mfree((unsigned char*)pcmd->rsp, pcmd->rspsz);
+               }
+       }
+
+       //free cmd_obj
+       rtw_mfree((unsigned char*)pcmd, sizeof(struct cmd_obj));
+
+_func_exit_;
+}
+
+void rtw_stop_cmd_thread(_adapter *adapter)
+{
+       if(adapter->cmdThread && adapter->cmdpriv.cmdthd_running == _TRUE
+               && adapter->cmdpriv.stop_req == 0)
+       {
+               adapter->cmdpriv.stop_req = 1;
+               _rtw_up_sema(&adapter->cmdpriv.cmd_queue_sema);
+               _rtw_down_sema(&adapter->cmdpriv.terminate_cmdthread_sema);
+       }
+}
+
+thread_return rtw_cmd_thread(thread_context context)
+{
+       u8 ret;
+       struct cmd_obj *pcmd;
+       u8 *pcmdbuf, *prspbuf;
+       u8 (*cmd_hdl)(_adapter *padapter, u8* pbuf);
+       void (*pcmd_callback)(_adapter *dev, struct cmd_obj *pcmd);
+       _adapter *padapter = (_adapter *)context;
+       struct cmd_priv *pcmdpriv = &(padapter->cmdpriv);
+
+_func_enter_;
+
+       thread_enter("RTW_CMD_THREAD");
+
+       pcmdbuf = pcmdpriv->cmd_buf;
+       prspbuf = pcmdpriv->rsp_buf;
+
+       pcmdpriv->stop_req = 0;
+       pcmdpriv->cmdthd_running=_TRUE;
+       _rtw_up_sema(&pcmdpriv->terminate_cmdthread_sema);
+
+       RT_TRACE(_module_rtl871x_cmd_c_,_drv_info_,("start r871x rtw_cmd_thread !!!!\n"));
+
+       while(1)
+       {
+               if ((_rtw_down_sema(&(pcmdpriv->cmd_queue_sema))) == _FAIL) {
+                       LOG_LEVEL(_drv_err_, FUNC_ADPT_FMT" _rtw_down_sema(&pcmdpriv->cmd_queue_sema) return _FAIL, break\n", FUNC_ADPT_ARG(padapter));
+                       break;
+               }
+
+               if (pcmdpriv->stop_req) {
+                       LOG_LEVEL(_drv_err_, FUNC_ADPT_FMT" stop_req:%u, break\n", FUNC_ADPT_ARG(padapter), pcmdpriv->stop_req);
+                       break;
+               }
+
+#ifdef CONFIG_LPS_LCLK
+               if (rtw_register_cmd_alive(padapter) != _SUCCESS)
+               {
+                       continue;
+               }
+#endif
+
+_next:
+               if ((padapter->bDriverStopped == _TRUE)||(padapter->bSurpriseRemoved == _TRUE))
+               {
+                       LOG_LEVEL(_drv_err_, "%s: DriverStopped(%d) SurpriseRemoved(%d) break at line %d\n",
+                               __FUNCTION__, padapter->bDriverStopped, padapter->bSurpriseRemoved, __LINE__);
+                       break;
+               }
+
+               if(!(pcmd = rtw_dequeue_cmd(pcmdpriv))) {
+#ifdef CONFIG_LPS_LCLK
+                       rtw_unregister_cmd_alive(padapter);
+#endif
+                       continue;
+               }
+
+               if( _FAIL == rtw_cmd_filter(pcmdpriv, pcmd) )
+               {
+                       pcmd->res = H2C_DROPPED;
+                       goto post_process;
+               }
+
+               if( _FAIL == rtw_cmd_filter(pcmdpriv, pcmd) ) {
+                       rtw_free_cmd_obj(pcmd);
+                       continue;
+               }
+
+               pcmdpriv->cmd_issued_cnt++;
+
+               pcmd->cmdsz = _RND4((pcmd->cmdsz));//_RND4
+
+               _rtw_memcpy(pcmdbuf, pcmd->parmbuf, pcmd->cmdsz);
+
+               if(pcmd->cmdcode <= (sizeof(wlancmds) /sizeof(struct cmd_hdl)))
+               {
+                       cmd_hdl = wlancmds[pcmd->cmdcode].h2cfuns;
+
+                       if (cmd_hdl)
+                       {
+                               ret = cmd_hdl(pcmd->padapter, pcmdbuf);
+                               pcmd->res = ret;
+                       }
+
+                       pcmdpriv->cmd_seq++;
+               }
+               else
+               {
+                       pcmd->res = H2C_PARAMETERS_ERROR;
+               }
+
+               cmd_hdl = NULL;
+
+post_process:
+
+               //call callback function for post-processed
+               if(pcmd->cmdcode <= (sizeof(rtw_cmd_callback) /sizeof(struct _cmd_callback)))
+               {
+                       pcmd_callback = rtw_cmd_callback[pcmd->cmdcode].callback;
+                       if(pcmd_callback == NULL)
+                       {
+                               RT_TRACE(_module_rtl871x_cmd_c_,_drv_info_,("mlme_cmd_hdl(): pcmd_callback=0x%p, cmdcode=0x%x\n", pcmd_callback, pcmd->cmdcode));
+                               rtw_free_cmd_obj(pcmd);
+                       }
+                       else
+                       {
+                               //todo: !!! fill rsp_buf to pcmd->rsp if (pcmd->rsp!=NULL)
+                               pcmd_callback(pcmd->padapter, pcmd);//need conider that free cmd_obj in rtw_cmd_callback
+                       }
+               }
+
+               flush_signals_thread();
+
+               goto _next;
+
+       }
+       pcmdpriv->cmdthd_running=_FALSE;
+
+
+       // free all cmd_obj resources
+       do{
+               pcmd = rtw_dequeue_cmd(pcmdpriv);
+               if(pcmd==NULL)
+                       break;
+
+               //DBG_871X("%s: leaving... drop cmdcode:%u\n", __FUNCTION__, pcmd->cmdcode);
+
+               rtw_free_cmd_obj(pcmd);
+       }while(1);
+
+       _rtw_up_sema(&pcmdpriv->terminate_cmdthread_sema);
+
+_func_exit_;
+
+       thread_exit();
+
+}
+
+
+#ifdef CONFIG_EVENT_THREAD_MODE
+u32 rtw_enqueue_evt(struct evt_priv *pevtpriv, struct evt_obj *obj)
+{
+       _irqL irqL;
+       int     res;
+       _queue *queue = &pevtpriv->evt_queue;
+
+_func_enter_;
+
+       res = _SUCCESS;
+
+       if (obj == NULL) {
+               res = _FAIL;
+               goto exit;
+       }
+
+       _enter_critical_bh(&queue->lock, &irqL);
+
+       rtw_list_insert_tail(&obj->list, &queue->queue);
+
+       _exit_critical_bh(&queue->lock, &irqL);
+
+       //rtw_evt_notify_isr(pevtpriv);
+
+exit:
+
+_func_exit_;
+
+       return res;
+}
+
+struct evt_obj *rtw_dequeue_evt(_queue *queue)
+{
+       _irqL irqL;
+       struct  evt_obj *pevtobj;
+
+_func_enter_;
+
+       _enter_critical_bh(&queue->lock, &irqL);
+
+       if (rtw_is_list_empty(&(queue->queue)))
+               pevtobj = NULL;
+       else
+       {
+               pevtobj = LIST_CONTAINOR(get_next(&(queue->queue)), struct evt_obj, list);
+               rtw_list_delete(&pevtobj->list);
+       }
+
+       _exit_critical_bh(&queue->lock, &irqL);
+
+_func_exit_;
+
+       return pevtobj;
+}
+
+void rtw_free_evt_obj(struct evt_obj *pevtobj)
+{
+_func_enter_;
+
+       if(pevtobj->parmbuf)
+               rtw_mfree((unsigned char*)pevtobj->parmbuf, pevtobj->evtsz);
+
+       rtw_mfree((unsigned char*)pevtobj, sizeof(struct evt_obj));
+
+_func_exit_;
+}
+
+void rtw_evt_notify_isr(struct evt_priv *pevtpriv)
+{
+_func_enter_;
+       pevtpriv->evt_done_cnt++;
+       _rtw_up_sema(&(pevtpriv->evt_notify));
+_func_exit_;
+}
+#endif
+
+
+/*
+u8 rtw_setstandby_cmd(unsigned char  *adapter)
+*/
+u8 rtw_setstandby_cmd(_adapter *padapter, uint action)
+{
+       struct cmd_obj*                 ph2c;
+       struct usb_suspend_parm*        psetusbsuspend;
+       struct cmd_priv                         *pcmdpriv=&padapter->cmdpriv;
+
+       u8 ret = _SUCCESS;
+
+_func_enter_;
+
+       ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
+       if (ph2c == NULL) {
+               ret = _FAIL;
+               goto exit;
+       }
+
+       psetusbsuspend = (struct usb_suspend_parm*)rtw_zmalloc(sizeof(struct usb_suspend_parm));
+       if (psetusbsuspend == NULL) {
+               rtw_mfree((u8 *) ph2c, sizeof(struct    cmd_obj));
+               ret = _FAIL;
+               goto exit;
+       }
+
+       psetusbsuspend->action = action;
+
+       init_h2fwcmd_w_parm_no_rsp(ph2c, psetusbsuspend, GEN_CMD_CODE(_SetUsbSuspend));
+
+       ret = rtw_enqueue_cmd(pcmdpriv, ph2c);
+
+exit:
+
+_func_exit_;
+
+       return ret;
+}
+
+/*
+rtw_sitesurvey_cmd(~)
+       ### NOTE:#### (!!!!)
+       MUST TAKE CARE THAT BEFORE CALLING THIS FUNC, YOU SHOULD HAVE LOCKED pmlmepriv->lock
+*/
+u8 rtw_sitesurvey_cmd(_adapter  *padapter, NDIS_802_11_SSID *ssid, int ssid_num,
+       struct rtw_ieee80211_channel *ch, int ch_num)
+{
+       u8 res = _FAIL;
+       struct cmd_obj          *ph2c;
+       struct sitesurvey_parm  *psurveyPara;
+       struct cmd_priv         *pcmdpriv = &padapter->cmdpriv;
+       struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
+
+_func_enter_;
+
+#ifdef CONFIG_LPS
+       if(check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE){
+               rtw_lps_ctrl_wk_cmd(padapter, LPS_CTRL_SCAN, 1);
+       }
+#endif
+
+#ifdef CONFIG_P2P_PS
+       if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE) {
+               p2p_ps_wk_cmd(padapter, P2P_PS_SCAN, 1);
+       }
+#endif // CONFIG_P2P_PS
+
+       ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
+       if (ph2c == NULL)
+               return _FAIL;
+
+       psurveyPara = (struct sitesurvey_parm*)rtw_zmalloc(sizeof(struct sitesurvey_parm));
+       if (psurveyPara == NULL) {
+               rtw_mfree((unsigned char*) ph2c, sizeof(struct cmd_obj));
+               return _FAIL;
+       }
+
+       rtw_free_network_queue(padapter, _FALSE);
+
+       RT_TRACE(_module_rtl871x_cmd_c_, _drv_info_, ("\nflush  network queue\n\n"));
+
+       init_h2fwcmd_w_parm_no_rsp(ph2c, psurveyPara, GEN_CMD_CODE(_SiteSurvey));
+
+       /* psurveyPara->bsslimit = 48; */
+       psurveyPara->scan_mode = pmlmepriv->scan_mode;
+
+       /* prepare ssid list */
+       if (ssid) {
+               int i;
+               for (i=0; i<ssid_num && i< RTW_SSID_SCAN_AMOUNT; i++) {
+                       if (ssid[i].SsidLength) {
+                               _rtw_memcpy(&psurveyPara->ssid[i], &ssid[i], sizeof(NDIS_802_11_SSID));
+                               psurveyPara->ssid_num++;
+                               if (0)
+                               DBG_871X(FUNC_ADPT_FMT" ssid:(%s, %d)\n", FUNC_ADPT_ARG(padapter),
+                                       psurveyPara->ssid[i].Ssid, psurveyPara->ssid[i].SsidLength);
+                       }
+               }
+       }
+
+       /* prepare channel list */
+       if (ch) {
+               int i;
+               for (i=0; i<ch_num && i< RTW_CHANNEL_SCAN_AMOUNT; i++) {
+                       if (ch[i].hw_value && !(ch[i].flags & RTW_IEEE80211_CHAN_DISABLED)) {
+                               _rtw_memcpy(&psurveyPara->ch[i], &ch[i], sizeof(struct rtw_ieee80211_channel));
+                               psurveyPara->ch_num++;
+                               if (0)
+                               DBG_871X(FUNC_ADPT_FMT" ch:%u\n", FUNC_ADPT_ARG(padapter),
+                                       psurveyPara->ch[i].hw_value);
+                       }
+               }
+       }
+
+       set_fwstate(pmlmepriv, _FW_UNDER_SURVEY);
+
+       res = rtw_enqueue_cmd(pcmdpriv, ph2c);
+
+       if(res == _SUCCESS) {
+
+               pmlmepriv->scan_start_time = rtw_get_current_time();
+
+#ifdef CONFIG_STA_MODE_SCAN_UNDER_AP_MODE
+               if (padapter->pbuddy_adapter == NULL )
+                       goto full_scan_timeout;
+               if((padapter->pbuddy_adapter->mlmeextpriv.mlmext_info.state&0x03) == WIFI_FW_AP_STATE)
+                       _set_timer(&pmlmepriv->scan_to_timer,
+                               SURVEY_TO * ( padapter->mlmeextpriv.max_chan_nums + ( padapter->mlmeextpriv.max_chan_nums  / RTW_SCAN_NUM_OF_CH ) * RTW_STAY_AP_CH_MILLISECOND ) + 1000 );
+               else
+#endif //CONFIG_STA_MODE_SCAN_UNDER_AP_MODE
+full_scan_timeout:
+                       _set_timer(&pmlmepriv->scan_to_timer, SCANNING_TIMEOUT);
+
+               rtw_led_control(padapter, LED_CTL_SITE_SURVEY);
+
+               pmlmepriv->scan_interval = SCAN_INTERVAL;// 30*2 sec = 60sec
+       } else {
+               _clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY);
+       }
+
+_func_exit_;
+
+       return res;
+}
+
+u8 rtw_setdatarate_cmd(_adapter *padapter, u8 *rateset)
+{
+       struct cmd_obj*                 ph2c;
+       struct setdatarate_parm*        pbsetdataratepara;
+       struct cmd_priv*                pcmdpriv = &padapter->cmdpriv;
+       u8      res = _SUCCESS;
+
+_func_enter_;
+
+       ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
+       if (ph2c == NULL) {
+               res = _FAIL;
+               goto exit;
+       }
+
+       pbsetdataratepara = (struct setdatarate_parm*)rtw_zmalloc(sizeof(struct setdatarate_parm));
+       if (pbsetdataratepara == NULL) {
+               rtw_mfree((u8 *) ph2c, sizeof(struct cmd_obj));
+               res = _FAIL;
+               goto exit;
+       }
+
+       init_h2fwcmd_w_parm_no_rsp(ph2c, pbsetdataratepara, GEN_CMD_CODE(_SetDataRate));
+#ifdef MP_FIRMWARE_OFFLOAD
+       pbsetdataratepara->curr_rateidx = *(u32*)rateset;
+//     _rtw_memcpy(pbsetdataratepara, rateset, sizeof(u32));
+#else
+       pbsetdataratepara->mac_id = 5;
+       _rtw_memcpy(pbsetdataratepara->datarates, rateset, NumRates);
+#endif
+       res = rtw_enqueue_cmd(pcmdpriv, ph2c);
+exit:
+
+_func_exit_;
+
+       return res;
+}
+
+u8 rtw_setbasicrate_cmd(_adapter *padapter, u8 *rateset)
+{
+       struct cmd_obj*                 ph2c;
+       struct setbasicrate_parm*       pssetbasicratepara;
+       struct cmd_priv*                pcmdpriv=&padapter->cmdpriv;
+       u8      res = _SUCCESS;
+
+_func_enter_;
+
+       ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
+       if (ph2c == NULL) {
+               res= _FAIL;
+               goto exit;
+       }
+       pssetbasicratepara = (struct setbasicrate_parm*)rtw_zmalloc(sizeof(struct setbasicrate_parm));
+
+       if (pssetbasicratepara == NULL) {
+               rtw_mfree((u8*) ph2c, sizeof(struct cmd_obj));
+               res = _FAIL;
+               goto exit;
+       }
+
+       init_h2fwcmd_w_parm_no_rsp(ph2c, pssetbasicratepara, _SetBasicRate_CMD_);
+
+       _rtw_memcpy(pssetbasicratepara->basicrates, rateset, NumRates);
+
+       res = rtw_enqueue_cmd(pcmdpriv, ph2c);
+exit:
+
+_func_exit_;
+
+       return res;
+}
+
+
+/*
+unsigned char rtw_setphy_cmd(unsigned char  *adapter)
+
+1.  be called only after rtw_update_registrypriv_dev_network( ~) or mp testing program
+2.  for AdHoc/Ap mode or mp mode?
+
+*/
+u8 rtw_setphy_cmd(_adapter *padapter, u8 modem, u8 ch)
+{
+       struct cmd_obj*                 ph2c;
+       struct setphy_parm*             psetphypara;
+       struct cmd_priv                         *pcmdpriv=&padapter->cmdpriv;
+//     struct mlme_priv                        *pmlmepriv = &padapter->mlmepriv;
+//     struct registry_priv*           pregistry_priv = &padapter->registrypriv;
+       u8      res=_SUCCESS;
+
+_func_enter_;
+
+       ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
+       if(ph2c==NULL){
+               res= _FAIL;
+               goto exit;
+               }
+       psetphypara = (struct setphy_parm*)rtw_zmalloc(sizeof(struct setphy_parm));
+
+       if(psetphypara==NULL){
+               rtw_mfree((u8 *) ph2c, sizeof(struct    cmd_obj));
+               res= _FAIL;
+               goto exit;
+       }
+
+       init_h2fwcmd_w_parm_no_rsp(ph2c, psetphypara, _SetPhy_CMD_);
+
+       RT_TRACE(_module_rtl871x_cmd_c_,_drv_info_,("CH=%d, modem=%d", ch, modem));
+
+       psetphypara->modem = modem;
+       psetphypara->rfchannel = ch;
+
+       res = rtw_enqueue_cmd(pcmdpriv, ph2c);
+exit:
+_func_exit_;
+       return res;
+}
+
+u8 rtw_setbbreg_cmd(_adapter*padapter, u8 offset, u8 val)
+{
+       struct cmd_obj*                 ph2c;
+       struct writeBB_parm*            pwritebbparm;
+       struct cmd_priv                         *pcmdpriv=&padapter->cmdpriv;
+       u8      res=_SUCCESS;
+_func_enter_;
+       ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
+       if(ph2c==NULL){
+               res= _FAIL;
+               goto exit;
+               }
+       pwritebbparm = (struct writeBB_parm*)rtw_zmalloc(sizeof(struct writeBB_parm));
+
+       if(pwritebbparm==NULL){
+               rtw_mfree((u8 *) ph2c, sizeof(struct    cmd_obj));
+               res= _FAIL;
+               goto exit;
+       }
+
+       init_h2fwcmd_w_parm_no_rsp(ph2c, pwritebbparm, GEN_CMD_CODE(_SetBBReg));
+
+       pwritebbparm->offset = offset;
+       pwritebbparm->value = val;
+
+       res = rtw_enqueue_cmd(pcmdpriv, ph2c);
+exit:
+_func_exit_;
+       return res;
+}
+
+u8 rtw_getbbreg_cmd(_adapter  *padapter, u8 offset, u8 *pval)
+{
+       struct cmd_obj*                 ph2c;
+       struct readBB_parm*             prdbbparm;
+       struct cmd_priv                         *pcmdpriv=&padapter->cmdpriv;
+       u8      res=_SUCCESS;
+
+_func_enter_;
+       ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
+       if(ph2c==NULL){
+               res=_FAIL;
+               goto exit;
+               }
+       prdbbparm = (struct readBB_parm*)rtw_zmalloc(sizeof(struct readBB_parm));
+
+       if(prdbbparm ==NULL){
+               rtw_mfree((unsigned char *) ph2c, sizeof(struct cmd_obj));
+               return _FAIL;
+       }
+
+       _rtw_init_listhead(&ph2c->list);
+       ph2c->cmdcode =GEN_CMD_CODE(_GetBBReg);
+       ph2c->parmbuf = (unsigned char *)prdbbparm;
+       ph2c->cmdsz =  sizeof(struct readBB_parm);
+       ph2c->rsp = pval;
+       ph2c->rspsz = sizeof(struct readBB_rsp);
+
+       prdbbparm ->offset = offset;
+
+       res = rtw_enqueue_cmd(pcmdpriv, ph2c);
+exit:
+_func_exit_;
+       return res;
+}
+
+u8 rtw_setrfreg_cmd(_adapter  *padapter, u8 offset, u32 val)
+{
+       struct cmd_obj*                 ph2c;
+       struct writeRF_parm*            pwriterfparm;
+       struct cmd_priv                         *pcmdpriv=&padapter->cmdpriv;
+       u8      res=_SUCCESS;
+_func_enter_;
+       ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
+       if(ph2c==NULL){
+               res= _FAIL;
+               goto exit;
+       }
+       pwriterfparm = (struct writeRF_parm*)rtw_zmalloc(sizeof(struct writeRF_parm));
+
+       if(pwriterfparm==NULL){
+               rtw_mfree((u8 *) ph2c, sizeof(struct    cmd_obj));
+               res= _FAIL;
+               goto exit;
+       }
+
+       init_h2fwcmd_w_parm_no_rsp(ph2c, pwriterfparm, GEN_CMD_CODE(_SetRFReg));
+
+       pwriterfparm->offset = offset;
+       pwriterfparm->value = val;
+
+       res = rtw_enqueue_cmd(pcmdpriv, ph2c);
+exit:
+_func_exit_;
+       return res;
+}
+
+u8 rtw_getrfreg_cmd(_adapter  *padapter, u8 offset, u8 *pval)
+{
+       struct cmd_obj*                 ph2c;
+       struct readRF_parm*             prdrfparm;
+       struct cmd_priv                         *pcmdpriv=&padapter->cmdpriv;
+       u8      res=_SUCCESS;
+
+_func_enter_;
+
+       ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
+       if(ph2c==NULL){
+               res= _FAIL;
+               goto exit;
+       }
+
+       prdrfparm = (struct readRF_parm*)rtw_zmalloc(sizeof(struct readRF_parm));
+       if(prdrfparm ==NULL){
+               rtw_mfree((u8 *) ph2c, sizeof(struct    cmd_obj));
+               res= _FAIL;
+               goto exit;
+       }
+
+       _rtw_init_listhead(&ph2c->list);
+       ph2c->cmdcode =GEN_CMD_CODE(_GetRFReg);
+       ph2c->parmbuf = (unsigned char *)prdrfparm;
+       ph2c->cmdsz =  sizeof(struct readRF_parm);
+       ph2c->rsp = pval;
+       ph2c->rspsz = sizeof(struct readRF_rsp);
+
+       prdrfparm ->offset = offset;
+
+       res = rtw_enqueue_cmd(pcmdpriv, ph2c);
+
+exit:
+
+_func_exit_;
+
+       return res;
+}
+
+void rtw_getbbrfreg_cmdrsp_callback(_adapter*  padapter,  struct cmd_obj *pcmd)
+{
+ _func_enter_;
+
+       //rtw_free_cmd_obj(pcmd);
+       rtw_mfree((unsigned char*) pcmd->parmbuf, pcmd->cmdsz);
+       rtw_mfree((unsigned char*) pcmd, sizeof(struct cmd_obj));
+
+#ifdef CONFIG_MP_INCLUDED
+       padapter->mppriv.workparam.bcompleted= _TRUE;
+#endif
+_func_exit_;
+}
+
+void rtw_readtssi_cmdrsp_callback(_adapter*    padapter,  struct cmd_obj *pcmd)
+{
+ _func_enter_;
+
+       rtw_mfree((unsigned char*) pcmd->parmbuf, pcmd->cmdsz);
+       rtw_mfree((unsigned char*) pcmd, sizeof(struct cmd_obj));
+
+#ifdef CONFIG_MP_INCLUDED
+       padapter->mppriv.workparam.bcompleted= _TRUE;
+#endif
+
+_func_exit_;
+}
+
+u8 rtw_createbss_cmd(_adapter  *padapter)
+{
+       struct cmd_obj*                 pcmd;
+       struct cmd_priv                         *pcmdpriv=&padapter->cmdpriv;
+       struct mlme_priv                        *pmlmepriv = &padapter->mlmepriv;
+       WLAN_BSSID_EX           *pdev_network = &padapter->registrypriv.dev_network;
+       u8      res=_SUCCESS;
+
+_func_enter_;
+
+       rtw_led_control(padapter, LED_CTL_START_TO_LINK);
+
+       if (pmlmepriv->assoc_ssid.SsidLength == 0){
+               RT_TRACE(_module_rtl871x_cmd_c_,_drv_info_,(" createbss for Any SSid:%s\n",pmlmepriv->assoc_ssid.Ssid));
+       } else {
+               RT_TRACE(_module_rtl871x_cmd_c_,_drv_info_,(" createbss for SSid:%s\n", pmlmepriv->assoc_ssid.Ssid));
+       }
+
+       pcmd = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
+       if(pcmd==NULL){
+               res= _FAIL;
+               goto exit;
+       }
+
+       _rtw_init_listhead(&pcmd->list);
+       pcmd->cmdcode = _CreateBss_CMD_;
+       pcmd->parmbuf = (unsigned char *)pdev_network;
+       pcmd->cmdsz = get_WLAN_BSSID_EX_sz((WLAN_BSSID_EX*)pdev_network);
+       pcmd->rsp = NULL;
+       pcmd->rspsz = 0;
+
+       pdev_network->Length = pcmd->cmdsz;
+
+#ifdef CONFIG_RTL8712
+       //notes: translate IELength & Length after assign the Length to cmdsz;
+       pdev_network->Length = cpu_to_le32(pcmd->cmdsz);
+       pdev_network->IELength = cpu_to_le32(pdev_network->IELength);
+       pdev_network->Ssid.SsidLength = cpu_to_le32(pdev_network->Ssid.SsidLength);
+#endif
+
+       res = rtw_enqueue_cmd(pcmdpriv, pcmd);
+
+exit:
+
+_func_exit_;
+
+       return res;
+}
+
+u8 rtw_createbss_cmd_ex(_adapter  *padapter, unsigned char *pbss, unsigned int sz)
+{
+       struct cmd_obj* pcmd;
+       struct cmd_priv         *pcmdpriv=&padapter->cmdpriv;
+       u8      res=_SUCCESS;
+
+_func_enter_;
+
+       pcmd = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
+       if(pcmd==NULL){
+               res= _FAIL;
+               goto exit;
+       }
+
+       _rtw_init_listhead(&pcmd->list);
+       pcmd->cmdcode = GEN_CMD_CODE(_CreateBss);
+       pcmd->parmbuf = pbss;
+       pcmd->cmdsz =  sz;
+       pcmd->rsp = NULL;
+       pcmd->rspsz = 0;
+
+       res = rtw_enqueue_cmd(pcmdpriv, pcmd);
+
+exit:
+
+_func_exit_;
+
+       return res;
+}
+
+u8 rtw_joinbss_cmd(_adapter  *padapter, struct wlan_network* pnetwork)
+{
+       u8      *auth, res = _SUCCESS;
+       uint    t_len = 0;
+       WLAN_BSSID_EX           *psecnetwork;
+       struct cmd_obj          *pcmd;
+       struct cmd_priv         *pcmdpriv=&padapter->cmdpriv;
+       struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
+       struct qos_priv         *pqospriv= &pmlmepriv->qospriv;
+       struct security_priv    *psecuritypriv=&padapter->securitypriv;
+       struct registry_priv    *pregistrypriv = &padapter->registrypriv;
+       struct ht_priv                  *phtpriv = &pmlmepriv->htpriv;
+       NDIS_802_11_NETWORK_INFRASTRUCTURE ndis_network_mode = pnetwork->network.InfrastructureMode;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+_func_enter_;
+
+       rtw_led_control(padapter, LED_CTL_START_TO_LINK);
+
+       if (pmlmepriv->assoc_ssid.SsidLength == 0){
+               RT_TRACE(_module_rtl871x_cmd_c_, _drv_info_, ("+Join cmd: Any SSid\n"));
+       } else {
+               RT_TRACE(_module_rtl871x_cmd_c_, _drv_notice_, ("+Join cmd: SSid=[%s]\n", pmlmepriv->assoc_ssid.Ssid));
+       }
+
+       pcmd = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
+       if(pcmd==NULL){
+               res=_FAIL;
+               RT_TRACE(_module_rtl871x_cmd_c_, _drv_err_, ("rtw_joinbss_cmd: memory allocate for cmd_obj fail!!!\n"));
+               goto exit;
+       }
+       /* // for IEs is pointer
+       t_len = sizeof (ULONG) + sizeof (NDIS_802_11_MAC_ADDRESS) + 2 +
+                       sizeof (NDIS_802_11_SSID) + sizeof (ULONG) +
+                       sizeof (NDIS_802_11_RSSI) + sizeof (NDIS_802_11_NETWORK_TYPE) +
+                       sizeof (NDIS_802_11_CONFIGURATION) +
+                       sizeof (NDIS_802_11_NETWORK_INFRASTRUCTURE) +
+                       sizeof (NDIS_802_11_RATES_EX)+ sizeof(WLAN_PHY_INFO)+ sizeof (ULONG) + MAX_IE_SZ;
+       */
+       //for IEs is fix buf size
+       t_len = sizeof(WLAN_BSSID_EX);
+
+
+       //for hidden ap to set fw_state here
+       if (check_fwstate(pmlmepriv, WIFI_STATION_STATE|WIFI_ADHOC_STATE) != _TRUE)
+       {
+               switch(ndis_network_mode)
+               {
+                       case Ndis802_11IBSS:
+                               set_fwstate(pmlmepriv, WIFI_ADHOC_STATE);
+                               break;
+
+                       case Ndis802_11Infrastructure:
+                               set_fwstate(pmlmepriv, WIFI_STATION_STATE);
+                               break;
+
+                       case Ndis802_11APMode:
+                       case Ndis802_11AutoUnknown:
+                       case Ndis802_11InfrastructureMax:
+                               break;
+
+               }
+       }
+
+       psecnetwork=(WLAN_BSSID_EX *)&psecuritypriv->sec_bss;
+       if(psecnetwork==NULL)
+       {
+               if(pcmd !=NULL)
+                       rtw_mfree((unsigned char *)pcmd, sizeof(struct  cmd_obj));
+
+               res=_FAIL;
+
+               RT_TRACE(_module_rtl871x_cmd_c_, _drv_err_, ("rtw_joinbss_cmd :psecnetwork==NULL!!!\n"));
+
+               goto exit;
+       }
+
+       _rtw_memset(psecnetwork, 0, t_len);
+
+       _rtw_memcpy(psecnetwork, &pnetwork->network, get_WLAN_BSSID_EX_sz(&pnetwork->network));
+
+       auth=&psecuritypriv->authenticator_ie[0];
+       psecuritypriv->authenticator_ie[0]=(unsigned char)psecnetwork->IELength;
+
+       if((psecnetwork->IELength-12) < (256-1)) {
+               _rtw_memcpy(&psecuritypriv->authenticator_ie[1], &psecnetwork->IEs[12], psecnetwork->IELength-12);
+       } else {
+               _rtw_memcpy(&psecuritypriv->authenticator_ie[1], &psecnetwork->IEs[12], (256-1));
+       }
+
+       psecnetwork->IELength = 0;
+       // Added by Albert 2009/02/18
+       // If the the driver wants to use the bssid to create the connection.
+       // If not,  we have to copy the connecting AP's MAC address to it so that
+       // the driver just has the bssid information for PMKIDList searching.
+
+       if ( pmlmepriv->assoc_by_bssid == _FALSE )
+       {
+               _rtw_memcpy( &pmlmepriv->assoc_bssid[ 0 ], &pnetwork->network.MacAddress[ 0 ], ETH_ALEN );
+       }
+
+       psecnetwork->IELength = rtw_restruct_sec_ie(padapter, &pnetwork->network.IEs[0], &psecnetwork->IEs[0], pnetwork->network.IELength);
+
+
+       pqospriv->qos_option = 0;
+
+       if(pregistrypriv->wmm_enable)
+       {
+               u32 tmp_len;
+
+               tmp_len = rtw_restruct_wmm_ie(padapter, &pnetwork->network.IEs[0], &psecnetwork->IEs[0], pnetwork->network.IELength, psecnetwork->IELength);
+
+               if (psecnetwork->IELength != tmp_len)
+               {
+                       psecnetwork->IELength = tmp_len;
+                       pqospriv->qos_option = 1; //There is WMM IE in this corresp. beacon
+               }
+               else
+               {
+                       pqospriv->qos_option = 0;//There is no WMM IE in this corresp. beacon
+               }
+       }
+
+#ifdef CONFIG_80211N_HT
+       phtpriv->ht_option = _FALSE;
+       if(pregistrypriv->ht_enable)
+       {
+               //      Added by Albert 2010/06/23
+               //      For the WEP mode, we will use the bg mode to do the connection to avoid some IOT issue.
+               //      Especially for Realtek 8192u SoftAP.
+               if (    ( padapter->securitypriv.dot11PrivacyAlgrthm != _WEP40_ ) &&
+                       ( padapter->securitypriv.dot11PrivacyAlgrthm != _WEP104_ ) &&
+                       ( padapter->securitypriv.dot11PrivacyAlgrthm != _TKIP_ ))
+               {
+                       //rtw_restructure_ht_ie
+                       rtw_restructure_ht_ie(padapter, &pnetwork->network.IEs[0], &psecnetwork->IEs[0],
+                                                                       pnetwork->network.IELength, &psecnetwork->IELength, (u8)psecnetwork->Configuration.DSConfig );
+               }
+       }
+
+#endif
+
+       pmlmeinfo->assoc_AP_vendor = check_assoc_AP(pnetwork->network.IEs, pnetwork->network.IELength);
+
+       #if 0
+       psecuritypriv->supplicant_ie[0]=(u8)psecnetwork->IELength;
+
+       if(psecnetwork->IELength < (256-1))
+       {
+               _rtw_memcpy(&psecuritypriv->supplicant_ie[1], &psecnetwork->IEs[0], psecnetwork->IELength);
+       }
+       else
+       {
+               _rtw_memcpy(&psecuritypriv->supplicant_ie[1], &psecnetwork->IEs[0], (256-1));
+       }
+       #endif
+
+       pcmd->cmdsz = get_WLAN_BSSID_EX_sz(psecnetwork);//get cmdsz before endian conversion
+
+#ifdef CONFIG_RTL8712
+       //wlan_network endian conversion
+       psecnetwork->Length = cpu_to_le32(psecnetwork->Length);
+       psecnetwork->Ssid.SsidLength= cpu_to_le32(psecnetwork->Ssid.SsidLength);
+       psecnetwork->Privacy = cpu_to_le32(psecnetwork->Privacy);
+       psecnetwork->Rssi = cpu_to_le32(psecnetwork->Rssi);
+       psecnetwork->NetworkTypeInUse = cpu_to_le32(psecnetwork->NetworkTypeInUse);
+       psecnetwork->Configuration.ATIMWindow = cpu_to_le32(psecnetwork->Configuration.ATIMWindow);
+       psecnetwork->Configuration.BeaconPeriod = cpu_to_le32(psecnetwork->Configuration.BeaconPeriod);
+       psecnetwork->Configuration.DSConfig = cpu_to_le32(psecnetwork->Configuration.DSConfig);
+       psecnetwork->Configuration.FHConfig.DwellTime=cpu_to_le32(psecnetwork->Configuration.FHConfig.DwellTime);
+       psecnetwork->Configuration.FHConfig.HopPattern=cpu_to_le32(psecnetwork->Configuration.FHConfig.HopPattern);
+       psecnetwork->Configuration.FHConfig.HopSet=cpu_to_le32(psecnetwork->Configuration.FHConfig.HopSet);
+       psecnetwork->Configuration.FHConfig.Length=cpu_to_le32(psecnetwork->Configuration.FHConfig.Length);
+       psecnetwork->Configuration.Length = cpu_to_le32(psecnetwork->Configuration.Length);
+       psecnetwork->InfrastructureMode = cpu_to_le32(psecnetwork->InfrastructureMode);
+       psecnetwork->IELength = cpu_to_le32(psecnetwork->IELength);
+#endif
+
+       _rtw_init_listhead(&pcmd->list);
+       pcmd->cmdcode = _JoinBss_CMD_;//GEN_CMD_CODE(_JoinBss)
+       pcmd->parmbuf = (unsigned char *)psecnetwork;
+       pcmd->rsp = NULL;
+       pcmd->rspsz = 0;
+
+       res = rtw_enqueue_cmd(pcmdpriv, pcmd);
+
+exit:
+
+_func_exit_;
+
+       return res;
+}
+
+u8 rtw_disassoc_cmd(_adapter*padapter, u32 deauth_timeout_ms, bool enqueue) /* for sta_mode */
+{
+       struct cmd_obj *cmdobj = NULL;
+       struct disconnect_parm *param = NULL;
+       struct cmd_priv *cmdpriv = &padapter->cmdpriv;
+       u8 res = _SUCCESS;
+
+_func_enter_;
+
+       RT_TRACE(_module_rtl871x_cmd_c_, _drv_notice_, ("+rtw_disassoc_cmd\n"));
+
+       /* prepare cmd parameter */
+       param = (struct disconnect_parm *)rtw_zmalloc(sizeof(*param));
+       if (param == NULL) {
+               res = _FAIL;
+               goto exit;
+       }
+       param->deauth_timeout_ms = deauth_timeout_ms;
+
+       if (enqueue) {
+               /* need enqueue, prepare cmd_obj and enqueue */
+               cmdobj = (struct cmd_obj *)rtw_zmalloc(sizeof(*cmdobj));
+               if (cmdobj == NULL) {
+                       res = _FAIL;
+                       rtw_mfree((u8 *)param, sizeof(*param));
+                       goto exit;
+               }
+               init_h2fwcmd_w_parm_no_rsp(cmdobj, param, _DisConnect_CMD_);
+               res = rtw_enqueue_cmd(cmdpriv, cmdobj);
+       } else {
+               /* no need to enqueue, do the cmd hdl directly and free cmd parameter */
+               if (H2C_SUCCESS != disconnect_hdl(padapter, (u8 *)param))
+                       res = _FAIL;
+               rtw_mfree((u8 *)param, sizeof(*param));
+       }
+
+exit:
+
+_func_exit_;
+
+       return res;
+}
+
+u8 rtw_setopmode_cmd(_adapter  *padapter, NDIS_802_11_NETWORK_INFRASTRUCTURE networktype)
+{
+       struct  cmd_obj*        ph2c;
+       struct  setopmode_parm* psetop;
+
+       struct  cmd_priv   *pcmdpriv= &padapter->cmdpriv;
+       u8      res=_SUCCESS;
+
+_func_enter_;
+
+       ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
+       if(ph2c==NULL){
+               res= _FALSE;
+               goto exit;
+       }
+       psetop = (struct setopmode_parm*)rtw_zmalloc(sizeof(struct setopmode_parm));
+
+       if(psetop==NULL){
+               rtw_mfree((u8 *) ph2c, sizeof(struct    cmd_obj));
+               res=_FALSE;
+               goto exit;
+       }
+
+       init_h2fwcmd_w_parm_no_rsp(ph2c, psetop, _SetOpMode_CMD_);
+       psetop->mode = (u8)networktype;
+
+       res = rtw_enqueue_cmd(pcmdpriv, ph2c);
+
+exit:
+
+_func_exit_;
+
+       return res;
+}
+
+u8 rtw_setstakey_cmd(_adapter *padapter, u8 *psta, u8 unicast_key)
+{
+       struct cmd_obj*                 ph2c;
+       struct set_stakey_parm  *psetstakey_para;
+       struct cmd_priv                         *pcmdpriv=&padapter->cmdpriv;
+       struct set_stakey_rsp           *psetstakey_rsp = NULL;
+
+       struct mlme_priv                        *pmlmepriv = &padapter->mlmepriv;
+       struct security_priv            *psecuritypriv = &padapter->securitypriv;
+       struct sta_info*                        sta = (struct sta_info* )psta;
+       u8      res=_SUCCESS;
+
+_func_enter_;
+
+       ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
+       if ( ph2c == NULL){
+               res= _FAIL;
+               goto exit;
+       }
+
+       psetstakey_para = (struct set_stakey_parm*)rtw_zmalloc(sizeof(struct set_stakey_parm));
+       if(psetstakey_para==NULL){
+               rtw_mfree((u8 *) ph2c, sizeof(struct    cmd_obj));
+               res=_FAIL;
+               goto exit;
+       }
+
+       psetstakey_rsp = (struct set_stakey_rsp*)rtw_zmalloc(sizeof(struct set_stakey_rsp));
+       if(psetstakey_rsp == NULL){
+               rtw_mfree((u8 *) ph2c, sizeof(struct    cmd_obj));
+               rtw_mfree((u8 *) psetstakey_para, sizeof(struct set_stakey_parm));
+               res=_FAIL;
+               goto exit;
+       }
+
+       init_h2fwcmd_w_parm_no_rsp(ph2c, psetstakey_para, _SetStaKey_CMD_);
+       ph2c->rsp = (u8 *) psetstakey_rsp;
+       ph2c->rspsz = sizeof(struct set_stakey_rsp);
+
+       _rtw_memcpy(psetstakey_para->addr, sta->hwaddr,ETH_ALEN);
+
+       if(check_fwstate(pmlmepriv, WIFI_STATION_STATE)){
+#ifdef CONFIG_TDLS
+               if(sta->tdls_sta_state&TDLS_LINKED_STATE)
+                       psetstakey_para->algorithm=(u8)sta->dot118021XPrivacy;
+               else
+#endif //CONFIG_TDLS
+               psetstakey_para->algorithm =(unsigned char) psecuritypriv->dot11PrivacyAlgrthm;
+       }else{
+               GET_ENCRY_ALGO(psecuritypriv, sta, psetstakey_para->algorithm, _FALSE);
+       }
+
+       if (unicast_key == _TRUE) {
+#ifdef CONFIG_TDLS
+               if(sta->tdls_sta_state&TDLS_LINKED_STATE)
+                       _rtw_memcpy(&psetstakey_para->key, sta->tpk.tk, 16);
+               else
+#endif //CONFIG_TDLS
+                       _rtw_memcpy(&psetstakey_para->key, &sta->dot118021x_UncstKey, 16);
+        } else {
+               _rtw_memcpy(&psetstakey_para->key, &psecuritypriv->dot118021XGrpKey[psecuritypriv->dot118021XGrpKeyid].skey, 16);
+        }
+
+       //jeff: set this becasue at least sw key is ready
+       padapter->securitypriv.busetkipkey=_TRUE;
+
+       res = rtw_enqueue_cmd(pcmdpriv, ph2c);
+
+exit:
+
+_func_exit_;
+
+       return res;
+}
+
+u8 rtw_clearstakey_cmd(_adapter *padapter, u8 *psta, u8 entry, u8 enqueue)
+{
+       struct cmd_obj*                 ph2c;
+       struct set_stakey_parm  *psetstakey_para;
+       struct cmd_priv                         *pcmdpriv=&padapter->cmdpriv;
+       struct set_stakey_rsp           *psetstakey_rsp = NULL;
+       struct mlme_priv                        *pmlmepriv = &padapter->mlmepriv;
+       struct security_priv            *psecuritypriv = &padapter->securitypriv;
+       struct sta_info*                        sta = (struct sta_info* )psta;
+       u8      res=_SUCCESS;
+
+_func_enter_;
+
+       if(!enqueue)
+       {
+               clear_cam_entry(padapter, entry);
+       }
+       else
+       {
+               ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
+               if ( ph2c == NULL){
+                       res= _FAIL;
+                       goto exit;
+               }
+
+               psetstakey_para = (struct set_stakey_parm*)rtw_zmalloc(sizeof(struct set_stakey_parm));
+               if(psetstakey_para==NULL){
+                       rtw_mfree((u8 *) ph2c, sizeof(struct    cmd_obj));
+                       res=_FAIL;
+                       goto exit;
+               }
+
+               psetstakey_rsp = (struct set_stakey_rsp*)rtw_zmalloc(sizeof(struct set_stakey_rsp));
+               if(psetstakey_rsp == NULL){
+                       rtw_mfree((u8 *) ph2c, sizeof(struct    cmd_obj));
+                       rtw_mfree((u8 *) psetstakey_para, sizeof(struct set_stakey_parm));
+                       res=_FAIL;
+                       goto exit;
+               }
+
+               init_h2fwcmd_w_parm_no_rsp(ph2c, psetstakey_para, _SetStaKey_CMD_);
+               ph2c->rsp = (u8 *) psetstakey_rsp;
+               ph2c->rspsz = sizeof(struct set_stakey_rsp);
+
+               _rtw_memcpy(psetstakey_para->addr, sta->hwaddr, ETH_ALEN);
+
+               psetstakey_para->algorithm = _NO_PRIVACY_;
+
+               psetstakey_para->id = entry;
+
+               res = rtw_enqueue_cmd(pcmdpriv, ph2c);
+
+       }
+
+exit:
+
+_func_exit_;
+
+       return res;
+}
+
+u8 rtw_setrttbl_cmd(_adapter  *padapter, struct setratable_parm *prate_table)
+{
+       struct cmd_obj*                 ph2c;
+       struct setratable_parm *        psetrttblparm;
+       struct cmd_priv                         *pcmdpriv=&padapter->cmdpriv;
+       u8      res=_SUCCESS;
+_func_enter_;
+
+       ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
+       if(ph2c==NULL){
+               res= _FAIL;
+               goto exit;
+               }
+       psetrttblparm = (struct setratable_parm*)rtw_zmalloc(sizeof(struct setratable_parm));
+
+       if(psetrttblparm==NULL){
+               rtw_mfree((unsigned char *) ph2c, sizeof(struct cmd_obj));
+               res= _FAIL;
+               goto exit;
+       }
+
+       init_h2fwcmd_w_parm_no_rsp(ph2c, psetrttblparm, GEN_CMD_CODE(_SetRaTable));
+
+       _rtw_memcpy(psetrttblparm,prate_table,sizeof(struct setratable_parm));
+
+       res = rtw_enqueue_cmd(pcmdpriv, ph2c);
+exit:
+_func_exit_;
+       return res;
+
+}
+
+u8 rtw_getrttbl_cmd(_adapter  *padapter, struct getratable_rsp *pval)
+{
+       struct cmd_obj*                 ph2c;
+       struct getratable_parm *        pgetrttblparm;
+       struct cmd_priv                         *pcmdpriv=&padapter->cmdpriv;
+       u8      res=_SUCCESS;
+_func_enter_;
+
+       ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
+       if(ph2c==NULL){
+               res= _FAIL;
+               goto exit;
+       }
+       pgetrttblparm = (struct getratable_parm*)rtw_zmalloc(sizeof(struct getratable_parm));
+
+       if(pgetrttblparm==NULL){
+               rtw_mfree((unsigned char *) ph2c, sizeof(struct cmd_obj));
+               res= _FAIL;
+               goto exit;
+       }
+
+//     init_h2fwcmd_w_parm_no_rsp(ph2c, psetrttblparm, GEN_CMD_CODE(_SetRaTable));
+
+       _rtw_init_listhead(&ph2c->list);
+       ph2c->cmdcode =GEN_CMD_CODE(_GetRaTable);
+       ph2c->parmbuf = (unsigned char *)pgetrttblparm;
+       ph2c->cmdsz =  sizeof(struct getratable_parm);
+       ph2c->rsp = (u8*)pval;
+       ph2c->rspsz = sizeof(struct getratable_rsp);
+
+       pgetrttblparm ->rsvd = 0x0;
+
+       res = rtw_enqueue_cmd(pcmdpriv, ph2c);
+exit:
+_func_exit_;
+       return res;
+
+}
+
+u8 rtw_setassocsta_cmd(_adapter  *padapter, u8 *mac_addr)
+{
+       struct cmd_priv                 *pcmdpriv = &padapter->cmdpriv;
+       struct cmd_obj*                 ph2c;
+       struct set_assocsta_parm        *psetassocsta_para;
+       struct set_stakey_rsp           *psetassocsta_rsp = NULL;
+
+       u8      res=_SUCCESS;
+
+_func_enter_;
+
+       ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
+       if(ph2c==NULL){
+               res= _FAIL;
+               goto exit;
+       }
+
+       psetassocsta_para = (struct set_assocsta_parm*)rtw_zmalloc(sizeof(struct set_assocsta_parm));
+       if(psetassocsta_para==NULL){
+               rtw_mfree((u8 *) ph2c, sizeof(struct    cmd_obj));
+               res=_FAIL;
+               goto exit;
+       }
+
+       psetassocsta_rsp = (struct set_stakey_rsp*)rtw_zmalloc(sizeof(struct set_assocsta_rsp));
+       if(psetassocsta_rsp==NULL){
+               rtw_mfree((u8 *) ph2c, sizeof(struct    cmd_obj));
+               rtw_mfree((u8 *) psetassocsta_para, sizeof(struct set_assocsta_parm));
+               return _FAIL;
+       }
+
+       init_h2fwcmd_w_parm_no_rsp(ph2c, psetassocsta_para, _SetAssocSta_CMD_);
+       ph2c->rsp = (u8 *) psetassocsta_rsp;
+       ph2c->rspsz = sizeof(struct set_assocsta_rsp);
+
+       _rtw_memcpy(psetassocsta_para->addr, mac_addr,ETH_ALEN);
+
+       res = rtw_enqueue_cmd(pcmdpriv, ph2c);
+
+exit:
+
+_func_exit_;
+
+       return res;
+ }
+
+u8 rtw_addbareq_cmd(_adapter*padapter, u8 tid, u8 *addr)
+{
+       struct cmd_priv         *pcmdpriv = &padapter->cmdpriv;
+       struct cmd_obj*         ph2c;
+       struct addBaReq_parm    *paddbareq_parm;
+
+       u8      res=_SUCCESS;
+
+_func_enter_;
+
+       ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
+       if(ph2c==NULL){
+               res= _FAIL;
+               goto exit;
+       }
+
+       paddbareq_parm = (struct addBaReq_parm*)rtw_zmalloc(sizeof(struct addBaReq_parm));
+       if(paddbareq_parm==NULL){
+               rtw_mfree((unsigned char *)ph2c, sizeof(struct  cmd_obj));
+               res= _FAIL;
+               goto exit;
+       }
+
+       paddbareq_parm->tid = tid;
+       _rtw_memcpy(paddbareq_parm->addr, addr, ETH_ALEN);
+
+       init_h2fwcmd_w_parm_no_rsp(ph2c, paddbareq_parm, GEN_CMD_CODE(_AddBAReq));
+
+       //DBG_871X("rtw_addbareq_cmd, tid=%d\n", tid);
+
+       //rtw_enqueue_cmd(pcmdpriv, ph2c);
+       res = rtw_enqueue_cmd(pcmdpriv, ph2c);
+
+exit:
+
+_func_exit_;
+
+       return res;
+}
+//add for CONFIG_IEEE80211W, none 11w can use it
+u8 rtw_reset_securitypriv_cmd(_adapter*padapter)
+{
+       struct cmd_obj*         ph2c;
+       struct drvextra_cmd_parm  *pdrvextra_cmd_parm;
+       struct cmd_priv *pcmdpriv=&padapter->cmdpriv;
+       u8      res=_SUCCESS;
+
+_func_enter_;
+
+       ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
+       if(ph2c==NULL){
+               res= _FAIL;
+               goto exit;
+       }
+
+       pdrvextra_cmd_parm = (struct drvextra_cmd_parm*)rtw_zmalloc(sizeof(struct drvextra_cmd_parm));
+       if(pdrvextra_cmd_parm==NULL){
+               rtw_mfree((unsigned char *)ph2c, sizeof(struct cmd_obj));
+               res= _FAIL;
+               goto exit;
+       }
+
+       pdrvextra_cmd_parm->ec_id = RESET_SECURITYPRIV;
+       pdrvextra_cmd_parm->type_size = 0;
+       pdrvextra_cmd_parm->pbuf = (u8 *)padapter;
+
+       init_h2fwcmd_w_parm_no_rsp(ph2c, pdrvextra_cmd_parm, GEN_CMD_CODE(_Set_Drv_Extra));
+
+
+       //rtw_enqueue_cmd(pcmdpriv, ph2c);
+       res = rtw_enqueue_cmd(pcmdpriv, ph2c);
+
+exit:
+
+_func_exit_;
+
+       return res;
+
+}
+
+u8 rtw_free_assoc_resources_cmd(_adapter*padapter)
+{
+       struct cmd_obj*         ph2c;
+       struct drvextra_cmd_parm  *pdrvextra_cmd_parm;
+       struct cmd_priv *pcmdpriv=&padapter->cmdpriv;
+       u8      res=_SUCCESS;
+
+_func_enter_;
+
+       ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
+       if(ph2c==NULL){
+               res= _FAIL;
+               goto exit;
+       }
+
+       pdrvextra_cmd_parm = (struct drvextra_cmd_parm*)rtw_zmalloc(sizeof(struct drvextra_cmd_parm));
+       if(pdrvextra_cmd_parm==NULL){
+               rtw_mfree((unsigned char *)ph2c, sizeof(struct cmd_obj));
+               res= _FAIL;
+               goto exit;
+       }
+
+       pdrvextra_cmd_parm->ec_id = FREE_ASSOC_RESOURCES;
+       pdrvextra_cmd_parm->type_size = 0;
+       pdrvextra_cmd_parm->pbuf = (u8 *)padapter;
+
+       init_h2fwcmd_w_parm_no_rsp(ph2c, pdrvextra_cmd_parm, GEN_CMD_CODE(_Set_Drv_Extra));
+
+
+       //rtw_enqueue_cmd(pcmdpriv, ph2c);
+       res = rtw_enqueue_cmd(pcmdpriv, ph2c);
+
+exit:
+
+_func_exit_;
+
+       return res;
+
+}
+
+
+u8 rtw_dynamic_chk_wk_cmd(_adapter*padapter)
+{
+       struct cmd_obj*         ph2c;
+       struct drvextra_cmd_parm  *pdrvextra_cmd_parm;
+       struct cmd_priv *pcmdpriv=&padapter->cmdpriv;
+       u8      res=_SUCCESS;
+
+_func_enter_;
+
+       if ((padapter->bDriverStopped == _TRUE)||(padapter->bSurpriseRemoved== _TRUE))
+               goto exit;
+
+
+#ifdef CONFIG_CONCURRENT_MODE
+       if (padapter->adapter_type != PRIMARY_ADAPTER && padapter->pbuddy_adapter)
+               pcmdpriv = &(padapter->pbuddy_adapter->cmdpriv);
+#endif
+
+       ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
+       if(ph2c==NULL){
+               res= _FAIL;
+               goto exit;
+       }
+
+       pdrvextra_cmd_parm = (struct drvextra_cmd_parm*)rtw_zmalloc(sizeof(struct drvextra_cmd_parm));
+       if(pdrvextra_cmd_parm==NULL){
+               rtw_mfree((unsigned char *)ph2c, sizeof(struct cmd_obj));
+               res= _FAIL;
+               goto exit;
+       }
+
+       pdrvextra_cmd_parm->ec_id = DYNAMIC_CHK_WK_CID;
+       pdrvextra_cmd_parm->type_size = 0;
+       pdrvextra_cmd_parm->pbuf = (u8 *)padapter;
+
+       init_h2fwcmd_w_parm_no_rsp(ph2c, pdrvextra_cmd_parm, GEN_CMD_CODE(_Set_Drv_Extra));
+
+
+       //rtw_enqueue_cmd(pcmdpriv, ph2c);
+       res = rtw_enqueue_cmd(pcmdpriv, ph2c);
+
+exit:
+
+_func_exit_;
+
+       return res;
+
+}
+
+u8 rtw_set_ch_cmd(_adapter*padapter, u8 ch, u8 bw, u8 ch_offset, u8 enqueue)
+{
+       struct cmd_obj *pcmdobj;
+       struct set_ch_parm *set_ch_parm;
+       struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
+
+       u8 res=_SUCCESS;
+
+_func_enter_;
+
+       DBG_871X(FUNC_NDEV_FMT" ch:%u, bw:%u, ch_offset:%u\n",
+               FUNC_NDEV_ARG(padapter->pnetdev), ch, bw, ch_offset);
+
+       /* check input parameter */
+
+       /* prepare cmd parameter */
+       set_ch_parm = (struct set_ch_parm *)rtw_zmalloc(sizeof(*set_ch_parm));
+       if (set_ch_parm == NULL) {
+               res= _FAIL;
+               goto exit;
+       }
+       set_ch_parm->ch = ch;
+       set_ch_parm->bw = bw;
+       set_ch_parm->ch_offset = ch_offset;
+
+       if (enqueue) {
+               /* need enqueue, prepare cmd_obj and enqueue */
+               pcmdobj = (struct cmd_obj*)rtw_zmalloc(sizeof(struct    cmd_obj));
+               if(pcmdobj == NULL){
+                       rtw_mfree((u8 *)set_ch_parm, sizeof(*set_ch_parm));
+                       res=_FAIL;
+                       goto exit;
+               }
+
+               init_h2fwcmd_w_parm_no_rsp(pcmdobj, set_ch_parm, GEN_CMD_CODE(_SetChannel));
+               res = rtw_enqueue_cmd(pcmdpriv, pcmdobj);
+       } else {
+               /* no need to enqueue, do the cmd hdl directly and free cmd parameter */
+               if( H2C_SUCCESS !=set_ch_hdl(padapter, (u8 *)set_ch_parm) )
+                       res = _FAIL;
+
+               rtw_mfree((u8 *)set_ch_parm, sizeof(*set_ch_parm));
+       }
+
+       /* do something based on res... */
+
+exit:
+
+       DBG_871X(FUNC_NDEV_FMT" res:%u\n", FUNC_NDEV_ARG(padapter->pnetdev), res);
+
+_func_exit_;
+
+       return res;
+}
+
+u8 rtw_set_chplan_cmd(_adapter*padapter, u8 chplan, u8 enqueue)
+{
+       struct  cmd_obj*        pcmdobj;
+       struct  SetChannelPlan_param *setChannelPlan_param;
+       struct  cmd_priv   *pcmdpriv = &padapter->cmdpriv;
+
+       u8      res=_SUCCESS;
+
+_func_enter_;
+
+       RT_TRACE(_module_rtl871x_cmd_c_, _drv_notice_, ("+rtw_set_chplan_cmd\n"));
+
+       //check input parameter
+       if(!rtw_is_channel_plan_valid(chplan)) {
+               res = _FAIL;
+               goto exit;
+       }
+
+       //prepare cmd parameter
+       setChannelPlan_param = (struct  SetChannelPlan_param *)rtw_zmalloc(sizeof(struct SetChannelPlan_param));
+       if(setChannelPlan_param == NULL) {
+               res= _FAIL;
+               goto exit;
+       }
+       setChannelPlan_param->channel_plan=chplan;
+
+       if(enqueue)
+       {
+               //need enqueue, prepare cmd_obj and enqueue
+               pcmdobj = (struct       cmd_obj*)rtw_zmalloc(sizeof(struct      cmd_obj));
+               if(pcmdobj == NULL){
+                       rtw_mfree((u8 *)setChannelPlan_param, sizeof(struct SetChannelPlan_param));
+                       res=_FAIL;
+                       goto exit;
+               }
+
+               init_h2fwcmd_w_parm_no_rsp(pcmdobj, setChannelPlan_param, GEN_CMD_CODE(_SetChannelPlan));
+               res = rtw_enqueue_cmd(pcmdpriv, pcmdobj);
+       }
+       else
+       {
+               //no need to enqueue, do the cmd hdl directly and free cmd parameter
+               if( H2C_SUCCESS !=set_chplan_hdl(padapter, (unsigned char *)setChannelPlan_param) )
+                       res = _FAIL;
+
+               rtw_mfree((u8 *)setChannelPlan_param, sizeof(struct SetChannelPlan_param));
+       }
+
+       //do something based on res...
+       if(res == _SUCCESS)
+               padapter->mlmepriv.ChannelPlan = chplan;
+
+exit:
+
+_func_exit_;
+
+       return res;
+}
+
+u8 rtw_led_blink_cmd(_adapter*padapter, PLED_871x pLed)
+{
+       struct  cmd_obj*        pcmdobj;
+       struct  LedBlink_param *ledBlink_param;
+       struct  cmd_priv   *pcmdpriv = &padapter->cmdpriv;
+
+       u8      res=_SUCCESS;
+
+_func_enter_;
+
+       RT_TRACE(_module_rtl871x_cmd_c_, _drv_notice_, ("+rtw_led_blink_cmd\n"));
+
+       pcmdobj = (struct       cmd_obj*)rtw_zmalloc(sizeof(struct      cmd_obj));
+       if(pcmdobj == NULL){
+               res=_FAIL;
+               goto exit;
+       }
+
+       ledBlink_param = (struct        LedBlink_param *)rtw_zmalloc(sizeof(struct      LedBlink_param));
+       if(ledBlink_param == NULL) {
+               rtw_mfree((u8 *)pcmdobj, sizeof(struct cmd_obj));
+               res= _FAIL;
+               goto exit;
+       }
+
+       ledBlink_param->pLed=pLed;
+
+       init_h2fwcmd_w_parm_no_rsp(pcmdobj, ledBlink_param, GEN_CMD_CODE(_LedBlink));
+       res = rtw_enqueue_cmd(pcmdpriv, pcmdobj);
+
+exit:
+
+_func_exit_;
+
+       return res;
+}
+
+u8 rtw_set_csa_cmd(_adapter*padapter, u8 new_ch_no)
+{
+       struct  cmd_obj*        pcmdobj;
+       struct  SetChannelSwitch_param*setChannelSwitch_param;
+       struct  mlme_priv *pmlmepriv = &padapter->mlmepriv;
+       struct  cmd_priv   *pcmdpriv = &padapter->cmdpriv;
+
+       u8      res=_SUCCESS;
+
+_func_enter_;
+
+       RT_TRACE(_module_rtl871x_cmd_c_, _drv_notice_, ("+rtw_set_csa_cmd\n"));
+
+       pcmdobj = (struct       cmd_obj*)rtw_zmalloc(sizeof(struct      cmd_obj));
+       if(pcmdobj == NULL){
+               res=_FAIL;
+               goto exit;
+       }
+
+       setChannelSwitch_param = (struct SetChannelSwitch_param *)rtw_zmalloc(sizeof(struct     SetChannelSwitch_param));
+       if(setChannelSwitch_param == NULL) {
+               rtw_mfree((u8 *)pcmdobj, sizeof(struct cmd_obj));
+               res= _FAIL;
+               goto exit;
+       }
+
+       setChannelSwitch_param->new_ch_no=new_ch_no;
+
+       init_h2fwcmd_w_parm_no_rsp(pcmdobj, setChannelSwitch_param, GEN_CMD_CODE(_SetChannelSwitch));
+       res = rtw_enqueue_cmd(pcmdpriv, pcmdobj);
+
+exit:
+
+_func_exit_;
+
+       return res;
+}
+
+u8 rtw_tdls_cmd(_adapter *padapter, u8 *addr, u8 option)
+{
+       struct  cmd_obj*        pcmdobj;
+       struct  TDLSoption_param        *TDLSoption;
+       struct  mlme_priv *pmlmepriv = &padapter->mlmepriv;
+       struct  cmd_priv   *pcmdpriv = &padapter->cmdpriv;
+
+       u8      res=_SUCCESS;
+
+_func_enter_;
+
+#ifdef CONFIG_TDLS
+
+       RT_TRACE(_module_rtl871x_cmd_c_, _drv_notice_, ("+rtw_set_tdls_cmd\n"));
+
+       pcmdobj = (struct       cmd_obj*)rtw_zmalloc(sizeof(struct      cmd_obj));
+       if(pcmdobj == NULL){
+               res=_FAIL;
+               goto exit;
+       }
+
+       TDLSoption= (struct TDLSoption_param *)rtw_zmalloc(sizeof(struct TDLSoption_param));
+       if(TDLSoption == NULL) {
+               rtw_mfree((u8 *)pcmdobj, sizeof(struct cmd_obj));
+               res= _FAIL;
+               goto exit;
+       }
+
+       _rtw_spinlock(&(padapter->tdlsinfo.cmd_lock));
+       _rtw_memcpy(TDLSoption->addr, addr, 6);
+       TDLSoption->option = option;
+       _rtw_spinunlock(&(padapter->tdlsinfo.cmd_lock));
+       init_h2fwcmd_w_parm_no_rsp(pcmdobj, TDLSoption, GEN_CMD_CODE(_TDLS));
+       res = rtw_enqueue_cmd(pcmdpriv, pcmdobj);
+
+#endif //CONFIG_TDLS
+
+exit:
+
+
+_func_exit_;
+
+       return res;
+}
+
+static void traffic_status_watchdog(_adapter *padapter)
+{
+#ifdef CONFIG_LPS
+       u8      bEnterPS;
+#endif
+       u16     BusyThreshold = 100;
+       u8      bBusyTraffic = _FALSE, bTxBusyTraffic = _FALSE, bRxBusyTraffic = _FALSE;
+       u8      bHigherBusyTraffic = _FALSE, bHigherBusyRxTraffic = _FALSE, bHigherBusyTxTraffic = _FALSE;
+       struct mlme_priv                *pmlmepriv = &(padapter->mlmepriv);
+#ifdef CONFIG_TDLS
+       struct tdls_info *ptdlsinfo = &(padapter->tdlsinfo);
+#endif //CONFIG_TDLS
+
+       RT_LINK_DETECT_T * link_detect = &pmlmepriv->LinkDetectInfo;
+
+       //
+       // Determine if our traffic is busy now
+       //
+       if((check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE)
+               /*&& !MgntInitAdapterInProgress(pMgntInfo)*/)
+       {
+
+               // if we raise bBusyTraffic in last watchdog, using lower threshold.
+               if (pmlmepriv->LinkDetectInfo.bBusyTraffic)
+                       BusyThreshold = 75;
+               if( pmlmepriv->LinkDetectInfo.NumRxOkInPeriod > BusyThreshold ||
+                       pmlmepriv->LinkDetectInfo.NumTxOkInPeriod > BusyThreshold )
+               {
+                       bBusyTraffic = _TRUE;
+
+                       if(pmlmepriv->LinkDetectInfo.NumRxOkInPeriod > BusyThreshold)
+                               bRxBusyTraffic = _TRUE;
+
+                       if(pmlmepriv->LinkDetectInfo.NumTxOkInPeriod > BusyThreshold)
+                               bTxBusyTraffic = _TRUE;
+               }
+
+               // Higher Tx/Rx data.
+               if( pmlmepriv->LinkDetectInfo.NumRxOkInPeriod > 4000 ||
+                       pmlmepriv->LinkDetectInfo.NumTxOkInPeriod > 4000 )
+               {
+                       bHigherBusyTraffic = _TRUE;
+
+                       // Extremely high Rx data.
+                       if(pmlmepriv->LinkDetectInfo.NumRxOkInPeriod > 5000)
+                               bHigherBusyRxTraffic = _TRUE;
+
+                       // Extremely high Tx data.
+                       if(pmlmepriv->LinkDetectInfo.NumTxOkInPeriod > 5000)
+                               bHigherBusyTxTraffic = _TRUE;
+               }
+
+#ifdef CONFIG_TRAFFIC_PROTECT
+#define TX_ACTIVE_TH 2
+#define RX_ACTIVE_TH 1
+#define TRAFFIC_PROTECT_PERIOD_MS 4500
+
+       if (link_detect->NumTxOkInPeriod > TX_ACTIVE_TH
+               || link_detect->NumRxUnicastOkInPeriod > RX_ACTIVE_TH) {
+
+               LOG_LEVEL(_drv_info_, FUNC_ADPT_FMT" acqiure wake_lock for %u ms(tx:%d,rx_unicast:%d)\n",
+                       FUNC_ADPT_ARG(padapter),
+                       TRAFFIC_PROTECT_PERIOD_MS,
+                       link_detect->NumTxOkInPeriod,
+                       link_detect->NumRxUnicastOkInPeriod);
+
+               rtw_lock_suspend_timeout(TRAFFIC_PROTECT_PERIOD_MS);
+       }
+#endif
+
+#ifdef CONFIG_TDLS
+#ifdef CONFIG_TDLS_AUTOSETUP
+               if( ( ptdlsinfo->watchdog_count % TDLS_WATCHDOG_PERIOD ) == 0 ) //TDLS_WATCHDOG_PERIOD * 2sec, periodically sending
+                       issue_tdls_dis_req( padapter, NULL );
+               ptdlsinfo->watchdog_count++;
+#endif //CONFIG_TDLS_AUTOSETUP
+#endif //CONFIG_TDLS
+
+#ifdef CONFIG_LPS
+               // check traffic for  powersaving.
+               if( ((pmlmepriv->LinkDetectInfo.NumRxUnicastOkInPeriod + pmlmepriv->LinkDetectInfo.NumTxOkInPeriod) > 8 ) ||
+                       (pmlmepriv->LinkDetectInfo.NumRxUnicastOkInPeriod > 2) )
+               {
+                       //DBG_871X("Tx = %d, Rx = %d \n",pmlmepriv->LinkDetectInfo.NumTxOkInPeriod,pmlmepriv->LinkDetectInfo.NumRxUnicastOkInPeriod);
+                       bEnterPS= _FALSE;
+               }
+               else
+               {
+                       bEnterPS= _TRUE;
+               }
+
+               // LeisurePS only work in infra mode.
+               if(bEnterPS)
+               {
+                       LPS_Enter(padapter);
+               }
+               else
+               {
+                       LPS_Leave(padapter);
+               }
+#endif
+       }
+       else
+       {
+#ifdef CONFIG_LPS
+               LPS_Leave(padapter);
+#endif
+       }
+
+       pmlmepriv->LinkDetectInfo.NumRxOkInPeriod = 0;
+       pmlmepriv->LinkDetectInfo.NumTxOkInPeriod = 0;
+       pmlmepriv->LinkDetectInfo.NumRxUnicastOkInPeriod = 0;
+       pmlmepriv->LinkDetectInfo.bBusyTraffic = bBusyTraffic;
+       pmlmepriv->LinkDetectInfo.bTxBusyTraffic = bTxBusyTraffic;
+       pmlmepriv->LinkDetectInfo.bRxBusyTraffic = bRxBusyTraffic;
+       pmlmepriv->LinkDetectInfo.bHigherBusyTraffic = bHigherBusyTraffic;
+       pmlmepriv->LinkDetectInfo.bHigherBusyRxTraffic = bHigherBusyRxTraffic;
+       pmlmepriv->LinkDetectInfo.bHigherBusyTxTraffic = bHigherBusyTxTraffic;
+
+}
+
+void dynamic_chk_wk_hdl(_adapter *padapter, u8 *pbuf, int sz);
+void dynamic_chk_wk_hdl(_adapter *padapter, u8 *pbuf, int sz)
+{
+       struct mlme_priv *pmlmepriv;
+
+       if ((padapter->bDriverStopped == _TRUE)||(padapter->bSurpriseRemoved== _TRUE))
+               return;
+
+       if((void*)padapter != (void*)pbuf && padapter->pbuddy_adapter == NULL)
+               return;
+
+       padapter = (_adapter *)pbuf;
+
+       if ((padapter->bDriverStopped == _TRUE)||(padapter->bSurpriseRemoved== _TRUE))
+               return;
+
+       pmlmepriv = &(padapter->mlmepriv);
+
+#ifdef CONFIG_ACTIVE_KEEP_ALIVE_CHECK
+#ifdef CONFIG_AP_MODE
+       if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
+       {
+               expire_timeout_chk(padapter);
+       }
+#endif
+#endif //CONFIG_ACTIVE_KEEP_ALIVE_CHECK
+
+       #ifdef DBG_CONFIG_ERROR_DETECT
+       rtw_hal_sreset_xmit_status_check(padapter);
+       #endif
+
+       //if(check_fwstate(pmlmepriv, _FW_UNDER_LINKING|_FW_UNDER_SURVEY)==_FALSE)
+       {
+               linked_status_chk(padapter);
+               traffic_status_watchdog(padapter);
+       }
+
+       rtw_hal_dm_watchdog(padapter);
+
+       //check_hw_pbc(padapter, pdrvextra_cmd->pbuf, pdrvextra_cmd->type_size);
+
+}
+
+#ifdef CONFIG_LPS
+
+void lps_ctrl_wk_hdl(_adapter *padapter, u8 lps_ctrl_type);
+void lps_ctrl_wk_hdl(_adapter *padapter, u8 lps_ctrl_type)
+{
+       struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+       u8      mstatus;
+
+_func_enter_;
+
+       if((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE)
+               || (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE))
+       {
+               return;
+       }
+
+       switch(lps_ctrl_type)
+       {
+               case LPS_CTRL_SCAN:
+                       //DBG_871X("LPS_CTRL_SCAN \n");
+                       LeaveAllPowerSaveMode(padapter);
+                       break;
+               case LPS_CTRL_JOINBSS:
+                       //DBG_871X("LPS_CTRL_JOINBSS \n");
+                       LPS_Leave(padapter);
+                       break;
+               case LPS_CTRL_CONNECT:
+                       //DBG_871X("LPS_CTRL_CONNECT \n");
+                       mstatus = 1;
+                       // Reset LPS Setting
+                       padapter->pwrctrlpriv.LpsIdleCount = 0;
+                       rtw_hal_set_hwreg(padapter, HW_VAR_H2C_FW_JOINBSSRPT, (u8 *)(&mstatus));
+                       break;
+               case LPS_CTRL_DISCONNECT:
+                       //DBG_871X("LPS_CTRL_DISCONNECT \n");
+                       mstatus = 0;
+                       LPS_Leave(padapter);
+                       rtw_hal_set_hwreg(padapter, HW_VAR_H2C_FW_JOINBSSRPT, (u8 *)(&mstatus));
+                       break;
+               case LPS_CTRL_SPECIAL_PACKET:
+                       //DBG_871X("LPS_CTRL_SPECIAL_PACKET \n");
+                       pwrpriv->DelayLPSLastTimeStamp = rtw_get_current_time();
+                       LPS_Leave(padapter);
+                       break;
+
+               default:
+                       break;
+       }
+
+_func_exit_;
+}
+
+u8 rtw_lps_ctrl_wk_cmd(_adapter*padapter, u8 lps_ctrl_type, u8 enqueue)
+{
+       struct cmd_obj  *ph2c;
+       struct drvextra_cmd_parm        *pdrvextra_cmd_parm;
+       struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
+       //struct pwrctrl_priv *pwrctrlpriv = &padapter->pwrctrlpriv;
+       u8      res = _SUCCESS;
+
+_func_enter_;
+
+       //if(!pwrctrlpriv->bLeisurePs)
+       //      return res;
+
+#ifdef CONFIG_CONCURRENT_MODE
+       if (padapter->iface_type != IFACE_PORT0)
+               return res;
+#endif
+
+       if(enqueue)
+       {
+               ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
+               if(ph2c==NULL){
+                       res= _FAIL;
+                       goto exit;
+               }
+
+               pdrvextra_cmd_parm = (struct drvextra_cmd_parm*)rtw_zmalloc(sizeof(struct drvextra_cmd_parm));
+               if(pdrvextra_cmd_parm==NULL){
+                       rtw_mfree((unsigned char *)ph2c, sizeof(struct cmd_obj));
+                       res= _FAIL;
+                       goto exit;
+               }
+
+               pdrvextra_cmd_parm->ec_id = LPS_CTRL_WK_CID;
+               pdrvextra_cmd_parm->type_size = lps_ctrl_type;
+               pdrvextra_cmd_parm->pbuf = NULL;
+
+               init_h2fwcmd_w_parm_no_rsp(ph2c, pdrvextra_cmd_parm, GEN_CMD_CODE(_Set_Drv_Extra));
+
+               res = rtw_enqueue_cmd(pcmdpriv, ph2c);
+       }
+       else
+       {
+               lps_ctrl_wk_hdl(padapter, lps_ctrl_type);
+       }
+
+exit:
+
+_func_exit_;
+
+       return res;
+
+}
+
+#endif
+#ifdef CONFIG_ANTENNA_DIVERSITY
+
+void antenna_select_wk_hdl(_adapter *padapter, u8 antenna)
+{
+       rtw_hal_set_hwreg(padapter, HW_VAR_ANTENNA_DIVERSITY_SELECT, (u8 *)(&antenna));
+}
+
+u8 rtw_antenna_select_cmd(_adapter*padapter, u8 antenna,u8 enqueue)
+{
+       struct cmd_obj          *ph2c;
+       struct drvextra_cmd_parm        *pdrvextra_cmd_parm;
+       struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
+       u8      bSupportAntDiv = _FALSE;
+       u8      res = _SUCCESS;
+
+_func_enter_;
+       rtw_hal_get_def_var(padapter, HAL_DEF_IS_SUPPORT_ANT_DIV, &(bSupportAntDiv));
+       if(_FALSE == bSupportAntDiv )   return res;
+
+       if(_TRUE == enqueue)
+       {
+               ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
+               if(ph2c==NULL){
+                       res= _FAIL;
+                       goto exit;
+               }
+
+               pdrvextra_cmd_parm = (struct drvextra_cmd_parm*)rtw_zmalloc(sizeof(struct drvextra_cmd_parm));
+               if(pdrvextra_cmd_parm==NULL){
+                       rtw_mfree((unsigned char *)ph2c, sizeof(struct cmd_obj));
+                       res= _FAIL;
+                       goto exit;
+               }
+
+               pdrvextra_cmd_parm->ec_id = ANT_SELECT_WK_CID;
+               pdrvextra_cmd_parm->type_size = antenna;
+               pdrvextra_cmd_parm->pbuf = NULL;
+               init_h2fwcmd_w_parm_no_rsp(ph2c, pdrvextra_cmd_parm, GEN_CMD_CODE(_Set_Drv_Extra));
+
+               res = rtw_enqueue_cmd(pcmdpriv, ph2c);
+       }
+       else{
+               antenna_select_wk_hdl(padapter,antenna );
+       }
+exit:
+
+_func_exit_;
+
+       return res;
+
+}
+#endif
+
+void power_saving_wk_hdl(_adapter *padapter, u8 *pbuf, int sz);
+void power_saving_wk_hdl(_adapter *padapter, u8 *pbuf, int sz)
+{
+        rtw_ps_processor(padapter);
+}
+
+//add for CONFIG_IEEE80211W, none 11w can use it
+void reset_securitypriv_hdl(_adapter *padapter)
+{
+        rtw_reset_securitypriv(padapter);
+}
+
+void free_assoc_resources_hdl(_adapter *padapter)
+{
+        rtw_free_assoc_resources(padapter, 1);
+}
+
+#ifdef CONFIG_P2P
+u8 p2p_protocol_wk_cmd(_adapter*padapter, int intCmdType )
+{
+       struct cmd_obj  *ph2c;
+       struct drvextra_cmd_parm        *pdrvextra_cmd_parm;
+       struct wifidirect_info  *pwdinfo= &(padapter->wdinfo);
+       struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
+       u8      res = _SUCCESS;
+
+_func_enter_;
+
+       if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+       {
+               return res;
+       }
+
+       ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
+       if(ph2c==NULL){
+               res= _FAIL;
+               goto exit;
+       }
+
+       pdrvextra_cmd_parm = (struct drvextra_cmd_parm*)rtw_zmalloc(sizeof(struct drvextra_cmd_parm));
+       if(pdrvextra_cmd_parm==NULL){
+               rtw_mfree((unsigned char *)ph2c, sizeof(struct cmd_obj));
+               res= _FAIL;
+               goto exit;
+       }
+
+       pdrvextra_cmd_parm->ec_id = P2P_PROTO_WK_CID;
+       pdrvextra_cmd_parm->type_size = intCmdType;     //      As the command tppe.
+       pdrvextra_cmd_parm->pbuf = NULL;                //      Must be NULL here
+
+       init_h2fwcmd_w_parm_no_rsp(ph2c, pdrvextra_cmd_parm, GEN_CMD_CODE(_Set_Drv_Extra));
+
+       res = rtw_enqueue_cmd(pcmdpriv, ph2c);
+
+exit:
+
+_func_exit_;
+
+       return res;
+
+}
+#endif //CONFIG_P2P
+
+u8 rtw_ps_cmd(_adapter*padapter)
+{
+       struct cmd_obj          *ppscmd;
+       struct drvextra_cmd_parm        *pdrvextra_cmd_parm;
+       struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
+
+       u8      res = _SUCCESS;
+_func_enter_;
+
+#ifdef CONFIG_CONCURRENT_MODE
+       if (padapter->adapter_type != PRIMARY_ADAPTER)
+               goto exit;
+#endif
+
+       ppscmd = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
+       if(ppscmd==NULL){
+               res= _FAIL;
+               goto exit;
+       }
+
+       pdrvextra_cmd_parm = (struct drvextra_cmd_parm*)rtw_zmalloc(sizeof(struct drvextra_cmd_parm));
+       if(pdrvextra_cmd_parm==NULL){
+               rtw_mfree((unsigned char *)ppscmd, sizeof(struct cmd_obj));
+               res= _FAIL;
+               goto exit;
+       }
+
+       pdrvextra_cmd_parm->ec_id = POWER_SAVING_CTRL_WK_CID;
+       pdrvextra_cmd_parm->pbuf = NULL;
+       init_h2fwcmd_w_parm_no_rsp(ppscmd, pdrvextra_cmd_parm, GEN_CMD_CODE(_Set_Drv_Extra));
+
+       res = rtw_enqueue_cmd(pcmdpriv, ppscmd);
+
+exit:
+
+_func_exit_;
+
+       return res;
+
+}
+
+#ifdef CONFIG_AP_MODE
+
+static void rtw_chk_hi_queue_hdl(_adapter *padapter)
+{
+       int cnt=0;
+       struct sta_info *psta_bmc;
+       struct sta_priv *pstapriv = &padapter->stapriv;
+
+       psta_bmc = rtw_get_bcmc_stainfo(padapter);
+       if(!psta_bmc)
+               return;
+
+
+       if(psta_bmc->sleepq_len==0)
+       {
+               while((rtw_read32(padapter, 0x414)&0x00ffff00)!=0)
+               {
+                       rtw_msleep_os(100);
+
+                       cnt++;
+
+                       if(cnt>10)
+                               break;
+               }
+
+               if(cnt<=10)
+               {
+                       pstapriv->tim_bitmap &= ~BIT(0);
+                       pstapriv->sta_dz_bitmap &= ~BIT(0);
+
+                       update_beacon(padapter, _TIM_IE_, NULL, _FALSE);
+               }
+       }
+
+}
+
+u8 rtw_chk_hi_queue_cmd(_adapter*padapter)
+{
+       struct cmd_obj  *ph2c;
+       struct drvextra_cmd_parm        *pdrvextra_cmd_parm;
+       struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
+       u8      res = _SUCCESS;
+
+       ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
+       if(ph2c==NULL){
+               res= _FAIL;
+               goto exit;
+       }
+
+       pdrvextra_cmd_parm = (struct drvextra_cmd_parm*)rtw_zmalloc(sizeof(struct drvextra_cmd_parm));
+       if(pdrvextra_cmd_parm==NULL){
+               rtw_mfree((unsigned char *)ph2c, sizeof(struct cmd_obj));
+               res= _FAIL;
+               goto exit;
+       }
+
+       pdrvextra_cmd_parm->ec_id = CHECK_HIQ_WK_CID;
+       pdrvextra_cmd_parm->type_size = 0;
+       pdrvextra_cmd_parm->pbuf = NULL;
+
+       init_h2fwcmd_w_parm_no_rsp(ph2c, pdrvextra_cmd_parm, GEN_CMD_CODE(_Set_Drv_Extra));
+
+       res = rtw_enqueue_cmd(pcmdpriv, ph2c);
+
+exit:
+
+       return res;
+
+}
+#endif
+
+u8 rtw_c2h_wk_cmd(PADAPTER padapter, u8 *c2h_evt)
+{
+       struct cmd_obj *ph2c;
+       struct drvextra_cmd_parm *pdrvextra_cmd_parm;
+       struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
+       u8      res = _SUCCESS;
+
+       ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
+       if (ph2c == NULL) {
+               res = _FAIL;
+               goto exit;
+       }
+
+       pdrvextra_cmd_parm = (struct drvextra_cmd_parm*)rtw_zmalloc(sizeof(struct drvextra_cmd_parm));
+       if (pdrvextra_cmd_parm == NULL) {
+               rtw_mfree((u8*)ph2c, sizeof(struct cmd_obj));
+               res = _FAIL;
+               goto exit;
+       }
+
+       pdrvextra_cmd_parm->ec_id = C2H_WK_CID;
+       pdrvextra_cmd_parm->type_size = c2h_evt?16:0;
+       pdrvextra_cmd_parm->pbuf = c2h_evt;
+
+       init_h2fwcmd_w_parm_no_rsp(ph2c, pdrvextra_cmd_parm, GEN_CMD_CODE(_Set_Drv_Extra));
+
+       res = rtw_enqueue_cmd(pcmdpriv, ph2c);
+
+exit:
+
+       return res;
+}
+
+s32 c2h_evt_hdl(_adapter *adapter, struct c2h_evt_hdr *c2h_evt, c2h_id_filter filter)
+{
+       s32 ret = _FAIL;
+       u8 buf[16];
+
+       if (!c2h_evt) {
+               /* No c2h event in cmd_obj, read c2h event before handling*/
+               if (c2h_evt_read(adapter, buf) == _SUCCESS) {
+                       c2h_evt = (struct c2h_evt_hdr *)buf;
+
+                       if (filter && filter(c2h_evt->id) == _FALSE)
+                               goto exit;
+
+                       ret = rtw_hal_c2h_handler(adapter, c2h_evt);
+               }
+       } else {
+
+               if (filter && filter(c2h_evt->id) == _FALSE)
+                       goto exit;
+
+               ret = rtw_hal_c2h_handler(adapter, c2h_evt);
+       }
+exit:
+       return ret;
+}
+
+#ifdef CONFIG_C2H_WK
+static void c2h_wk_callback(_workitem *work)
+{
+       struct evt_priv *evtpriv = container_of(work, struct evt_priv, c2h_wk);
+       _adapter *adapter = container_of(evtpriv, _adapter, evtpriv);
+       struct c2h_evt_hdr *c2h_evt;
+       c2h_id_filter ccx_id_filter = rtw_hal_c2h_id_filter_ccx(adapter);
+
+       evtpriv->c2h_wk_alive = _TRUE;
+
+       while (!rtw_cbuf_empty(evtpriv->c2h_queue)) {
+               if ((c2h_evt = (struct c2h_evt_hdr *)rtw_cbuf_pop(evtpriv->c2h_queue)) != NULL) {
+                       /* This C2H event is read, clear it */
+                       c2h_evt_clear(adapter);
+               } else if ((c2h_evt = (struct c2h_evt_hdr *)rtw_malloc(16)) != NULL) {
+                       /* This C2H event is not read, read & clear now */
+                       if (c2h_evt_read(adapter, (u8*)c2h_evt) != _SUCCESS)
+                               continue;
+               }
+
+               /* Special pointer to trigger c2h_evt_clear only */
+               if ((void *)c2h_evt == (void *)evtpriv)
+                       continue;
+
+               if (!c2h_evt_exist(c2h_evt)) {
+                       rtw_mfree((u8*)c2h_evt, 16);
+                       continue;
+               }
+
+               if (ccx_id_filter(c2h_evt->id) == _TRUE) {
+                       /* Handle CCX report here */
+                       rtw_hal_c2h_handler(adapter, c2h_evt);
+                       rtw_mfree((u8*)c2h_evt, 16);
+               } else {
+                       /* Enqueue into cmd_thread for others */
+                       rtw_c2h_wk_cmd(adapter, (u8 *)c2h_evt);
+               }
+       }
+
+       evtpriv->c2h_wk_alive = _FALSE;
+}
+#endif
+
+u8 rtw_drvextra_cmd_hdl(_adapter *padapter, unsigned char *pbuf)
+{
+       struct drvextra_cmd_parm *pdrvextra_cmd;
+
+       if(!pbuf)
+               return H2C_PARAMETERS_ERROR;
+
+       pdrvextra_cmd = (struct drvextra_cmd_parm*)pbuf;
+
+       switch(pdrvextra_cmd->ec_id)
+       {
+               case DYNAMIC_CHK_WK_CID:
+                       dynamic_chk_wk_hdl(padapter, pdrvextra_cmd->pbuf, pdrvextra_cmd->type_size);
+                       break;
+               case POWER_SAVING_CTRL_WK_CID:
+                       power_saving_wk_hdl(padapter, pdrvextra_cmd->pbuf, pdrvextra_cmd->type_size);
+                       break;
+#ifdef CONFIG_LPS
+               case LPS_CTRL_WK_CID:
+                       lps_ctrl_wk_hdl(padapter, (u8)pdrvextra_cmd->type_size);
+                       break;
+#endif
+#ifdef CONFIG_ANTENNA_DIVERSITY
+               case ANT_SELECT_WK_CID:
+                       antenna_select_wk_hdl(padapter, pdrvextra_cmd->type_size);
+                       break;
+#endif
+#ifdef CONFIG_P2P_PS
+               case P2P_PS_WK_CID:
+                       p2p_ps_wk_hdl(padapter, pdrvextra_cmd->type_size);
+                       break;
+#endif // CONFIG_P2P_PS
+               case P2P_PROTO_WK_CID:
+                       //      Commented by Albert 2011/07/01
+                       //      I used the type_size as the type command
+                       p2p_protocol_wk_hdl( padapter, pdrvextra_cmd->type_size );
+                       break;
+#ifdef CONFIG_AP_MODE
+               case CHECK_HIQ_WK_CID:
+                       rtw_chk_hi_queue_hdl(padapter);
+                       break;
+#endif //CONFIG_AP_MODE
+#ifdef CONFIG_INTEL_WIDI
+               case INTEl_WIDI_WK_CID:
+                       intel_widi_wk_hdl(padapter, pdrvextra_cmd->type_size, pdrvextra_cmd->pbuf);
+                       break;
+#endif //CONFIG_INTEL_WIDI
+               //add for CONFIG_IEEE80211W, none 11w can use it
+               case RESET_SECURITYPRIV:
+                       reset_securitypriv_hdl(padapter);
+                       break;
+               case FREE_ASSOC_RESOURCES:
+                       free_assoc_resources_hdl(padapter);
+                       break;
+               case C2H_WK_CID:
+                       c2h_evt_hdl(padapter, (struct c2h_evt_hdr *)pdrvextra_cmd->pbuf, NULL);
+                       break;
+
+               default:
+                       break;
+       }
+
+
+       if(pdrvextra_cmd->pbuf && pdrvextra_cmd->type_size>0)
+       {
+               rtw_mfree(pdrvextra_cmd->pbuf, pdrvextra_cmd->type_size);
+       }
+
+
+       return H2C_SUCCESS;
+
+}
+
+void rtw_survey_cmd_callback(_adapter* padapter ,  struct cmd_obj *pcmd)
+{
+       struct  mlme_priv *pmlmepriv = &padapter->mlmepriv;
+
+_func_enter_;
+
+       if(pcmd->res == H2C_DROPPED)
+       {
+               //TODO: cancel timer and do timeout handler directly...
+               //need to make timeout handlerOS independent
+               _set_timer(&pmlmepriv->scan_to_timer, 1);
+       }
+       else if (pcmd->res != H2C_SUCCESS) {
+               _set_timer(&pmlmepriv->scan_to_timer, 1);
+               RT_TRACE(_module_rtl871x_cmd_c_,_drv_err_,("\n ********Error: MgntActrtw_set_802_11_bssid_LIST_SCAN Fail ************\n\n."));
+       }
+
+       // free cmd
+       rtw_free_cmd_obj(pcmd);
+
+_func_exit_;
+}
+void rtw_disassoc_cmd_callback(_adapter*       padapter,  struct cmd_obj *pcmd)
+{
+       _irqL   irqL;
+       struct  mlme_priv *pmlmepriv = &padapter->mlmepriv;
+
+_func_enter_;
+
+       if (pcmd->res != H2C_SUCCESS)
+       {
+               _enter_critical_bh(&pmlmepriv->lock, &irqL);
+               set_fwstate(pmlmepriv, _FW_LINKED);
+               _exit_critical_bh(&pmlmepriv->lock, &irqL);
+
+               RT_TRACE(_module_rtl871x_cmd_c_,_drv_err_,("\n ***Error: disconnect_cmd_callback Fail ***\n."));
+
+               goto exit;
+       }
+#ifdef CONFIG_BR_EXT
+       else //clear bridge database
+               nat25_db_cleanup(padapter);
+#endif //CONFIG_BR_EXT
+
+       // free cmd
+       rtw_free_cmd_obj(pcmd);
+
+exit:
+
+_func_exit_;
+}
+
+
+void rtw_joinbss_cmd_callback(_adapter*        padapter,  struct cmd_obj *pcmd)
+{
+       struct  mlme_priv *pmlmepriv = &padapter->mlmepriv;
+
+_func_enter_;
+
+       if(pcmd->res == H2C_DROPPED)
+       {
+               //TODO: cancel timer and do timeout handler directly...
+               //need to make timeout handlerOS independent
+               _set_timer(&pmlmepriv->assoc_timer, 1);
+       }
+       else if(pcmd->res != H2C_SUCCESS)
+       {
+               RT_TRACE(_module_rtl871x_cmd_c_,_drv_err_,("********Error:rtw_select_and_join_from_scanned_queue Wait Sema  Fail ************\n"));
+               _set_timer(&pmlmepriv->assoc_timer, 1);
+       }
+
+       rtw_free_cmd_obj(pcmd);
+
+_func_exit_;
+}
+
+void rtw_createbss_cmd_callback(_adapter *padapter, struct cmd_obj *pcmd)
+{
+       _irqL irqL;
+       u8 timer_cancelled;
+       struct sta_info *psta = NULL;
+       struct wlan_network *pwlan = NULL;
+       struct  mlme_priv *pmlmepriv = &padapter->mlmepriv;
+       WLAN_BSSID_EX *pnetwork = (WLAN_BSSID_EX *)pcmd->parmbuf;
+       struct wlan_network *tgt_network = &(pmlmepriv->cur_network);
+
+_func_enter_;
+
+       if((pcmd->res != H2C_SUCCESS))
+       {
+               RT_TRACE(_module_rtl871x_cmd_c_,_drv_err_,("\n ********Error: rtw_createbss_cmd_callback  Fail ************\n\n."));
+               _set_timer(&pmlmepriv->assoc_timer, 1 );
+       }
+
+       _cancel_timer(&pmlmepriv->assoc_timer, &timer_cancelled);
+
+#ifdef CONFIG_FW_MLMLE
+       //endian_convert
+       pnetwork->Length = le32_to_cpu(pnetwork->Length);
+       pnetwork->Ssid.SsidLength = le32_to_cpu(pnetwork->Ssid.SsidLength);
+       pnetwork->Privacy =le32_to_cpu(pnetwork->Privacy);
+       pnetwork->Rssi = le32_to_cpu(pnetwork->Rssi);
+       pnetwork->NetworkTypeInUse =le32_to_cpu(pnetwork->NetworkTypeInUse);
+       pnetwork->Configuration.ATIMWindow = le32_to_cpu(pnetwork->Configuration.ATIMWindow);
+       //pnetwork->Configuration.BeaconPeriod = le32_to_cpu(pnetwork->Configuration.BeaconPeriod);
+       pnetwork->Configuration.DSConfig =le32_to_cpu(pnetwork->Configuration.DSConfig);
+       pnetwork->Configuration.FHConfig.DwellTime=le32_to_cpu(pnetwork->Configuration.FHConfig.DwellTime);
+       pnetwork->Configuration.FHConfig.HopPattern=le32_to_cpu(pnetwork->Configuration.FHConfig.HopPattern);
+       pnetwork->Configuration.FHConfig.HopSet=le32_to_cpu(pnetwork->Configuration.FHConfig.HopSet);
+       pnetwork->Configuration.FHConfig.Length=le32_to_cpu(pnetwork->Configuration.FHConfig.Length);
+       pnetwork->Configuration.Length = le32_to_cpu(pnetwork->Configuration.Length);
+       pnetwork->InfrastructureMode = le32_to_cpu(pnetwork->InfrastructureMode);
+       pnetwork->IELength = le32_to_cpu(pnetwork->IELength);
+#endif
+
+       _enter_critical_bh(&pmlmepriv->lock, &irqL);
+
+
+       if(check_fwstate(pmlmepriv, WIFI_AP_STATE) )
+       {
+               psta = rtw_get_stainfo(&padapter->stapriv, pnetwork->MacAddress);
+               if(!psta)
+               {
+               psta = rtw_alloc_stainfo(&padapter->stapriv, pnetwork->MacAddress);
+               if (psta == NULL)
+               {
+                       RT_TRACE(_module_rtl871x_cmd_c_,_drv_err_,("\nCan't alloc sta_info when createbss_cmd_callback\n"));
+                       goto createbss_cmd_fail ;
+               }
+               }
+
+               rtw_indicate_connect( padapter);
+       }
+       else
+       {
+               _irqL   irqL;
+
+               pwlan = _rtw_alloc_network(pmlmepriv);
+               _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+               if ( pwlan == NULL)
+               {
+                       pwlan = rtw_get_oldest_wlan_network(&pmlmepriv->scanned_queue);
+                       if( pwlan == NULL)
+                       {
+                               RT_TRACE(_module_rtl871x_cmd_c_,_drv_err_,("\n Error:  can't get pwlan in rtw_joinbss_event_callback \n"));
+                               _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+                               goto createbss_cmd_fail;
+                       }
+                       pwlan->last_scanned = rtw_get_current_time();
+               }
+               else
+               {
+                       rtw_list_insert_tail(&(pwlan->list), &pmlmepriv->scanned_queue.queue);
+               }
+
+               pnetwork->Length = get_WLAN_BSSID_EX_sz(pnetwork);
+               _rtw_memcpy(&(pwlan->network), pnetwork, pnetwork->Length);
+               //pwlan->fixed = _TRUE;
+
+               //rtw_list_insert_tail(&(pwlan->list), &pmlmepriv->scanned_queue.queue);
+
+               // copy pdev_network information to     pmlmepriv->cur_network
+               _rtw_memcpy(&tgt_network->network, pnetwork, (get_WLAN_BSSID_EX_sz(pnetwork)));
+
+               // reset DSConfig
+               //tgt_network->network.Configuration.DSConfig = (u32)rtw_ch2freq(pnetwork->Configuration.DSConfig);
+
+               _clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
+
+#if 0
+               if((pmlmepriv->fw_state) & WIFI_AP_STATE)
+               {
+                       psta = rtw_alloc_stainfo(&padapter->stapriv, pnetwork->MacAddress);
+
+                       if (psta == NULL) { // for AP Mode & Adhoc Master Mode
+                               RT_TRACE(_module_rtl871x_cmd_c_,_drv_err_,("\nCan't alloc sta_info when createbss_cmd_callback\n"));
+                               goto createbss_cmd_fail ;
+                       }
+
+                       rtw_indicate_connect( padapter);
+               }
+               else {
+
+                       //rtw_indicate_disconnect(dev);
+               }
+#endif
+               _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+               // we will set _FW_LINKED when there is one more sat to join us (rtw_stassoc_event_callback)
+
+       }
+
+createbss_cmd_fail:
+
+       _exit_critical_bh(&pmlmepriv->lock, &irqL);
+
+       rtw_free_cmd_obj(pcmd);
+
+_func_exit_;
+
+}
+
+
+
+void rtw_setstaKey_cmdrsp_callback(_adapter*   padapter ,  struct cmd_obj *pcmd)
+{
+
+       struct sta_priv * pstapriv = &padapter->stapriv;
+       struct set_stakey_rsp* psetstakey_rsp = (struct set_stakey_rsp*) (pcmd->rsp);
+       struct sta_info*        psta = rtw_get_stainfo(pstapriv, psetstakey_rsp->addr);
+
+_func_enter_;
+
+       if(psta==NULL)
+       {
+               RT_TRACE(_module_rtl871x_cmd_c_,_drv_err_,("\nERROR: rtw_setstaKey_cmdrsp_callback => can't get sta_info \n\n"));
+               goto exit;
+       }
+
+       //psta->aid = psta->mac_id = psetstakey_rsp->keyid; //CAM_ID(CAM_ENTRY)
+
+exit:
+
+       rtw_free_cmd_obj(pcmd);
+
+_func_exit_;
+
+}
+void rtw_setassocsta_cmdrsp_callback(_adapter* padapter,  struct cmd_obj *pcmd)
+{
+       _irqL   irqL;
+       struct sta_priv * pstapriv = &padapter->stapriv;
+       struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
+       struct set_assocsta_parm* passocsta_parm = (struct set_assocsta_parm*)(pcmd->parmbuf);
+       struct set_assocsta_rsp* passocsta_rsp = (struct set_assocsta_rsp*) (pcmd->rsp);
+       struct sta_info*        psta = rtw_get_stainfo(pstapriv, passocsta_parm->addr);
+
+_func_enter_;
+
+       if(psta==NULL)
+       {
+               RT_TRACE(_module_rtl871x_cmd_c_,_drv_err_,("\nERROR: setassocsta_cmdrsp_callbac => can't get sta_info \n\n"));
+               goto exit;
+       }
+
+       psta->aid = psta->mac_id = passocsta_rsp->cam_id;
+
+       _enter_critical_bh(&pmlmepriv->lock, &irqL);
+
+       if ((check_fwstate(pmlmepriv, WIFI_MP_STATE) == _TRUE) && (check_fwstate(pmlmepriv, _FW_UNDER_LINKING) == _TRUE))
+               _clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
+
+       set_fwstate(pmlmepriv, _FW_LINKED);
+       _exit_critical_bh(&pmlmepriv->lock, &irqL);
+
+exit:
+       rtw_free_cmd_obj(pcmd);
+
+_func_exit_;
+}
+
+void rtw_getrttbl_cmd_cmdrsp_callback(_adapter*        padapter,  struct cmd_obj *pcmd);
+void rtw_getrttbl_cmd_cmdrsp_callback(_adapter*        padapter,  struct cmd_obj *pcmd)
+{
+_func_enter_;
+
+       rtw_free_cmd_obj(pcmd);
+#ifdef CONFIG_MP_INCLUDED
+       padapter->mppriv.workparam.bcompleted=_TRUE;
+#endif
+
+_func_exit_;
+
+}
diff --git a/drivers/net/wireless/realtek/rtl8192cu/core/rtw_debug.c b/drivers/net/wireless/realtek/rtl8192cu/core/rtw_debug.c
new file mode 100644 (file)
index 0000000..2268c1a
--- /dev/null
@@ -0,0 +1,1336 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#define _RTW_DEBUG_C_
+
+
+#include <rtw_debug.h>
+#include <../hal/dm.h>
+
+//#ifdef CONFIG_DEBUG_RTL871X
+
+       u32 GlobalDebugLevel = _drv_err_;
+
+       u64 GlobalDebugComponents = \
+                       _module_rtl871x_xmit_c_ |
+                       _module_xmit_osdep_c_ |
+                       _module_rtl871x_recv_c_ |
+                       _module_recv_osdep_c_ |
+                       _module_rtl871x_mlme_c_ |
+                       _module_mlme_osdep_c_ |
+                       _module_rtl871x_sta_mgt_c_ |
+                       _module_rtl871x_cmd_c_ |
+                       _module_cmd_osdep_c_ |
+                       _module_rtl871x_io_c_ |
+                       _module_io_osdep_c_ |
+                       _module_os_intfs_c_|
+                       _module_rtl871x_security_c_|
+                       _module_rtl871x_eeprom_c_|
+                       _module_hal_init_c_|
+                       _module_hci_hal_init_c_|
+                       _module_rtl871x_ioctl_c_|
+                       _module_rtl871x_ioctl_set_c_|
+                       _module_rtl871x_ioctl_query_c_|
+                       _module_rtl871x_pwrctrl_c_|
+                       _module_hci_intfs_c_|
+                       _module_hci_ops_c_|
+                       _module_hci_ops_os_c_|
+                       _module_rtl871x_ioctl_os_c|
+                       _module_rtl8712_cmd_c_|
+                       _module_hal_xmit_c_|
+                       _module_rtl8712_recv_c_ |
+                       _module_mp_ |
+                       _module_efuse_;
+
+//#endif
+
+#ifdef CONFIG_PROC_DEBUG
+#include <rtw_version.h>
+
+int proc_get_drv_version(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data)
+{
+       struct net_device *dev = data;
+
+       int len = 0;
+
+       len += snprintf(page + len, count - len, "%s\n", DRIVERVERSION);
+
+       *eof = 1;
+       return len;
+}
+
+int proc_get_log_level(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data)
+{
+       struct net_device *dev = data;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+
+       int len = 0;
+
+       len += snprintf(page + len, count - len,
+               "log_level:%d\n",
+               GlobalDebugLevel
+               );
+
+       *eof = 1;
+       return len;
+}
+
+int proc_set_log_level(struct file *file, const char *buffer,
+               unsigned long count, void *data)
+{
+       struct net_device *dev = (struct net_device *)data;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       char tmp[32];
+       u32 is_signal_dbg;
+
+       if (count < 1)
+               return -EFAULT;
+
+       if (buffer && !copy_from_user(tmp, buffer, sizeof(tmp))) {
+
+               int num = sscanf(tmp, "%d ", &is_signal_dbg);
+
+               if( is_signal_dbg >= 0 && is_signal_dbg < 10 )
+               {
+                       GlobalDebugLevel= is_signal_dbg;
+                       printk("%d\n", GlobalDebugLevel);
+               }
+       }
+
+       return count;
+
+}
+
+#ifdef DBG_MEM_ALLOC
+int proc_get_mstat(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data)
+{
+       int len = 0;
+
+       len += _rtw_mstat_dump(page+len, count-len);
+       *eof = 1;
+
+       return len;
+}
+#endif /* DBG_MEM_ALLOC */
+
+int proc_get_write_reg(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data)
+{
+       *eof = 1;
+       return 0;
+}
+
+int proc_set_write_reg(struct file *file, const char *buffer,
+               unsigned long count, void *data)
+{
+       struct net_device *dev = (struct net_device *)data;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       char tmp[32];
+       u32 addr, val, len;
+
+       if (count < 3)
+       {
+               DBG_871X("argument size is less than 3\n");
+               return -EFAULT;
+       }
+
+       if (buffer && !copy_from_user(tmp, buffer, sizeof(tmp))) {
+
+               int num = sscanf(tmp, "%x %x %x", &addr, &val, &len);
+
+               if (num !=  3) {
+                       DBG_871X("invalid write_reg parameter!\n");
+                       return count;
+               }
+
+               switch(len)
+               {
+                       case 1:
+                               rtw_write8(padapter, addr, (u8)val);
+                               break;
+                       case 2:
+                               rtw_write16(padapter, addr, (u16)val);
+                               break;
+                       case 4:
+                               rtw_write32(padapter, addr, val);
+                               break;
+                       default:
+                               DBG_871X("error write length=%d", len);
+                               break;
+               }
+
+       }
+
+       return count;
+
+}
+
+static u32 proc_get_read_addr=0xeeeeeeee;
+static u32 proc_get_read_len=0x4;
+
+int proc_get_read_reg(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data)
+{
+       struct net_device *dev = data;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+
+       int len = 0;
+
+       if(proc_get_read_addr==0xeeeeeeee)
+       {
+               *eof = 1;
+               return len;
+       }
+
+       switch(proc_get_read_len)
+       {
+               case 1:
+                       len += snprintf(page + len, count - len, "rtw_read8(0x%x)=0x%x\n", proc_get_read_addr, rtw_read8(padapter, proc_get_read_addr));
+                       break;
+               case 2:
+                       len += snprintf(page + len, count - len, "rtw_read16(0x%x)=0x%x\n", proc_get_read_addr, rtw_read16(padapter, proc_get_read_addr));
+                       break;
+               case 4:
+                       len += snprintf(page + len, count - len, "rtw_read32(0x%x)=0x%x\n", proc_get_read_addr, rtw_read32(padapter, proc_get_read_addr));
+                       break;
+               default:
+                       len += snprintf(page + len, count - len, "error read length=%d\n", proc_get_read_len);
+                       break;
+       }
+
+       *eof = 1;
+       return len;
+
+}
+
+int proc_set_read_reg(struct file *file, const char *buffer,
+               unsigned long count, void *data)
+{
+       char tmp[16];
+       u32 addr, len;
+
+       if (count < 2)
+       {
+               DBG_871X("argument size is less than 2\n");
+               return -EFAULT;
+       }
+
+       if (buffer && !copy_from_user(tmp, buffer, sizeof(tmp))) {
+
+               int num = sscanf(tmp, "%x %x", &addr, &len);
+
+               if (num !=  2) {
+                       DBG_871X("invalid read_reg parameter!\n");
+                       return count;
+               }
+
+               proc_get_read_addr = addr;
+
+               proc_get_read_len = len;
+       }
+
+       return count;
+
+}
+
+int proc_get_fwstate(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data)
+{
+       struct net_device *dev = data;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+
+       int len = 0;
+
+       len += snprintf(page + len, count - len, "fwstate=0x%x\n", get_fwstate(pmlmepriv));
+
+       *eof = 1;
+       return len;
+}
+
+int proc_get_sec_info(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data)
+{
+       struct net_device *dev = data;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct security_priv *psecuritypriv = &padapter->securitypriv;
+
+       int len = 0;
+
+       len += snprintf(page + len, count - len, "auth_alg=0x%x, enc_alg=0x%x, auth_type=0x%x, enc_type=0x%x\n",
+                                               psecuritypriv->dot11AuthAlgrthm, psecuritypriv->dot11PrivacyAlgrthm,
+                                               psecuritypriv->ndisauthtype, psecuritypriv->ndisencryptstatus);
+
+       *eof = 1;
+       return len;
+}
+
+int proc_get_mlmext_state(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data)
+{
+       struct net_device *dev = data;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       int len = 0;
+
+       len += snprintf(page + len, count - len, "pmlmeinfo->state=0x%x\n", pmlmeinfo->state);
+
+       *eof = 1;
+       return len;
+}
+
+int proc_get_qos_option(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data)
+{
+       struct net_device *dev = data;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+
+       int len = 0;
+
+       len += snprintf(page + len, count - len, "qos_option=%d\n", pmlmepriv->qospriv.qos_option);
+
+       *eof = 1;
+       return len;
+
+}
+
+int proc_get_ht_option(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data)
+{
+       struct net_device *dev = data;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+
+       int len = 0;
+
+       len += snprintf(page + len, count - len, "ht_option=%d\n", pmlmepriv->htpriv.ht_option);
+
+       *eof = 1;
+       return len;
+}
+
+int proc_get_rf_info(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data)
+{
+       struct net_device *dev = data;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       int len = 0;
+
+       len += snprintf(page + len, count - len, "cur_ch=%d, cur_bw=%d, cur_ch_offet=%d\n"
+               "oper_ch=%d, oper_bw=%d, oper_ch_offet=%d\n",
+               pmlmeext->cur_channel, pmlmeext->cur_bwmode, pmlmeext->cur_ch_offset,
+               rtw_get_oper_ch(padapter), rtw_get_oper_bw(padapter), rtw_get_oper_choffset(padapter));
+       *eof = 1;
+
+       return len;
+}
+
+int proc_get_ap_info(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data)
+{
+       struct sta_info *psta;
+       struct net_device *dev = data;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
+       struct wlan_network *cur_network = &(pmlmepriv->cur_network);
+       struct sta_priv *pstapriv = &padapter->stapriv;
+       int len = 0;
+
+       psta = rtw_get_stainfo(pstapriv, cur_network->network.MacAddress);
+       if(psta)
+       {
+               int i;
+               struct recv_reorder_ctrl *preorder_ctrl;
+
+               len += snprintf(page + len, count - len, "SSID=%s\n", cur_network->network.Ssid.Ssid);
+               len += snprintf(page + len, count - len, "sta's macaddr:" MAC_FMT "\n", MAC_ARG(psta->hwaddr));
+               len += snprintf(page + len, count - len, "cur_channel=%d, cur_bwmode=%d, cur_ch_offset=%d\n", pmlmeext->cur_channel, pmlmeext->cur_bwmode, pmlmeext->cur_ch_offset);
+               len += snprintf(page + len, count - len, "rtsen=%d, cts2slef=%d\n", psta->rtsen, psta->cts2self);
+               len += snprintf(page + len, count - len, "qos_en=%d, ht_en=%d, init_rate=%d\n", psta->qos_option, psta->htpriv.ht_option, psta->init_rate);
+               len += snprintf(page + len, count - len, "state=0x%x, aid=%d, macid=%d, raid=%d\n", psta->state, psta->aid, psta->mac_id, psta->raid);
+               len += snprintf(page + len, count - len, "bwmode=%d, ch_offset=%d, sgi=%d\n", psta->htpriv.bwmode, psta->htpriv.ch_offset, psta->htpriv.sgi);
+               len += snprintf(page + len, count - len, "ampdu_enable = %d\n", psta->htpriv.ampdu_enable);
+               len += snprintf(page + len, count - len, "agg_enable_bitmap=%x, candidate_tid_bitmap=%x\n", psta->htpriv.agg_enable_bitmap, psta->htpriv.candidate_tid_bitmap);
+
+               for(i=0;i<16;i++)
+               {
+                       preorder_ctrl = &psta->recvreorder_ctrl[i];
+                       if(preorder_ctrl->enable)
+                       {
+                               len += snprintf(page + len, count - len, "tid=%d, indicate_seq=%d\n", i, preorder_ctrl->indicate_seq);
+                       }
+               }
+
+       }
+       else
+       {
+               len += snprintf(page + len, count - len, "can't get sta's macaddr, cur_network's macaddr:" MAC_FMT "\n", MAC_ARG(cur_network->network.MacAddress));
+       }
+
+       *eof = 1;
+       return len;
+
+}
+
+int proc_get_adapter_state(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data)
+{
+       struct net_device *dev = data;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       int len = 0;
+
+       len += snprintf(page + len, count - len, "bSurpriseRemoved=%d, bDriverStopped=%d\n",
+                                               padapter->bSurpriseRemoved, padapter->bDriverStopped);
+
+       *eof = 1;
+       return len;
+
+}
+
+int proc_get_trx_info(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data)
+{
+       int i;
+       struct net_device *dev = data;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
+       struct recv_priv  *precvpriv = &padapter->recvpriv;
+       struct dvobj_priv       *pdvobj = adapter_to_dvobj(padapter);
+        struct hw_xmit *phwxmit;
+       int len = 0;
+
+       len += snprintf(page + len, count - len, "free_xmitbuf_cnt=%d, free_xmitframe_cnt=%d"
+                               ", free_ext_xmitbuf_cnt=%d, free_xframe_ext_cnt=%d"
+                               ", free_recvframe_cnt=%d\n",
+                               pxmitpriv->free_xmitbuf_cnt, pxmitpriv->free_xmitframe_cnt,
+                               pxmitpriv->free_xmit_extbuf_cnt, pxmitpriv->free_xframe_ext_cnt,
+                               precvpriv->free_recvframe_cnt);
+#ifdef CONFIG_USB_HCI
+       len += snprintf(page + len, count - len, "rx_urb_pending_cnt=%d\n", precvpriv->rx_pending_cnt);
+#endif
+
+       len += snprintf(page + len, count - len, "recvbuf_skb_alloc_fail_cnt=%d\n", precvpriv->recvbuf_skb_alloc_fail_cnt);
+       len += snprintf(page + len, count - len, "recvbuf_null_cnt=%d\n", precvpriv->recvbuf_null_cnt);
+       len += snprintf(page + len, count - len, "read_port_complete_EINPROGRESS_cnt=%d\n", precvpriv->read_port_complete_EINPROGRESS_cnt);
+       len += snprintf(page + len, count - len, "read_port_complete_other_urb_err_cnt=%d\n", precvpriv->read_port_complete_other_urb_err_cnt);
+       len += snprintf(page + len, count - len, "hw_init_completed=%d\n", padapter->hw_init_completed);
+#ifdef CONFIG_USB_HCI
+       len += snprintf(page + len, count - len, "continual_urb_error=%d\n", atomic_read(&pdvobj->continual_urb_error));
+#endif
+
+        for(i = 0; i < 4; i++)
+       {
+               phwxmit = pxmitpriv->hwxmits + i;
+               len += snprintf(page + len, count - len, "%d, hwq.accnt=%d\n", i, phwxmit->accnt);
+       }
+
+       *eof = 1;
+       return len;
+
+}
+
+
+
+int proc_get_mac_reg_dump1(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data)
+{
+       struct net_device *dev = data;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       int len = 0;
+       int i,j=1;
+
+       len += snprintf(page + len, count - len, "\n======= MAC REG =======\n");
+
+       for(i=0x0;i<0x300;i+=4)
+       {
+               if(j%4==1)      len += snprintf(page + len, count - len,"0x%02x",i);
+               len += snprintf(page + len, count - len," 0x%08x ",rtw_read32(padapter,i));
+               if((j++)%4 == 0)        len += snprintf(page + len, count - len,"\n");
+       }
+
+       *eof = 1;
+       return len;
+
+}
+
+int proc_get_mac_reg_dump2(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data)
+{
+       struct net_device *dev = data;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       int len = 0;
+       int i,j=1;
+
+       len += snprintf(page + len, count - len, "\n======= MAC REG =======\n");
+       memset(page, 0, count);
+       for(i=0x300;i<0x600;i+=4)
+       {
+               if(j%4==1)      len += snprintf(page + len, count - len,"0x%02x",i);
+               len += snprintf(page + len, count - len," 0x%08x ",rtw_read32(padapter,i));
+               if((j++)%4 == 0)        len += snprintf(page + len, count - len,"\n");
+       }
+
+       *eof = 1;
+       return len;
+
+}
+
+int proc_get_mac_reg_dump3(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data)
+{
+       struct net_device *dev = data;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       int len = 0;
+       int i,j=1;
+
+       len += snprintf(page + len, count - len, "\n======= MAC REG =======\n");
+
+       for(i=0x600;i<0x800;i+=4)
+       {
+               if(j%4==1)      len += snprintf(page + len, count - len,"0x%02x",i);
+               len += snprintf(page + len, count - len," 0x%08x ",rtw_read32(padapter,i));
+               if((j++)%4 == 0)        len += snprintf(page + len, count - len,"\n");
+       }
+
+       *eof = 1;
+       return len;
+
+}
+
+int proc_get_bb_reg_dump1(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data)
+{
+       struct net_device *dev = data;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       int len = 0;
+       int i,j=1;
+
+       len += snprintf(page + len, count - len, "\n======= BB REG =======\n");
+       for(i=0x800;i<0xB00;i+=4)
+       {
+               if(j%4==1)      len += snprintf(page + len, count - len,"0x%02x",i);
+               len += snprintf(page + len, count - len," 0x%08x ",rtw_read32(padapter,i));
+               if((j++)%4 == 0)        len += snprintf(page + len, count - len,"\n");
+       }
+       *eof = 1;
+       return len;
+}
+
+int proc_get_bb_reg_dump2(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data)
+{
+       struct net_device *dev = data;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       int len = 0;
+       int i,j=1;
+
+       len += snprintf(page + len, count - len, "\n======= BB REG =======\n");
+       for(i=0xB00;i<0xE00;i+=4)
+       {
+               if(j%4==1)      len += snprintf(page + len, count - len,"0x%02x",i);
+               len += snprintf(page + len, count - len," 0x%08x ",rtw_read32(padapter,i));
+               if((j++)%4 == 0)        len += snprintf(page + len, count - len,"\n");
+       }
+       *eof = 1;
+       return len;
+}
+
+int proc_get_bb_reg_dump3(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data)
+{
+       struct net_device *dev = data;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       int len = 0;
+       int i,j=1;
+
+       len += snprintf(page + len, count - len, "\n======= BB REG =======\n");
+       for(i=0xE00;i<0x1000;i+=4)
+       {
+               if(j%4==1)      len += snprintf(page + len, count - len,"0x%02x",i);
+               len += snprintf(page + len, count - len," 0x%08x ",rtw_read32(padapter,i));
+               if((j++)%4 == 0)        len += snprintf(page + len, count - len,"\n");
+       }
+       *eof = 1;
+       return len;
+}
+
+int proc_get_rf_reg_dump1(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data)
+{
+       struct net_device *dev = data;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       int len = 0;
+       int i,j=1,path;
+       u32 value;
+
+       len += snprintf(page + len, count - len, "\n======= RF REG =======\n");
+       path = 1;
+       len += snprintf(page + len, count - len, "\nRF_Path(%x)\n",path);
+       for(i=0;i<0xC0;i++)
+       {
+               //value = PHY_QueryRFReg(padapter, (RF90_RADIO_PATH_E)path,i, bMaskDWord);
+               value =rtw_hal_read_rfreg(padapter, path, i, 0xffffffff);
+               if(j%4==1)      len += snprintf(page + len, count - len, "0x%02x ",i);
+               len += snprintf(page + len, count - len, " 0x%08x ",value);
+               if((j++)%4==0)  len += snprintf(page + len, count - len, "\n");
+       }
+
+       *eof = 1;
+       return len;
+}
+
+
+int proc_get_rf_reg_dump2(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data)
+{
+       struct net_device *dev = data;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       int len = 0;
+       int i,j=1,path;
+       u32 value;
+
+       len += snprintf(page + len, count - len, "\n======= RF REG =======\n");
+       path = 1;
+       len += snprintf(page + len, count - len, "\nRF_Path(%x)\n",path);
+       for(i=0xC0;i<0x100;i++)
+       {
+               //value = PHY_QueryRFReg(padapter, (RF90_RADIO_PATH_E)path,i, bMaskDWord);
+               value =rtw_hal_read_rfreg(padapter, path, i, 0xffffffff);
+               if(j%4==1)      len += snprintf(page + len, count - len, "0x%02x ",i);
+               len += snprintf(page + len, count - len, " 0x%08x ",value);
+               if((j++)%4==0)  len += snprintf(page + len, count - len, "\n");
+       }
+       *eof = 1;
+       return len;
+}
+
+
+int proc_get_rf_reg_dump3(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data)
+{
+       struct net_device *dev = data;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       int len = 0;
+       int i,j=1,path;
+       u32 value;
+
+       len += snprintf(page + len, count - len, "\n======= RF REG =======\n");
+       path = 2;
+       len += snprintf(page + len, count - len, "\nRF_Path(%x)\n",path);
+       for(i=0;i<0xC0;i++)
+       {
+               //value = PHY_QueryRFReg(padapter, (RF90_RADIO_PATH_E)path,i, bMaskDWord);
+               value =rtw_hal_read_rfreg(padapter, path, i, 0xffffffff);
+               if(j%4==1)      len += snprintf(page + len, count - len, "0x%02x ",i);
+               len += snprintf(page + len, count - len, " 0x%08x ",value);
+               if((j++)%4==0)  len += snprintf(page + len, count - len, "\n");
+       }
+
+       *eof = 1;
+       return len;
+}
+
+
+int proc_get_rf_reg_dump4(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data)
+{
+       struct net_device *dev = data;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       int len = 0;
+       int i,j=1,path;
+       u32 value;
+
+       len += snprintf(page + len, count - len, "\n======= RF REG =======\n");
+       path = 2;
+       len += snprintf(page + len, count - len, "\nRF_Path(%x)\n",path);
+       for(i=0xC0;i<0x100;i++)
+       {
+               //value = PHY_QueryRFReg(padapter, (RF90_RADIO_PATH_E)path,i, bMaskDWord);
+               value =rtw_hal_read_rfreg(padapter, path, i, 0xffffffff);
+               if(j%4==1)      len += snprintf(page + len, count - len, "0x%02x ",i);
+               len += snprintf(page + len, count - len, " 0x%08x ",value);
+               if((j++)%4==0)  len += snprintf(page + len, count - len, "\n");
+       }
+       *eof = 1;
+       return len;
+}
+
+
+
+int proc_get_rx_signal(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data)
+{
+       struct net_device *dev = data;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+
+       int len = 0;
+
+       len += snprintf(page + len, count - len,
+               "rssi:%d\n"
+               "rxpwdb:%d\n"
+               "signal_strength:%u\n"
+               "signal_qual:%u\n"
+               "noise:%u\n",
+               padapter->recvpriv.rssi,
+               padapter->recvpriv.rxpwdb,
+               padapter->recvpriv.signal_strength,
+               padapter->recvpriv.signal_qual,
+               padapter->recvpriv.noise
+               );
+
+       *eof = 1;
+       return len;
+}
+
+int proc_set_rx_signal(struct file *file, const char *buffer,
+               unsigned long count, void *data)
+{
+       struct net_device *dev = (struct net_device *)data;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       char tmp[32];
+       u32 is_signal_dbg, signal_strength;
+
+       if (count < 1)
+               return -EFAULT;
+
+       if (buffer && !copy_from_user(tmp, buffer, sizeof(tmp))) {
+
+               int num = sscanf(tmp, "%u %u", &is_signal_dbg, &signal_strength);
+
+               is_signal_dbg = is_signal_dbg==0?0:1;
+
+               if(is_signal_dbg && num!=2)
+                       return count;
+
+               signal_strength = signal_strength>100?100:signal_strength;
+               signal_strength = signal_strength<0?0:signal_strength;
+
+               padapter->recvpriv.is_signal_dbg = is_signal_dbg;
+               padapter->recvpriv.signal_strength_dbg=signal_strength;
+
+               if(is_signal_dbg)
+                       DBG_871X("set %s %u\n", "DBG_SIGNAL_STRENGTH", signal_strength);
+               else
+                       DBG_871X("set %s\n", "HW_SIGNAL_STRENGTH");
+
+       }
+
+       return count;
+
+}
+
+int proc_get_ht_enable(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data)
+{
+       struct net_device *dev = data;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct registry_priv    *pregpriv = &padapter->registrypriv;
+
+       int len = 0;
+
+       if(pregpriv)
+               len += snprintf(page + len, count - len,
+                       "%d\n",
+                       pregpriv->ht_enable
+                       );
+
+       *eof = 1;
+       return len;
+}
+
+int proc_set_ht_enable(struct file *file, const char *buffer,
+               unsigned long count, void *data)
+{
+       struct net_device *dev = (struct net_device *)data;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct registry_priv    *pregpriv = &padapter->registrypriv;
+       char tmp[32];
+       u32 mode;
+
+       if (count < 1)
+               return -EFAULT;
+
+       if (buffer && !copy_from_user(tmp, buffer, sizeof(tmp))) {
+
+               int num = sscanf(tmp, "%d ", &mode);
+
+               if( pregpriv && mode >= 0 && mode < 2 )
+               {
+                       pregpriv->ht_enable= mode;
+                       printk("ht_enable=%d\n", pregpriv->ht_enable);
+               }
+       }
+
+       return count;
+
+}
+
+
+int proc_get_cbw40_enable(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data)
+{
+       struct net_device *dev = data;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct registry_priv    *pregpriv = &padapter->registrypriv;
+
+       int len = 0;
+
+       if(pregpriv)
+               len += snprintf(page + len, count - len,
+                       "%d\n",
+                       pregpriv->cbw40_enable
+                       );
+
+       *eof = 1;
+       return len;
+}
+
+int proc_set_cbw40_enable(struct file *file, const char *buffer,
+               unsigned long count, void *data)
+{
+       struct net_device *dev = (struct net_device *)data;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct registry_priv    *pregpriv = &padapter->registrypriv;
+       char tmp[32];
+       u32 mode;
+
+       if (count < 1)
+               return -EFAULT;
+
+       if (buffer && !copy_from_user(tmp, buffer, sizeof(tmp))) {
+
+               int num = sscanf(tmp, "%d ", &mode);
+
+               if( pregpriv && mode >= 0 && mode < 2 )
+               {
+                       pregpriv->cbw40_enable= mode;
+                       printk("cbw40_enable=%d\n", mode);
+               }
+       }
+
+       return count;
+
+}
+
+int proc_get_ampdu_enable(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data)
+{
+       struct net_device *dev = data;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct registry_priv    *pregpriv = &padapter->registrypriv;
+
+       int len = 0;
+
+       if(pregpriv)
+               len += snprintf(page + len, count - len,
+                       "%d\n",
+                       pregpriv->ampdu_enable
+                       );
+
+       *eof = 1;
+       return len;
+}
+
+int proc_set_ampdu_enable(struct file *file, const char *buffer,
+               unsigned long count, void *data)
+{
+       struct net_device *dev = (struct net_device *)data;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct registry_priv    *pregpriv = &padapter->registrypriv;
+       char tmp[32];
+       u32 mode;
+
+       if (count < 1)
+               return -EFAULT;
+
+       if (buffer && !copy_from_user(tmp, buffer, sizeof(tmp))) {
+
+               int num = sscanf(tmp, "%d ", &mode);
+
+               if( pregpriv && mode >= 0 && mode < 3 )
+               {
+                       pregpriv->ampdu_enable= mode;
+                       printk("ampdu_enable=%d\n", mode);
+               }
+       }
+
+       return count;
+
+}
+
+
+int proc_get_two_path_rssi(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data)
+{
+       struct net_device *dev = data;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+
+       int len = 0;
+
+       if(padapter)
+               len += snprintf(page + len, count - len,
+                       "%d %d\n",
+                       padapter->recvpriv.RxRssi[0],
+                       padapter->recvpriv.RxRssi[1]
+                       );
+
+       *eof = 1;
+       return len;
+}
+
+int proc_get_rx_stbc(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data)
+{
+       struct net_device *dev = data;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct registry_priv    *pregpriv = &padapter->registrypriv;
+
+       int len = 0;
+
+       if(pregpriv)
+               len += snprintf(page + len, count - len,
+                       "%d\n",
+                       pregpriv->rx_stbc
+                       );
+
+       *eof = 1;
+       return len;
+}
+
+int proc_set_rx_stbc(struct file *file, const char *buffer,
+               unsigned long count, void *data)
+{
+       struct net_device *dev = (struct net_device *)data;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct registry_priv    *pregpriv = &padapter->registrypriv;
+       char tmp[32];
+       u32 mode;
+
+       if (count < 1)
+               return -EFAULT;
+
+       if (buffer && !copy_from_user(tmp, buffer, sizeof(tmp))) {
+
+               int num = sscanf(tmp, "%d ", &mode);
+
+               if( pregpriv && (mode == 0 || mode == 1|| mode == 2|| mode == 3))
+               {
+                       pregpriv->rx_stbc= mode;
+                       printk("rx_stbc=%d\n", mode);
+               }
+       }
+
+       return count;
+
+}
+
+int proc_get_vid(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data)
+{
+       struct net_device *dev = data;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       u16 VID=0;
+       int len = 0;
+
+       rtw_hal_get_hwreg(padapter, HW_VAR_VID, (u8 *)&VID);
+       len += snprintf(page + len, count - len,
+               "%04x\n",
+               VID
+               );
+
+       *eof = 1;
+       return len;
+}
+
+int proc_get_pid(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data)
+{
+       struct net_device *dev = data;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       u16 PID=0;
+       int len = 0;
+
+       rtw_hal_get_hwreg(padapter, HW_VAR_PID, (u8 *)&PID);
+       len += snprintf(page + len, count - len,
+               "%04x\n",
+               PID
+               );
+
+       *eof = 1;
+       return len;
+}
+
+int proc_get_rssi_disp(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data)
+{
+       *eof = 1;
+       return 0;
+}
+
+int proc_set_rssi_disp(struct file *file, const char *buffer,
+               unsigned long count, void *data)
+{
+       struct net_device *dev = (struct net_device *)data;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       char tmp[32];
+       u32 enable=0;
+
+       if (count < 1)
+       {
+               DBG_8192C("argument size is less than 1\n");
+               return -EFAULT;
+       }
+
+       if (buffer && !copy_from_user(tmp, buffer, sizeof(tmp))) {
+
+               int num = sscanf(tmp, "%x", &enable);
+
+               if (num !=  1) {
+                       DBG_8192C("invalid set_rssi_disp parameter!\n");
+                       return count;
+               }
+
+               if(enable)
+               {
+                       DBG_8192C("Turn On Rx RSSI Display Function\n");
+                       padapter->bRxRSSIDisplay = enable ;
+               }
+               else
+               {
+                       DBG_8192C("Turn Off Rx RSSI Display Function\n");
+                       padapter->bRxRSSIDisplay = 0 ;
+               }
+
+       }
+
+       return count;
+
+}
+
+
+#ifdef CONFIG_AP_MODE
+
+int proc_get_all_sta_info(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data)
+{
+       _irqL irqL;
+       struct sta_info *psta;
+       struct net_device *dev = data;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct sta_priv *pstapriv = &padapter->stapriv;
+       int i, j;
+       _list   *plist, *phead;
+       struct recv_reorder_ctrl *preorder_ctrl;
+       int len = 0;
+
+
+       len += snprintf(page + len, count - len, "sta_dz_bitmap=0x%x, tim_bitmap=0x%x\n", pstapriv->sta_dz_bitmap, pstapriv->tim_bitmap);
+
+       _enter_critical_bh(&pstapriv->sta_hash_lock, &irqL);
+
+       for(i=0; i< NUM_STA; i++)
+       {
+               phead = &(pstapriv->sta_hash[i]);
+               plist = get_next(phead);
+
+               while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
+               {
+                       psta = LIST_CONTAINOR(plist, struct sta_info, hash_list);
+
+                       plist = get_next(plist);
+
+                       //if(extra_arg == psta->aid)
+                       {
+                               len += snprintf(page + len, count - len, "sta's macaddr:" MAC_FMT "\n", MAC_ARG(psta->hwaddr));
+                               len += snprintf(page + len, count - len, "rtsen=%d, cts2slef=%d\n", psta->rtsen, psta->cts2self);
+                               len += snprintf(page + len, count - len, "qos_en=%d, ht_en=%d, init_rate=%d\n", psta->qos_option, psta->htpriv.ht_option, psta->init_rate);
+                               len += snprintf(page + len, count - len, "state=0x%x, aid=%d, macid=%d, raid=%d\n", psta->state, psta->aid, psta->mac_id, psta->raid);
+                               len += snprintf(page + len, count - len, "bwmode=%d, ch_offset=%d, sgi=%d\n", psta->htpriv.bwmode, psta->htpriv.ch_offset, psta->htpriv.sgi);
+                               len += snprintf(page + len, count - len, "ampdu_enable = %d\n", psta->htpriv.ampdu_enable);
+                               len += snprintf(page + len, count - len, "agg_enable_bitmap=%x, candidate_tid_bitmap=%x\n", psta->htpriv.agg_enable_bitmap, psta->htpriv.candidate_tid_bitmap);
+                               len += snprintf(page + len, count - len, "sleepq_len=%d\n", psta->sleepq_len);
+                               len += snprintf(page + len, count - len, "capability=0x%x\n", psta->capability);
+                               len += snprintf(page + len, count - len, "flags=0x%x\n", psta->flags);
+                               len += snprintf(page + len, count - len, "wpa_psk=0x%x\n", psta->wpa_psk);
+                               len += snprintf(page + len, count - len, "wpa2_group_cipher=0x%x\n", psta->wpa2_group_cipher);
+                               len += snprintf(page + len, count - len, "wpa2_pairwise_cipher=0x%x\n", psta->wpa2_pairwise_cipher);
+                               len += snprintf(page + len, count - len, "qos_info=0x%x\n", psta->qos_info);
+                               len += snprintf(page + len, count - len, "dot118021XPrivacy=0x%x\n", psta->dot118021XPrivacy);
+
+                               for(j=0;j<16;j++)
+                               {
+                                       preorder_ctrl = &psta->recvreorder_ctrl[j];
+                                       if(preorder_ctrl->enable)
+                                       {
+                                               len += snprintf(page + len, count - len, "tid=%d, indicate_seq=%d\n", j, preorder_ctrl->indicate_seq);
+                                       }
+                               }
+
+                       }
+
+               }
+
+       }
+
+       _exit_critical_bh(&pstapriv->sta_hash_lock, &irqL);
+
+       *eof = 1;
+       return len;
+
+}
+
+#endif
+
+#ifdef DBG_MEMORY_LEAK
+#include <asm/atomic.h>
+extern atomic_t _malloc_cnt;;
+extern atomic_t _malloc_size;;
+
+int proc_get_malloc_cnt(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data)
+{
+
+       int len = 0;
+
+       len += snprintf(page + len, count - len, "_malloc_cnt=%d\n", atomic_read(&_malloc_cnt));
+       len += snprintf(page + len, count - len, "_malloc_size=%d\n", atomic_read(&_malloc_size));
+
+       *eof = 1;
+       return len;
+}
+#endif /* DBG_MEMORY_LEAK */
+
+#ifdef CONFIG_FIND_BEST_CHANNEL
+int proc_get_best_channel(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data)
+{
+       struct net_device *dev = data;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
+       int len = 0;
+       u32 i, best_channel_24G = 1, best_channel_5G = 36, index_24G = 0, index_5G = 0;
+
+       for (i=0; pmlmeext->channel_set[i].ChannelNum !=0; i++) {
+               if ( pmlmeext->channel_set[i].ChannelNum == 1)
+                       index_24G = i;
+               if ( pmlmeext->channel_set[i].ChannelNum == 36)
+                       index_5G = i;
+       }
+
+       for (i=0; pmlmeext->channel_set[i].ChannelNum !=0; i++) {
+               // 2.4G
+               if ( pmlmeext->channel_set[i].ChannelNum == 6 ) {
+                       if ( pmlmeext->channel_set[i].rx_count < pmlmeext->channel_set[index_24G].rx_count ) {
+                               index_24G = i;
+                               best_channel_24G = pmlmeext->channel_set[i].ChannelNum;
+                       }
+               }
+
+               // 5G
+               if ( pmlmeext->channel_set[i].ChannelNum >= 36
+                       && pmlmeext->channel_set[i].ChannelNum < 140 ) {
+                        // Find primary channel
+                       if ( (( pmlmeext->channel_set[i].ChannelNum - 36) % 8 == 0)
+                               && (pmlmeext->channel_set[i].rx_count < pmlmeext->channel_set[index_5G].rx_count) ) {
+                               index_5G = i;
+                               best_channel_5G = pmlmeext->channel_set[i].ChannelNum;
+                       }
+               }
+
+               if ( pmlmeext->channel_set[i].ChannelNum >= 149
+                       && pmlmeext->channel_set[i].ChannelNum < 165) {
+                        // find primary channel
+                       if ( (( pmlmeext->channel_set[i].ChannelNum - 149) % 8 == 0)
+                               && (pmlmeext->channel_set[i].rx_count < pmlmeext->channel_set[index_5G].rx_count) ) {
+                               index_5G = i;
+                               best_channel_5G = pmlmeext->channel_set[i].ChannelNum;
+                       }
+               }
+#if 1 // debug
+               len += snprintf(page + len, count - len, "The rx cnt of channel %3d = %d\n",
+                                       pmlmeext->channel_set[i].ChannelNum, pmlmeext->channel_set[i].rx_count);
+#endif
+       }
+
+       len += snprintf(page + len, count - len, "best_channel_5G = %d\n", best_channel_5G);
+       len += snprintf(page + len, count - len, "best_channel_24G = %d\n", best_channel_24G);
+
+       *eof = 1;
+       return len;
+
+}
+
+int proc_set_best_channel(struct file *file, const char *buffer,
+               unsigned long count, void *data)
+{
+       struct net_device *dev = (struct net_device *)data;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
+       char tmp[32];
+
+       if(count < 1)
+               return -EFAULT;
+
+       if(buffer && !copy_from_user(tmp, buffer, sizeof(tmp)))
+       {
+               int i;
+               for(i = 0; pmlmeext->channel_set[i].ChannelNum != 0; i++)
+               {
+                       pmlmeext->channel_set[i].rx_count = 0;
+               }
+
+               DBG_871X("set %s\n", "Clean Best Channel Count");
+       }
+
+       return count;
+}
+#endif /* CONFIG_FIND_BEST_CHANNEL */
+
+#if defined(DBG_CONFIG_ERROR_DETECT)
+#include <rtw_sreset.h>
+int proc_get_sreset(char *page, char **start, off_t offset, int count, int *eof, void *data)
+{
+       struct net_device *dev = data;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+
+       int len = 0;
+
+       *eof = 1;
+       return len;
+}
+
+int proc_set_sreset(struct file *file, const char *buffer, unsigned long count, void *data)
+{
+       struct net_device *dev = (struct net_device *)data;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       char tmp[32];
+       s32 trigger_point;
+
+       if (count < 1)
+               return -EFAULT;
+
+       if (buffer && !copy_from_user(tmp, buffer, sizeof(tmp))) {
+
+               int num = sscanf(tmp, "%d", &trigger_point);
+
+               if (trigger_point == SRESET_TGP_NULL)
+                       rtw_hal_sreset_reset(padapter);
+               else
+                       sreset_set_trigger_point(padapter, trigger_point);
+       }
+
+       return count;
+
+}
+#endif /* DBG_CONFIG_ERROR_DETECT */
+
+#ifdef CONFIG_DM_ADAPTIVITY
+int proc_get_dm_adaptivity(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data)
+{
+       struct net_device *dev = data;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       int len = 0;
+
+       len += dm_adaptivity_get_parm_str(padapter, page, count);
+
+       *eof = 1;
+       return len;
+}
+
+int proc_set_dm_adaptivity(struct file *file, const char *buffer,
+               unsigned long count, void *data)
+{
+       struct net_device *dev = (struct net_device *)data;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       char tmp[32];
+       u32 TH_L2H_ini;
+       s8 TH_EDCCA_HL_diff;
+       u32 IGI_Base;
+       int ForceEDCCA;
+       u8 AdapEn_RSSI;
+       u8 IGI_LowerBound;
+
+       if (count < 1)
+               return -EFAULT;
+
+       if (buffer && !copy_from_user(tmp, buffer, sizeof(tmp))) {
+
+               int num = sscanf(tmp, "%x %hhd %x %d %hhu %hhu",
+                       &TH_L2H_ini, &TH_EDCCA_HL_diff, &IGI_Base, &ForceEDCCA, &AdapEn_RSSI, &IGI_LowerBound);
+
+               if (num != 6)
+                       return count;
+
+               dm_adaptivity_set_parm(padapter, (s8)TH_L2H_ini, TH_EDCCA_HL_diff, (s8)IGI_Base, (bool)ForceEDCCA, AdapEn_RSSI, IGI_LowerBound);
+       }
+
+       return count;
+}
+#endif /* CONFIG_DM_ADAPTIVITY */
+
+#endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/core/rtw_eeprom.c b/drivers/net/wireless/realtek/rtl8192cu/core/rtw_eeprom.c
new file mode 100644 (file)
index 0000000..c0a6b54
--- /dev/null
@@ -0,0 +1,422 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#define _RTW_EEPROM_C_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+
+void up_clk(_adapter*  padapter,        u16 *x)
+{
+_func_enter_;
+       *x = *x | _EESK;
+       rtw_write8(padapter, EE_9346CR, (u8)*x);
+       rtw_udelay_os(CLOCK_RATE);
+
+_func_exit_;
+
+}
+
+void down_clk(_adapter *       padapter, u16 *x        )
+{
+_func_enter_;
+       *x = *x & ~_EESK;
+       rtw_write8(padapter, EE_9346CR, (u8)*x);
+       rtw_udelay_os(CLOCK_RATE);
+_func_exit_;
+}
+
+void shift_out_bits(_adapter * padapter, u16 data, u16 count)
+{
+       u16 x,mask;
+_func_enter_;
+
+       if(padapter->bSurpriseRemoved==_TRUE){
+               RT_TRACE(_module_rtl871x_eeprom_c_,_drv_err_,("padapter->bSurpriseRemoved==_TRUE"));
+               goto out;
+       }
+       mask = 0x01 << (count - 1);
+       x = rtw_read8(padapter, EE_9346CR);
+
+       x &= ~(_EEDO | _EEDI);
+
+       do
+       {
+               x &= ~_EEDI;
+               if(data & mask)
+                       x |= _EEDI;
+               if(padapter->bSurpriseRemoved==_TRUE){
+               RT_TRACE(_module_rtl871x_eeprom_c_,_drv_err_,("padapter->bSurpriseRemoved==_TRUE"));
+               goto out;
+               }
+               rtw_write8(padapter, EE_9346CR, (u8)x);
+               rtw_udelay_os(CLOCK_RATE);
+               up_clk(padapter, &x);
+               down_clk(padapter, &x);
+               mask = mask >> 1;
+       } while(mask);
+       if(padapter->bSurpriseRemoved==_TRUE){
+               RT_TRACE(_module_rtl871x_eeprom_c_,_drv_err_,("padapter->bSurpriseRemoved==_TRUE"));
+               goto out;
+       }
+       x &= ~_EEDI;
+       rtw_write8(padapter, EE_9346CR, (u8)x);
+out:
+_func_exit_;
+}
+
+u16 shift_in_bits (_adapter * padapter)
+{
+       u16 x,d=0,i;
+_func_enter_;
+       if(padapter->bSurpriseRemoved==_TRUE){
+               RT_TRACE(_module_rtl871x_eeprom_c_,_drv_err_,("padapter->bSurpriseRemoved==_TRUE"));
+               goto out;
+       }
+       x = rtw_read8(padapter, EE_9346CR);
+
+       x &= ~( _EEDO | _EEDI);
+       d = 0;
+
+       for(i=0; i<16; i++)
+       {
+               d = d << 1;
+               up_clk(padapter, &x);
+       if(padapter->bSurpriseRemoved==_TRUE){
+               RT_TRACE(_module_rtl871x_eeprom_c_,_drv_err_,("padapter->bSurpriseRemoved==_TRUE"));
+               goto out;
+       }
+               x = rtw_read8(padapter, EE_9346CR);
+
+               x &= ~(_EEDI);
+               if(x & _EEDO)
+               d |= 1;
+
+               down_clk(padapter, &x);
+       }
+out:
+_func_exit_;
+
+       return d;
+}
+
+void standby(_adapter *        padapter        )
+{
+       u8   x;
+_func_enter_;
+       x = rtw_read8(padapter, EE_9346CR);
+
+       x &= ~(_EECS | _EESK);
+       rtw_write8(padapter, EE_9346CR,x);
+
+       rtw_udelay_os(CLOCK_RATE);
+       x |= _EECS;
+       rtw_write8(padapter, EE_9346CR, x);
+       rtw_udelay_os(CLOCK_RATE);
+_func_exit_;
+}
+
+u16 wait_eeprom_cmd_done(_adapter* padapter)
+{
+       u8      x;
+       u16     i,res=_FALSE;
+_func_enter_;
+       standby(padapter );
+       for (i=0; i<200; i++)
+       {
+               x = rtw_read8(padapter, EE_9346CR);
+               if (x & _EEDO){
+                       res=_TRUE;
+                       goto exit;
+                       }
+               rtw_udelay_os(CLOCK_RATE);
+       }
+exit:
+_func_exit_;
+       return res;
+}
+
+void eeprom_clean(_adapter * padapter)
+{
+       u16 x;
+_func_enter_;
+       if(padapter->bSurpriseRemoved==_TRUE){
+               RT_TRACE(_module_rtl871x_eeprom_c_,_drv_err_,("padapter->bSurpriseRemoved==_TRUE"));
+               goto out;
+       }
+       x = rtw_read8(padapter, EE_9346CR);
+       if(padapter->bSurpriseRemoved==_TRUE){
+               RT_TRACE(_module_rtl871x_eeprom_c_,_drv_err_,("padapter->bSurpriseRemoved==_TRUE"));
+               goto out;
+       }
+       x &= ~(_EECS | _EEDI);
+       rtw_write8(padapter, EE_9346CR, (u8)x);
+       if(padapter->bSurpriseRemoved==_TRUE){
+               RT_TRACE(_module_rtl871x_eeprom_c_,_drv_err_,("padapter->bSurpriseRemoved==_TRUE"));
+               goto out;
+       }
+       up_clk(padapter, &x);
+               if(padapter->bSurpriseRemoved==_TRUE){
+               RT_TRACE(_module_rtl871x_eeprom_c_,_drv_err_,("padapter->bSurpriseRemoved==_TRUE"));
+               goto out;
+       }
+       down_clk(padapter, &x);
+out:
+_func_exit_;
+}
+
+void eeprom_write16(_adapter * padapter, u16 reg, u16 data)
+{
+       u8 x;
+#ifdef CONFIG_RTL8712
+       u8      tmp8_ori,tmp8_new,tmp8_clk_ori,tmp8_clk_new;
+       tmp8_ori=rtw_read8(padapter, 0x102502f1);
+       tmp8_new=tmp8_ori & 0xf7;
+       if(tmp8_ori != tmp8_new){
+               rtw_write8(padapter, 0x102502f1, tmp8_new);
+               RT_TRACE(_module_rtl871x_mp_ioctl_c_,_drv_err_,("====write 0x102502f1=====\n"));
+       }
+       tmp8_clk_ori=rtw_read8(padapter,0x10250003);
+       tmp8_clk_new=tmp8_clk_ori|0x20;
+       if(tmp8_clk_new!=tmp8_clk_ori){
+               RT_TRACE(_module_rtl871x_mp_ioctl_c_,_drv_err_,("====write 0x10250003=====\n"));
+               rtw_write8(padapter, 0x10250003, tmp8_clk_new);
+       }
+#endif
+_func_enter_;
+
+       x = rtw_read8(padapter, EE_9346CR);
+
+       x &= ~(_EEDI | _EEDO | _EESK | _EEM0);
+       x |= _EEM1 | _EECS;
+       rtw_write8(padapter, EE_9346CR, x);
+
+       shift_out_bits(padapter, EEPROM_EWEN_OPCODE, 5);
+
+       if(padapter->EepromAddressSize==8)      //CF+ and SDIO
+               shift_out_bits(padapter, 0, 6);
+       else                                                                    //USB
+               shift_out_bits(padapter, 0, 4);
+
+       standby( padapter);
+
+// Commented out by rcnjko, 2004.0
+//     // Erase this particular word.  Write the erase opcode and register
+//     // number in that order. The opcode is 3bits in length; reg is 6 bits long.
+//     shift_out_bits(Adapter, EEPROM_ERASE_OPCODE, 3);
+//     shift_out_bits(Adapter, reg, Adapter->EepromAddressSize);
+//
+//     if (wait_eeprom_cmd_done(Adapter ) == FALSE)
+//     {
+//             return;
+//     }
+
+
+       standby(padapter );
+
+       // write the new word to the EEPROM
+
+       // send the write opcode the EEPORM
+       shift_out_bits(padapter, EEPROM_WRITE_OPCODE, 3);
+
+       // select which word in the EEPROM that we are writing to.
+       shift_out_bits(padapter, reg, padapter->EepromAddressSize);
+
+       // write the data to the selected EEPROM word.
+       shift_out_bits(padapter, data, 16);
+
+       if (wait_eeprom_cmd_done(padapter ) == _FALSE)
+       {
+
+               goto exit;
+       }
+
+       standby(padapter );
+
+       shift_out_bits(padapter, EEPROM_EWDS_OPCODE, 5);
+       shift_out_bits(padapter, reg, 4);
+
+       eeprom_clean(padapter );
+exit:
+#ifdef CONFIG_RTL8712
+       if(tmp8_clk_new!=tmp8_clk_ori)
+               rtw_write8(padapter, 0x10250003, tmp8_clk_ori);
+       if(tmp8_new!=tmp8_ori)
+               rtw_write8(padapter, 0x102502f1, tmp8_ori);
+
+#endif
+_func_exit_;
+       return;
+}
+
+u16 eeprom_read16(_adapter * padapter, u16 reg) //ReadEEprom
+{
+
+       u16 x;
+       u16 data=0;
+#ifdef CONFIG_RTL8712
+       u8      tmp8_ori,tmp8_new,tmp8_clk_ori,tmp8_clk_new;
+       tmp8_ori= rtw_read8(padapter, 0x102502f1);
+       tmp8_new = tmp8_ori & 0xf7;
+       if(tmp8_ori != tmp8_new){
+               rtw_write8(padapter, 0x102502f1, tmp8_new);
+               RT_TRACE(_module_rtl871x_mp_ioctl_c_,_drv_err_,("====write 0x102502f1=====\n"));
+       }
+       tmp8_clk_ori=rtw_read8(padapter,0x10250003);
+       tmp8_clk_new=tmp8_clk_ori|0x20;
+       if(tmp8_clk_new!=tmp8_clk_ori){
+               RT_TRACE(_module_rtl871x_mp_ioctl_c_,_drv_err_,("====write 0x10250003=====\n"));
+               rtw_write8(padapter, 0x10250003, tmp8_clk_new);
+       }
+#endif
+_func_enter_;
+
+       if(padapter->bSurpriseRemoved==_TRUE){
+               RT_TRACE(_module_rtl871x_eeprom_c_,_drv_err_,("padapter->bSurpriseRemoved==_TRUE"));
+               goto out;
+       }
+       // select EEPROM, reset bits, set _EECS
+       x = rtw_read8(padapter, EE_9346CR);
+
+       if(padapter->bSurpriseRemoved==_TRUE){
+               RT_TRACE(_module_rtl871x_eeprom_c_,_drv_err_,("padapter->bSurpriseRemoved==_TRUE"));
+               goto out;
+       }
+
+       x &= ~(_EEDI | _EEDO | _EESK | _EEM0);
+       x |= _EEM1 | _EECS;
+       rtw_write8(padapter, EE_9346CR, (unsigned char)x);
+
+       // write the read opcode and register number in that order
+       // The opcode is 3bits in length, reg is 6 bits long
+       shift_out_bits(padapter, EEPROM_READ_OPCODE, 3);
+       shift_out_bits(padapter, reg, padapter->EepromAddressSize);
+
+       // Now read the data (16 bits) in from the selected EEPROM word
+       data = shift_in_bits(padapter);
+
+       eeprom_clean(padapter);
+out:
+#ifdef CONFIG_RTL8712
+       if(tmp8_clk_new!=tmp8_clk_ori)
+               rtw_write8(padapter, 0x10250003, tmp8_clk_ori);
+       if(tmp8_new!=tmp8_ori)
+               rtw_write8(padapter, 0x102502f1, tmp8_ori);
+
+#endif
+_func_exit_;
+       return data;
+
+
+}
+
+
+
+
+//From even offset
+void eeprom_read_sz(_adapter * padapter, u16 reg, u8* data, u32 sz)
+{
+
+       u16 x, data16;
+       u32 i;
+_func_enter_;
+       if(padapter->bSurpriseRemoved==_TRUE){
+               RT_TRACE(_module_rtl871x_eeprom_c_,_drv_err_,("padapter->bSurpriseRemoved==_TRUE"));
+               goto out;
+       }
+       // select EEPROM, reset bits, set _EECS
+       x = rtw_read8(padapter, EE_9346CR);
+
+       if(padapter->bSurpriseRemoved==_TRUE){
+               RT_TRACE(_module_rtl871x_eeprom_c_,_drv_err_,("padapter->bSurpriseRemoved==_TRUE"));
+               goto out;
+       }
+
+       x &= ~(_EEDI | _EEDO | _EESK | _EEM0);
+       x |= _EEM1 | _EECS;
+       rtw_write8(padapter, EE_9346CR, (unsigned char)x);
+
+       // write the read opcode and register number in that order
+       // The opcode is 3bits in length, reg is 6 bits long
+       shift_out_bits(padapter, EEPROM_READ_OPCODE, 3);
+       shift_out_bits(padapter, reg, padapter->EepromAddressSize);
+
+
+       for(i=0; i<sz; i+=2)
+       {
+               data16 = shift_in_bits(padapter);
+               data[i] = data16 & 0xff;
+               data[i+1] = data16 >>8;
+       }
+
+       eeprom_clean(padapter);
+out:
+_func_exit_;
+
+
+
+}
+
+
+//addr_off : address offset of the entry in eeprom (not the tuple number of eeprom (reg); that is addr_off !=reg)
+u8 eeprom_read(_adapter * padapter, u32 addr_off, u8 sz, u8* rbuf)
+{
+       u8 quotient, remainder, addr_2align_odd;
+       u16 reg, stmp , i=0, idx = 0;
+_func_enter_;
+       reg = (u16)(addr_off >> 1);
+       addr_2align_odd = (u8)(addr_off & 0x1);
+
+       if(addr_2align_odd) //read that start at high part: e.g  1,3,5,7,9,...
+       {
+               stmp = eeprom_read16(padapter, reg);
+               rbuf[idx++] = (u8) ((stmp>>8)&0xff); //return hogh-part of the short
+               reg++; sz--;
+       }
+
+       quotient = sz >> 1;
+       remainder = sz & 0x1;
+
+       for( i=0 ; i < quotient; i++)
+       {
+               stmp = eeprom_read16(padapter, reg+i);
+               rbuf[idx++] = (u8) (stmp&0xff);
+               rbuf[idx++] = (u8) ((stmp>>8)&0xff);
+       }
+
+       reg = reg+i;
+       if(remainder){ //end of read at lower part of short : 0,2,4,6,...
+               stmp = eeprom_read16(padapter, reg);
+               rbuf[idx] = (u8)(stmp & 0xff);
+       }
+_func_exit_;
+       return _TRUE;
+}
+
+
+
+VOID read_eeprom_content(_adapter *    padapter)
+{
+
+_func_enter_;
+
+
+_func_exit_;
+}
diff --git a/drivers/net/wireless/realtek/rtl8192cu/core/rtw_ieee80211.c b/drivers/net/wireless/realtek/rtl8192cu/core/rtw_ieee80211.c
new file mode 100644 (file)
index 0000000..cc0b97a
--- /dev/null
@@ -0,0 +1,1914 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#define _IEEE80211_C
+
+#include <drv_types.h>
+#include <ieee80211.h>
+#include <wifi.h>
+#include <osdep_service.h>
+#include <wlan_bssdef.h>
+
+u8 RTW_WPA_OUI_TYPE[] = { 0x00, 0x50, 0xf2, 1 };
+u16 RTW_WPA_VERSION = 1;
+u8 WPA_AUTH_KEY_MGMT_NONE[] = { 0x00, 0x50, 0xf2, 0 };
+u8 WPA_AUTH_KEY_MGMT_UNSPEC_802_1X[] = { 0x00, 0x50, 0xf2, 1 };
+u8 WPA_AUTH_KEY_MGMT_PSK_OVER_802_1X[] = { 0x00, 0x50, 0xf2, 2 };
+u8 WPA_CIPHER_SUITE_NONE[] = { 0x00, 0x50, 0xf2, 0 };
+u8 WPA_CIPHER_SUITE_WEP40[] = { 0x00, 0x50, 0xf2, 1 };
+u8 WPA_CIPHER_SUITE_TKIP[] = { 0x00, 0x50, 0xf2, 2 };
+u8 WPA_CIPHER_SUITE_WRAP[] = { 0x00, 0x50, 0xf2, 3 };
+u8 WPA_CIPHER_SUITE_CCMP[] = { 0x00, 0x50, 0xf2, 4 };
+u8 WPA_CIPHER_SUITE_WEP104[] = { 0x00, 0x50, 0xf2, 5 };
+
+u16 RSN_VERSION_BSD = 1;
+u8 RSN_AUTH_KEY_MGMT_UNSPEC_802_1X[] = { 0x00, 0x0f, 0xac, 1 };
+u8 RSN_AUTH_KEY_MGMT_PSK_OVER_802_1X[] = { 0x00, 0x0f, 0xac, 2 };
+u8 RSN_CIPHER_SUITE_NONE[] = { 0x00, 0x0f, 0xac, 0 };
+u8 RSN_CIPHER_SUITE_WEP40[] = { 0x00, 0x0f, 0xac, 1 };
+u8 RSN_CIPHER_SUITE_TKIP[] = { 0x00, 0x0f, 0xac, 2 };
+u8 RSN_CIPHER_SUITE_WRAP[] = { 0x00, 0x0f, 0xac, 3 };
+u8 RSN_CIPHER_SUITE_CCMP[] = { 0x00, 0x0f, 0xac, 4 };
+u8 RSN_CIPHER_SUITE_WEP104[] = { 0x00, 0x0f, 0xac, 5 };
+//-----------------------------------------------------------
+// for adhoc-master to generate ie and provide supported-rate to fw
+//-----------------------------------------------------------
+
+static u8      WIFI_CCKRATES[] =
+{(IEEE80211_CCK_RATE_1MB | IEEE80211_BASIC_RATE_MASK),
+ (IEEE80211_CCK_RATE_2MB | IEEE80211_BASIC_RATE_MASK),
+ (IEEE80211_CCK_RATE_5MB | IEEE80211_BASIC_RATE_MASK),
+ (IEEE80211_CCK_RATE_11MB | IEEE80211_BASIC_RATE_MASK)};
+
+static u8      WIFI_OFDMRATES[] =
+{(IEEE80211_OFDM_RATE_6MB),
+ (IEEE80211_OFDM_RATE_9MB),
+ (IEEE80211_OFDM_RATE_12MB),
+ (IEEE80211_OFDM_RATE_18MB),
+ (IEEE80211_OFDM_RATE_24MB),
+ IEEE80211_OFDM_RATE_36MB,
+ IEEE80211_OFDM_RATE_48MB,
+ IEEE80211_OFDM_RATE_54MB};
+
+
+int rtw_get_bit_value_from_ieee_value(u8 val)
+{
+       unsigned char dot11_rate_table[]={2,4,11,22,12,18,24,36,48,72,96,108,0}; // last element must be zero!!
+
+       int i=0;
+       while(dot11_rate_table[i] != 0) {
+               if (dot11_rate_table[i] == val)
+                       return BIT(i);
+               i++;
+       }
+       return 0;
+}
+
+uint   rtw_is_cckrates_included(u8 *rate)
+{
+               u32     i = 0;
+
+               while(rate[i]!=0)
+               {
+                       if  (  (((rate[i]) & 0x7f) == 2)        || (((rate[i]) & 0x7f) == 4) ||
+                       (((rate[i]) & 0x7f) == 11)  || (((rate[i]) & 0x7f) == 22) )
+                       return _TRUE;
+                       i++;
+               }
+
+               return _FALSE;
+}
+
+uint   rtw_is_cckratesonly_included(u8 *rate)
+{
+       u32 i = 0;
+
+
+       while(rate[i]!=0)
+       {
+                       if  (  (((rate[i]) & 0x7f) != 2) && (((rate[i]) & 0x7f) != 4) &&
+                               (((rate[i]) & 0x7f) != 11)  && (((rate[i]) & 0x7f) != 22) )
+
+                       return _FALSE;
+
+                       i++;
+       }
+
+       return _TRUE;
+
+}
+
+int rtw_check_network_type(unsigned char *rate, int ratelen, int channel)
+{
+       if (channel > 14)
+       {
+               if ((rtw_is_cckrates_included(rate)) == _TRUE)
+                       return WIRELESS_INVALID;
+               else
+                       return WIRELESS_11A;
+       }
+       else  // could be pure B, pure G, or B/G
+       {
+               if ((rtw_is_cckratesonly_included(rate)) == _TRUE)
+                       return WIRELESS_11B;
+               else if((rtw_is_cckrates_included(rate)) == _TRUE)
+                       return  WIRELESS_11BG;
+               else
+                       return WIRELESS_11G;
+       }
+
+}
+
+u8 *rtw_set_fixed_ie(unsigned char *pbuf, unsigned int len, unsigned char *source,
+                               unsigned int *frlen)
+{
+       _rtw_memcpy((void *)pbuf, (void *)source, len);
+       *frlen = *frlen + len;
+       return (pbuf + len);
+}
+
+// rtw_set_ie will update frame length
+u8 *rtw_set_ie
+(
+       u8 *pbuf,
+       sint index,
+       uint len,
+       u8 *source,
+       uint *frlen //frame length
+)
+{
+_func_enter_;
+       *pbuf = (u8)index;
+
+       *(pbuf + 1) = (u8)len;
+
+       if (len > 0)
+               _rtw_memcpy((void *)(pbuf + 2), (void *)source, len);
+
+       *frlen = *frlen + (len + 2);
+
+       return (pbuf + len + 2);
+_func_exit_;
+}
+
+inline u8 *rtw_set_ie_ch_switch(u8 *buf, u32 *buf_len, u8 ch_switch_mode,
+       u8 new_ch, u8 ch_switch_cnt)
+{
+       u8 ie_data[3];
+
+       ie_data[0] = ch_switch_mode;
+       ie_data[1] = new_ch;
+       ie_data[2] = ch_switch_cnt;
+       return rtw_set_ie(buf, WLAN_EID_CHANNEL_SWITCH,  3, ie_data, buf_len);
+}
+
+inline u8 secondary_ch_offset_to_hal_ch_offset(u8 ch_offset)
+{
+       if (ch_offset == SCN)
+               return HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+       else if(ch_offset == SCA)
+               return HAL_PRIME_CHNL_OFFSET_UPPER;
+       else if(ch_offset == SCB)
+               return HAL_PRIME_CHNL_OFFSET_LOWER;
+
+       return HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+}
+
+inline u8 hal_ch_offset_to_secondary_ch_offset(u8 ch_offset)
+{
+       if (ch_offset == HAL_PRIME_CHNL_OFFSET_DONT_CARE)
+               return SCN;
+       else if(ch_offset == HAL_PRIME_CHNL_OFFSET_LOWER)
+               return SCB;
+       else if(ch_offset == HAL_PRIME_CHNL_OFFSET_UPPER)
+               return SCA;
+
+       return SCN;
+}
+
+inline u8 *rtw_set_ie_secondary_ch_offset(u8 *buf, u32 *buf_len, u8 secondary_ch_offset)
+{
+       return rtw_set_ie(buf, WLAN_EID_SECONDARY_CHANNEL_OFFSET,  1, &secondary_ch_offset, buf_len);
+}
+
+inline u8 *rtw_set_ie_mesh_ch_switch_parm(u8 *buf, u32 *buf_len, u8 ttl,
+       u8 flags, u16 reason, u16 precedence)
+{
+       u8 ie_data[6];
+
+       ie_data[0] = ttl;
+       ie_data[1] = flags;
+       RTW_PUT_LE16((u8*)&ie_data[2], reason);
+       RTW_PUT_LE16((u8*)&ie_data[4], precedence);
+
+       return rtw_set_ie(buf, 0x118,  6, ie_data, buf_len);
+}
+
+/*----------------------------------------------------------------------------
+index: the information element id index, limit is the limit for search
+-----------------------------------------------------------------------------*/
+u8 *rtw_get_ie(u8 *pbuf, sint index, sint *len, sint limit)
+{
+       sint tmp,i;
+       u8 *p;
+_func_enter_;
+       if (limit < 1){
+               _func_exit_;
+               return NULL;
+       }
+
+       p = pbuf;
+       i = 0;
+       *len = 0;
+       while(1)
+       {
+               if (*p == index)
+               {
+                       *len = *(p + 1);
+                       return (p);
+               }
+               else
+               {
+                       tmp = *(p + 1);
+                       p += (tmp + 2);
+                       i += (tmp + 2);
+               }
+               if (i >= limit)
+                       break;
+       }
+_func_exit_;
+       return NULL;
+}
+
+/**
+ * rtw_get_ie_ex - Search specific IE from a series of IEs
+ * @in_ie: Address of IEs to search
+ * @in_len: Length limit from in_ie
+ * @eid: Element ID to match
+ * @oui: OUI to match
+ * @oui_len: OUI length
+ * @ie: If not NULL and the specific IE is found, the IE will be copied to the buf starting from the specific IE
+ * @ielen: If not NULL and the specific IE is found, will set to the length of the entire IE
+ *
+ * Returns: The address of the specific IE found, or NULL
+ */
+u8 *rtw_get_ie_ex(u8 *in_ie, uint in_len, u8 eid, u8 *oui, u8 oui_len, u8 *ie, uint *ielen)
+{
+       uint cnt;
+       u8 *target_ie = NULL;
+
+
+       if(ielen)
+               *ielen = 0;
+
+       if(!in_ie || in_len<=0)
+               return target_ie;
+
+       cnt = 0;
+
+       while(cnt<in_len)
+       {
+               if(eid == in_ie[cnt]
+                       && ( !oui || _rtw_memcmp(&in_ie[cnt+2], oui, oui_len) == _TRUE))
+               {
+                       target_ie = &in_ie[cnt];
+
+                       if(ie)
+                               _rtw_memcpy(ie, &in_ie[cnt], in_ie[cnt+1]+2);
+
+                       if(ielen)
+                               *ielen = in_ie[cnt+1]+2;
+
+                       break;
+               }
+               else
+               {
+                       cnt+=in_ie[cnt+1]+2; //goto next
+               }
+
+       }
+
+       return target_ie;
+}
+
+/**
+ * rtw_ies_remove_ie - Find matching IEs and remove
+ * @ies: Address of IEs to search
+ * @ies_len: Pointer of length of ies, will update to new length
+ * @offset: The offset to start scarch
+ * @eid: Element ID to match
+ * @oui: OUI to match
+ * @oui_len: OUI length
+ *
+ * Returns: _SUCCESS: ies is updated, _FAIL: not updated
+ */
+int rtw_ies_remove_ie(u8 *ies, uint *ies_len, uint offset, u8 eid, u8 *oui, u8 oui_len)
+{
+       int ret = _FAIL;
+       u8 *target_ie;
+       u32 target_ielen;
+       u8 *start;
+       uint search_len;
+
+       if(!ies || !ies_len || *ies_len <= offset)
+               goto exit;
+
+       start = ies + offset;
+       search_len = *ies_len - offset;
+
+       while (1) {
+               target_ie = rtw_get_ie_ex(start, search_len, eid, oui, oui_len, NULL, &target_ielen);
+               if (target_ie && target_ielen) {
+                       u8 buf[MAX_IE_SZ] = {0};
+                       u8 *remain_ies = target_ie + target_ielen;
+                       uint remain_len = search_len - (remain_ies - start);
+
+                       _rtw_memcpy(buf, remain_ies, remain_len);
+                       _rtw_memcpy(target_ie, buf, remain_len);
+                       *ies_len = *ies_len - target_ielen;
+                       ret = _SUCCESS;
+
+                       start = target_ie;
+                       search_len = remain_len;
+               } else {
+                       break;
+               }
+       }
+exit:
+       return ret;
+}
+
+void rtw_set_supported_rate(u8* SupportedRates, uint mode)
+{
+_func_enter_;
+
+       _rtw_memset(SupportedRates, 0, NDIS_802_11_LENGTH_RATES_EX);
+
+       switch (mode)
+       {
+               case WIRELESS_11B:
+                       _rtw_memcpy(SupportedRates, WIFI_CCKRATES, IEEE80211_CCK_RATE_LEN);
+                       break;
+
+               case WIRELESS_11G:
+               case WIRELESS_11A:
+               case WIRELESS_11_5N:
+               case WIRELESS_11A_5N://Todo: no basic rate for ofdm ?
+                       _rtw_memcpy(SupportedRates, WIFI_OFDMRATES, IEEE80211_NUM_OFDM_RATESLEN);
+                       break;
+
+               case WIRELESS_11BG:
+               case WIRELESS_11G_24N:
+               case WIRELESS_11_24N:
+               case WIRELESS_11BG_24N:
+                       _rtw_memcpy(SupportedRates, WIFI_CCKRATES, IEEE80211_CCK_RATE_LEN);
+                       _rtw_memcpy(SupportedRates + IEEE80211_CCK_RATE_LEN, WIFI_OFDMRATES, IEEE80211_NUM_OFDM_RATESLEN);
+                       break;
+
+       }
+_func_exit_;
+}
+
+uint   rtw_get_rateset_len(u8  *rateset)
+{
+       uint i = 0;
+_func_enter_;
+       while(1)
+       {
+               if ((rateset[i]) == 0)
+                       break;
+
+               if (i > 12)
+                       break;
+
+               i++;
+       }
+_func_exit_;
+       return i;
+}
+
+int rtw_generate_ie(struct registry_priv *pregistrypriv)
+{
+       u8      wireless_mode;
+       int     sz = 0, rateLen;
+       WLAN_BSSID_EX*  pdev_network = &pregistrypriv->dev_network;
+       u8*     ie = pdev_network->IEs;
+
+_func_enter_;
+
+       //timestamp will be inserted by hardware
+       sz += 8;
+       ie += sz;
+
+       //beacon interval : 2bytes
+       *(u16*)ie = cpu_to_le16((u16)pdev_network->Configuration.BeaconPeriod);//BCN_INTERVAL;
+       sz += 2;
+       ie += 2;
+
+       //capability info
+       *(u16*)ie = 0;
+
+       *(u16*)ie |= cpu_to_le16(cap_IBSS);
+
+       if(pregistrypriv->preamble == PREAMBLE_SHORT)
+               *(u16*)ie |= cpu_to_le16(cap_ShortPremble);
+
+       if (pdev_network->Privacy)
+               *(u16*)ie |= cpu_to_le16(cap_Privacy);
+
+       sz += 2;
+       ie += 2;
+
+       //SSID
+       ie = rtw_set_ie(ie, _SSID_IE_, pdev_network->Ssid.SsidLength, pdev_network->Ssid.Ssid, &sz);
+
+       //supported rates
+       if(pregistrypriv->wireless_mode == WIRELESS_11ABGN)
+       {
+               if(pdev_network->Configuration.DSConfig > 14)
+                       wireless_mode = WIRELESS_11A_5N;
+               else
+                       wireless_mode = WIRELESS_11BG_24N;
+       }
+       else
+       {
+               wireless_mode = pregistrypriv->wireless_mode;
+       }
+
+       rtw_set_supported_rate(pdev_network->SupportedRates, wireless_mode) ;
+
+       rateLen = rtw_get_rateset_len(pdev_network->SupportedRates);
+
+       if (rateLen > 8)
+       {
+               ie = rtw_set_ie(ie, _SUPPORTEDRATES_IE_, 8, pdev_network->SupportedRates, &sz);
+               //ie = rtw_set_ie(ie, _EXT_SUPPORTEDRATES_IE_, (rateLen - 8), (pdev_network->SupportedRates + 8), &sz);
+       }
+       else
+       {
+               ie = rtw_set_ie(ie, _SUPPORTEDRATES_IE_, rateLen, pdev_network->SupportedRates, &sz);
+       }
+
+       //DS parameter set
+       ie = rtw_set_ie(ie, _DSSET_IE_, 1, (u8 *)&(pdev_network->Configuration.DSConfig), &sz);
+
+
+       //IBSS Parameter Set
+
+       ie = rtw_set_ie(ie, _IBSS_PARA_IE_, 2, (u8 *)&(pdev_network->Configuration.ATIMWindow), &sz);
+
+       if (rateLen > 8)
+       {
+               ie = rtw_set_ie(ie, _EXT_SUPPORTEDRATES_IE_, (rateLen - 8), (pdev_network->SupportedRates + 8), &sz);
+       }
+
+
+       //HT Cap.
+       if(((pregistrypriv->wireless_mode&WIRELESS_11_5N)||(pregistrypriv->wireless_mode&WIRELESS_11_24N))
+               && (pregistrypriv->ht_enable==_TRUE))
+       {
+               //todo:
+       }
+
+       //pdev_network->IELength =  sz; //update IELength
+
+_func_exit_;
+
+       //return _SUCCESS;
+
+       return sz;
+
+}
+
+unsigned char *rtw_get_wpa_ie(unsigned char *pie, int *wpa_ie_len, int limit)
+{
+       int len;
+       u16 val16;
+       unsigned char wpa_oui_type[] = {0x00, 0x50, 0xf2, 0x01};
+       u8 *pbuf = pie;
+
+       while(1)
+       {
+               pbuf = rtw_get_ie(pbuf, _WPA_IE_ID_, &len, limit);
+
+               if (pbuf) {
+
+                       //check if oui matches...
+                       if (_rtw_memcmp((pbuf + 2), wpa_oui_type, sizeof (wpa_oui_type)) == _FALSE) {
+
+                               goto check_next_ie;
+                       }
+
+                       //check version...
+                       _rtw_memcpy((u8 *)&val16, (pbuf + 6), sizeof(val16));
+
+                       val16 = le16_to_cpu(val16);
+                       if (val16 != 0x0001)
+                               goto check_next_ie;
+
+                       *wpa_ie_len = *(pbuf + 1);
+
+                       return pbuf;
+               }
+               else {
+
+                       *wpa_ie_len = 0;
+                       return NULL;
+               }
+
+check_next_ie:
+
+               limit -= (2 + len);
+
+               if (limit <= 0)
+                       break;
+
+               pbuf += (2 + len);
+       }
+
+       *wpa_ie_len = 0;
+
+       return NULL;
+}
+
+unsigned char *rtw_get_wpa2_ie(unsigned char *pie, int *rsn_ie_len, int limit)
+{
+
+       return rtw_get_ie(pie, _WPA2_IE_ID_,rsn_ie_len, limit);
+
+}
+
+int rtw_get_wpa_cipher_suite(u8 *s)
+{
+       if (_rtw_memcmp(s, WPA_CIPHER_SUITE_NONE, WPA_SELECTOR_LEN) == _TRUE)
+               return WPA_CIPHER_NONE;
+       if (_rtw_memcmp(s, WPA_CIPHER_SUITE_WEP40, WPA_SELECTOR_LEN) == _TRUE)
+               return WPA_CIPHER_WEP40;
+       if (_rtw_memcmp(s, WPA_CIPHER_SUITE_TKIP, WPA_SELECTOR_LEN) == _TRUE)
+               return WPA_CIPHER_TKIP;
+       if (_rtw_memcmp(s, WPA_CIPHER_SUITE_CCMP, WPA_SELECTOR_LEN) == _TRUE)
+               return WPA_CIPHER_CCMP;
+       if (_rtw_memcmp(s, WPA_CIPHER_SUITE_WEP104, WPA_SELECTOR_LEN) == _TRUE)
+               return WPA_CIPHER_WEP104;
+
+       return 0;
+}
+
+int rtw_get_wpa2_cipher_suite(u8 *s)
+{
+       if (_rtw_memcmp(s, RSN_CIPHER_SUITE_NONE, RSN_SELECTOR_LEN) == _TRUE)
+               return WPA_CIPHER_NONE;
+       if (_rtw_memcmp(s, RSN_CIPHER_SUITE_WEP40, RSN_SELECTOR_LEN) == _TRUE)
+               return WPA_CIPHER_WEP40;
+       if (_rtw_memcmp(s, RSN_CIPHER_SUITE_TKIP, RSN_SELECTOR_LEN) == _TRUE)
+               return WPA_CIPHER_TKIP;
+       if (_rtw_memcmp(s, RSN_CIPHER_SUITE_CCMP, RSN_SELECTOR_LEN) == _TRUE)
+               return WPA_CIPHER_CCMP;
+       if (_rtw_memcmp(s, RSN_CIPHER_SUITE_WEP104, RSN_SELECTOR_LEN) == _TRUE)
+               return WPA_CIPHER_WEP104;
+
+       return 0;
+}
+
+
+int rtw_parse_wpa_ie(u8* wpa_ie, int wpa_ie_len, int *group_cipher, int *pairwise_cipher)
+{
+       int i, ret=_SUCCESS;
+       int left, count;
+       u8 *pos;
+
+       if (wpa_ie_len <= 0) {
+               /* No WPA IE - fail silently */
+               return _FAIL;
+       }
+
+
+       if ((*wpa_ie != _WPA_IE_ID_) || (*(wpa_ie+1) != (u8)(wpa_ie_len - 2)) ||
+          (_rtw_memcmp(wpa_ie+2, RTW_WPA_OUI_TYPE, WPA_SELECTOR_LEN) != _TRUE) )
+       {
+               return _FAIL;
+       }
+
+       pos = wpa_ie;
+
+       pos += 8;
+       left = wpa_ie_len - 8;
+
+
+       //group_cipher
+       if (left >= WPA_SELECTOR_LEN) {
+
+               *group_cipher = rtw_get_wpa_cipher_suite(pos);
+
+               pos += WPA_SELECTOR_LEN;
+               left -= WPA_SELECTOR_LEN;
+
+       }
+       else if (left > 0)
+       {
+               RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("%s: ie length mismatch, %u too much", __FUNCTION__, left));
+
+               return _FAIL;
+       }
+
+
+       //pairwise_cipher
+       if (left >= 2)
+       {
+                //count = le16_to_cpu(*(u16*)pos);
+               count = RTW_GET_LE16(pos);
+               pos += 2;
+               left -= 2;
+
+               if (count == 0 || left < count * WPA_SELECTOR_LEN) {
+                       RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("%s: ie count botch (pairwise), "
+                                               "count %u left %u", __FUNCTION__, count, left));
+                       return _FAIL;
+               }
+
+               for (i = 0; i < count; i++)
+               {
+                       *pairwise_cipher |= rtw_get_wpa_cipher_suite(pos);
+
+                       pos += WPA_SELECTOR_LEN;
+                       left -= WPA_SELECTOR_LEN;
+               }
+
+       }
+       else if (left == 1)
+       {
+               RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("%s: ie too short (for key mgmt)",   __FUNCTION__));
+               return _FAIL;
+       }
+
+
+       return ret;
+
+}
+
+int rtw_parse_wpa2_ie(u8* rsn_ie, int rsn_ie_len, int *group_cipher, int *pairwise_cipher)
+{
+       int i, ret=_SUCCESS;
+       int left, count;
+       u8 *pos;
+
+       if (rsn_ie_len <= 0) {
+               /* No RSN IE - fail silently */
+               return _FAIL;
+       }
+
+
+       if ((*rsn_ie!= _WPA2_IE_ID_) || (*(rsn_ie+1) != (u8)(rsn_ie_len - 2)))
+       {
+               return _FAIL;
+       }
+
+       pos = rsn_ie;
+       pos += 4;
+       left = rsn_ie_len - 4;
+
+       //group_cipher
+       if (left >= RSN_SELECTOR_LEN) {
+
+               *group_cipher = rtw_get_wpa2_cipher_suite(pos);
+
+               pos += RSN_SELECTOR_LEN;
+               left -= RSN_SELECTOR_LEN;
+
+       } else if (left > 0) {
+               RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("%s: ie length mismatch, %u too much", __FUNCTION__, left));
+               return _FAIL;
+       }
+
+       //pairwise_cipher
+       if (left >= 2)
+       {
+               //count = le16_to_cpu(*(u16*)pos);
+               count = RTW_GET_LE16(pos);
+               pos += 2;
+               left -= 2;
+
+               if (count == 0 || left < count * RSN_SELECTOR_LEN) {
+                       RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("%s: ie count botch (pairwise), "
+                                                "count %u left %u", __FUNCTION__, count, left));
+                       return _FAIL;
+               }
+
+               for (i = 0; i < count; i++)
+               {
+                       *pairwise_cipher |= rtw_get_wpa2_cipher_suite(pos);
+
+                       pos += RSN_SELECTOR_LEN;
+                       left -= RSN_SELECTOR_LEN;
+               }
+
+       }
+       else if (left == 1)
+       {
+               RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("%s: ie too short (for key mgmt)",  __FUNCTION__));
+
+               return _FAIL;
+       }
+
+
+       return ret;
+
+}
+
+int rtw_get_sec_ie(u8 *in_ie,uint in_len,u8 *rsn_ie,u16 *rsn_len,u8 *wpa_ie,u16 *wpa_len)
+{
+       u8 authmode, sec_idx, i;
+       u8 wpa_oui[4]={0x0,0x50,0xf2,0x01};
+       uint    cnt;
+
+_func_enter_;
+
+       //Search required WPA or WPA2 IE and copy to sec_ie[ ]
+
+       cnt = (_TIMESTAMP_ + _BEACON_ITERVAL_ + _CAPABILITY_);
+
+       sec_idx=0;
+
+       while(cnt<in_len)
+       {
+               authmode=in_ie[cnt];
+
+               if((authmode==_WPA_IE_ID_)&&(_rtw_memcmp(&in_ie[cnt+2], &wpa_oui[0],4)==_TRUE))
+               {
+                               RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("\n rtw_get_wpa_ie: sec_idx=%d in_ie[cnt+1]+2=%d\n",sec_idx,in_ie[cnt+1]+2));
+
+                               _rtw_memcpy(wpa_ie, &in_ie[cnt],in_ie[cnt+1]+2);
+
+                               for(i=0;i<(in_ie[cnt+1]+2);i=i+8){
+                                       RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("\n %2x,%2x,%2x,%2x,%2x,%2x,%2x,%2x\n",wpa_ie[i],wpa_ie[i+1],wpa_ie[i+2],wpa_ie[i+3],wpa_ie[i+4],wpa_ie[i+5],wpa_ie[i+6],wpa_ie[i+7]));
+                               }
+
+                               *wpa_len=in_ie[cnt+1]+2;
+                               cnt+=in_ie[cnt+1]+2;  //get next
+               }
+               else
+               {
+                       if(authmode==_WPA2_IE_ID_)
+                       {
+                               RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("\n get_rsn_ie: sec_idx=%d in_ie[cnt+1]+2=%d\n",sec_idx,in_ie[cnt+1]+2));
+
+                               _rtw_memcpy(rsn_ie, &in_ie[cnt],in_ie[cnt+1]+2);
+
+                               for(i=0;i<(in_ie[cnt+1]+2);i=i+8){
+                                       RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("\n %2x,%2x,%2x,%2x,%2x,%2x,%2x,%2x\n",rsn_ie[i],rsn_ie[i+1],rsn_ie[i+2],rsn_ie[i+3],rsn_ie[i+4],rsn_ie[i+5],rsn_ie[i+6],rsn_ie[i+7]));
+                               }
+
+                               *rsn_len=in_ie[cnt+1]+2;
+                               cnt+=in_ie[cnt+1]+2;  //get next
+                       }
+                       else
+                       {
+                               cnt+=in_ie[cnt+1]+2;   //get next
+                       }
+               }
+
+       }
+
+_func_exit_;
+
+       return (*rsn_len+*wpa_len);
+
+}
+
+u8 rtw_is_wps_ie(u8 *ie_ptr, uint *wps_ielen)
+{
+       u8 match = _FALSE;
+       u8 eid, wps_oui[4]={0x0,0x50,0xf2,0x04};
+
+       if(ie_ptr == NULL) return match;
+
+       eid = ie_ptr[0];
+
+       if((eid==_WPA_IE_ID_)&&(_rtw_memcmp(&ie_ptr[2], wps_oui, 4)==_TRUE))
+       {
+               //printk("==> found WPS_IE.....\n");
+               *wps_ielen = ie_ptr[1]+2;
+               match=_TRUE;
+       }
+       return match;
+}
+
+/**
+ * rtw_get_wps_ie - Search WPS IE from a series of IEs
+ * @in_ie: Address of IEs to search
+ * @in_len: Length limit from in_ie
+ * @wps_ie: If not NULL and WPS IE is found, WPS IE will be copied to the buf starting from wps_ie
+ * @wps_ielen: If not NULL and WPS IE is found, will set to the length of the entire WPS IE
+ *
+ * Returns: The address of the WPS IE found, or NULL
+ */
+u8 *rtw_get_wps_ie(u8 *in_ie, uint in_len, u8 *wps_ie, uint *wps_ielen)
+{
+       uint cnt;
+       u8 *wpsie_ptr=NULL;
+       u8 eid, wps_oui[4]={0x0,0x50,0xf2,0x04};
+
+       if(wps_ielen)
+               *wps_ielen = 0;
+
+       if(!in_ie || in_len<=0)
+               return wpsie_ptr;
+
+       cnt = 0;
+
+       while(cnt<in_len)
+       {
+               eid = in_ie[cnt];
+
+               if((eid==_WPA_IE_ID_)&&(_rtw_memcmp(&in_ie[cnt+2], wps_oui, 4)==_TRUE))
+               {
+                       wpsie_ptr = &in_ie[cnt];
+
+                       if(wps_ie)
+                               _rtw_memcpy(wps_ie, &in_ie[cnt], in_ie[cnt+1]+2);
+
+                       if(wps_ielen)
+                               *wps_ielen = in_ie[cnt+1]+2;
+
+                       cnt+=in_ie[cnt+1]+2;
+
+                       break;
+               }
+               else
+               {
+                       cnt+=in_ie[cnt+1]+2; //goto next
+               }
+
+       }
+
+       return wpsie_ptr;
+}
+
+/**
+ * rtw_get_wps_attr - Search a specific WPS attribute from a given WPS IE
+ * @wps_ie: Address of WPS IE to search
+ * @wps_ielen: Length limit from wps_ie
+ * @target_attr_id: The attribute ID of WPS attribute to search
+ * @buf_attr: If not NULL and the WPS attribute is found, WPS attribute will be copied to the buf starting from buf_attr
+ * @len_attr: If not NULL and the WPS attribute is found, will set to the length of the entire WPS attribute
+ *
+ * Returns: the address of the specific WPS attribute found, or NULL
+ */
+u8 *rtw_get_wps_attr(u8 *wps_ie, uint wps_ielen, u16 target_attr_id ,u8 *buf_attr, u32 *len_attr)
+{
+       u8 *attr_ptr = NULL;
+       u8 * target_attr_ptr = NULL;
+       u8 wps_oui[4]={0x00,0x50,0xF2,0x04};
+
+       if(len_attr)
+               *len_attr = 0;
+
+       if ( ( wps_ie[0] != _VENDOR_SPECIFIC_IE_ ) ||
+               ( _rtw_memcmp( wps_ie + 2, wps_oui , 4 ) != _TRUE ) )
+       {
+               return attr_ptr;
+       }
+
+       // 6 = 1(Element ID) + 1(Length) + 4(WPS OUI)
+       attr_ptr = wps_ie + 6; //goto first attr
+
+       while(attr_ptr - wps_ie < wps_ielen)
+       {
+               // 4 = 2(Attribute ID) + 2(Length)
+               u16 attr_id = RTW_GET_BE16(attr_ptr);
+               u16 attr_data_len = RTW_GET_BE16(attr_ptr + 2);
+               u16 attr_len = attr_data_len + 4;
+
+               //DBG_871X("%s attr_ptr:%p, id:%u, length:%u\n", __FUNCTION__, attr_ptr, attr_id, attr_data_len);
+               if( attr_id == target_attr_id )
+               {
+                       target_attr_ptr = attr_ptr;
+
+                       if(buf_attr)
+                               _rtw_memcpy(buf_attr, attr_ptr, attr_len);
+
+                       if(len_attr)
+                               *len_attr = attr_len;
+
+                       break;
+               }
+               else
+               {
+                       attr_ptr += attr_len; //goto next
+               }
+
+       }
+
+       return target_attr_ptr;
+}
+
+/**
+ * rtw_get_wps_attr_content - Search a specific WPS attribute content from a given WPS IE
+ * @wps_ie: Address of WPS IE to search
+ * @wps_ielen: Length limit from wps_ie
+ * @target_attr_id: The attribute ID of WPS attribute to search
+ * @buf_content: If not NULL and the WPS attribute is found, WPS attribute content will be copied to the buf starting from buf_content
+ * @len_content: If not NULL and the WPS attribute is found, will set to the length of the WPS attribute content
+ *
+ * Returns: the address of the specific WPS attribute content found, or NULL
+ */
+u8 *rtw_get_wps_attr_content(u8 *wps_ie, uint wps_ielen, u16 target_attr_id ,u8 *buf_content, uint *len_content)
+{
+       u8 *attr_ptr;
+       u32 attr_len;
+
+       if(len_content)
+               *len_content = 0;
+
+       attr_ptr = rtw_get_wps_attr(wps_ie, wps_ielen, target_attr_id, NULL, &attr_len);
+
+       if(attr_ptr && attr_len)
+       {
+               if(buf_content)
+                       _rtw_memcpy(buf_content, attr_ptr+4, attr_len-4);
+
+               if(len_content)
+                       *len_content = attr_len-4;
+
+               return attr_ptr+4;
+       }
+
+       return NULL;
+}
+
+static int rtw_ieee802_11_parse_vendor_specific(u8 *pos, uint elen,
+                                           struct rtw_ieee802_11_elems *elems,
+                                           int show_errors)
+{
+       unsigned int oui;
+
+       /* first 3 bytes in vendor specific information element are the IEEE
+        * OUI of the vendor. The following byte is used a vendor specific
+        * sub-type. */
+       if (elen < 4) {
+               if (show_errors) {
+                       DBG_871X("short vendor specific "
+                                  "information element ignored (len=%lu)\n",
+                                  (unsigned long) elen);
+               }
+               return -1;
+       }
+
+       oui = RTW_GET_BE24(pos);
+       switch (oui) {
+       case OUI_MICROSOFT:
+               /* Microsoft/Wi-Fi information elements are further typed and
+                * subtyped */
+               switch (pos[3]) {
+               case 1:
+                       /* Microsoft OUI (00:50:F2) with OUI Type 1:
+                        * real WPA information element */
+                       elems->wpa_ie = pos;
+                       elems->wpa_ie_len = elen;
+                       break;
+               case WME_OUI_TYPE: /* this is a Wi-Fi WME info. element */
+                       if (elen < 5) {
+                               DBG_871X("short WME "
+                                          "information element ignored "
+                                          "(len=%lu)\n",
+                                          (unsigned long) elen);
+                               return -1;
+                       }
+                       switch (pos[4]) {
+                       case WME_OUI_SUBTYPE_INFORMATION_ELEMENT:
+                       case WME_OUI_SUBTYPE_PARAMETER_ELEMENT:
+                               elems->wme = pos;
+                               elems->wme_len = elen;
+                               break;
+                       case WME_OUI_SUBTYPE_TSPEC_ELEMENT:
+                               elems->wme_tspec = pos;
+                               elems->wme_tspec_len = elen;
+                               break;
+                       default:
+                               DBG_871X("unknown WME "
+                                          "information element ignored "
+                                          "(subtype=%d len=%lu)\n",
+                                          pos[4], (unsigned long) elen);
+                               return -1;
+                       }
+                       break;
+               case 4:
+                       /* Wi-Fi Protected Setup (WPS) IE */
+                       elems->wps_ie = pos;
+                       elems->wps_ie_len = elen;
+                       break;
+               default:
+                       DBG_871X("Unknown Microsoft "
+                                  "information element ignored "
+                                  "(type=%d len=%lu)\n",
+                                  pos[3], (unsigned long) elen);
+                       return -1;
+               }
+               break;
+
+       case OUI_BROADCOM:
+               switch (pos[3]) {
+               case VENDOR_HT_CAPAB_OUI_TYPE:
+                       elems->vendor_ht_cap = pos;
+                       elems->vendor_ht_cap_len = elen;
+                       break;
+               default:
+                       DBG_871X("Unknown Broadcom "
+                                  "information element ignored "
+                                  "(type=%d len=%lu)\n",
+                                  pos[3], (unsigned long) elen);
+                       return -1;
+               }
+               break;
+
+       default:
+               DBG_871X("unknown vendor specific information "
+                          "element ignored (vendor OUI %02x:%02x:%02x "
+                          "len=%lu)\n",
+                          pos[0], pos[1], pos[2], (unsigned long) elen);
+               return -1;
+       }
+
+       return 0;
+
+}
+
+/**
+ * ieee802_11_parse_elems - Parse information elements in management frames
+ * @start: Pointer to the start of IEs
+ * @len: Length of IE buffer in octets
+ * @elems: Data structure for parsed elements
+ * @show_errors: Whether to show parsing errors in debug log
+ * Returns: Parsing result
+ */
+ParseRes rtw_ieee802_11_parse_elems(u8 *start, uint len,
+                               struct rtw_ieee802_11_elems *elems,
+                               int show_errors)
+{
+       uint left = len;
+       u8 *pos = start;
+       int unknown = 0;
+
+       _rtw_memset(elems, 0, sizeof(*elems));
+
+       while (left >= 2) {
+               u8 id, elen;
+
+               id = *pos++;
+               elen = *pos++;
+               left -= 2;
+
+               if (elen > left) {
+                       if (show_errors) {
+                               DBG_871X("IEEE 802.11 element "
+                                          "parse failed (id=%d elen=%d "
+                                          "left=%lu)\n",
+                                          id, elen, (unsigned long) left);
+                       }
+                       return ParseFailed;
+               }
+
+               switch (id) {
+               case WLAN_EID_SSID:
+                       elems->ssid = pos;
+                       elems->ssid_len = elen;
+                       break;
+               case WLAN_EID_SUPP_RATES:
+                       elems->supp_rates = pos;
+                       elems->supp_rates_len = elen;
+                       break;
+               case WLAN_EID_FH_PARAMS:
+                       elems->fh_params = pos;
+                       elems->fh_params_len = elen;
+                       break;
+               case WLAN_EID_DS_PARAMS:
+                       elems->ds_params = pos;
+                       elems->ds_params_len = elen;
+                       break;
+               case WLAN_EID_CF_PARAMS:
+                       elems->cf_params = pos;
+                       elems->cf_params_len = elen;
+                       break;
+               case WLAN_EID_TIM:
+                       elems->tim = pos;
+                       elems->tim_len = elen;
+                       break;
+               case WLAN_EID_IBSS_PARAMS:
+                       elems->ibss_params = pos;
+                       elems->ibss_params_len = elen;
+                       break;
+               case WLAN_EID_CHALLENGE:
+                       elems->challenge = pos;
+                       elems->challenge_len = elen;
+                       break;
+               case WLAN_EID_ERP_INFO:
+                       elems->erp_info = pos;
+                       elems->erp_info_len = elen;
+                       break;
+               case WLAN_EID_EXT_SUPP_RATES:
+                       elems->ext_supp_rates = pos;
+                       elems->ext_supp_rates_len = elen;
+                       break;
+               case WLAN_EID_VENDOR_SPECIFIC:
+                       if (rtw_ieee802_11_parse_vendor_specific(pos, elen,
+                                                            elems,
+                                                            show_errors))
+                               unknown++;
+                       break;
+               case WLAN_EID_RSN:
+                       elems->rsn_ie = pos;
+                       elems->rsn_ie_len = elen;
+                       break;
+               case WLAN_EID_PWR_CAPABILITY:
+                       elems->power_cap = pos;
+                       elems->power_cap_len = elen;
+                       break;
+               case WLAN_EID_SUPPORTED_CHANNELS:
+                       elems->supp_channels = pos;
+                       elems->supp_channels_len = elen;
+                       break;
+               case WLAN_EID_MOBILITY_DOMAIN:
+                       elems->mdie = pos;
+                       elems->mdie_len = elen;
+                       break;
+               case WLAN_EID_FAST_BSS_TRANSITION:
+                       elems->ftie = pos;
+                       elems->ftie_len = elen;
+                       break;
+               case WLAN_EID_TIMEOUT_INTERVAL:
+                       elems->timeout_int = pos;
+                       elems->timeout_int_len = elen;
+                       break;
+               case WLAN_EID_HT_CAP:
+                       elems->ht_capabilities = pos;
+                       elems->ht_capabilities_len = elen;
+                       break;
+               case WLAN_EID_HT_OPERATION:
+                       elems->ht_operation = pos;
+                       elems->ht_operation_len = elen;
+                       break;
+               default:
+                       unknown++;
+                       if (!show_errors)
+                               break;
+                       DBG_871X("IEEE 802.11 element parse "
+                                  "ignored unknown element (id=%d elen=%d)\n",
+                                  id, elen);
+                       break;
+               }
+
+               left -= elen;
+               pos += elen;
+       }
+
+       if (left)
+               return ParseFailed;
+
+       return unknown ? ParseUnknown : ParseOK;
+
+}
+
+static u8 key_char2num(u8 ch);
+static u8 key_char2num(u8 ch)
+{
+    if((ch>='0')&&(ch<='9'))
+        return ch - '0';
+    else if ((ch>='a')&&(ch<='f'))
+        return ch - 'a' + 10;
+    else if ((ch>='A')&&(ch<='F'))
+        return ch - 'A' + 10;
+    else
+        return 0xff;
+}
+
+u8 str_2char2num(u8 hch, u8 lch);
+u8 str_2char2num(u8 hch, u8 lch)
+{
+    return ((key_char2num(hch) * 10 ) + key_char2num(lch));
+}
+
+u8 key_2char2num(u8 hch, u8 lch);
+u8 key_2char2num(u8 hch, u8 lch)
+{
+    return ((key_char2num(hch) << 4) | key_char2num(lch));
+}
+
+u8 convert_ip_addr(u8 hch, u8 mch, u8 lch)
+{
+    return ((key_char2num(hch) * 100) + (key_char2num(mch) * 10 ) + key_char2num(lch));
+}
+
+extern char* rtw_initmac;
+void rtw_macaddr_cfg(u8 *mac_addr)
+{
+       u8 mac[ETH_ALEN];
+       if(mac_addr == NULL)    return;
+
+       if ( rtw_initmac )
+       {       //      Users specify the mac address
+               int jj,kk;
+
+               for( jj = 0, kk = 0; jj < ETH_ALEN; jj++, kk += 3 )
+               {
+                       mac[jj] = key_2char2num(rtw_initmac[kk], rtw_initmac[kk+ 1]);
+               }
+               _rtw_memcpy(mac_addr, mac, ETH_ALEN);
+       }
+       else
+       {       //      Use the mac address stored in the Efuse
+               _rtw_memcpy(mac, mac_addr, ETH_ALEN);
+       }
+
+       if (((mac[0]==0xff) &&(mac[1]==0xff) && (mac[2]==0xff) &&
+            (mac[3]==0xff) && (mac[4]==0xff) &&(mac[5]==0xff)) ||
+           ((mac[0]==0x0) && (mac[1]==0x0) && (mac[2]==0x0) &&
+            (mac[3]==0x0) && (mac[4]==0x0) &&(mac[5]==0x0)))
+       {
+               mac[0] = 0x00;
+               mac[1] = 0xe0;
+               mac[2] = 0x4c;
+               mac[3] = 0x87;
+               mac[4] = 0x00;
+               mac[5] = 0x00;
+               // use default mac addresss
+               _rtw_memcpy(mac_addr, mac, ETH_ALEN);
+               DBG_871X("MAC Address from efuse error, assign default one !!!\n");
+       }
+
+       DBG_871X("rtw_macaddr_cfg MAC Address  = "MAC_FMT"\n", MAC_ARG(mac_addr));
+}
+
+void dump_ies(u8 *buf, u32 buf_len) {
+       u8* pos = (u8*)buf;
+       u8 id, len;
+
+       while(pos-buf<=buf_len){
+               id = *pos;
+               len = *(pos+1);
+
+               DBG_871X("%s ID:%u, LEN:%u\n", __FUNCTION__, id, len);
+               #ifdef CONFIG_P2P
+               dump_p2p_ie(pos, len);
+               #endif
+               dump_wps_ie(pos, len);
+
+               pos+=(2+len);
+       }
+}
+
+void dump_wps_ie(u8 *ie, u32 ie_len) {
+       u8* pos = (u8*)ie;
+       u16 id;
+       u16 len;
+
+       u8 *wps_ie;
+       uint wps_ielen;
+
+       wps_ie = rtw_get_wps_ie(ie, ie_len, NULL, &wps_ielen);
+       if(wps_ie != ie || wps_ielen == 0)
+               return;
+
+       pos+=6;
+       while(pos-ie < ie_len){
+               id = RTW_GET_BE16(pos);
+               len = RTW_GET_BE16(pos + 2);
+
+               DBG_871X("%s ID:0x%04x, LEN:%u\n", __FUNCTION__, id, len);
+
+               pos+=(4+len);
+       }
+}
+
+#ifdef CONFIG_P2P
+/**
+ * rtw_get_p2p_merged_len - Get merged ie length from muitiple p2p ies.
+ * @in_ie: Pointer of the first p2p ie
+ * @in_len: Total len of muiltiple p2p ies
+ * Returns: Length of merged p2p ie length
+ */
+u32 rtw_get_p2p_merged_ies_len(u8 *in_ie, u32 in_len)
+{
+       PNDIS_802_11_VARIABLE_IEs       pIE;
+       u8 OUI[4] = { 0x50, 0x6f, 0x9a, 0x09 };
+       int i=0;
+       int j=0, len=0;
+
+       while( i < in_len)
+       {
+               pIE = (PNDIS_802_11_VARIABLE_IEs)(in_ie+ i);
+
+               if( pIE->ElementID == _VENDOR_SPECIFIC_IE_ && _rtw_memcmp(pIE->data, OUI, 4) )
+               {
+                       len += pIE->Length-4; // 4 is P2P OUI length, don't count it in this loop
+               }
+
+               i += (pIE->Length + 2);
+       }
+
+       return len + 4; // Append P2P OUI length at last.
+}
+
+/**
+ * rtw_p2p_merge_ies - Merge muitiple p2p ies into one
+ * @in_ie: Pointer of the first p2p ie
+ * @in_len: Total len of muiltiple p2p ies
+ * @merge_ie: Pointer of merged ie
+ * Returns: Length of merged p2p ie
+ */
+int rtw_p2p_merge_ies(u8 *in_ie, u32 in_len, u8 *merge_ie)
+{
+       PNDIS_802_11_VARIABLE_IEs       pIE;
+       u8 len = 0;
+       u8 OUI[4] = { 0x50, 0x6f, 0x9a, 0x09 };
+       u8 ELOUI[6] = { 0xDD, 0x00, 0x50, 0x6f, 0x9a, 0x09 };   //EID;Len;OUI, Len would copy at the end of function
+       int i=0;
+
+       if( merge_ie != NULL)
+       {
+               //Set first P2P OUI
+               _rtw_memcpy(merge_ie, ELOUI, 6);
+               merge_ie += 6;
+
+               while( i < in_len)
+               {
+                       pIE = (PNDIS_802_11_VARIABLE_IEs)(in_ie+ i);
+
+                       // Take out the rest of P2P OUIs
+                       if( pIE->ElementID == _VENDOR_SPECIFIC_IE_ && _rtw_memcmp(pIE->data, OUI, 4) )
+                       {
+                               _rtw_memcpy( merge_ie, pIE->data +4, pIE->Length -4);
+                               len += pIE->Length-4;
+                               merge_ie += pIE->Length-4;
+                       }
+
+                       i += (pIE->Length + 2);
+               }
+
+               return len + 4; // 4 is for P2P OUI
+
+       }
+
+       return 0;
+}
+
+void dump_p2p_ie(u8 *ie, u32 ie_len) {
+       u8* pos = (u8*)ie;
+       u8 id;
+       u16 len;
+
+       u8 *p2p_ie;
+       uint p2p_ielen;
+
+       p2p_ie = rtw_get_p2p_ie(ie, ie_len, NULL, &p2p_ielen);
+       if(p2p_ie != ie || p2p_ielen == 0)
+               return;
+
+       pos+=6;
+       while(pos-ie < ie_len){
+               id = *pos;
+               len = RTW_GET_LE16(pos+1);
+
+               DBG_871X("%s ID:%u, LEN:%u\n", __FUNCTION__, id, len);
+
+               pos+=(3+len);
+       }
+}
+
+/**
+ * rtw_get_p2p_ie - Search P2P IE from a series of IEs
+ * @in_ie: Address of IEs to search
+ * @in_len: Length limit from in_ie
+ * @p2p_ie: If not NULL and P2P IE is found, P2P IE will be copied to the buf starting from p2p_ie
+ * @p2p_ielen: If not NULL and P2P IE is found, will set to the length of the entire P2P IE
+ *
+ * Returns: The address of the P2P IE found, or NULL
+ */
+u8 *rtw_get_p2p_ie(u8 *in_ie, int in_len, u8 *p2p_ie, uint *p2p_ielen)
+{
+       uint cnt = 0;
+       u8 *p2p_ie_ptr;
+       u8 eid, p2p_oui[4]={0x50,0x6F,0x9A,0x09};
+
+       if ( p2p_ielen != NULL )
+               *p2p_ielen = 0;
+
+       while(cnt<in_len)
+       {
+               eid = in_ie[cnt];
+               if ((in_len < 0) || (cnt > MAX_IE_SZ)) {
+#ifdef PLATFORM_LINUX
+                       dump_stack();
+#endif
+                       return NULL;
+               }
+               if( ( eid == _VENDOR_SPECIFIC_IE_ ) && ( _rtw_memcmp( &in_ie[cnt+2], p2p_oui, 4) == _TRUE ) )
+               {
+                       p2p_ie_ptr = in_ie + cnt;
+
+                       if ( p2p_ie != NULL )
+                       {
+                               _rtw_memcpy( p2p_ie, &in_ie[ cnt ], in_ie[ cnt + 1 ] + 2 );
+                       }
+
+                       if ( p2p_ielen != NULL )
+                       {
+                               *p2p_ielen = in_ie[ cnt + 1 ] + 2;
+                       }
+
+                       return p2p_ie_ptr;
+
+                       break;
+               }
+               else
+               {
+                       cnt += in_ie[ cnt + 1 ] +2; //goto next
+               }
+
+       }
+
+       return NULL;
+
+}
+
+/**
+ * rtw_get_p2p_attr - Search a specific P2P attribute from a given P2P IE
+ * @p2p_ie: Address of P2P IE to search
+ * @p2p_ielen: Length limit from p2p_ie
+ * @target_attr_id: The attribute ID of P2P attribute to search
+ * @buf_attr: If not NULL and the P2P attribute is found, P2P attribute will be copied to the buf starting from buf_attr
+ * @len_attr: If not NULL and the P2P attribute is found, will set to the length of the entire P2P attribute
+ *
+ * Returns: the address of the specific WPS attribute found, or NULL
+ */
+u8 *rtw_get_p2p_attr(u8 *p2p_ie, uint p2p_ielen, u8 target_attr_id ,u8 *buf_attr, u32 *len_attr)
+{
+       u8 *attr_ptr = NULL;
+       u8 *target_attr_ptr = NULL;
+       u8 p2p_oui[4]={0x50,0x6F,0x9A,0x09};
+
+       if(len_attr)
+               *len_attr = 0;
+
+       if ( !p2p_ie || ( p2p_ie[0] != _VENDOR_SPECIFIC_IE_ ) ||
+               ( _rtw_memcmp( p2p_ie + 2, p2p_oui , 4 ) != _TRUE ) )
+       {
+               return attr_ptr;
+       }
+
+       // 6 = 1(Element ID) + 1(Length) + 3 (OUI) + 1(OUI Type)
+       attr_ptr = p2p_ie + 6; //goto first attr
+
+       while(attr_ptr - p2p_ie < p2p_ielen)
+       {
+               // 3 = 1(Attribute ID) + 2(Length)
+               u8 attr_id = *attr_ptr;
+               u16 attr_data_len = RTW_GET_LE16(attr_ptr + 1);
+               u16 attr_len = attr_data_len + 3;
+
+               //DBG_871X("%s attr_ptr:%p, id:%u, length:%u\n", __FUNCTION__, attr_ptr, attr_id, attr_data_len);
+               if( attr_id == target_attr_id )
+               {
+                       target_attr_ptr = attr_ptr;
+
+                       if(buf_attr)
+                               _rtw_memcpy(buf_attr, attr_ptr, attr_len);
+
+                       if(len_attr)
+                               *len_attr = attr_len;
+
+                       break;
+               }
+               else
+               {
+                       attr_ptr += attr_len; //goto next
+               }
+
+       }
+
+       return target_attr_ptr;
+}
+
+/**
+ * rtw_get_p2p_attr_content - Search a specific P2P attribute content from a given P2P IE
+ * @p2p_ie: Address of P2P IE to search
+ * @p2p_ielen: Length limit from p2p_ie
+ * @target_attr_id: The attribute ID of P2P attribute to search
+ * @buf_content: If not NULL and the P2P attribute is found, P2P attribute content will be copied to the buf starting from buf_content
+ * @len_content: If not NULL and the P2P attribute is found, will set to the length of the P2P attribute content
+ *
+ * Returns: the address of the specific P2P attribute content found, or NULL
+ */
+u8 *rtw_get_p2p_attr_content(u8 *p2p_ie, uint p2p_ielen, u8 target_attr_id ,u8 *buf_content, uint *len_content)
+{
+       u8 *attr_ptr;
+       u32 attr_len;
+
+       if(len_content)
+               *len_content = 0;
+
+       attr_ptr = rtw_get_p2p_attr(p2p_ie, p2p_ielen, target_attr_id, NULL, &attr_len);
+
+       if(attr_ptr && attr_len)
+       {
+               if(buf_content)
+                       _rtw_memcpy(buf_content, attr_ptr+3, attr_len-3);
+
+               if(len_content)
+                       *len_content = attr_len-3;
+
+               return attr_ptr+3;
+       }
+
+       return NULL;
+}
+
+u32 rtw_set_p2p_attr_content(u8 *pbuf, u8 attr_id, u16 attr_len, u8 *pdata_attr)
+{
+       u32 a_len;
+
+       *pbuf = attr_id;
+
+       //*(u16*)(pbuf + 1) = cpu_to_le16(attr_len);
+       RTW_PUT_LE16(pbuf + 1, attr_len);
+
+       if(pdata_attr)
+               _rtw_memcpy(pbuf + 3, pdata_attr, attr_len);
+
+       a_len = attr_len + 3;
+
+       return a_len;
+}
+
+static uint rtw_p2p_attr_remove(u8 *ie, uint ielen_ori, u8 attr_id)
+{
+       u8 *target_attr;
+       u32 target_attr_len;
+       uint ielen = ielen_ori;
+       int index=0;
+
+       while(1) {
+               target_attr=rtw_get_p2p_attr(ie, ielen, attr_id, NULL, &target_attr_len);
+               if(target_attr && target_attr_len)
+               {
+                       u8 *next_attr = target_attr+target_attr_len;
+                       uint remain_len = ielen-(next_attr-ie);
+                       //dump_ies(ie, ielen);
+                       #if 0
+                       DBG_871X("[%d] ie:%p, ielen:%u\n"
+                               "target_attr:%p, target_attr_len:%u\n"
+                               "next_attr:%p, remain_len:%u\n"
+                               , index++
+                               , ie, ielen
+                               , target_attr, target_attr_len
+                               , next_attr, remain_len
+                       );
+                       #endif
+
+                       _rtw_memset(target_attr, 0, target_attr_len);
+                       _rtw_memcpy(target_attr, next_attr, remain_len);
+                       _rtw_memset(target_attr+remain_len, 0, target_attr_len);
+                       *(ie+1) -= target_attr_len;
+                       ielen-=target_attr_len;
+               }
+               else
+               {
+                       //if(index>0)
+                       //      dump_ies(ie, ielen);
+                       break;
+               }
+       }
+
+       return ielen;
+}
+
+void rtw_WLAN_BSSID_EX_remove_p2p_attr(WLAN_BSSID_EX *bss_ex, u8 attr_id)
+{
+       u8 *p2p_ie;
+       uint p2p_ielen, p2p_ielen_ori;
+       int cnt;
+
+       if( (p2p_ie=rtw_get_p2p_ie(bss_ex->IEs+_FIXED_IE_LENGTH_, bss_ex->IELength-_FIXED_IE_LENGTH_, NULL, &p2p_ielen_ori)) )
+       {
+               #if 0
+               if(rtw_get_p2p_attr(p2p_ie, p2p_ielen_ori, attr_id, NULL, NULL)) {
+                       DBG_871X("rtw_get_p2p_attr: GOT P2P_ATTR:%u!!!!!!!!\n", attr_id);
+                       dump_ies(bss_ex->IEs+_FIXED_IE_LENGTH_, bss_ex->IELength-_FIXED_IE_LENGTH_);
+               }
+               #endif
+
+               p2p_ielen=rtw_p2p_attr_remove(p2p_ie, p2p_ielen_ori, attr_id);
+               if(p2p_ielen != p2p_ielen_ori) {
+
+                       u8 *next_ie_ori = p2p_ie+p2p_ielen_ori;
+                       u8 *next_ie = p2p_ie+p2p_ielen;
+                       uint remain_len = bss_ex->IELength-(next_ie_ori-bss_ex->IEs);
+
+                       _rtw_memcpy(next_ie, next_ie_ori, remain_len);
+                       _rtw_memset(next_ie+remain_len, 0, p2p_ielen_ori-p2p_ielen);
+                       bss_ex->IELength -= p2p_ielen_ori-p2p_ielen;
+
+                       #if 0
+                       DBG_871X("remove P2P_ATTR:%u!\n", attr_id);
+                       dump_ies(bss_ex->IEs+_FIXED_IE_LENGTH_, bss_ex->IELength-_FIXED_IE_LENGTH_);
+                       #endif
+               }
+       }
+}
+
+#endif //CONFIG_P2P
+
+#ifdef CONFIG_WFD
+int rtw_get_wfd_ie(u8 *in_ie, int in_len, u8 *wfd_ie, uint *wfd_ielen)
+{
+       int match;
+       uint cnt = 0;
+       u8 eid, wfd_oui[4]={0x50,0x6F,0x9A,0x0A};
+
+
+       match=_FALSE;
+
+       if ( in_len < 0 )
+       {
+               return match;
+       }
+
+       while(cnt<in_len)
+       {
+               eid = in_ie[cnt];
+
+               if( ( eid == _VENDOR_SPECIFIC_IE_ ) && ( _rtw_memcmp( &in_ie[cnt+2], wfd_oui, 4) == _TRUE ) )
+               {
+                       if ( wfd_ie != NULL )
+                       {
+                               _rtw_memcpy( wfd_ie, &in_ie[ cnt ], in_ie[ cnt + 1 ] + 2 );
+
+                       }
+                       else
+                       {
+                               if ( wfd_ielen != NULL )
+                               {
+                                       *wfd_ielen = 0;
+                               }
+                       }
+
+                       if ( wfd_ielen != NULL )
+                       {
+                               *wfd_ielen = in_ie[ cnt + 1 ] + 2;
+                       }
+
+                       cnt += in_ie[ cnt + 1 ] + 2;
+
+                       match = _TRUE;
+                       break;
+               }
+               else
+               {
+                       cnt += in_ie[ cnt + 1 ] +2; //goto next
+               }
+
+       }
+
+       if ( match == _TRUE )
+       {
+               match = cnt;
+       }
+
+       return match;
+
+}
+
+//     attr_content: The output buffer, contains the "body field" of WFD attribute.
+//     attr_contentlen: The data length of the "body field" of WFD attribute.
+int rtw_get_wfd_attr_content(u8 *wfd_ie, uint wfd_ielen, u8 target_attr_id ,u8 *attr_content, uint *attr_contentlen)
+{
+       int match;
+       uint cnt = 0;
+       u8 attr_id, wfd_oui[4]={0x50,0x6F,0x9A,0x0A};
+
+
+       match=_FALSE;
+
+       if ( ( wfd_ie[ 0 ] != _VENDOR_SPECIFIC_IE_ ) ||
+               ( _rtw_memcmp( wfd_ie + 2, wfd_oui , 4 ) != _TRUE ) )
+       {
+               return( match );
+       }
+
+       //      1 ( WFD IE ) + 1 ( Length ) + 3 ( OUI ) + 1 ( OUI Type )
+       cnt = 6;
+       while( cnt < wfd_ielen )
+       {
+               u16 attrlen = RTW_GET_BE16(wfd_ie + cnt + 1);
+
+               attr_id = wfd_ie[cnt];
+               if( attr_id == target_attr_id )
+               {
+                       //      3 -> 1 byte for attribute ID field, 2 bytes for length field
+                       if(attr_content)
+                               _rtw_memcpy( attr_content, &wfd_ie[ cnt + 3 ], attrlen );
+
+                       if(attr_contentlen)
+                               *attr_contentlen = attrlen;
+
+                       cnt += attrlen + 3;
+
+                       match = _TRUE;
+                       break;
+               }
+               else
+               {
+                       cnt += attrlen + 3; //goto next
+               }
+
+       }
+
+       return match;
+
+}
+#endif // CONFIG_WFD
+
+//Baron adds to avoid FreeBSD warning
+int ieee80211_is_empty_essid(const char *essid, int essid_len)
+{
+       /* Single white space is for Linksys APs */
+       if (essid_len == 1 && essid[0] == ' ')
+               return 1;
+
+       /* Otherwise, if the entire essid is 0, we assume it is hidden */
+       while (essid_len) {
+               essid_len--;
+               if (essid[essid_len] != '\0')
+                       return 0;
+       }
+
+       return 1;
+}
+
+int ieee80211_get_hdrlen(u16 fc)
+{
+       int hdrlen = 24;
+
+       switch (WLAN_FC_GET_TYPE(fc)) {
+       case RTW_IEEE80211_FTYPE_DATA:
+               if (fc & RTW_IEEE80211_STYPE_QOS_DATA)
+                       hdrlen += 2;
+               if ((fc & RTW_IEEE80211_FCTL_FROMDS) && (fc & RTW_IEEE80211_FCTL_TODS))
+                       hdrlen += 6; /* Addr4 */
+               break;
+       case RTW_IEEE80211_FTYPE_CTL:
+               switch (WLAN_FC_GET_STYPE(fc)) {
+               case RTW_IEEE80211_STYPE_CTS:
+               case RTW_IEEE80211_STYPE_ACK:
+                       hdrlen = 10;
+                       break;
+               default:
+                       hdrlen = 16;
+                       break;
+               }
+               break;
+       }
+
+       return hdrlen;
+}
+
+//show MCS rate, unit: 100Kbps
+u16 rtw_mcs_rate(u8 rf_type, u8 bw_40MHz, u8 short_GI_20, u8 short_GI_40, unsigned char * MCS_rate)
+{
+       u16 max_rate = 0;
+
+       if(rf_type == RF_1T1R)
+       {
+               if(MCS_rate[0] & BIT(7))
+                       max_rate = (bw_40MHz) ? ((short_GI_40)?1500:1350):((short_GI_20)?722:650);
+               else if(MCS_rate[0] & BIT(6))
+                       max_rate = (bw_40MHz) ? ((short_GI_40)?1350:1215):((short_GI_20)?650:585);
+               else if(MCS_rate[0] & BIT(5))
+                       max_rate = (bw_40MHz) ? ((short_GI_40)?1200:1080):((short_GI_20)?578:520);
+               else if(MCS_rate[0] & BIT(4))
+                       max_rate = (bw_40MHz) ? ((short_GI_40)?900:810):((short_GI_20)?433:390);
+               else if(MCS_rate[0] & BIT(3))
+                       max_rate = (bw_40MHz) ? ((short_GI_40)?600:540):((short_GI_20)?289:260);
+               else if(MCS_rate[0] & BIT(2))
+                       max_rate = (bw_40MHz) ? ((short_GI_40)?450:405):((short_GI_20)?217:195);
+               else if(MCS_rate[0] & BIT(1))
+                       max_rate = (bw_40MHz) ? ((short_GI_40)?300:270):((short_GI_20)?144:130);
+               else if(MCS_rate[0] & BIT(0))
+                       max_rate = (bw_40MHz) ? ((short_GI_40)?150:135):((short_GI_20)?72:65);
+       }
+       else
+       {
+               if(MCS_rate[1])
+               {
+                       if(MCS_rate[1] & BIT(7))
+                               max_rate = (bw_40MHz) ? ((short_GI_40)?3000:2700):((short_GI_20)?1444:1300);
+                       else if(MCS_rate[1] & BIT(6))
+                               max_rate = (bw_40MHz) ? ((short_GI_40)?2700:2430):((short_GI_20)?1300:1170);
+                       else if(MCS_rate[1] & BIT(5))
+                               max_rate = (bw_40MHz) ? ((short_GI_40)?2400:2160):((short_GI_20)?1156:1040);
+                       else if(MCS_rate[1] & BIT(4))
+                               max_rate = (bw_40MHz) ? ((short_GI_40)?1800:1620):((short_GI_20)?867:780);
+                       else if(MCS_rate[1] & BIT(3))
+                               max_rate = (bw_40MHz) ? ((short_GI_40)?1200:1080):((short_GI_20)?578:520);
+                       else if(MCS_rate[1] & BIT(2))
+                               max_rate = (bw_40MHz) ? ((short_GI_40)?900:810):((short_GI_20)?433:390);
+                       else if(MCS_rate[1] & BIT(1))
+                               max_rate = (bw_40MHz) ? ((short_GI_40)?600:540):((short_GI_20)?289:260);
+                       else if(MCS_rate[1] & BIT(0))
+                               max_rate = (bw_40MHz) ? ((short_GI_40)?300:270):((short_GI_20)?144:130);
+               }
+               else
+               {
+                       if(MCS_rate[0] & BIT(7))
+                               max_rate = (bw_40MHz) ? ((short_GI_40)?1500:1350):((short_GI_20)?722:650);
+                       else if(MCS_rate[0] & BIT(6))
+                               max_rate = (bw_40MHz) ? ((short_GI_40)?1350:1215):((short_GI_20)?650:585);
+                       else if(MCS_rate[0] & BIT(5))
+                               max_rate = (bw_40MHz) ? ((short_GI_40)?1200:1080):((short_GI_20)?578:520);
+                       else if(MCS_rate[0] & BIT(4))
+                               max_rate = (bw_40MHz) ? ((short_GI_40)?900:810):((short_GI_20)?433:390);
+                       else if(MCS_rate[0] & BIT(3))
+                               max_rate = (bw_40MHz) ? ((short_GI_40)?600:540):((short_GI_20)?289:260);
+                       else if(MCS_rate[0] & BIT(2))
+                               max_rate = (bw_40MHz) ? ((short_GI_40)?450:405):((short_GI_20)?217:195);
+                       else if(MCS_rate[0] & BIT(1))
+                               max_rate = (bw_40MHz) ? ((short_GI_40)?300:270):((short_GI_20)?144:130);
+                       else if(MCS_rate[0] & BIT(0))
+                               max_rate = (bw_40MHz) ? ((short_GI_40)?150:135):((short_GI_20)?72:65);
+               }
+       }
+       return max_rate;
+}
+
+int rtw_action_frame_parse(const u8 *frame, u32 frame_len, u8* category, u8 *action)
+{
+       const u8 *frame_body = frame + sizeof(struct rtw_ieee80211_hdr_3addr);
+       u16 fc;
+       u8 c, a;
+
+       fc = le16_to_cpu(((struct rtw_ieee80211_hdr_3addr *)frame)->frame_ctl);
+
+       if ((fc & (RTW_IEEE80211_FCTL_FTYPE|RTW_IEEE80211_FCTL_STYPE))
+               != (RTW_IEEE80211_FTYPE_MGMT|RTW_IEEE80211_STYPE_ACTION)
+       )
+       {
+               return _FALSE;
+       }
+
+       c = frame_body[0];
+
+       switch(c) {
+       case RTW_WLAN_CATEGORY_P2P: /* vendor-specific */
+               break;
+       default:
+               a = frame_body[1];
+       }
+
+       if (category)
+               *category = c;
+       if (action)
+               *action = a;
+
+       return _TRUE;
+}
+
+static const char *_action_public_str[] = {
+       "ACT_PUB_BSSCOEXIST",
+       "ACT_PUB_DSE_ENABLE",
+       "ACT_PUB_DSE_DEENABLE",
+       "ACT_PUB_DSE_REG_LOCATION",
+       "ACT_PUB_EXT_CHL_SWITCH",
+       "ACT_PUB_DSE_MSR_REQ",
+       "ACT_PUB_DSE_MSR_RPRT",
+       "ACT_PUB_MP",
+       "ACT_PUB_DSE_PWR_CONSTRAINT",
+       "ACT_PUB_VENDOR",
+       "ACT_PUB_GAS_INITIAL_REQ",
+       "ACT_PUB_GAS_INITIAL_RSP",
+       "ACT_PUB_GAS_COMEBACK_REQ",
+       "ACT_PUB_GAS_COMEBACK_RSP",
+       "ACT_PUB_TDLS_DISCOVERY_RSP",
+       "ACT_PUB_LOCATION_TRACK",
+       "ACT_PUB_RSVD",
+};
+
+const char *action_public_str(u8 action)
+{
+       action = (action >= ACT_PUBLIC_MAX) ? ACT_PUBLIC_MAX : action;
+       return _action_public_str[action];
+}
diff --git a/drivers/net/wireless/realtek/rtl8192cu/core/rtw_io.c b/drivers/net/wireless/realtek/rtl8192cu/core/rtw_io.c
new file mode 100644 (file)
index 0000000..3e8ee42
--- /dev/null
@@ -0,0 +1,462 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+/*
+
+The purpose of rtw_io.c
+
+a. provides the API
+
+b. provides the protocol engine
+
+c. provides the software interface between caller and the hardware interface
+
+
+Compiler Flag Option:
+
+1. CONFIG_SDIO_HCI:
+    a. USE_SYNC_IRP:  Only sync operations are provided.
+    b. USE_ASYNC_IRP:Both sync/async operations are provided.
+
+2. CONFIG_USB_HCI:
+   a. USE_ASYNC_IRP: Both sync/async operations are provided.
+
+3. CONFIG_CFIO_HCI:
+   b. USE_SYNC_IRP: Only sync operations are provided.
+
+
+Only sync read/rtw_write_mem operations are provided.
+
+jackson@realtek.com.tw
+
+*/
+
+#define _RTW_IO_C_
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <rtw_io.h>
+#include <osdep_intf.h>
+
+#if defined (PLATFORM_LINUX) && defined (PLATFORM_WINDOWS)
+#error "Shall be Linux or Windows, but not both!\n"
+#endif
+
+#ifdef CONFIG_SDIO_HCI
+#include <sdio_ops.h>
+#endif
+
+#ifdef CONFIG_USB_HCI
+#include <usb_ops.h>
+#endif
+
+#ifdef CONFIG_PCI_HCI
+#include <pci_ops.h>
+#endif
+
+
+u8 _rtw_read8(_adapter *adapter, u32 addr)
+{
+       u8 r_val;
+       //struct        io_queue        *pio_queue = (struct io_queue *)adapter->pio_queue;
+       struct io_priv *pio_priv = &adapter->iopriv;
+       struct  intf_hdl                *pintfhdl = &(pio_priv->intf);
+       u8 (*_read8)(struct intf_hdl *pintfhdl, u32 addr);
+       _func_enter_;
+       _read8 = pintfhdl->io_ops._read8;
+
+       r_val = _read8(pintfhdl, addr);
+       _func_exit_;
+       return r_val;
+}
+
+u16 _rtw_read16(_adapter *adapter, u32 addr)
+{
+       u16 r_val;
+       //struct        io_queue        *pio_queue = (struct io_queue *)adapter->pio_queue;
+       struct io_priv *pio_priv = &adapter->iopriv;
+       struct  intf_hdl                *pintfhdl = &(pio_priv->intf);
+       u16     (*_read16)(struct intf_hdl *pintfhdl, u32 addr);
+       _func_enter_;
+       _read16 = pintfhdl->io_ops._read16;
+
+       r_val = _read16(pintfhdl, addr);
+       _func_exit_;
+       return r_val;
+}
+
+u32 _rtw_read32(_adapter *adapter, u32 addr)
+{
+       u32 r_val;
+       //struct        io_queue        *pio_queue = (struct io_queue *)adapter->pio_queue;
+       struct io_priv *pio_priv = &adapter->iopriv;
+       struct  intf_hdl                *pintfhdl = &(pio_priv->intf);
+       u32     (*_read32)(struct intf_hdl *pintfhdl, u32 addr);
+       _func_enter_;
+       _read32 = pintfhdl->io_ops._read32;
+
+       r_val = _read32(pintfhdl, addr);
+       _func_exit_;
+       return r_val;
+
+}
+
+int _rtw_write8(_adapter *adapter, u32 addr, u8 val)
+{
+       //struct        io_queue        *pio_queue = (struct io_queue *)adapter->pio_queue;
+       struct io_priv *pio_priv = &adapter->iopriv;
+       struct  intf_hdl                *pintfhdl = &(pio_priv->intf);
+       int (*_write8)(struct intf_hdl *pintfhdl, u32 addr, u8 val);
+       int ret;
+       _func_enter_;
+       _write8 = pintfhdl->io_ops._write8;
+
+       ret = _write8(pintfhdl, addr, val);
+       _func_exit_;
+
+       return RTW_STATUS_CODE(ret);
+}
+int _rtw_write16(_adapter *adapter, u32 addr, u16 val)
+{
+       //struct        io_queue        *pio_queue = (struct io_queue *)adapter->pio_queue;
+       struct io_priv *pio_priv = &adapter->iopriv;
+       struct  intf_hdl                *pintfhdl = &(pio_priv->intf);
+       int (*_write16)(struct intf_hdl *pintfhdl, u32 addr, u16 val);
+       int ret;
+       _func_enter_;
+       _write16 = pintfhdl->io_ops._write16;
+
+       ret = _write16(pintfhdl, addr, val);
+       _func_exit_;
+
+       return RTW_STATUS_CODE(ret);
+}
+int _rtw_write32(_adapter *adapter, u32 addr, u32 val)
+{
+       //struct        io_queue        *pio_queue = (struct io_queue *)adapter->pio_queue;
+       struct io_priv *pio_priv = &adapter->iopriv;
+       struct  intf_hdl                *pintfhdl = &(pio_priv->intf);
+       int (*_write32)(struct intf_hdl *pintfhdl, u32 addr, u32 val);
+       int ret;
+       _func_enter_;
+       _write32 = pintfhdl->io_ops._write32;
+
+       ret = _write32(pintfhdl, addr, val);
+       _func_exit_;
+
+       return RTW_STATUS_CODE(ret);
+}
+
+int _rtw_writeN(_adapter *adapter, u32 addr ,u32 length , u8 *pdata)
+{
+       //struct        io_queue        *pio_queue = (struct io_queue *)adapter->pio_queue;
+       struct io_priv *pio_priv = &adapter->iopriv;
+        struct intf_hdl        *pintfhdl = (struct intf_hdl*)(&(pio_priv->intf));
+       int (*_writeN)(struct intf_hdl *pintfhdl, u32 addr,u32 length, u8 *pdata);
+       int ret;
+       _func_enter_;
+       _writeN = pintfhdl->io_ops._writeN;
+
+       ret = _writeN(pintfhdl, addr,length,pdata);
+       _func_exit_;
+
+       return RTW_STATUS_CODE(ret);
+}
+int _rtw_write8_async(_adapter *adapter, u32 addr, u8 val)
+{
+       //struct        io_queue        *pio_queue = (struct io_queue *)adapter->pio_queue;
+       struct io_priv *pio_priv = &adapter->iopriv;
+       struct  intf_hdl                *pintfhdl = &(pio_priv->intf);
+       int (*_write8_async)(struct intf_hdl *pintfhdl, u32 addr, u8 val);
+       int ret;
+       _func_enter_;
+       _write8_async = pintfhdl->io_ops._write8_async;
+
+       ret = _write8_async(pintfhdl, addr, val);
+       _func_exit_;
+
+       return RTW_STATUS_CODE(ret);
+}
+int _rtw_write16_async(_adapter *adapter, u32 addr, u16 val)
+{
+       //struct        io_queue        *pio_queue = (struct io_queue *)adapter->pio_queue;
+       struct io_priv *pio_priv = &adapter->iopriv;
+       struct  intf_hdl                *pintfhdl = &(pio_priv->intf);
+       int (*_write16_async)(struct intf_hdl *pintfhdl, u32 addr, u16 val);
+       int ret;
+       _func_enter_;
+       _write16_async = pintfhdl->io_ops._write16_async;
+
+       ret = _write16_async(pintfhdl, addr, val);
+       _func_exit_;
+
+       return RTW_STATUS_CODE(ret);
+}
+int _rtw_write32_async(_adapter *adapter, u32 addr, u32 val)
+{
+       //struct        io_queue        *pio_queue = (struct io_queue *)adapter->pio_queue;
+       struct io_priv *pio_priv = &adapter->iopriv;
+       struct  intf_hdl                *pintfhdl = &(pio_priv->intf);
+       int (*_write32_async)(struct intf_hdl *pintfhdl, u32 addr, u32 val);
+       int ret;
+       _func_enter_;
+       _write32_async = pintfhdl->io_ops._write32_async;
+
+       ret = _write32_async(pintfhdl, addr, val);
+       _func_exit_;
+
+       return RTW_STATUS_CODE(ret);
+}
+void _rtw_read_mem(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem)
+{
+       void (*_read_mem)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);
+       //struct        io_queue        *pio_queue = (struct io_queue *)adapter->pio_queue;
+       struct io_priv *pio_priv = &adapter->iopriv;
+       struct  intf_hdl                *pintfhdl = &(pio_priv->intf);
+
+       _func_enter_;
+
+       if( (adapter->bDriverStopped ==_TRUE) || (adapter->bSurpriseRemoved == _TRUE))
+       {
+            RT_TRACE(_module_rtl871x_io_c_, _drv_info_, ("rtw_read_mem:bDriverStopped(%d) OR bSurpriseRemoved(%d)", adapter->bDriverStopped, adapter->bSurpriseRemoved));
+            return;
+       }
+
+       _read_mem = pintfhdl->io_ops._read_mem;
+
+       _read_mem(pintfhdl, addr, cnt, pmem);
+
+       _func_exit_;
+
+}
+
+void _rtw_write_mem(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem)
+{
+       void (*_write_mem)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);
+       //struct        io_queue        *pio_queue = (struct io_queue *)adapter->pio_queue;
+       struct io_priv *pio_priv = &adapter->iopriv;
+       struct  intf_hdl                *pintfhdl = &(pio_priv->intf);
+
+       _func_enter_;
+
+       _write_mem = pintfhdl->io_ops._write_mem;
+
+       _write_mem(pintfhdl, addr, cnt, pmem);
+
+       _func_exit_;
+
+}
+
+void _rtw_read_port(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem)
+{
+       u32 (*_read_port)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);
+       //struct        io_queue        *pio_queue = (struct io_queue *)adapter->pio_queue;
+       struct io_priv *pio_priv = &adapter->iopriv;
+       struct  intf_hdl                *pintfhdl = &(pio_priv->intf);
+
+       _func_enter_;
+
+       if( (adapter->bDriverStopped ==_TRUE) || (adapter->bSurpriseRemoved == _TRUE))
+       {
+            RT_TRACE(_module_rtl871x_io_c_, _drv_info_, ("rtw_read_port:bDriverStopped(%d) OR bSurpriseRemoved(%d)", adapter->bDriverStopped, adapter->bSurpriseRemoved));
+            return;
+       }
+
+       _read_port = pintfhdl->io_ops._read_port;
+
+       _read_port(pintfhdl, addr, cnt, pmem);
+
+       _func_exit_;
+
+}
+
+void _rtw_read_port_cancel(_adapter *adapter)
+{
+       void (*_read_port_cancel)(struct intf_hdl *pintfhdl);
+       struct io_priv *pio_priv = &adapter->iopriv;
+       struct intf_hdl *pintfhdl = &(pio_priv->intf);
+
+       _read_port_cancel = pintfhdl->io_ops._read_port_cancel;
+
+       if(_read_port_cancel)
+               _read_port_cancel(pintfhdl);
+
+}
+
+u32 _rtw_write_port(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem)
+{
+       u32 (*_write_port)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);
+       //struct        io_queue        *pio_queue = (struct io_queue *)adapter->pio_queue;
+       struct io_priv *pio_priv = &adapter->iopriv;
+       struct  intf_hdl                *pintfhdl = &(pio_priv->intf);
+       u32 ret = _SUCCESS;
+
+       _func_enter_;
+
+       _write_port = pintfhdl->io_ops._write_port;
+
+       ret = _write_port(pintfhdl, addr, cnt, pmem);
+
+        _func_exit_;
+
+       return ret;
+}
+
+u32 _rtw_write_port_and_wait(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem, int timeout_ms)
+{
+       int ret = _SUCCESS;
+       struct xmit_buf *pxmitbuf = (struct xmit_buf *)pmem;
+       struct submit_ctx sctx;
+
+       rtw_sctx_init(&sctx, timeout_ms);
+       pxmitbuf->sctx = &sctx;
+
+       ret = _rtw_write_port(adapter, addr, cnt, pmem);
+
+       if (ret == _SUCCESS)
+               ret = rtw_sctx_wait(&sctx);
+
+        return ret;
+}
+
+void _rtw_write_port_cancel(_adapter *adapter)
+{
+       void (*_write_port_cancel)(struct intf_hdl *pintfhdl);
+       struct io_priv *pio_priv = &adapter->iopriv;
+       struct intf_hdl *pintfhdl = &(pio_priv->intf);
+
+       _write_port_cancel = pintfhdl->io_ops._write_port_cancel;
+
+       if(_write_port_cancel)
+               _write_port_cancel(pintfhdl);
+
+}
+
+int rtw_init_io_priv(_adapter *padapter, void (*set_intf_ops)(struct _io_ops *pops))
+{
+       struct io_priv  *piopriv = &padapter->iopriv;
+       struct intf_hdl *pintf = &piopriv->intf;
+
+       if (set_intf_ops == NULL)
+               return _FAIL;
+
+       piopriv->padapter = padapter;
+       pintf->padapter = padapter;
+       pintf->pintf_dev = adapter_to_dvobj(padapter);
+
+       set_intf_ops(&pintf->io_ops);
+
+       return _SUCCESS;
+}
+
+#ifdef DBG_IO
+
+u16 read_sniff_ranges[][2] = {
+       //{0x550, 0x551},
+};
+
+u16 write_sniff_ranges[][2] = {
+       //{0x550, 0x551},
+       //{0x4c, 0x4c},
+};
+
+int read_sniff_num = sizeof(read_sniff_ranges)/sizeof(u16)/2;
+int write_sniff_num = sizeof(write_sniff_ranges)/sizeof(u16)/2;
+
+bool match_read_sniff_ranges(u16 addr, u16 len)
+{
+       int i;
+       for (i = 0; i<read_sniff_num; i++) {
+               if (addr + len > read_sniff_ranges[i][0] && addr <= read_sniff_ranges[i][1])
+                       return _TRUE;
+       }
+
+       return _FALSE;
+}
+
+bool match_write_sniff_ranges(u16 addr, u16 len)
+{
+       int i;
+       for (i = 0; i<write_sniff_num; i++) {
+               if (addr + len > write_sniff_ranges[i][0] && addr <= write_sniff_ranges[i][1])
+                       return _TRUE;
+       }
+
+       return _FALSE;
+}
+
+u8 dbg_rtw_read8(_adapter *adapter, u32 addr, const char *caller, const int line)
+{
+       u8 val = _rtw_read8(adapter, addr);
+
+       if (match_read_sniff_ranges(addr, 1))
+               DBG_871X("DBG_IO %s:%d rtw_read8(0x%04x) return 0x%02x\n", caller, line, addr, val);
+
+       return val;
+}
+
+u16 dbg_rtw_read16(_adapter *adapter, u32 addr, const char *caller, const int line)
+{
+       u16 val = _rtw_read16(adapter, addr);
+
+       if (match_read_sniff_ranges(addr, 2))
+               DBG_871X("DBG_IO %s:%d rtw_read16(0x%04x) return 0x%04x\n", caller, line, addr, val);
+
+       return val;
+}
+
+u32 dbg_rtw_read32(_adapter *adapter, u32 addr, const char *caller, const int line)
+{
+       u32 val = _rtw_read32(adapter, addr);
+
+       if (match_read_sniff_ranges(addr, 4))
+               DBG_871X("DBG_IO %s:%d rtw_read32(0x%04x) return 0x%08x\n", caller, line, addr, val);
+
+       return val;
+}
+
+int dbg_rtw_write8(_adapter *adapter, u32 addr, u8 val, const char *caller, const int line)
+{
+       if (match_write_sniff_ranges(addr, 1))
+               DBG_871X("DBG_IO %s:%d rtw_write8(0x%04x, 0x%02x)\n", caller, line, addr, val);
+
+       return _rtw_write8(adapter, addr, val);
+}
+int dbg_rtw_write16(_adapter *adapter, u32 addr, u16 val, const char *caller, const int line)
+{
+       if (match_write_sniff_ranges(addr, 2))
+               DBG_871X("DBG_IO %s:%d rtw_write16(0x%04x, 0x%04x)\n", caller, line, addr, val);
+
+       return _rtw_write16(adapter, addr, val);
+}
+int dbg_rtw_write32(_adapter *adapter, u32 addr, u32 val, const char *caller, const int line)
+{
+       if (match_write_sniff_ranges(addr, 4))
+               DBG_871X("DBG_IO %s:%d rtw_write32(0x%04x, 0x%08x)\n", caller, line, addr, val);
+
+       return _rtw_write32(adapter, addr, val);
+}
+int dbg_rtw_writeN(_adapter *adapter, u32 addr ,u32 length , u8 *data, const char *caller, const int line)
+{
+       if (match_write_sniff_ranges(addr, length))
+               DBG_871X("DBG_IO %s:%d rtw_writeN(0x%04x, %u)\n", caller, line, addr, length);
+
+       return _rtw_writeN(adapter, addr, length, data);
+}
+#endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/core/rtw_ioctl_query.c b/drivers/net/wireless/realtek/rtl8192cu/core/rtw_ioctl_query.c
new file mode 100644 (file)
index 0000000..a67b08d
--- /dev/null
@@ -0,0 +1,195 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#define _RTW_IOCTL_QUERY_C_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <rtw_ioctl_query.h>
+#include <wifi.h>
+
+
+#ifdef PLATFORM_WINDOWS
+//
+// Added for WPA2-PSK, by Annie, 2005-09-20.
+//
+u8
+query_802_11_capability(
+       _adapter*               Adapter,
+       u8*                     pucBuf,
+       u32 *           pulOutLen
+)
+{
+       static NDIS_802_11_AUTHENTICATION_ENCRYPTION szAuthEnc[] =
+       {
+               {Ndis802_11AuthModeOpen, Ndis802_11EncryptionDisabled},
+               {Ndis802_11AuthModeOpen, Ndis802_11Encryption1Enabled},
+               {Ndis802_11AuthModeShared, Ndis802_11EncryptionDisabled},
+               {Ndis802_11AuthModeShared, Ndis802_11Encryption1Enabled},
+               {Ndis802_11AuthModeWPA, Ndis802_11Encryption2Enabled},
+               {Ndis802_11AuthModeWPA, Ndis802_11Encryption3Enabled},
+               {Ndis802_11AuthModeWPAPSK, Ndis802_11Encryption2Enabled},
+               {Ndis802_11AuthModeWPAPSK, Ndis802_11Encryption3Enabled},
+               {Ndis802_11AuthModeWPANone, Ndis802_11Encryption2Enabled},
+               {Ndis802_11AuthModeWPANone, Ndis802_11Encryption3Enabled},
+               {Ndis802_11AuthModeWPA2, Ndis802_11Encryption2Enabled},
+               {Ndis802_11AuthModeWPA2, Ndis802_11Encryption3Enabled},
+               {Ndis802_11AuthModeWPA2PSK, Ndis802_11Encryption2Enabled},
+               {Ndis802_11AuthModeWPA2PSK, Ndis802_11Encryption3Enabled}
+       };
+       static ULONG    ulNumOfPairSupported = sizeof(szAuthEnc)/sizeof(NDIS_802_11_AUTHENTICATION_ENCRYPTION);
+       NDIS_802_11_CAPABILITY * pCap = (NDIS_802_11_CAPABILITY *)pucBuf;
+       u8*     pucAuthEncryptionSupported = (u8*) pCap->AuthenticationEncryptionSupported;
+
+
+       pCap->Length = sizeof(NDIS_802_11_CAPABILITY);
+       if(ulNumOfPairSupported > 1 )
+               pCap->Length +=         (ulNumOfPairSupported-1) * sizeof(NDIS_802_11_AUTHENTICATION_ENCRYPTION);
+
+       pCap->Version = 2;
+       pCap->NoOfPMKIDs = NUM_PMKID_CACHE;
+       pCap->NoOfAuthEncryptPairsSupported = ulNumOfPairSupported;
+
+       if( sizeof (szAuthEnc) <= 240 )         // 240 = 256 - 4*4      // SecurityInfo.szCapability: only 256 bytes in size.
+       {
+               _rtw_memcpy( pucAuthEncryptionSupported, (u8*)szAuthEnc,  sizeof (szAuthEnc) );
+               *pulOutLen = pCap->Length;
+               return _TRUE;
+       }
+       else
+       {
+               *pulOutLen = 0;
+               RT_TRACE(_module_rtl871x_ioctl_query_c_,_drv_info_,("_query_802_11_capability(): szAuthEnc size is too large.\n"));
+               return _FALSE;
+       }
+}
+
+u8 query_802_11_association_information(       _adapter *padapter,PNDIS_802_11_ASSOCIATION_INFORMATION pAssocInfo)
+{
+       struct wlan_network *tgt_network;
+       struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
+       struct  security_priv  *psecuritypriv=&(padapter->securitypriv);
+       WLAN_BSSID_EX   *psecnetwork=(WLAN_BSSID_EX*)&(psecuritypriv->sec_bss);
+       u8 *    pDest = (u8 *)pAssocInfo + sizeof(NDIS_802_11_ASSOCIATION_INFORMATION);
+       unsigned char i,*auth_ie,*supp_ie;
+
+       //NdisZeroMemory(pAssocInfo, sizeof(NDIS_802_11_ASSOCIATION_INFORMATION));
+       _rtw_memset(pAssocInfo, 0, sizeof(NDIS_802_11_ASSOCIATION_INFORMATION));
+       //pAssocInfo->Length = sizeof(NDIS_802_11_ASSOCIATION_INFORMATION);
+
+       //------------------------------------------------------
+       // Association Request related information
+       //------------------------------------------------------
+       // Req_1. AvailableRequestFixedIEs
+       if(psecnetwork!=NULL){
+
+       pAssocInfo->AvailableRequestFixedIEs |= NDIS_802_11_AI_REQFI_CAPABILITIES|NDIS_802_11_AI_REQFI_CURRENTAPADDRESS;
+       pAssocInfo->RequestFixedIEs.Capabilities = (unsigned short)* & psecnetwork->IEs[10];
+       _rtw_memcpy(pAssocInfo->RequestFixedIEs.CurrentAPAddress,
+               & psecnetwork->MacAddress, 6);
+
+       pAssocInfo->OffsetRequestIEs = sizeof(NDIS_802_11_ASSOCIATION_INFORMATION);
+
+       if(check_fwstate( pmlmepriv, _FW_UNDER_LINKING|_FW_LINKED)==_TRUE)
+       {
+
+               if(psecuritypriv->ndisauthtype>=Ndis802_11AuthModeWPA2)
+                       pDest[0] =48;           //RSN Information Element
+               else
+                       pDest[0] =221;  //WPA(SSN) Information Element
+
+               RT_TRACE(_module_rtl871x_ioctl_query_c_,_drv_info_,("\n Adapter->ndisauthtype==Ndis802_11AuthModeWPA)?0xdd:0x30 [%d]",pDest[0]));
+               supp_ie=&psecuritypriv->supplicant_ie[0];
+               for(i=0;i<supp_ie[0];i++)
+               {
+                       RT_TRACE(_module_rtl871x_ioctl_query_c_,_drv_info_,("IEs [%d] = 0x%x \n\n", i,supp_ie[i]));
+               }
+
+               i=13;   //0~11 is fixed information element
+               RT_TRACE(_module_rtl871x_ioctl_query_c_,_drv_info_,("i= %d tgt_network->network.IELength=%d\n\n", i,(int)psecnetwork->IELength));
+               while((i<supp_ie[0]) && (i<256)){
+                       if((unsigned char)supp_ie[i]==pDest[0]){
+                                               _rtw_memcpy((u8 *)(pDest),
+                                                       &supp_ie[i],
+                                                       supp_ie[1+i]+2);
+
+                               break;
+                       }
+
+                       i=i+supp_ie[i+1]+2;
+                       if(supp_ie[1+i]==0)
+                               i=i+1;
+                       RT_TRACE(_module_rtl871x_ioctl_query_c_,_drv_info_,("iteration i=%d IEs [%d] = 0x%x \n\n", i,i,supp_ie[i+1]));
+
+               }
+
+
+               pAssocInfo->RequestIELength += (2 + supp_ie[1+i]);// (2 + psecnetwork->IEs[1+i]+4);
+
+       }
+
+
+               RT_TRACE(_module_rtl871x_ioctl_query_c_,_drv_info_,("\n psecnetwork != NULL,fwstate==_FW_UNDER_LINKING \n"));
+
+       }
+
+
+       //------------------------------------------------------
+       // Association Response related information
+       //------------------------------------------------------
+
+       if(check_fwstate( pmlmepriv, _FW_LINKED)==_TRUE)
+       {
+               tgt_network =&(pmlmepriv->cur_network);
+               if(tgt_network!=NULL){
+               pAssocInfo->AvailableResponseFixedIEs =
+                               NDIS_802_11_AI_RESFI_CAPABILITIES
+                               |NDIS_802_11_AI_RESFI_ASSOCIATIONID
+                               ;
+
+               pAssocInfo->ResponseFixedIEs.Capabilities =(unsigned short)* & tgt_network->network.IEs[10];
+               pAssocInfo->ResponseFixedIEs.StatusCode = 0;
+               pAssocInfo->ResponseFixedIEs.AssociationId =(unsigned short) tgt_network->aid;
+
+               pDest = (u8 *)pAssocInfo + sizeof(NDIS_802_11_ASSOCIATION_INFORMATION)+pAssocInfo->RequestIELength;
+               auth_ie=&psecuritypriv->authenticator_ie[0];
+
+               for(i=0;i<auth_ie[0];i++)
+                       RT_TRACE(_module_rtl871x_ioctl_query_c_,_drv_info_,("IEs [%d] = 0x%x \n\n", i,auth_ie[i]));
+
+               i=auth_ie[0]-12;
+               if(i>0){
+                       _rtw_memcpy((u8 *)&pDest[0],&auth_ie[1],i);
+                       pAssocInfo->ResponseIELength =i;
+               }
+
+
+               pAssocInfo->OffsetResponseIEs = sizeof(NDIS_802_11_ASSOCIATION_INFORMATION) + pAssocInfo->RequestIELength;
+
+
+               RT_TRACE(_module_rtl871x_ioctl_query_c_,_drv_info_,("\n tgt_network != NULL,fwstate==_FW_LINKED \n"));
+               }
+       }
+       RT_TRACE(_module_rtl871x_ioctl_query_c_,_drv_info_,("\n exit query_802_11_association_information \n"));
+_func_exit_;
+
+       return _TRUE;
+}
+#endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/core/rtw_ioctl_rtl.c b/drivers/net/wireless/realtek/rtl8192cu/core/rtw_ioctl_rtl.c
new file mode 100644 (file)
index 0000000..4e663d7
--- /dev/null
@@ -0,0 +1,1031 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#define  _RTW_IOCTL_RTL_C_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <wlan_bssdef.h>
+#include <wifi.h>
+#include <rtw_ioctl.h>
+#include <rtw_ioctl_set.h>
+#include <rtw_ioctl_query.h>
+#include <rtw_ioctl_rtl.h>
+#include <mp_custom_oid.h>
+#ifdef CONFIG_MP_INCLUDED
+#include <rtw_mp.h>
+#include <rtw_mp_ioctl.h>
+#endif
+
+struct oid_obj_priv oid_rtl_seg_01_01[] =
+{
+       {1, &oid_null_function},                                                                                //0x80
+       {1, &oid_null_function},                                                                                //0x81
+       {1, &oid_null_function},                                                                                //0x82
+       {1, &oid_null_function},                                                                                //0x83//OID_RT_SET_SNIFFER_MODE
+       {1, &oid_rt_get_signal_quality_hdl},                                                    //0x84
+       {1, &oid_rt_get_small_packet_crc_hdl},                                          //0x85
+       {1, &oid_rt_get_middle_packet_crc_hdl},                                         //0x86
+       {1, &oid_rt_get_large_packet_crc_hdl},                                          //0x87
+       {1, &oid_rt_get_tx_retry_hdl},                                                          //0x88
+       {1, &oid_rt_get_rx_retry_hdl},                                                          //0x89
+       {1, &oid_rt_pro_set_fw_dig_state_hdl},                                          //0x8A
+       {1, &oid_rt_pro_set_fw_ra_state_hdl}    ,                                               //0x8B
+       {1, &oid_null_function},                                                                                //0x8C
+       {1, &oid_null_function},                                                                                //0x8D
+       {1, &oid_null_function},                                                                                //0x8E
+       {1, &oid_null_function},                                                                                //0x8F
+       {1, &oid_rt_get_rx_total_packet_hdl},                                                   //0x90
+       {1, &oid_rt_get_tx_beacon_ok_hdl},                                                      //0x91
+       {1, &oid_rt_get_tx_beacon_err_hdl},                                                     //0x92
+       {1, &oid_rt_get_rx_icv_err_hdl},                                                                //0x93
+       {1, &oid_rt_set_encryption_algorithm_hdl},                                      //0x94
+       {1, &oid_null_function},                                                                                //0x95
+       {1, &oid_rt_get_preamble_mode_hdl},                                                     //0x96
+       {1, &oid_null_function},                                                                                //0x97
+       {1, &oid_rt_get_ap_ip_hdl},                                                                     //0x98
+       {1, &oid_rt_get_channelplan_hdl},                                                       //0x99
+       {1, &oid_rt_set_preamble_mode_hdl},                                                     //0x9A
+       {1, &oid_rt_set_bcn_intvl_hdl},                                                         //0x9B
+       {1, &oid_null_function},                                                                                //0x9C
+       {1, &oid_rt_dedicate_probe_hdl},                                                                //0x9D
+       {1, &oid_null_function},                                                                                //0x9E
+       {1, &oid_null_function},                                                                                //0x9F
+       {1, &oid_null_function},                                                                                //0xA0
+       {1, &oid_null_function},                                                                                //0xA1
+       {1, &oid_null_function},                                                                                //0xA2
+       {1, &oid_null_function},                                                                                //0xA3
+       {1, &oid_null_function},                                                                                //0xA4
+       {1, &oid_null_function},                                                                                //0xA5
+       {1, &oid_null_function},                                                                                //0xA6
+       {1, &oid_rt_get_total_tx_bytes_hdl},                                                    //0xA7
+       {1, &oid_rt_get_total_rx_bytes_hdl},                                                    //0xA8
+       {1, &oid_rt_current_tx_power_level_hdl},                                                //0xA9
+       {1, &oid_rt_get_enc_key_mismatch_count_hdl},                            //0xAA
+       {1, &oid_rt_get_enc_key_match_count_hdl},                                       //0xAB
+       {1, &oid_rt_get_channel_hdl},                                                           //0xAC
+       {1, &oid_rt_set_channelplan_hdl},                                                               //0xAD
+       {1, &oid_rt_get_hardware_radio_off_hdl},                                                //0xAE
+       {1, &oid_null_function},                                                                                //0xAF
+       {1, &oid_null_function},                                                                                //0xB0
+       {1, &oid_null_function},                                                                                //0xB1
+       {1, &oid_null_function},                                                                                //0xB2
+       {1, &oid_null_function},                                                                                //0xB3
+       {1, &oid_rt_get_key_mismatch_hdl},                                                      //0xB4
+       {1, &oid_null_function},                                                                                //0xB5
+       {1, &oid_null_function},                                                                                //0xB6
+       {1, &oid_null_function},                                                                                //0xB7
+       {1, &oid_null_function},                                                                                //0xB8
+       {1, &oid_null_function},                                                                                //0xB9
+       {1, &oid_null_function},                                                                                //0xBA
+       {1, &oid_rt_supported_wireless_mode_hdl},                                       //0xBB
+       {1, &oid_rt_get_channel_list_hdl},                                                      //0xBC
+       {1, &oid_rt_get_scan_in_progress_hdl},                                          //0xBD
+       {1, &oid_null_function},                                                                                //0xBE
+       {1, &oid_null_function},                                                                                //0xBF
+       {1, &oid_null_function},                                                                                //0xC0
+       {1, &oid_rt_forced_data_rate_hdl},                                                      //0xC1
+       {1, &oid_rt_wireless_mode_for_scan_list_hdl},                                   //0xC2
+       {1, &oid_rt_get_bss_wireless_mode_hdl},                                         //0xC3
+       {1, &oid_rt_scan_with_magic_packet_hdl},                                        //0xC4
+       {1, &oid_null_function},                                                                                //0xC5
+       {1, &oid_null_function},                                                                                //0xC6
+       {1, &oid_null_function},                                                                                //0xC7
+       {1, &oid_null_function},                                                                                //0xC8
+       {1, &oid_null_function},                                                                                //0xC9
+       {1, &oid_null_function},                                                                                //0xCA
+       {1, &oid_null_function},                                                                                //0xCB
+       {1, &oid_null_function},                                                                                //0xCC
+       {1, &oid_null_function},                                                                                //0xCD
+       {1, &oid_null_function},                                                                                //0xCE
+       {1, &oid_null_function},                                                                                //0xCF
+
+};
+
+struct oid_obj_priv oid_rtl_seg_01_03[] =
+{
+       {1, &oid_rt_ap_get_associated_station_list_hdl},                                //0x00
+       {1, &oid_null_function},                                                                                //0x01
+       {1, &oid_rt_ap_switch_into_ap_mode_hdl},                                        //0x02
+       {1, &oid_null_function},                                                                                //0x03
+       {1, &oid_rt_ap_supported_hdl},                                                          //0x04
+       {1, &oid_rt_ap_set_passphrase_hdl},                                                     //0x05
+
+};
+
+struct oid_obj_priv oid_rtl_seg_01_11[] =
+{
+       {1, &oid_null_function},                                        //0xC0  OID_RT_PRO_RX_FILTER
+       {1, &oid_null_function},                                        //0xC1  OID_CE_USB_WRITE_REGISTRY
+       {1, &oid_null_function},                                        //0xC2  OID_CE_USB_READ_REGISTRY
+       {1, &oid_null_function},                                        //0xC3  OID_RT_PRO_SET_INITIAL_GAIN
+       {1, &oid_null_function},                                        //0xC4  OID_RT_PRO_SET_BB_RF_STANDBY_MODE
+       {1, &oid_null_function},                                        //0xC5  OID_RT_PRO_SET_BB_RF_SHUTDOWN_MODE
+       {1, &oid_null_function},                                        //0xC6  OID_RT_PRO_SET_TX_CHARGE_PUMP
+       {1, &oid_null_function},                                        //0xC7  OID_RT_PRO_SET_RX_CHARGE_PUMP
+       {1, &oid_rt_pro_rf_write_registry_hdl}, //0xC8
+       {1, &oid_rt_pro_rf_read_registry_hdl},  //0xC9
+       {1, &oid_null_function}                                 //0xCA  OID_RT_PRO_QUERY_RF_TYPE
+
+};
+
+struct oid_obj_priv oid_rtl_seg_03_00[] =
+{
+       {1, &oid_null_function},                                                                                //0x00
+       {1, &oid_rt_get_connect_state_hdl},                                                     //0x01
+       {1, &oid_null_function},                                                                                //0x02
+       {1, &oid_null_function},                                                                                //0x03
+       {1, &oid_rt_set_default_key_id_hdl},                                                    //0x04
+
+
+};
+
+
+//**************  oid_rtl_seg_01_01 section start **************
+
+NDIS_STATUS oid_rt_pro_set_fw_dig_state_hdl(struct oid_par_priv* poid_par_priv)
+{
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+#if 0
+       PADAPTER                Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+       _irqL                   oldirql;
+
+       _func_enter_;
+
+       if(poid_par_priv->type_of_oid != SET_OID)
+       {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               return status;
+       }
+
+       _irqlevel_changed_(&oldirql,LOWER);
+       if(poid_par_priv->information_buf_len >= sizeof(struct setdig_parm))
+       {
+               //DEBUG_ERR(("===> oid_rt_pro_set_fw_dig_state_hdl. type:0x%02x.\n",*((unsigned char*)poid_par_priv->information_buf )));
+               if(!rtw_setfwdig_cmd(Adapter,*((unsigned char*)poid_par_priv->information_buf )))
+               {
+                       status = NDIS_STATUS_NOT_ACCEPTED;
+               }
+
+       }
+       else{
+               status = NDIS_STATUS_NOT_ACCEPTED;
+       }
+       _irqlevel_changed_(&oldirql,RAISE);
+       _func_exit_;
+#endif
+       return status;
+}
+//-----------------------------------------------------------------------------
+NDIS_STATUS oid_rt_pro_set_fw_ra_state_hdl(struct oid_par_priv* poid_par_priv)
+{
+
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+#if 0
+       PADAPTER                Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+       _irqL                   oldirql;
+
+       _func_enter_;
+       if(poid_par_priv->type_of_oid != SET_OID)
+       {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               return status;
+       }
+
+
+       _irqlevel_changed_(&oldirql,LOWER);
+
+       if(poid_par_priv->information_buf_len >= sizeof(struct setra_parm))
+       {
+               //DEBUG_ERR(("===> oid_rt_pro_set_fw_ra_state_hdl. type:0x%02x.\n",*((unsigned char*)poid_par_priv->information_buf )));
+               if(!rtw_setfwra_cmd(Adapter,*((unsigned char*)poid_par_priv->information_buf )))
+               {
+                       status = NDIS_STATUS_NOT_ACCEPTED;
+               }
+
+       }
+       else{
+               status = NDIS_STATUS_NOT_ACCEPTED;
+       }
+       _irqlevel_changed_(&oldirql,RAISE);
+       _func_exit_;
+#endif
+       return status;
+}
+//-----------------------------------------------------------------------------
+NDIS_STATUS oid_rt_get_signal_quality_hdl(struct oid_par_priv* poid_par_priv)
+{
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+       PADAPTER                padapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+       //DEBUG_ERR(("<**********************oid_rt_get_signal_quality_hdl \n"));
+       if(poid_par_priv->type_of_oid != QUERY_OID)
+       {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               return status;
+       }
+
+#if 0
+               if(pMgntInfo->mAssoc || pMgntInfo->mIbss)
+               {
+                       ulInfo = pAdapter->RxStats.SignalQuality;
+                       *poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
+               }
+               else
+               {
+                       ulInfo = 0xffffffff; // It stands for -1 in 4-byte integer.
+               }
+               break;
+#endif
+
+       return status;
+}
+
+//------------------------------------------------------------------------------
+
+NDIS_STATUS oid_rt_get_small_packet_crc_hdl(struct oid_par_priv* poid_par_priv)
+{
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+       PADAPTER                padapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+       if(poid_par_priv->type_of_oid != QUERY_OID)
+       {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               return status;
+       }
+
+       if(poid_par_priv->information_buf_len >=  sizeof(ULONG) )
+       {
+               *(ULONG *)poid_par_priv->information_buf = padapter->recvpriv.rx_smallpacket_crcerr;
+               *poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
+       }
+       else
+       {
+               status = NDIS_STATUS_INVALID_LENGTH;
+       }
+
+       return status;
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_get_middle_packet_crc_hdl(struct oid_par_priv* poid_par_priv)
+{
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+       PADAPTER                padapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+       if(poid_par_priv->type_of_oid != QUERY_OID)
+       {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               return status;
+       }
+
+       if(poid_par_priv->information_buf_len >=  sizeof(ULONG) )
+       {
+               *(ULONG *)poid_par_priv->information_buf = padapter->recvpriv.rx_middlepacket_crcerr;
+               *poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
+       }
+       else
+       {
+               status = NDIS_STATUS_INVALID_LENGTH;
+       }
+
+
+       return status;
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_get_large_packet_crc_hdl(struct oid_par_priv* poid_par_priv)
+{
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+       PADAPTER                padapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+       if(poid_par_priv->type_of_oid != QUERY_OID)
+       {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               return status;
+       }
+
+       if(poid_par_priv->information_buf_len >=  sizeof(ULONG) )
+       {
+               *(ULONG *)poid_par_priv->information_buf = padapter->recvpriv.rx_largepacket_crcerr;
+               *poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
+       }
+       else
+       {
+               status = NDIS_STATUS_INVALID_LENGTH;
+       }
+
+
+       return status;
+}
+
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_get_tx_retry_hdl(struct oid_par_priv* poid_par_priv)
+{
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+       PADAPTER                padapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+       if(poid_par_priv->type_of_oid != QUERY_OID)
+       {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               return status;
+       }
+
+       return status;
+}
+NDIS_STATUS oid_rt_get_rx_retry_hdl(struct oid_par_priv* poid_par_priv)
+{
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+       PADAPTER                padapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+       if(poid_par_priv->type_of_oid != QUERY_OID)
+       {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               return status;
+       }
+       *poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
+       return status;
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_get_rx_total_packet_hdl(struct oid_par_priv* poid_par_priv)
+{
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+       PADAPTER                padapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+       if(poid_par_priv->type_of_oid != QUERY_OID)
+       {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               return status;
+       }
+       if(poid_par_priv->information_buf_len >=  sizeof(ULONG) )
+       {
+               *(u64 *)poid_par_priv->information_buf = padapter->recvpriv.rx_pkts + padapter->recvpriv.rx_drop;
+               *poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
+       }
+       else
+       {
+               status = NDIS_STATUS_INVALID_LENGTH;
+       }
+
+
+       return status;
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_get_tx_beacon_ok_hdl(struct oid_par_priv* poid_par_priv)
+{
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+       PADAPTER                padapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+       if(poid_par_priv->type_of_oid != QUERY_OID)
+       {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               return status;
+       }
+
+       return status;
+}
+NDIS_STATUS oid_rt_get_tx_beacon_err_hdl(struct oid_par_priv* poid_par_priv)
+{
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+       PADAPTER                padapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+       if(poid_par_priv->type_of_oid != QUERY_OID)
+       {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               return status;
+       }
+
+       return status;
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_get_rx_icv_err_hdl(struct oid_par_priv* poid_par_priv)
+{
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+       PADAPTER                padapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+       if(poid_par_priv->type_of_oid != QUERY_OID)
+       {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               return status;
+       }
+       if(poid_par_priv->information_buf_len>= sizeof(u32))
+       {
+               //_rtw_memcpy(*(uint *)poid_par_priv->information_buf,padapter->recvpriv.rx_icv_err,sizeof(u32));
+               *(uint *)poid_par_priv->information_buf = padapter->recvpriv.rx_icv_err;
+               *poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
+       }
+       else
+       {
+               status = NDIS_STATUS_INVALID_LENGTH ;
+       }
+
+
+       return status;
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_set_encryption_algorithm_hdl(struct oid_par_priv* poid_par_priv)
+{
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+       PADAPTER                padapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+       if(poid_par_priv->type_of_oid != SET_OID)
+       {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               return status;
+       }
+
+       return status;
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_get_preamble_mode_hdl(struct oid_par_priv* poid_par_priv)
+{
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+       PADAPTER                padapter = (PADAPTER)(poid_par_priv->adapter_context);
+       ULONG                   preamblemode = 0 ;
+
+       if(poid_par_priv->type_of_oid != QUERY_OID)
+       {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               return status;
+       }
+       if(poid_par_priv->information_buf_len>= sizeof(ULONG))
+       {
+               if(padapter->registrypriv.preamble == PREAMBLE_LONG)
+                       preamblemode = 0;
+               else if (padapter->registrypriv.preamble == PREAMBLE_AUTO)
+                       preamblemode = 1;
+               else if (padapter->registrypriv.preamble == PREAMBLE_SHORT)
+                       preamblemode = 2;
+
+
+               *(ULONG *)poid_par_priv->information_buf = preamblemode ;
+               *poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
+       }
+       else
+       {
+               status = NDIS_STATUS_INVALID_LENGTH ;
+       }
+       return status;
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_get_ap_ip_hdl(struct oid_par_priv* poid_par_priv)
+{
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+       PADAPTER                padapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+       if(poid_par_priv->type_of_oid != QUERY_OID)
+       {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               return status;
+       }
+
+       return status;
+}
+
+NDIS_STATUS oid_rt_get_channelplan_hdl(struct oid_par_priv* poid_par_priv)
+{
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+       PADAPTER                padapter = (PADAPTER)(poid_par_priv->adapter_context);
+       struct eeprom_priv*     peeprompriv = &padapter->eeprompriv;
+
+       if(poid_par_priv->type_of_oid != QUERY_OID)
+       {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               return status;
+       }
+       *poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
+       *(u16 *)poid_par_priv->information_buf = peeprompriv->channel_plan ;
+
+       return status;
+}
+NDIS_STATUS oid_rt_set_channelplan_hdl(struct oid_par_priv* poid_par_priv)
+{
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+       PADAPTER                padapter = (PADAPTER)(poid_par_priv->adapter_context);
+       struct eeprom_priv*     peeprompriv = &padapter->eeprompriv;
+
+       if(poid_par_priv->type_of_oid != SET_OID)
+       {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               return status;
+       }
+
+       peeprompriv->channel_plan = *(u16 *)poid_par_priv->information_buf ;
+
+       return status;
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_set_preamble_mode_hdl(struct oid_par_priv* poid_par_priv)
+{
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+       PADAPTER                padapter = (PADAPTER)(poid_par_priv->adapter_context);
+       ULONG                   preamblemode = 0;
+       if(poid_par_priv->type_of_oid != SET_OID)
+       {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               return status;
+       }
+
+       if(poid_par_priv->information_buf_len>= sizeof(ULONG))
+       {
+               preamblemode = *(ULONG *)poid_par_priv->information_buf ;
+               if( preamblemode == 0)
+                       padapter->registrypriv.preamble = PREAMBLE_LONG;
+               else if (preamblemode==1 )
+                       padapter->registrypriv.preamble = PREAMBLE_AUTO;
+               else if ( preamblemode==2 )
+                       padapter->registrypriv.preamble = PREAMBLE_SHORT;
+
+               *(ULONG *)poid_par_priv->information_buf = preamblemode ;
+               *poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
+       }
+       else
+       {
+               status = NDIS_STATUS_INVALID_LENGTH ;
+       }
+
+       return status;
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_set_bcn_intvl_hdl(struct oid_par_priv* poid_par_priv)
+{
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+       PADAPTER                padapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+       if(poid_par_priv->type_of_oid != SET_OID)
+       {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               return status;
+       }
+
+       return status;
+}
+NDIS_STATUS oid_rt_dedicate_probe_hdl(struct oid_par_priv* poid_par_priv)
+{
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+       PADAPTER                padapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+       return status;
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_get_total_tx_bytes_hdl(struct oid_par_priv* poid_par_priv)
+{
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+       PADAPTER                padapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+       if(poid_par_priv->type_of_oid != QUERY_OID)
+       {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               return status;
+       }
+       if(poid_par_priv->information_buf_len>= sizeof(ULONG))
+       {
+               *(u64 *)poid_par_priv->information_buf = padapter->xmitpriv.tx_bytes;
+               *poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
+       }
+       else
+       {
+               status = NDIS_STATUS_INVALID_LENGTH ;
+       }
+
+
+       return status;
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_get_total_rx_bytes_hdl(struct oid_par_priv* poid_par_priv)
+{
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+       PADAPTER                padapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+       if(poid_par_priv->type_of_oid != QUERY_OID)
+       {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               return status;
+       }
+       if(poid_par_priv->information_buf_len>= sizeof(ULONG))
+       {
+               //_rtw_memcpy(*(uint *)poid_par_priv->information_buf,padapter->recvpriv.rx_icv_err,sizeof(u32));
+               *(u64 *)poid_par_priv->information_buf = padapter->recvpriv.rx_bytes;
+               *poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
+       }
+       else
+       {
+               status = NDIS_STATUS_INVALID_LENGTH ;
+       }
+       return status;
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_current_tx_power_level_hdl(struct oid_par_priv* poid_par_priv)
+{
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+       PADAPTER                padapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+       return status;
+}
+NDIS_STATUS oid_rt_get_enc_key_mismatch_count_hdl(struct oid_par_priv* poid_par_priv)
+{
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+       PADAPTER                padapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+       if(poid_par_priv->type_of_oid != QUERY_OID)
+       {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               return status;
+       }
+
+       return status;
+}
+NDIS_STATUS oid_rt_get_enc_key_match_count_hdl(struct oid_par_priv* poid_par_priv)
+{
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+       PADAPTER                padapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+       if(poid_par_priv->type_of_oid != QUERY_OID)
+       {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               return status;
+       }
+
+       return status;
+}
+NDIS_STATUS oid_rt_get_channel_hdl(struct oid_par_priv* poid_par_priv)
+{
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+       PADAPTER                padapter = (PADAPTER)(poid_par_priv->adapter_context);
+       struct  mlme_priv       *pmlmepriv = &padapter->mlmepriv;
+       NDIS_802_11_CONFIGURATION               *pnic_Config;
+
+       ULONG   channelnum;
+
+       _func_enter_;
+       if(poid_par_priv->type_of_oid != QUERY_OID)
+       {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               return status;
+       }
+
+       if ( (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE) ||
+               (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE))
+               pnic_Config = &pmlmepriv->cur_network.network.Configuration;
+       else
+               pnic_Config = &padapter->registrypriv.dev_network.Configuration;
+
+       channelnum = pnic_Config->DSConfig;
+       *(ULONG *)poid_par_priv->information_buf = channelnum;
+
+       *poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
+
+       _func_exit_;
+
+
+
+       return status;
+}
+NDIS_STATUS oid_rt_get_hardware_radio_off_hdl(struct oid_par_priv* poid_par_priv)
+{
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+       PADAPTER                padapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+       if(poid_par_priv->type_of_oid != QUERY_OID)
+       {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               return status;
+       }
+
+       return status;
+}
+NDIS_STATUS oid_rt_get_key_mismatch_hdl(struct oid_par_priv* poid_par_priv)
+{
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+       PADAPTER                padapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+       if(poid_par_priv->type_of_oid != QUERY_OID)
+       {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               return status;
+       }
+
+       return status;
+}
+NDIS_STATUS oid_rt_supported_wireless_mode_hdl(struct oid_par_priv* poid_par_priv)
+{
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+       PADAPTER                padapter = (PADAPTER)(poid_par_priv->adapter_context);
+       ULONG                   ulInfo = 0 ;
+       //DEBUG_ERR(("<**********************oid_rt_supported_wireless_mode_hdl \n"));
+       if(poid_par_priv->type_of_oid != QUERY_OID)
+       {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               return status;
+       }
+       if(poid_par_priv->information_buf_len >= sizeof(ULONG)){
+               ulInfo |= 0x0100; //WIRELESS_MODE_B
+               ulInfo |= 0x0200; //WIRELESS_MODE_G
+               ulInfo |= 0x0400; //WIRELESS_MODE_A
+
+               *(ULONG *) poid_par_priv->information_buf = ulInfo;
+               //DEBUG_ERR(("<===oid_rt_supported_wireless_mode %x\n",ulInfo));
+               *poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
+       }
+       else{
+               status = NDIS_STATUS_INVALID_LENGTH;
+       }
+
+       return status;
+}
+NDIS_STATUS oid_rt_get_channel_list_hdl(struct oid_par_priv* poid_par_priv)
+{
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+       PADAPTER                padapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+       if(poid_par_priv->type_of_oid != QUERY_OID)
+       {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               return status;
+       }
+
+       return status;
+}
+NDIS_STATUS oid_rt_get_scan_in_progress_hdl(struct oid_par_priv* poid_par_priv)
+{
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+       PADAPTER                padapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+       if(poid_par_priv->type_of_oid != QUERY_OID)
+       {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               return status;
+       }
+
+       return status;
+}
+
+
+NDIS_STATUS oid_rt_forced_data_rate_hdl(struct oid_par_priv* poid_par_priv)
+{
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+       PADAPTER                padapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+       return status;
+}
+NDIS_STATUS oid_rt_wireless_mode_for_scan_list_hdl(struct oid_par_priv* poid_par_priv)
+{
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+       PADAPTER                padapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+       return status;
+}
+NDIS_STATUS oid_rt_get_bss_wireless_mode_hdl(struct oid_par_priv* poid_par_priv)
+{
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+       PADAPTER                padapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+       if(poid_par_priv->type_of_oid != QUERY_OID)
+       {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               return status;
+       }
+
+       return status;
+}
+
+NDIS_STATUS oid_rt_scan_with_magic_packet_hdl(struct oid_par_priv* poid_par_priv)
+{
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+       PADAPTER                padapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+       return status;
+}
+//**************  oid_rtl_seg_01_01 section end **************
+
+//**************  oid_rtl_seg_01_03 section start **************
+NDIS_STATUS oid_rt_ap_get_associated_station_list_hdl(struct oid_par_priv* poid_par_priv)
+{
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+       PADAPTER                padapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+       if(poid_par_priv->type_of_oid != QUERY_OID)
+       {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               return status;
+       }
+
+       return status;
+}
+NDIS_STATUS oid_rt_ap_switch_into_ap_mode_hdl(struct oid_par_priv* poid_par_priv)
+{
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+       PADAPTER                padapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+       return status;
+}
+NDIS_STATUS oid_rt_ap_supported_hdl(struct oid_par_priv* poid_par_priv)
+{
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+       PADAPTER                padapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+       return status;
+}
+NDIS_STATUS oid_rt_ap_set_passphrase_hdl(struct oid_par_priv* poid_par_priv)
+{
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+       PADAPTER                padapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+       if(poid_par_priv->type_of_oid != SET_OID)
+       {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               return status;
+       }
+
+       return status;
+}
+
+//**************  oid_rtl_seg_01_03 section end **************
+
+//****************  oid_rtl_seg_01_11   section start ****************
+NDIS_STATUS oid_rt_pro_rf_write_registry_hdl(struct oid_par_priv* poid_par_priv)
+{
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+       PADAPTER                Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+       _irqL                   oldirql;
+       _func_enter_;
+       //DEBUG_ERR(("<**********************oid_rt_pro_rf_write_registry_hdl \n"));
+       if(poid_par_priv->type_of_oid != SET_OID) //QUERY_OID
+       {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               return status;
+       }
+
+       _irqlevel_changed_(&oldirql,LOWER);
+       if(poid_par_priv->information_buf_len== (sizeof(unsigned long)*3))
+       {
+               //RegOffsetValue        - The offset of RF register to write.
+               //RegDataWidth  - The data width of RF register to write.
+               //RegDataValue  - The value to write.
+               //RegOffsetValue = *((unsigned long*)InformationBuffer);
+               //RegDataWidth = *((unsigned long*)InformationBuffer+1);
+               //RegDataValue =  *((unsigned long*)InformationBuffer+2);
+               if(!rtw_setrfreg_cmd(Adapter,
+                                               *(unsigned char*)poid_par_priv->information_buf,
+                                               (unsigned long)(*((unsigned long*)poid_par_priv->information_buf+2))))
+               {
+                       status = NDIS_STATUS_NOT_ACCEPTED;
+               }
+
+       }
+       else{
+               status = NDIS_STATUS_INVALID_LENGTH;
+       }
+       _irqlevel_changed_(&oldirql,RAISE);
+       _func_exit_;
+
+       return status;
+}
+
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_pro_rf_read_registry_hdl(struct oid_par_priv* poid_par_priv)
+{
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+#if 0
+       PADAPTER                Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+       _irqL   oldirql;
+       _func_enter_;
+
+       //DEBUG_ERR(("<**********************oid_rt_pro_rf_read_registry_hdl \n"));
+       if(poid_par_priv->type_of_oid != SET_OID) //QUERY_OID
+       {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               return status;
+       }
+
+       _irqlevel_changed_(&oldirql,LOWER);
+       if(poid_par_priv->information_buf_len== (sizeof(unsigned long)*3))
+       {
+               if(Adapter->mppriv.act_in_progress == _TRUE)
+               {
+                       status = NDIS_STATUS_NOT_ACCEPTED;
+               }
+               else
+               {
+                       //init workparam
+                       Adapter->mppriv.act_in_progress = _TRUE;
+                       Adapter->mppriv.workparam.bcompleted= _FALSE;
+                       Adapter->mppriv.workparam.act_type = MPT_READ_RF;
+                       Adapter->mppriv.workparam.io_offset = *(unsigned long*)poid_par_priv->information_buf;
+                       Adapter->mppriv.workparam.io_value = 0xcccccccc;
+
+                       //RegOffsetValue        - The offset of RF register to read.
+                       //RegDataWidth  - The data width of RF register to read.
+                       //RegDataValue  - The value to read.
+                       //RegOffsetValue = *((unsigned long*)InformationBuffer);
+                       //RegDataWidth = *((unsigned long*)InformationBuffer+1);
+                       //RegDataValue =  *((unsigned long*)InformationBuffer+2);
+                       if(!rtw_getrfreg_cmd(Adapter,
+                                                       *(unsigned char*)poid_par_priv->information_buf,
+                                                       (unsigned char*)&Adapter->mppriv.workparam.io_value))
+                       {
+                               status = NDIS_STATUS_NOT_ACCEPTED;
+                       }
+               }
+
+
+       }
+       else    {
+               status = NDIS_STATUS_INVALID_LENGTH;
+       }
+       _irqlevel_changed_(&oldirql,RAISE);
+       _func_exit_;
+#endif
+       return status;
+}
+
+//****************  oid_rtl_seg_01_11   section end****************
+
+
+//**************  oid_rtl_seg_03_00 section start **************
+enum _CONNECT_STATE_{
+       CHECKINGSTATUS,
+       ASSOCIATED,
+       ADHOCMODE,
+       NOTASSOCIATED
+};
+
+NDIS_STATUS oid_rt_get_connect_state_hdl(struct oid_par_priv* poid_par_priv)
+{
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+       PADAPTER                padapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+       struct mlme_priv        *pmlmepriv = &(padapter->mlmepriv);
+
+       ULONG ulInfo;
+
+       if(poid_par_priv->type_of_oid != QUERY_OID)
+       {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               return status;
+       }
+
+       // nStatus==0   CheckingStatus
+       // nStatus==1   Associated
+       // nStatus==2   AdHocMode
+       // nStatus==3   NotAssociated
+
+       if(check_fwstate(pmlmepriv, _FW_UNDER_LINKING) == _TRUE)
+               ulInfo = CHECKINGSTATUS;
+       else if(check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)
+               ulInfo = ASSOCIATED;
+       else if(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)== _TRUE)
+               ulInfo = ADHOCMODE;
+       else
+               ulInfo = NOTASSOCIATED ;
+
+       *(ULONG *)poid_par_priv->information_buf = ulInfo;
+       *poid_par_priv->bytes_rw =  poid_par_priv->information_buf_len;
+
+#if 0
+       // Rearrange the order to let the UI still shows connection when scan is in progress
+       RT_TRACE(COMP_OID_QUERY, DBG_LOUD, ("===> Query OID_RT_GET_CONNECT_STATE.\n"));
+       if(pMgntInfo->mAssoc)
+               ulInfo = 1;
+       else if(pMgntInfo->mIbss)
+               ulInfo = 2;
+       else if(pMgntInfo->bScanInProgress)
+               ulInfo = 0;
+       else
+               ulInfo = 3;
+       ulInfoLen = sizeof(ULONG);
+       RT_TRACE(COMP_OID_QUERY, DBG_LOUD, ("<=== Query OID_RT_GET_CONNECT_STATE: %d\n", ulInfo));
+#endif
+
+       return status;
+}
+
+NDIS_STATUS oid_rt_set_default_key_id_hdl(struct oid_par_priv* poid_par_priv)
+{
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+       PADAPTER                padapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+       if(poid_par_priv->type_of_oid != SET_OID)
+       {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               return status;
+       }
+
+       return status;
+}
+//**************  oid_rtl_seg_03_00 section end **************
diff --git a/drivers/net/wireless/realtek/rtl8192cu/core/rtw_ioctl_set.c b/drivers/net/wireless/realtek/rtl8192cu/core/rtw_ioctl_set.c
new file mode 100644 (file)
index 0000000..9d1bcf3
--- /dev/null
@@ -0,0 +1,1493 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#define _RTW_IOCTL_SET_C_
+
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <rtw_ioctl_set.h>
+#include <hal_intf.h>
+
+#ifdef CONFIG_USB_HCI
+#include <usb_osintf.h>
+#include <usb_ops.h>
+#endif
+#ifdef CONFIG_SDIO_HCI
+#include <sdio_osintf.h>
+#endif
+
+extern void indicate_wx_scan_complete_event(_adapter *padapter);
+
+#define IS_MAC_ADDRESS_BROADCAST(addr) \
+( \
+       ( (addr[0] == 0xff) && (addr[1] == 0xff) && \
+               (addr[2] == 0xff) && (addr[3] == 0xff) && \
+               (addr[4] == 0xff) && (addr[5] == 0xff) )  ? _TRUE : _FALSE \
+)
+
+u8 rtw_validate_bssid(u8 *bssid)
+{
+       u8 ret = _TRUE;
+
+       if (is_zero_mac_addr(bssid)
+               || is_broadcast_mac_addr(bssid)
+               || is_multicast_mac_addr(bssid)
+       ) {
+               ret = _FALSE;
+       }
+
+       return ret;
+}
+
+u8 rtw_validate_ssid(NDIS_802_11_SSID *ssid)
+{
+       u8       i;
+       u8      ret=_TRUE;
+
+_func_enter_;
+
+       if (ssid->SsidLength > 32) {
+               RT_TRACE(_module_rtl871x_ioctl_set_c_, _drv_err_, ("ssid length >32\n"));
+               ret= _FALSE;
+               goto exit;
+       }
+
+#ifdef CONFIG_VALIDATE_SSID
+       for(i = 0; i < ssid->SsidLength; i++)
+       {
+               //wifi, printable ascii code must be supported
+               if(!( (ssid->Ssid[i] >= 0x20) && (ssid->Ssid[i] <= 0x7e) )){
+                       RT_TRACE(_module_rtl871x_ioctl_set_c_, _drv_err_, ("ssid has nonprintabl ascii\n"));
+                       ret= _FALSE;
+                       break;
+               }
+       }
+#endif /* CONFIG_VALIDATE_SSID */
+
+exit:
+
+_func_exit_;
+
+       return ret;
+}
+
+u8 rtw_do_join(_adapter * padapter);
+u8 rtw_do_join(_adapter * padapter)
+{
+       _irqL   irqL;
+       _list   *plist, *phead;
+       u8* pibss = NULL;
+       struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
+       _queue  *queue  = &(pmlmepriv->scanned_queue);
+       u8 ret=_SUCCESS;
+
+_func_enter_;
+
+       _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+       phead = get_list_head(queue);
+       plist = get_next(phead);
+
+       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("\n rtw_do_join: phead = %p; plist = %p \n\n\n", phead, plist));
+
+       pmlmepriv->cur_network.join_res = -2;
+
+       set_fwstate(pmlmepriv, _FW_UNDER_LINKING);
+
+       pmlmepriv->pscanned = plist;
+
+       pmlmepriv->to_join = _TRUE;
+
+       if(_rtw_queue_empty(queue)== _TRUE)
+       {
+               _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+               _clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
+
+               //when set_ssid/set_bssid for rtw_do_join(), but scanning queue is empty
+               //we try to issue sitesurvey firstly
+
+               if (pmlmepriv->LinkDetectInfo.bBusyTraffic ==_FALSE
+                       || rtw_to_roaming(padapter) > 0
+               )
+               {
+                       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("rtw_do_join(): site survey if scanned_queue is empty\n."));
+                       // submit site_survey_cmd
+                       if(_SUCCESS!=(ret=rtw_sitesurvey_cmd(padapter, &pmlmepriv->assoc_ssid, 1, NULL, 0)) ) {
+                               RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("rtw_do_join(): site survey return error\n."));
+                       }
+               }
+
+               goto exit;
+       }
+       else
+       {
+               int select_ret;
+               _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+               if((select_ret=rtw_select_and_join_from_scanned_queue(pmlmepriv))==_SUCCESS)
+               {
+                       pmlmepriv->to_join = _FALSE;
+                       _set_timer(&pmlmepriv->assoc_timer, MAX_JOIN_TIMEOUT);
+               }
+               else if(ret == 2)//there is no need to wait for join
+               {
+                       ret = _SUCCESS;
+                       _clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
+                       rtw_indicate_connect(padapter);
+               }
+               else
+               {
+                       if(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)==_TRUE)
+                       {
+                               // submit createbss_cmd to change to a ADHOC_MASTER
+
+                               //pmlmepriv->lock has been acquired by caller...
+                               WLAN_BSSID_EX    *pdev_network = &(padapter->registrypriv.dev_network);
+
+                               pmlmepriv->fw_state = WIFI_ADHOC_MASTER_STATE;
+
+                               pibss = padapter->registrypriv.dev_network.MacAddress;
+
+                               _rtw_memset(&pdev_network->Ssid, 0, sizeof(NDIS_802_11_SSID));
+                               _rtw_memcpy(&pdev_network->Ssid, &pmlmepriv->assoc_ssid, sizeof(NDIS_802_11_SSID));
+
+                               rtw_update_registrypriv_dev_network(padapter);
+
+                               rtw_generate_random_ibss(pibss);
+
+                               if(rtw_createbss_cmd(padapter)!=_SUCCESS)
+                               {
+                                       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("***Error=>do_goin: rtw_createbss_cmd status FAIL*** \n "));
+                                       ret =  _FALSE;
+                                       goto exit;
+                               }
+
+                               pmlmepriv->to_join = _FALSE;
+
+                               RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("***Error=> rtw_select_and_join_from_scanned_queue FAIL under STA_Mode*** \n "));
+
+                       }
+                       else
+                       {
+                               // can't associate ; reset under-linking
+                               _clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
+
+#if 0
+                               if((check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _TRUE))
+                               {
+                                       if(_rtw_memcmp(pmlmepriv->cur_network.network.Ssid.Ssid, pmlmepriv->assoc_ssid.Ssid, pmlmepriv->assoc_ssid.SsidLength))
+                                       {
+                                               // for funk to do roaming
+                                               // funk will reconnect, but funk will not sitesurvey before reconnect
+                                               RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("for funk to do roaming"));
+                                               if(pmlmepriv->sitesurveyctrl.traffic_busy==_FALSE)
+                                                       rtw_sitesurvey_cmd(padapter, &pmlmepriv->assoc_ssid, 1, NULL, 0);
+                                       }
+
+                               }
+#endif
+
+                               //when set_ssid/set_bssid for rtw_do_join(), but there are no desired bss in scanning queue
+                               //we try to issue sitesurvey firstly
+                               if(pmlmepriv->LinkDetectInfo.bBusyTraffic==_FALSE
+                                       || rtw_to_roaming(padapter) > 0
+                               )
+                               {
+                                       //DBG_871X("rtw_do_join() when   no desired bss in scanning queue \n");
+                                       if( _SUCCESS!=(ret=rtw_sitesurvey_cmd(padapter, &pmlmepriv->assoc_ssid, 1, NULL, 0)) ){
+                                               RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("do_join(): site survey return error\n."));
+                                       }
+                               }
+
+
+                       }
+
+               }
+
+       }
+
+exit:
+
+_func_exit_;
+
+       return ret;
+}
+
+#ifdef PLATFORM_WINDOWS
+u8 rtw_pnp_set_power_wakeup(_adapter* padapter)
+{
+       u8 res=_SUCCESS;
+
+_func_enter_;
+
+       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("==>rtw_pnp_set_power_wakeup!!!\n"));
+
+       res = rtw_setstandby_cmd(padapter, 0);
+
+       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("<==rtw_pnp_set_power_wakeup!!!\n"));
+
+_func_exit_;
+
+       return res;
+}
+
+u8 rtw_pnp_set_power_sleep(_adapter* padapter)
+{
+       u8 res=_SUCCESS;
+
+_func_enter_;
+
+       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("==>rtw_pnp_set_power_sleep!!!\n"));
+       //DbgPrint("+rtw_pnp_set_power_sleep\n");
+
+       res = rtw_setstandby_cmd(padapter, 1);
+
+       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("<==rtw_pnp_set_power_sleep!!!\n"));
+
+_func_exit_;
+
+       return res;
+}
+
+u8 rtw_set_802_11_reload_defaults(_adapter * padapter, NDIS_802_11_RELOAD_DEFAULTS reloadDefaults)
+{
+_func_enter_;
+
+       switch( reloadDefaults)
+       {
+               case Ndis802_11ReloadWEPKeys:
+                       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("SetInfo OID_802_11_RELOAD_DEFAULTS : Ndis802_11ReloadWEPKeys\n"));
+                       break;
+       }
+
+       // SecClearAllKeys(Adapter);
+       // 8711 CAM was not for En/Decrypt only
+       // so, we can't clear all keys.
+       // should we disable WPAcfg (ox0088) bit 1-2, instead of clear all CAM
+
+       //TO DO...
+
+_func_exit_;
+
+       return _TRUE;
+}
+
+u8 set_802_11_test(_adapter* padapter, NDIS_802_11_TEST *test)
+{
+       u8 ret=_TRUE;
+
+_func_enter_;
+
+       switch(test->Type)
+       {
+               case 1:
+                       NdisMIndicateStatus(padapter->hndis_adapter, NDIS_STATUS_MEDIA_SPECIFIC_INDICATION, (PVOID)&test->AuthenticationEvent, test->Length - 8);
+                       NdisMIndicateStatusComplete(padapter->hndis_adapter);
+                       break;
+
+               case 2:
+                       NdisMIndicateStatus(padapter->hndis_adapter, NDIS_STATUS_MEDIA_SPECIFIC_INDICATION, (PVOID)&test->RssiTrigger, sizeof(NDIS_802_11_RSSI));
+                       NdisMIndicateStatusComplete(padapter->hndis_adapter);
+                       break;
+
+               default:
+                       ret=_FALSE;
+                       break;
+       }
+
+_func_exit_;
+
+       return ret;
+}
+
+u8     rtw_set_802_11_pmkid(_adapter*  padapter, NDIS_802_11_PMKID *pmkid)
+{
+       u8      ret=_SUCCESS;
+
+       return ret;
+}
+
+#endif
+
+u8 rtw_set_802_11_bssid(_adapter* padapter, u8 *bssid)
+{
+       _irqL irqL;
+       u8 status=_SUCCESS;
+       u32 cur_time = 0;
+
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+
+_func_enter_;
+
+       RT_TRACE(_module_rtl871x_ioctl_set_c_, _drv_notice_,
+                ("+rtw_set_802_11_bssid: bssid="MAC_FMT"\n", MAC_ARG(bssid) ));
+
+       if ((bssid[0]==0x00 && bssid[1]==0x00 && bssid[2]==0x00 && bssid[3]==0x00 && bssid[4]==0x00 &&bssid[5]==0x00) ||
+           (bssid[0]==0xFF && bssid[1]==0xFF && bssid[2]==0xFF && bssid[3]==0xFF && bssid[4]==0xFF &&bssid[5]==0xFF))
+       {
+               status = _FAIL;
+               goto exit;
+       }
+
+       _enter_critical_bh(&pmlmepriv->lock, &irqL);
+
+
+       DBG_871X("Set BSSID under fw_state=0x%08x\n", get_fwstate(pmlmepriv));
+       if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY) == _TRUE) {
+               goto handle_tkip_countermeasure;
+       } else if (check_fwstate(pmlmepriv, _FW_UNDER_LINKING) == _TRUE) {
+               goto release_mlme_lock;
+       }
+
+       if (check_fwstate(pmlmepriv, _FW_LINKED|WIFI_ADHOC_MASTER_STATE) == _TRUE)
+       {
+               RT_TRACE(_module_rtl871x_ioctl_set_c_, _drv_info_, ("set_bssid: _FW_LINKED||WIFI_ADHOC_MASTER_STATE\n"));
+
+               if (_rtw_memcmp(&pmlmepriv->cur_network.network.MacAddress, bssid, ETH_ALEN) == _TRUE)
+               {
+                       if (check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _FALSE)
+                               goto release_mlme_lock;//it means driver is in WIFI_ADHOC_MASTER_STATE, we needn't create bss again.
+               } else {
+                       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("Set BSSID not the same bssid\n"));
+                       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("set_bssid="MAC_FMT"\n", MAC_ARG(bssid) ));
+                       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("cur_bssid="MAC_FMT"\n", MAC_ARG(pmlmepriv->cur_network.network.MacAddress) ));
+
+                       rtw_disassoc_cmd(padapter, 0, _TRUE);
+
+                       if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)
+                               rtw_indicate_disconnect(padapter);
+
+                       rtw_free_assoc_resources(padapter, 1);
+
+                       if ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE)) {
+                               _clr_fwstate_(pmlmepriv, WIFI_ADHOC_MASTER_STATE);
+                               set_fwstate(pmlmepriv, WIFI_ADHOC_STATE);
+                       }
+               }
+       }
+
+handle_tkip_countermeasure:
+       if (rtw_handle_tkip_countermeasure(padapter, __func__) == _FAIL) {
+               status = _FAIL;
+               goto release_mlme_lock;
+       }
+
+       _rtw_memcpy(&pmlmepriv->assoc_bssid, bssid, ETH_ALEN);
+       pmlmepriv->assoc_by_bssid=_TRUE;
+
+       if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY) == _TRUE) {
+               pmlmepriv->to_join = _TRUE;
+       }
+       else {
+               status = rtw_do_join(padapter);
+       }
+
+release_mlme_lock:
+       _exit_critical_bh(&pmlmepriv->lock, &irqL);
+
+exit:
+       RT_TRACE(_module_rtl871x_ioctl_set_c_, _drv_err_,
+               ("rtw_set_802_11_bssid: status=%d\n", status));
+
+_func_exit_;
+
+       return status;
+}
+
+u8 rtw_set_802_11_ssid(_adapter* padapter, NDIS_802_11_SSID *ssid)
+{
+       _irqL irqL;
+       u8 status = _SUCCESS;
+       u32 cur_time = 0;
+
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+       struct wlan_network *pnetwork = &pmlmepriv->cur_network;
+
+_func_enter_;
+
+       RT_TRACE(_module_rtl871x_ioctl_set_c_, _drv_notice_,
+                ("+rtw_set_802_11_ssid: ssid=[%s] fw_state=0x%08x\n",
+                 ssid->Ssid, get_fwstate(pmlmepriv)));
+
+       if(padapter->hw_init_completed==_FALSE){
+               RT_TRACE(_module_rtl871x_ioctl_set_c_, _drv_err_,
+                        ("set_ssid: hw_init_completed==_FALSE=>exit!!!\n"));
+               status = _FAIL;
+               goto exit;
+       }
+
+       _enter_critical_bh(&pmlmepriv->lock, &irqL);
+
+       DBG_871X("Set SSID under fw_state=0x%08x\n", get_fwstate(pmlmepriv));
+       if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY) == _TRUE) {
+               goto handle_tkip_countermeasure;
+       } else if (check_fwstate(pmlmepriv, _FW_UNDER_LINKING) == _TRUE) {
+               goto release_mlme_lock;
+       }
+
+       if (check_fwstate(pmlmepriv, _FW_LINKED|WIFI_ADHOC_MASTER_STATE) == _TRUE)
+       {
+               RT_TRACE(_module_rtl871x_ioctl_set_c_, _drv_info_,
+                        ("set_ssid: _FW_LINKED||WIFI_ADHOC_MASTER_STATE\n"));
+
+               if ((pmlmepriv->assoc_ssid.SsidLength == ssid->SsidLength) &&
+                   (_rtw_memcmp(&pmlmepriv->assoc_ssid.Ssid, ssid->Ssid, ssid->SsidLength) == _TRUE))
+               {
+                       if((check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _FALSE))
+                       {
+                               RT_TRACE(_module_rtl871x_ioctl_set_c_, _drv_err_,
+                                        ("Set SSID is the same ssid, fw_state=0x%08x\n",
+                                         get_fwstate(pmlmepriv)));
+
+                               if(rtw_is_same_ibss(padapter, pnetwork) == _FALSE)
+                               {
+                                       //if in WIFI_ADHOC_MASTER_STATE | WIFI_ADHOC_STATE, create bss or rejoin again
+                                       rtw_disassoc_cmd(padapter, 0, _TRUE);
+
+                                       if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)
+                                               rtw_indicate_disconnect(padapter);
+
+                                       rtw_free_assoc_resources(padapter, 1);
+
+                                       if (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE) {
+                                               _clr_fwstate_(pmlmepriv, WIFI_ADHOC_MASTER_STATE);
+                                               set_fwstate(pmlmepriv, WIFI_ADHOC_STATE);
+                                       }
+                               }
+                               else
+                               {
+                                       goto release_mlme_lock;//it means driver is in WIFI_ADHOC_MASTER_STATE, we needn't create bss again.
+                               }
+                       }
+#ifdef CONFIG_LPS
+                       else {
+                               rtw_lps_ctrl_wk_cmd(padapter, LPS_CTRL_JOINBSS, 1);
+                       }
+#endif
+               }
+               else
+               {
+                       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("Set SSID not the same ssid\n"));
+                       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("set_ssid=[%s] len=0x%x\n", ssid->Ssid, (unsigned int)ssid->SsidLength));
+                       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("assoc_ssid=[%s] len=0x%x\n", pmlmepriv->assoc_ssid.Ssid, (unsigned int)pmlmepriv->assoc_ssid.SsidLength));
+
+                       rtw_disassoc_cmd(padapter, 0, _TRUE);
+
+                       if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)
+                               rtw_indicate_disconnect(padapter);
+
+                       rtw_free_assoc_resources(padapter, 1);
+
+                       if (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE) {
+                               _clr_fwstate_(pmlmepriv, WIFI_ADHOC_MASTER_STATE);
+                               set_fwstate(pmlmepriv, WIFI_ADHOC_STATE);
+                       }
+               }
+       }
+
+handle_tkip_countermeasure:
+       if (rtw_handle_tkip_countermeasure(padapter, __func__) == _FAIL) {
+               status = _FAIL;
+               goto release_mlme_lock;
+       }
+
+       if (rtw_validate_ssid(ssid) == _FALSE) {
+               status = _FAIL;
+               goto release_mlme_lock;
+       }
+
+       _rtw_memcpy(&pmlmepriv->assoc_ssid, ssid, sizeof(NDIS_802_11_SSID));
+       pmlmepriv->assoc_by_bssid=_FALSE;
+
+       if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY) == _TRUE) {
+               pmlmepriv->to_join = _TRUE;
+       }
+       else {
+               status = rtw_do_join(padapter);
+       }
+
+release_mlme_lock:
+       _exit_critical_bh(&pmlmepriv->lock, &irqL);
+
+exit:
+       RT_TRACE(_module_rtl871x_ioctl_set_c_, _drv_err_,
+               ("-rtw_set_802_11_ssid: status=%d\n", status));
+
+_func_exit_;
+
+       return status;
+
+}
+
+u8 rtw_set_802_11_connect(_adapter* padapter, u8 *bssid, NDIS_802_11_SSID *ssid)
+{
+       _irqL irqL;
+       u8 status = _SUCCESS;
+       u32 cur_time = 0;
+       bool bssid_valid = _TRUE;
+       bool ssid_valid = _TRUE;
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+
+_func_enter_;
+
+       if (!ssid || rtw_validate_ssid(ssid) == _FALSE)
+               ssid_valid = _FALSE;
+
+       if (!bssid || rtw_validate_bssid(bssid) == _FALSE)
+               bssid_valid = _FALSE;
+
+       if (ssid_valid == _FALSE && bssid_valid == _FALSE) {
+               DBG_871X(FUNC_ADPT_FMT" ssid:%p, ssid_valid:%d, bssid:%p, bssid_valid:%d\n",
+                       FUNC_ADPT_ARG(padapter), ssid, ssid_valid, bssid, bssid_valid);
+               status = _FAIL;
+               goto exit;
+       }
+
+       if(padapter->hw_init_completed==_FALSE){
+               RT_TRACE(_module_rtl871x_ioctl_set_c_, _drv_err_,
+                        ("set_ssid: hw_init_completed==_FALSE=>exit!!!\n"));
+               status = _FAIL;
+               goto exit;
+       }
+
+       _enter_critical_bh(&pmlmepriv->lock, &irqL);
+
+       LOG_LEVEL(_drv_info_, FUNC_ADPT_FMT"  fw_state=0x%08x\n",
+               FUNC_ADPT_ARG(padapter), get_fwstate(pmlmepriv));
+
+       if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY) == _TRUE) {
+               goto handle_tkip_countermeasure;
+       } else if (check_fwstate(pmlmepriv, _FW_UNDER_LINKING) == _TRUE) {
+               goto release_mlme_lock;
+       }
+
+handle_tkip_countermeasure:
+       if (rtw_handle_tkip_countermeasure(padapter, __func__) == _FAIL) {
+               status = _FAIL;
+               goto release_mlme_lock;
+       }
+
+       if (ssid && ssid_valid)
+               _rtw_memcpy(&pmlmepriv->assoc_ssid, ssid, sizeof(NDIS_802_11_SSID));
+
+       if (bssid && bssid_valid) {
+               _rtw_memcpy(&pmlmepriv->assoc_bssid, bssid, ETH_ALEN);
+               pmlmepriv->assoc_by_bssid = _TRUE;
+       }
+
+       if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY) == _TRUE) {
+               pmlmepriv->to_join = _TRUE;
+       }
+       else {
+               status = rtw_do_join(padapter);
+       }
+
+release_mlme_lock:
+       _exit_critical_bh(&pmlmepriv->lock, &irqL);
+
+exit:
+
+_func_exit_;
+
+       return status;
+}
+
+/*
+rtw_set_802_11_infrastructure_mode(~)
+       ### NOTE:#### (!!!!)
+       MUST TAKE CARE THAT BEFORE CALLING THIS FUNC, YOU SHOULD HAVE LOCKED pmlmepriv->lock and scanned_queue->lock in sequence
+*/
+u8 rtw_set_802_11_infrastructure_mode(_adapter* padapter,
+       NDIS_802_11_NETWORK_INFRASTRUCTURE networktype)
+{
+       _irqL irqL;
+       struct  mlme_priv       *pmlmepriv = &padapter->mlmepriv;
+       struct  wlan_network    *cur_network = &pmlmepriv->cur_network;
+       NDIS_802_11_NETWORK_INFRASTRUCTURE* pold_state = &(cur_network->network.InfrastructureMode);
+
+_func_enter_;
+
+       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_notice_,
+                ("+rtw_set_802_11_infrastructure_mode: old=%d new=%d fw_state=0x%08x\n",
+                 *pold_state, networktype, get_fwstate(pmlmepriv)));
+
+       if(*pold_state != networktype)
+       {
+
+               RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,(" change mode!"));
+               //DBG_871X("change mode, old_mode=%d, new_mode=%d, fw_state=0x%x\n", *pold_state, networktype, get_fwstate(pmlmepriv));
+
+               if(*pold_state==Ndis802_11APMode)
+               {
+                       //change to other mode from Ndis802_11APMode
+                       cur_network->join_res = -1;
+
+#ifdef CONFIG_NATIVEAP_MLME
+                       stop_ap_mode(padapter);
+#endif
+               }
+
+               if((check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE) ||(*pold_state==Ndis802_11IBSS))
+                       rtw_disassoc_cmd(padapter, 0, _TRUE);
+
+               if((check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE) ||
+                       (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)== _TRUE) )
+                       rtw_free_assoc_resources(padapter, 0);
+
+               if((*pold_state == Ndis802_11Infrastructure) ||(*pold_state == Ndis802_11IBSS))
+              {
+                       if(check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)
+                       {
+                               rtw_indicate_disconnect(padapter); //will clr Linked_state; before this function, we must have chked whether  issue dis-assoc_cmd or not
+                       }
+              }
+
+               *pold_state = networktype;
+
+               _clr_fwstate_(pmlmepriv, ~WIFI_NULL_STATE);
+
+               switch(networktype)
+               {
+                       case Ndis802_11IBSS:
+                               set_fwstate(pmlmepriv, WIFI_ADHOC_STATE);
+                               break;
+
+                       case Ndis802_11Infrastructure:
+                               set_fwstate(pmlmepriv, WIFI_STATION_STATE);
+                               break;
+
+                       case Ndis802_11APMode:
+                               set_fwstate(pmlmepriv, WIFI_AP_STATE);
+#ifdef CONFIG_NATIVEAP_MLME
+                               start_ap_mode(padapter);
+                               //rtw_indicate_connect(padapter);
+#endif
+
+                               break;
+
+                       case Ndis802_11AutoUnknown:
+                       case Ndis802_11InfrastructureMax:
+                               break;
+               }
+
+               //SecClearAllKeys(adapter);
+
+               //RT_TRACE(COMP_OID_SET, DBG_LOUD, ("set_infrastructure: fw_state:%x after changing mode\n",
+               //                                                                      get_fwstate(pmlmepriv) ));
+
+       }
+
+_func_exit_;
+
+       return _TRUE;
+}
+
+
+u8 rtw_set_802_11_disassociate(_adapter *padapter)
+{
+       _irqL irqL;
+       struct mlme_priv * pmlmepriv = &padapter->mlmepriv;
+
+_func_enter_;
+
+       _enter_critical_bh(&pmlmepriv->lock, &irqL);
+
+       if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)
+       {
+               RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("MgntActrtw_set_802_11_disassociate: rtw_indicate_disconnect\n"));
+
+               rtw_disassoc_cmd(padapter, 0, _TRUE);
+               rtw_indicate_disconnect(padapter);
+               //modify for CONFIG_IEEE80211W, none 11w can use it
+               rtw_free_assoc_resources_cmd(padapter);
+       }
+
+       _exit_critical_bh(&pmlmepriv->lock, &irqL);
+
+_func_exit_;
+
+       return _TRUE;
+}
+
+u8 rtw_set_802_11_bssid_list_scan(_adapter* padapter, NDIS_802_11_SSID *pssid, int ssid_max_num)
+{
+       _irqL   irqL;
+       struct  mlme_priv               *pmlmepriv= &padapter->mlmepriv;
+       u8      res=_TRUE;
+
+_func_enter_;
+
+       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("+rtw_set_802_11_bssid_list_scan(), fw_state=%x\n", get_fwstate(pmlmepriv)));
+
+       if (padapter == NULL) {
+               res=_FALSE;
+               goto exit;
+       }
+       if (padapter->hw_init_completed==_FALSE){
+               res = _FALSE;
+               RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("\n===rtw_set_802_11_bssid_list_scan:hw_init_completed==_FALSE===\n"));
+               goto exit;
+       }
+
+       if ((check_fwstate(pmlmepriv, _FW_UNDER_SURVEY|_FW_UNDER_LINKING) == _TRUE) ||
+               (pmlmepriv->LinkDetectInfo.bBusyTraffic == _TRUE))
+       {
+               // Scan or linking is in progress, do nothing.
+               RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("rtw_set_802_11_bssid_list_scan fail since fw_state = %x\n", get_fwstate(pmlmepriv)));
+               res = _TRUE;
+
+               if(check_fwstate(pmlmepriv, (_FW_UNDER_SURVEY|_FW_UNDER_LINKING))== _TRUE){
+                       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("\n###_FW_UNDER_SURVEY|_FW_UNDER_LINKING\n\n"));
+               } else {
+                       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("\n###pmlmepriv->sitesurveyctrl.traffic_busy==_TRUE\n\n"));
+               }
+       } else {
+               if (rtw_is_scan_deny(padapter)) {
+                       DBG_871X(FUNC_ADPT_FMT": scan deny\n", FUNC_ADPT_ARG(padapter));
+                       indicate_wx_scan_complete_event(padapter);
+                       return _SUCCESS;
+               }
+
+               _enter_critical_bh(&pmlmepriv->lock, &irqL);
+
+               res = rtw_sitesurvey_cmd(padapter, pssid, ssid_max_num, NULL, 0);
+
+               _exit_critical_bh(&pmlmepriv->lock, &irqL);
+       }
+exit:
+
+_func_exit_;
+
+       return res;
+}
+
+u8 rtw_set_802_11_authentication_mode(_adapter* padapter, NDIS_802_11_AUTHENTICATION_MODE authmode)
+{
+       struct security_priv *psecuritypriv = &padapter->securitypriv;
+       int res;
+       u8 ret;
+
+_func_enter_;
+
+       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("set_802_11_auth.mode(): mode=%x\n", authmode));
+
+       psecuritypriv->ndisauthtype=authmode;
+
+       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("rtw_set_802_11_authentication_mode:psecuritypriv->ndisauthtype=%d", psecuritypriv->ndisauthtype));
+
+       if(psecuritypriv->ndisauthtype>3)
+               psecuritypriv->dot11AuthAlgrthm=dot11AuthAlgrthm_8021X;
+
+       res=rtw_set_auth(padapter,psecuritypriv);
+
+       if(res==_SUCCESS)
+               ret=_TRUE;
+       else
+               ret=_FALSE;
+
+_func_exit_;
+
+       return ret;
+}
+
+u8 rtw_set_802_11_add_wep(_adapter* padapter, NDIS_802_11_WEP *wep){
+
+       u8              bdefaultkey;
+       u8              btransmitkey;
+       sint            keyid,res;
+       struct security_priv* psecuritypriv=&(padapter->securitypriv);
+       u8              ret=_SUCCESS;
+
+_func_enter_;
+
+       bdefaultkey=(wep->KeyIndex & 0x40000000) > 0 ? _FALSE : _TRUE;   //for ???
+       btransmitkey= (wep->KeyIndex & 0x80000000) > 0 ? _TRUE  : _FALSE;       //for ???
+       keyid=wep->KeyIndex & 0x3fffffff;
+
+       if(keyid>4)
+       {
+               RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("MgntActrtw_set_802_11_add_wep:keyid>4=>fail\n"));
+               ret=_FALSE;
+               goto exit;
+       }
+
+       switch(wep->KeyLength)
+       {
+               case 5:
+                       psecuritypriv->dot11PrivacyAlgrthm=_WEP40_;
+                       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("MgntActrtw_set_802_11_add_wep:wep->KeyLength=5\n"));
+                       break;
+               case 13:
+                       psecuritypriv->dot11PrivacyAlgrthm=_WEP104_;
+                       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("MgntActrtw_set_802_11_add_wep:wep->KeyLength=13\n"));
+                       break;
+               default:
+                       psecuritypriv->dot11PrivacyAlgrthm=_NO_PRIVACY_;
+                       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("MgntActrtw_set_802_11_add_wep:wep->KeyLength!=5 or 13\n"));
+                       break;
+       }
+
+       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("rtw_set_802_11_add_wep:befor memcpy, wep->KeyLength=0x%x wep->KeyIndex=0x%x  keyid =%x\n",wep->KeyLength,wep->KeyIndex,keyid));
+
+       _rtw_memcpy(&(psecuritypriv->dot11DefKey[keyid].skey[0]),&(wep->KeyMaterial),wep->KeyLength);
+
+       psecuritypriv->dot11DefKeylen[keyid]=wep->KeyLength;
+
+       psecuritypriv->dot11PrivacyKeyIndex=keyid;
+
+       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("rtw_set_802_11_add_wep:security key material : %x %x %x %x %x %x %x %x %x %x %x %x %x \n",
+               psecuritypriv->dot11DefKey[keyid].skey[0],psecuritypriv->dot11DefKey[keyid].skey[1],psecuritypriv->dot11DefKey[keyid].skey[2],
+               psecuritypriv->dot11DefKey[keyid].skey[3],psecuritypriv->dot11DefKey[keyid].skey[4],psecuritypriv->dot11DefKey[keyid].skey[5],
+               psecuritypriv->dot11DefKey[keyid].skey[6],psecuritypriv->dot11DefKey[keyid].skey[7],psecuritypriv->dot11DefKey[keyid].skey[8],
+               psecuritypriv->dot11DefKey[keyid].skey[9],psecuritypriv->dot11DefKey[keyid].skey[10],psecuritypriv->dot11DefKey[keyid].skey[11],
+               psecuritypriv->dot11DefKey[keyid].skey[12]));
+
+       res=rtw_set_key(padapter,psecuritypriv, keyid, 1);
+
+       if(res==_FAIL)
+               ret= _FALSE;
+exit:
+
+_func_exit_;
+
+       return ret;
+
+}
+
+u8 rtw_set_802_11_remove_wep(_adapter* padapter, u32 keyindex){
+
+       u8 ret=_SUCCESS;
+
+_func_enter_;
+
+       if (keyindex >= 0x80000000 || padapter == NULL){
+
+               ret=_FALSE;
+               goto exit;
+
+       }
+       else
+       {
+               int res;
+               struct security_priv* psecuritypriv=&(padapter->securitypriv);
+               if( keyindex < 4 ){
+
+                       _rtw_memset(&psecuritypriv->dot11DefKey[keyindex], 0, 16);
+
+                       res=rtw_set_key(padapter,psecuritypriv,keyindex, 0);
+
+                       psecuritypriv->dot11DefKeylen[keyindex]=0;
+
+                       if(res==_FAIL)
+                               ret=_FAIL;
+
+               }
+               else
+               {
+                       ret=_FAIL;
+               }
+
+       }
+
+exit:
+
+_func_exit_;
+
+       return ret;
+
+}
+
+u8 rtw_set_802_11_add_key(_adapter* padapter, NDIS_802_11_KEY *key){
+
+       uint    encryptionalgo;
+       u8 * pbssid;
+       struct sta_info *stainfo;
+       u8      bgroup = _FALSE;
+       u8      bgrouptkey = _FALSE;//can be remove later
+       u8      ret=_SUCCESS;
+
+_func_enter_;
+
+       if (((key->KeyIndex & 0x80000000) == 0) && ((key->KeyIndex & 0x40000000) > 0)){
+
+               // It is invalid to clear bit 31 and set bit 30. If the miniport driver encounters this combination,
+               // it must fail the request and return NDIS_STATUS_INVALID_DATA.
+               RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("rtw_set_802_11_add_key: ((key->KeyIndex & 0x80000000) == 0)[=%d] ",(int)(key->KeyIndex & 0x80000000) == 0));
+               RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("rtw_set_802_11_add_key:((key->KeyIndex & 0x40000000) > 0)[=%d]" , (int)(key->KeyIndex & 0x40000000) > 0));
+               RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_info_,("rtw_set_802_11_add_key: key->KeyIndex=%d \n" ,(int)key->KeyIndex));
+               ret= _FAIL;
+               goto exit;
+       }
+
+       if(key->KeyIndex & 0x40000000)
+       {
+               // Pairwise key
+
+               RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("OID_802_11_ADD_KEY: +++++ Pairwise key +++++\n"));
+
+               pbssid=get_bssid(&padapter->mlmepriv);
+               stainfo=rtw_get_stainfo(&padapter->stapriv, pbssid);
+
+               if((stainfo!=NULL)&&(padapter->securitypriv.dot11AuthAlgrthm==dot11AuthAlgrthm_8021X)){
+                       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("OID_802_11_ADD_KEY:( stainfo!=NULL)&&(Adapter->securitypriv.dot11AuthAlgrthm==dot11AuthAlgrthm_8021X)\n"));
+                       encryptionalgo=stainfo->dot118021XPrivacy;
+               }
+               else{
+                       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("OID_802_11_ADD_KEY: stainfo==NULL)||(Adapter->securitypriv.dot11AuthAlgrthm!=dot11AuthAlgrthm_8021X)\n"));
+                       encryptionalgo=padapter->securitypriv.dot11PrivacyAlgrthm;
+               }
+
+               RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("rtw_set_802_11_add_key: (encryptionalgo ==%d)!\n",encryptionalgo ));
+               RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("rtw_set_802_11_add_key: (Adapter->securitypriv.dot11PrivacyAlgrthm ==%d)!\n",padapter->securitypriv.dot11PrivacyAlgrthm));
+               RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("rtw_set_802_11_add_key: (Adapter->securitypriv.dot11AuthAlgrthm ==%d)!\n",padapter->securitypriv.dot11AuthAlgrthm));
+
+               if((stainfo!=NULL)){
+                       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("rtw_set_802_11_add_key: (stainfo->dot118021XPrivacy ==%d)!\n", stainfo->dot118021XPrivacy));
+               }
+
+               if(key->KeyIndex & 0x000000FF){
+                       // The key index is specified in the lower 8 bits by values of zero to 255.
+                       // The key index should be set to zero for a Pairwise key, and the driver should fail with
+                       // NDIS_STATUS_INVALID_DATA if the lower 8 bits is not zero
+                       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,(" key->KeyIndex & 0x000000FF.\n"));
+                       ret= _FAIL;
+                       goto exit;
+               }
+
+               // check BSSID
+               if (IS_MAC_ADDRESS_BROADCAST(key->BSSID) == _TRUE){
+
+                       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("MacAddr_isBcst(key->BSSID)\n"));
+                       ret= _FALSE;
+                       goto exit;
+               }
+
+               // Check key length for TKIP.
+               //if(encryptionAlgorithm == RT_ENC_TKIP_ENCRYPTION && key->KeyLength != 32)
+               if((encryptionalgo== _TKIP_)&& (key->KeyLength != 32)){
+                       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("TKIP KeyLength:0x%x != 32\n", key->KeyLength));
+                       ret=_FAIL;
+                       goto exit;
+
+               }
+
+               // Check key length for AES.
+               if((encryptionalgo== _AES_)&& (key->KeyLength != 16)) {
+                       // For our supplicant, EAPPkt9x.vxd, cannot differentiate TKIP and AES case.
+                       if(key->KeyLength == 32) {
+                               key->KeyLength = 16;
+                       } else {
+                               ret= _FAIL;
+                               goto exit;
+                       }
+               }
+
+               // Check key length for WEP. For NDTEST, 2005.01.27, by rcnjko.
+               if(     (encryptionalgo== _WEP40_|| encryptionalgo== _WEP104_) && (key->KeyLength != 5 || key->KeyLength != 13)) {
+                       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("WEP KeyLength:0x%x != 5 or 13\n", key->KeyLength));
+                       ret=_FAIL;
+                       goto exit;
+               }
+
+               bgroup = _FALSE;
+
+               // Check the pairwise key. Added by Annie, 2005-07-06.
+               RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("------------------------------------------\n"));
+               RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("[Pairwise Key set]\n"));
+               RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("------------------------------------------\n"));
+               RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("key index: 0x%8x(0x%8x)\n", key->KeyIndex,(key->KeyIndex&0x3)));
+               RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("key Length: %d\n", key->KeyLength));
+               RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("------------------------------------------\n"));
+
+       }
+       else
+       {
+               // Group key - KeyIndex(BIT30==0)
+               RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("OID_802_11_ADD_KEY: +++++ Group key +++++\n"));
+
+
+               // when add wep key through add key and didn't assigned encryption type before
+               if((padapter->securitypriv.ndisauthtype<=3)&&(padapter->securitypriv.dot118021XGrpPrivacy==0))
+               {
+                       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("keylen=%d( Adapter->securitypriv.dot11PrivacyAlgrthm=%x  )padapter->securitypriv.dot118021XGrpPrivacy(%x)\n", key->KeyLength,padapter->securitypriv.dot11PrivacyAlgrthm,padapter->securitypriv.dot118021XGrpPrivacy));
+
+                       switch(key->KeyLength)
+                       {
+                               case 5:
+                                       padapter->securitypriv.dot11PrivacyAlgrthm=_WEP40_;
+                                       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("Adapter->securitypriv.dot11PrivacyAlgrthm= %x key->KeyLength=%u\n", padapter->securitypriv.dot11PrivacyAlgrthm,key->KeyLength));
+                                       break;
+                               case 13:
+                                       padapter->securitypriv.dot11PrivacyAlgrthm=_WEP104_;
+                                       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("Adapter->securitypriv.dot11PrivacyAlgrthm= %x key->KeyLength=%u\n", padapter->securitypriv.dot11PrivacyAlgrthm,key->KeyLength));
+                                       break;
+                               default:
+                                       padapter->securitypriv.dot11PrivacyAlgrthm=_NO_PRIVACY_;
+                                       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("Adapter->securitypriv.dot11PrivacyAlgrthm= %x key->KeyLength=%u \n", padapter->securitypriv.dot11PrivacyAlgrthm,key->KeyLength));
+                                       break;
+                       }
+
+                       encryptionalgo=padapter->securitypriv.dot11PrivacyAlgrthm;
+
+                       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,(" Adapter->securitypriv.dot11PrivacyAlgrthm=%x\n", padapter->securitypriv.dot11PrivacyAlgrthm));
+
+               }
+               else
+               {
+                       encryptionalgo=padapter->securitypriv.dot118021XGrpPrivacy;
+                       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("( Adapter->securitypriv.dot11PrivacyAlgrthm=%x  )encryptionalgo(%x)=padapter->securitypriv.dot118021XGrpPrivacy(%x)keylen=%d\n", padapter->securitypriv.dot11PrivacyAlgrthm,encryptionalgo,padapter->securitypriv.dot118021XGrpPrivacy,key->KeyLength));
+
+               }
+
+               if((check_fwstate(&padapter->mlmepriv, WIFI_ADHOC_STATE)==_TRUE) && (IS_MAC_ADDRESS_BROADCAST(key->BSSID) == _FALSE)) {
+                       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,(" IBSS but BSSID is not Broadcast Address.\n"));
+                       ret= _FAIL;
+                       goto exit;
+               }
+
+               // Check key length for TKIP
+               if((encryptionalgo== _TKIP_) && (key->KeyLength != 32)) {
+
+                       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,(" TKIP GTK KeyLength:%u != 32\n", key->KeyLength));
+                       ret= _FAIL;
+                       goto exit;
+
+               } else if(encryptionalgo== _AES_ && (key->KeyLength != 16 && key->KeyLength != 32) ) {
+
+                       // Check key length for AES
+                       // For NDTEST, we allow keylen=32 in this case. 2005.01.27, by rcnjko.
+                       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("<=== SetInfo, OID_802_11_ADD_KEY: AES GTK KeyLength:%u != 16 or 32\n", key->KeyLength));
+                       ret= _FAIL;
+                       goto exit;
+               }
+
+               // Change the key length for EAPPkt9x.vxd. Added by Annie, 2005-11-03.
+               if((encryptionalgo==  _AES_) && (key->KeyLength == 32) ) {
+                       key->KeyLength = 16;
+                       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("AES key length changed: %u\n", key->KeyLength) );
+               }
+
+               if(key->KeyIndex & 0x8000000) {//error ??? 0x8000_0000
+                       bgrouptkey = _TRUE;
+               }
+
+               if((check_fwstate(&padapter->mlmepriv, WIFI_ADHOC_STATE)==_TRUE)&&(check_fwstate(&padapter->mlmepriv, _FW_LINKED)==_TRUE))
+               {
+                       bgrouptkey = _TRUE;
+               }
+
+               bgroup = _TRUE;
+
+               RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("------------------------------------------\n") );
+               RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("[Group Key set]\n") );
+               RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("------------------------------------------\n")) ;
+               RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("key index: 0x%8x(0x%8x)\n", key->KeyIndex,(key->KeyIndex&0x3)));
+               RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("key Length: %d\n", key->KeyLength)) ;
+               RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("------------------------------------------\n"));
+
+       }
+
+       // If WEP encryption algorithm, just call rtw_set_802_11_add_wep().
+       if((padapter->securitypriv.dot11AuthAlgrthm !=dot11AuthAlgrthm_8021X)&&(encryptionalgo== _WEP40_  || encryptionalgo== _WEP104_))
+       {
+               u8 ret;
+               u32 keyindex;
+               u32 len = FIELD_OFFSET(NDIS_802_11_KEY, KeyMaterial) + key->KeyLength;
+               NDIS_802_11_WEP *wep = &padapter->securitypriv.ndiswep;
+
+               RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("OID_802_11_ADD_KEY: +++++ WEP key +++++\n"));
+
+               wep->Length = len;
+               keyindex = key->KeyIndex&0x7fffffff;
+               wep->KeyIndex = keyindex ;
+               wep->KeyLength = key->KeyLength;
+
+               RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("OID_802_11_ADD_KEY:Before memcpy \n"));
+
+               _rtw_memcpy(wep->KeyMaterial, key->KeyMaterial, key->KeyLength);
+               _rtw_memcpy(&(padapter->securitypriv.dot11DefKey[keyindex].skey[0]), key->KeyMaterial, key->KeyLength);
+
+               padapter->securitypriv.dot11DefKeylen[keyindex]=key->KeyLength;
+               padapter->securitypriv.dot11PrivacyKeyIndex=keyindex;
+
+               ret = rtw_set_802_11_add_wep(padapter, wep);
+
+               goto exit;
+
+       }
+
+       if(key->KeyIndex & 0x20000000){
+               // SetRSC
+               RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("OID_802_11_ADD_KEY: +++++ SetRSC+++++\n"));
+               if(bgroup == _TRUE)
+               {
+                       NDIS_802_11_KEY_RSC keysrc=key->KeyRSC & 0x00FFFFFFFFFFFFULL;
+                       _rtw_memcpy(&padapter->securitypriv.dot11Grprxpn, &keysrc, 8);
+               }
+               else
+               {
+                       NDIS_802_11_KEY_RSC keysrc=key->KeyRSC & 0x00FFFFFFFFFFFFULL;
+                       _rtw_memcpy(&padapter->securitypriv.dot11Grptxpn, &keysrc, 8);
+               }
+
+       }
+
+       // Indicate this key idx is used for TX
+       // Save the key in KeyMaterial
+       if(bgroup == _TRUE) // Group transmit key
+       {
+               int res;
+
+               if(bgrouptkey == _TRUE)
+               {
+                       padapter->securitypriv.dot118021XGrpKeyid=(u8)key->KeyIndex;
+               }
+
+               if((key->KeyIndex&0x3) == 0){
+                       ret = _FAIL;
+                       goto exit;
+               }
+
+               _rtw_memset(&padapter->securitypriv.dot118021XGrpKey[(u8)((key->KeyIndex) & 0x03)], 0, 16);
+               _rtw_memset(&padapter->securitypriv.dot118021XGrptxmickey[(u8)((key->KeyIndex) & 0x03)], 0, 16);
+               _rtw_memset(&padapter->securitypriv.dot118021XGrprxmickey[(u8)((key->KeyIndex) & 0x03)], 0, 16);
+
+               if((key->KeyIndex & 0x10000000))
+               {
+                       _rtw_memcpy(&padapter->securitypriv.dot118021XGrptxmickey[(u8)((key->KeyIndex) & 0x03)], key->KeyMaterial + 16, 8);
+                       _rtw_memcpy(&padapter->securitypriv.dot118021XGrprxmickey[(u8)((key->KeyIndex) & 0x03)], key->KeyMaterial + 24, 8);
+
+                       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("\n rtw_set_802_11_add_key:rx mic :0x%02x:0x%02x:0x%02x:0x%02x:0x%02x:0x%02x:0x%02x:0x%02x\n",
+                               padapter->securitypriv.dot118021XGrprxmickey[(u8)((key->KeyIndex) & 0x03)].skey[0],padapter->securitypriv.dot118021XGrprxmickey[(u8)((key->KeyIndex-1) & 0x03)].skey[1],
+                               padapter->securitypriv.dot118021XGrprxmickey[(u8)((key->KeyIndex) & 0x03)].skey[2],padapter->securitypriv.dot118021XGrprxmickey[(u8)((key->KeyIndex-1) & 0x03)].skey[3],
+                               padapter->securitypriv.dot118021XGrprxmickey[(u8)((key->KeyIndex) & 0x03)].skey[4],padapter->securitypriv.dot118021XGrprxmickey[(u8)((key->KeyIndex-1) & 0x03)].skey[5],
+                               padapter->securitypriv.dot118021XGrprxmickey[(u8)((key->KeyIndex) & 0x03)].skey[6],padapter->securitypriv.dot118021XGrprxmickey[(u8)((key->KeyIndex-1) & 0x03)].skey[7]));
+                       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("\n rtw_set_802_11_add_key:set Group mic key!!!!!!!!\n"));
+
+               }
+               else
+               {
+                       _rtw_memcpy(&padapter->securitypriv.dot118021XGrptxmickey[(u8)((key->KeyIndex) & 0x03)], key->KeyMaterial + 24, 8);
+                       _rtw_memcpy(&padapter->securitypriv.dot118021XGrprxmickey[(u8)((key->KeyIndex) & 0x03)], key->KeyMaterial + 16, 8);
+
+                       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("\n rtw_set_802_11_add_key:rx mic :0x%02x:0x%02x:0x%02x:0x%02x:0x%02x:0x%02x:0x%02x:0x%02x\n",
+                               padapter->securitypriv.dot118021XGrprxmickey[(u8)((key->KeyIndex) & 0x03)].skey[0],padapter->securitypriv.dot118021XGrprxmickey[(u8)((key->KeyIndex-1) & 0x03)].skey[1],
+                               padapter->securitypriv.dot118021XGrprxmickey[(u8)((key->KeyIndex) & 0x03)].skey[2],padapter->securitypriv.dot118021XGrprxmickey[(u8)((key->KeyIndex-1) & 0x03)].skey[3],
+                               padapter->securitypriv.dot118021XGrprxmickey[(u8)((key->KeyIndex) & 0x03)].skey[4],padapter->securitypriv.dot118021XGrprxmickey[(u8)((key->KeyIndex-1) & 0x03)].skey[5],
+                               padapter->securitypriv.dot118021XGrprxmickey[(u8)((key->KeyIndex) & 0x03)].skey[6],padapter->securitypriv.dot118021XGrprxmickey[(u8)((key->KeyIndex-1) & 0x03)].skey[7]));
+                       RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("\n rtw_set_802_11_add_key:set Group mic key!!!!!!!!\n"));
+
+               }
+
+               //set group key by index
+               _rtw_memcpy(&padapter->securitypriv.dot118021XGrpKey[(u8)((key->KeyIndex) & 0x03)], key->KeyMaterial, key->KeyLength);
+
+               key->KeyIndex=key->KeyIndex & 0x03;
+
+               padapter->securitypriv.binstallGrpkey=_TRUE;
+
+               padapter->securitypriv.bcheck_grpkey=_FALSE;
+
+               RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("reset group key"));
+
+               res=rtw_set_key(padapter,&padapter->securitypriv, key->KeyIndex, 1);
+
+               if(res==_FAIL)
+                       ret= _FAIL;
+
+               goto exit;
+
+       }
+       else // Pairwise Key
+       {
+               u8 res;
+
+               pbssid=get_bssid(&padapter->mlmepriv);
+               stainfo=rtw_get_stainfo(&padapter->stapriv , pbssid );
+
+               if(stainfo!=NULL)
+               {
+                       _rtw_memset( &stainfo->dot118021x_UncstKey, 0, 16);// clear keybuffer
+
+                       _rtw_memcpy(&stainfo->dot118021x_UncstKey, key->KeyMaterial, 16);
+
+                       if(encryptionalgo== _TKIP_)
+                       {
+                               padapter->securitypriv.busetkipkey=_FALSE;
+
+                               //_set_timer(&padapter->securitypriv.tkip_timer, 50);
+
+                               RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("\n ==========_set_timer\n"));
+
+                               // if TKIP, save the Receive/Transmit MIC key in KeyMaterial[128-255]
+                               if((key->KeyIndex & 0x10000000)){
+                                       _rtw_memcpy(&stainfo->dot11tkiptxmickey, key->KeyMaterial + 16, 8);
+                                       _rtw_memcpy(&stainfo->dot11tkiprxmickey, key->KeyMaterial + 24, 8);
+
+                               } else {
+                                       _rtw_memcpy(&stainfo->dot11tkiptxmickey, key->KeyMaterial + 24, 8);
+                                       _rtw_memcpy(&stainfo->dot11tkiprxmickey, key->KeyMaterial + 16, 8);
+
+                               }
+
+                       }
+                       else if(encryptionalgo == _AES_)
+                       {
+
+                       }
+
+
+                       //Set key to CAM through H2C command
+                       if(bgrouptkey)//never go to here
+                       {
+                               res=rtw_setstakey_cmd(padapter, (unsigned char *)stainfo, _FALSE);
+                               RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("\n rtw_set_802_11_add_key:rtw_setstakey_cmd(group)\n"));
+                       }
+                       else{
+                               res=rtw_setstakey_cmd(padapter, (unsigned char *)stainfo, _TRUE);
+                               RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("\n rtw_set_802_11_add_key:rtw_setstakey_cmd(unicast)\n"));
+                       }
+
+                       if(res ==_FALSE)
+                               ret= _FAIL;
+
+               }
+
+       }
+
+exit:
+
+_func_exit_;
+
+       return ret;
+}
+
+u8 rtw_set_802_11_remove_key(_adapter* padapter, NDIS_802_11_REMOVE_KEY *key){
+
+       uint                            encryptionalgo;
+       u8 * pbssid;
+       struct sta_info *stainfo;
+       u8      bgroup = (key->KeyIndex & 0x4000000) > 0 ? _FALSE: _TRUE;
+       u8      keyIndex = (u8)key->KeyIndex & 0x03;
+       u8      ret=_SUCCESS;
+
+_func_enter_;
+
+       if ((key->KeyIndex & 0xbffffffc) > 0) {
+               ret=_FAIL;
+               goto exit;
+       }
+
+       if (bgroup == _TRUE) {
+               encryptionalgo= padapter->securitypriv.dot118021XGrpPrivacy;
+               // clear group key by index
+               //NdisZeroMemory(Adapter->MgntInfo.SecurityInfo.KeyBuf[keyIndex], MAX_WEP_KEY_LEN);
+               //Adapter->MgntInfo.SecurityInfo.KeyLen[keyIndex] = 0;
+
+               _rtw_memset(&padapter->securitypriv.dot118021XGrpKey[keyIndex], 0, 16);
+
+               //! \todo Send a H2C Command to Firmware for removing this Key in CAM Entry.
+
+       } else {
+
+               pbssid=get_bssid(&padapter->mlmepriv);
+               stainfo=rtw_get_stainfo(&padapter->stapriv , pbssid );
+               if(stainfo !=NULL){
+                       encryptionalgo=stainfo->dot118021XPrivacy;
+
+               // clear key by BSSID
+               _rtw_memset(&stainfo->dot118021x_UncstKey, 0, 16);
+
+               //! \todo Send a H2C Command to Firmware for disable this Key in CAM Entry.
+
+               }
+               else{
+                       ret= _FAIL;
+                       goto exit;
+               }
+       }
+
+exit:
+
+_func_exit_;
+
+       return _TRUE;
+
+}
+
+/*
+* rtw_get_cur_max_rate -
+* @adapter: pointer to _adapter structure
+*
+* Return 0 or 100Kbps
+*/
+u16 rtw_get_cur_max_rate(_adapter *adapter)
+{
+       int     i = 0;
+       u8      *p;
+       u16     rate = 0, max_rate = 0;
+       struct mlme_ext_priv    *pmlmeext = &adapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       struct registry_priv *pregistrypriv = &adapter->registrypriv;
+       struct mlme_priv        *pmlmepriv = &adapter->mlmepriv;
+       WLAN_BSSID_EX  *pcur_bss = &pmlmepriv->cur_network.network;
+#ifdef CONFIG_80211N_HT
+       struct rtw_ieee80211_ht_cap *pht_capie;
+       u8      rf_type = 0;
+       u8      bw_40MHz=0, short_GI_20=0, short_GI_40=0;
+       u16     mcs_rate=0;
+       u32     ht_ielen = 0;
+#endif
+
+#ifdef CONFIG_MP_INCLUDED
+       if (adapter->registrypriv.mp_mode == 1)
+       {
+               if (check_fwstate(pmlmepriv, WIFI_MP_STATE) == _TRUE)
+                       return 0;
+       }
+#endif
+
+       if((check_fwstate(pmlmepriv, _FW_LINKED) != _TRUE)
+               && (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) != _TRUE))
+               return 0;
+
+#ifdef CONFIG_80211N_HT
+       if (pmlmeext->cur_wireless_mode & (WIRELESS_11_24N|WIRELESS_11_5N)) {
+               p = rtw_get_ie(&pcur_bss->IEs[12], _HT_CAPABILITY_IE_, &ht_ielen, pcur_bss->IELength-12);
+               if(p && ht_ielen>0)
+               {
+                       pht_capie = (struct rtw_ieee80211_ht_cap *)(p+2);
+
+                       _rtw_memcpy(&mcs_rate , pht_capie->supp_mcs_set, 2);
+
+                       //bw_40MHz = (pht_capie->cap_info&IEEE80211_HT_CAP_SUP_WIDTH) ? 1:0;
+                       //cur_bwmod is updated by beacon, pmlmeinfo is updated by association response
+                       bw_40MHz = (pmlmeext->cur_bwmode && (HT_INFO_HT_PARAM_REC_TRANS_CHNL_WIDTH & pmlmeinfo->HT_info.infos[0])) ? 1:0;
+
+                       //short_GI = (pht_capie->cap_info&(IEEE80211_HT_CAP_SGI_20|IEEE80211_HT_CAP_SGI_40)) ? 1:0;
+                       short_GI_20 = (pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info&IEEE80211_HT_CAP_SGI_20) ? 1:0;
+                       short_GI_40 = (pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info&IEEE80211_HT_CAP_SGI_40) ? 1:0;
+
+                       rtw_hal_get_hwreg(adapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
+                       max_rate = rtw_mcs_rate(
+                               rf_type,
+                               bw_40MHz & (pregistrypriv->cbw40_enable),
+                               short_GI_20,
+                               short_GI_40,
+                               pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate
+                       );
+               }
+       }
+       else
+#endif //CONFIG_80211N_HT
+       {
+               while( (pcur_bss->SupportedRates[i]!=0) && (pcur_bss->SupportedRates[i]!=0xFF))
+               {
+                       rate = pcur_bss->SupportedRates[i]&0x7F;
+                       if(rate>max_rate)
+                               max_rate = rate;
+                       i++;
+               }
+
+               max_rate = max_rate*10/2;
+       }
+
+       return max_rate;
+}
+
+/*
+* rtw_set_scan_mode -
+* @adapter: pointer to _adapter structure
+* @scan_mode:
+*
+* Return _SUCCESS or _FAIL
+*/
+int rtw_set_scan_mode(_adapter *adapter, RT_SCAN_TYPE scan_mode)
+{
+       if(scan_mode != SCAN_ACTIVE && scan_mode != SCAN_PASSIVE)
+               return _FAIL;
+
+       adapter->mlmepriv.scan_mode = scan_mode;
+
+       return _SUCCESS;
+}
+
+/*
+* rtw_set_channel_plan -
+* @adapter: pointer to _adapter structure
+* @channel_plan:
+*
+* Return _SUCCESS or _FAIL
+*/
+int rtw_set_channel_plan(_adapter *adapter, u8 channel_plan)
+{
+       struct registry_priv *pregistrypriv = &adapter->registrypriv;
+       struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
+
+       //handle by cmd_thread to sync with scan operation
+       return rtw_set_chplan_cmd(adapter, channel_plan, 1);
+}
+
+/*
+* rtw_set_country -
+* @adapter: pointer to _adapter structure
+* @country_code: string of country code
+*
+* Return _SUCCESS or _FAIL
+*/
+int rtw_set_country(_adapter *adapter, const char *country_code)
+{
+       int channel_plan = RT_CHANNEL_DOMAIN_WORLD_WIDE_5G;
+
+       DBG_871X("%s country_code:%s\n", __func__, country_code);
+
+       //TODO: should have a table to match country code and RT_CHANNEL_DOMAIN
+       //TODO: should consider 2-character and 3-character country code
+       if(0 == strcmp(country_code, "US"))
+               channel_plan = RT_CHANNEL_DOMAIN_FCC;
+       else if(0 == strcmp(country_code, "EU"))
+               channel_plan = RT_CHANNEL_DOMAIN_ETSI;
+       else if(0 == strcmp(country_code, "JP"))
+               channel_plan = RT_CHANNEL_DOMAIN_MKK;
+       else if(0 == strcmp(country_code, "CN"))
+               channel_plan = RT_CHANNEL_DOMAIN_CHINA;
+       else
+               DBG_871X("%s unknown country_code:%s\n", __FUNCTION__, country_code);
+
+       return rtw_set_channel_plan(adapter, channel_plan);
+}
+
+/*
+* rtw_set_band -
+* @adapter: pointer to _adapter structure
+* @band: band to set
+*
+* Return _SUCCESS or _FAIL
+*/
+int rtw_set_band(_adapter *adapter, enum _BAND band)
+{
+       if (rtw_band_valid(band)) {
+               DBG_871X(FUNC_ADPT_FMT" band:%d\n", FUNC_ADPT_ARG(adapter), band);
+               adapter->setband = band;
+               return _SUCCESS;
+       }
+
+       DBG_871X_LEVEL(_drv_always_, FUNC_ADPT_FMT" band:%d fail\n", FUNC_ADPT_ARG(adapter), band);
+       return _FAIL;
+}
diff --git a/drivers/net/wireless/realtek/rtl8192cu/core/rtw_iol.c b/drivers/net/wireless/realtek/rtl8192cu/core/rtw_iol.c
new file mode 100644 (file)
index 0000000..20632d6
--- /dev/null
@@ -0,0 +1,262 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+
+#include<rtw_iol.h>
+
+#ifdef CONFIG_IOL
+struct xmit_frame      *rtw_IOL_accquire_xmit_frame(ADAPTER *adapter)
+{
+       struct xmit_frame       *xmit_frame;
+       struct xmit_buf *xmitbuf;
+       struct pkt_attrib       *pattrib;
+       struct xmit_priv        *pxmitpriv = &(adapter->xmitpriv);
+
+#if 1
+       if ((xmit_frame = rtw_alloc_xmitframe(pxmitpriv)) == NULL)
+       {
+               DBG_871X("%s rtw_alloc_xmitframe return null\n", __FUNCTION__);
+               goto exit;
+       }
+
+       if ((xmitbuf = rtw_alloc_xmitbuf(pxmitpriv)) == NULL)
+       {
+               DBG_871X("%s rtw_alloc_xmitbuf return null\n", __FUNCTION__);
+               rtw_free_xmitframe(pxmitpriv, xmit_frame);
+               xmit_frame=NULL;
+               goto exit;
+       }
+
+       xmit_frame->frame_tag = MGNT_FRAMETAG;
+       xmit_frame->pxmitbuf = xmitbuf;
+       xmit_frame->buf_addr = xmitbuf->pbuf;
+       xmitbuf->priv_data = xmit_frame;
+
+       pattrib = &xmit_frame->attrib;
+       update_mgntframe_attrib(adapter, pattrib);
+       pattrib->qsel = 0x10;
+       pattrib->pktlen = pattrib->last_txcmdsz = 0;
+
+#else
+       if ((xmit_frame = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+       {
+               DBG_871X("%s alloc_mgtxmitframe return null\n", __FUNCTION__);
+       }
+       else {
+               pattrib = &xmit_frame->attrib;
+               update_mgntframe_attrib(adapter, pattrib);
+               pattrib->qsel = 0x10;
+               pattrib->pktlen = pattrib->last_txcmdsz = 0;
+       }
+#endif
+
+exit:
+       return xmit_frame;
+}
+
+
+int rtw_IOL_append_cmds(struct xmit_frame *xmit_frame, u8 *IOL_cmds, u32 cmd_len)
+{
+       struct pkt_attrib       *pattrib = &xmit_frame->attrib;
+       u16 buf_offset;
+       u32 ori_len;
+
+//Todo: bulkout without this offset
+#ifdef CONFIG_USB_HCI
+       buf_offset = TXDESC_OFFSET;
+#else
+       buf_offset = 0;
+#endif
+
+       ori_len = buf_offset+pattrib->pktlen;
+
+       //check if the io_buf can accommodate new cmds
+       if(ori_len + cmd_len + 8 > MAX_XMITBUF_SZ) {
+               DBG_871X("%s %u is large than MAX_XMITBUF_SZ:%u, can't accommodate new cmds\n", __FUNCTION__
+                       , ori_len + cmd_len + 8, MAX_XMITBUF_SZ);
+               return _FAIL;
+       }
+
+       _rtw_memcpy(xmit_frame->buf_addr + buf_offset + pattrib->pktlen, IOL_cmds, cmd_len);
+       pattrib->pktlen += cmd_len;
+       pattrib->last_txcmdsz += cmd_len;
+
+       //DBG_871X("%s ori:%u + cmd_len:%u = %u\n", __FUNCTION__, ori_len, cmd_len, buf_offset+pattrib->pktlen);
+
+       return _SUCCESS;
+}
+
+int rtw_IOL_append_LLT_cmd(struct xmit_frame *xmit_frame, u8 page_boundary)
+{
+       IOL_CMD cmd = {0x0, IOL_CMD_LLT, 0x0, 0x0};
+
+       RTW_PUT_BE32((u8*)&cmd.value, (u32)page_boundary);
+
+       return rtw_IOL_append_cmds(xmit_frame, (u8*)&cmd, 8);
+}
+
+int _rtw_IOL_append_WB_cmd(struct xmit_frame *xmit_frame, u16 addr, u8 value)
+{
+       IOL_CMD cmd = {0x0, IOL_CMD_WB_REG, 0x0, 0x0};
+
+       RTW_PUT_BE16((u8*)&cmd.address, (u16)addr);
+       RTW_PUT_BE32((u8*)&cmd.value, (u32)value);
+
+       return rtw_IOL_append_cmds(xmit_frame, (u8*)&cmd, 8);
+}
+
+int _rtw_IOL_append_WW_cmd(struct xmit_frame *xmit_frame, u16 addr, u16 value)
+{
+       IOL_CMD cmd = {0x0, IOL_CMD_WW_REG, 0x0, 0x0};
+
+       RTW_PUT_BE16((u8*)&cmd.address, (u16)addr);
+       RTW_PUT_BE32((u8*)&cmd.value, (u32)value);
+
+       return rtw_IOL_append_cmds(xmit_frame, (u8*)&cmd, 8);
+}
+
+int _rtw_IOL_append_WD_cmd(struct xmit_frame *xmit_frame, u16 addr, u32 value)
+{
+       IOL_CMD cmd = {0x0, IOL_CMD_WD_REG, 0x0, 0x0};
+       u8* pos = (u8 *)&cmd;
+
+       RTW_PUT_BE16((u8*)&cmd.address, (u16)addr);
+       RTW_PUT_BE32((u8*)&cmd.value, (u32)value);
+
+       return rtw_IOL_append_cmds(xmit_frame, (u8*)&cmd, 8);
+}
+
+#ifdef DBG_IO
+int dbg_rtw_IOL_append_WB_cmd(struct xmit_frame *xmit_frame, u16 addr, u8 value, const char *caller, const int line)
+{
+       if (match_write_sniff_ranges(addr, 1))
+               DBG_871X("DBG_IO %s:%d IOL_WB(0x%04x, 0x%02x)\n", caller, line, addr, value);
+
+       return _rtw_IOL_append_WB_cmd(xmit_frame, addr, value);
+}
+
+int dbg_rtw_IOL_append_WW_cmd(struct xmit_frame *xmit_frame, u16 addr, u16 value, const char *caller, const int line)
+{
+       if (match_write_sniff_ranges(addr, 2))
+               DBG_871X("DBG_IO %s:%d IOL_WW(0x%04x, 0x%04x)\n", caller, line, addr, value);
+
+       return _rtw_IOL_append_WW_cmd(xmit_frame, addr, value);
+}
+
+int dbg_rtw_IOL_append_WD_cmd(struct xmit_frame *xmit_frame, u16 addr, u32 value, const char *caller, const int line)
+{
+       if (match_write_sniff_ranges(addr, 4))
+               DBG_871X("DBG_IO %s:%d IOL_WD(0x%04x, 0x%08x)\n", caller, line, addr, value);
+
+       return _rtw_IOL_append_WD_cmd(xmit_frame, addr, value);
+}
+#endif
+
+int rtw_IOL_append_DELAY_US_cmd(struct xmit_frame *xmit_frame, u16 us)
+{
+       IOL_CMD cmd = {0x0, IOL_CMD_DELAY_US, 0x0, 0x0};
+
+       RTW_PUT_BE32((u8*)&cmd.value, (u32)us);
+
+       //DBG_871X("%s %u\n", __FUNCTION__, us);
+
+       return rtw_IOL_append_cmds(xmit_frame, (u8*)&cmd, 8);
+}
+
+int rtw_IOL_append_DELAY_MS_cmd(struct xmit_frame *xmit_frame, u16 ms)
+{
+       IOL_CMD cmd = {0x0, IOL_CMD_DELAY_MS, 0x0, 0x0};
+
+       RTW_PUT_BE32((u8*)&cmd.value, (u32)ms);
+
+       //DBG_871X("%s %u\n", __FUNCTION__, ms);
+
+       return rtw_IOL_append_cmds(xmit_frame, (u8*)&cmd, 8);
+}
+
+int rtw_IOL_append_END_cmd(struct xmit_frame *xmit_frame)
+{
+       struct pkt_attrib       *pattrib = &xmit_frame->attrib;
+       u16 buf_offset;
+       u32 ori_len;
+       IOL_CMD end_cmd = {0x0, IOL_CMD_END, 0x0, 0x0};
+
+//Todo: bulkout without this offset
+#ifdef CONFIG_USB_HCI
+       buf_offset = TXDESC_OFFSET;
+#else
+       buf_offset = 0;
+#endif
+
+       ori_len = buf_offset+pattrib->pktlen;
+
+       //check if the io_buf can accommodate new cmds
+       if(ori_len + 8 > MAX_XMITBUF_SZ) {
+               DBG_871X("%s %u is large than MAX_XMITBUF_SZ:%u, can't accommodate end cmd\n", __FUNCTION__
+                       , ori_len + 8, MAX_XMITBUF_SZ);
+               return _FAIL;
+       }
+
+       _rtw_memcpy(xmit_frame->buf_addr + buf_offset + pattrib->pktlen, (u8*)&end_cmd, 8);
+       pattrib->pktlen += 8;
+       pattrib->last_txcmdsz += 8;
+
+       //DBG_871X("%s ori:%u + 8 = %u\n", __FUNCTION__ , ori_len, buf_offset+pattrib->pktlen);
+
+       return _SUCCESS;
+}
+
+int rtw_IOL_exec_cmds_sync(ADAPTER *adapter, struct xmit_frame *xmit_frame, u32 max_wating_ms)
+{
+       return rtw_hal_iol_cmd(adapter, xmit_frame, max_wating_ms);
+}
+
+int rtw_IOL_exec_cmd_array_sync(PADAPTER adapter, u8 *IOL_cmds, u32 cmd_num, u32 max_wating_ms)
+{
+       struct xmit_frame       *xmit_frame;
+
+       if((xmit_frame=rtw_IOL_accquire_xmit_frame(adapter)) == NULL)
+               return _FAIL;
+
+       if(rtw_IOL_append_cmds(xmit_frame, IOL_cmds, cmd_num<<3) == _FAIL)
+               return _FAIL;
+
+       return rtw_IOL_exec_cmds_sync(adapter, xmit_frame, max_wating_ms);
+}
+
+int rtw_IOL_exec_empty_cmds_sync(ADAPTER *adapter, u32 max_wating_ms)
+{
+       IOL_CMD end_cmd = {0x0, IOL_CMD_END, 0x0, 0x0};
+       return rtw_IOL_exec_cmd_array_sync(adapter, (u8*)&end_cmd, 1, max_wating_ms);
+}
+
+bool rtw_IOL_applied(ADAPTER *adapter)
+{
+       if(adapter->registrypriv.force_iol)
+               return _TRUE;
+
+#ifdef CONFIG_USB_HCI
+       if(!adapter_to_dvobj(adapter)->ishighspeed)
+               return _TRUE;
+#endif
+
+       return _FALSE;
+}
+
+#endif //CONFIG_IOL
diff --git a/drivers/net/wireless/realtek/rtl8192cu/core/rtw_mlme.c b/drivers/net/wireless/realtek/rtl8192cu/core/rtw_mlme.c
new file mode 100644 (file)
index 0000000..2dc13a4
--- /dev/null
@@ -0,0 +1,3966 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#define _RTW_MLME_C_
+
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <recv_osdep.h>
+#include <xmit_osdep.h>
+#include <hal_intf.h>
+#include <mlme_osdep.h>
+#include <sta_info.h>
+#include <wifi.h>
+#include <wlan_bssdef.h>
+#include <rtw_ioctl_set.h>
+
+extern void indicate_wx_scan_complete_event(_adapter *padapter);
+extern u8 rtw_do_join(_adapter * padapter);
+
+#ifdef CONFIG_DISABLE_MCS13TO15
+extern unsigned char   MCS_rate_2R_MCS13TO15_OFF[16];
+extern unsigned char   MCS_rate_2R[16];
+#else //CONFIG_DISABLE_MCS13TO15
+extern unsigned char   MCS_rate_2R[16];
+#endif //CONFIG_DISABLE_MCS13TO15
+extern unsigned char   MCS_rate_1R[16];
+
+sint   _rtw_init_mlme_priv (_adapter* padapter)
+{
+       sint    i;
+       u8      *pbuf;
+       struct wlan_network     *pnetwork;
+       struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
+       sint    res = _SUCCESS;
+
+_func_enter_;
+
+       // We don't need to memset padapter->XXX to zero, because adapter is allocated by rtw_zvmalloc().
+       //_rtw_memset((u8 *)pmlmepriv, 0, sizeof(struct mlme_priv));
+
+       pmlmepriv->nic_hdl = (u8 *)padapter;
+
+       pmlmepriv->pscanned = NULL;
+       pmlmepriv->fw_state = 0;
+       pmlmepriv->cur_network.network.InfrastructureMode = Ndis802_11AutoUnknown;
+       pmlmepriv->scan_mode=SCAN_ACTIVE;// 1: active, 0: pasive. Maybe someday we should rename this varable to "active_mode" (Jeff)
+
+       _rtw_spinlock_init(&(pmlmepriv->lock));
+       _rtw_init_queue(&(pmlmepriv->free_bss_pool));
+       _rtw_init_queue(&(pmlmepriv->scanned_queue));
+
+       set_scanned_network_val(pmlmepriv, 0);
+
+       _rtw_memset(&pmlmepriv->assoc_ssid,0,sizeof(NDIS_802_11_SSID));
+
+       pbuf = rtw_zvmalloc(MAX_BSS_CNT * (sizeof(struct wlan_network)));
+
+       if (pbuf == NULL){
+               res=_FAIL;
+               goto exit;
+       }
+       pmlmepriv->free_bss_buf = pbuf;
+
+       pnetwork = (struct wlan_network *)pbuf;
+
+       for(i = 0; i < MAX_BSS_CNT; i++)
+       {
+               _rtw_init_listhead(&(pnetwork->list));
+
+               rtw_list_insert_tail(&(pnetwork->list), &(pmlmepriv->free_bss_pool.queue));
+
+               pnetwork++;
+       }
+
+       //allocate DMA-able/Non-Page memory for cmd_buf and rsp_buf
+
+       rtw_clear_scan_deny(padapter);
+
+       rtw_init_mlme_timer(padapter);
+
+exit:
+
+_func_exit_;
+
+       return res;
+}
+
+void rtw_mfree_mlme_priv_lock (struct mlme_priv *pmlmepriv);
+void rtw_mfree_mlme_priv_lock (struct mlme_priv *pmlmepriv)
+{
+       _rtw_spinlock_free(&pmlmepriv->lock);
+       _rtw_spinlock_free(&(pmlmepriv->free_bss_pool.lock));
+       _rtw_spinlock_free(&(pmlmepriv->scanned_queue.lock));
+}
+
+static void rtw_free_mlme_ie_data(u8 **ppie, u32 *plen)
+{
+       if(*ppie)
+       {
+               rtw_mfree(*ppie, *plen);
+               *plen = 0;
+               *ppie=NULL;
+       }
+}
+
+void rtw_free_mlme_priv_ie_data(struct mlme_priv *pmlmepriv)
+{
+#if defined (CONFIG_AP_MODE) && defined (CONFIG_NATIVEAP_MLME)
+       rtw_buf_free(&pmlmepriv->assoc_req, &pmlmepriv->assoc_req_len);
+       rtw_buf_free(&pmlmepriv->assoc_rsp, &pmlmepriv->assoc_rsp_len);
+       rtw_free_mlme_ie_data(&pmlmepriv->wps_beacon_ie, &pmlmepriv->wps_beacon_ie_len);
+       rtw_free_mlme_ie_data(&pmlmepriv->wps_probe_req_ie, &pmlmepriv->wps_probe_req_ie_len);
+       rtw_free_mlme_ie_data(&pmlmepriv->wps_probe_resp_ie, &pmlmepriv->wps_probe_resp_ie_len);
+       rtw_free_mlme_ie_data(&pmlmepriv->wps_assoc_resp_ie, &pmlmepriv->wps_assoc_resp_ie_len);
+
+       rtw_free_mlme_ie_data(&pmlmepriv->p2p_beacon_ie, &pmlmepriv->p2p_beacon_ie_len);
+       rtw_free_mlme_ie_data(&pmlmepriv->p2p_probe_req_ie, &pmlmepriv->p2p_probe_req_ie_len);
+       rtw_free_mlme_ie_data(&pmlmepriv->p2p_probe_resp_ie, &pmlmepriv->p2p_probe_resp_ie_len);
+       rtw_free_mlme_ie_data(&pmlmepriv->p2p_go_probe_resp_ie, &pmlmepriv->p2p_go_probe_resp_ie_len);
+       rtw_free_mlme_ie_data(&pmlmepriv->p2p_assoc_req_ie, &pmlmepriv->p2p_assoc_req_ie_len);
+#endif
+
+#if defined(CONFIG_WFD) && defined(CONFIG_IOCTL_CFG80211)
+       rtw_free_mlme_ie_data(&pmlmepriv->wfd_beacon_ie, &pmlmepriv->wfd_beacon_ie_len);
+       rtw_free_mlme_ie_data(&pmlmepriv->wfd_probe_req_ie, &pmlmepriv->wfd_probe_req_ie_len);
+       rtw_free_mlme_ie_data(&pmlmepriv->wfd_probe_resp_ie, &pmlmepriv->wfd_probe_resp_ie_len);
+       rtw_free_mlme_ie_data(&pmlmepriv->wfd_go_probe_resp_ie, &pmlmepriv->wfd_go_probe_resp_ie_len);
+       rtw_free_mlme_ie_data(&pmlmepriv->wfd_assoc_req_ie, &pmlmepriv->wfd_assoc_req_ie_len);
+#endif
+
+}
+
+void _rtw_free_mlme_priv (struct mlme_priv *pmlmepriv)
+{
+_func_enter_;
+
+       rtw_free_mlme_priv_ie_data(pmlmepriv);
+
+       if(pmlmepriv){
+               rtw_mfree_mlme_priv_lock (pmlmepriv);
+
+               if (pmlmepriv->free_bss_buf) {
+                       rtw_vmfree(pmlmepriv->free_bss_buf, MAX_BSS_CNT * sizeof(struct wlan_network));
+               }
+       }
+_func_exit_;
+}
+
+sint   _rtw_enqueue_network(_queue *queue, struct wlan_network *pnetwork)
+{
+       _irqL irqL;
+
+_func_enter_;
+
+       if (pnetwork == NULL)
+               goto exit;
+
+       _enter_critical_bh(&queue->lock, &irqL);
+
+       rtw_list_insert_tail(&pnetwork->list, &queue->queue);
+
+       _exit_critical_bh(&queue->lock, &irqL);
+
+exit:
+
+_func_exit_;
+
+       return _SUCCESS;
+}
+
+struct wlan_network *_rtw_dequeue_network(_queue *queue)
+{
+       _irqL irqL;
+
+       struct wlan_network *pnetwork;
+
+_func_enter_;
+
+       _enter_critical_bh(&queue->lock, &irqL);
+
+       if (_rtw_queue_empty(queue) == _TRUE)
+
+               pnetwork = NULL;
+
+       else
+       {
+               pnetwork = LIST_CONTAINOR(get_next(&queue->queue), struct wlan_network, list);
+
+               rtw_list_delete(&(pnetwork->list));
+       }
+
+       _exit_critical_bh(&queue->lock, &irqL);
+
+_func_exit_;
+
+       return pnetwork;
+}
+
+struct wlan_network *_rtw_alloc_network(struct mlme_priv *pmlmepriv )//(_queue *free_queue)
+{
+       _irqL   irqL;
+       struct  wlan_network    *pnetwork;
+       _queue *free_queue = &pmlmepriv->free_bss_pool;
+       _list* plist = NULL;
+
+_func_enter_;
+
+       _enter_critical_bh(&free_queue->lock, &irqL);
+
+       if (_rtw_queue_empty(free_queue) == _TRUE) {
+               pnetwork=NULL;
+               goto exit;
+       }
+       plist = get_next(&(free_queue->queue));
+
+       pnetwork = LIST_CONTAINOR(plist , struct wlan_network, list);
+
+       rtw_list_delete(&pnetwork->list);
+
+       RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("_rtw_alloc_network: ptr=%p\n", plist));
+       pnetwork->network_type = 0;
+       pnetwork->fixed = _FALSE;
+       pnetwork->last_scanned = rtw_get_current_time();
+       pnetwork->aid=0;
+       pnetwork->join_res=0;
+
+       pmlmepriv->num_of_scanned ++;
+
+exit:
+       _exit_critical_bh(&free_queue->lock, &irqL);
+
+_func_exit_;
+
+       return pnetwork;
+}
+
+void _rtw_free_network(struct  mlme_priv *pmlmepriv ,struct wlan_network *pnetwork, u8 isfreeall)
+{
+       u32 curr_time, delta_time;
+       u32 lifetime = SCANQUEUE_LIFETIME;
+       _irqL irqL;
+       _queue *free_queue = &(pmlmepriv->free_bss_pool);
+
+_func_enter_;
+
+       if (pnetwork == NULL)
+               goto exit;
+
+       if (pnetwork->fixed == _TRUE)
+               goto exit;
+
+       curr_time = rtw_get_current_time();
+
+       if ( (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)==_TRUE ) ||
+               (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)==_TRUE ) )
+               lifetime = 1;
+
+       if(!isfreeall)
+       {
+#ifdef PLATFORM_WINDOWS
+
+               delta_time = (curr_time -pnetwork->last_scanned)/10;
+
+               if(delta_time  < lifetime*1000000)// unit:usec
+               {
+                       goto exit;
+               }
+
+#endif
+
+#ifdef PLATFORM_LINUX
+
+               delta_time = (curr_time -pnetwork->last_scanned)/HZ;
+
+               if(delta_time < lifetime)// unit:sec
+               {
+                       goto exit;
+               }
+
+#endif
+
+#ifdef PLATFORM_FREEBSD
+        //i think needs to check again
+               delta_time = (curr_time -pnetwork->last_scanned)/hz;
+
+               if(delta_time < lifetime)// unit:sec
+               {
+                       goto exit;
+               }
+
+#endif
+       }
+
+       _enter_critical_bh(&free_queue->lock, &irqL);
+
+       rtw_list_delete(&(pnetwork->list));
+
+       rtw_list_insert_tail(&(pnetwork->list),&(free_queue->queue));
+
+       pmlmepriv->num_of_scanned --;
+
+
+       //DBG_871X("_rtw_free_network:SSID=%s\n", pnetwork->network.Ssid.Ssid);
+
+       _exit_critical_bh(&free_queue->lock, &irqL);
+
+exit:
+
+_func_exit_;
+
+}
+
+void _rtw_free_network_nolock(struct   mlme_priv *pmlmepriv, struct wlan_network *pnetwork)
+{
+
+       _queue *free_queue = &(pmlmepriv->free_bss_pool);
+
+_func_enter_;
+
+       if (pnetwork == NULL)
+               goto exit;
+
+       if (pnetwork->fixed == _TRUE)
+               goto exit;
+
+       //_enter_critical(&free_queue->lock, &irqL);
+
+       rtw_list_delete(&(pnetwork->list));
+
+       rtw_list_insert_tail(&(pnetwork->list), get_list_head(free_queue));
+
+       pmlmepriv->num_of_scanned --;
+
+       //_exit_critical(&free_queue->lock, &irqL);
+
+exit:
+
+_func_exit_;
+
+}
+
+
+/*
+       return the wlan_network with the matching addr
+
+       Shall be calle under atomic context... to avoid possible racing condition...
+*/
+struct wlan_network *_rtw_find_network(_queue *scanned_queue, u8 *addr)
+{
+
+       //_irqL irqL;
+       _list   *phead, *plist;
+       struct  wlan_network *pnetwork = NULL;
+       u8 zero_addr[ETH_ALEN] = {0,0,0,0,0,0};
+
+_func_enter_;
+
+       if(_rtw_memcmp(zero_addr, addr, ETH_ALEN)){
+               pnetwork=NULL;
+               goto exit;
+       }
+
+       //_enter_critical_bh(&scanned_queue->lock, &irqL);
+
+       phead = get_list_head(scanned_queue);
+       plist = get_next(phead);
+
+       while (plist != phead)
+       {
+                pnetwork = LIST_CONTAINOR(plist, struct wlan_network ,list);
+
+               if (_rtw_memcmp(addr, pnetwork->network.MacAddress, ETH_ALEN) == _TRUE)
+                        break;
+
+               plist = get_next(plist);
+        }
+
+       if(plist == phead)
+               pnetwork = NULL;
+
+       //_exit_critical_bh(&scanned_queue->lock, &irqL);
+
+exit:
+
+_func_exit_;
+
+       return pnetwork;
+
+}
+
+
+void _rtw_free_network_queue(_adapter *padapter, u8 isfreeall)
+{
+       _irqL irqL;
+       _list *phead, *plist;
+       struct wlan_network *pnetwork;
+       struct mlme_priv* pmlmepriv = &padapter->mlmepriv;
+       _queue *scanned_queue = &pmlmepriv->scanned_queue;
+
+_func_enter_;
+
+
+       _enter_critical_bh(&scanned_queue->lock, &irqL);
+
+       phead = get_list_head(scanned_queue);
+       plist = get_next(phead);
+
+       while (rtw_end_of_queue_search(phead, plist) == _FALSE)
+       {
+
+               pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
+
+               plist = get_next(plist);
+
+               _rtw_free_network(pmlmepriv,pnetwork, isfreeall);
+
+       }
+
+       _exit_critical_bh(&scanned_queue->lock, &irqL);
+
+_func_exit_;
+
+}
+
+
+
+
+sint rtw_if_up(_adapter *padapter)     {
+
+       sint res;
+_func_enter_;
+
+       if( padapter->bDriverStopped || padapter->bSurpriseRemoved ||
+               (check_fwstate(&padapter->mlmepriv, _FW_LINKED)== _FALSE)){
+               RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("rtw_if_up:bDriverStopped(%d) OR bSurpriseRemoved(%d)", padapter->bDriverStopped, padapter->bSurpriseRemoved));
+               res=_FALSE;
+       }
+       else
+               res=  _TRUE;
+
+_func_exit_;
+       return res;
+}
+
+
+void rtw_generate_random_ibss(u8* pibss)
+{
+       u32     curtime = rtw_get_current_time();
+
+_func_enter_;
+       pibss[0] = 0x02;  //in ad-hoc mode bit1 must set to 1
+       pibss[1] = 0x11;
+       pibss[2] = 0x87;
+       pibss[3] = (u8)(curtime & 0xff) ;//p[0];
+       pibss[4] = (u8)((curtime>>8) & 0xff) ;//p[1];
+       pibss[5] = (u8)((curtime>>16) & 0xff) ;//p[2];
+_func_exit_;
+       return;
+}
+
+u8 *rtw_get_capability_from_ie(u8 *ie)
+{
+       return (ie + 8 + 2);
+}
+
+
+u16 rtw_get_capability(WLAN_BSSID_EX *bss)
+{
+       u16     val;
+_func_enter_;
+
+       _rtw_memcpy((u8 *)&val, rtw_get_capability_from_ie(bss->IEs), 2);
+
+_func_exit_;
+       return le16_to_cpu(val);
+}
+
+u8 *rtw_get_timestampe_from_ie(u8 *ie)
+{
+       return (ie + 0);
+}
+
+u8 *rtw_get_beacon_interval_from_ie(u8 *ie)
+{
+       return (ie + 8);
+}
+
+
+int    rtw_init_mlme_priv (_adapter *padapter)//(struct        mlme_priv *pmlmepriv)
+{
+       int     res;
+_func_enter_;
+       res = _rtw_init_mlme_priv(padapter);// (pmlmepriv);
+_func_exit_;
+       return res;
+}
+
+void rtw_free_mlme_priv (struct mlme_priv *pmlmepriv)
+{
+_func_enter_;
+       RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("rtw_free_mlme_priv\n"));
+       _rtw_free_mlme_priv (pmlmepriv);
+_func_exit_;
+}
+
+int    rtw_enqueue_network(_queue *queue, struct wlan_network *pnetwork);
+int    rtw_enqueue_network(_queue *queue, struct wlan_network *pnetwork)
+{
+       int     res;
+_func_enter_;
+       res = _rtw_enqueue_network(queue, pnetwork);
+_func_exit_;
+       return res;
+}
+
+
+#ifndef PLATFORM_FREEBSD //Baron
+static struct  wlan_network *rtw_dequeue_network(_queue *queue)
+{
+       struct wlan_network *pnetwork;
+_func_enter_;
+       pnetwork = _rtw_dequeue_network(queue);
+_func_exit_;
+       return pnetwork;
+}
+#endif //PLATFORM_FREEBSD
+
+struct wlan_network *rtw_alloc_network(struct  mlme_priv *pmlmepriv );
+struct wlan_network *rtw_alloc_network(struct  mlme_priv *pmlmepriv )//(_queue *free_queue)
+{
+       struct  wlan_network    *pnetwork;
+_func_enter_;
+       pnetwork = _rtw_alloc_network(pmlmepriv);
+_func_exit_;
+       return pnetwork;
+}
+
+void rtw_free_network(struct mlme_priv *pmlmepriv, struct      wlan_network *pnetwork, u8 is_freeall);
+void rtw_free_network(struct mlme_priv *pmlmepriv, struct      wlan_network *pnetwork, u8 is_freeall)//(struct wlan_network *pnetwork, _queue  *free_queue)
+{
+_func_enter_;
+       RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("rtw_free_network==> ssid = %s \n\n" , pnetwork->network.Ssid.Ssid));
+       _rtw_free_network(pmlmepriv, pnetwork, is_freeall);
+_func_exit_;
+}
+
+void rtw_free_network_nolock(struct mlme_priv *pmlmepriv, struct wlan_network *pnetwork );
+void rtw_free_network_nolock(struct mlme_priv *pmlmepriv, struct wlan_network *pnetwork )
+{
+_func_enter_;
+       //RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("rtw_free_network==> ssid = %s \n\n" , pnetwork->network.Ssid.Ssid));
+       _rtw_free_network_nolock(pmlmepriv, pnetwork);
+_func_exit_;
+}
+
+
+void rtw_free_network_queue(_adapter* dev, u8 isfreeall)
+{
+_func_enter_;
+       _rtw_free_network_queue(dev, isfreeall);
+_func_exit_;
+}
+
+/*
+       return the wlan_network with the matching addr
+
+       Shall be calle under atomic context... to avoid possible racing condition...
+*/
+struct wlan_network *rtw_find_network(_queue *scanned_queue, u8 *addr)
+{
+       struct  wlan_network *pnetwork = _rtw_find_network(scanned_queue, addr);
+
+       return pnetwork;
+}
+
+int rtw_is_same_ibss(_adapter *adapter, struct wlan_network *pnetwork)
+{
+       int ret=_TRUE;
+       struct security_priv *psecuritypriv = &adapter->securitypriv;
+
+       if ( (psecuritypriv->dot11PrivacyAlgrthm != _NO_PRIVACY_ ) &&
+                   ( pnetwork->network.Privacy == 0 ) )
+       {
+               ret=_FALSE;
+       }
+       else if((psecuritypriv->dot11PrivacyAlgrthm == _NO_PRIVACY_ ) &&
+                ( pnetwork->network.Privacy == 1 ) )
+       {
+               ret=_FALSE;
+       }
+       else
+       {
+               ret=_TRUE;
+       }
+
+       return ret;
+
+}
+
+inline int is_same_ess(WLAN_BSSID_EX *a, WLAN_BSSID_EX *b);
+inline int is_same_ess(WLAN_BSSID_EX *a, WLAN_BSSID_EX *b)
+{
+       //RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("(%s,%d)(%s,%d)\n",
+       //              a->Ssid.Ssid,a->Ssid.SsidLength,b->Ssid.Ssid,b->Ssid.SsidLength));
+       return (a->Ssid.SsidLength == b->Ssid.SsidLength)
+               &&  _rtw_memcmp(a->Ssid.Ssid, b->Ssid.Ssid, a->Ssid.SsidLength)==_TRUE;
+}
+
+int is_same_network(WLAN_BSSID_EX *src, WLAN_BSSID_EX *dst)
+{
+        u16 s_cap, d_cap;
+
+_func_enter_;
+
+#ifdef PLATFORM_OS_XP
+        if ( ((uint)dst) <= 0x7fffffff ||
+               ((uint)src) <= 0x7fffffff ||
+               ((uint)&s_cap) <= 0x7fffffff ||
+               ((uint)&d_cap) <= 0x7fffffff)
+       {
+               RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("\n@@@@ error address of dst\n"));
+
+               KeBugCheckEx(0x87110000, (ULONG_PTR)dst, (ULONG_PTR)src,(ULONG_PTR)&s_cap, (ULONG_PTR)&d_cap);
+
+               return _FALSE;
+       }
+#endif
+
+
+       _rtw_memcpy((u8 *)&s_cap, rtw_get_capability_from_ie(src->IEs), 2);
+       _rtw_memcpy((u8 *)&d_cap, rtw_get_capability_from_ie(dst->IEs), 2);
+
+
+       s_cap = le16_to_cpu(s_cap);
+       d_cap = le16_to_cpu(d_cap);
+
+_func_exit_;
+
+       return ((src->Ssid.SsidLength == dst->Ssid.SsidLength) &&
+               //      (src->Configuration.DSConfig == dst->Configuration.DSConfig) &&
+                       ( (_rtw_memcmp(src->MacAddress, dst->MacAddress, ETH_ALEN)) == _TRUE) &&
+                       ( (_rtw_memcmp(src->Ssid.Ssid, dst->Ssid.Ssid, src->Ssid.SsidLength)) == _TRUE) &&
+                       ((s_cap & WLAN_CAPABILITY_IBSS) ==
+                       (d_cap & WLAN_CAPABILITY_IBSS)) &&
+                       ((s_cap & WLAN_CAPABILITY_BSS) ==
+                       (d_cap & WLAN_CAPABILITY_BSS)));
+
+}
+
+struct wlan_network    * rtw_get_oldest_wlan_network(_queue *scanned_queue)
+{
+       _list   *plist, *phead;
+
+
+       struct  wlan_network    *pwlan = NULL;
+       struct  wlan_network    *oldest = NULL;
+_func_enter_;
+       phead = get_list_head(scanned_queue);
+
+       plist = get_next(phead);
+
+       while(1)
+       {
+
+               if (rtw_end_of_queue_search(phead,plist)== _TRUE)
+                       break;
+
+               pwlan= LIST_CONTAINOR(plist, struct wlan_network, list);
+
+               if(pwlan->fixed!=_TRUE)
+               {
+                       if (oldest == NULL ||time_after(oldest->last_scanned, pwlan->last_scanned))
+                               oldest = pwlan;
+               }
+
+               plist = get_next(plist);
+       }
+_func_exit_;
+       return oldest;
+
+}
+
+static void update_network(WLAN_BSSID_EX *dst, WLAN_BSSID_EX *src,
+       _adapter * padapter, bool update_ie)
+{
+       u8 ss_ori = dst->PhyInfo.SignalStrength;
+       u8 sq_ori = dst->PhyInfo.SignalQuality;
+       long rssi_ori = dst->Rssi;
+
+       u8 ss_smp = src->PhyInfo.SignalStrength;
+       u8 sq_smp = src->PhyInfo.SignalQuality;
+       long rssi_smp = src->Rssi;
+
+       u8 ss_final;
+       u8 sq_final;
+       long rssi_final;
+
+_func_enter_;
+
+#ifdef CONFIG_ANTENNA_DIVERSITY
+       rtw_hal_antdiv_rssi_compared(padapter, dst, src); //this will update src.Rssi, need consider again
+#endif
+
+       #if defined(DBG_RX_SIGNAL_DISPLAY_SSID_MONITORED) && 1
+       if(strcmp(dst->Ssid.Ssid, DBG_RX_SIGNAL_DISPLAY_SSID_MONITORED) == 0) {
+               DBG_871X(FUNC_ADPT_FMT" %s("MAC_FMT", ch%u) ss_ori:%3u, sq_ori:%3u, rssi_ori:%3ld, ss_smp:%3u, sq_smp:%3u, rssi_smp:%3ld\n"
+                       , FUNC_ADPT_ARG(padapter)
+                       , src->Ssid.Ssid, MAC_ARG(src->MacAddress), src->Configuration.DSConfig
+                       ,ss_ori, sq_ori, rssi_ori
+                       ,ss_smp, sq_smp, rssi_smp
+               );
+       }
+       #endif
+
+       /* The rule below is 1/5 for sample value, 4/5 for history value */
+       if (check_fwstate(&padapter->mlmepriv, _FW_LINKED) && is_same_network(&(padapter->mlmepriv.cur_network.network), src)) {
+               /* Take the recvpriv's value for the connected AP*/
+               ss_final = padapter->recvpriv.signal_strength;
+               sq_final = padapter->recvpriv.signal_qual;
+               /* the rssi value here is undecorated, and will be used for antenna diversity */
+               if(sq_smp != 101) /* from the right channel */
+                       rssi_final = (src->Rssi+dst->Rssi*4)/5;
+               else
+                       rssi_final = rssi_ori;
+       }
+       else {
+               if(sq_smp != 101) { /* from the right channel */
+                       ss_final = ((u32)(src->PhyInfo.SignalStrength)+(u32)(dst->PhyInfo.SignalStrength)*4)/5;
+                       sq_final = ((u32)(src->PhyInfo.SignalQuality)+(u32)(dst->PhyInfo.SignalQuality)*4)/5;
+                       rssi_final = (src->Rssi+dst->Rssi*4)/5;
+               } else {
+                       /* bss info not receving from the right channel, use the original RX signal infos */
+                       ss_final = dst->PhyInfo.SignalStrength;
+                       sq_final = dst->PhyInfo.SignalQuality;
+                       rssi_final = dst->Rssi;
+               }
+
+       }
+
+       if (update_ie)
+               _rtw_memcpy((u8 *)dst, (u8 *)src, get_WLAN_BSSID_EX_sz(src));
+
+       dst->PhyInfo.SignalStrength = ss_final;
+       dst->PhyInfo.SignalQuality = sq_final;
+       dst->Rssi = rssi_final;
+
+       #if defined(DBG_RX_SIGNAL_DISPLAY_SSID_MONITORED) && 1
+       if(strcmp(dst->Ssid.Ssid, DBG_RX_SIGNAL_DISPLAY_SSID_MONITORED) == 0) {
+               DBG_871X(FUNC_ADPT_FMT" %s("MAC_FMT"), SignalStrength:%u, SignalQuality:%u, RawRSSI:%ld\n"
+                       , FUNC_ADPT_ARG(padapter)
+                       , dst->Ssid.Ssid, MAC_ARG(dst->MacAddress), dst->PhyInfo.SignalStrength, dst->PhyInfo.SignalQuality, dst->Rssi);
+       }
+       #endif
+
+#if 0 // old codes, may be useful one day...
+//     DBG_871X("update_network: rssi=0x%lx dst->Rssi=%d ,dst->Rssi=0x%lx , src->Rssi=0x%lx",(dst->Rssi+src->Rssi)/2,dst->Rssi,dst->Rssi,src->Rssi);
+       if (check_fwstate(&padapter->mlmepriv, _FW_LINKED) && is_same_network(&(padapter->mlmepriv.cur_network.network), src))
+       {
+
+               //DBG_871X("b:ssid=%s update_network: src->rssi=0x%d padapter->recvpriv.ui_rssi=%d\n",src->Ssid.Ssid,src->Rssi,padapter->recvpriv.signal);
+               if(padapter->recvpriv.signal_qual_data.total_num++ >= PHY_LINKQUALITY_SLID_WIN_MAX)
+               {
+                     padapter->recvpriv.signal_qual_data.total_num = PHY_LINKQUALITY_SLID_WIN_MAX;
+                     last_evm = padapter->recvpriv.signal_qual_data.elements[padapter->recvpriv.signal_qual_data.index];
+                     padapter->recvpriv.signal_qual_data.total_val -= last_evm;
+               }
+               padapter->recvpriv.signal_qual_data.total_val += query_rx_pwr_percentage(src->Rssi);
+
+               padapter->recvpriv.signal_qual_data.elements[padapter->recvpriv.signal_qual_data.index++] = query_rx_pwr_percentage(src->Rssi);
+                if(padapter->recvpriv.signal_qual_data.index >= PHY_LINKQUALITY_SLID_WIN_MAX)
+                       padapter->recvpriv.signal_qual_data.index = 0;
+
+               //DBG_871X("Total SQ=%d  pattrib->signal_qual= %d\n", padapter->recvpriv.signal_qual_data.total_val, src->Rssi);
+
+               // <1> Showed on UI for user,in percentage.
+               tmpVal = padapter->recvpriv.signal_qual_data.total_val/padapter->recvpriv.signal_qual_data.total_num;
+                padapter->recvpriv.signal=(u8)tmpVal;//Link quality
+
+               src->Rssi= translate_percentage_to_dbm(padapter->recvpriv.signal) ;
+       }
+       else{
+//     DBG_871X("ELSE:ssid=%s update_network: src->rssi=0x%d dst->rssi=%d\n",src->Ssid.Ssid,src->Rssi,dst->Rssi);
+               src->Rssi=(src->Rssi +dst->Rssi)/2;//dBM
+       }
+
+//     DBG_871X("a:update_network: src->rssi=0x%d padapter->recvpriv.ui_rssi=%d\n",src->Rssi,padapter->recvpriv.signal);
+
+#endif
+
+_func_exit_;
+}
+
+static void update_current_network(_adapter *adapter, WLAN_BSSID_EX *pnetwork)
+{
+       struct  mlme_priv       *pmlmepriv = &(adapter->mlmepriv);
+
+_func_enter_;
+
+#ifdef PLATFORM_OS_XP
+       if ((unsigned long)(&(pmlmepriv->cur_network.network)) < 0x7ffffff)
+       {
+               KeBugCheckEx(0x87111c1c, (ULONG_PTR)(&(pmlmepriv->cur_network.network)), 0, 0,0);
+       }
+#endif
+
+       if ( (check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE) && (is_same_network(&(pmlmepriv->cur_network.network), pnetwork)))
+       {
+               //RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,"Same Network\n");
+
+               //if(pmlmepriv->cur_network.network.IELength<= pnetwork->IELength)
+               {
+                       update_network(&(pmlmepriv->cur_network.network), pnetwork,adapter, _TRUE);
+                       rtw_update_protection(adapter, (pmlmepriv->cur_network.network.IEs) + sizeof (NDIS_802_11_FIXED_IEs),
+                                                                       pmlmepriv->cur_network.network.IELength);
+               }
+       }
+
+_func_exit_;
+
+}
+
+
+/*
+
+Caller must hold pmlmepriv->lock first.
+
+
+*/
+void rtw_update_scanned_network(_adapter *adapter, WLAN_BSSID_EX *target)
+{
+       _irqL irqL;
+       _list   *plist, *phead;
+       ULONG   bssid_ex_sz;
+       struct mlme_priv        *pmlmepriv = &(adapter->mlmepriv);
+       _queue  *queue  = &(pmlmepriv->scanned_queue);
+       struct wlan_network     *pnetwork = NULL;
+       struct wlan_network     *oldest = NULL;
+
+_func_enter_;
+
+       _enter_critical_bh(&queue->lock, &irqL);
+       phead = get_list_head(queue);
+       plist = get_next(phead);
+
+       while(1)
+       {
+               if (rtw_end_of_queue_search(phead,plist)== _TRUE)
+                       break;
+
+               pnetwork        = LIST_CONTAINOR(plist, struct wlan_network, list);
+
+               if ((unsigned long)(pnetwork) < 0x7ffffff)
+               {
+#ifdef PLATFORM_OS_XP
+                       KeBugCheckEx(0x87111c1c, (ULONG_PTR)pnetwork, 0, 0,0);
+#endif
+               }
+
+               if (is_same_network(&(pnetwork->network), target))
+                       break;
+
+               if ((oldest == ((struct wlan_network *)0)) ||
+               time_after(oldest->last_scanned, pnetwork->last_scanned))
+                       oldest = pnetwork;
+
+               plist = get_next(plist);
+
+       }
+
+
+       /* If we didn't find a match, then get a new network slot to initialize
+        * with this beacon's information */
+       if (rtw_end_of_queue_search(phead,plist)== _TRUE) {
+
+               if (_rtw_queue_empty(&(pmlmepriv->free_bss_pool)) == _TRUE) {
+                       /* If there are no more slots, expire the oldest */
+                       //list_del_init(&oldest->list);
+                       pnetwork = oldest;
+
+#ifdef CONFIG_ANTENNA_DIVERSITY
+                       //target->PhyInfo.Optimum_antenna = pHalData->CurAntenna;//optimum_antenna=>For antenna diversity
+                       rtw_hal_get_def_var(adapter, HAL_DEF_CURRENT_ANTENNA, &(target->PhyInfo.Optimum_antenna));
+#endif
+                       _rtw_memcpy(&(pnetwork->network), target,  get_WLAN_BSSID_EX_sz(target));
+                       //pnetwork->last_scanned = rtw_get_current_time();
+                       // variable initialize
+                       pnetwork->fixed = _FALSE;
+                       pnetwork->last_scanned = rtw_get_current_time();
+
+                       pnetwork->network_type = 0;
+                       pnetwork->aid=0;
+                       pnetwork->join_res=0;
+
+                       /* bss info not receving from the right channel */
+                       if (pnetwork->network.PhyInfo.SignalQuality == 101)
+                               pnetwork->network.PhyInfo.SignalQuality = 0;
+               }
+               else {
+                       /* Otherwise just pull from the free list */
+
+                       pnetwork = rtw_alloc_network(pmlmepriv); // will update scan_time
+
+                       if(pnetwork==NULL){
+                               RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("\n\n\nsomething wrong here\n\n\n"));
+                               goto exit;
+                       }
+
+                       bssid_ex_sz = get_WLAN_BSSID_EX_sz(target);
+                       target->Length = bssid_ex_sz;
+#ifdef CONFIG_ANTENNA_DIVERSITY
+                       //target->PhyInfo.Optimum_antenna = pHalData->CurAntenna;
+                       rtw_hal_get_def_var(adapter, HAL_DEF_CURRENT_ANTENNA, &(target->PhyInfo.Optimum_antenna));
+#endif
+                       _rtw_memcpy(&(pnetwork->network), target, bssid_ex_sz );
+
+                       pnetwork->last_scanned = rtw_get_current_time();
+
+                       /* bss info not receving from the right channel */
+                       if (pnetwork->network.PhyInfo.SignalQuality == 101)
+                               pnetwork->network.PhyInfo.SignalQuality = 0;
+
+                       rtw_list_insert_tail(&(pnetwork->list),&(queue->queue));
+
+               }
+       }
+       else {
+               /* we have an entry and we are going to update it. But this entry may
+                * be already expired. In this case we do the same as we found a new
+                * net and call the new_net handler
+                */
+               bool update_ie = _TRUE;
+
+               pnetwork->last_scanned = rtw_get_current_time();
+
+               //target.Reserved[0]==1, means that scaned network is a bcn frame.
+               if((pnetwork->network.IELength>target->IELength) && (target->Reserved[0]==1))
+                       update_ie = _FALSE;
+
+               update_network(&(pnetwork->network), target,adapter, update_ie);
+       }
+
+exit:
+       _exit_critical_bh(&queue->lock, &irqL);
+
+_func_exit_;
+}
+
+void rtw_add_network(_adapter *adapter, WLAN_BSSID_EX *pnetwork);
+void rtw_add_network(_adapter *adapter, WLAN_BSSID_EX *pnetwork)
+{
+       _irqL irqL;
+       struct  mlme_priv       *pmlmepriv = &(((_adapter *)adapter)->mlmepriv);
+       //_queue        *queue  = &(pmlmepriv->scanned_queue);
+
+_func_enter_;
+
+       //_enter_critical_bh(&queue->lock, &irqL);
+
+       #if defined(CONFIG_P2P) && defined(CONFIG_P2P_REMOVE_GROUP_INFO)
+       rtw_WLAN_BSSID_EX_remove_p2p_attr(pnetwork, P2P_ATTR_GROUP_INFO);
+       #endif
+
+       update_current_network(adapter, pnetwork);
+
+       rtw_update_scanned_network(adapter, pnetwork);
+
+       //_exit_critical_bh(&queue->lock, &irqL);
+
+_func_exit_;
+}
+
+//select the desired network based on the capability of the (i)bss.
+// check items: (1) security
+//                        (2) network_type
+//                        (3) WMM
+//                        (4) HT
+//                     (5) others
+int rtw_is_desired_network(_adapter *adapter, struct wlan_network *pnetwork);
+int rtw_is_desired_network(_adapter *adapter, struct wlan_network *pnetwork)
+{
+       struct security_priv *psecuritypriv = &adapter->securitypriv;
+       struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
+       u32 desired_encmode;
+       u32 privacy;
+
+       //u8 wps_ie[512];
+       uint wps_ielen;
+
+       int bselected = _TRUE;
+
+       desired_encmode = psecuritypriv->ndisencryptstatus;
+       privacy = pnetwork->network.Privacy;
+
+       if(check_fwstate(pmlmepriv, WIFI_UNDER_WPS))
+       {
+               if(rtw_get_wps_ie(pnetwork->network.IEs+_FIXED_IE_LENGTH_, pnetwork->network.IELength-_FIXED_IE_LENGTH_, NULL, &wps_ielen)!=NULL)
+               {
+                       return _TRUE;
+               }
+               else
+               {
+                       return _FALSE;
+               }
+       }
+       if (adapter->registrypriv.wifi_spec == 1) //for  correct flow of 8021X  to do....
+       {
+               u8 *p=NULL;
+               uint ie_len=0;
+
+               if ((desired_encmode == Ndis802_11EncryptionDisabled) && (privacy != 0))
+                   bselected = _FALSE;
+
+               if ( psecuritypriv->ndisauthtype == Ndis802_11AuthModeWPA2PSK) {
+                       p = rtw_get_ie(pnetwork->network.IEs + _BEACON_IE_OFFSET_, _RSN_IE_2_, &ie_len, (pnetwork->network.IELength - _BEACON_IE_OFFSET_));
+                       if (p && ie_len>0) {
+                               bselected = _TRUE;
+                       } else {
+                               bselected = _FALSE;
+                       }
+               }
+       }
+
+
+       if ((desired_encmode != Ndis802_11EncryptionDisabled) && (privacy == 0)) {
+               DBG_871X("desired_encmode: %d, privacy: %d\n", desired_encmode, privacy);
+               bselected = _FALSE;
+       }
+
+       if(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE)
+       {
+               if(pnetwork->network.InfrastructureMode != pmlmepriv->cur_network.network.InfrastructureMode)
+                       bselected = _FALSE;
+       }
+
+
+       return bselected;
+}
+
+/* TODO: Perry : For Power Management */
+void rtw_atimdone_event_callback(_adapter      *adapter , u8 *pbuf)
+{
+
+_func_enter_;
+       RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("receive atimdone_evet\n"));
+_func_exit_;
+       return;
+}
+
+
+void rtw_survey_event_callback(_adapter        *adapter, u8 *pbuf)
+{
+       _irqL  irqL;
+       u32 len;
+       WLAN_BSSID_EX *pnetwork;
+       struct  mlme_priv       *pmlmepriv = &(adapter->mlmepriv);
+
+_func_enter_;
+
+       pnetwork = (WLAN_BSSID_EX *)pbuf;
+
+       RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("rtw_survey_event_callback, ssid=%s\n",  pnetwork->Ssid.Ssid));
+
+#ifdef CONFIG_RTL8712
+        //endian_convert
+       pnetwork->Length = le32_to_cpu(pnetwork->Length);
+       pnetwork->Ssid.SsidLength = le32_to_cpu(pnetwork->Ssid.SsidLength);
+       pnetwork->Privacy =le32_to_cpu( pnetwork->Privacy);
+       pnetwork->Rssi = le32_to_cpu(pnetwork->Rssi);
+       pnetwork->NetworkTypeInUse =le32_to_cpu(pnetwork->NetworkTypeInUse);
+       pnetwork->Configuration.ATIMWindow = le32_to_cpu(pnetwork->Configuration.ATIMWindow);
+       pnetwork->Configuration.BeaconPeriod = le32_to_cpu(pnetwork->Configuration.BeaconPeriod);
+       pnetwork->Configuration.DSConfig =le32_to_cpu(pnetwork->Configuration.DSConfig);
+       pnetwork->Configuration.FHConfig.DwellTime=le32_to_cpu(pnetwork->Configuration.FHConfig.DwellTime);
+       pnetwork->Configuration.FHConfig.HopPattern=le32_to_cpu(pnetwork->Configuration.FHConfig.HopPattern);
+       pnetwork->Configuration.FHConfig.HopSet=le32_to_cpu(pnetwork->Configuration.FHConfig.HopSet);
+       pnetwork->Configuration.FHConfig.Length=le32_to_cpu(pnetwork->Configuration.FHConfig.Length);
+       pnetwork->Configuration.Length = le32_to_cpu(pnetwork->Configuration.Length);
+       pnetwork->InfrastructureMode = le32_to_cpu(pnetwork->InfrastructureMode);
+       pnetwork->IELength = le32_to_cpu(pnetwork->IELength);
+#endif
+
+       len = get_WLAN_BSSID_EX_sz(pnetwork);
+       if(len > (sizeof(WLAN_BSSID_EX)))
+       {
+               RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("\n ****rtw_survey_event_callback: return a wrong bss ***\n"));
+               return;
+       }
+
+
+       _enter_critical_bh(&pmlmepriv->lock, &irqL);
+
+       // update IBSS_network 's timestamp
+       if ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)) == _TRUE)
+       {
+               //RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,"rtw_survey_event_callback : WIFI_ADHOC_MASTER_STATE \n\n");
+               if(_rtw_memcmp(&(pmlmepriv->cur_network.network.MacAddress), pnetwork->MacAddress, ETH_ALEN))
+               {
+                       struct wlan_network* ibss_wlan = NULL;
+                       _irqL   irqL;
+
+                       _rtw_memcpy(pmlmepriv->cur_network.network.IEs, pnetwork->IEs, 8);
+                       _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+                       ibss_wlan = rtw_find_network(&pmlmepriv->scanned_queue,  pnetwork->MacAddress);
+                       if(ibss_wlan)
+                       {
+                               _rtw_memcpy(ibss_wlan->network.IEs , pnetwork->IEs, 8);
+                               _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+                               goto exit;
+                       }
+                       _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+               }
+       }
+
+       // lock pmlmepriv->lock when you accessing network_q
+       if ((check_fwstate(pmlmepriv, _FW_UNDER_LINKING)) == _FALSE)
+       {
+               if( pnetwork->Ssid.Ssid[0] == 0 )
+               {
+                       pnetwork->Ssid.SsidLength = 0;
+               }
+               rtw_add_network(adapter, pnetwork);
+       }
+
+exit:
+
+       _exit_critical_bh(&pmlmepriv->lock, &irqL);
+
+_func_exit_;
+
+       return;
+}
+
+
+
+void rtw_surveydone_event_callback(_adapter    *adapter, u8 *pbuf)
+{
+       _irqL  irqL;
+       u8 timer_cancelled = _FALSE;
+       struct  mlme_priv       *pmlmepriv = &(adapter->mlmepriv);
+
+#ifdef CONFIG_MLME_EXT
+
+       mlmeext_surveydone_event_callback(adapter);
+
+#endif
+
+_func_enter_;
+
+       _enter_critical_bh(&pmlmepriv->lock, &irqL);
+       if(pmlmepriv->wps_probe_req_ie)
+       {
+               u32 free_len = pmlmepriv->wps_probe_req_ie_len;
+               pmlmepriv->wps_probe_req_ie_len = 0;
+               rtw_mfree(pmlmepriv->wps_probe_req_ie, free_len);
+               pmlmepriv->wps_probe_req_ie = NULL;
+       }
+
+       RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("rtw_surveydone_event_callback: fw_state:%x\n\n", get_fwstate(pmlmepriv)));
+
+       if (check_fwstate(pmlmepriv,_FW_UNDER_SURVEY))
+       {
+               //u8 timer_cancelled;
+
+               timer_cancelled = _TRUE;
+               //_cancel_timer(&pmlmepriv->scan_to_timer, &timer_cancelled);
+
+               _clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY);
+       }
+       else {
+
+               RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("nic status =%x, survey done event comes too late!\n", get_fwstate(pmlmepriv)));
+       }
+       _exit_critical_bh(&pmlmepriv->lock, &irqL);
+
+       if(timer_cancelled)
+               _cancel_timer(&pmlmepriv->scan_to_timer, &timer_cancelled);
+
+
+       _enter_critical_bh(&pmlmepriv->lock, &irqL);
+
+       #ifdef CONFIG_NEW_SIGNAL_STAT_PROCESS
+       rtw_set_signal_stat_timer(&adapter->recvpriv);
+       #endif
+
+       if(pmlmepriv->to_join == _TRUE)
+       {
+               if((check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)==_TRUE) )
+               {
+                       if(check_fwstate(pmlmepriv, _FW_LINKED)==_FALSE)
+                       {
+                               set_fwstate(pmlmepriv, _FW_UNDER_LINKING);
+
+                               if(rtw_select_and_join_from_scanned_queue(pmlmepriv)==_SUCCESS)
+                               {
+                                       _set_timer(&pmlmepriv->assoc_timer, MAX_JOIN_TIMEOUT );
+                               }
+                               else
+                               {
+                                       WLAN_BSSID_EX    *pdev_network = &(adapter->registrypriv.dev_network);
+                                       u8 *pibss = adapter->registrypriv.dev_network.MacAddress;
+
+                                       //pmlmepriv->fw_state ^= _FW_UNDER_SURVEY;//because don't set assoc_timer
+                                       _clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY);
+
+                                       RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("switching to adhoc master\n"));
+
+                                       _rtw_memset(&pdev_network->Ssid, 0, sizeof(NDIS_802_11_SSID));
+                                       _rtw_memcpy(&pdev_network->Ssid, &pmlmepriv->assoc_ssid, sizeof(NDIS_802_11_SSID));
+
+                                       rtw_update_registrypriv_dev_network(adapter);
+                                       rtw_generate_random_ibss(pibss);
+
+                                       pmlmepriv->fw_state = WIFI_ADHOC_MASTER_STATE;
+
+                                       if(rtw_createbss_cmd(adapter)!=_SUCCESS)
+                                       {
+                                       RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("Error=>rtw_createbss_cmd status FAIL\n"));
+                                       }
+
+                                       pmlmepriv->to_join = _FALSE;
+                               }
+                       }
+               }
+               else
+               {
+                       int s_ret;
+                       set_fwstate(pmlmepriv, _FW_UNDER_LINKING);
+                       pmlmepriv->to_join = _FALSE;
+                       if(_SUCCESS == (s_ret=rtw_select_and_join_from_scanned_queue(pmlmepriv)))
+                       {
+                            _set_timer(&pmlmepriv->assoc_timer, MAX_JOIN_TIMEOUT);
+                       }
+                       else if(s_ret == 2)//there is no need to wait for join
+                       {
+                               _clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
+                               rtw_indicate_connect(adapter);
+                       }
+                       else
+                       {
+                               DBG_871X("try_to_join, but select scanning queue fail, to_roaming:%d\n", rtw_to_roaming(adapter));
+                               #ifdef CONFIG_LAYER2_ROAMING
+                               if (rtw_to_roaming(adapter) != 0) {
+                                       if( --pmlmepriv->to_roaming == 0
+                                               || _SUCCESS != rtw_sitesurvey_cmd(adapter, &pmlmepriv->assoc_ssid, 1, NULL, 0)
+                                       ) {
+                                               rtw_set_roaming(adapter, 0);
+#ifdef CONFIG_INTEL_WIDI
+                                               if(adapter->mlmepriv.widi_state == INTEL_WIDI_STATE_ROAMING)
+                                               {
+                                                       _rtw_memset(pmlmepriv->sa_ext, 0x00, L2SDTA_SERVICE_VE_LEN);
+                                                       intel_widi_wk_cmd(adapter, INTEL_WIDI_LISTEN_WK, NULL);
+                                                       DBG_871X("change to widi listen\n");
+                                               }
+#endif // CONFIG_INTEL_WIDI
+                                               rtw_free_assoc_resources(adapter, 1);
+                                               rtw_indicate_disconnect(adapter);
+                                       } else {
+                                               pmlmepriv->to_join = _TRUE;
+                                       }
+                               }
+                               #endif
+                               _clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
+                       }
+               }
+       }
+
+       indicate_wx_scan_complete_event(adapter);
+       //DBG_871X("scan complete in %dms\n",rtw_get_passing_time_ms(pmlmepriv->scan_start_time));
+
+       _exit_critical_bh(&pmlmepriv->lock, &irqL);
+
+#ifdef CONFIG_P2P_PS
+       if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE) {
+               p2p_ps_wk_cmd(adapter, P2P_PS_SCAN_DONE, 0);
+       }
+#endif // CONFIG_P2P_PS
+
+       rtw_os_xmit_schedule(adapter);
+#ifdef CONFIG_CONCURRENT_MODE
+       rtw_os_xmit_schedule(adapter->pbuddy_adapter);
+#endif
+#ifdef CONFIG_DUALMAC_CONCURRENT
+       dc_resume_xmit(adapter);
+#endif
+
+#ifdef CONFIG_DRVEXT_MODULE_WSC
+       drvext_surveydone_callback(&adapter->drvextpriv);
+#endif
+
+#ifdef DBG_CONFIG_ERROR_DETECT
+#ifdef CONFIG_INTEL_WIDI
+       if (adapter->mlmepriv.widi_state == INTEL_WIDI_STATE_NONE)
+#endif
+       {
+               struct mlme_ext_priv *pmlmeext = &adapter->mlmeextpriv;
+               if(pmlmeext->sitesurvey_res.bss_cnt == 0){
+                       rtw_hal_sreset_reset(adapter);
+               }
+       }
+#endif
+
+#ifdef CONFIG_IOCTL_CFG80211
+       rtw_cfg80211_surveydone_event_callback(adapter);
+#endif //CONFIG_IOCTL_CFG80211
+
+_func_exit_;
+
+}
+
+void rtw_dummy_event_callback(_adapter *adapter , u8 *pbuf)
+{
+
+}
+
+void rtw_fwdbg_event_callback(_adapter *adapter , u8 *pbuf)
+{
+
+}
+
+static void free_scanqueue(struct      mlme_priv *pmlmepriv)
+{
+       _irqL irqL, irqL0;
+       _queue *free_queue = &pmlmepriv->free_bss_pool;
+       _queue *scan_queue = &pmlmepriv->scanned_queue;
+       _list   *plist, *phead, *ptemp;
+
+_func_enter_;
+
+       RT_TRACE(_module_rtl871x_mlme_c_, _drv_notice_, ("+free_scanqueue\n"));
+       _enter_critical_bh(&scan_queue->lock, &irqL0);
+       _enter_critical_bh(&free_queue->lock, &irqL);
+
+       phead = get_list_head(scan_queue);
+       plist = get_next(phead);
+
+       while (plist != phead)
+       {
+               ptemp = get_next(plist);
+               rtw_list_delete(plist);
+               rtw_list_insert_tail(plist, &free_queue->queue);
+               plist =ptemp;
+               pmlmepriv->num_of_scanned --;
+        }
+
+       _exit_critical_bh(&free_queue->lock, &irqL);
+       _exit_critical_bh(&scan_queue->lock, &irqL0);
+
+_func_exit_;
+}
+
+/*
+*rtw_free_assoc_resources: the caller has to lock pmlmepriv->lock
+*/
+void rtw_free_assoc_resources(_adapter *adapter, int lock_scanned_queue)
+{
+       _irqL irqL;
+       struct wlan_network* pwlan = NULL;
+       struct  mlme_priv *pmlmepriv = &adapter->mlmepriv;
+       struct  sta_priv *pstapriv = &adapter->stapriv;
+       struct wlan_network *tgt_network = &pmlmepriv->cur_network;
+
+#ifdef CONFIG_TDLS
+       struct tdls_info *ptdlsinfo = &adapter->tdlsinfo;
+#endif //CONFIG_TDLS
+_func_enter_;
+
+       RT_TRACE(_module_rtl871x_mlme_c_, _drv_notice_, ("+rtw_free_assoc_resources\n"));
+       RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("tgt_network->network.MacAddress="MAC_FMT" ssid=%s\n",
+               MAC_ARG(tgt_network->network.MacAddress), tgt_network->network.Ssid.Ssid));
+
+       if(check_fwstate( pmlmepriv, WIFI_STATION_STATE|WIFI_AP_STATE))
+       {
+               struct sta_info* psta;
+
+               psta = rtw_get_stainfo(&adapter->stapriv, tgt_network->network.MacAddress);
+
+#ifdef CONFIG_TDLS
+               if(ptdlsinfo->setup_state != TDLS_STATE_NONE)
+               {
+                       rtw_tdls_cmd(adapter, myid(&(adapter->eeprompriv)), TDLS_RS_RCR);
+                       rtw_reset_tdls_info(adapter);
+                       rtw_free_all_stainfo(adapter);
+                       _enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
+               }
+               else
+#endif //CONFIG_TDLS
+               {
+                       _enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
+                       rtw_free_stainfo(adapter,  psta);
+               }
+
+               _exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
+
+       }
+
+       if(check_fwstate( pmlmepriv, WIFI_ADHOC_STATE|WIFI_ADHOC_MASTER_STATE|WIFI_AP_STATE))
+       {
+               struct sta_info* psta;
+
+               rtw_free_all_stainfo(adapter);
+
+               psta = rtw_get_bcmc_stainfo(adapter);
+               _enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
+               rtw_free_stainfo(adapter, psta);
+               _exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
+
+               rtw_init_bcmc_stainfo(adapter);
+       }
+
+       if(lock_scanned_queue)
+               _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+
+       pwlan = rtw_find_network(&pmlmepriv->scanned_queue, tgt_network->network.MacAddress);
+       if(pwlan)
+       {
+               pwlan->fixed = _FALSE;
+#ifdef CONFIG_P2P
+               if(!rtw_p2p_chk_state(&adapter->wdinfo, P2P_STATE_NONE))
+               {
+                       u32 p2p_ielen=0;
+                       u8  *p2p_ie;
+                       //u16 capability;
+                       u8 *pcap = NULL;
+                       u32 capability_len=0;
+
+                       //DBG_871X("free disconnecting network\n");
+                       //rtw_free_network_nolock(pmlmepriv, pwlan);
+
+                       if((p2p_ie=rtw_get_p2p_ie(pwlan->network.IEs+_FIXED_IE_LENGTH_, pwlan->network.IELength-_FIXED_IE_LENGTH_, NULL, &p2p_ielen)))
+                       {
+                               pcap = rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_CAPABILITY, NULL, &capability_len);
+                               if(pcap && capability_len==2)
+                               {
+                                       u16 cap = *(u16*)pcap ;
+                                       *(u16*)pcap = cap&0x00ff;//clear group capability when free this network
+                               }
+                       }
+
+                       rtw_set_scan_deny(adapter, 2000);
+                       //rtw_clear_scan_deny(adapter);
+               }
+#endif //CONFIG_P2P
+       }
+       else
+       {
+               RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("rtw_free_assoc_resources : pwlan== NULL \n\n"));
+       }
+
+
+       if((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) && (adapter->stapriv.asoc_sta_count== 1))
+               /*||check_fwstate(pmlmepriv, WIFI_STATION_STATE)*/)
+       {
+               rtw_free_network_nolock(pmlmepriv, pwlan);
+       }
+
+       if(lock_scanned_queue)
+               _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+
+       adapter->securitypriv.key_mask = 0;
+
+_func_exit_;
+
+}
+
+/*
+*rtw_indicate_connect: the caller has to lock pmlmepriv->lock
+*/
+void rtw_indicate_connect(_adapter *padapter)
+{
+       struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
+       struct xmit_priv        *pxmitpriv = &padapter->xmitpriv;
+
+_func_enter_;
+
+       RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("+rtw_indicate_connect\n"));
+
+       pmlmepriv->to_join = _FALSE;
+
+       if(!check_fwstate(&padapter->mlmepriv, _FW_LINKED))
+       {
+
+#ifdef CONFIG_SW_ANTENNA_DIVERSITY
+       rtw_hal_set_hwreg(padapter, HW_VAR_ANTENNA_DIVERSITY_LINK, 0);
+#endif
+       set_fwstate(pmlmepriv, _FW_LINKED);
+
+       rtw_led_control(padapter, LED_CTL_LINK);
+
+#ifdef CONFIG_DRVEXT_MODULE
+       if(padapter->drvextpriv.enable_wpa)
+       {
+               indicate_l2_connect(padapter);
+       }
+       else
+#endif
+       {
+               rtw_os_indicate_connect(padapter);
+       }
+
+       }
+
+       rtw_set_roaming(padapter, 0);
+
+#ifdef CONFIG_INTEL_WIDI
+       if(padapter->mlmepriv.widi_state == INTEL_WIDI_STATE_ROAMING)
+       {
+               _rtw_memset(pmlmepriv->sa_ext, 0x00, L2SDTA_SERVICE_VE_LEN);
+               intel_widi_wk_cmd(padapter, INTEL_WIDI_LISTEN_WK, NULL);
+               DBG_871X("change to widi listen\n");
+       }
+#endif // CONFIG_INTEL_WIDI
+
+       rtw_set_scan_deny(padapter, 3000);
+
+       RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("-rtw_indicate_connect: fw_state=0x%08x\n", get_fwstate(pmlmepriv)));
+
+_func_exit_;
+
+}
+
+
+/*
+*rtw_indicate_disconnect: the caller has to lock pmlmepriv->lock
+*/
+void rtw_indicate_disconnect( _adapter *padapter )
+{
+       struct  mlme_priv *pmlmepriv = &padapter->mlmepriv;
+
+_func_enter_;
+
+       RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("+rtw_indicate_disconnect\n"));
+
+       _clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING|WIFI_UNDER_WPS);
+
+       if(rtw_to_roaming(padapter) > 0)
+               _clr_fwstate_(pmlmepriv, _FW_LINKED);
+
+       if(check_fwstate(&padapter->mlmepriv, _FW_LINKED)
+               || (rtw_to_roaming(padapter) <= 0)
+       )
+       {
+               rtw_os_indicate_disconnect(padapter);
+
+               //set ips_deny_time to avoid enter IPS before LPS leave
+               padapter->pwrctrlpriv.ips_deny_time = rtw_get_current_time() + rtw_ms_to_systime(3000);
+
+             _clr_fwstate_(pmlmepriv, _FW_LINKED);
+
+               rtw_led_control(padapter, LED_CTL_NO_LINK);
+
+               rtw_clear_scan_deny(padapter);
+
+       }
+
+#ifdef CONFIG_P2P_PS
+       p2p_ps_wk_cmd(padapter, P2P_PS_DISABLE, 1);
+#endif // CONFIG_P2P_PS
+
+#ifdef CONFIG_LPS
+#ifdef CONFIG_WOWLAN
+       if(padapter->pwrctrlpriv.wowlan_mode==_FALSE)
+#endif //CONFIG_WOWLAN
+       rtw_lps_ctrl_wk_cmd(padapter, LPS_CTRL_DISCONNECT, 1);
+
+#endif
+
+_func_exit_;
+}
+
+inline void rtw_indicate_scan_done( _adapter *padapter, bool aborted)
+{
+       rtw_os_indicate_scan_done(padapter, aborted);
+}
+
+void rtw_scan_abort(_adapter *adapter)
+{
+       u32 cnt=0;
+       u32 start;
+       struct mlme_priv        *pmlmepriv = &(adapter->mlmepriv);
+       struct mlme_ext_priv    *pmlmeext = &(adapter->mlmeextpriv);
+
+       start = rtw_get_current_time();
+       pmlmeext->scan_abort = _TRUE;
+       while (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY)
+               && rtw_get_passing_time_ms(start) <= 200) {
+
+               if (adapter->bDriverStopped || adapter->bSurpriseRemoved)
+                       break;
+
+               DBG_871X(FUNC_NDEV_FMT"fw_state=_FW_UNDER_SURVEY!\n", FUNC_NDEV_ARG(adapter->pnetdev));
+               rtw_msleep_os(20);
+       }
+
+       if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY)) {
+               if (!adapter->bDriverStopped && !adapter->bSurpriseRemoved)
+                       DBG_871X(FUNC_NDEV_FMT"waiting for scan_abort time out!\n", FUNC_NDEV_ARG(adapter->pnetdev));
+               #ifdef CONFIG_PLATFORM_MSTAR
+               //_clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY);
+               set_survey_timer(pmlmeext, 0);
+               _set_timer(&pmlmepriv->scan_to_timer, 50);
+               #endif
+               rtw_indicate_scan_done(adapter, _TRUE);
+       }
+       pmlmeext->scan_abort = _FALSE;
+}
+
+static struct sta_info *rtw_joinbss_update_stainfo(_adapter *padapter, struct wlan_network *pnetwork)
+{
+       int i;
+       struct sta_info *bmc_sta, *psta=NULL;
+       struct recv_reorder_ctrl *preorder_ctrl;
+       struct sta_priv *pstapriv = &padapter->stapriv;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+
+       psta = rtw_get_stainfo(pstapriv, pnetwork->network.MacAddress);
+       if(psta==NULL) {
+               psta = rtw_alloc_stainfo(pstapriv, pnetwork->network.MacAddress);
+       }
+
+       if(psta) //update ptarget_sta
+       {
+               DBG_871X("%s\n", __FUNCTION__);
+
+               psta->aid  = pnetwork->join_res;
+#ifdef CONFIG_CONCURRENT_MODE
+
+               if(PRIMARY_ADAPTER == padapter->adapter_type)
+                       psta->mac_id=0;
+               else
+                       psta->mac_id=2;
+#else
+               psta->mac_id=0;
+#endif
+
+               psta->raid = networktype_to_raid(pmlmeext->cur_wireless_mode);
+
+               //security related
+               if(padapter->securitypriv.dot11AuthAlgrthm== dot11AuthAlgrthm_8021X)
+               {
+                       padapter->securitypriv.binstallGrpkey=_FALSE;
+                       padapter->securitypriv.busetkipkey=_FALSE;
+                       padapter->securitypriv.bgrpkey_handshake=_FALSE;
+
+                       psta->ieee8021x_blocked=_TRUE;
+                       psta->dot118021XPrivacy=padapter->securitypriv.dot11PrivacyAlgrthm;
+
+                       _rtw_memset((u8 *)&psta->dot118021x_UncstKey, 0, sizeof (union Keytype));
+
+                       _rtw_memset((u8 *)&psta->dot11tkiprxmickey, 0, sizeof (union Keytype));
+                       _rtw_memset((u8 *)&psta->dot11tkiptxmickey, 0, sizeof (union Keytype));
+
+                       _rtw_memset((u8 *)&psta->dot11txpn, 0, sizeof (union pn48));
+#ifdef CONFIG_IEEE80211W
+                       _rtw_memset((u8 *)&psta->dot11wtxpn, 0, sizeof (union pn48));
+#endif //CONFIG_IEEE80211W
+                       _rtw_memset((u8 *)&psta->dot11rxpn, 0, sizeof (union pn48));
+               }
+
+               //      Commented by Albert 2012/07/21
+               //      When doing the WPS, the wps_ie_len won't equal to 0
+               //      And the Wi-Fi driver shouldn't allow the data packet to be tramsmitted.
+               if ( padapter->securitypriv.wps_ie_len != 0 )
+               {
+                       psta->ieee8021x_blocked=_TRUE;
+                       padapter->securitypriv.wps_ie_len = 0;
+               }
+
+
+               //for A-MPDU Rx reordering buffer control for bmc_sta & sta_info
+               //if A-MPDU Rx is enabled, reseting  rx_ordering_ctrl wstart_b(indicate_seq) to default value=0xffff
+               //todo: check if AP can send A-MPDU packets
+               for(i=0; i < 16 ; i++)
+               {
+                       //preorder_ctrl = &precvpriv->recvreorder_ctrl[i];
+                       preorder_ctrl = &psta->recvreorder_ctrl[i];
+                       preorder_ctrl->enable = _FALSE;
+                       preorder_ctrl->indicate_seq = 0xffff;
+                       #ifdef DBG_RX_SEQ
+                       DBG_871X("DBG_RX_SEQ %s:%d indicate_seq:%u \n", __FUNCTION__, __LINE__,
+                               preorder_ctrl->indicate_seq);
+                       #endif
+                       preorder_ctrl->wend_b= 0xffff;
+                       preorder_ctrl->wsize_b = 64;//max_ampdu_sz;//ex. 32(kbytes) -> wsize_b=32
+               }
+
+
+               bmc_sta = rtw_get_bcmc_stainfo(padapter);
+               if(bmc_sta)
+               {
+                       for(i=0; i < 16 ; i++)
+                       {
+                               //preorder_ctrl = &precvpriv->recvreorder_ctrl[i];
+                               preorder_ctrl = &bmc_sta->recvreorder_ctrl[i];
+                               preorder_ctrl->enable = _FALSE;
+                               preorder_ctrl->indicate_seq = 0xffff;
+                               #ifdef DBG_RX_SEQ
+                               DBG_871X("DBG_RX_SEQ %s:%d indicate_seq:%u \n", __FUNCTION__, __LINE__,
+                                       preorder_ctrl->indicate_seq);
+                               #endif
+                               preorder_ctrl->wend_b= 0xffff;
+                               preorder_ctrl->wsize_b = 64;//max_ampdu_sz;//ex. 32(kbytes) -> wsize_b=32
+                       }
+               }
+
+
+               //misc.
+               update_sta_info(padapter, psta);
+
+       }
+
+       return psta;
+
+}
+
+//pnetwork : returns from rtw_joinbss_event_callback
+//ptarget_wlan: found from scanned_queue
+static void rtw_joinbss_update_network(_adapter *padapter, struct wlan_network *ptarget_wlan, struct wlan_network  *pnetwork)
+{
+       struct mlme_priv        *pmlmepriv = &(padapter->mlmepriv);
+       struct wlan_network  *cur_network = &(pmlmepriv->cur_network);
+
+       DBG_871X("%s\n", __FUNCTION__);
+
+       RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("\nfw_state:%x, BSSID:"MAC_FMT"\n"
+               ,get_fwstate(pmlmepriv), MAC_ARG(pnetwork->network.MacAddress)));
+
+
+       // why not use ptarget_wlan??
+       _rtw_memcpy(&cur_network->network, &pnetwork->network, pnetwork->network.Length);
+
+       cur_network->aid = pnetwork->join_res;
+
+
+#ifdef CONFIG_NEW_SIGNAL_STAT_PROCESS
+       rtw_set_signal_stat_timer(&padapter->recvpriv);
+#endif
+       padapter->recvpriv.signal_strength = ptarget_wlan->network.PhyInfo.SignalStrength;
+       padapter->recvpriv.signal_qual = ptarget_wlan->network.PhyInfo.SignalQuality;
+       //the ptarget_wlan->network.Rssi is raw data, we use ptarget_wlan->network.PhyInfo.SignalStrength instead (has scaled)
+       padapter->recvpriv.rssi = translate_percentage_to_dbm(ptarget_wlan->network.PhyInfo.SignalStrength);
+       #if defined(DBG_RX_SIGNAL_DISPLAY_PROCESSING) && 1
+               DBG_871X(FUNC_ADPT_FMT" signal_strength:%3u, rssi:%3d, signal_qual:%3u"
+                       "\n"
+                       , FUNC_ADPT_ARG(padapter)
+                       , padapter->recvpriv.signal_strength
+                       , padapter->recvpriv.rssi
+                       , padapter->recvpriv.signal_qual
+       );
+       #endif
+#ifdef CONFIG_NEW_SIGNAL_STAT_PROCESS
+       rtw_set_signal_stat_timer(&padapter->recvpriv);
+#endif
+
+       //update fw_state //will clr _FW_UNDER_LINKING here indirectly
+       switch(pnetwork->network.InfrastructureMode)
+       {
+               case Ndis802_11Infrastructure:
+
+                               if(pmlmepriv->fw_state&WIFI_UNDER_WPS)
+                                       pmlmepriv->fw_state = WIFI_STATION_STATE|WIFI_UNDER_WPS;
+                               else
+                                       pmlmepriv->fw_state = WIFI_STATION_STATE;
+
+                               break;
+               case Ndis802_11IBSS:
+                               pmlmepriv->fw_state = WIFI_ADHOC_STATE;
+                               break;
+               default:
+                               pmlmepriv->fw_state = WIFI_NULL_STATE;
+                               RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("Invalid network_mode\n"));
+                               break;
+       }
+
+       rtw_update_protection(padapter, (cur_network->network.IEs) + sizeof (NDIS_802_11_FIXED_IEs),
+                                                                       (cur_network->network.IELength));
+
+#ifdef CONFIG_80211N_HT
+       rtw_update_ht_cap(padapter, cur_network->network.IEs, cur_network->network.IELength, (u8) cur_network->network.Configuration.DSConfig);
+#endif
+
+
+}
+
+//Notes: the fucntion could be > passive_level (the same context as Rx tasklet)
+//pnetwork : returns from rtw_joinbss_event_callback
+//ptarget_wlan: found from scanned_queue
+//if join_res > 0, for (fw_state==WIFI_STATION_STATE), we check if  "ptarget_sta" & "ptarget_wlan" exist.
+//if join_res > 0, for (fw_state==WIFI_ADHOC_STATE), we only check if "ptarget_wlan" exist.
+//if join_res > 0, update "cur_network->network" from "pnetwork->network" if (ptarget_wlan !=NULL).
+//
+//#define REJOIN
+void rtw_joinbss_event_prehandle(_adapter *adapter, u8 *pbuf)
+{
+       _irqL irqL,irqL2;
+       static u8 retry=0;
+       u8 timer_cancelled;
+       struct sta_info *ptarget_sta= NULL, *pcur_sta = NULL;
+       struct  sta_priv *pstapriv = &adapter->stapriv;
+       struct  mlme_priv       *pmlmepriv = &(adapter->mlmepriv);
+       struct wlan_network     *pnetwork       = (struct wlan_network *)pbuf;
+       struct wlan_network     *cur_network = &(pmlmepriv->cur_network);
+       struct wlan_network     *pcur_wlan = NULL, *ptarget_wlan = NULL;
+       unsigned int            the_same_macaddr = _FALSE;
+
+_func_enter_;
+
+#ifdef CONFIG_RTL8712
+       //endian_convert
+       pnetwork->join_res = le32_to_cpu(pnetwork->join_res);
+       pnetwork->network_type = le32_to_cpu(pnetwork->network_type);
+       pnetwork->network.Length = le32_to_cpu(pnetwork->network.Length);
+       pnetwork->network.Ssid.SsidLength = le32_to_cpu(pnetwork->network.Ssid.SsidLength);
+       pnetwork->network.Privacy =le32_to_cpu( pnetwork->network.Privacy);
+       pnetwork->network.Rssi = le32_to_cpu(pnetwork->network.Rssi);
+       pnetwork->network.NetworkTypeInUse =le32_to_cpu(pnetwork->network.NetworkTypeInUse) ;
+       pnetwork->network.Configuration.ATIMWindow = le32_to_cpu(pnetwork->network.Configuration.ATIMWindow);
+       pnetwork->network.Configuration.BeaconPeriod = le32_to_cpu(pnetwork->network.Configuration.BeaconPeriod);
+       pnetwork->network.Configuration.DSConfig = le32_to_cpu(pnetwork->network.Configuration.DSConfig);
+       pnetwork->network.Configuration.FHConfig.DwellTime=le32_to_cpu(pnetwork->network.Configuration.FHConfig.DwellTime);
+       pnetwork->network.Configuration.FHConfig.HopPattern=le32_to_cpu(pnetwork->network.Configuration.FHConfig.HopPattern);
+       pnetwork->network.Configuration.FHConfig.HopSet=le32_to_cpu(pnetwork->network.Configuration.FHConfig.HopSet);
+       pnetwork->network.Configuration.FHConfig.Length=le32_to_cpu(pnetwork->network.Configuration.FHConfig.Length);
+       pnetwork->network.Configuration.Length = le32_to_cpu(pnetwork->network.Configuration.Length);
+       pnetwork->network.InfrastructureMode = le32_to_cpu(pnetwork->network.InfrastructureMode);
+       pnetwork->network.IELength = le32_to_cpu(pnetwork->network.IELength );
+#endif
+
+       RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("joinbss event call back received with res=%d\n", pnetwork->join_res));
+
+       rtw_get_encrypt_decrypt_from_registrypriv(adapter);
+
+
+       if (pmlmepriv->assoc_ssid.SsidLength == 0)
+       {
+               RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("@@@@@   joinbss event call back  for Any SSid\n"));
+       }
+       else
+       {
+               RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("@@@@@   rtw_joinbss_event_callback for SSid:%s\n", pmlmepriv->assoc_ssid.Ssid));
+       }
+
+       the_same_macaddr = _rtw_memcmp(pnetwork->network.MacAddress, cur_network->network.MacAddress, ETH_ALEN);
+
+       pnetwork->network.Length = get_WLAN_BSSID_EX_sz(&pnetwork->network);
+       if(pnetwork->network.Length > sizeof(WLAN_BSSID_EX))
+       {
+               RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("\n\n ***joinbss_evt_callback return a wrong bss ***\n\n"));
+               goto ignore_joinbss_callback;
+       }
+
+       _enter_critical_bh(&pmlmepriv->lock, &irqL);
+
+       RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("\n rtw_joinbss_event_callback !! _enter_critical \n"));
+
+       if(pnetwork->join_res > 0)
+       {
+               _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+               retry = 0;
+               if (check_fwstate(pmlmepriv,_FW_UNDER_LINKING) )
+               {
+                       //s1. find ptarget_wlan
+                       if(check_fwstate(pmlmepriv, _FW_LINKED) )
+                       {
+                               if(the_same_macaddr == _TRUE)
+                               {
+                                       ptarget_wlan = rtw_find_network(&pmlmepriv->scanned_queue, cur_network->network.MacAddress);
+                               }
+                               else
+                               {
+                                       pcur_wlan = rtw_find_network(&pmlmepriv->scanned_queue, cur_network->network.MacAddress);
+                                       if(pcur_wlan)   pcur_wlan->fixed = _FALSE;
+
+                                       pcur_sta = rtw_get_stainfo(pstapriv, cur_network->network.MacAddress);
+                                       if(pcur_sta){
+                                               _enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL2);
+                                               rtw_free_stainfo(adapter,  pcur_sta);
+                                               _exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL2);
+                                       }
+
+                                       ptarget_wlan = rtw_find_network(&pmlmepriv->scanned_queue, pnetwork->network.MacAddress);
+                                       if(check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _TRUE){
+                                               if(ptarget_wlan)        ptarget_wlan->fixed = _TRUE;
+                                       }
+                               }
+
+                       }
+                       else
+                       {
+                               ptarget_wlan = rtw_find_network(&pmlmepriv->scanned_queue, pnetwork->network.MacAddress);
+                               if(check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _TRUE){
+                                       if(ptarget_wlan)        ptarget_wlan->fixed = _TRUE;
+                               }
+                       }
+
+                       //s2. update cur_network
+                       if(ptarget_wlan)
+                       {
+                               rtw_joinbss_update_network(adapter, ptarget_wlan, pnetwork);
+                       }
+                       else
+                       {
+                               RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("Can't find ptarget_wlan when joinbss_event callback\n"));
+                               _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+                               goto ignore_joinbss_callback;
+                       }
+
+
+                       //s3. find ptarget_sta & update ptarget_sta after update cur_network only for station mode
+                       if(check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _TRUE)
+                       {
+                               ptarget_sta = rtw_joinbss_update_stainfo(adapter, pnetwork);
+                               if(ptarget_sta==NULL)
+                               {
+                                       RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("Can't update stainfo when joinbss_event callback\n"));
+                                       _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+                                       goto ignore_joinbss_callback;
+                               }
+                       }
+
+                       //s4. indicate connect
+                       if(check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _TRUE)
+                       {
+                               rtw_indicate_connect(adapter);
+                       }
+                       else
+                       {
+                               //adhoc mode will rtw_indicate_connect when rtw_stassoc_event_callback
+                               RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("adhoc mode, fw_state:%x", get_fwstate(pmlmepriv)));
+                       }
+
+
+                       //s5. Cancle assoc_timer
+                       _cancel_timer(&pmlmepriv->assoc_timer, &timer_cancelled);
+
+                       RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("Cancle assoc_timer\n"));
+
+               }
+               else
+               {
+                       RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("rtw_joinbss_event_callback err: fw_state:%x", get_fwstate(pmlmepriv)));
+                       _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+                       goto ignore_joinbss_callback;
+               }
+
+               _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+
+       }
+       else if(pnetwork->join_res == -4)
+       {
+               rtw_reset_securitypriv(adapter);
+               _set_timer(&pmlmepriv->assoc_timer, 1);
+
+               //rtw_free_assoc_resources(adapter, 1);
+
+               if((check_fwstate(pmlmepriv, _FW_UNDER_LINKING)) == _TRUE)
+               {
+                       RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("fail! clear _FW_UNDER_LINKING ^^^fw_state=%x\n", get_fwstate(pmlmepriv)));
+                       _clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
+               }
+
+       }
+       else //if join_res < 0 (join fails), then try again
+       {
+
+               #ifdef REJOIN
+               res = _FAIL;
+               if(retry < 2) {
+                       res = rtw_select_and_join_from_scanned_queue(pmlmepriv);
+                       RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("rtw_select_and_join_from_scanned_queue again! res:%d\n",res));
+               }
+
+                if(res == _SUCCESS)
+               {
+                       //extend time of assoc_timer
+                       _set_timer(&pmlmepriv->assoc_timer, MAX_JOIN_TIMEOUT);
+                       retry++;
+               }
+               else if(res == 2)//there is no need to wait for join
+               {
+                       _clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
+                       rtw_indicate_connect(adapter);
+               }
+               else
+               {
+                       RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("Set Assoc_Timer = 1; can't find match ssid in scanned_q \n"));
+               #endif
+
+                       _set_timer(&pmlmepriv->assoc_timer, 1);
+                       //rtw_free_assoc_resources(adapter, 1);
+                       _clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
+
+               #ifdef REJOIN
+                       retry = 0;
+               }
+               #endif
+       }
+
+ignore_joinbss_callback:
+
+       _exit_critical_bh(&pmlmepriv->lock, &irqL);
+       _func_exit_;
+}
+
+void rtw_joinbss_event_callback(_adapter *adapter, u8 *pbuf)
+{
+       struct wlan_network     *pnetwork       = (struct wlan_network *)pbuf;
+
+_func_enter_;
+
+       mlmeext_joinbss_event_callback(adapter, pnetwork->join_res);
+
+       rtw_os_xmit_schedule(adapter);
+
+#ifdef CONFIG_CONCURRENT_MODE
+       rtw_os_xmit_schedule(adapter->pbuddy_adapter);
+#endif
+
+#ifdef CONFIG_DUALMAC_CONCURRENT
+       dc_resume_xmit(adapter);
+#endif
+
+_func_exit_;
+}
+
+void rtw_stassoc_event_callback(_adapter *adapter, u8 *pbuf)
+{
+       _irqL irqL;
+       struct sta_info *psta;
+       struct mlme_priv *pmlmepriv = &(adapter->mlmepriv);
+       struct stassoc_event    *pstassoc       = (struct stassoc_event*)pbuf;
+       struct wlan_network     *cur_network = &(pmlmepriv->cur_network);
+       struct wlan_network     *ptarget_wlan = NULL;
+
+_func_enter_;
+
+       if(rtw_access_ctrl(adapter, pstassoc->macaddr) == _FALSE)
+               return;
+
+#if defined (CONFIG_AP_MODE) && defined (CONFIG_NATIVEAP_MLME)
+       if(check_fwstate(pmlmepriv, WIFI_AP_STATE))
+       {
+               psta = rtw_get_stainfo(&adapter->stapriv, pstassoc->macaddr);
+               if(psta)
+               {
+#ifdef CONFIG_IOCTL_CFG80211
+#ifdef COMPAT_KERNEL_RELEASE
+
+#elif (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,37)) || defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
+                       u8 *passoc_req = NULL;
+                       u32 assoc_req_len;
+
+                       _enter_critical_bh(&psta->lock, &irqL);
+                       if(psta->passoc_req && psta->assoc_req_len>0)
+                       {
+                               passoc_req = rtw_zmalloc(psta->assoc_req_len);
+                               if(passoc_req)
+                               {
+                                       assoc_req_len = psta->assoc_req_len;
+                                       _rtw_memcpy(passoc_req, psta->passoc_req, assoc_req_len);
+
+                                       rtw_mfree(psta->passoc_req , psta->assoc_req_len);
+                                       psta->passoc_req = NULL;
+                                       psta->assoc_req_len = 0;
+                               }
+                       }
+                       _exit_critical_bh(&psta->lock, &irqL);
+
+                       if(passoc_req && assoc_req_len>0)
+                       {
+                               rtw_cfg80211_indicate_sta_assoc(adapter, passoc_req, assoc_req_len);
+
+                               rtw_mfree(passoc_req, assoc_req_len);
+                       }
+#endif //(LINUX_VERSION_CODE < KERNEL_VERSION(2,6,37)) || defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
+#endif //CONFIG_IOCTL_CFG80211
+
+                       //bss_cap_update_on_sta_join(adapter, psta);
+                       //sta_info_update(adapter, psta);
+                       ap_sta_info_defer_update(adapter, psta);
+               }
+
+               goto exit;
+       }
+#endif
+
+       psta = rtw_get_stainfo(&adapter->stapriv, pstassoc->macaddr);
+       if( psta != NULL)
+       {
+               //the sta have been in sta_info_queue => do nothing
+
+               RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("Error: rtw_stassoc_event_callback: sta has been in sta_hash_queue \n"));
+
+               goto exit; //(between drv has received this event before and  fw have not yet to set key to CAM_ENTRY)
+       }
+
+       psta = rtw_alloc_stainfo(&adapter->stapriv, pstassoc->macaddr);
+       if (psta == NULL) {
+               RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("Can't alloc sta_info when rtw_stassoc_event_callback\n"));
+               goto exit;
+       }
+
+       //to do : init sta_info variable
+       psta->qos_option = 0;
+       psta->mac_id = (uint)pstassoc->cam_id;
+       //psta->aid = (uint)pstassoc->cam_id;
+
+       if(adapter->securitypriv.dot11AuthAlgrthm==dot11AuthAlgrthm_8021X)
+               psta->dot118021XPrivacy = adapter->securitypriv.dot11PrivacyAlgrthm;
+
+       psta->ieee8021x_blocked = _FALSE;
+
+       _enter_critical_bh(&pmlmepriv->lock, &irqL);
+
+       if ( (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)==_TRUE ) ||
+               (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)==_TRUE ) )
+       {
+               if(adapter->stapriv.asoc_sta_count== 2)
+               {
+                       _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+                       ptarget_wlan = rtw_find_network(&pmlmepriv->scanned_queue, cur_network->network.MacAddress);
+                       if(ptarget_wlan)        ptarget_wlan->fixed = _TRUE;
+                       _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+                       // a sta + bc/mc_stainfo (not Ibss_stainfo)
+                       rtw_indicate_connect(adapter);
+               }
+       }
+
+       _exit_critical_bh(&pmlmepriv->lock, &irqL);
+
+
+       mlmeext_sta_add_event_callback(adapter, psta);
+
+#ifdef CONFIG_RTL8711
+       //submit SetStaKey_cmd to tell fw, fw will allocate an CAM entry for this sta
+       rtw_setstakey_cmd(adapter, (unsigned char*)psta, _FALSE);
+#endif
+
+exit:
+
+_func_exit_;
+
+}
+
+void rtw_stadel_event_callback(_adapter *adapter, u8 *pbuf)
+{
+       _irqL irqL,irqL2;
+       struct sta_info *psta;
+       struct wlan_network* pwlan = NULL;
+       WLAN_BSSID_EX    *pdev_network=NULL;
+       u8* pibss = NULL;
+       struct  mlme_priv       *pmlmepriv = &(adapter->mlmepriv);
+       struct  stadel_event *pstadel   = (struct stadel_event*)pbuf;
+       struct  sta_priv *pstapriv = &adapter->stapriv;
+       struct wlan_network *tgt_network = &(pmlmepriv->cur_network);
+
+_func_enter_;
+
+        if(check_fwstate(pmlmepriv, WIFI_AP_STATE))
+        {
+#ifdef CONFIG_IOCTL_CFG80211
+#ifdef COMPAT_KERNEL_RELEASE
+
+#elif (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,37)) || defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
+               rtw_cfg80211_indicate_sta_disassoc(adapter, pstadel->macaddr, *(u16*)pstadel->rsvd);
+#endif //(LINUX_VERSION_CODE < KERNEL_VERSION(2,6,37)) || defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
+#endif //CONFIG_IOCTL_CFG80211
+
+               return;
+        }
+
+
+       mlmeext_sta_del_event_callback(adapter);
+
+       _enter_critical_bh(&pmlmepriv->lock, &irqL2);
+
+       if(check_fwstate(pmlmepriv, WIFI_STATION_STATE) )
+       {
+               #ifdef CONFIG_LAYER2_ROAMING
+               if (rtw_to_roaming(adapter) > 0)
+                       pmlmepriv->to_roaming--; /* this stadel_event is caused by roaming, decrease to_roaming */
+               else if (rtw_to_roaming(adapter) == 0)
+                       rtw_set_roaming(adapter, adapter->registrypriv.max_roaming_times);
+#ifdef CONFIG_INTEL_WIDI
+               if(adapter->mlmepriv.widi_state != INTEL_WIDI_STATE_CONNECTED)
+#endif // CONFIG_INTEL_WIDI
+               if(*((unsigned short *)(pstadel->rsvd)) != WLAN_REASON_EXPIRATION_CHK)
+                       rtw_set_roaming(adapter, 0); /* don't roam */
+               #endif
+
+               rtw_free_uc_swdec_pending_queue(adapter);
+
+               rtw_free_assoc_resources(adapter, 1);
+               rtw_indicate_disconnect(adapter);
+               _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+               // remove the network entry in scanned_queue
+               pwlan = rtw_find_network(&pmlmepriv->scanned_queue, tgt_network->network.MacAddress);
+               if (pwlan) {
+                       pwlan->fixed = _FALSE;
+                       rtw_free_network_nolock(pmlmepriv, pwlan);
+               }
+               _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+
+               _rtw_roaming(adapter, tgt_network);
+
+#ifdef CONFIG_INTEL_WIDI
+               if (!rtw_to_roaming(adapter))
+                       process_intel_widi_disconnect(adapter, 1);
+#endif // CONFIG_INTEL_WIDI
+       }
+
+       if ( check_fwstate(pmlmepriv,WIFI_ADHOC_MASTER_STATE) ||
+             check_fwstate(pmlmepriv,WIFI_ADHOC_STATE))
+       {
+               psta = rtw_get_stainfo(&adapter->stapriv, pstadel->macaddr);
+
+               _enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
+               rtw_free_stainfo(adapter,  psta);
+               _exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
+
+               if(adapter->stapriv.asoc_sta_count== 1) //a sta + bc/mc_stainfo (not Ibss_stainfo)
+               {
+                       //rtw_indicate_disconnect(adapter);//removed@20091105
+                       _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+                       //free old ibss network
+                       //pwlan = rtw_find_network(&pmlmepriv->scanned_queue, pstadel->macaddr);
+                       pwlan = rtw_find_network(&pmlmepriv->scanned_queue, tgt_network->network.MacAddress);
+                       if(pwlan)
+                       {
+                               pwlan->fixed = _FALSE;
+                               rtw_free_network_nolock(pmlmepriv, pwlan);
+                       }
+                       _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+                       //re-create ibss
+                       pdev_network = &(adapter->registrypriv.dev_network);
+                       pibss = adapter->registrypriv.dev_network.MacAddress;
+
+                       _rtw_memcpy(pdev_network, &tgt_network->network, get_WLAN_BSSID_EX_sz(&tgt_network->network));
+
+                       _rtw_memset(&pdev_network->Ssid, 0, sizeof(NDIS_802_11_SSID));
+                       _rtw_memcpy(&pdev_network->Ssid, &pmlmepriv->assoc_ssid, sizeof(NDIS_802_11_SSID));
+
+                       rtw_update_registrypriv_dev_network(adapter);
+
+                       rtw_generate_random_ibss(pibss);
+
+                       if(check_fwstate(pmlmepriv,WIFI_ADHOC_STATE))
+                       {
+                               set_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE);
+                               _clr_fwstate_(pmlmepriv, WIFI_ADHOC_STATE);
+                       }
+
+                       if(rtw_createbss_cmd(adapter)!=_SUCCESS)
+                       {
+
+                               RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("***Error=>stadel_event_callback: rtw_createbss_cmd status FAIL*** \n "));
+
+                       }
+
+
+               }
+
+       }
+
+       _exit_critical_bh(&pmlmepriv->lock, &irqL2);
+
+_func_exit_;
+
+}
+
+
+void rtw_cpwm_event_callback(PADAPTER padapter, u8 *pbuf)
+{
+#ifdef CONFIG_LPS_LCLK
+       struct reportpwrstate_parm *preportpwrstate;
+#endif
+
+_func_enter_;
+
+       RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("rtw_cpwm_event_callback !!!\n"));
+#ifdef CONFIG_LPS_LCLK
+       preportpwrstate = (struct reportpwrstate_parm*)pbuf;
+       preportpwrstate->state |= (u8)(padapter->pwrctrlpriv.cpwm_tog + 0x80);
+       cpwm_int_hdl(padapter, preportpwrstate);
+#endif
+
+_func_exit_;
+
+}
+
+/*
+* _rtw_join_timeout_handler - Timeout/faliure handler for CMD JoinBss
+* @adapter: pointer to _adapter structure
+*/
+void _rtw_join_timeout_handler (_adapter *adapter)
+{
+       _irqL irqL;
+       struct  mlme_priv *pmlmepriv = &adapter->mlmepriv;
+#ifdef CONFIG_LAYER2_ROAMING
+       int do_join_r;
+#endif //CONFIG_LAYER2_ROAMING
+
+#if 0
+       if (adapter->bDriverStopped == _TRUE){
+               _rtw_up_sema(&pmlmepriv->assoc_terminate);
+               return;
+       }
+#endif
+
+_func_enter_;
+#ifdef PLATFORM_FREEBSD
+               rtw_mtx_lock(NULL);
+                if (callout_pending(&adapter->mlmepriv.assoc_timer.callout)) {
+                        /* callout was reset */
+                        //mtx_unlock(&sc->sc_mtx);
+                        rtw_mtx_unlock(NULL);
+                        return;
+                }
+                if (!callout_active(&adapter->mlmepriv.assoc_timer.callout)) {
+                        /* callout was stopped */
+                        //mtx_unlock(&sc->sc_mtx);
+                        rtw_mtx_unlock(NULL);
+                        return;
+                }
+                callout_deactivate(&adapter->mlmepriv.assoc_timer.callout);
+
+
+#endif
+
+       DBG_871X("%s, fw_state=%x\n", __FUNCTION__, get_fwstate(pmlmepriv));
+
+       if(adapter->bDriverStopped ||adapter->bSurpriseRemoved)
+               return;
+
+
+       _enter_critical_bh(&pmlmepriv->lock, &irqL);
+
+       #ifdef CONFIG_LAYER2_ROAMING
+       if (rtw_to_roaming(adapter) > 0) { /* join timeout caused by roaming */
+               while(1) {
+                       pmlmepriv->to_roaming--;
+                       if (rtw_to_roaming(adapter) != 0) { /* try another */
+                               DBG_871X("%s try another roaming\n", __FUNCTION__);
+                               if( _SUCCESS!=(do_join_r=rtw_do_join(adapter)) ) {
+                                       DBG_871X("%s roaming do_join return %d\n", __FUNCTION__ ,do_join_r);
+                                       continue;
+                               }
+                               break;
+                       } else {
+#ifdef CONFIG_INTEL_WIDI
+                               if(adapter->mlmepriv.widi_state == INTEL_WIDI_STATE_ROAMING)
+                               {
+                                       _rtw_memset(pmlmepriv->sa_ext, 0x00, L2SDTA_SERVICE_VE_LEN);
+                                       intel_widi_wk_cmd(adapter, INTEL_WIDI_LISTEN_WK, NULL);
+                                       DBG_871X("change to widi listen\n");
+                               }
+#endif // CONFIG_INTEL_WIDI
+                               DBG_871X("%s We've try roaming but fail\n", __FUNCTION__);
+                               rtw_indicate_disconnect(adapter);
+                               break;
+                       }
+               }
+
+       } else
+       #endif
+       {
+               rtw_indicate_disconnect(adapter);
+               free_scanqueue(pmlmepriv);//???
+
+#ifdef CONFIG_IOCTL_CFG80211
+               //indicate disconnect for the case that join_timeout and check_fwstate != FW_LINKED
+               rtw_cfg80211_indicate_disconnect(adapter);
+#endif //CONFIG_IOCTL_CFG80211
+
+       }
+
+       _exit_critical_bh(&pmlmepriv->lock, &irqL);
+
+
+#ifdef CONFIG_DRVEXT_MODULE_WSC
+       drvext_assoc_fail_indicate(&adapter->drvextpriv);
+#endif
+#ifdef PLATFORM_FREEBSD
+               rtw_mtx_unlock(NULL);
+#endif
+
+_func_exit_;
+
+}
+
+/*
+* rtw_scan_timeout_handler - Timeout/Faliure handler for CMD SiteSurvey
+* @adapter: pointer to _adapter structure
+*/
+void rtw_scan_timeout_handler (_adapter *adapter)
+{
+       _irqL irqL;
+       struct  mlme_priv *pmlmepriv = &adapter->mlmepriv;
+
+       DBG_871X(FUNC_ADPT_FMT" fw_state=%x\n", FUNC_ADPT_ARG(adapter), get_fwstate(pmlmepriv));
+
+       _enter_critical_bh(&pmlmepriv->lock, &irqL);
+
+       _clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY);
+
+       _exit_critical_bh(&pmlmepriv->lock, &irqL);
+
+       rtw_indicate_scan_done(adapter, _TRUE);
+
+}
+
+static void rtw_auto_scan_handler(_adapter *padapter)
+{
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+       struct pwrctrl_priv *pwrctrlpriv = &padapter->pwrctrlpriv;
+
+       //auto site survey per 60sec
+       if(pmlmepriv->scan_interval >0)
+       {
+               pmlmepriv->scan_interval--;
+               if(pmlmepriv->scan_interval==0)
+               {
+/*
+                       if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY|_FW_UNDER_LINKING) == _TRUE)
+                       {
+                               DBG_871X("exit %s when _FW_UNDER_SURVEY|_FW_UNDER_LINKING -> \n", __FUNCTION__);
+                               return;
+                       }
+
+                       if(pmlmepriv->sitesurveyctrl.traffic_busy == _TRUE)
+                       {
+                               DBG_871X("%s exit cause traffic_busy(%x)\n",__FUNCTION__, pmlmepriv->sitesurveyctrl.traffic_busy);
+                               return;
+                       }
+*/
+
+#ifdef CONFIG_CONCURRENT_MODE
+                       if (rtw_buddy_adapter_up(padapter))
+                       {
+                               if ((check_buddy_fwstate(padapter, _FW_UNDER_SURVEY|_FW_UNDER_LINKING) == _TRUE) ||
+                                       (padapter->pbuddy_adapter->mlmepriv.LinkDetectInfo.bBusyTraffic == _TRUE))
+                               {
+                                       DBG_871X("%s, but buddy_intf is under scanning or linking or BusyTraffic\n", __FUNCTION__);
+                                       return;
+                               }
+                       }
+#endif
+
+                       DBG_871X("%s\n", __FUNCTION__);
+
+                       rtw_set_802_11_bssid_list_scan(padapter, NULL, 0);
+
+                       pmlmepriv->scan_interval = SCAN_INTERVAL;// 30*2 sec = 60sec
+
+               }
+
+       }
+
+}
+
+void rtw_dynamic_check_timer_handlder(_adapter *adapter)
+{
+#ifdef CONFIG_AP_MODE
+       struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
+#endif //CONFIG_AP_MODE
+       struct registry_priv *pregistrypriv = &adapter->registrypriv;
+#ifdef CONFIG_CONCURRENT_MODE
+       PADAPTER pbuddy_adapter = adapter->pbuddy_adapter;
+#endif
+
+       if(!adapter)
+               return;
+
+       if(adapter->hw_init_completed == _FALSE)
+               return;
+
+       if ((adapter->bDriverStopped == _TRUE)||(adapter->bSurpriseRemoved== _TRUE))
+               return;
+
+
+#ifdef CONFIG_CONCURRENT_MODE
+       if(pbuddy_adapter)
+       {
+               if(adapter->net_closed == _TRUE && pbuddy_adapter->net_closed == _TRUE)
+               {
+                       return;
+               }
+       }
+       else
+#endif //CONFIG_CONCURRENT_MODE
+       if(adapter->net_closed == _TRUE)
+       {
+               return;
+       }
+
+       rtw_dynamic_chk_wk_cmd(adapter);
+
+       if(pregistrypriv->wifi_spec==1)
+       {
+#ifdef CONFIG_P2P
+               struct wifidirect_info *pwdinfo = &adapter->wdinfo;
+               if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+#endif
+               {
+                       //auto site survey
+                       rtw_auto_scan_handler(adapter);
+               }
+       }
+
+#ifndef CONFIG_ACTIVE_KEEP_ALIVE_CHECK
+#ifdef CONFIG_AP_MODE
+       if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
+       {
+               expire_timeout_chk(adapter);
+       }
+#endif
+#endif //!CONFIG_ACTIVE_KEEP_ALIVE_CHECK
+
+#ifdef CONFIG_BR_EXT
+
+#if (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 35))
+       rcu_read_lock();
+#endif // (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 35))
+
+#if (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
+       if( adapter->pnetdev->br_port
+#else  // (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
+       if( rcu_dereference(adapter->pnetdev->rx_handler_data)
+#endif // (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
+               && (check_fwstate(pmlmepriv, WIFI_STATION_STATE|WIFI_ADHOC_STATE) == _TRUE) )
+       {
+               // expire NAT2.5 entry
+               void nat25_db_expire(_adapter *priv);
+               nat25_db_expire(adapter);
+
+               if (adapter->pppoe_connection_in_progress > 0) {
+                       adapter->pppoe_connection_in_progress--;
+               }
+
+               // due to rtw_dynamic_check_timer_handlder() is called every 2 seconds
+               if (adapter->pppoe_connection_in_progress > 0) {
+                       adapter->pppoe_connection_in_progress--;
+               }
+       }
+
+#if (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 35))
+       rcu_read_unlock();
+#endif // (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 35))
+
+#endif // CONFIG_BR_EXT
+
+}
+
+
+#ifdef CONFIG_SET_SCAN_DENY_TIMER
+inline bool rtw_is_scan_deny(_adapter *adapter)
+{
+       struct mlme_priv *mlmepriv = &adapter->mlmepriv;
+       return (ATOMIC_READ(&mlmepriv->set_scan_deny) != 0) ? _TRUE : _FALSE;
+}
+
+inline void rtw_clear_scan_deny(_adapter *adapter)
+{
+       struct mlme_priv *mlmepriv = &adapter->mlmepriv;
+       ATOMIC_SET(&mlmepriv->set_scan_deny, 0);
+       if (0)
+       DBG_871X(FUNC_ADPT_FMT"\n", FUNC_ADPT_ARG(adapter));
+}
+
+void rtw_set_scan_deny_timer_hdl(_adapter *adapter)
+{
+       rtw_clear_scan_deny(adapter);
+}
+
+void rtw_set_scan_deny(_adapter *adapter, u32 ms)
+{
+       struct mlme_priv *mlmepriv = &adapter->mlmepriv;
+#ifdef CONFIG_CONCURRENT_MODE
+       struct mlme_priv *b_mlmepriv;
+#endif
+
+       if (0)
+       DBG_871X(FUNC_ADPT_FMT"\n", FUNC_ADPT_ARG(adapter));
+       ATOMIC_SET(&mlmepriv->set_scan_deny, 1);
+       _set_timer(&mlmepriv->set_scan_deny_timer, ms);
+
+#ifdef CONFIG_CONCURRENT_MODE
+       if (!adapter->pbuddy_adapter)
+               return;
+
+       if (0)
+       DBG_871X(FUNC_ADPT_FMT"\n", FUNC_ADPT_ARG(adapter->pbuddy_adapter));
+       b_mlmepriv = &adapter->pbuddy_adapter->mlmepriv;
+       ATOMIC_SET(&b_mlmepriv->set_scan_deny, 1);
+       _set_timer(&b_mlmepriv->set_scan_deny_timer, ms);
+#endif
+
+}
+#endif
+
+#if defined(IEEE80211_SCAN_RESULT_EXPIRE)
+#define RTW_SCAN_RESULT_EXPIRE IEEE80211_SCAN_RESULT_EXPIRE/HZ*1000 -1000 //3000 -1000
+#else
+#define RTW_SCAN_RESULT_EXPIRE 2000
+#endif
+
+#ifndef PLATFORM_FREEBSD
+/*
+* Select a new join candidate from the original @param candidate and @param competitor
+* @return _TRUE: candidate is updated
+* @return _FALSE: candidate is not updated
+*/
+static int rtw_check_join_candidate(struct mlme_priv *pmlmepriv
+       , struct wlan_network **candidate, struct wlan_network *competitor)
+{
+       int updated = _FALSE;
+       _adapter *adapter = container_of(pmlmepriv, _adapter, mlmepriv);
+
+
+       //check bssid, if needed
+       if(pmlmepriv->assoc_by_bssid==_TRUE) {
+               if(_rtw_memcmp(competitor->network.MacAddress, pmlmepriv->assoc_bssid, ETH_ALEN) ==_FALSE)
+                       goto exit;
+       }
+
+       //check ssid, if needed
+       if(pmlmepriv->assoc_ssid.Ssid && pmlmepriv->assoc_ssid.SsidLength) {
+               if(     competitor->network.Ssid.SsidLength != pmlmepriv->assoc_ssid.SsidLength
+                       || _rtw_memcmp(competitor->network.Ssid.Ssid, pmlmepriv->assoc_ssid.Ssid, pmlmepriv->assoc_ssid.SsidLength) == _FALSE
+               )
+                       goto exit;
+       }
+
+       if(rtw_is_desired_network(adapter, competitor)  == _FALSE)
+               goto exit;
+
+#ifdef  CONFIG_LAYER2_ROAMING
+       if(rtw_to_roaming(adapter) > 0) {
+               if(     rtw_get_passing_time_ms((u32)competitor->last_scanned) >= RTW_SCAN_RESULT_EXPIRE
+                       || is_same_ess(&competitor->network, &pmlmepriv->cur_network.network) == _FALSE
+               )
+                       goto exit;
+       }
+#endif
+
+       if(*candidate == NULL ||(*candidate)->network.Rssi<competitor->network.Rssi )
+       {
+               *candidate = competitor;
+               updated = _TRUE;
+       }
+
+#if 0
+       if(pmlmepriv->assoc_by_bssid==_TRUE) { // associate with bssid
+               if(     (*candidate == NULL ||(*candidate)->network.Rssi<competitor->network.Rssi )
+                       && _rtw_memcmp(competitor->network.MacAddress, pmlmepriv->assoc_bssid, ETH_ALEN)==_TRUE
+               ) {
+                       *candidate = competitor;
+                       updated = _TRUE;
+               }
+       } else  if (pmlmepriv->assoc_ssid.SsidLength == 0 ) { // associate with ssid, but ssidlength is 0
+               if(     (*candidate == NULL ||(*candidate)->network.Rssi<competitor->network.Rssi ) ) {
+                       *candidate = competitor;
+                       updated = _TRUE;
+               }
+       } else
+#ifdef  CONFIG_LAYER2_ROAMING
+       if(rtw_to_roaming(adapter)) { // roaming
+               if(     (*candidate == NULL ||(*candidate)->network.Rssi<competitor->network.Rssi )
+                       && is_same_ess(&competitor->network, &pmlmepriv->cur_network.network)
+                       //&&(!is_same_network(&competitor->network, &pmlmepriv->cur_network.network))
+                       && rtw_get_passing_time_ms((u32)competitor->last_scanned) < RTW_SCAN_RESULT_EXPIRE
+                       && rtw_is_desired_network(adapter, competitor)
+               ) {
+                       *candidate = competitor;
+                       updated = _TRUE;
+               }
+
+       } else
+#endif
+       { // associate with ssid
+               if(     (*candidate == NULL ||(*candidate)->network.Rssi<competitor->network.Rssi )
+                       && (competitor->network.Ssid.SsidLength==pmlmepriv->assoc_ssid.SsidLength)
+                       &&((_rtw_memcmp(competitor->network.Ssid.Ssid, pmlmepriv->assoc_ssid.Ssid, pmlmepriv->assoc_ssid.SsidLength)) == _TRUE)
+                       && rtw_is_desired_network(adapter, competitor)
+               ) {
+                       *candidate = competitor;
+                       updated = _TRUE;
+               }
+       }
+#endif
+
+       if(updated){
+               DBG_871X("[by_bssid:%u][assoc_ssid:%s]"
+                       #ifdef  CONFIG_LAYER2_ROAMING
+                       "[to_roaming:%u] "
+                       #endif
+                       "new candidate: %s("MAC_FMT", ch%u) rssi:%d\n",
+                       pmlmepriv->assoc_by_bssid,
+                       pmlmepriv->assoc_ssid.Ssid,
+                       #ifdef  CONFIG_LAYER2_ROAMING
+                       rtw_to_roaming(adapter),
+                       #endif
+                       (*candidate)->network.Ssid.Ssid,
+                       MAC_ARG((*candidate)->network.MacAddress),
+                       (*candidate)->network.Configuration.DSConfig,
+                       (int)(*candidate)->network.Rssi
+               );
+       }
+
+exit:
+       return updated;
+}
+
+/*
+Calling context:
+The caller of the sub-routine will be in critical section...
+
+The caller must hold the following spinlock
+
+pmlmepriv->lock
+
+
+*/
+
+int rtw_select_and_join_from_scanned_queue(struct mlme_priv *pmlmepriv )
+{
+       _irqL   irqL;
+       int ret;
+       _list   *phead;
+       _adapter *adapter;
+       _queue  *queue  = &(pmlmepriv->scanned_queue);
+       struct  wlan_network    *pnetwork = NULL;
+       struct  wlan_network    *candidate = NULL;
+       u8              bSupportAntDiv = _FALSE;
+
+_func_enter_;
+
+       _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+       phead = get_list_head(queue);
+       adapter = (_adapter *)pmlmepriv->nic_hdl;
+
+       pmlmepriv->pscanned = get_next( phead );
+
+       while (!rtw_end_of_queue_search(phead, pmlmepriv->pscanned)) {
+
+               pnetwork = LIST_CONTAINOR(pmlmepriv->pscanned, struct wlan_network, list);
+               if(pnetwork==NULL){
+                       RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("%s return _FAIL:(pnetwork==NULL)\n", __FUNCTION__));
+                       ret = _FAIL;
+                       goto exit;
+               }
+
+               pmlmepriv->pscanned = get_next(pmlmepriv->pscanned);
+
+               #if 0
+               DBG_871X("MacAddress:"MAC_FMT" ssid:%s\n", MAC_ARG(pnetwork->network.MacAddress), pnetwork->network.Ssid.Ssid);
+               #endif
+
+               rtw_check_join_candidate(pmlmepriv, &candidate, pnetwork);
+
+       }
+
+       if(candidate == NULL) {
+               DBG_871X("%s: return _FAIL(candidate == NULL)\n", __FUNCTION__);
+               ret = _FAIL;
+               goto exit;
+       } else {
+               DBG_871X("%s: candidate: %s("MAC_FMT", ch:%u)\n", __FUNCTION__,
+                       candidate->network.Ssid.Ssid, MAC_ARG(candidate->network.MacAddress),
+                       candidate->network.Configuration.DSConfig);
+       }
+
+
+       // check for situation of  _FW_LINKED
+       if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)
+       {
+               DBG_871X("%s: _FW_LINKED while ask_for_joinbss!!!\n", __FUNCTION__);
+
+               #if 0 // for WPA/WPA2 authentication, wpa_supplicant will expect authentication from AP, it is needed to reconnect AP...
+               if(is_same_network(&pmlmepriv->cur_network.network, &candidate->network))
+               {
+                       DBG_871X("%s: _FW_LINKED and is same network, it needn't join again\n", __FUNCTION__);
+
+                       rtw_indicate_connect(adapter);//rtw_indicate_connect again
+
+                       ret = 2;
+                       goto exit;
+               }
+               else
+               #endif
+               {
+                       rtw_disassoc_cmd(adapter, 0, _TRUE);
+                       rtw_indicate_disconnect(adapter);
+                       rtw_free_assoc_resources(adapter, 0);
+               }
+       }
+
+       #ifdef CONFIG_ANTENNA_DIVERSITY
+       rtw_hal_get_def_var(adapter, HAL_DEF_IS_SUPPORT_ANT_DIV, &(bSupportAntDiv));
+       if(_TRUE == bSupportAntDiv)
+       {
+               u8 CurrentAntenna;
+               rtw_hal_get_def_var(adapter, HAL_DEF_CURRENT_ANTENNA, &(CurrentAntenna));
+               DBG_871X("#### Opt_Ant_(%s) , cur_Ant(%s)\n",
+                       (2==candidate->network.PhyInfo.Optimum_antenna)?"A":"B",
+                       (2==CurrentAntenna)?"A":"B"
+               );
+       }
+       #endif
+       set_fwstate(pmlmepriv, _FW_UNDER_LINKING);
+       ret = rtw_joinbss_cmd(adapter, candidate);
+
+exit:
+       _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+
+_func_exit_;
+
+       return ret;
+}
+#else
+int rtw_select_and_join_from_scanned_queue(struct mlme_priv *pmlmepriv )
+{
+       _irqL   irqL;
+       _list   *phead;
+#ifdef CONFIG_ANTENNA_DIVERSITY
+       u8 CurrentAntenna;
+#endif
+       unsigned char *dst_ssid, *src_ssid;
+       _adapter *adapter;
+       _queue  *queue  = &(pmlmepriv->scanned_queue);
+       struct  wlan_network    *pnetwork = NULL;
+       struct  wlan_network    *pnetwork_max_rssi = NULL;
+       #ifdef CONFIG_LAYER2_ROAMING
+       struct wlan_network * roaming_candidate=NULL;
+       u32 cur_time=rtw_get_current_time();
+       #endif
+
+_func_enter_;
+       _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+       phead = get_list_head(queue);
+       adapter = (_adapter *)pmlmepriv->nic_hdl;
+
+       pmlmepriv->pscanned = get_next( phead );
+
+       while (!rtw_end_of_queue_search(phead, pmlmepriv->pscanned)) {
+
+               pnetwork = LIST_CONTAINOR(pmlmepriv->pscanned, struct wlan_network, list);
+               if(pnetwork==NULL){
+                       RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("(2)rtw_select_and_join_from_scanned_queue return _FAIL:(pnetwork==NULL)\n"));
+                       _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+                       return _FAIL;
+               }
+
+               dst_ssid = pnetwork->network.Ssid.Ssid;
+               src_ssid = pmlmepriv->assoc_ssid.Ssid;
+
+               pmlmepriv->pscanned = get_next(pmlmepriv->pscanned);
+
+               #if 0
+               DBG_871X("MacAddress:"MAC_FMT" ssid:%s\n", MAC_ARG(pnetwork->network.MacAddress), pnetwork->network.Ssid.Ssid);
+               #endif
+
+               if(pmlmepriv->assoc_by_bssid==_TRUE)
+               {
+                       if(_rtw_memcmp(pnetwork->network.MacAddress, pmlmepriv->assoc_bssid, ETH_ALEN)==_TRUE)
+                       {
+                               //remove the condition @ 20081125
+                               //if((pmlmepriv->cur_network.network.InfrastructureMode==Ndis802_11AutoUnknown)||
+                               //      pmlmepriv->cur_network.network.InfrastructureMode == pnetwork->network.InfrastructureMode)
+                               //              goto ask_for_joinbss;
+
+                               if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)
+                               {
+                                       if(is_same_network(&pmlmepriv->cur_network.network, &pnetwork->network))
+                                       {
+                                               //DBG_871X("select_and_join(1): _FW_LINKED and is same network, it needn't join again\n");
+
+                                               rtw_indicate_connect(adapter);//rtw_indicate_connect again
+                                               _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+                                               return 2;
+                                       }
+                                       else
+                                       {
+                                               rtw_disassoc_cmd(adapter, 0, _TRUE);
+                                               rtw_indicate_disconnect(adapter);
+                                               rtw_free_assoc_resources(adapter, 0);
+                                               _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+                                               goto ask_for_joinbss;
+
+                                       }
+                               }
+                               else
+                               {
+                                       _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+                                       goto ask_for_joinbss;
+                               }
+
+                       }
+
+               } else if (pmlmepriv->assoc_ssid.SsidLength == 0) {
+                       _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+                       goto ask_for_joinbss;//anyway, join first selected(dequeued) pnetwork if ssid_len=0
+
+               #ifdef CONFIG_LAYER2_ROAMING
+               } else if (rtw_to_roaming(adapter) > 0) {
+
+                       if(     (roaming_candidate == NULL ||roaming_candidate->network.Rssi<pnetwork->network.Rssi )
+                               && is_same_ess(&pnetwork->network, &pmlmepriv->cur_network.network)
+                               //&&(!is_same_network(&pnetwork->network, &pmlmepriv->cur_network.network))
+                               &&  rtw_get_time_interval_ms((u32)pnetwork->last_scanned,cur_time) < 5000
+                               ) {
+                               roaming_candidate = pnetwork;
+                               //RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,
+                               DBG_871X
+                                       ("roaming_candidate???: %s("MAC_FMT")\n",
+                                       roaming_candidate->network.Ssid.Ssid, MAC_ARG(roaming_candidate->network.MacAddress) )
+                                       //)
+                                       ;
+                       }
+                       continue;
+               #endif
+
+               } else if ( (pnetwork->network.Ssid.SsidLength==pmlmepriv->assoc_ssid.SsidLength)
+                       &&((_rtw_memcmp(dst_ssid, src_ssid, pmlmepriv->assoc_ssid.SsidLength)) == _TRUE)
+                       )
+               {
+                       RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("dst_ssid=%s, src_ssid=%s \n", dst_ssid, src_ssid));
+#ifdef CONFIG_ANTENNA_DIVERSITY
+                       rtw_hal_get_def_var(adapter, HAL_DEF_CURRENT_ANTENNA, &(CurrentAntenna));
+                       DBG_871X("#### dst_ssid=(%s) Opt_Ant_(%s) , cur_Ant(%s)\n", dst_ssid,
+                               (2==pnetwork->network.PhyInfo.Optimum_antenna)?"A":"B",
+                               (2==CurrentAntenna)?"A":"B");
+#endif
+                       //remove the condition @ 20081125
+                       //if((pmlmepriv->cur_network.network.InfrastructureMode==Ndis802_11AutoUnknown)||
+                       //      pmlmepriv->cur_network.network.InfrastructureMode == pnetwork->network.InfrastructureMode)
+                       //{
+                       //      _rtw_memcpy(pmlmepriv->assoc_bssid, pnetwork->network.MacAddress, ETH_ALEN);
+                       //      goto ask_for_joinbss;
+                       //}
+
+                       if(pmlmepriv->assoc_by_rssi==_TRUE)//if the ssid is the same, select the bss which has the max rssi
+                       {
+                               if( NULL==pnetwork_max_rssi|| pnetwork->network.Rssi > pnetwork_max_rssi->network.Rssi)
+                                               pnetwork_max_rssi = pnetwork;
+                       }
+                       else if(rtw_is_desired_network(adapter, pnetwork) == _TRUE)
+                       {
+                               if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)
+                               {
+#if 0
+                                       if(is_same_network(&pmlmepriv->cur_network.network, &pnetwork->network))
+                                       {
+                                               DBG_871X("select_and_join(2): _FW_LINKED and is same network, it needn't join again\n");
+
+                                               rtw_indicate_connect(adapter);//rtw_indicate_connect again
+
+                                               return 2;
+                                       }
+                                       else
+#endif
+                                       {
+                                               rtw_disassoc_cmd(adapter, 0, _TRUE);
+                                               //rtw_indicate_disconnect(adapter);//
+                                               rtw_free_assoc_resources(adapter, 0);
+                                               _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+                                               goto ask_for_joinbss;
+                                       }
+                               }
+                               else
+                               {
+                                       _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+                                       goto ask_for_joinbss;
+                               }
+
+                       }
+
+
+               }
+
+       }
+       _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+       #ifdef CONFIG_LAYER2_ROAMING
+       if(rtw_to_roaming(adapter) > 0 && roaming_candidate ){
+               pnetwork=roaming_candidate;
+               DBG_871X("select_and_join_from_scanned_queue: roaming_candidate: %s("MAC_FMT")\n",
+                       pnetwork->network.Ssid.Ssid, MAC_ARG(pnetwork->network.MacAddress));
+               goto ask_for_joinbss;
+       }
+       #endif
+
+       if((pmlmepriv->assoc_by_rssi==_TRUE)  && (pnetwork_max_rssi!=NULL))
+       {
+               pnetwork = pnetwork_max_rssi;
+               DBG_871X("select_and_join_from_scanned_queue: pnetwork_max_rssi: %s("MAC_FMT")\n",
+                       pnetwork->network.Ssid.Ssid, MAC_ARG(pnetwork->network.MacAddress));
+               goto ask_for_joinbss;
+       }
+
+       DBG_871X("(1)rtw_select_and_join_from_scanned_queue return _FAIL\n");
+
+_func_exit_;
+
+     return _FAIL;
+
+ask_for_joinbss:
+
+_func_exit_;
+
+       return rtw_joinbss_cmd(adapter, pnetwork);
+
+}
+#endif //PLATFORM_FREEBSD
+
+
+sint rtw_set_auth(_adapter * adapter,struct security_priv *psecuritypriv)
+{
+       struct  cmd_obj* pcmd;
+       struct  setauth_parm *psetauthparm;
+       struct  cmd_priv        *pcmdpriv=&(adapter->cmdpriv);
+       sint            res=_SUCCESS;
+
+_func_enter_;
+
+       pcmd = (struct  cmd_obj*)rtw_zmalloc(sizeof(struct      cmd_obj));
+       if(pcmd==NULL){
+               res= _FAIL;  //try again
+               goto exit;
+       }
+
+       psetauthparm=(struct setauth_parm*)rtw_zmalloc(sizeof(struct setauth_parm));
+       if(psetauthparm==NULL){
+               rtw_mfree((unsigned char *)pcmd, sizeof(struct  cmd_obj));
+               res= _FAIL;
+               goto exit;
+       }
+
+       _rtw_memset(psetauthparm, 0, sizeof(struct setauth_parm));
+       psetauthparm->mode=(unsigned char)psecuritypriv->dot11AuthAlgrthm;
+
+       pcmd->cmdcode = _SetAuth_CMD_;
+       pcmd->parmbuf = (unsigned char *)psetauthparm;
+       pcmd->cmdsz =  (sizeof(struct setauth_parm));
+       pcmd->rsp = NULL;
+       pcmd->rspsz = 0;
+
+
+       _rtw_init_listhead(&pcmd->list);
+
+       RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("after enqueue set_auth_cmd, auth_mode=%x\n", psecuritypriv->dot11AuthAlgrthm));
+
+       res = rtw_enqueue_cmd(pcmdpriv, pcmd);
+
+exit:
+
+_func_exit_;
+
+       return res;
+
+}
+
+
+sint rtw_set_key(_adapter * adapter,struct security_priv *psecuritypriv,sint keyid, u8 set_tx)
+{
+       u8      keylen;
+       struct cmd_obj          *pcmd;
+       struct setkey_parm      *psetkeyparm;
+       struct cmd_priv         *pcmdpriv = &(adapter->cmdpriv);
+       struct mlme_priv                *pmlmepriv = &(adapter->mlmepriv);
+       sint    res=_SUCCESS;
+
+_func_enter_;
+
+       pcmd = (struct  cmd_obj*)rtw_zmalloc(sizeof(struct      cmd_obj));
+       if(pcmd==NULL){
+               res= _FAIL;  //try again
+               goto exit;
+       }
+       psetkeyparm=(struct setkey_parm*)rtw_zmalloc(sizeof(struct setkey_parm));
+       if(psetkeyparm==NULL){
+               rtw_mfree((unsigned char *)pcmd, sizeof(struct  cmd_obj));
+               res= _FAIL;
+               goto exit;
+       }
+
+       _rtw_memset(psetkeyparm, 0, sizeof(struct setkey_parm));
+
+       if(psecuritypriv->dot11AuthAlgrthm ==dot11AuthAlgrthm_8021X){
+               psetkeyparm->algorithm=(unsigned char)psecuritypriv->dot118021XGrpPrivacy;
+               RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("\n rtw_set_key: psetkeyparm->algorithm=(unsigned char)psecuritypriv->dot118021XGrpPrivacy=%d \n", psetkeyparm->algorithm));
+       }
+       else{
+               psetkeyparm->algorithm=(u8)psecuritypriv->dot11PrivacyAlgrthm;
+               RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("\n rtw_set_key: psetkeyparm->algorithm=(u8)psecuritypriv->dot11PrivacyAlgrthm=%d \n", psetkeyparm->algorithm));
+
+       }
+       psetkeyparm->keyid = (u8)keyid;//0~3
+       psetkeyparm->set_tx = set_tx;
+       if (is_wep_enc(psetkeyparm->algorithm))
+               psecuritypriv->key_mask |= BIT(psetkeyparm->keyid);
+
+       DBG_871X("==> rtw_set_key algorithm(%x),keyid(%x),key_mask(%x)\n",psetkeyparm->algorithm,psetkeyparm->keyid, psecuritypriv->key_mask);
+       RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("\n rtw_set_key: psetkeyparm->algorithm=%d psetkeyparm->keyid=(u8)keyid=%d \n",psetkeyparm->algorithm, keyid));
+
+       switch(psetkeyparm->algorithm){
+
+               case _WEP40_:
+                       keylen=5;
+                       _rtw_memcpy(&(psetkeyparm->key[0]), &(psecuritypriv->dot11DefKey[keyid].skey[0]), keylen);
+                       break;
+               case _WEP104_:
+                       keylen=13;
+                       _rtw_memcpy(&(psetkeyparm->key[0]), &(psecuritypriv->dot11DefKey[keyid].skey[0]), keylen);
+                       break;
+               case _TKIP_:
+                       keylen=16;
+                       _rtw_memcpy(&psetkeyparm->key, &psecuritypriv->dot118021XGrpKey[keyid], keylen);
+                       psetkeyparm->grpkey=1;
+                       break;
+               case _AES_:
+                       keylen=16;
+                       _rtw_memcpy(&psetkeyparm->key, &psecuritypriv->dot118021XGrpKey[keyid], keylen);
+                       psetkeyparm->grpkey=1;
+                       break;
+               default:
+                       RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("\n rtw_set_key:psecuritypriv->dot11PrivacyAlgrthm = %x (must be 1 or 2 or 4 or 5)\n",psecuritypriv->dot11PrivacyAlgrthm));
+                       res= _FAIL;
+                       goto exit;
+       }
+
+
+       pcmd->cmdcode = _SetKey_CMD_;
+       pcmd->parmbuf = (u8 *)psetkeyparm;
+       pcmd->cmdsz =  (sizeof(struct setkey_parm));
+       pcmd->rsp = NULL;
+       pcmd->rspsz = 0;
+
+
+       _rtw_init_listhead(&pcmd->list);
+
+       //_rtw_init_sema(&(pcmd->cmd_sem), 0);
+
+       res = rtw_enqueue_cmd(pcmdpriv, pcmd);
+
+exit:
+_func_exit_;
+       return res;
+
+}
+
+
+//adjust IEs for rtw_joinbss_cmd in WMM
+int rtw_restruct_wmm_ie(_adapter *adapter, u8 *in_ie, u8 *out_ie, uint in_len, uint initial_out_len)
+{
+       unsigned        int ielength=0;
+       unsigned int i, j;
+
+       i = 12; //after the fixed IE
+       while(i<in_len)
+       {
+               ielength = initial_out_len;
+
+               if(in_ie[i] == 0xDD && in_ie[i+2] == 0x00 && in_ie[i+3] == 0x50  && in_ie[i+4] == 0xF2 && in_ie[i+5] == 0x02 && i+5 < in_len) //WMM element ID and OUI
+               {
+
+                       //Append WMM IE to the last index of out_ie
+                       /*
+                       for(j=i; j< i+(in_ie[i+1]+2); j++)
+                       {
+                               out_ie[ielength] = in_ie[j];
+                               ielength++;
+                       }
+                       out_ie[initial_out_len+8] = 0x00; //force the QoS Info Field to be zero
+                       */
+
+                        for ( j = i; j < i + 9; j++ )
+                        {
+                            out_ie[ ielength] = in_ie[ j ];
+                            ielength++;
+                        }
+                        out_ie[ initial_out_len + 1 ] = 0x07;
+                        out_ie[ initial_out_len + 6 ] = 0x00;
+                        out_ie[ initial_out_len + 8 ] = 0x00;
+
+                       break;
+               }
+
+               i+=(in_ie[i+1]+2); // to the next IE element
+       }
+
+       return ielength;
+
+}
+
+
+//
+// Ported from 8185: IsInPreAuthKeyList(). (Renamed from SecIsInPreAuthKeyList(), 2006-10-13.)
+// Added by Annie, 2006-05-07.
+//
+// Search by BSSID,
+// Return Value:
+//             -1              :if there is no pre-auth key in the  table
+//             >=0             :if there is pre-auth key, and   return the entry id
+//
+//
+
+static int SecIsInPMKIDList(_adapter *Adapter, u8 *bssid)
+{
+       struct security_priv *psecuritypriv=&Adapter->securitypriv;
+       int i=0;
+
+       do
+       {
+               if( ( psecuritypriv->PMKIDList[i].bUsed ) &&
+                    (  _rtw_memcmp( psecuritypriv->PMKIDList[i].Bssid, bssid, ETH_ALEN ) == _TRUE ) )
+               {
+                       break;
+               }
+               else
+               {
+                       i++;
+                       //continue;
+               }
+
+       }while(i<NUM_PMKID_CACHE);
+
+       if( i == NUM_PMKID_CACHE )
+       {
+               i = -1;// Could not find.
+       }
+       else
+       {
+               // There is one Pre-Authentication Key for the specific BSSID.
+       }
+
+       return (i);
+
+}
+
+//
+// Check the RSN IE length
+// If the RSN IE length <= 20, the RSN IE didn't include the PMKID information
+// 0-11th element in the array are the fixed IE
+// 12th element in the array is the IE
+// 13th element in the array is the IE length
+//
+
+static int rtw_append_pmkid(_adapter *Adapter,int iEntry, u8 *ie, uint ie_len)
+{
+       struct security_priv *psecuritypriv=&Adapter->securitypriv;
+
+       if(ie[13]<=20){
+               // The RSN IE didn't include the PMK ID, append the PMK information
+                       ie[ie_len]=1;
+                       ie_len++;
+                       ie[ie_len]=0;   //PMKID count = 0x0100
+                       ie_len++;
+                       _rtw_memcpy(    &ie[ie_len], &psecuritypriv->PMKIDList[iEntry].PMKID, 16);
+
+                       ie_len+=16;
+                       ie[13]+=18;//PMKID length = 2+16
+
+       }
+       return (ie_len);
+
+}
+sint rtw_restruct_sec_ie(_adapter *adapter,u8 *in_ie, u8 *out_ie, uint in_len)
+{
+       u8 authmode, securitytype, match;
+       u8 sec_ie[255], uncst_oui[4], bkup_ie[255];
+       u8 wpa_oui[4]={0x0, 0x50, 0xf2, 0x01};
+       uint    ielength, cnt, remove_cnt;
+       int iEntry;
+
+       struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
+       struct security_priv *psecuritypriv=&adapter->securitypriv;
+       uint    ndisauthmode=psecuritypriv->ndisauthtype;
+       uint ndissecuritytype = psecuritypriv->ndisencryptstatus;
+
+_func_enter_;
+
+       RT_TRACE(_module_rtl871x_mlme_c_, _drv_notice_,
+                ("+rtw_restruct_sec_ie: ndisauthmode=%d ndissecuritytype=%d\n",
+                 ndisauthmode, ndissecuritytype));
+
+       //copy fixed ie only
+       _rtw_memcpy(out_ie, in_ie,12);
+       ielength=12;
+       if((ndisauthmode==Ndis802_11AuthModeWPA)||(ndisauthmode==Ndis802_11AuthModeWPAPSK))
+                       authmode=_WPA_IE_ID_;
+       if((ndisauthmode==Ndis802_11AuthModeWPA2)||(ndisauthmode==Ndis802_11AuthModeWPA2PSK))
+                       authmode=_WPA2_IE_ID_;
+
+       if(check_fwstate(pmlmepriv, WIFI_UNDER_WPS))
+       {
+               _rtw_memcpy(out_ie+ielength, psecuritypriv->wps_ie, psecuritypriv->wps_ie_len);
+
+               ielength += psecuritypriv->wps_ie_len;
+       }
+       else if((authmode==_WPA_IE_ID_)||(authmode==_WPA2_IE_ID_))
+       {
+               //copy RSN or SSN
+               _rtw_memcpy(&out_ie[ielength], &psecuritypriv->supplicant_ie[0], psecuritypriv->supplicant_ie[1]+2);
+               /* debug for CONFIG_IEEE80211W
+               {
+                       int jj;
+                       printk("supplicant_ie_length=%d &&&&&&&&&&&&&&&&&&&\n", psecuritypriv->supplicant_ie[1]+2);
+                       for(jj=0; jj < psecuritypriv->supplicant_ie[1]+2; jj++)
+                               printk(" %02x ", psecuritypriv->supplicant_ie[jj]);
+                       printk("\n");
+               }*/
+               ielength+=psecuritypriv->supplicant_ie[1]+2;
+               rtw_report_sec_ie(adapter, authmode, psecuritypriv->supplicant_ie);
+
+#ifdef CONFIG_DRVEXT_MODULE
+               drvext_report_sec_ie(&adapter->drvextpriv, authmode, sec_ie);
+#endif
+       }
+
+       iEntry = SecIsInPMKIDList(adapter, pmlmepriv->assoc_bssid);
+       if(iEntry<0)
+       {
+               return ielength;
+       }
+       else
+       {
+               if(authmode == _WPA2_IE_ID_)
+               {
+                       ielength=rtw_append_pmkid(adapter, iEntry, out_ie, ielength);
+               }
+       }
+
+_func_exit_;
+
+       return ielength;
+}
+
+void rtw_init_registrypriv_dev_network(        _adapter* adapter)
+{
+       struct registry_priv* pregistrypriv = &adapter->registrypriv;
+       struct eeprom_priv* peepriv = &adapter->eeprompriv;
+       WLAN_BSSID_EX    *pdev_network = &pregistrypriv->dev_network;
+       u8 *myhwaddr = myid(peepriv);
+
+_func_enter_;
+
+       _rtw_memcpy(pdev_network->MacAddress, myhwaddr, ETH_ALEN);
+
+       _rtw_memcpy(&pdev_network->Ssid, &pregistrypriv->ssid, sizeof(NDIS_802_11_SSID));
+
+       pdev_network->Configuration.Length=sizeof(NDIS_802_11_CONFIGURATION);
+       pdev_network->Configuration.BeaconPeriod = 100;
+       pdev_network->Configuration.FHConfig.Length = 0;
+       pdev_network->Configuration.FHConfig.HopPattern = 0;
+       pdev_network->Configuration.FHConfig.HopSet = 0;
+       pdev_network->Configuration.FHConfig.DwellTime = 0;
+
+
+_func_exit_;
+
+}
+
+void rtw_update_registrypriv_dev_network(_adapter* adapter)
+{
+       int sz=0;
+       struct registry_priv* pregistrypriv = &adapter->registrypriv;
+       WLAN_BSSID_EX    *pdev_network = &pregistrypriv->dev_network;
+       struct  security_priv*  psecuritypriv = &adapter->securitypriv;
+       struct  wlan_network    *cur_network = &adapter->mlmepriv.cur_network;
+       //struct        xmit_priv       *pxmitpriv = &adapter->xmitpriv;
+
+_func_enter_;
+
+#if 0
+       pxmitpriv->vcs_setting = pregistrypriv->vrtl_carrier_sense;
+       pxmitpriv->vcs = pregistrypriv->vcs_type;
+       pxmitpriv->vcs_type = pregistrypriv->vcs_type;
+       //pxmitpriv->rts_thresh = pregistrypriv->rts_thresh;
+       pxmitpriv->frag_len = pregistrypriv->frag_thresh;
+
+       adapter->qospriv.qos_option = pregistrypriv->wmm_enable;
+#endif
+
+       pdev_network->Privacy = (psecuritypriv->dot11PrivacyAlgrthm > 0 ? 1 : 0) ; // adhoc no 802.1x
+
+       pdev_network->Rssi = 0;
+
+       switch(pregistrypriv->wireless_mode)
+       {
+               case WIRELESS_11B:
+                       pdev_network->NetworkTypeInUse = (Ndis802_11DS);
+                       break;
+               case WIRELESS_11G:
+               case WIRELESS_11BG:
+               case WIRELESS_11_24N:
+               case WIRELESS_11G_24N:
+               case WIRELESS_11BG_24N:
+                       pdev_network->NetworkTypeInUse = (Ndis802_11OFDM24);
+                       break;
+               case WIRELESS_11A:
+               case WIRELESS_11A_5N:
+                       pdev_network->NetworkTypeInUse = (Ndis802_11OFDM5);
+                       break;
+               case WIRELESS_11ABGN:
+                       if(pregistrypriv->channel > 14)
+                               pdev_network->NetworkTypeInUse = (Ndis802_11OFDM5);
+                       else
+                               pdev_network->NetworkTypeInUse = (Ndis802_11OFDM24);
+                       break;
+               default :
+                       // TODO
+                       break;
+       }
+
+       pdev_network->Configuration.DSConfig = (pregistrypriv->channel);
+       RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("pregistrypriv->channel=%d, pdev_network->Configuration.DSConfig=0x%x\n", pregistrypriv->channel, pdev_network->Configuration.DSConfig));
+
+       if(cur_network->network.InfrastructureMode == Ndis802_11IBSS)
+               pdev_network->Configuration.ATIMWindow = (0);
+
+       pdev_network->InfrastructureMode = (cur_network->network.InfrastructureMode);
+
+       // 1. Supported rates
+       // 2. IE
+
+       //rtw_set_supported_rate(pdev_network->SupportedRates, pregistrypriv->wireless_mode) ; // will be called in rtw_generate_ie
+       sz = rtw_generate_ie(pregistrypriv);
+
+       pdev_network->IELength = sz;
+
+       pdev_network->Length = get_WLAN_BSSID_EX_sz((WLAN_BSSID_EX  *)pdev_network);
+
+       //notes: translate IELength & Length after assign the Length to cmdsz in createbss_cmd();
+       //pdev_network->IELength = cpu_to_le32(sz);
+
+_func_exit_;
+
+}
+
+void rtw_get_encrypt_decrypt_from_registrypriv(_adapter* adapter)
+{
+_func_enter_;
+
+
+_func_exit_;
+
+}
+
+//the fucntion is at passive_level
+void rtw_joinbss_reset(_adapter *padapter)
+{
+       u8      threshold;
+       struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
+
+#ifdef CONFIG_80211N_HT
+       struct ht_priv          *phtpriv = &pmlmepriv->htpriv;
+#endif
+
+       //todo: if you want to do something io/reg/hw setting before join_bss, please add code here
+
+
+
+
+#ifdef CONFIG_80211N_HT
+
+       pmlmepriv->num_FortyMHzIntolerant = 0;
+
+       pmlmepriv->num_sta_no_ht = 0;
+
+       phtpriv->ampdu_enable = _FALSE;//reset to disabled
+
+#ifdef CONFIG_USB_HCI
+       // TH=1 => means that invalidate usb rx aggregation
+       // TH=0 => means that validate usb rx aggregation, use init value.
+       if(phtpriv->ht_option)
+       {
+               if(padapter->registrypriv.wifi_spec==1)
+                       threshold = 1;
+               else
+                       threshold = 0;
+               rtw_hal_set_hwreg(padapter, HW_VAR_RXDMA_AGG_PG_TH, (u8 *)(&threshold));
+       }
+       else
+       {
+               threshold = 1;
+               rtw_hal_set_hwreg(padapter, HW_VAR_RXDMA_AGG_PG_TH, (u8 *)(&threshold));
+       }
+#endif
+
+#endif
+
+}
+
+
+#ifdef CONFIG_80211N_HT
+
+//the fucntion is >= passive_level
+unsigned int rtw_restructure_ht_ie(_adapter *padapter, u8 *in_ie, u8 *out_ie, uint in_len, uint *pout_len, u8 channel)
+{
+       u32 ielen, out_len;
+       unsigned char *p, *pframe;
+       struct rtw_ieee80211_ht_cap ht_capie;
+       unsigned char WMM_IE[] = {0x00, 0x50, 0xf2, 0x02, 0x00, 0x01, 0x00};
+       struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
+       struct qos_priv         *pqospriv= &pmlmepriv->qospriv;
+       struct ht_priv          *phtpriv = &pmlmepriv->htpriv;
+       struct registry_priv    *pregpriv = &padapter->registrypriv;
+       u8 cbw40_enable = 0;
+
+       phtpriv->ht_option = _FALSE;
+
+       p = rtw_get_ie(in_ie+12, _HT_CAPABILITY_IE_, &ielen, in_len-12);
+
+       if(p && ielen>0)
+       {
+               if(pqospriv->qos_option == 0)
+               {
+                       out_len = *pout_len;
+                       pframe = rtw_set_ie(out_ie+out_len, _VENDOR_SPECIFIC_IE_,
+                                                               _WMM_IE_Length_, WMM_IE, pout_len);
+
+                       pqospriv->qos_option = 1;
+               }
+
+               out_len = *pout_len;
+
+               _rtw_memset(&ht_capie, 0, sizeof(struct rtw_ieee80211_ht_cap));
+
+               ht_capie.cap_info =  IEEE80211_HT_CAP_SGI_20 | IEEE80211_HT_CAP_TX_STBC |
+                                                       IEEE80211_HT_CAP_DSSSCCK40;
+               //if insert module set only support 20MHZ, don't add the 40MHZ and SGI_40
+               if( channel > 14 )
+               {
+                       if( pregpriv->cbw40_enable & BIT(1) )
+                               cbw40_enable = 1;
+               }
+               else
+                       if( pregpriv->cbw40_enable & BIT(0) )
+                               cbw40_enable = 1;
+
+               if ( cbw40_enable != 0 )
+                       ht_capie.cap_info |= IEEE80211_HT_CAP_SUP_WIDTH | IEEE80211_HT_CAP_SGI_40;
+
+
+
+               {
+                       u32 rx_packet_offset, max_recvbuf_sz;
+                       rtw_hal_get_def_var(padapter, HAL_DEF_RX_PACKET_OFFSET, &rx_packet_offset);
+                       rtw_hal_get_def_var(padapter, HAL_DEF_MAX_RECVBUF_SZ, &max_recvbuf_sz);
+                       //if(max_recvbuf_sz-rx_packet_offset>(8191-256)) {
+                       //      DBG_871X("%s IEEE80211_HT_CAP_MAX_AMSDU is set\n", __FUNCTION__);
+                       //      ht_capie.cap_info = ht_capie.cap_info |IEEE80211_HT_CAP_MAX_AMSDU;
+                       //}
+               }
+
+               ht_capie.ampdu_params_info = (IEEE80211_HT_CAP_AMPDU_FACTOR&0x03);
+
+               if(padapter->securitypriv.dot11PrivacyAlgrthm == _AES_ )
+                       ht_capie.ampdu_params_info |= (IEEE80211_HT_CAP_AMPDU_DENSITY&(0x07<<2));
+               else
+                       ht_capie.ampdu_params_info |= (IEEE80211_HT_CAP_AMPDU_DENSITY&0x00);
+
+
+               pframe = rtw_set_ie(out_ie+out_len, _HT_CAPABILITY_IE_,
+                                                       sizeof(struct rtw_ieee80211_ht_cap), (unsigned char*)&ht_capie, pout_len);
+
+
+               //_rtw_memcpy(out_ie+out_len, p, ielen+2);//gtest
+               //*pout_len = *pout_len + (ielen+2);
+
+
+               phtpriv->ht_option = _TRUE;
+
+               p = rtw_get_ie(in_ie+12, _HT_ADD_INFO_IE_, &ielen, in_len-12);
+               if(p && (ielen==sizeof(struct ieee80211_ht_addt_info)))
+               {
+                       out_len = *pout_len;
+                       pframe = rtw_set_ie(out_ie+out_len, _HT_ADD_INFO_IE_, ielen, p+2 , pout_len);
+               }
+
+       }
+
+       return (phtpriv->ht_option);
+
+}
+
+//the fucntion is > passive_level (in critical_section)
+void rtw_update_ht_cap(_adapter *padapter, u8 *pie, uint ie_len, u8 channel)
+{
+       u8 *p, max_ampdu_sz;
+       int len;
+       //struct sta_info *bmc_sta, *psta;
+       struct rtw_ieee80211_ht_cap *pht_capie;
+       struct ieee80211_ht_addt_info *pht_addtinfo;
+       //struct recv_reorder_ctrl *preorder_ctrl;
+       struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
+       struct ht_priv          *phtpriv = &pmlmepriv->htpriv;
+       //struct recv_priv *precvpriv = &padapter->recvpriv;
+       struct registry_priv *pregistrypriv = &padapter->registrypriv;
+       //struct wlan_network *pcur_network = &(pmlmepriv->cur_network);;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       u8 cbw40_enable=0;
+
+       if(!phtpriv->ht_option)
+               return;
+
+       if ((!pmlmeinfo->HT_info_enable) || (!pmlmeinfo->HT_caps_enable))
+               return;
+
+       DBG_871X("+rtw_update_ht_cap()\n");
+
+       //maybe needs check if ap supports rx ampdu.
+       if((phtpriv->ampdu_enable==_FALSE) &&(pregistrypriv->ampdu_enable==1))
+       {
+               //In the wifi cert. test, the test Lab should turn off the AP's RX AMPDU. client doen't need to close the TX AMPDU
+               /*if(pregistrypriv->wifi_spec==1)
+               {
+                       phtpriv->ampdu_enable = _FALSE;
+               }
+               else*/
+               {
+                       phtpriv->ampdu_enable = _TRUE;
+               }
+       }
+       else if(pregistrypriv->ampdu_enable==2)
+       {
+               phtpriv->ampdu_enable = _TRUE;
+       }
+
+
+       //check Max Rx A-MPDU Size
+       len = 0;
+       p = rtw_get_ie(pie+sizeof (NDIS_802_11_FIXED_IEs), _HT_CAPABILITY_IE_, &len, ie_len-sizeof (NDIS_802_11_FIXED_IEs));
+       if(p && len>0)
+       {
+               pht_capie = (struct rtw_ieee80211_ht_cap *)(p+2);
+               max_ampdu_sz = (pht_capie->ampdu_params_info & IEEE80211_HT_CAP_AMPDU_FACTOR);
+               max_ampdu_sz = 1 << (max_ampdu_sz+3); // max_ampdu_sz (kbytes);
+
+               //DBG_871X("rtw_update_ht_cap(): max_ampdu_sz=%d\n", max_ampdu_sz);
+               phtpriv->rx_ampdu_maxlen = max_ampdu_sz;
+
+       }
+
+
+       len=0;
+       p = rtw_get_ie(pie+sizeof (NDIS_802_11_FIXED_IEs), _HT_ADD_INFO_IE_, &len, ie_len-sizeof (NDIS_802_11_FIXED_IEs));
+       if(p && len>0)
+       {
+               pht_addtinfo = (struct ieee80211_ht_addt_info *)(p+2);
+               //todo:
+       }
+
+       if( channel > 14 )
+       {
+               if( pregistrypriv->cbw40_enable & BIT(1) )
+                       cbw40_enable = 1;
+       }
+       else
+               if( pregistrypriv->cbw40_enable & BIT(0) )
+                       cbw40_enable = 1;
+
+
+       //update cur_bwmode & cur_ch_offset
+       if ((cbw40_enable) &&
+               (pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info & BIT(1)) &&
+               (pmlmeinfo->HT_info.infos[0] & BIT(2)))
+       {
+               int i;
+               u8      rf_type;
+
+               rtw_hal_get_hwreg(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
+
+               //update the MCS rates
+               for (i = 0; i < 16; i++)
+               {
+                       if((rf_type == RF_1T1R) || (rf_type == RF_1T2R))
+                       {
+                               pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= MCS_rate_1R[i];
+                       }
+                       else
+                       {
+                               #ifdef CONFIG_DISABLE_MCS13TO15
+                               if(pmlmeext->cur_bwmode == HT_CHANNEL_WIDTH_40 && pregistrypriv->wifi_spec != 1 )
+                               {
+                                       pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= MCS_rate_2R_MCS13TO15_OFF[i];
+                               }
+                               else
+                                       pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= MCS_rate_2R[i];
+                               #else
+                               pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= MCS_rate_2R[i];
+                               #endif //CONFIG_DISABLE_MCS13TO15
+                       }
+                       #ifdef RTL8192C_RECONFIG_TO_1T1R
+                       {
+                               pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= MCS_rate_1R[i];
+                       }
+                       #endif
+
+                       if(pregistrypriv->special_rf_path)
+                               pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= MCS_rate_1R[i];
+
+               }
+               //switch to the 40M Hz mode accoring to the AP
+               pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_40;
+               switch ((pmlmeinfo->HT_info.infos[0] & 0x3))
+               {
+                       case HT_EXTCHNL_OFFSET_UPPER:
+                               pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
+                               break;
+
+                       case HT_EXTCHNL_OFFSET_LOWER:
+                               pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
+                               break;
+
+                       default:
+                               pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+                               break;
+               }
+       }
+
+       //
+       // Config SM Power Save setting
+       //
+       pmlmeinfo->SM_PS = (pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info & 0x0C) >> 2;
+       if(pmlmeinfo->SM_PS == WLAN_HT_CAP_SM_PS_STATIC)
+       {
+               /*u8 i;
+               //update the MCS rates
+               for (i = 0; i < 16; i++)
+               {
+                       pmlmeinfo->HT_caps.HT_cap_element.MCS_rate[i] &= MCS_rate_1R[i];
+               }*/
+               DBG_871X("%s(): WLAN_HT_CAP_SM_PS_STATIC\n",__FUNCTION__);
+       }
+
+       //
+       // Config current HT Protection mode.
+       //
+       pmlmeinfo->HT_protection = pmlmeinfo->HT_info.infos[1] & 0x3;
+
+
+
+#if 0 //move to rtw_update_sta_info_client()
+       //for A-MPDU Rx reordering buffer control for bmc_sta & sta_info
+       //if A-MPDU Rx is enabled, reseting  rx_ordering_ctrl wstart_b(indicate_seq) to default value=0xffff
+       //todo: check if AP can send A-MPDU packets
+       bmc_sta = rtw_get_bcmc_stainfo(padapter);
+       if(bmc_sta)
+       {
+               for(i=0; i < 16 ; i++)
+               {
+                       //preorder_ctrl = &precvpriv->recvreorder_ctrl[i];
+                       preorder_ctrl = &bmc_sta->recvreorder_ctrl[i];
+                       preorder_ctrl->enable = _FALSE;
+                       preorder_ctrl->indicate_seq = 0xffff;
+                       #ifdef DBG_RX_SEQ
+                       DBG_871X("DBG_RX_SEQ %s:%d indicate_seq:%u \n", __FUNCTION__, __LINE__,
+                               preorder_ctrl->indicate_seq);
+                       #endif
+                       preorder_ctrl->wend_b= 0xffff;
+                       preorder_ctrl->wsize_b = 64;//max_ampdu_sz;//ex. 32(kbytes) -> wsize_b=32
+               }
+       }
+
+       psta = rtw_get_stainfo(&padapter->stapriv, pcur_network->network.MacAddress);
+       if(psta)
+       {
+               for(i=0; i < 16 ; i++)
+               {
+                       //preorder_ctrl = &precvpriv->recvreorder_ctrl[i];
+                       preorder_ctrl = &psta->recvreorder_ctrl[i];
+                       preorder_ctrl->enable = _FALSE;
+                       preorder_ctrl->indicate_seq = 0xffff;
+                       #ifdef DBG_RX_SEQ
+                       DBG_871X("DBG_RX_SEQ %s:%d indicate_seq:%u \n", __FUNCTION__, __LINE__,
+                               preorder_ctrl->indicate_seq);
+                       #endif
+                       preorder_ctrl->wend_b= 0xffff;
+                       preorder_ctrl->wsize_b = 64;//max_ampdu_sz;//ex. 32(kbytes) -> wsize_b=32
+               }
+       }
+#endif
+
+}
+
+void rtw_issue_addbareq_cmd(_adapter *padapter, struct xmit_frame *pxmitframe)
+{
+       u8 issued;
+       int priority;
+       struct sta_info *psta=NULL;
+       struct ht_priv  *phtpriv;
+       struct pkt_attrib *pattrib =&pxmitframe->attrib;
+       s32 bmcst = IS_MCAST(pattrib->ra);
+
+       if(bmcst || (padapter->mlmepriv.LinkDetectInfo.bTxBusyTraffic == _FALSE))
+               return;
+
+       priority = pattrib->priority;
+
+       if (pattrib->psta)
+               psta = pattrib->psta;
+       else
+       {
+               DBG_871X("%s, call rtw_get_stainfo()\n", __func__);
+               psta = rtw_get_stainfo(&padapter->stapriv, pattrib->ra);
+       }
+
+       if(psta==NULL)
+       {
+               DBG_871X("%s, psta==NUL\n", __func__);
+               return;
+       }
+
+       if(!(psta->state &_FW_LINKED))
+       {
+               DBG_871X("%s, psta->state(0x%x) != _FW_LINKED\n", __func__, psta->state);
+               return;
+       }
+
+
+       phtpriv = &psta->htpriv;
+
+       if((phtpriv->ht_option==_TRUE) && (phtpriv->ampdu_enable==_TRUE))
+       {
+               issued = (phtpriv->agg_enable_bitmap>>priority)&0x1;
+               issued |= (phtpriv->candidate_tid_bitmap>>priority)&0x1;
+
+               if(0==issued)
+               {
+                       DBG_871X("rtw_issue_addbareq_cmd, p=%d\n", priority);
+                       psta->htpriv.candidate_tid_bitmap |= BIT((u8)priority);
+                       rtw_addbareq_cmd(padapter,(u8) priority, pattrib->ra);
+               }
+       }
+
+}
+
+#endif
+
+#ifdef CONFIG_LAYER2_ROAMING
+inline void rtw_set_roaming(_adapter *adapter, u8 to_roaming)
+{
+       if (to_roaming == 0)
+               adapter->mlmepriv.to_join = _FALSE;
+       adapter->mlmepriv.to_roaming = to_roaming;
+}
+
+inline u8 rtw_to_roaming(_adapter *adapter)
+{
+       return adapter->mlmepriv.to_roaming;
+}
+
+void rtw_roaming(_adapter *padapter, struct wlan_network *tgt_network)
+{
+       _irqL irqL;
+       struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
+
+       _enter_critical_bh(&pmlmepriv->lock, &irqL);
+       _rtw_roaming(padapter, tgt_network);
+       _exit_critical_bh(&pmlmepriv->lock, &irqL);
+}
+void _rtw_roaming(_adapter *padapter, struct wlan_network *tgt_network)
+{
+       struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
+       int do_join_r;
+
+       struct wlan_network *pnetwork;
+
+       if(tgt_network != NULL)
+               pnetwork = tgt_network;
+       else
+               pnetwork = &pmlmepriv->cur_network;
+
+       if(0 < rtw_to_roaming(padapter)) {
+               DBG_871X("roaming from %s("MAC_FMT"), length:%d\n",
+                               pnetwork->network.Ssid.Ssid, MAC_ARG(pnetwork->network.MacAddress),
+                               pnetwork->network.Ssid.SsidLength);
+               _rtw_memcpy(&pmlmepriv->assoc_ssid, &pnetwork->network.Ssid, sizeof(NDIS_802_11_SSID));
+
+               pmlmepriv->assoc_by_bssid = _FALSE;
+
+               while(1) {
+                       if( _SUCCESS==(do_join_r=rtw_do_join(padapter)) ) {
+                               break;
+                       } else {
+                               DBG_871X("roaming do_join return %d\n", do_join_r);
+                               pmlmepriv->to_roaming--;
+
+                               if(0< rtw_to_roaming(padapter)) {
+                                       continue;
+                               } else {
+                                       DBG_871X("%s(%d) -to roaming fail, indicate_disconnect\n", __FUNCTION__,__LINE__);
+                                       rtw_indicate_disconnect(padapter);
+                                       break;
+                               }
+                       }
+               }
+       }
+
+}
+#endif
+
+#ifdef CONFIG_CONCURRENT_MODE
+sint rtw_buddy_adapter_up(_adapter *padapter)
+{
+       sint res = _FALSE;
+
+       if(padapter == NULL)
+               return res;
+
+
+       if(padapter->pbuddy_adapter == NULL)
+       {
+               res = _FALSE;
+       }
+       else if( (padapter->pbuddy_adapter->bDriverStopped) || (padapter->pbuddy_adapter->bSurpriseRemoved) ||
+               (padapter->pbuddy_adapter->bup == _FALSE) || (padapter->pbuddy_adapter->hw_init_completed == _FALSE))
+       {
+               res = _FALSE;
+       }
+       else
+       {
+               res = _TRUE;
+       }
+
+       return res;
+
+}
+
+sint check_buddy_fwstate(_adapter *padapter, sint state)
+{
+       if(padapter == NULL)
+               return _FALSE;
+
+       if(padapter->pbuddy_adapter == NULL)
+               return _FALSE;
+
+       if ((state == WIFI_FW_NULL_STATE) &&
+               (padapter->pbuddy_adapter->mlmepriv.fw_state == WIFI_FW_NULL_STATE))
+               return _TRUE;
+
+       if (padapter->pbuddy_adapter->mlmepriv.fw_state & state)
+               return _TRUE;
+
+       return _FALSE;
+}
+#endif //CONFIG_CONCURRENT_MODE
diff --git a/drivers/net/wireless/realtek/rtl8192cu/core/rtw_mlme_ext.c b/drivers/net/wireless/realtek/rtl8192cu/core/rtw_mlme_ext.c
new file mode 100644 (file)
index 0000000..b7716ae
--- /dev/null
@@ -0,0 +1,13599 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#define _RTW_MLME_EXT_C_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <wifi.h>
+#include <rtw_mlme_ext.h>
+#include <wlan_bssdef.h>
+#include <mlme_osdep.h>
+#include <recv_osdep.h>
+
+struct mlme_handler mlme_sta_tbl[]={
+       {WIFI_ASSOCREQ,         "OnAssocReq",   &OnAssocReq},
+       {WIFI_ASSOCRSP,         "OnAssocRsp",   &OnAssocRsp},
+       {WIFI_REASSOCREQ,       "OnReAssocReq", &OnAssocReq},
+       {WIFI_REASSOCRSP,       "OnReAssocRsp", &OnAssocRsp},
+       {WIFI_PROBEREQ,         "OnProbeReq",   &OnProbeReq},
+       {WIFI_PROBERSP,         "OnProbeRsp",           &OnProbeRsp},
+
+       /*----------------------------------------------------------
+                                       below 2 are reserved
+       -----------------------------------------------------------*/
+       {0,                                     "DoReserved",           &DoReserved},
+       {0,                                     "DoReserved",           &DoReserved},
+       {WIFI_BEACON,           "OnBeacon",             &OnBeacon},
+       {WIFI_ATIM,                     "OnATIM",               &OnAtim},
+       {WIFI_DISASSOC,         "OnDisassoc",           &OnDisassoc},
+       {WIFI_AUTH,                     "OnAuth",               &OnAuthClient},
+       {WIFI_DEAUTH,           "OnDeAuth",             &OnDeAuth},
+       {WIFI_ACTION,           "OnAction",             &OnAction},
+};
+
+#ifdef _CONFIG_NATIVEAP_MLME_
+struct mlme_handler mlme_ap_tbl[]={
+       {WIFI_ASSOCREQ,         "OnAssocReq",   &OnAssocReq},
+       {WIFI_ASSOCRSP,         "OnAssocRsp",   &OnAssocRsp},
+       {WIFI_REASSOCREQ,       "OnReAssocReq", &OnAssocReq},
+       {WIFI_REASSOCRSP,       "OnReAssocRsp", &OnAssocRsp},
+       {WIFI_PROBEREQ,         "OnProbeReq",   &OnProbeReq},
+       {WIFI_PROBERSP,         "OnProbeRsp",           &OnProbeRsp},
+
+       /*----------------------------------------------------------
+                                       below 2 are reserved
+       -----------------------------------------------------------*/
+       {0,                                     "DoReserved",           &DoReserved},
+       {0,                                     "DoReserved",           &DoReserved},
+       {WIFI_BEACON,           "OnBeacon",             &OnBeacon},
+       {WIFI_ATIM,                     "OnATIM",               &OnAtim},
+       {WIFI_DISASSOC,         "OnDisassoc",           &OnDisassoc},
+       {WIFI_AUTH,                     "OnAuth",               &OnAuth},
+       {WIFI_DEAUTH,           "OnDeAuth",             &OnDeAuth},
+       {WIFI_ACTION,           "OnAction",             &OnAction},
+};
+#endif
+
+struct action_handler OnAction_tbl[]={
+       {RTW_WLAN_CATEGORY_SPECTRUM_MGMT,        "ACTION_SPECTRUM_MGMT", on_action_spct},
+       {RTW_WLAN_CATEGORY_QOS, "ACTION_QOS", &OnAction_qos},
+       {RTW_WLAN_CATEGORY_DLS, "ACTION_DLS", &OnAction_dls},
+       {RTW_WLAN_CATEGORY_BACK, "ACTION_BACK", &OnAction_back},
+       {RTW_WLAN_CATEGORY_PUBLIC, "ACTION_PUBLIC", on_action_public},
+       {RTW_WLAN_CATEGORY_RADIO_MEASUREMENT, "ACTION_RADIO_MEASUREMENT", &DoReserved},
+       {RTW_WLAN_CATEGORY_FT, "ACTION_FT",     &DoReserved},
+       {RTW_WLAN_CATEGORY_HT,  "ACTION_HT",    &OnAction_ht},
+#ifdef CONFIG_IEEE80211W
+       {RTW_WLAN_CATEGORY_SA_QUERY, "ACTION_SA_QUERY", &OnAction_sa_query},
+#else
+       {RTW_WLAN_CATEGORY_SA_QUERY, "ACTION_SA_QUERY", &DoReserved},
+#endif //CONFIG_IEEE80211W
+       //add for CONFIG_IEEE80211W
+       {RTW_WLAN_CATEGORY_UNPROTECTED_WNM, "ACTION_UNPROTECTED_WNM", &DoReserved},
+       {RTW_WLAN_CATEGORY_SELF_PROTECTED, "ACTION_SELF_PROTECTED", &DoReserved},
+       {RTW_WLAN_CATEGORY_WMM, "ACTION_WMM", &OnAction_wmm},
+       {RTW_WLAN_CATEGORY_P2P, "ACTION_P2P", &OnAction_p2p},
+};
+
+
+u8     null_addr[ETH_ALEN]= {0,0,0,0,0,0};
+
+/**************************************************
+OUI definitions for the vendor specific IE
+***************************************************/
+unsigned char  RTW_WPA_OUI[] = {0x00, 0x50, 0xf2, 0x01};
+unsigned char WMM_OUI[] = {0x00, 0x50, 0xf2, 0x02};
+unsigned char  WPS_OUI[] = {0x00, 0x50, 0xf2, 0x04};
+unsigned char  P2P_OUI[] = {0x50,0x6F,0x9A,0x09};
+unsigned char  WFD_OUI[] = {0x50,0x6F,0x9A,0x0A};
+
+unsigned char  WMM_INFO_OUI[] = {0x00, 0x50, 0xf2, 0x02, 0x00, 0x01};
+unsigned char  WMM_PARA_OUI[] = {0x00, 0x50, 0xf2, 0x02, 0x01, 0x01};
+
+unsigned char WPA_TKIP_CIPHER[4] = {0x00, 0x50, 0xf2, 0x02};
+unsigned char RSN_TKIP_CIPHER[4] = {0x00, 0x0f, 0xac, 0x02};
+
+extern unsigned char REALTEK_96B_IE[];
+
+/********************************************************
+MCS rate definitions
+*********************************************************/
+#ifdef CONFIG_DISABLE_MCS13TO15
+unsigned char  MCS_rate_2R_MCS13TO15_OFF[16] = {0xff, 0x1f, 0x0, 0x0, 0x01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0};
+unsigned char  MCS_rate_2R[16] = {0xff, 0xff, 0x0, 0x0, 0x01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0};
+#else //CONFIG_DISABLE_MCS13TO15
+unsigned char  MCS_rate_2R[16] = {0xff, 0xff, 0x0, 0x0, 0x01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0};
+#endif //CONFIG_DISABLE_MCS13TO15
+unsigned char  MCS_rate_1R[16] = {0xff, 0x00, 0x0, 0x0, 0x01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0};
+
+/********************************************************
+ChannelPlan definitions
+*********************************************************/
+/*static RT_CHANNEL_PLAN       DefaultChannelPlan[RT_CHANNEL_DOMAIN_MAX] = {
+       {{1,2,3,4,5,6,7,8,9,10,11,36,40,44,48,52,56,60,64,100,104,108,112,116,132,136,140,149,153,157,161,165},32},                                     // 0x00, RT_CHANNEL_DOMAIN_FCC
+       {{1,2,3,4,5,6,7,8,9,10,11,36,40,44,48,52,56,60,64,100,104,108,112,116,136,140,149,153,157,161,165},31},                                         // 0x01, RT_CHANNEL_DOMAIN_IC
+       {{1,2,3,4,5,6,7,8,9,10,11,12,13,36,40,44,48,52,56,60,64,100,104,108,112,116,120,124,128,132,136,140},32},                                               // 0x02, RT_CHANNEL_DOMAIN_ETSI
+       {{1,2,3,4,5,6,7,8,9,10,11,12,13},13},                                                                                                                                                                   // 0x03, RT_CHANNEL_DOMAIN_SPAIN
+       {{1,2,3,4,5,6,7,8,9,10,11,12,13},13},                                                                                                                                                                   // 0x04, RT_CHANNEL_DOMAIN_FRANCE
+       {{1,2,3,4,5,6,7,8,9,10,11,12,13},13},                                                                                                                                                                   // 0x05, RT_CHANNEL_DOMAIN_MKK
+       {{1,2,3,4,5,6,7,8,9,10,11,12,13},13},                                                                                                                                                                   // 0x06, RT_CHANNEL_DOMAIN_MKK1
+       {{1,2,3,4,5,6,7,8,9,10,11,12,13,36,40,44,48,52,56,60,64},21},                                                                                                                           // 0x07, RT_CHANNEL_DOMAIN_ISRAEL
+       {{1,2,3,4,5,6,7,8,9,10,11,12,13,14,36,40,44,48,52,56,60,64},22},                                                                                                                        // 0x08, RT_CHANNEL_DOMAIN_TELEC
+       {{1,2,3,4,5,6,7,8,9,10,11,12,13,14},14},                                                                                                                                                                // 0x09, RT_CHANNEL_DOMAIN_GLOBAL_DOAMIN
+       {{1,2,3,4,5,6,7,8,9,10,11,12,13},13},                                                                                                                                                                   // 0x0A, RT_CHANNEL_DOMAIN_WORLD_WIDE_13
+       {{1,2,3,4,5,6,7,8,9,10,11,56,60,64,100,104,108,112,116,136,140,149,153,157,161,165},26},                                                                        // 0x0B, RT_CHANNEL_DOMAIN_TAIWAN
+       {{1,2,3,4,5,6,7,8,9,10,11,12,13,149,153,157,161,165},18},                                                                                                                               // 0x0C, RT_CHANNEL_DOMAIN_CHINA
+       {{1,2,3,4,5,6,7,8,9,10,11,36,40,44,48,52,56,60,64,149,153,157,161,165},24},                                                                                             // 0x0D, RT_CHANNEL_DOMAIN_SINGAPORE_INDIA_MEXICO
+       {{1,2,3,4,5,6,7,8,9,10,11,36,40,44,48,52,56,60,64,100,104,108,112,116,120,124,149,153,157,161,165},31},                                         // 0x0E, RT_CHANNEL_DOMAIN_KOREA
+       {{1,2,3,4,5,6,7,8,9,10,11,36,40,44,48,52,56,60,64},19},                                                                                                                                 // 0x0F, RT_CHANNEL_DOMAIN_TURKEY
+       {{1,2,3,4,5,6,7,8,9,10,11,12,13,36,40,44,48,52,56,60,64,100,104,108,112,116,120,124,128,132,136,140},32},                                               // 0x10, RT_CHANNEL_DOMAIN_JAPAN
+       {{1,2,3,4,5,6,7,8,9,10,11,36,40,44,48,149,153,157,161,165},20},                                                                                                                 // 0x11, RT_CHANNEL_DOMAIN_FCC_NO_DFS
+       {{1,2,3,4,5,6,7,8,9,10,11,12,13,36,40,44,48},17},                                                                                                                                               // 0x12, RT_CHANNEL_DOMAIN_JAPAN_NO_DFS
+       {{1,2,3,4,5,6,7,8,9,10,11,12,13,36,40,44,48,52,56,60,64,100,104,108,112,116,120,124,128,132,136,140,149,153,157,161,165},37},   // 0x13, RT_CHANNEL_DOMAIN_WORLD_WIDE_5G
+       {{1,2,3,4,5,6,7,8,9,10,11,56,60,64,149,153,157,161,165},19},                                                                                                                            // 0x14, RT_CHANNEL_DOMAIN_TAIWAN_NO_DFS
+};*/
+
+static RT_CHANNEL_PLAN_2G      RTW_ChannelPlan2G[RT_CHANNEL_DOMAIN_2G_MAX] = {
+       {{1,2,3,4,5,6,7,8,9,10,11,12,13},13},           // 0x00, RT_CHANNEL_DOMAIN_2G_WORLD , Passive scan CH 12, 13
+       {{1,2,3,4,5,6,7,8,9,10,11,12,13},13},           // 0x01, RT_CHANNEL_DOMAIN_2G_ETSI1
+       {{1,2,3,4,5,6,7,8,9,10,11},11},                 // 0x02, RT_CHANNEL_DOMAIN_2G_FCC1
+       {{1,2,3,4,5,6,7,8,9,10,11,12,13,14},14},        // 0x03, RT_CHANNEL_DOMAIN_2G_MIKK1
+       {{10,11,12,13},4},                                              // 0x04, RT_CHANNEL_DOMAIN_2G_ETSI2
+       {{},0},                                                                 // 0x05, RT_CHANNEL_DOMAIN_2G_NULL
+};
+
+static RT_CHANNEL_PLAN_5G      RTW_ChannelPlan5G[RT_CHANNEL_DOMAIN_5G_MAX] = {
+       {{},0},                                                                                                                                                                 // 0x00, RT_CHANNEL_DOMAIN_5G_NULL
+       {{36,40,44,48,52,56,60,64,100,104,108,112,116,120,124,128,132,136,140},19},                                             // 0x01, RT_CHANNEL_DOMAIN_5G_ETSI1
+       {{36,40,44,48,52,56,60,64,100,104,108,112,116,120,124,128,132,136,140,149,153,157,161,165},24}, // 0x02, RT_CHANNEL_DOMAIN_5G_ETSI2
+       {{36,40,44,48,52,56,60,64,100,104,108,112,116,120,124,128,132,149,153,157,161,165},22},                 // 0x03, RT_CHANNEL_DOMAIN_5G_ETSI3
+       {{36,40,44,48,52,56,60,64,100,104,108,112,116,120,124,128,132,136,140,149,153,157,161,165},24}, // 0x04, RT_CHANNEL_DOMAIN_5G_FCC1
+       {{36,40,44,48,149,153,157,161,165},9},                                                                                                          // 0x05, RT_CHANNEL_DOMAIN_5G_FCC2
+       {{36,40,44,48,52,56,60,64,149,153,157,161,165},13},                                                                                     // 0x06, RT_CHANNEL_DOMAIN_5G_FCC3
+       {{36,40,44,48,52,56,60,64,149,153,157,161},12},                                                                                         // 0x07, RT_CHANNEL_DOMAIN_5G_FCC4
+       {{149,153,157,161,165},5},                                                                                                                                      // 0x08, RT_CHANNEL_DOMAIN_5G_FCC5
+       {{36,40,44,48,52,56,60,64},8},                                                                                                                          // 0x09, RT_CHANNEL_DOMAIN_5G_FCC6
+       {{36,40,44,48,52,56,60,64,100,104,108,112,116,136,140,149,153,157,161,165},20},                                 // 0x0A, RT_CHANNEL_DOMAIN_5G_FCC7_IC1
+       {{36,40,44,48,52,56,60,64,100,104,108,112,116,120,124,149,153,157,161,165},20},                                 // 0x0B, RT_CHANNEL_DOMAIN_5G_KCC1
+       {{36,40,44,48,52,56,60,64,100,104,108,112,116,120,124,128,132,136,140},19},                                             // 0x0C, RT_CHANNEL_DOMAIN_5G_MKK1
+       {{36,40,44,48,52,56,60,64},8},                                                                                                                          // 0x0D, RT_CHANNEL_DOMAIN_5G_MKK2
+       {{100,104,108,112,116,120,124,128,132,136,140},11},                                                                                     // 0x0E, RT_CHANNEL_DOMAIN_5G_MKK3
+       {{56,60,64,100,104,108,112,116,136,140,149,153,157,161,165},15},                                                                // 0x0F, RT_CHANNEL_DOMAIN_5G_NCC1
+       {{56,60,64,149,153,157,161,165},8},                                                                                                                     // 0x10, RT_CHANNEL_DOMAIN_5G_NCC2
+
+       //===== Driver self defined for old channel plan Compatible ,Remember to modify if have new channel plan definition =====
+       {{36,40,44,48,52,56,60,64,100,104,108,112,116,132,136,140,149,153,157,161,165},21},                             // 0x11, RT_CHANNEL_DOMAIN_5G_FCC
+       {{36,40,44,48},4},                                                                                                                                                      // 0x12, RT_CHANNEL_DOMAIN_5G_JAPAN_NO_DFS
+       {{36,40,44,48,149,153,157,161},8},                                                                                                                              // 0x13, RT_CHANNEL_DOMAIN_5G_FCC4_NO_DFS
+};
+
+static RT_CHANNEL_PLAN_MAP     RTW_ChannelPlanMap[RT_CHANNEL_DOMAIN_MAX] = {
+       //===== 0x00 ~ 0x1F , Old Define =====
+       {0x02,0x11},    //0x00, RT_CHANNEL_DOMAIN_FCC
+       {0x02,0x0A},    //0x01, RT_CHANNEL_DOMAIN_IC
+       {0x01,0x01},    //0x02, RT_CHANNEL_DOMAIN_ETSI
+       {0x01,0x00},    //0x03, RT_CHANNEL_DOMAIN_SPAIN
+       {0x01,0x00},    //0x04, RT_CHANNEL_DOMAIN_FRANCE
+       {0x03,0x00},    //0x05, RT_CHANNEL_DOMAIN_MKK
+       {0x03,0x00},    //0x06, RT_CHANNEL_DOMAIN_MKK1
+       {0x01,0x09},    //0x07, RT_CHANNEL_DOMAIN_ISRAEL
+       {0x03,0x09},    //0x08, RT_CHANNEL_DOMAIN_TELEC
+       {0x03,0x00},    //0x09, RT_CHANNEL_DOMAIN_GLOBAL_DOAMIN
+       {0x00,0x00},    //0x0A, RT_CHANNEL_DOMAIN_WORLD_WIDE_13
+       {0x02,0x0F},    //0x0B, RT_CHANNEL_DOMAIN_TAIWAN
+       {0x01,0x08},    //0x0C, RT_CHANNEL_DOMAIN_CHINA
+       {0x02,0x06},    //0x0D, RT_CHANNEL_DOMAIN_SINGAPORE_INDIA_MEXICO
+       {0x02,0x0B},    //0x0E, RT_CHANNEL_DOMAIN_KOREA
+       {0x02,0x09},    //0x0F, RT_CHANNEL_DOMAIN_TURKEY
+       {0x01,0x01},    //0x10, RT_CHANNEL_DOMAIN_JAPAN
+       {0x02,0x05},    //0x11, RT_CHANNEL_DOMAIN_FCC_NO_DFS
+       {0x01,0x12},    //0x12, RT_CHANNEL_DOMAIN_JAPAN_NO_DFS
+       {0x00,0x04},    //0x13, RT_CHANNEL_DOMAIN_WORLD_WIDE_5G
+       {0x02,0x10},    //0x14, RT_CHANNEL_DOMAIN_TAIWAN_NO_DFS
+       {0x00,0x12},    //0x15, RT_CHANNEL_DOMAIN_ETSI_NO_DFS
+       {0x00,0x13},    //0x16, RT_CHANNEL_DOMAIN_KOREA_NO_DFS
+       {0x03,0x12},    //0x17, RT_CHANNEL_DOMAIN_JAPAN_NO_DFS
+       {0x05,0x08},    //0x18, RT_CHANNEL_DOMAIN_PAKISTAN_NO_DFS
+       {0x02,0x08},    //0x19, RT_CHANNEL_DOMAIN_TAIWAN2_NO_DFS
+       {0x00,0x00},    //0x1A,
+       {0x00,0x00},    //0x1B,
+       {0x00,0x00},    //0x1C,
+       {0x00,0x00},    //0x1D,
+       {0x00,0x00},    //0x1E,
+       {0x05,0x04},    //0x1F, RT_CHANNEL_DOMAIN_WORLD_WIDE_ONLY_5G
+       //===== 0x20 ~ 0x7F ,New Define =====
+       {0x00,0x00},    //0x20, RT_CHANNEL_DOMAIN_WORLD_NULL
+       {0x01,0x00},    //0x21, RT_CHANNEL_DOMAIN_ETSI1_NULL
+       {0x02,0x00},    //0x22, RT_CHANNEL_DOMAIN_FCC1_NULL
+       {0x03,0x00},    //0x23, RT_CHANNEL_DOMAIN_MKK1_NULL
+       {0x04,0x00},    //0x24, RT_CHANNEL_DOMAIN_ETSI2_NULL
+       {0x02,0x04},    //0x25, RT_CHANNEL_DOMAIN_FCC1_FCC1
+       {0x00,0x01},    //0x26, RT_CHANNEL_DOMAIN_WORLD_ETSI1
+       {0x03,0x0C},    //0x27, RT_CHANNEL_DOMAIN_MKK1_MKK1
+       {0x00,0x0B},    //0x28, RT_CHANNEL_DOMAIN_WORLD_KCC1
+       {0x00,0x05},    //0x29, RT_CHANNEL_DOMAIN_WORLD_FCC2
+       {0x00,0x00},    //0x2A,
+       {0x00,0x00},    //0x2B,
+       {0x00,0x00},    //0x2C,
+       {0x00,0x00},    //0x2D,
+       {0x00,0x00},    //0x2E,
+       {0x00,0x00},    //0x2F,
+       {0x00,0x06},    //0x30, RT_CHANNEL_DOMAIN_WORLD_FCC3
+       {0x00,0x07},    //0x31, RT_CHANNEL_DOMAIN_WORLD_FCC4
+       {0x00,0x08},    //0x32, RT_CHANNEL_DOMAIN_WORLD_FCC5
+       {0x00,0x09},    //0x33, RT_CHANNEL_DOMAIN_WORLD_FCC6
+       {0x02,0x0A},    //0x34, RT_CHANNEL_DOMAIN_FCC1_FCC7
+       {0x00,0x02},    //0x35, RT_CHANNEL_DOMAIN_WORLD_ETSI2
+       {0x00,0x03},    //0x36, RT_CHANNEL_DOMAIN_WORLD_ETSI3
+       {0x03,0x0D},    //0x37, RT_CHANNEL_DOMAIN_MKK1_MKK2
+       {0x03,0x0E},    //0x38, RT_CHANNEL_DOMAIN_MKK1_MKK3
+       {0x02,0x0F},    //0x39, RT_CHANNEL_DOMAIN_FCC1_NCC1
+       {0x00,0x00},    //0x3A,
+       {0x00,0x00},    //0x3B,
+       {0x00,0x00},    //0x3C,
+       {0x00,0x00},    //0x3D,
+       {0x00,0x00},    //0x3E,
+       {0x00,0x00},    //0x3F,
+       {0x02,0x10},    //0x40, RT_CHANNEL_DOMAIN_FCC1_NCC2
+};
+
+static RT_CHANNEL_PLAN_MAP     RTW_CHANNEL_PLAN_MAP_REALTEK_DEFINE = {0x03,0x02}; //use the conbination for max channel numbers
+
+/*
+ * Search the @param ch in given @param ch_set
+ * @ch_set: the given channel set
+ * @ch: the given channel number
+ *
+ * return the index of channel_num in channel_set, -1 if not found
+ */
+int rtw_ch_set_search_ch(RT_CHANNEL_INFO *ch_set, const u32 ch)
+{
+       int i;
+       for(i=0;ch_set[i].ChannelNum!=0;i++){
+               if(ch == ch_set[i].ChannelNum)
+                       break;
+       }
+
+       if(i >= ch_set[i].ChannelNum)
+               return -1;
+       return i;
+}
+
+/*
+ * Check the @param ch is fit with setband setting of @param adapter
+ * @adapter: the given adapter
+ * @ch: the given channel number
+ *
+ * return _TRUE when check valid, _FALSE not valid
+ */
+bool rtw_mlme_band_check(_adapter *adapter, const u32 ch)
+{
+       if (adapter->setband == GHZ24_50 /* 2.4G and 5G */
+               || (adapter->setband == GHZ_24 && ch < 35) /* 2.4G only */
+               || (adapter->setband == GHZ_50 && ch > 35) /* 5G only */
+       ) {
+               return _TRUE;
+       }
+       return _FALSE;
+}
+
+/****************************************************************************
+
+Following are the initialization functions for WiFi MLME
+
+*****************************************************************************/
+
+int init_hw_mlme_ext(_adapter *padapter)
+{
+       struct  mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
+
+       //set_opmode_cmd(padapter, infra_client_with_mlme);//removed
+
+       set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
+
+       return _SUCCESS;
+}
+
+static void init_mlme_ext_priv_value(_adapter* padapter)
+{
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       //unsigned char default_channel_set[MAX_CHANNEL_NUM] = {1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 0, 0};
+       unsigned char   mixed_datarate[NumRates] = {_1M_RATE_, _2M_RATE_, _5M_RATE_, _11M_RATE_, _6M_RATE_,_9M_RATE_, _12M_RATE_, _18M_RATE_, _24M_RATE_, _36M_RATE_, _48M_RATE_, _54M_RATE_, 0xff};
+       unsigned char   mixed_basicrate[NumRates] ={_1M_RATE_, _2M_RATE_, _5M_RATE_, _11M_RATE_, _6M_RATE_, _12M_RATE_, _24M_RATE_, 0xff,};
+
+       ATOMIC_SET(&pmlmeext->event_seq, 0);
+       pmlmeext->mgnt_seq = 0;//reset to zero when disconnect at client mode
+#ifdef CONFIG_IEEE80211W
+       pmlmeext->sa_query_seq = 0;
+       pmlmeext->mgnt_80211w_IPN=0;
+       pmlmeext->mgnt_80211w_IPN_rx=0;
+#endif //CONFIG_IEEE80211W
+       pmlmeext->cur_channel = padapter->registrypriv.channel;
+       pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_20;
+       pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+
+       pmlmeext->retry = 0;
+
+       pmlmeext->cur_wireless_mode = padapter->registrypriv.wireless_mode;
+
+       //_rtw_memcpy(pmlmeext->channel_set, DefaultChannelPlan[padapter->mlmepriv.ChannelPlan].Channel, DefaultChannelPlan[padapter->mlmepriv.ChannelPlan].Len);
+       //_rtw_memcpy(pmlmeext->channel_set, default_channel_set, MAX_CHANNEL_NUM);
+       _rtw_memcpy(pmlmeext->datarate, mixed_datarate, NumRates);
+       _rtw_memcpy(pmlmeext->basicrate, mixed_basicrate, NumRates);
+
+       if(pmlmeext->cur_channel > 14)
+               pmlmeext->tx_rate = IEEE80211_OFDM_RATE_6MB;
+       else
+               pmlmeext->tx_rate = IEEE80211_CCK_RATE_1MB;
+
+       pmlmeext->sitesurvey_res.state = SCAN_DISABLE;
+       pmlmeext->sitesurvey_res.channel_idx = 0;
+       pmlmeext->sitesurvey_res.bss_cnt = 0;
+       pmlmeext->scan_abort = _FALSE;
+
+       pmlmeinfo->state = WIFI_FW_NULL_STATE;
+       pmlmeinfo->reauth_count = 0;
+       pmlmeinfo->reassoc_count = 0;
+       pmlmeinfo->link_count = 0;
+       pmlmeinfo->auth_seq = 0;
+       pmlmeinfo->auth_algo = dot11AuthAlgrthm_Open;
+       pmlmeinfo->key_index = 0;
+       pmlmeinfo->iv = 0;
+
+       pmlmeinfo->enc_algo = _NO_PRIVACY_;
+       pmlmeinfo->authModeToggle = 0;
+
+       _rtw_memset(pmlmeinfo->chg_txt, 0, 128);
+
+       pmlmeinfo->slotTime = SHORT_SLOT_TIME;
+       pmlmeinfo->preamble_mode = PREAMBLE_AUTO;
+
+       pmlmeinfo->dialogToken = 0;
+
+       pmlmeext->action_public_rxseq = 0xffff;
+       pmlmeext->action_public_dialog_token = 0xff;
+}
+
+static int has_channel(RT_CHANNEL_INFO *channel_set,
+                                          u8 chanset_size,
+                                          u8 chan) {
+       int i;
+
+       for (i = 0; i < chanset_size; i++) {
+               if (channel_set[i].ChannelNum == chan) {
+                       return 1;
+               }
+       }
+
+       return 0;
+}
+
+static void init_channel_list(_adapter *padapter, RT_CHANNEL_INFO *channel_set,
+                                                         u8 chanset_size,
+                                                         struct p2p_channels *channel_list) {
+
+       struct p2p_oper_class_map op_class[] = {
+               { IEEE80211G,  81,   1,  13,  1, BW20 },
+               { IEEE80211G,  82,  14,  14,  1, BW20 },
+#if 0 /* Do not enable HT40 on 2 GHz */
+               { IEEE80211G,  83,   1,   9,  1, BW40PLUS },
+               { IEEE80211G,  84,   5,  13,  1, BW40MINUS },
+#endif
+               { IEEE80211A, 115,  36,  48,  4, BW20 },
+               { IEEE80211A, 116,  36,  44,  8, BW40PLUS },
+               { IEEE80211A, 117,  40,  48,  8, BW40MINUS },
+               { IEEE80211A, 124, 149, 161,  4, BW20 },
+               { IEEE80211A, 125, 149, 169,  4, BW20 },
+               { IEEE80211A, 126, 149, 157,  8, BW40PLUS },
+               { IEEE80211A, 127, 153, 161,  8, BW40MINUS },
+               { -1, 0, 0, 0, 0, BW20 }
+       };
+
+       int cla, op;
+
+       cla = 0;
+
+       for (op = 0; op_class[op].op_class; op++) {
+               u8 ch;
+               struct p2p_oper_class_map *o = &op_class[op];
+               struct p2p_reg_class *reg = NULL;
+
+               for (ch = o->min_chan; ch <= o->max_chan; ch += o->inc) {
+                       if (!has_channel(channel_set, chanset_size, ch)) {
+                               continue;
+                       }
+
+                       if ((0 == padapter->registrypriv.ht_enable) && (8 == o->inc))
+                               continue;
+
+                       if ((0 == (padapter->registrypriv.cbw40_enable & BIT(1))) &&
+                               ((BW40MINUS == o->bw) || (BW40PLUS == o->bw)))
+                               continue;
+
+                       if (reg == NULL) {
+                               reg = &channel_list->reg_class[cla];
+                               cla++;
+                               reg->reg_class = o->op_class;
+                               reg->channels = 0;
+                       }
+                       reg->channel[reg->channels] = ch;
+                       reg->channels++;
+               }
+       }
+       channel_list->reg_classes = cla;
+
+}
+
+static u8 init_channel_set(_adapter* padapter, u8 ChannelPlan, RT_CHANNEL_INFO *channel_set)
+{
+       u8      index,chanset_size = 0;
+       u8      b5GBand = _FALSE, b2_4GBand = _FALSE;
+       u8      Index2G = 0, Index5G=0;
+
+       _rtw_memset(channel_set, 0, sizeof(RT_CHANNEL_INFO)*MAX_CHANNEL_NUM);
+
+       if(ChannelPlan >= RT_CHANNEL_DOMAIN_MAX && ChannelPlan != RT_CHANNEL_DOMAIN_REALTEK_DEFINE)
+       {
+               DBG_871X("ChannelPlan ID %x error !!!!!\n",ChannelPlan);
+               return chanset_size;
+       }
+
+       if(padapter->registrypriv.wireless_mode & WIRELESS_11G)
+       {
+               b2_4GBand = _TRUE;
+               if(RT_CHANNEL_DOMAIN_REALTEK_DEFINE == ChannelPlan)
+                       Index2G = RTW_CHANNEL_PLAN_MAP_REALTEK_DEFINE.Index2G;
+               else
+                       Index2G = RTW_ChannelPlanMap[ChannelPlan].Index2G;
+       }
+
+       if(padapter->registrypriv.wireless_mode & WIRELESS_11A)
+       {
+               b5GBand = _TRUE;
+               if(RT_CHANNEL_DOMAIN_REALTEK_DEFINE == ChannelPlan)
+                       Index5G = RTW_CHANNEL_PLAN_MAP_REALTEK_DEFINE.Index5G;
+               else
+                       Index5G = RTW_ChannelPlanMap[ChannelPlan].Index5G;
+       }
+
+       if(b2_4GBand)
+       {
+               for(index=0;index<RTW_ChannelPlan2G[Index2G].Len;index++)
+               {
+                       channel_set[chanset_size].ChannelNum = RTW_ChannelPlan2G[Index2G].Channel[index];
+
+                       if(RT_CHANNEL_DOMAIN_GLOBAL_DOAMIN == ChannelPlan) //Channel 1~11 is active, and 12~14 is passive
+                       {
+                               if(channel_set[chanset_size].ChannelNum >= 1 && channel_set[chanset_size].ChannelNum <= 11)
+                                       channel_set[chanset_size].ScanType = SCAN_ACTIVE;
+                               else if((channel_set[chanset_size].ChannelNum  >= 12 && channel_set[chanset_size].ChannelNum  <= 14))
+                                       channel_set[chanset_size].ScanType  = SCAN_PASSIVE;
+                       }
+                       else if(RT_CHANNEL_DOMAIN_WORLD_WIDE_13 == ChannelPlan ||
+                               RT_CHANNEL_DOMAIN_WORLD_WIDE_5G == ChannelPlan ||
+                               RT_CHANNEL_DOMAIN_2G_WORLD == Index2G)// channel 12~13, passive scan
+                       {
+                               if(channel_set[chanset_size].ChannelNum <= 11)
+                                       channel_set[chanset_size].ScanType = SCAN_ACTIVE;
+                               else
+                                       channel_set[chanset_size].ScanType = SCAN_PASSIVE;
+                       }
+                       else
+                       {
+                               channel_set[chanset_size].ScanType = SCAN_ACTIVE;
+                       }
+
+                       chanset_size++;
+               }
+       }
+
+       if(b5GBand)
+       {
+               for(index=0;index<RTW_ChannelPlan5G[Index5G].Len;index++)
+               {
+#ifdef CONFIG_DFS
+                       channel_set[chanset_size].ChannelNum = RTW_ChannelPlan5G[Index5G].Channel[index];
+                       if ( channel_set[chanset_size].ChannelNum <= 48
+                               || channel_set[chanset_size].ChannelNum >= 149 )
+                       {
+                               if(RT_CHANNEL_DOMAIN_WORLD_WIDE_5G == ChannelPlan)//passive scan for all 5G channels
+                                       channel_set[chanset_size].ScanType = SCAN_PASSIVE;
+                               else
+                                       channel_set[chanset_size].ScanType = SCAN_ACTIVE;
+                       }
+                       else
+                       {
+                               channel_set[chanset_size].ScanType = SCAN_PASSIVE;
+                       }
+                       chanset_size++;
+#else /* CONFIG_DFS */
+                       if ( RTW_ChannelPlan5G[Index5G].Channel[index] <= 48
+                               || RTW_ChannelPlan5G[Index5G].Channel[index] >= 149 ) {
+                               channel_set[chanset_size].ChannelNum = RTW_ChannelPlan5G[Index5G].Channel[index];
+                               if(RT_CHANNEL_DOMAIN_WORLD_WIDE_5G == ChannelPlan)//passive scan for all 5G channels
+                                       channel_set[chanset_size].ScanType = SCAN_PASSIVE;
+                               else
+                                       channel_set[chanset_size].ScanType = SCAN_ACTIVE;
+                               DBG_871X("%s(): channel_set[%d].ChannelNum = %d\n", __FUNCTION__, chanset_size, channel_set[chanset_size].ChannelNum);
+                               chanset_size++;
+                       }
+#endif /* CONFIG_DFS */
+               }
+       }
+
+       return chanset_size;
+}
+
+int    init_mlme_ext_priv(_adapter* padapter)
+{
+       int     res = _SUCCESS;
+       struct registry_priv* pregistrypriv = &padapter->registrypriv;
+       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       // We don't need to memset padapter->XXX to zero, because adapter is allocated by rtw_zvmalloc().
+       //_rtw_memset((u8 *)pmlmeext, 0, sizeof(struct mlme_ext_priv));
+
+       pmlmeext->padapter = padapter;
+
+       //fill_fwpriv(padapter, &(pmlmeext->fwpriv));
+
+       init_mlme_ext_priv_value(padapter);
+       pmlmeinfo->bAcceptAddbaReq = pregistrypriv->bAcceptAddbaReq;
+
+       init_mlme_ext_timer(padapter);
+
+#ifdef CONFIG_AP_MODE
+       init_mlme_ap_info(padapter);
+#endif
+
+       pmlmeext->max_chan_nums = init_channel_set(padapter, pmlmepriv->ChannelPlan,pmlmeext->channel_set);
+       init_channel_list(padapter, pmlmeext->channel_set, pmlmeext->max_chan_nums, &pmlmeext->channel_list);
+
+       pmlmeext->chan_scan_time = SURVEY_TO;
+       pmlmeext->mlmeext_init = _TRUE;
+
+
+#ifdef CONFIG_ACTIVE_KEEP_ALIVE_CHECK
+       pmlmeext->active_keep_alive_check = _TRUE;
+#endif
+
+       return res;
+
+}
+
+void free_mlme_ext_priv (struct mlme_ext_priv *pmlmeext)
+{
+       _adapter *padapter = pmlmeext->padapter;
+
+       if (!padapter)
+               return;
+
+       if (padapter->bDriverStopped == _TRUE)
+       {
+               _cancel_timer_ex(&pmlmeext->survey_timer);
+               _cancel_timer_ex(&pmlmeext->link_timer);
+               //_cancel_timer_ex(&pmlmeext->ADDBA_timer);
+       }
+}
+
+static u8 cmp_pkt_chnl_diff(_adapter *padapter,u8* pframe,uint packet_len)
+{      // if the channel is same, return 0. else return channel differential
+       uint len;
+       u8 channel;
+       u8 *p;
+       p = rtw_get_ie(pframe + WLAN_HDR_A3_LEN + _BEACON_IE_OFFSET_, _DSSET_IE_, &len, packet_len - _BEACON_IE_OFFSET_);
+       if (p)
+       {
+               channel = *(p + 2);
+               if(padapter->mlmeextpriv.cur_channel >= channel)
+               {
+                       return (padapter->mlmeextpriv.cur_channel - channel);
+               }
+               else
+               {
+                       return (channel-padapter->mlmeextpriv.cur_channel);
+               }
+       }
+       else
+       {
+               return 0;
+       }
+}
+
+static void _mgt_dispatcher(_adapter *padapter, struct mlme_handler *ptable, union recv_frame *precv_frame)
+{
+       u8 bc_addr[ETH_ALEN] = {0xff,0xff,0xff,0xff,0xff,0xff};
+       u8 *pframe = precv_frame->u.hdr.rx_data;
+
+         if(ptable->func)
+        {
+        //receive the frames that ra(a1) is my address or ra(a1) is bc address.
+               if (!_rtw_memcmp(GetAddr1Ptr(pframe), myid(&padapter->eeprompriv), ETH_ALEN) &&
+                       !_rtw_memcmp(GetAddr1Ptr(pframe), bc_addr, ETH_ALEN))
+               {
+                       return;
+               }
+
+               ptable->func(padapter, precv_frame);
+        }
+
+}
+
+void mgt_dispatcher(_adapter *padapter, union recv_frame *precv_frame)
+{
+       int index;
+       struct mlme_handler *ptable;
+#ifdef CONFIG_AP_MODE
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+#endif //CONFIG_AP_MODE
+       u8 bc_addr[ETH_ALEN] = {0xff,0xff,0xff,0xff,0xff,0xff};
+       u8 *pframe = precv_frame->u.hdr.rx_data;
+       struct sta_info *psta = rtw_get_stainfo(&padapter->stapriv, GetAddr2Ptr(pframe));
+
+       RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_,
+                ("+mgt_dispatcher: type(0x%x) subtype(0x%x)\n",
+                 GetFrameType(pframe), GetFrameSubType(pframe)));
+
+#if 0
+       {
+               u8 *pbuf;
+               pbuf = GetAddr1Ptr(pframe);
+               DBG_871X("A1-%x:%x:%x:%x:%x:%x\n", *pbuf, *(pbuf+1), *(pbuf+2), *(pbuf+3), *(pbuf+4), *(pbuf+5));
+               pbuf = GetAddr2Ptr(pframe);
+               DBG_871X("A2-%x:%x:%x:%x:%x:%x\n", *pbuf, *(pbuf+1), *(pbuf+2), *(pbuf+3), *(pbuf+4), *(pbuf+5));
+               pbuf = GetAddr3Ptr(pframe);
+               DBG_871X("A3-%x:%x:%x:%x:%x:%x\n", *pbuf, *(pbuf+1), *(pbuf+2), *(pbuf+3), *(pbuf+4), *(pbuf+5));
+       }
+#endif
+
+       if (GetFrameType(pframe) != WIFI_MGT_TYPE)
+       {
+               RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("mgt_dispatcher: type(0x%x) error!\n", GetFrameType(pframe)));
+               return;
+       }
+
+       //receive the frames that ra(a1) is my address or ra(a1) is bc address.
+       if (!_rtw_memcmp(GetAddr1Ptr(pframe), myid(&padapter->eeprompriv), ETH_ALEN) &&
+               !_rtw_memcmp(GetAddr1Ptr(pframe), bc_addr, ETH_ALEN))
+       {
+               return;
+       }
+
+       ptable = mlme_sta_tbl;
+
+       index = GetFrameSubType(pframe) >> 4;
+
+#ifdef CONFIG_TDLS
+       if((index << 4)==WIFI_ACTION){
+               //category==RTW_WLAN_CATEGORY_PUBLIC, action==TDLS_DISCOVERY_RESPONSE
+               if(*(pframe + IEEE80211_MGMT_HDR_LEN ) == RTW_WLAN_CATEGORY_PUBLIC
+                       && *(pframe + IEEE80211_MGMT_HDR_LEN + 1) == TDLS_DISCOVERY_RESPONSE )
+               {
+                       DBG_871X("recv tdls discovery response frame\n");
+                       On_TDLS_Dis_Rsp(padapter, precv_frame);
+               }
+       }
+#endif //CONFIG_TDLS
+
+       if (index > 13)
+       {
+               RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("Currently we do not support reserved sub-fr-type=%d\n", index));
+               return;
+       }
+       ptable += index;
+
+#if 1
+       if (psta != NULL)
+       {
+               if (GetRetry(pframe))
+               {
+                       if (precv_frame->u.hdr.attrib.seq_num == psta->RxMgmtFrameSeqNum)
+                       {
+                               /* drop the duplicate management frame */
+                               DBG_871X("Drop duplicate management frame with seq_num = %d.\n", precv_frame->u.hdr.attrib.seq_num);
+                               return;
+                       }
+               }
+               psta->RxMgmtFrameSeqNum = precv_frame->u.hdr.attrib.seq_num;
+       }
+#else
+
+       if(GetRetry(pframe))
+       {
+               //RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("drop due to decache!\n"));
+               //return;
+       }
+#endif
+
+#ifdef CONFIG_AP_MODE
+       switch (GetFrameSubType(pframe))
+       {
+               case WIFI_AUTH:
+                       if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
+                               ptable->func = &OnAuth;
+                       else
+                               ptable->func = &OnAuthClient;
+                       //pass through
+               case WIFI_ASSOCREQ:
+               case WIFI_REASSOCREQ:
+                       _mgt_dispatcher(padapter, ptable, precv_frame);
+#ifdef CONFIG_HOSTAPD_MLME
+                       if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
+                               rtw_hostapd_mlme_rx(padapter, precv_frame);
+#endif
+                       break;
+               case WIFI_PROBEREQ:
+                       if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
+                       {
+#ifdef CONFIG_HOSTAPD_MLME
+                               rtw_hostapd_mlme_rx(padapter, precv_frame);
+#else
+                               _mgt_dispatcher(padapter, ptable, precv_frame);
+#endif
+                       }
+                       else
+                               _mgt_dispatcher(padapter, ptable, precv_frame);
+                       break;
+               case WIFI_BEACON:
+                       _mgt_dispatcher(padapter, ptable, precv_frame);
+                       break;
+               case WIFI_ACTION:
+                       //if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
+                       _mgt_dispatcher(padapter, ptable, precv_frame);
+                       break;
+               default:
+                       _mgt_dispatcher(padapter, ptable, precv_frame);
+                       if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
+                               rtw_hostapd_mlme_rx(padapter, precv_frame);
+                       break;
+       }
+#else
+
+       _mgt_dispatcher(padapter, ptable, precv_frame);
+
+#endif
+
+}
+
+#ifdef CONFIG_P2P
+u32 p2p_listen_state_process(_adapter *padapter, unsigned char *da)
+{
+       bool response = _TRUE;
+
+#ifdef CONFIG_IOCTL_CFG80211
+       if( padapter->wdinfo.driver_interface == DRIVER_CFG80211 )
+       {
+               if (wdev_to_priv(padapter->rtw_wdev)->p2p_enabled == _FALSE
+                       || padapter->mlmepriv.wps_probe_resp_ie == NULL
+                       || padapter->mlmepriv.p2p_probe_resp_ie == NULL
+               )
+               {
+                       DBG_871X("DON'T issue_probersp_p2p: p2p_enabled:%d, wps_probe_resp_ie:%p, p2p_probe_resp_ie:%p\n",
+                               wdev_to_priv(padapter->rtw_wdev)->p2p_enabled,
+                               padapter->mlmepriv.wps_probe_resp_ie,
+                               padapter->mlmepriv.p2p_probe_resp_ie);
+                       response = _FALSE;
+               }
+       }
+       else
+#endif //CONFIG_IOCTL_CFG80211
+       if( padapter->wdinfo.driver_interface == DRIVER_WEXT )
+       {
+               //      do nothing if the device name is empty
+               if ( !padapter->wdinfo.device_name_len )
+               {
+                       response        = _FALSE;
+               }
+       }
+
+       if (response == _TRUE)
+               issue_probersp_p2p( padapter, da);
+
+       return _SUCCESS;
+}
+#endif //CONFIG_P2P
+
+
+/****************************************************************************
+
+Following are the callback functions for each subtype of the management frames
+
+*****************************************************************************/
+
+unsigned int OnProbeReq(_adapter *padapter, union recv_frame *precv_frame)
+{
+       unsigned int    ielen;
+       unsigned char   *p;
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       WLAN_BSSID_EX   *cur = &(pmlmeinfo->network);
+       u8 *pframe = precv_frame->u.hdr.rx_data;
+       uint len = precv_frame->u.hdr.len;
+       u8 is_valid_p2p_probereq = _FALSE;
+
+#ifdef CONFIG_P2P
+       struct wifidirect_info  *pwdinfo = &(padapter->wdinfo);
+       struct rx_pkt_attrib    *pattrib = &precv_frame->u.hdr.attrib;
+       u8 wifi_test_chk_rate = 1;
+
+       if (    !rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE) &&
+               !rtw_p2p_chk_state(pwdinfo, P2P_STATE_IDLE) &&
+               !rtw_p2p_chk_role(pwdinfo, P2P_ROLE_CLIENT) &&
+               !rtw_p2p_chk_state(pwdinfo, P2P_STATE_FIND_PHASE_SEARCH) &&
+               !rtw_p2p_chk_state(pwdinfo, P2P_STATE_SCAN)
+          )
+       {
+               //      Commented by Albert 2011/03/17
+               //      mcs_rate = 0 -> CCK 1M rate
+               //      mcs_rate = 1 -> CCK 2M rate
+               //      mcs_rate = 2 -> CCK 5.5M rate
+               //      mcs_rate = 3 -> CCK 11M rate
+               //      In the P2P mode, the driver should not support the CCK rate
+
+               //      Commented by Kurt 2012/10/16
+               //      IOT issue: Google Nexus7 use 1M rate to send p2p_probe_req after GO nego completed and Nexus7 is client
+#ifdef CONFIG_WIFI_TEST
+               if ( pattrib->mcs_rate <= 3 )
+               {
+                       wifi_test_chk_rate = 0;
+               }
+#endif //CONFIG_WIFI_TEST
+
+               if( wifi_test_chk_rate == 1 )
+               {
+                       if((is_valid_p2p_probereq = process_probe_req_p2p_ie(pwdinfo, pframe, len)) == _TRUE)
+                       {
+                               if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_DEVICE))
+                               {
+                                       p2p_listen_state_process( padapter,  get_sa(pframe));
+
+                                       return _SUCCESS;
+                               }
+
+                               if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
+                               {
+                                       goto _continue;
+                               }
+                       }
+               }
+       }
+
+_continue:
+#endif //CONFIG_P2P
+
+       if(check_fwstate(pmlmepriv, WIFI_STATION_STATE))
+       {
+               return _SUCCESS;
+       }
+
+       if(check_fwstate(pmlmepriv, _FW_LINKED) == _FALSE &&
+               check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE|WIFI_AP_STATE)==_FALSE)
+       {
+               return _SUCCESS;
+       }
+
+
+       //DBG_871X("+OnProbeReq\n");
+
+#ifdef CONFIG_AUTO_AP_MODE
+       if(check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE &&
+                       pmlmepriv->cur_network.join_res == _TRUE)
+       {
+               _irqL   irqL;
+               struct sta_info *psta;
+               u8 *mac_addr, *peer_addr;
+               struct sta_priv *pstapriv = &padapter->stapriv;
+               u8 RC_OUI[4]={0x00,0xE0,0x4C,0x0A};
+               //EID[1] + EID_LEN[1] + RC_OUI[4] + MAC[6] + PairingID[2] + ChannelNum[2]
+
+               p = rtw_get_ie(pframe + WLAN_HDR_A3_LEN + _PROBEREQ_IE_OFFSET_, _VENDOR_SPECIFIC_IE_, (int *)&ielen,
+                       len - WLAN_HDR_A3_LEN - _PROBEREQ_IE_OFFSET_);
+
+               if(!p || ielen !=14)
+                       goto _non_rc_device;
+
+               if(!_rtw_memcmp(p+2, RC_OUI, sizeof(RC_OUI)))
+                       goto _non_rc_device;
+
+               if(!_rtw_memcmp(p+6, get_sa(pframe), ETH_ALEN))
+               {
+                       DBG_871X("%s, do rc pairing ("MAC_FMT"), but mac addr mismatch!("MAC_FMT")\n", __FUNCTION__,
+                               MAC_ARG(get_sa(pframe)), MAC_ARG(p+6));
+
+                       goto _non_rc_device;
+               }
+
+               DBG_871X("%s, got the pairing device("MAC_FMT")\n", __FUNCTION__,  MAC_ARG(get_sa(pframe)));
+
+               //new a station
+               psta = rtw_get_stainfo(pstapriv, get_sa(pframe));
+               if (psta == NULL)
+               {
+                       // allocate a new one
+                       DBG_871X("going to alloc stainfo for rc="MAC_FMT"\n",  MAC_ARG(get_sa(pframe)));
+                       psta = rtw_alloc_stainfo(pstapriv, get_sa(pframe));
+                       if (psta == NULL)
+                       {
+                               //TODO:
+                               DBG_871X(" Exceed the upper limit of supported clients...\n");
+                               return _SUCCESS;
+                       }
+
+                       _enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+                       if (rtw_is_list_empty(&psta->asoc_list))
+                       {
+                               psta->expire_to = pstapriv->expire_to;
+                               rtw_list_insert_tail(&psta->asoc_list, &pstapriv->asoc_list);
+                               pstapriv->asoc_list_cnt++;
+                       }
+                       _exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+
+                       //generate pairing ID
+                       mac_addr = myid(&(padapter->eeprompriv));
+                       peer_addr = psta->hwaddr;
+                       psta->pid = (u16)(((mac_addr[4]<<8) + mac_addr[5]) + ((peer_addr[4]<<8) + peer_addr[5]));
+
+                       //update peer stainfo
+                       psta->isrc = _TRUE;
+                       //psta->aid = 0;
+                       //psta->mac_id = 2;
+
+                       /* get a unique AID */
+                       if (psta->aid > 0) {
+                               DBG_871X("old AID %d\n", psta->aid);
+                       } else {
+                               for (psta->aid = 1; psta->aid <= NUM_STA; psta->aid++)
+                                       if (pstapriv->sta_aid[psta->aid - 1] == NULL)
+                                               break;
+
+                               if (psta->aid > pstapriv->max_num_sta) {
+                                       psta->aid = 0;
+                                       DBG_871X("no room for more AIDs\n");
+                                       return _SUCCESS;
+                               } else {
+                                       pstapriv->sta_aid[psta->aid - 1] = psta;
+                                       DBG_871X("allocate new AID = (%d)\n", psta->aid);
+                               }
+                       }
+
+                       psta->qos_option = 1;
+                       psta->htpriv.ht_option = _TRUE;
+                       psta->ieee8021x_blocked = _FALSE;
+                       psta->htpriv.ampdu_enable = _FALSE;
+                       psta->htpriv.sgi = _FALSE;
+                       psta->htpriv.bwmode = HT_CHANNEL_WIDTH_20;
+                       psta->htpriv.ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+
+                       //rtw_hal_set_odm_var(padapter, HAL_ODM_STA_INFO, psta, _TRUE);
+
+                       psta->htpriv.agg_enable_bitmap = 0x0;//reset
+                       psta->htpriv.candidate_tid_bitmap = 0x0;//reset
+
+                       _rtw_memset((void*)&psta->sta_stats, 0, sizeof(struct stainfo_stats));
+
+                       _enter_critical_bh(&psta->lock, &irqL);
+                       psta->state |= _FW_LINKED;
+                       _exit_critical_bh(&psta->lock, &irqL);
+
+                       report_add_sta_event(padapter, psta->hwaddr, psta->aid);
+
+               }
+
+               issue_probersp(padapter, get_sa(pframe), _FALSE);
+
+               return _SUCCESS;
+
+       }
+
+_non_rc_device:
+
+       return _SUCCESS;
+#endif //CONFIG_AUTO_AP_MODE
+
+
+#ifdef CONFIG_CONCURRENT_MODE
+       if(((pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE) &&
+               check_buddy_fwstate(padapter, _FW_UNDER_LINKING|_FW_UNDER_SURVEY))
+       {
+               //don't process probe req
+               return _SUCCESS;
+       }
+#endif
+
+       p = rtw_get_ie(pframe + WLAN_HDR_A3_LEN + _PROBEREQ_IE_OFFSET_, _SSID_IE_, (int *)&ielen,
+                       len - WLAN_HDR_A3_LEN - _PROBEREQ_IE_OFFSET_);
+
+
+       //check (wildcard) SSID
+       if (p != NULL)
+       {
+               if(is_valid_p2p_probereq == _TRUE)
+               {
+                       goto _issue_probersp;
+               }
+
+               if ( (ielen != 0 && _FALSE ==_rtw_memcmp((void *)(p+2), (void *)cur->Ssid.Ssid, cur->Ssid.SsidLength))
+                       || (ielen == 0 && pmlmeinfo->hidden_ssid_mode)
+               )
+               {
+                       return _SUCCESS;
+               }
+
+_issue_probersp:
+
+               if(check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE &&
+                       pmlmepriv->cur_network.join_res == _TRUE)
+               {
+                       //DBG_871X("+issue_probersp during ap mode\n");
+                       issue_probersp(padapter, get_sa(pframe), is_valid_p2p_probereq);
+               }
+
+       }
+
+       return _SUCCESS;
+
+}
+
+unsigned int OnProbeRsp(_adapter *padapter, union recv_frame *precv_frame)
+{
+       struct sta_info         *psta;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       struct sta_priv         *pstapriv = &padapter->stapriv;
+       u8      *pframe = precv_frame->u.hdr.rx_data;
+#ifdef CONFIG_P2P
+       struct wifidirect_info  *pwdinfo = &padapter->wdinfo;
+#endif
+
+
+#ifdef CONFIG_P2P
+       if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_TX_PROVISION_DIS_REQ))
+       {
+               if ( _TRUE == pwdinfo->tx_prov_disc_info.benable )
+               {
+                       if( _rtw_memcmp( pwdinfo->tx_prov_disc_info.peerIFAddr, GetAddr2Ptr(pframe), ETH_ALEN ) )
+                       {
+                               if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_CLIENT))
+                               {
+                                       pwdinfo->tx_prov_disc_info.benable = _FALSE;
+                                       issue_p2p_provision_request( padapter,
+                                                                                               pwdinfo->tx_prov_disc_info.ssid.Ssid,
+                                                                                               pwdinfo->tx_prov_disc_info.ssid.SsidLength,
+                                                                                               pwdinfo->tx_prov_disc_info.peerDevAddr );
+                               }
+                               else if ( rtw_p2p_chk_role(pwdinfo, P2P_ROLE_DEVICE) || rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO) )
+                               {
+                                       pwdinfo->tx_prov_disc_info.benable = _FALSE;
+                                       issue_p2p_provision_request( padapter,
+                                                                                               NULL,
+                                                                                               0,
+                                                                                               pwdinfo->tx_prov_disc_info.peerDevAddr );
+                               }
+                       }
+               }
+               return _SUCCESS;
+       }
+       else if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_ING))
+       {
+               if ( _TRUE == pwdinfo->nego_req_info.benable )
+               {
+                       DBG_871X( "[%s] P2P State is GONEGO ING!\n", __FUNCTION__ );
+                       if( _rtw_memcmp( pwdinfo->nego_req_info.peerDevAddr, GetAddr2Ptr(pframe), ETH_ALEN ) )
+                       {
+                               pwdinfo->nego_req_info.benable = _FALSE;
+                               issue_p2p_GO_request( padapter, pwdinfo->nego_req_info.peerDevAddr);
+                       }
+               }
+       }
+       else if( rtw_p2p_chk_state(pwdinfo, P2P_STATE_TX_INVITE_REQ ) )
+       {
+               if ( _TRUE == pwdinfo->invitereq_info.benable )
+               {
+                       DBG_871X( "[%s] P2P_STATE_TX_INVITE_REQ!\n", __FUNCTION__ );
+                       if( _rtw_memcmp( pwdinfo->invitereq_info.peer_macaddr, GetAddr2Ptr(pframe), ETH_ALEN ) )
+                       {
+                               pwdinfo->invitereq_info.benable = _FALSE;
+                               issue_p2p_invitation_request( padapter, pwdinfo->invitereq_info.peer_macaddr );
+                       }
+               }
+       }
+#endif
+
+
+       if (pmlmeext->sitesurvey_res.state == SCAN_PROCESS)
+       {
+               report_survey_event(padapter, precv_frame);
+#ifdef CONFIG_CONCURRENT_MODE
+               report_survey_event(padapter->pbuddy_adapter, precv_frame);
+#endif
+#ifdef CONFIG_DUALMAC_CONCURRENT
+               dc_report_survey_event(padapter, precv_frame);
+#endif
+               return _SUCCESS;
+       }
+
+       #if 0 //move to validate_recv_mgnt_frame
+       if (_rtw_memcmp(GetAddr3Ptr(pframe), get_my_bssid(&pmlmeinfo->network), ETH_ALEN))
+       {
+               if (pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS)
+               {
+                       if ((psta = rtw_get_stainfo(pstapriv, GetAddr2Ptr(pframe))) != NULL)
+                       {
+                               psta->sta_stats.rx_mgnt_pkts++;
+                       }
+               }
+       }
+       #endif
+
+       return _SUCCESS;
+
+}
+
+unsigned int OnBeacon(_adapter *padapter, union recv_frame *precv_frame)
+{
+       int cam_idx;
+       struct sta_info *psta;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       struct sta_priv *pstapriv = &padapter->stapriv;
+       u8 *pframe = precv_frame->u.hdr.rx_data;
+       uint len = precv_frame->u.hdr.len;
+       u8 *p = NULL;
+       u32 ielen = 0;
+
+#ifdef CONFIG_ATTEMPT_TO_FIX_AP_BEACON_ERROR
+       p = rtw_get_ie(pframe + sizeof(struct rtw_ieee80211_hdr_3addr) + _BEACON_IE_OFFSET_, _EXT_SUPPORTEDRATES_IE_, &ielen, precv_frame->u.hdr.len -sizeof(struct rtw_ieee80211_hdr_3addr) - _BEACON_IE_OFFSET_);
+       if ((p != NULL) && (ielen > 0))
+       {
+               if ((*(p + 1 + ielen) == 0x2D) && (*(p + 2 + ielen) != 0x2D))
+               {
+                       /* Invalid value 0x2D is detected in Extended Supported Rates (ESR) IE. Try to fix the IE length to avoid failed Beacon parsing. */
+                       DBG_871X("[WIFIDBG] Error in ESR IE is detected in Beacon of BSSID:"MAC_FMT". Fix the length of ESR IE to avoid failed Beacon parsing.\n", MAC_ARG(GetAddr3Ptr(pframe)));
+                       *(p + 1) = ielen - 1;
+               }
+       }
+#endif
+
+       if (pmlmeext->sitesurvey_res.state == SCAN_PROCESS)
+       {
+               report_survey_event(padapter, precv_frame);
+#ifdef CONFIG_CONCURRENT_MODE
+               report_survey_event(padapter->pbuddy_adapter, precv_frame);
+#endif
+
+#ifdef CONFIG_DUALMAC_CONCURRENT
+               dc_report_survey_event(padapter, precv_frame);
+#endif
+
+               return _SUCCESS;
+       }
+
+       if (_rtw_memcmp(GetAddr3Ptr(pframe), get_my_bssid(&pmlmeinfo->network), ETH_ALEN))
+       {
+               if (pmlmeinfo->state & WIFI_FW_AUTH_NULL)
+               {
+                       //check the vendor of the assoc AP
+                       pmlmeinfo->assoc_AP_vendor = check_assoc_AP(pframe+sizeof(struct rtw_ieee80211_hdr_3addr), len-sizeof(struct rtw_ieee80211_hdr_3addr));
+#ifdef CONFIG_P2P_PS
+                       // do P2P PS Before link ? , ToDo
+                       //process_p2p_ps_ie(padapter, (pframe + WLAN_HDR_A3_LEN), (len - WLAN_HDR_A3_LEN));
+#endif // CONFIG_P2P_PS
+
+                       //update TSF Value
+                       update_TSF(pmlmeext, pframe, len);
+
+                       //start auth
+                       start_clnt_auth(padapter);
+
+                       return _SUCCESS;
+               }
+
+               if(((pmlmeinfo->state&0x03) == WIFI_FW_STATION_STATE) && (pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS))
+               {
+                       if ((psta = rtw_get_stainfo(pstapriv, GetAddr2Ptr(pframe))) != NULL)
+                       {
+                               #ifdef CONFIG_PATCH_JOIN_WRONG_CHANNEL
+                               //Merge from 8712 FW code
+                               if (cmp_pkt_chnl_diff(padapter,pframe,len) != 0)
+                               {            // join wrong channel, deauth and reconnect
+                                       issue_deauth(padapter, (&(pmlmeinfo->network))->MacAddress, WLAN_REASON_DEAUTH_LEAVING);
+
+                                       report_del_sta_event(padapter,(&(pmlmeinfo->network))->MacAddress, WLAN_REASON_JOIN_WRONG_CHANNEL);
+                                       pmlmeinfo->state &= (~WIFI_FW_ASSOC_SUCCESS);
+                                       return _SUCCESS;
+                               }
+                               #endif //CONFIG_PATCH_JOIN_WRONG_CHANNEL
+
+                               //update WMM, ERP in the beacon
+                               //todo: the timer is used instead of the number of the beacon received
+                               if ((sta_rx_pkts(psta) & 0xf) == 0)
+                               {
+                                       //DBG_871X("update_bcn_info\n");
+                                       update_beacon_info(padapter, pframe, len, psta);
+                               }
+
+#ifdef CONFIG_DFS
+                               process_csa_ie(padapter, pframe, len);  //channel switch announcement
+#endif //CONFIG_DFS
+
+#ifdef CONFIG_P2P_PS
+                               //if(psta->ieee8021x_blocked == _FALSE) // do not allow P2P PS during EAPOL handshake ?
+                               process_p2p_ps_ie(padapter, (pframe + WLAN_HDR_A3_LEN), (len - WLAN_HDR_A3_LEN));
+#endif //CONFIG_P2P_PS
+
+                               #if 0 //move to validate_recv_mgnt_frame
+                               psta->sta_stats.rx_mgnt_pkts++;
+                               #endif
+                       }
+               }
+               else if((pmlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE)
+               {
+                       if ((psta = rtw_get_stainfo(pstapriv, GetAddr2Ptr(pframe))) != NULL)
+                       {
+                               //update WMM, ERP in the beacon
+                               //todo: the timer is used instead of the number of the beacon received
+                               if ((sta_rx_pkts(psta) & 0xf) == 0)
+                               {
+                                       //DBG_871X("update_bcn_info\n");
+                                       update_beacon_info(padapter, pframe, len, psta);
+                               }
+
+                               #if 0 //move to validate_recv_mgnt_frame
+                               psta->sta_stats.rx_mgnt_pkts++;
+                               #endif
+                       }
+                       else
+                       {
+                               //allocate a new CAM entry for IBSS station
+                               if ((cam_idx = allocate_fw_sta_entry(padapter)) == NUM_STA)
+                               {
+                                       goto _END_ONBEACON_;
+                               }
+
+                               //get supported rate
+                               if (update_sta_support_rate(padapter, (pframe + WLAN_HDR_A3_LEN + _BEACON_IE_OFFSET_), (len - WLAN_HDR_A3_LEN - _BEACON_IE_OFFSET_), cam_idx) == _FAIL)
+                               {
+                                       pmlmeinfo->FW_sta_info[cam_idx].status = 0;
+                                       goto _END_ONBEACON_;
+                               }
+
+                               //update TSF Value
+                               update_TSF(pmlmeext, pframe, len);
+
+                               //report sta add event
+                               report_add_sta_event(padapter, GetAddr2Ptr(pframe), cam_idx);
+                       }
+               }
+       }
+
+_END_ONBEACON_:
+
+       return _SUCCESS;
+
+}
+
+unsigned int OnAuth(_adapter *padapter, union recv_frame *precv_frame)
+{
+#ifdef CONFIG_AP_MODE
+       _irqL irqL;
+       unsigned int    auth_mode, seq, ie_len;
+       unsigned char   *sa, *p;
+       u16     algorithm;
+       int     status;
+       static struct sta_info stat;
+       struct  sta_info        *pstat=NULL;
+       struct  sta_priv *pstapriv = &padapter->stapriv;
+       struct security_priv *psecuritypriv = &padapter->securitypriv;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       u8 *pframe = precv_frame->u.hdr.rx_data;
+       uint len = precv_frame->u.hdr.len;
+
+
+#ifdef CONFIG_CONCURRENT_MODE
+       if(((pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE) &&
+               check_buddy_fwstate(padapter, _FW_UNDER_LINKING|_FW_UNDER_SURVEY))
+       {
+               //don't process auth request;
+               return _SUCCESS;
+       }
+#endif //CONFIG_CONCURRENT_MODE
+
+       if((pmlmeinfo->state&0x03) != WIFI_FW_AP_STATE)
+               return _FAIL;
+
+       DBG_871X("+OnAuth\n");
+
+       sa = GetAddr2Ptr(pframe);
+
+       auth_mode = psecuritypriv->dot11AuthAlgrthm;
+       seq = cpu_to_le16(*(u16*)((SIZE_PTR)pframe + WLAN_HDR_A3_LEN + 2));
+       algorithm = cpu_to_le16(*(u16*)((SIZE_PTR)pframe + WLAN_HDR_A3_LEN));
+
+       if (GetPrivacy(pframe))
+       {
+#if 0 //TODO: SW rtw_wep_decrypt
+               if (SWCRYPTO)
+               {
+                       status = rtw_wep_decrypt(priv, pframe, pfrinfo->pktlen,
+                               priv->pmib->dot1180211AuthEntry.dot11PrivacyAlgrthm);
+                       if (status == FALSE)
+                       {
+                               SAVE_INT_AND_CLI(flags);
+                               RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,"wep-decrypt a Auth frame error!\n");
+                               status = _STATS_CHALLENGE_FAIL_;
+                               goto auth_fail;
+                       }
+               }
+
+               seq = cpu_to_le16(*(unsigned short *)((unsigned int)pframe + WLAN_HDR_A3_LEN + 4 + 2));
+               algorithm = cpu_to_le16(*(unsigned short *)((unsigned int)pframe + WLAN_HDR_A3_LEN + 4));
+#endif
+       }
+
+
+       DBG_871X("auth alg=%x, seq=%X\n", algorithm, seq);
+
+       if (auth_mode == 2 &&
+                       psecuritypriv->dot11PrivacyAlgrthm != _WEP40_ &&
+                       psecuritypriv->dot11PrivacyAlgrthm != _WEP104_)
+               auth_mode = 0;
+
+       if ((algorithm > 0 && auth_mode == 0) ||        // rx a shared-key auth but shared not enabled
+               (algorithm == 0 && auth_mode == 1) )    // rx a open-system auth but shared-key is enabled
+       {
+               DBG_871X("auth rejected due to bad alg [alg=%d, auth_mib=%d] %02X%02X%02X%02X%02X%02X\n",
+                       algorithm, auth_mode, sa[0], sa[1], sa[2], sa[3], sa[4], sa[5]);
+
+               status = _STATS_NO_SUPP_ALG_;
+
+               goto auth_fail;
+       }
+
+#if 0 //ACL control
+       phead = &priv->wlan_acl_list;
+       plist = phead->next;
+       //check sa
+       if (acl_mode == 1)              // 1: positive check, only those on acl_list can be connected.
+               res = FAIL;
+       else
+               res = SUCCESS;
+
+       while(plist != phead)
+       {
+               paclnode = list_entry(plist, struct rtw_wlan_acl_node, list);
+               plist = plist->next;
+               if (!memcmp((void *)sa, paclnode->addr, 6)) {
+                       if (paclnode->mode & 2) { // deny
+                               res = FAIL;
+                               break;
+                       }
+                       else {
+                               res = SUCCESS;
+                               break;
+                       }
+               }
+       }
+
+       if (res != SUCCESS) {
+               RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,"auth abort because ACL!\n");
+               return FAIL;
+       }
+#else
+       if(rtw_access_ctrl(padapter, sa) == _FALSE)
+       {
+               status = _STATS_UNABLE_HANDLE_STA_;
+               goto auth_fail;
+       }
+#endif
+
+       pstat = rtw_get_stainfo(pstapriv, sa);
+       if (pstat == NULL)
+       {
+               // allocate a new one
+               DBG_871X("going to alloc stainfo for sa="MAC_FMT"\n",  MAC_ARG(sa));
+               pstat = rtw_alloc_stainfo(pstapriv, sa);
+               if (pstat == NULL)
+               {
+                       DBG_871X(" Exceed the upper limit of supported clients...\n");
+                       status = _STATS_UNABLE_HANDLE_STA_;
+                       goto auth_fail;
+               }
+
+               pstat->state = WIFI_FW_AUTH_NULL;
+               pstat->auth_seq = 0;
+
+               //pstat->flags = 0;
+               //pstat->capability = 0;
+       }
+       else
+       {
+               _enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+               if(rtw_is_list_empty(&pstat->asoc_list)==_FALSE)
+               {
+                       rtw_list_delete(&pstat->asoc_list);
+                       pstapriv->asoc_list_cnt--;
+                       if (pstat->expire_to > 0)
+                       {
+                               //TODO: STA re_auth within expire_to
+                       }
+               }
+               _exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+
+               if (seq==1) {
+                       //TODO: STA re_auth and auth timeout
+               }
+       }
+
+       _enter_critical_bh(&pstapriv->auth_list_lock, &irqL);
+       if (rtw_is_list_empty(&pstat->auth_list))
+       {
+               rtw_list_insert_tail(&pstat->auth_list, &pstapriv->auth_list);
+               pstapriv->auth_list_cnt++;
+       }
+       _exit_critical_bh(&pstapriv->auth_list_lock, &irqL);
+
+       if (pstat->auth_seq == 0)
+               pstat->expire_to = pstapriv->auth_to;
+
+       if ((pstat->auth_seq + 1) != seq)
+       {
+               DBG_871X("(1)auth rejected because out of seq [rx_seq=%d, exp_seq=%d]!\n",
+                       seq, pstat->auth_seq+1);
+               status = _STATS_OUT_OF_AUTH_SEQ_;
+               goto auth_fail;
+       }
+
+       if (algorithm==0 && (auth_mode == 0 || auth_mode == 2))
+       {
+               if (seq == 1)
+               {
+                       pstat->state &= ~WIFI_FW_AUTH_NULL;
+                       pstat->state |= WIFI_FW_AUTH_SUCCESS;
+                       pstat->expire_to = pstapriv->assoc_to;
+                       pstat->authalg = algorithm;
+               }
+               else
+               {
+                       DBG_871X("(2)auth rejected because out of seq [rx_seq=%d, exp_seq=%d]!\n",
+                               seq, pstat->auth_seq+1);
+                       status = _STATS_OUT_OF_AUTH_SEQ_;
+                       goto auth_fail;
+               }
+       }
+       else // shared system or auto authentication
+       {
+               if (seq == 1)
+               {
+                       //prepare for the challenging txt...
+
+                       //get_random_bytes((void *)pstat->chg_txt, 128);//TODO:
+
+                       pstat->state &= ~WIFI_FW_AUTH_NULL;
+                       pstat->state |= WIFI_FW_AUTH_STATE;
+                       pstat->authalg = algorithm;
+                       pstat->auth_seq = 2;
+               }
+               else if (seq == 3)
+               {
+                       //checking for challenging txt...
+                       DBG_871X("checking for challenging txt...\n");
+
+                       p = rtw_get_ie(pframe + WLAN_HDR_A3_LEN + 4 + _AUTH_IE_OFFSET_ , _CHLGETXT_IE_, (int *)&ie_len,
+                                       len - WLAN_HDR_A3_LEN - _AUTH_IE_OFFSET_ - 4);
+
+                       if((p==NULL) || (ie_len<=0))
+                       {
+                               DBG_871X("auth rejected because challenge failure!(1)\n");
+                               status = _STATS_CHALLENGE_FAIL_;
+                               goto auth_fail;
+                       }
+
+                       if (_rtw_memcmp((void *)(p + 2), pstat->chg_txt, 128))
+                       {
+                               pstat->state &= (~WIFI_FW_AUTH_STATE);
+                               pstat->state |= WIFI_FW_AUTH_SUCCESS;
+                               // challenging txt is correct...
+                               pstat->expire_to =  pstapriv->assoc_to;
+                       }
+                       else
+                       {
+                               DBG_871X("auth rejected because challenge failure!\n");
+                               status = _STATS_CHALLENGE_FAIL_;
+                               goto auth_fail;
+                       }
+               }
+               else
+               {
+                       DBG_871X("(3)auth rejected because out of seq [rx_seq=%d, exp_seq=%d]!\n",
+                               seq, pstat->auth_seq+1);
+                       status = _STATS_OUT_OF_AUTH_SEQ_;
+                       goto auth_fail;
+               }
+       }
+
+
+       // Now, we are going to issue_auth...
+       pstat->auth_seq = seq + 1;
+
+#ifdef CONFIG_NATIVEAP_MLME
+       issue_auth(padapter, pstat, (unsigned short)(_STATS_SUCCESSFUL_));
+#endif
+
+       if (pstat->state & WIFI_FW_AUTH_SUCCESS)
+               pstat->auth_seq = 0;
+
+
+       return _SUCCESS;
+
+auth_fail:
+
+       if(pstat)
+               rtw_free_stainfo(padapter , pstat);
+
+       pstat = &stat;
+       _rtw_memset((char *)pstat, '\0', sizeof(stat));
+       pstat->auth_seq = 2;
+       _rtw_memcpy(pstat->hwaddr, sa, 6);
+
+#ifdef CONFIG_NATIVEAP_MLME
+       issue_auth(padapter, pstat, (unsigned short)status);
+#endif
+
+#endif
+       return _FAIL;
+
+}
+
+unsigned int OnAuthClient(_adapter *padapter, union recv_frame *precv_frame)
+{
+       unsigned int    seq, len, status, algthm, offset;
+       unsigned char   *p;
+       unsigned int    go2asoc = 0;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       u8 *pframe = precv_frame->u.hdr.rx_data;
+       uint pkt_len = precv_frame->u.hdr.len;
+
+       DBG_871X("%s\n", __FUNCTION__);
+
+       //check A1 matches or not
+       if (!_rtw_memcmp(myid(&(padapter->eeprompriv)), get_da(pframe), ETH_ALEN))
+               return _SUCCESS;
+
+       if (!(pmlmeinfo->state & WIFI_FW_AUTH_STATE))
+               return _SUCCESS;
+
+       offset = (GetPrivacy(pframe))? 4: 0;
+
+       algthm  = le16_to_cpu(*(unsigned short *)((SIZE_PTR)pframe + WLAN_HDR_A3_LEN + offset));
+       seq     = le16_to_cpu(*(unsigned short *)((SIZE_PTR)pframe + WLAN_HDR_A3_LEN + offset + 2));
+       status  = le16_to_cpu(*(unsigned short *)((SIZE_PTR)pframe + WLAN_HDR_A3_LEN + offset + 4));
+
+       if (status != 0)
+       {
+               DBG_871X("clnt auth fail, status: %d\n", status);
+               if(status == 13)//&& pmlmeinfo->auth_algo == dot11AuthAlgrthm_Auto)
+               {
+                       if(pmlmeinfo->auth_algo == dot11AuthAlgrthm_Shared)
+                               pmlmeinfo->auth_algo = dot11AuthAlgrthm_Open;
+                       else
+                               pmlmeinfo->auth_algo = dot11AuthAlgrthm_Shared;
+                       //pmlmeinfo->reauth_count = 0;
+               }
+
+               set_link_timer(pmlmeext, 1);
+               goto authclnt_fail;
+       }
+
+       if (seq == 2)
+       {
+               if (pmlmeinfo->auth_algo == dot11AuthAlgrthm_Shared)
+               {
+                        // legendary shared system
+                       p = rtw_get_ie(pframe + WLAN_HDR_A3_LEN + _AUTH_IE_OFFSET_, _CHLGETXT_IE_, (int *)&len,
+                               pkt_len - WLAN_HDR_A3_LEN - _AUTH_IE_OFFSET_);
+
+                       if (p == NULL)
+                       {
+                               //DBG_871X("marc: no challenge text?\n");
+                               goto authclnt_fail;
+                       }
+
+                       _rtw_memcpy((void *)(pmlmeinfo->chg_txt), (void *)(p + 2), len);
+                       pmlmeinfo->auth_seq = 3;
+                       issue_auth(padapter, NULL, 0);
+                       set_link_timer(pmlmeext, REAUTH_TO);
+
+                       return _SUCCESS;
+               }
+               else
+               {
+                       // open system
+                       go2asoc = 1;
+               }
+       }
+       else if (seq == 4)
+       {
+               if (pmlmeinfo->auth_algo == dot11AuthAlgrthm_Shared)
+               {
+                       go2asoc = 1;
+               }
+               else
+               {
+                       goto authclnt_fail;
+               }
+       }
+       else
+       {
+               // this is also illegal
+               //DBG_871X("marc: clnt auth failed due to illegal seq=%x\n", seq);
+               goto authclnt_fail;
+       }
+
+       if (go2asoc)
+       {
+               start_clnt_assoc(padapter);
+               return _SUCCESS;
+       }
+
+authclnt_fail:
+
+       //pmlmeinfo->state &= ~(WIFI_FW_AUTH_STATE);
+
+       return _FAIL;
+
+}
+
+unsigned int OnAssocReq(_adapter *padapter, union recv_frame *precv_frame)
+{
+#ifdef CONFIG_AP_MODE
+       _irqL irqL;
+       u16 capab_info, listen_interval;
+       struct rtw_ieee802_11_elems elems;
+       struct sta_info *pstat;
+       unsigned char           reassoc, *p, *pos, *wpa_ie;
+       unsigned char WMM_IE[] = {0x00, 0x50, 0xf2, 0x02, 0x00, 0x01};
+       int             i, ie_len, wpa_ie_len, left;
+       unsigned char           supportRate[16];
+       int                                     supportRateNum;
+       unsigned short          status = _STATS_SUCCESSFUL_;
+       unsigned short          frame_type, ie_offset=0;
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+       struct security_priv *psecuritypriv = &padapter->securitypriv;
+       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       WLAN_BSSID_EX   *cur = &(pmlmeinfo->network);
+       struct sta_priv *pstapriv = &padapter->stapriv;
+       u8 *pframe = precv_frame->u.hdr.rx_data;
+       uint pkt_len = precv_frame->u.hdr.len;
+#ifdef CONFIG_P2P
+       struct wifidirect_info  *pwdinfo = &(padapter->wdinfo);
+       u8 p2p_status_code = P2P_STATUS_SUCCESS;
+       u8 *p2pie;
+       u32 p2pielen = 0;
+#ifdef CONFIG_WFD
+       u8      wfd_ie[ 128 ] = { 0x00 };
+       u32     wfd_ielen = 0;
+#endif // CONFIG_WFD
+#endif //CONFIG_P2P
+
+#ifdef CONFIG_CONCURRENT_MODE
+       if(((pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE) &&
+               check_buddy_fwstate(padapter, _FW_UNDER_LINKING|_FW_UNDER_SURVEY))
+       {
+               //don't process assoc request;
+               return _SUCCESS;
+       }
+#endif //CONFIG_CONCURRENT_MODE
+
+       if((pmlmeinfo->state&0x03) != WIFI_FW_AP_STATE)
+               return _FAIL;
+
+       frame_type = GetFrameSubType(pframe);
+       if (frame_type == WIFI_ASSOCREQ)
+       {
+               reassoc = 0;
+               ie_offset = _ASOCREQ_IE_OFFSET_;
+       }
+       else // WIFI_REASSOCREQ
+       {
+               reassoc = 1;
+               ie_offset = _REASOCREQ_IE_OFFSET_;
+       }
+
+
+       if (pkt_len < IEEE80211_3ADDR_LEN + ie_offset) {
+               DBG_871X("handle_assoc(reassoc=%d) - too short payload (len=%lu)"
+                      "\n", reassoc, (unsigned long)pkt_len);
+               return _FAIL;
+       }
+
+       pstat = rtw_get_stainfo(pstapriv, GetAddr2Ptr(pframe));
+       if (pstat == (struct sta_info *)NULL)
+       {
+               status = _RSON_CLS2_;
+               goto asoc_class2_error;
+       }
+
+       capab_info = RTW_GET_LE16(pframe + WLAN_HDR_A3_LEN);
+       //capab_info = le16_to_cpu(*(unsigned short *)(pframe + WLAN_HDR_A3_LEN));
+       //listen_interval = le16_to_cpu(*(unsigned short *)(pframe + WLAN_HDR_A3_LEN+2));
+       listen_interval = RTW_GET_LE16(pframe + WLAN_HDR_A3_LEN+2);
+
+       left = pkt_len - (IEEE80211_3ADDR_LEN + ie_offset);
+       pos = pframe + (IEEE80211_3ADDR_LEN + ie_offset);
+
+
+       DBG_871X("%s\n", __FUNCTION__);
+
+       // check if this stat has been successfully authenticated/assocated
+       if (!((pstat->state) & WIFI_FW_AUTH_SUCCESS))
+       {
+               if (!((pstat->state) & WIFI_FW_ASSOC_SUCCESS))
+               {
+                       status = _RSON_CLS2_;
+                       goto asoc_class2_error;
+               }
+               else
+               {
+                       pstat->state &= (~WIFI_FW_ASSOC_SUCCESS);
+                       pstat->state |= WIFI_FW_ASSOC_STATE;
+               }
+       }
+       else
+       {
+               pstat->state &= (~WIFI_FW_AUTH_SUCCESS);
+               pstat->state |= WIFI_FW_ASSOC_STATE;
+       }
+
+
+#if 0// todo:tkip_countermeasures
+       if (hapd->tkip_countermeasures) {
+               resp = WLAN_REASON_MICHAEL_MIC_FAILURE;
+               goto fail;
+       }
+#endif
+
+       pstat->capability = capab_info;
+
+#if 0//todo:
+       //check listen_interval
+       if (listen_interval > hapd->conf->max_listen_interval) {
+               hostapd_logger(hapd, mgmt->sa, HOSTAPD_MODULE_IEEE80211,
+                              HOSTAPD_LEVEL_DEBUG,
+                              "Too large Listen Interval (%d)",
+                              listen_interval);
+               resp = WLAN_STATUS_ASSOC_DENIED_LISTEN_INT_TOO_LARGE;
+               goto fail;
+       }
+
+       pstat->listen_interval = listen_interval;
+#endif
+
+       //now parse all ieee802_11 ie to point to elems
+       if (rtw_ieee802_11_parse_elems(pos, left, &elems, 1) == ParseFailed ||
+           !elems.ssid) {
+               DBG_871X("STA " MAC_FMT " sent invalid association request\n",
+                      MAC_ARG(pstat->hwaddr));
+               status = _STATS_FAILURE_;
+               goto OnAssocReqFail;
+       }
+
+
+       // now we should check all the fields...
+       // checking SSID
+       p = rtw_get_ie(pframe + WLAN_HDR_A3_LEN + ie_offset, _SSID_IE_, &ie_len,
+               pkt_len - WLAN_HDR_A3_LEN - ie_offset);
+       if (p == NULL)
+       {
+               status = _STATS_FAILURE_;
+       }
+
+       if (ie_len == 0) // broadcast ssid, however it is not allowed in assocreq
+               status = _STATS_FAILURE_;
+       else
+       {
+               // check if ssid match
+               if (!_rtw_memcmp((void *)(p+2), cur->Ssid.Ssid, cur->Ssid.SsidLength))
+                       status = _STATS_FAILURE_;
+
+               if (ie_len != cur->Ssid.SsidLength)
+                       status = _STATS_FAILURE_;
+       }
+
+       if(_STATS_SUCCESSFUL_ != status)
+               goto OnAssocReqFail;
+
+       // check if the supported rate is ok
+       p = rtw_get_ie(pframe + WLAN_HDR_A3_LEN + ie_offset, _SUPPORTEDRATES_IE_, &ie_len, pkt_len - WLAN_HDR_A3_LEN - ie_offset);
+       if (p == NULL) {
+               DBG_871X("Rx a sta assoc-req which supported rate is empty!\n");
+               // use our own rate set as statoin used
+               //_rtw_memcpy(supportRate, AP_BSSRATE, AP_BSSRATE_LEN);
+               //supportRateNum = AP_BSSRATE_LEN;
+
+               status = _STATS_FAILURE_;
+               goto OnAssocReqFail;
+       }
+       else {
+               _rtw_memcpy(supportRate, p+2, ie_len);
+               supportRateNum = ie_len;
+
+               p = rtw_get_ie(pframe + WLAN_HDR_A3_LEN + ie_offset, _EXT_SUPPORTEDRATES_IE_ , &ie_len,
+                               pkt_len - WLAN_HDR_A3_LEN - ie_offset);
+               if (p !=  NULL) {
+
+                       if(supportRateNum<=sizeof(supportRate))
+                       {
+                               _rtw_memcpy(supportRate+supportRateNum, p+2, ie_len);
+                               supportRateNum += ie_len;
+                       }
+               }
+       }
+
+       //todo: mask supportRate between AP & STA -> move to update raid
+       //get_matched_rate(pmlmeext, supportRate, &supportRateNum, 0);
+
+       //update station supportRate
+       pstat->bssratelen = supportRateNum;
+       _rtw_memcpy(pstat->bssrateset, supportRate, supportRateNum);
+
+
+       //check RSN/WPA/WPS
+       pstat->dot8021xalg = 0;
+       pstat->wpa_psk = 0;
+       pstat->wpa_group_cipher = 0;
+       pstat->wpa2_group_cipher = 0;
+       pstat->wpa_pairwise_cipher = 0;
+       pstat->wpa2_pairwise_cipher = 0;
+       _rtw_memset(pstat->wpa_ie, 0, sizeof(pstat->wpa_ie));
+       if((psecuritypriv->wpa_psk & BIT(1)) && elems.rsn_ie) {
+
+               int group_cipher=0, pairwise_cipher=0;
+
+               wpa_ie = elems.rsn_ie;
+               wpa_ie_len = elems.rsn_ie_len;
+
+               if(rtw_parse_wpa2_ie(wpa_ie-2, wpa_ie_len+2, &group_cipher, &pairwise_cipher) == _SUCCESS)
+               {
+                       pstat->dot8021xalg = 1;//psk,  todo:802.1x
+                       pstat->wpa_psk |= BIT(1);
+
+                       pstat->wpa2_group_cipher = group_cipher&psecuritypriv->wpa2_group_cipher;
+                       pstat->wpa2_pairwise_cipher = pairwise_cipher&psecuritypriv->wpa2_pairwise_cipher;
+
+                       if(!pstat->wpa2_group_cipher)
+                               status = WLAN_STATUS_GROUP_CIPHER_NOT_VALID;
+
+                       if(!pstat->wpa2_pairwise_cipher)
+                               status = WLAN_STATUS_PAIRWISE_CIPHER_NOT_VALID;
+               }
+               else
+               {
+                       status = WLAN_STATUS_INVALID_IE;
+               }
+
+       } else if ((psecuritypriv->wpa_psk & BIT(0)) && elems.wpa_ie) {
+
+               int group_cipher=0, pairwise_cipher=0;
+
+               wpa_ie = elems.wpa_ie;
+               wpa_ie_len = elems.wpa_ie_len;
+
+               if(rtw_parse_wpa_ie(wpa_ie-2, wpa_ie_len+2, &group_cipher, &pairwise_cipher) == _SUCCESS)
+               {
+                       pstat->dot8021xalg = 1;//psk,  todo:802.1x
+                       pstat->wpa_psk |= BIT(0);
+
+                       pstat->wpa_group_cipher = group_cipher&psecuritypriv->wpa_group_cipher;
+                       pstat->wpa_pairwise_cipher = pairwise_cipher&psecuritypriv->wpa_pairwise_cipher;
+
+                       if(!pstat->wpa_group_cipher)
+                               status = WLAN_STATUS_GROUP_CIPHER_NOT_VALID;
+
+                       if(!pstat->wpa_pairwise_cipher)
+                               status = WLAN_STATUS_PAIRWISE_CIPHER_NOT_VALID;
+
+               }
+               else
+               {
+                       status = WLAN_STATUS_INVALID_IE;
+               }
+
+       } else {
+               wpa_ie = NULL;
+               wpa_ie_len = 0;
+       }
+
+       if(_STATS_SUCCESSFUL_ != status)
+               goto OnAssocReqFail;
+
+       pstat->flags &= ~(WLAN_STA_WPS | WLAN_STA_MAYBE_WPS);
+       //if (hapd->conf->wps_state && wpa_ie == NULL) { //todo: to check ap if supporting WPS
+       if(wpa_ie == NULL) {
+               if (elems.wps_ie) {
+                       DBG_871X("STA included WPS IE in "
+                                  "(Re)Association Request - assume WPS is "
+                                  "used\n");
+                       pstat->flags |= WLAN_STA_WPS;
+                       //wpabuf_free(sta->wps_ie);
+                       //sta->wps_ie = wpabuf_alloc_copy(elems.wps_ie + 4,
+                       //                              elems.wps_ie_len - 4);
+               } else {
+                       DBG_871X("STA did not include WPA/RSN IE "
+                                  "in (Re)Association Request - possible WPS "
+                                  "use\n");
+                       pstat->flags |= WLAN_STA_MAYBE_WPS;
+               }
+
+
+               // AP support WPA/RSN, and sta is going to do WPS, but AP is not ready
+               // that the selected registrar of AP is _FLASE
+               if((psecuritypriv->wpa_psk >0)
+                       && (pstat->flags & (WLAN_STA_WPS|WLAN_STA_MAYBE_WPS)))
+               {
+                       if(pmlmepriv->wps_beacon_ie)
+                       {
+                               u8 selected_registrar = 0;
+
+                               rtw_get_wps_attr_content(pmlmepriv->wps_beacon_ie, pmlmepriv->wps_beacon_ie_len, WPS_ATTR_SELECTED_REGISTRAR , &selected_registrar, NULL);
+
+                               if(!selected_registrar)
+                               {
+                                       DBG_871X("selected_registrar is _FALSE , or AP is not ready to do WPS\n");
+
+                                       status = _STATS_UNABLE_HANDLE_STA_;
+
+                                       goto OnAssocReqFail;
+                               }
+                       }
+               }
+
+       }
+       else
+       {
+               int copy_len;
+
+               if(psecuritypriv->wpa_psk == 0)
+               {
+                       DBG_871X("STA " MAC_FMT ": WPA/RSN IE in association "
+                       "request, but AP don't support WPA/RSN\n", MAC_ARG(pstat->hwaddr));
+
+                       status = WLAN_STATUS_INVALID_IE;
+
+                       goto OnAssocReqFail;
+
+               }
+
+               if (elems.wps_ie) {
+                       DBG_871X("STA included WPS IE in "
+                                  "(Re)Association Request - WPS is "
+                                  "used\n");
+                       pstat->flags |= WLAN_STA_WPS;
+                       copy_len=0;
+               }
+               else
+               {
+                       copy_len = ((wpa_ie_len+2) > sizeof(pstat->wpa_ie)) ? (sizeof(pstat->wpa_ie)):(wpa_ie_len+2);
+               }
+
+
+               if(copy_len>0)
+                       _rtw_memcpy(pstat->wpa_ie, wpa_ie-2, copy_len);
+
+       }
+
+
+       // check if there is WMM IE & support WWM-PS
+       pstat->flags &= ~WLAN_STA_WME;
+       pstat->qos_option = 0;
+       pstat->qos_info = 0;
+       pstat->has_legacy_ac = _TRUE;
+       pstat->uapsd_vo = 0;
+       pstat->uapsd_vi = 0;
+       pstat->uapsd_be = 0;
+       pstat->uapsd_bk = 0;
+       if (pmlmepriv->qospriv.qos_option)
+       {
+               p = pframe + WLAN_HDR_A3_LEN + ie_offset; ie_len = 0;
+               for (;;)
+               {
+                       p = rtw_get_ie(p, _VENDOR_SPECIFIC_IE_, &ie_len, pkt_len - WLAN_HDR_A3_LEN - ie_offset);
+                       if (p != NULL) {
+                               if (_rtw_memcmp(p+2, WMM_IE, 6)) {
+
+                                       pstat->flags |= WLAN_STA_WME;
+
+                                       pstat->qos_option = 1;
+                                       pstat->qos_info = *(p+8);
+
+                                       pstat->max_sp_len = (pstat->qos_info>>5)&0x3;
+
+                                       if((pstat->qos_info&0xf) !=0xf)
+                                               pstat->has_legacy_ac = _TRUE;
+                                       else
+                                               pstat->has_legacy_ac = _FALSE;
+
+                                       if(pstat->qos_info&0xf)
+                                       {
+                                               if(pstat->qos_info&BIT(0))
+                                                       pstat->uapsd_vo = BIT(0)|BIT(1);
+                                               else
+                                                       pstat->uapsd_vo = 0;
+
+                                               if(pstat->qos_info&BIT(1))
+                                                       pstat->uapsd_vi = BIT(0)|BIT(1);
+                                               else
+                                                       pstat->uapsd_vi = 0;
+
+                                               if(pstat->qos_info&BIT(2))
+                                                       pstat->uapsd_bk = BIT(0)|BIT(1);
+                                               else
+                                                       pstat->uapsd_bk = 0;
+
+                                               if(pstat->qos_info&BIT(3))
+                                                       pstat->uapsd_be = BIT(0)|BIT(1);
+                                               else
+                                                       pstat->uapsd_be = 0;
+
+                                       }
+
+                                       break;
+                               }
+                       }
+                       else {
+                               break;
+                       }
+                       p = p + ie_len + 2;
+               }
+       }
+
+
+#ifdef CONFIG_80211N_HT
+       /* save HT capabilities in the sta object */
+       _rtw_memset(&pstat->htpriv.ht_cap, 0, sizeof(struct rtw_ieee80211_ht_cap));
+       if (elems.ht_capabilities && elems.ht_capabilities_len >= sizeof(struct rtw_ieee80211_ht_cap))
+       {
+               pstat->flags |= WLAN_STA_HT;
+
+               pstat->flags |= WLAN_STA_WME;
+
+               _rtw_memcpy(&pstat->htpriv.ht_cap, elems.ht_capabilities, sizeof(struct rtw_ieee80211_ht_cap));
+
+       } else
+               pstat->flags &= ~WLAN_STA_HT;
+
+
+       if((pmlmepriv->htpriv.ht_option == _FALSE) && (pstat->flags&WLAN_STA_HT))
+       {
+               status = _STATS_FAILURE_;
+               goto OnAssocReqFail;
+       }
+
+
+       if ((pstat->flags & WLAN_STA_HT) &&
+                   ((pstat->wpa2_pairwise_cipher&WPA_CIPHER_TKIP) ||
+                     (pstat->wpa_pairwise_cipher&WPA_CIPHER_TKIP)))
+       {
+               DBG_871X("HT: " MAC_FMT " tried to "
+                                  "use TKIP with HT association\n", MAC_ARG(pstat->hwaddr));
+
+               //status = WLAN_STATUS_CIPHER_REJECTED_PER_POLICY;
+               //goto OnAssocReqFail;
+       }
+#endif /* CONFIG_80211N_HT */
+
+       //
+       //if (hapd->iface->current_mode->mode == HOSTAPD_MODE_IEEE80211G)//?
+       pstat->flags |= WLAN_STA_NONERP;
+       for (i = 0; i < pstat->bssratelen; i++) {
+               if ((pstat->bssrateset[i] & 0x7f) > 22) {
+                       pstat->flags &= ~WLAN_STA_NONERP;
+                       break;
+               }
+       }
+
+       if (pstat->capability & WLAN_CAPABILITY_SHORT_PREAMBLE)
+               pstat->flags |= WLAN_STA_SHORT_PREAMBLE;
+       else
+               pstat->flags &= ~WLAN_STA_SHORT_PREAMBLE;
+
+
+
+       if (status != _STATS_SUCCESSFUL_)
+               goto OnAssocReqFail;
+
+#ifdef CONFIG_P2P
+       pstat->is_p2p_device = _FALSE;
+       if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
+       {
+               if( (p2pie=rtw_get_p2p_ie(pframe + WLAN_HDR_A3_LEN + ie_offset , pkt_len - WLAN_HDR_A3_LEN - ie_offset , NULL, &p2pielen)))
+               {
+                       pstat->is_p2p_device = _TRUE;
+                       if((p2p_status_code=(u8)process_assoc_req_p2p_ie(pwdinfo, pframe, pkt_len, pstat))>0)
+                       {
+                               pstat->p2p_status_code = p2p_status_code;
+                               status = _STATS_CAP_FAIL_;
+                               goto OnAssocReqFail;
+                       }
+               }
+#ifdef CONFIG_WFD
+               if(rtw_get_wfd_ie(pframe + WLAN_HDR_A3_LEN + ie_offset , pkt_len - WLAN_HDR_A3_LEN - ie_offset , wfd_ie, &wfd_ielen ))
+               {
+                       u8      attr_content[ 10 ] = { 0x00 };
+                       u32     attr_contentlen = 0;
+
+                       DBG_8192C( "[%s] WFD IE Found!!\n", __FUNCTION__ );
+                       rtw_get_wfd_attr_content( wfd_ie, wfd_ielen, WFD_ATTR_DEVICE_INFO, attr_content, &attr_contentlen);
+                       if ( attr_contentlen )
+                       {
+                               pwdinfo->wfd_info->peer_rtsp_ctrlport = RTW_GET_BE16( attr_content + 2 );
+                               DBG_8192C( "[%s] Peer PORT NUM = %d\n", __FUNCTION__, pwdinfo->wfd_info->peer_rtsp_ctrlport );
+                       }
+               }
+#endif
+       }
+       pstat->p2p_status_code = p2p_status_code;
+#endif //CONFIG_P2P
+
+       //TODO: identify_proprietary_vendor_ie();
+       // Realtek proprietary IE
+       // identify if this is Broadcom sta
+       // identify if this is ralink sta
+       // Customer proprietary IE
+
+
+
+       /* get a unique AID */
+       if (pstat->aid > 0) {
+               DBG_871X("  old AID %d\n", pstat->aid);
+       } else {
+               for (pstat->aid = 1; pstat->aid <= NUM_STA; pstat->aid++)
+                       if (pstapriv->sta_aid[pstat->aid - 1] == NULL)
+                               break;
+
+               //if (pstat->aid > NUM_STA) {
+               if (pstat->aid > pstapriv->max_num_sta) {
+
+                       pstat->aid = 0;
+
+                       DBG_871X("  no room for more AIDs\n");
+
+                       status = WLAN_STATUS_AP_UNABLE_TO_HANDLE_NEW_STA;
+
+                       goto OnAssocReqFail;
+
+
+               } else {
+                       pstapriv->sta_aid[pstat->aid - 1] = pstat;
+                       DBG_871X("allocate new AID = (%d)\n", pstat->aid);
+               }
+       }
+
+
+       pstat->state &= (~WIFI_FW_ASSOC_STATE);
+       pstat->state |= WIFI_FW_ASSOC_SUCCESS;
+
+       _enter_critical_bh(&pstapriv->auth_list_lock, &irqL);
+       if (!rtw_is_list_empty(&pstat->auth_list))
+       {
+               rtw_list_delete(&pstat->auth_list);
+               pstapriv->auth_list_cnt--;
+       }
+       _exit_critical_bh(&pstapriv->auth_list_lock, &irqL);
+
+       _enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+       if (rtw_is_list_empty(&pstat->asoc_list))
+       {
+               pstat->expire_to = pstapriv->expire_to;
+               rtw_list_insert_tail(&pstat->asoc_list, &pstapriv->asoc_list);
+               pstapriv->asoc_list_cnt++;
+       }
+       _exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+
+       // now the station is qualified to join our BSS...
+       if(pstat && (pstat->state & WIFI_FW_ASSOC_SUCCESS) && (_STATS_SUCCESSFUL_==status))
+       {
+#ifdef CONFIG_NATIVEAP_MLME
+               //.1 bss_cap_update & sta_info_update
+               bss_cap_update_on_sta_join(padapter, pstat);
+               sta_info_update(padapter, pstat);
+
+               //issue assoc rsp before notify station join event.
+               if (frame_type == WIFI_ASSOCREQ)
+                       issue_asocrsp(padapter, status, pstat, WIFI_ASSOCRSP);
+               else
+                       issue_asocrsp(padapter, status, pstat, WIFI_REASSOCRSP);
+
+               //.2 - report to upper layer
+               DBG_871X("indicate_sta_join_event to upper layer - hostapd\n");
+
+#ifdef CONFIG_IOCTL_CFG80211
+               #ifdef COMPAT_KERNEL_RELEASE
+               rtw_cfg80211_indicate_sta_assoc(padapter, pframe, pkt_len);
+               #elif (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) && !defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
+               rtw_cfg80211_indicate_sta_assoc(padapter, pframe, pkt_len);
+               #else //(LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) && !defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
+               _enter_critical_bh(&pstat->lock, &irqL);
+               if(pstat->passoc_req)
+               {
+                       rtw_mfree(pstat->passoc_req, pstat->assoc_req_len);
+                       pstat->passoc_req = NULL;
+                       pstat->assoc_req_len = 0;
+               }
+
+               pstat->passoc_req =  rtw_zmalloc(pkt_len);
+               if(pstat->passoc_req)
+               {
+                       _rtw_memcpy(pstat->passoc_req, pframe, pkt_len);
+                       pstat->assoc_req_len = pkt_len;
+               }
+               _exit_critical_bh(&pstat->lock, &irqL);
+               #endif //(LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) && !defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
+#else
+               rtw_indicate_sta_assoc_event(padapter, pstat);
+#endif //CONFIG_IOCTL_CFG80211
+
+               //.3-(1) report sta add event
+               report_add_sta_event(padapter, pstat->hwaddr, pstat->aid);
+
+/*
+               //issue assoc rsp before notify station join event.
+               if (frame_type == WIFI_ASSOCREQ)
+                       issue_asocrsp(padapter, status, pstat, WIFI_ASSOCRSP);
+               else
+                       issue_asocrsp(padapter, status, pstat, WIFI_REASSOCRSP);
+*/
+
+#endif
+       }
+
+       return _SUCCESS;
+
+asoc_class2_error:
+
+#ifdef CONFIG_NATIVEAP_MLME
+       issue_deauth(padapter, (void *)GetAddr2Ptr(pframe), status);
+#endif
+
+       return _FAIL;
+
+OnAssocReqFail:
+
+
+#ifdef CONFIG_NATIVEAP_MLME
+       pstat->aid = 0;
+       if (frame_type == WIFI_ASSOCREQ)
+               issue_asocrsp(padapter, status, pstat, WIFI_ASSOCRSP);
+       else
+               issue_asocrsp(padapter, status, pstat, WIFI_REASSOCRSP);
+#endif
+
+
+#endif /* CONFIG_AP_MODE */
+
+       return _FAIL;
+
+}
+
+unsigned int OnAssocRsp(_adapter *padapter, union recv_frame *precv_frame)
+{
+       uint i;
+       int res;
+       unsigned short  status;
+       PNDIS_802_11_VARIABLE_IEs       pIE;
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       //WLAN_BSSID_EX                 *cur_network = &(pmlmeinfo->network);
+       u8 *pframe = precv_frame->u.hdr.rx_data;
+       uint pkt_len = precv_frame->u.hdr.len;
+
+       DBG_871X("%s\n", __FUNCTION__);
+
+       //check A1 matches or not
+       if (!_rtw_memcmp(myid(&(padapter->eeprompriv)), get_da(pframe), ETH_ALEN))
+               return _SUCCESS;
+
+       if (!(pmlmeinfo->state & (WIFI_FW_AUTH_SUCCESS | WIFI_FW_ASSOC_STATE)))
+               return _SUCCESS;
+
+       if (pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS)
+               return _SUCCESS;
+
+       _cancel_timer_ex(&pmlmeext->link_timer);
+
+       //status
+       if ((status = le16_to_cpu(*(unsigned short *)(pframe + WLAN_HDR_A3_LEN + 2))) > 0)
+       {
+               DBG_871X("assoc reject, status code: %d\n", status);
+               pmlmeinfo->state = WIFI_FW_NULL_STATE;
+               res = -4;
+               goto report_assoc_result;
+       }
+
+       //get capabilities
+       pmlmeinfo->capability = le16_to_cpu(*(unsigned short *)(pframe + WLAN_HDR_A3_LEN));
+
+       //set slot time
+       pmlmeinfo->slotTime = (pmlmeinfo->capability & BIT(10))? 9: 20;
+
+       //AID
+       res = pmlmeinfo->aid = (int)(le16_to_cpu(*(unsigned short *)(pframe + WLAN_HDR_A3_LEN + 4))&0x3fff);
+
+       //following are moved to join event callback function
+       //to handle HT, WMM, rate adaptive, update MAC reg
+       //for not to handle the synchronous IO in the tasklet
+       for (i = (6 + WLAN_HDR_A3_LEN); i < pkt_len;)
+       {
+               pIE = (PNDIS_802_11_VARIABLE_IEs)(pframe + i);
+
+               switch (pIE->ElementID)
+               {
+                       case _VENDOR_SPECIFIC_IE_:
+                               if (_rtw_memcmp(pIE->data, WMM_PARA_OUI, 6))    //WMM
+                               {
+                                       WMM_param_handler(padapter, pIE);
+                               }
+#if defined(CONFIG_P2P) && defined(CONFIG_WFD)
+                               else if ( _rtw_memcmp(pIE->data, WFD_OUI, 4))           //WFD
+                               {
+                                       DBG_871X( "[%s] Found WFD IE\n", __FUNCTION__ );
+                                       WFD_info_handler( padapter, pIE );
+                               }
+#endif
+                               break;
+
+                       case _HT_CAPABILITY_IE_:        //HT caps
+                               HT_caps_handler(padapter, pIE);
+                               break;
+
+                       case _HT_EXTRA_INFO_IE_:        //HT info
+                               HT_info_handler(padapter, pIE);
+                               break;
+
+                       case _ERPINFO_IE_:
+                               ERP_IE_handler(padapter, pIE);
+
+                       default:
+                               break;
+               }
+
+               i += (pIE->Length + 2);
+       }
+
+       pmlmeinfo->state &= (~WIFI_FW_ASSOC_STATE);
+       pmlmeinfo->state |= WIFI_FW_ASSOC_SUCCESS;
+
+       //Update Basic Rate Table for spec, 2010-12-28 , by thomas
+       UpdateBrateTbl(padapter, pmlmeinfo->network.SupportedRates);
+
+#ifdef CONFIG_IOCTL_CFG80211
+       if (!rtw_cfg80211_check_bss(padapter)) {
+               DBG_871X("rtw_cfg80211_check_bss() : BSS not found !!\n");
+               res = -2;
+               goto report_assoc_result;
+       }
+#endif
+
+report_assoc_result:
+       if (res > 0) {
+               rtw_buf_update(&pmlmepriv->assoc_rsp, &pmlmepriv->assoc_rsp_len, pframe, pkt_len);
+       } else {
+               rtw_buf_free(&pmlmepriv->assoc_rsp, &pmlmepriv->assoc_rsp_len);
+       }
+
+       report_join_res(padapter, res);
+       return _SUCCESS;
+}
+
+unsigned int OnDeAuth(_adapter *padapter, union recv_frame *precv_frame)
+{
+       unsigned short  reason;
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       u8 *pframe = precv_frame->u.hdr.rx_data;
+#ifdef CONFIG_P2P
+       struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
+#endif //CONFIG_P2P
+
+       //check A3
+       if (!(_rtw_memcmp(GetAddr3Ptr(pframe), get_my_bssid(&pmlmeinfo->network), ETH_ALEN)))
+               return _SUCCESS;
+
+#ifdef CONFIG_P2P
+       if ( pwdinfo->rx_invitereq_info.scan_op_ch_only )
+       {
+               _cancel_timer_ex( &pwdinfo->reset_ch_sitesurvey );
+               _set_timer( &pwdinfo->reset_ch_sitesurvey, 10 );
+       }
+#endif //CONFIG_P2P
+
+       reason = le16_to_cpu(*(unsigned short *)(pframe + WLAN_HDR_A3_LEN));
+
+       DBG_871X("%s Reason code(%d)\n", __FUNCTION__,reason);
+
+#ifdef CONFIG_AP_MODE
+       if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
+       {
+               _irqL irqL;
+               struct sta_info *psta;
+               struct sta_priv *pstapriv = &padapter->stapriv;
+
+               //_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
+               //rtw_free_stainfo(padapter, psta);
+               //_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
+
+               DBG_871X("%s, STA:" MAC_FMT "\n", __FUNCTION__, MAC_ARG(GetAddr2Ptr(pframe)));
+
+               psta = rtw_get_stainfo(pstapriv, GetAddr2Ptr(pframe));
+               if(psta)
+               {
+                       u8 updated;
+
+                       _enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+                       if(rtw_is_list_empty(&psta->asoc_list)==_FALSE)
+                       {
+                               rtw_list_delete(&psta->asoc_list);
+                               pstapriv->asoc_list_cnt--;
+                               updated = ap_free_sta(padapter, psta, _FALSE, reason);
+
+                       }
+                       _exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+
+                       associated_clients_update(padapter, updated);
+               }
+
+
+               return _SUCCESS;
+       }
+       else
+#endif
+       {
+               int     ignore_received_deauth = 0;
+
+               //      Commented by Albert 20130604
+               //      Before sending the auth frame to start the STA/GC mode connection with AP/GO,
+               //      we will send the deauth first.
+               //      However, the Win8.1 with BRCM Wi-Fi will send the deauth with reason code 6 to us after receieving our deauth.
+               //      Added the following code to avoid this case.
+               if ( ( pmlmeinfo->state & WIFI_FW_AUTH_STATE ) ||
+                       ( pmlmeinfo->state & WIFI_FW_ASSOC_STATE ) )
+               {
+                       if ( reason == WLAN_REASON_CLASS2_FRAME_FROM_NONAUTH_STA )
+                       {
+                               ignore_received_deauth = 1;
+                       } else if (WLAN_REASON_PREV_AUTH_NOT_VALID == reason) {
+                               // TODO: 802.11r
+                               ignore_received_deauth = 1;
+                       }
+               }
+
+               DBG_871X("%s, STA:" MAC_FMT ", ignore = %d\n", __FUNCTION__, MAC_ARG(GetAddr3Ptr(pframe)), ignore_received_deauth);
+               if ( 0 == ignore_received_deauth )
+               {
+                       receive_disconnect(padapter, GetAddr3Ptr(pframe) ,reason);
+               }
+       }
+       pmlmepriv->LinkDetectInfo.bBusyTraffic = _FALSE;
+       return _SUCCESS;
+
+}
+
+unsigned int OnDisassoc(_adapter *padapter, union recv_frame *precv_frame)
+{
+       unsigned short  reason;
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       u8 *pframe = precv_frame->u.hdr.rx_data;
+#ifdef CONFIG_P2P
+       struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
+#endif //CONFIG_P2P
+
+       //check A3
+       if (!(_rtw_memcmp(GetAddr3Ptr(pframe), get_my_bssid(&pmlmeinfo->network), ETH_ALEN)))
+               return _SUCCESS;
+
+#ifdef CONFIG_P2P
+       if ( pwdinfo->rx_invitereq_info.scan_op_ch_only )
+       {
+               _cancel_timer_ex( &pwdinfo->reset_ch_sitesurvey );
+               _set_timer( &pwdinfo->reset_ch_sitesurvey, 10 );
+       }
+#endif //CONFIG_P2P
+
+       reason = le16_to_cpu(*(unsigned short *)(pframe + WLAN_HDR_A3_LEN));
+
+        DBG_871X("%s Reason code(%d)\n", __FUNCTION__,reason);
+
+#ifdef CONFIG_AP_MODE
+       if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
+       {
+               _irqL irqL;
+               struct sta_info *psta;
+               struct sta_priv *pstapriv = &padapter->stapriv;
+
+               //_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
+               //rtw_free_stainfo(padapter, psta);
+               //_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
+
+               DBG_871X("%s, STA:" MAC_FMT "\n", __FUNCTION__, MAC_ARG(GetAddr2Ptr(pframe)));
+
+               psta = rtw_get_stainfo(pstapriv, GetAddr2Ptr(pframe));
+               if(psta)
+               {
+                       u8 updated;
+
+                       _enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+                       if(rtw_is_list_empty(&psta->asoc_list)==_FALSE)
+                       {
+                               rtw_list_delete(&psta->asoc_list);
+                               pstapriv->asoc_list_cnt--;
+                               updated = ap_free_sta(padapter, psta, _FALSE, reason);
+
+                       }
+                       _exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+
+                       associated_clients_update(padapter, updated);
+               }
+
+               return _SUCCESS;
+       }
+       else
+#endif
+       {
+               DBG_871X("%s, STA:" MAC_FMT "\n", __FUNCTION__, MAC_ARG(GetAddr3Ptr(pframe)));
+
+               receive_disconnect(padapter, GetAddr3Ptr(pframe), reason);
+       }
+       pmlmepriv->LinkDetectInfo.bBusyTraffic = _FALSE;
+       return _SUCCESS;
+
+}
+
+unsigned int OnAtim(_adapter *padapter, union recv_frame *precv_frame)
+{
+       DBG_871X("%s\n", __FUNCTION__);
+       return _SUCCESS;
+}
+
+unsigned int on_action_spct_ch_switch(_adapter *padapter, struct sta_info *psta, u8 *ies, uint ies_len)
+{
+       unsigned int ret = _FAIL;
+       struct mlme_ext_priv *mlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(mlmeext->mlmext_info);
+
+       if (!(pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS)) {
+               ret = _SUCCESS;
+               goto exit;
+       }
+
+       if ((pmlmeinfo->state & 0x03) == WIFI_FW_STATION_STATE) {
+
+               int ch_switch_mode = -1, ch = -1, ch_switch_cnt = -1;
+               int ch_offset = -1;
+               u8 bwmode;
+               struct ieee80211_info_element *ie;
+
+               DBG_871X(FUNC_NDEV_FMT" from "MAC_FMT"\n",
+                       FUNC_NDEV_ARG(padapter->pnetdev), MAC_ARG(psta->hwaddr));
+
+               for_each_ie(ie, ies, ies_len) {
+                       if (ie->id == WLAN_EID_CHANNEL_SWITCH) {
+                               ch_switch_mode = ie->data[0];
+                               ch = ie->data[1];
+                               ch_switch_cnt = ie->data[2];
+                               DBG_871X("ch_switch_mode:%d, ch:%d, ch_switch_cnt:%d\n",
+                                       ch_switch_mode, ch, ch_switch_cnt);
+                       }
+                       else if (ie->id == WLAN_EID_SECONDARY_CHANNEL_OFFSET) {
+                               ch_offset = secondary_ch_offset_to_hal_ch_offset(ie->data[0]);
+                               DBG_871X("ch_offset:%d\n", ch_offset);
+                       }
+               }
+
+               if (ch == -1)
+                       return _SUCCESS;
+
+               if (ch_offset == -1)
+                       bwmode = mlmeext->cur_bwmode;
+               else
+                       bwmode = (ch_offset == HAL_PRIME_CHNL_OFFSET_DONT_CARE) ?
+                               HT_CHANNEL_WIDTH_20 : HT_CHANNEL_WIDTH_40;
+
+               ch_offset = (ch_offset == -1) ? mlmeext->cur_ch_offset : ch_offset;
+
+               /* todo:
+                * 1. the decision of channel switching
+                * 2. things after channel switching
+                */
+
+               ret = rtw_set_ch_cmd(padapter, ch, bwmode, ch_offset, _TRUE);
+       }
+
+exit:
+       return ret;
+}
+
+unsigned int on_action_spct(_adapter *padapter, union recv_frame *precv_frame)
+{
+       unsigned int ret = _FAIL;
+       struct sta_info *psta = NULL;
+       struct sta_priv *pstapriv = &padapter->stapriv;
+       u8 *pframe = precv_frame->u.hdr.rx_data;
+       uint frame_len = precv_frame->u.hdr.len;
+       u8 *frame_body = (u8 *)(pframe + sizeof(struct rtw_ieee80211_hdr_3addr));
+       u8 category;
+       u8 action;
+
+       DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(padapter->pnetdev));
+
+       psta = rtw_get_stainfo(pstapriv, GetAddr2Ptr(pframe));
+
+       if (!psta)
+               goto exit;
+
+       category = frame_body[0];
+       if(category != RTW_WLAN_CATEGORY_SPECTRUM_MGMT)
+               goto exit;
+
+       action = frame_body[1];
+       switch (action) {
+       case RTW_WLAN_ACTION_SPCT_MSR_REQ:
+       case RTW_WLAN_ACTION_SPCT_MSR_RPRT:
+       case RTW_WLAN_ACTION_SPCT_TPC_REQ:
+       case RTW_WLAN_ACTION_SPCT_TPC_RPRT:
+               break;
+       case RTW_WLAN_ACTION_SPCT_CHL_SWITCH:
+               #ifdef CONFIG_SPCT_CH_SWITCH
+               ret = on_action_spct_ch_switch(padapter, psta, &frame_body[2],
+                       frame_len-(frame_body-pframe)-2);
+               #endif
+               break;
+       default:
+               break;
+       }
+
+exit:
+       return ret;
+}
+
+unsigned int OnAction_qos(_adapter *padapter, union recv_frame *precv_frame)
+{
+       return _SUCCESS;
+}
+
+unsigned int OnAction_dls(_adapter *padapter, union recv_frame *precv_frame)
+{
+       return _SUCCESS;
+}
+
+unsigned int OnAction_back(_adapter *padapter, union recv_frame *precv_frame)
+{
+       u8 *addr;
+       struct sta_info *psta=NULL;
+       struct recv_reorder_ctrl *preorder_ctrl;
+       unsigned char           *frame_body;
+       unsigned char           category, action;
+       unsigned short  tid, status, reason_code = 0;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       u8 *pframe = precv_frame->u.hdr.rx_data;
+       struct sta_priv *pstapriv = &padapter->stapriv;
+
+       //check RA matches or not
+       if (!_rtw_memcmp(myid(&(padapter->eeprompriv)), GetAddr1Ptr(pframe), ETH_ALEN))//for if1, sta/ap mode
+               return _SUCCESS;
+
+/*
+       //check A1 matches or not
+       if (!_rtw_memcmp(myid(&(padapter->eeprompriv)), get_da(pframe), ETH_ALEN))
+               return _SUCCESS;
+*/
+       DBG_871X("%s\n", __FUNCTION__);
+
+       if((pmlmeinfo->state&0x03) != WIFI_FW_AP_STATE)
+               if (!(pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS))
+                       return _SUCCESS;
+
+       addr = GetAddr2Ptr(pframe);
+       psta = rtw_get_stainfo(pstapriv, addr);
+
+       if(psta==NULL)
+               return _SUCCESS;
+
+       frame_body = (unsigned char *)(pframe + sizeof(struct rtw_ieee80211_hdr_3addr));
+
+       category = frame_body[0];
+       if (category == RTW_WLAN_CATEGORY_BACK)// representing Block Ack
+       {
+#ifdef CONFIG_TDLS
+               if((psta->tdls_sta_state & TDLS_LINKED_STATE) &&
+                       (psta->htpriv.ht_option==_TRUE) &&
+                       (psta->htpriv.ampdu_enable==_TRUE) )
+               {
+                       //do nothing; just don't want to return _SUCCESS;
+               }
+               else
+#endif //CONFIG_TDLS
+               if (!pmlmeinfo->HT_enable)
+               {
+                       return _SUCCESS;
+               }
+
+               action = frame_body[1];
+               DBG_871X("%s, action=%d\n", __FUNCTION__, action);
+               switch (action)
+               {
+                       case RTW_WLAN_ACTION_ADDBA_REQ: //ADDBA request
+
+                               _rtw_memcpy(&(pmlmeinfo->ADDBA_req), &(frame_body[2]), sizeof(struct ADDBA_request));
+                               //process_addba_req(padapter, (u8*)&(pmlmeinfo->ADDBA_req), GetAddr3Ptr(pframe));
+                               process_addba_req(padapter, (u8*)&(pmlmeinfo->ADDBA_req), addr);
+
+                               if(pmlmeinfo->bAcceptAddbaReq == _TRUE)
+                               {
+                                       issue_action_BA(padapter, addr, RTW_WLAN_ACTION_ADDBA_RESP, 0);
+                               }
+                               else
+                               {
+                                       issue_action_BA(padapter, addr, RTW_WLAN_ACTION_ADDBA_RESP, 37);//reject ADDBA Req
+                               }
+
+                               break;
+
+                       case RTW_WLAN_ACTION_ADDBA_RESP: //ADDBA response
+
+                               //status = frame_body[3] | (frame_body[4] << 8); //endian issue
+                               status = RTW_GET_LE16(&frame_body[3]);
+                               tid = ((frame_body[5] >> 2) & 0x7);
+
+                               if (status == 0)
+                               {       //successful
+                                       DBG_871X("agg_enable for TID=%d\n", tid);
+                                       psta->htpriv.agg_enable_bitmap |= 1 << tid;
+                                       psta->htpriv.candidate_tid_bitmap &= ~BIT(tid);
+                               }
+                               else
+                               {
+                                       psta->htpriv.agg_enable_bitmap &= ~BIT(tid);
+                               }
+
+                               //DBG_871X("marc: ADDBA RSP: %x\n", pmlmeinfo->agg_enable_bitmap);
+                               break;
+
+                       case RTW_WLAN_ACTION_DELBA: //DELBA
+                               if ((frame_body[3] & BIT(3)) == 0)
+                               {
+                                       psta->htpriv.agg_enable_bitmap &= ~(1 << ((frame_body[3] >> 4) & 0xf));
+                                       psta->htpriv.candidate_tid_bitmap &= ~(1 << ((frame_body[3] >> 4) & 0xf));
+
+                                       //reason_code = frame_body[4] | (frame_body[5] << 8);
+                                       reason_code = RTW_GET_LE16(&frame_body[4]);
+                               }
+                               else if((frame_body[3] & BIT(3)) == BIT(3))
+                               {
+                                       tid = (frame_body[3] >> 4) & 0x0F;
+
+                                       preorder_ctrl =  &psta->recvreorder_ctrl[tid];
+                                       preorder_ctrl->enable = _FALSE;
+                                       preorder_ctrl->indicate_seq = 0xffff;
+                                       #ifdef DBG_RX_SEQ
+                                       DBG_871X("DBG_RX_SEQ %s:%d indicate_seq:%u \n", __FUNCTION__, __LINE__,
+                                               preorder_ctrl->indicate_seq);
+                                       #endif
+                               }
+
+                               DBG_871X("%s(): DELBA: %x(%x)\n", __FUNCTION__,pmlmeinfo->agg_enable_bitmap, reason_code);
+                               //todo: how to notify the host while receiving DELETE BA
+                               break;
+
+                       default:
+                               break;
+               }
+       }
+
+       return _SUCCESS;
+}
+
+#ifdef CONFIG_P2P
+
+static int get_reg_classes_full_count(struct p2p_channels channel_list) {
+       int cnt = 0;
+       int i;
+
+       for (i = 0; i < channel_list.reg_classes; i++) {
+               cnt += channel_list.reg_class[i].channels;
+       }
+
+       return cnt;
+}
+
+static void get_channel_cnt_24g_5gl_5gh(  struct mlme_ext_priv *pmlmeext, u8* p24g_cnt, u8* p5gl_cnt, u8* p5gh_cnt )
+{
+       int     i = 0;
+
+       *p24g_cnt = 0;
+       *p5gl_cnt = 0;
+       *p5gh_cnt = 0;
+
+       for( i = 0; i < pmlmeext->max_chan_nums; i++ )
+       {
+               if ( pmlmeext->channel_set[ i ].ChannelNum <= 14 )
+               {
+                       (*p24g_cnt)++;
+               }
+               else if ( ( pmlmeext->channel_set[ i ].ChannelNum > 14 ) && ( pmlmeext->channel_set[ i ].ChannelNum <= 48 ) )
+               {
+                       //      Just include the channel 36, 40, 44, 48 channels for 5G low
+                       (*p5gl_cnt)++;
+               }
+               else if ( ( pmlmeext->channel_set[ i ].ChannelNum >= 149 ) && ( pmlmeext->channel_set[ i ].ChannelNum <= 161 ) )
+               {
+                       //      Just include the channel 149, 153, 157, 161 channels for 5G high
+                       (*p5gh_cnt)++;
+               }
+       }
+}
+
+void issue_p2p_GO_request(_adapter *padapter, u8* raddr)
+{
+
+       unsigned char category = RTW_WLAN_CATEGORY_PUBLIC;
+       u8                      action = P2P_PUB_ACTION_ACTION;
+       u32                     p2poui = cpu_to_be32(P2POUI);
+       u8                      oui_subtype = P2P_GO_NEGO_REQ;
+       u8                      wpsie[ 255 ] = { 0x00 }, p2pie[ 255 ] = { 0x00 };
+       u8                      wpsielen = 0, p2pielen = 0, i;
+       u8                      channel_cnt_24g = 0, channel_cnt_5gl = 0, channel_cnt_5gh = 0;
+       u16                     len_channellist_attr = 0;
+#ifdef CONFIG_WFD
+       u32                                     wfdielen = 0;
+#endif //CONFIG_WFD
+
+       struct xmit_frame                       *pmgntframe;
+       struct pkt_attrib                       *pattrib;
+       unsigned char                                   *pframe;
+       struct rtw_ieee80211_hdr        *pwlanhdr;
+       unsigned short                          *fctrl;
+       struct xmit_priv                        *pxmitpriv = &(padapter->xmitpriv);
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       struct wifidirect_info  *pwdinfo = &( padapter->wdinfo);
+
+
+       if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+       {
+               return;
+       }
+
+       DBG_871X( "[%s] In\n", __FUNCTION__ );
+       //update attribute
+       pattrib = &pmgntframe->attrib;
+       update_mgntframe_attrib(padapter, pattrib);
+
+       _rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
+
+       pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+
+       fctrl = &(pwlanhdr->frame_ctl);
+       *(fctrl) = 0;
+
+       _rtw_memcpy(pwlanhdr->addr1, raddr, ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr3, myid(&(padapter->eeprompriv)), ETH_ALEN);
+
+       SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
+       pmlmeext->mgnt_seq++;
+       SetFrameSubType(pframe, WIFI_ACTION);
+
+       pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
+       pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
+
+       pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 4, (unsigned char *) &(p2poui), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(oui_subtype), &(pattrib->pktlen));
+       pwdinfo->negotiation_dialog_token = 1;  //      Initialize the dialog value
+       pframe = rtw_set_fixed_ie(pframe, 1, &pwdinfo->negotiation_dialog_token, &(pattrib->pktlen));
+
+
+
+       //      WPS Section
+       wpsielen = 0;
+       //      WPS OUI
+       *(u32*) ( wpsie ) = cpu_to_be32( WPSOUI );
+       wpsielen += 4;
+
+       //      WPS version
+       //      Type:
+       *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_VER1 );
+       wpsielen += 2;
+
+       //      Length:
+       *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0001 );
+       wpsielen += 2;
+
+       //      Value:
+       wpsie[wpsielen++] = WPS_VERSION_1;      //      Version 1.0
+
+       //      Device Password ID
+       //      Type:
+       *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_DEVICE_PWID );
+       wpsielen += 2;
+
+       //      Length:
+       *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0002 );
+       wpsielen += 2;
+
+       //      Value:
+
+       if ( pwdinfo->ui_got_wps_info == P2P_GOT_WPSINFO_PEER_DISPLAY_PIN )
+       {
+               *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_DPID_USER_SPEC );
+       }
+       else if ( pwdinfo->ui_got_wps_info == P2P_GOT_WPSINFO_SELF_DISPLAY_PIN )
+       {
+               *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_DPID_REGISTRAR_SPEC );
+       }
+       else if ( pwdinfo->ui_got_wps_info == P2P_GOT_WPSINFO_PBC )
+       {
+               *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_DPID_PBC );
+       }
+
+       wpsielen += 2;
+
+       pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, wpsielen, (unsigned char *) wpsie, &pattrib->pktlen );
+
+
+       //      P2P IE Section.
+
+       //      P2P OUI
+       p2pielen = 0;
+       p2pie[ p2pielen++ ] = 0x50;
+       p2pie[ p2pielen++ ] = 0x6F;
+       p2pie[ p2pielen++ ] = 0x9A;
+       p2pie[ p2pielen++ ] = 0x09;     //      WFA P2P v1.0
+
+       //      Commented by Albert 20110306
+       //      According to the P2P Specification, the group negoitation request frame should contain 9 P2P attributes
+       //      1. P2P Capability
+       //      2. Group Owner Intent
+       //      3. Configuration Timeout
+       //      4. Listen Channel
+       //      5. Extended Listen Timing
+       //      6. Intended P2P Interface Address
+       //      7. Channel List
+       //      8. P2P Device Info
+       //      9. Operating Channel
+
+
+       //      P2P Capability
+       //      Type:
+       p2pie[ p2pielen++ ] = P2P_ATTR_CAPABILITY;
+
+       //      Length:
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0002 );
+       p2pielen += 2;
+
+       //      Value:
+       //      Device Capability Bitmap, 1 byte
+       p2pie[ p2pielen++ ] = DMP_P2P_DEVCAP_SUPPORT;
+
+       //      Group Capability Bitmap, 1 byte
+       if ( pwdinfo->persistent_supported )
+       {
+               p2pie[ p2pielen++ ] = P2P_GRPCAP_CROSS_CONN | P2P_GRPCAP_PERSISTENT_GROUP;
+       }
+       else
+       {
+               p2pie[ p2pielen++ ] = P2P_GRPCAP_CROSS_CONN;
+       }
+
+
+       //      Group Owner Intent
+       //      Type:
+       p2pie[ p2pielen++ ] = P2P_ATTR_GO_INTENT;
+
+       //      Length:
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0001 );
+       p2pielen += 2;
+
+       //      Value:
+       //      Todo the tie breaker bit.
+       p2pie[ p2pielen++ ] = ( ( pwdinfo->intent << 1 ) | BIT(0) );
+
+       //      Configuration Timeout
+       //      Type:
+       p2pie[ p2pielen++ ] = P2P_ATTR_CONF_TIMEOUT;
+
+       //      Length:
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0002 );
+       p2pielen += 2;
+
+       //      Value:
+       p2pie[ p2pielen++ ] = 200;      //      2 seconds needed to be the P2P GO
+       p2pie[ p2pielen++ ] = 200;      //      2 seconds needed to be the P2P Client
+
+
+       //      Listen Channel
+       //      Type:
+       p2pie[ p2pielen++ ] = P2P_ATTR_LISTEN_CH;
+
+       //      Length:
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0005 );
+       p2pielen += 2;
+
+       //      Value:
+       //      Country String
+       p2pie[ p2pielen++ ] = 'X';
+       p2pie[ p2pielen++ ] = 'X';
+
+       //      The third byte should be set to 0x04.
+       //      Described in the "Operating Channel Attribute" section.
+       p2pie[ p2pielen++ ] = 0x04;
+
+       //      Operating Class
+       p2pie[ p2pielen++ ] = 0x51;     //      Copy from SD7
+
+       //      Channel Number
+       p2pie[ p2pielen++ ] = pwdinfo->listen_channel;  //      listening channel number
+
+
+       //      Extended Listen Timing ATTR
+       //      Type:
+       p2pie[ p2pielen++ ] = P2P_ATTR_EX_LISTEN_TIMING;
+
+       //      Length:
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0004 );
+       p2pielen += 2;
+
+       //      Value:
+       //      Availability Period
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0xFFFF );
+       p2pielen += 2;
+
+       //      Availability Interval
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0xFFFF );
+       p2pielen += 2;
+
+
+       //      Intended P2P Interface Address
+       //      Type:
+       p2pie[ p2pielen++ ] = P2P_ATTR_INTENTED_IF_ADDR;
+
+       //      Length:
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( ETH_ALEN );
+       p2pielen += 2;
+
+       //      Value:
+       _rtw_memcpy( p2pie + p2pielen, myid( &padapter->eeprompriv ), ETH_ALEN );
+       p2pielen += ETH_ALEN;
+
+
+       //      Channel List
+       //      Type:
+       p2pie[ p2pielen++ ] = P2P_ATTR_CH_LIST;
+
+       // Length:
+       // Country String(3)
+       // + ( Operating Class (1) + Number of Channels(1) ) * Operation Classes (?)
+       // + number of channels in all classes
+       len_channellist_attr = 3
+          + (1 + 1) * (u16)(pmlmeext->channel_list.reg_classes)
+          + get_reg_classes_full_count(pmlmeext->channel_list);
+
+#ifdef CONFIG_CONCURRENT_MODE
+       if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
+       {
+               *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 5 + 1 );
+       }
+       else
+       {
+               *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( len_channellist_attr );
+       }
+#else
+
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( len_channellist_attr );
+
+#endif
+       p2pielen += 2;
+
+       //      Value:
+       //      Country String
+       p2pie[ p2pielen++ ] = 'X';
+       p2pie[ p2pielen++ ] = 'X';
+
+       //      The third byte should be set to 0x04.
+       //      Described in the "Operating Channel Attribute" section.
+       p2pie[ p2pielen++ ] = 0x04;
+
+       //      Channel Entry List
+
+#ifdef CONFIG_CONCURRENT_MODE
+       if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
+       {
+               _adapter *pbuddy_adapter = padapter->pbuddy_adapter;
+               struct mlme_ext_priv    *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
+
+               //      Operating Class
+               if ( pbuddy_mlmeext->cur_channel > 14 )
+               {
+                       if ( pbuddy_mlmeext->cur_channel >= 149 )
+                       {
+                               p2pie[ p2pielen++ ] = 0x7c;
+                       }
+                       else
+                       {
+                               p2pie[ p2pielen++ ] = 0x73;
+                       }
+               }
+               else
+               {
+                       p2pie[ p2pielen++ ] = 0x51;
+               }
+
+               //      Number of Channels
+               //      Just support 1 channel and this channel is AP's channel
+               p2pie[ p2pielen++ ] = 1;
+
+               //      Channel List
+               p2pie[ p2pielen++ ] = pbuddy_mlmeext->cur_channel;
+       }
+       else
+       {
+               int i,j;
+               for (j = 0; j < pmlmeext->channel_list.reg_classes; j++) {
+                       //      Operating Class
+                       p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].reg_class;
+
+                       //      Number of Channels
+                       p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].channels;
+
+                       //      Channel List
+                       for (i = 0; i < pmlmeext->channel_list.reg_class[j].channels; i++) {
+                               p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].channel[i];
+                       }
+               }
+       }
+#else // CONFIG_CONCURRENT_MODE
+       {
+               int i,j;
+               for (j = 0; j < pmlmeext->channel_list.reg_classes; j++) {
+                       //      Operating Class
+                       p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].reg_class;
+
+                       //      Number of Channels
+                       p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].channels;
+
+                       //      Channel List
+                       for (i = 0; i < pmlmeext->channel_list.reg_class[j].channels; i++) {
+                               p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].channel[i];
+                       }
+               }
+       }
+#endif // CONFIG_CONCURRENT_MODE
+
+       //      Device Info
+       //      Type:
+       p2pie[ p2pielen++ ] = P2P_ATTR_DEVICE_INFO;
+
+       //      Length:
+       //      21 -> P2P Device Address (6bytes) + Config Methods (2bytes) + Primary Device Type (8bytes)
+       //      + NumofSecondDevType (1byte) + WPS Device Name ID field (2bytes) + WPS Device Name Len field (2bytes)
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 21 + pwdinfo->device_name_len );
+       p2pielen += 2;
+
+       //      Value:
+       //      P2P Device Address
+       _rtw_memcpy( p2pie + p2pielen, myid( &padapter->eeprompriv ), ETH_ALEN );
+       p2pielen += ETH_ALEN;
+
+       //      Config Method
+       //      This field should be big endian. Noted by P2P specification.
+
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_be16( pwdinfo->supported_wps_cm );
+
+       p2pielen += 2;
+
+       //      Primary Device Type
+       //      Category ID
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_CID_MULIT_MEDIA );
+       p2pielen += 2;
+
+       //      OUI
+       *(u32*) ( p2pie + p2pielen ) = cpu_to_be32( WPSOUI );
+       p2pielen += 4;
+
+       //      Sub Category ID
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_SCID_MEDIA_SERVER );
+       p2pielen += 2;
+
+       //      Number of Secondary Device Types
+       p2pie[ p2pielen++ ] = 0x00;     //      No Secondary Device Type List
+
+       //      Device Name
+       //      Type:
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_ATTR_DEVICE_NAME );
+       p2pielen += 2;
+
+       //      Length:
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_be16( pwdinfo->device_name_len );
+       p2pielen += 2;
+
+       //      Value:
+       _rtw_memcpy( p2pie + p2pielen, pwdinfo->device_name , pwdinfo->device_name_len );
+       p2pielen += pwdinfo->device_name_len;
+
+
+       //      Operating Channel
+       //      Type:
+       p2pie[ p2pielen++ ] = P2P_ATTR_OPERATING_CH;
+
+       //      Length:
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0005 );
+       p2pielen += 2;
+
+       //      Value:
+       //      Country String
+       p2pie[ p2pielen++ ] = 'X';
+       p2pie[ p2pielen++ ] = 'X';
+
+       //      The third byte should be set to 0x04.
+       //      Described in the "Operating Channel Attribute" section.
+       p2pie[ p2pielen++ ] = 0x04;
+
+       //      Operating Class
+       if ( pwdinfo->operating_channel <= 14 )
+       {
+               //      Operating Class
+               p2pie[ p2pielen++ ] = 0x51;
+       }
+       else if ( ( pwdinfo->operating_channel >= 36 ) && ( pwdinfo->operating_channel <= 48 ) )
+       {
+               //      Operating Class
+               p2pie[ p2pielen++ ] = 0x73;
+       }
+       else
+       {
+               //      Operating Class
+               p2pie[ p2pielen++ ] = 0x7c;
+       }
+
+       //      Channel Number
+       p2pie[ p2pielen++ ] = pwdinfo->operating_channel;       //      operating channel number
+
+       pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, p2pielen, (unsigned char *) p2pie, &pattrib->pktlen );
+
+#ifdef CONFIG_WFD
+       wfdielen = build_nego_req_wfd_ie(pwdinfo, pframe);
+       pframe += wfdielen;
+       pattrib->pktlen += wfdielen;
+#endif //CONFIG_WFD
+
+       pattrib->last_txcmdsz = pattrib->pktlen;
+
+       dump_mgntframe(padapter, pmgntframe);
+
+       return;
+
+}
+
+
+void issue_p2p_GO_response(_adapter *padapter, u8* raddr, u8* frame_body,uint len, u8 result)
+{
+
+       unsigned char category = RTW_WLAN_CATEGORY_PUBLIC;
+       u8                      action = P2P_PUB_ACTION_ACTION;
+       u32                     p2poui = cpu_to_be32(P2POUI);
+       u8                      oui_subtype = P2P_GO_NEGO_RESP;
+       u8                      wpsie[ 255 ] = { 0x00 }, p2pie[ 255 ] = { 0x00 };
+       u8                      p2pielen = 0, i;
+       uint                    wpsielen = 0;
+       u16                     wps_devicepassword_id = 0x0000;
+       uint                    wps_devicepassword_id_len = 0;
+       u8                      channel_cnt_24g = 0, channel_cnt_5gl = 0, channel_cnt_5gh;
+       u16                     len_channellist_attr = 0;
+
+       struct xmit_frame                       *pmgntframe;
+       struct pkt_attrib                       *pattrib;
+       unsigned char                                   *pframe;
+       struct rtw_ieee80211_hdr        *pwlanhdr;
+       unsigned short                          *fctrl;
+       struct xmit_priv                        *pxmitpriv = &(padapter->xmitpriv);
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       struct wifidirect_info  *pwdinfo = &( padapter->wdinfo);
+
+#ifdef CONFIG_WFD
+       u32                                     wfdielen = 0;
+#endif //CONFIG_WFD
+
+       if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+       {
+               return;
+       }
+
+       DBG_871X( "[%s] In, result = %d\n", __FUNCTION__,  result );
+       //update attribute
+       pattrib = &pmgntframe->attrib;
+       update_mgntframe_attrib(padapter, pattrib);
+
+       _rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
+
+       pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+
+       fctrl = &(pwlanhdr->frame_ctl);
+       *(fctrl) = 0;
+
+       _rtw_memcpy(pwlanhdr->addr1, raddr, ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr3, myid(&(padapter->eeprompriv)), ETH_ALEN);
+
+       SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
+       pmlmeext->mgnt_seq++;
+       SetFrameSubType(pframe, WIFI_ACTION);
+
+       pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
+       pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
+
+       pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 4, (unsigned char *) &(p2poui), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(oui_subtype), &(pattrib->pktlen));
+       pwdinfo->negotiation_dialog_token = frame_body[7];      //      The Dialog Token of provisioning discovery request frame.
+       pframe = rtw_set_fixed_ie(pframe, 1, &(pwdinfo->negotiation_dialog_token), &(pattrib->pktlen));
+
+       //      Commented by Albert 20110328
+       //      Try to get the device password ID from the WPS IE of group negotiation request frame
+       //      WiFi Direct test plan 5.1.15
+       rtw_get_wps_ie( frame_body + _PUBLIC_ACTION_IE_OFFSET_, len - _PUBLIC_ACTION_IE_OFFSET_, wpsie, &wpsielen);
+       rtw_get_wps_attr_content( wpsie, wpsielen, WPS_ATTR_DEVICE_PWID, (u8*) &wps_devicepassword_id, &wps_devicepassword_id_len);
+       wps_devicepassword_id = be16_to_cpu( wps_devicepassword_id );
+
+       _rtw_memset( wpsie, 0x00, 255 );
+       wpsielen = 0;
+
+       //      WPS Section
+       wpsielen = 0;
+       //      WPS OUI
+       *(u32*) ( wpsie ) = cpu_to_be32( WPSOUI );
+       wpsielen += 4;
+
+       //      WPS version
+       //      Type:
+       *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_VER1 );
+       wpsielen += 2;
+
+       //      Length:
+       *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0001 );
+       wpsielen += 2;
+
+       //      Value:
+       wpsie[wpsielen++] = WPS_VERSION_1;      //      Version 1.0
+
+       //      Device Password ID
+       //      Type:
+       *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_DEVICE_PWID );
+       wpsielen += 2;
+
+       //      Length:
+       *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0002 );
+       wpsielen += 2;
+
+       //      Value:
+       if ( wps_devicepassword_id == WPS_DPID_USER_SPEC )
+       {
+               *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_DPID_REGISTRAR_SPEC );
+       }
+       else if ( wps_devicepassword_id == WPS_DPID_REGISTRAR_SPEC )
+       {
+               *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_DPID_USER_SPEC );
+       }
+       else
+       {
+               *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_DPID_PBC );
+       }
+       wpsielen += 2;
+
+       //      Commented by Kurt 20120113
+       //      If some device wants to do p2p handshake without sending prov_disc_req
+       //      We have to get peer_req_cm from here.
+       if(_rtw_memcmp( pwdinfo->rx_prov_disc_info.strconfig_method_desc_of_prov_disc_req, "000", 3) )
+       {
+               if ( wps_devicepassword_id == WPS_DPID_USER_SPEC )
+               {
+                       _rtw_memcpy( pwdinfo->rx_prov_disc_info.strconfig_method_desc_of_prov_disc_req, "dis", 3 );
+               }
+               else if ( wps_devicepassword_id == WPS_DPID_REGISTRAR_SPEC )
+               {
+                       _rtw_memcpy( pwdinfo->rx_prov_disc_info.strconfig_method_desc_of_prov_disc_req, "pad", 3 );
+               }
+               else
+               {
+                       _rtw_memcpy( pwdinfo->rx_prov_disc_info.strconfig_method_desc_of_prov_disc_req, "pbc", 3 );
+               }
+       }
+
+       pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, wpsielen, (unsigned char *) wpsie, &pattrib->pktlen );
+
+
+       //      P2P IE Section.
+
+       //      P2P OUI
+       p2pielen = 0;
+       p2pie[ p2pielen++ ] = 0x50;
+       p2pie[ p2pielen++ ] = 0x6F;
+       p2pie[ p2pielen++ ] = 0x9A;
+       p2pie[ p2pielen++ ] = 0x09;     //      WFA P2P v1.0
+
+       //      Commented by Albert 20100908
+       //      According to the P2P Specification, the group negoitation response frame should contain 9 P2P attributes
+       //      1. Status
+       //      2. P2P Capability
+       //      3. Group Owner Intent
+       //      4. Configuration Timeout
+       //      5. Operating Channel
+       //      6. Intended P2P Interface Address
+       //      7. Channel List
+       //      8. Device Info
+       //      9. Group ID     ( Only GO )
+
+
+       //      ToDo:
+
+       //      P2P Status
+       //      Type:
+       p2pie[ p2pielen++ ] = P2P_ATTR_STATUS;
+
+       //      Length:
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0001 );
+       p2pielen += 2;
+
+       //      Value:
+       p2pie[ p2pielen++ ] = result;
+
+       //      P2P Capability
+       //      Type:
+       p2pie[ p2pielen++ ] = P2P_ATTR_CAPABILITY;
+
+       //      Length:
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0002 );
+       p2pielen += 2;
+
+       //      Value:
+       //      Device Capability Bitmap, 1 byte
+
+       if ( rtw_p2p_chk_role(pwdinfo, P2P_ROLE_CLIENT) )
+       {
+               //      Commented by Albert 2011/03/08
+               //      According to the P2P specification
+               //      if the sending device will be client, the P2P Capability should be reserved of group negotation response frame
+               p2pie[ p2pielen++ ] = 0;
+       }
+       else
+       {
+               //      Be group owner or meet the error case
+               p2pie[ p2pielen++ ] = DMP_P2P_DEVCAP_SUPPORT;
+       }
+
+       //      Group Capability Bitmap, 1 byte
+       if ( pwdinfo->persistent_supported )
+       {
+               p2pie[ p2pielen++ ] = P2P_GRPCAP_CROSS_CONN | P2P_GRPCAP_PERSISTENT_GROUP;
+       }
+       else
+       {
+               p2pie[ p2pielen++ ] = P2P_GRPCAP_CROSS_CONN;
+       }
+
+       //      Group Owner Intent
+       //      Type:
+       p2pie[ p2pielen++ ] = P2P_ATTR_GO_INTENT;
+
+       //      Length:
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0001 );
+       p2pielen += 2;
+
+       //      Value:
+       if ( pwdinfo->peer_intent & 0x01 )
+       {
+               //      Peer's tie breaker bit is 1, our tie breaker bit should be 0
+               p2pie[ p2pielen++ ] = ( pwdinfo->intent << 1 );
+       }
+       else
+       {
+               //      Peer's tie breaker bit is 0, our tie breaker bit should be 1
+               p2pie[ p2pielen++ ] = ( ( pwdinfo->intent << 1 ) | BIT(0) );
+       }
+
+
+       //      Configuration Timeout
+       //      Type:
+       p2pie[ p2pielen++ ] = P2P_ATTR_CONF_TIMEOUT;
+
+       //      Length:
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0002 );
+       p2pielen += 2;
+
+       //      Value:
+       p2pie[ p2pielen++ ] = 200;      //      2 seconds needed to be the P2P GO
+       p2pie[ p2pielen++ ] = 200;      //      2 seconds needed to be the P2P Client
+
+       //      Operating Channel
+       //      Type:
+       p2pie[ p2pielen++ ] = P2P_ATTR_OPERATING_CH;
+
+       //      Length:
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0005 );
+       p2pielen += 2;
+
+       //      Value:
+       //      Country String
+       p2pie[ p2pielen++ ] = 'X';
+       p2pie[ p2pielen++ ] = 'X';
+
+       //      The third byte should be set to 0x04.
+       //      Described in the "Operating Channel Attribute" section.
+       p2pie[ p2pielen++ ] = 0x04;
+
+       //      Operating Class
+       if ( pwdinfo->operating_channel <= 14 )
+       {
+               //      Operating Class
+               p2pie[ p2pielen++ ] = 0x51;
+       }
+       else if ( ( pwdinfo->operating_channel >= 36 ) && ( pwdinfo->operating_channel <= 48 ) )
+       {
+               //      Operating Class
+               p2pie[ p2pielen++ ] = 0x73;
+       }
+       else
+       {
+               //      Operating Class
+               p2pie[ p2pielen++ ] = 0x7c;
+       }
+
+       //      Channel Number
+       p2pie[ p2pielen++ ] = pwdinfo->operating_channel;       //      operating channel number
+
+       //      Intended P2P Interface Address
+       //      Type:
+       p2pie[ p2pielen++ ] = P2P_ATTR_INTENTED_IF_ADDR;
+
+       //      Length:
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( ETH_ALEN );
+       p2pielen += 2;
+
+       //      Value:
+       _rtw_memcpy( p2pie + p2pielen, myid( &padapter->eeprompriv ), ETH_ALEN );
+       p2pielen += ETH_ALEN;
+
+       //      Channel List
+       //      Type:
+       p2pie[ p2pielen++ ] = P2P_ATTR_CH_LIST;
+
+       // Country String(3)
+       // + ( Operating Class (1) + Number of Channels(1) ) * Operation Classes (?)
+       // + number of channels in all classes
+       len_channellist_attr = 3
+          + (1 + 1) * (u16)pmlmeext->channel_list.reg_classes
+          + get_reg_classes_full_count(pmlmeext->channel_list);
+
+#ifdef CONFIG_CONCURRENT_MODE
+       if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
+       {
+               *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 5 + 1 );
+       }
+       else
+       {
+               *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( len_channellist_attr );
+       }
+#else
+
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( len_channellist_attr );
+
+ #endif
+       p2pielen += 2;
+
+       //      Value:
+       //      Country String
+       p2pie[ p2pielen++ ] = 'X';
+       p2pie[ p2pielen++ ] = 'X';
+
+       //      The third byte should be set to 0x04.
+       //      Described in the "Operating Channel Attribute" section.
+       p2pie[ p2pielen++ ] = 0x04;
+
+       //      Channel Entry List
+
+#ifdef CONFIG_CONCURRENT_MODE
+       if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
+       {
+               _adapter *pbuddy_adapter = padapter->pbuddy_adapter;
+               struct mlme_ext_priv    *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
+
+               //      Operating Class
+               if ( pbuddy_mlmeext->cur_channel > 14 )
+               {
+                       if ( pbuddy_mlmeext->cur_channel >= 149 )
+                       {
+                               p2pie[ p2pielen++ ] = 0x7c;
+                       }
+                       else
+                       {
+                               p2pie[ p2pielen++ ] = 0x73;
+                       }
+               }
+               else
+               {
+                       p2pie[ p2pielen++ ] = 0x51;
+               }
+
+               //      Number of Channels
+               //      Just support 1 channel and this channel is AP's channel
+               p2pie[ p2pielen++ ] = 1;
+
+               //      Channel List
+               p2pie[ p2pielen++ ] = pbuddy_mlmeext->cur_channel;
+       }
+       else
+       {
+               int i, j;
+               for (j = 0; j < pmlmeext->channel_list.reg_classes; j++) {
+                       //      Operating Class
+                       p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].reg_class;
+
+                       //      Number of Channels
+                       p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].channels;
+
+                       //      Channel List
+                       for (i = 0; i < pmlmeext->channel_list.reg_class[j].channels; i++) {
+                               p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].channel[i];
+                       }
+               }
+       }
+#else // CONFIG_CONCURRENT_MODE
+       {
+               int i, j;
+               for (j = 0; j < pmlmeext->channel_list.reg_classes; j++) {
+                       //      Operating Class
+                       p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].reg_class;
+
+                       //      Number of Channels
+                       p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].channels;
+
+                       //      Channel List
+                       for (i = 0; i < pmlmeext->channel_list.reg_class[j].channels; i++) {
+                               p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].channel[i];
+                       }
+               }
+       }
+#endif // CONFIG_CONCURRENT_MODE
+
+       //      Device Info
+       //      Type:
+       p2pie[ p2pielen++ ] = P2P_ATTR_DEVICE_INFO;
+
+       //      Length:
+       //      21 -> P2P Device Address (6bytes) + Config Methods (2bytes) + Primary Device Type (8bytes)
+       //      + NumofSecondDevType (1byte) + WPS Device Name ID field (2bytes) + WPS Device Name Len field (2bytes)
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 21 + pwdinfo->device_name_len );
+       p2pielen += 2;
+
+       //      Value:
+       //      P2P Device Address
+       _rtw_memcpy( p2pie + p2pielen, myid( &padapter->eeprompriv ), ETH_ALEN );
+       p2pielen += ETH_ALEN;
+
+       //      Config Method
+       //      This field should be big endian. Noted by P2P specification.
+
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_be16( pwdinfo->supported_wps_cm );
+
+       p2pielen += 2;
+
+       //      Primary Device Type
+       //      Category ID
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_CID_MULIT_MEDIA );
+       p2pielen += 2;
+
+       //      OUI
+       *(u32*) ( p2pie + p2pielen ) = cpu_to_be32( WPSOUI );
+       p2pielen += 4;
+
+       //      Sub Category ID
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_SCID_MEDIA_SERVER );
+       p2pielen += 2;
+
+       //      Number of Secondary Device Types
+       p2pie[ p2pielen++ ] = 0x00;     //      No Secondary Device Type List
+
+       //      Device Name
+       //      Type:
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_ATTR_DEVICE_NAME );
+       p2pielen += 2;
+
+       //      Length:
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_be16( pwdinfo->device_name_len );
+       p2pielen += 2;
+
+       //      Value:
+       _rtw_memcpy( p2pie + p2pielen, pwdinfo->device_name , pwdinfo->device_name_len );
+       p2pielen += pwdinfo->device_name_len;
+
+       if ( rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO) )
+       {
+               //      Group ID Attribute
+               //      Type:
+               p2pie[ p2pielen++ ] = P2P_ATTR_GROUP_ID;
+
+               //      Length:
+               *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( ETH_ALEN + pwdinfo->nego_ssidlen );
+               p2pielen += 2;
+
+               //      Value:
+               //      p2P Device Address
+               _rtw_memcpy( p2pie + p2pielen , pwdinfo->device_addr, ETH_ALEN );
+               p2pielen += ETH_ALEN;
+
+               //      SSID
+               _rtw_memcpy( p2pie + p2pielen, pwdinfo->nego_ssid, pwdinfo->nego_ssidlen );
+               p2pielen += pwdinfo->nego_ssidlen;
+
+       }
+
+       pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, p2pielen, (unsigned char *) p2pie, &pattrib->pktlen );
+
+#ifdef CONFIG_WFD
+       wfdielen = build_nego_resp_wfd_ie(pwdinfo, pframe);
+       pframe += wfdielen;
+       pattrib->pktlen += wfdielen;
+#endif //CONFIG_WFD
+
+       pattrib->last_txcmdsz = pattrib->pktlen;
+
+       dump_mgntframe(padapter, pmgntframe);
+
+       return;
+
+}
+
+void issue_p2p_GO_confirm(_adapter *padapter, u8* raddr, u8 result)
+{
+
+       unsigned char category = RTW_WLAN_CATEGORY_PUBLIC;
+       u8                      action = P2P_PUB_ACTION_ACTION;
+       u32                     p2poui = cpu_to_be32(P2POUI);
+       u8                      oui_subtype = P2P_GO_NEGO_CONF;
+       u8                      wpsie[ 255 ] = { 0x00 }, p2pie[ 255 ] = { 0x00 };
+       u8                      wpsielen = 0, p2pielen = 0;
+
+       struct xmit_frame                       *pmgntframe;
+       struct pkt_attrib                       *pattrib;
+       unsigned char                                   *pframe;
+       struct rtw_ieee80211_hdr        *pwlanhdr;
+       unsigned short                          *fctrl;
+       struct xmit_priv                        *pxmitpriv = &(padapter->xmitpriv);
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       struct wifidirect_info  *pwdinfo = &( padapter->wdinfo);
+#ifdef CONFIG_WFD
+       u32                                     wfdielen = 0;
+#endif //CONFIG_WFD
+
+       if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+       {
+               return;
+       }
+
+       DBG_871X( "[%s] In\n", __FUNCTION__ );
+       //update attribute
+       pattrib = &pmgntframe->attrib;
+       update_mgntframe_attrib(padapter, pattrib);
+
+       _rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
+
+       pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+
+       fctrl = &(pwlanhdr->frame_ctl);
+       *(fctrl) = 0;
+
+       _rtw_memcpy(pwlanhdr->addr1, raddr, ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr3, myid(&(padapter->eeprompriv)), ETH_ALEN);
+
+       SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
+       pmlmeext->mgnt_seq++;
+       SetFrameSubType(pframe, WIFI_ACTION);
+
+       pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
+       pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
+
+       pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 4, (unsigned char *) &(p2poui), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(oui_subtype), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(pwdinfo->negotiation_dialog_token), &(pattrib->pktlen));
+
+
+
+       //      P2P IE Section.
+
+       //      P2P OUI
+       p2pielen = 0;
+       p2pie[ p2pielen++ ] = 0x50;
+       p2pie[ p2pielen++ ] = 0x6F;
+       p2pie[ p2pielen++ ] = 0x9A;
+       p2pie[ p2pielen++ ] = 0x09;     //      WFA P2P v1.0
+
+       //      Commented by Albert 20110306
+       //      According to the P2P Specification, the group negoitation request frame should contain 5 P2P attributes
+       //      1. Status
+       //      2. P2P Capability
+       //      3. Operating Channel
+       //      4. Channel List
+       //      5. Group ID     ( if this WiFi is GO )
+
+       //      P2P Status
+       //      Type:
+       p2pie[ p2pielen++ ] = P2P_ATTR_STATUS;
+
+       //      Length:
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0001 );
+       p2pielen += 2;
+
+       //      Value:
+       p2pie[ p2pielen++ ] = result;
+
+       //      P2P Capability
+       //      Type:
+       p2pie[ p2pielen++ ] = P2P_ATTR_CAPABILITY;
+
+       //      Length:
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0002 );
+       p2pielen += 2;
+
+       //      Value:
+       //      Device Capability Bitmap, 1 byte
+       p2pie[ p2pielen++ ] = DMP_P2P_DEVCAP_SUPPORT;
+
+       //      Group Capability Bitmap, 1 byte
+       if ( pwdinfo->persistent_supported )
+       {
+               p2pie[ p2pielen++ ] = P2P_GRPCAP_CROSS_CONN | P2P_GRPCAP_PERSISTENT_GROUP;
+       }
+       else
+       {
+               p2pie[ p2pielen++ ] = P2P_GRPCAP_CROSS_CONN;
+       }
+
+
+       //      Operating Channel
+       //      Type:
+       p2pie[ p2pielen++ ] = P2P_ATTR_OPERATING_CH;
+
+       //      Length:
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0005 );
+       p2pielen += 2;
+
+       //      Value:
+       //      Country String
+       p2pie[ p2pielen++ ] = 'X';
+       p2pie[ p2pielen++ ] = 'X';
+
+       //      The third byte should be set to 0x04.
+       //      Described in the "Operating Channel Attribute" section.
+       p2pie[ p2pielen++ ] = 0x04;
+
+
+       if ( rtw_p2p_chk_role(pwdinfo, P2P_ROLE_CLIENT) )
+       {
+               if ( pwdinfo->peer_operating_ch <= 14 )
+               {
+                       //      Operating Class
+                       p2pie[ p2pielen++ ] = 0x51;
+               }
+               else if ( ( pwdinfo->peer_operating_ch >= 36 ) && ( pwdinfo->peer_operating_ch <= 48 ) )
+               {
+                       //      Operating Class
+                       p2pie[ p2pielen++ ] = 0x73;
+               }
+               else
+               {
+                       //      Operating Class
+                       p2pie[ p2pielen++ ] = 0x7c;
+               }
+
+               p2pie[ p2pielen++ ] = pwdinfo->peer_operating_ch;
+       }
+       else
+       {
+               if ( pwdinfo->operating_channel <= 14 )
+               {
+                       //      Operating Class
+                       p2pie[ p2pielen++ ] = 0x51;
+               }
+               else if ( ( pwdinfo->operating_channel >= 36 ) && ( pwdinfo->operating_channel <= 48 ) )
+               {
+                       //      Operating Class
+                       p2pie[ p2pielen++ ] = 0x73;
+               }
+               else
+               {
+                       //      Operating Class
+                       p2pie[ p2pielen++ ] = 0x7c;
+               }
+
+               //      Channel Number
+               p2pie[ p2pielen++ ] = pwdinfo->operating_channel;               //      Use the listen channel as the operating channel
+       }
+
+
+       //      Channel List
+       //      Type:
+       p2pie[ p2pielen++ ] = P2P_ATTR_CH_LIST;
+
+       *(u16*) ( p2pie + p2pielen ) = 6;
+       p2pielen += 2;
+
+       //      Country String
+       p2pie[ p2pielen++ ] = 'X';
+       p2pie[ p2pielen++ ] = 'X';
+
+       //      The third byte should be set to 0x04.
+       //      Described in the "Operating Channel Attribute" section.
+       p2pie[ p2pielen++ ] = 0x04;
+
+       //      Value:
+       if ( rtw_p2p_chk_role(pwdinfo, P2P_ROLE_CLIENT) )
+       {
+               if ( pwdinfo->peer_operating_ch <= 14 )
+               {
+                       //      Operating Class
+                       p2pie[ p2pielen++ ] = 0x51;
+               }
+               else if ( ( pwdinfo->peer_operating_ch >= 36 ) && ( pwdinfo->peer_operating_ch <= 48 ) )
+               {
+                       //      Operating Class
+                       p2pie[ p2pielen++ ] = 0x73;
+               }
+               else
+               {
+                       //      Operating Class
+                       p2pie[ p2pielen++ ] = 0x7c;
+               }
+               p2pie[ p2pielen++ ] = 1;
+               p2pie[ p2pielen++ ] = pwdinfo->peer_operating_ch;
+       }
+       else
+       {
+               if ( pwdinfo->operating_channel <= 14 )
+               {
+                       //      Operating Class
+                       p2pie[ p2pielen++ ] = 0x51;
+               }
+               else if ( ( pwdinfo->operating_channel >= 36 ) && ( pwdinfo->operating_channel <= 48 ) )
+               {
+                       //      Operating Class
+                       p2pie[ p2pielen++ ] = 0x73;
+               }
+               else
+               {
+                       //      Operating Class
+                       p2pie[ p2pielen++ ] = 0x7c;
+               }
+
+               //      Channel Number
+               p2pie[ p2pielen++ ] = 1;
+               p2pie[ p2pielen++ ] = pwdinfo->operating_channel;               //      Use the listen channel as the operating channel
+       }
+
+       if (rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO) )
+       {
+               //      Group ID Attribute
+               //      Type:
+               p2pie[ p2pielen++ ] = P2P_ATTR_GROUP_ID;
+
+               //      Length:
+               *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( ETH_ALEN + pwdinfo->nego_ssidlen );
+               p2pielen += 2;
+
+               //      Value:
+               //      p2P Device Address
+               _rtw_memcpy( p2pie + p2pielen , pwdinfo->device_addr, ETH_ALEN );
+               p2pielen += ETH_ALEN;
+
+               //      SSID
+               _rtw_memcpy( p2pie + p2pielen, pwdinfo->nego_ssid, pwdinfo->nego_ssidlen );
+               p2pielen += pwdinfo->nego_ssidlen;
+       }
+
+       pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, p2pielen, (unsigned char *) p2pie, &pattrib->pktlen );
+
+#ifdef CONFIG_WFD
+       wfdielen = build_nego_confirm_wfd_ie(pwdinfo, pframe);
+       pframe += wfdielen;
+       pattrib->pktlen += wfdielen;
+#endif //CONFIG_WFD
+
+       pattrib->last_txcmdsz = pattrib->pktlen;
+
+       dump_mgntframe(padapter, pmgntframe);
+
+       return;
+
+}
+
+void issue_p2p_invitation_request(_adapter *padapter, u8* raddr )
+{
+
+       unsigned char category = RTW_WLAN_CATEGORY_PUBLIC;
+       u8                      action = P2P_PUB_ACTION_ACTION;
+       u32                     p2poui = cpu_to_be32(P2POUI);
+       u8                      oui_subtype = P2P_INVIT_REQ;
+       u8                      p2pie[ 255 ] = { 0x00 };
+       u8                      p2pielen = 0, i;
+       u8                      dialogToken = 3;
+       u8                      channel_cnt_24g = 0, channel_cnt_5gl = 0, channel_cnt_5gh = 0;
+       u16                     len_channellist_attr = 0;
+#ifdef CONFIG_WFD
+       u32                                     wfdielen = 0;
+#endif //CONFIG_WFD
+#ifdef CONFIG_CONCURRENT_MODE
+       _adapter                                *pbuddy_adapter = padapter->pbuddy_adapter;
+       struct wifidirect_info  *pbuddy_wdinfo = &pbuddy_adapter->wdinfo;
+       struct mlme_priv                *pbuddy_mlmepriv = &pbuddy_adapter->mlmepriv;
+       struct mlme_ext_priv    *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
+#endif
+
+       struct xmit_frame                       *pmgntframe;
+       struct pkt_attrib                       *pattrib;
+       unsigned char                                   *pframe;
+       struct rtw_ieee80211_hdr        *pwlanhdr;
+       unsigned short                          *fctrl;
+       struct xmit_priv                        *pxmitpriv = &(padapter->xmitpriv);
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       struct wifidirect_info  *pwdinfo = &( padapter->wdinfo);
+
+
+       if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+       {
+               return;
+       }
+
+       //update attribute
+       pattrib = &pmgntframe->attrib;
+       update_mgntframe_attrib(padapter, pattrib);
+
+       _rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
+
+       pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+
+       fctrl = &(pwlanhdr->frame_ctl);
+       *(fctrl) = 0;
+
+       _rtw_memcpy(pwlanhdr->addr1, raddr, ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr3, raddr,  ETH_ALEN);
+
+       SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
+       pmlmeext->mgnt_seq++;
+       SetFrameSubType(pframe, WIFI_ACTION);
+
+       pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
+       pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
+
+       pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 4, (unsigned char *) &(p2poui), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(oui_subtype), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(dialogToken), &(pattrib->pktlen));
+
+       //      P2P IE Section.
+
+       //      P2P OUI
+       p2pielen = 0;
+       p2pie[ p2pielen++ ] = 0x50;
+       p2pie[ p2pielen++ ] = 0x6F;
+       p2pie[ p2pielen++ ] = 0x9A;
+       p2pie[ p2pielen++ ] = 0x09;     //      WFA P2P v1.0
+
+       //      Commented by Albert 20101011
+       //      According to the P2P Specification, the P2P Invitation request frame should contain 7 P2P attributes
+       //      1. Configuration Timeout
+       //      2. Invitation Flags
+       //      3. Operating Channel    ( Only GO )
+       //      4. P2P Group BSSID      ( Should be included if I am the GO )
+       //      5. Channel List
+       //      6. P2P Group ID
+       //      7. P2P Device Info
+
+       //      Configuration Timeout
+       //      Type:
+       p2pie[ p2pielen++ ] = P2P_ATTR_CONF_TIMEOUT;
+
+       //      Length:
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0002 );
+       p2pielen += 2;
+
+       //      Value:
+       p2pie[ p2pielen++ ] = 200;      //      2 seconds needed to be the P2P GO
+       p2pie[ p2pielen++ ] = 200;      //      2 seconds needed to be the P2P Client
+
+       //      Invitation Flags
+       //      Type:
+       p2pie[ p2pielen++ ] = P2P_ATTR_INVITATION_FLAGS;
+
+       //      Length:
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0001 );
+       p2pielen += 2;
+
+       //      Value:
+       p2pie[ p2pielen++ ] = P2P_INVITATION_FLAGS_PERSISTENT;
+
+
+       //      Operating Channel
+       //      Type:
+       p2pie[ p2pielen++ ] = P2P_ATTR_OPERATING_CH;
+
+       //      Length:
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0005 );
+       p2pielen += 2;
+
+       //      Value:
+       //      Country String
+       p2pie[ p2pielen++ ] = 'X';
+       p2pie[ p2pielen++ ] = 'X';
+
+       //      The third byte should be set to 0x04.
+       //      Described in the "Operating Channel Attribute" section.
+       p2pie[ p2pielen++ ] = 0x04;
+
+       //      Operating Class
+       if ( pwdinfo->invitereq_info.operating_ch <= 14 )
+               p2pie[ p2pielen++ ] = 0x51;
+       else if ( ( pwdinfo->invitereq_info.operating_ch >= 36 ) && ( pwdinfo->invitereq_info.operating_ch <= 48 ) )
+               p2pie[ p2pielen++ ] = 0x73;
+       else
+               p2pie[ p2pielen++ ] = 0x7c;
+
+       //      Channel Number
+       p2pie[ p2pielen++ ] = pwdinfo->invitereq_info.operating_ch;     //      operating channel number
+
+       if ( _rtw_memcmp( myid( &padapter->eeprompriv ), pwdinfo->invitereq_info.go_bssid, ETH_ALEN ) )
+       {
+               //      P2P Group BSSID
+               //      Type:
+               p2pie[ p2pielen++ ] = P2P_ATTR_GROUP_BSSID;
+
+               //      Length:
+               *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( ETH_ALEN );
+               p2pielen += 2;
+
+               //      Value:
+               //      P2P Device Address for GO
+               _rtw_memcpy( p2pie + p2pielen, pwdinfo->invitereq_info.go_bssid, ETH_ALEN );
+               p2pielen += ETH_ALEN;
+       }
+
+       //      Channel List
+       //      Type:
+       p2pie[ p2pielen++ ] = P2P_ATTR_CH_LIST;
+
+
+       //      Length:
+       // Country String(3)
+       // + ( Operating Class (1) + Number of Channels(1) ) * Operation Classes (?)
+       // + number of channels in all classes
+       len_channellist_attr = 3
+          + (1 + 1) * (u16)pmlmeext->channel_list.reg_classes
+          + get_reg_classes_full_count(pmlmeext->channel_list);
+
+#ifdef CONFIG_CONCURRENT_MODE
+       if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
+       {
+               *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 5 + 1 );
+       }
+       else
+       {
+               *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( len_channellist_attr );
+       }
+#else
+
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( len_channellist_attr );
+
+ #endif
+       p2pielen += 2;
+
+       //      Value:
+       //      Country String
+       p2pie[ p2pielen++ ] = 'X';
+       p2pie[ p2pielen++ ] = 'X';
+
+       //      The third byte should be set to 0x04.
+       //      Described in the "Operating Channel Attribute" section.
+       p2pie[ p2pielen++ ] = 0x04;
+
+       //      Channel Entry List
+#ifdef CONFIG_CONCURRENT_MODE
+       if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
+       {
+               _adapter *pbuddy_adapter = padapter->pbuddy_adapter;
+               struct mlme_ext_priv    *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
+
+               //      Operating Class
+               if ( pbuddy_mlmeext->cur_channel > 14 )
+               {
+                       if ( pbuddy_mlmeext->cur_channel >= 149 )
+                       {
+                               p2pie[ p2pielen++ ] = 0x7c;
+                       }
+                       else
+                       {
+                               p2pie[ p2pielen++ ] = 0x73;
+                       }
+               }
+               else
+               {
+                       p2pie[ p2pielen++ ] = 0x51;
+               }
+
+               //      Number of Channels
+               //      Just support 1 channel and this channel is AP's channel
+               p2pie[ p2pielen++ ] = 1;
+
+               //      Channel List
+               p2pie[ p2pielen++ ] = pbuddy_mlmeext->cur_channel;
+       }
+       else
+       {
+               int i, j;
+               for (j = 0; j < pmlmeext->channel_list.reg_classes; j++) {
+                       //      Operating Class
+                       p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].reg_class;
+
+                       //      Number of Channels
+                       p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].channels;
+
+                       //      Channel List
+                       for (i = 0; i < pmlmeext->channel_list.reg_class[j].channels; i++) {
+                               p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].channel[i];
+                       }
+               }
+       }
+#else // CONFIG_CONCURRENT_MODE
+       {
+               int i, j;
+               for (j = 0; j < pmlmeext->channel_list.reg_classes; j++) {
+                       //      Operating Class
+                       p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].reg_class;
+
+                       //      Number of Channels
+                       p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].channels;
+
+                       //      Channel List
+                       for (i = 0; i < pmlmeext->channel_list.reg_class[j].channels; i++) {
+                               p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].channel[i];
+                       }
+               }
+       }
+#endif // CONFIG_CONCURRENT_MODE
+
+
+       //      P2P Group ID
+       //      Type:
+       p2pie[ p2pielen++ ] = P2P_ATTR_GROUP_ID;
+
+       //      Length:
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 6 + pwdinfo->invitereq_info.ssidlen );
+       p2pielen += 2;
+
+       //      Value:
+       //      P2P Device Address for GO
+       _rtw_memcpy( p2pie + p2pielen, pwdinfo->invitereq_info.go_bssid, ETH_ALEN );
+       p2pielen += ETH_ALEN;
+
+       //      SSID
+       _rtw_memcpy( p2pie + p2pielen, pwdinfo->invitereq_info.go_ssid, pwdinfo->invitereq_info.ssidlen );
+       p2pielen += pwdinfo->invitereq_info.ssidlen;
+
+
+       //      Device Info
+       //      Type:
+       p2pie[ p2pielen++ ] = P2P_ATTR_DEVICE_INFO;
+
+       //      Length:
+       //      21 -> P2P Device Address (6bytes) + Config Methods (2bytes) + Primary Device Type (8bytes)
+       //      + NumofSecondDevType (1byte) + WPS Device Name ID field (2bytes) + WPS Device Name Len field (2bytes)
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 21 + pwdinfo->device_name_len );
+       p2pielen += 2;
+
+       //      Value:
+       //      P2P Device Address
+       _rtw_memcpy( p2pie + p2pielen, myid( &padapter->eeprompriv ), ETH_ALEN );
+       p2pielen += ETH_ALEN;
+
+       //      Config Method
+       //      This field should be big endian. Noted by P2P specification.
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_CONFIG_METHOD_DISPLAY );
+       p2pielen += 2;
+
+       //      Primary Device Type
+       //      Category ID
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_CID_MULIT_MEDIA );
+       p2pielen += 2;
+
+       //      OUI
+       *(u32*) ( p2pie + p2pielen ) = cpu_to_be32( WPSOUI );
+       p2pielen += 4;
+
+       //      Sub Category ID
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_SCID_MEDIA_SERVER );
+       p2pielen += 2;
+
+       //      Number of Secondary Device Types
+       p2pie[ p2pielen++ ] = 0x00;     //      No Secondary Device Type List
+
+       //      Device Name
+       //      Type:
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_ATTR_DEVICE_NAME );
+       p2pielen += 2;
+
+       //      Length:
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_be16( pwdinfo->device_name_len );
+       p2pielen += 2;
+
+       //      Value:
+       _rtw_memcpy( p2pie + p2pielen, pwdinfo->device_name, pwdinfo->device_name_len );
+       p2pielen += pwdinfo->device_name_len;
+
+       pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, p2pielen, (unsigned char *) p2pie, &pattrib->pktlen );
+
+#ifdef CONFIG_WFD
+       wfdielen = build_invitation_req_wfd_ie(pwdinfo, pframe);
+       pframe += wfdielen;
+       pattrib->pktlen += wfdielen;
+#endif //CONFIG_WFD
+
+       pattrib->last_txcmdsz = pattrib->pktlen;
+
+       dump_mgntframe(padapter, pmgntframe);
+
+       return;
+
+}
+
+void issue_p2p_invitation_response(_adapter *padapter, u8* raddr, u8 dialogToken, u8 status_code)
+{
+
+       unsigned char category = RTW_WLAN_CATEGORY_PUBLIC;
+       u8                      action = P2P_PUB_ACTION_ACTION;
+       u32                     p2poui = cpu_to_be32(P2POUI);
+       u8                      oui_subtype = P2P_INVIT_RESP;
+       u8                      p2pie[ 255 ] = { 0x00 };
+       u8                      p2pielen = 0, i;
+       u8                      channel_cnt_24g = 0, channel_cnt_5gl = 0, channel_cnt_5gh = 0;
+       u16                     len_channellist_attr = 0;
+#ifdef CONFIG_CONCURRENT_MODE
+       _adapter                                *pbuddy_adapter = padapter->pbuddy_adapter;
+       struct wifidirect_info  *pbuddy_wdinfo = &pbuddy_adapter->wdinfo;
+       struct mlme_priv                *pbuddy_mlmepriv = &pbuddy_adapter->mlmepriv;
+       struct mlme_ext_priv    *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
+#endif
+#ifdef CONFIG_WFD
+       u32                                     wfdielen = 0;
+#endif //CONFIG_WFD
+
+       struct xmit_frame                       *pmgntframe;
+       struct pkt_attrib                       *pattrib;
+       unsigned char                                   *pframe;
+       struct rtw_ieee80211_hdr        *pwlanhdr;
+       unsigned short                          *fctrl;
+       struct xmit_priv                        *pxmitpriv = &(padapter->xmitpriv);
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       struct wifidirect_info  *pwdinfo = &( padapter->wdinfo);
+
+
+       if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+       {
+               return;
+       }
+
+       //update attribute
+       pattrib = &pmgntframe->attrib;
+       update_mgntframe_attrib(padapter, pattrib);
+
+       _rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
+
+       pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+
+       fctrl = &(pwlanhdr->frame_ctl);
+       *(fctrl) = 0;
+
+       _rtw_memcpy(pwlanhdr->addr1, raddr, ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr3, raddr,  ETH_ALEN);
+
+       SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
+       pmlmeext->mgnt_seq++;
+       SetFrameSubType(pframe, WIFI_ACTION);
+
+       pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
+       pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
+
+       pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 4, (unsigned char *) &(p2poui), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(oui_subtype), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(dialogToken), &(pattrib->pktlen));
+
+       //      P2P IE Section.
+
+       //      P2P OUI
+       p2pielen = 0;
+       p2pie[ p2pielen++ ] = 0x50;
+       p2pie[ p2pielen++ ] = 0x6F;
+       p2pie[ p2pielen++ ] = 0x9A;
+       p2pie[ p2pielen++ ] = 0x09;     //      WFA P2P v1.0
+
+       //      Commented by Albert 20101005
+       //      According to the P2P Specification, the P2P Invitation response frame should contain 5 P2P attributes
+       //      1. Status
+       //      2. Configuration Timeout
+       //      3. Operating Channel    ( Only GO )
+       //      4. P2P Group BSSID      ( Only GO )
+       //      5. Channel List
+
+       //      P2P Status
+       //      Type:
+       p2pie[ p2pielen++ ] = P2P_ATTR_STATUS;
+
+       //      Length:
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0001 );
+       p2pielen += 2;
+
+       //      Value:
+       //      When status code is P2P_STATUS_FAIL_INFO_UNAVAILABLE.
+       //      Sent the event receiving the P2P Invitation Req frame to DMP UI.
+       //      DMP had to compare the MAC address to find out the profile.
+       //      So, the WiFi driver will send the P2P_STATUS_FAIL_INFO_UNAVAILABLE to NB.
+       //      If the UI found the corresponding profile, the WiFi driver sends the P2P Invitation Req
+       //      to NB to rebuild the persistent group.
+       p2pie[ p2pielen++ ] = status_code;
+
+       //      Configuration Timeout
+       //      Type:
+       p2pie[ p2pielen++ ] = P2P_ATTR_CONF_TIMEOUT;
+
+       //      Length:
+       *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0002 );
+       p2pielen += 2;
+
+       //      Value:
+       p2pie[ p2pielen++ ] = 200;      //      2 seconds needed to be the P2P GO
+       p2pie[ p2pielen++ ] = 200;      //      2 seconds needed to be the P2P Client
+
+       if( status_code == P2P_STATUS_SUCCESS )
+       {
+               if( rtw_p2p_chk_role( pwdinfo, P2P_ROLE_GO ) )
+               {
+                       //      The P2P Invitation request frame asks this Wi-Fi device to be the P2P GO
+                       //      In this case, the P2P Invitation response frame should carry the two more P2P attributes.
+                       //      First one is operating channel attribute.
+                       //      Second one is P2P Group BSSID attribute.
+
+                       //      Operating Channel
+                       //      Type:
+                       p2pie[ p2pielen++ ] = P2P_ATTR_OPERATING_CH;
+
+                       //      Length:
+                       *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0005 );
+                       p2pielen += 2;
+
+                       //      Value:
+                       //      Country String
+                       p2pie[ p2pielen++ ] = 'X';
+                       p2pie[ p2pielen++ ] = 'X';
+
+                       //      The third byte should be set to 0x04.
+                       //      Described in the "Operating Channel Attribute" section.
+                       p2pie[ p2pielen++ ] = 0x04;
+
+                       //      Operating Class
+                       p2pie[ p2pielen++ ] = 0x51;     //      Copy from SD7
+
+                       //      Channel Number
+                       p2pie[ p2pielen++ ] = pwdinfo->operating_channel;       //      operating channel number
+
+
+                       //      P2P Group BSSID
+                       //      Type:
+                       p2pie[ p2pielen++ ] = P2P_ATTR_GROUP_BSSID;
+
+                       //      Length:
+                       *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( ETH_ALEN );
+                       p2pielen += 2;
+
+                       //      Value:
+                       //      P2P Device Address for GO
+                       _rtw_memcpy( p2pie + p2pielen, myid( &padapter->eeprompriv ), ETH_ALEN );
+                       p2pielen += ETH_ALEN;
+
+               }
+
+               //      Channel List
+               //      Type:
+               p2pie[ p2pielen++ ] = P2P_ATTR_CH_LIST;
+
+               //      Length:
+               // Country String(3)
+               // + ( Operating Class (1) + Number of Channels(1) ) * Operation Classes (?)
+               // + number of channels in all classes
+               len_channellist_attr = 3
+                       + (1 + 1) * (u16)pmlmeext->channel_list.reg_classes
+                       + get_reg_classes_full_count(pmlmeext->channel_list);
+
+#ifdef CONFIG_CONCURRENT_MODE
+               if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
+               {
+                       *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 5 + 1 );
+               }
+               else
+               {
+                       *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( len_channellist_attr );
+               }
+#else
+
+               *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( len_channellist_attr );
+
+#endif
+               p2pielen += 2;
+
+               //      Value:
+               //      Country String
+               p2pie[ p2pielen++ ] = 'X';
+               p2pie[ p2pielen++ ] = 'X';
+
+               //      The third byte should be set to 0x04.
+               //      Described in the "Operating Channel Attribute" section.
+               p2pie[ p2pielen++ ] = 0x04;
+
+               //      Channel Entry List
+#ifdef CONFIG_CONCURRENT_MODE
+               if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
+               {
+                       _adapter *pbuddy_adapter = padapter->pbuddy_adapter;
+                       struct mlme_ext_priv    *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
+
+                       //      Operating Class
+                       if ( pbuddy_mlmeext->cur_channel > 14 )
+                       {
+                               if ( pbuddy_mlmeext->cur_channel >= 149 )
+                               {
+                                       p2pie[ p2pielen++ ] = 0x7c;
+                               }
+                               else
+                               {
+                                       p2pie[ p2pielen++ ] = 0x73;
+                               }
+                       }
+                       else
+                       {
+                               p2pie[ p2pielen++ ] = 0x51;
+                       }
+
+                       //      Number of Channels
+                       //      Just support 1 channel and this channel is AP's channel
+                       p2pie[ p2pielen++ ] = 1;
+
+                       //      Channel List
+                       p2pie[ p2pielen++ ] = pbuddy_mlmeext->cur_channel;
+               }
+               else
+               {
+                       int i, j;
+                       for (j = 0; j < pmlmeext->channel_list.reg_classes; j++) {
+                               //      Operating Class
+                               p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].reg_class;
+
+                               //      Number of Channels
+                               p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].channels;
+
+                               //      Channel List
+                               for (i = 0; i < pmlmeext->channel_list.reg_class[j].channels; i++) {
+                                       p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].channel[i];
+                               }
+                       }
+               }
+#else // CONFIG_CONCURRENT_MODE
+               {
+                       int i, j;
+                       for (j = 0; j < pmlmeext->channel_list.reg_classes; j++) {
+                               //      Operating Class
+                               p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].reg_class;
+
+                               //      Number of Channels
+                               p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].channels;
+
+                               //      Channel List
+                               for (i = 0; i < pmlmeext->channel_list.reg_class[j].channels; i++) {
+                                       p2pie[p2pielen++] = pmlmeext->channel_list.reg_class[j].channel[i];
+                               }
+                       }
+               }
+#endif // CONFIG_CONCURRENT_MODE
+       }
+
+       pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, p2pielen, (unsigned char *) p2pie, &pattrib->pktlen );
+
+#ifdef CONFIG_WFD
+       wfdielen = build_invitation_resp_wfd_ie(pwdinfo, pframe);
+       pframe += wfdielen;
+       pattrib->pktlen += wfdielen;
+#endif //CONFIG_WFD
+
+       pattrib->last_txcmdsz = pattrib->pktlen;
+
+       dump_mgntframe(padapter, pmgntframe);
+
+       return;
+
+}
+
+void issue_p2p_provision_request(_adapter *padapter, u8* pssid, u8 ussidlen, u8* pdev_raddr )
+{
+       unsigned char category = RTW_WLAN_CATEGORY_PUBLIC;
+       u8                      action = P2P_PUB_ACTION_ACTION;
+       u8                      dialogToken = 1;
+       u32                     p2poui = cpu_to_be32(P2POUI);
+       u8                      oui_subtype = P2P_PROVISION_DISC_REQ;
+       u8                      wpsie[ 100 ] = { 0x00 };
+       u8                      wpsielen = 0;
+       u32                     p2pielen = 0;
+#ifdef CONFIG_WFD
+       u32                                     wfdielen = 0;
+#endif //CONFIG_WFD
+
+       struct xmit_frame                       *pmgntframe;
+       struct pkt_attrib                       *pattrib;
+       unsigned char                                   *pframe;
+       struct rtw_ieee80211_hdr        *pwlanhdr;
+       unsigned short                          *fctrl;
+       struct xmit_priv                        *pxmitpriv = &(padapter->xmitpriv);
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       struct wifidirect_info  *pwdinfo = &(padapter->wdinfo);
+
+
+       if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+       {
+               return;
+       }
+
+       DBG_871X( "[%s] In\n", __FUNCTION__ );
+       //update attribute
+       pattrib = &pmgntframe->attrib;
+       update_mgntframe_attrib(padapter, pattrib);
+
+       _rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
+
+       pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+
+       fctrl = &(pwlanhdr->frame_ctl);
+       *(fctrl) = 0;
+
+       _rtw_memcpy(pwlanhdr->addr1, pdev_raddr, ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr3, pdev_raddr, ETH_ALEN);
+
+       SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
+       pmlmeext->mgnt_seq++;
+       SetFrameSubType(pframe, WIFI_ACTION);
+
+       pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
+       pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
+
+       pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 4, (unsigned char *) &(p2poui), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(oui_subtype), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(dialogToken), &(pattrib->pktlen));
+
+       p2pielen = build_prov_disc_request_p2p_ie( pwdinfo, pframe, pssid, ussidlen, pdev_raddr );
+
+       pframe += p2pielen;
+       pattrib->pktlen += p2pielen;
+
+       wpsielen = 0;
+       //      WPS OUI
+       *(u32*) ( wpsie ) = cpu_to_be32( WPSOUI );
+       wpsielen += 4;
+
+       //      WPS version
+       //      Type:
+       *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_VER1 );
+       wpsielen += 2;
+
+       //      Length:
+       *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0001 );
+       wpsielen += 2;
+
+       //      Value:
+       wpsie[wpsielen++] = WPS_VERSION_1;      //      Version 1.0
+
+       //      Config Method
+       //      Type:
+       *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_CONF_METHOD );
+       wpsielen += 2;
+
+       //      Length:
+       *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0002 );
+       wpsielen += 2;
+
+       //      Value:
+       *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( pwdinfo->tx_prov_disc_info.wps_config_method_request );
+       wpsielen += 2;
+
+       pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, wpsielen, (unsigned char *) wpsie, &pattrib->pktlen );
+
+
+#ifdef CONFIG_WFD
+       wfdielen = build_provdisc_req_wfd_ie(pwdinfo, pframe);
+       pframe += wfdielen;
+       pattrib->pktlen += wfdielen;
+#endif //CONFIG_WFD
+
+       pattrib->last_txcmdsz = pattrib->pktlen;
+
+       dump_mgntframe(padapter, pmgntframe);
+
+       return;
+
+}
+
+
+u8 is_matched_in_profilelist( u8* peermacaddr, struct profile_info* profileinfo )
+{
+       u8 i, match_result = 0;
+
+       DBG_871X( "[%s] peermac = %.2X %.2X %.2X %.2X %.2X %.2X\n", __FUNCTION__,
+                   peermacaddr[0], peermacaddr[1],peermacaddr[2],peermacaddr[3],peermacaddr[4],peermacaddr[5]);
+
+       for( i = 0; i < P2P_MAX_PERSISTENT_GROUP_NUM; i++, profileinfo++ )
+       {
+              DBG_871X( "[%s] profileinfo_mac = %.2X %.2X %.2X %.2X %.2X %.2X\n", __FUNCTION__,
+                           profileinfo->peermac[0], profileinfo->peermac[1],profileinfo->peermac[2],profileinfo->peermac[3],profileinfo->peermac[4],profileinfo->peermac[5]);
+               if ( _rtw_memcmp( peermacaddr, profileinfo->peermac, ETH_ALEN ) )
+               {
+                       match_result = 1;
+                       DBG_871X( "[%s] Match!\n", __FUNCTION__ );
+                       break;
+               }
+       }
+
+       return (match_result );
+}
+
+void issue_probersp_p2p(_adapter *padapter, unsigned char *da)
+{
+       struct xmit_frame                       *pmgntframe;
+       struct pkt_attrib                       *pattrib;
+       unsigned char                                   *pframe;
+       struct rtw_ieee80211_hdr        *pwlanhdr;
+       unsigned short                          *fctrl;
+       unsigned char                                   *mac;
+       struct xmit_priv        *pxmitpriv = &(padapter->xmitpriv);
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+       //WLAN_BSSID_EX                 *cur_network = &(pmlmeinfo->network);
+       u16                                     beacon_interval = 100;
+       u16                                     capInfo = 0;
+       struct wifidirect_info  *pwdinfo = &(padapter->wdinfo);
+       u8                                      wpsie[255] = { 0x00 };
+       u32                                     wpsielen = 0, p2pielen = 0;
+#ifdef CONFIG_WFD
+       u32                                     wfdielen = 0;
+#endif //CONFIG_WFD
+#ifdef CONFIG_INTEL_WIDI
+       u8 zero_array_check[L2SDTA_SERVICE_VE_LEN] = { 0x00 };
+#endif //CONFIG_INTEL_WIDI
+
+       //DBG_871X("%s\n", __FUNCTION__);
+
+       if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+       {
+               return;
+       }
+
+       //update attribute
+       pattrib = &pmgntframe->attrib;
+       update_mgntframe_attrib(padapter, pattrib);
+
+       _rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
+
+       pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+
+       mac = myid(&(padapter->eeprompriv));
+
+       fctrl = &(pwlanhdr->frame_ctl);
+       *(fctrl) = 0;
+       _rtw_memcpy(pwlanhdr->addr1, da, ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr2, mac, ETH_ALEN);
+
+       //      Use the device address for BSSID field.
+       _rtw_memcpy(pwlanhdr->addr3, mac, ETH_ALEN);
+
+       SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
+       pmlmeext->mgnt_seq++;
+       SetFrameSubType(fctrl, WIFI_PROBERSP);
+
+       pattrib->hdrlen = sizeof(struct rtw_ieee80211_hdr_3addr);
+       pattrib->pktlen = pattrib->hdrlen;
+       pframe += pattrib->hdrlen;
+
+       //timestamp will be inserted by hardware
+       pframe += 8;
+       pattrib->pktlen += 8;
+
+       // beacon interval: 2 bytes
+       _rtw_memcpy(pframe, (unsigned char *) &beacon_interval, 2);
+       pframe += 2;
+       pattrib->pktlen += 2;
+
+       //      capability info: 2 bytes
+       //      ESS and IBSS bits must be 0 (defined in the 3.1.2.1.1 of WiFi Direct Spec)
+       capInfo |= cap_ShortPremble;
+       capInfo |= cap_ShortSlot;
+
+       _rtw_memcpy(pframe, (unsigned char *) &capInfo, 2);
+       pframe += 2;
+       pattrib->pktlen += 2;
+
+
+       // SSID
+       pframe = rtw_set_ie(pframe, _SSID_IE_, 7, pwdinfo->p2p_wildcard_ssid, &pattrib->pktlen);
+
+       // supported rates...
+       //      Use the OFDM rate in the P2P probe response frame. ( 6(B), 9(B), 12, 18, 24, 36, 48, 54 )
+       pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_, 8, pwdinfo->support_rate, &pattrib->pktlen);
+
+       // DS parameter set
+       pframe = rtw_set_ie(pframe, _DSSET_IE_, 1, (unsigned char *)&pwdinfo->listen_channel, &pattrib->pktlen);
+
+#ifdef CONFIG_IOCTL_CFG80211
+       if(wdev_to_priv(padapter->rtw_wdev)->p2p_enabled && pwdinfo->driver_interface == DRIVER_CFG80211 )
+       {
+               if( pmlmepriv->wps_probe_resp_ie != NULL && pmlmepriv->p2p_probe_resp_ie != NULL )
+               {
+                       //WPS IE
+                       _rtw_memcpy(pframe, pmlmepriv->wps_probe_resp_ie, pmlmepriv->wps_probe_resp_ie_len);
+                       pattrib->pktlen += pmlmepriv->wps_probe_resp_ie_len;
+                       pframe += pmlmepriv->wps_probe_resp_ie_len;
+
+                       //P2P IE
+                       _rtw_memcpy(pframe, pmlmepriv->p2p_probe_resp_ie, pmlmepriv->p2p_probe_resp_ie_len);
+                       pattrib->pktlen += pmlmepriv->p2p_probe_resp_ie_len;
+                       pframe += pmlmepriv->p2p_probe_resp_ie_len;
+               }
+       }
+       else
+#endif //CONFIG_IOCTL_CFG80211
+       {
+
+               //      Todo: WPS IE
+               //      Noted by Albert 20100907
+               //      According to the WPS specification, all the WPS attribute is presented by Big Endian.
+
+               wpsielen = 0;
+               //      WPS OUI
+               *(u32*) ( wpsie ) = cpu_to_be32( WPSOUI );
+               wpsielen += 4;
+
+               //      WPS version
+               //      Type:
+               *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_VER1 );
+               wpsielen += 2;
+
+               //      Length:
+               *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0001 );
+               wpsielen += 2;
+
+               //      Value:
+               wpsie[wpsielen++] = WPS_VERSION_1;      //      Version 1.0
+
+#ifdef CONFIG_INTEL_WIDI
+               //      Commented by Kurt
+               //      Appended WiDi info. only if we did issued_probereq_widi(), and then we saved ven. ext. in pmlmepriv->sa_ext.
+               if(  _rtw_memcmp(pmlmepriv->sa_ext, zero_array_check, L2SDTA_SERVICE_VE_LEN) == _FALSE
+                       || pmlmepriv->num_p2p_sdt != 0 )
+               {
+                       //Sec dev type
+                       *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_SEC_DEV_TYPE_LIST );
+                       wpsielen += 2;
+
+                       //      Length:
+                       *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0008 );
+                       wpsielen += 2;
+
+                       //      Value:
+                       //      Category ID
+                       *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_PDT_CID_DISPLAYS );
+                       wpsielen += 2;
+
+                       //      OUI
+                       *(u32*) ( wpsie + wpsielen ) = cpu_to_be32( INTEL_DEV_TYPE_OUI );
+                       wpsielen += 4;
+
+                       *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_PDT_SCID_WIDI_CONSUMER_SINK );
+                       wpsielen += 2;
+
+                       if(  _rtw_memcmp(pmlmepriv->sa_ext, zero_array_check, L2SDTA_SERVICE_VE_LEN) == _FALSE )
+                       {
+                               //      Vendor Extension
+                               _rtw_memcpy( wpsie + wpsielen, pmlmepriv->sa_ext, L2SDTA_SERVICE_VE_LEN );
+                               wpsielen += L2SDTA_SERVICE_VE_LEN;
+                       }
+               }
+#endif //CONFIG_INTEL_WIDI
+
+               //      WiFi Simple Config State
+               //      Type:
+               *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_SIMPLE_CONF_STATE );
+               wpsielen += 2;
+
+               //      Length:
+               *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0001 );
+               wpsielen += 2;
+
+               //      Value:
+               wpsie[wpsielen++] = WPS_WSC_STATE_NOT_CONFIG;   //      Not Configured.
+
+               //      Response Type
+               //      Type:
+               *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_RESP_TYPE );
+               wpsielen += 2;
+
+               //      Length:
+               *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0001 );
+               wpsielen += 2;
+
+               //      Value:
+               wpsie[wpsielen++] = WPS_RESPONSE_TYPE_8021X;
+
+               //      UUID-E
+               //      Type:
+               *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_UUID_E );
+               wpsielen += 2;
+
+               //      Length:
+               *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0010 );
+               wpsielen += 2;
+
+               //      Value:
+               if (pwdinfo->external_uuid == 0) {
+                       _rtw_memset( wpsie + wpsielen, 0x0, 16 );
+                       _rtw_memcpy( wpsie + wpsielen, myid( &padapter->eeprompriv ), ETH_ALEN );
+               } else {
+                       _rtw_memcpy( wpsie + wpsielen, pwdinfo->uuid, 0x10 );
+               }
+               wpsielen += 0x10;
+
+               //      Manufacturer
+               //      Type:
+               *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_MANUFACTURER );
+               wpsielen += 2;
+
+               //      Length:
+               *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0007 );
+               wpsielen += 2;
+
+               //      Value:
+               _rtw_memcpy( wpsie + wpsielen, "Realtek", 7 );
+               wpsielen += 7;
+
+               //      Model Name
+               //      Type:
+               *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_MODEL_NAME );
+               wpsielen += 2;
+
+               //      Length:
+               *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0006 );
+               wpsielen += 2;
+
+               //      Value:
+               _rtw_memcpy( wpsie + wpsielen, "8192CU", 6 );
+               wpsielen += 6;
+
+               //      Model Number
+               //      Type:
+               *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_MODEL_NUMBER );
+               wpsielen += 2;
+
+               //      Length:
+               *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0001 );
+               wpsielen += 2;
+
+               //      Value:
+               wpsie[ wpsielen++ ] = 0x31;             //      character 1
+
+               //      Serial Number
+               //      Type:
+               *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_SERIAL_NUMBER );
+               wpsielen += 2;
+
+               //      Length:
+               *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( ETH_ALEN );
+               wpsielen += 2;
+
+               //      Value:
+               _rtw_memcpy( wpsie + wpsielen, "123456" , ETH_ALEN );
+               wpsielen += ETH_ALEN;
+
+               //      Primary Device Type
+               //      Type:
+               *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_PRIMARY_DEV_TYPE );
+               wpsielen += 2;
+
+               //      Length:
+               *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0008 );
+               wpsielen += 2;
+
+               //      Value:
+               //      Category ID
+               *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_PDT_CID_RTK_WIDI );
+               wpsielen += 2;
+
+               //      OUI
+               *(u32*) ( wpsie + wpsielen ) = cpu_to_be32( WPSOUI );
+               wpsielen += 4;
+
+               //      Sub Category ID
+               *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_PDT_SCID_RTK_DMP );
+               wpsielen += 2;
+
+               //      Device Name
+               //      Type:
+               *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_DEVICE_NAME );
+               wpsielen += 2;
+
+               //      Length:
+               *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( pwdinfo->device_name_len );
+               wpsielen += 2;
+
+               //      Value:
+               _rtw_memcpy( wpsie + wpsielen, pwdinfo->device_name, pwdinfo->device_name_len );
+               wpsielen += pwdinfo->device_name_len;
+
+               //      Config Method
+               //      Type:
+               *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_CONF_METHOD );
+               wpsielen += 2;
+
+               //      Length:
+               *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0002 );
+               wpsielen += 2;
+
+               //      Value:
+               *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( pwdinfo->supported_wps_cm );
+               wpsielen += 2;
+
+
+               pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, wpsielen, (unsigned char *) wpsie, &pattrib->pktlen );
+
+
+               p2pielen = build_probe_resp_p2p_ie(pwdinfo, pframe);
+               pframe += p2pielen;
+               pattrib->pktlen += p2pielen;
+       }
+
+#ifdef CONFIG_WFD
+#ifdef CONFIG_IOCTL_CFG80211
+       if ( _TRUE == pwdinfo->wfd_info->wfd_enable )
+#endif //CONFIG_IOCTL_CFG80211
+       {
+               wfdielen = build_probe_resp_wfd_ie(pwdinfo, pframe, 0);
+               pframe += wfdielen;
+               pattrib->pktlen += wfdielen;
+       }
+#ifdef CONFIG_IOCTL_CFG80211
+       else if (pmlmepriv->wfd_probe_resp_ie != NULL && pmlmepriv->wfd_probe_resp_ie_len>0)
+       {
+               //WFD IE
+               _rtw_memcpy(pframe, pmlmepriv->wfd_probe_resp_ie, pmlmepriv->wfd_probe_resp_ie_len);
+               pattrib->pktlen += pmlmepriv->wfd_probe_resp_ie_len;
+               pframe += pmlmepriv->wfd_probe_resp_ie_len;
+       }
+#endif //CONFIG_IOCTL_CFG80211
+#endif //CONFIG_WFD
+
+       pattrib->last_txcmdsz = pattrib->pktlen;
+
+
+       dump_mgntframe(padapter, pmgntframe);
+
+       return;
+
+}
+
+int _issue_probereq_p2p(_adapter *padapter, u8 *da, int wait_ack)
+{
+       int ret = _FAIL;
+       struct xmit_frame               *pmgntframe;
+       struct pkt_attrib               *pattrib;
+       unsigned char                   *pframe;
+       struct rtw_ieee80211_hdr        *pwlanhdr;
+       unsigned short          *fctrl;
+       unsigned char                   *mac;
+       unsigned char                   bssrate[NumRates];
+       struct xmit_priv                *pxmitpriv = &(padapter->xmitpriv);
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       int     bssrate_len = 0;
+       u8      bc_addr[] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
+       struct wifidirect_info  *pwdinfo = &(padapter->wdinfo);
+       u8                                      wpsie[255] = { 0x00 }, p2pie[ 255 ] = { 0x00 };
+       u16                                     wpsielen = 0, p2pielen = 0;
+#ifdef CONFIG_WFD
+       u32                                     wfdielen = 0;
+#endif //CONFIG_WFD
+
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+
+
+       if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+       {
+               goto exit;
+       }
+
+       //update attribute
+       pattrib = &pmgntframe->attrib;
+       update_mgntframe_attrib(padapter, pattrib);
+
+
+       _rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
+
+       pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+
+       mac = myid(&(padapter->eeprompriv));
+
+       fctrl = &(pwlanhdr->frame_ctl);
+       *(fctrl) = 0;
+
+       if (da) {
+               _rtw_memcpy(pwlanhdr->addr1, da, ETH_ALEN);
+               _rtw_memcpy(pwlanhdr->addr3, da, ETH_ALEN);
+       } else {
+               if ( ( pwdinfo->p2p_info.scan_op_ch_only ) || ( pwdinfo->rx_invitereq_info.scan_op_ch_only ) )
+               {
+                       //      This two flags will be set when this is only the P2P client mode.
+                       _rtw_memcpy(pwlanhdr->addr1, pwdinfo->p2p_peer_interface_addr, ETH_ALEN);
+                       _rtw_memcpy(pwlanhdr->addr3, pwdinfo->p2p_peer_interface_addr, ETH_ALEN);
+               }
+               else
+               {
+                       //      broadcast probe request frame
+                       _rtw_memcpy(pwlanhdr->addr1, bc_addr, ETH_ALEN);
+                       _rtw_memcpy(pwlanhdr->addr3, bc_addr, ETH_ALEN);
+               }
+       }
+       _rtw_memcpy(pwlanhdr->addr2, mac, ETH_ALEN);
+
+       SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
+       pmlmeext->mgnt_seq++;
+       SetFrameSubType(pframe, WIFI_PROBEREQ);
+
+       pframe += sizeof (struct rtw_ieee80211_hdr_3addr);
+       pattrib->pktlen = sizeof (struct rtw_ieee80211_hdr_3addr);
+
+       if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_TX_PROVISION_DIS_REQ))
+       {
+               pframe = rtw_set_ie(pframe, _SSID_IE_, pwdinfo->tx_prov_disc_info.ssid.SsidLength, pwdinfo->tx_prov_disc_info.ssid.Ssid, &(pattrib->pktlen));
+       }
+       else
+       {
+               pframe = rtw_set_ie(pframe, _SSID_IE_, P2P_WILDCARD_SSID_LEN, pwdinfo->p2p_wildcard_ssid, &(pattrib->pktlen));
+       }
+       //      Use the OFDM rate in the P2P probe request frame. ( 6(B), 9(B), 12(B), 24(B), 36, 48, 54 )
+       pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_, 8, pwdinfo->support_rate, &pattrib->pktlen);
+
+#ifdef CONFIG_IOCTL_CFG80211
+       if(wdev_to_priv(padapter->rtw_wdev)->p2p_enabled && pwdinfo->driver_interface == DRIVER_CFG80211 )
+       {
+               if( pmlmepriv->wps_probe_req_ie != NULL && pmlmepriv->p2p_probe_req_ie != NULL )
+               {
+                       //WPS IE
+                       _rtw_memcpy(pframe, pmlmepriv->wps_probe_req_ie, pmlmepriv->wps_probe_req_ie_len);
+                       pattrib->pktlen += pmlmepriv->wps_probe_req_ie_len;
+                       pframe += pmlmepriv->wps_probe_req_ie_len;
+
+                       //P2P IE
+                       _rtw_memcpy(pframe, pmlmepriv->p2p_probe_req_ie, pmlmepriv->p2p_probe_req_ie_len);
+                       pattrib->pktlen += pmlmepriv->p2p_probe_req_ie_len;
+                       pframe += pmlmepriv->p2p_probe_req_ie_len;
+               }
+       }
+       else
+#endif //CONFIG_IOCTL_CFG80211
+       {
+
+               //      WPS IE
+               //      Noted by Albert 20110221
+               //      According to the WPS specification, all the WPS attribute is presented by Big Endian.
+
+               wpsielen = 0;
+               //      WPS OUI
+               *(u32*) ( wpsie ) = cpu_to_be32( WPSOUI );
+               wpsielen += 4;
+
+               //      WPS version
+               //      Type:
+               *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_VER1 );
+               wpsielen += 2;
+
+               //      Length:
+               *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0001 );
+               wpsielen += 2;
+
+               //      Value:
+               wpsie[wpsielen++] = WPS_VERSION_1;      //      Version 1.0
+
+               if( pmlmepriv->wps_probe_req_ie == NULL )
+               {
+                       //      UUID-E
+                       //      Type:
+                       *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_UUID_E );
+                       wpsielen += 2;
+
+                       //      Length:
+                       *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0010 );
+                       wpsielen += 2;
+
+                       //      Value:
+                       if (pwdinfo->external_uuid == 0) {
+                               _rtw_memset( wpsie + wpsielen, 0x0, 16 );
+                               _rtw_memcpy( wpsie + wpsielen, myid( &padapter->eeprompriv ), ETH_ALEN );
+                       } else {
+                               _rtw_memcpy( wpsie + wpsielen, pwdinfo->uuid, 0x10 );
+                       }
+                       wpsielen += 0x10;
+
+                       //      Config Method
+                       //      Type:
+                       *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_CONF_METHOD );
+                       wpsielen += 2;
+
+                       //      Length:
+                       *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0002 );
+                       wpsielen += 2;
+
+                       //      Value:
+                       *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( pwdinfo->supported_wps_cm );
+                       wpsielen += 2;
+               }
+
+               //      Device Name
+               //      Type:
+               *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_DEVICE_NAME );
+               wpsielen += 2;
+
+               //      Length:
+               *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( pwdinfo->device_name_len );
+               wpsielen += 2;
+
+               //      Value:
+               _rtw_memcpy( wpsie + wpsielen, pwdinfo->device_name, pwdinfo->device_name_len );
+               wpsielen += pwdinfo->device_name_len;
+
+               //      Primary Device Type
+               //      Type:
+               *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_PRIMARY_DEV_TYPE );
+               wpsielen += 2;
+
+               //      Length:
+               *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0008 );
+               wpsielen += 2;
+
+               //      Value:
+               //      Category ID
+               *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_PDT_CID_MULIT_MEDIA );
+               wpsielen += 2;
+
+               //      OUI
+               *(u32*) ( wpsie + wpsielen ) = cpu_to_be32( WPSOUI );
+               wpsielen += 4;
+
+               //      Sub Category ID
+               *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_PDT_SCID_MEDIA_SERVER );
+               wpsielen += 2;
+
+               //      Device Password ID
+               //      Type:
+               *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_DEVICE_PWID );
+               wpsielen += 2;
+
+               //      Length:
+               *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0002 );
+               wpsielen += 2;
+
+               //      Value:
+               *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_DPID_REGISTRAR_SPEC );  //      Registrar-specified
+               wpsielen += 2;
+
+               pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, wpsielen, (unsigned char *) wpsie, &pattrib->pktlen );
+
+               //      P2P OUI
+               p2pielen = 0;
+               p2pie[ p2pielen++ ] = 0x50;
+               p2pie[ p2pielen++ ] = 0x6F;
+               p2pie[ p2pielen++ ] = 0x9A;
+               p2pie[ p2pielen++ ] = 0x09;     //      WFA P2P v1.0
+
+               //      Commented by Albert 20110221
+               //      According to the P2P Specification, the probe request frame should contain 5 P2P attributes
+               //      1. P2P Capability
+               //      2. P2P Device ID if this probe request wants to find the specific P2P device
+               //      3. Listen Channel
+               //      4. Extended Listen Timing
+               //      5. Operating Channel if this WiFi is working as the group owner now
+
+               //      P2P Capability
+               //      Type:
+               p2pie[ p2pielen++ ] = P2P_ATTR_CAPABILITY;
+
+               //      Length:
+               *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0002 );
+               p2pielen += 2;
+
+               //      Value:
+               //      Device Capability Bitmap, 1 byte
+               p2pie[ p2pielen++ ] = DMP_P2P_DEVCAP_SUPPORT;
+
+               //      Group Capability Bitmap, 1 byte
+               if ( pwdinfo->persistent_supported )
+                       p2pie[ p2pielen++ ] = P2P_GRPCAP_PERSISTENT_GROUP | DMP_P2P_GRPCAP_SUPPORT;
+               else
+                       p2pie[ p2pielen++ ] = DMP_P2P_GRPCAP_SUPPORT;
+
+               //      Listen Channel
+               //      Type:
+               p2pie[ p2pielen++ ] = P2P_ATTR_LISTEN_CH;
+
+               //      Length:
+               *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0005 );
+               p2pielen += 2;
+
+               //      Value:
+               //      Country String
+               p2pie[ p2pielen++ ] = 'X';
+               p2pie[ p2pielen++ ] = 'X';
+
+               //      The third byte should be set to 0x04.
+               //      Described in the "Operating Channel Attribute" section.
+               p2pie[ p2pielen++ ] = 0x04;
+
+               //      Operating Class
+               p2pie[ p2pielen++ ] = 0x51;     //      Copy from SD7
+
+               //      Channel Number
+               p2pie[ p2pielen++ ] = pwdinfo->listen_channel;  //      listen channel
+
+
+               //      Extended Listen Timing
+               //      Type:
+               p2pie[ p2pielen++ ] = P2P_ATTR_EX_LISTEN_TIMING;
+
+               //      Length:
+               *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0004 );
+               p2pielen += 2;
+
+               //      Value:
+               //      Availability Period
+               *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0xFFFF );
+               p2pielen += 2;
+
+               //      Availability Interval
+               *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0xFFFF );
+               p2pielen += 2;
+
+               if ( rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO) )
+               {
+                       //      Operating Channel (if this WiFi is working as the group owner now)
+                       //      Type:
+                       p2pie[ p2pielen++ ] = P2P_ATTR_OPERATING_CH;
+
+                       //      Length:
+                       *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0005 );
+                       p2pielen += 2;
+
+                       //      Value:
+                       //      Country String
+                       p2pie[ p2pielen++ ] = 'X';
+                       p2pie[ p2pielen++ ] = 'X';
+
+                       //      The third byte should be set to 0x04.
+                       //      Described in the "Operating Channel Attribute" section.
+                       p2pie[ p2pielen++ ] = 0x04;
+
+                       //      Operating Class
+                       p2pie[ p2pielen++ ] = 0x51;     //      Copy from SD7
+
+                       //      Channel Number
+                       p2pie[ p2pielen++ ] = pwdinfo->operating_channel;       //      operating channel number
+
+               }
+
+               pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, p2pielen, (unsigned char *) p2pie, &pattrib->pktlen );
+
+               if( pmlmepriv->wps_probe_req_ie != NULL )
+               {
+                       //WPS IE
+                       _rtw_memcpy(pframe, pmlmepriv->wps_probe_req_ie, pmlmepriv->wps_probe_req_ie_len);
+                       pattrib->pktlen += pmlmepriv->wps_probe_req_ie_len;
+                       pframe += pmlmepriv->wps_probe_req_ie_len;
+               }
+       }
+
+#ifdef CONFIG_WFD
+#ifdef CONFIG_IOCTL_CFG80211
+       if ( _TRUE == pwdinfo->wfd_info->wfd_enable )
+#endif
+       {
+               wfdielen = build_probe_req_wfd_ie(pwdinfo, pframe);
+               pframe += wfdielen;
+               pattrib->pktlen += wfdielen;
+       }
+#ifdef CONFIG_IOCTL_CFG80211
+       else if (pmlmepriv->wfd_probe_req_ie != NULL && pmlmepriv->wfd_probe_req_ie_len>0)
+       {
+               //WFD IE
+               _rtw_memcpy(pframe, pmlmepriv->wfd_probe_req_ie, pmlmepriv->wfd_probe_req_ie_len);
+               pattrib->pktlen += pmlmepriv->wfd_probe_req_ie_len;
+               pframe += pmlmepriv->wfd_probe_req_ie_len;
+       }
+#endif //CONFIG_IOCTL_CFG80211
+#endif //CONFIG_WFD
+
+       pattrib->last_txcmdsz = pattrib->pktlen;
+
+       RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("issuing probe_req, tx_len=%d\n", pattrib->last_txcmdsz));
+
+       if (wait_ack) {
+               ret = dump_mgntframe_and_wait_ack(padapter, pmgntframe);
+       } else {
+               dump_mgntframe(padapter, pmgntframe);
+               ret = _SUCCESS;
+       }
+
+exit:
+       return ret;
+}
+
+inline void issue_probereq_p2p(_adapter *adapter, u8 *da)
+{
+       _issue_probereq_p2p(adapter, da, _FALSE);
+}
+
+int issue_probereq_p2p_ex(_adapter *adapter, u8 *da, int try_cnt, int wait_ms)
+{
+       int ret;
+       int i = 0;
+       u32 start = rtw_get_current_time();
+
+       do
+       {
+               ret = _issue_probereq_p2p(adapter, da, wait_ms>0?_TRUE:_FALSE);
+
+               i++;
+
+               if (adapter->bDriverStopped || adapter->bSurpriseRemoved)
+                       break;
+
+               if(i < try_cnt && wait_ms > 0 && ret==_FAIL)
+                       rtw_msleep_os(wait_ms);
+
+       }while((i<try_cnt) && ((ret==_FAIL)||(wait_ms==0)));
+
+       if (ret != _FAIL) {
+               ret = _SUCCESS;
+               #ifndef DBG_XMIT_ACK
+               goto exit;
+               #endif
+       }
+
+       if (try_cnt && wait_ms) {
+               if (da)
+                       DBG_871X(FUNC_ADPT_FMT" to "MAC_FMT", ch:%u%s, %d/%d in %u ms\n",
+                               FUNC_ADPT_ARG(adapter), MAC_ARG(da), rtw_get_oper_ch(adapter),
+                               ret==_SUCCESS?", acked":"", i, try_cnt, rtw_get_passing_time_ms(start));
+               else
+                       DBG_871X(FUNC_ADPT_FMT", ch:%u%s, %d/%d in %u ms\n",
+                               FUNC_ADPT_ARG(adapter), rtw_get_oper_ch(adapter),
+                               ret==_SUCCESS?", acked":"", i, try_cnt, rtw_get_passing_time_ms(start));
+       }
+exit:
+       return ret;
+}
+
+#endif //CONFIG_P2P
+
+s32 rtw_action_public_decache(union recv_frame *recv_frame, s32 token)
+{
+       _adapter *adapter = recv_frame->u.hdr.adapter;
+       struct mlme_ext_priv *mlmeext = &(adapter->mlmeextpriv);
+       u8 *frame = recv_frame->u.hdr.rx_data;
+       u16 seq_ctrl = ( (recv_frame->u.hdr.attrib.seq_num&0xffff) << 4) |
+               (recv_frame->u.hdr.attrib.frag_num & 0xf);
+
+       if (GetRetry(frame)) {
+               if (token >= 0) {
+                       if ((seq_ctrl == mlmeext->action_public_rxseq)
+                               && (token == mlmeext->action_public_dialog_token))
+                       {
+                               DBG_871X(FUNC_ADPT_FMT" seq_ctrl=0x%x, rxseq=0x%x, token:%d\n",
+                                       FUNC_ADPT_ARG(adapter), seq_ctrl, mlmeext->action_public_rxseq, token);
+                               return _FAIL;
+                       }
+               } else {
+                       if (seq_ctrl == mlmeext->action_public_rxseq) {
+                               DBG_871X(FUNC_ADPT_FMT" seq_ctrl=0x%x, rxseq=0x%x\n",
+                                       FUNC_ADPT_ARG(adapter), seq_ctrl, mlmeext->action_public_rxseq);
+                               return _FAIL;
+                       }
+               }
+       }
+
+       mlmeext->action_public_rxseq = seq_ctrl;
+
+       if (token >= 0)
+               mlmeext->action_public_dialog_token = token;
+
+       return _SUCCESS;
+}
+
+unsigned int on_action_public_p2p(union recv_frame *precv_frame)
+{
+       _adapter *padapter = precv_frame->u.hdr.adapter;
+       u8 *pframe = precv_frame->u.hdr.rx_data;
+       uint len = precv_frame->u.hdr.len;
+       u8 *frame_body;
+       u8 dialogToken=0;
+#ifdef CONFIG_P2P
+       u8 *p2p_ie;
+       u32     p2p_ielen, wps_ielen;
+       struct  wifidirect_info *pwdinfo = &( padapter->wdinfo );
+       u8      result = P2P_STATUS_SUCCESS;
+       u8      empty_addr[ETH_ALEN] = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 };
+       u8 *merged_p2pie = NULL;
+       u32 merged_p2p_ielen = 0;
+#endif //CONFIG_P2P
+
+       frame_body = (unsigned char *)(pframe + sizeof(struct rtw_ieee80211_hdr_3addr));
+
+       dialogToken = frame_body[7];
+
+       if (rtw_action_public_decache(precv_frame, dialogToken) == _FAIL)
+               return _FAIL;
+
+#ifdef CONFIG_P2P
+       _cancel_timer_ex( &pwdinfo->reset_ch_sitesurvey );
+#ifdef CONFIG_IOCTL_CFG80211
+       if(wdev_to_priv(padapter->rtw_wdev)->p2p_enabled && pwdinfo->driver_interface == DRIVER_CFG80211)
+       {
+               rtw_cfg80211_rx_p2p_action_public(padapter, pframe, len);
+       }
+       else
+#endif //CONFIG_IOCTL_CFG80211
+       {
+               //      Do nothing if the driver doesn't enable the P2P function.
+               if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE) || rtw_p2p_chk_state(pwdinfo, P2P_STATE_IDLE))
+                       return _SUCCESS;
+
+               len -= sizeof(struct rtw_ieee80211_hdr_3addr);
+
+               switch( frame_body[ 6 ] )//OUI Subtype
+               {
+                       case P2P_GO_NEGO_REQ:
+                       {
+                               DBG_871X( "[%s] Got GO Nego Req Frame\n", __FUNCTION__);
+                               _rtw_memset( &pwdinfo->groupid_info, 0x00, sizeof( struct group_id_info ) );
+
+                               if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_RX_PROVISION_DIS_REQ))
+                               {
+                                       rtw_p2p_set_state(pwdinfo, rtw_p2p_pre_state(pwdinfo));
+                               }
+
+                               if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_FAIL))
+                               {
+                                       //      Commented by Albert 20110526
+                                       //      In this case, this means the previous nego fail doesn't be reset yet.
+                                       _cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
+                                       //      Restore the previous p2p state
+                                       rtw_p2p_set_state(pwdinfo, rtw_p2p_pre_state(pwdinfo));
+                                       DBG_871X( "[%s] Restore the previous p2p state to %d\n", __FUNCTION__, rtw_p2p_state(pwdinfo) );
+                               }
+#ifdef CONFIG_CONCURRENT_MODE
+                               if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
+                               {
+                                       _cancel_timer_ex( &pwdinfo->ap_p2p_switch_timer );
+                               }
+#endif // CONFIG_CONCURRENT_MODE
+
+                               //      Commented by Kurt 20110902
+                               //Add if statement to avoid receiving duplicate prov disc req. such that pre_p2p_state would be covered.
+                               if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_ING))
+                                       rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
+
+                               //      Commented by Kurt 20120113
+                               //      Get peer_dev_addr here if peer doesn't issue prov_disc frame.
+                               if( _rtw_memcmp(pwdinfo->rx_prov_disc_info.peerDevAddr, empty_addr, ETH_ALEN) );
+                                       _rtw_memcpy(pwdinfo->rx_prov_disc_info.peerDevAddr, GetAddr2Ptr(pframe), ETH_ALEN);
+
+                               result = process_p2p_group_negotation_req( pwdinfo, frame_body, len );
+                               issue_p2p_GO_response( padapter, GetAddr2Ptr(pframe), frame_body, len, result );
+#ifdef CONFIG_INTEL_WIDI
+                               if( (padapter->mlmepriv.widi_state == INTEL_WIDI_STATE_LISTEN) && (padapter->mlmepriv.widi_state != INTEL_WIDI_STATE_WFD_CONNECTION) )
+                               {
+                                       padapter->mlmepriv.widi_state = INTEL_WIDI_STATE_WFD_CONNECTION;
+                                       _cancel_timer_ex(&(padapter->mlmepriv.listen_timer));
+                                       intel_widi_wk_cmd(padapter, INTEL_WIDI_LISTEN_STOP_WK, NULL);
+                               }
+#endif //CONFIG_INTEL_WIDI
+
+                               //      Commented by Albert 20110718
+                               //      No matter negotiating or negotiation failure, the driver should set up the restore P2P state timer.
+#ifdef CONFIG_CONCURRENT_MODE
+                               //      Commented by Albert 20120107
+                               _set_timer( &pwdinfo->restore_p2p_state_timer, 3000 );
+#else // CONFIG_CONCURRENT_MODE
+                               _set_timer( &pwdinfo->restore_p2p_state_timer, 5000 );
+#endif // CONFIG_CONCURRENT_MODE
+                               break;
+                       }
+                       case P2P_GO_NEGO_RESP:
+                       {
+                               DBG_871X( "[%s] Got GO Nego Resp Frame\n", __FUNCTION__);
+
+                               if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_ING))
+                               {
+                                       //      Commented by Albert 20110425
+                                       //      The restore timer is enabled when issuing the nego request frame of rtw_p2p_connect function.
+                                       _cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
+                                       pwdinfo->nego_req_info.benable = _FALSE;
+                                       result = process_p2p_group_negotation_resp( pwdinfo, frame_body, len);
+                                       issue_p2p_GO_confirm( pwdinfo->padapter, GetAddr2Ptr(pframe), result);
+                                       if ( P2P_STATUS_SUCCESS == result )
+                                       {
+                                               if ( rtw_p2p_role(pwdinfo) == P2P_ROLE_CLIENT )
+                                               {
+                                                       pwdinfo->p2p_info.operation_ch[ 0 ] = pwdinfo->peer_operating_ch;
+                                                       #ifdef P2P_OP_CHECK_SOCIAL_CH
+                                                       pwdinfo->p2p_info.operation_ch[ 1 ] = 1;        //Check whether GO is operating in channel 1;
+                                                       pwdinfo->p2p_info.operation_ch[ 2 ] = 6;        //Check whether GO is operating in channel 6;
+                                                       pwdinfo->p2p_info.operation_ch[ 3 ] = 11;       //Check whether GO is operating in channel 11;
+                                                       #endif //P2P_OP_CHECK_SOCIAL_CH
+                                                       pwdinfo->p2p_info.scan_op_ch_only = 1;
+                                                       _set_timer( &pwdinfo->reset_ch_sitesurvey2, P2P_RESET_SCAN_CH );
+                                               }
+                                       }
+
+                                       //      Reset the dialog token for group negotiation frames.
+                                       pwdinfo->negotiation_dialog_token = 1;
+
+                                       if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_FAIL))
+                                       {
+                                               _set_timer( &pwdinfo->restore_p2p_state_timer, 5000 );
+                                       }
+                               }
+                               else
+                               {
+                                       DBG_871X( "[%s] Skipped GO Nego Resp Frame (p2p_state != P2P_STATE_GONEGO_ING)\n", __FUNCTION__);
+                               }
+
+                               break;
+                       }
+                       case P2P_GO_NEGO_CONF:
+                       {
+                               DBG_871X( "[%s] Got GO Nego Confirm Frame\n", __FUNCTION__);
+                               result = process_p2p_group_negotation_confirm( pwdinfo, frame_body, len);
+                               if ( P2P_STATUS_SUCCESS == result )
+                               {
+                                       if ( rtw_p2p_role(pwdinfo) == P2P_ROLE_CLIENT )
+                                       {
+                                               pwdinfo->p2p_info.operation_ch[ 0 ] = pwdinfo->peer_operating_ch;
+                                               #ifdef P2P_OP_CHECK_SOCIAL_CH
+                                               pwdinfo->p2p_info.operation_ch[ 1 ] = 1;        //Check whether GO is operating in channel 1;
+                                               pwdinfo->p2p_info.operation_ch[ 2 ] = 6;        //Check whether GO is operating in channel 6;
+                                               pwdinfo->p2p_info.operation_ch[ 3 ] = 11;       //Check whether GO is operating in channel 11;
+                                               #endif //P2P_OP_CHECK_SOCIAL_CH
+                                               pwdinfo->p2p_info.scan_op_ch_only = 1;
+                                               _set_timer( &pwdinfo->reset_ch_sitesurvey2, P2P_RESET_SCAN_CH );
+                                       }
+                               }
+                               break;
+                       }
+                       case P2P_INVIT_REQ:
+                       {
+                               //      Added by Albert 2010/10/05
+                               //      Received the P2P Invite Request frame.
+
+                               DBG_871X( "[%s] Got invite request frame!\n", __FUNCTION__ );
+                               if ( (p2p_ie=rtw_get_p2p_ie( frame_body + _PUBLIC_ACTION_IE_OFFSET_, len - _PUBLIC_ACTION_IE_OFFSET_, NULL, &p2p_ielen)) )
+                               {
+                                       //      Parse the necessary information from the P2P Invitation Request frame.
+                                       //      For example: The MAC address of sending this P2P Invitation Request frame.
+                                       u32     attr_contentlen = 0;
+                                       u8      status_code = P2P_STATUS_FAIL_INFO_UNAVAILABLE;
+                                       struct group_id_info group_id;
+                                       u8      invitation_flag = 0;
+
+                                       merged_p2p_ielen = rtw_get_p2p_merged_ies_len(frame_body + _PUBLIC_ACTION_IE_OFFSET_, len - _PUBLIC_ACTION_IE_OFFSET_);
+
+                                       merged_p2pie = rtw_malloc(merged_p2p_ielen);
+                                       if (merged_p2pie == NULL)
+                                       {
+                                               DBG_871X( "[%s] Malloc p2p ie fail\n", __FUNCTION__);
+                                               goto exit;
+                                       }
+                                       _rtw_memset(merged_p2pie, 0x00, merged_p2p_ielen);
+
+                                       merged_p2p_ielen = rtw_p2p_merge_ies(frame_body + _PUBLIC_ACTION_IE_OFFSET_, len - _PUBLIC_ACTION_IE_OFFSET_, merged_p2pie);
+
+                                       rtw_get_p2p_attr_content( merged_p2pie, merged_p2p_ielen, P2P_ATTR_INVITATION_FLAGS, &invitation_flag, &attr_contentlen);
+                                       if ( attr_contentlen )
+                                       {
+
+                                               rtw_get_p2p_attr_content( merged_p2pie, merged_p2p_ielen, P2P_ATTR_GROUP_BSSID, pwdinfo->p2p_peer_interface_addr, &attr_contentlen);
+                                               //      Commented by Albert 20120510
+                                               //      Copy to the pwdinfo->p2p_peer_interface_addr.
+                                               //      So that the WFD UI ( or Sigma ) can get the peer interface address by using the following command.
+                                               //      #> iwpriv wlan0 p2p_get peer_ifa
+                                               //      After having the peer interface address, the sigma can find the correct conf file for wpa_supplicant.
+
+                                               if ( attr_contentlen )
+                                               {
+                                                       DBG_871X( "[%s] GO's BSSID = %.2X %.2X %.2X %.2X %.2X %.2X\n", __FUNCTION__,
+                                                                       pwdinfo->p2p_peer_interface_addr[0], pwdinfo->p2p_peer_interface_addr[1],
+                                                                       pwdinfo->p2p_peer_interface_addr[2], pwdinfo->p2p_peer_interface_addr[3],
+                                                                       pwdinfo->p2p_peer_interface_addr[4], pwdinfo->p2p_peer_interface_addr[5] );
+                                               }
+
+                                               if ( invitation_flag & P2P_INVITATION_FLAGS_PERSISTENT )
+                                               {
+                                                       //      Re-invoke the persistent group.
+
+                                                       _rtw_memset( &group_id, 0x00, sizeof( struct group_id_info ) );
+                                                       rtw_get_p2p_attr_content( merged_p2pie, merged_p2p_ielen, P2P_ATTR_GROUP_ID, ( u8* ) &group_id, &attr_contentlen);
+                                                       if ( attr_contentlen )
+                                                       {
+                                                               if ( _rtw_memcmp( group_id.go_device_addr, myid( &padapter->eeprompriv ), ETH_ALEN ) )
+                                                               {
+                                                                       //      The p2p device sending this p2p invitation request wants this Wi-Fi device to be the persistent GO.
+                                                                       rtw_p2p_set_state(pwdinfo, P2P_STATE_RECV_INVITE_REQ_GO );
+                                                                       rtw_p2p_set_role( pwdinfo, P2P_ROLE_GO );
+                                                                       status_code = P2P_STATUS_SUCCESS;
+                                                               }
+                                                               else
+                                                               {
+                                                                       //      The p2p device sending this p2p invitation request wants to be the persistent GO.
+                                                                       if ( is_matched_in_profilelist( pwdinfo->p2p_peer_interface_addr, &pwdinfo->profileinfo[ 0 ] ) )
+                                                                       {
+                                                                               u8 operatingch_info[5] = { 0x00 };
+
+                                                                               if ( rtw_get_p2p_attr_content(merged_p2pie, merged_p2p_ielen, P2P_ATTR_OPERATING_CH, operatingch_info, &attr_contentlen) )
+                                                                               {
+                                                                                       if( rtw_ch_set_search_ch(padapter->mlmeextpriv.channel_set, (u32)operatingch_info[4] ) >= 0 )
+                                                                                       {
+                                                                                               //      The operating channel is acceptable for this device.
+                                                                                               pwdinfo->rx_invitereq_info.operation_ch[0]= operatingch_info[4];
+                                                                                               #ifdef P2P_OP_CHECK_SOCIAL_CH
+                                                                                               pwdinfo->rx_invitereq_info.operation_ch[1]= 1;          //Check whether GO is operating in channel 1;
+                                                                                               pwdinfo->rx_invitereq_info.operation_ch[2]= 6;          //Check whether GO is operating in channel 6;
+                                                                                               pwdinfo->rx_invitereq_info.operation_ch[3]= 11;         //Check whether GO is operating in channel 11;
+                                                                                               #endif //P2P_OP_CHECK_SOCIAL_CH
+                                                                                               pwdinfo->rx_invitereq_info.scan_op_ch_only = 1;
+                                                                                               _set_timer( &pwdinfo->reset_ch_sitesurvey, P2P_RESET_SCAN_CH );
+                                                                                               rtw_p2p_set_state(pwdinfo, P2P_STATE_RECV_INVITE_REQ_MATCH );
+                                                                                               rtw_p2p_set_role( pwdinfo, P2P_ROLE_CLIENT );
+                                                                                               status_code = P2P_STATUS_SUCCESS;
+                                                                                       }
+                                                                                       else
+                                                                                       {
+                                                                                               //      The operating channel isn't supported by this device.
+                                                                                               rtw_p2p_set_state(pwdinfo, P2P_STATE_RECV_INVITE_REQ_DISMATCH );
+                                                                                               rtw_p2p_set_role( pwdinfo, P2P_ROLE_DEVICE );
+                                                                                               status_code = P2P_STATUS_FAIL_NO_COMMON_CH;
+                                                                                               _set_timer( &pwdinfo->restore_p2p_state_timer, 3000 );
+                                                                                       }
+                                                                               }
+                                                                               else
+                                                                               {
+                                                                                       //      Commented by Albert 20121130
+                                                                                       //      Intel will use the different P2P IE to store the operating channel information
+                                                                                       //      Workaround for Intel WiDi 3.5
+                                                                                       rtw_p2p_set_state(pwdinfo, P2P_STATE_RECV_INVITE_REQ_MATCH );
+                                                                                       rtw_p2p_set_role( pwdinfo, P2P_ROLE_CLIENT );
+                                                                                       status_code = P2P_STATUS_SUCCESS;
+                                                                               }
+                                                                       }
+                                                                       else
+                                                                       {
+                                                                               rtw_p2p_set_state(pwdinfo, P2P_STATE_RECV_INVITE_REQ_DISMATCH );
+                                                                               #ifdef CONFIG_INTEL_WIDI
+                                                                               _rtw_memcpy( pwdinfo->p2p_peer_device_addr, group_id.go_device_addr , ETH_ALEN );
+                                                                               rtw_p2p_set_role( pwdinfo, P2P_ROLE_CLIENT );
+                                                                               #endif //CONFIG_INTEL_WIDI
+
+                                                                               status_code = P2P_STATUS_FAIL_UNKNOWN_P2PGROUP;
+                                                                       }
+                                                               }
+                                                       }
+                                                       else
+                                                       {
+                                                               DBG_871X( "[%s] P2P Group ID Attribute NOT FOUND!\n", __FUNCTION__ );
+                                                               status_code = P2P_STATUS_FAIL_INFO_UNAVAILABLE;
+                                                       }
+                                               }
+                                               else
+                                               {
+                                                       //      Received the invitation to join a P2P group.
+
+                                                       _rtw_memset( &group_id, 0x00, sizeof( struct group_id_info ) );
+                                                       rtw_get_p2p_attr_content( merged_p2pie, merged_p2p_ielen, P2P_ATTR_GROUP_ID, ( u8* ) &group_id, &attr_contentlen);
+                                                       if ( attr_contentlen )
+                                                       {
+                                                               if ( _rtw_memcmp( group_id.go_device_addr, myid( &padapter->eeprompriv ), ETH_ALEN ) )
+                                                               {
+                                                                       //      In this case, the GO can't be myself.
+                                                                       rtw_p2p_set_state(pwdinfo, P2P_STATE_RECV_INVITE_REQ_DISMATCH );
+                                                                       status_code = P2P_STATUS_FAIL_INFO_UNAVAILABLE;
+                                                               }
+                                                               else
+                                                               {
+                                                                       //      The p2p device sending this p2p invitation request wants to join an existing P2P group
+                                                                       //      Commented by Albert 2012/06/28
+                                                                       //      In this case, this Wi-Fi device should use the iwpriv command to get the peer device address.
+                                                                       //      The peer device address should be the destination address for the provisioning discovery request.
+                                                                       //      Then, this Wi-Fi device should use the iwpriv command to get the peer interface address.
+                                                                       //      The peer interface address should be the address for WPS mac address
+                                                                       _rtw_memcpy( pwdinfo->p2p_peer_device_addr, group_id.go_device_addr , ETH_ALEN );
+                                                                       rtw_p2p_set_role( pwdinfo, P2P_ROLE_CLIENT );
+                                                                       rtw_p2p_set_state(pwdinfo, P2P_STATE_RECV_INVITE_REQ_JOIN );
+                                                                       status_code = P2P_STATUS_SUCCESS;
+                                                               }
+                                                       }
+                                                       else
+                                                       {
+                                                               DBG_871X( "[%s] P2P Group ID Attribute NOT FOUND!\n", __FUNCTION__ );
+                                                               status_code = P2P_STATUS_FAIL_INFO_UNAVAILABLE;
+                                                       }
+                                               }
+                                       }
+                                       else
+                                       {
+                                               DBG_871X( "[%s] P2P Invitation Flags Attribute NOT FOUND!\n", __FUNCTION__ );
+                                               status_code = P2P_STATUS_FAIL_INFO_UNAVAILABLE;
+                                       }
+
+                                       DBG_871X( "[%s] status_code = %d\n", __FUNCTION__, status_code );
+
+                                       pwdinfo->inviteresp_info.token = frame_body[ 7 ];
+                                       issue_p2p_invitation_response( padapter, GetAddr2Ptr(pframe), pwdinfo->inviteresp_info.token, status_code );
+                                       _set_timer( &pwdinfo->restore_p2p_state_timer, 3000 );
+                               }
+#ifdef CONFIG_INTEL_WIDI
+                               if( (padapter->mlmepriv.widi_state == INTEL_WIDI_STATE_LISTEN) && (padapter->mlmepriv.widi_state != INTEL_WIDI_STATE_WFD_CONNECTION) )
+                               {
+                                       padapter->mlmepriv.widi_state = INTEL_WIDI_STATE_WFD_CONNECTION;
+                                       _cancel_timer_ex(&(padapter->mlmepriv.listen_timer));
+                                       intel_widi_wk_cmd(padapter, INTEL_WIDI_LISTEN_STOP_WK, NULL);
+                               }
+#endif //CONFIG_INTEL_WIDI
+                               break;
+                       }
+                       case P2P_INVIT_RESP:
+                       {
+                               u8      attr_content = 0x00;
+                               u32     attr_contentlen = 0;
+
+                               DBG_871X( "[%s] Got invite response frame!\n", __FUNCTION__ );
+                               _cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
+                               if ( (p2p_ie=rtw_get_p2p_ie( frame_body + _PUBLIC_ACTION_IE_OFFSET_, len - _PUBLIC_ACTION_IE_OFFSET_, NULL, &p2p_ielen)) )
+                               {
+                                       rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_STATUS, &attr_content, &attr_contentlen);
+
+                                       if ( attr_contentlen == 1 )
+                                       {
+                                               DBG_871X( "[%s] Status = %d\n", __FUNCTION__, attr_content );
+                                               pwdinfo->invitereq_info.benable = _FALSE;
+
+                                               if ( attr_content == P2P_STATUS_SUCCESS )
+                                               {
+                                                       if ( _rtw_memcmp( pwdinfo->invitereq_info.go_bssid, myid( &padapter->eeprompriv ), ETH_ALEN ))
+                                                       {
+                                                               rtw_p2p_set_role(pwdinfo, P2P_ROLE_GO );
+                                                       }
+                                                       else
+                                                       {
+                                                               rtw_p2p_set_role(pwdinfo, P2P_ROLE_CLIENT);
+                                                       }
+                                                       rtw_p2p_set_state( pwdinfo, P2P_STATE_RX_INVITE_RESP_OK );
+                                               }
+                                               else
+                                               {
+                                                       rtw_p2p_set_role(pwdinfo, P2P_ROLE_DEVICE);
+                                                       rtw_p2p_set_state( pwdinfo, P2P_STATE_RX_INVITE_RESP_FAIL );
+                                               }
+                                       }
+                                       else
+                                       {
+                                               rtw_p2p_set_role(pwdinfo, P2P_ROLE_DEVICE);
+                                               rtw_p2p_set_state( pwdinfo, P2P_STATE_RX_INVITE_RESP_FAIL );
+                                       }
+                               }
+                               else
+                               {
+                                       rtw_p2p_set_role(pwdinfo, P2P_ROLE_DEVICE);
+                                       rtw_p2p_set_state( pwdinfo, P2P_STATE_RX_INVITE_RESP_FAIL );
+                               }
+
+                               if ( rtw_p2p_chk_state( pwdinfo, P2P_STATE_RX_INVITE_RESP_FAIL ) )
+                               {
+                                       _set_timer( &pwdinfo->restore_p2p_state_timer, 5000 );
+                               }
+                               break;
+                       }
+                       case P2P_DEVDISC_REQ:
+
+                               process_p2p_devdisc_req(pwdinfo, pframe, len);
+
+                               break;
+
+                       case P2P_DEVDISC_RESP:
+
+                               process_p2p_devdisc_resp(pwdinfo, pframe, len);
+
+                               break;
+
+                       case P2P_PROVISION_DISC_REQ:
+                               DBG_871X( "[%s] Got Provisioning Discovery Request Frame\n", __FUNCTION__ );
+                               process_p2p_provdisc_req(pwdinfo, pframe, len);
+                               _rtw_memcpy(pwdinfo->rx_prov_disc_info.peerDevAddr, GetAddr2Ptr(pframe), ETH_ALEN);
+
+                               //20110902 Kurt
+                               //Add the following statement to avoid receiving duplicate prov disc req. such that pre_p2p_state would be covered.
+                               if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_RX_PROVISION_DIS_REQ))
+                                       rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
+
+                               rtw_p2p_set_state(pwdinfo, P2P_STATE_RX_PROVISION_DIS_REQ);
+                               _set_timer( &pwdinfo->restore_p2p_state_timer, P2P_PROVISION_TIMEOUT );
+#ifdef CONFIG_INTEL_WIDI
+                               if( (padapter->mlmepriv.widi_state == INTEL_WIDI_STATE_LISTEN) && (padapter->mlmepriv.widi_state != INTEL_WIDI_STATE_WFD_CONNECTION) )
+                               {
+                                       padapter->mlmepriv.widi_state = INTEL_WIDI_STATE_WFD_CONNECTION;
+                                       _cancel_timer_ex(&(padapter->mlmepriv.listen_timer));
+                                       intel_widi_wk_cmd(padapter, INTEL_WIDI_LISTEN_STOP_WK, NULL);
+                               }
+#endif //CONFIG_INTEL_WIDI
+                               break;
+
+                       case P2P_PROVISION_DISC_RESP:
+                               //      Commented by Albert 20110707
+                               //      Should we check the pwdinfo->tx_prov_disc_info.bsent flag here??
+                               DBG_871X( "[%s] Got Provisioning Discovery Response Frame\n", __FUNCTION__ );
+                               //      Commented by Albert 20110426
+                               //      The restore timer is enabled when issuing the provisioing request frame in rtw_p2p_prov_disc function.
+                               _cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
+                               rtw_p2p_set_state(pwdinfo, P2P_STATE_RX_PROVISION_DIS_RSP);
+                               process_p2p_provdisc_resp(pwdinfo, pframe);
+                               _set_timer( &pwdinfo->restore_p2p_state_timer, P2P_PROVISION_TIMEOUT );
+                               break;
+
+               }
+       }
+#endif //CONFIG_P2P
+
+exit:
+
+       if(merged_p2pie)
+       {
+               rtw_mfree(merged_p2pie, merged_p2p_ielen);
+       }
+
+       return _SUCCESS;
+}
+
+unsigned int on_action_public_vendor(union recv_frame *precv_frame)
+{
+       unsigned int ret = _FAIL;
+       u8 *pframe = precv_frame->u.hdr.rx_data;
+       uint frame_len = precv_frame->u.hdr.len;
+       u8 *frame_body = pframe + sizeof(struct rtw_ieee80211_hdr_3addr);
+
+       if (_rtw_memcmp(frame_body + 2, P2P_OUI, 4) == _TRUE) {
+               ret = on_action_public_p2p(precv_frame);
+       }
+
+       return ret;
+}
+
+unsigned int on_action_public_default(union recv_frame *precv_frame, u8 action)
+{
+       unsigned int ret = _FAIL;
+       u8 *pframe = precv_frame->u.hdr.rx_data;
+       uint frame_len = precv_frame->u.hdr.len;
+       u8 *frame_body = pframe + sizeof(struct rtw_ieee80211_hdr_3addr);
+       u8 token;
+       _adapter *adapter = precv_frame->u.hdr.adapter;
+       int cnt = 0;
+       char msg[64];
+
+       token = frame_body[2];
+
+       if (rtw_action_public_decache(precv_frame, token) == _FAIL)
+               goto exit;
+
+       #ifdef CONFIG_IOCTL_CFG80211
+       cnt += sprintf((msg+cnt), "%s(token:%u)", action_public_str(action), token);
+       rtw_cfg80211_rx_action(adapter, pframe, frame_len, msg);
+       #endif
+
+       ret = _SUCCESS;
+
+exit:
+       return ret;
+}
+
+unsigned int on_action_public(_adapter *padapter, union recv_frame *precv_frame)
+{
+       unsigned int ret = _FAIL;
+       u8 *pframe = precv_frame->u.hdr.rx_data;
+       uint frame_len = precv_frame->u.hdr.len;
+       u8 *frame_body = pframe + sizeof(struct rtw_ieee80211_hdr_3addr);
+       u8 category, action;
+
+       /* check RA matches or not */
+       if (!_rtw_memcmp(myid(&(padapter->eeprompriv)), GetAddr1Ptr(pframe), ETH_ALEN))
+               goto exit;
+
+       category = frame_body[0];
+       if(category != RTW_WLAN_CATEGORY_PUBLIC)
+               goto exit;
+
+       action = frame_body[1];
+       switch (action) {
+       case ACT_PUBLIC_VENDOR:
+               ret = on_action_public_vendor(precv_frame);
+               break;
+       default:
+               ret = on_action_public_default(precv_frame, action);
+               break;
+       }
+
+exit:
+       return ret;
+}
+
+unsigned int OnAction_ht(_adapter *padapter, union recv_frame *precv_frame)
+{
+       return _SUCCESS;
+}
+
+#ifdef CONFIG_IEEE80211W
+unsigned int OnAction_sa_query(_adapter *padapter, union recv_frame *precv_frame)
+{
+       u8 *pframe = precv_frame->u.hdr.rx_data;
+       struct rx_pkt_attrib *pattrib = &precv_frame->u.hdr.attrib;
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       unsigned short tid;
+       //Baron
+
+       DBG_871X("OnAction_sa_query\n");
+
+       switch (pframe[WLAN_HDR_A3_LEN+1])
+       {
+               case 0: //SA Query req
+                       _rtw_memcpy(&tid, &pframe[WLAN_HDR_A3_LEN+2], sizeof(unsigned short));
+                       DBG_871X("OnAction_sa_query request,action=%d, tid=%04x\n", pframe[WLAN_HDR_A3_LEN+1], tid);
+                       issue_action_SA_Query(padapter, GetAddr2Ptr(pframe), 1, tid);
+                       break;
+
+               case 1: //SA Query rsp
+                       _cancel_timer_ex(&pmlmeext->sa_query_timer);
+                       DBG_871X("OnAction_sa_query response,action=%d, tid=%04x, cancel timer\n", pframe[WLAN_HDR_A3_LEN+1], pframe[WLAN_HDR_A3_LEN+2]);
+                       break;
+               default:
+                       break;
+       }
+       if(0)
+       {
+               int pp;
+               printk("pattrib->pktlen = %d =>", pattrib->pkt_len);
+               for(pp=0;pp< pattrib->pkt_len; pp++)
+                       printk(" %02x ", pframe[pp]);
+               printk("\n");
+       }
+
+       return _SUCCESS;
+}
+#endif //CONFIG_IEEE80211W
+
+unsigned int OnAction_wmm(_adapter *padapter, union recv_frame *precv_frame)
+{
+       return _SUCCESS;
+}
+
+unsigned int OnAction_p2p(_adapter *padapter, union recv_frame *precv_frame)
+{
+#ifdef CONFIG_P2P
+       u8 *frame_body;
+       u8 category, OUI_Subtype, dialogToken=0;
+       u8 *pframe = precv_frame->u.hdr.rx_data;
+       uint len = precv_frame->u.hdr.len;
+       struct  wifidirect_info *pwdinfo = &( padapter->wdinfo );
+
+
+       DBG_871X("%s\n", __FUNCTION__);
+
+       //check RA matches or not
+       if (!_rtw_memcmp(myid(&(padapter->eeprompriv)), GetAddr1Ptr(pframe), ETH_ALEN))//for if1, sta/ap mode
+               return _SUCCESS;
+
+       frame_body = (unsigned char *)(pframe + sizeof(struct rtw_ieee80211_hdr_3addr));
+
+       category = frame_body[0];
+       if(category != RTW_WLAN_CATEGORY_P2P)
+               return _SUCCESS;
+
+       if ( cpu_to_be32( *( ( u32* ) ( frame_body + 1 ) ) ) != P2POUI )
+               return _SUCCESS;
+
+#ifdef CONFIG_IOCTL_CFG80211
+       if(wdev_to_priv(padapter->rtw_wdev)->p2p_enabled && pwdinfo->driver_interface == DRIVER_CFG80211 )
+       {
+               rtw_cfg80211_rx_action_p2p(padapter, pframe, len);
+               return _SUCCESS;
+       }
+       else
+#endif //CONFIG_IOCTL_CFG80211
+       {
+               len -= sizeof(struct rtw_ieee80211_hdr_3addr);
+               OUI_Subtype = frame_body[5];
+               dialogToken = frame_body[6];
+
+               switch(OUI_Subtype)
+               {
+                       case P2P_NOTICE_OF_ABSENCE:
+
+                               break;
+
+                       case P2P_PRESENCE_REQUEST:
+
+                               process_p2p_presence_req(pwdinfo, pframe, len);
+
+                               break;
+
+                       case P2P_PRESENCE_RESPONSE:
+
+                               break;
+
+                       case P2P_GO_DISC_REQUEST:
+
+                               break;
+
+                       default:
+                               break;
+
+               }
+       }
+#endif //CONFIG_P2P
+
+       return _SUCCESS;
+
+}
+
+unsigned int OnAction(_adapter *padapter, union recv_frame *precv_frame)
+{
+       int i;
+       unsigned char   category;
+       struct action_handler *ptable;
+       unsigned char   *frame_body;
+       u8 *pframe = precv_frame->u.hdr.rx_data;
+
+       frame_body = (unsigned char *)(pframe + sizeof(struct rtw_ieee80211_hdr_3addr));
+
+       category = frame_body[0];
+
+       for(i = 0; i < sizeof(OnAction_tbl)/sizeof(struct action_handler); i++)
+       {
+               ptable = &OnAction_tbl[i];
+
+               if(category == ptable->num)
+                       ptable->func(padapter, precv_frame);
+
+       }
+
+       return _SUCCESS;
+
+}
+
+unsigned int DoReserved(_adapter *padapter, union recv_frame *precv_frame)
+{
+
+       //DBG_871X("rcvd mgt frame(%x, %x)\n", (GetFrameSubType(pframe) >> 4), *(unsigned int *)GetAddr1Ptr(pframe));
+       return _SUCCESS;
+}
+
+struct xmit_frame *_alloc_mgtxmitframe(struct xmit_priv *pxmitpriv, bool once)
+{
+       struct xmit_frame *pmgntframe;
+       struct xmit_buf *pxmitbuf;
+
+       if (once)
+               pmgntframe = rtw_alloc_xmitframe_once(pxmitpriv);
+       else
+               pmgntframe = rtw_alloc_xmitframe_ext(pxmitpriv);
+
+       if (pmgntframe == NULL) {
+               DBG_871X(FUNC_ADPT_FMT" alloc xmitframe fail, once:%d\n", FUNC_ADPT_ARG(pxmitpriv->adapter), once);
+               goto exit;
+       }
+
+       if ((pxmitbuf = rtw_alloc_xmitbuf_ext(pxmitpriv)) == NULL) {
+               DBG_871X(FUNC_ADPT_FMT" alloc xmitbuf fail\n", FUNC_ADPT_ARG(pxmitpriv->adapter));
+               rtw_free_xmitframe(pxmitpriv, pmgntframe);
+               pmgntframe = NULL;
+               goto exit;
+       }
+
+       pmgntframe->frame_tag = MGNT_FRAMETAG;
+       pmgntframe->pxmitbuf = pxmitbuf;
+       pmgntframe->buf_addr = pxmitbuf->pbuf;
+       pxmitbuf->priv_data = pmgntframe;
+
+exit:
+       return pmgntframe;
+
+}
+
+inline struct xmit_frame *alloc_mgtxmitframe(struct xmit_priv *pxmitpriv)
+{
+       return _alloc_mgtxmitframe(pxmitpriv, _FALSE);
+}
+
+inline struct xmit_frame *alloc_mgtxmitframe_once(struct xmit_priv *pxmitpriv)
+{
+       return _alloc_mgtxmitframe(pxmitpriv, _TRUE);
+}
+
+
+/****************************************************************************
+
+Following are some TX fuctions for WiFi MLME
+
+*****************************************************************************/
+
+void update_mgnt_tx_rate(_adapter *padapter, u8 rate)
+{
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+
+       pmlmeext->tx_rate = rate;
+
+       //DBG_871X("%s(): rate = %x\n",__FUNCTION__, rate);
+}
+
+void update_mgntframe_attrib(_adapter *padapter, struct pkt_attrib *pattrib)
+{
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+
+       _rtw_memset((u8 *)(pattrib), 0, sizeof(struct pkt_attrib));
+
+       pattrib->hdrlen = 24;
+       pattrib->nr_frags = 1;
+       pattrib->priority = 7;
+       pattrib->mac_id = 0;
+       pattrib->qsel = 0x12;
+
+       pattrib->pktlen = 0;
+
+       if(pmlmeext->cur_wireless_mode & WIRELESS_11B)
+               pattrib->raid = 6;//b mode
+       else
+               pattrib->raid = 5;//a/g mode
+
+       pattrib->encrypt = _NO_PRIVACY_;
+       pattrib->bswenc = _FALSE;
+
+       pattrib->qos_en = _FALSE;
+       pattrib->ht_en = _FALSE;
+       pattrib->bwmode = HT_CHANNEL_WIDTH_20;
+       pattrib->ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+       pattrib->sgi = _FALSE;
+
+       pattrib->seqnum = pmlmeext->mgnt_seq;
+
+       pattrib->retry_ctrl = _TRUE;
+
+}
+
+void dump_mgntframe(_adapter *padapter, struct xmit_frame *pmgntframe)
+{
+       if(padapter->bSurpriseRemoved == _TRUE ||
+               padapter->bDriverStopped == _TRUE)
+       {
+               rtw_free_xmitbuf(&padapter->xmitpriv, pmgntframe->pxmitbuf);
+               rtw_free_xmitframe(&padapter->xmitpriv, pmgntframe);
+               return;
+       }
+
+       rtw_hal_mgnt_xmit(padapter, pmgntframe);
+}
+
+s32 dump_mgntframe_and_wait(_adapter *padapter, struct xmit_frame *pmgntframe, int timeout_ms)
+{
+       s32 ret = _FAIL;
+       _irqL irqL;
+       struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
+       struct xmit_buf *pxmitbuf = pmgntframe->pxmitbuf;
+       struct submit_ctx sctx;
+
+       if(padapter->bSurpriseRemoved == _TRUE ||
+               padapter->bDriverStopped == _TRUE)
+       {
+               rtw_free_xmitbuf(&padapter->xmitpriv, pmgntframe->pxmitbuf);
+               rtw_free_xmitframe(&padapter->xmitpriv, pmgntframe);
+               return ret;
+       }
+
+       rtw_sctx_init(&sctx, timeout_ms);
+       pxmitbuf->sctx = &sctx;
+
+       ret = rtw_hal_mgnt_xmit(padapter, pmgntframe);
+
+       if (ret == _SUCCESS)
+               ret = rtw_sctx_wait(&sctx);
+
+       _enter_critical(&pxmitpriv->lock_sctx, &irqL);
+       pxmitbuf->sctx = NULL;
+       _exit_critical(&pxmitpriv->lock_sctx, &irqL);
+
+        return ret;
+}
+
+s32 dump_mgntframe_and_wait_ack(_adapter *padapter, struct xmit_frame *pmgntframe)
+{
+#ifdef CONFIG_XMIT_ACK
+       s32 ret = _FAIL;
+       u32 timeout_ms = 500;//  500ms
+       struct xmit_priv        *pxmitpriv = &padapter->xmitpriv;
+       #ifdef CONFIG_CONCURRENT_MODE
+       if (padapter->pbuddy_adapter && !padapter->isprimary)
+               pxmitpriv = &(padapter->pbuddy_adapter->xmitpriv);
+       #endif
+
+       if(padapter->bSurpriseRemoved == _TRUE ||
+               padapter->bDriverStopped == _TRUE)
+       {
+               rtw_free_xmitbuf(&padapter->xmitpriv, pmgntframe->pxmitbuf);
+               rtw_free_xmitframe(&padapter->xmitpriv, pmgntframe);
+               return -1;
+       }
+
+       _enter_critical_mutex(&pxmitpriv->ack_tx_mutex, NULL);
+       pxmitpriv->ack_tx = _TRUE;
+
+       pmgntframe->ack_report = 1;
+       if (rtw_hal_mgnt_xmit(padapter, pmgntframe) == _SUCCESS) {
+               ret = rtw_ack_tx_wait(pxmitpriv, timeout_ms);
+       }
+
+       pxmitpriv->ack_tx = _FALSE;
+       _exit_critical_mutex(&pxmitpriv->ack_tx_mutex, NULL);
+
+        return ret;
+#else //!CONFIG_XMIT_ACK
+       dump_mgntframe(padapter, pmgntframe);
+       rtw_msleep_os(50);
+       return _SUCCESS;
+#endif //!CONFIG_XMIT_ACK
+}
+
+int update_hidden_ssid(u8 *ies, u32 ies_len, u8 hidden_ssid_mode)
+{
+       u8 *ssid_ie;
+       sint ssid_len_ori;
+       int len_diff = 0;
+
+       ssid_ie = rtw_get_ie(ies,  WLAN_EID_SSID, &ssid_len_ori, ies_len);
+
+       //DBG_871X("%s hidden_ssid_mode:%u, ssid_ie:%p, ssid_len_ori:%d\n", __FUNCTION__, hidden_ssid_mode, ssid_ie, ssid_len_ori);
+
+       if(ssid_ie && ssid_len_ori>0)
+       {
+               switch(hidden_ssid_mode)
+               {
+                       case 1:
+                       {
+                               u8 *next_ie = ssid_ie + 2 + ssid_len_ori;
+                               u32 remain_len = 0;
+
+                               remain_len = ies_len -(next_ie-ies);
+
+                               ssid_ie[1] = 0;
+                               _rtw_memcpy(ssid_ie+2, next_ie, remain_len);
+                               len_diff -= ssid_len_ori;
+
+                               break;
+                       }
+                       case 2:
+                               _rtw_memset(&ssid_ie[2], 0, ssid_len_ori);
+                               break;
+                       default:
+                               break;
+               }
+       }
+
+       return len_diff;
+}
+
+void issue_beacon(_adapter *padapter)
+{
+       struct xmit_frame       *pmgntframe;
+       struct pkt_attrib       *pattrib;
+       unsigned char   *pframe;
+       struct rtw_ieee80211_hdr *pwlanhdr;
+       unsigned short *fctrl;
+       unsigned int    rate_len;
+       struct xmit_priv        *pxmitpriv = &(padapter->xmitpriv);
+#if defined (CONFIG_AP_MODE) && defined (CONFIG_NATIVEAP_MLME)
+       _irqL irqL;
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+#endif //#if defined (CONFIG_AP_MODE) && defined (CONFIG_NATIVEAP_MLME)
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       WLAN_BSSID_EX           *cur_network = &(pmlmeinfo->network);
+       u8      bc_addr[] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
+#ifdef CONFIG_P2P
+       struct wifidirect_info  *pwdinfo = &(padapter->wdinfo);
+#endif //CONFIG_P2P
+
+
+       //DBG_871X("%s\n", __FUNCTION__);
+
+       if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+       {
+               DBG_871X("%s, alloc mgnt frame fail\n", __FUNCTION__);
+               return;
+       }
+#if defined (CONFIG_AP_MODE) && defined (CONFIG_NATIVEAP_MLME)
+       _enter_critical_bh(&pmlmepriv->bcn_update_lock, &irqL);
+#endif //#if defined (CONFIG_AP_MODE) && defined (CONFIG_NATIVEAP_MLME)
+
+       //update attribute
+       pattrib = &pmgntframe->attrib;
+       update_mgntframe_attrib(padapter, pattrib);
+       pattrib->qsel = 0x10;
+
+       _rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
+
+       pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+
+
+       fctrl = &(pwlanhdr->frame_ctl);
+       *(fctrl) = 0;
+
+       _rtw_memcpy(pwlanhdr->addr1, bc_addr, ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr3, get_my_bssid(cur_network), ETH_ALEN);
+
+       SetSeqNum(pwlanhdr, 0/*pmlmeext->mgnt_seq*/);
+       //pmlmeext->mgnt_seq++;
+       SetFrameSubType(pframe, WIFI_BEACON);
+
+       pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
+       pattrib->pktlen = sizeof (struct rtw_ieee80211_hdr_3addr);
+
+       if( (pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE)
+       {
+               //DBG_871X("ie len=%d\n", cur_network->IELength);
+#ifdef CONFIG_P2P
+               // for P2P : Primary Device Type & Device Name
+               u32 wpsielen=0, insert_len=0;
+               u8 *wpsie=NULL;
+               wpsie = rtw_get_wps_ie(cur_network->IEs+_FIXED_IE_LENGTH_, cur_network->IELength-_FIXED_IE_LENGTH_, NULL, &wpsielen);
+
+               if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO) && wpsie && wpsielen>0)
+               {
+                       uint wps_offset, remainder_ielen;
+                       u8 *premainder_ie, *pframe_wscie;
+
+                       wps_offset = (uint)(wpsie - cur_network->IEs);
+
+                       premainder_ie = wpsie + wpsielen;
+
+                       remainder_ielen = cur_network->IELength - wps_offset - wpsielen;
+
+#ifdef CONFIG_IOCTL_CFG80211
+                       if(wdev_to_priv(padapter->rtw_wdev)->p2p_enabled && pwdinfo->driver_interface == DRIVER_CFG80211 )
+                       {
+                               if(pmlmepriv->wps_beacon_ie && pmlmepriv->wps_beacon_ie_len>0)
+                               {
+                                       _rtw_memcpy(pframe, cur_network->IEs, wps_offset);
+                                       pframe += wps_offset;
+                                       pattrib->pktlen += wps_offset;
+
+                                       _rtw_memcpy(pframe, pmlmepriv->wps_beacon_ie, pmlmepriv->wps_beacon_ie_len);
+                                       pframe += pmlmepriv->wps_beacon_ie_len;
+                                       pattrib->pktlen += pmlmepriv->wps_beacon_ie_len;
+
+                                       //copy remainder_ie to pframe
+                                       _rtw_memcpy(pframe, premainder_ie, remainder_ielen);
+                                       pframe += remainder_ielen;
+                                       pattrib->pktlen += remainder_ielen;
+                               }
+                               else
+                               {
+                                       _rtw_memcpy(pframe, cur_network->IEs, cur_network->IELength);
+                                       pframe += cur_network->IELength;
+                                       pattrib->pktlen += cur_network->IELength;
+                               }
+                       }
+                       else
+#endif //CONFIG_IOCTL_CFG80211
+                       {
+                               pframe_wscie = pframe + wps_offset;
+                               _rtw_memcpy(pframe, cur_network->IEs, wps_offset+wpsielen);
+                               pframe += (wps_offset + wpsielen);
+                               pattrib->pktlen += (wps_offset + wpsielen);
+
+                               //now pframe is end of wsc ie, insert Primary Device Type & Device Name
+                               //      Primary Device Type
+                               //      Type:
+                               *(u16*) ( pframe + insert_len) = cpu_to_be16( WPS_ATTR_PRIMARY_DEV_TYPE );
+                               insert_len += 2;
+
+                               //      Length:
+                               *(u16*) ( pframe + insert_len ) = cpu_to_be16( 0x0008 );
+                               insert_len += 2;
+
+                               //      Value:
+                               //      Category ID
+                               *(u16*) ( pframe + insert_len ) = cpu_to_be16( WPS_PDT_CID_MULIT_MEDIA );
+                               insert_len += 2;
+
+                               //      OUI
+                               *(u32*) ( pframe + insert_len ) = cpu_to_be32( WPSOUI );
+                               insert_len += 4;
+
+                               //      Sub Category ID
+                               *(u16*) ( pframe + insert_len ) = cpu_to_be16( WPS_PDT_SCID_MEDIA_SERVER );
+                               insert_len += 2;
+
+
+                               //      Device Name
+                               //      Type:
+                               *(u16*) ( pframe + insert_len ) = cpu_to_be16( WPS_ATTR_DEVICE_NAME );
+                               insert_len += 2;
+
+                               //      Length:
+                               *(u16*) ( pframe + insert_len ) = cpu_to_be16( pwdinfo->device_name_len );
+                               insert_len += 2;
+
+                               //      Value:
+                               _rtw_memcpy( pframe + insert_len, pwdinfo->device_name, pwdinfo->device_name_len );
+                               insert_len += pwdinfo->device_name_len;
+
+
+                               //update wsc ie length
+                               *(pframe_wscie+1) = (wpsielen -2) + insert_len;
+
+                               //pframe move to end
+                               pframe+=insert_len;
+                               pattrib->pktlen += insert_len;
+
+                               //copy remainder_ie to pframe
+                               _rtw_memcpy(pframe, premainder_ie, remainder_ielen);
+                               pframe += remainder_ielen;
+                               pattrib->pktlen += remainder_ielen;
+                       }
+               }
+               else
+#endif //CONFIG_P2P
+               {
+                       int len_diff;
+                       _rtw_memcpy(pframe, cur_network->IEs, cur_network->IELength);
+                       len_diff = update_hidden_ssid(
+                               pframe+_BEACON_IE_OFFSET_
+                               , cur_network->IELength-_BEACON_IE_OFFSET_
+                               , pmlmeinfo->hidden_ssid_mode
+                       );
+                       pframe += (cur_network->IELength+len_diff);
+                       pattrib->pktlen += (cur_network->IELength+len_diff);
+               }
+
+               {
+                       u8 *wps_ie;
+                       uint wps_ielen;
+                       u8 sr = 0;
+                       wps_ie = rtw_get_wps_ie(pmgntframe->buf_addr+TXDESC_OFFSET+sizeof (struct rtw_ieee80211_hdr_3addr)+_BEACON_IE_OFFSET_,
+                               pattrib->pktlen-sizeof (struct rtw_ieee80211_hdr_3addr)-_BEACON_IE_OFFSET_, NULL, &wps_ielen);
+                       if (wps_ie && wps_ielen>0) {
+                               rtw_get_wps_attr_content(wps_ie,  wps_ielen, WPS_ATTR_SELECTED_REGISTRAR, (u8*)(&sr), NULL);
+                       }
+                       if (sr != 0)
+                               set_fwstate(pmlmepriv, WIFI_UNDER_WPS);
+                       else
+                               _clr_fwstate_(pmlmepriv, WIFI_UNDER_WPS);
+               }
+
+#ifdef CONFIG_P2P
+               if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
+               {
+                       u32 len;
+#ifdef CONFIG_IOCTL_CFG80211
+                       if(wdev_to_priv(padapter->rtw_wdev)->p2p_enabled && pwdinfo->driver_interface == DRIVER_CFG80211 )
+                       {
+                               len = pmlmepriv->p2p_beacon_ie_len;
+                               if(pmlmepriv->p2p_beacon_ie && len>0)
+                                       _rtw_memcpy(pframe, pmlmepriv->p2p_beacon_ie, len);
+                       }
+                       else
+#endif //CONFIG_IOCTL_CFG80211
+                       {
+                               len = build_beacon_p2p_ie(pwdinfo, pframe);
+                       }
+
+                       pframe += len;
+                       pattrib->pktlen += len;
+#ifdef CONFIG_WFD
+#ifdef CONFIG_IOCTL_CFG80211
+                       if(_TRUE == pwdinfo->wfd_info->wfd_enable)
+#endif //CONFIG_IOCTL_CFG80211
+                       {
+                               len = build_beacon_wfd_ie( pwdinfo, pframe );
+                       }
+#ifdef CONFIG_IOCTL_CFG80211
+                       else
+                       {
+                               len = 0;
+                               if(pmlmepriv->wfd_beacon_ie && pmlmepriv->wfd_beacon_ie_len>0)
+                               {
+                                       len = pmlmepriv->wfd_beacon_ie_len;
+                                       _rtw_memcpy(pframe, pmlmepriv->wfd_beacon_ie, len);
+                               }
+                       }
+#endif //CONFIG_IOCTL_CFG80211
+                       pframe += len;
+                       pattrib->pktlen += len;
+#endif //CONFIG_WFD
+               }
+#endif //CONFIG_P2P
+
+               goto _issue_bcn;
+
+       }
+
+       //below for ad-hoc mode
+
+       //timestamp will be inserted by hardware
+       pframe += 8;
+       pattrib->pktlen += 8;
+
+       // beacon interval: 2 bytes
+
+       _rtw_memcpy(pframe, (unsigned char *)(rtw_get_beacon_interval_from_ie(cur_network->IEs)), 2);
+
+       pframe += 2;
+       pattrib->pktlen += 2;
+
+       // capability info: 2 bytes
+
+       _rtw_memcpy(pframe, (unsigned char *)(rtw_get_capability_from_ie(cur_network->IEs)), 2);
+
+       pframe += 2;
+       pattrib->pktlen += 2;
+
+       // SSID
+       pframe = rtw_set_ie(pframe, _SSID_IE_, cur_network->Ssid.SsidLength, cur_network->Ssid.Ssid, &pattrib->pktlen);
+
+       // supported rates...
+       rate_len = rtw_get_rateset_len(cur_network->SupportedRates);
+       pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_, ((rate_len > 8)? 8: rate_len), cur_network->SupportedRates, &pattrib->pktlen);
+
+       // DS parameter set
+       pframe = rtw_set_ie(pframe, _DSSET_IE_, 1, (unsigned char *)&(cur_network->Configuration.DSConfig), &pattrib->pktlen);
+
+       //if( (pmlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE)
+       {
+               u8 erpinfo=0;
+               u32 ATIMWindow;
+               // IBSS Parameter Set...
+               //ATIMWindow = cur->Configuration.ATIMWindow;
+               ATIMWindow = 0;
+               pframe = rtw_set_ie(pframe, _IBSS_PARA_IE_, 2, (unsigned char *)(&ATIMWindow), &pattrib->pktlen);
+
+               //ERP IE
+               pframe = rtw_set_ie(pframe, _ERPINFO_IE_, 1, &erpinfo, &pattrib->pktlen);
+       }
+
+
+       // EXTERNDED SUPPORTED RATE
+       if (rate_len > 8)
+       {
+               pframe = rtw_set_ie(pframe, _EXT_SUPPORTEDRATES_IE_, (rate_len - 8), (cur_network->SupportedRates + 8), &pattrib->pktlen);
+       }
+
+
+       //todo:HT for adhoc
+
+_issue_bcn:
+
+#if defined (CONFIG_AP_MODE) && defined (CONFIG_NATIVEAP_MLME)
+       pmlmepriv->update_bcn = _FALSE;
+
+       _exit_critical_bh(&pmlmepriv->bcn_update_lock, &irqL);
+#endif //#if defined (CONFIG_AP_MODE) && defined (CONFIG_NATIVEAP_MLME)
+
+       if ((pattrib->pktlen + TXDESC_SIZE) > 512)
+       {
+               DBG_871X("beacon frame too large\n");
+               return;
+       }
+
+       pattrib->last_txcmdsz = pattrib->pktlen;
+
+       //DBG_871X("issue bcn_sz=%d\n", pattrib->last_txcmdsz);
+
+       dump_mgntframe(padapter, pmgntframe);
+
+}
+
+void issue_probersp(_adapter *padapter, unsigned char *da, u8 is_valid_p2p_probereq)
+{
+       struct xmit_frame                       *pmgntframe;
+       struct pkt_attrib                       *pattrib;
+       unsigned char                                   *pframe;
+       struct rtw_ieee80211_hdr        *pwlanhdr;
+       unsigned short                          *fctrl;
+       unsigned char                                   *mac, *bssid;
+       struct xmit_priv        *pxmitpriv = &(padapter->xmitpriv);
+#if defined (CONFIG_AP_MODE) && defined (CONFIG_NATIVEAP_MLME)
+       u8 *pwps_ie;
+       uint wps_ielen;
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+#endif //#if defined (CONFIG_AP_MODE) && defined (CONFIG_NATIVEAP_MLME)
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       WLAN_BSSID_EX           *cur_network = &(pmlmeinfo->network);
+       unsigned int    rate_len;
+#ifdef CONFIG_P2P
+       struct wifidirect_info  *pwdinfo = &(padapter->wdinfo);
+#ifdef CONFIG_WFD
+       u32                                     wfdielen = 0;
+#endif //CONFIG_WFD
+#endif //CONFIG_P2P
+
+       //DBG_871X("%s\n", __FUNCTION__);
+
+       if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+       {
+               DBG_871X("%s, alloc mgnt frame fail\n", __FUNCTION__);
+               return;
+       }
+
+
+       //update attribute
+       pattrib = &pmgntframe->attrib;
+       update_mgntframe_attrib(padapter, pattrib);
+
+       _rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
+
+       pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+
+       mac = myid(&(padapter->eeprompriv));
+       bssid = cur_network->MacAddress;
+
+       fctrl = &(pwlanhdr->frame_ctl);
+       *(fctrl) = 0;
+       _rtw_memcpy(pwlanhdr->addr1, da, ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr2, mac, ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr3, bssid, ETH_ALEN);
+
+       SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
+       pmlmeext->mgnt_seq++;
+       SetFrameSubType(fctrl, WIFI_PROBERSP);
+
+       pattrib->hdrlen = sizeof(struct rtw_ieee80211_hdr_3addr);
+       pattrib->pktlen = pattrib->hdrlen;
+       pframe += pattrib->hdrlen;
+
+
+       if(cur_network->IELength>MAX_IE_SZ)
+               return;
+
+#if defined (CONFIG_AP_MODE) && defined (CONFIG_NATIVEAP_MLME)
+       if( (pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE)
+       {
+               pwps_ie = rtw_get_wps_ie(cur_network->IEs+_FIXED_IE_LENGTH_, cur_network->IELength-_FIXED_IE_LENGTH_, NULL, &wps_ielen);
+
+               //inerset & update wps_probe_resp_ie
+               if((pmlmepriv->wps_probe_resp_ie!=NULL) && pwps_ie && (wps_ielen>0))
+               {
+                       uint wps_offset, remainder_ielen;
+                       u8 *premainder_ie;
+
+                       wps_offset = (uint)(pwps_ie - cur_network->IEs);
+
+                       premainder_ie = pwps_ie + wps_ielen;
+
+                       remainder_ielen = cur_network->IELength - wps_offset - wps_ielen;
+
+                       _rtw_memcpy(pframe, cur_network->IEs, wps_offset);
+                       pframe += wps_offset;
+                       pattrib->pktlen += wps_offset;
+
+                       wps_ielen = (uint)pmlmepriv->wps_probe_resp_ie[1];//to get ie data len
+                       if((wps_offset+wps_ielen+2)<=MAX_IE_SZ)
+                       {
+                               _rtw_memcpy(pframe, pmlmepriv->wps_probe_resp_ie, wps_ielen+2);
+                               pframe += wps_ielen+2;
+                               pattrib->pktlen += wps_ielen+2;
+                       }
+
+                       if((wps_offset+wps_ielen+2+remainder_ielen)<=MAX_IE_SZ)
+                       {
+                               _rtw_memcpy(pframe, premainder_ie, remainder_ielen);
+                               pframe += remainder_ielen;
+                               pattrib->pktlen += remainder_ielen;
+                       }
+               }
+               else
+               {
+                       _rtw_memcpy(pframe, cur_network->IEs, cur_network->IELength);
+                       pframe += cur_network->IELength;
+                       pattrib->pktlen += cur_network->IELength;
+               }
+
+               /* retrieve SSID IE from cur_network->Ssid */
+               {
+                       u8 *ssid_ie;
+                       sint ssid_ielen;
+                       sint ssid_ielen_diff;
+                       u8 buf[MAX_IE_SZ];
+                       u8 *ies = pmgntframe->buf_addr+TXDESC_OFFSET+sizeof(struct rtw_ieee80211_hdr_3addr);
+
+                       ssid_ie = rtw_get_ie(ies+_FIXED_IE_LENGTH_, _SSID_IE_, &ssid_ielen,
+                               (pframe-ies)-_FIXED_IE_LENGTH_);
+
+                       ssid_ielen_diff = cur_network->Ssid.SsidLength - ssid_ielen;
+
+                       if (ssid_ie &&  cur_network->Ssid.SsidLength) {
+                               uint remainder_ielen;
+                               u8 *remainder_ie;
+                               remainder_ie = ssid_ie+2;
+                               remainder_ielen = (pframe-remainder_ie);
+
+                               LOG_LEVEL(_drv_warning_, FUNC_ADPT_FMT" remainder_ielen > MAX_IE_SZ\n", FUNC_ADPT_ARG(padapter));
+                               if (remainder_ielen > MAX_IE_SZ) {
+                                       remainder_ielen = MAX_IE_SZ;
+                               }
+
+                               _rtw_memcpy(buf, remainder_ie, remainder_ielen);
+                               _rtw_memcpy(remainder_ie+ssid_ielen_diff, buf, remainder_ielen);
+                               *(ssid_ie+1) = cur_network->Ssid.SsidLength;
+                               _rtw_memcpy(ssid_ie+2, cur_network->Ssid.Ssid, cur_network->Ssid.SsidLength);
+
+                               pframe += ssid_ielen_diff;
+                               pattrib->pktlen += ssid_ielen_diff;
+                       }
+               }
+       }
+       else
+#endif
+       {
+
+               //timestamp will be inserted by hardware
+               pframe += 8;
+               pattrib->pktlen += 8;
+
+               // beacon interval: 2 bytes
+
+               _rtw_memcpy(pframe, (unsigned char *)(rtw_get_beacon_interval_from_ie(cur_network->IEs)), 2);
+
+               pframe += 2;
+               pattrib->pktlen += 2;
+
+               // capability info: 2 bytes
+
+               _rtw_memcpy(pframe, (unsigned char *)(rtw_get_capability_from_ie(cur_network->IEs)), 2);
+
+               pframe += 2;
+               pattrib->pktlen += 2;
+
+               //below for ad-hoc mode
+
+               // SSID
+               pframe = rtw_set_ie(pframe, _SSID_IE_, cur_network->Ssid.SsidLength, cur_network->Ssid.Ssid, &pattrib->pktlen);
+
+               // supported rates...
+               rate_len = rtw_get_rateset_len(cur_network->SupportedRates);
+               pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_, ((rate_len > 8)? 8: rate_len), cur_network->SupportedRates, &pattrib->pktlen);
+
+               // DS parameter set
+               pframe =rtw_set_ie(pframe, _DSSET_IE_, 1, (unsigned char *)&(cur_network->Configuration.DSConfig), &pattrib->pktlen);
+
+               if( (pmlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE)
+               {
+                       u8 erpinfo=0;
+                       u32 ATIMWindow;
+                       // IBSS Parameter Set...
+                       //ATIMWindow = cur->Configuration.ATIMWindow;
+                       ATIMWindow = 0;
+                       pframe = rtw_set_ie(pframe, _IBSS_PARA_IE_, 2, (unsigned char *)(&ATIMWindow), &pattrib->pktlen);
+
+                       //ERP IE
+                       pframe = rtw_set_ie(pframe, _ERPINFO_IE_, 1, &erpinfo, &pattrib->pktlen);
+               }
+
+
+               // EXTERNDED SUPPORTED RATE
+               if (rate_len > 8)
+               {
+                       pframe = rtw_set_ie(pframe, _EXT_SUPPORTEDRATES_IE_, (rate_len - 8), (cur_network->SupportedRates + 8), &pattrib->pktlen);
+               }
+
+
+               //todo:HT for adhoc
+
+       }
+
+#ifdef CONFIG_P2P
+       if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO) /*&& is_valid_p2p_probereq*/)
+       {
+               u32 len;
+#ifdef CONFIG_IOCTL_CFG80211
+               if(wdev_to_priv(padapter->rtw_wdev)->p2p_enabled && pwdinfo->driver_interface == DRIVER_CFG80211 )
+               {
+                       //if pwdinfo->role == P2P_ROLE_DEVICE will call issue_probersp_p2p()
+                       len = pmlmepriv->p2p_go_probe_resp_ie_len;
+                       if(pmlmepriv->p2p_go_probe_resp_ie && len>0)
+                               _rtw_memcpy(pframe, pmlmepriv->p2p_go_probe_resp_ie, len);
+               }
+               else
+#endif //CONFIG_IOCTL_CFG80211
+               {
+                       len = build_probe_resp_p2p_ie(pwdinfo, pframe);
+               }
+
+               pframe += len;
+               pattrib->pktlen += len;
+
+#ifdef CONFIG_WFD
+#ifdef CONFIG_IOCTL_CFG80211
+               if(_TRUE == pwdinfo->wfd_info->wfd_enable)
+#endif //CONFIG_IOCTL_CFG80211
+               {
+                       len = build_probe_resp_wfd_ie(pwdinfo, pframe, 0);
+               }
+#ifdef CONFIG_IOCTL_CFG80211
+               else
+               {
+                       len = 0;
+                       if(pmlmepriv->wfd_probe_resp_ie && pmlmepriv->wfd_probe_resp_ie_len>0)
+                       {
+                               len = pmlmepriv->wfd_probe_resp_ie_len;
+                               _rtw_memcpy(pframe, pmlmepriv->wfd_probe_resp_ie, len);
+                       }
+               }
+#endif //CONFIG_IOCTL_CFG80211
+               pframe += len;
+               pattrib->pktlen += len;
+#endif //CONFIG_WFD
+
+       }
+#endif //CONFIG_P2P
+
+
+#ifdef CONFIG_AUTO_AP_MODE
+{
+       struct sta_info *psta;
+       struct sta_priv *pstapriv = &padapter->stapriv;
+
+       DBG_871X("(%s)\n", __FUNCTION__);
+
+       //check rc station
+       psta = rtw_get_stainfo(pstapriv, da);
+       if (psta && psta->isrc && psta->pid>0)
+       {
+               u8 RC_OUI[4]={0x00,0xE0,0x4C,0x0A};
+               u8 RC_INFO[14] = {0};
+               //EID[1] + EID_LEN[1] + RC_OUI[4] + MAC[6] + PairingID[2] + ChannelNum[2]
+               u16 cu_ch = (u16)cur_network->Configuration.DSConfig;
+
+               DBG_871X("%s, reply rc(pid=0x%x) device "MAC_FMT" in ch=%d\n", __FUNCTION__,
+                       psta->pid, MAC_ARG(psta->hwaddr), cu_ch);
+
+               //append vendor specific ie
+               _rtw_memcpy(RC_INFO, RC_OUI, sizeof(RC_OUI));
+               _rtw_memcpy(&RC_INFO[4], mac, ETH_ALEN);
+               _rtw_memcpy(&RC_INFO[10], (u8*)&psta->pid, 2);
+               _rtw_memcpy(&RC_INFO[12], (u8*)&cu_ch, 2);
+
+               pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, sizeof(RC_INFO), RC_INFO, &pattrib->pktlen);
+       }
+}
+#endif //CONFIG_AUTO_AP_MODE
+
+
+       pattrib->last_txcmdsz = pattrib->pktlen;
+
+
+       dump_mgntframe(padapter, pmgntframe);
+
+       return;
+
+}
+
+int _issue_probereq(_adapter *padapter, NDIS_802_11_SSID *pssid, u8 *da, int wait_ack)
+{
+       int ret = _FAIL;
+       struct xmit_frame               *pmgntframe;
+       struct pkt_attrib               *pattrib;
+       unsigned char                   *pframe;
+       struct rtw_ieee80211_hdr        *pwlanhdr;
+       unsigned short          *fctrl;
+       unsigned char                   *mac;
+       unsigned char                   bssrate[NumRates];
+       struct xmit_priv                *pxmitpriv = &(padapter->xmitpriv);
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       int     bssrate_len = 0;
+       u8      bc_addr[] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
+
+       RT_TRACE(_module_rtl871x_mlme_c_,_drv_notice_,("+issue_probereq\n"));
+
+       if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+       {
+               goto exit;
+       }
+
+       //update attribute
+       pattrib = &pmgntframe->attrib;
+       update_mgntframe_attrib(padapter, pattrib);
+
+
+       _rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
+
+       pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+
+       mac = myid(&(padapter->eeprompriv));
+
+       fctrl = &(pwlanhdr->frame_ctl);
+       *(fctrl) = 0;
+
+       if (da)
+       {
+               //      unicast probe request frame
+               _rtw_memcpy(pwlanhdr->addr1, da, ETH_ALEN);
+               _rtw_memcpy(pwlanhdr->addr3, da, ETH_ALEN);
+       }
+       else
+       {
+               //      broadcast probe request frame
+               _rtw_memcpy(pwlanhdr->addr1, bc_addr, ETH_ALEN);
+               _rtw_memcpy(pwlanhdr->addr3, bc_addr, ETH_ALEN);
+       }
+
+       _rtw_memcpy(pwlanhdr->addr2, mac, ETH_ALEN);
+
+       SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
+       pmlmeext->mgnt_seq++;
+       SetFrameSubType(pframe, WIFI_PROBEREQ);
+
+       pframe += sizeof (struct rtw_ieee80211_hdr_3addr);
+       pattrib->pktlen = sizeof (struct rtw_ieee80211_hdr_3addr);
+
+       if(pssid)
+               pframe = rtw_set_ie(pframe, _SSID_IE_, pssid->SsidLength, pssid->Ssid, &(pattrib->pktlen));
+       else
+               pframe = rtw_set_ie(pframe, _SSID_IE_, 0, NULL, &(pattrib->pktlen));
+
+       get_rate_set(padapter, bssrate, &bssrate_len);
+
+       if (bssrate_len > 8)
+       {
+               pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_ , 8, bssrate, &(pattrib->pktlen));
+               pframe = rtw_set_ie(pframe, _EXT_SUPPORTEDRATES_IE_ , (bssrate_len - 8), (bssrate + 8), &(pattrib->pktlen));
+       }
+       else
+       {
+               pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_ , bssrate_len , bssrate, &(pattrib->pktlen));
+       }
+
+#if 0
+       //add wps_ie for wps2.0
+       if(pmlmepriv->probereq_wpsie_len>0 && pmlmepriv->probereq_wpsie_len<MAX_WPS_IE_LEN)
+       {
+               _rtw_memcpy(pframe, pmlmepriv->probereq_wpsie, pmlmepriv->probereq_wpsie_len);
+               pframe += pmlmepriv->probereq_wpsie_len;
+               pattrib->pktlen += pmlmepriv->probereq_wpsie_len;
+               //pmlmepriv->probereq_wpsie_len = 0 ;//reset to zero
+       }
+#else
+       //add wps_ie for wps2.0
+       if(pmlmepriv->wps_probe_req_ie_len>0 && pmlmepriv->wps_probe_req_ie)
+       {
+               _rtw_memcpy(pframe, pmlmepriv->wps_probe_req_ie, pmlmepriv->wps_probe_req_ie_len);
+               pframe += pmlmepriv->wps_probe_req_ie_len;
+               pattrib->pktlen += pmlmepriv->wps_probe_req_ie_len;
+               //pmlmepriv->wps_probe_req_ie_len = 0 ;//reset to zero
+       }
+#endif
+
+       pattrib->last_txcmdsz = pattrib->pktlen;
+
+       RT_TRACE(_module_rtl871x_mlme_c_,_drv_notice_,("issuing probe_req, tx_len=%d\n", pattrib->last_txcmdsz));
+
+       if (wait_ack) {
+               ret = dump_mgntframe_and_wait_ack(padapter, pmgntframe);
+       } else {
+               dump_mgntframe(padapter, pmgntframe);
+               ret = _SUCCESS;
+       }
+
+exit:
+       return ret;
+}
+
+inline void issue_probereq(_adapter *padapter, NDIS_802_11_SSID *pssid, u8 *da)
+{
+       _issue_probereq(padapter, pssid, da, _FALSE);
+}
+
+int issue_probereq_ex(_adapter *padapter, NDIS_802_11_SSID *pssid, u8 *da,
+       int try_cnt, int wait_ms)
+{
+       int ret;
+       int i = 0;
+       u32 start = rtw_get_current_time();
+
+       do
+       {
+               ret = _issue_probereq(padapter, pssid, da, wait_ms>0?_TRUE:_FALSE);
+
+               i++;
+
+               if (padapter->bDriverStopped || padapter->bSurpriseRemoved)
+                       break;
+
+               if(i < try_cnt && wait_ms > 0 && ret==_FAIL)
+                       rtw_msleep_os(wait_ms);
+
+       }while((i<try_cnt) && ((ret==_FAIL)||(wait_ms==0)));
+
+       if (ret != _FAIL) {
+               ret = _SUCCESS;
+               #ifndef DBG_XMIT_ACK
+               goto exit;
+               #endif
+       }
+
+       if (try_cnt && wait_ms) {
+               if (da)
+                       DBG_871X(FUNC_ADPT_FMT" to "MAC_FMT", ch:%u%s, %d/%d in %u ms\n",
+                               FUNC_ADPT_ARG(padapter), MAC_ARG(da), rtw_get_oper_ch(padapter),
+                               ret==_SUCCESS?", acked":"", i, try_cnt, rtw_get_passing_time_ms(start));
+               else
+                       DBG_871X(FUNC_ADPT_FMT", ch:%u%s, %d/%d in %u ms\n",
+                               FUNC_ADPT_ARG(padapter), rtw_get_oper_ch(padapter),
+                               ret==_SUCCESS?", acked":"", i, try_cnt, rtw_get_passing_time_ms(start));
+       }
+exit:
+       return ret;
+}
+
+// if psta == NULL, indiate we are station(client) now...
+void issue_auth(_adapter *padapter, struct sta_info *psta, unsigned short status)
+{
+       struct xmit_frame                       *pmgntframe;
+       struct pkt_attrib                       *pattrib;
+       unsigned char                                   *pframe;
+       struct rtw_ieee80211_hdr        *pwlanhdr;
+       unsigned short                          *fctrl;
+       unsigned int                                    val32;
+       unsigned short                          val16;
+       int use_shared_key = 0;
+       struct xmit_priv                        *pxmitpriv = &(padapter->xmitpriv);
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+       {
+               return;
+       }
+
+       //update attribute
+       pattrib = &pmgntframe->attrib;
+       update_mgntframe_attrib(padapter, pattrib);
+
+       _rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
+
+       pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+
+       fctrl = &(pwlanhdr->frame_ctl);
+       *(fctrl) = 0;
+
+       SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
+       pmlmeext->mgnt_seq++;
+       SetFrameSubType(pframe, WIFI_AUTH);
+
+       pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
+       pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
+
+
+       if(psta)// for AP mode
+       {
+#ifdef CONFIG_NATIVEAP_MLME
+
+               _rtw_memcpy(pwlanhdr->addr1, psta->hwaddr, ETH_ALEN);
+               _rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
+               _rtw_memcpy(pwlanhdr->addr3, myid(&(padapter->eeprompriv)), ETH_ALEN);
+
+
+               // setting auth algo number
+               val16 = (u16)psta->authalg;
+
+               if(status != _STATS_SUCCESSFUL_)
+                       val16 = 0;
+
+               if (val16)      {
+                       val16 = cpu_to_le16(val16);
+                       use_shared_key = 1;
+               }
+
+               pframe = rtw_set_fixed_ie(pframe, _AUTH_ALGM_NUM_, (unsigned char *)&val16, &(pattrib->pktlen));
+
+               // setting auth seq number
+               val16 =(u16)psta->auth_seq;
+               val16 = cpu_to_le16(val16);
+               pframe = rtw_set_fixed_ie(pframe, _AUTH_SEQ_NUM_, (unsigned char *)&val16, &(pattrib->pktlen));
+
+               // setting status code...
+               val16 = status;
+               val16 = cpu_to_le16(val16);
+               pframe = rtw_set_fixed_ie(pframe, _STATUS_CODE_, (unsigned char *)&val16, &(pattrib->pktlen));
+
+               // added challenging text...
+               if ((psta->auth_seq == 2) && (psta->state & WIFI_FW_AUTH_STATE) && (use_shared_key==1))
+               {
+                       pframe = rtw_set_ie(pframe, _CHLGETXT_IE_, 128, psta->chg_txt, &(pattrib->pktlen));
+               }
+#endif
+       }
+       else
+       {
+               _rtw_memcpy(pwlanhdr->addr1, get_my_bssid(&pmlmeinfo->network), ETH_ALEN);
+               _rtw_memcpy(pwlanhdr->addr2, myid(&padapter->eeprompriv), ETH_ALEN);
+               _rtw_memcpy(pwlanhdr->addr3, get_my_bssid(&pmlmeinfo->network), ETH_ALEN);
+
+               // setting auth algo number
+               val16 = (pmlmeinfo->auth_algo == dot11AuthAlgrthm_Shared)? 1: 0;// 0:OPEN System, 1:Shared key
+               if (val16)      {
+                       val16 = cpu_to_le16(val16);
+                       use_shared_key = 1;
+               }
+               //DBG_871X("%s auth_algo= %s auth_seq=%d\n",__FUNCTION__,(pmlmeinfo->auth_algo==0)?"OPEN":"SHARED",pmlmeinfo->auth_seq);
+
+               //setting IV for auth seq #3
+               if ((pmlmeinfo->auth_seq == 3) && (pmlmeinfo->state & WIFI_FW_AUTH_STATE) && (use_shared_key==1))
+               {
+                       //DBG_871X("==> iv(%d),key_index(%d)\n",pmlmeinfo->iv,pmlmeinfo->key_index);
+                       val32 = ((pmlmeinfo->iv++) | (pmlmeinfo->key_index << 30));
+                       val32 = cpu_to_le32(val32);
+                       pframe = rtw_set_fixed_ie(pframe, 4, (unsigned char *)&val32, &(pattrib->pktlen));
+
+                       pattrib->iv_len = 4;
+               }
+
+               pframe = rtw_set_fixed_ie(pframe, _AUTH_ALGM_NUM_, (unsigned char *)&val16, &(pattrib->pktlen));
+
+               // setting auth seq number
+               val16 = pmlmeinfo->auth_seq;
+               val16 = cpu_to_le16(val16);
+               pframe = rtw_set_fixed_ie(pframe, _AUTH_SEQ_NUM_, (unsigned char *)&val16, &(pattrib->pktlen));
+
+
+               // setting status code...
+               val16 = status;
+               val16 = cpu_to_le16(val16);
+               pframe = rtw_set_fixed_ie(pframe, _STATUS_CODE_, (unsigned char *)&val16, &(pattrib->pktlen));
+
+               // then checking to see if sending challenging text...
+               if ((pmlmeinfo->auth_seq == 3) && (pmlmeinfo->state & WIFI_FW_AUTH_STATE) && (use_shared_key==1))
+               {
+                       pframe = rtw_set_ie(pframe, _CHLGETXT_IE_, 128, pmlmeinfo->chg_txt, &(pattrib->pktlen));
+
+                       SetPrivacy(fctrl);
+
+                       pattrib->hdrlen = sizeof(struct rtw_ieee80211_hdr_3addr);
+
+                       pattrib->encrypt = _WEP40_;
+
+                       pattrib->icv_len = 4;
+
+                       pattrib->pktlen += pattrib->icv_len;
+
+               }
+
+       }
+
+       pattrib->last_txcmdsz = pattrib->pktlen;
+
+       rtw_wep_encrypt(padapter, (u8 *)pmgntframe);
+
+       dump_mgntframe(padapter, pmgntframe);
+
+       return;
+}
+
+
+void issue_asocrsp(_adapter *padapter, unsigned short status, struct sta_info *pstat, int pkt_type)
+{
+#ifdef CONFIG_AP_MODE
+       struct xmit_frame       *pmgntframe;
+       struct rtw_ieee80211_hdr        *pwlanhdr;
+       struct pkt_attrib *pattrib;
+       unsigned char   *pbuf, *pframe;
+       unsigned short val;
+       unsigned short *fctrl;
+       struct xmit_priv *pxmitpriv = &(padapter->xmitpriv);
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       WLAN_BSSID_EX *pnetwork = &(pmlmeinfo->network);
+       u8 *ie = pnetwork->IEs;
+#ifdef CONFIG_P2P
+       struct wifidirect_info  *pwdinfo = &(padapter->wdinfo);
+#ifdef CONFIG_WFD
+       u32                                     wfdielen = 0;
+#endif //CONFIG_WFD
+#endif //CONFIG_P2P
+
+       DBG_871X("%s\n", __FUNCTION__);
+
+       if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+       {
+               return;
+       }
+
+       //update attribute
+       pattrib = &pmgntframe->attrib;
+       update_mgntframe_attrib(padapter, pattrib);
+
+
+       _rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
+
+       pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+
+       fctrl = &(pwlanhdr->frame_ctl);
+       *(fctrl) = 0;
+
+       _rtw_memcpy((void *)GetAddr1Ptr(pwlanhdr), pstat->hwaddr, ETH_ALEN);
+       _rtw_memcpy((void *)GetAddr2Ptr(pwlanhdr), myid(&(padapter->eeprompriv)), ETH_ALEN);
+       _rtw_memcpy((void *)GetAddr3Ptr(pwlanhdr), get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
+
+
+       SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
+       pmlmeext->mgnt_seq++;
+       if ((pkt_type == WIFI_ASSOCRSP) || (pkt_type == WIFI_REASSOCRSP))
+               SetFrameSubType(pwlanhdr, pkt_type);
+       else
+               return;
+
+       pattrib->hdrlen = sizeof(struct rtw_ieee80211_hdr_3addr);
+       pattrib->pktlen += pattrib->hdrlen;
+       pframe += pattrib->hdrlen;
+
+       //capability
+       val = *(unsigned short *)rtw_get_capability_from_ie(ie);
+
+       pframe = rtw_set_fixed_ie(pframe, _CAPABILITY_ , (unsigned char *)&val, &(pattrib->pktlen));
+
+       status = cpu_to_le16(status);
+       pframe = rtw_set_fixed_ie(pframe , _STATUS_CODE_ , (unsigned char *)&status, &(pattrib->pktlen));
+
+       val = cpu_to_le16(pstat->aid | BIT(14) | BIT(15));
+       pframe = rtw_set_fixed_ie(pframe, _ASOC_ID_ , (unsigned char *)&val, &(pattrib->pktlen));
+
+       if (pstat->bssratelen <= 8)
+       {
+               pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_, pstat->bssratelen, pstat->bssrateset, &(pattrib->pktlen));
+       }
+       else
+       {
+               pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_, 8, pstat->bssrateset, &(pattrib->pktlen));
+               pframe = rtw_set_ie(pframe, _EXT_SUPPORTEDRATES_IE_, (pstat->bssratelen-8), pstat->bssrateset+8, &(pattrib->pktlen));
+       }
+
+#ifdef CONFIG_80211N_HT
+       if ((pstat->flags & WLAN_STA_HT) && (pmlmepriv->htpriv.ht_option))
+       {
+               uint ie_len=0;
+
+               //FILL HT CAP INFO IE
+               //p = hostapd_eid_ht_capabilities_info(hapd, p);
+               pbuf = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _HT_CAPABILITY_IE_, &ie_len, (pnetwork->IELength - _BEACON_IE_OFFSET_));
+               if(pbuf && ie_len>0)
+               {
+                       _rtw_memcpy(pframe, pbuf, ie_len+2);
+                       pframe += (ie_len+2);
+                       pattrib->pktlen +=(ie_len+2);
+               }
+
+               //FILL HT ADD INFO IE
+               //p = hostapd_eid_ht_operation(hapd, p);
+               pbuf = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _HT_ADD_INFO_IE_, &ie_len, (pnetwork->IELength - _BEACON_IE_OFFSET_));
+               if(pbuf && ie_len>0)
+               {
+                       _rtw_memcpy(pframe, pbuf, ie_len+2);
+                       pframe += (ie_len+2);
+                       pattrib->pktlen +=(ie_len+2);
+               }
+
+       }
+#endif
+
+       //FILL WMM IE
+       if ((pstat->flags & WLAN_STA_WME) && (pmlmepriv->qospriv.qos_option))
+       {
+               uint ie_len=0;
+               unsigned char WMM_PARA_IE[] = {0x00, 0x50, 0xf2, 0x02, 0x01, 0x01};
+
+               for (pbuf = ie + _BEACON_IE_OFFSET_; ;pbuf+= (ie_len + 2))
+               {
+                       pbuf = rtw_get_ie(pbuf, _VENDOR_SPECIFIC_IE_, &ie_len, (pnetwork->IELength - _BEACON_IE_OFFSET_ - (ie_len + 2)));
+                       if(pbuf && _rtw_memcmp(pbuf+2, WMM_PARA_IE, 6))
+                       {
+                               _rtw_memcpy(pframe, pbuf, ie_len+2);
+                               pframe += (ie_len+2);
+                               pattrib->pktlen +=(ie_len+2);
+
+                               break;
+                       }
+
+                       if ((pbuf == NULL) || (ie_len == 0))
+                       {
+                               break;
+                       }
+               }
+
+       }
+
+
+       if (pmlmeinfo->assoc_AP_vendor == realtekAP)
+       {
+               pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, 6 , REALTEK_96B_IE, &(pattrib->pktlen));
+       }
+
+       //add WPS IE ie for wps 2.0
+       if(pmlmepriv->wps_assoc_resp_ie && pmlmepriv->wps_assoc_resp_ie_len>0)
+       {
+               _rtw_memcpy(pframe, pmlmepriv->wps_assoc_resp_ie, pmlmepriv->wps_assoc_resp_ie_len);
+
+               pframe += pmlmepriv->wps_assoc_resp_ie_len;
+               pattrib->pktlen += pmlmepriv->wps_assoc_resp_ie_len;
+       }
+
+#ifdef CONFIG_P2P
+       if( padapter->wdinfo.driver_interface == DRIVER_WEXT )
+       {
+               if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO) && (pstat->is_p2p_device == _TRUE))
+               {
+                       u32 len;
+
+                       len = build_assoc_resp_p2p_ie(pwdinfo, pframe, pstat->p2p_status_code);
+
+                       pframe += len;
+                       pattrib->pktlen += len;
+               }
+       }
+#ifdef CONFIG_WFD
+       if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO)
+#ifdef CONFIG_IOCTL_CFG80211
+               && (_TRUE == pwdinfo->wfd_info->wfd_enable)
+#endif //CONFIG_IOCTL_CFG80211
+       )
+       {
+               wfdielen = build_assoc_resp_wfd_ie(pwdinfo, pframe);
+               pframe += wfdielen;
+               pattrib->pktlen += wfdielen;
+       }
+#endif //CONFIG_WFD
+#endif //CONFIG_P2P
+
+       pattrib->last_txcmdsz = pattrib->pktlen;
+
+       dump_mgntframe(padapter, pmgntframe);
+
+#endif
+}
+
+void issue_assocreq(_adapter *padapter)
+{
+       int ret = _FAIL;
+       struct xmit_frame                               *pmgntframe;
+       struct pkt_attrib                               *pattrib;
+       unsigned char                                   *pframe, *p;
+       struct rtw_ieee80211_hdr                        *pwlanhdr;
+       unsigned short                          *fctrl;
+       unsigned short                          val16;
+       unsigned int                                    i, j, ie_len, index=0;
+       unsigned char                                   rf_type, bssrate[NumRates], sta_bssrate[NumRates];
+       PNDIS_802_11_VARIABLE_IEs       pIE;
+       struct registry_priv    *pregpriv = &padapter->registrypriv;
+       struct xmit_priv                *pxmitpriv = &(padapter->xmitpriv);
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       int     bssrate_len = 0, sta_bssrate_len = 0;
+       u8      cbw40_enable = 0;
+#ifdef CONFIG_P2P
+       struct wifidirect_info  *pwdinfo = &(padapter->wdinfo);
+       u8                                      p2pie[ 255 ] = { 0x00 };
+       u16                                     p2pielen = 0;
+#ifdef CONFIG_WFD
+       u32                                     wfdielen = 0;
+#endif //CONFIG_WFD
+#endif //CONFIG_P2P
+
+#ifdef CONFIG_DFS
+       u16     cap;
+       u8 pow_cap_ele[2] = { 0x00 };
+       u8 sup_ch[ 30 * 2 ] = {0x00 }, sup_ch_idx = 0, idx_5g = 2;      //For supported channel
+#endif //CONFIG_DFS
+
+       if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+               goto exit;
+
+       //update attribute
+       pattrib = &pmgntframe->attrib;
+       update_mgntframe_attrib(padapter, pattrib);
+
+
+       _rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
+
+       pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+
+       fctrl = &(pwlanhdr->frame_ctl);
+       *(fctrl) = 0;
+       _rtw_memcpy(pwlanhdr->addr1, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr3, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
+
+       SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
+       pmlmeext->mgnt_seq++;
+       SetFrameSubType(pframe, WIFI_ASSOCREQ);
+
+       pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
+       pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
+
+       //caps
+
+#ifdef CONFIG_DFS
+       _rtw_memcpy(&cap, rtw_get_capability_from_ie(pmlmeinfo->network.IEs), 2);
+       if(pmlmeext->cur_channel > 14)
+               cap |= BIT(8); //Spectrum Mgmt. Enabled
+       _rtw_memcpy(pframe, &cap, 2);
+#else
+       _rtw_memcpy(pframe, rtw_get_capability_from_ie(pmlmeinfo->network.IEs), 2);
+#endif //CONFIG_DFS
+
+       pframe += 2;
+       pattrib->pktlen += 2;
+
+       //listen interval
+       //todo: listen interval for power saving
+       val16 = cpu_to_le16(3);
+       _rtw_memcpy(pframe ,(unsigned char *)&val16, 2);
+       pframe += 2;
+       pattrib->pktlen += 2;
+
+       //SSID
+       pframe = rtw_set_ie(pframe, _SSID_IE_,  pmlmeinfo->network.Ssid.SsidLength, pmlmeinfo->network.Ssid.Ssid, &(pattrib->pktlen));
+
+       //supported rate & extended supported rate
+
+#if 1  // Check if the AP's supported rates are also supported by STA.
+       get_rate_set(padapter, sta_bssrate, &sta_bssrate_len);
+       //DBG_871X("sta_bssrate_len=%d\n", sta_bssrate_len);
+
+       if(pmlmeext->cur_channel == 14)// for JAPAN, channel 14 can only uses B Mode(CCK)
+       {
+               sta_bssrate_len = 4;
+       }
+
+
+       //for (i = 0; i < sta_bssrate_len; i++) {
+       //      DBG_871X("sta_bssrate[%d]=%02X\n", i, sta_bssrate[i]);
+       //}
+
+       for (i = 0; i < NDIS_802_11_LENGTH_RATES_EX; i++) {
+               if (pmlmeinfo->network.SupportedRates[i] == 0) break;
+               DBG_871X("network.SupportedRates[%d]=%02X\n", i, pmlmeinfo->network.SupportedRates[i]);
+       }
+
+
+       for (i = 0; i < NDIS_802_11_LENGTH_RATES_EX; i++) {
+               if (pmlmeinfo->network.SupportedRates[i] == 0) break;
+
+
+               // Check if the AP's supported rates are also supported by STA.
+               for (j=0; j < sta_bssrate_len; j++) {
+                        // Avoid the proprietary data rate (22Mbps) of Handlink WSG-4000 AP
+                       if ( (pmlmeinfo->network.SupportedRates[i]|IEEE80211_BASIC_RATE_MASK)
+                                       == (sta_bssrate[j]|IEEE80211_BASIC_RATE_MASK)) {
+                               //DBG_871X("match i = %d, j=%d\n", i, j);
+                               break;
+                       } else {
+                               //DBG_871X("not match: %02X != %02X\n", (pmlmeinfo->network.SupportedRates[i]|IEEE80211_BASIC_RATE_MASK), (sta_bssrate[j]|IEEE80211_BASIC_RATE_MASK));
+                       }
+               }
+
+               if (j == sta_bssrate_len) {
+                       // the rate is not supported by STA
+                       DBG_871X("%s(): the rate[%d]=%02X is not supported by STA!\n",__FUNCTION__, i, pmlmeinfo->network.SupportedRates[i]);
+               } else {
+                       // the rate is supported by STA
+                       bssrate[index++] = pmlmeinfo->network.SupportedRates[i];
+               }
+       }
+
+       bssrate_len = index;
+       DBG_871X("bssrate_len = %d\n", bssrate_len);
+
+#else  // Check if the AP's supported rates are also supported by STA.
+#if 0
+       get_rate_set(padapter, bssrate, &bssrate_len);
+#else
+       for (bssrate_len = 0; bssrate_len < NumRates; bssrate_len++) {
+               if (pmlmeinfo->network.SupportedRates[bssrate_len] == 0) break;
+
+               if (pmlmeinfo->network.SupportedRates[bssrate_len] == 0x2C) // Avoid the proprietary data rate (22Mbps) of Handlink WSG-4000 AP
+                       break;
+
+               bssrate[bssrate_len] = pmlmeinfo->network.SupportedRates[bssrate_len];
+       }
+#endif
+#endif // Check if the AP's supported rates are also supported by STA.
+
+       if (bssrate_len == 0) {
+               rtw_free_xmitbuf(pxmitpriv, pmgntframe->pxmitbuf);
+               rtw_free_xmitframe(pxmitpriv, pmgntframe);
+               goto exit; //don't connect to AP if no joint supported rate
+       }
+
+
+       if (bssrate_len > 8)
+       {
+               pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_ , 8, bssrate, &(pattrib->pktlen));
+               pframe = rtw_set_ie(pframe, _EXT_SUPPORTEDRATES_IE_ , (bssrate_len - 8), (bssrate + 8), &(pattrib->pktlen));
+       }
+       else
+       {
+               pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_ , bssrate_len , bssrate, &(pattrib->pktlen));
+       }
+
+#ifdef CONFIG_DFS
+       if(pmlmeext->cur_channel > 14)
+       {
+               pow_cap_ele[0] = 13;    // Minimum transmit power capability
+               pow_cap_ele[1] = 21;    // Maximum transmit power capability
+               pframe = rtw_set_ie(pframe, _POW_CAP_IE_, 2, pow_cap_ele, &(pattrib->pktlen));
+
+               //supported channels
+               do{
+                       if( pmlmeext->channel_set[sup_ch_idx].ChannelNum <= 14 )
+                       {
+                               sup_ch[0] = 1;  //First channel number
+                               sup_ch[1] = pmlmeext->channel_set[sup_ch_idx].ChannelNum;       //Number of channel
+                       }
+                       else
+                       {
+                               sup_ch[idx_5g++] = pmlmeext->channel_set[sup_ch_idx].ChannelNum;
+                               sup_ch[idx_5g++] = 1;
+                       }
+                       sup_ch_idx++;
+               }
+               while( pmlmeext->channel_set[sup_ch_idx].ChannelNum != 0 );
+               pframe = rtw_set_ie(pframe, _SUPPORTED_CH_IE_, idx_5g, sup_ch, &(pattrib->pktlen));
+       }
+#endif //CONFIG_DFS
+
+       //RSN
+       p = rtw_get_ie((pmlmeinfo->network.IEs + sizeof(NDIS_802_11_FIXED_IEs)), _RSN_IE_2_, &ie_len, (pmlmeinfo->network.IELength - sizeof(NDIS_802_11_FIXED_IEs)));
+       if (p != NULL)
+       {
+               pframe = rtw_set_ie(pframe, _RSN_IE_2_, ie_len, (p + 2), &(pattrib->pktlen));
+       }
+
+#ifdef CONFIG_80211N_HT
+       //HT caps
+       if(padapter->mlmepriv.htpriv.ht_option==_TRUE)
+       {
+               p = rtw_get_ie((pmlmeinfo->network.IEs + sizeof(NDIS_802_11_FIXED_IEs)), _HT_CAPABILITY_IE_, &ie_len, (pmlmeinfo->network.IELength - sizeof(NDIS_802_11_FIXED_IEs)));
+               if ((p != NULL) && (!(is_ap_in_tkip(padapter))))
+               {
+                       _rtw_memcpy(&(pmlmeinfo->HT_caps), (p + 2), sizeof(struct HT_caps_element));
+
+                       //to disable 40M Hz support while gd_bw_40MHz_en = 0
+                       if( pmlmeext->cur_channel > 14)
+                       {
+                               if(pregpriv->cbw40_enable & BIT(1) )
+                                       cbw40_enable=1;
+                       }
+                       else
+                               if(pregpriv->cbw40_enable & BIT(0) )
+                                       cbw40_enable=1;
+
+                       if (cbw40_enable == 0)
+                       {
+                               pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info &= (~(BIT(6) | BIT(1)));
+                       }
+                       else
+                       {
+                               pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info |= BIT(1);
+                       }
+
+                       //todo: disable SM power save mode
+                       pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info |= 0x000c;
+
+                       rtw_hal_get_hwreg(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
+                       //switch (pregpriv->rf_config)
+                       switch(rf_type)
+                       {
+                               case RF_1T1R:
+
+                                       if(pregpriv->rx_stbc)
+                                               pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info |= cpu_to_le16(0x0100);//RX STBC One spatial stream
+
+                                       _rtw_memcpy(pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate, MCS_rate_1R, 16);
+                                       break;
+
+                               case RF_2T2R:
+                               case RF_1T2R:
+                               default:
+
+
+                                       if(pregpriv->special_rf_path)
+                                       {
+                                               if(pregpriv->rx_stbc)
+                                                       pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info |= cpu_to_le16(0x0100);//RX STBC One spatial stream
+                                               _rtw_memcpy(pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate, MCS_rate_1R, 16);
+                                               break;
+                                       }
+
+                                       if((pregpriv->rx_stbc == 0x3) ||//enable for 2.4/5 GHz
+                                               ((pmlmeext->cur_wireless_mode & WIRELESS_11_24N) && (pregpriv->rx_stbc == 0x1)) || //enable for 2.4GHz
+                                               ((pmlmeext->cur_wireless_mode & WIRELESS_11_5N) && (pregpriv->rx_stbc == 0x2)) || //enable for 5GHz
+                                               (pregpriv->wifi_spec==1))
+                                       {
+                                               DBG_871X("declare supporting RX STBC\n");
+                                               pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info |= cpu_to_le16(0x0200);//RX STBC two spatial stream
+                                       }
+                                       #ifdef CONFIG_DISABLE_MCS13TO15
+                                       if(pmlmeext->cur_bwmode == HT_CHANNEL_WIDTH_40 && (pregpriv->wifi_spec!=1))
+                                               _rtw_memcpy(pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate, MCS_rate_2R_MCS13TO15_OFF, 16);
+                                       else
+                                       _rtw_memcpy(pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate, MCS_rate_2R, 16);
+                                       #else //CONFIG_DISABLE_MCS13TO15
+                                       _rtw_memcpy(pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate, MCS_rate_2R, 16);
+                                       #endif //CONFIG_DISABLE_MCS13TO15
+                                       break;
+                       }
+#ifdef RTL8192C_RECONFIG_TO_1T1R
+                       {
+                               if(pregpriv->rx_stbc)
+                                       pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info |= cpu_to_le16(0x0100);//RX STBC One spatial stream
+
+                               _rtw_memcpy(pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate, MCS_rate_1R, 16);
+                       }
+#endif
+                       pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info = cpu_to_le16(pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info);
+                       pframe = rtw_set_ie(pframe, _HT_CAPABILITY_IE_, ie_len , (u8 *)(&(pmlmeinfo->HT_caps)), &(pattrib->pktlen));
+
+               }
+       }
+#endif
+
+       //vendor specific IE, such as WPA, WMM, WPS
+       for (i = sizeof(NDIS_802_11_FIXED_IEs); i < pmlmeinfo->network.IELength;)
+       {
+               pIE = (PNDIS_802_11_VARIABLE_IEs)(pmlmeinfo->network.IEs + i);
+
+               switch (pIE->ElementID)
+               {
+                       case _VENDOR_SPECIFIC_IE_:
+                               if ((_rtw_memcmp(pIE->data, RTW_WPA_OUI, 4)) ||
+                                               (_rtw_memcmp(pIE->data, WMM_OUI, 4)) ||
+                                               (_rtw_memcmp(pIE->data, WPS_OUI, 4)))
+                               {
+                                       if(!padapter->registrypriv.wifi_spec)
+                                       {
+                                               //Commented by Kurt 20110629
+                                               //In some older APs, WPS handshake
+                                               //would be fail if we append vender extensions informations to AP
+                                               if(_rtw_memcmp(pIE->data, WPS_OUI, 4)){
+                                                       pIE->Length=14;
+                                               }
+                                       }
+                                       pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, pIE->Length, pIE->data, &(pattrib->pktlen));
+                               }
+                               break;
+
+                       default:
+                               break;
+               }
+
+               i += (pIE->Length + 2);
+       }
+
+       if (pmlmeinfo->assoc_AP_vendor == realtekAP)
+       {
+               pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, 6 , REALTEK_96B_IE, &(pattrib->pktlen));
+       }
+
+#ifdef CONFIG_P2P
+
+#ifdef CONFIG_IOCTL_CFG80211
+       if(wdev_to_priv(padapter->rtw_wdev)->p2p_enabled && pwdinfo->driver_interface == DRIVER_CFG80211 )
+       {
+               if(pmlmepriv->p2p_assoc_req_ie && pmlmepriv->p2p_assoc_req_ie_len>0)
+               {
+                       _rtw_memcpy(pframe, pmlmepriv->p2p_assoc_req_ie, pmlmepriv->p2p_assoc_req_ie_len);
+                       pframe += pmlmepriv->p2p_assoc_req_ie_len;
+                       pattrib->pktlen += pmlmepriv->p2p_assoc_req_ie_len;
+               }
+       }
+       else
+#endif //CONFIG_IOCTL_CFG80211
+       {
+               if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE) && !rtw_p2p_chk_state(pwdinfo, P2P_STATE_IDLE))
+               {
+                       //      Should add the P2P IE in the association request frame.
+                       //      P2P OUI
+
+                       p2pielen = 0;
+                       p2pie[ p2pielen++ ] = 0x50;
+                       p2pie[ p2pielen++ ] = 0x6F;
+                       p2pie[ p2pielen++ ] = 0x9A;
+                       p2pie[ p2pielen++ ] = 0x09;     //      WFA P2P v1.0
+
+                       //      Commented by Albert 20101109
+                       //      According to the P2P Specification, the association request frame should contain 3 P2P attributes
+                       //      1. P2P Capability
+                       //      2. Extended Listen Timing
+                       //      3. Device Info
+                       //      Commented by Albert 20110516
+                       //      4. P2P Interface
+
+                       //      P2P Capability
+                       //      Type:
+                       p2pie[ p2pielen++ ] = P2P_ATTR_CAPABILITY;
+
+                       //      Length:
+                       *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0002 );
+                       p2pielen += 2;
+
+                       //      Value:
+                       //      Device Capability Bitmap, 1 byte
+                       p2pie[ p2pielen++ ] = DMP_P2P_DEVCAP_SUPPORT;
+
+                       //      Group Capability Bitmap, 1 byte
+                       if ( pwdinfo->persistent_supported )
+                               p2pie[ p2pielen++ ] = P2P_GRPCAP_PERSISTENT_GROUP | DMP_P2P_GRPCAP_SUPPORT;
+                       else
+                               p2pie[ p2pielen++ ] = DMP_P2P_GRPCAP_SUPPORT;
+
+                       //      Extended Listen Timing
+                       //      Type:
+                       p2pie[ p2pielen++ ] = P2P_ATTR_EX_LISTEN_TIMING;
+
+                       //      Length:
+                       *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0004 );
+                       p2pielen += 2;
+
+                       //      Value:
+                       //      Availability Period
+                       *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0xFFFF );
+                       p2pielen += 2;
+
+                       //      Availability Interval
+                       *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0xFFFF );
+                       p2pielen += 2;
+
+                       //      Device Info
+                       //      Type:
+                       p2pie[ p2pielen++ ] = P2P_ATTR_DEVICE_INFO;
+
+                       //      Length:
+                       //      21 -> P2P Device Address (6bytes) + Config Methods (2bytes) + Primary Device Type (8bytes)
+                       //      + NumofSecondDevType (1byte) + WPS Device Name ID field (2bytes) + WPS Device Name Len field (2bytes)
+                       *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 21 + pwdinfo->device_name_len );
+                       p2pielen += 2;
+
+                       //      Value:
+                       //      P2P Device Address
+                       _rtw_memcpy( p2pie + p2pielen, myid( &padapter->eeprompriv ), ETH_ALEN );
+                       p2pielen += ETH_ALEN;
+
+                       //      Config Method
+                       //      This field should be big endian. Noted by P2P specification.
+                       if ( ( pwdinfo->ui_got_wps_info == P2P_GOT_WPSINFO_PEER_DISPLAY_PIN ) ||
+                               ( pwdinfo->ui_got_wps_info == P2P_GOT_WPSINFO_SELF_DISPLAY_PIN ) )
+                       {
+                               *(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_CONFIG_METHOD_DISPLAY );
+                       }
+                       else
+                       {
+                               *(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_CONFIG_METHOD_PBC );
+                       }
+
+                       p2pielen += 2;
+
+                       //      Primary Device Type
+                       //      Category ID
+                       *(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_CID_MULIT_MEDIA );
+                       p2pielen += 2;
+
+                       //      OUI
+                       *(u32*) ( p2pie + p2pielen ) = cpu_to_be32( WPSOUI );
+                       p2pielen += 4;
+
+                       //      Sub Category ID
+                       *(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_SCID_MEDIA_SERVER );
+                       p2pielen += 2;
+
+                       //      Number of Secondary Device Types
+                       p2pie[ p2pielen++ ] = 0x00;     //      No Secondary Device Type List
+
+                       //      Device Name
+                       //      Type:
+                       *(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_ATTR_DEVICE_NAME );
+                       p2pielen += 2;
+
+                       //      Length:
+                       *(u16*) ( p2pie + p2pielen ) = cpu_to_be16( pwdinfo->device_name_len );
+                       p2pielen += 2;
+
+                       //      Value:
+                       _rtw_memcpy( p2pie + p2pielen, pwdinfo->device_name, pwdinfo->device_name_len );
+                       p2pielen += pwdinfo->device_name_len;
+
+                       //      P2P Interface
+                       //      Type:
+                       p2pie[ p2pielen++ ] = P2P_ATTR_INTERFACE;
+
+                       //      Length:
+                       *(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x000D );
+                       p2pielen += 2;
+
+                       //      Value:
+                       _rtw_memcpy( p2pie + p2pielen, pwdinfo->device_addr, ETH_ALEN );        //      P2P Device Address
+                       p2pielen += ETH_ALEN;
+
+                       p2pie[ p2pielen++ ] = 1;        //      P2P Interface Address Count
+
+                       _rtw_memcpy( p2pie + p2pielen, pwdinfo->device_addr, ETH_ALEN );        //      P2P Interface Address List
+                       p2pielen += ETH_ALEN;
+
+                       pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, p2pielen, (unsigned char *) p2pie, &pattrib->pktlen );
+
+#ifdef CONFIG_WFD
+                       //wfdielen = build_assoc_req_wfd_ie(pwdinfo, pframe);
+                       //pframe += wfdielen;
+                       //pattrib->pktlen += wfdielen;
+#endif //CONFIG_WFD
+               }
+       }
+
+#endif //CONFIG_P2P
+
+#ifdef CONFIG_WFD
+#ifdef CONFIG_IOCTL_CFG80211
+       if ( _TRUE == pwdinfo->wfd_info->wfd_enable )
+#endif //CONFIG_IOCTL_CFG80211
+       {
+               wfdielen = build_assoc_req_wfd_ie(pwdinfo, pframe);
+               pframe += wfdielen;
+               pattrib->pktlen += wfdielen;
+       }
+#ifdef CONFIG_IOCTL_CFG80211
+       else if (pmlmepriv->wfd_assoc_req_ie != NULL && pmlmepriv->wfd_assoc_req_ie_len>0)
+       {
+               //WFD IE
+               _rtw_memcpy(pframe, pmlmepriv->wfd_assoc_req_ie, pmlmepriv->wfd_assoc_req_ie_len);
+               pattrib->pktlen += pmlmepriv->wfd_assoc_req_ie_len;
+               pframe += pmlmepriv->wfd_assoc_req_ie_len;
+       }
+#endif //CONFIG_IOCTL_CFG80211
+#endif //CONFIG_WFD
+
+       pattrib->last_txcmdsz = pattrib->pktlen;
+       dump_mgntframe(padapter, pmgntframe);
+
+       ret = _SUCCESS;
+
+exit:
+       if (ret == _SUCCESS)
+               rtw_buf_update(&pmlmepriv->assoc_req, &pmlmepriv->assoc_req_len, (u8 *)pwlanhdr, pattrib->pktlen);
+       else
+               rtw_buf_free(&pmlmepriv->assoc_req, &pmlmepriv->assoc_req_len);
+
+       return;
+}
+
+//when wait_ack is ture, this function shoule be called at process context
+static int _issue_nulldata(_adapter *padapter, unsigned char *da, unsigned int power_mode, int wait_ack)
+{
+       int ret = _FAIL;
+       struct xmit_frame                       *pmgntframe;
+       struct pkt_attrib                       *pattrib;
+       unsigned char                                   *pframe;
+       struct rtw_ieee80211_hdr        *pwlanhdr;
+       unsigned short                          *fctrl;
+       struct xmit_priv        *pxmitpriv;
+       struct mlme_ext_priv    *pmlmeext;
+       struct mlme_ext_info    *pmlmeinfo;
+
+       //DBG_871X("%s:%d\n", __FUNCTION__, power_mode);
+
+       if(!padapter)
+               goto exit;
+
+       pxmitpriv = &(padapter->xmitpriv);
+       pmlmeext = &(padapter->mlmeextpriv);
+       pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+       {
+               goto exit;
+       }
+
+       //update attribute
+       pattrib = &pmgntframe->attrib;
+       update_mgntframe_attrib(padapter, pattrib);
+       pattrib->retry_ctrl = _FALSE;
+
+       _rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
+
+       pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+
+       fctrl = &(pwlanhdr->frame_ctl);
+       *(fctrl) = 0;
+
+       if((pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE)
+       {
+               SetFrDs(fctrl);
+       }
+       else if((pmlmeinfo->state&0x03) == WIFI_FW_STATION_STATE)
+       {
+               SetToDs(fctrl);
+       }
+
+       if (power_mode)
+       {
+               SetPwrMgt(fctrl);
+       }
+
+       _rtw_memcpy(pwlanhdr->addr1, da, ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr3, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
+
+       SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
+       pmlmeext->mgnt_seq++;
+       SetFrameSubType(pframe, WIFI_DATA_NULL);
+
+       pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
+       pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
+
+       pattrib->last_txcmdsz = pattrib->pktlen;
+
+       if(wait_ack)
+       {
+               ret = dump_mgntframe_and_wait_ack(padapter, pmgntframe);
+       }
+       else
+       {
+               dump_mgntframe(padapter, pmgntframe);
+               ret = _SUCCESS;
+       }
+
+exit:
+       return ret;
+}
+
+
+//when wait_ms >0 , this function shoule be called at process context
+//da == NULL for station mode
+int issue_nulldata(_adapter *padapter, unsigned char *da, unsigned int power_mode, int try_cnt, int wait_ms)
+{
+       int ret;
+       int i = 0;
+       u32 start = rtw_get_current_time();
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       /* da == NULL, assum it's null data for sta to ap*/
+       if (da == NULL)
+               da = get_my_bssid(&(pmlmeinfo->network));
+
+       do
+       {
+               ret = _issue_nulldata(padapter, da, power_mode, wait_ms>0?_TRUE:_FALSE);
+
+               i++;
+
+               if (padapter->bDriverStopped || padapter->bSurpriseRemoved)
+                       break;
+
+               if(i < try_cnt && wait_ms > 0 && ret==_FAIL)
+                       rtw_msleep_os(wait_ms);
+
+       }while((i<try_cnt) && ((ret==_FAIL)||(wait_ms==0)));
+
+       if (ret != _FAIL) {
+               ret = _SUCCESS;
+               #ifndef DBG_XMIT_ACK
+               goto exit;
+               #endif
+       }
+
+       if (try_cnt && wait_ms) {
+               if (da)
+                       DBG_871X(FUNC_ADPT_FMT" to "MAC_FMT", ch:%u%s, %d/%d in %u ms\n",
+                               FUNC_ADPT_ARG(padapter), MAC_ARG(da), rtw_get_oper_ch(padapter),
+                               ret==_SUCCESS?", acked":"", i, try_cnt, rtw_get_passing_time_ms(start));
+               else
+                       DBG_871X(FUNC_ADPT_FMT", ch:%u%s, %d/%d in %u ms\n",
+                               FUNC_ADPT_ARG(padapter), rtw_get_oper_ch(padapter),
+                               ret==_SUCCESS?", acked":"", i, try_cnt, rtw_get_passing_time_ms(start));
+       }
+exit:
+       return ret;
+}
+
+//when wait_ack is ture, this function shoule be called at process context
+static int _issue_qos_nulldata(_adapter *padapter, unsigned char *da, u16 tid, int wait_ack)
+{
+       int ret = _FAIL;
+       struct xmit_frame                       *pmgntframe;
+       struct pkt_attrib                       *pattrib;
+       unsigned char                                   *pframe;
+       struct rtw_ieee80211_hdr        *pwlanhdr;
+       unsigned short                          *fctrl, *qc;
+       struct xmit_priv                        *pxmitpriv = &(padapter->xmitpriv);
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       DBG_871X("%s\n", __FUNCTION__);
+
+       if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+       {
+               goto exit;
+       }
+
+       //update attribute
+       pattrib = &pmgntframe->attrib;
+       update_mgntframe_attrib(padapter, pattrib);
+
+       pattrib->hdrlen +=2;
+       pattrib->qos_en = _TRUE;
+       pattrib->eosp = 1;
+       pattrib->ack_policy = 0;
+       pattrib->mdata = 0;
+
+       _rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
+
+       pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+
+       fctrl = &(pwlanhdr->frame_ctl);
+       *(fctrl) = 0;
+
+       if((pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE)
+       {
+               SetFrDs(fctrl);
+       }
+       else if((pmlmeinfo->state&0x03) == WIFI_FW_STATION_STATE)
+       {
+               SetToDs(fctrl);
+       }
+
+       if(pattrib->mdata)
+               SetMData(fctrl);
+
+       qc = (unsigned short *)(pframe + pattrib->hdrlen - 2);
+
+       SetPriority(qc, tid);
+
+       SetEOSP(qc, pattrib->eosp);
+
+       SetAckpolicy(qc, pattrib->ack_policy);
+
+       _rtw_memcpy(pwlanhdr->addr1, da, ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr3, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
+
+       SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
+       pmlmeext->mgnt_seq++;
+       SetFrameSubType(pframe, WIFI_QOS_DATA_NULL);
+
+       pframe += sizeof(struct rtw_ieee80211_hdr_3addr_qos);
+       pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr_qos);
+
+       pattrib->last_txcmdsz = pattrib->pktlen;
+
+       if(wait_ack)
+       {
+               ret = dump_mgntframe_and_wait_ack(padapter, pmgntframe);
+       }
+       else
+       {
+               dump_mgntframe(padapter, pmgntframe);
+               ret = _SUCCESS;
+       }
+
+exit:
+       return ret;
+}
+
+//when wait_ms >0 , this function shoule be called at process context
+//da == NULL for station mode
+int issue_qos_nulldata(_adapter *padapter, unsigned char *da, u16 tid, int try_cnt, int wait_ms)
+{
+       int ret;
+       int i = 0;
+       u32 start = rtw_get_current_time();
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       /* da == NULL, assum it's null data for sta to ap*/
+       if (da == NULL)
+               da = get_my_bssid(&(pmlmeinfo->network));
+
+       do
+       {
+               ret = _issue_qos_nulldata(padapter, da, tid, wait_ms>0?_TRUE:_FALSE);
+
+               i++;
+
+               if (padapter->bDriverStopped || padapter->bSurpriseRemoved)
+                       break;
+
+               if(i < try_cnt && wait_ms > 0 && ret==_FAIL)
+                       rtw_msleep_os(wait_ms);
+
+       }while((i<try_cnt) && ((ret==_FAIL)||(wait_ms==0)));
+
+       if (ret != _FAIL) {
+               ret = _SUCCESS;
+               #ifndef DBG_XMIT_ACK
+               goto exit;
+               #endif
+       }
+
+       if (try_cnt && wait_ms) {
+               if (da)
+                       DBG_871X(FUNC_ADPT_FMT" to "MAC_FMT", ch:%u%s, %d/%d in %u ms\n",
+                               FUNC_ADPT_ARG(padapter), MAC_ARG(da), rtw_get_oper_ch(padapter),
+                               ret==_SUCCESS?", acked":"", i, try_cnt, rtw_get_passing_time_ms(start));
+               else
+                       DBG_871X(FUNC_ADPT_FMT", ch:%u%s, %d/%d in %u ms\n",
+                               FUNC_ADPT_ARG(padapter), rtw_get_oper_ch(padapter),
+                               ret==_SUCCESS?", acked":"", i, try_cnt, rtw_get_passing_time_ms(start));
+       }
+exit:
+       return ret;
+}
+
+static int _issue_deauth(_adapter *padapter, unsigned char *da, unsigned short reason, u8 wait_ack)
+{
+       struct xmit_frame                       *pmgntframe;
+       struct pkt_attrib                       *pattrib;
+       unsigned char                                   *pframe;
+       struct rtw_ieee80211_hdr        *pwlanhdr;
+       unsigned short                          *fctrl;
+       struct xmit_priv                        *pxmitpriv = &(padapter->xmitpriv);
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       int ret = _FAIL;
+#ifdef CONFIG_P2P
+       struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
+#endif //CONFIG_P2P
+
+       //DBG_871X("%s to "MAC_FMT"\n", __func__, MAC_ARG(da));
+
+#ifdef CONFIG_P2P
+       if ( !( rtw_p2p_chk_state( pwdinfo, P2P_STATE_NONE ) ) && ( pwdinfo->rx_invitereq_info.scan_op_ch_only ) )
+       {
+               _cancel_timer_ex( &pwdinfo->reset_ch_sitesurvey );
+               _set_timer( &pwdinfo->reset_ch_sitesurvey, 10 );
+       }
+#endif //CONFIG_P2P
+
+       if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+       {
+               goto exit;
+       }
+
+       //update attribute
+       pattrib = &pmgntframe->attrib;
+       update_mgntframe_attrib(padapter, pattrib);
+       pattrib->retry_ctrl = _FALSE;
+
+       _rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
+
+       pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+
+       fctrl = &(pwlanhdr->frame_ctl);
+       *(fctrl) = 0;
+
+       _rtw_memcpy(pwlanhdr->addr1, da, ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr3, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
+
+       SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
+       pmlmeext->mgnt_seq++;
+       SetFrameSubType(pframe, WIFI_DEAUTH);
+
+       pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
+       pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
+
+       reason = cpu_to_le16(reason);
+       pframe = rtw_set_fixed_ie(pframe, _RSON_CODE_ , (unsigned char *)&reason, &(pattrib->pktlen));
+
+       pattrib->last_txcmdsz = pattrib->pktlen;
+
+
+       if(wait_ack)
+       {
+               ret = dump_mgntframe_and_wait_ack(padapter, pmgntframe);
+       }
+       else
+       {
+               dump_mgntframe(padapter, pmgntframe);
+               ret = _SUCCESS;
+       }
+
+exit:
+       return ret;
+}
+
+int issue_deauth(_adapter *padapter, unsigned char *da, unsigned short reason)
+{
+       DBG_871X("%s to "MAC_FMT"\n", __func__, MAC_ARG(da));
+       return _issue_deauth(padapter, da, reason, _FALSE);
+}
+
+int issue_deauth_ex(_adapter *padapter, u8 *da, unsigned short reason, int try_cnt,
+       int wait_ms)
+{
+       int ret;
+       int i = 0;
+       u32 start = rtw_get_current_time();
+
+       do
+       {
+               ret = _issue_deauth(padapter, da, reason, wait_ms>0?_TRUE:_FALSE);
+
+               i++;
+
+               if (padapter->bDriverStopped || padapter->bSurpriseRemoved)
+                       break;
+
+               if(i < try_cnt && wait_ms > 0 && ret==_FAIL)
+                       rtw_msleep_os(wait_ms);
+
+       }while((i<try_cnt) && ((ret==_FAIL)||(wait_ms==0)));
+
+       if (ret != _FAIL) {
+               ret = _SUCCESS;
+               #ifndef DBG_XMIT_ACK
+               goto exit;
+               #endif
+       }
+
+       if (try_cnt && wait_ms) {
+               if (da)
+                       DBG_871X(FUNC_ADPT_FMT" to "MAC_FMT", ch:%u%s, %d/%d in %u ms\n",
+                               FUNC_ADPT_ARG(padapter), MAC_ARG(da), rtw_get_oper_ch(padapter),
+                               ret==_SUCCESS?", acked":"", i, try_cnt, rtw_get_passing_time_ms(start));
+               else
+                       DBG_871X(FUNC_ADPT_FMT", ch:%u%s, %d/%d in %u ms\n",
+                               FUNC_ADPT_ARG(padapter), rtw_get_oper_ch(padapter),
+                               ret==_SUCCESS?", acked":"", i, try_cnt, rtw_get_passing_time_ms(start));
+       }
+exit:
+       return ret;
+}
+
+void issue_action_spct_ch_switch(_adapter *padapter, u8 *ra, u8 new_ch, u8 ch_offset)
+{
+       _irqL   irqL;
+       _list           *plist, *phead;
+       struct xmit_frame                       *pmgntframe;
+       struct pkt_attrib                       *pattrib;
+       unsigned char                           *pframe;
+       struct rtw_ieee80211_hdr        *pwlanhdr;
+       unsigned short                  *fctrl;
+       struct xmit_priv                        *pxmitpriv = &(padapter->xmitpriv);
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+
+       DBG_871X(FUNC_NDEV_FMT" ra="MAC_FMT", ch:%u, offset:%u\n",
+               FUNC_NDEV_ARG(padapter->pnetdev), MAC_ARG(ra), new_ch, ch_offset);
+
+       if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+               return;
+
+       //update attribute
+       pattrib = &pmgntframe->attrib;
+       update_mgntframe_attrib(padapter, pattrib);
+
+       _rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
+
+       pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+
+       fctrl = &(pwlanhdr->frame_ctl);
+       *(fctrl) = 0;
+
+       _rtw_memcpy(pwlanhdr->addr1, ra, ETH_ALEN); /* RA */
+       _rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN); /* TA */
+       _rtw_memcpy(pwlanhdr->addr3, ra, ETH_ALEN); /* DA = RA */
+
+       SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
+       pmlmeext->mgnt_seq++;
+       SetFrameSubType(pframe, WIFI_ACTION);
+
+       pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
+       pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
+
+       /* category, action */
+       {
+               u8 category, action;
+               category = RTW_WLAN_CATEGORY_SPECTRUM_MGMT;
+               action = RTW_WLAN_ACTION_SPCT_CHL_SWITCH;
+
+               pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
+               pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
+       }
+
+       pframe = rtw_set_ie_ch_switch(pframe, &(pattrib->pktlen), 0, new_ch, 0);
+       pframe = rtw_set_ie_secondary_ch_offset(pframe, &(pattrib->pktlen),
+               hal_ch_offset_to_secondary_ch_offset(ch_offset));
+
+       pattrib->last_txcmdsz = pattrib->pktlen;
+
+       dump_mgntframe(padapter, pmgntframe);
+
+}
+
+#ifdef CONFIG_IEEE80211W
+void issue_action_SA_Query(_adapter *padapter, unsigned char *raddr, unsigned char action, unsigned short tid)
+{
+       u8      category = RTW_WLAN_CATEGORY_SA_QUERY;
+       u16     reason_code;
+       struct xmit_frame               *pmgntframe;
+       struct pkt_attrib               *pattrib;
+       u8                                      *pframe;
+       struct rtw_ieee80211_hdr        *pwlanhdr;
+       u16                                     *fctrl;
+       struct xmit_priv                *pxmitpriv = &(padapter->xmitpriv);
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       struct sta_info         *psta;
+       struct sta_priv         *pstapriv = &padapter->stapriv;
+       struct registry_priv            *pregpriv = &padapter->registrypriv;
+
+
+       DBG_871X("%s\n", __FUNCTION__);
+
+       if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+       {
+               DBG_871X("%s: alloc_mgtxmitframe fail\n", __FUNCTION__);
+               return;
+       }
+
+       //update attribute
+       pattrib = &pmgntframe->attrib;
+       update_mgntframe_attrib(padapter, pattrib);
+
+       _rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
+
+       pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+
+       fctrl = &(pwlanhdr->frame_ctl);
+       *(fctrl) = 0;
+
+       if(raddr)
+               _rtw_memcpy(pwlanhdr->addr1, raddr, ETH_ALEN);
+       else
+               _rtw_memcpy(pwlanhdr->addr1, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr3, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
+
+       SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
+       pmlmeext->mgnt_seq++;
+       SetFrameSubType(pframe, WIFI_ACTION);
+
+       pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
+       pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
+
+       pframe = rtw_set_fixed_ie(pframe, 1, &category, &pattrib->pktlen);
+       pframe = rtw_set_fixed_ie(pframe, 1, &action, &pattrib->pktlen);
+
+       switch (action)
+       {
+               case 0: //SA Query req
+                       pframe = rtw_set_fixed_ie(pframe, 2, (unsigned char *)&pmlmeext->sa_query_seq, &pattrib->pktlen);
+                       pmlmeext->sa_query_seq++;
+                       //send sa query request to AP, AP should reply sa query response in 1 second
+                       set_sa_query_timer(pmlmeext, 1000);
+                       break;
+
+               case 1: //SA Query rsp
+                       tid = cpu_to_le16(tid);
+                       pframe = rtw_set_fixed_ie(pframe, 2, (unsigned char *)&tid, &pattrib->pktlen);
+                       break;
+               default:
+                       break;
+       }
+
+       pattrib->last_txcmdsz = pattrib->pktlen;
+
+       dump_mgntframe(padapter, pmgntframe);
+}
+#endif //CONFIG_IEEE80211W
+
+void issue_action_BA(_adapter *padapter, unsigned char *raddr, unsigned char action, unsigned short status)
+{
+       u8      category = RTW_WLAN_CATEGORY_BACK;
+       u16     start_seq;
+       u16     BA_para_set;
+       u16     reason_code;
+       u16     BA_timeout_value;
+       u16     BA_starting_seqctrl;
+       struct xmit_frame               *pmgntframe;
+       struct pkt_attrib               *pattrib;
+       u8                                      *pframe;
+       struct rtw_ieee80211_hdr        *pwlanhdr;
+       u16                                     *fctrl;
+       struct xmit_priv                *pxmitpriv = &(padapter->xmitpriv);
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       struct sta_info         *psta;
+       struct sta_priv         *pstapriv = &padapter->stapriv;
+       struct registry_priv            *pregpriv = &padapter->registrypriv;
+
+
+       DBG_871X("%s, category=%d, action=%d, status=%d\n", __FUNCTION__, category, action, status);
+
+       if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+       {
+               return;
+       }
+
+       //update attribute
+       pattrib = &pmgntframe->attrib;
+       update_mgntframe_attrib(padapter, pattrib);
+
+       _rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
+
+       pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+
+       fctrl = &(pwlanhdr->frame_ctl);
+       *(fctrl) = 0;
+
+       //_rtw_memcpy(pwlanhdr->addr1, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr1, raddr, ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr3, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
+
+       SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
+       pmlmeext->mgnt_seq++;
+       SetFrameSubType(pframe, WIFI_ACTION);
+
+       pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
+       pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
+
+       pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
+
+      status = cpu_to_le16(status);
+
+
+       if (category == 3)
+       {
+               switch (action)
+               {
+                       case 0: //ADDBA req
+                               do {
+                                       pmlmeinfo->dialogToken++;
+                               } while (pmlmeinfo->dialogToken == 0);
+                               pframe = rtw_set_fixed_ie(pframe, 1, &(pmlmeinfo->dialogToken), &(pattrib->pktlen));
+
+                               BA_para_set = (0x1002 | ((status & 0xf) << 2)); //immediate ack & 64 buffer size
+                               //sys_mib.BA_para_set = 0x0802; //immediate ack & 32 buffer size
+                               BA_para_set = cpu_to_le16(BA_para_set);
+                               pframe = rtw_set_fixed_ie(pframe, 2, (unsigned char *)(&(BA_para_set)), &(pattrib->pktlen));
+
+                               //BA_timeout_value = 0xffff;//max: 65535 TUs(~ 65 ms)
+                               BA_timeout_value = 5000;//~ 5ms
+                               BA_timeout_value = cpu_to_le16(BA_timeout_value);
+                               pframe = rtw_set_fixed_ie(pframe, 2, (unsigned char *)(&(BA_timeout_value)), &(pattrib->pktlen));
+
+                               //if ((psta = rtw_get_stainfo(pstapriv, pmlmeinfo->network.MacAddress)) != NULL)
+                               if ((psta = rtw_get_stainfo(pstapriv, raddr)) != NULL)
+                               {
+                                       start_seq = (psta->sta_xmitpriv.txseq_tid[status & 0x07]&0xfff) + 1;
+
+                                       DBG_871X("BA_starting_seqctrl = %d for TID=%d\n", start_seq, status & 0x07);
+
+                                       psta->BA_starting_seqctrl[status & 0x07] = start_seq;
+
+                                       BA_starting_seqctrl = start_seq << 4;
+                               }
+
+                               BA_starting_seqctrl = cpu_to_le16(BA_starting_seqctrl);
+                               pframe = rtw_set_fixed_ie(pframe, 2, (unsigned char *)(&(BA_starting_seqctrl)), &(pattrib->pktlen));
+                               break;
+
+                       case 1: //ADDBA rsp
+                               pframe = rtw_set_fixed_ie(pframe, 1, &(pmlmeinfo->ADDBA_req.dialog_token), &(pattrib->pktlen));
+                               pframe = rtw_set_fixed_ie(pframe, 2, (unsigned char *)(&status), &(pattrib->pktlen));
+
+                               //BA_para_set = cpu_to_le16((le16_to_cpu(pmlmeinfo->ADDBA_req.BA_para_set) & 0x3f) | 0x1000); //64 buffer size
+                               BA_para_set = ((le16_to_cpu(pmlmeinfo->ADDBA_req.BA_para_set) & 0x3f) | 0x1000); //64 buffer size
+
+                               if(pregpriv->ampdu_amsdu==0)//disabled
+                                       BA_para_set = cpu_to_le16(BA_para_set & ~BIT(0));
+                               else if(pregpriv->ampdu_amsdu==1)//enabled
+                                       BA_para_set = cpu_to_le16(BA_para_set | BIT(0));
+                               else //auto
+                                       BA_para_set = cpu_to_le16(BA_para_set);
+
+                               pframe = rtw_set_fixed_ie(pframe, 2, (unsigned char *)(&(BA_para_set)), &(pattrib->pktlen));
+                               pframe = rtw_set_fixed_ie(pframe, 2, (unsigned char *)(&(pmlmeinfo->ADDBA_req.BA_timeout_value)), &(pattrib->pktlen));
+                               break;
+                       case 2://DELBA
+                               BA_para_set = (status & 0x1F) << 3;
+                               BA_para_set = cpu_to_le16(BA_para_set);
+                               pframe = rtw_set_fixed_ie(pframe, 2, (unsigned char *)(&(BA_para_set)), &(pattrib->pktlen));
+
+                               reason_code = 37;//Requested from peer STA as it does not want to use the mechanism
+                               reason_code = cpu_to_le16(reason_code);
+                               pframe = rtw_set_fixed_ie(pframe, 2, (unsigned char *)(&(reason_code)), &(pattrib->pktlen));
+                               break;
+                       default:
+                               break;
+               }
+       }
+
+       pattrib->last_txcmdsz = pattrib->pktlen;
+
+       dump_mgntframe(padapter, pmgntframe);
+}
+
+static void issue_action_BSSCoexistPacket(_adapter *padapter)
+{
+       _irqL   irqL;
+       _list           *plist, *phead;
+       unsigned char category, action;
+       struct xmit_frame                       *pmgntframe;
+       struct pkt_attrib                       *pattrib;
+       unsigned char                           *pframe;
+       struct rtw_ieee80211_hdr        *pwlanhdr;
+       unsigned short                  *fctrl;
+       struct  wlan_network    *pnetwork = NULL;
+       struct xmit_priv                        *pxmitpriv = &(padapter->xmitpriv);
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       _queue          *queue  = &(pmlmepriv->scanned_queue);
+       u8 InfoContent[16] = {0};
+       u8 ICS[8][15];
+
+       if((pmlmepriv->num_FortyMHzIntolerant==0) || (pmlmepriv->num_sta_no_ht==0))
+               return;
+
+       if(_TRUE == pmlmeinfo->bwmode_updated)
+               return;
+
+
+       DBG_871X("%s\n", __FUNCTION__);
+
+
+       category = RTW_WLAN_CATEGORY_PUBLIC;
+       action = ACT_PUBLIC_BSSCOEXIST;
+
+       if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+       {
+               return;
+       }
+
+       //update attribute
+       pattrib = &pmgntframe->attrib;
+       update_mgntframe_attrib(padapter, pattrib);
+
+       _rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
+
+       pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+
+       fctrl = &(pwlanhdr->frame_ctl);
+       *(fctrl) = 0;
+
+       _rtw_memcpy(pwlanhdr->addr1, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr3, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
+
+       SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
+       pmlmeext->mgnt_seq++;
+       SetFrameSubType(pframe, WIFI_ACTION);
+
+       pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
+       pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
+
+       pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
+
+
+       //
+       if(pmlmepriv->num_FortyMHzIntolerant>0)
+       {
+               u8 iedata=0;
+
+               iedata |= BIT(2);//20 MHz BSS Width Request
+
+               pframe = rtw_set_ie(pframe, EID_BSSCoexistence,  1, &iedata, &(pattrib->pktlen));
+
+       }
+
+
+       //
+       _rtw_memset(ICS, 0, sizeof(ICS));
+       if(pmlmepriv->num_sta_no_ht>0)
+       {
+               int i;
+
+               _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+
+               phead = get_list_head(queue);
+               plist = get_next(phead);
+
+               while(1)
+               {
+                       int len;
+                       u8 *p;
+                       WLAN_BSSID_EX *pbss_network;
+
+                       if (rtw_end_of_queue_search(phead,plist)== _TRUE)
+                               break;
+
+                       pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
+
+                       plist = get_next(plist);
+
+                       pbss_network = (WLAN_BSSID_EX *)&pnetwork->network;
+
+                       p = rtw_get_ie(pbss_network->IEs + _FIXED_IE_LENGTH_, _HT_CAPABILITY_IE_, &len, pbss_network->IELength - _FIXED_IE_LENGTH_);
+                       if((p==NULL) || (len==0))//non-HT
+                       {
+                               if((pbss_network->Configuration.DSConfig<=0) || (pbss_network->Configuration.DSConfig>14))
+                                       continue;
+
+                               ICS[0][pbss_network->Configuration.DSConfig]=1;
+
+                               if(ICS[0][0] == 0)
+                                       ICS[0][0] = 1;
+                       }
+
+               }
+
+               _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+
+
+               for(i= 0;i<8;i++)
+               {
+                       if(ICS[i][0] == 1)
+                       {
+                               int j, k = 0;
+
+                               InfoContent[k] = i;
+                               //SET_BSS_INTOLERANT_ELE_REG_CLASS(InfoContent,i);
+                               k++;
+
+                               for(j=1;j<=14;j++)
+                               {
+                                       if(ICS[i][j]==1)
+                                       {
+                                               if(k<16)
+                                               {
+                                                       InfoContent[k] = j; //channel number
+                                                       //SET_BSS_INTOLERANT_ELE_CHANNEL(InfoContent+k, j);
+                                                       k++;
+                                               }
+                                       }
+                               }
+
+                               pframe = rtw_set_ie(pframe, EID_BSSIntolerantChlReport, k, InfoContent, &(pattrib->pktlen));
+
+                       }
+
+               }
+
+
+       }
+
+
+       pattrib->last_txcmdsz = pattrib->pktlen;
+
+       dump_mgntframe(padapter, pmgntframe);
+
+}
+
+unsigned int send_delba(_adapter *padapter, u8 initiator, u8 *addr)
+{
+       struct sta_priv *pstapriv = &padapter->stapriv;
+       struct sta_info *psta = NULL;
+       //struct recv_reorder_ctrl *preorder_ctrl;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       u16 tid;
+
+       if((pmlmeinfo->state&0x03) != WIFI_FW_AP_STATE)
+               if (!(pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS))
+                       return _SUCCESS;
+
+       psta = rtw_get_stainfo(pstapriv, addr);
+       if(psta==NULL)
+               return _SUCCESS;
+
+       //DBG_871X("%s:%s\n", __FUNCTION__, (initiator==0)?"RX_DIR":"TX_DIR");
+
+       if(initiator==0) // recipient
+       {
+               for(tid = 0;tid<MAXTID;tid++)
+               {
+                       if(psta->recvreorder_ctrl[tid].enable == _TRUE)
+                       {
+                               DBG_871X("rx agg disable tid(%d)\n",tid);
+                               issue_action_BA(padapter, addr, RTW_WLAN_ACTION_DELBA, (((tid <<1) |initiator)&0x1F));
+                               psta->recvreorder_ctrl[tid].enable = _FALSE;
+                               psta->recvreorder_ctrl[tid].indicate_seq = 0xffff;
+                               #ifdef DBG_RX_SEQ
+                               DBG_871X("DBG_RX_SEQ %s:%d indicate_seq:%u \n", __FUNCTION__, __LINE__,
+                                       psta->recvreorder_ctrl[tid].indicate_seq);
+                               #endif
+                       }
+               }
+       }
+       else if(initiator == 1)// originator
+       {
+               //DBG_871X("tx agg_enable_bitmap(0x%08x)\n", psta->htpriv.agg_enable_bitmap);
+               for(tid = 0;tid<MAXTID;tid++)
+               {
+                       if(psta->htpriv.agg_enable_bitmap & BIT(tid))
+                       {
+                               DBG_871X("tx agg disable tid(%d)\n",tid);
+                               issue_action_BA(padapter, addr, RTW_WLAN_ACTION_DELBA, (((tid <<1) |initiator)&0x1F) );
+                               psta->htpriv.agg_enable_bitmap &= ~BIT(tid);
+                               psta->htpriv.candidate_tid_bitmap &= ~BIT(tid);
+
+                       }
+               }
+       }
+
+       return _SUCCESS;
+
+}
+
+unsigned int send_beacon(_adapter *padapter)
+{
+       u8      bxmitok = _FALSE;
+       int     issue=0;
+       int poll = 0;
+//#ifdef CONFIG_CONCURRENT_MODE
+       //struct mlme_ext_priv  *pmlmeext = &(padapter->mlmeextpriv);
+       //struct mlme_ext_info  *pmlmeinfo = &(pmlmeext->mlmext_info);
+       //_adapter *pbuddy_adapter = padapter->pbuddy_adapter;
+       //struct mlme_priv *pbuddy_mlmepriv = &(pbuddy_adapter->mlmepriv);
+//#endif
+
+#ifdef CONFIG_PCI_HCI
+
+       //DBG_871X("%s\n", __FUNCTION__);
+
+       issue_beacon(padapter);
+
+       return _SUCCESS;
+
+#endif
+
+#if defined(CONFIG_USB_HCI) || defined(CONFIG_SDIO_HCI) || defined(CONFIG_GSPI_HCI)
+       u32 start = rtw_get_current_time();
+
+       rtw_hal_set_hwreg(padapter, HW_VAR_BCN_VALID, NULL);
+       do{
+               issue_beacon(padapter);
+               issue++;
+               do {
+                       rtw_yield_os();
+                       rtw_hal_get_hwreg(padapter, HW_VAR_BCN_VALID, (u8 *)(&bxmitok));
+                       poll++;
+               }while((poll%10)!=0 && _FALSE == bxmitok && !padapter->bSurpriseRemoved && !padapter->bDriverStopped);
+
+       }while(_FALSE == bxmitok && issue<100 && !padapter->bSurpriseRemoved && !padapter->bDriverStopped);
+
+       if(padapter->bSurpriseRemoved || padapter->bDriverStopped)
+       {
+               return _FAIL;
+       }
+       if(_FALSE == bxmitok)
+       {
+               DBG_871X("%s fail! %u ms\n", __FUNCTION__, rtw_get_passing_time_ms(start));
+               return _FAIL;
+       }
+       else
+       {
+               u32 passing_time = rtw_get_passing_time_ms(start);
+
+               if(passing_time > 100 || issue > 3)
+                       DBG_871X("%s success, issue:%d, poll:%d, %u ms\n", __FUNCTION__, issue, poll, rtw_get_passing_time_ms(start));
+               //else
+               //      DBG_871X("%s success, issue:%d, poll:%d, %u ms\n", __FUNCTION__, issue, poll, rtw_get_passing_time_ms(start));
+
+               return _SUCCESS;
+       }
+
+#endif
+
+}
+
+/****************************************************************************
+
+Following are some utitity fuctions for WiFi MLME
+
+*****************************************************************************/
+
+BOOLEAN IsLegal5GChannel(
+       IN PADAPTER                     Adapter,
+       IN u8                   channel)
+{
+
+       int i=0;
+       u8 Channel_5G[45] = {36,38,40,42,44,46,48,50,52,54,56,58,
+               60,62,64,100,102,104,106,108,110,112,114,116,118,120,122,
+               124,126,128,130,132,134,136,138,140,149,151,153,155,157,159,
+               161,163,165};
+       for(i=0;i<sizeof(Channel_5G);i++)
+               if(channel == Channel_5G[i])
+                       return _TRUE;
+       return _FALSE;
+}
+
+void site_survey(_adapter *padapter)
+{
+       unsigned char           survey_channel = 0, val8;
+       RT_SCAN_TYPE    ScanType = SCAN_PASSIVE;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       u32 initialgain = 0;
+       u8 restore_initial_gain = 1;
+
+#ifdef CONFIG_P2P
+
+#ifdef CONFIG_CONCURRENT_MODE
+
+#ifdef CONFIG_STA_MODE_SCAN_UNDER_AP_MODE
+       u8 stay_buddy_ch = 0;
+#endif //CONFIG_STA_MODE_SCAN_UNDER_AP_MODE
+
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+       PADAPTER pbuddy_adapter = padapter->pbuddy_adapter;
+       struct mlme_ext_priv *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
+
+#endif //CONFIG_CONCURRENT_MODE
+       struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
+       static unsigned char  prev_survey_channel = 0;
+       static unsigned int p2p_scan_count = 0;
+
+
+       if ( ( pwdinfo->rx_invitereq_info.scan_op_ch_only ) || ( pwdinfo->p2p_info.scan_op_ch_only ) )
+       {
+               if ( pwdinfo->rx_invitereq_info.scan_op_ch_only )
+               {
+                       survey_channel = pwdinfo->rx_invitereq_info.operation_ch[pmlmeext->sitesurvey_res.channel_idx];
+               }
+               else
+               {
+                       survey_channel = pwdinfo->p2p_info.operation_ch[pmlmeext->sitesurvey_res.channel_idx];
+               }
+               ScanType = SCAN_ACTIVE;
+       }
+       else if(rtw_p2p_findphase_ex_is_social(pwdinfo))
+       {
+               //      Commented by Albert 2011/06/03
+               //      The driver is in the find phase, it should go through the social channel.
+               int ch_set_idx;
+               survey_channel = pwdinfo->social_chan[pmlmeext->sitesurvey_res.channel_idx];
+               ch_set_idx = rtw_ch_set_search_ch(pmlmeext->channel_set, survey_channel);
+               if (ch_set_idx >= 0)
+                       ScanType = pmlmeext->channel_set[ch_set_idx].ScanType;
+               else
+                       ScanType = SCAN_ACTIVE;
+       }
+       else
+#endif //CONFIG_P2P
+       {
+               struct rtw_ieee80211_channel *ch;
+               if (pmlmeext->sitesurvey_res.channel_idx < pmlmeext->sitesurvey_res.ch_num) {
+                       ch = &pmlmeext->sitesurvey_res.ch[pmlmeext->sitesurvey_res.channel_idx];
+                       survey_channel = ch->hw_value;
+                       ScanType = (ch->flags & RTW_IEEE80211_CHAN_PASSIVE_SCAN) ? SCAN_PASSIVE : SCAN_ACTIVE;
+               }
+       }
+
+       if (0)
+       DBG_871X(FUNC_ADPT_FMT" ch:%u(cnt:%u,idx:%d) at %dms, %c%c%c\n"
+               , FUNC_ADPT_ARG(padapter)
+               , survey_channel
+               , pwdinfo->find_phase_state_exchange_cnt, pmlmeext->sitesurvey_res.channel_idx
+               , rtw_get_passing_time_ms(padapter->mlmepriv.scan_start_time)
+               , ScanType?'A':'P', pmlmeext->sitesurvey_res.scan_mode?'A':'P'
+               , pmlmeext->sitesurvey_res.ssid[0].SsidLength?'S':' '
+       );
+
+       if(survey_channel != 0)
+       {
+               //PAUSE 4-AC Queue when site_survey
+               //rtw_hal_get_hwreg(padapter, HW_VAR_TXPAUSE, (u8 *)(&val8));
+               //val8 |= 0x0f;
+               //rtw_hal_set_hwreg(padapter, HW_VAR_TXPAUSE, (u8 *)(&val8));
+#ifdef CONFIG_CONCURRENT_MODE
+#ifdef CONFIG_STA_MODE_SCAN_UNDER_AP_MODE
+               if((padapter->pbuddy_adapter->mlmeextpriv.mlmext_info.state&0x03) == WIFI_FW_AP_STATE)
+               {
+                       if( pmlmeinfo->scan_cnt == RTW_SCAN_NUM_OF_CH )
+                       {
+                               pmlmeinfo->scan_cnt = 0;
+                               survey_channel = pbuddy_mlmeext->cur_channel;
+                               stay_buddy_ch = 1;
+                       }
+                       else
+                       {
+                               if( pmlmeinfo->scan_cnt == 0 )
+                                       stay_buddy_ch = 2;
+                               pmlmeinfo->scan_cnt++;
+                       }
+               }
+#endif //CONFIG_STA_MODE_SCAN_UNDER_AP_MODE
+#endif //CONFIG_CONCURRENT_MODE
+               if(pmlmeext->sitesurvey_res.channel_idx == 0)
+               {
+                       set_channel_bwmode(padapter, survey_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
+               }
+               else
+               {
+                       SelectChannel(padapter, survey_channel);
+               }
+
+#ifdef CONFIG_STA_MODE_SCAN_UNDER_AP_MODE
+               if( stay_buddy_ch == 1 )
+               {
+                       val8 = 0; //survey done
+                       rtw_hal_set_hwreg(padapter, HW_VAR_MLME_SITESURVEY, (u8 *)(&val8));
+
+                       if(check_buddy_mlmeinfo_state(padapter, WIFI_FW_AP_STATE) &&
+                               check_buddy_fwstate(padapter, _FW_LINKED))
+                       {
+                               update_beacon(padapter->pbuddy_adapter, 0, NULL, _TRUE);
+                       }
+               }
+               else if( stay_buddy_ch == 2 )
+               {
+                       val8 = 1; //under site survey
+                       rtw_hal_set_hwreg(padapter, HW_VAR_MLME_SITESURVEY, (u8 *)(&val8));
+               }
+#endif //CONFIG_STA_MODE_SCAN_UNDER_AP_MODE
+
+               if(ScanType == SCAN_ACTIVE) //obey the channel plan setting...
+               {
+                       #ifdef CONFIG_P2P
+                       if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_SCAN) ||
+                               rtw_p2p_chk_state(pwdinfo, P2P_STATE_FIND_PHASE_SEARCH)
+                       )
+                       {
+                               issue_probereq_p2p(padapter, NULL);
+                               issue_probereq_p2p(padapter, NULL);
+                               issue_probereq_p2p(padapter, NULL);
+                       }
+                       else
+                       #endif //CONFIG_P2P
+                       {
+                               int i;
+                               for(i=0;i<RTW_SSID_SCAN_AMOUNT;i++){
+                                       if(pmlmeext->sitesurvey_res.ssid[i].SsidLength) {
+                                               //todo: to issue two probe req???
+                                               issue_probereq(padapter, &(pmlmeext->sitesurvey_res.ssid[i]), NULL);
+                                               //rtw_msleep_os(SURVEY_TO>>1);
+                                               issue_probereq(padapter, &(pmlmeext->sitesurvey_res.ssid[i]), NULL);
+                                       } else {
+                                               break;
+                                       }
+                               }
+
+                               if(pmlmeext->sitesurvey_res.scan_mode == SCAN_ACTIVE) {
+                                       //todo: to issue two probe req???
+                                       issue_probereq(padapter, NULL, NULL);
+                                       //rtw_msleep_os(SURVEY_TO>>1);
+                                       issue_probereq(padapter, NULL, NULL);
+                               }
+                       }
+               }
+
+#ifdef CONFIG_STA_MODE_SCAN_UNDER_AP_MODE
+               if( stay_buddy_ch == 1 )
+                       set_survey_timer(pmlmeext, pmlmeext->chan_scan_time * RTW_STAY_AP_CH_MILLISECOND );
+               else
+#endif //CONFIG_STA_MODE_SCAN_UNDER_AP_MODE
+                       set_survey_timer(pmlmeext, pmlmeext->chan_scan_time);
+
+       }
+       else
+       {
+
+               //      channel number is 0 or this channel is not valid.
+
+#ifdef CONFIG_CONCURRENT_MODE
+               u8 cur_channel;
+               u8 cur_bwmode;
+               u8 cur_ch_offset;
+
+               if (rtw_get_ch_setting_union(padapter, &cur_channel, &cur_bwmode, &cur_ch_offset) != 0)
+               {
+                       if (0)
+                       DBG_871X(FUNC_ADPT_FMT" back to linked union - ch:%u, bw:%u, offset:%u\n",
+                               FUNC_ADPT_ARG(padapter), cur_channel, cur_bwmode, cur_ch_offset);
+               }
+               #ifdef CONFIG_IOCTL_CFG80211
+               else if(padapter->pbuddy_adapter
+                       && pbuddy_adapter->wdinfo.driver_interface == DRIVER_CFG80211
+                       && wdev_to_priv(pbuddy_adapter->rtw_wdev)->p2p_enabled
+                       && rtw_p2p_chk_state(&pbuddy_adapter->wdinfo, P2P_STATE_LISTEN)
+                       )
+               {
+                       cur_channel = pbuddy_adapter->wdinfo.listen_channel;
+                       cur_bwmode = pbuddy_mlmeext->cur_bwmode;
+                       cur_ch_offset = pbuddy_mlmeext->cur_ch_offset;
+               }
+               #endif
+               else
+               {
+                       cur_channel = pmlmeext->cur_channel;
+                       cur_bwmode = pmlmeext->cur_bwmode;
+                       cur_ch_offset = pmlmeext->cur_ch_offset;
+               }
+#endif
+
+
+#ifdef CONFIG_P2P
+               if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_SCAN) || rtw_p2p_chk_state(pwdinfo, P2P_STATE_FIND_PHASE_SEARCH))
+               {
+                       if( ( pwdinfo->rx_invitereq_info.scan_op_ch_only ) || ( pwdinfo->p2p_info.scan_op_ch_only ) )
+                       {
+                               //      Set the find_phase_state_exchange_cnt to P2P_FINDPHASE_EX_CNT.
+                               //      This will let the following flow to run the scanning end.
+                               rtw_p2p_findphase_ex_set(pwdinfo, P2P_FINDPHASE_EX_MAX);
+                       }
+                       #ifdef CONFIG_DBG_P2P
+                       DBG_871X( "[%s] find phase exchange cnt = %d\n", __FUNCTION__, pwdinfo->find_phase_state_exchange_cnt );
+                       #endif
+               }
+
+               if(rtw_p2p_findphase_ex_is_needed(pwdinfo))
+               {
+                       //      Set the P2P State to the listen state of find phase and set the current channel to the listen channel
+                       set_channel_bwmode(padapter, pwdinfo->listen_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
+                       rtw_p2p_set_state(pwdinfo, P2P_STATE_FIND_PHASE_LISTEN);
+                       pmlmeext->sitesurvey_res.state = SCAN_DISABLE;
+
+                       //turn on dynamic functions
+                       Restore_DM_Func_Flag(padapter);
+                       //Switch_DM_Func(padapter, DYNAMIC_FUNC_DIG|DYNAMIC_FUNC_HP|DYNAMIC_FUNC_SS, _TRUE);
+
+                       _set_timer( &pwdinfo->find_phase_timer, ( u32 ) ( ( u32 ) ( pwdinfo->listen_dwell ) * 100 ) );
+               }
+               else
+#endif //CONFIG_P2P
+               {
+
+#ifdef CONFIG_STA_MODE_SCAN_UNDER_AP_MODE
+                       pmlmeinfo->scan_cnt = 0;
+#endif //CONFIG_DMP_STA_NODE_SCAN_UNDER_AP_MODE
+
+#ifdef CONFIG_ANTENNA_DIVERSITY
+                       // 20100721:Interrupt scan operation here.
+                       // For SW antenna diversity before link, it needs to switch to another antenna and scan again.
+                       // It compares the scan result and select beter one to do connection.
+                       if(rtw_hal_antdiv_before_linked(padapter))
+                       {
+                               pmlmeext->sitesurvey_res.bss_cnt = 0;
+                               pmlmeext->sitesurvey_res.channel_idx = -1;
+                               pmlmeext->chan_scan_time = SURVEY_TO /2;
+                               set_survey_timer(pmlmeext, pmlmeext->chan_scan_time);
+                               return;
+                       }
+#endif
+
+#ifdef CONFIG_P2P
+                       if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_SCAN) || rtw_p2p_chk_state(pwdinfo, P2P_STATE_FIND_PHASE_SEARCH))
+                       {
+                       #ifdef CONFIG_CONCURRENT_MODE
+                               if( pwdinfo->driver_interface == DRIVER_WEXT )
+                               {
+                                       if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
+                                       {
+                                               _set_timer( &pwdinfo->ap_p2p_switch_timer, 500 );
+                                       }
+                               }
+                               rtw_p2p_set_state(pwdinfo, rtw_p2p_pre_state(pwdinfo));
+                       #else
+                               rtw_p2p_set_state(pwdinfo, rtw_p2p_pre_state(pwdinfo));
+                       #endif
+                       }
+                       rtw_p2p_findphase_ex_set(pwdinfo, P2P_FINDPHASE_EX_NONE);
+#endif //CONFIG_P2P
+
+                       pmlmeext->sitesurvey_res.state = SCAN_COMPLETE;
+
+                       //switch back to the original channel
+                       //SelectChannel(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset);
+
+                       {
+#ifdef CONFIG_CONCURRENT_MODE
+                               set_channel_bwmode(padapter, cur_channel, cur_ch_offset, cur_bwmode);
+#else
+#ifdef CONFIG_DUALMAC_CONCURRENT
+                               dc_set_channel_bwmode_survey_done(padapter);
+#else
+                               if( pwdinfo->driver_interface == DRIVER_WEXT )
+                               {
+                                       if( rtw_p2p_chk_state(pwdinfo, P2P_STATE_LISTEN) )
+                                       {
+                                               set_channel_bwmode(padapter, pwdinfo->listen_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
+                                       }
+                                       else
+                                               set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
+                               }
+                               else if( pwdinfo->driver_interface == DRIVER_CFG80211 )
+                               {
+                                       set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
+                               }
+#endif //CONFIG_DUALMAC_CONCURRENT
+#endif //CONFIG_CONCURRENT_MODE
+                       }
+
+                       //flush 4-AC Queue after site_survey
+                       //val8 = 0;
+                       //rtw_hal_set_hwreg(padapter, HW_VAR_TXPAUSE, (u8 *)(&val8));
+
+                       val8 = 0; //survey done
+                       rtw_hal_set_hwreg(padapter, HW_VAR_MLME_SITESURVEY, (u8 *)(&val8));
+
+                       //config MSR
+                       Set_MSR(padapter, (pmlmeinfo->state & 0x3));
+
+
+#ifdef CONFIG_IOCTL_CFG80211
+                       if((wdev_to_priv(padapter->rtw_wdev))->p2p_enabled == _TRUE)
+                       {
+                               restore_initial_gain = 0;
+                       }
+#endif //CONFIG_IOCTL_CFG80211
+
+                       if(restore_initial_gain == 1)
+                       {
+                               initialgain = 0xff; //restore RX GAIN
+                               rtw_hal_set_hwreg(padapter, HW_VAR_INITIAL_GAIN, (u8 *)(&initialgain));
+                       }
+
+                       //turn on dynamic functions
+                       Restore_DM_Func_Flag(padapter);
+                       //Switch_DM_Func(padapter, DYNAMIC_FUNC_DIG|DYNAMIC_FUNC_HP|DYNAMIC_FUNC_SS, _TRUE);
+
+                       if (is_client_associated_to_ap(padapter) == _TRUE)
+                       {
+                               issue_nulldata(padapter, NULL, 0, 3, 500);
+
+#ifdef CONFIG_CONCURRENT_MODE
+                               if(is_client_associated_to_ap(padapter->pbuddy_adapter) == _TRUE)
+                               {
+                                       DBG_871X("adapter is surveydone(buddy_adapter is linked), issue nulldata(pwrbit=0)\n");
+
+                                       issue_nulldata(padapter->pbuddy_adapter, NULL, 0, 3, 500);
+                               }
+#endif
+                       }
+#ifdef CONFIG_CONCURRENT_MODE
+                       else if(is_client_associated_to_ap(padapter->pbuddy_adapter) == _TRUE)
+                       {
+                               issue_nulldata(padapter->pbuddy_adapter, NULL, 0, 3, 500);
+                       }
+#endif
+
+                       report_surveydone_event(padapter);
+
+                       pmlmeext->chan_scan_time = SURVEY_TO;
+                       pmlmeext->sitesurvey_res.state = SCAN_DISABLE;
+
+                       issue_action_BSSCoexistPacket(padapter);
+                       issue_action_BSSCoexistPacket(padapter);
+                       issue_action_BSSCoexistPacket(padapter);
+
+               }
+
+#ifdef CONFIG_CONCURRENT_MODE
+               if(check_buddy_mlmeinfo_state(padapter, WIFI_FW_AP_STATE) &&
+                       check_buddy_fwstate(padapter, _FW_LINKED))
+               {
+
+                       DBG_871X("survey done, current CH=%d, BW=%d, offset=%d\n", cur_channel, cur_bwmode, cur_ch_offset);
+
+                       DBG_871X("restart pbuddy_adapter's beacon\n");
+
+                       update_beacon(padapter->pbuddy_adapter, 0, NULL, _TRUE);
+               }
+#endif
+
+       }
+
+       return;
+
+}
+
+//collect bss info from Beacon and Probe response frames.
+u8 collect_bss_info(_adapter *padapter, union recv_frame *precv_frame, WLAN_BSSID_EX *bssid)
+{
+       int     i;
+       u32     len;
+       u8      *p;
+       u16     val16, subtype;
+       u8      *pframe = precv_frame->u.hdr.rx_data;
+       u32     packet_len = precv_frame->u.hdr.len;
+       struct registry_priv    *pregistrypriv = &padapter->registrypriv;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       len = packet_len - sizeof(struct rtw_ieee80211_hdr_3addr);
+
+       if (len > MAX_IE_SZ)
+       {
+               //DBG_871X("IE too long for survey event\n");
+               return _FAIL;
+       }
+
+       _rtw_memset(bssid, 0, sizeof(WLAN_BSSID_EX));
+
+       subtype = GetFrameSubType(pframe);
+
+       if(subtype==WIFI_BEACON)
+               bssid->Reserved[0] = 1;
+       else
+               bssid->Reserved[0] = 0;
+
+       bssid->Length = sizeof(WLAN_BSSID_EX) - MAX_IE_SZ + len;
+
+       //below is to copy the information element
+       bssid->IELength = len;
+       _rtw_memcpy(bssid->IEs, (pframe + sizeof(struct rtw_ieee80211_hdr_3addr)), bssid->IELength);
+
+       //get the signal strength
+       bssid->PhyInfo.SignalQuality = precv_frame->u.hdr.attrib.signal_qual;//in percentage
+       bssid->PhyInfo.SignalStrength = precv_frame->u.hdr.attrib.signal_strength;//in percentage
+       bssid->Rssi = precv_frame->u.hdr.attrib.RecvSignalPower; // in dBM.raw data
+
+#ifdef CONFIG_ANTENNA_DIVERSITY
+       //rtw_hal_get_hwreg(padapter, HW_VAR_CURRENT_ANTENNA, (u8 *)(&bssid->PhyInfo.Optimum_antenna));
+       rtw_hal_get_def_var(padapter, HAL_DEF_CURRENT_ANTENNA,  &bssid->PhyInfo.Optimum_antenna);
+#endif
+
+       // checking SSID
+       if ((p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, _SSID_IE_, &len, bssid->IELength - _FIXED_IE_LENGTH_)) == NULL)
+       {
+               DBG_871X("marc: cannot find SSID for survey event\n");
+               return _FAIL;
+       }
+
+       if (*(p + 1))
+       {
+               if (len > NDIS_802_11_LENGTH_SSID)
+               {
+                       DBG_871X("%s()-%d: IE too long (%d) for survey event\n", __FUNCTION__, __LINE__, len);
+                       return _FAIL;
+               }
+               _rtw_memcpy(bssid->Ssid.Ssid, (p + 2), *(p + 1));
+               bssid->Ssid.SsidLength = *(p + 1);
+       }
+       else
+       {
+               bssid->Ssid.SsidLength = 0;
+       }
+
+       _rtw_memset(bssid->SupportedRates, 0, NDIS_802_11_LENGTH_RATES_EX);
+
+       //checking rate info...
+       i = 0;
+       p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, _SUPPORTEDRATES_IE_, &len, bssid->IELength - _FIXED_IE_LENGTH_);
+       if (p != NULL)
+       {
+               if (len > NDIS_802_11_LENGTH_RATES_EX)
+               {
+                       DBG_871X("%s()-%d: IE too long (%d) for survey event\n", __FUNCTION__, __LINE__, len);
+                       return _FAIL;
+               }
+               _rtw_memcpy(bssid->SupportedRates, (p + 2), len);
+               i = len;
+       }
+
+       p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, _EXT_SUPPORTEDRATES_IE_, &len, bssid->IELength - _FIXED_IE_LENGTH_);
+       if (p != NULL)
+       {
+               if (len > (NDIS_802_11_LENGTH_RATES_EX-i))
+               {
+                       DBG_871X("%s()-%d: IE too long (%d) for survey event\n", __FUNCTION__, __LINE__, len);
+                       return _FAIL;
+               }
+               _rtw_memcpy(bssid->SupportedRates + i, (p + 2), len);
+       }
+
+       //todo:
+#if 0
+       if (judge_network_type(bssid->SupportedRates, (len + i)) == WIRELESS_11B)
+       {
+               bssid->NetworkTypeInUse = Ndis802_11DS;
+       }
+       else
+#endif
+       {
+               bssid->NetworkTypeInUse = Ndis802_11OFDM24;
+       }
+
+       if (bssid->IELength < 12)
+               return _FAIL;
+
+       // Checking for DSConfig
+       p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, _DSSET_IE_, &len, bssid->IELength - _FIXED_IE_LENGTH_);
+
+       bssid->Configuration.DSConfig = 0;
+       bssid->Configuration.Length = 0;
+
+       if (p)
+       {
+               bssid->Configuration.DSConfig = *(p + 2);
+       }
+       else
+       {// In 5G, some ap do not have DSSET IE
+               // checking HT info for channel
+               p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, _HT_ADD_INFO_IE_, &len, bssid->IELength - _FIXED_IE_LENGTH_);
+               if(p)
+               {
+                       struct HT_info_element *HT_info = (struct HT_info_element *)(p + 2);
+                       bssid->Configuration.DSConfig = HT_info->primary_channel;
+               }
+               else
+               { // use current channel
+                       bssid->Configuration.DSConfig = rtw_get_oper_ch(padapter);
+               }
+       }
+
+       _rtw_memcpy(&bssid->Configuration.BeaconPeriod, rtw_get_beacon_interval_from_ie(bssid->IEs), 2);
+       bssid->Configuration.BeaconPeriod = le32_to_cpu(bssid->Configuration.BeaconPeriod);
+
+       val16 = rtw_get_capability((WLAN_BSSID_EX *)bssid);
+
+       if (val16 & BIT(0))
+       {
+               bssid->InfrastructureMode = Ndis802_11Infrastructure;
+               _rtw_memcpy(bssid->MacAddress, GetAddr2Ptr(pframe), ETH_ALEN);
+       }
+       else
+       {
+               bssid->InfrastructureMode = Ndis802_11IBSS;
+               _rtw_memcpy(bssid->MacAddress, GetAddr3Ptr(pframe), ETH_ALEN);
+       }
+
+       if (val16 & BIT(4))
+               bssid->Privacy = 1;
+       else
+               bssid->Privacy = 0;
+
+       bssid->Configuration.ATIMWindow = 0;
+
+       //20/40 BSS Coexistence check
+       if((pregistrypriv->wifi_spec==1) && (_FALSE == pmlmeinfo->bwmode_updated))
+       {
+               struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+
+               p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, _HT_CAPABILITY_IE_, &len, bssid->IELength - _FIXED_IE_LENGTH_);
+               if(p && len>0)
+               {
+                       struct HT_caps_element  *pHT_caps;
+                       pHT_caps = (struct HT_caps_element      *)(p + 2);
+
+                       if(pHT_caps->u.HT_cap_element.HT_caps_info&BIT(14))
+                       {
+                               pmlmepriv->num_FortyMHzIntolerant++;
+                       }
+               }
+               else
+               {
+                       pmlmepriv->num_sta_no_ht++;
+               }
+
+       }
+
+#ifdef CONFIG_INTEL_WIDI
+       //process_intel_widi_query_or_tigger(padapter, bssid);
+       if(process_intel_widi_query_or_tigger(padapter, bssid))
+       {
+               return _FAIL;
+       }
+#endif // CONFIG_INTEL_WIDI
+
+       #if defined(DBG_RX_SIGNAL_DISPLAY_SSID_MONITORED) & 1
+       if(strcmp(bssid->Ssid.Ssid, DBG_RX_SIGNAL_DISPLAY_SSID_MONITORED) == 0) {
+               DBG_871X("Receiving %s("MAC_FMT", DSConfig:%u) from ch%u with ss:%3u, sq:%3u, RawRSSI:%3ld\n"
+                       , bssid->Ssid.Ssid, MAC_ARG(bssid->MacAddress), bssid->Configuration.DSConfig
+                       , rtw_get_oper_ch(padapter)
+                       , bssid->PhyInfo.SignalStrength, bssid->PhyInfo.SignalQuality, bssid->Rssi
+               );
+       }
+       #endif
+
+       // mark bss info receving from nearby channel as SignalQuality 101
+       if(bssid->Configuration.DSConfig != rtw_get_oper_ch(padapter))
+       {
+               bssid->PhyInfo.SignalQuality= 101;
+       }
+
+       return _SUCCESS;
+}
+
+void start_create_ibss(_adapter* padapter)
+{
+       unsigned short  caps;
+       u8      val8;
+       u8      join_type;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       WLAN_BSSID_EX           *pnetwork = (WLAN_BSSID_EX*)(&(pmlmeinfo->network));
+       pmlmeext->cur_channel = (u8)pnetwork->Configuration.DSConfig;
+       pmlmeinfo->bcn_interval = get_beacon_interval(pnetwork);
+
+       //update wireless mode
+       update_wireless_mode(padapter);
+
+       //udpate capability
+       caps = rtw_get_capability((WLAN_BSSID_EX *)pnetwork);
+       update_capinfo(padapter, caps);
+       if(caps&cap_IBSS)//adhoc master
+       {
+               //set_opmode_cmd(padapter, adhoc);//removed
+
+               val8 = 0xcf;
+               rtw_hal_set_hwreg(padapter, HW_VAR_SEC_CFG, (u8 *)(&val8));
+
+               //switch channel
+               //SelectChannel(padapter, pmlmeext->cur_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE);
+               set_channel_bwmode(padapter, pmlmeext->cur_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
+
+               beacon_timing_control(padapter);
+
+               //set msr to WIFI_FW_ADHOC_STATE
+               pmlmeinfo->state = WIFI_FW_ADHOC_STATE;
+               Set_MSR(padapter, (pmlmeinfo->state & 0x3));
+
+               //issue beacon
+               if(send_beacon(padapter)==_FAIL)
+               {
+                       RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("issuing beacon frame fail....\n"));
+
+                       report_join_res(padapter, -1);
+                       pmlmeinfo->state = WIFI_FW_NULL_STATE;
+               }
+               else
+               {
+                       rtw_hal_set_hwreg(padapter, HW_VAR_BSSID, padapter->registrypriv.dev_network.MacAddress);
+                       join_type = 0;
+                       rtw_hal_set_hwreg(padapter, HW_VAR_MLME_JOIN, (u8 *)(&join_type));
+
+                       report_join_res(padapter, 1);
+                       pmlmeinfo->state |= WIFI_FW_ASSOC_SUCCESS;
+               }
+       }
+       else
+       {
+               DBG_871X("start_create_ibss, invalid cap:%x\n", caps);
+               return;
+       }
+
+}
+
+void start_clnt_join(_adapter* padapter)
+{
+       unsigned short  caps;
+       u8      val8;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       WLAN_BSSID_EX           *pnetwork = (WLAN_BSSID_EX*)(&(pmlmeinfo->network));
+
+       //update wireless mode
+       update_wireless_mode(padapter);
+
+       //udpate capability
+       caps = rtw_get_capability((WLAN_BSSID_EX *)pnetwork);
+       update_capinfo(padapter, caps);
+       if (caps&cap_ESS)
+       {
+               Set_MSR(padapter, WIFI_FW_STATION_STATE);
+
+               val8 = (pmlmeinfo->auth_algo == dot11AuthAlgrthm_8021X)? 0xcc: 0xcf;
+               rtw_hal_set_hwreg(padapter, HW_VAR_SEC_CFG, (u8 *)(&val8));
+
+               #ifdef CONFIG_DEAUTH_BEFORE_CONNECT
+               // Because of AP's not receiving deauth before
+               // AP may: 1)not response auth or 2)deauth us after link is complete
+               // issue deauth before issuing auth to deal with the situation
+
+               //      Commented by Albert 2012/07/21
+               //      For the Win8 P2P connection, it will be hard to have a successful connection if this Wi-Fi doesn't connect to it.
+               {
+                       #ifdef CONFIG_P2P
+                       _queue *queue = &(padapter->mlmepriv.scanned_queue);
+                       _list   *head = get_list_head(queue);
+                       _list *pos = get_next(head);
+                       struct wlan_network *scanned = NULL;
+                       u8 ie_offset = 0;
+                       _irqL irqL;
+                       bool has_p2p_ie = _FALSE;
+
+                       _enter_critical_bh(&(padapter->mlmepriv.scanned_queue.lock), &irqL);
+
+                       for (pos = get_next(head);!rtw_end_of_queue_search(head, pos); pos = get_next(pos)) {
+
+                               scanned = LIST_CONTAINOR(pos, struct wlan_network, list);
+                               if(scanned==NULL)
+                                       rtw_warn_on(1);
+
+                               if (_rtw_memcmp(&(scanned->network.Ssid), &(pnetwork->Ssid), sizeof(NDIS_802_11_SSID)) == _TRUE
+                                       && _rtw_memcmp(scanned->network.MacAddress, pnetwork->MacAddress, sizeof(NDIS_802_11_MAC_ADDRESS)) == _TRUE
+                               ) {
+                                       ie_offset = (scanned->network.Reserved[0] == 2? 0:12);
+                                       if (rtw_get_p2p_ie(scanned->network.IEs+ie_offset, scanned->network.IELength-ie_offset, NULL, NULL))
+                                               has_p2p_ie = _TRUE;
+                                       break;
+                               }
+                       }
+
+                       _exit_critical_bh(&(padapter->mlmepriv.scanned_queue.lock), &irqL);
+
+                       if (scanned == NULL || rtw_end_of_queue_search(head, pos) || has_p2p_ie == _FALSE)
+                       #endif /* CONFIG_P2P */
+                               issue_deauth_ex(padapter, pnetwork->MacAddress, WLAN_REASON_DEAUTH_LEAVING, 5, 100);
+               }
+               #endif /* CONFIG_DEAUTH_BEFORE_CONNECT */
+
+               //here wait for receiving the beacon to start auth
+               //and enable a timer
+               set_link_timer(pmlmeext, decide_wait_for_beacon_timeout(pmlmeinfo->bcn_interval));
+
+               pmlmeinfo->state = WIFI_FW_AUTH_NULL | WIFI_FW_STATION_STATE;
+       }
+       else if (caps&cap_IBSS) //adhoc client
+       {
+               Set_MSR(padapter, WIFI_FW_ADHOC_STATE);
+
+               val8 = 0xcf;
+               rtw_hal_set_hwreg(padapter, HW_VAR_SEC_CFG, (u8 *)(&val8));
+
+               //switch channel
+               set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
+
+               beacon_timing_control(padapter);
+
+               pmlmeinfo->state = WIFI_FW_ADHOC_STATE;
+
+               report_join_res(padapter, 1);
+       }
+       else
+       {
+               //DBG_871X("marc: invalid cap:%x\n", caps);
+               return;
+       }
+
+}
+
+void start_clnt_auth(_adapter* padapter)
+{
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       _cancel_timer_ex(&pmlmeext->link_timer);
+
+       pmlmeinfo->state &= (~WIFI_FW_AUTH_NULL);
+       pmlmeinfo->state |= WIFI_FW_AUTH_STATE;
+
+       pmlmeinfo->auth_seq = 1;
+       pmlmeinfo->reauth_count = 0;
+       pmlmeinfo->reassoc_count = 0;
+       pmlmeinfo->link_count = 0;
+       pmlmeext->retry = 0;
+
+
+       issue_auth(padapter, NULL, 0);
+
+       set_link_timer(pmlmeext, REAUTH_TO);
+
+}
+
+
+void start_clnt_assoc(_adapter* padapter)
+{
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       _cancel_timer_ex(&pmlmeext->link_timer);
+
+       pmlmeinfo->state &= (~(WIFI_FW_AUTH_NULL | WIFI_FW_AUTH_STATE));
+       pmlmeinfo->state |= (WIFI_FW_AUTH_SUCCESS | WIFI_FW_ASSOC_STATE);
+
+       issue_assocreq(padapter);
+
+       set_link_timer(pmlmeext, REASSOC_TO);
+}
+
+unsigned int receive_disconnect(_adapter *padapter, unsigned char *MacAddr, unsigned short reason)
+{
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       //check A3
+       if (!(_rtw_memcmp(MacAddr, get_my_bssid(&pmlmeinfo->network), ETH_ALEN)))
+               return _SUCCESS;
+
+       DBG_871X("%s\n", __FUNCTION__);
+
+       if((pmlmeinfo->state&0x03) == WIFI_FW_STATION_STATE)
+       {
+               if (pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS)
+               {
+                       pmlmeinfo->state = WIFI_FW_NULL_STATE;
+                       report_del_sta_event(padapter, MacAddr, reason);
+
+               }
+               else if (pmlmeinfo->state & WIFI_FW_LINKING_STATE)
+               {
+                       pmlmeinfo->state = WIFI_FW_NULL_STATE;
+                       report_join_res(padapter, -2);
+               }
+       }
+
+       return _SUCCESS;
+}
+
+#ifdef CONFIG_80211D
+static void process_80211d(PADAPTER padapter, WLAN_BSSID_EX *bssid)
+{
+       struct registry_priv *pregistrypriv;
+       struct mlme_ext_priv *pmlmeext;
+       RT_CHANNEL_INFO *chplan_new;
+       u8 channel;
+       u8 i;
+
+
+       pregistrypriv = &padapter->registrypriv;
+       pmlmeext = &padapter->mlmeextpriv;
+
+       // Adjust channel plan by AP Country IE
+       if (pregistrypriv->enable80211d &&
+               (!pmlmeext->update_channel_plan_by_ap_done))
+       {
+               u8 *ie, *p;
+               u32 len;
+               RT_CHANNEL_PLAN chplan_ap;
+               RT_CHANNEL_INFO chplan_sta[MAX_CHANNEL_NUM];
+               u8 country[4];
+               u8 fcn; // first channel number
+               u8 noc; // number of channel
+               u8 j, k;
+
+               ie = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, _COUNTRY_IE_, &len, bssid->IELength - _FIXED_IE_LENGTH_);
+               if (!ie) return;
+               if (len < 6) return;
+
+               ie += 2;
+               p = ie;
+               ie += len;
+
+               _rtw_memset(country, 0, 4);
+               _rtw_memcpy(country, p, 3);
+               p += 3;
+               RT_TRACE(_module_rtl871x_mlme_c_, _drv_notice_,
+                               ("%s: 802.11d country=%s\n", __FUNCTION__, country));
+
+               i = 0;
+               while ((ie - p) >= 3)
+               {
+                       fcn = *(p++);
+                       noc = *(p++);
+                       p++;
+
+                       for (j = 0; j < noc; j++)
+                       {
+                               if (fcn <= 14) channel = fcn + j; // 2.4 GHz
+                               else channel = fcn + j*4; // 5 GHz
+
+                               chplan_ap.Channel[i++] = channel;
+                       }
+               }
+               chplan_ap.Len = i;
+
+#ifdef CONFIG_DEBUG_RTL871X
+#ifdef PLATFORM_LINUX
+               i = 0;
+               printk("%s: AP[%s] channel plan {", __func__, bssid->Ssid.Ssid);
+               while ((i < chplan_ap.Len) && (chplan_ap.Channel[i] != 0))
+               {
+                       printk("%02d,", chplan_ap.Channel[i]);
+                       i++;
+               }
+               printk("}\n");
+#endif
+#endif
+
+               _rtw_memcpy(chplan_sta, pmlmeext->channel_set, sizeof(chplan_sta));
+#ifdef CONFIG_DEBUG_RTL871X
+#ifdef PLATFORM_LINUX
+               i = 0;
+               printk("%s: STA channel plan {", __func__);
+               while ((i < MAX_CHANNEL_NUM) && (chplan_sta[i].ChannelNum != 0))
+               {
+                       printk("%02d(%c),", chplan_sta[i].ChannelNum, chplan_sta[i].ScanType==SCAN_PASSIVE?'p':'a');
+                       i++;
+               }
+               printk("}\n");
+#endif
+#endif
+
+               _rtw_memset(pmlmeext->channel_set, 0, sizeof(pmlmeext->channel_set));
+               chplan_new = pmlmeext->channel_set;
+
+               i = j = k = 0;
+               if (pregistrypriv->wireless_mode & WIRELESS_11G)
+               {
+                       do {
+                               if ((i == MAX_CHANNEL_NUM) ||
+                                       (chplan_sta[i].ChannelNum == 0) ||
+                                       (chplan_sta[i].ChannelNum > 14))
+                                       break;
+
+                               if ((j == chplan_ap.Len) || (chplan_ap.Channel[j] > 14))
+                                       break;
+
+                               if (chplan_sta[i].ChannelNum == chplan_ap.Channel[j])
+                               {
+                                       chplan_new[k].ChannelNum = chplan_ap.Channel[j];
+                                       chplan_new[k].ScanType = SCAN_ACTIVE;
+                                       i++;
+                                       j++;
+                                       k++;
+                               }
+                               else if (chplan_sta[i].ChannelNum < chplan_ap.Channel[j])
+                               {
+                                       chplan_new[k].ChannelNum = chplan_sta[i].ChannelNum;
+//                                     chplan_new[k].ScanType = chplan_sta[i].ScanType;
+                                       chplan_new[k].ScanType = SCAN_PASSIVE;
+                                       i++;
+                                       k++;
+                               }
+                               else if (chplan_sta[i].ChannelNum > chplan_ap.Channel[j])
+                               {
+                                       chplan_new[k].ChannelNum = chplan_ap.Channel[j];
+                                       chplan_new[k].ScanType = SCAN_ACTIVE;
+                                       j++;
+                                       k++;
+                               }
+                       } while (1);
+
+                       // change AP not support channel to Passive scan
+                       while ((i < MAX_CHANNEL_NUM) &&
+                               (chplan_sta[i].ChannelNum != 0) &&
+                               (chplan_sta[i].ChannelNum <= 14))
+                       {
+                               chplan_new[k].ChannelNum = chplan_sta[i].ChannelNum;
+//                             chplan_new[k].ScanType = chplan_sta[i].ScanType;
+                               chplan_new[k].ScanType = SCAN_PASSIVE;
+                               i++;
+                               k++;
+                       }
+
+                       // add channel AP supported
+                       while ((j < chplan_ap.Len) && (chplan_ap.Channel[j] <= 14))
+                       {
+                               chplan_new[k].ChannelNum = chplan_ap.Channel[j];
+                               chplan_new[k].ScanType = SCAN_ACTIVE;
+                               j++;
+                               k++;
+                       }
+               }
+               else
+               {
+                       // keep original STA 2.4G channel plan
+                       while ((i < MAX_CHANNEL_NUM) &&
+                               (chplan_sta[i].ChannelNum != 0) &&
+                               (chplan_sta[i].ChannelNum <= 14))
+                       {
+                               chplan_new[k].ChannelNum = chplan_sta[i].ChannelNum;
+                               chplan_new[k].ScanType = chplan_sta[i].ScanType;
+                               i++;
+                               k++;
+                       }
+
+                       // skip AP 2.4G channel plan
+                       while ((j < chplan_ap.Len) && (chplan_ap.Channel[j] <= 14))
+                       {
+                               j++;
+                       }
+               }
+
+               if (pregistrypriv->wireless_mode & WIRELESS_11A)
+               {
+                       do {
+                               if ((i == MAX_CHANNEL_NUM) ||
+                                       (chplan_sta[i].ChannelNum == 0))
+                                       break;
+
+                               if ((j == chplan_ap.Len) || (chplan_ap.Channel[j] == 0))
+                                       break;
+
+                               if (chplan_sta[i].ChannelNum == chplan_ap.Channel[j])
+                               {
+                                       chplan_new[k].ChannelNum = chplan_ap.Channel[j];
+                                       chplan_new[k].ScanType = SCAN_ACTIVE;
+                                       i++;
+                                       j++;
+                                       k++;
+                               }
+                               else if (chplan_sta[i].ChannelNum < chplan_ap.Channel[j])
+                               {
+                                       chplan_new[k].ChannelNum = chplan_sta[i].ChannelNum;
+//                                     chplan_new[k].ScanType = chplan_sta[i].ScanType;
+                                       chplan_new[k].ScanType = SCAN_PASSIVE;
+                                       i++;
+                                       k++;
+                               }
+                               else if (chplan_sta[i].ChannelNum > chplan_ap.Channel[j])
+                               {
+                                       chplan_new[k].ChannelNum = chplan_ap.Channel[j];
+                                       chplan_new[k].ScanType = SCAN_ACTIVE;
+                                       j++;
+                                       k++;
+                               }
+                       } while (1);
+
+                       // change AP not support channel to Passive scan
+                       while ((i < MAX_CHANNEL_NUM) && (chplan_sta[i].ChannelNum != 0))
+                       {
+                               chplan_new[k].ChannelNum = chplan_sta[i].ChannelNum;
+//                             chplan_new[k].ScanType = chplan_sta[i].ScanType;
+                               chplan_new[k].ScanType = SCAN_PASSIVE;
+                               i++;
+                               k++;
+                       }
+
+                       // add channel AP supported
+                       while ((j < chplan_ap.Len) && (chplan_ap.Channel[j] != 0))
+                       {
+                               chplan_new[k].ChannelNum = chplan_ap.Channel[j];
+                               chplan_new[k].ScanType = SCAN_ACTIVE;
+                               j++;
+                               k++;
+                       }
+               }
+               else
+               {
+                       // keep original STA 5G channel plan
+                       while ((i < MAX_CHANNEL_NUM) && (chplan_sta[i].ChannelNum != 0))
+                       {
+                               chplan_new[k].ChannelNum = chplan_sta[i].ChannelNum;
+                               chplan_new[k].ScanType = chplan_sta[i].ScanType;
+                               i++;
+                               k++;
+                       }
+               }
+
+               pmlmeext->update_channel_plan_by_ap_done = 1;
+
+#ifdef CONFIG_DEBUG_RTL871X
+#ifdef PLATFORM_LINUX
+               k = 0;
+               printk("%s: new STA channel plan {", __func__);
+               while ((k < MAX_CHANNEL_NUM) && (chplan_new[k].ChannelNum != 0))
+               {
+                       printk("%02d(%c),", chplan_new[k].ChannelNum, chplan_new[k].ScanType==SCAN_PASSIVE?'p':'c');
+                       k++;
+               }
+               printk("}\n");
+#endif
+#endif
+
+#if 0
+               // recover the right channel index
+               channel = chplan_sta[pmlmeext->sitesurvey_res.channel_idx].ChannelNum;
+               k = 0;
+               while ((k < MAX_CHANNEL_NUM) && (chplan_new[k].ChannelNum != 0))
+               {
+                       if (chplan_new[k].ChannelNum == channel) {
+                               RT_TRACE(_module_rtl871x_mlme_c_, _drv_notice_,
+                                                ("%s: change mlme_ext sitesurvey channel index from %d to %d\n",
+                                                 __FUNCTION__, pmlmeext->sitesurvey_res.channel_idx, k));
+                               pmlmeext->sitesurvey_res.channel_idx = k;
+                               break;
+                       }
+                       k++;
+               }
+#endif
+       }
+
+       // If channel is used by AP, set channel scan type to active
+       channel = bssid->Configuration.DSConfig;
+       chplan_new = pmlmeext->channel_set;
+       i = 0;
+       while ((i < MAX_CHANNEL_NUM) && (chplan_new[i].ChannelNum != 0))
+       {
+               if (chplan_new[i].ChannelNum == channel)
+               {
+                       if (chplan_new[i].ScanType == SCAN_PASSIVE)
+                       {
+                               //5G Bnad 2, 3 (DFS) doesn't change to active scan
+                               if(channel >= 52 && channel <= 144)
+                                       break;
+
+                               chplan_new[i].ScanType = SCAN_ACTIVE;
+                               RT_TRACE(_module_rtl871x_mlme_c_, _drv_notice_,
+                                                ("%s: change channel %d scan type from passive to active\n",
+                                                 __FUNCTION__, channel));
+                       }
+                       break;
+               }
+               i++;
+       }
+}
+#endif
+
+/****************************************************************************
+
+Following are the functions to report events
+
+*****************************************************************************/
+
+void report_survey_event(_adapter *padapter, union recv_frame *precv_frame)
+{
+       struct cmd_obj *pcmd_obj;
+       u8      *pevtcmd;
+       u32 cmdsz;
+       struct survey_event     *psurvey_evt;
+       struct C2HEvent_Header *pc2h_evt_hdr;
+       struct mlme_ext_priv *pmlmeext;
+       struct cmd_priv *pcmdpriv;
+       //u8 *pframe = precv_frame->u.hdr.rx_data;
+       //uint len = precv_frame->u.hdr.len;
+
+       if(!padapter)
+               return;
+
+       pmlmeext = &padapter->mlmeextpriv;
+       pcmdpriv = &padapter->cmdpriv;
+
+
+       if ((pcmd_obj = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj))) == NULL)
+       {
+               return;
+       }
+
+       cmdsz = (sizeof(struct survey_event) + sizeof(struct C2HEvent_Header));
+       if ((pevtcmd = (u8*)rtw_zmalloc(cmdsz)) == NULL)
+       {
+               rtw_mfree((u8 *)pcmd_obj, sizeof(struct cmd_obj));
+               return;
+       }
+
+       _rtw_init_listhead(&pcmd_obj->list);
+
+       pcmd_obj->cmdcode = GEN_CMD_CODE(_Set_MLME_EVT);
+       pcmd_obj->cmdsz = cmdsz;
+       pcmd_obj->parmbuf = pevtcmd;
+
+       pcmd_obj->rsp = NULL;
+       pcmd_obj->rspsz  = 0;
+
+       pc2h_evt_hdr = (struct C2HEvent_Header*)(pevtcmd);
+       pc2h_evt_hdr->len = sizeof(struct survey_event);
+       pc2h_evt_hdr->ID = GEN_EVT_CODE(_Survey);
+       pc2h_evt_hdr->seq = ATOMIC_INC_RETURN(&pmlmeext->event_seq);
+
+       psurvey_evt = (struct survey_event*)(pevtcmd + sizeof(struct C2HEvent_Header));
+
+       if (collect_bss_info(padapter, precv_frame, (WLAN_BSSID_EX *)&psurvey_evt->bss) == _FAIL)
+       {
+               rtw_mfree((u8 *)pcmd_obj, sizeof(struct cmd_obj));
+               rtw_mfree((u8 *)pevtcmd, cmdsz);
+               return;
+       }
+
+#ifdef CONFIG_80211D
+       process_80211d(padapter, &psurvey_evt->bss);
+#endif
+
+       rtw_enqueue_cmd(pcmdpriv, pcmd_obj);
+
+       pmlmeext->sitesurvey_res.bss_cnt++;
+
+       return;
+
+}
+
+void report_surveydone_event(_adapter *padapter)
+{
+       struct cmd_obj *pcmd_obj;
+       u8      *pevtcmd;
+       u32 cmdsz;
+       struct surveydone_event *psurveydone_evt;
+       struct C2HEvent_Header  *pc2h_evt_hdr;
+       struct mlme_ext_priv            *pmlmeext = &padapter->mlmeextpriv;
+       struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
+
+       if ((pcmd_obj = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj))) == NULL)
+       {
+               return;
+       }
+
+       cmdsz = (sizeof(struct surveydone_event) + sizeof(struct C2HEvent_Header));
+       if ((pevtcmd = (u8*)rtw_zmalloc(cmdsz)) == NULL)
+       {
+               rtw_mfree((u8 *)pcmd_obj, sizeof(struct cmd_obj));
+               return;
+       }
+
+       _rtw_init_listhead(&pcmd_obj->list);
+
+       pcmd_obj->cmdcode = GEN_CMD_CODE(_Set_MLME_EVT);
+       pcmd_obj->cmdsz = cmdsz;
+       pcmd_obj->parmbuf = pevtcmd;
+
+       pcmd_obj->rsp = NULL;
+       pcmd_obj->rspsz  = 0;
+
+       pc2h_evt_hdr = (struct C2HEvent_Header*)(pevtcmd);
+       pc2h_evt_hdr->len = sizeof(struct surveydone_event);
+       pc2h_evt_hdr->ID = GEN_EVT_CODE(_SurveyDone);
+       pc2h_evt_hdr->seq = ATOMIC_INC_RETURN(&pmlmeext->event_seq);
+
+       psurveydone_evt = (struct surveydone_event*)(pevtcmd + sizeof(struct C2HEvent_Header));
+       psurveydone_evt->bss_cnt = pmlmeext->sitesurvey_res.bss_cnt;
+
+       DBG_871X("survey done event(%x) band:%d for "ADPT_FMT"\n", psurveydone_evt->bss_cnt, padapter->setband, ADPT_ARG(padapter));
+
+       rtw_enqueue_cmd(pcmdpriv, pcmd_obj);
+
+       return;
+
+}
+
+void report_join_res(_adapter *padapter, int res)
+{
+       struct cmd_obj *pcmd_obj;
+       u8      *pevtcmd;
+       u32 cmdsz;
+       struct joinbss_event            *pjoinbss_evt;
+       struct C2HEvent_Header  *pc2h_evt_hdr;
+       struct mlme_ext_priv            *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
+
+       if ((pcmd_obj = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj))) == NULL)
+       {
+               return;
+       }
+
+       cmdsz = (sizeof(struct joinbss_event) + sizeof(struct C2HEvent_Header));
+       if ((pevtcmd = (u8*)rtw_zmalloc(cmdsz)) == NULL)
+       {
+               rtw_mfree((u8 *)pcmd_obj, sizeof(struct cmd_obj));
+               return;
+       }
+
+       _rtw_init_listhead(&pcmd_obj->list);
+
+       pcmd_obj->cmdcode = GEN_CMD_CODE(_Set_MLME_EVT);
+       pcmd_obj->cmdsz = cmdsz;
+       pcmd_obj->parmbuf = pevtcmd;
+
+       pcmd_obj->rsp = NULL;
+       pcmd_obj->rspsz  = 0;
+
+       pc2h_evt_hdr = (struct C2HEvent_Header*)(pevtcmd);
+       pc2h_evt_hdr->len = sizeof(struct joinbss_event);
+       pc2h_evt_hdr->ID = GEN_EVT_CODE(_JoinBss);
+       pc2h_evt_hdr->seq = ATOMIC_INC_RETURN(&pmlmeext->event_seq);
+
+       pjoinbss_evt = (struct joinbss_event*)(pevtcmd + sizeof(struct C2HEvent_Header));
+       _rtw_memcpy((unsigned char *)(&(pjoinbss_evt->network.network)), &(pmlmeinfo->network), sizeof(WLAN_BSSID_EX));
+       pjoinbss_evt->network.join_res  = pjoinbss_evt->network.aid = res;
+
+       DBG_871X("report_join_res(%d)\n", res);
+
+
+       rtw_joinbss_event_prehandle(padapter, (u8 *)&pjoinbss_evt->network);
+
+
+       rtw_enqueue_cmd(pcmdpriv, pcmd_obj);
+
+       return;
+
+}
+
+void report_del_sta_event(_adapter *padapter, unsigned char* MacAddr, unsigned short reason)
+{
+       struct cmd_obj *pcmd_obj;
+       u8      *pevtcmd;
+       u32 cmdsz;
+       struct sta_info *psta;
+       int     mac_id;
+       struct stadel_event                     *pdel_sta_evt;
+       struct C2HEvent_Header  *pc2h_evt_hdr;
+       struct mlme_ext_priv            *pmlmeext = &padapter->mlmeextpriv;
+       struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
+
+       if ((pcmd_obj = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj))) == NULL)
+       {
+               return;
+       }
+
+       cmdsz = (sizeof(struct stadel_event) + sizeof(struct C2HEvent_Header));
+       if ((pevtcmd = (u8*)rtw_zmalloc(cmdsz)) == NULL)
+       {
+               rtw_mfree((u8 *)pcmd_obj, sizeof(struct cmd_obj));
+               return;
+       }
+
+       _rtw_init_listhead(&pcmd_obj->list);
+
+       pcmd_obj->cmdcode = GEN_CMD_CODE(_Set_MLME_EVT);
+       pcmd_obj->cmdsz = cmdsz;
+       pcmd_obj->parmbuf = pevtcmd;
+
+       pcmd_obj->rsp = NULL;
+       pcmd_obj->rspsz  = 0;
+
+       pc2h_evt_hdr = (struct C2HEvent_Header*)(pevtcmd);
+       pc2h_evt_hdr->len = sizeof(struct stadel_event);
+       pc2h_evt_hdr->ID = GEN_EVT_CODE(_DelSTA);
+       pc2h_evt_hdr->seq = ATOMIC_INC_RETURN(&pmlmeext->event_seq);
+
+       pdel_sta_evt = (struct stadel_event*)(pevtcmd + sizeof(struct C2HEvent_Header));
+       _rtw_memcpy((unsigned char *)(&(pdel_sta_evt->macaddr)), MacAddr, ETH_ALEN);
+       _rtw_memcpy((unsigned char *)(pdel_sta_evt->rsvd),(unsigned char *)(&reason),2);
+
+
+       psta = rtw_get_stainfo(&padapter->stapriv, MacAddr);
+       if(psta)
+               mac_id = (int)psta->mac_id;
+       else
+               mac_id = (-1);
+
+       pdel_sta_evt->mac_id = mac_id;
+
+       DBG_871X("report_del_sta_event: delete STA, mac_id=%d\n", mac_id);
+
+       rtw_enqueue_cmd(pcmdpriv, pcmd_obj);
+
+       return;
+}
+
+void report_add_sta_event(_adapter *padapter, unsigned char* MacAddr, int cam_idx)
+{
+       struct cmd_obj *pcmd_obj;
+       u8      *pevtcmd;
+       u32 cmdsz;
+       struct stassoc_event            *padd_sta_evt;
+       struct C2HEvent_Header  *pc2h_evt_hdr;
+       struct mlme_ext_priv            *pmlmeext = &padapter->mlmeextpriv;
+       struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
+
+       if ((pcmd_obj = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj))) == NULL)
+       {
+               return;
+       }
+
+       cmdsz = (sizeof(struct stassoc_event) + sizeof(struct C2HEvent_Header));
+       if ((pevtcmd = (u8*)rtw_zmalloc(cmdsz)) == NULL)
+       {
+               rtw_mfree((u8 *)pcmd_obj, sizeof(struct cmd_obj));
+               return;
+       }
+
+       _rtw_init_listhead(&pcmd_obj->list);
+
+       pcmd_obj->cmdcode = GEN_CMD_CODE(_Set_MLME_EVT);
+       pcmd_obj->cmdsz = cmdsz;
+       pcmd_obj->parmbuf = pevtcmd;
+
+       pcmd_obj->rsp = NULL;
+       pcmd_obj->rspsz  = 0;
+
+       pc2h_evt_hdr = (struct C2HEvent_Header*)(pevtcmd);
+       pc2h_evt_hdr->len = sizeof(struct stassoc_event);
+       pc2h_evt_hdr->ID = GEN_EVT_CODE(_AddSTA);
+       pc2h_evt_hdr->seq = ATOMIC_INC_RETURN(&pmlmeext->event_seq);
+
+       padd_sta_evt = (struct stassoc_event*)(pevtcmd + sizeof(struct C2HEvent_Header));
+       _rtw_memcpy((unsigned char *)(&(padd_sta_evt->macaddr)), MacAddr, ETH_ALEN);
+       padd_sta_evt->cam_id = cam_idx;
+
+       DBG_871X("report_add_sta_event: add STA\n");
+
+       rtw_enqueue_cmd(pcmdpriv, pcmd_obj);
+
+       return;
+}
+
+
+/****************************************************************************
+
+Following are the event callback functions
+
+*****************************************************************************/
+
+//for sta/adhoc mode
+void update_sta_info(_adapter *padapter, struct sta_info *psta)
+{
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       //ERP
+       VCS_update(padapter, psta);
+
+
+       //HT
+       if(pmlmepriv->htpriv.ht_option)
+       {
+               psta->htpriv.ht_option = _TRUE;
+
+               psta->htpriv.ampdu_enable = pmlmepriv->htpriv.ampdu_enable;
+
+               if (support_short_GI(padapter, &(pmlmeinfo->HT_caps)))
+                       psta->htpriv.sgi = _TRUE;
+
+               psta->qos_option = _TRUE;
+
+       }
+       else
+       {
+               psta->htpriv.ht_option = _FALSE;
+
+               psta->htpriv.ampdu_enable = _FALSE;
+
+               psta->htpriv.sgi = _FALSE;
+
+               psta->qos_option = _FALSE;
+
+       }
+
+       psta->htpriv.bwmode = pmlmeext->cur_bwmode;
+       psta->htpriv.ch_offset = pmlmeext->cur_ch_offset;
+
+       psta->htpriv.agg_enable_bitmap = 0x0;//reset
+       psta->htpriv.candidate_tid_bitmap = 0x0;//reset
+
+
+       //QoS
+       if(pmlmepriv->qospriv.qos_option)
+               psta->qos_option = _TRUE;
+
+
+       psta->state = _FW_LINKED;
+
+}
+
+void mlmeext_joinbss_event_callback(_adapter *padapter, int join_res)
+{
+       struct sta_info         *psta, *psta_bmc;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       WLAN_BSSID_EX           *cur_network = &(pmlmeinfo->network);
+       struct sta_priv         *pstapriv = &padapter->stapriv;
+       u8      join_type;
+
+       if(join_res < 0)
+       {
+               join_type = 1;
+               rtw_hal_set_hwreg(padapter, HW_VAR_MLME_JOIN, (u8 *)(&join_type));
+               rtw_hal_set_hwreg(padapter, HW_VAR_BSSID, null_addr);
+
+               //restore to initial setting.
+               update_tx_basic_rate(padapter, padapter->registrypriv.wireless_mode);
+#if 0 //temply remove
+#ifdef CONFIG_INTEL_WIDI
+#ifdef DBG_CONFIG_ERROR_DETECT
+               DBG_871X("%s(): do silentreset\n",__FUNCTION__);
+               rtw_hal_sreset_reset(padapter);
+#endif
+#endif
+#endif
+               goto exit_mlmeext_joinbss_event_callback;
+       }
+
+       if((pmlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE)
+       {
+               //for bc/mc
+               psta_bmc = rtw_get_bcmc_stainfo(padapter);
+               if(psta_bmc)
+               {
+                       pmlmeinfo->FW_sta_info[psta_bmc->mac_id].psta = psta_bmc;
+                       update_bmc_sta_support_rate(padapter, psta_bmc->mac_id);
+                       Update_RA_Entry(padapter, psta_bmc->mac_id);
+               }
+       }
+
+
+       //turn on dynamic functions
+       Switch_DM_Func(padapter, DYNAMIC_FUNC_DIG|DYNAMIC_FUNC_HP|DYNAMIC_FUNC_SS, _TRUE);
+
+       // update IOT-releated issue
+       update_IOT_info(padapter);
+
+       rtw_hal_set_hwreg(padapter, HW_VAR_BASIC_RATE, cur_network->SupportedRates);
+
+       //BCN interval
+       rtw_hal_set_hwreg(padapter, HW_VAR_BEACON_INTERVAL, (u8 *)(&pmlmeinfo->bcn_interval));
+
+       //udpate capability
+       update_capinfo(padapter, pmlmeinfo->capability);
+
+       //WMM, Update EDCA param
+       WMMOnAssocRsp(padapter);
+
+       //HT
+       HTOnAssocRsp(padapter);
+
+#ifndef CONFIG_CONCURRENT_MODE
+       //      Call set_channel_bwmode when the CONFIG_CONCURRENT_MODE doesn't be defined.
+       //Set cur_channel&cur_bwmode&cur_ch_offset
+       set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
+#endif
+
+       psta = rtw_get_stainfo(pstapriv, cur_network->MacAddress);
+       if (psta) //only for infra. mode
+       {
+               pmlmeinfo->FW_sta_info[psta->mac_id].psta = psta;
+
+               //DBG_871X("set_sta_rate\n");
+
+               //set per sta rate after updating HT cap.
+               set_sta_rate(padapter, psta);
+       }
+
+       join_type = 2;
+       rtw_hal_set_hwreg(padapter, HW_VAR_MLME_JOIN, (u8 *)(&join_type));
+
+       if((pmlmeinfo->state&0x03) == WIFI_FW_STATION_STATE)
+       {
+               // correcting TSF
+               correct_TSF(padapter, pmlmeext);
+
+               //set_link_timer(pmlmeext, DISCONNECT_TO);
+       }
+
+#ifdef CONFIG_LPS
+       rtw_lps_ctrl_wk_cmd(padapter, LPS_CTRL_CONNECT, 0);
+#endif
+
+exit_mlmeext_joinbss_event_callback:
+
+#ifdef CONFIG_DUALMAC_CONCURRENT
+       dc_handle_join_done(padapter, join_res);
+#endif
+#ifdef CONFIG_CONCURRENT_MODE
+       concurrent_chk_joinbss_done(padapter, join_res);
+#endif
+
+       DBG_871X("=>%s\n", __FUNCTION__);
+
+}
+
+void mlmeext_sta_add_event_callback(_adapter *padapter, struct sta_info *psta)
+{
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       u8      join_type;
+
+       DBG_871X("%s\n", __FUNCTION__);
+
+       if((pmlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE)
+       {
+               if(pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS)//adhoc master or sta_count>1
+               {
+                       //nothing to do
+               }
+               else//adhoc client
+               {
+                       //update TSF Value
+                       //update_TSF(pmlmeext, pframe, len);
+
+                       // correcting TSF
+                       correct_TSF(padapter, pmlmeext);
+
+                       //start beacon
+                       if(send_beacon(padapter)==_FAIL)
+                       {
+                               pmlmeinfo->FW_sta_info[psta->mac_id].status = 0;
+
+                               pmlmeinfo->state ^= WIFI_FW_ADHOC_STATE;
+
+                               return;
+                       }
+
+                       pmlmeinfo->state |= WIFI_FW_ASSOC_SUCCESS;
+
+               }
+
+               join_type = 2;
+               rtw_hal_set_hwreg(padapter, HW_VAR_MLME_JOIN, (u8 *)(&join_type));
+       }
+
+       pmlmeinfo->FW_sta_info[psta->mac_id].psta = psta;
+
+       //rate radaptive
+       Update_RA_Entry(padapter, psta->mac_id);
+
+       //update adhoc sta_info
+       update_sta_info(padapter, psta);
+
+}
+
+void mlmeext_sta_del_event_callback(_adapter *padapter)
+{
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       if (is_client_associated_to_ap(padapter) || is_IBSS_empty(padapter))
+       {
+               //set_opmode_cmd(padapter, infra_client_with_mlme);
+
+               rtw_hal_set_hwreg(padapter, HW_VAR_MLME_DISCONNECT, 0);
+               rtw_hal_set_hwreg(padapter, HW_VAR_BSSID, null_addr);
+
+               //restore to initial setting.
+               update_tx_basic_rate(padapter, padapter->registrypriv.wireless_mode);
+
+#ifdef CONFIG_DUALMAC_CONCURRENT
+               dc_set_channel_bwmode_disconnect(padapter);
+#else
+#ifdef CONFIG_CONCURRENT_MODE
+               if((check_buddy_fwstate(padapter, _FW_LINKED)) != _TRUE)
+               {
+#endif //CONFIG_CONCURRENT_MODE
+
+               //switch to the 20M Hz mode after disconnect
+               pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_20;
+               pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+
+               //SelectChannel(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset);
+               set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
+
+#ifdef CONFIG_CONCURRENT_MODE
+               }
+#endif //CONFIG_CONCURRENT_MODE
+#endif //CONFIG_DUALMAC_CONCURRENT
+
+               flush_all_cam_entry(padapter);
+
+               pmlmeinfo->state = WIFI_FW_NULL_STATE;
+
+               //set MSR to no link state -> infra. mode
+               Set_MSR(padapter, _HW_STATE_STATION_);
+
+               _cancel_timer_ex(&pmlmeext->link_timer);
+
+       }
+
+}
+
+/****************************************************************************
+
+Following are the functions for the timer handlers
+
+*****************************************************************************/
+void _linked_rx_signal_strehgth_display(_adapter *padapter);
+void _linked_rx_signal_strehgth_display(_adapter *padapter)
+{
+       int     UndecoratedSmoothedPWDB;
+
+#ifdef CONFIG_CONCURRENT_MODE
+       PADAPTER pbuddy_adapter = padapter->pbuddy_adapter;
+       DBG_871X("============ pbuddy_adapter linked status check ===================\n");
+       DBG_871X("buddy_adapter_type=%d\n", pbuddy_adapter->adapter_type);
+       DBG_871X("pbuddy_adapter pathA Rx SNRdb:%d\n",pbuddy_adapter->recvpriv.RxSNRdB[0]);
+       DBG_871X("pbuddy_adapter pathA Rx PWDB:%d\n",pbuddy_adapter->recvpriv.rxpwdb);
+       DBG_871X("pbuddy_adapter pathA Rx RSSI:%d,pathB Rx RSSI:%d\n"
+       ,pbuddy_adapter->recvpriv.RxRssi[0],pbuddy_adapter->recvpriv.RxRssi[1]);
+       rtw_hal_get_def_var(pbuddy_adapter, HAL_DEF_UNDERCORATEDSMOOTHEDPWDB, &UndecoratedSmoothedPWDB);
+       DBG_871X("pbuddy_adapter UndecoratedSmoothedPWDB:%d\n",UndecoratedSmoothedPWDB);
+       DBG_871X("Rx RSSI:%d\n",pbuddy_adapter->recvpriv.rssi);
+       DBG_871X("Rx Signal_strength:%d\n",pbuddy_adapter->recvpriv.signal_strength);
+       DBG_871X("Rx Signal_qual:%d \n",pbuddy_adapter->recvpriv.signal_qual);
+       DBG_871X("============ linked status check ===================\n");
+       DBG_871X("adapter_type=%d\n", padapter->adapter_type);
+#else //CONFIG_CONCURRENT_MODE
+       DBG_871X("============ linked status check ===================\n");
+#endif //CONFIG_CONCURRENT_MODE
+       DBG_871X("pathA Rx SNRdb:%d, pathB Rx SNRdb:%d\n",padapter->recvpriv.RxSNRdB[0], padapter->recvpriv.RxSNRdB[1]);
+       DBG_871X("pathA Rx PWDB:%d\n",padapter->recvpriv.rxpwdb);
+       DBG_871X("pathA Rx RSSI:%d,pathB Rx RSSI:%d\n",padapter->recvpriv.RxRssi[0],padapter->recvpriv.RxRssi[1]);
+       rtw_hal_get_def_var(padapter, HAL_DEF_UNDERCORATEDSMOOTHEDPWDB, &UndecoratedSmoothedPWDB);
+       DBG_871X("UndecoratedSmoothedPWDB:%d\n",UndecoratedSmoothedPWDB);
+       DBG_871X("Rx RSSI:%d\n",padapter->recvpriv.rssi);
+       DBG_871X("Rx Signal_strength:%d\n",padapter->recvpriv.signal_strength);
+       DBG_871X("Rx Signal_qual:%d \n",padapter->recvpriv.signal_qual);
+       if ( check_fwstate( &padapter->mlmepriv,  _FW_LINKED ))
+       {
+               DBG_871X("bw mode: %d, channel: %d\n", padapter->mlmeextpriv.cur_bwmode, padapter->mlmeextpriv.cur_channel );
+               DBG_871X("received bytes = %d\n", (u32) (padapter->recvpriv.rx_bytes - padapter->recvpriv.last_rx_bytes ) );
+       }
+       DBG_871X("============ linked status check ===================\n");
+       DBG_871X(" DIG PATH-A(0x%02x), PATH-B(0x%02x)\n",rtw_read8(padapter,0xc50),rtw_read8(padapter,0xc58));
+       DBG_871X(" OFDM -Alarm DA2(0x%04x),DA4(0x%04x),DA6(0x%04x),DA8(0x%04x)\n",
+               rtw_read16(padapter,0xDA2),rtw_read16(padapter,0xDA4),rtw_read16(padapter,0xDA6),rtw_read16(padapter,0xDA8));
+
+       DBG_871X(" CCK -Alarm A5B(0x%02x),A5C(0x%02x)\n",rtw_read8(padapter,0xA5B),rtw_read8(padapter,0xA5C));
+       DBG_871X(" FalseAlmCnt_all(%d)\n",padapter->recvpriv.FalseAlmCnt_all);
+
+}
+
+u8 chk_ap_is_alive(_adapter *padapter, struct sta_info *psta)
+{
+       u8 ret = _FALSE;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       #ifdef DBG_EXPIRATION_CHK
+       DBG_871X(FUNC_ADPT_FMT" rx:"STA_PKTS_FMT", beacon:%llu, probersp_to_self:%llu"
+                               /*", probersp_bm:%llu, probersp_uo:%llu, probereq:%llu, BI:%u"*/
+                               ", retry:%u\n"
+               , FUNC_ADPT_ARG(padapter)
+               , STA_RX_PKTS_DIFF_ARG(psta)
+               , psta->sta_stats.rx_beacon_pkts - psta->sta_stats.last_rx_beacon_pkts
+               , psta->sta_stats.rx_probersp_pkts - psta->sta_stats.last_rx_probersp_pkts
+               /*, psta->sta_stats.rx_probersp_bm_pkts - psta->sta_stats.last_rx_probersp_bm_pkts
+               , psta->sta_stats.rx_probersp_uo_pkts - psta->sta_stats.last_rx_probersp_uo_pkts
+               , psta->sta_stats.rx_probereq_pkts - psta->sta_stats.last_rx_probereq_pkts
+               , pmlmeinfo->bcn_interval*/
+               , pmlmeext->retry
+       );
+
+       DBG_871X(FUNC_ADPT_FMT" tx_pkts:%llu, link_count:%u\n", FUNC_ADPT_ARG(padapter)
+               , padapter->xmitpriv.tx_pkts
+               , pmlmeinfo->link_count
+       );
+       #endif
+
+       if((sta_rx_data_pkts(psta) == sta_last_rx_data_pkts(psta))
+               && sta_rx_beacon_pkts(psta) == sta_last_rx_beacon_pkts(psta)
+               && sta_rx_probersp_pkts(psta) == sta_last_rx_probersp_pkts(psta)
+       )
+       {
+               ret = _FALSE;
+       }
+       else
+       {
+               ret = _TRUE;
+       }
+
+       sta_update_last_rx_pkts(psta);
+
+       return ret;
+}
+
+void linked_status_chk(_adapter *padapter)
+{
+       u32     i;
+       struct sta_info         *psta;
+       struct xmit_priv                *pxmitpriv = &(padapter->xmitpriv);
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       struct sta_priv         *pstapriv = &padapter->stapriv;
+
+       if(padapter->bRxRSSIDisplay)
+                _linked_rx_signal_strehgth_display(padapter);
+
+       #ifdef DBG_CONFIG_ERROR_DETECT
+       rtw_hal_sreset_linked_status_check(padapter);
+       #endif
+
+       if (is_client_associated_to_ap(padapter))
+       {
+               //linked infrastructure client mode
+
+               int tx_chk = _SUCCESS, rx_chk = _SUCCESS;
+               int rx_chk_limit;
+
+               #if defined(DBG_ROAMING_TEST)
+               rx_chk_limit = 1;
+               #elif defined(CONFIG_ACTIVE_KEEP_ALIVE_CHECK)
+               rx_chk_limit = 4;
+               #else
+               rx_chk_limit = 8;
+               #endif
+
+               // Marked by Kurt 20130715
+               // For WiDi 3.5 and later on, they don't ask WiDi sink to do roaming, so we could not check rx limit that strictly.
+               // todo: To check why rx_chk would be _FALSE under miracast session.
+               //#ifdef CONFIG_INTEL_WIDI
+               //if (padapter->mlmepriv.widi_state != INTEL_WIDI_STATE_NONE)
+               //      rx_chk_limit = 1;
+               //#endif
+
+               if ((psta = rtw_get_stainfo(pstapriv, pmlmeinfo->network.MacAddress)) != NULL)
+               {
+                       bool is_p2p_enable = _FALSE;
+                       #ifdef CONFIG_P2P
+                       is_p2p_enable = !rtw_p2p_chk_state(&padapter->wdinfo, P2P_STATE_NONE);
+                       #endif
+
+                       if (chk_ap_is_alive(padapter, psta) == _FALSE)
+                               rx_chk = _FAIL;
+
+                       if (pxmitpriv->last_tx_pkts == pxmitpriv->tx_pkts)
+                               tx_chk = _FAIL;
+
+                       #ifdef CONFIG_ACTIVE_KEEP_ALIVE_CHECK
+                       if (pmlmeext->active_keep_alive_check && (rx_chk == _FAIL || tx_chk == _FAIL)) {
+                               u8 backup_oper_channel=0;
+
+                               /* switch to correct channel of current network  before issue keep-alive frames */
+                               if (rtw_get_oper_ch(padapter) != pmlmeext->cur_channel) {
+                                       backup_oper_channel = rtw_get_oper_ch(padapter);
+                                       SelectChannel(padapter, pmlmeext->cur_channel);
+                               }
+
+                               if (rx_chk != _SUCCESS)
+                                       issue_probereq_ex(padapter, &pmlmeinfo->network.Ssid, psta->hwaddr, 3, 1);
+
+                               if ((tx_chk != _SUCCESS && pmlmeinfo->link_count++ == 0xf) || rx_chk != _SUCCESS) {
+                                       tx_chk = issue_nulldata(padapter, psta->hwaddr, 0, 3, 1);
+                                       /* if tx acked and p2p disabled, set rx_chk _SUCCESS to reset retry count */
+                                       if (tx_chk == _SUCCESS && !is_p2p_enable)
+                                               rx_chk = _SUCCESS;
+                               }
+
+                               /* back to the original operation channel */
+                               if(backup_oper_channel>0)
+                                       SelectChannel(padapter, backup_oper_channel);
+
+                       }
+                       else
+                       #endif /* CONFIG_ACTIVE_KEEP_ALIVE_CHECK */
+                       {
+                               if (rx_chk != _SUCCESS) {
+                                       if (pmlmeext->retry == 0) {
+                                               #ifdef DBG_EXPIRATION_CHK
+                                               DBG_871X("issue_probereq to trigger probersp, retry=%d\n", pmlmeext->retry);
+                                               #endif
+                                               issue_probereq(padapter, &pmlmeinfo->network.Ssid, pmlmeinfo->network.MacAddress);
+                                               issue_probereq(padapter, &pmlmeinfo->network.Ssid, pmlmeinfo->network.MacAddress);
+                                               issue_probereq(padapter, &pmlmeinfo->network.Ssid, pmlmeinfo->network.MacAddress);
+                                       }
+                               }
+
+                               if (tx_chk != _SUCCESS && pmlmeinfo->link_count++ == 0xf) {
+                                       #ifdef DBG_EXPIRATION_CHK
+                                       DBG_871X("%s issue_nulldata 0\n", __FUNCTION__);
+                                       #endif
+                                       tx_chk = issue_nulldata(padapter, NULL, 0, 1, 0);
+                               }
+                       }
+
+                       if (rx_chk == _FAIL) {
+                               pmlmeext->retry++;
+                               if (pmlmeext->retry > rx_chk_limit) {
+                                       DBG_871X(FUNC_ADPT_FMT" disconnect or roaming\n",
+                                               FUNC_ADPT_ARG(padapter));
+                                       receive_disconnect(padapter, pmlmeinfo->network.MacAddress
+                                               , WLAN_REASON_EXPIRATION_CHK);
+                                       return;
+                               }
+                       } else {
+                               pmlmeext->retry = 0;
+                       }
+
+                       if (tx_chk == _FAIL) {
+                               pmlmeinfo->link_count &= 0xf;
+                       } else {
+                               pxmitpriv->last_tx_pkts = pxmitpriv->tx_pkts;
+                               pmlmeinfo->link_count = 0;
+                       }
+
+               } //end of if ((psta = rtw_get_stainfo(pstapriv, passoc_res->network.MacAddress)) != NULL)
+       }
+       else if (is_client_associated_to_ibss(padapter))
+       {
+               //linked IBSS mode
+               //for each assoc list entry to check the rx pkt counter
+               for (i = IBSS_START_MAC_ID; i < NUM_STA; i++)
+               {
+                       if (pmlmeinfo->FW_sta_info[i].status == 1)
+                       {
+                               psta = pmlmeinfo->FW_sta_info[i].psta;
+
+                               if(NULL==psta) continue;
+
+                               if (pmlmeinfo->FW_sta_info[i].rx_pkt == sta_rx_pkts(psta))
+                               {
+
+                                       if(pmlmeinfo->FW_sta_info[i].retry<3)
+                                       {
+                                               pmlmeinfo->FW_sta_info[i].retry++;
+                                       }
+                                       else
+                                       {
+                                               pmlmeinfo->FW_sta_info[i].retry = 0;
+                                               pmlmeinfo->FW_sta_info[i].status = 0;
+                                               report_del_sta_event(padapter, psta->hwaddr
+                                                       , 65535// indicate disconnect caused by no rx
+                                               );
+                                       }
+                               }
+                               else
+                               {
+                                       pmlmeinfo->FW_sta_info[i].retry = 0;
+                                       pmlmeinfo->FW_sta_info[i].rx_pkt = (u32)sta_rx_pkts(psta);
+                               }
+                       }
+               }
+
+               //set_link_timer(pmlmeext, DISCONNECT_TO);
+
+       }
+
+}
+
+void survey_timer_hdl(_adapter *padapter)
+{
+       struct cmd_obj  *ph2c;
+       struct sitesurvey_parm  *psurveyPara;
+       struct cmd_priv                                 *pcmdpriv=&padapter->cmdpriv;
+       struct mlme_ext_priv            *pmlmeext = &padapter->mlmeextpriv;
+#ifdef CONFIG_P2P
+       struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
+#endif
+
+       //DBG_871X("marc: survey timer\n");
+#ifdef PLATFORM_FREEBSD
+       rtw_mtx_lock(NULL);
+        if (callout_pending(&padapter->mlmeextpriv.survey_timer.callout)) {
+                /* callout was reset */
+                //mtx_unlock(&sc->sc_mtx);
+                rtw_mtx_unlock(NULL);
+                return;
+        }
+        if (!callout_active(&padapter->mlmeextpriv.survey_timer.callout)) {
+                /* callout was stopped */
+                //mtx_unlock(&sc->sc_mtx);
+                rtw_mtx_unlock(NULL);
+                return;
+        }
+        callout_deactivate(&padapter->mlmeextpriv.survey_timer.callout);
+
+
+#endif
+
+       //issue rtw_sitesurvey_cmd
+       if (pmlmeext->sitesurvey_res.state > SCAN_START)
+       {
+               if(pmlmeext->sitesurvey_res.state ==  SCAN_PROCESS)
+               {
+#ifdef CONFIG_STA_MODE_SCAN_UNDER_AP_MODE
+                       if( padapter->mlmeextpriv.mlmext_info.scan_cnt != RTW_SCAN_NUM_OF_CH )
+#endif //CONFIG_STA_MODE_SCAN_UNDER_AP_MODE
+                               pmlmeext->sitesurvey_res.channel_idx++;
+               }
+
+               if(pmlmeext->scan_abort == _TRUE)
+               {
+                       #ifdef CONFIG_P2P
+                       if(!rtw_p2p_chk_state(&padapter->wdinfo, P2P_STATE_NONE))
+                       {
+                               rtw_p2p_findphase_ex_set(pwdinfo, P2P_FINDPHASE_EX_MAX);
+                               pmlmeext->sitesurvey_res.channel_idx = 3;
+                               DBG_871X("%s idx:%d, cnt:%u\n", __FUNCTION__
+                                       , pmlmeext->sitesurvey_res.channel_idx
+                                       , pwdinfo->find_phase_state_exchange_cnt
+                               );
+                       }
+                       else
+                       #endif
+                       {
+                               pmlmeext->sitesurvey_res.channel_idx = pmlmeext->sitesurvey_res.ch_num;
+                               DBG_871X("%s idx:%d\n", __FUNCTION__
+                                       , pmlmeext->sitesurvey_res.channel_idx
+                               );
+                       }
+
+                       pmlmeext->scan_abort = _FALSE;//reset
+               }
+
+               if ((ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj))) == NULL)
+               {
+                       goto exit_survey_timer_hdl;
+               }
+
+               if ((psurveyPara = (struct sitesurvey_parm*)rtw_zmalloc(sizeof(struct sitesurvey_parm))) == NULL)
+               {
+                       rtw_mfree((unsigned char *)ph2c, sizeof(struct cmd_obj));
+                       goto exit_survey_timer_hdl;
+               }
+
+               init_h2fwcmd_w_parm_no_rsp(ph2c, psurveyPara, GEN_CMD_CODE(_SiteSurvey));
+               rtw_enqueue_cmd(pcmdpriv, ph2c);
+       }
+
+
+exit_survey_timer_hdl:
+#ifdef PLATFORM_FREEBSD
+               rtw_mtx_unlock(NULL);
+#endif
+
+       return;
+}
+
+void link_timer_hdl(_adapter *padapter)
+{
+       //static unsigned int           rx_pkt = 0;
+       //static u64                            tx_cnt = 0;
+       //struct xmit_priv              *pxmitpriv = &(padapter->xmitpriv);
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       //struct sta_priv               *pstapriv = &padapter->stapriv;
+
+#ifdef PLATFORM_FREEBSD
+       rtw_mtx_lock(NULL);
+        if (callout_pending(&padapter->mlmeextpriv.survey_timer.callout)) {
+                /* callout was reset */
+                //mtx_unlock(&sc->sc_mtx);
+                rtw_mtx_unlock(NULL);
+                return;
+        }
+        if (!callout_active(&padapter->mlmeextpriv.survey_timer.callout)) {
+                /* callout was stopped */
+                //mtx_unlock(&sc->sc_mtx);
+                rtw_mtx_unlock(NULL);
+                return;
+        }
+        callout_deactivate(&padapter->mlmeextpriv.survey_timer.callout);
+
+
+#endif
+
+       if (pmlmeinfo->state & WIFI_FW_AUTH_NULL)
+       {
+               DBG_871X("link_timer_hdl:no beacon while connecting\n");
+               pmlmeinfo->state = WIFI_FW_NULL_STATE;
+               report_join_res(padapter, -3);
+       }
+       else if (pmlmeinfo->state & WIFI_FW_AUTH_STATE)
+       {
+               //re-auth timer
+               if (++pmlmeinfo->reauth_count > REAUTH_LIMIT)
+               {
+                       //if (pmlmeinfo->auth_algo != dot11AuthAlgrthm_Auto)
+                       //{
+                               pmlmeinfo->state = 0;
+                               report_join_res(padapter, -1);
+                               return;
+                       //}
+                       //else
+                       //{
+                       //      pmlmeinfo->auth_algo = dot11AuthAlgrthm_Shared;
+                       //      pmlmeinfo->reauth_count = 0;
+                       //}
+               }
+
+               DBG_871X("link_timer_hdl: auth timeout and try again\n");
+               pmlmeinfo->auth_seq = 1;
+               issue_auth(padapter, NULL, 0);
+               set_link_timer(pmlmeext, REAUTH_TO);
+       }
+       else if (pmlmeinfo->state & WIFI_FW_ASSOC_STATE)
+       {
+               //re-assoc timer
+               if (++pmlmeinfo->reassoc_count > REASSOC_LIMIT)
+               {
+                       pmlmeinfo->state = WIFI_FW_NULL_STATE;
+                       report_join_res(padapter, -2);
+                       return;
+               }
+
+               DBG_871X("link_timer_hdl: assoc timeout and try again\n");
+               issue_assocreq(padapter);
+               set_link_timer(pmlmeext, REASSOC_TO);
+       }
+#if 0
+       else if (is_client_associated_to_ap(padapter))
+       {
+               //linked infrastructure client mode
+               if ((psta = rtw_get_stainfo(pstapriv, pmlmeinfo->network.MacAddress)) != NULL)
+               {
+                       /*to monitor whether the AP is alive or not*/
+                       if (rx_pkt == psta->sta_stats.rx_pkts)
+                       {
+                               receive_disconnect(padapter, pmlmeinfo->network.MacAddress);
+                               return;
+                       }
+                       else
+                       {
+                               rx_pkt = psta->sta_stats.rx_pkts;
+                               set_link_timer(pmlmeext, DISCONNECT_TO);
+                       }
+
+                       //update the EDCA paramter according to the Tx/RX mode
+                       update_EDCA_param(padapter);
+
+                       /*to send the AP a nulldata if no frame is xmitted in order to keep alive*/
+                       if (pmlmeinfo->link_count++ == 0)
+                       {
+                               tx_cnt = pxmitpriv->tx_pkts;
+                       }
+                       else if ((pmlmeinfo->link_count & 0xf) == 0)
+                       {
+                               if (tx_cnt == pxmitpriv->tx_pkts)
+                               {
+                                       issue_nulldata(padapter, NULL, 0, 0, 0);
+                               }
+
+                               tx_cnt = pxmitpriv->tx_pkts;
+                       }
+               } //end of if ((psta = rtw_get_stainfo(pstapriv, passoc_res->network.MacAddress)) != NULL)
+       }
+       else if (is_client_associated_to_ibss(padapter))
+       {
+               //linked IBSS mode
+               //for each assoc list entry to check the rx pkt counter
+               for (i = IBSS_START_MAC_ID; i < NUM_STA; i++)
+               {
+                       if (pmlmeinfo->FW_sta_info[i].status == 1)
+                       {
+                               psta = pmlmeinfo->FW_sta_info[i].psta;
+
+                               if (pmlmeinfo->FW_sta_info[i].rx_pkt == psta->sta_stats.rx_pkts)
+                               {
+                                       pmlmeinfo->FW_sta_info[i].status = 0;
+                                       report_del_sta_event(padapter, psta->hwaddr);
+                               }
+                               else
+                               {
+                                       pmlmeinfo->FW_sta_info[i].rx_pkt = psta->sta_stats.rx_pkts;
+                               }
+                       }
+               }
+
+               set_link_timer(pmlmeext, DISCONNECT_TO);
+       }
+#endif
+
+#ifdef PLATFORM_FREEBSD
+       rtw_mtx_unlock(NULL);
+#endif
+
+       return;
+}
+
+void addba_timer_hdl(struct sta_info *psta)
+{
+       struct ht_priv  *phtpriv;
+
+       if(!psta)
+               return;
+
+       phtpriv = &psta->htpriv;
+
+       if((phtpriv->ht_option==_TRUE) && (phtpriv->ampdu_enable==_TRUE))
+       {
+               if(phtpriv->candidate_tid_bitmap)
+                       phtpriv->candidate_tid_bitmap=0x0;
+
+       }
+}
+
+#ifdef CONFIG_IEEE80211W
+void sa_query_timer_hdl(_adapter *padapter)
+{
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_priv * pmlmepriv = &padapter->mlmepriv;
+       _irqL irqL;
+       //disconnect
+       _enter_critical_bh(&pmlmepriv->lock, &irqL);
+
+       if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)
+       {
+               rtw_disassoc_cmd(padapter, 0, _TRUE);
+               rtw_indicate_disconnect(padapter);
+               rtw_free_assoc_resources(padapter, 1);
+       }
+
+       _exit_critical_bh(&pmlmepriv->lock, &irqL);
+       DBG_871X("SA query timeout disconnect\n");
+}
+#endif //CONFIG_IEEE80211W
+
+u8 NULL_hdl(_adapter *padapter, u8 *pbuf)
+{
+       return H2C_SUCCESS;
+}
+
+#ifdef CONFIG_AUTO_AP_MODE
+void rtw_start_auto_ap(_adapter *adapter)
+{
+       DBG_871X("%s\n", __FUNCTION__);
+
+       rtw_set_802_11_infrastructure_mode(adapter, Ndis802_11APMode);
+
+       rtw_setopmode_cmd(adapter, Ndis802_11APMode);
+}
+
+static int rtw_auto_ap_start_beacon(_adapter *adapter)
+{
+       int ret=0;
+       u8 *pbuf = NULL;
+       uint len;
+       u8      supportRate[16];
+       int     sz = 0, rateLen;
+       u8 *    ie;
+       u8      wireless_mode, oper_channel;
+       u8 ssid[3] = {0}; //hidden ssid
+       u32 ssid_len = sizeof(ssid);
+       struct mlme_priv *pmlmepriv = &(adapter->mlmepriv);
+
+
+       if(check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
+               return -EINVAL;
+
+
+       len = 128;
+       pbuf = rtw_zmalloc(len);
+       if(!pbuf)
+               return -ENOMEM;
+
+
+       //generate beacon
+       ie = pbuf;
+
+       //timestamp will be inserted by hardware
+       sz += 8;
+       ie += sz;
+
+       //beacon interval : 2bytes
+       *(u16*)ie = cpu_to_le16((u16)100);//BCN_INTERVAL=100;
+       sz += 2;
+       ie += 2;
+
+       //capability info
+       *(u16*)ie = 0;
+       *(u16*)ie |= cpu_to_le16(cap_ESS);
+       *(u16*)ie |= cpu_to_le16(cap_ShortPremble);
+       //*(u16*)ie |= cpu_to_le16(cap_Privacy);
+       sz += 2;
+       ie += 2;
+
+       //SSID
+       ie = rtw_set_ie(ie, _SSID_IE_, ssid_len, ssid, &sz);
+
+       //supported rates
+       wireless_mode = WIRELESS_11BG_24N;
+       rtw_set_supported_rate(supportRate, wireless_mode) ;
+       rateLen = rtw_get_rateset_len(supportRate);
+       if (rateLen > 8)
+       {
+               ie = rtw_set_ie(ie, _SUPPORTEDRATES_IE_, 8, supportRate, &sz);
+       }
+       else
+       {
+               ie = rtw_set_ie(ie, _SUPPORTEDRATES_IE_, rateLen, supportRate, &sz);
+       }
+
+
+       //DS parameter set
+       if(check_buddy_fwstate(adapter, _FW_LINKED) &&
+               check_buddy_fwstate(adapter, WIFI_STATION_STATE))
+       {
+               PADAPTER pbuddy_adapter = adapter->pbuddy_adapter;
+               struct mlme_ext_priv *pbuddy_mlmeext  = &pbuddy_adapter->mlmeextpriv;
+
+               oper_channel = pbuddy_mlmeext->cur_channel;
+       }
+       else
+       {
+               oper_channel = adapter_to_dvobj(adapter)->oper_channel;
+       }
+       ie = rtw_set_ie(ie, _DSSET_IE_, 1, &oper_channel, &sz);
+
+       //ext supported rates
+       if (rateLen > 8)
+       {
+               ie = rtw_set_ie(ie, _EXT_SUPPORTEDRATES_IE_, (rateLen - 8), (supportRate + 8), &sz);
+       }
+
+       DBG_871X("%s, start auto ap beacon sz=%d\n", __FUNCTION__, sz);
+
+       //lunch ap mode & start to issue beacon
+       if(rtw_check_beacon_data(adapter, pbuf,  sz) == _SUCCESS)
+       {
+
+       }
+       else
+       {
+               ret = -EINVAL;
+       }
+
+
+       rtw_mfree(pbuf, len);
+
+       return ret;
+
+}
+#endif//CONFIG_AUTO_AP_MODE
+
+u8 setopmode_hdl(_adapter *padapter, u8 *pbuf)
+{
+       u8      type;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       struct setopmode_parm *psetop = (struct setopmode_parm *)pbuf;
+
+       if(psetop->mode == Ndis802_11APMode)
+       {
+               pmlmeinfo->state = WIFI_FW_AP_STATE;
+               type = _HW_STATE_AP_;
+#ifdef CONFIG_NATIVEAP_MLME
+               //start_ap_mode(padapter);
+#endif
+       }
+       else if(psetop->mode == Ndis802_11Infrastructure)
+       {
+               pmlmeinfo->state &= ~(BIT(0)|BIT(1));// clear state
+               pmlmeinfo->state |= WIFI_FW_STATION_STATE;//set to      STATION_STATE
+               type = _HW_STATE_STATION_;
+       }
+       else if(psetop->mode == Ndis802_11IBSS)
+       {
+               type = _HW_STATE_ADHOC_;
+       }
+       else
+       {
+               type = _HW_STATE_NOLINK_;
+       }
+
+       rtw_hal_set_hwreg(padapter, HW_VAR_SET_OPMODE, (u8 *)(&type));
+       //Set_NETYPE0_MSR(padapter, type);
+
+#ifdef CONFIG_AUTO_AP_MODE
+       if(psetop->mode == Ndis802_11APMode)
+               rtw_auto_ap_start_beacon(padapter);
+#endif
+
+       return H2C_SUCCESS;
+
+}
+
+u8 createbss_hdl(_adapter *padapter, u8 *pbuf)
+{
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       WLAN_BSSID_EX   *pnetwork = (WLAN_BSSID_EX*)(&(pmlmeinfo->network));
+       struct joinbss_parm *pparm = (struct joinbss_parm *)pbuf;
+       u32     initialgain;
+
+
+       if(pparm->network.InfrastructureMode == Ndis802_11APMode)
+       {
+#ifdef CONFIG_AP_MODE
+
+               if(pmlmeinfo->state == WIFI_FW_AP_STATE)
+               {
+                       //todo:
+                       return H2C_SUCCESS;
+               }
+#endif
+       }
+
+       //below is for ad-hoc master
+       if(pparm->network.InfrastructureMode == Ndis802_11IBSS)
+       {
+               rtw_joinbss_reset(padapter);
+
+               pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_20;
+               pmlmeext->cur_ch_offset= HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+               pmlmeinfo->ERP_enable = 0;
+               pmlmeinfo->WMM_enable = 0;
+               pmlmeinfo->HT_enable = 0;
+               pmlmeinfo->HT_caps_enable = 0;
+               pmlmeinfo->HT_info_enable = 0;
+               pmlmeinfo->agg_enable_bitmap = 0;
+               pmlmeinfo->candidate_tid_bitmap = 0;
+
+               //disable dynamic functions, such as high power, DIG
+               Save_DM_Func_Flag(padapter);
+               Switch_DM_Func(padapter, DYNAMIC_FUNC_DISABLE, _FALSE);
+
+               //config the initial gain under linking, need to write the BB registers
+               initialgain = 0x1E;
+               rtw_hal_set_hwreg(padapter, HW_VAR_INITIAL_GAIN, (u8 *)(&initialgain));
+
+               //cancel link timer
+               _cancel_timer_ex(&pmlmeext->link_timer);
+
+               //clear CAM
+               flush_all_cam_entry(padapter);
+
+               _rtw_memcpy(pnetwork, pbuf, FIELD_OFFSET(WLAN_BSSID_EX, IELength));
+               pnetwork->IELength = ((WLAN_BSSID_EX *)pbuf)->IELength;
+
+               if(pnetwork->IELength>MAX_IE_SZ)//Check pbuf->IELength
+                       return H2C_PARAMETERS_ERROR;
+
+               _rtw_memcpy(pnetwork->IEs, ((WLAN_BSSID_EX *)pbuf)->IEs, pnetwork->IELength);
+
+               start_create_ibss(padapter);
+
+       }
+
+       return H2C_SUCCESS;
+
+}
+
+u8 join_cmd_hdl(_adapter *padapter, u8 *pbuf)
+{
+       u8      join_type;
+       PNDIS_802_11_VARIABLE_IEs       pIE;
+       struct registry_priv    *pregpriv = &padapter->registrypriv;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       WLAN_BSSID_EX           *pnetwork = (WLAN_BSSID_EX*)(&(pmlmeinfo->network));
+#ifdef CONFIG_ANTENNA_DIVERSITY
+       struct joinbss_parm     *pparm = (struct joinbss_parm *)pbuf;
+#endif //CONFIG_ANTENNA_DIVERSITY
+       u32     initialgain, i;
+       u8 cbw40_enable=0;
+       //u32   acparm;
+
+       //check already connecting to AP or not
+       if (pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS)
+       {
+               if (pmlmeinfo->state & WIFI_FW_STATION_STATE)
+               {
+                       issue_deauth_ex(padapter, pnetwork->MacAddress, WLAN_REASON_DEAUTH_LEAVING, 5, 100);
+               }
+
+               pmlmeinfo->state = WIFI_FW_NULL_STATE;
+
+               //clear CAM
+               flush_all_cam_entry(padapter);
+
+               _cancel_timer_ex(&pmlmeext->link_timer);
+
+               //set MSR to nolink -> infra. mode
+               //Set_MSR(padapter, _HW_STATE_NOLINK_);
+               Set_MSR(padapter, _HW_STATE_STATION_);
+
+
+               rtw_hal_set_hwreg(padapter, HW_VAR_MLME_DISCONNECT, 0);
+       }
+
+#ifdef CONFIG_ANTENNA_DIVERSITY
+       rtw_antenna_select_cmd(padapter, pparm->network.PhyInfo.Optimum_antenna, _FALSE);
+#endif
+
+       rtw_joinbss_reset(padapter);
+
+       pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_20;
+       pmlmeext->cur_ch_offset= HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+       pmlmeinfo->ERP_enable = 0;
+       pmlmeinfo->WMM_enable = 0;
+       pmlmeinfo->HT_enable = 0;
+       pmlmeinfo->HT_caps_enable = 0;
+       pmlmeinfo->HT_info_enable = 0;
+       pmlmeinfo->agg_enable_bitmap = 0;
+       pmlmeinfo->candidate_tid_bitmap = 0;
+       pmlmeinfo->bwmode_updated = _FALSE;
+       //pmlmeinfo->assoc_AP_vendor = maxAP;
+
+       _rtw_memcpy(pnetwork, pbuf, FIELD_OFFSET(WLAN_BSSID_EX, IELength));
+       pnetwork->IELength = ((WLAN_BSSID_EX *)pbuf)->IELength;
+
+       if(pnetwork->IELength>MAX_IE_SZ)//Check pbuf->IELength
+               return H2C_PARAMETERS_ERROR;
+
+       _rtw_memcpy(pnetwork->IEs, ((WLAN_BSSID_EX *)pbuf)->IEs, pnetwork->IELength);
+
+       pmlmeext->cur_channel = (u8)pnetwork->Configuration.DSConfig;
+       pmlmeinfo->bcn_interval = get_beacon_interval(pnetwork);
+
+       //Check AP vendor to move rtw_joinbss_cmd()
+       //pmlmeinfo->assoc_AP_vendor = check_assoc_AP(pnetwork->IEs, pnetwork->IELength);
+
+       for (i = sizeof(NDIS_802_11_FIXED_IEs); i < pnetwork->IELength;)
+       {
+               pIE = (PNDIS_802_11_VARIABLE_IEs)(pnetwork->IEs + i);
+
+               switch (pIE->ElementID)
+               {
+                       case _VENDOR_SPECIFIC_IE_://Get WMM IE.
+                               if ( _rtw_memcmp(pIE->data, WMM_OUI, 4) )
+                               {
+                                       pmlmeinfo->WMM_enable = 1;
+                               }
+                               break;
+
+                       case _HT_CAPABILITY_IE_:        //Get HT Cap IE.
+                               pmlmeinfo->HT_caps_enable = 1;
+                               break;
+
+                       case _HT_EXTRA_INFO_IE_:        //Get HT Info IE.
+                               pmlmeinfo->HT_info_enable = 1;
+
+                               //spec case only for cisco's ap because cisco's ap issue assoc rsp using mcs rate @40MHz or @20MHz
+//#if !defined(CONFIG_CONCURRENT_MODE) && !defined(CONFIG_DUALMAC_CONCURRENT)
+//                             if(pmlmeinfo->assoc_AP_vendor == ciscoAP)
+//#endif
+                               {
+                                       struct HT_info_element *pht_info = (struct HT_info_element *)(pIE->data);
+
+                                       if( pnetwork->Configuration.DSConfig > 14 )
+                                       {
+                                               if( pregpriv->cbw40_enable & BIT(1) )
+                                                       cbw40_enable = 1;
+                                       }
+                                       else
+                                               if( pregpriv->cbw40_enable & BIT(0) )
+                                                       cbw40_enable = 1;
+
+                                       if ((cbw40_enable) &&    (pht_info->infos[0] & BIT(2)))
+                                       {
+                                               //switch to the 40M Hz mode according to the AP
+                                               pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_40;
+                                               switch (pht_info->infos[0] & 0x3)
+                                               {
+                                                       case 1:
+                                                               pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
+                                                               break;
+
+                                                       case 3:
+                                                               pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
+                                                               break;
+
+                                                       default:
+                                                               pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+                                                               break;
+                                               }
+
+                                               DBG_871X("set ch/bw before connected\n");
+                                       }
+                               }
+                               break;
+
+                       default:
+                               break;
+               }
+
+               i += (pIE->Length + 2);
+       }
+#if 0
+       if (padapter->registrypriv.wifi_spec) {
+               // for WiFi test, follow WMM test plan spec
+               acparm = 0x002F431C; // VO
+               rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VO, (u8 *)(&acparm));
+               acparm = 0x005E541C; // VI
+               rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VI, (u8 *)(&acparm));
+               acparm = 0x0000A525; // BE
+               rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BE, (u8 *)(&acparm));
+               acparm = 0x0000A549; // BK
+               rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BK, (u8 *)(&acparm));
+
+               // for WiFi test, mixed mode with intel STA under bg mode throughput issue
+               if (padapter->mlmepriv.htpriv.ht_option == _FALSE){
+                       acparm = 0x00004320;
+                       rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BE, (u8 *)(&acparm));
+               }
+       }
+       else {
+               acparm = 0x002F3217; // VO
+               rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VO, (u8 *)(&acparm));
+               acparm = 0x005E4317; // VI
+               rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VI, (u8 *)(&acparm));
+               acparm = 0x00105320; // BE
+               rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BE, (u8 *)(&acparm));
+               acparm = 0x0000A444; // BK
+               rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BK, (u8 *)(&acparm));
+       }
+#endif
+
+       /* check channel, bandwidth, offset and switch */
+#ifdef CONFIG_DUALMAC_CONCURRENT
+       if(dc_handle_join_request(padapter) == _FAIL) {
+               DBG_871X("dc_handle_join_request fail !!!\n");
+               return H2C_SUCCESS;
+       }
+       set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
+#else //NON CONFIG_DUALMAC_CONCURRENT
+       if(rtw_chk_start_clnt_join(padapter) == _FAIL) {
+               report_join_res(padapter, (-4));
+               return H2C_SUCCESS;
+       }
+#endif
+
+       //disable dynamic functions, such as high power, DIG
+       //Switch_DM_Func(padapter, DYNAMIC_FUNC_DISABLE, _FALSE);
+
+       //config the initial gain under linking, need to write the BB registers
+
+       initialgain = 0x1E;
+       rtw_hal_set_hwreg(padapter, HW_VAR_INITIAL_GAIN, (u8 *)(&initialgain));
+
+
+       rtw_hal_set_hwreg(padapter, HW_VAR_BSSID, pmlmeinfo->network.MacAddress);
+       join_type = 0;
+       rtw_hal_set_hwreg(padapter, HW_VAR_MLME_JOIN, (u8 *)(&join_type));
+
+       //cancel link timer
+       _cancel_timer_ex(&pmlmeext->link_timer);
+
+       start_clnt_join(padapter);
+
+       return H2C_SUCCESS;
+
+}
+
+u8 disconnect_hdl(_adapter *padapter, unsigned char *pbuf)
+{
+       struct disconnect_parm *param = (struct disconnect_parm *)pbuf;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       WLAN_BSSID_EX           *pnetwork = (WLAN_BSSID_EX*)(&(pmlmeinfo->network));
+       u8      val8;
+
+       if (is_client_associated_to_ap(padapter))
+       {
+               issue_deauth_ex(padapter, pnetwork->MacAddress, WLAN_REASON_DEAUTH_LEAVING, param->deauth_timeout_ms/100, 100);
+       }
+
+       //set_opmode_cmd(padapter, infra_client_with_mlme);
+
+       //pmlmeinfo->state = WIFI_FW_NULL_STATE;
+
+
+       rtw_hal_set_hwreg(padapter, HW_VAR_MLME_DISCONNECT, 0);
+       rtw_hal_set_hwreg(padapter, HW_VAR_BSSID, null_addr);
+
+       //restore to initial setting.
+       update_tx_basic_rate(padapter, padapter->registrypriv.wireless_mode);
+
+       if(((pmlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE) || ((pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE))
+       {
+               //Stop BCN
+               val8 = 0;
+               rtw_hal_set_hwreg(padapter, HW_VAR_BCN_FUNC, (u8 *)(&val8));
+       }
+
+
+       //set MSR to no link state -> infra. mode
+       Set_MSR(padapter, _HW_STATE_STATION_);
+
+       pmlmeinfo->state = WIFI_FW_NULL_STATE;
+
+#ifdef CONFIG_DUALMAC_CONCURRENT
+       dc_set_channel_bwmode_disconnect(padapter);
+#else
+#ifdef CONFIG_CONCURRENT_MODE
+       if((check_buddy_fwstate(padapter, _FW_LINKED)) != _TRUE)
+       {
+#endif //CONFIG_CONCURRENT_MODE
+               //switch to the 20M Hz mode after disconnect
+               pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_20;
+               pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+
+               set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
+#ifdef CONFIG_CONCURRENT_MODE
+       }
+#endif //CONFIG_CONCURRENT_MODE
+#endif //CONFIG_DUALMAC_CONCURRENT
+
+       flush_all_cam_entry(padapter);
+
+       _cancel_timer_ex(&pmlmeext->link_timer);
+
+       rtw_free_uc_swdec_pending_queue(padapter);
+
+       return  H2C_SUCCESS;
+}
+
+int rtw_scan_ch_decision(_adapter *padapter, struct rtw_ieee80211_channel *out,
+       u32 out_num, struct rtw_ieee80211_channel *in, u32 in_num)
+{
+       int i, j;
+       int scan_ch_num = 0;
+       int set_idx;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+
+       /* clear first */
+       _rtw_memset(out, 0, sizeof(struct rtw_ieee80211_channel)*out_num);
+
+       /* acquire channels from in */
+       j = 0;
+       for (i=0;i<in_num;i++) {
+
+               if (0)
+               DBG_871X(FUNC_ADPT_FMT" "CHAN_FMT"\n", FUNC_ADPT_ARG(padapter), CHAN_ARG(&in[i]));
+
+               if(in[i].hw_value && !(in[i].flags & RTW_IEEE80211_CHAN_DISABLED)
+                       && (set_idx=rtw_ch_set_search_ch(pmlmeext->channel_set, in[i].hw_value)) >=0
+                       && rtw_mlme_band_check(padapter, in[i].hw_value) == _TRUE
+               )
+               {
+                       if (j >= out_num) {
+                               DBG_871X_LEVEL(_drv_always_, FUNC_ADPT_FMT" out_num:%u not enough\n",
+                                       FUNC_ADPT_ARG(padapter), out_num);
+                               break;
+                       }
+
+                       _rtw_memcpy(&out[j], &in[i], sizeof(struct rtw_ieee80211_channel));
+
+                       if(pmlmeext->channel_set[set_idx].ScanType == SCAN_PASSIVE)
+                               out[j].flags &= RTW_IEEE80211_CHAN_PASSIVE_SCAN;
+
+                       j++;
+               }
+               if(j>=out_num)
+                       break;
+       }
+
+       /* if out is empty, use channel_set as default */
+       if(j == 0) {
+               for (i=0;i<pmlmeext->max_chan_nums;i++) {
+
+                       if (0)
+                       DBG_871X(FUNC_ADPT_FMT" ch:%u\n", FUNC_ADPT_ARG(padapter), pmlmeext->channel_set[i].ChannelNum);
+
+                       if (rtw_mlme_band_check(padapter, pmlmeext->channel_set[i].ChannelNum) == _TRUE) {
+
+                               if (j >= out_num) {
+                                       DBG_871X_LEVEL(_drv_always_, FUNC_ADPT_FMT" out_num:%u not enough\n",
+                                               FUNC_ADPT_ARG(padapter), out_num);
+                                       break;
+                               }
+
+                               out[j].hw_value = pmlmeext->channel_set[i].ChannelNum;
+
+                               if(pmlmeext->channel_set[i].ScanType == SCAN_PASSIVE)
+                                       out[j].flags &= RTW_IEEE80211_CHAN_PASSIVE_SCAN;
+
+                               j++;
+                       }
+               }
+       }
+
+       return j;
+}
+
+u8 sitesurvey_cmd_hdl(_adapter *padapter, u8 *pbuf)
+{
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct sitesurvey_parm  *pparm = (struct sitesurvey_parm *)pbuf;
+       u8      bdelayscan = _FALSE;
+       u8      val8;
+       u32     initialgain;
+       u32     i;
+       u8      write_initial_gain = 1;
+
+#ifdef CONFIG_P2P
+       struct wifidirect_info* pwdinfo = &padapter->wdinfo;
+#endif
+
+       if (pmlmeext->sitesurvey_res.state == SCAN_DISABLE)
+       {
+#ifdef CONFIG_CONCURRENT_MODE
+               //for first time sitesurvey_cmd
+               rtw_hal_set_hwreg(padapter, HW_VAR_CHECK_TXBUF, 0);
+#endif //CONFIG_CONCURRENT_MODE
+
+               pmlmeext->sitesurvey_res.state = SCAN_START;
+               pmlmeext->sitesurvey_res.bss_cnt = 0;
+               pmlmeext->sitesurvey_res.channel_idx = 0;
+
+               for(i=0;i<RTW_SSID_SCAN_AMOUNT;i++){
+                       if(pparm->ssid[i].SsidLength) {
+                               _rtw_memcpy(pmlmeext->sitesurvey_res.ssid[i].Ssid, pparm->ssid[i].Ssid, IW_ESSID_MAX_SIZE);
+                               pmlmeext->sitesurvey_res.ssid[i].SsidLength= pparm->ssid[i].SsidLength;
+                       } else {
+                               pmlmeext->sitesurvey_res.ssid[i].SsidLength= 0;
+                       }
+               }
+
+               pmlmeext->sitesurvey_res.ch_num = rtw_scan_ch_decision(padapter
+                       , pmlmeext->sitesurvey_res.ch, RTW_CHANNEL_SCAN_AMOUNT
+                       , pparm->ch, pparm->ch_num
+               );
+
+               pmlmeext->sitesurvey_res.scan_mode = pparm->scan_mode;
+
+#ifdef CONFIG_DUALMAC_CONCURRENT
+               bdelayscan = dc_handle_site_survey(padapter);
+#endif
+
+               //issue null data if associating to the AP
+               if (is_client_associated_to_ap(padapter) == _TRUE)
+               {
+                       pmlmeext->sitesurvey_res.state = SCAN_TXNULL;
+
+                       issue_nulldata(padapter, NULL, 1, 3, 500);
+
+#ifdef CONFIG_CONCURRENT_MODE
+                       if(is_client_associated_to_ap(padapter->pbuddy_adapter) == _TRUE)
+                       {
+                               DBG_871X("adapter is scanning(buddy_adapter is linked), issue nulldata(pwrbit=1)\n");
+
+                               issue_nulldata(padapter->pbuddy_adapter, NULL, 1, 3, 500);
+                       }
+#endif
+                       bdelayscan = _TRUE;
+               }
+#ifdef CONFIG_CONCURRENT_MODE
+               else if(is_client_associated_to_ap(padapter->pbuddy_adapter) == _TRUE)
+               {
+                       #ifdef CONFIG_TDLS
+                       if(padapter->pbuddy_adapter->wdinfo.wfd_tdls_enable == 1)
+                       {
+                               issue_tunneled_probe_req(padapter->pbuddy_adapter);
+                       }
+                       #endif //CONFIG_TDLS
+
+                       pmlmeext->sitesurvey_res.state = SCAN_TXNULL;
+
+                       issue_nulldata(padapter->pbuddy_adapter, NULL, 1, 3, 500);
+
+                       bdelayscan = _TRUE;
+               }
+#endif
+               if(bdelayscan)
+               {
+                       //delay 50ms to protect nulldata(1).
+                       set_survey_timer(pmlmeext, 50);
+                       return H2C_SUCCESS;
+               }
+       }
+
+       if ((pmlmeext->sitesurvey_res.state == SCAN_START) || (pmlmeext->sitesurvey_res.state == SCAN_TXNULL))
+       {
+#ifdef CONFIG_FIND_BEST_CHANNEL
+#if 0
+               for (i=0; pmlmeext->channel_set[i].ChannelNum !=0; i++) {
+                       pmlmeext->channel_set[i].rx_count = 0;
+               }
+#endif
+#endif /* CONFIG_FIND_BEST_CHANNEL */
+
+               //disable dynamic functions, such as high power, DIG
+               Save_DM_Func_Flag(padapter);
+               Switch_DM_Func(padapter, DYNAMIC_FUNC_DISABLE, _FALSE);
+
+               //config the initial gain under scaning, need to write the BB registers
+
+#ifdef CONFIG_P2P
+#ifdef CONFIG_IOCTL_CFG80211
+               if((wdev_to_priv(padapter->rtw_wdev))->p2p_enabled == _TRUE && pwdinfo->driver_interface == DRIVER_CFG80211 )
+               {
+                       write_initial_gain = 0;
+               }
+               else
+#endif //CONFIG_IOCTL_CFG80211
+               if ( !rtw_p2p_chk_state( pwdinfo, P2P_STATE_NONE ) )
+                       initialgain = 0x28;
+               else
+#endif //CONFIG_P2P
+                       initialgain = 0x17;
+
+               if(write_initial_gain == 1)
+                       rtw_hal_set_hwreg(padapter, HW_VAR_INITIAL_GAIN, (u8 *)(&initialgain));
+
+               //set MSR to no link state
+               Set_MSR(padapter, _HW_STATE_NOLINK_);
+
+               val8 = 1; //under site survey
+               rtw_hal_set_hwreg(padapter, HW_VAR_MLME_SITESURVEY, (u8 *)(&val8));
+
+               pmlmeext->sitesurvey_res.state = SCAN_PROCESS;
+       }
+
+       site_survey(padapter);
+
+       return H2C_SUCCESS;
+
+}
+
+u8 setauth_hdl(_adapter *padapter, unsigned char *pbuf)
+{
+       struct setauth_parm             *pparm = (struct setauth_parm *)pbuf;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       if (pparm->mode < 4)
+       {
+               pmlmeinfo->auth_algo = pparm->mode;
+       }
+
+       return  H2C_SUCCESS;
+}
+
+u8 setkey_hdl(_adapter *padapter, u8 *pbuf)
+{
+       unsigned short                          ctrl;
+       struct setkey_parm              *pparm = (struct setkey_parm *)pbuf;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       unsigned char                                   null_sta[] = {0x00, 0x00, 0x00, 0x00, 0x00, 0x00};
+
+       //main tx key for wep.
+       if(pparm->set_tx)
+               pmlmeinfo->key_index = pparm->keyid;
+
+       //write cam
+       ctrl = BIT(15) | ((pparm->algorithm) << 2) | pparm->keyid;
+
+       write_cam(padapter, pparm->keyid, ctrl, null_sta, pparm->key);
+
+       //allow multicast packets to driver
+       rtw_hal_set_hwreg(padapter, HW_VAR_ON_RCR_AM, null_addr);
+
+       return H2C_SUCCESS;
+}
+
+u8 set_stakey_hdl(_adapter *padapter, u8 *pbuf)
+{
+       u16 ctrl=0;
+       u8 cam_id;//cam_entry
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       struct set_stakey_parm  *pparm = (struct set_stakey_parm *)pbuf;
+#ifdef CONFIG_TDLS
+       struct tdls_info        *ptdlsinfo = &padapter->tdlsinfo;
+       struct sta_priv *pstapriv = &padapter->stapriv;
+       struct sta_info *psta;
+#endif //CONFIG_TDLS
+
+       //cam_entry:
+       //0~3 for default key
+
+       //for concurrent mode (ap+sta):
+       //default key is disable, using sw encrypt/decrypt
+       //cam_entry = 4 //for sta mode (macid=0)
+       //cam_entry(macid+3) = 5 ~ N//for ap mode (aid=1~N, macid=2 ~N)
+
+       //for concurrent mode (sta+sta):
+       //default key is disable, using sw encrypt/decrypt
+       //cam_entry = 4 //mapping to macid=0
+       //cam_entry = 5 //mapping to macid=2
+
+#ifdef CONFIG_CONCURRENT_MODE
+       if((pmlmeinfo->state&0x03) == WIFI_FW_STATION_STATE)
+       {
+               struct sta_priv *pstapriv = &padapter->stapriv;
+               struct sta_info *psta;
+
+               psta = rtw_get_stainfo(pstapriv, pmlmeinfo->network.MacAddress);
+
+               if(psta && psta->mac_id==2)
+               {
+                       cam_id = 5;
+               }
+               else
+               {
+                       cam_id = 4;
+               }
+/*
+               if(padapter->iface_type > PRIMARY_IFACE)
+               {
+                       cam_id = 5;
+               }
+               else
+               {
+                       cam_id = 4;
+               }
+*/
+       }
+#else
+       cam_id = 4;
+#endif
+
+
+       if((pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE)
+       {
+
+               struct sta_info *psta;
+               struct sta_priv *pstapriv = &padapter->stapriv;
+
+               if(pparm->algorithm == _NO_PRIVACY_)    // clear cam entry
+               {
+                       clear_cam_entry(padapter, pparm->id);
+                       return H2C_SUCCESS_RSP;
+               }
+
+               psta = rtw_get_stainfo(pstapriv, pparm->addr);
+               if(psta)
+               {
+                       ctrl = (BIT(15) | ((pparm->algorithm) << 2));
+
+                       DBG_871X("r871x_set_stakey_hdl(): enc_algorithm=%d\n", pparm->algorithm);
+
+                       if((psta->mac_id<1) || (psta->mac_id>(NUM_STA-4)))
+                       {
+                               DBG_871X("r871x_set_stakey_hdl():set_stakey failed, mac_id(aid)=%d\n", psta->mac_id);
+                               return H2C_REJECTED;
+                       }
+
+                       cam_id = (psta->mac_id + 3);//0~3 for default key, cmd_id=macid + 3, macid=aid+1;
+
+                       DBG_871X("Write CAM, mac_addr=%x:%x:%x:%x:%x:%x, cam_entry=%d\n", pparm->addr[0],
+                                               pparm->addr[1], pparm->addr[2], pparm->addr[3], pparm->addr[4],
+                                               pparm->addr[5], cam_id);
+
+                       write_cam(padapter, cam_id, ctrl, pparm->addr, pparm->key);
+
+                       return H2C_SUCCESS_RSP;
+
+               }
+               else
+               {
+                       DBG_871X("r871x_set_stakey_hdl(): sta has been free\n");
+                       return H2C_REJECTED;
+               }
+
+       }
+
+       //below for sta mode
+
+       if(pparm->algorithm == _NO_PRIVACY_)    // clear cam entry
+       {
+               clear_cam_entry(padapter, pparm->id);
+               return H2C_SUCCESS;
+       }
+
+       ctrl = BIT(15) | ((pparm->algorithm) << 2);
+
+#ifdef CONFIG_TDLS
+       if(ptdlsinfo->clear_cam!=0){
+               clear_cam_entry(padapter, ptdlsinfo->clear_cam);
+               ptdlsinfo->clear_cam=0;
+
+               return H2C_SUCCESS;
+       }
+
+       psta = rtw_get_stainfo(pstapriv, pparm->addr);//Get TDLS Peer STA
+       if( psta->tdls_sta_state&TDLS_LINKED_STATE ){
+               write_cam(padapter, psta->mac_id, ctrl, pparm->addr, pparm->key);
+       }
+       else
+#endif //CONFIG_TDLS
+       write_cam(padapter, cam_id, ctrl, pparm->addr, pparm->key);
+
+       pmlmeinfo->enc_algo = pparm->algorithm;
+
+       return H2C_SUCCESS;
+}
+
+u8 add_ba_hdl(_adapter *padapter, unsigned char *pbuf)
+{
+       struct addBaReq_parm    *pparm = (struct addBaReq_parm *)pbuf;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       struct sta_info *psta = rtw_get_stainfo(&padapter->stapriv, pparm->addr);
+
+       if(!psta)
+               return  H2C_SUCCESS;
+
+
+       if (((pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS) && (pmlmeinfo->HT_enable)) ||
+               ((pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE))
+       {
+               //pmlmeinfo->ADDBA_retry_count = 0;
+               //pmlmeinfo->candidate_tid_bitmap |= (0x1 << pparm->tid);
+               //psta->htpriv.candidate_tid_bitmap |= BIT(pparm->tid);
+               issue_action_BA(padapter, pparm->addr, RTW_WLAN_ACTION_ADDBA_REQ, (u16)pparm->tid);
+               //_set_timer(&pmlmeext->ADDBA_timer, ADDBA_TO);
+               _set_timer(&psta->addba_retry_timer, ADDBA_TO);
+       }
+#ifdef CONFIG_TDLS
+       else if((psta->tdls_sta_state & TDLS_LINKED_STATE)&&
+               (psta->htpriv.ht_option==_TRUE) &&
+               (psta->htpriv.ampdu_enable==_TRUE) )
+       {
+               issue_action_BA(padapter, pparm->addr, RTW_WLAN_ACTION_ADDBA_REQ, (u16)pparm->tid);
+               //_set_timer(&pmlmeext->ADDBA_timer, ADDBA_TO);
+               _set_timer(&psta->addba_retry_timer, ADDBA_TO);
+       }
+#endif //CONFIG
+       else
+       {
+               psta->htpriv.candidate_tid_bitmap &= ~BIT(pparm->tid);
+       }
+
+       return  H2C_SUCCESS;
+}
+
+u8 set_tx_beacon_cmd(_adapter* padapter)
+{
+       struct cmd_obj  *ph2c;
+       struct Tx_Beacon_param  *ptxBeacon_parm;
+       struct cmd_priv *pcmdpriv = &(padapter->cmdpriv);
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       u8      res = _SUCCESS;
+       int len_diff = 0;
+
+_func_enter_;
+
+       if ((ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj))) == NULL)
+       {
+               res= _FAIL;
+               goto exit;
+       }
+
+       if ((ptxBeacon_parm = (struct Tx_Beacon_param *)rtw_zmalloc(sizeof(struct Tx_Beacon_param))) == NULL)
+       {
+               rtw_mfree((unsigned char *)ph2c, sizeof(struct  cmd_obj));
+               res= _FAIL;
+               goto exit;
+       }
+
+       _rtw_memcpy(&(ptxBeacon_parm->network), &(pmlmeinfo->network), sizeof(WLAN_BSSID_EX));
+
+       len_diff = update_hidden_ssid(
+               ptxBeacon_parm->network.IEs+_BEACON_IE_OFFSET_
+               , ptxBeacon_parm->network.IELength-_BEACON_IE_OFFSET_
+               , pmlmeinfo->hidden_ssid_mode
+       );
+       ptxBeacon_parm->network.IELength += len_diff;
+
+       init_h2fwcmd_w_parm_no_rsp(ph2c, ptxBeacon_parm, GEN_CMD_CODE(_TX_Beacon));
+
+       res = rtw_enqueue_cmd(pcmdpriv, ph2c);
+
+
+exit:
+
+_func_exit_;
+
+       return res;
+}
+
+
+u8 mlme_evt_hdl(_adapter *padapter, unsigned char *pbuf)
+{
+       u8 evt_code, evt_seq;
+       u16 evt_sz;
+       uint    *peventbuf;
+       void (*event_callback)(_adapter *dev, u8 *pbuf);
+       struct evt_priv *pevt_priv = &(padapter->evtpriv);
+
+       peventbuf = (uint*)pbuf;
+       evt_sz = (u16)(*peventbuf&0xffff);
+       evt_seq = (u8)((*peventbuf>>24)&0x7f);
+       evt_code = (u8)((*peventbuf>>16)&0xff);
+
+
+       #ifdef CHECK_EVENT_SEQ
+       // checking event sequence...
+       if (evt_seq != (ATOMIC_READ(&pevt_priv->event_seq) & 0x7f) )
+       {
+               RT_TRACE(_module_rtl871x_cmd_c_,_drv_info_,("Evetn Seq Error! %d vs %d\n", (evt_seq & 0x7f), (ATOMIC_READ(&pevt_priv->event_seq) & 0x7f)));
+
+               pevt_priv->event_seq = (evt_seq+1)&0x7f;
+
+               goto _abort_event_;
+       }
+       #endif
+
+       // checking if event code is valid
+       if (evt_code >= MAX_C2HEVT)
+       {
+               RT_TRACE(_module_rtl871x_cmd_c_,_drv_err_,("\nEvent Code(%d) mismatch!\n", evt_code));
+               goto _abort_event_;
+       }
+
+       // checking if event size match the event parm size
+       if ((wlanevents[evt_code].parmsize != 0) &&
+                       (wlanevents[evt_code].parmsize != evt_sz))
+       {
+
+               RT_TRACE(_module_rtl871x_cmd_c_,_drv_err_,("\nEvent(%d) Parm Size mismatch (%d vs %d)!\n",
+                       evt_code, wlanevents[evt_code].parmsize, evt_sz));
+               goto _abort_event_;
+
+       }
+
+       ATOMIC_INC(&pevt_priv->event_seq);
+
+       peventbuf += 2;
+
+       if(peventbuf)
+       {
+               event_callback = wlanevents[evt_code].event_callback;
+               event_callback(padapter, (u8*)peventbuf);
+
+               pevt_priv->evt_done_cnt++;
+       }
+
+
+_abort_event_:
+
+
+       return H2C_SUCCESS;
+
+}
+
+u8 h2c_msg_hdl(_adapter *padapter, unsigned char *pbuf)
+{
+       if(!pbuf)
+               return H2C_PARAMETERS_ERROR;
+
+       return H2C_SUCCESS;
+}
+
+u8 tx_beacon_hdl(_adapter *padapter, unsigned char *pbuf)
+{
+       if(send_beacon(padapter)==_FAIL)
+       {
+               DBG_871X("issue_beacon, fail!\n");
+               return H2C_PARAMETERS_ERROR;
+       }
+#ifdef CONFIG_AP_MODE
+       else //tx bc/mc frames after update TIM
+       {
+               _irqL irqL;
+               struct sta_info *psta_bmc;
+               _list   *xmitframe_plist, *xmitframe_phead;
+               struct xmit_frame *pxmitframe=NULL;
+               struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
+               struct sta_priv  *pstapriv = &padapter->stapriv;
+
+               //for BC/MC Frames
+               psta_bmc = rtw_get_bcmc_stainfo(padapter);
+               if(!psta_bmc)
+                       return H2C_SUCCESS;
+
+               if((pstapriv->tim_bitmap&BIT(0)) && (psta_bmc->sleepq_len>0))
+               {
+#ifndef CONFIG_PCI_HCI
+                       rtw_msleep_os(10);// 10ms, ATIM(HIQ) Windows
+#endif
+                       //_enter_critical_bh(&psta_bmc->sleep_q.lock, &irqL);
+                       _enter_critical_bh(&pxmitpriv->lock, &irqL);
+
+                       xmitframe_phead = get_list_head(&psta_bmc->sleep_q);
+                       xmitframe_plist = get_next(xmitframe_phead);
+
+                       while ((rtw_end_of_queue_search(xmitframe_phead, xmitframe_plist)) == _FALSE)
+                       {
+                               pxmitframe = LIST_CONTAINOR(xmitframe_plist, struct xmit_frame, list);
+
+                               xmitframe_plist = get_next(xmitframe_plist);
+
+                               rtw_list_delete(&pxmitframe->list);
+
+                               psta_bmc->sleepq_len--;
+                               if(psta_bmc->sleepq_len>0)
+                                       pxmitframe->attrib.mdata = 1;
+                               else
+                                       pxmitframe->attrib.mdata = 0;
+
+                               pxmitframe->attrib.triggered=1;
+
+                               pxmitframe->attrib.qsel = 0x11;//HIQ
+
+#if 0
+                               _exit_critical_bh(&psta_bmc->sleep_q.lock, &irqL);
+                               if(rtw_hal_xmit(padapter, pxmitframe) == _TRUE)
+                               {
+                                       rtw_os_xmit_complete(padapter, pxmitframe);
+                               }
+                               _enter_critical_bh(&psta_bmc->sleep_q.lock, &irqL);
+
+#endif
+                               rtw_hal_xmitframe_enqueue(padapter, pxmitframe);
+
+                               //pstapriv->tim_bitmap &= ~BIT(0);
+
+                       }
+
+                       //_exit_critical_bh(&psta_bmc->sleep_q.lock, &irqL);
+                      _exit_critical_bh(&pxmitpriv->lock, &irqL);
+
+               }
+
+       }
+#endif
+
+       return H2C_SUCCESS;
+
+}
+
+void change_band_update_ie(_adapter *padapter, WLAN_BSSID_EX *pnetwork)
+{
+       u8      network_type,rate_len, total_rate_len,remainder_rate_len;
+       struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
+       u8      erpinfo=0x4;
+
+       //DBG_871X("%s\n", __FUNCTION__);
+
+       if(pmlmeext->cur_channel >= 36)
+       {
+               network_type = WIRELESS_11A;
+               total_rate_len = IEEE80211_NUM_OFDM_RATESLEN;
+               DBG_871X("%s(): change to 5G Band\n",__FUNCTION__);
+               rtw_remove_bcn_ie(padapter, pnetwork, _ERPINFO_IE_);
+       }
+       else
+       {
+               network_type = WIRELESS_11BG;
+               total_rate_len = IEEE80211_CCK_RATE_LEN+IEEE80211_NUM_OFDM_RATESLEN;
+               DBG_871X("%s(): change to 2.4G Band\n",__FUNCTION__);
+               rtw_add_bcn_ie(padapter, pnetwork, _ERPINFO_IE_, &erpinfo, 1);
+       }
+
+       rtw_set_supported_rate(pnetwork->SupportedRates, network_type);
+
+       UpdateBrateTbl(padapter, pnetwork->SupportedRates);
+       rtw_hal_set_hwreg(padapter, HW_VAR_BASIC_RATE, pnetwork->SupportedRates);
+
+       if(total_rate_len > 8)
+       {
+               rate_len = 8;
+               remainder_rate_len = total_rate_len - 8;
+       }
+       else
+       {
+               rate_len = total_rate_len;
+               remainder_rate_len = 0;
+       }
+
+       rtw_add_bcn_ie(padapter, pnetwork, _SUPPORTEDRATES_IE_, pnetwork->SupportedRates, rate_len);
+
+       if(remainder_rate_len)
+       {
+               rtw_add_bcn_ie(padapter, pnetwork, _EXT_SUPPORTEDRATES_IE_, (pnetwork->SupportedRates+8), remainder_rate_len);
+       }
+       else
+       {
+               rtw_remove_bcn_ie(padapter, pnetwork, _EXT_SUPPORTEDRATES_IE_);
+       }
+}
+
+
+#ifdef CONFIG_DUALMAC_CONCURRENT
+void dc_SelectChannel(_adapter *padapter, unsigned char channel)
+{
+       PADAPTER ptarget_adapter;
+
+       if( (padapter->pbuddy_adapter != NULL) &&
+               (padapter->DualMacConcurrent == _TRUE) &&
+               (padapter->adapter_type == SECONDARY_ADAPTER))
+       {
+               // only mac0 could control BB&RF
+               ptarget_adapter = padapter->pbuddy_adapter;
+       }
+       else
+       {
+               ptarget_adapter = padapter;
+       }
+
+       _enter_critical_mutex(&(adapter_to_dvobj(ptarget_adapter)->setch_mutex), NULL);
+
+       rtw_hal_set_chan(ptarget_adapter, channel);
+
+       _exit_critical_mutex(&(adapter_to_dvobj(ptarget_adapter)->setch_mutex), NULL);
+}
+
+void dc_SetBWMode(_adapter *padapter, unsigned short bwmode, unsigned char channel_offset)
+{
+       PADAPTER ptarget_adapter;
+
+       if( (padapter->pbuddy_adapter != NULL) &&
+               (padapter->DualMacConcurrent == _TRUE) &&
+               (padapter->adapter_type == SECONDARY_ADAPTER))
+       {
+               // only mac0 could control BB&RF
+               ptarget_adapter = padapter->pbuddy_adapter;
+       }
+       else
+       {
+               ptarget_adapter = padapter;
+       }
+
+       _enter_critical_mutex(&(adapter_to_dvobj(ptarget_adapter)->setbw_mutex), NULL);
+
+       rtw_hal_set_bwmode(ptarget_adapter, (HT_CHANNEL_WIDTH)bwmode, channel_offset);
+
+       _exit_critical_mutex(&(adapter_to_dvobj(ptarget_adapter)->setbw_mutex), NULL);
+}
+
+void dc_set_channel_bwmode_disconnect(_adapter *padapter)
+{
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       PADAPTER pbuddy_adapter = padapter->pbuddy_adapter;
+       struct mlme_priv *pbuddy_mlmepriv = NULL;
+
+       if(pbuddy_adapter != NULL &&
+               padapter->DualMacConcurrent == _TRUE)
+       {
+               pbuddy_mlmepriv = &(pbuddy_adapter->mlmepriv);
+               if((check_fwstate(pbuddy_mlmepriv, _FW_LINKED)) != _TRUE)
+               {
+                       //switch to the 20M Hz mode after disconnect
+                       pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_20;
+                       pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+
+                       set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
+               }
+       }
+       else
+       {
+               //switch to the 20M Hz mode after disconnect
+               pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_20;
+               pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+
+               set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
+       }
+}
+
+u8 dc_handle_join_request(_adapter *padapter)
+{
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       WLAN_BSSID_EX           *pnetwork = (WLAN_BSSID_EX*)(&(pmlmeinfo->network));
+       PADAPTER pbuddy_adapter = padapter->pbuddy_adapter;
+       struct mlme_ext_priv *pbuddy_mlmeext = NULL;
+       struct mlme_priv        *pbuddy_mlmepriv = NULL;
+       u8      ret = _SUCCESS;
+
+       if(pbuddy_adapter != NULL &&
+               padapter->DualMacConcurrent == _TRUE)
+       {
+               pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
+               pbuddy_mlmepriv = &(pbuddy_adapter->mlmepriv);
+
+               if(pmlmeext->cur_channel != pbuddy_mlmeext->cur_channel ||
+                       pmlmeext->cur_bwmode != pbuddy_mlmeext->cur_bwmode ||
+                       pmlmeext->cur_ch_offset != pbuddy_mlmeext->cur_ch_offset)
+               {
+                       if((check_fwstate(pbuddy_mlmepriv, WIFI_AP_STATE)) == _TRUE)
+                       {
+                               //issue deauth to all stas if if2 is at ap mode
+                               rtw_sta_flush(pbuddy_adapter);
+
+                               //rtw_hal_set_hwreg(padapter, HW_VAR_CHECK_TXBUF, 0);
+                               rtw_hal_set_hwreg(pbuddy_adapter, HW_VAR_CHECK_TXBUF, 0);
+                       }
+                       else if(check_fwstate(pbuddy_mlmepriv, _FW_LINKED) == _TRUE)
+                       {
+                               if(pmlmeext->cur_channel == pbuddy_mlmeext->cur_channel)
+                               {
+                                       // HT_CHANNEL_WIDTH_40 or HT_CHANNEL_WIDTH_20 but channel offset is different
+                                       if((pmlmeext->cur_bwmode == pbuddy_mlmeext->cur_bwmode) &&
+                                               (pmlmeext->cur_ch_offset != pbuddy_mlmeext->cur_ch_offset) )
+                                       {
+                                               report_join_res(padapter, -4);
+                                               ret = _FAIL;
+                                       }
+                               }
+                               else
+                               {
+                                       report_join_res(padapter, -4);
+                                       ret = _FAIL;
+                               }
+                       }
+               }
+               else     if (is_client_associated_to_ap(pbuddy_adapter) == _TRUE)
+               {
+                       issue_nulldata(pbuddy_adapter, NULL, 1, 0, 0);
+               }
+       }
+
+       return ret;
+}
+
+void dc_handle_join_done(_adapter *padapter, u8 join_res)
+{
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       PADAPTER pbuddy_adapter = padapter->pbuddy_adapter;
+       struct mlme_priv *pbuddy_mlmepriv = NULL;
+       struct mlme_ext_priv *pbuddy_mlmeext = NULL;
+       struct mlme_ext_info *pbuddy_mlmeinfo = NULL;
+       WLAN_BSSID_EX *pbuddy_network_mlmeext = NULL;
+       u8      change_band = _FALSE;
+
+
+       if(pbuddy_adapter != NULL &&
+               padapter->DualMacConcurrent == _TRUE)
+       {
+               pbuddy_mlmepriv = &(pbuddy_adapter->mlmepriv);
+               pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
+               pbuddy_mlmeinfo = &(pbuddy_mlmeext->mlmext_info);
+               pbuddy_network_mlmeext = &(pbuddy_mlmeinfo->network);
+
+               if(((pbuddy_mlmeinfo->state&0x03) == WIFI_FW_AP_STATE) &&
+                               check_fwstate(pbuddy_mlmepriv, _FW_LINKED))
+               {
+                       //restart and update beacon
+                       DBG_871X("after join, current adapter, CH=%d, BW=%d, offset=%d\n", pmlmeext->cur_channel, pmlmeext->cur_bwmode, pmlmeext->cur_ch_offset);
+
+                       if(join_res >= 0)
+                       {
+                               u8 *p;
+                               int     ie_len;
+                               struct HT_info_element *pht_info=NULL;
+
+                               if((pbuddy_mlmeext->cur_channel <= 14 && pmlmeext->cur_channel >= 36) ||
+                                       (pbuddy_mlmeext->cur_channel >= 36 && pmlmeext->cur_channel <= 14))
+                               {
+                                       change_band = _TRUE;
+                               }
+
+                               //sync channel/bwmode/ch_offset with another adapter
+                               pbuddy_mlmeext->cur_channel = pmlmeext->cur_channel;
+
+                               if(pbuddy_mlmeext->cur_bwmode == HT_CHANNEL_WIDTH_40)
+                               {
+                                       p = rtw_get_ie((pbuddy_network_mlmeext->IEs + sizeof(NDIS_802_11_FIXED_IEs)), _HT_ADD_INFO_IE_, &ie_len, (pbuddy_network_mlmeext->IELength - sizeof(NDIS_802_11_FIXED_IEs)));
+                                       if( p && ie_len)
+                                       {
+                                               pht_info = (struct HT_info_element *)(p+2);
+                                               pht_info->infos[0] &= ~(BIT(0)|BIT(1)); //no secondary channel is present
+                                       }
+
+                                       if(pmlmeext->cur_bwmode == HT_CHANNEL_WIDTH_40)
+                                       {
+                                               pbuddy_mlmeext->cur_ch_offset = pmlmeext->cur_ch_offset;
+
+                                               //to update cur_ch_offset value in beacon
+                                               if( pht_info )
+                                               {
+                                                       switch(pmlmeext->cur_ch_offset)
+                                                       {
+                                                               case HAL_PRIME_CHNL_OFFSET_LOWER:
+                                                                       pht_info->infos[0] |= 0x1;
+                                                                       break;
+                                                               case HAL_PRIME_CHNL_OFFSET_UPPER:
+                                                                       pht_info->infos[0] |= 0x3;
+                                                                       break;
+                                                               case HAL_PRIME_CHNL_OFFSET_DONT_CARE:
+                                                               default:
+                                                                       break;
+                                                       }
+                                               }
+                                       }
+                                       else if(pmlmeext->cur_bwmode == HT_CHANNEL_WIDTH_20)
+                                       {
+                                               pbuddy_mlmeext->cur_bwmode = HT_CHANNEL_WIDTH_20;
+                                               pbuddy_mlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+
+                                               if(pmlmeext->cur_channel>0 && pmlmeext->cur_channel<5)
+                                               {
+                                                       if(pht_info)
+                                                               pht_info->infos[0] |= 0x1;
+
+                                                       pbuddy_mlmeext->cur_bwmode = HT_CHANNEL_WIDTH_40;
+                                                       pbuddy_mlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
+                                               }
+
+                                               if(pmlmeext->cur_channel>7 && pmlmeext->cur_channel<(14+1))
+                                               {
+                                                       if(pht_info)
+                                                               pht_info->infos[0] |= 0x3;
+
+                                                       pbuddy_mlmeext->cur_bwmode = HT_CHANNEL_WIDTH_40;
+                                                       pbuddy_mlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
+                                               }
+
+                                               set_channel_bwmode(padapter, pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_ch_offset, pbuddy_mlmeext->cur_bwmode);
+                                       }
+                               }
+
+                               // to update channel value in beacon
+                               pbuddy_network_mlmeext->Configuration.DSConfig = pmlmeext->cur_channel;
+                               p = rtw_get_ie((pbuddy_network_mlmeext->IEs + sizeof(NDIS_802_11_FIXED_IEs)), _DSSET_IE_, &ie_len, (pbuddy_network_mlmeext->IELength - sizeof(NDIS_802_11_FIXED_IEs)));
+                               if(p && ie_len>0)
+                                       *(p + 2) = pmlmeext->cur_channel;
+
+                               p = rtw_get_ie((pbuddy_network_mlmeext->IEs + sizeof(NDIS_802_11_FIXED_IEs)), _HT_ADD_INFO_IE_, &ie_len, (pbuddy_network_mlmeext->IELength - sizeof(NDIS_802_11_FIXED_IEs)));
+                               if( p && ie_len)
+                               {
+                                       pht_info = (struct HT_info_element *)(p+2);
+                                       pht_info->primary_channel = pmlmeext->cur_channel;
+                               }
+
+                               // update mlmepriv's cur_network
+                               _rtw_memcpy(&pbuddy_mlmepriv->cur_network.network, pbuddy_network_mlmeext, pbuddy_network_mlmeext->Length);
+                       }
+                       else
+                       {
+                               // switch back to original channel/bwmode/ch_offset;
+                               set_channel_bwmode(padapter, pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_ch_offset, pbuddy_mlmeext->cur_bwmode);
+                       }
+
+                       DBG_871X("after join, another adapter, CH=%d, BW=%d, offset=%d\n", pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_bwmode, pbuddy_mlmeext->cur_ch_offset);
+
+                       if(change_band == _TRUE)
+                               change_band_update_ie(pbuddy_adapter, pbuddy_network_mlmeext);
+
+                       DBG_871X("update pbuddy_adapter's beacon\n");
+
+                       update_beacon(pbuddy_adapter, 0, NULL, _TRUE);
+               }
+               else     if (is_client_associated_to_ap(pbuddy_adapter) == _TRUE)
+               {
+                       if((pbuddy_mlmeext->cur_bwmode == HT_CHANNEL_WIDTH_40) &&
+                               (pmlmeext->cur_bwmode == HT_CHANNEL_WIDTH_20))
+                       {
+                               set_channel_bwmode(padapter, pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_ch_offset, pbuddy_mlmeext->cur_bwmode);
+                       }
+
+                       issue_nulldata(pbuddy_adapter, NULL, 0, 0, 0);
+               }
+       }
+}
+
+sint   dc_check_fwstate(_adapter *padapter, sint fw_state)
+{
+       PADAPTER pbuddy_adapter = padapter->pbuddy_adapter;
+       struct mlme_priv *pbuddy_mlmepriv = NULL;
+
+       if(padapter->pbuddy_adapter != NULL &&
+               padapter->DualMacConcurrent == _TRUE)
+
+       {
+               pbuddy_mlmepriv = &(pbuddy_adapter->mlmepriv);
+
+               return check_fwstate(pbuddy_mlmepriv, fw_state);
+       }
+
+       return _FALSE;
+}
+
+u8 dc_handle_site_survey(_adapter *padapter)
+{
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       PADAPTER pbuddy_adapter = padapter->pbuddy_adapter;
+
+       // only mac0 can do scan request, help issue nulldata(1) for mac1
+       if(pbuddy_adapter != NULL &&
+               padapter->DualMacConcurrent == _TRUE)
+       {
+               if (is_client_associated_to_ap(pbuddy_adapter) == _TRUE)
+               {
+                       pmlmeext->sitesurvey_res.state = SCAN_TXNULL;
+
+                       issue_nulldata(pbuddy_adapter, NULL, 1, 2, 0);
+
+                       return _TRUE;
+               }
+       }
+
+       return _FALSE;
+}
+
+void   dc_report_survey_event(_adapter *padapter, union recv_frame *precv_frame)
+{
+       if(padapter->pbuddy_adapter != NULL &&
+               padapter->DualMacConcurrent == _TRUE)
+       {
+               report_survey_event(padapter->pbuddy_adapter, precv_frame);
+       }
+}
+
+void dc_set_channel_bwmode_survey_done(_adapter *padapter)
+{
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       PADAPTER pbuddy_adapter = padapter->pbuddy_adapter;
+       struct mlme_priv *pbuddy_mlmepriv = NULL;
+       struct mlme_ext_priv *pbuddy_mlmeext = NULL;
+       struct mlme_ext_info *pbuddy_mlmeinfo = NULL;
+       u8 cur_channel;
+       u8 cur_bwmode;
+       u8 cur_ch_offset;
+
+       if(pbuddy_adapter != NULL &&
+               padapter->DualMacConcurrent == _TRUE)
+       {
+               pbuddy_mlmepriv = &(pbuddy_adapter->mlmepriv);
+               pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
+               pbuddy_mlmeinfo = &(pbuddy_mlmeext->mlmext_info);
+
+               if(check_fwstate(pbuddy_mlmepriv, _FW_LINKED))
+               {
+                       if(check_fwstate(pmlmepriv, _FW_LINKED) &&
+                               (pmlmeext->cur_bwmode == HT_CHANNEL_WIDTH_40))
+                       {
+                               cur_channel = pmlmeext->cur_channel;
+                               cur_bwmode = pmlmeext->cur_bwmode;
+                               cur_ch_offset = pmlmeext->cur_ch_offset;
+                       }
+                       else
+                       {
+                               cur_channel = pbuddy_mlmeext->cur_channel;
+                               cur_bwmode = pbuddy_mlmeext->cur_bwmode;
+                               cur_ch_offset = pbuddy_mlmeext->cur_ch_offset;
+                       }
+               }
+               else
+               {
+                       cur_channel = pmlmeext->cur_channel;
+                       cur_bwmode = pmlmeext->cur_bwmode;
+                       cur_ch_offset = pmlmeext->cur_ch_offset;
+               }
+
+               set_channel_bwmode(padapter, cur_channel, cur_ch_offset, cur_bwmode);
+
+               if (is_client_associated_to_ap(pbuddy_adapter) == _TRUE)
+               {
+                       //issue null data
+                       issue_nulldata(pbuddy_adapter, NULL, 0, 0, 0);
+               }
+
+               if(((pbuddy_mlmeinfo->state&0x03) == WIFI_FW_AP_STATE) &&
+                       check_fwstate(pbuddy_mlmepriv, _FW_LINKED))
+               {
+
+                       DBG_871X("survey done, current CH=%d, BW=%d, offset=%d\n", cur_channel, cur_bwmode, cur_ch_offset);
+
+                       DBG_871X("restart pbuddy_adapter's beacon\n");
+
+                       update_beacon(pbuddy_adapter, 0, NULL, _TRUE);
+               }
+       }
+       else
+       {
+               set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
+       }
+}
+
+void dc_set_ap_channel_bandwidth(_adapter *padapter, u8 channel, u8 channel_offset, u8 bwmode)
+{
+       u8      *p;
+       u8      val8, cur_channel, cur_bwmode, cur_ch_offset, change_band;
+       int     ie_len;
+       struct registry_priv    *pregpriv = &padapter->registrypriv;
+       struct mlme_priv                *pmlmepriv = &(padapter->mlmepriv);
+       WLAN_BSSID_EX           *pnetwork = (WLAN_BSSID_EX *)&pmlmepriv->cur_network.network;
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       struct HT_info_element  *pht_info=NULL;
+       _adapter        *pbuddy_adapter = padapter->pbuddy_adapter;
+       struct mlme_priv        *pbuddy_mlmepriv = NULL;
+       struct mlme_ext_priv    *pbuddy_mlmeext = NULL;
+
+       DBG_871X("dualmac_concurrent_ap_set_channel_bwmode ==>\n");
+
+       cur_channel = channel;
+       cur_bwmode = bwmode;
+       cur_ch_offset = channel_offset;
+       change_band = _FALSE;
+
+       p = rtw_get_ie((pnetwork->IEs + sizeof(NDIS_802_11_FIXED_IEs)), _HT_ADD_INFO_IE_, &ie_len, (pnetwork->IELength - sizeof(NDIS_802_11_FIXED_IEs)));
+       if( p && ie_len)
+       {
+               pht_info = (struct HT_info_element *)(p+2);
+       }
+
+       if(pbuddy_adapter != NULL &&
+               padapter->DualMacConcurrent == _TRUE)
+       {
+               pbuddy_mlmepriv = &(pbuddy_adapter->mlmepriv);
+               pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
+
+               if(!check_fwstate(pbuddy_mlmepriv, _FW_LINKED|_FW_UNDER_LINKING|_FW_UNDER_SURVEY))
+               {
+                       set_channel_bwmode(padapter, cur_channel, cur_ch_offset, cur_bwmode);
+               }
+               else if(check_fwstate(pbuddy_mlmepriv, _FW_LINKED)==_TRUE)
+               {
+                       //To sync cur_channel/cur_bwmode/cur_ch_offset with another adapter
+                       DBG_871X("Another iface is at linked state, sync cur_channel/cur_bwmode/cur_ch_offset\n");
+                       DBG_871X("Another adapter, CH=%d, BW=%d, offset=%d\n", pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_bwmode, pbuddy_mlmeext->cur_ch_offset);
+                       DBG_871X("Current adapter, CH=%d, BW=%d, offset=%d\n", cur_channel, cur_bwmode, cur_ch_offset);
+
+                       cur_channel = pbuddy_mlmeext->cur_channel;
+                       if(cur_bwmode == HT_CHANNEL_WIDTH_40)
+                       {
+                               if(pht_info)
+                                       pht_info->infos[0] &= ~(BIT(0)|BIT(1));
+
+                               if(pbuddy_mlmeext->cur_bwmode == HT_CHANNEL_WIDTH_40)
+                               {
+                                       cur_ch_offset = pbuddy_mlmeext->cur_ch_offset;
+
+                                       //to update cur_ch_offset value in beacon
+                                       if(pht_info)
+                                       {
+                                               switch(cur_ch_offset)
+                                               {
+                                                       case HAL_PRIME_CHNL_OFFSET_LOWER:
+                                                               pht_info->infos[0] |= 0x1;
+                                                               break;
+                                                       case HAL_PRIME_CHNL_OFFSET_UPPER:
+                                                               pht_info->infos[0] |= 0x3;
+                                                               break;
+                                                       case HAL_PRIME_CHNL_OFFSET_DONT_CARE:
+                                                       default:
+                                                               break;
+                                               }
+                                       }
+                               }
+                               else if(pbuddy_mlmeext->cur_bwmode == HT_CHANNEL_WIDTH_20)
+                               {
+                                       cur_bwmode = HT_CHANNEL_WIDTH_20;
+                                       cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+
+                                       if(cur_channel>0 && cur_channel<5)
+                                       {
+                                               if(pht_info)
+                                                       pht_info->infos[0] |= 0x1;
+
+                                               cur_bwmode = HT_CHANNEL_WIDTH_40;
+                                               cur_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
+                                       }
+
+                                       if(cur_channel>7 && cur_channel<(14+1))
+                                       {
+                                               if(pht_info)
+                                                       pht_info->infos[0] |= 0x3;
+
+                                               cur_bwmode = HT_CHANNEL_WIDTH_40;
+                                               cur_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
+                                       }
+
+                                       set_channel_bwmode(padapter, cur_channel, cur_ch_offset, cur_bwmode);
+                               }
+                       }
+
+                       // to update channel value in beacon
+                       pnetwork->Configuration.DSConfig = cur_channel;
+                       p = rtw_get_ie((pnetwork->IEs + sizeof(NDIS_802_11_FIXED_IEs)), _DSSET_IE_, &ie_len, (pnetwork->IELength - sizeof(NDIS_802_11_FIXED_IEs)));
+                       if(p && ie_len>0)
+                               *(p + 2) = cur_channel;
+
+                       if(pht_info)
+                               pht_info->primary_channel = cur_channel;
+               }
+       }
+       else
+       {
+               set_channel_bwmode(padapter, cur_channel, cur_ch_offset, cur_bwmode);
+       }
+
+       DBG_871X("CH=%d, BW=%d, offset=%d\n", cur_channel, cur_bwmode, cur_ch_offset);
+
+       if((channel <= 14 && cur_channel >= 36) ||
+               (channel >= 36 && cur_channel <= 14))
+       {
+               change_band = _TRUE;
+       }
+
+       pmlmeext->cur_channel = cur_channel;
+       pmlmeext->cur_bwmode = cur_bwmode;
+       pmlmeext->cur_ch_offset = cur_ch_offset;
+
+       if(change_band == _TRUE)
+               change_band_update_ie(padapter, pnetwork);
+
+       DBG_871X("dualmac_concurrent_ap_set_channel_bwmode <==\n");
+}
+
+void dc_resume_xmit(_adapter *padapter)
+{
+       PADAPTER pbuddy_adapter = padapter->pbuddy_adapter;
+
+       if(pbuddy_adapter != NULL &&
+               padapter->DualMacConcurrent == _TRUE)
+       {
+               DBG_871X("dc_resume_xmit,  resume pbuddy_adapter Tx\n");
+               rtw_os_xmit_schedule(pbuddy_adapter);
+       }
+}
+
+u8     dc_check_xmit(_adapter *padapter)
+{
+       PADAPTER pbuddy_adapter = padapter->pbuddy_adapter;
+       struct mlme_priv *pbuddy_mlmepriv = NULL;
+
+       if(pbuddy_adapter != NULL &&
+               padapter->DualMacConcurrent == _TRUE)
+       {
+               pbuddy_mlmepriv = &(pbuddy_adapter->mlmepriv);
+               if (check_fwstate(pbuddy_mlmepriv, _FW_UNDER_SURVEY|_FW_UNDER_LINKING) == _TRUE)
+               {
+                       DBG_871X("dc_check_xmit  pbuddy_adapter is under survey or under linking\n");
+                       return _FALSE;
+               }
+       }
+
+       return _TRUE;
+}
+#endif
+
+#ifdef CONFIG_CONCURRENT_MODE
+sint check_buddy_mlmeinfo_state(_adapter *padapter, u32 state)
+{
+       PADAPTER pbuddy_adapter;
+       struct mlme_ext_priv *pbuddy_mlmeext;
+       struct mlme_ext_info *pbuddy_mlmeinfo;
+
+       if(padapter == NULL)
+               return _FALSE;
+
+       pbuddy_adapter = padapter->pbuddy_adapter;
+
+       if(pbuddy_adapter == NULL)
+               return _FALSE;
+
+
+       pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
+       pbuddy_mlmeinfo = &(pbuddy_mlmeext->mlmext_info);
+
+       if((pbuddy_mlmeinfo->state&0x03) == state)
+               return _TRUE;
+
+       return _FALSE;
+
+}
+
+void concurrent_chk_joinbss_done(_adapter *padapter, int join_res)
+{
+       struct mlme_ext_priv    *pmlmeext;
+       struct mlme_ext_info    *pmlmeinfo;
+       PADAPTER pbuddy_adapter;
+       struct mlme_priv *pbuddy_mlmepriv;
+       struct mlme_ext_priv *pbuddy_mlmeext;
+       struct mlme_ext_info *pbuddy_mlmeinfo;
+       WLAN_BSSID_EX *pbuddy_network_mlmeext;
+
+       pmlmeext = &padapter->mlmeextpriv;
+       pmlmeinfo = &(pmlmeext->mlmext_info);
+
+
+       if(!rtw_buddy_adapter_up(padapter))
+       {
+               set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
+               return;
+       }
+
+       pbuddy_adapter = padapter->pbuddy_adapter;
+       pbuddy_mlmepriv = &(pbuddy_adapter->mlmepriv);
+       pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
+       pbuddy_mlmeinfo = &(pbuddy_mlmeext->mlmext_info);
+       pbuddy_network_mlmeext = &(pbuddy_mlmeinfo->network);
+
+       if(((pbuddy_mlmeinfo->state&0x03) == WIFI_FW_AP_STATE) &&
+                       check_fwstate(pbuddy_mlmepriv, _FW_LINKED))
+       {
+               //restart and update beacon
+
+               DBG_871X("after join,primary adapter, CH=%d, BW=%d, offset=%d\n"
+                       , pmlmeext->cur_channel, pmlmeext->cur_bwmode, pmlmeext->cur_ch_offset);
+
+
+               if(join_res >= 0)
+               {
+                       u8 *p;
+                       int     ie_len;
+                       u8      change_band = _FALSE;
+                       struct HT_info_element *pht_info=NULL;
+
+                       if((pmlmeext->cur_channel <= 14 && pbuddy_mlmeext->cur_channel >= 36) ||
+                               (pmlmeext->cur_channel >= 36 && pbuddy_mlmeext->cur_channel <= 14))
+                               change_band = _TRUE;
+
+                       //sync channel/bwmode/ch_offset with primary adapter
+                       pbuddy_mlmeext->cur_channel = pmlmeext->cur_channel;
+                       if(pbuddy_mlmeext->cur_bwmode == HT_CHANNEL_WIDTH_40)
+                       {
+                               p = rtw_get_ie((pbuddy_network_mlmeext->IEs + sizeof(NDIS_802_11_FIXED_IEs)), _HT_ADD_INFO_IE_, &ie_len, (pbuddy_network_mlmeext->IELength - sizeof(NDIS_802_11_FIXED_IEs)));
+                               if( p && ie_len)
+                               {
+                                       pht_info = (struct HT_info_element *)(p+2);
+                                       pht_info->infos[0] &= ~(BIT(0)|BIT(1)); //no secondary channel is present
+                               }
+
+                               if(pmlmeext->cur_bwmode == HT_CHANNEL_WIDTH_40)
+                               {
+                                       pbuddy_mlmeext->cur_ch_offset = pmlmeext->cur_ch_offset;
+
+                                       //to update cur_ch_offset value in beacon
+                                       if( pht_info )
+                                       {
+                                               switch(pmlmeext->cur_ch_offset)
+                                               {
+                                                       case HAL_PRIME_CHNL_OFFSET_LOWER:
+                                                               pht_info->infos[0] |= 0x1;
+                                                               break;
+                                                       case HAL_PRIME_CHNL_OFFSET_UPPER:
+                                                               pht_info->infos[0] |= 0x3;
+                                                               break;
+                                                       case HAL_PRIME_CHNL_OFFSET_DONT_CARE:
+                                                       default:
+                                                               break;
+                                               }
+
+                                       }
+
+                               }
+                               else if(pmlmeext->cur_bwmode == HT_CHANNEL_WIDTH_20)
+                               {
+                                       if(pmlmeext->cur_channel>=1 && pmlmeext->cur_channel<=4)
+                                       {
+                                               if(pht_info)
+                                                       pht_info->infos[0] |= HT_INFO_HT_PARAM_SECONDARY_CHNL_ABOVE;
+
+                                               pbuddy_mlmeext->cur_bwmode = HT_CHANNEL_WIDTH_40;
+                                               pbuddy_mlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
+                                       }
+                                       else if(pmlmeext->cur_channel>=5 && pmlmeext->cur_channel<=14)
+                                       {
+                                               if(pht_info)
+                                                       pht_info->infos[0] |= HT_INFO_HT_PARAM_SECONDARY_CHNL_BELOW;
+
+                                               pbuddy_mlmeext->cur_bwmode = HT_CHANNEL_WIDTH_40;
+                                               pbuddy_mlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
+                                       }
+                                       else
+                                       {
+                                               switch(pmlmeext->cur_channel)
+                                               {
+                                                       case 36:
+                                                       case 44:
+                                                       case 52:
+                                                       case 60:
+                                                       case 100:
+                                                       case 108:
+                                                       case 116:
+                                                       case 124:
+                                                       case 132:
+                                                       case 149:
+                                                       case 157:
+                                                       {
+                                                               if(pht_info)
+                                                                       pht_info->infos[0] |= HT_INFO_HT_PARAM_SECONDARY_CHNL_ABOVE;
+                                                               pbuddy_mlmeext->cur_bwmode = HT_CHANNEL_WIDTH_40;
+                                                               pbuddy_mlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
+                                                               break;
+                                                       }
+                                                       case 40:
+                                                       case 48:
+                                                       case 56:
+                                                       case 64:
+                                                       case 104:
+                                                       case 112:
+                                                       case 120:
+                                                       case 128:
+                                                       case 136:
+                                                       case 153:
+                                                       case 161:
+                                                       {
+                                                               if(pht_info)
+                                                                       pht_info->infos[0] |= HT_INFO_HT_PARAM_SECONDARY_CHNL_BELOW;
+
+                                                               pbuddy_mlmeext->cur_bwmode = HT_CHANNEL_WIDTH_40;
+                                                               pbuddy_mlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
+                                                               break;
+                                                       }
+                                                       default:
+                                                               if(pht_info)
+                                                                       pht_info->infos[0] &= ~HT_INFO_HT_PARAM_SECONDARY_CHNL_BELOW;
+                                                               pbuddy_mlmeext->cur_bwmode = HT_CHANNEL_WIDTH_20;
+                                                               pbuddy_mlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+                                                               break;
+
+                                               }
+
+                                       }
+
+                               }
+
+                               set_channel_bwmode(padapter, pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_ch_offset, pbuddy_mlmeext->cur_bwmode);
+
+                       }
+                       else
+                       {
+                               set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
+                       }
+
+
+                       // to update channel value in beacon
+                       pbuddy_network_mlmeext->Configuration.DSConfig = pmlmeext->cur_channel;
+                       p = rtw_get_ie((pbuddy_network_mlmeext->IEs + sizeof(NDIS_802_11_FIXED_IEs)), _DSSET_IE_, &ie_len, (pbuddy_network_mlmeext->IELength - sizeof(NDIS_802_11_FIXED_IEs)));
+                       if(p && ie_len>0)
+                               *(p + 2) = pmlmeext->cur_channel;
+
+                       p = rtw_get_ie((pbuddy_network_mlmeext->IEs + sizeof(NDIS_802_11_FIXED_IEs)), _HT_ADD_INFO_IE_, &ie_len, (pbuddy_network_mlmeext->IELength - sizeof(NDIS_802_11_FIXED_IEs)));
+                       if( p && ie_len)
+                       {
+                               pht_info = (struct HT_info_element *)(p+2);
+                               pht_info->primary_channel = pmlmeext->cur_channel;
+                       }
+
+                       //buddy interface band is different from current interface, update ERP, support rate, ext support rate IE
+                       if(change_band == _TRUE)
+                               change_band_update_ie(pbuddy_adapter, pbuddy_network_mlmeext);
+               }
+               else
+               {
+                       // switch back to original channel/bwmode/ch_offset;
+                       set_channel_bwmode(padapter, pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_ch_offset, pbuddy_mlmeext->cur_bwmode);
+               }
+
+               DBG_871X("after join, second adapter, CH=%d, BW=%d, offset=%d\n", pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_bwmode, pbuddy_mlmeext->cur_ch_offset);
+
+               DBG_871X("update pbuddy_adapter's beacon\n");
+
+               update_beacon(pbuddy_adapter, 0, NULL, _TRUE);
+
+       }
+       else if(((pbuddy_mlmeinfo->state&0x03) == WIFI_FW_STATION_STATE) &&
+                       check_fwstate(pbuddy_mlmepriv, _FW_LINKED))
+       {
+               if(join_res >= 0)
+               {
+                       pbuddy_mlmeext->cur_channel = pmlmeext->cur_channel;
+                       if(pbuddy_mlmeext->cur_bwmode == HT_CHANNEL_WIDTH_40)
+                               set_channel_bwmode(padapter, pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_ch_offset, pbuddy_mlmeext->cur_bwmode);
+                       else if(pmlmeext->cur_bwmode == HT_CHANNEL_WIDTH_40)
+                               set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
+                       else
+                               set_channel_bwmode(padapter, pmlmeext->cur_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
+               }
+               else
+               {
+                       // switch back to original channel/bwmode/ch_offset;
+                       set_channel_bwmode(padapter, pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_ch_offset, pbuddy_mlmeext->cur_bwmode);
+               }
+       }
+       else
+       {
+               set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
+       }
+
+}
+#endif //CONFIG_CONCURRENT_MODE
+
+int rtw_chk_start_clnt_join(_adapter *padapter)
+{
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       unsigned char   cur_ch = pmlmeext->cur_channel;
+       unsigned char   cur_bw = pmlmeext->cur_bwmode;
+       unsigned char   cur_ch_offset = pmlmeext->cur_ch_offset;
+       bool chbw_allow = _TRUE;
+       bool connect_allow = _TRUE;
+
+#ifdef CONFIG_CONCURRENT_MODE
+       PADAPTER pbuddy_adapter;
+       struct mlme_ext_priv *pbuddy_mlmeext;
+       struct mlme_ext_info    *pbuddy_pmlmeinfo;
+       struct mlme_priv *pbuddy_mlmepriv;
+
+       if (!rtw_buddy_adapter_up(padapter)) {
+               goto start_join_set_ch_bw;
+       }
+
+       pbuddy_adapter = padapter->pbuddy_adapter;
+       pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
+       pbuddy_pmlmeinfo = &(pbuddy_mlmeext->mlmext_info);
+       pbuddy_mlmepriv = &(pbuddy_adapter->mlmepriv);
+
+       if((pbuddy_pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE)//for AP MODE
+       {
+               DBG_871X("start_clnt_join: "ADPT_FMT"(ch=%d, bw=%d, ch_offset=%d)"
+                       ", "ADPT_FMT" AP mode(ch=%d, bw=%d, ch_offset=%d)\n",
+                       ADPT_ARG(padapter), pmlmeext->cur_channel, pmlmeext->cur_bwmode, pmlmeext->cur_ch_offset,
+                       ADPT_ARG(pbuddy_adapter), pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_bwmode, pbuddy_mlmeext->cur_ch_offset);
+
+               if(pmlmeext->cur_channel != pbuddy_mlmeext->cur_channel)
+               {
+                       chbw_allow = _FALSE;
+               }
+               else if((pmlmeext->cur_bwmode == HT_CHANNEL_WIDTH_40) &&
+                       (pbuddy_mlmeext->cur_bwmode == HT_CHANNEL_WIDTH_40) &&
+                       (pmlmeext->cur_ch_offset != pbuddy_mlmeext->cur_ch_offset))
+               {
+                       chbw_allow = _FALSE;
+               }
+               else if((pmlmeext->cur_bwmode == HT_CHANNEL_WIDTH_20) &&
+                       (pbuddy_mlmeext->cur_bwmode == HT_CHANNEL_WIDTH_40))
+               {
+                       cur_ch = pmlmeext->cur_channel;
+                       cur_bw = pbuddy_mlmeext->cur_bwmode;
+                       cur_ch_offset = pbuddy_mlmeext->cur_ch_offset;
+               }
+
+               DBG_871X("start_clnt_join: connect_allow:%d, chbw_allow:%d\n", connect_allow, chbw_allow);
+               if (chbw_allow == _FALSE) {
+                       #ifdef CONFIG_SPCT_CH_SWITCH
+                       if (1) {
+                               rtw_ap_inform_ch_switch(pbuddy_adapter, pmlmeext->cur_channel , pmlmeext->cur_ch_offset);
+                       } else
+                       #endif
+                       {
+                               //issue deauth to all stas if if2 is at ap mode
+                               rtw_sta_flush(pbuddy_adapter);
+                       }
+                       rtw_hal_set_hwreg(padapter, HW_VAR_CHECK_TXBUF, 0);
+               }
+       }
+       else if(check_fwstate(pbuddy_mlmepriv, _FW_LINKED) == _TRUE &&
+               check_fwstate(pbuddy_mlmepriv, WIFI_STATION_STATE) == _TRUE) //for Client Mode/p2p client
+       {
+               DBG_871X("start_clnt_join: "ADPT_FMT"(ch=%d, bw=%d, ch_offset=%d)"
+                       ", "ADPT_FMT" STA mode(ch=%d, bw=%d, ch_offset=%d)\n",
+                       ADPT_ARG(padapter), pmlmeext->cur_channel, pmlmeext->cur_bwmode, pmlmeext->cur_ch_offset,
+                       ADPT_ARG(pbuddy_adapter), pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_bwmode, pbuddy_mlmeext->cur_ch_offset);
+
+               if(pmlmeext->cur_channel != pbuddy_mlmeext->cur_channel)
+               {
+                       chbw_allow = _FALSE;
+               }
+               else if((pmlmeext->cur_bwmode == HT_CHANNEL_WIDTH_20) &&
+                       (pbuddy_mlmeext->cur_bwmode == HT_CHANNEL_WIDTH_40))
+               {
+                       cur_bw = HT_CHANNEL_WIDTH_40;
+                       cur_ch_offset = pbuddy_mlmeext->cur_ch_offset;
+               }
+               else if((pmlmeext->cur_bwmode == HT_CHANNEL_WIDTH_40) &&
+                       (pbuddy_mlmeext->cur_bwmode == HT_CHANNEL_WIDTH_40) &&
+                       (pmlmeext->cur_ch_offset != pbuddy_mlmeext->cur_ch_offset))
+               {
+                       chbw_allow = _FALSE;
+               }
+
+               connect_allow = chbw_allow;
+
+               #if defined(CONFIG_P2P) && defined(CONFIG_IOCTL_CFG80211)
+               /* wlan0-sta mode has higher priority than p2p0-p2p client */
+               if (!rtw_p2p_chk_state(&(pbuddy_adapter->wdinfo), P2P_STATE_NONE)
+                       && pbuddy_adapter->wdinfo.driver_interface == DRIVER_CFG80211)
+               {
+                       connect_allow = _TRUE;
+               }
+               #endif /* CONFIG_P2P && CONFIG_IOCTL_CFG80211 */
+
+               DBG_871X("start_clnt_join: connect_allow:%d, chbw_allow:%d\n", connect_allow, chbw_allow);
+               if (connect_allow == _TRUE && chbw_allow == _FALSE) {
+                       /* disconnect buddy's connection */
+                       rtw_disassoc_cmd(pbuddy_adapter, 500, _FALSE);
+                       rtw_indicate_disconnect(pbuddy_adapter);
+                       rtw_free_assoc_resources(pbuddy_adapter, 1);
+               }
+       }
+
+start_join_set_ch_bw:
+#endif /* CONFIG_CONCURRENT_MODE */
+
+       if (connect_allow == _TRUE) {
+               DBG_871X("start_join_set_ch_bw: ch=%d, bwmode=%d, ch_offset=%d\n", cur_ch, cur_bw, cur_ch_offset);
+               set_channel_bwmode(padapter, cur_ch, cur_ch_offset, cur_bw);
+       }
+
+       return connect_allow == _TRUE ? _SUCCESS : _FAIL;
+}
+
+/* Find union about ch, bw, ch_offset of all linked interfaces */
+int rtw_get_ch_setting_union(_adapter *adapter, u8 *ch, u8 *bw, u8 *offset)
+{
+       struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
+       _adapter *iface;
+       struct mlme_ext_priv *mlmeext;
+       int i;
+       u8 ch_ret = 0;
+       u8 bw_ret = HT_CHANNEL_WIDTH_20;
+       u8 offset_ret = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+       int num = 0;
+
+       if (ch) *ch = 0;
+       if (bw) *bw = HT_CHANNEL_WIDTH_20;
+       if (offset) *offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+
+       for (i = 0; i<dvobj->iface_nums; i++) {
+               iface = dvobj->padapters[i];
+               mlmeext = &iface->mlmeextpriv;
+
+               if (!check_fwstate(&iface->mlmepriv, _FW_LINKED))
+                       continue;
+
+               if (num == 0) {
+                       ch_ret = mlmeext->cur_channel;
+                       bw_ret = mlmeext->cur_bwmode;
+                       offset_ret = mlmeext->cur_ch_offset;
+                       num++;
+                       continue;
+               }
+
+               if (ch_ret != mlmeext->cur_channel) {
+                       num = 0;
+                       break;
+               }
+
+               if (bw_ret < mlmeext->cur_bwmode) {
+                       bw_ret = mlmeext->cur_bwmode;
+                       offset_ret = mlmeext->cur_ch_offset;
+               } else if (bw_ret == mlmeext->cur_bwmode && offset_ret != mlmeext->cur_ch_offset) {
+                       num = 0;
+                       break;
+               }
+
+               num++;
+       }
+
+       if (num) {
+               if (ch) *ch = ch_ret;
+               if (bw) *bw = bw_ret;
+               if (offset) *offset = offset_ret;
+       }
+
+       return num;
+}
+
+u8 set_ch_hdl(_adapter *padapter, u8 *pbuf)
+{
+       struct set_ch_parm *set_ch_parm;
+       struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+
+       if(!pbuf)
+               return H2C_PARAMETERS_ERROR;
+
+       set_ch_parm = (struct set_ch_parm *)pbuf;
+
+       DBG_871X(FUNC_NDEV_FMT" ch:%u, bw:%u, ch_offset:%u\n",
+               FUNC_NDEV_ARG(padapter->pnetdev),
+               set_ch_parm->ch, set_ch_parm->bw, set_ch_parm->ch_offset);
+
+       pmlmeext->cur_channel = set_ch_parm->ch;
+       pmlmeext->cur_ch_offset = set_ch_parm->ch_offset;
+       pmlmeext->cur_bwmode = set_ch_parm->bw;
+
+       set_channel_bwmode(padapter, set_ch_parm->ch, set_ch_parm->ch_offset, set_ch_parm->bw);
+
+       return  H2C_SUCCESS;
+}
+
+u8 set_chplan_hdl(_adapter *padapter, unsigned char *pbuf)
+{
+       struct SetChannelPlan_param *setChannelPlan_param;
+       struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+
+       if(!pbuf)
+               return H2C_PARAMETERS_ERROR;
+
+       setChannelPlan_param = (struct SetChannelPlan_param *)pbuf;
+
+       pmlmeext->max_chan_nums = init_channel_set(padapter, setChannelPlan_param->channel_plan, pmlmeext->channel_set);
+       init_channel_list(padapter, pmlmeext->channel_set, pmlmeext->max_chan_nums, &pmlmeext->channel_list);
+
+       return  H2C_SUCCESS;
+}
+
+u8 led_blink_hdl(_adapter *padapter, unsigned char *pbuf)
+{
+       struct LedBlink_param *ledBlink_param;
+
+       if(!pbuf)
+               return H2C_PARAMETERS_ERROR;
+
+       ledBlink_param = (struct LedBlink_param *)pbuf;
+
+       #ifdef CONFIG_LED_HANDLED_BY_CMD_THREAD
+       BlinkHandler(ledBlink_param->pLed);
+       #endif
+
+       return  H2C_SUCCESS;
+}
+
+u8 set_csa_hdl(_adapter *padapter, unsigned char *pbuf)
+{
+#ifdef CONFIG_DFS
+       struct SetChannelSwitch_param *setChannelSwitch_param;
+       struct SetChannelPlan_param *setChannelPlan_param;
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
+       u8 new_ch_no;
+       u8 gval8 = 0x00, sval8 = 0xff;
+
+       if(!pbuf)
+               return H2C_PARAMETERS_ERROR;
+
+       setChannelSwitch_param = (struct SetChannelSwitch_param *)pbuf;
+       new_ch_no = setChannelSwitch_param->new_ch_no;
+
+       rtw_hal_get_hwreg(padapter, HW_VAR_TXPAUSE, &gval8);
+
+       rtw_hal_set_hwreg(padapter, HW_VAR_TXPAUSE, &sval8);
+
+       DBG_871X("DFS detected! Swiching channel to %d!\n", new_ch_no);
+       SelectChannel(padapter, new_ch_no);
+
+       rtw_hal_set_hwreg(padapter, HW_VAR_TXPAUSE, &gval8);
+
+       rtw_free_network_queue(padapter, _TRUE);
+       rtw_indicate_disconnect(padapter);
+
+       if ( ((new_ch_no >= 52) && (new_ch_no <= 64)) ||((new_ch_no >= 100) && (new_ch_no <= 140)) ) {
+               DBG_871X("Switched to DFS band (ch %02x) again!!\n", new_ch_no);
+       }
+
+       return  H2C_SUCCESS;
+#else
+       return  H2C_REJECTED;
+#endif //CONFIG_DFS
+
+}
+
+// TDLS_WRCR           : write RCR DATA BIT
+// TDLS_SD_PTI         : issue peer traffic indication
+// TDLS_CS_OFF         : go back to the channel linked with AP, terminating channel switch procedure
+// TDLS_INIT_CH_SEN    : init channel sensing, receive all data and mgnt frame
+// TDLS_DONE_CH_SEN: channel sensing and report candidate channel
+// TDLS_OFF_CH         : first time set channel to off channel
+// TDLS_BASE_CH                : go back tp the channel linked with AP when set base channel as target channel
+// TDLS_P_OFF_CH       : periodically go to off channel
+// TDLS_P_BASE_CH      : periodically go back to base channel
+// TDLS_RS_RCR         : restore RCR
+// TDLS_CKALV_PH1      : check alive timer phase1
+// TDLS_CKALV_PH2      : check alive timer phase2
+// TDLS_FREE_STA       : free tdls sta
+u8 tdls_hdl(_adapter *padapter, unsigned char *pbuf)
+{
+#ifdef CONFIG_TDLS
+       _irqL irqL;
+       struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
+       struct TDLSoption_param *TDLSoption;
+       struct sta_info *ptdls_sta;
+       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
+       u8 survey_channel, i, min, option;
+
+       if(!pbuf)
+               return H2C_PARAMETERS_ERROR;
+
+       TDLSoption = (struct TDLSoption_param *)pbuf;
+
+       ptdls_sta = rtw_get_stainfo( &(padapter->stapriv), TDLSoption->addr );
+       option = TDLSoption->option;
+
+       if( ptdls_sta == NULL )
+       {
+               if( option != TDLS_RS_RCR )
+                       return H2C_REJECTED;
+       }
+
+       //_enter_critical_bh(&(ptdlsinfo->hdl_lock), &irqL);
+       DBG_871X("[%s] option:%d\n", __FUNCTION__, option);
+
+       switch(option){
+               case TDLS_WRCR:
+                       //As long as TDLS handshake success, we should set RCR_CBSSID_DATA bit to 0
+                       //such we can receive all kinds of data frames.
+                       rtw_hal_set_hwreg(padapter, HW_VAR_TDLS_WRCR, 0);
+                       DBG_871X("TDLS with "MAC_FMT"\n", MAC_ARG(ptdls_sta->hwaddr));
+
+                       pmlmeinfo->FW_sta_info[ptdls_sta->mac_id].psta = ptdls_sta;
+                       //set TDLS sta rate.
+                       set_sta_rate(padapter, ptdls_sta);
+                       break;
+               case TDLS_SD_PTI:
+                       issue_tdls_peer_traffic_indication(padapter, ptdls_sta);
+                       break;
+               case TDLS_CS_OFF:
+                       _cancel_timer_ex(&ptdls_sta->base_ch_timer);
+                       _cancel_timer_ex(&ptdls_sta->off_ch_timer);
+                       SelectChannel(padapter, pmlmeext->cur_channel);
+                       ptdls_sta->tdls_sta_state &= ~(TDLS_CH_SWITCH_ON_STATE |
+                                                               TDLS_PEER_AT_OFF_STATE |
+                                                               TDLS_AT_OFF_CH_STATE);
+                       DBG_871X("go back to base channel\n ");
+                       issue_nulldata(padapter, NULL, 0, 0, 0);
+                       break;
+               case TDLS_INIT_CH_SEN:
+                       rtw_hal_set_hwreg(padapter, HW_VAR_TDLS_INIT_CH_SEN, 0);
+                       pmlmeext->sitesurvey_res.channel_idx = 0;
+                       ptdls_sta->option = TDLS_DONE_CH_SEN;
+                       rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_DONE_CH_SEN);
+                       break;
+               case TDLS_DONE_CH_SEN:
+                       survey_channel = pmlmeext->channel_set[pmlmeext->sitesurvey_res.channel_idx].ChannelNum;
+                       if(survey_channel){
+                               SelectChannel(padapter, survey_channel);
+                               ptdlsinfo->cur_channel = survey_channel;
+                               pmlmeext->sitesurvey_res.channel_idx++;
+                               _set_timer(&ptdls_sta->option_timer, SURVEY_TO);
+                       }else{
+                               SelectChannel(padapter, pmlmeext->cur_channel);
+
+                               rtw_hal_set_hwreg(padapter, HW_VAR_TDLS_DONE_CH_SEN, 0);
+
+                               if(ptdlsinfo->ch_sensing==1){
+                                       ptdlsinfo->ch_sensing=0;
+                                       ptdlsinfo->cur_channel=1;
+                                       min=ptdlsinfo->collect_pkt_num[0];
+                                       for(i=1; i<MAX_CHANNEL_NUM-1; i++){
+                                               if(min > ptdlsinfo->collect_pkt_num[i]){
+                                                       ptdlsinfo->cur_channel=i+1;
+                                                       min=ptdlsinfo->collect_pkt_num[i];
+                                               }
+                                               ptdlsinfo->collect_pkt_num[i]=0;
+                                       }
+                                       ptdlsinfo->collect_pkt_num[0]=0;
+                                       ptdlsinfo->candidate_ch=ptdlsinfo->cur_channel;
+                                       DBG_871X("TDLS channel sensing done, candidate channel: %02x\n", ptdlsinfo->candidate_ch);
+                                       ptdlsinfo->cur_channel=0;
+
+                               }
+
+                               if(ptdls_sta->tdls_sta_state & TDLS_PEER_SLEEP_STATE){
+                                       ptdls_sta->tdls_sta_state |= TDLS_APSD_CHSW_STATE;
+                               }else{
+                                       //send null data with pwrbit==1 before send ch_switching_req to peer STA.
+                                       issue_nulldata(padapter, NULL, 1, 0, 0);
+
+                                       ptdls_sta->tdls_sta_state |= TDLS_CH_SW_INITIATOR_STATE;
+
+                                       issue_tdls_ch_switch_req(padapter, ptdls_sta->hwaddr);
+                                       DBG_871X("issue tdls ch switch req\n");
+                               }
+                       }
+                       break;
+               case TDLS_OFF_CH:
+                       issue_nulldata(padapter, NULL, 1, 0, 0);
+                       SelectChannel(padapter, ptdls_sta->off_ch);
+
+                       DBG_871X("change channel to tar ch:%02x\n", ptdls_sta->off_ch);
+                       ptdls_sta->tdls_sta_state |= TDLS_AT_OFF_CH_STATE;
+                       ptdls_sta->tdls_sta_state &= ~(TDLS_PEER_AT_OFF_STATE);
+                       _set_timer(&ptdls_sta->option_timer, (u32)ptdls_sta->ch_switch_time);
+                       break;
+               case TDLS_BASE_CH:
+                       _cancel_timer_ex(&ptdls_sta->base_ch_timer);
+                       _cancel_timer_ex(&ptdls_sta->off_ch_timer);
+                       SelectChannel(padapter, pmlmeext->cur_channel);
+                       ptdls_sta->tdls_sta_state &= ~(TDLS_CH_SWITCH_ON_STATE |
+                                                               TDLS_PEER_AT_OFF_STATE |
+                                                               TDLS_AT_OFF_CH_STATE);
+                       DBG_871X("go back to base channel\n ");
+                       issue_nulldata(padapter, NULL, 0, 0, 0);
+                       _set_timer(&ptdls_sta->option_timer, (u32)ptdls_sta->ch_switch_time);
+                       break;
+               case TDLS_P_OFF_CH:
+                       SelectChannel(padapter, pmlmeext->cur_channel);
+                       issue_nulldata(padapter, NULL, 0, 0, 0);
+                       DBG_871X("change channel to base ch:%02x\n", pmlmeext->cur_channel);
+                       ptdls_sta->tdls_sta_state &= ~(TDLS_PEER_AT_OFF_STATE| TDLS_AT_OFF_CH_STATE);
+                       _set_timer(&ptdls_sta->off_ch_timer, TDLS_STAY_TIME);
+                       break;
+               case TDLS_P_BASE_CH:
+                       issue_nulldata(ptdls_sta->padapter, NULL, 1, 0, 0);
+                       SelectChannel(padapter, ptdls_sta->off_ch);
+                       DBG_871X("change channel to off ch:%02x\n", ptdls_sta->off_ch);
+                       ptdls_sta->tdls_sta_state |= TDLS_AT_OFF_CH_STATE;
+                       if((ptdls_sta->tdls_sta_state & TDLS_PEER_AT_OFF_STATE) != TDLS_PEER_AT_OFF_STATE){
+                               issue_nulldata_to_TDLS_peer_STA(padapter, ptdls_sta, 0);
+                       }
+                       _set_timer(&ptdls_sta->base_ch_timer, TDLS_STAY_TIME);
+                       break;
+               case TDLS_RS_RCR:
+                       rtw_hal_set_hwreg(padapter, HW_VAR_TDLS_RS_RCR, 0);
+                       DBG_871X("wirte REG_RCR, set bit6 on\n");
+                       break;
+               case TDLS_CKALV_PH1:
+                       _set_timer(&ptdls_sta->alive_timer2, TDLS_ALIVE_TIMER_PH2);
+                       break;
+               case TDLS_CKALV_PH2:
+                       _set_timer(&ptdls_sta->alive_timer1, TDLS_ALIVE_TIMER_PH1);
+                       break;
+               case TDLS_FREE_STA:
+                       free_tdls_sta(padapter, ptdls_sta);
+                       break;
+
+       }
+
+       //_exit_critical_bh(&(ptdlsinfo->hdl_lock), &irqL);
+
+       return H2C_SUCCESS;
+#else
+       return H2C_REJECTED;
+#endif //CONFIG_TDLS
+
+}
diff --git a/drivers/net/wireless/realtek/rtl8192cu/core/rtw_mp.c b/drivers/net/wireless/realtek/rtl8192cu/core/rtw_mp.c
new file mode 100644 (file)
index 0000000..2695425
--- /dev/null
@@ -0,0 +1,1323 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#define _RTW_MP_C_
+
+#include <drv_types.h>
+
+#ifdef PLATFORM_FREEBSD
+#include <sys/unistd.h>                /* for RFHIGHPID */
+#endif
+
+#ifdef CONFIG_RTL8712
+#include <rtw_mp_phy_regdef.h>
+#endif
+#ifdef CONFIG_RTL8192C
+#include <rtl8192c_hal.h>
+#endif
+#ifdef CONFIG_RTL8192D
+#include <rtl8192d_hal.h>
+#endif
+#ifdef CONFIG_RTL8723A
+#include <rtl8723a_hal.h>
+#endif
+
+
+#ifdef CONFIG_MP_INCLUDED
+
+u32 read_macreg(_adapter *padapter, u32 addr, u32 sz)
+{
+       u32 val = 0;
+
+       switch(sz)
+       {
+               case 1:
+                       val = rtw_read8(padapter, addr);
+                       break;
+               case 2:
+                       val = rtw_read16(padapter, addr);
+                       break;
+               case 4:
+                       val = rtw_read32(padapter, addr);
+                       break;
+               default:
+                       val = 0xffffffff;
+                       break;
+       }
+
+       return val;
+
+}
+
+void write_macreg(_adapter *padapter, u32 addr, u32 val, u32 sz)
+{
+       switch(sz)
+       {
+               case 1:
+                       rtw_write8(padapter, addr, (u8)val);
+                       break;
+               case 2:
+                       rtw_write16(padapter, addr, (u16)val);
+                       break;
+               case 4:
+                       rtw_write32(padapter, addr, val);
+                       break;
+               default:
+                       break;
+       }
+
+}
+
+u32 read_bbreg(_adapter *padapter, u32 addr, u32 bitmask)
+{
+       return rtw_hal_read_bbreg(padapter, addr, bitmask);
+}
+
+void write_bbreg(_adapter *padapter, u32 addr, u32 bitmask, u32 val)
+{
+       rtw_hal_write_bbreg(padapter, addr, bitmask, val);
+}
+
+u32 _read_rfreg(PADAPTER padapter, u8 rfpath, u32 addr, u32 bitmask)
+{
+       return rtw_hal_read_rfreg(padapter, (RF_RADIO_PATH_E)rfpath, addr, bitmask);
+}
+
+void _write_rfreg(PADAPTER padapter, u8 rfpath, u32 addr, u32 bitmask, u32 val)
+{
+       rtw_hal_write_rfreg(padapter, (RF_RADIO_PATH_E)rfpath, addr, bitmask, val);
+}
+
+u32 read_rfreg(PADAPTER padapter, u8 rfpath, u32 addr)
+{
+       return _read_rfreg(padapter, (RF_RADIO_PATH_E)rfpath, addr, bRFRegOffsetMask);
+}
+
+void write_rfreg(PADAPTER padapter, u8 rfpath, u32 addr, u32 val)
+{
+       _write_rfreg(padapter, (RF_RADIO_PATH_E)rfpath, addr, bRFRegOffsetMask, val);
+}
+
+static void _init_mp_priv_(struct mp_priv *pmp_priv)
+{
+       WLAN_BSSID_EX *pnetwork;
+
+       _rtw_memset(pmp_priv, 0, sizeof(struct mp_priv));
+
+       pmp_priv->mode = MP_OFF;
+
+       pmp_priv->channel = 1;
+       pmp_priv->bandwidth = HT_CHANNEL_WIDTH_20;
+       pmp_priv->prime_channel_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+       pmp_priv->rateidx = MPT_RATE_1M;
+       pmp_priv->txpoweridx = 0x2A;
+
+       pmp_priv->antenna_tx = ANTENNA_A;
+       pmp_priv->antenna_rx = ANTENNA_AB;
+
+       pmp_priv->check_mp_pkt = 0;
+
+       pmp_priv->tx_pktcount = 0;
+
+       pmp_priv->rx_pktcount = 0;
+       pmp_priv->rx_crcerrpktcount = 0;
+
+       pmp_priv->network_macaddr[0] = 0x00;
+       pmp_priv->network_macaddr[1] = 0xE0;
+       pmp_priv->network_macaddr[2] = 0x4C;
+       pmp_priv->network_macaddr[3] = 0x87;
+       pmp_priv->network_macaddr[4] = 0x66;
+       pmp_priv->network_macaddr[5] = 0x55;
+
+       pnetwork = &pmp_priv->mp_network.network;
+       _rtw_memcpy(pnetwork->MacAddress, pmp_priv->network_macaddr, ETH_ALEN);
+
+       pnetwork->Ssid.SsidLength = 8;
+       _rtw_memcpy(pnetwork->Ssid.Ssid, "mp_871x", pnetwork->Ssid.SsidLength);
+}
+
+#ifdef PLATFORM_WINDOWS
+/*
+void mp_wi_callback(
+       IN NDIS_WORK_ITEM*      pwk_item,
+       IN PVOID                        cntx
+       )
+{
+       _adapter* padapter =(_adapter *)cntx;
+       struct mp_priv *pmppriv=&padapter->mppriv;
+       struct mp_wi_cntx       *pmp_wi_cntx=&pmppriv->wi_cntx;
+
+       // Execute specified action.
+       if(pmp_wi_cntx->curractfunc != NULL)
+       {
+               LARGE_INTEGER   cur_time;
+               ULONGLONG start_time, end_time;
+               NdisGetCurrentSystemTime(&cur_time);    // driver version
+               start_time = cur_time.QuadPart/10; // The return value is in microsecond
+
+               pmp_wi_cntx->curractfunc(padapter);
+
+               NdisGetCurrentSystemTime(&cur_time);    // driver version
+               end_time = cur_time.QuadPart/10; // The return value is in microsecond
+
+               RT_TRACE(_module_mp_, _drv_info_,
+                        ("WorkItemActType: %d, time spent: %I64d us\n",
+                         pmp_wi_cntx->param.act_type, (end_time-start_time)));
+       }
+
+       NdisAcquireSpinLock(&(pmp_wi_cntx->mp_wi_lock));
+       pmp_wi_cntx->bmp_wi_progress= _FALSE;
+       NdisReleaseSpinLock(&(pmp_wi_cntx->mp_wi_lock));
+
+       if (pmp_wi_cntx->bmpdrv_unload)
+       {
+               NdisSetEvent(&(pmp_wi_cntx->mp_wi_evt));
+       }
+
+}
+*/
+
+static int init_mp_priv_by_os(struct mp_priv *pmp_priv)
+{
+       struct mp_wi_cntx *pmp_wi_cntx;
+
+       if (pmp_priv == NULL) return _FAIL;
+
+       pmp_priv->rx_testcnt = 0;
+       pmp_priv->rx_testcnt1 = 0;
+       pmp_priv->rx_testcnt2 = 0;
+
+       pmp_priv->tx_testcnt = 0;
+       pmp_priv->tx_testcnt1 = 0;
+
+       pmp_wi_cntx = &pmp_priv->wi_cntx
+       pmp_wi_cntx->bmpdrv_unload = _FALSE;
+       pmp_wi_cntx->bmp_wi_progress = _FALSE;
+       pmp_wi_cntx->curractfunc = NULL;
+
+       return _SUCCESS;
+}
+#endif
+
+#ifdef PLATFORM_LINUX
+static int init_mp_priv_by_os(struct mp_priv *pmp_priv)
+{
+       int i, res;
+       struct mp_xmit_frame *pmp_xmitframe;
+
+       if (pmp_priv == NULL) return _FAIL;
+
+       _rtw_init_queue(&pmp_priv->free_mp_xmitqueue);
+
+       pmp_priv->pallocated_mp_xmitframe_buf = NULL;
+       pmp_priv->pallocated_mp_xmitframe_buf = rtw_zmalloc(NR_MP_XMITFRAME * sizeof(struct mp_xmit_frame) + 4);
+       if (pmp_priv->pallocated_mp_xmitframe_buf == NULL) {
+               res = _FAIL;
+               goto _exit_init_mp_priv;
+       }
+
+       pmp_priv->pmp_xmtframe_buf = pmp_priv->pallocated_mp_xmitframe_buf + 4 - ((uint) (pmp_priv->pallocated_mp_xmitframe_buf) & 3);
+
+       pmp_xmitframe = (struct mp_xmit_frame*)pmp_priv->pmp_xmtframe_buf;
+
+       for (i = 0; i < NR_MP_XMITFRAME; i++)
+       {
+               _rtw_init_listhead(&pmp_xmitframe->list);
+               rtw_list_insert_tail(&pmp_xmitframe->list, &pmp_priv->free_mp_xmitqueue.queue);
+
+               pmp_xmitframe->pkt = NULL;
+               pmp_xmitframe->frame_tag = MP_FRAMETAG;
+               pmp_xmitframe->padapter = pmp_priv->papdater;
+
+               pmp_xmitframe++;
+       }
+
+       pmp_priv->free_mp_xmitframe_cnt = NR_MP_XMITFRAME;
+
+       res = _SUCCESS;
+
+_exit_init_mp_priv:
+
+       return res;
+}
+#endif
+
+static void mp_init_xmit_attrib(struct mp_tx *pmptx, PADAPTER padapter)
+{
+       struct pkt_attrib *pattrib;
+       struct tx_desc *desc;
+
+       // init xmitframe attribute
+       pattrib = &pmptx->attrib;
+       _rtw_memset(pattrib, 0, sizeof(struct pkt_attrib));
+       desc = &pmptx->desc;
+       _rtw_memset(desc, 0, TXDESC_SIZE);
+
+       pattrib->ether_type = 0x8712;
+       //_rtw_memcpy(pattrib->src, padapter->eeprompriv.mac_addr, ETH_ALEN);
+//     _rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
+       _rtw_memset(pattrib->dst, 0xFF, ETH_ALEN);
+//     pattrib->pctrl = 0;
+//     pattrib->dhcp_pkt = 0;
+//     pattrib->pktlen = 0;
+       pattrib->ack_policy = 0;
+//     pattrib->pkt_hdrlen = ETH_HLEN;
+       pattrib->hdrlen = WLAN_HDR_A3_LEN;
+       pattrib->subtype = WIFI_DATA;
+       pattrib->priority = 0;
+       pattrib->qsel = pattrib->priority;
+//     do_queue_select(padapter, pattrib);
+       pattrib->nr_frags = 1;
+       pattrib->encrypt = 0;
+       pattrib->bswenc = _FALSE;
+       pattrib->qos_en = _FALSE;
+}
+
+s32 init_mp_priv(PADAPTER padapter)
+{
+       struct mp_priv *pmppriv = &padapter->mppriv;
+
+       _init_mp_priv_(pmppriv);
+       pmppriv->papdater = padapter;
+
+       pmppriv->tx.stop = 1;
+       mp_init_xmit_attrib(&pmppriv->tx, padapter);
+
+       switch (padapter->registrypriv.rf_config) {
+               case RF_1T1R:
+                       pmppriv->antenna_tx = ANTENNA_A;
+                       pmppriv->antenna_rx = ANTENNA_A;
+                       break;
+               case RF_1T2R:
+               default:
+                       pmppriv->antenna_tx = ANTENNA_A;
+                       pmppriv->antenna_rx = ANTENNA_AB;
+                       break;
+               case RF_2T2R:
+               case RF_2T2R_GREEN:
+                       pmppriv->antenna_tx = ANTENNA_AB;
+                       pmppriv->antenna_rx = ANTENNA_AB;
+                       break;
+               case RF_2T4R:
+                       pmppriv->antenna_tx = ANTENNA_AB;
+                       pmppriv->antenna_rx = ANTENNA_ABCD;
+                       break;
+       }
+
+       return _SUCCESS;
+}
+
+void free_mp_priv(struct mp_priv *pmp_priv)
+{
+       if (pmp_priv->pallocated_mp_xmitframe_buf) {
+               rtw_mfree(pmp_priv->pallocated_mp_xmitframe_buf, 0);
+               pmp_priv->pallocated_mp_xmitframe_buf = NULL;
+       }
+       pmp_priv->pmp_xmtframe_buf = NULL;
+}
+
+#ifdef CONFIG_RTL8192C
+#define PHY_IQCalibrate(a,b)   rtl8192c_PHY_IQCalibrate(a,b)
+#define PHY_LCCalibrate(a)     rtl8192c_PHY_LCCalibrate(a)
+#define dm_CheckTXPowerTracking(a)     rtl8192c_dm_CheckTXPowerTracking(a)
+#define PHY_SetRFPathSwitch(a,b)       rtl8192c_PHY_SetRFPathSwitch(a,b)
+#endif
+
+#ifdef CONFIG_RTL8192D
+#define PHY_IQCalibrate(a)     rtl8192d_PHY_IQCalibrate(a)
+#define PHY_LCCalibrate(a)     rtl8192d_PHY_LCCalibrate(a)
+#define dm_CheckTXPowerTracking(a)     rtl8192d_dm_CheckTXPowerTracking(a)
+#define PHY_SetRFPathSwitch(a,b)       rtl8192d_PHY_SetRFPathSwitch(a,b)
+#endif
+
+s32
+MPT_InitializeAdapter(
+       IN      PADAPTER                        pAdapter,
+       IN      u8                              Channel
+       )
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(pAdapter);
+       s32             rtStatus = _SUCCESS;
+       PMPT_CONTEXT    pMptCtx = &pAdapter->mppriv.MptCtx;
+       u32             ledsetting;
+
+       //-------------------------------------------------------------------------
+       // HW Initialization for 8190 MPT.
+       //-------------------------------------------------------------------------
+       //-------------------------------------------------------------------------
+       // SW Initialization for 8190 MP.
+       //-------------------------------------------------------------------------
+       pMptCtx->bMptDrvUnload = _FALSE;
+       pMptCtx->bMassProdTest = _FALSE;
+       pMptCtx->bMptIndexEven = _TRUE; //default gain index is -6.0db
+
+       /* Init mpt event. */
+#if 0 // for Windows
+       NdisInitializeEvent( &(pMptCtx->MptWorkItemEvent) );
+       NdisAllocateSpinLock( &(pMptCtx->MptWorkItemSpinLock) );
+
+       PlatformInitializeWorkItem(
+               Adapter,
+               &(pMptCtx->MptWorkItem),
+               (RT_WORKITEM_CALL_BACK)MPT_WorkItemCallback,
+               (PVOID)Adapter,
+               "MptWorkItem");
+#endif
+       pMptCtx->bMptWorkItemInProgress = _FALSE;
+       pMptCtx->CurrMptAct = NULL;
+       //-------------------------------------------------------------------------
+
+#if 1
+       // Don't accept any packets
+       rtw_write32(pAdapter, REG_RCR, 0);
+#else
+       // Accept CRC error and destination address
+       pHalData->ReceiveConfig |= (RCR_ACRC32|RCR_AAP);
+       rtw_write32(pAdapter, REG_RCR, pHalData->ReceiveConfig);
+#endif
+
+#if 0
+       // If EEPROM or EFUSE is empty,we assign as RF 2T2R for MP.
+       if (pHalData->AutoloadFailFlag == TRUE)
+       {
+               pHalData->RF_Type = RF_2T2R;
+       }
+#endif
+       ledsetting = rtw_read32(pAdapter, REG_LEDCFG0);
+       rtw_write32(pAdapter, REG_LEDCFG0, ledsetting & ~LED0DIS);
+
+#ifdef CONFIG_RTL8192C
+       PHY_IQCalibrate(pAdapter, _FALSE);
+       dm_CheckTXPowerTracking(pAdapter);      //trigger thermal meter
+       PHY_LCCalibrate(pAdapter);
+#endif
+
+#ifdef CONFIG_RTL8192D
+       PHY_IQCalibrate(pAdapter);
+       dm_CheckTXPowerTracking(pAdapter);      //trigger thermal meter
+       PHY_LCCalibrate(pAdapter);
+#endif
+
+#ifdef CONFIG_PCI_HCI
+       PHY_SetRFPathSwitch(pAdapter, 1/*pHalData->bDefaultAntenna*/);  //Wifi default use Main
+#else
+
+#ifdef CONFIG_RTL8192C
+#if 1
+       if (pHalData->BoardType == BOARD_MINICARD)
+               PHY_SetRFPathSwitch(pAdapter, 1/*pHalData->bDefaultAntenna*/); //default use Main
+#else
+       if(pAdapter->HalFunc.GetInterfaceSelectionHandler(pAdapter) == INTF_SEL2_MINICARD )
+               PHY_SetRFPathSwitch(Adapter, pAdapter->MgntInfo.bDefaultAntenna); //default use Main
+#endif
+
+#endif
+
+#endif
+
+       pMptCtx->backup0xc50 = (u1Byte)PHY_QueryBBReg(pAdapter, rOFDM0_XAAGCCore1, bMaskByte0);
+       pMptCtx->backup0xc58 = (u1Byte)PHY_QueryBBReg(pAdapter, rOFDM0_XBAGCCore1, bMaskByte0);
+       pMptCtx->backup0xc30 = (u1Byte)PHY_QueryBBReg(pAdapter, rOFDM0_RxDetector1, bMaskByte0);
+
+       return  rtStatus;
+}
+
+/*-----------------------------------------------------------------------------
+ * Function:   MPT_DeInitAdapter()
+ *
+ * Overview:   Extra DeInitialization for Mass Production Test.
+ *
+ * Input:              PADAPTER        pAdapter
+ *
+ * Output:             NONE
+ *
+ * Return:             NONE
+ *
+ * Revised History:
+ *     When            Who             Remark
+ *     05/08/2007      MHC             Create Version 0.
+ *     05/18/2007      MHC             Add normal driver MPHalt code.
+ *
+ *---------------------------------------------------------------------------*/
+VOID
+MPT_DeInitAdapter(
+       IN      PADAPTER        pAdapter
+       )
+{
+       PMPT_CONTEXT            pMptCtx = &pAdapter->mppriv.MptCtx;
+
+       pMptCtx->bMptDrvUnload = _TRUE;
+#if 0 // for Windows
+       PlatformFreeWorkItem( &(pMptCtx->MptWorkItem) );
+
+       while(pMptCtx->bMptWorkItemInProgress)
+       {
+               if(NdisWaitEvent(&(pMptCtx->MptWorkItemEvent), 50))
+               {
+                       break;
+               }
+       }
+       NdisFreeSpinLock( &(pMptCtx->MptWorkItemSpinLock) );
+#endif
+}
+
+static u8 mpt_ProStartTest(PADAPTER padapter)
+{
+       PMPT_CONTEXT pMptCtx = &padapter->mppriv.MptCtx;
+
+       pMptCtx->bMassProdTest = _TRUE;
+       pMptCtx->bStartContTx = _FALSE;
+       pMptCtx->bCckContTx = _FALSE;
+       pMptCtx->bOfdmContTx = _FALSE;
+       pMptCtx->bSingleCarrier = _FALSE;
+       pMptCtx->bCarrierSuppression = _FALSE;
+       pMptCtx->bSingleTone = _FALSE;
+
+       return _SUCCESS;
+}
+
+/*
+ * General use
+ */
+s32 SetPowerTracking(PADAPTER padapter, u8 enable)
+{
+
+       Hal_SetPowerTracking( padapter, enable );
+       return 0;
+}
+
+void GetPowerTracking(PADAPTER padapter, u8 *enable)
+{
+       Hal_GetPowerTracking( padapter, enable );
+}
+
+static void disable_dm(PADAPTER padapter)
+{
+#ifndef CONFIG_RTL8723A
+       u8 v8;
+#endif
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+
+
+       //3 1. disable firmware dynamic mechanism
+       // disable Power Training, Rate Adaptive
+#ifdef CONFIG_RTL8723A
+       SetBcnCtrlReg(padapter, 0, EN_BCN_FUNCTION);
+#else
+       v8 = rtw_read8(padapter, REG_BCN_CTRL);
+       v8 &= ~EN_BCN_FUNCTION;
+       rtw_write8(padapter, REG_BCN_CTRL, v8);
+#endif
+
+       //3 2. disable driver dynamic mechanism
+       // disable Dynamic Initial Gain
+       // disable High Power
+       // disable Power Tracking
+       Switch_DM_Func(padapter, DYNAMIC_FUNC_DISABLE, _FALSE);
+
+       // enable APK, LCK and IQK but disable power tracking
+       pdmpriv->TxPowerTrackControl = _FALSE;
+       Switch_DM_Func(padapter, DYNAMIC_FUNC_SS, _TRUE);
+}
+
+//This function initializes the DUT to the MP test mode
+s32 mp_start_test(PADAPTER padapter)
+{
+       WLAN_BSSID_EX bssid;
+       struct sta_info *psta;
+       u32 length;
+       u8 val8;
+
+       _irqL irqL;
+       s32 res = _SUCCESS;
+
+       struct mp_priv *pmppriv = &padapter->mppriv;
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+       struct wlan_network *tgt_network = &pmlmepriv->cur_network;
+
+
+       //3 disable dynamic mechanism
+       disable_dm(padapter);
+
+       //3 0. update mp_priv
+#if  defined (CONFIG_RTL8192C)  ||  defined (CONFIG_RTL8192D)
+       if (padapter->registrypriv.rf_config == RF_819X_MAX_TYPE) {
+//             HAL_DATA_TYPE *phal = GET_HAL_DATA(padapter);
+//             switch (phal->rf_type) {
+               switch (GET_RF_TYPE(padapter)) {
+                       case RF_1T1R:
+                               pmppriv->antenna_tx = ANTENNA_A;
+                               pmppriv->antenna_rx = ANTENNA_A;
+                               break;
+                       case RF_1T2R:
+                       default:
+                               pmppriv->antenna_tx = ANTENNA_A;
+                               pmppriv->antenna_rx = ANTENNA_AB;
+                               break;
+                       case RF_2T2R:
+                       case RF_2T2R_GREEN:
+                               pmppriv->antenna_tx = ANTENNA_AB;
+                               pmppriv->antenna_rx = ANTENNA_AB;
+                               break;
+                       case RF_2T4R:
+                               pmppriv->antenna_tx = ANTENNA_AB;
+                               pmppriv->antenna_rx = ANTENNA_ABCD;
+                               break;
+               }
+       }
+#endif
+       mpt_ProStartTest(padapter);
+
+       //3 1. initialize a new WLAN_BSSID_EX
+//     _rtw_memset(&bssid, 0, sizeof(WLAN_BSSID_EX));
+       _rtw_memcpy(bssid.MacAddress, pmppriv->network_macaddr, ETH_ALEN);
+       bssid.Ssid.SsidLength = strlen("mp_pseudo_adhoc");
+       _rtw_memcpy(bssid.Ssid.Ssid, (u8*)"mp_pseudo_adhoc", bssid.Ssid.SsidLength);
+       bssid.InfrastructureMode = Ndis802_11IBSS;
+       bssid.NetworkTypeInUse = Ndis802_11DS;
+       bssid.IELength = 0;
+
+       length = get_WLAN_BSSID_EX_sz(&bssid);
+       if (length % 4)
+               bssid.Length = ((length >> 2) + 1) << 2; //round up to multiple of 4 bytes.
+       else
+               bssid.Length = length;
+
+       _enter_critical_bh(&pmlmepriv->lock, &irqL);
+
+       if (check_fwstate(pmlmepriv, WIFI_MP_STATE) == _TRUE)
+               goto end_of_mp_start_test;
+
+       //init mp_start_test status
+       if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE) {
+               rtw_disassoc_cmd(padapter, 500, _TRUE);
+               rtw_indicate_disconnect(padapter);
+               rtw_free_assoc_resources(padapter, 1);
+       }
+       pmppriv->prev_fw_state = get_fwstate(pmlmepriv);
+       pmlmepriv->fw_state = WIFI_MP_STATE;
+#if 0
+       if (pmppriv->mode == _LOOPBOOK_MODE_) {
+               set_fwstate(pmlmepriv, WIFI_MP_LPBK_STATE); //append txdesc
+               RT_TRACE(_module_mp_, _drv_notice_, ("+start mp in Lookback mode\n"));
+       } else {
+               RT_TRACE(_module_mp_, _drv_notice_, ("+start mp in normal mode\n"));
+       }
+#endif
+       set_fwstate(pmlmepriv, _FW_UNDER_LINKING);
+
+       //3 2. create a new psta for mp driver
+       //clear psta in the cur_network, if any
+       psta = rtw_get_stainfo(&padapter->stapriv, tgt_network->network.MacAddress);
+       if (psta) rtw_free_stainfo(padapter, psta);
+
+       psta = rtw_alloc_stainfo(&padapter->stapriv, bssid.MacAddress);
+       if (psta == NULL) {
+               RT_TRACE(_module_mp_, _drv_err_, ("mp_start_test: Can't alloc sta_info!\n"));
+               pmlmepriv->fw_state = pmppriv->prev_fw_state;
+               res = _FAIL;
+               goto end_of_mp_start_test;
+       }
+
+       //3 3. join psudo AdHoc
+       tgt_network->join_res = 1;
+       tgt_network->aid = psta->aid = 1;
+       _rtw_memcpy(&tgt_network->network, &bssid, length);
+
+       rtw_indicate_connect(padapter);
+       _clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
+
+end_of_mp_start_test:
+
+       _exit_critical_bh(&pmlmepriv->lock, &irqL);
+
+       if (res == _SUCCESS)
+       {
+               // set MSR to WIFI_FW_ADHOC_STATE
+#if  defined (CONFIG_RTL8192C)  ||  defined (CONFIG_RTL8192D)
+               val8 = rtw_read8(padapter, MSR) & 0xFC; // 0x0102
+               val8 |= WIFI_FW_ADHOC_STATE;
+               rtw_write8(padapter, MSR, val8); // Link in ad hoc network
+#endif
+
+#if  !defined (CONFIG_RTL8192C)  &&  !defined (CONFIG_RTL8192D)
+               rtw_write8(padapter, MSR, 1); // Link in ad hoc network
+               rtw_write8(padapter, RCR, 0); // RCR : disable all pkt, 0x10250048
+               rtw_write8(padapter, RCR+2, 0x57); // RCR disable Check BSSID, 0x1025004a
+
+               // disable RX filter map , mgt frames will put in RX FIFO 0
+               rtw_write16(padapter, RXFLTMAP0, 0x0); // 0x10250116
+
+               val8 = rtw_read8(padapter, EE_9346CR); // 0x1025000A
+               if (!(val8 & _9356SEL))//boot from EFUSE
+                       efuse_change_max_size(padapter);
+#endif
+       }
+
+       return res;
+}
+//------------------------------------------------------------------------------
+//This function change the DUT from the MP test mode into normal mode
+void mp_stop_test(PADAPTER padapter)
+{
+       struct mp_priv *pmppriv = &padapter->mppriv;
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+       struct wlan_network *tgt_network = &pmlmepriv->cur_network;
+       struct sta_info *psta;
+
+       _irqL irqL;
+
+
+       _enter_critical_bh(&pmlmepriv->lock, &irqL);
+
+       if (check_fwstate(pmlmepriv, WIFI_MP_STATE) == _FALSE)
+               goto end_of_mp_stop_test;
+
+       //3 1. disconnect psudo AdHoc
+       rtw_indicate_disconnect(padapter);
+
+       //3 2. clear psta used in mp test mode.
+//     rtw_free_assoc_resources(padapter, 1);
+       psta = rtw_get_stainfo(&padapter->stapriv, tgt_network->network.MacAddress);
+       if (psta) rtw_free_stainfo(padapter, psta);
+
+       //3 3. return to normal state (default:station mode)
+       pmlmepriv->fw_state = pmppriv->prev_fw_state; // WIFI_STATION_STATE;
+
+       //flush the cur_network
+       _rtw_memset(tgt_network, 0, sizeof(struct wlan_network));
+
+       _clr_fwstate_(pmlmepriv, WIFI_MP_STATE);
+
+end_of_mp_stop_test:
+
+       _exit_critical_bh(&pmlmepriv->lock, &irqL);
+}
+/*---------------------------hal\rtl8192c\MPT_Phy.c---------------------------*/
+#if 0
+//#ifdef CONFIG_USB_HCI
+static VOID mpt_AdjustRFRegByRateByChan92CU(PADAPTER pAdapter, u8 RateIdx, u8 Channel, u8 BandWidthID)
+{
+       u8              eRFPath;
+       u32             rfReg0x26;
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(pAdapter);
+
+
+       if (RateIdx < MPT_RATE_6M) {    // CCK rate,for 88cu
+               rfReg0x26 = 0xf400;
+       }
+       else if ((RateIdx >= MPT_RATE_6M) && (RateIdx <= MPT_RATE_54M)) {// OFDM rate,for 88cu
+               if ((4 == Channel) || (8 == Channel) || (12 == Channel))
+                       rfReg0x26 = 0xf000;
+               else if ((5 == Channel) || (7 == Channel) || (13 == Channel) || (14 == Channel))
+                       rfReg0x26 = 0xf400;
+               else
+                       rfReg0x26 = 0x4f200;
+       }
+       else if ((RateIdx >= MPT_RATE_MCS0) && (RateIdx <= MPT_RATE_MCS15)) {// MCS 20M ,for 88cu // MCS40M rate,for 88cu
+
+               if (HT_CHANNEL_WIDTH_20 == BandWidthID) {
+                       if ((4 == Channel) || (8 == Channel))
+                               rfReg0x26 = 0xf000;
+                       else if ((5 == Channel) || (7 == Channel) || (13 == Channel) || (14 == Channel))
+                               rfReg0x26 = 0xf400;
+                       else
+                               rfReg0x26 = 0x4f200;
+               }
+               else{
+                       if ((4 == Channel) || (8 == Channel))
+                               rfReg0x26 = 0xf000;
+                       else if ((5 == Channel) || (7 == Channel))
+                               rfReg0x26 = 0xf400;
+                       else
+                               rfReg0x26 = 0x4f200;
+               }
+       }
+
+//     RT_TRACE(COMP_CMD, DBG_LOUD, ("\n mpt_AdjustRFRegByRateByChan92CU():Chan:%d Rate=%d rfReg0x26:0x%08x\n",Channel, RateIdx,rfReg0x26));
+       for (eRFPath = 0; eRFPath < pHalData->NumTotalRFPath; eRFPath++) {
+               write_rfreg(pAdapter, eRFPath, RF_SYN_G2, rfReg0x26);
+       }
+}
+#endif
+/*-----------------------------------------------------------------------------
+ * Function:   mpt_SwitchRfSetting
+ *
+ * Overview:   Change RF Setting when we siwthc channel/rate/BW for MP.
+ *
+ * Input:       IN     PADAPTER                                pAdapter
+ *
+ * Output:      NONE
+ *
+ * Return:      NONE
+ *
+ * Revised History:
+ * When                        Who             Remark
+ * 01/08/2009  MHC             Suggestion from SD3 Willis for 92S series.
+ * 01/09/2009  MHC             Add CCK modification for 40MHZ. Suggestion from SD3.
+ *
+ *---------------------------------------------------------------------------*/
+static void mpt_SwitchRfSetting(PADAPTER pAdapter)
+{
+       Hal_mpt_SwitchRfSetting(pAdapter);
+    }
+
+/*---------------------------hal\rtl8192c\MPT_Phy.c---------------------------*/
+/*---------------------------hal\rtl8192c\MPT_HelperFunc.c---------------------------*/
+static void MPT_CCKTxPowerAdjust(PADAPTER Adapter, BOOLEAN bInCH14)
+{
+       Hal_MPT_CCKTxPowerAdjust(Adapter,bInCH14);
+}
+
+static void MPT_CCKTxPowerAdjustbyIndex(PADAPTER pAdapter, BOOLEAN beven)
+{
+       Hal_MPT_CCKTxPowerAdjustbyIndex(pAdapter,beven);
+       }
+
+/*---------------------------hal\rtl8192c\MPT_HelperFunc.c---------------------------*/
+
+/*
+ * SetChannel
+ * Description
+ *     Use H2C command to change channel,
+ *     not only modify rf register, but also other setting need to be done.
+ */
+void SetChannel(PADAPTER pAdapter)
+{
+       Hal_SetChannel(pAdapter);
+
+}
+
+/*
+ * Notice
+ *     Switch bandwitdth may change center frequency(channel)
+ */
+void SetBandwidth(PADAPTER pAdapter)
+{
+       Hal_SetBandwidth(pAdapter);
+
+}
+
+static void SetCCKTxPower(PADAPTER pAdapter, u8 *TxPower)
+{
+       Hal_SetCCKTxPower(pAdapter,TxPower);
+}
+
+static void SetOFDMTxPower(PADAPTER pAdapter, u8 *TxPower)
+{
+       Hal_SetOFDMTxPower(pAdapter,TxPower);
+       }
+
+
+void SetAntenna(PADAPTER pAdapter)
+       {
+       Hal_SetAntenna(pAdapter);
+}
+
+void   SetAntennaPathPower(PADAPTER pAdapter)
+{
+       Hal_SetAntennaPathPower(pAdapter);
+}
+
+void SetTxPower(PADAPTER pAdapter)
+{
+       Hal_SetTxPower(pAdapter);
+       }
+
+void SetTxAGCOffset(PADAPTER pAdapter, u32 ulTxAGCOffset)
+{
+       u32 TxAGCOffset_B, TxAGCOffset_C, TxAGCOffset_D,tmpAGC;
+
+       TxAGCOffset_B = (ulTxAGCOffset&0x000000ff);
+       TxAGCOffset_C = ((ulTxAGCOffset&0x0000ff00)>>8);
+       TxAGCOffset_D = ((ulTxAGCOffset&0x00ff0000)>>16);
+
+       tmpAGC = (TxAGCOffset_D<<8 | TxAGCOffset_C<<4 | TxAGCOffset_B);
+       write_bbreg(pAdapter, rFPGA0_TxGainStage,
+                       (bXBTxAGC|bXCTxAGC|bXDTxAGC), tmpAGC);
+}
+
+void SetDataRate(PADAPTER pAdapter)
+{
+       Hal_SetDataRate(pAdapter);
+}
+
+#if  !defined (CONFIG_RTL8192C)  &&  !defined (CONFIG_RTL8192D)
+/*------------------------------Define structure----------------------------*/
+typedef struct _R_ANTENNA_SELECT_OFDM {
+       u32     r_tx_antenna:4;
+       u32     r_ant_l:4;
+       u32     r_ant_non_ht:4;
+       u32     r_ant_ht1:4;
+       u32     r_ant_ht2:4;
+       u32     r_ant_ht_s1:4;
+       u32     r_ant_non_ht_s1:4;
+       u32     OFDM_TXSC:2;
+       u32     Reserved:2;
+}R_ANTENNA_SELECT_OFDM;
+
+typedef struct _R_ANTENNA_SELECT_CCK {
+       u8      r_cckrx_enable_2:2;
+       u8      r_cckrx_enable:2;
+       u8      r_ccktx_enable:4;
+}R_ANTENNA_SELECT_CCK;
+#endif
+
+s32 SetThermalMeter(PADAPTER pAdapter, u8 target_ther)
+{
+       return Hal_SetThermalMeter( pAdapter, target_ther);
+}
+
+static void TriggerRFThermalMeter(PADAPTER pAdapter)
+{
+       Hal_TriggerRFThermalMeter(pAdapter);
+}
+
+static u8 ReadRFThermalMeter(PADAPTER pAdapter)
+{
+       return Hal_ReadRFThermalMeter(pAdapter);
+}
+
+void GetThermalMeter(PADAPTER pAdapter, u8 *value)
+{
+       Hal_GetThermalMeter(pAdapter,value);
+}
+
+void SetSingleCarrierTx(PADAPTER pAdapter, u8 bStart)
+{
+       Hal_SetSingleCarrierTx(pAdapter,bStart);
+}
+
+void SetSingleToneTx(PADAPTER pAdapter, u8 bStart)
+{
+       Hal_SetSingleToneTx(pAdapter,bStart);
+}
+
+void SetCarrierSuppressionTx(PADAPTER pAdapter, u8 bStart)
+{
+       Hal_SetCarrierSuppressionTx(pAdapter, bStart);
+}
+
+void SetCCKContinuousTx(PADAPTER pAdapter, u8 bStart)
+               {
+       Hal_SetCCKContinuousTx(pAdapter,bStart);
+               }
+
+void SetOFDMContinuousTx(PADAPTER pAdapter, u8 bStart)
+        {
+   Hal_SetOFDMContinuousTx( pAdapter, bStart);
+}/* mpt_StartOfdmContTx */
+
+void SetContinuousTx(PADAPTER pAdapter, u8 bStart)
+{
+       Hal_SetContinuousTx(pAdapter,bStart);
+}
+
+//------------------------------------------------------------------------------
+static void dump_mpframe(PADAPTER padapter, struct xmit_frame *pmpframe)
+{
+       rtw_hal_mgnt_xmit(padapter, pmpframe);
+}
+
+static struct xmit_frame *alloc_mp_xmitframe(struct xmit_priv *pxmitpriv)
+{
+       struct xmit_frame       *pmpframe;
+       struct xmit_buf *pxmitbuf;
+
+       if ((pmpframe = rtw_alloc_xmitframe(pxmitpriv)) == NULL)
+       {
+               return NULL;
+       }
+
+       if ((pxmitbuf = rtw_alloc_xmitbuf(pxmitpriv)) == NULL)
+       {
+               rtw_free_xmitframe(pxmitpriv, pmpframe);
+               return NULL;
+       }
+
+       pmpframe->frame_tag = MP_FRAMETAG;
+
+       pmpframe->pxmitbuf = pxmitbuf;
+
+       pmpframe->buf_addr = pxmitbuf->pbuf;
+
+       pxmitbuf->priv_data = pmpframe;
+
+       return pmpframe;
+
+}
+
+static thread_return mp_xmit_packet_thread(thread_context context)
+{
+       struct xmit_frame       *pxmitframe;
+       struct mp_tx            *pmptx;
+       struct mp_priv  *pmp_priv;
+       struct xmit_priv        *pxmitpriv;
+       PADAPTER padapter;
+
+       pmp_priv = (struct mp_priv *)context;
+       pmptx = &pmp_priv->tx;
+       padapter = pmp_priv->papdater;
+       pxmitpriv = &(padapter->xmitpriv);
+
+       thread_enter("RTW_MP_THREAD");
+
+       DBG_871X("%s:pkTx Start\n", __func__);
+       while (1) {
+               pxmitframe = alloc_mp_xmitframe(pxmitpriv);
+               if (pxmitframe == NULL) {
+                       if (pmptx->stop ||
+                           padapter->bSurpriseRemoved ||
+                           padapter->bDriverStopped) {
+                               goto exit;
+                       }
+                       else {
+                               rtw_msleep_os(1);
+                               continue;
+                       }
+               }
+
+               _rtw_memcpy((u8 *)(pxmitframe->buf_addr+TXDESC_OFFSET), pmptx->buf, pmptx->write_size);
+               _rtw_memcpy(&(pxmitframe->attrib), &(pmptx->attrib), sizeof(struct pkt_attrib));
+
+               dump_mpframe(padapter, pxmitframe);
+
+               pmptx->sended++;
+               pmp_priv->tx_pktcount++;
+
+               if (pmptx->stop ||
+                   padapter->bSurpriseRemoved ||
+                   padapter->bDriverStopped)
+                       goto exit;
+               if ((pmptx->count != 0) &&
+                   (pmptx->count == pmptx->sended))
+                       goto exit;
+
+               flush_signals_thread();
+       }
+
+exit:
+       //DBG_871X("%s:pkTx Exit\n", __func__);
+       rtw_mfree(pmptx->pallocated_buf, pmptx->buf_size);
+       pmptx->pallocated_buf = NULL;
+       pmptx->stop = 1;
+
+       thread_exit();
+}
+
+void fill_txdesc_for_mp(PADAPTER padapter, struct tx_desc *ptxdesc)
+{
+       struct mp_priv *pmp_priv = &padapter->mppriv;
+       _rtw_memcpy(ptxdesc, &(pmp_priv->tx.desc), TXDESC_SIZE);
+}
+
+void SetPacketTx(PADAPTER padapter)
+{
+       u8 *ptr, *pkt_start, *pkt_end;
+       u32 pkt_size;
+       struct tx_desc *desc;
+       struct rtw_ieee80211_hdr *hdr;
+       u8 payload;
+       s32 bmcast;
+       struct pkt_attrib *pattrib;
+       struct mp_priv *pmp_priv;
+
+
+       pmp_priv = &padapter->mppriv;
+       if (pmp_priv->tx.stop) return;
+       pmp_priv->tx.sended = 0;
+       pmp_priv->tx.stop = 0;
+       pmp_priv->tx_pktcount = 0;
+
+       //3 1. update_attrib()
+       pattrib = &pmp_priv->tx.attrib;
+       _rtw_memcpy(pattrib->src, padapter->eeprompriv.mac_addr, ETH_ALEN);
+       _rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
+       _rtw_memcpy(pattrib->ra, pattrib->dst, ETH_ALEN);
+       bmcast = IS_MCAST(pattrib->ra);
+       if (bmcast) {
+               pattrib->mac_id = 1;
+               pattrib->psta = rtw_get_bcmc_stainfo(padapter);
+       } else {
+               pattrib->mac_id = 0;
+               pattrib->psta = rtw_get_stainfo(&padapter->stapriv, get_bssid(&padapter->mlmepriv));
+       }
+
+       pattrib->last_txcmdsz = pattrib->hdrlen + pattrib->pktlen;
+
+       //3 2. allocate xmit buffer
+       pkt_size = pattrib->last_txcmdsz;
+
+       if (pmp_priv->tx.pallocated_buf)
+               rtw_mfree(pmp_priv->tx.pallocated_buf, pmp_priv->tx.buf_size);
+       pmp_priv->tx.write_size = pkt_size;
+       pmp_priv->tx.buf_size = pkt_size + XMITBUF_ALIGN_SZ;
+       pmp_priv->tx.pallocated_buf = rtw_zmalloc(pmp_priv->tx.buf_size);
+       if (pmp_priv->tx.pallocated_buf == NULL) {
+               DBG_871X("%s: malloc(%d) fail!!\n", __func__, pmp_priv->tx.buf_size);
+               return;
+       }
+       pmp_priv->tx.buf = (u8 *)N_BYTE_ALIGMENT((SIZE_PTR)(pmp_priv->tx.pallocated_buf), XMITBUF_ALIGN_SZ);
+       ptr = pmp_priv->tx.buf;
+
+       desc = &(pmp_priv->tx.desc);
+       _rtw_memset(desc, 0, TXDESC_SIZE);
+       pkt_start = ptr;
+       pkt_end = pkt_start + pkt_size;
+
+       //3 3. init TX descriptor
+       // offset 0
+       //desc->txdw0 |= cpu_to_le32(pkt_size & 0x0000FFFF); // packet size
+       //desc->txdw0 |= cpu_to_le32(OWN | FSG | LSG);
+       //desc->txdw0 |= cpu_to_le32(((TXDESC_SIZE + OFFSET_SZ) << OFFSET_SHT) & 0x00FF0000); //32 bytes for TX Desc
+       //if (bmcast) desc->txdw0 |= cpu_to_le32(BMC); // broadcast packet
+
+       // offset 4
+       desc->txdw1 |= cpu_to_le32(BK); // don't aggregate(AMPDU)
+       desc->txdw1 |= cpu_to_le32((pattrib->mac_id) & 0x1F); //CAM_ID(MAC_ID)
+       desc->txdw1 |= cpu_to_le32((pattrib->qsel << QSEL_SHT) & 0x00001F00); // Queue Select, TID
+       desc->txdw1 |= cpu_to_le32((pattrib->raid << Rate_ID_SHT) & 0x000F0000); // Rate Adaptive ID
+
+       // offset 8
+       // offset 12
+       //desc->txdw3 |= cpu_to_le32((pattrib->seqnum << SEQ_SHT) & 0xffff0000);
+
+       // offset 16
+       //desc->txdw4 |= cpu_to_le32(QoS);
+       desc->txdw4 |= cpu_to_le32(HW_SEQ_EN);
+       desc->txdw4 |= cpu_to_le32(USERATE);
+       desc->txdw4 |= cpu_to_le32(DISDATAFB);
+
+       if( pmp_priv->preamble ){
+               if (pmp_priv->rateidx <=  MPT_RATE_54M)
+                       desc->txdw4 |= cpu_to_le32(DATA_SHORT); // CCK Short Preamble
+       }
+       if (pmp_priv->bandwidth == HT_CHANNEL_WIDTH_40)
+               desc->txdw4 |= cpu_to_le32(DATA_BW);
+
+       // offset 20
+       desc->txdw5 |= cpu_to_le32(pmp_priv->rateidx & 0x0000001F);
+
+       if( pmp_priv->preamble ){
+               if (pmp_priv->rateidx > MPT_RATE_54M)
+                       desc->txdw5 |= cpu_to_le32(SGI); // MCS Short Guard Interval
+       }
+       desc->txdw5 |= cpu_to_le32(0x0001FF00); // DATA/RTS Rate Fallback Limit
+
+       //3 4. make wlan header, make_wlanhdr()
+       hdr = (struct rtw_ieee80211_hdr *)pkt_start;
+       SetFrameSubType(&hdr->frame_ctl, pattrib->subtype);
+       _rtw_memcpy(hdr->addr1, pattrib->dst, ETH_ALEN); // DA
+       _rtw_memcpy(hdr->addr2, pattrib->src, ETH_ALEN); // SA
+       _rtw_memcpy(hdr->addr3, get_bssid(&padapter->mlmepriv), ETH_ALEN); // RA, BSSID
+
+       //3 5. make payload
+       ptr = pkt_start + pattrib->hdrlen;
+
+       switch (pmp_priv->tx.payload) {
+               case 0:
+                       payload = 0x00;
+                       break;
+               case 1:
+                       payload = 0x5a;
+                       break;
+               case 2:
+                       payload = 0xa5;
+                       break;
+               case 3:
+                       payload = 0xff;
+                       break;
+               default:
+                       payload = 0x00;
+                       break;
+       }
+
+       _rtw_memset(ptr, payload, pkt_end - ptr);
+
+       //3 6. start thread
+#ifdef PLATFORM_LINUX
+       pmp_priv->tx.PktTxThread = kthread_run(mp_xmit_packet_thread, pmp_priv, "RTW_MP_THREAD");
+       if (IS_ERR(pmp_priv->tx.PktTxThread))
+               DBG_871X("Create PktTx Thread Fail !!!!!\n");
+#endif
+#ifdef PLATFORM_FREEBSD
+{
+       struct proc *p;
+       struct thread *td;
+       pmp_priv->tx.PktTxThread = kproc_kthread_add(mp_xmit_packet_thread, pmp_priv,
+                                       &p, &td, RFHIGHPID, 0, "MPXmitThread", "MPXmitThread");
+
+       if (pmp_priv->tx.PktTxThread < 0)
+               DBG_871X("Create PktTx Thread Fail !!!!!\n");
+}
+#endif
+}
+
+void SetPacketRx(PADAPTER pAdapter, u8 bStartRx)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(pAdapter);
+
+       if(bStartRx)
+       {
+               pHalData->ReceiveConfig = AAP | APM | AM | AB | APP_ICV | ADF | AMF | HTC_LOC_CTRL | APP_MIC | APP_PHYSTS;
+
+               pHalData->ReceiveConfig |= ACRC32;
+
+               rtw_write32(pAdapter, REG_RCR, pHalData->ReceiveConfig);
+
+               // Accept all data frames
+               rtw_write16(pAdapter, REG_RXFLTMAP2, 0xFFFF);
+       }
+       else
+       {
+               rtw_write32(pAdapter, REG_RCR, 0);
+       }
+}
+
+void ResetPhyRxPktCount(PADAPTER pAdapter)
+{
+       u32 i, phyrx_set = 0;
+
+       for (i = 0; i <= 0xF; i++) {
+               phyrx_set = 0;
+               phyrx_set |= _RXERR_RPT_SEL(i); //select
+               phyrx_set |= RXERR_RPT_RST;     // set counter to zero
+               rtw_write32(pAdapter, REG_RXERR_RPT, phyrx_set);
+       }
+}
+
+static u32 GetPhyRxPktCounts(PADAPTER pAdapter, u32 selbit)
+{
+       //selection
+       u32 phyrx_set = 0, count = 0;
+
+       phyrx_set = _RXERR_RPT_SEL(selbit & 0xF);
+       rtw_write32(pAdapter, REG_RXERR_RPT, phyrx_set);
+
+       //Read packet count
+       count = rtw_read32(pAdapter, REG_RXERR_RPT) & RXERR_COUNTER_MASK;
+
+       return count;
+}
+
+u32 GetPhyRxPktReceived(PADAPTER pAdapter)
+{
+       u32 OFDM_cnt = 0, CCK_cnt = 0, HT_cnt = 0;
+
+       OFDM_cnt = GetPhyRxPktCounts(pAdapter, RXERR_TYPE_OFDM_MPDU_OK);
+       CCK_cnt = GetPhyRxPktCounts(pAdapter, RXERR_TYPE_CCK_MPDU_OK);
+       HT_cnt = GetPhyRxPktCounts(pAdapter, RXERR_TYPE_HT_MPDU_OK);
+
+       return OFDM_cnt + CCK_cnt + HT_cnt;
+}
+
+u32 GetPhyRxPktCRC32Error(PADAPTER pAdapter)
+{
+       u32 OFDM_cnt = 0, CCK_cnt = 0, HT_cnt = 0;
+
+       OFDM_cnt = GetPhyRxPktCounts(pAdapter, RXERR_TYPE_OFDM_MPDU_FAIL);
+       CCK_cnt = GetPhyRxPktCounts(pAdapter, RXERR_TYPE_CCK_MPDU_FAIL);
+       HT_cnt = GetPhyRxPktCounts(pAdapter, RXERR_TYPE_HT_MPDU_FAIL);
+
+       return OFDM_cnt + CCK_cnt + HT_cnt;
+}
+
+//reg 0x808[9:0]: FFT data x
+//reg 0x808[22]:  0  -->  1  to get 1 FFT data y
+//reg 0x8B4[15:0]: FFT data y report
+static u32 GetPSDData(PADAPTER pAdapter, u32 point)
+{
+       int psd_val;
+
+
+       psd_val = rtw_read32(pAdapter, 0x808);
+       psd_val &= 0xFFBFFC00;
+       psd_val |= point;
+
+       rtw_write32(pAdapter, 0x808, psd_val);
+       rtw_mdelay_os(1);
+       psd_val |= 0x00400000;
+
+       rtw_write32(pAdapter, 0x808, psd_val);
+       rtw_mdelay_os(1);
+       psd_val = rtw_read32(pAdapter, 0x8B4);
+
+       psd_val &= 0x0000FFFF;
+
+       return psd_val;
+}
+
+/*
+ * pts start_point_min         stop_point_max
+ * 128 64                      64 + 128 = 192
+ * 256 128                     128 + 256 = 384
+ * 512 256                     256 + 512 = 768
+ * 1024        512                     512 + 1024 = 1536
+ *
+ */
+u32 mp_query_psd(PADAPTER pAdapter, u8 *data)
+{
+       u32 i, psd_pts=0, psd_start=0, psd_stop=0;
+       u32 psd_data=0;
+
+#ifdef PLATFORM_LINUX
+       if (!netif_running(pAdapter->pnetdev)) {
+               RT_TRACE(_module_mp_, _drv_warning_, ("mp_query_psd: Fail! interface not opened!\n"));
+               return 0;
+       }
+#endif
+
+       if (check_fwstate(&pAdapter->mlmepriv, WIFI_MP_STATE) == _FALSE) {
+               RT_TRACE(_module_mp_, _drv_warning_, ("mp_query_psd: Fail! not in MP mode!\n"));
+               return 0;
+       }
+
+       if (strlen(data) == 0) { //default value
+               psd_pts = 128;
+               psd_start = 64;
+               psd_stop = 128;
+       } else {
+               sscanf(data, "pts=%d,start=%d,stop=%d", &psd_pts, &psd_start, &psd_stop);
+       }
+
+       _rtw_memset(data, '\0', sizeof(data));
+
+       i = psd_start;
+       while (i < psd_stop)
+       {
+               if (i >= psd_pts) {
+                       psd_data = GetPSDData(pAdapter, i-psd_pts);
+               } else {
+                       psd_data = GetPSDData(pAdapter, i);
+               }
+               sprintf(data, "%s%x ", data, psd_data);
+               i++;
+       }
+
+       #ifdef CONFIG_LONG_DELAY_ISSUE
+       rtw_msleep_os(100);
+       #else
+       rtw_mdelay_os(100);
+       #endif
+
+       return strlen(data)+1;
+}
+
+#endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/core/rtw_mp_ioctl.c b/drivers/net/wireless/realtek/rtl8192cu/core/rtw_mp_ioctl.c
new file mode 100644 (file)
index 0000000..a0d8680
--- /dev/null
@@ -0,0 +1,2953 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#define _RTW_MP_IOCTL_C_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <mlme_osdep.h>
+
+//#include <rtw_mp.h>
+#include <rtw_mp_ioctl.h>
+
+
+//****************  oid_rtl_seg_81_85   section start ****************
+NDIS_STATUS oid_rt_wireless_mode_hdl(struct oid_par_priv *poid_par_priv)
+{
+       NDIS_STATUS status = NDIS_STATUS_SUCCESS;
+       PADAPTER Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+_func_enter_;
+
+       if (poid_par_priv->information_buf_len < sizeof(u8))
+               return NDIS_STATUS_INVALID_LENGTH;
+
+       if (poid_par_priv->type_of_oid == SET_OID) {
+               Adapter->registrypriv.wireless_mode = *(u8*)poid_par_priv->information_buf;
+       } else if (poid_par_priv->type_of_oid == QUERY_OID) {
+               *(u8*)poid_par_priv->information_buf = Adapter->registrypriv.wireless_mode;
+               *poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
+                RT_TRACE(_module_mp_, _drv_info_, ("-query Wireless Mode=%d\n", Adapter->registrypriv.wireless_mode));
+       } else {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+       }
+
+_func_exit_;
+
+       return status;
+}
+//****************  oid_rtl_seg_81_87_80   section start ****************
+NDIS_STATUS oid_rt_pro_write_bb_reg_hdl(struct oid_par_priv *poid_par_priv)
+{
+#ifdef PLATFORM_OS_XP
+       _irqL oldirql;
+#endif
+       struct bb_reg_param *pbbreg;
+       u16 offset;
+       u32 value;
+       NDIS_STATUS status = NDIS_STATUS_SUCCESS;
+       PADAPTER Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+_func_enter_;
+
+       RT_TRACE(_module_mp_, _drv_notice_, ("+oid_rt_pro_write_bb_reg_hdl\n"));
+
+       if (poid_par_priv->type_of_oid != SET_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       if (poid_par_priv->information_buf_len < sizeof(struct bb_reg_param))
+               return NDIS_STATUS_INVALID_LENGTH;
+
+       pbbreg = (struct bb_reg_param *)(poid_par_priv->information_buf);
+
+       offset = (u16)(pbbreg->offset) & 0xFFF; //0ffset :0x800~0xfff
+       if (offset < BB_REG_BASE_ADDR) offset |= BB_REG_BASE_ADDR;
+
+       value = pbbreg->value;
+
+       RT_TRACE(_module_mp_, _drv_notice_,
+                ("oid_rt_pro_write_bb_reg_hdl: offset=0x%03X value=0x%08X\n",
+                 offset, value));
+
+       _irqlevel_changed_(&oldirql, LOWER);
+       write_bbreg(Adapter, offset, 0xFFFFFFFF, value);
+       _irqlevel_changed_(&oldirql, RAISE);
+
+_func_exit_;
+
+       return status;
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_pro_read_bb_reg_hdl(struct oid_par_priv *poid_par_priv)
+{
+#ifdef PLATFORM_OS_XP
+       _irqL oldirql;
+#endif
+       struct bb_reg_param *pbbreg;
+       u16 offset;
+       u32 value;
+       NDIS_STATUS status = NDIS_STATUS_SUCCESS;
+       PADAPTER Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+_func_enter_;
+
+       RT_TRACE(_module_mp_, _drv_notice_, ("+oid_rt_pro_read_bb_reg_hdl\n"));
+
+       if (poid_par_priv->type_of_oid != QUERY_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       if (poid_par_priv->information_buf_len < sizeof(struct bb_reg_param))
+               return NDIS_STATUS_INVALID_LENGTH;
+
+       pbbreg = (struct bb_reg_param *)(poid_par_priv->information_buf);
+
+       offset = (u16)(pbbreg->offset) & 0xFFF; //0ffset :0x800~0xfff
+       if (offset < BB_REG_BASE_ADDR) offset |= BB_REG_BASE_ADDR;
+
+       _irqlevel_changed_(&oldirql, LOWER);
+       value = read_bbreg(Adapter, offset, 0xFFFFFFFF);
+       _irqlevel_changed_(&oldirql, RAISE);
+
+       pbbreg->value = value;
+       *poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
+
+       RT_TRACE(_module_mp_, _drv_notice_,
+                ("-oid_rt_pro_read_bb_reg_hdl: offset=0x%03X value:0x%08X\n",
+                 offset, value));
+_func_exit_;
+
+       return status;
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_pro_write_rf_reg_hdl(struct oid_par_priv *poid_par_priv)
+{
+#ifdef PLATFORM_OS_XP
+       _irqL oldirql;
+#endif
+       struct rf_reg_param *pbbreg;
+       u8 path;
+       u8 offset;
+       u32 value;
+       NDIS_STATUS status = NDIS_STATUS_SUCCESS;
+       PADAPTER Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+_func_enter_;
+
+       RT_TRACE(_module_mp_, _drv_notice_, ("+oid_rt_pro_write_rf_reg_hdl\n"));
+
+       if (poid_par_priv->type_of_oid != SET_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       if (poid_par_priv->information_buf_len < sizeof(struct rf_reg_param))
+               return NDIS_STATUS_INVALID_LENGTH;
+
+       pbbreg = (struct rf_reg_param *)(poid_par_priv->information_buf);
+
+       if (pbbreg->path >= MAX_RF_PATH_NUMS)
+               return NDIS_STATUS_NOT_ACCEPTED;
+       if (pbbreg->offset > 0xFF)
+               return NDIS_STATUS_NOT_ACCEPTED;
+       if (pbbreg->value > 0xFFFFF)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       path = (u8)pbbreg->path;
+       offset = (u8)pbbreg->offset;
+       value = pbbreg->value;
+
+       RT_TRACE(_module_mp_, _drv_notice_,
+                ("oid_rt_pro_write_rf_reg_hdl: path=%d offset=0x%02X value=0x%05X\n",
+                 path, offset, value));
+
+       _irqlevel_changed_(&oldirql, LOWER);
+       write_rfreg(Adapter, path, offset, value);
+       _irqlevel_changed_(&oldirql, RAISE);
+
+_func_exit_;
+
+       return status;
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_pro_read_rf_reg_hdl(struct oid_par_priv *poid_par_priv)
+{
+#ifdef PLATFORM_OS_XP
+       _irqL oldirql;
+#endif
+       struct rf_reg_param *pbbreg;
+       u8 path;
+       u8 offset;
+       u32 value;
+       PADAPTER Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+       NDIS_STATUS status = NDIS_STATUS_SUCCESS;
+
+_func_enter_;
+
+       RT_TRACE(_module_mp_, _drv_notice_, ("+oid_rt_pro_read_rf_reg_hdl\n"));
+
+       if (poid_par_priv->type_of_oid != QUERY_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       if (poid_par_priv->information_buf_len < sizeof(struct rf_reg_param))
+               return NDIS_STATUS_INVALID_LENGTH;
+
+       pbbreg = (struct rf_reg_param *)(poid_par_priv->information_buf);
+
+       if (pbbreg->path >= MAX_RF_PATH_NUMS)
+               return NDIS_STATUS_NOT_ACCEPTED;
+       if (pbbreg->offset > 0xFF)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       path = (u8)pbbreg->path;
+       offset = (u8)pbbreg->offset;
+
+       _irqlevel_changed_(&oldirql, LOWER);
+       value = read_rfreg(Adapter, path, offset);
+       _irqlevel_changed_(&oldirql, RAISE);
+
+       pbbreg->value = value;
+
+       *poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
+
+       RT_TRACE(_module_mp_, _drv_notice_,
+                ("-oid_rt_pro_read_rf_reg_hdl: path=%d offset=0x%02X value=0x%05X\n",
+                 path, offset, value));
+
+_func_exit_;
+
+       return status;
+}
+//****************  oid_rtl_seg_81_87_00   section end****************
+//------------------------------------------------------------------------------
+
+//****************  oid_rtl_seg_81_80_00   section start ****************
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_pro_set_data_rate_hdl(struct oid_par_priv *poid_par_priv)
+{
+#ifdef PLATFORM_OS_XP
+       _irqL           oldirql;
+#endif
+       u32             ratevalue;//4
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+       PADAPTER        Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+_func_enter_;
+
+       RT_TRACE(_module_mp_, _drv_notice_,
+                ("+oid_rt_pro_set_data_rate_hdl\n"));
+
+       if (poid_par_priv->type_of_oid != SET_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       if (poid_par_priv->information_buf_len != sizeof(u32))
+               return NDIS_STATUS_INVALID_LENGTH;
+
+       ratevalue = *((u32*)poid_par_priv->information_buf);//4
+       RT_TRACE(_module_mp_, _drv_notice_,
+                ("oid_rt_pro_set_data_rate_hdl: data rate idx=%d\n", ratevalue));
+       if (ratevalue >= MPT_RATE_LAST)
+               return NDIS_STATUS_INVALID_DATA;
+
+       Adapter->mppriv.rateidx = ratevalue;
+
+       _irqlevel_changed_(&oldirql, LOWER);
+       SetDataRate(Adapter);
+       _irqlevel_changed_(&oldirql, RAISE);
+
+_func_exit_;
+
+       return status;
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_pro_start_test_hdl(struct oid_par_priv *poid_par_priv)
+{
+#ifdef PLATFORM_OS_XP
+       _irqL           oldirql;
+#endif
+       u32             mode;
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+       PADAPTER        Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+_func_enter_;
+
+       RT_TRACE(_module_mp_, _drv_notice_, ("+oid_rt_pro_start_test_hdl\n"));
+
+       if (Adapter->registrypriv.mp_mode == 0)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       if (poid_par_priv->type_of_oid != SET_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       _irqlevel_changed_(&oldirql, LOWER);
+
+       //IQCalibrateBcut(Adapter);
+
+       mode = *((u32*)poid_par_priv->information_buf);
+       Adapter->mppriv.mode = mode;// 1 for loopback
+
+       if (mp_start_test(Adapter) == _FAIL) {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               goto exit;
+       }
+
+exit:
+       _irqlevel_changed_(&oldirql, RAISE);
+
+       RT_TRACE(_module_mp_, _drv_notice_, ("-oid_rt_pro_start_test_hdl: mp_mode=%d\n", Adapter->mppriv.mode));
+
+_func_exit_;
+
+       return status;
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_pro_stop_test_hdl(struct oid_par_priv *poid_par_priv)
+{
+#ifdef PLATFORM_OS_XP
+       _irqL           oldirql;
+#endif
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+       PADAPTER        Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+_func_enter_;
+
+       RT_TRACE(_module_mp_, _drv_notice_, ("+Set OID_RT_PRO_STOP_TEST\n"));
+
+       if (poid_par_priv->type_of_oid != SET_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       _irqlevel_changed_(&oldirql, LOWER);
+       mp_stop_test(Adapter);
+       _irqlevel_changed_(&oldirql, RAISE);
+
+       RT_TRACE(_module_mp_, _drv_notice_, ("-Set OID_RT_PRO_STOP_TEST\n"));
+
+_func_exit_;
+
+       return status;
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_pro_set_channel_direct_call_hdl(struct oid_par_priv *poid_par_priv)
+{
+#ifdef PLATFORM_OS_XP
+       _irqL           oldirql;
+#endif
+       u32             Channel;
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+       PADAPTER        Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+_func_enter_;
+
+       RT_TRACE(_module_mp_, _drv_notice_, ("+oid_rt_pro_set_channel_direct_call_hdl\n"));
+
+       if (poid_par_priv->information_buf_len != sizeof(u32))
+               return NDIS_STATUS_INVALID_LENGTH;
+
+       if (poid_par_priv->type_of_oid == QUERY_OID) {
+               *((u32*)poid_par_priv->information_buf) = Adapter->mppriv.channel;
+               return NDIS_STATUS_SUCCESS;
+       }
+
+       if (poid_par_priv->type_of_oid != SET_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       Channel = *((u32*)poid_par_priv->information_buf);
+       RT_TRACE(_module_mp_, _drv_notice_, ("oid_rt_pro_set_channel_direct_call_hdl: Channel=%d\n", Channel));
+       if (Channel > 14)
+               return NDIS_STATUS_NOT_ACCEPTED;
+       Adapter->mppriv.channel = Channel;
+
+       _irqlevel_changed_(&oldirql, LOWER);
+       SetChannel(Adapter);
+       _irqlevel_changed_(&oldirql, RAISE);
+
+_func_exit_;
+
+       return status;
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_set_bandwidth_hdl(struct oid_par_priv *poid_par_priv)
+{
+#ifdef PLATFORM_OS_XP
+       _irqL           oldirql;
+#endif
+       u16             bandwidth;
+       u16             channel_offset;
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+       PADAPTER        padapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+_func_enter_;
+
+       RT_TRACE(_module_mp_, _drv_info_,
+                ("+oid_rt_set_bandwidth_hdl\n"));
+
+       if (poid_par_priv->type_of_oid != SET_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       if (poid_par_priv->information_buf_len < sizeof(u32))
+               return NDIS_STATUS_INVALID_LENGTH;
+
+       bandwidth = *((u32*)poid_par_priv->information_buf);//4
+       channel_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+
+       if (bandwidth != HT_CHANNEL_WIDTH_40)
+               bandwidth = HT_CHANNEL_WIDTH_20;
+       padapter->mppriv.bandwidth = (u8)bandwidth;
+       padapter->mppriv.prime_channel_offset = (u8)channel_offset;
+
+       _irqlevel_changed_(&oldirql, LOWER);
+       SetBandwidth(padapter);
+       _irqlevel_changed_(&oldirql, RAISE);
+
+       RT_TRACE(_module_mp_, _drv_notice_,
+                ("-oid_rt_set_bandwidth_hdl: bandwidth=%d channel_offset=%d\n",
+                 bandwidth, channel_offset));
+
+_func_exit_;
+
+       return status;
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_pro_set_antenna_bb_hdl(struct oid_par_priv *poid_par_priv)
+{
+#ifdef PLATFORM_OS_XP
+       _irqL           oldirql;
+#endif
+       u32             antenna;
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+       PADAPTER        Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+_func_enter_;
+
+       RT_TRACE(_module_mp_, _drv_notice_, ("+oid_rt_pro_set_antenna_bb_hdl\n"));
+
+       if (poid_par_priv->information_buf_len != sizeof(u32))
+               return NDIS_STATUS_INVALID_LENGTH;
+
+       if (poid_par_priv->type_of_oid == SET_OID)
+       {
+               antenna = *(u32*)poid_par_priv->information_buf;
+
+               Adapter->mppriv.antenna_tx = (u16)((antenna & 0xFFFF0000) >> 16);
+               Adapter->mppriv.antenna_rx = (u16)(antenna & 0x0000FFFF);
+               RT_TRACE(_module_mp_, _drv_notice_,
+                        ("oid_rt_pro_set_antenna_bb_hdl: tx_ant=0x%04x rx_ant=0x%04x\n",
+                         Adapter->mppriv.antenna_tx, Adapter->mppriv.antenna_rx));
+
+               _irqlevel_changed_(&oldirql, LOWER);
+               SetAntenna(Adapter);
+               _irqlevel_changed_(&oldirql, RAISE);
+       } else {
+               antenna = (Adapter->mppriv.antenna_tx << 16)|Adapter->mppriv.antenna_rx;
+               *(u32*)poid_par_priv->information_buf = antenna;
+       }
+
+_func_exit_;
+
+       return status;
+}
+
+NDIS_STATUS oid_rt_pro_set_tx_power_control_hdl(struct oid_par_priv *poid_par_priv)
+{
+#ifdef PLATFORM_OS_XP
+       _irqL           oldirql;
+#endif
+       u32             tx_pwr_idx;
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+       PADAPTER        Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+_func_enter_;
+
+       RT_TRACE(_module_mp_, _drv_info_, ("+oid_rt_pro_set_tx_power_control_hdl\n"));
+
+       if (poid_par_priv->type_of_oid != SET_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       if (poid_par_priv->information_buf_len != sizeof(u32))
+               return NDIS_STATUS_INVALID_LENGTH;
+
+       tx_pwr_idx = *((u32*)poid_par_priv->information_buf);
+       if (tx_pwr_idx > MAX_TX_PWR_INDEX_N_MODE)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       Adapter->mppriv.txpoweridx = (u8)tx_pwr_idx;
+
+       RT_TRACE(_module_mp_, _drv_notice_,
+                ("oid_rt_pro_set_tx_power_control_hdl: idx=0x%2x\n",
+                 Adapter->mppriv.txpoweridx));
+
+       _irqlevel_changed_(&oldirql, LOWER);
+       SetTxPower(Adapter);
+       _irqlevel_changed_(&oldirql, RAISE);
+
+_func_exit_;
+
+       return status;
+}
+
+//------------------------------------------------------------------------------
+//****************  oid_rtl_seg_81_80_20   section start ****************
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_pro_query_tx_packet_sent_hdl(struct oid_par_priv *poid_par_priv)
+{
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+       PADAPTER        Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+_func_enter_;
+
+       if (poid_par_priv->type_of_oid !=QUERY_OID) {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               return status;
+       }
+
+       if (poid_par_priv->information_buf_len == sizeof(ULONG)) {
+               *(ULONG*)poid_par_priv->information_buf =  Adapter->mppriv.tx_pktcount;
+               *poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
+       } else {
+               status = NDIS_STATUS_INVALID_LENGTH;
+       }
+
+_func_exit_;
+
+       return status;
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_pro_query_rx_packet_received_hdl(struct oid_par_priv *poid_par_priv)
+{
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+       PADAPTER        Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+_func_enter_;
+
+       if (poid_par_priv->type_of_oid != QUERY_OID) {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               return status;
+       }
+       RT_TRACE(_module_mp_, _drv_alert_, ("===> oid_rt_pro_query_rx_packet_received_hdl.\n"));
+       if (poid_par_priv->information_buf_len == sizeof(ULONG)) {
+               *(ULONG*)poid_par_priv->information_buf =  Adapter->mppriv.rx_pktcount;
+               *poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
+               RT_TRACE(_module_mp_, _drv_alert_, ("recv_ok:%d \n",Adapter->mppriv.rx_pktcount));
+       } else {
+               status = NDIS_STATUS_INVALID_LENGTH;
+       }
+
+_func_exit_;
+
+       return status;
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_pro_query_rx_packet_crc32_error_hdl(struct oid_par_priv *poid_par_priv)
+{
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+       PADAPTER        Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+_func_enter_;
+
+       if (poid_par_priv->type_of_oid != QUERY_OID) {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               return status;
+       }
+       RT_TRACE(_module_mp_, _drv_alert_, ("===> oid_rt_pro_query_rx_packet_crc32_error_hdl.\n"));
+       if (poid_par_priv->information_buf_len == sizeof(ULONG)) {
+               *(ULONG*)poid_par_priv->information_buf =  Adapter->mppriv.rx_crcerrpktcount;
+               *poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
+               RT_TRACE(_module_mp_, _drv_alert_, ("recv_err:%d \n",Adapter->mppriv.rx_crcerrpktcount));
+       } else {
+               status = NDIS_STATUS_INVALID_LENGTH;
+       }
+
+_func_exit_;
+
+       return status;
+}
+//------------------------------------------------------------------------------
+
+NDIS_STATUS oid_rt_pro_reset_tx_packet_sent_hdl(struct oid_par_priv *poid_par_priv)
+{
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+       PADAPTER        Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+_func_enter_;
+
+       if (poid_par_priv->type_of_oid != SET_OID) {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               return status;
+       }
+
+       RT_TRACE(_module_mp_, _drv_alert_, ("===> oid_rt_pro_reset_tx_packet_sent_hdl.\n"));
+       Adapter->mppriv.tx_pktcount = 0;
+
+_func_exit_;
+
+       return status;
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_pro_reset_rx_packet_received_hdl(struct oid_par_priv *poid_par_priv)
+{
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+       PADAPTER        Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+_func_enter_;
+
+       if (poid_par_priv->type_of_oid != SET_OID)
+       {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               return status;
+       }
+
+       if (poid_par_priv->information_buf_len == sizeof(ULONG)) {
+               Adapter->mppriv.rx_pktcount = 0;
+               Adapter->mppriv.rx_crcerrpktcount = 0;
+       } else {
+               status = NDIS_STATUS_INVALID_LENGTH;
+       }
+
+_func_exit_;
+
+       return status;
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_reset_phy_rx_packet_count_hdl(struct oid_par_priv *poid_par_priv)
+{
+#ifdef PLATFORM_OS_XP
+       _irqL           oldirql;
+#endif
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+       PADAPTER        Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+_func_enter_;
+
+       if (poid_par_priv->type_of_oid != SET_OID) {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               return status;
+       }
+
+       _irqlevel_changed_(&oldirql, LOWER);
+       ResetPhyRxPktCount(Adapter);
+       _irqlevel_changed_(&oldirql, RAISE);
+
+_func_exit_;
+
+       return status;
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_get_phy_rx_packet_received_hdl(struct oid_par_priv *poid_par_priv)
+{
+#ifdef PLATFORM_OS_XP
+       _irqL           oldirql;
+#endif
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+       PADAPTER        Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+_func_enter_;
+
+       RT_TRACE(_module_mp_, _drv_info_, ("+oid_rt_get_phy_rx_packet_received_hdl\n"));
+
+       if (poid_par_priv->type_of_oid != QUERY_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       if (poid_par_priv->information_buf_len != sizeof(ULONG))
+               return NDIS_STATUS_INVALID_LENGTH;
+
+       _irqlevel_changed_(&oldirql, LOWER);
+       *(ULONG*)poid_par_priv->information_buf = GetPhyRxPktReceived(Adapter);
+       _irqlevel_changed_(&oldirql, RAISE);
+
+       *poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
+
+       RT_TRACE(_module_mp_, _drv_notice_, ("-oid_rt_get_phy_rx_packet_received_hdl: recv_ok=%d\n", *(ULONG*)poid_par_priv->information_buf));
+
+_func_exit_;
+
+       return status;
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_get_phy_rx_packet_crc32_error_hdl(struct oid_par_priv *poid_par_priv)
+{
+#ifdef PLATFORM_OS_XP
+       _irqL           oldirql;
+#endif
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+       PADAPTER        Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+_func_enter_;
+
+       RT_TRACE(_module_mp_, _drv_info_, ("+oid_rt_get_phy_rx_packet_crc32_error_hdl\n"));
+
+       if (poid_par_priv->type_of_oid != QUERY_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+
+       if (poid_par_priv->information_buf_len != sizeof(ULONG))
+               return NDIS_STATUS_INVALID_LENGTH;
+
+       _irqlevel_changed_(&oldirql, LOWER);
+       *(ULONG*)poid_par_priv->information_buf = GetPhyRxPktCRC32Error(Adapter);
+       _irqlevel_changed_(&oldirql, RAISE);
+
+       *poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
+
+       RT_TRACE(_module_mp_, _drv_info_, ("-oid_rt_get_phy_rx_packet_crc32_error_hdl: recv_err=%d\n", *(ULONG*)poid_par_priv->information_buf));
+
+_func_exit_;
+
+       return status;
+}
+//****************  oid_rtl_seg_81_80_20   section end ****************
+NDIS_STATUS oid_rt_pro_set_continuous_tx_hdl(struct oid_par_priv *poid_par_priv)
+{
+#ifdef PLATFORM_OS_XP
+       _irqL           oldirql;
+#endif
+       u32             bStartTest;
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+       PADAPTER        Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+_func_enter_;
+
+       RT_TRACE(_module_mp_, _drv_notice_, ("+oid_rt_pro_set_continuous_tx_hdl\n"));
+
+       if (poid_par_priv->type_of_oid != SET_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       bStartTest = *((u32*)poid_par_priv->information_buf);
+
+       _irqlevel_changed_(&oldirql, LOWER);
+       SetContinuousTx(Adapter,(u8)bStartTest);
+       if (bStartTest) {
+               struct mp_priv *pmp_priv = &Adapter->mppriv;
+               if (pmp_priv->tx.stop == 0) {
+                       pmp_priv->tx.stop = 1;
+                       DBG_871X("%s: pkt tx is running...\n", __func__);
+                       rtw_msleep_os(5);
+               }
+               pmp_priv->tx.stop = 0;
+               pmp_priv->tx.count = 1;
+               SetPacketTx(Adapter);
+       }
+       _irqlevel_changed_(&oldirql, RAISE);
+
+_func_exit_;
+
+       return status;
+}
+
+NDIS_STATUS oid_rt_pro_set_single_carrier_tx_hdl(struct oid_par_priv *poid_par_priv)
+{
+#ifdef PLATFORM_OS_XP
+       _irqL           oldirql;
+#endif
+       u32             bStartTest;
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+       PADAPTER        Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+_func_enter_;
+
+       RT_TRACE(_module_mp_, _drv_alert_, ("+oid_rt_pro_set_single_carrier_tx_hdl\n"));
+
+       if (poid_par_priv->type_of_oid != SET_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       bStartTest = *((u32*)poid_par_priv->information_buf);
+
+       _irqlevel_changed_(&oldirql, LOWER);
+       SetSingleCarrierTx(Adapter, (u8)bStartTest);
+       if (bStartTest) {
+               struct mp_priv *pmp_priv = &Adapter->mppriv;
+               if (pmp_priv->tx.stop == 0) {
+                       pmp_priv->tx.stop = 1;
+                       DBG_871X("%s: pkt tx is running...\n", __func__);
+                       rtw_msleep_os(5);
+               }
+               pmp_priv->tx.stop = 0;
+               pmp_priv->tx.count = 1;
+               SetPacketTx(Adapter);
+       }
+       _irqlevel_changed_(&oldirql, RAISE);
+
+_func_exit_;
+
+       return status;
+}
+
+NDIS_STATUS oid_rt_pro_set_carrier_suppression_tx_hdl(struct oid_par_priv *poid_par_priv)
+{
+#ifdef PLATFORM_OS_XP
+       _irqL           oldirql;
+#endif
+       u32             bStartTest;
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+       PADAPTER        Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+_func_enter_;
+
+       RT_TRACE(_module_mp_, _drv_notice_, ("+oid_rt_pro_set_carrier_suppression_tx_hdl\n"));
+
+       if (poid_par_priv->type_of_oid != SET_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       bStartTest = *((u32*)poid_par_priv->information_buf);
+
+       _irqlevel_changed_(&oldirql, LOWER);
+       SetCarrierSuppressionTx(Adapter, (u8)bStartTest);
+       if (bStartTest) {
+               struct mp_priv *pmp_priv = &Adapter->mppriv;
+               if (pmp_priv->tx.stop == 0) {
+                       pmp_priv->tx.stop = 1;
+                       DBG_871X("%s: pkt tx is running...\n", __func__);
+                       rtw_msleep_os(5);
+               }
+               pmp_priv->tx.stop = 0;
+               pmp_priv->tx.count = 1;
+               SetPacketTx(Adapter);
+       }
+       _irqlevel_changed_(&oldirql, RAISE);
+
+_func_exit_;
+
+       return status;
+}
+
+NDIS_STATUS oid_rt_pro_set_single_tone_tx_hdl(struct oid_par_priv *poid_par_priv)
+{
+#ifdef PLATFORM_OS_XP
+       _irqL           oldirql;
+#endif
+       u32             bStartTest;
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+       PADAPTER        Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+_func_enter_;
+
+       RT_TRACE(_module_mp_, _drv_alert_, ("+oid_rt_pro_set_single_tone_tx_hdl\n"));
+
+       if (poid_par_priv->type_of_oid != SET_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       bStartTest = *((u32*)poid_par_priv->information_buf);
+
+       _irqlevel_changed_(&oldirql, LOWER);
+       SetSingleToneTx(Adapter,(u8)bStartTest);
+       _irqlevel_changed_(&oldirql, RAISE);
+
+_func_exit_;
+
+       return status;
+}
+
+NDIS_STATUS oid_rt_pro_set_modulation_hdl(struct oid_par_priv* poid_par_priv)
+{
+       return 0;
+}
+
+NDIS_STATUS oid_rt_pro_trigger_gpio_hdl(struct oid_par_priv *poid_par_priv)
+{
+       PADAPTER        Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+#ifdef PLATFORM_OS_XP
+       _irqL           oldirql;
+#endif
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+_func_enter_;
+
+       if (poid_par_priv->type_of_oid != SET_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       _irqlevel_changed_(&oldirql, LOWER);
+       rtw_hal_set_hwreg(Adapter, HW_VAR_TRIGGER_GPIO_0, 0);
+       _irqlevel_changed_(&oldirql, RAISE);
+
+_func_exit_;
+
+       return status;
+}
+//****************  oid_rtl_seg_81_80_00   section end ****************
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_pro8711_join_bss_hdl(struct oid_par_priv *poid_par_priv)
+{
+#if 0
+       PADAPTER        Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+#ifdef PLATFORM_OS_XP
+       _irqL           oldirql;
+#endif
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+
+       PNDIS_802_11_SSID pssid;
+
+_func_enter_;
+
+       if (poid_par_priv->type_of_oid != SET_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       *poid_par_priv->bytes_needed = (u32)sizeof(NDIS_802_11_SSID);
+       *poid_par_priv->bytes_rw = 0;
+       if (poid_par_priv->information_buf_len < *poid_par_priv->bytes_needed)
+               return NDIS_STATUS_INVALID_LENGTH;
+
+       pssid = (PNDIS_802_11_SSID)poid_par_priv->information_buf;
+
+       _irqlevel_changed_(&oldirql, LOWER);
+
+       if (mp_start_joinbss(Adapter, pssid) == _FAIL)
+               status = NDIS_STATUS_NOT_ACCEPTED;
+
+       _irqlevel_changed_(&oldirql, RAISE);
+
+       *poid_par_priv->bytes_rw = sizeof(NDIS_802_11_SSID);
+
+_func_exit_;
+
+       return status;
+#else
+       return 0;
+#endif
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_pro_read_register_hdl(struct oid_par_priv *poid_par_priv)
+{
+#ifdef PLATFORM_OS_XP
+       _irqL           oldirql;
+#endif
+       pRW_Reg         RegRWStruct;
+       u32             offset, width;
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+       PADAPTER        Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+_func_enter_;
+
+       RT_TRACE(_module_mp_, _drv_info_,
+                ("+oid_rt_pro_read_register_hdl\n"));
+
+       if (poid_par_priv->type_of_oid != QUERY_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       RegRWStruct = (pRW_Reg)poid_par_priv->information_buf;
+       offset = RegRWStruct->offset;
+       width = RegRWStruct->width;
+
+       if (offset > 0xFFF)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       _irqlevel_changed_(&oldirql, LOWER);
+
+       switch (width) {
+               case 1:
+                       RegRWStruct->value = rtw_read8(Adapter, offset);
+                       break;
+               case 2:
+                       RegRWStruct->value = rtw_read16(Adapter, offset);
+                       break;
+               default:
+                       width = 4;
+                       RegRWStruct->value = rtw_read32(Adapter, offset);
+                       break;
+       }
+       RT_TRACE(_module_mp_, _drv_notice_,
+                ("oid_rt_pro_read_register_hdl: offset:0x%04X value:0x%X\n",
+                 offset, RegRWStruct->value));
+
+       _irqlevel_changed_(&oldirql, RAISE);
+
+       *poid_par_priv->bytes_rw = width;
+
+_func_exit_;
+
+       return status;
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_pro_write_register_hdl(struct oid_par_priv *poid_par_priv)
+{
+#ifdef PLATFORM_OS_XP
+       _irqL           oldirql;
+#endif
+       pRW_Reg         RegRWStruct;
+       u32             offset, width, value;
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+       PADAPTER        padapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+_func_enter_;
+
+       RT_TRACE(_module_mp_, _drv_info_,
+                ("+oid_rt_pro_write_register_hdl\n"));
+
+       if (poid_par_priv->type_of_oid != SET_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       RegRWStruct = (pRW_Reg)poid_par_priv->information_buf;
+       offset = RegRWStruct->offset;
+       width = RegRWStruct->width;
+       value = RegRWStruct->value;
+
+       if (offset > 0xFFF)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       _irqlevel_changed_(&oldirql, LOWER);
+
+       switch (RegRWStruct->width)
+       {
+               case 1:
+                       if (value > 0xFF) {
+                               status = NDIS_STATUS_NOT_ACCEPTED;
+                               break;
+                       }
+                       rtw_write8(padapter, offset, (u8)value);
+                       break;
+               case 2:
+                       if (value > 0xFFFF) {
+                               status = NDIS_STATUS_NOT_ACCEPTED;
+                               break;
+                       }
+                       rtw_write16(padapter, offset, (u16)value);
+                       break;
+               case 4:
+                       rtw_write32(padapter, offset, value);
+                       break;
+               default:
+                       status = NDIS_STATUS_NOT_ACCEPTED;
+                       break;
+       }
+
+       _irqlevel_changed_(&oldirql, RAISE);
+
+       RT_TRACE(_module_mp_, _drv_info_,
+                ("-oid_rt_pro_write_register_hdl: offset=0x%08X width=%d value=0x%X\n",
+                 offset, width, value));
+
+_func_exit_;
+
+       return status;
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_pro_burst_read_register_hdl(struct oid_par_priv *poid_par_priv)
+{
+#if 0
+#ifdef PLATFORM_OS_XP
+       _irqL           oldirql;
+#endif
+       pBurst_RW_Reg   pBstRwReg;
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+       PADAPTER        padapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+_func_enter_;
+
+       RT_TRACE(_module_mp_, _drv_notice_, ("+oid_rt_pro_burst_read_register_hdl\n"));
+
+       if (poid_par_priv->type_of_oid != QUERY_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       pBstRwReg = (pBurst_RW_Reg)poid_par_priv->information_buf;
+
+       _irqlevel_changed_(&oldirql, LOWER);
+       rtw_read_mem(padapter, pBstRwReg->offset, (u32)pBstRwReg->len, pBstRwReg->Data);
+       _irqlevel_changed_(&oldirql, RAISE);
+
+       *poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
+
+       RT_TRACE(_module_mp_, _drv_info_, ("-oid_rt_pro_burst_read_register_hdl\n"));
+
+_func_exit_;
+
+       return status;
+#else
+       return 0;
+#endif
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_pro_burst_write_register_hdl(struct oid_par_priv *poid_par_priv)
+{
+#if 0
+#ifdef PLATFORM_OS_XP
+       _irqL           oldirql;
+#endif
+       pBurst_RW_Reg   pBstRwReg;
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+       PADAPTER        padapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+_func_enter_;
+
+       RT_TRACE(_module_mp_, _drv_notice_, ("+oid_rt_pro_burst_write_register_hdl\n"));
+
+       if (poid_par_priv->type_of_oid != SET_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       pBstRwReg = (pBurst_RW_Reg)poid_par_priv->information_buf;
+
+       _irqlevel_changed_(&oldirql, LOWER);
+       rtw_write_mem(padapter, pBstRwReg->offset, (u32)pBstRwReg->len, pBstRwReg->Data);
+       _irqlevel_changed_(&oldirql, RAISE);
+
+       RT_TRACE(_module_mp_, _drv_info_, ("-oid_rt_pro_burst_write_register_hdl\n"));
+
+_func_exit_;
+
+       return status;
+#else
+       return 0;
+#endif
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_pro_write_txcmd_hdl(struct oid_par_priv *poid_par_priv)
+{
+#if 0
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+
+       PADAPTER        Adapter = (PADAPTER)( poid_par_priv->adapter_context);
+
+#ifdef PLATFORM_OS_XP
+       _irqL           oldirql;
+#endif
+
+       TX_CMD_Desc     *TxCmd_Info;
+
+_func_enter_;
+
+       if (poid_par_priv->type_of_oid != SET_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       RT_TRACE(_module_mp_, _drv_info_, ("+Set OID_RT_PRO_WRITE_TXCMD\n"));
+
+       TxCmd_Info=(TX_CMD_Desc*)poid_par_priv->information_buf;
+
+       RT_TRACE(_module_mp_, _drv_info_, ("WRITE_TXCMD:Addr=%.8X\n", TxCmd_Info->offset));
+       RT_TRACE(_module_mp_, _drv_info_, ("WRITE_TXCMD:1.)%.8X\n", (ULONG)TxCmd_Info->TxCMD.value[0]));
+       RT_TRACE(_module_mp_, _drv_info_, ("WRITE_TXCMD:2.)%.8X\n", (ULONG)TxCmd_Info->TxCMD.value[1]));
+       RT_TRACE(_module_mp_, _drv_info_, (("WRITE_TXCMD:3.)%.8X\n", (ULONG)TxCmd_Info->TxCMD.value[2]));
+       RT_TRACE(_module_mp_, _drv_info_, ("WRITE_TXCMD:4.)%.8X\n", (ULONG)TxCmd_Info->TxCMD.value[3]));
+
+       _irqlevel_changed_(&oldirql, LOWER);
+
+       rtw_write32(Adapter, TxCmd_Info->offset + 0, (unsigned int)TxCmd_Info->TxCMD.value[0]);
+       rtw_write32(Adapter, TxCmd_Info->offset + 4, (unsigned int)TxCmd_Info->TxCMD.value[1]);
+
+       _irqlevel_changed_(&oldirql, RAISE);
+
+       RT_TRACE(_module_mp_, _drv_notice_,
+                ("-Set OID_RT_PRO_WRITE_TXCMD: status=0x%08X\n", status));
+
+_func_exit_;
+
+       return status;
+#else
+       return 0;
+#endif
+}
+
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_pro_read16_eeprom_hdl(struct oid_par_priv *poid_par_priv)
+{
+#if 0
+#ifdef PLATFORM_OS_XP
+       _irqL           oldirql;
+#endif
+       pEEPROM_RWParam pEEPROM;
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+       PADAPTER        padapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+_func_enter_;
+
+       RT_TRACE(_module_mp_, _drv_info_, ("+Query OID_RT_PRO_READ16_EEPROM\n"));
+
+       if (poid_par_priv->type_of_oid != QUERY_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       pEEPROM = (pEEPROM_RWParam)poid_par_priv->information_buf;
+
+       _irqlevel_changed_(&oldirql, LOWER);
+       pEEPROM->value = eeprom_read16(padapter, (u16)(pEEPROM->offset >> 1));
+       _irqlevel_changed_(&oldirql, RAISE);
+
+       *poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
+
+       RT_TRACE(_module_mp_,  _drv_notice_,
+                ("-Query OID_RT_PRO_READ16_EEPROM: offset=0x%x value=0x%x\n",
+                 pEEPROM->offset, pEEPROM->value));
+
+_func_exit_;
+
+       return status;
+#else
+       return 0;
+#endif
+}
+
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_pro_write16_eeprom_hdl (struct oid_par_priv *poid_par_priv)
+{
+#if 0
+#ifdef PLATFORM_OS_XP
+       _irqL           oldirql;
+#endif
+       pEEPROM_RWParam pEEPROM;
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+       PADAPTER        padapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+_func_enter_;
+
+       RT_TRACE(_module_mp_, _drv_notice_, ("+Set OID_RT_PRO_WRITE16_EEPROM\n"));
+
+       if (poid_par_priv->type_of_oid != SET_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       pEEPROM = (pEEPROM_RWParam)poid_par_priv->information_buf;
+
+       _irqlevel_changed_(&oldirql, LOWER);
+       eeprom_write16(padapter, (u16)(pEEPROM->offset >> 1), pEEPROM->value);
+       _irqlevel_changed_(&oldirql, RAISE);
+
+       *poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
+
+_func_exit_;
+
+       return status;
+#else
+       return 0;
+#endif
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_pro8711_wi_poll_hdl(struct oid_par_priv *poid_par_priv)
+{
+#if 0
+       PADAPTER        Adapter = (PADAPTER)( poid_par_priv->adapter_context);
+
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+
+       struct mp_wiparam *pwi_param;
+
+_func_enter_;
+
+       if (poid_par_priv->type_of_oid != QUERY_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       if (poid_par_priv->information_buf_len < sizeof(struct mp_wiparam))
+               return NDIS_STATUS_INVALID_LENGTH;
+
+       if (Adapter->mppriv.workparam.bcompleted == _FALSE)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       pwi_param = (struct mp_wiparam *)poid_par_priv->information_buf;
+
+       _rtw_memcpy(pwi_param, &Adapter->mppriv.workparam, sizeof(struct mp_wiparam));
+       Adapter->mppriv.act_in_progress = _FALSE;
+//     RT_TRACE(_module_mp_, _drv_info_, ("rf:%x\n", pwiparam->IoValue));
+       *poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
+
+_func_exit_;
+
+       return status;
+#else
+       return 0;
+#endif
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_pro8711_pkt_loss_hdl(struct oid_par_priv *poid_par_priv)
+{
+#if 0
+       PADAPTER        Adapter = (PADAPTER)( poid_par_priv->adapter_context);
+
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+
+_func_enter_;
+
+       RT_TRACE(_module_mp_, _drv_notice_, ("+oid_rt_pro8711_pkt_loss_hdl\n"));
+
+       if (poid_par_priv->type_of_oid != QUERY_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       if (poid_par_priv->information_buf_len < sizeof(uint)*2) {
+               RT_TRACE(_module_mp_, _drv_err_, ("-oid_rt_pro8711_pkt_loss_hdl: buf_len=%d\n", (int)poid_par_priv->information_buf_len));
+               return NDIS_STATUS_INVALID_LENGTH;
+       }
+
+       if (*(uint*)poid_par_priv->information_buf == 1)//init==1
+               Adapter->mppriv.rx_pktloss = 0;
+
+       *((uint*)poid_par_priv->information_buf+1) = Adapter->mppriv.rx_pktloss;
+       *poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
+
+_func_exit_;
+
+       return status;
+#else
+       return 0;
+#endif
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_rd_attrib_mem_hdl(struct oid_par_priv *poid_par_priv)
+{
+#if 0
+       PADAPTER        Adapter = (PADAPTER)( poid_par_priv->adapter_context);
+       struct io_queue *pio_queue = (struct io_queue *)Adapter->pio_queue;
+       struct intf_hdl *pintfhdl = &pio_queue->intf;
+
+#ifdef PLATFORM_OS_XP
+       _irqL           oldirql;
+#endif
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+
+#ifdef CONFIG_SDIO_HCI
+       void (*_attrib_read)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);
+#endif
+
+_func_enter_;
+
+       RT_TRACE(_module_mp_, _drv_notice_, ("+Query OID_RT_RD_ATTRIB_MEM\n"));
+
+       if (poid_par_priv->type_of_oid != QUERY_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+#ifdef CONFIG_SDIO_HCI
+       _irqlevel_changed_(&oldirql, LOWER);
+{
+       u32 *plmem = (u32*)poid_par_priv->information_buf+2;
+       _attrib_read = pintfhdl->io_ops._attrib_read;
+       _attrib_read(pintfhdl, *((u32*)poid_par_priv->information_buf),
+                               *((u32*)poid_par_priv->information_buf+1), (u8*)plmem);
+       *poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
+}
+       _irqlevel_changed_(&oldirql, RAISE);
+#endif
+
+_func_exit_;
+
+       return status;
+#else
+       return 0;
+#endif
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_wr_attrib_mem_hdl (struct oid_par_priv *poid_par_priv)
+{
+#if 0
+       PADAPTER        Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+       struct io_queue *pio_queue = (struct io_queue *)Adapter->pio_queue;
+       struct intf_hdl *pintfhdl = &pio_queue->intf;
+
+#ifdef PLATFORM_OS_XP
+       _irqL           oldirql;
+#endif
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+
+#ifdef CONFIG_SDIO_HCI
+       void (*_attrib_write)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);
+#endif
+
+_func_enter_;
+
+       if (poid_par_priv->type_of_oid != SET_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+#ifdef CONFIG_SDIO_HCI
+       _irqlevel_changed_(&oldirql, LOWER);
+{
+       u32 *plmem = (u32*)poid_par_priv->information_buf + 2;
+       _attrib_write = pintfhdl->io_ops._attrib_write;
+       _attrib_write(pintfhdl, *(u32*)poid_par_priv->information_buf,
+                               *((u32*)poid_par_priv->information_buf+1), (u8*)plmem);
+}
+       _irqlevel_changed_(&oldirql, RAISE);
+#endif
+
+_func_exit_;
+
+       return status;
+#else
+       return 0;
+#endif
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS  oid_rt_pro_set_rf_intfs_hdl(struct oid_par_priv *poid_par_priv)
+{
+#if 0
+       PADAPTER        Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+#ifdef PLATFORM_OS_XP
+       _irqL           oldirql;
+#endif
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+
+_func_enter_;
+
+       RT_TRACE(_module_mp_, _drv_notice_, ("+OID_RT_PRO_SET_RF_INTFS\n"));
+
+       if (poid_par_priv->type_of_oid != SET_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       _irqlevel_changed_(&oldirql, LOWER);
+
+       if (rtw_setrfintfs_cmd(Adapter, *(unsigned char*)poid_par_priv->information_buf) == _FAIL)
+               status = NDIS_STATUS_NOT_ACCEPTED;
+
+       _irqlevel_changed_(&oldirql, RAISE);
+
+_func_exit_;
+
+       return status;
+#else
+       return 0;
+#endif
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_poll_rx_status_hdl(struct oid_par_priv *poid_par_priv)
+{
+#if 0
+       PADAPTER        Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+
+_func_enter_;
+
+       if (poid_par_priv->type_of_oid != QUERY_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       _rtw_memcpy(poid_par_priv->information_buf, (unsigned char*)&Adapter->mppriv.rxstat, sizeof(struct recv_stat));
+       *poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
+
+_func_exit_;
+
+       return status;
+#else
+       return 0;
+#endif
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_pro_cfg_debug_message_hdl(struct oid_par_priv *poid_par_priv)
+{
+#if 0
+       PADAPTER        Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+
+       PCFG_DBG_MSG_STRUCT pdbg_msg;
+
+_func_enter_;
+
+//     RT_TRACE(0xffffffffff,_drv_alert_,("===> oid_rt_pro_cfg_debug_message_hdl.\n"));
+
+#if 0//#ifdef CONFIG_DEBUG_RTL871X
+
+       pdbg_msg = (PCFG_DBG_MSG_STRUCT)(poid_par_priv->information_buf);
+
+       if (poid_par_priv->type_of_oid == SET_OID) {
+               RT_TRACE(0xffffffffff, _drv_alert_,
+                        ("===>Set level :0x%08x, H32:0x%08x L32:0x%08x\n",
+                         pdbg_msg->DebugLevel, pdbg_msg->DebugComponent_H32, pdbg_msg->DebugComponent_L32));
+
+               GlobalDebugLevel = pdbg_msg->DebugLevel;
+               GlobalDebugComponents = (pdbg_msg->DebugComponent_H32 << 32) | pdbg_msg->DebugComponent_L32;
+               RT_TRACE(0xffffffffff, _drv_alert_,
+                        ("===> Set level :0x%08x, component:0x%016x\n",
+                         GlobalDebugLevel, (u32)GlobalDebugComponents));
+       } else {
+               pdbg_msg->DebugLevel = GlobalDebugLevel;
+               pdbg_msg->DebugComponent_H32 = (u32)(GlobalDebugComponents >> 32);
+               pdbg_msg->DebugComponent_L32 = (u32)GlobalDebugComponents;
+               *poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
+
+               RT_TRACE(0xffffffffff, _drv_alert_,
+                        ("===>Query level:0x%08x H32:0x%08x L32:0x%08x\n",
+                         (u32)pdbg_msg->DebugLevel, (u32)pdbg_msg->DebugComponent_H32, (u32)pdbg_msg->DebugComponent_L32));
+       }
+
+#endif
+
+_func_exit_;
+
+       return status;
+#else
+       return 0;
+#endif
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_pro_set_data_rate_ex_hdl(struct oid_par_priv *poid_par_priv)
+{
+       PADAPTER        Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+#ifdef PLATFORM_OS_XP
+       _irqL           oldirql;
+#endif
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+
+_func_enter_;
+
+       RT_TRACE(_module_mp_, _drv_notice_, ("+OID_RT_PRO_SET_DATA_RATE_EX\n"));
+
+       if (poid_par_priv->type_of_oid != SET_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       _irqlevel_changed_(&oldirql, LOWER);
+
+       if (rtw_setdatarate_cmd(Adapter, poid_par_priv->information_buf) !=_SUCCESS)
+               status = NDIS_STATUS_NOT_ACCEPTED;
+
+       _irqlevel_changed_(&oldirql, RAISE);
+
+_func_exit_;
+
+       return status;
+}
+//-----------------------------------------------------------------------------
+NDIS_STATUS oid_rt_get_thermal_meter_hdl(struct oid_par_priv *poid_par_priv)
+{
+#ifdef PLATFORM_OS_XP
+       _irqL           oldirql;
+#endif
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+       u8 thermal = 0;
+       PADAPTER        Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+_func_enter_;
+
+       RT_TRACE(_module_mp_, _drv_notice_, ("+oid_rt_get_thermal_meter_hdl\n"));
+
+       if (poid_par_priv->type_of_oid != QUERY_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       if (poid_par_priv->information_buf_len < sizeof(u32))
+               return NDIS_STATUS_INVALID_LENGTH;
+
+       _irqlevel_changed_(&oldirql, LOWER);
+       GetThermalMeter(Adapter, &thermal);
+       _irqlevel_changed_(&oldirql, RAISE);
+
+       *(u32*)poid_par_priv->information_buf = (u32)thermal;
+       *poid_par_priv->bytes_rw = sizeof(u32);
+
+_func_exit_;
+
+       return status;
+}
+//-----------------------------------------------------------------------------
+NDIS_STATUS oid_rt_pro_read_tssi_hdl(struct oid_par_priv *poid_par_priv)
+{
+#if 0
+       PADAPTER        Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+#ifdef PLATFORM_OS_XP
+       _irqL           oldirql;
+#endif
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+
+_func_enter_;
+
+       RT_TRACE(_module_mp_, _drv_notice_, ("+oid_rt_pro_read_tssi_hdl\n"));
+
+       if (poid_par_priv->type_of_oid != SET_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       if (Adapter->mppriv.act_in_progress == _TRUE)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       if (poid_par_priv->information_buf_len < sizeof(u8))
+               return NDIS_STATUS_INVALID_LENGTH;
+
+       //init workparam
+       Adapter->mppriv.act_in_progress = _TRUE;
+       Adapter->mppriv.workparam.bcompleted = _FALSE;
+       Adapter->mppriv.workparam.act_type = MPT_READ_TSSI;
+       Adapter->mppriv.workparam.io_offset = 0;
+       Adapter->mppriv.workparam.io_value = 0xFFFFFFFF;
+
+       _irqlevel_changed_(&oldirql, LOWER);
+
+       if (!rtw_gettssi_cmd(Adapter,0, (u8*)&Adapter->mppriv.workparam.io_value))
+               status = NDIS_STATUS_NOT_ACCEPTED;
+
+       _irqlevel_changed_(&oldirql, RAISE);
+
+_func_exit_;
+
+       return status;
+#else
+       return 0;
+#endif
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_pro_set_power_tracking_hdl(struct oid_par_priv *poid_par_priv)
+{
+#ifdef PLATFORM_OS_XP
+       _irqL           oldirql;
+#endif
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+       PADAPTER        Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+
+_func_enter_;
+
+//     if (poid_par_priv->type_of_oid != SET_OID)
+//             return NDIS_STATUS_NOT_ACCEPTED;
+
+       if (poid_par_priv->information_buf_len < sizeof(u8))
+               return NDIS_STATUS_INVALID_LENGTH;
+
+       _irqlevel_changed_(&oldirql, LOWER);
+       if (poid_par_priv->type_of_oid == SET_OID) {
+               u8 enable;
+
+               enable = *(u8*)poid_par_priv->information_buf;
+               RT_TRACE(_module_mp_, _drv_notice_,
+                        ("+oid_rt_pro_set_power_tracking_hdl: enable=%d\n", enable));
+
+               SetPowerTracking(Adapter, enable);
+       } else {
+               GetPowerTracking(Adapter, (u8*)poid_par_priv->information_buf);
+       }
+       _irqlevel_changed_(&oldirql, RAISE);
+
+_func_exit_;
+
+       return status;
+}
+//-----------------------------------------------------------------------------
+NDIS_STATUS oid_rt_pro_set_basic_rate_hdl(struct oid_par_priv *poid_par_priv)
+{
+#if 0
+#ifdef PLATFORM_OS_XP
+       _irqL           oldirql;
+#endif
+       u32 ratevalue;
+       u8 datarates[NumRates];
+       int i;
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+       PADAPTER        padapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+_func_enter_;
+
+       RT_TRACE(_module_mp_, _drv_info_, ("+OID_RT_PRO_SET_BASIC_RATE\n"));
+
+       if (poid_par_priv->type_of_oid != SET_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+#if 0
+       ratevalue = *((u32*)poid_par_priv->information_buf);
+
+       for (i = 0; i < NumRates; i++) {
+               if (ratevalue == mpdatarate[i])
+                       datarates[i] = mpdatarate[i];
+               else
+                       datarates[i] = 0xff;
+               RT_TRACE(_module_rtl871x_ioctl_c_, _drv_info_, ("basicrate_inx=%d\n", datarates[i]));
+       }
+
+       _irqlevel_changed_(&oldirql, LOWER);
+
+       if (rtw_setbasicrate_cmd(padapter, datarates) != _SUCCESS)
+               status = NDIS_STATUS_NOT_ACCEPTED;
+
+       _irqlevel_changed_(&oldirql, RAISE);
+#endif
+       RT_TRACE(_module_mp_, _drv_notice_,
+                ("-OID_RT_PRO_SET_BASIC_RATE: status=0x%08X\n", status));
+
+_func_exit_;
+
+       return status;
+#else
+       return 0;
+#endif
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_pro_qry_pwrstate_hdl(struct oid_par_priv *poid_par_priv)
+{
+#if 0
+       PADAPTER        Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+
+_func_enter_;
+
+       if (poid_par_priv->type_of_oid != QUERY_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       if (poid_par_priv->information_buf_len < 8)
+               return NDIS_STATUS_INVALID_LENGTH;
+
+       *poid_par_priv->bytes_rw = 8;
+       _rtw_memcpy(poid_par_priv->information_buf, &(Adapter->pwrctrlpriv.pwr_mode), 8);
+       *poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
+
+       RT_TRACE(_module_mp_, _drv_notice_,
+                ("-oid_rt_pro_qry_pwrstate_hdl: pwr_mode=%d smart_ps=%d\n",
+                 Adapter->pwrctrlpriv.pwr_mode, Adapter->pwrctrlpriv.smart_ps));
+
+_func_exit_;
+
+       return status;
+#else
+       return 0;
+#endif
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_pro_set_pwrstate_hdl(struct oid_par_priv *poid_par_priv)
+{
+#if 0
+       PADAPTER        Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+
+       uint pwr_mode, smart_ps;
+
+_func_enter_;
+
+       RT_TRACE(_module_mp_, _drv_notice_, ("+Set OID_RT_PRO_SET_PWRSTATE\n"));
+
+       if (poid_par_priv->type_of_oid != SET_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       *poid_par_priv->bytes_rw = 0;
+       *poid_par_priv->bytes_needed = 8;
+
+       if (poid_par_priv->information_buf_len < 8)
+               return NDIS_STATUS_INVALID_LENGTH;
+
+       pwr_mode = *(uint *)(poid_par_priv->information_buf);
+       smart_ps = *(uint *)((int)poid_par_priv->information_buf + 4);
+
+       *poid_par_priv->bytes_rw = 8;
+
+_func_exit_;
+
+       return status;
+#else
+       return 0;
+#endif
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_pro_h2c_set_rate_table_hdl(struct oid_par_priv *poid_par_priv)
+{
+#if 0
+       PADAPTER        Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+#ifdef PLATFORM_OS_XP
+       _irqL           oldirql;
+#endif
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+
+       struct setratable_parm *prate_table;
+       u8              res;
+
+_func_enter_;
+
+       if (poid_par_priv->type_of_oid != SET_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       *poid_par_priv->bytes_needed  = sizeof(struct setratable_parm);
+       if (poid_par_priv->information_buf_len < sizeof(struct setratable_parm))
+               return NDIS_STATUS_INVALID_LENGTH;
+
+       prate_table = (struct setratable_parm*)poid_par_priv->information_buf;
+
+       _irqlevel_changed_(&oldirql, LOWER);
+       res = rtw_setrttbl_cmd(Adapter, prate_table);
+       _irqlevel_changed_(&oldirql, RAISE);
+
+       if (res == _FAIL)
+               status = NDIS_STATUS_FAILURE;
+
+_func_exit_;
+
+       return status;
+#else
+       return 0;
+#endif
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_pro_h2c_get_rate_table_hdl(struct oid_par_priv *poid_par_priv)
+{
+#if 0
+       PADAPTER        Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+
+_func_enter_;
+
+       if (poid_par_priv->type_of_oid != QUERY_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       #if 0
+                       struct mp_wi_cntx *pmp_wi_cntx=&(Adapter->mppriv.wi_cntx);
+                       u8 res=_SUCCESS;
+                       DEBUG_INFO(("===> Set OID_RT_PRO_H2C_GET_RATE_TABLE.\n"));
+
+                       if(pmp_wi_cntx->bmp_wi_progress ==_TRUE){
+                               DEBUG_ERR(("\n mp workitem is progressing, not allow to set another workitem right now!!!\n"));
+                               Status = NDIS_STATUS_NOT_ACCEPTED;
+                               break;
+                       }
+                       else{
+                               pmp_wi_cntx->bmp_wi_progress=_TRUE;
+                               pmp_wi_cntx->param.bcompleted=_FALSE;
+                               pmp_wi_cntx->param.act_type=MPT_GET_RATE_TABLE;
+                               pmp_wi_cntx->param.io_offset=0x0;
+                               pmp_wi_cntx->param.bytes_cnt=sizeof(struct getratable_rsp);
+                               pmp_wi_cntx->param.io_value=0xffffffff;
+
+                               res=rtw_getrttbl_cmd(Adapter,(struct getratable_rsp *)pmp_wi_cntx->param.data);
+                               *poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
+                               if(res != _SUCCESS)
+                               {
+                                       Status = NDIS_STATUS_NOT_ACCEPTED;
+                               }
+                       }
+                       DEBUG_INFO(("\n <=== Set OID_RT_PRO_H2C_GET_RATE_TABLE.\n"));
+       #endif
+
+_func_exit_;
+
+       return status;
+#else
+       return 0;
+#endif
+}
+
+//****************  oid_rtl_seg_87_12_00   section start ****************
+NDIS_STATUS oid_rt_pro_encryption_ctrl_hdl(struct oid_par_priv *poid_par_priv)
+{
+#if 0
+       PADAPTER        Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+       struct security_priv *psecuritypriv = &Adapter->securitypriv;
+
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+
+       ENCRY_CTRL_STATE encry_mode;
+
+
+       *poid_par_priv->bytes_needed = sizeof(u8);
+       if (poid_par_priv->information_buf_len < *poid_par_priv->bytes_needed)
+               return NDIS_STATUS_INVALID_LENGTH;
+
+       if (poid_par_priv->type_of_oid == SET_OID)
+       {
+               encry_mode = *((u8*)poid_par_priv->information_buf);
+               switch (encry_mode)
+               {
+                       case HW_CONTROL:
+                               #if 0
+                               Adapter->registrypriv.software_decrypt=_FALSE;
+                               Adapter->registrypriv.software_encrypt=_FALSE;
+                               #else
+                               psecuritypriv->sw_decrypt = _FALSE;
+                               psecuritypriv->sw_encrypt = _FALSE;
+                               #endif
+                               break;
+                       case SW_CONTROL:
+                               #if 0
+                               Adapter->registrypriv.software_decrypt=_TRUE;
+                               Adapter->registrypriv.software_encrypt=_TRUE;
+                               #else
+                               psecuritypriv->sw_decrypt = _TRUE;
+                               psecuritypriv->sw_encrypt = _TRUE;
+                               #endif
+                               break;
+                       case HW_ENCRY_SW_DECRY:
+                               #if 0
+                               Adapter->registrypriv.software_decrypt=_TRUE;
+                               Adapter->registrypriv.software_encrypt=_FALSE;
+                               #else
+                               psecuritypriv->sw_decrypt = _TRUE;
+                               psecuritypriv->sw_encrypt = _FALSE;
+                               #endif
+                               break;
+                       case SW_ENCRY_HW_DECRY:
+                               #if 0
+                               Adapter->registrypriv.software_decrypt=_FALSE;
+                               Adapter->registrypriv.software_encrypt=_TRUE;
+                               #else
+                               psecuritypriv->sw_decrypt = _FALSE;
+                               psecuritypriv->sw_encrypt = _TRUE;
+                               #endif
+                               break;
+               }
+
+               RT_TRACE(_module_rtl871x_ioctl_c_, _drv_notice_,
+                        ("-oid_rt_pro_encryption_ctrl_hdl: SET encry_mode=0x%x sw_encrypt=0x%x sw_decrypt=0x%x\n",
+                         encry_mode, psecuritypriv->sw_encrypt, psecuritypriv->sw_decrypt));
+       }
+       else {
+               #if 0
+               if (Adapter->registrypriv.software_encrypt == _FALSE) {
+                       if (Adapter->registrypriv.software_decrypt == _FALSE)
+                               encry_mode = HW_CONTROL;
+                       else
+                               encry_mode = HW_ENCRY_SW_DECRY;
+               }
+               else {
+                       if (Adapter->registrypriv.software_decrypt == _FALSE)
+                               encry_mode = SW_ENCRY_HW_DECRY;
+                       else
+                               encry_mode = SW_CONTROL;
+               }
+               #else
+
+               if ((psecuritypriv->sw_encrypt == _FALSE) && (psecuritypriv->sw_decrypt == _FALSE))
+                       encry_mode = HW_CONTROL;
+               else if ((psecuritypriv->sw_encrypt == _FALSE) && (psecuritypriv->sw_decrypt == _TRUE))
+                       encry_mode = HW_ENCRY_SW_DECRY;
+               else if ((psecuritypriv->sw_encrypt == _TRUE) && (psecuritypriv->sw_decrypt == _FALSE))
+                       encry_mode = SW_ENCRY_HW_DECRY;
+               else if ((psecuritypriv->sw_encrypt == _TRUE) && (psecuritypriv->sw_decrypt == _TRUE))
+                       encry_mode = SW_CONTROL;
+
+               #endif
+
+               *(u8*)poid_par_priv->information_buf =  encry_mode;
+               *poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
+
+               RT_TRACE(_module_mp_, _drv_notice_,
+                        ("-oid_rt_pro_encryption_ctrl_hdl: QUERY encry_mode=0x%x\n",
+                         encry_mode));
+       }
+
+       return status;
+#else
+       return 0;
+#endif
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_pro_add_sta_info_hdl(struct oid_par_priv *poid_par_priv)
+{
+#if 0
+       PADAPTER        Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+#ifdef PLATFORM_OS_XP
+       _irqL           oldirql;
+#endif
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+
+       struct sta_info *psta = NULL;
+       UCHAR           *macaddr;
+
+
+       if (poid_par_priv->type_of_oid != SET_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       *poid_par_priv->bytes_needed = ETH_ALEN;
+       if (poid_par_priv->information_buf_len < *poid_par_priv->bytes_needed)
+               return NDIS_STATUS_INVALID_LENGTH;
+
+       macaddr = (UCHAR *) poid_par_priv->information_buf ;
+
+       RT_TRACE(_module_rtl871x_ioctl_c_,_drv_notice_,
+                ("OID_RT_PRO_ADD_STA_INFO: addr="MAC_FMT"\n", MAC_ARG(macaddr) ));
+
+       _irqlevel_changed_(&oldirql, LOWER);
+
+       psta = rtw_get_stainfo(&Adapter->stapriv, macaddr);
+
+       if (psta == NULL) { // the sta have been in sta_info_queue => do nothing
+               psta = rtw_alloc_stainfo(&Adapter->stapriv, macaddr);
+
+               if (psta == NULL) {
+                       RT_TRACE(_module_rtl871x_ioctl_c_,_drv_err_,("Can't alloc sta_info when OID_RT_PRO_ADD_STA_INFO\n"));
+                       status = NDIS_STATUS_FAILURE;
+               }
+       } else { //(between drv has received this event before and  fw have not yet to set key to CAM_ENTRY)
+               RT_TRACE(_module_rtl871x_ioctl_c_, _drv_err_,
+                       ("Error: OID_RT_PRO_ADD_STA_INFO: sta has been in sta_hash_queue \n"));
+       }
+
+       _irqlevel_changed_(&oldirql, RAISE);
+
+       return status;
+#else
+       return 0;
+#endif
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_pro_dele_sta_info_hdl(struct oid_par_priv *poid_par_priv)
+{
+#if 0
+       PADAPTER        Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+#ifdef PLATFORM_OS_XP
+       _irqL           oldirql;
+#endif
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+
+       struct sta_info *psta = NULL;
+       UCHAR           *macaddr;
+
+
+       if (poid_par_priv->type_of_oid != SET_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       *poid_par_priv->bytes_needed = ETH_ALEN;
+       if (poid_par_priv->information_buf_len < *poid_par_priv->bytes_needed)
+               return NDIS_STATUS_INVALID_LENGTH;
+
+       macaddr = (UCHAR *) poid_par_priv->information_buf ;
+       RT_TRACE(_module_rtl871x_ioctl_c_,_drv_notice_,
+                ("+OID_RT_PRO_ADD_STA_INFO: addr="MAC_FMT"\n", MAC_ARG(macaddr) ));
+
+       psta = rtw_get_stainfo(&Adapter->stapriv, macaddr);
+       if (psta != NULL) {
+               _enter_critical(&(Adapter->stapriv.sta_hash_lock), &irqL);
+               rtw_free_stainfo(Adapter, psta);
+               _exit_critical(&(Adapter->stapriv.sta_hash_lock), &irqL);
+       }
+
+       return status;
+#else
+       return 0;
+#endif
+}
+//------------------------------------------------------------------------------
+#if 0
+#include <sdio_osintf.h>
+static u32 mp_query_drv_var(_adapter *padapter, u8 offset, u32 var)
+{
+#ifdef CONFIG_SDIO_HCI
+
+       if (offset == 1) {
+               u16 tmp_blk_num;
+               tmp_blk_num = rtw_read16(padapter, SDIO_RX0_RDYBLK_NUM);
+               RT_TRACE(_module_mp_, _drv_err_, ("Query Information, mp_query_drv_var  SDIO_RX0_RDYBLK_NUM=0x%x   adapter_to_dvobj(padapter)->rxblknum=0x%x\n", tmp_blk_num, adapter_to_dvobj(padapter)->rxblknum));
+               if (adapter_to_dvobj(padapter)->rxblknum != tmp_blk_num) {
+                       RT_TRACE(_module_mp_,_drv_err_, ("Query Information, mp_query_drv_var  call recv rx\n"));
+               //      sd_recv_rxfifo(padapter);
+               }
+       }
+
+#if 0
+       if(offset <=100){  //For setting data rate and query data rate
+               if(offset==100){ //For query data rate
+                       RT_TRACE(_module_mp_, _drv_emerg_, ("\n mp_query_drv_var: offset(%d): query rate=0x%.2x \n",offset,padapter->registrypriv.tx_rate));
+                       var=padapter->registrypriv.tx_rate;
+
+               }
+               else if(offset<0x1d){  //For setting data rate
+                       padapter->registrypriv.tx_rate=offset;
+                       var=padapter->registrypriv.tx_rate;
+                       padapter->registrypriv.use_rate=_TRUE;
+                       RT_TRACE(_module_mp_, _drv_emerg_, ("\n mp_query_drv_var: offset(%d): set rate=0x%.2x \n",offset,padapter->registrypriv.tx_rate));
+               }
+               else{ //not use the data rate
+                       padapter->registrypriv.use_rate=_FALSE;
+                       RT_TRACE(_module_mp_, _drv_emerg_, ("\n mp_query_drv_var: offset(%d) out of rate range\n",offset));
+               }
+       }
+       else if (offset<=110){  //for setting debug level
+               RT_TRACE(_module_mp_, _drv_emerg_, (" mp_query_drv_var: offset(%d) for set debug level\n",offset));
+               if(offset==110){ //For query data rate
+                       RT_TRACE(_module_mp_, _drv_emerg_, (" mp_query_drv_var: offset(%d): query dbg level=0x%.2x \n",offset,padapter->registrypriv.dbg_level));
+                       padapter->registrypriv.dbg_level=GlobalDebugLevel;
+                       var=padapter->registrypriv.dbg_level;
+               }
+               else if(offset<110 && offset>100){
+                       RT_TRACE(_module_mp_, _drv_emerg_, (" mp_query_drv_var: offset(%d): set dbg level=0x%.2x \n",offset,offset-100));
+                       padapter->registrypriv.dbg_level=GlobalDebugLevel=offset-100;
+                       var=padapter->registrypriv.dbg_level;
+                       RT_TRACE(_module_mp_, _drv_emerg_, (" mp_query_drv_var(_drv_emerg_): offset(%d): set dbg level=0x%.2x \n",offset,GlobalDebugLevel));
+                       RT_TRACE(_module_mp_, _drv_alert_, (" mp_query_drv_var(_drv_alert_): offset(%d): set dbg level=0x%.2x \n",offset,GlobalDebugLevel));
+                       RT_TRACE(_module_mp_, _drv_crit_, (" mp_query_drv_var(_drv_crit_): offset(%d): set dbg level=0x%.2x \n",offset,GlobalDebugLevel));
+                       RT_TRACE(_module_mp_, _drv_err_, (" mp_query_drv_var(_drv_err_): offset(%d): set dbg level=0x%.2x \n",offset,GlobalDebugLevel));
+                       RT_TRACE(_module_mp_, _drv_warning_, (" mp_query_drv_var(_drv_warning_): offset(%d): set dbg level=0x%.2x \n",offset,GlobalDebugLevel));
+                       RT_TRACE(_module_mp_, _drv_notice_, (" mp_query_drv_var(_drv_notice_): offset(%d): set dbg level=0x%.2x \n",offset,GlobalDebugLevel));
+                       RT_TRACE(_module_mp_, _drv_info_, (" mp_query_drv_var(_drv_info_): offset(%d): set dbg level=0x%.2x \n",offset,GlobalDebugLevel));
+                       RT_TRACE(_module_mp_, _drv_debug_, (" mp_query_drv_var(_drv_debug_): offset(%d): set dbg level=0x%.2x \n",offset,GlobalDebugLevel));
+
+               }
+       }
+       else if(offset >110 &&offset <116){
+               if(115==offset){
+                       RT_TRACE(_module_mp_, _drv_emerg_, (" mp_query_drv_var(_drv_emerg_): offset(%d): query TRX access type: [tx_block_mode=%x,rx_block_mode=%x]\n",\
+                                                                                                                       offset, adapter_to_dvobj(padapter)->tx_block_mode, adapter_to_dvobj(padapter)->rx_block_mode));
+               }
+               else {
+                       switch(offset){
+                               case 111:
+                                       adapter_to_dvobj(padapter)->tx_block_mode=1;
+                                       adapter_to_dvobj(padapter)->rx_block_mode=1;
+                                       RT_TRACE(_module_mp_, _drv_emerg_, \
+                                               (" mp_query_drv_var(_drv_emerg_): offset(%d): SET TRX access type:(TX block/RX block) [tx_block_mode=%x,rx_block_mode=%x]\n",\
+                                               offset, adapter_to_dvobj(padapter)->tx_block_mode, adapter_to_dvobj(padapter)->rx_block_mode));
+                                       break;
+                               case 112:
+                                       adapter_to_dvobj(padapter)->tx_block_mode=1;
+                                       adapter_to_dvobj(padapter)->rx_block_mode=0;
+                                       RT_TRACE(_module_mp_, _drv_emerg_, \
+                                               (" mp_query_drv_var(_drv_emerg_): offset(%d): SET TRX access type:(TX block/RX byte) [tx_block_mode=%x,rx_block_mode=%x]\n",\
+                                               offset, adapter_to_dvobj(padapter)->tx_block_mode, adapter_to_dvobj(padapter)->rx_block_mode));
+                                       break;
+                               case 113:
+                                       adapter_to_dvobj(padapter)->tx_block_mode=0;
+                                       adapter_to_dvobj(padapter)->rx_block_mode=1;
+                                       RT_TRACE(_module_mp_, _drv_emerg_, \
+                                               (" mp_query_drv_var(_drv_emerg_): offset(%d): SET TRX access type:(TX byte/RX block) [tx_block_mode=%x,rx_block_mode=%x]\n",\
+                                               offset, adapter_to_dvobj(padapter)->tx_block_mode, adapter_to_dvobj(padapter)->rx_block_mode));
+                                       break;
+                               case 114:
+                                       adapter_to_dvobj(padapter)->tx_block_mode=0;
+                                       adapter_to_dvobj(padapter)->rx_block_mode=0;
+                                       RT_TRACE(_module_mp_, _drv_emerg_, \
+                                               (" mp_query_drv_var(_drv_emerg_): offset(%d): SET TRX access type:(TX byte/RX byte) [tx_block_mode=%x,rx_block_mode=%x]\n",\
+                                               offset, adapter_to_dvobj(padapter)->tx_block_mode, adapter_to_dvobj(padapter)->rx_block_mode));
+                                       break;
+                               default :
+                                       break;
+
+                       }
+
+               }
+
+       }
+       else if(offset>=127){
+               u64     prnt_dbg_comp;
+               u8   chg_idx;
+               u64     tmp_dbg_comp;
+               chg_idx=offset-0x80;
+               tmp_dbg_comp=BIT(chg_idx);
+               prnt_dbg_comp=padapter->registrypriv.dbg_component= GlobalDebugComponents;
+               RT_TRACE(_module_mp_, _drv_emerg_, (" 1: mp_query_drv_var: offset(%d;0x%x):for dbg conpoment prnt_dbg_comp=0x%.16x GlobalDebugComponents=0x%.16x padapter->registrypriv.dbg_component=0x%.16x\n",offset,offset,prnt_dbg_comp,GlobalDebugComponents,padapter->registrypriv.dbg_component));
+               if(offset==127){
+       //              prnt_dbg_comp=padapter->registrypriv.dbg_component= GlobalDebugComponents;
+                       var=(u32)(padapter->registrypriv.dbg_component);
+                       RT_TRACE(0xffffffff, _drv_emerg_, ("2: mp_query_drv_var: offset(%d;0x%x):for query dbg conpoment=0x%x(l) 0x%x(h)  GlobalDebugComponents=0x%x(l) 0x%x(h) \n",offset,offset,padapter->registrypriv.dbg_component,prnt_dbg_comp));
+                       prnt_dbg_comp=GlobalDebugComponents;
+                       RT_TRACE(0xffffffff, _drv_emerg_, ("2-1: mp_query_drv_var: offset(%d;0x%x):for query dbg conpoment=0x%x(l) 0x%x(h)  GlobalDebugComponents=0x%x(l) 0x%x(h)\n",offset,offset,padapter->registrypriv.dbg_component,prnt_dbg_comp));
+                       prnt_dbg_comp=GlobalDebugComponents=padapter->registrypriv.dbg_component;
+                       RT_TRACE(0xffffffff, _drv_emerg_, ("2-2: mp_query_drv_var: offset(%d;0x%x):for query dbg conpoment=0x%x(l) 0x%x(h)  GlobalDebugComponents=0x%x(l) 0x%x(h)\n",offset,offset,padapter->registrypriv.dbg_component,prnt_dbg_comp));
+
+               }
+               else{
+                       RT_TRACE(0xffffffff, _drv_emerg_, ("3: mp_query_drv_var: offset(%d;0x%x):for query dbg conpoment=0x%x(l) 0x%x(h) GlobalDebugComponents=0x%x(l) 0x%x(h) chg_idx=%d\n",offset,offset,padapter->registrypriv.dbg_component,prnt_dbg_comp,chg_idx));
+                       prnt_dbg_comp=GlobalDebugComponents;
+                       RT_TRACE(0xffffffff, _drv_emerg_,("3-1: mp_query_drv_var: offset(%d;0x%x):for query dbg conpoment=0x%x(l) 0x%x(h)  GlobalDebugComponents=0x%x(l) 0x%x(h) chg_idx=%d\n",offset,offset,padapter->registrypriv.dbg_component,prnt_dbg_comp,chg_idx));// ("3-1: mp_query_drv_var: offset(%d;0x%x):before set dbg conpoment=0x%x chg_idx=%d or0x%x BIT(chg_idx[%d]=0x%x)\n",offset,offset,prnt_dbg_comp,chg_idx,chg_idx,(chg_idx),tmp_dbg_comp)
+                       prnt_dbg_comp=GlobalDebugComponents=padapter->registrypriv.dbg_component;
+                       RT_TRACE(0xffffffff, _drv_emerg_, ("3-2: mp_query_drv_var: offset(%d;0x%x):for query dbg conpoment=0x%x(l) 0x%x(h)  GlobalDebugComponents=0x%x(l) 0x%x(h)\n",offset,offset,padapter->registrypriv.dbg_component,prnt_dbg_comp));
+
+                       if(GlobalDebugComponents&tmp_dbg_comp){
+                               //this bit is already set, now clear it
+                               GlobalDebugComponents=GlobalDebugComponents&(~tmp_dbg_comp);
+                       }
+                       else{
+                               //this bit is not set, now set it.
+                               GlobalDebugComponents =GlobalDebugComponents|tmp_dbg_comp;
+                       }
+                       RT_TRACE(0xffffffff, _drv_emerg_, ("4: mp_query_drv_var: offset(%d;0x%x):before set dbg conpoment tmp_dbg_comp=0x%x GlobalDebugComponents=0x%x(l) 0x%x(h)",offset,offset,tmp_dbg_comp,prnt_dbg_comp));
+                       prnt_dbg_comp=GlobalDebugComponents;
+                       RT_TRACE(0xffffffff, _drv_emerg_, ("4-1: mp_query_drv_var: offset(%d;0x%x):before set dbg conpoment tmp_dbg_comp=0x%x GlobalDebugComponents=0x%x(l) 0x%x(h)",offset,offset,tmp_dbg_comp,prnt_dbg_comp));
+
+                       RT_TRACE(_module_rtl871x_xmit_c_, _drv_emerg_, ("0: mp_query_drv_var(_module_rtl871x_xmit_c_:0): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,prnt_dbg_comp));
+                       RT_TRACE(_module_xmit_osdep_c_, _drv_emerg_, ("1: mp_query_drv_var(_module_xmit_osdep_c_:1): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
+                       RT_TRACE(_module_rtl871x_recv_c_, _drv_emerg_, ("2: mp_query_drv_var(_module_rtl871x_recv_c_:2): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
+                       RT_TRACE(_module_recv_osdep_c_, _drv_emerg_, ("3: mp_query_drv_var(_module_recv_osdep_c_:3): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
+                       RT_TRACE(_module_rtl871x_mlme_c_, _drv_emerg_, ("4: mp_query_drv_var(_module_rtl871x_mlme_c_:4): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
+                       RT_TRACE(_module_mlme_osdep_c_, _drv_emerg_, (" 5:mp_query_drv_var(_module_mlme_osdep_c_:5): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
+                       RT_TRACE(_module_rtl871x_sta_mgt_c_, _drv_emerg_, ("6: mp_query_drv_var(_module_rtl871x_sta_mgt_c_:6): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
+                       RT_TRACE(_module_rtl871x_cmd_c_, _drv_emerg_, ("7: mp_query_drv_var(_module_rtl871x_cmd_c_:7): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
+                       RT_TRACE(_module_cmd_osdep_c_, _drv_emerg_, ("8: mp_query_drv_var(_module_cmd_osdep_c_:8): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
+                       RT_TRACE(_module_rtl871x_io_c_, _drv_emerg_, ("9: mp_query_drv_var(_module_rtl871x_io_c_:9): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
+                       RT_TRACE(_module_io_osdep_c_, _drv_emerg_, ("10: mp_query_drv_var(_module_io_osdep_c_:10): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
+                       RT_TRACE(_module_os_intfs_c_, _drv_emerg_, ("11: mp_query_drv_var(_module_os_intfs_c_:11): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
+                       RT_TRACE(_module_rtl871x_security_c_, _drv_emerg_, ("12: mp_query_drv_var(_module_rtl871x_security_c_:12): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
+                       RT_TRACE(_module_rtl871x_eeprom_c_, _drv_emerg_, ("13: mp_query_drv_var(_module_rtl871x_eeprom_c_:13): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
+                       RT_TRACE(_module_hal_init_c_, _drv_emerg_, ("14: mp_query_drv_var(_module_hal_init_c_:14): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
+                       RT_TRACE(_module_hci_hal_init_c_, _drv_emerg_, ("15: mp_query_drv_var(_module_hci_hal_init_c_:15): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
+                       RT_TRACE(_module_rtl871x_ioctl_c_, _drv_emerg_, ("16: mp_query_drv_var(_module_rtl871x_ioctl_c_:16): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
+                       RT_TRACE(_module_rtl871x_ioctl_set_c_, _drv_emerg_, ("17: mp_query_drv_var(_module_rtl871x_ioctl_set_c_:17): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
+                       RT_TRACE(_module_rtl871x_ioctl_query_c_, _drv_emerg_, ("18: mp_query_drv_var(_module_rtl871x_ioctl_query_c_:18): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
+                       RT_TRACE(_module_rtl871x_pwrctrl_c_, _drv_emerg_, ("19: mp_query_drv_var(_module_rtl871x_pwrctrl_c_:19): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
+                       RT_TRACE(_module_hci_intfs_c_, _drv_emerg_, ("20: mp_query_drv_var(_module_hci_intfs_c_:20): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
+                       RT_TRACE(_module_hci_ops_c_, _drv_emerg_, ("21: mp_query_drv_var(_module_hci_ops_c_:21): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
+                       RT_TRACE(_module_osdep_service_c_, _drv_emerg_, ("22: mp_query_drv_var(_module_osdep_service_c_:22): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
+                       RT_TRACE(_module_mp_, _drv_emerg_, ("23: mp_query_drv_var(_module_mp_:23): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
+                       RT_TRACE(_module_hci_ops_os_c_, _drv_emerg_, ("24: mp_query_drv_var(_module_hci_ops_os_c_:24): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
+                       var=(u32)(GlobalDebugComponents);
+                       //GlobalDebugComponents=padapter->registrypriv.dbg_component;
+                       RT_TRACE(0xffffffff, _drv_emerg_, (" ==mp_query_drv_var(_module_mp_): offset(%d;0x%x):before set dbg conpoment=0x%x(l) 0x%x(h)\n",offset,offset,GlobalDebugComponents));
+
+               }
+       }
+       else{
+               RT_TRACE(_module_mp_, _drv_emerg_, ("\n mp_query_drv_var: offset(%d) >110\n",offset));
+       }
+#endif
+#endif
+
+       return var;
+}
+#endif
+
+NDIS_STATUS oid_rt_pro_query_dr_variable_hdl(struct oid_par_priv *poid_par_priv)
+{
+#if 0
+       PADAPTER                Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+#ifdef PLATFORM_OS_XP
+       _irqL                   oldirql;
+#endif
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+
+       DR_VARIABLE_STRUCT      *pdrv_var;
+
+
+       if (poid_par_priv->type_of_oid != QUERY_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       *poid_par_priv->bytes_needed = sizeof(DR_VARIABLE_STRUCT);
+       if (poid_par_priv->information_buf_len < *poid_par_priv->bytes_needed)
+               return NDIS_STATUS_INVALID_LENGTH;
+
+       RT_TRACE(_module_mp_, _drv_notice_, ("+Query Information, OID_RT_PRO_QUERY_DR_VARIABLE\n"));
+
+       pdrv_var = (struct _DR_VARIABLE_STRUCT_ *)poid_par_priv->information_buf;
+
+       _irqlevel_changed_(&oldirql, LOWER);
+       pdrv_var->variable = mp_query_drv_var(Adapter, pdrv_var->offset, pdrv_var->variable);
+       _irqlevel_changed_(&oldirql, RAISE);
+
+       *poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
+
+       RT_TRACE(_module_mp_, _drv_notice_,
+                ("-oid_rt_pro_query_dr_variable_hdl: offset=0x%x valule=0x%x\n",
+                 pdrv_var->offset, pdrv_var->variable));
+
+       return status;
+#else
+       return 0;
+#endif
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_pro_rx_packet_type_hdl(struct oid_par_priv *poid_par_priv)
+{
+#if 0
+       PADAPTER        Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+
+       RT_TRACE(_module_mp_, _drv_err_, ("oid_rt_pro_rx_packet_type_hdl...................\n"));
+
+       if (poid_par_priv->information_buf_len < sizeof (UCHAR)) {
+               status = NDIS_STATUS_INVALID_LENGTH;
+               *poid_par_priv->bytes_needed = sizeof(UCHAR);
+               return status;
+       }
+
+       if (poid_par_priv->type_of_oid == SET_OID) {
+               Adapter->mppriv.rx_with_status = *(UCHAR *) poid_par_priv->information_buf;
+               RT_TRACE(_module_rtl871x_ioctl_c_,_drv_err_, ("Query Information, OID_RT_PRO_RX_PACKET_TYPE:%d \n",\
+                                                                                               Adapter->mppriv.rx_with_status));
+
+               //*(u32 *)&Adapter->eeprompriv.mac_addr[0]=rtw_read32(Adapter, 0x10250050);
+               //*(u16 *)&Adapter->eeprompriv.mac_addr[4]=rtw_read16(Adapter, 0x10250054);
+               RT_TRACE(_module_rtl871x_ioctl_c_,_drv_err_,("MAC addr=0x%x:0x%x:0x%x:0x%x:0x%x:0x%x  \n",
+                       Adapter->eeprompriv.mac_addr[0],Adapter->eeprompriv.mac_addr[1],Adapter->eeprompriv.mac_addr[2],\
+                       Adapter->eeprompriv.mac_addr[3],Adapter->eeprompriv.mac_addr[4],Adapter->eeprompriv.mac_addr[5]));
+
+       }
+       else {
+               *(UCHAR *) poid_par_priv->information_buf = Adapter->mppriv.rx_with_status;
+               *poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
+
+               RT_TRACE(_module_rtl871x_ioctl_c_,_drv_err_, ("Query Information, OID_RT_PRO_RX_PACKET_TYPE:%d \n", \
+                                                                                               Adapter->mppriv.rx_with_status));
+
+               //*(u32 *)&Adapter->eeprompriv.mac_addr[0]=rtw_read32(Adapter, 0x10250050);
+               //*(u16 *)&Adapter->eeprompriv.mac_addr[4]=rtw_read16(Adapter, 0x10250054);
+               RT_TRACE(_module_rtl871x_ioctl_c_,_drv_err_,("MAC addr=0x%x:0x%x:0x%x:0x%x:0x%x:0x%x  \n",
+                       Adapter->eeprompriv.mac_addr[0],Adapter->eeprompriv.mac_addr[1],Adapter->eeprompriv.mac_addr[2],\
+                       Adapter->eeprompriv.mac_addr[3],Adapter->eeprompriv.mac_addr[4],Adapter->eeprompriv.mac_addr[5]));
+       }
+#endif
+
+       return NDIS_STATUS_SUCCESS;
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_pro_read_efuse_hdl(struct oid_par_priv *poid_par_priv)
+{
+#ifdef PLATFORM_OS_XP
+       _irqL oldirql;
+#endif
+       PEFUSE_ACCESS_STRUCT pefuse;
+       u8 *data;
+       u16 addr = 0, cnts = 0, max_available_size = 0;
+       NDIS_STATUS status = NDIS_STATUS_SUCCESS;
+       PADAPTER Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+_func_enter_;
+
+       if (poid_par_priv->type_of_oid != QUERY_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       if (poid_par_priv->information_buf_len < sizeof(EFUSE_ACCESS_STRUCT))
+               return NDIS_STATUS_INVALID_LENGTH;
+
+       pefuse = (PEFUSE_ACCESS_STRUCT)poid_par_priv->information_buf;
+       addr = pefuse->start_addr;
+       cnts = pefuse->cnts;
+       data = pefuse->data;
+
+       RT_TRACE(_module_mp_, _drv_notice_,
+               ("+oid_rt_pro_read_efuse_hd: buf_len=%ld addr=%d cnts=%d\n",
+                poid_par_priv->information_buf_len, addr, cnts));
+
+       EFUSE_GetEfuseDefinition(Adapter, EFUSE_WIFI, TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, (PVOID)&max_available_size, _FALSE);
+
+       if ((addr + cnts) > max_available_size) {
+               RT_TRACE(_module_mp_, _drv_err_, ("!oid_rt_pro_read_efuse_hdl: parameter error!\n"));
+               return NDIS_STATUS_NOT_ACCEPTED;
+       }
+
+       _irqlevel_changed_(&oldirql, LOWER);
+       if (rtw_efuse_access(Adapter, _FALSE, addr, cnts, data) == _FAIL) {
+               RT_TRACE(_module_mp_, _drv_err_, ("!oid_rt_pro_read_efuse_hdl: rtw_efuse_access FAIL!\n"));
+               status = NDIS_STATUS_FAILURE;
+       } else
+               *poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
+       _irqlevel_changed_(&oldirql, RAISE);
+
+_func_exit_;
+
+       return status;
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_pro_write_efuse_hdl(struct oid_par_priv *poid_par_priv)
+{
+#ifdef PLATFORM_OS_XP
+       _irqL oldirql;
+#endif
+       PEFUSE_ACCESS_STRUCT pefuse;
+       u8 *data;
+       u16 addr = 0, cnts = 0, max_available_size = 0;
+       NDIS_STATUS status = NDIS_STATUS_SUCCESS;
+       PADAPTER Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+
+_func_enter_;
+
+       if (poid_par_priv->type_of_oid != SET_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       pefuse = (PEFUSE_ACCESS_STRUCT)poid_par_priv->information_buf;
+       addr = pefuse->start_addr;
+       cnts = pefuse->cnts;
+       data = pefuse->data;
+
+       RT_TRACE(_module_mp_, _drv_notice_,
+                ("+oid_rt_pro_write_efuse_hdl: buf_len=%ld addr=0x%04x cnts=%d\n",
+                 poid_par_priv->information_buf_len, addr, cnts));
+
+       EFUSE_GetEfuseDefinition(Adapter, EFUSE_WIFI, TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, (PVOID)&max_available_size, _FALSE);
+
+       if ((addr + cnts) > max_available_size) {
+               RT_TRACE(_module_mp_, _drv_err_, ("!oid_rt_pro_write_efuse_hdl: parameter error"));
+               return NDIS_STATUS_NOT_ACCEPTED;
+       }
+
+       _irqlevel_changed_(&oldirql, LOWER);
+       if (rtw_efuse_access(Adapter, _TRUE, addr, cnts, data) == _FAIL)
+               status = NDIS_STATUS_FAILURE;
+       _irqlevel_changed_(&oldirql, RAISE);
+
+_func_exit_;
+
+       return status;
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_pro_rw_efuse_pgpkt_hdl(struct oid_par_priv *poid_par_priv)
+{
+#ifdef PLATFORM_OS_XP
+       _irqL           oldirql;
+#endif
+       PPGPKT_STRUCT   ppgpkt;
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+       PADAPTER        Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+_func_enter_;
+
+//     RT_TRACE(_module_mp_, _drv_info_, ("+oid_rt_pro_rw_efuse_pgpkt_hdl\n"));
+
+       *poid_par_priv->bytes_rw = 0;
+
+       if (poid_par_priv->information_buf_len < sizeof(PGPKT_STRUCT))
+               return NDIS_STATUS_INVALID_LENGTH;
+
+       ppgpkt = (PPGPKT_STRUCT)poid_par_priv->information_buf;
+
+       _irqlevel_changed_(&oldirql, LOWER);
+
+       if (poid_par_priv->type_of_oid == QUERY_OID)
+       {
+               RT_TRACE(_module_mp_, _drv_notice_,
+                       ("oid_rt_pro_rw_efuse_pgpkt_hdl: Read offset=0x%x\n",\
+                       ppgpkt->offset));
+
+               Efuse_PowerSwitch(Adapter, _FALSE, _TRUE);
+               if (Efuse_PgPacketRead(Adapter, ppgpkt->offset, ppgpkt->data, _FALSE) == _TRUE)
+                       *poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
+               else
+                       status = NDIS_STATUS_FAILURE;
+               Efuse_PowerSwitch(Adapter, _FALSE, _FALSE);
+       } else {
+               RT_TRACE(_module_mp_, _drv_notice_,
+                       ("oid_rt_pro_rw_efuse_pgpkt_hdl: Write offset=0x%x word_en=0x%x\n",\
+                       ppgpkt->offset, ppgpkt->word_en));
+
+               Efuse_PowerSwitch(Adapter, _TRUE, _TRUE);
+               if (Efuse_PgPacketWrite(Adapter, ppgpkt->offset, ppgpkt->word_en, ppgpkt->data, _FALSE) == _TRUE)
+                       *poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
+               else
+                       status = NDIS_STATUS_FAILURE;
+               Efuse_PowerSwitch(Adapter, _TRUE, _FALSE);
+       }
+
+       _irqlevel_changed_(&oldirql, RAISE);
+
+       RT_TRACE(_module_mp_, _drv_info_,
+                ("-oid_rt_pro_rw_efuse_pgpkt_hdl: status=0x%08X\n", status));
+
+_func_exit_;
+
+       return status;
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_get_efuse_current_size_hdl(struct oid_par_priv *poid_par_priv)
+{
+#ifdef PLATFORM_OS_XP
+       _irqL           oldirql;
+#endif
+       u16 size;
+       u8 ret;
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+       PADAPTER        Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+_func_enter_;
+
+       if (poid_par_priv->type_of_oid != QUERY_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       if (poid_par_priv->information_buf_len <sizeof(u32))
+               return NDIS_STATUS_INVALID_LENGTH;
+
+       _irqlevel_changed_(&oldirql, LOWER);
+       ret = efuse_GetCurrentSize(Adapter, &size);
+       _irqlevel_changed_(&oldirql, RAISE);
+       if (ret == _SUCCESS) {
+               *(u32*)poid_par_priv->information_buf = size;
+               *poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
+       } else
+               status = NDIS_STATUS_FAILURE;
+
+_func_exit_;
+
+       return status;
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_get_efuse_max_size_hdl(struct oid_par_priv *poid_par_priv)
+{
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+       PADAPTER        Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+_func_enter_;
+
+       if (poid_par_priv->type_of_oid != QUERY_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       if (poid_par_priv->information_buf_len < sizeof(u32))
+               return NDIS_STATUS_INVALID_LENGTH;
+
+       *(u32*)poid_par_priv->information_buf = efuse_GetMaxSize(Adapter);
+       *poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
+
+       RT_TRACE(_module_mp_, _drv_info_,
+                ("-oid_rt_get_efuse_max_size_hdl: size=%d status=0x%08X\n",
+                 *(int*)poid_par_priv->information_buf, status));
+
+_func_exit_;
+
+       return status;
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_pro_efuse_hdl(struct oid_par_priv *poid_par_priv)
+{
+       NDIS_STATUS     status;
+
+_func_enter_;
+
+       RT_TRACE(_module_mp_, _drv_info_, ("+oid_rt_pro_efuse_hdl\n"));
+
+       if (poid_par_priv->type_of_oid == QUERY_OID)
+               status = oid_rt_pro_read_efuse_hdl(poid_par_priv);
+       else
+               status = oid_rt_pro_write_efuse_hdl(poid_par_priv);
+
+       RT_TRACE(_module_mp_, _drv_info_, ("-oid_rt_pro_efuse_hdl: status=0x%08X\n", status));
+
+_func_exit_;
+
+       return status;
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_pro_efuse_map_hdl(struct oid_par_priv *poid_par_priv)
+{
+#ifdef PLATFORM_OS_XP
+       _irqL           oldirql;
+#endif
+       u8              *data;
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+       PADAPTER        Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+       u16     mapLen=0;
+
+_func_enter_;
+
+       RT_TRACE(_module_mp_, _drv_notice_, ("+oid_rt_pro_efuse_map_hdl\n"));
+
+       EFUSE_GetEfuseDefinition(Adapter, EFUSE_WIFI, TYPE_EFUSE_MAP_LEN, (PVOID)&mapLen, _FALSE);
+
+       *poid_par_priv->bytes_rw = 0;
+
+       if (poid_par_priv->information_buf_len < mapLen)
+               return NDIS_STATUS_INVALID_LENGTH;
+
+       data = (u8*)poid_par_priv->information_buf;
+
+       _irqlevel_changed_(&oldirql, LOWER);
+
+       if (poid_par_priv->type_of_oid == QUERY_OID)
+       {
+               RT_TRACE(_module_mp_, _drv_info_,
+                       ("oid_rt_pro_efuse_map_hdl: READ\n"));
+
+               if (rtw_efuse_map_read(Adapter, 0, mapLen, data) == _SUCCESS)
+                       *poid_par_priv->bytes_rw = mapLen;
+               else {
+                       RT_TRACE(_module_mp_, _drv_err_,
+                               ("oid_rt_pro_efuse_map_hdl: READ fail\n"));
+                       status = NDIS_STATUS_FAILURE;
+               }
+       } else {
+               // SET_OID
+               RT_TRACE(_module_mp_, _drv_info_,
+                       ("oid_rt_pro_efuse_map_hdl: WRITE\n"));
+
+               if (rtw_efuse_map_write(Adapter, 0, mapLen, data) == _SUCCESS)
+                       *poid_par_priv->bytes_rw = mapLen;
+               else {
+                       RT_TRACE(_module_mp_, _drv_err_,
+                               ("oid_rt_pro_efuse_map_hdl: WRITE fail\n"));
+                       status = NDIS_STATUS_FAILURE;
+               }
+       }
+
+       _irqlevel_changed_(&oldirql, RAISE);
+
+       RT_TRACE(_module_mp_, _drv_info_,
+                ("-oid_rt_pro_efuse_map_hdl: status=0x%08X\n", status));
+
+_func_exit_;
+
+       return status;
+}
+
+NDIS_STATUS oid_rt_set_crystal_cap_hdl(struct oid_par_priv *poid_par_priv)
+{
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+#if 0
+       PADAPTER        Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+#ifdef PLATFORM_OS_XP
+       _irqL           oldirql;
+#endif
+
+       u32             crystal_cap = 0;
+
+_func_enter_;
+
+       if (poid_par_priv->type_of_oid != SET_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       if (poid_par_priv->information_buf_len <sizeof(u32))
+               return NDIS_STATUS_INVALID_LENGTH;
+
+       crystal_cap = *((u32*)poid_par_priv->information_buf);//4
+       if (crystal_cap > 0xf)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       Adapter->mppriv.curr_crystalcap = crystal_cap;
+
+       _irqlevel_changed_(&oldirql,LOWER);
+       SetCrystalCap(Adapter);
+       _irqlevel_changed_(&oldirql,RAISE);
+
+_func_exit_;
+
+#endif
+       return status;
+}
+
+NDIS_STATUS oid_rt_set_rx_packet_type_hdl(struct oid_par_priv *poid_par_priv)
+{
+#ifdef PLATFORM_OS_XP
+       _irqL           oldirql;
+#endif
+       u8              rx_pkt_type;
+//     u32             rcr_val32;
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+//     PADAPTER        padapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+_func_enter_;
+
+       RT_TRACE(_module_mp_, _drv_notice_, ("+oid_rt_set_rx_packet_type_hdl\n"));
+
+       if (poid_par_priv->type_of_oid != SET_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       if (poid_par_priv->information_buf_len < sizeof(u8))
+               return NDIS_STATUS_INVALID_LENGTH;
+
+       rx_pkt_type = *((u8*)poid_par_priv->information_buf);//4
+
+       RT_TRACE(_module_mp_, _drv_info_, ("rx_pkt_type: %x\n",rx_pkt_type ));
+#if 0
+       _irqlevel_changed_(&oldirql, LOWER);
+#if 0
+       rcr_val8 = rtw_read8(Adapter, 0x10250048);//RCR
+       rcr_val8 &= ~(RCR_AB|RCR_AM|RCR_APM|RCR_AAP);
+
+       if(rx_pkt_type == RX_PKT_BROADCAST){
+               rcr_val8 |= (RCR_AB | RCR_ACRC32 );
+       }
+       else if(rx_pkt_type == RX_PKT_DEST_ADDR){
+               rcr_val8 |= (RCR_AAP| RCR_AM |RCR_ACRC32);
+       }
+       else if(rx_pkt_type == RX_PKT_PHY_MATCH){
+               rcr_val8 |= (RCR_APM|RCR_ACRC32);
+       }
+       else{
+               rcr_val8 &= ~(RCR_AAP|RCR_APM|RCR_AM|RCR_AB|RCR_ACRC32);
+       }
+       rtw_write8(padapter, 0x10250048,rcr_val8);
+#else
+       rcr_val32 = rtw_read32(padapter, RCR);//RCR = 0x10250048
+       rcr_val32 &= ~(RCR_CBSSID|RCR_AB|RCR_AM|RCR_APM|RCR_AAP);
+#if 0
+       if(rx_pkt_type == RX_PKT_BROADCAST){
+               rcr_val32 |= (RCR_AB|RCR_AM|RCR_APM|RCR_AAP|RCR_ACRC32);
+       }
+       else if(rx_pkt_type == RX_PKT_DEST_ADDR){
+               //rcr_val32 |= (RCR_CBSSID|RCR_AAP|RCR_AM|RCR_ACRC32);
+               rcr_val32 |= (RCR_CBSSID|RCR_APM|RCR_ACRC32);
+       }
+       else if(rx_pkt_type == RX_PKT_PHY_MATCH){
+               rcr_val32 |= (RCR_APM|RCR_ACRC32);
+               //rcr_val32 |= (RCR_AAP|RCR_ACRC32);
+       }
+       else{
+               rcr_val32 &= ~(RCR_AAP|RCR_APM|RCR_AM|RCR_AB|RCR_ACRC32);
+       }
+#else
+       switch (rx_pkt_type)
+       {
+               case RX_PKT_BROADCAST :
+                       rcr_val32 |= (RCR_AB|RCR_AM|RCR_APM|RCR_AAP|RCR_ACRC32);
+                       break;
+               case RX_PKT_DEST_ADDR :
+                       rcr_val32 |= (RCR_AB|RCR_AM|RCR_APM|RCR_AAP|RCR_ACRC32);
+                       break;
+               case RX_PKT_PHY_MATCH:
+                       rcr_val32 |= (RCR_APM|RCR_ACRC32);
+                       break;
+               default:
+                       rcr_val32 &= ~(RCR_AAP|RCR_APM|RCR_AM|RCR_AB|RCR_ACRC32);
+                       break;
+       }
+
+       if (rx_pkt_type == RX_PKT_DEST_ADDR) {
+               padapter->mppriv.check_mp_pkt = 1;
+       } else {
+               padapter->mppriv.check_mp_pkt = 0;
+       }
+#endif
+       rtw_write32(padapter, RCR, rcr_val32);
+
+#endif
+       _irqlevel_changed_(&oldirql, RAISE);
+#endif
+_func_exit_;
+
+       return status;
+}
+
+NDIS_STATUS oid_rt_pro_set_tx_agc_offset_hdl(struct oid_par_priv *poid_par_priv)
+{
+#if 0
+       PADAPTER        Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+#ifdef PLATFORM_OS_XP
+       _irqL           oldirql;
+#endif
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+
+       u32             txagc;
+
+_func_enter_;
+
+       if (poid_par_priv->type_of_oid != SET_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       if (poid_par_priv->information_buf_len < sizeof(u32))
+               return NDIS_STATUS_INVALID_LENGTH;
+
+       txagc = *(u32*)poid_par_priv->information_buf;
+       RT_TRACE(_module_mp_, _drv_info_,
+                ("oid_rt_pro_set_tx_agc_offset_hdl: 0x%08x\n", txagc));
+
+       _irqlevel_changed_(&oldirql, LOWER);
+       SetTxAGCOffset(Adapter, txagc);
+       _irqlevel_changed_(&oldirql, RAISE);
+
+_func_exit_;
+
+       return status;
+#else
+       return 0;
+#endif
+}
+
+NDIS_STATUS oid_rt_pro_set_pkt_test_mode_hdl(struct oid_par_priv *poid_par_priv)
+{
+#if 0
+       PADAPTER                Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+
+       NDIS_STATUS             status = NDIS_STATUS_SUCCESS;
+
+       struct mlme_priv        *pmlmepriv = &Adapter->mlmepriv;
+       struct mp_priv          *pmppriv = &Adapter->mppriv;
+       u32                     type;
+
+_func_enter_;
+
+       if (poid_par_priv->type_of_oid != SET_OID)
+               return NDIS_STATUS_NOT_ACCEPTED;
+
+       if (poid_par_priv->information_buf_len <sizeof(u32))
+               return NDIS_STATUS_INVALID_LENGTH;
+
+       type = *(u32*)poid_par_priv->information_buf;
+
+       if (_LOOPBOOK_MODE_ == type) {
+               pmppriv->mode = type;
+               set_fwstate(pmlmepriv, WIFI_MP_LPBK_STATE); //append txdesc
+               RT_TRACE(_module_mp_, _drv_info_, ("test mode change to loopback mode:0x%08x.\n", get_fwstate(pmlmepriv)));
+       } else if (_2MAC_MODE_ == type){
+               pmppriv->mode = type;
+               _clr_fwstate_(pmlmepriv, WIFI_MP_LPBK_STATE);
+               RT_TRACE(_module_mp_, _drv_info_, ("test mode change to 2mac mode:0x%08x.\n", get_fwstate(pmlmepriv)));
+       } else
+               status = NDIS_STATUS_NOT_ACCEPTED;
+
+_func_exit_;
+
+       return status;
+#else
+       return 0;
+#endif
+}
+
+unsigned int mp_ioctl_xmit_packet_hdl(struct oid_par_priv *poid_par_priv)
+{
+       PMP_XMIT_PARM pparm;
+       PADAPTER padapter;
+       struct mp_priv *pmp_priv;
+       struct pkt_attrib *pattrib;
+
+       RT_TRACE(_module_mp_, _drv_notice_, ("+%s\n", __func__));
+
+       pparm = (PMP_XMIT_PARM)poid_par_priv->information_buf;
+       padapter = (PADAPTER)poid_par_priv->adapter_context;
+       pmp_priv = &padapter->mppriv;
+
+       if (poid_par_priv->type_of_oid == QUERY_OID) {
+               pparm->enable = !pmp_priv->tx.stop;
+               pparm->count = pmp_priv->tx.sended;
+       } else {
+               if (pparm->enable == 0) {
+                       pmp_priv->tx.stop = 1;
+               } else if (pmp_priv->tx.stop == 1) {
+                       pmp_priv->tx.stop = 0;
+                       pmp_priv->tx.count = pparm->count;
+                       pmp_priv->tx.payload = pparm->payload_type;
+                       pattrib = &pmp_priv->tx.attrib;
+                       pattrib->pktlen = pparm->length;
+                       _rtw_memcpy(pattrib->dst, pparm->da, ETH_ALEN);
+                       SetPacketTx(padapter);
+               } else
+                       return NDIS_STATUS_FAILURE;
+       }
+
+       return NDIS_STATUS_SUCCESS;
+}
+
+#if 0
+unsigned int mp_ioctl_xmit_packet_hdl(struct oid_par_priv *poid_par_priv)
+{
+       unsigned char *pframe, *pmp_pkt;
+       struct ethhdr *pethhdr;
+       struct pkt_attrib *pattrib;
+       struct rtw_ieee80211_hdr *pwlanhdr;
+       unsigned short *fctrl;
+       int llc_sz, payload_len;
+       struct mp_xmit_frame *pxframe=  NULL;
+       struct mp_xmit_packet *pmp_xmitpkt = (struct mp_xmit_packet*)param;
+       u8 addr3[] = {0x02, 0xE0, 0x4C, 0x87, 0x66, 0x55};
+
+//     DBG_871X("+mp_ioctl_xmit_packet_hdl\n");
+
+       pxframe = alloc_mp_xmitframe(&padapter->mppriv);
+       if (pxframe == NULL)
+       {
+               DEBUG_ERR(("Can't alloc pmpframe %d:%s\n", __LINE__, __FILE__));
+               return -1;
+       }
+
+       //mp_xmit_pkt
+       payload_len = pmp_xmitpkt->len - 14;
+       pmp_pkt = (unsigned char*)pmp_xmitpkt->mem;
+       pethhdr = (struct ethhdr *)pmp_pkt;
+
+       //DBG_871X("payload_len=%d, pkt_mem=0x%x\n", pmp_xmitpkt->len, (void*)pmp_xmitpkt->mem);
+
+       //DBG_871X("pxframe=0x%x\n", (void*)pxframe);
+       //DBG_871X("pxframe->mem=0x%x\n", (void*)pxframe->mem);
+
+       //update attribute
+       pattrib = &pxframe->attrib;
+       memset((u8 *)(pattrib), 0, sizeof (struct pkt_attrib));
+       pattrib->pktlen = pmp_xmitpkt->len;
+       pattrib->ether_type = ntohs(pethhdr->h_proto);
+       pattrib->hdrlen = 24;
+       pattrib->nr_frags = 1;
+       pattrib->priority = 0;
+#ifndef CONFIG_MP_LINUX
+       if(IS_MCAST(pethhdr->h_dest))
+               pattrib->mac_id = 4;
+       else
+               pattrib->mac_id = 5;
+#else
+       pattrib->mac_id = 5;
+#endif
+
+       //
+       memset(pxframe->mem, 0 , WLANHDR_OFFSET);
+       pframe = (u8 *)(pxframe->mem) + WLANHDR_OFFSET;
+
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+
+       fctrl = &(pwlanhdr->frame_ctl);
+       *(fctrl) = 0;
+       SetFrameSubType(pframe, WIFI_DATA);
+
+       _rtw_memcpy(pwlanhdr->addr1, pethhdr->h_dest, ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr2, pethhdr->h_source, ETH_ALEN);
+
+       _rtw_memcpy(pwlanhdr->addr3, addr3, ETH_ALEN);
+
+       pwlanhdr->seq_ctl = 0;
+       pframe += pattrib->hdrlen;
+
+       llc_sz= rtw_put_snap(pframe, pattrib->ether_type);
+       pframe += llc_sz;
+
+       _rtw_memcpy(pframe, (void*)(pmp_pkt+14),  payload_len);
+
+       pattrib->last_txcmdsz = pattrib->hdrlen + llc_sz + payload_len;
+
+       DEBUG_INFO(("issuing mp_xmit_frame, tx_len=%d, ether_type=0x%x\n", pattrib->last_txcmdsz, pattrib->ether_type));
+       xmit_mp_frame(padapter, pxframe);
+
+       return _SUCCESS;
+}
+#endif
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_set_power_down_hdl(struct oid_par_priv *poid_par_priv)
+{
+#ifdef PLATFORM_OS_XP
+       _irqL           oldirql;
+#endif
+       u8              bpwrup;
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+#ifdef PLATFORM_LINUX
+#ifdef CONFIG_SDIO_HCI
+       PADAPTER        padapter = (PADAPTER)(poid_par_priv->adapter_context);
+#endif
+#endif
+
+_func_enter_;
+
+       if (poid_par_priv->type_of_oid != SET_OID) {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               return status;
+       }
+
+       RT_TRACE(_module_mp_, _drv_info_,
+                ("\n ===> Setoid_rt_set_power_down_hdl.\n"));
+
+       _irqlevel_changed_(&oldirql, LOWER);
+
+       bpwrup = *(u8 *)poid_par_priv->information_buf;
+       //CALL  the power_down function
+#ifdef PLATFORM_LINUX
+#ifdef CONFIG_SDIO_HCI
+       dev_power_down(padapter,bpwrup);
+#endif
+#endif
+       _irqlevel_changed_(&oldirql, RAISE);
+
+       //DEBUG_ERR(("\n <=== Query OID_RT_PRO_READ_REGISTER.
+       //      Add:0x%08x Width:%d Value:0x%08x\n",RegRWStruct->offset,RegRWStruct->width,RegRWStruct->value));
+
+_func_exit_;
+
+       return status;
+}
+//------------------------------------------------------------------------------
+NDIS_STATUS oid_rt_get_power_mode_hdl(struct oid_par_priv *poid_par_priv)
+{
+#if 0
+       NDIS_STATUS     status = NDIS_STATUS_SUCCESS;
+       PADAPTER        Adapter = (PADAPTER)(poid_par_priv->adapter_context);
+//#ifdef PLATFORM_OS_XP
+//     _irqL           oldirql;
+//#endif
+
+_func_enter_;
+
+       if (poid_par_priv->type_of_oid != QUERY_OID) {
+               status = NDIS_STATUS_NOT_ACCEPTED;
+               return status;
+       }
+       if (poid_par_priv->information_buf_len < sizeof(u32)) {
+               status = NDIS_STATUS_INVALID_LENGTH;
+               return status;
+       }
+
+       RT_TRACE(_module_mp_, _drv_info_,
+                ("\n ===> oid_rt_get_power_mode_hdl.\n"));
+
+//     _irqlevel_changed_(&oldirql, LOWER);
+       *(int*)poid_par_priv->information_buf = Adapter->registrypriv.low_power ? POWER_LOW : POWER_NORMAL;
+       *poid_par_priv->bytes_rw = poid_par_priv->information_buf_len;
+//     _irqlevel_changed_(&oldirql, RAISE);
+
+_func_exit_;
+
+       return status;
+#else
+       return 0;
+#endif
+}
diff --git a/drivers/net/wireless/realtek/rtl8192cu/core/rtw_p2p.c b/drivers/net/wireless/realtek/rtl8192cu/core/rtw_p2p.c
new file mode 100644 (file)
index 0000000..8f6cad3
--- /dev/null
@@ -0,0 +1,5293 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#define _RTW_P2P_C_
+
+#include <drv_types.h>
+#include <rtw_p2p.h>
+#include <wifi.h>
+
+#ifdef CONFIG_P2P
+
+int rtw_p2p_is_channel_list_ok( u8 desired_ch, u8* ch_list, u8 ch_cnt )
+{
+       int found = 0, i = 0;
+
+       for( i = 0; i < ch_cnt; i++ )
+       {
+               if ( ch_list[ i ] == desired_ch )
+               {
+                       found = 1;
+                       break;
+               }
+       }
+       return( found );
+}
+
+int is_any_client_associated(_adapter *padapter)
+{
+       return padapter->stapriv.asoc_list_cnt ? _TRUE : _FALSE;
+}
+
+static u32 go_add_group_info_attr(struct wifidirect_info *pwdinfo, u8 *pbuf)
+{
+       _irqL irqL;
+       _list   *phead, *plist;
+       u32 len=0;
+       u16 attr_len = 0;
+       u8 tmplen, *pdata_attr, *pstart, *pcur;
+       struct sta_info *psta = NULL;
+       _adapter *padapter = pwdinfo->padapter;
+       struct sta_priv *pstapriv = &padapter->stapriv;
+
+       DBG_871X("%s\n", __FUNCTION__);
+
+       pdata_attr = rtw_zmalloc(MAX_P2P_IE_LEN);
+
+       pstart = pdata_attr;
+       pcur = pdata_attr;
+
+       _enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+       phead = &pstapriv->asoc_list;
+       plist = get_next(phead);
+
+       //look up sta asoc_queue
+       while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
+       {
+               psta = LIST_CONTAINOR(plist, struct sta_info, asoc_list);
+
+               plist = get_next(plist);
+
+
+               if(psta->is_p2p_device)
+               {
+                       tmplen = 0;
+
+                       pcur++;
+
+                       //P2P device address
+                       _rtw_memcpy(pcur, psta->dev_addr, ETH_ALEN);
+                       pcur += ETH_ALEN;
+
+                       //P2P interface address
+                       _rtw_memcpy(pcur, psta->hwaddr, ETH_ALEN);
+                       pcur += ETH_ALEN;
+
+                       *pcur = psta->dev_cap;
+                       pcur++;
+
+                       //*(u16*)(pcur) = cpu_to_be16(psta->config_methods);
+                       RTW_PUT_BE16(pcur, psta->config_methods);
+                       pcur += 2;
+
+                       _rtw_memcpy(pcur, psta->primary_dev_type, 8);
+                       pcur += 8;
+
+                       *pcur = psta->num_of_secdev_type;
+                       pcur++;
+
+                       _rtw_memcpy(pcur, psta->secdev_types_list, psta->num_of_secdev_type*8);
+                       pcur += psta->num_of_secdev_type*8;
+
+                       if(psta->dev_name_len>0)
+                       {
+                               //*(u16*)(pcur) = cpu_to_be16( WPS_ATTR_DEVICE_NAME );
+                               RTW_PUT_BE16(pcur, WPS_ATTR_DEVICE_NAME);
+                               pcur += 2;
+
+                               //*(u16*)(pcur) = cpu_to_be16( psta->dev_name_len );
+                               RTW_PUT_BE16(pcur, psta->dev_name_len);
+                               pcur += 2;
+
+                               _rtw_memcpy(pcur, psta->dev_name, psta->dev_name_len);
+                               pcur += psta->dev_name_len;
+                       }
+
+
+                       tmplen = (u8)(pcur-pstart);
+
+                       *pstart = (tmplen-1);
+
+                       attr_len += tmplen;
+
+                       //pstart += tmplen;
+                       pstart = pcur;
+
+               }
+
+
+       }
+       _exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+
+       if(attr_len>0)
+       {
+               len = rtw_set_p2p_attr_content(pbuf, P2P_ATTR_GROUP_INFO, attr_len, pdata_attr);
+       }
+
+       rtw_mfree(pdata_attr, MAX_P2P_IE_LEN);
+
+       return len;
+
+}
+
+static void issue_group_disc_req(struct wifidirect_info *pwdinfo, u8 *da)
+{
+       struct xmit_frame                       *pmgntframe;
+       struct pkt_attrib                       *pattrib;
+       unsigned char                                   *pframe;
+       struct rtw_ieee80211_hdr        *pwlanhdr;
+       unsigned short                          *fctrl;
+       _adapter *padapter = pwdinfo->padapter;
+       struct xmit_priv                        *pxmitpriv = &(padapter->xmitpriv);
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       unsigned char category = RTW_WLAN_CATEGORY_P2P;//P2P action frame
+       u32     p2poui = cpu_to_be32(P2POUI);
+       u8      oui_subtype = P2P_GO_DISC_REQUEST;
+       u8      dialogToken=0;
+
+       DBG_871X("[%s]\n", __FUNCTION__);
+
+       if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+       {
+               return;
+       }
+
+       //update attribute
+       pattrib = &pmgntframe->attrib;
+       update_mgntframe_attrib(padapter, pattrib);
+
+       _rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
+
+       pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+
+       fctrl = &(pwlanhdr->frame_ctl);
+       *(fctrl) = 0;
+
+       _rtw_memcpy(pwlanhdr->addr1, da, ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr2, pwdinfo->interface_addr, ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr3, pwdinfo->interface_addr, ETH_ALEN);
+
+       SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
+       pmlmeext->mgnt_seq++;
+       SetFrameSubType(pframe, WIFI_ACTION);
+
+       pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
+       pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
+
+       //Build P2P action frame header
+       pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 4, (unsigned char *) &(p2poui), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(oui_subtype), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(dialogToken), &(pattrib->pktlen));
+
+       //there is no IE in this P2P action frame
+
+       pattrib->last_txcmdsz = pattrib->pktlen;
+
+       dump_mgntframe(padapter, pmgntframe);
+
+}
+
+static void issue_p2p_devdisc_resp(struct wifidirect_info *pwdinfo, u8 *da, u8 status, u8 dialogToken)
+{
+       struct xmit_frame                       *pmgntframe;
+       struct pkt_attrib                       *pattrib;
+       unsigned char                                   *pframe;
+       struct rtw_ieee80211_hdr        *pwlanhdr;
+       unsigned short                          *fctrl;
+       _adapter *padapter = pwdinfo->padapter;
+       struct xmit_priv                        *pxmitpriv = &(padapter->xmitpriv);
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       unsigned char category = RTW_WLAN_CATEGORY_PUBLIC;
+       u8                      action = P2P_PUB_ACTION_ACTION;
+       u32                     p2poui = cpu_to_be32(P2POUI);
+       u8                      oui_subtype = P2P_DEVDISC_RESP;
+       u8 p2pie[8] = { 0x00 };
+       u32 p2pielen = 0;
+
+       DBG_871X("[%s]\n", __FUNCTION__);
+
+       if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+       {
+               return;
+       }
+
+       //update attribute
+       pattrib = &pmgntframe->attrib;
+       update_mgntframe_attrib(padapter, pattrib);
+
+       _rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
+
+       pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+
+       fctrl = &(pwlanhdr->frame_ctl);
+       *(fctrl) = 0;
+
+       _rtw_memcpy(pwlanhdr->addr1, da, ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr2, pwdinfo->device_addr, ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr3, pwdinfo->device_addr, ETH_ALEN);
+
+       SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
+       pmlmeext->mgnt_seq++;
+       SetFrameSubType(pframe, WIFI_ACTION);
+
+       pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
+       pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
+
+       //Build P2P public action frame header
+       pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 4, (unsigned char *) &(p2poui), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(oui_subtype), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(dialogToken), &(pattrib->pktlen));
+
+
+       //Build P2P IE
+       //      P2P OUI
+       p2pielen = 0;
+       p2pie[ p2pielen++ ] = 0x50;
+       p2pie[ p2pielen++ ] = 0x6F;
+       p2pie[ p2pielen++ ] = 0x9A;
+       p2pie[ p2pielen++ ] = 0x09;     //      WFA P2P v1.0
+
+       // P2P_ATTR_STATUS
+       p2pielen += rtw_set_p2p_attr_content(&p2pie[p2pielen], P2P_ATTR_STATUS, 1, &status);
+
+       pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, p2pielen, p2pie, &pattrib->pktlen);
+
+       pattrib->last_txcmdsz = pattrib->pktlen;
+
+       dump_mgntframe(padapter, pmgntframe);
+
+}
+
+static void issue_p2p_provision_resp(struct wifidirect_info *pwdinfo, u8* raddr, u8* frame_body, u16 config_method)
+{
+       _adapter *padapter = pwdinfo->padapter;
+       unsigned char category = RTW_WLAN_CATEGORY_PUBLIC;
+       u8                      action = P2P_PUB_ACTION_ACTION;
+       u8                      dialogToken = frame_body[7];    //      The Dialog Token of provisioning discovery request frame.
+       u32                     p2poui = cpu_to_be32(P2POUI);
+       u8                      oui_subtype = P2P_PROVISION_DISC_RESP;
+       u8                      wpsie[ 100 ] = { 0x00 };
+       u8                      wpsielen = 0;
+#ifdef CONFIG_WFD
+       u32                                     wfdielen = 0;
+#endif //CONFIG_WFD
+
+       struct xmit_frame                       *pmgntframe;
+       struct pkt_attrib                       *pattrib;
+       unsigned char                                   *pframe;
+       struct rtw_ieee80211_hdr        *pwlanhdr;
+       unsigned short                          *fctrl;
+       struct xmit_priv                        *pxmitpriv = &(padapter->xmitpriv);
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+
+       if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+       {
+               return;
+       }
+
+       //update attribute
+       pattrib = &pmgntframe->attrib;
+       update_mgntframe_attrib(padapter, pattrib);
+
+       _rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
+
+       pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+
+       fctrl = &(pwlanhdr->frame_ctl);
+       *(fctrl) = 0;
+
+       _rtw_memcpy(pwlanhdr->addr1, raddr, ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr3, myid(&(padapter->eeprompriv)), ETH_ALEN);
+
+       SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
+       pmlmeext->mgnt_seq++;
+       SetFrameSubType(pframe, WIFI_ACTION);
+
+       pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
+       pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
+
+       pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 4, (unsigned char *) &(p2poui), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(oui_subtype), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(dialogToken), &(pattrib->pktlen));
+
+       wpsielen = 0;
+       //      WPS OUI
+       //*(u32*) ( wpsie ) = cpu_to_be32( WPSOUI );
+       RTW_PUT_BE32(wpsie, WPSOUI);
+       wpsielen += 4;
+
+#if 0
+       //      WPS version
+       //      Type:
+       *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_VER1 );
+       wpsielen += 2;
+
+       //      Length:
+       *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0001 );
+       wpsielen += 2;
+
+       //      Value:
+       wpsie[wpsielen++] = WPS_VERSION_1;      //      Version 1.0
+#endif
+
+       //      Config Method
+       //      Type:
+       //*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_CONF_METHOD );
+       RTW_PUT_BE16(wpsie + wpsielen, WPS_ATTR_CONF_METHOD);
+       wpsielen += 2;
+
+       //      Length:
+       //*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0002 );
+       RTW_PUT_BE16(wpsie + wpsielen, 0x0002);
+       wpsielen += 2;
+
+       //      Value:
+       //*(u16*) ( wpsie + wpsielen ) = cpu_to_be16( config_method );
+       RTW_PUT_BE16(wpsie + wpsielen, config_method);
+       wpsielen += 2;
+
+       pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, wpsielen, (unsigned char *) wpsie, &pattrib->pktlen );
+
+#ifdef CONFIG_WFD
+       wfdielen = build_provdisc_resp_wfd_ie(pwdinfo, pframe);
+       pframe += wfdielen;
+       pattrib->pktlen += wfdielen;
+#endif //CONFIG_WFD
+
+       pattrib->last_txcmdsz = pattrib->pktlen;
+
+       dump_mgntframe(padapter, pmgntframe);
+
+       return;
+
+}
+
+static void issue_p2p_presence_resp(struct wifidirect_info *pwdinfo, u8 *da, u8 status, u8 dialogToken)
+{
+       struct xmit_frame                       *pmgntframe;
+       struct pkt_attrib                       *pattrib;
+       unsigned char                                   *pframe;
+       struct rtw_ieee80211_hdr        *pwlanhdr;
+       unsigned short                          *fctrl;
+       _adapter *padapter = pwdinfo->padapter;
+       struct xmit_priv                        *pxmitpriv = &(padapter->xmitpriv);
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       unsigned char category = RTW_WLAN_CATEGORY_P2P;//P2P action frame
+       u32     p2poui = cpu_to_be32(P2POUI);
+       u8      oui_subtype = P2P_PRESENCE_RESPONSE;
+       u8 p2pie[ MAX_P2P_IE_LEN] = { 0x00 };
+       u8 noa_attr_content[32] = { 0x00 };
+       u32 p2pielen = 0;
+
+       DBG_871X("[%s]\n", __FUNCTION__);
+
+       if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+       {
+               return;
+       }
+
+       //update attribute
+       pattrib = &pmgntframe->attrib;
+       update_mgntframe_attrib(padapter, pattrib);
+
+       _rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
+
+       pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+
+       fctrl = &(pwlanhdr->frame_ctl);
+       *(fctrl) = 0;
+
+       _rtw_memcpy(pwlanhdr->addr1, da, ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr2, pwdinfo->interface_addr, ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr3, pwdinfo->interface_addr, ETH_ALEN);
+
+       SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
+       pmlmeext->mgnt_seq++;
+       SetFrameSubType(pframe, WIFI_ACTION);
+
+       pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
+       pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
+
+       //Build P2P action frame header
+       pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 4, (unsigned char *) &(p2poui), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(oui_subtype), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(dialogToken), &(pattrib->pktlen));
+
+
+       //Add P2P IE header
+       //      P2P OUI
+       p2pielen = 0;
+       p2pie[ p2pielen++ ] = 0x50;
+       p2pie[ p2pielen++ ] = 0x6F;
+       p2pie[ p2pielen++ ] = 0x9A;
+       p2pie[ p2pielen++ ] = 0x09;     //      WFA P2P v1.0
+
+       //Add Status attribute in P2P IE
+       p2pielen += rtw_set_p2p_attr_content(&p2pie[p2pielen], P2P_ATTR_STATUS, 1, &status);
+
+       //Add NoA attribute in P2P IE
+       noa_attr_content[0] = 0x1;//index
+       noa_attr_content[1] = 0x0;//CTWindow and OppPS Parameters
+
+       //todo: Notice of Absence Descriptor(s)
+
+       p2pielen += rtw_set_p2p_attr_content(&p2pie[p2pielen], P2P_ATTR_NOA, 2, noa_attr_content);
+
+
+
+       pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, p2pielen, p2pie, &(pattrib->pktlen));
+
+
+       pattrib->last_txcmdsz = pattrib->pktlen;
+
+       dump_mgntframe(padapter, pmgntframe);
+
+}
+
+u32 build_beacon_p2p_ie(struct wifidirect_info *pwdinfo, u8 *pbuf)
+{
+       u8 p2pie[ MAX_P2P_IE_LEN] = { 0x00 };
+       u16 capability=0;
+       u32 len=0, p2pielen = 0;
+
+
+       //      P2P OUI
+       p2pielen = 0;
+       p2pie[ p2pielen++ ] = 0x50;
+       p2pie[ p2pielen++ ] = 0x6F;
+       p2pie[ p2pielen++ ] = 0x9A;
+       p2pie[ p2pielen++ ] = 0x09;     //      WFA P2P v1.0
+
+
+       //      According to the P2P Specification, the beacon frame should contain 3 P2P attributes
+       //      1. P2P Capability
+       //      2. P2P Device ID
+       //      3. Notice of Absence ( NOA )
+
+       //      P2P Capability ATTR
+       //      Type:
+       //      Length:
+       //      Value:
+       //      Device Capability Bitmap, 1 byte
+       //      Be able to participate in additional P2P Groups and
+       //      support the P2P Invitation Procedure
+       //      Group Capability Bitmap, 1 byte
+       capability = P2P_DEVCAP_INVITATION_PROC|P2P_DEVCAP_CLIENT_DISCOVERABILITY;
+       capability |=  ((P2P_GRPCAP_GO | P2P_GRPCAP_INTRABSS) << 8);
+       if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_PROVISIONING_ING))
+               capability |= (P2P_GRPCAP_GROUP_FORMATION<<8);
+
+       capability = cpu_to_le16(capability);
+
+       p2pielen += rtw_set_p2p_attr_content(&p2pie[p2pielen], P2P_ATTR_CAPABILITY, 2, (u8*)&capability);
+
+
+       // P2P Device ID ATTR
+       p2pielen += rtw_set_p2p_attr_content(&p2pie[p2pielen], P2P_ATTR_DEVICE_ID, ETH_ALEN, pwdinfo->device_addr);
+
+
+       // Notice of Absence ATTR
+       //      Type:
+       //      Length:
+       //      Value:
+
+       //go_add_noa_attr(pwdinfo);
+
+
+       pbuf = rtw_set_ie(pbuf, _VENDOR_SPECIFIC_IE_, p2pielen, (unsigned char *) p2pie, &len);
+
+
+       return len;
+
+}
+
+#ifdef CONFIG_WFD
+u32 build_beacon_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf)
+{
+       u8 wfdie[ MAX_WFD_IE_LEN] = { 0x00 };
+       u32 len=0, wfdielen = 0;
+       _adapter *padapter = pwdinfo->padapter;
+       struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
+       struct wifi_display_info*       pwfd_info = padapter->wdinfo.wfd_info;
+
+       //      WFD OUI
+       wfdielen = 0;
+       wfdie[ wfdielen++ ] = 0x50;
+       wfdie[ wfdielen++ ] = 0x6F;
+       wfdie[ wfdielen++ ] = 0x9A;
+       wfdie[ wfdielen++ ] = 0x0A;     //      WFA WFD v1.0
+
+       //      Commented by Albert 20110812
+       //      According to the WFD Specification, the beacon frame should contain 4 WFD attributes
+       //      1. WFD Device Information
+       //      2. Associated BSSID
+       //      3. Coupled Sink Information
+
+
+       //      WFD Device Information ATTR
+       //      Type:
+       wfdie[ wfdielen++ ] = WFD_ATTR_DEVICE_INFO;
+
+       //      Length:
+       //      Note: In the WFD specification, the size of length field is 2.
+       RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
+       wfdielen += 2;
+
+       //      Value1:
+       //      WFD device information
+
+       if ( P2P_ROLE_GO == pwdinfo->role )
+       {
+               if ( is_any_client_associated( pwdinfo->padapter ) )
+               {
+                       //      WFD primary sink + WiFi Direct mode + WSD (WFD Service Discovery)
+                       RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type | WFD_DEVINFO_WSD );
+               }
+               else
+               {
+                       //      WFD primary sink + available for WFD session + WiFi Direct mode + WSD (WFD Service Discovery)
+                       RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type | WFD_DEVINFO_SESSION_AVAIL | WFD_DEVINFO_WSD );
+               }
+
+       }
+       else
+       {
+               //      WFD primary sink + available for WFD session + WiFi Direct mode + WSD ( WFD Service Discovery )
+               RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type | WFD_DEVINFO_SESSION_AVAIL | WFD_DEVINFO_WSD );
+       }
+
+       wfdielen += 2;
+
+       //      Value2:
+       //      Session Management Control Port
+       //      Default TCP port for RTSP messages is 554
+       RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->rtsp_ctrlport );
+       wfdielen += 2;
+
+       //      Value3:
+       //      WFD Device Maximum Throughput
+       //      300Mbps is the maximum throughput
+       RTW_PUT_BE16(wfdie + wfdielen, 300);
+       wfdielen += 2;
+
+       //      Associated BSSID ATTR
+       //      Type:
+       wfdie[ wfdielen++ ] = WFD_ATTR_ASSOC_BSSID;
+
+       //      Length:
+       //      Note: In the WFD specification, the size of length field is 2.
+       RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
+       wfdielen += 2;
+
+       //      Value:
+       //      Associated BSSID
+       if ( check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE )
+       {
+               _rtw_memcpy( wfdie + wfdielen, &pmlmepriv->assoc_bssid[ 0 ], ETH_ALEN );
+       }
+       else
+       {
+               _rtw_memset( wfdie + wfdielen, 0x00, ETH_ALEN );
+       }
+
+       wfdielen += ETH_ALEN;
+
+       //      Coupled Sink Information ATTR
+       //      Type:
+       wfdie[ wfdielen++ ] = WFD_ATTR_COUPLED_SINK_INFO;
+
+       //      Length:
+       //      Note: In the WFD specification, the size of length field is 2.
+       RTW_PUT_BE16(wfdie + wfdielen, 0x0007);
+       wfdielen += 2;
+
+       //      Value:
+       //      Coupled Sink Status bitmap
+       //      Not coupled/available for Coupling
+       wfdie[ wfdielen++ ] = 0;
+       //  MAC Addr.
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+
+       pbuf = rtw_set_ie(pbuf, _VENDOR_SPECIFIC_IE_, wfdielen, (unsigned char *) wfdie, &len);
+
+       return len;
+
+}
+
+u32 build_probe_req_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf)
+{
+       u8 wfdie[ MAX_WFD_IE_LEN] = { 0x00 };
+       u32 len=0, wfdielen = 0;
+       _adapter *padapter = pwdinfo->padapter;
+       struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
+       struct wifi_display_info*       pwfd_info = padapter->wdinfo.wfd_info;
+
+       //      WFD OUI
+       wfdielen = 0;
+       wfdie[ wfdielen++ ] = 0x50;
+       wfdie[ wfdielen++ ] = 0x6F;
+       wfdie[ wfdielen++ ] = 0x9A;
+       wfdie[ wfdielen++ ] = 0x0A;     //      WFA WFD v1.0
+
+       //      Commented by Albert 20110812
+       //      According to the WFD Specification, the probe request frame should contain 4 WFD attributes
+       //      1. WFD Device Information
+       //      2. Associated BSSID
+       //      3. Coupled Sink Information
+
+
+       //      WFD Device Information ATTR
+       //      Type:
+       wfdie[ wfdielen++ ] = WFD_ATTR_DEVICE_INFO;
+
+       //      Length:
+       //      Note: In the WFD specification, the size of length field is 2.
+       RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
+       wfdielen += 2;
+
+       //      Value1:
+       //      WFD device information
+
+       if ( 1 == pwdinfo->wfd_tdls_enable )
+       {
+               //      WFD primary sink + available for WFD session + WiFi TDLS mode + WSC ( WFD Service Discovery )
+               RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type |
+                                               WFD_DEVINFO_SESSION_AVAIL |
+                                               WFD_DEVINFO_WSD |
+                                               WFD_DEVINFO_PC_TDLS );
+       }
+       else
+       {
+               //      WFD primary sink + available for WFD session + WiFi Direct mode + WSC ( WFD Service Discovery )
+               RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type |
+                                               WFD_DEVINFO_SESSION_AVAIL |
+                                               WFD_DEVINFO_WSD );
+       }
+
+       wfdielen += 2;
+
+       //      Value2:
+       //      Session Management Control Port
+       //      Default TCP port for RTSP messages is 554
+       RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->rtsp_ctrlport );
+       wfdielen += 2;
+
+       //      Value3:
+       //      WFD Device Maximum Throughput
+       //      300Mbps is the maximum throughput
+       RTW_PUT_BE16(wfdie + wfdielen, 300);
+       wfdielen += 2;
+
+       //      Associated BSSID ATTR
+       //      Type:
+       wfdie[ wfdielen++ ] = WFD_ATTR_ASSOC_BSSID;
+
+       //      Length:
+       //      Note: In the WFD specification, the size of length field is 2.
+       RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
+       wfdielen += 2;
+
+       //      Value:
+       //      Associated BSSID
+       if ( check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE )
+       {
+               _rtw_memcpy( wfdie + wfdielen, &pmlmepriv->assoc_bssid[ 0 ], ETH_ALEN );
+       }
+       else
+       {
+               _rtw_memset( wfdie + wfdielen, 0x00, ETH_ALEN );
+       }
+
+       wfdielen += ETH_ALEN;
+
+       //      Coupled Sink Information ATTR
+       //      Type:
+       wfdie[ wfdielen++ ] = WFD_ATTR_COUPLED_SINK_INFO;
+
+       //      Length:
+       //      Note: In the WFD specification, the size of length field is 2.
+       RTW_PUT_BE16(wfdie + wfdielen, 0x0007);
+       wfdielen += 2;
+
+       //      Value:
+       //      Coupled Sink Status bitmap
+       //      Not coupled/available for Coupling
+       wfdie[ wfdielen++ ] = 0;
+       //  MAC Addr.
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+
+       pbuf = rtw_set_ie(pbuf, _VENDOR_SPECIFIC_IE_, wfdielen, (unsigned char *) wfdie, &len);
+
+       return len;
+
+}
+
+u32 build_probe_resp_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf, u8 tunneled)
+{
+       u8 wfdie[ MAX_WFD_IE_LEN] = { 0x00 };
+       u32 len=0, wfdielen = 0;
+       _adapter *padapter = pwdinfo->padapter;
+       struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
+       struct wifi_display_info*       pwfd_info = padapter->wdinfo.wfd_info;
+
+       //      WFD OUI
+       wfdielen = 0;
+       wfdie[ wfdielen++ ] = 0x50;
+       wfdie[ wfdielen++ ] = 0x6F;
+       wfdie[ wfdielen++ ] = 0x9A;
+       wfdie[ wfdielen++ ] = 0x0A;     //      WFA WFD v1.0
+
+       //      Commented by Albert 20110812
+       //      According to the WFD Specification, the probe response frame should contain 4 WFD attributes
+       //      1. WFD Device Information
+       //      2. Associated BSSID
+       //      3. Coupled Sink Information
+       //      4. WFD Session Information
+
+
+       //      WFD Device Information ATTR
+       //      Type:
+       wfdie[ wfdielen++ ] = WFD_ATTR_DEVICE_INFO;
+
+       //      Length:
+       //      Note: In the WFD specification, the size of length field is 2.
+       RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
+       wfdielen += 2;
+
+       //      Value1:
+       //      WFD device information
+       //      WFD primary sink + available for WFD session + WiFi Direct mode
+
+       if (  _TRUE == pwdinfo->session_available )
+       {
+               if ( P2P_ROLE_GO == pwdinfo->role )
+               {
+                       if ( is_any_client_associated( pwdinfo->padapter ) )
+                       {
+                               if ( pwdinfo->wfd_tdls_enable )
+                               {
+                                       //      TDLS mode + WSD ( WFD Service Discovery )
+                                       RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type | WFD_DEVINFO_WSD | WFD_DEVINFO_PC_TDLS | WFD_DEVINFO_HDCP_SUPPORT);
+                               }
+                               else
+                               {
+                                       //      WiFi Direct mode + WSD ( WFD Service Discovery )
+                                       RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type | WFD_DEVINFO_WSD | WFD_DEVINFO_HDCP_SUPPORT);
+                               }
+                       }
+                       else
+                       {
+                               if ( pwdinfo->wfd_tdls_enable )
+                               {
+                                       //      available for WFD session + TDLS mode + WSD ( WFD Service Discovery )
+                                       RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type | WFD_DEVINFO_SESSION_AVAIL | WFD_DEVINFO_WSD | WFD_DEVINFO_PC_TDLS | WFD_DEVINFO_HDCP_SUPPORT);
+                               }
+                               else
+                               {
+                                       //      available for WFD session + WiFi Direct mode + WSD ( WFD Service Discovery )
+                                       RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type | WFD_DEVINFO_SESSION_AVAIL | WFD_DEVINFO_WSD | WFD_DEVINFO_HDCP_SUPPORT);
+                               }
+                       }
+               }
+               else
+               {
+                       if ( pwdinfo->wfd_tdls_enable )
+                       {
+                               //      available for WFD session + WiFi Direct mode + WSD ( WFD Service Discovery )
+                               RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type | WFD_DEVINFO_SESSION_AVAIL | WFD_DEVINFO_WSD | WFD_DEVINFO_PC_TDLS | WFD_DEVINFO_HDCP_SUPPORT);
+                       }
+                       else
+                       {
+
+                               //      available for WFD session + WiFi Direct mode + WSD ( WFD Service Discovery )
+                               RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type | WFD_DEVINFO_SESSION_AVAIL | WFD_DEVINFO_WSD | WFD_DEVINFO_HDCP_SUPPORT);
+                       }
+               }
+       }
+       else
+       {
+               if ( pwdinfo->wfd_tdls_enable )
+               {
+                       RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type | WFD_DEVINFO_WSD |WFD_DEVINFO_PC_TDLS | WFD_DEVINFO_HDCP_SUPPORT);
+               }
+               else
+               {
+                       RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type | WFD_DEVINFO_WSD | WFD_DEVINFO_HDCP_SUPPORT);
+               }
+
+       }
+
+       wfdielen += 2;
+
+       //      Value2:
+       //      Session Management Control Port
+       //      Default TCP port for RTSP messages is 554
+       RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->rtsp_ctrlport );
+       wfdielen += 2;
+
+       //      Value3:
+       //      WFD Device Maximum Throughput
+       //      300Mbps is the maximum throughput
+       RTW_PUT_BE16(wfdie + wfdielen, 300);
+       wfdielen += 2;
+
+       //      Associated BSSID ATTR
+       //      Type:
+       wfdie[ wfdielen++ ] = WFD_ATTR_ASSOC_BSSID;
+
+       //      Length:
+       //      Note: In the WFD specification, the size of length field is 2.
+       RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
+       wfdielen += 2;
+
+       //      Value:
+       //      Associated BSSID
+       if ( check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE )
+       {
+               _rtw_memcpy( wfdie + wfdielen, &pmlmepriv->assoc_bssid[ 0 ], ETH_ALEN );
+       }
+       else
+       {
+               _rtw_memset( wfdie + wfdielen, 0x00, ETH_ALEN );
+       }
+
+       wfdielen += ETH_ALEN;
+
+       //      Coupled Sink Information ATTR
+       //      Type:
+       wfdie[ wfdielen++ ] = WFD_ATTR_COUPLED_SINK_INFO;
+
+       //      Length:
+       //      Note: In the WFD specification, the size of length field is 2.
+       RTW_PUT_BE16(wfdie + wfdielen, 0x0007);
+       wfdielen += 2;
+
+       //      Value:
+       //      Coupled Sink Status bitmap
+       //      Not coupled/available for Coupling
+       wfdie[ wfdielen++ ] = 0;
+       //  MAC Addr.
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+
+       if ( P2P_ROLE_GO == pwdinfo->role )
+       {
+               //      WFD Session Information ATTR
+               //      Type:
+               wfdie[ wfdielen++ ] = WFD_ATTR_SESSION_INFO;
+
+               //      Length:
+               //      Note: In the WFD specification, the size of length field is 2.
+               RTW_PUT_BE16(wfdie + wfdielen, 0x0000);
+               wfdielen += 2;
+
+               //      Todo: to add the list of WFD device info descriptor in WFD group.
+
+       }
+#ifdef CONFIG_CONCURRENT_MODE
+#ifdef CONFIG_TDLS
+       if ( ( tunneled == 0 ) && ( padapter->pbuddy_adapter->wdinfo.wfd_tdls_enable == 1 ) )
+       {
+               //      Alternative MAC Address ATTR
+               //      Type:
+               wfdie[ wfdielen++ ] = WFD_ATTR_ALTER_MAC;
+
+               //      Length:
+               //      Note: In the WFD specification, the size of length field is 2.
+               RTW_PUT_BE16(wfdie + wfdielen,  ETH_ALEN );
+               wfdielen += 2;
+
+               //      Value:
+               //      Alternative MAC Address
+               _rtw_memcpy( wfdie + wfdielen, &padapter->pbuddy_adapter->eeprompriv.mac_addr[ 0 ], ETH_ALEN );
+               //      This mac address is used to make the WFD session when TDLS is enable.
+
+               wfdielen += ETH_ALEN;
+       }
+#endif // CONFIG_TDLS
+#endif // CONFIG_CONCURRENT_MODE
+
+       pbuf = rtw_set_ie(pbuf, _VENDOR_SPECIFIC_IE_, wfdielen, (unsigned char *) wfdie, &len);
+
+       return len;
+
+}
+
+u32 build_assoc_req_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf)
+{
+       u8 wfdie[ MAX_WFD_IE_LEN] = { 0x00 };
+       u32 len=0, wfdielen = 0;
+       _adapter                                        *padapter = NULL;
+       struct mlme_priv                        *pmlmepriv = NULL;
+       struct wifi_display_info                *pwfd_info = NULL;
+
+       //      WFD OUI
+       if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE) || rtw_p2p_chk_state(pwdinfo, P2P_STATE_IDLE))
+       {
+               return 0;
+       }
+
+       padapter = pwdinfo->padapter;
+       pmlmepriv = &padapter->mlmepriv;
+       pwfd_info = padapter->wdinfo.wfd_info;
+
+       wfdielen = 0;
+       wfdie[ wfdielen++ ] = 0x50;
+       wfdie[ wfdielen++ ] = 0x6F;
+       wfdie[ wfdielen++ ] = 0x9A;
+       wfdie[ wfdielen++ ] = 0x0A;     //      WFA WFD v1.0
+
+       //      Commented by Albert 20110812
+       //      According to the WFD Specification, the probe request frame should contain 4 WFD attributes
+       //      1. WFD Device Information
+       //      2. Associated BSSID
+       //      3. Coupled Sink Information
+
+
+       //      WFD Device Information ATTR
+       //      Type:
+       wfdie[ wfdielen++ ] = WFD_ATTR_DEVICE_INFO;
+
+       //      Length:
+       //      Note: In the WFD specification, the size of length field is 2.
+       RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
+       wfdielen += 2;
+
+       //      Value1:
+       //      WFD device information
+       //      WFD primary sink + available for WFD session + WiFi Direct mode + WSD ( WFD Service Discovery )
+       RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type | WFD_DEVINFO_SESSION_AVAIL | WFD_DEVINFO_WSD );
+       wfdielen += 2;
+
+       //      Value2:
+       //      Session Management Control Port
+       //      Default TCP port for RTSP messages is 554
+       RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->rtsp_ctrlport );
+       wfdielen += 2;
+
+       //      Value3:
+       //      WFD Device Maximum Throughput
+       //      300Mbps is the maximum throughput
+       RTW_PUT_BE16(wfdie + wfdielen, 300);
+       wfdielen += 2;
+
+       //      Associated BSSID ATTR
+       //      Type:
+       wfdie[ wfdielen++ ] = WFD_ATTR_ASSOC_BSSID;
+
+       //      Length:
+       //      Note: In the WFD specification, the size of length field is 2.
+       RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
+       wfdielen += 2;
+
+       //      Value:
+       //      Associated BSSID
+       if ( check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE )
+       {
+               _rtw_memcpy( wfdie + wfdielen, &pmlmepriv->assoc_bssid[ 0 ], ETH_ALEN );
+       }
+       else
+       {
+               _rtw_memset( wfdie + wfdielen, 0x00, ETH_ALEN );
+       }
+
+       wfdielen += ETH_ALEN;
+
+       //      Coupled Sink Information ATTR
+       //      Type:
+       wfdie[ wfdielen++ ] = WFD_ATTR_COUPLED_SINK_INFO;
+
+       //      Length:
+       //      Note: In the WFD specification, the size of length field is 2.
+       RTW_PUT_BE16(wfdie + wfdielen, 0x0007);
+       wfdielen += 2;
+
+       //      Value:
+       //      Coupled Sink Status bitmap
+       //      Not coupled/available for Coupling
+       wfdie[ wfdielen++ ] = 0;
+       //  MAC Addr.
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+
+       pbuf = rtw_set_ie(pbuf, _VENDOR_SPECIFIC_IE_, wfdielen, (unsigned char *) wfdie, &len);
+
+       return len;
+
+}
+
+u32 build_assoc_resp_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf)
+{
+       u8 wfdie[ MAX_WFD_IE_LEN] = { 0x00 };
+       u32 len=0, wfdielen = 0;
+       _adapter *padapter = pwdinfo->padapter;
+       struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
+       struct wifi_display_info*       pwfd_info = padapter->wdinfo.wfd_info;
+
+       //      WFD OUI
+       wfdielen = 0;
+       wfdie[ wfdielen++ ] = 0x50;
+       wfdie[ wfdielen++ ] = 0x6F;
+       wfdie[ wfdielen++ ] = 0x9A;
+       wfdie[ wfdielen++ ] = 0x0A;     //      WFA WFD v1.0
+
+       //      Commented by Albert 20110812
+       //      According to the WFD Specification, the probe request frame should contain 4 WFD attributes
+       //      1. WFD Device Information
+       //      2. Associated BSSID
+       //      3. Coupled Sink Information
+
+
+       //      WFD Device Information ATTR
+       //      Type:
+       wfdie[ wfdielen++ ] = WFD_ATTR_DEVICE_INFO;
+
+       //      Length:
+       //      Note: In the WFD specification, the size of length field is 2.
+       RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
+       wfdielen += 2;
+
+       //      Value1:
+       //      WFD device information
+       //      WFD primary sink + available for WFD session + WiFi Direct mode + WSD ( WFD Service Discovery )
+       RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type | WFD_DEVINFO_SESSION_AVAIL | WFD_DEVINFO_WSD );
+       wfdielen += 2;
+
+       //      Value2:
+       //      Session Management Control Port
+       //      Default TCP port for RTSP messages is 554
+       RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->rtsp_ctrlport );
+       wfdielen += 2;
+
+       //      Value3:
+       //      WFD Device Maximum Throughput
+       //      300Mbps is the maximum throughput
+       RTW_PUT_BE16(wfdie + wfdielen, 300);
+       wfdielen += 2;
+
+       //      Associated BSSID ATTR
+       //      Type:
+       wfdie[ wfdielen++ ] = WFD_ATTR_ASSOC_BSSID;
+
+       //      Length:
+       //      Note: In the WFD specification, the size of length field is 2.
+       RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
+       wfdielen += 2;
+
+       //      Value:
+       //      Associated BSSID
+       if ( check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE )
+       {
+               _rtw_memcpy( wfdie + wfdielen, &pmlmepriv->assoc_bssid[ 0 ], ETH_ALEN );
+       }
+       else
+       {
+               _rtw_memset( wfdie + wfdielen, 0x00, ETH_ALEN );
+       }
+
+       wfdielen += ETH_ALEN;
+
+       //      Coupled Sink Information ATTR
+       //      Type:
+       wfdie[ wfdielen++ ] = WFD_ATTR_COUPLED_SINK_INFO;
+
+       //      Length:
+       //      Note: In the WFD specification, the size of length field is 2.
+       RTW_PUT_BE16(wfdie + wfdielen, 0x0007);
+       wfdielen += 2;
+
+       //      Value:
+       //      Coupled Sink Status bitmap
+       //      Not coupled/available for Coupling
+       wfdie[ wfdielen++ ] = 0;
+       //  MAC Addr.
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+
+       pbuf = rtw_set_ie(pbuf, _VENDOR_SPECIFIC_IE_, wfdielen, (unsigned char *) wfdie, &len);
+
+       return len;
+
+}
+
+u32 build_nego_req_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf)
+{
+       u8 wfdie[ MAX_WFD_IE_LEN] = { 0x00 };
+       u32 len=0, wfdielen = 0;
+       _adapter *padapter = pwdinfo->padapter;
+       struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
+       struct wifi_display_info*       pwfd_info = padapter->wdinfo.wfd_info;
+
+       //      WFD OUI
+       wfdielen = 0;
+       wfdie[ wfdielen++ ] = 0x50;
+       wfdie[ wfdielen++ ] = 0x6F;
+       wfdie[ wfdielen++ ] = 0x9A;
+       wfdie[ wfdielen++ ] = 0x0A;     //      WFA WFD v1.0
+
+       //      Commented by Albert 20110825
+       //      According to the WFD Specification, the negotiation request frame should contain 3 WFD attributes
+       //      1. WFD Device Information
+       //      2. Associated BSSID ( Optional )
+       //      3. Local IP Adress ( Optional )
+
+
+       //      WFD Device Information ATTR
+       //      Type:
+       wfdie[ wfdielen++ ] = WFD_ATTR_DEVICE_INFO;
+
+       //      Length:
+       //      Note: In the WFD specification, the size of length field is 2.
+       RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
+       wfdielen += 2;
+
+       //      Value1:
+       //      WFD device information
+       //      WFD primary sink + WiFi Direct mode + WSD ( WFD Service Discovery ) + WFD Session Available
+       RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type | WFD_DEVINFO_WSD | WFD_DEVINFO_SESSION_AVAIL);
+       wfdielen += 2;
+
+       //      Value2:
+       //      Session Management Control Port
+       //      Default TCP port for RTSP messages is 554
+       RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->rtsp_ctrlport );
+       wfdielen += 2;
+
+       //      Value3:
+       //      WFD Device Maximum Throughput
+       //      300Mbps is the maximum throughput
+       RTW_PUT_BE16(wfdie + wfdielen, 300);
+       wfdielen += 2;
+
+       //      Associated BSSID ATTR
+       //      Type:
+       wfdie[ wfdielen++ ] = WFD_ATTR_ASSOC_BSSID;
+
+       //      Length:
+       //      Note: In the WFD specification, the size of length field is 2.
+       RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
+       wfdielen += 2;
+
+       //      Value:
+       //      Associated BSSID
+       if ( check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE )
+       {
+               _rtw_memcpy( wfdie + wfdielen, &pmlmepriv->assoc_bssid[ 0 ], ETH_ALEN );
+       }
+       else
+       {
+               _rtw_memset( wfdie + wfdielen, 0x00, ETH_ALEN );
+       }
+
+       wfdielen += ETH_ALEN;
+
+       //      Coupled Sink Information ATTR
+       //      Type:
+       wfdie[ wfdielen++ ] = WFD_ATTR_COUPLED_SINK_INFO;
+
+       //      Length:
+       //      Note: In the WFD specification, the size of length field is 2.
+       RTW_PUT_BE16(wfdie + wfdielen, 0x0007);
+       wfdielen += 2;
+
+       //      Value:
+       //      Coupled Sink Status bitmap
+       //      Not coupled/available for Coupling
+       wfdie[ wfdielen++ ] = 0;
+       //  MAC Addr.
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+
+       pbuf = rtw_set_ie(pbuf, _VENDOR_SPECIFIC_IE_, wfdielen, (unsigned char *) wfdie, &len);
+
+       return len;
+
+}
+
+u32 build_nego_resp_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf)
+{
+       u8 wfdie[ MAX_WFD_IE_LEN] = { 0x00 };
+       u32 len=0, wfdielen = 0;
+       _adapter *padapter = pwdinfo->padapter;
+       struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
+       struct wifi_display_info*       pwfd_info = padapter->wdinfo.wfd_info;
+
+       //      WFD OUI
+       wfdielen = 0;
+       wfdie[ wfdielen++ ] = 0x50;
+       wfdie[ wfdielen++ ] = 0x6F;
+       wfdie[ wfdielen++ ] = 0x9A;
+       wfdie[ wfdielen++ ] = 0x0A;     //      WFA WFD v1.0
+
+       //      Commented by Albert 20110825
+       //      According to the WFD Specification, the negotiation request frame should contain 3 WFD attributes
+       //      1. WFD Device Information
+       //      2. Associated BSSID ( Optional )
+       //      3. Local IP Adress ( Optional )
+
+
+       //      WFD Device Information ATTR
+       //      Type:
+       wfdie[ wfdielen++ ] = WFD_ATTR_DEVICE_INFO;
+
+       //      Length:
+       //      Note: In the WFD specification, the size of length field is 2.
+       RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
+       wfdielen += 2;
+
+       //      Value1:
+       //      WFD device information
+       //      WFD primary sink + WiFi Direct mode + WSD ( WFD Service Discovery ) + WFD Session Available
+       RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type | WFD_DEVINFO_WSD | WFD_DEVINFO_SESSION_AVAIL);
+       wfdielen += 2;
+
+       //      Value2:
+       //      Session Management Control Port
+       //      Default TCP port for RTSP messages is 554
+       RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->rtsp_ctrlport );
+       wfdielen += 2;
+
+       //      Value3:
+       //      WFD Device Maximum Throughput
+       //      300Mbps is the maximum throughput
+       RTW_PUT_BE16(wfdie + wfdielen, 300);
+       wfdielen += 2;
+
+       //      Associated BSSID ATTR
+       //      Type:
+       wfdie[ wfdielen++ ] = WFD_ATTR_ASSOC_BSSID;
+
+       //      Length:
+       //      Note: In the WFD specification, the size of length field is 2.
+       RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
+       wfdielen += 2;
+
+       //      Value:
+       //      Associated BSSID
+       if ( check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE )
+       {
+               _rtw_memcpy( wfdie + wfdielen, &pmlmepriv->assoc_bssid[ 0 ], ETH_ALEN );
+       }
+       else
+       {
+               _rtw_memset( wfdie + wfdielen, 0x00, ETH_ALEN );
+       }
+
+       wfdielen += ETH_ALEN;
+
+       //      Coupled Sink Information ATTR
+       //      Type:
+       wfdie[ wfdielen++ ] = WFD_ATTR_COUPLED_SINK_INFO;
+
+       //      Length:
+       //      Note: In the WFD specification, the size of length field is 2.
+       RTW_PUT_BE16(wfdie + wfdielen, 0x0007);
+       wfdielen += 2;
+
+       //      Value:
+       //      Coupled Sink Status bitmap
+       //      Not coupled/available for Coupling
+       wfdie[ wfdielen++ ] = 0;
+       //  MAC Addr.
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+
+
+       pbuf = rtw_set_ie(pbuf, _VENDOR_SPECIFIC_IE_, wfdielen, (unsigned char *) wfdie, &len);
+
+       return len;
+
+}
+
+u32 build_nego_confirm_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf)
+{
+       u8 wfdie[ MAX_WFD_IE_LEN] = { 0x00 };
+       u32 len=0, wfdielen = 0;
+       _adapter *padapter = pwdinfo->padapter;
+       struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
+       struct wifi_display_info*       pwfd_info = padapter->wdinfo.wfd_info;
+
+       //      WFD OUI
+       wfdielen = 0;
+       wfdie[ wfdielen++ ] = 0x50;
+       wfdie[ wfdielen++ ] = 0x6F;
+       wfdie[ wfdielen++ ] = 0x9A;
+       wfdie[ wfdielen++ ] = 0x0A;     //      WFA WFD v1.0
+
+       //      Commented by Albert 20110825
+       //      According to the WFD Specification, the negotiation request frame should contain 3 WFD attributes
+       //      1. WFD Device Information
+       //      2. Associated BSSID ( Optional )
+       //      3. Local IP Adress ( Optional )
+
+
+       //      WFD Device Information ATTR
+       //      Type:
+       wfdie[ wfdielen++ ] = WFD_ATTR_DEVICE_INFO;
+
+       //      Length:
+       //      Note: In the WFD specification, the size of length field is 2.
+       RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
+       wfdielen += 2;
+
+       //      Value1:
+       //      WFD device information
+       //      WFD primary sink + WiFi Direct mode + WSD ( WFD Service Discovery ) + WFD Session Available
+       RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type | WFD_DEVINFO_WSD | WFD_DEVINFO_SESSION_AVAIL);
+       wfdielen += 2;
+
+       //      Value2:
+       //      Session Management Control Port
+       //      Default TCP port for RTSP messages is 554
+       RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->rtsp_ctrlport );
+       wfdielen += 2;
+
+       //      Value3:
+       //      WFD Device Maximum Throughput
+       //      300Mbps is the maximum throughput
+       RTW_PUT_BE16(wfdie + wfdielen, 300);
+       wfdielen += 2;
+
+       //      Associated BSSID ATTR
+       //      Type:
+       wfdie[ wfdielen++ ] = WFD_ATTR_ASSOC_BSSID;
+
+       //      Length:
+       //      Note: In the WFD specification, the size of length field is 2.
+       RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
+       wfdielen += 2;
+
+       //      Value:
+       //      Associated BSSID
+       if ( check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE )
+       {
+               _rtw_memcpy( wfdie + wfdielen, &pmlmepriv->assoc_bssid[ 0 ], ETH_ALEN );
+       }
+       else
+       {
+               _rtw_memset( wfdie + wfdielen, 0x00, ETH_ALEN );
+       }
+
+       wfdielen += ETH_ALEN;
+
+       //      Coupled Sink Information ATTR
+       //      Type:
+       wfdie[ wfdielen++ ] = WFD_ATTR_COUPLED_SINK_INFO;
+
+       //      Length:
+       //      Note: In the WFD specification, the size of length field is 2.
+       RTW_PUT_BE16(wfdie + wfdielen, 0x0007);
+       wfdielen += 2;
+
+       //      Value:
+       //      Coupled Sink Status bitmap
+       //      Not coupled/available for Coupling
+       wfdie[ wfdielen++ ] = 0;
+       //  MAC Addr.
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+
+
+       pbuf = rtw_set_ie(pbuf, _VENDOR_SPECIFIC_IE_, wfdielen, (unsigned char *) wfdie, &len);
+
+       return len;
+
+}
+
+u32 build_invitation_req_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf)
+{
+       u8 wfdie[ MAX_WFD_IE_LEN] = { 0x00 };
+       u32 len=0, wfdielen = 0;
+       _adapter *padapter = pwdinfo->padapter;
+       struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
+       struct wifi_display_info*       pwfd_info = padapter->wdinfo.wfd_info;
+
+       //      WFD OUI
+       wfdielen = 0;
+       wfdie[ wfdielen++ ] = 0x50;
+       wfdie[ wfdielen++ ] = 0x6F;
+       wfdie[ wfdielen++ ] = 0x9A;
+       wfdie[ wfdielen++ ] = 0x0A;     //      WFA WFD v1.0
+
+       //      Commented by Albert 20110825
+       //      According to the WFD Specification, the provision discovery request frame should contain 3 WFD attributes
+       //      1. WFD Device Information
+       //      2. Associated BSSID ( Optional )
+       //      3. Local IP Adress ( Optional )
+
+
+       //      WFD Device Information ATTR
+       //      Type:
+       wfdie[ wfdielen++ ] = WFD_ATTR_DEVICE_INFO;
+
+       //      Length:
+       //      Note: In the WFD specification, the size of length field is 2.
+       RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
+       wfdielen += 2;
+
+       //      Value1:
+       //      WFD device information
+       //      WFD primary sink + available for WFD session + WiFi Direct mode + WSD ( WFD Service Discovery )
+       RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type | WFD_DEVINFO_SESSION_AVAIL | WFD_DEVINFO_WSD );
+       wfdielen += 2;
+
+       //      Value2:
+       //      Session Management Control Port
+       //      Default TCP port for RTSP messages is 554
+       RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->rtsp_ctrlport );
+       wfdielen += 2;
+
+       //      Value3:
+       //      WFD Device Maximum Throughput
+       //      300Mbps is the maximum throughput
+       RTW_PUT_BE16(wfdie + wfdielen, 300);
+       wfdielen += 2;
+
+       //      Associated BSSID ATTR
+       //      Type:
+       wfdie[ wfdielen++ ] = WFD_ATTR_ASSOC_BSSID;
+
+       //      Length:
+       //      Note: In the WFD specification, the size of length field is 2.
+       RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
+       wfdielen += 2;
+
+       //      Value:
+       //      Associated BSSID
+       if ( check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE )
+       {
+               _rtw_memcpy( wfdie + wfdielen, &pmlmepriv->assoc_bssid[ 0 ], ETH_ALEN );
+       }
+       else
+       {
+               _rtw_memset( wfdie + wfdielen, 0x00, ETH_ALEN );
+       }
+
+       wfdielen += ETH_ALEN;
+
+       //      Coupled Sink Information ATTR
+       //      Type:
+       wfdie[ wfdielen++ ] = WFD_ATTR_COUPLED_SINK_INFO;
+
+       //      Length:
+       //      Note: In the WFD specification, the size of length field is 2.
+       RTW_PUT_BE16(wfdie + wfdielen, 0x0007);
+       wfdielen += 2;
+
+       //      Value:
+       //      Coupled Sink Status bitmap
+       //      Not coupled/available for Coupling
+       wfdie[ wfdielen++ ] = 0;
+       //  MAC Addr.
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+
+       if ( P2P_ROLE_GO == pwdinfo->role )
+       {
+               //      WFD Session Information ATTR
+               //      Type:
+               wfdie[ wfdielen++ ] = WFD_ATTR_SESSION_INFO;
+
+               //      Length:
+               //      Note: In the WFD specification, the size of length field is 2.
+               RTW_PUT_BE16(wfdie + wfdielen, 0x0000);
+               wfdielen += 2;
+
+               //      Todo: to add the list of WFD device info descriptor in WFD group.
+
+       }
+
+       pbuf = rtw_set_ie(pbuf, _VENDOR_SPECIFIC_IE_, wfdielen, (unsigned char *) wfdie, &len);
+
+       return len;
+
+}
+
+u32 build_invitation_resp_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf)
+{
+       u8 wfdie[ MAX_WFD_IE_LEN] = { 0x00 };
+       u32 len=0, wfdielen = 0;
+       _adapter *padapter = pwdinfo->padapter;
+       struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
+       struct wifi_display_info*       pwfd_info = padapter->wdinfo.wfd_info;
+
+       //      WFD OUI
+       wfdielen = 0;
+       wfdie[ wfdielen++ ] = 0x50;
+       wfdie[ wfdielen++ ] = 0x6F;
+       wfdie[ wfdielen++ ] = 0x9A;
+       wfdie[ wfdielen++ ] = 0x0A;     //      WFA WFD v1.0
+
+       //      Commented by Albert 20110825
+       //      According to the WFD Specification, the provision discovery request frame should contain 3 WFD attributes
+       //      1. WFD Device Information
+       //      2. Associated BSSID ( Optional )
+       //      3. Local IP Adress ( Optional )
+
+
+       //      WFD Device Information ATTR
+       //      Type:
+       wfdie[ wfdielen++ ] = WFD_ATTR_DEVICE_INFO;
+
+       //      Length:
+       //      Note: In the WFD specification, the size of length field is 2.
+       RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
+       wfdielen += 2;
+
+       //      Value1:
+       //      WFD device information
+       //      WFD primary sink + available for WFD session + WiFi Direct mode + WSD ( WFD Service Discovery )
+       RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type | WFD_DEVINFO_SESSION_AVAIL | WFD_DEVINFO_WSD );
+       wfdielen += 2;
+
+       //      Value2:
+       //      Session Management Control Port
+       //      Default TCP port for RTSP messages is 554
+       RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->rtsp_ctrlport );
+       wfdielen += 2;
+
+       //      Value3:
+       //      WFD Device Maximum Throughput
+       //      300Mbps is the maximum throughput
+       RTW_PUT_BE16(wfdie + wfdielen, 300);
+       wfdielen += 2;
+
+       //      Associated BSSID ATTR
+       //      Type:
+       wfdie[ wfdielen++ ] = WFD_ATTR_ASSOC_BSSID;
+
+       //      Length:
+       //      Note: In the WFD specification, the size of length field is 2.
+       RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
+       wfdielen += 2;
+
+       //      Value:
+       //      Associated BSSID
+       if ( check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE )
+       {
+               _rtw_memcpy( wfdie + wfdielen, &pmlmepriv->assoc_bssid[ 0 ], ETH_ALEN );
+       }
+       else
+       {
+               _rtw_memset( wfdie + wfdielen, 0x00, ETH_ALEN );
+       }
+
+       wfdielen += ETH_ALEN;
+
+       //      Coupled Sink Information ATTR
+       //      Type:
+       wfdie[ wfdielen++ ] = WFD_ATTR_COUPLED_SINK_INFO;
+
+       //      Length:
+       //      Note: In the WFD specification, the size of length field is 2.
+       RTW_PUT_BE16(wfdie + wfdielen, 0x0007);
+       wfdielen += 2;
+
+       //      Value:
+       //      Coupled Sink Status bitmap
+       //      Not coupled/available for Coupling
+       wfdie[ wfdielen++ ] = 0;
+       //  MAC Addr.
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+
+       if ( P2P_ROLE_GO == pwdinfo->role )
+       {
+               //      WFD Session Information ATTR
+               //      Type:
+               wfdie[ wfdielen++ ] = WFD_ATTR_SESSION_INFO;
+
+               //      Length:
+               //      Note: In the WFD specification, the size of length field is 2.
+               RTW_PUT_BE16(wfdie + wfdielen, 0x0000);
+               wfdielen += 2;
+
+               //      Todo: to add the list of WFD device info descriptor in WFD group.
+
+       }
+
+       pbuf = rtw_set_ie(pbuf, _VENDOR_SPECIFIC_IE_, wfdielen, (unsigned char *) wfdie, &len);
+
+       return len;
+
+}
+
+u32 build_provdisc_req_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf)
+{
+       u8 wfdie[ MAX_WFD_IE_LEN] = { 0x00 };
+       u32 len=0, wfdielen = 0;
+       _adapter *padapter = pwdinfo->padapter;
+       struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
+       struct wifi_display_info*       pwfd_info = padapter->wdinfo.wfd_info;
+
+       //      WFD OUI
+       wfdielen = 0;
+       wfdie[ wfdielen++ ] = 0x50;
+       wfdie[ wfdielen++ ] = 0x6F;
+       wfdie[ wfdielen++ ] = 0x9A;
+       wfdie[ wfdielen++ ] = 0x0A;     //      WFA WFD v1.0
+
+       //      Commented by Albert 20110825
+       //      According to the WFD Specification, the provision discovery request frame should contain 3 WFD attributes
+       //      1. WFD Device Information
+       //      2. Associated BSSID ( Optional )
+       //      3. Local IP Adress ( Optional )
+
+
+       //      WFD Device Information ATTR
+       //      Type:
+       wfdie[ wfdielen++ ] = WFD_ATTR_DEVICE_INFO;
+
+       //      Length:
+       //      Note: In the WFD specification, the size of length field is 2.
+       RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
+       wfdielen += 2;
+
+       //      Value1:
+       //      WFD device information
+       //      WFD primary sink + available for WFD session + WiFi Direct mode + WSD ( WFD Service Discovery )
+       RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type | WFD_DEVINFO_SESSION_AVAIL | WFD_DEVINFO_WSD );
+       wfdielen += 2;
+
+       //      Value2:
+       //      Session Management Control Port
+       //      Default TCP port for RTSP messages is 554
+       RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->rtsp_ctrlport );
+       wfdielen += 2;
+
+       //      Value3:
+       //      WFD Device Maximum Throughput
+       //      300Mbps is the maximum throughput
+       RTW_PUT_BE16(wfdie + wfdielen, 300);
+       wfdielen += 2;
+
+       //      Associated BSSID ATTR
+       //      Type:
+       wfdie[ wfdielen++ ] = WFD_ATTR_ASSOC_BSSID;
+
+       //      Length:
+       //      Note: In the WFD specification, the size of length field is 2.
+       RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
+       wfdielen += 2;
+
+       //      Value:
+       //      Associated BSSID
+       if ( check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE )
+       {
+               _rtw_memcpy( wfdie + wfdielen, &pmlmepriv->assoc_bssid[ 0 ], ETH_ALEN );
+       }
+       else
+       {
+               _rtw_memset( wfdie + wfdielen, 0x00, ETH_ALEN );
+       }
+
+       wfdielen += ETH_ALEN;
+
+       //      Coupled Sink Information ATTR
+       //      Type:
+       wfdie[ wfdielen++ ] = WFD_ATTR_COUPLED_SINK_INFO;
+
+       //      Length:
+       //      Note: In the WFD specification, the size of length field is 2.
+       RTW_PUT_BE16(wfdie + wfdielen, 0x0007);
+       wfdielen += 2;
+
+       //      Value:
+       //      Coupled Sink Status bitmap
+       //      Not coupled/available for Coupling
+       wfdie[ wfdielen++ ] = 0;
+       //  MAC Addr.
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+
+
+       pbuf = rtw_set_ie(pbuf, _VENDOR_SPECIFIC_IE_, wfdielen, (unsigned char *) wfdie, &len);
+
+       return len;
+
+}
+
+u32 build_provdisc_resp_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf)
+{
+       u8 wfdie[ MAX_WFD_IE_LEN] = { 0x00 };
+       u32 len=0, wfdielen = 0;
+       _adapter *padapter = pwdinfo->padapter;
+       struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
+       struct wifi_display_info*       pwfd_info = padapter->wdinfo.wfd_info;
+
+       //      WFD OUI
+       wfdielen = 0;
+       wfdie[ wfdielen++ ] = 0x50;
+       wfdie[ wfdielen++ ] = 0x6F;
+       wfdie[ wfdielen++ ] = 0x9A;
+       wfdie[ wfdielen++ ] = 0x0A;     //      WFA WFD v1.0
+
+       //      Commented by Albert 20110825
+       //      According to the WFD Specification, the provision discovery response frame should contain 3 WFD attributes
+       //      1. WFD Device Information
+       //      2. Associated BSSID ( Optional )
+       //      3. Local IP Adress ( Optional )
+
+
+       //      WFD Device Information ATTR
+       //      Type:
+       wfdie[ wfdielen++ ] = WFD_ATTR_DEVICE_INFO;
+
+       //      Length:
+       //      Note: In the WFD specification, the size of length field is 2.
+       RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
+       wfdielen += 2;
+
+       //      Value1:
+       //      WFD device information
+       //      WFD primary sink + available for WFD session + WiFi Direct mode + WSD ( WFD Service Discovery )
+       RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type | WFD_DEVINFO_SESSION_AVAIL | WFD_DEVINFO_WSD );
+       wfdielen += 2;
+
+       //      Value2:
+       //      Session Management Control Port
+       //      Default TCP port for RTSP messages is 554
+       RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->rtsp_ctrlport );
+       wfdielen += 2;
+
+       //      Value3:
+       //      WFD Device Maximum Throughput
+       //      300Mbps is the maximum throughput
+       RTW_PUT_BE16(wfdie + wfdielen, 300);
+       wfdielen += 2;
+
+       //      Associated BSSID ATTR
+       //      Type:
+       wfdie[ wfdielen++ ] = WFD_ATTR_ASSOC_BSSID;
+
+       //      Length:
+       //      Note: In the WFD specification, the size of length field is 2.
+       RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
+       wfdielen += 2;
+
+       //      Value:
+       //      Associated BSSID
+       if ( check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE )
+       {
+               _rtw_memcpy( wfdie + wfdielen, &pmlmepriv->assoc_bssid[ 0 ], ETH_ALEN );
+       }
+       else
+       {
+               _rtw_memset( wfdie + wfdielen, 0x00, ETH_ALEN );
+       }
+
+       wfdielen += ETH_ALEN;
+
+       //      Coupled Sink Information ATTR
+       //      Type:
+       wfdie[ wfdielen++ ] = WFD_ATTR_COUPLED_SINK_INFO;
+
+       //      Length:
+       //      Note: In the WFD specification, the size of length field is 2.
+       RTW_PUT_BE16(wfdie + wfdielen, 0x0007);
+       wfdielen += 2;
+
+       //      Value:
+       //      Coupled Sink Status bitmap
+       //      Not coupled/available for Coupling
+       wfdie[ wfdielen++ ] = 0;
+       //  MAC Addr.
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+       wfdie[ wfdielen++ ] = 0;
+
+       pbuf = rtw_set_ie(pbuf, _VENDOR_SPECIFIC_IE_, wfdielen, (unsigned char *) wfdie, &len);
+
+       return len;
+
+}
+
+#endif //CONFIG_WFD
+
+u32 build_probe_resp_p2p_ie(struct wifidirect_info *pwdinfo, u8 *pbuf)
+{
+       u8 p2pie[ MAX_P2P_IE_LEN] = { 0x00 };
+       u32 len=0, p2pielen = 0;
+#ifdef CONFIG_INTEL_WIDI
+       struct mlme_priv *pmlmepriv = &(pwdinfo->padapter->mlmepriv);
+       u8 zero_array_check[L2SDTA_SERVICE_VE_LEN] = { 0x00 };
+       u8 widi_version = 0, i = 0;
+
+       if( _rtw_memcmp( pmlmepriv->sa_ext, zero_array_check, L2SDTA_SERVICE_VE_LEN ) == _FALSE )
+       {
+               widi_version = 35;
+       }
+       else if( pmlmepriv->num_p2p_sdt != 0 )
+       {
+               widi_version = 40;
+       }
+#endif //CONFIG_INTEL_WIDI
+
+       //      P2P OUI
+       p2pielen = 0;
+       p2pie[ p2pielen++ ] = 0x50;
+       p2pie[ p2pielen++ ] = 0x6F;
+       p2pie[ p2pielen++ ] = 0x9A;
+       p2pie[ p2pielen++ ] = 0x09;     //      WFA P2P v1.0
+
+       //      Commented by Albert 20100907
+       //      According to the P2P Specification, the probe response frame should contain 5 P2P attributes
+       //      1. P2P Capability
+       //      2. Extended Listen Timing
+       //      3. Notice of Absence ( NOA )    ( Only GO needs this )
+       //      4. Device Info
+       //      5. Group Info   ( Only GO need this )
+
+       //      P2P Capability ATTR
+       //      Type:
+       p2pie[ p2pielen++ ] = P2P_ATTR_CAPABILITY;
+
+       //      Length:
+       //*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0002 );
+       RTW_PUT_LE16(p2pie + p2pielen, 0x0002);
+       p2pielen += 2;
+
+       //      Value:
+       //      Device Capability Bitmap, 1 byte
+       p2pie[ p2pielen++ ] = DMP_P2P_DEVCAP_SUPPORT;
+
+       //      Group Capability Bitmap, 1 byte
+       if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
+       {
+               p2pie[ p2pielen ] = (P2P_GRPCAP_GO | P2P_GRPCAP_INTRABSS);
+
+               if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_PROVISIONING_ING))
+                       p2pie[ p2pielen ] |= P2P_GRPCAP_GROUP_FORMATION;
+
+               p2pielen++;
+       }
+       else if ( rtw_p2p_chk_role(pwdinfo, P2P_ROLE_DEVICE) )
+       {
+               //      Group Capability Bitmap, 1 byte
+               if ( pwdinfo->persistent_supported )
+                       p2pie[ p2pielen++ ] = P2P_GRPCAP_PERSISTENT_GROUP | DMP_P2P_GRPCAP_SUPPORT;
+               else
+                       p2pie[ p2pielen++ ] = DMP_P2P_GRPCAP_SUPPORT;
+
+       }
+
+       //      Extended Listen Timing ATTR
+       //      Type:
+       p2pie[ p2pielen++ ] = P2P_ATTR_EX_LISTEN_TIMING;
+
+       //      Length:
+       //*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0004 );
+       RTW_PUT_LE16(p2pie + p2pielen, 0x0004);
+       p2pielen += 2;
+
+       //      Value:
+       //      Availability Period
+       //*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0xFFFF );
+       RTW_PUT_LE16(p2pie + p2pielen, 0xFFFF);
+       p2pielen += 2;
+
+       //      Availability Interval
+       //*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0xFFFF );
+       RTW_PUT_LE16(p2pie + p2pielen, 0xFFFF);
+       p2pielen += 2;
+
+
+       // Notice of Absence ATTR
+       //      Type:
+       //      Length:
+       //      Value:
+       if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
+       {
+               //go_add_noa_attr(pwdinfo);
+       }
+
+       //      Device Info ATTR
+       //      Type:
+       p2pie[ p2pielen++ ] = P2P_ATTR_DEVICE_INFO;
+
+       //      Length:
+       //      21 -> P2P Device Address (6bytes) + Config Methods (2bytes) + Primary Device Type (8bytes)
+       //      + NumofSecondDevType (1byte) + WPS Device Name ID field (2bytes) + WPS Device Name Len field (2bytes)
+       //*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 21 + pwdinfo->device_name_len );
+#ifdef CONFIG_INTEL_WIDI
+       if( widi_version == 35 )
+       {
+               RTW_PUT_LE16(p2pie + p2pielen, 21 + 8 + pwdinfo->device_name_len);
+       }
+       else if( widi_version == 40 )
+       {
+               RTW_PUT_LE16(p2pie + p2pielen, 21 + 8 * pmlmepriv->num_p2p_sdt + pwdinfo->device_name_len);
+       }
+       else
+#endif //CONFIG_INTEL_WIDI
+       RTW_PUT_LE16(p2pie + p2pielen, 21 + pwdinfo->device_name_len);
+       p2pielen += 2;
+
+       //      Value:
+       //      P2P Device Address
+       _rtw_memcpy( p2pie + p2pielen, pwdinfo->device_addr, ETH_ALEN );
+       p2pielen += ETH_ALEN;
+
+       //      Config Method
+       //      This field should be big endian. Noted by P2P specification.
+       //*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( pwdinfo->supported_wps_cm );
+       RTW_PUT_BE16(p2pie + p2pielen, pwdinfo->supported_wps_cm);
+       p2pielen += 2;
+
+#ifdef CONFIG_INTEL_WIDI
+       if( widi_version == 40 )
+       {
+               //      Primary Device Type
+               //      Category ID
+               //*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_CID_MULIT_MEDIA );
+               RTW_PUT_BE16(p2pie + p2pielen, pmlmepriv->p2p_pdt_cid );
+               p2pielen += 2;
+
+               //      OUI
+               //*(u32*) ( p2pie + p2pielen ) = cpu_to_be32( WPSOUI );
+               RTW_PUT_BE32(p2pie + p2pielen, WPSOUI);
+               p2pielen += 4;
+
+               //      Sub Category ID
+               //*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_SCID_MEDIA_SERVER );
+               RTW_PUT_BE16(p2pie + p2pielen, pmlmepriv->p2p_pdt_scid);
+               p2pielen += 2;
+       }
+       else
+#endif //CONFIG_INTEL_WIDI
+       {
+               //      Primary Device Type
+               //      Category ID
+               //*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_CID_MULIT_MEDIA );
+               RTW_PUT_BE16(p2pie + p2pielen, WPS_PDT_CID_MULIT_MEDIA);
+               p2pielen += 2;
+
+               //      OUI
+               //*(u32*) ( p2pie + p2pielen ) = cpu_to_be32( WPSOUI );
+               RTW_PUT_BE32(p2pie + p2pielen, WPSOUI);
+               p2pielen += 4;
+
+               //      Sub Category ID
+               //*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_SCID_MEDIA_SERVER );
+               RTW_PUT_BE16(p2pie + p2pielen, WPS_PDT_SCID_MEDIA_SERVER);
+               p2pielen += 2;
+       }
+
+       //      Number of Secondary Device Types
+#ifdef CONFIG_INTEL_WIDI
+       if( widi_version == 35 )
+       {
+               p2pie[ p2pielen++ ] = 0x01;
+
+               RTW_PUT_BE16(p2pie + p2pielen, WPS_PDT_CID_DISPLAYS);
+               p2pielen += 2;
+
+               RTW_PUT_BE32(p2pie + p2pielen, INTEL_DEV_TYPE_OUI);
+               p2pielen += 4;
+
+               RTW_PUT_BE16(p2pie + p2pielen, P2P_SCID_WIDI_CONSUMER_SINK);
+               p2pielen += 2;
+       }
+       else if( widi_version == 40 )
+       {
+               p2pie[ p2pielen++ ] = pmlmepriv->num_p2p_sdt;
+               for( ; i < pmlmepriv->num_p2p_sdt; i++ )
+               {
+                       RTW_PUT_BE16(p2pie + p2pielen, pmlmepriv->p2p_sdt_cid[i]);
+                       p2pielen += 2;
+
+                       RTW_PUT_BE32(p2pie + p2pielen, INTEL_DEV_TYPE_OUI);
+                       p2pielen += 4;
+
+                       RTW_PUT_BE16(p2pie + p2pielen, pmlmepriv->p2p_sdt_scid[i]);
+                       p2pielen += 2;
+               }
+       }
+       else
+#endif //CONFIG_INTEL_WIDI
+       p2pie[ p2pielen++ ] = 0x00;     //      No Secondary Device Type List
+
+       //      Device Name
+       //      Type:
+       //*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_ATTR_DEVICE_NAME );
+       RTW_PUT_BE16(p2pie + p2pielen, WPS_ATTR_DEVICE_NAME);
+       p2pielen += 2;
+
+       //      Length:
+       //*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( pwdinfo->device_name_len );
+       RTW_PUT_BE16(p2pie + p2pielen, pwdinfo->device_name_len);
+       p2pielen += 2;
+
+       //      Value:
+       _rtw_memcpy( p2pie + p2pielen, pwdinfo->device_name, pwdinfo->device_name_len );
+       p2pielen += pwdinfo->device_name_len;
+
+       // Group Info ATTR
+       //      Type:
+       //      Length:
+       //      Value:
+       if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
+       {
+               p2pielen += go_add_group_info_attr(pwdinfo, p2pie + p2pielen);
+       }
+
+
+       pbuf = rtw_set_ie(pbuf, _VENDOR_SPECIFIC_IE_, p2pielen, (unsigned char *) p2pie, &len);
+
+
+       return len;
+
+}
+
+u32 build_prov_disc_request_p2p_ie(struct wifidirect_info *pwdinfo, u8 *pbuf, u8* pssid, u8 ussidlen, u8* pdev_raddr )
+{
+       u8 p2pie[ MAX_P2P_IE_LEN] = { 0x00 };
+       u32 len=0, p2pielen = 0;
+
+       //      P2P OUI
+       p2pielen = 0;
+       p2pie[ p2pielen++ ] = 0x50;
+       p2pie[ p2pielen++ ] = 0x6F;
+       p2pie[ p2pielen++ ] = 0x9A;
+       p2pie[ p2pielen++ ] = 0x09;     //      WFA P2P v1.0
+
+       //      Commented by Albert 20110301
+       //      According to the P2P Specification, the provision discovery request frame should contain 3 P2P attributes
+       //      1. P2P Capability
+       //      2. Device Info
+       //      3. Group ID ( When joining an operating P2P Group )
+
+       //      P2P Capability ATTR
+       //      Type:
+       p2pie[ p2pielen++ ] = P2P_ATTR_CAPABILITY;
+
+       //      Length:
+       //*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0002 );
+       RTW_PUT_LE16(p2pie + p2pielen, 0x0002);
+       p2pielen += 2;
+
+       //      Value:
+       //      Device Capability Bitmap, 1 byte
+       p2pie[ p2pielen++ ] = DMP_P2P_DEVCAP_SUPPORT;
+
+       //      Group Capability Bitmap, 1 byte
+       if ( pwdinfo->persistent_supported )
+               p2pie[ p2pielen++ ] = P2P_GRPCAP_PERSISTENT_GROUP | DMP_P2P_GRPCAP_SUPPORT;
+       else
+               p2pie[ p2pielen++ ] = DMP_P2P_GRPCAP_SUPPORT;
+
+
+       //      Device Info ATTR
+       //      Type:
+       p2pie[ p2pielen++ ] = P2P_ATTR_DEVICE_INFO;
+
+       //      Length:
+       //      21 -> P2P Device Address (6bytes) + Config Methods (2bytes) + Primary Device Type (8bytes)
+       //      + NumofSecondDevType (1byte) + WPS Device Name ID field (2bytes) + WPS Device Name Len field (2bytes)
+       //*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 21 + pwdinfo->device_name_len );
+       RTW_PUT_LE16(p2pie + p2pielen, 21 + pwdinfo->device_name_len);
+       p2pielen += 2;
+
+       //      Value:
+       //      P2P Device Address
+       _rtw_memcpy( p2pie + p2pielen, pwdinfo->device_addr, ETH_ALEN );
+       p2pielen += ETH_ALEN;
+
+       //      Config Method
+       //      This field should be big endian. Noted by P2P specification.
+       if ( pwdinfo->ui_got_wps_info == P2P_GOT_WPSINFO_PBC )
+       {
+               //*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_CONFIG_METHOD_PBC );
+               RTW_PUT_BE16(p2pie + p2pielen, WPS_CONFIG_METHOD_PBC);
+       }
+       else
+       {
+               //*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_CONFIG_METHOD_DISPLAY );
+               RTW_PUT_BE16(p2pie + p2pielen, WPS_CONFIG_METHOD_DISPLAY);
+       }
+
+       p2pielen += 2;
+
+       //      Primary Device Type
+       //      Category ID
+       //*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_CID_MULIT_MEDIA );
+       RTW_PUT_BE16(p2pie + p2pielen, WPS_PDT_CID_MULIT_MEDIA);
+       p2pielen += 2;
+
+       //      OUI
+       //*(u32*) ( p2pie + p2pielen ) = cpu_to_be32( WPSOUI );
+       RTW_PUT_BE32(p2pie + p2pielen, WPSOUI);
+       p2pielen += 4;
+
+       //      Sub Category ID
+       //*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_PDT_SCID_MEDIA_SERVER );
+       RTW_PUT_BE16(p2pie + p2pielen, WPS_PDT_SCID_MEDIA_SERVER);
+       p2pielen += 2;
+
+       //      Number of Secondary Device Types
+       p2pie[ p2pielen++ ] = 0x00;     //      No Secondary Device Type List
+
+       //      Device Name
+       //      Type:
+       //*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( WPS_ATTR_DEVICE_NAME );
+       RTW_PUT_BE16(p2pie + p2pielen, WPS_ATTR_DEVICE_NAME);
+       p2pielen += 2;
+
+       //      Length:
+       //*(u16*) ( p2pie + p2pielen ) = cpu_to_be16( pwdinfo->device_name_len );
+       RTW_PUT_BE16(p2pie + p2pielen, pwdinfo->device_name_len);
+       p2pielen += 2;
+
+       //      Value:
+       _rtw_memcpy( p2pie + p2pielen, pwdinfo->device_name, pwdinfo->device_name_len );
+       p2pielen += pwdinfo->device_name_len;
+
+       if ( rtw_p2p_chk_role(pwdinfo, P2P_ROLE_CLIENT) )
+       {
+               //      Added by Albert 2011/05/19
+               //      In this case, the pdev_raddr is the device address of the group owner.
+
+               //      P2P Group ID ATTR
+               //      Type:
+               p2pie[ p2pielen++ ] = P2P_ATTR_GROUP_ID;
+
+               //      Length:
+               //*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( ETH_ALEN + ussidlen );
+               RTW_PUT_LE16(p2pie + p2pielen, ETH_ALEN + ussidlen);
+               p2pielen += 2;
+
+               //      Value:
+               _rtw_memcpy( p2pie + p2pielen, pdev_raddr, ETH_ALEN );
+               p2pielen += ETH_ALEN;
+
+               _rtw_memcpy( p2pie + p2pielen, pssid, ussidlen );
+               p2pielen += ussidlen;
+
+       }
+
+       pbuf = rtw_set_ie(pbuf, _VENDOR_SPECIFIC_IE_, p2pielen, (unsigned char *) p2pie, &len);
+
+
+       return len;
+
+}
+
+
+u32 build_assoc_resp_p2p_ie(struct wifidirect_info *pwdinfo, u8 *pbuf, u8 status_code)
+{
+       u8 p2pie[ MAX_P2P_IE_LEN] = { 0x00 };
+       u32 len=0, p2pielen = 0;
+
+       //      P2P OUI
+       p2pielen = 0;
+       p2pie[ p2pielen++ ] = 0x50;
+       p2pie[ p2pielen++ ] = 0x6F;
+       p2pie[ p2pielen++ ] = 0x9A;
+       p2pie[ p2pielen++ ] = 0x09;     //      WFA P2P v1.0
+
+       // According to the P2P Specification, the Association response frame should contain 2 P2P attributes
+       //      1. Status
+       //      2. Extended Listen Timing (optional)
+
+
+       //      Status ATTR
+       p2pielen += rtw_set_p2p_attr_content(&p2pie[p2pielen], P2P_ATTR_STATUS, 1, &status_code);
+
+
+       // Extended Listen Timing ATTR
+       //      Type:
+       //      Length:
+       //      Value:
+
+
+       pbuf = rtw_set_ie(pbuf, _VENDOR_SPECIFIC_IE_, p2pielen, (unsigned char *) p2pie, &len);
+
+       return len;
+
+}
+
+u32 build_deauth_p2p_ie(struct wifidirect_info *pwdinfo, u8 *pbuf)
+{
+       u32 len=0;
+
+       return len;
+}
+
+u32 process_probe_req_p2p_ie(struct wifidirect_info *pwdinfo, u8 *pframe, uint len)
+{
+       u8 *p;
+       u32 ret=_FALSE;
+       u8 *p2pie;
+       u32     p2pielen = 0;
+       int ssid_len=0, rate_cnt = 0;
+
+       p = rtw_get_ie(pframe + WLAN_HDR_A3_LEN + _PROBEREQ_IE_OFFSET_, _SUPPORTEDRATES_IE_, (int *)&rate_cnt,
+                       len - WLAN_HDR_A3_LEN - _PROBEREQ_IE_OFFSET_);
+
+       if ( rate_cnt <= 4 )
+       {
+               int i, g_rate =0;
+
+               for( i = 0; i < rate_cnt; i++ )
+               {
+                       if ( ( ( *( p + 2 + i ) & 0xff ) != 0x02 ) &&
+                               ( ( *( p + 2 + i ) & 0xff ) != 0x04 ) &&
+                               ( ( *( p + 2 + i ) & 0xff ) != 0x0B ) &&
+                               ( ( *( p + 2 + i ) & 0xff ) != 0x16 ) )
+                       {
+                               g_rate = 1;
+                       }
+               }
+
+               if ( g_rate == 0 )
+               {
+                       //      There is no OFDM rate included in SupportedRates IE of this probe request frame
+                       //      The driver should response this probe request.
+                       return ret;
+               }
+       }
+       else
+       {
+               //      rate_cnt > 4 means the SupportRates IE contains the OFDM rate because the count of CCK rates are 4.
+               //      We should proceed the following check for this probe request.
+       }
+
+       //      Added comments by Albert 20100906
+       //      There are several items we should check here.
+       //      1. This probe request frame must contain the P2P IE. (Done)
+       //      2. This probe request frame must contain the wildcard SSID. (Done)
+       //      3. Wildcard BSSID. (Todo)
+       //      4. Destination Address. ( Done in mgt_dispatcher function )
+       //      5. Requested Device Type in WSC IE. (Todo)
+       //      6. Device ID attribute in P2P IE. (Todo)
+
+       p = rtw_get_ie(pframe + WLAN_HDR_A3_LEN + _PROBEREQ_IE_OFFSET_, _SSID_IE_, (int *)&ssid_len,
+                       len - WLAN_HDR_A3_LEN - _PROBEREQ_IE_OFFSET_);
+
+       ssid_len &= 0xff;       //      Just last 1 byte is valid for ssid len of the probe request
+       if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_DEVICE) || rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
+       {
+               if((p2pie=rtw_get_p2p_ie( pframe + WLAN_HDR_A3_LEN + _PROBEREQ_IE_OFFSET_ , len - WLAN_HDR_A3_LEN - _PROBEREQ_IE_OFFSET_ , NULL, &p2pielen)))
+               {
+                       if ( (p != NULL) && _rtw_memcmp( ( void * ) ( p+2 ), ( void * ) pwdinfo->p2p_wildcard_ssid , 7 ))
+                       {
+                               //todo:
+                               //Check Requested Device Type attributes in WSC IE.
+                               //Check Device ID attribute in P2P IE
+
+                               ret = _TRUE;
+                       }
+                       else if ( (p != NULL) && ( ssid_len == 0 ) )
+                       {
+                               ret = _TRUE;
+                       }
+               }
+               else
+               {
+                       //non -p2p device
+               }
+
+       }
+
+
+       return ret;
+
+}
+
+u32 process_assoc_req_p2p_ie(struct wifidirect_info *pwdinfo, u8 *pframe, uint len, struct sta_info *psta)
+{
+       u8 status_code = P2P_STATUS_SUCCESS;
+       u8 *pbuf, *pattr_content=NULL;
+       u32 attr_contentlen = 0;
+       u16 cap_attr=0;
+       unsigned short  frame_type, ie_offset=0;
+       u8 * ies;
+       u32 ies_len;
+       u8 * p2p_ie;
+       u32     p2p_ielen = 0;
+
+       if(!rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
+               return P2P_STATUS_FAIL_REQUEST_UNABLE;
+
+       frame_type = GetFrameSubType(pframe);
+       if (frame_type == WIFI_ASSOCREQ)
+       {
+               ie_offset = _ASOCREQ_IE_OFFSET_;
+       }
+       else // WIFI_REASSOCREQ
+       {
+               ie_offset = _REASOCREQ_IE_OFFSET_;
+       }
+
+       ies = pframe + WLAN_HDR_A3_LEN + ie_offset;
+       ies_len = len - WLAN_HDR_A3_LEN - ie_offset;
+
+       p2p_ie = rtw_get_p2p_ie(ies , ies_len , NULL, &p2p_ielen);
+
+       if ( !p2p_ie )
+       {
+               DBG_8192C( "[%s] P2P IE not Found!!\n", __FUNCTION__ );
+               status_code =  P2P_STATUS_FAIL_INVALID_PARAM;
+       }
+       else
+       {
+               DBG_8192C( "[%s] P2P IE Found!!\n", __FUNCTION__ );
+       }
+
+       while ( p2p_ie )
+       {
+               //Check P2P Capability ATTR
+               if( rtw_get_p2p_attr_content( p2p_ie, p2p_ielen, P2P_ATTR_CAPABILITY, (u8*)&cap_attr, (uint*) &attr_contentlen) )
+               {
+                       DBG_8192C( "[%s] Got P2P Capability Attr!!\n", __FUNCTION__ );
+                       cap_attr = le16_to_cpu(cap_attr);
+                       psta->dev_cap = cap_attr&0xff;
+               }
+
+               //Check Extended Listen Timing ATTR
+
+
+               //Check P2P Device Info ATTR
+               if(rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_DEVICE_INFO, NULL, (uint*)&attr_contentlen))
+               {
+                       DBG_8192C( "[%s] Got P2P DEVICE INFO Attr!!\n", __FUNCTION__ );
+                       pattr_content = pbuf = rtw_zmalloc(attr_contentlen);
+                       if(pattr_content)
+                       {
+                               u8 num_of_secdev_type;
+                               u16 dev_name_len;
+
+
+                               rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_DEVICE_INFO , pattr_content, (uint*)&attr_contentlen);
+
+                               _rtw_memcpy(psta->dev_addr,     pattr_content, ETH_ALEN);//P2P Device Address
+
+                               pattr_content += ETH_ALEN;
+
+                               _rtw_memcpy(&psta->config_methods, pattr_content, 2);//Config Methods
+                               psta->config_methods = be16_to_cpu(psta->config_methods);
+
+                               pattr_content += 2;
+
+                               _rtw_memcpy(psta->primary_dev_type, pattr_content, 8);
+
+                               pattr_content += 8;
+
+                               num_of_secdev_type = *pattr_content;
+                               pattr_content += 1;
+
+                               if(num_of_secdev_type==0)
+                               {
+                                       psta->num_of_secdev_type = 0;
+                               }
+                               else
+                               {
+                                       u32 len;
+
+                                       psta->num_of_secdev_type = num_of_secdev_type;
+
+                                       len = (sizeof(psta->secdev_types_list)<(num_of_secdev_type*8)) ? (sizeof(psta->secdev_types_list)) : (num_of_secdev_type*8);
+
+                                       _rtw_memcpy(psta->secdev_types_list, pattr_content, len);
+
+                                       pattr_content += (num_of_secdev_type*8);
+                               }
+
+
+                               //dev_name_len = attr_contentlen - ETH_ALEN - 2 - 8 - 1 - (num_of_secdev_type*8);
+                               psta->dev_name_len=0;
+                               if(WPS_ATTR_DEVICE_NAME == be16_to_cpu(*(u16*)pattr_content))
+                               {
+                                       dev_name_len = be16_to_cpu(*(u16*)(pattr_content+2));
+
+                                       psta->dev_name_len = (sizeof(psta->dev_name)<dev_name_len) ? sizeof(psta->dev_name):dev_name_len;
+
+                                       _rtw_memcpy(psta->dev_name, pattr_content+4, psta->dev_name_len);
+                               }
+
+                               rtw_mfree(pbuf, attr_contentlen);
+
+                       }
+
+               }
+
+               //Get the next P2P IE
+               p2p_ie = rtw_get_p2p_ie(p2p_ie+p2p_ielen, ies_len -(p2p_ie -ies + p2p_ielen), NULL, &p2p_ielen);
+
+       }
+
+       return status_code;
+
+}
+
+u32 process_p2p_devdisc_req(struct wifidirect_info *pwdinfo, u8 *pframe, uint len)
+{
+       u8 *frame_body;
+       u8 status, dialogToken;
+       struct sta_info *psta = NULL;
+       _adapter *padapter = pwdinfo->padapter;
+       struct sta_priv *pstapriv = &padapter->stapriv;
+       u8 *p2p_ie;
+       u32     p2p_ielen = 0;
+
+       frame_body = (unsigned char *)(pframe + sizeof(struct rtw_ieee80211_hdr_3addr));
+
+       dialogToken = frame_body[7];
+       status = P2P_STATUS_FAIL_UNKNOWN_P2PGROUP;
+
+       if ( (p2p_ie=rtw_get_p2p_ie( frame_body + _PUBLIC_ACTION_IE_OFFSET_, len - _PUBLIC_ACTION_IE_OFFSET_, NULL, &p2p_ielen)) )
+       {
+               u8 groupid[ 38 ] = { 0x00 };
+               u8 dev_addr[ETH_ALEN] = { 0x00 };
+               u32     attr_contentlen = 0;
+
+               if(rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_GROUP_ID, groupid, &attr_contentlen))
+               {
+                       if(_rtw_memcmp(pwdinfo->device_addr, groupid, ETH_ALEN) &&
+                               _rtw_memcmp(pwdinfo->p2p_group_ssid, groupid+ETH_ALEN, pwdinfo->p2p_group_ssid_len))
+                       {
+                               attr_contentlen=0;
+                               if(rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_DEVICE_ID, dev_addr, &attr_contentlen))
+                               {
+                                       _irqL irqL;
+                                       _list   *phead, *plist;
+
+                                       _enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+                                       phead = &pstapriv->asoc_list;
+                                       plist = get_next(phead);
+
+                                       //look up sta asoc_queue
+                                       while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
+                                       {
+                                               psta = LIST_CONTAINOR(plist, struct sta_info, asoc_list);
+
+                                               plist = get_next(plist);
+
+                                               if(psta->is_p2p_device && (psta->dev_cap&P2P_DEVCAP_CLIENT_DISCOVERABILITY) &&
+                                                       _rtw_memcmp(psta->dev_addr, dev_addr, ETH_ALEN))
+                                               {
+
+                                                       //_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+                                                       //issue GO Discoverability Request
+                                                       issue_group_disc_req(pwdinfo, psta->hwaddr);
+                                                       //_enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+
+                                                       status = P2P_STATUS_SUCCESS;
+
+                                                       break;
+                                               }
+                                               else
+                                               {
+                                                       status = P2P_STATUS_FAIL_INFO_UNAVAILABLE;
+                                               }
+
+                                       }
+                                       _exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+
+                               }
+                               else
+                               {
+                                       status = P2P_STATUS_FAIL_INVALID_PARAM;
+                               }
+
+                       }
+                       else
+                       {
+                               status = P2P_STATUS_FAIL_INVALID_PARAM;
+                       }
+
+               }
+
+       }
+
+
+       //issue Device Discoverability Response
+       issue_p2p_devdisc_resp(pwdinfo, GetAddr2Ptr(pframe), status, dialogToken);
+
+
+       return (status==P2P_STATUS_SUCCESS) ? _TRUE:_FALSE;
+
+}
+
+u32 process_p2p_devdisc_resp(struct wifidirect_info *pwdinfo, u8 *pframe, uint len)
+{
+       return _TRUE;
+}
+
+u8 process_p2p_provdisc_req(struct wifidirect_info *pwdinfo,  u8 *pframe, uint len )
+{
+       u8 *frame_body;
+       u8 *wpsie;
+       uint    wps_ielen = 0, attr_contentlen = 0;
+       u16     uconfig_method = 0;
+
+
+       frame_body = (pframe + sizeof(struct rtw_ieee80211_hdr_3addr));
+
+       if ( (wpsie=rtw_get_wps_ie( frame_body + _PUBLIC_ACTION_IE_OFFSET_, len - _PUBLIC_ACTION_IE_OFFSET_, NULL, &wps_ielen)) )
+       {
+               if ( rtw_get_wps_attr_content( wpsie, wps_ielen, WPS_ATTR_CONF_METHOD , ( u8* ) &uconfig_method, &attr_contentlen) )
+               {
+                       uconfig_method = be16_to_cpu( uconfig_method );
+                       switch( uconfig_method )
+                       {
+                               case WPS_CM_DISPLYA:
+                               {
+                                       _rtw_memcpy( pwdinfo->rx_prov_disc_info.strconfig_method_desc_of_prov_disc_req, "dis", 3 );
+                                       break;
+                               }
+                               case WPS_CM_LABEL:
+                               {
+                                       _rtw_memcpy( pwdinfo->rx_prov_disc_info.strconfig_method_desc_of_prov_disc_req, "lab", 3 );
+                                       break;
+                               }
+                               case WPS_CM_PUSH_BUTTON:
+                               {
+                                       _rtw_memcpy( pwdinfo->rx_prov_disc_info.strconfig_method_desc_of_prov_disc_req, "pbc", 3 );
+                                       break;
+                               }
+                               case WPS_CM_KEYPAD:
+                               {
+                                       _rtw_memcpy( pwdinfo->rx_prov_disc_info.strconfig_method_desc_of_prov_disc_req, "pad", 3 );
+                                       break;
+                               }
+                       }
+                       issue_p2p_provision_resp( pwdinfo, GetAddr2Ptr(pframe), frame_body, uconfig_method);
+               }
+       }
+       DBG_871X( "[%s] config method = %s\n", __FUNCTION__, pwdinfo->rx_prov_disc_info.strconfig_method_desc_of_prov_disc_req );
+       return _TRUE;
+
+}
+
+u8 process_p2p_provdisc_resp(struct wifidirect_info *pwdinfo,  u8 *pframe)
+{
+
+       return _TRUE;
+}
+
+u8 rtw_p2p_get_peer_ch_list(struct wifidirect_info *pwdinfo, u8 *ch_content, u8 ch_cnt, u8 *peer_ch_list)
+{
+       u8 i = 0, j = 0;
+       u8 temp = 0;
+       u8 ch_no = 0;
+       ch_content += 3;
+       ch_cnt -= 3;
+
+       while( ch_cnt > 0)
+       {
+               ch_content += 1;
+               ch_cnt -= 1;
+               temp = *ch_content;
+               for( i = 0 ; i < temp ; i++, j++ )
+               {
+                       peer_ch_list[j] = *( ch_content + 1 + i );
+               }
+               ch_content += (temp + 1);
+               ch_cnt -= (temp + 1);
+               ch_no += temp ;
+       }
+
+       return ch_no;
+}
+
+u8 rtw_p2p_check_peer_oper_ch(struct mlme_ext_priv *pmlmeext, u8 ch)
+{
+       u8 i = 0;
+
+       for( i = 0; i < pmlmeext->max_chan_nums; i++ )
+       {
+               if ( pmlmeext->channel_set[ i ].ChannelNum == ch )
+               {
+                       return _SUCCESS;
+               }
+       }
+
+       return _FAIL;
+}
+
+u8 rtw_p2p_ch_inclusion(struct mlme_ext_priv *pmlmeext, u8 *peer_ch_list, u8 peer_ch_num, u8 *ch_list_inclusioned)
+{
+       int     i = 0, j = 0, temp = 0;
+       u8 ch_no = 0;
+
+       for( i = 0; i < peer_ch_num; i++ )
+       {
+               for( j = temp; j < pmlmeext->max_chan_nums; j++ )
+               {
+                       if( *( peer_ch_list + i ) == pmlmeext->channel_set[ j ].ChannelNum )
+                       {
+                               ch_list_inclusioned[ ch_no++ ] = *( peer_ch_list + i );
+                               temp = j;
+                               break;
+                       }
+               }
+       }
+
+       return ch_no;
+}
+
+u8 process_p2p_group_negotation_req( struct wifidirect_info *pwdinfo, u8 *pframe, uint len )
+{
+       _adapter *padapter = pwdinfo->padapter;
+       u8      result = P2P_STATUS_SUCCESS;
+       u32     p2p_ielen = 0, wps_ielen = 0;
+       u8 * ies;
+       u32 ies_len;
+       u8 *p2p_ie;
+       u8 *wpsie;
+       u16             wps_devicepassword_id = 0x0000;
+       uint    wps_devicepassword_id_len = 0;
+#ifdef CONFIG_WFD
+       u8      wfd_ie[ 128 ] = { 0x00 };
+       u32     wfd_ielen = 0;
+#ifdef CONFIG_TDLS
+       struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
+#endif // CONFIG_TDLS
+#endif // CONFIG_WFD
+#ifdef CONFIG_CONCURRENT_MODE
+       _adapter                                *pbuddy_adapter = pwdinfo->padapter->pbuddy_adapter;
+       struct wifidirect_info  *pbuddy_wdinfo = &pbuddy_adapter->wdinfo;
+       struct mlme_priv                *pbuddy_mlmepriv = &pbuddy_adapter->mlmepriv;
+       struct mlme_ext_priv    *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
+#endif
+
+       if ( (wpsie=rtw_get_wps_ie( pframe + _PUBLIC_ACTION_IE_OFFSET_, len - _PUBLIC_ACTION_IE_OFFSET_, NULL, &wps_ielen)) )
+       {
+               //      Commented by Kurt 20120113
+               //      If some device wants to do p2p handshake without sending prov_disc_req
+               //      We have to get peer_req_cm from here.
+               if(_rtw_memcmp( pwdinfo->rx_prov_disc_info.strconfig_method_desc_of_prov_disc_req, "000", 3) )
+               {
+                       rtw_get_wps_attr_content( wpsie, wps_ielen, WPS_ATTR_DEVICE_PWID, (u8*) &wps_devicepassword_id, &wps_devicepassword_id_len);
+                       wps_devicepassword_id = be16_to_cpu( wps_devicepassword_id );
+
+                       if ( wps_devicepassword_id == WPS_DPID_USER_SPEC )
+                       {
+                               _rtw_memcpy( pwdinfo->rx_prov_disc_info.strconfig_method_desc_of_prov_disc_req, "dis", 3 );
+                       }
+                       else if ( wps_devicepassword_id == WPS_DPID_REGISTRAR_SPEC )
+                       {
+                               _rtw_memcpy( pwdinfo->rx_prov_disc_info.strconfig_method_desc_of_prov_disc_req, "pad", 3 );
+                       }
+                       else
+                       {
+                               _rtw_memcpy( pwdinfo->rx_prov_disc_info.strconfig_method_desc_of_prov_disc_req, "pbc", 3 );
+                       }
+               }
+       }
+       else
+       {
+               DBG_871X( "[%s] WPS IE not Found!!\n", __FUNCTION__ );
+               result = P2P_STATUS_FAIL_INCOMPATIBLE_PARAM;
+               rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_FAIL);
+               return( result );
+       }
+
+       if ( pwdinfo->ui_got_wps_info == P2P_NO_WPSINFO )
+       {
+               result = P2P_STATUS_FAIL_INFO_UNAVAILABLE;
+               rtw_p2p_set_state(pwdinfo, P2P_STATE_TX_INFOR_NOREADY);
+               return( result );
+       }
+
+       ies = pframe + _PUBLIC_ACTION_IE_OFFSET_;
+       ies_len = len - _PUBLIC_ACTION_IE_OFFSET_;
+
+       p2p_ie = rtw_get_p2p_ie( ies, ies_len, NULL, &p2p_ielen );
+
+       if ( !p2p_ie )
+       {
+               DBG_871X( "[%s] P2P IE not Found!!\n", __FUNCTION__ );
+               result = P2P_STATUS_FAIL_INCOMPATIBLE_PARAM;
+               rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_FAIL);
+       }
+
+       while ( p2p_ie )
+       {
+               u8      attr_content = 0x00;
+               u32     attr_contentlen = 0;
+               u8      ch_content[100] = { 0x00 };
+               uint    ch_cnt = 0;
+               u8      peer_ch_list[100] = { 0x00 };
+               u8      peer_ch_num = 0;
+               u8      ch_list_inclusioned[100] = { 0x00 };
+               u8      ch_num_inclusioned = 0;
+               u16     cap_attr;
+
+               rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_ING);
+
+               //Check P2P Capability ATTR
+               if(rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_CAPABILITY, (u8*)&cap_attr, (uint*)&attr_contentlen) )
+               {
+                       cap_attr = le16_to_cpu(cap_attr);
+
+#if defined(CONFIG_WFD) && defined(CONFIG_TDLS)
+                       if(!(cap_attr & P2P_GRPCAP_INTRABSS) )
+                               ptdlsinfo->ap_prohibited = _TRUE;
+#endif //defined(CONFIG_WFD) && defined(CONFIG_TDLS)
+               }
+
+               if ( rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_GO_INTENT , &attr_content, &attr_contentlen) )
+               {
+                       DBG_871X( "[%s] GO Intent = %d, tie = %d\n", __FUNCTION__, attr_content >> 1, attr_content & 0x01 );
+                       pwdinfo->peer_intent = attr_content;    //      include both intent and tie breaker values.
+
+                       if ( pwdinfo->intent == ( pwdinfo->peer_intent >> 1 ) )
+                       {
+                               //      Try to match the tie breaker value
+                               if ( pwdinfo->intent == P2P_MAX_INTENT )
+                               {
+                                       rtw_p2p_set_role(pwdinfo, P2P_ROLE_DEVICE);
+                                       result = P2P_STATUS_FAIL_BOTH_GOINTENT_15;
+                               }
+                               else
+                               {
+                                       if ( attr_content & 0x01 )
+                                       {
+                                               rtw_p2p_set_role(pwdinfo, P2P_ROLE_CLIENT);
+                                       }
+                                       else
+                                       {
+                                               rtw_p2p_set_role(pwdinfo, P2P_ROLE_GO);
+                                       }
+                               }
+                       }
+                       else if ( pwdinfo->intent > ( pwdinfo->peer_intent >> 1 ) )
+                       {
+                               rtw_p2p_set_role(pwdinfo, P2P_ROLE_GO);
+                       }
+                       else
+                       {
+                               rtw_p2p_set_role(pwdinfo, P2P_ROLE_CLIENT);
+                       }
+
+                       if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
+                       {
+                               //      Store the group id information.
+                               _rtw_memcpy( pwdinfo->groupid_info.go_device_addr, pwdinfo->device_addr, ETH_ALEN );
+                               _rtw_memcpy( pwdinfo->groupid_info.ssid, pwdinfo->nego_ssid, pwdinfo->nego_ssidlen );
+                       }
+               }
+
+
+               attr_contentlen = 0;
+               if ( rtw_get_p2p_attr_content( p2p_ie, p2p_ielen, P2P_ATTR_INTENTED_IF_ADDR, pwdinfo->p2p_peer_interface_addr, &attr_contentlen ) )
+               {
+                       if ( attr_contentlen != ETH_ALEN )
+                       {
+                               _rtw_memset( pwdinfo->p2p_peer_interface_addr, 0x00, ETH_ALEN );
+                       }
+               }
+
+               if ( rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_CH_LIST, ch_content, &ch_cnt) )
+               {
+                       peer_ch_num = rtw_p2p_get_peer_ch_list(pwdinfo, ch_content, ch_cnt, peer_ch_list);
+                       ch_num_inclusioned = rtw_p2p_ch_inclusion(&padapter->mlmeextpriv, peer_ch_list, peer_ch_num, ch_list_inclusioned);
+
+                       if( ch_num_inclusioned == 0)
+                       {
+                               DBG_871X( "[%s] No common channel in channel list!\n", __FUNCTION__ );
+                               result = P2P_STATUS_FAIL_NO_COMMON_CH;
+                               rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_FAIL);
+                               break;
+                       }
+
+                       if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
+                       {
+                               if ( !rtw_p2p_is_channel_list_ok( pwdinfo->operating_channel,
+                                                                                               ch_list_inclusioned, ch_num_inclusioned) )
+                               {
+#ifdef CONFIG_CONCURRENT_MODE
+                                       if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
+                                       {
+                                               DBG_871X( "[%s] desired channel NOT Found!\n", __FUNCTION__ );
+                                               result = P2P_STATUS_FAIL_NO_COMMON_CH;
+                                               rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_FAIL);
+                                               break;
+                                       }
+                                       else
+#endif //CONFIG_CONCURRENT_MODE
+                                       {
+                                               u8 operatingch_info[5] = { 0x00 }, peer_operating_ch = 0;
+                                               attr_contentlen = 0;
+
+                                               if ( rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_OPERATING_CH, operatingch_info, &attr_contentlen) )
+                                               {
+                                                       peer_operating_ch = operatingch_info[4];
+                                               }
+
+                                               if ( rtw_p2p_is_channel_list_ok( peer_operating_ch,
+                                                                                                               ch_list_inclusioned, ch_num_inclusioned) )
+                                               {
+                                                       /**
+                                                        *      Change our operating channel as peer's for compatibility.
+                                                        */
+                                                       pwdinfo->operating_channel = peer_operating_ch;
+                                                       DBG_871X( "[%s] Change op ch to %02x as peer's\n", __FUNCTION__, pwdinfo->operating_channel);
+                                               }
+                                               else
+                                               {
+                                                       // Take first channel of ch_list_inclusioned as operating channel
+                                                       pwdinfo->operating_channel = ch_list_inclusioned[0];
+                                                       DBG_871X( "[%s] Change op ch to %02x\n", __FUNCTION__, pwdinfo->operating_channel);
+                                               }
+                                       }
+
+                               }
+                       }
+               }
+
+               //Get the next P2P IE
+               p2p_ie = rtw_get_p2p_ie(p2p_ie+p2p_ielen, ies_len -(p2p_ie -ies + p2p_ielen), NULL, &p2p_ielen);
+       }
+
+#ifdef CONFIG_WFD
+       //      Added by Albert 20110823
+       //      Try to get the TCP port information when receiving the negotiation request.
+       if ( rtw_get_wfd_ie( pframe + _PUBLIC_ACTION_IE_OFFSET_, len - _PUBLIC_ACTION_IE_OFFSET_, wfd_ie, &wfd_ielen ) )
+       {
+               u8      attr_content[ 10 ] = { 0x00 };
+               u32     attr_contentlen = 0;
+
+               DBG_871X( "[%s] WFD IE Found!!\n", __FUNCTION__ );
+               rtw_get_wfd_attr_content( wfd_ie, wfd_ielen, WFD_ATTR_DEVICE_INFO, attr_content, &attr_contentlen);
+               if ( attr_contentlen )
+               {
+                       pwdinfo->wfd_info->peer_rtsp_ctrlport = RTW_GET_BE16( attr_content + 2 );
+                       DBG_871X( "[%s] Peer PORT NUM = %d\n", __FUNCTION__, pwdinfo->wfd_info->peer_rtsp_ctrlport );
+               }
+       }
+#endif // CONFIG_WFD
+
+       return( result );
+}
+
+u8 process_p2p_group_negotation_resp( struct wifidirect_info *pwdinfo, u8 *pframe, uint len )
+{
+       _adapter *padapter = pwdinfo->padapter;
+       u8      result = P2P_STATUS_SUCCESS;
+       u32     p2p_ielen, wps_ielen;
+       u8 * ies;
+       u32 ies_len;
+       u8 * p2p_ie;
+#ifdef CONFIG_WFD
+       u8      wfd_ie[ 128 ] = { 0x00 };
+       u32     wfd_ielen = 0;
+#ifdef CONFIG_TDLS
+       struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
+#endif // CONFIG_TDLS
+#endif // CONFIG_WFD
+
+       ies = pframe + _PUBLIC_ACTION_IE_OFFSET_;
+       ies_len = len - _PUBLIC_ACTION_IE_OFFSET_;
+
+       //      Be able to know which one is the P2P GO and which one is P2P client.
+
+       if ( rtw_get_wps_ie( ies, ies_len, NULL, &wps_ielen) )
+       {
+
+       }
+       else
+       {
+               DBG_871X( "[%s] WPS IE not Found!!\n", __FUNCTION__ );
+               result = P2P_STATUS_FAIL_INCOMPATIBLE_PARAM;
+               rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_FAIL);
+       }
+
+       p2p_ie = rtw_get_p2p_ie( ies, ies_len, NULL, &p2p_ielen );
+       if ( !p2p_ie )
+       {
+               rtw_p2p_set_role(pwdinfo, P2P_ROLE_DEVICE);
+               rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_FAIL);
+               result = P2P_STATUS_FAIL_INCOMPATIBLE_PARAM;
+       }
+       else
+       {
+
+               u8      attr_content = 0x00;
+               u32     attr_contentlen = 0;
+               u8      operatingch_info[5] = { 0x00 };
+               uint    ch_cnt = 0;
+               u8      ch_content[100] = { 0x00 };
+               u8      groupid[ 38 ];
+               u16     cap_attr;
+               u8      peer_ch_list[100] = { 0x00 };
+               u8      peer_ch_num = 0;
+               u8      ch_list_inclusioned[100] = { 0x00 };
+               u8      ch_num_inclusioned = 0;
+
+               while ( p2p_ie )        //      Found the P2P IE.
+               {
+
+                       //Check P2P Capability ATTR
+                       if(rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_CAPABILITY, (u8*)&cap_attr, (uint*)&attr_contentlen) )
+                       {
+                               cap_attr = le16_to_cpu(cap_attr);
+#if defined(CONFIG_WFD) && defined(CONFIG_TDLS)
+                       if(!(cap_attr & P2P_GRPCAP_INTRABSS) )
+                               ptdlsinfo->ap_prohibited = _TRUE;
+#endif //defined(CONFIG_WFD) && defined(CONFIG_TDLS)
+                       }
+
+                       rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_STATUS, &attr_content, &attr_contentlen);
+                       if ( attr_contentlen == 1 )
+                       {
+                               DBG_871X( "[%s] Status = %d\n", __FUNCTION__, attr_content );
+                               if ( attr_content == P2P_STATUS_SUCCESS )
+                               {
+                                       //      Do nothing.
+                               }
+                               else
+                               {
+                                       if ( P2P_STATUS_FAIL_INFO_UNAVAILABLE == attr_content ) {
+                                               rtw_p2p_set_state(pwdinfo, P2P_STATE_RX_INFOR_NOREADY);
+                                       } else {
+                                               rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_FAIL);
+                                       }
+                                       rtw_p2p_set_role(pwdinfo, P2P_ROLE_DEVICE);
+                                       result = attr_content;
+                                       break;
+                               }
+                       }
+
+                       //      Try to get the peer's interface address
+                       attr_contentlen = 0;
+                       if ( rtw_get_p2p_attr_content( p2p_ie, p2p_ielen, P2P_ATTR_INTENTED_IF_ADDR, pwdinfo->p2p_peer_interface_addr, &attr_contentlen ) )
+                       {
+                               if ( attr_contentlen != ETH_ALEN )
+                               {
+                                       _rtw_memset( pwdinfo->p2p_peer_interface_addr, 0x00, ETH_ALEN );
+                               }
+                       }
+
+                       //      Try to get the peer's intent and tie breaker value.
+                       attr_content = 0x00;
+                       attr_contentlen = 0;
+                       if ( rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_GO_INTENT , &attr_content, &attr_contentlen) )
+                       {
+                               DBG_871X( "[%s] GO Intent = %d, tie = %d\n", __FUNCTION__, attr_content >> 1, attr_content & 0x01 );
+                               pwdinfo->peer_intent = attr_content;    //      include both intent and tie breaker values.
+
+                               if ( pwdinfo->intent == ( pwdinfo->peer_intent >> 1 ) )
+                               {
+                                       //      Try to match the tie breaker value
+                                       if ( pwdinfo->intent == P2P_MAX_INTENT )
+                                       {
+                                               rtw_p2p_set_role(pwdinfo, P2P_ROLE_DEVICE);
+                                               result = P2P_STATUS_FAIL_BOTH_GOINTENT_15;
+                                               rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_FAIL);
+                                       }
+                                       else
+                                       {
+                                               rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_OK);
+                                               rtw_p2p_set_pre_state(pwdinfo, P2P_STATE_GONEGO_OK);
+                                               if ( attr_content & 0x01 )
+                                               {
+                                                       rtw_p2p_set_role(pwdinfo, P2P_ROLE_CLIENT);
+                                               }
+                                               else
+                                               {
+                                                       rtw_p2p_set_role(pwdinfo, P2P_ROLE_GO);
+                                               }
+                                       }
+                               }
+                               else if ( pwdinfo->intent > ( pwdinfo->peer_intent >> 1 ) )
+                               {
+                                       rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_OK);
+                                       rtw_p2p_set_pre_state(pwdinfo, P2P_STATE_GONEGO_OK);
+                                       rtw_p2p_set_role(pwdinfo, P2P_ROLE_GO);
+                               }
+                               else
+                               {
+                                       rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_OK);
+                                       rtw_p2p_set_pre_state(pwdinfo, P2P_STATE_GONEGO_OK);
+                                       rtw_p2p_set_role(pwdinfo, P2P_ROLE_CLIENT);
+                               }
+
+                               if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
+                               {
+                                       //      Store the group id information.
+                                       _rtw_memcpy( pwdinfo->groupid_info.go_device_addr, pwdinfo->device_addr, ETH_ALEN );
+                                       _rtw_memcpy( pwdinfo->groupid_info.ssid, pwdinfo->nego_ssid, pwdinfo->nego_ssidlen );
+
+                               }
+                       }
+
+                       //      Try to get the operation channel information
+
+                       attr_contentlen = 0;
+                       if ( rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_OPERATING_CH, operatingch_info, &attr_contentlen))
+                       {
+                               DBG_871X( "[%s] Peer's operating channel = %d\n", __FUNCTION__, operatingch_info[4] );
+                               pwdinfo->peer_operating_ch = operatingch_info[4];
+                       }
+
+                       //      Try to get the channel list information
+                       if ( rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_CH_LIST, pwdinfo->channel_list_attr, &pwdinfo->channel_list_attr_len ) )
+                       {
+                               DBG_871X( "[%s] channel list attribute found, len = %d\n", __FUNCTION__,  pwdinfo->channel_list_attr_len );
+
+                               peer_ch_num = rtw_p2p_get_peer_ch_list(pwdinfo, pwdinfo->channel_list_attr, pwdinfo->channel_list_attr_len, peer_ch_list);
+                               ch_num_inclusioned = rtw_p2p_ch_inclusion(&padapter->mlmeextpriv, peer_ch_list, peer_ch_num, ch_list_inclusioned);
+
+                               if( ch_num_inclusioned == 0)
+                               {
+                                       DBG_871X( "[%s] No common channel in channel list!\n", __FUNCTION__ );
+                                       result = P2P_STATUS_FAIL_NO_COMMON_CH;
+                                       rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_FAIL);
+                                       break;
+                               }
+
+                               if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
+                               {
+                                       if ( !rtw_p2p_is_channel_list_ok( pwdinfo->operating_channel,
+                                                                                                       ch_list_inclusioned, ch_num_inclusioned) )
+                                       {
+#ifdef CONFIG_CONCURRENT_MODE
+                                               if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
+                                               {
+                                                       DBG_871X( "[%s] desired channel NOT Found!\n", __FUNCTION__ );
+                                                       result = P2P_STATUS_FAIL_NO_COMMON_CH;
+                                                       rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_FAIL);
+                                                       break;
+                                               }
+                                               else
+#endif //CONFIG_CONCURRENT_MODE
+                                               {
+                                                       u8 operatingch_info[5] = { 0x00 }, peer_operating_ch = 0;
+                                                       attr_contentlen = 0;
+
+                                                       if ( rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_OPERATING_CH, operatingch_info, &attr_contentlen) )
+                                                       {
+                                                               peer_operating_ch = operatingch_info[4];
+                                                       }
+
+                                                       if ( rtw_p2p_is_channel_list_ok( peer_operating_ch,
+                                                                                                                       ch_list_inclusioned, ch_num_inclusioned) )
+                                                       {
+                                                               /**
+                                                                *      Change our operating channel as peer's for compatibility.
+                                                                */
+                                                               pwdinfo->operating_channel = peer_operating_ch;
+                                                               DBG_871X( "[%s] Change op ch to %02x as peer's\n", __FUNCTION__, pwdinfo->operating_channel);
+                                                       }
+                                                       else
+                                                       {
+                                                               // Take first channel of ch_list_inclusioned as operating channel
+                                                               pwdinfo->operating_channel = ch_list_inclusioned[0];
+                                                               DBG_871X( "[%s] Change op ch to %02x\n", __FUNCTION__, pwdinfo->operating_channel);
+                                                       }
+                                               }
+
+                                       }
+                               }
+
+                       }
+                       else
+                       {
+                               DBG_871X( "[%s] channel list attribute not found!\n", __FUNCTION__);
+                       }
+
+                       //      Try to get the group id information if peer is GO
+                       attr_contentlen = 0;
+                       _rtw_memset( groupid, 0x00, 38 );
+                       if ( rtw_get_p2p_attr_content( p2p_ie, p2p_ielen, P2P_ATTR_GROUP_ID, groupid, &attr_contentlen) )
+                       {
+                               _rtw_memcpy( pwdinfo->groupid_info.go_device_addr, &groupid[0], ETH_ALEN );
+                               _rtw_memcpy( pwdinfo->groupid_info.ssid, &groupid[6], attr_contentlen - ETH_ALEN );
+                       }
+
+                       //Get the next P2P IE
+                       p2p_ie = rtw_get_p2p_ie(p2p_ie+p2p_ielen, ies_len -(p2p_ie -ies + p2p_ielen), NULL, &p2p_ielen);
+               }
+
+       }
+
+#ifdef CONFIG_WFD
+       //      Added by Albert 20111122
+       //      Try to get the TCP port information when receiving the negotiation response.
+       if ( rtw_get_wfd_ie( pframe + _PUBLIC_ACTION_IE_OFFSET_, len - _PUBLIC_ACTION_IE_OFFSET_, wfd_ie, &wfd_ielen ) )
+       {
+               u8      attr_content[ 10 ] = { 0x00 };
+               u32     attr_contentlen = 0;
+
+               DBG_8192C( "[%s] WFD IE Found!!\n", __FUNCTION__ );
+               rtw_get_wfd_attr_content( wfd_ie, wfd_ielen, WFD_ATTR_DEVICE_INFO, attr_content, &attr_contentlen);
+               if ( attr_contentlen )
+               {
+                       pwdinfo->wfd_info->peer_rtsp_ctrlport = RTW_GET_BE16( attr_content + 2 );
+                       DBG_8192C( "[%s] Peer PORT NUM = %d\n", __FUNCTION__, pwdinfo->wfd_info->peer_rtsp_ctrlport );
+               }
+       }
+#endif // CONFIG_WFD
+
+       return( result );
+
+}
+
+u8 process_p2p_group_negotation_confirm( struct wifidirect_info *pwdinfo, u8 *pframe, uint len )
+{
+       u8 * ies;
+       u32 ies_len;
+       u8 * p2p_ie;
+       u32     p2p_ielen = 0;
+       u8      result = P2P_STATUS_SUCCESS;
+       ies = pframe + _PUBLIC_ACTION_IE_OFFSET_;
+       ies_len = len - _PUBLIC_ACTION_IE_OFFSET_;
+
+       p2p_ie = rtw_get_p2p_ie( ies, ies_len, NULL, &p2p_ielen );
+       while ( p2p_ie )        //      Found the P2P IE.
+       {
+               u8      attr_content = 0x00, operatingch_info[5] = { 0x00 };
+               u8      groupid[ 38 ] = { 0x00 };
+               u32     attr_contentlen = 0;
+
+               pwdinfo->negotiation_dialog_token = 1;
+               rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_STATUS, &attr_content, &attr_contentlen);
+               if ( attr_contentlen == 1 )
+               {
+                       DBG_871X( "[%s] Status = %d\n", __FUNCTION__, attr_content );
+                       result = attr_content;
+
+                       if ( attr_content == P2P_STATUS_SUCCESS )
+                       {
+                               u8      bcancelled = 0;
+
+                               _cancel_timer( &pwdinfo->restore_p2p_state_timer, &bcancelled );
+
+                               //      Commented by Albert 20100911
+                               //      Todo: Need to handle the case which both Intents are the same.
+                               rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_OK);
+                               rtw_p2p_set_pre_state(pwdinfo, P2P_STATE_GONEGO_OK);
+                               if ( ( pwdinfo->intent ) > ( pwdinfo->peer_intent >> 1 ) )
+                               {
+                                       rtw_p2p_set_role(pwdinfo, P2P_ROLE_GO);
+                               }
+                               else if ( ( pwdinfo->intent ) < ( pwdinfo->peer_intent >> 1 ) )
+                               {
+                                       rtw_p2p_set_role(pwdinfo, P2P_ROLE_CLIENT);
+                               }
+                               else
+                               {
+                                       //      Have to compare the Tie Breaker
+                                       if ( pwdinfo->peer_intent & 0x01 )
+                                       {
+                                               rtw_p2p_set_role(pwdinfo, P2P_ROLE_CLIENT);
+                                       }
+                                       else
+                                       {
+                                               rtw_p2p_set_role(pwdinfo, P2P_ROLE_GO);
+                                       }
+                               }
+
+#ifdef CONFIG_CONCURRENT_MODE
+                               if ( check_buddy_fwstate(pwdinfo->padapter , _FW_LINKED ) )
+                               {
+                                       //      Switch back to the AP channel soon.
+                                       _set_timer( &pwdinfo->ap_p2p_switch_timer, 100 );
+                               }
+#endif
+                       }
+                       else
+                       {
+                               rtw_p2p_set_role(pwdinfo, P2P_ROLE_DEVICE);
+                               rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_FAIL);
+                               break;
+                       }
+               }
+
+               //      Try to get the group id information
+               attr_contentlen = 0;
+               _rtw_memset( groupid, 0x00, 38 );
+               if ( rtw_get_p2p_attr_content( p2p_ie, p2p_ielen, P2P_ATTR_GROUP_ID, groupid, &attr_contentlen) )
+               {
+                       DBG_871X( "[%s] Ssid = %s, ssidlen = %d\n", __FUNCTION__, &groupid[ETH_ALEN], (u32)strlen(&groupid[ETH_ALEN]) );
+                       _rtw_memcpy( pwdinfo->groupid_info.go_device_addr, &groupid[0], ETH_ALEN );
+                       _rtw_memcpy( pwdinfo->groupid_info.ssid, &groupid[6], attr_contentlen - ETH_ALEN );
+               }
+
+               attr_contentlen = 0;
+               if ( rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_OPERATING_CH, operatingch_info, &attr_contentlen) )
+               {
+                       DBG_871X( "[%s] Peer's operating channel = %d\n", __FUNCTION__, operatingch_info[4] );
+                       pwdinfo->peer_operating_ch = operatingch_info[4];
+               }
+
+               //Get the next P2P IE
+               p2p_ie = rtw_get_p2p_ie(p2p_ie+p2p_ielen, ies_len -(p2p_ie -ies + p2p_ielen), NULL, &p2p_ielen);
+
+       }
+
+       return( result );
+}
+
+u8 process_p2p_presence_req(struct wifidirect_info *pwdinfo, u8 *pframe, uint len)
+{
+       u8 *frame_body;
+       u8 dialogToken=0;
+       u8 status = P2P_STATUS_SUCCESS;
+
+       frame_body = (unsigned char *)(pframe + sizeof(struct rtw_ieee80211_hdr_3addr));
+
+       dialogToken = frame_body[6];
+
+       //todo: check NoA attribute
+
+       issue_p2p_presence_resp(pwdinfo, GetAddr2Ptr(pframe), status, dialogToken);
+
+       return _TRUE;
+}
+
+void find_phase_handler( _adapter*     padapter )
+{
+       struct wifidirect_info  *pwdinfo = &padapter->wdinfo;
+       struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
+       NDIS_802_11_SSID        ssid;
+       _irqL                           irqL;
+       u8                                      _status = 0;
+
+_func_enter_;
+
+       _rtw_memset((unsigned char*)&ssid, 0, sizeof(NDIS_802_11_SSID));
+       _rtw_memcpy(ssid.Ssid, pwdinfo->p2p_wildcard_ssid, P2P_WILDCARD_SSID_LEN );
+       ssid.SsidLength = P2P_WILDCARD_SSID_LEN;
+
+       rtw_p2p_set_state(pwdinfo, P2P_STATE_FIND_PHASE_SEARCH);
+
+       _enter_critical_bh(&pmlmepriv->lock, &irqL);
+       _status = rtw_sitesurvey_cmd(padapter, &ssid, 1, NULL, 0);
+       _exit_critical_bh(&pmlmepriv->lock, &irqL);
+
+
+_func_exit_;
+}
+
+void p2p_concurrent_handler(  _adapter* padapter );
+
+void restore_p2p_state_handler( _adapter*      padapter )
+{
+       struct wifidirect_info  *pwdinfo = &padapter->wdinfo;
+       struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
+
+_func_enter_;
+
+       if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_ING) || rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_FAIL))
+       {
+               rtw_p2p_set_role(pwdinfo, P2P_ROLE_DEVICE);
+       }
+
+#ifdef CONFIG_CONCURRENT_MODE
+       if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
+       {
+               _adapter                                *pbuddy_adapter = padapter->pbuddy_adapter;
+               struct mlme_priv                *pbuddy_mlmepriv = &pbuddy_adapter->mlmepriv;
+               struct mlme_ext_priv    *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
+
+               if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_TX_PROVISION_DIS_REQ) || rtw_p2p_chk_state(pwdinfo, P2P_STATE_RX_PROVISION_DIS_RSP))
+               {
+                       set_channel_bwmode(padapter, pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_ch_offset, pbuddy_mlmeext->cur_bwmode);
+
+                       issue_nulldata(pbuddy_adapter, NULL, 0, 3, 500);
+               }
+       }
+#endif
+
+       rtw_p2p_set_state(pwdinfo, rtw_p2p_pre_state(pwdinfo));
+
+       if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_DEVICE))
+       {
+#ifdef CONFIG_CONCURRENT_MODE
+               p2p_concurrent_handler( padapter );
+#else
+               //      In the P2P client mode, the driver should not switch back to its listen channel
+               //      because this P2P client should stay at the operating channel of P2P GO.
+               set_channel_bwmode( padapter, pwdinfo->listen_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
+#endif
+       }
+_func_exit_;
+}
+
+void pre_tx_invitereq_handler( _adapter*       padapter )
+{
+       struct wifidirect_info  *pwdinfo = &padapter->wdinfo;
+       u8      val8 = 1;
+_func_enter_;
+
+       set_channel_bwmode(padapter, pwdinfo->invitereq_info.peer_ch, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
+       rtw_hal_set_hwreg(padapter, HW_VAR_MLME_SITESURVEY, (u8 *)(&val8));
+       issue_probereq_p2p(padapter, NULL);
+       _set_timer( &pwdinfo->pre_tx_scan_timer, P2P_TX_PRESCAN_TIMEOUT );
+
+_func_exit_;
+}
+
+void pre_tx_provdisc_handler( _adapter*        padapter )
+{
+       struct wifidirect_info  *pwdinfo = &padapter->wdinfo;
+       u8      val8 = 1;
+_func_enter_;
+
+       set_channel_bwmode(padapter, pwdinfo->tx_prov_disc_info.peer_channel_num[0], HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
+       rtw_hal_set_hwreg(padapter, HW_VAR_MLME_SITESURVEY, (u8 *)(&val8));
+       issue_probereq_p2p(padapter, NULL);
+       _set_timer( &pwdinfo->pre_tx_scan_timer, P2P_TX_PRESCAN_TIMEOUT );
+
+_func_exit_;
+}
+
+void pre_tx_negoreq_handler( _adapter* padapter )
+{
+       struct wifidirect_info  *pwdinfo = &padapter->wdinfo;
+       u8      val8 = 1;
+_func_enter_;
+
+       set_channel_bwmode(padapter, pwdinfo->nego_req_info.peer_channel_num[0], HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
+       rtw_hal_set_hwreg(padapter, HW_VAR_MLME_SITESURVEY, (u8 *)(&val8));
+       issue_probereq_p2p(padapter, NULL);
+       _set_timer( &pwdinfo->pre_tx_scan_timer, P2P_TX_PRESCAN_TIMEOUT );
+
+_func_exit_;
+}
+
+#ifdef CONFIG_CONCURRENT_MODE
+void p2p_concurrent_handler( _adapter* padapter )
+{
+       struct wifidirect_info  *pwdinfo = &padapter->wdinfo;
+       //_adapter                              *pbuddy_adapter = padapter->pbuddy_adapter;
+       //struct wifidirect_info        *pbuddy_wdinfo = &pbuddy_adapter->wdinfo;
+       //struct mlme_priv              *pbuddy_mlmepriv = &pbuddy_adapter->mlmepriv;
+       //struct mlme_ext_priv  *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
+       u8                                      val8;
+_func_enter_;
+
+       if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
+       {
+               PADAPTER pbuddy_adapter = padapter->pbuddy_adapter;
+               struct mlme_ext_priv *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
+
+               pwdinfo->operating_channel = pbuddy_mlmeext->cur_channel;
+
+               if( pwdinfo->driver_interface == DRIVER_CFG80211 )
+               {
+                       DBG_871X("%s, switch ch back to buddy's cur_channel=%d\n", __func__, pbuddy_mlmeext->cur_channel);
+
+                       set_channel_bwmode(padapter, pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_ch_offset, pbuddy_mlmeext->cur_bwmode);
+
+                       issue_nulldata(pbuddy_adapter, NULL, 0, 3, 500);
+               }
+               else if( pwdinfo->driver_interface == DRIVER_WEXT )
+               {
+                       if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_IDLE))
+                       {
+                               //      Now, the driver stays on the AP's channel.
+                               //      If the pwdinfo->ext_listen_period = 0, that means the P2P listen state is not available on listen channel.
+                               if ( pwdinfo->ext_listen_period > 0 )
+                               {
+                                       DBG_8192C( "[%s] P2P_STATE_IDLE, ext_listen_period = %d\n", __FUNCTION__, pwdinfo->ext_listen_period );
+
+                                       if ( pbuddy_mlmeext->cur_channel != pwdinfo->listen_channel )
+                                       {
+                                               //      Will switch to listen channel so that need to send the NULL data with PW bit to AP.
+                                               issue_nulldata(pbuddy_adapter, NULL, 1, 3, 500);
+                                               set_channel_bwmode(padapter, pwdinfo->listen_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
+                                       }
+
+                                       rtw_p2p_set_state(pwdinfo, P2P_STATE_LISTEN);
+                                       val8 = 1;
+                                       rtw_hal_set_hwreg(padapter, HW_VAR_MLME_SITESURVEY, (u8 *)(&val8));
+
+                                       //      Todo: To check the value of pwdinfo->ext_listen_period is equal to 0 or not.
+                                       _set_timer( &pwdinfo->ap_p2p_switch_timer, pwdinfo->ext_listen_period );
+                               }
+                       }
+                       else if ( rtw_p2p_chk_state(pwdinfo, P2P_STATE_LISTEN) ||
+                                       rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_FAIL) ||
+                                       ( rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_ING) && pwdinfo->nego_req_info.benable == _FALSE ) ||
+                                       rtw_p2p_chk_state(pwdinfo, P2P_STATE_RX_PROVISION_DIS_REQ) )
+                       {
+                               //      Now, the driver is in the listen state of P2P mode.
+                               DBG_8192C( "[%s] P2P_STATE_IDLE, ext_listen_interval = %d\n", __FUNCTION__, pwdinfo->ext_listen_interval );
+
+                               //      Commented by Albert 2012/11/01
+                               //      If the AP's channel is the same as the listen channel, we should still be in the listen state
+                               //      Other P2P device is still able to find this device out even this device is in the AP's channel.
+                               //      So, configure this device to be able to receive the probe request frame and set it to listen state.
+                               if ( pbuddy_mlmeext->cur_channel != pwdinfo->listen_channel )
+                               {
+                                       set_channel_bwmode(padapter, pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_ch_offset, pbuddy_mlmeext->cur_bwmode);
+                                       val8 = 0;
+                                       padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_MLME_SITESURVEY, (u8 *)(&val8));
+                                       rtw_p2p_set_state(pwdinfo, P2P_STATE_IDLE);
+                                       issue_nulldata(pbuddy_adapter, NULL, 0, 3, 500);
+                               }
+
+                               //      Todo: To check the value of pwdinfo->ext_listen_interval is equal to 0 or not.
+                               _set_timer( &pwdinfo->ap_p2p_switch_timer, pwdinfo->ext_listen_interval );
+                       }
+                       else if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_OK))
+                       {
+                               //      The driver had finished the P2P handshake successfully.
+                               val8 = 0;
+                               rtw_hal_set_hwreg(padapter, HW_VAR_MLME_SITESURVEY, (u8 *)(&val8));
+                               set_channel_bwmode(padapter, pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_ch_offset, pbuddy_mlmeext->cur_bwmode);
+                               issue_nulldata(pbuddy_adapter, NULL, 0, 3, 500);
+                       }
+                       else if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_TX_PROVISION_DIS_REQ))
+                       {
+                               val8 = 1;
+                               set_channel_bwmode(padapter, pwdinfo->tx_prov_disc_info.peer_channel_num[0], HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
+                               rtw_hal_set_hwreg(padapter, HW_VAR_MLME_SITESURVEY, (u8 *)(&val8));
+                               issue_probereq_p2p(padapter, NULL);
+                               _set_timer( &pwdinfo->pre_tx_scan_timer, P2P_TX_PRESCAN_TIMEOUT );
+                       }
+                       else if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_ING) && pwdinfo->nego_req_info.benable == _TRUE)
+                       {
+                               val8 = 1;
+                               set_channel_bwmode(padapter, pwdinfo->nego_req_info.peer_channel_num[0], HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
+                               rtw_hal_set_hwreg(padapter, HW_VAR_MLME_SITESURVEY, (u8 *)(&val8));
+                               issue_probereq_p2p(padapter, NULL);
+                               _set_timer( &pwdinfo->pre_tx_scan_timer, P2P_TX_PRESCAN_TIMEOUT );
+                       }
+                       else if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_TX_INVITE_REQ ) && pwdinfo->invitereq_info.benable == _TRUE)
+                       {
+                               /*
+                               val8 = 1;
+                               set_channel_bwmode(padapter, , HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
+                               rtw_hal_set_hwreg(padapter, HW_VAR_MLME_SITESURVEY, (u8 *)(&val8));
+                               issue_probereq_p2p(padapter, NULL);
+                               _set_timer( &pwdinfo->pre_tx_scan_timer, P2P_TX_PRESCAN_TIMEOUT );
+                               */
+                       }
+               }
+       }
+       else
+       {
+               set_channel_bwmode( padapter, pwdinfo->listen_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
+       }
+
+_func_exit_;
+}
+#endif
+
+#ifdef CONFIG_IOCTL_CFG80211
+static void ro_ch_handler(_adapter *padapter)
+{
+       struct cfg80211_wifidirect_info *pcfg80211_wdinfo = &padapter->cfg80211_wdinfo;
+       struct wifidirect_info *pwdinfo = &padapter->wdinfo;
+       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
+       u8 ch, bw, offset;
+_func_enter_;
+
+       if (rtw_get_ch_setting_union(padapter, &ch, &bw, &offset) != 0) {
+               if (0)
+               DBG_871X(FUNC_ADPT_FMT" back to linked union - ch:%u, bw:%u, offset:%u\n",
+                       FUNC_ADPT_ARG(padapter), ch, bw, offset);
+       }
+       else if (wdev_to_priv(padapter->rtw_wdev)->p2p_enabled && pwdinfo->listen_channel) {
+               ch = pwdinfo->listen_channel;
+               bw = HT_CHANNEL_WIDTH_20;
+               offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+               if (0)
+               DBG_871X(FUNC_ADPT_FMT" back to listen ch - ch:%u, bw:%u, offset:%u\n",
+                       FUNC_ADPT_ARG(padapter), ch, bw, offset);
+       }
+       else {
+               ch = pcfg80211_wdinfo->restore_channel;
+               bw = HT_CHANNEL_WIDTH_20;
+               offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+               if (0)
+               DBG_871X(FUNC_ADPT_FMT" back to restore ch - ch:%u, bw:%u, offset:%u\n",
+                       FUNC_ADPT_ARG(padapter), ch, bw, offset);
+       }
+
+       set_channel_bwmode(padapter, ch, offset, bw);
+
+       rtw_p2p_set_state(pwdinfo, rtw_p2p_pre_state(pwdinfo));
+#ifdef CONFIG_DEBUG_CFG80211
+       DBG_871X("%s, role=%d, p2p_state=%d\n", __func__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo));
+#endif
+
+       pcfg80211_wdinfo->is_ro_ch = _FALSE;
+
+       DBG_871X("cfg80211_remain_on_channel_expired\n");
+
+       rtw_cfg80211_remain_on_channel_expired(padapter,
+               pcfg80211_wdinfo->remain_on_ch_cookie,
+               &pcfg80211_wdinfo->remain_on_ch_channel,
+               pcfg80211_wdinfo->remain_on_ch_type, GFP_KERNEL);
+
+_func_exit_;
+}
+
+static void ro_ch_timer_process (void *FunctionContext)
+{
+       _adapter *adapter = (_adapter *)FunctionContext;
+       struct rtw_wdev_priv *pwdev_priv = wdev_to_priv(adapter->rtw_wdev);
+
+       //printk("%s \n", __FUNCTION__);
+
+#ifdef CONFIG_CONCURRENT_MODE
+       ATOMIC_SET(&pwdev_priv->ro_ch_to, 1);
+#endif
+
+       p2p_protocol_wk_cmd( adapter, P2P_RO_CH_WK);
+}
+
+static void rtw_change_p2pie_op_ch(_adapter *padapter, const u8 *frame_body, u32 len, u8 ch)
+{
+       u8 *ies, *p2p_ie;
+       u32 ies_len, p2p_ielen;
+       PADAPTER pbuddy_adapter = padapter->pbuddy_adapter;
+       struct mlme_ext_priv *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
+
+       ies = (u8*)(frame_body + _PUBLIC_ACTION_IE_OFFSET_);
+       ies_len = len - _PUBLIC_ACTION_IE_OFFSET_;
+
+       p2p_ie = rtw_get_p2p_ie( ies, ies_len, NULL, &p2p_ielen );
+
+       while ( p2p_ie ) {
+               u32     attr_contentlen = 0;
+               u8 *pattr = NULL;
+
+               //Check P2P_ATTR_OPERATING_CH
+               attr_contentlen = 0;
+               pattr = NULL;
+               if((pattr = rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_OPERATING_CH, NULL, (uint*)&attr_contentlen))!=NULL)
+               {
+                       *(pattr+4) = ch;
+               }
+
+               //Get the next P2P IE
+               p2p_ie = rtw_get_p2p_ie(p2p_ie+p2p_ielen, ies_len -(p2p_ie -ies + p2p_ielen), NULL, &p2p_ielen);
+       }
+}
+
+static void rtw_change_p2pie_ch_list(_adapter *padapter, const u8 *frame_body, u32 len, u8 ch)
+{
+       u8 *ies, *p2p_ie;
+       u32 ies_len, p2p_ielen;
+       PADAPTER pbuddy_adapter = padapter->pbuddy_adapter;
+       struct mlme_ext_priv *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
+
+       ies = (u8*)(frame_body + _PUBLIC_ACTION_IE_OFFSET_);
+       ies_len = len - _PUBLIC_ACTION_IE_OFFSET_;
+
+       p2p_ie = rtw_get_p2p_ie( ies, ies_len, NULL, &p2p_ielen );
+
+       while (p2p_ie) {
+               u32     attr_contentlen = 0;
+               u8 *pattr = NULL;
+
+               //Check P2P_ATTR_CH_LIST
+               if ((pattr=rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_CH_LIST, NULL, (uint*)&attr_contentlen))!=NULL) {
+                       int i;
+                       u32 num_of_ch;
+                       u8 *pattr_temp = pattr + 3 ;
+
+                       attr_contentlen -= 3;
+
+                       while (attr_contentlen>0) {
+                               num_of_ch = *(pattr_temp+1);
+
+                               for(i=0; i<num_of_ch; i++)
+                                       *(pattr_temp+2+i) = ch;
+
+                               pattr_temp += (2+num_of_ch);
+                               attr_contentlen -= (2+num_of_ch);
+                       }
+               }
+
+               //Get the next P2P IE
+               p2p_ie = rtw_get_p2p_ie(p2p_ie+p2p_ielen, ies_len -(p2p_ie -ies + p2p_ielen), NULL, &p2p_ielen);
+       }
+}
+
+static bool rtw_chk_p2pie_ch_list_with_buddy(_adapter *padapter, const u8 *frame_body, u32 len)
+{
+       bool fit = _FALSE;
+#ifdef CONFIG_CONCURRENT_MODE
+       u8 *ies, *p2p_ie;
+       u32 ies_len, p2p_ielen;
+       PADAPTER pbuddy_adapter = padapter->pbuddy_adapter;
+       struct mlme_ext_priv *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
+       u8 buddy_ch = pbuddy_mlmeext->cur_channel;
+
+       ies = (u8*)(frame_body + _PUBLIC_ACTION_IE_OFFSET_);
+       ies_len = len - _PUBLIC_ACTION_IE_OFFSET_;
+
+       p2p_ie = rtw_get_p2p_ie( ies, ies_len, NULL, &p2p_ielen );
+
+       while (p2p_ie) {
+               u32     attr_contentlen = 0;
+               u8 *pattr = NULL;
+
+               //Check P2P_ATTR_CH_LIST
+               if ((pattr=rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_CH_LIST, NULL, (uint*)&attr_contentlen))!=NULL) {
+                       int i;
+                       u32 num_of_ch;
+                       u8 *pattr_temp = pattr + 3 ;
+
+                       attr_contentlen -= 3;
+
+                       while (attr_contentlen>0) {
+                               num_of_ch = *(pattr_temp+1);
+
+                               for(i=0; i<num_of_ch; i++) {
+                                       if (*(pattr_temp+2+i) == buddy_ch) {
+                                               DBG_871X(FUNC_ADPT_FMT" ch_list fit buddy_ch:%u\n", FUNC_ADPT_ARG(padapter), buddy_ch);
+                                               fit = _TRUE;
+                                               break;
+                                       }
+                               }
+
+                               pattr_temp += (2+num_of_ch);
+                               attr_contentlen -= (2+num_of_ch);
+                       }
+               }
+
+               //Get the next P2P IE
+               p2p_ie = rtw_get_p2p_ie(p2p_ie+p2p_ielen, ies_len -(p2p_ie -ies + p2p_ielen), NULL, &p2p_ielen);
+       }
+#endif
+       return fit;
+}
+
+static bool rtw_chk_p2pie_op_ch_with_buddy(_adapter *padapter, const u8 *frame_body, u32 len)
+{
+       bool fit = _FALSE;
+#ifdef CONFIG_CONCURRENT_MODE
+       u8 *ies, *p2p_ie;
+       u32 ies_len, p2p_ielen;
+       PADAPTER pbuddy_adapter = padapter->pbuddy_adapter;
+       struct mlme_ext_priv *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
+       u8 buddy_ch = pbuddy_mlmeext->cur_channel;
+
+       ies = (u8*)(frame_body + _PUBLIC_ACTION_IE_OFFSET_);
+       ies_len = len - _PUBLIC_ACTION_IE_OFFSET_;
+
+       p2p_ie = rtw_get_p2p_ie( ies, ies_len, NULL, &p2p_ielen );
+
+       while (p2p_ie) {
+               u32     attr_contentlen = 0;
+               u8 *pattr = NULL;
+
+               //Check P2P_ATTR_OPERATING_CH
+               attr_contentlen = 0;
+               pattr = NULL;
+               if((pattr = rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_OPERATING_CH, NULL, (uint*)&attr_contentlen))!=NULL) {
+                       if (*(pattr+4) == buddy_ch) {
+                               DBG_871X(FUNC_ADPT_FMT" op_ch fit buddy_ch:%u\n", FUNC_ADPT_ARG(padapter), buddy_ch);
+                               fit = _TRUE;
+                               break;
+                       }
+               }
+
+               //Get the next P2P IE
+               p2p_ie = rtw_get_p2p_ie(p2p_ie+p2p_ielen, ies_len -(p2p_ie -ies + p2p_ielen), NULL, &p2p_ielen);
+       }
+#endif
+       return fit;
+}
+
+static void rtw_cfg80211_adjust_p2pie_channel(_adapter *padapter, const u8 *frame_body, u32 len)
+{
+#ifdef CONFIG_CONCURRENT_MODE
+       u8 *ies, *p2p_ie;
+       u32 ies_len, p2p_ielen;
+       PADAPTER pbuddy_adapter = padapter->pbuddy_adapter;
+       struct mlme_ext_priv *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
+
+       ies = (u8*)(frame_body + _PUBLIC_ACTION_IE_OFFSET_);
+       ies_len = len - _PUBLIC_ACTION_IE_OFFSET_;
+
+       p2p_ie = rtw_get_p2p_ie( ies, ies_len, NULL, &p2p_ielen );
+
+       while ( p2p_ie )
+       {
+               u32     attr_contentlen = 0;
+               u8 *pattr = NULL;
+
+               //Check P2P_ATTR_CH_LIST
+               if((pattr=rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_CH_LIST, NULL, (uint*)&attr_contentlen))!=NULL)
+               {
+                       int i;
+                       u32 num_of_ch;
+                       u8 *pattr_temp = pattr + 3 ;
+
+                       attr_contentlen -= 3;
+
+                       while(attr_contentlen>0)
+                       {
+                               num_of_ch = *(pattr_temp+1);
+
+                               for(i=0; i<num_of_ch; i++)
+                                       *(pattr_temp+2+i) = pbuddy_mlmeext->cur_channel;//forcing to the same channel
+
+                               pattr_temp += (2+num_of_ch);
+                               attr_contentlen -= (2+num_of_ch);
+                       }
+               }
+
+               //Check P2P_ATTR_OPERATING_CH
+               attr_contentlen = 0;
+               pattr = NULL;
+               if((pattr = rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_OPERATING_CH, NULL, (uint*)&attr_contentlen))!=NULL)
+               {
+                       *(pattr+4) = pbuddy_mlmeext->cur_channel;//forcing to the same channel
+               }
+
+               //Get the next P2P IE
+               p2p_ie = rtw_get_p2p_ie(p2p_ie+p2p_ielen, ies_len -(p2p_ie -ies + p2p_ielen), NULL, &p2p_ielen);
+
+       }
+
+#endif
+}
+
+#ifdef CONFIG_WFD
+void rtw_append_wfd_ie(_adapter *padapter, u8 *buf, u32* len)
+{
+       unsigned char   *frame_body;
+       u8 category, action, OUI_Subtype, dialogToken=0;
+       u32     wfdielen = 0;
+       struct rtw_wdev_priv *pwdev_priv = wdev_to_priv(padapter->rtw_wdev);
+
+       frame_body = (unsigned char *)(buf + sizeof(struct rtw_ieee80211_hdr_3addr));
+       category = frame_body[0];
+
+       if(category == RTW_WLAN_CATEGORY_PUBLIC)
+       {
+               action = frame_body[1];
+               if (action == ACT_PUBLIC_VENDOR
+                       && _rtw_memcmp(frame_body+2, P2P_OUI, 4) == _TRUE
+               )
+               {
+                       OUI_Subtype = frame_body[6];
+                       dialogToken = frame_body[7];
+                       switch( OUI_Subtype )//OUI Subtype
+                       {
+                               case P2P_GO_NEGO_REQ:
+                               {
+                                       wfdielen = build_nego_req_wfd_ie( &padapter->wdinfo, buf + ( *len ) );
+                                       (*len) += wfdielen;
+                                       break;
+                               }
+                               case P2P_GO_NEGO_RESP:
+                               {
+                                       wfdielen = build_nego_resp_wfd_ie( &padapter->wdinfo, buf + ( *len ) );
+                                       (*len) += wfdielen;
+                                       break;
+                               }
+                               case P2P_GO_NEGO_CONF:
+                               {
+                                       wfdielen = build_nego_confirm_wfd_ie( &padapter->wdinfo, buf + ( *len ) );
+                                       (*len) += wfdielen;
+                                       break;
+                               }
+                               case P2P_INVIT_REQ:
+                               {
+                                       wfdielen = build_invitation_req_wfd_ie( &padapter->wdinfo, buf + ( *len ) );
+                                       (*len) += wfdielen;
+                                       break;
+                               }
+                               case P2P_INVIT_RESP:
+                               {
+                                       wfdielen = build_invitation_resp_wfd_ie( &padapter->wdinfo, buf + ( *len ) );
+                                       (*len) += wfdielen;
+                                       break;
+                               }
+                               case P2P_DEVDISC_REQ:
+                                       break;
+                               case P2P_DEVDISC_RESP:
+
+                                       break;
+                               case P2P_PROVISION_DISC_REQ:
+                               {
+                                       wfdielen = build_provdisc_req_wfd_ie( &padapter->wdinfo, buf + ( *len ) );
+                                       (*len) += wfdielen;
+                                       break;
+                               }
+                               case P2P_PROVISION_DISC_RESP:
+                               {
+                                       wfdielen = build_provdisc_resp_wfd_ie( &padapter->wdinfo, buf + ( *len ) );
+                                       (*len) += wfdielen;
+                                       break;
+                               }
+                               default:
+
+                                       break;
+                       }
+
+               }
+
+       }
+       else if(category == RTW_WLAN_CATEGORY_P2P)
+       {
+               OUI_Subtype = frame_body[5];
+               dialogToken = frame_body[6];
+
+#ifdef CONFIG_DEBUG_CFG80211
+               DBG_871X("ACTION_CATEGORY_P2P: OUI=0x%x, OUI_Subtype=%d, dialogToken=%d\n",
+                                       cpu_to_be32( *( ( u32* ) ( frame_body + 1 ) ) ), OUI_Subtype, dialogToken);
+#endif
+
+               switch(OUI_Subtype)
+               {
+                       case P2P_NOTICE_OF_ABSENCE:
+
+                               break;
+                       case P2P_PRESENCE_REQUEST:
+
+                               break;
+                       case P2P_PRESENCE_RESPONSE:
+
+                               break;
+                       case P2P_GO_DISC_REQUEST:
+
+                               break;
+                       default:
+
+                               break;
+               }
+
+       }
+       else
+       {
+               DBG_871X("%s, action frame category=%d\n", __func__, category);
+               //is_p2p_frame = (-1);
+       }
+
+       return;
+}
+#endif
+
+u8 *dump_p2p_attr_ch_list(u8 *p2p_ie, uint p2p_ielen, u8 *buf, u32 buf_len)
+{
+       uint attr_contentlen = 0;
+       u8 *pattr = NULL;
+       int w_sz = 0;
+       u8 ch_cnt = 0;
+       u8 ch_list[40];
+       bool continuous = _FALSE;
+
+       if ((pattr=rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_CH_LIST, NULL, &attr_contentlen))!=NULL) {
+               int i, j;
+               u32 num_of_ch;
+               u8 *pattr_temp = pattr + 3 ;
+
+               attr_contentlen -= 3;
+
+               _rtw_memset(ch_list, 0, 40);
+
+               while (attr_contentlen>0) {
+                       num_of_ch = *(pattr_temp+1);
+
+                       for(i=0; i<num_of_ch; i++) {
+                               for (j=0;j<ch_cnt;j++) {
+                                       if (ch_list[j] == *(pattr_temp+2+i))
+                                               break;
+                               }
+                               if (j>=ch_cnt)
+                                       ch_list[ch_cnt++] = *(pattr_temp+2+i);
+
+                       }
+
+                       pattr_temp += (2+num_of_ch);
+                       attr_contentlen -= (2+num_of_ch);
+               }
+
+               for (j=0;j<ch_cnt;j++) {
+                       if (j == 0) {
+                               w_sz += snprintf(buf+w_sz, buf_len-w_sz, "%u", ch_list[j]);
+                       } else if (ch_list[j] - ch_list[j-1] != 1) {
+                               w_sz += snprintf(buf+w_sz, buf_len-w_sz, ", %u", ch_list[j]);
+                       } else if (j != ch_cnt-1 && ch_list[j+1] - ch_list[j] == 1) {
+                               /* empty */
+                       } else {
+                               w_sz += snprintf(buf+w_sz, buf_len-w_sz, "-%u", ch_list[j]);
+                       }
+               }
+       }
+       return buf;
+}
+
+/*
+ * return _TRUE if requester is GO, _FALSE if responder is GO
+ */
+bool rtw_p2p_nego_intent_compare(u8 req, u8 resp)
+{
+       if (req>>1 == resp >>1)
+               return  req&0x01 ? _TRUE : _FALSE;
+       else if (req>>1 > resp>>1)
+               return _TRUE;
+       else
+               return _FALSE;
+}
+
+int rtw_p2p_check_frames(_adapter *padapter, const u8 *buf, u32 len, u8 tx)
+{
+       int is_p2p_frame = (-1);
+       unsigned char   *frame_body;
+       u8 category, action, OUI_Subtype, dialogToken=0;
+       u8 *p2p_ie = NULL;
+       uint p2p_ielen = 0;
+       struct rtw_wdev_priv *pwdev_priv = wdev_to_priv(padapter->rtw_wdev);
+       int status = -1;
+       u8 ch_list_buf[128] = {'\0'};
+       int op_ch = -1;
+       int listen_ch = -1;
+       u8 intent = 0;
+
+       frame_body = (unsigned char *)(buf + sizeof(struct rtw_ieee80211_hdr_3addr));
+       category = frame_body[0];
+       //just for check
+       if(category == RTW_WLAN_CATEGORY_PUBLIC)
+       {
+               action = frame_body[1];
+               if (action == ACT_PUBLIC_VENDOR
+                       && _rtw_memcmp(frame_body+2, P2P_OUI, 4) == _TRUE
+               )
+               {
+                       OUI_Subtype = frame_body[6];
+                       dialogToken = frame_body[7];
+                       is_p2p_frame = OUI_Subtype;
+                       #ifdef CONFIG_DEBUG_CFG80211
+                       DBG_871X("ACTION_CATEGORY_PUBLIC: ACT_PUBLIC_VENDOR, OUI=0x%x, OUI_Subtype=%d, dialogToken=%d\n",
+                               cpu_to_be32( *( ( u32* ) ( frame_body + 2 ) ) ), OUI_Subtype, dialogToken);
+                       #endif
+
+                       p2p_ie = rtw_get_p2p_ie(
+                               (u8 *)buf+sizeof(struct rtw_ieee80211_hdr_3addr)+_PUBLIC_ACTION_IE_OFFSET_,
+                               len-sizeof(struct rtw_ieee80211_hdr_3addr)-_PUBLIC_ACTION_IE_OFFSET_,
+                               NULL, &p2p_ielen);
+
+                       switch( OUI_Subtype )//OUI Subtype
+                       {
+                               u8 *cont;
+                               uint cont_len;
+                               case P2P_GO_NEGO_REQ:
+                               {
+                                       struct rtw_wdev_nego_info* nego_info = &pwdev_priv->nego_info;
+
+                                       if (tx) {
+                                               #ifdef CONFIG_DRV_ISSUE_PROV_REQ // IOT FOR S2
+                                               if(pwdev_priv->provdisc_req_issued == _FALSE) {
+                                                       rtw_cfg80211_issue_p2p_provision_request(padapter, buf, len);
+                                                       pwdev_priv->provdisc_req_issued = _TRUE;
+                                                       rtw_msleep_os(200);
+                                               }
+                                               #endif //CONFIG_DRV_ISSUE_PROV_REQ
+
+                                               #ifdef CONFIG_CONCURRENT_MODE
+                                               if(check_buddy_fwstate(padapter, _FW_LINKED))
+                                                       rtw_cfg80211_adjust_p2pie_channel(padapter, frame_body, len-sizeof(struct rtw_ieee80211_hdr_3addr));
+                                               #endif
+                                       }
+
+                                       if ((cont = rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_OPERATING_CH, NULL, &cont_len)))
+                                               op_ch = *(cont+4);
+                                       if ((cont = rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_LISTEN_CH, NULL, &cont_len)))
+                                               listen_ch = *(cont+4);
+                                       if ((cont = rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_GO_INTENT, NULL, &cont_len)))
+                                               intent = *cont;
+
+                                       if (nego_info->token != dialogToken)
+                                               rtw_wdev_nego_info_init(nego_info);
+
+                                       _rtw_memcpy(nego_info->peer_mac, tx ? GetAddr1Ptr(buf) : GetAddr2Ptr(buf), ETH_ALEN);
+                                       nego_info->active = tx ? 1 : 0;
+                                       nego_info->token = dialogToken;
+                                       nego_info->req_op_ch = op_ch;
+                                       nego_info->req_listen_ch = listen_ch;
+                                       nego_info->req_intent = intent;
+                                       nego_info->state = 0;
+
+                                       dump_p2p_attr_ch_list(p2p_ie, p2p_ielen, ch_list_buf, 128);
+                                       DBG_871X("RTW_%s:P2P_GO_NEGO_REQ, dialogToken=%d, intent:%u%s, listen_ch:%d, op_ch:%d, ch_list:%s\n",
+                                                       (tx==_TRUE)?"Tx":"Rx", dialogToken, (intent>>1), intent&0x1 ? "+" : "-", listen_ch, op_ch, ch_list_buf);
+
+                                       if (!tx) {
+                                               #ifdef CONFIG_CONCURRENT_MODE
+                                               if(check_buddy_fwstate(padapter, _FW_LINKED)
+                                                       && rtw_chk_p2pie_ch_list_with_buddy(padapter, frame_body, len-sizeof(struct rtw_ieee80211_hdr_3addr)) == _FALSE)
+                                               {
+                                                       DBG_871X(FUNC_ADPT_FMT" ch_list has no intersect with buddy\n", FUNC_ADPT_ARG(padapter));
+                                                       rtw_change_p2pie_ch_list(padapter, frame_body, len-sizeof(struct rtw_ieee80211_hdr_3addr), 0);
+                                               }
+                                               #endif
+                                       }
+
+                                       break;
+                               }
+                               case P2P_GO_NEGO_RESP:
+                               {
+                                       struct rtw_wdev_nego_info* nego_info = &pwdev_priv->nego_info;
+
+                                       if (tx) {
+                                               #ifdef CONFIG_CONCURRENT_MODE
+                                               if(check_buddy_fwstate(padapter, _FW_LINKED))
+                                                       rtw_cfg80211_adjust_p2pie_channel(padapter, frame_body, len-sizeof(struct rtw_ieee80211_hdr_3addr));
+                                               #endif
+                                       }
+
+                                       if ((cont = rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_OPERATING_CH, NULL, &cont_len)))
+                                               op_ch = *(cont+4);
+                                       if ((cont = rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_GO_INTENT, NULL, &cont_len)))
+                                               intent = *cont;
+                                       if ((cont = rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_STATUS, NULL, &cont_len)))
+                                               status = *cont;
+
+                                       if (nego_info->token == dialogToken && nego_info->state == 0
+                                               && _rtw_memcmp(nego_info->peer_mac, tx ? GetAddr1Ptr(buf) : GetAddr2Ptr(buf), ETH_ALEN) == _TRUE
+                                       ) {
+                                               nego_info->status = (status==-1) ? 0xff : status;
+                                               nego_info->rsp_op_ch= op_ch;
+                                               nego_info->rsp_intent = intent;
+                                               nego_info->state = 1;
+                                               if (status != 0)
+                                                       nego_info->token = 0; /* init */
+                                       }
+
+                                       dump_p2p_attr_ch_list(p2p_ie, p2p_ielen, ch_list_buf, 128);
+                                       DBG_871X("RTW_%s:P2P_GO_NEGO_RESP, dialogToken=%d, intent:%u%s, status:%d, op_ch:%d, ch_list:%s\n",
+                                                       (tx==_TRUE)?"Tx":"Rx", dialogToken, (intent>>1), intent&0x1 ? "+" : "-", status, op_ch, ch_list_buf);
+
+                                       if (!tx) {
+                                               pwdev_priv->provdisc_req_issued = _FALSE;
+                                               #ifdef CONFIG_CONCURRENT_MODE
+                                               if(check_buddy_fwstate(padapter, _FW_LINKED)
+                                                       && rtw_chk_p2pie_ch_list_with_buddy(padapter, frame_body, len-sizeof(struct rtw_ieee80211_hdr_3addr)) == _FALSE)
+                                               {
+                                                       DBG_871X(FUNC_ADPT_FMT" ch_list has no intersect with buddy\n", FUNC_ADPT_ARG(padapter));
+                                                       rtw_change_p2pie_ch_list(padapter, frame_body, len-sizeof(struct rtw_ieee80211_hdr_3addr), 0);
+                                               }
+                                               #endif
+                                       }
+
+                                       break;
+                               }
+                               case P2P_GO_NEGO_CONF:
+                               {
+                                       struct rtw_wdev_nego_info* nego_info = &pwdev_priv->nego_info;
+                                       bool is_go = _FALSE;
+
+                                       if (tx) {
+                                               #ifdef CONFIG_CONCURRENT_MODE
+                                               if(check_buddy_fwstate(padapter, _FW_LINKED))
+                                                       rtw_cfg80211_adjust_p2pie_channel(padapter, frame_body, len-sizeof(struct rtw_ieee80211_hdr_3addr));
+                                               #endif
+                                       }
+
+                                       if ((cont = rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_OPERATING_CH, NULL, &cont_len)))
+                                               op_ch = *(cont+4);
+                                       if ((cont = rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_STATUS, NULL, &cont_len)))
+                                               status = *cont;
+
+                                       if (nego_info->token == dialogToken && nego_info->state == 1
+                                               && _rtw_memcmp(nego_info->peer_mac, tx ? GetAddr1Ptr(buf) : GetAddr2Ptr(buf), ETH_ALEN) == _TRUE
+                                       ) {
+                                               nego_info->status = (status==-1) ? 0xff : status;
+                                               nego_info->conf_op_ch = (op_ch==-1) ? 0 : op_ch;
+                                               nego_info->state = 2;
+
+                                               if (status == 0) {
+                                                       if (rtw_p2p_nego_intent_compare(nego_info->req_intent, nego_info->rsp_intent) && tx)
+                                                               is_go = _TRUE;
+                                               }
+
+                                               nego_info->token = 0; /* init */
+                                       }
+
+                                       dump_p2p_attr_ch_list(p2p_ie, p2p_ielen, ch_list_buf, 128);
+                                       DBG_871X("RTW_%s:P2P_GO_NEGO_CONF, dialogToken=%d, status:%d, op_ch:%d, ch_list:%s\n",
+                                               (tx==_TRUE)?"Tx":"Rx", dialogToken, status, op_ch, ch_list_buf);
+
+                                       if (!tx) {
+                                       }
+
+                                       break;
+                               }
+                               case P2P_INVIT_REQ:
+                               {
+                                       struct rtw_wdev_invit_info* invit_info = &pwdev_priv->invit_info;
+                                       int flags = -1;
+
+                                       if (tx) {
+                                               #ifdef CONFIG_CONCURRENT_MODE
+                                               if(check_buddy_fwstate(padapter, _FW_LINKED))
+                                                       rtw_cfg80211_adjust_p2pie_channel(padapter, frame_body, len-sizeof(struct rtw_ieee80211_hdr_3addr));
+                                               #endif
+                                       }
+
+                                       if ((cont = rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_INVITATION_FLAGS, NULL, &cont_len)))
+                                               flags = *cont;
+                                       if ((cont = rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_OPERATING_CH, NULL, &cont_len)))
+                                               op_ch = *(cont+4);
+
+                                       if (invit_info->token != dialogToken)
+                                               rtw_wdev_invit_info_init(invit_info);
+
+                                       _rtw_memcpy(invit_info->peer_mac, tx ? GetAddr1Ptr(buf) : GetAddr2Ptr(buf), ETH_ALEN);
+                                       invit_info->active = tx ? 1 : 0;
+                                       invit_info->token = dialogToken;
+                                       invit_info->flags = (flags==-1) ? 0x0 : flags;
+                                       invit_info->req_op_ch= op_ch;
+                                       invit_info->state = 0;
+
+                                       dump_p2p_attr_ch_list(p2p_ie, p2p_ielen, ch_list_buf, 128);
+                                       DBG_871X("RTW_%s:P2P_INVIT_REQ, dialogToken=%d, flags:0x%02x, op_ch:%d, ch_list:%s\n",
+                                                       (tx==_TRUE)?"Tx":"Rx", dialogToken, flags, op_ch, ch_list_buf);
+
+                                       if (!tx) {
+                                               #ifdef CONFIG_CONCURRENT_MODE
+                                               if(check_buddy_fwstate(padapter, _FW_LINKED)) {
+                                                       if (op_ch != -1 && rtw_chk_p2pie_op_ch_with_buddy(padapter, frame_body, len-sizeof(struct rtw_ieee80211_hdr_3addr)) == _FALSE) {
+                                                               DBG_871X(FUNC_ADPT_FMT" op_ch:%u has no intersect with buddy\n", FUNC_ADPT_ARG(padapter), op_ch);
+                                                               rtw_change_p2pie_ch_list(padapter, frame_body, len-sizeof(struct rtw_ieee80211_hdr_3addr), 0);
+                                                       } else if (rtw_chk_p2pie_ch_list_with_buddy(padapter, frame_body, len-sizeof(struct rtw_ieee80211_hdr_3addr)) == _FALSE) {
+                                                               DBG_871X(FUNC_ADPT_FMT" ch_list has no intersect with buddy\n", FUNC_ADPT_ARG(padapter));
+                                                               rtw_change_p2pie_ch_list(padapter, frame_body, len-sizeof(struct rtw_ieee80211_hdr_3addr), 0);
+                                                       }
+                                               }
+                                               #endif
+                                       }
+
+                                       break;
+                               }
+                               case P2P_INVIT_RESP:
+                               {
+                                       struct rtw_wdev_invit_info* invit_info = &pwdev_priv->invit_info;
+
+                                       if (tx) {
+                                               #ifdef CONFIG_CONCURRENT_MODE
+                                               if(check_buddy_fwstate(padapter, _FW_LINKED))
+                                                       rtw_cfg80211_adjust_p2pie_channel(padapter, frame_body, len-sizeof(struct rtw_ieee80211_hdr_3addr));
+                                               #endif
+                                       }
+
+                                       if ((cont = rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_STATUS, NULL, &cont_len)))
+                                       {
+#ifdef CONFIG_P2P_INVITE_IOT
+                                               if(tx && *cont==7)
+                                               {
+                                                       DBG_871X("TX_P2P_INVITE_RESP, status is no common channel, change to unknown group\n");
+                                                       *cont = 8; //unknow group status
+                                               }
+#endif //CONFIG_P2P_INVITE_IOT
+                                               status = *cont;
+                                       }
+                                       if ((cont = rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_OPERATING_CH, NULL, &cont_len)))
+                                               op_ch = *(cont+4);
+
+                                       if (invit_info->token == dialogToken && invit_info->state == 0
+                                               && _rtw_memcmp(invit_info->peer_mac, tx ? GetAddr1Ptr(buf) : GetAddr2Ptr(buf), ETH_ALEN) == _TRUE
+                                       ) {
+                                               invit_info->status = (status==-1) ? 0xff : status;
+                                               invit_info->rsp_op_ch= op_ch;
+                                               invit_info->state = 1;
+                                               invit_info->token = 0; /* init */
+                                       }
+
+                                       dump_p2p_attr_ch_list(p2p_ie, p2p_ielen, ch_list_buf, 128);
+                                       DBG_871X("RTW_%s:P2P_INVIT_RESP, dialogToken=%d, status:%d, op_ch:%d, ch_list:%s\n",
+                                                       (tx==_TRUE)?"Tx":"Rx", dialogToken, status, op_ch, ch_list_buf);
+
+                                       if (!tx) {
+                                       }
+
+                                       break;
+                               }
+                               case P2P_DEVDISC_REQ:
+                                       DBG_871X("RTW_%s:P2P_DEVDISC_REQ, dialogToken=%d\n", (tx==_TRUE)?"Tx":"Rx", dialogToken);
+                                       break;
+                               case P2P_DEVDISC_RESP:
+                                       cont = rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_STATUS, NULL, &cont_len);
+                                       DBG_871X("RTW_%s:P2P_DEVDISC_RESP, dialogToken=%d, status:%d\n", (tx==_TRUE)?"Tx":"Rx", dialogToken, cont?*cont:-1);
+                                       break;
+                               case P2P_PROVISION_DISC_REQ:
+                               {
+                                       size_t frame_body_len = len - sizeof(struct rtw_ieee80211_hdr_3addr);
+                                       u8 *p2p_ie;
+                                       uint p2p_ielen = 0;
+                                       uint contentlen = 0;
+
+                                       DBG_871X("RTW_%s:P2P_PROVISION_DISC_REQ, dialogToken=%d\n", (tx==_TRUE)?"Tx":"Rx", dialogToken);
+
+                                       //if(tx)
+                                       {
+                                               pwdev_priv->provdisc_req_issued = _FALSE;
+
+                                               if( (p2p_ie=rtw_get_p2p_ie( frame_body + _PUBLIC_ACTION_IE_OFFSET_, frame_body_len - _PUBLIC_ACTION_IE_OFFSET_, NULL, &p2p_ielen)))
+                                               {
+
+                                                       if(rtw_get_p2p_attr_content( p2p_ie, p2p_ielen, P2P_ATTR_GROUP_ID, NULL, &contentlen))
+                                                       {
+                                                               pwdev_priv->provdisc_req_issued = _FALSE;//case: p2p_client join p2p GO
+                                                       }
+                                                       else
+                                                       {
+                                                               #ifdef CONFIG_DEBUG_CFG80211
+                                                               DBG_871X("provdisc_req_issued is _TRUE\n");
+                                                               #endif //CONFIG_DEBUG_CFG80211
+                                                               pwdev_priv->provdisc_req_issued = _TRUE;//case: p2p_devices connection before Nego req.
+                                                       }
+
+                                               }
+                                       }
+                               }
+                                       break;
+                               case P2P_PROVISION_DISC_RESP:
+                                       DBG_871X("RTW_%s:P2P_PROVISION_DISC_RESP, dialogToken=%d\n", (tx==_TRUE)?"Tx":"Rx", dialogToken);
+                                       break;
+                               default:
+                                       DBG_871X("RTW_%s:OUI_Subtype=%d, dialogToken=%d\n", (tx==_TRUE)?"Tx":"Rx", OUI_Subtype, dialogToken);
+                                       break;
+                       }
+
+               }
+
+       }
+       else if(category == RTW_WLAN_CATEGORY_P2P)
+       {
+               OUI_Subtype = frame_body[5];
+               dialogToken = frame_body[6];
+
+               #ifdef CONFIG_DEBUG_CFG80211
+               DBG_871X("ACTION_CATEGORY_P2P: OUI=0x%x, OUI_Subtype=%d, dialogToken=%d\n",
+                       cpu_to_be32( *( ( u32* ) ( frame_body + 1 ) ) ), OUI_Subtype, dialogToken);
+               #endif
+
+               is_p2p_frame = OUI_Subtype;
+
+               switch(OUI_Subtype)
+               {
+                       case P2P_NOTICE_OF_ABSENCE:
+                               DBG_871X("RTW_%s:P2P_NOTICE_OF_ABSENCE, dialogToken=%d\n", (tx==_TRUE)?"TX":"RX", dialogToken);
+                               break;
+                       case P2P_PRESENCE_REQUEST:
+                               DBG_871X("RTW_%s:P2P_PRESENCE_REQUEST, dialogToken=%d\n", (tx==_TRUE)?"TX":"RX", dialogToken);
+                               break;
+                       case P2P_PRESENCE_RESPONSE:
+                               DBG_871X("RTW_%s:P2P_PRESENCE_RESPONSE, dialogToken=%d\n", (tx==_TRUE)?"TX":"RX", dialogToken);
+                               break;
+                       case P2P_GO_DISC_REQUEST:
+                               DBG_871X("RTW_%s:P2P_GO_DISC_REQUEST, dialogToken=%d\n", (tx==_TRUE)?"TX":"RX", dialogToken);
+                               break;
+                       default:
+                               DBG_871X("RTW_%s:OUI_Subtype=%d, dialogToken=%d\n", (tx==_TRUE)?"TX":"RX", OUI_Subtype, dialogToken);
+                               break;
+               }
+
+       }
+       else
+       {
+               DBG_871X("RTW_%s:action frame category=%d\n", (tx==_TRUE)?"TX":"RX", category);
+       }
+
+       return is_p2p_frame;
+}
+
+void rtw_init_cfg80211_wifidirect_info( _adapter*      padapter)
+{
+       struct cfg80211_wifidirect_info *pcfg80211_wdinfo = &padapter->cfg80211_wdinfo;
+
+       _rtw_memset(pcfg80211_wdinfo, 0x00, sizeof(struct cfg80211_wifidirect_info) );
+
+       _init_timer( &pcfg80211_wdinfo->remain_on_ch_timer, padapter->pnetdev, ro_ch_timer_process, padapter );
+}
+#endif //CONFIG_IOCTL_CFG80211
+
+void p2p_protocol_wk_hdl(_adapter *padapter, int intCmdType)
+{
+       struct wifidirect_info  *pwdinfo= &(padapter->wdinfo);
+
+_func_enter_;
+
+       switch(intCmdType)
+       {
+               case P2P_FIND_PHASE_WK:
+               {
+                       find_phase_handler( padapter );
+                       break;
+               }
+               case P2P_RESTORE_STATE_WK:
+               {
+                       restore_p2p_state_handler( padapter );
+                       break;
+               }
+               case P2P_PRE_TX_PROVDISC_PROCESS_WK:
+               {
+#ifdef CONFIG_CONCURRENT_MODE
+                       if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
+                       {
+                               p2p_concurrent_handler( padapter );
+                       }
+                       else
+                       {
+                               pre_tx_provdisc_handler( padapter );
+                       }
+#else
+                       pre_tx_provdisc_handler( padapter );
+#endif
+                       break;
+               }
+               case P2P_PRE_TX_INVITEREQ_PROCESS_WK:
+               {
+#ifdef CONFIG_CONCURRENT_MODE
+                       if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
+                       {
+                               p2p_concurrent_handler( padapter );
+                       }
+                       else
+                       {
+                               pre_tx_invitereq_handler( padapter );
+                       }
+#else
+                       pre_tx_invitereq_handler( padapter );
+#endif
+                       break;
+               }
+               case P2P_PRE_TX_NEGOREQ_PROCESS_WK:
+               {
+#ifdef CONFIG_CONCURRENT_MODE
+                       if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
+                       {
+                               p2p_concurrent_handler( padapter );
+                       }
+                       else
+                       {
+                               pre_tx_negoreq_handler( padapter );
+                       }
+#else
+                       pre_tx_negoreq_handler( padapter );
+#endif
+                       break;
+               }
+#ifdef CONFIG_P2P
+#ifdef CONFIG_CONCURRENT_MODE
+               case P2P_AP_P2P_CH_SWITCH_PROCESS_WK:
+               {
+                       p2p_concurrent_handler( padapter );
+                       break;
+               }
+#endif
+#endif
+#ifdef CONFIG_IOCTL_CFG80211
+               case P2P_RO_CH_WK:
+               {
+                       ro_ch_handler( padapter );
+                       break;
+               }
+#endif //CONFIG_IOCTL_CFG80211
+
+       }
+
+_func_exit_;
+}
+
+#ifdef CONFIG_P2P_PS
+void process_p2p_ps_ie(PADAPTER padapter, u8 *IEs, u32 IELength)
+{
+       u8 * ies;
+       u32 ies_len;
+       u8 * p2p_ie;
+       u32     p2p_ielen = 0;
+       u8      noa_attr[MAX_P2P_IE_LEN] = { 0x00 };// NoA length should be n*(13) + 2
+       u32     attr_contentlen = 0;
+
+       struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
+       u8      find_p2p = _FALSE, find_p2p_ps = _FALSE;
+       u8      noa_offset, noa_num, noa_index;
+
+_func_enter_;
+
+       if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+       {
+               return;
+       }
+
+#ifdef CONFIG_CONCURRENT_MODE
+       if(padapter->iface_type != IFACE_PORT0)
+               return;
+#endif
+       if(IELength <= _BEACON_IE_OFFSET_)
+               return;
+
+       ies = IEs + _BEACON_IE_OFFSET_;
+       ies_len = IELength - _BEACON_IE_OFFSET_;
+
+       p2p_ie = rtw_get_p2p_ie( ies, ies_len, NULL, &p2p_ielen);
+
+       while(p2p_ie)
+       {
+               find_p2p = _TRUE;
+               // Get Notice of Absence IE.
+               if(rtw_get_p2p_attr_content( p2p_ie, p2p_ielen, P2P_ATTR_NOA, noa_attr, &attr_contentlen))
+               {
+                       find_p2p_ps = _TRUE;
+                       noa_index = noa_attr[0];
+
+                       if( (pwdinfo->p2p_ps_mode == P2P_PS_NONE) ||
+                               (noa_index != pwdinfo->noa_index) )// if index change, driver should reconfigure related setting.
+                       {
+                               pwdinfo->noa_index = noa_index;
+                               pwdinfo->opp_ps = noa_attr[1] >> 7;
+                               pwdinfo->ctwindow = noa_attr[1] & 0x7F;
+
+                               noa_offset = 2;
+                               noa_num = 0;
+                               // NoA length should be n*(13) + 2
+                               if(attr_contentlen > 2)
+                               {
+                                       while(noa_offset < attr_contentlen)
+                                       {
+                                               //_rtw_memcpy(&wifidirect_info->noa_count[noa_num], &noa_attr[noa_offset], 1);
+                                               pwdinfo->noa_count[noa_num] = noa_attr[noa_offset];
+                                               noa_offset += 1;
+
+                                               _rtw_memcpy(&pwdinfo->noa_duration[noa_num], &noa_attr[noa_offset], 4);
+                                               noa_offset += 4;
+
+                                               _rtw_memcpy(&pwdinfo->noa_interval[noa_num], &noa_attr[noa_offset], 4);
+                                               noa_offset += 4;
+
+                                               _rtw_memcpy(&pwdinfo->noa_start_time[noa_num], &noa_attr[noa_offset], 4);
+                                               noa_offset += 4;
+
+                                               noa_num++;
+                                       }
+                               }
+                               pwdinfo->noa_num = noa_num;
+
+                               if( pwdinfo->opp_ps == 1 )
+                               {
+                                       pwdinfo->p2p_ps_mode = P2P_PS_CTWINDOW;
+                                       // driver should wait LPS for entering CTWindow
+                                       if(padapter->pwrctrlpriv.bFwCurrentInPSMode == _TRUE)
+                                       {
+                                               p2p_ps_wk_cmd(padapter, P2P_PS_ENABLE, 1);
+                                       }
+                               }
+                               else if( pwdinfo->noa_num > 0 )
+                               {
+                                       pwdinfo->p2p_ps_mode = P2P_PS_NOA;
+                                       p2p_ps_wk_cmd(padapter, P2P_PS_ENABLE, 1);
+                               }
+                               else if( pwdinfo->p2p_ps_mode > P2P_PS_NONE)
+                               {
+                                       p2p_ps_wk_cmd(padapter, P2P_PS_DISABLE, 1);
+                               }
+                       }
+
+                       break; // find target, just break.
+               }
+
+               //Get the next P2P IE
+               p2p_ie = rtw_get_p2p_ie(p2p_ie+p2p_ielen, ies_len -(p2p_ie -ies + p2p_ielen), NULL, &p2p_ielen);
+
+       }
+
+       if(find_p2p == _TRUE)
+       {
+               if( (pwdinfo->p2p_ps_mode > P2P_PS_NONE) && (find_p2p_ps == _FALSE) )
+               {
+                       p2p_ps_wk_cmd(padapter, P2P_PS_DISABLE, 1);
+               }
+       }
+
+_func_exit_;
+}
+
+void p2p_ps_wk_hdl(_adapter *padapter, u8 p2p_ps_state)
+{
+       struct pwrctrl_priv             *pwrpriv = &padapter->pwrctrlpriv;
+       struct wifidirect_info  *pwdinfo= &(padapter->wdinfo);
+
+_func_enter_;
+
+       switch(p2p_ps_state)
+       {
+               case P2P_PS_DISABLE:
+                       pwdinfo->p2p_ps_state = p2p_ps_state;
+
+                       rtw_hal_set_hwreg(padapter, HW_VAR_H2C_FW_P2P_PS_OFFLOAD, (u8 *)(&p2p_ps_state));
+
+                       pwdinfo->noa_index = 0;
+                       pwdinfo->ctwindow = 0;
+                       pwdinfo->opp_ps = 0;
+                       pwdinfo->noa_num = 0;
+                       pwdinfo->p2p_ps_mode = P2P_PS_NONE;
+                       if(padapter->pwrctrlpriv.bFwCurrentInPSMode == _TRUE)
+                       {
+                               if(pwrpriv->smart_ps == 0)
+                               {
+                                       pwrpriv->smart_ps = 2;
+                                       rtw_hal_set_hwreg(padapter, HW_VAR_H2C_FW_PWRMODE, (u8 *)(&(padapter->pwrctrlpriv.pwr_mode)));
+                               }
+                       }
+                       break;
+               case P2P_PS_ENABLE:
+                       if (pwdinfo->p2p_ps_mode > P2P_PS_NONE) {
+                               pwdinfo->p2p_ps_state = p2p_ps_state;
+
+                               if( pwdinfo->ctwindow > 0 )
+                               {
+                                       if(pwrpriv->smart_ps != 0)
+                                       {
+                                               pwrpriv->smart_ps = 0;
+                                               DBG_871X("%s(): Enter CTW, change SmartPS\n", __FUNCTION__);
+                                               rtw_hal_set_hwreg(padapter, HW_VAR_H2C_FW_PWRMODE, (u8 *)(&(padapter->pwrctrlpriv.pwr_mode)));
+                                       }
+                               }
+                               rtw_hal_set_hwreg(padapter, HW_VAR_H2C_FW_P2P_PS_OFFLOAD, (u8 *)(&p2p_ps_state));
+                       }
+                       break;
+               case P2P_PS_SCAN:
+               case P2P_PS_SCAN_DONE:
+               case P2P_PS_ALLSTASLEEP:
+                       if (pwdinfo->p2p_ps_mode > P2P_PS_NONE) {
+                               pwdinfo->p2p_ps_state = p2p_ps_state;
+                               rtw_hal_set_hwreg(padapter, HW_VAR_H2C_FW_P2P_PS_OFFLOAD, (u8 *)(&p2p_ps_state));
+                       }
+                       break;
+               default:
+                       break;
+       }
+
+_func_exit_;
+}
+
+u8 p2p_ps_wk_cmd(_adapter*padapter, u8 p2p_ps_state, u8 enqueue)
+{
+       struct cmd_obj  *ph2c;
+       struct drvextra_cmd_parm        *pdrvextra_cmd_parm;
+       struct wifidirect_info  *pwdinfo= &(padapter->wdinfo);
+       struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
+       u8      res = _SUCCESS;
+
+_func_enter_;
+
+       if ( rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE)
+#ifdef CONFIG_CONCURRENT_MODE
+               || (padapter->iface_type != IFACE_PORT0)
+#endif
+               )
+       {
+               return res;
+       }
+
+       if(enqueue)
+       {
+               ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
+               if(ph2c==NULL){
+                       res= _FAIL;
+                       goto exit;
+               }
+
+               pdrvextra_cmd_parm = (struct drvextra_cmd_parm*)rtw_zmalloc(sizeof(struct drvextra_cmd_parm));
+               if(pdrvextra_cmd_parm==NULL){
+                       rtw_mfree((unsigned char *)ph2c, sizeof(struct cmd_obj));
+                       res= _FAIL;
+                       goto exit;
+               }
+
+               pdrvextra_cmd_parm->ec_id = P2P_PS_WK_CID;
+               pdrvextra_cmd_parm->type_size = p2p_ps_state;
+               pdrvextra_cmd_parm->pbuf = NULL;
+
+               init_h2fwcmd_w_parm_no_rsp(ph2c, pdrvextra_cmd_parm, GEN_CMD_CODE(_Set_Drv_Extra));
+
+               res = rtw_enqueue_cmd(pcmdpriv, ph2c);
+       }
+       else
+       {
+               p2p_ps_wk_hdl(padapter, p2p_ps_state);
+       }
+
+exit:
+
+_func_exit_;
+
+       return res;
+
+}
+#endif // CONFIG_P2P_PS
+
+static void reset_ch_sitesurvey_timer_process (void *FunctionContext)
+{
+       _adapter *adapter = (_adapter *)FunctionContext;
+       struct  wifidirect_info         *pwdinfo = &adapter->wdinfo;
+
+       if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+               return;
+
+       DBG_871X( "[%s] In\n", __FUNCTION__ );
+       //      Reset the operation channel information
+       pwdinfo->rx_invitereq_info.operation_ch[0] = 0;
+#ifdef P2P_OP_CHECK_SOCIAL_CH
+       pwdinfo->rx_invitereq_info.operation_ch[1] = 0;
+       pwdinfo->rx_invitereq_info.operation_ch[2] = 0;
+       pwdinfo->rx_invitereq_info.operation_ch[3] = 0;
+#endif //P2P_OP_CHECK_SOCIAL_CH
+       pwdinfo->rx_invitereq_info.scan_op_ch_only = 0;
+}
+
+static void reset_ch_sitesurvey_timer_process2 (void *FunctionContext)
+{
+       _adapter *adapter = (_adapter *)FunctionContext;
+       struct  wifidirect_info         *pwdinfo = &adapter->wdinfo;
+
+       if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+               return;
+
+       DBG_871X( "[%s] In\n", __FUNCTION__ );
+       //      Reset the operation channel information
+       pwdinfo->p2p_info.operation_ch[0] = 0;
+#ifdef P2P_OP_CHECK_SOCIAL_CH
+       pwdinfo->p2p_info.operation_ch[1] = 0;
+       pwdinfo->p2p_info.operation_ch[2] = 0;
+       pwdinfo->p2p_info.operation_ch[3] = 0;
+#endif //P2P_OP_CHECK_SOCIAL_CH
+       pwdinfo->p2p_info.scan_op_ch_only = 0;
+}
+
+static void restore_p2p_state_timer_process (void *FunctionContext)
+{
+       _adapter *adapter = (_adapter *)FunctionContext;
+       struct  wifidirect_info         *pwdinfo = &adapter->wdinfo;
+
+       if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+               return;
+
+       p2p_protocol_wk_cmd( adapter, P2P_RESTORE_STATE_WK );
+}
+
+static void pre_tx_scan_timer_process (void *FunctionContext)
+{
+       _adapter                                                        *adapter = (_adapter *) FunctionContext;
+       struct  wifidirect_info                         *pwdinfo = &adapter->wdinfo;
+       _irqL                                                   irqL;
+       struct mlme_priv                                        *pmlmepriv = &adapter->mlmepriv;
+       u8                                                              _status = 0;
+
+       if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+               return;
+
+       _enter_critical_bh(&pmlmepriv->lock, &irqL);
+
+       //      Commented by Albert 20110805
+       //      Todo: Use the issuing probe request directly instead of using the rtw_sitesurvey_cmd!!
+
+       if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_TX_PROVISION_DIS_REQ))
+       {
+               if ( _TRUE == pwdinfo->tx_prov_disc_info.benable )      //      the provision discovery request frame is trigger to send or not
+               {
+                       p2p_protocol_wk_cmd( adapter, P2P_PRE_TX_PROVDISC_PROCESS_WK );
+                       //issue_probereq_p2p(adapter, NULL);
+                       //_set_timer( &pwdinfo->pre_tx_scan_timer, P2P_TX_PRESCAN_TIMEOUT );
+               }
+       }
+       else if (rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_ING))
+       {
+               if ( _TRUE == pwdinfo->nego_req_info.benable )
+               {
+                       p2p_protocol_wk_cmd( adapter, P2P_PRE_TX_NEGOREQ_PROCESS_WK );
+                       //issue_probereq_p2p(adapter, NULL);
+                       //_set_timer( &pwdinfo->pre_tx_scan_timer, P2P_TX_PRESCAN_TIMEOUT );
+               }
+       }
+       else if ( rtw_p2p_chk_state(pwdinfo, P2P_STATE_TX_INVITE_REQ ) )
+       {
+               if ( _TRUE == pwdinfo->invitereq_info.benable )
+               {
+                       p2p_protocol_wk_cmd( adapter, P2P_PRE_TX_INVITEREQ_PROCESS_WK );
+               }
+       }
+       else
+       {
+               DBG_8192C( "[%s] p2p_state is %d, ignore!!\n", __FUNCTION__, rtw_p2p_state(pwdinfo) );
+       }
+
+       _exit_critical_bh(&pmlmepriv->lock, &irqL);
+}
+
+static void find_phase_timer_process (void *FunctionContext)
+{
+       _adapter *adapter = (_adapter *)FunctionContext;
+       struct  wifidirect_info         *pwdinfo = &adapter->wdinfo;
+
+       if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+               return;
+
+       adapter->wdinfo.find_phase_state_exchange_cnt++;
+
+       p2p_protocol_wk_cmd( adapter, P2P_FIND_PHASE_WK );
+}
+
+#ifdef CONFIG_CONCURRENT_MODE
+void ap_p2p_switch_timer_process (void *FunctionContext)
+{
+       _adapter *adapter = (_adapter *)FunctionContext;
+       struct  wifidirect_info         *pwdinfo = &adapter->wdinfo;
+#ifdef CONFIG_IOCTL_CFG80211
+       struct rtw_wdev_priv *pwdev_priv = wdev_to_priv(adapter->rtw_wdev);
+#endif
+
+       if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+               return;
+
+#ifdef CONFIG_IOCTL_CFG80211
+       ATOMIC_SET(&pwdev_priv->switch_ch_to, 1);
+#endif
+
+       p2p_protocol_wk_cmd( adapter, P2P_AP_P2P_CH_SWITCH_PROCESS_WK );
+}
+#endif
+
+void reset_global_wifidirect_info( _adapter* padapter )
+{
+       struct wifidirect_info  *pwdinfo;
+
+       pwdinfo = &padapter->wdinfo;
+       pwdinfo->persistent_supported = 0;
+       pwdinfo->session_available = _TRUE;
+       pwdinfo->wfd_tdls_enable = 0;
+       pwdinfo->wfd_tdls_weaksec = 0;
+}
+
+#ifdef CONFIG_WFD
+int rtw_init_wifi_display_info(_adapter* padapter)
+{
+       int     res = _SUCCESS;
+       struct wifi_display_info *pwfd_info = &padapter->wfd_info;
+
+       // Used in P2P and TDLS
+       pwfd_info->rtsp_ctrlport = 554;
+       pwfd_info->peer_rtsp_ctrlport = 0;      //      Reset to 0
+       pwfd_info->wfd_enable = _FALSE;
+       pwfd_info->wfd_device_type = WFD_DEVINFO_PSINK;
+       pwfd_info->scan_result_type = SCAN_RESULT_P2P_ONLY;
+
+       // Used in P2P
+       pwfd_info->peer_session_avail = _TRUE;
+       pwfd_info->wfd_pc = _FALSE;
+
+       // Used in TDLS
+       _rtw_memset( pwfd_info->ip_address, 0x00, 4 );
+       _rtw_memset( pwfd_info->peer_ip_address, 0x00, 4 );
+       return res;
+
+}
+#endif //CONFIG_WFD
+
+void rtw_init_wifidirect_timers(_adapter* padapter)
+{
+       struct wifidirect_info *pwdinfo = &padapter->wdinfo;
+
+       _init_timer( &pwdinfo->find_phase_timer, padapter->pnetdev, find_phase_timer_process, padapter );
+       _init_timer( &pwdinfo->restore_p2p_state_timer, padapter->pnetdev, restore_p2p_state_timer_process, padapter );
+       _init_timer( &pwdinfo->pre_tx_scan_timer, padapter->pnetdev, pre_tx_scan_timer_process, padapter );
+       _init_timer( &pwdinfo->reset_ch_sitesurvey, padapter->pnetdev, reset_ch_sitesurvey_timer_process, padapter );
+       _init_timer( &pwdinfo->reset_ch_sitesurvey2, padapter->pnetdev, reset_ch_sitesurvey_timer_process2, padapter );
+#ifdef CONFIG_CONCURRENT_MODE
+       _init_timer( &pwdinfo->ap_p2p_switch_timer, padapter->pnetdev, ap_p2p_switch_timer_process, padapter );
+#endif
+}
+
+void rtw_init_wifidirect_addrs(_adapter* padapter, u8 *dev_addr, u8 *iface_addr)
+{
+#ifdef CONFIG_P2P
+       struct wifidirect_info *pwdinfo = &padapter->wdinfo;
+
+       /*init device&interface address */
+       if (dev_addr) {
+               _rtw_memcpy(pwdinfo->device_addr, dev_addr, ETH_ALEN);
+       }
+       if (iface_addr) {
+               _rtw_memcpy(pwdinfo->interface_addr, iface_addr, ETH_ALEN);
+       }
+#endif
+}
+
+void init_wifidirect_info( _adapter* padapter, enum P2P_ROLE role)
+{
+       struct wifidirect_info  *pwdinfo;
+#ifdef CONFIG_WFD
+       struct wifi_display_info        *pwfd_info = &padapter->wfd_info;
+#endif
+#ifdef CONFIG_CONCURRENT_MODE
+       _adapter                                *pbuddy_adapter = padapter->pbuddy_adapter;
+       struct wifidirect_info  *pbuddy_wdinfo;
+       struct mlme_priv                *pbuddy_mlmepriv;
+       struct mlme_ext_priv    *pbuddy_mlmeext;
+#endif
+
+       pwdinfo = &padapter->wdinfo;
+
+       pwdinfo->padapter = padapter;
+
+       //      1, 6, 11 are the social channel defined in the WiFi Direct specification.
+       pwdinfo->social_chan[0] = 1;
+       pwdinfo->social_chan[1] = 6;
+       pwdinfo->social_chan[2] = 11;
+       pwdinfo->social_chan[3] = 0;    //      channel 0 for scanning ending in site survey function.
+
+#ifdef CONFIG_CONCURRENT_MODE
+       if (pbuddy_adapter) {
+               pbuddy_wdinfo = &pbuddy_adapter->wdinfo;
+               pbuddy_mlmepriv = &pbuddy_adapter->mlmepriv;
+               pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
+       }
+
+       if ( ( check_buddy_fwstate(padapter, _FW_LINKED ) == _TRUE ) &&
+             ( ( pbuddy_mlmeext->cur_channel == 1) || ( pbuddy_mlmeext->cur_channel == 6 ) || ( pbuddy_mlmeext->cur_channel == 11 ) )
+          )
+       {
+               //      Use the AP's channel as the listen channel
+               //      This will avoid the channel switch between AP's channel and listen channel.
+               pwdinfo->listen_channel = pbuddy_mlmeext->cur_channel;
+       }
+       else
+#endif //CONFIG_CONCURRENT_MODE
+       {
+               //      Use the channel 11 as the listen channel
+               pwdinfo->listen_channel = 11;
+       }
+
+       if (role == P2P_ROLE_DEVICE)
+       {
+               rtw_p2p_set_role(pwdinfo, P2P_ROLE_DEVICE);
+               #ifdef CONFIG_CONCURRENT_MODE
+               if ( check_buddy_fwstate(padapter, _FW_LINKED ) == _TRUE )
+               {
+                       rtw_p2p_set_state(pwdinfo, P2P_STATE_IDLE);
+               }
+               else
+               #endif
+               {
+                       rtw_p2p_set_state(pwdinfo, P2P_STATE_LISTEN);
+               }
+               pwdinfo->intent = 1;
+               rtw_p2p_set_pre_state(pwdinfo, P2P_STATE_LISTEN);
+       }
+       else if (role == P2P_ROLE_CLIENT)
+       {
+               rtw_p2p_set_role(pwdinfo, P2P_ROLE_CLIENT);
+               rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_OK);
+               pwdinfo->intent = 1;
+               rtw_p2p_set_pre_state(pwdinfo, P2P_STATE_GONEGO_OK);
+       }
+       else if (role == P2P_ROLE_GO)
+       {
+               rtw_p2p_set_role(pwdinfo, P2P_ROLE_GO);
+               rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_OK);
+               pwdinfo->intent = 15;
+               rtw_p2p_set_pre_state(pwdinfo, P2P_STATE_GONEGO_OK);
+       }
+
+//     Use the OFDM rate in the P2P probe response frame. ( 6(B), 9(B), 12, 18, 24, 36, 48, 54 )
+       pwdinfo->support_rate[0] = 0x8c;        //      6(B)
+       pwdinfo->support_rate[1] = 0x92;        //      9(B)
+       pwdinfo->support_rate[2] = 0x18;        //      12
+       pwdinfo->support_rate[3] = 0x24;        //      18
+       pwdinfo->support_rate[4] = 0x30;        //      24
+       pwdinfo->support_rate[5] = 0x48;        //      36
+       pwdinfo->support_rate[6] = 0x60;        //      48
+       pwdinfo->support_rate[7] = 0x6c;        //      54
+
+       _rtw_memcpy( ( void* ) pwdinfo->p2p_wildcard_ssid, "DIRECT-", 7 );
+
+       _rtw_memset( pwdinfo->device_name, 0x00, WPS_MAX_DEVICE_NAME_LEN );
+       pwdinfo->device_name_len = 0;
+
+       _rtw_memset( &pwdinfo->invitereq_info, 0x00, sizeof( struct tx_invite_req_info ) );
+       pwdinfo->invitereq_info.token = 3;      //      Token used for P2P invitation request frame.
+
+       _rtw_memset( &pwdinfo->inviteresp_info, 0x00, sizeof( struct tx_invite_resp_info ) );
+       pwdinfo->inviteresp_info.token = 0;
+
+       pwdinfo->profileindex = 0;
+       _rtw_memset( &pwdinfo->profileinfo[ 0 ], 0x00, sizeof( struct profile_info ) * P2P_MAX_PERSISTENT_GROUP_NUM );
+
+       rtw_p2p_findphase_ex_set(pwdinfo, P2P_FINDPHASE_EX_NONE);
+
+       pwdinfo->listen_dwell = ( u8 ) (( rtw_get_current_time() % 3 ) + 1);
+       //DBG_8192C( "[%s] listen_dwell time is %d00ms\n", __FUNCTION__, pwdinfo->listen_dwell );
+
+       _rtw_memset( &pwdinfo->tx_prov_disc_info, 0x00, sizeof( struct tx_provdisc_req_info ) );
+       pwdinfo->tx_prov_disc_info.wps_config_method_request = WPS_CM_NONE;
+
+       _rtw_memset( &pwdinfo->nego_req_info, 0x00, sizeof( struct tx_nego_req_info ) );
+
+       pwdinfo->device_password_id_for_nego = WPS_DPID_PBC;
+       pwdinfo->negotiation_dialog_token = 1;
+
+       _rtw_memset( pwdinfo->nego_ssid, 0x00, WLAN_SSID_MAXLEN );
+       pwdinfo->nego_ssidlen = 0;
+
+       pwdinfo->ui_got_wps_info = P2P_NO_WPSINFO;
+#ifdef CONFIG_WFD
+       pwdinfo->supported_wps_cm = WPS_CONFIG_METHOD_DISPLAY  | WPS_CONFIG_METHOD_PBC;
+       pwdinfo->wfd_info = pwfd_info;
+#else
+       pwdinfo->supported_wps_cm = WPS_CONFIG_METHOD_DISPLAY | WPS_CONFIG_METHOD_PBC | WPS_CONFIG_METHOD_KEYPAD;
+#endif //CONFIG_WFD
+       pwdinfo->channel_list_attr_len = 0;
+       _rtw_memset( pwdinfo->channel_list_attr, 0x00, 100 );
+
+       _rtw_memset( pwdinfo->rx_prov_disc_info.strconfig_method_desc_of_prov_disc_req, 0x00, 4 );
+       _rtw_memset( pwdinfo->rx_prov_disc_info.strconfig_method_desc_of_prov_disc_req, '0', 3 );
+       _rtw_memset( &pwdinfo->groupid_info, 0x00, sizeof( struct group_id_info ) );
+#ifdef CONFIG_CONCURRENT_MODE
+#ifdef CONFIG_IOCTL_CFG80211
+       pwdinfo->ext_listen_interval = 1000; //The interval to be available with legacy AP during p2p0-find/scan
+       pwdinfo->ext_listen_period = 3000; //The time period to be available for P2P during nego
+#else //!CONFIG_IOCTL_CFG80211
+       //pwdinfo->ext_listen_interval = 3000;
+       //pwdinfo->ext_listen_period = 400;
+       pwdinfo->ext_listen_interval = 1000;
+       pwdinfo->ext_listen_period = 1000;
+#endif //!CONFIG_IOCTL_CFG80211
+#endif
+
+// Commented by Kurt 20130319
+// For WiDi purpose: Use CFG80211 interface but controled WFD/RDS frame by driver itself.
+#ifdef CONFIG_IOCTL_CFG80211
+       pwdinfo->driver_interface = DRIVER_CFG80211;
+#else
+       pwdinfo->driver_interface = DRIVER_WEXT;
+#endif //CONFIG_IOCTL_CFG80211
+
+       pwdinfo->wfd_tdls_enable = 0;
+       _rtw_memset( pwdinfo->p2p_peer_interface_addr, 0x00, ETH_ALEN );
+       _rtw_memset( pwdinfo->p2p_peer_device_addr, 0x00, ETH_ALEN );
+
+       pwdinfo->rx_invitereq_info.operation_ch[0] = 0;
+       pwdinfo->rx_invitereq_info.operation_ch[1] = 0; //      Used to indicate the scan end in site survey function
+#ifdef P2P_OP_CHECK_SOCIAL_CH
+       pwdinfo->rx_invitereq_info.operation_ch[2] = 0;
+       pwdinfo->rx_invitereq_info.operation_ch[3] = 0;
+       pwdinfo->rx_invitereq_info.operation_ch[4] = 0;
+#endif //P2P_OP_CHECK_SOCIAL_CH
+       pwdinfo->rx_invitereq_info.scan_op_ch_only = 0;
+       pwdinfo->p2p_info.operation_ch[0] = 0;
+       pwdinfo->p2p_info.operation_ch[1] = 0;                  //      Used to indicate the scan end in site survey function
+#ifdef P2P_OP_CHECK_SOCIAL_CH
+       pwdinfo->p2p_info.operation_ch[2] = 0;
+       pwdinfo->p2p_info.operation_ch[3] = 0;
+       pwdinfo->p2p_info.operation_ch[4] = 0;
+#endif //P2P_OP_CHECK_SOCIAL_CH
+       pwdinfo->p2p_info.scan_op_ch_only = 0;
+}
+
+#ifdef CONFIG_DBG_P2P
+
+/**
+ * rtw_p2p_role_txt - Get the p2p role name as a text string
+ * @role: P2P role
+ * Returns: The state name as a printable text string
+ */
+const char * rtw_p2p_role_txt(enum P2P_ROLE role)
+{
+       switch (role) {
+       case P2P_ROLE_DISABLE:
+               return "P2P_ROLE_DISABLE";
+       case P2P_ROLE_DEVICE:
+               return "P2P_ROLE_DEVICE";
+       case P2P_ROLE_CLIENT:
+               return "P2P_ROLE_CLIENT";
+       case P2P_ROLE_GO:
+               return "P2P_ROLE_GO";
+       default:
+               return "UNKNOWN";
+       }
+}
+
+/**
+ * rtw_p2p_state_txt - Get the p2p state name as a text string
+ * @state: P2P state
+ * Returns: The state name as a printable text string
+ */
+const char * rtw_p2p_state_txt(enum P2P_STATE state)
+{
+       switch (state) {
+       case P2P_STATE_NONE:
+               return "P2P_STATE_NONE";
+       case P2P_STATE_IDLE:
+               return "P2P_STATE_IDLE";
+       case P2P_STATE_LISTEN:
+               return "P2P_STATE_LISTEN";
+       case P2P_STATE_SCAN:
+               return "P2P_STATE_SCAN";
+       case P2P_STATE_FIND_PHASE_LISTEN:
+               return "P2P_STATE_FIND_PHASE_LISTEN";
+       case P2P_STATE_FIND_PHASE_SEARCH:
+               return "P2P_STATE_FIND_PHASE_SEARCH";
+       case P2P_STATE_TX_PROVISION_DIS_REQ:
+               return "P2P_STATE_TX_PROVISION_DIS_REQ";
+       case P2P_STATE_RX_PROVISION_DIS_RSP:
+               return "P2P_STATE_RX_PROVISION_DIS_RSP";
+       case P2P_STATE_RX_PROVISION_DIS_REQ:
+               return "P2P_STATE_RX_PROVISION_DIS_REQ";
+       case P2P_STATE_GONEGO_ING:
+               return "P2P_STATE_GONEGO_ING";
+       case P2P_STATE_GONEGO_OK:
+               return "P2P_STATE_GONEGO_OK";
+       case P2P_STATE_GONEGO_FAIL:
+               return "P2P_STATE_GONEGO_FAIL";
+       case P2P_STATE_RECV_INVITE_REQ_MATCH:
+               return "P2P_STATE_RECV_INVITE_REQ_MATCH";
+       case P2P_STATE_PROVISIONING_ING:
+               return "P2P_STATE_PROVISIONING_ING";
+       case P2P_STATE_PROVISIONING_DONE:
+               return "P2P_STATE_PROVISIONING_DONE";
+       case P2P_STATE_TX_INVITE_REQ:
+               return "P2P_STATE_TX_INVITE_REQ";
+       case P2P_STATE_RX_INVITE_RESP_OK:
+               return "P2P_STATE_RX_INVITE_RESP_OK";
+       case P2P_STATE_RECV_INVITE_REQ_DISMATCH:
+               return "P2P_STATE_RECV_INVITE_REQ_DISMATCH";
+       case P2P_STATE_RECV_INVITE_REQ_GO:
+               return "P2P_STATE_RECV_INVITE_REQ_GO";
+       case P2P_STATE_RECV_INVITE_REQ_JOIN:
+               return "P2P_STATE_RECV_INVITE_REQ_JOIN";
+       case P2P_STATE_RX_INVITE_RESP_FAIL:
+               return "P2P_STATE_RX_INVITE_RESP_FAIL";
+       case P2P_STATE_RX_INFOR_NOREADY:
+               return "P2P_STATE_RX_INFOR_NOREADY";
+       case P2P_STATE_TX_INFOR_NOREADY:
+               return "P2P_STATE_TX_INFOR_NOREADY";
+       default:
+               return "UNKNOWN";
+       }
+}
+
+void dbg_rtw_p2p_set_state(struct wifidirect_info *wdinfo, enum P2P_STATE state, const char *caller, int line)
+{
+       if(!_rtw_p2p_chk_state(wdinfo, state)) {
+               enum P2P_STATE old_state = _rtw_p2p_state(wdinfo);
+               _rtw_p2p_set_state(wdinfo, state);
+               DBG_871X("[CONFIG_DBG_P2P]%s:%d set_state from %s to %s\n", caller, line
+                       , rtw_p2p_state_txt(old_state), rtw_p2p_state_txt(_rtw_p2p_state(wdinfo))
+               );
+       } else {
+               DBG_871X("[CONFIG_DBG_P2P]%s:%d set_state to same state %s\n", caller, line
+                       , rtw_p2p_state_txt(_rtw_p2p_state(wdinfo))
+               );
+       }
+}
+void dbg_rtw_p2p_set_pre_state(struct wifidirect_info *wdinfo, enum P2P_STATE state, const char *caller, int line)
+{
+       if(_rtw_p2p_pre_state(wdinfo) != state) {
+               enum P2P_STATE old_state = _rtw_p2p_pre_state(wdinfo);
+               _rtw_p2p_set_pre_state(wdinfo, state);
+               DBG_871X("[CONFIG_DBG_P2P]%s:%d set_pre_state from %s to %s\n", caller, line
+                       , rtw_p2p_state_txt(old_state), rtw_p2p_state_txt(_rtw_p2p_pre_state(wdinfo))
+               );
+       } else {
+               DBG_871X("[CONFIG_DBG_P2P]%s:%d set_pre_state to same state %s\n", caller, line
+                       , rtw_p2p_state_txt(_rtw_p2p_pre_state(wdinfo))
+               );
+       }
+}
+#if 0
+void dbg_rtw_p2p_restore_state(struct wifidirect_info *wdinfo, const char *caller, int line)
+{
+       if(wdinfo->pre_p2p_state != -1) {
+               DBG_871X("[CONFIG_DBG_P2P]%s:%d restore from %s to %s\n", caller, line
+                       , p2p_state_str[wdinfo->p2p_state], p2p_state_str[wdinfo->pre_p2p_state]
+               );
+               _rtw_p2p_restore_state(wdinfo);
+       } else {
+               DBG_871X("[CONFIG_DBG_P2P]%s:%d restore no pre state, cur state %s\n", caller, line
+                       , p2p_state_str[wdinfo->p2p_state]
+               );
+       }
+}
+#endif
+void dbg_rtw_p2p_set_role(struct wifidirect_info *wdinfo, enum P2P_ROLE role, const char *caller, int line)
+{
+       if(wdinfo->role != role) {
+               enum P2P_ROLE old_role = wdinfo->role;
+               _rtw_p2p_set_role(wdinfo, role);
+               DBG_871X("[CONFIG_DBG_P2P]%s:%d set_role from %s to %s\n", caller, line
+                       , rtw_p2p_role_txt(old_role), rtw_p2p_role_txt(wdinfo->role)
+               );
+       } else {
+               DBG_871X("[CONFIG_DBG_P2P]%s:%d set_role to same role %s\n", caller, line
+                       , rtw_p2p_role_txt(wdinfo->role)
+               );
+       }
+}
+#endif //CONFIG_DBG_P2P
+
+
+int rtw_p2p_enable(_adapter *padapter, enum P2P_ROLE role)
+{
+       int ret = _SUCCESS;
+       struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
+       struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
+
+       if (role == P2P_ROLE_DEVICE || role == P2P_ROLE_CLIENT|| role == P2P_ROLE_GO)
+       {
+               u8 channel, ch_offset;
+               u16 bwmode;
+
+#ifdef CONFIG_CONCURRENT_MODE
+               _adapter                                *pbuddy_adapter = padapter->pbuddy_adapter;
+               struct wifidirect_info  *pbuddy_wdinfo = &pbuddy_adapter->wdinfo;
+               //      Commented by Albert 2011/12/30
+               //      The driver just supports 1 P2P group operation.
+               //      So, this function will do nothing if the buddy adapter had enabled the P2P function.
+               if(!rtw_p2p_chk_state(pbuddy_wdinfo, P2P_STATE_NONE))
+               {
+                       //      The buddy adapter had enabled the P2P function.
+                       return ret;
+               }
+#endif //CONFIG_CONCURRENT_MODE
+
+               //leave IPS/Autosuspend
+               if (_FAIL == rtw_pwr_wakeup(padapter)) {
+                       ret = _FAIL;
+                       goto exit;
+               }
+
+
+               //      Added by Albert 2011/03/22
+               //      In the P2P mode, the driver should not support the b mode.
+               //      So, the Tx packet shouldn't use the CCK rate
+               update_tx_basic_rate(padapter, WIRELESS_11AGN);
+
+               //Enable P2P function
+               init_wifidirect_info(padapter, role);
+       }
+       else if (role == P2P_ROLE_DISABLE)
+       {
+#ifdef CONFIG_INTEL_WIDI
+               if( padapter->mlmepriv.p2p_reject_disable == _TRUE )
+                       return ret;
+#endif //CONFIG_INTEL_WIDI
+
+               if (_FAIL == rtw_pwr_wakeup(padapter)) {
+                       ret = _FAIL;
+                       goto exit;
+               }
+
+               //Disable P2P function
+               if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+               {
+                       _cancel_timer_ex( &pwdinfo->find_phase_timer );
+                       _cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
+                       _cancel_timer_ex( &pwdinfo->pre_tx_scan_timer);
+                       _cancel_timer_ex( &pwdinfo->reset_ch_sitesurvey);
+                       _cancel_timer_ex( &pwdinfo->reset_ch_sitesurvey2);
+                       reset_ch_sitesurvey_timer_process( padapter );
+                       reset_ch_sitesurvey_timer_process2( padapter );
+                       #ifdef CONFIG_CONCURRENT_MODE
+                       _cancel_timer_ex( &pwdinfo->ap_p2p_switch_timer);
+                       #endif
+                       rtw_p2p_set_state(pwdinfo, P2P_STATE_NONE);
+                       rtw_p2p_set_role(pwdinfo, P2P_ROLE_DISABLE);
+                       _rtw_memset(&pwdinfo->rx_prov_disc_info, 0x00, sizeof(struct rx_provdisc_req_info));
+               }
+
+               //Restore to initial setting.
+               update_tx_basic_rate(padapter, padapter->registrypriv.wireless_mode);
+
+#ifdef CONFIG_INTEL_WIDI
+               rtw_reset_widi_info(padapter);
+#endif //CONFIG_INTEL_WIDI
+
+               //For WiDi purpose.
+#ifdef CONFIG_IOCTL_CFG80211
+               pwdinfo->driver_interface = DRIVER_CFG80211;
+#else
+               pwdinfo->driver_interface = DRIVER_WEXT;
+#endif //CONFIG_IOCTL_CFG80211
+
+       }
+
+exit:
+       return ret;
+}
+
+#endif //CONFIG_P2P
diff --git a/drivers/net/wireless/realtek/rtl8192cu/core/rtw_pwrctrl.c b/drivers/net/wireless/realtek/rtl8192cu/core/rtw_pwrctrl.c
new file mode 100644 (file)
index 0000000..63f8655
--- /dev/null
@@ -0,0 +1,1538 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#define _RTW_PWRCTRL_C_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <osdep_intf.h>
+
+
+#ifdef CONFIG_IPS
+void _ips_enter(_adapter * padapter)
+{
+       struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
+
+       pwrpriv->bips_processing = _TRUE;
+
+       // syn ips_mode with request
+       pwrpriv->ips_mode = pwrpriv->ips_mode_req;
+
+       pwrpriv->ips_enter_cnts++;
+       DBG_871X("==>ips_enter cnts:%d\n",pwrpriv->ips_enter_cnts);
+
+       if(rf_off == pwrpriv->change_rfpwrstate)
+       {
+               if(pwrpriv->ips_mode == IPS_LEVEL_2)
+                       pwrpriv->bkeepfwalive = _TRUE;
+
+               rtw_ips_pwr_down(padapter);
+               pwrpriv->rf_pwrstate = rf_off;
+       }
+       pwrpriv->bips_processing = _FALSE;
+
+}
+
+void ips_enter(_adapter * padapter)
+{
+       struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
+
+       _enter_pwrlock(&pwrpriv->lock);
+       _ips_enter(padapter);
+       _exit_pwrlock(&pwrpriv->lock);
+}
+
+int _ips_leave(_adapter * padapter)
+{
+       struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
+       int result = _SUCCESS;
+
+       if((pwrpriv->rf_pwrstate == rf_off) &&(!pwrpriv->bips_processing))
+       {
+               pwrpriv->bips_processing = _TRUE;
+               pwrpriv->change_rfpwrstate = rf_on;
+               pwrpriv->ips_leave_cnts++;
+               DBG_871X("==>ips_leave cnts:%d\n",pwrpriv->ips_leave_cnts);
+
+               if ((result = rtw_ips_pwr_up(padapter)) == _SUCCESS) {
+                       pwrpriv->rf_pwrstate = rf_on;
+               }
+
+               DBG_871X("==> ips_leave.....LED(0x%08x)...\n",rtw_read32(padapter,0x4c));
+               pwrpriv->bips_processing = _FALSE;
+
+               pwrpriv->bkeepfwalive = _FALSE;
+       }
+
+       return result;
+}
+
+int ips_leave(_adapter * padapter)
+{
+       struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
+       int ret;
+
+       _enter_pwrlock(&pwrpriv->lock);
+       ret = _ips_leave(padapter);
+       _exit_pwrlock(&pwrpriv->lock);
+
+       return ret;
+}
+#endif /* CONFIG_IPS */
+
+#ifdef CONFIG_AUTOSUSPEND
+extern void autosuspend_enter(_adapter* padapter);
+extern int autoresume_enter(_adapter* padapter);
+#endif
+
+#ifdef SUPPORT_HW_RFOFF_DETECTED
+int rtw_hw_suspend(_adapter *padapter );
+int rtw_hw_resume(_adapter *padapter);
+#endif
+
+bool rtw_pwr_unassociated_idle(_adapter *adapter)
+{
+       _adapter *buddy = adapter->pbuddy_adapter;
+       struct mlme_priv *pmlmepriv = &(adapter->mlmepriv);
+#ifdef CONFIG_P2P
+       struct wifidirect_info  *pwdinfo = &(adapter->wdinfo);
+#ifdef CONFIG_IOCTL_CFG80211
+       struct cfg80211_wifidirect_info *pcfg80211_wdinfo = &adapter->cfg80211_wdinfo;
+#endif
+#endif
+
+       bool ret = _FALSE;
+
+       if (adapter->pwrctrlpriv.ips_deny_time >= rtw_get_current_time()) {
+               //DBG_871X("%s ips_deny_time\n", __func__);
+               goto exit;
+       }
+
+       if (check_fwstate(pmlmepriv, WIFI_ASOC_STATE|WIFI_SITE_MONITOR)
+               || check_fwstate(pmlmepriv, WIFI_UNDER_LINKING|WIFI_UNDER_WPS)
+               || check_fwstate(pmlmepriv, WIFI_AP_STATE)
+               || check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE|WIFI_ADHOC_STATE)
+               #if defined(CONFIG_P2P) && defined(CONFIG_IOCTL_CFG80211) && defined(CONFIG_P2P_IPS)
+               || pcfg80211_wdinfo->is_ro_ch
+               #elif defined(CONFIG_P2P)
+               || !rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE)
+               #endif
+       ) {
+               goto exit;
+       }
+
+       /* consider buddy, if exist */
+       if (buddy) {
+               struct mlme_priv *b_pmlmepriv = &(buddy->mlmepriv);
+               #ifdef CONFIG_P2P
+               struct wifidirect_info *b_pwdinfo = &(buddy->wdinfo);
+               #ifdef CONFIG_IOCTL_CFG80211
+               struct cfg80211_wifidirect_info *b_pcfg80211_wdinfo = &buddy->cfg80211_wdinfo;
+               #endif
+               #endif
+
+               if (check_fwstate(b_pmlmepriv, WIFI_ASOC_STATE|WIFI_SITE_MONITOR)
+                       || check_fwstate(b_pmlmepriv, WIFI_UNDER_LINKING|WIFI_UNDER_WPS)
+                       || check_fwstate(b_pmlmepriv, WIFI_AP_STATE)
+                       || check_fwstate(b_pmlmepriv, WIFI_ADHOC_MASTER_STATE|WIFI_ADHOC_STATE)
+                       #if defined(CONFIG_P2P) && defined(CONFIG_IOCTL_CFG80211) && defined(CONFIG_P2P_IPS)
+                       || b_pcfg80211_wdinfo->is_ro_ch
+                       #elif defined(CONFIG_P2P)
+                       || !rtw_p2p_chk_state(b_pwdinfo, P2P_STATE_NONE)
+                       #endif
+               ) {
+                       goto exit;
+               }
+       }
+
+#ifdef CONFIG_INTEL_PROXIM
+       if(adapter->proximity.proxim_on==_TRUE){
+               return;
+       }
+#endif
+
+       ret = _TRUE;
+
+exit:
+       return ret;
+}
+
+#if defined (PLATFORM_LINUX)||defined (PLATFORM_FREEBSD)
+void rtw_ps_processor(_adapter*padapter)
+{
+#ifdef CONFIG_P2P
+       struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
+#endif //CONFIG_P2P
+       struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+#ifdef SUPPORT_HW_RFOFF_DETECTED
+       rt_rf_power_state rfpwrstate;
+#endif //SUPPORT_HW_RFOFF_DETECTED
+
+       pwrpriv->ps_processing = _TRUE;
+
+#ifdef SUPPORT_HW_RFOFF_DETECTED
+       if(pwrpriv->bips_processing == _TRUE)
+               goto exit;
+
+       //DBG_871X("==> fw report state(0x%x)\n",rtw_read8(padapter,0x1ca));
+       if(padapter->pwrctrlpriv.bHWPwrPindetect)
+       {
+       #ifdef CONFIG_AUTOSUSPEND
+               if(padapter->registrypriv.usbss_enable)
+               {
+                       if(pwrpriv->rf_pwrstate == rf_on)
+                       {
+                               if(padapter->net_closed == _TRUE)
+                                       pwrpriv->ps_flag = _TRUE;
+
+                               rfpwrstate = RfOnOffDetect(padapter);
+                               DBG_871X("@@@@- #1  %s==> rfstate:%s \n",__FUNCTION__,(rfpwrstate==rf_on)?"rf_on":"rf_off");
+                               if(rfpwrstate!= pwrpriv->rf_pwrstate)
+                               {
+                                       if(rfpwrstate == rf_off)
+                                       {
+                                               pwrpriv->change_rfpwrstate = rf_off;
+
+                                               pwrpriv->bkeepfwalive = _TRUE;
+                                               pwrpriv->brfoffbyhw = _TRUE;
+
+                                               autosuspend_enter(padapter);
+                                       }
+                               }
+                       }
+               }
+               else
+       #endif //CONFIG_AUTOSUSPEND
+               {
+                       rfpwrstate = RfOnOffDetect(padapter);
+                       DBG_871X("@@@@- #2  %s==> rfstate:%s \n",__FUNCTION__,(rfpwrstate==rf_on)?"rf_on":"rf_off");
+
+                       if(rfpwrstate!= pwrpriv->rf_pwrstate)
+                       {
+                               if(rfpwrstate == rf_off)
+                               {
+                                       pwrpriv->change_rfpwrstate = rf_off;
+                                       pwrpriv->brfoffbyhw = _TRUE;
+                                       padapter->bCardDisableWOHSM = _TRUE;
+                                       rtw_hw_suspend(padapter );
+                               }
+                               else
+                               {
+                                       pwrpriv->change_rfpwrstate = rf_on;
+                                       rtw_hw_resume(padapter );
+                               }
+                               DBG_871X("current rf_pwrstate(%s)\n",(pwrpriv->rf_pwrstate == rf_off)?"rf_off":"rf_on");
+                       }
+               }
+               pwrpriv->pwr_state_check_cnts ++;
+       }
+#endif //SUPPORT_HW_RFOFF_DETECTED
+
+       if (pwrpriv->ips_mode_req == IPS_NONE
+               #ifdef CONFIG_CONCURRENT_MODE
+               || padapter->pbuddy_adapter->pwrctrlpriv.ips_mode_req == IPS_NONE
+               #endif
+       )
+               goto exit;
+
+       if (rtw_pwr_unassociated_idle(padapter) == _FALSE)
+               goto exit;
+
+       if((pwrpriv->rf_pwrstate == rf_on) && ((pwrpriv->pwr_state_check_cnts%4)==0))
+       {
+               DBG_871X("==>%s .fw_state(%x)\n",__FUNCTION__,get_fwstate(pmlmepriv));
+               pwrpriv->change_rfpwrstate = rf_off;
+
+               #ifdef CONFIG_AUTOSUSPEND
+               if(padapter->registrypriv.usbss_enable)
+               {
+                       if(pwrpriv->bHWPwrPindetect)
+                               pwrpriv->bkeepfwalive = _TRUE;
+
+                       if(padapter->net_closed == _TRUE)
+                               pwrpriv->ps_flag = _TRUE;
+
+                       padapter->bCardDisableWOHSM = _TRUE;
+                       autosuspend_enter(padapter);
+               }
+               else if(pwrpriv->bHWPwrPindetect)
+               {
+               }
+               else
+               #endif //CONFIG_AUTOSUSPEND
+               {
+                       #ifdef CONFIG_IPS
+                       ips_enter(padapter);
+                       #endif
+               }
+       }
+exit:
+       rtw_set_pwr_state_check_timer(&padapter->pwrctrlpriv);
+       pwrpriv->ps_processing = _FALSE;
+       return;
+}
+
+void pwr_state_check_handler(void *FunctionContext);
+void pwr_state_check_handler(void *FunctionContext)
+{
+       _adapter *padapter = (_adapter *)FunctionContext;
+       rtw_ps_cmd(padapter);
+}
+#endif
+
+
+#ifdef CONFIG_LPS
+/*
+ *
+ * Parameters
+ *     padapter
+ *     pslv                    power state level, only could be PS_STATE_S0 ~ PS_STATE_S4
+ *
+ */
+void rtw_set_rpwm(PADAPTER padapter, u8 pslv)
+{
+       u8      rpwm;
+       struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
+
+_func_enter_;
+
+       pslv = PS_STATE(pslv);
+
+       if (pwrpriv->rpwm == pslv) {
+               RT_TRACE(_module_rtl871x_pwrctrl_c_,_drv_err_,
+                       ("%s: Already set rpwm[0x%02x]!\n", __FUNCTION__, pslv));
+               return;
+       }
+
+       if ((padapter->bDriverStopped == _TRUE) ||
+               (padapter->bSurpriseRemoved == _TRUE)) {
+               RT_TRACE(_module_rtl871x_pwrctrl_c_, _drv_err_,
+                                ("%s: bDriverStopped(%d) bSurpriseRemoved(%d)\n",
+                                 __FUNCTION__, padapter->bDriverStopped, padapter->bSurpriseRemoved));
+               return;
+       }
+
+       rpwm = pslv | pwrpriv->tog;
+#ifdef CONFIG_LPS_LCLK
+       if ((pwrpriv->cpwm < PS_STATE_S2) && (pslv >= PS_STATE_S2))
+               rpwm |= PS_ACK;
+#endif
+       RT_TRACE(_module_rtl871x_pwrctrl_c_, _drv_notice_,
+                        ("rtw_set_rpwm: rpwm=0x%02x cpwm=0x%02x\n", rpwm, pwrpriv->cpwm));
+
+       pwrpriv->rpwm = pslv;
+
+       rtw_hal_set_hwreg(padapter, HW_VAR_SET_RPWM, (u8 *)(&rpwm));
+
+       pwrpriv->tog += 0x80;
+
+       if (!(rpwm & PS_ACK)) pwrpriv->cpwm = pslv;
+
+_func_exit_;
+}
+
+u8 PS_RDY_CHECK(_adapter * padapter);
+u8 PS_RDY_CHECK(_adapter * padapter)
+{
+       u32 curr_time, delta_time;
+       struct pwrctrl_priv     *pwrpriv = &padapter->pwrctrlpriv;
+       struct mlme_priv        *pmlmepriv = &(padapter->mlmepriv);
+
+       curr_time = rtw_get_current_time();
+
+       delta_time = curr_time -pwrpriv->DelayLPSLastTimeStamp;
+
+       if(delta_time < LPS_DELAY_TIME)
+       {
+               return _FALSE;
+       }
+
+       if ((check_fwstate(pmlmepriv, _FW_LINKED) == _FALSE) ||
+               (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY) == _TRUE) ||
+               (check_fwstate(pmlmepriv, WIFI_UNDER_WPS) == _TRUE) ||
+               (check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE) ||
+               (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE) ||
+               (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE) )
+               return _FALSE;
+
+       if(_TRUE == pwrpriv->bInSuspend )
+               return _FALSE;
+
+       if( (padapter->securitypriv.dot11AuthAlgrthm == dot11AuthAlgrthm_8021X) && (padapter->securitypriv.binstallGrpkey == _FALSE) )
+       {
+               DBG_871X("Group handshake still in progress !!!\n");
+               return _FALSE;
+       }
+
+#ifdef CONFIG_IOCTL_CFG80211
+       if (!rtw_cfg80211_pwr_mgmt(padapter))
+               return _FALSE;
+#endif
+
+       return _TRUE;
+}
+
+void rtw_set_ps_mode(PADAPTER padapter, u8 ps_mode, u8 smart_ps)
+{
+       struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
+#ifdef CONFIG_P2P
+       struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
+#endif //CONFIG_P2P
+#ifdef CONFIG_TDLS
+       struct sta_priv *pstapriv = &padapter->stapriv;
+       _irqL irqL;
+       int i, j;
+       _list   *plist, *phead;
+       struct sta_info *ptdls_sta;
+#endif //CONFIG_TDLS
+
+_func_enter_;
+
+       RT_TRACE(_module_rtl871x_pwrctrl_c_, _drv_notice_,
+                        ("%s: PowerMode=%d Smart_PS=%d\n",
+                         __FUNCTION__, ps_mode, smart_ps));
+
+       if(ps_mode > PM_Card_Disable) {
+               RT_TRACE(_module_rtl871x_pwrctrl_c_,_drv_err_,("ps_mode:%d error\n", ps_mode));
+               return;
+       }
+
+       if((pwrpriv->pwr_mode == ps_mode) &&
+               (pwrpriv->smart_ps == smart_ps)){
+               return;
+       }
+
+       //if(pwrpriv->pwr_mode == PS_MODE_ACTIVE)
+       if(ps_mode == PS_MODE_ACTIVE)
+       {
+#ifdef CONFIG_P2P_PS
+               if(pwdinfo->opp_ps == 0)
+#endif // CONFIG_P2P_PS
+               {
+#ifdef CONFIG_LPS_LCLK
+                       _enter_pwrlock(&pwrpriv->lock);
+#endif
+                       DBG_871X("rtw_set_ps_mode(): Busy Traffic , Leave 802.11 power save..\n");
+
+#ifdef CONFIG_TDLS
+                       _enter_critical_bh(&pstapriv->sta_hash_lock, &irqL);
+
+                       for(i=0; i< NUM_STA; i++)
+                       {
+                               phead = &(pstapriv->sta_hash[i]);
+                               plist = get_next(phead);
+
+                               while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
+                               {
+                                       ptdls_sta = LIST_CONTAINOR(plist, struct sta_info, hash_list);
+
+                                       if( ptdls_sta->tdls_sta_state & TDLS_LINKED_STATE )
+                                               issue_nulldata_to_TDLS_peer_STA(padapter, ptdls_sta, 0);
+                                       plist = get_next(plist);
+                               }
+                       }
+
+                       _exit_critical_bh(&pstapriv->sta_hash_lock, &irqL);
+#endif //CONFIG_TDLS
+
+                       pwrpriv->smart_ps = smart_ps;
+                       pwrpriv->pwr_mode = ps_mode;
+
+                       rtw_set_rpwm(padapter, PS_STATE_S4);
+#ifdef CONFIG_LPS_LCLK
+{
+                       u32 n = 0;
+                       while (pwrpriv->cpwm != PS_STATE_S4) {
+                               n++;
+                               if (n == 10000) break;
+                               if (padapter->bSurpriseRemoved == _TRUE) break;
+                               rtw_msleep_os(1);
+                       }
+                       if (n == 10000)
+                               printk(KERN_ERR "%s: wait CPWM to S4 too long! cpwm=0x%02x\n", __func__, pwrpriv->cpwm);
+}
+#endif
+                       rtw_hal_set_hwreg(padapter, HW_VAR_H2C_FW_PWRMODE, (u8 *)(&ps_mode));
+                       pwrpriv->bFwCurrentInPSMode = _FALSE;
+#ifdef CONFIG_LPS_LCLK
+                       _exit_pwrlock(&pwrpriv->lock);
+#endif
+               }
+       }
+       else
+       {
+               if(PS_RDY_CHECK(padapter))
+               {
+#ifdef CONFIG_LPS_LCLK
+                       _enter_pwrlock(&pwrpriv->lock);
+#endif
+                       DBG_871X("rtw_set_ps_mode(): Enter 802.11 power save mode...\n");
+
+#ifdef CONFIG_TDLS
+                       _enter_critical_bh(&pstapriv->sta_hash_lock, &irqL);
+
+                       for(i=0; i< NUM_STA; i++)
+                       {
+                               phead = &(pstapriv->sta_hash[i]);
+                               plist = get_next(phead);
+
+                               while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
+                               {
+                                       ptdls_sta = LIST_CONTAINOR(plist, struct sta_info, hash_list);
+
+                                       if( ptdls_sta->tdls_sta_state & TDLS_LINKED_STATE )
+                                               issue_nulldata_to_TDLS_peer_STA(padapter, ptdls_sta, 1);
+                                       plist = get_next(plist);
+                               }
+                       }
+
+                       _exit_critical_bh(&pstapriv->sta_hash_lock, &irqL);
+#endif //CONFIG_TDLS
+
+                       pwrpriv->smart_ps = smart_ps;
+                       pwrpriv->pwr_mode = ps_mode;
+                       pwrpriv->bFwCurrentInPSMode = _TRUE;
+                       rtw_hal_set_hwreg(padapter, HW_VAR_H2C_FW_PWRMODE, (u8 *)(&ps_mode));
+#ifdef CONFIG_P2P_PS
+                       // Set CTWindow after LPS
+                       if(pwdinfo->opp_ps == 1)
+                               p2p_ps_wk_cmd(padapter, P2P_PS_ENABLE, 0);
+#endif // CONFIG_P2P_PS
+#ifdef CONFIG_LPS_LCLK
+                       if (pwrpriv->alives == 0)
+                               rtw_set_rpwm(padapter, PS_STATE_S0);
+#else
+                       rtw_set_rpwm(padapter, PS_STATE_S2);
+#endif
+#ifdef CONFIG_LPS_LCLK
+                       _exit_pwrlock(&pwrpriv->lock);
+#endif
+               }
+               //else
+               //{
+               //      pwrpriv->pwr_mode = PS_MODE_ACTIVE;
+               //}
+       }
+
+_func_exit_;
+}
+
+
+//
+//     Description:
+//             Enter the leisure power save mode.
+//
+void LPS_Enter(PADAPTER padapter)
+{
+       struct pwrctrl_priv     *pwrpriv = &padapter->pwrctrlpriv;
+       struct mlme_priv        *pmlmepriv = &(padapter->mlmepriv);
+       _adapter *buddy = padapter->pbuddy_adapter;
+
+_func_enter_;
+
+//     DBG_871X("+LeisurePSEnter\n");
+
+#ifdef CONFIG_CONCURRENT_MODE
+       if (padapter->iface_type != IFACE_PORT0)
+               return; /* Skip power saving for concurrent mode port 1*/
+
+       /* consider buddy, if exist */
+       if (buddy) {
+               struct mlme_priv *b_pmlmepriv = &(buddy->mlmepriv);
+               #ifdef CONFIG_P2P
+               struct wifidirect_info *b_pwdinfo = &(buddy->wdinfo);
+               #ifdef CONFIG_IOCTL_CFG80211
+               struct cfg80211_wifidirect_info *b_pcfg80211_wdinfo = &buddy->cfg80211_wdinfo;
+               #endif
+               #endif
+
+               if (check_fwstate(b_pmlmepriv, WIFI_ASOC_STATE|WIFI_SITE_MONITOR)
+                       || check_fwstate(b_pmlmepriv, WIFI_UNDER_LINKING|WIFI_UNDER_WPS)
+                       || check_fwstate(b_pmlmepriv, WIFI_AP_STATE)
+                       || check_fwstate(b_pmlmepriv, WIFI_ADHOC_MASTER_STATE|WIFI_ADHOC_STATE)
+                       #if defined(CONFIG_P2P) && defined(CONFIG_IOCTL_CFG80211) && defined(CONFIG_P2P_IPS)
+                       || b_pcfg80211_wdinfo->is_ro_ch
+                       #elif defined(CONFIG_P2P)
+                       || !rtw_p2p_chk_state(b_pwdinfo, P2P_STATE_NONE)
+                       #endif
+                       || rtw_is_scan_deny(buddy)
+               ) {
+                       return;
+               }
+       }
+#endif
+
+#ifdef CONFIG_INTEL_PROXIM
+       if(padapter->proximity.proxim_on==_TRUE){
+               return;
+       }
+#endif
+       if (    (check_fwstate(pmlmepriv, _FW_LINKED) == _FALSE) ||
+               (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY) == _TRUE) ||
+               (check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE) ||
+               (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE) ||
+               (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE) )
+               return;
+
+       if(_TRUE == pwrpriv->bInSuspend )
+               return ;
+
+       if (pwrpriv->bLeisurePs)
+       {
+               // Idle for a while if we connect to AP a while ago.
+               if(pwrpriv->LpsIdleCount >= 2) //  4 Sec
+               {
+                       if(pwrpriv->pwr_mode == PS_MODE_ACTIVE)
+                       {
+                               rtw_set_ps_mode(padapter, pwrpriv->power_mgnt, 2);
+                       }
+               }
+               else
+                       pwrpriv->LpsIdleCount++;
+       }
+
+//     DBG_871X("-LeisurePSEnter\n");
+
+_func_exit_;
+}
+
+
+//
+//     Description:
+//             Leave the leisure power save mode.
+//
+void LPS_Leave(PADAPTER padapter)
+{
+#define LPS_LEAVE_TIMEOUT_MS 100
+
+       struct pwrctrl_priv     *pwrpriv = &padapter->pwrctrlpriv;
+       u32 start_time;
+       BOOLEAN bAwake = _FALSE;
+
+_func_enter_;
+
+//     DBG_871X("+LeisurePSLeave\n");
+
+#ifdef CONFIG_CONCURRENT_MODE
+       if (padapter->iface_type != IFACE_PORT0)
+               return; /* Skip power saving for concurrent mode port 1*/
+#endif
+
+       if (pwrpriv->bLeisurePs)
+       {
+               if(pwrpriv->pwr_mode != PS_MODE_ACTIVE)
+               {
+                       rtw_set_ps_mode(padapter, PS_MODE_ACTIVE, 0);
+
+                       if(pwrpriv->pwr_mode == PS_MODE_ACTIVE)
+                       {
+                               start_time = rtw_get_current_time();
+                               while(1)
+                               {
+                                       rtw_hal_get_hwreg(padapter, HW_VAR_FWLPS_RF_ON, (u8 *)(&bAwake));
+
+                                       if(bAwake || padapter->bSurpriseRemoved)
+                                               break;
+
+                                       if(rtw_get_passing_time_ms(start_time)>LPS_LEAVE_TIMEOUT_MS)
+                                       {
+                                               DBG_871X("Wait for FW LPS leave more than %u ms!!!\n", LPS_LEAVE_TIMEOUT_MS);
+                                               break;
+                                       }
+                                       rtw_usleep_os(100);
+                               }
+                       }
+               }
+       }
+
+
+//     DBG_871X("-LeisurePSLeave\n");
+
+_func_exit_;
+}
+
+#endif
+
+//
+// Description: Leave all power save mode: LPS, FwLPS, IPS if needed.
+// Move code to function by tynli. 2010.03.26.
+//
+void LeaveAllPowerSaveMode(IN PADAPTER Adapter)
+{
+       struct mlme_priv        *pmlmepriv = &(Adapter->mlmepriv);
+
+_func_enter_;
+
+       //DBG_871X("%s.....\n",__FUNCTION__);
+       if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)
+       { //connect
+#ifdef CONFIG_P2P_PS
+               p2p_ps_wk_cmd(Adapter, P2P_PS_DISABLE, 0);
+#endif // CONFIG_P2P_PS
+#ifdef CONFIG_LPS
+               //DBG_871X("==> leave LPS.......\n");
+               LPS_Leave(Adapter);
+#endif
+       }
+       else
+       {
+               if(Adapter->pwrctrlpriv.rf_pwrstate== rf_off)
+               {
+                       #ifdef CONFIG_AUTOSUSPEND
+                       if(Adapter->registrypriv.usbss_enable)
+                       {
+                               #if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,35))
+                               usb_disable_autosuspend(adapter_to_dvobj(Adapter)->pusbdev);
+                               #elif (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,22) && LINUX_VERSION_CODE<=KERNEL_VERSION(2,6,34))
+                               adapter_to_dvobj(Adapter)->pusbdev->autosuspend_disabled = Adapter->bDisableAutosuspend;//autosuspend disabled by the user
+                               #endif
+                       }
+                       else
+                       #endif
+                       {
+                       /*
+                               #ifdef CONFIG_IPS
+                               if(_FALSE == ips_leave(Adapter))
+                               {
+                                       DBG_871X("======> ips_leave fail.............\n");
+                               }
+                               #endif
+                       */
+                       }
+               }
+       }
+
+_func_exit_;
+}
+
+#ifdef CONFIG_LPS_LCLK
+/*
+ * Caller:ISR handler...
+ *
+ * This will be called when CPWM interrupt is up.
+ *
+ * using to update cpwn of drv; and drv willl make a decision to up or down pwr level
+ */
+void cpwm_int_hdl(
+       PADAPTER padapter,
+       struct reportpwrstate_parm *preportpwrstate)
+{
+       struct pwrctrl_priv *pwrpriv;
+
+
+_func_enter_;
+
+       pwrpriv = &padapter->pwrctrlpriv;
+#if 0
+       if (pwrpriv->cpwm_tog == (preportpwrstate->state & PS_TOGGLE)) {
+               RT_TRACE(_module_rtl871x_pwrctrl_c_, _drv_err_,
+                                ("cpwm_int_hdl: tog(old)=0x%02x cpwm(new)=0x%02x toggle bit didn't change!?\n",
+                                 pwrpriv->cpwm_tog, preportpwrstate->state));
+               goto exit;
+       }
+#endif
+//     _enter_pwrlock(&pwrpriv->lock);
+
+       pwrpriv->cpwm = PS_STATE(preportpwrstate->state);
+       pwrpriv->cpwm_tog = preportpwrstate->state & PS_TOGGLE;
+
+       if (pwrpriv->cpwm >= PS_STATE_S2) {
+               if (pwrpriv->alives & CMD_ALIVE)
+                       _rtw_up_sema(&padapter->cmdpriv.cmd_queue_sema);
+
+               if (pwrpriv->alives & XMIT_ALIVE)
+                       _rtw_up_sema(&padapter->xmitpriv.xmit_sema);
+       }
+
+//     _exit_pwrlock(&pwrpriv->lock);
+
+exit:
+       RT_TRACE(_module_rtl871x_pwrctrl_c_, _drv_notice_,
+                        ("cpwm_int_hdl: cpwm=0x%02x\n", pwrpriv->cpwm));
+
+_func_exit_;
+}
+
+__inline static void register_task_alive(struct pwrctrl_priv *pwrctrl, u32 tag)
+{
+       pwrctrl->alives |= tag;
+}
+
+__inline static void unregister_task_alive(struct pwrctrl_priv *pwrctrl, u32 tag)
+{
+       pwrctrl->alives &= ~tag;
+}
+
+/*
+ * Caller: rtw_xmit_thread
+ *
+ * Check if the fw_pwrstate is okay for xmit.
+ * If not (cpwm is less than S3), then the sub-routine
+ * will raise the cpwm to be greater than or equal to S3.
+ *
+ * Calling Context: Passive
+ *
+ * Return Value:
+ *      _SUCCESS       rtw_xmit_thread can write fifo/txcmd afterwards.
+ *      _FAIL          rtw_xmit_thread can not do anything.
+ */
+s32 rtw_register_tx_alive(PADAPTER padapter)
+{
+       s32 res;
+       struct pwrctrl_priv *pwrctrl;
+
+_func_enter_;
+
+       res = _SUCCESS;
+       pwrctrl = &padapter->pwrctrlpriv;
+
+       _enter_pwrlock(&pwrctrl->lock);
+
+       register_task_alive(pwrctrl, XMIT_ALIVE);
+
+       if (pwrctrl->bFwCurrentInPSMode == _TRUE)
+       {
+               RT_TRACE(_module_rtl871x_pwrctrl_c_, _drv_err_,
+                                ("rtw_register_tx_alive: cpwm=0x%02x alives=0x%08x\n",
+                                 pwrctrl->cpwm, pwrctrl->alives));
+
+               if (pwrctrl->cpwm < PS_STATE_S2) {
+                       if (pwrctrl->rpwm < PS_STATE_S2)
+                               rtw_set_rpwm(padapter, PS_STATE_S2);
+                       res = _FAIL;
+               }
+       }
+
+       _exit_pwrlock(&pwrctrl->lock);
+
+_func_exit_;
+
+       return res;
+}
+
+/*
+ * Caller: rtw_cmd_thread
+ *
+ * Check if the fw_pwrstate is okay for issuing cmd.
+ * If not (cpwm should be is less than S2), then the sub-routine
+ * will raise the cpwm to be greater than or equal to S2.
+ *
+ * Calling Context: Passive
+ *
+ * Return Value:
+ *     _SUCCESS        rtw_cmd_thread can issue cmds to firmware afterwards.
+ *     _FAIL           rtw_cmd_thread can not do anything.
+ */
+s32 rtw_register_cmd_alive(PADAPTER padapter)
+{
+       s32 res;
+       struct pwrctrl_priv *pwrctrl;
+
+_func_enter_;
+
+       res = _SUCCESS;
+       pwrctrl = &padapter->pwrctrlpriv;
+
+       _enter_pwrlock(&pwrctrl->lock);
+
+       register_task_alive(pwrctrl, CMD_ALIVE);
+
+       if (pwrctrl->bFwCurrentInPSMode == _TRUE)
+       {
+               RT_TRACE(_module_rtl871x_pwrctrl_c_, _drv_notice_,
+                                ("rtw_register_cmd_alive: cpwm=0x%02x alives=0x%08x\n",
+                                 pwrctrl->cpwm, pwrctrl->alives));
+
+               if (pwrctrl->cpwm < PS_STATE_S2) {
+                       if (pwrctrl->rpwm < PS_STATE_S2)
+                               rtw_set_rpwm(padapter, PS_STATE_S2);
+                       res = _FAIL;
+               }
+       }
+
+       _exit_pwrlock(&pwrctrl->lock);
+
+_func_exit_;
+
+       return res;
+}
+
+/*
+ * Caller: rx_isr
+ *
+ * Calling Context: Dispatch/ISR
+ *
+ * Return Value:
+ *     _SUCCESS
+ *     _FAIL
+ */
+s32 rtw_register_rx_alive(PADAPTER padapter)
+{
+       struct pwrctrl_priv *pwrctrl;
+
+_func_enter_;
+
+       pwrctrl = &padapter->pwrctrlpriv;
+
+       _enter_pwrlock(&pwrctrl->lock);
+
+       register_task_alive(pwrctrl, RECV_ALIVE);
+       RT_TRACE(_module_rtl871x_pwrctrl_c_, _drv_notice_,
+                        ("rtw_register_rx_alive: cpwm=0x%02x alives=0x%08x\n",
+                         pwrctrl->cpwm, pwrctrl->alives));
+
+       _exit_pwrlock(&pwrctrl->lock);
+
+_func_exit_;
+
+       return _SUCCESS;
+}
+
+/*
+ * Caller: evt_isr or evt_thread
+ *
+ * Calling Context: Dispatch/ISR or Passive
+ *
+ * Return Value:
+ *     _SUCCESS
+ *     _FAIL
+ */
+s32 rtw_register_evt_alive(PADAPTER padapter)
+{
+       struct pwrctrl_priv *pwrctrl;
+
+_func_enter_;
+
+       pwrctrl = &padapter->pwrctrlpriv;
+
+       _enter_pwrlock(&pwrctrl->lock);
+
+       register_task_alive(pwrctrl, EVT_ALIVE);
+       RT_TRACE(_module_rtl871x_pwrctrl_c_, _drv_notice_,
+                        ("rtw_register_evt_alive: cpwm=0x%02x alives=0x%08x\n",
+                         pwrctrl->cpwm, pwrctrl->alives));
+
+       _exit_pwrlock(&pwrctrl->lock);
+
+_func_exit_;
+
+       return _SUCCESS;
+}
+
+/*
+ * Caller: ISR
+ *
+ * If ISR's txdone,
+ * No more pkts for TX,
+ * Then driver shall call this fun. to power down firmware again.
+ */
+void rtw_unregister_tx_alive(PADAPTER padapter)
+{
+       struct pwrctrl_priv *pwrctrl;
+
+_func_enter_;
+
+       pwrctrl = &padapter->pwrctrlpriv;
+
+       _enter_pwrlock(&pwrctrl->lock);
+
+       unregister_task_alive(pwrctrl, XMIT_ALIVE);
+
+       if ((pwrctrl->pwr_mode != PS_MODE_ACTIVE) &&
+               (pwrctrl->bFwCurrentInPSMode == _TRUE))
+       {
+               if ((pwrctrl->alives == 0) &&
+                       (pwrctrl->cpwm > PS_STATE_S0))
+               {
+                       rtw_set_rpwm(padapter, PS_STATE_S0);
+               }
+
+               RT_TRACE(_module_rtl871x_pwrctrl_c_, _drv_notice_,
+                                ("rtw_unregister_tx_alive: cpwm=0x%02x alives=0x%08x\n",
+                                 pwrctrl->cpwm, pwrctrl->alives));
+       }
+
+       _exit_pwrlock(&pwrctrl->lock);
+
+_func_exit_;
+}
+
+/*
+ * Caller: ISR
+ *
+ * If all commands have been done,
+ * and no more command to do,
+ * then driver shall call this fun. to power down firmware again.
+ */
+void rtw_unregister_cmd_alive(PADAPTER padapter)
+{
+       struct pwrctrl_priv *pwrctrl;
+
+_func_enter_;
+
+       pwrctrl = &padapter->pwrctrlpriv;
+
+       _enter_pwrlock(&pwrctrl->lock);
+
+       unregister_task_alive(pwrctrl, CMD_ALIVE);
+
+       if ((pwrctrl->pwr_mode != PS_MODE_ACTIVE) &&
+               (pwrctrl->bFwCurrentInPSMode == _TRUE))
+       {
+               if ((pwrctrl->alives == 0) &&
+                       (pwrctrl->cpwm > PS_STATE_S0))
+               {
+                       rtw_set_rpwm(padapter, PS_STATE_S0);
+               }
+
+               RT_TRACE(_module_rtl871x_pwrctrl_c_, _drv_notice_,
+                                ("rtw_unregister_cmd_alive: cpwm=0x%02x alives=0x%08x\n",
+                                 pwrctrl->cpwm, pwrctrl->alives));
+       }
+
+       _exit_pwrlock(&pwrctrl->lock);
+
+_func_exit_;
+}
+
+/*
+ * Caller: ISR
+ */
+void rtw_unregister_rx_alive(PADAPTER padapter)
+{
+       struct pwrctrl_priv *pwrctrl;
+
+_func_enter_;
+
+       pwrctrl = &padapter->pwrctrlpriv;
+
+       _enter_pwrlock(&pwrctrl->lock);
+
+       unregister_task_alive(pwrctrl, RECV_ALIVE);
+
+       RT_TRACE(_module_rtl871x_pwrctrl_c_, _drv_notice_,
+                        ("rtw_unregister_rx_alive: cpwm=0x%02x alives=0x%08x\n",
+                         pwrctrl->cpwm, pwrctrl->alives));
+
+       _exit_pwrlock(&pwrctrl->lock);
+
+_func_exit_;
+}
+
+void rtw_unregister_evt_alive(PADAPTER padapter)
+{
+       struct pwrctrl_priv *pwrctrl;
+
+_func_enter_;
+
+       pwrctrl = &padapter->pwrctrlpriv;
+
+       unregister_task_alive(pwrctrl, EVT_ALIVE);
+
+       RT_TRACE(_module_rtl871x_pwrctrl_c_, _drv_notice_,
+                        ("rtw_unregister_evt_alive: cpwm=0x%02x alives=0x%08x\n",
+                         pwrctrl->cpwm, pwrctrl->alives));
+
+       _exit_pwrlock(&pwrctrl->lock);
+
+_func_exit_;
+}
+#endif /* CONFIG_LPS_LCLK */
+
+#ifdef CONFIG_RESUME_IN_WORKQUEUE
+static void resume_workitem_callback(struct work_struct *work);
+#endif //CONFIG_RESUME_IN_WORKQUEUE
+
+void rtw_init_pwrctrl_priv(PADAPTER padapter)
+{
+       struct pwrctrl_priv *pwrctrlpriv = &padapter->pwrctrlpriv;
+
+_func_enter_;
+
+#ifdef PLATFORM_WINDOWS
+       pwrctrlpriv->pnp_current_pwr_state=NdisDeviceStateD0;
+#endif
+
+       _init_pwrlock(&pwrctrlpriv->lock);
+       pwrctrlpriv->rf_pwrstate = rf_on;
+       pwrctrlpriv->ips_enter_cnts=0;
+       pwrctrlpriv->ips_leave_cnts=0;
+
+       pwrctrlpriv->ips_mode = padapter->registrypriv.ips_mode;
+       pwrctrlpriv->ips_mode_req = padapter->registrypriv.ips_mode;
+
+       pwrctrlpriv->pwr_state_check_interval = RTW_PWR_STATE_CHK_INTERVAL;
+       pwrctrlpriv->pwr_state_check_cnts = 0;
+       pwrctrlpriv->bInternalAutoSuspend = _FALSE;
+       pwrctrlpriv->bInSuspend = _FALSE;
+       pwrctrlpriv->bkeepfwalive = _FALSE;
+
+#ifdef CONFIG_AUTOSUSPEND
+#ifdef SUPPORT_HW_RFOFF_DETECTED
+       pwrctrlpriv->pwr_state_check_interval = (pwrctrlpriv->bHWPwrPindetect) ?1000:2000;
+#endif
+#endif
+
+       pwrctrlpriv->LpsIdleCount = 0;
+       //pwrctrlpriv->FWCtrlPSMode =padapter->registrypriv.power_mgnt;// PS_MODE_MIN;
+       pwrctrlpriv->power_mgnt =padapter->registrypriv.power_mgnt;// PS_MODE_MIN;
+       pwrctrlpriv->bLeisurePs = (PS_MODE_ACTIVE != pwrctrlpriv->power_mgnt)?_TRUE:_FALSE;
+
+       pwrctrlpriv->bFwCurrentInPSMode = _FALSE;
+
+       pwrctrlpriv->cpwm = PS_STATE_S4;
+
+       pwrctrlpriv->pwr_mode = PS_MODE_ACTIVE;
+
+
+       pwrctrlpriv->smart_ps = 0;
+
+       pwrctrlpriv->tog = 0x80;
+
+#ifdef PLATFORM_LINUX
+       _init_timer(&(pwrctrlpriv->pwr_state_check_timer), padapter->pnetdev, pwr_state_check_handler, (u8 *)padapter);
+#endif
+
+       #ifdef CONFIG_RESUME_IN_WORKQUEUE
+       _init_workitem(&pwrctrlpriv->resume_work, resume_workitem_callback, NULL);
+       pwrctrlpriv->rtw_workqueue = create_singlethread_workqueue("rtw_workqueue");
+       #endif //CONFIG_RESUME_IN_WORKQUEUE
+
+       #if defined(CONFIG_HAS_EARLYSUSPEND) || defined(CONFIG_ANDROID_POWER)
+       pwrctrlpriv->early_suspend.suspend = NULL;
+       rtw_register_early_suspend(pwrctrlpriv);
+       #endif //CONFIG_HAS_EARLYSUSPEND || CONFIG_ANDROID_POWER
+
+
+_func_exit_;
+
+}
+
+
+void rtw_free_pwrctrl_priv(PADAPTER adapter)
+{
+       struct pwrctrl_priv *pwrctrlpriv = &adapter->pwrctrlpriv;
+
+_func_enter_;
+
+       //_rtw_memset((unsigned char *)pwrctrlpriv, 0, sizeof(struct pwrctrl_priv));
+
+
+       #ifdef CONFIG_RESUME_IN_WORKQUEUE
+       if (pwrctrlpriv->rtw_workqueue) {
+               flush_workqueue(pwrctrlpriv->rtw_workqueue);
+               destroy_workqueue(pwrctrlpriv->rtw_workqueue);
+       }
+       #endif
+
+
+       #if defined(CONFIG_HAS_EARLYSUSPEND) || defined(CONFIG_ANDROID_POWER)
+       rtw_unregister_early_suspend(pwrctrlpriv);
+       #endif //CONFIG_HAS_EARLYSUSPEND || CONFIG_ANDROID_POWER
+
+       _free_pwrlock(&pwrctrlpriv->lock);
+
+_func_exit_;
+}
+
+#ifdef CONFIG_RESUME_IN_WORKQUEUE
+#if defined(CONFIG_USB_HCI) || defined(CONFIG_SDIO_HCI)
+extern int rtw_resume_process(_adapter *padapter);
+#endif
+static void resume_workitem_callback(struct work_struct *work)
+{
+       struct pwrctrl_priv *pwrpriv = container_of(work, struct pwrctrl_priv, resume_work);
+       _adapter *adapter = container_of(pwrpriv, _adapter, pwrctrlpriv);
+
+       DBG_871X("%s\n",__FUNCTION__);
+
+       #if defined(CONFIG_USB_HCI) || defined(CONFIG_SDIO_HCI)
+       rtw_resume_process(adapter);
+       #endif
+
+}
+
+void rtw_resume_in_workqueue(struct pwrctrl_priv *pwrpriv)
+{
+       // accquire system's suspend lock preventing from falliing asleep while resume in workqueue
+       rtw_lock_suspend();
+
+       #if 1
+       queue_work(pwrpriv->rtw_workqueue, &pwrpriv->resume_work);
+       #else
+       _set_workitem(&pwrpriv->resume_work);
+       #endif
+}
+#endif //CONFIG_RESUME_IN_WORKQUEUE
+
+#if defined(CONFIG_HAS_EARLYSUSPEND) || defined(CONFIG_ANDROID_POWER)
+inline bool rtw_is_earlysuspend_registered(struct pwrctrl_priv *pwrpriv)
+{
+       return (pwrpriv->early_suspend.suspend) ? _TRUE : _FALSE;
+}
+
+inline bool rtw_is_do_late_resume(struct pwrctrl_priv *pwrpriv)
+{
+       return (pwrpriv->do_late_resume) ? _TRUE : _FALSE;
+}
+
+inline void rtw_set_do_late_resume(struct pwrctrl_priv *pwrpriv, bool enable)
+{
+       pwrpriv->do_late_resume = enable;
+}
+#endif
+
+#ifdef CONFIG_HAS_EARLYSUSPEND
+#if defined(CONFIG_USB_HCI) || defined(CONFIG_SDIO_HCI)
+extern int rtw_resume_process(_adapter *padapter);
+#endif
+static void rtw_early_suspend(struct early_suspend *h)
+{
+       struct pwrctrl_priv *pwrpriv = container_of(h, struct pwrctrl_priv, early_suspend);
+       DBG_871X("%s\n",__FUNCTION__);
+
+       rtw_set_do_late_resume(pwrpriv, _FALSE);
+}
+
+static void rtw_late_resume(struct early_suspend *h)
+{
+       struct pwrctrl_priv *pwrpriv = container_of(h, struct pwrctrl_priv, early_suspend);
+       _adapter *adapter = container_of(pwrpriv, _adapter, pwrctrlpriv);
+
+       DBG_871X("%s\n",__FUNCTION__);
+       if(pwrpriv->do_late_resume) {
+               #if defined(CONFIG_USB_HCI) || defined(CONFIG_SDIO_HCI)
+               rtw_set_do_late_resume(pwrpriv, _FALSE);
+               rtw_resume_process(adapter);
+               #endif
+       }
+}
+
+void rtw_register_early_suspend(struct pwrctrl_priv *pwrpriv)
+{
+       _adapter *adapter = container_of(pwrpriv, _adapter, pwrctrlpriv);
+
+#if defined(CONFIG_CONCURRENT_MODE)
+       if (adapter->adapter_type != PRIMARY_ADAPTER)
+               return;
+#endif
+
+       DBG_871X("%s\n", __FUNCTION__);
+
+       //jeff: set the early suspend level before blank screen, so we wll do late resume after scree is lit
+       pwrpriv->early_suspend.level = EARLY_SUSPEND_LEVEL_BLANK_SCREEN - 20;
+       pwrpriv->early_suspend.suspend = rtw_early_suspend;
+       pwrpriv->early_suspend.resume = rtw_late_resume;
+       register_early_suspend(&pwrpriv->early_suspend);
+
+
+}
+
+void rtw_unregister_early_suspend(struct pwrctrl_priv *pwrpriv)
+{
+       _adapter *adapter = container_of(pwrpriv, _adapter, pwrctrlpriv);
+
+#if defined(CONFIG_CONCURRENT_MODE)
+       if (adapter->adapter_type != PRIMARY_ADAPTER)
+               return;
+#endif
+
+       DBG_871X("%s\n", __FUNCTION__);
+
+       rtw_set_do_late_resume(pwrpriv, _FALSE);
+
+       if (pwrpriv->early_suspend.suspend)
+               unregister_early_suspend(&pwrpriv->early_suspend);
+
+       pwrpriv->early_suspend.suspend = NULL;
+       pwrpriv->early_suspend.resume = NULL;
+}
+#endif //CONFIG_HAS_EARLYSUSPEND
+
+#ifdef CONFIG_ANDROID_POWER
+#if defined(CONFIG_USB_HCI) || defined(CONFIG_SDIO_HCI)
+extern int rtw_resume_process(PADAPTER padapter);
+#endif
+static void rtw_early_suspend(android_early_suspend_t *h)
+{
+       struct pwrctrl_priv *pwrpriv = container_of(h, struct pwrctrl_priv, early_suspend);
+       DBG_871X("%s\n",__FUNCTION__);
+
+       rtw_set_do_late_resume(pwrpriv, _FALSE);
+}
+
+static void rtw_late_resume(android_early_suspend_t *h)
+{
+       struct pwrctrl_priv *pwrpriv = container_of(h, struct pwrctrl_priv, early_suspend);
+       _adapter *adapter = container_of(pwrpriv, _adapter, pwrctrlpriv);
+
+       DBG_871X("%s\n",__FUNCTION__);
+       if(pwrpriv->do_late_resume) {
+               #if defined(CONFIG_USB_HCI) || defined(CONFIG_SDIO_HCI)
+               rtw_set_do_late_resume(pwrpriv, _FALSE);
+               rtw_resume_process(adapter);
+               #endif
+       }
+}
+
+void rtw_register_early_suspend(struct pwrctrl_priv *pwrpriv)
+{
+       _adapter *adapter = container_of(pwrpriv, _adapter, pwrctrlpriv);
+
+#if defined(CONFIG_CONCURRENT_MODE)
+       if (adapter->adapter_type != PRIMARY_ADAPTER)
+               return;
+#endif
+
+       DBG_871X("%s\n", __FUNCTION__);
+
+       //jeff: set the early suspend level before blank screen, so we wll do late resume after scree is lit
+       pwrpriv->early_suspend.level = ANDROID_EARLY_SUSPEND_LEVEL_BLANK_SCREEN - 20;
+       pwrpriv->early_suspend.suspend = rtw_early_suspend;
+       pwrpriv->early_suspend.resume = rtw_late_resume;
+       android_register_early_suspend(&pwrpriv->early_suspend);
+}
+
+void rtw_unregister_early_suspend(struct pwrctrl_priv *pwrpriv)
+{
+       _adapter *adapter = container_of(pwrpriv, _adapter, pwrctrlpriv);
+
+#if defined(CONFIG_CONCURRENT_MODE)
+       if (adapter->adapter_type != PRIMARY_ADAPTER)
+               return;
+#endif
+
+       DBG_871X("%s\n", __FUNCTION__);
+
+       rtw_set_do_late_resume(pwrpriv, _FALSE);
+
+       if (pwrpriv->early_suspend.suspend)
+               android_unregister_early_suspend(&pwrpriv->early_suspend);
+
+       pwrpriv->early_suspend.suspend = NULL;
+       pwrpriv->early_suspend.resume = NULL;
+}
+#endif //CONFIG_ANDROID_POWER
+
+u8 rtw_interface_ps_func(_adapter *padapter,HAL_INTF_PS_FUNC efunc_id,u8* val)
+{
+       u8 bResult = _TRUE;
+
+       rtw_hal_intf_ps_func(padapter,efunc_id,val);
+
+       return bResult;
+}
+
+
+inline void rtw_set_ips_deny(_adapter *padapter, u32 ms)
+{
+       struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
+       pwrpriv->ips_deny_time = rtw_get_current_time() + rtw_ms_to_systime(ms);
+}
+
+/*
+* rtw_pwr_wakeup - Wake the NIC up from: 1)IPS. 2)USB autosuspend
+* @adapter: pointer to _adapter structure
+* @ips_deffer_ms: the ms wiil prevent from falling into IPS after wakeup
+* Return _SUCCESS or _FAIL
+*/
+int _rtw_pwr_wakeup(_adapter *padapter, u32 ips_deffer_ms, const char *caller)
+{
+       struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+       int ret = _SUCCESS;
+       u32 start = rtw_get_current_time();
+
+#ifdef CONFIG_CONCURRENT_MODE
+       if (padapter->pbuddy_adapter)
+               LeaveAllPowerSaveMode(padapter->pbuddy_adapter);
+
+       if ((padapter->isprimary == _FALSE) && padapter->pbuddy_adapter){
+               padapter = padapter->pbuddy_adapter;
+               pwrpriv = &padapter->pwrctrlpriv;
+               pmlmepriv = &padapter->mlmepriv;
+       }
+#endif
+
+       if (pwrpriv->ips_deny_time < rtw_get_current_time() + rtw_ms_to_systime(ips_deffer_ms))
+               pwrpriv->ips_deny_time = rtw_get_current_time() + rtw_ms_to_systime(ips_deffer_ms);
+
+       if (pwrpriv->ps_processing) {
+               DBG_871X("%s wait ps_processing...\n", __func__);
+               while (pwrpriv->ps_processing && rtw_get_passing_time_ms(start) <= 3000)
+                       rtw_msleep_os(10);
+               if (pwrpriv->ps_processing)
+                       DBG_871X("%s wait ps_processing timeout\n", __func__);
+               else
+                       DBG_871X("%s wait ps_processing done\n", __func__);
+       }
+
+#ifdef DBG_CONFIG_ERROR_DETECT
+       if (rtw_hal_sreset_inprogress(padapter)) {
+               DBG_871X("%s wait sreset_inprogress...\n", __func__);
+               while (rtw_hal_sreset_inprogress(padapter) && rtw_get_passing_time_ms(start) <= 4000)
+                       rtw_msleep_os(10);
+               if (rtw_hal_sreset_inprogress(padapter))
+                       DBG_871X("%s wait sreset_inprogress timeout\n", __func__);
+               else
+                       DBG_871X("%s wait sreset_inprogress done\n", __func__);
+       }
+#endif
+
+       if (pwrpriv->bInternalAutoSuspend == _FALSE && pwrpriv->bInSuspend) {
+               DBG_871X("%s wait bInSuspend...\n", __func__);
+               while (pwrpriv->bInSuspend
+                       && ((rtw_get_passing_time_ms(start) <= 3000 && !rtw_is_do_late_resume(pwrpriv))
+                               || (rtw_get_passing_time_ms(start) <= 500 && rtw_is_do_late_resume(pwrpriv)))
+               ) {
+                       rtw_msleep_os(10);
+               }
+               if (pwrpriv->bInSuspend)
+                       DBG_871X("%s wait bInSuspend timeout\n", __func__);
+               else
+                       DBG_871X("%s wait bInSuspend done\n", __func__);
+       }
+
+       //System suspend is not allowed to wakeup
+       if((pwrpriv->bInternalAutoSuspend == _FALSE) && (_TRUE == pwrpriv->bInSuspend )){
+               ret = _FAIL;
+               goto exit;
+       }
+
+       //block???
+       if((pwrpriv->bInternalAutoSuspend == _TRUE)  && (padapter->net_closed == _TRUE)) {
+               ret = _FAIL;
+               goto exit;
+       }
+
+       //I think this should be check in IPS, LPS, autosuspend functions...
+       if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)
+       {
+               ret = _SUCCESS;
+               goto exit;
+       }
+
+       if(rf_off == pwrpriv->rf_pwrstate )
+       {
+#ifdef CONFIG_USB_HCI
+#ifdef CONFIG_AUTOSUSPEND
+                if(pwrpriv->brfoffbyhw==_TRUE)
+               {
+                       DBG_8192C("hw still in rf_off state ...........\n");
+                       ret = _FAIL;
+                       goto exit;
+               }
+               else if(padapter->registrypriv.usbss_enable)
+               {
+                       DBG_8192C("%s call autoresume_enter....\n",__FUNCTION__);
+                       if(_FAIL ==  autoresume_enter(padapter))
+                       {
+                               DBG_8192C("======> autoresume fail.............\n");
+                               ret = _FAIL;
+                               goto exit;
+                       }
+               }
+               else
+#endif
+#endif
+               {
+#ifdef CONFIG_IPS
+                       DBG_8192C("%s call ips_leave....\n",__FUNCTION__);
+                       if(_FAIL ==  ips_leave(padapter))
+                       {
+                               DBG_8192C("======> ips_leave fail.............\n");
+                               ret = _FAIL;
+                               goto exit;
+                       }
+#endif
+               }
+       }
+
+       //TODO: the following checking need to be merged...
+       if(padapter->bDriverStopped
+               || !padapter->bup
+               || !padapter->hw_init_completed
+       ){
+               DBG_8192C("%s: bDriverStopped=%d, bup=%d, hw_init_completed=%u\n"
+                       , caller
+                       , padapter->bDriverStopped
+                       , padapter->bup
+                       , padapter->hw_init_completed);
+               ret= _FALSE;
+               goto exit;
+       }
+
+exit:
+       if (pwrpriv->ips_deny_time < rtw_get_current_time() + rtw_ms_to_systime(ips_deffer_ms))
+               pwrpriv->ips_deny_time = rtw_get_current_time() + rtw_ms_to_systime(ips_deffer_ms);
+       return ret;
+
+}
+
+int rtw_pm_set_lps(_adapter *padapter, u8 mode)
+{
+       int     ret = 0;
+       struct pwrctrl_priv *pwrctrlpriv = &padapter->pwrctrlpriv;
+
+       if ( mode < PS_MODE_NUM )
+       {
+               if(pwrctrlpriv->power_mgnt !=mode)
+               {
+                       if(PS_MODE_ACTIVE == mode)
+                       {
+                               LeaveAllPowerSaveMode(padapter);
+                       }
+                       else
+                       {
+                               pwrctrlpriv->LpsIdleCount = 2;
+                       }
+                       pwrctrlpriv->power_mgnt = mode;
+                       pwrctrlpriv->bLeisurePs = (PS_MODE_ACTIVE != pwrctrlpriv->power_mgnt)?_TRUE:_FALSE;
+               }
+       }
+       else
+       {
+               ret = -EINVAL;
+       }
+
+       return ret;
+}
+
+int rtw_pm_set_ips(_adapter *padapter, u8 mode)
+{
+       struct pwrctrl_priv *pwrctrlpriv = &padapter->pwrctrlpriv;
+
+       if( mode == IPS_NORMAL || mode == IPS_LEVEL_2 ) {
+               rtw_ips_mode_req(pwrctrlpriv, mode);
+               DBG_871X("%s %s\n", __FUNCTION__, mode == IPS_NORMAL?"IPS_NORMAL":"IPS_LEVEL_2");
+               return 0;
+       }
+       else if(mode ==IPS_NONE){
+               rtw_ips_mode_req(pwrctrlpriv, mode);
+               DBG_871X("%s %s\n", __FUNCTION__, "IPS_NONE");
+               if((padapter->bSurpriseRemoved ==0)&&(_FAIL == rtw_pwr_wakeup(padapter)) )
+                       return -EFAULT;
+       }
+       else {
+               return -EINVAL;
+       }
+       return 0;
+}
diff --git a/drivers/net/wireless/realtek/rtl8192cu/core/rtw_recv.c b/drivers/net/wireless/realtek/rtl8192cu/core/rtw_recv.c
new file mode 100644 (file)
index 0000000..63aba4a
--- /dev/null
@@ -0,0 +1,4286 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#define _RTW_RECV_C_
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <recv_osdep.h>
+#include <mlme_osdep.h>
+#include <ip.h>
+#include <if_ether.h>
+#include <ethernet.h>
+
+#ifdef CONFIG_USB_HCI
+#include <usb_ops.h>
+#endif
+
+#if defined (PLATFORM_LINUX) && defined (PLATFORM_WINDOWS)
+
+#error "Shall be Linux or Windows, but not both!\n"
+
+#endif
+
+#include <wifi.h>
+#include <circ_buf.h>
+
+#ifdef CONFIG_NEW_SIGNAL_STAT_PROCESS
+void rtw_signal_stat_timer_hdl(RTW_TIMER_HDL_ARGS);
+#endif //CONFIG_NEW_SIGNAL_STAT_PROCESS
+
+
+void _rtw_init_sta_recv_priv(struct sta_recv_priv *psta_recvpriv)
+{
+
+
+_func_enter_;
+
+       _rtw_memset((u8 *)psta_recvpriv, 0, sizeof (struct sta_recv_priv));
+
+       _rtw_spinlock_init(&psta_recvpriv->lock);
+
+       //for(i=0; i<MAX_RX_NUMBLKS; i++)
+       //      _rtw_init_queue(&psta_recvpriv->blk_strms[i]);
+
+       _rtw_init_queue(&psta_recvpriv->defrag_q);
+
+_func_exit_;
+
+}
+
+sint _rtw_init_recv_priv(struct recv_priv *precvpriv, _adapter *padapter)
+{
+       sint i;
+
+       union recv_frame *precvframe;
+
+       sint    res=_SUCCESS;
+
+_func_enter_;
+
+       // We don't need to memset padapter->XXX to zero, because adapter is allocated by rtw_zvmalloc().
+       //_rtw_memset((unsigned char *)precvpriv, 0, sizeof (struct  recv_priv));
+
+       _rtw_spinlock_init(&precvpriv->lock);
+
+       _rtw_init_queue(&precvpriv->free_recv_queue);
+       _rtw_init_queue(&precvpriv->recv_pending_queue);
+       _rtw_init_queue(&precvpriv->uc_swdec_pending_queue);
+
+       precvpriv->adapter = padapter;
+
+       precvpriv->free_recvframe_cnt = NR_RECVFRAME;
+
+       rtw_os_recv_resource_init(precvpriv, padapter);
+
+       precvpriv->pallocated_frame_buf = rtw_zvmalloc(NR_RECVFRAME * sizeof(union recv_frame) + RXFRAME_ALIGN_SZ);
+
+       if(precvpriv->pallocated_frame_buf==NULL){
+               res= _FAIL;
+               goto exit;
+       }
+       //_rtw_memset(precvpriv->pallocated_frame_buf, 0, NR_RECVFRAME * sizeof(union recv_frame) + RXFRAME_ALIGN_SZ);
+
+       precvpriv->precv_frame_buf = (u8 *)N_BYTE_ALIGMENT((SIZE_PTR)(precvpriv->pallocated_frame_buf), RXFRAME_ALIGN_SZ);
+       //precvpriv->precv_frame_buf = precvpriv->pallocated_frame_buf + RXFRAME_ALIGN_SZ -
+       //                                              ((SIZE_PTR) (precvpriv->pallocated_frame_buf) &(RXFRAME_ALIGN_SZ-1));
+
+       precvframe = (union recv_frame*) precvpriv->precv_frame_buf;
+
+
+       for(i=0; i < NR_RECVFRAME ; i++)
+       {
+               _rtw_init_listhead(&(precvframe->u.list));
+
+               rtw_list_insert_tail(&(precvframe->u.list), &(precvpriv->free_recv_queue.queue));
+
+               res = rtw_os_recv_resource_alloc(padapter, precvframe);
+
+               precvframe->u.hdr.adapter =padapter;
+               precvframe++;
+
+       }
+
+#ifdef CONFIG_USB_HCI
+
+       precvpriv->rx_pending_cnt=1;
+
+       _rtw_init_sema(&precvpriv->allrxreturnevt, 0);
+
+#endif
+
+       res = rtw_hal_init_recv_priv(padapter);
+
+       precvpriv->recvbuf_skb_alloc_fail_cnt = 0;
+       precvpriv->recvbuf_null_cnt = 0;
+       precvpriv->read_port_complete_EINPROGRESS_cnt = 0;
+       precvpriv->read_port_complete_other_urb_err_cnt = 0;
+
+#ifdef CONFIG_NEW_SIGNAL_STAT_PROCESS
+       #ifdef PLATFORM_LINUX
+       _init_timer(&precvpriv->signal_stat_timer, padapter->pnetdev, RTW_TIMER_HDL_NAME(signal_stat), padapter);
+       #elif defined(PLATFORM_OS_CE) || defined(PLATFORM_WINDOWS)
+       _init_timer(&precvpriv->signal_stat_timer, padapter->hndis_adapter, RTW_TIMER_HDL_NAME(signal_stat), padapter);
+       #endif
+
+       precvpriv->signal_stat_sampling_interval = 1000; //ms
+       //precvpriv->signal_stat_converging_constant = 5000; //ms
+
+       rtw_set_signal_stat_timer(precvpriv);
+#endif //CONFIG_NEW_SIGNAL_STAT_PROCESS
+
+exit:
+
+_func_exit_;
+
+       return res;
+
+}
+
+void rtw_mfree_recv_priv_lock(struct recv_priv *precvpriv);
+void rtw_mfree_recv_priv_lock(struct recv_priv *precvpriv)
+{
+       _rtw_spinlock_free(&precvpriv->lock);
+#ifdef CONFIG_RECV_THREAD_MODE
+       _rtw_free_sema(&precvpriv->recv_sema);
+       _rtw_free_sema(&precvpriv->terminate_recvthread_sema);
+#endif
+
+       _rtw_spinlock_free(&precvpriv->free_recv_queue.lock);
+       _rtw_spinlock_free(&precvpriv->recv_pending_queue.lock);
+
+       _rtw_spinlock_free(&precvpriv->free_recv_buf_queue.lock);
+
+#ifdef CONFIG_USE_USB_BUFFER_ALLOC_RX
+       _rtw_spinlock_free(&precvpriv->recv_buf_pending_queue.lock);
+#endif // CONFIG_USE_USB_BUFFER_ALLOC_RX
+}
+
+void _rtw_free_recv_priv (struct recv_priv *precvpriv)
+{
+       _adapter        *padapter = precvpriv->adapter;
+
+_func_enter_;
+
+       rtw_free_uc_swdec_pending_queue(padapter);
+
+       rtw_mfree_recv_priv_lock(precvpriv);
+
+       rtw_os_recv_resource_free(precvpriv);
+
+       if(precvpriv->pallocated_frame_buf) {
+               rtw_vmfree(precvpriv->pallocated_frame_buf, NR_RECVFRAME * sizeof(union recv_frame) + RXFRAME_ALIGN_SZ);
+       }
+
+       rtw_hal_free_recv_priv(padapter);
+
+_func_exit_;
+
+}
+
+union recv_frame *_rtw_alloc_recvframe (_queue *pfree_recv_queue)
+{
+
+       union recv_frame  *precvframe;
+       _list   *plist, *phead;
+       _adapter *padapter;
+       struct recv_priv *precvpriv;
+_func_enter_;
+
+       if(_rtw_queue_empty(pfree_recv_queue) == _TRUE)
+       {
+               precvframe = NULL;
+       }
+       else
+       {
+               phead = get_list_head(pfree_recv_queue);
+
+               plist = get_next(phead);
+
+               precvframe = LIST_CONTAINOR(plist, union recv_frame, u);
+
+               rtw_list_delete(&precvframe->u.hdr.list);
+               padapter=precvframe->u.hdr.adapter;
+               if(padapter !=NULL){
+                       precvpriv=&padapter->recvpriv;
+                       if(pfree_recv_queue == &precvpriv->free_recv_queue)
+                               precvpriv->free_recvframe_cnt--;
+               }
+       }
+
+_func_exit_;
+
+       return precvframe;
+
+}
+
+union recv_frame *rtw_alloc_recvframe (_queue *pfree_recv_queue)
+{
+       _irqL irqL;
+       union recv_frame  *precvframe;
+
+       _enter_critical_bh(&pfree_recv_queue->lock, &irqL);
+
+       precvframe = _rtw_alloc_recvframe(pfree_recv_queue);
+
+       _exit_critical_bh(&pfree_recv_queue->lock, &irqL);
+
+       return precvframe;
+}
+
+void rtw_init_recvframe(union recv_frame *precvframe, struct recv_priv *precvpriv)
+{
+       /* Perry: This can be removed */
+       _rtw_init_listhead(&precvframe->u.hdr.list);
+
+       precvframe->u.hdr.len=0;
+}
+
+int rtw_free_recvframe(union recv_frame *precvframe, _queue *pfree_recv_queue)
+{
+       _irqL irqL;
+       _adapter *padapter=precvframe->u.hdr.adapter;
+       struct recv_priv *precvpriv = &padapter->recvpriv;
+
+_func_enter_;
+
+#ifdef CONFIG_CONCURRENT_MODE
+       if(padapter->adapter_type > PRIMARY_ADAPTER)
+       {
+               padapter = padapter->pbuddy_adapter;//get primary_padapter
+               precvpriv = &padapter->recvpriv;
+               pfree_recv_queue = &precvpriv->free_recv_queue;
+               precvframe->u.hdr.adapter = padapter;
+       }
+#endif
+
+
+#ifdef PLATFORM_WINDOWS
+       rtw_os_read_port(padapter, precvframe->u.hdr.precvbuf);
+#endif
+
+#if defined(PLATFORM_LINUX) || defined(PLATFORM_FREEBSD)
+
+       if(precvframe->u.hdr.pkt)
+       {
+#ifdef CONFIG_BSD_RX_USE_MBUF
+               m_freem(precvframe->u.hdr.pkt);
+#else  // CONFIG_BSD_RX_USE_MBUF
+               rtw_skb_free(precvframe->u.hdr.pkt);//free skb by driver
+#endif // CONFIG_BSD_RX_USE_MBUF
+               precvframe->u.hdr.pkt = NULL;
+       }
+
+#endif //defined(PLATFORM_LINUX) || defined(PLATFORM_FREEBSD)
+
+       _enter_critical_bh(&pfree_recv_queue->lock, &irqL);
+
+       rtw_list_delete(&(precvframe->u.hdr.list));
+
+       rtw_list_insert_tail(&(precvframe->u.hdr.list), get_list_head(pfree_recv_queue));
+
+       if(padapter !=NULL){
+               if(pfree_recv_queue == &precvpriv->free_recv_queue)
+                               precvpriv->free_recvframe_cnt++;
+       }
+
+      _exit_critical_bh(&pfree_recv_queue->lock, &irqL);
+
+_func_exit_;
+
+       return _SUCCESS;
+
+}
+
+
+
+
+sint _rtw_enqueue_recvframe(union recv_frame *precvframe, _queue *queue)
+{
+
+       _adapter *padapter=precvframe->u.hdr.adapter;
+       struct recv_priv *precvpriv = &padapter->recvpriv;
+
+_func_enter_;
+
+       //_rtw_init_listhead(&(precvframe->u.hdr.list));
+       rtw_list_delete(&(precvframe->u.hdr.list));
+
+
+       rtw_list_insert_tail(&(precvframe->u.hdr.list), get_list_head(queue));
+
+       if (padapter != NULL) {
+               if (queue == &precvpriv->free_recv_queue)
+                       precvpriv->free_recvframe_cnt++;
+       }
+
+_func_exit_;
+
+       return _SUCCESS;
+}
+
+sint rtw_enqueue_recvframe(union recv_frame *precvframe, _queue *queue)
+{
+       sint ret;
+       _irqL irqL;
+
+       //_spinlock(&pfree_recv_queue->lock);
+       _enter_critical_bh(&queue->lock, &irqL);
+       ret = _rtw_enqueue_recvframe(precvframe, queue);
+       //_rtw_spinunlock(&pfree_recv_queue->lock);
+       _exit_critical_bh(&queue->lock, &irqL);
+
+       return ret;
+}
+
+/*
+sint   rtw_enqueue_recvframe(union recv_frame *precvframe, _queue *queue)
+{
+       return rtw_free_recvframe(precvframe, queue);
+}
+*/
+
+
+
+
+/*
+caller : defrag ; recvframe_chk_defrag in recv_thread  (passive)
+pframequeue: defrag_queue : will be accessed in recv_thread  (passive)
+
+using spinlock to protect
+
+*/
+
+void rtw_free_recvframe_queue(_queue *pframequeue,  _queue *pfree_recv_queue)
+{
+       union   recv_frame      *precvframe;
+       _list   *plist, *phead;
+
+_func_enter_;
+       _rtw_spinlock(&pframequeue->lock);
+
+       phead = get_list_head(pframequeue);
+       plist = get_next(phead);
+
+       while(rtw_end_of_queue_search(phead, plist) == _FALSE)
+       {
+               precvframe = LIST_CONTAINOR(plist, union recv_frame, u);
+
+               plist = get_next(plist);
+
+               //rtw_list_delete(&precvframe->u.hdr.list); // will do this in rtw_free_recvframe()
+
+               rtw_free_recvframe(precvframe, pfree_recv_queue);
+       }
+
+       _rtw_spinunlock(&pframequeue->lock);
+
+_func_exit_;
+
+}
+
+u32 rtw_free_uc_swdec_pending_queue(_adapter *adapter)
+{
+       u32 cnt = 0;
+       union recv_frame *pending_frame;
+       while((pending_frame=rtw_alloc_recvframe(&adapter->recvpriv.uc_swdec_pending_queue))) {
+               rtw_free_recvframe(pending_frame, &adapter->recvpriv.free_recv_queue);
+               DBG_871X("%s: dequeue uc_swdec_pending_queue\n", __func__);
+               cnt++;
+       }
+
+       return cnt;
+}
+
+
+sint rtw_enqueue_recvbuf_to_head(struct recv_buf *precvbuf, _queue *queue)
+{
+       _irqL irqL;
+
+       _enter_critical(&queue->lock, &irqL);
+
+       rtw_list_delete(&precvbuf->list);
+       rtw_list_insert_head(&precvbuf->list, get_list_head(queue));
+
+       _exit_critical(&queue->lock, &irqL);
+
+       return _SUCCESS;
+}
+
+sint rtw_enqueue_recvbuf(struct recv_buf *precvbuf, _queue *queue)
+{
+       _irqL irqL;
+
+       _enter_critical(&queue->lock, &irqL);
+
+       rtw_list_delete(&precvbuf->list);
+
+       rtw_list_insert_tail(&precvbuf->list, get_list_head(queue));
+
+       _exit_critical(&queue->lock, &irqL);
+
+
+       return _SUCCESS;
+
+}
+
+struct recv_buf *rtw_dequeue_recvbuf (_queue *queue)
+{
+       _irqL irqL;
+       struct recv_buf *precvbuf;
+       _list   *plist, *phead;
+
+       _enter_critical(&queue->lock, &irqL);
+
+       if(_rtw_queue_empty(queue) == _TRUE)
+       {
+               precvbuf = NULL;
+       }
+       else
+       {
+               phead = get_list_head(queue);
+
+               plist = get_next(phead);
+
+               precvbuf = LIST_CONTAINOR(plist, struct recv_buf, list);
+
+               rtw_list_delete(&precvbuf->list);
+
+       }
+
+       _exit_critical(&queue->lock, &irqL);
+
+
+       return precvbuf;
+
+}
+
+sint recvframe_chkmic(_adapter *adapter,  union recv_frame *precvframe);
+sint recvframe_chkmic(_adapter *adapter,  union recv_frame *precvframe){
+
+       sint    i,res=_SUCCESS;
+       u32     datalen;
+       u8      miccode[8];
+       u8      bmic_err=_FALSE,brpt_micerror = _TRUE;
+       u8      *pframe, *payload,*pframemic;
+       u8      *mickey;
+       //u8    *iv,rxdata_key_idx=0;
+       struct  sta_info                *stainfo;
+       struct  rx_pkt_attrib   *prxattrib=&precvframe->u.hdr.attrib;
+       struct  security_priv   *psecuritypriv=&adapter->securitypriv;
+
+       struct mlme_ext_priv    *pmlmeext = &adapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+_func_enter_;
+
+       stainfo=rtw_get_stainfo(&adapter->stapriv ,&prxattrib->ta[0]);
+
+       if(prxattrib->encrypt ==_TKIP_)
+       {
+               RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("\n recvframe_chkmic:prxattrib->encrypt ==_TKIP_\n"));
+               RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("\n recvframe_chkmic:da=0x%02x:0x%02x:0x%02x:0x%02x:0x%02x:0x%02x\n",
+                       prxattrib->ra[0],prxattrib->ra[1],prxattrib->ra[2],prxattrib->ra[3],prxattrib->ra[4],prxattrib->ra[5]));
+
+               //calculate mic code
+               if(stainfo!= NULL)
+               {
+                       if(IS_MCAST(prxattrib->ra))
+                       {
+                               //mickey=&psecuritypriv->dot118021XGrprxmickey.skey[0];
+                               //iv = precvframe->u.hdr.rx_data+prxattrib->hdrlen;
+                               //rxdata_key_idx =( ((iv[3])>>6)&0x3) ;
+                               mickey=&psecuritypriv->dot118021XGrprxmickey[prxattrib->key_index].skey[0];
+
+                               RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("\n recvframe_chkmic: bcmc key \n"));
+                               //DBG_871X("\n recvframe_chkmic: bcmc key psecuritypriv->dot118021XGrpKeyid(%d),pmlmeinfo->key_index(%d) ,recv key_id(%d)\n",
+                               //                                                              psecuritypriv->dot118021XGrpKeyid,pmlmeinfo->key_index,rxdata_key_idx);
+
+                               if(psecuritypriv->binstallGrpkey==_FALSE)
+                               {
+                                       res=_FAIL;
+                                       RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("\n recvframe_chkmic:didn't install group key!!!!!!!!!!\n"));
+                                       DBG_871X("\n recvframe_chkmic:didn't install group key!!!!!!!!!!\n");
+                                       goto exit;
+                               }
+                       }
+                       else{
+                               mickey=&stainfo->dot11tkiprxmickey.skey[0];
+                               RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("\n recvframe_chkmic: unicast key \n"));
+                       }
+
+                       datalen=precvframe->u.hdr.len-prxattrib->hdrlen-prxattrib->iv_len-prxattrib->icv_len-8;//icv_len included the mic code
+                       pframe=precvframe->u.hdr.rx_data;
+                       payload=pframe+prxattrib->hdrlen+prxattrib->iv_len;
+
+                       RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("\n prxattrib->iv_len=%d prxattrib->icv_len=%d\n",prxattrib->iv_len,prxattrib->icv_len));
+
+                       //rtw_seccalctkipmic(&stainfo->dot11tkiprxmickey.skey[0],pframe,payload, datalen ,&miccode[0],(unsigned char)prxattrib->priority); //care the length of the data
+
+                       rtw_seccalctkipmic(mickey,pframe,payload, datalen ,&miccode[0],(unsigned char)prxattrib->priority); //care the length of the data
+
+                       pframemic=payload+datalen;
+
+                       bmic_err=_FALSE;
+
+                       for(i=0;i<8;i++){
+                               if(miccode[i] != *(pframemic+i)){
+                                       RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("recvframe_chkmic:miccode[%d](%02x) != *(pframemic+%d)(%02x) ",i,miccode[i],i,*(pframemic+i)));
+                                       bmic_err=_TRUE;
+                               }
+                       }
+
+
+                       if(bmic_err==_TRUE){
+
+                               RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("\n *(pframemic-8)-*(pframemic-1)=0x%02x:0x%02x:0x%02x:0x%02x:0x%02x:0x%02x:0x%02x:0x%02x\n",
+                                       *(pframemic-8),*(pframemic-7),*(pframemic-6),*(pframemic-5),*(pframemic-4),*(pframemic-3),*(pframemic-2),*(pframemic-1)));
+                               RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("\n *(pframemic-16)-*(pframemic-9)=0x%02x:0x%02x:0x%02x:0x%02x:0x%02x:0x%02x:0x%02x:0x%02x\n",
+                                       *(pframemic-16),*(pframemic-15),*(pframemic-14),*(pframemic-13),*(pframemic-12),*(pframemic-11),*(pframemic-10),*(pframemic-9)));
+
+                               {
+                                       uint i;
+                                       RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("\n ======demp packet (len=%d)======\n",precvframe->u.hdr.len));
+                                       for(i=0;i<precvframe->u.hdr.len;i=i+8){
+                                               RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("0x%02x:0x%02x:0x%02x:0x%02x:0x%02x:0x%02x:0x%02x:0x%02x",
+                                                       *(precvframe->u.hdr.rx_data+i),*(precvframe->u.hdr.rx_data+i+1),
+                                                       *(precvframe->u.hdr.rx_data+i+2),*(precvframe->u.hdr.rx_data+i+3),
+                                                       *(precvframe->u.hdr.rx_data+i+4),*(precvframe->u.hdr.rx_data+i+5),
+                                                       *(precvframe->u.hdr.rx_data+i+6),*(precvframe->u.hdr.rx_data+i+7)));
+                                       }
+                                       RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("\n ======demp packet end [len=%d]======\n",precvframe->u.hdr.len));
+                                       RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("\n hrdlen=%d, \n",prxattrib->hdrlen));
+                               }
+
+                               RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("ra=0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x psecuritypriv->binstallGrpkey=%d ",
+                                       prxattrib->ra[0],prxattrib->ra[1],prxattrib->ra[2],
+                                       prxattrib->ra[3],prxattrib->ra[4],prxattrib->ra[5],psecuritypriv->binstallGrpkey));
+
+                               // double check key_index for some timing issue ,
+                               // cannot compare with psecuritypriv->dot118021XGrpKeyid also cause timing issue
+                               if((IS_MCAST(prxattrib->ra)==_TRUE)  && (prxattrib->key_index != pmlmeinfo->key_index ))
+                                       brpt_micerror = _FALSE;
+
+                               if(brpt_micerror == _TRUE)
+                               {
+                                       rtw_handle_tkip_mic_err(adapter,(u8)IS_MCAST(prxattrib->ra));
+                                       RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,(" mic error :prxattrib->bdecrypted=%d \n", brpt_micerror));
+                                       DBG_871X(" mic error :brpt_micerror=%d\n", brpt_micerror);
+                               }
+
+                               res=_FAIL;
+
+                       }
+                       else{
+                               //mic checked ok
+                               if((psecuritypriv->bcheck_grpkey ==_FALSE)&&(IS_MCAST(prxattrib->ra)==_TRUE)){
+                                       psecuritypriv->bcheck_grpkey =_TRUE;
+                                       RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("psecuritypriv->bcheck_grpkey =_TRUE"));
+                               }
+                       }
+
+               }
+               else
+               {
+                       RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("recvframe_chkmic: rtw_get_stainfo==NULL!!!\n"));
+               }
+
+               recvframe_pull_tail(precvframe, 8);
+
+       }
+
+exit:
+
+_func_exit_;
+
+       return res;
+
+}
+
+//decrypt and set the ivlen,icvlen of the recv_frame
+union recv_frame * decryptor(_adapter *padapter,union recv_frame *precv_frame);
+union recv_frame * decryptor(_adapter *padapter,union recv_frame *precv_frame)
+{
+
+       struct rx_pkt_attrib *prxattrib = &precv_frame->u.hdr.attrib;
+       struct security_priv *psecuritypriv=&padapter->securitypriv;
+       union recv_frame *return_packet=precv_frame;
+       u32      res=_SUCCESS;
+_func_enter_;
+
+       RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("prxstat->decrypted=%x prxattrib->encrypt = 0x%03x\n",prxattrib->bdecrypted,prxattrib->encrypt));
+
+       if(prxattrib->encrypt>0)
+       {
+               u8 *iv = precv_frame->u.hdr.rx_data+prxattrib->hdrlen;
+               prxattrib->key_index = ( ((iv[3])>>6)&0x3) ;
+
+               if(prxattrib->key_index > WEP_KEYS)
+               {
+                       DBG_871X("prxattrib->key_index(%d) > WEP_KEYS \n", prxattrib->key_index);
+
+                       switch(prxattrib->encrypt){
+                               case _WEP40_:
+                               case _WEP104_:
+                                       prxattrib->key_index = psecuritypriv->dot11PrivacyKeyIndex;
+                                       break;
+                               case _TKIP_:
+                               case _AES_:
+                               default:
+                                       prxattrib->key_index = psecuritypriv->dot118021XGrpKeyid;
+                                       break;
+                       }
+               }
+       }
+
+       if((prxattrib->encrypt>0) && ((prxattrib->bdecrypted==0) ||(psecuritypriv->sw_decrypt==_TRUE)))
+       {
+
+#ifdef CONFIG_CONCURRENT_MODE
+               if(!IS_MCAST(prxattrib->ra))//bc/mc packets use sw decryption for concurrent mode
+#endif
+               psecuritypriv->hw_decrypted=_FALSE;
+
+               #ifdef DBG_RX_DECRYPTOR
+               DBG_871X("prxstat->bdecrypted:%d,  prxattrib->encrypt:%d,  Setting psecuritypriv->hw_decrypted = %d\n"
+                       , prxattrib->bdecrypted ,prxattrib->encrypt, psecuritypriv->hw_decrypted);
+               #endif
+
+               switch(prxattrib->encrypt){
+               case _WEP40_:
+               case _WEP104_:
+                       rtw_wep_decrypt(padapter, (u8 *)precv_frame);
+                       break;
+               case _TKIP_:
+                       res = rtw_tkip_decrypt(padapter, (u8 *)precv_frame);
+                       break;
+               case _AES_:
+                       res = rtw_aes_decrypt(padapter, (u8 * )precv_frame);
+                       break;
+               default:
+                               break;
+               }
+       }
+       else if(prxattrib->bdecrypted==1
+               && prxattrib->encrypt >0
+               && (psecuritypriv->busetkipkey==1 || prxattrib->encrypt !=_TKIP_ )
+               )
+       {
+#if 0
+               if((prxstat->icv==1)&&(prxattrib->encrypt!=_AES_))
+               {
+                       psecuritypriv->hw_decrypted=_FALSE;
+
+                       RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("psecuritypriv->hw_decrypted=_FALSE"));
+
+                       rtw_free_recvframe(precv_frame, &padapter->recvpriv.free_recv_queue);
+
+                       return_packet=NULL;
+
+               }
+               else
+#endif
+               {
+                       psecuritypriv->hw_decrypted=_TRUE;
+                       #ifdef DBG_RX_DECRYPTOR
+                       DBG_871X("prxstat->bdecrypted:%d,  prxattrib->encrypt:%d,  Setting psecuritypriv->hw_decrypted = %d\n"
+                       , prxattrib->bdecrypted ,prxattrib->encrypt, psecuritypriv->hw_decrypted);
+                       #endif
+
+               }
+       }
+       else {
+               #ifdef DBG_RX_DECRYPTOR
+               DBG_871X("prxstat->bdecrypted:%d,  prxattrib->encrypt:%d,  psecuritypriv->hw_decrypted:%d\n"
+               , prxattrib->bdecrypted ,prxattrib->encrypt, psecuritypriv->hw_decrypted);
+               #endif
+       }
+
+       if(res == _FAIL)
+       {
+               rtw_free_recvframe(return_packet,&padapter->recvpriv.free_recv_queue);
+               return_packet = NULL;
+
+       }
+       //recvframe_chkmic(adapter, precv_frame);   //move to recvframme_defrag function
+
+_func_exit_;
+
+       return return_packet;
+
+}
+//###set the security information in the recv_frame
+union recv_frame * portctrl(_adapter *adapter,union recv_frame * precv_frame);
+union recv_frame * portctrl(_adapter *adapter,union recv_frame * precv_frame)
+{
+       u8   *psta_addr,*ptr;
+       uint  auth_alg;
+       struct recv_frame_hdr *pfhdr;
+       struct sta_info * psta;
+       struct sta_priv *pstapriv ;
+       union recv_frame * prtnframe;
+       u16     ether_type=0;
+       u16  eapol_type = 0x888e;//for Funia BD's WPA issue
+       struct rx_pkt_attrib *pattrib = & precv_frame->u.hdr.attrib;
+
+_func_enter_;
+
+       pstapriv = &adapter->stapriv;
+       ptr = get_recvframe_data(precv_frame);
+       pfhdr = &precv_frame->u.hdr;
+       psta_addr = pfhdr->attrib.ta;
+       psta = rtw_get_stainfo(pstapriv, psta_addr);
+
+       auth_alg = adapter->securitypriv.dot11AuthAlgrthm;
+
+       RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("########portctrl:adapter->securitypriv.dot11AuthAlgrthm= 0x%d\n",adapter->securitypriv.dot11AuthAlgrthm));
+
+       if(auth_alg==2)
+       {
+               if ((psta!=NULL) && (psta->ieee8021x_blocked))
+               {
+                       //blocked
+                       //only accept EAPOL frame
+                       RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("########portctrl:psta->ieee8021x_blocked==1\n"));
+
+                       prtnframe=precv_frame;
+
+                       //get ether_type
+                       ptr=ptr+pfhdr->attrib.hdrlen+pfhdr->attrib.iv_len+LLC_HEADER_SIZE;
+                       _rtw_memcpy(&ether_type,ptr, 2);
+                       ether_type= ntohs((unsigned short )ether_type);
+
+                       if (ether_type == eapol_type) {
+                               prtnframe=precv_frame;
+                       }
+                       else {
+                               //free this frame
+                               rtw_free_recvframe(precv_frame, &adapter->recvpriv.free_recv_queue);
+                               prtnframe=NULL;
+                       }
+               }
+               else
+               {
+                       //allowed
+                       //check decryption status, and decrypt the frame if needed
+                       RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("########portctrl:psta->ieee8021x_blocked==0\n"));
+                       RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("portctrl:precv_frame->hdr.attrib.privacy=%x\n",precv_frame->u.hdr.attrib.privacy));
+
+                       if(pattrib->bdecrypted==0)
+                               RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("portctrl:prxstat->decrypted=%x\n", pattrib->bdecrypted));
+
+                       prtnframe=precv_frame;
+                       //check is the EAPOL frame or not (Rekey)
+                       if(ether_type == eapol_type){
+
+                               RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("########portctrl:ether_type == 0x888e\n"));
+                               //check Rekey
+
+                               prtnframe=precv_frame;
+                       }
+                       else{
+                               RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("########portctrl:ether_type = 0x%.4x\n",ether_type));
+                       }
+               }
+       }
+       else
+       {
+               prtnframe=precv_frame;
+       }
+
+_func_exit_;
+
+               return prtnframe;
+
+}
+
+sint recv_decache(union recv_frame *precv_frame, u8 bretry, struct stainfo_rxcache *prxcache);
+sint recv_decache(union recv_frame *precv_frame, u8 bretry, struct stainfo_rxcache *prxcache)
+{
+       sint tid = precv_frame->u.hdr.attrib.priority;
+
+       u16 seq_ctrl = ( (precv_frame->u.hdr.attrib.seq_num&0xffff) << 4) |
+               (precv_frame->u.hdr.attrib.frag_num & 0xf);
+
+_func_enter_;
+
+       if(tid>15)
+       {
+               RT_TRACE(_module_rtl871x_recv_c_, _drv_notice_, ("recv_decache, (tid>15)! seq_ctrl=0x%x, tid=0x%x\n", seq_ctrl, tid));
+
+               return _FAIL;
+       }
+
+       if(1)//if(bretry)
+       {
+               if(seq_ctrl == prxcache->tid_rxseq[tid])
+               {
+                       RT_TRACE(_module_rtl871x_recv_c_, _drv_notice_, ("recv_decache, seq_ctrl=0x%x, tid=0x%x, tid_rxseq=0x%x\n", seq_ctrl, tid, prxcache->tid_rxseq[tid]));
+
+                       return _FAIL;
+               }
+       }
+
+       prxcache->tid_rxseq[tid] = seq_ctrl;
+
+_func_exit_;
+
+       return _SUCCESS;
+
+}
+
+void process_pwrbit_data(_adapter *padapter, union recv_frame *precv_frame);
+void process_pwrbit_data(_adapter *padapter, union recv_frame *precv_frame)
+{
+#ifdef CONFIG_AP_MODE
+       unsigned char pwrbit;
+       u8 *ptr = precv_frame->u.hdr.rx_data;
+       struct rx_pkt_attrib *pattrib = &precv_frame->u.hdr.attrib;
+       struct sta_priv *pstapriv = &padapter->stapriv;
+       struct sta_info *psta=NULL;
+
+       psta = rtw_get_stainfo(pstapriv, pattrib->src);
+
+       pwrbit = GetPwrMgt(ptr);
+
+       if(psta)
+       {
+               if(pwrbit)
+               {
+                       if(!(psta->state & WIFI_SLEEP_STATE))
+                       {
+                               //psta->state |= WIFI_SLEEP_STATE;
+                               //pstapriv->sta_dz_bitmap |= BIT(psta->aid);
+
+                               stop_sta_xmit(padapter, psta);
+
+                               //DBG_871X("to sleep, sta_dz_bitmap=%x\n", pstapriv->sta_dz_bitmap);
+                       }
+               }
+               else
+               {
+                       if(psta->state & WIFI_SLEEP_STATE)
+                       {
+                               //psta->state ^= WIFI_SLEEP_STATE;
+                               //pstapriv->sta_dz_bitmap &= ~BIT(psta->aid);
+
+                               wakeup_sta_to_xmit(padapter, psta);
+
+                               //DBG_871X("to wakeup, sta_dz_bitmap=%x\n", pstapriv->sta_dz_bitmap);
+                       }
+               }
+
+       }
+
+#endif
+}
+
+void process_wmmps_data(_adapter *padapter, union recv_frame *precv_frame);
+void process_wmmps_data(_adapter *padapter, union recv_frame *precv_frame)
+{
+#ifdef CONFIG_AP_MODE
+       struct rx_pkt_attrib *pattrib = &precv_frame->u.hdr.attrib;
+       struct sta_priv *pstapriv = &padapter->stapriv;
+       struct sta_info *psta=NULL;
+
+       psta = rtw_get_stainfo(pstapriv, pattrib->src);
+
+       if(!psta) return;
+
+#ifdef CONFIG_TDLS
+       if( !(psta->tdls_sta_state & TDLS_LINKED_STATE ) )
+       {
+#endif //CONFIG_TDLS
+
+       if(!psta->qos_option)
+               return;
+
+       if(!(psta->qos_info&0xf))
+               return;
+
+#ifdef CONFIG_TDLS
+       }
+#endif //CONFIG_TDLS
+
+       if(psta->state&WIFI_SLEEP_STATE)
+       {
+               u8 wmmps_ac=0;
+
+               switch(pattrib->priority)
+               {
+                       case 1:
+                       case 2:
+                               wmmps_ac = psta->uapsd_bk&BIT(1);
+                               break;
+                       case 4:
+                       case 5:
+                               wmmps_ac = psta->uapsd_vi&BIT(1);
+                               break;
+                       case 6:
+                       case 7:
+                               wmmps_ac = psta->uapsd_vo&BIT(1);
+                               break;
+                       case 0:
+                       case 3:
+                       default:
+                               wmmps_ac = psta->uapsd_be&BIT(1);
+                               break;
+               }
+
+               if(wmmps_ac)
+               {
+                       if(psta->sleepq_ac_len>0)
+                       {
+                               //process received triggered frame
+                               xmit_delivery_enabled_frames(padapter, psta);
+                       }
+                       else
+                       {
+                               //issue one qos null frame with More data bit = 0 and the EOSP bit set (=1)
+                               issue_qos_nulldata(padapter, psta->hwaddr, (u16)pattrib->priority, 0, 0);
+                       }
+               }
+
+       }
+
+
+#endif
+
+}
+
+#ifdef CONFIG_TDLS
+sint OnTDLS(_adapter *adapter, union recv_frame *precv_frame)
+{
+       struct rx_pkt_attrib    *pattrib = & precv_frame->u.hdr.attrib;
+       sint ret = _SUCCESS;
+       u8 *paction = get_recvframe_data(precv_frame);
+       u8 category_field = 1;
+#ifdef CONFIG_WFD
+       u8 WFA_OUI[3] = { 0x50, 0x6f, 0x9a };
+#endif //CONFIG_WFD
+       struct tdls_info *ptdlsinfo = &(adapter->tdlsinfo);
+
+       //point to action field
+       paction+=pattrib->hdrlen
+                       + pattrib->iv_len
+                       + SNAP_SIZE
+                       + ETH_TYPE_LEN
+                       + PAYLOAD_TYPE_LEN
+                       + category_field;
+
+       if(ptdlsinfo->enable == 0)
+       {
+               DBG_871X("recv tdls frame, "
+                               "but tdls haven't enabled\n");
+               ret = _FAIL;
+               return ret;
+       }
+
+       switch(*paction){
+               case TDLS_SETUP_REQUEST:
+                       DBG_871X("recv tdls setup request frame\n");
+                       ret=On_TDLS_Setup_Req(adapter, precv_frame);
+                       break;
+               case TDLS_SETUP_RESPONSE:
+                       DBG_871X("recv tdls setup response frame\n");
+                       ret=On_TDLS_Setup_Rsp(adapter, precv_frame);
+                       break;
+               case TDLS_SETUP_CONFIRM:
+                       DBG_871X("recv tdls setup confirm frame\n");
+                       ret=On_TDLS_Setup_Cfm(adapter, precv_frame);
+                       break;
+               case TDLS_TEARDOWN:
+                       DBG_871X("recv tdls teardown, free sta_info\n");
+                       ret=On_TDLS_Teardown(adapter, precv_frame);
+                       break;
+               case TDLS_DISCOVERY_REQUEST:
+                       DBG_871X("recv tdls discovery request frame\n");
+                       ret=On_TDLS_Dis_Req(adapter, precv_frame);
+                       break;
+               case TDLS_PEER_TRAFFIC_RESPONSE:
+                       DBG_871X("recv tdls peer traffic response frame\n");
+                       ret=On_TDLS_Peer_Traffic_Rsp(adapter, precv_frame);
+                       break;
+               case TDLS_CHANNEL_SWITCH_REQUEST:
+                       DBG_871X("recv tdls channel switch request frame\n");
+                       ret=On_TDLS_Ch_Switch_Req(adapter, precv_frame);
+                       break;
+               case TDLS_CHANNEL_SWITCH_RESPONSE:
+                       DBG_871X("recv tdls channel switch response frame\n");
+                       ret=On_TDLS_Ch_Switch_Rsp(adapter, precv_frame);
+                       break;
+#ifdef CONFIG_WFD
+               case 0x50:      //First byte of WFA OUI
+                       if( _rtw_memcmp(WFA_OUI, (paction), 3) )
+                       {
+                               if( *(paction + 3) == 0x04)     //Probe request frame
+                               {
+                                       //WFDTDLS: for sigma test, do not setup direct link automatically
+                                       ptdlsinfo->dev_discovered = 1;
+                                       DBG_871X("recv tunneled probe request frame\n");
+                                       issue_tunneled_probe_rsp(adapter, precv_frame);
+                               }
+                               if( *(paction + 3) == 0x05)     //Probe response frame
+                               {
+                                       //WFDTDLS: for sigma test, do not setup direct link automatically
+                                       ptdlsinfo->dev_discovered = 1;
+                                       DBG_871X("recv tunneled probe response frame\n");
+                               }
+                       }
+                       break;
+#endif //CONFIG_WFD
+               default:
+                       DBG_871X("receive TDLS frame but not supported\n");
+                       ret=_FAIL;
+                       break;
+       }
+
+exit:
+       return ret;
+
+}
+#endif //CONFIG_TDLS
+
+void count_rx_stats(_adapter *padapter, union recv_frame *prframe, struct sta_info*sta);
+void count_rx_stats(_adapter *padapter, union recv_frame *prframe, struct sta_info*sta)
+{
+       int     sz;
+       struct sta_info         *psta = NULL;
+       struct stainfo_stats    *pstats = NULL;
+       struct rx_pkt_attrib    *pattrib = & prframe->u.hdr.attrib;
+       struct recv_priv                *precvpriv = &padapter->recvpriv;
+
+       sz = get_recvframe_len(prframe);
+       precvpriv->rx_bytes += sz;
+
+       padapter->mlmepriv.LinkDetectInfo.NumRxOkInPeriod++;
+
+       if( (!MacAddr_isBcst(pattrib->dst)) && (!IS_MCAST(pattrib->dst))){
+               padapter->mlmepriv.LinkDetectInfo.NumRxUnicastOkInPeriod++;
+       }
+
+       if(sta)
+               psta = sta;
+       else
+               psta = prframe->u.hdr.psta;
+
+       if(psta)
+       {
+               pstats = &psta->sta_stats;
+
+               pstats->rx_data_pkts++;
+               pstats->rx_bytes += sz;
+       }
+
+}
+
+sint sta2sta_data_frame(
+       _adapter *adapter,
+       union recv_frame *precv_frame,
+       struct sta_info**psta
+);
+sint sta2sta_data_frame(
+       _adapter *adapter,
+       union recv_frame *precv_frame,
+       struct sta_info**psta
+)
+{
+       u8 *ptr = precv_frame->u.hdr.rx_data;
+       sint ret = _SUCCESS;
+       struct rx_pkt_attrib *pattrib = & precv_frame->u.hdr.attrib;
+       struct  sta_priv                *pstapriv = &adapter->stapriv;
+       struct  mlme_priv       *pmlmepriv = &adapter->mlmepriv;
+       u8 *mybssid  = get_bssid(pmlmepriv);
+       u8 *myhwaddr = myid(&adapter->eeprompriv);
+       u8 * sta_addr = NULL;
+       sint bmcast = IS_MCAST(pattrib->dst);
+
+#ifdef CONFIG_TDLS
+       struct tdls_info *ptdlsinfo = &adapter->tdlsinfo;
+       struct sta_info *ptdls_sta=NULL;
+       u8 *psnap_type=ptr+pattrib->hdrlen + pattrib->iv_len+SNAP_SIZE;
+       u8 *pframe_body = psnap_type + ETH_TYPE_LEN + PAYLOAD_TYPE_LEN;
+#endif //CONFIG_TDLS
+
+_func_enter_;
+
+       if ((check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE) ||
+               (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE))
+       {
+
+               // filter packets that SA is myself or multicast or broadcast
+               if (_rtw_memcmp(myhwaddr, pattrib->src, ETH_ALEN)){
+                       RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,(" SA==myself \n"));
+                       ret= _FAIL;
+                       goto exit;
+               }
+
+               if( (!_rtw_memcmp(myhwaddr, pattrib->dst, ETH_ALEN))    && (!bmcast) ){
+                       ret= _FAIL;
+                       goto exit;
+               }
+
+               if( _rtw_memcmp(pattrib->bssid, "\x0\x0\x0\x0\x0\x0", ETH_ALEN) ||
+                  _rtw_memcmp(mybssid, "\x0\x0\x0\x0\x0\x0", ETH_ALEN) ||
+                  (!_rtw_memcmp(pattrib->bssid, mybssid, ETH_ALEN)) ) {
+                       ret= _FAIL;
+                       goto exit;
+               }
+
+               sta_addr = pattrib->src;
+
+       }
+       else if(check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _TRUE)
+       {
+#ifdef CONFIG_TDLS
+               //direct link data transfer
+               if(ptdlsinfo->setup_state == TDLS_LINKED_STATE){
+                       ptdls_sta = rtw_get_stainfo(pstapriv, pattrib->src);
+                       if(ptdls_sta==NULL)
+                       {
+                               ret=_FAIL;
+                               goto exit;
+                       }
+                       else if(ptdls_sta->tdls_sta_state&TDLS_LINKED_STATE)
+                       {
+                               //drop QoS-SubType Data, including QoS NULL, excluding QoS-Data
+                               if( (GetFrameSubType(ptr) & WIFI_QOS_DATA_TYPE )== WIFI_QOS_DATA_TYPE)
+                               {
+                                       if(GetFrameSubType(ptr)&(BIT(4)|BIT(5)|BIT(6)))
+                                       {
+                                               DBG_871X("drop QoS-Sybtype Data\n");
+                                               ret= _FAIL;
+                                               goto exit;
+                                       }
+                               }
+                               // filter packets that SA is myself or multicast or broadcast
+                               if (_rtw_memcmp(myhwaddr, pattrib->src, ETH_ALEN)){
+                                       ret= _FAIL;
+                                       goto exit;
+                               }
+                               // da should be for me
+                               if((!_rtw_memcmp(myhwaddr, pattrib->dst, ETH_ALEN))&& (!bmcast))
+                               {
+                                       ret= _FAIL;
+                                       goto exit;
+                               }
+                               // check BSSID
+                               if( _rtw_memcmp(pattrib->bssid, "\x0\x0\x0\x0\x0\x0", ETH_ALEN) ||
+                                    _rtw_memcmp(mybssid, "\x0\x0\x0\x0\x0\x0", ETH_ALEN) ||
+                                    (!_rtw_memcmp(pattrib->bssid, mybssid, ETH_ALEN)) )
+                               {
+                                       ret= _FAIL;
+                                       goto exit;
+                               }
+
+                               //process UAPSD tdls sta
+                               process_pwrbit_data(adapter, precv_frame);
+
+                               // if NULL-frame, check pwrbit
+                               if ((GetFrameSubType(ptr)) == WIFI_DATA_NULL)
+                               {
+                                       //NULL-frame with pwrbit=1, buffer_STA should buffer frames for sleep_STA
+                                       if(GetPwrMgt(ptr))
+                                       {
+                                               DBG_871X("TDLS: recv peer null frame with pwr bit 1\n");
+                                               ptdls_sta->tdls_sta_state|=TDLS_PEER_SLEEP_STATE;
+                                       }
+                                       // it would be triggered when we are off channel and receiving NULL DATA
+                                       // we can confirm that peer STA is at off channel
+                                       else if(ptdls_sta->tdls_sta_state&TDLS_CH_SWITCH_ON_STATE)
+                                       {
+                                               if((ptdls_sta->tdls_sta_state & TDLS_PEER_AT_OFF_STATE) != TDLS_PEER_AT_OFF_STATE)
+                                               {
+                                                       issue_nulldata_to_TDLS_peer_STA(adapter, ptdls_sta, 0);
+                                                       ptdls_sta->tdls_sta_state |= TDLS_PEER_AT_OFF_STATE;
+                                                       On_TDLS_Peer_Traffic_Rsp(adapter, precv_frame);
+                                               }
+                                       }
+
+                                       ret= _FAIL;
+                                       goto exit;
+                               }
+                               //receive some of all TDLS management frames, process it at ON_TDLS
+                               if((_rtw_memcmp(psnap_type, SNAP_ETH_TYPE_TDLS, 2))){
+                                       ret= OnTDLS(adapter, precv_frame);
+                                       goto exit;
+                               }
+
+                       }
+
+                       sta_addr = pattrib->src;
+
+               }
+               else
+#endif //CONFIG_TDLS
+               {
+                       // For Station mode, sa and bssid should always be BSSID, and DA is my mac-address
+                       if(!_rtw_memcmp(pattrib->bssid, pattrib->src, ETH_ALEN) )
+                       {
+                               RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("bssid != TA under STATION_MODE; drop pkt\n"));
+                               ret= _FAIL;
+                               goto exit;
+                       }
+
+                       sta_addr = pattrib->bssid;
+               }
+       }
+       else if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
+       {
+               if (bmcast)
+               {
+                       // For AP mode, if DA == MCAST, then BSSID should be also MCAST
+                       if (!IS_MCAST(pattrib->bssid)){
+                                       ret= _FAIL;
+                                       goto exit;
+                       }
+               }
+               else // not mc-frame
+               {
+                       // For AP mode, if DA is non-MCAST, then it must be BSSID, and bssid == BSSID
+                       if(!_rtw_memcmp(pattrib->bssid, pattrib->dst, ETH_ALEN)) {
+                               ret= _FAIL;
+                               goto exit;
+                       }
+
+                       sta_addr = pattrib->src;
+               }
+
+       }
+       else if(check_fwstate(pmlmepriv, WIFI_MP_STATE) == _TRUE)
+       {
+               _rtw_memcpy(pattrib->dst, GetAddr1Ptr(ptr), ETH_ALEN);
+               _rtw_memcpy(pattrib->src, GetAddr2Ptr(ptr), ETH_ALEN);
+               _rtw_memcpy(pattrib->bssid, GetAddr3Ptr(ptr), ETH_ALEN);
+               _rtw_memcpy(pattrib->ra, pattrib->dst, ETH_ALEN);
+               _rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
+
+               sta_addr = mybssid;
+       }
+       else
+       {
+               ret  = _FAIL;
+       }
+
+
+
+       if(bmcast)
+               *psta = rtw_get_bcmc_stainfo(adapter);
+       else
+               *psta = rtw_get_stainfo(pstapriv, sta_addr); // get ap_info
+
+#ifdef CONFIG_TDLS
+       if(ptdls_sta != NULL)
+               *psta = ptdls_sta;
+#endif //CONFIG_TDLS
+
+
+       if (*psta == NULL) {
+               RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("can't get psta under sta2sta_data_frame ; drop pkt\n"));
+#ifdef CONFIG_MP_INCLUDED
+               if(check_fwstate(pmlmepriv, WIFI_MP_STATE) == _TRUE)
+               adapter->mppriv.rx_pktloss++;
+#endif
+               ret= _FAIL;
+               goto exit;
+       }
+
+exit:
+_func_exit_;
+       return ret;
+
+}
+
+sint ap2sta_data_frame(
+       _adapter *adapter,
+       union recv_frame *precv_frame,
+       struct sta_info**psta );
+sint ap2sta_data_frame(
+       _adapter *adapter,
+       union recv_frame *precv_frame,
+       struct sta_info**psta )
+{
+       u8 *ptr = precv_frame->u.hdr.rx_data;
+       struct rx_pkt_attrib *pattrib = & precv_frame->u.hdr.attrib;
+       sint ret = _SUCCESS;
+       struct  sta_priv                *pstapriv = &adapter->stapriv;
+       struct  mlme_priv       *pmlmepriv = &adapter->mlmepriv;
+       u8 *mybssid  = get_bssid(pmlmepriv);
+       u8 *myhwaddr = myid(&adapter->eeprompriv);
+       sint bmcast = IS_MCAST(pattrib->dst);
+
+_func_enter_;
+
+       if ((check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _TRUE)
+               && (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE
+                       || check_fwstate(pmlmepriv, _FW_UNDER_LINKING) == _TRUE )
+               )
+       {
+
+               // filter packets that SA is myself or multicast or broadcast
+               if (_rtw_memcmp(myhwaddr, pattrib->src, ETH_ALEN)){
+                       RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,(" SA==myself \n"));
+                       #ifdef DBG_RX_DROP_FRAME
+                       DBG_871X("DBG_RX_DROP_FRAME %s SA=%x:%x:%x:%x:%x:%x, myhwaddr= %x:%x:%x:%x:%x:%x\n", __FUNCTION__,
+                               pattrib->src[0], pattrib->src[1], pattrib->src[2],
+                               pattrib->src[3], pattrib->src[4], pattrib->src[5],
+                               *(myhwaddr), *(myhwaddr+1), *(myhwaddr+2),
+                               *(myhwaddr+3), *(myhwaddr+4), *(myhwaddr+5));
+                       #endif
+                       ret= _FAIL;
+                       goto exit;
+               }
+
+               // da should be for me
+               if((!_rtw_memcmp(myhwaddr, pattrib->dst, ETH_ALEN))&& (!bmcast))
+               {
+                       RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,
+                               (" ap2sta_data_frame:  compare DA fail; DA="MAC_FMT"\n", MAC_ARG(pattrib->dst)));
+                       #ifdef DBG_RX_DROP_FRAME
+                       DBG_871X("DBG_RX_DROP_FRAME %s DA="MAC_FMT"\n", __func__, MAC_ARG(pattrib->dst));
+                       #endif
+                       ret= _FAIL;
+                       goto exit;
+               }
+
+
+               // check BSSID
+               if( _rtw_memcmp(pattrib->bssid, "\x0\x0\x0\x0\x0\x0", ETH_ALEN) ||
+                    _rtw_memcmp(mybssid, "\x0\x0\x0\x0\x0\x0", ETH_ALEN) ||
+                    (!_rtw_memcmp(pattrib->bssid, mybssid, ETH_ALEN)) )
+               {
+                       RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,
+                               (" ap2sta_data_frame:  compare BSSID fail ; BSSID="MAC_FMT"\n", MAC_ARG(pattrib->bssid)));
+                       RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("mybssid="MAC_FMT"\n", MAC_ARG(mybssid)));
+                       #ifdef DBG_RX_DROP_FRAME
+                       DBG_871X("DBG_RX_DROP_FRAME %s BSSID="MAC_FMT", mybssid="MAC_FMT"\n",
+                               __FUNCTION__, MAC_ARG(pattrib->bssid), MAC_ARG(mybssid));
+                       DBG_871X( "this adapter = %d, buddy adapter = %d\n", adapter->adapter_type, adapter->pbuddy_adapter->adapter_type );
+                       #endif
+
+                       if(!bmcast)
+                       {
+                               DBG_871X("issue_deauth to the nonassociated ap=" MAC_FMT " for the reason(7)\n", MAC_ARG(pattrib->bssid));
+                               issue_deauth(adapter, pattrib->bssid, WLAN_REASON_CLASS3_FRAME_FROM_NONASSOC_STA);
+                       }
+
+                       ret= _FAIL;
+                       goto exit;
+               }
+
+               if(bmcast)
+                       *psta = rtw_get_bcmc_stainfo(adapter);
+               else
+                       *psta = rtw_get_stainfo(pstapriv, pattrib->bssid); // get ap_info
+
+               if (*psta == NULL) {
+                       RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("ap2sta: can't get psta under STATION_MODE ; drop pkt\n"));
+                       #ifdef DBG_RX_DROP_FRAME
+                       DBG_871X("DBG_RX_DROP_FRAME %s can't get psta under STATION_MODE ; drop pkt\n", __FUNCTION__);
+                       #endif
+                       ret= _FAIL;
+                       goto exit;
+               }
+
+               if ((GetFrameSubType(ptr) & WIFI_QOS_DATA_TYPE) == WIFI_QOS_DATA_TYPE) {
+               }
+
+               if (GetFrameSubType(ptr) & BIT(6)) {
+                       /* No data, will not indicate to upper layer, temporily count it here */
+                       count_rx_stats(adapter, precv_frame, *psta);
+                       ret = RTW_RX_HANDLED;
+                       goto exit;
+               }
+
+       }
+       else if ((check_fwstate(pmlmepriv, WIFI_MP_STATE) == _TRUE) &&
+                    (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE) )
+       {
+               _rtw_memcpy(pattrib->dst, GetAddr1Ptr(ptr), ETH_ALEN);
+               _rtw_memcpy(pattrib->src, GetAddr2Ptr(ptr), ETH_ALEN);
+               _rtw_memcpy(pattrib->bssid, GetAddr3Ptr(ptr), ETH_ALEN);
+               _rtw_memcpy(pattrib->ra, pattrib->dst, ETH_ALEN);
+               _rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
+
+               //
+               _rtw_memcpy(pattrib->bssid,  mybssid, ETH_ALEN);
+
+
+               *psta = rtw_get_stainfo(pstapriv, pattrib->bssid); // get sta_info
+               if (*psta == NULL) {
+                       RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("can't get psta under MP_MODE ; drop pkt\n"));
+                       #ifdef DBG_RX_DROP_FRAME
+                       DBG_871X("DBG_RX_DROP_FRAME %s can't get psta under WIFI_MP_STATE ; drop pkt\n", __FUNCTION__);
+                       #endif
+                       ret= _FAIL;
+                       goto exit;
+               }
+
+
+       }
+       else if (check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
+       {
+               /* Special case */
+               ret = RTW_RX_HANDLED;
+               goto exit;
+       }
+       else
+       {
+               if(_rtw_memcmp(myhwaddr, pattrib->dst, ETH_ALEN)&& (!bmcast))
+               {
+                       *psta = rtw_get_stainfo(pstapriv, pattrib->bssid); // get sta_info
+                       if (*psta == NULL)
+                       {
+                               DBG_871X("issue_deauth to the ap=" MAC_FMT " for the reason(7)\n", MAC_ARG(pattrib->bssid));
+
+                               issue_deauth(adapter, pattrib->bssid, WLAN_REASON_CLASS3_FRAME_FROM_NONASSOC_STA);
+                       }
+               }
+
+               ret = _FAIL;
+               #ifdef DBG_RX_DROP_FRAME
+               DBG_871X("DBG_RX_DROP_FRAME %s fw_state:0x%x\n", __FUNCTION__, get_fwstate(pmlmepriv));
+               #endif
+       }
+
+exit:
+
+_func_exit_;
+
+       return ret;
+
+}
+
+sint sta2ap_data_frame(
+       _adapter *adapter,
+       union recv_frame *precv_frame,
+       struct sta_info**psta );
+sint sta2ap_data_frame(
+       _adapter *adapter,
+       union recv_frame *precv_frame,
+       struct sta_info**psta )
+{
+       u8 *ptr = precv_frame->u.hdr.rx_data;
+       struct rx_pkt_attrib *pattrib = & precv_frame->u.hdr.attrib;
+       struct  sta_priv                *pstapriv = &adapter->stapriv;
+       struct  mlme_priv       *pmlmepriv = &adapter->mlmepriv;
+       unsigned char *mybssid  = get_bssid(pmlmepriv);
+       sint ret=_SUCCESS;
+
+_func_enter_;
+
+       if (check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
+       {
+               //For AP mode, RA=BSSID, TX=STA(SRC_ADDR), A3=DST_ADDR
+               if(!_rtw_memcmp(pattrib->bssid, mybssid, ETH_ALEN))
+               {
+                       ret= _FAIL;
+                       goto exit;
+               }
+
+               *psta = rtw_get_stainfo(pstapriv, pattrib->src);
+               if (*psta == NULL)
+               {
+                       RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("can't get psta under AP_MODE; drop pkt\n"));
+                       DBG_871X("issue_deauth to sta=" MAC_FMT " for the reason(7)\n", MAC_ARG(pattrib->src));
+
+                       issue_deauth(adapter, pattrib->src, WLAN_REASON_CLASS3_FRAME_FROM_NONASSOC_STA);
+
+                       ret = RTW_RX_HANDLED;
+                       goto exit;
+               }
+
+               process_pwrbit_data(adapter, precv_frame);
+
+               if ((GetFrameSubType(ptr) & WIFI_QOS_DATA_TYPE) == WIFI_QOS_DATA_TYPE) {
+                       process_wmmps_data(adapter, precv_frame);
+               }
+
+               if (GetFrameSubType(ptr) & BIT(6)) {
+                       /* No data, will not indicate to upper layer, temporily count it here */
+                       count_rx_stats(adapter, precv_frame, *psta);
+                       ret = RTW_RX_HANDLED;
+                       goto exit;
+               }
+       }
+       else {
+               u8 *myhwaddr = myid(&adapter->eeprompriv);
+               if (!_rtw_memcmp(pattrib->ra, myhwaddr, ETH_ALEN)) {
+                       ret = RTW_RX_HANDLED;
+                       goto exit;
+               }
+               DBG_871X("issue_deauth to sta=" MAC_FMT " for the reason(7)\n", MAC_ARG(pattrib->src));
+               issue_deauth(adapter, pattrib->src, WLAN_REASON_CLASS3_FRAME_FROM_NONASSOC_STA);
+               ret = RTW_RX_HANDLED;
+               goto exit;
+       }
+
+exit:
+
+_func_exit_;
+
+       return ret;
+
+}
+
+sint validate_recv_ctrl_frame(_adapter *padapter, union recv_frame *precv_frame);
+sint validate_recv_ctrl_frame(_adapter *padapter, union recv_frame *precv_frame)
+{
+#ifdef CONFIG_AP_MODE
+       struct rx_pkt_attrib *pattrib = &precv_frame->u.hdr.attrib;
+       struct sta_priv *pstapriv = &padapter->stapriv;
+       u8 *pframe = precv_frame->u.hdr.rx_data;
+       //uint len = precv_frame->u.hdr.len;
+
+       //DBG_871X("+validate_recv_ctrl_frame\n");
+
+       if (GetFrameType(pframe) != WIFI_CTRL_TYPE)
+       {
+               return _FAIL;
+       }
+
+       //receive the frames that ra(a1) is my address
+       if (!_rtw_memcmp(GetAddr1Ptr(pframe), myid(&padapter->eeprompriv), ETH_ALEN))
+       {
+               return _FAIL;
+       }
+
+       //only handle ps-poll
+       if(GetFrameSubType(pframe) == WIFI_PSPOLL)
+       {
+               u16 aid;
+               u8 wmmps_ac=0;
+               struct sta_info *psta=NULL;
+
+               aid = GetAid(pframe);
+               psta = rtw_get_stainfo(pstapriv, GetAddr2Ptr(pframe));
+
+               if((psta==NULL) || (psta->aid!=aid))
+               {
+                       return _FAIL;
+               }
+
+               //for rx pkt statistics
+               psta->sta_stats.rx_ctrl_pkts++;
+
+               switch(pattrib->priority)
+               {
+                       case 1:
+                       case 2:
+                               wmmps_ac = psta->uapsd_bk&BIT(0);
+                               break;
+                       case 4:
+                       case 5:
+                               wmmps_ac = psta->uapsd_vi&BIT(0);
+                               break;
+                       case 6:
+                       case 7:
+                               wmmps_ac = psta->uapsd_vo&BIT(0);
+                               break;
+                       case 0:
+                       case 3:
+                       default:
+                               wmmps_ac = psta->uapsd_be&BIT(0);
+                               break;
+               }
+
+               if(wmmps_ac)
+                       return _FAIL;
+
+               if(psta->state & WIFI_STA_ALIVE_CHK_STATE)
+               {
+                       DBG_871X("%s alive check-rx ps-poll\n", __func__);
+                       psta->expire_to = pstapriv->expire_to;
+                       psta->state ^= WIFI_STA_ALIVE_CHK_STATE;
+               }
+
+               if((psta->state&WIFI_SLEEP_STATE) && (pstapriv->sta_dz_bitmap&BIT(psta->aid)))
+               {
+                       _irqL irqL;
+                       _list   *xmitframe_plist, *xmitframe_phead;
+                       struct xmit_frame *pxmitframe=NULL;
+                       struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
+
+                       //_enter_critical_bh(&psta->sleep_q.lock, &irqL);
+                       _enter_critical_bh(&pxmitpriv->lock, &irqL);
+
+                       xmitframe_phead = get_list_head(&psta->sleep_q);
+                       xmitframe_plist = get_next(xmitframe_phead);
+
+                       if ((rtw_end_of_queue_search(xmitframe_phead, xmitframe_plist)) == _FALSE)
+                       {
+                               pxmitframe = LIST_CONTAINOR(xmitframe_plist, struct xmit_frame, list);
+
+                               xmitframe_plist = get_next(xmitframe_plist);
+
+                               rtw_list_delete(&pxmitframe->list);
+
+                               psta->sleepq_len--;
+
+                               if(psta->sleepq_len>0)
+                                       pxmitframe->attrib.mdata = 1;
+                                else
+                                       pxmitframe->attrib.mdata = 0;
+
+                               pxmitframe->attrib.triggered = 1;
+
+                               //DBG_871X("handling ps-poll, q_len=%d, tim=%x\n", psta->sleepq_len, pstapriv->tim_bitmap);
+
+#if 0
+                               _exit_critical_bh(&psta->sleep_q.lock, &irqL);
+                               if(rtw_hal_xmit(padapter, pxmitframe) == _TRUE)
+                               {
+                                       rtw_os_xmit_complete(padapter, pxmitframe);
+                               }
+                               _enter_critical_bh(&psta->sleep_q.lock, &irqL);
+#endif
+                               rtw_hal_xmitframe_enqueue(padapter, pxmitframe);
+
+                               if(psta->sleepq_len==0)
+                               {
+                                       pstapriv->tim_bitmap &= ~BIT(psta->aid);
+
+                                       //DBG_871X("after handling ps-poll, tim=%x\n", pstapriv->tim_bitmap);
+
+                                       //upate BCN for TIM IE
+                                       //update_BCNTIM(padapter);
+                                       update_beacon(padapter, _TIM_IE_, NULL, _FALSE);
+                               }
+
+                               //_exit_critical_bh(&psta->sleep_q.lock, &irqL);
+                               _exit_critical_bh(&pxmitpriv->lock, &irqL);
+
+                       }
+                       else
+                       {
+                               //_exit_critical_bh(&psta->sleep_q.lock, &irqL);
+                               _exit_critical_bh(&pxmitpriv->lock, &irqL);
+
+                               //DBG_871X("no buffered packets to xmit\n");
+                               if(pstapriv->tim_bitmap&BIT(psta->aid))
+                               {
+                                       if(psta->sleepq_len==0)
+                                       {
+                                               DBG_871X("no buffered packets to xmit\n");
+
+                                               //issue nulldata with More data bit = 0 to indicate we have no buffered packets
+                                               issue_nulldata(padapter, psta->hwaddr, 0, 0, 0);
+                                       }
+                                       else
+                                       {
+                                               DBG_871X("error!psta->sleepq_len=%d\n", psta->sleepq_len);
+                                               psta->sleepq_len=0;
+                                       }
+
+                                       pstapriv->tim_bitmap &= ~BIT(psta->aid);
+
+                                       //upate BCN for TIM IE
+                                       //update_BCNTIM(padapter);
+                                       update_beacon(padapter, _TIM_IE_, NULL, _FALSE);
+                               }
+
+                       }
+
+               }
+
+       }
+
+#endif
+
+       return _FAIL;
+
+}
+
+union recv_frame* recvframe_chk_defrag(PADAPTER padapter, union recv_frame *precv_frame);
+sint validate_recv_mgnt_frame(PADAPTER padapter, union recv_frame *precv_frame);
+sint validate_recv_mgnt_frame(PADAPTER padapter, union recv_frame *precv_frame)
+{
+       //struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
+
+       RT_TRACE(_module_rtl871x_recv_c_, _drv_info_, ("+validate_recv_mgnt_frame\n"));
+
+#if 0
+       if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
+       {
+#ifdef CONFIG_NATIVEAP_MLME
+               mgt_dispatcher(padapter, precv_frame);
+#else
+               rtw_hostapd_mlme_rx(padapter, precv_frame);
+#endif
+       }
+       else
+       {
+               mgt_dispatcher(padapter, precv_frame);
+       }
+#endif
+
+       precv_frame = recvframe_chk_defrag(padapter, precv_frame);
+       if (precv_frame == NULL) {
+               RT_TRACE(_module_rtl871x_recv_c_, _drv_notice_,("%s: fragment packet\n",__FUNCTION__));
+               return _SUCCESS;
+       }
+
+       {
+               //for rx pkt statistics
+               struct sta_info *psta = rtw_get_stainfo(&padapter->stapriv, GetAddr2Ptr(precv_frame->u.hdr.rx_data));
+               if (psta) {
+                       psta->sta_stats.rx_mgnt_pkts++;
+                       if (GetFrameSubType(precv_frame->u.hdr.rx_data) == WIFI_BEACON)
+                               psta->sta_stats.rx_beacon_pkts++;
+                       else if (GetFrameSubType(precv_frame->u.hdr.rx_data) == WIFI_PROBEREQ)
+                               psta->sta_stats.rx_probereq_pkts++;
+                       else if (GetFrameSubType(precv_frame->u.hdr.rx_data) == WIFI_PROBERSP) {
+                               if (_rtw_memcmp(padapter->eeprompriv.mac_addr, GetAddr1Ptr(precv_frame->u.hdr.rx_data), ETH_ALEN) == _TRUE)
+                                       psta->sta_stats.rx_probersp_pkts++;
+                               else if (is_broadcast_mac_addr(GetAddr1Ptr(precv_frame->u.hdr.rx_data))
+                                       || is_multicast_mac_addr(GetAddr1Ptr(precv_frame->u.hdr.rx_data)))
+                                       psta->sta_stats.rx_probersp_bm_pkts++;
+                               else
+                                       psta->sta_stats.rx_probersp_uo_pkts++;
+                       }
+               }
+       }
+
+#ifdef CONFIG_INTEL_PROXIM
+       if(padapter->proximity.proxim_on==_TRUE)
+       {
+               struct rx_pkt_attrib * pattrib=&precv_frame->u.hdr.attrib;
+                struct recv_stat* prxstat=( struct recv_stat * )  precv_frame->u.hdr.rx_head ;
+                u8 * pda,*psa,*pbssid,*ptr;
+                ptr=precv_frame->u.hdr.rx_data;
+               pda = get_da(ptr);
+               psa = get_sa(ptr);
+               pbssid = get_hdr_bssid(ptr);
+
+
+               _rtw_memcpy(pattrib->dst, pda, ETH_ALEN);
+               _rtw_memcpy(pattrib->src, psa, ETH_ALEN);
+
+               _rtw_memcpy(pattrib->bssid, pbssid, ETH_ALEN);
+
+       switch(pattrib->to_fr_ds)
+       {
+               case 0:
+                       _rtw_memcpy(pattrib->ra, pda, ETH_ALEN);
+                       _rtw_memcpy(pattrib->ta, psa, ETH_ALEN);
+                       break;
+
+               case 1:
+                       _rtw_memcpy(pattrib->ra, pda, ETH_ALEN);
+                       _rtw_memcpy(pattrib->ta, pbssid, ETH_ALEN);
+                       break;
+
+               case 2:
+                       _rtw_memcpy(pattrib->ra, pbssid, ETH_ALEN);
+                       _rtw_memcpy(pattrib->ta, psa, ETH_ALEN);
+                       break;
+
+               case 3:
+                       _rtw_memcpy(pattrib->ra, GetAddr1Ptr(ptr), ETH_ALEN);
+                       _rtw_memcpy(pattrib->ta, GetAddr2Ptr(ptr), ETH_ALEN);
+                       RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,(" case 3\n"));
+                       break;
+
+               default:
+                       break;
+
+               }
+                       pattrib->priority=0;
+                       pattrib->hdrlen = pattrib->to_fr_ds==3 ? 30 : 24;
+
+                padapter->proximity.proxim_rx(padapter,precv_frame);
+       }
+#endif
+       mgt_dispatcher(padapter, precv_frame);
+
+       return _SUCCESS;
+
+}
+
+sint validate_recv_data_frame(_adapter *adapter, union recv_frame *precv_frame);
+sint validate_recv_data_frame(_adapter *adapter, union recv_frame *precv_frame)
+{
+       u8 bretry;
+       u8 *psa, *pda, *pbssid;
+       struct sta_info *psta = NULL;
+       u8 *ptr = precv_frame->u.hdr.rx_data;
+       struct rx_pkt_attrib    *pattrib = & precv_frame->u.hdr.attrib;
+       struct security_priv    *psecuritypriv = &adapter->securitypriv;
+       sint ret = _SUCCESS;
+#ifdef CONFIG_TDLS
+       struct tdls_info *ptdlsinfo = &adapter->tdlsinfo;
+#endif //CONFIG_TDLS
+
+_func_enter_;
+
+       bretry = GetRetry(ptr);
+       pda = get_da(ptr);
+       psa = get_sa(ptr);
+       pbssid = get_hdr_bssid(ptr);
+
+       if(pbssid == NULL){
+               ret= _FAIL;
+               goto exit;
+       }
+
+       _rtw_memcpy(pattrib->dst, pda, ETH_ALEN);
+       _rtw_memcpy(pattrib->src, psa, ETH_ALEN);
+
+       _rtw_memcpy(pattrib->bssid, pbssid, ETH_ALEN);
+
+       switch(pattrib->to_fr_ds)
+       {
+               case 0:
+                       _rtw_memcpy(pattrib->ra, pda, ETH_ALEN);
+                       _rtw_memcpy(pattrib->ta, psa, ETH_ALEN);
+                       ret = sta2sta_data_frame(adapter, precv_frame, &psta);
+                       break;
+
+               case 1:
+                       _rtw_memcpy(pattrib->ra, pda, ETH_ALEN);
+                       _rtw_memcpy(pattrib->ta, pbssid, ETH_ALEN);
+                       ret = ap2sta_data_frame(adapter, precv_frame, &psta);
+                       break;
+
+               case 2:
+                       _rtw_memcpy(pattrib->ra, pbssid, ETH_ALEN);
+                       _rtw_memcpy(pattrib->ta, psa, ETH_ALEN);
+                       ret = sta2ap_data_frame(adapter, precv_frame, &psta);
+                       break;
+
+               case 3:
+                       _rtw_memcpy(pattrib->ra, GetAddr1Ptr(ptr), ETH_ALEN);
+                       _rtw_memcpy(pattrib->ta, GetAddr2Ptr(ptr), ETH_ALEN);
+                       ret =_FAIL;
+                       RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,(" case 3\n"));
+                       break;
+
+               default:
+                       ret =_FAIL;
+                       break;
+
+       }
+
+       if(ret ==_FAIL){
+               #ifdef DBG_RX_DROP_FRAME
+               DBG_871X("DBG_RX_DROP_FRAME %s case:%d, res:%d\n", __FUNCTION__, pattrib->to_fr_ds, ret);
+               #endif
+               goto exit;
+       } else if (ret == RTW_RX_HANDLED) {
+               goto exit;
+       }
+
+
+       if(psta==NULL){
+               RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,(" after to_fr_ds_chk; psta==NULL \n"));
+               ret= _FAIL;
+               goto exit;
+       }
+
+       //psta->rssi = prxcmd->rssi;
+       //psta->signal_quality= prxcmd->sq;
+       precv_frame->u.hdr.psta = psta;
+
+
+       pattrib->amsdu=0;
+       pattrib->ack_policy = 0;
+       //parsing QC field
+       if(pattrib->qos == 1)
+       {
+               pattrib->priority = GetPriority((ptr + 24));
+               pattrib->ack_policy = GetAckpolicy((ptr + 24));
+               pattrib->amsdu = GetAMsdu((ptr + 24));
+               pattrib->hdrlen = pattrib->to_fr_ds==3 ? 32 : 26;
+
+               if(pattrib->priority!=0 && pattrib->priority!=3)
+               {
+                       adapter->recvpriv.bIsAnyNonBEPkts = _TRUE;
+               }
+       }
+       else
+       {
+               pattrib->priority=0;
+               pattrib->hdrlen = pattrib->to_fr_ds==3 ? 30 : 24;
+       }
+
+
+       if(pattrib->order)//HT-CTRL 11n
+       {
+               pattrib->hdrlen += 4;
+       }
+
+       precv_frame->u.hdr.preorder_ctrl = &psta->recvreorder_ctrl[pattrib->priority];
+
+       // decache, drop duplicate recv packets
+       if(recv_decache(precv_frame, bretry, &psta->sta_recvpriv.rxcache) == _FAIL)
+       {
+               RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("decache : drop pkt\n"));
+               ret= _FAIL;
+               goto exit;
+       }
+
+#if 0
+       if(psta->tdls_sta_state & TDLS_LINKED_STATE )
+       {
+               if(psta->dot118021XPrivacy==_AES_)
+                       pattrib->encrypt=psta->dot118021XPrivacy;
+       }
+#endif //CONFIG_TDLS
+
+       if(pattrib->privacy){
+
+               RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("validate_recv_data_frame:pattrib->privacy=%x\n", pattrib->privacy));
+               RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("\n ^^^^^^^^^^^IS_MCAST(pattrib->ra(0x%02x))=%d^^^^^^^^^^^^^^^6\n", pattrib->ra[0],IS_MCAST(pattrib->ra)));
+
+#ifdef CONFIG_TDLS
+               if((psta->tdls_sta_state & TDLS_LINKED_STATE) && (psta->dot118021XPrivacy==_AES_))
+               {
+                               pattrib->encrypt=psta->dot118021XPrivacy;
+               }
+               else
+#endif //CONFIG_TDLS
+               GET_ENCRY_ALGO(psecuritypriv, psta, pattrib->encrypt, IS_MCAST(pattrib->ra));
+
+               RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("\n pattrib->encrypt=%d\n",pattrib->encrypt));
+
+               SET_ICE_IV_LEN(pattrib->iv_len, pattrib->icv_len, pattrib->encrypt);
+       }
+       else
+       {
+               pattrib->encrypt = 0;
+               pattrib->iv_len = pattrib->icv_len = 0;
+       }
+
+exit:
+
+_func_exit_;
+
+       return ret;
+}
+
+#ifdef CONFIG_IEEE80211W
+static sint validate_80211w_mgmt(_adapter *adapter, union recv_frame *precv_frame)
+{
+       struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
+       struct rx_pkt_attrib *pattrib = & precv_frame->u.hdr.attrib;
+       u8 *ptr = precv_frame->u.hdr.rx_data;
+       u8 type;
+       u8 subtype;
+
+       type =  GetFrameType(ptr);
+       subtype = GetFrameSubType(ptr); //bit(7)~bit(2)
+
+       //only support station mode
+       if(check_fwstate(pmlmepriv, WIFI_STATION_STATE) && check_fwstate(pmlmepriv, _FW_LINKED)
+               && adapter->securitypriv.binstallBIPkey == _TRUE)
+       {
+               //unicast management frame decrypt
+               if(pattrib->privacy && !(IS_MCAST(GetAddr1Ptr(ptr))) &&
+                       (subtype == WIFI_DEAUTH || subtype == WIFI_DISASSOC || subtype == WIFI_ACTION))
+               {
+                       u8 *ppp, *mgmt_DATA;
+                       u32 data_len=0;
+                       ppp = GetAddr2Ptr(ptr);
+
+                       pattrib->bdecrypted = 0;
+                       pattrib->encrypt = _AES_;
+                       pattrib->hdrlen = sizeof(struct rtw_ieee80211_hdr_3addr);
+                       //set iv and icv length
+                       SET_ICE_IV_LEN(pattrib->iv_len, pattrib->icv_len, pattrib->encrypt);
+                       _rtw_memcpy(pattrib->ra, GetAddr1Ptr(ptr), ETH_ALEN);
+                       _rtw_memcpy(pattrib->ta, GetAddr2Ptr(ptr), ETH_ALEN);
+                       //actual management data frame body
+                       data_len = pattrib->pkt_len - pattrib->hdrlen - pattrib->iv_len - pattrib->icv_len;
+                       mgmt_DATA = rtw_zmalloc(data_len);
+                       if(mgmt_DATA == NULL)
+                       {
+                               DBG_871X("%s mgmt allocate fail  !!!!!!!!!\n", __FUNCTION__);
+                               goto validate_80211w_fail;
+                       }
+                       /*//dump the packet content before decrypt
+                       {
+                               int pp;
+                               printk("pattrib->pktlen = %d =>", pattrib->pkt_len);
+                               for(pp=0;pp< pattrib->pkt_len; pp++)
+                                       printk(" %02x ", ptr[pp]);
+                               printk("\n");
+                       }*/
+
+                       precv_frame = decryptor(adapter, precv_frame);
+                       //save actual management data frame body
+                       _rtw_memcpy(mgmt_DATA, ptr+pattrib->hdrlen+pattrib->iv_len, data_len);
+                       //overwrite the iv field
+                       _rtw_memcpy(ptr+pattrib->hdrlen, mgmt_DATA, data_len);
+                       //remove the iv and icv length
+                       pattrib->pkt_len = pattrib->pkt_len - pattrib->iv_len - pattrib->icv_len;
+                       rtw_mfree(mgmt_DATA, data_len);
+                       /*//print packet content after decryption
+                       {
+                               int pp;
+                               printk("after decryption pattrib->pktlen = %d @@=>", pattrib->pkt_len);
+                               for(pp=0;pp< pattrib->pkt_len; pp++)
+                                       printk(" %02x ", ptr[pp]);
+                               printk("\n");
+                       }*/
+                       if(!precv_frame)
+                       {
+                               DBG_871X("%s mgmt descrypt fail  !!!!!!!!!\n", __FUNCTION__);
+                               goto validate_80211w_fail;
+                       }
+               }
+               else if(IS_MCAST(GetAddr1Ptr(ptr)) &&
+                       (subtype == WIFI_DEAUTH || subtype == WIFI_DISASSOC))
+               {
+                       sint BIP_ret = _SUCCESS;
+                       //verify BIP MME IE of broadcast/multicast de-auth/disassoc packet
+                       BIP_ret = rtw_BIP_verify(adapter, (u8 * )precv_frame);
+                       if(BIP_ret == _FAIL)
+                       {
+                               //DBG_871X("802.11w BIP verify fail\n");
+                               goto validate_80211w_fail;
+                       }
+                       else if(BIP_ret == RTW_RX_HANDLED)
+                       {
+                               //DBG_871X("802.11w recv none protected packet\n");
+                               //issue sa query request
+                               issue_action_SA_Query(adapter, NULL, 0, 0);
+                               goto validate_80211w_fail;
+                       }
+               }//802.11w protect
+               else
+               {
+                       if(subtype == WIFI_ACTION)
+                       {
+                               //according 802.11-2012 standard, these five types are not robust types
+                               if( ptr[WLAN_HDR_A3_LEN] != RTW_WLAN_CATEGORY_PUBLIC          &&
+                                       ptr[WLAN_HDR_A3_LEN] != RTW_WLAN_CATEGORY_HT              &&
+                                       ptr[WLAN_HDR_A3_LEN] != RTW_WLAN_CATEGORY_UNPROTECTED_WNM &&
+                                       ptr[WLAN_HDR_A3_LEN] != RTW_WLAN_CATEGORY_SELF_PROTECTED  &&
+                                       ptr[WLAN_HDR_A3_LEN] != RTW_WLAN_CATEGORY_P2P)
+                               {
+                                       DBG_871X("action frame category=%d should robust\n", ptr[WLAN_HDR_A3_LEN]);
+                                       goto validate_80211w_fail;
+                               }
+                       }
+                       else if(subtype == WIFI_DEAUTH || subtype == WIFI_DISASSOC)
+                       {
+                               DBG_871X("802.11w recv none protected packet\n");
+                               //issue sa query request
+                               issue_action_SA_Query(adapter, NULL, 0, 0);
+                               goto validate_80211w_fail;
+                       }
+               }
+       }
+       return _SUCCESS;
+
+validate_80211w_fail:
+       return _FAIL;
+
+}
+#endif //CONFIG_IEEE80211W
+
+sint validate_recv_frame(_adapter *adapter, union recv_frame *precv_frame);
+sint validate_recv_frame(_adapter *adapter, union recv_frame *precv_frame)
+{
+       //shall check frame subtype, to / from ds, da, bssid
+
+       //then call check if rx seq/frag. duplicated.
+
+       u8 type;
+       u8 subtype;
+       sint retval = _SUCCESS;
+
+       struct rx_pkt_attrib *pattrib = & precv_frame->u.hdr.attrib;
+
+       u8 *ptr = precv_frame->u.hdr.rx_data;
+       u8  ver =(unsigned char) (*ptr)&0x3 ;
+#ifdef CONFIG_FIND_BEST_CHANNEL
+       struct mlme_ext_priv *pmlmeext = &adapter->mlmeextpriv;
+#endif
+
+#ifdef CONFIG_TDLS
+       struct tdls_info *ptdlsinfo = &adapter->tdlsinfo;
+#endif //CONFIG_TDLS
+
+_func_enter_;
+
+
+#ifdef CONFIG_FIND_BEST_CHANNEL
+       if (pmlmeext->sitesurvey_res.state == SCAN_PROCESS) {
+               int ch_set_idx = rtw_ch_set_search_ch(pmlmeext->channel_set, rtw_get_oper_ch(adapter));
+               if (ch_set_idx >= 0)
+                       pmlmeext->channel_set[ch_set_idx].rx_count++;
+       }
+#endif
+
+#ifdef CONFIG_TDLS
+       if(ptdlsinfo->ch_sensing==1 && ptdlsinfo->cur_channel !=0){
+               ptdlsinfo->collect_pkt_num[ptdlsinfo->cur_channel-1]++;
+       }
+#endif //CONFIG_TDLS
+
+#ifdef RTK_DMP_PLATFORM
+       if ( 0 )
+       {
+               DBG_871X("++\n");
+               {
+                       int i;
+                       for(i=0; i<64;i=i+8)
+                               DBG_871X("%02X:%02X:%02X:%02X:%02X:%02X:%02X:%02X:", *(ptr+i),
+                               *(ptr+i+1), *(ptr+i+2) ,*(ptr+i+3) ,*(ptr+i+4),*(ptr+i+5), *(ptr+i+6), *(ptr+i+7));
+
+               }
+               DBG_871X("--\n");
+       }
+#endif //RTK_DMP_PLATFORM
+
+       //add version chk
+       if(ver!=0){
+               RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("validate_recv_data_frame fail! (ver!=0)\n"));
+               retval= _FAIL;
+               goto exit;
+       }
+
+       type =  GetFrameType(ptr);
+       subtype = GetFrameSubType(ptr); //bit(7)~bit(2)
+
+       pattrib->to_fr_ds = get_tofr_ds(ptr);
+
+       pattrib->frag_num = GetFragNum(ptr);
+       pattrib->seq_num = GetSequence(ptr);
+
+       pattrib->pw_save = GetPwrMgt(ptr);
+       pattrib->mfrag = GetMFrag(ptr);
+       pattrib->mdata = GetMData(ptr);
+       pattrib->privacy = GetPrivacy(ptr);
+       pattrib->order = GetOrder(ptr);
+#if 0 //for debug
+
+if(pHalData->bDumpRxPkt ==1){
+       int i;
+       DBG_871X("############################# \n");
+
+       for(i=0; i<64;i=i+8)
+               DBG_871X("%02X:%02X:%02X:%02X:%02X:%02X:%02X:%02X:\n", *(ptr+i),
+               *(ptr+i+1), *(ptr+i+2) ,*(ptr+i+3) ,*(ptr+i+4),*(ptr+i+5), *(ptr+i+6), *(ptr+i+7));
+       DBG_871X("############################# \n");
+}
+else if(pHalData->bDumpRxPkt ==2){
+       if(type== WIFI_MGT_TYPE){
+               int i;
+               DBG_871X("############################# \n");
+
+               for(i=0; i<64;i=i+8)
+                       DBG_871X("%02X:%02X:%02X:%02X:%02X:%02X:%02X:%02X:\n", *(ptr+i),
+                       *(ptr+i+1), *(ptr+i+2) ,*(ptr+i+3) ,*(ptr+i+4),*(ptr+i+5), *(ptr+i+6), *(ptr+i+7));
+               DBG_871X("############################# \n");
+       }
+}
+else if(pHalData->bDumpRxPkt ==3){
+       if(type== WIFI_DATA_TYPE){
+               int i;
+               DBG_871X("############################# \n");
+
+               for(i=0; i<64;i=i+8)
+                       DBG_871X("%02X:%02X:%02X:%02X:%02X:%02X:%02X:%02X:\n", *(ptr+i),
+                       *(ptr+i+1), *(ptr+i+2) ,*(ptr+i+3) ,*(ptr+i+4),*(ptr+i+5), *(ptr+i+6), *(ptr+i+7));
+               DBG_871X("############################# \n");
+       }
+}
+
+#endif
+       switch (type)
+       {
+               case WIFI_MGT_TYPE: //mgnt
+#ifdef CONFIG_IEEE80211W
+                       if(validate_80211w_mgmt(adapter, precv_frame) == _FAIL)
+                       {
+                               retval = _FAIL;
+                               break;
+                       }
+#endif //CONFIG_IEEE80211W
+
+                       retval = validate_recv_mgnt_frame(adapter, precv_frame);
+                       if (retval == _FAIL)
+                       {
+                               RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("validate_recv_mgnt_frame fail\n"));
+                       }
+                       retval = _FAIL; // only data frame return _SUCCESS
+                       break;
+               case WIFI_CTRL_TYPE: //ctrl
+                       retval = validate_recv_ctrl_frame(adapter, precv_frame);
+                       if (retval == _FAIL)
+                       {
+                               RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("validate_recv_ctrl_frame fail\n"));
+                       }
+                       retval = _FAIL; // only data frame return _SUCCESS
+                       break;
+               case WIFI_DATA_TYPE: //data
+                       rtw_led_control(adapter, LED_CTL_RX);
+                       pattrib->qos = (subtype & BIT(7))? 1:0;
+                       retval = validate_recv_data_frame(adapter, precv_frame);
+                       if (retval == _FAIL)
+                       {
+                               struct recv_priv *precvpriv = &adapter->recvpriv;
+                               RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("validate_recv_data_frame fail\n"));
+                               precvpriv->rx_drop++;
+                       }
+                       break;
+               default:
+                       RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("validate_recv_data_frame fail! type=0x%x\n", type));
+                       #ifdef DBG_RX_DROP_FRAME
+                       DBG_871X("DBG_RX_DROP_FRAME validate_recv_data_frame fail! type=0x%x\n", type);
+                       #endif
+                       retval = _FAIL;
+                       break;
+       }
+
+exit:
+
+_func_exit_;
+
+       return retval;
+}
+
+
+//remove the wlanhdr and add the eth_hdr
+#if 1
+
+sint wlanhdr_to_ethhdr ( union recv_frame *precvframe);
+sint wlanhdr_to_ethhdr ( union recv_frame *precvframe)
+{
+       sint    rmv_len;
+       u16     eth_type, len;
+       u8      bsnaphdr;
+       u8      *psnap_type;
+       struct ieee80211_snap_hdr       *psnap;
+
+       sint ret=_SUCCESS;
+       _adapter                        *adapter =precvframe->u.hdr.adapter;
+       struct mlme_priv        *pmlmepriv = &adapter->mlmepriv;
+
+       u8      *ptr = get_recvframe_data(precvframe) ; // point to frame_ctrl field
+       struct rx_pkt_attrib *pattrib = & precvframe->u.hdr.attrib;
+
+_func_enter_;
+
+       if(pattrib->encrypt){
+               recvframe_pull_tail(precvframe, pattrib->icv_len);
+       }
+
+       psnap=(struct ieee80211_snap_hdr        *)(ptr+pattrib->hdrlen + pattrib->iv_len);
+       psnap_type=ptr+pattrib->hdrlen + pattrib->iv_len+SNAP_SIZE;
+       /* convert hdr + possible LLC headers into Ethernet header */
+       //eth_type = (psnap_type[0] << 8) | psnap_type[1];
+       if((_rtw_memcmp(psnap, rtw_rfc1042_header, SNAP_SIZE) &&
+               (_rtw_memcmp(psnap_type, SNAP_ETH_TYPE_IPX, 2) == _FALSE) &&
+               (_rtw_memcmp(psnap_type, SNAP_ETH_TYPE_APPLETALK_AARP, 2)==_FALSE) )||
+               //eth_type != ETH_P_AARP && eth_type != ETH_P_IPX) ||
+                _rtw_memcmp(psnap, rtw_bridge_tunnel_header, SNAP_SIZE)){
+               /* remove RFC1042 or Bridge-Tunnel encapsulation and replace EtherType */
+               bsnaphdr = _TRUE;
+       }
+       else {
+               /* Leave Ethernet header part of hdr and full payload */
+               bsnaphdr = _FALSE;
+       }
+
+       rmv_len = pattrib->hdrlen + pattrib->iv_len +(bsnaphdr?SNAP_SIZE:0);
+       len = precvframe->u.hdr.len - rmv_len;
+
+       RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("\n===pattrib->hdrlen: %x,  pattrib->iv_len:%x ===\n\n", pattrib->hdrlen,  pattrib->iv_len));
+
+       _rtw_memcpy(&eth_type, ptr+rmv_len, 2);
+       eth_type= ntohs((unsigned short )eth_type); //pattrib->ether_type
+       pattrib->eth_type = eth_type;
+
+       if ((check_fwstate(pmlmepriv, WIFI_MP_STATE) == _TRUE))
+       {
+               ptr += rmv_len ;
+               *ptr = 0x87;
+               *(ptr+1) = 0x12;
+
+               eth_type = 0x8712;
+               // append rx status for mp test packets
+               ptr = recvframe_pull(precvframe, (rmv_len-sizeof(struct ethhdr)+2)-24);
+               _rtw_memcpy(ptr, get_rxmem(precvframe), 24);
+               ptr+=24;
+       }
+       else {
+               ptr = recvframe_pull(precvframe, (rmv_len-sizeof(struct ethhdr)+ (bsnaphdr?2:0)));
+       }
+
+       _rtw_memcpy(ptr, pattrib->dst, ETH_ALEN);
+       _rtw_memcpy(ptr+ETH_ALEN, pattrib->src, ETH_ALEN);
+
+       if(!bsnaphdr) {
+               len = htons(len);
+               _rtw_memcpy(ptr+12, &len, 2);
+       }
+
+_func_exit_;
+       return ret;
+
+}
+
+#else
+
+sint wlanhdr_to_ethhdr ( union recv_frame *precvframe)
+{
+       sint rmv_len;
+       u16 eth_type;
+       u8      bsnaphdr;
+       u8      *psnap_type;
+       struct ieee80211_snap_hdr       *psnap;
+
+       sint ret=_SUCCESS;
+       _adapter        *adapter =precvframe->u.hdr.adapter;
+       struct  mlme_priv       *pmlmepriv = &adapter->mlmepriv;
+
+       u8* ptr = get_recvframe_data(precvframe) ; // point to frame_ctrl field
+       struct rx_pkt_attrib *pattrib = & precvframe->u.hdr.attrib;
+       struct _vlan *pvlan = NULL;
+
+_func_enter_;
+
+       psnap=(struct ieee80211_snap_hdr        *)(ptr+pattrib->hdrlen + pattrib->iv_len);
+       psnap_type=ptr+pattrib->hdrlen + pattrib->iv_len+SNAP_SIZE;
+       if (psnap->dsap==0xaa && psnap->ssap==0xaa && psnap->ctrl==0x03)
+       {
+               if (_rtw_memcmp(psnap->oui, oui_rfc1042, WLAN_IEEE_OUI_LEN))
+                       bsnaphdr=_TRUE;//wlan_pkt_format = WLAN_PKT_FORMAT_SNAP_RFC1042;
+               else if (_rtw_memcmp(psnap->oui, SNAP_HDR_APPLETALK_DDP, WLAN_IEEE_OUI_LEN) &&
+                       _rtw_memcmp(psnap_type, SNAP_ETH_TYPE_APPLETALK_DDP, 2) )
+                       bsnaphdr=_TRUE; //wlan_pkt_format = WLAN_PKT_FORMAT_APPLETALK;
+               else if (_rtw_memcmp( psnap->oui, oui_8021h, WLAN_IEEE_OUI_LEN))
+                       bsnaphdr=_TRUE; //wlan_pkt_format = WLAN_PKT_FORMAT_SNAP_TUNNEL;
+               else {
+                       RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("drop pkt due to invalid frame format!\n"));
+                       ret= _FAIL;
+                       goto exit;
+               }
+
+       } else
+               bsnaphdr=_FALSE;//wlan_pkt_format = WLAN_PKT_FORMAT_OTHERS;
+
+       rmv_len = pattrib->hdrlen + pattrib->iv_len +(bsnaphdr?SNAP_SIZE:0);
+       RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("===pattrib->hdrlen: %x,  pattrib->iv_len:%x ===\n", pattrib->hdrlen,  pattrib->iv_len));
+
+       if (check_fwstate(pmlmepriv, WIFI_MP_STATE) == _TRUE)
+       {
+               ptr += rmv_len ;
+               *ptr = 0x87;
+               *(ptr+1) = 0x12;
+
+               //back to original pointer
+               ptr -= rmv_len;
+       }
+
+       ptr += rmv_len ;
+
+       _rtw_memcpy(&eth_type, ptr, 2);
+       eth_type= ntohs((unsigned short )eth_type); //pattrib->ether_type
+       ptr +=2;
+
+       if(pattrib->encrypt){
+               recvframe_pull_tail(precvframe, pattrib->icv_len);
+       }
+
+       if(eth_type == 0x8100) //vlan
+       {
+               pvlan = (struct _vlan *) ptr;
+
+               //eth_type = get_vlan_encap_proto(pvlan);
+               //eth_type = pvlan->h_vlan_encapsulated_proto;//?
+               rmv_len += 4;
+               ptr+=4;
+       }
+
+       if(eth_type==0x0800)//ip
+       {
+               //struct iphdr*  piphdr = (struct iphdr*) ptr;
+               //__u8 tos = (unsigned char)(pattrib->priority & 0xff);
+
+               //piphdr->tos = tos;
+
+               //if (piphdr->protocol == 0x06)
+               //{
+               //      RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("@@@===recv tcp len:%d @@@===\n", precvframe->u.hdr.len));
+               //}
+       }
+       else if(eth_type==0x8712)// append rx status for mp test packets
+       {
+               //ptr -= 16;
+               //_rtw_memcpy(ptr, get_rxmem(precvframe), 16);
+       }
+       else
+       {
+#ifdef PLATFORM_OS_XP
+               NDIS_PACKET_8021Q_INFO VlanPriInfo;
+               UINT32 UserPriority = precvframe->u.hdr.attrib.priority;
+               UINT32 VlanID = (pvlan!=NULL ? get_vlan_id(pvlan) : 0 );
+
+               VlanPriInfo.Value =          // Get current value.
+                               NDIS_PER_PACKET_INFO_FROM_PACKET(precvframe->u.hdr.pkt, Ieee8021QInfo);
+
+               VlanPriInfo.TagHeader.UserPriority = UserPriority;
+               VlanPriInfo.TagHeader.VlanId =  VlanID ;
+
+               VlanPriInfo.TagHeader.CanonicalFormatId = 0; // Should be zero.
+               VlanPriInfo.TagHeader.Reserved = 0; // Should be zero.
+               NDIS_PER_PACKET_INFO_FROM_PACKET(precvframe->u.hdr.pkt, Ieee8021QInfo) = VlanPriInfo.Value;
+#endif
+       }
+
+       if(eth_type==0x8712)// append rx status for mp test packets
+       {
+               ptr = recvframe_pull(precvframe, (rmv_len-sizeof(struct ethhdr)+2)-24);
+               _rtw_memcpy(ptr, get_rxmem(precvframe), 24);
+               ptr+=24;
+       }
+       else
+               ptr = recvframe_pull(precvframe, (rmv_len-sizeof(struct ethhdr)+2));
+
+       _rtw_memcpy(ptr, pattrib->dst, ETH_ALEN);
+       _rtw_memcpy(ptr+ETH_ALEN, pattrib->src, ETH_ALEN);
+
+       eth_type = htons((unsigned short)eth_type) ;
+       _rtw_memcpy(ptr+12, &eth_type, 2);
+
+exit:
+
+_func_exit_;
+
+       return ret;
+}
+#endif
+
+
+#ifdef CONFIG_SDIO_HCI
+#ifdef PLATFORM_LINUX
+static void recvframe_expand_pkt(
+       PADAPTER padapter,
+       union recv_frame *prframe)
+{
+       struct recv_frame_hdr *pfhdr;
+       _pkt *ppkt;
+       u8 shift_sz;
+       u32 alloc_sz;
+
+
+       pfhdr = &prframe->u.hdr;
+
+       //      6 is for IP header 8 bytes alignment in QoS packet case.
+       if (pfhdr->attrib.qos)
+               shift_sz = 6;
+       else
+               shift_sz = 0;
+
+       // for first fragment packet, need to allocate
+       // (1536 + RXDESC_SIZE + drvinfo_sz) to reassemble packet
+       //      8 is for skb->data 8 bytes alignment.
+//     alloc_sz = _RND(1536 + RXDESC_SIZE + pfhdr->attrib.drvinfosize + shift_sz + 8, 128);
+       alloc_sz = 1664; // round (1536 + 24 + 32 + shift_sz + 8) to 128 bytes alignment
+
+       //3 1. alloc new skb
+       // prepare extra space for 4 bytes alignment
+       ppkt = rtw_skb_alloc(alloc_sz);
+
+       if (!ppkt) return; // no way to expand
+
+       //3 2. Prepare new skb to replace & release old skb
+       // force ppkt->data at 8-byte alignment address
+       skb_reserve(ppkt, 8 - ((SIZE_PTR)ppkt->data & 7));
+       // force ip_hdr at 8-byte alignment address according to shift_sz
+       skb_reserve(ppkt, shift_sz);
+
+       // copy data to new pkt
+       _rtw_memcpy(skb_put(ppkt, pfhdr->len), pfhdr->rx_data, pfhdr->len);
+
+       rtw_skb_free(pfhdr->pkt);
+
+       // attach new pkt to recvframe
+       pfhdr->pkt = ppkt;
+       pfhdr->rx_head = ppkt->head;
+       pfhdr->rx_data = ppkt->data;
+       pfhdr->rx_tail = skb_tail_pointer(ppkt);
+       pfhdr->rx_end = skb_end_pointer(ppkt);
+}
+#else
+#warning "recvframe_expand_pkt not implement, defrag may crash system"
+#endif
+#endif
+
+//perform defrag
+union recv_frame * recvframe_defrag(_adapter *adapter,_queue *defrag_q);
+union recv_frame * recvframe_defrag(_adapter *adapter,_queue *defrag_q)
+{
+       _list    *plist, *phead;
+       u8      *data,wlanhdr_offset;
+       u8      curfragnum;
+       struct recv_frame_hdr *pfhdr,*pnfhdr;
+       union recv_frame* prframe, *pnextrframe;
+       _queue  *pfree_recv_queue;
+
+_func_enter_;
+
+       curfragnum=0;
+       pfree_recv_queue=&adapter->recvpriv.free_recv_queue;
+
+       phead = get_list_head(defrag_q);
+       plist = get_next(phead);
+       prframe = LIST_CONTAINOR(plist, union recv_frame, u);
+       pfhdr=&prframe->u.hdr;
+       rtw_list_delete(&(prframe->u.list));
+
+       if(curfragnum!=pfhdr->attrib.frag_num)
+       {
+               //the first fragment number must be 0
+               //free the whole queue
+               rtw_free_recvframe(prframe, pfree_recv_queue);
+               rtw_free_recvframe_queue(defrag_q, pfree_recv_queue);
+
+               return NULL;
+       }
+
+#ifdef CONFIG_SDIO_HCI
+       recvframe_expand_pkt(adapter, prframe);
+#endif
+
+       curfragnum++;
+
+       plist= get_list_head(defrag_q);
+
+       plist = get_next(plist);
+
+       data=get_recvframe_data(prframe);
+
+       while(rtw_end_of_queue_search(phead, plist) == _FALSE)
+       {
+               pnextrframe = LIST_CONTAINOR(plist, union recv_frame , u);
+               pnfhdr=&pnextrframe->u.hdr;
+
+
+               //check the fragment sequence  (2nd ~n fragment frame)
+
+               if(curfragnum!=pnfhdr->attrib.frag_num)
+               {
+                       //the fragment number must be increasing  (after decache)
+                       //release the defrag_q & prframe
+                       rtw_free_recvframe(prframe, pfree_recv_queue);
+                       rtw_free_recvframe_queue(defrag_q, pfree_recv_queue);
+                       return NULL;
+               }
+
+               curfragnum++;
+
+               //copy the 2nd~n fragment frame's payload to the first fragment
+               //get the 2nd~last fragment frame's payload
+
+               wlanhdr_offset = pnfhdr->attrib.hdrlen + pnfhdr->attrib.iv_len;
+
+               recvframe_pull(pnextrframe, wlanhdr_offset);
+
+               //append  to first fragment frame's tail (if privacy frame, pull the ICV)
+               recvframe_pull_tail(prframe, pfhdr->attrib.icv_len);
+
+               //memcpy
+               _rtw_memcpy(pfhdr->rx_tail, pnfhdr->rx_data, pnfhdr->len);
+
+               recvframe_put(prframe, pnfhdr->len);
+
+               pfhdr->attrib.icv_len=pnfhdr->attrib.icv_len;
+               plist = get_next(plist);
+
+       };
+
+       //free the defrag_q queue and return the prframe
+       rtw_free_recvframe_queue(defrag_q, pfree_recv_queue);
+
+       RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("Performance defrag!!!!!\n"));
+
+_func_exit_;
+
+       return prframe;
+}
+
+//check if need to defrag, if needed queue the frame to defrag_q
+union recv_frame* recvframe_chk_defrag(PADAPTER padapter, union recv_frame *precv_frame)
+{
+       u8      ismfrag;
+       u8      fragnum;
+       u8      *psta_addr;
+       struct recv_frame_hdr *pfhdr;
+       struct sta_info *psta;
+       struct sta_priv *pstapriv;
+       _list *phead;
+       union recv_frame *prtnframe = NULL;
+       _queue *pfree_recv_queue, *pdefrag_q;
+
+_func_enter_;
+
+       pstapriv = &padapter->stapriv;
+
+       pfhdr = &precv_frame->u.hdr;
+
+       pfree_recv_queue = &padapter->recvpriv.free_recv_queue;
+
+       //need to define struct of wlan header frame ctrl
+       ismfrag = pfhdr->attrib.mfrag;
+       fragnum = pfhdr->attrib.frag_num;
+
+       psta_addr = pfhdr->attrib.ta;
+       psta = rtw_get_stainfo(pstapriv, psta_addr);
+       if (psta == NULL)
+       {
+               u8 type = GetFrameType(pfhdr->rx_data);
+               if (type != WIFI_DATA_TYPE) {
+                       psta = rtw_get_bcmc_stainfo(padapter);
+                       pdefrag_q = &psta->sta_recvpriv.defrag_q;
+               } else
+                       pdefrag_q = NULL;
+       }
+       else
+               pdefrag_q = &psta->sta_recvpriv.defrag_q;
+
+       if ((ismfrag==0) && (fragnum==0))
+       {
+               prtnframe = precv_frame;//isn't a fragment frame
+       }
+
+       if (ismfrag==1)
+       {
+               //0~(n-1) fragment frame
+               //enqueue to defraf_g
+               if(pdefrag_q != NULL)
+               {
+                       if(fragnum==0)
+                       {
+                               //the first fragment
+                               if(_rtw_queue_empty(pdefrag_q) == _FALSE)
+                               {
+                                       //free current defrag_q
+                                       rtw_free_recvframe_queue(pdefrag_q, pfree_recv_queue);
+                               }
+                       }
+
+
+                       //Then enqueue the 0~(n-1) fragment into the defrag_q
+
+                       //_rtw_spinlock(&pdefrag_q->lock);
+                       phead = get_list_head(pdefrag_q);
+                       rtw_list_insert_tail(&pfhdr->list, phead);
+                       //_rtw_spinunlock(&pdefrag_q->lock);
+
+                       RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("Enqueuq: ismfrag = %d, fragnum= %d\n", ismfrag,fragnum));
+
+                       prtnframe=NULL;
+
+               }
+               else
+               {
+                       //can't find this ta's defrag_queue, so free this recv_frame
+                       rtw_free_recvframe(precv_frame, pfree_recv_queue);
+                       prtnframe=NULL;
+                       RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("Free because pdefrag_q ==NULL: ismfrag = %d, fragnum= %d\n", ismfrag, fragnum));
+               }
+
+       }
+
+       if((ismfrag==0)&&(fragnum!=0))
+       {
+               //the last fragment frame
+               //enqueue the last fragment
+               if(pdefrag_q != NULL)
+               {
+                       //_rtw_spinlock(&pdefrag_q->lock);
+                       phead = get_list_head(pdefrag_q);
+                       rtw_list_insert_tail(&pfhdr->list,phead);
+                       //_rtw_spinunlock(&pdefrag_q->lock);
+
+                       //call recvframe_defrag to defrag
+                       RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("defrag: ismfrag = %d, fragnum= %d\n", ismfrag, fragnum));
+                       precv_frame = recvframe_defrag(padapter, pdefrag_q);
+                       prtnframe=precv_frame;
+
+               }
+               else
+               {
+                       //can't find this ta's defrag_queue, so free this recv_frame
+                       rtw_free_recvframe(precv_frame, pfree_recv_queue);
+                       prtnframe=NULL;
+                       RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("Free because pdefrag_q ==NULL: ismfrag = %d, fragnum= %d\n", ismfrag,fragnum));
+               }
+
+       }
+
+
+       if((prtnframe!=NULL)&&(prtnframe->u.hdr.attrib.privacy))
+       {
+               //after defrag we must check tkip mic code
+               if(recvframe_chkmic(padapter,  prtnframe)==_FAIL)
+               {
+                       RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("recvframe_chkmic(padapter,  prtnframe)==_FAIL\n"));
+                       rtw_free_recvframe(prtnframe,pfree_recv_queue);
+                       prtnframe=NULL;
+               }
+       }
+
+_func_exit_;
+
+       return prtnframe;
+
+}
+
+#define ENDIAN_FREE 1
+
+int amsdu_to_msdu(_adapter *padapter, union recv_frame *prframe);
+int amsdu_to_msdu(_adapter *padapter, union recv_frame *prframe)
+{
+#if defined (PLATFORM_LINUX) || defined (PLATFORM_FREEBSD)  //for amsdu TP improvement,Creator: Thomas
+       int     a_len, padding_len;
+       u16     eth_type, nSubframe_Length;
+       u8      nr_subframes, i;
+       unsigned char *pdata;
+       struct rx_pkt_attrib *pattrib;
+#ifndef PLATFORM_FREEBSD
+       unsigned char *data_ptr;
+       _pkt *sub_skb,*subframes[MAX_SUBFRAME_COUNT];
+#endif //PLATFORM_FREEBSD
+       struct recv_priv *precvpriv = &padapter->recvpriv;
+       _queue *pfree_recv_queue = &(precvpriv->free_recv_queue);
+       int     ret = _SUCCESS;
+#ifdef PLATFORM_FREEBSD
+       struct mbuf *sub_m=NULL, *subframes[MAX_SUBFRAME_COUNT];
+       u8 *ptr,offset;
+#endif //PLATFORM_FREEBSD
+       nr_subframes = 0;
+
+       pattrib = &prframe->u.hdr.attrib;
+
+       recvframe_pull(prframe, prframe->u.hdr.attrib.hdrlen);
+
+       if(prframe->u.hdr.attrib.iv_len >0)
+       {
+               recvframe_pull(prframe, prframe->u.hdr.attrib.iv_len);
+       }
+
+       a_len = prframe->u.hdr.len;
+
+       pdata = prframe->u.hdr.rx_data;
+
+       while(a_len > ETH_HLEN) {
+
+               /* Offset 12 denote 2 mac address */
+#ifdef ENDIAN_FREE
+               //nSubframe_Length = ntohs(*((u16*)(pdata + 12)));
+               nSubframe_Length = RTW_GET_BE16(pdata + 12);
+#else // ENDIAN_FREE
+               nSubframe_Length = *((u16*)(pdata + 12));
+               //==m==>change the length order
+               nSubframe_Length = (nSubframe_Length>>8) + (nSubframe_Length<<8);
+               //ntohs(nSubframe_Length);
+#endif // ENDIAN_FREE
+
+               if( a_len < (ETHERNET_HEADER_SIZE + nSubframe_Length) ) {
+                       DBG_871X("nRemain_Length is %d and nSubframe_Length is : %d\n",a_len,nSubframe_Length);
+                       goto exit;
+               }
+
+#ifndef PLATFORM_FREEBSD
+               /* move the data point to data content */
+               pdata += ETH_HLEN;
+               a_len -= ETH_HLEN;
+
+               /* Allocate new skb for releasing to upper layer */
+#ifdef CONFIG_SKB_COPY
+               sub_skb = rtw_skb_alloc(nSubframe_Length + 12);
+               if(sub_skb)
+               {
+                       skb_reserve(sub_skb, 12);
+                       data_ptr = (u8 *)skb_put(sub_skb, nSubframe_Length);
+                       _rtw_memcpy(data_ptr, pdata, nSubframe_Length);
+               }
+               else
+#endif // CONFIG_SKB_COPY
+               {
+                       sub_skb = rtw_skb_clone(prframe->u.hdr.pkt);
+                       if(sub_skb)
+                       {
+                               sub_skb->data = pdata;
+                               sub_skb->len = nSubframe_Length;
+                               skb_set_tail_pointer(sub_skb, nSubframe_Length);
+                       }
+                       else
+                       {
+                               DBG_871X("rtw_skb_clone() Fail!!! , nr_subframes = %d\n",nr_subframes);
+                               break;
+                       }
+               }
+
+#else   // PLATFORM_FREEBSD
+
+               //PLATFORM_FREEBSD
+               //Allocate a mbuff,
+               //sub_m =m_devget(pdata, nSubframe_Length+12, 12, padapter->pifp,NULL);
+               sub_m =m_devget(pdata, nSubframe_Length+ETH_HLEN, ETHER_ALIGN, padapter->pifp,NULL);
+
+               pdata += ETH_HLEN;
+               a_len -= ETH_HLEN;
+#endif // PLATFORM_FREEBSD
+
+#ifndef PLATFORM_FREEBSD
+               //sub_skb->dev = padapter->pnetdev;
+               subframes[nr_subframes++] = sub_skb;
+#else  //PLATFORM_FREEBSD
+               //PLATFORM_FREEBSD
+               subframes[nr_subframes++] = sub_m;
+#endif  //PLATFORM_FREEBSD
+
+               if(nr_subframes >= MAX_SUBFRAME_COUNT) {
+                       DBG_871X("ParseSubframe(): Too many Subframes! Packets dropped!\n");
+                       break;
+               }
+
+               pdata += nSubframe_Length;
+               a_len -= nSubframe_Length;
+               if(a_len != 0) {
+                       padding_len = 4 - ((nSubframe_Length + ETH_HLEN) & (4-1));
+                       if(padding_len == 4) {
+                               padding_len = 0;
+                       }
+
+                       if(a_len < padding_len) {
+                               goto exit;
+                       }
+                       pdata += padding_len;
+                       a_len -= padding_len;
+               }
+       }
+
+       for(i=0; i<nr_subframes; i++){
+#ifndef PLATFORM_FREEBSD
+               sub_skb = subframes[i];
+               /* convert hdr + possible LLC headers into Ethernet header */
+#ifdef ENDIAN_FREE
+               //eth_type = ntohs(*(u16*)&sub_skb->data[6]);
+               eth_type = RTW_GET_BE16(&sub_skb->data[6]);
+#else // ENDIAN_FREE
+               eth_type = (sub_skb->data[6] << 8) | sub_skb->data[7];
+#endif // ENDIAN_FREE
+               if (sub_skb->len >= 8 &&
+                       ((_rtw_memcmp(sub_skb->data, rtw_rfc1042_header, SNAP_SIZE) &&
+                         eth_type != ETH_P_AARP && eth_type != ETH_P_IPX) ||
+                        _rtw_memcmp(sub_skb->data, rtw_bridge_tunnel_header, SNAP_SIZE) )) {
+                       /* remove RFC1042 or Bridge-Tunnel encapsulation and replace EtherType */
+                       skb_pull(sub_skb, SNAP_SIZE);
+                       _rtw_memcpy(skb_push(sub_skb, ETH_ALEN), pattrib->src, ETH_ALEN);
+                       _rtw_memcpy(skb_push(sub_skb, ETH_ALEN), pattrib->dst, ETH_ALEN);
+               } else {
+                       u16 len;
+                       /* Leave Ethernet header part of hdr and full payload */
+                       len = htons(sub_skb->len);
+                       _rtw_memcpy(skb_push(sub_skb, 2), &len, 2);
+                       _rtw_memcpy(skb_push(sub_skb, ETH_ALEN), pattrib->src, ETH_ALEN);
+                       _rtw_memcpy(skb_push(sub_skb, ETH_ALEN), pattrib->dst, ETH_ALEN);
+               }
+
+               /* Indicat the packets to upper layer */
+               if (sub_skb) {
+                       //memset(sub_skb->cb, 0, sizeof(sub_skb->cb));
+
+#ifdef CONFIG_BR_EXT
+                       // Insert NAT2.5 RX here!
+                       struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
+                       void *br_port = NULL;
+
+#if (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
+                       br_port = padapter->pnetdev->br_port;
+#else   // (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
+                       rcu_read_lock();
+                       br_port = rcu_dereference(padapter->pnetdev->rx_handler_data);
+                       rcu_read_unlock();
+#endif  // (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
+
+
+                       if( br_port && (check_fwstate(pmlmepriv, WIFI_STATION_STATE|WIFI_ADHOC_STATE) == _TRUE) )
+                       {
+                               int nat25_handle_frame(_adapter *priv, struct sk_buff *skb);
+                               if (nat25_handle_frame(padapter, sub_skb) == -1) {
+                                       //priv->ext_stats.rx_data_drops++;
+                                       //DEBUG_ERR("RX DROP: nat25_handle_frame fail!\n");
+                                       //return FAIL;
+
+#if 1
+                                       // bypass this frame to upper layer!!
+#else
+                                       rtw_skb_free(sub_skb);
+                                       continue;
+#endif
+                               }
+                       }
+#endif // CONFIG_BR_EXT
+
+                       sub_skb->protocol = eth_type_trans(sub_skb, padapter->pnetdev);
+                       sub_skb->dev = padapter->pnetdev;
+
+#ifdef CONFIG_TCP_CSUM_OFFLOAD_RX
+                       if ( (pattrib->tcpchk_valid == 1) && (pattrib->tcp_chkrpt == 1) ) {
+                               sub_skb->ip_summed = CHECKSUM_UNNECESSARY;
+                       } else {
+                               sub_skb->ip_summed = CHECKSUM_NONE;
+                       }
+#else /* !CONFIG_TCP_CSUM_OFFLOAD_RX */
+                       sub_skb->ip_summed = CHECKSUM_NONE;
+#endif //CONFIG_TCP_CSUM_OFFLOAD_RX
+
+                       rtw_netif_rx(padapter->pnetdev, sub_skb);
+               }
+#else //PLATFORM_FREEBSD
+
+               //PLATFORM_FREEBSD
+               sub_m = subframes[i];
+               ptr=mtod(sub_m, u8 *);
+               offset=ETH_HLEN;
+               /* convert hdr + possible LLC headers into Ethernet header */
+#ifdef ENDIAN_FREE
+               eth_type = ntohs(*(u16*)&ptr[offset+6]);
+#else // ENDIAN_FREE
+               eth_type = (  ptr[offset+6] << 8) | ptr[offset+7];
+#endif // ENDIAN_FREE
+               if (sub_m->m_pkthdr.len >= ETH_HLEN+8 &&
+                       ((_rtw_memcmp(ptr+ETH_HLEN, rtw_rfc1042_header, SNAP_SIZE) &&
+                         eth_type != ETH_P_AARP && eth_type != ETH_P_IPX) ||
+                        _rtw_memcmp(ptr+ETH_HLEN, rtw_bridge_tunnel_header, SNAP_SIZE) )) {
+                       /* remove RFC1042 or Bridge-Tunnel encapsulation and replace EtherType */
+                       offset+=SNAP_SIZE;
+                       _rtw_memcpy(&ptr[offset-ETH_ALEN], pattrib->src, ETH_ALEN);
+                       offset-=ETH_ALEN;
+                       _rtw_memcpy(&ptr[offset-ETH_ALEN], pattrib->dst, ETH_ALEN);
+                       offset-=ETH_ALEN;
+               } else {
+                       u16 len;
+                       /* Leave Ethernet header part of hdr and full payload */
+                       len = htons(sub_m->m_pkthdr.len-offset);
+                       _rtw_memcpy(&ptr[offset- 2], &len, 2);
+                       offset-=2;
+                       _rtw_memcpy(&ptr[offset-ETH_ALEN], pattrib->src, ETH_ALEN);
+                       offset-=ETH_ALEN;
+                       _rtw_memcpy(&ptr[offset-ETH_ALEN], pattrib->dst, ETH_ALEN);
+                       offset-=ETH_ALEN;
+               }
+
+               m_adj(sub_m,offset);
+
+               /* Indicat the packets to upper layer */
+               if (sub_m) {
+
+#if 0
+#ifdef CONFIG_TCP_CSUM_OFFLOAD_RX
+                       if ( (pattrib->tcpchk_valid == 1) && (pattrib->tcp_chkrpt == 1) ) {
+                               sub_skb->ip_summed = CHECKSUM_UNNECESSARY;
+                       } else {
+                               sub_skb->ip_summed = CHECKSUM_NONE;
+                       }
+#else /* !CONFIG_TCP_CSUM_OFFLOAD_RX */
+                       sub_skb->ip_summed = CHECKSUM_NONE;
+#endif //CONFIG_TCP_CSUM_OFFLOAD_RX
+#endif //0
+
+                       if ( ((u32)(mtod(sub_m, caddr_t) + 14) % 4) != 0)
+                               printf("%s()-%d: mtod(sub_m) = %p\n", __FUNCTION__, __LINE__, mtod(sub_m, caddr_t));
+#ifdef CONFIG_RX_INDICATE_QUEUE
+                       IF_ENQUEUE(&precvpriv->rx_indicate_queue, sub_m);
+                       if (_IF_QLEN(&precvpriv->rx_indicate_queue) <= 1) {
+                               taskqueue_enqueue(taskqueue_thread, &precvpriv->rx_indicate_tasklet);
+                       }
+#else  // CONFIG_RX_INDICATE_QUEUE
+                       (*padapter->pifp->if_input)(padapter->pifp, sub_m);
+#endif // CONFIG_RX_INDICATE_QUEUE
+               }
+
+#endif //PLATFORM_FREEBSD
+       }
+
+exit:
+
+       prframe->u.hdr.len=0;
+       rtw_free_recvframe(prframe, pfree_recv_queue);//free this recv_frame
+
+       return ret;
+#else  // || defined (PLATFORM_LINUX) || defined (PLATFORM_FREEBSD)
+#ifdef PLATFORM_WINDOWS
+       _irqL irql;
+#endif //PLATFORM_WINDOWS
+       unsigned char *ptr, *pdata, *pbuf, *psnap_type;
+       union recv_frame *pnrframe, *pnrframe_new;
+       int a_len, mv_len, padding_len;
+       u16 eth_type, type_len;
+       u8 bsnaphdr;
+       struct ieee80211_snap_hdr       *psnap;
+       struct _vlan *pvlan;
+       struct recv_priv *precvpriv = &padapter->recvpriv;
+       _queue *pfree_recv_queue = &(precvpriv->free_recv_queue);
+       int ret = _SUCCESS;
+#ifdef PLATFORM_WINDOWS
+       struct recv_buf *precvbuf = prframe->u.hdr.precvbuf;
+#endif //PLATFORM_WINDOWS
+       a_len = prframe->u.hdr.len - prframe->u.hdr.attrib.hdrlen;
+
+       recvframe_pull(prframe, prframe->u.hdr.attrib.hdrlen);
+
+       if(prframe->u.hdr.attrib.iv_len >0)
+       {
+               recvframe_pull(prframe, prframe->u.hdr.attrib.iv_len);
+       }
+
+       pdata = prframe->u.hdr.rx_data;
+
+       prframe->u.hdr.len=0;
+
+       pnrframe = prframe;
+
+
+       do{
+
+               mv_len=0;
+               pnrframe->u.hdr.rx_data = pnrframe->u.hdr.rx_tail = pdata;
+               ptr = pdata;
+
+
+               _rtw_memcpy(pnrframe->u.hdr.attrib.dst, ptr, ETH_ALEN);
+               ptr+=ETH_ALEN;
+               _rtw_memcpy(pnrframe->u.hdr.attrib.src, ptr, ETH_ALEN);
+               ptr+=ETH_ALEN;
+
+               _rtw_memcpy(&type_len, ptr, 2);
+               type_len= ntohs((unsigned short )type_len);
+               ptr +=2;
+               mv_len += ETH_HLEN;
+
+               recvframe_put(pnrframe, type_len+ETH_HLEN);//update tail;
+
+               if(pnrframe->u.hdr.rx_data >= pnrframe->u.hdr.rx_tail || type_len<8)
+               {
+                       //panic("pnrframe->u.hdr.rx_data >= pnrframe->u.hdr.rx_tail || type_len<8\n");
+
+                       rtw_free_recvframe(pnrframe, pfree_recv_queue);
+
+                       goto exit;
+               }
+
+               psnap=(struct ieee80211_snap_hdr *)(ptr);
+               psnap_type=ptr+SNAP_SIZE;
+               if (psnap->dsap==0xaa && psnap->ssap==0xaa && psnap->ctrl==0x03)
+               {
+                       if ( _rtw_memcmp(psnap->oui, oui_rfc1042, WLAN_IEEE_OUI_LEN))
+                       {
+                               bsnaphdr=_TRUE;//wlan_pkt_format = WLAN_PKT_FORMAT_SNAP_RFC1042;
+                       }
+                       else if (_rtw_memcmp(psnap->oui, SNAP_HDR_APPLETALK_DDP, WLAN_IEEE_OUI_LEN) &&
+                                       _rtw_memcmp(psnap_type, SNAP_ETH_TYPE_APPLETALK_DDP, 2) )
+                       {
+                               bsnaphdr=_TRUE; //wlan_pkt_format = WLAN_PKT_FORMAT_APPLETALK;
+                       }
+                       else if (_rtw_memcmp( psnap->oui, oui_8021h, WLAN_IEEE_OUI_LEN))
+                       {
+                               bsnaphdr=_TRUE; //wlan_pkt_format = WLAN_PKT_FORMAT_SNAP_TUNNEL;
+                       }
+                       else
+                       {
+                               RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("drop pkt due to invalid frame format!\n"));
+
+                               //KeBugCheckEx(0x87123333, 0xe0, 0x4c, 0x87, 0xdd);
+
+                               //panic("0x87123333, 0xe0, 0x4c, 0x87, 0xdd\n");
+
+                               rtw_free_recvframe(pnrframe, pfree_recv_queue);
+
+                               goto exit;
+                       }
+
+               }
+               else
+               {
+                       bsnaphdr=_FALSE;//wlan_pkt_format = WLAN_PKT_FORMAT_OTHERS;
+               }
+
+               ptr += (bsnaphdr?SNAP_SIZE:0);
+               _rtw_memcpy(&eth_type, ptr, 2);
+               eth_type= ntohs((unsigned short )eth_type); //pattrib->ether_type
+
+               mv_len+= 2+(bsnaphdr?SNAP_SIZE:0);
+               ptr += 2;//now move to iphdr;
+
+               pvlan = NULL;
+               if(eth_type == 0x8100) //vlan
+               {
+                       pvlan = (struct _vlan *)ptr;
+                       ptr+=4;
+                       mv_len+=4;
+               }
+
+               if(eth_type==0x0800)//ip
+               {
+                       struct iphdr*  piphdr = (struct iphdr*)ptr;
+
+
+                       if (piphdr->protocol == 0x06)
+                       {
+                               RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("@@@===recv tcp len:%d @@@===\n", pnrframe->u.hdr.len));
+                       }
+               }
+#ifdef PLATFORM_OS_XP
+               else
+               {
+                       NDIS_PACKET_8021Q_INFO VlanPriInfo;
+                       UINT32 UserPriority = pnrframe->u.hdr.attrib.priority;
+                       UINT32 VlanID = (pvlan!=NULL ? get_vlan_id(pvlan) : 0 );
+
+                       VlanPriInfo.Value =          // Get current value.
+                                       NDIS_PER_PACKET_INFO_FROM_PACKET(pnrframe->u.hdr.pkt, Ieee8021QInfo);
+
+                       VlanPriInfo.TagHeader.UserPriority = UserPriority;
+                       VlanPriInfo.TagHeader.VlanId =  VlanID;
+
+                       VlanPriInfo.TagHeader.CanonicalFormatId = 0; // Should be zero.
+                       VlanPriInfo.TagHeader.Reserved = 0; // Should be zero.
+                       NDIS_PER_PACKET_INFO_FROM_PACKET(pnrframe->u.hdr.pkt, Ieee8021QInfo) = VlanPriInfo.Value;
+
+               }
+#endif //PLATFORM_OS_XP
+
+               pbuf = recvframe_pull(pnrframe, (mv_len-sizeof(struct ethhdr)));
+
+               _rtw_memcpy(pbuf, pnrframe->u.hdr.attrib.dst, ETH_ALEN);
+               _rtw_memcpy(pbuf+ETH_ALEN, pnrframe->u.hdr.attrib.src, ETH_ALEN);
+
+               eth_type = htons((unsigned short)eth_type) ;
+               _rtw_memcpy(pbuf+12, &eth_type, 2);
+
+               padding_len = (4) - ((type_len + ETH_HLEN)&(4-1));
+
+               a_len -= (type_len + ETH_HLEN + padding_len) ;
+
+
+#if 0
+
+       if(a_len > ETH_HLEN)
+       {
+               pnrframe_new = rtw_alloc_recvframe(pfree_recv_queue);
+               if(pnrframe_new)
+               {
+                       _pkt *pskb_copy;
+                       unsigned int copy_len  = pnrframe->u.hdr.len;
+
+                       _rtw_init_listhead(&pnrframe_new->u.hdr.list);
+
+                       pskb_copy = rtw_skb_alloc(copy_len+64);
+
+                       if(pskb_copy==NULL)
+                       {
+                               DBG_871X("amsdu_to_msdu:can not all(ocate memory for skb copy\n");
+                       }
+
+                       pnrframe_new->u.hdr.pkt = pskb_copy;
+
+                       _rtw_memcpy(pskb_copy->data, pnrframe->u.hdr.rx_data, copy_len);
+
+                       pnrframe_new->u.hdr.rx_data = pnrframe->u.hdr.rx_data;
+                       pnrframe_new->u.hdr.rx_tail = pnrframe->u.hdr.rx_data + copy_len;
+
+
+                       if ((padapter->bDriverStopped ==_FALSE)&&( padapter->bSurpriseRemoved==_FALSE))
+                       {
+                               rtw_recv_indicatepkt(padapter, pnrframe_new);//indicate this recv_frame
+                       }
+                       else
+                       {
+                               rtw_free_recvframe(pnrframe_new, pfree_recv_queue);//free this recv_frame
+                       }
+
+               }
+               else
+               {
+                       DBG_871X("amsdu_to_msdu:can not allocate memory for pnrframe_new\n");
+               }
+
+       }
+       else
+       {
+               if ((padapter->bDriverStopped ==_FALSE)&&( padapter->bSurpriseRemoved==_FALSE))
+               {
+                       rtw_recv_indicatepkt(padapter, pnrframe);//indicate this recv_frame
+               }
+               else
+               {
+                       rtw_free_recvframe(pnrframe, pfree_recv_queue);//free this recv_frame
+               }
+
+               pnrframe = NULL;
+
+       }
+
+#else // 0
+
+               //padding_len = (4) - ((type_len + ETH_HLEN)&(4-1));
+
+               //a_len -= (type_len + ETH_HLEN + padding_len) ;
+
+               pnrframe_new = NULL;
+
+
+               if(a_len > ETH_HLEN)
+               {
+                       pnrframe_new = rtw_alloc_recvframe(pfree_recv_queue);
+
+                       if(pnrframe_new)
+                       {
+
+
+                               //pnrframe_new->u.hdr.precvbuf = precvbuf;//precvbuf is assigned before call rtw_init_recvframe()
+                               //rtw_init_recvframe(pnrframe_new, precvpriv);
+                               {
+#ifdef PLATFORM_LINUX
+                                               _pkt *pskb = pnrframe->u.hdr.pkt;
+#endif //PLATFORM_LINUX
+                                               _rtw_init_listhead(&pnrframe_new->u.hdr.list);
+
+                                               pnrframe_new->u.hdr.len=0;
+
+#ifdef PLATFORM_LINUX
+                                               if(pskb)
+                                               {
+                                                       pnrframe_new->u.hdr.pkt = rtw_skb_clone(pskb);
+                                               }
+#endif //PLATFORM_LINUX
+
+                               }
+
+                               pdata += (type_len + ETH_HLEN + padding_len);
+                               pnrframe_new->u.hdr.rx_head = pnrframe_new->u.hdr.rx_data = pnrframe_new->u.hdr.rx_tail = pdata;
+                               pnrframe_new->u.hdr.rx_end = pdata + a_len + padding_len;//
+
+#ifdef PLATFORM_WINDOWS
+                               pnrframe_new->u.hdr.precvbuf=precvbuf;
+                               _enter_critical_bh(&precvbuf->recvbuf_lock, &irql);
+                               precvbuf->ref_cnt++;
+                               _exit_critical_bh(&precvbuf->recvbuf_lock, &irql);
+#endif //PLATFORM_WINDOWS
+
+                       }
+                       else
+                       {
+                               //panic("pnrframe_new=%x\n", pnrframe_new);
+                       }
+               }
+
+
+               if ((padapter->bDriverStopped ==_FALSE)&&( padapter->bSurpriseRemoved==_FALSE) )
+               {
+                       rtw_recv_indicatepkt(padapter, pnrframe);//indicate this recv_frame
+               }
+               else
+               {
+                       rtw_free_recvframe(pnrframe, pfree_recv_queue);//free this recv_frame
+               }
+
+
+               pnrframe = NULL;
+               if(pnrframe_new)
+               {
+                       pnrframe = pnrframe_new;
+               }
+
+
+#endif // end defined (PLATFORM_LINUX) || defined (PLATFORM_FREEBSD)
+
+       }while(pnrframe);
+
+exit:
+
+       return ret;
+#endif
+}
+
+int check_indicate_seq(struct recv_reorder_ctrl *preorder_ctrl, u16 seq_num);
+int check_indicate_seq(struct recv_reorder_ctrl *preorder_ctrl, u16 seq_num)
+{
+       u8      wsize = preorder_ctrl->wsize_b;
+       u16     wend = (preorder_ctrl->indicate_seq + wsize -1) & 0xFFF;//% 4096;
+
+       // Rx Reorder initialize condition.
+       if (preorder_ctrl->indicate_seq == 0xFFFF)
+       {
+               preorder_ctrl->indicate_seq = seq_num;
+               #ifdef DBG_RX_SEQ
+               DBG_871X("DBG_RX_SEQ %s:%d init IndicateSeq: %d, NewSeq: %d\n", __FUNCTION__, __LINE__,
+                       preorder_ctrl->indicate_seq, seq_num);
+               #endif
+
+               //DbgPrint("check_indicate_seq, 1st->indicate_seq=%d\n", precvpriv->indicate_seq);
+       }
+
+       //DbgPrint("enter->check_indicate_seq(): IndicateSeq: %d, NewSeq: %d\n", precvpriv->indicate_seq, seq_num);
+
+       // Drop out the packet which SeqNum is smaller than WinStart
+       if( SN_LESS(seq_num, preorder_ctrl->indicate_seq) )
+       {
+               //RT_TRACE(COMP_RX_REORDER, DBG_LOUD, ("CheckRxTsIndicateSeq(): Packet Drop! IndicateSeq: %d, NewSeq: %d\n", pTS->RxIndicateSeq, NewSeqNum));
+               //DbgPrint("CheckRxTsIndicateSeq(): Packet Drop! IndicateSeq: %d, NewSeq: %d\n", precvpriv->indicate_seq, seq_num);
+
+               #ifdef DBG_RX_DROP_FRAME
+               DBG_871X("%s IndicateSeq: %d > NewSeq: %d\n", __FUNCTION__,
+                       preorder_ctrl->indicate_seq, seq_num);
+               #endif
+
+
+               return _FALSE;
+       }
+
+       //
+       // Sliding window manipulation. Conditions includes:
+       // 1. Incoming SeqNum is equal to WinStart =>Window shift 1
+       // 2. Incoming SeqNum is larger than the WinEnd => Window shift N
+       //
+       if( SN_EQUAL(seq_num, preorder_ctrl->indicate_seq) )
+       {
+               preorder_ctrl->indicate_seq = (preorder_ctrl->indicate_seq + 1) & 0xFFF;
+               #ifdef DBG_RX_SEQ
+               DBG_871X("DBG_RX_SEQ %s:%d SN_EQUAL IndicateSeq: %d, NewSeq: %d\n", __FUNCTION__, __LINE__,
+                       preorder_ctrl->indicate_seq, seq_num);
+               #endif
+       }
+       else if(SN_LESS(wend, seq_num))
+       {
+               //RT_TRACE(COMP_RX_REORDER, DBG_LOUD, ("CheckRxTsIndicateSeq(): Window Shift! IndicateSeq: %d, NewSeq: %d\n", pTS->RxIndicateSeq, NewSeqNum));
+               //DbgPrint("CheckRxTsIndicateSeq(): Window Shift! IndicateSeq: %d, NewSeq: %d\n", precvpriv->indicate_seq, seq_num);
+
+               // boundary situation, when seq_num cross 0xFFF
+               if(seq_num >= (wsize - 1))
+                       preorder_ctrl->indicate_seq = seq_num + 1 -wsize;
+               else
+                       preorder_ctrl->indicate_seq = 0xFFF - (wsize - (seq_num + 1)) + 1;
+
+               #ifdef DBG_RX_SEQ
+               DBG_871X("DBG_RX_SEQ %s:%d SN_LESS(wend, seq_num) IndicateSeq: %d, NewSeq: %d\n", __FUNCTION__, __LINE__,
+                       preorder_ctrl->indicate_seq, seq_num);
+               #endif
+       }
+
+       //DbgPrint("exit->check_indicate_seq(): IndicateSeq: %d, NewSeq: %d\n", precvpriv->indicate_seq, seq_num);
+
+       return _TRUE;
+}
+
+int enqueue_reorder_recvframe(struct recv_reorder_ctrl *preorder_ctrl, union recv_frame *prframe);
+int enqueue_reorder_recvframe(struct recv_reorder_ctrl *preorder_ctrl, union recv_frame *prframe)
+{
+       struct rx_pkt_attrib *pattrib = &prframe->u.hdr.attrib;
+       _queue *ppending_recvframe_queue = &preorder_ctrl->pending_recvframe_queue;
+       _list   *phead, *plist;
+       union recv_frame *pnextrframe;
+       struct rx_pkt_attrib *pnextattrib;
+
+       //DbgPrint("+enqueue_reorder_recvframe()\n");
+
+       //_enter_critical_ex(&ppending_recvframe_queue->lock, &irql);
+       //_rtw_spinlock_ex(&ppending_recvframe_queue->lock);
+
+
+       phead = get_list_head(ppending_recvframe_queue);
+       plist = get_next(phead);
+
+       while(rtw_end_of_queue_search(phead, plist) == _FALSE)
+       {
+               pnextrframe = LIST_CONTAINOR(plist, union recv_frame, u);
+               pnextattrib = &pnextrframe->u.hdr.attrib;
+
+               if(SN_LESS(pnextattrib->seq_num, pattrib->seq_num))
+               {
+                       plist = get_next(plist);
+               }
+               else if( SN_EQUAL(pnextattrib->seq_num, pattrib->seq_num))
+               {
+                       //Duplicate entry is found!! Do not insert current entry.
+                       //RT_TRACE(COMP_RX_REORDER, DBG_TRACE, ("InsertRxReorderList(): Duplicate packet is dropped!! IndicateSeq: %d, NewSeq: %d\n", pTS->RxIndicateSeq, SeqNum));
+
+                       //_exit_critical_ex(&ppending_recvframe_queue->lock, &irql);
+
+                       return _FALSE;
+               }
+               else
+               {
+                       break;
+               }
+
+               //DbgPrint("enqueue_reorder_recvframe():while\n");
+
+       }
+
+
+       //_enter_critical_ex(&ppending_recvframe_queue->lock, &irql);
+       //_rtw_spinlock_ex(&ppending_recvframe_queue->lock);
+
+       rtw_list_delete(&(prframe->u.hdr.list));
+
+       rtw_list_insert_tail(&(prframe->u.hdr.list), plist);
+
+       //_rtw_spinunlock_ex(&ppending_recvframe_queue->lock);
+       //_exit_critical_ex(&ppending_recvframe_queue->lock, &irql);
+
+
+       //RT_TRACE(COMP_RX_REORDER, DBG_TRACE, ("InsertRxReorderList(): Pkt insert into buffer!! IndicateSeq: %d, NewSeq: %d\n", pTS->RxIndicateSeq, SeqNum));
+       return _TRUE;
+
+}
+
+int recv_indicatepkts_in_order(_adapter *padapter, struct recv_reorder_ctrl *preorder_ctrl, int bforced);
+int recv_indicatepkts_in_order(_adapter *padapter, struct recv_reorder_ctrl *preorder_ctrl, int bforced)
+{
+       //_irqL irql;
+       //u8 bcancelled;
+       _list   *phead, *plist;
+       union recv_frame *prframe;
+       struct rx_pkt_attrib *pattrib;
+       //u8 index = 0;
+       int bPktInBuf = _FALSE;
+       struct recv_priv *precvpriv = &padapter->recvpriv;
+       _queue *ppending_recvframe_queue = &preorder_ctrl->pending_recvframe_queue;
+
+       //DbgPrint("+recv_indicatepkts_in_order\n");
+
+       //_enter_critical_ex(&ppending_recvframe_queue->lock, &irql);
+       //_rtw_spinlock_ex(&ppending_recvframe_queue->lock);
+
+       phead =         get_list_head(ppending_recvframe_queue);
+       plist = get_next(phead);
+
+#if 0
+       // Check if there is any other indication thread running.
+       if(pTS->RxIndicateState == RXTS_INDICATE_PROCESSING)
+               return;
+#endif
+
+       // Handling some condition for forced indicate case.
+       if(bforced==_TRUE)
+       {
+               if(rtw_is_list_empty(phead))
+               {
+                       // _exit_critical_ex(&ppending_recvframe_queue->lock, &irql);
+                       //_rtw_spinunlock_ex(&ppending_recvframe_queue->lock);
+                       return _TRUE;
+               }
+
+                prframe = LIST_CONTAINOR(plist, union recv_frame, u);
+               pattrib = &prframe->u.hdr.attrib;
+               preorder_ctrl->indicate_seq = pattrib->seq_num;
+               #ifdef DBG_RX_SEQ
+               DBG_871X("DBG_RX_SEQ %s:%d IndicateSeq: %d, NewSeq: %d\n", __FUNCTION__, __LINE__,
+                       preorder_ctrl->indicate_seq, pattrib->seq_num);
+               #endif
+       }
+
+       // Prepare indication list and indication.
+       // Check if there is any packet need indicate.
+       while(!rtw_is_list_empty(phead))
+       {
+
+               prframe = LIST_CONTAINOR(plist, union recv_frame, u);
+               pattrib = &prframe->u.hdr.attrib;
+
+               if(!SN_LESS(preorder_ctrl->indicate_seq, pattrib->seq_num))
+               {
+                       RT_TRACE(_module_rtl871x_recv_c_, _drv_notice_,
+                                ("recv_indicatepkts_in_order: indicate=%d seq=%d amsdu=%d\n",
+                                 preorder_ctrl->indicate_seq, pattrib->seq_num, pattrib->amsdu));
+
+#if 0
+                       // This protect buffer from overflow.
+                       if(index >= REORDER_WIN_SIZE)
+                       {
+                               RT_ASSERT(FALSE, ("IndicateRxReorderList(): Buffer overflow!! \n"));
+                               bPktInBuf = TRUE;
+                               break;
+                       }
+#endif
+
+                       plist = get_next(plist);
+                       rtw_list_delete(&(prframe->u.hdr.list));
+
+                       if(SN_EQUAL(preorder_ctrl->indicate_seq, pattrib->seq_num))
+                       {
+                               preorder_ctrl->indicate_seq = (preorder_ctrl->indicate_seq + 1) & 0xFFF;
+                               #ifdef DBG_RX_SEQ
+                               DBG_871X("DBG_RX_SEQ %s:%d IndicateSeq: %d, NewSeq: %d\n", __FUNCTION__, __LINE__,
+                                       preorder_ctrl->indicate_seq, pattrib->seq_num);
+                               #endif
+                       }
+
+#if 0
+                       index++;
+                       if(index==1)
+                       {
+                               //Cancel previous pending timer.
+                               //PlatformCancelTimer(Adapter, &pTS->RxPktPendingTimer);
+                               if(bforced!=_TRUE)
+                               {
+                                       //DBG_871X("_cancel_timer(&preorder_ctrl->reordering_ctrl_timer, &bcancelled);\n");
+                                       _cancel_timer(&preorder_ctrl->reordering_ctrl_timer, &bcancelled);
+                               }
+                       }
+#endif
+
+                       //Set this as a lock to make sure that only one thread is indicating packet.
+                       //pTS->RxIndicateState = RXTS_INDICATE_PROCESSING;
+
+                       // Indicate packets
+                       //RT_ASSERT((index<=REORDER_WIN_SIZE), ("RxReorderIndicatePacket(): Rx Reorder buffer full!! \n"));
+
+
+                       //indicate this recv_frame
+                       //DbgPrint("recv_indicatepkts_in_order, indicate_seq=%d, seq_num=%d\n", precvpriv->indicate_seq, pattrib->seq_num);
+                       if(!pattrib->amsdu)
+                       {
+                               //DBG_871X("recv_indicatepkts_in_order, amsdu!=1, indicate_seq=%d, seq_num=%d\n", preorder_ctrl->indicate_seq, pattrib->seq_num);
+
+                               if ((padapter->bDriverStopped == _FALSE) &&
+                                   (padapter->bSurpriseRemoved == _FALSE))
+                               {
+
+                                       rtw_recv_indicatepkt(padapter, prframe);//indicate this recv_frame
+
+                               }
+                       }
+                       else if(pattrib->amsdu==1)
+                       {
+                               if(amsdu_to_msdu(padapter, prframe)!=_SUCCESS)
+                               {
+                                       rtw_free_recvframe(prframe, &precvpriv->free_recv_queue);
+                               }
+                       }
+                       else
+                       {
+                               //error condition;
+                       }
+
+
+                       //Update local variables.
+                       bPktInBuf = _FALSE;
+
+               }
+               else
+               {
+                       bPktInBuf = _TRUE;
+                       break;
+               }
+
+               //DbgPrint("recv_indicatepkts_in_order():while\n");
+
+       }
+
+       //_rtw_spinunlock_ex(&ppending_recvframe_queue->lock);
+       //_exit_critical_ex(&ppending_recvframe_queue->lock, &irql);
+
+/*
+       //Release the indication lock and set to new indication step.
+       if(bPktInBuf)
+       {
+               // Set new pending timer.
+               //pTS->RxIndicateState = RXTS_INDICATE_REORDER;
+               //PlatformSetTimer(Adapter, &pTS->RxPktPendingTimer, pHTInfo->RxReorderPendingTime);
+               //DBG_871X("_set_timer(&preorder_ctrl->reordering_ctrl_timer, REORDER_WAIT_TIME)\n");
+               _set_timer(&preorder_ctrl->reordering_ctrl_timer, REORDER_WAIT_TIME);
+       }
+       else
+       {
+               //pTS->RxIndicateState = RXTS_INDICATE_IDLE;
+       }
+*/
+       //_exit_critical_ex(&ppending_recvframe_queue->lock, &irql);
+
+       //return _TRUE;
+       return bPktInBuf;
+
+}
+
+int recv_indicatepkt_reorder(_adapter *padapter, union recv_frame *prframe);
+int recv_indicatepkt_reorder(_adapter *padapter, union recv_frame *prframe)
+{
+       _irqL irql;
+       int retval = _SUCCESS;
+       struct rx_pkt_attrib *pattrib = &prframe->u.hdr.attrib;
+       struct recv_reorder_ctrl *preorder_ctrl = prframe->u.hdr.preorder_ctrl;
+       _queue *ppending_recvframe_queue = &preorder_ctrl->pending_recvframe_queue;
+
+       if(!pattrib->amsdu)
+       {
+               //s1.
+               wlanhdr_to_ethhdr(prframe);
+
+               //if ((pattrib->qos!=1) /*|| pattrib->priority!=0 || IS_MCAST(pattrib->ra)*/
+               //      || (pattrib->eth_type==0x0806) || (pattrib->ack_policy!=0))
+               if (pattrib->qos!=1)
+               {
+                       if ((padapter->bDriverStopped == _FALSE) &&
+                           (padapter->bSurpriseRemoved == _FALSE))
+                       {
+                               RT_TRACE(_module_rtl871x_recv_c_, _drv_alert_, ("@@@@  recv_indicatepkt_reorder -recv_func recv_indicatepkt\n" ));
+
+                               rtw_recv_indicatepkt(padapter, prframe);
+                               return _SUCCESS;
+
+                       }
+
+                       #ifdef DBG_RX_DROP_FRAME
+                       DBG_871X("DBG_RX_DROP_FRAME %s pattrib->qos !=1\n", __FUNCTION__);
+                       #endif
+
+                       return _FAIL;
+
+               }
+
+               if (preorder_ctrl->enable == _FALSE)
+               {
+                       //indicate this recv_frame
+                       preorder_ctrl->indicate_seq = pattrib->seq_num;
+                       #ifdef DBG_RX_SEQ
+                       DBG_871X("DBG_RX_SEQ %s:%d IndicateSeq: %d, NewSeq: %d\n", __FUNCTION__, __LINE__,
+                               preorder_ctrl->indicate_seq, pattrib->seq_num);
+                       #endif
+
+                       rtw_recv_indicatepkt(padapter, prframe);
+
+                       preorder_ctrl->indicate_seq = (preorder_ctrl->indicate_seq + 1)%4096;
+                       #ifdef DBG_RX_SEQ
+                       DBG_871X("DBG_RX_SEQ %s:%d IndicateSeq: %d, NewSeq: %d\n", __FUNCTION__, __LINE__,
+                               preorder_ctrl->indicate_seq, pattrib->seq_num);
+                       #endif
+
+                       return _SUCCESS;
+               }
+
+#ifndef CONFIG_RECV_REORDERING_CTRL
+               //indicate this recv_frame
+               rtw_recv_indicatepkt(padapter, prframe);
+               return _SUCCESS;
+#endif
+
+       }
+       else if(pattrib->amsdu==1) //temp filter -> means didn't support A-MSDUs in a A-MPDU
+       {
+               if (preorder_ctrl->enable == _FALSE)
+               {
+                       preorder_ctrl->indicate_seq = pattrib->seq_num;
+                       #ifdef DBG_RX_SEQ
+                       DBG_871X("DBG_RX_SEQ %s:%d IndicateSeq: %d, NewSeq: %d\n", __FUNCTION__, __LINE__,
+                               preorder_ctrl->indicate_seq, pattrib->seq_num);
+                       #endif
+
+                       retval = amsdu_to_msdu(padapter, prframe);
+
+                       preorder_ctrl->indicate_seq = (preorder_ctrl->indicate_seq + 1)%4096;
+                       #ifdef DBG_RX_SEQ
+                       DBG_871X("DBG_RX_SEQ %s:%d IndicateSeq: %d, NewSeq: %d\n", __FUNCTION__, __LINE__,
+                               preorder_ctrl->indicate_seq, pattrib->seq_num);
+                       #endif
+
+                       if(retval != _SUCCESS){
+                               #ifdef DBG_RX_DROP_FRAME
+                               DBG_871X("DBG_RX_DROP_FRAME %s amsdu_to_msdu fail\n", __FUNCTION__);
+                               #endif
+                       }
+
+                       return retval;
+               }
+       }
+       else
+       {
+
+       }
+
+       _enter_critical_bh(&ppending_recvframe_queue->lock, &irql);
+
+       RT_TRACE(_module_rtl871x_recv_c_, _drv_notice_,
+                ("recv_indicatepkt_reorder: indicate=%d seq=%d\n",
+                 preorder_ctrl->indicate_seq, pattrib->seq_num));
+
+       //s2. check if winstart_b(indicate_seq) needs to been updated
+       if(!check_indicate_seq(preorder_ctrl, pattrib->seq_num))
+       {
+               //pHTInfo->RxReorderDropCounter++;
+               //ReturnRFDList(Adapter, pRfd);
+               //RT_TRACE(COMP_RX_REORDER, DBG_TRACE, ("RxReorderIndicatePacket() ==> Packet Drop!!\n"));
+               //_exit_critical_ex(&ppending_recvframe_queue->lock, &irql);
+               //return _FAIL;
+
+               #ifdef DBG_RX_DROP_FRAME
+               DBG_871X("DBG_RX_DROP_FRAME %s check_indicate_seq fail\n", __FUNCTION__);
+               #endif
+#if 0
+               rtw_recv_indicatepkt(padapter, prframe);
+
+               _exit_critical_bh(&ppending_recvframe_queue->lock, &irql);
+
+               goto _success_exit;
+#else
+               goto _err_exit;
+#endif
+       }
+
+
+       //s3. Insert all packet into Reorder Queue to maintain its ordering.
+       if(!enqueue_reorder_recvframe(preorder_ctrl, prframe))
+       {
+               //DbgPrint("recv_indicatepkt_reorder, enqueue_reorder_recvframe fail!\n");
+               //_exit_critical_ex(&ppending_recvframe_queue->lock, &irql);
+               //return _FAIL;
+               #ifdef DBG_RX_DROP_FRAME
+               DBG_871X("DBG_RX_DROP_FRAME %s enqueue_reorder_recvframe fail\n", __FUNCTION__);
+               #endif
+               goto _err_exit;
+       }
+
+
+       //s4.
+       // Indication process.
+       // After Packet dropping and Sliding Window shifting as above, we can now just indicate the packets
+       // with the SeqNum smaller than latest WinStart and buffer other packets.
+       //
+       // For Rx Reorder condition:
+       // 1. All packets with SeqNum smaller than WinStart => Indicate
+       // 2. All packets with SeqNum larger than or equal to WinStart => Buffer it.
+       //
+
+       //recv_indicatepkts_in_order(padapter, preorder_ctrl, _TRUE);
+       if(recv_indicatepkts_in_order(padapter, preorder_ctrl, _FALSE)==_TRUE)
+       {
+               _set_timer(&preorder_ctrl->reordering_ctrl_timer, REORDER_WAIT_TIME);
+               _exit_critical_bh(&ppending_recvframe_queue->lock, &irql);
+       }
+       else
+       {
+               _exit_critical_bh(&ppending_recvframe_queue->lock, &irql);
+               _cancel_timer_ex(&preorder_ctrl->reordering_ctrl_timer);
+       }
+
+
+_success_exit:
+
+       return _SUCCESS;
+
+_err_exit:
+
+        _exit_critical_bh(&ppending_recvframe_queue->lock, &irql);
+
+       return _FAIL;
+}
+
+
+void rtw_reordering_ctrl_timeout_handler(void *pcontext)
+{
+       _irqL irql;
+       struct recv_reorder_ctrl *preorder_ctrl = (struct recv_reorder_ctrl *)pcontext;
+       _adapter *padapter = preorder_ctrl->padapter;
+       _queue *ppending_recvframe_queue = &preorder_ctrl->pending_recvframe_queue;
+
+
+       if(padapter->bDriverStopped ||padapter->bSurpriseRemoved)
+       {
+               return;
+       }
+
+       //DBG_871X("+rtw_reordering_ctrl_timeout_handler()=>\n");
+
+       _enter_critical_bh(&ppending_recvframe_queue->lock, &irql);
+
+       if(recv_indicatepkts_in_order(padapter, preorder_ctrl, _TRUE)==_TRUE)
+       {
+               _set_timer(&preorder_ctrl->reordering_ctrl_timer, REORDER_WAIT_TIME);
+       }
+
+       _exit_critical_bh(&ppending_recvframe_queue->lock, &irql);
+
+}
+
+int process_recv_indicatepkts(_adapter *padapter, union recv_frame *prframe);
+int process_recv_indicatepkts(_adapter *padapter, union recv_frame *prframe)
+{
+       int retval = _SUCCESS;
+       //struct recv_priv *precvpriv = &padapter->recvpriv;
+       //struct rx_pkt_attrib *pattrib = &prframe->u.hdr.attrib;
+       struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
+#ifdef CONFIG_TDLS
+       struct sta_info *psta = prframe->u.hdr.psta;
+#endif //CONFIG_TDLS
+
+#ifdef CONFIG_80211N_HT
+
+       struct ht_priv  *phtpriv = &pmlmepriv->htpriv;
+
+#ifdef CONFIG_TDLS
+       if( (phtpriv->ht_option==_TRUE) ||
+               ((psta->tdls_sta_state & TDLS_LINKED_STATE) &&
+                (psta->htpriv.ht_option==_TRUE) &&
+                (psta->htpriv.ampdu_enable==_TRUE))) //B/G/N Mode
+#else
+       if(phtpriv->ht_option==_TRUE)  //B/G/N Mode
+#endif //CONFIG_TDLS
+       {
+               //prframe->u.hdr.preorder_ctrl = &precvpriv->recvreorder_ctrl[pattrib->priority];
+
+               if(recv_indicatepkt_reorder(padapter, prframe)!=_SUCCESS)// including perform A-MPDU Rx Ordering Buffer Control
+               {
+                       #ifdef DBG_RX_DROP_FRAME
+                       DBG_871X("DBG_RX_DROP_FRAME %s recv_indicatepkt_reorder error!\n", __FUNCTION__);
+                       #endif
+
+                       if ((padapter->bDriverStopped == _FALSE) &&
+                           (padapter->bSurpriseRemoved == _FALSE))
+                       {
+                               retval = _FAIL;
+                               return retval;
+                       }
+               }
+       }
+       else //B/G mode
+#endif
+       {
+               retval=wlanhdr_to_ethhdr (prframe);
+               if(retval != _SUCCESS)
+               {
+                       RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("wlanhdr_to_ethhdr: drop pkt \n"));
+                       #ifdef DBG_RX_DROP_FRAME
+                       DBG_871X("DBG_RX_DROP_FRAME %s wlanhdr_to_ethhdr error!\n", __FUNCTION__);
+                       #endif
+                       return retval;
+               }
+
+               if ((padapter->bDriverStopped ==_FALSE)&&( padapter->bSurpriseRemoved==_FALSE))
+               {
+                       //indicate this recv_frame
+                       RT_TRACE(_module_rtl871x_recv_c_, _drv_notice_, ("@@@@ process_recv_indicatepkts- recv_func recv_indicatepkt\n" ));
+                       rtw_recv_indicatepkt(padapter, prframe);
+
+
+               }
+               else
+               {
+                       RT_TRACE(_module_rtl871x_recv_c_, _drv_notice_, ("@@@@ process_recv_indicatepkts- recv_func free_indicatepkt\n" ));
+
+                       RT_TRACE(_module_rtl871x_recv_c_, _drv_notice_, ("recv_func:bDriverStopped(%d) OR bSurpriseRemoved(%d)", padapter->bDriverStopped, padapter->bSurpriseRemoved));
+                       retval = _FAIL;
+                       return retval;
+               }
+
+       }
+
+       return retval;
+
+}
+
+int recv_func_prehandle(_adapter *padapter, union recv_frame *rframe)
+{
+       int ret = _SUCCESS;
+       struct rx_pkt_attrib *pattrib = &rframe->u.hdr.attrib;
+       struct recv_priv *precvpriv = &padapter->recvpriv;
+       _queue *pfree_recv_queue = &padapter->recvpriv.free_recv_queue;
+
+#ifdef CONFIG_MP_INCLUDED
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+#endif //CONFIG_MP_INCLUDED
+
+#ifdef CONFIG_MP_INCLUDED
+       if ((check_fwstate(pmlmepriv, WIFI_MP_STATE) == _TRUE))//&&(padapter->mppriv.check_mp_pkt == 0))
+       {
+               if (pattrib->crc_err == 1)
+                       padapter->mppriv.rx_crcerrpktcount++;
+               else
+                       padapter->mppriv.rx_pktcount++;
+
+               if (check_fwstate(pmlmepriv, WIFI_MP_LPBK_STATE) == _FALSE) {
+                       RT_TRACE(_module_rtl871x_recv_c_, _drv_alert_, ("MP - Not in loopback mode , drop pkt \n"));
+                       ret = _FAIL;
+                       rtw_free_recvframe(rframe, pfree_recv_queue);//free this recv_frame
+                       goto exit;
+               }
+       }
+#endif
+
+       //check the frame crtl field and decache
+       ret = validate_recv_frame(padapter, rframe);
+       if (ret != _SUCCESS)
+       {
+               RT_TRACE(_module_rtl871x_recv_c_, _drv_info_, ("recv_func: validate_recv_frame fail! drop pkt\n"));
+               rtw_free_recvframe(rframe, pfree_recv_queue);//free this recv_frame
+               goto exit;
+       }
+
+exit:
+       return ret;
+}
+
+int recv_func_posthandle(_adapter *padapter, union recv_frame *prframe)
+{
+       int ret = _SUCCESS;
+       union recv_frame *orig_prframe = prframe;
+       struct rx_pkt_attrib *pattrib = &prframe->u.hdr.attrib;
+       struct recv_priv *precvpriv = &padapter->recvpriv;
+       _queue *pfree_recv_queue = &padapter->recvpriv.free_recv_queue;
+
+#ifdef CONFIG_MP_INCLUDED
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+#endif //CONFIG_MP_INCLUDED
+
+#ifdef CONFIG_TDLS
+       u8 *psnap_type, *pcategory;
+       struct sta_info *ptdls_sta = NULL;
+#endif //CONFIG_TDLS
+
+
+       // DATA FRAME
+       rtw_led_control(padapter, LED_CTL_RX);
+
+       prframe = decryptor(padapter, prframe);
+       if (prframe == NULL) {
+               RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("decryptor: drop pkt\n"));
+               #ifdef DBG_RX_DROP_FRAME
+               DBG_871X("DBG_RX_DROP_FRAME %s decryptor: drop pkt\n", __FUNCTION__);
+               #endif
+               ret = _FAIL;
+               goto _recv_data_drop;
+       }
+
+#if 0
+       if ( padapter->adapter_type == PRIMARY_ADAPTER )
+       {
+               DBG_871X("+++\n");
+               {
+                       int i;
+                       u8      *ptr = get_recvframe_data(prframe);
+                       for(i=0; i<140;i=i+8)
+                               DBG_871X("%02X:%02X:%02X:%02X:%02X:%02X:%02X:%02X:", *(ptr+i),
+                               *(ptr+i+1), *(ptr+i+2) ,*(ptr+i+3) ,*(ptr+i+4),*(ptr+i+5), *(ptr+i+6), *(ptr+i+7));
+
+               }
+               DBG_871X("---\n");
+       }
+#endif //RTK_DMP_PLATFORM
+
+#ifdef CONFIG_TDLS
+       //check TDLS frame
+       psnap_type = get_recvframe_data(orig_prframe);
+       psnap_type+=pattrib->hdrlen + pattrib->iv_len+SNAP_SIZE;
+       pcategory = psnap_type + ETH_TYPE_LEN + PAYLOAD_TYPE_LEN;
+
+       if((_rtw_memcmp(psnap_type, SNAP_ETH_TYPE_TDLS, ETH_TYPE_LEN)) &&
+               ((*pcategory==RTW_WLAN_CATEGORY_TDLS) || (*pcategory==RTW_WLAN_CATEGORY_P2P))){
+               ret = OnTDLS(padapter, prframe);        //all of functions will return _FAIL
+               goto _exit_recv_func;
+       }
+#endif //CONFIG_TDLS
+
+       prframe = recvframe_chk_defrag(padapter, prframe);
+       if(prframe==NULL)       {
+               RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("recvframe_chk_defrag: drop pkt\n"));
+               #ifdef DBG_RX_DROP_FRAME
+               DBG_871X("DBG_RX_DROP_FRAME %s recvframe_chk_defrag: drop pkt\n", __FUNCTION__);
+               #endif
+               goto _recv_data_drop;
+       }
+
+       prframe=portctrl(padapter, prframe);
+       if (prframe == NULL) {
+               RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("portctrl: drop pkt \n"));
+               #ifdef DBG_RX_DROP_FRAME
+               DBG_871X("DBG_RX_DROP_FRAME %s portctrl: drop pkt\n", __FUNCTION__);
+               #endif
+               ret = _FAIL;
+               goto _recv_data_drop;
+       }
+
+#ifdef CONFIG_TDLS
+       if(padapter->tdlsinfo.setup_state == TDLS_LINKED_STATE)
+               ptdls_sta = rtw_get_stainfo(&padapter->stapriv, pattrib->src);
+       count_rx_stats(padapter, prframe, ptdls_sta);
+#else
+       count_rx_stats(padapter, prframe, NULL);
+#endif //CONFIG_TDLS
+
+#ifdef CONFIG_80211N_HT
+
+       ret = process_recv_indicatepkts(padapter, prframe);
+       if (ret != _SUCCESS)
+       {
+               RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("recv_func: process_recv_indicatepkts fail! \n"));
+               #ifdef DBG_RX_DROP_FRAME
+               DBG_871X("DBG_RX_DROP_FRAME %s recv_func: process_recv_indicatepkts fail!\n", __FUNCTION__);
+               #endif
+               rtw_free_recvframe(orig_prframe, pfree_recv_queue);//free this recv_frame
+               goto _recv_data_drop;
+       }
+
+#else // CONFIG_80211N_HT
+
+       if (!pattrib->amsdu)
+       {
+               ret = wlanhdr_to_ethhdr (prframe);
+               if (ret != _SUCCESS)
+               {
+                       RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("wlanhdr_to_ethhdr: drop pkt \n"));
+                       #ifdef DBG_RX_DROP_FRAME
+                       DBG_871X("DBG_RX_DROP_FRAME %s wlanhdr_to_ethhdr: drop pkt\n", __FUNCTION__);
+                       #endif
+                       rtw_free_recvframe(orig_prframe, pfree_recv_queue);//free this recv_frame
+                       goto _recv_data_drop;
+               }
+
+               if ((padapter->bDriverStopped == _FALSE) && (padapter->bSurpriseRemoved == _FALSE))
+               {
+                       RT_TRACE(_module_rtl871x_recv_c_, _drv_alert_, ("@@@@ recv_func: recv_func rtw_recv_indicatepkt\n" ));
+                       //indicate this recv_frame
+                       ret = rtw_recv_indicatepkt(padapter, prframe);
+                       if (ret != _SUCCESS)
+                       {
+                               #ifdef DBG_RX_DROP_FRAME
+                               DBG_871X("DBG_RX_DROP_FRAME %s rtw_recv_indicatepkt fail!\n", __FUNCTION__);
+                               #endif
+                               goto _recv_data_drop;
+                       }
+               }
+               else
+               {
+                       RT_TRACE(_module_rtl871x_recv_c_, _drv_alert_, ("@@@@  recv_func: rtw_free_recvframe\n" ));
+                       RT_TRACE(_module_rtl871x_recv_c_, _drv_debug_, ("recv_func:bDriverStopped(%d) OR bSurpriseRemoved(%d)", padapter->bDriverStopped, padapter->bSurpriseRemoved));
+                       #ifdef DBG_RX_DROP_FRAME
+                       DBG_871X("DBG_RX_DROP_FRAME %s ecv_func:bDriverStopped(%d) OR bSurpriseRemoved(%d)\n", __FUNCTION__,
+                               padapter->bDriverStopped, padapter->bSurpriseRemoved);
+                       #endif
+                       ret = _FAIL;
+                       rtw_free_recvframe(orig_prframe, pfree_recv_queue); //free this recv_frame
+               }
+
+       }
+       else if(pattrib->amsdu==1)
+       {
+
+               ret = amsdu_to_msdu(padapter, prframe);
+               if(ret != _SUCCESS)
+               {
+                       #ifdef DBG_RX_DROP_FRAME
+                       DBG_871X("DBG_RX_DROP_FRAME %s amsdu_to_msdu fail\n", __FUNCTION__);
+                       #endif
+                       rtw_free_recvframe(orig_prframe, pfree_recv_queue);
+                       goto _recv_data_drop;
+               }
+       }
+       else
+       {
+               #ifdef DBG_RX_DROP_FRAME
+               DBG_871X("DBG_RX_DROP_FRAME %s what is this condition??\n", __FUNCTION__);
+               #endif
+               goto _recv_data_drop;
+       }
+#endif // CONFIG_80211N_HT
+
+_exit_recv_func:
+       return ret;
+
+_recv_data_drop:
+       precvpriv->rx_drop++;
+       return ret;
+}
+
+
+int recv_func(_adapter *padapter, union recv_frame *rframe);
+int recv_func(_adapter *padapter, union recv_frame *rframe)
+{
+       int ret;
+       struct rx_pkt_attrib *prxattrib = &rframe->u.hdr.attrib;
+       struct recv_priv *recvpriv = &padapter->recvpriv;
+       struct security_priv *psecuritypriv=&padapter->securitypriv;
+       struct mlme_priv *mlmepriv = &padapter->mlmepriv;
+
+       /* check if need to handle uc_swdec_pending_queue*/
+       if (check_fwstate(mlmepriv, WIFI_STATION_STATE) && psecuritypriv->busetkipkey)
+       {
+               union recv_frame *pending_frame;
+               _irqL irqL;
+
+               while((pending_frame=rtw_alloc_recvframe(&padapter->recvpriv.uc_swdec_pending_queue))) {
+                       if (recv_func_posthandle(padapter, pending_frame) == _SUCCESS)
+                               DBG_871X("%s: dequeue uc_swdec_pending_queue\n", __func__);
+               }
+       }
+
+       ret = recv_func_prehandle(padapter, rframe);
+
+       if(ret == _SUCCESS) {
+
+               /* check if need to enqueue into uc_swdec_pending_queue*/
+               if (check_fwstate(mlmepriv, WIFI_STATION_STATE) &&
+                       !IS_MCAST(prxattrib->ra) && prxattrib->encrypt>0 &&
+                       (prxattrib->bdecrypted == 0 ||psecuritypriv->sw_decrypt == _TRUE) &&
+                       !is_wep_enc(psecuritypriv->dot11PrivacyAlgrthm) &&
+                       !psecuritypriv->busetkipkey) {
+                       rtw_enqueue_recvframe(rframe, &padapter->recvpriv.uc_swdec_pending_queue);
+                       DBG_871X("%s: no key, enqueue uc_swdec_pending_queue\n", __func__);
+                       goto exit;
+               }
+
+               ret = recv_func_posthandle(padapter, rframe);
+       }
+
+exit:
+       return ret;
+}
+
+
+s32 rtw_recv_entry(union recv_frame *precvframe)
+{
+       _adapter *padapter;
+       struct recv_priv *precvpriv;
+       s32 ret=_SUCCESS;
+
+_func_enter_;
+
+//     RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("+rtw_recv_entry\n"));
+
+       padapter = precvframe->u.hdr.adapter;
+
+       precvpriv = &padapter->recvpriv;
+
+
+       if ((ret = recv_func(padapter, precvframe)) == _FAIL)
+       {
+               RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("rtw_recv_entry: recv_func return fail!!!\n"));
+               goto _recv_entry_drop;
+       }
+
+
+       precvpriv->rx_pkts++;
+
+_func_exit_;
+
+       return ret;
+
+_recv_entry_drop:
+
+#ifdef CONFIG_MP_INCLUDED
+       padapter->mppriv.rx_pktloss = precvpriv->rx_drop;
+#endif
+
+       //RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("_recv_entry_drop\n"));
+
+_func_exit_;
+
+       return ret;
+}
+
+#ifdef CONFIG_NEW_SIGNAL_STAT_PROCESS
+void rtw_signal_stat_timer_hdl(RTW_TIMER_HDL_ARGS){
+       _adapter *adapter = (_adapter *)FunctionContext;
+       struct recv_priv *recvpriv = &adapter->recvpriv;
+
+       u32 tmp_s, tmp_q;
+       u8 avg_signal_strength = 0;
+       u8 avg_signal_qual = 0;
+       u32 num_signal_strength = 0;
+       u32 num_signal_qual = 0;
+       u8 _alpha = 3; // this value is based on converging_constant = 5000 and sampling_interval = 1000
+
+       if(adapter->recvpriv.is_signal_dbg) {
+               //update the user specific value, signal_strength_dbg, to signal_strength, rssi
+               adapter->recvpriv.signal_strength= adapter->recvpriv.signal_strength_dbg;
+               adapter->recvpriv.rssi=(s8)translate_percentage_to_dbm((u8)adapter->recvpriv.signal_strength_dbg);
+       } else {
+
+               if(recvpriv->signal_strength_data.update_req == 0) {// update_req is clear, means we got rx
+                       avg_signal_strength = recvpriv->signal_strength_data.avg_val;
+                       num_signal_strength = recvpriv->signal_strength_data.total_num;
+                       // after avg_vals are accquired, we can re-stat the signal values
+                       recvpriv->signal_strength_data.update_req = 1;
+               }
+
+               if(recvpriv->signal_qual_data.update_req == 0) {// update_req is clear, means we got rx
+                       avg_signal_qual = recvpriv->signal_qual_data.avg_val;
+                       num_signal_qual = recvpriv->signal_qual_data.total_num;
+                       // after avg_vals are accquired, we can re-stat the signal values
+                       recvpriv->signal_qual_data.update_req = 1;
+               }
+
+               if (num_signal_strength == 0) {
+                       if (rtw_get_on_cur_ch_time(adapter) == 0
+                               || rtw_get_passing_time_ms(rtw_get_on_cur_ch_time(adapter)) < 2 * adapter->mlmeextpriv.mlmext_info.bcn_interval
+                       ) {
+                               goto set_timer;
+                       }
+               }
+
+               if(check_fwstate(&adapter->mlmepriv, _FW_UNDER_SURVEY) == _TRUE
+                       || check_fwstate(&adapter->mlmepriv, _FW_LINKED) == _FALSE
+               ) {
+                       goto set_timer;
+               }
+
+               #ifdef CONFIG_CONCURRENT_MODE
+               if (check_buddy_fwstate(adapter, _FW_UNDER_SURVEY) == _TRUE)
+                       goto set_timer;
+               #endif
+
+               //update value of signal_strength, rssi, signal_qual
+               tmp_s = (avg_signal_strength+(_alpha-1)*recvpriv->signal_strength);
+               if(tmp_s %_alpha)
+                       tmp_s = tmp_s/_alpha + 1;
+               else
+                       tmp_s = tmp_s/_alpha;
+               if(tmp_s>100)
+                       tmp_s = 100;
+
+               tmp_q = (avg_signal_qual+(_alpha-1)*recvpriv->signal_qual);
+               if(tmp_q %_alpha)
+                       tmp_q = tmp_q/_alpha + 1;
+               else
+                       tmp_q = tmp_q/_alpha;
+               if(tmp_q>100)
+                       tmp_q = 100;
+
+               recvpriv->signal_strength = tmp_s;
+               recvpriv->rssi = (s8)translate_percentage_to_dbm(tmp_s);
+               recvpriv->signal_qual = tmp_q;
+
+               #if defined(DBG_RX_SIGNAL_DISPLAY_PROCESSING) && 1
+               DBG_871X(FUNC_ADPT_FMT" signal_strength:%3u, rssi:%3d, signal_qual:%3u"
+                       ", num_signal_strength:%u, num_signal_qual:%u"
+                       ", on_cur_ch_ms:%d"
+                       "\n"
+                       , FUNC_ADPT_ARG(adapter)
+                       , recvpriv->signal_strength
+                       , recvpriv->rssi
+                       , recvpriv->signal_qual
+                       , num_signal_strength, num_signal_qual
+                       , rtw_get_on_cur_ch_time(adapter) ? rtw_get_passing_time_ms(rtw_get_on_cur_ch_time(adapter)) : 0
+               );
+               #endif
+       }
+
+set_timer:
+       rtw_set_signal_stat_timer(recvpriv);
+
+}
+#endif //CONFIG_NEW_SIGNAL_STAT_PROCESS
diff --git a/drivers/net/wireless/realtek/rtl8192cu/core/rtw_rf.c b/drivers/net/wireless/realtek/rtl8192cu/core/rtw_rf.c
new file mode 100644 (file)
index 0000000..52234bd
--- /dev/null
@@ -0,0 +1,94 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#define _RTW_RF_C_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <recv_osdep.h>
+#include <xmit_osdep.h>
+
+
+struct ch_freq {
+       u32 channel;
+       u32 frequency;
+};
+
+struct ch_freq ch_freq_map[] = {
+       {1, 2412},{2, 2417},{3, 2422},{4, 2427},{5, 2432},
+       {6, 2437},{7, 2442},{8, 2447},{9, 2452},{10, 2457},
+       {11, 2462},{12, 2467},{13, 2472},{14, 2484},
+       /*  UNII */
+       {36, 5180},{40, 5200},{44, 5220},{48, 5240},{52, 5260},
+       {56, 5280},{60, 5300},{64, 5320},{149, 5745},{153, 5765},
+       {157, 5785},{161, 5805},{165, 5825},{167, 5835},{169, 5845},
+       {171, 5855},{173, 5865},
+       /* HiperLAN2 */
+       {100, 5500},{104, 5520},{108, 5540},{112, 5560},{116, 5580},
+       {120, 5600},{124, 5620},{128, 5640},{132, 5660},{136, 5680},
+       {140, 5700},
+       /* Japan MMAC */
+       {34, 5170},{38, 5190},{42, 5210},{46, 5230},
+       /*  Japan */
+       {184, 4920},{188, 4940},{192, 4960},{196, 4980},
+       {208, 5040},/* Japan, means J08 */
+       {212, 5060},/* Japan, means J12 */
+       {216, 5080},/* Japan, means J16 */
+};
+
+int ch_freq_map_num = (sizeof(ch_freq_map) / sizeof(struct ch_freq));
+
+u32 rtw_ch2freq(u32 channel)
+{
+       u8      i;
+       u32     freq = 0;
+
+       for (i = 0; i < ch_freq_map_num; i++)
+       {
+               if (channel == ch_freq_map[i].channel)
+               {
+                       freq = ch_freq_map[i].frequency;
+                               break;
+               }
+       }
+       if (i == ch_freq_map_num)
+               freq = 2412;
+
+       return freq;
+}
+
+u32 rtw_freq2ch(u32 freq)
+{
+       u8      i;
+       u32     ch = 0;
+
+       for (i = 0; i < ch_freq_map_num; i++)
+       {
+               if (freq == ch_freq_map[i].frequency)
+               {
+                       ch = ch_freq_map[i].channel;
+                               break;
+               }
+       }
+       if (i == ch_freq_map_num)
+               ch = 1;
+
+       return ch;
+}
diff --git a/drivers/net/wireless/realtek/rtl8192cu/core/rtw_security.c b/drivers/net/wireless/realtek/rtl8192cu/core/rtw_security.c
new file mode 100644 (file)
index 0000000..2df28ba
--- /dev/null
@@ -0,0 +1,3114 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#define  _RTW_SECURITY_C_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <wifi.h>
+#include <osdep_intf.h>
+
+
+//=====WEP related=====
+
+#define CRC32_POLY 0x04c11db7
+
+struct arc4context
+{
+       u32 x;
+       u32 y;
+       u8 state[256];
+};
+
+
+static void arcfour_init(struct arc4context    *parc4ctx, u8 * key,u32 key_len)
+{
+       u32     t, u;
+       u32     keyindex;
+       u32     stateindex;
+       u8 * state;
+       u32     counter;
+_func_enter_;
+       state = parc4ctx->state;
+       parc4ctx->x = 0;
+       parc4ctx->y = 0;
+       for (counter = 0; counter < 256; counter++)
+               state[counter] = (u8)counter;
+       keyindex = 0;
+       stateindex = 0;
+       for (counter = 0; counter < 256; counter++)
+       {
+               t = state[counter];
+               stateindex = (stateindex + key[keyindex] + t) & 0xff;
+               u = state[stateindex];
+               state[stateindex] = (u8)t;
+               state[counter] = (u8)u;
+               if (++keyindex >= key_len)
+                       keyindex = 0;
+       }
+_func_exit_;
+}
+static u32 arcfour_byte(       struct arc4context      *parc4ctx)
+{
+       u32 x;
+       u32 y;
+       u32 sx, sy;
+       u8 * state;
+_func_enter_;
+       state = parc4ctx->state;
+       x = (parc4ctx->x + 1) & 0xff;
+       sx = state[x];
+       y = (sx + parc4ctx->y) & 0xff;
+       sy = state[y];
+       parc4ctx->x = x;
+       parc4ctx->y = y;
+       state[y] = (u8)sx;
+       state[x] = (u8)sy;
+_func_exit_;
+       return state[(sx + sy) & 0xff];
+}
+
+
+static void arcfour_encrypt(   struct arc4context      *parc4ctx,
+       u8 * dest,
+       u8 * src,
+       u32 len)
+{
+       u32     i;
+_func_enter_;
+       for (i = 0; i < len; i++)
+               dest[i] = src[i] ^ (unsigned char)arcfour_byte(parc4ctx);
+_func_exit_;
+}
+
+static sint bcrc32initialized = 0;
+static u32 crc32_table[256];
+
+
+static u8 crc32_reverseBit( u8 data)
+{
+       return( (u8)((data<<7)&0x80) | ((data<<5)&0x40) | ((data<<3)&0x20) | ((data<<1)&0x10) | ((data>>1)&0x08) | ((data>>3)&0x04) | ((data>>5)&0x02) | ((data>>7)&0x01) );
+}
+
+static void crc32_init(void)
+{
+_func_enter_;
+       if (bcrc32initialized == 1)
+               goto exit;
+       else{
+               sint i, j;
+               u32 c;
+               u8 *p=(u8 *)&c, *p1;
+               u8 k;
+
+               c = 0x12340000;
+
+               for (i = 0; i < 256; ++i)
+               {
+                       k = crc32_reverseBit((u8)i);
+                       for (c = ((u32)k) << 24, j = 8; j > 0; --j){
+                               c = c & 0x80000000 ? (c << 1) ^ CRC32_POLY : (c << 1);
+                       }
+                       p1 = (u8 *)&crc32_table[i];
+
+                       p1[0] = crc32_reverseBit(p[3]);
+                       p1[1] = crc32_reverseBit(p[2]);
+                       p1[2] = crc32_reverseBit(p[1]);
+                       p1[3] = crc32_reverseBit(p[0]);
+               }
+               bcrc32initialized= 1;
+       }
+exit:
+_func_exit_;
+}
+
+static u32 getcrc32(u8 *buf, sint len)
+{
+       u8 *p;
+       u32  crc;
+_func_enter_;
+       if (bcrc32initialized == 0) crc32_init();
+
+       crc = 0xffffffff;       /* preload shift register, per CRC-32 spec */
+
+       for (p = buf; len > 0; ++p, --len)
+       {
+               crc = crc32_table[ (crc ^ *p) & 0xff] ^ (crc >> 8);
+       }
+_func_exit_;
+       return ~crc;    /* transmit complement, per CRC-32 spec */
+}
+
+
+/*
+       Need to consider the fragment  situation
+*/
+void rtw_wep_encrypt(_adapter *padapter, u8 *pxmitframe)
+{                                                                                                                                      // exclude ICV
+
+       unsigned char   crc[4];
+       struct arc4context       mycontext;
+
+       sint    curfragnum,length;
+       u32     keylength;
+
+       u8      *pframe, *payload,*iv;    //,*wepkey
+       u8      wepkey[16];
+       struct  pkt_attrib       *pattrib = &((struct xmit_frame*)pxmitframe)->attrib;
+       struct  security_priv   *psecuritypriv=&padapter->securitypriv;
+       struct  xmit_priv               *pxmitpriv=&padapter->xmitpriv;
+
+_func_enter_;
+
+
+       if(((struct xmit_frame*)pxmitframe)->buf_addr==NULL)
+               return;
+
+#ifdef CONFIG_USB_TX_AGGREGATION
+       pframe = ((struct xmit_frame*)pxmitframe)->buf_addr + TXDESC_SIZE +
+                (((struct xmit_frame*)pxmitframe)->pkt_offset * PACKET_OFFSET_SZ);
+#else
+       pframe = ((struct xmit_frame*)pxmitframe)->buf_addr + TXDESC_OFFSET;
+#endif
+
+       //start to encrypt each fragment
+       if((pattrib->encrypt==_WEP40_)||(pattrib->encrypt==_WEP104_))
+       {
+               keylength=psecuritypriv->dot11DefKeylen[psecuritypriv->dot11PrivacyKeyIndex];
+
+               for(curfragnum=0;curfragnum<pattrib->nr_frags;curfragnum++)
+               {
+                       iv=pframe+pattrib->hdrlen;
+                       _rtw_memcpy(&wepkey[0], iv, 3);
+                       _rtw_memcpy(&wepkey[3], &psecuritypriv->dot11DefKey[psecuritypriv->dot11PrivacyKeyIndex].skey[0],keylength);
+                       payload=pframe+pattrib->iv_len+pattrib->hdrlen;
+
+                       if((curfragnum+1)==pattrib->nr_frags)
+                       {       //the last fragment
+
+                               length=pattrib->last_txcmdsz-pattrib->hdrlen-pattrib->iv_len- pattrib->icv_len;
+
+                               *((u32 *)crc)=cpu_to_le32(getcrc32(payload,length));
+
+                               arcfour_init(&mycontext, wepkey,3+keylength);
+                               arcfour_encrypt(&mycontext, payload, payload, length);
+                               arcfour_encrypt(&mycontext, payload+length, crc, 4);
+
+                       }
+                       else
+                       {
+                       length=pxmitpriv->frag_len-pattrib->hdrlen-pattrib->iv_len-pattrib->icv_len ;
+                               *((u32 *)crc)=cpu_to_le32(getcrc32(payload,length));
+                               arcfour_init(&mycontext, wepkey,3+keylength);
+                               arcfour_encrypt(&mycontext, payload, payload, length);
+                               arcfour_encrypt(&mycontext, payload+length, crc, 4);
+
+                       pframe+=pxmitpriv->frag_len;
+                       pframe=(u8 *)RND4((SIZE_PTR)(pframe));
+
+                       }
+
+               }
+
+       }
+
+_func_exit_;
+
+}
+
+void rtw_wep_decrypt(_adapter  *padapter, u8 *precvframe)
+{
+       // exclude ICV
+       u8      crc[4];
+       struct arc4context       mycontext;
+       sint    length;
+       u32     keylength;
+       u8      *pframe, *payload,*iv,wepkey[16];
+       u8       keyindex;
+       struct  rx_pkt_attrib    *prxattrib = &(((union recv_frame*)precvframe)->u.hdr.attrib);
+       struct  security_priv   *psecuritypriv=&padapter->securitypriv;
+
+_func_enter_;
+
+       pframe=(unsigned char *)((union recv_frame*)precvframe)->u.hdr.rx_data;
+
+       //start to decrypt recvframe
+       if((prxattrib->encrypt==_WEP40_)||(prxattrib->encrypt==_WEP104_))
+       {
+               iv=pframe+prxattrib->hdrlen;
+               //keyindex=(iv[3]&0x3);
+               keyindex = prxattrib->key_index;
+               keylength=psecuritypriv->dot11DefKeylen[keyindex];
+               _rtw_memcpy(&wepkey[0], iv, 3);
+               //_rtw_memcpy(&wepkey[3], &psecuritypriv->dot11DefKey[psecuritypriv->dot11PrivacyKeyIndex].skey[0],keylength);
+               _rtw_memcpy(&wepkey[3], &psecuritypriv->dot11DefKey[keyindex].skey[0],keylength);
+               length= ((union recv_frame *)precvframe)->u.hdr.len-prxattrib->hdrlen-prxattrib->iv_len;
+
+               payload=pframe+prxattrib->iv_len+prxattrib->hdrlen;
+
+               //decrypt payload include icv
+               arcfour_init(&mycontext, wepkey,3+keylength);
+               arcfour_encrypt(&mycontext, payload, payload,  length);
+
+               //calculate icv and compare the icv
+               *((u32 *)crc)=le32_to_cpu(getcrc32(payload,length-4));
+
+               if(crc[3]!=payload[length-1] || crc[2]!=payload[length-2] || crc[1]!=payload[length-3] || crc[0]!=payload[length-4])
+               {
+                       RT_TRACE(_module_rtl871x_security_c_,_drv_err_,("rtw_wep_decrypt:icv error crc[3](%x)!=payload[length-1](%x) || crc[2](%x)!=payload[length-2](%x) || crc[1](%x)!=payload[length-3](%x) || crc[0](%x)!=payload[length-4](%x)\n",
+                                               crc[3],payload[length-1],crc[2],payload[length-2],crc[1],payload[length-3],crc[0],payload[length-4]));
+               }
+
+       }
+
+_func_exit_;
+
+       return;
+
+}
+
+//3            =====TKIP related=====
+
+static u32 secmicgetuint32( u8 * p )
+// Convert from Byte[] to Us4Byte32 in a portable way
+{
+       s32 i;
+       u32 res = 0;
+_func_enter_;
+       for( i=0; i<4; i++ )
+       {
+               res |= ((u32)(*p++)) << (8*i);
+       }
+_func_exit_;
+       return res;
+}
+
+static void secmicputuint32( u8 * p, u32 val )
+// Convert from Us4Byte32 to Byte[] in a portable way
+{
+       long i;
+_func_enter_;
+       for( i=0; i<4; i++ )
+       {
+               *p++ = (u8) (val & 0xff);
+               val >>= 8;
+       }
+_func_exit_;
+}
+
+static void secmicclear(struct mic_data *pmicdata)
+{
+// Reset the state to the empty message.
+_func_enter_;
+       pmicdata->L = pmicdata->K0;
+       pmicdata->R = pmicdata->K1;
+       pmicdata->nBytesInM = 0;
+       pmicdata->M = 0;
+_func_exit_;
+}
+
+void rtw_secmicsetkey(struct mic_data *pmicdata, u8 * key )
+{
+       // Set the key
+_func_enter_;
+       pmicdata->K0 = secmicgetuint32( key );
+       pmicdata->K1 = secmicgetuint32( key + 4 );
+       // and reset the message
+       secmicclear(pmicdata);
+_func_exit_;
+}
+
+void rtw_secmicappendbyte(struct mic_data *pmicdata, u8 b )
+{
+_func_enter_;
+       // Append the byte to our word-sized buffer
+       pmicdata->M |= ((unsigned long)b) << (8*pmicdata->nBytesInM);
+       pmicdata->nBytesInM++;
+       // Process the word if it is full.
+       if( pmicdata->nBytesInM >= 4 )
+       {
+               pmicdata->L ^= pmicdata->M;
+               pmicdata->R ^= ROL32( pmicdata->L, 17 );
+               pmicdata->L += pmicdata->R;
+               pmicdata->R ^= ((pmicdata->L & 0xff00ff00) >> 8) | ((pmicdata->L & 0x00ff00ff) << 8);
+               pmicdata->L += pmicdata->R;
+               pmicdata->R ^= ROL32( pmicdata->L, 3 );
+               pmicdata->L += pmicdata->R;
+               pmicdata->R ^= ROR32( pmicdata->L, 2 );
+               pmicdata->L += pmicdata->R;
+               // Clear the buffer
+               pmicdata->M = 0;
+               pmicdata->nBytesInM = 0;
+       }
+_func_exit_;
+}
+
+void rtw_secmicappend(struct mic_data *pmicdata, u8 * src, u32 nbytes )
+{
+_func_enter_;
+       // This is simple
+       while( nbytes > 0 )
+       {
+               rtw_secmicappendbyte(pmicdata, *src++ );
+               nbytes--;
+       }
+_func_exit_;
+}
+
+void rtw_secgetmic(struct mic_data *pmicdata, u8 * dst )
+{
+_func_enter_;
+       // Append the minimum padding
+       rtw_secmicappendbyte(pmicdata, 0x5a );
+       rtw_secmicappendbyte(pmicdata, 0 );
+       rtw_secmicappendbyte(pmicdata, 0 );
+       rtw_secmicappendbyte(pmicdata, 0 );
+       rtw_secmicappendbyte(pmicdata, 0 );
+       // and then zeroes until the length is a multiple of 4
+       while( pmicdata->nBytesInM != 0 )
+       {
+               rtw_secmicappendbyte(pmicdata, 0 );
+       }
+       // The appendByte function has already computed the result.
+       secmicputuint32( dst, pmicdata->L );
+       secmicputuint32( dst+4, pmicdata->R );
+       // Reset to the empty message.
+       secmicclear(pmicdata);
+_func_exit_;
+}
+
+
+void rtw_seccalctkipmic(u8 * key,u8 *header,u8 *data,u32 data_len,u8 *mic_code, u8 pri)
+{
+
+       struct mic_data micdata;
+       u8 priority[4]={0x0,0x0,0x0,0x0};
+_func_enter_;
+       rtw_secmicsetkey(&micdata, key);
+       priority[0]=pri;
+
+       /* Michael MIC pseudo header: DA, SA, 3 x 0, Priority */
+       if(header[1]&1){   //ToDS==1
+                       rtw_secmicappend(&micdata, &header[16], 6);  //DA
+               if(header[1]&2)  //From Ds==1
+                       rtw_secmicappend(&micdata, &header[24], 6);
+               else
+                       rtw_secmicappend(&micdata, &header[10], 6);
+       }
+       else{   //ToDS==0
+               rtw_secmicappend(&micdata, &header[4], 6);   //DA
+               if(header[1]&2)  //From Ds==1
+                       rtw_secmicappend(&micdata, &header[16], 6);
+               else
+                       rtw_secmicappend(&micdata, &header[10], 6);
+
+       }
+       rtw_secmicappend(&micdata, &priority[0], 4);
+
+
+       rtw_secmicappend(&micdata, data, data_len);
+
+       rtw_secgetmic(&micdata,mic_code);
+_func_exit_;
+}
+
+
+
+
+/* macros for extraction/creation of unsigned char/unsigned short values  */
+#define RotR1(v16)   ((((v16) >> 1) & 0x7FFF) ^ (((v16) & 1) << 15))
+#define   Lo8(v16)   ((u8)( (v16)       & 0x00FF))
+#define   Hi8(v16)   ((u8)(((v16) >> 8) & 0x00FF))
+#define  Lo16(v32)   ((u16)( (v32)       & 0xFFFF))
+#define  Hi16(v32)   ((u16)(((v32) >>16) & 0xFFFF))
+#define  Mk16(hi,lo) ((lo) ^ (((u16)(hi)) << 8))
+
+/* select the Nth 16-bit word of the temporal key unsigned char array TK[]   */
+#define  TK16(N)     Mk16(tk[2*(N)+1],tk[2*(N)])
+
+/* S-box lookup: 16 bits --> 16 bits */
+#define _S_(v16)     (Sbox1[0][Lo8(v16)] ^ Sbox1[1][Hi8(v16)])
+
+/* fixed algorithm "parameters" */
+#define PHASE1_LOOP_CNT   8    /* this needs to be "big enough"     */
+#define TA_SIZE           6    /*  48-bit transmitter address       */
+#define TK_SIZE          16    /* 128-bit temporal key              */
+#define P1K_SIZE         10    /*  80-bit Phase1 key                */
+#define RC4_KEY_SIZE     16    /* 128-bit RC4KEY (104 bits unknown) */
+
+
+/* 2-unsigned char by 2-unsigned char subset of the full AES S-box table */
+static const unsigned short Sbox1[2][256]=       /* Sbox for hash (can be in ROM)     */
+{ {
+   0xC6A5,0xF884,0xEE99,0xF68D,0xFF0D,0xD6BD,0xDEB1,0x9154,
+   0x6050,0x0203,0xCEA9,0x567D,0xE719,0xB562,0x4DE6,0xEC9A,
+   0x8F45,0x1F9D,0x8940,0xFA87,0xEF15,0xB2EB,0x8EC9,0xFB0B,
+   0x41EC,0xB367,0x5FFD,0x45EA,0x23BF,0x53F7,0xE496,0x9B5B,
+   0x75C2,0xE11C,0x3DAE,0x4C6A,0x6C5A,0x7E41,0xF502,0x834F,
+   0x685C,0x51F4,0xD134,0xF908,0xE293,0xAB73,0x6253,0x2A3F,
+   0x080C,0x9552,0x4665,0x9D5E,0x3028,0x37A1,0x0A0F,0x2FB5,
+   0x0E09,0x2436,0x1B9B,0xDF3D,0xCD26,0x4E69,0x7FCD,0xEA9F,
+   0x121B,0x1D9E,0x5874,0x342E,0x362D,0xDCB2,0xB4EE,0x5BFB,
+   0xA4F6,0x764D,0xB761,0x7DCE,0x527B,0xDD3E,0x5E71,0x1397,
+   0xA6F5,0xB968,0x0000,0xC12C,0x4060,0xE31F,0x79C8,0xB6ED,
+   0xD4BE,0x8D46,0x67D9,0x724B,0x94DE,0x98D4,0xB0E8,0x854A,
+   0xBB6B,0xC52A,0x4FE5,0xED16,0x86C5,0x9AD7,0x6655,0x1194,
+   0x8ACF,0xE910,0x0406,0xFE81,0xA0F0,0x7844,0x25BA,0x4BE3,
+   0xA2F3,0x5DFE,0x80C0,0x058A,0x3FAD,0x21BC,0x7048,0xF104,
+   0x63DF,0x77C1,0xAF75,0x4263,0x2030,0xE51A,0xFD0E,0xBF6D,
+   0x814C,0x1814,0x2635,0xC32F,0xBEE1,0x35A2,0x88CC,0x2E39,
+   0x9357,0x55F2,0xFC82,0x7A47,0xC8AC,0xBAE7,0x322B,0xE695,
+   0xC0A0,0x1998,0x9ED1,0xA37F,0x4466,0x547E,0x3BAB,0x0B83,
+   0x8CCA,0xC729,0x6BD3,0x283C,0xA779,0xBCE2,0x161D,0xAD76,
+   0xDB3B,0x6456,0x744E,0x141E,0x92DB,0x0C0A,0x486C,0xB8E4,
+   0x9F5D,0xBD6E,0x43EF,0xC4A6,0x39A8,0x31A4,0xD337,0xF28B,
+   0xD532,0x8B43,0x6E59,0xDAB7,0x018C,0xB164,0x9CD2,0x49E0,
+   0xD8B4,0xACFA,0xF307,0xCF25,0xCAAF,0xF48E,0x47E9,0x1018,
+   0x6FD5,0xF088,0x4A6F,0x5C72,0x3824,0x57F1,0x73C7,0x9751,
+   0xCB23,0xA17C,0xE89C,0x3E21,0x96DD,0x61DC,0x0D86,0x0F85,
+   0xE090,0x7C42,0x71C4,0xCCAA,0x90D8,0x0605,0xF701,0x1C12,
+   0xC2A3,0x6A5F,0xAEF9,0x69D0,0x1791,0x9958,0x3A27,0x27B9,
+   0xD938,0xEB13,0x2BB3,0x2233,0xD2BB,0xA970,0x0789,0x33A7,
+   0x2DB6,0x3C22,0x1592,0xC920,0x8749,0xAAFF,0x5078,0xA57A,
+   0x038F,0x59F8,0x0980,0x1A17,0x65DA,0xD731,0x84C6,0xD0B8,
+   0x82C3,0x29B0,0x5A77,0x1E11,0x7BCB,0xA8FC,0x6DD6,0x2C3A,
+  },
+
+
+  {  /* second half of table is unsigned char-reversed version of first! */
+   0xA5C6,0x84F8,0x99EE,0x8DF6,0x0DFF,0xBDD6,0xB1DE,0x5491,
+   0x5060,0x0302,0xA9CE,0x7D56,0x19E7,0x62B5,0xE64D,0x9AEC,
+   0x458F,0x9D1F,0x4089,0x87FA,0x15EF,0xEBB2,0xC98E,0x0BFB,
+   0xEC41,0x67B3,0xFD5F,0xEA45,0xBF23,0xF753,0x96E4,0x5B9B,
+   0xC275,0x1CE1,0xAE3D,0x6A4C,0x5A6C,0x417E,0x02F5,0x4F83,
+   0x5C68,0xF451,0x34D1,0x08F9,0x93E2,0x73AB,0x5362,0x3F2A,
+   0x0C08,0x5295,0x6546,0x5E9D,0x2830,0xA137,0x0F0A,0xB52F,
+   0x090E,0x3624,0x9B1B,0x3DDF,0x26CD,0x694E,0xCD7F,0x9FEA,
+   0x1B12,0x9E1D,0x7458,0x2E34,0x2D36,0xB2DC,0xEEB4,0xFB5B,
+   0xF6A4,0x4D76,0x61B7,0xCE7D,0x7B52,0x3EDD,0x715E,0x9713,
+   0xF5A6,0x68B9,0x0000,0x2CC1,0x6040,0x1FE3,0xC879,0xEDB6,
+   0xBED4,0x468D,0xD967,0x4B72,0xDE94,0xD498,0xE8B0,0x4A85,
+   0x6BBB,0x2AC5,0xE54F,0x16ED,0xC586,0xD79A,0x5566,0x9411,
+   0xCF8A,0x10E9,0x0604,0x81FE,0xF0A0,0x4478,0xBA25,0xE34B,
+   0xF3A2,0xFE5D,0xC080,0x8A05,0xAD3F,0xBC21,0x4870,0x04F1,
+   0xDF63,0xC177,0x75AF,0x6342,0x3020,0x1AE5,0x0EFD,0x6DBF,
+   0x4C81,0x1418,0x3526,0x2FC3,0xE1BE,0xA235,0xCC88,0x392E,
+   0x5793,0xF255,0x82FC,0x477A,0xACC8,0xE7BA,0x2B32,0x95E6,
+   0xA0C0,0x9819,0xD19E,0x7FA3,0x6644,0x7E54,0xAB3B,0x830B,
+   0xCA8C,0x29C7,0xD36B,0x3C28,0x79A7,0xE2BC,0x1D16,0x76AD,
+   0x3BDB,0x5664,0x4E74,0x1E14,0xDB92,0x0A0C,0x6C48,0xE4B8,
+   0x5D9F,0x6EBD,0xEF43,0xA6C4,0xA839,0xA431,0x37D3,0x8BF2,
+   0x32D5,0x438B,0x596E,0xB7DA,0x8C01,0x64B1,0xD29C,0xE049,
+   0xB4D8,0xFAAC,0x07F3,0x25CF,0xAFCA,0x8EF4,0xE947,0x1810,
+   0xD56F,0x88F0,0x6F4A,0x725C,0x2438,0xF157,0xC773,0x5197,
+   0x23CB,0x7CA1,0x9CE8,0x213E,0xDD96,0xDC61,0x860D,0x850F,
+   0x90E0,0x427C,0xC471,0xAACC,0xD890,0x0506,0x01F7,0x121C,
+   0xA3C2,0x5F6A,0xF9AE,0xD069,0x9117,0x5899,0x273A,0xB927,
+   0x38D9,0x13EB,0xB32B,0x3322,0xBBD2,0x70A9,0x8907,0xA733,
+   0xB62D,0x223C,0x9215,0x20C9,0x4987,0xFFAA,0x7850,0x7AA5,
+   0x8F03,0xF859,0x8009,0x171A,0xDA65,0x31D7,0xC684,0xB8D0,
+   0xC382,0xB029,0x775A,0x111E,0xCB7B,0xFCA8,0xD66D,0x3A2C,
+  }
+};
+
+ /*
+**********************************************************************
+* Routine: Phase 1 -- generate P1K, given TA, TK, IV32
+*
+* Inputs:
+*     tk[]      = temporal key                         [128 bits]
+*     ta[]      = transmitter's MAC address            [ 48 bits]
+*     iv32      = upper 32 bits of IV                  [ 32 bits]
+* Output:
+*     p1k[]     = Phase 1 key                          [ 80 bits]
+*
+* Note:
+*     This function only needs to be called every 2**16 packets,
+*     although in theory it could be called every packet.
+*
+**********************************************************************
+*/
+static void phase1(u16 *p1k,const u8 *tk,const u8 *ta,u32 iv32)
+{
+       sint  i;
+_func_enter_;
+       /* Initialize the 80 bits of P1K[] from IV32 and TA[0..5]     */
+       p1k[0]      = Lo16(iv32);
+       p1k[1]      = Hi16(iv32);
+       p1k[2]      = Mk16(ta[1],ta[0]); /* use TA[] as little-endian */
+       p1k[3]      = Mk16(ta[3],ta[2]);
+       p1k[4]      = Mk16(ta[5],ta[4]);
+
+       /* Now compute an unbalanced Feistel cipher with 80-bit block */
+       /* size on the 80-bit block P1K[], using the 128-bit key TK[] */
+       for (i=0; i < PHASE1_LOOP_CNT ;i++)
+       {                 /* Each add operation here is mod 2**16 */
+               p1k[0] += _S_(p1k[4] ^ TK16((i&1)+0));
+               p1k[1] += _S_(p1k[0] ^ TK16((i&1)+2));
+               p1k[2] += _S_(p1k[1] ^ TK16((i&1)+4));
+               p1k[3] += _S_(p1k[2] ^ TK16((i&1)+6));
+               p1k[4] += _S_(p1k[3] ^ TK16((i&1)+0));
+               p1k[4] +=  (unsigned short)i;                    /* avoid "slide attacks" */
+        }
+_func_exit_;
+}
+
+
+/*
+**********************************************************************
+* Routine: Phase 2 -- generate RC4KEY, given TK, P1K, IV16
+*
+* Inputs:
+*     tk[]      = Temporal key                         [128 bits]
+*     p1k[]     = Phase 1 output key                   [ 80 bits]
+*     iv16      = low 16 bits of IV counter            [ 16 bits]
+* Output:
+*     rc4key[]  = the key used to encrypt the packet   [128 bits]
+*
+* Note:
+*     The value {TA,IV32,IV16} for Phase1/Phase2 must be unique
+*     across all packets using the same key TK value. Then, for a
+*     given value of TK[], this TKIP48 construction guarantees that
+*     the final RC4KEY value is unique across all packets.
+*
+* Suggested implementation optimization: if PPK[] is "overlaid"
+*     appropriately on RC4KEY[], there is no need for the final
+*     for loop below that copies the PPK[] result into RC4KEY[].
+*
+**********************************************************************
+*/
+static void phase2(u8 *rc4key,const u8 *tk,const u16 *p1k,u16 iv16)
+{
+       sint  i;
+       u16 PPK[6];                          /* temporary key for mixing    */
+_func_enter_;
+       /* Note: all adds in the PPK[] equations below are mod 2**16         */
+       for (i=0;i<5;i++) PPK[i]=p1k[i];      /* first, copy P1K to PPK      */
+               PPK[5]  =  p1k[4] +iv16;             /* next,  add in IV16          */
+
+       /* Bijective non-linear mixing of the 96 bits of PPK[0..5]           */
+       PPK[0] +=    _S_(PPK[5] ^ TK16(0));   /* Mix key in each "round"     */
+       PPK[1] +=    _S_(PPK[0] ^ TK16(1));
+       PPK[2] +=    _S_(PPK[1] ^ TK16(2));
+       PPK[3] +=    _S_(PPK[2] ^ TK16(3));
+       PPK[4] +=    _S_(PPK[3] ^ TK16(4));
+       PPK[5] +=    _S_(PPK[4] ^ TK16(5));   /* Total # S-box lookups == 6  */
+
+       /* Final sweep: bijective, "linear". Rotates kill LSB correlations   */
+       PPK[0] +=  RotR1(PPK[5] ^ TK16(6));
+       PPK[1] +=  RotR1(PPK[0] ^ TK16(7));   /* Use all of TK[] in Phase2   */
+       PPK[2] +=  RotR1(PPK[1]);
+       PPK[3] +=  RotR1(PPK[2]);
+       PPK[4] +=  RotR1(PPK[3]);
+       PPK[5] +=  RotR1(PPK[4]);
+       /* Note: At this point, for a given key TK[0..15], the 96-bit output */
+       /*       value PPK[0..5] is guaranteed to be unique, as a function   */
+       /*       of the 96-bit "input" value   {TA,IV32,IV16}. That is, P1K  */
+       /*       is now a keyed permutation of {TA,IV32,IV16}.               */
+
+       /* Set RC4KEY[0..3], which includes "cleartext" portion of RC4 key   */
+       rc4key[0] = Hi8(iv16);                /* RC4KEY[0..2] is the WEP IV  */
+       rc4key[1] =(Hi8(iv16) | 0x20) & 0x7F; /* Help avoid weak (FMS) keys  */
+       rc4key[2] = Lo8(iv16);
+       rc4key[3] = Lo8((PPK[5] ^ TK16(0)) >> 1);
+
+
+       /* Copy 96 bits of PPK[0..5] to RC4KEY[4..15]  (little-endian)       */
+       for (i=0;i<6;i++)
+       {
+               rc4key[4+2*i] = Lo8(PPK[i]);
+               rc4key[5+2*i] = Hi8(PPK[i]);
+       }
+_func_exit_;
+}
+
+
+//The hlen isn't include the IV
+u32    rtw_tkip_encrypt(_adapter *padapter, u8 *pxmitframe)
+{                                                                                                                                      // exclude ICV
+       u16     pnl;
+       u32     pnh;
+       u8      rc4key[16];
+       u8   ttkey[16];
+       u8      crc[4];
+       struct arc4context mycontext;
+       sint                    curfragnum,length;
+       u32     prwskeylen;
+
+       u8      *pframe, *payload,*iv,*prwskey;
+       union pn48 dot11txpn;
+       struct  sta_info                *stainfo;
+       struct  pkt_attrib       *pattrib = &((struct xmit_frame *)pxmitframe)->attrib;
+       struct  security_priv   *psecuritypriv=&padapter->securitypriv;
+       struct  xmit_priv               *pxmitpriv=&padapter->xmitpriv;
+       u32     res=_SUCCESS;
+_func_enter_;
+
+       if(((struct xmit_frame*)pxmitframe)->buf_addr==NULL)
+               return _FAIL;
+
+#ifdef CONFIG_USB_TX_AGGREGATION
+       pframe = ((struct xmit_frame*)pxmitframe)->buf_addr + TXDESC_SIZE +
+                (((struct xmit_frame*)pxmitframe)->pkt_offset * PACKET_OFFSET_SZ);
+#else
+       pframe = ((struct xmit_frame*)pxmitframe)->buf_addr + TXDESC_OFFSET;
+#endif
+
+       //4 start to encrypt each fragment
+       if(pattrib->encrypt==_TKIP_){
+
+               if(pattrib->psta)
+               {
+                       stainfo = pattrib->psta;
+               }
+               else
+               {
+                       DBG_871X("%s, call rtw_get_stainfo()\n", __func__);
+                       stainfo=rtw_get_stainfo(&padapter->stapriv ,&pattrib->ra[0] );
+               }
+
+               if (stainfo!=NULL){
+
+                       if(!(stainfo->state &_FW_LINKED))
+                       {
+                               DBG_871X("%s, psta->state(0x%x) != _FW_LINKED\n", __func__, stainfo->state);
+                               return _FAIL;
+                       }
+
+                       RT_TRACE(_module_rtl871x_security_c_,_drv_err_,("rtw_tkip_encrypt: stainfo!=NULL!!!\n"));
+
+                       if(IS_MCAST(pattrib->ra))
+                       {
+                               prwskey=psecuritypriv->dot118021XGrpKey[psecuritypriv->dot118021XGrpKeyid].skey;
+                       }
+                       else
+                       {
+                               prwskey=&stainfo->dot118021x_UncstKey.skey[0];
+                       }
+
+                       prwskeylen=16;
+
+                       for(curfragnum=0;curfragnum<pattrib->nr_frags;curfragnum++){
+                               iv=pframe+pattrib->hdrlen;
+                               payload=pframe+pattrib->iv_len+pattrib->hdrlen;
+
+                               GET_TKIP_PN(iv, dot11txpn);
+
+                               pnl=(u16)(dot11txpn.val);
+                               pnh=(u32)(dot11txpn.val>>16);
+
+                               phase1((u16 *)&ttkey[0],prwskey,&pattrib->ta[0],pnh);
+
+                               phase2(&rc4key[0],prwskey,(u16 *)&ttkey[0],pnl);
+
+                               if((curfragnum+1)==pattrib->nr_frags){  //4 the last fragment
+                                       length=pattrib->last_txcmdsz-pattrib->hdrlen-pattrib->iv_len- pattrib->icv_len;
+                                       RT_TRACE(_module_rtl871x_security_c_,_drv_info_,("pattrib->iv_len =%x, pattrib->icv_len =%x\n", pattrib->iv_len,pattrib->icv_len));
+                                       *((u32 *)crc)=cpu_to_le32(getcrc32(payload,length));/* modified by Amy*/
+
+                                       arcfour_init(&mycontext, rc4key,16);
+                                       arcfour_encrypt(&mycontext, payload, payload, length);
+                                       arcfour_encrypt(&mycontext, payload+length, crc, 4);
+
+                               }
+                               else{
+                                       length=pxmitpriv->frag_len-pattrib->hdrlen-pattrib->iv_len-pattrib->icv_len ;
+                                       *((u32 *)crc)=cpu_to_le32(getcrc32(payload,length));/* modified by Amy*/
+                                       arcfour_init(&mycontext,rc4key,16);
+                                       arcfour_encrypt(&mycontext, payload, payload, length);
+                                       arcfour_encrypt(&mycontext, payload+length, crc, 4);
+
+                               pframe+=pxmitpriv->frag_len;
+                               pframe=(u8 *)RND4((SIZE_PTR)(pframe));
+
+                               }
+                       }
+
+
+               }
+               else{
+                       RT_TRACE(_module_rtl871x_security_c_,_drv_err_,("rtw_tkip_encrypt: stainfo==NULL!!!\n"));
+                        DBG_871X("%s, psta==NUL\n", __func__);
+                       res=_FAIL;
+               }
+
+       }
+_func_exit_;
+       return res;
+
+}
+
+
+//The hlen isn't include the IV
+u32 rtw_tkip_decrypt(_adapter *padapter, u8 *precvframe)
+{                                                                                                                                      // exclude ICV
+       u16 pnl;
+       u32 pnh;
+       u8   rc4key[16];
+       u8   ttkey[16];
+       u8      crc[4];
+       struct arc4context mycontext;
+       sint                    length;
+       u32     prwskeylen;
+
+       u8      *pframe, *payload,*iv,*prwskey;
+       union pn48 dot11txpn;
+       struct  sta_info                *stainfo;
+       struct  rx_pkt_attrib    *prxattrib = &((union recv_frame *)precvframe)->u.hdr.attrib;
+       struct  security_priv   *psecuritypriv=&padapter->securitypriv;
+//     struct  recv_priv               *precvpriv=&padapter->recvpriv;
+       u32             res=_SUCCESS;
+
+_func_enter_;
+
+       pframe=(unsigned char *)((union recv_frame*)precvframe)->u.hdr.rx_data;
+
+       //4 start to decrypt recvframe
+       if(prxattrib->encrypt==_TKIP_){
+
+               stainfo=rtw_get_stainfo(&padapter->stapriv ,&prxattrib->ta[0] );
+               if (stainfo!=NULL){
+
+                       if(IS_MCAST(prxattrib->ra))
+                       {
+                               static u32 start = 0;
+                               static u32 no_gkey_bc_cnt = 0;
+                               static u32 no_gkey_mc_cnt = 0;
+
+                               if(psecuritypriv->binstallGrpkey==_FALSE)
+                               {
+                                       res=_FAIL;
+
+                                       if (start == 0)
+                                               start = rtw_get_current_time();
+
+                                       if (is_broadcast_mac_addr(prxattrib->ra))
+                                               no_gkey_bc_cnt++;
+                                       else
+                                               no_gkey_mc_cnt++;
+
+                                       if (rtw_get_passing_time_ms(start) > 1000) {
+                                               if (no_gkey_bc_cnt || no_gkey_mc_cnt) {
+                                                       DBG_871X_LEVEL(_drv_always_, FUNC_ADPT_FMT" no_gkey_bc_cnt:%u, no_gkey_mc_cnt:%u\n",
+                                                               FUNC_ADPT_ARG(padapter), no_gkey_bc_cnt, no_gkey_mc_cnt);
+                                               }
+                                               start = rtw_get_current_time();
+                                               no_gkey_bc_cnt = 0;
+                                               no_gkey_mc_cnt = 0;
+                                       }
+                                       goto exit;
+                               }
+
+                               if (no_gkey_bc_cnt || no_gkey_mc_cnt) {
+                                       DBG_871X_LEVEL(_drv_always_, FUNC_ADPT_FMT" gkey installed. no_gkey_bc_cnt:%u, no_gkey_mc_cnt:%u\n",
+                                               FUNC_ADPT_ARG(padapter), no_gkey_bc_cnt, no_gkey_mc_cnt);
+                               }
+                               start = 0;
+                               no_gkey_bc_cnt = 0;
+                               no_gkey_mc_cnt = 0;
+
+                               //DBG_871X("rx bc/mc packets, to perform sw rtw_tkip_decrypt\n");
+                               //prwskey = psecuritypriv->dot118021XGrpKey[psecuritypriv->dot118021XGrpKeyid].skey;
+                               prwskey = psecuritypriv->dot118021XGrpKey[prxattrib->key_index].skey;
+                               prwskeylen=16;
+                       }
+                       else
+                       {
+                               RT_TRACE(_module_rtl871x_security_c_,_drv_err_,("rtw_tkip_decrypt: stainfo!=NULL!!!\n"));
+                               prwskey=&stainfo->dot118021x_UncstKey.skey[0];
+                               prwskeylen=16;
+                       }
+
+                       iv=pframe+prxattrib->hdrlen;
+                       payload=pframe+prxattrib->iv_len+prxattrib->hdrlen;
+                       length= ((union recv_frame *)precvframe)->u.hdr.len-prxattrib->hdrlen-prxattrib->iv_len;
+
+                       GET_TKIP_PN(iv, dot11txpn);
+
+                       pnl=(u16)(dot11txpn.val);
+                       pnh=(u32)(dot11txpn.val>>16);
+
+                       phase1((u16 *)&ttkey[0],prwskey,&prxattrib->ta[0],pnh);
+                       phase2(&rc4key[0],prwskey,(unsigned short *)&ttkey[0],pnl);
+
+                       //4 decrypt payload include icv
+
+                       arcfour_init(&mycontext, rc4key,16);
+                       arcfour_encrypt(&mycontext, payload, payload, length);
+
+                       *((u32 *)crc)=le32_to_cpu(getcrc32(payload,length-4));
+
+                       if(crc[3]!=payload[length-1] || crc[2]!=payload[length-2] || crc[1]!=payload[length-3] || crc[0]!=payload[length-4])
+                       {
+                           RT_TRACE(_module_rtl871x_security_c_,_drv_err_,("rtw_wep_decrypt:icv error crc[3](%x)!=payload[length-1](%x) || crc[2](%x)!=payload[length-2](%x) || crc[1](%x)!=payload[length-3](%x) || crc[0](%x)!=payload[length-4](%x)\n",
+                                               crc[3],payload[length-1],crc[2],payload[length-2],crc[1],payload[length-3],crc[0],payload[length-4]));
+                               res=_FAIL;
+                       }
+
+
+               }
+               else{
+                       RT_TRACE(_module_rtl871x_security_c_,_drv_err_,("rtw_tkip_decrypt: stainfo==NULL!!!\n"));
+                       res=_FAIL;
+               }
+
+       }
+_func_exit_;
+exit:
+       return res;
+
+}
+
+
+//3                    =====AES related=====
+
+
+
+#define MAX_MSG_SIZE   2048
+/*****************************/
+/******** SBOX Table *********/
+/*****************************/
+
+  static  u8 sbox_table[256] =
+    {
+        0x63, 0x7c, 0x77, 0x7b, 0xf2, 0x6b, 0x6f, 0xc5,
+        0x30, 0x01, 0x67, 0x2b, 0xfe, 0xd7, 0xab, 0x76,
+        0xca, 0x82, 0xc9, 0x7d, 0xfa, 0x59, 0x47, 0xf0,
+        0xad, 0xd4, 0xa2, 0xaf, 0x9c, 0xa4, 0x72, 0xc0,
+        0xb7, 0xfd, 0x93, 0x26, 0x36, 0x3f, 0xf7, 0xcc,
+        0x34, 0xa5, 0xe5, 0xf1, 0x71, 0xd8, 0x31, 0x15,
+        0x04, 0xc7, 0x23, 0xc3, 0x18, 0x96, 0x05, 0x9a,
+        0x07, 0x12, 0x80, 0xe2, 0xeb, 0x27, 0xb2, 0x75,
+        0x09, 0x83, 0x2c, 0x1a, 0x1b, 0x6e, 0x5a, 0xa0,
+        0x52, 0x3b, 0xd6, 0xb3, 0x29, 0xe3, 0x2f, 0x84,
+        0x53, 0xd1, 0x00, 0xed, 0x20, 0xfc, 0xb1, 0x5b,
+        0x6a, 0xcb, 0xbe, 0x39, 0x4a, 0x4c, 0x58, 0xcf,
+        0xd0, 0xef, 0xaa, 0xfb, 0x43, 0x4d, 0x33, 0x85,
+        0x45, 0xf9, 0x02, 0x7f, 0x50, 0x3c, 0x9f, 0xa8,
+        0x51, 0xa3, 0x40, 0x8f, 0x92, 0x9d, 0x38, 0xf5,
+        0xbc, 0xb6, 0xda, 0x21, 0x10, 0xff, 0xf3, 0xd2,
+        0xcd, 0x0c, 0x13, 0xec, 0x5f, 0x97, 0x44, 0x17,
+        0xc4, 0xa7, 0x7e, 0x3d, 0x64, 0x5d, 0x19, 0x73,
+        0x60, 0x81, 0x4f, 0xdc, 0x22, 0x2a, 0x90, 0x88,
+        0x46, 0xee, 0xb8, 0x14, 0xde, 0x5e, 0x0b, 0xdb,
+        0xe0, 0x32, 0x3a, 0x0a, 0x49, 0x06, 0x24, 0x5c,
+        0xc2, 0xd3, 0xac, 0x62, 0x91, 0x95, 0xe4, 0x79,
+        0xe7, 0xc8, 0x37, 0x6d, 0x8d, 0xd5, 0x4e, 0xa9,
+        0x6c, 0x56, 0xf4, 0xea, 0x65, 0x7a, 0xae, 0x08,
+        0xba, 0x78, 0x25, 0x2e, 0x1c, 0xa6, 0xb4, 0xc6,
+        0xe8, 0xdd, 0x74, 0x1f, 0x4b, 0xbd, 0x8b, 0x8a,
+        0x70, 0x3e, 0xb5, 0x66, 0x48, 0x03, 0xf6, 0x0e,
+        0x61, 0x35, 0x57, 0xb9, 0x86, 0xc1, 0x1d, 0x9e,
+        0xe1, 0xf8, 0x98, 0x11, 0x69, 0xd9, 0x8e, 0x94,
+        0x9b, 0x1e, 0x87, 0xe9, 0xce, 0x55, 0x28, 0xdf,
+        0x8c, 0xa1, 0x89, 0x0d, 0xbf, 0xe6, 0x42, 0x68,
+        0x41, 0x99, 0x2d, 0x0f, 0xb0, 0x54, 0xbb, 0x16
+    };
+
+/*****************************/
+/**** Function Prototypes ****/
+/*****************************/
+
+static void bitwise_xor(u8 *ina, u8 *inb, u8 *out);
+static void construct_mic_iv(
+                        u8 *mic_header1,
+                        sint qc_exists,
+                        sint a4_exists,
+                        u8 *mpdu,
+                        uint payload_length,
+                        u8 * pn_vector,
+                        uint frtype);// add for CONFIG_IEEE80211W, none 11w also can use
+static void construct_mic_header1(
+                        u8 *mic_header1,
+                        sint header_length,
+                        u8 *mpdu,
+                        uint frtype);// add for CONFIG_IEEE80211W, none 11w also can use
+static void construct_mic_header2(
+                    u8 *mic_header2,
+                    u8 *mpdu,
+                    sint a4_exists,
+                    sint qc_exists);
+static void construct_ctr_preload(
+                        u8 *ctr_preload,
+                        sint a4_exists,
+                        sint qc_exists,
+                        u8 *mpdu,
+                        u8 *pn_vector,
+                        sint c,
+                        uint frtype);// add for CONFIG_IEEE80211W, none 11w also can use
+static void xor_128(u8 *a, u8 *b, u8 *out);
+static void xor_32(u8 *a, u8 *b, u8 *out);
+static u8 sbox(u8 a);
+static void next_key(u8 *key, sint round);
+static void byte_sub(u8 *in, u8 *out);
+static void shift_row(u8 *in, u8 *out);
+static void mix_column(u8 *in, u8 *out);
+#ifndef PLATFORM_FREEBSD
+static void add_round_key( u8 *shiftrow_in,
+                    u8 *mcol_in,
+                    u8 *block_in,
+                    sint round,
+                    u8 *out);
+#endif //PLATFORM_FREEBSD
+static void aes128k128d(u8 *key, u8 *data, u8 *ciphertext);
+
+
+/****************************************/
+/* aes128k128d()                        */
+/* Performs a 128 bit AES encrypt with  */
+/* 128 bit data.                        */
+/****************************************/
+static void xor_128(u8 *a, u8 *b, u8 *out)
+{
+    sint i;
+_func_enter_;
+    for (i=0;i<16; i++)
+    {
+        out[i] = a[i] ^ b[i];
+    }
+_func_exit_;
+}
+
+
+static void xor_32(u8 *a, u8 *b, u8 *out)
+{
+    sint i;
+_func_enter_;
+    for (i=0;i<4; i++)
+    {
+        out[i] = a[i] ^ b[i];
+    }
+_func_exit_;
+}
+
+
+static u8 sbox(u8 a)
+{
+    return sbox_table[(sint)a];
+}
+
+
+static void next_key(u8 *key, sint round)
+{
+    u8 rcon;
+    u8 sbox_key[4];
+    u8 rcon_table[12] =
+    {
+        0x01, 0x02, 0x04, 0x08, 0x10, 0x20, 0x40, 0x80,
+        0x1b, 0x36, 0x36, 0x36
+    };
+_func_enter_;
+    sbox_key[0] = sbox(key[13]);
+    sbox_key[1] = sbox(key[14]);
+    sbox_key[2] = sbox(key[15]);
+    sbox_key[3] = sbox(key[12]);
+
+    rcon = rcon_table[round];
+
+    xor_32(&key[0], sbox_key, &key[0]);
+    key[0] = key[0] ^ rcon;
+
+    xor_32(&key[4], &key[0], &key[4]);
+    xor_32(&key[8], &key[4], &key[8]);
+    xor_32(&key[12], &key[8], &key[12]);
+_func_exit_;
+}
+
+
+static void byte_sub(u8 *in, u8 *out)
+{
+    sint i;
+_func_enter_;
+    for (i=0; i< 16; i++)
+    {
+        out[i] = sbox(in[i]);
+    }
+_func_exit_;
+}
+
+
+static void shift_row(u8 *in, u8 *out)
+{
+_func_enter_;
+    out[0] =  in[0];
+    out[1] =  in[5];
+    out[2] =  in[10];
+    out[3] =  in[15];
+    out[4] =  in[4];
+    out[5] =  in[9];
+    out[6] =  in[14];
+    out[7] =  in[3];
+    out[8] =  in[8];
+    out[9] =  in[13];
+    out[10] = in[2];
+    out[11] = in[7];
+    out[12] = in[12];
+    out[13] = in[1];
+    out[14] = in[6];
+    out[15] = in[11];
+_func_exit_;
+}
+
+
+static void mix_column(u8 *in, u8 *out)
+{
+    sint i;
+    u8 add1b[4];
+    u8 add1bf7[4];
+    u8 rotl[4];
+    u8 swap_halfs[4];
+    u8 andf7[4];
+    u8 rotr[4];
+    u8 temp[4];
+    u8 tempb[4];
+_func_enter_;
+    for (i=0 ; i<4; i++)
+    {
+        if ((in[i] & 0x80)== 0x80)
+            add1b[i] = 0x1b;
+        else
+            add1b[i] = 0x00;
+    }
+
+    swap_halfs[0] = in[2];    /* Swap halfs */
+    swap_halfs[1] = in[3];
+    swap_halfs[2] = in[0];
+    swap_halfs[3] = in[1];
+
+    rotl[0] = in[3];        /* Rotate left 8 bits */
+    rotl[1] = in[0];
+    rotl[2] = in[1];
+    rotl[3] = in[2];
+
+    andf7[0] = in[0] & 0x7f;
+    andf7[1] = in[1] & 0x7f;
+    andf7[2] = in[2] & 0x7f;
+    andf7[3] = in[3] & 0x7f;
+
+    for (i = 3; i>0; i--)    /* logical shift left 1 bit */
+    {
+        andf7[i] = andf7[i] << 1;
+        if ((andf7[i-1] & 0x80) == 0x80)
+        {
+            andf7[i] = (andf7[i] | 0x01);
+        }
+    }
+    andf7[0] = andf7[0] << 1;
+    andf7[0] = andf7[0] & 0xfe;
+
+    xor_32(add1b, andf7, add1bf7);
+
+    xor_32(in, add1bf7, rotr);
+
+    temp[0] = rotr[0];         /* Rotate right 8 bits */
+    rotr[0] = rotr[1];
+    rotr[1] = rotr[2];
+    rotr[2] = rotr[3];
+    rotr[3] = temp[0];
+
+    xor_32(add1bf7, rotr, temp);
+    xor_32(swap_halfs, rotl,tempb);
+    xor_32(temp, tempb, out);
+_func_exit_;
+}
+
+
+static void aes128k128d(u8 *key, u8 *data, u8 *ciphertext)
+{
+    sint round;
+    sint i;
+    u8 intermediatea[16];
+    u8 intermediateb[16];
+    u8 round_key[16];
+_func_enter_;
+    for(i=0; i<16; i++) round_key[i] = key[i];
+
+    for (round = 0; round < 11; round++)
+    {
+        if (round == 0)
+        {
+            xor_128(round_key, data, ciphertext);
+            next_key(round_key, round);
+        }
+        else if (round == 10)
+        {
+            byte_sub(ciphertext, intermediatea);
+            shift_row(intermediatea, intermediateb);
+            xor_128(intermediateb, round_key, ciphertext);
+        }
+        else    /* 1 - 9 */
+        {
+            byte_sub(ciphertext, intermediatea);
+            shift_row(intermediatea, intermediateb);
+            mix_column(&intermediateb[0], &intermediatea[0]);
+            mix_column(&intermediateb[4], &intermediatea[4]);
+            mix_column(&intermediateb[8], &intermediatea[8]);
+            mix_column(&intermediateb[12], &intermediatea[12]);
+            xor_128(intermediatea, round_key, ciphertext);
+            next_key(round_key, round);
+        }
+    }
+_func_exit_;
+}
+
+
+/************************************************/
+/* construct_mic_iv()                           */
+/* Builds the MIC IV from header fields and PN  */
+/* Baron think the function is construct CCM    */
+/* nonce                                        */
+/************************************************/
+static void construct_mic_iv(
+                        u8 *mic_iv,
+                        sint qc_exists,
+                        sint a4_exists,
+                        u8 *mpdu,
+                        uint payload_length,
+                        u8 *pn_vector,
+                        uint frtype// add for CONFIG_IEEE80211W, none 11w also can use
+                        )
+{
+    sint i;
+_func_enter_;
+    mic_iv[0] = 0x59;
+    if (qc_exists && a4_exists) mic_iv[1] = mpdu[30] & 0x0f;    /* QoS_TC           */
+    if (qc_exists && !a4_exists) mic_iv[1] = mpdu[24] & 0x0f;   /* mute bits 7-4    */
+    if (!qc_exists) mic_iv[1] = 0x00;
+#ifdef CONFIG_IEEE80211W
+       //802.11w management frame should set management bit(4)
+    if(frtype == WIFI_MGT_TYPE)
+               mic_iv[1] |= BIT(4);
+#endif //CONFIG_IEEE80211W
+    for (i = 2; i < 8; i++)
+        mic_iv[i] = mpdu[i + 8];                    /* mic_iv[2:7] = A2[0:5] = mpdu[10:15] */
+    #ifdef CONSISTENT_PN_ORDER
+        for (i = 8; i < 14; i++)
+            mic_iv[i] = pn_vector[i - 8];           /* mic_iv[8:13] = PN[0:5] */
+    #else
+        for (i = 8; i < 14; i++)
+            mic_iv[i] = pn_vector[13 - i];          /* mic_iv[8:13] = PN[5:0] */
+    #endif
+    mic_iv[14] = (unsigned char) (payload_length / 256);
+    mic_iv[15] = (unsigned char) (payload_length % 256);
+_func_exit_;
+}
+
+
+/************************************************/
+/* construct_mic_header1()                      */
+/* Builds the first MIC header block from       */
+/* header fields.                               */
+/* Build AAD SC,A1,A2                           */
+/************************************************/
+static void construct_mic_header1(
+                        u8 *mic_header1,
+                        sint header_length,
+                        u8 *mpdu,
+                        uint frtype// add for CONFIG_IEEE80211W, none 11w also can use
+                        )
+{
+_func_enter_;
+    mic_header1[0] = (u8)((header_length - 2) / 256);
+    mic_header1[1] = (u8)((header_length - 2) % 256);
+#ifdef CONFIG_IEEE80211W
+    //802.11w management frame don't AND subtype bits 4,5,6 of frame control field
+    if(frtype == WIFI_MGT_TYPE)
+               mic_header1[2] = mpdu[0];
+       else
+#endif //CONFIG_IEEE80211W
+               mic_header1[2] = mpdu[0] & 0xcf;    /* Mute CF poll & CF ack bits */
+
+    mic_header1[3] = mpdu[1] & 0xc7;    /* Mute retry, more data and pwr mgt bits */
+    mic_header1[4] = mpdu[4];       /* A1 */
+    mic_header1[5] = mpdu[5];
+    mic_header1[6] = mpdu[6];
+    mic_header1[7] = mpdu[7];
+    mic_header1[8] = mpdu[8];
+    mic_header1[9] = mpdu[9];
+    mic_header1[10] = mpdu[10];     /* A2 */
+    mic_header1[11] = mpdu[11];
+    mic_header1[12] = mpdu[12];
+    mic_header1[13] = mpdu[13];
+    mic_header1[14] = mpdu[14];
+    mic_header1[15] = mpdu[15];
+_func_exit_;
+}
+
+
+/************************************************/
+/* construct_mic_header2()                      */
+/* Builds the last MIC header block from        */
+/* header fields.                               */
+/************************************************/
+static void construct_mic_header2(
+                u8 *mic_header2,
+                u8 *mpdu,
+                sint a4_exists,
+                sint qc_exists
+                )
+{
+    sint i;
+_func_enter_;
+    for (i = 0; i<16; i++) mic_header2[i]=0x00;
+
+    mic_header2[0] = mpdu[16];    /* A3 */
+    mic_header2[1] = mpdu[17];
+    mic_header2[2] = mpdu[18];
+    mic_header2[3] = mpdu[19];
+    mic_header2[4] = mpdu[20];
+    mic_header2[5] = mpdu[21];
+
+    //mic_header2[6] = mpdu[22] & 0xf0;   /* SC */
+    mic_header2[6] = 0x00;
+    mic_header2[7] = 0x00; /* mpdu[23]; */
+
+
+    if (!qc_exists && a4_exists)
+    {
+        for (i=0;i<6;i++) mic_header2[8+i] = mpdu[24+i];   /* A4 */
+
+    }
+
+    if (qc_exists && !a4_exists)
+    {
+        mic_header2[8] = mpdu[24] & 0x0f; /* mute bits 15 - 4 */
+        mic_header2[9] = mpdu[25] & 0x00;
+    }
+
+    if (qc_exists && a4_exists)
+    {
+        for (i=0;i<6;i++) mic_header2[8+i] = mpdu[24+i];   /* A4 */
+
+        mic_header2[14] = mpdu[30] & 0x0f;
+        mic_header2[15] = mpdu[31] & 0x00;
+    }
+
+_func_exit_;
+}
+
+
+/************************************************/
+/* construct_mic_header2()                      */
+/* Builds the last MIC header block from        */
+/* header fields.                               */
+/* Baron think the function is construct CCM    */
+/* nonce                                        */
+/************************************************/
+static void construct_ctr_preload(
+                        u8 *ctr_preload,
+                        sint a4_exists,
+                        sint qc_exists,
+                        u8 *mpdu,
+                        u8 *pn_vector,
+                        sint c,
+                        uint frtype // add for CONFIG_IEEE80211W, none 11w also can use
+                        )
+{
+    sint i = 0;
+_func_enter_;
+    for (i=0; i<16; i++) ctr_preload[i] = 0x00;
+    i = 0;
+
+    ctr_preload[0] = 0x01;                                  /* flag */
+    if (qc_exists && a4_exists)
+               ctr_preload[1] = mpdu[30] & 0x0f;   /* QoC_Control */
+    if (qc_exists && !a4_exists)
+               ctr_preload[1] = mpdu[24] & 0x0f;
+#ifdef CONFIG_IEEE80211W
+       //802.11w management frame should set management bit(4)
+       if(frtype == WIFI_MGT_TYPE)
+               ctr_preload[1] |= BIT(4);
+#endif //CONFIG_IEEE80211W
+    for (i = 2; i < 8; i++)
+        ctr_preload[i] = mpdu[i + 8];                       /* ctr_preload[2:7] = A2[0:5] = mpdu[10:15] */
+    #ifdef CONSISTENT_PN_ORDER
+      for (i = 8; i < 14; i++)
+            ctr_preload[i] =    pn_vector[i - 8];           /* ctr_preload[8:13] = PN[0:5] */
+    #else
+      for (i = 8; i < 14; i++)
+            ctr_preload[i] =    pn_vector[13 - i];          /* ctr_preload[8:13] = PN[5:0] */
+    #endif
+    ctr_preload[14] =  (unsigned char) (c / 256); /* Ctr */
+    ctr_preload[15] =  (unsigned char) (c % 256);
+_func_exit_;
+}
+
+
+/************************************/
+/* bitwise_xor()                    */
+/* A 128 bit, bitwise exclusive or  */
+/************************************/
+static void bitwise_xor(u8 *ina, u8 *inb, u8 *out)
+{
+    sint i;
+_func_enter_;
+    for (i=0; i<16; i++)
+    {
+        out[i] = ina[i] ^ inb[i];
+    }
+_func_exit_;
+}
+
+
+static sint aes_cipher(u8 *key, uint   hdrlen,
+                       u8 *pframe, uint plen)
+{
+//     /*static*/ unsigned char        message[MAX_MSG_SIZE];
+       uint    qc_exists, a4_exists, i, j, payload_remainder,
+               num_blocks, payload_index;
+
+       u8 pn_vector[6];
+       u8 mic_iv[16];
+       u8 mic_header1[16];
+       u8 mic_header2[16];
+       u8 ctr_preload[16];
+
+       /* Intermediate Buffers */
+       u8 chain_buffer[16];
+       u8 aes_out[16];
+       u8 padded_buffer[16];
+       u8 mic[8];
+//     uint    offset = 0;
+       uint    frtype  = GetFrameType(pframe);
+       uint    frsubtype  = GetFrameSubType(pframe);
+
+_func_enter_;
+       frsubtype=frsubtype>>4;
+
+
+       _rtw_memset((void *)mic_iv, 0, 16);
+       _rtw_memset((void *)mic_header1, 0, 16);
+       _rtw_memset((void *)mic_header2, 0, 16);
+       _rtw_memset((void *)ctr_preload, 0, 16);
+       _rtw_memset((void *)chain_buffer, 0, 16);
+       _rtw_memset((void *)aes_out, 0, 16);
+       _rtw_memset((void *)padded_buffer, 0, 16);
+
+       if ((hdrlen == WLAN_HDR_A3_LEN )||(hdrlen ==  WLAN_HDR_A3_QOS_LEN))
+               a4_exists = 0;
+       else
+               a4_exists = 1;
+
+       if (
+               ((frtype|frsubtype) == WIFI_DATA_CFACK) ||
+               ((frtype|frsubtype) == WIFI_DATA_CFPOLL)||
+               ((frtype|frsubtype) == WIFI_DATA_CFACKPOLL))
+               {
+                       qc_exists = 1;
+                                       if(hdrlen !=  WLAN_HDR_A3_QOS_LEN){
+
+                                       hdrlen += 2;
+                       }
+               }
+       // add for CONFIG_IEEE80211W, none 11w also can use
+       else if ((frtype == WIFI_DATA) &&
+               ((frsubtype == 0x08) ||
+               (frsubtype == 0x09)||
+               (frsubtype == 0x0a)||
+               (frsubtype == 0x0b)))
+               {
+                       if(hdrlen !=  WLAN_HDR_A3_QOS_LEN){
+
+                                       hdrlen += 2;
+                       }
+                       qc_exists = 1;
+               }
+       else
+               qc_exists = 0;
+
+       pn_vector[0]=pframe[hdrlen];
+       pn_vector[1]=pframe[hdrlen+1];
+       pn_vector[2]=pframe[hdrlen+4];
+       pn_vector[3]=pframe[hdrlen+5];
+       pn_vector[4]=pframe[hdrlen+6];
+       pn_vector[5]=pframe[hdrlen+7];
+
+       construct_mic_iv(
+                        mic_iv,
+                        qc_exists,
+                        a4_exists,
+                        pframe,         //message,
+                        plen,
+                        pn_vector,
+                        frtype // add for CONFIG_IEEE80211W, none 11w also can use
+                        );
+
+    construct_mic_header1(
+                            mic_header1,
+                            hdrlen,
+                            pframe,    //message
+                            frtype // add for CONFIG_IEEE80211W, none 11w also can use
+                            );
+    construct_mic_header2(
+                            mic_header2,
+                            pframe,    //message,
+                            a4_exists,
+                            qc_exists
+                            );
+
+
+       payload_remainder = plen % 16;
+    num_blocks = plen / 16;
+
+    /* Find start of payload */
+    payload_index = (hdrlen + 8);
+
+    /* Calculate MIC */
+    aes128k128d(key, mic_iv, aes_out);
+    bitwise_xor(aes_out, mic_header1, chain_buffer);
+    aes128k128d(key, chain_buffer, aes_out);
+    bitwise_xor(aes_out, mic_header2, chain_buffer);
+    aes128k128d(key, chain_buffer, aes_out);
+
+       for (i = 0; i < num_blocks; i++)
+    {
+        bitwise_xor(aes_out, &pframe[payload_index], chain_buffer);//bitwise_xor(aes_out, &message[payload_index], chain_buffer);
+
+        payload_index += 16;
+        aes128k128d(key, chain_buffer, aes_out);
+    }
+
+    /* Add on the final payload block if it needs padding */
+    if (payload_remainder > 0)
+    {
+        for (j = 0; j < 16; j++) padded_buffer[j] = 0x00;
+        for (j = 0; j < payload_remainder; j++)
+        {
+            padded_buffer[j] = pframe[payload_index++];//padded_buffer[j] = message[payload_index++];
+        }
+        bitwise_xor(aes_out, padded_buffer, chain_buffer);
+        aes128k128d(key, chain_buffer, aes_out);
+
+    }
+
+    for (j = 0 ; j < 8; j++) mic[j] = aes_out[j];
+
+    /* Insert MIC into payload */
+    for (j = 0; j < 8; j++)
+       pframe[payload_index+j] = mic[j];       //message[payload_index+j] = mic[j];
+
+       payload_index = hdrlen + 8;
+       for (i=0; i< num_blocks; i++)
+    {
+        construct_ctr_preload(
+                                ctr_preload,
+                                a4_exists,
+                                qc_exists,
+                                pframe,        //message,
+                                pn_vector,
+                                i+1,
+                                frtype); // add for CONFIG_IEEE80211W, none 11w also can use
+        aes128k128d(key, ctr_preload, aes_out);
+        bitwise_xor(aes_out, &pframe[payload_index], chain_buffer);//bitwise_xor(aes_out, &message[payload_index], chain_buffer);
+        for (j=0; j<16;j++) pframe[payload_index++] = chain_buffer[j];//for (j=0; j<16;j++) message[payload_index++] = chain_buffer[j];
+    }
+
+    if (payload_remainder > 0)          /* If there is a short final block, then pad it,*/
+    {                                   /* encrypt it and copy the unpadded part back   */
+        construct_ctr_preload(
+                                ctr_preload,
+                                a4_exists,
+                                qc_exists,
+                                pframe,        //message,
+                                pn_vector,
+                                num_blocks+1,
+                                frtype); // add for CONFIG_IEEE80211W, none 11w also can use
+
+        for (j = 0; j < 16; j++) padded_buffer[j] = 0x00;
+        for (j = 0; j < payload_remainder; j++)
+        {
+            padded_buffer[j] = pframe[payload_index+j];//padded_buffer[j] = message[payload_index+j];
+        }
+        aes128k128d(key, ctr_preload, aes_out);
+        bitwise_xor(aes_out, padded_buffer, chain_buffer);
+        for (j=0; j<payload_remainder;j++) pframe[payload_index++] = chain_buffer[j];//for (j=0; j<payload_remainder;j++) message[payload_index++] = chain_buffer[j];
+    }
+
+    /* Encrypt the MIC */
+    construct_ctr_preload(
+                        ctr_preload,
+                        a4_exists,
+                        qc_exists,
+                        pframe,        //message,
+                        pn_vector,
+                        0,
+                        frtype); // add for CONFIG_IEEE80211W, none 11w also can use
+
+    for (j = 0; j < 16; j++) padded_buffer[j] = 0x00;
+    for (j = 0; j < 8; j++)
+    {
+        padded_buffer[j] = pframe[j+hdrlen+8+plen];//padded_buffer[j] = message[j+hdrlen+8+plen];
+    }
+
+    aes128k128d(key, ctr_preload, aes_out);
+    bitwise_xor(aes_out, padded_buffer, chain_buffer);
+    for (j=0; j<8;j++) pframe[payload_index++] = chain_buffer[j];//for (j=0; j<8;j++) message[payload_index++] = chain_buffer[j];
+_func_exit_;
+       return _SUCCESS;
+}
+
+
+
+
+u32    rtw_aes_encrypt(_adapter *padapter, u8 *pxmitframe)
+{      // exclude ICV
+
+
+       /*static*/
+//     unsigned char   message[MAX_MSG_SIZE];
+
+       /* Intermediate Buffers */
+       sint    curfragnum,length;
+       u32     prwskeylen;
+       u8      *pframe,*prwskey;       //, *payload,*iv
+       struct  sta_info                *stainfo=NULL;
+       struct  pkt_attrib       *pattrib = &((struct xmit_frame *)pxmitframe)->attrib;
+       struct  security_priv   *psecuritypriv=&padapter->securitypriv;
+       struct  xmit_priv               *pxmitpriv=&padapter->xmitpriv;
+
+//     uint    offset = 0;
+       u32 res=_SUCCESS;
+_func_enter_;
+
+       if(((struct xmit_frame*)pxmitframe)->buf_addr==NULL)
+               return _FAIL;
+
+#ifdef CONFIG_USB_TX_AGGREGATION
+       pframe = ((struct xmit_frame*)pxmitframe)->buf_addr + TXDESC_SIZE +
+                (((struct xmit_frame*)pxmitframe)->pkt_offset * PACKET_OFFSET_SZ);
+#else
+       pframe = ((struct xmit_frame*)pxmitframe)->buf_addr + TXDESC_OFFSET;
+#endif
+
+       //4 start to encrypt each fragment
+       if((pattrib->encrypt==_AES_)){
+
+               if(pattrib->psta)
+               {
+                       stainfo = pattrib->psta;
+               }
+               else
+               {
+                       DBG_871X("%s, call rtw_get_stainfo()\n", __func__);
+                       stainfo=rtw_get_stainfo(&padapter->stapriv ,&pattrib->ra[0] );
+               }
+
+               if (stainfo!=NULL){
+
+                       if(!(stainfo->state &_FW_LINKED))
+                       {
+                               DBG_871X("%s, psta->state(0x%x) != _FW_LINKED\n", __func__, stainfo->state);
+                               return _FAIL;
+                       }
+
+                       RT_TRACE(_module_rtl871x_security_c_,_drv_err_,("rtw_aes_encrypt: stainfo!=NULL!!!\n"));
+
+                       if(IS_MCAST(pattrib->ra))
+                       {
+                               prwskey=psecuritypriv->dot118021XGrpKey[psecuritypriv->dot118021XGrpKeyid].skey;
+                       }
+                       else
+                       {
+                               prwskey=&stainfo->dot118021x_UncstKey.skey[0];
+                       }
+
+#ifdef CONFIG_TDLS     //swencryption
+                       {
+                               struct  sta_info                *ptdls_sta;
+                               ptdls_sta=rtw_get_stainfo(&padapter->stapriv ,&pattrib->dst[0] );
+                               if((ptdls_sta != NULL) && (ptdls_sta->tdls_sta_state & TDLS_LINKED_STATE) )
+                               {
+                                       DBG_871X("[%s] for tdls link\n", __FUNCTION__);
+                                       prwskey=&ptdls_sta->tpk.tk[0];
+                               }
+                       }
+#endif //CONFIG_TDLS
+
+                       prwskeylen=16;
+
+                       for(curfragnum=0;curfragnum<pattrib->nr_frags;curfragnum++){
+
+                               if((curfragnum+1)==pattrib->nr_frags){  //4 the last fragment
+                                       length=pattrib->last_txcmdsz-pattrib->hdrlen-pattrib->iv_len- pattrib->icv_len;
+
+                                       aes_cipher(prwskey,pattrib->hdrlen,pframe, length);
+                               }
+                               else{
+                                       length=pxmitpriv->frag_len-pattrib->hdrlen-pattrib->iv_len-pattrib->icv_len ;
+
+                                       aes_cipher(prwskey,pattrib->hdrlen,pframe, length);
+                               pframe+=pxmitpriv->frag_len;
+                               pframe=(u8*)RND4((SIZE_PTR)(pframe));
+
+                               }
+                       }
+
+
+               }
+               else{
+                       RT_TRACE(_module_rtl871x_security_c_,_drv_err_,("rtw_aes_encrypt: stainfo==NULL!!!\n"));
+                        DBG_871X("%s, psta==NUL\n", __func__);
+                       res=_FAIL;
+               }
+
+       }
+
+
+
+_func_exit_;
+               return res;
+}
+
+static sint aes_decipher(u8 *key, uint hdrlen,
+                       u8 *pframe, uint plen)
+{
+       static u8       message[MAX_MSG_SIZE];
+       uint    qc_exists, a4_exists, i, j, payload_remainder,
+                       num_blocks, payload_index;
+       sint res = _SUCCESS;
+       u8 pn_vector[6];
+       u8 mic_iv[16];
+       u8 mic_header1[16];
+       u8 mic_header2[16];
+       u8 ctr_preload[16];
+
+    /* Intermediate Buffers */
+       u8 chain_buffer[16];
+       u8 aes_out[16];
+       u8 padded_buffer[16];
+       u8 mic[8];
+
+
+//     uint    offset = 0;
+       uint    frtype  = GetFrameType(pframe);
+       uint    frsubtype  = GetFrameSubType(pframe);
+_func_enter_;
+       frsubtype=frsubtype>>4;
+
+
+       _rtw_memset((void *)mic_iv, 0, 16);
+       _rtw_memset((void *)mic_header1, 0, 16);
+       _rtw_memset((void *)mic_header2, 0, 16);
+       _rtw_memset((void *)ctr_preload, 0, 16);
+       _rtw_memset((void *)chain_buffer, 0, 16);
+       _rtw_memset((void *)aes_out, 0, 16);
+       _rtw_memset((void *)padded_buffer, 0, 16);
+
+       //start to decrypt the payload
+
+       num_blocks = (plen-8) / 16; //(plen including LLC, payload_length and mic )
+
+       payload_remainder = (plen-8) % 16;
+
+       pn_vector[0]  = pframe[hdrlen];
+       pn_vector[1]  = pframe[hdrlen+1];
+       pn_vector[2]  = pframe[hdrlen+4];
+       pn_vector[3]  = pframe[hdrlen+5];
+       pn_vector[4]  = pframe[hdrlen+6];
+       pn_vector[5]  = pframe[hdrlen+7];
+
+       if ((hdrlen == WLAN_HDR_A3_LEN )||(hdrlen ==  WLAN_HDR_A3_QOS_LEN))
+               a4_exists = 0;
+       else
+               a4_exists = 1;
+
+       if (
+               ((frtype|frsubtype) == WIFI_DATA_CFACK) ||
+               ((frtype|frsubtype) == WIFI_DATA_CFPOLL)||
+               ((frtype|frsubtype) == WIFI_DATA_CFACKPOLL))
+               {
+                       qc_exists = 1;
+                                       if(hdrlen !=  WLAN_HDR_A3_QOS_LEN){
+
+                                       hdrlen += 2;
+                       }
+               }//only for data packet . add for CONFIG_IEEE80211W, none 11w also can use
+       else if ((frtype == WIFI_DATA) &&
+               ((frsubtype == 0x08) ||
+               (frsubtype == 0x09)||
+               (frsubtype == 0x0a)||
+               (frsubtype == 0x0b)))
+               {
+                       if(hdrlen !=  WLAN_HDR_A3_QOS_LEN){
+
+                                       hdrlen += 2;
+                       }
+                       qc_exists = 1;
+               }
+       else
+               qc_exists = 0;
+
+
+       // now, decrypt pframe with hdrlen offset and plen long
+
+       payload_index = hdrlen + 8; // 8 is for extiv
+
+       for (i=0; i< num_blocks; i++)
+    {
+        construct_ctr_preload(
+                                ctr_preload,
+                                a4_exists,
+                                qc_exists,
+                                pframe,
+                                pn_vector,
+                                i+1,
+                                frtype // add for CONFIG_IEEE80211W, none 11w also can use
+                            );
+
+        aes128k128d(key, ctr_preload, aes_out);
+        bitwise_xor(aes_out, &pframe[payload_index], chain_buffer);
+
+        for (j=0; j<16;j++) pframe[payload_index++] = chain_buffer[j];
+    }
+
+    if (payload_remainder > 0)          /* If there is a short final block, then pad it,*/
+    {                                   /* encrypt it and copy the unpadded part back   */
+        construct_ctr_preload(
+                                ctr_preload,
+                                a4_exists,
+                                qc_exists,
+                                pframe,
+                                pn_vector,
+                                num_blocks+1,
+                                frtype // add for CONFIG_IEEE80211W, none 11w also can use
+                            );
+
+        for (j = 0; j < 16; j++) padded_buffer[j] = 0x00;
+        for (j = 0; j < payload_remainder; j++)
+        {
+            padded_buffer[j] = pframe[payload_index+j];
+        }
+        aes128k128d(key, ctr_preload, aes_out);
+        bitwise_xor(aes_out, padded_buffer, chain_buffer);
+        for (j=0; j<payload_remainder;j++) pframe[payload_index++] = chain_buffer[j];
+    }
+
+       //start to calculate the mic
+
+       _rtw_memcpy((void *)message, pframe, (hdrlen +plen+8)); //8 is for ext iv len
+
+
+       pn_vector[0]=pframe[hdrlen];
+       pn_vector[1]=pframe[hdrlen+1];
+       pn_vector[2]=pframe[hdrlen+4];
+       pn_vector[3]=pframe[hdrlen+5];
+       pn_vector[4]=pframe[hdrlen+6];
+       pn_vector[5]=pframe[hdrlen+7];
+
+
+
+       construct_mic_iv(
+                        mic_iv,
+                        qc_exists,
+                        a4_exists,
+                        message,
+                        plen-8,
+                        pn_vector,
+                        frtype // add for CONFIG_IEEE80211W, none 11w also can use
+                        );
+
+    construct_mic_header1(
+                            mic_header1,
+                            hdrlen,
+                            message,
+                            frtype // add for CONFIG_IEEE80211W, none 11w also can use
+                            );
+    construct_mic_header2(
+                            mic_header2,
+                            message,
+                            a4_exists,
+                            qc_exists
+                            );
+
+
+       payload_remainder = (plen-8) % 16;
+    num_blocks = (plen-8) / 16;
+
+    /* Find start of payload */
+    payload_index = (hdrlen + 8);
+
+    /* Calculate MIC */
+    aes128k128d(key, mic_iv, aes_out);
+    bitwise_xor(aes_out, mic_header1, chain_buffer);
+    aes128k128d(key, chain_buffer, aes_out);
+    bitwise_xor(aes_out, mic_header2, chain_buffer);
+    aes128k128d(key, chain_buffer, aes_out);
+
+       for (i = 0; i < num_blocks; i++)
+    {
+        bitwise_xor(aes_out, &message[payload_index], chain_buffer);
+
+        payload_index += 16;
+        aes128k128d(key, chain_buffer, aes_out);
+    }
+
+    /* Add on the final payload block if it needs padding */
+    if (payload_remainder > 0)
+    {
+        for (j = 0; j < 16; j++) padded_buffer[j] = 0x00;
+        for (j = 0; j < payload_remainder; j++)
+        {
+            padded_buffer[j] = message[payload_index++];
+        }
+        bitwise_xor(aes_out, padded_buffer, chain_buffer);
+        aes128k128d(key, chain_buffer, aes_out);
+
+    }
+
+    for (j = 0 ; j < 8; j++) mic[j] = aes_out[j];
+
+    /* Insert MIC into payload */
+    for (j = 0; j < 8; j++)
+       message[payload_index+j] = mic[j];
+
+       payload_index = hdrlen + 8;
+       for (i=0; i< num_blocks; i++)
+    {
+        construct_ctr_preload(
+                                ctr_preload,
+                                a4_exists,
+                                qc_exists,
+                                message,
+                                pn_vector,
+                                i+1,
+                                frtype); // add for CONFIG_IEEE80211W, none 11w also can use
+        aes128k128d(key, ctr_preload, aes_out);
+        bitwise_xor(aes_out, &message[payload_index], chain_buffer);
+        for (j=0; j<16;j++) message[payload_index++] = chain_buffer[j];
+    }
+
+    if (payload_remainder > 0)          /* If there is a short final block, then pad it,*/
+    {                                   /* encrypt it and copy the unpadded part back   */
+        construct_ctr_preload(
+                                ctr_preload,
+                                a4_exists,
+                                qc_exists,
+                                message,
+                                pn_vector,
+                                num_blocks+1,
+                                frtype); // add for CONFIG_IEEE80211W, none 11w also can use
+
+        for (j = 0; j < 16; j++) padded_buffer[j] = 0x00;
+        for (j = 0; j < payload_remainder; j++)
+        {
+            padded_buffer[j] = message[payload_index+j];
+        }
+        aes128k128d(key, ctr_preload, aes_out);
+        bitwise_xor(aes_out, padded_buffer, chain_buffer);
+        for (j=0; j<payload_remainder;j++) message[payload_index++] = chain_buffer[j];
+    }
+
+    /* Encrypt the MIC */
+    construct_ctr_preload(
+                        ctr_preload,
+                        a4_exists,
+                        qc_exists,
+                        message,
+                        pn_vector,
+                        0,
+                        frtype); // add for CONFIG_IEEE80211W, none 11w also can use
+
+    for (j = 0; j < 16; j++) padded_buffer[j] = 0x00;
+    for (j = 0; j < 8; j++)
+    {
+        padded_buffer[j] = message[j+hdrlen+8+plen-8];
+    }
+
+    aes128k128d(key, ctr_preload, aes_out);
+    bitwise_xor(aes_out, padded_buffer, chain_buffer);
+    for (j=0; j<8;j++) message[payload_index++] = chain_buffer[j];
+
+       //compare the mic
+       for(i=0;i<8;i++){
+               if(pframe[hdrlen+8+plen-8+i] != message[hdrlen+8+plen-8+i])
+               {
+                       RT_TRACE(_module_rtl871x_security_c_,_drv_err_,("aes_decipher:mic check error mic[%d]: pframe(%x) != message(%x) \n",
+                                               i,pframe[hdrlen+8+plen-8+i],message[hdrlen+8+plen-8+i]));
+                       DBG_871X("aes_decipher:mic check error mic[%d]: pframe(%x) != message(%x) \n",
+                                               i,pframe[hdrlen+8+plen-8+i],message[hdrlen+8+plen-8+i]);
+                       res = _FAIL;
+               }
+       }
+
+       if(res == _FAIL)
+       {
+               int gg=0;
+               for(gg=0; gg < 32; gg++)
+                       DBG_871X(" [%d]=%02x ", gg, pframe[gg]);
+               DBG_871X("error packet header \n");
+       }
+
+_func_exit_;
+       return res;
+}
+
+u32    rtw_aes_decrypt(_adapter *padapter, u8 *precvframe)
+{      // exclude ICV
+
+
+       /*static*/
+//     unsigned char   message[MAX_MSG_SIZE];
+
+
+       /* Intermediate Buffers */
+
+
+       sint            length;
+       u8      *pframe,*prwskey;       //, *payload,*iv
+       struct  sta_info                *stainfo;
+       struct  rx_pkt_attrib    *prxattrib = &((union recv_frame *)precvframe)->u.hdr.attrib;
+       struct  security_priv   *psecuritypriv=&padapter->securitypriv;
+//     struct  recv_priv               *precvpriv=&padapter->recvpriv;
+       u32     res=_SUCCESS;
+_func_enter_;
+       pframe=(unsigned char *)((union recv_frame*)precvframe)->u.hdr.rx_data;
+       //4 start to encrypt each fragment
+       if((prxattrib->encrypt==_AES_)){
+
+               stainfo=rtw_get_stainfo(&padapter->stapriv ,&prxattrib->ta[0] );
+               if (stainfo!=NULL){
+                       RT_TRACE(_module_rtl871x_security_c_,_drv_err_,("rtw_aes_decrypt: stainfo!=NULL!!!\n"));
+
+                       if(IS_MCAST(prxattrib->ra))
+                       {
+                               //in concurrent we should use sw descrypt in group key, so we remove this message
+                               //DBG_871X("rx bc/mc packets, to perform sw rtw_aes_decrypt\n");
+                               //prwskey = psecuritypriv->dot118021XGrpKey[psecuritypriv->dot118021XGrpKeyid].skey;
+                               if(psecuritypriv->binstallGrpkey==_FALSE)
+                               {
+                                       res=_FAIL;
+                                       DBG_8192C("%s:rx bc/mc packets,but didn't install group key!!!!!!!!!!\n",__FUNCTION__);
+                                       goto exit;
+                               }
+                               prwskey = psecuritypriv->dot118021XGrpKey[prxattrib->key_index].skey;
+
+                               if(psecuritypriv->dot118021XGrpKeyid != prxattrib->key_index)
+                               {
+                                       DBG_871X("not match packet_index=%d, install_index=%d \n"
+                                       , prxattrib->key_index, psecuritypriv->dot118021XGrpKeyid);
+                                       res=_FAIL;
+                                       goto exit;
+                               }
+                       }
+                       else
+                       {
+                               prwskey=&stainfo->dot118021x_UncstKey.skey[0];
+                       }
+
+                       length= ((union recv_frame *)precvframe)->u.hdr.len-prxattrib->hdrlen-prxattrib->iv_len;
+                       /*// add for CONFIG_IEEE80211W, debug
+                       if(0)
+                       printk("@@@@@@@@@@@@@@@@@@ length=%d, prxattrib->hdrlen=%d, prxattrib->pkt_len=%d \n"
+                       , length, prxattrib->hdrlen, prxattrib->pkt_len);
+                       if(0)
+                       {
+                               int no;
+                               //test print PSK
+                               printk("PSK key below:\n");
+                               for(no=0;no<16;no++)
+                                       printk(" %02x ", prwskey[no]);
+                               printk("\n");
+                       }
+                       if(0)
+                       {
+                               int no;
+                               //test print PSK
+                               printk("frame:\n");
+                               for(no=0;no<prxattrib->pkt_len;no++)
+                                       printk(" %02x ", pframe[no]);
+                               printk("\n");
+                       }*/
+
+                       res= aes_decipher(prwskey,prxattrib->hdrlen,pframe, length);
+               }
+               else{
+                       RT_TRACE(_module_rtl871x_security_c_,_drv_err_,("rtw_aes_encrypt: stainfo==NULL!!!\n"));
+                       res=_FAIL;
+               }
+
+       }
+_func_exit_;
+exit:
+       return res;
+}
+
+#ifdef CONFIG_IEEE80211W
+u32    rtw_BIP_verify(_adapter *padapter, u8 *precvframe)
+{
+       struct rx_pkt_attrib *pattrib = &((union recv_frame *)precvframe)->u.hdr.attrib;
+       u8 *pframe;
+       u8 *BIP_AAD, *p;
+       u32     res=_FAIL;
+       uint len, ori_len;
+       struct rtw_ieee80211_hdr *pwlanhdr;
+       u8 mic[16];
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       ori_len = pattrib->pkt_len-WLAN_HDR_A3_LEN+BIP_AAD_SIZE;
+       BIP_AAD = rtw_zmalloc(ori_len);
+
+       if(BIP_AAD == NULL)
+       {
+               DBG_871X("BIP AAD allocate fail\n");
+               return _FAIL;
+       }
+       //PKT start
+       pframe=(unsigned char *)((union recv_frame*)precvframe)->u.hdr.rx_data;
+       //mapping to wlan header
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+       //save the frame body + MME
+       _rtw_memcpy(BIP_AAD+BIP_AAD_SIZE, pframe+WLAN_HDR_A3_LEN, pattrib->pkt_len-WLAN_HDR_A3_LEN);
+       //find MME IE pointer
+       p = rtw_get_ie(BIP_AAD+BIP_AAD_SIZE, _MME_IE_, &len, pattrib->pkt_len-WLAN_HDR_A3_LEN);
+       //Baron
+       if(p)
+       {
+               u16 keyid=0;
+               u64 temp_ipn=0;
+               //save packet number
+               _rtw_memcpy(&temp_ipn, p+4, 6);
+               temp_ipn = le64_to_cpu(temp_ipn);
+               //BIP packet number should bigger than previous BIP packet
+               if(temp_ipn <= pmlmeext->mgnt_80211w_IPN_rx)
+               {
+                       DBG_871X("replay BIP packet\n");
+                       goto BIP_exit;
+               }
+               //copy key index
+               _rtw_memcpy(&keyid, p+2, 2);
+               keyid = le16_to_cpu(keyid);
+               if(keyid != padapter->securitypriv.dot11wBIPKeyid)
+               {
+                       DBG_871X("BIP key index error!\n");
+                       goto BIP_exit;
+               }
+               //clear the MIC field of MME to zero
+               _rtw_memset(p+2+len-8, 0, 8);
+
+               //conscruct AAD, copy frame control field
+               _rtw_memcpy(BIP_AAD, &pwlanhdr->frame_ctl, 2);
+               ClearRetry(BIP_AAD);
+               ClearPwrMgt(BIP_AAD);
+               ClearMData(BIP_AAD);
+               //conscruct AAD, copy address 1 to address 3
+               _rtw_memcpy(BIP_AAD+2, pwlanhdr->addr1, 18);
+
+               if(omac1_aes_128(padapter->securitypriv.dot11wBIPKey[padapter->securitypriv.dot11wBIPKeyid].skey
+                       , BIP_AAD, ori_len, mic))
+                       goto BIP_exit;
+
+               /*//management packet content
+               {
+                       int pp;
+                       DBG_871X("pkt: ");
+                       for(pp=0;pp< pattrib->pkt_len; pp++)
+                               printk(" %02x ", pframe[pp]);
+                       DBG_871X("\n");
+                       //BIP AAD + management frame body + MME(MIC is zero)
+                       DBG_871X("AAD+PKT: ");
+                       for(pp=0;pp< ori_len; pp++)
+                               DBG_871X(" %02x ", BIP_AAD[pp]);
+                       DBG_871X("\n");
+                       //show the MIC result
+                       DBG_871X("mic: ");
+                       for(pp=0;pp<16; pp++)
+                               DBG_871X(" %02x ", mic[pp]);
+                       DBG_871X("\n");
+               }
+               */
+               //MIC field should be last 8 bytes of packet (packet without FCS)
+               if(_rtw_memcmp(mic, pframe+pattrib->pkt_len-8, 8))
+               {
+                       pmlmeext->mgnt_80211w_IPN_rx = temp_ipn;
+                       res=_SUCCESS;
+               }
+               else
+                       DBG_871X("BIP MIC error!\n");
+
+       }
+       else
+               res = RTW_RX_HANDLED;
+BIP_exit:
+
+       rtw_mfree(BIP_AAD, ori_len);
+       return res;
+}
+#endif //CONFIG_IEEE80211W
+
+#ifndef PLATFORM_FREEBSD
+/* compress 512-bits */
+static int sha256_compress(struct sha256_state *md, unsigned char *buf)
+{
+       u32 S[8], W[64], t0, t1;
+       u32 t;
+       int i;
+
+       /* copy state into S */
+       for (i = 0; i < 8; i++) {
+               S[i] = md->state[i];
+       }
+
+       /* copy the state into 512-bits into W[0..15] */
+       for (i = 0; i < 16; i++)
+               W[i] = WPA_GET_BE32(buf + (4 * i));
+
+       /* fill W[16..63] */
+       for (i = 16; i < 64; i++) {
+               W[i] = Gamma1(W[i - 2]) + W[i - 7] + Gamma0(W[i - 15]) +
+                       W[i - 16];
+       }
+
+       /* Compress */
+#define RND(a,b,c,d,e,f,g,h,i)                          \
+       t0 = h + Sigma1(e) + Ch(e, f, g) + K[i] + W[i]; \
+       t1 = Sigma0(a) + Maj(a, b, c);                  \
+       d += t0;                                        \
+       h  = t0 + t1;
+
+       for (i = 0; i < 64; ++i) {
+               RND(S[0], S[1], S[2], S[3], S[4], S[5], S[6], S[7], i);
+               t = S[7]; S[7] = S[6]; S[6] = S[5]; S[5] = S[4];
+               S[4] = S[3]; S[3] = S[2]; S[2] = S[1]; S[1] = S[0]; S[0] = t;
+       }
+
+       /* feedback */
+       for (i = 0; i < 8; i++) {
+               md->state[i] = md->state[i] + S[i];
+       }
+       return 0;
+}
+
+/* Initialize the hash state */
+static void sha256_init(struct sha256_state *md)
+{
+       md->curlen = 0;
+       md->length = 0;
+       md->state[0] = 0x6A09E667UL;
+       md->state[1] = 0xBB67AE85UL;
+       md->state[2] = 0x3C6EF372UL;
+       md->state[3] = 0xA54FF53AUL;
+       md->state[4] = 0x510E527FUL;
+       md->state[5] = 0x9B05688CUL;
+       md->state[6] = 0x1F83D9ABUL;
+       md->state[7] = 0x5BE0CD19UL;
+}
+
+/**
+   Process a block of memory though the hash
+   @param md     The hash state
+   @param in     The data to hash
+   @param inlen  The length of the data (octets)
+   @return CRYPT_OK if successful
+*/
+static int sha256_process(struct sha256_state *md, unsigned char *in,
+                         unsigned long inlen)
+{
+       unsigned long n;
+#define block_size 64
+
+       if (md->curlen > sizeof(md->buf))
+               return -1;
+
+       while (inlen > 0) {
+               if (md->curlen == 0 && inlen >= block_size) {
+                       if (sha256_compress(md, (unsigned char *) in) < 0)
+                               return -1;
+                       md->length += block_size * 8;
+                       in += block_size;
+                       inlen -= block_size;
+               } else {
+                       n = MIN(inlen, (block_size - md->curlen));
+                       _rtw_memcpy(md->buf + md->curlen, in, n);
+                       md->curlen += n;
+                       in += n;
+                       inlen -= n;
+                       if (md->curlen == block_size) {
+                               if (sha256_compress(md, md->buf) < 0)
+                                       return -1;
+                               md->length += 8 * block_size;
+                               md->curlen = 0;
+                       }
+               }
+       }
+
+       return 0;
+}
+
+
+/**
+   Terminate the hash to get the digest
+   @param md  The hash state
+   @param out [out] The destination of the hash (32 bytes)
+   @return CRYPT_OK if successful
+*/
+static int sha256_done(struct sha256_state *md, unsigned char *out)
+{
+       int i;
+
+       if (md->curlen >= sizeof(md->buf))
+               return -1;
+
+       /* increase the length of the message */
+       md->length += md->curlen * 8;
+
+       /* append the '1' bit */
+       md->buf[md->curlen++] = (unsigned char) 0x80;
+
+       /* if the length is currently above 56 bytes we append zeros
+        * then compress.  Then we can fall back to padding zeros and length
+        * encoding like normal.
+        */
+       if (md->curlen > 56) {
+               while (md->curlen < 64) {
+                       md->buf[md->curlen++] = (unsigned char) 0;
+               }
+               sha256_compress(md, md->buf);
+               md->curlen = 0;
+       }
+
+       /* pad upto 56 bytes of zeroes */
+       while (md->curlen < 56) {
+               md->buf[md->curlen++] = (unsigned char) 0;
+       }
+
+       /* store length */
+       WPA_PUT_BE64(md->buf + 56, md->length);
+       sha256_compress(md, md->buf);
+
+       /* copy output */
+       for (i = 0; i < 8; i++)
+               WPA_PUT_BE32(out + (4 * i), md->state[i]);
+
+       return 0;
+}
+
+/**
+ * sha256_vector - SHA256 hash for data vector
+ * @num_elem: Number of elements in the data vector
+ * @addr: Pointers to the data areas
+ * @len: Lengths of the data blocks
+ * @mac: Buffer for the hash
+ * Returns: 0 on success, -1 of failure
+ */
+static int sha256_vector(size_t num_elem, u8 *addr[], size_t *len,
+                 u8 *mac)
+{
+       struct sha256_state ctx;
+       size_t i;
+
+       sha256_init(&ctx);
+       for (i = 0; i < num_elem; i++)
+               if (sha256_process(&ctx, addr[i], len[i]))
+                       return -1;
+       if (sha256_done(&ctx, mac))
+               return -1;
+       return 0;
+}
+
+static u8 os_strlen(const char *s)
+{
+       const char *p = s;
+       while (*p)
+               p++;
+       return p - s;
+}
+
+static int os_memcmp(void *s1, void *s2, u8 n)
+{
+       unsigned char *p1 = s1, *p2 = s2;
+
+       if (n == 0)
+               return 0;
+
+       while (*p1 == *p2) {
+               p1++;
+               p2++;
+               n--;
+               if (n == 0)
+                       return 0;
+       }
+
+       return *p1 - *p2;
+}
+
+/**
+ * hmac_sha256_vector - HMAC-SHA256 over data vector (RFC 2104)
+ * @key: Key for HMAC operations
+ * @key_len: Length of the key in bytes
+ * @num_elem: Number of elements in the data vector
+ * @addr: Pointers to the data areas
+ * @len: Lengths of the data blocks
+ * @mac: Buffer for the hash (32 bytes)
+ */
+static void hmac_sha256_vector(u8 *key, size_t key_len, size_t num_elem,
+                       u8 *addr[], size_t *len, u8 *mac)
+{
+       unsigned char k_pad[64]; /* padding - key XORd with ipad/opad */
+       unsigned char tk[32];
+       u8 *_addr[6];
+       size_t _len[6], i;
+
+       if (num_elem > 5) {
+               /*
+                * Fixed limit on the number of fragments to avoid having to
+                * allocate memory (which could fail).
+                */
+               return;
+       }
+
+        /* if key is longer than 64 bytes reset it to key = SHA256(key) */
+        if (key_len > 64) {
+               sha256_vector(1, &key, &key_len, tk);
+               key = tk;
+               key_len = 32;
+        }
+
+       /* the HMAC_SHA256 transform looks like:
+        *
+        * SHA256(K XOR opad, SHA256(K XOR ipad, text))
+        *
+        * where K is an n byte key
+        * ipad is the byte 0x36 repeated 64 times
+        * opad is the byte 0x5c repeated 64 times
+        * and text is the data being protected */
+
+       /* start out by storing key in ipad */
+       _rtw_memset(k_pad, 0, sizeof(k_pad));
+       _rtw_memcpy(k_pad, key, key_len);
+       /* XOR key with ipad values */
+       for (i = 0; i < 64; i++)
+               k_pad[i] ^= 0x36;
+
+       /* perform inner SHA256 */
+       _addr[0] = k_pad;
+       _len[0] = 64;
+       for (i = 0; i < num_elem; i++) {
+               _addr[i + 1] = addr[i];
+               _len[i + 1] = len[i];
+       }
+       sha256_vector(1 + num_elem, _addr, _len, mac);
+
+       _rtw_memset(k_pad, 0, sizeof(k_pad));
+       _rtw_memcpy(k_pad, key, key_len);
+       /* XOR key with opad values */
+       for (i = 0; i < 64; i++)
+               k_pad[i] ^= 0x5c;
+
+       /* perform outer SHA256 */
+       _addr[0] = k_pad;
+       _len[0] = 64;
+       _addr[1] = mac;
+       _len[1] = 32;
+       sha256_vector(2, _addr, _len, mac);
+}
+#endif //PLATFORM_FREEBSD
+/**
+ * sha256_prf - SHA256-based Pseudo-Random Function (IEEE 802.11r, 8.5.1.5.2)
+ * @key: Key for PRF
+ * @key_len: Length of the key in bytes
+ * @label: A unique label for each purpose of the PRF
+ * @data: Extra data to bind into the key
+ * @data_len: Length of the data
+ * @buf: Buffer for the generated pseudo-random key
+ * @buf_len: Number of bytes of key to generate
+ *
+ * This function is used to derive new, cryptographically separate keys from a
+ * given key.
+ */
+#ifndef PLATFORM_FREEBSD //Baron
+static void sha256_prf(u8 *key, size_t key_len, char *label,
+               u8 *data, size_t data_len, u8 *buf, size_t buf_len)
+{
+       u16 counter = 1;
+       size_t pos, plen;
+       u8 hash[SHA256_MAC_LEN];
+       u8 *addr[4];
+       size_t len[4];
+       u8 counter_le[2], length_le[2];
+
+       addr[0] = counter_le;
+       len[0] = 2;
+       addr[1] = (u8 *) label;
+       len[1] = os_strlen(label);
+       addr[2] = data;
+       len[2] = data_len;
+       addr[3] = length_le;
+       len[3] = sizeof(length_le);
+
+       WPA_PUT_LE16(length_le, buf_len * 8);
+       pos = 0;
+       while (pos < buf_len) {
+               plen = buf_len - pos;
+               WPA_PUT_LE16(counter_le, counter);
+               if (plen >= SHA256_MAC_LEN) {
+                       hmac_sha256_vector(key, key_len, 4, addr, len,
+                                          &buf[pos]);
+                       pos += SHA256_MAC_LEN;
+               } else {
+                       hmac_sha256_vector(key, key_len, 4, addr, len, hash);
+                       _rtw_memcpy(&buf[pos], hash, plen);
+                       break;
+               }
+               counter++;
+       }
+}
+#endif //PLATFORM_FREEBSD Baron
+
+/* AES tables*/
+const u32 Te0[256] = {
+    0xc66363a5U, 0xf87c7c84U, 0xee777799U, 0xf67b7b8dU,
+    0xfff2f20dU, 0xd66b6bbdU, 0xde6f6fb1U, 0x91c5c554U,
+    0x60303050U, 0x02010103U, 0xce6767a9U, 0x562b2b7dU,
+    0xe7fefe19U, 0xb5d7d762U, 0x4dababe6U, 0xec76769aU,
+    0x8fcaca45U, 0x1f82829dU, 0x89c9c940U, 0xfa7d7d87U,
+    0xeffafa15U, 0xb25959ebU, 0x8e4747c9U, 0xfbf0f00bU,
+    0x41adadecU, 0xb3d4d467U, 0x5fa2a2fdU, 0x45afafeaU,
+    0x239c9cbfU, 0x53a4a4f7U, 0xe4727296U, 0x9bc0c05bU,
+    0x75b7b7c2U, 0xe1fdfd1cU, 0x3d9393aeU, 0x4c26266aU,
+    0x6c36365aU, 0x7e3f3f41U, 0xf5f7f702U, 0x83cccc4fU,
+    0x6834345cU, 0x51a5a5f4U, 0xd1e5e534U, 0xf9f1f108U,
+    0xe2717193U, 0xabd8d873U, 0x62313153U, 0x2a15153fU,
+    0x0804040cU, 0x95c7c752U, 0x46232365U, 0x9dc3c35eU,
+    0x30181828U, 0x379696a1U, 0x0a05050fU, 0x2f9a9ab5U,
+    0x0e070709U, 0x24121236U, 0x1b80809bU, 0xdfe2e23dU,
+    0xcdebeb26U, 0x4e272769U, 0x7fb2b2cdU, 0xea75759fU,
+    0x1209091bU, 0x1d83839eU, 0x582c2c74U, 0x341a1a2eU,
+    0x361b1b2dU, 0xdc6e6eb2U, 0xb45a5aeeU, 0x5ba0a0fbU,
+    0xa45252f6U, 0x763b3b4dU, 0xb7d6d661U, 0x7db3b3ceU,
+    0x5229297bU, 0xdde3e33eU, 0x5e2f2f71U, 0x13848497U,
+    0xa65353f5U, 0xb9d1d168U, 0x00000000U, 0xc1eded2cU,
+    0x40202060U, 0xe3fcfc1fU, 0x79b1b1c8U, 0xb65b5bedU,
+    0xd46a6abeU, 0x8dcbcb46U, 0x67bebed9U, 0x7239394bU,
+    0x944a4adeU, 0x984c4cd4U, 0xb05858e8U, 0x85cfcf4aU,
+    0xbbd0d06bU, 0xc5efef2aU, 0x4faaaae5U, 0xedfbfb16U,
+    0x864343c5U, 0x9a4d4dd7U, 0x66333355U, 0x11858594U,
+    0x8a4545cfU, 0xe9f9f910U, 0x04020206U, 0xfe7f7f81U,
+    0xa05050f0U, 0x783c3c44U, 0x259f9fbaU, 0x4ba8a8e3U,
+    0xa25151f3U, 0x5da3a3feU, 0x804040c0U, 0x058f8f8aU,
+    0x3f9292adU, 0x219d9dbcU, 0x70383848U, 0xf1f5f504U,
+    0x63bcbcdfU, 0x77b6b6c1U, 0xafdada75U, 0x42212163U,
+    0x20101030U, 0xe5ffff1aU, 0xfdf3f30eU, 0xbfd2d26dU,
+    0x81cdcd4cU, 0x180c0c14U, 0x26131335U, 0xc3ecec2fU,
+    0xbe5f5fe1U, 0x359797a2U, 0x884444ccU, 0x2e171739U,
+    0x93c4c457U, 0x55a7a7f2U, 0xfc7e7e82U, 0x7a3d3d47U,
+    0xc86464acU, 0xba5d5de7U, 0x3219192bU, 0xe6737395U,
+    0xc06060a0U, 0x19818198U, 0x9e4f4fd1U, 0xa3dcdc7fU,
+    0x44222266U, 0x542a2a7eU, 0x3b9090abU, 0x0b888883U,
+    0x8c4646caU, 0xc7eeee29U, 0x6bb8b8d3U, 0x2814143cU,
+    0xa7dede79U, 0xbc5e5ee2U, 0x160b0b1dU, 0xaddbdb76U,
+    0xdbe0e03bU, 0x64323256U, 0x743a3a4eU, 0x140a0a1eU,
+    0x924949dbU, 0x0c06060aU, 0x4824246cU, 0xb85c5ce4U,
+    0x9fc2c25dU, 0xbdd3d36eU, 0x43acacefU, 0xc46262a6U,
+    0x399191a8U, 0x319595a4U, 0xd3e4e437U, 0xf279798bU,
+    0xd5e7e732U, 0x8bc8c843U, 0x6e373759U, 0xda6d6db7U,
+    0x018d8d8cU, 0xb1d5d564U, 0x9c4e4ed2U, 0x49a9a9e0U,
+    0xd86c6cb4U, 0xac5656faU, 0xf3f4f407U, 0xcfeaea25U,
+    0xca6565afU, 0xf47a7a8eU, 0x47aeaee9U, 0x10080818U,
+    0x6fbabad5U, 0xf0787888U, 0x4a25256fU, 0x5c2e2e72U,
+    0x381c1c24U, 0x57a6a6f1U, 0x73b4b4c7U, 0x97c6c651U,
+    0xcbe8e823U, 0xa1dddd7cU, 0xe874749cU, 0x3e1f1f21U,
+    0x964b4bddU, 0x61bdbddcU, 0x0d8b8b86U, 0x0f8a8a85U,
+    0xe0707090U, 0x7c3e3e42U, 0x71b5b5c4U, 0xcc6666aaU,
+    0x904848d8U, 0x06030305U, 0xf7f6f601U, 0x1c0e0e12U,
+    0xc26161a3U, 0x6a35355fU, 0xae5757f9U, 0x69b9b9d0U,
+    0x17868691U, 0x99c1c158U, 0x3a1d1d27U, 0x279e9eb9U,
+    0xd9e1e138U, 0xebf8f813U, 0x2b9898b3U, 0x22111133U,
+    0xd26969bbU, 0xa9d9d970U, 0x078e8e89U, 0x339494a7U,
+    0x2d9b9bb6U, 0x3c1e1e22U, 0x15878792U, 0xc9e9e920U,
+    0x87cece49U, 0xaa5555ffU, 0x50282878U, 0xa5dfdf7aU,
+    0x038c8c8fU, 0x59a1a1f8U, 0x09898980U, 0x1a0d0d17U,
+    0x65bfbfdaU, 0xd7e6e631U, 0x844242c6U, 0xd06868b8U,
+    0x824141c3U, 0x299999b0U, 0x5a2d2d77U, 0x1e0f0f11U,
+    0x7bb0b0cbU, 0xa85454fcU, 0x6dbbbbd6U, 0x2c16163aU,
+};
+const u32 Td0[256] = {
+    0x51f4a750U, 0x7e416553U, 0x1a17a4c3U, 0x3a275e96U,
+    0x3bab6bcbU, 0x1f9d45f1U, 0xacfa58abU, 0x4be30393U,
+    0x2030fa55U, 0xad766df6U, 0x88cc7691U, 0xf5024c25U,
+    0x4fe5d7fcU, 0xc52acbd7U, 0x26354480U, 0xb562a38fU,
+    0xdeb15a49U, 0x25ba1b67U, 0x45ea0e98U, 0x5dfec0e1U,
+    0xc32f7502U, 0x814cf012U, 0x8d4697a3U, 0x6bd3f9c6U,
+    0x038f5fe7U, 0x15929c95U, 0xbf6d7aebU, 0x955259daU,
+    0xd4be832dU, 0x587421d3U, 0x49e06929U, 0x8ec9c844U,
+    0x75c2896aU, 0xf48e7978U, 0x99583e6bU, 0x27b971ddU,
+    0xbee14fb6U, 0xf088ad17U, 0xc920ac66U, 0x7dce3ab4U,
+    0x63df4a18U, 0xe51a3182U, 0x97513360U, 0x62537f45U,
+    0xb16477e0U, 0xbb6bae84U, 0xfe81a01cU, 0xf9082b94U,
+    0x70486858U, 0x8f45fd19U, 0x94de6c87U, 0x527bf8b7U,
+    0xab73d323U, 0x724b02e2U, 0xe31f8f57U, 0x6655ab2aU,
+    0xb2eb2807U, 0x2fb5c203U, 0x86c57b9aU, 0xd33708a5U,
+    0x302887f2U, 0x23bfa5b2U, 0x02036abaU, 0xed16825cU,
+    0x8acf1c2bU, 0xa779b492U, 0xf307f2f0U, 0x4e69e2a1U,
+    0x65daf4cdU, 0x0605bed5U, 0xd134621fU, 0xc4a6fe8aU,
+    0x342e539dU, 0xa2f355a0U, 0x058ae132U, 0xa4f6eb75U,
+    0x0b83ec39U, 0x4060efaaU, 0x5e719f06U, 0xbd6e1051U,
+    0x3e218af9U, 0x96dd063dU, 0xdd3e05aeU, 0x4de6bd46U,
+    0x91548db5U, 0x71c45d05U, 0x0406d46fU, 0x605015ffU,
+    0x1998fb24U, 0xd6bde997U, 0x894043ccU, 0x67d99e77U,
+    0xb0e842bdU, 0x07898b88U, 0xe7195b38U, 0x79c8eedbU,
+    0xa17c0a47U, 0x7c420fe9U, 0xf8841ec9U, 0x00000000U,
+    0x09808683U, 0x322bed48U, 0x1e1170acU, 0x6c5a724eU,
+    0xfd0efffbU, 0x0f853856U, 0x3daed51eU, 0x362d3927U,
+    0x0a0fd964U, 0x685ca621U, 0x9b5b54d1U, 0x24362e3aU,
+    0x0c0a67b1U, 0x9357e70fU, 0xb4ee96d2U, 0x1b9b919eU,
+    0x80c0c54fU, 0x61dc20a2U, 0x5a774b69U, 0x1c121a16U,
+    0xe293ba0aU, 0xc0a02ae5U, 0x3c22e043U, 0x121b171dU,
+    0x0e090d0bU, 0xf28bc7adU, 0x2db6a8b9U, 0x141ea9c8U,
+    0x57f11985U, 0xaf75074cU, 0xee99ddbbU, 0xa37f60fdU,
+    0xf701269fU, 0x5c72f5bcU, 0x44663bc5U, 0x5bfb7e34U,
+    0x8b432976U, 0xcb23c6dcU, 0xb6edfc68U, 0xb8e4f163U,
+    0xd731dccaU, 0x42638510U, 0x13972240U, 0x84c61120U,
+    0x854a247dU, 0xd2bb3df8U, 0xaef93211U, 0xc729a16dU,
+    0x1d9e2f4bU, 0xdcb230f3U, 0x0d8652ecU, 0x77c1e3d0U,
+    0x2bb3166cU, 0xa970b999U, 0x119448faU, 0x47e96422U,
+    0xa8fc8cc4U, 0xa0f03f1aU, 0x567d2cd8U, 0x223390efU,
+    0x87494ec7U, 0xd938d1c1U, 0x8ccaa2feU, 0x98d40b36U,
+    0xa6f581cfU, 0xa57ade28U, 0xdab78e26U, 0x3fadbfa4U,
+    0x2c3a9de4U, 0x5078920dU, 0x6a5fcc9bU, 0x547e4662U,
+    0xf68d13c2U, 0x90d8b8e8U, 0x2e39f75eU, 0x82c3aff5U,
+    0x9f5d80beU, 0x69d0937cU, 0x6fd52da9U, 0xcf2512b3U,
+    0xc8ac993bU, 0x10187da7U, 0xe89c636eU, 0xdb3bbb7bU,
+    0xcd267809U, 0x6e5918f4U, 0xec9ab701U, 0x834f9aa8U,
+    0xe6956e65U, 0xaaffe67eU, 0x21bccf08U, 0xef15e8e6U,
+    0xbae79bd9U, 0x4a6f36ceU, 0xea9f09d4U, 0x29b07cd6U,
+    0x31a4b2afU, 0x2a3f2331U, 0xc6a59430U, 0x35a266c0U,
+    0x744ebc37U, 0xfc82caa6U, 0xe090d0b0U, 0x33a7d815U,
+    0xf104984aU, 0x41ecdaf7U, 0x7fcd500eU, 0x1791f62fU,
+    0x764dd68dU, 0x43efb04dU, 0xccaa4d54U, 0xe49604dfU,
+    0x9ed1b5e3U, 0x4c6a881bU, 0xc12c1fb8U, 0x4665517fU,
+    0x9d5eea04U, 0x018c355dU, 0xfa877473U, 0xfb0b412eU,
+    0xb3671d5aU, 0x92dbd252U, 0xe9105633U, 0x6dd64713U,
+    0x9ad7618cU, 0x37a10c7aU, 0x59f8148eU, 0xeb133c89U,
+    0xcea927eeU, 0xb761c935U, 0xe11ce5edU, 0x7a47b13cU,
+    0x9cd2df59U, 0x55f2733fU, 0x1814ce79U, 0x73c737bfU,
+    0x53f7cdeaU, 0x5ffdaa5bU, 0xdf3d6f14U, 0x7844db86U,
+    0xcaaff381U, 0xb968c43eU, 0x3824342cU, 0xc2a3405fU,
+    0x161dc372U, 0xbce2250cU, 0x283c498bU, 0xff0d9541U,
+    0x39a80171U, 0x080cb3deU, 0xd8b4e49cU, 0x6456c190U,
+    0x7bcb8461U, 0xd532b670U, 0x486c5c74U, 0xd0b85742U,
+};
+const u8 Td4s[256] = {
+    0x52U, 0x09U, 0x6aU, 0xd5U, 0x30U, 0x36U, 0xa5U, 0x38U,
+    0xbfU, 0x40U, 0xa3U, 0x9eU, 0x81U, 0xf3U, 0xd7U, 0xfbU,
+    0x7cU, 0xe3U, 0x39U, 0x82U, 0x9bU, 0x2fU, 0xffU, 0x87U,
+    0x34U, 0x8eU, 0x43U, 0x44U, 0xc4U, 0xdeU, 0xe9U, 0xcbU,
+    0x54U, 0x7bU, 0x94U, 0x32U, 0xa6U, 0xc2U, 0x23U, 0x3dU,
+    0xeeU, 0x4cU, 0x95U, 0x0bU, 0x42U, 0xfaU, 0xc3U, 0x4eU,
+    0x08U, 0x2eU, 0xa1U, 0x66U, 0x28U, 0xd9U, 0x24U, 0xb2U,
+    0x76U, 0x5bU, 0xa2U, 0x49U, 0x6dU, 0x8bU, 0xd1U, 0x25U,
+    0x72U, 0xf8U, 0xf6U, 0x64U, 0x86U, 0x68U, 0x98U, 0x16U,
+    0xd4U, 0xa4U, 0x5cU, 0xccU, 0x5dU, 0x65U, 0xb6U, 0x92U,
+    0x6cU, 0x70U, 0x48U, 0x50U, 0xfdU, 0xedU, 0xb9U, 0xdaU,
+    0x5eU, 0x15U, 0x46U, 0x57U, 0xa7U, 0x8dU, 0x9dU, 0x84U,
+    0x90U, 0xd8U, 0xabU, 0x00U, 0x8cU, 0xbcU, 0xd3U, 0x0aU,
+    0xf7U, 0xe4U, 0x58U, 0x05U, 0xb8U, 0xb3U, 0x45U, 0x06U,
+    0xd0U, 0x2cU, 0x1eU, 0x8fU, 0xcaU, 0x3fU, 0x0fU, 0x02U,
+    0xc1U, 0xafU, 0xbdU, 0x03U, 0x01U, 0x13U, 0x8aU, 0x6bU,
+    0x3aU, 0x91U, 0x11U, 0x41U, 0x4fU, 0x67U, 0xdcU, 0xeaU,
+    0x97U, 0xf2U, 0xcfU, 0xceU, 0xf0U, 0xb4U, 0xe6U, 0x73U,
+    0x96U, 0xacU, 0x74U, 0x22U, 0xe7U, 0xadU, 0x35U, 0x85U,
+    0xe2U, 0xf9U, 0x37U, 0xe8U, 0x1cU, 0x75U, 0xdfU, 0x6eU,
+    0x47U, 0xf1U, 0x1aU, 0x71U, 0x1dU, 0x29U, 0xc5U, 0x89U,
+    0x6fU, 0xb7U, 0x62U, 0x0eU, 0xaaU, 0x18U, 0xbeU, 0x1bU,
+    0xfcU, 0x56U, 0x3eU, 0x4bU, 0xc6U, 0xd2U, 0x79U, 0x20U,
+    0x9aU, 0xdbU, 0xc0U, 0xfeU, 0x78U, 0xcdU, 0x5aU, 0xf4U,
+    0x1fU, 0xddU, 0xa8U, 0x33U, 0x88U, 0x07U, 0xc7U, 0x31U,
+    0xb1U, 0x12U, 0x10U, 0x59U, 0x27U, 0x80U, 0xecU, 0x5fU,
+    0x60U, 0x51U, 0x7fU, 0xa9U, 0x19U, 0xb5U, 0x4aU, 0x0dU,
+    0x2dU, 0xe5U, 0x7aU, 0x9fU, 0x93U, 0xc9U, 0x9cU, 0xefU,
+    0xa0U, 0xe0U, 0x3bU, 0x4dU, 0xaeU, 0x2aU, 0xf5U, 0xb0U,
+    0xc8U, 0xebU, 0xbbU, 0x3cU, 0x83U, 0x53U, 0x99U, 0x61U,
+    0x17U, 0x2bU, 0x04U, 0x7eU, 0xbaU, 0x77U, 0xd6U, 0x26U,
+    0xe1U, 0x69U, 0x14U, 0x63U, 0x55U, 0x21U, 0x0cU, 0x7dU,
+};
+const u8 rcons[] = {
+       0x01, 0x02, 0x04, 0x08, 0x10, 0x20, 0x40, 0x80, 0x1B, 0x36
+       /* for 128-bit blocks, Rijndael never uses more than 10 rcon values */
+};
+
+/**
+ * Expand the cipher key into the encryption key schedule.
+ *
+ * @return     the number of rounds for the given cipher key size.
+ */
+#ifndef PLATFORM_FREEBSD //Baron
+static void rijndaelKeySetupEnc(u32 rk[/*44*/], const u8 cipherKey[])
+{
+       int i;
+       u32 temp;
+
+       rk[0] = GETU32(cipherKey     );
+       rk[1] = GETU32(cipherKey +  4);
+       rk[2] = GETU32(cipherKey +  8);
+       rk[3] = GETU32(cipherKey + 12);
+       for (i = 0; i < 10; i++) {
+               temp  = rk[3];
+               rk[4] = rk[0] ^
+                       TE421(temp) ^ TE432(temp) ^ TE443(temp) ^ TE414(temp) ^
+                       RCON(i);
+               rk[5] = rk[1] ^ rk[4];
+               rk[6] = rk[2] ^ rk[5];
+               rk[7] = rk[3] ^ rk[6];
+               rk += 4;
+       }
+}
+
+static void rijndaelEncrypt(u32 rk[/*44*/], u8 pt[16], u8 ct[16])
+{
+       u32 s0, s1, s2, s3, t0, t1, t2, t3;
+       int Nr = 10;
+#ifndef FULL_UNROLL
+       int r;
+#endif /* ?FULL_UNROLL */
+
+       /*
+        * map byte array block to cipher state
+        * and add initial round key:
+        */
+       s0 = GETU32(pt     ) ^ rk[0];
+       s1 = GETU32(pt +  4) ^ rk[1];
+       s2 = GETU32(pt +  8) ^ rk[2];
+       s3 = GETU32(pt + 12) ^ rk[3];
+
+#define ROUND(i,d,s) \
+d##0 = TE0(s##0) ^ TE1(s##1) ^ TE2(s##2) ^ TE3(s##3) ^ rk[4 * i]; \
+d##1 = TE0(s##1) ^ TE1(s##2) ^ TE2(s##3) ^ TE3(s##0) ^ rk[4 * i + 1]; \
+d##2 = TE0(s##2) ^ TE1(s##3) ^ TE2(s##0) ^ TE3(s##1) ^ rk[4 * i + 2]; \
+d##3 = TE0(s##3) ^ TE1(s##0) ^ TE2(s##1) ^ TE3(s##2) ^ rk[4 * i + 3]
+
+#ifdef FULL_UNROLL
+
+       ROUND(1,t,s);
+       ROUND(2,s,t);
+       ROUND(3,t,s);
+       ROUND(4,s,t);
+       ROUND(5,t,s);
+       ROUND(6,s,t);
+       ROUND(7,t,s);
+       ROUND(8,s,t);
+       ROUND(9,t,s);
+
+       rk += Nr << 2;
+
+#else  /* !FULL_UNROLL */
+
+       /* Nr - 1 full rounds: */
+       r = Nr >> 1;
+       for (;;) {
+               ROUND(1,t,s);
+               rk += 8;
+               if (--r == 0)
+                       break;
+               ROUND(0,s,t);
+       }
+
+#endif /* ?FULL_UNROLL */
+
+#undef ROUND
+
+       /*
+        * apply last round and
+        * map cipher state to byte array block:
+        */
+       s0 = TE41(t0) ^ TE42(t1) ^ TE43(t2) ^ TE44(t3) ^ rk[0];
+       PUTU32(ct     , s0);
+       s1 = TE41(t1) ^ TE42(t2) ^ TE43(t3) ^ TE44(t0) ^ rk[1];
+       PUTU32(ct +  4, s1);
+       s2 = TE41(t2) ^ TE42(t3) ^ TE43(t0) ^ TE44(t1) ^ rk[2];
+       PUTU32(ct +  8, s2);
+       s3 = TE41(t3) ^ TE42(t0) ^ TE43(t1) ^ TE44(t2) ^ rk[3];
+       PUTU32(ct + 12, s3);
+}
+
+static void * aes_encrypt_init(u8 *key, size_t len)
+{
+       u32 *rk;
+       if (len != 16)
+               return NULL;
+       rk = (u32*)rtw_malloc(AES_PRIV_SIZE);
+       if (rk == NULL)
+               return NULL;
+       rijndaelKeySetupEnc(rk, key);
+       return rk;
+}
+
+static void aes_128_encrypt(void *ctx, u8 *plain, u8 *crypt)
+{
+       rijndaelEncrypt(ctx, plain, crypt);
+}
+
+
+static void gf_mulx(u8 *pad)
+{
+       int i, carry;
+
+       carry = pad[0] & 0x80;
+       for (i = 0; i < AES_BLOCK_SIZE - 1; i++)
+               pad[i] = (pad[i] << 1) | (pad[i + 1] >> 7);
+       pad[AES_BLOCK_SIZE - 1] <<= 1;
+       if (carry)
+               pad[AES_BLOCK_SIZE - 1] ^= 0x87;
+}
+
+static void aes_encrypt_deinit(void *ctx)
+{
+       _rtw_memset(ctx, 0, AES_PRIV_SIZE);
+       rtw_mfree(ctx, AES_PRIV_SIZE);
+}
+
+
+/**
+ * omac1_aes_128_vector - One-Key CBC MAC (OMAC1) hash with AES-128
+ * @key: 128-bit key for the hash operation
+ * @num_elem: Number of elements in the data vector
+ * @addr: Pointers to the data areas
+ * @len: Lengths of the data blocks
+ * @mac: Buffer for MAC (128 bits, i.e., 16 bytes)
+ * Returns: 0 on success, -1 on failure
+ *
+ * This is a mode for using block cipher (AES in this case) for authentication.
+ * OMAC1 was standardized with the name CMAC by NIST in a Special Publication
+ * (SP) 800-38B.
+ */
+static int omac1_aes_128_vector(u8 *key, size_t num_elem,
+                                                        u8 *addr[], size_t *len, u8 *mac)
+{
+       void *ctx;
+       u8 cbc[AES_BLOCK_SIZE], pad[AES_BLOCK_SIZE];
+       u8 *pos, *end;
+       size_t i, e, left, total_len;
+
+       ctx = aes_encrypt_init(key, 16);
+       if (ctx == NULL)
+               return -1;
+       _rtw_memset(cbc, 0, AES_BLOCK_SIZE);
+
+       total_len = 0;
+       for (e = 0; e < num_elem; e++)
+               total_len += len[e];
+       left = total_len;
+
+       e = 0;
+       pos = addr[0];
+       end = pos + len[0];
+
+       while (left >= AES_BLOCK_SIZE) {
+               for (i = 0; i < AES_BLOCK_SIZE; i++) {
+                       cbc[i] ^= *pos++;
+                       if (pos >= end) {
+                               e++;
+                               pos = addr[e];
+                               end = pos + len[e];
+                       }
+               }
+               if (left > AES_BLOCK_SIZE)
+                       aes_128_encrypt(ctx, cbc, cbc);
+               left -= AES_BLOCK_SIZE;
+       }
+
+       _rtw_memset(pad, 0, AES_BLOCK_SIZE);
+       aes_128_encrypt(ctx, pad, pad);
+       gf_mulx(pad);
+
+       if (left || total_len == 0) {
+               for (i = 0; i < left; i++) {
+                       cbc[i] ^= *pos++;
+                       if (pos >= end) {
+                               e++;
+                               pos = addr[e];
+                               end = pos + len[e];
+                       }
+               }
+               cbc[left] ^= 0x80;
+               gf_mulx(pad);
+       }
+
+       for (i = 0; i < AES_BLOCK_SIZE; i++)
+               pad[i] ^= cbc[i];
+       aes_128_encrypt(ctx, pad, mac);
+       aes_encrypt_deinit(ctx);
+       return 0;
+}
+
+
+/**
+ * omac1_aes_128 - One-Key CBC MAC (OMAC1) hash with AES-128 (aka AES-CMAC)
+ * @key: 128-bit key for the hash operation
+ * @data: Data buffer for which a MAC is determined
+ * @data_len: Length of data buffer in bytes
+ * @mac: Buffer for MAC (128 bits, i.e., 16 bytes)
+ * Returns: 0 on success, -1 on failure
+ *
+ * This is a mode for using block cipher (AES in this case) for authentication.
+ * OMAC1 was standardized with the name CMAC by NIST in a Special Publication
+ * (SP) 800-38B.
+ */ //modify for CONFIG_IEEE80211W
+int omac1_aes_128(u8 *key, u8 *data, size_t data_len, u8 *mac)
+{
+       return omac1_aes_128_vector(key, 1, &data, &data_len, mac);
+}
+#endif //PLATFORM_FREEBSD Baron
+
+#ifdef CONFIG_TDLS
+void wpa_tdls_generate_tpk(_adapter *padapter, struct sta_info *psta)
+{
+       struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
+       u8 *SNonce = psta->SNonce;
+       u8 *ANonce = psta->ANonce;
+
+       u8 key_input[SHA256_MAC_LEN];
+       u8 *nonce[2];
+       size_t len[2];
+       u8 data[3 * ETH_ALEN];
+
+       /* IEEE Std 802.11z-2010 8.5.9.1:
+        * TPK-Key-Input = SHA-256(min(SNonce, ANonce) || max(SNonce, ANonce))
+        */
+       len[0] = 32;
+       len[1] = 32;
+       if (os_memcmp(SNonce, ANonce, 32) < 0) {
+               nonce[0] = SNonce;
+               nonce[1] = ANonce;
+       } else {
+               nonce[0] = ANonce;
+               nonce[1] = SNonce;
+       }
+
+       sha256_vector(2, nonce, len, key_input);
+
+       /*
+        * TPK-Key-Data = KDF-N_KEY(TPK-Key-Input, "TDLS PMK",
+        *      min(MAC_I, MAC_R) || max(MAC_I, MAC_R) || BSSID || N_KEY)
+        * TODO: is N_KEY really included in KDF Context and if so, in which
+        * presentation format (little endian 16-bit?) is it used? It gets
+        * added by the KDF anyway..
+        */
+
+       if (os_memcmp(myid(&(padapter->eeprompriv)), psta->hwaddr, ETH_ALEN) < 0) {
+               _rtw_memcpy(data, myid(&(padapter->eeprompriv)), ETH_ALEN);
+               _rtw_memcpy(data + ETH_ALEN, psta->hwaddr, ETH_ALEN);
+       } else {
+               _rtw_memcpy(data, psta->hwaddr, ETH_ALEN);
+               _rtw_memcpy(data + ETH_ALEN, myid(&(padapter->eeprompriv)), ETH_ALEN);
+       }
+       _rtw_memcpy(data + 2 * ETH_ALEN, get_bssid(pmlmepriv), ETH_ALEN);
+
+       sha256_prf(key_input, SHA256_MAC_LEN, "TDLS PMK", data, sizeof(data), (u8 *) &psta->tpk, sizeof(psta->tpk));
+
+
+}
+
+/**
+ * wpa_tdls_ftie_mic - Calculate TDLS FTIE MIC
+ * @kck: TPK-KCK
+ * @lnkid: Pointer to the beginning of Link Identifier IE
+ * @rsnie: Pointer to the beginning of RSN IE used for handshake
+ * @timeoutie: Pointer to the beginning of Timeout IE used for handshake
+ * @ftie: Pointer to the beginning of FT IE
+ * @mic: Pointer for writing MIC
+ *
+ * Calculate MIC for TDLS frame.
+ */
+int wpa_tdls_ftie_mic(u8 *kck, u8 trans_seq,
+                                                       u8 *lnkid, u8 *rsnie, u8 *timeoutie, u8 *ftie,
+                                                       u8 *mic)
+{
+       u8 *buf, *pos;
+       struct wpa_tdls_ftie *_ftie;
+       struct wpa_tdls_lnkid *_lnkid;
+       int ret;
+       int len = 2 * ETH_ALEN + 1 + 2 + lnkid[1] + 2 + rsnie[1] +
+               2 + timeoutie[1] + 2 + ftie[1];
+       buf = rtw_zmalloc(len);
+       if (!buf) {
+               DBG_871X("TDLS: No memory for MIC calculation\n");
+               return -1;
+       }
+
+       pos = buf;
+       _lnkid = (struct wpa_tdls_lnkid *) lnkid;
+       /* 1) TDLS initiator STA MAC address */
+       _rtw_memcpy(pos, _lnkid->init_sta, ETH_ALEN);
+       pos += ETH_ALEN;
+       /* 2) TDLS responder STA MAC address */
+       _rtw_memcpy(pos, _lnkid->resp_sta, ETH_ALEN);
+       pos += ETH_ALEN;
+       /* 3) Transaction Sequence number */
+       *pos++ = trans_seq;
+       /* 4) Link Identifier IE */
+       _rtw_memcpy(pos, lnkid, 2 + lnkid[1]);
+       pos += 2 + lnkid[1];
+       /* 5) RSN IE */
+       _rtw_memcpy(pos, rsnie, 2 + rsnie[1]);
+       pos += 2 + rsnie[1];
+       /* 6) Timeout Interval IE */
+       _rtw_memcpy(pos, timeoutie, 2 + timeoutie[1]);
+       pos += 2 + timeoutie[1];
+       /* 7) FTIE, with the MIC field of the FTIE set to 0 */
+       _rtw_memcpy(pos, ftie, 2 + ftie[1]);
+       _ftie = (struct wpa_tdls_ftie *) pos;
+       _rtw_memset(_ftie->mic, 0, TDLS_MIC_LEN);
+       pos += 2 + ftie[1];
+
+       ret = omac1_aes_128(kck, buf, pos - buf, mic);
+       rtw_mfree(buf, len);
+       return ret;
+
+}
+
+int tdls_verify_mic(u8 *kck, u8 trans_seq,
+                                                       u8 *lnkid, u8 *rsnie, u8 *timeoutie, u8 *ftie)
+{
+       u8 *buf, *pos;
+       int len;
+       u8 mic[16];
+       int ret;
+       u8 *rx_ftie, *tmp_ftie;
+
+       if (lnkid == NULL || rsnie == NULL ||
+           timeoutie == NULL || ftie == NULL){
+               return 0;
+       }
+
+       len = 2 * ETH_ALEN + 1 + 2 + 18 + 2 + *(rsnie+1) + 2 + *(timeoutie+1) + 2 + *(ftie+1);
+
+       buf = rtw_zmalloc(len);
+       if (buf == NULL)
+               return 0;
+
+       pos = buf;
+       /* 1) TDLS initiator STA MAC address */
+       _rtw_memcpy(pos, lnkid + ETH_ALEN + 2, ETH_ALEN);
+       pos += ETH_ALEN;
+       /* 2) TDLS responder STA MAC address */
+       _rtw_memcpy(pos, lnkid + 2 * ETH_ALEN + 2, ETH_ALEN);
+       pos += ETH_ALEN;
+       /* 3) Transaction Sequence number */
+       *pos++ = trans_seq;
+       /* 4) Link Identifier IE */
+       _rtw_memcpy(pos, lnkid, 2 + 18);
+       pos += 2 + 18;
+       /* 5) RSN IE */
+       _rtw_memcpy(pos, rsnie, 2 + *(rsnie+1));
+       pos += 2 + *(rsnie+1);
+       /* 6) Timeout Interval IE */
+       _rtw_memcpy(pos, timeoutie, 2 + *(timeoutie+1));
+       pos += 2 + *(timeoutie+1);
+       /* 7) FTIE, with the MIC field of the FTIE set to 0 */
+       _rtw_memcpy(pos, ftie, 2 + *(ftie+1));
+       pos += 2;
+       tmp_ftie = (u8 *) (pos+2);
+       _rtw_memset(tmp_ftie, 0, 16);
+       pos += *(ftie+1);
+
+       ret = omac1_aes_128(kck, buf, pos - buf, mic);
+       rtw_mfree(buf, len);
+       if (ret)
+               return 0;
+       rx_ftie = ftie+4;
+
+       if (os_memcmp(mic, rx_ftie, 16) == 0) {
+               //Valid MIC
+               return 1;
+       }
+
+       //Invalid MIC
+       DBG_871X( "[%s] Invalid MIC\n", __FUNCTION__);
+       return 0;
+
+}
+#endif //CONFIG_TDLS
+
+#ifdef PLATFORM_WINDOWS
+void rtw_use_tkipkey_handler (
+       IN      PVOID                                   SystemSpecific1,
+       IN      PVOID                                   FunctionContext,
+       IN      PVOID                                   SystemSpecific2,
+       IN      PVOID                                   SystemSpecific3
+       )
+#endif
+#ifdef PLATFORM_LINUX
+void rtw_use_tkipkey_handler(void *FunctionContext)
+#endif
+#ifdef PLATFORM_FREEBSD
+void rtw_use_tkipkey_handler(void *FunctionContext)
+#endif
+{
+        _adapter *padapter = (_adapter *)FunctionContext;
+
+
+_func_enter_;
+
+       RT_TRACE(_module_rtl871x_security_c_,_drv_err_,("^^^rtw_use_tkipkey_handler ^^^\n"));
+
+/*
+       if(padapter->bDriverStopped ||padapter->bSurpriseRemoved){
+                       RT_TRACE(_module_rtl871x_security_c_,_drv_err_,("^^^rtw_use_tkipkey_handler (padapter->bDriverStopped %d)(padapter->bSurpriseRemoved %d)^^^\n",padapter->bDriverStopped,padapter->bSurpriseRemoved));
+
+               return;
+       }
+       */
+
+       padapter->securitypriv.busetkipkey=_TRUE;
+
+       RT_TRACE(_module_rtl871x_security_c_,_drv_err_,("^^^rtw_use_tkipkey_handler padapter->securitypriv.busetkipkey=%d^^^\n",padapter->securitypriv.busetkipkey));
+
+_func_exit_;
+
+}
+
+/* Restore HW wep key setting according to key_mask */
+void rtw_sec_restore_wep_key(_adapter *adapter)
+{
+       struct security_priv* securitypriv=&(adapter->securitypriv);
+       sint keyid;
+
+       if((_WEP40_ == securitypriv->dot11PrivacyAlgrthm) ||(_WEP104_ == securitypriv->dot11PrivacyAlgrthm)) {
+               for(keyid=0;keyid<4;keyid++){
+                       if(securitypriv->key_mask & BIT(keyid)){
+                               if(keyid == securitypriv->dot11PrivacyKeyIndex)
+                                       rtw_set_key(adapter,securitypriv, keyid, 1);
+                               else
+                                       rtw_set_key(adapter,securitypriv, keyid, 0);
+                       }
+               }
+       }
+}
+
+u8 rtw_handle_tkip_countermeasure(_adapter* adapter, const char *caller)
+{
+       struct security_priv* securitypriv=&(adapter->securitypriv);
+       u8 status = _SUCCESS;
+
+       if (securitypriv->btkip_countermeasure == _TRUE) {
+               u32 passing_ms = rtw_get_passing_time_ms(securitypriv->btkip_countermeasure_time);
+               if (passing_ms > 60*1000) {
+                       LOG_LEVEL(_drv_info_, "%s("ADPT_FMT") countermeasure time:%ds > 60s \n",
+                               caller, ADPT_ARG(adapter), passing_ms/1000);
+                       securitypriv->btkip_countermeasure = _FALSE;
+                       securitypriv->btkip_countermeasure_time = 0;
+               } else {
+                       LOG_LEVEL(_drv_warning_, "%s("ADPT_FMT") countermeasure time:%ds < 60s \n",
+                               caller, ADPT_ARG(adapter), passing_ms/1000);
+                       status = _FAIL;
+               }
+       }
+
+       return status;
+}
diff --git a/drivers/net/wireless/realtek/rtl8192cu/core/rtw_sreset.c b/drivers/net/wireless/realtek/rtl8192cu/core/rtw_sreset.c
new file mode 100644 (file)
index 0000000..9d3dd7c
--- /dev/null
@@ -0,0 +1,351 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+
+#include<rtw_sreset.h>
+
+void sreset_init_value(_adapter *padapter)
+{
+#if defined(DBG_CONFIG_ERROR_DETECT)
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
+       struct sreset_priv *psrtpriv = &pHalData->srestpriv;
+
+       _rtw_mutex_init(&psrtpriv->silentreset_mutex);
+       psrtpriv->silent_reset_inprogress = _FALSE;
+       psrtpriv->Wifi_Error_Status = WIFI_STATUS_SUCCESS;
+       psrtpriv->last_tx_time =0;
+       psrtpriv->last_tx_complete_time =0;
+#endif
+}
+void sreset_reset_value(_adapter *padapter)
+{
+#if defined(DBG_CONFIG_ERROR_DETECT)
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
+       struct sreset_priv *psrtpriv = &pHalData->srestpriv;
+
+       psrtpriv->silent_reset_inprogress = _FALSE;
+       psrtpriv->Wifi_Error_Status = WIFI_STATUS_SUCCESS;
+       psrtpriv->last_tx_time =0;
+       psrtpriv->last_tx_complete_time =0;
+#endif
+}
+
+u8 sreset_get_wifi_status(_adapter *padapter)
+{
+#if defined(DBG_CONFIG_ERROR_DETECT)
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
+       struct sreset_priv *psrtpriv = &pHalData->srestpriv;
+
+       u8 status = WIFI_STATUS_SUCCESS;
+       u32 val32 = 0;
+       _irqL irqL;
+       if(psrtpriv->silent_reset_inprogress == _TRUE)
+        {
+               return status;
+       }
+       val32 =rtw_read32(padapter,REG_TXDMA_STATUS);
+       if(val32==0xeaeaeaea){
+               psrtpriv->Wifi_Error_Status = WIFI_IF_NOT_EXIST;
+       }
+       else if(val32!=0){
+               DBG_8192C("txdmastatu(%x)\n",val32);
+               psrtpriv->Wifi_Error_Status = WIFI_MAC_TXDMA_ERROR;
+       }
+
+       if(WIFI_STATUS_SUCCESS !=psrtpriv->Wifi_Error_Status)
+       {
+               DBG_8192C("==>%s error_status(0x%x) \n",__FUNCTION__,psrtpriv->Wifi_Error_Status);
+               status = (psrtpriv->Wifi_Error_Status &( ~(USB_READ_PORT_FAIL|USB_WRITE_PORT_FAIL)));
+       }
+       DBG_8192C("==> %s wifi_status(0x%x)\n",__FUNCTION__,status);
+
+       //status restore
+       psrtpriv->Wifi_Error_Status = WIFI_STATUS_SUCCESS;
+
+       return status;
+#else
+       return WIFI_STATUS_SUCCESS;
+#endif
+}
+
+void sreset_set_wifi_error_status(_adapter *padapter, u32 status)
+{
+#if defined(DBG_CONFIG_ERROR_DETECT)
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
+       pHalData->srestpriv.Wifi_Error_Status = status;
+#endif
+}
+
+void sreset_set_trigger_point(_adapter *padapter, s32 tgp)
+{
+#if defined(DBG_CONFIG_ERROR_DETECT)
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
+       pHalData->srestpriv.dbg_trigger_point = tgp;
+#endif
+}
+
+bool sreset_inprogress(_adapter *padapter)
+{
+#if defined(DBG_CONFIG_ERROR_RESET)
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
+       return pHalData->srestpriv.silent_reset_inprogress;
+#else
+       return _FALSE;
+#endif
+}
+
+void sreset_restore_security_station(_adapter *padapter)
+{
+       u8 EntryId = 0;
+       struct mlme_priv *mlmepriv = &padapter->mlmepriv;
+       struct sta_priv * pstapriv = &padapter->stapriv;
+       struct sta_info *psta;
+       struct security_priv* psecuritypriv=&(padapter->securitypriv);
+       struct mlme_ext_info    *pmlmeinfo = &padapter->mlmeextpriv.mlmext_info;
+
+       {
+               u8 val8;
+
+               if (pmlmeinfo->auth_algo == dot11AuthAlgrthm_8021X) {
+                       val8 = 0xcc;
+               #ifdef CONFIG_WAPI_SUPPORT
+               } else if (padapter->wapiInfo.bWapiEnable && pmlmeinfo->auth_algo == dot11AuthAlgrthm_WAPI) {
+                       //Disable TxUseDefaultKey, RxUseDefaultKey, RxBroadcastUseDefaultKey.
+                       val8 = 0x4c;
+               #endif
+               } else {
+                       val8 = 0xcf;
+               }
+               rtw_hal_set_hwreg(padapter, HW_VAR_SEC_CFG, (u8 *)(&val8));
+       }
+
+       #if 0
+       if (    ( padapter->securitypriv.dot11PrivacyAlgrthm == _WEP40_ ) ||
+               ( padapter->securitypriv.dot11PrivacyAlgrthm == _WEP104_ ))
+       {
+
+               for(EntryId=0; EntryId<4; EntryId++)
+               {
+                       if(EntryId == psecuritypriv->dot11PrivacyKeyIndex)
+                               rtw_set_key(padapter,&padapter->securitypriv, EntryId, 1);
+                       else
+                               rtw_set_key(padapter,&padapter->securitypriv, EntryId, 0);
+               }
+
+       }
+       else
+       #endif
+       if((padapter->securitypriv.dot11PrivacyAlgrthm == _TKIP_) ||
+               (padapter->securitypriv.dot11PrivacyAlgrthm == _AES_))
+       {
+               psta = rtw_get_stainfo(pstapriv, get_bssid(mlmepriv));
+               if (psta == NULL) {
+                       //DEBUG_ERR( ("Set wpa_set_encryption: Obtain Sta_info fail \n"));
+               }
+               else
+               {
+                       //pairwise key
+                       rtw_setstakey_cmd(padapter, (unsigned char *)psta, _TRUE);
+                       //group key
+                       rtw_set_key(padapter,&padapter->securitypriv,padapter->securitypriv.dot118021XGrpKeyid, 0);
+               }
+       }
+}
+
+void sreset_restore_network_station(_adapter *padapter)
+{
+       struct mlme_priv *mlmepriv = &padapter->mlmepriv;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       #if 0
+       {
+       //=======================================================
+       // reset related register of Beacon control
+
+       //set MSR to nolink
+       Set_MSR(padapter, _HW_STATE_NOLINK_);
+       // reject all data frame
+       rtw_write16(padapter, REG_RXFLTMAP2,0x00);
+       //reset TSF
+       rtw_write8(padapter, REG_DUAL_TSF_RST, (BIT(0)|BIT(1)));
+
+       // disable update TSF
+       SetBcnCtrlReg(padapter, BIT(4), 0);
+
+       //=======================================================
+       }
+       #endif
+
+       rtw_setopmode_cmd(padapter, Ndis802_11Infrastructure);
+
+       {
+               u8 threshold;
+               #ifdef CONFIG_USB_HCI
+               // TH=1 => means that invalidate usb rx aggregation
+               // TH=0 => means that validate usb rx aggregation, use init value.
+               if(mlmepriv->htpriv.ht_option) {
+                       if(padapter->registrypriv.wifi_spec==1)
+                               threshold = 1;
+                       else
+                               threshold = 0;
+                       rtw_hal_set_hwreg(padapter, HW_VAR_RXDMA_AGG_PG_TH, (u8 *)(&threshold));
+               } else {
+                       threshold = 1;
+                       rtw_hal_set_hwreg(padapter, HW_VAR_RXDMA_AGG_PG_TH, (u8 *)(&threshold));
+               }
+               #endif
+       }
+
+       set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
+
+       //disable dynamic functions, such as high power, DIG
+       //Switch_DM_Func(padapter, DYNAMIC_FUNC_DISABLE, _FALSE);
+
+       rtw_hal_set_hwreg(padapter, HW_VAR_BSSID, pmlmeinfo->network.MacAddress);
+
+       {
+               u8      join_type = 0;
+               rtw_hal_set_hwreg(padapter, HW_VAR_MLME_JOIN, (u8 *)(&join_type));
+       }
+
+       Set_MSR(padapter, (pmlmeinfo->state & 0x3));
+
+       mlmeext_joinbss_event_callback(padapter, 1);
+       //restore Sequence No.
+       rtw_write8(padapter,0x4dc,padapter->xmitpriv.nqos_ssn);
+
+       sreset_restore_security_station(padapter);
+}
+
+void sreset_restore_network_status(_adapter *padapter)
+{
+       struct mlme_priv *mlmepriv = &padapter->mlmepriv;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       if (check_fwstate(mlmepriv, WIFI_STATION_STATE)) {
+               DBG_871X(FUNC_ADPT_FMT" fwstate:0x%08x - WIFI_STATION_STATE\n", FUNC_ADPT_ARG(padapter), get_fwstate(mlmepriv));
+               sreset_restore_network_station(padapter);
+       } else if (check_fwstate(mlmepriv, WIFI_AP_STATE)) {
+               DBG_871X(FUNC_ADPT_FMT" fwstate:0x%08x - WIFI_AP_STATE\n", FUNC_ADPT_ARG(padapter), get_fwstate(mlmepriv));
+               rtw_ap_restore_network(padapter);
+       } else if (check_fwstate(mlmepriv, WIFI_ADHOC_STATE)) {
+               DBG_871X(FUNC_ADPT_FMT" fwstate:0x%08x - WIFI_ADHOC_STATE\n", FUNC_ADPT_ARG(padapter), get_fwstate(mlmepriv));
+       } else {
+               DBG_871X(FUNC_ADPT_FMT" fwstate:0x%08x - ???\n", FUNC_ADPT_ARG(padapter), get_fwstate(mlmepriv));
+       }
+}
+
+void sreset_stop_adapter(_adapter *padapter)
+{
+       struct mlme_priv        *pmlmepriv = &(padapter->mlmepriv);
+       struct xmit_priv        *pxmitpriv = &padapter->xmitpriv;
+
+       if (padapter == NULL)
+               return;
+
+       DBG_871X(FUNC_ADPT_FMT"\n", FUNC_ADPT_ARG(padapter));
+
+       if (!rtw_netif_queue_stopped(padapter->pnetdev))
+               rtw_netif_stop_queue(padapter->pnetdev);
+
+       rtw_cancel_all_timer(padapter);
+
+       /* TODO: OS and HCI independent */
+       #if defined(PLATFORM_LINUX) && defined(CONFIG_USB_HCI)
+       tasklet_kill(&pxmitpriv->xmit_tasklet);
+       #endif
+
+       if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY))
+               rtw_scan_abort(padapter);
+
+       if (check_fwstate(pmlmepriv, _FW_UNDER_LINKING))
+               _rtw_join_timeout_handler(padapter);
+
+}
+
+void sreset_start_adapter(_adapter *padapter)
+{
+       struct mlme_priv        *pmlmepriv = &(padapter->mlmepriv);
+       struct xmit_priv        *pxmitpriv = &padapter->xmitpriv;
+
+       if (padapter == NULL)
+               return;
+
+       DBG_871X(FUNC_ADPT_FMT"\n", FUNC_ADPT_ARG(padapter));
+
+       if (check_fwstate(pmlmepriv, _FW_LINKED)) {
+               sreset_restore_network_status(padapter);
+       }
+
+       /* TODO: OS and HCI independent */
+       #if defined(PLATFORM_LINUX) && defined(CONFIG_USB_HCI)
+       tasklet_hi_schedule(&pxmitpriv->xmit_tasklet);
+       #endif
+
+       _set_timer(&padapter->mlmepriv.dynamic_chk_timer, 2000);
+
+       if (rtw_netif_queue_stopped(padapter->pnetdev))
+               rtw_netif_wake_queue(padapter->pnetdev);
+
+}
+
+void sreset_reset(_adapter *padapter)
+{
+#ifdef DBG_CONFIG_ERROR_RESET
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
+       struct sreset_priv *psrtpriv = &pHalData->srestpriv;
+       struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
+       struct mlme_priv        *pmlmepriv = &(padapter->mlmepriv);
+       struct xmit_priv        *pxmitpriv = &padapter->xmitpriv;
+       _irqL irqL;
+       u32 start = rtw_get_current_time();
+
+       DBG_871X("%s\n", __FUNCTION__);
+
+       psrtpriv->Wifi_Error_Status = WIFI_STATUS_SUCCESS;
+
+       _enter_pwrlock(&pwrpriv->lock);
+
+       psrtpriv->silent_reset_inprogress = _TRUE;
+       pwrpriv->change_rfpwrstate = rf_off;
+
+       sreset_stop_adapter(padapter);
+       #ifdef CONFIG_CONCURRENT_MODE
+       sreset_stop_adapter(padapter->pbuddy_adapter);
+       #endif
+
+       #ifdef CONFIG_IPS
+       _ips_enter(padapter);
+       _ips_leave(padapter);
+       #endif
+
+       sreset_start_adapter(padapter);
+       #ifdef CONFIG_CONCURRENT_MODE
+       sreset_start_adapter(padapter->pbuddy_adapter);
+       #endif
+
+       psrtpriv->silent_reset_inprogress = _FALSE;
+
+       _exit_pwrlock(&pwrpriv->lock);
+
+       DBG_871X("%s done in %d ms\n", __FUNCTION__, rtw_get_passing_time_ms(start));
+#endif
+}
diff --git a/drivers/net/wireless/realtek/rtl8192cu/core/rtw_sta_mgt.c b/drivers/net/wireless/realtek/rtl8192cu/core/rtw_sta_mgt.c
new file mode 100644 (file)
index 0000000..4483499
--- /dev/null
@@ -0,0 +1,847 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#define _RTW_STA_MGT_C_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <recv_osdep.h>
+#include <xmit_osdep.h>
+#include <mlme_osdep.h>
+
+
+#if defined (PLATFORM_LINUX) && defined (PLATFORM_WINDOWS)
+
+#error "Shall be Linux or Windows, but not both!\n"
+
+#endif
+
+#include <sta_info.h>
+
+void _rtw_init_stainfo(struct sta_info *psta);
+void _rtw_init_stainfo(struct sta_info *psta)
+{
+
+_func_enter_;
+
+       _rtw_memset((u8 *)psta, 0, sizeof (struct sta_info));
+
+        _rtw_spinlock_init(&psta->lock);
+       _rtw_init_listhead(&psta->list);
+       _rtw_init_listhead(&psta->hash_list);
+       //_rtw_init_listhead(&psta->asoc_list);
+       //_rtw_init_listhead(&psta->sleep_list);
+       //_rtw_init_listhead(&psta->wakeup_list);
+
+       _rtw_init_queue(&psta->sleep_q);
+       psta->sleepq_len = 0;
+
+       _rtw_init_sta_xmit_priv(&psta->sta_xmitpriv);
+       _rtw_init_sta_recv_priv(&psta->sta_recvpriv);
+
+#ifdef CONFIG_AP_MODE
+
+       _rtw_init_listhead(&psta->asoc_list);
+
+       _rtw_init_listhead(&psta->auth_list);
+
+       psta->expire_to = 0;
+
+       psta->flags = 0;
+
+       psta->capability = 0;
+
+       psta->bpairwise_key_installed = _FALSE;
+
+
+#ifdef CONFIG_NATIVEAP_MLME
+       psta->nonerp_set = 0;
+       psta->no_short_slot_time_set = 0;
+       psta->no_short_preamble_set = 0;
+       psta->no_ht_gf_set = 0;
+       psta->no_ht_set = 0;
+       psta->ht_20mhz_set = 0;
+#endif
+
+#ifdef CONFIG_TX_MCAST2UNI
+       psta->under_exist_checking = 0;
+#endif // CONFIG_TX_MCAST2UNI
+
+       psta->keep_alive_trycnt = 0;
+
+#endif // CONFIG_AP_MODE
+
+_func_exit_;
+
+}
+
+u32    _rtw_init_sta_priv(struct       sta_priv *pstapriv)
+{
+       struct sta_info *psta;
+       s32 i;
+
+_func_enter_;
+
+       pstapriv->pallocated_stainfo_buf = rtw_zvmalloc (sizeof(struct sta_info) * NUM_STA+ 4);
+
+       if(!pstapriv->pallocated_stainfo_buf)
+               return _FAIL;
+
+       pstapriv->pstainfo_buf = pstapriv->pallocated_stainfo_buf + 4 -
+               ((SIZE_PTR)(pstapriv->pallocated_stainfo_buf ) & 3);
+
+       _rtw_init_queue(&pstapriv->free_sta_queue);
+
+       _rtw_spinlock_init(&pstapriv->sta_hash_lock);
+
+       //_rtw_init_queue(&pstapriv->asoc_q);
+       pstapriv->asoc_sta_count = 0;
+       _rtw_init_queue(&pstapriv->sleep_q);
+       _rtw_init_queue(&pstapriv->wakeup_q);
+
+       psta = (struct sta_info *)(pstapriv->pstainfo_buf);
+
+
+       for(i = 0; i < NUM_STA; i++)
+       {
+               _rtw_init_stainfo(psta);
+
+               _rtw_init_listhead(&(pstapriv->sta_hash[i]));
+
+               rtw_list_insert_tail(&psta->list, get_list_head(&pstapriv->free_sta_queue));
+
+               psta++;
+       }
+
+
+
+#ifdef CONFIG_AP_MODE
+
+       pstapriv->sta_dz_bitmap = 0;
+       pstapriv->tim_bitmap = 0;
+
+       _rtw_init_listhead(&pstapriv->asoc_list);
+       _rtw_init_listhead(&pstapriv->auth_list);
+       _rtw_spinlock_init(&pstapriv->asoc_list_lock);
+       _rtw_spinlock_init(&pstapriv->auth_list_lock);
+       pstapriv->asoc_list_cnt = 0;
+       pstapriv->auth_list_cnt = 0;
+
+       pstapriv->auth_to = 3; // 3*2 = 6 sec
+       pstapriv->assoc_to = 3;
+       //pstapriv->expire_to = 900;// 900*2 = 1800 sec = 30 min, expire after no any traffic.
+       //pstapriv->expire_to = 30;// 30*2 = 60 sec = 1 min, expire after no any traffic.
+#ifdef CONFIG_ACTIVE_KEEP_ALIVE_CHECK
+       pstapriv->expire_to = 3; // 3*2 = 6 sec
+#else
+       pstapriv->expire_to = 60;// 60*2 = 120 sec = 2 min, expire after no any traffic.
+#endif
+       pstapriv->max_num_sta = NUM_STA;
+
+#endif
+
+_func_exit_;
+
+       return _SUCCESS;
+
+}
+
+inline int rtw_stainfo_offset(struct sta_priv *stapriv, struct sta_info *sta)
+{
+       int offset = (((u8 *)sta) - stapriv->pstainfo_buf)/sizeof(struct sta_info);
+
+       if (!stainfo_offset_valid(offset))
+               DBG_871X("%s invalid offset(%d), out of range!!!", __func__, offset);
+
+       return offset;
+}
+
+inline struct sta_info *rtw_get_stainfo_by_offset(struct sta_priv *stapriv, int offset)
+{
+       if (!stainfo_offset_valid(offset))
+               DBG_871X("%s invalid offset(%d), out of range!!!", __func__, offset);
+
+       return (struct sta_info *)(stapriv->pstainfo_buf + offset * sizeof(struct sta_info));
+}
+
+void   _rtw_free_sta_xmit_priv_lock(struct sta_xmit_priv *psta_xmitpriv);
+void   _rtw_free_sta_xmit_priv_lock(struct sta_xmit_priv *psta_xmitpriv)
+{
+_func_enter_;
+
+       _rtw_spinlock_free(&psta_xmitpriv->lock);
+
+       _rtw_spinlock_free(&(psta_xmitpriv->be_q.sta_pending.lock));
+       _rtw_spinlock_free(&(psta_xmitpriv->bk_q.sta_pending.lock));
+       _rtw_spinlock_free(&(psta_xmitpriv->vi_q.sta_pending.lock));
+       _rtw_spinlock_free(&(psta_xmitpriv->vo_q.sta_pending.lock));
+_func_exit_;
+}
+
+static void    _rtw_free_sta_recv_priv_lock(struct sta_recv_priv *psta_recvpriv)
+{
+_func_enter_;
+
+       _rtw_spinlock_free(&psta_recvpriv->lock);
+
+       _rtw_spinlock_free(&(psta_recvpriv->defrag_q.lock));
+
+_func_exit_;
+
+}
+
+void rtw_mfree_stainfo(struct sta_info *psta);
+void rtw_mfree_stainfo(struct sta_info *psta)
+{
+_func_enter_;
+
+       if(&psta->lock != NULL)
+                _rtw_spinlock_free(&psta->lock);
+
+       _rtw_free_sta_xmit_priv_lock(&psta->sta_xmitpriv);
+       _rtw_free_sta_recv_priv_lock(&psta->sta_recvpriv);
+
+_func_exit_;
+}
+
+
+// this function is used to free the memory of lock || sema for all stainfos
+void rtw_mfree_all_stainfo(struct sta_priv *pstapriv );
+void rtw_mfree_all_stainfo(struct sta_priv *pstapriv )
+{
+       _irqL    irqL;
+       _list   *plist, *phead;
+       struct sta_info *psta = NULL;
+
+_func_enter_;
+
+       _enter_critical_bh(&pstapriv->sta_hash_lock, &irqL);
+
+       phead = get_list_head(&pstapriv->free_sta_queue);
+       plist = get_next(phead);
+
+       while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
+       {
+               psta = LIST_CONTAINOR(plist, struct sta_info ,list);
+               plist = get_next(plist);
+
+               rtw_mfree_stainfo(psta);
+       }
+
+       _exit_critical_bh(&pstapriv->sta_hash_lock, &irqL);
+
+_func_exit_;
+
+}
+
+void rtw_mfree_sta_priv_lock(struct    sta_priv *pstapriv);
+void rtw_mfree_sta_priv_lock(struct    sta_priv *pstapriv)
+{
+#ifdef CONFIG_AP_MODE
+       struct wlan_acl_pool *pacl_list = &pstapriv->acl_list;
+#endif
+
+        rtw_mfree_all_stainfo(pstapriv); //be done before free sta_hash_lock
+
+       _rtw_spinlock_free(&pstapriv->free_sta_queue.lock);
+
+       _rtw_spinlock_free(&pstapriv->sta_hash_lock);
+       _rtw_spinlock_free(&pstapriv->wakeup_q.lock);
+       _rtw_spinlock_free(&pstapriv->sleep_q.lock);
+
+#ifdef CONFIG_AP_MODE
+       _rtw_spinlock_free(&pstapriv->asoc_list_lock);
+       _rtw_spinlock_free(&pstapriv->auth_list_lock);
+       _rtw_spinlock_free(&pacl_list->acl_node_q.lock);
+#endif
+
+}
+
+u32    _rtw_free_sta_priv(struct       sta_priv *pstapriv)
+{
+       _irqL   irqL;
+       _list   *phead, *plist;
+       struct sta_info *psta = NULL;
+       struct recv_reorder_ctrl *preorder_ctrl;
+       int     index;
+
+_func_enter_;
+       if(pstapriv){
+
+               /*      delete all reordering_ctrl_timer                */
+               _enter_critical_bh(&pstapriv->sta_hash_lock, &irqL);
+               for(index = 0; index < NUM_STA; index++)
+               {
+                       phead = &(pstapriv->sta_hash[index]);
+                       plist = get_next(phead);
+
+                       while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
+                       {
+                               int i;
+                               psta = LIST_CONTAINOR(plist, struct sta_info ,hash_list);
+                               plist = get_next(plist);
+
+                               for(i=0; i < 16 ; i++)
+                               {
+                                       preorder_ctrl = &psta->recvreorder_ctrl[i];
+                                       _cancel_timer_ex(&preorder_ctrl->reordering_ctrl_timer);
+                               }
+                       }
+               }
+               _exit_critical_bh(&pstapriv->sta_hash_lock, &irqL);
+               /*===============================*/
+
+               rtw_mfree_sta_priv_lock(pstapriv);
+
+               if(pstapriv->pallocated_stainfo_buf) {
+                       rtw_vmfree(pstapriv->pallocated_stainfo_buf, sizeof(struct sta_info)*NUM_STA+4);
+               }
+       }
+
+_func_exit_;
+       return _SUCCESS;
+}
+
+
+//struct       sta_info *rtw_alloc_stainfo(_queue *pfree_sta_queue, unsigned char *hwaddr)
+struct sta_info *rtw_alloc_stainfo(struct      sta_priv *pstapriv, u8 *hwaddr)
+{
+       _irqL irqL, irqL2;
+       uint tmp_aid;
+       s32     index;
+       _list   *phash_list;
+       struct sta_info *psta;
+       _queue *pfree_sta_queue;
+       struct recv_reorder_ctrl *preorder_ctrl;
+       int i = 0;
+       u16  wRxSeqInitialValue = 0xffff;
+
+_func_enter_;
+
+       pfree_sta_queue = &pstapriv->free_sta_queue;
+
+       //_enter_critical_bh(&(pfree_sta_queue->lock), &irqL);
+       _enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL2);
+
+       if (_rtw_queue_empty(pfree_sta_queue) == _TRUE)
+       {
+               //_exit_critical_bh(&(pfree_sta_queue->lock), &irqL);
+               _exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL2);
+               psta = NULL;
+       }
+       else
+       {
+               psta = LIST_CONTAINOR(get_next(&pfree_sta_queue->queue), struct sta_info, list);
+
+               rtw_list_delete(&(psta->list));
+
+               //_exit_critical_bh(&(pfree_sta_queue->lock), &irqL);
+
+               tmp_aid = psta->aid;
+
+               _rtw_init_stainfo(psta);
+
+               _rtw_memcpy(psta->hwaddr, hwaddr, ETH_ALEN);
+
+               index = wifi_mac_hash(hwaddr);
+
+               RT_TRACE(_module_rtl871x_sta_mgt_c_,_drv_info_,("rtw_alloc_stainfo: index  = %x", index));
+
+               if(index >= NUM_STA){
+                       RT_TRACE(_module_rtl871x_sta_mgt_c_,_drv_err_,("ERROR=> rtw_alloc_stainfo: index >= NUM_STA"));
+                       psta= NULL;
+                       goto exit;
+               }
+               phash_list = &(pstapriv->sta_hash[index]);
+
+               //_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL2);
+
+               rtw_list_insert_tail(&psta->hash_list, phash_list);
+
+               pstapriv->asoc_sta_count ++ ;
+
+               //_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL2);
+
+// Commented by Albert 2009/08/13
+// For the SMC router, the sequence number of first packet of WPS handshake will be 0.
+// In this case, this packet will be dropped by recv_decache function if we use the 0x00 as the default value for tid_rxseq variable.
+// So, we initialize the tid_rxseq variable as the 0xffff.
+
+               for( i = 0; i < 16; i++ )
+               {
+                     _rtw_memcpy( &psta->sta_recvpriv.rxcache.tid_rxseq[ i ], &wRxSeqInitialValue, 2 );
+               }
+
+               RT_TRACE(_module_rtl871x_sta_mgt_c_,_drv_info_,("alloc number_%d stainfo  with hwaddr = %x %x %x %x %x %x  \n",
+               pstapriv->asoc_sta_count , hwaddr[0], hwaddr[1], hwaddr[2],hwaddr[3],hwaddr[4],hwaddr[5]));
+
+               init_addba_retry_timer(pstapriv->padapter, psta);
+
+#ifdef CONFIG_TDLS
+               psta->padapter = pstapriv->padapter;
+               init_TPK_timer(pstapriv->padapter, psta);
+               init_ch_switch_timer(pstapriv->padapter, psta);
+               init_base_ch_timer(pstapriv->padapter, psta);
+               init_off_ch_timer(pstapriv->padapter, psta);
+               init_handshake_timer(pstapriv->padapter, psta);
+               init_tdls_alive_timer(pstapriv->padapter, psta);
+#endif //CONFIG_TDLS
+
+               //for A-MPDU Rx reordering buffer control
+               for(i=0; i < 16 ; i++)
+               {
+                       preorder_ctrl = &psta->recvreorder_ctrl[i];
+
+                       preorder_ctrl->padapter = pstapriv->padapter;
+
+                       preorder_ctrl->enable = _FALSE;
+
+                       preorder_ctrl->indicate_seq = 0xffff;
+                       #ifdef DBG_RX_SEQ
+                       DBG_871X("DBG_RX_SEQ %s:%d IndicateSeq: %d\n", __FUNCTION__, __LINE__,
+                               preorder_ctrl->indicate_seq);
+                       #endif
+                       preorder_ctrl->wend_b= 0xffff;
+                       //preorder_ctrl->wsize_b = (NR_RECVBUFF-2);
+                       preorder_ctrl->wsize_b = 64;//64;
+
+                       _rtw_init_queue(&preorder_ctrl->pending_recvframe_queue);
+
+                       rtw_init_recv_timer(preorder_ctrl);
+               }
+
+
+               //init for DM
+               psta->rssi_stat.UndecoratedSmoothedPWDB = 0;
+               psta->rssi_stat.UndecoratedSmoothedCCK = (-1);
+
+               /* init for the sequence number of received management frame */
+               psta->RxMgmtFrameSeqNum = 0xffff;
+       }
+
+exit:
+
+       _exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL2);
+
+_func_exit_;
+
+       return psta;
+
+
+}
+
+
+// using pstapriv->sta_hash_lock to protect
+u32    rtw_free_stainfo(_adapter *padapter , struct sta_info *psta)
+{
+       int i;
+       _irqL irqL0;
+       _queue *pfree_sta_queue;
+       struct recv_reorder_ctrl *preorder_ctrl;
+       struct  sta_xmit_priv   *pstaxmitpriv;
+       struct  xmit_priv       *pxmitpriv= &padapter->xmitpriv;
+       struct  sta_priv *pstapriv = &padapter->stapriv;
+       struct hw_xmit *phwxmit;
+
+
+_func_enter_;
+
+       if (psta == NULL)
+               goto exit;
+
+
+       _enter_critical_bh(&psta->lock, &irqL0);
+       psta->state &= ~_FW_LINKED;
+       _exit_critical_bh(&psta->lock, &irqL0);
+
+       pfree_sta_queue = &pstapriv->free_sta_queue;
+
+
+       pstaxmitpriv = &psta->sta_xmitpriv;
+
+       //rtw_list_delete(&psta->sleep_list);
+
+       //rtw_list_delete(&psta->wakeup_list);
+
+       _enter_critical_bh(&pxmitpriv->lock, &irqL0);
+
+       rtw_free_xmitframe_queue(pxmitpriv, &psta->sleep_q);
+       psta->sleepq_len = 0;
+
+       //vo
+       //_enter_critical_bh(&(pxmitpriv->vo_pending.lock), &irqL0);
+       rtw_free_xmitframe_queue( pxmitpriv, &pstaxmitpriv->vo_q.sta_pending);
+       rtw_list_delete(&(pstaxmitpriv->vo_q.tx_pending));
+       phwxmit = pxmitpriv->hwxmits;
+       phwxmit->accnt -= pstaxmitpriv->vo_q.qcnt;
+       pstaxmitpriv->vo_q.qcnt = 0;
+       //_exit_critical_bh(&(pxmitpriv->vo_pending.lock), &irqL0);
+
+       //vi
+       //_enter_critical_bh(&(pxmitpriv->vi_pending.lock), &irqL0);
+       rtw_free_xmitframe_queue( pxmitpriv, &pstaxmitpriv->vi_q.sta_pending);
+       rtw_list_delete(&(pstaxmitpriv->vi_q.tx_pending));
+       phwxmit = pxmitpriv->hwxmits+1;
+       phwxmit->accnt -= pstaxmitpriv->vi_q.qcnt;
+       pstaxmitpriv->vi_q.qcnt = 0;
+       //_exit_critical_bh(&(pxmitpriv->vi_pending.lock), &irqL0);
+
+       //be
+       //_enter_critical_bh(&(pxmitpriv->be_pending.lock), &irqL0);
+       rtw_free_xmitframe_queue( pxmitpriv, &pstaxmitpriv->be_q.sta_pending);
+       rtw_list_delete(&(pstaxmitpriv->be_q.tx_pending));
+       phwxmit = pxmitpriv->hwxmits+2;
+       phwxmit->accnt -= pstaxmitpriv->be_q.qcnt;
+       pstaxmitpriv->be_q.qcnt = 0;
+       //_exit_critical_bh(&(pxmitpriv->be_pending.lock), &irqL0);
+
+       //bk
+       //_enter_critical_bh(&(pxmitpriv->bk_pending.lock), &irqL0);
+       rtw_free_xmitframe_queue( pxmitpriv, &pstaxmitpriv->bk_q.sta_pending);
+       rtw_list_delete(&(pstaxmitpriv->bk_q.tx_pending));
+       phwxmit = pxmitpriv->hwxmits+3;
+       phwxmit->accnt -= pstaxmitpriv->bk_q.qcnt;
+       pstaxmitpriv->bk_q.qcnt = 0;
+       //_exit_critical_bh(&(pxmitpriv->bk_pending.lock), &irqL0);
+
+       _exit_critical_bh(&pxmitpriv->lock, &irqL0);
+
+       rtw_list_delete(&psta->hash_list);
+       RT_TRACE(_module_rtl871x_sta_mgt_c_,_drv_err_,("\n free number_%d stainfo  with hwaddr = 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x  \n",pstapriv->asoc_sta_count , psta->hwaddr[0], psta->hwaddr[1], psta->hwaddr[2],psta->hwaddr[3],psta->hwaddr[4],psta->hwaddr[5]));
+       pstapriv->asoc_sta_count --;
+
+
+       // re-init sta_info; 20061114 // will be init in alloc_stainfo
+       //_rtw_init_sta_xmit_priv(&psta->sta_xmitpriv);
+       //_rtw_init_sta_recv_priv(&psta->sta_recvpriv);
+
+       _cancel_timer_ex(&psta->addba_retry_timer);
+
+#ifdef CONFIG_TDLS
+       _cancel_timer_ex(&psta->TPK_timer);
+       _cancel_timer_ex(&psta->option_timer);
+       _cancel_timer_ex(&psta->base_ch_timer);
+       _cancel_timer_ex(&psta->off_ch_timer);
+       _cancel_timer_ex(&psta->alive_timer1);
+       _cancel_timer_ex(&psta->alive_timer2);
+#endif //CONFIG_TDLS
+
+       //for A-MPDU Rx reordering buffer control, cancel reordering_ctrl_timer
+       for(i=0; i < 16 ; i++)
+       {
+               _irqL irqL;
+               _list   *phead, *plist;
+               union recv_frame *prframe;
+               _queue *ppending_recvframe_queue;
+               _queue *pfree_recv_queue = &padapter->recvpriv.free_recv_queue;
+
+               preorder_ctrl = &psta->recvreorder_ctrl[i];
+
+               _cancel_timer_ex(&preorder_ctrl->reordering_ctrl_timer);
+
+
+               ppending_recvframe_queue = &preorder_ctrl->pending_recvframe_queue;
+
+               _enter_critical_bh(&ppending_recvframe_queue->lock, &irqL);
+
+               phead =         get_list_head(ppending_recvframe_queue);
+               plist = get_next(phead);
+
+               while(!rtw_is_list_empty(phead))
+               {
+                       prframe = LIST_CONTAINOR(plist, union recv_frame, u);
+
+                       plist = get_next(plist);
+
+                       rtw_list_delete(&(prframe->u.hdr.list));
+
+                       rtw_free_recvframe(prframe, pfree_recv_queue);
+               }
+
+               _exit_critical_bh(&ppending_recvframe_queue->lock, &irqL);
+
+       }
+
+
+#ifdef CONFIG_AP_MODE
+
+/*
+       _enter_critical_bh(&pstapriv->asoc_list_lock, &irqL0);
+       rtw_list_delete(&psta->asoc_list);
+       _exit_critical_bh(&pstapriv->asoc_list_lock, &irqL0);
+*/
+       _enter_critical_bh(&pstapriv->auth_list_lock, &irqL0);
+       if (!rtw_is_list_empty(&psta->auth_list)) {
+               rtw_list_delete(&psta->auth_list);
+               pstapriv->auth_list_cnt--;
+       }
+       _exit_critical_bh(&pstapriv->auth_list_lock, &irqL0);
+
+       psta->expire_to = 0;
+
+       psta->sleepq_ac_len = 0;
+       psta->qos_info = 0;
+
+       psta->max_sp_len = 0;
+       psta->uapsd_bk = 0;
+       psta->uapsd_be = 0;
+       psta->uapsd_vi = 0;
+       psta->uapsd_vo = 0;
+
+       psta->has_legacy_ac = 0;
+
+#ifdef CONFIG_NATIVEAP_MLME
+
+       pstapriv->sta_dz_bitmap &=~BIT(psta->aid);
+       pstapriv->tim_bitmap &=~BIT(psta->aid);
+
+       //rtw_indicate_sta_disassoc_event(padapter, psta);
+
+       if ((psta->aid >0)&&(pstapriv->sta_aid[psta->aid - 1] == psta))
+       {
+               pstapriv->sta_aid[psta->aid - 1] = NULL;
+               psta->aid = 0;
+       }
+
+#endif // CONFIG_NATIVEAP_MLME
+
+#ifdef CONFIG_TX_MCAST2UNI
+       psta->under_exist_checking = 0;
+#endif // CONFIG_TX_MCAST2UNI
+
+#endif // CONFIG_AP_MODE
+
+        _rtw_spinlock_free(&psta->lock);
+
+       //_enter_critical_bh(&(pfree_sta_queue->lock), &irqL0);
+       rtw_list_insert_tail(&psta->list, get_list_head(pfree_sta_queue));
+       //_exit_critical_bh(&(pfree_sta_queue->lock), &irqL0);
+
+exit:
+
+_func_exit_;
+
+       return _SUCCESS;
+
+}
+
+// free all stainfo which in sta_hash[all]
+void rtw_free_all_stainfo(_adapter *padapter)
+{
+       _irqL    irqL;
+       _list   *plist, *phead;
+       s32     index;
+       struct sta_info *psta = NULL;
+       struct  sta_priv *pstapriv = &padapter->stapriv;
+       struct sta_info* pbcmc_stainfo =rtw_get_bcmc_stainfo( padapter);
+
+_func_enter_;
+
+       if(pstapriv->asoc_sta_count==1)
+               goto exit;
+
+       _enter_critical_bh(&pstapriv->sta_hash_lock, &irqL);
+
+       for(index=0; index< NUM_STA; index++)
+       {
+               phead = &(pstapriv->sta_hash[index]);
+               plist = get_next(phead);
+
+               while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
+               {
+                       psta = LIST_CONTAINOR(plist, struct sta_info ,hash_list);
+
+                       plist = get_next(plist);
+
+                       if(pbcmc_stainfo!=psta)
+                               rtw_free_stainfo(padapter , psta);
+
+               }
+       }
+
+       _exit_critical_bh(&pstapriv->sta_hash_lock, &irqL);
+
+exit:
+
+_func_exit_;
+
+}
+
+/* any station allocated can be searched by hash list */
+struct sta_info *rtw_get_stainfo(struct sta_priv *pstapriv, u8 *hwaddr)
+{
+
+       _irqL    irqL;
+
+       _list   *plist, *phead;
+
+       struct sta_info *psta = NULL;
+
+       u32     index;
+
+       u8 *addr;
+
+       u8 bc_addr[ETH_ALEN] = {0xff,0xff,0xff,0xff,0xff,0xff};
+
+_func_enter_;
+
+       if(hwaddr==NULL)
+               return NULL;
+
+       if(IS_MCAST(hwaddr))
+       {
+               addr = bc_addr;
+       }
+       else
+       {
+               addr = hwaddr;
+       }
+
+       index = wifi_mac_hash(addr);
+
+       _enter_critical_bh(&pstapriv->sta_hash_lock, &irqL);
+
+       phead = &(pstapriv->sta_hash[index]);
+       plist = get_next(phead);
+
+
+       while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
+       {
+
+               psta = LIST_CONTAINOR(plist, struct sta_info, hash_list);
+
+               if ((_rtw_memcmp(psta->hwaddr, addr, ETH_ALEN))== _TRUE)
+               { // if found the matched address
+                       break;
+               }
+               psta=NULL;
+               plist = get_next(plist);
+       }
+
+       _exit_critical_bh(&pstapriv->sta_hash_lock, &irqL);
+_func_exit_;
+       return psta;
+
+}
+
+u32 rtw_init_bcmc_stainfo(_adapter* padapter)
+{
+
+       struct sta_info         *psta;
+       struct tx_servq *ptxservq;
+       u32 res=_SUCCESS;
+       NDIS_802_11_MAC_ADDRESS bcast_addr= {0xff,0xff,0xff,0xff,0xff,0xff};
+
+       struct  sta_priv *pstapriv = &padapter->stapriv;
+       //_queue        *pstapending = &padapter->xmitpriv.bm_pending;
+
+_func_enter_;
+
+       psta = rtw_alloc_stainfo(pstapriv, bcast_addr);
+
+       if(psta==NULL){
+               res=_FAIL;
+               RT_TRACE(_module_rtl871x_sta_mgt_c_,_drv_err_,("rtw_alloc_stainfo fail"));
+               goto exit;
+       }
+
+       // default broadcast & multicast use macid 1
+       psta->mac_id = 1;
+
+       ptxservq= &(psta->sta_xmitpriv.be_q);
+
+/*
+       _enter_critical(&pstapending->lock, &irqL0);
+
+       if (rtw_is_list_empty(&ptxservq->tx_pending))
+               rtw_list_insert_tail(&ptxservq->tx_pending, get_list_head(pstapending));
+
+       _exit_critical(&pstapending->lock, &irqL0);
+*/
+
+exit:
+_func_exit_;
+       return _SUCCESS;
+
+}
+
+
+struct sta_info* rtw_get_bcmc_stainfo(_adapter* padapter)
+{
+       struct sta_info         *psta;
+       struct sta_priv         *pstapriv = &padapter->stapriv;
+       u8 bc_addr[ETH_ALEN] = {0xff,0xff,0xff,0xff,0xff,0xff};
+_func_enter_;
+        psta = rtw_get_stainfo(pstapriv, bc_addr);
+_func_exit_;
+       return psta;
+
+}
+
+u8 rtw_access_ctrl(_adapter *padapter, u8 *mac_addr)
+{
+       u8 res = _TRUE;
+#ifdef  CONFIG_AP_MODE
+       _irqL irqL;
+       _list   *plist, *phead;
+       struct rtw_wlan_acl_node *paclnode;
+       u8 match = _FALSE;
+       struct sta_priv *pstapriv = &padapter->stapriv;
+       struct wlan_acl_pool *pacl_list = &pstapriv->acl_list;
+       _queue  *pacl_node_q =&pacl_list->acl_node_q;
+
+       _enter_critical_bh(&(pacl_node_q->lock), &irqL);
+       phead = get_list_head(pacl_node_q);
+       plist = get_next(phead);
+       while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
+       {
+               paclnode = LIST_CONTAINOR(plist, struct rtw_wlan_acl_node, list);
+               plist = get_next(plist);
+
+               if(_rtw_memcmp(paclnode->addr, mac_addr, ETH_ALEN))
+               {
+                       if(paclnode->valid == _TRUE)
+                       {
+                               match = _TRUE;
+                               break;
+                       }
+               }
+       }
+       _exit_critical_bh(&(pacl_node_q->lock), &irqL);
+
+
+       if(pacl_list->mode == 1)//accept unless in deny list
+       {
+               res = (match == _TRUE) ?  _FALSE:_TRUE;
+       }
+       else if(pacl_list->mode == 2)//deny unless in accept list
+       {
+               res = (match == _TRUE) ?  _TRUE:_FALSE;
+       }
+       else
+       {
+                res = _TRUE;
+       }
+
+#endif
+
+       return res;
+
+}
diff --git a/drivers/net/wireless/realtek/rtl8192cu/core/rtw_tdls.c b/drivers/net/wireless/realtek/rtl8192cu/core/rtw_tdls.c
new file mode 100644 (file)
index 0000000..c99fc01
--- /dev/null
@@ -0,0 +1,2940 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#define _RTW_TDLS_C_
+
+#include <drv_types.h>
+#include <ethernet.h>
+#include <rtw_tdls.h>
+#include <wifi.h>
+
+#ifdef CONFIG_TDLS
+extern unsigned char MCS_rate_2R[16];
+extern unsigned char MCS_rate_1R[16];
+extern void process_wmmps_data(_adapter *padapter, union recv_frame *precv_frame);
+extern s32 rtw_dump_xframe(_adapter *padapter, struct xmit_frame *pxmitframe);
+
+void rtw_reset_tdls_info(_adapter* padapter)
+{
+       struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
+
+       ptdlsinfo->ap_prohibited = _FALSE;
+       ptdlsinfo->setup_state = TDLS_STATE_NONE;
+       ptdlsinfo->sta_cnt = 0;
+       ptdlsinfo->sta_maximum = _FALSE;
+       ptdlsinfo->macid_index= 6;
+       ptdlsinfo->clear_cam= 0;
+       ptdlsinfo->ch_sensing = 0;
+       ptdlsinfo->cur_channel = 0;
+       ptdlsinfo->candidate_ch = 1;    //when inplement channel switching, default candidate channel is 1
+       ptdlsinfo->watchdog_count = 0;
+       ptdlsinfo->dev_discovered = 0;
+
+#ifdef CONFIG_WFD
+       ptdlsinfo->wfd_info = &padapter->wfd_info;
+#endif //CONFIG_WFD
+}
+
+int rtw_init_tdls_info(_adapter* padapter)
+{
+       int     res = _SUCCESS;
+       struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
+
+       ptdlsinfo->enable = 1;
+       rtw_reset_tdls_info(padapter);
+
+       _rtw_spinlock_init(&ptdlsinfo->cmd_lock);
+       _rtw_spinlock_init(&ptdlsinfo->hdl_lock);
+
+       return res;
+
+}
+
+void rtw_free_tdls_info(struct tdls_info *ptdlsinfo)
+{
+       _rtw_spinlock_free(&ptdlsinfo->cmd_lock);
+       _rtw_spinlock_free(&ptdlsinfo->hdl_lock);
+
+       _rtw_memset(ptdlsinfo, 0, sizeof(struct tdls_info) );
+
+}
+
+void issue_nulldata_to_TDLS_peer_STA(_adapter *padapter, struct sta_info *ptdls_sta, unsigned int power_mode)
+{
+       struct xmit_frame                       *pmgntframe;
+       struct pkt_attrib                       *pattrib;
+       unsigned char                                   *pframe;
+       struct rtw_ieee80211_hdr        *pwlanhdr;
+       unsigned short                          *fctrl;
+       struct xmit_priv                        *pxmitpriv = &(padapter->xmitpriv);
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+       {
+               return;
+       }
+
+       //update attribute
+       pattrib = &pmgntframe->attrib;
+       update_mgntframe_attrib(padapter, pattrib);
+
+       _rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
+
+       pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+
+       fctrl = &(pwlanhdr->frame_ctl);
+       *(fctrl) = 0;
+//     SetToDs(fctrl);
+       if (power_mode)
+       {
+               SetPwrMgt(fctrl);
+       }
+
+       _rtw_memcpy(pwlanhdr->addr1, ptdls_sta->hwaddr, ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr3, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
+
+       ptdls_sta->sta_xmitpriv.txseq_tid[pattrib->priority]++;
+       ptdls_sta->sta_xmitpriv.txseq_tid[pattrib->priority] &= 0xFFF;
+       pattrib->seqnum = ptdls_sta->sta_xmitpriv.txseq_tid[pattrib->priority];
+       SetSeqNum(pwlanhdr, pattrib->seqnum);
+
+       SetFrameSubType(pframe, WIFI_DATA_NULL);
+
+       pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
+       pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
+
+       pattrib->last_txcmdsz = pattrib->pktlen;
+       dump_mgntframe(padapter, pmgntframe);
+
+       return;
+}
+
+s32 update_tdls_attrib(_adapter *padapter, struct pkt_attrib *pattrib)
+{
+
+       struct sta_info *psta = NULL;
+       struct sta_priv         *pstapriv = &padapter->stapriv;
+       struct security_priv    *psecuritypriv = &padapter->securitypriv;
+       struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
+       struct qos_priv         *pqospriv= &pmlmepriv->qospriv;
+
+       s32 res=_SUCCESS;
+       sint bmcast;
+
+       bmcast = IS_MCAST(pattrib->ra);
+
+       psta = rtw_get_stainfo(pstapriv, pattrib->ra);
+       if (psta == NULL)       {
+               res =_FAIL;
+               goto exit;
+       }
+
+       pattrib->mac_id = psta->mac_id;
+
+       pattrib->psta = psta;
+
+       pattrib->ack_policy = 0;
+       // get ether_hdr_len
+       pattrib->pkt_hdrlen = ETH_HLEN;//(pattrib->ether_type == 0x8100) ? (14 + 4 ): 14; //vlan tag
+
+       if (pqospriv->qos_option &&  psta->qos_option) {
+               pattrib->priority = 1;  //tdls management frame should be AC_BK
+               pattrib->hdrlen = WLAN_HDR_A3_QOS_LEN;
+               pattrib->subtype = WIFI_QOS_DATA_TYPE;
+       } else {
+               pattrib->hdrlen = WLAN_HDR_A3_LEN;
+               pattrib->subtype = WIFI_DATA_TYPE;
+               pattrib->priority = 0;
+       }
+
+       if (psta->ieee8021x_blocked == _TRUE)
+       {
+               pattrib->encrypt = 0;
+       }
+       else
+       {
+               GET_ENCRY_ALGO(psecuritypriv, psta, pattrib->encrypt, bmcast);
+
+               switch(psecuritypriv->dot11AuthAlgrthm)
+               {
+                       case dot11AuthAlgrthm_Open:
+                       case dot11AuthAlgrthm_Shared:
+                       case dot11AuthAlgrthm_Auto:
+                               pattrib->key_idx = (u8)psecuritypriv->dot11PrivacyKeyIndex;
+                               break;
+                       case dot11AuthAlgrthm_8021X:
+                               pattrib->key_idx = 0;
+                               break;
+                       default:
+                               pattrib->key_idx = 0;
+                               break;
+               }
+       }
+
+       switch (pattrib->encrypt)
+       {
+               case _WEP40_:
+               case _WEP104_:
+                       pattrib->iv_len = 4;
+                       pattrib->icv_len = 4;
+                       break;
+               case _TKIP_:
+                       pattrib->iv_len = 8;
+                       pattrib->icv_len = 4;
+                       if(padapter->securitypriv.busetkipkey==_FAIL)
+                       {
+                               res =_FAIL;
+                               goto exit;
+                       }
+                       break;
+               case _AES_:
+                       pattrib->iv_len = 8;
+                       pattrib->icv_len = 8;
+                       break;
+               default:
+                       pattrib->iv_len = 0;
+                       pattrib->icv_len = 0;
+                       break;
+       }
+
+       if (pattrib->encrypt &&
+           ((padapter->securitypriv.sw_encrypt == _TRUE) || (psecuritypriv->hw_decrypted == _FALSE)))
+       {
+               pattrib->bswenc = _TRUE;
+       } else {
+               pattrib->bswenc = _FALSE;
+       }
+
+       //qos_en, ht_en, init rate, ,bw, ch_offset, sgi
+       pattrib->qos_en = psta->qos_option;
+       pattrib->ht_en = psta->htpriv.ht_option;
+       pattrib->raid = psta->raid;
+       pattrib->bwmode = psta->htpriv.bwmode;
+       pattrib->ch_offset = psta->htpriv.ch_offset;
+       pattrib->sgi= psta->htpriv.sgi;
+       pattrib->ampdu_en = _FALSE;
+
+       //if(pattrib->ht_en && psta->htpriv.ampdu_enable)
+       //{
+       //      if(psta->htpriv.agg_enable_bitmap & BIT(pattrib->priority))
+       //              pattrib->ampdu_en = _TRUE;
+       //}
+
+exit:
+
+       return res;
+}
+
+void free_tdls_sta(_adapter *padapter, struct sta_info *ptdls_sta)
+{
+       struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
+       struct sta_priv *pstapriv = &padapter->stapriv;
+       _irqL irqL;
+
+       //free peer sta_info
+       _enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
+       if(ptdlsinfo->sta_cnt != 0)
+               ptdlsinfo->sta_cnt--;
+       _exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
+       if( ptdlsinfo->sta_cnt < (NUM_STA - 2) )        // -2: AP + BC/MC sta
+       {
+               ptdlsinfo->sta_maximum = _FALSE;
+               _rtw_memset( &ptdlsinfo->ss_record, 0x00, sizeof(struct tdls_ss_record) );
+       }
+       //ready to clear cam
+       if(ptdls_sta->mac_id!=0){
+               ptdlsinfo->clear_cam=ptdls_sta->mac_id;
+               rtw_setstakey_cmd(padapter, (u8 *)ptdls_sta, _TRUE);
+       }
+
+       if(ptdlsinfo->sta_cnt==0){
+               rtw_tdls_cmd(padapter, myid(&(padapter->eeprompriv)), TDLS_RS_RCR);
+               ptdlsinfo->setup_state=TDLS_STATE_NONE;
+       }
+       else
+               DBG_871X("Remain tdls sta:%02x\n", ptdlsinfo->sta_cnt);
+
+       rtw_free_stainfo(padapter,  ptdls_sta);
+
+}
+
+// cam entry will be the same as mac_id
+void rtw_tdls_set_mac_id(struct tdls_info *ptdlsinfo, struct sta_info *ptdls_sta)
+{
+       if(ptdls_sta->mac_id==0)
+       {
+               ptdls_sta->mac_id = ptdlsinfo->macid_index;
+               if( (++ptdlsinfo->macid_index) > (NUM_STA -2) )
+                       ptdlsinfo->macid_index= TDLS_INI_MACID_ENTRY;
+       }
+}
+
+//TDLS encryption(if needed) will always be CCMP
+void rtw_tdls_set_key(_adapter *adapter, struct rx_pkt_attrib *prx_pkt_attrib, struct sta_info *ptdls_sta)
+{
+       if(prx_pkt_attrib->encrypt)
+       {
+               ptdls_sta->dot118021XPrivacy=_AES_;
+               rtw_setstakey_cmd(adapter, (u8*)ptdls_sta, _TRUE);
+       }
+}
+
+void rtw_tdls_process_ht_cap(_adapter *adapter, struct sta_info *ptdls_sta, u8 *data, u8 Length)
+{
+       /* save HT capabilities in the sta object */
+       _rtw_memset(&ptdls_sta->htpriv.ht_cap, 0, sizeof(struct rtw_ieee80211_ht_cap));
+       if (data && Length >= sizeof(struct rtw_ieee80211_ht_cap) )
+       {
+               ptdls_sta->flags |= WLAN_STA_HT;
+
+               ptdls_sta->flags |= WLAN_STA_WME;
+
+               _rtw_memcpy(&ptdls_sta->htpriv.ht_cap, data, sizeof(struct rtw_ieee80211_ht_cap));
+
+       } else
+               ptdls_sta->flags &= ~WLAN_STA_HT;
+
+       if(ptdls_sta->flags & WLAN_STA_HT)
+       {
+               if(adapter->registrypriv.ht_enable == _TRUE)
+               {
+                       ptdls_sta->htpriv.ht_option = _TRUE;
+               }
+               else
+               {
+                       ptdls_sta->htpriv.ht_option = _FALSE;
+                       ptdls_sta->stat_code = _STATS_FAILURE_;
+               }
+       }
+
+       //HT related cap
+       if(ptdls_sta->htpriv.ht_option)
+       {
+               //check if sta supports rx ampdu
+               if(adapter->registrypriv.ampdu_enable==1)
+                       ptdls_sta->htpriv.ampdu_enable = _TRUE;
+
+               //check if sta support s Short GI
+               if(ptdls_sta->htpriv.ht_cap.cap_info & cpu_to_le16(IEEE80211_HT_CAP_SGI_20|IEEE80211_HT_CAP_SGI_40))
+               {
+                       ptdls_sta->htpriv.sgi = _TRUE;
+               }
+
+               // bwmode would still followed AP's setting
+               if(ptdls_sta->htpriv.ht_cap.cap_info & cpu_to_le16(IEEE80211_HT_CAP_SUP_WIDTH))
+               {
+                       ptdls_sta->htpriv.bwmode = adapter->mlmeextpriv.cur_bwmode;
+                       ptdls_sta->htpriv.ch_offset = adapter->mlmeextpriv.cur_ch_offset;
+               }
+       }
+}
+
+u8 *rtw_tdls_set_ht_cap(_adapter *padapter, u8 *pframe, struct pkt_attrib *pattrib)
+{
+       struct rtw_ieee80211_ht_cap ht_capie;
+       u8 rf_type;
+
+       //HT capabilities
+       _rtw_memset(&ht_capie, 0, sizeof(struct rtw_ieee80211_ht_cap));
+
+       ht_capie.cap_info = IEEE80211_HT_CAP_SUP_WIDTH |IEEE80211_HT_CAP_SGI_20 |IEEE80211_HT_CAP_SM_PS |
+                                               IEEE80211_HT_CAP_SGI_40 | IEEE80211_HT_CAP_TX_STBC |IEEE80211_HT_CAP_DSSSCCK40;
+
+       {
+               u32 rx_packet_offset, max_recvbuf_sz;
+               rtw_hal_get_def_var(padapter, HAL_DEF_RX_PACKET_OFFSET, &rx_packet_offset);
+               rtw_hal_get_def_var(padapter, HAL_DEF_MAX_RECVBUF_SZ, &max_recvbuf_sz);
+               if(max_recvbuf_sz-rx_packet_offset>(8191-256))
+                       ht_capie.cap_info = ht_capie.cap_info |IEEE80211_HT_CAP_MAX_AMSDU;
+       }
+
+       ht_capie.ampdu_params_info = (IEEE80211_HT_CAP_AMPDU_FACTOR&0x03);
+
+       rtw_hal_get_hwreg(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
+       switch(rf_type)
+       {
+               case RF_1T1R:
+                       ht_capie.cap_info |= 0x0100;//RX STBC One spatial stream
+                       _rtw_memcpy(ht_capie.supp_mcs_set, MCS_rate_1R, 16);
+                       break;
+
+               case RF_2T2R:
+               case RF_1T2R:
+               default:
+                       ht_capie.cap_info|= 0x0200;//RX STBC two spatial stream
+                       _rtw_memcpy(ht_capie.supp_mcs_set, MCS_rate_2R, 16);
+                       break;
+       }
+
+       return(rtw_set_ie(pframe, _HT_CAPABILITY_IE_,
+                                               sizeof(struct rtw_ieee80211_ht_cap), (unsigned char*)&ht_capie, &(pattrib->pktlen)));
+}
+
+u8 *rtw_tdls_set_sup_ch(struct mlme_ext_priv *pmlmeext, u8 *pframe, struct pkt_attrib *pattrib)
+{
+       u8 sup_ch[ 30 * 2 ] = { 0x00 }, sup_ch_idx = 0, idx_5g = 2;     //For supported channel
+       do{
+               if( pmlmeext->channel_set[sup_ch_idx].ChannelNum <= 14 )
+               {
+                       sup_ch[0] = 1;  //First channel number
+                       sup_ch[1] = pmlmeext->channel_set[sup_ch_idx].ChannelNum;       //Number of channel
+               }
+               else
+               {
+                       sup_ch[idx_5g++] = pmlmeext->channel_set[sup_ch_idx].ChannelNum;
+                       sup_ch[idx_5g++] = 1;
+               }
+
+               sup_ch_idx++;
+       }
+       while( pmlmeext->channel_set[sup_ch_idx].ChannelNum != 0 );
+       return(rtw_set_ie(pframe, _SUPPORTED_CH_IE_, idx_5g, sup_ch, &(pattrib->pktlen)));
+}
+
+#ifdef CONFIG_WFD
+void rtw_tdls_process_wfd_ie(struct tdls_info *ptdlsinfo, u8 *ptr, u8 length)
+{
+       u8      wfd_ie[ 128 ] = { 0x00 };
+       u32     wfd_ielen = 0;
+       u32     wfd_offset = 0;
+       //      Try to get the TCP port information when receiving the negotiation response.
+       //
+
+       wfd_offset = 0;
+       wfd_offset = rtw_get_wfd_ie( ptr + wfd_offset, length - wfd_offset, wfd_ie, &wfd_ielen );
+       while( wfd_offset )
+       {
+               u8      attr_content[ 10 ] = { 0x00 };
+               u32     attr_contentlen = 0;
+               int     i;
+
+               DBG_871X( "[%s] WFD IE Found!!\n", __FUNCTION__ );
+               rtw_get_wfd_attr_content( wfd_ie, wfd_ielen, WFD_ATTR_DEVICE_INFO, attr_content, &attr_contentlen);
+               if ( attr_contentlen )
+               {
+                       ptdlsinfo->wfd_info->peer_rtsp_ctrlport = RTW_GET_BE16( attr_content + 2 );
+                       DBG_871X( "[%s] Peer PORT NUM = %d\n", __FUNCTION__, ptdlsinfo->wfd_info->peer_rtsp_ctrlport );
+               }
+
+               _rtw_memset( attr_content, 0x00, 10);
+               attr_contentlen = 0;
+               rtw_get_wfd_attr_content( wfd_ie, wfd_ielen, WFD_ATTR_LOCAL_IP_ADDR, attr_content, &attr_contentlen);
+               if ( attr_contentlen )
+               {
+                       _rtw_memcpy(ptdlsinfo->wfd_info->peer_ip_address, ( attr_content + 1 ), 4);
+                       DBG_871X( "[%s] Peer IP = %02u.%02u.%02u.%02u \n", __FUNCTION__,
+                               ptdlsinfo->wfd_info->peer_ip_address[0], ptdlsinfo->wfd_info->peer_ip_address[1],
+                               ptdlsinfo->wfd_info->peer_ip_address[2], ptdlsinfo->wfd_info->peer_ip_address[3]
+                               );
+               }
+               wfd_offset = rtw_get_wfd_ie( ptr + wfd_offset, length - wfd_offset, wfd_ie, &wfd_ielen );
+       }
+}
+
+void issue_tunneled_probe_req(_adapter *padapter)
+{
+       struct xmit_frame                       *pmgntframe;
+       struct pkt_attrib                       *pattrib;
+       struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
+       struct xmit_priv                        *pxmitpriv = &(padapter->xmitpriv);
+       u8 baddr[ETH_ALEN] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
+
+       DBG_871X("[%s]\n", __FUNCTION__);
+
+       if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+       {
+               return;
+       }
+
+       //update attribute
+       pattrib = &pmgntframe->attrib;
+
+       pmgntframe->frame_tag = DATA_FRAMETAG;
+       pattrib->ether_type = 0x890d;
+       pattrib->pctrl =0;
+
+       _rtw_memcpy(pattrib->dst, baddr, ETH_ALEN);
+
+       _rtw_memcpy(pattrib->src, myid(&(padapter->eeprompriv)), ETH_ALEN);
+
+       _rtw_memcpy(pattrib->ra, get_bssid(pmlmepriv), ETH_ALEN);
+       _rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
+
+       update_tdls_attrib(padapter, pattrib);
+       pattrib->qsel=pattrib->priority;
+       if (rtw_xmit_tdls_coalesce(padapter, pmgntframe, TUNNELED_PROBE_REQ) != _SUCCESS) {
+               rtw_free_xmitbuf(pxmitpriv, pmgntframe->pxmitbuf);
+               rtw_free_xmitframe(pxmitpriv, pmgntframe);
+               goto exit;
+       }
+       rtw_dump_xframe(padapter, pmgntframe);
+
+exit:
+
+       return;
+}
+
+void issue_tunneled_probe_rsp(_adapter *padapter, union recv_frame *precv_frame)
+{
+       struct xmit_frame                       *pmgntframe;
+       struct pkt_attrib                       *pattrib;
+       struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
+       struct xmit_priv                        *pxmitpriv = &(padapter->xmitpriv);
+       struct rx_pkt_attrib    *rx_pkt_pattrib = &precv_frame->u.hdr.attrib;
+
+       DBG_871X("[%s]\n", __FUNCTION__);
+
+       if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+       {
+               return;
+       }
+
+       //update attribute
+       pattrib = &pmgntframe->attrib;
+
+       pmgntframe->frame_tag = DATA_FRAMETAG;
+       pattrib->ether_type = 0x890d;
+       pattrib->pctrl =0;
+
+       _rtw_memcpy(pattrib->dst, rx_pkt_pattrib->src, ETH_ALEN);
+
+       _rtw_memcpy(pattrib->src, myid(&(padapter->eeprompriv)), ETH_ALEN);
+
+       _rtw_memcpy(pattrib->ra, get_bssid(pmlmepriv), ETH_ALEN);
+       _rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
+
+       update_tdls_attrib(padapter, pattrib);
+       pattrib->qsel=pattrib->priority;
+       if (rtw_xmit_tdls_coalesce(padapter, pmgntframe, TUNNELED_PROBE_RSP) != _SUCCESS) {
+               rtw_free_xmitbuf(pxmitpriv, pmgntframe->pxmitbuf);
+               rtw_free_xmitframe(pxmitpriv, pmgntframe);
+               goto exit;
+       }
+       rtw_dump_xframe(padapter, pmgntframe);
+
+exit:
+
+       return;
+}
+#endif //CONFIG_WFD
+
+void issue_tdls_setup_req(_adapter *padapter, u8 *mac_addr)
+{
+       struct tdls_info        *ptdlsinfo = &padapter->tdlsinfo;
+       struct xmit_frame                       *pmgntframe;
+       struct pkt_attrib                       *pattrib;
+       struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
+       struct xmit_priv                        *pxmitpriv = &(padapter->xmitpriv);
+       struct sta_priv *pstapriv = &padapter->stapriv;
+       struct sta_info *ptdls_sta= NULL;
+       _irqL irqL;
+       static u8 dialogtoken = 0;
+       u32 timeout_interval= TPK_RESEND_COUNT * 1000;  //retry timer should set at least 301 sec, using TPK_count counting 301 times.
+
+       if(ptdlsinfo->ap_prohibited == _TRUE)
+               goto exit;
+
+       if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+       {
+               return;
+       }
+
+       //update attribute
+       pattrib = &pmgntframe->attrib;
+
+       pmgntframe->frame_tag = DATA_FRAMETAG;
+       pattrib->ether_type = 0x890d;
+       pattrib->pctrl =0;
+
+       _rtw_memcpy(pattrib->dst, mac_addr, ETH_ALEN);
+       _rtw_memcpy(pattrib->src, myid(&(padapter->eeprompriv)), ETH_ALEN);
+
+       _rtw_memcpy(pattrib->ra, get_bssid(pmlmepriv), ETH_ALEN);
+       _rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
+
+       update_tdls_attrib(padapter, pattrib);
+
+       //init peer sta_info
+       ptdls_sta = rtw_get_stainfo(pstapriv, mac_addr);
+       if(ptdls_sta==NULL)
+       {
+               ptdls_sta = rtw_alloc_stainfo(pstapriv, mac_addr);
+               if(ptdls_sta)
+               {
+                       _enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
+                       if(!(ptdls_sta->tdls_sta_state & TDLS_LINKED_STATE))
+                               ptdlsinfo->sta_cnt++;
+                       _exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
+                       if( ptdlsinfo->sta_cnt == (NUM_STA - 2) )       // -2: AP + BC/MC sta
+                       {
+                               ptdlsinfo->sta_maximum  = _TRUE;
+                       }
+               }
+               else
+               {
+                       rtw_free_xmitbuf(pxmitpriv,pmgntframe->pxmitbuf);
+                       rtw_free_xmitframe(pxmitpriv, pmgntframe);
+                       goto exit;
+               }
+       }
+
+       if(ptdls_sta){
+               ptdls_sta->tdls_sta_state |= TDLS_RESPONDER_STATE;
+               //for tdls; ptdls_sta->aid is used to fill dialogtoken
+               ptdls_sta->dialog = dialogtoken;
+               dialogtoken = (dialogtoken+1)%256;
+               ptdls_sta->TDLS_PeerKey_Lifetime = timeout_interval;
+               _set_timer( &ptdls_sta->handshake_timer, TDLS_HANDSHAKE_TIME );
+       }
+
+       pattrib->qsel=pattrib->priority;
+       if(rtw_xmit_tdls_coalesce(padapter, pmgntframe, TDLS_SETUP_REQUEST) !=_SUCCESS ){
+               rtw_free_xmitbuf(pxmitpriv,pmgntframe->pxmitbuf);
+               rtw_free_xmitframe(pxmitpriv, pmgntframe);
+               goto exit;
+       }
+       rtw_dump_xframe(padapter, pmgntframe);
+
+exit:
+
+       return;
+}
+
+void issue_tdls_teardown(_adapter *padapter, u8 *mac_addr)
+{
+       struct xmit_frame                       *pmgntframe;
+       struct pkt_attrib                       *pattrib;
+       struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
+       struct xmit_priv                        *pxmitpriv = &(padapter->xmitpriv);
+       struct sta_priv *pstapriv = &padapter->stapriv;
+       struct sta_info *ptdls_sta=NULL;
+       _irqL irqL;
+
+       ptdls_sta = rtw_get_stainfo(pstapriv, mac_addr);
+       if(ptdls_sta==NULL){
+               DBG_871X("issue tdls teardown unsuccessful\n");
+               return;
+       }else{
+               ptdls_sta->tdls_sta_state=TDLS_STATE_NONE;
+       }
+
+       if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+       {
+               return;
+       }
+
+       //update attribute
+       pattrib = &pmgntframe->attrib;
+
+       pmgntframe->frame_tag = DATA_FRAMETAG;
+       pattrib->ether_type = 0x890d;
+       pattrib->pctrl =0;
+
+       _rtw_memcpy(pattrib->dst, mac_addr, ETH_ALEN);
+       _rtw_memcpy(pattrib->src, myid(&(padapter->eeprompriv)), ETH_ALEN);
+
+       _rtw_memcpy(pattrib->ra, get_bssid(pmlmepriv), ETH_ALEN);
+       _rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
+
+       update_tdls_attrib(padapter, pattrib);
+       pattrib->qsel=pattrib->priority;
+       if (rtw_xmit_tdls_coalesce(padapter, pmgntframe, TDLS_TEARDOWN) != _SUCCESS) {
+               rtw_free_xmitbuf(pxmitpriv, pmgntframe->pxmitbuf);
+               rtw_free_xmitframe(pxmitpriv, pmgntframe);
+               goto exit;
+       }
+       rtw_dump_xframe(padapter, pmgntframe);
+
+       if(ptdls_sta->tdls_sta_state & TDLS_CH_SWITCH_ON_STATE){
+               rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_CS_OFF);
+       }
+
+       if( ptdls_sta->timer_flag == 1 )
+       {
+               _enter_critical_bh(&(padapter->tdlsinfo.hdl_lock), &irqL);
+               ptdls_sta->timer_flag = 2;
+               _exit_critical_bh(&(padapter->tdlsinfo.hdl_lock), &irqL);
+       }
+       else
+               rtw_tdls_cmd(padapter, mac_addr, TDLS_FREE_STA );
+
+
+exit:
+
+       return;
+}
+
+void issue_tdls_dis_req(_adapter *padapter, u8 *mac_addr)
+{
+       struct xmit_frame                       *pmgntframe;
+       struct pkt_attrib                       *pattrib;
+       struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
+       struct xmit_priv                        *pxmitpriv = &(padapter->xmitpriv);
+       u8 baddr[ETH_ALEN] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
+
+       if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+       {
+               return;
+       }
+
+       //update attribute
+       pattrib = &pmgntframe->attrib;
+
+       pmgntframe->frame_tag = DATA_FRAMETAG;
+       pattrib->ether_type = 0x890d;
+       pattrib->pctrl =0;
+
+       if(mac_addr == NULL)
+               _rtw_memcpy(pattrib->dst, baddr, ETH_ALEN);
+       else
+               _rtw_memcpy(pattrib->dst, mac_addr, ETH_ALEN);
+
+       _rtw_memcpy(pattrib->src, myid(&(padapter->eeprompriv)), ETH_ALEN);
+
+       _rtw_memcpy(pattrib->ra, get_bssid(pmlmepriv), ETH_ALEN);
+       _rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
+
+       update_tdls_attrib(padapter, pattrib);
+       pattrib->qsel=pattrib->priority;
+       if (rtw_xmit_tdls_coalesce(padapter, pmgntframe, TDLS_DISCOVERY_REQUEST) != _SUCCESS) {
+               rtw_free_xmitbuf(pxmitpriv, pmgntframe->pxmitbuf);
+               rtw_free_xmitframe(pxmitpriv, pmgntframe);
+               goto exit;
+       }
+       rtw_dump_xframe(padapter, pmgntframe);
+       DBG_871X("issue tdls dis req\n");
+
+exit:
+
+       return;
+}
+
+void issue_tdls_setup_rsp(_adapter *padapter, union recv_frame *precv_frame)
+{
+       struct xmit_frame                       *pmgntframe;
+       struct pkt_attrib                       *pattrib;
+       struct xmit_priv                        *pxmitpriv = &(padapter->xmitpriv);
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       struct rx_pkt_attrib    *rx_pkt_pattrib = &precv_frame->u.hdr.attrib;
+       _irqL irqL;
+
+       if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+       {
+               return;
+       }
+
+       //update attribute
+       pattrib = &pmgntframe->attrib;
+
+       pmgntframe->frame_tag = DATA_FRAMETAG;
+       pattrib->ether_type = 0x890d;
+       pattrib->pctrl =0;
+
+       _rtw_memcpy(pattrib->dst, rx_pkt_pattrib->src, ETH_ALEN);
+       _rtw_memcpy(pattrib->src, myid(&(padapter->eeprompriv)), ETH_ALEN);
+
+       _rtw_memcpy(pattrib->ra, rx_pkt_pattrib->bssid, ETH_ALEN);
+       _rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
+
+       update_tdls_attrib(padapter, pattrib);
+       pattrib->qsel=pattrib->priority;
+       if (rtw_xmit_tdls_coalesce(padapter, pmgntframe, TDLS_SETUP_RESPONSE) != _SUCCESS) {
+               rtw_free_xmitbuf(pxmitpriv, pmgntframe->pxmitbuf);
+               rtw_free_xmitframe(pxmitpriv, pmgntframe);
+               goto exit;
+       }
+       rtw_dump_xframe(padapter, pmgntframe);
+
+exit:
+
+       return;
+
+}
+
+void issue_tdls_setup_cfm(_adapter *padapter, union recv_frame *precv_frame)
+{
+       struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
+       struct xmit_frame                       *pmgntframe;
+       struct pkt_attrib                       *pattrib;
+       struct xmit_priv                        *pxmitpriv = &(padapter->xmitpriv);
+       struct sta_info         *ptdls_sta=NULL;
+       _irqL irqL;
+
+       struct rx_pkt_attrib    *rx_pkt_pattrib = & precv_frame->u.hdr.attrib;
+
+       if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+       {
+               return;
+       }
+
+       //update attribute
+       pattrib = &pmgntframe->attrib;
+
+       pmgntframe->frame_tag = DATA_FRAMETAG;
+       pattrib->ether_type = 0x890d;
+       pattrib->pctrl =0;
+
+       _rtw_memcpy(pattrib->dst, rx_pkt_pattrib->src, ETH_ALEN);
+       _rtw_memcpy(pattrib->src, myid(&(padapter->eeprompriv)), ETH_ALEN);
+
+       _rtw_memcpy(pattrib->ra, rx_pkt_pattrib->bssid, ETH_ALEN);
+       _rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
+
+       update_tdls_attrib(padapter, pattrib);
+       pattrib->qsel=pattrib->priority;
+       if (rtw_xmit_tdls_coalesce(padapter, pmgntframe, TDLS_SETUP_CONFIRM) != _SUCCESS) {
+               rtw_free_xmitbuf(pxmitpriv, pmgntframe->pxmitbuf);
+               rtw_free_xmitframe(pxmitpriv, pmgntframe);
+               goto exit;
+       }
+
+       rtw_dump_xframe(padapter, pmgntframe);
+
+exit:
+
+       return;
+
+}
+
+//TDLS Discovery Response frame is a management action frame
+void issue_tdls_dis_rsp(_adapter *padapter, union recv_frame *precv_frame, u8 dialog)
+{
+       struct xmit_frame               *pmgntframe;
+       struct pkt_attrib               *pattrib;
+       unsigned char                   *pframe;
+       struct rtw_ieee80211_hdr        *pwlanhdr;
+       unsigned short          *fctrl;
+       struct xmit_priv                *pxmitpriv = &(padapter->xmitpriv);
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+
+       struct rx_pkt_attrib    *rx_pkt_pattrib = &precv_frame->u.hdr.attrib;
+
+       if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+       {
+               return;
+       }
+
+       //update attribute
+       pattrib = &pmgntframe->attrib;
+       update_mgntframe_attrib(padapter, pattrib);
+
+       _rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
+
+       pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+
+       fctrl = &(pwlanhdr->frame_ctl);
+       *(fctrl) = 0;
+
+       //      unicast probe request frame
+       _rtw_memcpy(pwlanhdr->addr1, rx_pkt_pattrib->src, ETH_ALEN);
+       _rtw_memcpy(pattrib->dst, pwlanhdr->addr1, ETH_ALEN);
+
+       _rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
+       _rtw_memcpy(pattrib->src, pwlanhdr->addr2, ETH_ALEN);
+
+       _rtw_memcpy(pwlanhdr->addr3, rx_pkt_pattrib->bssid, ETH_ALEN);
+       _rtw_memcpy(pattrib->ra, pwlanhdr->addr3, ETH_ALEN);
+
+       SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
+       pmlmeext->mgnt_seq++;
+       SetFrameSubType(pframe, WIFI_ACTION);
+
+       pframe += sizeof (struct rtw_ieee80211_hdr_3addr);
+       pattrib->pktlen = sizeof (struct rtw_ieee80211_hdr_3addr);
+
+       rtw_build_tdls_dis_rsp_ies(padapter, pmgntframe, pframe, dialog);
+
+       pattrib->nr_frags = 1;
+       pattrib->last_txcmdsz = pattrib->pktlen;
+
+       dump_mgntframe(padapter, pmgntframe);
+
+       return;
+}
+
+void issue_tdls_peer_traffic_indication(_adapter *padapter, struct sta_info *ptdls_sta)
+{
+       struct xmit_frame                       *pmgntframe;
+       struct pkt_attrib                       *pattrib;
+       struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
+       struct xmit_priv                        *pxmitpriv = &(padapter->xmitpriv);
+
+       static u8 dialogtoken=0;
+
+       if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+       {
+               return;
+       }
+
+       //update attribute
+       pattrib = &pmgntframe->attrib;
+
+       pmgntframe->frame_tag = DATA_FRAMETAG;
+       pattrib->ether_type = 0x890d;
+       pattrib->pctrl =0;
+
+       _rtw_memcpy(pattrib->dst, ptdls_sta->hwaddr, ETH_ALEN);
+       _rtw_memcpy(pattrib->src, myid(&(padapter->eeprompriv)), ETH_ALEN);
+
+       _rtw_memcpy(pattrib->ra, get_bssid(pmlmepriv), ETH_ALEN);
+       _rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
+
+       //for tdls; pattrib->nr_frags is used to fill dialogtoken
+       ptdls_sta->dialog = dialogtoken;
+       dialogtoken = (dialogtoken+1)%256;
+       //PTI frame's priority should be AC_VO
+       pattrib->priority = 7;
+
+       update_tdls_attrib(padapter, pattrib);
+       pattrib->qsel=pattrib->priority;
+       if (rtw_xmit_tdls_coalesce(padapter, pmgntframe, TDLS_PEER_TRAFFIC_INDICATION) != _SUCCESS) {
+               rtw_free_xmitbuf(pxmitpriv, pmgntframe->pxmitbuf);
+               rtw_free_xmitframe(pxmitpriv, pmgntframe);
+               goto exit;
+       }
+       rtw_dump_xframe(padapter, pmgntframe);
+
+exit:
+
+       return;
+}
+
+void issue_tdls_ch_switch_req(_adapter *padapter, u8 *mac_addr)
+{
+       struct xmit_frame       *pmgntframe;
+       struct pkt_attrib       *pattrib;
+       struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
+       struct xmit_priv        *pxmitpriv = &(padapter->xmitpriv);
+
+       if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+       {
+               return;
+       }
+
+       //update attribute
+       pattrib = &pmgntframe->attrib;
+
+       pmgntframe->frame_tag = DATA_FRAMETAG;
+       pattrib->ether_type = 0x890d;
+       pattrib->pctrl =0;
+
+       _rtw_memcpy(pattrib->dst, mac_addr, ETH_ALEN);
+       _rtw_memcpy(pattrib->src, myid(&(padapter->eeprompriv)), ETH_ALEN);
+
+       _rtw_memcpy(pattrib->ra, get_bssid(pmlmepriv), ETH_ALEN);
+       _rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
+
+       update_tdls_attrib(padapter, pattrib);
+
+       pattrib->qsel=pattrib->priority;
+       if(rtw_xmit_tdls_coalesce(padapter, pmgntframe, TDLS_CHANNEL_SWITCH_REQUEST) !=_SUCCESS ){
+               rtw_free_xmitbuf(pxmitpriv,pmgntframe->pxmitbuf);
+               rtw_free_xmitframe(pxmitpriv, pmgntframe);
+               goto exit;
+       }
+       rtw_dump_xframe(padapter, pmgntframe);
+
+exit:
+
+       return;
+}
+
+void issue_tdls_ch_switch_rsp(_adapter *padapter, u8 *mac_addr)
+{
+       struct xmit_frame       *pmgntframe;
+       struct pkt_attrib       *pattrib;
+       struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
+       struct xmit_priv        *pxmitpriv = &(padapter->xmitpriv);
+
+        _irqL irqL;
+
+       if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+       {
+               return;
+       }
+
+       //update attribute
+       pattrib = &pmgntframe->attrib;
+
+       pmgntframe->frame_tag = DATA_FRAMETAG;
+       pattrib->ether_type = 0x890d;
+       pattrib->pctrl =0;
+
+       _rtw_memcpy(pattrib->dst, mac_addr, ETH_ALEN);
+       _rtw_memcpy(pattrib->src, myid(&(padapter->eeprompriv)), ETH_ALEN);
+
+       _rtw_memcpy(pattrib->ra, get_bssid(pmlmepriv), ETH_ALEN);
+       _rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
+
+       update_tdls_attrib(padapter, pattrib);
+
+       pattrib->qsel=pattrib->priority;
+/*
+       _enter_critical_bh(&pxmitpriv->lock, &irqL);
+       if(xmitframe_enqueue_for_tdls_sleeping_sta(padapter, pmgntframe)==_TRUE){
+               _exit_critical_bh(&pxmitpriv->lock, &irqL);
+               return _FALSE;
+       }
+*/
+       if(rtw_xmit_tdls_coalesce(padapter, pmgntframe, TDLS_CHANNEL_SWITCH_RESPONSE) !=_SUCCESS ){
+               rtw_free_xmitbuf(pxmitpriv,pmgntframe->pxmitbuf);
+               rtw_free_xmitframe(pxmitpriv, pmgntframe);
+               goto exit;
+       }
+       rtw_dump_xframe(padapter, pmgntframe);
+
+exit:
+
+       return;
+}
+
+sint On_TDLS_Dis_Rsp(_adapter *adapter, union recv_frame *precv_frame)
+{
+       struct sta_info *ptdls_sta = NULL, *psta = rtw_get_stainfo(&(adapter->stapriv), get_bssid(&(adapter->mlmepriv)));
+       struct recv_priv *precvpriv = &(adapter->recvpriv);
+       u8 *ptr = precv_frame->u.hdr.rx_data, *psa;
+       struct rx_pkt_attrib *pattrib = &(precv_frame->u.hdr.attrib);
+       struct tdls_info *ptdlsinfo = &(adapter->tdlsinfo);
+       u8 empty_addr[ETH_ALEN] = { 0x00 };
+       int UndecoratedSmoothedPWDB;
+
+
+       //WFDTDLS: for sigma test, not to setup direct link automatically
+       ptdlsinfo->dev_discovered = 1;
+
+#ifdef CONFIG_TDLS_AUTOSETUP
+       psa = get_sa(ptr);
+       ptdls_sta = rtw_get_stainfo(&(adapter->stapriv), psa);
+
+       if(ptdls_sta != NULL)
+       {
+               ptdls_sta->tdls_sta_state |= TDLS_ALIVE_STATE;
+
+               //Record the tdls sta with lowest signal strength
+               if( (ptdlsinfo->sta_maximum == _TRUE) && (ptdls_sta->alive_count >= 1) )
+               {
+                       if( _rtw_memcmp(ptdlsinfo->ss_record.macaddr, empty_addr, ETH_ALEN) )
+                       {
+                               _rtw_memcpy(ptdlsinfo->ss_record.macaddr, psa, ETH_ALEN);
+                               ptdlsinfo->ss_record.RxPWDBAll = pattrib->RxPWDBAll;
+                       }
+                       else
+                       {
+                               if( ptdlsinfo->ss_record.RxPWDBAll < pattrib->RxPWDBAll )
+                               {
+                                       _rtw_memcpy(ptdlsinfo->ss_record.macaddr, psa, ETH_ALEN);
+                                       ptdlsinfo->ss_record.RxPWDBAll = pattrib->RxPWDBAll;
+                               }
+                       }
+       }
+
+       }
+       else
+       {
+               if( ptdlsinfo->sta_maximum == _TRUE)
+               {
+                       if( _rtw_memcmp( ptdlsinfo->ss_record.macaddr, empty_addr, ETH_ALEN ) )
+                       {
+                               //All traffics are busy, do not set up another direct link.
+                               return _FAIL;
+                       }
+                       else
+                       {
+                               if( pattrib->RxPWDBAll > ptdlsinfo->ss_record.RxPWDBAll )
+                               {
+                                       issue_tdls_teardown(adapter, ptdlsinfo->ss_record.macaddr);
+                               }
+                               else
+                               {
+                                       return _FAIL;
+                               }
+                       }
+               }
+
+               rtw_hal_get_def_var(adapter, HAL_DEF_UNDERCORATEDSMOOTHEDPWDB, &UndecoratedSmoothedPWDB);
+
+               if( pattrib->RxPWDBAll + TDLS_SIGNAL_THRESH >= UndecoratedSmoothedPWDB);
+               {
+                       DBG_871X("pattrib->RxPWDBAll=%d, pdmpriv->UndecoratedSmoothedPWDB=%d\n", pattrib->RxPWDBAll, UndecoratedSmoothedPWDB);
+                       issue_tdls_setup_req(adapter, psa);
+               }
+       }
+#endif //CONFIG_TDLS_AUTOSETUP
+
+       return _SUCCESS;
+}
+
+sint On_TDLS_Setup_Req(_adapter *adapter, union recv_frame *precv_frame)
+{
+       struct tdls_info *ptdlsinfo = &adapter->tdlsinfo;
+       u8 *psa, *pmyid;
+       struct sta_info *ptdls_sta= NULL;
+       struct sta_priv *pstapriv = &adapter->stapriv;
+       u8 *ptr = precv_frame->u.hdr.rx_data;
+       struct mlme_priv *pmlmepriv = &(adapter->mlmepriv);
+       struct security_priv *psecuritypriv = &adapter->securitypriv;
+       _irqL irqL;
+       struct rx_pkt_attrib    *prx_pkt_attrib = &precv_frame->u.hdr.attrib;
+       u8 *prsnie, *ppairwise_cipher;
+       u8 i, k, pairwise_count;
+       u8 ccmp_have=0, rsnie_have=0;
+       u16 j;
+       u8 SNonce[32];
+       u32 *timeout_interval;
+       sint parsing_length;    //frame body length, without icv_len
+       PNDIS_802_11_VARIABLE_IEs       pIE;
+       u8 FIXED_IE = 5;
+       unsigned char           supportRate[16];
+       int                             supportRateNum = 0;
+
+       psa = get_sa(ptr);
+       ptdls_sta = rtw_get_stainfo(pstapriv, psa);
+
+       pmyid=myid(&(adapter->eeprompriv));
+       ptr +=prx_pkt_attrib->hdrlen + prx_pkt_attrib->iv_len+LLC_HEADER_SIZE+TYPE_LENGTH_FIELD_SIZE+1;
+       parsing_length= ((union recv_frame *)precv_frame)->u.hdr.len
+                       -prx_pkt_attrib->hdrlen
+                       -prx_pkt_attrib->iv_len
+                       -prx_pkt_attrib->icv_len
+                       -LLC_HEADER_SIZE
+                       -ETH_TYPE_LEN
+                       -PAYLOAD_TYPE_LEN
+                       -FIXED_IE;
+
+       if(ptdlsinfo->ap_prohibited == _TRUE)
+       {
+               goto exit;
+       }
+
+       if(ptdls_sta==NULL){
+               ptdls_sta = rtw_alloc_stainfo(pstapriv, psa);
+       }else{
+               if(ptdls_sta->tdls_sta_state & TDLS_LINKED_STATE){
+                       //If the direct link is already set up
+                       //Process as re-setup after tear down
+                       DBG_871X("re-setup a direct link\n");
+               }
+               //already receiving TDLS setup request
+               else if(ptdls_sta->tdls_sta_state & TDLS_INITIATOR_STATE){
+                       DBG_871X("receive duplicated TDLS setup request frame in handshaking\n");
+                       goto exit;
+               }
+               //When receiving and sending setup_req to the same link at the same time, STA with higher MAC_addr would be initiator
+               //following is to check out MAC_addr
+               else if(ptdls_sta->tdls_sta_state & TDLS_RESPONDER_STATE){
+                       DBG_871X("receive setup_req after sending setup_req\n");
+                       for (i=0;i<6;i++){
+                               if(*(pmyid+i)==*(psa+i)){
+                               }
+                               else if(*(pmyid+i)>*(psa+i)){
+                                       goto exit;
+                               }else if(*(pmyid+i)<*(psa+i)){
+                                       ptdls_sta->tdls_sta_state=TDLS_INITIATOR_STATE;
+                                       break;
+                               }
+                       }
+               }
+       }
+
+       if(ptdls_sta)
+       {
+               ptdls_sta->dialog = *(ptr+2);   //copy dialog token
+               ptdls_sta->stat_code = 0;
+
+               //parsing information element
+               for(j=FIXED_IE; j<parsing_length;){
+
+                       pIE = (PNDIS_802_11_VARIABLE_IEs)(ptr+ j);
+
+                       switch (pIE->ElementID)
+                       {
+                               case _SUPPORTEDRATES_IE_:
+                                       _rtw_memcpy(supportRate, pIE->data, pIE->Length);
+                                       supportRateNum = pIE->Length;
+                                       break;
+                               case _COUNTRY_IE_:
+                                       break;
+                               case _EXT_SUPPORTEDRATES_IE_:
+                                       if(supportRateNum<=sizeof(supportRate))
+                                       {
+                                               _rtw_memcpy(supportRate+supportRateNum, pIE->data, pIE->Length);
+                                               supportRateNum += pIE->Length;
+                                       }
+                                       break;
+                               case _SUPPORTED_CH_IE_:
+                                       break;
+                               case _RSN_IE_2_:
+                                       rsnie_have=1;
+                                       if(prx_pkt_attrib->encrypt){
+                                               prsnie=(u8*)pIE;
+                                               //check whether initiator STA has CCMP pairwise_cipher.
+                                               ppairwise_cipher=prsnie+10;
+                                               _rtw_memcpy(&pairwise_count, (u16*)(ppairwise_cipher-2), 1);
+                                               for(k=0;k<pairwise_count;k++){
+                                                       if(_rtw_memcmp( ppairwise_cipher+4*k, RSN_CIPHER_SUITE_CCMP, 4)==_TRUE)
+                                                               ccmp_have=1;
+                                               }
+                                               if(ccmp_have==0){
+                                                       //invalid contents of RSNIE
+                                                       ptdls_sta->stat_code=72;
+                                               }
+                                       }
+                                       break;
+                               case _EXT_CAP_IE_:
+                                       break;
+                               case _VENDOR_SPECIFIC_IE_:
+                                       break;
+                               case _FTIE_:
+                                       if(prx_pkt_attrib->encrypt)
+                                               _rtw_memcpy(SNonce, (ptr+j+52), 32);
+                                       break;
+                               case _TIMEOUT_ITVL_IE_:
+                                       if(prx_pkt_attrib->encrypt)
+                                               timeout_interval = (u32 *)(ptr+j+3);
+                                       break;
+                               case _RIC_Descriptor_IE_:
+                                       break;
+                               case _HT_CAPABILITY_IE_:
+                                       rtw_tdls_process_ht_cap(adapter, ptdls_sta, pIE->data, pIE->Length);
+                                       break;
+                               case EID_BSSCoexistence:
+                                       break;
+                               case _LINK_ID_IE_:
+                                       if(_rtw_memcmp(get_bssid(pmlmepriv), pIE->data, 6) == _FALSE)
+                                       {
+                                               //not in the same BSS
+                                               ptdls_sta->stat_code=7;
+                                       }
+                                       break;
+                               default:
+                                       break;
+                       }
+
+                       j += (pIE->Length + 2);
+
+               }
+
+               //update station supportRate
+               ptdls_sta->bssratelen = supportRateNum;
+               _rtw_memcpy(ptdls_sta->bssrateset, supportRate, supportRateNum);
+
+               //check status code
+               //if responder STA has/hasn't security on AP, but request hasn't/has RSNIE, it should reject
+               if(ptdls_sta->stat_code == 0 )
+               {
+                       if(rsnie_have && (prx_pkt_attrib->encrypt==0)){
+                               //security disabled
+                               ptdls_sta->stat_code = 5;
+                       }else if(rsnie_have==0 && (prx_pkt_attrib->encrypt)){
+                               //request haven't RSNIE
+                               ptdls_sta->stat_code = 38;
+                       }
+
+#ifdef CONFIG_WFD
+                       //WFD test plan version 0.18.2 test item 5.1.5
+                       //SoUT does not use TDLS if AP uses weak security
+                       if ( adapter->wdinfo.wfd_tdls_enable )
+                       {
+                               if(rsnie_have && (prx_pkt_attrib->encrypt != _AES_))
+                               {
+                                       ptdls_sta->stat_code = 5;
+                               }
+                       }
+#endif //CONFIG_WFD
+               }
+
+               ptdls_sta->tdls_sta_state|= TDLS_INITIATOR_STATE;
+               if(prx_pkt_attrib->encrypt){
+                       _rtw_memcpy(ptdls_sta->SNonce, SNonce, 32);
+                       _rtw_memcpy(&(ptdls_sta->TDLS_PeerKey_Lifetime), timeout_interval, 4);
+               }
+               _enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
+               if(!(ptdls_sta->tdls_sta_state & TDLS_LINKED_STATE))
+                       ptdlsinfo->sta_cnt++;
+               _exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
+               if( ptdlsinfo->sta_cnt == (NUM_STA - 2) )       // -2: AP + BC/MC sta
+               {
+                       ptdlsinfo->sta_maximum = _TRUE;
+               }
+
+#ifdef CONFIG_WFD
+               rtw_tdls_process_wfd_ie(ptdlsinfo, ptr + FIXED_IE, parsing_length - FIXED_IE);
+#endif // CONFIG_WFD
+
+       }
+       else
+       {
+               goto exit;
+       }
+
+       issue_tdls_setup_rsp(adapter, precv_frame);
+
+       if(ptdls_sta->stat_code==0)
+       {
+               _set_timer( &ptdls_sta->handshake_timer, TDLS_HANDSHAKE_TIME);
+       }
+       else            //status code!=0 ; setup unsuccess
+       {
+               free_tdls_sta(adapter, ptdls_sta);
+       }
+
+exit:
+
+       return _FAIL;
+}
+
+sint On_TDLS_Setup_Rsp(_adapter *adapter, union recv_frame *precv_frame)
+{
+       struct tdls_info *ptdlsinfo = &adapter->tdlsinfo;
+       struct sta_info *ptdls_sta= NULL;
+       struct sta_priv *pstapriv = &adapter->stapriv;
+       u8 *ptr = precv_frame->u.hdr.rx_data;
+       _irqL irqL;
+       struct rx_pkt_attrib    *prx_pkt_attrib = &precv_frame->u.hdr.attrib;
+       u8 *psa;
+       u16 stat_code;
+       sint parsing_length;    //frame body length, without icv_len
+       PNDIS_802_11_VARIABLE_IEs       pIE;
+       u8 FIXED_IE =7;
+       u8  *pftie, *ptimeout_ie, *plinkid_ie, *prsnie, *pftie_mic, *ppairwise_cipher;
+       u16 pairwise_count, j, k;
+       u8 verify_ccmp=0;
+       unsigned char           supportRate[16];
+       int                             supportRateNum = 0;
+
+       psa = get_sa(ptr);
+       ptdls_sta = rtw_get_stainfo(pstapriv, psa);
+
+       if ( NULL == ptdls_sta )
+       {
+               return _FAIL;
+       }
+
+       ptr +=prx_pkt_attrib->hdrlen + prx_pkt_attrib->iv_len+LLC_HEADER_SIZE+TYPE_LENGTH_FIELD_SIZE+1;
+       parsing_length= ((union recv_frame *)precv_frame)->u.hdr.len
+                       -prx_pkt_attrib->hdrlen
+                       -prx_pkt_attrib->iv_len
+                       -prx_pkt_attrib->icv_len
+                       -LLC_HEADER_SIZE
+                       -TYPE_LENGTH_FIELD_SIZE
+                       -1
+                       -FIXED_IE;
+
+       _rtw_memcpy(&stat_code, ptr+2, 2);
+
+       if(stat_code!=0)
+       {
+               DBG_871X( "[%s] status_code = %d, free_tdls_sta\n", __FUNCTION__, stat_code );
+               free_tdls_sta(adapter, ptdls_sta);
+               return _FAIL;
+       }
+
+       stat_code = 0;
+
+       //parsing information element
+       for(j=FIXED_IE; j<parsing_length;)
+       {
+               pIE = (PNDIS_802_11_VARIABLE_IEs)(ptr+ j);
+
+               switch (pIE->ElementID)
+               {
+                       case _SUPPORTEDRATES_IE_:
+                               _rtw_memcpy(supportRate, pIE->data, pIE->Length);
+                               supportRateNum = pIE->Length;
+                               break;
+                       case _COUNTRY_IE_:
+                               break;
+                       case _EXT_SUPPORTEDRATES_IE_:
+                               if(supportRateNum<=sizeof(supportRate))
+                               {
+                                       _rtw_memcpy(supportRate+supportRateNum, pIE->data, pIE->Length);
+                                       supportRateNum += pIE->Length;
+                               }
+                               break;
+                       case _SUPPORTED_CH_IE_:
+                               break;
+                       case _RSN_IE_2_:
+                               prsnie=(u8*)pIE;
+                               //check whether responder STA has CCMP pairwise_cipher.
+                               ppairwise_cipher=prsnie+10;
+                               _rtw_memcpy(&pairwise_count, (u16*)(ppairwise_cipher-2), 2);
+                               for(k=0;k<pairwise_count;k++){
+                                       if(_rtw_memcmp( ppairwise_cipher+4*k, RSN_CIPHER_SUITE_CCMP, 4)==_TRUE)
+                                               verify_ccmp=1;
+                               }
+                       case _EXT_CAP_IE_:
+                               break;
+                       case _VENDOR_SPECIFIC_IE_:
+                               break;
+                       case _FTIE_:
+                               pftie=(u8*)pIE;
+                               _rtw_memcpy(ptdls_sta->ANonce, (ptr+j+20), 32);
+                               break;
+                       case _TIMEOUT_ITVL_IE_:
+                               ptimeout_ie=(u8*)pIE;
+                               break;
+                       case _RIC_Descriptor_IE_:
+                               break;
+                       case _HT_CAPABILITY_IE_:
+                               rtw_tdls_process_ht_cap(adapter, ptdls_sta, pIE->data, pIE->Length);
+                               break;
+                       case EID_BSSCoexistence:
+                               break;
+                       case _LINK_ID_IE_:
+                               plinkid_ie=(u8*)pIE;
+                               break;
+                       default:
+                               break;
+               }
+
+               j += (pIE->Length + 2);
+
+       }
+
+       //update station supportRate
+       ptdls_sta->bssratelen = supportRateNum;
+       _rtw_memcpy(ptdls_sta->bssrateset, supportRate, supportRateNum);
+
+#ifdef CONFIG_WFD
+       rtw_tdls_process_wfd_ie(ptdlsinfo, ptr + FIXED_IE, parsing_length - FIXED_IE);
+#endif // CONFIG_WFD
+
+       if(stat_code != 0)
+       {
+               ptdls_sta->stat_code = stat_code;
+       }
+       else
+       {
+               if(prx_pkt_attrib->encrypt)
+               {
+                       if(verify_ccmp==1)
+                       {
+                               wpa_tdls_generate_tpk(adapter, ptdls_sta);
+                               ptdls_sta->stat_code=0;
+                               if(tdls_verify_mic(ptdls_sta->tpk.kck, 2, plinkid_ie, prsnie, ptimeout_ie, pftie)==0)   //0: Invalid, 1: valid
+                               {
+                                       free_tdls_sta(adapter, ptdls_sta);
+                                       return _FAIL;
+                               }
+                       }
+                       else
+                       {
+                               ptdls_sta->stat_code=72;        //invalide contents of RSNIE
+                       }
+
+               }else{
+                       ptdls_sta->stat_code=0;
+               }
+       }
+
+       DBG_871X("issue_tdls_setup_cfm\n");
+       issue_tdls_setup_cfm(adapter, precv_frame);
+
+       if(ptdls_sta->stat_code==0)
+       {
+               ptdlsinfo->setup_state = TDLS_LINKED_STATE;
+
+               if( ptdls_sta->tdls_sta_state & TDLS_RESPONDER_STATE )
+               {
+                       ptdls_sta->tdls_sta_state |= TDLS_LINKED_STATE;
+                       _cancel_timer_ex( &ptdls_sta->handshake_timer);
+#ifdef CONFIG_TDLS_AUTOCHECKALIVE
+                       _set_timer( &ptdls_sta->alive_timer1, TDLS_ALIVE_TIMER_PH1);
+#endif //CONFIG_TDLS_AUTOSETUP
+               }
+
+               rtw_tdls_set_mac_id(ptdlsinfo, ptdls_sta);
+               rtw_tdls_set_key(adapter, prx_pkt_attrib, ptdls_sta);
+
+               rtw_tdls_cmd(adapter, ptdls_sta->hwaddr, TDLS_WRCR);
+
+       }
+       else //status code!=0 ; setup unsuccessful
+       {
+               free_tdls_sta(adapter, ptdls_sta);
+       }
+
+       return _FAIL;
+
+}
+
+sint On_TDLS_Setup_Cfm(_adapter *adapter, union recv_frame *precv_frame)
+{
+       struct tdls_info *ptdlsinfo = &adapter->tdlsinfo;
+       struct sta_info *ptdls_sta= NULL;
+       struct sta_priv *pstapriv = &adapter->stapriv;
+       u8 *ptr = precv_frame->u.hdr.rx_data;
+       _irqL irqL;
+       struct rx_pkt_attrib    *prx_pkt_attrib = &precv_frame->u.hdr.attrib;
+       u8 *psa;
+       u16 stat_code;
+       sint parsing_length;
+       PNDIS_802_11_VARIABLE_IEs       pIE;
+       u8 FIXED_IE =5;
+       u8  *pftie, *ptimeout_ie, *plinkid_ie, *prsnie, *pftie_mic, *ppairwise_cipher;
+       u16 j, pairwise_count;
+
+       psa = get_sa(ptr);
+       ptdls_sta = rtw_get_stainfo(pstapriv, psa);
+
+       ptr +=prx_pkt_attrib->hdrlen + prx_pkt_attrib->iv_len+LLC_HEADER_SIZE+TYPE_LENGTH_FIELD_SIZE+1;
+       parsing_length= ((union recv_frame *)precv_frame)->u.hdr.len
+                       -prx_pkt_attrib->hdrlen
+                       -prx_pkt_attrib->iv_len
+                       -prx_pkt_attrib->icv_len
+                       -LLC_HEADER_SIZE
+                       -ETH_TYPE_LEN
+                       -PAYLOAD_TYPE_LEN
+                       -FIXED_IE;
+       _rtw_memcpy(&stat_code, ptr+2, 2);
+
+       if(stat_code!=0){
+               DBG_871X( "[%s] stat_code = %d\n, free_tdls_sta", __FUNCTION__, stat_code );
+               free_tdls_sta(adapter, ptdls_sta);
+               return _FAIL;
+       }
+
+       if(prx_pkt_attrib->encrypt){
+               //parsing information element
+               for(j=FIXED_IE; j<parsing_length;){
+
+                       pIE = (PNDIS_802_11_VARIABLE_IEs)(ptr+ j);
+
+                       switch (pIE->ElementID)
+                       {
+                               case _RSN_IE_2_:
+                                       prsnie=(u8*)pIE;
+                                       break;
+                               case _VENDOR_SPECIFIC_IE_:
+                                       break;
+                               case _FTIE_:
+                                       pftie=(u8*)pIE;
+                                       break;
+                               case _TIMEOUT_ITVL_IE_:
+                                       ptimeout_ie=(u8*)pIE;
+                                       break;
+                               case _HT_EXTRA_INFO_IE_:
+                                       break;
+                               case _LINK_ID_IE_:
+                                       plinkid_ie=(u8*)pIE;
+                                       break;
+                               default:
+                                       break;
+                       }
+
+                       j += (pIE->Length + 2);
+
+               }
+
+               //verify mic in FTIE MIC field
+               if(tdls_verify_mic(ptdls_sta->tpk.kck, 3, plinkid_ie, prsnie, ptimeout_ie, pftie)==0){  //0: Invalid, 1: Valid
+                       free_tdls_sta(adapter, ptdls_sta);
+                       return _FAIL;
+               }
+
+       }
+
+       ptdlsinfo->setup_state = TDLS_LINKED_STATE;
+       if( ptdls_sta->tdls_sta_state & TDLS_INITIATOR_STATE )
+       {
+               ptdls_sta->tdls_sta_state|=TDLS_LINKED_STATE;
+               _cancel_timer_ex( &ptdls_sta->handshake_timer);
+#ifdef CONFIG_TDLS_AUTOCHECKALIVE
+               _set_timer( &ptdls_sta->alive_timer1, TDLS_ALIVE_TIMER_PH1);
+#endif //CONFIG_TDLS_AUTOCHECKALIVE
+       }
+
+       rtw_tdls_set_mac_id(ptdlsinfo, ptdls_sta);
+       rtw_tdls_set_key(adapter, prx_pkt_attrib, ptdls_sta);
+
+       rtw_tdls_cmd(adapter, ptdls_sta->hwaddr, TDLS_WRCR);
+
+       return _FAIL;
+
+}
+
+sint On_TDLS_Dis_Req(_adapter *adapter, union recv_frame *precv_frame)
+{
+       struct rx_pkt_attrib    *prx_pkt_attrib = &precv_frame->u.hdr.attrib;
+       struct sta_priv *pstapriv = &adapter->stapriv;
+       struct sta_info *psta_ap;
+       u8 *ptr = precv_frame->u.hdr.rx_data;
+       sint parsing_length;    //frame body length, without icv_len
+       PNDIS_802_11_VARIABLE_IEs       pIE;
+       u8 FIXED_IE = 3, *dst, *pdialog = NULL;
+       u16 j;
+
+       ptr +=prx_pkt_attrib->hdrlen + prx_pkt_attrib->iv_len + LLC_HEADER_SIZE+TYPE_LENGTH_FIELD_SIZE + 1;
+       pdialog=ptr+2;
+
+       parsing_length= ((union recv_frame *)precv_frame)->u.hdr.len
+                       -prx_pkt_attrib->hdrlen
+                       -prx_pkt_attrib->iv_len
+                       -prx_pkt_attrib->icv_len
+                       -LLC_HEADER_SIZE
+                       -TYPE_LENGTH_FIELD_SIZE
+                       -1
+                       -FIXED_IE;
+
+       //parsing information element
+       for(j=FIXED_IE; j<parsing_length;){
+
+               pIE = (PNDIS_802_11_VARIABLE_IEs)(ptr+ j);
+
+               switch (pIE->ElementID)
+               {
+                       case _LINK_ID_IE_:
+                               psta_ap = rtw_get_stainfo(pstapriv, pIE->data);
+                               if(psta_ap == NULL)
+                               {
+                                       goto exit;
+                               }
+                               dst = pIE->data + 12;
+                               if( (MacAddr_isBcst(dst) == _FALSE) && (_rtw_memcmp(myid(&(adapter->eeprompriv)), dst, 6) == _FALSE) )
+                               {
+                                       goto exit;
+                               }
+                               break;
+                       default:
+                               break;
+               }
+
+               j += (pIE->Length + 2);
+
+       }
+
+       //check frame contents
+
+       issue_tdls_dis_rsp(adapter, precv_frame, *(pdialog) );
+
+exit:
+
+       return _FAIL;
+
+}
+
+sint On_TDLS_Teardown(_adapter *adapter, union recv_frame *precv_frame)
+{
+       u8 *psa;
+       u8 *ptr = precv_frame->u.hdr.rx_data;
+       struct rx_pkt_attrib    *prx_pkt_attrib = &precv_frame->u.hdr.attrib;
+       struct mlme_ext_priv    *pmlmeext = &(adapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       struct sta_priv         *pstapriv = &adapter->stapriv;
+       struct sta_info *ptdls_sta= NULL;
+       _irqL irqL;
+
+       psa = get_sa(ptr);
+
+       ptdls_sta = rtw_get_stainfo(pstapriv, psa);
+       if(ptdls_sta!=NULL){
+               if(ptdls_sta->tdls_sta_state & TDLS_CH_SWITCH_ON_STATE){
+                       rtw_tdls_cmd(adapter, ptdls_sta->hwaddr, TDLS_CS_OFF);
+               }
+               free_tdls_sta(adapter, ptdls_sta);
+       }
+
+       return _FAIL;
+
+}
+
+u8 TDLS_check_ch_state(uint state){
+       if(     (state & TDLS_CH_SWITCH_ON_STATE) &&
+               (state & TDLS_AT_OFF_CH_STATE) &&
+               (state & TDLS_PEER_AT_OFF_STATE) ){
+
+               if(state & TDLS_PEER_SLEEP_STATE)
+                       return 2;       //U-APSD + ch. switch
+               else
+                       return 1;       //ch. switch
+       }else
+               return 0;
+}
+
+//we process buffered data for 1. U-APSD, 2. ch. switch, 3. U-APSD + ch. switch here
+sint On_TDLS_Peer_Traffic_Rsp(_adapter *adapter, union recv_frame *precv_frame)
+{
+       struct tdls_info *ptdlsinfo = &adapter->tdlsinfo;
+       struct mlme_ext_priv *pmlmeext = &adapter->mlmeextpriv;
+       struct rx_pkt_attrib    *pattrib = & precv_frame->u.hdr.attrib;
+       struct sta_priv *pstapriv = &adapter->stapriv;
+       //get peer sta infomation
+       struct sta_info *ptdls_sta = rtw_get_stainfo(pstapriv, pattrib->src);
+       u8 wmmps_ac=0, state=TDLS_check_ch_state(ptdls_sta->tdls_sta_state);
+       int i;
+
+       ptdls_sta->sta_stats.rx_data_pkts++;
+
+       //receive peer traffic response frame, sleeping STA wakes up
+       //ptdls_sta->tdls_sta_state &= ~(TDLS_PEER_SLEEP_STATE);
+       process_wmmps_data( adapter, precv_frame);
+
+       // if noticed peer STA wakes up by receiving peer traffic response
+       // and we want to do channel swtiching, then we will transmit channel switch request first
+       if(ptdls_sta->tdls_sta_state & TDLS_APSD_CHSW_STATE){
+               issue_tdls_ch_switch_req(adapter, pattrib->src);
+               ptdls_sta->tdls_sta_state &= ~(TDLS_APSD_CHSW_STATE);
+               return  _FAIL;
+       }
+
+       //check 4-AC queue bit
+       if(ptdls_sta->uapsd_vo || ptdls_sta->uapsd_vi || ptdls_sta->uapsd_be || ptdls_sta->uapsd_bk)
+               wmmps_ac=1;
+
+       //if it's a direct link and have buffered frame
+       if(ptdls_sta->tdls_sta_state & TDLS_LINKED_STATE){
+               if(wmmps_ac && state)
+               {
+                       _irqL irqL;
+                       _list   *xmitframe_plist, *xmitframe_phead;
+                       struct xmit_frame *pxmitframe=NULL;
+
+                       _enter_critical_bh(&ptdls_sta->sleep_q.lock, &irqL);
+
+                       xmitframe_phead = get_list_head(&ptdls_sta->sleep_q);
+                       xmitframe_plist = get_next(xmitframe_phead);
+
+                       //transmit buffered frames
+                       while ((rtw_end_of_queue_search(xmitframe_phead, xmitframe_plist)) == _FALSE)
+                       {
+                               pxmitframe = LIST_CONTAINOR(xmitframe_plist, struct xmit_frame, list);
+                               xmitframe_plist = get_next(xmitframe_plist);
+                               rtw_list_delete(&pxmitframe->list);
+
+                               ptdls_sta->sleepq_len--;
+                               if(ptdls_sta->sleepq_len>0){
+                                       pxmitframe->attrib.mdata = 1;
+                                       pxmitframe->attrib.eosp = 0;
+                               }else{
+                                       pxmitframe->attrib.mdata = 0;
+                                       pxmitframe->attrib.eosp = 1;
+                               }
+                               //pxmitframe->attrib.triggered = 1;     //maybe doesn't need in TDLS
+                               if(rtw_hal_xmit(adapter, pxmitframe) == _TRUE)
+                               {
+                                       rtw_os_xmit_complete(adapter, pxmitframe);
+                               }
+
+                       }
+
+                       if(ptdls_sta->sleepq_len==0)
+                       {
+                               DBG_871X("no buffered packets for tdls to xmit\n");
+                               //on U-APSD + CH. switch state, when there is no buffered date to xmit,
+                               // we should go back to base channel
+                               if(state==2){
+                                       rtw_tdls_cmd(adapter, ptdls_sta->hwaddr, TDLS_CS_OFF);
+                               }else if(ptdls_sta->tdls_sta_state&TDLS_SW_OFF_STATE){
+                                               ptdls_sta->tdls_sta_state &= ~(TDLS_SW_OFF_STATE);
+                                               ptdlsinfo->candidate_ch= pmlmeext->cur_channel;
+                                               issue_tdls_ch_switch_req(adapter, pattrib->src);
+                                               DBG_871X("issue tdls ch switch req back to base channel\n");
+                               }
+
+                       }
+                       else
+                       {
+                               DBG_871X("error!psta->sleepq_len=%d\n", ptdls_sta->sleepq_len);
+                               ptdls_sta->sleepq_len=0;
+                       }
+
+                       _exit_critical_bh(&ptdls_sta->sleep_q.lock, &irqL);
+
+               }
+
+       }
+
+       return _FAIL;
+}
+
+sint On_TDLS_Ch_Switch_Req(_adapter *adapter, union recv_frame *precv_frame)
+{
+       struct sta_info *ptdls_sta= NULL;
+       struct sta_priv *pstapriv = &adapter->stapriv;
+       u8 *ptr = precv_frame->u.hdr.rx_data;
+       struct rx_pkt_attrib    *prx_pkt_attrib = &precv_frame->u.hdr.attrib;
+       u8 *psa;
+       sint parsing_length;
+       PNDIS_802_11_VARIABLE_IEs       pIE;
+       u8 FIXED_IE =3;
+       u16 j;
+       struct mlme_ext_priv *pmlmeext = &adapter->mlmeextpriv;
+
+       psa = get_sa(ptr);
+       ptdls_sta = rtw_get_stainfo(pstapriv, psa);
+
+       ptr +=prx_pkt_attrib->hdrlen + prx_pkt_attrib->iv_len+LLC_HEADER_SIZE+TYPE_LENGTH_FIELD_SIZE+1;
+       parsing_length= ((union recv_frame *)precv_frame)->u.hdr.len
+                       -prx_pkt_attrib->hdrlen
+                       -prx_pkt_attrib->iv_len
+                       -prx_pkt_attrib->icv_len
+                       -LLC_HEADER_SIZE
+                       -ETH_TYPE_LEN
+                       -PAYLOAD_TYPE_LEN
+                       -FIXED_IE;
+
+       ptdls_sta->off_ch = *(ptr+2);
+
+       //parsing information element
+       for(j=FIXED_IE; j<parsing_length;){
+
+               pIE = (PNDIS_802_11_VARIABLE_IEs)(ptr+ j);
+
+               switch (pIE->ElementID)
+               {
+                       case _COUNTRY_IE_:
+                               break;
+                       case _CH_SWTICH_ANNOUNCE_:
+                               break;
+                       case _LINK_ID_IE_:
+                               break;
+                       case _CH_SWITCH_TIMING_:
+                               _rtw_memcpy(&ptdls_sta->ch_switch_time, pIE->data, 2);
+                               _rtw_memcpy(&ptdls_sta->ch_switch_timeout, pIE->data+2, 2);
+                       default:
+                               break;
+               }
+
+               j += (pIE->Length + 2);
+
+       }
+
+       //todo: check status
+       ptdls_sta->stat_code=0;
+       ptdls_sta->tdls_sta_state |= TDLS_CH_SWITCH_ON_STATE;
+
+       issue_nulldata(adapter, NULL, 1, 0, 0);
+
+       issue_tdls_ch_switch_rsp(adapter, psa);
+
+       DBG_871X("issue tdls channel switch response\n");
+
+       if((ptdls_sta->tdls_sta_state & TDLS_CH_SWITCH_ON_STATE) && ptdls_sta->off_ch==pmlmeext->cur_channel){
+               DBG_871X("back to base channel %x\n", pmlmeext->cur_channel);
+               ptdls_sta->option=7;
+               rtw_tdls_cmd(adapter, ptdls_sta->hwaddr, TDLS_BASE_CH);
+       }else{
+               ptdls_sta->option=6;
+               rtw_tdls_cmd(adapter, ptdls_sta->hwaddr, TDLS_OFF_CH);
+       }
+       return _FAIL;
+}
+
+sint On_TDLS_Ch_Switch_Rsp(_adapter *adapter, union recv_frame *precv_frame)
+{
+       struct sta_info *ptdls_sta= NULL;
+       struct sta_priv *pstapriv = &adapter->stapriv;
+       u8 *ptr = precv_frame->u.hdr.rx_data;
+       struct rx_pkt_attrib    *prx_pkt_attrib = &precv_frame->u.hdr.attrib;
+       u8 *psa;
+       sint parsing_length;
+       PNDIS_802_11_VARIABLE_IEs       pIE;
+       u8 FIXED_IE =4;
+       u16 stat_code, j, switch_time, switch_timeout;
+       struct mlme_ext_priv *pmlmeext = &adapter->mlmeextpriv;
+
+       psa = get_sa(ptr);
+       ptdls_sta = rtw_get_stainfo(pstapriv, psa);
+
+       //if channel switch is running and receiving Unsolicited TDLS Channel Switch Response,
+       //it will go back to base channel and terminate this channel switch procedure
+       if(ptdls_sta->tdls_sta_state & TDLS_CH_SWITCH_ON_STATE ){
+               if(pmlmeext->cur_channel==ptdls_sta->off_ch){
+                       DBG_871X("back to base channel %x\n", pmlmeext->cur_channel);
+                       ptdls_sta->option=7;
+                       rtw_tdls_cmd(adapter, ptdls_sta->hwaddr, TDLS_OFF_CH);
+               }else{
+                       DBG_871X("receive unsolicited channel switch response \n");
+                       rtw_tdls_cmd(adapter, ptdls_sta->hwaddr, TDLS_CS_OFF);
+               }
+               return _FAIL;
+       }
+
+       //avoiding duplicated or unconditional ch. switch. rsp
+       if((ptdls_sta->tdls_sta_state & TDLS_CH_SW_INITIATOR_STATE) != TDLS_CH_SW_INITIATOR_STATE)
+               return _FAIL;
+
+       ptr +=prx_pkt_attrib->hdrlen + prx_pkt_attrib->iv_len+LLC_HEADER_SIZE+TYPE_LENGTH_FIELD_SIZE+1;
+       parsing_length= ((union recv_frame *)precv_frame)->u.hdr.len
+                       -prx_pkt_attrib->hdrlen
+                       -prx_pkt_attrib->iv_len
+                       -prx_pkt_attrib->icv_len
+                       -LLC_HEADER_SIZE
+                       -ETH_TYPE_LEN
+                       -PAYLOAD_TYPE_LEN
+                       -FIXED_IE;
+
+       _rtw_memcpy(&stat_code, ptr+2, 2);
+
+       if(stat_code!=0){
+               return _FAIL;
+       }
+
+       //parsing information element
+       for(j=FIXED_IE; j<parsing_length;){
+
+               pIE = (PNDIS_802_11_VARIABLE_IEs)(ptr+ j);
+
+               switch (pIE->ElementID)
+               {
+                       case _LINK_ID_IE_:
+                               break;
+                       case _CH_SWITCH_TIMING_:
+                               _rtw_memcpy(&switch_time, pIE->data, 2);
+                               if(switch_time > ptdls_sta->ch_switch_time)
+                                       _rtw_memcpy(&ptdls_sta->ch_switch_time, &switch_time, 2);
+
+                               _rtw_memcpy(&switch_timeout, pIE->data+2, 2);
+                               if(switch_timeout > ptdls_sta->ch_switch_timeout)
+                                       _rtw_memcpy(&ptdls_sta->ch_switch_timeout, &switch_timeout, 2);
+
+                       default:
+                               break;
+               }
+
+               j += (pIE->Length + 2);
+
+       }
+
+       ptdls_sta->tdls_sta_state &= ~(TDLS_CH_SW_INITIATOR_STATE);
+       ptdls_sta->tdls_sta_state |=TDLS_CH_SWITCH_ON_STATE;
+
+       //goto set_channel_workitem_callback()
+       ptdls_sta->option=6;
+       rtw_tdls_cmd(adapter, ptdls_sta->hwaddr, TDLS_OFF_CH);
+
+       return _FAIL;
+}
+
+#ifdef CONFIG_WFD
+void wfd_ie_tdls(_adapter * padapter, u8 *pframe, u32 *pktlen )
+{
+       struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
+       struct wifi_display_info        *pwfd_info = padapter->tdlsinfo.wfd_info;
+       u8 wfdie[ MAX_WFD_IE_LEN] = { 0x00 };
+       u32 wfdielen = 0;
+
+       //      WFD OUI
+       wfdielen = 0;
+       wfdie[ wfdielen++ ] = 0x50;
+       wfdie[ wfdielen++ ] = 0x6F;
+       wfdie[ wfdielen++ ] = 0x9A;
+       wfdie[ wfdielen++ ] = 0x0A;     //      WFA WFD v1.0
+
+       //      Commented by Albert 20110825
+       //      According to the WFD Specification, the negotiation request frame should contain 3 WFD attributes
+       //      1. WFD Device Information
+       //      2. Associated BSSID ( Optional )
+       //      3. Local IP Adress ( Optional )
+
+       //      WFD Device Information ATTR
+       //      Type:
+       wfdie[ wfdielen++ ] = WFD_ATTR_DEVICE_INFO;
+
+       //      Length:
+       //      Note: In the WFD specification, the size of length field is 2.
+       RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
+       wfdielen += 2;
+
+       //      Value1:
+       //      WFD device information
+       //      available for WFD session + Preferred TDLS + WSD ( WFD Service Discovery )
+       RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->wfd_device_type | WFD_DEVINFO_SESSION_AVAIL
+                                                               | WFD_DEVINFO_PC_TDLS | WFD_DEVINFO_WSD);
+       wfdielen += 2;
+
+       //      Value2:
+       //      Session Management Control Port
+       //      Default TCP port for RTSP messages is 554
+       RTW_PUT_BE16(wfdie + wfdielen, pwfd_info->rtsp_ctrlport );
+       wfdielen += 2;
+
+       //      Value3:
+       //      WFD Device Maximum Throughput
+       //      300Mbps is the maximum throughput
+       RTW_PUT_BE16(wfdie + wfdielen, 300);
+       wfdielen += 2;
+
+       //      Associated BSSID ATTR
+       //      Type:
+       wfdie[ wfdielen++ ] = WFD_ATTR_ASSOC_BSSID;
+
+       //      Length:
+       //      Note: In the WFD specification, the size of length field is 2.
+       RTW_PUT_BE16(wfdie + wfdielen, 0x0006);
+       wfdielen += 2;
+
+       //      Value:
+       //      Associated BSSID
+       if ( check_fwstate( pmlmepriv, _FW_LINKED) == _TRUE )
+       {
+               _rtw_memcpy( wfdie + wfdielen, &pmlmepriv->assoc_bssid[ 0 ], ETH_ALEN );
+       }
+       else
+       {
+               _rtw_memset( wfdie + wfdielen, 0x00, ETH_ALEN );
+       }
+
+       //      Local IP Address ATTR
+       wfdie[ wfdielen++ ] = WFD_ATTR_LOCAL_IP_ADDR;
+
+       //      Length:
+       //      Note: In the WFD specification, the size of length field is 2.
+       RTW_PUT_BE16(wfdie + wfdielen, 0x0005);
+       wfdielen += 2;
+
+       //      Version:
+       //      0x01: Version1;IPv4
+       wfdie[ wfdielen++ ] = 0x01;
+
+       //      IPv4 Address
+       _rtw_memcpy( wfdie + wfdielen, pwfd_info->ip_address, 4 );
+       wfdielen += 4;
+
+       pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, wfdielen, (unsigned char *) wfdie, pktlen);
+
+}
+#endif //CONFIG_WFD
+
+void rtw_build_tdls_setup_req_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe)
+{
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &pmlmeext->mlmext_info;
+       struct pkt_attrib       *pattrib = &pxmitframe->attrib;
+       struct registry_priv    *pregistrypriv = &padapter->registrypriv;
+       struct sta_info *ptdls_sta=rtw_get_stainfo( (&padapter->stapriv) , pattrib->dst);
+
+       u8 payload_type = 0x02;
+       u8 category = RTW_WLAN_CATEGORY_TDLS;
+       u8 action = TDLS_SETUP_REQUEST;
+       u8 bssrate[NDIS_802_11_LENGTH_RATES_EX]; //Use NDIS_802_11_LENGTH_RATES_EX in order to call func.rtw_set_supported_rate
+       int     bssrate_len = 0, i = 0 ;
+       u8 more_supportedrates = 0;
+       unsigned int ie_len;
+       u8 *p;
+       struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
+       u8 link_id_addr[18] = {0};
+       u8 iedata=0;
+       u8 sup_ch[ 30 * 2 ] = {0x00 }, sup_ch_idx = 0, idx_5g = 2;      //For supported channel
+       u8 timeout_itvl[5];     //set timeout interval to maximum value
+       u32 time;
+
+       //SNonce
+       if(pattrib->encrypt){
+               for(i=0;i<8;i++){
+                       time=rtw_get_current_time();
+                       _rtw_memcpy(&ptdls_sta->SNonce[4*i], (u8 *)&time, 4);
+               }
+       }
+
+       //payload type
+       pframe = rtw_set_fixed_ie(pframe, 1, &(payload_type), &(pattrib->pktlen));
+       //category, action, dialog token
+       pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(ptdls_sta->dialog), &(pattrib->pktlen));
+
+       //capability
+       _rtw_memcpy(pframe, rtw_get_capability_from_ie(pmlmeinfo->network.IEs), 2);
+
+       if(pattrib->encrypt)
+               *pframe =*pframe | BIT(4);
+       pframe += 2;
+       pattrib->pktlen += 2;
+
+       //supported rates
+       rtw_set_supported_rate(bssrate, WIRELESS_11BG_24N);
+       bssrate_len = IEEE80211_CCK_RATE_LEN + IEEE80211_NUM_OFDM_RATESLEN;
+
+       if (bssrate_len > 8)
+       {
+               pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_ , 8, bssrate, &(pattrib->pktlen));
+               more_supportedrates = 1;
+       }
+       else
+       {
+               pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_ , bssrate_len , bssrate, &(pattrib->pktlen));
+       }
+
+       //country(optional)
+       //extended supported rates
+       if(more_supportedrates==1){
+               pframe = rtw_set_ie(pframe, _EXT_SUPPORTEDRATES_IE_ , (bssrate_len - 8), (bssrate + 8), &(pattrib->pktlen));
+       }
+
+       //supported channels
+       pframe = rtw_tdls_set_sup_ch(pmlmeext, pframe, pattrib);
+
+       //      SRC IE
+       pframe = rtw_set_ie( pframe, _SRC_IE_, 16, TDLS_SRC, &(pattrib->pktlen));
+
+       //RSNIE
+       if(pattrib->encrypt)
+               pframe = rtw_set_ie(pframe, _RSN_IE_2_, 20, TDLS_RSNIE, &(pattrib->pktlen));
+
+       //extended capabilities
+       pframe = rtw_set_ie(pframe, _EXT_CAP_IE_ , 5, TDLS_EXT_CAPIE, &(pattrib->pktlen));
+
+       //QoS capability(WMM_IE)
+       pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, 7, TDLS_WMMIE,  &(pattrib->pktlen));
+
+
+       if(pattrib->encrypt){
+               //FTIE
+               _rtw_memset(pframe, 0, 84);     //All fields except SNonce shall be set to 0
+               _rtw_memset(pframe, _FTIE_, 1); //version
+               _rtw_memset((pframe+1), 82, 1); //length
+               _rtw_memcpy((pframe+52), ptdls_sta->SNonce, 32);
+               pframe += 84;
+               pattrib->pktlen += 84;
+
+               //Timeout interval
+               timeout_itvl[0]=0x02;
+               _rtw_memcpy(timeout_itvl+1, (u8 *)(&ptdls_sta->TDLS_PeerKey_Lifetime), 4);
+               pframe = rtw_set_ie(pframe, _TIMEOUT_ITVL_IE_, 5, timeout_itvl,  &(pattrib->pktlen));
+       }
+
+       //Sup_reg_classes(optional)
+       //HT capabilities
+       pframe = rtw_tdls_set_ht_cap(padapter, pframe, pattrib);
+
+       //20/40 BSS coexistence
+       if(pmlmepriv->num_FortyMHzIntolerant>0)
+               iedata |= BIT(2);//20 MHz BSS Width Request
+       pframe = rtw_set_ie(pframe, EID_BSSCoexistence,  1, &iedata, &(pattrib->pktlen));
+
+       //Link identifier
+       _rtw_memcpy(link_id_addr, pattrib->ra, 6);
+       _rtw_memcpy((link_id_addr+6), pattrib->src, 6);
+       _rtw_memcpy((link_id_addr+12), pattrib->dst, 6);
+       pframe = rtw_set_ie(pframe, _LINK_ID_IE_,  18, link_id_addr, &(pattrib->pktlen));
+
+#ifdef CONFIG_WFD
+       wfd_ie_tdls( padapter, pframe, &(pattrib->pktlen) );
+#endif //CONFIG_WFD
+
+}
+
+void rtw_build_tdls_setup_rsp_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe)
+{
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       struct pkt_attrib       *pattrib = &pxmitframe->attrib;
+       struct sta_info *ptdls_sta;
+       struct registry_priv    *pregistrypriv = &padapter->registrypriv;
+
+       u8 payload_type = 0x02;
+       unsigned char category = RTW_WLAN_CATEGORY_TDLS;
+       unsigned char action = TDLS_SETUP_RESPONSE;
+       unsigned char   bssrate[NDIS_802_11_LENGTH_RATES_EX];
+       int     bssrate_len = 0;
+       u8 more_supportedrates = 0;
+       unsigned int ie_len;
+       unsigned char *p;
+       struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
+       u8 link_id_addr[18] = {0};
+       u8 iedata=0;
+       u8 timeout_itvl[5];     //setup response timeout interval will copy from request
+       u8 ANonce[32];  //maybe it can put in ontdls_req
+       u8 k;           //for random ANonce
+       u8  *pftie, *ptimeout_ie, *plinkid_ie, *prsnie, *pftie_mic;
+       u32 time;
+
+       ptdls_sta = rtw_get_stainfo( &(padapter->stapriv) , pattrib->dst);
+
+       if(ptdls_sta == NULL )
+       {
+               DBG_871X("[%s] %d\n", __FUNCTION__, __LINE__);
+               return;
+       }
+
+       if(pattrib->encrypt){
+               for(k=0;k<8;k++){
+                       time=rtw_get_current_time();
+                       _rtw_memcpy(&ptdls_sta->ANonce[4*k], (u8*)&time, 4);
+               }
+       }
+
+       //payload type
+       pframe = rtw_set_fixed_ie(pframe, 1, &(payload_type), &(pattrib->pktlen));
+       //category, action, status code
+       pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 2, (u8 *)&ptdls_sta->stat_code, &(pattrib->pktlen));
+
+       if(ptdls_sta->stat_code!=0)     //invalid setup request
+       {
+               DBG_871X("ptdls_sta->stat_code:%04x \n", ptdls_sta->stat_code);
+               return;
+       }
+
+       //dialog token
+       pframe = rtw_set_fixed_ie(pframe, 1, &(ptdls_sta->dialog), &(pattrib->pktlen));
+
+       //capability
+       _rtw_memcpy(pframe, rtw_get_capability_from_ie(pmlmeinfo->network.IEs), 2);
+
+       if(pattrib->encrypt )
+               *pframe =*pframe | BIT(4);
+       pframe += 2;
+       pattrib->pktlen += 2;
+
+       //supported rates
+       rtw_set_supported_rate(bssrate, WIRELESS_11BG_24N);
+       bssrate_len = IEEE80211_CCK_RATE_LEN + IEEE80211_NUM_OFDM_RATESLEN;
+
+       if (bssrate_len > 8)
+       {
+               pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_ , 8, bssrate, &(pattrib->pktlen));
+               more_supportedrates = 1;
+       }
+       else
+       {
+               pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_ , bssrate_len , bssrate, &(pattrib->pktlen));
+       }
+
+       //country(optional)
+       //extended supported rates
+       if(more_supportedrates==1){
+               pframe = rtw_set_ie(pframe, _EXT_SUPPORTEDRATES_IE_ , (bssrate_len - 8), (bssrate + 8), &(pattrib->pktlen));
+       }
+
+       //supported channels
+       pframe = rtw_tdls_set_sup_ch(pmlmeext, pframe, pattrib);
+
+       // SRC IE
+       pframe = rtw_set_ie(pframe, _SRC_IE_ , 16, TDLS_SRC, &(pattrib->pktlen));
+
+       //RSNIE
+       if(pattrib->encrypt){
+               prsnie = pframe;
+               pframe = rtw_set_ie(pframe, _RSN_IE_2_, 20, TDLS_RSNIE, &(pattrib->pktlen));
+       }
+
+       //extended capabilities
+       pframe = rtw_set_ie(pframe, _EXT_CAP_IE_ , 5, TDLS_EXT_CAPIE, &(pattrib->pktlen));
+
+       //QoS capability(WMM_IE)
+       pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, 7, TDLS_WMMIE,  &(pattrib->pktlen));
+
+       if(pattrib->encrypt){
+               wpa_tdls_generate_tpk(padapter, ptdls_sta);
+
+               //FTIE
+               pftie = pframe;
+               pftie_mic = pframe+4;
+               _rtw_memset(pframe, 0, 84);     //All fields except SNonce shall be set to 0
+               _rtw_memset(pframe, _FTIE_, 1); //version
+               _rtw_memset((pframe+1), 82, 1); //length
+               _rtw_memcpy((pframe+20), ptdls_sta->ANonce, 32);
+               _rtw_memcpy((pframe+52), ptdls_sta->SNonce, 32);
+               pframe += 84;
+               pattrib->pktlen += 84;
+
+               //Timeout interval
+               ptimeout_ie = pframe;
+               timeout_itvl[0]=0x02;
+               _rtw_memcpy(timeout_itvl+1, (u8 *)(&ptdls_sta->TDLS_PeerKey_Lifetime), 4);
+               pframe = rtw_set_ie(pframe, _TIMEOUT_ITVL_IE_, 5, timeout_itvl,  &(pattrib->pktlen));
+       }
+
+       //Sup_reg_classes(optional)
+       //HT capabilities
+       pframe = rtw_tdls_set_ht_cap(padapter, pframe, pattrib);
+
+       //20/40 BSS coexistence
+       if(pmlmepriv->num_FortyMHzIntolerant>0)
+               iedata |= BIT(2);//20 MHz BSS Width Request
+       pframe = rtw_set_ie(pframe, EID_BSSCoexistence,  1, &iedata, &(pattrib->pktlen));
+
+       //Link identifier
+       plinkid_ie = pframe;
+       _rtw_memcpy(link_id_addr, pattrib->ra, 6);
+       _rtw_memcpy((link_id_addr+6), pattrib->dst, 6);
+       _rtw_memcpy((link_id_addr+12), pattrib->src, 6);
+       pframe = rtw_set_ie(pframe, _LINK_ID_IE_,  18, link_id_addr, &(pattrib->pktlen));
+
+       //fill FTIE mic
+       if(pattrib->encrypt)
+               wpa_tdls_ftie_mic(ptdls_sta->tpk.kck, 2, plinkid_ie, prsnie, ptimeout_ie, pftie, pftie_mic);
+
+#ifdef CONFIG_WFD
+       wfd_ie_tdls( padapter, pframe, &(pattrib->pktlen) );
+#endif //CONFIG_WFD
+
+}
+
+void rtw_build_tdls_setup_cfm_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe)
+{
+
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       struct pkt_attrib       *pattrib = &pxmitframe->attrib;
+       struct sta_info *ptdls_sta=rtw_get_stainfo( (&padapter->stapriv) , pattrib->dst);
+
+       u8 payload_type = 0x02;
+       unsigned char category = RTW_WLAN_CATEGORY_TDLS;
+       unsigned char action = TDLS_SETUP_CONFIRM;
+       u8 more_supportedrates = 0;
+       unsigned int ie_len;
+       unsigned char *p;
+       u8 timeout_itvl[5];     //set timeout interval to maximum value
+       struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
+       u8      link_id_addr[18] = {0};
+       u8  *pftie, *ptimeout_ie, *plinkid_ie, *prsnie, *pftie_mic;
+
+       //payload type
+       pframe = rtw_set_fixed_ie(pframe, 1, &(payload_type), &(pattrib->pktlen));
+       //category, action, status code, dialog token
+       pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 2, (u8 *)&ptdls_sta->stat_code, &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(ptdls_sta->dialog), &(pattrib->pktlen));
+
+       if(ptdls_sta->stat_code!=0)     //invalid setup request
+               return;
+
+       //RSNIE
+       if(pattrib->encrypt){
+               prsnie = pframe;
+               pframe = rtw_set_ie(pframe, _RSN_IE_2_, 20, TDLS_RSNIE, &(pattrib->pktlen));
+       }
+
+       //EDCA param set; WMM param ele.
+       if(pattrib->encrypt){
+               //FTIE
+               pftie = pframe;
+               pftie_mic = pframe+4;
+               _rtw_memset(pframe, 0, 84);     //All fields except SNonce shall be set to 0
+               _rtw_memset(pframe, _FTIE_, 1); //version
+               _rtw_memset((pframe+1), 82, 1); //length
+               _rtw_memcpy((pframe+20), ptdls_sta->ANonce, 32);
+               _rtw_memcpy((pframe+52), ptdls_sta->SNonce, 32);
+               pframe += 84;
+               pattrib->pktlen += 84;
+
+               //Timeout interval
+               ptimeout_ie = pframe;
+               timeout_itvl[0]=0x02;
+               _rtw_memcpy(timeout_itvl+1, (u8 *)(&ptdls_sta->TDLS_PeerKey_Lifetime), 4);
+               ptdls_sta->TPK_count=0;
+               _set_timer(&ptdls_sta->TPK_timer, ptdls_sta->TDLS_PeerKey_Lifetime/TPK_RESEND_COUNT);
+               pframe = rtw_set_ie(pframe, _TIMEOUT_ITVL_IE_, 5, timeout_itvl,  &(pattrib->pktlen));
+       }
+
+       //HT operation; todo
+       //Link identifier
+       plinkid_ie = pframe;
+       _rtw_memcpy(link_id_addr, pattrib->ra, 6);
+       _rtw_memcpy((link_id_addr+6), pattrib->src, 6);
+       _rtw_memcpy((link_id_addr+12), pattrib->dst, 6);
+       pframe = rtw_set_ie(pframe, _LINK_ID_IE_,  18, link_id_addr, &(pattrib->pktlen));
+
+       //fill FTIE mic
+       if(pattrib->encrypt)
+               wpa_tdls_ftie_mic(ptdls_sta->tpk.kck, 3, plinkid_ie, prsnie, ptimeout_ie, pftie, pftie_mic);
+
+}
+
+void rtw_build_tdls_teardown_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe)
+{
+
+       struct pkt_attrib       *pattrib = &pxmitframe->attrib;
+       u8 payload_type = 0x02;
+       unsigned char category = RTW_WLAN_CATEGORY_TDLS;
+       unsigned char action = TDLS_TEARDOWN;
+       u8      link_id_addr[18] = {0};
+
+       struct sta_info *ptdls_sta = rtw_get_stainfo( &(padapter->stapriv) , pattrib->dst);
+       struct sta_priv         *pstapriv = &padapter->stapriv;
+
+       //payload type
+       pframe = rtw_set_fixed_ie(pframe, 1, &(payload_type), &(pattrib->pktlen));
+       //category, action, reason code
+       pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, (u8 *)&ptdls_sta->stat_code, &(pattrib->pktlen));
+
+       //Link identifier
+       if(ptdls_sta->tdls_sta_state & TDLS_INITIATOR_STATE){
+               _rtw_memcpy(link_id_addr, pattrib->ra, 6);
+               _rtw_memcpy((link_id_addr+6), pattrib->src, 6);
+               _rtw_memcpy((link_id_addr+12), pattrib->dst, 6);
+       }else  if(ptdls_sta->tdls_sta_state & TDLS_RESPONDER_STATE){
+               _rtw_memcpy(link_id_addr, pattrib->ra, 6);
+               _rtw_memcpy((link_id_addr+6), pattrib->dst, 6);
+               _rtw_memcpy((link_id_addr+12), pattrib->src, 6);
+       }
+       pframe = rtw_set_ie(pframe, _LINK_ID_IE_,  18, link_id_addr, &(pattrib->pktlen));
+
+}
+
+void rtw_build_tdls_dis_req_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe)
+{
+
+       struct pkt_attrib       *pattrib = &pxmitframe->attrib;
+       u8 payload_type = 0x02;
+       u8 category = RTW_WLAN_CATEGORY_TDLS;
+       u8 action = TDLS_DISCOVERY_REQUEST;
+       u8      link_id_addr[18] = {0};
+       static u8 dialogtoken=0;
+
+       //payload type
+       pframe = rtw_set_fixed_ie(pframe, 1, &(payload_type), &(pattrib->pktlen));
+       //category, action, reason code
+       pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(dialogtoken), &(pattrib->pktlen));
+       dialogtoken = (dialogtoken+1)%256;
+
+       //Link identifier
+       _rtw_memcpy(link_id_addr, pattrib->ra, 6);
+       _rtw_memcpy((link_id_addr+6), pattrib->src, 6);
+       _rtw_memcpy((link_id_addr+12), pattrib->dst, 6);
+       pframe = rtw_set_ie(pframe, _LINK_ID_IE_,  18, link_id_addr, &(pattrib->pktlen));
+
+}
+
+void rtw_build_tdls_dis_rsp_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe, u8 dialog)
+{
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &pmlmeext->mlmext_info;
+       struct pkt_attrib       *pattrib = &pxmitframe->attrib;
+       struct registry_priv    *pregistrypriv = &padapter->registrypriv;
+
+       u8 category = RTW_WLAN_CATEGORY_PUBLIC;
+       u8 action = TDLS_DISCOVERY_RESPONSE;
+       u8 bssrate[NDIS_802_11_LENGTH_RATES_EX];
+       int bssrate_len = 0;
+       u8 more_supportedrates = 0;
+       u8 *p;
+       struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
+       u8 link_id_addr[18] = {0};
+       u8 iedata=0;
+       u8 timeout_itvl[5];     //set timeout interval to maximum value
+       u32 timeout_interval= TPK_RESEND_COUNT * 1000;
+
+       //category, action, dialog token
+       pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(dialog), &(pattrib->pktlen));
+
+       //capability
+       _rtw_memcpy(pframe, rtw_get_capability_from_ie(pmlmeinfo->network.IEs), 2);
+
+       if(pattrib->encrypt)
+               *pframe =*pframe | BIT(4);
+       pframe += 2;
+       pattrib->pktlen += 2;
+
+       //supported rates
+       rtw_set_supported_rate(bssrate, WIRELESS_11BG_24N);
+       bssrate_len = IEEE80211_CCK_RATE_LEN + IEEE80211_NUM_OFDM_RATESLEN;
+
+       if (bssrate_len > 8)
+       {
+               pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_ , 8, bssrate, &(pattrib->pktlen));
+               more_supportedrates = 1;
+       }
+       else
+       {
+               pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_ , bssrate_len , bssrate, &(pattrib->pktlen));
+       }
+
+       //extended supported rates
+       if(more_supportedrates==1){
+               pframe = rtw_set_ie(pframe, _EXT_SUPPORTEDRATES_IE_ , (bssrate_len - 8), (bssrate + 8), &(pattrib->pktlen));
+       }
+
+       //supported channels
+       pframe = rtw_tdls_set_sup_ch(pmlmeext, pframe, pattrib);
+
+       //RSNIE
+       if(pattrib->encrypt)
+               pframe = rtw_set_ie(pframe, _RSN_IE_2_, 20, TDLS_RSNIE, &(pattrib->pktlen));
+
+       //extended capability
+       pframe = rtw_set_ie(pframe, _EXT_CAP_IE_ , 5, TDLS_EXT_CAPIE, &(pattrib->pktlen));
+
+       if(pattrib->encrypt){
+               //FTIE
+               _rtw_memset(pframe, 0, 84);     //All fields shall be set to 0
+               _rtw_memset(pframe, _FTIE_, 1); //version
+               _rtw_memset((pframe+1), 82, 1); //length
+               pframe += 84;
+               pattrib->pktlen += 84;
+
+               //Timeout interval
+               timeout_itvl[0]=0x02;
+               _rtw_memcpy(timeout_itvl+1, &timeout_interval, 4);
+               pframe = rtw_set_ie(pframe, _TIMEOUT_ITVL_IE_, 5, timeout_itvl,  &(pattrib->pktlen));
+       }
+
+       //Sup_reg_classes(optional)
+       //HT capabilities
+       pframe = rtw_tdls_set_ht_cap(padapter, pframe, pattrib);
+
+       //20/40 BSS coexistence
+       if(pmlmepriv->num_FortyMHzIntolerant>0)
+               iedata |= BIT(2);//20 MHz BSS Width Request
+       pframe = rtw_set_ie(pframe, EID_BSSCoexistence, 1, &iedata, &(pattrib->pktlen));
+
+       //Link identifier
+       _rtw_memcpy(link_id_addr, pattrib->ra, 6);
+       _rtw_memcpy((link_id_addr+6), pattrib->dst, 6);
+       _rtw_memcpy((link_id_addr+12), pattrib->src, 6);
+       pframe = rtw_set_ie(pframe, _LINK_ID_IE_, 18, link_id_addr, &(pattrib->pktlen));
+
+}
+
+void rtw_build_tdls_peer_traffic_indication_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe)
+{
+
+       struct pkt_attrib       *pattrib = &pxmitframe->attrib;
+       u8 payload_type = 0x02;
+       unsigned char category = RTW_WLAN_CATEGORY_TDLS;
+       unsigned char action = TDLS_PEER_TRAFFIC_INDICATION;
+
+       u8      link_id_addr[18] = {0};
+       u8 AC_queue=0;
+       struct sta_priv         *pstapriv = &padapter->stapriv;
+       struct sta_info *ptdls_sta = rtw_get_stainfo(pstapriv, pattrib->dst);
+
+       //payload type
+       pframe = rtw_set_fixed_ie(pframe, 1, &(payload_type), &(pattrib->pktlen));
+       //category, action, reason code
+       pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(ptdls_sta->dialog), &(pattrib->pktlen));
+
+       //Link identifier
+       _rtw_memcpy(link_id_addr, pattrib->ra, 6);
+       _rtw_memcpy((link_id_addr+6), pattrib->src, 6);
+       _rtw_memcpy((link_id_addr+12), pattrib->dst, 6);
+       pframe = rtw_set_ie(pframe, _LINK_ID_IE_,  18, link_id_addr, &(pattrib->pktlen));
+
+       //PTI control
+       //PU buffer status
+       if(ptdls_sta->uapsd_bk&BIT(1))
+               AC_queue=BIT(0);
+       if(ptdls_sta->uapsd_be&BIT(1))
+               AC_queue=BIT(1);
+       if(ptdls_sta->uapsd_vi&BIT(1))
+               AC_queue=BIT(2);
+       if(ptdls_sta->uapsd_vo&BIT(1))
+               AC_queue=BIT(3);
+       pframe = rtw_set_ie(pframe, _PTI_BUFFER_STATUS_, 1, &AC_queue, &(pattrib->pktlen));
+
+}
+
+void rtw_build_tdls_ch_switch_req_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe)
+{
+
+       struct pkt_attrib       *pattrib = &pxmitframe->attrib;
+       struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
+       u8 payload_type = 0x02;
+       unsigned char category = RTW_WLAN_CATEGORY_TDLS;
+       unsigned char action = TDLS_CHANNEL_SWITCH_REQUEST;
+       u8      link_id_addr[18] = {0};
+       struct sta_priv         *pstapriv = &padapter->stapriv;
+       struct sta_info *ptdls_sta = rtw_get_stainfo(pstapriv, pattrib->dst);
+       u8 ch_switch_timing[4] = {0};
+       u16 switch_time= CH_SWITCH_TIME, switch_timeout=CH_SWITCH_TIMEOUT;
+
+       //payload type
+       pframe = rtw_set_fixed_ie(pframe, 1, &(payload_type), &(pattrib->pktlen));
+       //category, action, target_ch
+       pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(ptdlsinfo->candidate_ch), &(pattrib->pktlen));
+
+       //Link identifier
+       _rtw_memcpy(link_id_addr, pattrib->ra, 6);
+       _rtw_memcpy((link_id_addr+6), pattrib->src, 6);
+       _rtw_memcpy((link_id_addr+12), pattrib->dst, 6);
+       pframe = rtw_set_ie(pframe, _LINK_ID_IE_,  18, link_id_addr, &(pattrib->pktlen));
+
+       //ch switch timing
+       _rtw_memcpy(ch_switch_timing, &switch_time, 2);
+       _rtw_memcpy(ch_switch_timing+2, &switch_timeout, 2);
+       pframe = rtw_set_ie(pframe, _CH_SWITCH_TIMING_,  4, ch_switch_timing, &(pattrib->pktlen));
+
+       //update ch switch attrib to sta_info
+       ptdls_sta->off_ch=ptdlsinfo->candidate_ch;
+       ptdls_sta->ch_switch_time=switch_time;
+       ptdls_sta->ch_switch_timeout=switch_timeout;
+
+}
+
+void rtw_build_tdls_ch_switch_rsp_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe)
+{
+
+       struct pkt_attrib       *pattrib = &pxmitframe->attrib;
+       u8 payload_type = 0x02;
+       unsigned char category = RTW_WLAN_CATEGORY_TDLS;
+       unsigned char action = TDLS_CHANNEL_SWITCH_RESPONSE;
+       u8      link_id_addr[18] = {0};
+       struct sta_priv         *pstapriv = &padapter->stapriv;
+       struct sta_info *ptdls_sta = rtw_get_stainfo(pstapriv, pattrib->dst);
+       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
+       u8 ch_switch_timing[4] = {0};
+
+       //payload type
+       pframe = rtw_set_fixed_ie(pframe, 1, &(payload_type), &(pattrib->pktlen));
+       //category, action, status_code
+       pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 2, (u8 *)&ptdls_sta->stat_code, &(pattrib->pktlen));
+
+       //Link identifier
+       _rtw_memcpy(link_id_addr, pattrib->ra, 6);
+       _rtw_memcpy((link_id_addr+6), pattrib->src, 6);
+       _rtw_memcpy((link_id_addr+12), pattrib->dst, 6);
+       pframe = rtw_set_ie(pframe, _LINK_ID_IE_,  18, link_id_addr, &(pattrib->pktlen));
+
+       //ch switch timing
+       _rtw_memcpy(ch_switch_timing, &ptdls_sta->ch_switch_time, 2);
+       _rtw_memcpy(ch_switch_timing+2, &ptdls_sta->ch_switch_timeout, 2);
+       pframe = rtw_set_ie(pframe, _CH_SWITCH_TIMING_,  4, ch_switch_timing, &(pattrib->pktlen));
+
+}
+
+#ifdef CONFIG_WFD
+void rtw_build_tunneled_probe_req_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe)
+{
+
+       struct pkt_attrib       *pattrib = &pxmitframe->attrib;
+       struct wifidirect_info *pwdinfo = &padapter->wdinfo;
+       struct wifidirect_info *pbuddy_wdinfo = &padapter->pbuddy_adapter->wdinfo;
+       u8 payload_type = 0x02;
+       u8 category = RTW_WLAN_CATEGORY_P2P;
+       u8 WFA_OUI[3] = { 0x50, 0x6f, 0x9a};
+       u8 probe_req = 4;
+       u8 wfdielen = 0;
+
+       //payload type
+       pframe = rtw_set_fixed_ie(pframe, 1, &(payload_type), &(pattrib->pktlen));
+       //category, OUI, frame_body_type
+       pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 3, WFA_OUI, &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(probe_req), &(pattrib->pktlen));
+
+       if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+       {
+               wfdielen = build_probe_req_wfd_ie(pwdinfo, pframe);
+               pframe += wfdielen;
+               pattrib->pktlen += wfdielen;
+       }
+       else if(!rtw_p2p_chk_state(pbuddy_wdinfo, P2P_STATE_NONE))
+       {
+               wfdielen = build_probe_req_wfd_ie(pbuddy_wdinfo, pframe);
+               pframe += wfdielen;
+               pattrib->pktlen += wfdielen;
+       }
+
+}
+
+void rtw_build_tunneled_probe_rsp_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe)
+{
+
+       struct pkt_attrib       *pattrib = &pxmitframe->attrib;
+       struct wifidirect_info *pwdinfo = &padapter->wdinfo;
+       struct wifidirect_info *pbuddy_wdinfo = &padapter->pbuddy_adapter->wdinfo;
+       u8 payload_type = 0x02;
+       u8 category = RTW_WLAN_CATEGORY_P2P;
+       u8 WFA_OUI[3] = { 0x50, 0x6f, 0x9a};
+       u8 probe_rsp = 5;
+       u8 wfdielen = 0;
+
+       //payload type
+       pframe = rtw_set_fixed_ie(pframe, 1, &(payload_type), &(pattrib->pktlen));
+       //category, OUI, frame_body_type
+       pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 3, WFA_OUI, &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(probe_rsp), &(pattrib->pktlen));
+
+       if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+       {
+               wfdielen = build_probe_resp_wfd_ie(pwdinfo, pframe, 1);
+               pframe += wfdielen;
+               pattrib->pktlen += wfdielen;
+       }
+       else if(!rtw_p2p_chk_state(pbuddy_wdinfo, P2P_STATE_NONE))
+       {
+               wfdielen = build_probe_resp_wfd_ie(pbuddy_wdinfo, pframe, 1);
+               pframe += wfdielen;
+               pattrib->pktlen += wfdielen;
+       }
+
+}
+#endif //CONFIG_WFD
+
+void _TPK_timer_hdl(void *FunctionContext)
+{
+       struct sta_info *ptdls_sta = (struct sta_info *)FunctionContext;
+
+       ptdls_sta->TPK_count++;
+       //TPK_timer set 1000 as default
+       //retry timer should set at least 301 sec.
+       if(ptdls_sta->TPK_count==TPK_RESEND_COUNT){
+               ptdls_sta->TPK_count=0;
+               issue_tdls_setup_req(ptdls_sta->padapter, ptdls_sta->hwaddr);
+       }
+
+       _set_timer(&ptdls_sta->TPK_timer, ptdls_sta->TDLS_PeerKey_Lifetime/TPK_RESEND_COUNT);
+}
+
+void init_TPK_timer(_adapter *padapter, struct sta_info *psta)
+{
+       psta->padapter=padapter;
+
+       _init_timer(&psta->TPK_timer, padapter->pnetdev, _TPK_timer_hdl, psta);
+}
+
+// TDLS_DONE_CH_SEN: channel sensing and report candidate channel
+// TDLS_OFF_CH: first time set channel to off channel
+// TDLS_BASE_CH: when go back to the channel linked with AP, send null data to peer STA as an indication
+void _ch_switch_timer_hdl(void *FunctionContext)
+{
+
+       struct sta_info *ptdls_sta = (struct sta_info *)FunctionContext;
+       _adapter *padapter = ptdls_sta->padapter;
+
+       if( ptdls_sta->option == TDLS_DONE_CH_SEN ){
+               rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_DONE_CH_SEN);
+       }else if( ptdls_sta->option == TDLS_OFF_CH ){
+               issue_nulldata_to_TDLS_peer_STA(ptdls_sta->padapter, ptdls_sta, 0);
+               _set_timer(&ptdls_sta->base_ch_timer, 500);
+       }else if( ptdls_sta->option == TDLS_BASE_CH){
+               issue_nulldata_to_TDLS_peer_STA(ptdls_sta->padapter, ptdls_sta, 0);
+       }
+}
+
+void init_ch_switch_timer(_adapter *padapter, struct sta_info *psta)
+{
+       psta->padapter=padapter;
+       _init_timer(&psta->option_timer, padapter->pnetdev, _ch_switch_timer_hdl, psta);
+}
+
+void _base_ch_timer_hdl(void *FunctionContext)
+{
+       struct sta_info *ptdls_sta = (struct sta_info *)FunctionContext;
+       rtw_tdls_cmd(ptdls_sta->padapter, ptdls_sta->hwaddr, TDLS_P_OFF_CH);
+}
+
+void init_base_ch_timer(_adapter *padapter, struct sta_info *psta)
+{
+       psta->padapter=padapter;
+       _init_timer(&psta->base_ch_timer, padapter->pnetdev, _base_ch_timer_hdl, psta);
+}
+
+void _off_ch_timer_hdl(void *FunctionContext)
+{
+       struct sta_info *ptdls_sta = (struct sta_info *)FunctionContext;
+       rtw_tdls_cmd(ptdls_sta->padapter, ptdls_sta->hwaddr, TDLS_P_BASE_CH );
+}
+
+void init_off_ch_timer(_adapter *padapter, struct sta_info *psta)
+{
+       psta->padapter=padapter;
+       _init_timer(&psta->off_ch_timer, padapter->pnetdev, _off_ch_timer_hdl, psta);
+}
+
+void _tdls_handshake_timer_hdl(void *FunctionContext)
+{
+       struct sta_info *ptdls_sta = (struct sta_info *)FunctionContext;
+
+       if(ptdls_sta != NULL)
+       {
+               if( !(ptdls_sta->tdls_sta_state & TDLS_LINKED_STATE) )
+               {
+                       DBG_871X("tdls handshake time out\n");
+                       free_tdls_sta(ptdls_sta->padapter, ptdls_sta);
+               }
+       }
+}
+
+void init_handshake_timer(_adapter *padapter, struct sta_info *psta)
+{
+       psta->padapter=padapter;
+       _init_timer(&psta->handshake_timer, padapter->pnetdev, _tdls_handshake_timer_hdl, psta);
+}
+
+//Check tdls peer sta alive.
+void _tdls_alive_timer_phase1_hdl(void *FunctionContext)
+{
+       _irqL irqL;
+       struct sta_info *ptdls_sta = (struct sta_info *)FunctionContext;
+       _adapter *padapter = ptdls_sta->padapter;
+       struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
+
+       _enter_critical_bh(&ptdlsinfo->hdl_lock, &irqL);
+       ptdls_sta->timer_flag = 1;
+       _exit_critical_bh(&ptdlsinfo->hdl_lock, &irqL);
+
+       ptdls_sta->tdls_sta_state &= (~TDLS_ALIVE_STATE);
+
+       DBG_871X("issue_tdls_dis_req to check alive\n");
+       issue_tdls_dis_req( padapter, ptdls_sta->hwaddr);
+       rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_CKALV_PH1);
+       sta_update_last_rx_pkts(ptdls_sta);
+
+       if (    ptdls_sta->timer_flag == 2 )
+               rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_FREE_STA);
+       else
+       {
+               _enter_critical_bh(&ptdlsinfo->hdl_lock, &irqL);
+               ptdls_sta->timer_flag = 0;
+               _exit_critical_bh(&ptdlsinfo->hdl_lock, &irqL);
+       }
+
+}
+
+void _tdls_alive_timer_phase2_hdl(void *FunctionContext)
+{
+       _irqL irqL;
+       struct sta_info *ptdls_sta = (struct sta_info *)FunctionContext;
+       _adapter *padapter = ptdls_sta->padapter;
+       struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
+
+       _enter_critical_bh(&(ptdlsinfo->hdl_lock), &irqL);
+       ptdls_sta->timer_flag = 1;
+       _exit_critical_bh(&ptdlsinfo->hdl_lock, &irqL);
+
+       if( (ptdls_sta->tdls_sta_state & TDLS_ALIVE_STATE) &&
+               (sta_last_rx_pkts(ptdls_sta) + 3 <= sta_rx_pkts(ptdls_sta)) )
+       {
+               DBG_871X("TDLS STA ALIVE, ptdls_sta->sta_stats.last_rx_pkts:%llu, ptdls_sta->sta_stats.rx_pkts:%llu\n",
+                       sta_last_rx_pkts(ptdls_sta), sta_rx_pkts(ptdls_sta));
+
+               ptdls_sta->alive_count = 0;
+               rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_CKALV_PH2);
+       }
+       else
+       {
+               if( !(ptdls_sta->tdls_sta_state & TDLS_ALIVE_STATE) )
+                       DBG_871X("TDLS STA TOO FAR\n");
+               if( !(sta_last_rx_pkts(ptdls_sta) + 3 <= sta_rx_pkts(ptdls_sta)))
+                       DBG_871X("TDLS LINK WITH LOW TRAFFIC, ptdls_sta->sta_stats.last_rx_pkts:%llu, ptdls_sta->sta_stats.rx_pkts:%llu\n",
+                               sta_last_rx_pkts(ptdls_sta), sta_rx_pkts(ptdls_sta));
+
+               ptdls_sta->alive_count++;
+               if( ptdls_sta->alive_count == TDLS_ALIVE_COUNT )
+               {
+                       ptdls_sta->stat_code = _RSON_TDLS_TEAR_TOOFAR_;
+                       issue_tdls_teardown(padapter, ptdls_sta->hwaddr);
+               }
+               else
+               {
+                       rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_CKALV_PH2);
+               }
+       }
+
+       if (    ptdls_sta->timer_flag == 2 )
+               rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_FREE_STA);
+       else
+       {
+               _enter_critical_bh(&(ptdlsinfo->hdl_lock), &irqL);
+               ptdls_sta->timer_flag = 0;
+               _exit_critical_bh(&ptdlsinfo->hdl_lock, &irqL);
+}
+
+}
+
+void init_tdls_alive_timer(_adapter *padapter, struct sta_info *psta)
+{
+       psta->padapter=padapter;
+       _init_timer(&psta->alive_timer1, padapter->pnetdev, _tdls_alive_timer_phase1_hdl, psta);
+       _init_timer(&psta->alive_timer2, padapter->pnetdev, _tdls_alive_timer_phase2_hdl, psta);
+}
+
+int update_sgi_tdls(_adapter *padapter, struct sta_info *psta)
+{
+       struct ht_priv  *psta_ht = NULL;
+       psta_ht = &psta->htpriv;
+
+       if(psta_ht->ht_option)
+       {
+               return psta_ht->sgi;
+       }
+       else
+               return _FALSE;
+}
+
+u32 update_mask_tdls(_adapter *padapter, struct sta_info *psta)
+{
+       int i;
+       u8 rf_type, id;
+       unsigned char sta_band = 0;
+       unsigned char limit;
+       unsigned int tx_ra_bitmap=0;
+       struct ht_priv  *psta_ht = NULL;
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+       WLAN_BSSID_EX *pcur_network = (WLAN_BSSID_EX *)&pmlmepriv->cur_network.network;
+
+       psta_ht = &psta->htpriv;
+       //b/g mode ra_bitmap
+       for (i=0; i<sizeof(psta->bssrateset); i++)
+       {
+               if (psta->bssrateset[i])
+                       tx_ra_bitmap |= rtw_get_bit_value_from_ieee_value(psta->bssrateset[i]&0x7f);
+       }
+
+       //n mode ra_bitmap
+       if(psta_ht->ht_option)
+       {
+               rtw_hal_get_hwreg(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
+               if(rf_type == RF_2T2R)
+                       limit=16;// 2R
+               else
+                       limit=8;//  1R
+
+               for (i=0; i<limit; i++) {
+                       if (psta_ht->ht_cap.supp_mcs_set[i/8] & BIT(i%8))
+                               tx_ra_bitmap |= BIT(i+12);
+               }
+       }
+
+       if ( pcur_network->Configuration.DSConfig > 14 ) {
+               // 5G band
+               if (tx_ra_bitmap & 0xffff000)
+                       sta_band |= WIRELESS_11_5N | WIRELESS_11A;
+               else
+                       sta_band |= WIRELESS_11A;
+       } else {
+               if (tx_ra_bitmap & 0xffff000)
+                       sta_band |= WIRELESS_11_24N | WIRELESS_11G | WIRELESS_11B;
+               else if (tx_ra_bitmap & 0xff0)
+                       sta_band |= WIRELESS_11G |WIRELESS_11B;
+               else
+                       sta_band |= WIRELESS_11B;
+       }
+
+       id = networktype_to_raid(sta_band);
+       tx_ra_bitmap |= ((id<<28)&0xf0000000);
+       return tx_ra_bitmap;
+}
+
+#endif //CONFIG_TDLS
diff --git a/drivers/net/wireless/realtek/rtl8192cu/core/rtw_wlan_util.c b/drivers/net/wireless/realtek/rtl8192cu/core/rtw_wlan_util.c
new file mode 100644 (file)
index 0000000..d671155
--- /dev/null
@@ -0,0 +1,2304 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#define _RTW_WLAN_UTIL_C_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <wifi.h>
+
+
+unsigned char ARTHEROS_OUI1[] = {0x00, 0x03, 0x7f};
+unsigned char ARTHEROS_OUI2[] = {0x00, 0x13, 0x74};
+
+unsigned char BROADCOM_OUI1[] = {0x00, 0x10, 0x18};
+unsigned char BROADCOM_OUI2[] = {0x00, 0x0a, 0xf7};
+unsigned char BROADCOM_OUI3[] = {0x00, 0x05, 0xb5};
+
+unsigned char CISCO_OUI[] = {0x00, 0x40, 0x96};
+unsigned char MARVELL_OUI[] = {0x00, 0x50, 0x43};
+unsigned char RALINK_OUI[] = {0x00, 0x0c, 0x43};
+unsigned char REALTEK_OUI[] = {0x00, 0xe0, 0x4c};
+unsigned char AIRGOCAP_OUI[] = {0x00, 0x0a, 0xf5};
+
+unsigned char REALTEK_96B_IE[] = {0x00, 0xe0, 0x4c, 0x02, 0x01, 0x20};
+
+extern unsigned char   MCS_rate_2R[16];
+#ifdef CONFIG_DISABLE_MCS13TO15
+extern unsigned char   MCS_rate_2R_MCS13TO15_OFF[16];
+#endif //CONFIG_DISABLE_MCS13TO15
+extern unsigned char   MCS_rate_1R[16];
+extern unsigned char RTW_WPA_OUI[];
+extern unsigned char WPA_TKIP_CIPHER[4];
+extern unsigned char RSN_TKIP_CIPHER[4];
+
+#define R2T_PHY_DELAY  (0)
+
+//#define WAIT_FOR_BCN_TO_MIN  (3000)
+#define WAIT_FOR_BCN_TO_MIN    (6000)
+#define WAIT_FOR_BCN_TO_MAX    (20000)
+
+static u8 rtw_basic_rate_cck[4] = {
+       IEEE80211_CCK_RATE_1MB|IEEE80211_BASIC_RATE_MASK, IEEE80211_CCK_RATE_2MB|IEEE80211_BASIC_RATE_MASK,
+       IEEE80211_CCK_RATE_5MB|IEEE80211_BASIC_RATE_MASK, IEEE80211_CCK_RATE_11MB|IEEE80211_BASIC_RATE_MASK
+};
+
+static u8 rtw_basic_rate_ofdm[3] = {
+       IEEE80211_OFDM_RATE_6MB|IEEE80211_BASIC_RATE_MASK, IEEE80211_OFDM_RATE_12MB|IEEE80211_BASIC_RATE_MASK,
+       IEEE80211_OFDM_RATE_24MB|IEEE80211_BASIC_RATE_MASK
+};
+
+static u8 rtw_basic_rate_mix[7] = {
+       IEEE80211_CCK_RATE_1MB|IEEE80211_BASIC_RATE_MASK, IEEE80211_CCK_RATE_2MB|IEEE80211_BASIC_RATE_MASK,
+       IEEE80211_CCK_RATE_5MB|IEEE80211_BASIC_RATE_MASK, IEEE80211_CCK_RATE_11MB|IEEE80211_BASIC_RATE_MASK,
+       IEEE80211_OFDM_RATE_6MB|IEEE80211_BASIC_RATE_MASK, IEEE80211_OFDM_RATE_12MB|IEEE80211_BASIC_RATE_MASK,
+       IEEE80211_OFDM_RATE_24MB|IEEE80211_BASIC_RATE_MASK
+};
+
+
+int cckrates_included(unsigned char *rate, int ratelen)
+{
+       int     i;
+
+       for(i = 0; i < ratelen; i++)
+       {
+               if  (  (((rate[i]) & 0x7f) == 2)        || (((rate[i]) & 0x7f) == 4) ||
+                          (((rate[i]) & 0x7f) == 11)  || (((rate[i]) & 0x7f) == 22) )
+               return _TRUE;
+       }
+
+       return _FALSE;
+
+}
+
+int cckratesonly_included(unsigned char *rate, int ratelen)
+{
+       int     i;
+
+       for(i = 0; i < ratelen; i++)
+       {
+               if  ( (((rate[i]) & 0x7f) != 2) && (((rate[i]) & 0x7f) != 4) &&
+                          (((rate[i]) & 0x7f) != 11)  && (((rate[i]) & 0x7f) != 22) )
+               return _FALSE;
+       }
+
+       return _TRUE;
+}
+
+unsigned char networktype_to_raid(unsigned char network_type)
+{
+       unsigned char raid;
+
+       switch(network_type)
+       {
+               case WIRELESS_11B:
+                       raid = 6;
+                       break;
+               case WIRELESS_11A:
+               case WIRELESS_11G:
+                       raid = 5;
+                       break;
+               case WIRELESS_11BG:
+                       raid = 4;
+                       break;
+               case WIRELESS_11_24N:
+               case WIRELESS_11_5N:
+                       raid = 3;
+                       break;
+               case WIRELESS_11A_5N:
+               case WIRELESS_11G_24N:
+                       raid = 1;
+                       break;
+               case WIRELESS_11BG_24N:
+                       raid = 0;
+                       break;
+               default:
+                       raid = 4;
+                       break;
+
+       }
+
+       return raid;
+
+}
+
+int judge_network_type(_adapter *padapter, unsigned char *rate, int ratelen)
+{
+       int network_type = 0;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+
+       if(pmlmeext->cur_channel > 14)
+       {
+               if (pmlmeinfo->HT_enable)
+               {
+                       network_type = WIRELESS_11_5N;
+               }
+
+               network_type |= WIRELESS_11A;
+       }
+       else
+       {
+               if (pmlmeinfo->HT_enable)
+               {
+                       network_type = WIRELESS_11_24N;
+               }
+
+               if ((cckratesonly_included(rate, ratelen)) == _TRUE)
+               {
+                       network_type |= WIRELESS_11B;
+               }
+               else if((cckrates_included(rate, ratelen)) == _TRUE)
+               {
+                       network_type |= WIRELESS_11BG;
+               }
+               else
+               {
+                       network_type |= WIRELESS_11G;
+               }
+       }
+
+       return  network_type;
+}
+
+unsigned char ratetbl_val_2wifirate(unsigned char rate);
+unsigned char ratetbl_val_2wifirate(unsigned char rate)
+{
+       unsigned char val = 0;
+
+       switch (rate & 0x7f)
+       {
+               case 0:
+                       val = IEEE80211_CCK_RATE_1MB;
+                       break;
+
+               case 1:
+                       val = IEEE80211_CCK_RATE_2MB;
+                       break;
+
+               case 2:
+                       val = IEEE80211_CCK_RATE_5MB;
+                       break;
+
+               case 3:
+                       val = IEEE80211_CCK_RATE_11MB;
+                       break;
+
+               case 4:
+                       val = IEEE80211_OFDM_RATE_6MB;
+                       break;
+
+               case 5:
+                       val = IEEE80211_OFDM_RATE_9MB;
+                       break;
+
+               case 6:
+                       val = IEEE80211_OFDM_RATE_12MB;
+                       break;
+
+               case 7:
+                       val = IEEE80211_OFDM_RATE_18MB;
+                       break;
+
+               case 8:
+                       val = IEEE80211_OFDM_RATE_24MB;
+                       break;
+
+               case 9:
+                       val = IEEE80211_OFDM_RATE_36MB;
+                       break;
+
+               case 10:
+                       val = IEEE80211_OFDM_RATE_48MB;
+                       break;
+
+               case 11:
+                       val = IEEE80211_OFDM_RATE_54MB;
+                       break;
+
+       }
+
+       return val;
+
+}
+
+int is_basicrate(_adapter *padapter, unsigned char rate);
+int is_basicrate(_adapter *padapter, unsigned char rate)
+{
+       int i;
+       unsigned char val;
+       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
+
+       for(i = 0; i < NumRates; i++)
+       {
+               val = pmlmeext->basicrate[i];
+
+               if ((val != 0xff) && (val != 0xfe))
+               {
+                       if (rate == ratetbl_val_2wifirate(val))
+                       {
+                               return _TRUE;
+                       }
+               }
+       }
+
+       return _FALSE;
+}
+
+unsigned int ratetbl2rateset(_adapter *padapter, unsigned char *rateset);
+unsigned int ratetbl2rateset(_adapter *padapter, unsigned char *rateset)
+{
+       int i;
+       unsigned char rate;
+       unsigned int    len = 0;
+       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
+
+       for (i = 0; i < NumRates; i++)
+       {
+               rate = pmlmeext->datarate[i];
+
+               switch (rate)
+               {
+                       case 0xff:
+                               return len;
+
+                       case 0xfe:
+                               continue;
+
+                       default:
+                               rate = ratetbl_val_2wifirate(rate);
+
+                               if (is_basicrate(padapter, rate) == _TRUE)
+                               {
+                                       rate |= IEEE80211_BASIC_RATE_MASK;
+                               }
+
+                               rateset[len] = rate;
+                               len++;
+                               break;
+               }
+       }
+       return len;
+}
+
+
+void get_rate_set(_adapter *padapter, unsigned char *pbssrate, int *bssrate_len)
+{
+       unsigned char supportedrates[NumRates];
+
+       _rtw_memset(supportedrates, 0, NumRates);
+       *bssrate_len = ratetbl2rateset(padapter, supportedrates);
+       _rtw_memcpy(pbssrate, supportedrates, *bssrate_len);
+}
+
+void UpdateBrateTbl(
+       IN PADAPTER             Adapter,
+       IN u8                   *mBratesOS
+)
+{
+       u8      i;
+       u8      rate;
+
+       // 1M, 2M, 5.5M, 11M, 6M, 12M, 24M are mandatory.
+       for(i=0;i<NDIS_802_11_LENGTH_RATES_EX;i++)
+       {
+               rate = mBratesOS[i] & 0x7f;
+               switch(rate)
+               {
+                       case IEEE80211_CCK_RATE_1MB:
+                       case IEEE80211_CCK_RATE_2MB:
+                       case IEEE80211_CCK_RATE_5MB:
+                       case IEEE80211_CCK_RATE_11MB:
+                       case IEEE80211_OFDM_RATE_6MB:
+                       case IEEE80211_OFDM_RATE_12MB:
+                       case IEEE80211_OFDM_RATE_24MB:
+                               mBratesOS[i] |= IEEE80211_BASIC_RATE_MASK;
+                               break;
+               }
+       }
+
+}
+
+void UpdateBrateTblForSoftAP(u8 *bssrateset, u32 bssratelen)
+{
+       u8      i;
+       u8      rate;
+
+       for(i=0;i<bssratelen;i++)
+       {
+               rate = bssrateset[i] & 0x7f;
+               switch(rate)
+               {
+                       case IEEE80211_CCK_RATE_1MB:
+                       case IEEE80211_CCK_RATE_2MB:
+                       case IEEE80211_CCK_RATE_5MB:
+                       case IEEE80211_CCK_RATE_11MB:
+                               bssrateset[i] |= IEEE80211_BASIC_RATE_MASK;
+                               break;
+               }
+       }
+
+}
+
+void Save_DM_Func_Flag(_adapter *padapter)
+{
+       u8      bSaveFlag = _TRUE;
+
+#ifdef CONFIG_CONCURRENT_MODE
+       _adapter *pbuddy_adapter = padapter->pbuddy_adapter;
+       if(pbuddy_adapter)
+       rtw_hal_set_hwreg(pbuddy_adapter, HW_VAR_DM_FUNC_OP, (u8 *)(&bSaveFlag));
+#endif
+
+       rtw_hal_set_hwreg(padapter, HW_VAR_DM_FUNC_OP, (u8 *)(&bSaveFlag));
+
+}
+
+void Restore_DM_Func_Flag(_adapter *padapter)
+{
+       u8      bSaveFlag = _FALSE;
+#ifdef CONFIG_CONCURRENT_MODE
+       _adapter *pbuddy_adapter = padapter->pbuddy_adapter;
+       if(pbuddy_adapter)
+       rtw_hal_set_hwreg(pbuddy_adapter, HW_VAR_DM_FUNC_OP, (u8 *)(&bSaveFlag));
+#endif
+       rtw_hal_set_hwreg(padapter, HW_VAR_DM_FUNC_OP, (u8 *)(&bSaveFlag));
+}
+
+void Switch_DM_Func(_adapter *padapter, u8 mode, u8 enable)
+{
+#ifdef CONFIG_CONCURRENT_MODE
+       _adapter *pbuddy_adapter = padapter->pbuddy_adapter;
+#endif
+
+       if(enable == _TRUE)
+       {
+#ifdef CONFIG_CONCURRENT_MODE
+               if(pbuddy_adapter)
+               rtw_hal_set_hwreg(pbuddy_adapter, HW_VAR_DM_FUNC_SET, (u8 *)(&mode));
+#endif
+               rtw_hal_set_hwreg(padapter, HW_VAR_DM_FUNC_SET, (u8 *)(&mode));
+       }
+       else
+       {
+#ifdef CONFIG_CONCURRENT_MODE
+               if(pbuddy_adapter)
+               rtw_hal_set_hwreg(pbuddy_adapter, HW_VAR_DM_FUNC_CLR, (u8 *)(&mode));
+#endif
+               rtw_hal_set_hwreg(padapter, HW_VAR_DM_FUNC_CLR, (u8 *)(&mode));
+       }
+
+#if 0
+       u8 val8;
+
+       val8 = rtw_read8(padapter, FW_DYNAMIC_FUN_SWITCH);
+
+       if(enable == _TRUE)
+       {
+               rtw_write8(padapter, FW_DYNAMIC_FUN_SWITCH, (val8 | mode));
+       }
+       else
+       {
+               rtw_write8(padapter, FW_DYNAMIC_FUN_SWITCH, (val8 & mode));
+       }
+#endif
+
+}
+
+static void Set_NETYPE1_MSR(_adapter *padapter, u8 type)
+{
+       rtw_hal_set_hwreg(padapter, HW_VAR_MEDIA_STATUS1, (u8 *)(&type));
+}
+
+static void Set_NETYPE0_MSR(_adapter *padapter, u8 type)
+{
+       rtw_hal_set_hwreg(padapter, HW_VAR_MEDIA_STATUS, (u8 *)(&type));
+}
+
+void Set_MSR(_adapter *padapter, u8 type)
+{
+#ifdef CONFIG_CONCURRENT_MODE
+       if(padapter->iface_type == IFACE_PORT1)
+       {
+               Set_NETYPE1_MSR(padapter, type);
+       }
+       else
+#endif
+       {
+               Set_NETYPE0_MSR(padapter, type);
+       }
+}
+
+inline u8 rtw_get_oper_ch(_adapter *adapter)
+{
+       return adapter_to_dvobj(adapter)->oper_channel;
+}
+
+inline void rtw_set_oper_ch(_adapter *adapter, u8 ch)
+{
+       if (adapter_to_dvobj(adapter)->oper_channel != ch)
+               adapter_to_dvobj(adapter)->on_oper_ch_time = rtw_get_current_time();
+
+       adapter_to_dvobj(adapter)->oper_channel = ch;
+}
+
+inline u8 rtw_get_oper_bw(_adapter *adapter)
+{
+       return adapter_to_dvobj(adapter)->oper_bwmode;
+}
+
+inline void rtw_set_oper_bw(_adapter *adapter, u8 bw)
+{
+       adapter_to_dvobj(adapter)->oper_bwmode = bw;
+}
+
+inline u8 rtw_get_oper_choffset(_adapter *adapter)
+{
+       return adapter_to_dvobj(adapter)->oper_ch_offset;
+}
+
+inline void rtw_set_oper_choffset(_adapter *adapter, u8 offset)
+{
+       adapter_to_dvobj(adapter)->oper_ch_offset = offset;
+}
+
+inline u32 rtw_get_on_oper_ch_time(_adapter *adapter)
+{
+       return adapter_to_dvobj(adapter)->on_oper_ch_time;
+}
+
+inline u32 rtw_get_on_cur_ch_time(_adapter *adapter)
+{
+       if (adapter->mlmeextpriv.cur_channel == adapter_to_dvobj(adapter)->oper_channel)
+               return adapter_to_dvobj(adapter)->on_oper_ch_time;
+       else
+               return 0;
+}
+
+void SelectChannel(_adapter *padapter, unsigned char channel)
+{
+       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
+
+#ifdef CONFIG_DUALMAC_CONCURRENT
+       //saved channel info
+       rtw_set_oper_ch(padapter, channel);
+       dc_SelectChannel(padapter, channel);
+#else //CONFIG_DUALMAC_CONCURRENT
+
+       _enter_critical_mutex(&(adapter_to_dvobj(padapter)->setch_mutex), NULL);
+
+       //saved channel info
+       rtw_set_oper_ch(padapter, channel);
+
+       rtw_hal_set_chan(padapter, channel);
+
+       _exit_critical_mutex(&(adapter_to_dvobj(padapter)->setch_mutex), NULL);
+
+#endif // CONFIG_DUALMAC_CONCURRENT
+}
+
+void SetBWMode(_adapter *padapter, unsigned short bwmode, unsigned char channel_offset)
+{
+       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
+
+#ifdef CONFIG_DUALMAC_CONCURRENT
+       //saved bw info
+       rtw_set_oper_bw(padapter, bwmode);
+       rtw_set_oper_choffset(padapter, channel_offset);
+       dc_SetBWMode(padapter, bwmode, channel_offset);
+#else //CONFIG_DUALMAC_CONCURRENT
+
+       _enter_critical_mutex(&(adapter_to_dvobj(padapter)->setbw_mutex), NULL);
+
+       //saved bw info
+       rtw_set_oper_bw(padapter, bwmode);
+       rtw_set_oper_choffset(padapter, channel_offset);
+
+       rtw_hal_set_bwmode(padapter, (HT_CHANNEL_WIDTH)bwmode, channel_offset);
+
+       _exit_critical_mutex(&(adapter_to_dvobj(padapter)->setbw_mutex), NULL);
+
+#endif // CONFIG_DUALMAC_CONCURRENT
+}
+
+void set_channel_bwmode(_adapter *padapter, unsigned char channel, unsigned char channel_offset, unsigned short bwmode)
+{
+       u8 center_ch;
+       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
+
+       if ( padapter->bNotifyChannelChange )
+       {
+               DBG_871X( "[%s] ch = %d, offset = %d, bwmode = %d\n", __FUNCTION__, channel, channel_offset, bwmode );
+       }
+
+       if((bwmode == HT_CHANNEL_WIDTH_20)||(channel_offset == HAL_PRIME_CHNL_OFFSET_DONT_CARE))
+       {
+               //SelectChannel(padapter, channel);
+               center_ch = channel;
+       }
+       else
+       {
+               //switch to the proper channel
+               if (channel_offset == HAL_PRIME_CHNL_OFFSET_LOWER)
+               {
+                       //SelectChannel(padapter, channel + 2);
+                       center_ch = channel + 2;
+               }
+               else
+               {
+                       //SelectChannel(padapter, channel - 2);
+                       center_ch = channel - 2;
+               }
+       }
+
+       //set Channel , must be independant for correct co_ch value/
+#ifdef CONFIG_DUALMAC_CONCURRENT
+       //saved channel/bw info
+       rtw_set_oper_ch(padapter, channel);
+       rtw_set_oper_bw(padapter, bwmode);
+       rtw_set_oper_choffset(padapter, channel_offset);
+       dc_SelectChannel(padapter, center_ch);// set center channel
+#else //CONFIG_DUALMAC_CONCURRENT
+
+       _enter_critical_mutex(&(adapter_to_dvobj(padapter)->setch_mutex), NULL);
+
+       //saved channel/bw info
+       rtw_set_oper_ch(padapter, channel);
+       rtw_set_oper_bw(padapter, bwmode);
+       rtw_set_oper_choffset(padapter, channel_offset);
+
+       rtw_hal_set_chan(padapter, center_ch);
+
+        _exit_critical_mutex(&(adapter_to_dvobj(padapter)->setch_mutex), NULL);
+
+#endif // CONFIG_DUALMAC_CONCURRENT
+
+
+       //set BandWidth
+       SetBWMode(padapter, bwmode, channel_offset);
+
+}
+
+int get_bsstype(unsigned short capability)
+{
+       if (capability & BIT(0))
+       {
+               return WIFI_FW_AP_STATE;
+       }
+       else if (capability & BIT(1))
+       {
+               return WIFI_FW_ADHOC_STATE;
+       }
+       else
+       {
+               return 0;
+       }
+}
+
+__inline u8 *get_my_bssid(WLAN_BSSID_EX *pnetwork)
+{
+       return (pnetwork->MacAddress);
+}
+
+u16 get_beacon_interval(WLAN_BSSID_EX *bss)
+{
+       unsigned short val;
+       _rtw_memcpy((unsigned char *)&val, rtw_get_beacon_interval_from_ie(bss->IEs), 2);
+
+       return le16_to_cpu(val);
+
+}
+
+int is_client_associated_to_ap(_adapter *padapter)
+{
+       struct mlme_ext_priv    *pmlmeext;
+       struct mlme_ext_info    *pmlmeinfo;
+
+       if(!padapter)
+               return _FAIL;
+
+       pmlmeext = &padapter->mlmeextpriv;
+       pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       if ((pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS) && ((pmlmeinfo->state&0x03) == WIFI_FW_STATION_STATE))
+       {
+               return _TRUE;
+       }
+       else
+       {
+               return _FAIL;
+       }
+}
+
+int is_client_associated_to_ibss(_adapter *padapter)
+{
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       if ((pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS) && ((pmlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE))
+       {
+               return _TRUE;
+       }
+       else
+       {
+               return _FAIL;
+       }
+}
+
+int is_IBSS_empty(_adapter *padapter)
+{
+       unsigned int i;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       for (i = IBSS_START_MAC_ID; i < NUM_STA; i++)
+       {
+               if (pmlmeinfo->FW_sta_info[i].status == 1)
+               {
+                       return _FAIL;
+               }
+       }
+
+       return _TRUE;
+
+}
+
+unsigned int decide_wait_for_beacon_timeout(unsigned int bcn_interval)
+{
+       if ((bcn_interval << 2) < WAIT_FOR_BCN_TO_MIN)
+       {
+               return WAIT_FOR_BCN_TO_MIN;
+       }
+       else if ((bcn_interval << 2) > WAIT_FOR_BCN_TO_MAX)
+       {
+               return WAIT_FOR_BCN_TO_MAX;
+       }
+       else
+       {
+               return ((bcn_interval << 2));
+       }
+}
+
+void CAM_empty_entry(
+       PADAPTER        Adapter,
+       u8                      ucIndex
+)
+{
+       rtw_hal_set_hwreg(Adapter, HW_VAR_CAM_EMPTY_ENTRY, (u8 *)(&ucIndex));
+}
+
+void invalidate_cam_all(_adapter *padapter)
+{
+       rtw_hal_set_hwreg(padapter, HW_VAR_CAM_INVALID_ALL, 0);
+}
+#if 0
+static u32 _ReadCAM(_adapter *padapter ,u32 addr)
+{
+       u32 count = 0, cmd;
+       cmd = CAM_POLLINIG |addr ;
+       rtw_write32(padapter, RWCAM, cmd);
+
+       do{
+               if(0 == (rtw_read32(padapter,REG_CAMCMD) & CAM_POLLINIG)){
+                       break;
+               }
+       }while(count++ < 100);
+
+       return rtw_read32(padapter,REG_CAMREAD);
+}
+void read_cam(_adapter *padapter ,u8 entry)
+{
+       u32     j,count = 0, addr, cmd;
+       addr = entry << 3;
+
+       printk("********* DUMP CAM Entry_#%02d***************\n",entry);
+       for (j = 0; j < 6; j++)
+       {
+               cmd = _ReadCAM(padapter ,addr+j);
+               printk("offset:0x%02x => 0x%08x \n",addr+j,cmd);
+       }
+       printk("*********************************\n");
+}
+#endif
+
+void write_cam(_adapter *padapter, u8 entry, u16 ctrl, u8 *mac, u8 *key)
+{
+       unsigned int    i, val, addr;
+       //unsigned int    cmd;
+       int j;
+       u32     cam_val[2];
+
+       addr = entry << 3;
+
+       for (j = 5; j >= 0; j--)
+       {
+               switch (j)
+               {
+                       case 0:
+                               val = (ctrl | (mac[0] << 16) | (mac[1] << 24) );
+                               break;
+
+                       case 1:
+                               val = (mac[2] | ( mac[3] << 8) | (mac[4] << 16) | (mac[5] << 24));
+                               break;
+
+                       default:
+                               i = (j - 2) << 2;
+                               val = (key[i] | (key[i+1] << 8) | (key[i+2] << 16) | (key[i+3] << 24));
+                               break;
+
+               }
+
+               cam_val[0] = val;
+               cam_val[1] = addr + (unsigned int)j;
+
+               rtw_hal_set_hwreg(padapter, HW_VAR_CAM_WRITE, (u8 *)cam_val);
+
+               //rtw_write32(padapter, WCAMI, val);
+
+               //cmd = CAM_POLLINIG | CAM_WRITE | (addr + j);
+               //rtw_write32(padapter, RWCAM, cmd);
+
+               //DBG_871X("%s=> cam write: %x, %x\n",__FUNCTION__, cmd, val);
+
+       }
+
+}
+
+void clear_cam_entry(_adapter *padapter, u8 entry)
+{
+#if 0
+       u32     addr, val=0;
+       u32     cam_val[2];
+
+       addr = entry << 3;
+
+
+       cam_val[0] = val;
+       cam_val[1] = addr + (unsigned int)0;
+
+       rtw_hal_set_hwreg(padapter, HW_VAR_CAM_WRITE, (u8 *)cam_val);
+
+
+
+       cam_val[0] = val;
+       cam_val[1] = addr + (unsigned int)1;
+
+       rtw_hal_set_hwreg(padapter, HW_VAR_CAM_WRITE, (u8 *)cam_val);
+#else
+
+       unsigned char null_sta[] = {0x00, 0x00, 0x00, 0x00, 0x00, 0x00};
+
+       unsigned char null_key[] = {0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,0x00, 0x00, 0x00, 0x00,0x00, 0x00, 0x00, 0x00};
+
+       write_cam(padapter, entry, 0, null_sta, null_key);
+
+#endif
+}
+
+int allocate_fw_sta_entry(_adapter *padapter)
+{
+       unsigned int mac_id;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       for (mac_id = IBSS_START_MAC_ID; mac_id < NUM_STA; mac_id++)
+       {
+               if (pmlmeinfo->FW_sta_info[mac_id].status == 0)
+               {
+                       pmlmeinfo->FW_sta_info[mac_id].status = 1;
+                       pmlmeinfo->FW_sta_info[mac_id].retry = 0;
+                       break;
+               }
+       }
+
+       return mac_id;
+}
+
+void flush_all_cam_entry(_adapter *padapter)
+{
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+#ifdef CONFIG_CONCURRENT_MODE
+
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+
+       //if(check_buddy_mlmeinfo_state(padapter, _HW_STATE_NOLINK_))
+       if(check_buddy_fwstate(padapter, _FW_LINKED) == _FALSE)
+       {
+               rtw_hal_set_hwreg(padapter, HW_VAR_CAM_INVALID_ALL, 0);
+       }
+       else
+       {
+               if(check_fwstate(pmlmepriv, WIFI_STATION_STATE))
+               {
+                       struct sta_priv *pstapriv = &padapter->stapriv;
+                       struct sta_info *psta;
+                       u8 cam_id;//cam_entry
+
+                       psta = rtw_get_stainfo(pstapriv, pmlmeinfo->network.MacAddress);
+                       if(psta) {
+                               if(psta->state & WIFI_AP_STATE)
+                               {}   //clear cam when ap free per sta_info
+                               else {
+                                       if(psta->mac_id==2)
+                                               cam_id = 5;
+                                       else
+                                               cam_id = 4;
+                               }
+                               //clear_cam_entry(padapter, cam_id);
+                               rtw_clearstakey_cmd(padapter, (u8*)psta, cam_id, _FALSE);
+                       }
+               }
+               else if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
+               {
+                       //clear cam when ap free per sta_info
+               }
+       }
+#else //CONFIG_CONCURRENT_MODE
+
+       rtw_hal_set_hwreg(padapter, HW_VAR_CAM_INVALID_ALL, 0);
+
+#endif //CONFIG_CONCURRENT_MODE
+
+       _rtw_memset((u8 *)(pmlmeinfo->FW_sta_info), 0, sizeof(pmlmeinfo->FW_sta_info));
+
+}
+
+#if defined(CONFIG_P2P) && defined(CONFIG_WFD)
+int WFD_info_handler(_adapter *padapter, PNDIS_802_11_VARIABLE_IEs     pIE)
+{
+       struct registry_priv    *pregpriv = &padapter->registrypriv;
+       struct mlme_priv        *pmlmepriv = &(padapter->mlmepriv);
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       struct wifidirect_info  *pwdinfo;
+       u8      wfd_ie[ 128 ] = { 0x00 };
+       u32     wfd_ielen = 0;
+
+
+       pwdinfo = &padapter->wdinfo;
+       if ( rtw_get_wfd_ie( ( u8* ) pIE, pIE->Length, wfd_ie, &wfd_ielen ) )
+       {
+               u8      attr_content[ 10 ] = { 0x00 };
+               u32     attr_contentlen = 0;
+
+               printk( "[%s] Found WFD IE\n", __FUNCTION__ );
+               rtw_get_wfd_attr_content( wfd_ie, wfd_ielen, WFD_ATTR_DEVICE_INFO, attr_content, &attr_contentlen);
+               if ( attr_contentlen )
+               {
+                       pwdinfo->wfd_info->peer_rtsp_ctrlport = RTW_GET_BE16( attr_content + 2 );
+                       DBG_8192C( "[%s] Peer PORT NUM = %d\n", __FUNCTION__, pwdinfo->wfd_info->peer_rtsp_ctrlport );
+                       return( _TRUE );
+               }
+       }
+       else
+       {
+               printk( "[%s] NO WFD IE\n", __FUNCTION__ );
+
+       }
+       return( _FAIL );
+}
+#endif
+
+int WMM_param_handler(_adapter *padapter, PNDIS_802_11_VARIABLE_IEs    pIE)
+{
+       //struct registry_priv  *pregpriv = &padapter->registrypriv;
+       struct mlme_priv        *pmlmepriv = &(padapter->mlmepriv);
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       if(pmlmepriv->qospriv.qos_option==0)
+       {
+               pmlmeinfo->WMM_enable = 0;
+               return _FAIL;
+       }
+
+       pmlmeinfo->WMM_enable = 1;
+       _rtw_memcpy(&(pmlmeinfo->WMM_param), (pIE->data + 6), sizeof(struct WMM_para_element));
+       return _TRUE;
+
+       /*if (pregpriv->wifi_spec == 1)
+       {
+               if (pmlmeinfo->WMM_enable == 1)
+               {
+                       //todo: compare the parameter set count & decide wheher to update or not
+                       return _FAIL;
+               }
+               else
+               {
+                       pmlmeinfo->WMM_enable = 1;
+                       _rtw_rtw_memcpy(&(pmlmeinfo->WMM_param), (pIE->data + 6), sizeof(struct WMM_para_element));
+                       return _TRUE;
+               }
+       }
+       else
+       {
+               pmlmeinfo->WMM_enable = 0;
+               return _FAIL;
+       }*/
+
+}
+
+void WMMOnAssocRsp(_adapter *padapter)
+{
+       u8      ACI, ACM, AIFS, ECWMin, ECWMax, aSifsTime;
+       u8      acm_mask;
+       u16     TXOP;
+       u32     acParm, i;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       if (pmlmeinfo->WMM_enable == 0)
+       {
+               padapter->mlmepriv.acm_mask = 0;
+               return;
+       }
+
+       acm_mask = 0;
+
+       if( pmlmeext->cur_wireless_mode == WIRELESS_11B)
+               aSifsTime = 10;
+       else
+               aSifsTime = 16;
+
+       for (i = 0; i < 4; i++)
+       {
+               ACI = (pmlmeinfo->WMM_param.ac_param[i].ACI_AIFSN >> 5) & 0x03;
+               ACM = (pmlmeinfo->WMM_param.ac_param[i].ACI_AIFSN >> 4) & 0x01;
+
+               //AIFS = AIFSN * slot time + SIFS - r2t phy delay
+               AIFS = (pmlmeinfo->WMM_param.ac_param[i].ACI_AIFSN & 0x0f) * pmlmeinfo->slotTime + aSifsTime;
+
+               ECWMin = (pmlmeinfo->WMM_param.ac_param[i].CW & 0x0f);
+               ECWMax = (pmlmeinfo->WMM_param.ac_param[i].CW & 0xf0) >> 4;
+               TXOP = le16_to_cpu(pmlmeinfo->WMM_param.ac_param[i].TXOP_limit);
+
+               acParm = AIFS | (ECWMin << 8) | (ECWMax << 12) | (TXOP << 16);
+
+               switch (ACI)
+               {
+                       case 0x0:
+                               rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BE, (u8 *)(&acParm));
+                               acm_mask |= (ACM? BIT(1):0);
+                               break;
+
+                       case 0x1:
+                               rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BK, (u8 *)(&acParm));
+                               //acm_mask |= (ACM? BIT(0):0);
+                               break;
+
+                       case 0x2:
+                               rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VI, (u8 *)(&acParm));
+                               acm_mask |= (ACM? BIT(2):0);
+                               break;
+
+                       case 0x3:
+                               rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VO, (u8 *)(&acParm));
+                               acm_mask |= (ACM? BIT(3):0);
+                               break;
+               }
+
+               DBG_871X("WMM(%x): %x, %x\n", ACI, ACM, acParm);
+       }
+
+       if(padapter->registrypriv.acm_method == 1)
+               rtw_hal_set_hwreg(padapter, HW_VAR_ACM_CTRL, (u8 *)(&acm_mask));
+       else
+               padapter->mlmepriv.acm_mask = acm_mask;
+
+       return;
+}
+
+static void bwmode_update_check(_adapter *padapter, PNDIS_802_11_VARIABLE_IEs pIE)
+{
+       unsigned char    new_bwmode;
+       unsigned char  new_ch_offset;
+       struct HT_info_element   *pHT_info;
+       struct mlme_priv        *pmlmepriv = &(padapter->mlmepriv);
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       struct registry_priv *pregistrypriv = &padapter->registrypriv;
+       struct ht_priv                  *phtpriv = &pmlmepriv->htpriv;
+       u8 cbw40_enable=0;
+
+       if(!pIE)
+               return;
+
+       if(phtpriv->ht_option == _FALSE)        return;
+
+       if(pIE->Length > sizeof(struct HT_info_element))
+               return;
+
+       pHT_info = (struct HT_info_element *)pIE->data;
+
+       if (pmlmeext->cur_channel > 14) {
+               if (pregistrypriv->cbw40_enable & BIT(1))
+                       cbw40_enable = 1;
+       } else {
+               if (pregistrypriv->cbw40_enable & BIT(0))
+                       cbw40_enable = 1;
+       }
+
+       if((pHT_info->infos[0] & BIT(2)) && cbw40_enable )
+       {
+               new_bwmode = HT_CHANNEL_WIDTH_40;
+
+               switch (pHT_info->infos[0] & 0x3)
+               {
+                       case 1:
+                               new_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
+                               break;
+
+                       case 3:
+                               new_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
+                               break;
+
+                       default:
+                               new_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+                               break;
+               }
+       }
+       else
+       {
+               new_bwmode = HT_CHANNEL_WIDTH_20;
+               new_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+       }
+
+
+       if((new_bwmode!= pmlmeext->cur_bwmode) || (new_ch_offset!=pmlmeext->cur_ch_offset))
+       {
+               pmlmeinfo->bwmode_updated = _TRUE;
+
+               pmlmeext->cur_bwmode = new_bwmode;
+               pmlmeext->cur_ch_offset = new_ch_offset;
+
+               //update HT info also
+               HT_info_handler(padapter, pIE);
+       }
+       else
+       {
+               pmlmeinfo->bwmode_updated = _FALSE;
+       }
+
+
+       if(_TRUE == pmlmeinfo->bwmode_updated)
+       {
+               struct sta_info *psta;
+               WLAN_BSSID_EX   *cur_network = &(pmlmeinfo->network);
+               struct sta_priv *pstapriv = &padapter->stapriv;
+
+               //set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
+
+
+               //update ap's stainfo
+               psta = rtw_get_stainfo(pstapriv, cur_network->MacAddress);
+               if(psta)
+               {
+                       struct ht_priv  *phtpriv_sta = &psta->htpriv;
+
+                       if(phtpriv_sta->ht_option)
+                       {
+                               // bwmode
+                               phtpriv_sta->bwmode = pmlmeext->cur_bwmode;
+                               phtpriv_sta->ch_offset = pmlmeext->cur_ch_offset;
+                       }
+                       else
+                       {
+                               phtpriv_sta->bwmode = HT_CHANNEL_WIDTH_20;
+                               phtpriv_sta->ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+                       }
+
+               }
+
+               //pmlmeinfo->bwmode_updated = _FALSE;//bwmode_updated done, reset it!
+
+       }
+
+}
+
+void HT_caps_handler(_adapter *padapter, PNDIS_802_11_VARIABLE_IEs pIE)
+{
+       unsigned int    i;
+       u8      rf_type;
+       u8      max_AMPDU_len, min_MPDU_spacing;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
+       struct ht_priv                  *phtpriv = &pmlmepriv->htpriv;
+       struct registry_priv    *pregistrypriv = &padapter->registrypriv;
+
+       if(pIE==NULL) return;
+
+       if(phtpriv->ht_option == _FALSE)        return;
+
+       pmlmeinfo->HT_caps_enable = 1;
+
+       for (i = 0; i < (pIE->Length); i++)
+       {
+               if (i != 2)
+               {
+                       //      Commented by Albert 2010/07/12
+                       //      Got the endian issue here.
+                       pmlmeinfo->HT_caps.u.HT_cap[i] &= (pIE->data[i]);
+               }
+               else
+               {
+                       //modify from  fw by Thomas 2010/11/17
+                       if ((pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x3) > (pIE->data[i] & 0x3))
+                       {
+                               max_AMPDU_len = (pIE->data[i] & 0x3);
+                       }
+                       else
+                       {
+                               max_AMPDU_len = (pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x3);
+                       }
+
+                       if ((pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x1c) > (pIE->data[i] & 0x1c))
+                       {
+                               min_MPDU_spacing = (pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x1c);
+                       }
+                       else
+                       {
+                               min_MPDU_spacing = (pIE->data[i] & 0x1c);
+                       }
+
+                       pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para = max_AMPDU_len | min_MPDU_spacing;
+               }
+       }
+
+       //      Commented by Albert 2010/07/12
+       //      Have to handle the endian issue after copying.
+       //      HT_ext_caps didn't be used yet.
+       pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info = le16_to_cpu( pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info );
+       pmlmeinfo->HT_caps.u.HT_cap_element.HT_ext_caps = le16_to_cpu( pmlmeinfo->HT_caps.u.HT_cap_element.HT_ext_caps );
+
+       rtw_hal_get_hwreg(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
+
+       //update the MCS rates
+       for (i = 0; i < 16; i++)
+       {
+               if((rf_type == RF_1T1R) || (rf_type == RF_1T2R))
+               {
+                       pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= MCS_rate_1R[i];
+               }
+               else
+               {
+                       #ifdef CONFIG_DISABLE_MCS13TO15
+                       if(pmlmeext->cur_bwmode == HT_CHANNEL_WIDTH_40 && (pregistrypriv->wifi_spec!=1))
+                               pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= MCS_rate_2R_MCS13TO15_OFF[i];
+                       else
+                       pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= MCS_rate_2R[i];
+                       #else
+                       pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= MCS_rate_2R[i];
+                       #endif //CONFIG_DISABLE_MCS13TO15
+               }
+               #ifdef RTL8192C_RECONFIG_TO_1T1R
+               {
+                       pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= MCS_rate_1R[i];
+               }
+               #endif
+
+               if(pregistrypriv->special_rf_path)
+                       pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= MCS_rate_1R[i];
+
+       }
+
+       return;
+}
+
+void HT_info_handler(_adapter *padapter, PNDIS_802_11_VARIABLE_IEs pIE)
+{
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
+       struct ht_priv                  *phtpriv = &pmlmepriv->htpriv;
+
+       if(pIE==NULL) return;
+
+       if(phtpriv->ht_option == _FALSE)        return;
+
+
+       if(pIE->Length > sizeof(struct HT_info_element))
+               return;
+
+       pmlmeinfo->HT_info_enable = 1;
+       _rtw_memcpy(&(pmlmeinfo->HT_info), pIE->data, pIE->Length);
+
+       return;
+}
+
+void HTOnAssocRsp(_adapter *padapter)
+{
+       unsigned char           max_AMPDU_len;
+       unsigned char           min_MPDU_spacing;
+       //struct registry_priv   *pregpriv = &padapter->registrypriv;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       DBG_871X("%s\n", __FUNCTION__);
+
+       if ((pmlmeinfo->HT_info_enable) && (pmlmeinfo->HT_caps_enable))
+       {
+               pmlmeinfo->HT_enable = 1;
+       }
+       else
+       {
+               pmlmeinfo->HT_enable = 0;
+               //set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
+               return;
+       }
+
+       //handle A-MPDU parameter field
+       /*
+               AMPDU_para [1:0]:Max AMPDU Len => 0:8k , 1:16k, 2:32k, 3:64k
+               AMPDU_para [4:2]:Min MPDU Start Spacing
+       */
+       max_AMPDU_len = pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x03;
+
+       min_MPDU_spacing = (pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x1c) >> 2;
+
+       rtw_hal_set_hwreg(padapter, HW_VAR_AMPDU_MIN_SPACE, (u8 *)(&min_MPDU_spacing));
+
+       rtw_hal_set_hwreg(padapter, HW_VAR_AMPDU_FACTOR, (u8 *)(&max_AMPDU_len));
+
+#if 0 //move to rtw_update_ht_cap()
+       if ((pregpriv->cbw40_enable) &&
+               (pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info & BIT(1)) &&
+               (pmlmeinfo->HT_info.infos[0] & BIT(2)))
+       {
+               //switch to the 40M Hz mode accoring to the AP
+               pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_40;
+               switch ((pmlmeinfo->HT_info.infos[0] & 0x3))
+               {
+                       case HT_EXTCHNL_OFFSET_UPPER:
+                               pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
+                               break;
+
+                       case HT_EXTCHNL_OFFSET_LOWER:
+                               pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
+                               break;
+
+                       default:
+                               pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+                               break;
+               }
+
+               //SelectChannel(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset);
+       }
+#endif
+
+       //set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
+
+#if 0 //move to rtw_update_ht_cap()
+       //
+       // Config SM Power Save setting
+       //
+       pmlmeinfo->SM_PS = (pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info & 0x0C) >> 2;
+       if(pmlmeinfo->SM_PS == WLAN_HT_CAP_SM_PS_STATIC)
+       {
+               /*u8 i;
+               //update the MCS rates
+               for (i = 0; i < 16; i++)
+               {
+                       pmlmeinfo->HT_caps.HT_cap_element.MCS_rate[i] &= MCS_rate_1R[i];
+               }*/
+               DBG_871X("%s(): WLAN_HT_CAP_SM_PS_STATIC\n",__FUNCTION__);
+       }
+
+       //
+       // Config current HT Protection mode.
+       //
+       pmlmeinfo->HT_protection = pmlmeinfo->HT_info.infos[1] & 0x3;
+#endif
+
+}
+
+void ERP_IE_handler(_adapter *padapter, PNDIS_802_11_VARIABLE_IEs pIE)
+{
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       if(pIE->Length>1)
+               return;
+
+       pmlmeinfo->ERP_enable = 1;
+       _rtw_memcpy(&(pmlmeinfo->ERP_IE), pIE->data, pIE->Length);
+}
+
+void VCS_update(_adapter *padapter, struct sta_info *psta)
+{
+       struct registry_priv     *pregpriv = &padapter->registrypriv;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       switch (pregpriv->vrtl_carrier_sense)/* 0:off 1:on 2:auto */
+       {
+               case 0: //off
+                       psta->rtsen = 0;
+                       psta->cts2self = 0;
+                       break;
+
+               case 1: //on
+                       if (pregpriv->vcs_type == 1) /* 1:RTS/CTS 2:CTS to self */
+                       {
+                               psta->rtsen = 1;
+                               psta->cts2self = 0;
+                       }
+                       else
+                       {
+                               psta->rtsen = 0;
+                               psta->cts2self = 1;
+                       }
+                       break;
+
+               case 2: //auto
+               default:
+                       if ((pmlmeinfo->ERP_enable) && (pmlmeinfo->ERP_IE & BIT(1)))
+                       {
+                               if (pregpriv->vcs_type == 1)
+                               {
+                                       psta->rtsen = 1;
+                                       psta->cts2self = 0;
+                               }
+                               else
+                               {
+                                       psta->rtsen = 0;
+                                       psta->cts2self = 1;
+                               }
+                       }
+                       else
+                       {
+                               psta->rtsen = 0;
+                               psta->cts2self = 0;
+                       }
+                       break;
+       }
+}
+
+#ifdef CONFIG_TDLS
+int check_ap_tdls_prohibited(u8 *pframe, u8 pkt_len)
+{
+       u8 tdls_prohibited_bit = 0x40; //bit(38); TDLS_prohibited
+
+       if(pkt_len < 5)
+       {
+               return _FALSE;
+       }
+
+       pframe += 4;
+       if( (*pframe) & tdls_prohibited_bit )
+               return _TRUE;
+
+       return _FALSE;
+}
+#endif //CONFIG_TDLS
+
+void update_beacon_info(_adapter *padapter, u8 *pframe, uint pkt_len, struct sta_info *psta)
+{
+       unsigned int i;
+       unsigned int len;
+       PNDIS_802_11_VARIABLE_IEs       pIE;
+
+#ifdef CONFIG_TDLS
+       struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
+       u8 tdls_prohibited[] = { 0x00, 0x00, 0x00, 0x00, 0x10 }; //bit(38): TDLS_prohibited
+#endif //CONFIG_TDLS
+
+       len = pkt_len - (_BEACON_IE_OFFSET_ + WLAN_HDR_A3_LEN);
+
+       for (i = 0; i < len;)
+       {
+               pIE = (PNDIS_802_11_VARIABLE_IEs)(pframe + (_BEACON_IE_OFFSET_ + WLAN_HDR_A3_LEN) + i);
+
+               switch (pIE->ElementID)
+               {
+#if 0
+                       case _VENDOR_SPECIFIC_IE_:
+                               //todo: to update WMM paramter set while receiving beacon
+                               if (_rtw_memcmp(pIE->data, WMM_PARA_OUI, 6))    //WMM
+                               {
+                                       (WMM_param_handler(padapter, pIE))? WMMOnAssocRsp(padapter): 0;
+                               }
+                               break;
+#endif
+
+                       case _HT_EXTRA_INFO_IE_:        //HT info
+                               //HT_info_handler(padapter, pIE);
+                               bwmode_update_check(padapter, pIE);
+                               break;
+
+                       case _ERPINFO_IE_:
+                               ERP_IE_handler(padapter, pIE);
+                               VCS_update(padapter, psta);
+                               break;
+
+#ifdef CONFIG_TDLS
+                       case _EXT_CAP_IE_:
+                               if( check_ap_tdls_prohibited(pIE->data, pIE->Length) == _TRUE )
+                                       ptdlsinfo->ap_prohibited = _TRUE;
+                               break;
+#endif //CONFIG_TDLS
+                       default:
+                               break;
+               }
+
+               i += (pIE->Length + 2);
+       }
+}
+
+#ifdef CONFIG_DFS
+void process_csa_ie(_adapter *padapter, u8 *pframe, uint pkt_len)
+{
+       unsigned int i;
+       unsigned int len;
+       PNDIS_802_11_VARIABLE_IEs       pIE;
+       u8 new_ch_no = 0;
+
+       len = pkt_len - (_BEACON_IE_OFFSET_ + WLAN_HDR_A3_LEN);
+
+       for (i = 0; i < len;)
+       {
+               pIE = (PNDIS_802_11_VARIABLE_IEs)(pframe + (_BEACON_IE_OFFSET_ + WLAN_HDR_A3_LEN) + i);
+
+               switch (pIE->ElementID)
+               {
+                       case _CH_SWTICH_ANNOUNCE_:
+                               _rtw_memcpy(&new_ch_no, pIE->data+1, 1);
+                               rtw_set_csa_cmd(padapter, new_ch_no);
+                               break;
+
+                       default:
+                               break;
+               }
+
+               i += (pIE->Length + 2);
+       }
+}
+#endif //CONFIG_DFS
+
+unsigned int is_ap_in_tkip(_adapter *padapter)
+{
+       u32 i;
+       PNDIS_802_11_VARIABLE_IEs       pIE;
+       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       WLAN_BSSID_EX           *cur_network = &(pmlmeinfo->network);
+
+       if (rtw_get_capability((WLAN_BSSID_EX *)cur_network) & WLAN_CAPABILITY_PRIVACY)
+       {
+               for (i = sizeof(NDIS_802_11_FIXED_IEs); i < pmlmeinfo->network.IELength;)
+               {
+                       pIE = (PNDIS_802_11_VARIABLE_IEs)(pmlmeinfo->network.IEs + i);
+
+                       switch (pIE->ElementID)
+                       {
+                               case _VENDOR_SPECIFIC_IE_:
+                                       if ((_rtw_memcmp(pIE->data, RTW_WPA_OUI, 4)) && (_rtw_memcmp((pIE->data + 12), WPA_TKIP_CIPHER, 4)))
+                                       {
+                                               return _TRUE;
+                                       }
+                                       break;
+
+                               case _RSN_IE_2_:
+                                       if (_rtw_memcmp((pIE->data + 8), RSN_TKIP_CIPHER, 4))
+                                       {
+                                               return _TRUE;
+                                       }
+
+                               default:
+                                       break;
+                       }
+
+                       i += (pIE->Length + 2);
+               }
+
+               return _FALSE;
+       }
+       else
+       {
+               return _FALSE;
+       }
+
+}
+
+int wifirate2_ratetbl_inx(unsigned char rate);
+int wifirate2_ratetbl_inx(unsigned char rate)
+{
+       int     inx = 0;
+       rate = rate & 0x7f;
+
+       switch (rate)
+       {
+               case 54*2:
+                       inx = 11;
+                       break;
+
+               case 48*2:
+                       inx = 10;
+                       break;
+
+               case 36*2:
+                       inx = 9;
+                       break;
+
+               case 24*2:
+                       inx = 8;
+                       break;
+
+               case 18*2:
+                       inx = 7;
+                       break;
+
+               case 12*2:
+                       inx = 6;
+                       break;
+
+               case 9*2:
+                       inx = 5;
+                       break;
+
+               case 6*2:
+                       inx = 4;
+                       break;
+
+               case 11*2:
+                       inx = 3;
+                       break;
+               case 11:
+                       inx = 2;
+                       break;
+
+               case 2*2:
+                       inx = 1;
+                       break;
+
+               case 1*2:
+                       inx = 0;
+                       break;
+
+       }
+       return inx;
+}
+
+unsigned int update_basic_rate(unsigned char *ptn, unsigned int ptn_sz)
+{
+       unsigned int i, num_of_rate;
+       unsigned int mask = 0;
+
+       num_of_rate = (ptn_sz > NumRates)? NumRates: ptn_sz;
+
+       for (i = 0; i < num_of_rate; i++)
+       {
+               if ((*(ptn + i)) & 0x80)
+               {
+                       mask |= 0x1 << wifirate2_ratetbl_inx(*(ptn + i));
+               }
+       }
+       return mask;
+}
+
+unsigned int update_supported_rate(unsigned char *ptn, unsigned int ptn_sz)
+{
+       unsigned int i, num_of_rate;
+       unsigned int mask = 0;
+
+       num_of_rate = (ptn_sz > NumRates)? NumRates: ptn_sz;
+
+       for (i = 0; i < num_of_rate; i++)
+       {
+               mask |= 0x1 << wifirate2_ratetbl_inx(*(ptn + i));
+       }
+
+       return mask;
+}
+
+unsigned int update_MSC_rate(struct HT_caps_element *pHT_caps)
+{
+       unsigned int mask = 0;
+
+       mask = ((pHT_caps->u.HT_cap_element.MCS_rate[0] << 12) | (pHT_caps->u.HT_cap_element.MCS_rate[1] << 20));
+
+       return mask;
+}
+
+int support_short_GI(_adapter *padapter, struct HT_caps_element *pHT_caps)
+{
+       unsigned char                                   bit_offset;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       if (!(pmlmeinfo->HT_enable))
+               return _FAIL;
+
+       if ((pmlmeinfo->assoc_AP_vendor == ralinkAP))
+               return _FAIL;
+
+       bit_offset = (pmlmeext->cur_bwmode & HT_CHANNEL_WIDTH_40)? 6: 5;
+
+       if (pHT_caps->u.HT_cap_element.HT_caps_info & (0x1 << bit_offset))
+       {
+               return _SUCCESS;
+       }
+       else
+       {
+               return _FAIL;
+       }
+}
+
+unsigned char get_highest_rate_idx(u32 mask)
+{
+       int i;
+       unsigned char rate_idx=0;
+
+       for(i=27; i>=0; i--)
+       {
+               if(mask & BIT(i))
+               {
+                       rate_idx = i;
+                       break;
+               }
+       }
+
+       return rate_idx;
+}
+
+unsigned char get_highest_mcs_rate(struct HT_caps_element *pHT_caps);
+unsigned char get_highest_mcs_rate(struct HT_caps_element *pHT_caps)
+{
+       int i, mcs_rate;
+
+       mcs_rate = (pHT_caps->u.HT_cap_element.MCS_rate[0] | (pHT_caps->u.HT_cap_element.MCS_rate[1] << 8));
+
+       for (i = 15; i >= 0; i--)
+       {
+               if (mcs_rate & (0x1 << i))
+               {
+                       break;
+               }
+       }
+
+       return i;
+}
+
+void Update_RA_Entry(_adapter *padapter, u32 mac_id)
+{
+       rtw_hal_update_ra_mask(padapter, mac_id);
+}
+
+void enable_rate_adaptive(_adapter *padapter, u32 mac_id);
+void enable_rate_adaptive(_adapter *padapter, u32 mac_id)
+{
+       Update_RA_Entry(padapter, mac_id);
+}
+
+void set_sta_rate(_adapter *padapter, struct sta_info *psta)
+{
+       //rate adaptive
+       enable_rate_adaptive(padapter, psta->mac_id);
+}
+
+// Update RRSR and Rate for USERATE
+void update_tx_basic_rate(_adapter *padapter, u8 wirelessmode)
+{
+       NDIS_802_11_RATES_EX    supported_rates;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+#ifdef CONFIG_P2P
+       struct wifidirect_info* pwdinfo = &padapter->wdinfo;
+
+       //      Added by Albert 2011/03/22
+       //      In the P2P mode, the driver should not support the b mode.
+       //      So, the Tx packet shouldn't use the CCK rate
+       if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+               return;
+#endif //CONFIG_P2P
+#ifdef CONFIG_INTEL_WIDI
+       if (padapter->mlmepriv.widi_state != INTEL_WIDI_STATE_NONE)
+               return;
+#endif //CONFIG_INTEL_WIDI
+
+       _rtw_memset(supported_rates, 0, NDIS_802_11_LENGTH_RATES_EX);
+
+       //clear B mod if current channel is in 5G band, avoid tx cck rate in 5G band.
+       if(pmlmeext->cur_channel > 14)
+               wirelessmode &= ~(WIRELESS_11B);
+
+       if ((wirelessmode & WIRELESS_11B) && (wirelessmode == WIRELESS_11B)) {
+               _rtw_memcpy(supported_rates, rtw_basic_rate_cck, 4);
+       } else if (wirelessmode & WIRELESS_11B) {
+               _rtw_memcpy(supported_rates, rtw_basic_rate_mix, 7);
+       } else {
+               _rtw_memcpy(supported_rates, rtw_basic_rate_ofdm, 3);
+       }
+
+       if (wirelessmode & WIRELESS_11B)
+               update_mgnt_tx_rate(padapter, IEEE80211_CCK_RATE_1MB);
+       else
+               update_mgnt_tx_rate(padapter, IEEE80211_OFDM_RATE_6MB);
+
+       rtw_hal_set_hwreg(padapter, HW_VAR_BASIC_RATE, supported_rates);
+}
+
+unsigned char check_assoc_AP(u8 *pframe, uint len)
+{
+       unsigned int    i;
+       PNDIS_802_11_VARIABLE_IEs       pIE;
+
+       for (i = sizeof(NDIS_802_11_FIXED_IEs); i < len;)
+       {
+               pIE = (PNDIS_802_11_VARIABLE_IEs)(pframe + i);
+
+               switch (pIE->ElementID)
+               {
+                       case _VENDOR_SPECIFIC_IE_:
+                               if ((_rtw_memcmp(pIE->data, ARTHEROS_OUI1, 3)) || (_rtw_memcmp(pIE->data, ARTHEROS_OUI2, 3)))
+                               {
+                                       DBG_871X("link to Artheros AP\n");
+                                       return atherosAP;
+                               }
+                               else if ((_rtw_memcmp(pIE->data, BROADCOM_OUI1, 3))
+                                                       || (_rtw_memcmp(pIE->data, BROADCOM_OUI2, 3))
+                                                       || (_rtw_memcmp(pIE->data, BROADCOM_OUI2, 3)))
+                               {
+                                       DBG_871X("link to Broadcom AP\n");
+                                       return broadcomAP;
+                               }
+                               else if (_rtw_memcmp(pIE->data, MARVELL_OUI, 3))
+                               {
+                                       DBG_871X("link to Marvell AP\n");
+                                       return marvellAP;
+                               }
+                               else if (_rtw_memcmp(pIE->data, RALINK_OUI, 3))
+                               {
+                                       DBG_871X("link to Ralink AP\n");
+                                       return ralinkAP;
+                               }
+                               else if (_rtw_memcmp(pIE->data, CISCO_OUI, 3))
+                               {
+                                       DBG_871X("link to Cisco AP\n");
+                                       return ciscoAP;
+                               }
+                               else if (_rtw_memcmp(pIE->data, REALTEK_OUI, 3))
+                               {
+                                       DBG_871X("link to Realtek 96B\n");
+                                       return realtekAP;
+                               }
+                               else if (_rtw_memcmp(pIE->data, AIRGOCAP_OUI,3))
+                               {
+                                       DBG_871X("link to Airgo Cap\n");
+                                       return airgocapAP;
+                               }
+                               else
+                               {
+                                       break;
+                               }
+
+                       default:
+                               break;
+               }
+
+               i += (pIE->Length + 2);
+       }
+
+       DBG_871X("link to new AP\n");
+       return unknownAP;
+}
+
+void update_IOT_info(_adapter *padapter)
+{
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       switch (pmlmeinfo->assoc_AP_vendor)
+       {
+               case marvellAP:
+                       pmlmeinfo->turboMode_cts2self = 1;
+                       pmlmeinfo->turboMode_rtsen = 0;
+                       break;
+
+               case ralinkAP:
+                       pmlmeinfo->turboMode_cts2self = 0;
+                       pmlmeinfo->turboMode_rtsen = 1;
+                       //disable high power
+                       Switch_DM_Func(padapter, (~DYNAMIC_FUNC_HP), _FALSE);
+                       break;
+               case realtekAP:
+                       //rtw_write16(padapter, 0x4cc, 0xffff);
+                       //rtw_write16(padapter, 0x546, 0x01c0);
+                       //disable high power
+                       Switch_DM_Func(padapter, (~DYNAMIC_FUNC_HP), _FALSE);
+                       break;
+               default:
+                       pmlmeinfo->turboMode_cts2self = 0;
+                       pmlmeinfo->turboMode_rtsen = 1;
+                       break;
+       }
+
+}
+
+void update_capinfo(PADAPTER Adapter, u16 updateCap)
+{
+       struct mlme_ext_priv    *pmlmeext = &Adapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       BOOLEAN         ShortPreamble;
+
+       // Check preamble mode, 2005.01.06, by rcnjko.
+       // Mark to update preamble value forever, 2008.03.18 by lanhsin
+       //if( pMgntInfo->RegPreambleMode == PREAMBLE_AUTO )
+       {
+
+               if(updateCap & cShortPreamble)
+               { // Short Preamble
+                       if(pmlmeinfo->preamble_mode != PREAMBLE_SHORT) // PREAMBLE_LONG or PREAMBLE_AUTO
+                       {
+                               ShortPreamble = _TRUE;
+                               pmlmeinfo->preamble_mode = PREAMBLE_SHORT;
+                               rtw_hal_set_hwreg( Adapter, HW_VAR_ACK_PREAMBLE, (u8 *)&ShortPreamble );
+                       }
+               }
+               else
+               { // Long Preamble
+                       if(pmlmeinfo->preamble_mode != PREAMBLE_LONG)  // PREAMBLE_SHORT or PREAMBLE_AUTO
+                       {
+                               ShortPreamble = _FALSE;
+                               pmlmeinfo->preamble_mode = PREAMBLE_LONG;
+                               rtw_hal_set_hwreg( Adapter, HW_VAR_ACK_PREAMBLE, (u8 *)&ShortPreamble );
+                       }
+               }
+       }
+
+       if ( updateCap & cIBSS ) {
+               //Filen: See 802.11-2007 p.91
+               pmlmeinfo->slotTime = NON_SHORT_SLOT_TIME;
+       }
+       else
+       {
+               //Filen: See 802.11-2007 p.90
+               if( pmlmeext->cur_wireless_mode & (WIRELESS_11G | WIRELESS_11_24N))
+               {
+                       if( (updateCap & cShortSlotTime) /* && (!(pMgntInfo->pHTInfo->RT2RT_HT_Mode & RT_HT_CAP_USE_LONG_PREAMBLE)) */)
+                       { // Short Slot Time
+                               if(pmlmeinfo->slotTime != SHORT_SLOT_TIME)
+                               {
+                                       pmlmeinfo->slotTime = SHORT_SLOT_TIME;
+                               }
+                       }
+                       else
+                       { // Long Slot Time
+                               if(pmlmeinfo->slotTime != NON_SHORT_SLOT_TIME)
+                               {
+                                       pmlmeinfo->slotTime = NON_SHORT_SLOT_TIME;
+                               }
+                       }
+               }
+               else if( pmlmeext->cur_wireless_mode & (WIRELESS_11A | WIRELESS_11_5N))
+               {
+                       pmlmeinfo->slotTime = SHORT_SLOT_TIME;
+               }
+               else
+               {
+                       //B Mode
+                       pmlmeinfo->slotTime = NON_SHORT_SLOT_TIME;
+               }
+       }
+
+       rtw_hal_set_hwreg( Adapter, HW_VAR_SLOT_TIME, &pmlmeinfo->slotTime );
+
+}
+
+void update_wireless_mode(_adapter *padapter)
+{
+       u8      init_rate=0;
+       int     ratelen, network_type = 0;
+       u32     SIFS_Timer, mask;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       WLAN_BSSID_EX           *cur_network = &(pmlmeinfo->network);
+       unsigned char                   *rate = cur_network->SupportedRates;
+#ifdef CONFIG_CONCURRENT_MODE
+       _adapter *pbuddy_adapter = padapter->pbuddy_adapter;
+#endif //CONFIG_CONCURRENT_MODE
+
+       ratelen = rtw_get_rateset_len(cur_network->SupportedRates);
+
+       if ((pmlmeinfo->HT_info_enable) && (pmlmeinfo->HT_caps_enable))
+       {
+               pmlmeinfo->HT_enable = 1;
+       }
+
+       if(pmlmeext->cur_channel > 14)
+       {
+               if (pmlmeinfo->HT_enable)
+               {
+                       network_type = WIRELESS_11_5N;
+               }
+
+               network_type |= WIRELESS_11A;
+       }
+       else
+       {
+               if (pmlmeinfo->HT_enable)
+               {
+                       network_type = WIRELESS_11_24N;
+               }
+
+               if ((cckratesonly_included(rate, ratelen)) == _TRUE)
+               {
+                       network_type |= WIRELESS_11B;
+               }
+               else if((cckrates_included(rate, ratelen)) == _TRUE)
+               {
+                       network_type |= WIRELESS_11BG;
+               }
+               else
+               {
+                       network_type |= WIRELESS_11G;
+               }
+       }
+
+       pmlmeext->cur_wireless_mode = network_type & padapter->registrypriv.wireless_mode;
+
+       //For STA mode, driver need to modify initial data rate, or MAC will use wrong tx rate.
+       //Modified by Thomas 2012-12-3
+       mask = update_supported_rate(cur_network->SupportedRates, ratelen);
+       init_rate = get_highest_rate_idx(mask)&0x3f;
+       rtw_hal_set_hwreg( padapter, HW_VAR_INIT_DATA_RATE,  (u8 *)&init_rate);
+
+/*
+       if((pmlmeext->cur_wireless_mode==WIRELESS_11G) ||
+               (pmlmeext->cur_wireless_mode==WIRELESS_11BG))//WIRELESS_MODE_G)
+               SIFS_Timer = 0x0a0a;//CCK
+       else
+               SIFS_Timer = 0x0e0e;//pHalData->SifsTime; //OFDM
+*/
+
+       SIFS_Timer = 0x0a0a0808; //0x0808 -> for CCK, 0x0a0a -> for OFDM
+                             //change this value if having IOT issues.
+
+       rtw_hal_set_hwreg( padapter, HW_VAR_RESP_SIFS,  (u8 *)&SIFS_Timer);
+
+       if (pmlmeext->cur_wireless_mode & WIRELESS_11B)
+               update_mgnt_tx_rate(padapter, IEEE80211_CCK_RATE_1MB);
+       else
+       {
+               update_mgnt_tx_rate(padapter, IEEE80211_OFDM_RATE_6MB);
+#ifdef CONFIG_CONCURRENT_MODE
+               if(pbuddy_adapter && (pmlmeext->cur_wireless_mode & WIRELESS_11A))
+                       update_mgnt_tx_rate(pbuddy_adapter, IEEE80211_OFDM_RATE_6MB);
+#endif //CONFIG_CONCURRENT_MODE
+       }
+}
+
+void fire_write_MAC_cmd(_adapter *padapter, unsigned int addr, unsigned int value);
+void fire_write_MAC_cmd(_adapter *padapter, unsigned int addr, unsigned int value)
+{
+#if 0
+       struct cmd_obj                                  *ph2c;
+       struct reg_rw_parm                      *pwriteMacPara;
+       struct cmd_priv                                 *pcmdpriv = &(padapter->cmdpriv);
+
+       if ((ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj))) == NULL)
+       {
+               return;
+       }
+
+       if ((pwriteMacPara = (struct reg_rw_parm*)rtw_malloc(sizeof(struct reg_rw_parm))) == NULL)
+       {
+               rtw_mfree((unsigned char *)ph2c, sizeof(struct cmd_obj));
+               return;
+       }
+
+       pwriteMacPara->rw = 1;
+       pwriteMacPara->addr = addr;
+       pwriteMacPara->value = value;
+
+       init_h2fwcmd_w_parm_no_rsp(ph2c, pwriteMacPara, GEN_CMD_CODE(_Write_MACREG));
+       rtw_enqueue_cmd(pcmdpriv, ph2c);
+#endif
+}
+
+void update_bmc_sta_support_rate(_adapter *padapter, u32 mac_id)
+{
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       if(pmlmeext->cur_wireless_mode & WIRELESS_11B)
+       {
+               // Only B, B/G, and B/G/N AP could use CCK rate
+               _rtw_memcpy((pmlmeinfo->FW_sta_info[mac_id].SupportedRates), rtw_basic_rate_cck, 4);
+       }
+       else
+       {
+               _rtw_memcpy((pmlmeinfo->FW_sta_info[mac_id].SupportedRates), rtw_basic_rate_ofdm, 3);
+       }
+}
+
+int update_sta_support_rate(_adapter *padapter, u8* pvar_ie, uint var_ie_len, int cam_idx)
+{
+       unsigned int    ie_len;
+       PNDIS_802_11_VARIABLE_IEs       pIE;
+       int     supportRateNum = 0;
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       pIE = (PNDIS_802_11_VARIABLE_IEs)rtw_get_ie(pvar_ie, _SUPPORTEDRATES_IE_, &ie_len, var_ie_len);
+       if (pIE == NULL)
+       {
+               return _FAIL;
+       }
+
+       _rtw_memcpy(pmlmeinfo->FW_sta_info[cam_idx].SupportedRates, pIE->data, ie_len);
+       supportRateNum = ie_len;
+
+       pIE = (PNDIS_802_11_VARIABLE_IEs)rtw_get_ie(pvar_ie, _EXT_SUPPORTEDRATES_IE_, &ie_len, var_ie_len);
+       if (pIE)
+       {
+               _rtw_memcpy((pmlmeinfo->FW_sta_info[cam_idx].SupportedRates + supportRateNum), pIE->data, ie_len);
+       }
+
+       return _SUCCESS;
+
+}
+
+void process_addba_req(_adapter *padapter, u8 *paddba_req, u8 *addr)
+{
+       struct sta_info *psta;
+       u16 tid, start_seq, param;
+       struct recv_reorder_ctrl *preorder_ctrl;
+       struct sta_priv *pstapriv = &padapter->stapriv;
+       struct ADDBA_request    *preq = (struct ADDBA_request*)paddba_req;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       psta = rtw_get_stainfo(pstapriv, addr);
+
+       if(psta)
+       {
+               start_seq = le16_to_cpu(preq->BA_starting_seqctrl) >> 4;
+
+               param = le16_to_cpu(preq->BA_para_set);
+               tid = (param>>2)&0x0f;
+
+               preorder_ctrl = &psta->recvreorder_ctrl[tid];
+
+               #ifdef CONFIG_UPDATE_INDICATE_SEQ_WHILE_PROCESS_ADDBA_REQ
+               preorder_ctrl->indicate_seq = start_seq;
+               #ifdef DBG_RX_SEQ
+               DBG_871X("DBG_RX_SEQ %s:%d IndicateSeq: %d, start_seq: %d\n", __FUNCTION__, __LINE__,
+                       preorder_ctrl->indicate_seq, start_seq);
+               #endif
+               #else
+               preorder_ctrl->indicate_seq = 0xffff;
+               #endif
+
+               preorder_ctrl->enable =(pmlmeinfo->bAcceptAddbaReq == _TRUE)? _TRUE :_FALSE;
+       }
+
+}
+
+void update_TSF(struct mlme_ext_priv *pmlmeext, u8 *pframe, uint len)
+{
+       u8* pIE;
+       u32 *pbuf;
+
+       pIE = pframe + sizeof(struct rtw_ieee80211_hdr_3addr);
+       pbuf = (u32*)pIE;
+
+       pmlmeext->TSFValue = le32_to_cpu(*(pbuf+1));
+
+       pmlmeext->TSFValue = pmlmeext->TSFValue << 32;
+
+       pmlmeext->TSFValue |= le32_to_cpu(*pbuf);
+}
+
+void correct_TSF(_adapter *padapter, struct mlme_ext_priv *pmlmeext)
+{
+       rtw_hal_set_hwreg(padapter, HW_VAR_CORRECT_TSF, 0);
+}
+
+void beacon_timing_control(_adapter *padapter)
+{
+       rtw_hal_bcn_related_reg_setting(padapter);
+}
+
+#if 0
+unsigned int setup_beacon_frame(_adapter *padapter, unsigned char *beacon_frame)
+{
+       unsigned short                          ATIMWindow;
+       unsigned char                                   *pframe;
+       struct tx_desc                          *ptxdesc;
+       struct rtw_ieee80211_hdr        *pwlanhdr;
+       unsigned short                          *fctrl;
+       unsigned int                                    rate_len, len = 0;
+       struct xmit_priv                        *pxmitpriv = &(padapter->xmitpriv);
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       WLAN_BSSID_EX           *cur_network = &(pmlmeinfo->network);
+       u8      bc_addr[] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
+
+       _rtw_memset(beacon_frame, 0, 256);
+
+       pframe = beacon_frame + TXDESC_SIZE;
+
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+
+       fctrl = &(pwlanhdr->frame_ctl);
+       *(fctrl) = 0;
+
+       _rtw_memcpy(pwlanhdr->addr1, bc_addr, ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr3, get_my_bssid(cur_network), ETH_ALEN);
+
+       SetFrameSubType(pframe, WIFI_BEACON);
+
+       pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
+       len = sizeof(struct rtw_ieee80211_hdr_3addr);
+
+       //timestamp will be inserted by hardware
+       pframe += 8;
+       len += 8;
+
+       // beacon interval: 2 bytes
+       _rtw_memcpy(pframe, (unsigned char *)(rtw_get_beacon_interval_from_ie(cur_network->IEs)), 2);
+
+       pframe += 2;
+       len += 2;
+
+       // capability info: 2 bytes
+       _rtw_memcpy(pframe, (unsigned char *)(rtw_get_capability_from_ie(cur_network->IEs)), 2);
+
+       pframe += 2;
+       len += 2;
+
+       // SSID
+       pframe = rtw_set_ie(pframe, _SSID_IE_, cur_network->Ssid.SsidLength, cur_network->Ssid.Ssid, &len);
+
+       // supported rates...
+       rate_len = rtw_get_rateset_len(cur_network->SupportedRates);
+       pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_, ((rate_len > 8)? 8: rate_len), cur_network->SupportedRates, &len);
+
+       // DS parameter set
+       pframe = rtw_set_ie(pframe, _DSSET_IE_, 1, (unsigned char *)&(cur_network->Configuration.DSConfig), &len);
+
+       // IBSS Parameter Set...
+       //ATIMWindow = cur->Configuration.ATIMWindow;
+       ATIMWindow = 0;
+       pframe = rtw_set_ie(pframe, _IBSS_PARA_IE_, 2, (unsigned char *)(&ATIMWindow), &len);
+
+       //todo: ERP IE
+
+       // EXTERNDED SUPPORTED RATE
+       if (rate_len > 8)
+       {
+               pframe = rtw_set_ie(pframe, _EXT_SUPPORTEDRATES_IE_, (rate_len - 8), (cur_network->SupportedRates + 8), &len);
+       }
+
+       if ((len + TXDESC_SIZE) > 256)
+       {
+               //DBG_871X("marc: beacon frame too large\n");
+               return 0;
+       }
+
+       //fill the tx descriptor
+       ptxdesc = (struct tx_desc *)beacon_frame;
+
+       //offset 0
+       ptxdesc->txdw0 |= cpu_to_le32(len & 0x0000ffff);
+       ptxdesc->txdw0 |= cpu_to_le32(((TXDESC_SIZE + OFFSET_SZ) << OFFSET_SHT) & 0x00ff0000); //default = 32 bytes for TX Desc
+
+       //offset 4
+       ptxdesc->txdw1 |= cpu_to_le32((0x10 << QSEL_SHT) & 0x00001f00);
+
+       //offset 8
+       ptxdesc->txdw2 |= cpu_to_le32(BMC);
+       ptxdesc->txdw2 |= cpu_to_le32(BK);
+
+       //offset 16
+       ptxdesc->txdw4 = 0x80000000;
+
+       //offset 20
+       ptxdesc->txdw5 = 0x00000000; //1M
+
+       return (len + TXDESC_SIZE);
+}
+#endif
+
+static _adapter *pbuddy_padapter = NULL;
+
+int rtw_handle_dualmac(_adapter *adapter, bool init)
+{
+       int status = _SUCCESS;
+       struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
+
+       if (!IS_HARDWARE_TYPE_8192D(adapter))
+               goto exit;
+
+       if (init) {
+               rtw_hal_get_def_var(adapter, HAL_DEF_DUAL_MAC_MODE, &dvobj->DualMacMode);
+               if (dvobj->DualMacMode == _TRUE) {
+                       // temply disable IPS For 92D-VC
+                       adapter->registrypriv.ips_mode = IPS_NONE;
+               }
+
+               /* For SMSP on 92DU-VC, driver do not probe another Interface. */
+               if ((dvobj->DualMacMode != _TRUE) && (dvobj->InterfaceNumber != 0)) {
+                       DBG_871X("%s(): Do not init another Interface because SMSP\n",__FUNCTION__);
+                       status = _FAIL;
+                       goto exit;
+               }
+
+#ifndef CONFIG_CONCURRENT_MODE
+               if (dvobj->DualMacMode == _TRUE) {
+                       if (pbuddy_padapter == NULL) {
+                               pbuddy_padapter = adapter;
+                               DBG_871X("%s(): pbuddy_padapter == NULL, Set pbuddy_padapter\n",__FUNCTION__);
+                       } else {
+                               adapter->pbuddy_adapter = pbuddy_padapter;
+                               pbuddy_padapter->pbuddy_adapter = adapter;
+                               // clear global value
+                               pbuddy_padapter = NULL;
+                               DBG_871X("%s(): pbuddy_padapter exist, Exchange Information\n",__FUNCTION__);
+                       }
+               }
+
+#ifdef CONFIG_DUALMAC_CONCURRENT
+               if (dvobj->InterfaceNumber == 0) {
+                       //set adapter_type/iface type
+                       adapter->isprimary = _TRUE;
+                       adapter->adapter_type = PRIMARY_ADAPTER;
+                       adapter->iface_type = IFACE_PORT0;
+                       DBG_871X("%s(): PRIMARY_ADAPTER\n",__FUNCTION__);
+               } else {
+                       //set adapter_type/iface type
+                       adapter->isprimary = _FALSE;
+                       adapter->adapter_type = SECONDARY_ADAPTER;
+                       adapter->iface_type = IFACE_PORT1;
+                       DBG_871X("%s(): SECONDARY_ADAPTER\n",__FUNCTION__);
+               }
+#endif
+#endif
+       }else {
+               pbuddy_padapter = NULL;
+       }
+exit:
+       return status;
+}
diff --git a/drivers/net/wireless/realtek/rtl8192cu/core/rtw_xmit.c b/drivers/net/wireless/realtek/rtl8192cu/core/rtw_xmit.c
new file mode 100644 (file)
index 0000000..fb4e698
--- /dev/null
@@ -0,0 +1,4155 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#define _RTW_XMIT_C_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <rtw_byteorder.h>
+#include <wifi.h>
+#include <osdep_intf.h>
+#include <circ_buf.h>
+#include <ip.h>
+
+#if defined (PLATFORM_LINUX) && defined (PLATFORM_WINDOWS)
+#error "Shall be Linux or Windows, but not both!\n"
+#endif
+
+#ifdef PLATFORM_WINDOWS
+#include <if_ether.h>
+#endif
+
+#ifdef CONFIG_USB_HCI
+#include <usb_ops.h>
+#endif
+
+
+static u8 P802_1H_OUI[P80211_OUI_LEN] = { 0x00, 0x00, 0xf8 };
+static u8 RFC1042_OUI[P80211_OUI_LEN] = { 0x00, 0x00, 0x00 };
+
+static void _init_txservq(struct tx_servq *ptxservq)
+{
+_func_enter_;
+       _rtw_init_listhead(&ptxservq->tx_pending);
+       _rtw_init_queue(&ptxservq->sta_pending);
+       ptxservq->qcnt = 0;
+_func_exit_;
+}
+
+
+void   _rtw_init_sta_xmit_priv(struct sta_xmit_priv *psta_xmitpriv)
+{
+
+_func_enter_;
+
+       _rtw_memset((unsigned char *)psta_xmitpriv, 0, sizeof (struct sta_xmit_priv));
+
+       _rtw_spinlock_init(&psta_xmitpriv->lock);
+
+       //for(i = 0 ; i < MAX_NUMBLKS; i++)
+       //      _init_txservq(&(psta_xmitpriv->blk_q[i]));
+
+       _init_txservq(&psta_xmitpriv->be_q);
+       _init_txservq(&psta_xmitpriv->bk_q);
+       _init_txservq(&psta_xmitpriv->vi_q);
+       _init_txservq(&psta_xmitpriv->vo_q);
+       _rtw_init_listhead(&psta_xmitpriv->legacy_dz);
+       _rtw_init_listhead(&psta_xmitpriv->apsd);
+
+_func_exit_;
+
+}
+
+s32    _rtw_init_xmit_priv(struct xmit_priv *pxmitpriv, _adapter *padapter)
+{
+       int i;
+       struct xmit_buf *pxmitbuf;
+       struct xmit_frame *pxframe;
+       sint    res=_SUCCESS;
+
+_func_enter_;
+
+       // We don't need to memset padapter->XXX to zero, because adapter is allocated by rtw_zvmalloc().
+       //_rtw_memset((unsigned char *)pxmitpriv, 0, sizeof(struct xmit_priv));
+
+       _rtw_spinlock_init(&pxmitpriv->lock);
+       _rtw_spinlock_init(&pxmitpriv->lock_sctx);
+       _rtw_init_sema(&pxmitpriv->xmit_sema, 0);
+       _rtw_init_sema(&pxmitpriv->terminate_xmitthread_sema, 0);
+
+       /*
+       Please insert all the queue initializaiton using _rtw_init_queue below
+       */
+
+       pxmitpriv->adapter = padapter;
+
+       //for(i = 0 ; i < MAX_NUMBLKS; i++)
+       //      _rtw_init_queue(&pxmitpriv->blk_strms[i]);
+
+       _rtw_init_queue(&pxmitpriv->be_pending);
+       _rtw_init_queue(&pxmitpriv->bk_pending);
+       _rtw_init_queue(&pxmitpriv->vi_pending);
+       _rtw_init_queue(&pxmitpriv->vo_pending);
+       _rtw_init_queue(&pxmitpriv->bm_pending);
+
+       //_rtw_init_queue(&pxmitpriv->legacy_dz_queue);
+       //_rtw_init_queue(&pxmitpriv->apsd_queue);
+
+       _rtw_init_queue(&pxmitpriv->free_xmit_queue);
+
+       /*
+       Please allocate memory with the sz = (struct xmit_frame) * NR_XMITFRAME,
+       and initialize free_xmit_frame below.
+       Please also apply  free_txobj to link_up all the xmit_frames...
+       */
+
+       pxmitpriv->pallocated_frame_buf = rtw_zvmalloc(NR_XMITFRAME * sizeof(struct xmit_frame) + 4);
+
+       if (pxmitpriv->pallocated_frame_buf  == NULL){
+               pxmitpriv->pxmit_frame_buf =NULL;
+               RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,("alloc xmit_frame fail!\n"));
+               res= _FAIL;
+               goto exit;
+       }
+       pxmitpriv->pxmit_frame_buf = (u8 *)N_BYTE_ALIGMENT((SIZE_PTR)(pxmitpriv->pallocated_frame_buf), 4);
+       //pxmitpriv->pxmit_frame_buf = pxmitpriv->pallocated_frame_buf + 4 -
+       //                                              ((SIZE_PTR) (pxmitpriv->pallocated_frame_buf) &3);
+
+       pxframe = (struct xmit_frame*) pxmitpriv->pxmit_frame_buf;
+
+       for (i = 0; i < NR_XMITFRAME; i++)
+       {
+               _rtw_init_listhead(&(pxframe->list));
+
+               pxframe->padapter = padapter;
+               pxframe->frame_tag = NULL_FRAMETAG;
+
+               pxframe->pkt = NULL;
+
+               pxframe->buf_addr = NULL;
+               pxframe->pxmitbuf = NULL;
+
+               rtw_list_insert_tail(&(pxframe->list), &(pxmitpriv->free_xmit_queue.queue));
+
+               pxframe++;
+       }
+
+       pxmitpriv->free_xmitframe_cnt = NR_XMITFRAME;
+
+       pxmitpriv->frag_len = MAX_FRAG_THRESHOLD;
+
+
+       //init xmit_buf
+       _rtw_init_queue(&pxmitpriv->free_xmitbuf_queue);
+       _rtw_init_queue(&pxmitpriv->pending_xmitbuf_queue);
+
+       pxmitpriv->pallocated_xmitbuf = rtw_zvmalloc(NR_XMITBUFF * sizeof(struct xmit_buf) + 4);
+
+       if (pxmitpriv->pallocated_xmitbuf  == NULL){
+               RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,("alloc xmit_buf fail!\n"));
+               res= _FAIL;
+               goto exit;
+       }
+
+       pxmitpriv->pxmitbuf = (u8 *)N_BYTE_ALIGMENT((SIZE_PTR)(pxmitpriv->pallocated_xmitbuf), 4);
+       //pxmitpriv->pxmitbuf = pxmitpriv->pallocated_xmitbuf + 4 -
+       //                                              ((SIZE_PTR) (pxmitpriv->pallocated_xmitbuf) &3);
+
+       pxmitbuf = (struct xmit_buf*)pxmitpriv->pxmitbuf;
+
+       for (i = 0; i < NR_XMITBUFF; i++)
+       {
+               _rtw_init_listhead(&pxmitbuf->list);
+
+               pxmitbuf->priv_data = NULL;
+               pxmitbuf->padapter = padapter;
+               pxmitbuf->ext_tag = _FALSE;
+
+/*
+               pxmitbuf->pallocated_buf = rtw_zmalloc(MAX_XMITBUF_SZ + XMITBUF_ALIGN_SZ);
+               if (pxmitbuf->pallocated_buf == NULL)
+               {
+                       res = _FAIL;
+                       goto exit;
+               }
+
+               pxmitbuf->pbuf = (u8 *)N_BYTE_ALIGMENT((SIZE_PTR)(pxmitbuf->pallocated_buf), XMITBUF_ALIGN_SZ);
+               //pxmitbuf->pbuf = pxmitbuf->pallocated_buf + XMITBUF_ALIGN_SZ -((SIZE_PTR) (pxmitbuf->pallocated_buf) &(XMITBUF_ALIGN_SZ-1));
+*/
+
+               if((res=rtw_os_xmit_resource_alloc(padapter, pxmitbuf,(MAX_XMITBUF_SZ + XMITBUF_ALIGN_SZ))) == _FAIL) {
+                       res= _FAIL;
+                       goto exit;
+               }
+
+#ifdef CONFIG_SDIO_HCI
+               pxmitbuf->phead = pxmitbuf->pbuf;
+               pxmitbuf->pend = pxmitbuf->pbuf + MAX_XMITBUF_SZ;
+               pxmitbuf->len = 0;
+               pxmitbuf->pdata = pxmitbuf->ptail = pxmitbuf->phead;
+#endif
+
+               pxmitbuf->flags = XMIT_VO_QUEUE;
+
+               rtw_list_insert_tail(&pxmitbuf->list, &(pxmitpriv->free_xmitbuf_queue.queue));
+               #ifdef DBG_XMIT_BUF
+               pxmitbuf->no=i;
+               #endif
+
+               pxmitbuf++;
+
+       }
+
+       pxmitpriv->free_xmitbuf_cnt = NR_XMITBUFF;
+
+       /* init xframe_ext queue,  the same count as extbuf  */
+       _rtw_init_queue(&pxmitpriv->free_xframe_ext_queue);
+
+       pxmitpriv->xframe_ext_alloc_addr = rtw_zvmalloc(NR_XMIT_EXTBUFF * sizeof(struct xmit_frame) + 4);
+
+       if (pxmitpriv->xframe_ext_alloc_addr  == NULL){
+               pxmitpriv->xframe_ext = NULL;
+               RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,("alloc xframe_ext fail!\n"));
+               res= _FAIL;
+               goto exit;
+       }
+       pxmitpriv->xframe_ext = (u8 *)N_BYTE_ALIGMENT((SIZE_PTR)(pxmitpriv->xframe_ext_alloc_addr), 4);
+       pxframe = (struct xmit_frame*)pxmitpriv->xframe_ext;
+
+       for (i = 0; i < NR_XMIT_EXTBUFF; i++) {
+               _rtw_init_listhead(&(pxframe->list));
+
+               pxframe->padapter = padapter;
+               pxframe->frame_tag = NULL_FRAMETAG;
+
+               pxframe->pkt = NULL;
+
+               pxframe->buf_addr = NULL;
+               pxframe->pxmitbuf = NULL;
+
+               pxframe->ext_tag = 1;
+
+               rtw_list_insert_tail(&(pxframe->list), &(pxmitpriv->free_xframe_ext_queue.queue));
+
+               pxframe++;
+       }
+       pxmitpriv->free_xframe_ext_cnt = NR_XMIT_EXTBUFF;
+
+       // Init xmit extension buff
+       _rtw_init_queue(&pxmitpriv->free_xmit_extbuf_queue);
+
+       pxmitpriv->pallocated_xmit_extbuf = rtw_zvmalloc(NR_XMIT_EXTBUFF * sizeof(struct xmit_buf) + 4);
+
+       if (pxmitpriv->pallocated_xmit_extbuf  == NULL){
+               RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,("alloc xmit_extbuf fail!\n"));
+               res= _FAIL;
+               goto exit;
+       }
+
+       pxmitpriv->pxmit_extbuf = (u8 *)N_BYTE_ALIGMENT((SIZE_PTR)(pxmitpriv->pallocated_xmit_extbuf), 4);
+
+       pxmitbuf = (struct xmit_buf*)pxmitpriv->pxmit_extbuf;
+
+       for (i = 0; i < NR_XMIT_EXTBUFF; i++)
+       {
+               _rtw_init_listhead(&pxmitbuf->list);
+
+               pxmitbuf->priv_data = NULL;
+               pxmitbuf->padapter = padapter;
+               pxmitbuf->ext_tag = _TRUE;
+
+/*
+               pxmitbuf->pallocated_buf = rtw_zmalloc(MAX_XMIT_EXTBUF_SZ);
+               if (pxmitbuf->pallocated_buf == NULL)
+               {
+                       res = _FAIL;
+                       goto exit;
+               }
+
+               pxmitbuf->pbuf = (u8 *)N_BYTE_ALIGMENT((SIZE_PTR)(pxmitbuf->pallocated_buf), 4);
+*/
+
+               if((res=rtw_os_xmit_resource_alloc(padapter, pxmitbuf,MAX_XMIT_EXTBUF_SZ + XMITBUF_ALIGN_SZ)) == _FAIL) {
+                       res= _FAIL;
+                       goto exit;
+               }
+
+#ifdef CONFIG_SDIO_HCI
+               pxmitbuf->phead = pxmitbuf->pbuf;
+               pxmitbuf->pend = pxmitbuf->pbuf + MAX_XMIT_EXTBUF_SZ;
+               pxmitbuf->len = 0;
+               pxmitbuf->pdata = pxmitbuf->ptail = pxmitbuf->phead;
+#endif
+
+               rtw_list_insert_tail(&pxmitbuf->list, &(pxmitpriv->free_xmit_extbuf_queue.queue));
+               #ifdef DBG_XMIT_BUF
+               pxmitbuf->no=i;
+               #endif
+               pxmitbuf++;
+
+       }
+
+       pxmitpriv->free_xmit_extbuf_cnt = NR_XMIT_EXTBUFF;
+
+       rtw_alloc_hwxmits(padapter);
+       rtw_init_hwxmits(pxmitpriv->hwxmits, pxmitpriv->hwxmit_entry);
+
+#ifdef CONFIG_USB_HCI
+       pxmitpriv->txirp_cnt=1;
+
+       _rtw_init_sema(&(pxmitpriv->tx_retevt), 0);
+
+       //per AC pending irp
+       pxmitpriv->beq_cnt = 0;
+       pxmitpriv->bkq_cnt = 0;
+       pxmitpriv->viq_cnt = 0;
+       pxmitpriv->voq_cnt = 0;
+#endif
+
+
+#ifdef CONFIG_XMIT_ACK
+       pxmitpriv->ack_tx = _FALSE;
+       _rtw_mutex_init(&pxmitpriv->ack_tx_mutex);
+       rtw_sctx_init(&pxmitpriv->ack_tx_ops, 0);
+#endif
+
+       rtw_hal_init_xmit_priv(padapter);
+
+exit:
+
+_func_exit_;
+
+       return res;
+}
+
+void  rtw_mfree_xmit_priv_lock (struct xmit_priv *pxmitpriv);
+void  rtw_mfree_xmit_priv_lock (struct xmit_priv *pxmitpriv)
+{
+       _rtw_spinlock_free(&pxmitpriv->lock);
+       _rtw_free_sema(&pxmitpriv->xmit_sema);
+       _rtw_free_sema(&pxmitpriv->terminate_xmitthread_sema);
+
+       _rtw_spinlock_free(&pxmitpriv->be_pending.lock);
+       _rtw_spinlock_free(&pxmitpriv->bk_pending.lock);
+       _rtw_spinlock_free(&pxmitpriv->vi_pending.lock);
+       _rtw_spinlock_free(&pxmitpriv->vo_pending.lock);
+       _rtw_spinlock_free(&pxmitpriv->bm_pending.lock);
+
+       //_rtw_spinlock_free(&pxmitpriv->legacy_dz_queue.lock);
+       //_rtw_spinlock_free(&pxmitpriv->apsd_queue.lock);
+
+       _rtw_spinlock_free(&pxmitpriv->free_xmit_queue.lock);
+       _rtw_spinlock_free(&pxmitpriv->free_xmitbuf_queue.lock);
+       _rtw_spinlock_free(&pxmitpriv->pending_xmitbuf_queue.lock);
+}
+
+
+void _rtw_free_xmit_priv (struct xmit_priv *pxmitpriv)
+{
+       int i;
+      _adapter *padapter = pxmitpriv->adapter;
+       struct xmit_frame       *pxmitframe = (struct xmit_frame*) pxmitpriv->pxmit_frame_buf;
+       struct xmit_buf *pxmitbuf = (struct xmit_buf *)pxmitpriv->pxmitbuf;
+
+ _func_enter_;
+
+       rtw_hal_free_xmit_priv(padapter);
+
+       rtw_mfree_xmit_priv_lock(pxmitpriv);
+
+       if(pxmitpriv->pxmit_frame_buf==NULL)
+               goto out;
+
+       for(i=0; i<NR_XMITFRAME; i++)
+       {
+               rtw_os_xmit_complete(padapter, pxmitframe);
+
+               pxmitframe++;
+       }
+
+       for(i=0; i<NR_XMITBUFF; i++)
+       {
+               rtw_os_xmit_resource_free(padapter, pxmitbuf,(MAX_XMITBUF_SZ + XMITBUF_ALIGN_SZ));
+
+               //if(pxmitbuf->pallocated_buf)
+               //      rtw_mfree(pxmitbuf->pallocated_buf, MAX_XMITBUF_SZ + XMITBUF_ALIGN_SZ);
+
+               pxmitbuf++;
+       }
+
+       if(pxmitpriv->pallocated_frame_buf) {
+               rtw_vmfree(pxmitpriv->pallocated_frame_buf, NR_XMITFRAME * sizeof(struct xmit_frame) + 4);
+       }
+
+
+       if(pxmitpriv->pallocated_xmitbuf) {
+               rtw_vmfree(pxmitpriv->pallocated_xmitbuf, NR_XMITBUFF * sizeof(struct xmit_buf) + 4);
+       }
+
+       /* free xframe_ext queue,  the same count as extbuf  */
+       if ((pxmitframe = (struct xmit_frame*)pxmitpriv->xframe_ext)) {
+               for (i=0; i<NR_XMIT_EXTBUFF; i++) {
+                       rtw_os_xmit_complete(padapter, pxmitframe);
+                       pxmitframe++;
+               }
+       }
+       if (pxmitpriv->xframe_ext_alloc_addr)
+               rtw_vmfree(pxmitpriv->xframe_ext_alloc_addr, NR_XMIT_EXTBUFF * sizeof(struct xmit_frame) + 4);
+       _rtw_spinlock_free(&pxmitpriv->free_xframe_ext_queue.lock);
+
+       // free xmit extension buff
+       _rtw_spinlock_free(&pxmitpriv->free_xmit_extbuf_queue.lock);
+
+       pxmitbuf = (struct xmit_buf *)pxmitpriv->pxmit_extbuf;
+       for(i=0; i<NR_XMIT_EXTBUFF; i++)
+       {
+               rtw_os_xmit_resource_free(padapter, pxmitbuf,(MAX_XMIT_EXTBUF_SZ + XMITBUF_ALIGN_SZ));
+
+               //if(pxmitbuf->pallocated_buf)
+               //      rtw_mfree(pxmitbuf->pallocated_buf, MAX_XMIT_EXTBUF_SZ);
+
+               pxmitbuf++;
+       }
+
+       if(pxmitpriv->pallocated_xmit_extbuf) {
+               rtw_vmfree(pxmitpriv->pallocated_xmit_extbuf, NR_XMIT_EXTBUFF * sizeof(struct xmit_buf) + 4);
+       }
+
+       rtw_free_hwxmits(padapter);
+
+#ifdef CONFIG_XMIT_ACK
+       _rtw_mutex_free(&pxmitpriv->ack_tx_mutex);
+#endif
+
+out:
+
+_func_exit_;
+
+}
+
+static void update_attrib_vcs_info(_adapter *padapter, struct xmit_frame *pxmitframe)
+{
+       u32     sz;
+       struct pkt_attrib       *pattrib = &pxmitframe->attrib;
+       struct sta_info *psta = pattrib->psta;
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+        if(pattrib->psta)
+       {
+               psta = pattrib->psta;
+       }
+       else
+       {
+               DBG_871X("%s, call rtw_get_stainfo()\n", __func__);
+               psta=rtw_get_stainfo(&padapter->stapriv ,&pattrib->ra[0] );
+       }
+
+        if(psta==NULL)
+       {
+               DBG_871X("%s, psta==NUL\n", __func__);
+               return;
+       }
+
+       if(!(psta->state &_FW_LINKED))
+       {
+               DBG_871X("%s, psta->state(0x%x) != _FW_LINKED\n", __func__, psta->state);
+               return;
+       }
+
+       if (pattrib->nr_frags != 1)
+       {
+               sz = padapter->xmitpriv.frag_len;
+       }
+       else //no frag
+       {
+               sz = pattrib->last_txcmdsz;
+       }
+
+       // (1) RTS_Threshold is compared to the MPDU, not MSDU.
+       // (2) If there are more than one frag in  this MSDU, only the first frag uses protection frame.
+       //              Other fragments are protected by previous fragment.
+       //              So we only need to check the length of first fragment.
+       if(pmlmeext->cur_wireless_mode < WIRELESS_11_24N  || padapter->registrypriv.wifi_spec)
+       {
+               if(sz > padapter->registrypriv.rts_thresh)
+               {
+                       pattrib->vcs_mode = RTS_CTS;
+               }
+               else
+               {
+                       if(psta->rtsen)
+                               pattrib->vcs_mode = RTS_CTS;
+                       else if(psta->cts2self)
+                               pattrib->vcs_mode = CTS_TO_SELF;
+                       else
+                               pattrib->vcs_mode = NONE_VCS;
+               }
+       }
+       else
+       {
+               while (_TRUE)
+               {
+#if 0 //Todo
+                       //check IOT action
+                       if(pHTInfo->IOTAction & HT_IOT_ACT_FORCED_CTS2SELF)
+                       {
+                               pattrib->vcs_mode = CTS_TO_SELF;
+                               pattrib->rts_rate = MGN_24M;
+                               break;
+                       }
+                       else if(pHTInfo->IOTAction & (HT_IOT_ACT_FORCED_RTS|HT_IOT_ACT_PURE_N_MODE))
+                       {
+                               pattrib->vcs_mode = RTS_CTS;
+                               pattrib->rts_rate = MGN_24M;
+                               break;
+                       }
+#endif
+
+                       //IOT action
+                       if((pmlmeinfo->assoc_AP_vendor == atherosAP) && (pattrib->ampdu_en==_TRUE) &&
+                               (padapter->securitypriv.dot11PrivacyAlgrthm == _AES_ ))
+                       {
+                               pattrib->vcs_mode = CTS_TO_SELF;
+                               break;
+                       }
+
+
+                       //check ERP protection
+                       if(psta->rtsen || psta->cts2self)
+                       {
+                               if(psta->rtsen)
+                                       pattrib->vcs_mode = RTS_CTS;
+                               else if(psta->cts2self)
+                                       pattrib->vcs_mode = CTS_TO_SELF;
+
+                               break;
+                       }
+
+                       //check HT op mode
+                       if(pattrib->ht_en)
+                       {
+                               u8 HTOpMode = pmlmeinfo->HT_protection;
+                               if((pmlmeext->cur_bwmode && (HTOpMode == 2 || HTOpMode == 3)) ||
+                                       (!pmlmeext->cur_bwmode && HTOpMode == 3) )
+                               {
+                                       pattrib->vcs_mode = RTS_CTS;
+                                       break;
+                               }
+                       }
+
+                       //check rts
+                       if(sz > padapter->registrypriv.rts_thresh)
+                       {
+                               pattrib->vcs_mode = RTS_CTS;
+                               break;
+                       }
+
+                       //to do list: check MIMO power save condition.
+
+                       //check AMPDU aggregation for TXOP
+                       if(pattrib->ampdu_en==_TRUE)
+                       {
+                               pattrib->vcs_mode = RTS_CTS;
+                               break;
+                       }
+
+                       pattrib->vcs_mode = NONE_VCS;
+                       break;
+               }
+       }
+}
+
+static void update_attrib_phy_info(struct pkt_attrib *pattrib, struct sta_info *psta)
+{
+       /*if(psta->rtsen)
+               pattrib->vcs_mode = RTS_CTS;
+       else if(psta->cts2self)
+               pattrib->vcs_mode = CTS_TO_SELF;
+       else
+               pattrib->vcs_mode = NONE_VCS;*/
+
+       pattrib->mdata = 0;
+       pattrib->eosp = 0;
+       pattrib->triggered=0;
+
+       //qos_en, ht_en, init rate, ,bw, ch_offset, sgi
+       pattrib->qos_en = psta->qos_option;
+       pattrib->ht_en = psta->htpriv.ht_option;
+       pattrib->raid = psta->raid;
+       pattrib->bwmode = psta->htpriv.bwmode;
+       pattrib->ch_offset = psta->htpriv.ch_offset;
+       pattrib->sgi= psta->htpriv.sgi;
+       pattrib->ampdu_en = _FALSE;
+
+       //if(pattrib->ht_en && psta->htpriv.ampdu_enable)
+       //{
+       //      if(psta->htpriv.agg_enable_bitmap & BIT(pattrib->priority))
+       //              pattrib->ampdu_en = _TRUE;
+       //}
+
+
+       pattrib->retry_ctrl = _FALSE;
+
+}
+
+u8     qos_acm(u8 acm_mask, u8 priority)
+{
+       u8      change_priority = priority;
+
+       switch (priority)
+       {
+               case 0:
+               case 3:
+                       if(acm_mask & BIT(1))
+                               change_priority = 1;
+                       break;
+               case 1:
+               case 2:
+                       break;
+               case 4:
+               case 5:
+                       if(acm_mask & BIT(2))
+                               change_priority = 0;
+                       break;
+               case 6:
+               case 7:
+                       if(acm_mask & BIT(3))
+                               change_priority = 5;
+                       break;
+               default:
+                       DBG_871X("qos_acm(): invalid pattrib->priority: %d!!!\n", priority);
+                       break;
+       }
+
+       return change_priority;
+}
+
+static void set_qos(struct pkt_file *ppktfile, struct pkt_attrib *pattrib)
+{
+       struct ethhdr etherhdr;
+       struct iphdr ip_hdr;
+       s32 UserPriority = 0;
+
+
+       _rtw_open_pktfile(ppktfile->pkt, ppktfile);
+       _rtw_pktfile_read(ppktfile, (unsigned char*)&etherhdr, ETH_HLEN);
+
+       // get UserPriority from IP hdr
+       if (pattrib->ether_type == 0x0800) {
+               _rtw_pktfile_read(ppktfile, (u8*)&ip_hdr, sizeof(ip_hdr));
+//             UserPriority = (ntohs(ip_hdr.tos) >> 5) & 0x3;
+               UserPriority = ip_hdr.tos >> 5;
+       } else if (pattrib->ether_type == 0x888e) {
+               // "When priority processing of data frames is supported,
+               // a STA's SME should send EAPOL-Key frames at the highest priority."
+               UserPriority = 7;
+       }
+
+       pattrib->priority = UserPriority;
+       pattrib->hdrlen = WLAN_HDR_A3_QOS_LEN;
+       pattrib->subtype = WIFI_QOS_DATA_TYPE;
+}
+
+static s32 update_attrib(_adapter *padapter, _pkt *pkt, struct pkt_attrib *pattrib)
+{
+       uint i;
+       struct pkt_file pktfile;
+       struct sta_info *psta = NULL;
+       struct ethhdr etherhdr;
+
+       sint bmcast;
+       struct sta_priv         *pstapriv = &padapter->stapriv;
+       struct security_priv    *psecuritypriv = &padapter->securitypriv;
+       struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
+       struct qos_priv         *pqospriv= &pmlmepriv->qospriv;
+       sint res = _SUCCESS;
+
+ _func_enter_;
+
+       _rtw_open_pktfile(pkt, &pktfile);
+       i = _rtw_pktfile_read(&pktfile, (u8*)&etherhdr, ETH_HLEN);
+
+       pattrib->ether_type = ntohs(etherhdr.h_proto);
+
+
+       _rtw_memcpy(pattrib->dst, &etherhdr.h_dest, ETH_ALEN);
+       _rtw_memcpy(pattrib->src, &etherhdr.h_source, ETH_ALEN);
+
+       pattrib->pctrl = 0;
+
+       if ((check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE) ||
+               (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE)) {
+               _rtw_memcpy(pattrib->ra, pattrib->dst, ETH_ALEN);
+               _rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
+       }
+       else if (check_fwstate(pmlmepriv, WIFI_STATION_STATE)) {
+               _rtw_memcpy(pattrib->ra, get_bssid(pmlmepriv), ETH_ALEN);
+               _rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
+       }
+       else if (check_fwstate(pmlmepriv, WIFI_AP_STATE)) {
+               _rtw_memcpy(pattrib->ra, pattrib->dst, ETH_ALEN);
+               _rtw_memcpy(pattrib->ta, get_bssid(pmlmepriv), ETH_ALEN);
+       }
+
+       pattrib->pktlen = pktfile.pkt_len;
+
+       if (ETH_P_IP == pattrib->ether_type)
+       {
+               // The following is for DHCP and ARP packet, we use cck1M to tx these packets and let LPS awake some time
+               // to prevent DHCP protocol fail
+               u8 tmp[24];
+               _rtw_pktfile_read(&pktfile, &tmp[0], 24);
+               pattrib->dhcp_pkt = 0;
+               if (pktfile.pkt_len > 282) {//MINIMUM_DHCP_PACKET_SIZE) {
+                       if (ETH_P_IP == pattrib->ether_type) {// IP header
+                               if (((tmp[21] == 68) && (tmp[23] == 67)) ||
+                                       ((tmp[21] == 67) && (tmp[23] == 68))) {
+                                       // 68 : UDP BOOTP client
+                                       // 67 : UDP BOOTP server
+                                       RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,("======================update_attrib: get DHCP Packet \n"));
+                                       // Use low rate to send DHCP packet.
+                                       //if(pMgntInfo->IOTAction & HT_IOT_ACT_WA_IOT_Broadcom)
+                                       //{
+                                       //      tcb_desc->DataRate = MgntQuery_TxRateExcludeCCKRates(ieee);//0xc;//ofdm 6m
+                                       //      tcb_desc->bTxDisableRateFallBack = false;
+                                       //}
+                                       //else
+                                       //      pTcb->DataRate = Adapter->MgntInfo.LowestBasicRate;
+                                       //RTPRINT(FDM, WA_IOT, ("DHCP TranslateHeader(), pTcb->DataRate = 0x%x\n", pTcb->DataRate));
+                                       pattrib->dhcp_pkt = 1;
+                               }
+                       }
+               }
+       }
+
+       if ( (pattrib->ether_type == 0x888e) || (pattrib->dhcp_pkt == 1) )
+       {
+               rtw_set_scan_deny(padapter, 3000);
+       }
+
+#ifdef CONFIG_LPS
+       // If EAPOL , ARP , OR DHCP packet, driver must be in active mode.
+       if ( (pattrib->ether_type == 0x0806) || (pattrib->ether_type == 0x888e) || (pattrib->dhcp_pkt == 1) )
+       {
+               rtw_lps_ctrl_wk_cmd(padapter, LPS_CTRL_SPECIAL_PACKET, 1);
+       }
+#endif
+
+       bmcast = IS_MCAST(pattrib->ra);
+
+       // get sta_info
+       if (bmcast) {
+               psta = rtw_get_bcmc_stainfo(padapter);
+       } else {
+               psta = rtw_get_stainfo(pstapriv, pattrib->ra);
+               if (psta == NULL)       { // if we cannot get psta => drrp the pkt
+                       RT_TRACE(_module_rtl871x_xmit_c_, _drv_alert_, ("\nupdate_attrib => get sta_info fail, ra:" MAC_FMT"\n", MAC_ARG(pattrib->ra)));
+                       #ifdef DBG_TX_DROP_FRAME
+                       DBG_871X("DBG_TX_DROP_FRAME %s get sta_info fail, ra:" MAC_FMT"\n", __FUNCTION__, MAC_ARG(pattrib->ra));
+                       #endif
+                       res =_FAIL;
+                       goto exit;
+               }
+               else if((check_fwstate(pmlmepriv, WIFI_AP_STATE)==_TRUE)&&(!(psta->state & _FW_LINKED)))
+               {
+                       res =_FAIL;
+                       goto exit;
+               }
+       }
+
+       if (psta)
+       {
+               pattrib->mac_id = psta->mac_id;
+               pattrib->psta = psta;
+       }
+       else
+       {
+               // if we cannot get psta => drop the pkt
+               RT_TRACE(_module_rtl871x_xmit_c_, _drv_alert_, ("\nupdate_attrib => get sta_info fail, ra:" MAC_FMT "\n", MAC_ARG(pattrib->ra)));
+               #ifdef DBG_TX_DROP_FRAME
+               DBG_871X("DBG_TX_DROP_FRAME %s get sta_info fail, ra:" MAC_FMT"\n", __FUNCTION__, MAC_ARG(pattrib->ra));
+               #endif
+               res = _FAIL;
+               goto exit;
+       }
+
+       pattrib->ack_policy = 0;
+       // get ether_hdr_len
+       pattrib->pkt_hdrlen = ETH_HLEN;//(pattrib->ether_type == 0x8100) ? (14 + 4 ): 14; //vlan tag
+
+       pattrib->hdrlen = WLAN_HDR_A3_LEN;
+       pattrib->subtype = WIFI_DATA_TYPE;
+       pattrib->priority = 0;
+
+       if (check_fwstate(pmlmepriv, WIFI_AP_STATE|WIFI_ADHOC_STATE|WIFI_ADHOC_MASTER_STATE))
+       {
+               if(psta->qos_option)
+                       set_qos(&pktfile, pattrib);
+       }
+       else
+       {
+               if(pqospriv->qos_option)
+               {
+                       set_qos(&pktfile, pattrib);
+
+                       if(pmlmepriv->acm_mask != 0)
+                       {
+                               pattrib->priority = qos_acm(pmlmepriv->acm_mask, pattrib->priority);
+                       }
+               }
+       }
+
+       //pattrib->priority = 5; //force to used VI queue, for testing
+
+       if (psta->ieee8021x_blocked == _TRUE)
+       {
+               RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,("\n psta->ieee8021x_blocked == _TRUE \n"));
+
+               pattrib->encrypt = 0;
+
+               if((pattrib->ether_type != 0x888e) && (check_fwstate(pmlmepriv, WIFI_MP_STATE) == _FALSE))
+               {
+                       RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,("\npsta->ieee8021x_blocked == _TRUE,  pattrib->ether_type(%.4x) != 0x888e\n",pattrib->ether_type));
+                       #ifdef DBG_TX_DROP_FRAME
+                       DBG_871X("DBG_TX_DROP_FRAME %s psta->ieee8021x_blocked == _TRUE,  pattrib->ether_type(%.4x) != 0x888e\n", __FUNCTION__,pattrib->ether_type);
+                       #endif
+                       res = _FAIL;
+                       goto exit;
+               }
+       }
+       else
+       {
+               GET_ENCRY_ALGO(psecuritypriv, psta, pattrib->encrypt, bmcast);
+
+               switch(psecuritypriv->dot11AuthAlgrthm)
+               {
+                       case dot11AuthAlgrthm_Open:
+                       case dot11AuthAlgrthm_Shared:
+                       case dot11AuthAlgrthm_Auto:
+                               pattrib->key_idx = (u8)psecuritypriv->dot11PrivacyKeyIndex;
+                               break;
+                       case dot11AuthAlgrthm_8021X:
+                               if(bmcast)
+                                       pattrib->key_idx = (u8)psecuritypriv->dot118021XGrpKeyid;
+                               else
+                                       pattrib->key_idx = 0;
+                               break;
+                       default:
+                               pattrib->key_idx = 0;
+                               break;
+               }
+
+
+       }
+
+       switch (pattrib->encrypt)
+       {
+               case _WEP40_:
+               case _WEP104_:
+                       pattrib->iv_len = 4;
+                       pattrib->icv_len = 4;
+                       break;
+
+               case _TKIP_:
+                       pattrib->iv_len = 8;
+                       pattrib->icv_len = 4;
+
+                       if(padapter->securitypriv.busetkipkey==_FAIL)
+                       {
+                               RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,("\npadapter->securitypriv.busetkipkey(%d)==_FAIL drop packet\n", padapter->securitypriv.busetkipkey));
+                               #ifdef DBG_TX_DROP_FRAME
+                               DBG_871X("DBG_TX_DROP_FRAME %s padapter->securitypriv.busetkipkey(%d)==_FAIL drop packet\n", __FUNCTION__, padapter->securitypriv.busetkipkey);
+                               #endif
+                               res =_FAIL;
+                               goto exit;
+                       }
+
+                       break;
+               case _AES_:
+                       RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,("\n pattrib->encrypt=%d  (_AES_)\n",pattrib->encrypt));
+                       pattrib->iv_len = 8;
+                       pattrib->icv_len = 8;
+                       break;
+
+               default:
+                       pattrib->iv_len = 0;
+                       pattrib->icv_len = 0;
+                       break;
+       }
+
+       RT_TRACE(_module_rtl871x_xmit_c_, _drv_info_,
+                ("update_attrib: encrypt=%d  securitypriv.sw_encrypt=%d\n",
+                 pattrib->encrypt, padapter->securitypriv.sw_encrypt));
+
+       if (pattrib->encrypt &&
+           ((padapter->securitypriv.sw_encrypt == _TRUE) || (psecuritypriv->hw_decrypted == _FALSE)))
+       {
+               pattrib->bswenc = _TRUE;
+               RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,
+                        ("update_attrib: encrypt=%d securitypriv.hw_decrypted=%d bswenc=_TRUE\n",
+                         pattrib->encrypt, padapter->securitypriv.sw_encrypt));
+       } else {
+               pattrib->bswenc = _FALSE;
+               RT_TRACE(_module_rtl871x_xmit_c_,_drv_info_,("update_attrib: bswenc=_FALSE\n"));
+       }
+
+#ifdef CONFIG_CONCURRENT_MODE
+       if((pattrib->encrypt && bmcast) || (pattrib->encrypt ==_WEP40_) || (pattrib->encrypt ==_WEP104_))
+       {
+               pattrib->bswenc = _TRUE;//force using sw enc.
+       }
+#endif
+
+       rtw_set_tx_chksum_offload(pkt, pattrib);
+
+       update_attrib_phy_info(pattrib, psta);
+
+exit:
+
+_func_exit_;
+
+       return res;
+}
+
+static s32 xmitframe_addmic(_adapter *padapter, struct xmit_frame *pxmitframe){
+       sint                    curfragnum,length;
+       u8      *pframe, *payload,mic[8];
+       struct  mic_data                micdata;
+       struct  sta_info                *stainfo;
+       struct  qos_priv   *pqospriv= &(padapter->mlmepriv.qospriv);
+       struct  pkt_attrib       *pattrib = &pxmitframe->attrib;
+       struct  security_priv   *psecuritypriv=&padapter->securitypriv;
+       struct  xmit_priv               *pxmitpriv=&padapter->xmitpriv;
+       u8 priority[4]={0x0,0x0,0x0,0x0};
+       sint bmcst = IS_MCAST(pattrib->ra);
+
+       if(pattrib->psta)
+       {
+               stainfo = pattrib->psta;
+       }
+       else
+       {
+               DBG_871X("%s, call rtw_get_stainfo()\n", __func__);
+               stainfo=rtw_get_stainfo(&padapter->stapriv ,&pattrib->ra[0]);
+       }
+
+       if(stainfo==NULL)
+       {
+               DBG_871X("%s, psta==NUL\n", __func__);
+               return _FAIL;
+       }
+
+       if(!(stainfo->state &_FW_LINKED))
+       {
+               DBG_871X("%s, psta->state(0x%x) != _FW_LINKED\n", __func__, stainfo->state);
+               return _FAIL;
+       }
+
+_func_enter_;
+
+       if(pattrib->encrypt ==_TKIP_)//if(psecuritypriv->dot11PrivacyAlgrthm==_TKIP_PRIVACY_)
+       {
+               //encode mic code
+               if(stainfo!= NULL){
+                       u8 null_key[16]={0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0};
+
+#ifdef CONFIG_USB_TX_AGGREGATION
+                       pframe = pxmitframe->buf_addr + TXDESC_SIZE + (pxmitframe->pkt_offset * PACKET_OFFSET_SZ);
+#else
+                       pframe = pxmitframe->buf_addr + TXDESC_OFFSET;
+#endif
+
+                       if(bmcst)
+                       {
+                               if(_rtw_memcmp(psecuritypriv->dot118021XGrptxmickey[psecuritypriv->dot118021XGrpKeyid].skey, null_key, 16)==_TRUE){
+                                       //DbgPrint("\nxmitframe_addmic:stainfo->dot11tkiptxmickey==0\n");
+                                       //rtw_msleep_os(10);
+                                       return _FAIL;
+                               }
+                               //start to calculate the mic code
+                               rtw_secmicsetkey(&micdata, psecuritypriv->dot118021XGrptxmickey[psecuritypriv->dot118021XGrpKeyid].skey);
+                       }
+                       else
+                       {
+                               if(_rtw_memcmp(&stainfo->dot11tkiptxmickey.skey[0],null_key, 16)==_TRUE){
+                                       //DbgPrint("\nxmitframe_addmic:stainfo->dot11tkiptxmickey==0\n");
+                                       //rtw_msleep_os(10);
+                                       return _FAIL;
+                               }
+                               //start to calculate the mic code
+                               rtw_secmicsetkey(&micdata, &stainfo->dot11tkiptxmickey.skey[0]);
+                       }
+
+                       if(pframe[1]&1){   //ToDS==1
+                               rtw_secmicappend(&micdata, &pframe[16], 6);  //DA
+                               if(pframe[1]&2)  //From Ds==1
+                                       rtw_secmicappend(&micdata, &pframe[24], 6);
+                               else
+                               rtw_secmicappend(&micdata, &pframe[10], 6);
+                       }
+                       else{   //ToDS==0
+                               rtw_secmicappend(&micdata, &pframe[4], 6);   //DA
+                               if(pframe[1]&2)  //From Ds==1
+                                       rtw_secmicappend(&micdata, &pframe[16], 6);
+                               else
+                                       rtw_secmicappend(&micdata, &pframe[10], 6);
+
+                       }
+
+                    //if(pqospriv->qos_option==1)
+                    if(pattrib->qos_en)
+                               priority[0]=(u8)pxmitframe->attrib.priority;
+
+
+                       rtw_secmicappend(&micdata, &priority[0], 4);
+
+                       payload=pframe;
+
+                       for(curfragnum=0;curfragnum<pattrib->nr_frags;curfragnum++){
+                               payload=(u8 *)RND4((SIZE_PTR)(payload));
+                               RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,("===curfragnum=%d, pframe= 0x%.2x, 0x%.2x, 0x%.2x, 0x%.2x, 0x%.2x, 0x%.2x, 0x%.2x, 0x%.2x,!!!\n",
+                                       curfragnum,*payload, *(payload+1),*(payload+2),*(payload+3),*(payload+4),*(payload+5),*(payload+6),*(payload+7)));
+
+                               payload=payload+pattrib->hdrlen+pattrib->iv_len;
+                               RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,("curfragnum=%d pattrib->hdrlen=%d pattrib->iv_len=%d",curfragnum,pattrib->hdrlen,pattrib->iv_len));
+                               if((curfragnum+1)==pattrib->nr_frags){
+                                       length=pattrib->last_txcmdsz-pattrib->hdrlen-pattrib->iv_len-( (pattrib->bswenc) ? pattrib->icv_len : 0);
+                                       rtw_secmicappend(&micdata, payload,length);
+                                       payload=payload+length;
+                               }
+                               else{
+                                       length=pxmitpriv->frag_len-pattrib->hdrlen-pattrib->iv_len-( (pattrib->bswenc) ? pattrib->icv_len : 0);
+                                       rtw_secmicappend(&micdata, payload, length);
+                                       payload=payload+length+pattrib->icv_len;
+                                       RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,("curfragnum=%d length=%d pattrib->icv_len=%d",curfragnum,length,pattrib->icv_len));
+                               }
+                       }
+                       rtw_secgetmic(&micdata,&(mic[0]));
+                       RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,("xmitframe_addmic: before add mic code!!!\n"));
+                       RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,("xmitframe_addmic: pattrib->last_txcmdsz=%d!!!\n",pattrib->last_txcmdsz));
+                       RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,("xmitframe_addmic: mic[0]=0x%.2x ,mic[1]=0x%.2x ,mic[2]=0x%.2x ,mic[3]=0x%.2x \n\
+  mic[4]=0x%.2x ,mic[5]=0x%.2x ,mic[6]=0x%.2x ,mic[7]=0x%.2x !!!!\n",
+                               mic[0],mic[1],mic[2],mic[3],mic[4],mic[5],mic[6],mic[7]));
+                       //add mic code  and add the mic code length in last_txcmdsz
+
+                       _rtw_memcpy(payload, &(mic[0]),8);
+                       pattrib->last_txcmdsz+=8;
+
+                       RT_TRACE(_module_rtl871x_xmit_c_,_drv_info_,("\n ========last pkt========\n"));
+                       payload=payload-pattrib->last_txcmdsz+8;
+                       for(curfragnum=0;curfragnum<pattrib->last_txcmdsz;curfragnum=curfragnum+8)
+                                       RT_TRACE(_module_rtl871x_xmit_c_,_drv_info_,(" %.2x,  %.2x,  %.2x,  %.2x,  %.2x,  %.2x,  %.2x,  %.2x ",
+                                       *(payload+curfragnum), *(payload+curfragnum+1), *(payload+curfragnum+2),*(payload+curfragnum+3),
+                                       *(payload+curfragnum+4),*(payload+curfragnum+5),*(payload+curfragnum+6),*(payload+curfragnum+7)));
+                       }
+                       else{
+                               RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,("xmitframe_addmic: rtw_get_stainfo==NULL!!!\n"));
+                       }
+       }
+
+_func_exit_;
+
+       return _SUCCESS;
+}
+
+static s32 xmitframe_swencrypt(_adapter *padapter, struct xmit_frame *pxmitframe){
+
+       struct  pkt_attrib       *pattrib = &pxmitframe->attrib;
+       //struct        security_priv   *psecuritypriv=&padapter->securitypriv;
+
+_func_enter_;
+
+       //if((psecuritypriv->sw_encrypt)||(pattrib->bswenc))
+       if(pattrib->bswenc)
+       {
+               //DBG_871X("start xmitframe_swencrypt\n");
+               RT_TRACE(_module_rtl871x_xmit_c_,_drv_alert_,("### xmitframe_swencrypt\n"));
+               switch(pattrib->encrypt){
+               case _WEP40_:
+               case _WEP104_:
+                       rtw_wep_encrypt(padapter, (u8 *)pxmitframe);
+                       break;
+               case _TKIP_:
+                       rtw_tkip_encrypt(padapter, (u8 *)pxmitframe);
+                       break;
+               case _AES_:
+                       rtw_aes_encrypt(padapter, (u8 * )pxmitframe);
+                       break;
+               default:
+                               break;
+               }
+
+       } else {
+               RT_TRACE(_module_rtl871x_xmit_c_,_drv_notice_,("### xmitframe_hwencrypt\n"));
+       }
+
+_func_exit_;
+
+       return _SUCCESS;
+}
+
+s32 rtw_make_wlanhdr (_adapter *padapter , u8 *hdr, struct pkt_attrib *pattrib)
+{
+       u16 *qc;
+
+       struct rtw_ieee80211_hdr *pwlanhdr = (struct rtw_ieee80211_hdr *)hdr;
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+       struct qos_priv *pqospriv = &pmlmepriv->qospriv;
+       u8 qos_option = _FALSE;
+#ifdef CONFIG_TDLS
+       struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
+       struct sta_priv         *pstapriv = &padapter->stapriv;
+       struct sta_info *ptdls_sta=NULL, *psta_backup=NULL;
+       u8 direct_link=0;
+#endif //CONFIG_TDLS
+
+       sint res = _SUCCESS;
+       u16 *fctrl = &pwlanhdr->frame_ctl;
+
+       struct sta_info *psta;
+
+       sint bmcst = IS_MCAST(pattrib->ra);
+
+_func_enter_;
+
+       if (pattrib->psta) {
+               psta = pattrib->psta;
+       } else {
+               DBG_871X("%s, call rtw_get_stainfo()\n", __func__);
+               if(bmcst) {
+                       psta = rtw_get_bcmc_stainfo(padapter);
+               } else {
+                       psta = rtw_get_stainfo(&padapter->stapriv, pattrib->ra);
+               }
+       }
+
+       if(psta==NULL)
+       {
+               DBG_871X("%s, psta==NUL\n", __func__);
+               return _FAIL;
+       }
+
+       if(!(psta->state &_FW_LINKED))
+       {
+               DBG_871X("%s, psta->state(0x%x) != _FW_LINKED\n", __func__, psta->state);
+               return _FAIL;
+       }
+
+       _rtw_memset(hdr, 0, WLANHDR_OFFSET);
+
+       SetFrameSubType(fctrl, pattrib->subtype);
+
+       if (pattrib->subtype & WIFI_DATA_TYPE)
+       {
+               if ((check_fwstate(pmlmepriv,  WIFI_STATION_STATE) == _TRUE)) {
+                       //to_ds = 1, fr_ds = 0;
+#ifdef CONFIG_TDLS
+                       if((ptdlsinfo->setup_state == TDLS_LINKED_STATE)){
+                               ptdls_sta = rtw_get_stainfo(pstapriv, pattrib->dst);
+                               if((ptdls_sta!=NULL)&&(ptdls_sta->tdls_sta_state & TDLS_LINKED_STATE)&&(pattrib->ether_type!=0x0806)){
+                                       //TDLS data transfer, ToDS=0, FrDs=0
+                                       _rtw_memcpy(pwlanhdr->addr1, pattrib->dst, ETH_ALEN);
+                                       _rtw_memcpy(pwlanhdr->addr2, pattrib->src, ETH_ALEN);
+                                       _rtw_memcpy(pwlanhdr->addr3, get_bssid(pmlmepriv), ETH_ALEN);
+                                       direct_link=1;
+                               }else{
+                                       // 1.Data transfer to AP
+                                       // 2.Arp pkt will relayed by AP
+                                       SetToDs(fctrl);
+                                       _rtw_memcpy(pwlanhdr->addr1, get_bssid(pmlmepriv), ETH_ALEN);
+                                       _rtw_memcpy(pwlanhdr->addr2, pattrib->src, ETH_ALEN);
+                                       _rtw_memcpy(pwlanhdr->addr3, pattrib->dst, ETH_ALEN);
+                               }
+                       }else
+#endif //CONFIG_TDLS
+                       {
+                               //Data transfer to AP
+                               SetToDs(fctrl);
+                               _rtw_memcpy(pwlanhdr->addr1, get_bssid(pmlmepriv), ETH_ALEN);
+                               _rtw_memcpy(pwlanhdr->addr2, pattrib->src, ETH_ALEN);
+                               _rtw_memcpy(pwlanhdr->addr3, pattrib->dst, ETH_ALEN);
+                       }
+
+                       if (pqospriv->qos_option)
+                               qos_option = _TRUE;
+
+               }
+               else if ((check_fwstate(pmlmepriv,  WIFI_AP_STATE) == _TRUE) ) {
+                       //to_ds = 0, fr_ds = 1;
+                       SetFrDs(fctrl);
+                       _rtw_memcpy(pwlanhdr->addr1, pattrib->dst, ETH_ALEN);
+                       _rtw_memcpy(pwlanhdr->addr2, get_bssid(pmlmepriv), ETH_ALEN);
+                       _rtw_memcpy(pwlanhdr->addr3, pattrib->src, ETH_ALEN);
+
+                       if(psta->qos_option)
+                               qos_option = _TRUE;
+               }
+               else if ((check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE) ||
+               (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE)) {
+                       _rtw_memcpy(pwlanhdr->addr1, pattrib->dst, ETH_ALEN);
+                       _rtw_memcpy(pwlanhdr->addr2, pattrib->src, ETH_ALEN);
+                       _rtw_memcpy(pwlanhdr->addr3, get_bssid(pmlmepriv), ETH_ALEN);
+
+                       if(psta->qos_option)
+                               qos_option = _TRUE;
+               }
+               else {
+                       RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,("fw_state:%x is not allowed to xmit frame\n", get_fwstate(pmlmepriv)));
+                       res = _FAIL;
+                       goto exit;
+               }
+
+               if(pattrib->mdata)
+                       SetMData(fctrl);
+
+               if (pattrib->encrypt)
+                       SetPrivacy(fctrl);
+
+               if (qos_option)
+               {
+                       qc = (unsigned short *)(hdr + pattrib->hdrlen - 2);
+
+                       if (pattrib->priority)
+                               SetPriority(qc, pattrib->priority);
+
+                       SetEOSP(qc, pattrib->eosp);
+
+                       SetAckpolicy(qc, pattrib->ack_policy);
+               }
+
+               //TODO: fill HT Control Field
+
+               //Update Seq Num will be handled by f/w
+               {
+                       if(psta){
+#ifdef CONFIG_TDLS
+                               if(direct_link==1)
+                               {
+                                       psta_backup = psta;
+                                       psta = ptdls_sta;
+                               }
+#endif //CONFIG_TDLS
+
+                               psta->sta_xmitpriv.txseq_tid[pattrib->priority]++;
+                               psta->sta_xmitpriv.txseq_tid[pattrib->priority] &= 0xFFF;
+
+                               pattrib->seqnum = psta->sta_xmitpriv.txseq_tid[pattrib->priority];
+
+                               SetSeqNum(hdr, pattrib->seqnum);
+
+
+                               //check if enable ampdu
+                               if(pattrib->ht_en && psta->htpriv.ampdu_enable)
+                               {
+                                       if(psta->htpriv.agg_enable_bitmap & BIT(pattrib->priority))
+                                       pattrib->ampdu_en = _TRUE;
+                               }
+
+                               //re-check if enable ampdu by BA_starting_seqctrl
+                               if(pattrib->ampdu_en == _TRUE)
+                               {
+                                       u16 tx_seq;
+
+                                       tx_seq = psta->BA_starting_seqctrl[pattrib->priority & 0x0f];
+
+                                       //check BA_starting_seqctrl
+                                       if(SN_LESS(pattrib->seqnum, tx_seq))
+                                       {
+                                               //DBG_871X("tx ampdu seqnum(%d) < tx_seq(%d)\n", pattrib->seqnum, tx_seq);
+                                               pattrib->ampdu_en = _FALSE;//AGG BK
+                                       }
+                                       else if(SN_EQUAL(pattrib->seqnum, tx_seq))
+                                       {
+                                               psta->BA_starting_seqctrl[pattrib->priority & 0x0f] = (tx_seq+1)&0xfff;
+
+                                               pattrib->ampdu_en = _TRUE;//AGG EN
+                                       }
+                                       else
+                                       {
+                                               //DBG_871X("tx ampdu over run\n");
+                                               psta->BA_starting_seqctrl[pattrib->priority & 0x0f] = (pattrib->seqnum+1)&0xfff;
+                                               pattrib->ampdu_en = _TRUE;//AGG EN
+                                       }
+
+                               }
+
+#ifdef CONFIG_TDLS
+                               if(direct_link==1)
+                               {
+                                       if (pattrib->encrypt){
+                                               pattrib->encrypt= _AES_;
+                                               pattrib->iv_len=8;
+                                               pattrib->icv_len=8;
+                                       }
+
+                                       //qos_en, ht_en, init rate, ,bw, ch_offset, sgi
+                                       //pattrib->qos_en = ptdls_sta->qos_option;
+                                       pattrib->ht_en = ptdls_sta->htpriv.ht_option;
+                                       pattrib->raid = ptdls_sta->raid;
+                                       pattrib->bwmode = ptdls_sta->htpriv.bwmode;
+                                       pattrib->ch_offset = ptdls_sta->htpriv.ch_offset;
+                                       pattrib->sgi= ptdls_sta->htpriv.sgi;
+
+                                       pattrib->mac_id = ptdls_sta->mac_id;
+
+                                       psta = psta_backup;
+                               }
+#endif //CONFIG_TDLS
+
+                       }
+               }
+
+       }
+       else
+       {
+
+       }
+
+exit:
+
+_func_exit_;
+
+       return res;
+}
+
+s32 rtw_txframes_pending(_adapter *padapter)
+{
+       struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
+
+       return ((_rtw_queue_empty(&pxmitpriv->be_pending) == _FALSE) ||
+                        (_rtw_queue_empty(&pxmitpriv->bk_pending) == _FALSE) ||
+                        (_rtw_queue_empty(&pxmitpriv->vi_pending) == _FALSE) ||
+                        (_rtw_queue_empty(&pxmitpriv->vo_pending) == _FALSE));
+}
+
+s32 rtw_txframes_sta_ac_pending(_adapter *padapter, struct pkt_attrib *pattrib)
+{
+       struct sta_info *psta;
+       struct tx_servq *ptxservq;
+       int priority = pattrib->priority;
+
+       if(pattrib->psta)
+       {
+       psta = pattrib->psta;
+       }
+       else
+       {
+               DBG_871X("%s, call rtw_get_stainfo()\n", __func__);
+               psta=rtw_get_stainfo(&padapter->stapriv ,&pattrib->ra[0]);
+       }
+
+       if(psta==NULL)
+       {
+               DBG_871X("%s, psta==NUL\n", __func__);
+               return 0;
+       }
+
+       if(!(psta->state &_FW_LINKED))
+       {
+               DBG_871X("%s, psta->state(0x%x) != _FW_LINKED\n", __func__, psta->state);
+               return 0;
+       }
+
+       switch(priority)
+       {
+                       case 1:
+                       case 2:
+                               ptxservq = &(psta->sta_xmitpriv.bk_q);
+                               break;
+                       case 4:
+                       case 5:
+                               ptxservq = &(psta->sta_xmitpriv.vi_q);
+                               break;
+                       case 6:
+                       case 7:
+                               ptxservq = &(psta->sta_xmitpriv.vo_q);
+                               break;
+                       case 0:
+                       case 3:
+                       default:
+                               ptxservq = &(psta->sta_xmitpriv.be_q);
+                       break;
+
+       }
+
+       return ptxservq->qcnt;
+}
+
+#ifdef CONFIG_TDLS
+
+int rtw_build_tdls_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe, u8 action)
+{
+       int res=_SUCCESS;
+
+       switch(action){
+               case TDLS_SETUP_REQUEST:
+                       rtw_build_tdls_setup_req_ies(padapter, pxmitframe, pframe);
+                       break;
+               case TDLS_SETUP_RESPONSE:
+                       rtw_build_tdls_setup_rsp_ies(padapter, pxmitframe, pframe);
+                       break;
+               case TDLS_SETUP_CONFIRM:
+                       rtw_build_tdls_setup_cfm_ies(padapter, pxmitframe, pframe);
+                       break;
+               case TDLS_TEARDOWN:
+                       rtw_build_tdls_teardown_ies(padapter, pxmitframe, pframe);
+                       break;
+               case TDLS_DISCOVERY_REQUEST:
+                       rtw_build_tdls_dis_req_ies(padapter, pxmitframe, pframe);
+                       break;
+               case TDLS_PEER_TRAFFIC_INDICATION:
+                       rtw_build_tdls_peer_traffic_indication_ies(padapter, pxmitframe, pframe);
+                       break;
+               case TDLS_CHANNEL_SWITCH_REQUEST:
+                       rtw_build_tdls_ch_switch_req_ies(padapter, pxmitframe, pframe);
+                       break;
+               case TDLS_CHANNEL_SWITCH_RESPONSE:
+                       rtw_build_tdls_ch_switch_rsp_ies(padapter, pxmitframe, pframe);
+                       break;
+#ifdef CONFIG_WFD
+               case TUNNELED_PROBE_REQ:
+                       rtw_build_tunneled_probe_req_ies(padapter, pxmitframe, pframe);
+                       break;
+               case TUNNELED_PROBE_RSP:
+                       rtw_build_tunneled_probe_rsp_ies(padapter, pxmitframe, pframe);
+                       break;
+#endif //CONFIG_WFD
+               default:
+                       res=_FAIL;
+                       break;
+       }
+
+       return res;
+}
+
+s32 rtw_make_tdls_wlanhdr (_adapter *padapter , u8 *hdr, struct pkt_attrib *pattrib, u8 action)
+{
+       u16 *qc;
+       struct rtw_ieee80211_hdr *pwlanhdr = (struct rtw_ieee80211_hdr *)hdr;
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+       struct qos_priv *pqospriv = &pmlmepriv->qospriv;
+       struct sta_priv         *pstapriv = &padapter->stapriv;
+       struct sta_info *psta=NULL, *ptdls_sta=NULL;
+       u8 tdls_seq=0, baddr[ETH_ALEN] = { 0xff, 0xff, 0xff, 0xff, 0xff, 0xff };
+
+       sint res = _SUCCESS;
+       u16 *fctrl = &pwlanhdr->frame_ctl;
+
+_func_enter_;
+
+       _rtw_memset(hdr, 0, WLANHDR_OFFSET);
+
+       SetFrameSubType(fctrl, pattrib->subtype);
+
+       switch(action){
+               case TDLS_SETUP_REQUEST:
+               case TDLS_SETUP_RESPONSE:
+               case TDLS_SETUP_CONFIRM:
+               case TDLS_TEARDOWN:     //directly to peer STA or via AP
+               case TDLS_PEER_TRAFFIC_INDICATION:
+               case TDLS_PEER_PSM_REQUEST:     //directly to peer STA or via AP
+               case TUNNELED_PROBE_REQ:
+               case TUNNELED_PROBE_RSP:
+                       SetToDs(fctrl);
+                       _rtw_memcpy(pwlanhdr->addr1, get_bssid(pmlmepriv), ETH_ALEN);
+                       _rtw_memcpy(pwlanhdr->addr2, pattrib->src, ETH_ALEN);
+                       _rtw_memcpy(pwlanhdr->addr3, pattrib->dst, ETH_ALEN);
+                       break;
+               case TDLS_CHANNEL_SWITCH_REQUEST:
+               case TDLS_CHANNEL_SWITCH_RESPONSE:
+               case TDLS_PEER_PSM_RESPONSE:
+               case TDLS_PEER_TRAFFIC_RESPONSE:
+                       _rtw_memcpy(pwlanhdr->addr1, pattrib->dst, ETH_ALEN);
+                       _rtw_memcpy(pwlanhdr->addr2, pattrib->src, ETH_ALEN);
+                       _rtw_memcpy(pwlanhdr->addr3, get_bssid(pmlmepriv), ETH_ALEN);
+                       tdls_seq=1;
+                       break;
+               case TDLS_DISCOVERY_REQUEST:    //unicast: directly to peer sta, Bcast: via AP
+                       if(_rtw_memcmp(pattrib->dst, baddr, ETH_ALEN) )
+                       {
+                               SetToDs(fctrl);
+                               _rtw_memcpy(pwlanhdr->addr1, get_bssid(pmlmepriv), ETH_ALEN);
+                               _rtw_memcpy(pwlanhdr->addr2, pattrib->src, ETH_ALEN);
+                               _rtw_memcpy(pwlanhdr->addr3, pattrib->dst, ETH_ALEN);
+                       }
+                       else
+                       {
+                               _rtw_memcpy(pwlanhdr->addr1, pattrib->dst, ETH_ALEN);
+                               _rtw_memcpy(pwlanhdr->addr2, pattrib->src, ETH_ALEN);
+                               _rtw_memcpy(pwlanhdr->addr3, get_bssid(pmlmepriv), ETH_ALEN);
+                               tdls_seq=1;
+                       }
+                       break;
+       }
+
+       if (pattrib->encrypt)
+               SetPrivacy(fctrl);
+
+       if (pqospriv->qos_option)
+       {
+               qc = (unsigned short *)(hdr + pattrib->hdrlen - 2);
+               if (pattrib->priority)
+                       SetPriority(qc, pattrib->priority);
+               SetAckpolicy(qc, pattrib->ack_policy);
+       }
+
+       psta = pattrib->psta;
+
+       //  1. update seq_num per link by sta_info
+       //  2. rewrite encrypt to _AES_, also rewrite iv_len, icv_len
+       if(tdls_seq==1){
+               ptdls_sta=rtw_get_stainfo(pstapriv, pattrib->dst);
+               if(ptdls_sta){
+                       ptdls_sta->sta_xmitpriv.txseq_tid[pattrib->priority]++;
+                       ptdls_sta->sta_xmitpriv.txseq_tid[pattrib->priority] &= 0xFFF;
+                       pattrib->seqnum = ptdls_sta->sta_xmitpriv.txseq_tid[pattrib->priority];
+                       SetSeqNum(hdr, pattrib->seqnum);
+
+                       if (pattrib->encrypt){
+                               pattrib->encrypt= _AES_;
+                               pattrib->iv_len=8;
+                               pattrib->icv_len=8;
+                       }
+               }else{
+                       res=_FAIL;
+                       goto exit;
+               }
+       }else if(psta){
+               psta->sta_xmitpriv.txseq_tid[pattrib->priority]++;
+               psta->sta_xmitpriv.txseq_tid[pattrib->priority] &= 0xFFF;
+               pattrib->seqnum = psta->sta_xmitpriv.txseq_tid[pattrib->priority];
+               SetSeqNum(hdr, pattrib->seqnum);
+       }
+
+
+exit:
+
+_func_exit_;
+
+       return res;
+}
+
+s32 rtw_xmit_tdls_coalesce(_adapter * padapter, struct xmit_frame * pxmitframe, u8 action)
+{
+       s32 llc_sz;
+
+       u8 *pframe, *mem_start;
+
+       struct sta_info         *psta;
+       struct sta_priv         *pstapriv = &padapter->stapriv;
+       struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
+       struct pkt_attrib       *pattrib = &pxmitframe->attrib;
+       u8 *pbuf_start;
+       s32 bmcst = IS_MCAST(pattrib->ra);
+       s32 res = _SUCCESS;
+
+_func_enter_;
+
+       if (pattrib->psta) {
+               psta = pattrib->psta;
+       } else {
+               if(bmcst) {
+                       psta = rtw_get_bcmc_stainfo(padapter);
+               } else {
+                       psta = rtw_get_stainfo(&padapter->stapriv, pattrib->ra);
+               }
+       }
+
+       if(psta==NULL)
+               return _FAIL;
+
+       if (pxmitframe->buf_addr == NULL)
+               return _FAIL;
+
+       pbuf_start = pxmitframe->buf_addr;
+       mem_start = pbuf_start + TXDESC_OFFSET;
+
+       if (rtw_make_tdls_wlanhdr(padapter, mem_start, pattrib, action) == _FAIL) {
+               res = _FAIL;
+               goto exit;
+       }
+
+       pframe = mem_start;
+       pframe += pattrib->hdrlen;
+
+       //adding icv, if necessary...
+       if (pattrib->iv_len)
+       {
+               if (psta != NULL)
+               {
+                       switch(pattrib->encrypt)
+                       {
+                               case _WEP40_:
+                               case _WEP104_:
+                                               WEP_IV(pattrib->iv, psta->dot11txpn, pattrib->key_idx);
+                                       break;
+                               case _TKIP_:
+                                       if(bmcst)
+                                               TKIP_IV(pattrib->iv, psta->dot11txpn, pattrib->key_idx);
+                                       else
+                                               TKIP_IV(pattrib->iv, psta->dot11txpn, 0);
+                                       break;
+                               case _AES_:
+                                       if(bmcst)
+                                               AES_IV(pattrib->iv, psta->dot11txpn, pattrib->key_idx);
+                                       else
+                                               AES_IV(pattrib->iv, psta->dot11txpn, 0);
+                                       break;
+                       }
+               }
+
+               _rtw_memcpy(pframe, pattrib->iv, pattrib->iv_len);
+               pframe += pattrib->iv_len;
+
+       }
+
+       llc_sz = rtw_put_snap(pframe, pattrib->ether_type);
+       pframe += llc_sz;
+
+       //pattrib->pktlen will be counted in rtw_build_tdls_ies
+       pattrib->pktlen = 0;
+
+       rtw_build_tdls_ies(padapter, pxmitframe, pframe, action);
+
+       if ((pattrib->icv_len >0 )&& (pattrib->bswenc)) {
+               pframe += pattrib->pktlen;
+               _rtw_memcpy(pframe, pattrib->icv, pattrib->icv_len);
+               pframe += pattrib->icv_len;
+       }
+
+       pattrib->nr_frags = 1;
+       pattrib->last_txcmdsz = pattrib->hdrlen + pattrib->iv_len + llc_sz +
+                       ((pattrib->bswenc) ? pattrib->icv_len : 0) + pattrib->pktlen;
+
+       if (xmitframe_addmic(padapter, pxmitframe) == _FAIL)
+       {
+               goto exit;
+       }
+
+       xmitframe_swencrypt(padapter, pxmitframe);
+
+       update_attrib_vcs_info(padapter, pxmitframe);
+
+exit:
+
+_func_exit_;
+
+       return res;
+}
+#endif //CONFIG_TDLS
+
+/*
+ * Calculate wlan 802.11 packet MAX size from pkt_attrib
+ * This function doesn't consider fragment case
+ */
+u32 rtw_calculate_wlan_pkt_size_by_attribue(struct pkt_attrib *pattrib)
+{
+       u32     len = 0;
+
+       len = pattrib->hdrlen + pattrib->iv_len; // WLAN Header and IV
+       len += SNAP_SIZE + sizeof(u16); // LLC
+       len += pattrib->pktlen;
+       if (pattrib->encrypt == _TKIP_) len += 8; // MIC
+       len += pattrib->icv_len; // ICV
+
+       return len;
+}
+
+/*
+
+This sub-routine will perform all the following:
+
+1. remove 802.3 header.
+2. create wlan_header, based on the info in pxmitframe
+3. append sta's iv/ext-iv
+4. append LLC
+5. move frag chunk from pframe to pxmitframe->mem
+6. apply sw-encrypt, if necessary.
+
+*/
+s32 rtw_xmitframe_coalesce(_adapter *padapter, _pkt *pkt, struct xmit_frame *pxmitframe)
+{
+       struct pkt_file pktfile;
+
+       s32 frg_inx, frg_len, mpdu_len, llc_sz, mem_sz;
+
+       SIZE_PTR addr;
+
+       u8 *pframe, *mem_start;
+
+       struct sta_info         *psta;
+       //struct sta_priv               *pstapriv = &padapter->stapriv;
+       //struct mlme_priv      *pmlmepriv = &padapter->mlmepriv;
+       struct xmit_priv        *pxmitpriv = &padapter->xmitpriv;
+
+       struct pkt_attrib       *pattrib = &pxmitframe->attrib;
+
+       u8 *pbuf_start;
+
+       s32 bmcst = IS_MCAST(pattrib->ra);
+       s32 res = _SUCCESS;
+
+_func_enter_;
+
+       if (pattrib->psta)
+       {
+               psta = pattrib->psta;
+       } else
+       {
+               DBG_871X("%s, call rtw_get_stainfo()\n", __func__);
+               psta = rtw_get_stainfo(&padapter->stapriv, pattrib->ra);
+       }
+
+       if(psta==NULL)
+        {
+
+               DBG_871X("%s, psta==NUL\n", __func__);
+               return _FAIL;
+       }
+
+
+       if(!(psta->state &_FW_LINKED))
+       {
+               DBG_871X("%s, psta->state(0x%x) != _FW_LINKED\n", __func__, psta->state);
+               return _FAIL;
+       }
+
+       if (pxmitframe->buf_addr == NULL){
+               DBG_8192C("==> %s buf_addr==NULL \n",__FUNCTION__);
+               return _FAIL;
+       }
+
+       pbuf_start = pxmitframe->buf_addr;
+
+#ifdef CONFIG_USB_TX_AGGREGATION
+       mem_start = pbuf_start + TXDESC_SIZE + (pxmitframe->pkt_offset * PACKET_OFFSET_SZ);
+#else
+       mem_start = pbuf_start + TXDESC_OFFSET;
+#endif
+
+       if (rtw_make_wlanhdr(padapter, mem_start, pattrib) == _FAIL) {
+               RT_TRACE(_module_rtl871x_xmit_c_, _drv_err_, ("rtw_xmitframe_coalesce: rtw_make_wlanhdr fail; drop pkt\n"));
+               res = _FAIL;
+               goto exit;
+       }
+
+       _rtw_open_pktfile(pkt, &pktfile);
+       _rtw_pktfile_read(&pktfile, NULL, pattrib->pkt_hdrlen);
+
+       frg_inx = 0;
+       frg_len = pxmitpriv->frag_len - 4;//2346-4 = 2342
+
+       while (1)
+       {
+               llc_sz = 0;
+
+               mpdu_len = frg_len;
+
+               pframe = mem_start;
+
+               SetMFrag(mem_start);
+
+               pframe += pattrib->hdrlen;
+               mpdu_len -= pattrib->hdrlen;
+
+               //adding icv, if necessary...
+               if (pattrib->iv_len)
+               {
+                       //if (check_fwstate(pmlmepriv, WIFI_MP_STATE))
+                       //      psta = rtw_get_stainfo(pstapriv, get_bssid(pmlmepriv));
+                       //else
+                       //      psta = rtw_get_stainfo(pstapriv, pattrib->ra);
+
+                       if (psta != NULL)
+                       {
+                               switch(pattrib->encrypt)
+                               {
+                                       case _WEP40_:
+                                       case _WEP104_:
+                                                       WEP_IV(pattrib->iv, psta->dot11txpn, pattrib->key_idx);
+                                               break;
+                                       case _TKIP_:
+                                               if(bmcst)
+                                                       TKIP_IV(pattrib->iv, psta->dot11txpn, pattrib->key_idx);
+                                               else
+                                                       TKIP_IV(pattrib->iv, psta->dot11txpn, 0);
+                                               break;
+                                       case _AES_:
+                                               if(bmcst)
+                                                       AES_IV(pattrib->iv, psta->dot11txpn, pattrib->key_idx);
+                                               else
+                                                       AES_IV(pattrib->iv, psta->dot11txpn, 0);
+                                               break;
+                               }
+                       }
+
+                       _rtw_memcpy(pframe, pattrib->iv, pattrib->iv_len);
+
+                       RT_TRACE(_module_rtl871x_xmit_c_, _drv_notice_,
+                                ("rtw_xmitframe_coalesce: keyid=%d pattrib->iv[3]=%.2x pframe=%.2x %.2x %.2x %.2x\n",
+                                 padapter->securitypriv.dot11PrivacyKeyIndex, pattrib->iv[3], *pframe, *(pframe+1), *(pframe+2), *(pframe+3)));
+
+                       pframe += pattrib->iv_len;
+
+                       mpdu_len -= pattrib->iv_len;
+               }
+
+               if (frg_inx == 0) {
+                       llc_sz = rtw_put_snap(pframe, pattrib->ether_type);
+                       pframe += llc_sz;
+                       mpdu_len -= llc_sz;
+               }
+
+               if ((pattrib->icv_len >0) && (pattrib->bswenc)) {
+                       mpdu_len -= pattrib->icv_len;
+               }
+
+
+               if (bmcst) {
+                       // don't do fragment to broadcat/multicast packets
+                       mem_sz = _rtw_pktfile_read(&pktfile, pframe, pattrib->pktlen);
+               } else {
+                       mem_sz = _rtw_pktfile_read(&pktfile, pframe, mpdu_len);
+               }
+
+               pframe += mem_sz;
+
+               if ((pattrib->icv_len >0 )&& (pattrib->bswenc)) {
+                       _rtw_memcpy(pframe, pattrib->icv, pattrib->icv_len);
+                       pframe += pattrib->icv_len;
+               }
+
+               frg_inx++;
+
+               if (bmcst || (rtw_endofpktfile(&pktfile) == _TRUE))
+               {
+                       pattrib->nr_frags = frg_inx;
+
+                       pattrib->last_txcmdsz = pattrib->hdrlen + pattrib->iv_len + ((pattrib->nr_frags==1)? llc_sz:0) +
+                                       ((pattrib->bswenc) ? pattrib->icv_len : 0) + mem_sz;
+
+                       ClearMFrag(mem_start);
+
+                       break;
+               } else {
+                       RT_TRACE(_module_rtl871x_xmit_c_, _drv_err_, ("%s: There're still something in packet!\n", __FUNCTION__));
+               }
+
+               addr = (SIZE_PTR)(pframe);
+
+               mem_start = (unsigned char *)RND4(addr) + TXDESC_OFFSET;
+               _rtw_memcpy(mem_start, pbuf_start + TXDESC_OFFSET, pattrib->hdrlen);
+       }
+
+       if (xmitframe_addmic(padapter, pxmitframe) == _FAIL)
+       {
+               RT_TRACE(_module_rtl871x_xmit_c_, _drv_err_, ("xmitframe_addmic(padapter, pxmitframe)==_FAIL\n"));
+               res = _FAIL;
+               goto exit;
+       }
+
+       xmitframe_swencrypt(padapter, pxmitframe);
+
+       if(bmcst == _FALSE)
+               update_attrib_vcs_info(padapter, pxmitframe);
+       else
+               pattrib->vcs_mode = NONE_VCS;
+
+exit:
+
+_func_exit_;
+
+       return res;
+}
+
+#ifdef CONFIG_IEEE80211W
+//broadcast or multicast management pkt use BIP, unicast management pkt use CCMP encryption
+s32 rtw_mgmt_xmitframe_coalesce(_adapter *padapter, _pkt *pkt, struct xmit_frame *pxmitframe)
+{
+       struct pkt_file pktfile;
+       s32 frg_inx, frg_len, mpdu_len, llc_sz, mem_sz;
+       SIZE_PTR addr;
+       u8 *pframe, *mem_start = NULL, *tmp_buf=NULL;
+       u8 hw_hdr_offset, subtype ;
+       struct sta_info         *psta = NULL;
+       struct xmit_priv        *pxmitpriv = &padapter->xmitpriv;
+       struct pkt_attrib       *pattrib = &pxmitframe->attrib;
+       u8 *pbuf_start;
+       s32 bmcst = IS_MCAST(pattrib->ra);
+       s32 res = _FAIL;
+       u8 *BIP_AAD=NULL;
+       u8 *MGMT_body=NULL;
+
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
+       struct rtw_ieee80211_hdr        *pwlanhdr;
+       u8 MME[_MME_IE_LENGTH_];
+
+       _irqL irqL;
+       u32     ori_len;
+       mem_start = pframe = (u8 *)(pxmitframe->buf_addr) + TXDESC_OFFSET;
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+
+_func_enter_;
+       ori_len = BIP_AAD_SIZE+pattrib->pktlen;
+       tmp_buf = BIP_AAD = rtw_zmalloc(ori_len);
+       subtype = GetFrameSubType(pframe); //bit(7)~bit(2)
+
+       if(BIP_AAD == NULL)
+               return _FAIL;
+
+       _enter_critical_bh(&padapter->security_key_mutex, &irqL);
+
+       //only support station mode
+       if(!check_fwstate(pmlmepriv, WIFI_STATION_STATE) || !check_fwstate(pmlmepriv, _FW_LINKED))
+               goto xmitframe_coalesce_success;
+
+       //IGTK key is not install, it may not support 802.11w
+       if(padapter->securitypriv.binstallBIPkey != _TRUE)
+       {
+               DBG_871X("no instll BIP key\n");
+               goto xmitframe_coalesce_success;
+       }
+       //station mode doesn't need TX BIP, just ready the code
+       if(bmcst)
+       {
+               int frame_body_len;
+               u8 mic[16];
+
+               _rtw_memset(MME, 0, 18);
+
+               //other types doesn't need the BIP
+               if(GetFrameSubType(pframe) != WIFI_DEAUTH && GetFrameSubType(pframe) != WIFI_DISASSOC)
+                       goto xmitframe_coalesce_fail;
+
+               MGMT_body = pframe + sizeof(struct rtw_ieee80211_hdr_3addr);
+               pframe += pattrib->pktlen;
+
+               //octent 0 and 1 is key index ,BIP keyid is 4 or 5, LSB only need octent 0
+               MME[0]=padapter->securitypriv.dot11wBIPKeyid;
+               //copy packet number
+               _rtw_memcpy(&MME[2], &pmlmeext->mgnt_80211w_IPN, 6);
+               //increase the packet number
+               pmlmeext->mgnt_80211w_IPN++;
+
+               //add MME IE with MIC all zero, MME string doesn't include element id and length
+               pframe = rtw_set_ie(pframe, _MME_IE_ , 16 , MME, &(pattrib->pktlen));
+               pattrib->last_txcmdsz = pattrib->pktlen;
+               // total frame length - header length
+               frame_body_len = pattrib->pktlen - sizeof(struct rtw_ieee80211_hdr_3addr);
+
+               //conscruct AAD, copy frame control field
+               _rtw_memcpy(BIP_AAD, &pwlanhdr->frame_ctl, 2);
+               ClearRetry(BIP_AAD);
+               ClearPwrMgt(BIP_AAD);
+               ClearMData(BIP_AAD);
+               //conscruct AAD, copy address 1 to address 3
+               _rtw_memcpy(BIP_AAD+2, pwlanhdr->addr1, 18);
+               //copy management fram body
+               _rtw_memcpy(BIP_AAD+BIP_AAD_SIZE, MGMT_body, frame_body_len);
+               /*//dump total packet include MME with zero MIC
+               {
+                       int i;
+                       printk("Total packet: ");
+                       for(i=0; i < BIP_AAD_SIZE+frame_body_len; i++)
+                               printk(" %02x ", BIP_AAD[i]);
+                       printk("\n");
+               }*/
+               //calculate mic
+               if(omac1_aes_128(padapter->securitypriv.dot11wBIPKey[padapter->securitypriv.dot11wBIPKeyid].skey
+                       , BIP_AAD, BIP_AAD_SIZE+frame_body_len, mic))
+                       goto xmitframe_coalesce_fail;
+
+               /*//dump calculated mic result
+               {
+                       int i;
+                       printk("Calculated mic result: ");
+                       for(i=0; i<16; i++)
+                               printk(" %02x ", mic[i]);
+                       printk("\n");
+               }*/
+               //copy right BIP mic value, total is 128bits, we use the 0~63 bits
+               _rtw_memcpy(pframe-8, mic, 8);
+               /*/dump all packet after mic ok
+               {
+                       int pp;
+                       printk("pattrib->pktlen = %d \n", pattrib->pktlen);
+                       for(pp=0;pp< pattrib->pktlen; pp++)
+                               printk(" %02x ", mem_start[pp]);
+                       printk("\n");
+               }*/
+       }
+       else //unicast mgmt frame TX
+       {
+               //start to encrypt mgmt frame
+               if(subtype == WIFI_DEAUTH || subtype == WIFI_DISASSOC ||
+                       subtype == WIFI_REASSOCREQ || subtype == WIFI_ACTION)
+               {
+                       if (pattrib->psta)
+                               psta = pattrib->psta;
+                       else
+                       {
+                               psta = rtw_get_stainfo(&padapter->stapriv, pattrib->ra);
+                       }
+
+                       if(psta==NULL)
+                       {
+
+                               DBG_871X("%s, psta==NUL\n", __func__);
+                               goto xmitframe_coalesce_fail;
+                       }
+
+                       if(!(psta->state & _FW_LINKED) || pxmitframe->buf_addr==NULL)
+                       {
+                               DBG_871X("%s, not _FW_LINKED or addr null\n", __func__);
+                               goto xmitframe_coalesce_fail;
+                       }
+
+                       //DBG_871X("%s, action frame category=%d \n", __func__, pframe[WLAN_HDR_A3_LEN]);
+                       //according 802.11-2012 standard, these five types are not robust types
+                       if(subtype == WIFI_ACTION &&
+                       (pframe[WLAN_HDR_A3_LEN] == RTW_WLAN_CATEGORY_PUBLIC ||
+                       pframe[WLAN_HDR_A3_LEN] == RTW_WLAN_CATEGORY_HT ||
+                       pframe[WLAN_HDR_A3_LEN] == RTW_WLAN_CATEGORY_UNPROTECTED_WNM ||
+                       pframe[WLAN_HDR_A3_LEN] == RTW_WLAN_CATEGORY_SELF_PROTECTED  ||
+                       pframe[WLAN_HDR_A3_LEN] == RTW_WLAN_CATEGORY_P2P))
+                               goto xmitframe_coalesce_fail;
+                       //before encrypt dump the management packet content
+                       /*{
+                               int i;
+                               printk("Management pkt: ");
+                               for(i=0; i<pattrib->pktlen; i++)
+                               printk(" %02x ", pframe[i]);
+                               printk("=======\n");
+                       }*/
+                       if(pattrib->encrypt>0)
+                               _rtw_memcpy(pattrib->dot118021x_UncstKey.skey, psta->dot118021x_UncstKey.skey, 16);
+                       //bakeup original management packet
+                       _rtw_memcpy(tmp_buf, pframe, pattrib->pktlen);
+                       //move to data portion
+                       pframe += pattrib->hdrlen;
+
+                       //802.11w unicast management packet must be _AES_
+                       pattrib->iv_len = 8;
+                       //it's MIC of AES
+                       pattrib->icv_len = 8;
+
+                       switch(pattrib->encrypt)
+                       {
+                               case _AES_:
+                                               //set AES IV header
+                                               AES_IV(pattrib->iv, psta->dot11wtxpn, 0);
+                                       break;
+                               default:
+                                       goto xmitframe_coalesce_fail;
+                       }
+                       //insert iv header into management frame
+                       _rtw_memcpy(pframe, pattrib->iv, pattrib->iv_len);
+                       pframe += pattrib->iv_len;
+                       //copy mgmt data portion after CCMP header
+                       _rtw_memcpy(pframe, tmp_buf+pattrib->hdrlen, pattrib->pktlen-pattrib->hdrlen);
+                       //move pframe to end of mgmt pkt
+                       pframe += pattrib->pktlen-pattrib->hdrlen;
+                       //add 8 bytes CCMP IV header to length
+                       pattrib->pktlen += pattrib->iv_len;
+                       /*//dump management packet include AES IV header
+                       {
+                               int i;
+                               printk("Management pkt + IV: ");
+                               //for(i=0; i<pattrib->pktlen; i++)
+                               //printk(" %02x ", mem_start[i]);
+                               printk("@@@@@@@@@@@@@\n");
+                       }*/
+
+                       if ((pattrib->icv_len >0 )&& (pattrib->bswenc)) {
+                               _rtw_memcpy(pframe, pattrib->icv, pattrib->icv_len);
+                               pframe += pattrib->icv_len;
+                       }
+                       //add 8 bytes MIC
+                       pattrib->pktlen += pattrib->icv_len;
+                       //set final tx command size
+                       pattrib->last_txcmdsz = pattrib->pktlen;
+
+                       //set protected bit must be beofre SW encrypt
+                       SetPrivacy(mem_start);
+                       /*//dump management packet include AES header
+                       {
+                               int i;
+                               printk("prepare to enc Management pkt + IV: ");
+                               for(i=0; i<pattrib->pktlen; i++)
+                               printk(" %02x ", mem_start[i]);
+                               printk("@@@@@@@@@@@@@\n");
+                       }*/
+                       //software encrypt
+                       xmitframe_swencrypt(padapter, pxmitframe);
+               }
+       }
+
+xmitframe_coalesce_success:
+       _exit_critical_bh(&padapter->security_key_mutex, &irqL);
+       rtw_mfree(BIP_AAD, ori_len);
+_func_exit_;
+       return _SUCCESS;
+
+xmitframe_coalesce_fail:
+       _exit_critical_bh(&padapter->security_key_mutex, &irqL);
+       rtw_mfree(BIP_AAD, ori_len);
+_func_exit_;
+
+       return _FAIL;
+}
+#endif //CONFIG_IEEE80211W
+
+/* Logical Link Control(LLC) SubNetwork Attachment Point(SNAP) header
+ * IEEE LLC/SNAP header contains 8 octets
+ * First 3 octets comprise the LLC portion
+ * SNAP portion, 5 octets, is divided into two fields:
+ *     Organizationally Unique Identifier(OUI), 3 octets,
+ *     type, defined by that organization, 2 octets.
+ */
+s32 rtw_put_snap(u8 *data, u16 h_proto)
+{
+       struct ieee80211_snap_hdr *snap;
+       u8 *oui;
+
+_func_enter_;
+
+       snap = (struct ieee80211_snap_hdr *)data;
+       snap->dsap = 0xaa;
+       snap->ssap = 0xaa;
+       snap->ctrl = 0x03;
+
+       if (h_proto == 0x8137 || h_proto == 0x80f3)
+               oui = P802_1H_OUI;
+       else
+               oui = RFC1042_OUI;
+
+       snap->oui[0] = oui[0];
+       snap->oui[1] = oui[1];
+       snap->oui[2] = oui[2];
+
+       *(u16 *)(data + SNAP_SIZE) = htons(h_proto);
+
+_func_exit_;
+
+       return SNAP_SIZE + sizeof(u16);
+}
+
+void rtw_update_protection(_adapter *padapter, u8 *ie, uint ie_len)
+{
+
+       uint    protection;
+       u8      *perp;
+       sint     erp_len;
+       struct  xmit_priv *pxmitpriv = &padapter->xmitpriv;
+       struct  registry_priv *pregistrypriv = &padapter->registrypriv;
+
+_func_enter_;
+
+       switch(pxmitpriv->vcs_setting)
+       {
+               case DISABLE_VCS:
+                       pxmitpriv->vcs = NONE_VCS;
+                       break;
+
+               case ENABLE_VCS:
+                       break;
+
+               case AUTO_VCS:
+               default:
+                       perp = rtw_get_ie(ie, _ERPINFO_IE_, &erp_len, ie_len);
+                       if(perp == NULL)
+                       {
+                               pxmitpriv->vcs = NONE_VCS;
+                       }
+                       else
+                       {
+                               protection = (*(perp + 2)) & BIT(1);
+                               if (protection)
+                               {
+                                       if(pregistrypriv->vcs_type == RTS_CTS)
+                                               pxmitpriv->vcs = RTS_CTS;
+                                       else
+                                               pxmitpriv->vcs = CTS_TO_SELF;
+                               }
+                               else
+                                       pxmitpriv->vcs = NONE_VCS;
+                       }
+
+                       break;
+
+       }
+
+_func_exit_;
+
+}
+
+void rtw_count_tx_stats(_adapter *padapter, struct xmit_frame *pxmitframe, int sz)
+{
+       struct sta_info *psta = NULL;
+       struct stainfo_stats *pstats = NULL;
+       struct xmit_priv        *pxmitpriv = &padapter->xmitpriv;
+       struct mlme_priv        *pmlmepriv = &(padapter->mlmepriv);
+
+       if((pxmitframe->frame_tag&0x0f) == DATA_FRAMETAG)
+       {
+               pxmitpriv->tx_bytes += sz;
+#ifdef CONFIG_USB_TX_AGGREGATION
+               pmlmepriv->LinkDetectInfo.NumTxOkInPeriod += pxmitframe->agg_num;
+#else
+               pmlmepriv->LinkDetectInfo.NumTxOkInPeriod++;
+#endif
+
+               psta = pxmitframe->attrib.psta;
+
+               if(psta)
+               {
+                       pstats = &psta->sta_stats;
+#ifdef CONFIG_USB_TX_AGGREGATION
+                       pstats->tx_pkts += pxmitframe->agg_num;
+#else
+                       pstats->tx_pkts++;
+#endif
+                       pstats->tx_bytes += sz;
+               }
+       }
+
+}
+
+struct xmit_buf *rtw_alloc_xmitbuf_ext(struct xmit_priv *pxmitpriv)
+{
+       _irqL irqL;
+       struct xmit_buf *pxmitbuf =  NULL;
+       _list *plist, *phead;
+       _queue *pfree_queue = &pxmitpriv->free_xmit_extbuf_queue;
+
+_func_enter_;
+
+       _enter_critical(&pfree_queue->lock, &irqL);
+
+       if(_rtw_queue_empty(pfree_queue) == _TRUE) {
+               pxmitbuf = NULL;
+       } else {
+
+               phead = get_list_head(pfree_queue);
+
+               plist = get_next(phead);
+
+               pxmitbuf = LIST_CONTAINOR(plist, struct xmit_buf, list);
+
+               rtw_list_delete(&(pxmitbuf->list));
+       }
+
+       if (pxmitbuf !=  NULL)
+       {
+               pxmitpriv->free_xmit_extbuf_cnt--;
+               #ifdef DBG_XMIT_BUF
+               DBG_871X("DBG_XMIT_BUF ALLOC no=%d,  free_xmit_extbuf_cnt=%d\n",pxmitbuf->no, pxmitpriv->free_xmit_extbuf_cnt);
+               #endif
+
+
+               pxmitbuf->priv_data = NULL;
+
+#ifdef CONFIG_SDIO_HCI
+               pxmitbuf->len = 0;
+               pxmitbuf->pdata = pxmitbuf->ptail = pxmitbuf->phead;
+#endif
+#ifdef CONFIG_PCI_HCI
+               pxmitbuf->len = 0;
+#endif
+
+               if (pxmitbuf->sctx) {
+                       DBG_871X("%s pxmitbuf->sctx is not NULL\n", __func__);
+                       rtw_sctx_done_err(&pxmitbuf->sctx, RTW_SCTX_DONE_BUF_ALLOC);
+               }
+
+       }
+
+       _exit_critical(&pfree_queue->lock, &irqL);
+
+_func_exit_;
+
+       return pxmitbuf;
+}
+
+s32 rtw_free_xmitbuf_ext(struct xmit_priv *pxmitpriv, struct xmit_buf *pxmitbuf)
+{
+       _irqL irqL;
+       _queue *pfree_queue = &pxmitpriv->free_xmit_extbuf_queue;
+
+_func_enter_;
+
+       if(pxmitbuf==NULL)
+       {
+               return _FAIL;
+       }
+
+       _enter_critical(&pfree_queue->lock, &irqL);
+
+       rtw_list_delete(&pxmitbuf->list);
+
+       rtw_list_insert_tail(&(pxmitbuf->list), get_list_head(pfree_queue));
+       pxmitpriv->free_xmit_extbuf_cnt++;
+       #ifdef DBG_XMIT_BUF
+       DBG_871X("DBG_XMIT_BUF FREE no=%d, free_xmit_extbuf_cnt=%d\n",pxmitbuf->no ,pxmitpriv->free_xmit_extbuf_cnt);
+       #endif
+
+       _exit_critical(&pfree_queue->lock, &irqL);
+
+_func_exit_;
+
+       return _SUCCESS;
+}
+
+struct xmit_buf *rtw_alloc_xmitbuf(struct xmit_priv *pxmitpriv)
+{
+       _irqL irqL;
+       struct xmit_buf *pxmitbuf =  NULL;
+       _list *plist, *phead;
+       _queue *pfree_xmitbuf_queue = &pxmitpriv->free_xmitbuf_queue;
+
+_func_enter_;
+
+       //DBG_871X("+rtw_alloc_xmitbuf\n");
+
+       _enter_critical(&pfree_xmitbuf_queue->lock, &irqL);
+
+       if(_rtw_queue_empty(pfree_xmitbuf_queue) == _TRUE) {
+               pxmitbuf = NULL;
+       } else {
+
+               phead = get_list_head(pfree_xmitbuf_queue);
+
+               plist = get_next(phead);
+
+               pxmitbuf = LIST_CONTAINOR(plist, struct xmit_buf, list);
+
+               rtw_list_delete(&(pxmitbuf->list));
+       }
+
+       if (pxmitbuf !=  NULL)
+       {
+               pxmitpriv->free_xmitbuf_cnt--;
+               #ifdef DBG_XMIT_BUF
+               DBG_871X("DBG_XMIT_BUF ALLOC no=%d,  free_xmitbuf_cnt=%d\n",pxmitbuf->no, pxmitpriv->free_xmitbuf_cnt);
+               #endif
+               //DBG_871X("alloc, free_xmitbuf_cnt=%d\n", pxmitpriv->free_xmitbuf_cnt);
+
+               pxmitbuf->priv_data = NULL;
+
+#ifdef CONFIG_SDIO_HCI
+               pxmitbuf->len = 0;
+               pxmitbuf->pdata = pxmitbuf->ptail = pxmitbuf->phead;
+#endif
+#ifdef CONFIG_PCI_HCI
+               pxmitbuf->len = 0;
+#endif
+
+               if (pxmitbuf->sctx) {
+                       DBG_871X("%s pxmitbuf->sctx is not NULL\n", __func__);
+                       rtw_sctx_done_err(&pxmitbuf->sctx, RTW_SCTX_DONE_BUF_ALLOC);
+               }
+       }
+       #ifdef DBG_XMIT_BUF
+       else
+       {
+               DBG_871X("DBG_XMIT_BUF rtw_alloc_xmitbuf return NULL\n");
+       }
+       #endif
+
+       _exit_critical(&pfree_xmitbuf_queue->lock, &irqL);
+
+_func_exit_;
+
+       return pxmitbuf;
+}
+
+s32 rtw_free_xmitbuf(struct xmit_priv *pxmitpriv, struct xmit_buf *pxmitbuf)
+{
+       _irqL irqL;
+       _queue *pfree_xmitbuf_queue = &pxmitpriv->free_xmitbuf_queue;
+
+_func_enter_;
+
+       //DBG_871X("+rtw_free_xmitbuf\n");
+
+       if(pxmitbuf==NULL)
+       {
+               return _FAIL;
+       }
+
+       if (pxmitbuf->sctx) {
+               DBG_871X("%s pxmitbuf->sctx is not NULL\n", __func__);
+               rtw_sctx_done_err(&pxmitbuf->sctx, RTW_SCTX_DONE_BUF_FREE);
+       }
+
+       if(pxmitbuf->ext_tag)
+       {
+               rtw_free_xmitbuf_ext(pxmitpriv, pxmitbuf);
+       }
+       else
+       {
+               _enter_critical(&pfree_xmitbuf_queue->lock, &irqL);
+
+               rtw_list_delete(&pxmitbuf->list);
+
+               rtw_list_insert_tail(&(pxmitbuf->list), get_list_head(pfree_xmitbuf_queue));
+
+               pxmitpriv->free_xmitbuf_cnt++;
+               //DBG_871X("FREE, free_xmitbuf_cnt=%d\n", pxmitpriv->free_xmitbuf_cnt);
+               #ifdef DBG_XMIT_BUF
+               DBG_871X("DBG_XMIT_BUF FREE no=%d, free_xmitbuf_cnt=%d\n",pxmitbuf->no ,pxmitpriv->free_xmitbuf_cnt);
+               #endif
+               _exit_critical(&pfree_xmitbuf_queue->lock, &irqL);
+       }
+
+_func_exit_;
+
+       return _SUCCESS;
+}
+
+void rtw_init_xmitframe(struct xmit_frame *pxframe)
+{
+       if (pxframe !=  NULL)//default value setting
+       {
+               pxframe->buf_addr = NULL;
+               pxframe->pxmitbuf = NULL;
+
+               _rtw_memset(&pxframe->attrib, 0, sizeof(struct pkt_attrib));
+               //pxframe->attrib.psta = NULL;
+
+               pxframe->frame_tag = DATA_FRAMETAG;
+
+#ifdef CONFIG_USB_HCI
+               pxframe->pkt = NULL;
+               pxframe->pkt_offset = 1;//default use pkt_offset to fill tx desc
+
+#ifdef CONFIG_USB_TX_AGGREGATION
+               pxframe->agg_num = 1;
+#endif
+
+#endif //#ifdef CONFIG_USB_HCI
+
+#if defined(CONFIG_SDIO_HCI) || defined(CONFIG_GSPI_HCI)
+               pxframe->pg_num = 1;
+               pxframe->agg_num = 1;
+#endif
+
+#ifdef CONFIG_XMIT_ACK
+               pxframe->ack_report = 0;
+#endif
+
+       }
+}
+
+/*
+Calling context:
+1. OS_TXENTRY
+2. RXENTRY (rx_thread or RX_ISR/RX_CallBack)
+
+If we turn on USE_RXTHREAD, then, no need for critical section.
+Otherwise, we must use _enter/_exit critical to protect free_xmit_queue...
+
+Must be very very cautious...
+
+*/
+struct xmit_frame *rtw_alloc_xmitframe(struct xmit_priv *pxmitpriv)//(_queue *pfree_xmit_queue)
+{
+       /*
+               Please remember to use all the osdep_service api,
+               and lock/unlock or _enter/_exit critical to protect
+               pfree_xmit_queue
+       */
+
+       _irqL irqL;
+       struct xmit_frame *pxframe = NULL;
+       _list *plist, *phead;
+       _queue *pfree_xmit_queue = &pxmitpriv->free_xmit_queue;
+#ifdef PLATFORM_LINUX
+       _adapter *padapter = pxmitpriv->adapter;
+#endif //PLATFORM_LINUX
+
+_func_enter_;
+
+       _enter_critical_bh(&pfree_xmit_queue->lock, &irqL);
+
+       if (_rtw_queue_empty(pfree_xmit_queue) == _TRUE) {
+               RT_TRACE(_module_rtl871x_xmit_c_,_drv_info_,("rtw_alloc_xmitframe:%d\n", pxmitpriv->free_xmitframe_cnt));
+               pxframe =  NULL;
+       } else {
+               phead = get_list_head(pfree_xmit_queue);
+
+               plist = get_next(phead);
+
+               pxframe = LIST_CONTAINOR(plist, struct xmit_frame, list);
+
+               rtw_list_delete(&(pxframe->list));
+               pxmitpriv->free_xmitframe_cnt--;
+               RT_TRACE(_module_rtl871x_xmit_c_, _drv_info_, ("rtw_alloc_xmitframe():free_xmitframe_cnt=%d\n", pxmitpriv->free_xmitframe_cnt));
+       }
+
+#ifdef PLATFORM_LINUX
+#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,35))
+               if(pxmitpriv->free_xmitframe_cnt==1)
+               {
+                       if (!rtw_netif_queue_stopped(padapter->pnetdev))
+                               rtw_netif_stop_queue(padapter->pnetdev);
+               }
+#endif
+#endif
+
+       _exit_critical_bh(&pfree_xmit_queue->lock, &irqL);
+
+       rtw_init_xmitframe(pxframe);
+
+_func_exit_;
+
+       return pxframe;
+}
+
+struct xmit_frame *rtw_alloc_xmitframe_ext(struct xmit_priv *pxmitpriv)
+{
+       _irqL irqL;
+       struct xmit_frame *pxframe = NULL;
+       _list *plist, *phead;
+       _queue *queue = &pxmitpriv->free_xframe_ext_queue;
+
+_func_enter_;
+
+       _enter_critical_bh(&queue->lock, &irqL);
+
+       if (_rtw_queue_empty(queue) == _TRUE) {
+               RT_TRACE(_module_rtl871x_xmit_c_,_drv_info_,("rtw_alloc_xmitframe_ext:%d\n", pxmitpriv->free_xframe_ext_cnt));
+               pxframe =  NULL;
+       } else {
+               phead = get_list_head(queue);
+               plist = get_next(phead);
+               pxframe = LIST_CONTAINOR(plist, struct xmit_frame, list);
+
+               rtw_list_delete(&(pxframe->list));
+               pxmitpriv->free_xframe_ext_cnt--;
+               RT_TRACE(_module_rtl871x_xmit_c_, _drv_info_, ("rtw_alloc_xmitframe_ext():free_xmitframe_cnt=%d\n", pxmitpriv->free_xframe_ext_cnt));
+       }
+
+       _exit_critical_bh(&queue->lock, &irqL);
+
+       rtw_init_xmitframe(pxframe);
+
+_func_exit_;
+
+       return pxframe;
+}
+
+struct xmit_frame *rtw_alloc_xmitframe_once(struct xmit_priv *pxmitpriv)
+{
+       struct xmit_frame *pxframe = NULL;
+       u8 *alloc_addr;
+
+       alloc_addr = rtw_zmalloc(sizeof(struct xmit_frame) + 4);
+
+       if (alloc_addr == NULL)
+               goto exit;
+
+       pxframe = (struct xmit_frame *)N_BYTE_ALIGMENT((SIZE_PTR)(alloc_addr), 4);
+       pxframe->alloc_addr = alloc_addr;
+
+       pxframe->padapter = pxmitpriv->adapter;
+       pxframe->frame_tag = NULL_FRAMETAG;
+
+       pxframe->pkt = NULL;
+
+       pxframe->buf_addr = NULL;
+       pxframe->pxmitbuf = NULL;
+
+       rtw_init_xmitframe(pxframe);
+
+       DBG_871X("################## %s ##################\n", __func__);
+
+exit:
+       return pxframe;
+}
+
+s32 rtw_free_xmitframe(struct xmit_priv *pxmitpriv, struct xmit_frame *pxmitframe)
+{
+       _irqL irqL;
+       _queue *queue;
+       _adapter *padapter = pxmitpriv->adapter;
+       _pkt *pndis_pkt = NULL;
+
+_func_enter_;
+
+       if (pxmitframe == NULL) {
+               RT_TRACE(_module_rtl871x_xmit_c_, _drv_err_, ("======rtw_free_xmitframe():pxmitframe==NULL!!!!!!!!!!\n"));
+               goto exit;
+       }
+
+       if (pxmitframe->pkt){
+               pndis_pkt = pxmitframe->pkt;
+               pxmitframe->pkt = NULL;
+       }
+
+       if (pxmitframe->alloc_addr) {
+               DBG_871X("################## %s with alloc_addr ##################\n", __func__);
+               rtw_mfree(pxmitframe->alloc_addr, sizeof(struct xmit_frame) + 4);
+               goto check_pkt_complete;
+       }
+
+       if (pxmitframe->ext_tag == 0)
+               queue = &pxmitpriv->free_xmit_queue;
+       else if(pxmitframe->ext_tag == 1)
+               queue = &pxmitpriv->free_xframe_ext_queue;
+       else
+       {}
+
+       _enter_critical_bh(&queue->lock, &irqL);
+
+       rtw_list_delete(&pxmitframe->list);
+       rtw_list_insert_tail(&pxmitframe->list, get_list_head(queue));
+       if (pxmitframe->ext_tag == 0) {
+               pxmitpriv->free_xmitframe_cnt++;
+               RT_TRACE(_module_rtl871x_xmit_c_, _drv_debug_, ("rtw_free_xmitframe():free_xmitframe_cnt=%d\n", pxmitpriv->free_xmitframe_cnt));
+       } else if(pxmitframe->ext_tag == 1) {
+               pxmitpriv->free_xframe_ext_cnt++;
+               RT_TRACE(_module_rtl871x_xmit_c_, _drv_debug_, ("rtw_free_xmitframe():free_xframe_ext_cnt=%d\n", pxmitpriv->free_xframe_ext_cnt));
+       } else {
+       }
+
+       _exit_critical_bh(&queue->lock, &irqL);
+
+check_pkt_complete:
+
+       if(pndis_pkt)
+               rtw_os_pkt_complete(padapter, pndis_pkt);
+
+exit:
+
+_func_exit_;
+
+       return _SUCCESS;
+}
+
+void rtw_free_xmitframe_queue(struct xmit_priv *pxmitpriv, _queue *pframequeue)
+{
+       _irqL irqL;
+       _list   *plist, *phead;
+       struct  xmit_frame      *pxmitframe;
+
+_func_enter_;
+
+       _enter_critical_bh(&(pframequeue->lock), &irqL);
+
+       phead = get_list_head(pframequeue);
+       plist = get_next(phead);
+
+       while (rtw_end_of_queue_search(phead, plist) == _FALSE)
+       {
+
+               pxmitframe = LIST_CONTAINOR(plist, struct xmit_frame, list);
+
+               plist = get_next(plist);
+
+               rtw_free_xmitframe(pxmitpriv,pxmitframe);
+
+       }
+       _exit_critical_bh(&(pframequeue->lock), &irqL);
+
+_func_exit_;
+}
+
+s32 rtw_xmitframe_enqueue(_adapter *padapter, struct xmit_frame *pxmitframe)
+{
+       if (rtw_xmit_classifier(padapter, pxmitframe) == _FAIL)
+       {
+               RT_TRACE(_module_rtl871x_xmit_c_, _drv_err_,
+                        ("rtw_xmitframe_enqueue: drop xmit pkt for classifier fail\n"));
+//             pxmitframe->pkt = NULL;
+               return _FAIL;
+       }
+
+       return _SUCCESS;
+}
+
+static struct xmit_frame *dequeue_one_xmitframe(struct xmit_priv *pxmitpriv, struct hw_xmit *phwxmit, struct tx_servq *ptxservq, _queue *pframe_queue)
+{
+       _list   *xmitframe_plist, *xmitframe_phead;
+       struct  xmit_frame      *pxmitframe=NULL;
+
+       xmitframe_phead = get_list_head(pframe_queue);
+       xmitframe_plist = get_next(xmitframe_phead);
+
+       while ((rtw_end_of_queue_search(xmitframe_phead, xmitframe_plist)) == _FALSE)
+       {
+               pxmitframe = LIST_CONTAINOR(xmitframe_plist, struct xmit_frame, list);
+
+               xmitframe_plist = get_next(xmitframe_plist);
+
+/*#ifdef RTK_DMP_PLATFORM
+#ifdef CONFIG_USB_TX_AGGREGATION
+               if((ptxservq->qcnt>0) && (ptxservq->qcnt<=2))
+               {
+                       pxmitframe = NULL;
+
+                       tasklet_schedule(&pxmitpriv->xmit_tasklet);
+
+                       break;
+               }
+#endif
+#endif*/
+               rtw_list_delete(&pxmitframe->list);
+
+               ptxservq->qcnt--;
+
+                       break;
+
+               pxmitframe = NULL;
+
+       }
+
+       return pxmitframe;
+}
+
+struct xmit_frame* rtw_dequeue_xframe(struct xmit_priv *pxmitpriv, struct hw_xmit *phwxmit_i, sint entry)
+{
+       _irqL irqL0;
+       _list *sta_plist, *sta_phead;
+       struct hw_xmit *phwxmit;
+       struct tx_servq *ptxservq = NULL;
+       _queue *pframe_queue = NULL;
+       struct xmit_frame *pxmitframe = NULL;
+       _adapter *padapter = pxmitpriv->adapter;
+       struct registry_priv    *pregpriv = &padapter->registrypriv;
+       int i, inx[4];
+#ifdef CONFIG_USB_HCI
+//     int j, tmp, acirp_cnt[4];
+#endif
+
+_func_enter_;
+
+       inx[0] = 0; inx[1] = 1; inx[2] = 2; inx[3] = 3;
+
+       if(pregpriv->wifi_spec==1)
+       {
+               int j, tmp, acirp_cnt[4];
+#if 0
+               if(flags<XMIT_QUEUE_ENTRY)
+               {
+                       //priority exchange according to the completed xmitbuf flags.
+                       inx[flags] = 0;
+                       inx[0] = flags;
+               }
+#endif
+
+#ifdef CONFIG_USB_HCI
+               //entry indx: 0->vo, 1->vi, 2->be, 3->bk.
+               acirp_cnt[0] = pxmitpriv->voq_cnt;
+               acirp_cnt[1] = pxmitpriv->viq_cnt;
+               acirp_cnt[2] = pxmitpriv->beq_cnt;
+               acirp_cnt[3] = pxmitpriv->bkq_cnt;
+
+               for(i=0; i<4; i++)
+               {
+                       for(j=i+1; j<4; j++)
+                       {
+                               if(acirp_cnt[j]<acirp_cnt[i])
+                               {
+                                       tmp = acirp_cnt[i];
+                                       acirp_cnt[i] = acirp_cnt[j];
+                                       acirp_cnt[j] = tmp;
+
+                                       tmp = inx[i];
+                                       inx[i] = inx[j];
+                                       inx[j] = tmp;
+                               }
+                       }
+               }
+#endif
+       }
+
+       _enter_critical_bh(&pxmitpriv->lock, &irqL0);
+
+       for(i = 0; i < entry; i++)
+       {
+               phwxmit = phwxmit_i + inx[i];
+
+               //_enter_critical_ex(&phwxmit->sta_queue->lock, &irqL0);
+
+               sta_phead = get_list_head(phwxmit->sta_queue);
+               sta_plist = get_next(sta_phead);
+
+               while ((rtw_end_of_queue_search(sta_phead, sta_plist)) == _FALSE)
+               {
+
+                       ptxservq= LIST_CONTAINOR(sta_plist, struct tx_servq, tx_pending);
+
+                       pframe_queue = &ptxservq->sta_pending;
+
+                       pxmitframe = dequeue_one_xmitframe(pxmitpriv, phwxmit, ptxservq, pframe_queue);
+
+                       if(pxmitframe)
+                       {
+                               phwxmit->accnt--;
+
+                               //Remove sta node when there is no pending packets.
+                               if(_rtw_queue_empty(pframe_queue)) //must be done after get_next and before break
+                                       rtw_list_delete(&ptxservq->tx_pending);
+
+                               //_exit_critical_ex(&phwxmit->sta_queue->lock, &irqL0);
+
+                               goto exit;
+                       }
+
+                       sta_plist = get_next(sta_plist);
+
+               }
+
+               //_exit_critical_ex(&phwxmit->sta_queue->lock, &irqL0);
+
+       }
+
+exit:
+
+       _exit_critical_bh(&pxmitpriv->lock, &irqL0);
+
+_func_exit_;
+
+       return pxmitframe;
+}
+
+#if 1
+struct tx_servq *rtw_get_sta_pending(_adapter *padapter, struct sta_info *psta, sint up, u8 *ac)
+{
+       struct tx_servq *ptxservq=NULL;
+
+_func_enter_;
+
+       switch (up)
+       {
+               case 1:
+               case 2:
+                       ptxservq = &(psta->sta_xmitpriv.bk_q);
+                       *(ac) = 3;
+                       RT_TRACE(_module_rtl871x_xmit_c_,_drv_info_,("rtw_get_sta_pending : BK \n"));
+                       break;
+
+               case 4:
+               case 5:
+                       ptxservq = &(psta->sta_xmitpriv.vi_q);
+                       *(ac) = 1;
+                       RT_TRACE(_module_rtl871x_xmit_c_,_drv_info_,("rtw_get_sta_pending : VI\n"));
+                       break;
+
+               case 6:
+               case 7:
+                       ptxservq = &(psta->sta_xmitpriv.vo_q);
+                       *(ac) = 0;
+                       RT_TRACE(_module_rtl871x_xmit_c_,_drv_info_,("rtw_get_sta_pending : VO \n"));
+                       break;
+
+               case 0:
+               case 3:
+               default:
+                       ptxservq = &(psta->sta_xmitpriv.be_q);
+                       *(ac) = 2;
+                       RT_TRACE(_module_rtl871x_xmit_c_,_drv_info_,("rtw_get_sta_pending : BE \n"));
+               break;
+
+       }
+
+_func_exit_;
+
+       return ptxservq;
+}
+#else
+__inline static struct tx_servq *rtw_get_sta_pending
+       (_adapter *padapter, _queue **ppstapending, struct sta_info *psta, sint up)
+{
+       struct tx_servq *ptxservq;
+       struct hw_xmit *phwxmits =  padapter->xmitpriv.hwxmits;
+
+_func_enter_;
+
+#ifdef CONFIG_RTL8711
+
+       if(IS_MCAST(psta->hwaddr))
+       {
+               ptxservq = &(psta->sta_xmitpriv.be_q); // we will use be_q to queue bc/mc frames in BCMC_stainfo
+               *ppstapending = &padapter->xmitpriv.bm_pending;
+       }
+       else
+#endif
+       {
+               switch (up)
+               {
+                       case 1:
+                       case 2:
+                               ptxservq = &(psta->sta_xmitpriv.bk_q);
+                               *ppstapending = &padapter->xmitpriv.bk_pending;
+                               (phwxmits+3)->accnt++;
+                               RT_TRACE(_module_rtl871x_xmit_c_,_drv_info_,("rtw_get_sta_pending : BK \n"));
+                               break;
+
+                       case 4:
+                       case 5:
+                               ptxservq = &(psta->sta_xmitpriv.vi_q);
+                               *ppstapending = &padapter->xmitpriv.vi_pending;
+                               (phwxmits+1)->accnt++;
+                               RT_TRACE(_module_rtl871x_xmit_c_,_drv_info_,("rtw_get_sta_pending : VI\n"));
+                               break;
+
+                       case 6:
+                       case 7:
+                               ptxservq = &(psta->sta_xmitpriv.vo_q);
+                               *ppstapending = &padapter->xmitpriv.vo_pending;
+                               (phwxmits+0)->accnt++;
+                               RT_TRACE(_module_rtl871x_xmit_c_,_drv_info_,("rtw_get_sta_pending : VO \n"));
+                               break;
+
+                       case 0:
+                       case 3:
+                       default:
+                               ptxservq = &(psta->sta_xmitpriv.be_q);
+                               *ppstapending = &padapter->xmitpriv.be_pending;
+                               (phwxmits+2)->accnt++;
+                               RT_TRACE(_module_rtl871x_xmit_c_,_drv_info_,("rtw_get_sta_pending : BE \n"));
+                       break;
+
+               }
+
+       }
+
+_func_exit_;
+
+       return ptxservq;
+}
+#endif
+
+/*
+ * Will enqueue pxmitframe to the proper queue,
+ * and indicate it to xx_pending list.....
+ */
+s32 rtw_xmit_classifier(_adapter *padapter, struct xmit_frame *pxmitframe)
+{
+       //_irqL irqL0;
+       u8      ac_index;
+       struct sta_info *psta;
+       struct tx_servq *ptxservq;
+       struct pkt_attrib       *pattrib = &pxmitframe->attrib;
+       struct sta_priv *pstapriv = &padapter->stapriv;
+       struct hw_xmit  *phwxmits =  padapter->xmitpriv.hwxmits;
+       sint res = _SUCCESS;
+
+_func_enter_;
+
+       if (pattrib->psta) {
+               psta = pattrib->psta;
+       } else {
+               DBG_871X("%s, call rtw_get_stainfo()\n", __func__);
+               psta = rtw_get_stainfo(pstapriv, pattrib->ra);
+       }
+
+       if (psta == NULL) {
+               res = _FAIL;
+               DBG_8192C("rtw_xmit_classifier: psta == NULL\n");
+               RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,("rtw_xmit_classifier: psta == NULL\n"));
+               goto exit;
+       }
+
+       if(!(psta->state &_FW_LINKED))
+       {
+               DBG_871X("%s, psta->state(0x%x) != _FW_LINKED\n", __func__, psta->state);
+               return _FAIL;
+       }
+
+       ptxservq = rtw_get_sta_pending(padapter, psta, pattrib->priority, (u8 *)(&ac_index));
+
+       //_enter_critical(&pstapending->lock, &irqL0);
+
+       if (rtw_is_list_empty(&ptxservq->tx_pending)) {
+               rtw_list_insert_tail(&ptxservq->tx_pending, get_list_head(phwxmits[ac_index].sta_queue));
+       }
+
+       //_enter_critical(&ptxservq->sta_pending.lock, &irqL1);
+
+       rtw_list_insert_tail(&pxmitframe->list, get_list_head(&ptxservq->sta_pending));
+       ptxservq->qcnt++;
+       phwxmits[ac_index].accnt++;
+
+       //_exit_critical(&ptxservq->sta_pending.lock, &irqL1);
+
+       //_exit_critical(&pstapending->lock, &irqL0);
+
+exit:
+
+_func_exit_;
+
+       return res;
+}
+
+void rtw_alloc_hwxmits(_adapter *padapter)
+{
+       struct hw_xmit *hwxmits;
+       struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
+
+       pxmitpriv->hwxmit_entry = HWXMIT_ENTRY;
+
+       pxmitpriv->hwxmits = (struct hw_xmit *)rtw_zmalloc(sizeof (struct hw_xmit) * pxmitpriv->hwxmit_entry);
+
+       hwxmits = pxmitpriv->hwxmits;
+
+       if(pxmitpriv->hwxmit_entry == 5)
+       {
+               //pxmitpriv->bmc_txqueue.head = 0;
+               //hwxmits[0] .phwtxqueue = &pxmitpriv->bmc_txqueue;
+               hwxmits[0] .sta_queue = &pxmitpriv->bm_pending;
+
+               //pxmitpriv->vo_txqueue.head = 0;
+               //hwxmits[1] .phwtxqueue = &pxmitpriv->vo_txqueue;
+               hwxmits[1] .sta_queue = &pxmitpriv->vo_pending;
+
+               //pxmitpriv->vi_txqueue.head = 0;
+               //hwxmits[2] .phwtxqueue = &pxmitpriv->vi_txqueue;
+               hwxmits[2] .sta_queue = &pxmitpriv->vi_pending;
+
+               //pxmitpriv->bk_txqueue.head = 0;
+               //hwxmits[3] .phwtxqueue = &pxmitpriv->bk_txqueue;
+               hwxmits[3] .sta_queue = &pxmitpriv->bk_pending;
+
+               //pxmitpriv->be_txqueue.head = 0;
+               //hwxmits[4] .phwtxqueue = &pxmitpriv->be_txqueue;
+               hwxmits[4] .sta_queue = &pxmitpriv->be_pending;
+
+       }
+       else if(pxmitpriv->hwxmit_entry == 4)
+       {
+
+               //pxmitpriv->vo_txqueue.head = 0;
+               //hwxmits[0] .phwtxqueue = &pxmitpriv->vo_txqueue;
+               hwxmits[0] .sta_queue = &pxmitpriv->vo_pending;
+
+               //pxmitpriv->vi_txqueue.head = 0;
+               //hwxmits[1] .phwtxqueue = &pxmitpriv->vi_txqueue;
+               hwxmits[1] .sta_queue = &pxmitpriv->vi_pending;
+
+               //pxmitpriv->be_txqueue.head = 0;
+               //hwxmits[2] .phwtxqueue = &pxmitpriv->be_txqueue;
+               hwxmits[2] .sta_queue = &pxmitpriv->be_pending;
+
+               //pxmitpriv->bk_txqueue.head = 0;
+               //hwxmits[3] .phwtxqueue = &pxmitpriv->bk_txqueue;
+               hwxmits[3] .sta_queue = &pxmitpriv->bk_pending;
+       }
+       else
+       {
+
+
+       }
+
+
+}
+
+void rtw_free_hwxmits(_adapter *padapter)
+{
+       struct hw_xmit *hwxmits;
+       struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
+
+       hwxmits = pxmitpriv->hwxmits;
+       if(hwxmits)
+               rtw_mfree((u8 *)hwxmits, (sizeof (struct hw_xmit) * pxmitpriv->hwxmit_entry));
+}
+
+void rtw_init_hwxmits(struct hw_xmit *phwxmit, sint entry)
+{
+       sint i;
+_func_enter_;
+       for(i = 0; i < entry; i++, phwxmit++)
+       {
+               //_rtw_spinlock_init(&phwxmit->xmit_lock);
+               //_rtw_init_listhead(&phwxmit->pending);
+               //phwxmit->txcmdcnt = 0;
+               phwxmit->accnt = 0;
+       }
+_func_exit_;
+}
+
+#ifdef CONFIG_BR_EXT
+int rtw_br_client_tx(_adapter *padapter, struct sk_buff **pskb)
+{
+       struct sk_buff *skb = *pskb;
+       struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
+       _irqL irqL;
+       //if(check_fwstate(pmlmepriv, WIFI_STATION_STATE|WIFI_ADHOC_STATE) == _TRUE)
+       {
+               void dhcp_flag_bcast(_adapter *priv, struct sk_buff *skb);
+               int res, is_vlan_tag=0, i, do_nat25=1;
+               unsigned short vlan_hdr=0;
+               void *br_port = NULL;
+
+               //mac_clone_handle_frame(priv, skb);
+
+#if (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
+               br_port = padapter->pnetdev->br_port;
+#else   // (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
+               rcu_read_lock();
+               br_port = rcu_dereference(padapter->pnetdev->rx_handler_data);
+               rcu_read_unlock();
+#endif  // (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
+               _enter_critical_bh(&padapter->br_ext_lock, &irqL);
+               if (    !(skb->data[0] & 1) &&
+                               br_port &&
+                               memcmp(skb->data+MACADDRLEN, padapter->br_mac, MACADDRLEN) &&
+                               *((unsigned short *)(skb->data+MACADDRLEN*2)) != __constant_htons(ETH_P_8021Q) &&
+                               *((unsigned short *)(skb->data+MACADDRLEN*2)) == __constant_htons(ETH_P_IP) &&
+                               !memcmp(padapter->scdb_mac, skb->data+MACADDRLEN, MACADDRLEN) && padapter->scdb_entry) {
+                       memcpy(skb->data+MACADDRLEN, GET_MY_HWADDR(padapter), MACADDRLEN);
+                       padapter->scdb_entry->ageing_timer = jiffies;
+                       _exit_critical_bh(&padapter->br_ext_lock, &irqL);
+               }
+               else
+               //if (!priv->pmib->ethBrExtInfo.nat25_disable)
+               {
+//                     if (priv->dev->br_port &&
+//                              !memcmp(skb->data+MACADDRLEN, priv->br_mac, MACADDRLEN)) {
+#if 1
+                       if (*((unsigned short *)(skb->data+MACADDRLEN*2)) == __constant_htons(ETH_P_8021Q)) {
+                               is_vlan_tag = 1;
+                               vlan_hdr = *((unsigned short *)(skb->data+MACADDRLEN*2+2));
+                               for (i=0; i<6; i++)
+                                       *((unsigned short *)(skb->data+MACADDRLEN*2+2-i*2)) = *((unsigned short *)(skb->data+MACADDRLEN*2-2-i*2));
+                               skb_pull(skb, 4);
+                       }
+                       //if SA == br_mac && skb== IP  => copy SIP to br_ip ?? why
+                       if (!memcmp(skb->data+MACADDRLEN, padapter->br_mac, MACADDRLEN) &&
+                               (*((unsigned short *)(skb->data+MACADDRLEN*2)) == __constant_htons(ETH_P_IP)))
+                               memcpy(padapter->br_ip, skb->data+WLAN_ETHHDR_LEN+12, 4);
+
+                       if (*((unsigned short *)(skb->data+MACADDRLEN*2)) == __constant_htons(ETH_P_IP)) {
+                               if (memcmp(padapter->scdb_mac, skb->data+MACADDRLEN, MACADDRLEN)) {
+                                       void *scdb_findEntry(_adapter *priv, unsigned char *macAddr, unsigned char *ipAddr);
+
+                                       if ((padapter->scdb_entry = (struct nat25_network_db_entry *)scdb_findEntry(padapter,
+                                                               skb->data+MACADDRLEN, skb->data+WLAN_ETHHDR_LEN+12)) != NULL) {
+                                               memcpy(padapter->scdb_mac, skb->data+MACADDRLEN, MACADDRLEN);
+                                               memcpy(padapter->scdb_ip, skb->data+WLAN_ETHHDR_LEN+12, 4);
+                                               padapter->scdb_entry->ageing_timer = jiffies;
+                                               do_nat25 = 0;
+                                       }
+                               }
+                               else {
+                                       if (padapter->scdb_entry) {
+                                               padapter->scdb_entry->ageing_timer = jiffies;
+                                               do_nat25 = 0;
+                                       }
+                                       else {
+                                               memset(padapter->scdb_mac, 0, MACADDRLEN);
+                                               memset(padapter->scdb_ip, 0, 4);
+                                       }
+                               }
+                       }
+                       _exit_critical_bh(&padapter->br_ext_lock, &irqL);
+#endif // 1
+                       if (do_nat25)
+                       {
+                               int nat25_db_handle(_adapter *priv, struct sk_buff *skb, int method);
+                               if (nat25_db_handle(padapter, skb, NAT25_CHECK) == 0) {
+                                       struct sk_buff *newskb;
+
+                                       if (is_vlan_tag) {
+                                               skb_push(skb, 4);
+                                               for (i=0; i<6; i++)
+                                                       *((unsigned short *)(skb->data+i*2)) = *((unsigned short *)(skb->data+4+i*2));
+                                               *((unsigned short *)(skb->data+MACADDRLEN*2)) = __constant_htons(ETH_P_8021Q);
+                                               *((unsigned short *)(skb->data+MACADDRLEN*2+2)) = vlan_hdr;
+                                       }
+
+                                       newskb = rtw_skb_copy(skb);
+                                       if (newskb == NULL) {
+                                               //priv->ext_stats.tx_drops++;
+                                               DEBUG_ERR("TX DROP: rtw_skb_copy fail!\n");
+                                               //goto stop_proc;
+                                               return -1;
+                                       }
+                                       rtw_skb_free(skb);
+
+                                       *pskb = skb = newskb;
+                                       if (is_vlan_tag) {
+                                               vlan_hdr = *((unsigned short *)(skb->data+MACADDRLEN*2+2));
+                                               for (i=0; i<6; i++)
+                                                       *((unsigned short *)(skb->data+MACADDRLEN*2+2-i*2)) = *((unsigned short *)(skb->data+MACADDRLEN*2-2-i*2));
+                                               skb_pull(skb, 4);
+                                       }
+                               }
+
+                               if (skb_is_nonlinear(skb))
+                                       DEBUG_ERR("%s(): skb_is_nonlinear!!\n", __FUNCTION__);
+
+
+#if (LINUX_VERSION_CODE < KERNEL_VERSION(2, 6, 18))
+                               res = skb_linearize(skb, GFP_ATOMIC);
+#else  // (LINUX_VERSION_CODE < KERNEL_VERSION(2, 6, 18))
+                               res = skb_linearize(skb);
+#endif // (LINUX_VERSION_CODE < KERNEL_VERSION(2, 6, 18))
+                               if (res < 0) {
+                                               DEBUG_ERR("TX DROP: skb_linearize fail!\n");
+                                               //goto free_and_stop;
+                                               return -1;
+                               }
+
+                               res = nat25_db_handle(padapter, skb, NAT25_INSERT);
+                               if (res < 0) {
+                                       if (res == -2) {
+                                               //priv->ext_stats.tx_drops++;
+                                               DEBUG_ERR("TX DROP: nat25_db_handle fail!\n");
+                                               //goto free_and_stop;
+                                               return -1;
+
+                                       }
+                                       // we just print warning message and let it go
+                                       //DEBUG_WARN("%s()-%d: nat25_db_handle INSERT Warning!\n", __FUNCTION__, __LINE__);
+                                       //return -1; // return -1 will cause system crash on 2011/08/30!
+                                       return 0;
+                               }
+                       }
+
+                       memcpy(skb->data+MACADDRLEN, GET_MY_HWADDR(padapter), MACADDRLEN);
+
+                       dhcp_flag_bcast(padapter, skb);
+
+                       if (is_vlan_tag) {
+                               skb_push(skb, 4);
+                               for (i=0; i<6; i++)
+                                       *((unsigned short *)(skb->data+i*2)) = *((unsigned short *)(skb->data+4+i*2));
+                               *((unsigned short *)(skb->data+MACADDRLEN*2)) = __constant_htons(ETH_P_8021Q);
+                               *((unsigned short *)(skb->data+MACADDRLEN*2+2)) = vlan_hdr;
+                       }
+               }
+#if 0
+               else{
+                       if (*((unsigned short *)(skb->data+MACADDRLEN*2)) == __constant_htons(ETH_P_8021Q)) {
+                               is_vlan_tag = 1;
+                       }
+
+                       if(is_vlan_tag){
+                               if(ICMPV6_MCAST_MAC(skb->data) && ICMPV6_PROTO1A_VALN(skb->data)){
+                                        memcpy(skb->data+MACADDRLEN, GET_MY_HWADDR(padapter), MACADDRLEN);
+                               }
+                       }else
+                       {
+                               if(ICMPV6_MCAST_MAC(skb->data) && ICMPV6_PROTO1A(skb->data)){
+                                        memcpy(skb->data+MACADDRLEN, GET_MY_HWADDR(padapter), MACADDRLEN);
+                               }
+                       }
+               }
+#endif // 0
+
+               // check if SA is equal to our MAC
+               if (memcmp(skb->data+MACADDRLEN, GET_MY_HWADDR(padapter), MACADDRLEN)) {
+                       //priv->ext_stats.tx_drops++;
+                       DEBUG_ERR("TX DROP: untransformed frame SA:%02X%02X%02X%02X%02X%02X!\n",
+                               skb->data[6],skb->data[7],skb->data[8],skb->data[9],skb->data[10],skb->data[11]);
+                       //goto free_and_stop;
+                       return -1;
+               }
+       }
+       return 0;
+}
+#endif // CONFIG_BR_EXT
+
+static void do_queue_select(_adapter   *padapter, struct pkt_attrib *pattrib)
+{
+       u8 qsel;
+
+       qsel = pattrib->priority;
+       RT_TRACE(_module_rtl871x_xmit_c_,_drv_info_,("### do_queue_select priority=%d ,qsel = %d\n",pattrib->priority ,qsel));
+
+#ifdef CONFIG_CONCURRENT_MODE
+//     if (check_fwstate(&padapter->mlmepriv, WIFI_AP_STATE) == _TRUE)
+//             qsel = 7;//
+#endif
+
+       pattrib->qsel = qsel;
+}
+
+/*
+ * The main transmit(tx) entry
+ *
+ * Return
+ *     1       enqueue
+ *     0       success, hardware will handle this xmit frame(packet)
+ *     <0      fail
+ */
+s32 rtw_xmit(_adapter *padapter, _pkt **ppkt)
+{
+       static u32 start = 0;
+       static u32 drop_cnt = 0;
+#ifdef CONFIG_AP_MODE
+       _irqL irqL0;
+#endif
+       struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
+       struct xmit_frame *pxmitframe = NULL;
+#ifdef CONFIG_BR_EXT
+       struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
+       void *br_port = NULL;
+#endif // CONFIG_BR_EXT
+
+       s32 res;
+
+       if (start == 0)
+               start = rtw_get_current_time();
+
+       pxmitframe = rtw_alloc_xmitframe(pxmitpriv);
+
+       if (rtw_get_passing_time_ms(start) > 2000) {
+               if (drop_cnt)
+                       DBG_871X("DBG_TX_DROP_FRAME %s no more pxmitframe, drop_cnt:%u\n", __FUNCTION__, drop_cnt);
+               start = rtw_get_current_time();
+               drop_cnt = 0;
+       }
+
+       if (pxmitframe == NULL) {
+               drop_cnt ++;
+               RT_TRACE(_module_xmit_osdep_c_, _drv_err_, ("rtw_xmit: no more pxmitframe\n"));
+               return -1;
+       }
+
+#ifdef CONFIG_BR_EXT
+
+#if (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
+       br_port = padapter->pnetdev->br_port;
+#else   // (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
+       rcu_read_lock();
+       br_port = rcu_dereference(padapter->pnetdev->rx_handler_data);
+       rcu_read_unlock();
+#endif  // (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
+
+       if( br_port     && check_fwstate(pmlmepriv, WIFI_STATION_STATE|WIFI_ADHOC_STATE) == _TRUE)
+       {
+               res = rtw_br_client_tx(padapter, ppkt);
+               if (res == -1)
+               {
+                       rtw_free_xmitframe(pxmitpriv, pxmitframe);
+                       return -1;
+               }
+       }
+
+#endif // CONFIG_BR_EXT
+
+       res = update_attrib(padapter, *ppkt, &pxmitframe->attrib);
+       if (res == _FAIL) {
+               RT_TRACE(_module_xmit_osdep_c_, _drv_err_, ("rtw_xmit: update attrib fail\n"));
+               #ifdef DBG_TX_DROP_FRAME
+               DBG_871X("DBG_TX_DROP_FRAME %s update attrib fail\n", __FUNCTION__);
+               #endif
+               rtw_free_xmitframe(pxmitpriv, pxmitframe);
+               return -1;
+       }
+       pxmitframe->pkt = *ppkt;
+
+       rtw_led_control(padapter, LED_CTL_TX);
+
+       do_queue_select(padapter, &pxmitframe->attrib);
+
+#if defined(CONFIG_AP_MODE) || defined(CONFIG_TDLS)
+       _enter_critical_bh(&pxmitpriv->lock, &irqL0);
+       if(xmitframe_enqueue_for_sleeping_sta(padapter, pxmitframe) == _TRUE)
+       {
+               _exit_critical_bh(&pxmitpriv->lock, &irqL0);
+               return 1;
+       }
+       _exit_critical_bh(&pxmitpriv->lock, &irqL0);
+#endif
+
+       if (rtw_hal_xmit(padapter, pxmitframe) == _FALSE)
+               return 1;
+
+       return 0;
+}
+
+#ifdef CONFIG_TDLS
+sint xmitframe_enqueue_for_tdls_sleeping_sta(_adapter *padapter, struct xmit_frame *pxmitframe)
+{
+       sint ret=_FALSE;
+
+       _irqL irqL;
+       struct sta_info *ptdls_sta=NULL;
+       struct sta_priv *pstapriv = &padapter->stapriv;
+       struct pkt_attrib *pattrib = &pxmitframe->attrib;
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       int i;
+
+       ptdls_sta=rtw_get_stainfo(pstapriv, pattrib->dst);
+       if(ptdls_sta==NULL){
+               return ret;
+       }else if(ptdls_sta->tdls_sta_state&TDLS_LINKED_STATE){
+
+               if(pattrib->triggered==1)
+               {
+                       ret = _TRUE;
+                       return ret;
+                       }
+
+               _enter_critical_bh(&ptdls_sta->sleep_q.lock, &irqL);
+
+               if(ptdls_sta->state&WIFI_SLEEP_STATE)
+               {
+                       rtw_list_delete(&pxmitframe->list);
+
+                       //_enter_critical_bh(&psta->sleep_q.lock, &irqL);
+
+                       rtw_list_insert_tail(&pxmitframe->list, get_list_head(&ptdls_sta->sleep_q));
+
+                       ptdls_sta->sleepq_len++;
+                       ptdls_sta->sleepq_ac_len++;
+
+                       //indicate 4-AC queue bit in TDLS peer traffic indication
+                       switch(pattrib->priority)
+                       {
+                               case 1:
+                               case 2:
+                                       ptdls_sta->uapsd_bk = ptdls_sta->uapsd_bk | BIT(1);
+                                       break;
+                               case 4:
+                               case 5:
+                                       ptdls_sta->uapsd_vi = ptdls_sta->uapsd_vi | BIT(1);
+                                       break;
+                               case 6:
+                               case 7:
+                                       ptdls_sta->uapsd_vo = ptdls_sta->uapsd_vo | BIT(1);
+                                       break;
+                               case 0:
+                               case 3:
+                               default:
+                                       ptdls_sta->uapsd_be = ptdls_sta->uapsd_be | BIT(1);
+                                       break;
+                       }
+
+                       if(ptdls_sta->sleepq_len==1)
+                       {
+                               //transmit TDLS PTI via AP
+                               rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_SD_PTI);
+                       }
+                       ret = _TRUE;
+
+               }
+
+               _exit_critical_bh(&ptdls_sta->sleep_q.lock, &irqL);
+       }
+
+       return ret;
+
+}
+#endif //CONFIG_TDLS
+
+#if defined(CONFIG_AP_MODE) || defined(CONFIG_TDLS)
+
+sint xmitframe_enqueue_for_sleeping_sta(_adapter *padapter, struct xmit_frame *pxmitframe)
+{
+       _irqL irqL;
+       sint ret=_FALSE;
+       struct sta_info *psta=NULL;
+       struct sta_priv *pstapriv = &padapter->stapriv;
+       struct pkt_attrib *pattrib = &pxmitframe->attrib;
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+       sint bmcst = IS_MCAST(pattrib->ra);
+#ifdef CONFIG_TDLS
+       struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
+
+       if( ptdlsinfo->setup_state == TDLS_LINKED_STATE )
+       {
+               ret = xmitframe_enqueue_for_tdls_sleeping_sta(padapter, pxmitframe);
+               return ret;
+       }
+#endif //CONFIG_TDLS
+
+       if (check_fwstate(pmlmepriv, WIFI_AP_STATE) == _FALSE)
+           return ret;
+
+       if(pattrib->psta)
+       {
+               psta = pattrib->psta;
+       }
+       else
+       {
+               DBG_871X("%s, call rtw_get_stainfo()\n", __func__);
+               psta=rtw_get_stainfo(pstapriv, pattrib->ra);
+       }
+
+       if(psta==NULL)
+       {
+               DBG_871X("%s, psta==NUL\n", __func__);
+               return _FALSE;
+       }
+
+       if(!(psta->state &_FW_LINKED))
+       {
+               DBG_871X("%s, psta->state(0x%x) != _FW_LINKED\n", __func__, psta->state);
+               return _FALSE;
+       }
+
+       if(pattrib->triggered==1)
+       {
+               //DBG_871X("directly xmit pspoll_triggered packet\n");
+
+               //pattrib->triggered=0;
+
+               if(bmcst)
+                       pattrib->qsel = 0x11;//HIQ
+
+
+               return ret;
+       }
+
+
+       if(bmcst)
+       {
+               _enter_critical_bh(&psta->sleep_q.lock, &irqL);
+
+               if(pstapriv->sta_dz_bitmap)//if anyone sta is in ps mode
+               {
+                       //pattrib->qsel = 0x11;//HIQ
+
+                       rtw_list_delete(&pxmitframe->list);
+
+                       //_enter_critical_bh(&psta->sleep_q.lock, &irqL);
+
+                       rtw_list_insert_tail(&pxmitframe->list, get_list_head(&psta->sleep_q));
+
+                       psta->sleepq_len++;
+
+                       pstapriv->tim_bitmap |= BIT(0);//
+                       pstapriv->sta_dz_bitmap |= BIT(0);
+
+                       //DBG_871X("enqueue, sq_len=%d, tim=%x\n", psta->sleepq_len, pstapriv->tim_bitmap);
+
+                       update_beacon(padapter, _TIM_IE_, NULL, _FALSE);//tx bc/mc packets after upate bcn
+
+                       //_exit_critical_bh(&psta->sleep_q.lock, &irqL);
+
+                       ret = _TRUE;
+
+               }
+
+               _exit_critical_bh(&psta->sleep_q.lock, &irqL);
+
+               return ret;
+
+       }
+
+
+       _enter_critical_bh(&psta->sleep_q.lock, &irqL);
+
+       if(psta->state&WIFI_SLEEP_STATE)
+       {
+               u8 wmmps_ac=0;
+
+               if(pstapriv->sta_dz_bitmap&BIT(psta->aid))
+               {
+                       rtw_list_delete(&pxmitframe->list);
+
+                       //_enter_critical_bh(&psta->sleep_q.lock, &irqL);
+
+                       rtw_list_insert_tail(&pxmitframe->list, get_list_head(&psta->sleep_q));
+
+                       psta->sleepq_len++;
+
+                       switch(pattrib->priority)
+                       {
+                               case 1:
+                               case 2:
+                                       wmmps_ac = psta->uapsd_bk&BIT(0);
+                                       break;
+                               case 4:
+                               case 5:
+                                       wmmps_ac = psta->uapsd_vi&BIT(0);
+                                       break;
+                               case 6:
+                               case 7:
+                                       wmmps_ac = psta->uapsd_vo&BIT(0);
+                                       break;
+                               case 0:
+                               case 3:
+                               default:
+                                       wmmps_ac = psta->uapsd_be&BIT(0);
+                                       break;
+                       }
+
+                       if(wmmps_ac)
+                               psta->sleepq_ac_len++;
+
+                       if(((psta->has_legacy_ac) && (!wmmps_ac)) ||((!psta->has_legacy_ac)&&(wmmps_ac)))
+                       {
+                               pstapriv->tim_bitmap |= BIT(psta->aid);
+
+                               //DBG_871X("enqueue, sq_len=%d, tim=%x\n", psta->sleepq_len, pstapriv->tim_bitmap);
+
+                               if(psta->sleepq_len==1)
+                               {
+                                       //DBG_871X("sleepq_len==1, update BCNTIM\n");
+                                       //upate BCN for TIM IE
+                                       update_beacon(padapter, _TIM_IE_, NULL, _FALSE);
+                               }
+                       }
+
+                       //_exit_critical_bh(&psta->sleep_q.lock, &irqL);
+
+                       //if(psta->sleepq_len > (NR_XMITFRAME>>3))
+                       //{
+                       //      wakeup_sta_to_xmit(padapter, psta);
+                       //}
+
+                       ret = _TRUE;
+
+               }
+
+       }
+
+       _exit_critical_bh(&psta->sleep_q.lock, &irqL);
+
+       return ret;
+
+}
+
+static void dequeue_xmitframes_to_sleeping_queue(_adapter *padapter, struct sta_info *psta, _queue *pframequeue)
+{
+       sint ret;
+       _list   *plist, *phead;
+       u8      ac_index;
+       struct tx_servq *ptxservq;
+       struct pkt_attrib       *pattrib;
+       struct xmit_frame       *pxmitframe;
+       struct hw_xmit *phwxmits =  padapter->xmitpriv.hwxmits;
+
+       phead = get_list_head(pframequeue);
+       plist = get_next(phead);
+
+       while (rtw_end_of_queue_search(phead, plist) == _FALSE)
+       {
+               pxmitframe = LIST_CONTAINOR(plist, struct xmit_frame, list);
+
+               plist = get_next(plist);
+
+               ret = xmitframe_enqueue_for_sleeping_sta(padapter, pxmitframe);
+
+               if(_TRUE == ret)
+               {
+               pattrib = &pxmitframe->attrib;
+
+               ptxservq = rtw_get_sta_pending(padapter, psta, pattrib->priority, (u8 *)(&ac_index));
+
+               ptxservq->qcnt--;
+               phwxmits[ac_index].accnt--;
+       }
+               else
+               {
+                       //DBG_871X("xmitframe_enqueue_for_sleeping_sta return _FALSE\n");
+               }
+
+       }
+
+}
+
+void stop_sta_xmit(_adapter *padapter, struct sta_info *psta)
+{
+       _irqL irqL0;
+       struct sta_info *psta_bmc;
+       struct sta_xmit_priv *pstaxmitpriv;
+       struct sta_priv *pstapriv = &padapter->stapriv;
+       struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
+
+       pstaxmitpriv = &psta->sta_xmitpriv;
+
+       //for BC/MC Frames
+       psta_bmc = rtw_get_bcmc_stainfo(padapter);
+
+
+       _enter_critical_bh(&pxmitpriv->lock, &irqL0);
+
+       psta->state |= WIFI_SLEEP_STATE;
+
+#ifdef CONFIG_TDLS
+       if( !(psta->tdls_sta_state & TDLS_LINKED_STATE) )
+#endif //CONFIG_TDLS
+       pstapriv->sta_dz_bitmap |= BIT(psta->aid);
+
+
+
+       dequeue_xmitframes_to_sleeping_queue(padapter, psta, &pstaxmitpriv->vo_q.sta_pending);
+       rtw_list_delete(&(pstaxmitpriv->vo_q.tx_pending));
+
+
+       dequeue_xmitframes_to_sleeping_queue(padapter, psta, &pstaxmitpriv->vi_q.sta_pending);
+       rtw_list_delete(&(pstaxmitpriv->vi_q.tx_pending));
+
+
+       dequeue_xmitframes_to_sleeping_queue(padapter, psta, &pstaxmitpriv->be_q.sta_pending);
+       rtw_list_delete(&(pstaxmitpriv->be_q.tx_pending));
+
+
+       dequeue_xmitframes_to_sleeping_queue(padapter, psta, &pstaxmitpriv->bk_q.sta_pending);
+       rtw_list_delete(&(pstaxmitpriv->bk_q.tx_pending));
+
+#ifdef CONFIG_TDLS
+       if( !(psta->tdls_sta_state & TDLS_LINKED_STATE) )
+       {
+               if( psta_bmc != NULL )
+               {
+#endif //CONFIG_TDLS
+
+
+       //for BC/MC Frames
+       pstaxmitpriv = &psta_bmc->sta_xmitpriv;
+       dequeue_xmitframes_to_sleeping_queue(padapter, psta_bmc, &pstaxmitpriv->be_q.sta_pending);
+       rtw_list_delete(&(pstaxmitpriv->be_q.tx_pending));
+
+
+#ifdef CONFIG_TDLS
+               }
+       }
+#endif //CONFIG_TDLS
+       _exit_critical_bh(&pxmitpriv->lock, &irqL0);
+
+
+}
+
+void wakeup_sta_to_xmit(_adapter *padapter, struct sta_info *psta)
+{
+       _irqL irqL;
+       u8 update_mask=0, wmmps_ac=0;
+       struct sta_info *psta_bmc;
+       _list   *xmitframe_plist, *xmitframe_phead;
+       struct xmit_frame *pxmitframe=NULL;
+       struct sta_priv *pstapriv = &padapter->stapriv;
+       struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
+
+       psta_bmc = rtw_get_bcmc_stainfo(padapter);
+
+
+       //_enter_critical_bh(&psta->sleep_q.lock, &irqL);
+       _enter_critical_bh(&pxmitpriv->lock, &irqL);
+
+       xmitframe_phead = get_list_head(&psta->sleep_q);
+       xmitframe_plist = get_next(xmitframe_phead);
+
+       while ((rtw_end_of_queue_search(xmitframe_phead, xmitframe_plist)) == _FALSE)
+       {
+               pxmitframe = LIST_CONTAINOR(xmitframe_plist, struct xmit_frame, list);
+
+               xmitframe_plist = get_next(xmitframe_plist);
+
+               rtw_list_delete(&pxmitframe->list);
+
+               switch(pxmitframe->attrib.priority)
+               {
+                       case 1:
+                       case 2:
+                               wmmps_ac = psta->uapsd_bk&BIT(1);
+                               break;
+                       case 4:
+                       case 5:
+                               wmmps_ac = psta->uapsd_vi&BIT(1);
+                               break;
+                       case 6:
+                       case 7:
+                               wmmps_ac = psta->uapsd_vo&BIT(1);
+                               break;
+                       case 0:
+                       case 3:
+                       default:
+                               wmmps_ac = psta->uapsd_be&BIT(1);
+                               break;
+               }
+
+               psta->sleepq_len--;
+               if(psta->sleepq_len>0)
+                       pxmitframe->attrib.mdata = 1;
+               else
+                       pxmitframe->attrib.mdata = 0;
+
+               if(wmmps_ac)
+               {
+                       psta->sleepq_ac_len--;
+                       if(psta->sleepq_ac_len>0)
+                       {
+                               pxmitframe->attrib.mdata = 1;
+                               pxmitframe->attrib.eosp = 0;
+                       }
+                       else
+                       {
+                               pxmitframe->attrib.mdata = 0;
+                               pxmitframe->attrib.eosp = 1;
+                       }
+               }
+
+               pxmitframe->attrib.triggered = 1;
+
+/*
+               _exit_critical_bh(&psta->sleep_q.lock, &irqL);
+               if(rtw_hal_xmit(padapter, pxmitframe) == _TRUE)
+               {
+                       rtw_os_xmit_complete(padapter, pxmitframe);
+               }
+               _enter_critical_bh(&psta->sleep_q.lock, &irqL);
+*/
+               rtw_hal_xmitframe_enqueue(padapter, pxmitframe);
+
+
+       }
+
+       //for BC/MC Frames
+       if(!psta_bmc)
+               goto _exit;
+
+       if((pstapriv->sta_dz_bitmap&0xfffe) == 0x0)//no any sta in ps mode
+       {
+               xmitframe_phead = get_list_head(&psta_bmc->sleep_q);
+               xmitframe_plist = get_next(xmitframe_phead);
+
+               while ((rtw_end_of_queue_search(xmitframe_phead, xmitframe_plist)) == _FALSE)
+               {
+                       pxmitframe = LIST_CONTAINOR(xmitframe_plist, struct xmit_frame, list);
+
+                       xmitframe_plist = get_next(xmitframe_plist);
+
+                       rtw_list_delete(&pxmitframe->list);
+
+                       psta_bmc->sleepq_len--;
+                       if(psta_bmc->sleepq_len>0)
+                               pxmitframe->attrib.mdata = 1;
+                       else
+                               pxmitframe->attrib.mdata = 0;
+
+
+                       pxmitframe->attrib.triggered = 1;
+/*
+                       _exit_critical_bh(&psta_bmc->sleep_q.lock, &irqL);
+                       if(rtw_hal_xmit(padapter, pxmitframe) == _TRUE)
+                       {
+                               rtw_os_xmit_complete(padapter, pxmitframe);
+                       }
+                       _enter_critical_bh(&psta_bmc->sleep_q.lock, &irqL);
+
+*/
+                       rtw_hal_xmitframe_enqueue(padapter, pxmitframe);
+
+               }
+
+               if(psta_bmc->sleepq_len==0)
+               {
+                       pstapriv->tim_bitmap &= ~BIT(0);
+                       pstapriv->sta_dz_bitmap &= ~BIT(0);
+
+                       //DBG_871X("wakeup to xmit, qlen==0, update_BCNTIM, tim=%x\n", pstapriv->tim_bitmap);
+                       //upate BCN for TIM IE
+                       //update_BCNTIM(padapter);
+                       update_mask |= BIT(1);
+               }
+
+       }
+
+       if(psta->sleepq_len==0)
+       {
+#ifdef CONFIG_TDLS
+               if( psta->tdls_sta_state & TDLS_LINKED_STATE )
+               {
+                       if(psta->state&WIFI_SLEEP_STATE)
+                               psta->state ^= WIFI_SLEEP_STATE;
+
+                       goto _exit;
+       }
+#endif //CONFIG_TDLS
+               pstapriv->tim_bitmap &= ~BIT(psta->aid);
+
+               //DBG_871X("wakeup to xmit, qlen==0, update_BCNTIM, tim=%x\n", pstapriv->tim_bitmap);
+               //upate BCN for TIM IE
+               //update_BCNTIM(padapter);
+               update_mask = BIT(0);
+
+               if(psta->state&WIFI_SLEEP_STATE)
+                       psta->state ^= WIFI_SLEEP_STATE;
+
+               if(psta->state & WIFI_STA_ALIVE_CHK_STATE)
+               {
+                       psta->expire_to = pstapriv->expire_to;
+                       psta->state ^= WIFI_STA_ALIVE_CHK_STATE;
+               }
+
+               pstapriv->sta_dz_bitmap &= ~BIT(psta->aid);
+       }
+
+_exit:
+
+       //_exit_critical_bh(&psta_bmc->sleep_q.lock, &irqL);
+       _exit_critical_bh(&pxmitpriv->lock, &irqL);
+
+       if(update_mask)
+       {
+               //update_BCNTIM(padapter);
+               //printk("%s => call update_beacon\n",__FUNCTION__);
+               update_beacon(padapter, _TIM_IE_, NULL, _FALSE);
+       }
+
+}
+
+void xmit_delivery_enabled_frames(_adapter *padapter, struct sta_info *psta)
+{
+       _irqL irqL;
+       u8 wmmps_ac=0;
+       _list   *xmitframe_plist, *xmitframe_phead;
+       struct xmit_frame *pxmitframe=NULL;
+       struct sta_priv *pstapriv = &padapter->stapriv;
+       struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
+
+
+       //_enter_critical_bh(&psta->sleep_q.lock, &irqL);
+       _enter_critical_bh(&pxmitpriv->lock, &irqL);
+
+       xmitframe_phead = get_list_head(&psta->sleep_q);
+       xmitframe_plist = get_next(xmitframe_phead);
+
+       while ((rtw_end_of_queue_search(xmitframe_phead, xmitframe_plist)) == _FALSE)
+       {
+               pxmitframe = LIST_CONTAINOR(xmitframe_plist, struct xmit_frame, list);
+
+               xmitframe_plist = get_next(xmitframe_plist);
+
+               switch(pxmitframe->attrib.priority)
+               {
+                       case 1:
+                       case 2:
+                               wmmps_ac = psta->uapsd_bk&BIT(1);
+                               break;
+                       case 4:
+                       case 5:
+                               wmmps_ac = psta->uapsd_vi&BIT(1);
+                               break;
+                       case 6:
+                       case 7:
+                               wmmps_ac = psta->uapsd_vo&BIT(1);
+                               break;
+                       case 0:
+                       case 3:
+                       default:
+                               wmmps_ac = psta->uapsd_be&BIT(1);
+                               break;
+               }
+
+               if(!wmmps_ac)
+                       continue;
+
+               rtw_list_delete(&pxmitframe->list);
+
+               psta->sleepq_len--;
+               psta->sleepq_ac_len--;
+
+               if(psta->sleepq_ac_len>0)
+               {
+                       pxmitframe->attrib.mdata = 1;
+                       pxmitframe->attrib.eosp = 0;
+               }
+               else
+               {
+                       pxmitframe->attrib.mdata = 0;
+                       pxmitframe->attrib.eosp = 1;
+               }
+
+               pxmitframe->attrib.triggered = 1;
+
+/*
+               if(rtw_hal_xmit(padapter, pxmitframe) == _TRUE)
+               {
+                       rtw_os_xmit_complete(padapter, pxmitframe);
+               }
+*/
+               rtw_hal_xmitframe_enqueue(padapter, pxmitframe);
+
+               if((psta->sleepq_ac_len==0) && (!psta->has_legacy_ac) && (wmmps_ac))
+               {
+#ifdef CONFIG_TDLS
+                       if(psta->tdls_sta_state & TDLS_LINKED_STATE )
+                       {
+                               //_exit_critical_bh(&psta->sleep_q.lock, &irqL);
+                               _exit_critical_bh(&pxmitpriv->lock, &irqL);
+                               return;
+                       }
+#endif //CONFIG_TDLS
+                       pstapriv->tim_bitmap &= ~BIT(psta->aid);
+
+                       //DBG_871X("wakeup to xmit, qlen==0, update_BCNTIM, tim=%x\n", pstapriv->tim_bitmap);
+                       //upate BCN for TIM IE
+                       //update_BCNTIM(padapter);
+                       update_beacon(padapter, _TIM_IE_, NULL, _FALSE);
+                       //update_mask = BIT(0);
+               }
+
+       }
+
+       //_exit_critical_bh(&psta->sleep_q.lock, &irqL);
+       _exit_critical_bh(&pxmitpriv->lock, &irqL);
+
+}
+
+#endif
+
+void rtw_sctx_init(struct submit_ctx *sctx, int timeout_ms)
+{
+       sctx->timeout_ms = timeout_ms;
+       sctx->submit_time= rtw_get_current_time();
+#ifdef PLATFORM_LINUX /* TODO: add condition wating interface for other os */
+       init_completion(&sctx->done);
+#endif
+       sctx->status = RTW_SCTX_SUBMITTED;
+}
+
+int rtw_sctx_wait(struct submit_ctx *sctx)
+{
+       int ret = _FAIL;
+       unsigned long expire;
+       int status = 0;
+
+#ifdef PLATFORM_LINUX
+       expire= sctx->timeout_ms ? msecs_to_jiffies(sctx->timeout_ms) : MAX_SCHEDULE_TIMEOUT;
+       if (!wait_for_completion_timeout(&sctx->done, expire)) {
+               /* timeout, do something?? */
+               status = RTW_SCTX_DONE_TIMEOUT;
+               DBG_871X("%s timeout\n", __func__);
+       } else {
+               status = sctx->status;
+       }
+#endif
+
+       if (status == RTW_SCTX_DONE_SUCCESS) {
+               ret = _SUCCESS;
+       }
+
+       return ret;
+}
+
+bool rtw_sctx_chk_waring_status(int status)
+{
+       switch(status) {
+       case RTW_SCTX_DONE_UNKNOWN:
+       case RTW_SCTX_DONE_BUF_ALLOC:
+       case RTW_SCTX_DONE_BUF_FREE:
+
+       case RTW_SCTX_DONE_DRV_STOP:
+       case RTW_SCTX_DONE_DEV_REMOVE:
+               return _TRUE;
+       default:
+               return _FALSE;
+       }
+}
+
+void rtw_sctx_done_err(struct submit_ctx **sctx, int status)
+{
+       if (*sctx) {
+               if (rtw_sctx_chk_waring_status(status))
+                       DBG_871X("%s status:%d\n", __func__, status);
+               (*sctx)->status = status;
+               #ifdef PLATFORM_LINUX
+               complete(&((*sctx)->done));
+               #endif
+               *sctx = NULL;
+       }
+}
+
+void rtw_sctx_done(struct submit_ctx **sctx)
+{
+       rtw_sctx_done_err(sctx, RTW_SCTX_DONE_SUCCESS);
+}
+
+#ifdef CONFIG_XMIT_ACK
+
+#ifdef CONFIG_XMIT_ACK_POLLING
+s32 c2h_evt_hdl(_adapter *adapter, struct c2h_evt_hdr *c2h_evt, c2h_id_filter filter);
+
+/**
+ * rtw_ack_tx_polling -
+ * @pxmitpriv: xmit_priv to address ack_tx_ops
+ * @timeout_ms: timeout msec
+ *
+ * Init ack_tx_ops and then do c2h_evt_hdl() and polling ack_tx_ops repeatedly
+ * till tx report or timeout
+ * Returns: _SUCCESS if TX report ok, _FAIL for others
+ */
+int rtw_ack_tx_polling(struct xmit_priv *pxmitpriv, u32 timeout_ms)
+{
+       int ret = _FAIL;
+       struct submit_ctx *pack_tx_ops = &pxmitpriv->ack_tx_ops;
+       _adapter *adapter = container_of(pxmitpriv, _adapter, xmitpriv);
+
+       pack_tx_ops->submit_time = rtw_get_current_time();
+       pack_tx_ops->timeout_ms = timeout_ms;
+       pack_tx_ops->status = RTW_SCTX_SUBMITTED;
+
+       do {
+               c2h_evt_hdl(adapter, NULL, rtw_hal_c2h_id_filter_ccx(adapter));
+               if (pack_tx_ops->status != RTW_SCTX_SUBMITTED)
+                       break;
+
+               if (adapter->bDriverStopped) {
+                       pack_tx_ops->status = RTW_SCTX_DONE_DRV_STOP;
+                       break;
+               }
+               if (adapter->bSurpriseRemoved) {
+                       pack_tx_ops->status = RTW_SCTX_DONE_DEV_REMOVE;
+                       break;
+               }
+
+               rtw_msleep_os(10);
+       } while (rtw_get_passing_time_ms(pack_tx_ops->submit_time) < timeout_ms);
+
+       if (pack_tx_ops->status == RTW_SCTX_SUBMITTED) {
+               pack_tx_ops->status = RTW_SCTX_DONE_TIMEOUT;
+               DBG_871X("%s timeout\n", __func__);
+       }
+
+       if (pack_tx_ops->status == RTW_SCTX_DONE_SUCCESS)
+               ret = _SUCCESS;
+
+       return ret;
+}
+#endif
+
+int rtw_ack_tx_wait(struct xmit_priv *pxmitpriv, u32 timeout_ms)
+{
+#ifdef CONFIG_XMIT_ACK_POLLING
+       return rtw_ack_tx_polling(pxmitpriv, timeout_ms);
+#else
+       struct submit_ctx *pack_tx_ops = &pxmitpriv->ack_tx_ops;
+
+       pack_tx_ops->submit_time = rtw_get_current_time();
+       pack_tx_ops->timeout_ms = timeout_ms;
+       pack_tx_ops->status = RTW_SCTX_SUBMITTED;
+
+       return rtw_sctx_wait(pack_tx_ops);
+#endif
+}
+
+void rtw_ack_tx_done(struct xmit_priv *pxmitpriv, int status)
+{
+       struct submit_ctx *pack_tx_ops = &pxmitpriv->ack_tx_ops;
+
+       if (pxmitpriv->ack_tx) {
+               rtw_sctx_done_err(&pack_tx_ops, status);
+       } else {
+               DBG_871X("%s ack_tx not set\n", __func__);
+       }
+}
+#endif //CONFIG_XMIT_ACK
diff --git a/drivers/net/wireless/realtek/rtl8192cu/hal/HalPwrSeqCmd.c b/drivers/net/wireless/realtek/rtl8192cu/hal/HalPwrSeqCmd.c
new file mode 100644 (file)
index 0000000..4ecf229
--- /dev/null
@@ -0,0 +1,175 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+/*++
+Copyright (c) Realtek Semiconductor Corp. All rights reserved.
+
+Module Name:
+       HalPwrSeqCmd.c
+
+Abstract:
+       Implement HW Power sequence configuration CMD handling routine for Realtek devices.
+
+Major Change History:
+       When       Who               What
+       ---------- ---------------   -------------------------------
+       2011-10-26 Lucas            Modify to be compatible with SD4-CE driver.
+       2011-07-07 Roger            Create.
+
+--*/
+#include <HalPwrSeqCmd.h>
+#include <sdio_ops.h>
+
+
+//
+//     Description:
+//             This routine deal with the Power Configuration CMDs parsing for RTL8723/RTL8188E Series IC.
+//
+//     Assumption:
+//             We should follow specific format which was released from HW SD.
+//
+//     2011.07.07, added by Roger.
+//
+u8 HalPwrSeqCmdParsing(
+       PADAPTER                padapter,
+       u8                              CutVersion,
+       u8                              FabVersion,
+       u8                              InterfaceType,
+       WLAN_PWR_CFG    PwrSeqCmd[])
+{
+       WLAN_PWR_CFG    PwrCfgCmd = {0};
+       u8                              bPollingBit = _FALSE;
+       u32                             AryIdx = 0;
+       u8                              value = 0;
+       u32                             offset = 0;
+       u32                             pollingCount = 0; // polling autoload done.
+       u32                             maxPollingCnt = 5000;
+
+       do {
+               PwrCfgCmd = PwrSeqCmd[AryIdx];
+
+               RT_TRACE(_module_hal_init_c_ , _drv_info_,
+                                ("HalPwrSeqCmdParsing: offset(%#x) cut_msk(%#x) fab_msk(%#x) interface_msk(%#x) base(%#x) cmd(%#x) msk(%#x) value(%#x)\n",
+                                       GET_PWR_CFG_OFFSET(PwrCfgCmd),
+                                       GET_PWR_CFG_CUT_MASK(PwrCfgCmd),
+                                       GET_PWR_CFG_FAB_MASK(PwrCfgCmd),
+                                       GET_PWR_CFG_INTF_MASK(PwrCfgCmd),
+                                       GET_PWR_CFG_BASE(PwrCfgCmd),
+                                       GET_PWR_CFG_CMD(PwrCfgCmd),
+                                       GET_PWR_CFG_MASK(PwrCfgCmd),
+                                       GET_PWR_CFG_VALUE(PwrCfgCmd)));
+
+               //2 Only Handle the command whose FAB, CUT, and Interface are matched
+               if ((GET_PWR_CFG_FAB_MASK(PwrCfgCmd) & FabVersion) &&
+                       (GET_PWR_CFG_CUT_MASK(PwrCfgCmd) & CutVersion) &&
+                       (GET_PWR_CFG_INTF_MASK(PwrCfgCmd) & InterfaceType))
+               {
+                       switch (GET_PWR_CFG_CMD(PwrCfgCmd))
+                       {
+                               case PWR_CMD_READ:
+                                       RT_TRACE(_module_hal_init_c_ , _drv_info_, ("HalPwrSeqCmdParsing: PWR_CMD_READ\n"));
+                                       break;
+
+                               case PWR_CMD_WRITE:
+                                       RT_TRACE(_module_hal_init_c_ , _drv_info_, ("HalPwrSeqCmdParsing: PWR_CMD_WRITE\n"));
+                                       offset = GET_PWR_CFG_OFFSET(PwrCfgCmd);
+
+#ifdef CONFIG_SDIO_HCI
+                                       //
+                                       // <Roger_Notes> We should deal with interface specific address mapping for some interfaces, e.g., SDIO interface
+                                       // 2011.07.07.
+                                       //
+                                       if (GET_PWR_CFG_BASE(PwrCfgCmd) == PWR_BASEADDR_SDIO)
+                                       {
+                                               // Read Back SDIO Local value
+                                               value = SdioLocalCmd52Read1Byte(padapter, offset);
+
+                                               value &= ~(GET_PWR_CFG_MASK(PwrCfgCmd));
+                                               value |= (GET_PWR_CFG_VALUE(PwrCfgCmd) & GET_PWR_CFG_MASK(PwrCfgCmd));
+
+                                               // Write Back SDIO Local value
+                                               SdioLocalCmd52Write1Byte(padapter, offset, value);
+                                       }
+                                       else
+#endif
+                                       {
+                                               // Read the value from system register
+                                               value = rtw_read8(padapter, offset);
+
+                                               value &= ~(GET_PWR_CFG_MASK(PwrCfgCmd));
+                                               value |= (GET_PWR_CFG_VALUE(PwrCfgCmd) & GET_PWR_CFG_MASK(PwrCfgCmd));
+
+                                               // Write the value back to sytem register
+                                               rtw_write8(padapter, offset, value);
+                                       }
+                                       break;
+
+                               case PWR_CMD_POLLING:
+                                       RT_TRACE(_module_hal_init_c_ , _drv_info_, ("HalPwrSeqCmdParsing: PWR_CMD_POLLING\n"));
+
+                                       bPollingBit = _FALSE;
+                                       offset = GET_PWR_CFG_OFFSET(PwrCfgCmd);
+
+                                       do {
+#ifdef CONFIG_SDIO_HCI
+                                               if (GET_PWR_CFG_BASE(PwrCfgCmd) == PWR_BASEADDR_SDIO)
+                                                       value = SdioLocalCmd52Read1Byte(padapter, offset);
+                                               else
+#endif
+                                                       value = rtw_read8(padapter, offset);
+
+                                               value &= GET_PWR_CFG_MASK(PwrCfgCmd);
+                                               if (value == (GET_PWR_CFG_VALUE(PwrCfgCmd) & GET_PWR_CFG_MASK(PwrCfgCmd)))
+                                                       bPollingBit = _TRUE;
+                                               else
+                                                       rtw_udelay_os(10);
+
+                                               if (pollingCount++ > maxPollingCnt) {
+                                                       RT_TRACE(_module_hal_init_c_ , _drv_err_, ("Fail to polling Offset[%#x]\n", offset));
+                                                       return _FALSE;
+                                               }
+                                       } while (!bPollingBit);
+
+                                       break;
+
+                               case PWR_CMD_DELAY:
+                                       RT_TRACE(_module_hal_init_c_ , _drv_info_, ("HalPwrSeqCmdParsing: PWR_CMD_DELAY\n"));
+                                       if (GET_PWR_CFG_VALUE(PwrCfgCmd) == PWRSEQ_DELAY_US)
+                                               rtw_udelay_os(GET_PWR_CFG_OFFSET(PwrCfgCmd));
+                                       else
+                                               rtw_udelay_os(GET_PWR_CFG_OFFSET(PwrCfgCmd)*1000);
+                                       break;
+
+                               case PWR_CMD_END:
+                                       // When this command is parsed, end the process
+                                       RT_TRACE(_module_hal_init_c_ , _drv_info_, ("HalPwrSeqCmdParsing: PWR_CMD_END\n"));
+                                       return _TRUE;
+                                       break;
+
+                               default:
+                                       RT_TRACE(_module_hal_init_c_ , _drv_err_, ("HalPwrSeqCmdParsing: Unknown CMD!!\n"));
+                                       break;
+                       }
+               }
+
+               AryIdx++;//Add Array Index
+       }while(1);
+
+       return _TRUE;
+}
diff --git a/drivers/net/wireless/realtek/rtl8192cu/hal/dm.c b/drivers/net/wireless/realtek/rtl8192cu/hal/dm.c
new file mode 100644 (file)
index 0000000..807dfd1
--- /dev/null
@@ -0,0 +1,313 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2013 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+
+#ifdef CONFIG_RTL8192C
+#include <rtl8192c_hal.h>
+#endif
+
+#ifdef CONFIG_RTL8192D
+#include <rtl8192d_hal.h>
+#endif
+
+bool rtw_adapter_linked(_adapter *adapter)
+{
+       bool linked = _FALSE;
+       struct mlme_priv        *mlmepriv = &adapter->mlmepriv;
+
+       if(     (check_fwstate(mlmepriv, WIFI_AP_STATE) == _TRUE) ||
+               (check_fwstate(mlmepriv, WIFI_ADHOC_STATE|WIFI_ADHOC_MASTER_STATE) == _TRUE))
+       {
+               if(adapter->stapriv.asoc_sta_count > 2)
+                       linked = _TRUE;
+       }
+       else{//Station mode
+               if(check_fwstate(mlmepriv, _FW_LINKED)== _TRUE)
+                       linked = _TRUE;
+       }
+
+       return linked;
+}
+
+bool dm_linked(_adapter *adapter)
+{
+       bool linked;
+
+       if ((linked = rtw_adapter_linked(adapter)))
+               goto exit;
+
+#ifdef CONFIG_CONCURRENT_MODE
+       if ((adapter =  adapter->pbuddy_adapter) == NULL)
+               goto exit;
+       linked = rtw_adapter_linked(adapter);
+#endif
+
+exit:
+       return linked;
+}
+
+#if 0
+void dm_enable_EDCCA(_adapter *adapter)
+{
+       // Enable EDCCA. The value is suggested by SD3 Wilson.
+
+       //
+       // Revised for ASUS 11b/g performance issues, suggested by BB Neil, 2012.04.13.
+       //
+       /*if((pDM_Odm->SupportICType == ODM_RTL8723A)&&(IS_WIRELESS_MODE_G(pAdapter)))
+       {
+               rtw_write8(adapter,rOFDM0_ECCAThreshold,0x00);
+               rtw_write8(adapter,rOFDM0_ECCAThreshold+2,0xFD);
+
+       }
+       else*/
+       {
+               rtw_write8(adapter,rOFDM0_ECCAThreshold,0x03);
+               rtw_write8(adapter,rOFDM0_ECCAThreshold+2,0x00);
+       }
+}
+
+void dm_disable_EDCCA(_adapter *adapter)
+{
+       // Disable EDCCA..
+       rtw_write8(adapter, rOFDM0_ECCAThreshold, 0x7f);
+       rtw_write8(adapter, rOFDM0_ECCAThreshold+2, 0x7f);
+}
+
+//
+// Description: According to initial gain value to determine to enable or disable EDCCA.
+//
+// Suggested by SD3 Wilson. Added by tynli. 2011.11.25.
+//
+void dm_dynamic_EDCCA(_adapter *pAdapter)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(pAdapter);
+       struct dm_priv *dmpriv = &pHalData->dmpriv;
+       u8 RegC50, RegC58;
+
+       RegC50 = (u8)PHY_QueryBBReg(pAdapter, rOFDM0_XAAGCCore1, bMaskByte0);
+       RegC58 = (u8)PHY_QueryBBReg(pAdapter, rOFDM0_XBAGCCore1, bMaskByte0);
+
+
+       if((RegC50 > 0x28 && RegC58 > 0x28)
+               /*|| ((pDM_Odm->SupportICType == ODM_RTL8723A && IS_WIRELESS_MODE_G(pAdapter) && RegC50>0x26))
+               || (pDM_Odm->SupportICType == ODM_RTL8188E && RegC50 > 0x28)*/
+       )
+       {
+               if(!dmpriv->bPreEdccaEnable)
+               {
+                       dm_enable_EDCCA(pAdapter);
+                       dmpriv->bPreEdccaEnable = _TRUE;
+               }
+
+       }
+       else if((RegC50 < 0x25 && RegC58 < 0x25)
+               /*|| (pDM_Odm->SupportICType == ODM_RTL8188E && RegC50 < 0x25)*/
+       )
+       {
+               if(dmpriv->bPreEdccaEnable)
+               {
+                       dm_disable_EDCCA(pAdapter);
+                       dmpriv->bPreEdccaEnable = _FALSE;
+               }
+       }
+}
+#endif
+
+#define DM_ADAPTIVITY_VER "ADAPTIVITY_V001"
+
+int dm_adaptivity_get_parm_str(_adapter *pAdapter, char *buf, int len)
+{
+#ifdef CONFIG_DM_ADAPTIVITY
+       HAL_DATA_TYPE *pHalData = GET_HAL_DATA(pAdapter);
+       struct dm_priv *dmpriv = &pHalData->dmpriv;
+
+       return snprintf(buf, len, DM_ADAPTIVITY_VER"\n"
+               "TH_L2H_ini\tTH_EDCCA_HL_diff\tIGI_Base\tForceEDCCA\tAdapEn_RSSI\tIGI_LowerBound\n"
+               "0x%02x\t%d\t0x%02x\t%d\t%u\t%u\n",
+               (u8)dmpriv->TH_L2H_ini,
+               dmpriv->TH_EDCCA_HL_diff,
+               dmpriv->IGI_Base,
+               dmpriv->ForceEDCCA,
+               dmpriv->AdapEn_RSSI,
+               dmpriv->IGI_LowerBound
+       );
+#endif /* CONFIG_DM_ADAPTIVITY */
+       return 0;
+}
+
+void dm_adaptivity_set_parm(_adapter *pAdapter, s8 TH_L2H_ini, s8 TH_EDCCA_HL_diff,
+       s8 IGI_Base, bool ForceEDCCA, u8 AdapEn_RSSI, u8 IGI_LowerBound)
+{
+#ifdef CONFIG_DM_ADAPTIVITY
+       HAL_DATA_TYPE *pHalData = GET_HAL_DATA(pAdapter);
+       struct dm_priv *dmpriv = &pHalData->dmpriv;
+
+       dmpriv->TH_L2H_ini = TH_L2H_ini;
+       dmpriv->TH_EDCCA_HL_diff = TH_EDCCA_HL_diff;
+       dmpriv->IGI_Base = IGI_Base;
+       dmpriv->ForceEDCCA = ForceEDCCA;
+       dmpriv->AdapEn_RSSI = AdapEn_RSSI;
+       dmpriv->IGI_LowerBound = IGI_LowerBound;
+
+#endif /* CONFIG_DM_ADAPTIVITY */
+}
+
+void dm_adaptivity_init(_adapter *pAdapter)
+{
+#ifdef CONFIG_DM_ADAPTIVITY
+       HAL_DATA_TYPE *pHalData = GET_HAL_DATA(pAdapter);
+       struct dm_priv *dmpriv = &pHalData->dmpriv;
+
+       /*
+       if(pDM_Odm->SupportICType == ODM_RTL8723B)
+       {
+               pDM_Odm->TH_L2H_ini = 0xf8; // -8
+       }
+       if((pDM_Odm->SupportICType == ODM_RTL8192E)&&(pDM_Odm->SupportInterface == ODM_ITRF_PCIE))
+       {
+               pDM_Odm->TH_L2H_ini = 0xf0; // -16
+       }
+       else */
+       {
+               dmpriv->TH_L2H_ini = 0xf9; // -7
+       }
+
+       dmpriv->TH_EDCCA_HL_diff = 7;
+       dmpriv->IGI_Base = 0x32;
+       dmpriv->IGI_target = 0x1c;
+       dmpriv->ForceEDCCA = 0;
+       dmpriv->AdapEn_RSSI = 20;
+       dmpriv->IGI_LowerBound = 0;
+
+       //Reg524[11]=0 is easily to transmit packets during adaptivity test
+       PHY_SetBBReg(pAdapter, 0x524, BIT11, 1); // stop counting if EDCCA is asserted
+
+#endif /* CONFIG_DM_ADAPTIVITY */
+}
+
+void dm_adaptivity(_adapter *pAdapter)
+{
+#ifdef CONFIG_DM_ADAPTIVITY
+       s8 TH_L2H_dmc, TH_H2L_dmc;
+       s8 TH_L2H, TH_H2L, Diff, IGI_target;
+       u32 value32;
+       BOOLEAN EDCCA_State;
+
+       HAL_DATA_TYPE *pHalData = GET_HAL_DATA(pAdapter);
+       struct dm_priv *dmpriv = &pHalData->dmpriv;
+       DIG_T *pDigTable = &dmpriv->DM_DigTable;
+       u8 IGI = pDigTable->CurIGValue;
+       u8 RSSI_Min = pDigTable->Rssi_val_min;
+       HT_CHANNEL_WIDTH BandWidth = pHalData->CurrentChannelBW;
+
+       if (!(dmpriv->DMFlag & DYNAMIC_FUNC_ADAPTIVITY))
+       {
+               LOG_LEVEL(_drv_info_, "Go to odm_DynamicEDCCA() \n");
+               // Add by Neil Chen to enable edcca to MP Platform
+               // Adjust EDCCA.
+               /*if(pDM_Odm->SupportICType & ODM_IC_11N_SERIES)
+                       dm_dynamic_EDCCA(pAdapter);
+               */
+               return;
+       }
+       LOG_LEVEL(_drv_info_, "odm_Adaptivity() =====> \n");
+
+       LOG_LEVEL(_drv_info_, "ForceEDCCA=%d, IGI_Base=0x%x, TH_L2H_ini = %d, TH_EDCCA_HL_diff = %d, AdapEn_RSSI = %d\n",
+               dmpriv->ForceEDCCA, dmpriv->IGI_Base, dmpriv->TH_L2H_ini, dmpriv->TH_EDCCA_HL_diff, dmpriv->AdapEn_RSSI);
+
+       /*if(pDM_Odm->SupportICType & ODM_IC_11AC_SERIES)
+               PHY_SetBBReg(0x800, BIT10, 0); //ADC_mask enable
+       */
+
+       if(!dm_linked(pAdapter) || pHalData->CurrentChannel > 149) /* Band4 doesn't need adaptivity */
+       {
+               /*if(pDM_Odm->SupportICType & ODM_IC_11N_SERIES)*/
+               {
+                       PHY_SetBBReg(pAdapter,rOFDM0_ECCAThreshold, bMaskByte0, 0x7f);
+                       PHY_SetBBReg(pAdapter,rOFDM0_ECCAThreshold, bMaskByte2, 0x7f);
+               }
+               /*else
+               {
+                       ODM_SetBBReg(pDM_Odm, rFPGA0_XB_LSSIReadBack, 0xFFFF, (0x7f<<8) | 0x7f);
+               }*/
+               return;
+       }
+
+       if(!dmpriv->ForceEDCCA)
+       {
+               if(RSSI_Min > dmpriv->AdapEn_RSSI)
+                       EDCCA_State = 1;
+               else if(RSSI_Min < (dmpriv->AdapEn_RSSI - 5))
+                       EDCCA_State = 0;
+       }
+       else
+               EDCCA_State = 1;
+       //if((pDM_Odm->SupportICType & ODM_IC_11AC_SERIES) && (*pDM_Odm->pBandType == BAND_ON_5G))
+               //IGI_target = pDM_Odm->IGI_Base;
+       //else
+       {
+
+               if(BandWidth == HT_CHANNEL_WIDTH_20) //CHANNEL_WIDTH_20
+                       IGI_target = dmpriv->IGI_Base;
+               else if(BandWidth == HT_CHANNEL_WIDTH_40)
+                       IGI_target = dmpriv->IGI_Base + 2;
+               /*else if(*pDM_Odm->pBandWidth == ODM_BW80M)
+                       IGI_target = pDM_Odm->IGI_Base + 6;*/
+               else
+                       IGI_target = dmpriv->IGI_Base;
+       }
+
+       dmpriv->IGI_target = (u8)IGI_target;
+
+       LOG_LEVEL(_drv_info_, "BandWidth=%s, IGI_target=0x%x, EDCCA_State=%d\n",
+               (BandWidth==HT_CHANNEL_WIDTH_40)?"40M":"20M", IGI_target, EDCCA_State);
+
+       if(EDCCA_State == 1)
+       {
+               Diff = IGI_target -(s8)IGI;
+               TH_L2H_dmc = dmpriv->TH_L2H_ini + Diff;
+               if(TH_L2H_dmc > 10)     TH_L2H_dmc = 10;
+               TH_H2L_dmc = TH_L2H_dmc - dmpriv->TH_EDCCA_HL_diff;
+       }
+       else
+       {
+               TH_L2H_dmc = 0x7f;
+               TH_H2L_dmc = 0x7f;
+       }
+
+       LOG_LEVEL(_drv_info_, "IGI=0x%x, TH_L2H_dmc = %d, TH_H2L_dmc = %d\n",
+               IGI, TH_L2H_dmc, TH_H2L_dmc);
+
+       /*if(pDM_Odm->SupportICType & ODM_IC_11N_SERIES)*/
+       {
+               PHY_SetBBReg(pAdapter,rOFDM0_ECCAThreshold, bMaskByte0, (u8)TH_L2H_dmc);
+               PHY_SetBBReg(pAdapter,rOFDM0_ECCAThreshold, bMaskByte2, (u8)TH_H2L_dmc);
+       }
+       /*else
+               PHY_SetBBReg(pAdapter, rFPGA0_XB_LSSIReadBack, 0xFFFF, ((u8)TH_H2L_dmc<<8) | (u8)TH_L2H_dmc);*/
+
+skip_dm:
+       return;
+#endif /* CONFIG_DM_ADAPTIVITY */
+}
diff --git a/drivers/net/wireless/realtek/rtl8192cu/hal/dm.h b/drivers/net/wireless/realtek/rtl8192cu/hal/dm.h
new file mode 100644 (file)
index 0000000..cacd58f
--- /dev/null
@@ -0,0 +1,30 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2013 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+
+ #ifndef       __DM_H__
+#define __DM_H__
+
+int dm_adaptivity_get_parm_str(_adapter *pAdapter, char *buf, int len);
+void dm_adaptivity_set_parm(_adapter *pAdapter, s8 TH_L2H_ini, s8 TH_EDCCA_HL_diff,
+       s8 IGI_Base, bool ForceEDCCA, u8 AdapEn_RSSI, u8 IGI_LowerBound);
+void dm_adaptivity_init(_adapter *pAdapter);
+void dm_adaptivity(_adapter *pAdapter);
+
+#endif /* __DM_H__ */
diff --git a/drivers/net/wireless/realtek/rtl8192cu/hal/hal_com.c b/drivers/net/wireless/realtek/rtl8192cu/hal/hal_com.c
new file mode 100644 (file)
index 0000000..b9e4dad
--- /dev/null
@@ -0,0 +1,370 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <rtw_byteorder.h>
+
+#include <hal_intf.h>
+#include <hal_com.h>
+
+#ifdef CONFIG_RTL8192C
+#include <rtl8192c_hal.h>
+#endif
+#ifdef CONFIG_RTL8192D
+#include <rtl8192d_hal.h>
+#endif
+
+#define _HAL_COM_C_
+
+//============================================================
+// Global var
+//============================================================
+u32 OFDMSwingTable[OFDM_TABLE_SIZE_92D] = {
+       0x7f8001fe, // 0, +6.0dB
+       0x788001e2, // 1, +5.5dB
+       0x71c001c7, // 2, +5.0dB
+       0x6b8001ae, // 3, +4.5dB
+       0x65400195, // 4, +4.0dB
+       0x5fc0017f, // 5, +3.5dB
+       0x5a400169, // 6, +3.0dB
+       0x55400155, // 7, +2.5dB
+       0x50800142, // 8, +2.0dB
+       0x4c000130, // 9, +1.5dB
+       0x47c0011f, // 10, +1.0dB
+       0x43c0010f, // 11, +0.5dB
+       0x40000100, // 12, +0dB
+       0x3c8000f2, // 13, -0.5dB
+       0x390000e4, // 14, -1.0dB
+       0x35c000d7, // 15, -1.5dB
+       0x32c000cb, // 16, -2.0dB
+       0x300000c0, // 17, -2.5dB
+       0x2d4000b5, // 18, -3.0dB
+       0x2ac000ab, // 19, -3.5dB
+       0x288000a2, // 20, -4.0dB
+       0x26000098, // 21, -4.5dB
+       0x24000090, // 22, -5.0dB
+       0x22000088, // 23, -5.5dB
+       0x20000080, // 24, -6.0dB
+       0x1e400079, // 25, -6.5dB
+       0x1c800072, // 26, -7.0dB
+       0x1b00006c, // 27. -7.5dB
+       0x19800066, // 28, -8.0dB
+       0x18000060, // 29, -8.5dB
+       0x16c0005b, // 30, -9.0dB
+       0x15800056, // 31, -9.5dB
+       0x14400051, // 32, -10.0dB
+       0x1300004c, // 33, -10.5dB
+       0x12000048, // 34, -11.0dB
+       0x11000044, // 35, -11.5dB
+       0x10000040, // 36, -12.0dB
+       0x0f00003c,// 37, -12.5dB
+       0x0e400039,// 38, -13.0dB
+       0x0d800036,// 39, -13.5dB
+       0x0cc00033,// 40, -14.0dB
+       0x0c000030,// 41, -14.5dB
+       0x0b40002d,// 42, -15.0dB
+};
+
+
+u8 CCKSwingTable_Ch1_Ch13[CCK_TABLE_SIZE][8] = {
+       {0x36, 0x35, 0x2e, 0x25, 0x1c, 0x12, 0x09, 0x04},       // 0, +0dB
+       {0x33, 0x32, 0x2b, 0x23, 0x1a, 0x11, 0x08, 0x04},       // 1, -0.5dB
+       {0x30, 0x2f, 0x29, 0x21, 0x19, 0x10, 0x08, 0x03},       // 2, -1.0dB
+       {0x2d, 0x2d, 0x27, 0x1f, 0x18, 0x0f, 0x08, 0x03},       // 3, -1.5dB
+       {0x2b, 0x2a, 0x25, 0x1e, 0x16, 0x0e, 0x07, 0x03},       // 4, -2.0dB
+       {0x28, 0x28, 0x22, 0x1c, 0x15, 0x0d, 0x07, 0x03},       // 5, -2.5dB
+       {0x26, 0x25, 0x21, 0x1b, 0x14, 0x0d, 0x06, 0x03},       // 6, -3.0dB
+       {0x24, 0x23, 0x1f, 0x19, 0x13, 0x0c, 0x06, 0x03},       // 7, -3.5dB
+       {0x22, 0x21, 0x1d, 0x18, 0x11, 0x0b, 0x06, 0x02},       // 8, -4.0dB
+       {0x20, 0x20, 0x1b, 0x16, 0x11, 0x08, 0x05, 0x02},       // 9, -4.5dB
+       {0x1f, 0x1e, 0x1a, 0x15, 0x10, 0x0a, 0x05, 0x02},       // 10, -5.0dB
+       {0x1d, 0x1c, 0x18, 0x14, 0x0f, 0x0a, 0x05, 0x02},       // 11, -5.5dB
+       {0x1b, 0x1a, 0x17, 0x13, 0x0e, 0x09, 0x04, 0x02},       // 12, -6.0dB
+       {0x1a, 0x19, 0x16, 0x12, 0x0d, 0x09, 0x04, 0x02},       // 13, -6.5dB
+       {0x18, 0x17, 0x15, 0x11, 0x0c, 0x08, 0x04, 0x02},       // 14, -7.0dB
+       {0x17, 0x16, 0x13, 0x10, 0x0c, 0x08, 0x04, 0x02},       // 15, -7.5dB
+       {0x16, 0x15, 0x12, 0x0f, 0x0b, 0x07, 0x04, 0x01},       // 16, -8.0dB
+       {0x14, 0x14, 0x11, 0x0e, 0x0b, 0x07, 0x03, 0x02},       // 17, -8.5dB
+       {0x13, 0x13, 0x10, 0x0d, 0x0a, 0x06, 0x03, 0x01},       // 18, -9.0dB
+       {0x12, 0x12, 0x0f, 0x0c, 0x09, 0x06, 0x03, 0x01},       // 19, -9.5dB
+       {0x11, 0x11, 0x0f, 0x0c, 0x09, 0x06, 0x03, 0x01},       // 20, -10.0dB
+       {0x10, 0x10, 0x0e, 0x0b, 0x08, 0x05, 0x03, 0x01},       // 21, -10.5dB
+       {0x0f, 0x0f, 0x0d, 0x0b, 0x08, 0x05, 0x03, 0x01},       // 22, -11.0dB
+       {0x0e, 0x0e, 0x0c, 0x0a, 0x08, 0x05, 0x02, 0x01},       // 23, -11.5dB
+       {0x0d, 0x0d, 0x0c, 0x0a, 0x07, 0x05, 0x02, 0x01},       // 24, -12.0dB
+       {0x0d, 0x0c, 0x0b, 0x09, 0x07, 0x04, 0x02, 0x01},       // 25, -12.5dB
+       {0x0c, 0x0c, 0x0a, 0x09, 0x06, 0x04, 0x02, 0x01},       // 26, -13.0dB
+       {0x0b, 0x0b, 0x0a, 0x08, 0x06, 0x04, 0x02, 0x01},       // 27, -13.5dB
+       {0x0b, 0x0a, 0x09, 0x08, 0x06, 0x04, 0x02, 0x01},       // 28, -14.0dB
+       {0x0a, 0x0a, 0x09, 0x07, 0x05, 0x03, 0x02, 0x01},       // 29, -14.5dB
+       {0x0a, 0x09, 0x08, 0x07, 0x05, 0x03, 0x02, 0x01},       // 30, -15.0dB
+       {0x09, 0x09, 0x08, 0x06, 0x05, 0x03, 0x01, 0x01},       // 31, -15.5dB
+       {0x09, 0x08, 0x07, 0x06, 0x04, 0x03, 0x01, 0x01}        // 32, -16.0dB
+};
+
+
+u8 CCKSwingTable_Ch14 [CCK_TABLE_SIZE][8]= {
+       {0x36, 0x35, 0x2e, 0x1b, 0x00, 0x00, 0x00, 0x00},       // 0, +0dB
+       {0x33, 0x32, 0x2b, 0x19, 0x00, 0x00, 0x00, 0x00},       // 1, -0.5dB
+       {0x30, 0x2f, 0x29, 0x18, 0x00, 0x00, 0x00, 0x00},       // 2, -1.0dB
+       {0x2d, 0x2d, 0x17, 0x17, 0x00, 0x00, 0x00, 0x00},       // 3, -1.5dB
+       {0x2b, 0x2a, 0x25, 0x15, 0x00, 0x00, 0x00, 0x00},       // 4, -2.0dB
+       {0x28, 0x28, 0x24, 0x14, 0x00, 0x00, 0x00, 0x00},       // 5, -2.5dB
+       {0x26, 0x25, 0x21, 0x13, 0x00, 0x00, 0x00, 0x00},       // 6, -3.0dB
+       {0x24, 0x23, 0x1f, 0x12, 0x00, 0x00, 0x00, 0x00},       // 7, -3.5dB
+       {0x22, 0x21, 0x1d, 0x11, 0x00, 0x00, 0x00, 0x00},       // 8, -4.0dB
+       {0x20, 0x20, 0x1b, 0x10, 0x00, 0x00, 0x00, 0x00},       // 9, -4.5dB
+       {0x1f, 0x1e, 0x1a, 0x0f, 0x00, 0x00, 0x00, 0x00},       // 10, -5.0dB
+       {0x1d, 0x1c, 0x18, 0x0e, 0x00, 0x00, 0x00, 0x00},       // 11, -5.5dB
+       {0x1b, 0x1a, 0x17, 0x0e, 0x00, 0x00, 0x00, 0x00},       // 12, -6.0dB
+       {0x1a, 0x19, 0x16, 0x0d, 0x00, 0x00, 0x00, 0x00},       // 13, -6.5dB
+       {0x18, 0x17, 0x15, 0x0c, 0x00, 0x00, 0x00, 0x00},       // 14, -7.0dB
+       {0x17, 0x16, 0x13, 0x0b, 0x00, 0x00, 0x00, 0x00},       // 15, -7.5dB
+       {0x16, 0x15, 0x12, 0x0b, 0x00, 0x00, 0x00, 0x00},       // 16, -8.0dB
+       {0x14, 0x14, 0x11, 0x0a, 0x00, 0x00, 0x00, 0x00},       // 17, -8.5dB
+       {0x13, 0x13, 0x10, 0x0a, 0x00, 0x00, 0x00, 0x00},       // 18, -9.0dB
+       {0x12, 0x12, 0x0f, 0x09, 0x00, 0x00, 0x00, 0x00},       // 19, -9.5dB
+       {0x11, 0x11, 0x0f, 0x09, 0x00, 0x00, 0x00, 0x00},       // 20, -10.0dB
+       {0x10, 0x10, 0x0e, 0x08, 0x00, 0x00, 0x00, 0x00},       // 21, -10.5dB
+       {0x0f, 0x0f, 0x0d, 0x08, 0x00, 0x00, 0x00, 0x00},       // 22, -11.0dB
+       {0x0e, 0x0e, 0x0c, 0x07, 0x00, 0x00, 0x00, 0x00},       // 23, -11.5dB
+       {0x0d, 0x0d, 0x0c, 0x07, 0x00, 0x00, 0x00, 0x00},       // 24, -12.0dB
+       {0x0d, 0x0c, 0x0b, 0x06, 0x00, 0x00, 0x00, 0x00},       // 25, -12.5dB
+       {0x0c, 0x0c, 0x0a, 0x06, 0x00, 0x00, 0x00, 0x00},       // 26, -13.0dB
+       {0x0b, 0x0b, 0x0a, 0x06, 0x00, 0x00, 0x00, 0x00},       // 27, -13.5dB
+       {0x0b, 0x0a, 0x09, 0x05, 0x00, 0x00, 0x00, 0x00},       // 28, -14.0dB
+       {0x0a, 0x0a, 0x09, 0x05, 0x00, 0x00, 0x00, 0x00},       // 29, -14.5dB
+       {0x0a, 0x09, 0x08, 0x05, 0x00, 0x00, 0x00, 0x00},       // 30, -15.0dB
+       {0x09, 0x09, 0x08, 0x05, 0x00, 0x00, 0x00, 0x00},       // 31, -15.5dB
+       {0x09, 0x08, 0x07, 0x04, 0x00, 0x00, 0x00, 0x00}        // 32, -16.0dB
+};
+
+
+#ifdef CONFIG_CHIP_VER_INTEGRATION
+void dump_chip_info(HAL_VERSION        ChipVersion)
+{
+       if(IS_81XXC(ChipVersion)){
+               DBG_871X("Chip Version Info: %s_",IS_92C_SERIAL(ChipVersion)?"CHIP_8192C":"CHIP_8188C");
+       }
+       else if(IS_92D(ChipVersion)){
+               DBG_871X("Chip Version Info: CHIP_8192D_");
+       }
+       else if(IS_8723_SERIES(ChipVersion)){
+               DBG_871X("Chip Version Info: CHIP_8723A_");
+       }
+       else if(IS_8188E(ChipVersion)){
+               DBG_871X("Chip Version Info: CHIP_8188E_");
+       }
+
+       DBG_871X("%s_",IS_NORMAL_CHIP(ChipVersion)?"Normal_Chip":"Test_Chip");
+       DBG_871X("%s_",IS_CHIP_VENDOR_TSMC(ChipVersion)?"TSMC":"UMC");
+       if(IS_A_CUT(ChipVersion)) DBG_871X("A_CUT_");
+       else if(IS_B_CUT(ChipVersion)) DBG_871X("B_CUT_");
+       else if(IS_C_CUT(ChipVersion)) DBG_871X("C_CUT_");
+       else if(IS_D_CUT(ChipVersion)) DBG_871X("D_CUT_");
+       else if(IS_E_CUT(ChipVersion)) DBG_871X("E_CUT_");
+       else DBG_871X("UNKNOWN_CUT(%d)_",ChipVersion.CUTVersion);
+
+       if(IS_1T1R(ChipVersion))        DBG_871X("1T1R_");
+       else if(IS_1T2R(ChipVersion))   DBG_871X("1T2R_");
+       else if(IS_2T2R(ChipVersion))   DBG_871X("2T2R_");
+       else DBG_871X("UNKNOWN_RFTYPE(%d)_",ChipVersion.RFType);
+
+
+       DBG_871X("RomVer(%d)\n",ChipVersion.ROMVer);
+}
+
+#endif
+
+#define        EEPROM_CHANNEL_PLAN_BY_HW_MASK  0x80
+
+u8     //return the final channel plan decision
+hal_com_get_channel_plan(
+       IN      PADAPTER        padapter,
+       IN      u8                      hw_channel_plan,        //channel plan from HW (efuse/eeprom)
+       IN      u8                      sw_channel_plan,        //channel plan from SW (registry/module param)
+       IN      u8                      def_channel_plan,       //channel plan used when the former two is invalid
+       IN      BOOLEAN         AutoLoadFail
+       )
+{
+       u8 swConfig;
+       u8 chnlPlan;
+
+       swConfig = _TRUE;
+       if (!AutoLoadFail)
+       {
+               if (!rtw_is_channel_plan_valid(sw_channel_plan))
+                       swConfig = _FALSE;
+               if (hw_channel_plan & EEPROM_CHANNEL_PLAN_BY_HW_MASK)
+                       swConfig = _FALSE;
+       }
+
+       if (swConfig == _TRUE)
+               chnlPlan = sw_channel_plan;
+       else
+               chnlPlan = hw_channel_plan & (~EEPROM_CHANNEL_PLAN_BY_HW_MASK);
+
+       if (!rtw_is_channel_plan_valid(chnlPlan))
+               chnlPlan = def_channel_plan;
+
+       return chnlPlan;
+}
+
+u8     MRateToHwRate(u8 rate)
+{
+       u8      ret = DESC_RATE1M;
+
+       switch(rate)
+       {
+               // CCK and OFDM non-HT rates
+       case IEEE80211_CCK_RATE_1MB:    ret = DESC_RATE1M;      break;
+       case IEEE80211_CCK_RATE_2MB:    ret = DESC_RATE2M;      break;
+       case IEEE80211_CCK_RATE_5MB:    ret = DESC_RATE5_5M;    break;
+       case IEEE80211_CCK_RATE_11MB:   ret = DESC_RATE11M;     break;
+       case IEEE80211_OFDM_RATE_6MB:   ret = DESC_RATE6M;      break;
+       case IEEE80211_OFDM_RATE_9MB:   ret = DESC_RATE9M;      break;
+       case IEEE80211_OFDM_RATE_12MB:  ret = DESC_RATE12M;     break;
+       case IEEE80211_OFDM_RATE_18MB:  ret = DESC_RATE18M;     break;
+       case IEEE80211_OFDM_RATE_24MB:  ret = DESC_RATE24M;     break;
+       case IEEE80211_OFDM_RATE_36MB:  ret = DESC_RATE36M;     break;
+       case IEEE80211_OFDM_RATE_48MB:  ret = DESC_RATE48M;     break;
+       case IEEE80211_OFDM_RATE_54MB:  ret = DESC_RATE54M;     break;
+
+               // HT rates since here
+       //case MGN_MCS0:                ret = DESC_RATEMCS0;    break;
+       //case MGN_MCS1:                ret = DESC_RATEMCS1;    break;
+       //case MGN_MCS2:                ret = DESC_RATEMCS2;    break;
+       //case MGN_MCS3:                ret = DESC_RATEMCS3;    break;
+       //case MGN_MCS4:                ret = DESC_RATEMCS4;    break;
+       //case MGN_MCS5:                ret = DESC_RATEMCS5;    break;
+       //case MGN_MCS6:                ret = DESC_RATEMCS6;    break;
+       //case MGN_MCS7:                ret = DESC_RATEMCS7;    break;
+
+       default:                break;
+       }
+
+       return ret;
+}
+
+void   HalSetBrateCfg(
+       IN PADAPTER             Adapter,
+       IN u8                   *mBratesOS,
+       OUT u16                 *pBrateCfg)
+{
+       u8      i, is_brate, brate;
+
+       for(i=0;i<NDIS_802_11_LENGTH_RATES_EX;i++)
+       {
+               is_brate = mBratesOS[i] & IEEE80211_BASIC_RATE_MASK;
+               brate = mBratesOS[i] & 0x7f;
+
+               if( is_brate )
+               {
+                       switch(brate)
+                       {
+                               case IEEE80211_CCK_RATE_1MB:    *pBrateCfg |= RATE_1M;  break;
+                               case IEEE80211_CCK_RATE_2MB:    *pBrateCfg |= RATE_2M;  break;
+                               case IEEE80211_CCK_RATE_5MB:    *pBrateCfg |= RATE_5_5M;break;
+                               case IEEE80211_CCK_RATE_11MB:   *pBrateCfg |= RATE_11M; break;
+                               case IEEE80211_OFDM_RATE_6MB:   *pBrateCfg |= RATE_6M;  break;
+                               case IEEE80211_OFDM_RATE_9MB:   *pBrateCfg |= RATE_9M;  break;
+                               case IEEE80211_OFDM_RATE_12MB:  *pBrateCfg |= RATE_12M; break;
+                               case IEEE80211_OFDM_RATE_18MB:  *pBrateCfg |= RATE_18M; break;
+                               case IEEE80211_OFDM_RATE_24MB:  *pBrateCfg |= RATE_24M; break;
+                               case IEEE80211_OFDM_RATE_36MB:  *pBrateCfg |= RATE_36M; break;
+                               case IEEE80211_OFDM_RATE_48MB:  *pBrateCfg |= RATE_48M; break;
+                               case IEEE80211_OFDM_RATE_54MB:  *pBrateCfg |= RATE_54M; break;
+                       }
+               }
+       }
+}
+
+void hal_init_macaddr(_adapter *adapter)
+{
+       rtw_hal_set_hwreg(adapter, HW_VAR_MAC_ADDR, adapter->eeprompriv.mac_addr);
+#ifdef  CONFIG_CONCURRENT_MODE
+       if (adapter->pbuddy_adapter)
+               rtw_hal_set_hwreg(adapter->pbuddy_adapter, HW_VAR_MAC_ADDR, adapter->pbuddy_adapter->eeprompriv.mac_addr);
+#endif
+}
+
+/*
+* C2H event format:
+* Field         TRIGGER                CONTENT    CMD_SEQ      CMD_LEN          CMD_ID
+* BITS  [127:120]      [119:16]      [15:8]              [7:4]            [3:0]
+*/
+
+void c2h_evt_clear(_adapter *adapter)
+{
+       rtw_write8(adapter, REG_C2HEVT_CLEAR, C2H_EVT_HOST_CLOSE);
+}
+
+s32 c2h_evt_read(_adapter *adapter, u8 *buf)
+{
+       s32 ret = _FAIL;
+       struct c2h_evt_hdr *c2h_evt;
+       int i;
+       u8 trigger;
+
+       if (buf == NULL)
+               goto exit;
+
+       trigger = rtw_read8(adapter, REG_C2HEVT_CLEAR);
+
+       if (trigger == C2H_EVT_HOST_CLOSE) {
+               goto exit; /* Not ready */
+       } else if (trigger != C2H_EVT_FW_CLOSE) {
+               goto clear_evt; /* Not a valid value */
+       }
+
+       c2h_evt = (struct c2h_evt_hdr *)buf;
+
+       _rtw_memset(c2h_evt, 0, 16);
+
+       *buf = rtw_read8(adapter, REG_C2HEVT_MSG_NORMAL);
+       *(buf+1) = rtw_read8(adapter, REG_C2HEVT_MSG_NORMAL + 1);
+
+       RT_PRINT_DATA(_module_hal_init_c_, _drv_info_, "c2h_evt_read(): ",
+               &c2h_evt , sizeof(c2h_evt));
+
+       if (0) {
+               DBG_871X("%s id:%u, len:%u, seq:%u, trigger:0x%02x\n", __func__
+                       , c2h_evt->id, c2h_evt->plen, c2h_evt->seq, trigger);
+       }
+
+       /* Read the content */
+       for (i = 0; i < c2h_evt->plen; i++)
+               c2h_evt->payload[i] = rtw_read8(adapter, REG_C2HEVT_MSG_NORMAL + sizeof(*c2h_evt) + i);
+
+       RT_PRINT_DATA(_module_hal_init_c_, _drv_info_, "c2h_evt_read(): Command Content:\n",
+               c2h_evt->payload, c2h_evt->plen);
+
+       ret = _SUCCESS;
+
+clear_evt:
+       /*
+       * Clear event to notify FW we have read the command.
+       * If this field isn't clear, the FW won't update the next command message.
+       */
+       c2h_evt_clear(adapter);
+exit:
+       return ret;
+}
diff --git a/drivers/net/wireless/realtek/rtl8192cu/hal/hal_intf.c b/drivers/net/wireless/realtek/rtl8192cu/hal/hal_intf.c
new file mode 100644 (file)
index 0000000..fd1e888
--- /dev/null
@@ -0,0 +1,545 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+
+#define _HAL_INTF_C_
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <rtw_byteorder.h>
+
+#include <hal_intf.h>
+
+#ifdef CONFIG_SDIO_HCI
+       #include <sdio_hal.h>
+#elif defined(CONFIG_USB_HCI)
+       #include <usb_hal.h>
+#elif defined(CONFIG_GSPI_HCI)
+       #include <gspi_hal.h>
+#endif
+
+void rtw_hal_chip_configure(_adapter *padapter)
+{
+       if(padapter->HalFunc.intf_chip_configure)
+               padapter->HalFunc.intf_chip_configure(padapter);
+}
+
+void rtw_hal_read_chip_info(_adapter *padapter)
+{
+       if(padapter->HalFunc.read_adapter_info)
+               padapter->HalFunc.read_adapter_info(padapter);
+}
+
+void rtw_hal_read_chip_version(_adapter *padapter)
+{
+       if(padapter->HalFunc.read_chip_version)
+               padapter->HalFunc.read_chip_version(padapter);
+}
+
+void rtw_hal_def_value_init(_adapter *padapter)
+{
+       if(padapter->HalFunc.init_default_value)
+               padapter->HalFunc.init_default_value(padapter);
+}
+
+void rtw_hal_free_data(_adapter *padapter)
+{
+       if(padapter->HalFunc.free_hal_data)
+               padapter->HalFunc.free_hal_data(padapter);
+}
+
+void rtw_hal_dm_init(_adapter *padapter)
+{
+       if(padapter->HalFunc.dm_init)
+               padapter->HalFunc.dm_init(padapter);
+}
+
+void rtw_hal_dm_deinit(_adapter *padapter)
+{
+       // cancel dm  timer
+       if(padapter->HalFunc.dm_deinit)
+               padapter->HalFunc.dm_deinit(padapter);
+}
+
+void rtw_hal_sw_led_init(_adapter *padapter)
+{
+       if(padapter->HalFunc.InitSwLeds)
+               padapter->HalFunc.InitSwLeds(padapter);
+}
+
+void rtw_hal_sw_led_deinit(_adapter *padapter)
+{
+       if(padapter->HalFunc.DeInitSwLeds)
+               padapter->HalFunc.DeInitSwLeds(padapter);
+}
+
+uint    rtw_hal_init(_adapter *padapter)
+{
+       uint    status = _SUCCESS;
+
+       if(padapter->hw_init_completed == _TRUE)
+       {
+               DBG_871X("rtw_hal_init: hw_init_completed == _TRUE\n");
+               goto success;
+       }
+#ifdef CONFIG_DEINIT_BEFORE_INIT
+       status = padapter->HalFunc.hal_deinit(padapter);
+       if(status != _SUCCESS){
+               DBG_871X("rtw_hal_init: hal_deinit before hal_init FAIL !!\n");
+               goto fail;
+       }
+#endif
+
+#ifdef CONFIG_DUALMAC_CONCURRENT
+       // before init mac0, driver must init mac1 first to avoid usb rx error.
+       if((padapter->pbuddy_adapter != NULL) && (padapter->DualMacConcurrent == _TRUE)
+               && (padapter->adapter_type == PRIMARY_ADAPTER))
+       {
+               if(padapter->pbuddy_adapter->hw_init_completed == _TRUE)
+               {
+                       DBG_871X("rtw_hal_init: pbuddy_adapter hw_init_completed == _TRUE\n");
+               }
+               else
+               {
+#ifdef CONFIG_DEINIT_BEFORE_INIT
+                       status = padapter->HalFunc.hal_deinit(padapter->pbuddy_adapter);
+                       if(status != _SUCCESS){
+                               DBG_871X("rtw_hal_init: hal_deinit before hal_init FAIL !!(pbuddy_adapter)\n");
+                               goto fail;
+                       }
+#endif
+                       status =        padapter->HalFunc.hal_init(padapter->pbuddy_adapter);
+                       if(status == _SUCCESS){
+                               padapter->pbuddy_adapter->hw_init_completed = _TRUE;
+                       }
+                       else{
+                               padapter->pbuddy_adapter->hw_init_completed = _FALSE;
+                               RT_TRACE(_module_hal_init_c_,_drv_err_,("rtw_hal_init: hal__init fail(pbuddy_adapter)\n"));
+                               goto fail;
+                       }
+               }
+       }
+#else
+       if(adapter_to_dvobj(padapter)->DualMacMode == _TRUE)
+       {
+               if(padapter->pbuddy_adapter != NULL) {
+                       if(padapter->pbuddy_adapter->hw_init_completed == _FALSE)
+                       {
+#ifdef CONFIG_DEINIT_BEFORE_INIT
+                               status = padapter->HalFunc.hal_deinit(padapter->pbuddy_adapter);
+                               if(status != _SUCCESS){
+                                       DBG_871X("rtw_hal_init: hal_deinit before hal_init FAIL !!(pbuddy_adapter)\n");
+                                       goto fail;
+                               }
+#endif
+                               status = padapter->HalFunc.hal_init(padapter->pbuddy_adapter);
+                               if(status == _SUCCESS){
+                                       padapter->pbuddy_adapter->hw_init_completed = _TRUE;
+                               }
+                               else{
+                                       padapter->pbuddy_adapter->hw_init_completed = _FALSE;
+                                       RT_TRACE(_module_hal_init_c_,_drv_err_,("rtw_hal_init: hal__init fail for another interface\n"));
+                               }
+                       }
+               }
+       }
+#endif
+
+       padapter->hw_init_completed=_FALSE;
+
+       status = padapter->HalFunc.hal_init(padapter);
+
+       if(status == _SUCCESS){
+               padapter->hw_init_completed = _TRUE;
+       }
+       else{
+               padapter->hw_init_completed = _FALSE;
+               RT_TRACE(_module_hal_init_c_,_drv_err_,("rtw_hal_init: hal__init fail\n"));
+               goto fail;
+       }
+
+success:
+
+       if (padapter->registrypriv.notch_filter == 1)
+               rtw_hal_notch_filter(padapter, 1);
+
+       rtw_hal_reset_security_engine(padapter);
+
+       rtw_sec_restore_wep_key(padapter);
+
+       init_hw_mlme_ext(padapter);
+
+fail:
+
+       RT_TRACE(_module_hal_init_c_,_drv_err_,("-rtl871x_hal_init:status=0x%x\n",status));
+
+       return status;
+}
+
+uint rtw_hal_deinit(_adapter *padapter)
+{
+       uint    status = _SUCCESS;
+
+_func_enter_;
+
+       status = padapter->HalFunc.hal_deinit(padapter);
+
+       if(status == _SUCCESS){
+               padapter->hw_init_completed = _FALSE;
+       }
+       else
+       {
+               RT_TRACE(_module_hal_init_c_,_drv_err_,("\n rtw_hal_deinit: hal_init fail\n"));
+       }
+
+_func_exit_;
+
+       return status;
+}
+
+void rtw_hal_set_hwreg(_adapter *padapter, u8 variable, u8 *val)
+{
+       if (padapter->HalFunc.SetHwRegHandler)
+               padapter->HalFunc.SetHwRegHandler(padapter, variable, val);
+}
+
+void rtw_hal_get_hwreg(_adapter *padapter, u8 variable, u8 *val)
+{
+       if (padapter->HalFunc.GetHwRegHandler)
+               padapter->HalFunc.GetHwRegHandler(padapter, variable, val);
+}
+
+u8 rtw_hal_set_def_var(_adapter *padapter, HAL_DEF_VARIABLE eVariable, PVOID pValue)
+{
+       if(padapter->HalFunc.SetHalDefVarHandler)
+               return padapter->HalFunc.SetHalDefVarHandler(padapter,eVariable,pValue);
+       return _FAIL;
+}
+
+u8 rtw_hal_get_def_var(_adapter *padapter, HAL_DEF_VARIABLE eVariable, PVOID pValue)
+{
+       if(padapter->HalFunc.GetHalDefVarHandler)
+               return padapter->HalFunc.GetHalDefVarHandler(padapter,eVariable,pValue);
+       return _FAIL;
+}
+
+void rtw_hal_enable_interrupt(_adapter *padapter)
+{
+       if (padapter->HalFunc.enable_interrupt)
+               padapter->HalFunc.enable_interrupt(padapter);
+       else
+               DBG_871X("%s: HalFunc.enable_interrupt is NULL!\n", __FUNCTION__);
+
+}
+void rtw_hal_disable_interrupt(_adapter *padapter)
+{
+       if (padapter->HalFunc.disable_interrupt)
+               padapter->HalFunc.disable_interrupt(padapter);
+       else
+               DBG_871X("%s: HalFunc.disable_interrupt is NULL!\n", __FUNCTION__);
+
+}
+
+u32    rtw_hal_inirp_init(_adapter *padapter)
+{
+       u32 rst = _FAIL;
+       if(padapter->HalFunc.inirp_init)
+               rst = padapter->HalFunc.inirp_init(padapter);
+       else
+               DBG_871X(" %s HalFunc.inirp_init is NULL!!!\n",__FUNCTION__);
+       return rst;
+}
+
+u32    rtw_hal_inirp_deinit(_adapter *padapter)
+{
+
+       if(padapter->HalFunc.inirp_deinit)
+               return padapter->HalFunc.inirp_deinit(padapter);
+
+       return _FAIL;
+
+}
+
+u8 rtw_hal_intf_ps_func(_adapter *padapter,HAL_INTF_PS_FUNC efunc_id, u8* val)
+{
+       if(padapter->HalFunc.interface_ps_func)
+               return padapter->HalFunc.interface_ps_func(padapter,efunc_id,val);
+       return _FAIL;
+}
+
+s32    rtw_hal_xmitframe_enqueue(_adapter *padapter, struct xmit_frame *pxmitframe)
+{
+       if(padapter->HalFunc.hal_xmitframe_enqueue)
+               return padapter->HalFunc.hal_xmitframe_enqueue(padapter, pxmitframe);
+
+       return _FALSE;
+}
+
+s32 rtw_hal_xmit(_adapter *padapter, struct xmit_frame *pxmitframe)
+{
+       if(padapter->HalFunc.hal_xmit)
+               return padapter->HalFunc.hal_xmit(padapter, pxmitframe);
+
+       return _FALSE;
+}
+
+s32    rtw_hal_mgnt_xmit(_adapter *padapter, struct xmit_frame *pmgntframe)
+{
+       s32 ret = _FAIL;
+       unsigned char   *pframe;
+       struct rtw_ieee80211_hdr        *pwlanhdr;
+
+       pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+       _rtw_memcpy(pmgntframe->attrib.ra, pwlanhdr->addr1, ETH_ALEN);
+
+#ifdef CONFIG_IEEE80211W
+       if(padapter->securitypriv.binstallBIPkey == _TRUE)
+       {
+               if(IS_MCAST(pmgntframe->attrib.ra))
+               {
+                       pmgntframe->attrib.encrypt = _BIP_;
+                       //pmgntframe->attrib.bswenc = _TRUE;
+               }
+               else
+               {
+                       pmgntframe->attrib.encrypt = _AES_;
+                       pmgntframe->attrib.bswenc = _TRUE;
+               }
+               rtw_mgmt_xmitframe_coalesce(padapter, pmgntframe->pkt, pmgntframe);
+       }
+#endif //CONFIG_IEEE80211W
+
+       if(padapter->HalFunc.mgnt_xmit)
+               ret = padapter->HalFunc.mgnt_xmit(padapter, pmgntframe);
+       return ret;
+}
+
+s32 rtw_hal_init_xmit_priv(_adapter *padapter)
+{
+       if(padapter->HalFunc.init_xmit_priv != NULL)
+               return padapter->HalFunc.init_xmit_priv(padapter);
+       return _FAIL;
+}
+
+void rtw_hal_free_xmit_priv(_adapter *padapter)
+{
+       if(padapter->HalFunc.free_xmit_priv != NULL)
+               padapter->HalFunc.free_xmit_priv(padapter);
+}
+
+s32 rtw_hal_init_recv_priv(_adapter *padapter)
+{
+       if(padapter->HalFunc.init_recv_priv)
+               return padapter->HalFunc.init_recv_priv(padapter);
+
+       return _FAIL;
+}
+
+void rtw_hal_free_recv_priv(_adapter *padapter)
+{
+       if(padapter->HalFunc.free_recv_priv)
+               padapter->HalFunc.free_recv_priv(padapter);
+}
+
+void rtw_hal_update_ra_mask(_adapter *padapter, u32 mac_id)
+{
+       if(padapter->HalFunc.UpdateRAMaskHandler)
+               padapter->HalFunc.UpdateRAMaskHandler(padapter,mac_id);
+}
+
+void rtw_hal_add_ra_tid(_adapter *padapter, u32 bitmap, u8 arg)
+{
+       if(padapter->HalFunc.Add_RateATid)
+               padapter->HalFunc.Add_RateATid(padapter, bitmap, arg);
+}
+
+u32 rtw_hal_read_bbreg(_adapter *padapter, u32 RegAddr, u32 BitMask)
+{
+       u32 data = 0;
+       if (padapter->HalFunc.read_bbreg)
+               data = padapter->HalFunc.read_bbreg(padapter, RegAddr, BitMask);
+       return data;
+}
+
+void rtw_hal_write_bbreg(_adapter *padapter, u32 RegAddr, u32 BitMask, u32 Data)
+{
+       if (padapter->HalFunc.write_bbreg)
+               padapter->HalFunc.write_bbreg(padapter, RegAddr, BitMask, Data);
+}
+
+u32 rtw_hal_read_rfreg(_adapter *padapter, u32 eRFPath, u32 RegAddr, u32 BitMask)
+{
+       u32 data = 0;
+       if (padapter->HalFunc.read_rfreg)
+               data = padapter->HalFunc.read_rfreg(padapter, eRFPath, RegAddr, BitMask);
+       return data;
+}
+
+void rtw_hal_write_rfreg(_adapter *padapter, u32 eRFPath, u32 RegAddr, u32 BitMask, u32 Data)
+{
+       if (padapter->HalFunc.write_rfreg)
+               padapter->HalFunc.write_rfreg(padapter, eRFPath, RegAddr, BitMask, Data);
+}
+
+s32 rtw_hal_interrupt_handler(_adapter *padapter)
+{
+       if(padapter->HalFunc.interrupt_handler)
+               return padapter->HalFunc.interrupt_handler(padapter);
+       return _FAIL;
+}
+
+void rtw_hal_set_bwmode(_adapter *padapter, HT_CHANNEL_WIDTH Bandwidth, u8 Offset)
+{
+       if(padapter->HalFunc.set_bwmode_handler)
+               padapter->HalFunc.set_bwmode_handler(padapter, Bandwidth, Offset);
+}
+
+void rtw_hal_set_chan(_adapter *padapter, u8 channel)
+{
+       if(padapter->HalFunc.set_channel_handler)
+               padapter->HalFunc.set_channel_handler(padapter, channel);
+}
+
+void rtw_hal_dm_watchdog(_adapter *padapter)
+{
+       if(padapter->HalFunc.hal_dm_watchdog)
+               padapter->HalFunc.hal_dm_watchdog(padapter);
+}
+
+void rtw_hal_bcn_related_reg_setting(_adapter *padapter)
+{
+       if(padapter->HalFunc.SetBeaconRelatedRegistersHandler)
+               padapter->HalFunc.SetBeaconRelatedRegistersHandler(padapter);
+}
+
+#ifdef CONFIG_ANTENNA_DIVERSITY
+u8 rtw_hal_antdiv_before_linked(_adapter *padapter)
+{
+       if (padapter->HalFunc.AntDivBeforeLinkHandler)
+               return padapter->HalFunc.AntDivBeforeLinkHandler(padapter);
+       return _FALSE;
+}
+
+void rtw_hal_antdiv_rssi_compared(_adapter *padapter, WLAN_BSSID_EX *dst, WLAN_BSSID_EX *src)
+{
+       if (padapter->HalFunc.AntDivCompareHandler)
+               padapter->HalFunc.AntDivCompareHandler(padapter, dst, src);
+}
+#endif
+
+#ifdef CONFIG_HOSTAPD_MLME
+s32    rtw_hal_hostap_mgnt_xmit_entry(_adapter *padapter, _pkt *pkt)
+{
+       if (padapter->HalFunc.hostap_mgnt_xmit_entry)
+               return padapter->HalFunc.hostap_mgnt_xmit_entry(padapter, pkt);
+       return _FAIL;
+}
+#endif //CONFIG_HOSTAPD_MLME
+
+#ifdef DBG_CONFIG_ERROR_DETECT
+void rtw_hal_sreset_init(_adapter *padapter)
+{
+       if(padapter->HalFunc.sreset_init_value)
+               padapter->HalFunc.sreset_init_value(padapter);
+}
+
+void rtw_hal_sreset_reset(_adapter *padapter)
+{
+       padapter = GET_PRIMARY_ADAPTER(padapter);
+
+       if(padapter->HalFunc.silentreset)
+               padapter->HalFunc.silentreset(padapter);
+}
+
+void rtw_hal_sreset_reset_value(_adapter *padapter)
+{
+       if(padapter->HalFunc.sreset_reset_value)
+               padapter->HalFunc.sreset_reset_value(padapter);
+}
+
+void rtw_hal_sreset_xmit_status_check(_adapter *padapter)
+{
+#ifdef CONFIG_CONCURRENT_MODE
+       if (padapter->adapter_type != PRIMARY_ADAPTER)
+               return;
+#endif
+       if(padapter->HalFunc.sreset_xmit_status_check)
+               padapter->HalFunc.sreset_xmit_status_check(padapter);
+}
+
+void rtw_hal_sreset_linked_status_check(_adapter *padapter)
+{
+       if(padapter->HalFunc.sreset_linked_status_check)
+               padapter->HalFunc.sreset_linked_status_check(padapter);
+}
+
+u8 rtw_hal_sreset_get_wifi_status(_adapter *padapter)
+{
+       u8 status = 0;
+       if(padapter->HalFunc.sreset_get_wifi_status)
+               status = padapter->HalFunc.sreset_get_wifi_status(padapter);
+       return status;
+}
+
+bool rtw_hal_sreset_inprogress(_adapter *padapter)
+{
+       bool inprogress = _FALSE;
+
+       padapter = GET_PRIMARY_ADAPTER(padapter);
+
+       if(padapter->HalFunc.sreset_inprogress)
+               inprogress = padapter->HalFunc.sreset_inprogress(padapter);
+       return inprogress;
+}
+#endif //DBG_CONFIG_ERROR_DETECT
+
+#ifdef CONFIG_IOL
+int rtw_hal_iol_cmd(ADAPTER *adapter, struct xmit_frame *xmit_frame, u32 max_wating_ms)
+{
+       if (adapter->HalFunc.IOL_exec_cmds_sync)
+               return adapter->HalFunc.IOL_exec_cmds_sync(adapter, xmit_frame, max_wating_ms);
+       return _FAIL;
+}
+#endif
+
+void rtw_hal_notch_filter(_adapter *adapter, bool enable)
+{
+       if(adapter->HalFunc.hal_notch_filter)
+               adapter->HalFunc.hal_notch_filter(adapter,enable);
+}
+
+void rtw_hal_reset_security_engine(_adapter * adapter)
+{
+       if(adapter->HalFunc.hal_reset_security_engine)
+               adapter->HalFunc.hal_reset_security_engine(adapter);
+}
+
+s32 rtw_hal_c2h_handler(_adapter *adapter, struct c2h_evt_hdr *c2h_evt)
+{
+       s32 ret = _FAIL;
+       if (adapter->HalFunc.c2h_handler)
+               ret = adapter->HalFunc.c2h_handler(adapter, c2h_evt);
+       return ret;
+}
+
+c2h_id_filter rtw_hal_c2h_id_filter_ccx(_adapter *adapter)
+{
+       return adapter->HalFunc.c2h_id_filter_ccx;
+}
diff --git a/drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/rtl8192c_cmd.c b/drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/rtl8192c_cmd.c
new file mode 100644 (file)
index 0000000..27e8d54
--- /dev/null
@@ -0,0 +1,1154 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#define _RTL8192C_CMD_C_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <recv_osdep.h>
+#include <cmd_osdep.h>
+#include <mlme_osdep.h>
+#include <rtw_byteorder.h>
+#include <circ_buf.h>
+#include <rtw_ioctl_set.h>
+
+#include <rtl8192c_hal.h>
+
+
+#define RTL92C_MAX_H2C_BOX_NUMS        4
+#define RTL92C_MAX_CMD_LEN     5
+#define MESSAGE_BOX_SIZE               4
+#define EX_MESSAGE_BOX_SIZE    2
+
+static u8 _is_fw_read_cmd_down(_adapter* padapter, u8 msgbox_num)
+{
+       u8      read_down = _FALSE;
+       int     retry_cnts = 100;
+
+       u8 valid;
+
+//     DBG_8192C(" _is_fw_read_cmd_down ,isnormal_chip(%x),reg_1cc(%x),msg_box(%d)...\n",isvern,rtw_read8(padapter,REG_HMETFR),msgbox_num);
+
+       do{
+               valid = rtw_read8(padapter,REG_HMETFR) & BIT(msgbox_num);
+               if(0 == valid ){
+                       read_down = _TRUE;
+               }
+       }while( (!read_down) && (retry_cnts--));
+
+       return read_down;
+
+}
+
+
+/*****************************************
+* H2C Msg format :
+*| 31 - 8              |7              | 6 - 0 |
+*| h2c_msg     |Ext_bit        |CMD_ID |
+*
+******************************************/
+int rtl8192c_FillH2CCmd(_adapter* padapter, u8 ElementID, u32 CmdLen, u8* pCmdBuffer)
+{
+       u8      bcmd_down = _FALSE;
+       int     retry_cnts = 100;
+       u8      h2c_box_num;
+       u32     msgbox_addr;
+       u32  msgbox_ex_addr;
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
+       u32     h2c_cmd = 0;
+       u16     h2c_cmd_ex = 0;
+       int ret = _FAIL;
+
+_func_enter_;
+
+       padapter = GET_PRIMARY_ADAPTER(padapter);
+       pHalData = GET_HAL_DATA(padapter);
+
+       if(padapter->bFWReady == _FALSE)
+       {
+               DBG_8192C("FillH2CCmd(): return H2C cmd because fw is not ready\n");
+               return ret;
+       }
+
+       _enter_critical_mutex(&(adapter_to_dvobj(padapter)->h2c_fwcmd_mutex), NULL);
+
+       if(!pCmdBuffer){
+               goto exit;
+       }
+       if(CmdLen > RTL92C_MAX_CMD_LEN){
+               goto exit;
+       }
+       //pay attention to if  race condition happened in  H2C cmd setting.
+       do{
+               h2c_box_num = pHalData->LastHMEBoxNum;
+
+               if(!_is_fw_read_cmd_down(padapter, h2c_box_num)){
+                       DBG_8192C(" fw read cmd failed...\n");
+                       goto exit;
+               }
+
+               if(CmdLen<=3)
+               {
+                       _rtw_memcpy((u8*)(&h2c_cmd)+1, pCmdBuffer, CmdLen );
+               }
+               else{
+                       _rtw_memcpy((u8*)(&h2c_cmd_ex), pCmdBuffer, EX_MESSAGE_BOX_SIZE);
+                       _rtw_memcpy((u8*)(&h2c_cmd)+1, pCmdBuffer+2,( CmdLen-EX_MESSAGE_BOX_SIZE));
+                       *(u8*)(&h2c_cmd) |= BIT(7);
+               }
+
+               *(u8*)(&h2c_cmd) |= ElementID;
+
+               if(h2c_cmd & BIT(7)){
+                       msgbox_ex_addr = REG_HMEBOX_EXT_0 + (h2c_box_num *EX_MESSAGE_BOX_SIZE);
+                       h2c_cmd_ex = cpu_to_le16( h2c_cmd_ex );
+                       rtw_write16(padapter, msgbox_ex_addr, h2c_cmd_ex);
+               }
+               msgbox_addr =REG_HMEBOX_0 + (h2c_box_num *MESSAGE_BOX_SIZE);
+               h2c_cmd = cpu_to_le32( h2c_cmd );
+               rtw_write32(padapter,msgbox_addr, h2c_cmd);
+
+               bcmd_down = _TRUE;
+
+       //      DBG_8192C("MSG_BOX:%d,CmdLen(%d), reg:0x%x =>h2c_cmd:0x%x, reg:0x%x =>h2c_cmd_ex:0x%x ..\n"
+       //              ,pHalData->LastHMEBoxNum ,CmdLen,msgbox_addr,h2c_cmd,msgbox_ex_addr,h2c_cmd_ex);
+
+                pHalData->LastHMEBoxNum = (h2c_box_num+1) % RTL92C_MAX_H2C_BOX_NUMS ;
+
+       }while((!bcmd_down) && (retry_cnts--));
+/*
+       if(bcmd_down)
+               DBG_8192C("H2C Cmd exe down. \n"        );
+       else
+               DBG_8192C("H2C Cmd exe failed. \n"      );
+*/
+       ret = _SUCCESS;
+
+exit:
+
+       _exit_critical_mutex(&(adapter_to_dvobj(padapter)->h2c_fwcmd_mutex), NULL);
+
+_func_exit_;
+
+       return ret;
+
+}
+
+u8 rtl8192c_h2c_msg_hdl(_adapter *padapter, unsigned char *pbuf)
+{
+       u8 ElementID, CmdLen;
+       u8 *pCmdBuffer;
+       struct cmd_msg_parm  *pcmdmsg;
+
+       if(!pbuf)
+               return H2C_PARAMETERS_ERROR;
+
+       pcmdmsg = (struct cmd_msg_parm*)pbuf;
+       ElementID = pcmdmsg->eid;
+       CmdLen = pcmdmsg->sz;
+       pCmdBuffer = pcmdmsg->buf;
+
+       rtl8192c_FillH2CCmd(padapter, ElementID, CmdLen, pCmdBuffer);
+
+       return H2C_SUCCESS;
+}
+
+#if defined(CONFIG_AUTOSUSPEND) && defined(SUPPORT_HW_RFOFF_DETECTED)
+u8 rtl8192c_set_FwSelectSuspend_cmd(_adapter *padapter ,u8 bfwpoll, u16 period)
+{
+       u8      res=_SUCCESS;
+       struct H2C_SS_RFOFF_PARAM param;
+       DBG_8192C("==>%s bfwpoll(%x)\n",__FUNCTION__,bfwpoll);
+       param.gpio_period = period;//Polling GPIO_11 period time
+       param.ROFOn = (_TRUE == bfwpoll)?1:0;
+       rtl8192c_FillH2CCmd(padapter, SELECTIVE_SUSPEND_ROF_CMD, sizeof(param), (u8*)(&param));
+       return res;
+}
+#endif //CONFIG_AUTOSUSPEND && SUPPORT_HW_RFOFF_DETECTED
+
+u8 rtl8192c_set_rssi_cmd(_adapter*padapter, u8 *param)
+{
+       u8      res=_SUCCESS;
+
+_func_enter_;
+
+       *((u32*) param ) = cpu_to_le32( *((u32*) param ) );
+
+       rtl8192c_FillH2CCmd(padapter, RSSI_SETTING_EID, 3, param);
+
+_func_exit_;
+
+       return res;
+}
+
+u8 rtl8192c_set_raid_cmd(_adapter*padapter, u32 mask, u8 arg)
+{
+       u8      buf[5];
+       u8      res=_SUCCESS;
+
+_func_enter_;
+
+       _rtw_memset(buf, 0, 5);
+       mask = cpu_to_le32( mask );
+       _rtw_memcpy(buf, &mask, 4);
+       buf[4]  = arg;
+
+       rtl8192c_FillH2CCmd(padapter, MACID_CONFIG_EID, 5, buf);
+
+_func_exit_;
+
+       return res;
+
+}
+
+//bitmap[0:27] = tx_rate_bitmap
+//bitmap[28:31]= Rate Adaptive id
+//arg[0:4] = macid
+//arg[5] = Short GI
+void rtl8192c_Add_RateATid(PADAPTER pAdapter, u32 bitmap, u8 arg)
+{
+
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(pAdapter);
+
+       if(pHalData->fw_ractrl == _TRUE)
+       {
+               rtl8192c_set_raid_cmd(pAdapter, bitmap, arg);
+       }
+       else
+       {
+               u8 macid, init_rate, shortGIrate=_FALSE;
+
+               init_rate = get_highest_rate_idx(bitmap&0x0fffffff)&0x3f;
+
+               macid = arg&0x1f;
+
+               shortGIrate = (arg&BIT(5)) ? _TRUE:_FALSE;
+
+               if (shortGIrate==_TRUE)
+                       init_rate |= BIT(6);
+
+               rtw_write8(pAdapter, (REG_INIDATA_RATE_SEL+macid), (u8)init_rate);
+       }
+
+}
+
+void rtl8192c_set_FwPwrMode_cmd(_adapter*padapter, u8 Mode)
+{
+       SETPWRMODE_PARM H2CSetPwrMode;
+       struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
+
+_func_enter_;
+
+       DBG_871X("%s(): Mode = %d, SmartPS = %d\n", __FUNCTION__,Mode,pwrpriv->smart_ps);
+
+       H2CSetPwrMode.Mode = Mode;
+
+       H2CSetPwrMode.SmartPS = pwrpriv->smart_ps;
+
+       H2CSetPwrMode.BcnPassTime = 1;//pPSC->RegMaxLPSAwakeIntvl;
+
+       rtl8192c_FillH2CCmd(padapter, SET_PWRMODE_EID, sizeof(H2CSetPwrMode), (u8 *)&H2CSetPwrMode);
+
+_func_exit_;
+}
+
+void ConstructBeacon(_adapter *padapter, u8 *pframe, u32 *pLength)
+{
+       struct rtw_ieee80211_hdr        *pwlanhdr;
+       u16                                     *fctrl;
+       u32                                     rate_len, pktlen;
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       WLAN_BSSID_EX           *cur_network = &(pmlmeinfo->network);
+       u8      bc_addr[] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
+
+
+       //DBG_871X("%s\n", __FUNCTION__);
+
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+
+       fctrl = &(pwlanhdr->frame_ctl);
+       *(fctrl) = 0;
+
+       _rtw_memcpy(pwlanhdr->addr1, bc_addr, ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr3, get_my_bssid(cur_network), ETH_ALEN);
+
+       SetSeqNum(pwlanhdr, 0/*pmlmeext->mgnt_seq*/);
+       //pmlmeext->mgnt_seq++;
+       SetFrameSubType(pframe, WIFI_BEACON);
+
+       pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
+       pktlen = sizeof (struct rtw_ieee80211_hdr_3addr);
+
+       //timestamp will be inserted by hardware
+       pframe += 8;
+       pktlen += 8;
+
+       // beacon interval: 2 bytes
+       _rtw_memcpy(pframe, (unsigned char *)(rtw_get_beacon_interval_from_ie(cur_network->IEs)), 2);
+
+       pframe += 2;
+       pktlen += 2;
+
+       // capability info: 2 bytes
+       _rtw_memcpy(pframe, (unsigned char *)(rtw_get_capability_from_ie(cur_network->IEs)), 2);
+
+       pframe += 2;
+       pktlen += 2;
+
+       if( (pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE)
+       {
+               //DBG_871X("ie len=%d\n", cur_network->IELength);
+               pktlen += cur_network->IELength - sizeof(NDIS_802_11_FIXED_IEs);
+               _rtw_memcpy(pframe, cur_network->IEs+sizeof(NDIS_802_11_FIXED_IEs), pktlen);
+
+               goto _ConstructBeacon;
+       }
+
+       //below for ad-hoc mode
+
+       // SSID
+       pframe = rtw_set_ie(pframe, _SSID_IE_, cur_network->Ssid.SsidLength, cur_network->Ssid.Ssid, &pktlen);
+
+       // supported rates...
+       rate_len = rtw_get_rateset_len(cur_network->SupportedRates);
+       pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_, ((rate_len > 8)? 8: rate_len), cur_network->SupportedRates, &pktlen);
+
+       // DS parameter set
+       pframe = rtw_set_ie(pframe, _DSSET_IE_, 1, (unsigned char *)&(cur_network->Configuration.DSConfig), &pktlen);
+
+       if( (pmlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE)
+       {
+               u32 ATIMWindow;
+               // IBSS Parameter Set...
+               //ATIMWindow = cur->Configuration.ATIMWindow;
+               ATIMWindow = 0;
+               pframe = rtw_set_ie(pframe, _IBSS_PARA_IE_, 2, (unsigned char *)(&ATIMWindow), &pktlen);
+       }
+
+
+       //todo: ERP IE
+
+
+       // EXTERNDED SUPPORTED RATE
+       if (rate_len > 8)
+       {
+               pframe = rtw_set_ie(pframe, _EXT_SUPPORTEDRATES_IE_, (rate_len - 8), (cur_network->SupportedRates + 8), &pktlen);
+       }
+
+
+       //todo:HT for adhoc
+
+_ConstructBeacon:
+
+       if ((pktlen + TXDESC_SIZE) > 512)
+       {
+               DBG_871X("beacon frame too large\n");
+               return;
+       }
+
+       *pLength = pktlen;
+
+       //DBG_871X("%s bcn_sz=%d\n", __FUNCTION__, pktlen);
+
+}
+
+void ConstructPSPoll(_adapter *padapter, u8 *pframe, u32 *pLength)
+{
+       struct rtw_ieee80211_hdr        *pwlanhdr;
+       u16                                     *fctrl;
+       u32                                     pktlen;
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       //DBG_871X("%s\n", __FUNCTION__);
+
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+
+       // Frame control.
+       fctrl = &(pwlanhdr->frame_ctl);
+       *(fctrl) = 0;
+       SetPwrMgt(fctrl);
+       SetFrameSubType(pframe, WIFI_PSPOLL);
+
+       // AID.
+       SetDuration(pframe, (pmlmeinfo->aid | 0xc000));
+
+       // BSSID.
+       _rtw_memcpy(pwlanhdr->addr1, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
+
+       // TA.
+       _rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
+
+       *pLength = 16;
+}
+
+void ConstructNullFunctionData(_adapter *padapter, u8 *pframe, u32 *pLength, u8 *StaAddr, BOOLEAN bForcePowerSave)
+{
+       struct rtw_ieee80211_hdr        *pwlanhdr;
+       u16                                     *fctrl;
+       u32                                     pktlen;
+       struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
+       struct wlan_network     *cur_network = &pmlmepriv->cur_network;
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       //DBG_871X("%s:%d\n", __FUNCTION__, bForcePowerSave);
+
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+
+       fctrl = &(pwlanhdr->frame_ctl);
+       *(fctrl) = 0;
+       if (bForcePowerSave)
+       {
+               SetPwrMgt(fctrl);
+       }
+
+       switch(cur_network->network.InfrastructureMode)
+       {
+               case Ndis802_11Infrastructure:
+                       SetToDs(fctrl);
+                       _rtw_memcpy(pwlanhdr->addr1, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
+                       _rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
+                       _rtw_memcpy(pwlanhdr->addr3, StaAddr, ETH_ALEN);
+                       break;
+               case Ndis802_11APMode:
+                       SetFrDs(fctrl);
+                       _rtw_memcpy(pwlanhdr->addr1, StaAddr, ETH_ALEN);
+                       _rtw_memcpy(pwlanhdr->addr2, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
+                       _rtw_memcpy(pwlanhdr->addr3, myid(&(padapter->eeprompriv)), ETH_ALEN);
+                       break;
+               case Ndis802_11IBSS:
+               default:
+                       _rtw_memcpy(pwlanhdr->addr1, StaAddr, ETH_ALEN);
+                       _rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
+                       _rtw_memcpy(pwlanhdr->addr3, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
+                       break;
+       }
+
+       SetSeqNum(pwlanhdr, 0);
+
+       SetFrameSubType(pframe, WIFI_DATA_NULL);
+
+       pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
+       pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
+
+       *pLength = pktlen;
+}
+
+void ConstructProbeRsp(_adapter *padapter, u8 *pframe, u32 *pLength, u8 *StaAddr, BOOLEAN bHideSSID)
+{
+       struct rtw_ieee80211_hdr        *pwlanhdr;
+       u16                                     *fctrl;
+       u8                                      *mac, *bssid;
+       u32                                     pktlen;
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       WLAN_BSSID_EX           *cur_network = &(pmlmeinfo->network);
+
+
+       //DBG_871X("%s\n", __FUNCTION__);
+
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+
+       mac = myid(&(padapter->eeprompriv));
+       bssid = cur_network->MacAddress;
+
+       fctrl = &(pwlanhdr->frame_ctl);
+       *(fctrl) = 0;
+       _rtw_memcpy(pwlanhdr->addr1, StaAddr, ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr2, mac, ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr3, bssid, ETH_ALEN);
+
+       SetSeqNum(pwlanhdr, 0);
+       SetFrameSubType(fctrl, WIFI_PROBERSP);
+
+       pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
+       pframe += pktlen;
+
+       if(cur_network->IELength>MAX_IE_SZ)
+               return;
+
+       _rtw_memcpy(pframe, cur_network->IEs, cur_network->IELength);
+       pframe += cur_network->IELength;
+       pktlen += cur_network->IELength;
+
+       *pLength = pktlen;
+}
+
+//
+// Description: In normal chip, we should send some packet to Hw which will be used by Fw
+//                     in FW LPS mode. The function is to fill the Tx descriptor of this packets, then
+//                     Fw can tell Hw to send these packet derectly.
+// Added by tynli. 2009.10.15.
+//
+static VOID
+FillFakeTxDescriptor92C(
+       IN PADAPTER             Adapter,
+       IN u8*                  pDesc,
+       IN u32                  BufferLen,
+       IN BOOLEAN              IsPsPoll
+)
+{
+       struct tx_desc  *ptxdesc = (struct tx_desc *)pDesc;
+
+       // Clear all status
+       _rtw_memset(pDesc, 0, 32);
+
+       //offset 0
+       ptxdesc->txdw0 |= cpu_to_le32( OWN | FSG | LSG); //own, bFirstSeg, bLastSeg;
+
+       ptxdesc->txdw0 |= cpu_to_le32(((TXDESC_SIZE+OFFSET_SZ)<<OFFSET_SHT)&0x00ff0000); //32 bytes for TX Desc
+
+       ptxdesc->txdw0 |= cpu_to_le32(BufferLen&0x0000ffff); // Buffer size + command header
+
+       //offset 4
+       ptxdesc->txdw1 |= cpu_to_le32((QSLT_MGNT<<QSEL_SHT)&0x00001f00); // Fixed queue of Mgnt queue
+
+       //Set NAVUSEHDR to prevent Ps-poll AId filed to be changed to error vlaue by Hw.
+       if(IsPsPoll)
+       {
+               ptxdesc->txdw1 |= cpu_to_le32(NAVUSEHDR);
+       }
+       else
+       {
+               ptxdesc->txdw4 |= cpu_to_le32(BIT(7)); // Hw set sequence number
+               ptxdesc->txdw3 |= cpu_to_le32((8 <<28)); //set bit3 to 1. Suugested by TimChen. 2009.12.29.
+       }
+
+       //offset 16
+       ptxdesc->txdw4 |= cpu_to_le32(BIT(8));//driver uses rate
+
+#ifdef CONFIG_USB_HCI
+       // USB interface drop packet if the checksum of descriptor isn't correct.
+       // Using this checksum can let hardware recovery from packet bulk out error (e.g. Cancel URC, Bulk out error.).
+       rtl8192cu_cal_txdesc_chksum(ptxdesc);
+#endif
+
+       //RT_PRINT_DATA(COMP_CMD, DBG_TRACE, "TxFillCmdDesc8192C(): H2C Tx Cmd Content ----->\n", pDesc, TX_DESC_SIZE);
+}
+
+// To check if reserved page content is destroyed by beacon beacuse beacon is too large.
+// 2010.06.23. Added by tynli.
+VOID
+CheckFwRsvdPageContent(
+       IN      PADAPTER                Adapter
+)
+{
+       HAL_DATA_TYPE*  pHalData = GET_HAL_DATA(Adapter);
+       u32     MaxBcnPageNum;
+
+       if(pHalData->FwRsvdPageStartOffset != 0)
+       {
+               /*MaxBcnPageNum = PageNum_128(pMgntInfo->MaxBeaconSize);
+               RT_ASSERT((MaxBcnPageNum <= pHalData->FwRsvdPageStartOffset),
+                       ("CheckFwRsvdPageContent(): The reserved page content has been"\
+                       "destroyed by beacon!!! MaxBcnPageNum(%d) FwRsvdPageStartOffset(%d)\n!",
+                       MaxBcnPageNum, pHalData->FwRsvdPageStartOffset));*/
+       }
+}
+
+//
+// Description: Fill the reserved packets that FW will use to RSVD page.
+//                     Now we just send 4 types packet to rsvd page.
+//                     (1)Beacon, (2)Ps-poll, (3)Null data, (4)ProbeRsp.
+//     Input:
+//         bDLFinished - FALSE: At the first time we will send all the packets as a large packet to Hw,
+//                                             so we need to set the packet length to total lengh.
+//                           TRUE: At the second time, we should send the first packet (default:beacon)
+//                                             to Hw again and set the lengh in descriptor to the real beacon lengh.
+// 2009.10.15 by tynli.
+static void SetFwRsvdPagePkt(PADAPTER Adapter, BOOLEAN bDLFinished)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       struct xmit_frame       *pmgntframe;
+       struct pkt_attrib       *pattrib;
+       struct xmit_priv        *pxmitpriv = &(Adapter->xmitpriv);
+       struct mlme_ext_priv    *pmlmeext = &(Adapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       u32     BeaconLength, ProbeRspLength, PSPollLength, NullFunctionDataLength;
+       u8      *ReservedPagePacket;
+       u8      PageNum=0, U1bTmp, TxDescLen=0, TxDescOffset=0;
+       u16     BufIndex=0;
+       u32     TotalPacketLen;
+       RSVDPAGE_LOC    RsvdPageLoc;
+       BOOLEAN bDLOK = _FALSE;
+
+       DBG_871X("%s\n", __FUNCTION__);
+
+       ReservedPagePacket = (u8*)rtw_malloc(1000);
+       if(ReservedPagePacket == NULL){
+               DBG_871X("%s(): alloc ReservedPagePacket fail !!!\n", __FUNCTION__);
+               return;
+       }
+
+       _rtw_memset(ReservedPagePacket, 0, 1000);
+
+       TxDescLen = 32;//TX_DESC_SIZE;
+
+#ifdef CONFIG_USB_HCI
+       BufIndex = TXDESC_OFFSET;
+       TxDescOffset = TxDescLen+8; //Shift index for 8 bytes because the dummy bytes in the first descipstor.
+#else
+       BufIndex = 0;
+       TxDescOffset = 0;
+#endif
+
+       //(1) beacon
+       ConstructBeacon(Adapter,&ReservedPagePacket[BufIndex],&BeaconLength);
+
+       //DBG_8192C("SetFwRsvdPagePkt(): HW_VAR_SET_TX_CMD: BCN\n", &ReservedPagePacket[BufIndex], (BeaconLength+BufIndex));
+
+//--------------------------------------------------------------------
+
+       // When we count the first page size, we need to reserve description size for the RSVD
+       // packet, it will be filled in front of the packet in TXPKTBUF.
+       U1bTmp = (u8)PageNum_128(BeaconLength+TxDescLen);
+       PageNum += U1bTmp;
+       // To reserved 2 pages for beacon buffer. 2010.06.24.
+       if(PageNum == 1)
+               PageNum+=1;
+       pHalData->FwRsvdPageStartOffset = PageNum;
+
+       BufIndex = (PageNum*128) + TxDescOffset;
+
+       //(2) ps-poll
+       ConstructPSPoll(Adapter, &ReservedPagePacket[BufIndex],&PSPollLength);
+
+       FillFakeTxDescriptor92C(Adapter, &ReservedPagePacket[BufIndex-TxDescLen], PSPollLength, _TRUE);
+
+       //DBG_8192C("SetFwRsvdPagePkt(): HW_VAR_SET_TX_CMD: PS-POLL\n", &ReservedPagePacket[BufIndex-TxDescLen], (PSPollLength+TxDescLen));
+
+       RsvdPageLoc.LocPsPoll = PageNum;
+
+//------------------------------------------------------------------
+
+       U1bTmp = (u8)PageNum_128(PSPollLength+TxDescLen);
+       PageNum += U1bTmp;
+
+       BufIndex = (PageNum*128) + TxDescOffset;
+
+       //(3) null data
+       ConstructNullFunctionData(
+               Adapter,
+               &ReservedPagePacket[BufIndex],
+               &NullFunctionDataLength,
+               get_my_bssid(&(pmlmeinfo->network)),
+               _FALSE);
+
+       FillFakeTxDescriptor92C(Adapter, &ReservedPagePacket[BufIndex-TxDescLen], NullFunctionDataLength, _FALSE);
+
+       RsvdPageLoc.LocNullData = PageNum;
+
+       //DBG_8192C("SetFwRsvdPagePkt(): HW_VAR_SET_TX_CMD: NULL DATA \n", &ReservedPagePacket[BufIndex-TxDescLen], (NullFunctionDataLength+TxDescLen));
+//------------------------------------------------------------------
+
+       U1bTmp = (u8)PageNum_128(NullFunctionDataLength+TxDescLen);
+       PageNum += U1bTmp;
+
+       BufIndex = (PageNum*128) + TxDescOffset;
+
+       //(4) probe response
+       ConstructProbeRsp(
+               Adapter,
+               &ReservedPagePacket[BufIndex],
+               &ProbeRspLength,
+               get_my_bssid(&(pmlmeinfo->network)),
+               _FALSE);
+
+       FillFakeTxDescriptor92C(Adapter, &ReservedPagePacket[BufIndex-TxDescLen], ProbeRspLength, _FALSE);
+
+       RsvdPageLoc.LocProbeRsp = PageNum;
+
+       //DBG_8192C("SetFwRsvdPagePkt(): HW_VAR_SET_TX_CMD: PROBE RSP \n", &ReservedPagePacket[BufIndex-TxDescLen], (ProbeRspLength-TxDescLen));
+
+//------------------------------------------------------------------
+
+       U1bTmp = (u8)PageNum_128(ProbeRspLength+TxDescLen);
+
+       PageNum += U1bTmp;
+
+       TotalPacketLen = (PageNum*128);
+
+       if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+       {
+               return;
+       }
+
+       //update attribute
+       pattrib = &pmgntframe->attrib;
+       update_mgntframe_attrib(Adapter, pattrib);
+       pattrib->qsel = 0x10;
+       pattrib->pktlen = pattrib->last_txcmdsz = TotalPacketLen - TxDescLen;
+       _rtw_memcpy(pmgntframe->buf_addr, ReservedPagePacket, TotalPacketLen);
+
+       rtw_hal_mgnt_xmit(Adapter, pmgntframe);
+
+       bDLOK = _TRUE;
+
+       if(bDLOK)
+       {
+               DBG_871X("Set RSVD page location to Fw.\n");
+               rtl8192c_FillH2CCmd(Adapter, RSVD_PAGE_EID, sizeof(RsvdPageLoc), (u8 *)&RsvdPageLoc);
+       }
+
+       rtw_mfree(ReservedPagePacket,1000);
+
+}
+
+void rtl8192c_set_FwJoinBssReport_cmd(_adapter* padapter, u8 mstatus)
+{
+       JOINBSSRPT_PARM JoinBssRptParm;
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+_func_enter_;
+
+       DBG_871X("%s mstatus(%x)\n", __FUNCTION__,mstatus);
+
+       if(mstatus == 1)
+       {
+               BOOLEAN bRecover = _FALSE;
+
+               // We should set AID, correct TSF, HW seq enable before set JoinBssReport to Fw in 88/92C.
+               // Suggested by filen. Added by tynli.
+               rtw_write16(padapter, REG_BCN_PSR_RPT, (0xC000|pmlmeinfo->aid));
+               // Do not set TSF again here or vWiFi beacon DMA INT will not work.
+               //correct_TSF(padapter, pmlmeext);
+               // Hw sequende enable by dedault. 2010.06.23. by tynli.
+               //rtw_write16(padapter, REG_NQOS_SEQ, ((pmlmeext->mgnt_seq+100)&0xFFF));
+               //rtw_write8(padapter, REG_HWSEQ_CTRL, 0xFF);
+
+               //set REG_CR bit 8
+               //U1bTmp = rtw_read8(padapter, REG_CR+1);
+               rtw_write8(padapter,  REG_CR+1, 0x03);
+
+               // Disable Hw protection for a time which revserd for Hw sending beacon.
+               // Fix download reserved page packet fail that access collision with the protection time.
+               // 2010.05.11. Added by tynli.
+               //SetBcnCtrlReg(padapter, 0, BIT3);
+               //SetBcnCtrlReg(padapter, BIT4, 0);
+               rtw_write8(padapter, REG_BCN_CTRL, rtw_read8(padapter, REG_BCN_CTRL)&(~BIT(3)));
+               rtw_write8(padapter, REG_BCN_CTRL, rtw_read8(padapter, REG_BCN_CTRL)|BIT(4));
+
+               // Set FWHW_TXQ_CTRL 0x422[6]=0 to tell Hw the packet is not a real beacon frame.
+               if(pHalData->RegFwHwTxQCtrl&BIT6)
+                       bRecover = _TRUE;
+
+               // To tell Hw the packet is not a real beacon frame.
+               //U1bTmp = rtw_read8(padapter, REG_FWHW_TXQ_CTRL+2);
+               rtw_write8(padapter, REG_FWHW_TXQ_CTRL+2, (pHalData->RegFwHwTxQCtrl&(~BIT6)));
+               pHalData->RegFwHwTxQCtrl &= (~BIT6);
+               SetFwRsvdPagePkt(padapter, 0);
+
+               // 2010.05.11. Added by tynli.
+               //SetBcnCtrlReg(padapter, BIT3, 0);
+               //SetBcnCtrlReg(padapter, 0, BIT4);
+               rtw_write8(padapter, REG_BCN_CTRL, rtw_read8(padapter, REG_BCN_CTRL)|BIT(3));
+               rtw_write8(padapter, REG_BCN_CTRL, rtw_read8(padapter, REG_BCN_CTRL)&(~BIT(4)));
+
+               // To make sure that if there exists an adapter which would like to send beacon.
+               // If exists, the origianl value of 0x422[6] will be 1, we should check this to
+               // prevent from setting 0x422[6] to 0 after download reserved page, or it will cause
+               // the beacon cannot be sent by HW.
+               // 2010.06.23. Added by tynli.
+               if(bRecover)
+               {
+                       rtw_write8(padapter, REG_FWHW_TXQ_CTRL+2, (pHalData->RegFwHwTxQCtrl|BIT6));
+                       pHalData->RegFwHwTxQCtrl |= BIT6;
+               }
+
+               // Clear CR[8] or beacon packet will not be send to TxBuf anymore.
+               rtw_write8(padapter, REG_CR+1, 0x02);
+       }
+
+       JoinBssRptParm.OpMode = mstatus;
+
+       rtl8192c_FillH2CCmd(padapter, JOINBSS_RPT_EID, sizeof(JoinBssRptParm), (u8 *)&JoinBssRptParm);
+
+_func_exit_;
+}
+
+#ifdef CONFIG_P2P_PS
+void rtl8192c_set_p2p_ctw_period_cmd(_adapter* padapter, u8 ctwindow)
+{
+       struct P2P_PS_CTWPeriod_t p2p_ps_ctw;
+
+       p2p_ps_ctw.CTWPeriod = ctwindow;
+
+       rtl8192c_FillH2CCmd(padapter, P2P_PS_CTW_CMD_EID, 1, (u8 *)(&p2p_ps_ctw));
+
+}
+
+void rtl8192c_set_p2p_ps_offload_cmd(_adapter* padapter, u8 p2p_ps_state)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
+       struct pwrctrl_priv             *pwrpriv = &padapter->pwrctrlpriv;
+       struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
+       struct P2P_PS_Offload_t *p2p_ps_offload = &pHalData->p2p_ps_offload;
+       u8      i;
+       u16     ctwindow;
+       u32     start_time, tsf_low;
+
+_func_enter_;
+
+       switch(p2p_ps_state)
+       {
+               case P2P_PS_DISABLE:
+                       DBG_8192C("P2P_PS_DISABLE \n");
+                       _rtw_memset(p2p_ps_offload, 0 ,1);
+                       break;
+               case P2P_PS_ENABLE:
+                       DBG_8192C("P2P_PS_ENABLE \n");
+                       // update CTWindow value.
+                       if( pwdinfo->ctwindow > 0 )
+                       {
+                               p2p_ps_offload->CTWindow_En = 1;
+                               ctwindow = pwdinfo->ctwindow;
+                               if(IS_HARDWARE_TYPE_8723A(padapter))
+                               {
+                                       //rtw_write16(padapter, REG_ATIMWND, ctwindow);
+                               }
+                               else
+                               {
+                                       rtl8192c_set_p2p_ctw_period_cmd(padapter, ctwindow);
+                               }
+                       }
+
+                       // hw only support 2 set of NoA
+                       for( i=0 ; i<pwdinfo->noa_num ; i++)
+                       {
+                               // To control the register setting for which NOA
+                               rtw_write8(padapter, 0x5CF, (i << 4));
+                               if(i == 0)
+                                       p2p_ps_offload->NoA0_En = 1;
+                               else
+                                       p2p_ps_offload->NoA1_En = 1;
+
+                               // config P2P NoA Descriptor Register
+                               rtw_write32(padapter, 0x5E0, pwdinfo->noa_duration[i]);
+
+                               rtw_write32(padapter, 0x5E4, pwdinfo->noa_interval[i]);
+
+                               //Get Current \14TSF value
+                               tsf_low = rtw_read32(padapter, REG_TSFTR);
+
+                               start_time = pwdinfo->noa_start_time[i];
+                               if(pwdinfo->noa_count[i] != 1)
+                               {
+                                       while( start_time <= (tsf_low+(50*1024) ) )
+                                       {
+                                               start_time += pwdinfo->noa_interval[i];
+                                               if(pwdinfo->noa_count[i] != 255)
+                                                       pwdinfo->noa_count[i]--;
+                                       }
+                               }
+                               //DBG_8192C("%s(): start_time = %x\n",__FUNCTION__,start_time);
+                               rtw_write32(padapter, 0x5E8, start_time);
+
+                               rtw_write8(padapter, 0x5EC, pwdinfo->noa_count[i]);
+                       }
+
+                       if( (pwdinfo->opp_ps == 1) || (pwdinfo->noa_num > 0) )
+                       {
+                               // rst p2p circuit
+                               rtw_write8(padapter, REG_DUAL_TSF_RST, BIT(4));
+
+                               p2p_ps_offload->Offload_En = 1;
+
+                               if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
+                               {
+                                       p2p_ps_offload->role= 1;
+                                       p2p_ps_offload->AllStaSleep = 0;
+                               }
+                               else
+                               {
+                                       p2p_ps_offload->role= 0;
+                               }
+
+                               p2p_ps_offload->discovery = 0;
+                       }
+                       break;
+               case P2P_PS_SCAN:
+                       DBG_8192C("P2P_PS_SCAN \n");
+                       p2p_ps_offload->discovery = 1;
+                       break;
+               case P2P_PS_SCAN_DONE:
+                       DBG_8192C("P2P_PS_SCAN_DONE \n");
+                       p2p_ps_offload->discovery = 0;
+                       pwdinfo->p2p_ps_state = P2P_PS_ENABLE;
+                       break;
+               default:
+                       break;
+       }
+
+       rtl8192c_FillH2CCmd(padapter, P2P_PS_OFFLOAD_EID, 1, (u8 *)p2p_ps_offload);
+
+_func_exit_;
+
+}
+#endif // CONFIG_P2P_PS
+
+#ifdef CONFIG_IOL
+#include <rtw_iol.h>
+int rtl8192c_IOL_exec_cmds_sync(ADAPTER *adapter, struct xmit_frame *xmit_frame, u32 max_wating_ms)
+{
+       IO_OFFLOAD_LOC  IoOffloadLoc;
+       u32 start_time = rtw_get_current_time();
+       u32 passing_time_ms;
+       u8 polling_ret;
+       int ret = _FAIL;
+
+       if (rtw_IOL_append_END_cmd(xmit_frame) != _SUCCESS)
+               goto exit;
+
+       dump_mgntframe_and_wait(adapter, xmit_frame, max_wating_ms);
+
+       IoOffloadLoc.LocCmd = 0;
+       if(_SUCCESS != rtl8192c_FillH2CCmd(adapter, H2C_92C_IO_OFFLOAD, sizeof(IO_OFFLOAD_LOC), (u8 *)&IoOffloadLoc))
+               goto exit;
+
+       //polling if the IO offloading is done
+       while( (passing_time_ms=rtw_get_passing_time_ms(start_time)) <= max_wating_ms) {
+               #if 0 //C2H
+               if(0xff == rtw_read8(adapter, REG_C2HEVT_CLEAR))
+                       break;
+               #else// 0x1c3
+               if(0x00 != (polling_ret=rtw_read8(adapter, 0x1c3)))
+                       break;
+               #endif
+               rtw_msleep_os(5);
+       }
+       #if 0 //debug
+       DBG_871X("IOL %s, polling_ret:0x%02x, 0x1c0=0x%08x, 0x1c4=0x%08x, 0x1cc=0x%08x, 0x1e8=0x%08x, 0x130=0x%08x, 0x134=0x%08x\n"
+                       , polling_ret==0xff?"success":"error"
+                       , polling_ret
+                       , rtw_read32(adapter, 0x1c0)
+                       , rtw_read32(adapter, 0x1c4)
+                       , rtw_read32(adapter, 0x1cc)
+                       , rtw_read32(adapter, 0x1e8)
+                       , rtw_read32(adapter, 0x130)
+                       , rtw_read32(adapter, 0x134)
+       );
+       rtw_write32(adapter, 0x1c0, 0x0);
+       #endif
+
+       if(polling_ret == 0xff)
+               ret =_SUCCESS;
+       else {
+               DBG_871X("IOL %s, polling_ret:0x%02x\n"
+                       //", 0x1c0=0x%08x, 0x1c4=0x%08x, 0x1cc=0x%08x, 0x1e8=0x%08x, 0x130=0x%08x, 0x134=0x%08x\n"
+                       , polling_ret==0xff?"success":"error"
+                       , polling_ret
+                       //, rtw_read32(adapter, 0x1c0)
+                       //, rtw_read32(adapter, 0x1c4)
+                       //, rtw_read32(adapter, 0x1cc)
+                       //, rtw_read32(adapter, 0x1e8)
+                       //, rtw_read32(adapter, 0x130)
+                       //, rtw_read32(adapter, 0x134)
+               );
+               #if 0 //debug
+               rtw_write16(adapter, 0x1c4, 0x0000);
+               rtw_msleep_os(10);
+               DBG_871X("after reset, 0x1c4=0x%08x\n", rtw_read32(adapter, 0x1c4));
+               #endif
+
+       }
+
+       {
+               #if 0 //C2H
+               u32 c2h_evt;
+               int i;
+               c2h_evt = rtw_read32(adapter, REG_C2HEVT_MSG_NORMAL);
+               DBG_871X("%s io-offloading complete, in %ums: 0x%08x\n", __FUNCTION__, passing_time_ms, c2h_evt);
+               rtw_write8(adapter, REG_C2HEVT_CLEAR, 0x0);
+               #else// 0x1c3
+               DBG_871X("IOL %s complete in %ums\n", __FUNCTION__, passing_time_ms);
+               rtw_write8(adapter, 0x1c3, 0x0);
+               #endif
+       }
+
+exit:
+       return ret;
+
+}
+#endif //CONFIG_IOL
+
+
+#ifdef CONFIG_BEACON_DISABLE_OFFLOAD
+/*
+ rtl8192c_dis_beacon_fun_cmd()
+       This function shall only be called by PORT1.
+       PORT0's beacon function can't be disabled, because it's used by RA function in FW/HW.
+
+       // Still has the REG_BCN_CTRL_1 modified by unknowned party issue in case of Primary Interface + PORT1 combination.
+*/
+u8 rtl8192c_dis_beacon_fun_cmd(_adapter* padapter)
+{
+       u8      buf[2];
+       u8      res=_SUCCESS;
+
+_func_enter_;
+
+       _rtw_memset(buf, 0, sizeof(buf));
+
+       if (padapter->iface_type == IFACE_PORT0) {
+               //buf[0] = 0x1;
+               DBG_871X("%s(): ERROR! padapter->iface_type = %d\n", __FUNCTION__, padapter->iface_type);
+               return _FAIL;
+       } else
+               buf[1] = 0x1;
+
+       rtl8192c_FillH2CCmd(padapter, H2C_92C_DISABLE_BCN_FUNC, 2, buf);
+
+_func_exit_;
+
+       return res;
+
+}
+#endif  // CONFIG_BEACON_DISABLE_OFFLOAD
+
+
+#ifdef CONFIG_TSF_RESET_OFFLOAD
+/*
+       ask FW to Reset sync register at Beacon early interrupt
+*/
+u8 rtl8192c_reset_tsf(_adapter *padapter, u8 reset_port )
+{
+       u8      buf[2];
+       u8      res=_SUCCESS;
+
+_func_enter_;
+       if (IFACE_PORT0==reset_port) {
+               buf[0] = 0x1; buf[1] = 0;
+
+       } else{
+               buf[0] = 0x0; buf[1] = 0x1;
+       }
+       rtl8192c_FillH2CCmd(padapter, H2C_92C_RESET_TSF, 2, buf);
+_func_exit_;
+
+       return res;
+}
+
+int reset_tsf(PADAPTER Adapter, u8 reset_port )
+{
+       u8 reset_cnt_before = 0, reset_cnt_after = 0, loop_cnt = 0;
+       u32 reg_reset_tsf_cnt = (IFACE_PORT0==reset_port) ?
+                               REG_FW_RESET_TSF_CNT_0:REG_FW_RESET_TSF_CNT_1;
+
+       rtw_scan_abort(Adapter->pbuddy_adapter);        /*      site survey will cause reset_tsf fail   */
+       reset_cnt_after = reset_cnt_before = rtw_read8(Adapter,reg_reset_tsf_cnt);
+       rtl8192c_reset_tsf(Adapter, reset_port);
+
+       while ((reset_cnt_after == reset_cnt_before ) && (loop_cnt < 10)) {
+               rtw_msleep_os(100);
+               loop_cnt++;
+               reset_cnt_after = rtw_read8(Adapter, reg_reset_tsf_cnt);
+       }
+
+       return(loop_cnt >= 10) ? _FAIL : _TRUE;
+}
+
+
+#endif // CONFIG_TSF_RESET_OFFLOAD
+
+#ifdef CONFIG_WOWLAN
+
+void rtl8192c_set_wowlan_cmd(_adapter* padapter)
+{
+       u8      res=_SUCCESS;
+       SETWOWLAN_PARM pwowlan_parm;
+       struct pwrctrl_priv *pwrpriv=&padapter->pwrctrlpriv;
+
+_func_enter_;
+
+       pwowlan_parm.mode =0;
+       pwowlan_parm.gpio_index=0;
+       pwowlan_parm.gpio_duration=0;
+       pwowlan_parm.second_mode =0;
+       pwowlan_parm.reserve=0;
+
+       if(pwrpriv->wowlan_mode ==_TRUE){
+               pwowlan_parm.mode |=FW_WOWLAN_FUN_EN;
+               //printk("\n %s 1.pwowlan_parm.mode=0x%x \n",__FUNCTION__,pwowlan_parm.mode );
+               if(pwrpriv->wowlan_pattern ==_TRUE){
+                       pwowlan_parm.mode |= FW_WOWLAN_PATTERN_MATCH;
+               //printk("\n %s 2.pwowlan_parm.mode=0x%x \n",__FUNCTION__,pwowlan_parm.mode );
+               }
+               if(pwrpriv->wowlan_magic ==_TRUE){
+                       pwowlan_parm.mode |=FW_WOWLAN_MAGIC_PKT;
+               //printk("\n %s 3.pwowlan_parm.mode=0x%x \n",__FUNCTION__,pwowlan_parm.mode );
+               }
+               if(pwrpriv->wowlan_unicast ==_TRUE){
+                       pwowlan_parm.mode |=FW_WOWLAN_UNICAST;
+               //printk("\n %s 4.pwowlan_parm.mode=0x%x \n",__FUNCTION__,pwowlan_parm.mode );
+               }
+               //WOWLAN_GPIO_ACTIVE means GPIO high active
+               //pwowlan_parm.mode |=FW_WOWLAN_GPIO_ACTIVE;
+               pwowlan_parm.mode |=FW_WOWLAN_REKEY_WAKEUP;
+               pwowlan_parm.mode |=FW_WOWLAN_DEAUTH_WAKEUP;
+
+               rtl8192c_set_FwJoinBssReport_cmd( padapter, 1);
+
+               //GPIO3
+               pwowlan_parm.gpio_index=3;
+
+               //duration unit is 64us
+               pwowlan_parm.gpio_duration=0xff;
+               //
+               pwowlan_parm.second_mode|=FW_WOWLAN_GPIO_WAKEUP_EN;
+               //printk("\n %s 5.pwowlan_parm.mode=0x%x \n",__FUNCTION__,pwowlan_parm.mode );
+               {       u8 *ptr=(u8 *)&pwowlan_parm;
+                       printk("\n %s H2C_WO_WLAN=%x %02x:%02x:%02x:%02x:%02x \n",__FUNCTION__,H2C_WO_WLAN_CMD,ptr[0],ptr[1],ptr[2],ptr[3],ptr[4] );
+               }
+               rtl8192c_FillH2CCmd(padapter, H2C_WO_WLAN_CMD, 4, (u8 *)&pwowlan_parm);
+
+               //keep alive period = 3 * 10 BCN interval
+               pwowlan_parm.mode =3;
+               pwowlan_parm.gpio_index=3;
+               rtl8192c_FillH2CCmd(padapter, KEEP_ALIVE_CONTROL_CMD, 2, (u8 *)&pwowlan_parm);
+               printk("%s after KEEP_ALIVE_CONTROL_CMD register 0x81=%x \n",__FUNCTION__,rtw_read8(padapter, 0x81));
+
+               pwowlan_parm.mode =1;
+               pwowlan_parm.gpio_index=0;
+               pwowlan_parm.gpio_duration=0;
+               rtl8192c_FillH2CCmd(padapter, DISCONNECT_DECISION_CTRL_CMD, 3, (u8 *)&pwowlan_parm);
+               printk("%s after DISCONNECT_DECISION_CTRL_CMD register 0x81=%x \n",__FUNCTION__,rtw_read8(padapter, 0x81));
+
+               //enable GPIO wakeup
+               pwowlan_parm.mode =1;
+               pwowlan_parm.gpio_index=0;
+               pwowlan_parm.gpio_duration=0;
+               rtl8192c_FillH2CCmd(padapter, REMOTE_WAKE_CTRL_CMD, 3, (u8 *)&pwowlan_parm);
+       }
+       else
+               rtl8192c_FillH2CCmd(padapter, H2C_WO_WLAN_CMD, 3, (u8 *)&pwowlan_parm);
+
+
+_func_exit_;
+
+       return ;
+
+}
+
+#endif  //CONFIG_WOWLAN
diff --git a/drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/rtl8192c_dm.c b/drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/rtl8192c_dm.c
new file mode 100644 (file)
index 0000000..98d6f14
--- /dev/null
@@ -0,0 +1,5055 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+//============================================================
+// Description:
+//
+// This file is for 92CE/92CU dynamic mechanism only
+//
+//
+//============================================================
+
+//============================================================
+// include files
+//============================================================
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <rtw_byteorder.h>
+
+#include <rtl8192c_hal.h>
+#include "../dm.h"
+#ifdef CONFIG_INTEL_PROXIM
+#include "../proxim/intel_proxim.h"
+#endif
+//============================================================
+// Global var
+//============================================================
+static u32 EDCAParam[maxAP][3] =
+{          // UL                       DL
+       {0x5ea322, 0x00a630, 0x00a44f}, //atheros AP
+       {0x5ea32b, 0x5ea42b, 0x5e4322}, //broadcom AP
+       {0x3ea430, 0x00a630, 0x3ea44f}, //cisco AP
+       {0x5ea44f, 0x00a44f, 0x5ea42b}, //marvell AP
+       {0x5ea422, 0x00a44f, 0x00a44f}, //ralink AP
+       //{0x5ea44f, 0x5ea44f, 0x5ea44f}, //realtek AP
+       {0xa44f, 0x5ea44f, 0x5e431c}, //realtek AP
+       {0x5ea42b, 0xa630, 0x5e431c}, //airgocap AP
+       {0x5ea42b, 0x5ea42b, 0x5ea42b}, //unknown AP
+//     {0x5e4322, 0x00a44f, 0x5ea44f}, //unknown AP
+};
+
+
+/*-----------------------------------------------------------------------------
+ * Function:   dm_DIGInit()
+ *
+ * Overview:   Set DIG scheme init value.
+ *
+ * Input:              NONE
+ *
+ * Output:             NONE
+ *
+ * Return:             NONE
+ *
+ * Revised History:
+ *     When            Who             Remark
+ *
+ *---------------------------------------------------------------------------*/
+static void    dm_DIGInit(
+       IN      PADAPTER        pAdapter
+)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(pAdapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+       DIG_T   *pDigTable = &pdmpriv->DM_DigTable;
+
+
+       pDigTable->Dig_Enable_Flag = _TRUE;
+       pDigTable->Dig_Ext_Port_Stage = DIG_EXT_PORT_STAGE_MAX;
+
+       pDigTable->CurIGValue = 0x20;
+       pDigTable->PreIGValue = 0x0;
+
+       pDigTable->CurSTAConnectState = pDigTable->PreSTAConnectState = DIG_STA_DISCONNECT;
+       pDigTable->CurMultiSTAConnectState = DIG_MultiSTA_DISCONNECT;
+
+       pDigTable->RssiLowThresh        = DM_DIG_THRESH_LOW;
+       pDigTable->RssiHighThresh       = DM_DIG_THRESH_HIGH;
+
+       pDigTable->FALowThresh  = DM_FALSEALARM_THRESH_LOW;
+       pDigTable->FAHighThresh = DM_FALSEALARM_THRESH_HIGH;
+
+
+       pDigTable->rx_gain_range_max = DM_DIG_MAX;
+       pDigTable->rx_gain_range_min = DM_DIG_MIN;
+       pDigTable->rx_gain_range_min_nolink = 0;
+
+       pDigTable->BackoffVal = DM_DIG_BACKOFF_DEFAULT;
+       pDigTable->BackoffVal_range_max = DM_DIG_BACKOFF_MAX;
+       pDigTable->BackoffVal_range_min = DM_DIG_BACKOFF_MIN;
+
+       pDigTable->PreCCKPDState = CCK_PD_STAGE_MAX;
+       pDigTable->CurCCKPDState = CCK_PD_STAGE_LowRssi;
+
+       pDigTable->ForbiddenIGI = DM_DIG_MIN;
+       pDigTable->LargeFAHit = 0;
+       pDigTable->Recover_cnt = 0;
+       pdmpriv->DIG_Dynamic_MIN  = 0x25; //for FUNAI_TV
+}
+
+
+static u8 dm_initial_gain_MinPWDB(
+       IN      PADAPTER        pAdapter
+       )
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(pAdapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+       DIG_T                   *pDigTable = &pdmpriv->DM_DigTable;
+       int     Rssi_val_min = 0;
+
+       if((pDigTable->CurMultiSTAConnectState == DIG_MultiSTA_CONNECT) &&
+               (pDigTable->CurSTAConnectState == DIG_STA_CONNECT) )
+       {
+               if(pdmpriv->EntryMinUndecoratedSmoothedPWDB != 0)
+#ifdef CONFIG_CONCURRENT_MODE
+                       Rssi_val_min  =  (pdmpriv->UndecoratedSmoothedPWDB+pdmpriv->EntryMinUndecoratedSmoothedPWDB)/2;
+#else
+                       Rssi_val_min  =  (pdmpriv->EntryMinUndecoratedSmoothedPWDB > pdmpriv->UndecoratedSmoothedPWDB)?
+                                       pdmpriv->UndecoratedSmoothedPWDB:pdmpriv->EntryMinUndecoratedSmoothedPWDB;
+#endif //CONFIG_CONCURRENT_MODE
+               else
+                       Rssi_val_min = pdmpriv->UndecoratedSmoothedPWDB;
+       }
+       else if(pDigTable->CurSTAConnectState == DIG_STA_CONNECT ||
+                       pDigTable->CurSTAConnectState == DIG_STA_BEFORE_CONNECT)
+               Rssi_val_min = pdmpriv->UndecoratedSmoothedPWDB;
+       else if(pDigTable->CurMultiSTAConnectState == DIG_MultiSTA_CONNECT)
+               Rssi_val_min = pdmpriv->EntryMinUndecoratedSmoothedPWDB;
+
+       //printk("%s CurMultiSTAConnectState(0x%02x) UndecoratedSmoothedPWDB(%d),EntryMinUndecoratedSmoothedPWDB(%d)\n"
+       //,__FUNCTION__,pDigTable->CurSTAConnectState,
+       //pdmpriv->UndecoratedSmoothedPWDB,pdmpriv->EntryMinUndecoratedSmoothedPWDB);
+
+       return (u8)Rssi_val_min;
+}
+
+
+static VOID
+dm_FalseAlarmCounterStatistics(
+       IN      PADAPTER        Adapter
+       )
+{
+       u32 ret_value;
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+       PFALSE_ALARM_STATISTICS FalseAlmCnt = &(pdmpriv->FalseAlmCnt);
+#ifdef CONFIG_CONCURRENT_MODE
+       PADAPTER pbuddy_adapter = Adapter->pbuddy_adapter;
+#endif //CONFIG_CONCURRENT_MODE
+
+       ret_value = PHY_QueryBBReg(Adapter, rOFDM_PHYCounter1, bMaskDWord);
+       FalseAlmCnt->Cnt_Parity_Fail = ((ret_value&0xffff0000)>>16);
+
+       ret_value = PHY_QueryBBReg(Adapter, rOFDM_PHYCounter2, bMaskDWord);
+       FalseAlmCnt->Cnt_Rate_Illegal = (ret_value&0xffff);
+       FalseAlmCnt->Cnt_Crc8_fail = ((ret_value&0xffff0000)>>16);
+       ret_value = PHY_QueryBBReg(Adapter, rOFDM_PHYCounter3, bMaskDWord);
+       FalseAlmCnt->Cnt_Mcs_fail = (ret_value&0xffff);
+       ret_value = PHY_QueryBBReg(Adapter, rOFDM0_FrameSync, bMaskDWord);
+       FalseAlmCnt->Cnt_Fast_Fsync = (ret_value&0xffff);
+       FalseAlmCnt->Cnt_SB_Search_fail = ((ret_value&0xffff0000)>>16);
+
+       FalseAlmCnt->Cnt_Ofdm_fail =    FalseAlmCnt->Cnt_Parity_Fail + FalseAlmCnt->Cnt_Rate_Illegal +
+                                                               FalseAlmCnt->Cnt_Crc8_fail + FalseAlmCnt->Cnt_Mcs_fail+
+                                                               FalseAlmCnt->Cnt_Fast_Fsync + FalseAlmCnt->Cnt_SB_Search_fail;
+
+
+       //hold cck counter
+       PHY_SetBBReg(Adapter, rCCK0_FalseAlarmReport, BIT(14), 1);
+
+       ret_value = PHY_QueryBBReg(Adapter, rCCK0_FACounterLower, bMaskByte0);
+       FalseAlmCnt->Cnt_Cck_fail = ret_value;
+
+       ret_value = PHY_QueryBBReg(Adapter, rCCK0_FACounterUpper, bMaskByte3);
+       FalseAlmCnt->Cnt_Cck_fail +=  (ret_value& 0xff)<<8;
+
+       FalseAlmCnt->Cnt_all = (        FalseAlmCnt->Cnt_Parity_Fail +
+                                               FalseAlmCnt->Cnt_Rate_Illegal +
+                                               FalseAlmCnt->Cnt_Crc8_fail +
+                                               FalseAlmCnt->Cnt_Mcs_fail +
+                                               FalseAlmCnt->Cnt_Cck_fail);
+
+       Adapter->recvpriv.FalseAlmCnt_all = FalseAlmCnt->Cnt_all;
+#ifdef CONFIG_CONCURRENT_MODE
+       if(pbuddy_adapter)
+               pbuddy_adapter->recvpriv.FalseAlmCnt_all = FalseAlmCnt->Cnt_all;
+#endif //CONFIG_CONCURRENT_MODE
+
+       //reset false alarm counter registers
+       PHY_SetBBReg(Adapter, rOFDM1_LSTF, 0x08000000, 1);
+       PHY_SetBBReg(Adapter, rOFDM1_LSTF, 0x08000000, 0);
+       //reset cck counter
+       PHY_SetBBReg(Adapter, rCCK0_FalseAlarmReport, 0x0000c000, 0);
+       //enable cck counter
+       PHY_SetBBReg(Adapter, rCCK0_FalseAlarmReport, 0x0000c000, 2);
+
+       //RT_TRACE(     COMP_DIG, DBG_LOUD, ("Cnt_Parity_Fail = %ld, Cnt_Rate_Illegal = %ld, Cnt_Crc8_fail = %ld, Cnt_Mcs_fail = %ld\n",
+       //                      FalseAlmCnt->Cnt_Parity_Fail, FalseAlmCnt->Cnt_Rate_Illegal, FalseAlmCnt->Cnt_Crc8_fail, FalseAlmCnt->Cnt_Mcs_fail) );
+       //RT_TRACE(     COMP_DIG, DBG_LOUD, ("Cnt_Ofdm_fail = %ld, Cnt_Cck_fail = %ld, Cnt_all = %ld\n",
+       //                      FalseAlmCnt->Cnt_Ofdm_fail, FalseAlmCnt->Cnt_Cck_fail, FalseAlmCnt->Cnt_all) );
+       //RT_TRACE(     COMP_DIG, DBG_LOUD, ("Cnt_Ofdm_fail = %ld, Cnt_Cck_fail = %ld, Cnt_all = %ld\n",
+       //                      FalseAlmCnt->Cnt_Ofdm_fail, FalseAlmCnt->Cnt_Cck_fail, FalseAlmCnt->Cnt_all) );
+}
+
+
+static VOID
+DM_Write_DIG(
+       IN      PADAPTER        pAdapter
+       )
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(pAdapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+       DIG_T   *pDigTable = &pdmpriv->DM_DigTable;
+
+#ifdef CONFIG_CONCURRENT_MODE
+       if(rtw_buddy_adapter_up(pAdapter))
+       {
+               PADAPTER pbuddy_adapter = pAdapter->pbuddy_adapter;
+               PHAL_DATA_TYPE  pbuddy_HalData = GET_HAL_DATA(pbuddy_adapter);
+               struct dm_priv *pbuddy_dmpriv = &pbuddy_HalData->dmpriv;
+               DIG_T   *pbuddy_DigTable = &pbuddy_dmpriv->DM_DigTable;
+
+               //sync IGValue
+               pbuddy_DigTable->PreIGValue = pDigTable->PreIGValue;
+               pbuddy_DigTable->CurIGValue = pDigTable->CurIGValue;
+       }
+#endif //CONFIG_CONCURRENT_MODE
+
+
+       //RT_TRACE(     COMP_DIG, DBG_LOUD, ("CurIGValue = 0x%lx, PreIGValue = 0x%lx, BackoffVal = %d\n",
+       //                      DM_DigTable.CurIGValue, DM_DigTable.PreIGValue, DM_DigTable.BackoffVal));
+
+       if (pDigTable->Dig_Enable_Flag == _FALSE)
+       {
+               //RT_TRACE(     COMP_DIG, DBG_LOUD, ("DIG is disabled\n"));
+               pDigTable->PreIGValue = 0x17;
+               return;
+       }
+
+       if( (pDigTable->PreIGValue != pDigTable->CurIGValue) || ( pAdapter->bForceWriteInitGain ) )
+       {
+               // Set initial gain.
+               //PHY_SetBBReg(pAdapter, rOFDM0_XAAGCCore1, bMaskByte0, pDigTable->CurIGValue);
+               //PHY_SetBBReg(pAdapter, rOFDM0_XBAGCCore1, bMaskByte0, pDigTable->CurIGValue);
+               //printk("%s DIG(0x%02x)\n",__FUNCTION__,pDigTable->CurIGValue);
+
+#if defined CONFIG_WIDI_DIG_3E && defined CONFIG_INTEL_WIDI
+               if( pAdapter->mlmepriv.widi_enable == _TRUE )
+               {
+                       PHY_SetBBReg(pAdapter, rOFDM0_XAAGCCore1, 0x7f, 0x3e);
+                       PHY_SetBBReg(pAdapter, rOFDM0_XBAGCCore1, 0x7f, 0x3e);
+               }
+               else
+#endif //defined CONFIG_WIDI_DIG_3E && defined CONFIG_INTEL_WIDI
+               {
+                       PHY_SetBBReg(pAdapter, rOFDM0_XAAGCCore1, 0x7f, pDigTable->CurIGValue);
+                       PHY_SetBBReg(pAdapter, rOFDM0_XBAGCCore1, 0x7f, pDigTable->CurIGValue);
+               }
+               pDigTable->PreIGValue = pDigTable->CurIGValue;
+       }
+}
+
+
+static VOID
+dm_CtrlInitGainByFA(
+       IN      PADAPTER        pAdapter
+)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(pAdapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+       DIG_T   *pDigTable = &pdmpriv->DM_DigTable;
+       PFALSE_ALARM_STATISTICS FalseAlmCnt = &(pdmpriv->FalseAlmCnt);
+
+       u8      value_IGI = pDigTable->CurIGValue;
+
+       if(FalseAlmCnt->Cnt_all < DM_DIG_FA_TH0)
+               value_IGI --;
+       else if(FalseAlmCnt->Cnt_all < DM_DIG_FA_TH1)
+               value_IGI += 0;
+       else if(FalseAlmCnt->Cnt_all < DM_DIG_FA_TH2)
+               value_IGI ++;
+       else if(FalseAlmCnt->Cnt_all >= DM_DIG_FA_TH2)
+               value_IGI +=2;
+
+       if(value_IGI > DM_DIG_FA_UPPER)
+               value_IGI = DM_DIG_FA_UPPER;
+       if(value_IGI < DM_DIG_FA_LOWER)
+               value_IGI = DM_DIG_FA_LOWER;
+
+       if(FalseAlmCnt->Cnt_all > 10000)
+               value_IGI = DM_DIG_FA_UPPER;
+
+       pDigTable->CurIGValue = value_IGI;
+
+       DM_Write_DIG(pAdapter);
+
+}
+
+#ifdef CONFIG_SPECIAL_SETTING_FOR_FUNAI_TV
+VOID dm_CtrlInitGainByRssi( IN PADAPTER pAdapter)
+{
+
+       u32 isBT;
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(pAdapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+       DIG_T   *pDigTable = &pdmpriv->DM_DigTable;
+       PFALSE_ALARM_STATISTICS FalseAlmCnt = &(pdmpriv->FalseAlmCnt);
+#ifdef CONFIG_DM_ADAPTIVITY
+       u8 Adap_IGI_Upper = pdmpriv->IGI_target + 30 + (u8) pdmpriv->TH_L2H_ini -(u8) pdmpriv->TH_EDCCA_HL_diff;
+#endif
+
+        //modify DIG upper bound
+       if((pDigTable->Rssi_val_min + 20) > DM_DIG_MAX )
+               pDigTable->rx_gain_range_max = DM_DIG_MAX;
+       else
+               pDigTable->rx_gain_range_max = pDigTable->Rssi_val_min + 20;
+
+       //modify DIG lower bound
+       if((FalseAlmCnt->Cnt_all > 500)&&(pdmpriv->DIG_Dynamic_MIN < 0x25))
+               pdmpriv->DIG_Dynamic_MIN++;
+       if((FalseAlmCnt->Cnt_all < 500)&&(pdmpriv->DIG_Dynamic_MIN > DM_DIG_MIN))
+               pdmpriv->DIG_Dynamic_MIN--;
+       if((pDigTable->Rssi_val_min < 8) && (pdmpriv->DIG_Dynamic_MIN > DM_DIG_MIN))
+               pdmpriv->DIG_Dynamic_MIN--;
+
+       //modify DIG lower bound, deal with abnorally large false alarm
+       if(FalseAlmCnt->Cnt_all > 10000)
+       {
+               //RT_TRACE(COMP_DIG, DBG_LOUD, ("dm_DIG(): Abnornally false alarm case. \n"));
+               pDigTable->LargeFAHit++;
+                if(pDigTable->ForbiddenIGI < pDigTable->CurIGValue)
+               {
+                       pDigTable->ForbiddenIGI = pDigTable->CurIGValue;
+                       pDigTable->LargeFAHit = 1;
+               }
+               if(pDigTable->LargeFAHit >= 3)
+               {
+                       if((pDigTable->ForbiddenIGI+1) >pDigTable->rx_gain_range_max)
+                               pDigTable->rx_gain_range_min = pDigTable->rx_gain_range_max;
+                       else
+                               pDigTable->rx_gain_range_min = (pDigTable->ForbiddenIGI + 1);
+                       pDigTable->Recover_cnt = 3600; //3600=2hr
+                 }
+        }
+        else
+        {
+         //Recovery mechanism for IGI lower bound
+               if(pDigTable->Recover_cnt != 0){
+                       pDigTable->Recover_cnt --;
+               }
+               else
+               {
+                       if(pDigTable->LargeFAHit == 0 )
+                       {
+                               if((pDigTable->ForbiddenIGI -1) < pdmpriv->DIG_Dynamic_MIN) //DM_DIG_MIN)
+                               {
+                                       pDigTable->ForbiddenIGI = pdmpriv->DIG_Dynamic_MIN; //DM_DIG_MIN;
+                                       pDigTable->rx_gain_range_min = pdmpriv->DIG_Dynamic_MIN; //DM_DIG_MIN;
+                               }
+                               else
+                               {
+                                       pDigTable->ForbiddenIGI --;
+                                       pDigTable->rx_gain_range_min = (pDigTable->ForbiddenIGI + 1);
+                               }
+                       }
+                       else if(pDigTable->LargeFAHit == 3 )
+                       {
+                               pDigTable->LargeFAHit = 0;
+                       }
+               }
+        }
+ #ifdef CONFIG_USB_HCI
+       if(FalseAlmCnt->Cnt_all < 250)
+       {
+#endif
+               //DBG_8192C("===> dm_CtrlInitGainByRssi, Enter DIG by SS mode\n");
+
+               isBT = rtw_read8(pAdapter, 0x4fd) & 0x01;
+
+               if(!isBT){
+
+                       if(FalseAlmCnt->Cnt_all > pDigTable->FAHighThresh)
+                       {
+                               if((pDigTable->BackoffVal -2) < pDigTable->BackoffVal_range_min)
+                                       pDigTable->BackoffVal = pDigTable->BackoffVal_range_min;
+                               else
+                                       pDigTable->BackoffVal -= 2;
+                       }
+                       else if(FalseAlmCnt->Cnt_all < pDigTable->FALowThresh)
+                       {
+                               if((pDigTable->BackoffVal+2) > pDigTable->BackoffVal_range_max)
+                                       pDigTable->BackoffVal = pDigTable->BackoffVal_range_max;
+                               else
+                                       pDigTable->BackoffVal +=2;
+                       }
+               }
+               else
+                       pDigTable->BackoffVal = DM_DIG_BACKOFF_DEFAULT;
+
+               pDigTable->CurIGValue = pDigTable->Rssi_val_min+10-pDigTable->BackoffVal;
+
+               //DBG_8192C("Rssi_val_min = %x BackoffVal %x\n",pDigTable->Rssi_val_min, pDigTable->BackoffVal);
+#ifdef CONFIG_USB_HCI
+       }
+       else
+       {
+               //DBG_8192C("===> dm_CtrlInitGainByRssi, Enter DIG by FA mode\n");
+               //DBG_8192C("RSSI = 0x%x", pDigTable->Rssi_val_min);
+
+               //Adjust initial gain by false alarm
+               if(FalseAlmCnt->Cnt_all > 1000)
+                       pDigTable->CurIGValue = pDigTable ->PreIGValue+2;
+               else if (FalseAlmCnt->Cnt_all > 750)
+                       pDigTable->CurIGValue = pDigTable->PreIGValue+1;
+               else if(FalseAlmCnt->Cnt_all < 500)
+                       pDigTable->CurIGValue = pDigTable->PreIGValue-1;
+       }
+#endif
+
+       //Check initial gain by upper/lower bound
+       if(pDigTable->CurIGValue >pDigTable->rx_gain_range_max)
+               pDigTable->CurIGValue = pDigTable->rx_gain_range_max;
+
+       if(pDigTable->CurIGValue < pDigTable->rx_gain_range_min)
+               pDigTable->CurIGValue = pDigTable->rx_gain_range_min;
+
+#ifdef CONFIG_DM_ADAPTIVITY
+       if(pdmpriv->DMFlag & DYNAMIC_FUNC_ADAPTIVITY)
+       {
+               if(pDigTable->CurIGValue > Adap_IGI_Upper)
+                       pDigTable->CurIGValue = Adap_IGI_Upper;
+
+               if(pdmpriv->IGI_LowerBound != 0)
+               {
+                       if(pDigTable->CurIGValue < pdmpriv->IGI_LowerBound)
+                               pDigTable->CurIGValue = pdmpriv->IGI_LowerBound;
+               }
+               LOG_LEVEL(_drv_info_, FUNC_ADPT_FMT": pdmpriv->IGI_LowerBound = %d\n",
+                       FUNC_ADPT_ARG(pAdapter), pdmpriv->IGI_LowerBound);
+       }
+#endif /* CONFIG_DM_ADAPTIVITY */
+
+       //printk("%s => rx_gain_range_max(0x%02x) rx_gain_range_min(0x%02x)\n",__FUNCTION__,
+       //      pDigTable->rx_gain_range_max,pDigTable->rx_gain_range_min);
+       //printk("%s CurIGValue(0x%02x)  <====\n",__FUNCTION__,pDigTable->CurIGValue );
+
+       DM_Write_DIG(pAdapter);
+
+}
+#else
+static VOID dm_CtrlInitGainByRssi(IN   PADAPTER        pAdapter)
+{
+       u32 isBT;
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(pAdapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+       DIG_T   *pDigTable = &pdmpriv->DM_DigTable;
+       PFALSE_ALARM_STATISTICS FalseAlmCnt = &(pdmpriv->FalseAlmCnt);
+       u8 RSSI_tmp = dm_initial_gain_MinPWDB(pAdapter);
+#ifdef CONFIG_DM_ADAPTIVITY
+       u8 Adap_IGI_Upper = pdmpriv->IGI_target + 30 + (u8) pdmpriv->TH_L2H_ini -(u8) pdmpriv->TH_EDCCA_HL_diff;
+#endif
+
+       //modify DIG upper bound
+       if((pDigTable->Rssi_val_min + 20) > DM_DIG_MAX )
+               pDigTable->rx_gain_range_max = DM_DIG_MAX;
+       else
+               pDigTable->rx_gain_range_max = pDigTable->Rssi_val_min + 20;
+       //printk("%s Rssi_val_min(0x%02x),rx_gain_range_max(0x%02x)\n",__FUNCTION__,pDigTable->Rssi_val_min,pDigTable->rx_gain_range_max);
+       //modify DIG lower bound, deal with abnorally large false alarm
+       if(FalseAlmCnt->Cnt_all > 10000)
+       {
+               //RT_TRACE(COMP_DIG, DBG_LOUD, ("dm_DIG(): Abnornally false alarm case. \n"));
+
+               pDigTable->LargeFAHit++;
+               if(pDigTable->ForbiddenIGI < pDigTable->CurIGValue)
+               {
+                       pDigTable->ForbiddenIGI = pDigTable->CurIGValue;
+                       pDigTable->LargeFAHit = 1;
+               }
+
+               if(pDigTable->LargeFAHit >= 3)
+               {
+                       if((pDigTable->ForbiddenIGI+1) > pDigTable->rx_gain_range_max)
+                               pDigTable->rx_gain_range_min = pDigTable->rx_gain_range_max;
+                       else
+                               pDigTable->rx_gain_range_min = (pDigTable->ForbiddenIGI + 1);
+                       pDigTable->Recover_cnt = 3600; //3600=2hr
+               }
+       }
+       else
+       {
+               //Recovery mechanism for IGI lower bound
+               if(pDigTable->Recover_cnt != 0)
+                       pDigTable->Recover_cnt --;
+               else
+               {
+                       if(pDigTable->LargeFAHit == 0 )
+                       {
+                               if((pDigTable->ForbiddenIGI -1) < DM_DIG_MIN)
+                               {
+                                       pDigTable->ForbiddenIGI = DM_DIG_MIN;
+                                       pDigTable->rx_gain_range_min = DM_DIG_MIN;
+                               }
+                               else
+                               {
+                                       pDigTable->ForbiddenIGI --;
+                                       pDigTable->rx_gain_range_min = (pDigTable->ForbiddenIGI + 1);
+                               }
+                       }
+                       else if(pDigTable->LargeFAHit == 3 )
+                       {
+                               pDigTable->LargeFAHit = 0;
+                       }
+               }
+       }
+
+       //RT_TRACE(COMP_DIG, DBG_LOUD, ("DM_DigTable.ForbiddenIGI = 0x%x, DM_DigTable.LargeFAHit = 0x%x\n",pDigTable->ForbiddenIGI, pDigTable->LargeFAHit));
+       //RT_TRACE(COMP_DIG, DBG_LOUD, ("DM_DigTable.rx_gain_range_max = 0x%x, DM_DigTable.rx_gain_range_min = 0x%x\n",pDigTable->rx_gain_range_max, pDigTable->rx_gain_range_min));
+
+#ifdef CONFIG_USB_HCI
+       if(FalseAlmCnt->Cnt_all < 250)
+       {
+#endif
+               //DBG_8192C("===> dm_CtrlInitGainByRssi, Enter DIG by SS mode\n");
+
+               isBT = rtw_read8(pAdapter, 0x4fd) & 0x01;
+
+               if(!isBT){
+
+                       if(FalseAlmCnt->Cnt_all > pDigTable->FAHighThresh)
+                       {
+                               if((pDigTable->BackoffVal -2) < pDigTable->BackoffVal_range_min)
+                                       pDigTable->BackoffVal = pDigTable->BackoffVal_range_min;
+                               else
+                                       pDigTable->BackoffVal -= 2;
+                       }
+                       else if(FalseAlmCnt->Cnt_all < pDigTable->FALowThresh)
+                       {
+                               if((pDigTable->BackoffVal+2) > pDigTable->BackoffVal_range_max)
+                                       pDigTable->BackoffVal = pDigTable->BackoffVal_range_max;
+                               else
+                                       pDigTable->BackoffVal +=2;
+                       }
+               }
+               else
+                       pDigTable->BackoffVal = DM_DIG_BACKOFF_DEFAULT;
+
+               pDigTable->CurIGValue = pDigTable->Rssi_val_min+10-pDigTable->BackoffVal;
+
+               //DBG_8192C("Rssi_val_min = %x BackoffVal %x\n",pDigTable->Rssi_val_min, pDigTable->BackoffVal);
+#ifdef CONFIG_USB_HCI
+       }
+       else
+       {
+               //DBG_8192C("===> dm_CtrlInitGainByRssi, Enter DIG by FA mode\n");
+               //DBG_8192C("RSSI = 0x%x", pDigTable->Rssi_val_min);
+
+               //Adjust initial gain by false alarm
+               if(FalseAlmCnt->Cnt_all > 1000)
+                       pDigTable->CurIGValue = pDigTable ->PreIGValue+2;
+               else if (FalseAlmCnt->Cnt_all > 750)
+                       pDigTable->CurIGValue = pDigTable->PreIGValue+1;
+               else if(FalseAlmCnt->Cnt_all < 500)
+                       pDigTable->CurIGValue = pDigTable->PreIGValue-1;
+       }
+#endif
+
+       if(RSSI_tmp <= DM_DIG_MIN)
+               pDigTable->rx_gain_range_min = DM_DIG_MIN;
+       else if(RSSI_tmp >= DM_DIG_MAX)
+               pDigTable->rx_gain_range_min = DM_DIG_MAX;
+       else
+               pDigTable->rx_gain_range_min = RSSI_tmp;
+
+
+       //Check initial gain by upper/lower bound
+       if(pDigTable->CurIGValue >pDigTable->rx_gain_range_max)
+               pDigTable->CurIGValue = pDigTable->rx_gain_range_max;
+
+       if(pDigTable->CurIGValue < pDigTable->rx_gain_range_min)
+               pDigTable->CurIGValue = pDigTable->rx_gain_range_min;
+
+#ifdef CONFIG_DM_ADAPTIVITY
+       if(pdmpriv->DMFlag & DYNAMIC_FUNC_ADAPTIVITY)
+       {
+               if(pDigTable->CurIGValue > Adap_IGI_Upper)
+                       pDigTable->CurIGValue = Adap_IGI_Upper;
+
+               if(pdmpriv->IGI_LowerBound != 0)
+               {
+                       if(pDigTable->CurIGValue < pdmpriv->IGI_LowerBound)
+                               pDigTable->CurIGValue = pdmpriv->IGI_LowerBound;
+               }
+               LOG_LEVEL(_drv_info_, FUNC_ADPT_FMT": pdmpriv->IGI_LowerBound = %d\n",
+                       FUNC_ADPT_ARG(pAdapter), pdmpriv->IGI_LowerBound);
+       }
+#endif /* CONFIG_DM_ADAPTIVITY */
+
+       //printk("%s => rx_gain_range_max(0x%02x) rx_gain_range_min(0x%02x)\n",__FUNCTION__,
+       //      pDigTable->rx_gain_range_max,pDigTable->rx_gain_range_min);
+       //printk("%s CurIGValue(0x%02x)  <====\n",__FUNCTION__,pDigTable->CurIGValue );
+
+       DM_Write_DIG(pAdapter);
+
+}
+#endif
+
+static VOID
+dm_initial_gain_Multi_STA(
+       IN      PADAPTER        pAdapter)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(pAdapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+       struct mlme_priv        *pmlmepriv = &(pAdapter->mlmepriv);
+       DIG_T                   *pDigTable = &pdmpriv->DM_DigTable;
+       int                             rssi_strength =  pdmpriv->EntryMinUndecoratedSmoothedPWDB;
+       BOOLEAN                 bMulti_STA = _FALSE;
+
+#ifdef CONFIG_CONCURRENT_MODE
+       //AP Mode
+       if(check_buddy_fwstate(pAdapter, WIFI_AP_STATE) == _TRUE && (rssi_strength !=0))
+       {
+               bMulti_STA = _TRUE;
+       }
+       else if(pDigTable->CurMultiSTAConnectState == DIG_MultiSTA_CONNECT && rssi_strength==0) //STA+STA MODE
+       {
+               bMulti_STA = _TRUE;
+               rssi_strength = pdmpriv->UndecoratedSmoothedPWDB;
+       }
+#endif //CONFIG_CONCURRENT_MODE
+
+
+       //ADHOC and AP Mode
+       if(check_fwstate(pmlmepriv, WIFI_AP_STATE|WIFI_ADHOC_STATE|WIFI_ADHOC_MASTER_STATE) == _TRUE)
+       {
+               bMulti_STA = _TRUE;
+       }
+
+
+       if((bMulti_STA == _FALSE)
+               || (pDigTable->CurSTAConnectState == DIG_STA_DISCONNECT))
+       {
+               pdmpriv->binitialized = _FALSE;
+               pDigTable->Dig_Ext_Port_Stage = DIG_EXT_PORT_STAGE_MAX;
+               return;
+       }
+       else if(pdmpriv->binitialized == _FALSE)
+       {
+               pdmpriv->binitialized = _TRUE;
+               pDigTable->Dig_Ext_Port_Stage = DIG_EXT_PORT_STAGE_0;
+               pDigTable->CurIGValue = 0x20;
+               DM_Write_DIG(pAdapter);
+       }
+
+       // Initial gain control by ap mode
+       if(pDigTable->CurMultiSTAConnectState == DIG_MultiSTA_CONNECT)
+       {
+               if (    (rssi_strength < pDigTable->RssiLowThresh)      &&
+                       (pDigTable->Dig_Ext_Port_Stage != DIG_EXT_PORT_STAGE_1))
+               {
+                       // Set to dig value to 0x20 for Luke's opinion after disable dig
+                       if(pDigTable->Dig_Ext_Port_Stage == DIG_EXT_PORT_STAGE_2)
+                       {
+                               pDigTable->CurIGValue = 0x20;
+                               DM_Write_DIG(pAdapter);
+                       }
+                       pDigTable->Dig_Ext_Port_Stage = DIG_EXT_PORT_STAGE_1;
+               }
+               else if (rssi_strength > pDigTable->RssiHighThresh)
+               {
+                       pDigTable->Dig_Ext_Port_Stage = DIG_EXT_PORT_STAGE_2;
+                       dm_CtrlInitGainByFA(pAdapter);
+               }
+       }
+       else if(pDigTable->Dig_Ext_Port_Stage != DIG_EXT_PORT_STAGE_0)
+       {
+               pDigTable->Dig_Ext_Port_Stage = DIG_EXT_PORT_STAGE_0;
+               pDigTable->CurIGValue = 0x20;
+               DM_Write_DIG(pAdapter);
+       }
+
+       //RT_TRACE(     COMP_DIG, DBG_LOUD, ("CurMultiSTAConnectState = %x Dig_Ext_Port_Stage %x\n",
+       //                      DM_DigTable.CurMultiSTAConnectState, DM_DigTable.Dig_Ext_Port_Stage));
+}
+
+static VOID
+dm_initial_gain_STA_beforelinked(
+       IN      PADAPTER        pAdapter)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(pAdapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+       DIG_T   *pDigTable = &pdmpriv->DM_DigTable;
+       PFALSE_ALARM_STATISTICS pFalseAlmCnt = &(pdmpriv->FalseAlmCnt);
+
+       //CurrentIGI = pDM_DigTable->rx_gain_range_min;//pDM_DigTable->CurIGValue = pDM_DigTable->rx_gain_range_min
+       //ODM_RT_TRACE(pDM_Odm, ODM_COMP_DIG, ODM_DBG_LOUD, ("odm_DIG(): DIG BeforeLink\n"));
+       //2012.03.30 LukeLee: enable DIG before link but with very high thresholds
+       //      Updated by Albert 2012/09/27
+       //      Copy the same rule from 8192du code.
+       if( pFalseAlmCnt->Cnt_all > 2000 )
+               pDigTable->CurIGValue += 2;
+       else if ( ( pFalseAlmCnt->Cnt_all > 1000 ) && ( pFalseAlmCnt->Cnt_all <= 1000 ) )
+               pDigTable->CurIGValue += 1;
+       else if(pFalseAlmCnt->Cnt_all < 500)
+                pDigTable->CurIGValue -= 1;
+
+       //Check initial gain by upper/lower bound
+       if(pDigTable->CurIGValue >pDigTable->rx_gain_range_max)
+               pDigTable->CurIGValue = pDigTable->rx_gain_range_max;
+
+       if(pDigTable->CurIGValue < pDigTable->rx_gain_range_min)
+               pDigTable->CurIGValue = pDigTable->rx_gain_range_min;
+
+       printk("%s ==> FalseAlmCnt->Cnt_all:%d CurIGValue:0x%02x \n",__FUNCTION__,pFalseAlmCnt->Cnt_all ,pDigTable->CurIGValue);
+}
+
+static VOID
+dm_initial_gain_STA(
+       IN      PADAPTER        pAdapter)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(pAdapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+       DIG_T   *pDigTable = &pdmpriv->DM_DigTable;
+
+       //RT_TRACE(     COMP_DIG, DBG_LOUD, ("PreSTAConnectState = %x, CurSTAConnectState = %x\n",
+       //                      DM_DigTable.PreSTAConnectState, DM_DigTable.CurSTAConnectState));
+
+
+       if(pDigTable->PreSTAConnectState == pDigTable->CurSTAConnectState||
+          pDigTable->CurSTAConnectState == DIG_STA_BEFORE_CONNECT ||
+          pDigTable->CurSTAConnectState == DIG_STA_CONNECT)
+       {
+               // beforeconnect -> beforeconnect or  connect -> connect
+               // (dis)connect -> beforeconnect
+               // disconnect -> connecct or beforeconnect -> connect
+               if(pDigTable->CurSTAConnectState != DIG_STA_DISCONNECT)
+               {
+                       pDigTable->Rssi_val_min = dm_initial_gain_MinPWDB(pAdapter);
+                       dm_CtrlInitGainByRssi(pAdapter);
+               }
+#if 0
+               else if((wdev_to_priv(pAdapter->rtw_wdev))->p2p_enabled == _TRUE
+                               && pAdapter->wdinfo.driver_interface == DRIVER_CFG80211)
+               {
+                       //pDigTable->CurIGValue = 0x30;
+                       DM_Write_DIG(pAdapter);
+               }
+#endif
+               else{ // pDigTable->CurSTAConnectState == DIG_STA_DISCONNECT
+               #ifdef CONFIG_BEFORE_LINKED_DIG
+                       //printk("%s==> ##1 CurIGI(0x%02x),PreIGValue(0x%02x) \n",__FUNCTION__,pDigTable->CurIGValue,pDigTable->PreIGValue );
+                       dm_initial_gain_STA_beforelinked(pAdapter);
+                       DM_Write_DIG(pAdapter);
+               #endif //CONFIG_BEFORE_LINKED_DIG
+               }
+       }
+       else
+       {
+               // connect -> disconnect or beforeconnect -> disconnect
+               pDigTable->Rssi_val_min = 0;
+               pDigTable->Dig_Ext_Port_Stage = DIG_EXT_PORT_STAGE_MAX;
+               pDigTable->BackoffVal = DM_DIG_BACKOFF_DEFAULT;
+               pDigTable->CurIGValue = 0x20;
+               pDigTable->PreIGValue = 0;
+               #ifdef CONFIG_BEFORE_LINKED_DIG
+               //printk("%s==> ##2 CurIGI(0x%02x),PreIGValue(0x%02x) \n",__FUNCTION__,pDigTable->CurIGValue,pDigTable->PreIGValue );
+               dm_initial_gain_STA_beforelinked(pAdapter);
+               #endif //CONFIG_BEFORE_LINKED_DIG
+
+
+               DM_Write_DIG(pAdapter);
+       }
+
+}
+
+
+static void dm_CCK_PacketDetectionThresh(
+       IN      PADAPTER        pAdapter)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(pAdapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+       PFALSE_ALARM_STATISTICS FalseAlmCnt = &(pdmpriv->FalseAlmCnt);
+       DIG_T   *pDigTable = &pdmpriv->DM_DigTable;
+
+       if(pDigTable->CurSTAConnectState == DIG_STA_CONNECT)
+       {
+               pDigTable->Rssi_val_min = dm_initial_gain_MinPWDB(pAdapter);
+               if(pDigTable->PreCCKPDState == CCK_PD_STAGE_LowRssi)
+               {
+                       if(pDigTable->Rssi_val_min <= 25)
+                               pDigTable->CurCCKPDState = CCK_PD_STAGE_LowRssi;
+                       else
+                               pDigTable->CurCCKPDState = CCK_PD_STAGE_HighRssi;
+               }
+               else{
+                       if(pDigTable->Rssi_val_min <= 20)
+                               pDigTable->CurCCKPDState = CCK_PD_STAGE_LowRssi;
+                       else
+                               pDigTable->CurCCKPDState = CCK_PD_STAGE_HighRssi;
+               }
+       }
+       else
+               pDigTable->CurCCKPDState=CCK_PD_STAGE_MAX;
+
+       if(pDigTable->PreCCKPDState != pDigTable->CurCCKPDState)
+       {
+               if((pDigTable->CurCCKPDState == CCK_PD_STAGE_LowRssi)||
+                       (pDigTable->CurCCKPDState == CCK_PD_STAGE_MAX))
+               {
+                       PHY_SetBBReg(pAdapter, rCCK0_CCA, bMaskByte2, 0x83);
+
+                       //PHY_SetBBReg(pAdapter, rCCK0_System, bMaskByte1, 0x40);
+                       //if(IS_92C_SERIAL(pHalData->VersionID))
+                               //PHY_SetBBReg(pAdapter, rCCK0_FalseAlarmReport , bMaskByte2, 0xd7);
+               }
+               else
+               {
+                       PHY_SetBBReg(pAdapter, rCCK0_CCA, bMaskByte2, 0xcd);
+                       //PHY_SetBBReg(pAdapter,rCCK0_System, bMaskByte1, 0x47);
+                       //if(IS_92C_SERIAL(pHalData->VersionID))
+                               //PHY_SetBBReg(pAdapter, rCCK0_FalseAlarmReport , bMaskByte2, 0xd3);
+               }
+
+               pDigTable->PreCCKPDState = pDigTable->CurCCKPDState;
+       }
+
+       //RT_TRACE(     COMP_DIG, DBG_LOUD, ("CCKPDStage=%x\n",pDigTable->CurCCKPDState));
+       //RT_TRACE(     COMP_DIG, DBG_LOUD, ("is92C=%x\n",IS_92C_SERIAL(pHalData->VersionID)));
+
+}
+
+
+static void
+dm_CtrlInitGainByTwoPort(
+       IN      PADAPTER        pAdapter)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(pAdapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+       struct mlme_priv        *pmlmepriv = &(pAdapter->mlmepriv);
+       DIG_T   *pDigTable = &pdmpriv->DM_DigTable;
+
+       if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY) == _TRUE)
+       {
+#ifdef CONFIG_IOCTL_CFG80211
+               if((wdev_to_priv(pAdapter->rtw_wdev))->p2p_enabled == _TRUE)
+               {
+               }
+               else
+#endif
+                       return;
+       }
+
+       // Decide the current status and if modify initial gain or not
+       if (check_fwstate(pmlmepriv, _FW_UNDER_LINKING) == _TRUE)
+       {
+               pDigTable->CurSTAConnectState = DIG_STA_BEFORE_CONNECT;
+       }
+       else if(check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)
+       {
+               pDigTable->CurSTAConnectState = DIG_STA_CONNECT;
+       }
+       else
+       {
+               pDigTable->CurSTAConnectState = DIG_STA_DISCONNECT;
+       }
+
+
+       pDigTable->CurMultiSTAConnectState = DIG_MultiSTA_DISCONNECT;
+       if(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE|WIFI_ADHOC_MASTER_STATE) == _TRUE)
+       {
+               if((is_IBSS_empty(pAdapter)==_FAIL) && (pAdapter->stapriv.asoc_sta_count > 2))
+                       pDigTable->CurMultiSTAConnectState = DIG_MultiSTA_CONNECT;
+       }
+
+       if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
+       {
+               if(pAdapter->stapriv.asoc_sta_count > 2)
+                       pDigTable->CurMultiSTAConnectState = DIG_MultiSTA_CONNECT;
+       }
+
+#ifdef CONFIG_CONCURRENT_MODE
+       if(check_buddy_fwstate(pAdapter, WIFI_AP_STATE) == _TRUE)
+       {
+               PADAPTER pbuddy_adapter = pAdapter->pbuddy_adapter;
+
+               if(pbuddy_adapter->stapriv.asoc_sta_count > 2)
+               {
+                       pDigTable->CurSTAConnectState = DIG_STA_CONNECT;
+                       pDigTable->CurMultiSTAConnectState = DIG_MultiSTA_CONNECT;
+               }
+       }
+       else if(check_buddy_fwstate(pAdapter, WIFI_STATION_STATE) == _TRUE      &&
+               check_buddy_fwstate(pAdapter, _FW_LINKED) == _TRUE)
+       {
+               pDigTable->CurSTAConnectState = DIG_STA_CONNECT;
+
+       }
+#endif //CONFIG_CONCURRENT_MODE
+
+
+       dm_initial_gain_STA(pAdapter);
+       dm_initial_gain_Multi_STA(pAdapter);
+       //Baron temp DIG solution for DMP
+       //dm_CtrlInitGainByFA(pAdapter);
+
+       dm_CCK_PacketDetectionThresh(pAdapter);
+
+       pDigTable->PreSTAConnectState = pDigTable->CurSTAConnectState;
+
+}
+
+
+static void dm_DIG(
+       IN      PADAPTER        pAdapter)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(pAdapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+       DIG_T   *pDigTable = &pdmpriv->DM_DigTable;
+
+       //Read 0x0c50; Initial gain
+       pDigTable->PreIGValue = (u8)PHY_QueryBBReg(pAdapter, rOFDM0_XAAGCCore1, bMaskByte0);
+
+       //RTPRINT(FDM, DM_Monitor, ("dm_DIG() ==>\n"));
+
+       if(pdmpriv->bDMInitialGainEnable == _FALSE)
+               return;
+
+       //if(pDigTable->Dig_Enable_Flag == _FALSE)
+       //      return;
+
+       if(!(pdmpriv->DMFlag & DYNAMIC_FUNC_DIG))
+               return;
+
+       //RTPRINT(FDM, DM_Monitor, ("dm_DIG() progress \n"));
+
+       dm_CtrlInitGainByTwoPort(pAdapter);
+
+       //RTPRINT(FDM, DM_Monitor, ("dm_DIG() <==\n"));
+}
+
+static void dm_SavePowerIndex(IN       PADAPTER        Adapter)
+{
+       u8                      index;
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+       u32                     Power_Index_REG[6] = {0xc90, 0xc91, 0xc92, 0xc98, 0xc99, 0xc9a};
+
+       for(index = 0; index< 6; index++)
+               pdmpriv->PowerIndex_backup[index] = rtw_read8(Adapter, Power_Index_REG[index]);
+}
+
+static void dm_RestorePowerIndex(IN    PADAPTER        Adapter)
+{
+       u8                      index;
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+       u32                     Power_Index_REG[6] = {0xc90, 0xc91, 0xc92, 0xc98, 0xc99, 0xc9a};
+
+       for(index = 0; index< 6; index++)
+               rtw_write8(Adapter, Power_Index_REG[index], pdmpriv->PowerIndex_backup[index]);
+}
+
+static void dm_WritePowerIndex(
+               IN      PADAPTER        Adapter,
+               IN      u8              Value)
+{
+       u8                      index;
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       u32                     Power_Index_REG[6] = {0xc90, 0xc91, 0xc92, 0xc98, 0xc99, 0xc9a};
+
+       for(index = 0; index< 6; index++)
+               rtw_write8(Adapter, Power_Index_REG[index], Value);
+}
+
+static void dm_InitDynamicTxPower(IN   PADAPTER        Adapter)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+
+#ifdef CONFIG_USB_HCI
+#ifdef CONFIG_INTEL_PROXIM
+       if((pHalData->BoardType == BOARD_USB_High_PA)||(Adapter->proximity.proxim_support==_TRUE))
+#else
+       if(pHalData->BoardType == BOARD_USB_High_PA)
+#endif
+       {
+               dm_SavePowerIndex(Adapter);
+               pdmpriv->bDynamicTxPowerEnable = _TRUE;
+       }
+       else
+#else
+               pdmpriv->bDynamicTxPowerEnable = _FALSE;
+#endif
+
+       pdmpriv->LastDTPLvl = TxHighPwrLevel_Normal;
+       pdmpriv->DynamicTxHighPowerLvl = TxHighPwrLevel_Normal;
+}
+
+
+static void dm_DynamicTxPower(IN       PADAPTER        Adapter)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+       struct mlme_priv        *pmlmepriv = &(Adapter->mlmepriv);
+       struct mlme_ext_priv    *pmlmeext = &Adapter->mlmeextpriv;
+       int     UndecoratedSmoothedPWDB;
+
+       if(!pdmpriv->bDynamicTxPowerEnable)
+               return;
+
+       // If dynamic high power is disabled.
+       if(!(pdmpriv->DMFlag & DYNAMIC_FUNC_HP) )
+       {
+               pdmpriv->DynamicTxHighPowerLvl = TxHighPwrLevel_Normal;
+               return;
+       }
+
+       // STA not connected and AP not connected
+       if((check_fwstate(pmlmepriv, _FW_LINKED) != _TRUE) &&
+               (pdmpriv->EntryMinUndecoratedSmoothedPWDB == 0))
+       {
+               //RT_TRACE(COMP_HIPWR, DBG_LOUD, ("Not connected to any \n"));
+               pdmpriv->DynamicTxHighPowerLvl = TxHighPwrLevel_Normal;
+
+               //the LastDTPlvl should reset when disconnect,
+               //otherwise the tx power level wouldn't change when disconnect and connect again.
+               // Maddest 20091220.
+               pdmpriv->LastDTPLvl=TxHighPwrLevel_Normal;
+               return;
+       }
+#ifdef CONFIG_INTEL_PROXIM
+       if(Adapter->proximity.proxim_on== _TRUE){
+               struct proximity_priv *prox_priv=Adapter->proximity.proximity_priv;
+       // Intel set fixed tx power
+       printk("\n %s  Adapter->proximity.proxim_on=%d prox_priv->proxim_modeinfo->power_output=%d \n",__FUNCTION__,Adapter->proximity.proxim_on,prox_priv->proxim_modeinfo->power_output);
+       if(prox_priv!=NULL){
+       if(prox_priv->proxim_modeinfo->power_output> 0)
+
+       {
+               switch(prox_priv->proxim_modeinfo->power_output){
+                       case 1:
+                               pdmpriv->DynamicTxHighPowerLvl  = TxHighPwrLevel_100;
+                               printk("TxHighPwrLevel_100\n");
+                               break;
+                       case 2:
+                               pdmpriv->DynamicTxHighPowerLvl  = TxHighPwrLevel_70;
+                               printk("TxHighPwrLevel_70\n");
+                               break;
+                       case 3:
+                               pdmpriv->DynamicTxHighPowerLvl  = TxHighPwrLevel_50;
+                               printk("TxHighPwrLevel_50\n");
+                               break;
+                       case 4:
+                               pdmpriv->DynamicTxHighPowerLvl  = TxHighPwrLevel_35;
+                               printk("TxHighPwrLevel_35\n");
+                               break;
+                       case 5:
+                               pdmpriv->DynamicTxHighPowerLvl  = TxHighPwrLevel_15;
+                               printk("TxHighPwrLevel_15\n");
+                               break;
+                       default:
+                               pdmpriv->DynamicTxHighPowerLvl = TxHighPwrLevel_100;
+                               printk("TxHighPwrLevel_100\n");
+                               break;
+               }
+       }
+       }
+       }
+       else
+#endif
+{
+       if(check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)       // Default port
+       {
+               //todo: AP Mode
+               if ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE) ||
+                      (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE))
+               {
+                       UndecoratedSmoothedPWDB = pdmpriv->EntryMinUndecoratedSmoothedPWDB;
+                       //RT_TRACE(COMP_HIPWR, DBG_LOUD, ("AP Client PWDB = 0x%x \n", UndecoratedSmoothedPWDB));
+               }
+               else
+               {
+                       UndecoratedSmoothedPWDB = pdmpriv->UndecoratedSmoothedPWDB;
+                       //RT_TRACE(COMP_HIPWR, DBG_LOUD, ("STA Default Port PWDB = 0x%x \n", UndecoratedSmoothedPWDB));
+               }
+       }
+       else // associated entry pwdb
+       {
+               UndecoratedSmoothedPWDB = pdmpriv->EntryMinUndecoratedSmoothedPWDB;
+               //RT_TRACE(COMP_HIPWR, DBG_LOUD, ("AP Ext Port PWDB = 0x%x \n", UndecoratedSmoothedPWDB));
+       }
+
+       if(UndecoratedSmoothedPWDB >= TX_POWER_NEAR_FIELD_THRESH_LVL2)
+       {
+               pdmpriv->DynamicTxHighPowerLvl = TxHighPwrLevel_Level2;
+               //RT_TRACE(COMP_HIPWR, DBG_LOUD, ("TxHighPwrLevel_Level1 (TxPwr=0x0)\n"));
+       }
+       else if((UndecoratedSmoothedPWDB < (TX_POWER_NEAR_FIELD_THRESH_LVL2-3)) &&
+               (UndecoratedSmoothedPWDB >= TX_POWER_NEAR_FIELD_THRESH_LVL1) )
+       {
+               pdmpriv->DynamicTxHighPowerLvl = TxHighPwrLevel_Level1;
+               //RT_TRACE(COMP_HIPWR, DBG_LOUD, ("TxHighPwrLevel_Level1 (TxPwr=0x10)\n"));
+       }
+       else if(UndecoratedSmoothedPWDB < (TX_POWER_NEAR_FIELD_THRESH_LVL1-5))
+       {
+               pdmpriv->DynamicTxHighPowerLvl = TxHighPwrLevel_Normal;
+               //RT_TRACE(COMP_HIPWR, DBG_LOUD, ("TxHighPwrLevel_Normal\n"));
+       }
+}
+       if( (pdmpriv->DynamicTxHighPowerLvl != pdmpriv->LastDTPLvl) )
+       {
+               PHY_SetTxPowerLevel8192C(Adapter, pHalData->CurrentChannel);
+               if(pdmpriv->DynamicTxHighPowerLvl == TxHighPwrLevel_Normal) // HP1 -> Normal  or HP2 -> Normal
+                       dm_RestorePowerIndex(Adapter);
+               else if(pdmpriv->DynamicTxHighPowerLvl == TxHighPwrLevel_Level1)
+                       dm_WritePowerIndex(Adapter, 0x14);
+               else if(pdmpriv->DynamicTxHighPowerLvl == TxHighPwrLevel_Level2)
+                       dm_WritePowerIndex(Adapter, 0x10);
+       }
+       pdmpriv->LastDTPLvl = pdmpriv->DynamicTxHighPowerLvl;
+
+}
+
+
+static VOID
+DM_ChangeDynamicInitGainThresh(
+       IN      PADAPTER        pAdapter,
+       IN      u32             DM_Type,
+       IN      u32             DM_Value)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(pAdapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+       DIG_T   *pDigTable = &pdmpriv->DM_DigTable;
+
+       if (DM_Type == DIG_TYPE_THRESH_HIGH)
+       {
+               pDigTable->RssiHighThresh = DM_Value;
+       }
+       else if (DM_Type == DIG_TYPE_THRESH_LOW)
+       {
+               pDigTable->RssiLowThresh = DM_Value;
+       }
+       else if (DM_Type == DIG_TYPE_ENABLE)
+       {
+               pDigTable->Dig_Enable_Flag = _TRUE;
+       }
+       else if (DM_Type == DIG_TYPE_DISABLE)
+       {
+               pDigTable->Dig_Enable_Flag = _FALSE;
+       }
+       else if (DM_Type == DIG_TYPE_BACKOFF)
+       {
+               if(DM_Value > 30)
+                       DM_Value = 30;
+               pDigTable->BackoffVal = (u8)DM_Value;
+       }
+       else if(DM_Type == DIG_TYPE_RX_GAIN_MIN)
+       {
+               if(DM_Value == 0)
+                       DM_Value = 0x1;
+               pDigTable->rx_gain_range_min = (u8)DM_Value;
+       }
+       else if(DM_Type == DIG_TYPE_RX_GAIN_MAX)
+       {
+               if(DM_Value > 0x50)
+                       DM_Value = 0x50;
+               pDigTable->rx_gain_range_max = (u8)DM_Value;
+       }
+}      /* DM_ChangeDynamicInitGainThresh */
+
+
+static VOID PWDB_Monitor(
+       IN      PADAPTER        Adapter
+       )
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+       int     i;
+       int     tmpEntryMaxPWDB=0, tmpEntryMinPWDB=0xff;
+       u8      sta_cnt=0;
+       u32 PWDB_rssi[NUM_STA]={0};//[0~15]:MACID, [16~31]:PWDB_rssi
+
+       if(check_fwstate(&Adapter->mlmepriv, _FW_LINKED) != _TRUE)
+               return;
+
+
+       if(check_fwstate(&Adapter->mlmepriv, WIFI_AP_STATE|WIFI_ADHOC_STATE|WIFI_ADHOC_MASTER_STATE) == _TRUE)
+       {
+               _irqL irqL;
+               _list   *plist, *phead;
+               struct sta_info *psta;
+               struct sta_priv *pstapriv = &Adapter->stapriv;
+               u8 bcast_addr[ETH_ALEN]= {0xff,0xff,0xff,0xff,0xff,0xff};
+
+               _enter_critical_bh(&pstapriv->sta_hash_lock, &irqL);
+
+               for(i=0; i< NUM_STA; i++)
+               {
+                       phead = &(pstapriv->sta_hash[i]);
+                       plist = get_next(phead);
+
+                       while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
+                       {
+                               psta = LIST_CONTAINOR(plist, struct sta_info, hash_list);
+
+                               plist = get_next(plist);
+
+                               if(_rtw_memcmp(psta     ->hwaddr, bcast_addr, ETH_ALEN) ||
+                                       _rtw_memcmp(psta->hwaddr, myid(&Adapter->eeprompriv), ETH_ALEN))
+                                       continue;
+
+                               if(psta->state & WIFI_ASOC_STATE)
+                               {
+
+                                       if(psta->rssi_stat.UndecoratedSmoothedPWDB < tmpEntryMinPWDB)
+                                               tmpEntryMinPWDB = psta->rssi_stat.UndecoratedSmoothedPWDB;
+
+                                       if(psta->rssi_stat.UndecoratedSmoothedPWDB > tmpEntryMaxPWDB)
+                                               tmpEntryMaxPWDB = psta->rssi_stat.UndecoratedSmoothedPWDB;
+
+                                       PWDB_rssi[sta_cnt++] = (psta->mac_id | (psta->rssi_stat.UndecoratedSmoothedPWDB<<16));
+                               }
+
+                       }
+
+               }
+
+               _exit_critical_bh(&pstapriv->sta_hash_lock, &irqL);
+
+
+
+               if(pHalData->fw_ractrl == _TRUE)
+               {
+                       // Report every sta's RSSI to FW
+                       for(i=0; i< sta_cnt; i++)
+                       {
+                               rtl8192c_set_rssi_cmd(Adapter, (u8*)&PWDB_rssi[i]);
+                       }
+               }
+
+       }
+
+
+
+       if(tmpEntryMaxPWDB != 0)        // If associated entry is found
+       {
+               pdmpriv->EntryMaxUndecoratedSmoothedPWDB = tmpEntryMaxPWDB;
+       }
+       else
+       {
+               pdmpriv->EntryMaxUndecoratedSmoothedPWDB = 0;
+       }
+
+       if(tmpEntryMinPWDB != 0xff) // If associated entry is found
+       {
+               pdmpriv->EntryMinUndecoratedSmoothedPWDB = tmpEntryMinPWDB;
+       }
+       else
+       {
+               pdmpriv->EntryMinUndecoratedSmoothedPWDB = 0;
+       }
+
+
+       if(check_fwstate(&Adapter->mlmepriv, WIFI_STATION_STATE) == _TRUE)
+       {
+
+               if(pHalData->fw_ractrl == _TRUE)
+               {
+                       u32 param = (u32)(pdmpriv->UndecoratedSmoothedPWDB<<16);
+
+                       param |= 0;//macid=0 for sta mode;
+
+                       rtl8192c_set_rssi_cmd(Adapter, (u8*)&param);
+               }
+       }
+
+}
+
+
+static void
+DM_InitEdcaTurbo(
+       IN      PADAPTER        Adapter
+       )
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+
+       pHalData->bCurrentTurboEDCA = _FALSE;
+       Adapter->recvpriv.bIsAnyNonBEPkts = _FALSE;
+
+}
+
+
+static void
+dm_CheckEdcaTurbo(
+       IN      PADAPTER        Adapter
+       )
+{
+       u32     trafficIndex;
+       u32     edca_param;
+       u64     cur_tx_bytes = 0;
+       u64     cur_rx_bytes = 0;
+       u8      bbtchange = _FALSE;
+       HAL_DATA_TYPE           *pHalData = GET_HAL_DATA(Adapter);
+       struct dm_priv          *pdmpriv = &pHalData->dmpriv;
+       struct xmit_priv                *pxmitpriv = &(Adapter->xmitpriv);
+       struct recv_priv                *precvpriv = &(Adapter->recvpriv);
+       struct registry_priv    *pregpriv = &Adapter->registrypriv;
+       struct mlme_ext_priv    *pmlmeext = &(Adapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+#ifdef CONFIG_BT_COEXIST
+       struct btcoexist_priv   *pbtpriv = &(pHalData->bt_coexist);
+#endif
+
+
+       if ((pregpriv->wifi_spec == 1) || (pmlmeinfo->HT_enable == 0))
+       {
+               goto dm_CheckEdcaTurbo_EXIT;
+       }
+
+       if (pmlmeinfo->assoc_AP_vendor >= maxAP)
+       {
+               goto dm_CheckEdcaTurbo_EXIT;
+       }
+
+#ifdef CONFIG_BT_COEXIST
+       if(pbtpriv->BT_Coexist)
+       {
+               if( (pbtpriv->BT_EDCA[UP_LINK]!=0) ||  (pbtpriv->BT_EDCA[DOWN_LINK]!=0))
+               {
+                       bbtchange = _TRUE;
+               }
+       }
+#endif
+
+       // Check if the status needs to be changed.
+       if((bbtchange) || (!precvpriv->bIsAnyNonBEPkts) )
+       {
+               cur_tx_bytes = pxmitpriv->tx_bytes - pxmitpriv->last_tx_bytes;
+               cur_rx_bytes = precvpriv->rx_bytes - precvpriv->last_rx_bytes;
+
+               //traffic, TX or RX
+               if((pmlmeinfo->assoc_AP_vendor == ralinkAP)||(pmlmeinfo->assoc_AP_vendor == atherosAP))
+               {
+                       if (cur_tx_bytes > (cur_rx_bytes << 2))
+                       { // Uplink TP is present.
+                               trafficIndex = UP_LINK;
+                       }
+                       else
+                       { // Balance TP is present.
+                               trafficIndex = DOWN_LINK;
+                       }
+               }
+               else
+               {
+                       if (cur_rx_bytes > (cur_tx_bytes << 2))
+                       { // Downlink TP is present.
+                               trafficIndex = DOWN_LINK;
+                       }
+                       else
+                       { // Balance TP is present.
+                               trafficIndex = UP_LINK;
+                       }
+               }
+
+               if ((pdmpriv->prv_traffic_idx != trafficIndex) || (!pHalData->bCurrentTurboEDCA))
+               {
+#ifdef CONFIG_BT_COEXIST
+                       if(_TRUE == bbtchange)
+                       {
+                               edca_param = pbtpriv->BT_EDCA[trafficIndex];
+                       }
+                       else
+#endif
+                       {
+#if 0
+                               //adjust EDCA parameter for BE queue
+                               edca_param = EDCAParam[pmlmeinfo->assoc_AP_vendor][trafficIndex];
+#else
+
+                               if((pmlmeinfo->assoc_AP_vendor == ciscoAP) && (pmlmeext->cur_wireless_mode & WIRELESS_11_24N))
+                               {
+                                       edca_param = EDCAParam[pmlmeinfo->assoc_AP_vendor][trafficIndex];
+                               }
+                               else
+                               {
+                                       edca_param = EDCAParam[unknownAP][trafficIndex];
+                               }
+#endif
+                       }
+
+#ifdef CONFIG_PCI_HCI
+                       if(IS_92C_SERIAL(pHalData->VersionID))
+                       {
+                               edca_param = 0x60a42b;
+                       }
+                       else
+                       {
+                               edca_param = 0x6ea42b;
+                       }
+#endif
+                       rtw_write32(Adapter, REG_EDCA_BE_PARAM, edca_param);
+
+                       pdmpriv->prv_traffic_idx = trafficIndex;
+               }
+
+               pHalData->bCurrentTurboEDCA = _TRUE;
+       }
+       else
+       {
+               //
+               // Turn Off EDCA turbo here.
+               // Restore original EDCA according to the declaration of AP.
+               //
+                if(pHalData->bCurrentTurboEDCA)
+               {
+                       rtw_write32(Adapter, REG_EDCA_BE_PARAM, pHalData->AcParam_BE);
+                       pHalData->bCurrentTurboEDCA = _FALSE;
+               }
+       }
+
+dm_CheckEdcaTurbo_EXIT:
+       // Set variables for next time.
+       precvpriv->bIsAnyNonBEPkts = _FALSE;
+       pxmitpriv->last_tx_bytes = pxmitpriv->tx_bytes;
+       precvpriv->last_rx_bytes = precvpriv->rx_bytes;
+
+}
+
+#define DPK_DELTA_MAPPING_NUM  13
+#define index_mapping_HP_NUM           15
+
+static VOID
+dm_TXPowerTrackingCallback_ThermalMeter_92C(
+            IN PADAPTER        Adapter)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+       u8                      ThermalValue = 0, delta, delta_LCK, delta_IQK, delta_HP, TimeOut = 100;
+       int                     ele_A, ele_D, TempCCk, X, value32;
+       int                     Y, ele_C;
+       s8                      OFDM_index[2], CCK_index = 0, OFDM_index_old[2], CCK_index_old = 0;
+       int                     i = 0;
+       BOOLEAN         is2T = IS_92C_SERIAL(pHalData->VersionID);
+
+#if MP_DRIVER == 1
+       PMPT_CONTEXT    pMptCtx = &(Adapter->mppriv.MptCtx);
+       u8                      *TxPwrLevel = pMptCtx->TxPwrLevel;
+#endif
+       u8                      OFDM_min_index = 6, rf; //OFDM BB Swing should be less than +3.0dB, which is required by Arthur
+#if 0
+       u32                     DPK_delta_mapping[2][DPK_DELTA_MAPPING_NUM] = {
+                                       {0x1c, 0x1c, 0x1d, 0x1d, 0x1e,
+                                        0x1f, 0x00, 0x00, 0x01, 0x01,
+                                        0x02, 0x02, 0x03},
+                                       {0x1c, 0x1d, 0x1e, 0x1e, 0x1e,
+                                        0x1f, 0x00, 0x00, 0x01, 0x02,
+                                        0x02, 0x03, 0x03}};
+#endif
+#ifdef CONFIG_USB_HCI
+       u8                      ThermalValue_HP_count = 0;
+       u32                     ThermalValue_HP = 0;
+       s32                     index_mapping_HP[index_mapping_HP_NUM] = {
+                                       0,      1,      3,      4,      6,
+                                       7,      9,      10,     12,     13,
+                                       15,     16,     18,     19,     21
+                                       };
+
+       s8                      index_HP;
+#endif
+
+       pdmpriv->TXPowerTrackingCallbackCnt++;  //cosa add for debug
+       pdmpriv->bTXPowerTrackingInit = _TRUE;
+
+       if(pHalData->CurrentChannel == 14 && !pdmpriv->bCCKinCH14)
+               pdmpriv->bCCKinCH14 = _TRUE;
+       else if(pHalData->CurrentChannel != 14 && pdmpriv->bCCKinCH14)
+               pdmpriv->bCCKinCH14 = _FALSE;
+
+       //DBG_8192C("===>dm_TXPowerTrackingCallback_ThermalMeter_92C\n");
+
+       ThermalValue = (u8)PHY_QueryRFReg(Adapter, RF_PATH_A, RF_T_METER, 0x1f);        // 0x24: RF Reg[4:0]
+
+       //DBG_8192C("\n\nReadback Thermal Meter = 0x%x pre thermal meter 0x%x EEPROMthermalmeter 0x%x\n",ThermalValue,pdmpriv->ThermalValue,  pHalData->EEPROMThermalMeter);
+
+       rtl8192c_PHY_APCalibrate(Adapter, (ThermalValue - pHalData->EEPROMThermalMeter));
+
+       if(is2T)
+               rf = 2;
+       else
+               rf = 1;
+
+       if(ThermalValue)
+       {
+//             if(!pHalData->ThermalValue)
+               {
+                       //Query OFDM path A default setting
+                       ele_D = PHY_QueryBBReg(Adapter, rOFDM0_XATxIQImbalance, bMaskDWord)&bMaskOFDM_D;
+                       for(i=0; i<OFDM_TABLE_SIZE_92C; i++)    //find the index
+                       {
+                               if(ele_D == (OFDMSwingTable[i]&bMaskOFDM_D))
+                               {
+                                       OFDM_index_old[0] = (u8)i;
+                                       //DBG_8192C("Initial pathA ele_D reg0x%x = 0x%x, OFDM_index=0x%x\n", rOFDM0_XATxIQImbalance, ele_D, OFDM_index_old[0]);
+                                       break;
+                               }
+                       }
+
+                       //Query OFDM path B default setting
+                       if(is2T)
+                       {
+                               ele_D = PHY_QueryBBReg(Adapter, rOFDM0_XBTxIQImbalance, bMaskDWord)&bMaskOFDM_D;
+                               for(i=0; i<OFDM_TABLE_SIZE_92C; i++)    //find the index
+                               {
+                                       if(ele_D == (OFDMSwingTable[i]&bMaskOFDM_D))
+                                       {
+                                               OFDM_index_old[1] = (u8)i;
+                                               //DBG_8192C("Initial pathB ele_D reg0x%x = 0x%x, OFDM_index=0x%x\n",rOFDM0_XBTxIQImbalance, ele_D, OFDM_index_old[1]);
+                                               break;
+                                       }
+                               }
+                       }
+
+                       //Query CCK default setting From 0xa24
+                       TempCCk = PHY_QueryBBReg(Adapter, rCCK0_TxFilter2, bMaskDWord)&bMaskCCK;
+                       for(i=0 ; i<CCK_TABLE_SIZE ; i++)
+                       {
+                               if(pdmpriv->bCCKinCH14)
+                               {
+                                       if(_rtw_memcmp((void*)&TempCCk, (void*)&CCKSwingTable_Ch14[i][2], 4)==_TRUE)
+                                       {
+                                               CCK_index_old =(u8)i;
+                                               //DBG_8192C("Initial reg0x%x = 0x%x, CCK_index=0x%x, ch 14 %d\n", rCCK0_TxFilter2, TempCCk, CCK_index_old, pdmpriv->bCCKinCH14);
+                                               break;
+                                       }
+                               }
+                               else
+                               {
+                                       if(_rtw_memcmp((void*)&TempCCk, (void*)&CCKSwingTable_Ch1_Ch13[i][2], 4)==_TRUE)
+                                       {
+                                               CCK_index_old =(u8)i;
+                                               //DBG_8192C("Initial reg0x%x = 0x%x, CCK_index=0x%x, ch14 %d\n", rCCK0_TxFilter2, TempCCk, CCK_index_old, pdmpriv->bCCKinCH14);
+                                               break;
+                                       }
+                               }
+                       }
+
+                       if(!pdmpriv->ThermalValue)
+                       {
+                               pdmpriv->ThermalValue = pHalData->EEPROMThermalMeter;
+                               pdmpriv->ThermalValue_LCK = ThermalValue;
+                               pdmpriv->ThermalValue_IQK = ThermalValue;
+                               pdmpriv->ThermalValue_DPK = pHalData->EEPROMThermalMeter;
+
+#ifdef CONFIG_USB_HCI
+                               for(i = 0; i < rf; i++)
+                                       pdmpriv->OFDM_index_HP[i] = pdmpriv->OFDM_index[i] = OFDM_index_old[i];
+                               pdmpriv->CCK_index_HP = pdmpriv->CCK_index = CCK_index_old;
+#else
+                               for(i = 0; i < rf; i++)
+                                       pdmpriv->OFDM_index[i] = OFDM_index_old[i];
+                               pdmpriv->CCK_index = CCK_index_old;
+#endif
+                       }
+
+#ifdef CONFIG_USB_HCI
+                       if(pHalData->BoardType == BOARD_USB_High_PA)
+                       {
+                               pdmpriv->ThermalValue_HP[pdmpriv->ThermalValue_HP_index] = ThermalValue;
+                               pdmpriv->ThermalValue_HP_index++;
+                               if(pdmpriv->ThermalValue_HP_index == HP_THERMAL_NUM)
+                                       pdmpriv->ThermalValue_HP_index = 0;
+
+                               for(i = 0; i < HP_THERMAL_NUM; i++)
+                               {
+                                       if(pdmpriv->ThermalValue_HP[i])
+                                       {
+                                               ThermalValue_HP += pdmpriv->ThermalValue_HP[i];
+                                               ThermalValue_HP_count++;
+                                       }
+                               }
+
+                               if(ThermalValue_HP_count)
+                                       ThermalValue = (u8)(ThermalValue_HP / ThermalValue_HP_count);
+                       }
+#endif
+               }
+
+               delta = (ThermalValue > pdmpriv->ThermalValue)?(ThermalValue - pdmpriv->ThermalValue):(pdmpriv->ThermalValue - ThermalValue);
+#ifdef CONFIG_USB_HCI
+               if(pHalData->BoardType == BOARD_USB_High_PA)
+               {
+                       if(pdmpriv->bDoneTxpower)
+                               delta_HP = (ThermalValue > pdmpriv->ThermalValue)?(ThermalValue - pdmpriv->ThermalValue):(pdmpriv->ThermalValue - ThermalValue);
+                       else
+                               delta_HP = ThermalValue > pHalData->EEPROMThermalMeter?(ThermalValue - pHalData->EEPROMThermalMeter):(pHalData->EEPROMThermalMeter - ThermalValue);
+               }
+               else
+#endif
+               {
+                       delta_HP = 0;
+               }
+               delta_LCK = (ThermalValue > pdmpriv->ThermalValue_LCK)?(ThermalValue - pdmpriv->ThermalValue_LCK):(pdmpriv->ThermalValue_LCK - ThermalValue);
+               delta_IQK = (ThermalValue > pdmpriv->ThermalValue_IQK)?(ThermalValue - pdmpriv->ThermalValue_IQK):(pdmpriv->ThermalValue_IQK - ThermalValue);
+
+               //DBG_8192C("Readback Thermal Meter = 0x%lx pre thermal meter 0x%lx EEPROMthermalmeter 0x%lx delta 0x%lx delta_LCK 0x%lx delta_IQK 0x%lx\n", ThermalValue, pHalData->ThermalValue, pHalData->EEPROMThermalMeter, delta, delta_LCK, delta_IQK);
+
+               if(delta_LCK > 1)
+               {
+                       pdmpriv->ThermalValue_LCK = ThermalValue;
+                       rtl8192c_PHY_LCCalibrate(Adapter);
+               }
+
+               if((delta > 0 || delta_HP > 0) && pdmpriv->TxPowerTrackControl)
+               {
+#ifdef CONFIG_USB_HCI
+                       if(pHalData->BoardType == BOARD_USB_High_PA)
+                       {
+                               pdmpriv->bDoneTxpower = _TRUE;
+                               delta_HP = ThermalValue > pHalData->EEPROMThermalMeter?(ThermalValue - pHalData->EEPROMThermalMeter):(pHalData->EEPROMThermalMeter - ThermalValue);
+
+                               if(delta_HP > index_mapping_HP_NUM-1)
+                                       index_HP = index_mapping_HP[index_mapping_HP_NUM-1];
+                               else
+                                       index_HP = index_mapping_HP[delta_HP];
+
+                               if(ThermalValue > pHalData->EEPROMThermalMeter) //set larger Tx power
+                               {
+                                       for(i = 0; i < rf; i++)
+                                               OFDM_index[i] = pdmpriv->OFDM_index_HP[i] - index_HP;
+                                       CCK_index = pdmpriv->CCK_index_HP -index_HP;
+                               }
+                               else
+                               {
+                                       for(i = 0; i < rf; i++)
+                                               OFDM_index[i] = pdmpriv->OFDM_index_HP[i] + index_HP;
+                                       CCK_index = pdmpriv->CCK_index_HP + index_HP;
+                               }
+
+                               delta_HP = (ThermalValue > pdmpriv->ThermalValue)?(ThermalValue - pdmpriv->ThermalValue):(pdmpriv->ThermalValue - ThermalValue);
+
+                       }
+                       else
+#endif
+                       {
+                               if(ThermalValue > pdmpriv->ThermalValue)
+                               {
+                                       for(i = 0; i < rf; i++)
+                                               pdmpriv->OFDM_index[i] -= delta;
+                                       pdmpriv->CCK_index -= delta;
+                               }
+                               else
+                               {
+                                       for(i = 0; i < rf; i++)
+                                               pdmpriv->OFDM_index[i] += delta;
+                                       pdmpriv->CCK_index += delta;
+                               }
+                       }
+
+                       /*if(is2T)
+                       {
+                               DBG_8192C("temp OFDM_A_index=0x%x, OFDM_B_index=0x%x, CCK_index=0x%x\n",
+                                       pdmpriv->OFDM_index[0], pdmpriv->OFDM_index[1], pdmpriv->CCK_index);
+                       }
+                       else
+                       {
+                               DBG_8192C("temp OFDM_A_index=0x%x, CCK_index=0x%x\n",
+                                       pdmpriv->OFDM_index[0], pdmpriv->CCK_index);
+                       }*/
+
+                       //no adjust
+#ifdef CONFIG_USB_HCI
+                       if(pHalData->BoardType != BOARD_USB_High_PA)
+#endif
+                       {
+                               if(ThermalValue > pHalData->EEPROMThermalMeter)
+                               {
+                                       for(i = 0; i < rf; i++)
+                                               OFDM_index[i] = pdmpriv->OFDM_index[i]+1;
+                                       CCK_index = pdmpriv->CCK_index+1;
+                               }
+                               else
+                               {
+                                       for(i = 0; i < rf; i++)
+                                               OFDM_index[i] = pdmpriv->OFDM_index[i];
+                                       CCK_index = pdmpriv->CCK_index;
+                               }
+
+#if MP_DRIVER == 1
+                               for(i = 0; i < rf; i++)
+                               {
+                                       if(TxPwrLevel[i] >=0 && TxPwrLevel[i] <=26)
+                                       {
+                                               if(ThermalValue > pHalData->EEPROMThermalMeter)
+                                               {
+                                                       if (delta < 5)
+                                                               OFDM_index[i] -= 1;
+                                                       else
+                                                               OFDM_index[i] -= 2;
+                                               }
+                                               else if(delta > 5 && ThermalValue < pHalData->EEPROMThermalMeter)
+                                               {
+                                                       OFDM_index[i] += 1;
+                                               }
+                                       }
+                                       else if (TxPwrLevel[i] >= 27 && TxPwrLevel[i] <= 32 && ThermalValue > pHalData->EEPROMThermalMeter)
+                                       {
+                                               if (delta < 5)
+                                                       OFDM_index[i] -= 1;
+                                               else
+                                                       OFDM_index[i] -= 2;
+                                       }
+                                       else if (TxPwrLevel[i] >= 32 && TxPwrLevel[i] <= 38 && ThermalValue > pHalData->EEPROMThermalMeter && delta > 5)
+                                       {
+                                               OFDM_index[i] -= 1;
+                                       }
+                               }
+
+                               {
+                                       if(TxPwrLevel[i] >=0 && TxPwrLevel[i] <=26)
+                                       {
+                                               if(ThermalValue > pHalData->EEPROMThermalMeter)
+                                               {
+                                                       if (delta < 5)
+                                                               CCK_index -= 1;
+                                                       else
+                                                               CCK_index -= 2;
+                                               }
+                                               else if(delta > 5 && ThermalValue < pHalData->EEPROMThermalMeter)
+                                               {
+                                                       CCK_index += 1;
+                                               }
+                                       }
+                                       else if (TxPwrLevel[i] >= 27 && TxPwrLevel[i] <= 32 && ThermalValue > pHalData->EEPROMThermalMeter)
+                                       {
+                                               if (delta < 5)
+                                                       CCK_index -= 1;
+                                               else
+                                                       CCK_index -= 2;
+                                       }
+                                       else if (TxPwrLevel[i] >= 32 && TxPwrLevel[i] <= 38 && ThermalValue > pHalData->EEPROMThermalMeter && delta > 5)
+                                       {
+                                               CCK_index -= 1;
+                                       }
+                               }
+#endif
+                       }
+
+                       for(i = 0; i < rf; i++)
+                       {
+                               if(OFDM_index[i] > (OFDM_TABLE_SIZE_92C-1))
+                                       OFDM_index[i] = (OFDM_TABLE_SIZE_92C-1);
+                               else if (OFDM_index[i] < OFDM_min_index)
+                                       OFDM_index[i] = OFDM_min_index;
+                       }
+
+                       if(CCK_index > (CCK_TABLE_SIZE-1))
+                               CCK_index = (CCK_TABLE_SIZE-1);
+                       else if (CCK_index < 0)
+                               CCK_index = 0;
+
+                       /*if(is2T)
+                       {
+                               DBG_8192C("new OFDM_A_index=0x%x, OFDM_B_index=0x%x, CCK_index=0x%x\n",
+                                       OFDM_index[0], OFDM_index[1], CCK_index);
+                       }
+                       else
+                       {
+                               DBG_8192C("new OFDM_A_index=0x%x, CCK_index=0x%x\n",
+                                       OFDM_index[0], CCK_index);
+                       }*/
+               }
+
+               if(pdmpriv->TxPowerTrackControl && (delta != 0 || delta_HP != 0))
+               {
+                       //Adujst OFDM Ant_A according to IQK result
+                       ele_D = (OFDMSwingTable[OFDM_index[0]] & 0xFFC00000)>>22;
+                       X = pdmpriv->RegE94;
+                       Y = pdmpriv->RegE9C;
+
+                       if(X != 0)
+                       {
+                               if ((X & 0x00000200) != 0)
+                                       X = X | 0xFFFFFC00;
+                               ele_A = ((X * ele_D)>>8)&0x000003FF;
+
+                               //new element C = element D x Y
+                               if ((Y & 0x00000200) != 0)
+                                       Y = Y | 0xFFFFFC00;
+                               ele_C = ((Y * ele_D)>>8)&0x000003FF;
+
+                               //wirte new elements A, C, D to regC80 and regC94, element B is always 0
+                               value32 = (ele_D<<22)|((ele_C&0x3F)<<16)|ele_A;
+                               PHY_SetBBReg(Adapter, rOFDM0_XATxIQImbalance, bMaskDWord, value32);
+
+                               value32 = (ele_C&0x000003C0)>>6;
+                               PHY_SetBBReg(Adapter, rOFDM0_XCTxAFE, bMaskH4Bits, value32);
+
+                               value32 = ((X * ele_D)>>7)&0x01;
+                               PHY_SetBBReg(Adapter, rOFDM0_ECCAThreshold, BIT31, value32);
+
+                               value32 = ((Y * ele_D)>>7)&0x01;
+                               PHY_SetBBReg(Adapter, rOFDM0_ECCAThreshold, BIT29, value32);
+
+                       }
+                       else
+                       {
+                               PHY_SetBBReg(Adapter, rOFDM0_XATxIQImbalance, bMaskDWord, OFDMSwingTable[OFDM_index[0]]);
+                               PHY_SetBBReg(Adapter, rOFDM0_XCTxAFE, bMaskH4Bits, 0x00);
+                               PHY_SetBBReg(Adapter, rOFDM0_ECCAThreshold, BIT31|BIT29, 0x00);
+                       }
+
+                       //RTPRINT(FINIT, INIT_IQK, ("TxPwrTracking path A: X = 0x%x, Y = 0x%x ele_A = 0x%x ele_C = 0x%x ele_D = 0x%x\n", X, Y, ele_A, ele_C, ele_D));
+
+                       //Adjust CCK according to IQK result
+                       if(!pdmpriv->bCCKinCH14){
+                               rtw_write8(Adapter, 0xa22, CCKSwingTable_Ch1_Ch13[CCK_index][0]);
+                               rtw_write8(Adapter, 0xa23, CCKSwingTable_Ch1_Ch13[CCK_index][1]);
+                               rtw_write8(Adapter, 0xa24, CCKSwingTable_Ch1_Ch13[CCK_index][2]);
+                               rtw_write8(Adapter, 0xa25, CCKSwingTable_Ch1_Ch13[CCK_index][3]);
+                               rtw_write8(Adapter, 0xa26, CCKSwingTable_Ch1_Ch13[CCK_index][4]);
+                               rtw_write8(Adapter, 0xa27, CCKSwingTable_Ch1_Ch13[CCK_index][5]);
+                               rtw_write8(Adapter, 0xa28, CCKSwingTable_Ch1_Ch13[CCK_index][6]);
+                               rtw_write8(Adapter, 0xa29, CCKSwingTable_Ch1_Ch13[CCK_index][7]);
+                       }
+                       else{
+                               rtw_write8(Adapter, 0xa22, CCKSwingTable_Ch14[CCK_index][0]);
+                               rtw_write8(Adapter, 0xa23, CCKSwingTable_Ch14[CCK_index][1]);
+                               rtw_write8(Adapter, 0xa24, CCKSwingTable_Ch14[CCK_index][2]);
+                               rtw_write8(Adapter, 0xa25, CCKSwingTable_Ch14[CCK_index][3]);
+                               rtw_write8(Adapter, 0xa26, CCKSwingTable_Ch14[CCK_index][4]);
+                               rtw_write8(Adapter, 0xa27, CCKSwingTable_Ch14[CCK_index][5]);
+                               rtw_write8(Adapter, 0xa28, CCKSwingTable_Ch14[CCK_index][6]);
+                               rtw_write8(Adapter, 0xa29, CCKSwingTable_Ch14[CCK_index][7]);
+                       }
+
+                       if(is2T)
+                       {
+                               ele_D = (OFDMSwingTable[(u8)OFDM_index[1]] & 0xFFC00000)>>22;
+
+                               //new element A = element D x X
+                               X = pdmpriv->RegEB4;
+                               Y = pdmpriv->RegEBC;
+
+                               if(X != 0){
+                                       if ((X & 0x00000200) != 0)      //consider minus
+                                               X = X | 0xFFFFFC00;
+                                       ele_A = ((X * ele_D)>>8)&0x000003FF;
+
+                                       //new element C = element D x Y
+                                       if ((Y & 0x00000200) != 0)
+                                               Y = Y | 0xFFFFFC00;
+                                       ele_C = ((Y * ele_D)>>8)&0x00003FF;
+
+                                       //wirte new elements A, C, D to regC88 and regC9C, element B is always 0
+                                       value32=(ele_D<<22)|((ele_C&0x3F)<<16) |ele_A;
+                                       PHY_SetBBReg(Adapter, rOFDM0_XBTxIQImbalance, bMaskDWord, value32);
+
+                                       value32 = (ele_C&0x000003C0)>>6;
+                                       PHY_SetBBReg(Adapter, rOFDM0_XDTxAFE, bMaskH4Bits, value32);
+
+                                       value32 = ((X * ele_D)>>7)&0x01;
+                                       PHY_SetBBReg(Adapter, rOFDM0_ECCAThreshold, BIT27, value32);
+
+                                       value32 = ((Y * ele_D)>>7)&0x01;
+                                       PHY_SetBBReg(Adapter, rOFDM0_ECCAThreshold, BIT25, value32);
+
+                               }
+                               else{
+                                       PHY_SetBBReg(Adapter, rOFDM0_XBTxIQImbalance, bMaskDWord, OFDMSwingTable[OFDM_index[1]]);
+                                       PHY_SetBBReg(Adapter, rOFDM0_XDTxAFE, bMaskH4Bits, 0x00);
+                                       PHY_SetBBReg(Adapter, rOFDM0_ECCAThreshold, BIT27|BIT25, 0x00);
+                               }
+
+                               //DBG_8192C("TxPwrTracking path B: X = 0x%x, Y = 0x%x ele_A = 0x%x ele_C = 0x%x ele_D = 0x%x\n", X, Y, ele_A, ele_C, ele_D);
+                       }
+
+                       /*
+                       DBG_8192C("TxPwrTracking 0xc80 = 0x%x, 0xc94 = 0x%x RF 0x24 = 0x%x\n", \
+                                       PHY_QueryBBReg(Adapter, 0xc80, bMaskDWord),\
+                                       PHY_QueryBBReg(Adapter, 0xc94, bMaskDWord), \
+                                       PHY_QueryRFReg(Adapter, RF_PATH_A, 0x24, bMaskDWord));
+                       */
+               }
+
+#if MP_DRIVER == 1
+               if(delta_IQK > 1)
+#else
+               if(delta_IQK > 3)
+#endif
+               {
+                       pdmpriv->ThermalValue_IQK = ThermalValue;
+                       rtl8192c_PHY_IQCalibrate(Adapter,_FALSE);
+               }
+
+               //update thermal meter value
+               if(pdmpriv->TxPowerTrackControl)
+                       pdmpriv->ThermalValue = ThermalValue;
+
+       }
+
+       //DBG_8192C("<===dm_TXPowerTrackingCallback_ThermalMeter_92C\n");
+
+       pdmpriv->TXPowercount = 0;
+
+}
+
+
+static VOID
+dm_InitializeTXPowerTracking_ThermalMeter(
+       IN      PADAPTER                Adapter)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+
+       //pMgntInfo->bTXPowerTracking = _TRUE;
+       pdmpriv->TXPowercount = 0;
+       pdmpriv->bTXPowerTrackingInit = _FALSE;
+       pdmpriv->ThermalValue = 0;
+
+#if    (MP_DRIVER != 1)        //for mp driver, turn off txpwrtracking as default
+       pdmpriv->TxPowerTrackControl = _TRUE;
+#endif
+
+       MSG_8192C("pdmpriv->TxPowerTrackControl = %d\n", pdmpriv->TxPowerTrackControl);
+}
+
+
+static VOID
+DM_InitializeTXPowerTracking(
+       IN      PADAPTER                Adapter)
+{
+       dm_InitializeTXPowerTracking_ThermalMeter(Adapter);
+}
+
+//
+//     Description:
+//             - Dispatch TxPower Tracking direct call ONLY for 92s.
+//             - We shall NOT schedule Workitem within PASSIVE LEVEL, which will cause system resource
+//                leakage under some platform.
+//
+//     Assumption:
+//             PASSIVE_LEVEL when this routine is called.
+//
+//     Added by Roger, 2009.06.18.
+//
+static VOID
+DM_TXPowerTracking92CDirectCall(
+            IN PADAPTER                Adapter)
+{
+       dm_TXPowerTrackingCallback_ThermalMeter_92C(Adapter);
+}
+
+static VOID
+dm_CheckTXPowerTracking_ThermalMeter(
+       IN      PADAPTER                Adapter)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+       //u1Byte                                        TxPowerCheckCnt = 5;    //10 sec
+
+       //if(!pMgntInfo->bTXPowerTracking /*|| (!pdmpriv->TxPowerTrackControl && pdmpriv->bAPKdone)*/)
+       if(!(pdmpriv->DMFlag & DYNAMIC_FUNC_SS))
+       {
+               return;
+       }
+
+       if(!pdmpriv->TM_Trigger)                //at least delay 1 sec
+       {
+               //pHalData->TxPowerCheckCnt++;  //cosa add for debug
+               PHY_SetRFReg(Adapter, RF_PATH_A, RF_T_METER, bRFRegOffsetMask, 0x60);
+               //DBG_8192C("Trigger 92C Thermal Meter!!\n");
+
+               pdmpriv->TM_Trigger = 1;
+               return;
+
+       }
+       else
+       {
+               //DBG_8192C("Schedule TxPowerTracking direct call!!\n");
+               DM_TXPowerTracking92CDirectCall(Adapter); //Using direct call is instead, added by Roger, 2009.06.18.
+               pdmpriv->TM_Trigger = 0;
+       }
+
+}
+
+
+VOID
+rtl8192c_dm_CheckTXPowerTracking(
+       IN      PADAPTER                Adapter)
+{
+       dm_CheckTXPowerTracking_ThermalMeter(Adapter);
+}
+
+#ifdef CONFIG_BT_COEXIST
+static BOOLEAN BT_BTStateChange(PADAPTER Adapter)
+{
+       PHAL_DATA_TYPE          pHalData = GET_HAL_DATA(Adapter);
+       struct btcoexist_priv   *pbtpriv = &(pHalData->bt_coexist);
+       struct registry_priv    *registry_par = &Adapter->registrypriv;
+
+       struct mlme_priv *pmlmepriv = &(Adapter->mlmepriv);
+
+       u32             Polling, Ratio_Tx, Ratio_PRI;
+       u32                     BT_Tx, BT_PRI;
+       u8                      BT_State;
+       static u8               ServiceTypeCnt = 0;
+       u8                      CurServiceType;
+       static u8               LastServiceType = BT_Idle;
+
+       if(check_fwstate(pmlmepriv, _FW_LINKED) == _FALSE)
+               return _FALSE;
+
+       BT_State = rtw_read8(Adapter, 0x4fd);
+/*
+       temp = PlatformEFIORead4Byte(Adapter, 0x488);
+       BT_Tx = (u2Byte)(((temp<<8)&0xff00)+((temp>>8)&0xff));
+       BT_PRI = (u2Byte)(((temp>>8)&0xff00)+((temp>>24)&0xff));
+
+       temp = PlatformEFIORead4Byte(Adapter, 0x48c);
+       Polling = ((temp<<8)&0xff000000) + ((temp>>8)&0x00ff0000) +
+                       ((temp<<8)&0x0000ff00) + ((temp>>8)&0x000000ff);
+
+*/
+       BT_Tx = rtw_read32(Adapter, 0x488);
+
+       DBG_8192C("Ratio 0x488  =%x\n", BT_Tx);
+       BT_Tx =BT_Tx & 0x00ffffff;
+       //RTPRINT(FBT, BT_TRACE, ("Ratio BT_Tx  =%x\n", BT_Tx));
+
+       BT_PRI = rtw_read32(Adapter, 0x48c);
+
+       DBG_8192C("Ratio 0x48c  =%x\n", BT_PRI);
+       BT_PRI =BT_PRI & 0x00ffffff;
+       //RTPRINT(FBT, BT_TRACE, ("Ratio BT_PRI  =%x\n", BT_PRI));
+
+
+       Polling = rtw_read32(Adapter, 0x490);
+       //RTPRINT(FBT, BT_TRACE, ("Ratio 0x490  =%x\n", Polling));
+
+
+       if(BT_Tx==0xffffffff && BT_PRI==0xffffffff && Polling==0xffffffff && BT_State==0xff)
+               return _FALSE;
+
+       BT_State &= BIT0;
+
+       if(BT_State != pbtpriv->BT_CUR_State)
+       {
+               pbtpriv->BT_CUR_State = BT_State;
+
+               if(registry_par->bt_sco == 3)
+               {
+                       ServiceTypeCnt = 0;
+
+                       pbtpriv->BT_Service = BT_Idle;
+
+                       DBG_8192C("BT_%s\n", BT_State?"ON":"OFF");
+
+                       BT_State = BT_State |
+                                       ((pbtpriv->BT_Ant_isolation==1)?0:BIT1) |BIT2;
+
+                       rtw_write8(Adapter, 0x4fd, BT_State);
+                       DBG_8192C("BT set 0x4fd to %x\n", BT_State);
+               }
+
+               return _TRUE;
+       }
+       DBG_8192C("bRegBT_Sco =  %d\n",registry_par->bt_sco);
+
+       Ratio_Tx = BT_Tx*1000/Polling;
+       Ratio_PRI = BT_PRI*1000/Polling;
+
+       pbtpriv->Ratio_Tx=Ratio_Tx;
+       pbtpriv->Ratio_PRI=Ratio_PRI;
+
+       DBG_8192C("Ratio_Tx=%d\n", Ratio_Tx);
+       DBG_8192C("Ratio_PRI=%d\n", Ratio_PRI);
+
+
+       if(BT_State && registry_par->bt_sco==3)
+       {
+               DBG_8192C("bt_sco  ==3 Follow Counter\n");
+//             if(BT_Tx==0xffff && BT_PRI==0xffff && Polling==0xffffffff)
+//             {
+//                     ServiceTypeCnt = 0;
+//                     return FALSE;
+//             }
+//             else
+               {
+               /*
+                       Ratio_Tx = BT_Tx*1000/Polling;
+                       Ratio_PRI = BT_PRI*1000/Polling;
+
+                       pHalData->bt_coexist.Ratio_Tx=Ratio_Tx;
+                       pHalData->bt_coexist.Ratio_PRI=Ratio_PRI;
+
+                       RTPRINT(FBT, BT_TRACE, ("Ratio_Tx=%d\n", Ratio_Tx));
+                       RTPRINT(FBT, BT_TRACE, ("Ratio_PRI=%d\n", Ratio_PRI));
+
+               */
+                       if((Ratio_Tx < 30)  && (Ratio_PRI < 30))
+                               CurServiceType = BT_Idle;
+                       else if((Ratio_PRI > 110) && (Ratio_PRI < 250))
+                               CurServiceType = BT_SCO;
+                       else if((Ratio_Tx >= 200)&&(Ratio_PRI >= 200))
+                               CurServiceType = BT_Busy;
+                       else if((Ratio_Tx >=350) && (Ratio_Tx < 500))
+                               CurServiceType = BT_OtherBusy;
+                       else if(Ratio_Tx >=500)
+                               CurServiceType = BT_PAN;
+                       else
+                               CurServiceType=BT_OtherAction;
+               }
+
+/*             if(pHalData->bt_coexist.bStopCount)
+               {
+                       ServiceTypeCnt=0;
+                       pHalData->bt_coexist.bStopCount=FALSE;
+               }
+*/
+//             if(CurServiceType == BT_OtherBusy)
+               {
+                       ServiceTypeCnt=2;
+                       LastServiceType=CurServiceType;
+               }
+#if 0
+               else if(CurServiceType == LastServiceType)
+               {
+                       if(ServiceTypeCnt<3)
+                               ServiceTypeCnt++;
+               }
+               else
+               {
+                       ServiceTypeCnt = 0;
+                       LastServiceType = CurServiceType;
+               }
+#endif
+
+               if(ServiceTypeCnt==2)
+               {
+                       pbtpriv->BT_Service = LastServiceType;
+                       BT_State = BT_State |
+                                       ((pbtpriv->BT_Ant_isolation==1)?0:BIT1) |
+                                       //((pbtpriv->BT_Service==BT_SCO)?0:BIT2);
+                                       ((pbtpriv->BT_Service!=BT_Idle)?0:BIT2);
+
+                       //if(pbtpriv->BT_Service==BT_Busy)
+                       //      BT_State&= ~(BIT2);
+
+                       if(pbtpriv->BT_Service==BT_SCO)
+                       {
+                               DBG_8192C("BT TYPE Set to  ==> BT_SCO\n");
+                       }
+                       else if(pbtpriv->BT_Service==BT_Idle)
+                       {
+                               DBG_8192C("BT TYPE Set to  ==> BT_Idle\n");
+                       }
+                       else if(pbtpriv->BT_Service==BT_OtherAction)
+                       {
+                               DBG_8192C("BT TYPE Set to  ==> BT_OtherAction\n");
+                       }
+                       else if(pbtpriv->BT_Service==BT_Busy)
+                       {
+                               DBG_8192C("BT TYPE Set to  ==> BT_Busy\n");
+                       }
+                       else if(pbtpriv->BT_Service==BT_PAN)
+                       {
+                               DBG_8192C("BT TYPE Set to  ==> BT_PAN\n");
+                       }
+                       else
+                       {
+                               DBG_8192C("BT TYPE Set to ==> BT_OtherBusy\n");
+                       }
+
+                       //Add interrupt migration when bt is not in idel state (no traffic).
+                       //suggestion by Victor.
+                       if(pbtpriv->BT_Service!=BT_Idle)//EDCA_VI_PARAM modify
+                       {
+
+                               rtw_write16(Adapter, 0x504, 0x0ccc);
+                               rtw_write8(Adapter, 0x506, 0x54);
+                               rtw_write8(Adapter, 0x507, 0x54);
+
+                       }
+                       else
+                       {
+                               rtw_write8(Adapter, 0x506, 0x00);
+                               rtw_write8(Adapter, 0x507, 0x00);
+                       }
+
+                       rtw_write8(Adapter, 0x4fd, BT_State);
+                       DBG_8192C("BT_SCO set 0x4fd to %x\n", BT_State);
+                       return _TRUE;
+               }
+       }
+
+       return _FALSE;
+
+}
+
+static BOOLEAN
+BT_WifiConnectChange(
+       IN      PADAPTER        Adapter
+       )
+{
+       struct mlme_priv *pmlmepriv = &(Adapter->mlmepriv);
+//     PMGNT_INFO              pMgntInfo = &Adapter->MgntInfo;
+       static BOOLEAN  bMediaConnect = _FALSE;
+
+       //if(!pMgntInfo->bMediaConnect || MgntRoamingInProgress(pMgntInfo))
+       if(check_fwstate(pmlmepriv, _FW_LINKED) == _FALSE)
+       {
+               bMediaConnect = _FALSE;
+       }
+       else
+       {
+               if(!bMediaConnect)
+               {
+                       bMediaConnect = _TRUE;
+                       return _TRUE;
+               }
+               bMediaConnect = _TRUE;
+       }
+
+       return _FALSE;
+}
+
+#define BT_RSSI_STATE_NORMAL_POWER     BIT0
+#define BT_RSSI_STATE_AMDPU_OFF                BIT1
+#define BT_RSSI_STATE_SPECIAL_LOW      BIT2
+#define BT_RSSI_STATE_BG_EDCA_LOW      BIT3
+
+static s32 GET_UNDECORATED_AVERAGE_RSSI(PADAPTER       Adapter)
+{
+       PHAL_DATA_TYPE  pHalData = GET_HAL_DATA(Adapter);
+       struct mlme_priv        *pmlmepriv = &(Adapter->mlmepriv);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+       s32     average_rssi;
+
+       if(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE|WIFI_ADHOC_MASTER_STATE|WIFI_AP_STATE))
+       {
+               average_rssi =  pdmpriv->EntryMinUndecoratedSmoothedPWDB;
+       }
+       else
+       {
+               average_rssi =  pdmpriv->UndecoratedSmoothedPWDB;
+       }
+       return average_rssi;
+}
+
+static u8 BT_RssiStateChange(
+       IN      PADAPTER        Adapter
+       )
+{
+       PHAL_DATA_TYPE          pHalData = GET_HAL_DATA(Adapter);
+       struct mlme_priv                *pmlmepriv = &(Adapter->mlmepriv);
+       struct btcoexist_priv   *pbtpriv = &(pHalData->bt_coexist);
+       struct dm_priv          *pdmpriv = &pHalData->dmpriv;
+       //PMGNT_INFO            pMgntInfo = &Adapter->MgntInfo;
+       s32                     UndecoratedSmoothedPWDB;
+       u8                      CurrBtRssiState = 0x00;
+
+
+
+
+       //if(pMgntInfo->bMediaConnect)  // Default port
+       if(check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)
+       {
+               UndecoratedSmoothedPWDB = GET_UNDECORATED_AVERAGE_RSSI(Adapter);
+       }
+       else // associated entry pwdb
+       {
+               if(pdmpriv->EntryMinUndecoratedSmoothedPWDB == 0)
+                       UndecoratedSmoothedPWDB = 100;  // No any RSSI information. Assume to be MAX.
+               else
+                       UndecoratedSmoothedPWDB = pdmpriv->EntryMinUndecoratedSmoothedPWDB;
+       }
+
+       // Check RSSI to determine HighPower/NormalPower state for BT coexistence.
+       if(UndecoratedSmoothedPWDB >= 67)
+               CurrBtRssiState &= (~BT_RSSI_STATE_NORMAL_POWER);
+       else if(UndecoratedSmoothedPWDB < 62)
+               CurrBtRssiState |= BT_RSSI_STATE_NORMAL_POWER;
+
+       // Check RSSI to determine AMPDU setting for BT coexistence.
+       if(UndecoratedSmoothedPWDB >= 40)
+               CurrBtRssiState &= (~BT_RSSI_STATE_AMDPU_OFF);
+       else if(UndecoratedSmoothedPWDB <= 32)
+               CurrBtRssiState |= BT_RSSI_STATE_AMDPU_OFF;
+
+       // Marked RSSI state. It will be used to determine BT coexistence setting later.
+       if(UndecoratedSmoothedPWDB < 35)
+               CurrBtRssiState |=  BT_RSSI_STATE_SPECIAL_LOW;
+       else
+               CurrBtRssiState &= (~BT_RSSI_STATE_SPECIAL_LOW);
+
+       // Check BT state related to BT_Idle in B/G mode.
+       if(UndecoratedSmoothedPWDB < 15)
+               CurrBtRssiState |=  BT_RSSI_STATE_BG_EDCA_LOW;
+       else
+               CurrBtRssiState &= (~BT_RSSI_STATE_BG_EDCA_LOW);
+
+       if(CurrBtRssiState != pbtpriv->BtRssiState)
+       {
+               pbtpriv->BtRssiState = CurrBtRssiState;
+               return _TRUE;
+       }
+       else
+       {
+               return _FALSE;
+       }
+}
+
+static void dm_BTCoexist(PADAPTER Adapter )
+{
+       HAL_DATA_TYPE                   *pHalData = GET_HAL_DATA(Adapter);
+       struct dm_priv                  *pdmpriv = &pHalData->dmpriv;
+       struct mlme_priv                        *pmlmepriv = &(Adapter->mlmepriv);
+       struct mlme_ext_info            *pmlmeinfo = &Adapter->mlmeextpriv.mlmext_info;
+       struct mlme_ext_priv            *pmlmeext = &Adapter->mlmeextpriv;
+
+       struct btcoexist_priv           *pbtpriv = &(pHalData->bt_coexist);
+       //PMGNT_INFO                            pMgntInfo = &Adapter->MgntInfo;
+       //PRT_HIGH_THROUGHPUT           pHTInfo = GET_HT_INFO(pMgntInfo);
+
+       //PRX_TS_RECORD pRxTs = NULL;
+       u8                      BT_gpio_mux;
+
+       BOOLEAN         bWifiConnectChange, bBtStateChange,bRssiStateChange;
+
+       if(pbtpriv->bCOBT == _FALSE)            return;
+
+       if(!( pdmpriv->DMFlag & DYNAMIC_FUNC_BT)) return;
+
+       if( (pbtpriv->BT_Coexist) &&(pbtpriv->BT_CoexistType == BT_CSR_BC4) && (check_fwstate(pmlmepriv, WIFI_AP_STATE) == _FALSE)      )
+       {
+               bWifiConnectChange = BT_WifiConnectChange(Adapter);
+               bBtStateChange  = BT_BTStateChange(Adapter);
+               bRssiStateChange        = BT_RssiStateChange(Adapter);
+
+               DBG_8192C("bWifiConnectChange %d, bBtStateChange  %d,bRssiStateChange  %d\n",
+                       bWifiConnectChange,bBtStateChange,bRssiStateChange);
+
+               // add by hpfan for debug message
+               BT_gpio_mux = rtw_read8(Adapter, REG_GPIO_MUXCFG);
+               DBG_8192C("BTCoexit Reg_0x40 (%2x)\n", BT_gpio_mux);
+
+               if( bWifiConnectChange ||bBtStateChange  ||bRssiStateChange )
+               {
+                       if(pbtpriv->BT_CUR_State)
+                       {
+
+                               // Do not allow receiving A-MPDU aggregation.
+                               if(pbtpriv->BT_Ampdu)// 0:Disable BT control A-MPDU, 1:Enable BT control A-MPDU.
+                               {
+
+                                       if(pmlmeinfo->assoc_AP_vendor == ciscoAP)
+                                       {
+                                               if(pbtpriv->BT_Service!=BT_Idle)
+                                               {
+                                                       if(pmlmeinfo->bAcceptAddbaReq)
+                                                       {
+                                                               DBG_8192C("BT_Disallow AMPDU \n");
+                                                               pmlmeinfo->bAcceptAddbaReq = _FALSE;
+                                                               send_delba(Adapter,0, get_my_bssid(&(pmlmeinfo->network)));
+                                                       }
+                                               }
+                                               else
+                                               {
+                                                       if(!pmlmeinfo->bAcceptAddbaReq)
+                                                       {
+                                                               DBG_8192C("BT_Allow AMPDU  RSSI >=40\n");
+                                                               pmlmeinfo->bAcceptAddbaReq = _TRUE;
+                                                       }
+                                               }
+                                       }
+                                       else
+                                       {
+                                               if(!pmlmeinfo->bAcceptAddbaReq)
+                                               {
+                                                       DBG_8192C("BT_Allow AMPDU BT Idle\n");
+                                                       pmlmeinfo->bAcceptAddbaReq = _TRUE;
+                                               }
+                                       }
+                               }
+
+#if 0
+                               else if((pHalData->bt_coexist.BT_Service==BT_SCO) || (pHalData->bt_coexist.BT_Service==BT_Busy))
+                               {
+                                       if(pHalData->bt_coexist.BtRssiState & BT_RSSI_STATE_AMDPU_OFF)
+                                       {
+                                               if(pMgntInfo->bBT_Ampdu && pHTInfo->bAcceptAddbaReq)
+                                               {
+                                                       RTPRINT(FBT, BT_TRACE, ("BT_Disallow AMPDU RSSI <=32\n"));
+                                                       pHTInfo->bAcceptAddbaReq = FALSE;
+                                                       if(GetTs(Adapter, (PTS_COMMON_INFO*)(&pRxTs), pMgntInfo->Bssid, 0, RX_DIR, FALSE))
+                                                               TsInitDelBA(Adapter, (PTS_COMMON_INFO)pRxTs, RX_DIR);
+                                               }
+                                       }
+                                       else
+                                       {
+                                               if(pMgntInfo->bBT_Ampdu && !pHTInfo->bAcceptAddbaReq)
+                                               {
+                                                       RTPRINT(FBT, BT_TRACE, ("BT_Allow AMPDU  RSSI >=40\n"));
+                                                       pHTInfo->bAcceptAddbaReq = TRUE;
+                                               }
+                                       }
+                               }
+                               else
+                               {
+                                       if(pMgntInfo->bBT_Ampdu && !pHTInfo->bAcceptAddbaReq)
+                                       {
+                                               RTPRINT(FBT, BT_TRACE, ("BT_Allow AMPDU BT not in SCO or BUSY\n"));
+                                               pHTInfo->bAcceptAddbaReq = TRUE;
+                                       }
+                               }
+#endif
+
+                               if(pbtpriv->BT_Ant_isolation)
+                               {
+                                       DBG_8192C("BT_IsolationLow\n");
+
+// 20100427 Joseph: Do not adjust Rate adaptive for BT coexist suggested by SD3.
+#if 0
+                                       RTPRINT(FBT, BT_TRACE, ("BT_Update Rate table\n"));
+                                       if(pMgntInfo->bUseRAMask)
+                                       {
+                                               // 20100407 Joseph: Fix rate adaptive modification for BT coexist.
+                                               // This fix is not complete yet. It shall also consider VWifi and Adhoc case,
+                                               // which connect with multiple STAs.
+                                               Adapter->HalFunc.UpdateHalRAMaskHandler(
+                                                                                               Adapter,
+                                                                                               FALSE,
+                                                                                               0,
+                                                                                               NULL,
+                                                                                               NULL,
+                                                                                               pMgntInfo->RateAdaptive.RATRState,
+                                                                                               RAMask_Normal);
+                                       }
+                                       else
+                                       {
+                                               Adapter->HalFunc.UpdateHalRATRTableHandler(
+                                                                       Adapter,
+                                                                       &pMgntInfo->dot11OperationalRateSet,
+                                                                       pMgntInfo->dot11HTOperationalRateSet,NULL);
+                                       }
+#endif
+
+                                       // 20100415 Joseph: Modify BT coexist mechanism suggested by Yaying.
+                                       // Now we only enable HW BT coexist when BT in "Busy" state.
+                                       if(1)//pMgntInfo->LinkDetectInfo.NumRecvDataInPeriod >= 20)
+                                       {
+                                               if((pmlmeinfo->assoc_AP_vendor == ciscoAP)      &&
+                                                       pbtpriv->BT_Service==BT_OtherAction)
+                                               {
+                                                       DBG_8192C("BT_Turn ON Coexist\n");
+                                                       rtw_write8(Adapter, REG_GPIO_MUXCFG, 0xa0);
+                                               }
+                                               else
+                                               {
+                                                       if((pbtpriv->BT_Service==BT_Busy) &&
+                                                               (pbtpriv->BtRssiState & BT_RSSI_STATE_NORMAL_POWER))
+                                                       {
+                                                               DBG_8192C("BT_Turn ON Coexist\n");
+                                                               rtw_write8(Adapter, REG_GPIO_MUXCFG, 0xa0);
+                                                       }
+                                                       else if((pbtpriv->BT_Service==BT_OtherAction) &&
+                                                                       (pbtpriv->BtRssiState & BT_RSSI_STATE_SPECIAL_LOW))
+                                                       {
+                                                               DBG_8192C("BT_Turn ON Coexist\n");
+                                                               rtw_write8(Adapter, REG_GPIO_MUXCFG, 0xa0);
+                                                       }
+                                                       else if(pbtpriv->BT_Service==BT_PAN)
+                                                       {
+                                                               DBG_8192C("BT_Turn ON Coexist\n");
+                                                               rtw_write8(Adapter, REG_GPIO_MUXCFG, 0x00);
+                                                       }
+                                                       else
+                                                       {
+                                                               DBG_8192C("BT_Turn OFF Coexist\n");
+                                                               rtw_write8(Adapter, REG_GPIO_MUXCFG, 0x00);
+                                                       }
+                                               }
+                                       }
+                                       else
+                                       {
+                                               DBG_8192C("BT: There is no Wifi traffic!! Turn off Coexist\n");
+                                               rtw_write8(Adapter, REG_GPIO_MUXCFG, 0x00);
+                                       }
+
+                                       if(1)//pMgntInfo->LinkDetectInfo.NumRecvDataInPeriod >= 20)
+                                       {
+                                               if(pbtpriv->BT_Service==BT_PAN)
+                                               {
+                                                       DBG_8192C("BT_Turn ON Coexist(Reg0x44 = 0x10100)\n");
+                                                       rtw_write32(Adapter, REG_GPIO_PIN_CTRL, 0x10100);
+                                               }
+                                               else
+                                               {
+                                                       DBG_8192C("BT_Turn OFF Coexist(Reg0x44 = 0x0)\n");
+                                                       rtw_write32(Adapter, REG_GPIO_PIN_CTRL, 0x0);
+                                               }
+                                       }
+                                       else
+                                       {
+                                               DBG_8192C("BT: There is no Wifi traffic!! Turn off Coexist(Reg0x44 = 0x0)\n");
+                                               rtw_write32(Adapter, REG_GPIO_PIN_CTRL, 0x0);
+                                       }
+
+                                       // 20100430 Joseph: Integrate the BT coexistence EDCA tuning here.
+                                       if(pbtpriv->BtRssiState & BT_RSSI_STATE_NORMAL_POWER)
+                                       {
+                                               if(pbtpriv->BT_Service==BT_OtherBusy)
+                                               {
+                                                       //pbtpriv->BtEdcaUL = 0x5ea72b;
+                                                       //pbtpriv->BtEdcaDL = 0x5ea72b;
+                                                       pbtpriv->BT_EDCA[UP_LINK] = 0x5ea72b;
+                                                       pbtpriv->BT_EDCA[DOWN_LINK] = 0x5ea72b;
+
+                                                       DBG_8192C("BT in BT_OtherBusy state Tx (%d) >350 parameter(0x%x) = 0x%x\n", pbtpriv->Ratio_Tx ,REG_EDCA_BE_PARAM, 0x5ea72b);
+                                               }
+                                               else if(pbtpriv->BT_Service==BT_Busy)
+                                               {
+                                                       //pbtpriv->BtEdcaUL = 0x5eb82f;
+                                                       //pbtpriv->BtEdcaDL = 0x5eb82f;
+
+                                                       pbtpriv->BT_EDCA[UP_LINK] = 0x5eb82f;
+                                                       pbtpriv->BT_EDCA[DOWN_LINK] = 0x5eb82f;
+
+                                                       DBG_8192C("BT in BT_Busy state parameter(0x%x) = 0x%x\n", REG_EDCA_BE_PARAM, 0x5eb82f);
+                                               }
+                                               else if(pbtpriv->BT_Service==BT_SCO)
+                                               {
+                                                       if(pbtpriv->Ratio_Tx>160)
+                                                       {
+                                                               //pbtpriv->BtEdcaUL = 0x5ea72f;
+                                                               //pbtpriv->BtEdcaDL = 0x5ea72f;
+                                                               pbtpriv->BT_EDCA[UP_LINK] = 0x5ea72f;
+                                                               pbtpriv->BT_EDCA[DOWN_LINK] = 0x5ea72f;
+                                                               DBG_8192C("BT in BT_SCO state Tx (%d) >160 parameter(0x%x) = 0x%x\n",pbtpriv->Ratio_Tx, REG_EDCA_BE_PARAM, 0x5ea72f);
+                                                       }
+                                                       else
+                                                       {
+                                                               //pbtpriv->BtEdcaUL = 0x5ea32b;
+                                                               //pbtpriv->BtEdcaDL = 0x5ea42b;
+
+                                                               pbtpriv->BT_EDCA[UP_LINK] = 0x5ea32b;
+                                                               pbtpriv->BT_EDCA[DOWN_LINK] = 0x5ea42b;
+
+                                                               DBG_8192C("BT in BT_SCO state Tx (%d) <160 parameter(0x%x) = 0x%x\n", pbtpriv->Ratio_Tx,REG_EDCA_BE_PARAM, 0x5ea32f);
+                                                       }
+                                               }
+                                               else
+                                               {
+                                                       // BT coexistence mechanism does not control EDCA parameter.
+                                                       //pbtpriv->BtEdcaUL = 0;
+                                                       //pbtpriv->BtEdcaDL = 0;
+
+                                                       pbtpriv->BT_EDCA[UP_LINK] = 0;
+                                                       pbtpriv->BT_EDCA[DOWN_LINK] = 0;
+                                                       DBG_8192C("BT in  State  %d  and parameter(0x%x) use original setting.\n",pbtpriv->BT_Service, REG_EDCA_BE_PARAM);
+                                               }
+
+                                               if((pbtpriv->BT_Service!=BT_Idle) &&
+                                                       (pmlmeext->cur_wireless_mode  == WIRELESS_MODE_G) &&
+                                                       (pbtpriv->BtRssiState & BT_RSSI_STATE_BG_EDCA_LOW))
+                                               {
+                                                       //pbtpriv->BtEdcaUL = 0x5eb82b;
+                                                       //pbtpriv->BtEdcaDL = 0x5eb82b;
+
+                                                       pbtpriv->BT_EDCA[UP_LINK] = 0x5eb82b;
+                                                       pbtpriv->BT_EDCA[DOWN_LINK] = 0x5eb82b;
+
+                                                       DBG_8192C("BT set parameter(0x%x) = 0x%x\n", REG_EDCA_BE_PARAM, 0x5eb82b);
+                                               }
+                                       }
+                                       else
+                                       {
+                                               // BT coexistence mechanism does not control EDCA parameter.
+                                               //pbtpriv->BtEdcaUL = 0;
+                                               //pbtpriv->BtEdcaDL = 0;
+
+                                               pbtpriv->BT_EDCA[UP_LINK] = 0;
+                                               pbtpriv->BT_EDCA[DOWN_LINK] = 0;
+                                       }
+
+                                       // 20100415 Joseph: Set RF register 0x1E and 0x1F for BT coexist suggested by Yaying.
+                                       if(pbtpriv->BT_Service!=BT_Idle)
+                                       {
+                                               DBG_8192C("BT Set RfReg0x1E[7:4] = 0x%x \n", 0xf);
+                                               PHY_SetRFReg(Adapter, PathA, 0x1e, 0xf0, 0xf);
+                                               //RTPRINT(FBT, BT_TRACE, ("BT Set RfReg0x1E[7:4] = 0x%x \n", 0xf));
+                                               //PHY_SetRFReg(Adapter, PathA, 0x1f, 0xf0, 0xf);
+                                       }
+                                       else
+                                       {
+                                               DBG_8192C("BT Set RfReg0x1E[7:4] = 0x%x \n",pbtpriv->BtRfRegOrigin1E);
+                                               PHY_SetRFReg(Adapter, PathA, 0x1e, 0xf0, pbtpriv->BtRfRegOrigin1E);
+                                               //RTPRINT(FBT, BT_TRACE, ("BT Set RfReg0x1F[7:4] = 0x%x \n", pHalData->bt_coexist.BtRfRegOrigin1F));
+                                               //PHY_SetRFReg(Adapter, PathA, 0x1f, 0xf0, pHalData->bt_coexist.BtRfRegOrigin1F);
+                                       }
+                               }
+                               else
+                               {
+                                       DBG_8192C("BT_IsolationHigh\n");
+                                       // Do nothing.
+                               }
+                       }
+                       else
+                       {
+
+                               if(pbtpriv->BT_Ampdu && !pmlmeinfo->bAcceptAddbaReq)
+                               {
+                                       DBG_8192C("BT_Allow AMPDU bt is off\n");
+                                       pmlmeinfo->bAcceptAddbaReq = _TRUE;
+                               }
+
+                               DBG_8192C("BT_Turn OFF Coexist bt is off \n");
+                               rtw_write8(Adapter, REG_GPIO_MUXCFG, 0x00);
+
+                               DBG_8192C("BT Set RfReg0x1E[7:4] = 0x%x \n", pbtpriv->BtRfRegOrigin1E);
+                               PHY_SetRFReg(Adapter, PathA, 0x1e, 0xf0, pbtpriv->BtRfRegOrigin1E);
+                               //RTPRINT(FBT, BT_TRACE, ("BT Set RfReg0x1F[7:4] = 0x%x \n", pHalData->bt_coexist.BtRfRegOrigin1F));
+                               //PHY_SetRFReg(Adapter, PathA, 0x1f, 0xf0, pHalData->bt_coexist.BtRfRegOrigin1F);
+
+                               // BT coexistence mechanism does not control EDCA parameter since BT is disabled.
+                               //pbtpriv->BtEdcaUL = 0;
+                               //pbtpriv->BtEdcaDL = 0;
+                               pbtpriv->BT_EDCA[UP_LINK] = 0;
+                               pbtpriv->BT_EDCA[DOWN_LINK] = 0;
+
+
+// 20100427 Joseph: Do not adjust Rate adaptive for BT coexist suggested by SD3.
+#if 0
+                               RTPRINT(FBT, BT_TRACE, ("BT_Update Rate table\n"));
+                               if(pMgntInfo->bUseRAMask)
+                               {
+                                       // 20100407 Joseph: Fix rate adaptive modification for BT coexist.
+                                       // This fix is not complete yet. It shall also consider VWifi and Adhoc case,
+                                       // which connect with multiple STAs.
+                                       Adapter->HalFunc.UpdateHalRAMaskHandler(
+                                                                                       Adapter,
+                                                                                       FALSE,
+                                                                                       0,
+                                                                                       NULL,
+                                                                                       NULL,
+                                                                                       pMgntInfo->RateAdaptive.RATRState,
+                                                                                       RAMask_Normal);
+                               }
+                               else
+                               {
+                                       Adapter->HalFunc.UpdateHalRATRTableHandler(
+                                                               Adapter,
+                                                               &pMgntInfo->dot11OperationalRateSet,
+                                                               pMgntInfo->dot11HTOperationalRateSet,NULL);
+                               }
+#endif
+                       }
+               }
+       }
+}
+
+static void dm_InitBtCoexistDM(        PADAPTER        Adapter)
+{
+       HAL_DATA_TYPE           *pHalData = GET_HAL_DATA(Adapter);
+       struct btcoexist_priv   *pbtpriv = &(pHalData->bt_coexist);
+
+       if( !pbtpriv->BT_Coexist ) return;
+
+       pbtpriv->BtRfRegOrigin1E = (u8)PHY_QueryRFReg(Adapter, PathA, 0x1e, 0xf0);
+       pbtpriv->BtRfRegOrigin1F = (u8)PHY_QueryRFReg(Adapter, PathA, 0x1f, 0xf0);
+}
+
+void rtl8192c_set_dm_bt_coexist(_adapter *padapter, u8 bStart)
+{
+       HAL_DATA_TYPE           *pHalData = GET_HAL_DATA(padapter);
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       struct btcoexist_priv   *pbtpriv = &(pHalData->bt_coexist);
+
+       pbtpriv->bCOBT = bStart;
+       send_delba(padapter,0, get_my_bssid(&(pmlmeinfo->network)));
+       send_delba(padapter,1, get_my_bssid(&(pmlmeinfo->network)));
+
+}
+
+void rtl8192c_issue_delete_ba(_adapter *padapter, u8 dir)
+{
+       struct mlme_ext_info            *pmlmeinfo = &padapter->mlmeextpriv.mlmext_info;
+       DBG_8192C("issue_delete_ba : %s...\n",(dir==0)?"RX_DIR":"TX_DIR");
+       send_delba(padapter,dir, get_my_bssid(&(pmlmeinfo->network)));
+}
+
+#endif
+
+#if 0//def CONFIG_PCI_HCI
+
+BOOLEAN
+BT_BTStateChange(
+       IN      PADAPTER        Adapter
+       )
+{
+       PHAL_DATA_TYPE  pHalData = GET_HAL_DATA(Adapter);
+       PMGNT_INFO              pMgntInfo = &Adapter->MgntInfo;
+
+       u4Byte                  temp, Polling, Ratio_Tx, Ratio_PRI;
+       u4Byte                  BT_Tx, BT_PRI;
+       u1Byte                  BT_State;
+       static u1Byte           ServiceTypeCnt = 0;
+       u1Byte                  CurServiceType;
+       static u1Byte           LastServiceType = BT_Idle;
+
+       if(!pMgntInfo->bMediaConnect)
+               return FALSE;
+
+       BT_State = PlatformEFIORead1Byte(Adapter, 0x4fd);
+/*
+       temp = PlatformEFIORead4Byte(Adapter, 0x488);
+       BT_Tx = (u2Byte)(((temp<<8)&0xff00)+((temp>>8)&0xff));
+       BT_PRI = (u2Byte)(((temp>>8)&0xff00)+((temp>>24)&0xff));
+
+       temp = PlatformEFIORead4Byte(Adapter, 0x48c);
+       Polling = ((temp<<8)&0xff000000) + ((temp>>8)&0x00ff0000) +
+                       ((temp<<8)&0x0000ff00) + ((temp>>8)&0x000000ff);
+
+*/
+       BT_Tx = PlatformEFIORead4Byte(Adapter, 0x488);
+
+       RTPRINT(FBT, BT_TRACE, ("Ratio 0x488  =%x\n", BT_Tx));
+       BT_Tx =BT_Tx & 0x00ffffff;
+       //RTPRINT(FBT, BT_TRACE, ("Ratio BT_Tx  =%x\n", BT_Tx));
+
+       BT_PRI = PlatformEFIORead4Byte(Adapter, 0x48c);
+
+       RTPRINT(FBT, BT_TRACE, ("Ratio Ratio 0x48c  =%x\n", BT_PRI));
+       BT_PRI =BT_PRI & 0x00ffffff;
+       //RTPRINT(FBT, BT_TRACE, ("Ratio BT_PRI  =%x\n", BT_PRI));
+
+
+       Polling = PlatformEFIORead4Byte(Adapter, 0x490);
+       //RTPRINT(FBT, BT_TRACE, ("Ratio 0x490  =%x\n", Polling));
+
+
+       if(BT_Tx==0xffffffff && BT_PRI==0xffffffff && Polling==0xffffffffff && BT_State==0xff)
+               return FALSE;
+
+       BT_State &= BIT0;
+
+       if(BT_State != pHalData->bt_coexist.BT_CUR_State)
+       {
+               pHalData->bt_coexist.BT_CUR_State = BT_State;
+
+               if(pMgntInfo->bRegBT_Sco == 3)
+               {
+                       ServiceTypeCnt = 0;
+
+                       pHalData->bt_coexist.BT_Service = BT_Idle;
+
+                       RTPRINT(FBT, BT_TRACE, ("BT_%s\n", BT_State?"ON":"OFF"));
+
+                       BT_State = BT_State |
+                                       ((pHalData->bt_coexist.BT_Ant_isolation==1)?0:BIT1) |BIT2;
+
+                       PlatformEFIOWrite1Byte(Adapter, 0x4fd, BT_State);
+                       RTPRINT(FBT, BT_TRACE, ("BT set 0x4fd to %x\n", BT_State));
+               }
+
+               return TRUE;
+       }
+       RTPRINT(FBT, BT_TRACE, ("bRegBT_Sco   %d\n", pMgntInfo->bRegBT_Sco));
+
+       Ratio_Tx = BT_Tx*1000/Polling;
+       Ratio_PRI = BT_PRI*1000/Polling;
+
+       pHalData->bt_coexist.Ratio_Tx=Ratio_Tx;
+       pHalData->bt_coexist.Ratio_PRI=Ratio_PRI;
+
+       RTPRINT(FBT, BT_TRACE, ("Ratio_Tx=%d\n", Ratio_Tx));
+       RTPRINT(FBT, BT_TRACE, ("Ratio_PRI=%d\n", Ratio_PRI));
+
+
+       if(BT_State && pMgntInfo->bRegBT_Sco==3)
+       {
+               RTPRINT(FBT, BT_TRACE, ("bRegBT_Sco  ==3 Follow Counter\n"));
+//             if(BT_Tx==0xffff && BT_PRI==0xffff && Polling==0xffffffff)
+//             {
+//                     ServiceTypeCnt = 0;
+//                     return FALSE;
+//             }
+//             else
+               {
+               /*
+                       Ratio_Tx = BT_Tx*1000/Polling;
+                       Ratio_PRI = BT_PRI*1000/Polling;
+
+                       pHalData->bt_coexist.Ratio_Tx=Ratio_Tx;
+                       pHalData->bt_coexist.Ratio_PRI=Ratio_PRI;
+
+                       RTPRINT(FBT, BT_TRACE, ("Ratio_Tx=%d\n", Ratio_Tx));
+                       RTPRINT(FBT, BT_TRACE, ("Ratio_PRI=%d\n", Ratio_PRI));
+
+               */
+                       if((Ratio_Tx <= 50)  && (Ratio_PRI <= 50))
+                               CurServiceType = BT_Idle;
+                       else if((Ratio_PRI > 150) && (Ratio_PRI < 200))
+                               CurServiceType = BT_SCO;
+                       else if((Ratio_Tx >= 200)&&(Ratio_PRI >= 200))
+                               CurServiceType = BT_Busy;
+                       else if(Ratio_Tx >= 350)
+                               CurServiceType = BT_OtherBusy;
+                       else
+                               CurServiceType=BT_OtherAction;
+
+               }
+/*             if(pHalData->bt_coexist.bStopCount)
+               {
+                       ServiceTypeCnt=0;
+                       pHalData->bt_coexist.bStopCount=FALSE;
+               }
+*/
+               if(CurServiceType == BT_OtherBusy)
+               {
+                       ServiceTypeCnt=2;
+                       LastServiceType=CurServiceType;
+               }
+               else if(CurServiceType == LastServiceType)
+               {
+                       if(ServiceTypeCnt<3)
+                               ServiceTypeCnt++;
+               }
+               else
+               {
+                       ServiceTypeCnt = 0;
+                       LastServiceType = CurServiceType;
+               }
+
+               if(ServiceTypeCnt==2)
+               {
+                       pHalData->bt_coexist.BT_Service = LastServiceType;
+                       BT_State = BT_State |
+                                       ((pHalData->bt_coexist.BT_Ant_isolation==1)?0:BIT1) |
+                                       ((pHalData->bt_coexist.BT_Service==BT_SCO)?0:BIT2);
+
+                       if(pHalData->bt_coexist.BT_Service==BT_Busy)
+                               BT_State&= ~(BIT2);
+
+                       if(pHalData->bt_coexist.BT_Service==BT_SCO)
+                       {
+                               RTPRINT(FBT, BT_TRACE, ("BT TYPE Set to  ==> BT_SCO\n"));
+                       }
+                       else if(pHalData->bt_coexist.BT_Service==BT_Idle)
+                       {
+                               RTPRINT(FBT, BT_TRACE, ("BT TYPE Set to  ==> BT_Idle\n"));
+                       }
+                       else if(pHalData->bt_coexist.BT_Service==BT_OtherAction)
+                       {
+                               RTPRINT(FBT, BT_TRACE, ("BT TYPE Set to  ==> BT_OtherAction\n"));
+                       }
+                       else if(pHalData->bt_coexist.BT_Service==BT_Busy)
+                       {
+                               RTPRINT(FBT, BT_TRACE, ("BT TYPE Set to  ==> BT_Busy\n"));
+                       }
+                       else
+                       {
+                               RTPRINT(FBT, BT_TRACE, ("BT TYPE Set to ==> BT_OtherBusy\n"));
+                       }
+
+                       //Add interrupt migration when bt is not in idel state (no traffic).
+                       //suggestion by Victor.
+                       if(pHalData->bt_coexist.BT_Service!=BT_Idle)
+                       {
+
+                               PlatformEFIOWrite2Byte(Adapter, 0x504, 0x0ccc);
+                               PlatformEFIOWrite1Byte(Adapter, 0x506, 0x54);
+                               PlatformEFIOWrite1Byte(Adapter, 0x507, 0x54);
+
+                       }
+                       else
+                       {
+                               PlatformEFIOWrite1Byte(Adapter, 0x506, 0x00);
+                               PlatformEFIOWrite1Byte(Adapter, 0x507, 0x00);
+                       }
+
+                       PlatformEFIOWrite1Byte(Adapter, 0x4fd, BT_State);
+                       RTPRINT(FBT, BT_TRACE, ("BT_SCO set 0x4fd to %x\n", BT_State));
+                       return TRUE;
+               }
+       }
+
+       return FALSE;
+
+}
+
+BOOLEAN
+BT_WifiConnectChange(
+       IN      PADAPTER        Adapter
+       )
+{
+       PMGNT_INFO              pMgntInfo = &Adapter->MgntInfo;
+       static BOOLEAN  bMediaConnect = FALSE;
+
+       if(!pMgntInfo->bMediaConnect || MgntRoamingInProgress(pMgntInfo))
+       {
+               bMediaConnect = FALSE;
+       }
+       else
+       {
+               if(!bMediaConnect)
+               {
+                       bMediaConnect = TRUE;
+                       return TRUE;
+               }
+               bMediaConnect = TRUE;
+       }
+
+       return FALSE;
+}
+
+BOOLEAN
+BT_RSSIChangeWithAMPDU(
+       IN      PADAPTER        Adapter
+       )
+{
+       PMGNT_INFO              pMgntInfo = &Adapter->MgntInfo;
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+
+       if(!Adapter->pNdisCommon->bRegBT_Ampdu || !Adapter->pNdisCommon->bRegAcceptAddbaReq)
+               return FALSE;
+
+       RTPRINT(FBT, BT_TRACE, ("RSSI is %d\n",pHalData->UndecoratedSmoothedPWDB));
+
+       if((pHalData->UndecoratedSmoothedPWDB<=32) && pMgntInfo->pHTInfo->bAcceptAddbaReq)
+       {
+               RTPRINT(FBT, BT_TRACE, ("BT_Disallow AMPDU RSSI <=32  Need change\n"));
+               return TRUE;
+
+       }
+       else if((pHalData->UndecoratedSmoothedPWDB>=40) && !pMgntInfo->pHTInfo->bAcceptAddbaReq )
+       {
+               RTPRINT(FBT, BT_TRACE, ("BT_Allow AMPDU RSSI >=40, Need change\n"));
+               return TRUE;
+       }
+       else
+               return FALSE;
+
+}
+
+
+VOID
+dm_BTCoexist(
+       IN      PADAPTER        Adapter
+       )
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       PMGNT_INFO              pMgntInfo = &Adapter->MgntInfo;
+       static u1Byte           LastTxPowerLvl = 0xff;
+       PRX_TS_RECORD   pRxTs = NULL;
+
+       BOOLEAN                 bWifiConnectChange, bBtStateChange,bRSSIChangeWithAMPDU;
+
+       if( (pHalData->bt_coexist.BluetoothCoexist) &&
+               (pHalData->bt_coexist.BT_CoexistType == BT_CSR_BC4) &&
+               (!ACTING_AS_AP(Adapter))        )
+       {
+               bWifiConnectChange = BT_WifiConnectChange(Adapter);
+               bBtStateChange = BT_BTStateChange(Adapter);
+               bRSSIChangeWithAMPDU = BT_RSSIChangeWithAMPDU(Adapter);
+               RTPRINT(FBT, BT_TRACE, ("bWifiConnectChange %d, bBtStateChange  %d,LastTxPowerLvl  %x,  DynamicTxHighPowerLvl  %x\n",
+                       bWifiConnectChange,bBtStateChange,LastTxPowerLvl,pHalData->DynamicTxHighPowerLvl));
+               if( bWifiConnectChange ||bBtStateChange  ||
+                       (LastTxPowerLvl != pHalData->DynamicTxHighPowerLvl)     ||bRSSIChangeWithAMPDU)
+               {
+                       LastTxPowerLvl = pHalData->DynamicTxHighPowerLvl;
+
+                       if(pHalData->bt_coexist.BT_CUR_State)
+                       {
+                               // Do not allow receiving A-MPDU aggregation.
+                               if((pHalData->bt_coexist.BT_Service==BT_SCO) || (pHalData->bt_coexist.BT_Service==BT_Busy))
+                               {
+                                       if(pHalData->UndecoratedSmoothedPWDB<=32)
+                                       {
+                                               if(Adapter->pNdisCommon->bRegBT_Ampdu && Adapter->pNdisCommon->bRegAcceptAddbaReq)
+                                               {
+                                                       RTPRINT(FBT, BT_TRACE, ("BT_Disallow AMPDU RSSI <=32\n"));
+                                                       pMgntInfo->pHTInfo->bAcceptAddbaReq = FALSE;
+                                                       if(GetTs(Adapter, (PTS_COMMON_INFO*)(&pRxTs), pMgntInfo->Bssid, 0, RX_DIR, FALSE))
+                                                               TsInitDelBA(Adapter, (PTS_COMMON_INFO)pRxTs, RX_DIR);
+                                               }
+                                       }
+                                       else if(pHalData->UndecoratedSmoothedPWDB>=40)
+                                       {
+                                               if(Adapter->pNdisCommon->bRegBT_Ampdu && Adapter->pNdisCommon->bRegAcceptAddbaReq)
+                                               {
+                                                       RTPRINT(FBT, BT_TRACE, ("BT_Allow AMPDU  RSSI >=40\n"));
+                                                       pMgntInfo->pHTInfo->bAcceptAddbaReq = TRUE;
+                                               }
+                                       }
+                               }
+                               else
+                               {
+                                       if(Adapter->pNdisCommon->bRegBT_Ampdu && Adapter->pNdisCommon->bRegAcceptAddbaReq)
+                                       {
+                                               RTPRINT(FBT, BT_TRACE, ("BT_Allow AMPDU BT not in SCO or BUSY\n"));
+                                               pMgntInfo->pHTInfo->bAcceptAddbaReq = TRUE;
+                                       }
+                               }
+
+                               if(pHalData->bt_coexist.BT_Ant_isolation)
+                               {
+                                       RTPRINT(FBT, BT_TRACE, ("BT_IsolationLow\n"));
+                                       RTPRINT(FBT, BT_TRACE, ("BT_Update Rate table\n"));
+                                       Adapter->HalFunc.UpdateHalRATRTableHandler(
+                                                               Adapter,
+                                                               &pMgntInfo->dot11OperationalRateSet,
+                                                               pMgntInfo->dot11HTOperationalRateSet,NULL);
+
+                                       if(pHalData->bt_coexist.BT_Service==BT_SCO)
+                                       {
+
+                                               RTPRINT(FBT, BT_TRACE, ("BT_Turn OFF Coexist with SCO \n"));
+                                               PlatformEFIOWrite1Byte(Adapter, REG_GPIO_MUXCFG, 0x14);
+                                       }
+                                       else if(pHalData->DynamicTxHighPowerLvl == TxHighPwrLevel_Normal)
+                                       {
+                                               RTPRINT(FBT, BT_TRACE, ("BT_Turn ON Coexist\n"));
+                                               PlatformEFIOWrite1Byte(Adapter, REG_GPIO_MUXCFG, 0xb4);
+                                       }
+                                       else
+                                       {
+                                               RTPRINT(FBT, BT_TRACE, ("BT_Turn OFF Coexist\n"));
+                                               PlatformEFIOWrite1Byte(Adapter, REG_GPIO_MUXCFG, 0x14);
+                                       }
+                               }
+                               else
+                               {
+                                       RTPRINT(FBT, BT_TRACE, ("BT_IsolationHigh\n"));
+                                       // Do nothing.
+                               }
+                       }
+                       else
+                       {
+                               if(Adapter->pNdisCommon->bRegBT_Ampdu && Adapter->pNdisCommon->bRegAcceptAddbaReq)
+                               {
+                                       RTPRINT(FBT, BT_TRACE, ("BT_Allow AMPDU bt is off\n"));
+                                       pMgntInfo->pHTInfo->bAcceptAddbaReq = TRUE;
+                               }
+
+                               RTPRINT(FBT, BT_TRACE, ("BT_Turn OFF Coexist bt is off \n"));
+                               PlatformEFIOWrite1Byte(Adapter, REG_GPIO_MUXCFG, 0x14);
+
+                               RTPRINT(FBT, BT_TRACE, ("BT_Update Rate table\n"));
+                               Adapter->HalFunc.UpdateHalRATRTableHandler(
+                                                       Adapter,
+                                                       &pMgntInfo->dot11OperationalRateSet,
+                                                       pMgntInfo->dot11HTOperationalRateSet,NULL);
+                       }
+               }
+       }
+}
+#endif
+
+
+/*-----------------------------------------------------------------------------
+ * Function:   dm_CheckRfCtrlGPIO()
+ *
+ * Overview:   Copy 8187B template for 9xseries.
+ *
+ * Input:              NONE
+ *
+ * Output:             NONE
+ *
+ * Return:             NONE
+ *
+ * Revised History:
+ *     When            Who             Remark
+ *     01/10/2008      MHC             Create Version 0.
+ *
+ *---------------------------------------------------------------------------*/
+static VOID
+dm_CheckRfCtrlGPIO(
+       IN      PADAPTER        Adapter
+       )
+{
+#if 0
+       HAL_DATA_TYPE           *pHalData = GET_HAL_DATA(Adapter);
+#if defined (CONFIG_USB_HCI) || defined (CONFIG_SDIO_HCI)
+       #ifdef CONFIG_USB_HCI
+               // 2010/08/12 MH Add for CU selective suspend.
+               PRT_USB_DEVICE          pDevice = GET_RT_USB_DEVICE(Adapter);
+       #else
+               PRT_SDIO_DEVICE pDevice = GET_RT_SDIO_DEVICE(Adapter);
+       #endif
+#endif
+
+       if(!Adapter->MgntInfo.PowerSaveControl.bGpioRfSw)
+               return;
+
+       RTPRINT(FPWR, PWRHW, ("dm_CheckRfCtrlGPIO \n"));
+
+#if defined (CONFIG_USB_HCI) || defined (CONFIG_SDIO_HCI)
+       // Walk around for DTM test, we will not enable HW - radio on/off because r/w
+       // page 1 register before Lextra bus is enabled cause system fails when resuming
+       // from S4. 20080218, Emily
+       if(Adapter->bInHctTest)
+               return;
+
+//#if ((HAL_CODE_BASE == RTL8192_S) )
+       //Adapter->HalFunc.GPIOChangeRFHandler(Adapter, GPIORF_POLLING);
+//#else
+       // 2010/07/27 MH Only Minicard and support selective suspend, we can not turn off all MAC power to
+       // stop 8051. For dongle and minicard, we both support selective suspend mode.
+       //if(pDevice->RegUsbSS && Adapter->HalFunc.GetInterfaceSelectionHandler(Adapter) == INTF_SEL2_MINICARD)
+
+       //
+       // 2010/08/12 MH We support severl power consumption combination as below.
+       //
+       // Power consumption combination
+       //      SS Enable: (LPS disable + IPS + SW/HW radio off)
+       //      1. Dongle + PDN  (support HW radio off)
+       //      2. Dongle + Normal  (No HW radio off)
+       //      3. MiniCard + PDN (support HW radio off)
+       //      4. MiniCard + Normal (support HW radio off)
+       //
+       //      SS Disable: (LPS + IPS + SW/HW radio off)
+       //      1. Dongle + PDN  (support HW radio off)
+       //      2. Dongle + Normal  (No HW radio off)
+       //      3. MiniCard + PDN (support HW radio off)
+       //      4. MiniCard + Normal (support HW radio off)
+       //
+       //      For Power down module detection. We need to read power register no matter
+       //      dongle or minicard, we will add the item is the detection method.
+       //
+       //
+       //vivi add du case
+       if ((IS_HARDWARE_TYPE_8192CU(Adapter)||IS_HARDWARE_TYPE_8192DU(Adapter))
+               && pDevice->RegUsbSS)
+       {
+               RT_TRACE(COMP_RF, DBG_LOUD, ("USB SS Enabled\n"));
+               if (SUPPORT_HW_RADIO_DETECT(Adapter))
+               {       // Support HW radio detection
+                       RT_TRACE(COMP_RF, DBG_LOUD, ("USB Card Type 2/3/4 support GPIO Detect\n"));
+                       GpioDetectTimerStart(Adapter);
+               }
+               else
+               {       // Dongle does not support HW radio detection.?? In the fufure??
+                       RT_TRACE(COMP_RF, DBG_LOUD, ("USB DONGLE Non-GPIO-Detect\n"));
+               }
+       }
+       else if (IS_HARDWARE_TYPE_8192CU(Adapter) ||
+               IS_HARDWARE_TYPE_8723AU(Adapter)||
+               IS_HARDWARE_TYPE_8192DU(Adapter) ||
+               IS_HARDWARE_TYPE_8723AS(Adapter))
+       {       // Not support Selective suspend
+               RT_TRACE(COMP_RF, DBG_LOUD, ("USB SS Disable\n"));
+               if (SUPPORT_HW_RADIO_DETECT(Adapter))
+               {
+                       RT_TRACE(COMP_RF, DBG_LOUD, ("USB Card Type 2/3/4 support GPIO Detect\n"));
+                       PlatformScheduleWorkItem( &(pHalData->GPIOChangeRFWorkItem) );
+               }
+               else
+               {
+                       RT_TRACE(COMP_RF, DBG_LOUD, ("USB DONGLE Non-GPIO-Detect\n"));
+               }
+       }
+       else
+       {       // CE only support noemal HW radio detection now. Support timers GPIO detection in SE/CU.
+               PlatformScheduleWorkItem( &(pHalData->GPIOChangeRFWorkItem) );
+       }
+//#endif
+#else if defined CONFIG_PCI_HCI
+       if(Adapter->bInHctTest)
+               return;
+
+       // CE only support noemal HW radio detection now. We support timers GPIO detection in SE.
+       PlatformScheduleWorkItem( &(pHalData->GPIOChangeRFWorkItem) );
+#endif
+#endif
+}      /* dm_CheckRfCtrlGPIO */
+
+static VOID
+dm_InitRateAdaptiveMask(
+       IN      PADAPTER        Adapter
+       )
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+       PRATE_ADAPTIVE  pRA = (PRATE_ADAPTIVE)&pdmpriv->RateAdaptive;
+
+       pRA->RATRState = DM_RATR_STA_INIT;
+       pRA->PreRATRState = DM_RATR_STA_INIT;
+
+       if (pdmpriv->DM_Type == DM_Type_ByDriver)
+               pdmpriv->bUseRAMask = _TRUE;
+       else
+               pdmpriv->bUseRAMask = _FALSE;
+}
+
+/*-----------------------------------------------------------------------------
+ * Function:   dm_RefreshRateAdaptiveMask()
+ *
+ * Overview:   Update rate table mask according to rssi
+ *
+ * Input:              NONE
+ *
+ * Output:             NONE
+ *
+ * Return:             NONE
+ *
+ * Revised History:
+ *     When            Who             Remark
+ *     05/27/2009      hpfan   Create Version 0.
+ *
+ *---------------------------------------------------------------------------*/
+static VOID
+dm_RefreshRateAdaptiveMask(    IN      PADAPTER        pAdapter)
+{
+#if 0
+       PADAPTER                                pTargetAdapter;
+       HAL_DATA_TYPE                   *pHalData = GET_HAL_DATA(pAdapter);
+       PMGNT_INFO                              pMgntInfo = &(ADJUST_TO_ADAPTIVE_ADAPTER(pAdapter, TRUE)->MgntInfo);
+       PRATE_ADAPTIVE                  pRA = (PRATE_ADAPTIVE)&pMgntInfo->RateAdaptive;
+       u4Byte                                  LowRSSIThreshForRA = 0, HighRSSIThreshForRA = 0;
+
+       if(pAdapter->bDriverStopped)
+       {
+               RT_TRACE(COMP_RATR, DBG_TRACE, ("<---- dm_RefreshRateAdaptiveMask(): driver is going to unload\n"));
+               return;
+       }
+
+       if(!pMgntInfo->bUseRAMask)
+       {
+               RT_TRACE(COMP_RATR, DBG_LOUD, ("<---- dm_RefreshRateAdaptiveMask(): driver does not control rate adaptive mask\n"));
+               return;
+       }
+
+       // if default port is connected, update RA table for default port (infrastructure mode only)
+       if(pAdapter->MgntInfo.mAssoc && (!ACTING_AS_AP(pAdapter)))
+       {
+
+               // decide rastate according to rssi
+               switch (pRA->PreRATRState)
+               {
+                       case DM_RATR_STA_HIGH:
+                               HighRSSIThreshForRA = 50;
+                               LowRSSIThreshForRA = 20;
+                               break;
+
+                       case DM_RATR_STA_MIDDLE:
+                               HighRSSIThreshForRA = 55;
+                               LowRSSIThreshForRA = 20;
+                               break;
+
+                       case DM_RATR_STA_LOW:
+                               HighRSSIThreshForRA = 50;
+                               LowRSSIThreshForRA = 25;
+                               break;
+
+                       default:
+                               HighRSSIThreshForRA = 50;
+                               LowRSSIThreshForRA = 20;
+                               break;
+               }
+
+               if(pHalData->UndecoratedSmoothedPWDB > (s4Byte)HighRSSIThreshForRA)
+                       pRA->RATRState = DM_RATR_STA_HIGH;
+               else if(pHalData->UndecoratedSmoothedPWDB > (s4Byte)LowRSSIThreshForRA)
+                       pRA->RATRState = DM_RATR_STA_MIDDLE;
+               else
+                       pRA->RATRState = DM_RATR_STA_LOW;
+
+               if(pRA->PreRATRState != pRA->RATRState)
+               {
+                       RT_PRINT_ADDR(COMP_RATR, DBG_LOUD, ("Target AP addr : "), pMgntInfo->Bssid);
+                       RT_TRACE(COMP_RATR, DBG_LOUD, ("RSSI = %d\n", pHalData->UndecoratedSmoothedPWDB));
+                       RT_TRACE(COMP_RATR, DBG_LOUD, ("RSSI_LEVEL = %d\n", pRA->RATRState));
+                       RT_TRACE(COMP_RATR, DBG_LOUD, ("PreState = %d, CurState = %d\n", pRA->PreRATRState, pRA->RATRState));
+                       pAdapter->HalFunc.UpdateHalRAMaskHandler(
+                                                                       pAdapter,
+                                                                       FALSE,
+                                                                       0,
+                                                                       NULL,
+                                                                       NULL,
+                                                                       pRA->RATRState);
+                       pRA->PreRATRState = pRA->RATRState;
+               }
+       }
+
+       //
+       // The following part configure AP/VWifi/IBSS rate adaptive mask.
+       //
+       if(ACTING_AS_AP(pAdapter) || ACTING_AS_IBSS(pAdapter))
+       {
+               pTargetAdapter = pAdapter;
+       }
+       else
+       {
+               pTargetAdapter = ADJUST_TO_ADAPTIVE_ADAPTER(pAdapter, FALSE);
+               if(!ACTING_AS_AP(pTargetAdapter))
+                       pTargetAdapter = NULL;
+       }
+
+       // if extension port (softap) is started, updaet RA table for more than one clients associate
+       if(pTargetAdapter != NULL)
+       {
+               int     i;
+               PRT_WLAN_STA    pEntry;
+               PRATE_ADAPTIVE     pEntryRA;
+
+               for(i = 0; i < ASSOCIATE_ENTRY_NUM; i++)
+               {
+                       if(     pTargetAdapter->MgntInfo.AsocEntry[i].bUsed && pTargetAdapter->MgntInfo.AsocEntry[i].bAssociated)
+                       {
+                               pEntry = pTargetAdapter->MgntInfo.AsocEntry+i;
+                               pEntryRA = &pEntry->RateAdaptive;
+
+                               switch (pEntryRA->PreRATRState)
+                               {
+                                       case DM_RATR_STA_HIGH:
+                                       {
+                                               HighRSSIThreshForRA = 50;
+                                               LowRSSIThreshForRA = 20;
+                                       }
+                                       break;
+
+                                       case DM_RATR_STA_MIDDLE:
+                                       {
+                                               HighRSSIThreshForRA = 55;
+                                               LowRSSIThreshForRA = 20;
+                                       }
+                                       break;
+
+                                       case DM_RATR_STA_LOW:
+                                       {
+                                               HighRSSIThreshForRA = 50;
+                                               LowRSSIThreshForRA = 25;
+                                       }
+                                       break;
+
+                                       default:
+                                       {
+                                               HighRSSIThreshForRA = 50;
+                                               LowRSSIThreshForRA = 20;
+                                       }
+                               }
+
+                               if(pEntry->rssi_stat.UndecoratedSmoothedPWDB > (s4Byte)HighRSSIThreshForRA)
+                                       pEntryRA->RATRState = DM_RATR_STA_HIGH;
+                               else if(pEntry->rssi_stat.UndecoratedSmoothedPWDB > (s4Byte)LowRSSIThreshForRA)
+                                       pEntryRA->RATRState = DM_RATR_STA_MIDDLE;
+                               else
+                                       pEntryRA->RATRState = DM_RATR_STA_LOW;
+
+                               if(pEntryRA->PreRATRState != pEntryRA->RATRState)
+                               {
+                                       RT_PRINT_ADDR(COMP_RATR, DBG_LOUD, ("AsocEntry addr : "), pEntry->MacAddr);
+                                       RT_TRACE(COMP_RATR, DBG_LOUD, ("RSSI = %d\n", pEntry->rssi_stat.UndecoratedSmoothedPWDB));
+                                       RT_TRACE(COMP_RATR, DBG_LOUD, ("RSSI_LEVEL = %d\n", pEntryRA->RATRState));
+                                       RT_TRACE(COMP_RATR, DBG_LOUD, ("PreState = %d, CurState = %d\n", pEntryRA->PreRATRState, pEntryRA->RATRState));
+                                       pAdapter->HalFunc.UpdateHalRAMaskHandler(
+                                                                                       pTargetAdapter,
+                                                                                       FALSE,
+                                                                                       pEntry->AID+1,
+                                                                                       pEntry->MacAddr,
+                                                                                       pEntry,
+                                                                                       pEntryRA->RATRState);
+                                       pEntryRA->PreRATRState = pEntryRA->RATRState;
+                               }
+
+                       }
+               }
+       }
+#endif
+}
+
+static VOID
+dm_CheckProtection(
+       IN      PADAPTER        Adapter
+       )
+{
+#if 0
+       PMGNT_INFO              pMgntInfo = &(Adapter->MgntInfo);
+       u1Byte                  CurRate, RateThreshold;
+
+       if(pMgntInfo->pHTInfo->bCurBW40MHz)
+               RateThreshold = MGN_MCS1;
+       else
+               RateThreshold = MGN_MCS3;
+
+       if(Adapter->TxStats.CurrentInitTxRate <= RateThreshold)
+       {
+               pMgntInfo->bDmDisableProtect = TRUE;
+               DbgPrint("Forced disable protect: %x\n", Adapter->TxStats.CurrentInitTxRate);
+       }
+       else
+       {
+               pMgntInfo->bDmDisableProtect = FALSE;
+               DbgPrint("Enable protect: %x\n", Adapter->TxStats.CurrentInitTxRate);
+       }
+#endif
+}
+
+static VOID
+dm_CheckStatistics(
+       IN      PADAPTER        Adapter
+       )
+{
+#if 0
+       if(!Adapter->MgntInfo.bMediaConnect)
+               return;
+
+       //2008.12.10 tynli Add for getting Current_Tx_Rate_Reg flexibly.
+       rtw_hal_get_hwreg( Adapter, HW_VAR_INIT_TX_RATE, (pu1Byte)(&Adapter->TxStats.CurrentInitTxRate) );
+
+       // Calculate current Tx Rate(Successful transmited!!)
+
+       // Calculate current Rx Rate(Successful received!!)
+
+       //for tx tx retry count
+       rtw_hal_get_hwreg( Adapter, HW_VAR_RETRY_COUNT, (pu1Byte)(&Adapter->TxStats.NumTxRetryCount) );
+#endif
+}
+
+static void dm_CheckPbcGPIO(_adapter *padapter)
+{
+       u8      tmp1byte;
+       u8      bPbcPressed = _FALSE;
+       int i=0;
+
+       if(!padapter->registrypriv.hw_wps_pbc)
+               return;
+
+       do
+       {
+               i++;
+#ifdef CONFIG_USB_HCI
+       tmp1byte = rtw_read8(padapter, GPIO_IO_SEL);
+       tmp1byte |= (HAL_8192C_HW_GPIO_WPS_BIT);
+       rtw_write8(padapter, GPIO_IO_SEL, tmp1byte);    //enable GPIO[2] as output mode
+
+       tmp1byte &= ~(HAL_8192C_HW_GPIO_WPS_BIT);
+       rtw_write8(padapter,  GPIO_IN, tmp1byte);               //reset the floating voltage level
+
+       tmp1byte = rtw_read8(padapter, GPIO_IO_SEL);
+       tmp1byte &= ~(HAL_8192C_HW_GPIO_WPS_BIT);
+       rtw_write8(padapter, GPIO_IO_SEL, tmp1byte);    //enable GPIO[2] as input mode
+
+       tmp1byte =rtw_read8(padapter, GPIO_IN);
+
+       if (tmp1byte == 0xff)
+       {
+               bPbcPressed = _FALSE;
+               break ;
+       }
+
+       if (tmp1byte&HAL_8192C_HW_GPIO_WPS_BIT)
+       {
+               bPbcPressed = _TRUE;
+
+               if(i<=3)
+                       rtw_msleep_os(50);
+       }
+#else
+       tmp1byte = rtw_read8(padapter, GPIO_IN);
+       //RT_TRACE(COMP_IO, DBG_TRACE, ("dm_CheckPbcGPIO - %x\n", tmp1byte));
+
+       if (tmp1byte == 0xff || padapter->init_adpt_in_progress)
+       {
+               bPbcPressed = _FALSE;
+               break ;
+       }
+
+       if((tmp1byte&HAL_8192C_HW_GPIO_WPS_BIT)==0)
+       {
+               bPbcPressed = _TRUE;
+
+               if(i<=3)
+                       rtw_msleep_os(50);
+       }
+#endif
+
+       }while(i<=3 && bPbcPressed == _TRUE);
+
+       if( _TRUE == bPbcPressed)
+       {
+               // Here we only set bPbcPressed to true
+               // After trigger PBC, the variable will be set to false
+               DBG_8192C("CheckPbcGPIO - PBC is pressed, try_cnt=%d\n", i-1);
+
+#ifdef RTK_DMP_PLATFORM
+#if (LINUX_VERSION_CODE > KERNEL_VERSION(2,6,12))
+               kobject_uevent(&padapter->pnetdev->dev.kobj, KOBJ_NET_PBC);
+#else
+               kobject_hotplug(&padapter->pnetdev->class_dev.kobj, KOBJ_NET_PBC);
+#endif
+#else
+
+               if ( padapter->pid[0] == 0 )
+               {       //      0 is the default value and it means the application monitors the HW PBC doesn't privde its pid to driver.
+                       return;
+               }
+
+#ifdef PLATFORM_LINUX
+               rtw_signal_process(padapter->pid[0], SIGUSR1);
+#endif
+#endif
+       }
+}
+
+#ifdef CONFIG_PCI_HCI
+//
+//     Description:
+//             Perform interrupt migration dynamically to reduce CPU utilization.
+//
+//     Assumption:
+//             1. Do not enable migration under WIFI test.
+//
+//     Created by Roger, 2010.03.05.
+//
+VOID
+dm_InterruptMigration(
+       IN      PADAPTER        Adapter
+       )
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       struct mlme_priv        *pmlmepriv = &(Adapter->mlmepriv);
+       BOOLEAN                 bCurrentIntMt, bCurrentACIntDisable;
+       BOOLEAN                 IntMtToSet = _FALSE;
+       BOOLEAN                 ACIntToSet = _FALSE;
+
+
+       // Retrieve current interrupt migration and Tx four ACs IMR settings first.
+       bCurrentIntMt = pHalData->bInterruptMigration;
+       bCurrentACIntDisable = pHalData->bDisableTxInt;
+
+       //
+       // <Roger_Notes> Currently we use busy traffic for reference instead of RxIntOK counts to prevent non-linear Rx statistics
+       // when interrupt migration is set before. 2010.03.05.
+       //
+       if(!Adapter->registrypriv.wifi_spec &&
+               (check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE) &&
+               pmlmepriv->LinkDetectInfo.bHigherBusyTraffic)
+       {
+               IntMtToSet = _TRUE;
+
+               // To check whether we should disable Tx interrupt or not.
+               if(pmlmepriv->LinkDetectInfo.bHigherBusyRxTraffic )
+                       ACIntToSet = _TRUE;
+       }
+
+       //Update current settings.
+       if( bCurrentIntMt != IntMtToSet ){
+               DBG_8192C("%s(): Update interrrupt migration(%d)\n",__FUNCTION__,IntMtToSet);
+               if(IntMtToSet)
+               {
+                       //
+                       // <Roger_Notes> Set interrrupt migration timer and corresponging Tx/Rx counter.
+                       // timer 25ns*0xfa0=100us for 0xf packets.
+                       // 2010.03.05.
+                       //
+                       rtw_write32(Adapter, REG_INT_MIG, 0xff000fa0);// 0x306:Rx, 0x307:Tx
+                       pHalData->bInterruptMigration = IntMtToSet;
+               }
+               else
+               {
+                       // Reset all interrupt migration settings.
+                       rtw_write32(Adapter, REG_INT_MIG, 0);
+                       pHalData->bInterruptMigration = IntMtToSet;
+               }
+       }
+
+       /*if( bCurrentACIntDisable != ACIntToSet ){
+               DBG_8192C("%s(): Update AC interrrupt(%d)\n",__FUNCTION__,ACIntToSet);
+               if(ACIntToSet) // Disable four ACs interrupts.
+               {
+                       //
+                       // <Roger_Notes> Disable VO, VI, BE and BK four AC interrupts to gain more efficient CPU utilization.
+                       // When extremely highly Rx OK occurs, we will disable Tx interrupts.
+                       // 2010.03.05.
+                       //
+                       UpdateInterruptMask8192CE( Adapter, 0, RT_AC_INT_MASKS );
+                       pHalData->bDisableTxInt = ACIntToSet;
+               }
+               else// Enable four ACs interrupts.
+               {
+                       UpdateInterruptMask8192CE( Adapter, RT_AC_INT_MASKS, 0 );
+                       pHalData->bDisableTxInt = ACIntToSet;
+               }
+       }*/
+
+}
+
+#endif
+
+//
+// Initialize GPIO setting registers
+//
+static void
+dm_InitGPIOSetting(
+       IN      PADAPTER        Adapter
+       )
+{
+       PHAL_DATA_TYPE          pHalData = GET_HAL_DATA(Adapter);
+
+       u8      tmp1byte;
+
+       tmp1byte = rtw_read8(Adapter, REG_GPIO_MUXCFG);
+       tmp1byte &= (GPIOSEL_GPIO | ~GPIOSEL_ENBT);
+
+#ifdef CONFIG_BT_COEXIST
+       // UMB-B cut bug. We need to support the modification.
+       if (IS_81xxC_VENDOR_UMC_B_CUT(pHalData->VersionID) &&
+               pHalData->bt_coexist.BT_Coexist)
+       {
+               tmp1byte |= (BIT5);
+       }
+#endif
+       rtw_write8(Adapter, REG_GPIO_MUXCFG, tmp1byte);
+
+}
+
+static void update_EDCA_param(_adapter *padapter)
+{
+       u32     trafficIndex;
+       u32     edca_param;
+       u64     cur_tx_bytes = 0;
+       u64     cur_rx_bytes = 0;
+       PHAL_DATA_TYPE          pHalData = GET_HAL_DATA(padapter);
+       struct dm_priv          *pdmpriv = &pHalData->dmpriv;
+       struct xmit_priv                *pxmitpriv = &(padapter->xmitpriv);
+       struct recv_priv                *precvpriv = &(padapter->recvpriv);
+       struct registry_priv    *pregpriv = &padapter->registrypriv;
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+#ifdef CONFIG_BT_COEXIST
+       struct btcoexist_priv   *pbtpriv = &(pHalData->bt_coexist);
+       u8      bbtchange = _FALSE;
+#endif
+
+
+       //DBG_871X("%s\n", __FUNCTION__);
+
+       //associated AP
+       if ((pregpriv->wifi_spec == 1) || (pmlmeinfo->HT_enable == 0))
+       {
+               return;
+       }
+
+       if (pmlmeinfo->assoc_AP_vendor >= maxAP)
+       {
+               return;
+       }
+
+       cur_tx_bytes = pxmitpriv->tx_bytes - pxmitpriv->last_tx_bytes;
+       cur_rx_bytes = precvpriv->rx_bytes - precvpriv->last_rx_bytes;
+
+       //traffic, TX or RX
+       if((pmlmeinfo->assoc_AP_vendor == ralinkAP)||(pmlmeinfo->assoc_AP_vendor == atherosAP))
+       {
+               if (cur_tx_bytes > (cur_rx_bytes << 2))
+               { // Uplink TP is present.
+                       trafficIndex = UP_LINK;
+               }
+               else
+               { // Balance TP is present.
+                       trafficIndex = DOWN_LINK;
+               }
+       }
+       else
+       {
+               if (cur_rx_bytes > (cur_tx_bytes << 2))
+               { // Downlink TP is present.
+                       trafficIndex = DOWN_LINK;
+               }
+               else
+               { // Balance TP is present.
+                       trafficIndex = UP_LINK;
+               }
+       }
+
+#ifdef CONFIG_BT_COEXIST
+       if(pbtpriv->BT_Coexist)
+       {
+               if( (pbtpriv->BT_EDCA[UP_LINK]!=0) ||  (pbtpriv->BT_EDCA[DOWN_LINK]!=0))
+               {
+                       bbtchange = _TRUE;
+               }
+       }
+#endif
+
+       if (pdmpriv->prv_traffic_idx != trafficIndex)
+       {
+#if 0
+#ifdef CONFIG_BT_COEXIST
+               if(_TRUE == bbtchange)
+                       rtw_write32(padapter, REG_EDCA_BE_PARAM, pbtpriv->BT_EDCA[trafficIndex]);
+               else
+#endif
+               //adjust EDCA parameter for BE queue
+               //fire_write_MAC_cmd(padapter, EDCA_BE_PARAM, EDCAParam[pmlmeinfo->assoc_AP_vendor][trafficIndex]);
+               rtw_write32(padapter, REG_EDCA_BE_PARAM, EDCAParam[pmlmeinfo->assoc_AP_vendor][trafficIndex]);
+
+#else
+               if((pmlmeinfo->assoc_AP_vendor == ciscoAP) && (pmlmeext->cur_wireless_mode & WIRELESS_11_24N))
+               {
+                       edca_param = EDCAParam[pmlmeinfo->assoc_AP_vendor][trafficIndex];
+               }
+               else if((pmlmeinfo->assoc_AP_vendor == airgocapAP) &&
+                       ((pmlmeext->cur_wireless_mode == WIRELESS_11G) ||(pmlmeext->cur_wireless_mode == WIRELESS_11BG)))
+               {
+                       edca_param = EDCAParam[pmlmeinfo->assoc_AP_vendor][trafficIndex];
+               }
+               else
+               {
+                       edca_param = EDCAParam[unknownAP][trafficIndex];
+               }
+
+#ifdef CONFIG_BT_COEXIST
+               if(_TRUE == bbtchange)
+                       edca_param = pbtpriv->BT_EDCA[trafficIndex];
+#endif
+
+               rtw_write32(padapter, REG_EDCA_BE_PARAM, edca_param);
+#endif
+               pdmpriv->prv_traffic_idx = trafficIndex;
+       }
+
+//exit_update_EDCA_param:
+
+       pxmitpriv->last_tx_bytes = pxmitpriv->tx_bytes;
+       precvpriv->last_rx_bytes = precvpriv->rx_bytes;
+
+       return;
+}
+
+static void dm_InitDynamicBBPowerSaving(
+       IN      PADAPTER        Adapter
+       )
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+       PS_T    *pPSTable = &pdmpriv->DM_PSTable;
+
+       pPSTable->PreCCAState = CCA_MAX;
+       pPSTable->CurCCAState = CCA_MAX;
+       pPSTable->PreRFState = RF_MAX;
+       pPSTable->CurRFState = RF_MAX;
+       pPSTable->Rssi_val_min = 0;
+}
+
+static void dm_1R_CCA(
+       IN      PADAPTER        pAdapter)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(pAdapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+       PS_T    *pPSTable = &pdmpriv->DM_PSTable;
+
+       if(pPSTable->Rssi_val_min != 0)
+       {
+               if(pPSTable->PreCCAState == CCA_2R)
+               {
+                       if(pPSTable->Rssi_val_min >= 35)
+                               pPSTable->CurCCAState = CCA_1R;
+                       else
+                               pPSTable->CurCCAState = CCA_2R;
+               }
+               else{
+                       if(pPSTable->Rssi_val_min <= 30)
+                               pPSTable->CurCCAState = CCA_2R;
+                       else
+                               pPSTable->CurCCAState = CCA_1R;
+               }
+       }
+       else
+               pPSTable->CurCCAState=CCA_MAX;
+
+       if(pPSTable->PreCCAState != pPSTable->CurCCAState)
+       {
+               if(pPSTable->CurCCAState == CCA_1R)
+               {
+                       if(pHalData->rf_type == RF_2T2R)
+                       {
+                               PHY_SetBBReg(pAdapter, rOFDM0_TRxPathEnable  , bMaskByte0, 0x13);
+                               PHY_SetBBReg(pAdapter, 0xe70, bMaskByte3, 0x20);
+                       }
+                       else
+                       {
+                               PHY_SetBBReg(pAdapter, rOFDM0_TRxPathEnable  , bMaskByte0, 0x23);
+                               PHY_SetBBReg(pAdapter, 0xe70, 0x7fc00000, 0x10c); // Set RegE70[30:22] = 9b'100001100
+                       }
+               }
+               else
+               {
+                       PHY_SetBBReg(pAdapter, rOFDM0_TRxPathEnable, bMaskByte0, 0x33);
+                       PHY_SetBBReg(pAdapter,0xe70, bMaskByte3, 0x63);
+               }
+               pPSTable->PreCCAState = pPSTable->CurCCAState;
+       }
+       //DBG_8192C("dm_1R_CCA(): CCAStage=%x\n", pPSTable->CurCCAState);
+}
+
+void
+rtl8192c_dm_RF_Saving(
+       IN      PADAPTER        pAdapter,
+       IN      u8      bForceInNormal
+       )
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(pAdapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+       PS_T    *pPSTable = &pdmpriv->DM_PSTable;
+
+       if(pdmpriv->initialize == 0){
+               pdmpriv->rf_saving_Reg874 = (PHY_QueryBBReg(pAdapter, rFPGA0_XCD_RFInterfaceSW, bMaskDWord)&0x1CC000)>>14;
+               pdmpriv->rf_saving_RegC70 = (PHY_QueryBBReg(pAdapter, rOFDM0_AGCParameter1, bMaskDWord)&BIT3)>>3;
+               pdmpriv->rf_saving_Reg85C = (PHY_QueryBBReg(pAdapter, rFPGA0_XCD_SwitchControl, bMaskDWord)&0xFF000000)>>24;
+               pdmpriv->rf_saving_RegA74 = (PHY_QueryBBReg(pAdapter, 0xa74, bMaskDWord)&0xF000)>>12;
+               //Reg818 = PHY_QueryBBReg(pAdapter, 0x818, bMaskDWord);
+               pdmpriv->initialize = 1;
+       }
+
+       if(!bForceInNormal)
+       {
+               if(pPSTable->Rssi_val_min != 0)
+               {
+
+                       if(pPSTable->PreRFState == RF_Normal)
+                       {
+                       #ifdef CONFIG_SPECIAL_SETTING_FOR_FUNAI_TV
+                               if(pPSTable->Rssi_val_min >= 50)
+                       #else
+                               if(pPSTable->Rssi_val_min >= 30)
+                       #endif
+                                       pPSTable->CurRFState = RF_Save;
+                               else
+                                       pPSTable->CurRFState = RF_Normal;
+                       }
+                       else{
+                       #ifdef CONFIG_SPECIAL_SETTING_FOR_FUNAI_TV
+                               if(pPSTable->Rssi_val_min <= 45)
+                       #else
+                               if(pPSTable->Rssi_val_min <= 25)
+                       #endif
+                                       pPSTable->CurRFState = RF_Normal;
+                               else
+                                       pPSTable->CurRFState = RF_Save;
+                       }
+               }
+               else
+                       pPSTable->CurRFState=RF_MAX;
+       }
+       else
+       {
+               pPSTable->CurRFState = RF_Normal;
+       }
+
+       if(pPSTable->PreRFState != pPSTable->CurRFState)
+       {
+               if(pPSTable->CurRFState == RF_Save)
+               {
+                       PHY_SetBBReg(pAdapter, rFPGA0_XCD_RFInterfaceSW  , 0x1C0000, 0x2); //Reg874[20:18]=3'b010
+                       PHY_SetBBReg(pAdapter, rOFDM0_AGCParameter1, BIT3, 0); //RegC70[3]=1'b0
+                       PHY_SetBBReg(pAdapter, rFPGA0_XCD_SwitchControl, 0xFF000000, 0x63); //Reg85C[31:24]=0x63
+                       PHY_SetBBReg(pAdapter, rFPGA0_XCD_RFInterfaceSW, 0xC000, 0x2); //Reg874[15:14]=2'b10
+                       PHY_SetBBReg(pAdapter, 0xa74, 0xF000, 0x3); //RegA75[7:4]=0x3
+                       PHY_SetBBReg(pAdapter, 0x818, BIT28, 0x0); //Reg818[28]=1'b0
+                       PHY_SetBBReg(pAdapter, 0x818, BIT28, 0x1); //Reg818[28]=1'b1
+                       DBG_8192C("%s(): RF_Save\n", __FUNCTION__);
+               }
+               else
+               {
+                       PHY_SetBBReg(pAdapter, rFPGA0_XCD_RFInterfaceSW  , 0x1CC000, pdmpriv->rf_saving_Reg874);
+                       PHY_SetBBReg(pAdapter, rOFDM0_AGCParameter1, BIT3, pdmpriv->rf_saving_RegC70);
+                       PHY_SetBBReg(pAdapter, rFPGA0_XCD_SwitchControl, 0xFF000000, pdmpriv->rf_saving_Reg85C);
+                       PHY_SetBBReg(pAdapter, 0xa74, 0xF000, pdmpriv->rf_saving_RegA74);
+                       PHY_SetBBReg(pAdapter, 0x818, BIT28, 0x0);
+                       DBG_8192C("%s(): RF_Normal\n", __FUNCTION__);
+               }
+               pPSTable->PreRFState = pPSTable->CurRFState;
+       }
+}
+
+static void
+dm_DynamicBBPowerSaving(
+IN     PADAPTER        pAdapter
+       )
+{
+
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(pAdapter);
+       struct mlme_priv        *pmlmepriv = &pAdapter->mlmepriv;
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+       PS_T    *pPSTable = &pdmpriv->DM_PSTable;
+
+       //1 1.Determine the minimum RSSI
+       if((check_fwstate(pmlmepriv, _FW_LINKED) != _TRUE) &&
+               (pdmpriv->EntryMinUndecoratedSmoothedPWDB == 0))
+       {
+               pPSTable->Rssi_val_min = 0;
+               //RT_TRACE(COMP_BB_POWERSAVING, DBG_LOUD, ("Not connected to any \n"));
+       }
+       if(check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)       // Default port
+       {
+               //if(ACTING_AS_AP(pAdapter) || pMgntInfo->mIbss)
+                if ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE) ||
+                              (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE))   //todo: AP Mode
+               {
+                       pPSTable->Rssi_val_min = pdmpriv->EntryMinUndecoratedSmoothedPWDB;
+                       //RT_TRACE(COMP_BB_POWERSAVING, DBG_LOUD, ("AP Client PWDB = 0x%lx \n", pPSTable->Rssi_val_min));
+               }
+               else
+               {
+                       pPSTable->Rssi_val_min = pdmpriv->UndecoratedSmoothedPWDB;
+                       //RT_TRACE(COMP_BB_POWERSAVING, DBG_LOUD, ("STA Default Port PWDB = 0x%lx \n", pPSTable->Rssi_val_min));
+               }
+       }
+       else // associated entry pwdb
+       {
+               pPSTable->Rssi_val_min = pdmpriv->EntryMinUndecoratedSmoothedPWDB;
+               //RT_TRACE(COMP_BB_POWERSAVING, DBG_LOUD, ("AP Ext Port PWDB = 0x%lx \n", pPSTable->Rssi_val_min));
+       }
+
+       //1 2.Power Saving for 92C
+       if(IS_92C_SERIAL(pHalData->VersionID))
+       {
+               //dm_1R_CCA(pAdapter);
+       }
+
+       // 20100628 Joseph: Turn off BB power save for 88CE because it makesthroughput unstable.
+       // 20100831 Joseph: Turn ON BB power save again after modifying AGC delay from 900ns to 600ns.
+       //1 3.Power Saving for 88C
+       else
+       {
+               rtl8192c_dm_RF_Saving(pAdapter, _FALSE);
+       }
+}
+
+
+#ifdef CONFIG_ANTENNA_DIVERSITY
+// Add new function to reset the state of antenna diversity before link.
+//
+void SwAntDivResetBeforeLink8192C(IN PADAPTER Adapter)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+       SWAT_T *pDM_SWAT_Table = &pdmpriv->DM_SWAT_Table;
+
+       pDM_SWAT_Table->SWAS_NoLink_State = 0;
+}
+
+// Compare RSSI for deciding antenna
+void   SwAntDivCompare8192C(PADAPTER Adapter, WLAN_BSSID_EX *dst, WLAN_BSSID_EX *src)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+
+       if((0 != pHalData->AntDivCfg) && (!IS_92C_SERIAL(pHalData->VersionID)) )
+       {
+               //DBG_8192C("update_network=> orgRSSI(%d)(%d),newRSSI(%d)(%d)\n",dst->Rssi,query_rx_pwr_percentage(dst->Rssi),
+               //      src->Rssi,query_rx_pwr_percentage(src->Rssi));
+               //select optimum_antenna for before linked =>For antenna diversity
+               if(dst->Rssi >=  src->Rssi )//keep org parameter
+               {
+                       src->Rssi = dst->Rssi;
+                       src->PhyInfo.Optimum_antenna = dst->PhyInfo.Optimum_antenna;
+               }
+       }
+}
+
+// Add new function to reset the state of antenna diversity before link.
+u8 SwAntDivBeforeLink8192C(IN PADAPTER Adapter)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+       SWAT_T                  *pDM_SWAT_Table = &pdmpriv->DM_SWAT_Table;
+       struct mlme_priv        *pmlmepriv = &(Adapter->mlmepriv);
+
+       // Condition that does not need to use antenna diversity.
+       if(IS_92C_SERIAL(pHalData->VersionID) ||(pHalData->AntDivCfg==0))
+       {
+               //DBG_8192C("SwAntDivBeforeLink8192C(): No AntDiv Mechanism.\n");
+               return _FALSE;
+       }
+
+       if(check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)
+       {
+               pDM_SWAT_Table->SWAS_NoLink_State = 0;
+               return _FALSE;
+       }
+       // Since driver is going to set BB register, it shall check if there is another thread controlling BB/RF.
+/*
+       if(pHalData->eRFPowerState!=eRfOn || pMgntInfo->RFChangeInProgress || pMgntInfo->bMediaConnect)
+       {
+
+
+               RT_TRACE(COMP_SWAS, DBG_LOUD,
+                               ("SwAntDivCheckBeforeLink8192C(): RFChangeInProgress(%x), eRFPowerState(%x)\n",
+                               pMgntInfo->RFChangeInProgress,
+                               pHalData->eRFPowerState));
+
+               pDM_SWAT_Table->SWAS_NoLink_State = 0;
+
+               return FALSE;
+       }
+*/
+
+       if(pDM_SWAT_Table->SWAS_NoLink_State == 0){
+               //switch channel
+               pDM_SWAT_Table->SWAS_NoLink_State = 1;
+               pDM_SWAT_Table->CurAntenna = (pDM_SWAT_Table->CurAntenna==Antenna_A)?Antenna_B:Antenna_A;
+
+               //PHY_SetBBReg(Adapter, rFPGA0_XA_RFInterfaceOE, 0x300, pDM_SWAT_Table->CurAntenna);
+               rtw_antenna_select_cmd(Adapter, pDM_SWAT_Table->CurAntenna, _FALSE);
+               //DBG_8192C("%s change antenna to ANT_( %s ).....\n",__FUNCTION__, (pDM_SWAT_Table->CurAntenna==Antenna_A)?"A":"B");
+               return _TRUE;
+       }
+       else
+       {
+               pDM_SWAT_Table->SWAS_NoLink_State = 0;
+               return _FALSE;
+       }
+
+
+
+}
+#endif
+#ifdef CONFIG_SW_ANTENNA_DIVERSITY
+//
+// 20100514 Luke/Joseph:
+// Add new function to reset antenna diversity state after link.
+//
+void
+SwAntDivRestAfterLink8192C(
+       IN      PADAPTER        Adapter
+       )
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+       SWAT_T                  *pDM_SWAT_Table = &pdmpriv->DM_SWAT_Table;
+
+       if(IS_92C_SERIAL(pHalData->VersionID) ||(pHalData->AntDivCfg==0))
+               return;
+
+       //DBG_8192C("======>   SwAntDivRestAfterLink <========== \n");
+       pHalData->RSSI_cnt_A= 0;
+       pHalData->RSSI_cnt_B= 0;
+       pHalData->RSSI_test = _FALSE;
+
+       pDM_SWAT_Table->try_flag = 0xff;
+       pDM_SWAT_Table->RSSI_Trying = 0;
+       pDM_SWAT_Table->SelectAntennaMap=0xAA;
+       pDM_SWAT_Table->CurAntenna = pHalData->CurAntenna;
+       pDM_SWAT_Table->PreAntenna = pHalData->CurAntenna;
+
+       pdmpriv->lastTxOkCnt=0;
+       pdmpriv->lastRxOkCnt=0;
+
+       pdmpriv->TXByteCnt_A=0;
+       pdmpriv->TXByteCnt_B=0;
+       pdmpriv->RXByteCnt_A=0;
+       pdmpriv->RXByteCnt_B=0;
+       pdmpriv->DoubleComfirm=0;
+       pdmpriv->TrafficLoad = TRAFFIC_LOW;
+
+}
+
+
+//
+// 20100514 Luke/Joseph:
+// Add new function for antenna diversity after link.
+// This is the main function of antenna diversity after link.
+// This function is called in HalDmWatchDog() and dm_SW_AntennaSwitchCallback().
+// HalDmWatchDog() calls this function with SWAW_STEP_PEAK to initialize the antenna test.
+// In SWAW_STEP_PEAK, another antenna and a 500ms timer will be set for testing.
+// After 500ms, dm_SW_AntennaSwitchCallback() calls this function to compare the signal just
+// listened on the air with the RSSI of original antenna.
+// It chooses the antenna with better RSSI.
+// There is also a aged policy for error trying. Each error trying will cost more 5 seconds waiting
+// penalty to get next try.
+//
+static VOID
+dm_SW_AntennaSwitch(
+       PADAPTER        Adapter,
+       u8                      Step
+)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+       SWAT_T  *pDM_SWAT_Table = &pdmpriv->DM_SWAT_Table;
+       s32                     curRSSI=100, RSSI_A, RSSI_B;
+       u64                     curTxOkCnt, curRxOkCnt;
+       u64                     CurByteCnt = 0, PreByteCnt = 0;
+       u8              nextAntenna = 0;
+       u8                      Score_A=0, Score_B=0;
+       u8                      i;
+
+       // Condition that does not need to use antenna diversity.
+       if(IS_92C_SERIAL(pHalData->VersionID) ||(pHalData->AntDivCfg==0))
+       {
+               //RT_TRACE(COMP_SWAS, DBG_LOUD, ("dm_SW_AntennaSwitch(): No AntDiv Mechanism.\n"));
+               return;
+       }
+       // If dynamic ant_div is disabled.
+       if(!(pdmpriv->DMFlag & DYNAMIC_FUNC_ANT_DIV) )
+       {
+               return;
+       }
+
+       if (check_fwstate(&Adapter->mlmepriv, _FW_LINKED)       ==_FALSE)
+               return;
+#if 0 //to do
+       // Radio off: Status reset to default and return.
+       if(pHalData->eRFPowerState==eRfOff)
+       {
+               SwAntDivRestAfterLink(Adapter);
+               return;
+       }
+#endif
+       //DBG_8192C("\n............................ %s.........................\n",__FUNCTION__);
+       // Handling step mismatch condition.
+       // Peak step is not finished at last time. Recover the variable and check again.
+       if( Step != pDM_SWAT_Table->try_flag    )
+       {
+               SwAntDivRestAfterLink8192C(Adapter);
+       }
+
+
+       if(pDM_SWAT_Table->try_flag == 0xff)
+       {
+#if 0
+               // Select RSSI checking target
+               if(pMgntInfo->mAssoc && !ACTING_AS_AP(Adapter))
+               {
+                       // Target: Infrastructure mode AP.
+                       pHalData->RSSI_target = NULL;
+                       RT_TRACE(COMP_SWAS, DBG_LOUD, ("dm_SW_AntennaSwitch(): RSSI_target is DEF AP!\n"));
+               }
+               else
+               {
+                       u8                      index = 0;
+                       PRT_WLAN_STA    pEntry = NULL;
+                       PADAPTER                pTargetAdapter = NULL;
+
+                       if(     pMgntInfo->mIbss || ACTING_AS_AP(Adapter) )
+                       {
+                               // Target: AP/IBSS peer.
+                               pTargetAdapter = Adapter;
+                       }
+                       else if(ACTING_AS_AP(ADJUST_TO_ADAPTIVE_ADAPTER(Adapter, FALSE)))
+                       {
+                               // Target: VWIFI peer.
+                               pTargetAdapter = ADJUST_TO_ADAPTIVE_ADAPTER(Adapter, FALSE);
+                       }
+
+                       if(pTargetAdapter != NULL)
+                       {
+                               for(index=0; index<ASSOCIATE_ENTRY_NUM; index++)
+                               {
+                                       pEntry = AsocEntry_EnumStation(pTargetAdapter, index);
+                                       if(pEntry != NULL)
+                                       {
+                                               if(pEntry->bAssociated)
+                                                       break;
+                                       }
+                               }
+                       }
+
+                       if(pEntry == NULL)
+                       {
+                               SwAntDivRestAfterLink(Adapter);
+                               RT_TRACE(COMP_SWAS, DBG_LOUD, ("dm_SW_AntennaSwitch(): No Link.\n"));
+                               return;
+                       }
+                       else
+                       {
+                               pHalData->RSSI_target = pEntry;
+                               RT_TRACE(COMP_SWAS, DBG_LOUD, ("dm_SW_AntennaSwitch(): RSSI_target is PEER STA\n"));
+                       }
+               }
+
+
+#endif
+
+               pHalData->RSSI_cnt_A= 0;
+               pHalData->RSSI_cnt_B= 0;
+               pDM_SWAT_Table->try_flag = 0;
+       //      DBG_8192C("dm_SW_AntennaSwitch(): Set try_flag to 0 prepare for peak!\n");
+               return;
+       }
+       else
+       {
+               curTxOkCnt = Adapter->xmitpriv.tx_bytes - pdmpriv->lastTxOkCnt;
+               curRxOkCnt = Adapter->recvpriv.rx_bytes - pdmpriv->lastRxOkCnt;
+
+               pdmpriv->lastTxOkCnt = Adapter->xmitpriv.tx_bytes ;
+               pdmpriv->lastRxOkCnt = Adapter->recvpriv.rx_bytes ;
+
+               if(pDM_SWAT_Table->try_flag == 1)
+               {
+                       if(pDM_SWAT_Table->CurAntenna == Antenna_A)
+               {
+                               pdmpriv->TXByteCnt_A += curTxOkCnt;
+                               pdmpriv->RXByteCnt_A += curRxOkCnt;
+                               //DBG_8192C("#####  TXByteCnt_A(%lld) , RXByteCnt_A(%lld) ####\n",pdmpriv->TXByteCnt_A,pdmpriv->RXByteCnt_A);
+                       }
+                       else
+                       {
+                               pdmpriv->TXByteCnt_B += curTxOkCnt;
+                               pdmpriv->RXByteCnt_B += curRxOkCnt;
+                               //DBG_8192C("#####  TXByteCnt_B(%lld) , RXByteCnt_B(%lld) ####\n",pdmpriv->TXByteCnt_B,pdmpriv->RXByteCnt_B);
+                       }
+
+                       nextAntenna = (pDM_SWAT_Table->CurAntenna == Antenna_A)? Antenna_B : Antenna_A;
+                       pDM_SWAT_Table->RSSI_Trying--;
+                       //DBG_8192C("RSSI_Trying = %d\n",pDM_SWAT_Table->RSSI_Trying);
+
+                       if(pDM_SWAT_Table->RSSI_Trying == 0)
+                       {
+                               CurByteCnt = (pDM_SWAT_Table->CurAntenna == Antenna_A)? (pdmpriv->TXByteCnt_A+pdmpriv->RXByteCnt_A) : (pdmpriv->TXByteCnt_B+pdmpriv->RXByteCnt_B);
+                               PreByteCnt = (pDM_SWAT_Table->CurAntenna == Antenna_A)? (pdmpriv->TXByteCnt_B+pdmpriv->RXByteCnt_B) : (pdmpriv->TXByteCnt_A+pdmpriv->RXByteCnt_A);
+
+                               //DBG_8192C("CurByteCnt = %lld\n", CurByteCnt);
+                               //DBG_8192C("PreByteCnt = %lld\n",PreByteCnt);
+
+                               if(pdmpriv->TrafficLoad == TRAFFIC_HIGH)
+                               {
+                                       PreByteCnt = PreByteCnt*9;      //normalize:Cur=90ms:Pre=10ms
+                               }
+                               else if(pdmpriv->TrafficLoad == TRAFFIC_LOW)
+                               {
+                                       //CurByteCnt = CurByteCnt/2;
+                                       CurByteCnt = CurByteCnt>>1;//normalize:100ms:50ms
+                               }
+
+
+                               //DBG_8192C("After DIV=>CurByteCnt = %lld\n", CurByteCnt);
+                               //DBG_8192C("PreByteCnt = %lld\n",PreByteCnt);
+
+                               if(pHalData->RSSI_cnt_A > 0)
+                                       RSSI_A = pHalData->RSSI_sum_A/pHalData->RSSI_cnt_A;
+                               else
+                                       RSSI_A = 0;
+                               if(pHalData->RSSI_cnt_B > 0)
+                                       RSSI_B = pHalData->RSSI_sum_B/pHalData->RSSI_cnt_B;
+                               else
+                                       RSSI_B = 0;
+
+                               curRSSI = (pDM_SWAT_Table->CurAntenna == Antenna_A)? RSSI_A : RSSI_B;
+                               pDM_SWAT_Table->PreRSSI =  (pDM_SWAT_Table->CurAntenna == Antenna_A)? RSSI_B : RSSI_A;
+                               //DBG_8192C("Luke:PreRSSI = %d, CurRSSI = %d\n",pDM_SWAT_Table->PreRSSI, curRSSI);
+                               //DBG_8192C("SWAS: preAntenna= %s, curAntenna= %s \n",
+                               //(pDM_SWAT_Table->PreAntenna == Antenna_A?"A":"B"), (pDM_SWAT_Table->CurAntenna == Antenna_A?"A":"B"));
+                               //DBG_8192C("Luke:RSSI_A= %d, RSSI_cnt_A = %d, RSSI_B= %d, RSSI_cnt_B = %d\n",
+                                       //RSSI_A, pHalData->RSSI_cnt_A, RSSI_B, pHalData->RSSI_cnt_B);
+                       }
+
+                       }
+                       else
+                       {
+
+                       if(pHalData->RSSI_cnt_A > 0)
+                               RSSI_A = pHalData->RSSI_sum_A/pHalData->RSSI_cnt_A;
+                       else
+                               RSSI_A = 0;
+                       if(pHalData->RSSI_cnt_B > 0)
+                               RSSI_B = pHalData->RSSI_sum_B/pHalData->RSSI_cnt_B;
+                       else
+                               RSSI_B = 0;
+                       curRSSI = (pDM_SWAT_Table->CurAntenna == Antenna_A)? RSSI_A : RSSI_B;
+                       pDM_SWAT_Table->PreRSSI =  (pDM_SWAT_Table->PreAntenna == Antenna_A)? RSSI_A : RSSI_B;
+                       //DBG_8192C("Ekul:PreRSSI = %d, CurRSSI = %d\n", pDM_SWAT_Table->PreRSSI, curRSSI);
+                       //DBG_8192C("SWAS: preAntenna= %s, curAntenna= %s \n",
+                       //(pDM_SWAT_Table->PreAntenna == Antenna_A?"A":"B"), (pDM_SWAT_Table->CurAntenna == Antenna_A?"A":"B"));
+
+                       //DBG_8192C("Ekul:RSSI_A= %d, RSSI_cnt_A = %d, RSSI_B= %d, RSSI_cnt_B = %d\n",
+                       //      RSSI_A, pHalData->RSSI_cnt_A, RSSI_B, pHalData->RSSI_cnt_B);
+                       //RT_TRACE(COMP_SWAS, DBG_LOUD, ("Ekul:curTxOkCnt = %d\n", curTxOkCnt));
+                       //RT_TRACE(COMP_SWAS, DBG_LOUD, ("Ekul:curRxOkCnt = %d\n", curRxOkCnt));
+                       }
+
+               //1 Trying State
+               if((pDM_SWAT_Table->try_flag == 1)&&(pDM_SWAT_Table->RSSI_Trying == 0))
+               {
+
+                       if(pDM_SWAT_Table->TestMode == TP_MODE)
+                       {
+                               //DBG_8192C("SWAS: TestMode = TP_MODE\n");
+                               //DBG_8192C("TRY:CurByteCnt = %lld\n", CurByteCnt);
+                               //DBG_8192C("TRY:PreByteCnt = %lld\n",PreByteCnt);
+                               if(CurByteCnt < PreByteCnt)
+                               {
+                                       if(pDM_SWAT_Table->CurAntenna == Antenna_A)
+                                               pDM_SWAT_Table->SelectAntennaMap=pDM_SWAT_Table->SelectAntennaMap<<1;
+                                       else
+                                               pDM_SWAT_Table->SelectAntennaMap=(pDM_SWAT_Table->SelectAntennaMap<<1)+1;
+                               }
+                               else
+                               {
+                                       if(pDM_SWAT_Table->CurAntenna == Antenna_A)
+                                               pDM_SWAT_Table->SelectAntennaMap=(pDM_SWAT_Table->SelectAntennaMap<<1)+1;
+                                       else
+                                               pDM_SWAT_Table->SelectAntennaMap=pDM_SWAT_Table->SelectAntennaMap<<1;
+                               }
+                               for (i= 0; i<8; i++)
+                               {
+                                       if(((pDM_SWAT_Table->SelectAntennaMap>>i)&BIT0) == 1)
+                                               Score_A++;
+                                       else
+                                               Score_B++;
+                               }
+                               //DBG_8192C("SelectAntennaMap=%x\n ",pDM_SWAT_Table->SelectAntennaMap);
+                               //DBG_8192C("Score_A=%d, Score_B=%d\n", Score_A, Score_B);
+
+                               if(pDM_SWAT_Table->CurAntenna == Antenna_A)
+                               {
+                                       nextAntenna = (Score_A > Score_B)?Antenna_A:Antenna_B;
+                               }
+                               else
+                               {
+                                       nextAntenna = (Score_B > Score_A)?Antenna_B:Antenna_A;
+                               }
+                               //RT_TRACE(COMP_SWAS, DBG_LOUD, ("nextAntenna=%s\n",(nextAntenna==Antenna_A)?"A":"B"));
+                               //RT_TRACE(COMP_SWAS, DBG_LOUD, ("preAntenna= %s, curAntenna= %s \n",
+                                       //(DM_SWAT_Table.PreAntenna == Antenna_A?"A":"B"), (DM_SWAT_Table.CurAntenna == Antenna_A?"A":"B")));
+
+                               if(nextAntenna != pDM_SWAT_Table->CurAntenna)
+                               {
+                                       //DBG_8192C("SWAS: Switch back to another antenna\n");
+                               }
+                               else
+                               {
+                                       //DBG_8192C("SWAS: current anntena is good\n");
+                               }
+                       }
+
+                       if(pDM_SWAT_Table->TestMode == RSSI_MODE)
+                       {
+                               //DBG_8192C("SWAS: TestMode = RSSI_MODE\n");
+                               pDM_SWAT_Table->SelectAntennaMap=0xAA;
+                               if(curRSSI < pDM_SWAT_Table->PreRSSI) //Current antenna is worse than previous antenna
+                               {
+                                       //DBG_8192C("SWAS: Switch back to another antenna\n");
+                                       nextAntenna = (pDM_SWAT_Table->CurAntenna == Antenna_A)? Antenna_B : Antenna_A;
+                               }
+                               else // current anntena is good
+                               {
+                                       nextAntenna = pDM_SWAT_Table->CurAntenna;
+                                       //DBG_8192C("SWAS: current anntena is good\n");
+                               }
+                               }
+                               pDM_SWAT_Table->try_flag = 0;
+                               pHalData->RSSI_test = _FALSE;
+                               pHalData->RSSI_sum_A = 0;
+                               pHalData->RSSI_cnt_A = 0;
+                               pHalData->RSSI_sum_B = 0;
+                               pHalData->RSSI_cnt_B = 0;
+                               pdmpriv->TXByteCnt_A = 0;
+                               pdmpriv->TXByteCnt_B = 0;
+                               pdmpriv->RXByteCnt_A = 0;
+                               pdmpriv->RXByteCnt_B = 0;
+
+                       }
+
+               //1 Normal State
+               else if(pDM_SWAT_Table->try_flag == 0)
+                       {
+                       if(pdmpriv->TrafficLoad == TRAFFIC_HIGH)
+                               {
+                               if(((curTxOkCnt+curRxOkCnt)>>1) > 1875000)
+                                       pdmpriv->TrafficLoad = TRAFFIC_HIGH;
+                               else
+                                       pdmpriv->TrafficLoad = TRAFFIC_LOW;
+                       }
+                       else if(pdmpriv->TrafficLoad == TRAFFIC_LOW)
+                               {
+                               if(((curTxOkCnt+curRxOkCnt)>>1) > 1875000)
+                                       pdmpriv->TrafficLoad = TRAFFIC_HIGH;
+                               else
+                                       pdmpriv->TrafficLoad = TRAFFIC_LOW;
+                       }
+                       if(pdmpriv->TrafficLoad == TRAFFIC_HIGH)
+                               pDM_SWAT_Table->bTriggerAntennaSwitch = 0;
+                       //DBG_8192C("Normal:TrafficLoad = %lld\n", curTxOkCnt+curRxOkCnt);
+
+                       //Prepare To Try Antenna
+                                       nextAntenna = (pDM_SWAT_Table->CurAntenna == Antenna_A)? Antenna_B : Antenna_A;
+                                       pDM_SWAT_Table->try_flag = 1;
+                                       pHalData->RSSI_test = _TRUE;
+                       if((curRxOkCnt+curTxOkCnt) > 1000)
+                       {
+                               pDM_SWAT_Table->RSSI_Trying = 4;
+                               pDM_SWAT_Table->TestMode = TP_MODE;
+                               }
+                               else
+                               {
+                               pDM_SWAT_Table->RSSI_Trying = 2;
+                               pDM_SWAT_Table->TestMode = RSSI_MODE;
+
+                       }
+                       //DBG_8192C("SWAS: Normal State -> Begin Trying! TestMode=%s\n",(pDM_SWAT_Table->TestMode == TP_MODE)?"TP":"RSSI");
+
+
+                       pHalData->RSSI_sum_A = 0;
+                       pHalData->RSSI_cnt_A = 0;
+                       pHalData->RSSI_sum_B = 0;
+                       pHalData->RSSI_cnt_B = 0;
+               }
+       }
+
+       //1 4.Change TRX antenna
+       if(nextAntenna != pDM_SWAT_Table->CurAntenna)
+       {
+               //DBG_8192C("@@@@@@@@ SWAS: Change TX Antenna!\n ");
+               rtw_antenna_select_cmd(Adapter, nextAntenna, 1);
+       }
+
+       //1 5.Reset Statistics
+       pDM_SWAT_Table->PreAntenna = pDM_SWAT_Table->CurAntenna;
+       pDM_SWAT_Table->CurAntenna = nextAntenna;
+       pDM_SWAT_Table->PreRSSI = curRSSI;
+
+
+       //1 6.Set next timer
+
+       if(pDM_SWAT_Table->RSSI_Trying == 0)
+               return;
+
+       if(pDM_SWAT_Table->RSSI_Trying%2 == 0)
+       {
+               if(pDM_SWAT_Table->TestMode == TP_MODE)
+               {
+                       if(pdmpriv->TrafficLoad == TRAFFIC_HIGH)
+                       {
+                               _set_timer(&pdmpriv->SwAntennaSwitchTimer,10 ); //ms
+                               //DBG_8192C("dm_SW_AntennaSwitch(): Test another antenna for 10 ms\n");
+                       }
+                       else if(pdmpriv->TrafficLoad == TRAFFIC_LOW)
+                       {
+                               _set_timer(&pdmpriv->SwAntennaSwitchTimer, 50 ); //ms
+                               //DBG_8192C("dm_SW_AntennaSwitch(): Test another antenna for 50 ms\n");
+                       }
+       }
+       else
+       {
+                       _set_timer(&pdmpriv->SwAntennaSwitchTimer, 500 ); //ms
+                       //DBG_8192C("dm_SW_AntennaSwitch(): Test another antenna for 500 ms\n");
+               }
+       }
+       else
+       {
+               if(pDM_SWAT_Table->TestMode == TP_MODE)
+               {
+                       if(pdmpriv->TrafficLoad == TRAFFIC_HIGH)
+                               _set_timer(&pdmpriv->SwAntennaSwitchTimer,90 ); //ms
+                       else if(pdmpriv->TrafficLoad == TRAFFIC_LOW)
+                               _set_timer(&pdmpriv->SwAntennaSwitchTimer,100 ); //ms
+               }
+               else
+               {
+                       _set_timer(&pdmpriv->SwAntennaSwitchTimer,500 ); //ms
+                       //DBG_8192C("dm_SW_AntennaSwitch(): Test another antenna for 500 ms\n");
+               }
+       }
+
+//     RT_TRACE(COMP_SWAS, DBG_LOUD, ("SWAS: -----The End-----\n "));
+
+}
+
+//
+// 20100514 Luke/Joseph:
+// Callback function for 500ms antenna test trying.
+//
+static void dm_SW_AntennaSwitchCallback(void *FunctionContext)
+{
+       _adapter *padapter = (_adapter *)FunctionContext;
+
+       if(padapter->net_closed == _TRUE)
+                       return;
+       // Only
+       dm_SW_AntennaSwitch(padapter, SWAW_STEP_DETERMINE);
+}
+
+
+//
+// 20100722
+// This function is used to gather the RSSI information for antenna testing.
+// It selects the RSSI of the peer STA that we want to know.
+//
+void SwAntDivRSSICheck8192C(_adapter *padapter ,u32 RxPWDBAll)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
+       struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+
+       SWAT_T  *pDM_SWAT_Table = &pdmpriv->DM_SWAT_Table;
+
+       if(IS_92C_SERIAL(pHalData->VersionID) ||pHalData->AntDivCfg==0)
+               return;
+
+       if(check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)
+       {
+               if(pDM_SWAT_Table->CurAntenna == Antenna_A)
+               {
+                       pHalData->RSSI_sum_A += RxPWDBAll;
+                       pHalData->RSSI_cnt_A++;
+               }
+               else
+               {
+                       pHalData->RSSI_sum_B+= RxPWDBAll;
+                       pHalData->RSSI_cnt_B++;
+
+               }
+               //DBG_8192C("%s Ant_(%s),RSSI_sum(%d),RSSI_cnt(%d)\n",__FUNCTION__,(2==pHalData->CurAntenna)?"A":"B",pHalData->RSSI_sum,pHalData->RSSI_cnt);
+       }
+
+}
+
+
+
+static VOID
+dm_SW_AntennaSwitchInit(
+       IN      PADAPTER        Adapter
+       )
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+       SWAT_T  *pDM_SWAT_Table = &pdmpriv->DM_SWAT_Table;
+
+       pHalData->RSSI_sum_A = 0;
+       pHalData->RSSI_sum_B = 0;
+       pHalData->RSSI_cnt_A = 0;
+       pHalData->RSSI_cnt_B = 0;
+
+       pDM_SWAT_Table->CurAntenna = pHalData->CurAntenna;
+       pDM_SWAT_Table->PreAntenna = pHalData->CurAntenna;
+       pDM_SWAT_Table->try_flag = 0xff;
+       pDM_SWAT_Table->PreRSSI = 0;
+       pDM_SWAT_Table->bTriggerAntennaSwitch = 0;
+       pDM_SWAT_Table->SelectAntennaMap=0xAA;
+
+       // Move the timer initialization to InitializeVariables function.
+       //PlatformInitializeTimer(Adapter, &pMgntInfo->SwAntennaSwitchTimer, (RT_TIMER_CALL_BACK)dm_SW_AntennaSwitchCallback, NULL, "SwAntennaSwitchTimer");
+}
+
+#endif
+
+//#define      RSSI_CCK        0
+//#define      RSSI_OFDM       1
+static void dm_RSSIMonitorInit(
+       IN      PADAPTER        Adapter
+)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+       pdmpriv->OFDM_Pkt_Cnt = 0;
+       pdmpriv->RSSI_Select = RSSI_DEFAULT;
+}
+
+static void dm_RSSIMonitorCheck(
+       IN      PADAPTER        Adapter
+)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+       struct mlme_priv *pmlmepriv = &Adapter->mlmepriv;
+
+       if(check_fwstate(pmlmepriv, _FW_LINKED) == _FALSE)
+               return;
+
+       if(check_fwstate(pmlmepriv, WIFI_AP_STATE |WIFI_ADHOC_STATE) == _TRUE )
+       {
+               if(Adapter->stapriv.asoc_sta_count < 2)
+                       return;
+       }
+
+       if(pdmpriv->OFDM_Pkt_Cnt == 0)
+               pdmpriv->RSSI_Select = RSSI_CCK;
+       else
+               pdmpriv->RSSI_Select = RSSI_OFDM;
+
+       pdmpriv->OFDM_Pkt_Cnt = 0;
+       //DBG_8192C("RSSI_Select=%s OFDM_Pkt_Cnt(%d)\n",
+               //(pdmpriv->RSSI_Select == RSSI_OFDM)?"RSSI_OFDM":"RSSI_CCK",
+               //pdmpriv->OFDM_Pkt_Cnt);
+}
+
+//============================================================
+// functions
+//============================================================
+void rtl8192c_init_dm_priv(IN PADAPTER Adapter)
+{
+       PHAL_DATA_TYPE  pHalData = GET_HAL_DATA(Adapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+
+       //_rtw_memset(pdmpriv, 0, sizeof(struct dm_priv));
+
+#ifdef CONFIG_SW_ANTENNA_DIVERSITY
+       _init_timer(&(pdmpriv->SwAntennaSwitchTimer),  Adapter->pnetdev , dm_SW_AntennaSwitchCallback, Adapter);
+#endif
+}
+
+void rtl8192c_deinit_dm_priv(IN PADAPTER Adapter)
+{
+       PHAL_DATA_TYPE  pHalData = GET_HAL_DATA(Adapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+
+#ifdef CONFIG_SW_ANTENNA_DIVERSITY
+       _cancel_timer_ex(&pdmpriv->SwAntennaSwitchTimer);
+#endif
+}
+#ifdef CONFIG_HW_ANTENNA_DIVERSITY
+void dm_InitHybridAntDiv(IN PADAPTER Adapter)
+{
+       HAL_DATA_TYPE           *pHalData = GET_HAL_DATA(Adapter);
+
+       if(IS_92C_SERIAL(pHalData->VersionID) ||pHalData->AntDivCfg==0)
+               return;
+
+       //Set OFDM HW RX Antenna Diversity
+       PHY_SetBBReg(Adapter,0xc50, BIT7, 1); //Enable Hardware antenna switch
+       PHY_SetBBReg(Adapter,0x870, BIT9|BIT8, 0); //Enable hardware control of "ANT_SEL" & "ANT_SELB"
+       PHY_SetBBReg(Adapter,0xCA4, BIT11, 0); //Switch to another antenna by checking pwdb threshold
+       PHY_SetBBReg(Adapter,0xCA4, 0x7FF, 0x080); //Pwdb threshold=8dB
+       PHY_SetBBReg(Adapter,0xC54, BIT23, 1); //Decide final antenna by comparing 2 antennas' pwdb
+       PHY_SetBBReg(Adapter,0x874, BIT23, 0); //No update ANTSEL during GNT_BT=1
+       PHY_SetBBReg(Adapter,0x80C, BIT21, 1); //TX atenna selection from tx_info
+       //Set CCK HW RX Antenna Diversity
+       PHY_SetBBReg(Adapter,0xA00, BIT15, 1);//Enable antenna diversity
+       PHY_SetBBReg(Adapter,0xA0C, BIT4, 0); //Antenna diversity decision period = 32 sample
+       PHY_SetBBReg(Adapter,0xA0C, 0xf, 0xf); //Threshold for antenna diversity. Check another antenna power if input power < ANT_lim*4
+       PHY_SetBBReg(Adapter,0xA10, BIT13, 1); //polarity ana_A=1 and ana_B=0
+       PHY_SetBBReg(Adapter,0xA14, 0x1f, 0x8); //default antenna power = inpwr*(0.5 + r_ant_step/16)
+
+       pHalData->CCK_Ant1_Cnt = 0;
+       pHalData->CCK_Ant2_Cnt = 0;
+       pHalData->OFDM_Ant1_Cnt = 0;
+       pHalData->OFDM_Ant2_Cnt = 0;
+}
+
+
+#define        RxDefaultAnt1           0x65a9
+#define        RxDefaultAnt2           0x569a
+
+void dm_SelectRXDefault(IN     PADAPTER        Adapter)
+{
+       HAL_DATA_TYPE           *pHalData = GET_HAL_DATA(Adapter);
+
+       if(IS_92C_SERIAL(pHalData->VersionID) ||pHalData->AntDivCfg==0)
+               return;
+
+       //DbgPrint(" Ant1_Cnt=%d, Ant2_Cnt=%d\n", pHalData->Ant1_Cnt, pHalData->Ant2_Cnt);
+       //DBG_8192C(" CCK_Ant1_Cnt = %d,  CCK_Ant2_Cnt = %d\n", pHalData->CCK_Ant1_Cnt, pHalData->CCK_Ant2_Cnt);
+       //DBG_8192C(" OFDM_Ant1_Cnt = %d,  OFDM_Ant2_Cnt = %d\n", pHalData->OFDM_Ant1_Cnt, pHalData->OFDM_Ant2_Cnt);
+       if((pHalData->OFDM_Ant1_Cnt == 0) && (pHalData->OFDM_Ant2_Cnt == 0))
+       {
+               if((pHalData->CCK_Ant1_Cnt + pHalData->CCK_Ant2_Cnt) >=10 )
+               {
+                       if(pHalData->CCK_Ant1_Cnt > (5*pHalData->CCK_Ant2_Cnt))
+                       {
+                               DBG_8192C(" RX Default = Ant1\n");
+                               PHY_SetBBReg(Adapter, 0x858, 0xFFFF, RxDefaultAnt1);
+                       }
+                       else if(pHalData->CCK_Ant2_Cnt > (5*pHalData->CCK_Ant1_Cnt))
+                       {
+                               DBG_8192C(" RX Default = Ant2\n");
+                               PHY_SetBBReg(Adapter, 0x858, 0xFFFF, RxDefaultAnt2);
+                       }
+                       else if(pHalData->CCK_Ant1_Cnt > pHalData->CCK_Ant2_Cnt)
+                       {
+                               DBG_8192C(" RX Default = Ant2\n");
+                               PHY_SetBBReg(Adapter, 0x858, 0xFFFF, RxDefaultAnt2);
+                       }
+                       else
+                       {
+                               DBG_8192C(" RX Default = Ant1\n");
+                               PHY_SetBBReg(Adapter, 0x858, 0xFFFF, RxDefaultAnt1);
+                       }
+                       pHalData->CCK_Ant1_Cnt = 0;
+                       pHalData->CCK_Ant2_Cnt = 0;
+                       pHalData->OFDM_Ant1_Cnt = 0;
+                       pHalData->OFDM_Ant2_Cnt = 0;
+               }
+       }
+       else
+       {
+               if(pHalData->OFDM_Ant1_Cnt > pHalData->OFDM_Ant2_Cnt)
+               {
+                       DBG_8192C(" RX Default = Ant1\n");
+                       PHY_SetBBReg(Adapter, 0x858, 0xFFFF, RxDefaultAnt1);
+               }
+               else
+               {
+                       DBG_8192C(" RX Default = Ant2\n");
+                       PHY_SetBBReg(Adapter, 0x858, 0xFFFF, RxDefaultAnt2);
+               }
+               pHalData->CCK_Ant1_Cnt = 0;
+               pHalData->CCK_Ant2_Cnt = 0;
+               pHalData->OFDM_Ant1_Cnt = 0;
+               pHalData->OFDM_Ant2_Cnt = 0;
+       }
+
+
+}
+
+#endif
+
+void
+rtl8192c_InitHalDm(
+       IN      PADAPTER        Adapter
+       )
+{
+       PHAL_DATA_TYPE  pHalData = GET_HAL_DATA(Adapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+       u8      i;
+
+#ifdef CONFIG_USB_HCI
+       dm_InitGPIOSetting(Adapter);
+#endif
+
+       pdmpriv->DM_Type = DM_Type_ByDriver;
+       pdmpriv->DMFlag = DYNAMIC_FUNC_DISABLE;
+       pdmpriv->UndecoratedSmoothedPWDB = (-1);
+       pdmpriv->UndecoratedSmoothedCCK = (-1);
+
+
+       //.1 DIG INIT
+       pdmpriv->bDMInitialGainEnable = _TRUE;
+       pdmpriv->DMFlag |= DYNAMIC_FUNC_DIG;
+       dm_DIGInit(Adapter);
+
+       //.2 DynamicTxPower INIT
+       pdmpriv->DMFlag |= DYNAMIC_FUNC_HP;
+       dm_InitDynamicTxPower(Adapter);
+
+       //.3
+       DM_InitEdcaTurbo(Adapter);
+
+       //.4 RateAdaptive INIT
+       dm_InitRateAdaptiveMask(Adapter);
+
+       //.5 Tx Power Tracking Init.
+       pdmpriv->DMFlag |= DYNAMIC_FUNC_SS;
+       DM_InitializeTXPowerTracking(Adapter);
+
+#ifdef CONFIG_BT_COEXIST
+       pdmpriv->DMFlag |= DYNAMIC_FUNC_BT;
+       dm_InitBtCoexistDM(Adapter);
+#endif
+
+       dm_InitDynamicBBPowerSaving(Adapter);
+
+#ifdef CONFIG_SW_ANTENNA_DIVERSITY
+       pdmpriv->DMFlag |= DYNAMIC_FUNC_ANT_DIV;
+       dm_SW_AntennaSwitchInit(Adapter);
+#endif
+
+#ifdef CONFIG_HW_ANTENNA_DIVERSITY
+       pdmpriv->DMFlag |= DYNAMIC_FUNC_ANT_DIV;
+       dm_InitHybridAntDiv(Adapter);
+#endif
+
+       dm_RSSIMonitorInit(Adapter);
+
+       pdmpriv->DMFlag_tmp = pdmpriv->DMFlag;
+
+       // Save REG_INIDATA_RATE_SEL value for TXDESC.
+       for(i = 0 ; i<32 ; i++)
+       {
+               pdmpriv->INIDATA_RATE[i] = rtw_read8(Adapter, REG_INIDATA_RATE_SEL+i) & 0x3f;
+       }
+
+#ifdef CONFIG_DM_ADAPTIVITY
+       pdmpriv->DMFlag |= DYNAMIC_FUNC_ADAPTIVITY;
+       dm_adaptivity_init(Adapter);
+#endif
+
+}
+
+#ifdef CONFIG_CONCURRENT_MODE
+static void FindMinimumRSSI(PADAPTER Adapter)
+{
+       PHAL_DATA_TYPE  pbuddy_HalData;
+       struct dm_priv *pbuddy_dmpriv;
+       PHAL_DATA_TYPE  pHalData = GET_HAL_DATA(Adapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+       PADAPTER pbuddy_adapter = Adapter->pbuddy_adapter;
+       struct mlme_priv *pmlmepriv = &Adapter->mlmepriv;
+
+       if(!rtw_buddy_adapter_up(Adapter))
+               return;
+
+       pbuddy_HalData = GET_HAL_DATA(pbuddy_adapter);
+       pbuddy_dmpriv = &pbuddy_HalData->dmpriv;
+
+       //get min. [PWDB] when both interfaces are connected
+       if((check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE
+               && Adapter->stapriv.asoc_sta_count > 2
+               && check_buddy_fwstate(Adapter, _FW_LINKED)) ||
+               (check_buddy_fwstate(Adapter, WIFI_AP_STATE) == _TRUE
+               && pbuddy_adapter->stapriv.asoc_sta_count > 2
+               && check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE) ||
+               (check_fwstate(pmlmepriv, WIFI_STATION_STATE)
+               && check_fwstate(pmlmepriv, _FW_LINKED)
+               && check_buddy_fwstate(Adapter,WIFI_STATION_STATE)
+               && check_buddy_fwstate(Adapter,_FW_LINKED)))
+       {
+               if(pdmpriv->UndecoratedSmoothedPWDB > pbuddy_dmpriv->UndecoratedSmoothedPWDB)
+                       pdmpriv->UndecoratedSmoothedPWDB = pbuddy_dmpriv->UndecoratedSmoothedPWDB;
+       }//primary interface is not connected
+       else if((check_buddy_fwstate(Adapter, WIFI_AP_STATE) == _TRUE
+               && pbuddy_adapter->stapriv.asoc_sta_count > 2) ||
+               (check_buddy_fwstate(Adapter,WIFI_STATION_STATE)
+               && check_buddy_fwstate(Adapter,_FW_LINKED)))
+       {
+               pdmpriv->UndecoratedSmoothedPWDB = pbuddy_dmpriv->UndecoratedSmoothedPWDB;
+       }
+       //secondary is not connected
+       else if((check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE
+               && Adapter->stapriv.asoc_sta_count > 2) ||
+               (check_fwstate(pmlmepriv, WIFI_STATION_STATE)
+               && check_fwstate(pmlmepriv, _FW_LINKED)))
+       {
+               pbuddy_dmpriv->UndecoratedSmoothedPWDB = 0;
+       }
+       //both interfaces are not connected
+       else
+       {
+               pdmpriv->UndecoratedSmoothedPWDB = 0;
+               pbuddy_dmpriv->UndecoratedSmoothedPWDB = 0;
+       }
+
+       //primary interface is ap mode
+       if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE && Adapter->stapriv.asoc_sta_count > 2)
+       {
+               pbuddy_dmpriv->EntryMinUndecoratedSmoothedPWDB = 0;
+       }//secondary interface is ap mode
+       else if(check_buddy_fwstate(Adapter, WIFI_AP_STATE) == _TRUE && pbuddy_adapter->stapriv.asoc_sta_count > 2)
+       {
+               pdmpriv->EntryMinUndecoratedSmoothedPWDB = pbuddy_dmpriv->EntryMinUndecoratedSmoothedPWDB;
+       }
+       else //both interfaces are not ap mode
+       {
+               pdmpriv->EntryMinUndecoratedSmoothedPWDB = pbuddy_dmpriv->EntryMinUndecoratedSmoothedPWDB = 0;
+       }
+
+}
+
+#endif //CONFIG_CONCURRENT_MODE
+
+VOID
+rtl8192c_HalDmWatchDog(
+       IN      PADAPTER        Adapter
+       )
+{
+       BOOLEAN         bFwCurrentInPSMode = _FALSE;
+       BOOLEAN         bFwPSAwake = _TRUE;
+       u8 hw_init_completed = _FALSE;
+       PHAL_DATA_TYPE  pHalData = GET_HAL_DATA(Adapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+       struct mlme_priv        *pmlmepriv = &Adapter->mlmepriv;
+#ifdef CONFIG_CONCURRENT_MODE
+       PADAPTER pbuddy_adapter = Adapter->pbuddy_adapter;
+#endif //CONFIG_CONCURRENT_MODE
+
+       #if defined(CONFIG_CONCURRENT_MODE)
+       if (Adapter->isprimary == _FALSE && pbuddy_adapter) {
+               hw_init_completed = pbuddy_adapter->hw_init_completed;
+       } else
+       #endif
+       {
+               hw_init_completed = Adapter->hw_init_completed;
+       }
+
+       if (hw_init_completed == _FALSE)
+               goto skip_dm;
+
+#ifdef CONFIG_LPS
+       #if defined(CONFIG_CONCURRENT_MODE)
+       if (Adapter->iface_type != IFACE_PORT0 && pbuddy_adapter) {
+               bFwCurrentInPSMode = pbuddy_adapter->pwrctrlpriv.bFwCurrentInPSMode;
+               rtw_hal_get_hwreg(pbuddy_adapter, HW_VAR_FWLPS_RF_ON, (u8 *)(&bFwPSAwake));
+       } else
+       #endif
+       {
+               bFwCurrentInPSMode = Adapter->pwrctrlpriv.bFwCurrentInPSMode;
+               rtw_hal_get_hwreg(Adapter, HW_VAR_FWLPS_RF_ON, (u8 *)(&bFwPSAwake));
+       }
+#endif
+
+#ifdef CONFIG_P2P_PS
+       // Fw is under p2p powersaving mode, driver should stop dynamic mechanism.
+       // modifed by thomas. 2011.06.11.
+       if(Adapter->wdinfo.p2p_ps_mode)
+               bFwPSAwake = _FALSE;
+#endif // CONFIG_P2P_PS
+
+       // Stop dynamic mechanism when:
+       // 1. RF is OFF. (No need to do DM.)
+       // 2. Fw is under power saving mode for FwLPS. (Prevent from SW/FW I/O racing.)
+       // 3. IPS workitem is scheduled. (Prevent from IPS sequence to be swapped with DM.
+       //     Sometimes DM execution time is longer than 100ms such that the assertion
+       //     in MgntActSet_RF_State() called by InactivePsWorkItem will be triggered by
+       //     wating to long for RFChangeInProgress.)
+       // 4. RFChangeInProgress is TRUE. (Prevent from broken by IPS/HW/SW Rf off.)
+       // Noted by tynli. 2010.06.01.
+       //if(rfState == eRfOn)
+       if( (hw_init_completed == _TRUE)
+               && ((!bFwCurrentInPSMode) && bFwPSAwake))
+       {
+               //
+               // Calculate Tx/Rx statistics.
+               //
+               dm_CheckStatistics(Adapter);
+
+               //
+               // For PWDB monitor and record some value for later use.
+               //
+               PWDB_Monitor(Adapter);
+
+               dm_RSSIMonitorCheck(Adapter);
+
+#ifdef CONFIG_CONCURRENT_MODE
+               if(Adapter->adapter_type > PRIMARY_ADAPTER)
+                       goto _record_initrate;
+
+               FindMinimumRSSI(Adapter);
+#endif
+
+               //
+               // Dynamic Initial Gain mechanism.
+               //
+               dm_FalseAlarmCounterStatistics(Adapter);
+               dm_DIG(Adapter);
+               dm_adaptivity(Adapter);
+
+               //
+               //Dynamic BB Power Saving Mechanism
+               //
+               dm_DynamicBBPowerSaving(Adapter);
+
+               //
+               // Dynamic Tx Power mechanism.
+               //
+               dm_DynamicTxPower(Adapter);
+
+               //
+               // Tx Power Tracking.
+               //
+#if MP_DRIVER == 0
+#ifdef CONFIG_BUSY_TRAFFIC_SKIP_PWR_TRACK
+               if(pmlmepriv->LinkDetectInfo.bBusyTraffic == _FALSE)
+#endif //CONFIG_BUSY_TRAFFIC_SKIP_PWR_TRACK
+#endif
+                       rtl8192c_dm_CheckTXPowerTracking(Adapter);
+
+               //
+               // Rate Adaptive by Rx Signal Strength mechanism.
+               //
+               dm_RefreshRateAdaptiveMask(Adapter);
+
+#ifdef CONFIG_BT_COEXIST
+               //BT-Coexist
+               dm_BTCoexist(Adapter);
+#endif
+
+               // EDCA turbo
+               //update the EDCA paramter according to the Tx/RX mode
+               //update_EDCA_param(Adapter);
+               dm_CheckEdcaTurbo(Adapter);
+
+               //
+               // Dynamically switch RTS/CTS protection.
+               //
+               //dm_CheckProtection(Adapter);
+
+#ifdef CONFIG_SW_ANTENNA_DIVERSITY
+               //
+               // Software Antenna diversity
+               //
+               dm_SW_AntennaSwitch(Adapter, SWAW_STEP_PEAK);
+#endif
+
+#ifdef CONFIG_HW_ANTENNA_DIVERSITY
+               //Hybrid Antenna Diversity
+               dm_SelectRXDefault(Adapter);
+#endif
+
+#ifdef CONFIG_PCI_HCI
+               // 20100630 Joseph: Disable Interrupt Migration mechanism temporarily because it degrades Rx throughput.
+               // Tx Migration settings.
+               //dm_InterruptMigration(Adapter);
+
+               //if(Adapter->HalFunc.TxCheckStuckHandler(Adapter))
+               //      PlatformScheduleWorkItem(&(GET_HAL_DATA(Adapter)->HalResetWorkItem));
+#endif
+
+
+_record_initrate:
+
+               // Read REG_INIDATA_RATE_SEL value for TXDESC.
+               if(check_fwstate(&Adapter->mlmepriv, WIFI_STATION_STATE) == _TRUE)
+               {
+                       pdmpriv->INIDATA_RATE[0] = rtw_read8(Adapter, REG_INIDATA_RATE_SEL) & 0x3f;
+
+#ifdef CONFIG_TDLS
+                       if(Adapter->tdlsinfo.setup_state == TDLS_LINKED_STATE)
+                       {
+                               u8 i=1;
+                               for(; i < (Adapter->tdlsinfo.macid_index) ; i++)
+                               {
+                                       pdmpriv->INIDATA_RATE[i] = rtw_read8(Adapter, (REG_INIDATA_RATE_SEL+i)) & 0x3f;
+                               }
+                       }
+#endif //CONFIG_TDLS
+
+               }
+               else
+               {
+                       u8      i;
+                       for(i=1 ; i < (Adapter->stapriv.asoc_sta_count + 1); i++)
+                       {
+                               pdmpriv->INIDATA_RATE[i] = rtw_read8(Adapter, (REG_INIDATA_RATE_SEL+i)) & 0x3f;
+                       }
+               }
+       }
+
+skip_dm:
+
+       // Check GPIO to determine current RF on/off and Pbc status.
+       // Check Hardware Radio ON/OFF or not
+       //if(Adapter->MgntInfo.PowerSaveControl.bGpioRfSw)
+       //{
+               //RTPRINT(FPWR, PWRHW, ("dm_CheckRfCtrlGPIO \n"));
+       //      dm_CheckRfCtrlGPIO(Adapter);
+       //}
+
+#ifdef CONFIG_PCI_HCI
+       if(pHalData->bGpioHwWpsPbc)
+#endif
+       {
+               dm_CheckPbcGPIO(Adapter);                               // Add by hpfan 2008-03-11
+       }
+
+}
diff --git a/drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/rtl8192c_hal_init.c b/drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/rtl8192c_hal_init.c
new file mode 100644 (file)
index 0000000..bf5518f
--- /dev/null
@@ -0,0 +1,3627 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+
+#define _RTL8192C_HAL_INIT_C_
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <rtw_byteorder.h>
+#include <rtw_efuse.h>
+
+#include <rtl8192c_hal.h>
+
+#ifdef CONFIG_USB_HCI
+#include <usb_hal.h>
+#endif
+
+#ifdef CONFIG_PCI_HCI
+#include <pci_hal.h>
+#endif
+
+static BOOLEAN
+hal_EfusePgPacketWrite2ByteHeader(
+       IN      PADAPTER                pAdapter,
+       IN      u8                              efuseType,
+       IN      u16                             *pAddr,
+       IN      PPGPKT_STRUCT   pTargetPkt,
+       IN      BOOLEAN                 bPseudoTest);
+static BOOLEAN
+hal_EfusePgPacketWrite1ByteHeader(
+       IN      PADAPTER                pAdapter,
+       IN      u8                              efuseType,
+       IN      u16                             *pAddr,
+       IN      PPGPKT_STRUCT   pTargetPkt,
+       IN      BOOLEAN                 bPseudoTest);
+static BOOLEAN
+hal_EfusePgPacketWriteData(
+       IN      PADAPTER                pAdapter,
+       IN      u8                              efuseType,
+       IN      u16                             *pAddr,
+       IN      PPGPKT_STRUCT   pTargetPkt,
+       IN      BOOLEAN                 bPseudoTest);
+static BOOLEAN
+hal_EfusePgPacketWrite_BT(
+       IN      PADAPTER                pAdapter,
+       IN      u8                              offset,
+       IN      u8                              word_en,
+       IN      u8                              *pData,
+       IN      BOOLEAN                 bPseudoTest);
+
+static VOID
+_FWDownloadEnable(
+       IN      PADAPTER                Adapter,
+       IN      BOOLEAN                 enable
+       )
+{
+       u8      tmp;
+
+       if(enable)
+       {
+               #ifdef DBG_SHOW_MCUFWDL_BEFORE_51_ENABLE
+               {
+                       u8 val;
+                       if( (val=rtw_read8(Adapter, REG_MCUFWDL)))
+                               DBG_871X("DBG_SHOW_MCUFWDL_BEFORE_51_ENABLE %s:%d REG_MCUFWDL:0x%02x\n", __FUNCTION__, __LINE__, val);
+               }
+               #endif
+
+               // 8051 enable
+               tmp = rtw_read8(Adapter, REG_SYS_FUNC_EN+1);
+               rtw_write8(Adapter, REG_SYS_FUNC_EN+1, tmp|0x04);
+
+               // MCU firmware download enable.
+               tmp = rtw_read8(Adapter, REG_MCUFWDL);
+               rtw_write8(Adapter, REG_MCUFWDL, tmp|0x01);
+
+               // 8051 reset
+               tmp = rtw_read8(Adapter, REG_MCUFWDL+2);
+               rtw_write8(Adapter, REG_MCUFWDL+2, tmp&0xf7);
+       }
+       else
+       {
+               // MCU firmware download enable.
+               tmp = rtw_read8(Adapter, REG_MCUFWDL);
+               rtw_write8(Adapter, REG_MCUFWDL, tmp&0xfe);
+
+               // Reserved for fw extension.
+               rtw_write8(Adapter, REG_MCUFWDL+1, 0x00);
+       }
+}
+
+
+#define MAX_REG_BOLCK_SIZE     196
+#define MIN_REG_BOLCK_SIZE     8
+
+static int
+_BlockWrite(
+       IN              PADAPTER                Adapter,
+       IN              PVOID           buffer,
+       IN              u32                     size
+       )
+{
+       int ret = _SUCCESS;
+
+#ifdef CONFIG_PCI_HCI
+       u32                     blockSize       = sizeof(u32);  // Use 4-byte write to download FW
+       u8                      *bufferPtr      = (u8 *)buffer;
+       u32                     *pu4BytePtr     = (u32 *)buffer;
+       u32                     i, offset, blockCount, remainSize;
+       u8                      remainFW[4] = {0, 0, 0, 0};
+       u8                      *p = NULL;
+
+       blockCount = size / blockSize;
+       remainSize = size % blockSize;
+
+       for(i = 0 ; i < blockCount ; i++){
+               offset = i * blockSize;
+               rtw_write32(Adapter, (FW_8192C_START_ADDRESS + offset), cpu_to_le32(*(pu4BytePtr + i)));
+       }
+
+       p = (u8*)((u32*)(bufferPtr + blockCount * blockSize));
+       if(remainSize){
+               switch (remainSize) {
+               case 0:
+                       break;
+               case 3:
+                       remainFW[2]=*(p+2);
+               case 2:
+                       remainFW[1]=*(p+1);
+               case 1:
+                       remainFW[0]=*(p);
+                       ret = rtw_write32(Adapter, (FW_8192C_START_ADDRESS + blockCount * blockSize),
+                                le32_to_cpu(*(u32*)remainFW));
+               }
+               return ret;
+       }
+#else
+
+#ifdef SUPPORTED_BLOCK_IO
+       u32                     blockSize       = MAX_REG_BOLCK_SIZE;   // Use 196-byte write to download FW
+       u32                     blockSize2      = MIN_REG_BOLCK_SIZE;
+#else
+       u32                     blockSize       = sizeof(u32);  // Use 4-byte write to download FW
+       u32*            pu4BytePtr      = (u32*)buffer;
+       u32                     blockSize2      = sizeof(u8);
+#endif
+       u8*                     bufferPtr       = (u8*)buffer;
+       u32                     i, offset = 0, offset2, blockCount, remainSize, remainSize2;
+
+       blockCount = size / blockSize;
+       remainSize = size % blockSize;
+
+       for(i = 0 ; i < blockCount ; i++){
+               offset = i * blockSize;
+               #ifdef SUPPORTED_BLOCK_IO
+               ret = rtw_writeN(Adapter, (FW_8192C_START_ADDRESS + offset), blockSize, (bufferPtr + offset));
+               #else
+               ret = rtw_write32(Adapter, (FW_8192C_START_ADDRESS + offset), le32_to_cpu(*(pu4BytePtr + i)));
+               #endif
+
+               if(ret == _FAIL)
+                       goto exit;
+       }
+
+       if(remainSize){
+               #if defined(SUPPORTED_BLOCK_IO) && defined(DBG_BLOCK_WRITE_ISSUE) //Can this be enabled?
+               offset = blockCount * blockSize;
+               ret = rtw_writeN(Adapter, (FW_8192C_START_ADDRESS + offset), remainSize, (bufferPtr + offset));
+               goto exit;
+               #endif
+               offset2 = blockCount * blockSize;
+               blockCount = remainSize / blockSize2;
+               remainSize2 = remainSize % blockSize2;
+
+               for(i = 0 ; i < blockCount ; i++){
+                       offset = offset2 + i * blockSize2;
+                       #ifdef SUPPORTED_BLOCK_IO
+                       ret = rtw_writeN(Adapter, (FW_8192C_START_ADDRESS + offset), blockSize2, (bufferPtr + offset));
+                       #else
+                       ret = rtw_write8(Adapter, (FW_8192C_START_ADDRESS + offset ), *(bufferPtr + offset));
+                       #endif
+
+                       if(ret == _FAIL)
+                               goto exit;
+               }
+
+               if(remainSize2)
+               {
+                       offset += blockSize2;
+                       bufferPtr += offset;
+
+                       for(i = 0 ; i < remainSize2 ; i++){
+                               ret = rtw_write8(Adapter, (FW_8192C_START_ADDRESS + offset + i), *(bufferPtr + i));
+
+                               if(ret == _FAIL)
+                                       goto exit;
+                       }
+               }
+       }
+#endif
+
+exit:
+       return ret;
+}
+
+static int
+_PageWrite(
+       IN              PADAPTER        Adapter,
+       IN              u32                     page,
+       IN              PVOID           buffer,
+       IN              u32                     size
+       )
+{
+       u8 value8;
+       u8 u8Page = (u8) (page & 0x07) ;
+
+       value8 = (rtw_read8(Adapter, REG_MCUFWDL+2)& 0xF8 ) | u8Page ;
+       rtw_write8(Adapter, REG_MCUFWDL+2,value8);
+       return _BlockWrite(Adapter,buffer,size);
+}
+
+static VOID
+_FillDummy(
+       u8*             pFwBuf,
+       u32*    pFwLen
+       )
+{
+       u32     FwLen = *pFwLen;
+       u8      remain = (u8)(FwLen%4);
+       remain = (remain==0)?0:(4-remain);
+
+       while(remain>0)
+       {
+               pFwBuf[FwLen] = 0;
+               FwLen++;
+               remain--;
+       }
+
+       *pFwLen = FwLen;
+}
+
+static int
+_WriteFW(
+       IN              PADAPTER                Adapter,
+       IN              PVOID                   buffer,
+       IN              u32                     size
+       )
+{
+       // Since we need dynamic decide method of dwonload fw, so we call this function to get chip version.
+       // We can remove _ReadChipVersion from ReadAdapterInfo8192C later.
+
+       int ret = _SUCCESS;
+       u32     pageNums,remainSize ;
+       u32     page,offset;
+       u8*     bufferPtr = (u8*)buffer;
+
+#ifdef CONFIG_PCI_HCI
+       // 20100120 Joseph: Add for 88CE normal chip.
+       // Fill in zero to make firmware image to dword alignment.
+//             _FillDummy(bufferPtr, &size);
+#endif
+
+       pageNums = size / MAX_PAGE_SIZE ;
+       //RT_ASSERT((pageNums <= 4), ("Page numbers should not greater then 4 \n"));
+       remainSize = size % MAX_PAGE_SIZE;
+
+       for(page = 0; page < pageNums;  page++){
+               offset = page *MAX_PAGE_SIZE;
+               ret = _PageWrite(Adapter,page, (bufferPtr+offset),MAX_PAGE_SIZE);
+
+               if(ret == _FAIL)
+                       goto exit;
+       }
+       if(remainSize){
+               offset = pageNums *MAX_PAGE_SIZE;
+               page = pageNums;
+               ret = _PageWrite(Adapter,page, (bufferPtr+offset),remainSize);
+
+               if(ret == _FAIL)
+                       goto exit;
+       }
+       //RT_TRACE(COMP_INIT, DBG_LOUD, ("_WriteFW Done- for Normal chip.\n"));
+
+exit:
+       return ret;
+}
+
+static int _FWFreeToGo(
+       IN              PADAPTER                Adapter
+       )
+{
+       u32                     counter = 0;
+       u32                     value32;
+       u32     restarted = _FALSE;
+
+       // polling CheckSum report
+       do{
+               value32 = rtw_read32(Adapter, REG_MCUFWDL);
+       }while((counter ++ < POLLING_READY_TIMEOUT_COUNT) && (!(value32 & FWDL_ChkSum_rpt)));
+
+       if(counter >= POLLING_READY_TIMEOUT_COUNT){
+               DBG_8192C("chksum report faill ! REG_MCUFWDL:0x%08x\n",value32);
+               return _FAIL;
+       } else {
+               //DBG_8192C("chksum report success ! REG_MCUFWDL:0x%08x, counter:%u\n",value32, counter);
+       }
+       //RT_TRACE(COMP_INIT, DBG_LOUD, ("Checksum report OK ! REG_MCUFWDL:0x%08x .\n",value32));
+
+
+       value32 = rtw_read32(Adapter, REG_MCUFWDL);
+       value32 |= MCUFWDL_RDY;
+       value32 &= ~WINTINI_RDY;
+       rtw_write32(Adapter, REG_MCUFWDL, value32);
+
+
+POLLING_FW_READY:
+       // polling for FW ready
+       counter = 0;
+       do
+       {
+               if(rtw_read32(Adapter, REG_MCUFWDL) & WINTINI_RDY){
+                       //RT_TRACE(COMP_INIT, DBG_SERIOUS, ("Polling FW ready success!! REG_MCUFWDL:0x%08x .\n",PlatformIORead4Byte(Adapter, REG_MCUFWDL)) );
+                       return _SUCCESS;
+               }
+               rtw_udelay_os(5);
+       }while(counter++ < POLLING_READY_TIMEOUT_COUNT);
+
+       DBG_8192C("Polling FW ready fail!! REG_MCUFWDL:0x%08x .\n", rtw_read32(Adapter, REG_MCUFWDL));
+
+       if(restarted == _FALSE) {
+               u8 tmp = rtw_read8(Adapter, REG_SYS_FUNC_EN+1);
+               DBG_8192C("Reset 51 write8 REG_SYS_FUNC_EN:0x%04x\n", tmp & ~BIT2);
+               rtw_write8(Adapter, REG_SYS_FUNC_EN+1, tmp & ~BIT2);
+               DBG_8192C("Reset 51 write8 REG_SYS_FUNC_EN:0x%04x\n", tmp|BIT2);
+               rtw_write8(Adapter, REG_SYS_FUNC_EN+1, tmp|BIT2);
+               restarted = _TRUE;
+               goto POLLING_FW_READY;
+       }
+
+
+       return _FAIL;
+
+}
+
+
+VOID
+rtl8192c_FirmwareSelfReset(
+       IN              PADAPTER                Adapter
+)
+{
+       u8      u1bTmp;
+       u8      Delay = 100;
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+
+       if((pHalData->FirmwareVersion > 0x21) ||
+               (pHalData->FirmwareVersion == 0x21 &&
+               pHalData->FirmwareSubVersion >= 0x01)) // after 88C Fw v33.1
+       {
+               //0x1cf=0x20. Inform 8051 to reset. 2009.12.25. tynli_test
+               rtw_write8(Adapter, REG_HMETFR+3, 0x20);
+
+               u1bTmp = rtw_read8(Adapter, REG_SYS_FUNC_EN+1);
+               while(u1bTmp&BIT2)
+               {
+                       Delay--;
+                       if(Delay == 0)
+                               break;
+                       rtw_udelay_os(50);
+                       u1bTmp = rtw_read8(Adapter, REG_SYS_FUNC_EN+1);
+               }
+
+               if((u1bTmp&BIT2) && (Delay == 0))
+               {
+                       DBG_8192C("FirmwareDownload92C():fw reset by itself Fail!!!!!! 0x03 = %x\n", u1bTmp);
+                       //RT_ASSERT(FALSE, ("PowerOffAdapter8192CE(): 0x03 = %x\n", u1bTmp));
+                       #ifdef DBG_SHOW_MCUFWDL_BEFORE_51_ENABLE
+                       {
+                               u8 val;
+                               if( (val=rtw_read8(Adapter, REG_MCUFWDL)))
+                                       DBG_871X("DBG_SHOW_MCUFWDL_BEFORE_51_ENABLE %s:%d REG_MCUFWDL:0x%02x\n", __FUNCTION__, __LINE__, val);
+                       }
+                       #endif
+                       rtw_write8(Adapter,REG_SYS_FUNC_EN+1,(rtw_read8(Adapter, REG_SYS_FUNC_EN+1)&~BIT2));
+               }
+
+               DBG_8192C("%s =====> 8051 reset success (%d) .\n", __FUNCTION__ ,Delay);
+       }
+}
+
+#ifdef CONFIG_FILE_FWIMG
+extern char *rtw_fw_file_path;
+u8     FwBuffer8192C[FW_8192C_SIZE];
+#endif //CONFIG_FILE_FWIMG
+//
+//     Description:
+//             Download 8192C firmware code.
+//
+//
+int FirmwareDownload92C(
+       IN      PADAPTER                        Adapter,
+       IN      BOOLEAN                 bUsedWoWLANFw
+)
+{
+       int     rtStatus = _SUCCESS;
+       u8 writeFW_retry = 0;
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       s8                      R92CFwImageFileName_TSMC[] ={RTL8192C_FW_TSMC_IMG};
+       s8                      R92CFwImageFileName_UMC[] ={RTL8192C_FW_UMC_IMG};
+       s8                      R92CFwImageFileName_UMC_B[] ={RTL8192C_FW_UMC_B_IMG};
+#ifdef CONFIG_WOWLAN
+       s8                      R92CFwImageFileName_TSMC_WW[] ={RTL8192C_FW_TSMC_WW_IMG};
+       s8                      R92CFwImageFileName_UMC_WW[] ={RTL8192C_FW_UMC_WW_IMG};
+       s8                      R92CFwImageFileName_UMC_B_WW[] ={RTL8192C_FW_UMC_B_WW_IMG};
+#endif //CONFIG_WOWLAN
+
+       //s8                    R8723FwImageFileName_UMC[] ={RTL8723_FW_UMC_IMG};
+       u8*                     FwImage = NULL;
+       u32                     FwImageLen = 0;
+       char*           pFwImageFileName;
+#ifdef CONFIG_WOWLAN
+       u8*                     FwImageWoWLAN;
+       u32                     FwImageWoWLANLen;
+       char*           pFwImageFileName_WoWLAN;
+#endif //CONFIG_WOWLAN
+       u8*                     pucMappedFile = NULL;
+       //vivi, merge 92c and 92s into one driver, 20090817
+       //vivi modify this temply, consider it later!!!!!!!!
+       //PRT_FIRMWARE  pFirmware = GET_FIRMWARE_819X(Adapter);
+       //PRT_FIRMWARE_92C      pFirmware = GET_FIRMWARE_8192C(Adapter);
+       PRT_FIRMWARE_92C        pFirmware = NULL;
+       PRT_8192C_FIRMWARE_HDR          pFwHdr = NULL;
+       u8              *pFirmwareBuf;
+       u32             FirmwareLen;
+
+       pFirmware = (PRT_FIRMWARE_92C)rtw_zvmalloc(sizeof(RT_FIRMWARE_92C));
+
+       if(!pFirmware)
+       {
+               rtStatus = _FAIL;
+               goto Exit;
+       }
+
+       if(IS_VENDOR_UMC_A_CUT(pHalData->VersionID) && !IS_92C_SERIAL(pHalData->VersionID))
+       {
+               pFwImageFileName = R92CFwImageFileName_UMC;
+               FwImage = Rtl819XFwUMCACutImageArray;
+               FwImageLen = UMCACutImgArrayLength;
+#ifdef CONFIG_WOWLAN
+               pFwImageFileName_WoWLAN = R92CFwImageFileName_UMC_WW;
+               FwImageWoWLAN= Rtl8192C_FwUMCWWImageArray;
+               FwImageWoWLANLen =UMCACutWWImgArrayLength ;
+#endif //CONFIG_WOWLAN
+               DBG_8192C(" ===> FirmwareDownload91C() fw:Rtl819XFwImageArray_UMC\n");
+       }
+       else if(IS_81xxC_VENDOR_UMC_B_CUT(pHalData->VersionID))
+       {
+               // The ROM code of UMC B-cut Fw is the same as TSMC. by tynli. 2011.01.14.
+               pFwImageFileName = R92CFwImageFileName_UMC_B;
+               FwImage = Rtl819XFwUMCBCutImageArray;
+               FwImageLen = UMCBCutImgArrayLength;
+#ifdef CONFIG_WOWLAN
+               pFwImageFileName_WoWLAN = R92CFwImageFileName_UMC_B_WW;
+               FwImageWoWLAN= Rtl8192C_FwUMCBCutWWImageArray;
+               FwImageWoWLANLen =UMCBCutWWImgArrayLength ;
+#endif //CONFIG_WOWLAN
+
+               DBG_8192C(" ===> FirmwareDownload91C() fw:Rtl819XFwImageArray_UMC_B\n");
+       }
+       else
+       {
+               pFwImageFileName = R92CFwImageFileName_TSMC;
+               FwImage = Rtl819XFwTSMCImageArray;
+               FwImageLen = TSMCImgArrayLength;
+#ifdef CONFIG_WOWLAN
+               pFwImageFileName_WoWLAN = R92CFwImageFileName_TSMC_WW;
+               FwImageWoWLAN= Rtl8192C_FwTSMCWWImageArray;
+               FwImageWoWLANLen =TSMCWWImgArrayLength ;
+#endif //CONFIG_WOWLAN
+               DBG_8192C(" ===> FirmwareDownload91C() fw:Rtl819XFwImageArray_TSMC\n");
+       }
+
+       //RT_TRACE(COMP_INIT, DBG_LOUD, (" ===> FirmwareDownload91C() fw:%s\n", pFwImageFileName));
+
+       #ifdef CONFIG_FILE_FWIMG
+       if(rtw_is_file_readable(rtw_fw_file_path) == _TRUE)
+       {
+               DBG_871X("%s accquire FW from file:%s\n", __FUNCTION__, rtw_fw_file_path);
+               pFirmware->eFWSource = FW_SOURCE_IMG_FILE; // We should decided by Reg.
+       }
+       else
+       #endif //CONFIG_FILE_FWIMG
+       {
+               DBG_871X("%s accquire FW from embedded image\n", __FUNCTION__);
+               pFirmware->eFWSource = FW_SOURCE_HEADER_FILE;
+       }
+
+
+       switch(pFirmware->eFWSource)
+       {
+               case FW_SOURCE_IMG_FILE:
+
+                       #ifdef CONFIG_FILE_FWIMG
+                       rtStatus = rtw_retrive_from_file(rtw_fw_file_path, FwBuffer8192C, FW_8192C_SIZE);
+                       pFirmware->ulFwLength = rtStatus>=0?rtStatus:0;
+                       pFirmware->szFwBuffer = FwBuffer8192C;
+                       #endif //CONFIG_FILE_FWIMG
+
+                       if(pFirmware->ulFwLength <= 0)
+                       {
+                               rtStatus = _FAIL;
+                               goto Exit;
+                       }
+                       break;
+               case FW_SOURCE_HEADER_FILE:
+                       if(FwImageLen > FW_8192C_SIZE){
+                               rtStatus = _FAIL;
+                               //RT_TRACE(COMP_INIT, DBG_SERIOUS, ("Firmware size exceed 0x%X. Check it.\n", FW_8192C_SIZE) );
+                               DBG_871X("Firmware size exceed 0x%X. Check it.\n", FW_8192C_SIZE);
+                               goto Exit;
+                       }
+
+                       pFirmware->szFwBuffer = FwImage;
+                       pFirmware->ulFwLength = FwImageLen;
+#ifdef CONFIG_WOWLAN
+                       {
+                               pFirmware->szWoWLANFwBuffer=FwImageWoWLAN;
+                               pFirmware->ulWoWLANFwLength = FwImageWoWLANLen;
+                       }
+#endif //CONFIG_WOWLAN
+
+                       break;
+       }
+
+#ifdef CONFIG_WOWLAN
+       if(bUsedWoWLANFw)       {
+               pFirmwareBuf = pFirmware->szWoWLANFwBuffer;
+               FirmwareLen = pFirmware->ulWoWLANFwLength;
+               pFwHdr = (PRT_8192C_FIRMWARE_HDR)pFirmware->szWoWLANFwBuffer;
+       }
+       else
+#endif //CONFIG_WOWLAN
+       {
+       #ifdef DBG_FW_STORE_FILE_PATH //used to store firmware to file...
+       if(pFirmware->ulFwLength > 0)
+       {
+               rtw_store_to_file(DBG_FW_STORE_FILE_PATH, pFirmware->szFwBuffer, pFirmware->ulFwLength);
+       }
+       #endif
+
+       pFirmwareBuf = pFirmware->szFwBuffer;
+       FirmwareLen = pFirmware->ulFwLength;
+
+       // To Check Fw header. Added by tynli. 2009.12.04.
+       pFwHdr = (PRT_8192C_FIRMWARE_HDR)pFirmware->szFwBuffer;
+       }
+       pHalData->FirmwareVersion =  le16_to_cpu(pFwHdr->Version);
+       pHalData->FirmwareSubVersion = le16_to_cpu(pFwHdr->Subversion);
+
+       //RT_TRACE(COMP_INIT, DBG_LOUD, (" FirmwareVersion(%#x), Signature(%#x)\n",
+       //      Adapter->MgntInfo.FirmwareVersion, pFwHdr->Signature));
+
+       DBG_8192C("fw_ver=v%d, fw_subver=%d, sig=0x%x\n",
+               pHalData->FirmwareVersion, pHalData->FirmwareSubVersion, le16_to_cpu(pFwHdr->Signature)&0xFFF0);
+
+       if(IS_FW_HEADER_EXIST(pFwHdr))
+       {
+               //RT_TRACE(COMP_INIT, DBG_LOUD,("Shift 32 bytes for FW header!!\n"));
+               pFirmwareBuf = pFirmwareBuf + 32;
+               FirmwareLen = FirmwareLen -32;
+       }
+
+       // Suggested by Filen. If 8051 is running in RAM code, driver should inform Fw to reset by itself,
+       // or it will cause download Fw fail. 2010.02.01. by tynli.
+       if(rtw_read8(Adapter, REG_MCUFWDL)&BIT7) //8051 RAM code
+       {
+               rtl8192c_FirmwareSelfReset(Adapter);
+               rtw_write8(Adapter, REG_MCUFWDL, 0x00);
+       }
+
+
+       _FWDownloadEnable(Adapter, _TRUE);
+       while(1) {
+               u8 tmp8;
+               tmp8 = rtw_read8(Adapter, REG_MCUFWDL);
+
+               //reset the FWDL chksum
+               rtw_write8(Adapter, REG_MCUFWDL, tmp8|FWDL_ChkSum_rpt);
+
+               //tmp8 = rtw_read8(Adapter, REG_MCUFWDL);
+               //DBG_8192C("Before _WriteFW, REG_MCUFWDL:0x%02x, writeFW_retry:%u\n", tmp8, writeFW_retry);
+
+               rtStatus = _WriteFW(Adapter, pFirmwareBuf, FirmwareLen);
+
+               //tmp8 = rtw_read8(Adapter, REG_MCUFWDL);
+               //DBG_8192C("After _WriteFW, REG_MCUFWDL:0x%02x, rtStatus:%d\n", tmp8, rtStatus);
+
+               if(rtStatus == _SUCCESS || ++writeFW_retry>3)
+                       break;
+       }
+       _FWDownloadEnable(Adapter, _FALSE);
+
+       if(_SUCCESS != rtStatus){
+               DBG_8192C("DL Firmware failed!\n");
+               goto Exit;
+       }
+
+       rtStatus = _FWFreeToGo(Adapter);
+       if(_SUCCESS != rtStatus){
+               DBG_8192C("DL Firmware failed!\n");
+               goto Exit;
+       }
+       //RT_TRACE(COMP_INIT, DBG_LOUD, (" Firmware is ready to run!\n"));
+
+Exit:
+
+       if(pFirmware) {
+               rtw_vmfree((u8*)pFirmware, sizeof(RT_FIRMWARE_92C));
+       }
+
+       //RT_TRACE(COMP_INIT, DBG_LOUD, (" <=== FirmwareDownload91C()\n"));
+       return rtStatus;
+
+}
+
+VOID
+InitializeFirmwareVars92C(
+       IN      PADAPTER                Adapter
+)
+{
+       HAL_DATA_TYPE           *pHalData       = GET_HAL_DATA(Adapter);
+
+       // Init Fw LPS related.
+       Adapter->pwrctrlpriv.bFwCurrentInPSMode = _FALSE;
+
+       //Init H2C counter. by tynli. 2009.12.09.
+       pHalData->LastHMEBoxNum = 0;
+}
+
+#ifdef CONFIG_WOWLAN
+//===========================================
+
+//
+// Description: Prepare some information to Fw for WoWLAN.
+//                     (1) Download wowlan Fw.
+//                     (2) Download RSVD page packets.
+//                     (3) Enable AP offload if needed.
+//
+// 2011.04.12 by tynli.
+//
+VOID
+SetFwRelatedForWoWLAN8192CU(
+       IN      PADAPTER                        padapter,
+       IN      u8                      bHostIsGoingtoSleep
+)
+{
+       int     status=_FAIL;
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
+       u8       bRecover = _FALSE;
+
+       if(bHostIsGoingtoSleep)
+       {
+               //
+               // 1. Before WoWLAN we need to re-download WoWLAN Fw.
+               //
+               status = FirmwareDownload92C(padapter, bHostIsGoingtoSleep);
+               if(status != _SUCCESS)
+               {
+                       DBG_8192C("ConfigFwRelatedForWoWLAN8192CU(): Re-Download Firmware failed!!\n");
+                       return;
+               }
+               else
+               {
+                       DBG_8192C("ConfigFwRelatedForWoWLAN8192CU(): Re-Download Firmware Success !!\n");
+               }
+
+               //
+               // 2. Re-Init the variables about Fw related setting.
+               //
+               InitializeFirmwareVars92C(padapter);
+
+
+       }
+}
+#endif // CONFIG_WOWLAN
+
+#ifdef CONFIG_BT_COEXIST
+static void _update_bt_param(_adapter *padapter)
+{
+       HAL_DATA_TYPE           *pHalData = GET_HAL_DATA(padapter);
+       struct btcoexist_priv   *pbtpriv = &(pHalData->bt_coexist);
+       struct registry_priv    *registry_par = &padapter->registrypriv;
+
+       if(2 != registry_par->bt_iso)
+               pbtpriv->BT_Ant_isolation = registry_par->bt_iso;// 0:Low, 1:High, 2:From Efuse
+
+       if(registry_par->bt_sco == 1) // 0:Idle, 1:None-SCO, 2:SCO, 3:From Counter, 4.Busy, 5.OtherBusy
+               pbtpriv->BT_Service = BT_OtherAction;
+       else if(registry_par->bt_sco==2)
+               pbtpriv->BT_Service = BT_SCO;
+       else if(registry_par->bt_sco==4)
+               pbtpriv->BT_Service = BT_Busy;
+       else if(registry_par->bt_sco==5)
+               pbtpriv->BT_Service = BT_OtherBusy;
+       else
+               pbtpriv->BT_Service = BT_Idle;
+
+       pbtpriv->BT_Ampdu = registry_par->bt_ampdu;
+       pbtpriv->bCOBT = _TRUE;
+#if 1
+       DBG_8192C("BT Coexistance = %s\n", (pbtpriv->BT_Coexist==_TRUE)?"enable":"disable");
+       if(pbtpriv->BT_Coexist)
+       {
+               if(pbtpriv->BT_Ant_Num == Ant_x2)
+               {
+                       DBG_8192C("BlueTooth BT_Ant_Num = Antx2\n");
+               }
+               else if(pbtpriv->BT_Ant_Num == Ant_x1)
+               {
+                       DBG_8192C("BlueTooth BT_Ant_Num = Antx1\n");
+               }
+               switch(pbtpriv->BT_CoexistType)
+               {
+                       case BT_2Wire:
+                               DBG_8192C("BlueTooth BT_CoexistType = BT_2Wire\n");
+                               break;
+                       case BT_ISSC_3Wire:
+                               DBG_8192C("BlueTooth BT_CoexistType = BT_ISSC_3Wire\n");
+                               break;
+                       case BT_Accel:
+                               DBG_8192C("BlueTooth BT_CoexistType = BT_Accel\n");
+                               break;
+                       case BT_CSR_BC4:
+                               DBG_8192C("BlueTooth BT_CoexistType = BT_CSR_BC4\n");
+                               break;
+                       case BT_RTL8756:
+                               DBG_8192C("BlueTooth BT_CoexistType = BT_RTL8756\n");
+                               break;
+                       default:
+                               DBG_8192C("BlueTooth BT_CoexistType = Unknown\n");
+                               break;
+               }
+               DBG_8192C("BlueTooth BT_Ant_isolation = %d\n", pbtpriv->BT_Ant_isolation);
+
+
+               switch(pbtpriv->BT_Service)
+               {
+                       case BT_OtherAction:
+                               DBG_8192C("BlueTooth BT_Service = BT_OtherAction\n");
+                               break;
+                       case BT_SCO:
+                               DBG_8192C("BlueTooth BT_Service = BT_SCO\n");
+                               break;
+                       case BT_Busy:
+                               DBG_8192C("BlueTooth BT_Service = BT_Busy\n");
+                               break;
+                       case BT_OtherBusy:
+                               DBG_8192C("BlueTooth BT_Service = BT_OtherBusy\n");
+                               break;
+                       default:
+                               DBG_8192C("BlueTooth BT_Service = BT_Idle\n");
+                               break;
+               }
+
+               DBG_8192C("BT_RadioSharedType = 0x%x\n", pbtpriv->BT_RadioSharedType);
+       }
+#endif
+
+}
+
+
+#define GET_BT_COEXIST(priv) (&priv->bt_coexist)
+
+void rtl8192c_ReadBluetoothCoexistInfo(
+       IN      PADAPTER        Adapter,
+       IN      u8*             PROMContent,
+       IN      BOOLEAN         AutoloadFail
+       )
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       struct btcoexist_priv   *pbtpriv = &(pHalData->bt_coexist);
+       u8      rf_opt4;
+
+       if(AutoloadFail){
+               pbtpriv->BT_Coexist = _FALSE;
+               pbtpriv->BT_CoexistType= BT_2Wire;
+               pbtpriv->BT_Ant_Num = Ant_x2;
+               pbtpriv->BT_Ant_isolation= 0;
+               pbtpriv->BT_RadioSharedType = BT_Radio_Shared;
+               return;
+       }
+
+       pbtpriv->BT_Coexist = (((PROMContent[EEPROM_RF_OPT1]&BOARD_TYPE_NORMAL_MASK)>>5) == BOARD_USB_COMBO)?_TRUE:_FALSE;      // bit [7:5]
+       rf_opt4 = PROMContent[EEPROM_RF_OPT4];
+       pbtpriv->BT_CoexistType                 = ((rf_opt4&0xe)>>1);                   // bit [3:1]
+       pbtpriv->BT_Ant_Num             = (rf_opt4&0x1);                                // bit [0]
+       pbtpriv->BT_Ant_isolation       = ((rf_opt4&0x10)>>4);                  // bit [4]
+       pbtpriv->BT_RadioSharedType     = ((rf_opt4&0x20)>>5);                  // bit [5]
+
+       _update_bt_param(Adapter);
+
+}
+#endif
+
+VERSION_8192C
+rtl8192c_ReadChipVersion(
+       IN      PADAPTER        Adapter
+       )
+{
+       u32                     value32;
+       //VERSION_8192C version;
+       u32                     ChipVersion=0;
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+
+       value32 = rtw_read32(Adapter, REG_SYS_CFG);
+
+       if (value32 & TRP_VAUX_EN)
+       {
+#if 0
+               // Test chip.
+               if(IS_HARDWARE_TYPE_8723A(Adapter)) {
+                       ChipVersion |= ((value32 & VENDOR_ID) ? CHIP_VENDOR_UMC : 0);
+                       ChipVersion |= ((value32 & BT_FUNC) ? CHIP_8723: 0); // RTL8723 with BT function.
+               }
+               else     {
+               version = (value32 & TYPE_ID) ?VERSION_TEST_CHIP_92C :VERSION_TEST_CHIP_88C;
+       }
+#else
+               // tynli_test. 2011.01.10.
+               if(IS_HARDWARE_TYPE_8192C(Adapter))
+               {
+                       ChipVersion = (value32 & TYPE_ID) ? VERSION_TEST_CHIP_92C : VERSION_TEST_CHIP_88C;
+               }
+               else
+               {
+                       ChipVersion |= ((value32 & VENDOR_ID) ? CHIP_VENDOR_UMC : 0);
+                       ChipVersion |= ((value32 & BT_FUNC) ? CHIP_8723: 0); // RTL8723 with BT function.
+               }
+#endif
+       }
+       else
+       {
+#if 0
+               // Normal mass production chip.
+               ChipVersion = NORMAL_CHIP;
+#if !RTL8723_FPGA_TRUE_PHY_VERIFICATION
+               ChipVersion |= ((value32 & TYPE_ID) ? CHIP_92C : 0);
+#endif
+               ChipVersion |= ((value32 & VENDOR_ID) ? CHIP_VENDOR_UMC : 0);
+               ChipVersion |= ((value32 & BT_FUNC) ? CHIP_8723: 0); // RTL8723 with BT function.
+               if(IS_8723_SERIES(ChipVersion))
+               {
+                       if(IS_VENDOR_UMC(ChipVersion))
+                               ChipVersion |= ((value32 & CHIP_VER_RTL_MASK) ? CHIP_VENDOR_UMC_B_CUT : 0);
+               }
+               else
+               {
+                       // Mark out by tynli. UMC B-cut IC will not set the SYS_CFG[19] to UMC
+                       // because we do not want the custmor to know. 2011.01.11.
+                       //if(IS_VENDOR_UMC(ChipVersion))
+                       {
+                               // To check the value of B-cut. by tynli. 2011.01.11.
+                               u1bTmp = (u1Byte)((value32 & CHIP_VER_RTL_MASK)>>12);
+                               if(u1bTmp == 1)
+                               {       // B-cut
+                                       ChipVersion |= CHIP_VENDOR_UMC_B_CUT;
+                               }
+                       }
+               }
+#else
+               // Normal mass production chip.
+               ChipVersion = NORMAL_CHIP;
+//#if !RTL8723_FPGA_TRUE_PHY_VERIFICATION
+               ChipVersion |= ((value32 & TYPE_ID) ? RF_TYPE_2T2R : 0); //92c
+//#endif
+               ChipVersion |= ((value32 & VENDOR_ID) ? CHIP_VENDOR_UMC : 0);
+               ChipVersion |= ((value32 & BT_FUNC) ? CHIP_8723: 0); // RTL8723 with BT function.
+               if(IS_HARDWARE_TYPE_8192C(Adapter))
+               {
+                       // 88/92C UMC B-cut IC will not set the SYS_CFG[19] to UMC
+                       // because we do not want the custmor to know. by tynli. 2011.01.17.
+                       //MSG_8192C("mask result = 0x%x is_UMC %d chipversion 0x%x\n", (value32 & CHIP_VER_RTL_MASK), IS_CHIP_VENDOR_UMC(ChipVersion), ChipVersion);
+                       if((!IS_CHIP_VENDOR_UMC(ChipVersion) )&& (value32 & CHIP_VER_RTL_MASK))
+                       {
+                               //MSG_8192C("chip mask result = 0x%x\n", ((value32 & CHIP_VER_RTL_MASK) | CHIP_VENDOR_UMC));
+                               ChipVersion |= ((value32 & CHIP_VER_RTL_MASK) | CHIP_VENDOR_UMC); // IC version (CUT)
+                               //MSG_8192C("chip version = 0x%x\n", ChipVersion);
+                       }
+               }
+               else
+               {
+                       if(IS_CHIP_VENDOR_UMC(ChipVersion))
+                               ChipVersion |= ((value32 & CHIP_VER_RTL_MASK)); // IC version (CUT)
+               }
+
+               if(IS_92C_SERIAL(ChipVersion))
+               {
+                       value32 = rtw_read32(Adapter, REG_HPON_FSM);
+                       ChipVersion |= ((CHIP_BONDING_IDENTIFIER(value32) == CHIP_BONDING_92C_1T2R) ? RF_TYPE_1T2R : 0);
+               }
+               else if(IS_8723_SERIES(ChipVersion))
+               {
+                       //RT_ASSERT(IS_HARDWARE_TYPE_8723A(Adapter), ("Incorrect chip version!!\n"));
+                       value32 = rtw_read32(Adapter, REG_GPIO_OUTSTS);
+                       ChipVersion |= ((value32 & RF_RL_ID)>>20);       //ROM code version.
+               }
+#endif
+
+       }
+
+       //version = (VERSION_8192C)ChipVersion;
+
+       // For multi-function consideration. Added by Roger, 2010.10.06.
+       if(IS_8723_SERIES(ChipVersion))
+       {
+               pHalData->MultiFunc = RT_MULTI_FUNC_NONE;
+               value32 = rtw_read32(Adapter, REG_MULTI_FUNC_CTRL);
+               pHalData->MultiFunc =(RT_MULTI_FUNC) (pHalData->MultiFunc| ((value32 & WL_FUNC_EN) ?  RT_MULTI_FUNC_WIFI : 0) );
+               pHalData->MultiFunc =(RT_MULTI_FUNC) (pHalData->MultiFunc| ((value32 & BT_FUNC_EN) ?  RT_MULTI_FUNC_BT : 0) );
+               pHalData->MultiFunc =(RT_MULTI_FUNC) (pHalData->MultiFunc| ((value32 & GPS_FUNC_EN) ?  RT_MULTI_FUNC_GPS : 0) );
+               pHalData->PolarityCtl = ((value32 & WL_HWPDN_SL) ?  RT_POLARITY_HIGH_ACT : RT_POLARITY_LOW_ACT);
+               //MSG_8192C("ReadChipVersion(): MultiFunc(%x), PolarityCtl(%x) \n", pHalData->MultiFunc, pHalData->PolarityCtl);
+
+               //For regulator mode. by tynli. 2011.01.14
+               pHalData->RegulatorMode = ((value32 & TRP_BT_EN) ? RT_LDO_REGULATOR : RT_SWITCHING_REGULATOR);
+               //MSG_8192C("ReadChipVersion(): RegulatorMode(%x) \n", pHalData->RegulatorMode);
+       }
+
+//#if DBG
+#if 1
+       switch(ChipVersion)
+       {
+               case VERSION_NORMAL_TSMC_CHIP_92C_1T2R:
+                       MSG_8192C("Chip Version ID: VERSION_NORMAL_TSMC_CHIP_92C_1T2R.\n");
+                       break;
+               case VERSION_NORMAL_TSMC_CHIP_92C:
+                       MSG_8192C("Chip Version ID: VERSION_NORMAL_TSMC_CHIP_92C.\n");
+                       break;
+               case VERSION_NORMAL_TSMC_CHIP_88C:
+                       MSG_8192C("Chip Version ID: VERSION_NORMAL_TSMC_CHIP_88C.\n");
+                       break;
+               case VERSION_NORMAL_UMC_CHIP_92C_1T2R_A_CUT:
+                       MSG_8192C("Chip Version ID: VERSION_NORMAL_UMC_CHIP_92C_1T2R_A_CUT.\n");
+                       break;
+               case VERSION_NORMAL_UMC_CHIP_92C_A_CUT:
+                       MSG_8192C("Chip Version ID: VERSION_NORMAL_UMC_CHIP_92C_A_CUT.\n");
+                       break;
+               case VERSION_NORMAL_UMC_CHIP_88C_A_CUT:
+                       MSG_8192C("Chip Version ID: VERSION_NORMAL_UMC_CHIP_88C_A_CUT.\n");
+                       break;
+               case VERSION_NORMAL_UMC_CHIP_92C_1T2R_B_CUT:
+                       MSG_8192C("Chip Version ID: VERSION_NORMAL_UMC_CHIP_92C_1T2R_B_CUT.\n");
+                       break;
+               case VERSION_NORMAL_UMC_CHIP_92C_B_CUT:
+                       MSG_8192C("Chip Version ID: VERSION_NORMAL_UMC_CHIP_92C_B_CUT.\n");
+                       break;
+               case VERSION_NORMAL_UMC_CHIP_88C_B_CUT:
+                       MSG_8192C("Chip Version ID: VERSION_NORMAL_UMC_CHIP_88C_B_CUT.\n");
+                       break;
+               case VERSION_TEST_CHIP_92C:
+                       MSG_8192C("Chip Version ID: VERSION_TEST_CHIP_92C.\n");
+                       break;
+               case VERSION_TEST_CHIP_88C:
+                       MSG_8192C("Chip Version ID: VERSION_TEST_CHIP_88C.\n");
+                       break;
+               case VERSION_TEST_UMC_CHIP_8723:
+                       MSG_8192C("Chip Version ID: VERSION_TEST_UMC_CHIP_8723.\n");
+                       break;
+               case VERSION_NORMAL_UMC_CHIP_8723_1T1R_A_CUT:
+                       MSG_8192C("Chip Version ID: VERSION_NORMA_UMC_CHIP_8723_1T1R_A_CUT.\n");
+                       break;
+               case VERSION_NORMAL_UMC_CHIP_8723_1T1R_B_CUT:
+                       MSG_8192C("Chip Version ID: VERSION_NORMA_UMC_CHIP_8723_1T1R_B_CUT.\n");
+                       break;
+               default:
+                       MSG_8192C("Chip Version ID: ???????????????.\n");
+                       break;
+       }
+#endif
+
+       pHalData->VersionID = ChipVersion;
+
+       if(IS_1T2R(ChipVersion))
+               pHalData->rf_type = RF_1T2R;
+       else if(IS_2T2R(ChipVersion))
+               pHalData->rf_type = RF_2T2R;
+       else if(IS_8723_SERIES(ChipVersion))
+               pHalData->rf_type = RF_1T1R;
+       else
+               pHalData->rf_type = RF_1T1R;
+
+       MSG_8192C("RF_Type is %x!!\n", pHalData->rf_type);
+
+       return ChipVersion;
+}
+
+void
+rtl8192c_EfuseParseChnlPlan(
+       IN      PADAPTER                padapter,
+       IN      u8*                     hwinfo,
+       IN      BOOLEAN                 AutoLoadFail
+       )
+{
+       padapter->mlmepriv.ChannelPlan = hal_com_get_channel_plan(
+               padapter
+               , hwinfo?hwinfo[EEPROM_CHANNEL_PLAN]:0xFF
+               , padapter->registrypriv.channel_plan
+               , RT_CHANNEL_DOMAIN_WORLD_WIDE_13
+               , AutoLoadFail
+       );
+
+       DBG_871X("mlmepriv.ChannelPlan = 0x%02x\n", padapter->mlmepriv.ChannelPlan);
+}
+
+u8 GetEEPROMSize8192C(PADAPTER Adapter)
+{
+       u8      size = 0;
+       u32     curRCR;
+
+       curRCR = rtw_read16(Adapter, REG_9346CR);
+       size = (curRCR & BOOT_FROM_EEPROM) ? 6 : 4; // 6: EEPROM used is 93C46, 4: boot from E-Fuse.
+
+       MSG_8192C("EEPROM type is %s\n", size==4 ? "E-FUSE" : "93C46");
+
+       return size;
+}
+
+void rtl8192c_free_hal_data(_adapter * padapter)
+{
+_func_enter_;
+
+       DBG_8192C("=====> rtl8192c_free_hal_data =====\n");
+
+       if(padapter->HalData)
+               rtw_mfree(padapter->HalData, sizeof(HAL_DATA_TYPE));
+       DBG_8192C("<===== rtl8192c_free_hal_data =====\n");
+
+_func_exit_;
+}
+
+//===========================================================
+//                             Efuse related code
+//===========================================================
+enum{
+               VOLTAGE_V25                                             = 0x03,
+               LDOE25_SHIFT                                            = 28 ,
+       };
+
+static VOID
+hal_EfusePowerSwitch_RTL8192C(
+       IN      PADAPTER        pAdapter,
+       IN      u8              bWrite,
+       IN      u8              PwrState)
+{
+       u8      tempval;
+       u16     tmpV16;
+
+       if (PwrState == _TRUE)
+       {
+               // 1.2V Power: From VDDON with Power Cut(0x0000h[15]), defualt valid
+               tmpV16 = rtw_read16(pAdapter,REG_SYS_ISO_CTRL);
+               if( ! (tmpV16 & PWC_EV12V ) ){
+                       tmpV16 |= PWC_EV12V ;
+                       rtw_write16(pAdapter,REG_SYS_ISO_CTRL,tmpV16);
+               }
+               // Reset: 0x0000h[28], default valid
+               tmpV16 =  rtw_read16(pAdapter,REG_SYS_FUNC_EN);
+               if( !(tmpV16 & FEN_ELDR) ){
+                       tmpV16 |= FEN_ELDR ;
+                       rtw_write16(pAdapter,REG_SYS_FUNC_EN,tmpV16);
+               }
+
+               // Clock: Gated(0x0008h[5]) 8M(0x0008h[1]) clock from ANA, default valid
+               tmpV16 = rtw_read16(pAdapter,REG_SYS_CLKR);
+               if( (!(tmpV16 & LOADER_CLK_EN) )  ||(!(tmpV16 & ANA8M) ) ){
+                       tmpV16 |= (LOADER_CLK_EN |ANA8M ) ;
+                       rtw_write16(pAdapter,REG_SYS_CLKR,tmpV16);
+               }
+
+               if(bWrite == _TRUE)
+               {
+                       // Enable LDO 2.5V before read/write action
+                       tempval = rtw_read8(pAdapter, EFUSE_TEST+3);
+                       tempval &= 0x0F;
+                       tempval |= (VOLTAGE_V25 << 4);
+                       rtw_write8(pAdapter, EFUSE_TEST+3, (tempval | 0x80));
+               }
+       }
+       else
+       {
+               if(bWrite == _TRUE){
+                       // Disable LDO 2.5V after read/write action
+                       tempval = rtw_read8(pAdapter, EFUSE_TEST+3);
+                       rtw_write8(pAdapter, EFUSE_TEST+3, (tempval & 0x7F));
+               }
+       }
+}
+
+static VOID
+hal_EfusePowerSwitch_RTL8723(
+       IN      PADAPTER        pAdapter,
+       IN      u8              bWrite,
+       IN      u8              PwrState)
+{
+       u8      tempval;
+       u16     tmpV16;
+
+       if (PwrState == _TRUE)
+       {
+               rtw_write8(pAdapter, REG_EFUSE_ACCESS, EFUSE_ACCESS_ON);
+
+               // 1.2V Power: From VDDON with Power Cut(0x0000h[15]), defualt valid
+               tmpV16 = rtw_read16(pAdapter,REG_SYS_ISO_CTRL);
+               if( ! (tmpV16 & PWC_EV12V ) ){
+                       tmpV16 |= PWC_EV12V ;
+                        rtw_write16(pAdapter,REG_SYS_ISO_CTRL,tmpV16);
+               }
+               // Reset: 0x0000h[28], default valid
+               tmpV16 =  rtw_read16(pAdapter,REG_SYS_FUNC_EN);
+               if( !(tmpV16 & FEN_ELDR) ){
+                       tmpV16 |= FEN_ELDR ;
+                       rtw_write16(pAdapter,REG_SYS_FUNC_EN,tmpV16);
+               }
+
+               // Clock: Gated(0x0008h[5]) 8M(0x0008h[1]) clock from ANA, default valid
+               tmpV16 = rtw_read16(pAdapter,REG_SYS_CLKR);
+               if( (!(tmpV16 & LOADER_CLK_EN) )  ||(!(tmpV16 & ANA8M) ) ){
+                       tmpV16 |= (LOADER_CLK_EN |ANA8M ) ;
+                       rtw_write16(pAdapter,REG_SYS_CLKR,tmpV16);
+               }
+
+               if(bWrite == _TRUE)
+               {
+                       // Enable LDO 2.5V before read/write action
+                       tempval = rtw_read8(pAdapter, EFUSE_TEST+3);
+                       tempval &= 0x0F;
+                       tempval |= (VOLTAGE_V25 << 4);
+                       rtw_write8(pAdapter, EFUSE_TEST+3, (tempval | 0x80));
+               }
+       }
+       else
+       {
+               rtw_write8(pAdapter, REG_EFUSE_ACCESS, EFUSE_ACCESS_OFF);
+
+               if(bWrite == _TRUE){
+                       // Disable LDO 2.5V after read/write action
+                       tempval = rtw_read8(pAdapter, EFUSE_TEST+3);
+                       rtw_write8(pAdapter, EFUSE_TEST+3, (tempval & 0x7F));
+               }
+       }
+}
+
+static VOID
+rtl8192c_EfusePowerSwitch(
+       IN      PADAPTER        pAdapter,
+       IN      u8              bWrite,
+       IN      u8              PwrState)
+{
+       if(IS_HARDWARE_TYPE_8192C(pAdapter))
+       {
+               hal_EfusePowerSwitch_RTL8192C(pAdapter, bWrite, PwrState);
+       }
+       else if(IS_HARDWARE_TYPE_8723A(pAdapter))
+       {
+               hal_EfusePowerSwitch_RTL8723(pAdapter, bWrite, PwrState);
+       }
+}
+
+static VOID
+ReadEFuse_RTL8192C(
+       PADAPTER        Adapter,
+       u16              _offset,
+       u16             _size_byte,
+       u8              *pbuf,
+       IN      BOOLEAN         bPseudoTest
+       )
+{
+       u8      efuseTbl[EFUSE_MAP_LEN];
+       u8      rtemp8[1];
+       u16     eFuse_Addr = 0;
+       u8      offset, wren;
+       u16     i, j;
+       u16     eFuseWord[EFUSE_MAX_SECTION][EFUSE_MAX_WORD_UNIT];
+       u16     efuse_utilized = 0;
+       u8      efuse_usage = 0;
+
+       //
+       // Do NOT excess total size of EFuse table. Added by Roger, 2008.11.10.
+       //
+       if((_offset + _size_byte)>EFUSE_MAP_LEN)
+       {// total E-Fuse table is 128bytes
+               //DBG_8192C("ReadEFuse_RTL8192C(): Invalid offset(%#x) with read bytes(%#x)!!\n",_offset, _size_byte);
+               return;
+       }
+
+       // 0. Refresh efuse init map as all oxFF.
+       for (i = 0; i < EFUSE_MAX_SECTION; i++)
+               for (j = 0; j < EFUSE_MAX_WORD_UNIT; j++)
+                       eFuseWord[i][j] = 0xFFFF;
+
+
+       //
+       // 1. Read the first byte to check if efuse is empty!!!
+       //
+       //
+       ReadEFuseByte(Adapter, eFuse_Addr, rtemp8, bPseudoTest);
+       if(*rtemp8 != 0xFF)
+       {
+               efuse_utilized++;
+               //RTPRINT(FEEPROM, EFUSE_READ_ALL, ("Addr=%d\n", eFuse_Addr));
+               eFuse_Addr++;
+       }
+
+       //
+       // 2. Read real efuse content. Filter PG header and every section data.
+       //
+       while((*rtemp8 != 0xFF) && (eFuse_Addr < EFUSE_REAL_CONTENT_LEN))
+       {
+               // Check PG header for section num.
+               offset = ((*rtemp8 >> 4) & 0x0f);
+
+               if(offset < EFUSE_MAX_SECTION)
+               {
+                       // Get word enable value from PG header
+                       wren = (*rtemp8 & 0x0f);
+                       //RTPRINT(FEEPROM, EFUSE_READ_ALL, ("Offset-%d Worden=%x\n", offset, wren));
+
+                       for(i=0; i<EFUSE_MAX_WORD_UNIT; i++)
+                       {
+                               // Check word enable condition in the section
+                               if(!(wren & 0x01))
+                               {
+                                       //RTPRINT(FEEPROM, EFUSE_READ_ALL, ("Addr=%d\n", eFuse_Addr));
+                                       ReadEFuseByte(Adapter, eFuse_Addr, rtemp8, bPseudoTest);        eFuse_Addr++;
+                                       efuse_utilized++;
+                                       eFuseWord[offset][i] = (*rtemp8 & 0xff);
+
+
+                                       if(eFuse_Addr >= EFUSE_REAL_CONTENT_LEN)
+                                               break;
+
+                                       //RTPRINT(FEEPROM, EFUSE_READ_ALL, ("Addr=%d\n", eFuse_Addr));
+                                       ReadEFuseByte(Adapter, eFuse_Addr, rtemp8, bPseudoTest);        eFuse_Addr++;
+                                       efuse_utilized++;
+                                       eFuseWord[offset][i] |= (((u16)*rtemp8 << 8) & 0xff00);
+
+                                       if(eFuse_Addr >= EFUSE_REAL_CONTENT_LEN)
+                                               break;
+                               }
+
+                               wren >>= 1;
+
+                       }
+               }
+
+               //RTPRINT(FEEPROM, EFUSE_READ_ALL, ("Addr=%d\n", eFuse_Addr));
+               // Read next PG header
+               ReadEFuseByte(Adapter, eFuse_Addr, rtemp8, bPseudoTest);
+               if(*rtemp8 != 0xFF && (eFuse_Addr < 512))
+               {
+                       efuse_utilized++;
+                       eFuse_Addr++;
+               }
+       }
+
+       //
+       // 3. Collect 16 sections and 4 word unit into Efuse map.
+       //
+       for(i=0; i<EFUSE_MAX_SECTION; i++)
+       {
+               for(j=0; j<EFUSE_MAX_WORD_UNIT; j++)
+               {
+                       efuseTbl[(i*8)+(j*2)]=(eFuseWord[i][j] & 0xff);
+                       efuseTbl[(i*8)+((j*2)+1)]=((eFuseWord[i][j] >> 8) & 0xff);
+               }
+       }
+
+       //
+       // 4. Copy from Efuse map to output pointer memory!!!
+       //
+       for(i=0; i<_size_byte; i++)
+       {
+               pbuf[i] = efuseTbl[_offset+i];
+       }
+
+       //
+       // 5. Calculate Efuse utilization.
+       //
+       efuse_usage = (u8)((efuse_utilized*100)/EFUSE_REAL_CONTENT_LEN);
+       rtw_hal_set_hwreg(Adapter, HW_VAR_EFUSE_BYTES, (u8 *)&efuse_utilized);
+       //rtw_hal_set_hwreg(Adapter, HW_VAR_EFUSE_USAGE, (pu1Byte)&efuse_usage);
+}
+
+static VOID
+ReadEFuse_RTL8723(
+       PADAPTER        Adapter,
+       u16              _offset,
+       u16             _size_byte,
+       u8              *pbuf,
+       IN      BOOLEAN         bPseudoTest
+       )
+{
+       u8      efuseTbl[EFUSE_MAP_LEN_8723];
+       u16     eFuse_Addr = 0;
+       u8      offset = 0, wden = 0;
+       u16     i, j;
+       u16     eFuseWord[EFUSE_MAX_SECTION_8723][EFUSE_MAX_WORD_UNIT];
+       u16     efuse_utilized = 0;
+       u8      efuse_usage = 0;
+       u8      offset_2_0=0;
+       u8      efuseHeader=0, efuseExtHdr=0, efuseData=0;
+       //
+       // Do NOT excess total size of EFuse table. Added by Roger, 2008.11.10.
+       //
+       if((_offset + _size_byte)>EFUSE_MAP_LEN_8723)
+       {
+               //RT_TRACE(COMP_EFUSE, DBG_LOUD, ("ReadEFuse_RTL8723(): Invalid offset(%#x) with read bytes(%#x)!!\n",_offset, _size_byte));
+               return;
+       }
+
+       // 0. Refresh efuse init map as all oxFF.
+       for (i = 0; i < EFUSE_MAX_SECTION_8723; i++)
+               for (j = 0; j < EFUSE_MAX_WORD_UNIT; j++)
+                       eFuseWord[i][j] = 0xFFFF;
+
+       //
+       // 1. Read the first byte to check if efuse is empty!!!
+       //
+       //
+       ReadEFuseByte(Adapter, eFuse_Addr++, &efuseHeader, bPseudoTest);
+
+       if(efuseHeader != 0xFF)
+       {
+               efuse_utilized++;
+       }
+       else
+       {
+               //RTPRINT(FEEPROM, EFUSE_READ_ALL, ("EFUSE is empty\n"));
+               return;
+       }
+
+
+       //
+       // 2. Read real efuse content. Filter PG header and every section data.
+       //
+       while((efuseHeader != 0xFF) && AVAILABLE_EFUSE_ADDR(eFuse_Addr))
+       {
+               //RTPRINT(FEEPROM, EFUSE_READ_ALL, ("efuse[%d]=%x\n", eFuse_Addr-1, efuseHeader));
+
+               // Check PG header for section num.
+               if(EXT_HEADER(efuseHeader))             //extended header
+               {
+                       offset_2_0 = GET_HDR_OFFSET_2_0(efuseHeader);
+                       //RTPRINT(FEEPROM, EFUSE_READ_ALL, ("extended header offset_2_0=%x\n", offset_2_0));
+
+                       ReadEFuseByte(Adapter, eFuse_Addr++, &efuseExtHdr, bPseudoTest);
+
+                       //RTPRINT(FEEPROM, EFUSE_READ_ALL, ("efuse[%d]=%x\n", eFuse_Addr-1, efuseExtHdr));
+
+                       if(efuseExtHdr != 0xff)
+                       {
+                               efuse_utilized++;
+                               if(ALL_WORDS_DISABLED(efuseExtHdr))
+                               {
+                                       ReadEFuseByte(Adapter, eFuse_Addr++, &efuseHeader, bPseudoTest);
+                                       if(efuseHeader != 0xff)
+                                       {
+                                               efuse_utilized++;
+                                       }
+                                       continue;
+                               }
+                               else
+                               {
+                                       offset = ((efuseExtHdr & 0xF0) >> 1) | offset_2_0;
+                                       wden = (efuseExtHdr & 0x0F);
+                               }
+                       }
+                       else
+                       {
+                               //RTPRINT(FEEPROM, EFUSE_READ_ALL, ("Error condition, extended = 0xff\n"));
+                               // We should handle this condition.
+                       }
+               }
+               else
+               {
+                       offset = ((efuseHeader >> 4) & 0x0f);
+                       wden = (efuseHeader & 0x0f);
+               }
+
+               if(offset < EFUSE_MAX_SECTION_8723)
+               {
+                       // Get word enable value from PG header
+                       //RTPRINT(FEEPROM, EFUSE_READ_ALL, ("Offset-%d Worden=%x\n", offset, wden));
+
+                       for(i=0; i<EFUSE_MAX_WORD_UNIT; i++)
+                       {
+                               // Check word enable condition in the section
+                               if(!(wden & (0x01<<i)))
+                               {
+                                       ReadEFuseByte(Adapter, eFuse_Addr++, &efuseData, bPseudoTest);
+                                       //RTPRINT(FEEPROM, EFUSE_READ_ALL, ("efuse[%d]=%x\n", eFuse_Addr-1, efuseData));
+                                       efuse_utilized++;
+                                       eFuseWord[offset][i] = (efuseData & 0xff);
+
+                                       if(!AVAILABLE_EFUSE_ADDR(eFuse_Addr))
+                                               break;
+
+                                       ReadEFuseByte(Adapter, eFuse_Addr++, &efuseData, bPseudoTest);
+                                       //RTPRINT(FEEPROM, EFUSE_READ_ALL, ("efuse[%d]=%x\n", eFuse_Addr-1, efuseData));
+                                       efuse_utilized++;
+                                       eFuseWord[offset][i] |= (((u16)efuseData << 8) & 0xff00);
+
+                                       if(!AVAILABLE_EFUSE_ADDR(eFuse_Addr))
+                                               break;
+                               }
+                       }
+               }
+
+               // Read next PG header
+               ReadEFuseByte(Adapter, eFuse_Addr++, &efuseHeader, bPseudoTest);
+
+               if(efuseHeader != 0xFF)
+               {
+                       efuse_utilized++;
+               }
+       }
+
+       //
+       // 3. Collect 16 sections and 4 word unit into Efuse map.
+       //
+       for(i=0; i<EFUSE_MAX_SECTION_8723; i++)
+       {
+               for(j=0; j<EFUSE_MAX_WORD_UNIT; j++)
+               {
+                       efuseTbl[(i*8)+(j*2)]=(eFuseWord[i][j] & 0xff);
+                       efuseTbl[(i*8)+((j*2)+1)]=((eFuseWord[i][j] >> 8) & 0xff);
+               }
+       }
+
+       //
+       // 4. Copy from Efuse map to output pointer memory!!!
+       //
+       for(i=0; i<_size_byte; i++)
+       {
+               pbuf[i] = efuseTbl[_offset+i];
+       }
+
+       //
+       // 5. Calculate Efuse utilization.
+       //
+       efuse_usage = (u8)((efuse_utilized*100)/EFUSE_REAL_CONTENT_LEN);
+       rtw_hal_set_hwreg(Adapter, HW_VAR_EFUSE_BYTES, (u8 *)&efuse_utilized);
+       //rtw_hal_set_hwreg(Adapter, HW_VAR_EFUSE_USAGE, (pu1Byte)&efuse_usage);
+}
+
+static BOOLEAN
+Hal_EfuseSwitchToBank(
+       IN              PADAPTER        pAdapter,
+       IN              u8                      bank,
+       IN              BOOLEAN         bPseudoTest
+       )
+{
+       BOOLEAN         bRet = _FALSE;
+       u32             value32=0;
+
+       //RTPRINT(FEEPROM, EFUSE_PG, ("Efuse switch bank to %d\n", bank));
+       if(bPseudoTest)
+       {
+               fakeEfuseBank = bank;
+               bRet = _TRUE;
+       }
+       else
+       {
+               if(IS_HARDWARE_TYPE_8723A(pAdapter) &&
+                       INCLUDE_MULTI_FUNC_BT(pAdapter))
+               {
+                       value32 = rtw_read32(pAdapter, EFUSE_TEST);
+                       bRet = _TRUE;
+                       switch(bank)
+                       {
+                       case 0:
+                               value32 = (value32 & ~EFUSE_SEL_MASK) | EFUSE_SEL(EFUSE_WIFI_SEL_0);
+                               break;
+                       case 1:
+                               value32 = (value32 & ~EFUSE_SEL_MASK) | EFUSE_SEL(EFUSE_BT_SEL_0);
+                               break;
+                       case 2:
+                               value32 = (value32 & ~EFUSE_SEL_MASK) | EFUSE_SEL(EFUSE_BT_SEL_1);
+                               break;
+                       case 3:
+                               value32 = (value32 & ~EFUSE_SEL_MASK) | EFUSE_SEL(EFUSE_BT_SEL_2);
+                               break;
+                       default:
+                               value32 = (value32 & ~EFUSE_SEL_MASK) | EFUSE_SEL(EFUSE_WIFI_SEL_0);
+                               bRet = _FALSE;
+                               break;
+                       }
+                       rtw_write32(pAdapter, EFUSE_TEST, value32);
+               }
+               else
+                       bRet = _TRUE;
+       }
+       return bRet;
+}
+
+static VOID
+ReadEFuse_BT(
+       PADAPTER        Adapter,
+       u16              _offset,
+       u16             _size_byte,
+       u8              *pbuf,
+       IN      BOOLEAN bPseudoTest
+       )
+{
+       u8      *efuseTbl;
+       u16     eFuse_Addr = 0;
+       u8      offset = 0, wden = 0;
+       u16     i, j;
+       u16     **eFuseWord;
+       u16     efuse_utilized = 0;
+       u8      efuse_usage = 0;
+       u8      offset_2_0=0;
+       u8      efuseHeader=0, efuseExtHdr=0, efuseData=0;
+       u8      bank=0;
+       BOOLEAN bCheckNextBank=_FALSE;
+
+       efuseTbl = rtw_malloc(EFUSE_BT_MAP_LEN);
+       if(efuseTbl == NULL){
+               DBG_8192C("efuseTbl malloc fail !\n");
+               return;
+       }
+
+       eFuseWord = (u16 **)rtw_zmalloc(sizeof(u16 *)*EFUSE_BT_MAX_SECTION);
+       if(eFuseWord == NULL){
+               DBG_8192C("eFuseWord malloc fail !\n");
+               return;
+       }
+       else{
+               for(i=0;i<EFUSE_BT_MAX_SECTION;i++){
+                       eFuseWord[i]= (u16 *)rtw_zmalloc(sizeof(u16)*EFUSE_MAX_WORD_UNIT);
+                       if(eFuseWord[i]==NULL){
+                               DBG_8192C("eFuseWord[] malloc fail !\n");
+                               return;
+                       }
+               }
+       }
+
+       //
+       // Do NOT excess total size of EFuse table. Added by Roger, 2008.11.10.
+       //
+       if((_offset + _size_byte)>EFUSE_BT_MAP_LEN)
+       {
+               //RT_TRACE(COMP_EFUSE, DBG_LOUD, ("ReadEFuse_BT(): Invalid offset(%#x) with read bytes(%#x)!!\n",_offset, _size_byte));
+               return;
+       }
+
+       // 0. Refresh efuse init map as all oxFF.
+       for (i = 0; i < EFUSE_BT_MAX_SECTION; i++)
+               for (j = 0; j < EFUSE_MAX_WORD_UNIT; j++)
+                       eFuseWord[i][j] = 0xFFFF;
+
+       for(bank=1; bank<EFUSE_MAX_BANK; bank++)
+       {
+               if(!Hal_EfuseSwitchToBank(Adapter, bank, bPseudoTest))
+               {
+                       //RTPRINT(FEEPROM, EFUSE_READ_ALL, ("Hal_EfuseSwitchToBank() Fail!!\n"));
+                       return;
+               }
+               eFuse_Addr = 0;
+               //
+               // 1. Read the first byte to check if efuse is empty!!!
+               //
+               ReadEFuseByte(Adapter, eFuse_Addr++, &efuseHeader, bPseudoTest);
+
+               if(efuseHeader != 0xFF)
+               {
+                       efuse_utilized++;
+               }
+               else
+               {
+                       //RTPRINT(FEEPROM, EFUSE_READ_ALL, ("EFUSE is empty\n"));
+                       return;
+               }
+               //
+               // 2. Read real efuse content. Filter PG header and every section data.
+               //
+               while((efuseHeader != 0xFF) && AVAILABLE_EFUSE_ADDR(eFuse_Addr))
+               {
+                       //RTPRINT(FEEPROM, EFUSE_READ_ALL, ("efuse[%d]=0x%02x (header)\n", (((bank-1)*EFUSE_REAL_CONTENT_LEN)+eFuse_Addr-1), efuseHeader));
+
+                       // Check PG header for section num.
+                       if(EXT_HEADER(efuseHeader))             //extended header
+                       {
+                               offset_2_0 = GET_HDR_OFFSET_2_0(efuseHeader);
+                               //RTPRINT(FEEPROM, EFUSE_READ_ALL, ("extended header offset_2_0=%x\n", offset_2_0));
+
+                               ReadEFuseByte(Adapter, eFuse_Addr++, &efuseExtHdr, bPseudoTest);
+
+                               //RTPRINT(FEEPROM, EFUSE_READ_ALL, ("efuse[%d]=0x%02x (ext header)\n", (((bank-1)*EFUSE_REAL_CONTENT_LEN)+eFuse_Addr-1), efuseExtHdr));
+
+                               if(efuseExtHdr != 0xff)
+                               {
+                                       efuse_utilized++;
+                                       if(ALL_WORDS_DISABLED(efuseExtHdr))
+                                       {
+                                               ReadEFuseByte(Adapter, eFuse_Addr++, &efuseHeader, bPseudoTest);
+                                               if(efuseHeader != 0xff)
+                                               {
+                                                       efuse_utilized++;
+                                               }
+                                               continue;
+                                       }
+                                       else
+                                       {
+                                               offset = ((efuseExtHdr & 0xF0) >> 1) | offset_2_0;
+                                               wden = (efuseExtHdr & 0x0F);
+                                       }
+                               }
+                               else
+                               {
+                                       //RTPRINT(FEEPROM, EFUSE_READ_ALL, ("Error condition, extended = 0xff\n"));
+                                       // We should handle this condition.
+                               }
+                       }
+                       else
+                       {
+                               offset = ((efuseHeader >> 4) & 0x0f);
+                               wden = (efuseHeader & 0x0f);
+                       }
+
+                       if(offset < EFUSE_BT_MAX_SECTION)
+                       {
+                               // Get word enable value from PG header
+                               //RTPRINT(FEEPROM, EFUSE_READ_ALL, ("Offset-%d Worden=%x\n", offset, wden));
+
+                               for(i=0; i<EFUSE_MAX_WORD_UNIT; i++)
+                               {
+                                       // Check word enable condition in the section
+                                       if(!(wden & (0x01<<i)))
+                                       {
+                                               ReadEFuseByte(Adapter, eFuse_Addr++, &efuseData, bPseudoTest);
+                                               //RTPRINT(FEEPROM, EFUSE_READ_ALL, ("efuse[%d]=0x%02x\n", (((bank-1)*EFUSE_REAL_CONTENT_LEN)+eFuse_Addr-1), efuseData));
+                                               efuse_utilized++;
+                                               eFuseWord[offset][i] = (efuseData & 0xff);
+
+                                               if(!AVAILABLE_EFUSE_ADDR(eFuse_Addr))
+                                                       break;
+
+                                               ReadEFuseByte(Adapter, eFuse_Addr++, &efuseData, bPseudoTest);
+                                               //RTPRINT(FEEPROM, EFUSE_READ_ALL, ("efuse[%d]=0x%02x\n", (((bank-1)*EFUSE_REAL_CONTENT_LEN)+eFuse_Addr-1), efuseData));
+                                               efuse_utilized++;
+                                               eFuseWord[offset][i] |= (((u16)efuseData << 8) & 0xff00);
+
+                                               if(!AVAILABLE_EFUSE_ADDR(eFuse_Addr))
+                                                       break;
+                                       }
+                               }
+                       }
+
+                       // Read next PG header
+                       ReadEFuseByte(Adapter, eFuse_Addr++, &efuseHeader, bPseudoTest);
+
+                       if(efuseHeader != 0xFF)
+                       {
+                               efuse_utilized++;
+                       }
+                       else
+                       {
+                               if((eFuse_Addr + EFUSE_PROTECT_BYTES_BANK) >= EFUSE_REAL_CONTENT_LEN)
+                                       bCheckNextBank = _TRUE;
+                               else
+                                       bCheckNextBank = _FALSE;
+                       }
+               }
+               if(!bCheckNextBank)
+               {
+                       //RTPRINT(FEEPROM, EFUSE_READ_ALL, ("Stop to check next bank\n"));
+                       break;
+               }
+       }
+
+       // switch bank back to bank 0 for later BT and wifi use.
+       Hal_EfuseSwitchToBank(Adapter, 0, bPseudoTest);
+
+       //
+       // 3. Collect 16 sections and 4 word unit into Efuse map.
+       //
+       for(i=0; i<EFUSE_BT_MAX_SECTION; i++)
+       {
+               for(j=0; j<EFUSE_MAX_WORD_UNIT; j++)
+               {
+                       efuseTbl[(i*8)+(j*2)]=(eFuseWord[i][j] & 0xff);
+                       efuseTbl[(i*8)+((j*2)+1)]=((eFuseWord[i][j] >> 8) & 0xff);
+               }
+       }
+
+       //
+       // 4. Copy from Efuse map to output pointer memory!!!
+       //
+       for(i=0; i<_size_byte; i++)
+       {
+               pbuf[i] = efuseTbl[_offset+i];
+       }
+
+       //
+       // 5. Calculate Efuse utilization.
+       //
+       efuse_usage = (u8)((efuse_utilized*100)/EFUSE_BT_REAL_CONTENT_LEN);
+       if(bPseudoTest)
+       {
+               fakeBTEfuseUsedBytes =  (EFUSE_REAL_CONTENT_LEN*(bank-1))+eFuse_Addr-1;
+       }
+       else
+       {
+               BTEfuseUsedBytes =  (EFUSE_REAL_CONTENT_LEN*(bank-1))+eFuse_Addr-1;
+       }
+
+       for(i=0;i<EFUSE_BT_MAX_SECTION;i++)
+               rtw_mfree((u8 *)eFuseWord[i], sizeof(u16)*EFUSE_MAX_WORD_UNIT);
+       rtw_mfree((u8 *)eFuseWord, sizeof(u16 *)*EFUSE_BT_MAX_SECTION);
+       rtw_mfree(efuseTbl, EFUSE_BT_MAP_LEN);
+}
+
+
+static VOID
+ReadEFuseByIC(
+       PADAPTER        Adapter,
+       u8              efuseType,
+       u16              _offset,
+       u16             _size_byte,
+       u8              *pbuf,
+       IN BOOLEAN      bPseudoTest
+       )
+{
+       if(efuseType == EFUSE_WIFI)
+       {
+               if(IS_HARDWARE_TYPE_8192C(Adapter))
+               {
+                       ReadEFuse_RTL8192C(Adapter, _offset, _size_byte, pbuf, bPseudoTest);
+               }
+               else if(IS_HARDWARE_TYPE_8723A(Adapter))
+               {
+                       ReadEFuse_RTL8723(Adapter, _offset, _size_byte, pbuf, bPseudoTest);
+               }
+       }
+       else
+               ReadEFuse_BT(Adapter, _offset, _size_byte, pbuf, bPseudoTest);
+}
+
+static VOID
+ReadEFuse_Pseudo(
+       PADAPTER        Adapter,
+       u8              efuseType,
+       u16              _offset,
+       u16             _size_byte,
+       u8              *pbuf,
+       IN BOOLEAN      bPseudoTest
+       )
+{
+       if(efuseType == EFUSE_WIFI)
+               ReadEFuse_RTL8723(Adapter, _offset, _size_byte, pbuf, bPseudoTest);
+       else
+               ReadEFuse_BT(Adapter, _offset, _size_byte, pbuf, bPseudoTest);
+}
+
+static VOID
+rtl8192c_ReadEFuse(
+       PADAPTER        Adapter,
+       u8              efuseType,
+       u16             _offset,
+       u16             _size_byte,
+       u8              *pbuf,
+       IN      BOOLEAN bPseudoTest
+       )
+{
+       if(bPseudoTest)
+       {
+               ReadEFuse_Pseudo(Adapter, efuseType, _offset, _size_byte, pbuf, bPseudoTest);
+       }
+       else
+       {
+               ReadEFuseByIC(Adapter, efuseType, _offset, _size_byte, pbuf, bPseudoTest);
+       }
+}
+
+static VOID
+Hal_EFUSEGetEfuseDefinition(
+       IN              PADAPTER        pAdapter,
+       IN              u8              efuseType,
+       IN              u8              type,
+       OUT             PVOID           *pOut
+       )
+{
+       switch(type)
+       {
+               case TYPE_EFUSE_MAX_SECTION:
+                       {
+                               u8      *pMax_section;
+                               pMax_section = (u8 *)pOut;
+
+                               if(efuseType == EFUSE_WIFI)
+                               {
+                                       if(IS_HARDWARE_TYPE_8192C(pAdapter))
+                                       {
+                                               *pMax_section = EFUSE_MAX_SECTION;
+                                       }
+                                       else if(IS_HARDWARE_TYPE_8723A(pAdapter))
+                                       {
+                                               *pMax_section = EFUSE_MAX_SECTION_8723;
+                                       }
+                               }
+                               else
+                                       *pMax_section = EFUSE_BT_MAX_SECTION;
+                       }
+                       break;
+               case TYPE_EFUSE_REAL_CONTENT_LEN:
+                       {
+                               u16 *pu2Tmp;
+                               pu2Tmp = (u16 *)pOut;
+                               if(efuseType == EFUSE_WIFI)
+                                       *pu2Tmp = EFUSE_REAL_CONTENT_LEN;
+                               else
+                                       *pu2Tmp = EFUSE_BT_REAL_CONTENT_LEN;
+                       }
+                       break;
+               case TYPE_AVAILABLE_EFUSE_BYTES_BANK:
+                       {
+                               u16     *pu2Tmp;
+                               pu2Tmp = (u16 *)pOut;
+                               if(efuseType == EFUSE_WIFI)
+                                       *pu2Tmp = (u16)(EFUSE_REAL_CONTENT_LEN-EFUSE_OOB_PROTECT_BYTES);
+                               else
+                                       *pu2Tmp = (u16)(EFUSE_REAL_CONTENT_LEN-EFUSE_PROTECT_BYTES_BANK);
+                       }
+                       break;
+               case TYPE_AVAILABLE_EFUSE_BYTES_TOTAL:
+                       {
+                               u16 *pu2Tmp;
+                               pu2Tmp = (u16 *)pOut;
+                               if(efuseType == EFUSE_WIFI)
+                                       *pu2Tmp = (u16)(EFUSE_REAL_CONTENT_LEN-EFUSE_OOB_PROTECT_BYTES);
+                               else
+                                       *pu2Tmp = (u16)(EFUSE_BT_REAL_CONTENT_LEN-(EFUSE_PROTECT_BYTES_BANK*3));
+                       }
+                       break;
+               case TYPE_EFUSE_MAP_LEN:
+                       {
+                               u16 *pu2Tmp;
+                               pu2Tmp = (u16 *)pOut;
+
+                               if(efuseType == EFUSE_WIFI)
+                               {
+                                       if(IS_HARDWARE_TYPE_8192C(pAdapter))
+                                       {
+                                               *pu2Tmp = (u16)EFUSE_MAP_LEN;
+                                       }
+                                       else if(IS_HARDWARE_TYPE_8723A(pAdapter))
+                                       {
+                                               *pu2Tmp = (u16)EFUSE_MAP_LEN_8723;
+                                       }
+                               }
+                               else
+                                       *pu2Tmp = (u16)EFUSE_BT_MAP_LEN;
+                       }
+                       break;
+               case TYPE_EFUSE_PROTECT_BYTES_BANK:
+                       {
+                               u8 *pu1Tmp;
+                               pu1Tmp = (u8 *)pOut;
+                               if(efuseType == EFUSE_WIFI)
+                                       *pu1Tmp = (u8)(EFUSE_OOB_PROTECT_BYTES);
+                               else
+                                       *pu1Tmp = (u8)(EFUSE_PROTECT_BYTES_BANK);
+                       }
+                       break;
+               default:
+                       {
+                               u8 *pu1Tmp;
+                               pu1Tmp = (u8 *)pOut;
+                               *pu1Tmp = 0;
+                       }
+                       break;
+       }
+}
+
+static VOID
+Hal_EFUSEGetEfuseDefinition_Pseudo(
+       IN              PADAPTER        pAdapter,
+       IN              u8              efuseType,
+       IN              u8              type,
+       OUT             PVOID           *pOut
+       )
+{
+       switch(type)
+       {
+               case TYPE_EFUSE_MAX_SECTION:
+                       {
+                               u8      *pMax_section;
+                               pMax_section = (u8 *)pOut;
+                               if(efuseType == EFUSE_WIFI)
+                                       *pMax_section = EFUSE_MAX_SECTION_8723;
+                               else
+                                       *pMax_section = EFUSE_BT_MAX_SECTION;
+                       }
+                       break;
+               case TYPE_EFUSE_REAL_CONTENT_LEN:
+                       {
+                               u16 *pu2Tmp;
+                               pu2Tmp = (u16 *)pOut;
+                               if(efuseType == EFUSE_WIFI)
+                                       *pu2Tmp = EFUSE_REAL_CONTENT_LEN;
+                               else
+                                       *pu2Tmp = EFUSE_BT_REAL_CONTENT_LEN;
+                       }
+                       break;
+               case TYPE_AVAILABLE_EFUSE_BYTES_BANK:
+                       {
+                               u16 *pu2Tmp;
+                               pu2Tmp = (u16 *)pOut;
+                               if(efuseType == EFUSE_WIFI)
+                                       *pu2Tmp = (u16)(EFUSE_REAL_CONTENT_LEN-EFUSE_OOB_PROTECT_BYTES);
+                               else
+                                       *pu2Tmp = (u16)(EFUSE_REAL_CONTENT_LEN-EFUSE_PROTECT_BYTES_BANK);
+                       }
+                       break;
+               case TYPE_AVAILABLE_EFUSE_BYTES_TOTAL:
+                       {
+                               u16 *pu2Tmp;
+                               pu2Tmp = (u16 *)pOut;
+                               if(efuseType == EFUSE_WIFI)
+                                       *pu2Tmp = (u16)(EFUSE_REAL_CONTENT_LEN-EFUSE_OOB_PROTECT_BYTES);
+                               else
+                                       *pu2Tmp = (u16)(EFUSE_BT_REAL_CONTENT_LEN-(EFUSE_PROTECT_BYTES_BANK*3));
+                       }
+                       break;
+               case TYPE_EFUSE_MAP_LEN:
+                       {
+                               u16 *pu2Tmp;
+                               pu2Tmp = (u16 *)pOut;
+                               if(efuseType == EFUSE_WIFI)
+                                       *pu2Tmp = (u16)EFUSE_MAP_LEN_8723;
+                               else
+                                       *pu2Tmp = (u16)EFUSE_BT_MAP_LEN;
+                       }
+                       break;
+               case TYPE_EFUSE_PROTECT_BYTES_BANK:
+                       {
+                               u8 *pu1Tmp;
+                               pu1Tmp = (u8 *)pOut;
+                               if(efuseType == EFUSE_WIFI)
+                                       *pu1Tmp = (u8)(EFUSE_OOB_PROTECT_BYTES);
+                               else
+                                       *pu1Tmp = (u8)(EFUSE_PROTECT_BYTES_BANK);
+                       }
+                       break;
+               default:
+                       {
+                               u8 *pu1Tmp;
+                               pu1Tmp = (u8 *)pOut;
+                               *pu1Tmp = 0;
+                       }
+                       break;
+       }
+}
+
+static VOID
+rtl8192c_EFUSE_GetEfuseDefinition(
+       IN              PADAPTER        pAdapter,
+       IN              u8              efuseType,
+       IN              u8              type,
+       OUT             PVOID           *pOut,
+       IN              BOOLEAN         bPseudoTest
+       )
+{
+       if(bPseudoTest)
+       {
+               Hal_EFUSEGetEfuseDefinition_Pseudo(pAdapter, efuseType, type, pOut);
+       }
+       else
+       {
+               Hal_EFUSEGetEfuseDefinition(pAdapter, efuseType, type, pOut);
+       }
+}
+
+static u8
+Hal_EfuseWordEnableDataWrite(  IN      PADAPTER        pAdapter,
+                                                       IN      u16             efuse_addr,
+                                                       IN      u8              word_en,
+                                                       IN      u8              *data,
+                                                       IN      BOOLEAN         bPseudoTest)
+{
+       u16     tmpaddr = 0;
+       u16     start_addr = efuse_addr;
+       u8      badworden = 0x0F;
+       u8      tmpdata[8];
+
+       _rtw_memset((PVOID)tmpdata, 0xff, PGPKT_DATA_SIZE);
+       //RT_TRACE(COMP_EFUSE, DBG_LOUD, ("word_en = %x efuse_addr=%x\n", word_en, efuse_addr));
+
+       if(!(word_en&BIT0))
+       {
+               tmpaddr = start_addr;
+               efuse_OneByteWrite(pAdapter,start_addr++, data[0], bPseudoTest);
+               efuse_OneByteWrite(pAdapter,start_addr++, data[1], bPseudoTest);
+
+               efuse_OneByteRead(pAdapter,tmpaddr, &tmpdata[0], bPseudoTest);
+               efuse_OneByteRead(pAdapter,tmpaddr+1, &tmpdata[1], bPseudoTest);
+               if((data[0]!=tmpdata[0])||(data[1]!=tmpdata[1])){
+                       badworden &= (~BIT0);
+               }
+       }
+       if(!(word_en&BIT1))
+       {
+               tmpaddr = start_addr;
+               efuse_OneByteWrite(pAdapter,start_addr++, data[2], bPseudoTest);
+               efuse_OneByteWrite(pAdapter,start_addr++, data[3], bPseudoTest);
+
+               efuse_OneByteRead(pAdapter,tmpaddr    , &tmpdata[2], bPseudoTest);
+               efuse_OneByteRead(pAdapter,tmpaddr+1, &tmpdata[3], bPseudoTest);
+               if((data[2]!=tmpdata[2])||(data[3]!=tmpdata[3])){
+                       badworden &=( ~BIT1);
+               }
+       }
+       if(!(word_en&BIT2))
+       {
+               tmpaddr = start_addr;
+               efuse_OneByteWrite(pAdapter,start_addr++, data[4], bPseudoTest);
+               efuse_OneByteWrite(pAdapter,start_addr++, data[5], bPseudoTest);
+
+               efuse_OneByteRead(pAdapter,tmpaddr, &tmpdata[4], bPseudoTest);
+               efuse_OneByteRead(pAdapter,tmpaddr+1, &tmpdata[5], bPseudoTest);
+               if((data[4]!=tmpdata[4])||(data[5]!=tmpdata[5])){
+                       badworden &=( ~BIT2);
+               }
+       }
+       if(!(word_en&BIT3))
+       {
+               tmpaddr = start_addr;
+               efuse_OneByteWrite(pAdapter,start_addr++, data[6], bPseudoTest);
+               efuse_OneByteWrite(pAdapter,start_addr++, data[7], bPseudoTest);
+
+               efuse_OneByteRead(pAdapter,tmpaddr, &tmpdata[6], bPseudoTest);
+               efuse_OneByteRead(pAdapter,tmpaddr+1, &tmpdata[7], bPseudoTest);
+               if((data[6]!=tmpdata[6])||(data[7]!=tmpdata[7])){
+                       badworden &=( ~BIT3);
+               }
+       }
+       return badworden;
+}
+
+static u8
+Hal_EfuseWordEnableDataWrite_Pseudo(   IN      PADAPTER        pAdapter,
+                                                       IN      u16             efuse_addr,
+                                                       IN      u8              word_en,
+                                                       IN      u8              *data,
+                                                       IN      BOOLEAN         bPseudoTest)
+{
+       u8      ret=0;
+
+       ret = Hal_EfuseWordEnableDataWrite(pAdapter, efuse_addr, word_en, data, bPseudoTest);
+
+       return ret;
+}
+
+static u8
+rtl8192c_Efuse_WordEnableDataWrite(    IN      PADAPTER        pAdapter,
+                                                       IN      u16             efuse_addr,
+                                                       IN      u8              word_en,
+                                                       IN      u8              *data,
+                                                       IN      BOOLEAN         bPseudoTest)
+{
+       u8      ret=0;
+
+       if(bPseudoTest)
+       {
+               ret = Hal_EfuseWordEnableDataWrite_Pseudo(pAdapter, efuse_addr, word_en, data, bPseudoTest);
+       }
+       else
+       {
+               ret = Hal_EfuseWordEnableDataWrite(pAdapter, efuse_addr, word_en, data, bPseudoTest);
+       }
+
+       return ret;
+}
+
+
+static u16
+hal_EfuseGetCurrentSize_8192C(IN       PADAPTER        pAdapter,
+       IN              BOOLEAN         bPseudoTest)
+{
+       int bContinual = _TRUE;
+
+       u16     efuse_addr = 0;
+       u8      hoffset=0,hworden=0;
+       u8      efuse_data,word_cnts=0;
+
+       while ( bContinual &&
+                       efuse_OneByteRead(pAdapter, efuse_addr ,&efuse_data, bPseudoTest) &&
+                       (efuse_addr  < EFUSE_REAL_CONTENT_LEN) )
+       {
+               if(efuse_data!=0xFF)
+               {
+                       hoffset = (efuse_data>>4) & 0x0F;
+                       hworden =  efuse_data & 0x0F;
+                       word_cnts = Efuse_CalculateWordCnts(hworden);
+                       //read next header
+                       efuse_addr = efuse_addr + (word_cnts*2)+1;
+               }
+               else
+               {
+                       bContinual = _FALSE ;
+               }
+       }
+
+       return efuse_addr;
+}
+
+static u16
+Hal_EfuseGetCurrentSize_BT(IN  PADAPTER        pAdapter,
+               IN              BOOLEAN                 bPseudoTest)
+{
+       int     bContinual = _TRUE;
+       u16     efuse_addr = 0;
+       u8      hoffset=0,hworden=0;
+       u8      efuse_data,word_cnts=0;
+       u8      bank=0, startBank=0;
+       u16     retU2=0;
+       u32     total_efuse_used=0;
+
+       if(bPseudoTest)
+       {
+               efuse_addr = (u16)((fakeBTEfuseUsedBytes%EFUSE_REAL_CONTENT_LEN));
+               startBank = (u8)(1+(fakeBTEfuseUsedBytes/EFUSE_REAL_CONTENT_LEN));
+       }
+       else
+       {
+               efuse_addr = (u16)((BTEfuseUsedBytes%EFUSE_REAL_CONTENT_LEN));
+               startBank = (u8)(1+(BTEfuseUsedBytes/EFUSE_REAL_CONTENT_LEN));
+       }
+
+       if((startBank < 1) || (startBank >= EFUSE_MAX_BANK))
+               DBG_8192C("Error, bank error, bank=%d\n", bank);
+
+       //RTPRINT(FEEPROM, EFUSE_PG, ("Hal_EfuseGetCurrentSize_BT(), start bank=%d, start_efuse_addr = %d\n", startBank, efuse_addr));
+
+       for(bank=startBank; bank<EFUSE_MAX_BANK; bank++)
+       {
+               if(!Hal_EfuseSwitchToBank(pAdapter, bank, bPseudoTest))
+                       break;
+               else
+               {
+                       bContinual = _TRUE;
+                       if(bank != startBank)   // only when bank is switched we have to reset the efuse_addr.
+                               efuse_addr = 0;
+               }
+
+               while ( bContinual &&
+                               efuse_OneByteRead(pAdapter, efuse_addr ,&efuse_data, bPseudoTest) &&
+                               AVAILABLE_EFUSE_ADDR(efuse_addr))
+               {
+                       if(efuse_data!=0xFF)
+                       {
+                               if((efuse_data&0x1F) == 0x0F)           //extended header
+                               {
+                                       hoffset = efuse_data;
+                                       efuse_addr++;
+                                       efuse_OneByteRead(pAdapter, efuse_addr ,&efuse_data, bPseudoTest);
+                                       if((efuse_data & 0x0F) == 0x0F)
+                                       {
+                                               efuse_addr++;
+                                               continue;
+                                       }
+                                       else
+                                       {
+                                               hoffset = ((hoffset & 0xE0) >> 5) | ((efuse_data & 0xF0) >> 1);
+                                               hworden = efuse_data & 0x0F;
+                                       }
+                               }
+                               else
+                               {
+                                       hoffset = (efuse_data>>4) & 0x0F;
+                                       hworden =  efuse_data & 0x0F;
+                               }
+                               word_cnts = Efuse_CalculateWordCnts(hworden);
+                               //read next header
+                               efuse_addr = efuse_addr + (word_cnts*2)+1;
+                       }
+                       else
+                       {
+                               bContinual = _FALSE ;
+                       }
+               }
+
+               // Check if we need to check next bank efuse
+               if(efuse_addr < (EFUSE_REAL_CONTENT_LEN-EFUSE_PROTECT_BYTES_BANK))
+               {
+                       break;// don't need to check next bank.
+               }
+       }
+
+       retU2 = ((bank-1)*EFUSE_REAL_CONTENT_LEN)+efuse_addr;
+       if(bPseudoTest)
+       {
+               fakeBTEfuseUsedBytes = retU2;
+               //RTPRINT(FEEPROM, EFUSE_PG, ("Hal_EfuseGetCurrentSize_BT(), return %d\n", fakeBTEfuseUsedBytes));
+       }
+       else
+       {
+               BTEfuseUsedBytes = retU2;
+               //RTPRINT(FEEPROM, EFUSE_PG, ("Hal_EfuseGetCurrentSize_BT(), return %d\n", BTEfuseUsedBytes));
+       }
+
+       return retU2;
+}
+
+
+static u16
+hal_EfuseGetCurrentSize_8723(IN        PADAPTER        pAdapter,
+               IN              BOOLEAN                 bPseudoTest)
+{
+       int     bContinual = _TRUE;
+
+       u16     efuse_addr = 0;
+       u8      hoffset=0,hworden=0;
+       u8      efuse_data,word_cnts=0;
+
+       if(bPseudoTest)
+       {
+               efuse_addr = (u16)(fakeEfuseUsedBytes);
+       }
+       else
+       {
+               rtw_hal_get_hwreg(pAdapter, HW_VAR_EFUSE_BYTES, (u8 *)&efuse_addr);
+       }
+       //RTPRINT(FEEPROM, EFUSE_PG, ("hal_EfuseGetCurrentSize_8723(), start_efuse_addr = %d\n", efuse_addr));
+
+       while ( bContinual &&
+                       efuse_OneByteRead(pAdapter, efuse_addr ,&efuse_data, bPseudoTest) &&
+                       AVAILABLE_EFUSE_ADDR(efuse_addr))
+       {
+               if(efuse_data!=0xFF)
+               {
+                       if((efuse_data&0x1F) == 0x0F)           //extended header
+                       {
+                               hoffset = efuse_data;
+                               efuse_addr++;
+                               efuse_OneByteRead(pAdapter, efuse_addr ,&efuse_data, bPseudoTest);
+                               if((efuse_data & 0x0F) == 0x0F)
+                               {
+                                       efuse_addr++;
+                                       continue;
+                               }
+                               else
+                               {
+                                       hoffset = ((hoffset & 0xE0) >> 5) | ((efuse_data & 0xF0) >> 1);
+                                       hworden = efuse_data & 0x0F;
+                               }
+                       }
+                       else
+                       {
+                               hoffset = (efuse_data>>4) & 0x0F;
+                               hworden =  efuse_data & 0x0F;
+                       }
+                       word_cnts = Efuse_CalculateWordCnts(hworden);
+                       //read next header
+                       efuse_addr = efuse_addr + (word_cnts*2)+1;
+               }
+               else
+               {
+                       bContinual = _FALSE ;
+               }
+       }
+
+       if(bPseudoTest)
+       {
+               fakeEfuseUsedBytes = efuse_addr;
+               //RTPRINT(FEEPROM, EFUSE_PG, ("hal_EfuseGetCurrentSize_8723(), return %d\n", fakeEfuseUsedBytes));
+       }
+       else
+       {
+               rtw_hal_set_hwreg(pAdapter, HW_VAR_EFUSE_BYTES, (u8 *)&efuse_addr);
+               //RTPRINT(FEEPROM, EFUSE_PG, ("hal_EfuseGetCurrentSize_8723(), return %d\n", efuse_addr));
+       }
+
+       return efuse_addr;
+}
+
+static u16
+Hal_EfuseGetCurrentSize_Pseudo(IN      PADAPTER        pAdapter,
+               IN              BOOLEAN                 bPseudoTest)
+{
+       u16     ret=0;
+
+       ret = hal_EfuseGetCurrentSize_8723(pAdapter, bPseudoTest);
+
+       return ret;
+}
+
+static u16
+rtl8192c_EfuseGetCurrentSize(
+       IN      PADAPTER        pAdapter,
+       IN      u8                      efuseType,
+       IN      BOOLEAN         bPseudoTest)
+{
+       u16     ret=0;
+
+       if(efuseType == EFUSE_WIFI)
+       {
+               if(bPseudoTest)
+               {
+                       ret = Hal_EfuseGetCurrentSize_Pseudo(pAdapter, bPseudoTest);
+               }
+               else
+               {
+                       if(IS_HARDWARE_TYPE_8192C(pAdapter))
+                       {
+                               ret = hal_EfuseGetCurrentSize_8192C(pAdapter, bPseudoTest);
+                       }
+                       else if(IS_HARDWARE_TYPE_8723A(pAdapter))
+                       {
+                               ret = hal_EfuseGetCurrentSize_8723(pAdapter, bPseudoTest);
+                       }
+               }
+       }
+       else
+       {
+               ret = Hal_EfuseGetCurrentSize_BT(pAdapter, bPseudoTest);
+       }
+
+       return ret;
+}
+
+static int
+hal_EfusePgPacketRead_8192C(   IN      PADAPTER        pAdapter,
+                                       IN      u8                      offset,
+                                       IN      u8                      *data,
+                                       IN      BOOLEAN                 bPseudoTest)
+{
+       u8      ReadState = PG_STATE_HEADER;
+
+       int     bContinual = _TRUE;
+       int     bDataEmpty = _TRUE ;
+
+       u8      efuse_data,word_cnts=0;
+       u16     efuse_addr = 0;
+       u8      hoffset=0,hworden=0;
+       u8      tmpidx=0;
+       u8      tmpdata[8];
+
+       if(data==NULL)  return _FALSE;
+       if(offset>15)           return _FALSE;
+
+
+       _rtw_memset((PVOID)data, 0xff, sizeof(u8)*PGPKT_DATA_SIZE);
+       _rtw_memset((PVOID)tmpdata, 0xff, sizeof(u8)*PGPKT_DATA_SIZE);
+
+       //
+       // <Roger_TODO> Efuse has been pre-programmed dummy 5Bytes at the end of Efuse by CP.
+       // Skip dummy parts to prevent unexpected data read from Efuse.
+       // By pass right now. 2009.02.19.
+       //
+       while(bContinual && (efuse_addr  < EFUSE_REAL_CONTENT_LEN) )
+       {
+               //-------  Header Read -------------
+               if(ReadState & PG_STATE_HEADER)
+               {
+                       if(efuse_OneByteRead(pAdapter, efuse_addr ,&efuse_data, bPseudoTest)&&(efuse_data!=0xFF)){
+                               hoffset = (efuse_data>>4) & 0x0F;
+                               hworden =  efuse_data & 0x0F;
+                               word_cnts = Efuse_CalculateWordCnts(hworden);
+                               bDataEmpty = _TRUE ;
+
+                               if(hoffset==offset){
+                                       for(tmpidx = 0;tmpidx< word_cnts*2 ;tmpidx++){
+                                               if(efuse_OneByteRead(pAdapter, efuse_addr+1+tmpidx ,&efuse_data, bPseudoTest) ){
+                                                       tmpdata[tmpidx] = efuse_data;
+                                                       if(efuse_data!=0xff){
+                                                               bDataEmpty = _FALSE;
+                                                       }
+                                               }
+                                       }
+                                       if(bDataEmpty==_FALSE){
+                                               ReadState = PG_STATE_DATA;
+                                       }else{//read next header
+                                               efuse_addr = efuse_addr + (word_cnts*2)+1;
+                                               ReadState = PG_STATE_HEADER;
+                                       }
+                               }
+                               else{//read next header
+                                       efuse_addr = efuse_addr + (word_cnts*2)+1;
+                                       ReadState = PG_STATE_HEADER;
+                               }
+
+                       }
+                       else{
+                               bContinual = _FALSE ;
+                       }
+               }
+               //-------  Data section Read -------------
+               else if(ReadState & PG_STATE_DATA)
+               {
+                       efuse_WordEnableDataRead(hworden,tmpdata,data);
+                       efuse_addr = efuse_addr + (word_cnts*2)+1;
+                       ReadState = PG_STATE_HEADER;
+               }
+
+       }
+
+       if(     (data[0]==0xff) &&(data[1]==0xff) && (data[2]==0xff)  && (data[3]==0xff) &&
+               (data[4]==0xff) &&(data[5]==0xff) && (data[6]==0xff)  && (data[7]==0xff))
+               return _FALSE;
+       else
+               return _TRUE;
+
+}
+
+static int
+hal_EfusePgPacketRead_8723(    IN      PADAPTER        pAdapter,
+                                       IN      u8                      offset,
+                                       IN      u8                      *data,
+                                       IN      BOOLEAN                 bPseudoTest)
+{
+       u8      ReadState = PG_STATE_HEADER;
+
+       int     bContinual = _TRUE;
+       int     bDataEmpty = _TRUE ;
+
+       u8      efuse_data,word_cnts=0;
+       u16     efuse_addr = 0;
+       u8      hoffset=0,hworden=0;
+       u8      tmpidx=0;
+       u8      tmpdata[8];
+       u8      max_section=0;
+       u8      tmp_header = 0;
+
+       EFUSE_GetEfuseDefinition(pAdapter, EFUSE_WIFI, TYPE_EFUSE_MAX_SECTION, (PVOID)&max_section, bPseudoTest);
+
+       if(data==NULL)
+               return _FALSE;
+       if(offset>max_section)
+               return _FALSE;
+
+       _rtw_memset((PVOID)data, 0xff, sizeof(u8)*PGPKT_DATA_SIZE);
+       _rtw_memset((PVOID)tmpdata, 0xff, sizeof(u8)*PGPKT_DATA_SIZE);
+
+
+       //
+       // <Roger_TODO> Efuse has been pre-programmed dummy 5Bytes at the end of Efuse by CP.
+       // Skip dummy parts to prevent unexpected data read from Efuse.
+       // By pass right now. 2009.02.19.
+       //
+       while(bContinual && AVAILABLE_EFUSE_ADDR(efuse_addr) )
+       {
+               //-------  Header Read -------------
+               if(ReadState & PG_STATE_HEADER)
+               {
+                       if(efuse_OneByteRead(pAdapter, efuse_addr ,&efuse_data, bPseudoTest)&&(efuse_data!=0xFF))
+                       {
+                               if(EXT_HEADER(efuse_data))
+                               {
+                                       tmp_header = efuse_data;
+                                       efuse_addr++;
+                                       efuse_OneByteRead(pAdapter, efuse_addr ,&efuse_data, bPseudoTest);
+                                       if(!ALL_WORDS_DISABLED(efuse_data))
+                                       {
+                                               hoffset = ((tmp_header & 0xE0) >> 5) | ((efuse_data & 0xF0) >> 1);
+                                               hworden = efuse_data & 0x0F;
+                                       }
+                                       else
+                                       {
+                                               DBG_8192C("Error, All words disabled\n");
+                                               efuse_addr++;
+                                               continue;
+                                       }
+                               }
+                               else
+                               {
+                                       hoffset = (efuse_data>>4) & 0x0F;
+                                       hworden =  efuse_data & 0x0F;
+                               }
+                               word_cnts = Efuse_CalculateWordCnts(hworden);
+                               bDataEmpty = _TRUE ;
+
+                               if(hoffset==offset)
+                               {
+                                       for(tmpidx = 0;tmpidx< word_cnts*2 ;tmpidx++)
+                                       {
+                                               if(efuse_OneByteRead(pAdapter, efuse_addr+1+tmpidx ,&efuse_data, bPseudoTest) )
+                                               {
+                                                       tmpdata[tmpidx] = efuse_data;
+                                                       if(efuse_data!=0xff)
+                                                       {
+                                                               bDataEmpty = _FALSE;
+                                                       }
+                                               }
+                                       }
+                                       if(bDataEmpty==_FALSE){
+                                               ReadState = PG_STATE_DATA;
+                                       }else{//read next header
+                                               efuse_addr = efuse_addr + (word_cnts*2)+1;
+                                               ReadState = PG_STATE_HEADER;
+                                       }
+                               }
+                               else{//read next header
+                                       efuse_addr = efuse_addr + (word_cnts*2)+1;
+                                       ReadState = PG_STATE_HEADER;
+                               }
+
+                       }
+                       else{
+                               bContinual = _FALSE ;
+                       }
+               }
+               //-------  Data section Read -------------
+               else if(ReadState & PG_STATE_DATA)
+               {
+                       efuse_WordEnableDataRead(hworden,tmpdata,data);
+                       efuse_addr = efuse_addr + (word_cnts*2)+1;
+                       ReadState = PG_STATE_HEADER;
+               }
+
+       }
+
+       if(     (data[0]==0xff) &&(data[1]==0xff) && (data[2]==0xff)  && (data[3]==0xff) &&
+               (data[4]==0xff) &&(data[5]==0xff) && (data[6]==0xff)  && (data[7]==0xff))
+               return _FALSE;
+       else
+               return _TRUE;
+
+}
+
+static int
+Hal_EfusePgPacketRead( IN      PADAPTER        pAdapter,
+                                       IN      u8                      offset,
+                                       IN      u8                      *data,
+                                       IN      BOOLEAN                 bPseudoTest)
+{
+       int     ret=0;
+
+       if(IS_HARDWARE_TYPE_8192C(pAdapter))
+       {
+               ret = hal_EfusePgPacketRead_8192C(pAdapter, offset, data, bPseudoTest);
+       }
+       else if(IS_HARDWARE_TYPE_8723A(pAdapter))
+       {
+               ret = hal_EfusePgPacketRead_8723(pAdapter, offset, data, bPseudoTest);
+       }
+
+       return ret;
+}
+
+static int
+Hal_EfusePgPacketRead_Pseudo(  IN      PADAPTER        pAdapter,
+                                       IN      u8                      offset,
+                                       IN      u8                      *data,
+                                       IN      BOOLEAN         bPseudoTest)
+{
+       int     ret=0;
+
+       ret = hal_EfusePgPacketRead_8723(pAdapter, offset, data, bPseudoTest);
+
+       return ret;
+}
+
+static int
+rtl8192c_Efuse_PgPacketRead(   IN      PADAPTER        pAdapter,
+                                       IN      u8                      offset,
+                                       IN      u8                      *data,
+                                       IN      BOOLEAN         bPseudoTest)
+{
+       int     ret=0;
+
+       if(bPseudoTest)
+       {
+               ret = Hal_EfusePgPacketRead_Pseudo(pAdapter, offset, data, bPseudoTest);
+       }
+       else
+       {
+               ret = Hal_EfusePgPacketRead(pAdapter, offset, data, bPseudoTest);
+       }
+
+       return ret;
+}
+
+static BOOLEAN
+hal_EfuseFixHeaderProcess(
+       IN              PADAPTER                        pAdapter,
+       IN              u8                                      efuseType,
+       IN              PPGPKT_STRUCT           pFixPkt,
+       IN              u16                                     *pAddr,
+       IN              BOOLEAN                         bPseudoTest
+)
+{
+       u8      originaldata[8], badworden=0;
+       u16     efuse_addr=*pAddr;
+       u32     PgWriteSuccess=0;
+
+       _rtw_memset((PVOID)originaldata, 0xff, 8);
+
+       if(Efuse_PgPacketRead(pAdapter, pFixPkt->offset, originaldata, bPseudoTest))
+       {       //check if data exist
+               badworden = Efuse_WordEnableDataWrite(pAdapter, efuse_addr+1, pFixPkt->word_en, originaldata, bPseudoTest);
+
+               if(badworden != 0xf)    // write fail
+               {
+                       if(efuseType == EFUSE_WIFI)
+                               PgWriteSuccess = Efuse_PgPacketWrite(pAdapter, pFixPkt->offset, badworden, originaldata, bPseudoTest);
+                       else
+                               PgWriteSuccess = hal_EfusePgPacketWrite_BT(pAdapter, pFixPkt->offset, badworden, originaldata, bPseudoTest);
+                       if(!PgWriteSuccess)
+                               return _FALSE;
+                       else
+                               efuse_addr = Efuse_GetCurrentSize(pAdapter, efuseType, bPseudoTest);
+               }
+               else
+               {
+                       efuse_addr = efuse_addr + (pFixPkt->word_cnts*2) +1;
+               }
+       }
+       else
+       {
+               efuse_addr = efuse_addr + (pFixPkt->word_cnts*2) +1;
+       }
+       *pAddr = efuse_addr;
+       return _TRUE;
+}
+
+static BOOLEAN
+hal_EfusePgPacketWrite2ByteHeader(
+       IN                      PADAPTER                pAdapter,
+       IN                      u8                              efuseType,
+       IN                      u16                             *pAddr,
+       IN                      PPGPKT_STRUCT   pTargetPkt,
+       IN                      BOOLEAN                 bPseudoTest)
+{
+       BOOLEAN         bRet=_FALSE, bContinual=_TRUE;
+       u16     efuse_addr=*pAddr, efuse_max_available_len=0;
+       u8      pg_header=0, tmp_header=0, pg_header_temp=0;
+       u8      repeatcnt=0;
+
+       //RTPRINT(FEEPROM, EFUSE_PG, ("Wirte 2byte header\n"));
+       EFUSE_GetEfuseDefinition(pAdapter, efuseType, TYPE_AVAILABLE_EFUSE_BYTES_BANK, (PVOID)&efuse_max_available_len, bPseudoTest);
+
+       while(efuse_addr < efuse_max_available_len)
+       {
+               pg_header = ((pTargetPkt->offset & 0x07) << 5) | 0x0F;
+               //RTPRINT(FEEPROM, EFUSE_PG, ("pg_header = 0x%x\n", pg_header));
+               efuse_OneByteWrite(pAdapter, efuse_addr, pg_header, bPseudoTest);
+               efuse_OneByteRead(pAdapter, efuse_addr, &tmp_header, bPseudoTest);
+
+               while(tmp_header == 0xFF)
+               {
+                       if(repeatcnt++ > EFUSE_REPEAT_THRESHOLD_)
+                       {
+                               //RTPRINT(FEEPROM, EFUSE_PG, ("Repeat over limit for pg_header!!\n"));
+                               return _FALSE;
+                       }
+
+                       efuse_OneByteWrite(pAdapter, efuse_addr, pg_header, bPseudoTest);
+                       efuse_OneByteRead(pAdapter, efuse_addr, &tmp_header, bPseudoTest);
+               }
+
+               //to write ext_header
+               if(tmp_header == pg_header)
+               {
+                       efuse_addr++;
+                       pg_header_temp = pg_header;
+                       pg_header = ((pTargetPkt->offset & 0x78) << 1) | pTargetPkt->word_en;
+
+                       efuse_OneByteWrite(pAdapter, efuse_addr, pg_header, bPseudoTest);
+                       efuse_OneByteRead(pAdapter, efuse_addr, &tmp_header, bPseudoTest);
+
+                       while(tmp_header == 0xFF)
+                       {
+                               if(repeatcnt++ > EFUSE_REPEAT_THRESHOLD_)
+                               {
+                                       //RTPRINT(FEEPROM, EFUSE_PG, ("Repeat over limit for ext_header!!\n"));
+                                       return _FALSE;
+                               }
+
+                               efuse_OneByteWrite(pAdapter, efuse_addr, pg_header, bPseudoTest);
+                               efuse_OneByteRead(pAdapter, efuse_addr, &tmp_header, bPseudoTest);
+                       }
+
+                       if((tmp_header & 0x0F) == 0x0F) //word_en PG fail
+                       {
+                               if(repeatcnt++ > EFUSE_REPEAT_THRESHOLD_)
+                               {
+                                       //RTPRINT(FEEPROM, EFUSE_PG, ("Repeat over limit for word_en!!\n"));
+                                       return _FALSE;
+                               }
+                               else
+                               {
+                                       efuse_addr++;
+                                       continue;
+                               }
+                       }
+                       else if(pg_header != tmp_header)        //offset PG fail
+                       {
+                               PGPKT_STRUCT    fixPkt;
+                               //RTPRINT(FEEPROM, EFUSE_PG, ("Error condition for offset PG fail, need to cover the existed data\n"));
+                               fixPkt.offset = ((pg_header_temp & 0xE0) >> 5) | ((tmp_header & 0xF0) >> 1);
+                               fixPkt.word_en = tmp_header & 0x0F;
+                               fixPkt.word_cnts = Efuse_CalculateWordCnts(fixPkt.word_en);
+                               if(!hal_EfuseFixHeaderProcess(pAdapter, efuseType, &fixPkt, &efuse_addr, bPseudoTest))
+                                       return _FALSE;
+                       }
+                       else
+                       {
+                               bRet = _TRUE;
+                               break;
+                       }
+               }
+               else if ((tmp_header & 0x1F) == 0x0F)           //wrong extended header
+               {
+                       efuse_addr+=2;
+                       continue;
+               }
+       }
+
+       *pAddr = efuse_addr;
+       return bRet;
+}
+
+static BOOLEAN
+hal_EfusePgPacketWrite1ByteHeader(
+       IN                      PADAPTER                pAdapter,
+       IN                      u8                              efuseType,
+       IN                      u16                             *pAddr,
+       IN                      PPGPKT_STRUCT   pTargetPkt,
+       IN                      BOOLEAN                 bPseudoTest)
+{
+       BOOLEAN         bRet=_FALSE;
+       u8      pg_header=0, tmp_header=0;
+       u16     efuse_addr=*pAddr;
+       u8      repeatcnt=0;
+
+       //RTPRINT(FEEPROM, EFUSE_PG, ("Wirte 1byte header\n"));
+       pg_header = ((pTargetPkt->offset << 4) & 0xf0) |pTargetPkt->word_en;
+
+       efuse_OneByteWrite(pAdapter, efuse_addr, pg_header, bPseudoTest);
+       efuse_OneByteRead(pAdapter, efuse_addr, &tmp_header, bPseudoTest);
+
+       while(tmp_header == 0xFF)
+       {
+               if(repeatcnt++ > EFUSE_REPEAT_THRESHOLD_)
+               {
+                       return _FALSE;
+               }
+               efuse_OneByteWrite(pAdapter,efuse_addr, pg_header, bPseudoTest);
+               efuse_OneByteRead(pAdapter,efuse_addr, &tmp_header, bPseudoTest);
+       }
+
+       if(pg_header == tmp_header)
+       {
+               bRet = _TRUE;
+       }
+       else
+       {
+               PGPKT_STRUCT    fixPkt;
+               //RTPRINT(FEEPROM, EFUSE_PG, ("Error condition for fixed PG packet, need to cover the existed data\n"));
+               fixPkt.offset = (tmp_header>>4) & 0x0F;
+               fixPkt.word_en = tmp_header & 0x0F;
+               fixPkt.word_cnts = Efuse_CalculateWordCnts(fixPkt.word_en);
+               if(!hal_EfuseFixHeaderProcess(pAdapter, efuseType, &fixPkt, &efuse_addr, bPseudoTest))
+                       return _FALSE;
+       }
+
+       *pAddr = efuse_addr;
+       return bRet;
+}
+
+static BOOLEAN
+hal_EfusePgPacketWriteData(
+       IN                      PADAPTER                pAdapter,
+       IN                      u8                              efuseType,
+       IN                      u16                             *pAddr,
+       IN                      PPGPKT_STRUCT   pTargetPkt,
+       IN                      BOOLEAN                 bPseudoTest)
+{
+       BOOLEAN bRet=_FALSE;
+       u16     efuse_addr=*pAddr;
+       u8      badworden=0;
+       u32     PgWriteSuccess=0;
+
+       badworden = 0x0f;
+       badworden = Efuse_WordEnableDataWrite(pAdapter, efuse_addr+1, pTargetPkt->word_en, pTargetPkt->data, bPseudoTest);
+       if(badworden == 0x0F)
+       {
+               // write ok
+               //RTPRINT(FEEPROM, EFUSE_PG, ("hal_EfusePgPacketWriteData ok!!\n"));
+               return _TRUE;
+       }
+       else
+       {
+               //RTPRINT(FEEPROM, EFUSE_PG, ("hal_EfusePgPacketWriteData Fail!!\n"));
+               //reorganize other pg packet
+               if(efuseType == EFUSE_WIFI)
+                       PgWriteSuccess = Efuse_PgPacketWrite(pAdapter, pTargetPkt->offset, badworden, pTargetPkt->data, bPseudoTest);
+               else
+                       PgWriteSuccess = hal_EfusePgPacketWrite_BT(pAdapter, pTargetPkt->offset, badworden, pTargetPkt->data, bPseudoTest);
+               if(!PgWriteSuccess)
+                       return _FALSE;
+               else
+                       return _TRUE;
+       }
+
+       return bRet;
+}
+
+static BOOLEAN
+hal_EfusePgPacketWriteHeader(
+       IN                      PADAPTER                pAdapter,
+       IN                      u8                              efuseType,
+       IN                      u16                             *pAddr,
+       IN                      PPGPKT_STRUCT   pTargetPkt,
+       IN                      BOOLEAN                 bPseudoTest)
+{
+       BOOLEAN         bRet=_FALSE;
+
+       if(pTargetPkt->offset >= EFUSE_MAX_SECTION_BASE)
+       {
+               bRet = hal_EfusePgPacketWrite2ByteHeader(pAdapter, efuseType, pAddr, pTargetPkt, bPseudoTest);
+       }
+       else
+       {
+               bRet = hal_EfusePgPacketWrite1ByteHeader(pAdapter, efuseType, pAddr, pTargetPkt, bPseudoTest);
+       }
+
+       return bRet;
+}
+
+static BOOLEAN
+hal_EfusePgCheckAvailableAddr(
+       IN      PADAPTER        pAdapter,
+       IN      u8                      efuseType,
+       IN      BOOLEAN         bPseudoTest
+       )
+{
+       u16     efuse_max_available_len=0;
+
+       EFUSE_GetEfuseDefinition(pAdapter, efuseType, TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, (PVOID)&efuse_max_available_len, bPseudoTest);
+       //RTPRINT(FEEPROM, EFUSE_PG, ("efuse_max_available_len = %d\n", efuse_max_available_len));
+
+       if(Efuse_GetCurrentSize(pAdapter, efuseType, bPseudoTest) >= efuse_max_available_len)
+       {
+               //RTPRINT(FEEPROM, EFUSE_PG, ("hal_EfusePgCheckAvailableAddr error!!\n"));
+               return _FALSE;
+       }
+       return _TRUE;
+}
+
+static VOID
+hal_EfuseConstructPGPkt(
+                                       IN      u8                              offset,
+                                       IN      u8                              word_en,
+                                       IN      u8                              *pData,
+                                       IN      PPGPKT_STRUCT   pTargetPkt
+
+)
+{
+       _rtw_memset((PVOID)pTargetPkt->data, 0xFF, sizeof(u8)*8);
+       pTargetPkt->offset = offset;
+       pTargetPkt->word_en= word_en;
+       efuse_WordEnableDataRead(word_en, pData, pTargetPkt->data);
+       pTargetPkt->word_cnts = Efuse_CalculateWordCnts(pTargetPkt->word_en);
+
+       //RTPRINT(FEEPROM, EFUSE_PG, ("hal_EfuseConstructPGPkt(), targetPkt, offset=%d, word_en=0x%x, word_cnts=%d\n", pTargetPkt->offset, pTargetPkt->word_en, pTargetPkt->word_cnts));
+}
+
+static BOOLEAN
+hal_EfuseCheckIfDatafollowed(
+       IN              PADAPTER                pAdapter,
+       IN              u8                              word_cnts,
+       IN              u16                             startAddr,
+       IN              BOOLEAN                 bPseudoTest
+       )
+{
+       BOOLEAN         bRet=_FALSE;
+       u8      i, efuse_data;
+
+       for(i=0; i<(word_cnts*2) ; i++)
+       {
+               if(efuse_OneByteRead(pAdapter, (startAddr+i) ,&efuse_data, bPseudoTest)&&(efuse_data != 0xFF))
+                       bRet = _TRUE;
+       }
+
+       return bRet;
+}
+
+static BOOLEAN
+wordEnMatched(
+       IN      PPGPKT_STRUCT   pTargetPkt,
+       IN      PPGPKT_STRUCT   pCurPkt,
+       IN      u8                              *pWden
+)
+{
+       u8      match_word_en = 0x0F;   // default all words are disabled
+       u8      i;
+
+       // check if the same words are enabled both target and current PG packet
+       if( ((pTargetPkt->word_en & BIT0) == 0) &&
+               ((pCurPkt->word_en & BIT0) == 0) )
+       {
+               match_word_en &= ~BIT0;                         // enable word 0
+       }
+       if( ((pTargetPkt->word_en & BIT1) == 0) &&
+               ((pCurPkt->word_en & BIT1) == 0) )
+       {
+               match_word_en &= ~BIT1;                         // enable word 1
+       }
+       if( ((pTargetPkt->word_en & BIT2) == 0) &&
+               ((pCurPkt->word_en & BIT2) == 0) )
+       {
+               match_word_en &= ~BIT2;                         // enable word 2
+       }
+       if( ((pTargetPkt->word_en & BIT3) == 0) &&
+               ((pCurPkt->word_en & BIT3) == 0) )
+       {
+               match_word_en &= ~BIT3;                         // enable word 3
+       }
+
+       *pWden = match_word_en;
+
+       if(match_word_en != 0xf)
+               return _TRUE;
+       else
+               return _FALSE;
+}
+
+static BOOLEAN
+hal_EfusePartialWriteCheck(
+                                       IN      PADAPTER                pAdapter,
+                                       IN      u8                              efuseType,
+                                       IN      u16                             *pAddr,
+                                       IN      PPGPKT_STRUCT   pTargetPkt,
+                                       IN      BOOLEAN                 bPseudoTest
+                                       )
+{
+       BOOLEAN         bRet=_FALSE;
+       u8      i, efuse_data=0, cur_header=0;
+       u8      new_wden=0, matched_wden=0, badworden=0;
+       u16     startAddr=0, efuse_max_available_len=0, efuse_max=0;
+       PGPKT_STRUCT    curPkt;
+
+       EFUSE_GetEfuseDefinition(pAdapter, efuseType, TYPE_AVAILABLE_EFUSE_BYTES_BANK, (PVOID)&efuse_max_available_len, bPseudoTest);
+       EFUSE_GetEfuseDefinition(pAdapter, efuseType, TYPE_EFUSE_REAL_CONTENT_LEN, (PVOID)&efuse_max, bPseudoTest);
+
+       if(efuseType == EFUSE_WIFI)
+       {
+               if(bPseudoTest)
+               {
+                       startAddr = (u16)(fakeEfuseUsedBytes%EFUSE_REAL_CONTENT_LEN);
+               }
+               else
+               {
+                       rtw_hal_get_hwreg(pAdapter, HW_VAR_EFUSE_BYTES, (u8 *)&startAddr);
+                       startAddr%=EFUSE_REAL_CONTENT_LEN;
+               }
+       }
+       else
+       {
+               if(bPseudoTest)
+               {
+                       startAddr = (u16)(fakeBTEfuseUsedBytes%EFUSE_REAL_CONTENT_LEN);
+               }
+               else
+               {
+                       startAddr = (u16)(BTEfuseUsedBytes%EFUSE_REAL_CONTENT_LEN);
+               }
+       }
+       //RTPRINT(FEEPROM, EFUSE_PG, ("hal_EfusePartialWriteCheck(), startAddr=%d\n", startAddr));
+
+       while(1)
+       {
+               if(startAddr >= efuse_max_available_len)
+               {
+                       bRet = _FALSE;
+                       break;
+               }
+
+               if(efuse_OneByteRead(pAdapter, startAddr, &efuse_data, bPseudoTest) && (efuse_data!=0xFF))
+               {
+                       if(EXT_HEADER(efuse_data))
+                       {
+                               cur_header = efuse_data;
+                               startAddr++;
+                               efuse_OneByteRead(pAdapter, startAddr, &efuse_data, bPseudoTest);
+                               if(ALL_WORDS_DISABLED(efuse_data))
+                               {
+                                       //RTPRINT(FEEPROM, EFUSE_PG, ("Error condition, all words disabled"));
+                                       bRet = _FALSE;
+                                       break;
+                               }
+                               else
+                               {
+                                       curPkt.offset = ((cur_header & 0xE0) >> 5) | ((efuse_data & 0xF0) >> 1);
+                                       curPkt.word_en = efuse_data & 0x0F;
+                               }
+                       }
+                       else
+                       {
+                               cur_header  =  efuse_data;
+                               curPkt.offset = (cur_header>>4) & 0x0F;
+                               curPkt.word_en = cur_header & 0x0F;
+                       }
+
+                       curPkt.word_cnts = Efuse_CalculateWordCnts(curPkt.word_en);
+                       // if same header is found but no data followed
+                       // write some part of data followed by the header.
+                       if( (curPkt.offset == pTargetPkt->offset) &&
+                               (!hal_EfuseCheckIfDatafollowed(pAdapter, curPkt.word_cnts, startAddr+1, bPseudoTest)) &&
+                               wordEnMatched(pTargetPkt, &curPkt, &matched_wden) )
+                       {
+                               //RTPRINT(FEEPROM, EFUSE_PG, ("Need to partial write data by the previous wrote header\n"));
+                               // Here to write partial data
+                               badworden = Efuse_WordEnableDataWrite(pAdapter, startAddr+1, matched_wden, pTargetPkt->data, bPseudoTest);
+                               if(badworden != 0x0F)
+                               {
+                                       u32     PgWriteSuccess=0;
+                                       // if write fail on some words, write these bad words again
+                                       if(efuseType == EFUSE_WIFI)
+                                               PgWriteSuccess = Efuse_PgPacketWrite(pAdapter, pTargetPkt->offset, badworden, pTargetPkt->data, bPseudoTest);
+                                       else
+                                               PgWriteSuccess = hal_EfusePgPacketWrite_BT(pAdapter, pTargetPkt->offset, badworden, pTargetPkt->data, bPseudoTest);
+
+                                       if(!PgWriteSuccess)
+                                       {
+                                               bRet = _FALSE;  // write fail, return
+                                               break;
+                                       }
+                               }
+                               // partial write ok, update the target packet for later use
+                               for(i=0; i<4; i++)
+                               {
+                                       if((matched_wden & (0x1<<i)) == 0)      // this word has been written
+                                       {
+                                               pTargetPkt->word_en |= (0x1<<i);        // disable the word
+                                       }
+                               }
+                               pTargetPkt->word_cnts = Efuse_CalculateWordCnts(pTargetPkt->word_en);
+                       }
+                       // read from next header
+                       startAddr = startAddr + (curPkt.word_cnts*2) +1;
+               }
+               else
+               {
+                       // not used header, 0xff
+                       *pAddr = startAddr;
+                       //RTPRINT(FEEPROM, EFUSE_PG, ("Started from unused header offset=%d\n", startAddr));
+                       bRet = _TRUE;
+                       break;
+               }
+       }
+       return bRet;
+}
+
+static BOOLEAN
+hal_EfusePgPacketWrite_BT(
+                                       IN      PADAPTER        pAdapter,
+                                       IN      u8                      offset,
+                                       IN      u8                      word_en,
+                                       IN      u8                      *pData,
+                                       IN      BOOLEAN         bPseudoTest
+                                       )
+{
+       PGPKT_STRUCT    targetPkt;
+       u16     startAddr=0;
+       u8      efuseType=EFUSE_BT;
+
+       if(!hal_EfusePgCheckAvailableAddr(pAdapter, efuseType, bPseudoTest))
+               return _FALSE;
+
+       hal_EfuseConstructPGPkt(offset, word_en, pData, &targetPkt);
+
+       if(!hal_EfusePartialWriteCheck(pAdapter, efuseType, &startAddr, &targetPkt, bPseudoTest))
+               return _FALSE;
+
+       if(!hal_EfusePgPacketWriteHeader(pAdapter, efuseType, &startAddr, &targetPkt, bPseudoTest))
+               return _FALSE;
+
+       if(!hal_EfusePgPacketWriteData(pAdapter, efuseType, &startAddr, &targetPkt, bPseudoTest))
+               return _FALSE;
+
+       return _TRUE;
+}
+
+static BOOLEAN
+hal_EfusePgPacketWrite_8723(
+                                       IN      PADAPTER                pAdapter,
+                                       IN      u8                      offset,
+                                       IN      u8                      word_en,
+                                       IN      u8                      *pData,
+                                       IN      BOOLEAN         bPseudoTest
+                                       )
+{
+       PGPKT_STRUCT    targetPkt;
+       u16                     startAddr=0;
+       u8                      efuseType=EFUSE_WIFI;
+
+       if(!hal_EfusePgCheckAvailableAddr(pAdapter, efuseType, bPseudoTest))
+               return _FALSE;
+
+       hal_EfuseConstructPGPkt(offset, word_en, pData, &targetPkt);
+
+       if(!hal_EfusePartialWriteCheck(pAdapter, efuseType, &startAddr, &targetPkt, bPseudoTest))
+               return _FALSE;
+
+       if(!hal_EfusePgPacketWriteHeader(pAdapter, efuseType, &startAddr, &targetPkt, bPseudoTest))
+               return _FALSE;
+
+       if(!hal_EfusePgPacketWriteData(pAdapter, efuseType, &startAddr, &targetPkt, bPseudoTest))
+               return _FALSE;
+
+       return _TRUE;
+}
+
+static int
+hal_EfusePgPacketWrite_8192C(IN        PADAPTER        pAdapter,
+                                       IN      u8                      offset,
+                                       IN      u8                      word_en,
+                                       IN      u8                      *data,
+                                       IN      BOOLEAN         bPseudoTest)
+{
+       u8      WriteState = PG_STATE_HEADER;
+
+       int     bContinual = _TRUE,bDataEmpty=_TRUE, bResult = _TRUE;
+       u16     efuse_addr = 0;
+       u8      efuse_data;
+
+       u8      pg_header = 0;
+
+       u8      tmp_word_cnts=0,target_word_cnts=0;
+       u8      tmp_header,match_word_en,tmp_word_en;
+
+       PGPKT_STRUCT target_pkt;
+       PGPKT_STRUCT tmp_pkt;
+
+       u8      originaldata[sizeof(u8)*8];
+       u8      tmpindex = 0,badworden = 0x0F;
+
+       static int      repeat_times = 0;
+       u8      efuseType=EFUSE_WIFI;
+
+       //
+       // <Roger_Notes> Efuse has been pre-programmed dummy 5Bytes at the end of Efuse by CP.
+       // So we have to prevent unexpected data string connection, which will cause
+       // incorrect data auto-load from HW. The total size is equal or smaller than 498bytes
+       // (i.e., offset 0~497, and dummy 1bytes) expected after CP test.
+       // 2009.02.19.
+       //
+       if( Efuse_GetCurrentSize(pAdapter, efuseType, bPseudoTest) >= (EFUSE_REAL_CONTENT_LEN-EFUSE_OOB_PROTECT_BYTES))
+       {
+               //RTPRINT(FEEPROM, EFUSE_PG, ("hal_EfusePgPacketWrite_8192C(), over size\n"));
+               return _FALSE;
+       }
+
+       // Init the 8 bytes content as 0xff
+       target_pkt.offset = offset;
+       target_pkt.word_en= word_en;
+
+       _rtw_memset((PVOID)target_pkt.data, 0xFF, sizeof(u8)*8);
+
+       efuse_WordEnableDataRead(word_en,data,target_pkt.data);
+       target_word_cnts = Efuse_CalculateWordCnts(target_pkt.word_en);
+
+       //efuse_reg_ctrl(pAdapter,_TRUE);//power on
+       //RTPRINT(FEEPROM, EFUSE_PG, ("EFUSE Power ON\n"));
+
+       //
+       // <Roger_Notes> Efuse has been pre-programmed dummy 5Bytes at the end of Efuse by CP.
+       // So we have to prevent unexpected data string connection, which will cause
+       // incorrect data auto-load from HW. Dummy 1bytes is additional.
+       // 2009.02.19.
+       //
+       while( bContinual && (efuse_addr  < (EFUSE_REAL_CONTENT_LEN-EFUSE_OOB_PROTECT_BYTES)) )
+       {
+
+               if(WriteState==PG_STATE_HEADER)
+               {
+                       bDataEmpty=_TRUE;
+                       badworden = 0x0F;
+                       //************  so *******************
+                       //RTPRINT(FEEPROM, EFUSE_PG, ("EFUSE PG_STATE_HEADER\n"));
+                       if (    efuse_OneByteRead(pAdapter, efuse_addr ,&efuse_data, bPseudoTest) &&
+                               (efuse_data!=0xFF))
+                       {
+                               tmp_header  =  efuse_data;
+
+                               tmp_pkt.offset  = (tmp_header>>4) & 0x0F;
+                               tmp_pkt.word_en         = tmp_header & 0x0F;
+                               tmp_word_cnts =  Efuse_CalculateWordCnts(tmp_pkt.word_en);
+
+                               //************  so-1 *******************
+                               if(tmp_pkt.offset  != target_pkt.offset)
+                               {
+                                       efuse_addr = efuse_addr + (tmp_word_cnts*2) +1; //Next pg_packet
+                                       #if (EFUSE_ERROE_HANDLE == 1)
+                                       WriteState = PG_STATE_HEADER;
+                                       #endif
+                               }
+                               else
+                               {
+                                       //************  so-2 *******************
+                                       for(tmpindex=0 ; tmpindex<(tmp_word_cnts*2) ; tmpindex++)
+                                       {
+                                               if(efuse_OneByteRead(pAdapter, (efuse_addr+1+tmpindex) ,&efuse_data, bPseudoTest)&&(efuse_data != 0xFF)){
+                                                       bDataEmpty = _FALSE;
+                                               }
+                                       }
+                                       //************  so-2-1 *******************
+                                       if(bDataEmpty == _FALSE)
+                                       {
+                                               efuse_addr = efuse_addr + (tmp_word_cnts*2) +1; //Next pg_packet
+                                               #if (EFUSE_ERROE_HANDLE == 1)
+                                               WriteState=PG_STATE_HEADER;
+                                               #endif
+                                       }
+                                       else
+                                       {//************  so-2-2 *******************
+                                               match_word_en = 0x0F;
+                                               if(   !( (target_pkt.word_en&BIT0)|(tmp_pkt.word_en&BIT0)  ))
+                                               {
+                                                        match_word_en &= (~BIT0);
+                                               }
+                                               if(   !( (target_pkt.word_en&BIT1)|(tmp_pkt.word_en&BIT1)  ))
+                                               {
+                                                        match_word_en &= (~BIT1);
+                                               }
+                                               if(   !( (target_pkt.word_en&BIT2)|(tmp_pkt.word_en&BIT2)  ))
+                                               {
+                                                        match_word_en &= (~BIT2);
+                                               }
+                                               if(   !( (target_pkt.word_en&BIT3)|(tmp_pkt.word_en&BIT3)  ))
+                                               {
+                                                        match_word_en &= (~BIT3);
+                                               }
+
+                                               //************  so-2-2-A *******************
+                                               if((match_word_en&0x0F)!=0x0F)
+                                               {
+                                                       badworden = Efuse_WordEnableDataWrite(pAdapter,efuse_addr+1, tmp_pkt.word_en ,target_pkt.data, bPseudoTest);
+
+                                                       //************  so-2-2-A-1 *******************
+                                                       //############################
+                                                       if(0x0F != (badworden&0x0F))
+                                                       {
+                                                               u8      reorg_offset = offset;
+                                                               u8      reorg_worden=badworden;
+                                                               Efuse_PgPacketWrite(pAdapter,reorg_offset,reorg_worden,originaldata, bPseudoTest);
+                                                       }
+                                                       //############################
+
+                                                       tmp_word_en = 0x0F;
+                                                       if(  (target_pkt.word_en&BIT0)^(match_word_en&BIT0)  )
+                                                       {
+                                                               tmp_word_en &= (~BIT0);
+                                                       }
+                                                       if(   (target_pkt.word_en&BIT1)^(match_word_en&BIT1) )
+                                                       {
+                                                               tmp_word_en &=  (~BIT1);
+                                                       }
+                                                       if(   (target_pkt.word_en&BIT2)^(match_word_en&BIT2) )
+                                                       {
+                                                               tmp_word_en &= (~BIT2);
+                                                       }
+                                                       if(   (target_pkt.word_en&BIT3)^(match_word_en&BIT3) )
+                                                       {
+                                                               tmp_word_en &=(~BIT3);
+                                                       }
+
+                                                       //************  so-2-2-A-2 *******************
+                                                       if((tmp_word_en&0x0F)!=0x0F){
+                                                               //reorganize other pg packet
+                                                               //efuse_addr = efuse_addr + (2*tmp_word_cnts) +1;//next pg packet addr
+                                                               efuse_addr = Efuse_GetCurrentSize(pAdapter, efuseType, bPseudoTest);
+                                                               //===========================
+                                                               target_pkt.offset = offset;
+                                                               target_pkt.word_en= tmp_word_en;
+                                                               //===========================
+                                                       }else{
+                                                               bContinual = _FALSE;
+                                                       }
+                                                       #if (EFUSE_ERROE_HANDLE == 1)
+                                                       WriteState=PG_STATE_HEADER;
+                                                       repeat_times++;
+                                                       if(repeat_times>EFUSE_REPEAT_THRESHOLD_){
+                                                               bContinual = _FALSE;
+                                                               bResult = _FALSE;
+                                                       }
+                                                       #endif
+                                               }
+                                               else{//************  so-2-2-B *******************
+                                                       //reorganize other pg packet
+                                                       efuse_addr = efuse_addr + (2*tmp_word_cnts) +1;//next pg packet addr
+                                                       //===========================
+                                                       target_pkt.offset = offset;
+                                                       target_pkt.word_en= target_pkt.word_en;
+                                                       //===========================
+                                                       #if (EFUSE_ERROE_HANDLE == 1)
+                                                       WriteState=PG_STATE_HEADER;
+                                                       #endif
+                                               }
+                                       }
+                               }
+                               //RTPRINT(FEEPROM, EFUSE_PG, ("EFUSE PG_STATE_HEADER-1\n"));
+                       }
+                       else            //************  s1: header == oxff  *******************
+                       {
+                               pg_header = ((target_pkt.offset << 4)&0xf0) |target_pkt.word_en;
+
+                               efuse_OneByteWrite(pAdapter,efuse_addr, pg_header, bPseudoTest);
+                               efuse_OneByteRead(pAdapter,efuse_addr, &tmp_header, bPseudoTest);
+
+                               if(tmp_header == pg_header)
+                               { //************  s1-1*******************
+                                       WriteState = PG_STATE_DATA;
+                               }
+                               #if (EFUSE_ERROE_HANDLE == 1)
+                               else if(tmp_header == 0xFF){//************  s1-3: if Write or read func doesn't work *******************
+                                       //efuse_addr doesn't change
+                                       WriteState = PG_STATE_HEADER;
+                                       repeat_times++;
+                                       if(repeat_times>EFUSE_REPEAT_THRESHOLD_){
+                                               bContinual = _FALSE;
+                                               bResult = _FALSE;
+                                       }
+                               }
+                               #endif
+                               else
+                               {//************  s1-2 : fixed the header procedure *******************
+                                       tmp_pkt.offset = (tmp_header>>4) & 0x0F;
+                                       tmp_pkt.word_en=  tmp_header & 0x0F;
+                                       tmp_word_cnts =  Efuse_CalculateWordCnts(tmp_pkt.word_en);
+
+                                       //************  s1-2-A :cover the exist data *******************
+                                       //memset(originaldata,0xff,sizeof(UINT8)*8);
+                                       _rtw_memset((PVOID)originaldata, 0xff, sizeof(u8)*8);
+
+                                       if(Efuse_PgPacketRead( pAdapter, tmp_pkt.offset,originaldata, bPseudoTest))
+                                       {       //check if data exist
+                                               //efuse_reg_ctrl(pAdapter,_TRUE);//power on
+                                               badworden = Efuse_WordEnableDataWrite(pAdapter,efuse_addr+1,tmp_pkt.word_en,originaldata, bPseudoTest);
+                                               //############################
+                                               if(0x0F != (badworden&0x0F))
+                                               {
+                                                       u8      reorg_offset = tmp_pkt.offset;
+                                                       u8      reorg_worden=badworden;
+                                                       Efuse_PgPacketWrite(pAdapter,reorg_offset,reorg_worden,originaldata, bPseudoTest);
+                                                       efuse_addr = Efuse_GetCurrentSize(pAdapter, efuseType, bPseudoTest);
+                                               }
+                                               //############################
+                                               else{
+                                                       efuse_addr = efuse_addr + (tmp_word_cnts*2) +1; //Next pg_packet
+                                               }
+                                       }
+                                        //************  s1-2-B: wrong address*******************
+                                       else
+                                       {
+                                               efuse_addr = efuse_addr + (tmp_word_cnts*2) +1; //Next pg_packet
+                                       }
+
+                                       #if (EFUSE_ERROE_HANDLE == 1)
+                                       WriteState=PG_STATE_HEADER;
+                                       repeat_times++;
+                                       if(repeat_times>EFUSE_REPEAT_THRESHOLD_){
+                                               bContinual = _FALSE;
+                                               bResult = _FALSE;
+                                       }
+                                       #endif
+
+                                       //RTPRINT(FEEPROM, EFUSE_PG, ("EFUSE PG_STATE_HEADER-2\n"));
+                               }
+
+                       }
+
+               }
+               //write data state
+               else if(WriteState==PG_STATE_DATA)
+               {       //************  s1-1  *******************
+                       //RTPRINT(FEEPROM, EFUSE_PG, ("EFUSE PG_STATE_DATA\n"));
+                       badworden = 0x0f;
+                       badworden = Efuse_WordEnableDataWrite(pAdapter,efuse_addr+1,target_pkt.word_en,target_pkt.data, bPseudoTest);
+                       if((badworden&0x0F)==0x0F)
+                       { //************  s1-1-A *******************
+                               bContinual = _FALSE;
+                       }
+                       else
+                       {//reorganize other pg packet //************  s1-1-B *******************
+                               efuse_addr = efuse_addr + (2*target_word_cnts) +1;//next pg packet addr
+
+                               //===========================
+                               target_pkt.offset = offset;
+                               target_pkt.word_en= badworden;
+                               target_word_cnts =  Efuse_CalculateWordCnts(target_pkt.word_en);
+                               //===========================
+                               #if (EFUSE_ERROE_HANDLE == 1)
+                               WriteState=PG_STATE_HEADER;
+                               repeat_times++;
+                               if(repeat_times>EFUSE_REPEAT_THRESHOLD_){
+                                       bContinual = _FALSE;
+                                       bResult = _FALSE;
+                               }
+                               #endif
+                               //RTPRINT(FEEPROM, EFUSE_PG, ("EFUSE PG_STATE_HEADER-3\n"));
+                       }
+               }
+       }
+
+       if(efuse_addr  >= (EFUSE_REAL_CONTENT_LEN-EFUSE_OOB_PROTECT_BYTES))
+       {
+               //RT_TRACE(COMP_EFUSE, DBG_LOUD, ("hal_EfusePgPacketWrite_8192C(): efuse_addr(%#x) Out of size!!\n", efuse_addr));
+       }
+       //efuse_reg_ctrl(pAdapter,_FALSE);//power off
+
+       return _TRUE;
+}
+
+static int
+Hal_EfusePgPacketWrite_Pseudo(IN       PADAPTER        pAdapter,
+                                       IN      u8                      offset,
+                                       IN      u8                      word_en,
+                                       IN      u8                      *data,
+                                       IN      BOOLEAN         bPseudoTest)
+{
+       int ret;
+
+       ret = hal_EfusePgPacketWrite_8723(pAdapter, offset, word_en, data, bPseudoTest);
+
+       return ret;
+}
+
+static int
+Hal_EfusePgPacketWrite(IN      PADAPTER        pAdapter,
+                                       IN      u8                      offset,
+                                       IN      u8                      word_en,
+                                       IN      u8                      *data,
+                                       IN      BOOLEAN         bPseudoTest)
+{
+       int     ret=0;
+
+       if(IS_HARDWARE_TYPE_8192C(pAdapter))
+       {
+               ret = hal_EfusePgPacketWrite_8192C(pAdapter, offset, word_en, data, bPseudoTest);
+       }
+       else if(IS_HARDWARE_TYPE_8723A(pAdapter))
+       {
+               ret = hal_EfusePgPacketWrite_8723(pAdapter, offset, word_en, data, bPseudoTest);
+       }
+
+       return ret;
+}
+
+static int
+rtl8192c_Efuse_PgPacketWrite(IN        PADAPTER        pAdapter,
+                                       IN      u8                      offset,
+                                       IN      u8                      word_en,
+                                       IN      u8                      *data,
+                                       IN      BOOLEAN         bPseudoTest)
+{
+       int     ret;
+
+       if(bPseudoTest)
+       {
+               ret = Hal_EfusePgPacketWrite_Pseudo(pAdapter, offset, word_en, data, bPseudoTest);
+       }
+       else
+       {
+               ret = Hal_EfusePgPacketWrite(pAdapter, offset, word_en, data, bPseudoTest);
+       }
+       return ret;
+}
+
+VOID
+rtl8192c_EfuseParseIDCode(
+       IN      PADAPTER        pAdapter,
+       IN      u8                      *hwinfo
+       )
+{
+       EEPROM_EFUSE_PRIV *pEEPROM = GET_EEPROM_EFUSE_PRIV(pAdapter);
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(pAdapter);
+       u16                     i,EEPROMId;
+
+       // Checl 0x8129 again for making sure autoload status!!
+       EEPROMId = *((u16 *)&hwinfo[0]);
+       if( le16_to_cpu(EEPROMId) != RTL_EEPROM_ID)
+       {
+               DBG_8192C("EEPROM ID(%#x) is invalid!!\n", EEPROMId);
+               pEEPROM->bautoload_fail_flag = _TRUE;
+       }
+       else
+       {
+               pEEPROM->bautoload_fail_flag = _FALSE;
+       }
+
+       //RT_TRACE(COMP_INIT, DBG_LOUD, ("EEPROM ID = 0x%4x\n", EEPROMId));
+}
+
+void rtl8192c_read_chip_version(PADAPTER       pAdapter)
+{
+       HAL_DATA_TYPE   *pHalData       = GET_HAL_DATA(pAdapter);
+       pHalData->VersionID = rtl8192c_ReadChipVersion(pAdapter);
+}
+
+void hal_notch_filter_8192c(_adapter *adapter, bool enable)
+{
+       if (enable) {
+               DBG_871X("Enable notch filter\n");
+               rtw_write8(adapter, rOFDM0_RxDSP+1, rtw_read8(adapter, rOFDM0_RxDSP+1) | BIT1);
+       } else {
+               DBG_871X("Disable notch filter\n");
+               rtw_write8(adapter, rOFDM0_RxDSP+1, rtw_read8(adapter, rOFDM0_RxDSP+1) & ~BIT1);
+       }
+}
+
+void hal_reset_security_engine_8192c(_adapter * adapter)
+{
+       rtw_write8(adapter, 0x522, 0xFF);
+       rtw_write8(adapter, 0x21, 0x35);
+       rtw_usleep_os(300);
+       rtw_write8(adapter, 0x101, rtw_read8(adapter,0x101)&~0x02);
+       rtw_write8(adapter, 0x101, rtw_read8(adapter,0x101)|0x02);
+       rtw_write8(adapter, 0x21, 0x55);
+       rtw_write8(adapter, 0x522, 0x00);
+}
+
+s32 c2h_id_filter_ccx_8192c(u8 id)
+{
+       s32 ret = _FALSE;
+       if (id == C2H_CCX_TX_RPT)
+               ret = _TRUE;
+
+       return ret;
+}
+
+static s32 c2h_handler_8192c(_adapter *padapter, struct c2h_evt_hdr *c2h_evt)
+{
+       s32 ret = _SUCCESS;
+       u8 i = 0;
+
+       if (c2h_evt == NULL) {
+               DBG_8192C("%s c2h_evt is NULL\n",__FUNCTION__);
+               ret = _FAIL;
+               goto exit;
+       }
+
+       switch (c2h_evt->id) {
+       case C2H_CCX_TX_RPT:
+               handle_txrpt_ccx_8192c(padapter, c2h_evt->payload);
+               break;
+       default:
+               ret = _FAIL;
+               break;
+       }
+
+exit:
+       return ret;
+}
+
+void rtl8192c_set_hal_ops(struct hal_ops *pHalFunc)
+{
+       pHalFunc->free_hal_data = &rtl8192c_free_hal_data;
+
+       pHalFunc->dm_init = &rtl8192c_init_dm_priv;
+       pHalFunc->dm_deinit = &rtl8192c_deinit_dm_priv;
+       pHalFunc->read_chip_version = &rtl8192c_read_chip_version;
+
+       pHalFunc->set_bwmode_handler = &PHY_SetBWMode8192C;
+       pHalFunc->set_channel_handler = &PHY_SwChnl8192C;
+
+       pHalFunc->hal_dm_watchdog = &rtl8192c_HalDmWatchDog;
+
+       pHalFunc->Add_RateATid = &rtl8192c_Add_RateATid;
+
+#ifdef CONFIG_ANTENNA_DIVERSITY
+       pHalFunc->AntDivBeforeLinkHandler = &SwAntDivBeforeLink8192C;
+       pHalFunc->AntDivCompareHandler = &SwAntDivCompare8192C;
+#endif
+
+       pHalFunc->read_bbreg = &rtl8192c_PHY_QueryBBReg;
+       pHalFunc->write_bbreg = &rtl8192c_PHY_SetBBReg;
+       pHalFunc->read_rfreg = &rtl8192c_PHY_QueryRFReg;
+       pHalFunc->write_rfreg = &rtl8192c_PHY_SetRFReg;
+
+       //Efuse related function
+       pHalFunc->EfusePowerSwitch = &rtl8192c_EfusePowerSwitch;
+       pHalFunc->ReadEFuse = &rtl8192c_ReadEFuse;
+       pHalFunc->EFUSEGetEfuseDefinition = &rtl8192c_EFUSE_GetEfuseDefinition;
+       pHalFunc->EfuseGetCurrentSize = &rtl8192c_EfuseGetCurrentSize;
+       pHalFunc->Efuse_PgPacketRead = &rtl8192c_Efuse_PgPacketRead;
+       pHalFunc->Efuse_PgPacketWrite = &rtl8192c_Efuse_PgPacketWrite;
+       pHalFunc->Efuse_WordEnableDataWrite = &rtl8192c_Efuse_WordEnableDataWrite;
+
+#ifdef DBG_CONFIG_ERROR_DETECT
+       pHalFunc->sreset_init_value = &sreset_init_value;
+       pHalFunc->sreset_reset_value = &sreset_reset_value;
+       pHalFunc->silentreset = &sreset_reset;
+       pHalFunc->sreset_xmit_status_check = &rtl8192c_sreset_xmit_status_check;
+       pHalFunc->sreset_linked_status_check  = &rtl8192c_sreset_linked_status_check;
+       pHalFunc->sreset_get_wifi_status  = &sreset_get_wifi_status;
+       pHalFunc->sreset_inprogress= &sreset_inprogress;
+#endif
+
+#ifdef CONFIG_IOL
+       pHalFunc->IOL_exec_cmds_sync = &rtl8192c_IOL_exec_cmds_sync;
+#endif
+       pHalFunc->hal_notch_filter = &hal_notch_filter_8192c;
+       pHalFunc->hal_reset_security_engine = hal_reset_security_engine_8192c;
+
+       pHalFunc->c2h_handler = c2h_handler_8192c;
+       pHalFunc->c2h_id_filter_ccx = c2h_id_filter_ccx_8192c;
+}
diff --git a/drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/rtl8192c_mp.c b/drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/rtl8192c_mp.c
new file mode 100644 (file)
index 0000000..4d574d3
--- /dev/null
@@ -0,0 +1,1207 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#define _RTL8192C_MP_C_
+#ifdef CONFIG_MP_INCLUDED
+
+#include <drv_types.h>
+#include <rtw_mp.h>
+
+#ifdef CONFIG_RTL8192C
+#include <rtl8192c_hal.h>
+#endif
+
+
+
+s32 Hal_SetPowerTracking(PADAPTER padapter, u8 enable)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+
+
+       if (!netif_running(padapter->pnetdev)) {
+               RT_TRACE(_module_mp_, _drv_warning_, ("SetPowerTracking! Fail: interface not opened!\n"));
+               return _FAIL;
+       }
+
+       if (check_fwstate(&padapter->mlmepriv, WIFI_MP_STATE) == _FALSE) {
+               RT_TRACE(_module_mp_, _drv_warning_, ("SetPowerTracking! Fail: not in MP mode!\n"));
+               return _FAIL;
+       }
+
+       if (enable)
+               pdmpriv->TxPowerTrackControl = _TRUE;
+       else
+               pdmpriv->TxPowerTrackControl = _FALSE;
+
+       return _SUCCESS;
+}
+
+void Hal_GetPowerTracking(PADAPTER padapter, u8 *enable)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+
+
+       *enable = pdmpriv->TxPowerTrackControl;
+}
+
+static void Hal_disable_dm(PADAPTER padapter)
+{
+       u8 v8;
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+
+
+       //3 1. disable firmware dynamic mechanism
+       // disable Power Training, Rate Adaptive
+       v8 = rtw_read8(padapter, REG_BCN_CTRL);
+       v8 &= ~EN_BCN_FUNCTION;
+       rtw_write8(padapter, REG_BCN_CTRL, v8);
+
+       //3 2. disable driver dynamic mechanism
+       // disable Dynamic Initial Gain
+       // disable High Power
+       // disable Power Tracking
+       Switch_DM_Func(padapter, DYNAMIC_FUNC_DISABLE, _FALSE);
+
+       // enable APK, LCK and IQK but disable power tracking
+       pdmpriv->TxPowerTrackControl = _FALSE;
+       Switch_DM_Func(padapter, DYNAMIC_FUNC_SS, _TRUE);
+}
+
+/*-----------------------------------------------------------------------------
+ * Function:   mpt_SwitchRfSetting
+ *
+ * Overview:   Change RF Setting when we siwthc channel/rate/BW for MP.
+ *
+ * Input:       IN     PADAPTER                                pAdapter
+ *
+ * Output:      NONE
+ *
+ * Return:      NONE
+ *
+ * Revised History:
+ * When                        Who             Remark
+ * 01/08/2009  MHC             Suggestion from SD3 Willis for 92S series.
+ * 01/09/2009  MHC             Add CCK modification for 40MHZ. Suggestion from SD3.
+ *
+ *---------------------------------------------------------------------------*/
+void Hal_mpt_SwitchRfSetting(PADAPTER pAdapter)
+{
+       HAL_DATA_TYPE *pHalData = GET_HAL_DATA(pAdapter);
+       struct mp_priv *pmp = &pAdapter->mppriv;
+       u8 ChannelToSw = pmp->channel, eRFPath = RF_PATH_A;
+       u8 ulRateIdx = pmp->rateidx;
+       u8 ulbandwidth = pmp->bandwidth;
+       PMPT_CONTEXT    pMptCtx = &(pAdapter->mppriv.MptCtx);
+    BOOLEAN             bInteralPA = _FALSE;
+    u32                                value = 0;
+
+#ifdef CONFIG_USB_HCI
+       if (IS_92C_SERIAL(pHalData->VersionID))
+       {
+               //92CE-VAU (92cu mCard)
+               if( BOARD_MINICARD == pHalData->BoardType)
+               {
+                       if (ulRateIdx < MPT_RATE_6M)                                    // CCK rate
+                       {
+                               write_rfreg(pAdapter, 0, RF_SYN_G2, 0x0F400);
+                       }
+                       else                                                                                    //OFDM~MCS rate
+                       {
+                               write_rfreg(pAdapter, 0, RF_SYN_G2, 0x4F000);
+                       }
+               }
+               else    //92CU dongle
+               {
+                       if (ulRateIdx < MPT_RATE_6M)    // CCK rate
+                       {
+                               write_rfreg(pAdapter, 0, RF_SYN_G2, 0x0F400);
+                       }
+                       else if (ChannelToSw & BIT0)    // OFDM rate, odd number channel
+                       {
+                               write_rfreg(pAdapter, 0, RF_SYN_G2, 0x4F200);
+                       }
+                       else if (ChannelToSw == 4)      // OFDM rate, even number channel
+                       {
+                               write_rfreg(pAdapter, 0, RF_SYN_G2, 0x28200);
+                               write_rfreg(pAdapter, 0, RF_SYN_G6, 0xe0004);
+                               write_rfreg(pAdapter, 0, RF_SYN_G7, 0x709);
+                               rtw_msleep_os(1);
+                               write_rfreg(pAdapter, 0, RF_SYN_G7, 0x4B333);
+                       }
+                       else if(ChannelToSw == 10)      // OFDM rate, even number channel
+                       {
+                               write_rfreg(pAdapter, 0, RF_SYN_G2, 0x28000);
+                               write_rfreg(pAdapter, 0, RF_SYN_G6, 0xe000A);
+                               write_rfreg(pAdapter, 0, RF_SYN_G7, 0x709);
+                               rtw_msleep_os(1);
+                               write_rfreg(pAdapter, 0, RF_SYN_G7, 0x7B333);
+                       }
+                       else if(ChannelToSw == 12)      // OFDM rate, even number channel
+                       {
+                               write_rfreg(pAdapter, 0, RF_SYN_G2, 0x28200);
+                               write_rfreg(pAdapter, 0, RF_SYN_G6, 0xe000C);
+                               write_rfreg(pAdapter, 0, RF_SYN_G7, 0x50B);
+                               rtw_msleep_os(1);
+                               write_rfreg(pAdapter, 0, RF_SYN_G7, 0x4B333);
+                       }
+                       else
+                       {
+                               write_rfreg(pAdapter, 0, RF_SYN_G2, 0x4F200);
+                       }
+               }
+       }
+       else    //88cu
+       {
+
+               //mcard interface
+
+               if( BOARD_MINICARD == pHalData->BoardType)
+               {
+                       if (ulRateIdx < MPT_RATE_6M)    // CCK rate
+                       {
+                               write_rfreg(pAdapter, 0, RF_SYN_G2, 0x0F400);
+                       }
+                       else    //OFDM~MCS rate
+                       {
+                               write_rfreg(pAdapter, 0, RF_SYN_G2, 0x4F200);
+                       }
+
+                       if(ChannelToSw == 6 || ChannelToSw == 8)
+                       {
+                               write_bbreg(pAdapter, rOFDM0_XAAGCCore1, bMaskByte0, 0x22);
+                               write_bbreg(pAdapter, rOFDM0_XBAGCCore1, bMaskByte0, 0x22);
+                               write_bbreg(pAdapter, rOFDM0_RxDetector1, bMaskByte0, 0x4F);
+                       }
+                       else
+                       {
+                               write_bbreg(pAdapter, rOFDM0_XAAGCCore1, bMaskByte0, 0x20);
+                               write_bbreg(pAdapter, rOFDM0_XBAGCCore1, bMaskByte0, 0x20);
+                               write_bbreg(pAdapter, rOFDM0_RxDetector1, bMaskByte0, pMptCtx->backup0xc30);
+                       }
+               }
+               else
+               {
+                       if (ulRateIdx < MPT_RATE_6M)    // CCK rate
+                       {
+                               write_rfreg(pAdapter, 0, RF_SYN_G2, 0x0F400);
+                       }
+                       else if (ChannelToSw & BIT0)    // OFDM rate, odd number channel
+                       {
+                               write_rfreg(pAdapter, 0, RF_SYN_G2, 0x4F200);
+                       }
+                       else
+                       {
+                               write_rfreg(pAdapter, 0, RF_SYN_G2, 0x4F000);
+                       }
+               }
+       }
+
+#else  //PCI_INTERFACE
+
+       if (ulRateIdx < MPT_RATE_6M)    // CCK rate
+       {
+               write_rfreg(pAdapter, 0, RF_SYN_G2, 0x0F400);
+       }
+       else    //OFDM~MCS rate
+       {
+               write_rfreg(pAdapter, 0, RF_SYN_G2, 0x4F000);
+       }
+       //88CE
+       if(!IS_92C_SERIAL(pHalData->VersionID))
+       {
+               if(ChannelToSw == 6 || ChannelToSw == 8)
+               {
+                       write_bbreg(pAdapter, rOFDM0_XAAGCCore1, bMaskByte0, 0x22);
+                       write_bbreg(pAdapter, rOFDM0_XBAGCCore1, bMaskByte0, 0x22);
+                       write_bbreg(pAdapter, rOFDM0_RxDetector1, bMaskByte0, 0x4F);
+               }
+               else
+               {
+                       write_bbreg(pAdapter, rOFDM0_XAAGCCore1, bMaskByte0, pMptCtx->backup0xc50);
+                       write_bbreg(pAdapter, rOFDM0_XBAGCCore1, bMaskByte0, pMptCtx->backup0xc58);
+                       write_bbreg(pAdapter, rOFDM0_RxDetector1, bMaskByte0, pMptCtx->backup0xc30);
+               }
+        }
+
+#endif //CONFIG_USB_HCI
+
+
+}
+/*---------------------------hal\rtl8192c\MPT_Phy.c---------------------------*/
+
+/*---------------------------hal\rtl8192c\MPT_HelperFunc.c---------------------------*/
+void Hal_MPT_CCKTxPowerAdjust(PADAPTER Adapter, BOOLEAN bInCH14)
+{
+       u32             TempVal = 0, TempVal2 = 0, TempVal3 = 0;
+       u32             CurrCCKSwingVal = 0, CCKSwingIndex = 12;
+       u8              i;
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+
+
+       // get current cck swing value and check 0xa22 & 0xa23 later to match the table.
+       CurrCCKSwingVal = read_bbreg(Adapter, rCCK0_TxFilter1, bMaskHWord);
+
+       if (!bInCH14)
+       {
+               // Readback the current bb cck swing value and compare with the table to
+               // get the current swing index
+               for (i = 0; i < CCK_TABLE_SIZE; i++)
+               {
+                       if (((CurrCCKSwingVal&0xff) == (u32)CCKSwingTable_Ch1_Ch13[i][0]) &&
+                               (((CurrCCKSwingVal&0xff00)>>8) == (u32)CCKSwingTable_Ch1_Ch13[i][1]))
+                       {
+                               CCKSwingIndex = i;
+//                             RT_TRACE(COMP_INIT, DBG_LOUD,("Ch1~13, Current reg0x%x = 0x%lx, CCKSwingIndex=0x%x\n",
+//                                     (rCCK0_TxFilter1+2), CurrCCKSwingVal, CCKSwingIndex));
+                               break;
+                       }
+               }
+
+               //Write 0xa22 0xa23
+               TempVal = CCKSwingTable_Ch1_Ch13[CCKSwingIndex][0] +
+                               (CCKSwingTable_Ch1_Ch13[CCKSwingIndex][1]<<8) ;
+
+
+               //Write 0xa24 ~ 0xa27
+               TempVal2 = 0;
+               TempVal2 = CCKSwingTable_Ch1_Ch13[CCKSwingIndex][2] +
+                               (CCKSwingTable_Ch1_Ch13[CCKSwingIndex][3]<<8) +
+                               (CCKSwingTable_Ch1_Ch13[CCKSwingIndex][4]<<16 )+
+                               (CCKSwingTable_Ch1_Ch13[CCKSwingIndex][5]<<24);
+
+               //Write 0xa28  0xa29
+               TempVal3 = 0;
+               TempVal3 = CCKSwingTable_Ch1_Ch13[CCKSwingIndex][6] +
+                               (CCKSwingTable_Ch1_Ch13[CCKSwingIndex][7]<<8) ;
+       }
+       else
+       {
+               for (i = 0; i < CCK_TABLE_SIZE; i++)
+               {
+                       if (((CurrCCKSwingVal&0xff) == (u32)CCKSwingTable_Ch14[i][0]) &&
+                               (((CurrCCKSwingVal&0xff00)>>8) == (u32)CCKSwingTable_Ch14[i][1]))
+                       {
+                               CCKSwingIndex = i;
+//                             RT_TRACE(COMP_INIT, DBG_LOUD,("Ch14, Current reg0x%x = 0x%lx, CCKSwingIndex=0x%x\n",
+//                                     (rCCK0_TxFilter1+2), CurrCCKSwingVal, CCKSwingIndex));
+                               break;
+                       }
+               }
+
+               //Write 0xa22 0xa23
+               TempVal = CCKSwingTable_Ch14[CCKSwingIndex][0] +
+                               (CCKSwingTable_Ch14[CCKSwingIndex][1]<<8) ;
+
+               //Write 0xa24 ~ 0xa27
+               TempVal2 = 0;
+               TempVal2 = CCKSwingTable_Ch14[CCKSwingIndex][2] +
+                               (CCKSwingTable_Ch14[CCKSwingIndex][3]<<8) +
+                               (CCKSwingTable_Ch14[CCKSwingIndex][4]<<16 )+
+                               (CCKSwingTable_Ch14[CCKSwingIndex][5]<<24);
+
+               //Write 0xa28  0xa29
+               TempVal3 = 0;
+               TempVal3 = CCKSwingTable_Ch14[CCKSwingIndex][6] +
+                               (CCKSwingTable_Ch14[CCKSwingIndex][7]<<8) ;
+       }
+
+       write_bbreg(Adapter, rCCK0_TxFilter1, bMaskHWord, TempVal);
+       write_bbreg(Adapter, rCCK0_TxFilter2, bMaskDWord, TempVal2);
+       write_bbreg(Adapter, rCCK0_DebugPort, bMaskLWord, TempVal3);
+}
+
+void Hal_MPT_CCKTxPowerAdjustbyIndex(PADAPTER pAdapter, BOOLEAN beven)
+{
+       s32             TempCCk;
+       u8              CCK_index, CCK_index_old;
+       u8              Action = 0;     //0: no action, 1: even->odd, 2:odd->even
+       u8              TimeOut = 100;
+       s32             i = 0;
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(pAdapter);
+       PMPT_CONTEXT    pMptCtx = &pAdapter->mppriv.MptCtx;
+
+
+       if (!IS_92C_SERIAL(pHalData->VersionID))
+               return;
+#if 0
+       while(PlatformAtomicExchange(&Adapter->IntrCCKRefCount, TRUE) == TRUE)
+       {
+               PlatformSleepUs(100);
+               TimeOut--;
+               if(TimeOut <= 0)
+               {
+                       RTPRINT(FINIT, INIT_TxPower,
+                        ("!!!MPT_CCKTxPowerAdjustbyIndex Wait for check CCK gain index too long!!!\n" ));
+                       break;
+               }
+       }
+#endif
+       if (beven && !pMptCtx->bMptIndexEven)   //odd->even
+       {
+               Action = 2;
+               pMptCtx->bMptIndexEven = _TRUE;
+       }
+       else if (!beven && pMptCtx->bMptIndexEven)      //even->odd
+       {
+               Action = 1;
+               pMptCtx->bMptIndexEven = _FALSE;
+       }
+
+       if (Action != 0)
+       {
+               //Query CCK default setting From 0xa24
+               TempCCk = read_bbreg(pAdapter, rCCK0_TxFilter2, bMaskDWord) & bMaskCCK;
+               for (i = 0; i < CCK_TABLE_SIZE; i++)
+               {
+                       if (pHalData->dmpriv.bCCKinCH14)
+                       {
+                               if (_rtw_memcmp((void*)&TempCCk, (void*)&CCKSwingTable_Ch14[i][2], 4) == _TRUE)
+                               {
+                                       CCK_index_old = (u8) i;
+//                                     RTPRINT(FINIT, INIT_TxPower,("MPT_CCKTxPowerAdjustbyIndex: Initial reg0x%x = 0x%lx, CCK_index=0x%x, ch 14 %d\n",
+//                                             rCCK0_TxFilter2, TempCCk, CCK_index_old, pHalData->bCCKinCH14));
+                                       break;
+                               }
+                       }
+                       else
+                       {
+                               if (_rtw_memcmp((void*)&TempCCk, (void*)&CCKSwingTable_Ch1_Ch13[i][2], 4) == _TRUE)
+                               {
+                                       CCK_index_old = (u8) i;
+//                                     RTPRINT(FINIT, INIT_TxPower,("MPT_CCKTxPowerAdjustbyIndex: Initial reg0x%x = 0x%lx, CCK_index=0x%x, ch14 %d\n",
+//                                             rCCK0_TxFilter2, TempCCk, CCK_index_old, pHalData->bCCKinCH14));
+                                       break;
+                               }
+                       }
+               }
+
+               if (Action == 1)
+                       CCK_index = CCK_index_old - 1;
+               else
+                       CCK_index = CCK_index_old + 1;
+
+//             RTPRINT(FINIT, INIT_TxPower,("MPT_CCKTxPowerAdjustbyIndex: new CCK_index=0x%x\n",
+//                      CCK_index));
+
+               //Adjust CCK according to gain index
+               if (!pHalData->dmpriv.bCCKinCH14) {
+                       rtw_write8(pAdapter, 0xa22, CCKSwingTable_Ch1_Ch13[CCK_index][0]);
+                       rtw_write8(pAdapter, 0xa23, CCKSwingTable_Ch1_Ch13[CCK_index][1]);
+                       rtw_write8(pAdapter, 0xa24, CCKSwingTable_Ch1_Ch13[CCK_index][2]);
+                       rtw_write8(pAdapter, 0xa25, CCKSwingTable_Ch1_Ch13[CCK_index][3]);
+                       rtw_write8(pAdapter, 0xa26, CCKSwingTable_Ch1_Ch13[CCK_index][4]);
+                       rtw_write8(pAdapter, 0xa27, CCKSwingTable_Ch1_Ch13[CCK_index][5]);
+                       rtw_write8(pAdapter, 0xa28, CCKSwingTable_Ch1_Ch13[CCK_index][6]);
+                       rtw_write8(pAdapter, 0xa29, CCKSwingTable_Ch1_Ch13[CCK_index][7]);
+               } else {
+                       rtw_write8(pAdapter, 0xa22, CCKSwingTable_Ch14[CCK_index][0]);
+                       rtw_write8(pAdapter, 0xa23, CCKSwingTable_Ch14[CCK_index][1]);
+                       rtw_write8(pAdapter, 0xa24, CCKSwingTable_Ch14[CCK_index][2]);
+                       rtw_write8(pAdapter, 0xa25, CCKSwingTable_Ch14[CCK_index][3]);
+                       rtw_write8(pAdapter, 0xa26, CCKSwingTable_Ch14[CCK_index][4]);
+                       rtw_write8(pAdapter, 0xa27, CCKSwingTable_Ch14[CCK_index][5]);
+                       rtw_write8(pAdapter, 0xa28, CCKSwingTable_Ch14[CCK_index][6]);
+                       rtw_write8(pAdapter, 0xa29, CCKSwingTable_Ch14[CCK_index][7]);
+               }
+       }
+#if 0
+       RTPRINT(FINIT, INIT_TxPower,
+       ("MPT_CCKTxPowerAdjustbyIndex 0xa20=%x\n", PlatformEFIORead4Byte(Adapter, 0xa20)));
+
+       PlatformAtomicExchange(&Adapter->IntrCCKRefCount, FALSE);
+#endif
+}
+/*---------------------------hal\rtl8192c\MPT_HelperFunc.c---------------------------*/
+
+/*
+ * SetChannel
+ * Description
+ *     Use H2C command to change channel,
+ *     not only modify rf register, but also other setting need to be done.
+ */
+void Hal_SetChannel(PADAPTER pAdapter)
+{
+#if 0
+       struct mp_priv *pmp = &pAdapter->mppriv;
+
+//     SelectChannel(pAdapter, pmp->channel);
+       set_channel_bwmode(pAdapter, pmp->channel, pmp->channel_offset, pmp->bandwidth);
+#else
+       u8              eRFPath;
+
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(pAdapter);
+       struct mp_priv  *pmp = &pAdapter->mppriv;
+       u8              channel = pmp->channel;
+       u8              bandwidth = pmp->bandwidth;
+       u8              rate = pmp->rateidx;
+
+
+       // set RF channel register
+       for (eRFPath = 0; eRFPath < pHalData->NumTotalRFPath; eRFPath++)
+       {
+      if(IS_HARDWARE_TYPE_8192D(pAdapter))
+                       _write_rfreg(pAdapter, (RF_RADIO_PATH_E)eRFPath, rRfChannel, 0xFF, channel);
+               else
+               _write_rfreg(pAdapter, eRFPath, rRfChannel, 0x3FF, channel);
+       }
+       Hal_mpt_SwitchRfSetting(pAdapter);
+
+       SelectChannel(pAdapter, channel);
+
+       if (pHalData->CurrentChannel == 14 && !pHalData->dmpriv.bCCKinCH14) {
+               pHalData->dmpriv.bCCKinCH14 = _TRUE;
+               Hal_MPT_CCKTxPowerAdjust(pAdapter, pHalData->dmpriv.bCCKinCH14);
+       }
+       else if (pHalData->CurrentChannel != 14 && pHalData->dmpriv.bCCKinCH14) {
+               pHalData->dmpriv.bCCKinCH14 = _FALSE;
+               Hal_MPT_CCKTxPowerAdjust(pAdapter, pHalData->dmpriv.bCCKinCH14);
+       }
+
+#endif
+}
+
+/*
+ * Notice
+ *     Switch bandwitdth may change center frequency(channel)
+ */
+void Hal_SetBandwidth(PADAPTER pAdapter)
+{
+       struct mp_priv *pmp = &pAdapter->mppriv;
+
+
+       SetBWMode(pAdapter, pmp->bandwidth, pmp->prime_channel_offset);
+       Hal_mpt_SwitchRfSetting(pAdapter);
+}
+
+void Hal_SetCCKTxPower(PADAPTER pAdapter, u8 *TxPower)
+{
+       u32 tmpval = 0;
+
+
+       // rf-A cck tx power
+       write_bbreg(pAdapter, rTxAGC_A_CCK1_Mcs32, bMaskByte1, TxPower[RF_PATH_A]);
+       tmpval = (TxPower[RF_PATH_A]<<16) | (TxPower[RF_PATH_A]<<8) | TxPower[RF_PATH_A];
+       write_bbreg(pAdapter, rTxAGC_B_CCK11_A_CCK2_11, 0xffffff00, tmpval);
+
+       // rf-B cck tx power
+       write_bbreg(pAdapter, rTxAGC_B_CCK11_A_CCK2_11, bMaskByte0, TxPower[RF_PATH_B]);
+       tmpval = (TxPower[RF_PATH_B]<<16) | (TxPower[RF_PATH_B]<<8) | TxPower[RF_PATH_B];
+       write_bbreg(pAdapter, rTxAGC_B_CCK1_55_Mcs32, 0xffffff00, tmpval);
+
+       RT_TRACE(_module_mp_, _drv_notice_,
+                ("-SetCCKTxPower: A[0x%02x] B[0x%02x]\n",
+                 TxPower[RF_PATH_A], TxPower[RF_PATH_B]));
+}
+
+void Hal_SetOFDMTxPower(PADAPTER pAdapter, u8 *TxPower)
+{
+       u32 TxAGC = 0;
+       u8 tmpval = 0;
+       PMPT_CONTEXT    pMptCtx = &pAdapter->mppriv.MptCtx;
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(pAdapter);
+
+
+       // HT Tx-rf(A)
+       tmpval = TxPower[RF_PATH_A];
+       TxAGC = (tmpval<<24) | (tmpval<<16) | (tmpval<<8) | tmpval;
+
+       write_bbreg(pAdapter, rTxAGC_A_Rate18_06, bMaskDWord, TxAGC);
+       write_bbreg(pAdapter, rTxAGC_A_Rate54_24, bMaskDWord, TxAGC);
+       write_bbreg(pAdapter, rTxAGC_A_Mcs03_Mcs00, bMaskDWord, TxAGC);
+       write_bbreg(pAdapter, rTxAGC_A_Mcs07_Mcs04, bMaskDWord, TxAGC);
+       write_bbreg(pAdapter, rTxAGC_A_Mcs11_Mcs08, bMaskDWord, TxAGC);
+       write_bbreg(pAdapter, rTxAGC_A_Mcs15_Mcs12, bMaskDWord, TxAGC);
+
+       // HT Tx-rf(B)
+       tmpval = TxPower[RF_PATH_B];
+       TxAGC = (tmpval<<24) | (tmpval<<16) | (tmpval<<8) | tmpval;
+
+       write_bbreg(pAdapter, rTxAGC_B_Rate18_06, bMaskDWord, TxAGC);
+       write_bbreg(pAdapter, rTxAGC_B_Rate54_24, bMaskDWord, TxAGC);
+       write_bbreg(pAdapter, rTxAGC_B_Mcs03_Mcs00, bMaskDWord, TxAGC);
+       write_bbreg(pAdapter, rTxAGC_B_Mcs07_Mcs04, bMaskDWord, TxAGC);
+       write_bbreg(pAdapter, rTxAGC_B_Mcs11_Mcs08, bMaskDWord, TxAGC);
+       write_bbreg(pAdapter, rTxAGC_B_Mcs15_Mcs12, bMaskDWord, TxAGC);
+
+       RT_TRACE(_module_mp_, _drv_notice_,
+                ("-SetOFDMTxPower: A[0x%02x] B[0x%02x]\n",
+                 TxPower[RF_PATH_A], TxPower[RF_PATH_B]));
+}
+
+void Hal_SetAntennaPathPower(PADAPTER pAdapter)
+{
+       HAL_DATA_TYPE *pHalData = GET_HAL_DATA(pAdapter);
+       u8 TxPowerLevel[MAX_RF_PATH_NUMS];
+       u8 rfPath;
+
+       TxPowerLevel[RF_PATH_A] = pAdapter->mppriv.txpoweridx;
+       TxPowerLevel[RF_PATH_B] = pAdapter->mppriv.txpoweridx_b;
+
+       switch (pAdapter->mppriv.antenna_tx)
+       {
+               case ANTENNA_A:
+               default:
+                       rfPath = RF_PATH_A;
+                       break;
+               case ANTENNA_B:
+                       rfPath = RF_PATH_B;
+                       break;
+               case ANTENNA_C:
+                       rfPath = RF_PATH_C;
+                       break;
+       }
+
+       switch (pHalData->rf_chip)
+       {
+               case RF_8225:
+               case RF_8256:
+               case RF_6052:
+                       Hal_SetCCKTxPower(pAdapter, TxPowerLevel);
+                       if (pAdapter->mppriv.rateidx < MPT_RATE_6M)     // CCK rate
+                               Hal_MPT_CCKTxPowerAdjustbyIndex(pAdapter, TxPowerLevel[rfPath]%2 == 0);
+                       Hal_SetOFDMTxPower(pAdapter, TxPowerLevel);
+                       break;
+
+               default:
+                       break;
+       }
+}
+
+void Hal_SetTxPower(PADAPTER pAdapter)
+{
+       HAL_DATA_TYPE *pHalData = GET_HAL_DATA(pAdapter);
+       u8 TxPower = pAdapter->mppriv.txpoweridx;
+       u8 TxPowerLevel[MAX_RF_PATH_NUMS];
+       u8 rf, rfPath;
+
+       for (rf = 0; rf < MAX_RF_PATH_NUMS; rf++) {
+               TxPowerLevel[rf] = TxPower;
+       }
+
+       switch (pAdapter->mppriv.antenna_tx)
+       {
+               case ANTENNA_A:
+               default:
+                       rfPath = RF_PATH_A;
+                       break;
+               case ANTENNA_B:
+                       rfPath = RF_PATH_B;
+                       break;
+               case ANTENNA_C:
+                       rfPath = RF_PATH_C;
+                       break;
+       }
+
+       switch (pHalData->rf_chip)
+       {
+               // 2008/09/12 MH Test only !! We enable the TX power tracking for MP!!!!!
+               // We should call normal driver API later!!
+               case RF_8225:
+               case RF_8256:
+               case RF_6052:
+                       Hal_SetCCKTxPower(pAdapter, TxPowerLevel);
+                       if (pAdapter->mppriv.rateidx < MPT_RATE_6M)     // CCK rate
+                               Hal_MPT_CCKTxPowerAdjustbyIndex(pAdapter, TxPowerLevel[rfPath]%2 == 0);
+                       Hal_SetOFDMTxPower(pAdapter, TxPowerLevel);
+                       break;
+
+               default:
+                       break;
+       }
+
+//     SetCCKTxPower(pAdapter, TxPower);
+//     SetOFDMTxPower(pAdapter, TxPower);
+}
+
+void Hal_SetTxAGCOffset(PADAPTER pAdapter, u32 ulTxAGCOffset)
+{
+       u32 TxAGCOffset_B, TxAGCOffset_C, TxAGCOffset_D,tmpAGC;
+
+       TxAGCOffset_B = (ulTxAGCOffset&0x000000ff);
+       TxAGCOffset_C = ((ulTxAGCOffset&0x0000ff00)>>8);
+       TxAGCOffset_D = ((ulTxAGCOffset&0x00ff0000)>>16);
+
+       tmpAGC = (TxAGCOffset_D<<8 | TxAGCOffset_C<<4 | TxAGCOffset_B);
+       write_bbreg(pAdapter, rFPGA0_TxGainStage,
+                       (bXBTxAGC|bXCTxAGC|bXDTxAGC), tmpAGC);
+}
+
+void Hal_SetDataRate(PADAPTER pAdapter)
+{
+       Hal_mpt_SwitchRfSetting(pAdapter);
+}
+
+#if  !defined (CONFIG_RTL8192C)  &&  !defined (CONFIG_RTL8192D)
+/*------------------------------Define structure----------------------------*/
+typedef struct _R_ANTENNA_SELECT_OFDM {
+       u32     r_tx_antenna:4;
+       u32     r_ant_l:4;
+       u32     r_ant_non_ht:4;
+       u32     r_ant_ht1:4;
+       u32     r_ant_ht2:4;
+       u32     r_ant_ht_s1:4;
+       u32     r_ant_non_ht_s1:4;
+       u32     OFDM_TXSC:2;
+       u32     Reserved:2;
+}R_ANTENNA_SELECT_OFDM;
+
+typedef struct _R_ANTENNA_SELECT_CCK {
+       u8      r_cckrx_enable_2:2;
+       u8      r_cckrx_enable:2;
+       u8      r_ccktx_enable:4;
+}R_ANTENNA_SELECT_CCK;
+#endif
+
+void Hal_SetAntenna(PADAPTER pAdapter)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(pAdapter);
+
+       R_ANTENNA_SELECT_OFDM *p_ofdm_tx;       /* OFDM Tx register */
+       R_ANTENNA_SELECT_CCK *p_cck_txrx;
+
+       u8      r_rx_antenna_ofdm = 0, r_ant_select_cck_val = 0;
+       u8      chgTx = 0, chgRx = 0;
+       u32     r_ant_sel_cck_val = 0, r_ant_select_ofdm_val = 0, r_ofdm_tx_en_val = 0;
+
+
+       p_ofdm_tx = (R_ANTENNA_SELECT_OFDM *)&r_ant_select_ofdm_val;
+       p_cck_txrx = (R_ANTENNA_SELECT_CCK *)&r_ant_select_cck_val;
+
+       p_ofdm_tx->r_ant_ht1    = 0x1;
+       p_ofdm_tx->r_ant_ht2    = 0x2;  // Second TX RF path is A
+       p_ofdm_tx->r_ant_non_ht = 0x3;  // 0x1+0x2=0x3
+
+       switch (pAdapter->mppriv.antenna_tx)
+       {
+               case ANTENNA_A:
+                       p_ofdm_tx->r_tx_antenna         = 0x1;
+                       r_ofdm_tx_en_val                = 0x1;
+                       p_ofdm_tx->r_ant_l              = 0x1;
+                       p_ofdm_tx->r_ant_ht_s1          = 0x1;
+                       p_ofdm_tx->r_ant_non_ht_s1      = 0x1;
+                       p_cck_txrx->r_ccktx_enable      = 0x8;
+                       chgTx = 1;
+
+                       // From SD3 Willis suggestion !!! Set RF A=TX and B as standby
+//                     if (IS_HARDWARE_TYPE_8192S(pAdapter))
+                       {
+                       write_bbreg(pAdapter, rFPGA0_XA_HSSIParameter2, 0xe, 2);
+                       write_bbreg(pAdapter, rFPGA0_XB_HSSIParameter2, 0xe, 1);
+                       r_ofdm_tx_en_val                = 0x3;
+
+                       // Power save
+                       //cosa r_ant_select_ofdm_val = 0x11111111;
+
+                       // We need to close RFB by SW control
+                       if (pHalData->rf_type == RF_2T2R)
+                       {
+                               PHY_SetBBReg(pAdapter, rFPGA0_XAB_RFInterfaceSW, BIT10, 0);
+                               PHY_SetBBReg(pAdapter, rFPGA0_XAB_RFInterfaceSW, BIT26, 1);
+                               PHY_SetBBReg(pAdapter, rFPGA0_XB_RFInterfaceOE, BIT10, 0);
+                               PHY_SetBBReg(pAdapter, rFPGA0_XAB_RFParameter, BIT1, 1);
+                               PHY_SetBBReg(pAdapter, rFPGA0_XAB_RFParameter, BIT17, 0);
+                       }
+                       }
+                       break;
+
+               case ANTENNA_B:
+                       p_ofdm_tx->r_tx_antenna         = 0x2;
+                       r_ofdm_tx_en_val                = 0x2;
+                       p_ofdm_tx->r_ant_l              = 0x2;
+                       p_ofdm_tx->r_ant_ht_s1          = 0x2;
+                       p_ofdm_tx->r_ant_non_ht_s1      = 0x2;
+                       p_cck_txrx->r_ccktx_enable      = 0x4;
+                       chgTx = 1;
+
+                       // From SD3 Willis suggestion !!! Set RF A as standby
+                       //if (IS_HARDWARE_TYPE_8192S(pAdapter))
+                       {
+                       PHY_SetBBReg(pAdapter, rFPGA0_XA_HSSIParameter2, 0xe, 1);
+                       PHY_SetBBReg(pAdapter, rFPGA0_XB_HSSIParameter2, 0xe, 2);
+//                     r_ofdm_tx_en_val                = 0x3;
+
+                       // Power save
+                       //cosa r_ant_select_ofdm_val = 0x22222222;
+
+                       // 2008/10/31 MH From SD3 Willi's suggestion. We must read RF 1T table.
+                       // 2009/01/08 MH From Sd3 Willis. We need to close RFA by SW control
+                       if (pHalData->rf_type == RF_2T2R || pHalData->rf_type == RF_1T2R)
+                       {
+                               PHY_SetBBReg(pAdapter, rFPGA0_XAB_RFInterfaceSW, BIT10, 1);
+                               PHY_SetBBReg(pAdapter, rFPGA0_XA_RFInterfaceOE, BIT10, 0);
+                               PHY_SetBBReg(pAdapter, rFPGA0_XAB_RFInterfaceSW, BIT26, 0);
+//                             PHY_SetBBReg(pAdapter, rFPGA0_XB_RFInterfaceOE, BIT10, 0);
+                               PHY_SetBBReg(pAdapter, rFPGA0_XAB_RFParameter, BIT1, 0);
+                               PHY_SetBBReg(pAdapter, rFPGA0_XAB_RFParameter, BIT17, 1);
+                       }
+                       }
+               break;
+
+               case ANTENNA_AB:        // For 8192S
+                       p_ofdm_tx->r_tx_antenna         = 0x3;
+                       r_ofdm_tx_en_val                = 0x3;
+                       p_ofdm_tx->r_ant_l              = 0x3;
+                       p_ofdm_tx->r_ant_ht_s1          = 0x3;
+                       p_ofdm_tx->r_ant_non_ht_s1      = 0x3;
+                       p_cck_txrx->r_ccktx_enable      = 0xC;
+                       chgTx = 1;
+
+                       // From SD3 Willis suggestion !!! Set RF B as standby
+                       //if (IS_HARDWARE_TYPE_8192S(pAdapter))
+                       {
+                       PHY_SetBBReg(pAdapter, rFPGA0_XA_HSSIParameter2, 0xe, 2);
+                       PHY_SetBBReg(pAdapter, rFPGA0_XB_HSSIParameter2, 0xe, 2);
+
+                       // Disable Power save
+                       //cosa r_ant_select_ofdm_val = 0x3321333;
+#if 0
+                       // 2008/10/31 MH From SD3 Willi's suggestion. We must read RFA 2T table.
+                       if ((pHalData->VersionID == VERSION_8192S_ACUT)) // For RTL8192SU A-Cut only, by Roger, 2008.11.07.
+                       {
+                               mpt_RFConfigFromPreParaArrary(pAdapter, 1, RF_PATH_A);
+                       }
+#endif
+                       // 2009/01/08 MH From Sd3 Willis. We need to enable RFA/B by SW control
+                       if (pHalData->rf_type == RF_2T2R)
+                       {
+                               PHY_SetBBReg(pAdapter, rFPGA0_XAB_RFInterfaceSW, BIT10, 0);
+                               PHY_SetBBReg(pAdapter, rFPGA0_XAB_RFInterfaceSW, BIT26, 0);
+//                             PHY_SetBBReg(pAdapter, rFPGA0_XB_RFInterfaceOE, BIT10, 0);
+                               PHY_SetBBReg(pAdapter, rFPGA0_XAB_RFParameter, BIT1, 1);
+                               PHY_SetBBReg(pAdapter, rFPGA0_XAB_RFParameter, BIT17, 1);
+                       }
+                       }
+                       break;
+
+               default:
+                       break;
+       }
+
+       //
+       // r_rx_antenna_ofdm, bit0=A, bit1=B, bit2=C, bit3=D
+       // r_cckrx_enable : CCK default, 0=A, 1=B, 2=C, 3=D
+       // r_cckrx_enable_2 : CCK option, 0=A, 1=B, 2=C, 3=D
+       //
+       switch (pAdapter->mppriv.antenna_rx)
+       {
+               case ANTENNA_A:
+                       r_rx_antenna_ofdm               = 0x1;  // A
+                       p_cck_txrx->r_cckrx_enable      = 0x0;  // default: A
+                       p_cck_txrx->r_cckrx_enable_2    = 0x0;  // option: A
+                       chgRx = 1;
+                       break;
+
+               case ANTENNA_B:
+                       r_rx_antenna_ofdm               = 0x2;  // B
+                       p_cck_txrx->r_cckrx_enable      = 0x1;  // default: B
+                       p_cck_txrx->r_cckrx_enable_2    = 0x1;  // option: B
+                       chgRx = 1;
+                       break;
+
+               case ANTENNA_AB:
+                       r_rx_antenna_ofdm               = 0x3;  // AB
+                       p_cck_txrx->r_cckrx_enable      = 0x0;  // default:A
+                       p_cck_txrx->r_cckrx_enable_2    = 0x1;  // option:B
+                       chgRx = 1;
+                       break;
+
+               default:
+                       break;
+       }
+
+       if (chgTx && chgRx)
+       {
+               switch(pHalData->rf_chip)
+               {
+                       case RF_8225:
+                       case RF_8256:
+                       case RF_6052:
+                               //r_ant_sel_cck_val = r_ant_select_cck_val;
+                               PHY_SetBBReg(pAdapter, rFPGA1_TxInfo, 0x7fffffff, r_ant_select_ofdm_val);       //OFDM Tx
+                               PHY_SetBBReg(pAdapter, rFPGA0_TxInfo, 0x0000000f, r_ofdm_tx_en_val);            //OFDM Tx
+                               PHY_SetBBReg(pAdapter, rOFDM0_TRxPathEnable, 0x0000000f, r_rx_antenna_ofdm);    //OFDM Rx
+                               PHY_SetBBReg(pAdapter, rOFDM1_TRxPathEnable, 0x0000000f, r_rx_antenna_ofdm);    //OFDM Rx
+                               PHY_SetBBReg(pAdapter, rCCK0_AFESetting, bMaskByte3, r_ant_select_cck_val);//r_ant_sel_cck_val);                //CCK TxRx
+
+                               break;
+
+                       default:
+                               break;
+               }
+       }
+
+       RT_TRACE(_module_mp_, _drv_notice_, ("-SwitchAntenna: finished\n"));
+}
+
+s32 Hal_SetThermalMeter(PADAPTER pAdapter, u8 target_ther)
+{
+       HAL_DATA_TYPE *pHalData = GET_HAL_DATA(pAdapter);
+
+
+       if (!netif_running(pAdapter->pnetdev)) {
+               RT_TRACE(_module_mp_, _drv_warning_, ("SetThermalMeter! Fail: interface not opened!\n"));
+               return _FAIL;
+       }
+
+       if (check_fwstate(&pAdapter->mlmepriv, WIFI_MP_STATE) == _FALSE) {
+               RT_TRACE(_module_mp_, _drv_warning_, ("SetThermalMeter: Fail! not in MP mode!\n"));
+               return _FAIL;
+       }
+
+       target_ther &= 0xff;
+       if (target_ther < 0x07)
+               target_ther = 0x07;
+       else if (target_ther > 0x1d)
+               target_ther = 0x1d;
+
+       pHalData->EEPROMThermalMeter = target_ther;
+
+       return _SUCCESS;
+}
+
+void Hal_TriggerRFThermalMeter(PADAPTER pAdapter)
+{
+
+       write_rfreg(pAdapter, RF_PATH_A, RF_T_METER, 0x60);     // 0x24: RF Reg[6:5]
+
+//     RT_TRACE(_module_mp_,_drv_alert_, ("TriggerRFThermalMeter() finished.\n" ));
+}
+
+u8 Hal_ReadRFThermalMeter(PADAPTER pAdapter)
+{
+       u32 ThermalValue = 0;
+
+       ThermalValue = _read_rfreg(pAdapter, RF_PATH_A, RF_T_METER, 0x1F);      // 0x24: RF Reg[4:0]
+//     RT_TRACE(_module_mp_, _drv_alert_, ("ThermalValue = 0x%x\n", ThermalValue));
+       return (u8)ThermalValue;
+}
+
+void Hal_GetThermalMeter(PADAPTER pAdapter, u8 *value)
+{
+#if 0
+       fw_cmd(pAdapter, IOCMD_GET_THERMAL_METER);
+       rtw_msleep_os(1000);
+       fw_cmd_data(pAdapter, value, 1);
+       *value &= 0xFF;
+#else
+
+       Hal_TriggerRFThermalMeter(pAdapter);
+       rtw_msleep_os(1000);
+       *value = Hal_ReadRFThermalMeter(pAdapter);
+#endif
+}
+
+void Hal_SetSingleCarrierTx(PADAPTER pAdapter, u8 bStart)
+{
+    HAL_DATA_TYPE *pHalData = GET_HAL_DATA(pAdapter);
+       pAdapter->mppriv.MptCtx.bSingleCarrier = bStart;
+       if (bStart)// Start Single Carrier.
+       {
+               RT_TRACE(_module_mp_,_drv_alert_, ("SetSingleCarrierTx: test start\n"));
+               // 1. if OFDM block on?
+               if(!read_bbreg(pAdapter, rFPGA0_RFMOD, bOFDMEn))
+                       write_bbreg(pAdapter, rFPGA0_RFMOD, bOFDMEn, bEnable);//set OFDM block on
+
+               {
+               // 2. set CCK test mode off, set to CCK normal mode
+               write_bbreg(pAdapter, rCCK0_System, bCCKBBMode, bDisable);
+               // 3. turn on scramble setting
+               write_bbreg(pAdapter, rCCK0_System, bCCKScramble, bEnable);
+         }
+               // 4. Turn On Single Carrier Tx and turn off the other test modes.
+               write_bbreg(pAdapter, rOFDM1_LSTF, bOFDMContinueTx, bDisable);
+               write_bbreg(pAdapter, rOFDM1_LSTF, bOFDMSingleCarrier, bEnable);
+               write_bbreg(pAdapter, rOFDM1_LSTF, bOFDMSingleTone, bDisable);
+#ifdef CONFIG_RTL8192C
+               // 5. Disable TX power saving at STF & LLTF
+               write_bbreg(pAdapter, rOFDM1_LSTF, BIT22, 1);
+#endif
+       }
+       else// Stop Single Carrier.
+       {
+               RT_TRACE(_module_mp_,_drv_alert_, ("SetSingleCarrierTx: test stop\n"));
+
+               // Turn off all test modes.
+               write_bbreg(pAdapter, rOFDM1_LSTF, bOFDMContinueTx, bDisable);
+               write_bbreg(pAdapter, rOFDM1_LSTF, bOFDMSingleCarrier, bDisable);
+               write_bbreg(pAdapter, rOFDM1_LSTF, bOFDMSingleTone, bDisable);
+#ifdef CONFIG_RTL8192C
+               // Cancel disable TX power saving at STF&LLTF
+               write_bbreg(pAdapter, rOFDM1_LSTF, BIT22, 0);
+#endif
+               //Delay 10 ms //delay_ms(10);
+               rtw_msleep_os(10);
+
+               //BB Reset
+               write_bbreg(pAdapter, rPMAC_Reset, bBBResetB, 0x0);
+               write_bbreg(pAdapter, rPMAC_Reset, bBBResetB, 0x1);
+       }
+}
+
+
+void Hal_SetSingleToneTx(PADAPTER pAdapter, u8 bStart)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(pAdapter);
+       BOOLEAN         is92C = IS_92C_SERIAL(pHalData->VersionID);
+
+       u8 rfPath;
+
+       switch (pAdapter->mppriv.antenna_tx)
+       {
+               case ANTENNA_A:
+               default:
+                       rfPath = RF_PATH_A;
+                       break;
+               case ANTENNA_B:
+                       rfPath = RF_PATH_B;
+                       break;
+               case ANTENNA_C:
+                       rfPath = RF_PATH_C;
+                       break;
+       }
+
+       pAdapter->mppriv.MptCtx.bSingleTone = bStart;
+       if (bStart)// Start Single Tone.
+       {
+               RT_TRACE(_module_mp_,_drv_alert_, ("SetSingleToneTx: test start\n"));
+               write_bbreg(pAdapter, rFPGA0_RFMOD, bCCKEn, 0x0);
+               write_bbreg(pAdapter, rFPGA0_RFMOD, bOFDMEn, 0x0);
+
+               if (is92C)
+                {
+                       _write_rfreg(pAdapter, RF_PATH_A, 0x21, BIT19, 0x01);
+                       rtw_usleep_os(100);
+                       if (rfPath == RF_PATH_A)
+                               write_rfreg(pAdapter, RF_PATH_B, 0x00, 0x10000); // PAD all on.
+                       else if (rfPath == RF_PATH_B)
+                               write_rfreg(pAdapter, RF_PATH_A, 0x00, 0x10000); // PAD all on.
+               } else {
+                       write_rfreg(pAdapter, rfPath, 0x21, 0xd4000);
+                       rtw_usleep_os(100);
+               }
+
+               write_rfreg(pAdapter, rfPath, 0x00, 0x2001f); // PAD all on.
+               rtw_usleep_os(100);
+       }
+       else// Stop Single Tone.
+       {
+               RT_TRACE(_module_mp_,_drv_alert_, ("SetSingleToneTx: test stop\n"));
+               write_bbreg(pAdapter, rFPGA0_RFMOD, bCCKEn, 0x1);
+               write_bbreg(pAdapter, rFPGA0_RFMOD, bOFDMEn, 0x1);
+
+               if (is92C) {
+                       _write_rfreg(pAdapter, RF_PATH_A, 0x21, BIT19, 0x00);
+                       rtw_usleep_os(100);
+                       write_rfreg(pAdapter, RF_PATH_A, 0x00, 0x32d75); // PAD all on.
+                       write_rfreg(pAdapter, RF_PATH_B, 0x00, 0x32d75); // PAD all on.
+                       rtw_usleep_os(100);
+               } else {
+                       write_rfreg(pAdapter, rfPath, 0x21, 0x54000);
+                       rtw_usleep_os(100);
+
+                       write_rfreg(pAdapter, rfPath, 0x00, 0x30000); // PAD all on.
+                       rtw_usleep_os(100);
+               }
+       }
+
+}
+
+
+void Hal_SetCarrierSuppressionTx(PADAPTER pAdapter, u8 bStart)
+{
+       pAdapter->mppriv.MptCtx.bCarrierSuppression = bStart;
+       if (bStart) // Start Carrier Suppression.
+       {
+               RT_TRACE(_module_mp_,_drv_alert_, ("SetCarrierSuppressionTx: test start\n"));
+               //if(pMgntInfo->dot11CurrentWirelessMode == WIRELESS_MODE_B)
+               if (pAdapter->mppriv.rateidx <= MPT_RATE_11M)
+                 {
+                       // 1. if CCK block on?
+                       if(!read_bbreg(pAdapter, rFPGA0_RFMOD, bCCKEn))
+                               write_bbreg(pAdapter, rFPGA0_RFMOD, bCCKEn, bEnable);//set CCK block on
+
+                       //Turn Off All Test Mode
+                       write_bbreg(pAdapter, rOFDM1_LSTF, bOFDMContinueTx, bDisable);
+                       write_bbreg(pAdapter, rOFDM1_LSTF, bOFDMSingleCarrier, bDisable);
+                       write_bbreg(pAdapter, rOFDM1_LSTF, bOFDMSingleTone, bDisable);
+
+                       write_bbreg(pAdapter, rCCK0_System, bCCKBBMode, 0x2);    //transmit mode
+                       write_bbreg(pAdapter, rCCK0_System, bCCKScramble, 0x0);  //turn off scramble setting
+
+                       //Set CCK Tx Test Rate
+                       //PHY_SetBBReg(pAdapter, rCCK0_System, bCCKTxRate, pMgntInfo->ForcedDataRate);
+                       write_bbreg(pAdapter, rCCK0_System, bCCKTxRate, 0x0);    //Set FTxRate to 1Mbps
+               }
+       }
+       else// Stop Carrier Suppression.
+       {
+               RT_TRACE(_module_mp_,_drv_alert_, ("SetCarrierSuppressionTx: test stop\n"));
+               //if(pMgntInfo->dot11CurrentWirelessMode == WIRELESS_MODE_B)
+               if (pAdapter->mppriv.rateidx <= MPT_RATE_11M ) {
+                       write_bbreg(pAdapter, rCCK0_System, bCCKBBMode, 0x0);    //normal mode
+                       write_bbreg(pAdapter, rCCK0_System, bCCKScramble, 0x1);  //turn on scramble setting
+
+                       //BB Reset
+                       write_bbreg(pAdapter, rPMAC_Reset, bBBResetB, 0x0);
+                       write_bbreg(pAdapter, rPMAC_Reset, bBBResetB, 0x1);
+               }
+       }
+       //DbgPrint("\n MPT_ProSetCarrierSupp() is finished. \n");
+}
+
+void Hal_SetCCKContinuousTx(PADAPTER pAdapter, u8 bStart)
+{
+       u32 cckrate;
+
+       if (bStart)
+       {
+               RT_TRACE(_module_mp_, _drv_alert_,
+                        ("SetCCKContinuousTx: test start\n"));
+
+               // 1. if CCK block on?
+               if(!read_bbreg(pAdapter, rFPGA0_RFMOD, bCCKEn))
+                       write_bbreg(pAdapter, rFPGA0_RFMOD, bCCKEn, bEnable);//set CCK block on
+
+               //Turn Off All Test Mode
+               write_bbreg(pAdapter, rOFDM1_LSTF, bOFDMContinueTx, bDisable);
+               write_bbreg(pAdapter, rOFDM1_LSTF, bOFDMSingleCarrier, bDisable);
+               write_bbreg(pAdapter, rOFDM1_LSTF, bOFDMSingleTone, bDisable);
+               //Set CCK Tx Test Rate
+               #if 0
+               switch(pAdapter->mppriv.rateidx)
+               {
+                       case 2:
+                               cckrate = 0;
+                               break;
+                       case 4:
+                               cckrate = 1;
+                               break;
+                       case 11:
+                               cckrate = 2;
+                               break;
+                       case 22:
+                               cckrate = 3;
+                               break;
+                       default:
+                               cckrate = 0;
+                               break;
+               }
+               #else
+               cckrate  = pAdapter->mppriv.rateidx;
+               #endif
+               write_bbreg(pAdapter, rCCK0_System, bCCKTxRate, cckrate);
+               write_bbreg(pAdapter, rCCK0_System, bCCKBBMode, 0x2);   //transmit mode
+               write_bbreg(pAdapter, rCCK0_System, bCCKScramble, bEnable);     //turn on scramble setting
+
+#ifdef CONFIG_RTL8192C
+               // Patch for CCK 11M waveform
+               if (cckrate == MPT_RATE_1M)
+                       write_bbreg(pAdapter, 0xA71, BIT(6), bDisable);
+               else
+                       write_bbreg(pAdapter, 0xA71, BIT(6), bEnable);
+#endif
+
+       }
+       else {
+               RT_TRACE(_module_mp_, _drv_info_,
+                        ("SetCCKContinuousTx: test stop\n"));
+
+               write_bbreg(pAdapter, rCCK0_System, bCCKBBMode, 0x0);   //normal mode
+               write_bbreg(pAdapter, rCCK0_System, bCCKScramble, bEnable);     //turn on scramble setting
+
+               //BB Reset
+               write_bbreg(pAdapter, rPMAC_Reset, bBBResetB, 0x0);
+               write_bbreg(pAdapter, rPMAC_Reset, bBBResetB, 0x1);
+       }
+
+       pAdapter->mppriv.MptCtx.bCckContTx = bStart;
+       pAdapter->mppriv.MptCtx.bOfdmContTx = _FALSE;
+}/* mpt_StartCckContTx */
+
+void Hal_SetOFDMContinuousTx(PADAPTER pAdapter, u8 bStart)
+{
+    HAL_DATA_TYPE      *pHalData = GET_HAL_DATA(pAdapter);
+
+       if (bStart) {
+               RT_TRACE(_module_mp_, _drv_info_, ("SetOFDMContinuousTx: test start\n"));
+               // 1. if OFDM block on?
+               if(!read_bbreg(pAdapter, rFPGA0_RFMOD, bOFDMEn))
+                       write_bbreg(pAdapter, rFPGA0_RFMOD, bOFDMEn, bEnable);//set OFDM block on
+        {
+
+               // 2. set CCK test mode off, set to CCK normal mode
+               write_bbreg(pAdapter, rCCK0_System, bCCKBBMode, bDisable);
+
+               // 3. turn on scramble setting
+               write_bbreg(pAdapter, rCCK0_System, bCCKScramble, bEnable);
+        }
+               // 4. Turn On Continue Tx and turn off the other test modes.
+               write_bbreg(pAdapter, rOFDM1_LSTF, bOFDMContinueTx, bEnable);
+               write_bbreg(pAdapter, rOFDM1_LSTF, bOFDMSingleCarrier, bDisable);
+               write_bbreg(pAdapter, rOFDM1_LSTF, bOFDMSingleTone, bDisable);
+       } else {
+               RT_TRACE(_module_mp_,_drv_info_, ("SetOFDMContinuousTx: test stop\n"));
+               write_bbreg(pAdapter, rOFDM1_LSTF, bOFDMContinueTx, bDisable);
+               write_bbreg(pAdapter, rOFDM1_LSTF, bOFDMSingleCarrier, bDisable);
+               write_bbreg(pAdapter, rOFDM1_LSTF, bOFDMSingleTone, bDisable);
+               //Delay 10 ms
+               rtw_msleep_os(10);
+               //BB Reset
+               write_bbreg(pAdapter, rPMAC_Reset, bBBResetB, 0x0);
+               write_bbreg(pAdapter, rPMAC_Reset, bBBResetB, 0x1);
+       }
+
+       pAdapter->mppriv.MptCtx.bCckContTx = _FALSE;
+       pAdapter->mppriv.MptCtx.bOfdmContTx = bStart;
+}/* mpt_StartOfdmContTx */
+
+void Hal_SetContinuousTx(PADAPTER pAdapter, u8 bStart)
+{
+#if 0
+       // ADC turn off [bit24-21] adc port0 ~ port1
+       if (bStart) {
+               write_bbreg(pAdapter, rRx_Wait_CCCA, read_bbreg(pAdapter, rRx_Wait_CCCA) & 0xFE1FFFFF);
+               rtw_usleep_os(100);
+       }
+#endif
+       RT_TRACE(_module_mp_, _drv_info_,
+                ("SetContinuousTx: rate:%d\n", pAdapter->mppriv.rateidx));
+
+       pAdapter->mppriv.MptCtx.bStartContTx = bStart;
+       if (pAdapter->mppriv.rateidx <= MPT_RATE_11M)
+       {
+               Hal_SetCCKContinuousTx(pAdapter, bStart);
+       }
+       else if ((pAdapter->mppriv.rateidx >= MPT_RATE_6M) &&
+                (pAdapter->mppriv.rateidx <= MPT_RATE_MCS15))
+       {
+               Hal_SetOFDMContinuousTx(pAdapter, bStart);
+       }
+#if 0
+       // ADC turn on [bit24-21] adc port0 ~ port1
+       if (!bStart) {
+               write_bbreg(pAdapter, rRx_Wait_CCCA, read_bbreg(pAdapter, rRx_Wait_CCCA) | 0x01E00000);
+       }
+#endif
+}
+
+#endif // CONFIG_MP_INCLUDE
diff --git a/drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/rtl8192c_phycfg.c b/drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/rtl8192c_phycfg.c
new file mode 100644 (file)
index 0000000..8b19ced
--- /dev/null
@@ -0,0 +1,4840 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+/******************************************************************************
+
+ Module:       rtl8192c_phycfg.c
+
+ Note:         Merge 92SE/SU PHY config as below
+                       1. BB register R/W API
+                       2. RF register R/W API
+                       3. Initial BB/RF/MAC config by reading BB/MAC/RF txt.
+                       3. Power setting API
+                       4. Channel switch API
+                       5. Initial gain switch API.
+                       6. Other BB/MAC/RF API.
+
+ Function:     PHY: Extern function, phy: local function
+
+ Export:       PHY_FunctionName
+
+ Abbrev:       NONE
+
+ History:
+       Data            Who             Remark
+       08/08/2008  MHC         1. Port from 9x series phycfg.c
+                                               2. Reorganize code arch and ad description.
+                                               3. Collect similar function.
+                                               4. Seperate extern/local API.
+       08/12/2008      MHC             We must merge or move USB PHY relative function later.
+       10/07/2008      MHC             Add IQ calibration for PHY.(Only 1T2R mode now!!!)
+       11/06/2008      MHC             Add TX Power index PG file to config in 0xExx register
+                                               area to map with EEPROM/EFUSE tx pwr index.
+
+******************************************************************************/
+#define _HAL_8192C_PHYCFG_C_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <rtw_byteorder.h>
+
+#ifdef CONFIG_IOL
+#include <rtw_iol.h>
+#endif
+
+#include <rtl8192c_hal.h>
+
+
+/*---------------------------Define Local Constant---------------------------*/
+/* Channel switch:The size of command tables for switch channel*/
+#define MAX_PRECMD_CNT 16
+#define MAX_RFDEPENDCMD_CNT 16
+#define MAX_POSTCMD_CNT 16
+
+#define MAX_DOZE_WAITING_TIMES_9x 64
+
+/*---------------------------Define Local Constant---------------------------*/
+
+
+/*------------------------Define global variable-----------------------------*/
+
+/*------------------------Define local variable------------------------------*/
+
+
+/*--------------------Define export function prototype-----------------------*/
+// Please refer to header file
+/*--------------------Define export function prototype-----------------------*/
+
+/*----------------------------Function Body----------------------------------*/
+//
+// 1. BB register R/W API
+//
+
+/**
+* Function:    phy_CalculateBitShift
+*
+* OverView:    Get shifted position of the BitMask
+*
+* Input:
+*                      u4Byte          BitMask,
+*
+* Output:      none
+* Return:              u4Byte          Return the shift bit bit position of the mask
+*/
+static u32
+phy_CalculateBitShift(
+       u32 BitMask
+       )
+{
+       u32 i;
+
+       for(i=0; i<=31; i++)
+       {
+               if ( ((BitMask>>i) &  0x1 ) == 1)
+                       break;
+       }
+
+       return (i);
+}
+
+
+/**
+* Function:    PHY_QueryBBReg
+*
+* OverView:    Read "sepcific bits" from BB register
+*
+* Input:
+*                      PADAPTER                Adapter,
+*                      u4Byte                  RegAddr,                //The target address to be readback
+*                      u4Byte                  BitMask         //The target bit position in the target address
+*                                                                              //to be readback
+* Output:      None
+* Return:              u4Byte                  Data                    //The readback register value
+* Note:                This function is equal to "GetRegSetting" in PHY programming guide
+*/
+u32
+rtl8192c_PHY_QueryBBReg(
+       IN      PADAPTER        Adapter,
+       IN      u32             RegAddr,
+       IN      u32             BitMask
+       )
+{
+       u32     ReturnValue = 0, OriginalValue, BitShift;
+       u16     BBWaitCounter = 0;
+
+#if (DISABLE_BB_RF == 1)
+       return 0;
+#endif
+
+       //RT_TRACE(COMP_RF, DBG_TRACE, ("--->PHY_QueryBBReg(): RegAddr(%#lx), BitMask(%#lx)\n", RegAddr, BitMask));
+
+       OriginalValue = rtw_read32(Adapter, RegAddr);
+       BitShift = phy_CalculateBitShift(BitMask);
+       ReturnValue = (OriginalValue & BitMask) >> BitShift;
+
+       //RTPRINT(FPHY, PHY_BBR, ("BBR MASK=0x%lx Addr[0x%lx]=0x%lx\n", BitMask, RegAddr, OriginalValue));
+       //RT_TRACE(COMP_RF, DBG_TRACE, ("<---PHY_QueryBBReg(): RegAddr(%#lx), BitMask(%#lx), OriginalValue(%#lx)\n", RegAddr, BitMask, OriginalValue));
+
+       return (ReturnValue);
+
+}
+
+
+/**
+* Function:    PHY_SetBBReg
+*
+* OverView:    Write "Specific bits" to BB register (page 8~)
+*
+* Input:
+*                      PADAPTER                Adapter,
+*                      u4Byte                  RegAddr,                //The target address to be modified
+*                      u4Byte                  BitMask         //The target bit position in the target address
+*                                                                              //to be modified
+*                      u4Byte                  Data                    //The new register value in the target bit position
+*                                                                              //of the target address
+*
+* Output:      None
+* Return:              None
+* Note:                This function is equal to "PutRegSetting" in PHY programming guide
+*/
+
+VOID
+rtl8192c_PHY_SetBBReg(
+       IN      PADAPTER        Adapter,
+       IN      u32             RegAddr,
+       IN      u32             BitMask,
+       IN      u32             Data
+       )
+{
+       HAL_DATA_TYPE   *pHalData               = GET_HAL_DATA(Adapter);
+       //u16                   BBWaitCounter   = 0;
+       u32                     OriginalValue, BitShift;
+
+#if (DISABLE_BB_RF == 1)
+       return;
+#endif
+
+       //RT_TRACE(COMP_RF, DBG_TRACE, ("--->PHY_SetBBReg(): RegAddr(%#lx), BitMask(%#lx), Data(%#lx)\n", RegAddr, BitMask, Data));
+
+       if(BitMask!= bMaskDWord){//if not "double word" write
+               OriginalValue = rtw_read32(Adapter, RegAddr);
+               BitShift = phy_CalculateBitShift(BitMask);
+               Data = ((OriginalValue & (~BitMask)) | ((Data << BitShift) & BitMask));
+       }
+
+       rtw_write32(Adapter, RegAddr, Data);
+
+       //RTPRINT(FPHY, PHY_BBW, ("BBW MASK=0x%lx Addr[0x%lx]=0x%lx\n", BitMask, RegAddr, Data));
+       //RT_TRACE(COMP_RF, DBG_TRACE, ("<---PHY_SetBBReg(): RegAddr(%#lx), BitMask(%#lx), Data(%#lx)\n", RegAddr, BitMask, Data));
+
+}
+
+
+//
+// 2. RF register R/W API
+//
+
+/*-----------------------------------------------------------------------------
+ * Function:   phy_FwRFSerialRead()
+ *
+ * Overview:   We support firmware to execute RF-R/W.
+ *
+ * Input:              NONE
+ *
+ * Output:             NONE
+ *
+ * Return:             NONE
+ *
+ * Revised History:
+ *     When            Who             Remark
+ *     01/21/2008      MHC             Create Version 0.
+ *
+ *---------------------------------------------------------------------------*/
+static u32
+phy_FwRFSerialRead(
+       IN      PADAPTER                        Adapter,
+       IN      RF_RADIO_PATH_E eRFPath,
+       IN      u32                             Offset  )
+{
+       u32             retValue = 0;
+       //RT_ASSERT(FALSE,("deprecate!\n"));
+       return  (retValue);
+
+}      /* phy_FwRFSerialRead */
+
+
+/*-----------------------------------------------------------------------------
+ * Function:   phy_FwRFSerialWrite()
+ *
+ * Overview:   We support firmware to execute RF-R/W.
+ *
+ * Input:              NONE
+ *
+ * Output:             NONE
+ *
+ * Return:             NONE
+ *
+ * Revised History:
+ *     When            Who             Remark
+ *     01/21/2008      MHC             Create Version 0.
+ *
+ *---------------------------------------------------------------------------*/
+static VOID
+phy_FwRFSerialWrite(
+       IN      PADAPTER                        Adapter,
+       IN      RF_RADIO_PATH_E eRFPath,
+       IN      u32                             Offset,
+       IN      u32                             Data    )
+{
+       //RT_ASSERT(FALSE,("deprecate!\n"));
+}
+
+
+/**
+* Function:    phy_RFSerialRead
+*
+* OverView:    Read regster from RF chips
+*
+* Input:
+*                      PADAPTER                Adapter,
+*                      RF_RADIO_PATH_E eRFPath,        //Radio path of A/B/C/D
+*                      u4Byte                  Offset,         //The target address to be read
+*
+* Output:      None
+* Return:              u4Byte                  reback value
+* Note:                Threre are three types of serial operations:
+*                      1. Software serial write
+*                      2. Hardware LSSI-Low Speed Serial Interface
+*                      3. Hardware HSSI-High speed
+*                      serial write. Driver need to implement (1) and (2).
+*                      This function is equal to the combination of RF_ReadReg() and  RFLSSIRead()
+*/
+static u32
+phy_RFSerialRead(
+       IN      PADAPTER                        Adapter,
+       IN      RF_RADIO_PATH_E eRFPath,
+       IN      u32                             Offset
+       )
+{
+       u32                                             retValue = 0;
+       HAL_DATA_TYPE                           *pHalData = GET_HAL_DATA(Adapter);
+       BB_REGISTER_DEFINITION_T        *pPhyReg = &pHalData->PHYRegDef[eRFPath];
+       u32                                             NewOffset;
+       u32                                             tmplong,tmplong2;
+       u8                                      RfPiEnable=0;
+#if 0
+       if(pHalData->RFChipID == RF_8225 && Offset > 0x24) //36 valid regs
+               return  retValue;
+       if(pHalData->RFChipID == RF_8256 && Offset > 0x2D) //45 valid regs
+               return  retValue;
+#endif
+       //
+       // Make sure RF register offset is correct
+       //
+       Offset &= 0x3f;
+
+       //
+       // Switch page for 8256 RF IC
+       //
+       NewOffset = Offset;
+
+       // 2009/06/17 MH We can not execute IO for power save or other accident mode.
+       //if(RT_CANNOT_IO(Adapter))
+       //{
+       //      RTPRINT(FPHY, PHY_RFR, ("phy_RFSerialRead return all one\n"));
+       //      return  0xFFFFFFFF;
+       //}
+
+       // For 92S LSSI Read RFLSSIRead
+       // For RF A/B write 0x824/82c(does not work in the future)
+       // We must use 0x824 for RF A and B to execute read trigger
+       tmplong = PHY_QueryBBReg(Adapter, rFPGA0_XA_HSSIParameter2, bMaskDWord);
+       if(eRFPath == RF_PATH_A)
+               tmplong2 = tmplong;
+       else
+               tmplong2 = PHY_QueryBBReg(Adapter, pPhyReg->rfHSSIPara2, bMaskDWord);
+
+       tmplong2 = (tmplong2 & (~bLSSIReadAddress)) | (NewOffset<<23) | bLSSIReadEdge;  //T65 RF
+
+       PHY_SetBBReg(Adapter, rFPGA0_XA_HSSIParameter2, bMaskDWord, tmplong&(~bLSSIReadEdge));
+       rtw_udelay_os(10);// PlatformStallExecution(10);
+
+       PHY_SetBBReg(Adapter, pPhyReg->rfHSSIPara2, bMaskDWord, tmplong2);
+       rtw_udelay_os(100);//PlatformStallExecution(100);
+
+       PHY_SetBBReg(Adapter, rFPGA0_XA_HSSIParameter2, bMaskDWord, tmplong|bLSSIReadEdge);
+       rtw_udelay_os(10);//PlatformStallExecution(10);
+
+       if(eRFPath == RF_PATH_A)
+               RfPiEnable = (u8)PHY_QueryBBReg(Adapter, rFPGA0_XA_HSSIParameter1, BIT8);
+       else if(eRFPath == RF_PATH_B)
+               RfPiEnable = (u8)PHY_QueryBBReg(Adapter, rFPGA0_XB_HSSIParameter1, BIT8);
+
+       if(RfPiEnable)
+       {       // Read from BBreg8b8, 12 bits for 8190, 20bits for T65 RF
+               retValue = PHY_QueryBBReg(Adapter, pPhyReg->rfLSSIReadBackPi, bLSSIReadBackData);
+               //DBG_8192C("Readback from RF-PI : 0x%x\n", retValue);
+       }
+       else
+       {       //Read from BBreg8a0, 12 bits for 8190, 20 bits for T65 RF
+               retValue = PHY_QueryBBReg(Adapter, pPhyReg->rfLSSIReadBack, bLSSIReadBackData);
+               //DBG_8192C("Readback from RF-SI : 0x%x\n", retValue);
+       }
+       //DBG_8192C("RFR-%d Addr[0x%x]=0x%x\n", eRFPath, pPhyReg->rfLSSIReadBack, retValue);
+
+       return retValue;
+
+}
+
+
+
+/**
+* Function:    phy_RFSerialWrite
+*
+* OverView:    Write data to RF register (page 8~)
+*
+* Input:
+*                      PADAPTER                Adapter,
+*                      RF_RADIO_PATH_E eRFPath,        //Radio path of A/B/C/D
+*                      u4Byte                  Offset,         //The target address to be read
+*                      u4Byte                  Data                    //The new register Data in the target bit position
+*                                                                              //of the target to be read
+*
+* Output:      None
+* Return:              None
+* Note:                Threre are three types of serial operations:
+*                      1. Software serial write
+*                      2. Hardware LSSI-Low Speed Serial Interface
+*                      3. Hardware HSSI-High speed
+*                      serial write. Driver need to implement (1) and (2).
+*                      This function is equal to the combination of RF_ReadReg() and  RFLSSIRead()
+ *
+ * Note:                 For RF8256 only
+ *                      The total count of RTL8256(Zebra4) register is around 36 bit it only employs
+ *                      4-bit RF address. RTL8256 uses "register mode control bit" (Reg00[12], Reg00[10])
+ *                      to access register address bigger than 0xf. See "Appendix-4 in PHY Configuration
+ *                      programming guide" for more details.
+ *                      Thus, we define a sub-finction for RTL8526 register address conversion
+ *                    ===========================================================
+ *                      Register Mode          RegCTL[1]               RegCTL[0]               Note
+ *                                                             (Reg00[12])             (Reg00[10])
+ *                    ===========================================================
+ *                      Reg_Mode0                              0                               x                       Reg 0 ~15(0x0 ~ 0xf)
+ *                    ------------------------------------------------------------------
+ *                      Reg_Mode1                              1                               0                       Reg 16 ~30(0x1 ~ 0xf)
+ *                    ------------------------------------------------------------------
+ *                      Reg_Mode2                              1                               1                       Reg 31 ~ 45(0x1 ~ 0xf)
+ *                    ------------------------------------------------------------------
+ *
+ *     2008/09/02      MH      Add 92S RF definition
+ *
+ *
+ *
+*/
+static VOID
+phy_RFSerialWrite(
+       IN      PADAPTER                        Adapter,
+       IN      RF_RADIO_PATH_E eRFPath,
+       IN      u32                             Offset,
+       IN      u32                             Data
+       )
+{
+       u32                                             DataAndAddr = 0;
+       HAL_DATA_TYPE                           *pHalData = GET_HAL_DATA(Adapter);
+       BB_REGISTER_DEFINITION_T        *pPhyReg = &pHalData->PHYRegDef[eRFPath];
+       u32                                             NewOffset;
+
+#if 0
+       //<Roger_TODO> We should check valid regs for RF_6052 case.
+       if(pHalData->RFChipID == RF_8225 && Offset > 0x24) //36 valid regs
+               return;
+       if(pHalData->RFChipID == RF_8256 && Offset > 0x2D) //45 valid regs
+               return;
+#endif
+
+       // 2009/06/17 MH We can not execute IO for power save or other accident mode.
+       //if(RT_CANNOT_IO(Adapter))
+       //{
+       //      RTPRINT(FPHY, PHY_RFW, ("phy_RFSerialWrite stop\n"));
+       //      return;
+       //}
+
+       Offset &= 0x3f;
+
+       //
+       // Shadow Update
+       //
+       //PHY_RFShadowWrite(Adapter, eRFPath, Offset, Data);
+
+       //
+       // Switch page for 8256 RF IC
+       //
+       NewOffset = Offset;
+
+       //
+       // Put write addr in [5:0]  and write data in [31:16]
+       //
+       //DataAndAddr = (Data<<16) | (NewOffset&0x3f);
+       DataAndAddr = ((NewOffset<<20) | (Data&0x000fffff)) & 0x0fffffff;       // T65 RF
+
+       //
+       // Write Operation
+       //
+       PHY_SetBBReg(Adapter, pPhyReg->rf3wireOffset, bMaskDWord, DataAndAddr);
+       //RTPRINT(FPHY, PHY_RFW, ("RFW-%d Addr[0x%lx]=0x%lx\n", eRFPath, pPhyReg->rf3wireOffset, DataAndAddr));
+
+}
+
+
+/**
+* Function:    PHY_QueryRFReg
+*
+* OverView:    Query "Specific bits" to RF register (page 8~)
+*
+* Input:
+*                      PADAPTER                Adapter,
+*                      RF_RADIO_PATH_E eRFPath,        //Radio path of A/B/C/D
+*                      u4Byte                  RegAddr,                //The target address to be read
+*                      u4Byte                  BitMask         //The target bit position in the target address
+*                                                                              //to be read
+*
+* Output:      None
+* Return:              u4Byte                  Readback value
+* Note:                This function is equal to "GetRFRegSetting" in PHY programming guide
+*/
+u32
+rtl8192c_PHY_QueryRFReg(
+       IN      PADAPTER                        Adapter,
+       IN      RF_RADIO_PATH_E eRFPath,
+       IN      u32                             RegAddr,
+       IN      u32                             BitMask
+       )
+{
+       u32 Original_Value, Readback_Value, BitShift;
+       //HAL_DATA_TYPE         *pHalData = GET_HAL_DATA(Adapter);
+       //u8    RFWaitCounter = 0;
+       //_irqL irqL;
+
+#if (DISABLE_BB_RF == 1)
+       return 0;
+#endif
+
+       //RT_TRACE(COMP_RF, DBG_TRACE, ("--->PHY_QueryRFReg(): RegAddr(%#lx), eRFPath(%#x), BitMask(%#lx)\n", RegAddr, eRFPath,BitMask));
+
+#ifdef CONFIG_USB_HCI
+       //PlatformAcquireMutex(&pHalData->mxRFOperate);
+#else
+       //_enter_critical(&pHalData->rf_lock, &irqL);
+#endif
+
+
+       Original_Value = phy_RFSerialRead(Adapter, eRFPath, RegAddr);
+
+       BitShift =  phy_CalculateBitShift(BitMask);
+       Readback_Value = (Original_Value & BitMask) >> BitShift;
+
+#ifdef CONFIG_USB_HCI
+       //PlatformReleaseMutex(&pHalData->mxRFOperate);
+#else
+       //_exit_critical(&pHalData->rf_lock, &irqL);
+#endif
+
+
+       //RTPRINT(FPHY, PHY_RFR, ("RFR-%d MASK=0x%lx Addr[0x%lx]=0x%lx\n", eRFPath, BitMask, RegAddr, Original_Value));//BitMask(%#lx),BitMask,
+       //RT_TRACE(COMP_RF, DBG_TRACE, ("<---PHY_QueryRFReg(): RegAddr(%#lx), eRFPath(%#x),  Original_Value(%#lx)\n",
+       //                              RegAddr, eRFPath, Original_Value));
+
+       return (Readback_Value);
+}
+
+/**
+* Function:    PHY_SetRFReg
+*
+* OverView:    Write "Specific bits" to RF register (page 8~)
+*
+* Input:
+*                      PADAPTER                Adapter,
+*                      RF_RADIO_PATH_E eRFPath,        //Radio path of A/B/C/D
+*                      u4Byte                  RegAddr,                //The target address to be modified
+*                      u4Byte                  BitMask         //The target bit position in the target address
+*                                                                              //to be modified
+*                      u4Byte                  Data                    //The new register Data in the target bit position
+*                                                                              //of the target address
+*
+* Output:      None
+* Return:              None
+* Note:                This function is equal to "PutRFRegSetting" in PHY programming guide
+*/
+VOID
+rtl8192c_PHY_SetRFReg(
+       IN      PADAPTER                        Adapter,
+       IN      RF_RADIO_PATH_E eRFPath,
+       IN      u32                             RegAddr,
+       IN      u32                             BitMask,
+       IN      u32                             Data
+       )
+{
+
+       //HAL_DATA_TYPE *pHalData               = GET_HAL_DATA(Adapter);
+       //u1Byte                        RFWaitCounter   = 0;
+       u32             Original_Value, BitShift;
+       //_irqL irqL;
+
+#if (DISABLE_BB_RF == 1)
+       return;
+#endif
+
+       //RT_TRACE(COMP_RF, DBG_TRACE, ("--->PHY_SetRFReg(): RegAddr(%#lx), BitMask(%#lx), Data(%#lx), eRFPath(%#x)\n",
+       //      RegAddr, BitMask, Data, eRFPath));
+       //RTPRINT(FINIT, INIT_RF, ("PHY_SetRFReg(): RegAddr(%#lx), BitMask(%#lx), Data(%#lx), eRFPath(%#x)\n",
+       //      RegAddr, BitMask, Data, eRFPath));
+
+
+#ifdef CONFIG_USB_HCI
+       //PlatformAcquireMutex(&pHalData->mxRFOperate);
+#else
+       //_enter_critical(&pHalData->rf_lock, &irqL);
+#endif
+
+
+       // RF data is 12 bits only
+       if (BitMask != bRFRegOffsetMask)
+       {
+               Original_Value = phy_RFSerialRead(Adapter, eRFPath, RegAddr);
+               BitShift =  phy_CalculateBitShift(BitMask);
+               Data = ((Original_Value & (~BitMask)) | (Data<< BitShift));
+       }
+
+       phy_RFSerialWrite(Adapter, eRFPath, RegAddr, Data);
+
+
+
+#ifdef CONFIG_USB_HCI
+       //PlatformReleaseMutex(&pHalData->mxRFOperate);
+#else
+       //_exit_critical(&pHalData->rf_lock, &irqL);
+#endif
+
+       //PHY_QueryRFReg(Adapter,eRFPath,RegAddr,BitMask);
+       //RT_TRACE(COMP_RF, DBG_TRACE, ("<---PHY_SetRFReg(): RegAddr(%#lx), BitMask(%#lx), Data(%#lx), eRFPath(%#x)\n",
+       //              RegAddr, BitMask, Data, eRFPath));
+
+}
+
+
+//
+// 3. Initial MAC/BB/RF config by reading MAC/BB/RF txt.
+//
+
+/*-----------------------------------------------------------------------------
+ * Function:    phy_ConfigMACWithParaFile()
+ *
+ * Overview:    This function read BB parameters from general file format, and do register
+ *                       Read/Write
+ *
+ * Input:              PADAPTER                Adapter
+ *                     ps1Byte                         pFileName
+ *
+ * Output:      NONE
+ *
+ * Return:      RT_STATUS_SUCCESS: configuration file exist
+ *
+ * Note:               The format of MACPHY_REG.txt is different from PHY and RF.
+ *                     [Register][Mask][Value]
+ *---------------------------------------------------------------------------*/
+static int
+phy_ConfigMACWithParaFile(
+       IN      PADAPTER                Adapter,
+       IN      u8*                     pFileName
+)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+
+       int             rtStatus = _SUCCESS;
+
+       return rtStatus;
+}
+
+/*-----------------------------------------------------------------------------
+ * Function:    phy_ConfigMACWithHeaderFile()
+ *
+ * Overview:    This function read BB parameters from Header file we gen, and do register
+ *                       Read/Write
+ *
+ * Input:              PADAPTER                Adapter
+ *                     ps1Byte                         pFileName
+ *
+ * Output:      NONE
+ *
+ * Return:      RT_STATUS_SUCCESS: configuration file exist
+ *
+ * Note:               The format of MACPHY_REG.txt is different from PHY and RF.
+ *                     [Register][Mask][Value]
+ *---------------------------------------------------------------------------*/
+static int
+phy_ConfigMACWithHeaderFile(
+       IN      PADAPTER                Adapter
+)
+{
+       u32                                     i = 0;
+       u32                                     ArrayLength = 0;
+       u32*                            ptrArray;
+       //HAL_DATA_TYPE                 *pHalData = GET_HAL_DATA(Adapter);
+
+       //2008.11.06 Modified by tynli.
+       //RT_TRACE(COMP_INIT, DBG_LOUD, ("Read Rtl819XMACPHY_Array\n"));
+       ArrayLength = MAC_2T_ArrayLength;
+       ptrArray = Rtl819XMAC_Array;
+
+#ifdef CONFIG_IOL_MAC
+       if(rtw_IOL_applied(Adapter))
+       {
+               struct xmit_frame       *xmit_frame;
+               if((xmit_frame=rtw_IOL_accquire_xmit_frame(Adapter)) == NULL)
+                       return _FAIL;
+
+               for(i = 0 ;i < ArrayLength;i=i+2){ // Add by tynli for 2 column
+                       rtw_IOL_append_WB_cmd(xmit_frame, ptrArray[i], (u8)ptrArray[i+1]);
+               }
+
+               return rtw_IOL_exec_cmds_sync(Adapter, xmit_frame, 1000);
+       }
+       else
+#endif
+       {
+               for(i = 0 ;i < ArrayLength;i=i+2){ // Add by tynli for 2 column
+                       rtw_write8(Adapter, ptrArray[i], (u8)ptrArray[i+1]);
+               }
+       }
+
+       return _SUCCESS;
+
+}
+
+
+/*-----------------------------------------------------------------------------
+ * Function:    PHY_MACConfig8192C
+ *
+ * Overview:   Condig MAC by header file or parameter file.
+ *
+ * Input:       NONE
+ *
+ * Output:      NONE
+ *
+ * Return:      NONE
+ *
+ * Revised History:
+ *  When               Who             Remark
+ *  08/12/2008 MHC             Create Version 0.
+ *
+ *---------------------------------------------------------------------------*/
+int
+PHY_MACConfig8192C(
+       IN      PADAPTER        Adapter
+       )
+{
+       int             rtStatus = _SUCCESS;
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       s8                      *pszMACRegFile;
+       s8                      sz88CMACRegFile[] = RTL8188C_PHY_MACREG;
+       s8                      sz92CMACRegFile[] = RTL8192C_PHY_MACREG;
+       BOOLEAN         is92C = IS_92C_SERIAL(pHalData->VersionID);
+
+       if(is92C)
+               pszMACRegFile = sz92CMACRegFile;
+       else
+               pszMACRegFile = sz88CMACRegFile;
+
+       //
+       // Config MAC
+       //
+#ifdef CONFIG_EMBEDDED_FWIMG
+       rtStatus = phy_ConfigMACWithHeaderFile(Adapter);
+#else
+
+       // Not make sure EEPROM, add later
+       //RT_TRACE(COMP_INIT, DBG_LOUD, ("Read MACREG.txt\n"));
+       rtStatus = phy_ConfigMACWithParaFile(Adapter, pszMACRegFile);
+#endif
+
+#ifdef CONFIG_PCI_HCI
+       //this switching setting cause some 8192cu hw have redownload fw fail issue
+       //improve 2-stream TX EVM by Jenyu
+       if(is92C)
+               rtw_write8(Adapter, REG_SPS0_CTRL+3,0x71);
+#endif
+
+
+       // 2010.07.13 AMPDU aggregation number 9
+       //rtw_write16(Adapter, REG_MAX_AGGR_NUM, MAX_AGGR_NUM);
+       rtw_write8(Adapter, REG_MAX_AGGR_NUM, 0x0A); //By tynli. 2010.11.18.
+#ifdef CONFIG_USB_HCI
+       if(is92C && (BOARD_USB_DONGLE == pHalData->BoardType))
+               rtw_write8(Adapter, 0x40,0x04);
+#endif
+
+       return rtStatus;
+
+}
+
+
+/**
+* Function:    phy_InitBBRFRegisterDefinition
+*
+* OverView:    Initialize Register definition offset for Radio Path A/B/C/D
+*
+* Input:
+*                      PADAPTER                Adapter,
+*
+* Output:      None
+* Return:              None
+* Note:                The initialization value is constant and it should never be changes
+*/
+static VOID
+phy_InitBBRFRegisterDefinition(
+       IN      PADAPTER                Adapter
+)
+{
+       HAL_DATA_TYPE           *pHalData = GET_HAL_DATA(Adapter);
+
+       // RF Interface Sowrtware Control
+       pHalData->PHYRegDef[RF_PATH_A].rfintfs = rFPGA0_XAB_RFInterfaceSW; // 16 LSBs if read 32-bit from 0x870
+       pHalData->PHYRegDef[RF_PATH_B].rfintfs = rFPGA0_XAB_RFInterfaceSW; // 16 MSBs if read 32-bit from 0x870 (16-bit for 0x872)
+       pHalData->PHYRegDef[RF_PATH_C].rfintfs = rFPGA0_XCD_RFInterfaceSW;// 16 LSBs if read 32-bit from 0x874
+       pHalData->PHYRegDef[RF_PATH_D].rfintfs = rFPGA0_XCD_RFInterfaceSW;// 16 MSBs if read 32-bit from 0x874 (16-bit for 0x876)
+
+       // RF Interface Readback Value
+       pHalData->PHYRegDef[RF_PATH_A].rfintfi = rFPGA0_XAB_RFInterfaceRB; // 16 LSBs if read 32-bit from 0x8E0
+       pHalData->PHYRegDef[RF_PATH_B].rfintfi = rFPGA0_XAB_RFInterfaceRB;// 16 MSBs if read 32-bit from 0x8E0 (16-bit for 0x8E2)
+       pHalData->PHYRegDef[RF_PATH_C].rfintfi = rFPGA0_XCD_RFInterfaceRB;// 16 LSBs if read 32-bit from 0x8E4
+       pHalData->PHYRegDef[RF_PATH_D].rfintfi = rFPGA0_XCD_RFInterfaceRB;// 16 MSBs if read 32-bit from 0x8E4 (16-bit for 0x8E6)
+
+       // RF Interface Output (and Enable)
+       pHalData->PHYRegDef[RF_PATH_A].rfintfo = rFPGA0_XA_RFInterfaceOE; // 16 LSBs if read 32-bit from 0x860
+       pHalData->PHYRegDef[RF_PATH_B].rfintfo = rFPGA0_XB_RFInterfaceOE; // 16 LSBs if read 32-bit from 0x864
+
+       // RF Interface (Output and)  Enable
+       pHalData->PHYRegDef[RF_PATH_A].rfintfe = rFPGA0_XA_RFInterfaceOE; // 16 MSBs if read 32-bit from 0x860 (16-bit for 0x862)
+       pHalData->PHYRegDef[RF_PATH_B].rfintfe = rFPGA0_XB_RFInterfaceOE; // 16 MSBs if read 32-bit from 0x864 (16-bit for 0x866)
+
+       //Addr of LSSI. Wirte RF register by driver
+       pHalData->PHYRegDef[RF_PATH_A].rf3wireOffset = rFPGA0_XA_LSSIParameter; //LSSI Parameter
+       pHalData->PHYRegDef[RF_PATH_B].rf3wireOffset = rFPGA0_XB_LSSIParameter;
+
+       // RF parameter
+       pHalData->PHYRegDef[RF_PATH_A].rfLSSI_Select = rFPGA0_XAB_RFParameter;  //BB Band Select
+       pHalData->PHYRegDef[RF_PATH_B].rfLSSI_Select = rFPGA0_XAB_RFParameter;
+       pHalData->PHYRegDef[RF_PATH_C].rfLSSI_Select = rFPGA0_XCD_RFParameter;
+       pHalData->PHYRegDef[RF_PATH_D].rfLSSI_Select = rFPGA0_XCD_RFParameter;
+
+       // Tx AGC Gain Stage (same for all path. Should we remove this?)
+       pHalData->PHYRegDef[RF_PATH_A].rfTxGainStage = rFPGA0_TxGainStage; //Tx gain stage
+       pHalData->PHYRegDef[RF_PATH_B].rfTxGainStage = rFPGA0_TxGainStage; //Tx gain stage
+       pHalData->PHYRegDef[RF_PATH_C].rfTxGainStage = rFPGA0_TxGainStage; //Tx gain stage
+       pHalData->PHYRegDef[RF_PATH_D].rfTxGainStage = rFPGA0_TxGainStage; //Tx gain stage
+
+       // Tranceiver A~D HSSI Parameter-1
+       pHalData->PHYRegDef[RF_PATH_A].rfHSSIPara1 = rFPGA0_XA_HSSIParameter1;  //wire control parameter1
+       pHalData->PHYRegDef[RF_PATH_B].rfHSSIPara1 = rFPGA0_XB_HSSIParameter1;  //wire control parameter1
+
+       // Tranceiver A~D HSSI Parameter-2
+       pHalData->PHYRegDef[RF_PATH_A].rfHSSIPara2 = rFPGA0_XA_HSSIParameter2;  //wire control parameter2
+       pHalData->PHYRegDef[RF_PATH_B].rfHSSIPara2 = rFPGA0_XB_HSSIParameter2;  //wire control parameter2
+
+       // RF switch Control
+       pHalData->PHYRegDef[RF_PATH_A].rfSwitchControl = rFPGA0_XAB_SwitchControl; //TR/Ant switch control
+       pHalData->PHYRegDef[RF_PATH_B].rfSwitchControl = rFPGA0_XAB_SwitchControl;
+       pHalData->PHYRegDef[RF_PATH_C].rfSwitchControl = rFPGA0_XCD_SwitchControl;
+       pHalData->PHYRegDef[RF_PATH_D].rfSwitchControl = rFPGA0_XCD_SwitchControl;
+
+       // AGC control 1
+       pHalData->PHYRegDef[RF_PATH_A].rfAGCControl1 = rOFDM0_XAAGCCore1;
+       pHalData->PHYRegDef[RF_PATH_B].rfAGCControl1 = rOFDM0_XBAGCCore1;
+       pHalData->PHYRegDef[RF_PATH_C].rfAGCControl1 = rOFDM0_XCAGCCore1;
+       pHalData->PHYRegDef[RF_PATH_D].rfAGCControl1 = rOFDM0_XDAGCCore1;
+
+       // AGC control 2
+       pHalData->PHYRegDef[RF_PATH_A].rfAGCControl2 = rOFDM0_XAAGCCore2;
+       pHalData->PHYRegDef[RF_PATH_B].rfAGCControl2 = rOFDM0_XBAGCCore2;
+       pHalData->PHYRegDef[RF_PATH_C].rfAGCControl2 = rOFDM0_XCAGCCore2;
+       pHalData->PHYRegDef[RF_PATH_D].rfAGCControl2 = rOFDM0_XDAGCCore2;
+
+       // RX AFE control 1
+       pHalData->PHYRegDef[RF_PATH_A].rfRxIQImbalance = rOFDM0_XARxIQImbalance;
+       pHalData->PHYRegDef[RF_PATH_B].rfRxIQImbalance = rOFDM0_XBRxIQImbalance;
+       pHalData->PHYRegDef[RF_PATH_C].rfRxIQImbalance = rOFDM0_XCRxIQImbalance;
+       pHalData->PHYRegDef[RF_PATH_D].rfRxIQImbalance = rOFDM0_XDRxIQImbalance;
+
+       // RX AFE control 1
+       pHalData->PHYRegDef[RF_PATH_A].rfRxAFE = rOFDM0_XARxAFE;
+       pHalData->PHYRegDef[RF_PATH_B].rfRxAFE = rOFDM0_XBRxAFE;
+       pHalData->PHYRegDef[RF_PATH_C].rfRxAFE = rOFDM0_XCRxAFE;
+       pHalData->PHYRegDef[RF_PATH_D].rfRxAFE = rOFDM0_XDRxAFE;
+
+       // Tx AFE control 1
+       pHalData->PHYRegDef[RF_PATH_A].rfTxIQImbalance = rOFDM0_XATxIQImbalance;
+       pHalData->PHYRegDef[RF_PATH_B].rfTxIQImbalance = rOFDM0_XBTxIQImbalance;
+       pHalData->PHYRegDef[RF_PATH_C].rfTxIQImbalance = rOFDM0_XCTxIQImbalance;
+       pHalData->PHYRegDef[RF_PATH_D].rfTxIQImbalance = rOFDM0_XDTxIQImbalance;
+
+       // Tx AFE control 2
+       pHalData->PHYRegDef[RF_PATH_A].rfTxAFE = rOFDM0_XATxAFE;
+       pHalData->PHYRegDef[RF_PATH_B].rfTxAFE = rOFDM0_XBTxAFE;
+       pHalData->PHYRegDef[RF_PATH_C].rfTxAFE = rOFDM0_XCTxAFE;
+       pHalData->PHYRegDef[RF_PATH_D].rfTxAFE = rOFDM0_XDTxAFE;
+
+       // Tranceiver LSSI Readback SI mode
+       pHalData->PHYRegDef[RF_PATH_A].rfLSSIReadBack = rFPGA0_XA_LSSIReadBack;
+       pHalData->PHYRegDef[RF_PATH_B].rfLSSIReadBack = rFPGA0_XB_LSSIReadBack;
+       pHalData->PHYRegDef[RF_PATH_C].rfLSSIReadBack = rFPGA0_XC_LSSIReadBack;
+       pHalData->PHYRegDef[RF_PATH_D].rfLSSIReadBack = rFPGA0_XD_LSSIReadBack;
+
+       // Tranceiver LSSI Readback PI mode
+       pHalData->PHYRegDef[RF_PATH_A].rfLSSIReadBackPi = TransceiverA_HSPI_Readback;
+       pHalData->PHYRegDef[RF_PATH_B].rfLSSIReadBackPi = TransceiverB_HSPI_Readback;
+       //pHalData->PHYRegDef[RF_PATH_C].rfLSSIReadBackPi = rFPGA0_XC_LSSIReadBack;
+       //pHalData->PHYRegDef[RF_PATH_D].rfLSSIReadBackPi = rFPGA0_XD_LSSIReadBack;
+
+}
+
+
+/*-----------------------------------------------------------------------------
+ * Function:    phy_ConfigBBWithParaFile()
+ *
+ * Overview:    This function read BB parameters from general file format, and do register
+ *                       Read/Write
+ *
+ * Input:              PADAPTER                Adapter
+ *                     ps1Byte                         pFileName
+ *
+ * Output:      NONE
+ *
+ * Return:      RT_STATUS_SUCCESS: configuration file exist
+ *     2008/11/06      MH      For 92S we do not support silent reset now. Disable
+ *                                     parameter file compare!!!!!!??
+ *
+ *---------------------------------------------------------------------------*/
+static int
+phy_ConfigBBWithParaFile(
+       IN      PADAPTER                Adapter,
+       IN      u8*                     pFileName
+)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+
+       int             rtStatus = _SUCCESS;
+
+       return rtStatus;
+}
+
+
+
+//****************************************
+// The following is for High Power PA
+//****************************************
+VOID
+phy_ConfigBBExternalPA(
+       IN      PADAPTER                        Adapter
+)
+{
+#ifdef CONFIG_USB_HCI
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       u16 i=0;
+       u32 temp=0;
+
+       if(!pHalData->ExternalPA)
+       {
+               return;
+       }
+
+       // 2010/10/19 MH According to Jenyu/EEChou 's opinion, we need not to execute the
+       // same code as SU. It is already updated in PHY_REG_1T_HP.txt.
+#if 0
+       PHY_SetBBReg(Adapter, 0xee8, BIT28, 1);
+       temp = PHY_QueryBBReg(Adapter, 0x860, bMaskDWord);
+       temp |= (BIT26|BIT21|BIT10|BIT5);
+       PHY_SetBBReg(Adapter, 0x860, bMaskDWord, temp);
+       PHY_SetBBReg(Adapter, 0x870, BIT10, 0);
+       PHY_SetBBReg(Adapter, 0xc80, bMaskDWord, 0x20000080);
+       PHY_SetBBReg(Adapter, 0xc88, bMaskDWord, 0x40000100);
+#endif
+
+#endif
+}
+
+/*-----------------------------------------------------------------------------
+ * Function:    phy_ConfigBBWithHeaderFile()
+ *
+ * Overview:    This function read BB parameters from general file format, and do register
+ *                       Read/Write
+ *
+ * Input:              PADAPTER                Adapter
+ *                     u1Byte                  ConfigType     0 => PHY_CONFIG
+ *                                                                              1 =>AGC_TAB
+ *
+ * Output:      NONE
+ *
+ * Return:      RT_STATUS_SUCCESS: configuration file exist
+ *
+ *---------------------------------------------------------------------------*/
+static int
+phy_ConfigBBWithHeaderFile(
+       IN      PADAPTER                Adapter,
+       IN      u8                      ConfigType
+)
+{
+       int i;
+       u32*    Rtl819XPHY_REGArray_Table;
+       u32*    Rtl819XAGCTAB_Array_Table;
+       u16     PHY_REGArrayLen, AGCTAB_ArrayLen;
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       int ret = _SUCCESS;
+
+       //
+       // 2009.11.24. Modified by tynli.
+       //
+       if(IS_92C_SERIAL(pHalData->VersionID))
+       {
+               AGCTAB_ArrayLen = AGCTAB_2TArrayLength;
+               Rtl819XAGCTAB_Array_Table = Rtl819XAGCTAB_2TArray;
+               PHY_REGArrayLen = PHY_REG_2TArrayLength;
+               Rtl819XPHY_REGArray_Table = Rtl819XPHY_REG_2TArray;
+#ifdef CONFIG_USB_HCI
+               if(pHalData->BoardType == BOARD_MINICARD )
+               {
+                       PHY_REGArrayLen = PHY_REG_2T_mCardArrayLength;
+                       Rtl819XPHY_REGArray_Table = Rtl819XPHY_REG_2T_mCardArray;
+               }
+#endif
+       }
+       else
+       {
+               AGCTAB_ArrayLen = AGCTAB_1TArrayLength;
+               Rtl819XAGCTAB_Array_Table = Rtl819XAGCTAB_1TArray;
+               PHY_REGArrayLen = PHY_REG_1TArrayLength;
+               Rtl819XPHY_REGArray_Table = Rtl819XPHY_REG_1TArray;
+#ifdef CONFIG_USB_HCI
+               if(pHalData->BoardType == BOARD_MINICARD )
+               {
+                       PHY_REGArrayLen = PHY_REG_1T_mCardArrayLength;
+                       Rtl819XPHY_REGArray_Table = Rtl819XPHY_REG_1T_mCardArray;
+               }
+               else if(pHalData->BoardType == BOARD_USB_High_PA)
+               {
+                       AGCTAB_ArrayLen = AGCTAB_1T_HPArrayLength;
+                       Rtl819XAGCTAB_Array_Table = Rtl819XAGCTAB_1T_HPArray;
+                       PHY_REGArrayLen = PHY_REG_1T_HPArrayLength;
+                       Rtl819XPHY_REGArray_Table = Rtl819XPHY_REG_1T_HPArray;
+               }
+#endif
+       }
+
+       if(ConfigType == BaseBand_Config_PHY_REG)
+       {
+               #ifdef CONFIG_IOL_BB_PHY_REG
+               if(rtw_IOL_applied(Adapter))
+               {
+                       struct xmit_frame       *xmit_frame;
+                       u32 tmp_value;
+
+                       if((xmit_frame=rtw_IOL_accquire_xmit_frame(Adapter)) == NULL) {
+                               ret = _FAIL;
+                               goto exit;
+                       }
+
+                       for(i=0;i<PHY_REGArrayLen;i=i+2)
+                       {
+                               tmp_value=Rtl819XPHY_REGArray_Table[i+1];
+
+                               if (Rtl819XPHY_REGArray_Table[i] == 0xfe)
+                                       rtw_IOL_append_DELAY_MS_cmd(xmit_frame, 50);
+                               else if (Rtl819XPHY_REGArray_Table[i] == 0xfd)
+                                       rtw_IOL_append_DELAY_MS_cmd(xmit_frame, 5);
+                               else if (Rtl819XPHY_REGArray_Table[i] == 0xfc)
+                                       rtw_IOL_append_DELAY_MS_cmd(xmit_frame, 1);
+                               else if (Rtl819XPHY_REGArray_Table[i] == 0xfb)
+                                       rtw_IOL_append_DELAY_US_cmd(xmit_frame, 50);
+                               else if (Rtl819XPHY_REGArray_Table[i] == 0xfa)
+                                       rtw_IOL_append_DELAY_US_cmd(xmit_frame, 5);
+                               else if (Rtl819XPHY_REGArray_Table[i] == 0xf9)
+                                       rtw_IOL_append_DELAY_US_cmd(xmit_frame, 1);
+
+                               rtw_IOL_append_WD_cmd(xmit_frame, Rtl819XPHY_REGArray_Table[i], tmp_value);
+                               //RT_TRACE(COMP_INIT, DBG_TRACE, ("The Rtl819XPHY_REGArray_Table[0] is %lx Rtl819XPHY_REGArray[1] is %lx \n",Rtl819XPHY_REGArray_Table[i], Rtl819XPHY_REGArray_Table[i+1]));
+                       }
+
+                       ret = rtw_IOL_exec_cmds_sync(Adapter, xmit_frame, 1000);
+               }
+               else
+               #endif
+               {
+                       for(i=0;i<PHY_REGArrayLen;i=i+2)
+                       {
+                               if (Rtl819XPHY_REGArray_Table[i] == 0xfe){
+                                       #ifdef CONFIG_LONG_DELAY_ISSUE
+                                       rtw_msleep_os(50);
+                                       #else
+                                       rtw_mdelay_os(50);
+                                       #endif
+                               }
+                               else if (Rtl819XPHY_REGArray_Table[i] == 0xfd)
+                                       rtw_mdelay_os(5);
+                               else if (Rtl819XPHY_REGArray_Table[i] == 0xfc)
+                                       rtw_mdelay_os(1);
+                               else if (Rtl819XPHY_REGArray_Table[i] == 0xfb)
+                                       rtw_udelay_os(50);
+                               else if (Rtl819XPHY_REGArray_Table[i] == 0xfa)
+                                       rtw_udelay_os(5);
+                               else if (Rtl819XPHY_REGArray_Table[i] == 0xf9)
+                                       rtw_udelay_os(1);
+
+                               PHY_SetBBReg(Adapter, Rtl819XPHY_REGArray_Table[i], bMaskDWord, Rtl819XPHY_REGArray_Table[i+1]);
+
+                               // Add 1us delay between BB/RF register setting.
+                               rtw_udelay_os(1);
+
+                               //RT_TRACE(COMP_INIT, DBG_TRACE, ("The Rtl819XPHY_REGArray_Table[0] is %lx Rtl819XPHY_REGArray[1] is %lx \n",Rtl819XPHY_REGArray_Table[i], Rtl819XPHY_REGArray_Table[i+1]));
+                       }
+               }
+
+               // for External PA
+               phy_ConfigBBExternalPA(Adapter);
+       }
+       else if(ConfigType == BaseBand_Config_AGC_TAB)
+       {
+               #ifdef CONFIG_IOL_BB_AGC_TAB
+               if(rtw_IOL_applied(Adapter))
+               {
+                       struct xmit_frame       *xmit_frame;
+
+                       if((xmit_frame=rtw_IOL_accquire_xmit_frame(Adapter)) == NULL) {
+                               ret = _FAIL;
+                               goto exit;
+                       }
+
+                       for(i=0;i<AGCTAB_ArrayLen;i=i+2)
+                       {
+                               rtw_IOL_append_WD_cmd(xmit_frame, Rtl819XAGCTAB_Array_Table[i], Rtl819XAGCTAB_Array_Table[i+1]);
+                               //RT_TRACE(COMP_INIT, DBG_TRACE, ("The Rtl819XAGCTAB_Array_Table[0] is %lx Rtl819XPHY_REGArray[1] is %lx \n",Rtl819XAGCTAB_Array_Table[i], Rtl819XAGCTAB_Array_Table[i+1]));
+                       }
+
+                       ret = rtw_IOL_exec_cmds_sync(Adapter, xmit_frame, 1000);
+               }
+               else
+               #endif
+               {
+                       for(i=0;i<AGCTAB_ArrayLen;i=i+2)
+                       {
+                               PHY_SetBBReg(Adapter, Rtl819XAGCTAB_Array_Table[i], bMaskDWord, Rtl819XAGCTAB_Array_Table[i+1]);
+
+                               // Add 1us delay between BB/RF register setting.
+                               rtw_udelay_os(1);
+
+                               //RT_TRACE(COMP_INIT, DBG_TRACE, ("The Rtl819XAGCTAB_Array_Table[0] is %lx Rtl819XPHY_REGArray[1] is %lx \n",Rtl819XAGCTAB_Array_Table[i], Rtl819XAGCTAB_Array_Table[i+1]));
+                       }
+               }
+       }
+
+exit:
+       return ret;
+
+}
+
+
+VOID
+storePwrIndexDiffRateOffset(
+       IN      PADAPTER        Adapter,
+       IN      u32             RegAddr,
+       IN      u32             BitMask,
+       IN      u32             Data
+       )
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+
+       if(RegAddr == rTxAGC_A_Rate18_06)
+       {
+               pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][0] = Data;
+               //RT_TRACE(COMP_INIT, DBG_TRACE, ("MCSTxPowerLevelOriginalOffset[%d][0] = 0x%lx\n", pHalData->pwrGroupCnt,
+               //      pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][0]));
+       }
+       if(RegAddr == rTxAGC_A_Rate54_24)
+       {
+               pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][1] = Data;
+               //RT_TRACE(COMP_INIT, DBG_TRACE, ("MCSTxPowerLevelOriginalOffset[%d][1] = 0x%lx\n", pHalData->pwrGroupCnt,
+               //      pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][1]));
+       }
+       if(RegAddr == rTxAGC_A_CCK1_Mcs32)
+       {
+               pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][6] = Data;
+               //RT_TRACE(COMP_INIT, DBG_TRACE, ("MCSTxPowerLevelOriginalOffset[%d][6] = 0x%lx\n", pHalData->pwrGroupCnt,
+               //      pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][6]));
+       }
+       if(RegAddr == rTxAGC_B_CCK11_A_CCK2_11 && BitMask == 0xffffff00)
+       {
+               pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][7] = Data;
+               //RT_TRACE(COMP_INIT, DBG_TRACE, ("MCSTxPowerLevelOriginalOffset[%d][7] = 0x%lx\n", pHalData->pwrGroupCnt,
+               //      pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][7]));
+       }
+       if(RegAddr == rTxAGC_A_Mcs03_Mcs00)
+       {
+               pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][2] = Data;
+               //RT_TRACE(COMP_INIT, DBG_TRACE, ("MCSTxPowerLevelOriginalOffset[%d][2] = 0x%lx\n", pHalData->pwrGroupCnt,
+               //      pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][2]));
+       }
+       if(RegAddr == rTxAGC_A_Mcs07_Mcs04)
+       {
+               pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][3] = Data;
+               //RT_TRACE(COMP_INIT, DBG_TRACE, ("MCSTxPowerLevelOriginalOffset[%d][3] = 0x%lx\n", pHalData->pwrGroupCnt,
+               //      pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][3]));
+       }
+       if(RegAddr == rTxAGC_A_Mcs11_Mcs08)
+       {
+               pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][4] = Data;
+               //RT_TRACE(COMP_INIT, DBG_TRACE, ("MCSTxPowerLevelOriginalOffset[%d][4] = 0x%lx\n", pHalData->pwrGroupCnt,
+               //      pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][4]));
+       }
+       if(RegAddr == rTxAGC_A_Mcs15_Mcs12)
+       {
+               pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][5] = Data;
+               //RT_TRACE(COMP_INIT, DBG_TRACE, ("MCSTxPowerLevelOriginalOffset[%d][5] = 0x%lx\n", pHalData->pwrGroupCnt,
+               //      pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][5]));
+       }
+       if(RegAddr == rTxAGC_B_Rate18_06)
+       {
+               pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][8] = Data;
+               //RT_TRACE(COMP_INIT, DBG_TRACE, ("MCSTxPowerLevelOriginalOffset[%d][8] = 0x%lx\n", pHalData->pwrGroupCnt,
+               //      pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][8]));
+       }
+       if(RegAddr == rTxAGC_B_Rate54_24)
+       {
+               pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][9] = Data;
+               //RT_TRACE(COMP_INIT, DBG_TRACE, ("MCSTxPowerLevelOriginalOffset[%d][9] = 0x%lx\n", pHalData->pwrGroupCnt,
+               //      pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][9]));
+       }
+       if(RegAddr == rTxAGC_B_CCK1_55_Mcs32)
+       {
+               pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][14] = Data;
+               //RT_TRACE(COMP_INIT, DBG_TRACE, ("MCSTxPowerLevelOriginalOffset[%d][14] = 0x%lx\n", pHalData->pwrGroupCnt,
+               //      pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][14]));
+       }
+       if(RegAddr == rTxAGC_B_CCK11_A_CCK2_11 && BitMask == 0x000000ff)
+       {
+               pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][15] = Data;
+               //RT_TRACE(COMP_INIT, DBG_TRACE, ("MCSTxPowerLevelOriginalOffset[%d][15] = 0x%lx\n", pHalData->pwrGroupCnt,
+               //      pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][15]));
+       }
+       if(RegAddr == rTxAGC_B_Mcs03_Mcs00)
+       {
+               pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][10] = Data;
+               //RT_TRACE(COMP_INIT, DBG_TRACE, ("MCSTxPowerLevelOriginalOffset[%d][10] = 0x%lx\n", pHalData->pwrGroupCnt,
+               //      pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][10]));
+       }
+       if(RegAddr == rTxAGC_B_Mcs07_Mcs04)
+       {
+               pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][11] = Data;
+               //RT_TRACE(COMP_INIT, DBG_TRACE, ("MCSTxPowerLevelOriginalOffset[%d][11] = 0x%lx\n", pHalData->pwrGroupCnt,
+               //      pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][11]));
+       }
+       if(RegAddr == rTxAGC_B_Mcs11_Mcs08)
+       {
+               pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][12] = Data;
+               //RT_TRACE(COMP_INIT, DBG_TRACE, ("MCSTxPowerLevelOriginalOffset[%d][12] = 0x%lx\n", pHalData->pwrGroupCnt,
+               //      pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][12]));
+       }
+       if(RegAddr == rTxAGC_B_Mcs15_Mcs12)
+       {
+               pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][13] = Data;
+               //RT_TRACE(COMP_INIT, DBG_TRACE, ("MCSTxPowerLevelOriginalOffset[%d][13] = 0x%lx\n", pHalData->pwrGroupCnt,
+               //      pHalData->MCSTxPowerLevelOriginalOffset[pHalData->pwrGroupCnt][13]));
+               pHalData->pwrGroupCnt++;
+       }
+}
+/*-----------------------------------------------------------------------------
+ * Function:   phy_ConfigBBWithPgParaFile
+ *
+ * Overview:
+ *
+ * Input:       NONE
+ *
+ * Output:      NONE
+ *
+ * Return:      NONE
+ *
+ * Revised History:
+ * When                        Who             Remark
+ * 11/06/2008  MHC             Create Version 0.
+ * 2009/07/29  tynli           (porting from 92SE branch)2009/03/11 Add copy parameter file to buffer for silent reset
+ *---------------------------------------------------------------------------*/
+static int
+phy_ConfigBBWithPgParaFile(
+       IN      PADAPTER                Adapter,
+       IN      u8*                     pFileName)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+
+       int             rtStatus = _SUCCESS;
+
+
+       return rtStatus;
+
+}      /* phy_ConfigBBWithPgParaFile */
+
+
+/*-----------------------------------------------------------------------------
+ * Function:   phy_ConfigBBWithPgHeaderFile
+ *
+ * Overview:   Config PHY_REG_PG array
+ *
+ * Input:       NONE
+ *
+ * Output:      NONE
+ *
+ * Return:      NONE
+ *
+ * Revised History:
+ * When                        Who             Remark
+ * 11/06/2008  MHC             Add later!!!!!!.. Please modify for new files!!!!
+ * 11/10/2008  tynli           Modify to mew files.
+ *---------------------------------------------------------------------------*/
+static int
+phy_ConfigBBWithPgHeaderFile(
+       IN      PADAPTER                Adapter,
+       IN      u8                      ConfigType)
+{
+       int i;
+       u32*    Rtl819XPHY_REGArray_Table_PG;
+       u16     PHY_REGArrayPGLen;
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+
+       // Default: pHalData->RF_Type = RF_2T2R.
+       PHY_REGArrayPGLen = PHY_REG_Array_PGLength;
+       Rtl819XPHY_REGArray_Table_PG = Rtl819XPHY_REG_Array_PG;
+
+#ifdef CONFIG_USB_HCI
+// 2010/10/19 Chiyoko According to Alex/Willson opinion, VAU/dongle can share the same PHY_REG_PG.txt
+/*
+       if(pHalData->BoardType == BOARD_MINICARD )
+       {
+               PHY_REGArrayPGLen = PHY_REG_Array_PG_mCardLength;
+               Rtl819XPHY_REGArray_Table_PG = Rtl819XPHY_REG_Array_PG_mCard;
+       }
+       else */if(pHalData->BoardType ==BOARD_USB_High_PA )
+       {
+               PHY_REGArrayPGLen = PHY_REG_Array_PG_HPLength;
+               Rtl819XPHY_REGArray_Table_PG = Rtl819XPHY_REG_Array_PG_HP;
+       }
+#endif
+
+       if(ConfigType == BaseBand_Config_PHY_REG)
+       {
+               for(i=0;i<PHY_REGArrayPGLen;i=i+3)
+               {
+                       #if 0 //without IO, no delay is neeeded...
+                       if (Rtl819XPHY_REGArray_Table_PG[i] == 0xfe){
+                               #ifdef CONFIG_LONG_DELAY_ISSUE
+                               rtw_msleep_os(50);
+                               #else
+                               rtw_mdelay_os(50);
+                               #endif
+                       }
+                       else if (Rtl819XPHY_REGArray_Table_PG[i] == 0xfd)
+                               rtw_mdelay_os(5);
+                       else if (Rtl819XPHY_REGArray_Table_PG[i] == 0xfc)
+                               rtw_mdelay_os(1);
+                       else if (Rtl819XPHY_REGArray_Table_PG[i] == 0xfb)
+                               rtw_udelay_os(50);
+                       else if (Rtl819XPHY_REGArray_Table_PG[i] == 0xfa)
+                               rtw_udelay_os(5);
+                       else if (Rtl819XPHY_REGArray_Table_PG[i] == 0xf9)
+                               rtw_udelay_os(1);
+                       //PHY_SetBBReg(Adapter, Rtl819XPHY_REGArray_Table_PG[i], Rtl819XPHY_REGArray_Table_PG[i+1], Rtl819XPHY_REGArray_Table_PG[i+2]);
+                       #endif
+
+                       storePwrIndexDiffRateOffset(Adapter, Rtl819XPHY_REGArray_Table_PG[i],
+                               Rtl819XPHY_REGArray_Table_PG[i+1],
+                               Rtl819XPHY_REGArray_Table_PG[i+2]);
+                       //RT_TRACE(COMP_SEND, DBG_TRACE, ("The Rtl819XPHY_REGArray_Table_PG[0] is %lx Rtl819XPHY_REGArray_Table_PG[1] is %lx \n",Rtl819XPHY_REGArray_Table_PG[i], Rtl819XPHY_REGArray_Table_PG[i+1]));
+               }
+       }
+       else
+       {
+
+               //RT_TRACE(COMP_SEND, DBG_LOUD, ("phy_ConfigBBWithPgHeaderFile(): ConfigType != BaseBand_Config_PHY_REG\n"));
+       }
+
+       return _SUCCESS;
+
+}      /* phy_ConfigBBWithPgHeaderFile */
+
+#if (MP_DRIVER == 1)
+
+/*-----------------------------------------------------------------------------
+ * Function:    phy_ConfigBBWithMpParaFile()
+ *
+ * Overview:    This function read BB parameters from general file format, and do register
+ *                       Read/Write
+ *
+ * Input:              PADAPTER                Adapter
+ *                     ps1Byte                         pFileName
+ *
+ * Output:      NONE
+ *
+ * Return:      RT_STATUS_SUCCESS: configuration file exist
+ *     2008/11/06      MH      For 92S we do not support silent reset now. Disable
+ *                                     parameter file compare!!!!!!??
+ *
+ *---------------------------------------------------------------------------*/
+static int
+phy_ConfigBBWithMpParaFile(
+       IN      PADAPTER                Adapter,
+       IN      u8*                     pFileName
+)
+{
+#if 1
+       int             rtStatus = _SUCCESS;
+#else
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       s4Byte                  nLinesRead, ithLine;
+       RT_STATUS               rtStatus = RT_STATUS_SUCCESS;
+       ps1Byte                 szLine;
+       u4Byte                  u4bRegOffset, u4bRegMask, u4bRegValue;
+       u4Byte                  u4bMove;
+
+       if(ADAPTER_TEST_STATUS_FLAG(Adapter, ADAPTER_STATUS_FIRST_INIT))
+       {
+               rtStatus = PlatformReadFile(
+                                       Adapter,
+                                       pFileName,
+                                       (pu1Byte)(pHalData->BufOfLines),
+                                       MAX_LINES_HWCONFIG_TXT,
+                                       MAX_BYTES_LINE_HWCONFIG_TXT,
+                                       &nLinesRead
+                                       );
+               if(rtStatus == RT_STATUS_SUCCESS)
+               {
+                       PlatformMoveMemory(pHalData->BufOfLines6, pHalData->BufOfLines, nLinesRead*MAX_BYTES_LINE_HWCONFIG_TXT);
+                       pHalData->nLinesRead6 = nLinesRead;
+               }
+               else
+               {
+                       // Temporarily skip PHY_REG_MP.txt if file does not exist.
+                       pHalData->nLinesRead6 = 0;
+                       RT_TRACE(COMP_INIT, DBG_LOUD, ("No matched file \r\n"));
+                       return RT_STATUS_SUCCESS;
+               }
+       }
+       else
+       {
+               PlatformMoveMemory(pHalData->BufOfLines, pHalData->BufOfLines6, MAX_LINES_HWCONFIG_TXT*MAX_BYTES_LINE_HWCONFIG_TXT);
+               nLinesRead = pHalData->nLinesRead6;
+               rtStatus = RT_STATUS_SUCCESS;
+       }
+
+
+       if(rtStatus == RT_STATUS_SUCCESS)
+       {
+               RT_TRACE(COMP_INIT, DBG_LOUD, ("phy_ConfigBBWithMpParaFile(): read %s ok\n", pFileName));
+
+               for(ithLine = 0; ithLine < nLinesRead; ithLine++)
+               {
+                       szLine = pHalData->BufOfLines[ithLine];
+
+                       if(!IsCommentString(szLine))
+                       {
+                               // Get 1st hex value as register offset.
+                               if(GetHexValueFromString(szLine, &u4bRegOffset, &u4bMove))
+                               {
+                                       if(u4bRegOffset == 0xff)
+                                       { // Ending.
+                                               break;
+                                       }
+                                       else if (u4bRegOffset == 0xfe)
+                                               delay_ms(50);
+                                       else if (u4bRegOffset == 0xfd)
+                                               delay_ms(5);
+                                       else if (u4bRegOffset == 0xfc)
+                                               delay_ms(1);
+                                       else if (u4bRegOffset == 0xfb)
+                                               PlatformStallExecution(50);
+                                       else if (u4bRegOffset == 0xfa)
+                                               PlatformStallExecution(5);
+                                       else if (u4bRegOffset == 0xf9)
+                                               PlatformStallExecution(1);
+
+                                       // Get 2nd hex value as register value.
+                                       szLine += u4bMove;
+                                       if(GetHexValueFromString(szLine, &u4bRegValue, &u4bMove))
+                                       {
+                                               RT_TRACE(COMP_FPGA, DBG_TRACE, ("[ADDR]%03lX=%08lX\n", u4bRegOffset, u4bRegValue));
+                                               PHY_SetBBReg(Adapter, u4bRegOffset, bMaskDWord, u4bRegValue);
+
+                                               // Add 1us delay between BB/RF register setting.
+                                               PlatformStallExecution(1);
+                                       }
+                               }
+                       }
+               }
+       }
+       else
+       {
+               RT_TRACE(COMP_INIT, DBG_LOUD, ("phy_ConfigBBWithMpParaFile(): Failed%s\n", pFileName));
+       }
+#endif
+
+       return rtStatus;
+}
+
+/*-----------------------------------------------------------------------------
+ * Function:   phy_ConfigBBWithMpHeaderFile
+ *
+ * Overview:   Config PHY_REG_MP array
+ *
+ * Input:       NONE
+ *
+ * Output:      NONE
+ *
+ * Return:      NONE
+ *
+ * Revised History:
+ * When                        Who             Remark
+ * 02/04/2010  chiyokolin              Modify to new files.
+ *---------------------------------------------------------------------------*/
+static int
+phy_ConfigBBWithMpHeaderFile(
+       IN      PADAPTER                Adapter,
+       IN      u1Byte                  ConfigType)
+{
+       int i;
+       u32*    Rtl8192CPHY_REGArray_Table_MP;
+       u16     PHY_REGArrayMPLen;
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+
+       PHY_REGArrayMPLen = PHY_REG_Array_MPLength;
+       Rtl8192CPHY_REGArray_Table_MP = Rtl819XPHY_REG_Array_MP;
+
+       if(ConfigType == BaseBand_Config_PHY_REG)
+       {
+               for(i=0;i<PHY_REGArrayMPLen;i=i+2)
+               {
+                       if (Rtl8192CPHY_REGArray_Table_MP[i] == 0xfe) {
+                               #ifdef CONFIG_LONG_DELAY_ISSUE
+                               rtw_msleep_os(50);
+                               #else
+                               rtw_mdelay_os(50);
+                               #endif
+                       }
+                       else if (Rtl8192CPHY_REGArray_Table_MP[i] == 0xfd)
+                               rtw_mdelay_os(5);
+                       else if (Rtl8192CPHY_REGArray_Table_MP[i] == 0xfc)
+                               rtw_mdelay_os(1);
+                       else if (Rtl8192CPHY_REGArray_Table_MP[i] == 0xfb) {
+                               #ifdef CONFIG_LONG_DELAY_ISSUE
+                               rtw_msleep_os(50);
+                               #else
+                               rtw_mdelay_os(50);
+                               #endif
+                       }
+                       else if (Rtl8192CPHY_REGArray_Table_MP[i] == 0xfa)
+                               rtw_mdelay_os(5);
+                       else if (Rtl8192CPHY_REGArray_Table_MP[i] == 0xf9)
+                               rtw_mdelay_os(1);
+                       PHY_SetBBReg(Adapter, Rtl8192CPHY_REGArray_Table_MP[i], bMaskDWord, Rtl8192CPHY_REGArray_Table_MP[i+1]);
+
+                       // Add 1us delay between BB/RF register setting.
+                       rtw_mdelay_os(1);
+
+//                     RT_TRACE(COMP_INIT, DBG_TRACE, ("The Rtl8192CPHY_REGArray_Table_MP[%d] is %lx Rtl8192CPHY_REGArray_Table_MP[%d] is %lx \n", i, i+1, Rtl8192CPHY_REGArray_Table_MP[i], Rtl8192CPHY_REGArray_Table_MP[i+1]));
+               }
+       }
+       else
+       {
+//             RT_TRACE(COMP_SEND, DBG_LOUD, ("phy_ConfigBBWithMpHeaderFile(): ConfigType != BaseBand_Config_PHY_REG\n"));
+       }
+
+       return _SUCCESS;
+}      /* phy_ConfigBBWithMpHeaderFile */
+
+#endif // #if (MP_DRIVER == 1)
+
+static VOID
+phy_BB8192C_Config_1T(
+       IN PADAPTER Adapter
+       )
+{
+#if 0
+       //for path - A
+       PHY_SetBBReg(Adapter, rFPGA0_TxInfo, 0x3, 0x1);
+       PHY_SetBBReg(Adapter, rFPGA1_TxInfo, 0x0303, 0x0101);
+       PHY_SetBBReg(Adapter, 0xe74, 0x0c000000, 0x1);
+       PHY_SetBBReg(Adapter, 0xe78, 0x0c000000, 0x1);
+       PHY_SetBBReg(Adapter, 0xe7c, 0x0c000000, 0x1);
+       PHY_SetBBReg(Adapter, 0xe80, 0x0c000000, 0x1);
+       PHY_SetBBReg(Adapter, 0xe88, 0x0c000000, 0x1);
+#endif
+       //for path - B
+       PHY_SetBBReg(Adapter, rFPGA0_TxInfo, 0x3, 0x2);
+       PHY_SetBBReg(Adapter, rFPGA1_TxInfo, 0x300033, 0x200022);
+
+       // 20100519 Joseph: Add for 1T2R config. Suggested by Kevin, Jenyu and Yunan.
+       PHY_SetBBReg(Adapter, rCCK0_AFESetting, bMaskByte3, 0x45);
+       PHY_SetBBReg(Adapter, rOFDM0_TRxPathEnable, bMaskByte0, 0x23);
+       PHY_SetBBReg(Adapter, rOFDM0_AGCParameter1, 0x30, 0x1); // B path first AGC
+
+       PHY_SetBBReg(Adapter, 0xe74, 0x0c000000, 0x2);
+       PHY_SetBBReg(Adapter, 0xe78, 0x0c000000, 0x2);
+       PHY_SetBBReg(Adapter, 0xe7c, 0x0c000000, 0x2);
+       PHY_SetBBReg(Adapter, 0xe80, 0x0c000000, 0x2);
+       PHY_SetBBReg(Adapter, 0xe88, 0x0c000000, 0x2);
+
+
+}
+
+// Joseph test: new initialize order!!
+// Test only!! This part need to be re-organized.
+// Now it is just for 8256.
+static int
+phy_BB8190_Config_HardCode(
+       IN      PADAPTER        Adapter
+       )
+{
+       //RT_ASSERT(FALSE, ("This function is not implement yet!! \n"));
+       return _SUCCESS;
+}
+
+static int
+phy_BB8192C_Config_ParaFile(
+       IN      PADAPTER        Adapter
+       )
+{
+       EEPROM_EFUSE_PRIV       *pEEPROM = GET_EEPROM_EFUSE_PRIV(Adapter);
+       HAL_DATA_TYPE           *pHalData = GET_HAL_DATA(Adapter);
+       int                     rtStatus = _SUCCESS;
+
+       u8                              szBBRegPgFile[] = RTL819X_PHY_REG_PG;
+
+       u8                              sz88CBBRegFile[] = RTL8188C_PHY_REG;
+       u8                              sz88CAGCTableFile[] = RTL8188C_AGC_TAB;
+
+       u8                              sz92CBBRegFile[] = RTL8192C_PHY_REG;
+       u8                              sz92CAGCTableFile[] = RTL8192C_AGC_TAB;
+
+       u8                              *pszBBRegFile, *pszAGCTableFile, *pszBBRegMpFile;
+
+       //RT_TRACE(COMP_INIT, DBG_TRACE, ("==>phy_BB8192S_Config_ParaFile\n"));
+
+       if(IS_92C_SERIAL(pHalData->VersionID)){
+               pszBBRegFile=(u8*)&sz92CBBRegFile ;
+               pszAGCTableFile =(u8*)&sz92CAGCTableFile;
+       }
+       else{
+               pszBBRegFile=(u8*)&sz88CBBRegFile ;
+               pszAGCTableFile =(u8*)&sz88CAGCTableFile;
+       }
+
+       //
+       // 1. Read PHY_REG.TXT BB INIT!!
+       // We will seperate as 88C / 92C according to chip version
+       //
+#ifdef CONFIG_EMBEDDED_FWIMG
+       rtStatus = phy_ConfigBBWithHeaderFile(Adapter, BaseBand_Config_PHY_REG);
+#else
+       // No matter what kind of CHIP we always read PHY_REG.txt. We must copy different
+       // type of parameter files to phy_reg.txt at first.
+       rtStatus = phy_ConfigBBWithParaFile(Adapter,pszBBRegFile);
+#endif
+
+       if(rtStatus != _SUCCESS){
+               //RT_TRACE(COMP_INIT, DBG_SERIOUS, ("phy_BB8192S_Config_ParaFile():Write BB Reg Fail!!"));
+               goto phy_BB8190_Config_ParaFile_Fail;
+       }
+
+#if MP_DRIVER == 1
+       //
+       // 1.1 Read PHY_REG_MP.TXT BB INIT!!
+       // We will seperate as 88C / 92C according to chip version
+       //
+#ifdef CONFIG_EMBEDDED_FWIMG
+       rtStatus = phy_ConfigBBWithMpHeaderFile(Adapter, BaseBand_Config_PHY_REG);
+#else
+       // No matter what kind of CHIP we always read PHY_REG.txt. We must copy different
+       // type of parameter files to phy_reg.txt at first.
+       rtStatus = phy_ConfigBBWithMpParaFile(Adapter, pszBBRegMpFile);
+#endif
+
+       if(rtStatus != _SUCCESS){
+//             RT_TRACE(COMP_INIT, DBG_SERIOUS, ("phy_BB8192S_Config_ParaFile():Write BB Reg MP Fail!!"));
+               goto phy_BB8190_Config_ParaFile_Fail;
+       }
+#endif // #if (MP_DRIVER == 1)
+
+       //
+       // 20100318 Joseph: Config 2T2R to 1T2R if necessary.
+       //
+       if(pHalData->rf_type == RF_1T2R)
+       {
+               phy_BB8192C_Config_1T(Adapter);
+               DBG_8192C("phy_BB8192C_Config_ParaFile():Config to 1T!!\n");
+       }
+
+       //
+       // 2. If EEPROM or EFUSE autoload OK, We must config by PHY_REG_PG.txt
+       //
+       if (pEEPROM->bautoload_fail_flag == _FALSE)
+       {
+               pHalData->pwrGroupCnt = 0;
+
+#ifdef CONFIG_EMBEDDED_FWIMG
+               rtStatus = phy_ConfigBBWithPgHeaderFile(Adapter, BaseBand_Config_PHY_REG);
+#else
+               rtStatus = phy_ConfigBBWithPgParaFile(Adapter, (u8*)&szBBRegPgFile);
+#endif
+       }
+
+       if(rtStatus != _SUCCESS){
+               //RT_TRACE(COMP_INIT, DBG_SERIOUS, ("phy_BB8192S_Config_ParaFile():BB_PG Reg Fail!!"));
+               goto phy_BB8190_Config_ParaFile_Fail;
+       }
+
+       //
+       // 3. BB AGC table Initialization
+       //
+#ifdef CONFIG_EMBEDDED_FWIMG
+       rtStatus = phy_ConfigBBWithHeaderFile(Adapter, BaseBand_Config_AGC_TAB);
+#else
+       //RT_TRACE(COMP_INIT, DBG_LOUD, ("phy_BB8192S_Config_ParaFile AGC_TAB.txt\n"));
+       rtStatus = phy_ConfigBBWithParaFile(Adapter, pszAGCTableFile);
+#endif
+
+       if(rtStatus != _SUCCESS){
+               //RT_TRACE(COMP_FPGA, DBG_SERIOUS, ("phy_BB8192S_Config_ParaFile():AGC Table Fail\n"));
+               goto phy_BB8190_Config_ParaFile_Fail;
+       }
+
+       // Check if the CCK HighPower is turned ON.
+       // This is used to calculate PWDB.
+       pHalData->bCckHighPower = (BOOLEAN)(PHY_QueryBBReg(Adapter, rFPGA0_XA_HSSIParameter2, 0x200));
+
+phy_BB8190_Config_ParaFile_Fail:
+
+       return rtStatus;
+}
+
+
+int
+PHY_BBConfig8192C(
+       IN      PADAPTER        Adapter
+       )
+{
+       int     rtStatus = _SUCCESS;
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       u32     RegVal;
+       u8      TmpU1B=0;
+       u8      value8;
+
+       phy_InitBBRFRegisterDefinition(Adapter);
+
+       if(IS_HARDWARE_TYPE_8723A(Adapter))
+       {
+               // Suggested by Scott. tynli_test. 2010.12.30.
+               //1. 0x28[1] = 1
+               TmpU1B = rtw_read8(Adapter, REG_AFE_PLL_CTRL);
+               rtw_udelay_os(2);
+               rtw_write8(Adapter, REG_AFE_PLL_CTRL, (TmpU1B|BIT1));
+               rtw_udelay_os(2);
+
+               //2. 0x29[7:0] = 0xFF
+               rtw_write8(Adapter, REG_AFE_PLL_CTRL+1, 0xff);
+               rtw_udelay_os(2);
+
+               //3. 0x02[1:0] = 2b'11
+               TmpU1B = rtw_read8(Adapter, REG_SYS_FUNC_EN);
+               rtw_write8(Adapter, REG_SYS_FUNC_EN, (TmpU1B|FEN_BB_GLB_RSTn|FEN_BBRSTB));
+
+               //undo clock gated
+               rtw_write32(Adapter, rFPGA0_XCD_RFParameter, rtw_read32(Adapter, rFPGA0_XCD_RFParameter)&(~BIT31));
+
+               //4. 0x25[6] = 0
+               TmpU1B = rtw_read8(Adapter, REG_AFE_XTAL_CTRL+1);
+               rtw_write8(Adapter, REG_AFE_XTAL_CTRL+1, (TmpU1B&(~BIT6)));
+
+               //5. 0x24[20] = 0       //Advised by SD3 Alex Wang. 2011.02.09.
+               TmpU1B = rtw_read8(Adapter, REG_AFE_XTAL_CTRL+2);
+               rtw_write8(Adapter, REG_AFE_XTAL_CTRL+2, (TmpU1B&(~BIT4)));
+
+               //6. 0x1f[7:0] = 0x07
+               rtw_write8(Adapter, REG_RF_CTRL, 0x07);
+       }
+       else
+       {
+               // Enable BB and RF
+               RegVal = rtw_read16(Adapter, REG_SYS_FUNC_EN);
+               rtw_write16(Adapter, REG_SYS_FUNC_EN, (u16)(RegVal|BIT13|BIT0|BIT1));
+
+               // 20090923 Joseph: Advised by Steven and Jenyu. Power sequence before init RF.
+               rtw_write8(Adapter, REG_AFE_PLL_CTRL, 0x83);
+               rtw_write8(Adapter, REG_AFE_PLL_CTRL+1, 0xdb);
+
+               rtw_write8(Adapter, REG_RF_CTRL, RF_EN|RF_RSTB|RF_SDMRSTB);
+
+#ifdef CONFIG_USB_HCI
+               rtw_write8(Adapter, REG_SYS_FUNC_EN, FEN_USBA | FEN_USBD | FEN_BB_GLB_RSTn | FEN_BBRSTB);
+#else
+               rtw_write8(Adapter, REG_SYS_FUNC_EN, FEN_PPLL|FEN_PCIEA|FEN_DIO_PCIE|FEN_BB_GLB_RSTn|FEN_BBRSTB);
+#endif
+
+               //undo clock gated
+               rtw_write32(Adapter, rFPGA0_XCD_RFParameter, rtw_read32(Adapter, rFPGA0_XCD_RFParameter)&(~BIT31));
+
+               // 2009/10/21 by SD1 Jong. Modified by tynli. Not in Documented in V8.1.
+#ifdef CONFIG_USB_HCI
+               //To Fix MAC loopback mode fail. Suggested by SD4 Johnny. 2010.03.23.
+               rtw_write8(Adapter, REG_LDOHCI12_CTRL, 0x0f);
+               rtw_write8(Adapter, 0x15, 0xe9);
+#endif
+
+               rtw_write8(Adapter, REG_AFE_XTAL_CTRL+1, 0x80);
+
+#ifdef CONFIG_PCI_HCI
+               // Force use left antenna by default for 88C.
+       //      if(!IS_92C_SERIAL(pHalData->VersionID) || IS_92C_1T2R(pHalData->VersionID))
+               if(Adapter->ledpriv.LedStrategy != SW_LED_MODE10)
+               {
+                       RegVal = rtw_read32(Adapter, REG_LEDCFG0);
+                       rtw_write32(Adapter, REG_LEDCFG0, RegVal|BIT23);
+               }
+#endif
+       }
+
+       //
+       // Config BB and AGC
+       //
+       rtStatus = phy_BB8192C_Config_ParaFile(Adapter);
+#if 0
+       switch(Adapter->MgntInfo.bRegHwParaFile)
+       {
+               case 0:
+                       phy_BB8190_Config_HardCode(Adapter);
+                       break;
+
+               case 1:
+                       rtStatus = phy_BB8192C_Config_ParaFile(Adapter);
+                       break;
+
+               case 2:
+                       // Partial Modify.
+                       phy_BB8190_Config_HardCode(Adapter);
+                       phy_BB8192C_Config_ParaFile(Adapter);
+                       break;
+
+               default:
+                       phy_BB8190_Config_HardCode(Adapter);
+                       break;
+       }
+#endif
+#ifdef CONFIG_USB_HCI
+       if(IS_HARDWARE_TYPE_8192CU(Adapter)&&IS_81xxC_VENDOR_UMC_B_CUT(pHalData->VersionID)
+               &&(pHalData->BoardType == BOARD_USB_High_PA))
+                       rtw_write8(Adapter, 0xc72, 0x50);
+#endif
+
+       return rtStatus;
+}
+
+
+int
+PHY_RFConfig8192C(
+       IN      PADAPTER        Adapter
+       )
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       int             rtStatus = _SUCCESS;
+
+       //
+       // RF config
+       //
+       rtStatus = PHY_RF6052_Config8192C(Adapter);
+#if 0
+       switch(pHalData->rf_chip)
+       {
+               case RF_6052:
+                       rtStatus = PHY_RF6052_Config(Adapter);
+                       break;
+               case RF_8225:
+                       rtStatus = PHY_RF8225_Config(Adapter);
+                       break;
+               case RF_8256:
+                       rtStatus = PHY_RF8256_Config(Adapter);
+                       break;
+               case RF_8258:
+                       break;
+               case RF_PSEUDO_11N:
+                       rtStatus = PHY_RF8225_Config(Adapter);
+                       break;
+               default: //for MacOs Warning: "RF_TYPE_MIN" not handled in switch
+                       break;
+       }
+#endif
+       return rtStatus;
+}
+
+
+/*-----------------------------------------------------------------------------
+ * Function:    PHY_ConfigRFWithParaFile()
+ *
+ * Overview:    This function read RF parameters from general file format, and do RF 3-wire
+ *
+ * Input:              PADAPTER                        Adapter
+ *                     ps1Byte                                 pFileName
+ *                     RF_RADIO_PATH_E eRFPath
+ *
+ * Output:      NONE
+ *
+ * Return:      RT_STATUS_SUCCESS: configuration file exist
+ *
+ * Note:               Delay may be required for RF configuration
+ *---------------------------------------------------------------------------*/
+int
+rtl8192c_PHY_ConfigRFWithParaFile(
+       IN      PADAPTER                        Adapter,
+       IN      u8*                             pFileName,
+       RF_RADIO_PATH_E         eRFPath
+)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+
+       int     rtStatus = _SUCCESS;
+
+
+       return rtStatus;
+
+}
+
+//****************************************
+// The following is for High Power PA
+//****************************************
+#define HighPowerRadioAArrayLen 22
+//This is for High power PA
+u32 Rtl8192S_HighPower_RadioA_Array[HighPowerRadioAArrayLen] = {
+0x013,0x00029ea4,
+0x013,0x00025e74,
+0x013,0x00020ea4,
+0x013,0x0001ced0,
+0x013,0x00019f40,
+0x013,0x00014e70,
+0x013,0x000106a0,
+0x013,0x0000c670,
+0x013,0x000082a0,
+0x013,0x00004270,
+0x013,0x00000240,
+};
+
+int
+PHY_ConfigRFExternalPA(
+       IN      PADAPTER                        Adapter,
+       RF_RADIO_PATH_E         eRFPath
+)
+{
+       int     rtStatus = _SUCCESS;
+#ifdef CONFIG_USB_HCI
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       u16 i=0;
+
+       if(!pHalData->ExternalPA)
+       {
+               return rtStatus;
+       }
+
+       // 2010/10/19 MH According to Jenyu/EEChou 's opinion, we need not to execute the
+       // same code as SU. It is already updated in radio_a_1T_HP.txt.
+#if 0
+       //add for SU High Power PA
+       for(i = 0;i<HighPowerRadioAArrayLen; i=i+2)
+       {
+               RT_TRACE(COMP_INIT, DBG_LOUD, ("External PA, write RF 0x%lx=0x%lx\n", Rtl8192S_HighPower_RadioA_Array[i], Rtl8192S_HighPower_RadioA_Array[i+1]));
+               PHY_SetRFReg(Adapter, eRFPath, Rtl8192S_HighPower_RadioA_Array[i], bRFRegOffsetMask, Rtl8192S_HighPower_RadioA_Array[i+1]);
+       }
+#endif
+
+#endif
+       return rtStatus;
+}
+//****************************************
+/*-----------------------------------------------------------------------------
+ * Function:    PHY_ConfigRFWithHeaderFile()
+ *
+ * Overview:    This function read RF parameters from general file format, and do RF 3-wire
+ *
+ * Input:              PADAPTER                        Adapter
+ *                     ps1Byte                                 pFileName
+ *                     RF_RADIO_PATH_E eRFPath
+ *
+ * Output:      NONE
+ *
+ * Return:      RT_STATUS_SUCCESS: configuration file exist
+ *
+ * Note:               Delay may be required for RF configuration
+ *---------------------------------------------------------------------------*/
+int
+rtl8192c_PHY_ConfigRFWithHeaderFile(
+       IN      PADAPTER                        Adapter,
+       RF_RADIO_PATH_E         eRFPath
+)
+{
+
+       int                     i;
+       int                     rtStatus = _SUCCESS;
+       u32*            Rtl819XRadioA_Array_Table;
+       u32*            Rtl819XRadioB_Array_Table;
+       u16             RadioA_ArrayLen,RadioB_ArrayLen;
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+
+       //
+       // 2009.11.24. Modified by tynli.
+       //
+       if(IS_92C_SERIAL(pHalData->VersionID))
+       {
+               RadioA_ArrayLen = RadioA_2TArrayLength;
+               Rtl819XRadioA_Array_Table = Rtl819XRadioA_2TArray;
+               RadioB_ArrayLen = RadioB_2TArrayLength;
+               Rtl819XRadioB_Array_Table = Rtl819XRadioB_2TArray;
+       }
+       else
+       {
+               RadioA_ArrayLen = RadioA_1TArrayLength;
+               Rtl819XRadioA_Array_Table = Rtl819XRadioA_1TArray;
+               RadioB_ArrayLen = RadioB_1TArrayLength;
+               Rtl819XRadioB_Array_Table = Rtl819XRadioB_1TArray;
+#ifdef CONFIG_USB_HCI
+               if( BOARD_MINICARD == pHalData->BoardType )
+               {
+                       RadioA_ArrayLen = RadioA_1T_mCardArrayLength;
+                       Rtl819XRadioA_Array_Table = Rtl819XRadioA_1T_mCardArray;
+                       RadioB_ArrayLen = RadioB_1T_mCardArrayLength;
+                       Rtl819XRadioB_Array_Table = Rtl819XRadioB_1T_mCardArray;
+               }
+               else if( BOARD_USB_High_PA == pHalData->BoardType )
+               {
+                       RadioA_ArrayLen = RadioA_1T_HPArrayLength;
+                       Rtl819XRadioA_Array_Table = Rtl819XRadioA_1T_HPArray;
+               }
+#endif
+       }
+
+       switch(eRFPath){
+               case RF_PATH_A:
+                       #ifdef CONFIG_IOL_RF_RF90_PATH_A
+                       if(rtw_IOL_applied(Adapter))
+                       {
+                               struct xmit_frame       *xmit_frame;
+                               if((xmit_frame=rtw_IOL_accquire_xmit_frame(Adapter)) == NULL) {
+                                       rtStatus = _FAIL;
+                                       goto exit;
+                               }
+
+                               for(i = 0;i<RadioA_ArrayLen; i=i+2)
+                               {
+                                       if(Rtl819XRadioA_Array_Table[i] == 0xfe)
+                                               rtw_IOL_append_DELAY_MS_cmd(xmit_frame, 50);
+                                       else if (Rtl819XRadioA_Array_Table[i] == 0xfd)
+                                               rtw_IOL_append_DELAY_MS_cmd(xmit_frame, 5);
+                                       else if (Rtl819XRadioA_Array_Table[i] == 0xfc)
+                                               rtw_IOL_append_DELAY_MS_cmd(xmit_frame, 1);
+                                       else if (Rtl819XRadioA_Array_Table[i] == 0xfb)
+                                               rtw_IOL_append_DELAY_US_cmd(xmit_frame, 50);
+                                       else if (Rtl819XRadioA_Array_Table[i] == 0xfa)
+                                               rtw_IOL_append_DELAY_US_cmd(xmit_frame, 5);
+                                       else if (Rtl819XRadioA_Array_Table[i] == 0xf9)
+                                               rtw_IOL_append_DELAY_US_cmd(xmit_frame, 1);
+                                       else
+                                       {
+                                               BB_REGISTER_DEFINITION_T        *pPhyReg = &pHalData->PHYRegDef[eRFPath];
+                                               u32     NewOffset = 0;
+                                               u32     DataAndAddr = 0;
+
+                                               NewOffset = Rtl819XRadioA_Array_Table[i] & 0x3f;
+                                               DataAndAddr = ((NewOffset<<20) | (Rtl819XRadioA_Array_Table[i+1]&0x000fffff)) & 0x0fffffff;     // T65 RF
+                                               rtw_IOL_append_WD_cmd(xmit_frame, pPhyReg->rf3wireOffset, DataAndAddr);
+                                       }
+                               }
+                               rtStatus = rtw_IOL_exec_cmds_sync(Adapter, xmit_frame, 1000);
+                       }
+                       else
+                       #endif
+                       {
+                               for(i = 0;i<RadioA_ArrayLen; i=i+2)
+                               {
+                                       if(Rtl819XRadioA_Array_Table[i] == 0xfe) {
+                                               #ifdef CONFIG_LONG_DELAY_ISSUE
+                                               rtw_msleep_os(50);
+                                               #else
+                                               rtw_mdelay_os(50);
+                                               #endif
+                                       }
+                                       else if (Rtl819XRadioA_Array_Table[i] == 0xfd)
+                                               rtw_mdelay_os(5);
+                                       else if (Rtl819XRadioA_Array_Table[i] == 0xfc)
+                                               rtw_mdelay_os(1);
+                                       else if (Rtl819XRadioA_Array_Table[i] == 0xfb)
+                                               rtw_udelay_os(50);
+                                       else if (Rtl819XRadioA_Array_Table[i] == 0xfa)
+                                               rtw_udelay_os(5);
+                                       else if (Rtl819XRadioA_Array_Table[i] == 0xf9)
+                                               rtw_udelay_os(1);
+                                       else
+                                       {
+                                               PHY_SetRFReg(Adapter, eRFPath, Rtl819XRadioA_Array_Table[i], bRFRegOffsetMask, Rtl819XRadioA_Array_Table[i+1]);
+                                               // Add 1us delay between BB/RF register setting.
+                                               rtw_udelay_os(1);
+                                       }
+                               }
+                       }
+
+                       //Add for High Power PA
+                       PHY_ConfigRFExternalPA(Adapter, eRFPath);
+                       break;
+               case RF_PATH_B:
+                       #ifdef CONFIG_IOL_RF_RF90_PATH_B
+                       if(rtw_IOL_applied(Adapter))
+                       {
+                               struct xmit_frame       *xmit_frame;
+                               if((xmit_frame=rtw_IOL_accquire_xmit_frame(Adapter)) == NULL) {
+                                       rtStatus = _FAIL;
+                                       goto exit;
+                               }
+
+                               for(i = 0;i<RadioB_ArrayLen; i=i+2)
+                               {
+                                       if(Rtl819XRadioB_Array_Table[i] == 0xfe)
+                                               rtw_IOL_append_DELAY_MS_cmd(xmit_frame, 50);
+                                       else if (Rtl819XRadioB_Array_Table[i] == 0xfd)
+                                               rtw_IOL_append_DELAY_MS_cmd(xmit_frame, 5);
+                                       else if (Rtl819XRadioB_Array_Table[i] == 0xfc)
+                                               rtw_IOL_append_DELAY_MS_cmd(xmit_frame, 1);
+                                       else if (Rtl819XRadioB_Array_Table[i] == 0xfb)
+                                               rtw_IOL_append_DELAY_US_cmd(xmit_frame, 50);
+                                       else if (Rtl819XRadioB_Array_Table[i] == 0xfa)
+                                               rtw_IOL_append_DELAY_US_cmd(xmit_frame, 5);
+                                       else if (Rtl819XRadioB_Array_Table[i] == 0xf9)
+                                               rtw_IOL_append_DELAY_US_cmd(xmit_frame, 1);
+                                       else
+                                       {
+                                               BB_REGISTER_DEFINITION_T        *pPhyReg = &pHalData->PHYRegDef[eRFPath];
+                                               u32     NewOffset = 0;
+                                               u32     DataAndAddr = 0;
+
+                                               NewOffset = Rtl819XRadioB_Array_Table[i] & 0x3f;
+                                               DataAndAddr = ((NewOffset<<20) | (Rtl819XRadioB_Array_Table[i+1]&0x000fffff)) & 0x0fffffff;     // T65 RF
+                                               rtw_IOL_append_WD_cmd(xmit_frame, pPhyReg->rf3wireOffset, DataAndAddr);
+                                       }
+                               }
+                               rtStatus = rtw_IOL_exec_cmds_sync(Adapter, xmit_frame, 1000);
+                       }
+                       else
+                       #endif
+                       {
+                               for(i = 0;i<RadioB_ArrayLen; i=i+2)
+                               {
+                                       if(Rtl819XRadioB_Array_Table[i] == 0xfe)
+                                       { // Deay specific ms. Only RF configuration require delay.
+#if 0//#ifdef CONFIG_USB_HCI
+                                               #ifdef CONFIG_LONG_DELAY_ISSUE
+                                               rtw_msleep_os(1000);
+                                               #else
+                                               rtw_mdelay_os(1000);
+                                               #endif
+#else
+                                               #ifdef CONFIG_LONG_DELAY_ISSUE
+                                               rtw_msleep_os(50);
+                                               #else
+                                               rtw_mdelay_os(50);
+                                               #endif
+#endif
+                                       }
+                                       else if (Rtl819XRadioB_Array_Table[i] == 0xfd)
+                                               rtw_mdelay_os(5);
+                                       else if (Rtl819XRadioB_Array_Table[i] == 0xfc)
+                                               rtw_mdelay_os(1);
+                                       else if (Rtl819XRadioB_Array_Table[i] == 0xfb)
+                                               rtw_udelay_os(50);
+                                       else if (Rtl819XRadioB_Array_Table[i] == 0xfa)
+                                               rtw_udelay_os(5);
+                                       else if (Rtl819XRadioB_Array_Table[i] == 0xf9)
+                                               rtw_udelay_os(1);
+                                       else
+                                       {
+                                               PHY_SetRFReg(Adapter, eRFPath, Rtl819XRadioB_Array_Table[i], bRFRegOffsetMask, Rtl819XRadioB_Array_Table[i+1]);
+                                               // Add 1us delay between BB/RF register setting.
+                                               rtw_udelay_os(1);
+                                       }
+                               }
+                       }
+
+                       break;
+               case RF_PATH_C:
+                       break;
+               case RF_PATH_D:
+                       break;
+       }
+
+exit:
+       return rtStatus;
+
+}
+
+
+/*-----------------------------------------------------------------------------
+ * Function:    PHY_CheckBBAndRFOK()
+ *
+ * Overview:    This function is write register and then readback to make sure whether
+ *                       BB[PHY0, PHY1], RF[Patha, path b, path c, path d] is Ok
+ *
+ * Input:              PADAPTER                        Adapter
+ *                     HW90_BLOCK_E            CheckBlock
+ *                     RF_RADIO_PATH_E eRFPath         // it is used only when CheckBlock is HW90_BLOCK_RF
+ *
+ * Output:      NONE
+ *
+ * Return:      RT_STATUS_SUCCESS: PHY is OK
+ *
+ * Note:               This function may be removed in the ASIC
+ *---------------------------------------------------------------------------*/
+int
+PHY_CheckBBAndRFOK(
+       IN      PADAPTER                        Adapter,
+       IN      HW90_BLOCK_E            CheckBlock,
+       IN      RF_RADIO_PATH_E eRFPath
+       )
+{
+       int                     rtStatus = _SUCCESS;
+
+       u32                             i, CheckTimes = 4,ulRegRead = 0;
+
+       u32                             WriteAddr[4];
+       u32                             WriteData[] = {0xfffff027, 0xaa55a02f, 0x00000027, 0x55aa502f};
+
+       // Initialize register address offset to be checked
+       WriteAddr[HW90_BLOCK_MAC] = 0x100;
+       WriteAddr[HW90_BLOCK_PHY0] = 0x900;
+       WriteAddr[HW90_BLOCK_PHY1] = 0x800;
+       WriteAddr[HW90_BLOCK_RF] = 0x3;
+
+       for(i=0 ; i < CheckTimes ; i++)
+       {
+
+               //
+               // Write Data to register and readback
+               //
+               switch(CheckBlock)
+               {
+               case HW90_BLOCK_MAC:
+                       //RT_ASSERT(FALSE, ("PHY_CheckBBRFOK(): Never Write 0x100 here!"));
+                       //RT_TRACE(COMP_INIT, DBG_LOUD, ("PHY_CheckBBRFOK(): Never Write 0x100 here!\n"));
+                       break;
+
+               case HW90_BLOCK_PHY0:
+               case HW90_BLOCK_PHY1:
+                       rtw_write32(Adapter, WriteAddr[CheckBlock], WriteData[i]);
+                       ulRegRead = rtw_read32(Adapter, WriteAddr[CheckBlock]);
+                       break;
+
+               case HW90_BLOCK_RF:
+                       // When initialization, we want the delay function(delay_ms(), delay_us()
+                       // ==> actually we call PlatformStallExecution()) to do NdisStallExecution()
+                       // [busy wait] instead of NdisMSleep(). So we acquire RT_INITIAL_SPINLOCK
+                       // to run at Dispatch level to achive it.
+                       //cosa PlatformAcquireSpinLock(Adapter, RT_INITIAL_SPINLOCK);
+                       WriteData[i] &= 0xfff;
+                       PHY_SetRFReg(Adapter, eRFPath, WriteAddr[HW90_BLOCK_RF], bRFRegOffsetMask, WriteData[i]);
+                       // TODO: we should not delay for such a long time. Ask SD3
+                       rtw_mdelay_os(10);
+                       ulRegRead = PHY_QueryRFReg(Adapter, eRFPath, WriteAddr[HW90_BLOCK_RF], bMaskDWord);
+                       rtw_mdelay_os(10);
+                       //cosa PlatformReleaseSpinLock(Adapter, RT_INITIAL_SPINLOCK);
+                       break;
+
+               default:
+                       rtStatus = _FAIL;
+                       break;
+               }
+
+
+               //
+               // Check whether readback data is correct
+               //
+               if(ulRegRead != WriteData[i])
+               {
+                       //RT_TRACE(COMP_FPGA, DBG_LOUD, ("ulRegRead: %lx, WriteData: %lx \n", ulRegRead, WriteData[i]));
+                       rtStatus = _FAIL;
+                       break;
+               }
+       }
+
+       return rtStatus;
+}
+
+
+VOID
+rtl8192c_PHY_GetHWRegOriginalValue(
+       IN      PADAPTER                Adapter
+       )
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+
+       // read rx initial gain
+       pHalData->DefaultInitialGain[0] = (u8)PHY_QueryBBReg(Adapter, rOFDM0_XAAGCCore1, bMaskByte0);
+       pHalData->DefaultInitialGain[1] = (u8)PHY_QueryBBReg(Adapter, rOFDM0_XBAGCCore1, bMaskByte0);
+       pHalData->DefaultInitialGain[2] = (u8)PHY_QueryBBReg(Adapter, rOFDM0_XCAGCCore1, bMaskByte0);
+       pHalData->DefaultInitialGain[3] = (u8)PHY_QueryBBReg(Adapter, rOFDM0_XDAGCCore1, bMaskByte0);
+       //RT_TRACE(COMP_INIT, DBG_LOUD,
+       //("Default initial gain (c50=0x%x, c58=0x%x, c60=0x%x, c68=0x%x) \n",
+       //pHalData->DefaultInitialGain[0], pHalData->DefaultInitialGain[1],
+       //pHalData->DefaultInitialGain[2], pHalData->DefaultInitialGain[3]));
+
+       // read framesync
+       pHalData->framesync = (u8)PHY_QueryBBReg(Adapter, rOFDM0_RxDetector3, bMaskByte0);
+       pHalData->framesyncC34 = PHY_QueryBBReg(Adapter, rOFDM0_RxDetector2, bMaskDWord);
+       //RT_TRACE(COMP_INIT, DBG_LOUD, ("Default framesync (0x%x) = 0x%x \n",
+       //      rOFDM0_RxDetector3, pHalData->framesync));
+}
+
+
+//
+//     Description:
+//             Map dBm into Tx power index according to
+//             current HW model, for example, RF and PA, and
+//             current wireless mode.
+//     By Bruce, 2008-01-29.
+//
+static u8
+phy_DbmToTxPwrIdx(
+       IN      PADAPTER                Adapter,
+       IN      WIRELESS_MODE   WirelessMode,
+       IN      int                     PowerInDbm
+       )
+{
+       u8                              TxPwrIdx = 0;
+       int                             Offset = 0;
+
+
+       //
+       // Tested by MP, we found that CCK Index 0 equals to 8dbm, OFDM legacy equals to
+       // 3dbm, and OFDM HT equals to 0dbm repectively.
+       // Note:
+       //      The mapping may be different by different NICs. Do not use this formula for what needs accurate result.
+       // By Bruce, 2008-01-29.
+       //
+       switch(WirelessMode)
+       {
+       case WIRELESS_MODE_B:
+               Offset = -7;
+               break;
+
+       case WIRELESS_MODE_G:
+       case WIRELESS_MODE_N_24G:
+               Offset = -8;
+               break;
+       default:
+               Offset = -8;
+               break;
+       }
+
+       if((PowerInDbm - Offset) > 0)
+       {
+               TxPwrIdx = (u8)((PowerInDbm - Offset) * 2);
+       }
+       else
+       {
+               TxPwrIdx = 0;
+       }
+
+       // Tx Power Index is too large.
+       if(TxPwrIdx > MAX_TXPWR_IDX_NMODE_92S)
+               TxPwrIdx = MAX_TXPWR_IDX_NMODE_92S;
+
+       return TxPwrIdx;
+}
+
+//
+//     Description:
+//             Map Tx power index into dBm according to
+//             current HW model, for example, RF and PA, and
+//             current wireless mode.
+//     By Bruce, 2008-01-29.
+//
+int
+phy_TxPwrIdxToDbm(
+       IN      PADAPTER                Adapter,
+       IN      WIRELESS_MODE   WirelessMode,
+       IN      u8                      TxPwrIdx
+       )
+{
+       int                             Offset = 0;
+       int                             PwrOutDbm = 0;
+
+       //
+       // Tested by MP, we found that CCK Index 0 equals to -7dbm, OFDM legacy equals to -8dbm.
+       // Note:
+       //      The mapping may be different by different NICs. Do not use this formula for what needs accurate result.
+       // By Bruce, 2008-01-29.
+       //
+       switch(WirelessMode)
+       {
+       case WIRELESS_MODE_B:
+               Offset = -7;
+               break;
+
+       case WIRELESS_MODE_G:
+       case WIRELESS_MODE_N_24G:
+               Offset = -8;
+       default:
+               Offset = -8;
+               break;
+       }
+
+       PwrOutDbm = TxPwrIdx / 2 + Offset; // Discard the decimal part.
+
+       return PwrOutDbm;
+}
+
+
+/*-----------------------------------------------------------------------------
+ * Function:    GetTxPowerLevel8190()
+ *
+ * Overview:    This function is export to "common" moudule
+ *
+ * Input:       PADAPTER               Adapter
+ *                     psByte                  Power Level
+ *
+ * Output:      NONE
+ *
+ * Return:      NONE
+ *
+ *---------------------------------------------------------------------------*/
+VOID
+PHY_GetTxPowerLevel8192C(
+       IN      PADAPTER                Adapter,
+       OUT u32*                powerlevel
+       )
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       u8                      TxPwrLevel = 0;
+       int                     TxPwrDbm;
+
+       //
+       // Because the Tx power indexes are different, we report the maximum of them to
+       // meet the CCX TPC request. By Bruce, 2008-01-31.
+       //
+
+       // CCK
+       TxPwrLevel = pHalData->CurrentCckTxPwrIdx;
+       TxPwrDbm = phy_TxPwrIdxToDbm(Adapter, WIRELESS_MODE_B, TxPwrLevel);
+
+       // Legacy OFDM
+       TxPwrLevel = pHalData->CurrentOfdm24GTxPwrIdx + pHalData->LegacyHTTxPowerDiff;
+
+       // Compare with Legacy OFDM Tx power.
+       if(phy_TxPwrIdxToDbm(Adapter, WIRELESS_MODE_G, TxPwrLevel) > TxPwrDbm)
+               TxPwrDbm = phy_TxPwrIdxToDbm(Adapter, WIRELESS_MODE_G, TxPwrLevel);
+
+       // HT OFDM
+       TxPwrLevel = pHalData->CurrentOfdm24GTxPwrIdx;
+
+       // Compare with HT OFDM Tx power.
+       if(phy_TxPwrIdxToDbm(Adapter, WIRELESS_MODE_N_24G, TxPwrLevel) > TxPwrDbm)
+               TxPwrDbm = phy_TxPwrIdxToDbm(Adapter, WIRELESS_MODE_N_24G, TxPwrLevel);
+
+       *powerlevel = TxPwrDbm;
+}
+
+
+static void getTxPowerIndex(
+       IN      PADAPTER                Adapter,
+       IN      u8                      channel,
+       IN OUT u8*              cckPowerLevel,
+       IN OUT u8*              ofdmPowerLevel
+       )
+{
+       HAL_DATA_TYPE           *pHalData = GET_HAL_DATA(Adapter);
+       u8                              index = (channel -1);
+       // 1. CCK
+       cckPowerLevel[RF_PATH_A] = pHalData->TxPwrLevelCck[RF_PATH_A][index];   //RF-A
+       cckPowerLevel[RF_PATH_B] = pHalData->TxPwrLevelCck[RF_PATH_B][index];   //RF-B
+
+       // 2. OFDM for 1S or 2S
+       if (GET_RF_TYPE(Adapter) == RF_1T2R || GET_RF_TYPE(Adapter) == RF_1T1R)
+       {
+               // Read HT 40 OFDM TX power
+               ofdmPowerLevel[RF_PATH_A] = pHalData->TxPwrLevelHT40_1S[RF_PATH_A][index];
+               ofdmPowerLevel[RF_PATH_B] = pHalData->TxPwrLevelHT40_1S[RF_PATH_B][index];
+       }
+       else if (GET_RF_TYPE(Adapter) == RF_2T2R)
+       {
+               // Read HT 40 OFDM TX power
+               ofdmPowerLevel[RF_PATH_A] = pHalData->TxPwrLevelHT40_2S[RF_PATH_A][index];
+               ofdmPowerLevel[RF_PATH_B] = pHalData->TxPwrLevelHT40_2S[RF_PATH_B][index];
+       }
+       //RTPRINT(FPHY, PHY_TXPWR, ("Channel-%d, set tx power index !!\n", channel));
+}
+
+static void ccxPowerIndexCheck(
+       IN      PADAPTER                Adapter,
+       IN      u8                      channel,
+       IN OUT u8*              cckPowerLevel,
+       IN OUT u8*              ofdmPowerLevel
+       )
+{
+#if 0
+       PMGNT_INFO                      pMgntInfo = &(Adapter->MgntInfo);
+       HAL_DATA_TYPE           *pHalData = GET_HAL_DATA(Adapter);
+       PRT_CCX_INFO            pCcxInfo = GET_CCX_INFO(pMgntInfo);
+
+       //
+       // CCX 2 S31, AP control of client transmit power:
+       // 1. We shall not exceed Cell Power Limit as possible as we can.
+       // 2. Tolerance is +/- 5dB.
+       // 3. 802.11h Power Contraint takes higher precedence over CCX Cell Power Limit.
+       //
+       // TODO:
+       // 1. 802.11h power contraint
+       //
+       // 071011, by rcnjko.
+       //
+       if(     pMgntInfo->OpMode == RT_OP_MODE_INFRASTRUCTURE &&
+               pMgntInfo->mAssoc &&
+               pCcxInfo->bUpdateCcxPwr &&
+               pCcxInfo->bWithCcxCellPwr &&
+               channel == pMgntInfo->dot11CurrentChannelNumber)
+       {
+               u1Byte  CckCellPwrIdx = phy_DbmToTxPwrIdx(Adapter, WIRELESS_MODE_B, pCcxInfo->CcxCellPwr);
+               u1Byte  LegacyOfdmCellPwrIdx = phy_DbmToTxPwrIdx(Adapter, WIRELESS_MODE_G, pCcxInfo->CcxCellPwr);
+               u1Byte  OfdmCellPwrIdx = phy_DbmToTxPwrIdx(Adapter, WIRELESS_MODE_N_24G, pCcxInfo->CcxCellPwr);
+
+               RT_TRACE(COMP_TXAGC, DBG_LOUD,
+               ("CCX Cell Limit: %d dbm => CCK Tx power index : %d, Legacy OFDM Tx power index : %d, OFDM Tx power index: %d\n",
+               pCcxInfo->CcxCellPwr, CckCellPwrIdx, LegacyOfdmCellPwrIdx, OfdmCellPwrIdx));
+               RT_TRACE(COMP_TXAGC, DBG_LOUD,
+               ("EEPROM channel(%d) => CCK Tx power index: %d, Legacy OFDM Tx power index : %d, OFDM Tx power index: %d\n",
+               channel, cckPowerLevel[0], ofdmPowerLevel[0] + pHalData->LegacyHTTxPowerDiff, ofdmPowerLevel[0]));
+
+               // CCK
+               if(cckPowerLevel[0] > CckCellPwrIdx)
+                       cckPowerLevel[0] = CckCellPwrIdx;
+               // Legacy OFDM, HT OFDM
+               if(ofdmPowerLevel[0] + pHalData->LegacyHTTxPowerDiff > LegacyOfdmCellPwrIdx)
+               {
+                       if((OfdmCellPwrIdx - pHalData->LegacyHTTxPowerDiff) > 0)
+                       {
+                               ofdmPowerLevel[0] = OfdmCellPwrIdx - pHalData->LegacyHTTxPowerDiff;
+                       }
+                       else
+                       {
+                               ofdmPowerLevel[0] = 0;
+                       }
+               }
+
+               RT_TRACE(COMP_TXAGC, DBG_LOUD,
+               ("Altered CCK Tx power index : %d, Legacy OFDM Tx power index: %d, OFDM Tx power index: %d\n",
+               cckPowerLevel[0], ofdmPowerLevel[0] + pHalData->LegacyHTTxPowerDiff, ofdmPowerLevel[0]));
+       }
+
+       pHalData->CurrentCckTxPwrIdx = cckPowerLevel[0];
+       pHalData->CurrentOfdm24GTxPwrIdx = ofdmPowerLevel[0];
+
+       RT_TRACE(COMP_TXAGC, DBG_LOUD,
+               ("PHY_SetTxPowerLevel8192S(): CCK Tx power index : %d, Legacy OFDM Tx power index: %d, OFDM Tx power index: %d\n",
+               cckPowerLevel[0], ofdmPowerLevel[0] + pHalData->LegacyHTTxPowerDiff, ofdmPowerLevel[0]));
+#endif
+}
+/*-----------------------------------------------------------------------------
+ * Function:    SetTxPowerLevel8190()
+ *
+ * Overview:    This function is export to "HalCommon" moudule
+ *                     We must consider RF path later!!!!!!!
+ *
+ * Input:       PADAPTER               Adapter
+ *                     u1Byte          channel
+ *
+ * Output:      NONE
+ *
+ * Return:      NONE
+ *     2008/11/04      MHC             We remove EEPROM_93C56.
+ *                                             We need to move CCX relative code to independet file.
+ *     2009/01/21      MHC             Support new EEPROM format from SD3 requirement.
+ *
+ *---------------------------------------------------------------------------*/
+VOID
+PHY_SetTxPowerLevel8192C(
+       IN      PADAPTER                Adapter,
+       IN      u8                      channel
+       )
+{
+       HAL_DATA_TYPE           *pHalData = GET_HAL_DATA(Adapter);
+       u8      cckPowerLevel[2], ofdmPowerLevel[2];    // [0]:RF-A, [1]:RF-B
+
+#if(MP_DRIVER == 1)
+       return;
+#endif
+
+       if(pHalData->bTXPowerDataReadFromEEPORM == _FALSE)
+               return;
+
+       getTxPowerIndex(Adapter, channel, &cckPowerLevel[0], &ofdmPowerLevel[0]);
+       //RTPRINT(FPHY, PHY_TXPWR, ("Channel-%d, cckPowerLevel (A / B) = 0x%x / 0x%x,   ofdmPowerLevel (A / B) = 0x%x / 0x%x\n",
+       //      channel, cckPowerLevel[0], cckPowerLevel[1], ofdmPowerLevel[0], ofdmPowerLevel[1]));
+
+       ccxPowerIndexCheck(Adapter, channel, &cckPowerLevel[0], &ofdmPowerLevel[0]);
+
+       rtl8192c_PHY_RF6052SetCckTxPower(Adapter, &cckPowerLevel[0]);
+       rtl8192c_PHY_RF6052SetOFDMTxPower(Adapter, &ofdmPowerLevel[0], channel);
+
+#if 0
+       switch(pHalData->rf_chip)
+       {
+               case RF_8225:
+                       PHY_SetRF8225CckTxPower(Adapter, cckPowerLevel[0]);
+                       PHY_SetRF8225OfdmTxPower(Adapter, ofdmPowerLevel[0]);
+               break;
+
+               case RF_8256:
+                       PHY_SetRF8256CCKTxPower(Adapter, cckPowerLevel[0]);
+                       PHY_SetRF8256OFDMTxPower(Adapter, ofdmPowerLevel[0]);
+                       break;
+
+               case RF_6052:
+                       PHY_RF6052SetCckTxPower(Adapter, &cckPowerLevel[0]);
+                       PHY_RF6052SetOFDMTxPower(Adapter, &ofdmPowerLevel[0], channel);
+                       break;
+
+               case RF_8258:
+                       break;
+       }
+#endif
+
+}
+
+
+//
+//     Description:
+//             Update transmit power level of all channel supported.
+//
+//     TODO:
+//             A mode.
+//     By Bruce, 2008-02-04.
+//
+BOOLEAN
+PHY_UpdateTxPowerDbm8192C(
+       IN      PADAPTER        Adapter,
+       IN      int             powerInDbm
+       )
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       u8                              idx;
+       u8                      rf_path;
+
+       // TODO: A mode Tx power.
+       u8      CckTxPwrIdx = phy_DbmToTxPwrIdx(Adapter, WIRELESS_MODE_B, powerInDbm);
+       u8      OfdmTxPwrIdx = phy_DbmToTxPwrIdx(Adapter, WIRELESS_MODE_N_24G, powerInDbm);
+
+       if(OfdmTxPwrIdx - pHalData->LegacyHTTxPowerDiff > 0)
+               OfdmTxPwrIdx -= pHalData->LegacyHTTxPowerDiff;
+       else
+               OfdmTxPwrIdx = 0;
+
+       //RT_TRACE(COMP_TXAGC, DBG_LOUD, ("PHY_UpdateTxPowerDbm8192S(): %ld dBm , CckTxPwrIdx = %d, OfdmTxPwrIdx = %d\n", powerInDbm, CckTxPwrIdx, OfdmTxPwrIdx));
+
+       for(idx = 0; idx < 14; idx++)
+       {
+               for (rf_path = 0; rf_path < 2; rf_path++)
+               {
+                       pHalData->TxPwrLevelCck[rf_path][idx] = CckTxPwrIdx;
+                       pHalData->TxPwrLevelHT40_1S[rf_path][idx] =
+                       pHalData->TxPwrLevelHT40_2S[rf_path][idx] = OfdmTxPwrIdx;
+               }
+       }
+
+       //Adapter->HalFunc.SetTxPowerLevelHandler(Adapter, pHalData->CurrentChannel);//gtest:todo
+
+       return _TRUE;
+}
+
+
+/*
+       Description:
+               When beacon interval is changed, the values of the
+               hw registers should be modified.
+       By tynli, 2008.10.24.
+
+*/
+
+
+void
+rtl8192c_PHY_SetBeaconHwReg(
+       IN      PADAPTER                Adapter,
+       IN      u16                     BeaconInterval
+       )
+{
+
+}
+
+
+VOID
+PHY_ScanOperationBackup8192C(
+       IN      PADAPTER        Adapter,
+       IN      u8              Operation
+       )
+{
+#if 0
+       IO_TYPE IoType;
+
+       if(!Adapter->bDriverStopped)
+       {
+               switch(Operation)
+               {
+                       case SCAN_OPT_BACKUP:
+                               IoType = IO_CMD_PAUSE_DM_BY_SCAN;
+                               rtw_hal_set_hwreg(Adapter,HW_VAR_IO_CMD,  (pu1Byte)&IoType);
+
+                               break;
+
+                       case SCAN_OPT_RESTORE:
+                               IoType = IO_CMD_RESUME_DM_BY_SCAN;
+                               rtw_hal_set_hwreg(Adapter,HW_VAR_IO_CMD,  (pu1Byte)&IoType);
+                               break;
+
+                       default:
+                               RT_TRACE(COMP_SCAN, DBG_LOUD, ("Unknown Scan Backup Operation. \n"));
+                               break;
+               }
+       }
+#endif
+}
+
+/*-----------------------------------------------------------------------------
+ * Function:    PHY_SetBWModeCallback8192C()
+ *
+ * Overview:    Timer callback function for SetSetBWMode
+ *
+ * Input:              PRT_TIMER               pTimer
+ *
+ * Output:      NONE
+ *
+ * Return:      NONE
+ *
+ * Note:               (1) We do not take j mode into consideration now
+ *                     (2) Will two workitem of "switch channel" and "switch channel bandwidth" run
+ *                          concurrently?
+ *---------------------------------------------------------------------------*/
+static VOID
+_PHY_SetBWMode92C(
+       IN      PADAPTER        Adapter
+)
+{
+//     PADAPTER                        Adapter = (PADAPTER)pTimer->Adapter;
+       HAL_DATA_TYPE           *pHalData = GET_HAL_DATA(Adapter);
+       u8                              regBwOpMode;
+       u8                              regRRSR_RSC;
+
+       //return;
+
+       // Added it for 20/40 mhz switch time evaluation by guangan 070531
+       //u4Byte                                NowL, NowH;
+       //u8Byte                                BeginTime, EndTime;
+
+       /*RT_TRACE(COMP_SCAN, DBG_LOUD, ("==>PHY_SetBWModeCallback8192C()  Switch to %s bandwidth\n", \
+                                       pHalData->CurrentChannelBW == HT_CHANNEL_WIDTH_20?"20MHz":"40MHz"))*/
+
+       if(pHalData->rf_chip == RF_PSEUDO_11N)
+       {
+               //pHalData->SetBWModeInProgress= _FALSE;
+               return;
+       }
+
+       // There is no 40MHz mode in RF_8225.
+       if(pHalData->rf_chip==RF_8225)
+               return;
+
+       if(Adapter->bDriverStopped)
+               return;
+
+       // Added it for 20/40 mhz switch time evaluation by guangan 070531
+       //NowL = PlatformEFIORead4Byte(Adapter, TSFR);
+       //NowH = PlatformEFIORead4Byte(Adapter, TSFR+4);
+       //BeginTime = ((u8Byte)NowH << 32) + NowL;
+
+       //3//
+       //3//<1>Set MAC register
+       //3//
+       //Adapter->HalFunc.SetBWModeHandler();
+
+       regBwOpMode = rtw_read8(Adapter, REG_BWOPMODE);
+       regRRSR_RSC = rtw_read8(Adapter, REG_RRSR+2);
+       //regBwOpMode = rtw_hal_get_hwreg(Adapter,HW_VAR_BWMODE,(pu1Byte)&regBwOpMode);
+
+       switch(pHalData->CurrentChannelBW)
+       {
+               case HT_CHANNEL_WIDTH_20:
+                       regBwOpMode |= BW_OPMODE_20MHZ;
+                          // 2007/02/07 Mark by Emily becasue we have not verify whether this register works
+                       rtw_write8(Adapter, REG_BWOPMODE, regBwOpMode);
+                       break;
+
+               case HT_CHANNEL_WIDTH_40:
+                       regBwOpMode &= ~BW_OPMODE_20MHZ;
+                               // 2007/02/07 Mark by Emily becasue we have not verify whether this register works
+                       rtw_write8(Adapter, REG_BWOPMODE, regBwOpMode);
+
+                       regRRSR_RSC = (regRRSR_RSC&0x90) |(pHalData->nCur40MhzPrimeSC<<5);
+                       rtw_write8(Adapter, REG_RRSR+2, regRRSR_RSC);
+                       break;
+
+               default:
+                       /*RT_TRACE(COMP_DBG, DBG_LOUD, ("PHY_SetBWModeCallback8192C():
+                                               unknown Bandwidth: %#X\n",pHalData->CurrentChannelBW));*/
+                       break;
+       }
+
+       //3//
+       //3//<2>Set PHY related register
+       //3//
+       switch(pHalData->CurrentChannelBW)
+       {
+               /* 20 MHz channel*/
+               case HT_CHANNEL_WIDTH_20:
+                       PHY_SetBBReg(Adapter, rFPGA0_RFMOD, bRFMOD, 0x0);
+                       PHY_SetBBReg(Adapter, rFPGA1_RFMOD, bRFMOD, 0x0);
+                       PHY_SetBBReg(Adapter, rFPGA0_AnalogParameter2, BIT10, 1);
+
+                       break;
+
+
+               /* 40 MHz channel*/
+               case HT_CHANNEL_WIDTH_40:
+                       PHY_SetBBReg(Adapter, rFPGA0_RFMOD, bRFMOD, 0x1);
+                       PHY_SetBBReg(Adapter, rFPGA1_RFMOD, bRFMOD, 0x1);
+
+                       // Set Control channel to upper or lower. These settings are required only for 40MHz
+                       PHY_SetBBReg(Adapter, rCCK0_System, bCCKSideBand, (pHalData->nCur40MhzPrimeSC>>1));
+                       PHY_SetBBReg(Adapter, rOFDM1_LSTF, 0xC00, pHalData->nCur40MhzPrimeSC);
+                       PHY_SetBBReg(Adapter, rFPGA0_AnalogParameter2, BIT10, 0);
+
+                       PHY_SetBBReg(Adapter, 0x818, (BIT26|BIT27), (pHalData->nCur40MhzPrimeSC==HAL_PRIME_CHNL_OFFSET_LOWER)?2:1);
+
+                       break;
+
+
+
+               default:
+                       /*RT_TRACE(COMP_DBG, DBG_LOUD, ("PHY_SetBWModeCallback8192C(): unknown Bandwidth: %#X\n"\
+                                               ,pHalData->CurrentChannelBW));*/
+                       break;
+
+       }
+       //Skip over setting of J-mode in BB register here. Default value is "None J mode". Emily 20070315
+
+       // Added it for 20/40 mhz switch time evaluation by guangan 070531
+       //NowL = PlatformEFIORead4Byte(Adapter, TSFR);
+       //NowH = PlatformEFIORead4Byte(Adapter, TSFR+4);
+       //EndTime = ((u8Byte)NowH << 32) + NowL;
+       //RT_TRACE(COMP_SCAN, DBG_LOUD, ("SetBWModeCallback8190Pci: time of SetBWMode = %I64d us!\n", (EndTime - BeginTime)));
+
+       //3<3>Set RF related register
+       switch(pHalData->rf_chip)
+       {
+               case RF_8225:
+                       //PHY_SetRF8225Bandwidth(Adapter, pHalData->CurrentChannelBW);
+                       break;
+
+               case RF_8256:
+                       // Please implement this function in Hal8190PciPhy8256.c
+                       //PHY_SetRF8256Bandwidth(Adapter, pHalData->CurrentChannelBW);
+                       break;
+
+               case RF_8258:
+                       // Please implement this function in Hal8190PciPhy8258.c
+                       // PHY_SetRF8258Bandwidth();
+                       break;
+
+               case RF_PSEUDO_11N:
+                       // Do Nothing
+                       break;
+
+               case RF_6052:
+                       rtl8192c_PHY_RF6052SetBandwidth(Adapter, pHalData->CurrentChannelBW);
+                       break;
+
+               default:
+                       //RT_ASSERT(FALSE, ("Unknown RFChipID: %d\n", pHalData->RFChipID));
+                       break;
+       }
+
+       //pHalData->SetBWModeInProgress= FALSE;
+
+       //RT_TRACE(COMP_SCAN, DBG_LOUD, ("<==PHY_SetBWModeCallback8192C() \n" ));
+}
+
+
+ /*-----------------------------------------------------------------------------
+ * Function:   SetBWMode8190Pci()
+ *
+ * Overview:  This function is export to "HalCommon" moudule
+ *
+ * Input:              PADAPTER                        Adapter
+ *                     HT_CHANNEL_WIDTH        Bandwidth       //20M or 40M
+ *
+ * Output:      NONE
+ *
+ * Return:      NONE
+ *
+ * Note:               We do not take j mode into consideration now
+ *---------------------------------------------------------------------------*/
+VOID
+PHY_SetBWMode8192C(
+       IN      PADAPTER                                        Adapter,
+       IN      HT_CHANNEL_WIDTH        Bandwidth,      // 20M or 40M
+       IN      unsigned char   Offset          // Upper, Lower, or Don't care
+)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       HT_CHANNEL_WIDTH        tmpBW= pHalData->CurrentChannelBW;
+       // Modified it for 20/40 mhz switch by guangan 070531
+       //PMGNT_INFO    pMgntInfo=&Adapter->MgntInfo;
+
+       //return;
+
+       //if(pHalData->SwChnlInProgress)
+//     if(pMgntInfo->bScanInProgress)
+//     {
+//             RT_TRACE(COMP_SCAN, DBG_LOUD, ("PHY_SetBWMode8192C() %s Exit because bScanInProgress!\n",
+//                                     Bandwidth == HT_CHANNEL_WIDTH_20?"20MHz":"40MHz"));
+//             return;
+//     }
+
+//     if(pHalData->SetBWModeInProgress)
+//     {
+//             // Modified it for 20/40 mhz switch by guangan 070531
+//             RT_TRACE(COMP_SCAN, DBG_LOUD, ("PHY_SetBWMode8192C() %s cancel last timer because SetBWModeInProgress!\n",
+//                                     Bandwidth == HT_CHANNEL_WIDTH_20?"20MHz":"40MHz"));
+//             PlatformCancelTimer(Adapter, &pHalData->SetBWModeTimer);
+//             //return;
+//     }
+
+       //if(pHalData->SetBWModeInProgress)
+       //      return;
+
+       //pHalData->SetBWModeInProgress= TRUE;
+
+       pHalData->CurrentChannelBW = Bandwidth;
+
+#if 0
+       if(Offset==HT_EXTCHNL_OFFSET_LOWER)
+               pHalData->nCur40MhzPrimeSC = HAL_PRIME_CHNL_OFFSET_UPPER;
+       else if(Offset==HT_EXTCHNL_OFFSET_UPPER)
+               pHalData->nCur40MhzPrimeSC = HAL_PRIME_CHNL_OFFSET_LOWER;
+       else
+               pHalData->nCur40MhzPrimeSC = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+#else
+       pHalData->nCur40MhzPrimeSC = Offset;
+#endif
+
+       if((!Adapter->bDriverStopped) && (!Adapter->bSurpriseRemoved))
+       {
+#ifdef USE_WORKITEM
+               //PlatformScheduleWorkItem(&(pHalData->SetBWModeWorkItem));
+#else
+       #if 0
+               //PlatformSetTimer(Adapter, &(pHalData->SetBWModeTimer), 0);
+       #else
+               _PHY_SetBWMode92C(Adapter);
+       #endif
+#endif
+       }
+       else
+       {
+               //RT_TRACE(COMP_SCAN, DBG_LOUD, ("PHY_SetBWMode8192C() SetBWModeInProgress FALSE driver sleep or unload\n"));
+               //pHalData->SetBWModeInProgress= FALSE;
+               pHalData->CurrentChannelBW = tmpBW;
+       }
+
+}
+
+
+static void _PHY_SwChnl8192C(PADAPTER Adapter, u8 channel)
+{
+       u8 eRFPath;
+       u32 param1, param2;
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+
+       if ( Adapter->bNotifyChannelChange )
+       {
+               DBG_871X( "[%s] ch = %d\n", __FUNCTION__, channel );
+       }
+
+       //s1. pre common command - CmdID_SetTxPowerLevel
+       PHY_SetTxPowerLevel8192C(Adapter, channel);
+
+       //s2. RF dependent command - CmdID_RF_WriteReg, param1=RF_CHNLBW, param2=channel
+       param1 = RF_CHNLBW;
+       param2 = channel;
+       for(eRFPath = 0; eRFPath <pHalData->NumTotalRFPath; eRFPath++)
+       {
+               pHalData->RfRegChnlVal[eRFPath] = ((pHalData->RfRegChnlVal[eRFPath] & 0xfffffc00) | param2);
+               PHY_SetRFReg(Adapter, (RF_RADIO_PATH_E)eRFPath, param1, bRFRegOffsetMask, pHalData->RfRegChnlVal[eRFPath]);
+       }
+
+
+       //s3. post common command - CmdID_End, None
+
+}
+
+VOID
+PHY_SwChnl8192C(       // Call after initialization
+       IN      PADAPTER        Adapter,
+       IN      u8              channel
+       )
+{
+       //PADAPTER Adapter =  ADJUST_TO_ADAPTIVE_ADAPTER(pAdapter, _TRUE);
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       u8      tmpchannel = pHalData->CurrentChannel;
+       BOOLEAN  bResult = _TRUE;
+
+       if(pHalData->rf_chip == RF_PSEUDO_11N)
+       {
+               //pHalData->SwChnlInProgress=FALSE;
+               return;                                                                 //return immediately if it is peudo-phy
+       }
+
+       //if(pHalData->SwChnlInProgress)
+       //      return;
+
+       //if(pHalData->SetBWModeInProgress)
+       //      return;
+
+       //--------------------------------------------
+       switch(pHalData->CurrentWirelessMode)
+       {
+               case WIRELESS_MODE_A:
+               case WIRELESS_MODE_N_5G:
+                       //RT_ASSERT((channel>14), ("WIRELESS_MODE_A but channel<=14"));
+                       break;
+
+               case WIRELESS_MODE_B:
+                       //RT_ASSERT((channel<=14), ("WIRELESS_MODE_B but channel>14"));
+                       break;
+
+               case WIRELESS_MODE_G:
+               case WIRELESS_MODE_N_24G:
+                       //RT_ASSERT((channel<=14), ("WIRELESS_MODE_G but channel>14"));
+                       break;
+
+               default:
+                       //RT_ASSERT(FALSE, ("Invalid WirelessMode(%#x)!!\n", pHalData->CurrentWirelessMode));
+                       break;
+       }
+       //--------------------------------------------
+
+       //pHalData->SwChnlInProgress = TRUE;
+       if(channel == 0)
+               channel = 1;
+
+       pHalData->CurrentChannel=channel;
+
+       //pHalData->SwChnlStage=0;
+       //pHalData->SwChnlStep=0;
+
+       if((!Adapter->bDriverStopped) && (!Adapter->bSurpriseRemoved))
+       {
+#ifdef USE_WORKITEM
+               //bResult = PlatformScheduleWorkItem(&(pHalData->SwChnlWorkItem));
+#else
+               #if 0
+               //PlatformSetTimer(Adapter, &(pHalData->SwChnlTimer), 0);
+               #else
+               _PHY_SwChnl8192C(Adapter, channel);
+               #endif
+#endif
+               if(bResult)
+               {
+                       //RT_TRACE(COMP_SCAN, DBG_LOUD, ("PHY_SwChnl8192C SwChnlInProgress TRUE schdule workitem done\n"));
+               }
+               else
+               {
+                       //RT_TRACE(COMP_SCAN, DBG_LOUD, ("PHY_SwChnl8192C SwChnlInProgress FALSE schdule workitem error\n"));
+                       //if(IS_HARDWARE_TYPE_8192SU(Adapter))
+                       //{
+                       //      pHalData->SwChnlInProgress = FALSE;
+                               pHalData->CurrentChannel = tmpchannel;
+                       //}
+               }
+
+       }
+       else
+       {
+               //RT_TRACE(COMP_SCAN, DBG_LOUD, ("PHY_SwChnl8192C SwChnlInProgress FALSE driver sleep or unload\n"));
+               //if(IS_HARDWARE_TYPE_8192SU(Adapter))
+               //{
+               //      pHalData->SwChnlInProgress = FALSE;
+                       pHalData->CurrentChannel = tmpchannel;
+               //}
+       }
+}
+
+
+static BOOLEAN
+phy_SwChnlStepByStep(
+       IN      PADAPTER        Adapter,
+       IN      u8              channel,
+       IN      u8              *stage,
+       IN      u8              *step,
+       OUT u32         *delay
+       )
+{
+#if 0
+       HAL_DATA_TYPE                   *pHalData = GET_HAL_DATA(Adapter);
+       PCHANNEL_ACCESS_SETTING pChnlAccessSetting;
+       SwChnlCmd                               PreCommonCmd[MAX_PRECMD_CNT];
+       u4Byte                                  PreCommonCmdCnt;
+       SwChnlCmd                               PostCommonCmd[MAX_POSTCMD_CNT];
+       u4Byte                                  PostCommonCmdCnt;
+       SwChnlCmd                               RfDependCmd[MAX_RFDEPENDCMD_CNT];
+       u4Byte                                  RfDependCmdCnt;
+       SwChnlCmd                               *CurrentCmd;
+       u1Byte                                  eRFPath;
+       u4Byte                                  RfTXPowerCtrl;
+       BOOLEAN                                 bAdjRfTXPowerCtrl = _FALSE;
+
+
+       RT_ASSERT((Adapter != NULL), ("Adapter should not be NULL\n"));
+#if(MP_DRIVER != 1)
+       RT_ASSERT(IsLegalChannel(Adapter, channel), ("illegal channel: %d\n", channel));
+#endif
+       RT_ASSERT((pHalData != NULL), ("pHalData should not be NULL\n"));
+
+       pChnlAccessSetting = &Adapter->MgntInfo.Info8185.ChannelAccessSetting;
+       RT_ASSERT((pChnlAccessSetting != NULL), ("pChnlAccessSetting should not be NULL\n"));
+
+       //for(eRFPath = RF_PATH_A; eRFPath <pHalData->NumTotalRFPath; eRFPath++)
+       //for(eRFPath = 0; eRFPath <pHalData->NumTotalRFPath; eRFPath++)
+       //{
+               // <1> Fill up pre common command.
+       PreCommonCmdCnt = 0;
+       phy_SetSwChnlCmdArray(PreCommonCmd, PreCommonCmdCnt++, MAX_PRECMD_CNT,
+                               CmdID_SetTxPowerLevel, 0, 0, 0);
+       phy_SetSwChnlCmdArray(PreCommonCmd, PreCommonCmdCnt++, MAX_PRECMD_CNT,
+                               CmdID_End, 0, 0, 0);
+
+               // <2> Fill up post common command.
+       PostCommonCmdCnt = 0;
+
+       phy_SetSwChnlCmdArray(PostCommonCmd, PostCommonCmdCnt++, MAX_POSTCMD_CNT,
+                               CmdID_End, 0, 0, 0);
+
+               // <3> Fill up RF dependent command.
+       RfDependCmdCnt = 0;
+       switch( pHalData->RFChipID )
+       {
+               case RF_8225:
+               RT_ASSERT((channel >= 1 && channel <= 14), ("illegal channel for Zebra: %d\n", channel));
+               // 2008/09/04 MH Change channel.
+               if(channel==14) channel++;
+               phy_SetSwChnlCmdArray(RfDependCmd, RfDependCmdCnt++, MAX_RFDEPENDCMD_CNT,
+                       CmdID_RF_WriteReg, rZebra1_Channel, (0x10+channel-1), 10);
+               phy_SetSwChnlCmdArray(RfDependCmd, RfDependCmdCnt++, MAX_RFDEPENDCMD_CNT,
+               CmdID_End, 0, 0, 0);
+               break;
+
+       case RF_8256:
+               // TEST!! This is not the table for 8256!!
+               RT_ASSERT((channel >= 1 && channel <= 14), ("illegal channel for Zebra: %d\n", channel));
+               phy_SetSwChnlCmdArray(RfDependCmd, RfDependCmdCnt++, MAX_RFDEPENDCMD_CNT,
+                       CmdID_RF_WriteReg, rRfChannel, channel, 10);
+               phy_SetSwChnlCmdArray(RfDependCmd, RfDependCmdCnt++, MAX_RFDEPENDCMD_CNT,
+               CmdID_End, 0, 0, 0);
+               break;
+
+       case RF_6052:
+               RT_ASSERT((channel >= 1 && channel <= 14), ("illegal channel for Zebra: %d\n", channel));
+               phy_SetSwChnlCmdArray(RfDependCmd, RfDependCmdCnt++, MAX_RFDEPENDCMD_CNT,
+                       CmdID_RF_WriteReg, RF_CHNLBW, channel, 10);
+               phy_SetSwChnlCmdArray(RfDependCmd, RfDependCmdCnt++, MAX_RFDEPENDCMD_CNT,
+               CmdID_End, 0, 0, 0);
+
+               break;
+
+       case RF_8258:
+               break;
+
+       // For FPGA two MAC verification
+       case RF_PSEUDO_11N:
+               return TRUE;
+       default:
+               RT_ASSERT(FALSE, ("Unknown RFChipID: %d\n", pHalData->RFChipID));
+               return FALSE;
+               break;
+       }
+
+
+       do{
+               switch(*stage)
+               {
+               case 0:
+                       CurrentCmd=&PreCommonCmd[*step];
+                       break;
+               case 1:
+                       CurrentCmd=&RfDependCmd[*step];
+                       break;
+               case 2:
+                       CurrentCmd=&PostCommonCmd[*step];
+                       break;
+               }
+
+               if(CurrentCmd->CmdID==CmdID_End)
+               {
+                       if((*stage)==2)
+                       {
+                               return TRUE;
+                       }
+                       else
+                       {
+                               (*stage)++;
+                               (*step)=0;
+                               continue;
+                       }
+               }
+
+               switch(CurrentCmd->CmdID)
+               {
+               case CmdID_SetTxPowerLevel:
+                       PHY_SetTxPowerLevel8192C(Adapter,channel);
+                       break;
+               case CmdID_WritePortUlong:
+                       PlatformEFIOWrite4Byte(Adapter, CurrentCmd->Para1, CurrentCmd->Para2);
+                       break;
+               case CmdID_WritePortUshort:
+                       PlatformEFIOWrite2Byte(Adapter, CurrentCmd->Para1, (u2Byte)CurrentCmd->Para2);
+                       break;
+               case CmdID_WritePortUchar:
+                       PlatformEFIOWrite1Byte(Adapter, CurrentCmd->Para1, (u1Byte)CurrentCmd->Para2);
+                       break;
+               case CmdID_RF_WriteReg: // Only modify channel for the register now !!!!!
+                       for(eRFPath = 0; eRFPath <pHalData->NumTotalRFPath; eRFPath++)
+                       {
+#if 1
+                               pHalData->RfRegChnlVal[eRFPath] = ((pHalData->RfRegChnlVal[eRFPath] & 0xfffffc00) | CurrentCmd->Para2);
+                               PHY_SetRFReg(Adapter, (RF_RADIO_PATH_E)eRFPath, CurrentCmd->Para1, bRFRegOffsetMask, pHalData->RfRegChnlVal[eRFPath]);
+#else
+                               PHY_SetRFReg(Adapter, (RF_RADIO_PATH_E)eRFPath, CurrentCmd->Para1, bRFRegOffsetMask, (CurrentCmd->Para2));
+#endif
+                       }
+                       break;
+               }
+
+               break;
+       }while(TRUE);
+       //cosa }/*for(Number of RF paths)*/
+
+       (*delay)=CurrentCmd->msDelay;
+       (*step)++;
+       return FALSE;
+#endif
+       return _TRUE;
+}
+
+
+static BOOLEAN
+phy_SetSwChnlCmdArray(
+       SwChnlCmd*              CmdTable,
+       u32                     CmdTableIdx,
+       u32                     CmdTableSz,
+       SwChnlCmdID             CmdID,
+       u32                     Para1,
+       u32                     Para2,
+       u32                     msDelay
+       )
+{
+       SwChnlCmd* pCmd;
+
+       if(CmdTable == NULL)
+       {
+               //RT_ASSERT(FALSE, ("phy_SetSwChnlCmdArray(): CmdTable cannot be NULL.\n"));
+               return _FALSE;
+       }
+       if(CmdTableIdx >= CmdTableSz)
+       {
+               //RT_ASSERT(FALSE,
+               //              ("phy_SetSwChnlCmdArray(): Access invalid index, please check size of the table, CmdTableIdx:%ld, CmdTableSz:%ld\n",
+               //              CmdTableIdx, CmdTableSz));
+               return _FALSE;
+       }
+
+       pCmd = CmdTable + CmdTableIdx;
+       pCmd->CmdID = CmdID;
+       pCmd->Para1 = Para1;
+       pCmd->Para2 = Para2;
+       pCmd->msDelay = msDelay;
+
+       return _TRUE;
+}
+
+
+static void
+phy_FinishSwChnlNow(   // We should not call this function directly
+               IN      PADAPTER        Adapter,
+               IN      u8              channel
+               )
+{
+#if 0
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       u32                     delay;
+
+       while(!phy_SwChnlStepByStep(Adapter,channel,&pHalData->SwChnlStage,&pHalData->SwChnlStep,&delay))
+       {
+               if(delay>0)
+                       rtw_mdelay_os(delay);
+       }
+#endif
+}
+
+
+
+//
+// Description:
+//     Switch channel synchronously. Called by SwChnlByDelayHandler.
+//
+// Implemented by Bruce, 2008-02-14.
+// The following procedure is operted according to SwChanlCallback8190Pci().
+// However, this procedure is performed synchronously  which should be running under
+// passive level.
+//
+VOID
+PHY_SwChnlPhy8192C(    // Only called during initialize
+       IN      PADAPTER        Adapter,
+       IN      u8              channel
+       )
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+
+       //RT_TRACE(COMP_SCAN | COMP_RM, DBG_LOUD, ("==>PHY_SwChnlPhy8192S(), switch from channel %d to channel %d.\n", pHalData->CurrentChannel, channel));
+
+       // Cannot IO.
+       //if(RT_CANNOT_IO(Adapter))
+       //      return;
+
+       // Channel Switching is in progress.
+       //if(pHalData->SwChnlInProgress)
+       //      return;
+
+       //return immediately if it is peudo-phy
+       if(pHalData->rf_chip == RF_PSEUDO_11N)
+       {
+               //pHalData->SwChnlInProgress=FALSE;
+               return;
+       }
+
+       //pHalData->SwChnlInProgress = TRUE;
+       if( channel == 0)
+               channel = 1;
+
+       pHalData->CurrentChannel=channel;
+
+       //pHalData->SwChnlStage = 0;
+       //pHalData->SwChnlStep = 0;
+
+       phy_FinishSwChnlNow(Adapter,channel);
+
+       //pHalData->SwChnlInProgress = FALSE;
+}
+
+
+//
+//     Description:
+//             Configure H/W functionality to enable/disable Monitor mode.
+//             Note, because we possibly need to configure BB and RF in this function,
+//             so caller should in PASSIVE_LEVEL. 080118, by rcnjko.
+//
+VOID
+PHY_SetMonitorMode8192C(
+       IN      PADAPTER                        pAdapter,
+       IN      BOOLEAN                         bEnableMonitorMode
+       )
+{
+#if 0
+       HAL_DATA_TYPE           *pHalData       = GET_HAL_DATA(pAdapter);
+       BOOLEAN                         bFilterOutNonAssociatedBSSID = FALSE;
+
+       //2 Note: we may need to stop antenna diversity.
+       if(bEnableMonitorMode)
+       {
+               bFilterOutNonAssociatedBSSID = FALSE;
+               RT_TRACE(COMP_RM, DBG_LOUD, ("PHY_SetMonitorMode8192S(): enable monitor mode\n"));
+
+               pHalData->bInMonitorMode = TRUE;
+               pAdapter->HalFunc.AllowAllDestAddrHandler(pAdapter, TRUE, TRUE);
+               rtw_hal_set_hwreg(pAdapter, HW_VAR_CHECK_BSSID, (pu1Byte)&bFilterOutNonAssociatedBSSID);
+       }
+       else
+       {
+               bFilterOutNonAssociatedBSSID = TRUE;
+               RT_TRACE(COMP_RM, DBG_LOUD, ("PHY_SetMonitorMode8192S(): disable monitor mode\n"));
+
+               pAdapter->HalFunc.AllowAllDestAddrHandler(pAdapter, FALSE, TRUE);
+               pHalData->bInMonitorMode = FALSE;
+               rtw_hal_set_hwreg(pAdapter, HW_VAR_CHECK_BSSID, (pu1Byte)&bFilterOutNonAssociatedBSSID);
+       }
+#endif
+}
+
+
+/*-----------------------------------------------------------------------------
+ * Function:   PHYCheckIsLegalRfPath8190Pci()
+ *
+ * Overview:   Check different RF type to execute legal judgement. If RF Path is illegal
+ *                     We will return false.
+ *
+ * Input:              NONE
+ *
+ * Output:             NONE
+ *
+ * Return:             NONE
+ *
+ * Revised History:
+ *     When            Who             Remark
+ *     11/15/2007      MHC             Create Version 0.
+ *
+ *---------------------------------------------------------------------------*/
+BOOLEAN
+PHY_CheckIsLegalRfPath8192C(
+       IN      PADAPTER        pAdapter,
+       IN      u32     eRFPath)
+{
+//     HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(pAdapter);
+       BOOLEAN                         rtValue = _TRUE;
+
+       // NOt check RF Path now.!
+#if 0
+       if (pHalData->RF_Type == RF_1T2R && eRFPath != RF_PATH_A)
+       {
+               rtValue = FALSE;
+       }
+       if (pHalData->RF_Type == RF_1T2R && eRFPath != RF_PATH_A)
+       {
+
+       }
+#endif
+       return  rtValue;
+
+}      /* PHY_CheckIsLegalRfPath8192C */
+
+//-------------------------------------------------------------------------
+//
+//     IQK
+//
+//-------------------------------------------------------------------------
+#define MAX_TOLERANCE          5
+#define IQK_DELAY_TIME         1       //ms
+
+static u8                      //bit0 = 1 => Tx OK, bit1 = 1 => Rx OK
+_PHY_PathA_IQK(
+       IN      PADAPTER        pAdapter,
+       IN      BOOLEAN         configPathB
+       )
+{
+       u32 regEAC, regE94, regE9C, regEA4;
+       u8 result = 0x00;
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(pAdapter);
+
+       //RTPRINT(FINIT, INIT_IQK, ("Path A IQK!\n"));
+
+       //path-A IQK setting
+       //RTPRINT(FINIT, INIT_IQK, ("Path-A IQK setting!\n"));
+       PHY_SetBBReg(pAdapter, rTx_IQK_Tone_A, bMaskDWord, 0x10008c1f);
+       PHY_SetBBReg(pAdapter, rRx_IQK_Tone_A, bMaskDWord, 0x10008c1f);
+       PHY_SetBBReg(pAdapter, rTx_IQK_PI_A, bMaskDWord, 0x82140102);
+
+       PHY_SetBBReg(pAdapter, rRx_IQK_PI_A, bMaskDWord, configPathB ? 0x28160202 :
+               IS_81xxC_VENDOR_UMC_B_CUT(pHalData->VersionID)?0x28160202:0x28160502);
+
+       //path-B IQK setting
+       if(configPathB)
+       {
+               PHY_SetBBReg(pAdapter, rTx_IQK_Tone_B, bMaskDWord, 0x10008c22);
+               PHY_SetBBReg(pAdapter, rRx_IQK_Tone_B, bMaskDWord, 0x10008c22);
+               PHY_SetBBReg(pAdapter, rTx_IQK_PI_B, bMaskDWord, 0x82140102);
+               PHY_SetBBReg(pAdapter, rRx_IQK_PI_B, bMaskDWord, 0x28160202);
+       }
+
+       //LO calibration setting
+       //RTPRINT(FINIT, INIT_IQK, ("LO calibration setting!\n"));
+       PHY_SetBBReg(pAdapter, rIQK_AGC_Rsp, bMaskDWord, 0x001028d1);
+
+       //One shot, path A LOK & IQK
+       //RTPRINT(FINIT, INIT_IQK, ("One shot, path A LOK & IQK!\n"));
+       PHY_SetBBReg(pAdapter, rIQK_AGC_Pts, bMaskDWord, 0xf9000000);
+       PHY_SetBBReg(pAdapter, rIQK_AGC_Pts, bMaskDWord, 0xf8000000);
+
+       // delay x ms
+       //RTPRINT(FINIT, INIT_IQK, ("Delay %d ms for One shot, path A LOK & IQK.\n", IQK_DELAY_TIME));
+       rtw_udelay_os(IQK_DELAY_TIME*1000);//PlatformStallExecution(IQK_DELAY_TIME*1000);
+
+       // Check failed
+       regEAC = PHY_QueryBBReg(pAdapter, rRx_Power_After_IQK_A_2, bMaskDWord);
+       //RTPRINT(FINIT, INIT_IQK, ("0xeac = 0x%x\n", regEAC));
+       regE94 = PHY_QueryBBReg(pAdapter, rTx_Power_Before_IQK_A, bMaskDWord);
+       //RTPRINT(FINIT, INIT_IQK, ("0xe94 = 0x%x\n", regE94));
+       regE9C= PHY_QueryBBReg(pAdapter, rTx_Power_After_IQK_A, bMaskDWord);
+       //RTPRINT(FINIT, INIT_IQK, ("0xe9c = 0x%x\n", regE9C));
+       regEA4= PHY_QueryBBReg(pAdapter, rRx_Power_Before_IQK_A_2, bMaskDWord);
+       //RTPRINT(FINIT, INIT_IQK, ("0xea4 = 0x%x\n", regEA4));
+
+        if(!(regEAC & BIT28) &&
+               (((regE94 & 0x03FF0000)>>16) != 0x142) &&
+               (((regE9C & 0x03FF0000)>>16) != 0x42) )
+               result |= 0x01;
+       else                                                    //if Tx not OK, ignore Rx
+               return result;
+
+       if(!(regEAC & BIT27) &&         //if Tx is OK, check whether Rx is OK
+               (((regEA4 & 0x03FF0000)>>16) != 0x132) &&
+               (((regEAC & 0x03FF0000)>>16) != 0x36))
+               result |= 0x02;
+       else
+               DBG_8192C("Path A Rx IQK fail!!\n");
+
+       return result;
+
+
+}
+
+static u8                              //bit0 = 1 => Tx OK, bit1 = 1 => Rx OK
+_PHY_PathB_IQK(
+       IN      PADAPTER        pAdapter
+       )
+{
+       u32 regEAC, regEB4, regEBC, regEC4, regECC;
+       u8      result = 0x00;
+       //RTPRINT(FINIT, INIT_IQK, ("Path B IQK!\n"));
+
+       //One shot, path B LOK & IQK
+       //RTPRINT(FINIT, INIT_IQK, ("One shot, path A LOK & IQK!\n"));
+       PHY_SetBBReg(pAdapter, rIQK_AGC_Cont, bMaskDWord, 0x00000002);
+       PHY_SetBBReg(pAdapter, rIQK_AGC_Cont, bMaskDWord, 0x00000000);
+
+       // delay x ms
+       //RTPRINT(FINIT, INIT_IQK, ("Delay %d ms for One shot, path B LOK & IQK.\n", IQK_DELAY_TIME));
+       rtw_udelay_os(IQK_DELAY_TIME*1000);//PlatformStallExecution(IQK_DELAY_TIME*1000);
+
+       // Check failed
+       regEAC = PHY_QueryBBReg(pAdapter, rRx_Power_After_IQK_A_2, bMaskDWord);
+       //RTPRINT(FINIT, INIT_IQK, ("0xeac = 0x%x\n", regEAC));
+       regEB4 = PHY_QueryBBReg(pAdapter, rTx_Power_Before_IQK_B, bMaskDWord);
+       //RTPRINT(FINIT, INIT_IQK, ("0xeb4 = 0x%x\n", regEB4));
+       regEBC= PHY_QueryBBReg(pAdapter, rTx_Power_After_IQK_B, bMaskDWord);
+       //RTPRINT(FINIT, INIT_IQK, ("0xebc = 0x%x\n", regEBC));
+       regEC4= PHY_QueryBBReg(pAdapter, rRx_Power_Before_IQK_B_2, bMaskDWord);
+       //RTPRINT(FINIT, INIT_IQK, ("0xec4 = 0x%x\n", regEC4));
+       regECC= PHY_QueryBBReg(pAdapter, rRx_Power_After_IQK_B_2, bMaskDWord);
+       //RTPRINT(FINIT, INIT_IQK, ("0xecc = 0x%x\n", regECC));
+
+       if(!(regEAC & BIT31) &&
+               (((regEB4 & 0x03FF0000)>>16) != 0x142) &&
+               (((regEBC & 0x03FF0000)>>16) != 0x42))
+               result |= 0x01;
+       else
+               return result;
+
+       if(!(regEAC & BIT30) &&
+               (((regEC4 & 0x03FF0000)>>16) != 0x132) &&
+               (((regECC & 0x03FF0000)>>16) != 0x36))
+               result |= 0x02;
+       else
+               DBG_8192C("Path B Rx IQK fail!!\n");
+
+
+       return result;
+
+}
+
+static VOID
+_PHY_PathAFillIQKMatrix(
+       IN      PADAPTER        pAdapter,
+       IN      BOOLEAN         bIQKOK,
+       IN      int                     result[][8],
+       IN      u8                      final_candidate,
+       IN      BOOLEAN         bTxOnly
+       )
+{
+       u32     Oldval_0, X, TX0_A, reg;
+       s32     Y, TX0_C;
+
+       DBG_8192C("Path A IQ Calibration %s !\n",(bIQKOK)?"Success":"Failed");
+
+       if(final_candidate == 0xFF)
+               return;
+       else if(bIQKOK)
+       {
+               Oldval_0 = (PHY_QueryBBReg(pAdapter, rOFDM0_XATxIQImbalance, bMaskDWord) >> 22) & 0x3FF;
+
+               X = result[final_candidate][0];
+               if ((X & 0x00000200) != 0)
+                       X = X | 0xFFFFFC00;
+               TX0_A = (X * Oldval_0) >> 8;
+               //RTPRINT(FINIT, INIT_IQK, ("X = 0x%lx, TX0_A = 0x%lx, Oldval_0 0x%lx\n", X, TX0_A, Oldval_0));
+               PHY_SetBBReg(pAdapter, rOFDM0_XATxIQImbalance, 0x3FF, TX0_A);
+               PHY_SetBBReg(pAdapter, rOFDM0_ECCAThreshold, BIT(31), ((X* Oldval_0>>7) & 0x1));
+
+               Y = result[final_candidate][1];
+               if ((Y & 0x00000200) != 0)
+                       Y = Y | 0xFFFFFC00;
+               TX0_C = (Y * Oldval_0) >> 8;
+               //RTPRINT(FINIT, INIT_IQK, ("Y = 0x%lx, TX = 0x%lx\n", Y, TX0_C));
+               PHY_SetBBReg(pAdapter, rOFDM0_XCTxAFE, 0xF0000000, ((TX0_C&0x3C0)>>6));
+               PHY_SetBBReg(pAdapter, rOFDM0_XATxIQImbalance, 0x003F0000, (TX0_C&0x3F));
+               PHY_SetBBReg(pAdapter, rOFDM0_ECCAThreshold, BIT(29), ((Y* Oldval_0>>7) & 0x1));
+
+               if(bTxOnly)
+               {
+                       DBG_8192C("_PHY_PathAFillIQKMatrix only Tx OK\n");
+                       return;
+               }
+
+               reg = result[final_candidate][2];
+               PHY_SetBBReg(pAdapter, rOFDM0_XARxIQImbalance, 0x3FF, reg);
+
+               reg = result[final_candidate][3] & 0x3F;
+               PHY_SetBBReg(pAdapter, rOFDM0_XARxIQImbalance, 0xFC00, reg);
+
+               reg = (result[final_candidate][3] >> 6) & 0xF;
+               PHY_SetBBReg(pAdapter, rOFDM0_RxIQExtAnta, 0xF0000000, reg);
+       }
+}
+
+static VOID
+_PHY_PathBFillIQKMatrix(
+       IN      PADAPTER        pAdapter,
+       IN      BOOLEAN         bIQKOK,
+       IN      int                     result[][8],
+       IN      u8                      final_candidate,
+       IN      BOOLEAN         bTxOnly                 //do Tx only
+       )
+{
+       u32     Oldval_1, X, TX1_A, reg;
+       s32     Y, TX1_C;
+
+       DBG_8192C("Path B IQ Calibration %s !\n",(bIQKOK)?"Success":"Failed");
+
+       if(final_candidate == 0xFF)
+               return;
+       else if(bIQKOK)
+       {
+               Oldval_1 = (PHY_QueryBBReg(pAdapter, rOFDM0_XBTxIQImbalance, bMaskDWord) >> 22) & 0x3FF;
+
+               X = result[final_candidate][4];
+               if ((X & 0x00000200) != 0)
+                       X = X | 0xFFFFFC00;
+               TX1_A = (X * Oldval_1) >> 8;
+               //RTPRINT(FINIT, INIT_IQK, ("X = 0x%lx, TX1_A = 0x%lx\n", X, TX1_A));
+               PHY_SetBBReg(pAdapter, rOFDM0_XBTxIQImbalance, 0x3FF, TX1_A);
+               PHY_SetBBReg(pAdapter, rOFDM0_ECCAThreshold, BIT(27), ((X* Oldval_1>>7) & 0x1));
+
+               Y = result[final_candidate][5];
+               if ((Y & 0x00000200) != 0)
+                       Y = Y | 0xFFFFFC00;
+               TX1_C = (Y * Oldval_1) >> 8;
+               //RTPRINT(FINIT, INIT_IQK, ("Y = 0x%lx, TX1_C = 0x%lx\n", Y, TX1_C));
+               PHY_SetBBReg(pAdapter, rOFDM0_XDTxAFE, 0xF0000000, ((TX1_C&0x3C0)>>6));
+               PHY_SetBBReg(pAdapter, rOFDM0_XBTxIQImbalance, 0x003F0000, (TX1_C&0x3F));
+               PHY_SetBBReg(pAdapter, rOFDM0_ECCAThreshold, BIT(25), ((Y* Oldval_1>>7) & 0x1));
+
+               if(bTxOnly)
+                       return;
+
+               reg = result[final_candidate][6];
+               PHY_SetBBReg(pAdapter, rOFDM0_XBRxIQImbalance, 0x3FF, reg);
+
+               reg = result[final_candidate][7] & 0x3F;
+               PHY_SetBBReg(pAdapter, rOFDM0_XBRxIQImbalance, 0xFC00, reg);
+
+               reg = (result[final_candidate][7] >> 6) & 0xF;
+               PHY_SetBBReg(pAdapter, rOFDM0_AGCRSSITable, 0x0000F000, reg);
+       }
+}
+
+static VOID
+_PHY_SaveADDARegisters(
+       IN      PADAPTER        pAdapter,
+       IN      u32*            ADDAReg,
+       IN      u32*            ADDABackup,
+       IN      u32                     RegisterNum
+       )
+{
+       u32     i;
+
+       //RTPRINT(FINIT, INIT_IQK, ("Save ADDA parameters.\n"));
+       for( i = 0 ; i < RegisterNum ; i++){
+               ADDABackup[i] = PHY_QueryBBReg(pAdapter, ADDAReg[i], bMaskDWord);
+       }
+}
+
+static VOID
+_PHY_SaveMACRegisters(
+       IN      PADAPTER        pAdapter,
+       IN      u32*            MACReg,
+       IN      u32*            MACBackup
+       )
+{
+       u32     i;
+
+       //RTPRINT(FINIT, INIT_IQK, ("Save MAC parameters.\n"));
+       for( i = 0 ; i < (IQK_MAC_REG_NUM - 1); i++){
+               MACBackup[i] =rtw_read8(pAdapter, MACReg[i]);
+       }
+       MACBackup[i] = rtw_read32(pAdapter, MACReg[i]);
+
+}
+
+static VOID
+_PHY_ReloadADDARegisters(
+       IN      PADAPTER        pAdapter,
+       IN      u32*            ADDAReg,
+       IN      u32*            ADDABackup,
+       IN      u32                     RegiesterNum
+       )
+{
+       u32     i;
+
+       //RTPRINT(FINIT, INIT_IQK, ("Reload ADDA power saving parameters !\n"));
+       for(i = 0 ; i < RegiesterNum ; i++){
+               PHY_SetBBReg(pAdapter, ADDAReg[i], bMaskDWord, ADDABackup[i]);
+       }
+}
+
+static VOID
+_PHY_ReloadMACRegisters(
+       IN      PADAPTER        pAdapter,
+       IN      u32*            MACReg,
+       IN      u32*            MACBackup
+       )
+{
+       u32     i;
+
+       //RTPRINT(FINIT, INIT_IQK, ("Reload MAC parameters !\n"));
+       for(i = 0 ; i < (IQK_MAC_REG_NUM - 1); i++){
+               rtw_write8(pAdapter, MACReg[i], (u8)MACBackup[i]);
+       }
+       rtw_write32(pAdapter, MACReg[i], MACBackup[i]);
+}
+
+static VOID
+_PHY_PathADDAOn(
+       IN      PADAPTER        pAdapter,
+       IN      u32*            ADDAReg,
+       IN      BOOLEAN         isPathAOn,
+       IN      BOOLEAN         is2T
+       )
+{
+       u32     pathOn;
+       u32     i;
+
+       //RTPRINT(FINIT, INIT_IQK, ("ADDA ON.\n"));
+
+       pathOn = isPathAOn ? 0x04db25a4 : 0x0b1b25a4;
+       if(_FALSE == is2T){
+               pathOn = 0x0bdb25a0;
+               PHY_SetBBReg(pAdapter, ADDAReg[0], bMaskDWord, 0x0b1b25a0);
+       }
+       else{
+               PHY_SetBBReg(pAdapter, ADDAReg[0], bMaskDWord, pathOn);
+       }
+
+       for( i = 1 ; i < IQK_ADDA_REG_NUM ; i++){
+               PHY_SetBBReg(pAdapter, ADDAReg[i], bMaskDWord, pathOn);
+       }
+
+}
+
+static VOID
+_PHY_MACSettingCalibration(
+       IN      PADAPTER        pAdapter,
+       IN      u32*            MACReg,
+       IN      u32*            MACBackup
+       )
+{
+       u32     i = 0;
+
+       //RTPRINT(FINIT, INIT_IQK, ("MAC settings for Calibration.\n"));
+
+       rtw_write8(pAdapter, MACReg[i], 0x3F);
+
+       for(i = 1 ; i < (IQK_MAC_REG_NUM - 1); i++){
+               rtw_write8(pAdapter, MACReg[i], (u8)(MACBackup[i]&(~BIT3)));
+       }
+       rtw_write8(pAdapter, MACReg[i], (u8)(MACBackup[i]&(~BIT5)));
+
+}
+
+static VOID
+_PHY_PathAStandBy(
+       IN      PADAPTER        pAdapter
+       )
+{
+       //RTPRINT(FINIT, INIT_IQK, ("Path-A standby mode!\n"));
+
+       PHY_SetBBReg(pAdapter, rFPGA0_IQK, bMaskDWord, 0x0);
+       PHY_SetBBReg(pAdapter, 0x840, bMaskDWord, 0x00010000);
+       PHY_SetBBReg(pAdapter, rFPGA0_IQK, bMaskDWord, 0x80800000);
+}
+
+static VOID
+_PHY_PIModeSwitch(
+       IN      PADAPTER        pAdapter,
+       IN      BOOLEAN         PIMode
+       )
+{
+       u32     mode;
+
+       //RTPRINT(FINIT, INIT_IQK, ("BB Switch to %s mode!\n", (PIMode ? "PI" : "SI")));
+
+       mode = PIMode ? 0x01000100 : 0x01000000;
+       PHY_SetBBReg(pAdapter, 0x820, bMaskDWord, mode);
+       PHY_SetBBReg(pAdapter, 0x828, bMaskDWord, mode);
+}
+
+/*
+return _FALSE => do IQK again
+*/
+static BOOLEAN
+_PHY_SimularityCompare(
+       IN      PADAPTER        pAdapter,
+       IN      int             result[][8],
+       IN      u8               c1,
+       IN      u8               c2
+       )
+{
+       u32             i, j, diff, SimularityBitMap, bound = 0;
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(pAdapter);
+       u8              final_candidate[2] = {0xFF, 0xFF};      //for path A and path B
+       BOOLEAN         bResult = _TRUE, is2T = IS_92C_SERIAL( pHalData->VersionID);
+
+       if(is2T)
+               bound = 8;
+       else
+               bound = 4;
+
+       SimularityBitMap = 0;
+
+       for( i = 0; i < bound; i++ )
+       {
+               diff = (result[c1][i] > result[c2][i]) ? (result[c1][i] - result[c2][i]) : (result[c2][i] - result[c1][i]);
+               if (diff > MAX_TOLERANCE)
+               {
+                       if((i == 2 || i == 6) && !SimularityBitMap)
+                       {
+                               if(result[c1][i]+result[c1][i+1] == 0)
+                                       final_candidate[(i/4)] = c2;
+                               else if (result[c2][i]+result[c2][i+1] == 0)
+                                       final_candidate[(i/4)] = c1;
+                               else
+                                       SimularityBitMap = SimularityBitMap|(1<<i);
+                       }
+                       else
+                               SimularityBitMap = SimularityBitMap|(1<<i);
+               }
+       }
+
+       if ( SimularityBitMap == 0)
+       {
+               for( i = 0; i < (bound/4); i++ )
+               {
+                       if(final_candidate[i] != 0xFF)
+                       {
+                               for( j = i*4; j < (i+1)*4-2; j++)
+                                       result[3][j] = result[final_candidate[i]][j];
+                               bResult = _FALSE;
+                       }
+               }
+               return bResult;
+       }
+       else if (!(SimularityBitMap & 0x0F))                    //path A OK
+       {
+               for(i = 0; i < 4; i++)
+                       result[3][i] = result[c1][i];
+               return _FALSE;
+       }
+       else if (!(SimularityBitMap & 0xF0) && is2T)    //path B OK
+       {
+               for(i = 4; i < 8; i++)
+                       result[3][i] = result[c1][i];
+               return _FALSE;
+       }
+       else
+               return _FALSE;
+
+}
+
+static VOID
+_PHY_IQCalibrate(
+       IN      PADAPTER        pAdapter,
+       IN      int             result[][8],
+       IN      u8              t,
+       IN      BOOLEAN         is2T
+       )
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(pAdapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+       u32                     i;
+       u8                      PathAOK, PathBOK;
+       u32                     ADDA_REG[IQK_ADDA_REG_NUM] = {
+                                               rFPGA0_XCD_SwitchControl,       rBlue_Tooth,
+                                               rRx_Wait_CCA,           rTx_CCK_RFON,
+                                               rTx_CCK_BBON,   rTx_OFDM_RFON,
+                                               rTx_OFDM_BBON,  rTx_To_Rx,
+                                               rTx_To_Tx,              rRx_CCK,
+                                               rRx_OFDM,               rRx_Wait_RIFS,
+                                               rRx_TO_Rx,              rStandby,
+                                               rSleep,                         rPMPD_ANAEN };
+
+       u32                     IQK_MAC_REG[IQK_MAC_REG_NUM] = {
+                                               REG_TXPAUSE,            REG_BCN_CTRL,
+                                               REG_BCN_CTRL_1, REG_GPIO_MUXCFG};
+
+       u32                     IQK_BB_REG_92C[IQK_BB_REG_NUM] = {
+                                                       rOFDM0_TRxPathEnable,           rOFDM0_TRMuxPar,
+                                                       rFPGA0_XCD_RFInterfaceSW,       rConfig_AntA,   rConfig_AntB,
+                                                       rFPGA0_XAB_RFInterfaceSW,       rFPGA0_XA_RFInterfaceOE,
+                                                       rFPGA0_XB_RFInterfaceOE,        rFPGA0_RFMOD
+                                                       };
+
+#if MP_DRIVER
+       const u32       retryCount = 9;
+#else
+       const u32       retryCount = 2;
+#endif
+
+       // Note: IQ calibration must be performed after loading
+       //              PHY_REG.txt , and radio_a, radio_b.txt
+
+       u32 bbvalue;
+
+       if(t==0)
+       {
+               bbvalue = PHY_QueryBBReg(pAdapter, rFPGA0_RFMOD, bMaskDWord);
+               //RTPRINT(FINIT, INIT_IQK, ("PHY_IQCalibrate()==>0x%08lx\n",bbvalue));
+
+               //RTPRINT(FINIT, INIT_IQK, ("IQ Calibration for %s\n", (is2T ? "2T2R" : "1T1R")));
+
+               // Save ADDA parameters, turn Path A ADDA on
+               _PHY_SaveADDARegisters(pAdapter, ADDA_REG, pdmpriv->ADDA_backup,IQK_ADDA_REG_NUM);
+               _PHY_SaveMACRegisters(pAdapter, IQK_MAC_REG, pdmpriv->IQK_MAC_backup);
+               _PHY_SaveADDARegisters(pAdapter, IQK_BB_REG_92C, pdmpriv->IQK_BB_backup, IQK_BB_REG_NUM);
+       }
+       _PHY_PathADDAOn(pAdapter, ADDA_REG, _TRUE, is2T);
+
+       if(t==0)
+       {
+               pdmpriv->bRfPiEnable = (u8)PHY_QueryBBReg(pAdapter, rFPGA0_XA_HSSIParameter1, BIT(8));
+       }
+
+       if(!pdmpriv->bRfPiEnable){
+               // Switch BB to PI mode to do IQ Calibration.
+               _PHY_PIModeSwitch(pAdapter, _TRUE);
+       }
+
+       PHY_SetBBReg(pAdapter, rFPGA0_RFMOD, BIT24, 0x00);
+       PHY_SetBBReg(pAdapter, rOFDM0_TRxPathEnable, bMaskDWord, 0x03a05600);
+       PHY_SetBBReg(pAdapter, rOFDM0_TRMuxPar, bMaskDWord, 0x000800e4);
+       PHY_SetBBReg(pAdapter, rFPGA0_XCD_RFInterfaceSW, bMaskDWord, 0x22204000);
+       PHY_SetBBReg(pAdapter, rFPGA0_XAB_RFInterfaceSW, BIT10, 0x01);
+       PHY_SetBBReg(pAdapter, rFPGA0_XAB_RFInterfaceSW, BIT26, 0x01);
+       PHY_SetBBReg(pAdapter, rFPGA0_XA_RFInterfaceOE, BIT10, 0x00);
+       PHY_SetBBReg(pAdapter, rFPGA0_XB_RFInterfaceOE, BIT10, 0x00);
+
+       if(is2T)
+       {
+               PHY_SetBBReg(pAdapter, rFPGA0_XA_LSSIParameter, bMaskDWord, 0x00010000);
+               PHY_SetBBReg(pAdapter, rFPGA0_XB_LSSIParameter, bMaskDWord, 0x00010000);
+       }
+
+       //MAC settings
+       _PHY_MACSettingCalibration(pAdapter, IQK_MAC_REG, pdmpriv->IQK_MAC_backup);
+
+       //Page B init
+       PHY_SetBBReg(pAdapter, rConfig_AntA, bMaskDWord, 0x00080000);
+
+       if(is2T)
+       {
+               PHY_SetBBReg(pAdapter, rConfig_AntB, bMaskDWord, 0x00080000);
+       }
+
+       // IQ calibration setting
+       //RTPRINT(FINIT, INIT_IQK, ("IQK setting!\n"));
+       PHY_SetBBReg(pAdapter, rFPGA0_IQK, bMaskDWord, 0x80800000);
+       PHY_SetBBReg(pAdapter, rTx_IQK, bMaskDWord, 0x01007c00);
+       PHY_SetBBReg(pAdapter, rRx_IQK, bMaskDWord, 0x01004800);
+
+       for(i = 0 ; i < retryCount ; i++){
+               PathAOK = _PHY_PathA_IQK(pAdapter, is2T);
+               if(PathAOK == 0x03){
+                               DBG_8192C("Path A IQK Success!!\n");
+                               result[t][0] = (PHY_QueryBBReg(pAdapter, rTx_Power_Before_IQK_A, bMaskDWord)&0x3FF0000)>>16;
+                               result[t][1] = (PHY_QueryBBReg(pAdapter, rTx_Power_After_IQK_A, bMaskDWord)&0x3FF0000)>>16;
+                               result[t][2] = (PHY_QueryBBReg(pAdapter, rRx_Power_Before_IQK_A_2, bMaskDWord)&0x3FF0000)>>16;
+                               result[t][3] = (PHY_QueryBBReg(pAdapter, rRx_Power_After_IQK_A_2, bMaskDWord)&0x3FF0000)>>16;
+                       break;
+               }
+               else if (i == (retryCount-1) && PathAOK == 0x01)        //Tx IQK OK
+               {
+                       DBG_8192C("Path A IQK Only  Tx Success!!\n");
+
+                       result[t][0] = (PHY_QueryBBReg(pAdapter, rTx_Power_Before_IQK_A, bMaskDWord)&0x3FF0000)>>16;
+                       result[t][1] = (PHY_QueryBBReg(pAdapter, rTx_Power_After_IQK_A, bMaskDWord)&0x3FF0000)>>16;
+               }
+       }
+
+       if(0x00 == PathAOK){
+               DBG_8192C("Path A IQK failed!!\n");
+       }
+
+       if(is2T){
+               _PHY_PathAStandBy(pAdapter);
+
+               // Turn Path B ADDA on
+               _PHY_PathADDAOn(pAdapter, ADDA_REG, _FALSE, is2T);
+
+               for(i = 0 ; i < retryCount ; i++){
+                       PathBOK = _PHY_PathB_IQK(pAdapter);
+                       if(PathBOK == 0x03){
+                               DBG_8192C("Path B IQK Success!!\n");
+                               result[t][4] = (PHY_QueryBBReg(pAdapter, rTx_Power_Before_IQK_B, bMaskDWord)&0x3FF0000)>>16;
+                               result[t][5] = (PHY_QueryBBReg(pAdapter, rTx_Power_After_IQK_B, bMaskDWord)&0x3FF0000)>>16;
+                               result[t][6] = (PHY_QueryBBReg(pAdapter, rRx_Power_Before_IQK_B_2, bMaskDWord)&0x3FF0000)>>16;
+                               result[t][7] = (PHY_QueryBBReg(pAdapter, rRx_Power_After_IQK_B_2, bMaskDWord)&0x3FF0000)>>16;
+                               break;
+                       }
+                       else if (i == (retryCount - 1) && PathBOK == 0x01)      //Tx IQK OK
+                       {
+                               DBG_8192C("Path B Only Tx IQK Success!!\n");
+                               result[t][4] = (PHY_QueryBBReg(pAdapter, rTx_Power_Before_IQK_B, bMaskDWord)&0x3FF0000)>>16;
+                               result[t][5] = (PHY_QueryBBReg(pAdapter, rTx_Power_After_IQK_B, bMaskDWord)&0x3FF0000)>>16;
+                       }
+               }
+
+               if(0x00 == PathBOK){
+                       DBG_8192C("Path B IQK failed!!\n");
+               }
+       }
+
+       //Back to BB mode, load original value
+       //RTPRINT(FINIT, INIT_IQK, ("IQK:Back to BB mode, load original value!\n"));
+       PHY_SetBBReg(pAdapter, rFPGA0_IQK, bMaskDWord, 0);
+
+       if(t!=0)
+       {
+               if(!pdmpriv->bRfPiEnable){
+                       // Switch back BB to SI mode after finish IQ Calibration.
+                       _PHY_PIModeSwitch(pAdapter, _FALSE);
+               }
+
+               // Reload ADDA power saving parameters
+               _PHY_ReloadADDARegisters(pAdapter, ADDA_REG, pdmpriv->ADDA_backup, IQK_ADDA_REG_NUM);
+
+               // Reload MAC parameters
+               _PHY_ReloadMACRegisters(pAdapter, IQK_MAC_REG, pdmpriv->IQK_MAC_backup);
+
+               // Reload BB parameters
+               _PHY_ReloadADDARegisters(pAdapter, IQK_BB_REG_92C, pdmpriv->IQK_BB_backup, IQK_BB_REG_NUM);
+
+               // Restore RX initial gain
+               PHY_SetBBReg(pAdapter, rFPGA0_XA_LSSIParameter, bMaskDWord, 0x00032ed3);
+               if(is2T){
+                       PHY_SetBBReg(pAdapter, rFPGA0_XB_LSSIParameter, bMaskDWord, 0x00032ed3);
+               }
+
+               //load 0xe30 IQC default value
+               PHY_SetBBReg(pAdapter, rTx_IQK_Tone_A, bMaskDWord, 0x01008c00);
+               PHY_SetBBReg(pAdapter, rRx_IQK_Tone_A, bMaskDWord, 0x01008c00);
+
+       }
+       //RTPRINT(FINIT, INIT_IQK, ("_PHY_IQCalibrate() <==\n"));
+
+}
+
+
+static VOID
+_PHY_LCCalibrate(
+       IN      PADAPTER        pAdapter,
+       IN      BOOLEAN         is2T
+       )
+{
+       u8      tmpReg;
+       u32     RF_Amode = 0, RF_Bmode = 0, LC_Cal;
+
+       //Check continuous TX and Packet TX
+       tmpReg = rtw_read8(pAdapter, 0xd03);
+
+       if((tmpReg&0x70) != 0)                  //Deal with contisuous TX case
+               rtw_write8(pAdapter, 0xd03, tmpReg&0x8F);       //disable all continuous TX
+       else                                                    // Deal with Packet TX case
+               rtw_write8(pAdapter, REG_TXPAUSE, 0xFF);                        // block all queues
+
+       if((tmpReg&0x70) != 0)
+       {
+               //1. Read original RF mode
+               //Path-A
+               RF_Amode = PHY_QueryRFReg(pAdapter, RF_PATH_A, RF_AC, bMask12Bits);
+
+               //Path-B
+               if(is2T)
+                       RF_Bmode = PHY_QueryRFReg(pAdapter, RF_PATH_B, RF_AC, bMask12Bits);
+
+               //2. Set RF mode = standby mode
+               //Path-A
+               PHY_SetRFReg(pAdapter, RF_PATH_A, RF_AC, bMask12Bits, (RF_Amode&0x8FFFF)|0x10000);
+
+               //Path-B
+               if(is2T)
+                       PHY_SetRFReg(pAdapter, RF_PATH_B, RF_AC, bMask12Bits, (RF_Bmode&0x8FFFF)|0x10000);
+       }
+
+       //3. Read RF reg18
+       LC_Cal = PHY_QueryRFReg(pAdapter, RF_PATH_A, RF_CHNLBW, bMask12Bits);
+
+       //4. Set LC calibration begin
+       PHY_SetRFReg(pAdapter, RF_PATH_A, RF_CHNLBW, bMask12Bits, LC_Cal|0x08000);
+
+       #ifdef CONFIG_LONG_DELAY_ISSUE
+       rtw_msleep_os(100);
+       #else
+       rtw_mdelay_os(100);
+       #endif
+
+       //Restore original situation
+       if((tmpReg&0x70) != 0)  //Deal with contisuous TX case
+       {
+               //Path-A
+               rtw_write8(pAdapter, 0xd03, tmpReg);
+               PHY_SetRFReg(pAdapter, RF_PATH_A, RF_AC, bMask12Bits, RF_Amode);
+
+               //Path-B
+               if(is2T)
+                       PHY_SetRFReg(pAdapter, RF_PATH_B, RF_AC, bMask12Bits, RF_Bmode);
+       }
+       else // Deal with Packet TX case
+       {
+               rtw_write8(pAdapter, REG_TXPAUSE, 0x00);
+       }
+
+}
+
+
+//Analog Pre-distortion calibration
+#define                APK_BB_REG_NUM  8
+#define                APK_CURVE_REG_NUM 4
+#define                PATH_NUM                2
+
+static VOID
+_PHY_APCalibrate(
+       IN      PADAPTER        pAdapter,
+       IN      char            delta,
+       IN      BOOLEAN         is2T
+       )
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(pAdapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+
+       u32                     regD[PATH_NUM];
+       u32                     tmpReg, index, offset, i, apkbound;
+       u8                      path, pathbound = PATH_NUM;
+       u32                     BB_backup[APK_BB_REG_NUM];
+       u32                     BB_REG[APK_BB_REG_NUM] = {
+                                               rFPGA1_TxBlock,         rOFDM0_TRxPathEnable,
+                                               rFPGA0_RFMOD,   rOFDM0_TRMuxPar,
+                                               rFPGA0_XCD_RFInterfaceSW,       rFPGA0_XAB_RFInterfaceSW,
+                                               rFPGA0_XA_RFInterfaceOE,        rFPGA0_XB_RFInterfaceOE };
+       u32                     BB_AP_MODE[APK_BB_REG_NUM] = {
+                                               0x00000020, 0x00a05430, 0x02040000,
+                                               0x000800e4, 0x00204000 };
+       u32                     BB_normal_AP_MODE[APK_BB_REG_NUM] = {
+                                               0x00000020, 0x00a05430, 0x02040000,
+                                               0x000800e4, 0x22204000 };
+
+       u32                     AFE_backup[IQK_ADDA_REG_NUM];
+       u32                     AFE_REG[IQK_ADDA_REG_NUM] = {
+                                               rFPGA0_XCD_SwitchControl,       rBlue_Tooth,
+                                               rRx_Wait_CCA,           rTx_CCK_RFON,
+                                               rTx_CCK_BBON,   rTx_OFDM_RFON,
+                                               rTx_OFDM_BBON,  rTx_To_Rx,
+                                               rTx_To_Tx,              rRx_CCK,
+                                               rRx_OFDM,               rRx_Wait_RIFS,
+                                               rRx_TO_Rx,              rStandby,
+                                               rSleep,                         rPMPD_ANAEN };
+
+       u32                     MAC_backup[IQK_MAC_REG_NUM];
+       u32                     MAC_REG[IQK_MAC_REG_NUM] = {
+                                               REG_TXPAUSE,            REG_BCN_CTRL,
+                                               REG_BCN_CTRL_1, REG_GPIO_MUXCFG};
+
+       u32                     APK_RF_init_value[PATH_NUM][APK_BB_REG_NUM] = {
+                                       {0x0852c, 0x1852c, 0x5852c, 0x1852c, 0x5852c},
+                                       {0x2852e, 0x0852e, 0x3852e, 0x0852e, 0x0852e}
+                                       };
+
+       u32                     APK_normal_RF_init_value[PATH_NUM][APK_BB_REG_NUM] = {
+                                       {0x0852c, 0x0a52c, 0x3a52c, 0x5a52c, 0x5a52c},  //path settings equal to path b settings
+                                       {0x0852c, 0x0a52c, 0x5a52c, 0x5a52c, 0x5a52c}
+                                       };
+
+       u32                     APK_RF_value_0[PATH_NUM][APK_BB_REG_NUM] = {
+                                       {0x52019, 0x52014, 0x52013, 0x5200f, 0x5208d},
+                                       {0x5201a, 0x52019, 0x52016, 0x52033, 0x52050}
+                                       };
+
+       u32                     APK_normal_RF_value_0[PATH_NUM][APK_BB_REG_NUM] = {
+                                       {0x52019, 0x52017, 0x52010, 0x5200d, 0x5206a},  //path settings equal to path b settings
+                                       {0x52019, 0x52017, 0x52010, 0x5200d, 0x5206a}
+                                       };
+#if 0
+       u32                     APK_RF_value_A[PATH_NUM][APK_BB_REG_NUM] = {
+                                       {0x1adb0, 0x1adb0, 0x1ada0, 0x1ad90, 0x1ad80},
+                                       {0x00fb0, 0x00fb0, 0x00fa0, 0x00f90, 0x00f80}
+                                       };
+#endif
+       u32                     AFE_on_off[PATH_NUM] = {
+                                       0x04db25a4, 0x0b1b25a4};        //path A on path B off / path A off path B on
+
+       u32                     APK_offset[PATH_NUM] = {
+                                       rConfig_AntA, rConfig_AntB};
+
+       u32                     APK_normal_offset[PATH_NUM] = {
+                                       rConfig_Pmpd_AntA, rConfig_Pmpd_AntB};
+
+       u32                     APK_value[PATH_NUM] = {
+                                       0x92fc0000, 0x12fc0000};
+
+       u32                     APK_normal_value[PATH_NUM] = {
+                                       0x92680000, 0x12680000};
+
+       char                    APK_delta_mapping[APK_BB_REG_NUM][13] = {
+                                       {-4, -3, -2, -2, -1, -1, 0, 1, 2, 3, 4, 5, 6},
+                                       {-4, -3, -2, -2, -1, -1, 0, 1, 2, 3, 4, 5, 6},
+                                       {-6, -4, -2, -2, -1, -1, 0, 1, 2, 3, 4, 5, 6},
+                                       {-1, -1, -1, -1, -1, -1, 0, 1, 2, 3, 4, 5, 6},
+                                       {-11, -9, -7, -5, -3, -1, 0, 0, 0, 0, 0, 0, 0}
+                                       };
+
+       u32                     APK_normal_setting_value_1[13] = {
+                                       0x01017018, 0xf7ed8f84, 0x1b1a1816, 0x2522201e, 0x322e2b28,
+                                       0x433f3a36, 0x5b544e49, 0x7b726a62, 0xa69a8f84, 0xdfcfc0b3,
+                                       0x12680000, 0x00880000, 0x00880000
+                                       };
+
+       u32                     APK_normal_setting_value_2[16] = {
+                                       0x01c7021d, 0x01670183, 0x01000123, 0x00bf00e2, 0x008d00a3,
+                                       0x0068007b, 0x004d0059, 0x003a0042, 0x002b0031, 0x001f0025,
+                                       0x0017001b, 0x00110014, 0x000c000f, 0x0009000b, 0x00070008,
+                                       0x00050006
+                                       };
+
+       u32                     APK_result[PATH_NUM][APK_BB_REG_NUM];   //val_1_1a, val_1_2a, val_2a, val_3a, val_4a
+       //u32                   AP_curve[PATH_NUM][APK_CURVE_REG_NUM];
+
+       int                     BB_offset, delta_V, delta_offset;
+
+#if (MP_DRIVER == 1)
+       PMPT_CONTEXT    pMptCtx = &pAdapter->mppriv.MptCtx;
+
+       pMptCtx->APK_bound[0] = 45;
+       pMptCtx->APK_bound[1] = 52;
+#endif
+
+       //RTPRINT(FINIT, INIT_IQK, ("==>PHY_APCalibrate() delta %d\n", delta));
+
+       //RTPRINT(FINIT, INIT_IQK, ("AP Calibration for %s %s\n", (is2T ? "2T2R" : "1T1R"), (isNormal ? "Normal chip" : "Test chip")));
+
+       if(!is2T)
+               pathbound = 1;
+
+       //2 FOR NORMAL CHIP SETTINGS
+
+// Temporarily do not allow normal driver to do the following settings because these offset
+// and value will cause RF internal PA to be unpredictably disabled by HW, such that RF Tx signal
+// will disappear after disable/enable card many times on 88CU. RF SD and DD have not find the
+// root cause, so we remove these actions temporarily. Added by tynli and SD3 Allen. 2010.05.31.
+#if (MP_DRIVER != 1)
+       return;
+#endif
+
+       //settings adjust for normal chip
+       for(index = 0; index < PATH_NUM; index ++)
+       {
+               APK_offset[index] = APK_normal_offset[index];
+               APK_value[index] = APK_normal_value[index];
+               AFE_on_off[index] = 0x6fdb25a4;
+       }
+
+       for(index = 0; index < APK_BB_REG_NUM; index ++)
+       {
+               for(path = 0; path < pathbound; path++)
+               {
+                       APK_RF_init_value[path][index] = APK_normal_RF_init_value[path][index];
+                       APK_RF_value_0[path][index] = APK_normal_RF_value_0[path][index];
+               }
+               BB_AP_MODE[index] = BB_normal_AP_MODE[index];
+       }
+
+       apkbound = 6;
+
+       //save BB default value
+       for(index = 0; index < APK_BB_REG_NUM ; index++)
+       {
+               if(index == 0)          //skip
+                       continue;
+               BB_backup[index] = PHY_QueryBBReg(pAdapter, BB_REG[index], bMaskDWord);
+       }
+
+       //save MAC default value
+       _PHY_SaveMACRegisters(pAdapter, MAC_REG, MAC_backup);
+
+       //save AFE default value
+       _PHY_SaveADDARegisters(pAdapter, AFE_REG, AFE_backup, IQK_ADDA_REG_NUM);
+
+       for(path = 0; path < pathbound; path++)
+       {
+               if(path == RF_PATH_A)
+               {
+                       //path A APK
+                       //load APK setting
+                       //path-A
+                       offset = rPdp_AntA;
+                       for(index = 0; index < 11; index ++)
+                       {
+                               PHY_SetBBReg(pAdapter, offset, bMaskDWord, APK_normal_setting_value_1[index]);
+                               //RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0x%x value 0x%x\n", offset, PHY_QueryBBReg(pAdapter, offset, bMaskDWord)));
+
+                               offset += 0x04;
+                       }
+
+                       PHY_SetBBReg(pAdapter, rConfig_Pmpd_AntB, bMaskDWord, 0x12680000);
+
+                       offset = rConfig_AntA;
+                       for(; index < 13; index ++)
+                       {
+                               PHY_SetBBReg(pAdapter, offset, bMaskDWord, APK_normal_setting_value_1[index]);
+                               //RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0x%x value 0x%x\n", offset, PHY_QueryBBReg(pAdapter, offset, bMaskDWord)));
+
+                               offset += 0x04;
+                       }
+
+                       //page-B1
+                       PHY_SetBBReg(pAdapter, rFPGA0_IQK, bMaskDWord, 0x40000000);
+
+                       //path A
+                       offset = rPdp_AntA;
+                       for(index = 0; index < 16; index++)
+                       {
+                               PHY_SetBBReg(pAdapter, offset, bMaskDWord, APK_normal_setting_value_2[index]);
+                               //RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0x%x value 0x%x\n", offset, PHY_QueryBBReg(pAdapter, offset, bMaskDWord)));
+
+                               offset += 0x04;
+                       }
+                       PHY_SetBBReg(pAdapter, rFPGA0_IQK, bMaskDWord, 0x00000000);
+               }
+               else if(path == RF_PATH_B)
+               {
+                       //path B APK
+                       //load APK setting
+                       //path-B
+                       offset = rPdp_AntB;
+                       for(index = 0; index < 10; index ++)
+                       {
+                               PHY_SetBBReg(pAdapter, offset, bMaskDWord, APK_normal_setting_value_1[index]);
+                               //RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0x%x value 0x%x\n", offset, PHY_QueryBBReg(pAdapter, offset, bMaskDWord)));
+
+                               offset += 0x04;
+                       }
+                       PHY_SetBBReg(pAdapter, rConfig_Pmpd_AntA, bMaskDWord, 0x12680000);
+
+                       PHY_SetBBReg(pAdapter, rConfig_Pmpd_AntB, bMaskDWord, 0x12680000);
+
+                       offset = rConfig_AntA;
+                       index = 11;
+                       for(; index < 13; index ++) //offset 0xb68, 0xb6c
+                       {
+                               PHY_SetBBReg(pAdapter, offset, bMaskDWord, APK_normal_setting_value_1[index]);
+                               //RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0x%x value 0x%x\n", offset, PHY_QueryBBReg(pAdapter, offset, bMaskDWord)));
+
+                               offset += 0x04;
+                       }
+
+                       //page-B1
+                       PHY_SetBBReg(pAdapter, rFPGA0_IQK, bMaskDWord, 0x40000000);
+
+                       //path B
+                       offset = 0xb60;
+                       for(index = 0; index < 16; index++)
+                       {
+                               PHY_SetBBReg(pAdapter, offset, bMaskDWord, APK_normal_setting_value_2[index]);
+                               //RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0x%x value 0x%x\n", offset, PHY_QueryBBReg(pAdapter, offset, bMaskDWord)));
+
+                               offset += 0x04;
+                       }
+                       PHY_SetBBReg(pAdapter, rFPGA0_IQK, bMaskDWord, 0x00000000);
+               }
+
+               //save RF default value
+               regD[path] = PHY_QueryRFReg(pAdapter, (RF_RADIO_PATH_E)path, RF_TXBIAS_A, bRFRegOffsetMask);
+
+               //Path A AFE all on, path B AFE All off or vise versa
+               for(index = 0; index < IQK_ADDA_REG_NUM ; index++)
+                       PHY_SetBBReg(pAdapter, AFE_REG[index], bMaskDWord, AFE_on_off[path]);
+               //RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0xe70 %x\n", PHY_QueryBBReg(pAdapter, 0xe70, bMaskDWord)));
+
+               //BB to AP mode
+               if(path == 0)
+               {
+                       for(index = 0; index < APK_BB_REG_NUM ; index++)
+                       {
+                               if(index == 0)          //skip
+                                       continue;
+                               else if (index < 5)
+                                       PHY_SetBBReg(pAdapter, BB_REG[index], bMaskDWord, BB_AP_MODE[index]);
+                               else if (BB_REG[index] == 0x870)
+                                       PHY_SetBBReg(pAdapter, BB_REG[index], bMaskDWord, BB_backup[index]|BIT10|BIT26);
+                               else
+                                       PHY_SetBBReg(pAdapter, BB_REG[index], BIT10, 0x0);
+                       }
+                       PHY_SetBBReg(pAdapter, rTx_IQK_Tone_A, bMaskDWord, 0x01008c00);
+                       PHY_SetBBReg(pAdapter, rRx_IQK_Tone_A, bMaskDWord, 0x01008c00);
+               }
+               else            //path B
+               {
+                       PHY_SetBBReg(pAdapter, rTx_IQK_Tone_B, bMaskDWord, 0x01008c00);
+                       PHY_SetBBReg(pAdapter, rRx_IQK_Tone_B, bMaskDWord, 0x01008c00);
+               }
+
+               //RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0x800 %x\n", PHY_QueryBBReg(pAdapter, 0x800, bMaskDWord)));
+
+               //MAC settings
+               _PHY_MACSettingCalibration(pAdapter, MAC_REG, MAC_backup);
+
+               if(path == RF_PATH_A)   //Path B to standby mode
+               {
+                       PHY_SetRFReg(pAdapter, RF_PATH_B, RF_AC, bRFRegOffsetMask, 0x10000);
+               }
+               else                    //Path A to standby mode
+               {
+                       PHY_SetRFReg(pAdapter, RF_PATH_A, RF_AC, bRFRegOffsetMask, 0x10000);
+                       PHY_SetRFReg(pAdapter, RF_PATH_A, RF_MODE1, bRFRegOffsetMask, 0x1000f);
+                       PHY_SetRFReg(pAdapter, RF_PATH_A, RF_MODE2, bRFRegOffsetMask, 0x20103);
+               }
+
+               delta_offset = ((delta+14)/2);
+               if(delta_offset < 0)
+                       delta_offset = 0;
+               else if (delta_offset > 12)
+                       delta_offset = 12;
+
+               //AP calibration
+               for(index = 0; index < APK_BB_REG_NUM; index++)
+               {
+                       if(index != 1)          //only DO PA11+PAD01001, AP RF setting
+                               continue;
+
+                       tmpReg = APK_RF_init_value[path][index];
+#if 1
+                       if(!pdmpriv->bAPKThermalMeterIgnore)
+                       {
+                               BB_offset = (tmpReg & 0xF0000) >> 16;
+
+                               if(!(tmpReg & BIT15)) //sign bit 0
+                               {
+                                       BB_offset = -BB_offset;
+                               }
+
+                               delta_V = APK_delta_mapping[index][delta_offset];
+
+                               BB_offset += delta_V;
+
+                               //RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() APK num %d delta_V %d delta_offset %d\n", index, delta_V, delta_offset));
+
+                               if(BB_offset < 0)
+                               {
+                                       tmpReg = tmpReg & (~BIT15);
+                                       BB_offset = -BB_offset;
+                               }
+                               else
+                               {
+                                       tmpReg = tmpReg | BIT15;
+                               }
+                               tmpReg = (tmpReg & 0xFFF0FFFF) | (BB_offset << 16);
+                       }
+#endif
+
+#ifdef CONFIG_PCI_HCI
+                       if(IS_81xxC_VENDOR_UMC_B_CUT(pHalData->VersionID))
+                               PHY_SetRFReg(pAdapter, (RF_RADIO_PATH_E)path, RF_IPA_A, bRFRegOffsetMask, 0x894ae);
+                       else
+#endif
+                               PHY_SetRFReg(pAdapter, (RF_RADIO_PATH_E)path, RF_IPA_A, bRFRegOffsetMask, 0x8992e);
+                       //RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0xc %x\n", PHY_QueryRFReg(pAdapter, (RF_RADIO_PATH_E)path, 0xc, bMaskDWord)));
+                       PHY_SetRFReg(pAdapter, (RF_RADIO_PATH_E)path, RF_AC, bRFRegOffsetMask, APK_RF_value_0[path][index]);
+                       //RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0x0 %x\n", PHY_QueryRFReg(pAdapter, (RF_RADIO_PATH_E)path, 0x0, bMaskDWord)));
+                       PHY_SetRFReg(pAdapter, (RF_RADIO_PATH_E)path, RF_TXBIAS_A, bRFRegOffsetMask, tmpReg);
+                       //RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0xd %x\n", PHY_QueryRFReg(pAdapter, (RF_RADIO_PATH_E)path, 0xd, bMaskDWord)));
+
+                       // PA11+PAD01111, one shot
+                       i = 0;
+                       do
+                       {
+                               PHY_SetBBReg(pAdapter, rFPGA0_IQK, bMaskDWord, 0x80000000);
+                               {
+                                       PHY_SetBBReg(pAdapter, APK_offset[path], bMaskDWord, APK_value[0]);
+                                       //RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0x%x value 0x%x\n", APK_offset[path], PHY_QueryBBReg(pAdapter, APK_offset[path], bMaskDWord)));
+                                       rtw_mdelay_os(3);
+                                       PHY_SetBBReg(pAdapter, APK_offset[path], bMaskDWord, APK_value[1]);
+                                       //RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0x%x value 0x%x\n", APK_offset[path], PHY_QueryBBReg(pAdapter, APK_offset[path], bMaskDWord)));
+                                       #ifdef CONFIG_LONG_DELAY_ISSUE
+                                       rtw_msleep_os(20);
+                                       #else
+                                       rtw_mdelay_os(20);
+                                       #endif
+                               }
+                               PHY_SetBBReg(pAdapter, rFPGA0_IQK, bMaskDWord, 0x00000000);
+
+                               if(path == RF_PATH_A)
+                                       tmpReg = PHY_QueryBBReg(pAdapter, rAPK, 0x03E00000);
+                               else
+                                       tmpReg = PHY_QueryBBReg(pAdapter, rAPK, 0xF8000000);
+                               //RTPRINT(FINIT, INIT_IQK, ("PHY_APCalibrate() offset 0xbd8[25:21] %x\n", tmpReg));
+
+                               i++;
+                       }
+                       while(tmpReg > apkbound && i < 4);
+
+                       APK_result[path][index] = tmpReg;
+               }
+       }
+
+       //reload MAC default value
+       _PHY_ReloadMACRegisters(pAdapter, MAC_REG, MAC_backup);
+
+       //reload BB default value
+       for(index = 0; index < APK_BB_REG_NUM ; index++)
+       {
+               if(index == 0)          //skip
+                       continue;
+               PHY_SetBBReg(pAdapter, BB_REG[index], bMaskDWord, BB_backup[index]);
+       }
+
+       //reload AFE default value
+       _PHY_ReloadADDARegisters(pAdapter, AFE_REG, AFE_backup, IQK_ADDA_REG_NUM);
+
+       //reload RF path default value
+       for(path = 0; path < pathbound; path++)
+       {
+               PHY_SetRFReg(pAdapter, (RF_RADIO_PATH_E)path, RF_TXBIAS_A, bRFRegOffsetMask, regD[path]);
+               if(path == RF_PATH_B)
+               {
+                       PHY_SetRFReg(pAdapter, RF_PATH_A, RF_MODE1, bRFRegOffsetMask, 0x1000f);
+                       PHY_SetRFReg(pAdapter, RF_PATH_A, RF_MODE2, bRFRegOffsetMask, 0x20101);
+               }
+
+               //note no index == 0
+               if (APK_result[path][1] > 6)
+                       APK_result[path][1] = 6;
+               //RTPRINT(FINIT, INIT_IQK, ("apk path %d result %d 0x%x \t", path, 1, APK_result[path][1]));
+       }
+
+       //RTPRINT(FINIT, INIT_IQK, ("\n"));
+
+
+       for(path = 0; path < pathbound; path++)
+       {
+               PHY_SetRFReg(pAdapter, (RF_RADIO_PATH_E)path, RF_BS_PA_APSET_G1_G4, bRFRegOffsetMask,
+               ((APK_result[path][1] << 15) | (APK_result[path][1] << 10) | (APK_result[path][1] << 5) | APK_result[path][1]));
+               if(path == RF_PATH_A)
+                       PHY_SetRFReg(pAdapter, (RF_RADIO_PATH_E)path, RF_BS_PA_APSET_G5_G8, bRFRegOffsetMask,
+                       ((APK_result[path][1] << 15) | (APK_result[path][1] << 10) | (0x00 << 5) | 0x05));
+               else
+                       PHY_SetRFReg(pAdapter, (RF_RADIO_PATH_E)path, RF_BS_PA_APSET_G5_G8, bRFRegOffsetMask,
+                       ((APK_result[path][1] << 15) | (APK_result[path][1] << 10) | (0x02 << 5) | 0x05));
+               PHY_SetRFReg(pAdapter, (RF_RADIO_PATH_E)path, RF_BS_PA_APSET_G9_G11, bRFRegOffsetMask,
+               ((0x08 << 15) | (0x08 << 10) | (0x08 << 5) | 0x08));
+       }
+
+       pdmpriv->bAPKdone = _TRUE;
+
+       //RTPRINT(FINIT, INIT_IQK, ("<==PHY_APCalibrate()\n"));
+}
+
+static VOID _PHY_SetRFPathSwitch(
+       IN      PADAPTER        pAdapter,
+       IN      BOOLEAN         bMain,
+       IN      BOOLEAN         is2T
+       )
+{
+       u8      u1bTmp;
+
+       if(!pAdapter->hw_init_completed)
+       {
+               u1bTmp = rtw_read8(pAdapter, REG_LEDCFG2) | BIT7;
+               rtw_write8(pAdapter, REG_LEDCFG2, u1bTmp);
+               //PHY_SetBBReg(pAdapter, REG_LEDCFG0, BIT23, 0x01);
+               PHY_SetBBReg(pAdapter, rFPGA0_XAB_RFParameter, BIT13, 0x01);
+       }
+
+       if(is2T)
+       {
+               if(bMain)
+                       PHY_SetBBReg(pAdapter, rFPGA0_XB_RFInterfaceOE, BIT5|BIT6, 0x1);        //92C_Path_A
+               else
+                       PHY_SetBBReg(pAdapter, rFPGA0_XB_RFInterfaceOE, BIT5|BIT6, 0x2);        //BT
+       }
+       else
+       {
+
+               if(bMain)
+                       PHY_SetBBReg(pAdapter, rFPGA0_XA_RFInterfaceOE, 0x300, 0x2);    //Main
+               else
+                       PHY_SetBBReg(pAdapter, rFPGA0_XA_RFInterfaceOE, 0x300, 0x1);    //Aux
+       }
+
+}
+
+//return value TRUE => Main; FALSE => Aux
+
+static BOOLEAN _PHY_QueryRFPathSwitch(
+       IN      PADAPTER        pAdapter,
+       IN      BOOLEAN         is2T
+       )
+{
+//     if(is2T)
+//             return _TRUE;
+
+       if(!pAdapter->hw_init_completed)
+       {
+               PHY_SetBBReg(pAdapter, REG_LEDCFG0, BIT23, 0x01);
+               PHY_SetBBReg(pAdapter, rFPGA0_XAB_RFParameter, BIT13, 0x01);
+       }
+
+       if(is2T)
+       {
+               if(PHY_QueryBBReg(pAdapter, rFPGA0_XB_RFInterfaceOE, BIT5|BIT6) == 0x01)
+                       return _TRUE;
+               else
+                       return _FALSE;
+       }
+       else
+       {
+               if(PHY_QueryBBReg(pAdapter, rFPGA0_XA_RFInterfaceOE, 0x300) == 0x02)
+                       return _TRUE;
+               else
+                       return _FALSE;
+       }
+}
+
+VOID
+rtl8192c_PHY_IQCalibrate(
+       IN      PADAPTER        pAdapter,
+       IN      BOOLEAN         bReCovery
+       )
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(pAdapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+       s32                     result[4][8];   //last is final result
+       u8                      i, final_candidate;
+       BOOLEAN         bPathAOK, bPathBOK;
+       s32                     RegE94, RegE9C, RegEA4, RegEAC, RegEB4, RegEBC, RegEC4, RegECC, RegTmp = 0;
+       BOOLEAN         is12simular, is13simular, is23simular;
+       BOOLEAN         bStartContTx = _FALSE, bSingleTone = _FALSE, bCarrierSuppression = _FALSE;
+       u32                     IQK_BB_REG_92C[IQK_BB_REG_NUM] = {
+                                       rOFDM0_XARxIQImbalance,         rOFDM0_XBRxIQImbalance,
+                                       rOFDM0_ECCAThreshold,   rOFDM0_AGCRSSITable,
+                                       rOFDM0_XATxIQImbalance,         rOFDM0_XBTxIQImbalance,
+                                       rOFDM0_XCTxAFE,                         rOFDM0_XDTxAFE,
+                                       rOFDM0_RxIQExtAnta};
+
+
+#if MP_DRIVER == 1
+       bStartContTx = pAdapter->mppriv.MptCtx.bStartContTx;
+       bSingleTone = pAdapter->mppriv.MptCtx.bSingleTone;
+       bCarrierSuppression = pAdapter->mppriv.MptCtx.bCarrierSuppression;
+#endif
+
+       //ignore IQK when continuous Tx
+       if(bStartContTx || bSingleTone || bCarrierSuppression)
+               return;
+
+#if DISABLE_BB_RF
+       return;
+#endif
+
+       if(bReCovery)
+       {
+               _PHY_ReloadADDARegisters(pAdapter, IQK_BB_REG_92C, pdmpriv->IQK_BB_backup_recover, 9);
+               return;
+       }
+       DBG_8192C("IQK:Start!!!\n");
+
+       for(i = 0; i < 8; i++)
+       {
+               result[0][i] = 0;
+               result[1][i] = 0;
+               result[2][i] = 0;
+               result[3][i] = 0;
+       }
+       final_candidate = 0xff;
+       bPathAOK = _FALSE;
+       bPathBOK = _FALSE;
+       is12simular = _FALSE;
+       is23simular = _FALSE;
+       is13simular = _FALSE;
+
+       for (i=0; i<3; i++)
+       {
+               if(IS_92C_SERIAL( pHalData->VersionID)){
+                        _PHY_IQCalibrate(pAdapter, result, i, _TRUE);
+               }
+               else{
+                       // For 88C 1T1R
+                       _PHY_IQCalibrate(pAdapter, result, i, _FALSE);
+               }
+
+               if(i == 1)
+               {
+                       is12simular = _PHY_SimularityCompare(pAdapter, result, 0, 1);
+                       if(is12simular)
+                       {
+                               final_candidate = 0;
+                               break;
+                       }
+               }
+
+               if(i == 2)
+               {
+                       is13simular = _PHY_SimularityCompare(pAdapter, result, 0, 2);
+                       if(is13simular)
+                       {
+                               final_candidate = 0;
+                               break;
+                       }
+
+                       is23simular = _PHY_SimularityCompare(pAdapter, result, 1, 2);
+                       if(is23simular)
+                               final_candidate = 1;
+                       else
+                       {
+                               for(i = 0; i < 8; i++)
+                                       RegTmp += result[3][i];
+
+                               if(RegTmp != 0)
+                                       final_candidate = 3;
+                               else
+                                       final_candidate = 0xFF;
+                       }
+               }
+       }
+
+        for (i=0; i<4; i++)
+       {
+               RegE94 = result[i][0];
+               RegE9C = result[i][1];
+               RegEA4 = result[i][2];
+               RegEAC = result[i][3];
+               RegEB4 = result[i][4];
+               RegEBC = result[i][5];
+               RegEC4 = result[i][6];
+               RegECC = result[i][7];
+               //RTPRINT(FINIT, INIT_IQK, ("IQK: RegE94=%lx RegE9C=%lx RegEA4=%lx RegEAC=%lx RegEB4=%lx RegEBC=%lx RegEC4=%lx RegECC=%lx\n ", RegE94, RegE9C, RegEA4, RegEAC, RegEB4, RegEBC, RegEC4, RegECC));
+       }
+
+       if(final_candidate != 0xff)
+       {
+               pdmpriv->RegE94 = RegE94 = result[final_candidate][0];
+               pdmpriv->RegE9C = RegE9C = result[final_candidate][1];
+               RegEA4 = result[final_candidate][2];
+               RegEAC = result[final_candidate][3];
+               pdmpriv->RegEB4 = RegEB4 = result[final_candidate][4];
+               pdmpriv->RegEBC = RegEBC = result[final_candidate][5];
+               RegEC4 = result[final_candidate][6];
+               RegECC = result[final_candidate][7];
+               DBG_8192C("IQK: final_candidate is %x\n", final_candidate);
+               DBG_8192C("IQK: RegE94=%x RegE9C=%x RegEA4=%x RegEAC=%x RegEB4=%x RegEBC=%x RegEC4=%x RegECC=%x\n ", RegE94, RegE9C, RegEA4, RegEAC, RegEB4, RegEBC, RegEC4, RegECC);
+               bPathAOK = bPathBOK = _TRUE;
+       }
+       else
+       {
+               RegE94 = RegEB4 = pdmpriv->RegE94 = pdmpriv->RegEB4 = 0x100;    //X default value
+               RegE9C = RegEBC = pdmpriv->RegE9C = pdmpriv->RegEBC = 0x0;              //Y default value
+       }
+
+       if((RegE94 != 0)/*&&(RegEA4 != 0)*/)
+               _PHY_PathAFillIQKMatrix(pAdapter, bPathAOK, result, final_candidate, (RegEA4 == 0));
+
+       if(IS_92C_SERIAL( pHalData->VersionID)){
+               if((RegEB4 != 0)/*&&(RegEC4 != 0)*/)
+               _PHY_PathBFillIQKMatrix(pAdapter, bPathBOK, result, final_candidate, (RegEC4 == 0));
+       }
+
+       _PHY_SaveADDARegisters(pAdapter, IQK_BB_REG_92C, pdmpriv->IQK_BB_backup_recover, 9);
+
+}
+
+
+VOID
+rtl8192c_PHY_LCCalibrate(
+       IN      PADAPTER        pAdapter
+       )
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(pAdapter);
+       struct mlme_ext_priv    *pmlmeext = &pAdapter->mlmeextpriv;
+       BOOLEAN         bStartContTx = _FALSE, bSingleTone = _FALSE, bCarrierSuppression = _FALSE;
+
+#if MP_DRIVER == 1
+       bStartContTx = pAdapter->mppriv.MptCtx.bStartContTx;
+       bSingleTone = pAdapter->mppriv.MptCtx.bSingleTone;
+       bCarrierSuppression = pAdapter->mppriv.MptCtx.bCarrierSuppression;
+#endif
+
+#if DISABLE_BB_RF
+       return;
+#endif
+
+       //ignore IQK when continuous Tx
+       if(bStartContTx || bSingleTone || bCarrierSuppression)
+               return;
+
+       if(pmlmeext->sitesurvey_res.state == SCAN_PROCESS)
+               return;
+
+       if(IS_92C_SERIAL( pHalData->VersionID)){
+               _PHY_LCCalibrate(pAdapter, _TRUE);
+       }
+       else{
+               // For 88C 1T1R
+               _PHY_LCCalibrate(pAdapter, _FALSE);
+       }
+}
+
+VOID
+rtl8192c_PHY_APCalibrate(
+       IN      PADAPTER        pAdapter,
+       IN      char            delta
+       )
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(pAdapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+
+       //default disable APK, because Tx NG issue, suggest by Jenyu, 2011.11.25
+       return;
+
+#if DISABLE_BB_RF
+       return;
+#endif
+
+       if(pdmpriv->bAPKdone)
+               return;
+
+       if(IS_92C_SERIAL( pHalData->VersionID)){
+               _PHY_APCalibrate(pAdapter, delta, _TRUE);
+       }
+       else{
+               // For 88C 1T1R
+               _PHY_APCalibrate(pAdapter, delta, _FALSE);
+       }
+}
+
+VOID rtl8192c_PHY_SetRFPathSwitch(
+       IN      PADAPTER        pAdapter,
+       IN      BOOLEAN         bMain
+       )
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(pAdapter);
+
+#if DISABLE_BB_RF
+       return;
+#endif
+
+       if(IS_92C_SERIAL( pHalData->VersionID)){
+               _PHY_SetRFPathSwitch(pAdapter, bMain, _TRUE);
+       }
+       else{
+               // For 88C 1T1R
+               _PHY_SetRFPathSwitch(pAdapter, bMain, _FALSE);
+       }
+}
diff --git a/drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/rtl8192c_rf6052.c b/drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/rtl8192c_rf6052.c
new file mode 100644 (file)
index 0000000..a3cd013
--- /dev/null
@@ -0,0 +1,1030 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+/******************************************************************************
+ *
+ *
+ * Module:     rtl8192c_rf6052.c       ( Source C File)
+ *
+ * Note:       Provide RF 6052 series relative API.
+ *
+ * Function:
+ *
+ * Export:
+ *
+ * Abbrev:
+ *
+ * History:
+ * Data                        Who             Remark
+ *
+ * 09/25/2008  MHC             Create initial version.
+ * 11/05/2008  MHC             Add API for tw power setting.
+ *
+ *
+******************************************************************************/
+
+#define _RTL8192C_RF6052_C_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <rtw_byteorder.h>
+
+#include <rtl8192c_hal.h>
+
+/*---------------------------Define Local Constant---------------------------*/
+// Define local structure for debug!!!!!
+typedef struct RF_Shadow_Compare_Map {
+       // Shadow register value
+       u32             Value;
+       // Compare or not flag
+       u8              Compare;
+       // Record If it had ever modified unpredicted
+       u8              ErrorOrNot;
+       // Recorver Flag
+       u8              Recorver;
+       //
+       u8              Driver_Write;
+}RF_SHADOW_T;
+/*---------------------------Define Local Constant---------------------------*/
+
+
+/*------------------------Define global variable-----------------------------*/
+/*------------------------Define global variable-----------------------------*/
+
+
+/*------------------------Define local variable------------------------------*/
+// 2008/11/20 MH For Debug only, RF
+//static       RF_SHADOW_T     RF_Shadow[RF6052_MAX_PATH][RF6052_MAX_REG] = {0};
+static RF_SHADOW_T     RF_Shadow[RF6052_MAX_PATH][RF6052_MAX_REG];
+/*------------------------Define local variable------------------------------*/
+
+
+/*-----------------------------------------------------------------------------
+ * Function:   RF_ChangeTxPath
+ *
+ * Overview:   For RL6052, we must change some RF settign for 1T or 2T.
+ *
+ * Input:              u2Byte DataRate         // 0x80-8f, 0x90-9f
+ *
+ * Output:      NONE
+ *
+ * Return:      NONE
+ *
+ * Revised History:
+ * When                        Who             Remark
+ * 09/25/2008  MHC             Create Version 0.
+ *                                             Firmwaer support the utility later.
+ *
+ *---------------------------------------------------------------------------*/
+void rtl8192c_RF_ChangeTxPath( IN      PADAPTER        Adapter,
+                                                                               IN      u16             DataRate)
+{
+// We do not support gain table change inACUT now !!!! Delete later !!!
+#if 0//(RTL92SE_FPGA_VERIFY == 0)
+       static  u1Byte  RF_Path_Type = 2;       // 1 = 1T 2= 2T
+       static  u4Byte  tx_gain_tbl1[6]
+                       = {0x17f50, 0x11f40, 0x0cf30, 0x08720, 0x04310, 0x00100};
+       static  u4Byte  tx_gain_tbl2[6]
+                       = {0x15ea0, 0x10e90, 0x0c680, 0x08250, 0x04040, 0x00030};
+       u1Byte  i;
+
+       if (RF_Path_Type == 2 && (DataRate&0xF) <= 0x7)
+       {
+               // Set TX SYNC power G2G3 loop filter
+               PHY_SetRFReg(Adapter, (RF_RADIO_PATH_E)RF_PATH_A,
+                                       RF_TXPA_G2, bRFRegOffsetMask, 0x0f000);
+               PHY_SetRFReg(Adapter, (RF_RADIO_PATH_E)RF_PATH_A,
+                                       RF_TXPA_G3, bRFRegOffsetMask, 0xeacf1);
+
+               // Change TX AGC gain table
+               for (i = 0; i < 6; i++)
+                       PHY_SetRFReg(Adapter, (RF_RADIO_PATH_E)RF_PATH_A,
+                                               RF_TX_AGC, bRFRegOffsetMask, tx_gain_tbl1[i]);
+
+               // Set PA to high value
+               PHY_SetRFReg(Adapter, (RF_RADIO_PATH_E)RF_PATH_A,
+                                       RF_TXPA_G2, bRFRegOffsetMask, 0x01e39);
+       }
+       else if (RF_Path_Type == 1 && (DataRate&0xF) >= 0x8)
+       {
+               // Set TX SYNC power G2G3 loop filter
+               PHY_SetRFReg(Adapter, (RF_RADIO_PATH_E)RF_PATH_A,
+                                       RF_TXPA_G2, bRFRegOffsetMask, 0x04440);
+               PHY_SetRFReg(Adapter, (RF_RADIO_PATH_E)RF_PATH_A,
+                                       RF_TXPA_G3, bRFRegOffsetMask, 0xea4f1);
+
+               // Change TX AGC gain table
+               for (i = 0; i < 6; i++)
+                       PHY_SetRFReg(Adapter, (RF_RADIO_PATH_E)RF_PATH_A,
+                                               RF_TX_AGC, bRFRegOffsetMask, tx_gain_tbl2[i]);
+
+               // Set PA low gain
+               PHY_SetRFReg(Adapter, (RF_RADIO_PATH_E)RF_PATH_A,
+                                       RF_TXPA_G2, bRFRegOffsetMask, 0x01e19);
+       }
+#endif
+
+}      /* RF_ChangeTxPath */
+
+
+/*-----------------------------------------------------------------------------
+ * Function:    PHY_RF6052SetBandwidth()
+ *
+ * Overview:    This function is called by SetBWModeCallback8190Pci() only
+ *
+ * Input:       PADAPTER                               Adapter
+ *                     WIRELESS_BANDWIDTH_E    Bandwidth       //20M or 40M
+ *
+ * Output:      NONE
+ *
+ * Return:      NONE
+ *
+ * Note:               For RF type 0222D
+ *---------------------------------------------------------------------------*/
+VOID
+rtl8192c_PHY_RF6052SetBandwidth(
+       IN      PADAPTER                                Adapter,
+       IN      HT_CHANNEL_WIDTH                Bandwidth)      //20M or 40M
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+
+       switch(Bandwidth)
+       {
+               case HT_CHANNEL_WIDTH_20:
+                       pHalData->RfRegChnlVal[0] = ((pHalData->RfRegChnlVal[0] & 0xfffff3ff) | 0x0400);
+                       PHY_SetRFReg(Adapter, RF_PATH_A, RF_CHNLBW, bRFRegOffsetMask, pHalData->RfRegChnlVal[0]);
+                       break;
+
+               case HT_CHANNEL_WIDTH_40:
+                       pHalData->RfRegChnlVal[0] = ((pHalData->RfRegChnlVal[0] & 0xfffff3ff));
+                       PHY_SetRFReg(Adapter, RF_PATH_A, RF_CHNLBW, bRFRegOffsetMask, pHalData->RfRegChnlVal[0]);
+                       break;
+
+               default:
+                       //RT_TRACE(COMP_DBG, DBG_LOUD, ("PHY_SetRF8225Bandwidth(): unknown Bandwidth: %#X\n",Bandwidth ));
+                       break;
+       }
+
+}
+
+
+/*-----------------------------------------------------------------------------
+ * Function:   PHY_RF6052SetCckTxPower
+ *
+ * Overview:
+ *
+ * Input:       NONE
+ *
+ * Output:      NONE
+ *
+ * Return:      NONE
+ *
+ * Revised History:
+ * When                        Who             Remark
+ * 11/05/2008  MHC             Simulate 8192series..
+ *
+ *---------------------------------------------------------------------------*/
+
+VOID
+rtl8192c_PHY_RF6052SetCckTxPower(
+       IN      PADAPTER                Adapter,
+       IN      u8*                     pPowerlevel)
+{
+       HAL_DATA_TYPE           *pHalData = GET_HAL_DATA(Adapter);
+       struct mlme_priv        *pmlmepriv = &Adapter->mlmepriv;
+       struct dm_priv          *pdmpriv = &pHalData->dmpriv;
+       struct mlme_ext_priv            *pmlmeext = &Adapter->mlmeextpriv;
+       //PMGNT_INFO            pMgntInfo=&Adapter->MgntInfo;
+       u32                     TxAGC[2]={0, 0}, tmpval=0;
+       BOOLEAN         TurboScanOff = _FALSE;
+       u8                      idx1, idx2;
+       u8*                     ptr;
+
+       // 2010/10/18 MH Accorsing to SD3 eechou's suggestion, we need to disable turbo scan for RU.
+       // Otherwise, external PA will be broken if power index > 0x20.
+#ifdef CONFIG_USB_HCI
+       if (pHalData->EEPROMRegulatory != 0 || pHalData->ExternalPA)
+#else
+       if (pHalData->EEPROMRegulatory != 0)
+#endif
+       {
+               //DbgPrint("TurboScanOff=1 EEPROMRegulatory=%d ExternalPA=%d\n", pHalData->EEPROMRegulatory, pHalData->ExternalPA);
+               TurboScanOff = _TRUE;
+       }
+
+       if(pmlmeext->sitesurvey_res.state == SCAN_PROCESS)
+       {
+               TxAGC[RF_PATH_A] = 0x3f3f3f3f;
+               TxAGC[RF_PATH_B] = 0x3f3f3f3f;
+
+               TurboScanOff = _TRUE;//disable turbo scan
+
+               if(TurboScanOff)
+               {
+                       for(idx1=RF_PATH_A; idx1<=RF_PATH_B; idx1++)
+                       {
+                               TxAGC[idx1] =
+                                       pPowerlevel[idx1] | (pPowerlevel[idx1]<<8) |
+                                       (pPowerlevel[idx1]<<16) | (pPowerlevel[idx1]<<24);
+#ifdef CONFIG_USB_HCI
+                               // 2010/10/18 MH For external PA module. We need to limit power index to be less than 0x20.
+                               if (TxAGC[idx1] > 0x20 && pHalData->ExternalPA)
+                                       TxAGC[idx1] = 0x20;
+#endif
+                       }
+               }
+       }
+       else
+       {
+// 20100427 Joseph: Driver dynamic Tx power shall not affect Tx power. It shall be determined by power training mechanism.
+// Currently, we cannot fully disable driver dynamic tx power mechanism because it is referenced by BT coexist mechanism.
+// In the future, two mechanism shall be separated from each other and maintained independantly. Thanks for Lanhsin's reminder.
+               if(pdmpriv->DynamicTxHighPowerLvl == TxHighPwrLevel_Level1)
+               {
+                       TxAGC[RF_PATH_A] = 0x10101010;
+                       TxAGC[RF_PATH_B] = 0x10101010;
+               }
+               else if(pdmpriv->DynamicTxHighPowerLvl == TxHighPwrLevel_Level2)
+               {
+                       TxAGC[RF_PATH_A] = 0x00000000;
+                       TxAGC[RF_PATH_B] = 0x00000000;
+               }
+               else
+               {
+                       for(idx1=RF_PATH_A; idx1<=RF_PATH_B; idx1++)
+                       {
+                               TxAGC[idx1] =
+                                       pPowerlevel[idx1] | (pPowerlevel[idx1]<<8) |
+                                       (pPowerlevel[idx1]<<16) | (pPowerlevel[idx1]<<24);
+                       }
+
+                       if(pHalData->EEPROMRegulatory==0)
+                       {
+                               tmpval = (pHalData->MCSTxPowerLevelOriginalOffset[0][6]) +
+                                               (pHalData->MCSTxPowerLevelOriginalOffset[0][7]<<8);
+                               TxAGC[RF_PATH_A] += tmpval;
+
+                               tmpval = (pHalData->MCSTxPowerLevelOriginalOffset[0][14]) +
+                                               (pHalData->MCSTxPowerLevelOriginalOffset[0][15]<<24);
+                               TxAGC[RF_PATH_B] += tmpval;
+                       }
+               }
+       }
+
+       for(idx1=RF_PATH_A; idx1<=RF_PATH_B; idx1++)
+       {
+               ptr = (u8*)(&(TxAGC[idx1]));
+               for(idx2=0; idx2<4; idx2++)
+               {
+                       if(*ptr > RF6052_MAX_TX_PWR)
+                               *ptr = RF6052_MAX_TX_PWR;
+                       ptr++;
+               }
+       }
+
+       // rf-A cck tx power
+       tmpval = TxAGC[RF_PATH_A]&0xff;
+       PHY_SetBBReg(Adapter, rTxAGC_A_CCK1_Mcs32, bMaskByte1, tmpval);
+       //RTPRINT(FPHY, PHY_TXPWR, ("CCK PWR 1M (rf-A) = 0x%x (reg 0x%x)\n", tmpval, rTxAGC_A_CCK1_Mcs32));
+       tmpval = TxAGC[RF_PATH_A]>>8;
+       PHY_SetBBReg(Adapter, rTxAGC_B_CCK11_A_CCK2_11, 0xffffff00, tmpval);
+       //RTPRINT(FPHY, PHY_TXPWR, ("CCK PWR 2~11M (rf-A) = 0x%x (reg 0x%x)\n", tmpval, rTxAGC_B_CCK11_A_CCK2_11));
+
+       // rf-B cck tx power
+       tmpval = TxAGC[RF_PATH_B]>>24;
+       PHY_SetBBReg(Adapter, rTxAGC_B_CCK11_A_CCK2_11, bMaskByte0, tmpval);
+       //RTPRINT(FPHY, PHY_TXPWR, ("CCK PWR 11M (rf-B) = 0x%x (reg 0x%x)\n", tmpval, rTxAGC_B_CCK11_A_CCK2_11));
+       tmpval = TxAGC[RF_PATH_B]&0x00ffffff;
+       PHY_SetBBReg(Adapter, rTxAGC_B_CCK1_55_Mcs32, 0xffffff00, tmpval);
+       //RTPRINT(FPHY, PHY_TXPWR, ("CCK PWR 1~5.5M (rf-B) = 0x%x (reg 0x%x)\n",
+       //      tmpval, rTxAGC_B_CCK1_55_Mcs32));
+
+}      /* PHY_RF6052SetCckTxPower */
+
+//
+// powerbase0 for OFDM rates
+// powerbase1 for HT MCS rates
+//
+static void getPowerBase(
+       IN      PADAPTER        Adapter,
+       IN      u8*             pPowerLevel,
+       IN      u8              Channel,
+       IN OUT u32*     OfdmBase,
+       IN OUT u32*     MCSBase
+       )
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       u32                     powerBase0, powerBase1;
+       u8                      Legacy_pwrdiff=0;
+       s8                      HT20_pwrdiff=0;
+       u8                      i, powerlevel[2];
+
+       for(i=0; i<2; i++)
+       {
+               powerlevel[i] = pPowerLevel[i];
+               Legacy_pwrdiff = pHalData->TxPwrLegacyHtDiff[i][Channel-1];
+               powerBase0 = powerlevel[i] + Legacy_pwrdiff;
+
+               powerBase0 = (powerBase0<<24) | (powerBase0<<16) |(powerBase0<<8) |powerBase0;
+               *(OfdmBase+i) = powerBase0;
+               //RTPRINT(FPHY, PHY_TXPWR, (" [OFDM power base index rf(%c) = 0x%x]\n", ((i==0)?'A':'B'), *(OfdmBase+i)));
+       }
+
+       for(i=0; i<2; i++)
+       {
+               //Check HT20 to HT40 diff
+               if(pHalData->CurrentChannelBW == HT_CHANNEL_WIDTH_20)
+               {
+                       HT20_pwrdiff = pHalData->TxPwrHt20Diff[i][Channel-1];
+                       powerlevel[i] += HT20_pwrdiff;
+               }
+               powerBase1 = powerlevel[i];
+               powerBase1 = (powerBase1<<24) | (powerBase1<<16) |(powerBase1<<8) |powerBase1;
+               *(MCSBase+i) = powerBase1;
+               //RTPRINT(FPHY, PHY_TXPWR, (" [MCS power base index rf(%c) = 0x%x]\n", ((i==0)?'A':'B'), *(MCSBase+i)));
+       }
+}
+
+static void getTxPowerWriteValByRegulatory(
+       IN              PADAPTER        Adapter,
+       IN              u8              Channel,
+       IN              u8              index,
+       IN              u32*            powerBase0,
+       IN              u32*            powerBase1,
+       OUT             u32*            pOutWriteVal
+       )
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+       u8      i, chnlGroup, pwr_diff_limit[4];
+       u32     writeVal, customer_limit, rf;
+
+       //
+       // Index 0 & 1= legacy OFDM, 2-5=HT_MCS rate
+       //
+       for(rf=0; rf<2; rf++)
+       {
+               switch(pHalData->EEPROMRegulatory)
+               {
+                       case 0: // Realtek better performance
+                                       // increase power diff defined by Realtek for large power
+                               chnlGroup = 0;
+                               //RTPRINT(FPHY, PHY_TXPWR, ("MCSTxPowerLevelOriginalOffset[%d][%d] = 0x%x\n",
+                               //      chnlGroup, index, pHalData->MCSTxPowerLevelOriginalOffset[chnlGroup][index+(rf?8:0)]));
+                               writeVal = pHalData->MCSTxPowerLevelOriginalOffset[chnlGroup][index+(rf?8:0)] +
+                                       ((index<2)?powerBase0[rf]:powerBase1[rf]);
+                               //RTPRINT(FPHY, PHY_TXPWR, ("RTK better performance, writeVal(%c) = 0x%x\n", ((rf==0)?'A':'B'), writeVal));
+                               break;
+                       case 1: // Realtek regulatory
+                                       // increase power diff defined by Realtek for regulatory
+                               {
+                                       if(pHalData->pwrGroupCnt == 1)
+                                               chnlGroup = 0;
+                                       if(pHalData->pwrGroupCnt >= 3)
+                                       {
+                                               if(Channel <= 3)
+                                                       chnlGroup = 0;
+                                               else if(Channel >= 4 && Channel <= 9)
+                                                       chnlGroup = 1;
+                                               else if(Channel > 9)
+                                                       chnlGroup = 2;
+
+                                               if(pHalData->CurrentChannelBW == HT_CHANNEL_WIDTH_20)
+                                                       chnlGroup++;
+                                               else
+                                                       chnlGroup+=4;
+                                       }
+                                       //RTPRINT(FPHY, PHY_TXPWR, ("MCSTxPowerLevelOriginalOffset[%d][%d] = 0x%x\n",
+                                       //chnlGroup, index, pHalData->MCSTxPowerLevelOriginalOffset[chnlGroup][index+(rf?8:0)]));
+                                       writeVal = pHalData->MCSTxPowerLevelOriginalOffset[chnlGroup][index+(rf?8:0)] +
+                                                       ((index<2)?powerBase0[rf]:powerBase1[rf]);
+                                       //RTPRINT(FPHY, PHY_TXPWR, ("Realtek regulatory, 20MHz, writeVal(%c) = 0x%x\n", ((rf==0)?'A':'B'), writeVal));
+                               }
+                               break;
+                       case 2: // Better regulatory
+                                       // don't increase any power diff
+                               writeVal = ((index<2)?powerBase0[rf]:powerBase1[rf]);
+                               //RTPRINT(FPHY, PHY_TXPWR, ("Better regulatory, writeVal(%c) = 0x%x\n", ((rf==0)?'A':'B'), writeVal));
+                               break;
+                       case 3: // Customer defined power diff.
+                                       // increase power diff defined by customer.
+                               chnlGroup = 0;
+                               //RTPRINT(FPHY, PHY_TXPWR, ("MCSTxPowerLevelOriginalOffset[%d][%d] = 0x%x\n",
+                               //      chnlGroup, index, pHalData->MCSTxPowerLevelOriginalOffset[chnlGroup][index+(rf?8:0)]));
+
+                               if (pHalData->CurrentChannelBW == HT_CHANNEL_WIDTH_40)
+                               {
+                                       //RTPRINT(FPHY, PHY_TXPWR, ("customer's limit, 40MHz rf(%c) = 0x%x\n",
+                                       //      ((rf==0)?'A':'B'), pHalData->PwrGroupHT40[rf][Channel-1]));
+                               }
+                               else
+                               {
+                                       //RTPRINT(FPHY, PHY_TXPWR, ("customer's limit, 20MHz rf(%c) = 0x%x\n",
+                                       //      ((rf==0)?'A':'B'), pHalData->PwrGroupHT20[rf][Channel-1]));
+                               }
+                               for (i=0; i<4; i++)
+                               {
+                                       pwr_diff_limit[i] = (u8)((pHalData->MCSTxPowerLevelOriginalOffset[chnlGroup][index+(rf?8:0)]&(0x7f<<(i*8)))>>(i*8));
+                                       if (pHalData->CurrentChannelBW == HT_CHANNEL_WIDTH_40)
+                                       {
+                                               if(pwr_diff_limit[i] > pHalData->PwrGroupHT40[rf][Channel-1])
+                                                       pwr_diff_limit[i] = pHalData->PwrGroupHT40[rf][Channel-1];
+                                       }
+                                       else
+                                       {
+                                               if(pwr_diff_limit[i] > pHalData->PwrGroupHT20[rf][Channel-1])
+                                                       pwr_diff_limit[i] = pHalData->PwrGroupHT20[rf][Channel-1];
+                                       }
+                               }
+                               customer_limit = (pwr_diff_limit[3]<<24) | (pwr_diff_limit[2]<<16) |
+                                                               (pwr_diff_limit[1]<<8) | (pwr_diff_limit[0]);
+                               //RTPRINT(FPHY, PHY_TXPWR, ("Customer's limit rf(%c) = 0x%x\n", ((rf==0)?'A':'B'), customer_limit));
+
+                               writeVal = customer_limit + ((index<2)?powerBase0[rf]:powerBase1[rf]);
+                               //RTPRINT(FPHY, PHY_TXPWR, ("Customer, writeVal rf(%c)= 0x%x\n", ((rf==0)?'A':'B'), writeVal));
+                               break;
+                       default:
+                               chnlGroup = 0;
+                               writeVal = pHalData->MCSTxPowerLevelOriginalOffset[chnlGroup][index+(rf?8:0)] +
+                                               ((index<2)?powerBase0[rf]:powerBase1[rf]);
+                               //RTPRINT(FPHY, PHY_TXPWR, ("RTK better performance, writeVal rf(%c) = 0x%x\n", ((rf==0)?'A':'B'), writeVal));
+                               break;
+               }
+
+// 20100427 Joseph: Driver dynamic Tx power shall not affect Tx power. It shall be determined by power training mechanism.
+// Currently, we cannot fully disable driver dynamic tx power mechanism because it is referenced by BT coexist mechanism.
+// In the future, two mechanism shall be separated from each other and maintained independantly. Thanks for Lanhsin's reminder.
+
+               if(pdmpriv->DynamicTxHighPowerLvl == TxHighPwrLevel_Level1)
+                       writeVal = 0x14141414;
+               else if(pdmpriv->DynamicTxHighPowerLvl == TxHighPwrLevel_Level2)
+                       writeVal = 0x00000000;
+
+
+               // 20100628 Joseph: High power mode for BT-Coexist mechanism.
+               // This mechanism is only applied when Driver-Highpower-Mechanism is OFF.
+               if(pdmpriv->DynamicTxHighPowerLvl == TxHighPwrLevel_BT1)
+               {
+                       //RTPRINT(FBT, BT_TRACE, ("Tx Power (-6)\n"));
+                       writeVal = writeVal - 0x06060606;
+               }
+               else if(pdmpriv->DynamicTxHighPowerLvl == TxHighPwrLevel_BT2)
+               {
+                       //RTPRINT(FBT, BT_TRACE, ("Tx Power (-0)\n"));
+                       writeVal = writeVal;
+               }
+               *(pOutWriteVal+rf) = writeVal;
+       }
+}
+
+static void writeOFDMPowerReg(
+       IN              PADAPTER        Adapter,
+       IN              u8              index,
+       IN              u32*            pValue
+       )
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       u16 RegOffset_A[6] = {  rTxAGC_A_Rate18_06, rTxAGC_A_Rate54_24,
+                                                       rTxAGC_A_Mcs03_Mcs00, rTxAGC_A_Mcs07_Mcs04,
+                                                       rTxAGC_A_Mcs11_Mcs08, rTxAGC_A_Mcs15_Mcs12};
+       u16 RegOffset_B[6] = {  rTxAGC_B_Rate18_06, rTxAGC_B_Rate54_24,
+                                                       rTxAGC_B_Mcs03_Mcs00, rTxAGC_B_Mcs07_Mcs04,
+                                                       rTxAGC_B_Mcs11_Mcs08, rTxAGC_B_Mcs15_Mcs12};
+       u8 i, rf, pwr_val[4];
+       u32 writeVal;
+       u16 RegOffset;
+
+       for(rf=0; rf<2; rf++)
+       {
+               writeVal = pValue[rf];
+               for(i=0; i<4; i++)
+               {
+                       pwr_val[i] = (u8)((writeVal & (0x7f<<(i*8)))>>(i*8));
+                       if (pwr_val[i]  > RF6052_MAX_TX_PWR)
+                               pwr_val[i]  = RF6052_MAX_TX_PWR;
+               }
+               writeVal = (pwr_val[3]<<24) | (pwr_val[2]<<16) |(pwr_val[1]<<8) |pwr_val[0];
+
+               if(rf == 0)
+                       RegOffset = RegOffset_A[index];
+               else
+                       RegOffset = RegOffset_B[index];
+
+               PHY_SetBBReg(Adapter, RegOffset, bMaskDWord, writeVal);
+               //RTPRINT(FPHY, PHY_TXPWR, ("Set 0x%x = %08x\n", RegOffset, writeVal));
+
+               // 201005115 Joseph: Set Tx Power diff for Tx power training mechanism.
+               if(((pHalData->rf_type == RF_2T2R) &&
+                               (RegOffset == rTxAGC_A_Mcs15_Mcs12 || RegOffset == rTxAGC_B_Mcs15_Mcs12))||
+                    ((pHalData->rf_type != RF_2T2R) &&
+                               (RegOffset == rTxAGC_A_Mcs07_Mcs04 || RegOffset == rTxAGC_B_Mcs07_Mcs04))       )
+               {
+                       writeVal = pwr_val[3];
+                       if(RegOffset == rTxAGC_A_Mcs15_Mcs12 || RegOffset == rTxAGC_A_Mcs07_Mcs04)
+                               RegOffset = 0xc90;
+                       if(RegOffset == rTxAGC_B_Mcs15_Mcs12 || RegOffset == rTxAGC_B_Mcs07_Mcs04)
+                               RegOffset = 0xc98;
+                       for(i=0; i<3; i++)
+                       {
+                               if(i!=2)
+                                       writeVal = (writeVal>8)?(writeVal-8):0;
+                               else
+                                       writeVal = (writeVal>6)?(writeVal-6):0;
+                               rtw_write8(Adapter, (u32)(RegOffset+i), (u8)writeVal);
+                       }
+               }
+       }
+}
+/*-----------------------------------------------------------------------------
+ * Function:   PHY_RF6052SetOFDMTxPower
+ *
+ * Overview:   For legacy and HY OFDM, we must read EEPROM TX power index for
+ *                     different channel and read original value in TX power register area from
+ *                     0xe00. We increase offset and original value to be correct tx pwr.
+ *
+ * Input:       NONE
+ *
+ * Output:      NONE
+ *
+ * Return:      NONE
+ *
+ * Revised History:
+ * When                        Who             Remark
+ * 11/05/2008  MHC             Simulate 8192 series method.
+ * 01/06/2009  MHC             1. Prevent Path B tx power overflow or underflow dure to
+ *                                             A/B pwr difference or legacy/HT pwr diff.
+ *                                             2. We concern with path B legacy/HT OFDM difference.
+ * 01/22/2009  MHC             Support new EPRO format from SD3.
+ *
+ *---------------------------------------------------------------------------*/
+VOID
+rtl8192c_PHY_RF6052SetOFDMTxPower(
+       IN      PADAPTER        Adapter,
+       IN      u8*             pPowerLevel,
+       IN      u8              Channel)
+{
+       //HAL_DATA_TYPE *pHalData = GET_HAL_DATA(Adapter);
+       u32 writeVal[2], powerBase0[2], powerBase1[2];
+       u8 index = 0;
+
+       getPowerBase(Adapter, pPowerLevel, Channel, &powerBase0[0], &powerBase1[0]);
+
+       for(index=0; index<6; index++)
+       {
+               getTxPowerWriteValByRegulatory(Adapter, Channel, index,
+                       &powerBase0[0], &powerBase1[0], &writeVal[0]);
+
+               writeOFDMPowerReg(Adapter, index, &writeVal[0]);
+       }
+
+}
+
+
+static VOID
+phy_RF6052_Config_HardCode(
+       IN      PADAPTER                Adapter
+       )
+{
+
+       // Set Default Bandwidth to 20M
+       //Adapter->HalFunc      .SetBWModeHandler(Adapter, HT_CHANNEL_WIDTH_20);
+
+       // TODO: Set Default Channel to channel one for RTL8225
+
+}
+
+static int
+phy_RF6052_Config_ParaFile(
+       IN      PADAPTER                Adapter
+       )
+{
+       u32                                     u4RegValue;
+       u8                                      eRFPath;
+       BB_REGISTER_DEFINITION_T        *pPhyReg;
+
+       int                                     rtStatus = _SUCCESS;
+       HAL_DATA_TYPE           *pHalData = GET_HAL_DATA(Adapter);
+       static char                     sz88CRadioAFile[] = RTL8188C_PHY_RADIO_A;
+       static char                     sz88CRadioBFile[] = RTL8188C_PHY_RADIO_B;
+#ifdef CONFIG_USB_HCI
+       static char                     sz88CRadioAFile_mCard[] = RTL8188C_PHY_RADIO_A_mCard;
+       static char                     sz88CRadioBFile_mCard[] = RTL8188C_PHY_RADIO_B_mCard;
+       static char                     sz88CRadioAFile_HP[] = RTL8188C_PHY_RADIO_A_HP;
+#endif
+       static char                     sz92CRadioAFile[] = RTL8192C_PHY_RADIO_A;
+       static char                     sz92CRadioBFile[] = RTL8192C_PHY_RADIO_B;
+       static char                     sz8723RadioAFile[] = RTL8723_PHY_RADIO_A;
+       static char                     sz8723RadioBFile[] = RTL8723_PHY_RADIO_B;
+       char                                    *pszRadioAFile, *pszRadioBFile;
+
+
+       if(IS_HARDWARE_TYPE_8192C(Adapter))
+       {
+               if(IS_92C_SERIAL( pHalData->VersionID))// 88c's IPA  is different from 92c's
+               {
+                       pszRadioAFile = sz92CRadioAFile;
+                       pszRadioBFile = sz92CRadioBFile;
+               }
+               else
+               {
+                       pszRadioAFile = sz88CRadioAFile;
+                       pszRadioBFile = sz88CRadioBFile;
+#ifdef CONFIG_USB_HCI
+                       if( BOARD_MINICARD == pHalData->BoardType)
+                       {
+                               pszRadioAFile = sz88CRadioAFile_mCard;
+                               pszRadioBFile = sz88CRadioBFile_mCard;
+                       }
+                       else if( BOARD_USB_High_PA == pHalData->BoardType)
+                       {
+                               pszRadioAFile = sz88CRadioAFile_HP;
+                       }
+#endif
+               }
+       }
+       else if(IS_HARDWARE_TYPE_8723A(Adapter))
+       {
+               pszRadioAFile = sz8723RadioAFile;
+               pszRadioBFile = sz8723RadioBFile;
+       }
+
+       //3//-----------------------------------------------------------------
+       //3// <2> Initialize RF
+       //3//-----------------------------------------------------------------
+       //for(eRFPath = RF_PATH_A; eRFPath <pHalData->NumTotalRFPath; eRFPath++)
+       for(eRFPath = 0; eRFPath <pHalData->NumTotalRFPath; eRFPath++)
+       {
+
+               pPhyReg = &pHalData->PHYRegDef[eRFPath];
+
+               /*----Store original RFENV control type----*/
+               switch(eRFPath)
+               {
+               case RF_PATH_A:
+               case RF_PATH_C:
+                       u4RegValue = PHY_QueryBBReg(Adapter, pPhyReg->rfintfs, bRFSI_RFENV);
+                       break;
+               case RF_PATH_B :
+               case RF_PATH_D:
+                       u4RegValue = PHY_QueryBBReg(Adapter, pPhyReg->rfintfs, bRFSI_RFENV<<16);
+                       break;
+               }
+
+               /*----Set RF_ENV enable----*/
+               PHY_SetBBReg(Adapter, pPhyReg->rfintfe, bRFSI_RFENV<<16, 0x1);
+               rtw_udelay_os(1);//PlatformStallExecution(1);
+
+               /*----Set RF_ENV output high----*/
+               PHY_SetBBReg(Adapter, pPhyReg->rfintfo, bRFSI_RFENV, 0x1);
+               rtw_udelay_os(1);//PlatformStallExecution(1);
+
+               /* Set bit number of Address and Data for RF register */
+               PHY_SetBBReg(Adapter, pPhyReg->rfHSSIPara2, b3WireAddressLength, 0x0);  // Set 1 to 4 bits for 8255
+               rtw_udelay_os(1);//PlatformStallExecution(1);
+
+               PHY_SetBBReg(Adapter, pPhyReg->rfHSSIPara2, b3WireDataLength, 0x0);     // Set 0 to 12  bits for 8255
+               rtw_udelay_os(1);//PlatformStallExecution(1);
+
+               /*----Initialize RF fom connfiguration file----*/
+               switch(eRFPath)
+               {
+               case RF_PATH_A:
+#ifdef CONFIG_EMBEDDED_FWIMG
+                       rtStatus= rtl8192c_PHY_ConfigRFWithHeaderFile(Adapter,(RF_RADIO_PATH_E)eRFPath);
+#else
+                       rtStatus = rtl8192c_PHY_ConfigRFWithParaFile(Adapter, pszRadioAFile, (RF_RADIO_PATH_E)eRFPath);
+#endif
+                       break;
+               case RF_PATH_B:
+#ifdef CONFIG_EMBEDDED_FWIMG
+                       rtStatus = rtl8192c_PHY_ConfigRFWithHeaderFile(Adapter,(RF_RADIO_PATH_E)eRFPath);
+#else
+                       rtStatus = rtl8192c_PHY_ConfigRFWithParaFile(Adapter, pszRadioBFile, (RF_RADIO_PATH_E)eRFPath);
+#endif
+                       break;
+               case RF_PATH_C:
+                       break;
+               case RF_PATH_D:
+                       break;
+               }
+
+               /*----Restore RFENV control type----*/;
+               switch(eRFPath)
+               {
+               case RF_PATH_A:
+               case RF_PATH_C:
+                       PHY_SetBBReg(Adapter, pPhyReg->rfintfs, bRFSI_RFENV, u4RegValue);
+                       break;
+               case RF_PATH_B :
+               case RF_PATH_D:
+                       PHY_SetBBReg(Adapter, pPhyReg->rfintfs, bRFSI_RFENV<<16, u4RegValue);
+                       break;
+               }
+
+               if(rtStatus != _SUCCESS){
+                       //RT_TRACE(COMP_FPGA, DBG_LOUD, ("phy_RF6052_Config_ParaFile():Radio[%d] Fail!!", eRFPath));
+                       goto phy_RF6052_Config_ParaFile_Fail;
+               }
+
+       }
+
+       //RT_TRACE(COMP_INIT, DBG_LOUD, ("<---phy_RF6052_Config_ParaFile()\n"));
+       return rtStatus;
+
+phy_RF6052_Config_ParaFile_Fail:
+       return rtStatus;
+}
+
+
+int
+PHY_RF6052_Config8192C(
+       IN      PADAPTER                Adapter)
+{
+       HAL_DATA_TYPE                           *pHalData = GET_HAL_DATA(Adapter);
+       int                                     rtStatus = _SUCCESS;
+
+       //
+       // Initialize general global value
+       //
+       // TODO: Extend RF_PATH_C and RF_PATH_D in the future
+       if(pHalData->rf_type == RF_1T1R)
+               pHalData->NumTotalRFPath = 1;
+       else
+               pHalData->NumTotalRFPath = 2;
+
+       //
+       // Config BB and RF
+       //
+       rtStatus = phy_RF6052_Config_ParaFile(Adapter);
+#if 0
+       switch( Adapter->MgntInfo.bRegHwParaFile )
+       {
+               case 0:
+                       phy_RF6052_Config_HardCode(Adapter);
+                       break;
+
+               case 1:
+                       rtStatus = phy_RF6052_Config_ParaFile(Adapter);
+                       break;
+
+               case 2:
+                       // Partial Modify.
+                       phy_RF6052_Config_HardCode(Adapter);
+                       phy_RF6052_Config_ParaFile(Adapter);
+                       break;
+
+               default:
+                       phy_RF6052_Config_HardCode(Adapter);
+                       break;
+       }
+#endif
+       return rtStatus;
+
+}
+
+
+//
+// ==> RF shadow Operation API Code Section!!!
+//
+/*-----------------------------------------------------------------------------
+ * Function:   PHY_RFShadowRead
+ *                             PHY_RFShadowWrite
+ *                             PHY_RFShadowCompare
+ *                             PHY_RFShadowRecorver
+ *                             PHY_RFShadowCompareAll
+ *                             PHY_RFShadowRecorverAll
+ *                             PHY_RFShadowCompareFlagSet
+ *                             PHY_RFShadowRecorverFlagSet
+ *
+ * Overview:   When we set RF register, we must write shadow at first.
+ *                     When we are running, we must compare shadow abd locate error addr.
+ *                     Decide to recorver or not.
+ *
+ * Input:       NONE
+ *
+ * Output:      NONE
+ *
+ * Return:      NONE
+ *
+ * Revised History:
+ * When                        Who             Remark
+ * 11/20/2008  MHC             Create Version 0.
+ *
+ *---------------------------------------------------------------------------*/
+u32
+PHY_RFShadowRead(
+       IN      PADAPTER                        Adapter,
+       IN      RF_RADIO_PATH_E eRFPath,
+       IN      u32                             Offset)
+{
+       return  RF_Shadow[eRFPath][Offset].Value;
+
+}      /* PHY_RFShadowRead */
+
+
+VOID
+PHY_RFShadowWrite(
+       IN      PADAPTER                        Adapter,
+       IN      RF_RADIO_PATH_E eRFPath,
+       IN      u32                             Offset,
+       IN      u32                             Data)
+{
+       RF_Shadow[eRFPath][Offset].Value = (Data & bRFRegOffsetMask);
+       RF_Shadow[eRFPath][Offset].Driver_Write = _TRUE;
+
+}      /* PHY_RFShadowWrite */
+
+
+BOOLEAN
+PHY_RFShadowCompare(
+       IN      PADAPTER                        Adapter,
+       IN      RF_RADIO_PATH_E eRFPath,
+       IN      u32                             Offset)
+{
+       u32     reg;
+       // Check if we need to check the register
+       if (RF_Shadow[eRFPath][Offset].Compare == _TRUE)
+       {
+               reg = PHY_QueryRFReg(Adapter, eRFPath, Offset, bRFRegOffsetMask);
+               // Compare shadow and real rf register for 20bits!!
+               if (RF_Shadow[eRFPath][Offset].Value != reg)
+               {
+                       // Locate error position.
+                       RF_Shadow[eRFPath][Offset].ErrorOrNot = _TRUE;
+                       //RT_TRACE(COMP_INIT, DBG_LOUD,
+                       //("PHY_RFShadowCompare RF-%d Addr%02lx Err = %05lx\n",
+                       //eRFPath, Offset, reg));
+               }
+               return RF_Shadow[eRFPath][Offset].ErrorOrNot ;
+       }
+       return _FALSE;
+}      /* PHY_RFShadowCompare */
+
+
+VOID
+PHY_RFShadowRecorver(
+       IN      PADAPTER                        Adapter,
+       IN      RF_RADIO_PATH_E eRFPath,
+       IN      u32                             Offset)
+{
+       // Check if the address is error
+       if (RF_Shadow[eRFPath][Offset].ErrorOrNot == _TRUE)
+       {
+               // Check if we need to recorver the register.
+               if (RF_Shadow[eRFPath][Offset].Recorver == _TRUE)
+               {
+                       PHY_SetRFReg(Adapter, eRFPath, Offset, bRFRegOffsetMask,
+                                                       RF_Shadow[eRFPath][Offset].Value);
+                       //RT_TRACE(COMP_INIT, DBG_LOUD,
+                       //("PHY_RFShadowRecorver RF-%d Addr%02lx=%05lx",
+                       //eRFPath, Offset, RF_Shadow[eRFPath][Offset].Value));
+               }
+       }
+
+}      /* PHY_RFShadowRecorver */
+
+
+VOID
+PHY_RFShadowCompareAll(
+       IN      PADAPTER                        Adapter)
+{
+       u32             eRFPath;
+       u32             Offset;
+
+       for (eRFPath = 0; eRFPath < RF6052_MAX_PATH; eRFPath++)
+       {
+               for (Offset = 0; Offset <= RF6052_MAX_REG; Offset++)
+               {
+                       PHY_RFShadowCompare(Adapter, (RF_RADIO_PATH_E)eRFPath, Offset);
+               }
+       }
+
+}      /* PHY_RFShadowCompareAll */
+
+
+VOID
+PHY_RFShadowRecorverAll(
+       IN      PADAPTER                        Adapter)
+{
+       u32             eRFPath;
+       u32             Offset;
+
+       for (eRFPath = 0; eRFPath < RF6052_MAX_PATH; eRFPath++)
+       {
+               for (Offset = 0; Offset <= RF6052_MAX_REG; Offset++)
+               {
+                       PHY_RFShadowRecorver(Adapter, (RF_RADIO_PATH_E)eRFPath, Offset);
+               }
+       }
+
+}      /* PHY_RFShadowRecorverAll */
+
+
+VOID
+PHY_RFShadowCompareFlagSet(
+       IN      PADAPTER                        Adapter,
+       IN      RF_RADIO_PATH_E eRFPath,
+       IN      u32                             Offset,
+       IN      u8                              Type)
+{
+       // Set True or False!!!
+       RF_Shadow[eRFPath][Offset].Compare = Type;
+
+}      /* PHY_RFShadowCompareFlagSet */
+
+
+VOID
+PHY_RFShadowRecorverFlagSet(
+       IN      PADAPTER                        Adapter,
+       IN      RF_RADIO_PATH_E eRFPath,
+       IN      u32                             Offset,
+       IN      u8                              Type)
+{
+       // Set True or False!!!
+       RF_Shadow[eRFPath][Offset].Recorver= Type;
+
+}      /* PHY_RFShadowRecorverFlagSet */
+
+
+VOID
+PHY_RFShadowCompareFlagSetAll(
+       IN      PADAPTER                        Adapter)
+{
+       u32             eRFPath;
+       u32             Offset;
+
+       for (eRFPath = 0; eRFPath < RF6052_MAX_PATH; eRFPath++)
+       {
+               for (Offset = 0; Offset <= RF6052_MAX_REG; Offset++)
+               {
+                       // 2008/11/20 MH For S3S4 test, we only check reg 26/27 now!!!!
+                       if (Offset != 0x26 && Offset != 0x27)
+                               PHY_RFShadowCompareFlagSet(Adapter, (RF_RADIO_PATH_E)eRFPath, Offset, _FALSE);
+                       else
+                               PHY_RFShadowCompareFlagSet(Adapter, (RF_RADIO_PATH_E)eRFPath, Offset, _TRUE);
+               }
+       }
+
+}      /* PHY_RFShadowCompareFlagSetAll */
+
+
+VOID
+PHY_RFShadowRecorverFlagSetAll(
+       IN      PADAPTER                        Adapter)
+{
+       u32             eRFPath;
+       u32             Offset;
+
+       for (eRFPath = 0; eRFPath < RF6052_MAX_PATH; eRFPath++)
+       {
+               for (Offset = 0; Offset <= RF6052_MAX_REG; Offset++)
+               {
+                       // 2008/11/20 MH For S3S4 test, we only check reg 26/27 now!!!!
+                       if (Offset != 0x26 && Offset != 0x27)
+                               PHY_RFShadowRecorverFlagSet(Adapter, (RF_RADIO_PATH_E)eRFPath, Offset, _FALSE);
+                       else
+                               PHY_RFShadowRecorverFlagSet(Adapter, (RF_RADIO_PATH_E)eRFPath, Offset, _TRUE);
+               }
+       }
+
+}      /* PHY_RFShadowCompareFlagSetAll */
+
+VOID
+PHY_RFShadowRefresh(
+       IN      PADAPTER                        Adapter)
+{
+       u32             eRFPath;
+       u32             Offset;
+
+       for (eRFPath = 0; eRFPath < RF6052_MAX_PATH; eRFPath++)
+       {
+               for (Offset = 0; Offset < RF6052_MAX_REG; Offset++)
+               {
+                       RF_Shadow[eRFPath][Offset].Value = 0;
+                       RF_Shadow[eRFPath][Offset].Compare = _FALSE;
+                       RF_Shadow[eRFPath][Offset].Recorver  = _FALSE;
+                       RF_Shadow[eRFPath][Offset].ErrorOrNot = _FALSE;
+                       RF_Shadow[eRFPath][Offset].Driver_Write = _FALSE;
+               }
+       }
+
+}      /* PHY_RFShadowRead */
+
+/* End of HalRf6052.c */
diff --git a/drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/rtl8192c_rxdesc.c b/drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/rtl8192c_rxdesc.c
new file mode 100644 (file)
index 0000000..1b102c6
--- /dev/null
@@ -0,0 +1,874 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#define _RTL8192C_REDESC_C_
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <rtl8192c_hal.h>
+
+static u8 evm_db2percentage(s8 value)
+{
+       //
+       // -33dB~0dB to 0%~99%
+       //
+       s8 ret_val;
+
+       ret_val = value;
+       //ret_val /= 2;
+
+       RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("EVMdbToPercentage92S Value=%d / %x \n", ret_val, ret_val));
+
+       if(ret_val >= 0)
+               ret_val = 0;
+       if(ret_val <= -33)
+               ret_val = -33;
+
+       ret_val = 0 - ret_val;
+       ret_val*=3;
+
+       if(ret_val == 99)
+               ret_val = 100;
+
+       return(ret_val);
+}
+
+
+static s32 signal_scale_mapping(_adapter *padapter, s32 cur_sig )
+{
+       s32 ret_sig;
+
+#ifdef CONFIG_USB_HCI
+       if(cur_sig >= 51 && cur_sig <= 100)
+       {
+               ret_sig = 100;
+       }
+       else if(cur_sig >= 41 && cur_sig <= 50)
+       {
+               ret_sig = 80 + ((cur_sig - 40)*2);
+       }
+       else if(cur_sig >= 31 && cur_sig <= 40)
+       {
+               ret_sig = 66 + (cur_sig - 30);
+       }
+       else if(cur_sig >= 21 && cur_sig <= 30)
+       {
+               ret_sig = 54 + (cur_sig - 20);
+       }
+       else if(cur_sig >= 10 && cur_sig <= 20)
+       {
+               ret_sig = 42 + (((cur_sig - 10) * 2) / 3);
+       }
+       else if(cur_sig >= 5 && cur_sig <= 9)
+       {
+               ret_sig = 22 + (((cur_sig - 5) * 3) / 2);
+       }
+       else if(cur_sig >= 1 && cur_sig <= 4)
+       {
+               ret_sig = 6 + (((cur_sig - 1) * 3) / 2);
+       }
+       else
+       {
+               ret_sig = cur_sig;
+       }
+#else
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
+
+       if(pHalData->CustomerID == RT_CID_819x_Lenovo)
+       {
+               // Step 1. Scale mapping.
+               // 20100611 Joseph: Re-tunning RSSI presentation for Lenovo.
+               // 20100426 Joseph: Modify Signal strength mapping.
+               // This modification makes the RSSI indication similar to Intel solution.
+               // 20100414 Joseph: Tunning RSSI for Lenovo according to RTL8191SE.
+               if(cur_sig >= 54 && cur_sig <= 100)
+               {
+                       ret_sig = 100;
+               }
+               else if(cur_sig>=42 && cur_sig <= 53 )
+               {
+                       ret_sig = 95;
+               }
+               else if(cur_sig>=36 && cur_sig <= 41 )
+               {
+                       ret_sig = 74 + ((cur_sig - 36) *20)/6;
+               }
+               else if(cur_sig>=33 && cur_sig <= 35 )
+               {
+                       ret_sig = 65 + ((cur_sig - 33) *8)/2;
+               }
+               else if(cur_sig>=18 && cur_sig <= 32 )
+               {
+                       ret_sig = 62 + ((cur_sig - 18) *2)/15;
+               }
+               else if(cur_sig>=15 && cur_sig <= 17 )
+               {
+                       ret_sig = 33 + ((cur_sig - 15) *28)/2;
+               }
+               else if(cur_sig>=10 && cur_sig <= 14 )
+               {
+                       ret_sig = 39;
+               }
+               else if(cur_sig>=8 && cur_sig <= 9 )
+               {
+                       ret_sig = 33;
+               }
+               else if(cur_sig <= 8 )
+               {
+                       ret_sig = 19;
+               }
+       }
+       else
+       {
+               // Step 1. Scale mapping.
+               if(cur_sig >= 61 && cur_sig <= 100)
+               {
+                       ret_sig = 90 + ((cur_sig - 60) / 4);
+               }
+               else if(cur_sig >= 41 && cur_sig <= 60)
+               {
+                       ret_sig = 78 + ((cur_sig - 40) / 2);
+               }
+               else if(cur_sig >= 31 && cur_sig <= 40)
+               {
+                       ret_sig = 66 + (cur_sig - 30);
+               }
+               else if(cur_sig >= 21 && cur_sig <= 30)
+               {
+                       ret_sig = 54 + (cur_sig - 20);
+               }
+               else if(cur_sig >= 5 && cur_sig <= 20)
+               {
+                       ret_sig = 42 + (((cur_sig - 5) * 2) / 3);
+               }
+               else if(cur_sig == 4)
+               {
+                       ret_sig = 36;
+               }
+               else if(cur_sig == 3)
+               {
+                       ret_sig = 27;
+               }
+               else if(cur_sig == 2)
+               {
+                       ret_sig = 18;
+               }
+               else if(cur_sig == 1)
+               {
+                       ret_sig = 9;
+               }
+               else
+               {
+                       ret_sig = cur_sig;
+               }
+       }
+#endif
+
+       return ret_sig;
+}
+
+
+static s32  translate2dbm(u8 signal_strength_idx)
+{
+       s32     signal_power; // in dBm.
+
+
+       // Translate to dBm (x=0.5y-95).
+       signal_power = (s32)((signal_strength_idx + 1) >> 1);
+       signal_power -= 95;
+
+       return signal_power;
+}
+
+static void query_rx_phy_status(union recv_frame *prframe, struct phy_stat *pphy_stat)
+{
+       PHY_STS_OFDM_8192CD_T   *pOfdm_buf;
+       PHY_STS_CCK_8192CD_T    *pCck_buf;
+       u8      i, max_spatial_stream, evm;
+       s8      rx_pwr[4], rx_pwr_all = 0;
+       u8      pwdb_all;
+       u32     rssi,total_rssi=0;
+       u8      bcck_rate=0, rf_rx_num = 0, cck_highpwr = 0;
+       _adapter                                *padapter = prframe->u.hdr.adapter;
+       struct rx_pkt_attrib    *pattrib = &prframe->u.hdr.attrib;
+       HAL_DATA_TYPE           *pHalData = GET_HAL_DATA(padapter);
+       struct dm_priv          *pdmpriv = &pHalData->dmpriv;
+       u8      tmp_rxsnr;
+       s8      rx_snrX;
+
+#ifdef CONFIG_HW_ANTENNA_DIVERSITY
+       PHY_RX_DRIVER_INFO_8192CD *pDrvInfo = ((PHY_RX_DRIVER_INFO_8192CD *)pphy_stat);
+       u8      bant1_sel = (pDrvInfo->ANTSEL == 1)?_TRUE:_FALSE;
+#endif
+
+       // Record it for next packet processing
+       bcck_rate=(pattrib->mcs_rate<=3? 1:0);
+
+       if(bcck_rate) //CCK
+       {
+               u8 report;
+#ifdef CONFIG_HW_ANTENNA_DIVERSITY
+               if(bant1_sel == _TRUE)
+                       pHalData->CCK_Ant1_Cnt++;
+               else
+                       pHalData->CCK_Ant2_Cnt++;
+#endif
+
+               // CCK Driver info Structure is not the same as OFDM packet.
+               pCck_buf = (PHY_STS_CCK_8192CD_T *)pphy_stat;
+               //Adapter->RxStats.NumQryPhyStatusCCK++;
+
+               //
+               // (1)Hardware does not provide RSSI for CCK
+               // (2)PWDB, Average PWDB cacluated by hardware (for rate adaptive)
+               //
+
+               if(padapter->pwrctrlpriv.rf_pwrstate == rf_on)
+                       cck_highpwr = (u8)pHalData->bCckHighPower;
+               else
+                       cck_highpwr = _FALSE;
+
+               if(!cck_highpwr)
+               {
+                       report = pCck_buf->cck_agc_rpt&0xc0;
+                       report = report>>6;
+                       switch(report)
+                       {
+                               // 03312009 modified by cosa
+                               // Modify the RF RNA gain value to -40, -20, -2, 14 by Jenyu's suggestion
+                               // Note: different RF with the different RNA gain.
+                               case 0x3:
+                                       rx_pwr_all = (-46) - (pCck_buf->cck_agc_rpt & 0x3e);
+                                       break;
+                               case 0x2:
+                                       rx_pwr_all = (-26) - (pCck_buf->cck_agc_rpt & 0x3e);
+                                       break;
+                               case 0x1:
+                                       rx_pwr_all = (-12) - (pCck_buf->cck_agc_rpt & 0x3e);
+                                       break;
+                               case 0x0:
+                                       rx_pwr_all = (16) - (pCck_buf->cck_agc_rpt & 0x3e);
+                                       break;
+                       }
+               }
+               else
+               {
+                       report = pCck_buf->cck_agc_rpt & 0x60;
+                       report = report>>5;
+                       switch(report)
+                       {
+                               case 0x3:
+                                       rx_pwr_all = (-46) - ((pCck_buf->cck_agc_rpt & 0x1f)<<1) ;
+                                       break;
+                               case 0x2:
+                                       rx_pwr_all = (-26)- ((pCck_buf->cck_agc_rpt & 0x1f)<<1);
+                                       break;
+                               case 0x1:
+                                       rx_pwr_all = (-12) - ((pCck_buf->cck_agc_rpt & 0x1f)<<1) ;
+                                       break;
+                               case 0x0:
+                                       rx_pwr_all = (16) - ((pCck_buf->cck_agc_rpt & 0x1f)<<1) ;
+                                       break;
+                       }
+               }
+
+               pwdb_all= query_rx_pwr_percentage(rx_pwr_all);
+               if(pHalData->CustomerID == RT_CID_819x_Lenovo)
+               {
+                       // CCK gain is smaller than OFDM/MCS gain,
+                       // so we add gain diff by experiences, the val is 6
+                       pwdb_all+=6;
+                       if(pwdb_all > 100)
+                               pwdb_all = 100;
+                       // modify the offset to make the same gain index with OFDM.
+                       if(pwdb_all > 34 && pwdb_all <= 42)
+                               pwdb_all -= 2;
+                       else if(pwdb_all > 26 && pwdb_all <= 34)
+                               pwdb_all -= 6;
+                       else if(pwdb_all > 14 && pwdb_all <= 26)
+                               pwdb_all -= 8;
+                       else if(pwdb_all > 4 && pwdb_all <= 14)
+                               pwdb_all -= 4;
+               }
+
+               pattrib->RxPWDBAll = pwdb_all;  //for DIG/rate adaptive
+               pattrib->RecvSignalPower = rx_pwr_all;  //dBM
+               padapter->recvpriv.rxpwdb = rx_pwr_all;
+               //
+               // (3) Get Signal Quality (EVM)
+               //
+               //if(bPacketMatchBSSID)
+               {
+                       u8      sq;
+
+                       if(pHalData->CustomerID == RT_CID_819x_Lenovo)
+                       {
+                               // mapping to 5 bars for vista signal strength
+                               // signal quality in driver will be displayed to signal strength
+                               // in vista.
+                               if(pwdb_all >= 50)
+                                       sq = 100;
+                               else if(pwdb_all >= 35 && pwdb_all < 50)
+                                       sq = 80;
+                               else if(pwdb_all >= 22 && pwdb_all < 35)
+                                       sq = 60;
+                               else if(pwdb_all >= 18 && pwdb_all < 22)
+                                       sq = 40;
+                               else
+                                       sq = 20;
+                       }
+                       else
+                       {
+                               if(pwdb_all> 40)
+                               {
+                                       sq = 100;
+                               }
+                               else
+                               {
+                                       sq = pCck_buf->SQ_rpt;
+
+                                       if(pCck_buf->SQ_rpt > 64)
+                                               sq = 0;
+                                       else if (pCck_buf->SQ_rpt < 20)
+                                               sq= 100;
+                                       else
+                                               sq = ((64-sq) * 100) / 44;
+
+                               }
+                       }
+
+                       pattrib->signal_qual=sq;
+                       pattrib->rx_mimo_signal_qual[0]=sq;
+                       pattrib->rx_mimo_signal_qual[1]=(-1);
+               }
+
+       }
+       else //OFDM/HT
+       {
+#ifdef CONFIG_HW_ANTENNA_DIVERSITY
+               if(bant1_sel == _TRUE)
+                       pHalData->OFDM_Ant1_Cnt++;
+               else
+                       pHalData->OFDM_Ant2_Cnt++;
+#endif
+               pdmpriv->OFDM_Pkt_Cnt++;
+
+               pOfdm_buf = (PHY_STS_OFDM_8192CD_T *)pphy_stat;
+
+               //
+               // (1)Get RSSI per-path
+               //
+               for(i=0; i<pHalData->NumTotalRFPath; i++)
+               {
+                       // 2008/01/30 MH we will judge RF RX path now.
+                       if (pHalData->bRFPathRxEnable[i])
+                               rf_rx_num++;
+                       //else
+                               //continue;
+
+                       rx_pwr[i] =  ((pOfdm_buf->trsw_gain_X[i]&0x3F)*2) - 110;
+                       padapter->recvpriv.RxRssi[i] = rx_pwr[i];
+                       /* Translate DBM to percentage. */
+                       pattrib->rx_rssi[i] = rssi = query_rx_pwr_percentage(rx_pwr[i]);
+                       total_rssi += rssi;
+
+                       RT_TRACE(_module_rtl871x_recv_c_, _drv_err_, ("RF-%d RXPWR=%x RSSI=%d\n", i, rx_pwr[i], rssi));
+
+                       //Get Rx snr value in DB
+                       tmp_rxsnr =     pOfdm_buf->rxsnr_X[i];
+                       rx_snrX = (s8)(tmp_rxsnr);
+                       rx_snrX >>= 1;
+                       padapter->recvpriv.RxSNRdB[i] =  (int)rx_snrX;
+                       pattrib->rx_snr[i]=pOfdm_buf->rxsnr_X[i];
+                       /* Record Signal Strength for next packet */
+                       //if(bPacketMatchBSSID)
+                       {
+                               //pRfd->Status.RxMIMOSignalStrength[i] =(u1Byte) RSSI;
+
+                               //The following is for lenovo signal strength in vista
+                               if(pHalData->CustomerID == RT_CID_819x_Lenovo)
+                               {
+                                       u8      sq;
+
+                                       if(i == 0)
+                                       {
+                                               // mapping to 5 bars for vista signal strength
+                                               // signal quality in driver will be displayed to signal strength
+                                               // in vista.
+                                               if(rssi >= 50)
+                                                       sq = 100;
+                                               else if(rssi >= 35 && rssi < 50)
+                                                       sq = 80;
+                                               else if(rssi >= 22 && rssi < 35)
+                                                       sq = 60;
+                                               else if(rssi >= 18 && rssi < 22)
+                                                       sq = 40;
+                                               else
+                                                       sq = 20;
+                                               //DbgPrint("ofdm/mcs RSSI=%d\n", RSSI);
+                                               //pRfd->Status.SignalQuality = SQ;
+                                               //DbgPrint("ofdm/mcs SQ = %d\n", pRfd->Status.SignalQuality);
+                                       }
+                               }
+                       }
+               }
+
+
+               //
+               // (2)PWDB, Average PWDB cacluated by hardware (for rate adaptive),average
+               //
+               rx_pwr_all = (((pOfdm_buf->pwdb_all ) >> 1 )& 0x7f) -110;//for OFDM Average RSSI
+               pwdb_all = query_rx_pwr_percentage(rx_pwr_all);
+
+               RT_TRACE(_module_rtl871x_recv_c_, _drv_err_, ("PWDB_ALL=%d\n",  pwdb_all));
+
+               pattrib->RxPWDBAll = pwdb_all;  //for DIG/rate adaptive
+               pattrib->RecvSignalPower = rx_pwr_all;//dBM
+               padapter->recvpriv.rxpwdb = rx_pwr_all;
+               //
+               // (3)EVM of HT rate
+               //
+               if(pHalData->CustomerID != RT_CID_819x_Lenovo)
+               {
+                       if(pattrib->rxht &&  pattrib->mcs_rate >=20 && pattrib->mcs_rate<=27)
+                               max_spatial_stream = 2; //both spatial stream make sense
+                       else
+                               max_spatial_stream = 1; //only spatial stream 1 makes sense
+
+                       for(i=0; i<max_spatial_stream; i++)
+                       {
+                               // Do not use shift operation like "rx_evmX >>= 1" because the compilor of free build environment
+                               // fill most significant bit to "zero" when doing shifting operation which may change a negative
+                               // value to positive one, then the dbm value (which is supposed to be negative)  is not correct anymore.
+                               evm = evm_db2percentage( (pOfdm_buf->rxevm_X[i]/*/ 2*/));//dbm
+
+                               RT_TRACE(_module_rtl871x_recv_c_, _drv_err_, ("RXRATE=%x RXEVM=%x EVM=%s%d\n",
+                                       pattrib->mcs_rate, pOfdm_buf->rxevm_X[i], "%",evm));
+
+                               //if(bPacketMatchBSSID)
+                               {
+                                       if(i==0) // Fill value in RFD, Get the first spatial stream only
+                                       {
+                                               pattrib->signal_qual = (u8)(evm & 0xff);
+                                       }
+                                       pattrib->rx_mimo_signal_qual[i] = (u8)(evm & 0xff);
+                               }
+                       }
+
+               }
+
+               //
+               // 4. Record rx statistics for debug
+               //
+
+       }
+
+
+       //UI BSS List signal strength(in percentage), make it good looking, from 0~100.
+       //It is assigned to the BSS List in GetValueFromBeaconOrProbeRsp().
+       if(bcck_rate)
+       {
+               pattrib->signal_strength=(u8)signal_scale_mapping(padapter, pwdb_all);
+       }
+       else
+       {
+               if (rf_rx_num != 0)
+               {
+                       pattrib->signal_strength= (u8)(signal_scale_mapping(padapter, total_rssi/=rf_rx_num));
+               }
+       }
+       //DBG_8192C("%s,rx_pwr_all(%d),RxPWDBAll(%d)\n",__FUNCTION__,rx_pwr_all,pattrib->RxPWDBAll);
+
+}
+
+
+static void process_rssi(_adapter *padapter,union recv_frame *prframe)
+{
+       u32     last_rssi, tmp_val;
+       struct rx_pkt_attrib *pattrib = &prframe->u.hdr.attrib;
+#ifdef CONFIG_NEW_SIGNAL_STAT_PROCESS
+       struct signal_stat * signal_stat = &padapter->recvpriv.signal_strength_data;
+#endif //CONFIG_NEW_SIGNAL_STAT_PROCESS
+
+       //DBG_8192C("process_rssi=> pattrib->rssil(%d) signal_strength(%d)\n ",pattrib->RecvSignalPower,pattrib->signal_strength);
+       //if(pRfd->Status.bPacketToSelf || pRfd->Status.bPacketBeacon)
+       {
+
+       #ifdef CONFIG_NEW_SIGNAL_STAT_PROCESS
+               if(signal_stat->update_req) {
+                       signal_stat->total_num = 0;
+                       signal_stat->total_val = 0;
+                       signal_stat->update_req = 0;
+               }
+
+               signal_stat->total_num++;
+               signal_stat->total_val  += pattrib->signal_strength;
+               signal_stat->avg_val = signal_stat->total_val / signal_stat->total_num;
+       #else //CONFIG_NEW_SIGNAL_STAT_PROCESS
+
+               //Adapter->RxStats.RssiCalculateCnt++;  //For antenna Test
+               if(padapter->recvpriv.signal_strength_data.total_num++ >= PHY_RSSI_SLID_WIN_MAX)
+               {
+                       padapter->recvpriv.signal_strength_data.total_num = PHY_RSSI_SLID_WIN_MAX;
+                       last_rssi = padapter->recvpriv.signal_strength_data.elements[padapter->recvpriv.signal_strength_data.index];
+                       padapter->recvpriv.signal_strength_data.total_val -= last_rssi;
+               }
+               padapter->recvpriv.signal_strength_data.total_val  +=pattrib->signal_strength;
+
+               padapter->recvpriv.signal_strength_data.elements[padapter->recvpriv.signal_strength_data.index++] = pattrib->signal_strength;
+               if(padapter->recvpriv.signal_strength_data.index >= PHY_RSSI_SLID_WIN_MAX)
+                       padapter->recvpriv.signal_strength_data.index = 0;
+
+
+               tmp_val = padapter->recvpriv.signal_strength_data.total_val/padapter->recvpriv.signal_strength_data.total_num;
+
+               if(padapter->recvpriv.is_signal_dbg) {
+                       padapter->recvpriv.signal_strength= padapter->recvpriv.signal_strength_dbg;
+                       padapter->recvpriv.rssi=(s8)translate2dbm((u8)padapter->recvpriv.signal_strength_dbg);
+               } else {
+                       padapter->recvpriv.signal_strength= tmp_val;
+                       padapter->recvpriv.rssi=(s8)translate2dbm((u8)tmp_val);
+               }
+
+               RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("UI RSSI = %d, ui_rssi.TotalVal = %d, ui_rssi.TotalNum = %d\n", tmp_val, padapter->recvpriv.signal_strength_data.total_val,padapter->recvpriv.signal_strength_data.total_num));
+       #endif //CONFIG_NEW_SIGNAL_STAT_PROCESS
+       }
+
+}// Process_UI_RSSI_8192C
+
+
+static void process_PWDB(_adapter *padapter, union recv_frame *prframe)
+{
+       int     UndecoratedSmoothedPWDB;
+       int     UndecoratedSmoothedCCK;
+       HAL_DATA_TYPE           *pHalData = GET_HAL_DATA(padapter);
+       struct dm_priv          *pdmpriv = &pHalData->dmpriv;
+       struct rx_pkt_attrib    *pattrib= &prframe->u.hdr.attrib;
+       struct sta_info         *psta = prframe->u.hdr.psta;
+       u8 isCCKrate=(pattrib->mcs_rate<=3? 1:0);
+
+
+       if(psta)
+       {
+               UndecoratedSmoothedPWDB = psta->rssi_stat.UndecoratedSmoothedPWDB;
+               UndecoratedSmoothedCCK = psta->rssi_stat.UndecoratedSmoothedCCK;
+       }
+       else
+       {
+               UndecoratedSmoothedPWDB = pdmpriv->UndecoratedSmoothedPWDB;
+               UndecoratedSmoothedCCK = pdmpriv->UndecoratedSmoothedCCK;
+       }
+
+       //if(pRfd->Status.bPacketToSelf || pRfd->Status.bPacketBeacon)
+
+       if(!isCCKrate)
+       {
+               // Process OFDM RSSI
+               if(UndecoratedSmoothedPWDB < 0) // initialize
+               {
+                       UndecoratedSmoothedPWDB = pattrib->RxPWDBAll;
+               }
+
+               if(pattrib->RxPWDBAll > (u32)UndecoratedSmoothedPWDB)
+               {
+                       UndecoratedSmoothedPWDB =
+                                       ( ((UndecoratedSmoothedPWDB)*(Rx_Smooth_Factor-1)) +
+                                       (pattrib->RxPWDBAll)) /(Rx_Smooth_Factor);
+
+                       UndecoratedSmoothedPWDB = UndecoratedSmoothedPWDB + 1;
+               }
+               else
+               {
+                       UndecoratedSmoothedPWDB =
+                                       ( ((UndecoratedSmoothedPWDB)*(Rx_Smooth_Factor-1)) +
+                                       (pattrib->RxPWDBAll)) /(Rx_Smooth_Factor);
+               }
+       }
+       else
+       {
+               // Process CCK RSSI
+               if(UndecoratedSmoothedCCK < 0) // initialize
+               {
+                       UndecoratedSmoothedCCK = pattrib->RxPWDBAll;
+               }
+
+               if(pattrib->RxPWDBAll > (u32)UndecoratedSmoothedCCK)
+               {
+                       UndecoratedSmoothedCCK =
+                                       ( ((UndecoratedSmoothedCCK)*(Rx_Smooth_Factor-1)) +
+                                       (pattrib->RxPWDBAll)) /(Rx_Smooth_Factor);
+
+                       UndecoratedSmoothedCCK = UndecoratedSmoothedCCK + 1;
+               }
+               else
+               {
+                       UndecoratedSmoothedCCK =
+                                       ( ((UndecoratedSmoothedCCK)*(Rx_Smooth_Factor-1)) +
+                                       (pattrib->RxPWDBAll)) /(Rx_Smooth_Factor);
+               }
+       }
+
+
+       if(psta)
+       {
+               //psta->UndecoratedSmoothedPWDB = UndecoratedSmoothedPWDB;//todo:
+               pdmpriv->UndecoratedSmoothedPWDB = UndecoratedSmoothedPWDB;
+
+               if(pdmpriv->RSSI_Select == RSSI_OFDM){
+                       psta->rssi_stat.UndecoratedSmoothedPWDB = UndecoratedSmoothedPWDB;
+               }
+               else if(pdmpriv->RSSI_Select == RSSI_CCK){
+                       psta->rssi_stat.UndecoratedSmoothedPWDB = UndecoratedSmoothedCCK;
+               }
+               else{
+                       if(UndecoratedSmoothedPWDB <0 )
+                               pdmpriv->UndecoratedSmoothedPWDB = UndecoratedSmoothedCCK;
+                       else
+                               pdmpriv->UndecoratedSmoothedPWDB = UndecoratedSmoothedPWDB;
+               }
+               psta->rssi_stat.UndecoratedSmoothedCCK = UndecoratedSmoothedCCK;
+       }
+       else
+       {
+               //pdmpriv->UndecoratedSmoothedPWDB = UndecoratedSmoothedPWDB;
+
+               if(pdmpriv->RSSI_Select == RSSI_OFDM){
+                       pdmpriv->UndecoratedSmoothedPWDB = UndecoratedSmoothedPWDB;
+               }
+               else if(pdmpriv->RSSI_Select == RSSI_CCK){
+                       pdmpriv->UndecoratedSmoothedPWDB = UndecoratedSmoothedCCK;
+               }
+               else    {
+                       if(UndecoratedSmoothedPWDB <0 )
+                               pdmpriv->UndecoratedSmoothedPWDB = UndecoratedSmoothedCCK;
+                       else
+                               pdmpriv->UndecoratedSmoothedPWDB = UndecoratedSmoothedPWDB;
+
+               }
+               pdmpriv->UndecoratedSmoothedCCK = UndecoratedSmoothedCCK;
+       }
+
+       //UpdateRxSignalStatistics8192C(padapter, prframe);
+
+}
+
+
+static void process_link_qual(_adapter *padapter,union recv_frame *prframe)
+{
+       u32     last_evm=0, tmpVal;
+       struct rx_pkt_attrib *pattrib;
+#ifdef CONFIG_NEW_SIGNAL_STAT_PROCESS
+       struct signal_stat * signal_stat;
+#endif //CONFIG_NEW_SIGNAL_STAT_PROCESS
+
+       if(prframe == NULL || padapter==NULL){
+               return;
+       }
+
+       pattrib = &prframe->u.hdr.attrib;
+#ifdef CONFIG_NEW_SIGNAL_STAT_PROCESS
+       signal_stat = &padapter->recvpriv.signal_qual_data;
+#endif //CONFIG_NEW_SIGNAL_STAT_PROCESS
+
+       //DBG_8192C("process_link_qual=> pattrib->signal_qual(%d)\n ",pattrib->signal_qual);
+
+#ifdef CONFIG_NEW_SIGNAL_STAT_PROCESS
+       if(signal_stat->update_req) {
+               signal_stat->total_num = 0;
+               signal_stat->total_val = 0;
+               signal_stat->update_req = 0;
+       }
+
+       signal_stat->total_num++;
+       signal_stat->total_val  += pattrib->signal_qual;
+       signal_stat->avg_val = signal_stat->total_val / signal_stat->total_num;
+
+#else //CONFIG_NEW_SIGNAL_STAT_PROCESS
+       if(pattrib->signal_qual != 0)
+       {
+                       //
+                       // 1. Record the general EVM to the sliding window.
+                       //
+                       if(padapter->recvpriv.signal_qual_data.total_num++ >= PHY_LINKQUALITY_SLID_WIN_MAX)
+                       {
+                               padapter->recvpriv.signal_qual_data.total_num = PHY_LINKQUALITY_SLID_WIN_MAX;
+                               last_evm = padapter->recvpriv.signal_qual_data.elements[padapter->recvpriv.signal_qual_data.index];
+                               padapter->recvpriv.signal_qual_data.total_val -= last_evm;
+                       }
+                       padapter->recvpriv.signal_qual_data.total_val += pattrib->signal_qual;
+
+                       padapter->recvpriv.signal_qual_data.elements[padapter->recvpriv.signal_qual_data.index++] = pattrib->signal_qual;
+                       if(padapter->recvpriv.signal_qual_data.index >= PHY_LINKQUALITY_SLID_WIN_MAX)
+                               padapter->recvpriv.signal_qual_data.index = 0;
+
+                       RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("Total SQ=%d  pattrib->signal_qual= %d\n", padapter->recvpriv.signal_qual_data.total_val, pattrib->signal_qual));
+
+                       // <1> Showed on UI for user, in percentage.
+                       tmpVal = padapter->recvpriv.signal_qual_data.total_val/padapter->recvpriv.signal_qual_data.total_num;
+                       padapter->recvpriv.signal_qual=(u8)tmpVal;
+
+       }
+       else
+       {
+               RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,(" pattrib->signal_qual =%d\n", pattrib->signal_qual));
+       }
+#endif //CONFIG_NEW_SIGNAL_STAT_PROCESS
+
+}// Process_UiLinkQuality8192S
+
+
+static void process_phy_info(_adapter *padapter, union recv_frame *prframe)
+{
+       union recv_frame *precvframe = (union recv_frame *)prframe;
+
+#ifdef CONFIG_SW_ANTENNA_DIVERSITY
+       // If we switch to the antenna for testing, the signal strength
+       // of the packets in this time shall not be counted into total receiving power.
+       // This prevents error counting Rx signal strength and affecting other dynamic mechanism.
+
+       // Select the packets to do RSSI checking for antenna switching.
+       SwAntDivRSSICheck8192C(padapter, precvframe->u.hdr.attrib.RxPWDBAll);
+
+       if(GET_HAL_DATA(padapter)->RSSI_test == _TRUE)
+               return;
+#endif
+       //
+       // Check RSSI
+       //
+       process_rssi(padapter, precvframe);
+       //
+       // Check PWDB.
+       //
+       process_PWDB(padapter, precvframe);
+       //
+       // Check EVM
+       //
+       process_link_qual(padapter,  precvframe);
+
+}
+
+
+void rtl8192c_translate_rx_signal_stuff(union recv_frame *precvframe, struct phy_stat *pphy_info)
+{
+       struct rx_pkt_attrib    *pattrib = &precvframe->u.hdr.attrib;
+       _adapter                                *padapter = precvframe->u.hdr.adapter;
+       u8      bPacketMatchBSSID =_FALSE;
+       u8      bPacketToSelf = _FALSE;
+       u8      bPacketBeacon = _FALSE;
+
+       if((pattrib->physt) && (pphy_info != NULL))
+       {
+               bPacketMatchBSSID = ((!IsFrameTypeCtrl(precvframe->u.hdr.rx_data)) && !(pattrib->icv_err) && !(pattrib->crc_err) &&
+                       _rtw_memcmp(get_hdr_bssid(precvframe->u.hdr.rx_data), get_my_bssid(&padapter->mlmeextpriv.mlmext_info.network), ETH_ALEN));
+
+
+               bPacketToSelf = bPacketMatchBSSID &&  (_rtw_memcmp(get_da(precvframe->u.hdr.rx_data), myid(&padapter->eeprompriv), ETH_ALEN));
+
+               bPacketBeacon =bPacketMatchBSSID && (GetFrameSubType(precvframe->u.hdr.rx_data) ==  WIFI_BEACON);
+
+               query_rx_phy_status(precvframe, pphy_info);
+
+               precvframe->u.hdr.psta = NULL;
+               if(bPacketMatchBSSID && check_fwstate(&padapter->mlmepriv, WIFI_AP_STATE) == _TRUE)
+               {
+                       u8 *sa;
+                       struct sta_info *psta=NULL;
+                       struct sta_priv *pstapriv = &padapter->stapriv;
+
+                       sa = get_sa(precvframe->u.hdr.rx_data);
+
+                       psta = rtw_get_stainfo(pstapriv, sa);
+                       if(psta)
+                       {
+                               precvframe->u.hdr.psta = psta;
+                               process_phy_info(padapter, precvframe);
+                       }
+               }
+               else if(bPacketToSelf || bPacketBeacon)
+               {
+                       if(check_fwstate(&padapter->mlmepriv, WIFI_ADHOC_STATE|WIFI_ADHOC_MASTER_STATE) == _TRUE)
+                       {
+                               u8 *sa;
+                               struct sta_info *psta=NULL;
+                               struct sta_priv *pstapriv = &padapter->stapriv;
+
+                               sa = get_sa(precvframe->u.hdr.rx_data);
+
+                               psta = rtw_get_stainfo(pstapriv, sa);
+                               if(psta)
+                               {
+                                       precvframe->u.hdr.psta = psta;
+                               }
+                       }
+
+                       process_phy_info(padapter, precvframe);
+               }
+       }
+}
+
+void rtl8192c_query_rx_desc_status(union recv_frame *precvframe, struct recv_stat *pdesc)
+{
+       struct rx_pkt_attrib    *pattrib = &precvframe->u.hdr.attrib;
+
+       //Offset 0
+       pattrib->physt = (u8)((le32_to_cpu(pdesc->rxdw0) >> 26) & 0x1);
+       pattrib->pkt_len =  (u16)(le32_to_cpu(pdesc->rxdw0)&0x00003fff);
+       pattrib->drvinfo_sz = (u8)((le32_to_cpu(pdesc->rxdw0) >> 16) & 0xf) * 8;//uint 2^3 = 8 bytes
+
+       pattrib->shift_sz = (u8)((le32_to_cpu(pdesc->rxdw0) >> 24) & 0x3);
+
+       pattrib->crc_err = (u8)((le32_to_cpu(pdesc->rxdw0) >> 14) & 0x1);
+       pattrib->icv_err = (u8)((le32_to_cpu(pdesc->rxdw0) >> 15) & 0x1);
+       pattrib->qos = (u8)(( le32_to_cpu( pdesc->rxdw0 ) >> 23) & 0x1);// Qos data, wireless lan header length is 26
+       pattrib->bdecrypted = (le32_to_cpu(pdesc->rxdw0) & BIT(27))? 0:1;
+
+       //Offset 4
+       pattrib->mfrag = (u8)((le32_to_cpu(pdesc->rxdw1) >> 27) & 0x1);//more fragment bit
+
+       //Offset 8
+       pattrib->frag_num = (u8)((le32_to_cpu(pdesc->rxdw2) >> 12) & 0xf);//fragmentation number
+
+       //Offset 12
+#ifdef CONFIG_TCP_CSUM_OFFLOAD_RX
+       if ( le32_to_cpu(pdesc->rxdw3) & BIT(13)){
+               pattrib->tcpchk_valid = 1; // valid
+               if ( le32_to_cpu(pdesc->rxdw3) & BIT(11) ) {
+                       pattrib->tcp_chkrpt = 1; // correct
+                       //DBG_8192C("tcp csum ok\n");
+               }
+               else
+                       pattrib->tcp_chkrpt = 0; // incorrect
+
+               if ( le32_to_cpu(pdesc->rxdw3) & BIT(12) )
+                       pattrib->ip_chkrpt = 1; // correct
+               else
+                       pattrib->ip_chkrpt = 0; // incorrect
+       }
+       else {
+               pattrib->tcpchk_valid = 0; // invalid
+       }
+#endif
+
+       pattrib->mcs_rate=(u8)((le32_to_cpu(pdesc->rxdw3))&0x3f);
+       pattrib->rxht=(u8)((le32_to_cpu(pdesc->rxdw3) >>6)&0x1);
+       pattrib->sgi=(u8)((le32_to_cpu(pdesc->rxdw3) >>8)&0x1);
+       //Offset 16
+       //Offset 20
+
+}
diff --git a/drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/rtl8192c_sreset.c b/drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/rtl8192c_sreset.c
new file mode 100644 (file)
index 0000000..6275894
--- /dev/null
@@ -0,0 +1,93 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#include <rtl8192c_sreset.h>
+#include <rtl8192c_hal.h>
+#ifdef DBG_CONFIG_ERROR_DETECT
+void rtl8192c_sreset_xmit_status_check(_adapter *padapter)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
+       struct sreset_priv *psrtpriv = &pHalData->srestpriv;
+
+       unsigned long current_time;
+       struct xmit_priv        *pxmitpriv = &padapter->xmitpriv;
+       unsigned int diff_time;
+       u32 txdma_status;
+       if( (txdma_status=rtw_read32(padapter, REG_TXDMA_STATUS)) !=0x00){
+               DBG_871X("%s REG_TXDMA_STATUS:0x%08x\n", __FUNCTION__, txdma_status);
+               rtw_hal_sreset_reset(padapter);
+       }
+
+       //total xmit irp = 4
+       //DBG_8192C("==>%s free_xmitbuf_cnt(%d),txirp_cnt(%d)\n",__FUNCTION__,pxmitpriv->free_xmitbuf_cnt,pxmitpriv->txirp_cnt);
+       //if(pxmitpriv->txirp_cnt == NR_XMITBUFF+1)
+       current_time = rtw_get_current_time();
+
+       if(0 == pxmitpriv->free_xmitbuf_cnt || 0 == pxmitpriv->free_xmit_extbuf_cnt) {
+
+               diff_time = rtw_get_passing_time_ms(psrtpriv->last_tx_time);
+
+               if (diff_time > 2000) {
+                       if (psrtpriv->last_tx_complete_time == 0) {
+                               psrtpriv->last_tx_complete_time = current_time;
+                       }
+                       else{
+                               diff_time = rtw_get_passing_time_ms(psrtpriv->last_tx_complete_time);
+                               if (diff_time > 4000) {
+                                       //padapter->Wifi_Error_Status = WIFI_TX_HANG;
+                                       DBG_871X("%s tx hang\n", __FUNCTION__);
+                                       rtw_hal_sreset_reset(padapter);
+                               }
+                       }
+               }
+       }
+
+       if (psrtpriv->dbg_trigger_point == SRESET_TGP_XMIT_STATUS) {
+               psrtpriv->dbg_trigger_point = SRESET_TGP_NULL;
+               rtw_hal_sreset_reset(padapter);
+               return;
+       }
+}
+void rtl8192c_sreset_linked_status_check(_adapter *padapter)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
+       struct sreset_priv *psrtpriv = &pHalData->srestpriv;
+
+       u32 regc50,regc58,reg824,reg800;
+       regc50 = rtw_read32(padapter,0xc50);
+       regc58 = rtw_read32(padapter,0xc58);
+       reg824 = rtw_read32(padapter,0x824);
+       reg800 = rtw_read32(padapter,0x800);
+       if(     ((regc50&0xFFFFFF00)!= 0x69543400)||
+               ((regc58&0xFFFFFF00)!= 0x69543400)||
+               (((reg824&0xFFFFFF00)!= 0x00390000)&&(((reg824&0xFFFFFF00)!= 0x80390000)))||
+               ( ((reg800&0xFFFFFF00)!= 0x03040000)&&((reg800&0xFFFFFF00)!= 0x83040000)))
+       {
+               DBG_8192C("%s regc50:0x%08x, regc58:0x%08x, reg824:0x%08x, reg800:0x%08x,\n", __FUNCTION__,
+                       regc50, regc58, reg824, reg800);
+               rtw_hal_sreset_reset(padapter);
+       }
+
+       if (psrtpriv->dbg_trigger_point == SRESET_TGP_LINK_STATUS) {
+               psrtpriv->dbg_trigger_point = SRESET_TGP_NULL;
+               rtw_hal_sreset_reset(padapter);
+               return;
+       }
+}
+#endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/rtl8192c_xmit.c b/drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/rtl8192c_xmit.c
new file mode 100644 (file)
index 0000000..e958164
--- /dev/null
@@ -0,0 +1,62 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#define _RTL8192C_XMIT_C_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <rtl8192c_hal.h>
+
+#ifdef CONFIG_XMIT_ACK
+void dump_txrpt_ccx_8192c(void *buf)
+{
+       struct txrpt_ccx_8192c *txrpt_ccx = buf;
+
+       DBG_871X("%s:\n"
+               "retry_cnt:%u, rsvd_0:%u, rts_retry_cnt:%u, rsvd_1:%u\n"
+               "ccx_qtime:%u, missed_pkt_num:%u, rsvd_4:%u\n"
+               "mac_id:%u, des1_fragssn:%u\n"
+               "rpt_pkt_num:%u, pkt_drop:%u, lifetime_over:%u, retry_over:%u\n"
+               "edca_tx_queue:%u, rsvd_7:%u, bmc:%u, pkt_ok:%u, init_ccx:%u\n"
+               , __func__
+               , txrpt_ccx->retry_cnt, txrpt_ccx->rsvd_0, txrpt_ccx->rts_retry_cnt, txrpt_ccx->rsvd_1
+               , txrpt_ccx_qtime_8192c(txrpt_ccx), txrpt_ccx->missed_pkt_num, txrpt_ccx->rsvd_4
+               , txrpt_ccx->mac_id, txrpt_ccx->des1_fragssn
+               , txrpt_ccx->rpt_pkt_num, txrpt_ccx->pkt_drop, txrpt_ccx->lifetime_over, txrpt_ccx->retry_over
+               , txrpt_ccx->edca_tx_queue, txrpt_ccx->rsvd_7, txrpt_ccx->bmc, txrpt_ccx->pkt_ok, txrpt_ccx->int_ccx
+       );
+}
+
+void handle_txrpt_ccx_8192c(_adapter *adapter, void *buf)
+{
+       struct txrpt_ccx_8192c *txrpt_ccx = buf;
+
+       #ifdef DBG_CCX
+       dump_txrpt_ccx_8192c(buf);
+       #endif
+
+       if (txrpt_ccx->int_ccx) {
+               if (txrpt_ccx->pkt_ok)
+                       rtw_ack_tx_done(&adapter->xmitpriv, RTW_SCTX_DONE_SUCCESS);
+               else
+                       rtw_ack_tx_done(&adapter->xmitpriv, RTW_SCTX_DONE_CCX_PKT_FAIL);
+       }
+}
+#endif //CONFIG_XMIT_ACK
diff --git a/drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/usb/Hal8192CUHWImg.c b/drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/usb/Hal8192CUHWImg.c
new file mode 100644 (file)
index 0000000..9faa8c1
--- /dev/null
@@ -0,0 +1,8757 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+
+/*Created on  2011/ 6/15,  5:45*/
+
+#include <basic_types.h>
+#include "Hal8192CUHWImg.h"
+
+#ifdef CONFIG_BT_COEXISTENCE
+// =================== v84 TSMC COMMON 2012-04-13 =======================
+u8 Rtl8192CUFwTSMCImgArray[TSMCImgArrayLength] = {
+0xc1,0x88,0x02,0x00,0x54,0x00,0x01,0x00,0x04,0x13,0x11,0x07,0x3a,0x3d,0x00,0x00,
+0x58,0x97,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x02,0x43,0xba,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x02,0x50,0xa1,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x02,0x57,0x91,0x00,0x00,0x00,0x00,0x00,0xa1,0xe8,0x00,0x00,0x00,
+0x05,0x04,0x03,0x02,0x00,0x03,0x06,0x05,0x04,0x03,0x00,0x04,0x06,0x05,0x04,0x02,
+0x00,0x04,0x08,0x07,0x06,0x04,0x00,0x06,0x0a,0x09,0x08,0x06,0x00,0x08,0x0a,0x09,
+0x08,0x04,0x00,0x08,0x0a,0x09,0x08,0x02,0x00,0x08,0x0a,0x09,0x08,0x00,0x00,0x08,
+0x12,0x11,0x10,0x08,0x00,0x10,0x1a,0x19,0x18,0x10,0x00,0x18,0x22,0x21,0x20,0x18,
+0x00,0x20,0x22,0x21,0x20,0x10,0x00,0x20,0x22,0x21,0x20,0x08,0x00,0x20,0x22,0x21,
+0x1c,0x08,0x00,0x20,0x22,0x21,0x14,0x08,0x00,0x20,0x22,0x20,0x18,0x08,0x00,0x20,
+0x31,0x30,0x20,0x10,0x00,0x30,0x31,0x30,0x18,0x00,0x00,0x30,0x31,0x2f,0x10,0x10,
+0x00,0x30,0x31,0x2c,0x10,0x10,0x00,0x30,0x31,0x28,0x10,0x00,0x00,0x30,0x31,0x20,
+0x10,0x00,0x00,0x30,0x31,0x10,0x10,0x00,0x00,0x30,0x04,0x04,0x04,0x05,0x04,0x04,
+0x04,0x05,0x05,0x05,0x06,0x06,0x04,0x04,0x04,0x05,0x05,0x05,0x06,0x06,0x04,0x04,
+0x05,0x05,0x05,0x05,0x06,0x06,0x04,0x04,0x05,0x05,0x05,0x05,0x06,0x07,0x0a,0x0b,
+0x0d,0x10,0x04,0x05,0x05,0x06,0x06,0x09,0x0c,0x11,0x08,0x08,0x09,0x09,0x0a,0x0c,
+0x10,0x11,0x04,0x04,0x04,0x05,0x04,0x04,0x05,0x07,0x07,0x07,0x08,0x0a,0x04,0x04,
+0x04,0x04,0x06,0x0a,0x0b,0x0d,0x05,0x05,0x07,0x07,0x08,0x0b,0x0d,0x0f,0x04,0x04,
+0x04,0x05,0x07,0x07,0x09,0x09,0x0c,0x0e,0x10,0x12,0x04,0x04,0x05,0x05,0x06,0x0a,
+0x11,0x13,0x09,0x09,0x09,0x09,0x0c,0x0e,0x11,0x13,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x24,0x26,0x2a,0x18,0x1a,0x1d,0x1f,0x21,0x27,0x29,0x2a,0x00,0x00,
+0x00,0x1f,0x23,0x28,0x2a,0x2c,0x00,0x04,0x00,0x04,0x00,0x08,0x00,0x10,0x00,0x18,
+0x00,0x24,0x00,0x30,0x00,0x48,0x00,0x60,0x00,0x90,0x00,0xc0,0x00,0xd8,0x00,0x50,
+0x00,0x78,0x00,0xa0,0x00,0xc8,0x01,0x40,0x01,0x90,0x01,0xe0,0x02,0x30,0x01,0x2c,
+0x01,0x40,0x01,0xe0,0x02,0xd0,0x03,0xe8,0x04,0xb0,0x06,0x40,0x07,0xd0,0x00,0x02,
+0x00,0x02,0x00,0x04,0x00,0x08,0x00,0x0c,0x00,0x12,0x00,0x18,0x00,0x24,0x00,0x30,
+0x00,0x48,0x00,0x60,0x00,0x6c,0x00,0x28,0x00,0x3c,0x00,0x50,0x00,0x64,0x00,0xa0,
+0x00,0xc8,0x00,0xf0,0x01,0x18,0x00,0x64,0x00,0xa0,0x00,0xf0,0x01,0x68,0x01,0xf4,
+0x02,0x58,0x03,0x20,0x03,0xe8,0x02,0x02,0x02,0x02,0x02,0x02,0x03,0x03,0x04,0x04,
+0x05,0x07,0x04,0x04,0x07,0x0a,0x0a,0x0c,0x0c,0x12,0x05,0x07,0x07,0x08,0x0b,0x12,
+0x24,0x3c,0x01,0x01,0x01,0x01,0x01,0x02,0x03,0x04,0x05,0x06,0x07,0x08,0x01,0x02,
+0x03,0x04,0x05,0x06,0x07,0x08,0x05,0x06,0x07,0x08,0x09,0x0a,0x0b,0x0c,0x20,0x1e,
+0x1c,0x18,0x10,0x18,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0xbb,0x01,0x0c,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe0,0x22,0x50,
+0x06,0xe9,0x25,0x82,0xf8,0xe6,0x22,0xbb,0xfe,0x06,0xe9,0x25,0x82,0xf8,0xe2,0x22,
+0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe4,0x93,0x22,0xbb,0x01,0x06,
+0x89,0x82,0x8a,0x83,0xf0,0x22,0x50,0x02,0xf7,0x22,0xbb,0xfe,0x01,0xf3,0x22,0xf8,
+0xbb,0x01,0x0d,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe8,0xf0,0x22,
+0x50,0x06,0xe9,0x25,0x82,0xc8,0xf6,0x22,0xbb,0xfe,0x05,0xe9,0x25,0x82,0xc8,0xf2,
+0x22,0xc5,0xf0,0xf8,0xa3,0xe0,0x28,0xf0,0xc5,0xf0,0xf8,0xe5,0x82,0x15,0x82,0x70,
+0x02,0x15,0x83,0xe0,0x38,0xf0,0x22,0xbb,0x01,0x0a,0x89,0x82,0x8a,0x83,0xe0,0xf5,
+0xf0,0xa3,0xe0,0x22,0x50,0x06,0x87,0xf0,0x09,0xe7,0x19,0x22,0xbb,0xfe,0x07,0xe3,
+0xf5,0xf0,0x09,0xe3,0x19,0x22,0x89,0x82,0x8a,0x83,0xe4,0x93,0xf5,0xf0,0x74,0x01,
+0x93,0x22,0xbb,0x01,0x10,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe0,
+0xf5,0xf0,0xa3,0xe0,0x22,0x50,0x09,0xe9,0x25,0x82,0xf8,0x86,0xf0,0x08,0xe6,0x22,
+0xbb,0xfe,0x0a,0xe9,0x25,0x82,0xf8,0xe2,0xf5,0xf0,0x08,0xe2,0x22,0xe5,0x83,0x2a,
+0xf5,0x83,0xe9,0x93,0xf5,0xf0,0xa3,0xe9,0x93,0x22,0xbb,0x01,0x0a,0x89,0x82,0x8a,
+0x83,0xf0,0xe5,0xf0,0xa3,0xf0,0x22,0x50,0x06,0xf7,0x09,0xa7,0xf0,0x19,0x22,0xbb,
+0xfe,0x06,0xf3,0xe5,0xf0,0x09,0xf3,0x19,0x22,0xf8,0xbb,0x01,0x11,0xe5,0x82,0x29,
+0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe8,0xf0,0xe5,0xf0,0xa3,0xf0,0x22,0x50,0x09,
+0xe9,0x25,0x82,0xc8,0xf6,0x08,0xa6,0xf0,0x22,0xbb,0xfe,0x09,0xe9,0x25,0x82,0xc8,
+0xf2,0xe5,0xf0,0x08,0xf2,0x22,0xef,0x4b,0xff,0xee,0x4a,0xfe,0xed,0x49,0xfd,0xec,
+0x48,0xfc,0x22,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x22,0xa4,
+0x25,0x82,0xf5,0x82,0xe5,0xf0,0x35,0x83,0xf5,0x83,0x22,0xe0,0xfb,0xa3,0xe0,0xfa,
+0xa3,0xe0,0xf9,0x22,0xf8,0xe0,0xfb,0xa3,0xa3,0xe0,0xf9,0x25,0xf0,0xf0,0xe5,0x82,
+0x15,0x82,0x70,0x02,0x15,0x83,0xe0,0xfa,0x38,0xf0,0x22,0xeb,0xf0,0xa3,0xea,0xf0,
+0xa3,0xe9,0xf0,0x22,0xd0,0x83,0xd0,0x82,0xf8,0xe4,0x93,0x70,0x12,0x74,0x01,0x93,
+0x70,0x0d,0xa3,0xa3,0x93,0xf8,0x74,0x01,0x93,0xf5,0x82,0x88,0x83,0xe4,0x73,0x74,
+0x02,0x93,0x68,0x60,0xef,0xa3,0xa3,0xa3,0x80,0xdf,0x02,0x43,0xf8,0x02,0x48,0x29,
+0xe4,0x93,0xa3,0xf8,0xe4,0x93,0xa3,0x40,0x03,0xf6,0x80,0x01,0xf2,0x08,0xdf,0xf4,
+0x80,0x29,0xe4,0x93,0xa3,0xf8,0x54,0x07,0x24,0x0c,0xc8,0xc3,0x33,0xc4,0x54,0x0f,
+0x44,0x20,0xc8,0x83,0x40,0x04,0xf4,0x56,0x80,0x01,0x46,0xf6,0xdf,0xe4,0x80,0x0b,
+0x01,0x02,0x04,0x08,0x10,0x20,0x40,0x80,0x90,0x44,0x3d,0xe4,0x7e,0x01,0x93,0x60,
+0xbc,0xa3,0xff,0x54,0x3f,0x30,0xe5,0x09,0x54,0x1f,0xfe,0xe4,0x93,0xa3,0x60,0x01,
+0x0e,0xcf,0x54,0xc0,0x25,0xe0,0x60,0xa8,0x40,0xb8,0xe4,0x93,0xa3,0xfa,0xe4,0x93,
+0xa3,0xf8,0xe4,0x93,0xa3,0xc8,0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,0xf0,0xa3,0xc8,
+0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,0xdf,0xe9,0xde,0xe7,0x80,0xbe,0x41,0x9e,0x77,
+0x00,0x41,0x9e,0xae,0x00,0x41,0x9e,0x54,0x80,0x41,0x9e,0xb0,0x00,0x00,0xf0,0x90,
+0x9e,0x5d,0xe0,0x90,0x9e,0x86,0xf0,0xe4,0xfb,0xfd,0x7f,0x54,0x7e,0x01,0xd3,0x10,
+0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x85,0xe0,0xfb,0xa3,0xe0,0xf5,0x44,0xe4,0xf5,
+0x45,0x12,0x35,0xab,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x01,0x5f,0xe4,0xf0,0x90,0x01,
+0x3c,0x74,0x08,0xf0,0xe4,0x90,0x9e,0x85,0xf0,0x90,0x9e,0x5b,0xe0,0x90,0x9e,0x86,
+0xf0,0xe4,0xfb,0xfd,0x7f,0x5c,0x7e,0x01,0x91,0x5e,0x90,0x01,0x5f,0x74,0x05,0xf0,
+0x90,0x06,0x92,0x74,0x02,0xf0,0x90,0x9e,0x63,0x14,0xf0,0xe5,0x61,0x54,0x0f,0xc3,
+0x94,0x0c,0x50,0x03,0x12,0x54,0xe3,0x22,0x8f,0x82,0x8e,0x83,0xa3,0xa3,0xa3,0xe4,
+0xf0,0x22,0xe4,0xf5,0x65,0x7f,0x60,0x7e,0x01,0x80,0xed,0x7d,0x01,0xaf,0x62,0x02,
+0x54,0xe7,0xb1,0xb0,0xbf,0x01,0x12,0x90,0x9e,0x79,0xe0,0xff,0xe4,0xfd,0xf1,0x79,
+0x12,0x5f,0xf7,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0xb1,0xb0,0xbf,0x01,0x0f,0x90,
+0x02,0x09,0xe0,0xff,0x7d,0x01,0xf1,0x79,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0x22,
+0x22,0x22,0x00,0x02,0x45,0x03,0x02,0x45,0x06,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
+0x8b,0x20,0x8a,0x21,0x89,0x22,0x90,0x9e,0x87,0x71,0x8b,0xab,0x23,0xaa,0x24,0xa9,
+0x25,0x90,0x9e,0x8a,0x71,0x8b,0xaf,0x26,0x15,0x26,0xef,0x60,0x1b,0x90,0x9e,0x8a,
+0xe4,0x75,0xf0,0x01,0x71,0x74,0x12,0x29,0xd9,0xff,0x90,0x9e,0x87,0xe4,0x75,0xf0,
+0x01,0x71,0x74,0xef,0x51,0x4d,0x80,0xde,0xab,0x20,0xaa,0x21,0xa9,0x22,0xd0,0xd0,
+0x92,0xaf,0x22,0x90,0x9e,0x11,0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0x90,0x06,0xa9,
+0xe0,0x90,0x9e,0x10,0xf0,0xe0,0x54,0xc0,0x70,0x08,0x53,0x64,0xfe,0x53,0x64,0xfd,
+0x91,0xcb,0x90,0x9e,0x10,0xe0,0x30,0xe6,0x13,0x43,0x64,0x01,0x90,0x9e,0x66,0xe0,
+0x64,0x02,0x60,0x04,0x91,0xd2,0x80,0x07,0x91,0x79,0x80,0x03,0x53,0x64,0xfe,0x90,
+0x9e,0x10,0xe0,0x30,0xe7,0x16,0x43,0x64,0x02,0xe4,0x90,0x9e,0x85,0x91,0x4e,0x90,
+0x01,0x57,0x74,0x05,0xf0,0x90,0x9e,0x67,0x74,0x01,0xf0,0x22,0x53,0x64,0xfd,0x22,
+0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x01,0xc4,0x74,0xb0,0xf0,0x74,0x45,0xa3,
+0xf0,0x90,0x04,0x1d,0xe0,0x60,0x1a,0x90,0x05,0x22,0xe0,0x54,0x90,0x60,0x07,0x90,
+0x01,0xc6,0xe0,0x44,0x40,0xf0,0x90,0x01,0xc7,0xe0,0x30,0xe1,0xe4,0x7f,0x00,0x80,
+0x02,0x7f,0x01,0xd0,0xd0,0x92,0xaf,0x22,0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,
+0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,
+0x05,0xc0,0x06,0xc0,0x07,0x75,0x13,0x00,0x90,0x01,0xc4,0x74,0xe8,0xf0,0x74,0x45,
+0xa3,0xf0,0x53,0x91,0xdf,0x90,0x01,0x3c,0xe0,0x55,0x30,0xf5,0x34,0xa3,0xe0,0x55,
+0x31,0xf5,0x35,0xa3,0xe0,0x55,0x32,0xf5,0x36,0xa3,0xe0,0x55,0x33,0xf5,0x37,0xe5,
+0x34,0x30,0xe0,0x06,0x90,0x01,0x3c,0x74,0x01,0xf0,0xe5,0x34,0x30,0xe1,0x09,0x90,
+0x01,0x3c,0x74,0x02,0xf0,0x12,0x61,0xc9,0xe5,0x34,0x30,0xe2,0x38,0x90,0x01,0x3c,
+0x74,0x04,0xf0,0x90,0x06,0x92,0xe0,0x30,0xe0,0x24,0x90,0x9e,0x85,0xe4,0xf0,0x90,
+0x9e,0x5b,0xe0,0x90,0x9e,0x86,0xf0,0xe4,0xfb,0xfd,0x7f,0x58,0x7e,0x01,0x91,0x5e,
+0x90,0x01,0x5b,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x01,0xf0,0x80,0x07,0x90,0x9e,
+0x64,0xe4,0xf0,0x91,0xcb,0xe5,0x34,0x30,0xe3,0x38,0x90,0x01,0x3c,0x74,0x08,0xf0,
+0x90,0x06,0x92,0xe0,0x30,0xe1,0x24,0x90,0x9e,0x85,0xe4,0xf0,0x90,0x9e,0x5b,0xe0,
+0x90,0x9e,0x86,0xf0,0xe4,0xfb,0xfd,0x7f,0x5c,0x7e,0x01,0x91,0x5e,0x90,0x01,0x5f,
+0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x02,0xf0,0x80,0x07,0x90,0x9e,0x63,0xe4,0xf0,
+0x91,0xcb,0xe5,0x34,0x30,0xe4,0x09,0x90,0x01,0x3c,0x74,0x10,0xf0,0x12,0x4b,0xfb,
+0xe5,0x34,0x30,0xe5,0x09,0x90,0x01,0x3c,0x74,0x20,0xf0,0x12,0x4c,0x3d,0xe5,0x35,
+0x30,0xe0,0x44,0x90,0x01,0x3d,0x74,0x01,0xf0,0x90,0x01,0x2f,0xe0,0x44,0x7f,0xf0,
+0x90,0x00,0x83,0xe0,0x54,0x0f,0xf5,0x13,0xb4,0x01,0x02,0x80,0x1c,0xe5,0x13,0xb4,
+0x02,0x05,0x90,0x00,0x83,0x80,0x12,0xe5,0x13,0xb4,0x04,0x05,0x90,0x00,0x83,0x80,
+0x08,0xe5,0x13,0xb4,0x0c,0x06,0x90,0x00,0x83,0xe0,0xf5,0x62,0x90,0x01,0xbb,0xe5,
+0x62,0xf0,0x12,0x60,0xc0,0x91,0xcb,0xe5,0x35,0x30,0xe2,0x06,0x90,0x01,0x3d,0x74,
+0x04,0xf0,0xe5,0x35,0x30,0xe4,0x06,0x90,0x01,0x3d,0x74,0x10,0xf0,0xe5,0x36,0x30,
+0xe0,0x06,0x90,0x01,0x3e,0x74,0x01,0xf0,0xe5,0x36,0x30,0xe1,0x06,0x90,0x01,0x3e,
+0x74,0x02,0xf0,0x74,0xe8,0x04,0x90,0x01,0xc4,0xf0,0x74,0x45,0xa3,0xf0,0xd0,0x07,
+0xd0,0x06,0xd0,0x05,0xd0,0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,
+0xd0,0x82,0xd0,0x83,0xd0,0xf0,0xd0,0xe0,0x32,0x90,0x9e,0x98,0xef,0xf0,0xa3,0xed,
+0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xe5,0x63,0x60,0x05,0xe4,0xff,0x12,0x54,0x97,0x90,
+0x9e,0x98,0xe0,0x30,0xe0,0x09,0x90,0x9e,0x9a,0xe4,0xf0,0xa3,0x74,0x80,0xf0,0x90,
+0x9e,0x98,0xe0,0xff,0xc3,0x13,0x90,0xfd,0x10,0xf0,0x90,0x04,0x25,0xef,0xf0,0x90,
+0x9e,0x99,0xe0,0x60,0x1f,0xa3,0xa3,0xe0,0xff,0x24,0x0f,0xf5,0x82,0xe4,0x34,0xfc,
+0xf5,0x83,0xe0,0x44,0x80,0xf0,0x74,0x10,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,
+0xe0,0x44,0x80,0xf0,0x90,0x9e,0x9a,0xa3,0xe0,0xff,0xfd,0x24,0x08,0xf5,0x82,0xe4,
+0x34,0xfc,0xf5,0x83,0xe4,0xf0,0x74,0x09,0x2d,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,
+0xe0,0x54,0xf0,0xf0,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,
+0xf7,0xf0,0x90,0x9e,0x9a,0xe0,0xfe,0xa3,0xe0,0xff,0x22,0x75,0x28,0x33,0xe4,0xf5,
+0x29,0x75,0x2a,0x07,0xf5,0x2b,0x90,0x01,0x30,0xe5,0x28,0xf0,0xa3,0xe5,0x29,0xf0,
+0xa3,0xe5,0x2a,0xf0,0xa3,0xe5,0x2b,0xf0,0x22,0xe4,0x90,0x9e,0x16,0xf0,0xa3,0xf0,
+0x75,0x8e,0x02,0xf1,0xa1,0xf1,0xe9,0x90,0x9e,0x7e,0xef,0xf0,0xf1,0xdd,0x90,0x9e,
+0x80,0xef,0xf0,0xf1,0xf6,0x90,0x9e,0x75,0xee,0xf0,0xa3,0xef,0xf0,0xe4,0xf5,0x57,
+0x12,0x6e,0x77,0xf1,0xd4,0x12,0x60,0x4b,0x12,0x32,0x3d,0xf1,0xc9,0x11,0x0b,0x12,
+0x50,0x0e,0xf1,0xcd,0xf1,0xb1,0x12,0x44,0xff,0xf1,0x45,0x90,0x9e,0x18,0xe5,0xd9,
+0xf0,0x11,0xd0,0xc2,0xaf,0x90,0x00,0x80,0xe0,0x44,0x40,0xf0,0xb1,0x45,0x75,0xe8,
+0x03,0x43,0xa8,0x85,0xd2,0xaf,0x90,0x9e,0x16,0xe0,0x64,0x01,0xf0,0x24,0x29,0x90,
+0x01,0xc4,0xf0,0x74,0x48,0xa3,0xf0,0xe5,0x57,0x30,0xe4,0x0a,0xc2,0xaf,0x53,0x57,
+0xef,0xd2,0xaf,0x12,0x58,0x74,0xe5,0x57,0x30,0xe6,0x17,0xc2,0xaf,0x53,0x57,0xbf,
+0xd2,0xaf,0x12,0x67,0xa1,0x90,0x9e,0x43,0xe0,0xff,0x60,0x03,0xb4,0x01,0x03,0x12,
+0x7b,0x5c,0x90,0x9e,0x43,0xe0,0x70,0x03,0x12,0x7c,0x5f,0x12,0x73,0x85,0x80,0xb6,
+0x90,0x01,0x3c,0x74,0xff,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x01,0x34,0xf0,0xa3,0xf0,
+0xa3,0xf0,0xa3,0xf0,0xfd,0x7f,0x54,0x31,0x05,0x7d,0xff,0x7f,0x55,0x31,0x05,0x7d,
+0xff,0x7f,0x56,0x31,0x05,0x7d,0xff,0x7f,0x57,0x80,0x0a,0xf0,0x90,0x00,0x45,0xe0,
+0x54,0xfe,0xfd,0x7f,0x45,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x8f,0x82,0x75,0x83,
+0x00,0xed,0xf0,0xb1,0x45,0xd0,0xd0,0x92,0xaf,0x22,0xef,0x14,0x60,0x30,0x14,0x60,
+0x66,0x24,0x02,0x60,0x02,0x21,0xc1,0x90,0x9e,0x3f,0x74,0x02,0xf0,0x90,0x00,0x48,
+0xe0,0x44,0x0c,0xfd,0x7f,0x48,0x31,0x05,0x90,0x00,0x47,0xe0,0x44,0x08,0xfd,0x7f,
+0x47,0x31,0x05,0x90,0x00,0x45,0xe0,0x44,0x10,0xfd,0x7f,0x45,0x80,0x71,0xe4,0x90,
+0x9e,0x3f,0xf0,0x90,0x9e,0x3b,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
+0x80,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x00,0x45,0xe0,0x44,0xef,0xfd,0x7f,0x45,0x31,
+0x05,0x90,0x00,0x45,0xe0,0x54,0xef,0xfd,0x7f,0x45,0x31,0x05,0x90,0x00,0x46,0xe0,
+0x44,0x10,0xfd,0x7f,0x46,0x80,0x38,0x90,0x9e,0x3f,0x74,0x01,0xf0,0x90,0x9e,0x45,
+0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,
+0x90,0x00,0x45,0xe0,0x44,0x20,0xfd,0x7f,0x45,0x31,0x05,0x90,0x00,0x45,0xe0,0x44,
+0x10,0xfd,0x7f,0x45,0x31,0x05,0x90,0x00,0x46,0xe0,0x44,0x10,0xfd,0x7f,0x46,0x31,
+0x05,0x22,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x9e,0x41,0xf0,0x90,0x00,0x01,0x12,
+0x42,0x20,0x25,0xe0,0x25,0xe0,0x90,0x9e,0x40,0xf0,0x12,0x29,0xd9,0x25,0xe0,0x25,
+0xe0,0x90,0x9e,0x44,0xf0,0x90,0x05,0x60,0xe0,0x90,0x9e,0x4f,0xf0,0x90,0x05,0x61,
+0xe0,0x90,0x9e,0x50,0xf0,0x90,0x05,0x62,0xe0,0x90,0x9e,0x51,0xf0,0x90,0x05,0x63,
+0xe0,0x90,0x9e,0x52,0xf0,0xa2,0xaf,0xe4,0x33,0x90,0x9e,0x24,0xf0,0xc2,0xaf,0x90,
+0x9e,0x40,0xe0,0xff,0x91,0xf0,0x90,0x9e,0x24,0xe0,0x24,0xff,0x92,0xaf,0x90,0x9e,
+0x41,0xe0,0x70,0x02,0x41,0xc8,0x90,0x9e,0x40,0xe0,0x70,0x02,0x41,0xc8,0x90,0x9e,
+0x44,0xe0,0x70,0x02,0x41,0xc8,0xa2,0xaf,0xe4,0x33,0x90,0x9e,0x24,0xf0,0xc2,0xaf,
+0x90,0x9e,0x53,0x74,0x01,0xf0,0x90,0x9e,0x24,0xe0,0x24,0xff,0x92,0xaf,0x11,0xfc,
+0x90,0x00,0x46,0xe0,0x44,0x01,0xfd,0x7f,0x46,0x31,0x05,0x90,0x9e,0x39,0xe0,0x60,
+0x15,0x90,0x9e,0x45,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,
+0x08,0x12,0x2f,0xd9,0x80,0x06,0x90,0x05,0x22,0x74,0x7f,0xf0,0x90,0x00,0x45,0xe0,
+0x54,0xef,0xfd,0x7f,0x45,0x31,0x05,0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,0x9e,
+0x4f,0xe0,0x90,0x05,0x84,0xf0,0x90,0x9e,0x50,0xe0,0x90,0x05,0x85,0xf0,0x90,0x9e,
+0x51,0xe0,0x90,0x05,0x86,0xf0,0x90,0x9e,0x52,0xe0,0x90,0x05,0x87,0xf0,0xa2,0xaf,
+0xe4,0x33,0x90,0x9e,0x24,0xf0,0xc2,0xaf,0x90,0x01,0x3c,0xe0,0x44,0x20,0xf0,0x7d,
+0x20,0xe4,0xff,0x12,0x37,0x00,0x80,0x2b,0x90,0x9e,0x41,0xe0,0x70,0x2d,0x90,0x9e,
+0x53,0x11,0xfb,0x90,0x00,0x46,0xe0,0x54,0xfe,0xfd,0x7f,0x46,0x31,0x05,0x90,0x05,
+0x22,0xe4,0xf0,0xa2,0xaf,0x33,0x90,0x9e,0x24,0xf0,0xc2,0xaf,0x7d,0x20,0xe4,0xff,
+0x12,0x36,0x92,0x90,0x9e,0x24,0xe0,0x24,0xff,0x92,0xaf,0x22,0x8b,0x14,0x8a,0x15,
+0x89,0x16,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x9e,0x42,0xf0,0xe0,0x30,0xe0,0x4b,
+0x90,0x9e,0x39,0x74,0x01,0xf0,0x7f,0x80,0x7e,0x08,0x12,0x27,0xde,0x90,0x9e,0x3b,
+0x12,0x2a,0x7f,0xab,0x14,0xaa,0x15,0xa9,0x16,0x90,0x00,0x01,0x12,0x42,0x20,0xff,
+0xe4,0xfc,0xfd,0xfe,0x78,0x1a,0x12,0x2a,0x6c,0xa8,0x04,0xa9,0x05,0xaa,0x06,0xab,
+0x07,0x90,0x9e,0x3b,0x12,0x43,0x53,0xec,0x54,0x03,0xfc,0x12,0x43,0x46,0x90,0x9e,
+0x45,0x12,0x2a,0x7f,0x90,0x05,0x22,0xe4,0xf0,0x80,0x2d,0xe4,0x90,0x9e,0x39,0xf0,
+0x7f,0x80,0x7e,0x08,0x12,0x27,0xde,0xec,0x54,0x03,0xfc,0xec,0x44,0xc0,0xfc,0x90,
+0x9e,0x3b,0x12,0x2a,0x7f,0x90,0x9e,0x3b,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,
+0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9e,0x42,0xe0,0x30,0xe1,0x19,0x7d,
+0x0c,0x7f,0x47,0x31,0x05,0x90,0x00,0x48,0xe0,0x44,0x0c,0xfd,0x7f,0x48,0x31,0x05,
+0x90,0x00,0x46,0xe0,0x44,0x10,0x80,0x1c,0x90,0x00,0x47,0xe0,0x54,0xf3,0xfd,0x7f,
+0x47,0x31,0x05,0x90,0x00,0x48,0xe0,0x54,0xf3,0xfd,0x7f,0x48,0x31,0x05,0x90,0x00,
+0x46,0xe0,0x54,0xef,0xfd,0x7f,0x46,0x31,0x05,0xe4,0x90,0x9e,0x3f,0xf0,0x22,0x90,
+0x01,0x30,0xe4,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x01,0x38,0xf0,0xa3,0xf0,
+0xa3,0xf0,0xa3,0xf0,0xfd,0x7f,0x50,0x31,0x05,0xe4,0xfd,0x7f,0x51,0x31,0x05,0xe4,
+0xfd,0x7f,0x52,0x31,0x05,0xe4,0xfd,0x7f,0x53,0x21,0x05,0xe5,0x65,0x64,0x01,0x70,
+0x3b,0xd1,0x85,0xbf,0x01,0x04,0x7f,0x01,0xd1,0x79,0x90,0x00,0x46,0xe0,0x44,0x04,
+0xfd,0x7f,0x46,0x31,0x05,0x90,0x00,0x44,0xe0,0x54,0xfb,0xfd,0x7f,0x44,0x31,0x05,
+0x90,0x00,0x46,0xe0,0x54,0xfb,0xfd,0x7f,0x46,0x31,0x05,0x7f,0x02,0xd1,0xa1,0x8f,
+0x69,0x90,0x01,0xc9,0xe5,0x69,0xf0,0xb4,0x01,0x02,0xd1,0x19,0x22,0x90,0x9e,0x41,
+0xe0,0x64,0x01,0x60,0x02,0x81,0xef,0x90,0x00,0x46,0xe0,0x44,0x01,0xfd,0x7f,0x46,
+0x31,0x05,0x90,0x9e,0x53,0xe0,0x70,0x31,0x90,0x9e,0x39,0xe0,0x60,0x15,0x90,0x9e,
+0x45,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,
+0xd9,0x80,0x06,0x90,0x05,0x22,0x74,0x7f,0xf0,0x90,0x9e,0x40,0xe0,0xff,0x91,0xf0,
+0x90,0x9e,0x53,0x74,0x01,0x11,0xfb,0x80,0x3f,0x90,0x9e,0x53,0xe0,0x64,0x01,0x70,
+0x37,0x90,0x9e,0x44,0xe0,0xff,0x91,0xf0,0xe4,0x90,0x9e,0x53,0xf0,0x90,0x00,0x45,
+0xe0,0x44,0x01,0xfd,0x7f,0x45,0x31,0x05,0x90,0x9e,0x39,0xe0,0x60,0x15,0x90,0x9e,
+0x3b,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,
+0xd9,0x80,0x05,0x90,0x05,0x22,0xe4,0xf0,0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,
+0x9e,0x4f,0xe0,0x90,0x05,0x84,0xf0,0x90,0x9e,0x50,0xe0,0x90,0x05,0x85,0xf0,0x90,
+0x9e,0x51,0xe0,0x90,0x05,0x86,0xf0,0x90,0x9e,0x52,0xe0,0x90,0x05,0x87,0xf0,0x22,
+0x90,0x05,0x60,0xe0,0x90,0x9e,0x4f,0xf0,0x90,0x05,0x61,0xe0,0x90,0x9e,0x50,0xf0,
+0x90,0x05,0x62,0xe0,0x90,0x9e,0x51,0xf0,0x90,0x05,0x63,0xe0,0x90,0x9e,0x52,0xf0,
+0xc3,0x74,0xff,0x9f,0xfe,0x90,0x9e,0x50,0xe0,0xd3,0x9e,0x40,0x1e,0xe0,0x2f,0xf0,
+0xa3,0xe0,0xb4,0xff,0x0f,0xe4,0xf0,0xa3,0xe0,0xb4,0xff,0x03,0xe4,0xf0,0x22,0x90,
+0x9e,0x52,0x80,0x03,0x90,0x9e,0x51,0xe0,0x04,0xf0,0x22,0x90,0x9e,0x50,0xe0,0x2f,
+0xf0,0x22,0xe0,0x5f,0xf0,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x7f,0x10,0xdf,0xfe,
+0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x2a,0xed,
+0xf0,0x90,0x9e,0x29,0xef,0xf0,0xd3,0x94,0x07,0x50,0x4e,0xa3,0xe0,0x70,0x1a,0x90,
+0x9e,0x29,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,
+0xff,0x90,0x00,0x47,0xe0,0x5f,0xf0,0x80,0x17,0x90,0x9e,0x29,0xe0,0xff,0x74,0x01,
+0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x47,0xe0,0x4f,0xf0,
+0xb1,0x45,0x90,0x9e,0x29,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,
+0xd8,0xfc,0xf4,0xff,0x90,0x00,0x46,0x80,0x59,0x90,0x9e,0x29,0xe0,0x24,0xf8,0xf0,
+0xa3,0xe0,0x70,0x1d,0x90,0x9e,0x29,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,
+0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0x80,
+0x1a,0x90,0x9e,0x29,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,
+0xfc,0xc4,0x54,0xf0,0xff,0x90,0x00,0x43,0xe0,0x4f,0xf0,0xb1,0x45,0x90,0x9e,0x29,
+0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,
+0x00,0x43,0xb1,0x42,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x00,0x49,0xe0,0x90,0x9e,0xb1,
+0xf0,0xe0,0x54,0x0f,0xf0,0x44,0xf0,0xfd,0x7f,0x49,0x31,0x05,0x90,0x9e,0xb1,0xe0,
+0x44,0xb0,0xfd,0x7f,0x49,0x21,0x05,0x90,0x9e,0x27,0xee,0xf0,0xa3,0xef,0xf0,0x75,
+0x65,0x01,0x8e,0x66,0xf5,0x67,0xe4,0xfd,0x7f,0x0b,0xb1,0x55,0xe4,0xfd,0x7f,0x02,
+0xb1,0x55,0xd1,0x85,0xe4,0xff,0xd1,0x79,0xe4,0xf5,0x69,0x90,0x01,0xc9,0xe5,0x69,
+0xf0,0x90,0x9e,0x27,0xe0,0xfc,0xa3,0xe0,0xfd,0xec,0xfb,0x8d,0x44,0xe4,0xf5,0x45,
+0x7d,0x01,0x7f,0x60,0x7e,0x01,0x02,0x35,0xab,0x90,0x01,0xca,0xe5,0x68,0xf0,0xef,
+0x60,0x02,0xd1,0x19,0x22,0x7f,0x0b,0xd1,0xa1,0xef,0x65,0x68,0x60,0x10,0xe5,0x68,
+0xb4,0x01,0x05,0xe4,0xf5,0x68,0x80,0x03,0x75,0x68,0x01,0x7f,0x01,0x22,0x7f,0x00,
+0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0xb2,0xef,0xf0,0xd3,0x94,0x07,
+0x50,0x43,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,
+0xff,0x90,0x00,0x46,0xb1,0x42,0x90,0x9e,0xb2,0xe0,0xfd,0x74,0x01,0x7e,0x00,0xa8,
+0x05,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x00,0x44,0xe0,
+0xfb,0xe4,0xfe,0xef,0x5b,0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,0x13,0xce,0x13,
+0xd8,0xf8,0xff,0x80,0x4b,0x90,0x9e,0xb2,0xe0,0x24,0xf8,0xf0,0xe0,0xff,0x74,0x01,
+0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,
+0xf0,0xb1,0x45,0x90,0x9e,0xb2,0xe0,0xfd,0x74,0x01,0x7e,0x00,0xa8,0x05,0x08,0x80,
+0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x00,0x42,0xe0,0xfb,0xe4,0xfe,
+0xef,0x5b,0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,0x13,0xce,0x13,0xd8,0xf8,0xff,
+0xd0,0xd0,0x92,0xaf,0x22,0xe4,0xfd,0x7f,0x45,0x31,0x05,0x90,0x04,0xfd,0xe4,0xf0,
+0xa3,0xf0,0x90,0x9e,0x43,0xf0,0x90,0x9e,0x49,0xf0,0x90,0x9e,0x4c,0xf0,0x90,0x9e,
+0x4a,0xf0,0x90,0x9e,0x4d,0xf0,0x90,0x9e,0x4b,0xf0,0x90,0x9e,0x4e,0xf0,0x90,0x9e,
+0x35,0x04,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x9e,0x3a,0xf0,0x90,0x9e,
+0x3f,0xf0,0x90,0x9e,0x41,0xf0,0x90,0x9e,0x53,0xf0,0x90,0x9e,0x44,0xf0,0x90,0x9e,
+0x40,0xf0,0x90,0x9e,0x39,0xf0,0x90,0x00,0x51,0xe0,0x44,0xc0,0xfd,0x7f,0x51,0x21,
+0x05,0xe4,0x90,0x9e,0x7d,0xf0,0x90,0x00,0x80,0xe0,0x44,0x80,0xfd,0x7f,0x80,0x21,
+0x05,0x75,0x30,0x1f,0x75,0x31,0x01,0xe4,0xf5,0x32,0x90,0x01,0x38,0xe5,0x30,0xf0,
+0xa3,0xe5,0x31,0xf0,0xa3,0xe5,0x32,0xf0,0x22,0xe4,0xf5,0x68,0x22,0x90,0x01,0x64,
+0x74,0xa0,0xf0,0x22,0x90,0x9e,0x80,0xe0,0x90,0x9e,0x0f,0xf0,0x22,0x90,0x00,0xf3,
+0xe0,0x7f,0x00,0x30,0xe3,0x02,0x7f,0x01,0x22,0x90,0x00,0x02,0xe0,0x54,0xe0,0x7f,
+0x01,0x60,0x02,0x7f,0x00,0x22,0x90,0x9e,0x80,0xe0,0xb4,0x01,0x0c,0x90,0x00,0xf2,
+0xe0,0x30,0xe7,0x05,0x7e,0xfd,0x7f,0x33,0x22,0x7e,0xfd,0x7f,0x2f,0x22,0x90,0x00,
+0xf3,0xe0,0x30,0xe2,0x0d,0x90,0x05,0x41,0x74,0x10,0xf0,0x90,0x05,0x5a,0xf0,0xa3,
+0xe4,0xf0,0x22,0x90,0x01,0x02,0xe0,0x54,0x03,0xff,0xe0,0x54,0x0c,0x13,0x13,0x54,
+0x3f,0xfe,0xef,0x64,0x01,0x60,0x04,0xef,0xb4,0x03,0x10,0x90,0x9e,0x10,0x74,0x01,
+0xf0,0xa3,0x74,0x37,0xf0,0xa3,0x74,0x01,0xf0,0x80,0x1a,0xee,0x64,0x01,0x60,0x07,
+0xaf,0x06,0xee,0x64,0x03,0x70,0x49,0x90,0x9e,0x10,0x74,0x01,0xf0,0xa3,0x74,0x3d,
+0xf0,0xa3,0x74,0x40,0xf0,0x90,0x9e,0x10,0xe0,0xfe,0xa3,0xe0,0xff,0xf5,0x82,0x8e,
+0x83,0xe0,0xfd,0x90,0x9e,0x12,0xe0,0xfc,0xed,0x5c,0x60,0x0c,0x8f,0x82,0x8e,0x83,
+0xec,0xf0,0xe4,0x90,0x9e,0x77,0xf0,0x22,0x90,0x9e,0x77,0xe0,0x04,0xf0,0xe0,0xc3,
+0x94,0x0a,0x40,0x0c,0xe4,0xf0,0x90,0x04,0x19,0xe0,0x30,0xe0,0x03,0x12,0x44,0xea,
+0x22,0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,
+0xc0,0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,0x01,
+0xc4,0x74,0xa1,0xf0,0x74,0x50,0xa3,0xf0,0x90,0x01,0x34,0xe0,0x55,0x28,0xf5,0x2c,
+0xa3,0xe0,0x55,0x29,0xf5,0x2d,0xa3,0xe0,0x55,0x2a,0xf5,0x2e,0xa3,0xe0,0x55,0x2b,
+0xf5,0x2f,0xe5,0x2c,0x20,0xe0,0x02,0x41,0x46,0x90,0x01,0x34,0x74,0x01,0xf0,0x85,
+0xd1,0x4d,0x85,0xd2,0x4e,0x85,0xd3,0x4f,0x85,0xd4,0x50,0x85,0xd5,0x51,0x85,0xd6,
+0x52,0x85,0xd7,0x53,0x85,0xd9,0x54,0xe5,0x54,0x54,0x40,0xc3,0x13,0xff,0xe5,0x53,
+0x54,0x20,0x6f,0x70,0x02,0x21,0xf5,0xe5,0x54,0x30,0xe5,0x02,0x21,0xf5,0xe5,0x52,
+0x54,0x3f,0xf5,0x08,0xe5,0x4d,0x54,0x3f,0xf5,0x09,0xe5,0x51,0x54,0x1f,0xff,0xe5,
+0x08,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0x8f,0xf0,0x12,
+0x42,0x81,0xe5,0x53,0x54,0x1f,0xff,0xe5,0x08,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,
+0x34,0x93,0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x09,0xd3,0x94,0x04,0x40,
+0x03,0x75,0x09,0x04,0x75,0xf0,0x0a,0xe5,0x08,0x90,0x90,0x00,0x12,0x43,0x5f,0x75,
+0xf0,0x02,0xe5,0x09,0x12,0x43,0x5f,0xe0,0xfe,0xa3,0xe0,0xff,0xe5,0x53,0x54,0x1f,
+0x2f,0xff,0xe4,0x3e,0xfe,0x75,0xf0,0x0a,0xe5,0x08,0x90,0x90,0x00,0x12,0x43,0x5f,
+0x75,0xf0,0x02,0xe5,0x09,0x12,0x43,0x5f,0xee,0xf0,0xa3,0xef,0xf0,0xe5,0x54,0x20,
+0xe6,0x24,0xe5,0x53,0x54,0x1f,0xff,0xe5,0x08,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,
+0x34,0x98,0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x4f,0x30,0xe7,0x36,0xaf,
+0x08,0x12,0x63,0x51,0x80,0x2f,0xe5,0x53,0x54,0x1f,0xff,0xe5,0x08,0x25,0xe0,0x24,
+0x44,0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x4f,
+0x30,0xe7,0x12,0xe5,0x4f,0x54,0x7f,0xfd,0xe5,0x53,0x54,0x1f,0xf5,0x0d,0xab,0x09,
+0xaf,0x08,0x12,0x62,0xee,0xe5,0x63,0x14,0x24,0xfd,0x50,0x02,0x80,0x48,0x90,0x9e,
+0x66,0xe0,0x60,0x3a,0x90,0x01,0x5b,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x04,0xf0,0x71,
+0xc3,0xef,0x64,0x01,0x70,0x30,0x90,0x9e,0x85,0xf0,0x90,0x9e,0x5b,0xe0,0x90,0x9e,
+0x86,0xf0,0xe4,0xfb,0xfd,0x7f,0x58,0x7e,0x01,0x12,0x44,0x5e,0x90,0x01,0x5b,0x74,
+0x05,0xf0,0x90,0x06,0x92,0x74,0x01,0xf0,0x90,0x9e,0x64,0xf0,0x80,0x08,0x71,0xc3,
+0xbf,0x01,0x03,0x12,0x44,0xcb,0xe5,0x2c,0x30,0xe1,0x20,0x90,0x01,0x34,0x74,0x02,
+0xf0,0x85,0xd1,0x58,0x85,0xd2,0x59,0x85,0xd3,0x5a,0x85,0xd4,0x5b,0x85,0xd5,0x5c,
+0x85,0xd6,0x5d,0x85,0xd7,0x5e,0x85,0xd9,0x5f,0x71,0xd2,0xe5,0x2c,0x30,0xe3,0x06,
+0x90,0x01,0x34,0x74,0x08,0xf0,0xe5,0x2c,0x30,0xe4,0x09,0x90,0x01,0x34,0x74,0x10,
+0xf0,0x43,0x57,0x10,0xe5,0x2c,0x30,0xe5,0x26,0x90,0x01,0xcf,0xe0,0x30,0xe5,0x1f,
+0xe0,0x54,0xdf,0xf0,0x90,0x01,0x34,0x74,0x20,0xf0,0x75,0xa8,0x00,0x75,0xe8,0x00,
+0x12,0x4b,0xcf,0x90,0x00,0x03,0xe0,0x54,0xfb,0xf0,0x12,0x4d,0x45,0x80,0xfe,0xe5,
+0x2c,0x30,0xe6,0x06,0x90,0x01,0x34,0x74,0x40,0xf0,0xe5,0x2e,0x30,0xe0,0x12,0x90,
+0x9e,0x7f,0x74,0x01,0xf0,0x90,0x01,0x36,0xf0,0x12,0x61,0x4e,0x90,0x9e,0x7f,0xe4,
+0xf0,0xe5,0x2e,0x30,0xe1,0x0b,0x90,0x01,0x36,0x74,0x02,0xf0,0x43,0x57,0x40,0x11,
+0x23,0xe5,0x2e,0x30,0xe2,0x09,0x90,0x01,0x36,0x74,0x04,0xf0,0x12,0x60,0xdf,0xe5,
+0x2e,0x30,0xe3,0x28,0x90,0x01,0x36,0x74,0x08,0xf0,0xe5,0x60,0x64,0x01,0x70,0x1c,
+0xe5,0x63,0x60,0x18,0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x90,
+0x9e,0x85,0xe4,0x12,0x44,0x4e,0x90,0x01,0x57,0x74,0x05,0xf0,0xe5,0x2e,0x30,0xe4,
+0x2b,0x90,0x01,0x36,0x74,0x10,0xf0,0xe5,0x60,0xb4,0x01,0x20,0xe5,0x63,0x60,0x1c,
+0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x90,0x9e,0x67,0xe4,0xf0,
+0x53,0x64,0xfd,0xe5,0x64,0x54,0x07,0x70,0x03,0x12,0x44,0xcb,0xe5,0x2e,0x30,0xe5,
+0x1f,0x90,0x01,0x36,0x74,0x20,0xf0,0xe5,0x60,0xb4,0x01,0x14,0xe5,0x63,0x60,0x10,
+0x90,0x9e,0x66,0xe0,0x64,0x02,0x60,0x05,0x12,0x44,0xd2,0x80,0x03,0x12,0x44,0x79,
+0xe5,0x2e,0x30,0xe6,0x1b,0x90,0x01,0x36,0x74,0x40,0xf0,0xe5,0x60,0xb4,0x01,0x10,
+0xe5,0x63,0x60,0x0c,0x53,0x64,0xfe,0xe5,0x64,0x54,0x07,0x70,0x03,0x12,0x44,0xcb,
+0xe5,0x2f,0x30,0xe1,0x08,0x90,0x01,0x37,0x74,0x02,0xf0,0x91,0x64,0x74,0xa1,0x04,
+0x90,0x01,0xc4,0xf0,0x74,0x50,0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,0x04,
+0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,0xd0,0xf0,
+0xd0,0xe0,0x32,0x90,0x04,0x1b,0xe0,0x54,0x7f,0x64,0x7f,0x7f,0x01,0x60,0x02,0x7f,
+0x00,0x22,0x90,0x9e,0x10,0xe0,0x54,0xf0,0x44,0x03,0xf0,0x54,0x0f,0x44,0x80,0xf0,
+0x7b,0x00,0x7a,0x00,0x79,0x58,0x90,0x9e,0x90,0x12,0x43,0x8b,0x0b,0x7a,0x9e,0x79,
+0x10,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x8d,0x12,0x43,0x8b,0x90,0x9e,
+0xb0,0xe0,0xff,0x04,0xf0,0x90,0x00,0x01,0xef,0x12,0x42,0x5f,0x7f,0xaf,0x7e,0x01,
+0x12,0x71,0x7a,0xef,0x60,0x49,0x90,0x9e,0x8d,0x12,0x43,0x6b,0x8b,0x23,0x8a,0x24,
+0x89,0x25,0x75,0x26,0x02,0x7b,0x01,0x7a,0x01,0x79,0xa0,0x12,0x45,0x09,0x90,0x9e,
+0x90,0x12,0x43,0x6b,0x8b,0x23,0x8a,0x24,0x89,0x25,0x90,0x9e,0x8d,0x12,0x43,0x6b,
+0x12,0x29,0xd9,0xff,0xc4,0x54,0x0f,0xf5,0x26,0x7b,0x01,0x7a,0x01,0x79,0xa2,0x12,
+0x45,0x09,0x90,0x01,0xaf,0x74,0xff,0xf0,0x90,0x01,0xcb,0xe0,0x64,0x80,0xf0,0xd0,
+0xd0,0x92,0xaf,0x22,0x90,0x9e,0xa0,0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0xe5,0x63,
+0x14,0x24,0xfd,0x50,0x02,0x80,0x1f,0x90,0x9e,0x66,0xe0,0x60,0x06,0x7d,0x01,0x7f,
+0x0c,0x80,0x0d,0xe5,0x61,0x54,0x0f,0xc3,0x94,0x04,0x50,0x06,0x7d,0x01,0x7f,0x04,
+0x91,0xe7,0xe4,0xff,0x91,0x97,0x22,0xef,0x60,0x0b,0x90,0x9e,0x80,0xe0,0xb4,0x01,
+0x10,0xe4,0xff,0x80,0x09,0x90,0x9e,0x80,0xe0,0xb4,0x01,0x05,0x7f,0x01,0x12,0x75,
+0xa5,0x22,0x90,0x01,0x37,0x74,0x02,0xf0,0x90,0x05,0x22,0x74,0xff,0xf0,0x12,0x74,
+0x12,0xef,0x70,0x06,0x90,0x01,0xc8,0x74,0xfd,0xf0,0x7d,0x02,0x7f,0x03,0x12,0x36,
+0xe6,0xe5,0x63,0x60,0x04,0x7f,0x01,0x91,0x97,0x12,0x74,0xd2,0x53,0x61,0xf0,0x43,
+0x61,0x02,0x22,0x7d,0x01,0x7f,0x0c,0x8f,0x6a,0x8d,0x6b,0xe5,0x6a,0x54,0x0f,0xff,
+0xe5,0x61,0x54,0x0f,0x6f,0x60,0x65,0xe5,0x6a,0x30,0xe2,0x28,0xe5,0x61,0x20,0xe2,
+0x04,0x7f,0x01,0xd1,0xc2,0xe5,0x61,0x30,0xe3,0x0c,0xe5,0x6a,0x20,0xe3,0x07,0xb1,
+0x5d,0xef,0x60,0x48,0xa1,0xa5,0xe5,0x61,0x20,0xe3,0x41,0xe5,0x6a,0x30,0xe3,0x3c,
+0xaf,0x6b,0xc1,0xdc,0xe5,0x61,0x54,0x0f,0xff,0xbf,0x0c,0x0c,0xe5,0x6a,0x20,0xe3,
+0x07,0xb1,0x5d,0xef,0x60,0x26,0xb1,0xa5,0xe5,0x61,0x54,0x0f,0xff,0xbf,0x04,0x0c,
+0xe5,0x6a,0x20,0xe2,0x07,0xf1,0x21,0xef,0x60,0x12,0x91,0xb2,0xe5,0x61,0x54,0x0f,
+0xff,0xbf,0x02,0x08,0x12,0x60,0xbd,0xef,0x60,0x02,0xd1,0xaf,0x22,0x71,0xc3,0xef,
+0x64,0x01,0x60,0x08,0x90,0x01,0xb9,0x74,0x01,0xf0,0x80,0x30,0x90,0x9e,0x64,0xe0,
+0x60,0x08,0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x22,0x90,0x9e,0x63,0xe0,0x60,0x08,
+0x90,0x01,0xb9,0x74,0x04,0xf0,0x80,0x14,0xe5,0x62,0x54,0x0f,0xd3,0x94,0x04,0x40,
+0x08,0x90,0x01,0xb9,0x74,0x08,0xf0,0x80,0x03,0x7f,0x01,0x22,0x90,0x01,0xb8,0x74,
+0x08,0xf0,0x7f,0x00,0x22,0x90,0x06,0x04,0xe0,0x44,0x40,0xf0,0xe5,0x60,0xb4,0x01,
+0x04,0x7f,0x01,0xd1,0xf6,0x53,0x61,0xf0,0x43,0x61,0x04,0x22,0xef,0x64,0x01,0x70,
+0x2e,0x7d,0x78,0x7f,0x02,0x12,0x36,0x75,0x7d,0x02,0x7f,0x03,0x12,0x36,0x75,0x90,
+0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x91,0xe3,0xe4,0xff,0x91,0x97,
+0x90,0x06,0x04,0xe0,0x54,0x7f,0xf0,0x90,0x06,0x0a,0xe0,0x54,0xf8,0xf0,0x22,0x90,
+0x01,0x36,0x74,0x7b,0xf0,0xa3,0x74,0x02,0xf0,0x7d,0x7b,0xff,0x12,0x36,0xe6,0x7d,
+0x02,0x7f,0x03,0x12,0x36,0xe6,0x90,0x06,0x04,0xe0,0x44,0x80,0xf0,0x90,0x06,0x0a,
+0xe0,0x44,0x07,0xf0,0x12,0x62,0x4c,0xe5,0x60,0x20,0xe0,0x05,0xe4,0x90,0x9e,0x58,
+0xf0,0x22,0x8b,0x14,0x8a,0x15,0x89,0x16,0x12,0x60,0xb1,0xab,0x14,0xaa,0x15,0xa9,
+0x16,0x12,0x29,0xd9,0xf5,0x63,0x14,0x60,0x0e,0x14,0x60,0x1e,0x14,0x60,0x2f,0x24,
+0x03,0x70,0x40,0x7f,0x01,0x80,0x3a,0xab,0x14,0xaa,0x15,0xa9,0x16,0x90,0x00,0x02,
+0x12,0x42,0x20,0xfd,0xe4,0xff,0xd1,0x84,0x80,0x27,0xab,0x14,0xaa,0x15,0xa9,0x16,
+0x90,0x00,0x02,0x12,0x42,0x20,0xfd,0x7f,0x01,0xd1,0x84,0x1f,0x80,0x13,0xab,0x14,
+0xaa,0x15,0xa9,0x16,0x90,0x00,0x02,0x12,0x42,0x20,0xfd,0x7f,0x02,0xd1,0x84,0xe4,
+0xff,0xb1,0xbc,0x22,0xef,0x24,0xfe,0x60,0x0b,0x04,0x70,0x22,0x90,0x9e,0x65,0x74,
+0x01,0xf0,0x80,0x16,0xed,0x70,0x0a,0x90,0x9e,0x62,0xe0,0x90,0x9e,0x65,0xf0,0x80,
+0x05,0x90,0x9e,0x65,0xed,0xf0,0x90,0x9e,0x65,0xe0,0x90,0x9e,0x56,0xf0,0x22,0x53,
+0x61,0xf0,0x43,0x61,0x01,0x12,0x45,0x00,0x12,0x45,0x01,0x53,0x61,0xf0,0x43,0x61,
+0x02,0x22,0x90,0x9e,0xaf,0xef,0xf0,0x12,0x74,0x53,0x90,0x9e,0xaf,0xe0,0x60,0x05,
+0x90,0x05,0x22,0xe4,0xf0,0x53,0x61,0xf0,0x43,0x61,0x04,0x22,0x90,0x06,0x04,0xe0,
+0x54,0xbf,0xf0,0xef,0x60,0x09,0xe5,0x60,0xb4,0x01,0x04,0xe4,0xff,0xd1,0xf6,0x53,
+0x61,0xf0,0x43,0x61,0x0c,0x22,0x8f,0x27,0x12,0x45,0xb0,0xbf,0x01,0x22,0x90,0x9e,
+0x7a,0xe0,0xff,0x7d,0x01,0x12,0x47,0x79,0xab,0x07,0xaa,0x06,0xad,0x03,0xac,0x02,
+0xaf,0x27,0x12,0x60,0x2a,0xaf,0x03,0x12,0x5f,0xf7,0x90,0x04,0x1f,0x74,0x20,0xf0,
+0x22,0x71,0xc3,0xef,0x64,0x01,0x60,0x08,0x90,0x01,0xb9,0x74,0x01,0xf0,0x80,0x58,
+0xe5,0x64,0x54,0x03,0x60,0x08,0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x4a,0xe5,0x62,
+0x54,0x0f,0xd3,0x94,0x02,0x40,0x08,0x90,0x01,0xb9,0x74,0x04,0xf0,0x80,0x39,0xe5,
+0x64,0x30,0xe2,0x08,0x90,0x01,0xb9,0x74,0x08,0xf0,0x80,0x2c,0xe5,0x64,0x30,0xe4,
+0x08,0x90,0x01,0xb9,0x74,0x10,0xf0,0x80,0x1f,0x90,0x9e,0x58,0xe0,0x60,0x08,0x90,
+0x01,0xb9,0x74,0x20,0xf0,0x80,0x11,0x90,0x9e,0x5e,0xe0,0x60,0x08,0x90,0x01,0xb9,
+0x74,0x80,0xf0,0x80,0x03,0x7f,0x01,0x22,0x90,0x01,0xb8,0x74,0x04,0xf0,0x7f,0x00,
+0x22,0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,
+0xc0,0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,0x01,
+0xc4,0x74,0x91,0xf0,0x74,0x57,0xa3,0xf0,0x53,0x91,0xef,0x90,0x00,0x51,0xe0,0xff,
+0x90,0x00,0x55,0xe0,0x5f,0xf5,0x3d,0x90,0x00,0x52,0xe0,0xff,0x90,0x00,0x56,0xe0,
+0x5f,0xf5,0x3e,0xe5,0x3d,0x30,0xe4,0x06,0x90,0x00,0x55,0x74,0x10,0xf0,0xe5,0x3d,
+0x30,0xe5,0x06,0x90,0x00,0x55,0x74,0x20,0xf0,0xe5,0x3d,0x30,0xe6,0x1b,0x90,0x00,
+0x55,0x74,0x40,0xf0,0x90,0x9e,0x42,0xe0,0x54,0x03,0xff,0xbf,0x03,0x0b,0x90,0x9e,
+0x3f,0xe0,0x60,0x05,0x7f,0x01,0x12,0x49,0x1a,0xe5,0x3d,0x30,0xe7,0x15,0x90,0x00,
+0x55,0x74,0x80,0xf0,0x90,0x9e,0x42,0xe0,0x54,0x03,0xff,0xbf,0x03,0x05,0x7f,0x02,
+0x12,0x49,0x1a,0xe5,0x3e,0x30,0xe0,0x06,0x90,0x00,0x56,0x74,0x01,0xf0,0xe5,0x3e,
+0x30,0xe1,0x06,0x90,0x00,0x56,0x74,0x02,0xf0,0xe5,0x3e,0x30,0xe2,0x06,0x90,0x00,
+0x56,0x74,0x04,0xf0,0xe5,0x3e,0x30,0xe3,0x06,0x90,0x00,0x56,0x74,0x08,0xf0,0x90,
+0x01,0xc4,0x74,0x91,0xf0,0x74,0x57,0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,
+0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,0xd0,
+0xf0,0xd0,0xe0,0x32,0x90,0x01,0xcc,0xe0,0x54,0x0f,0x90,0x9e,0x19,0xf0,0x90,0x9e,
+0x19,0xe0,0xfd,0x70,0x02,0x21,0xb5,0x90,0x9e,0xae,0xe0,0xff,0x74,0x01,0x7e,0x00,
+0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xef,0x5d,0x70,
+0x02,0x21,0xae,0x90,0x9e,0xae,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd0,0x12,0x43,0x5f,
+0xe0,0x90,0x9e,0x1a,0xf0,0x75,0x23,0x01,0x75,0x24,0x9e,0x75,0x25,0x1a,0x75,0x26,
+0x01,0x7b,0x01,0x7a,0x9e,0x79,0x1b,0x12,0x45,0x09,0x90,0x9e,0x1b,0xe0,0xff,0xc4,
+0x13,0x13,0x13,0x54,0x01,0x90,0x9e,0xae,0x30,0xe0,0x59,0xe0,0x75,0xf0,0x02,0x90,
+0x00,0x88,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x1c,0xf0,0x90,0x9e,0xae,0xe0,0x75,0xf0,
+0x02,0x90,0x00,0x89,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x1d,0xf0,0x90,0x9e,0xae,0xe0,
+0x75,0xf0,0x04,0x90,0x01,0xd1,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x1e,0xf0,0x90,0x9e,
+0xae,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd2,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x1f,0xf0,
+0x90,0x9e,0xae,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd3,0x12,0x43,0x5f,0xe0,0x90,0x9e,
+0x20,0xf0,0x80,0x33,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd1,0x12,0x43,0x5f,0xe0,0x90,
+0x9e,0x1c,0xf0,0x90,0x9e,0xae,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd2,0x12,0x43,0x5f,
+0xe0,0x90,0x9e,0x1d,0xf0,0x90,0x9e,0xae,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd3,0x12,
+0x43,0x5f,0xe0,0x90,0x9e,0x1e,0xf0,0xef,0x54,0x7f,0xff,0x7b,0x01,0x7a,0x9e,0x79,
+0x1c,0x31,0xb6,0x90,0x9e,0x19,0xe0,0xff,0x90,0x9e,0xae,0xe0,0xfe,0x74,0x01,0xa8,
+0x06,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0x5f,0x90,0x9e,0x19,0xf0,0x90,0x9e,
+0xae,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0x90,0x01,
+0xcc,0xf0,0x90,0x9e,0xae,0xe0,0x04,0xf0,0xe0,0x54,0x03,0xf0,0x01,0x7e,0x90,0x01,
+0xc6,0xe0,0x44,0x02,0xf0,0x22,0x90,0x9e,0x21,0x12,0x43,0x8b,0xef,0x12,0x43,0x94,
+0x59,0xfc,0x01,0x59,0xf4,0x02,0x5a,0x20,0x03,0x5a,0x29,0x05,0x5a,0x32,0x06,0x5a,
+0x7e,0x07,0x5a,0x3a,0x09,0x5a,0x43,0x0b,0x5a,0x4c,0x0c,0x5a,0x55,0x0d,0x5a,0x5e,
+0x0e,0x5a,0x67,0x1b,0x5a,0x6f,0x1c,0x5a,0x05,0x2d,0x5a,0x0e,0x2e,0x5a,0x17,0x3b,
+0x00,0x00,0x5a,0x77,0x90,0x9e,0x21,0x12,0x43,0x6b,0xe1,0xe9,0x90,0x9e,0x21,0x12,
+0x43,0x6b,0x02,0x71,0xd0,0x90,0x9e,0x21,0x12,0x43,0x6b,0x02,0x72,0x0b,0x90,0x9e,
+0x21,0x12,0x43,0x6b,0x02,0x72,0x53,0x90,0x9e,0x21,0x12,0x43,0x6b,0x02,0x72,0x8c,
+0x90,0x9e,0x21,0x12,0x43,0x6b,0x02,0x72,0xb6,0x90,0x9e,0x21,0x12,0x43,0x6b,0x02,
+0x70,0x4a,0x90,0x9e,0x21,0x12,0x43,0x6b,0x80,0x45,0x90,0x9e,0x21,0x12,0x43,0x6b,
+0x02,0x72,0xfe,0x90,0x9e,0x21,0x12,0x43,0x6b,0x02,0x70,0xa2,0x90,0x9e,0x21,0x12,
+0x43,0x6b,0x02,0x49,0xc2,0x90,0x9e,0x21,0x12,0x43,0x6b,0x02,0x7b,0x29,0x90,0x9e,
+0x21,0x12,0x43,0x6b,0x02,0x4a,0xfc,0x90,0x9e,0x21,0x12,0x43,0x6b,0xe1,0xef,0x90,
+0x9e,0x21,0x12,0x43,0x6b,0xe1,0xd1,0x90,0x01,0xc6,0xe0,0x44,0x01,0xf0,0x22,0x90,
+0x00,0x04,0x12,0x42,0x20,0xff,0x54,0x1f,0xfe,0xef,0x54,0x20,0xc4,0x13,0x54,0x07,
+0xfd,0xaf,0x06,0x90,0x9e,0x24,0xef,0xf0,0xa3,0xed,0xf0,0xa3,0x12,0x43,0x8b,0x90,
+0x9e,0x26,0x12,0x43,0x6b,0x90,0x00,0x03,0x12,0x42,0x20,0x54,0xf0,0xc4,0x54,0x0f,
+0x90,0x9e,0x29,0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0x54,0x40,0xc4,0x13,0x13,0x54,
+0x03,0x90,0x9e,0x2a,0xf0,0x90,0x9e,0x24,0xe0,0xff,0x75,0xf0,0x09,0x90,0x96,0x46,
+0x12,0x43,0x5f,0xad,0x82,0xac,0x83,0x90,0x9e,0x2b,0xec,0xf0,0xa3,0xed,0xf0,0xef,
+0x75,0xf0,0x09,0xa4,0x24,0x44,0xf9,0x74,0x96,0x35,0xf0,0xfa,0x7b,0x01,0xa3,0x12,
+0x43,0x8b,0x90,0x9e,0x26,0x12,0x43,0x6b,0x90,0x00,0x03,0x12,0x42,0x20,0x54,0x0f,
+0xff,0x90,0x9e,0x2d,0x12,0x43,0x6b,0xef,0x12,0x42,0x4d,0x90,0x9e,0x26,0x12,0x43,
+0x6b,0x90,0x00,0x02,0x12,0x42,0x20,0xff,0x90,0x9e,0x2d,0x12,0x43,0x6b,0x90,0x00,
+0x01,0xef,0x12,0x42,0x5f,0x90,0x9e,0x26,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,0x42,
+0x20,0xff,0x90,0x9e,0x2b,0xe0,0xfc,0xa3,0xe0,0xfd,0xf5,0x82,0x8c,0x83,0xef,0xf0,
+0x12,0x29,0xd9,0x8d,0x82,0x8c,0x83,0xa3,0xf0,0x90,0x9e,0x29,0xe0,0xfe,0x90,0x9e,
+0x24,0xe0,0xff,0x24,0x82,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0x90,0x9e,
+0x25,0xe0,0xfe,0x75,0xf0,0x09,0xef,0x90,0x96,0x4a,0x12,0x43,0x5f,0xee,0xf0,0x75,
+0xf0,0x09,0xef,0x90,0x96,0x4b,0x12,0x43,0x5f,0x74,0x01,0xf0,0x90,0x9e,0x2a,0xe0,
+0xfe,0x75,0xf0,0x09,0xef,0x90,0x96,0x4c,0x12,0x43,0x5f,0xee,0xf0,0x8f,0x14,0xef,
+0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xaf,0x82,0xf5,0x16,0x8f,0x17,0xe5,
+0x14,0x75,0xf0,0x02,0xa4,0x24,0x02,0xf9,0x74,0x95,0x35,0xf0,0x75,0x18,0x01,0xf5,
+0x19,0x89,0x1a,0x75,0xf0,0x09,0xe5,0x14,0x90,0x96,0x46,0x12,0x43,0x5f,0xaf,0x82,
+0x85,0x83,0x1b,0x8f,0x1c,0xe5,0x14,0x75,0xf0,0x09,0xa4,0x24,0x44,0xf9,0x74,0x96,
+0x35,0xf0,0x75,0x1d,0x01,0xf5,0x1e,0x89,0x1f,0x74,0x82,0x25,0x14,0xf5,0x82,0xe4,
+0x34,0x95,0xf5,0x83,0xe0,0x12,0x43,0x94,0x5c,0x0d,0x00,0x5c,0x22,0x01,0x5c,0x37,
+0x02,0x5c,0x4c,0x03,0x5c,0x75,0x04,0x5c,0x8a,0x05,0x5c,0x9f,0x06,0x5c,0xc5,0x0c,
+0x5c,0xf2,0x0d,0x5d,0x1f,0x0e,0x5d,0x4c,0x0f,0x00,0x00,0x5d,0x80,0xe5,0x14,0x25,
+0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0x74,0x15,
+0x80,0x3c,0xe5,0x14,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,
+0xf0,0xf0,0xa3,0x74,0x10,0x80,0x27,0xe5,0x14,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,
+0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0x74,0x05,0x80,0x12,0xe5,0x14,0x25,0xe0,
+0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0xe4,0xf0,0xe5,
+0x14,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0x74,0x0f,0xf0,0xa3,
+0x74,0x8f,0xf0,0xa1,0x80,0xe5,0x14,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,
+0xf5,0x83,0x74,0x0f,0xf0,0xa3,0x74,0xf5,0x80,0x27,0xe5,0x14,0x25,0xe0,0x24,0xc6,
+0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0x0f,0xf0,0xa3,0x74,0xf0,0x80,0x12,0xe5,
+0x14,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe4,0xf0,0xa3,0x74,
+0x0d,0xf0,0xe5,0x14,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe4,
+0xf0,0xa3,0xf0,0xa1,0x80,0x90,0x04,0x47,0xe0,0xab,0x18,0xaa,0x19,0xa9,0x1a,0x12,
+0x42,0x4d,0x90,0x04,0x46,0xe0,0xab,0x18,0xaa,0x19,0xa9,0x1a,0x90,0x00,0x01,0x12,
+0x42,0x5f,0x90,0x04,0x45,0xe0,0x85,0x17,0x82,0x85,0x16,0x83,0xf0,0x90,0x04,0x44,
+0xa1,0x77,0x90,0x04,0x4b,0xe0,0xab,0x18,0xaa,0x19,0xa9,0x1a,0x12,0x42,0x4d,0x90,
+0x04,0x4a,0xe0,0xab,0x18,0xaa,0x19,0xa9,0x1a,0x90,0x00,0x01,0x12,0x42,0x5f,0x90,
+0x04,0x49,0xe0,0x85,0x17,0x82,0x85,0x16,0x83,0xf0,0x90,0x04,0x48,0x80,0x58,0x90,
+0x04,0x4f,0xe0,0xab,0x18,0xaa,0x19,0xa9,0x1a,0x12,0x42,0x4d,0x90,0x04,0x4e,0xe0,
+0xab,0x18,0xaa,0x19,0xa9,0x1a,0x90,0x00,0x01,0x12,0x42,0x5f,0x90,0x04,0x4d,0xe0,
+0x85,0x17,0x82,0x85,0x16,0x83,0xf0,0x90,0x04,0x4c,0x80,0x2b,0x90,0x04,0x53,0xe0,
+0xab,0x18,0xaa,0x19,0xa9,0x1a,0x12,0x42,0x4d,0x90,0x04,0x52,0xe0,0xab,0x18,0xaa,
+0x19,0xa9,0x1a,0x90,0x00,0x01,0x12,0x42,0x5f,0x90,0x04,0x51,0xe0,0x85,0x17,0x82,
+0x85,0x16,0x83,0xf0,0x90,0x04,0x50,0xe0,0x85,0x17,0x82,0x85,0x16,0x83,0xa3,0xf0,
+0xab,0x18,0xaa,0x19,0xa9,0x1a,0xc0,0x03,0xc0,0x02,0xc0,0x01,0x12,0x29,0xd9,0xff,
+0xab,0x1d,0xaa,0x1e,0xa9,0x1f,0x12,0x29,0xd9,0x5f,0xd0,0x01,0xd0,0x02,0xd0,0x03,
+0x12,0x42,0x4d,0xab,0x18,0xe5,0x1a,0x24,0x01,0xf9,0xe4,0x35,0x19,0xfa,0xc0,0x03,
+0xc0,0x02,0xc0,0x01,0x12,0x29,0xd9,0xff,0xab,0x1d,0xaa,0x1e,0xa9,0x1f,0x90,0x00,
+0x01,0x12,0x42,0x20,0x5f,0xd0,0x01,0xd0,0x02,0xd0,0x03,0x12,0x42,0x4d,0x85,0x17,
+0x82,0x85,0x16,0x83,0xc0,0x83,0xc0,0x82,0xe0,0xff,0x85,0x1c,0x82,0x85,0x1b,0x83,
+0xe0,0xfe,0xef,0x5e,0xd0,0x82,0xd0,0x83,0xf0,0x85,0x17,0x82,0x85,0x16,0x83,0xa3,
+0xc0,0x83,0xc0,0x82,0xe0,0xff,0x85,0x1c,0x82,0x85,0x1b,0x83,0xa3,0xe0,0xfe,0xef,
+0x5e,0xd0,0x82,0xd0,0x83,0xf0,0xe5,0x14,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,
+0x95,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3b,0x75,0x15,0x0b,0x74,0x01,0x7e,
+0x00,0xa8,0x15,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xe5,0x14,
+0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0x5e,0xfe,0xa3,0xe0,
+0x5f,0x4e,0x60,0x06,0xe5,0x15,0x24,0x10,0x80,0x5d,0x15,0x15,0xe5,0x15,0xc3,0x94,
+0x00,0x50,0xca,0x80,0x56,0xe5,0x14,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,
+0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3d,0x75,0x15,0x0f,0x74,0x01,0x7e,0x00,
+0xa8,0x15,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xe5,0x14,0x25,
+0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,
+0x4e,0x60,0x08,0x90,0x9e,0x30,0xe5,0x15,0xf0,0x80,0x10,0x15,0x15,0xe5,0x15,0xc3,
+0x94,0x00,0x50,0xc8,0x80,0x05,0xe4,0x90,0x9e,0x30,0xf0,0xe5,0x14,0x25,0xe0,0x24,
+0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3b,0xe4,
+0xf5,0x15,0x74,0x01,0x7e,0x00,0xa8,0x15,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,
+0xd8,0xf9,0xff,0xe5,0x14,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,
+0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x08,0x90,0x9e,0x31,0xe5,0x15,0xf0,0x80,
+0x5b,0x05,0x15,0xe5,0x15,0xb4,0x10,0xca,0x80,0x52,0xe5,0x14,0x25,0xe0,0x24,0x02,
+0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x39,0xe4,0xf5,
+0x15,0x74,0x01,0x7e,0x00,0xa8,0x15,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,
+0xf9,0xff,0xe5,0x14,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,
+0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x06,0xe5,0x15,0x24,0x10,0x80,0x0a,0x05,0x15,
+0xe5,0x15,0xb4,0x0c,0xcc,0x80,0x05,0xe4,0x90,0x9e,0x31,0xf0,0x90,0x9e,0x30,0xe0,
+0xff,0x75,0xf0,0x09,0xe5,0x14,0x90,0x96,0x48,0x12,0x43,0x5f,0xef,0xf0,0x90,0x9e,
+0x31,0xe0,0xfe,0x75,0xf0,0x09,0xe5,0x14,0x90,0x96,0x49,0x12,0x43,0x5f,0xee,0xf0,
+0x74,0x84,0x25,0x14,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0xd3,0x9f,0x40,0x06,
+0x90,0x9e,0x30,0x12,0x62,0x94,0x74,0x84,0x25,0x14,0xf5,0x82,0xe4,0x34,0x04,0xf5,
+0x83,0xe0,0xff,0x90,0x9e,0x31,0xe0,0xfe,0xef,0xc3,0x9e,0x50,0x03,0x12,0x62,0x94,
+0x90,0x9e,0x30,0xe0,0xff,0xd3,0x94,0x13,0x40,0x07,0x90,0x96,0x43,0x74,0x03,0xf0,
+0x22,0xef,0xd3,0x94,0x0b,0x40,0x07,0x90,0x96,0x43,0x74,0x02,0xf0,0x22,0xef,0xd3,
+0x94,0x03,0x40,0x07,0x90,0x96,0x43,0x74,0x01,0xf0,0x22,0xe4,0x90,0x96,0x43,0xf0,
+0x22,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0x54,0x3f,0xfe,0xef,0x54,0x80,0xc4,0x13,
+0x13,0x13,0x54,0x01,0xfd,0xaf,0x06,0x41,0x93,0x12,0x29,0xd9,0xf5,0x60,0x22,0x12,
+0x29,0xd9,0x90,0x95,0x01,0xf0,0x22,0xad,0x07,0x74,0x11,0x2d,0xf5,0x82,0xe4,0x34,
+0xfc,0xf5,0x83,0xe0,0x44,0x01,0xf0,0x90,0x04,0x80,0xe0,0x54,0x0f,0xfc,0x74,0x14,
+0x2d,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xc0,0x4c,0xfd,0x74,0x14,0x2f,
+0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xed,0xf0,0x22,0xef,0x60,0x0f,0x74,0x21,0x2d,
+0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x10,0xf0,0x22,0x74,0x21,0x2d,0xf5,
+0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xef,0xf0,0x22,0xe4,0xf5,0x60,0xf5,0x64,
+0xf5,0x63,0x75,0x62,0x0c,0x75,0x61,0x0c,0x90,0x9e,0x66,0xf0,0x90,0x9e,0x64,0xf0,
+0x90,0x9e,0x63,0xf0,0x90,0x9e,0x65,0x04,0xf0,0x90,0x9e,0x56,0xf0,0xe4,0x90,0x9e,
+0x67,0xf0,0x90,0x9e,0x58,0xf0,0x90,0x9e,0x61,0x74,0x07,0xf0,0xe4,0x90,0x9e,0x57,
+0xf0,0x90,0x9e,0x5f,0xf0,0xa3,0x74,0x03,0xf0,0x90,0x9e,0x5c,0x74,0x0a,0xf0,0xa3,
+0x74,0x05,0xf0,0x90,0x9e,0x5b,0x74,0x14,0xf0,0x90,0x9e,0x62,0x74,0x05,0xf0,0xe4,
+0x90,0x9e,0x5a,0xf0,0x90,0x9e,0x55,0xf0,0x90,0x9e,0x7f,0xf0,0x90,0x9e,0x5e,0xf0,
+0x22,0xe4,0x90,0x9e,0x67,0xf0,0x90,0x9e,0x57,0xf0,0xf5,0x64,0x22,0x7f,0x00,0x22,
+0xe5,0x62,0x30,0xe6,0x19,0xe5,0x62,0x54,0x0f,0xff,0x90,0x9e,0x54,0xe0,0xfe,0x4f,
+0x90,0x01,0x2f,0xf0,0xee,0x64,0x80,0x90,0x9e,0x54,0xf0,0x53,0x62,0xbf,0x22,0xe5,
+0x60,0x64,0x01,0x70,0x68,0xe5,0x63,0x60,0x64,0xe5,0x63,0x64,0x02,0x60,0x06,0xe5,
+0x63,0x64,0x05,0x70,0x27,0x90,0x06,0xab,0xe0,0x90,0x9e,0x56,0xf0,0x90,0x06,0xaa,
+0xe0,0x90,0x9e,0x65,0xf0,0x90,0x9e,0x56,0xe0,0x70,0x07,0x90,0x9e,0x65,0xe0,0xff,
+0x80,0x05,0x90,0x9e,0x56,0xe0,0xff,0x90,0x9e,0x56,0xef,0xf0,0x90,0x9e,0x58,0xe0,
+0x60,0x03,0xe0,0x14,0xf0,0xe4,0x90,0x9e,0x57,0xf0,0x90,0x05,0x58,0x74,0x03,0xf0,
+0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x53,0x64,0xfd,0x53,0x64,
+0xef,0xe5,0x63,0x14,0x24,0xfd,0x50,0x02,0x80,0x03,0x12,0x45,0x53,0x22,0xe4,0xfb,
+0x90,0x9e,0x9c,0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0xe5,0x63,0x60,0x6a,0xe5,0x60,
+0x64,0x01,0x70,0x64,0xe5,0x63,0x14,0x60,0x2b,0x24,0xfd,0x60,0x27,0x24,0x02,0x24,
+0xfb,0x50,0x02,0x80,0x21,0x90,0x9e,0x56,0xe0,0x14,0xf0,0xe0,0x60,0x04,0xa3,0xe0,
+0x60,0x14,0x90,0x9e,0x56,0xe0,0x70,0x08,0x90,0x9e,0x65,0xe0,0x90,0x9e,0x56,0xf0,
+0x7b,0x01,0x80,0x02,0x7b,0x01,0xeb,0x60,0x2f,0x43,0x64,0x10,0xe4,0x90,0x9e,0x85,
+0xf0,0x90,0x9e,0x57,0xe0,0x75,0xf0,0x03,0xa4,0xff,0x90,0x9e,0x61,0xe0,0x2f,0x12,
+0x44,0x53,0x90,0x01,0x57,0x74,0x05,0xf0,0xe5,0x61,0x54,0x0f,0xc3,0x94,0x04,0x50,
+0x07,0x7d,0x01,0x7f,0x04,0x12,0x54,0xe7,0x22,0xe4,0x90,0x9e,0x15,0xf0,0xe5,0x63,
+0x60,0x79,0x90,0x9e,0x67,0xe0,0x60,0x0d,0xe4,0xf0,0x53,0x64,0xfd,0xe5,0x64,0x54,
+0x07,0x70,0x68,0x80,0x63,0x90,0x9e,0x57,0xe0,0x04,0xf0,0x53,0x64,0xef,0x90,0x9e,
+0x15,0xe0,0xf9,0xff,0x7e,0x00,0x24,0x01,0xfd,0xee,0x33,0xfc,0x90,0x9e,0x57,0xe0,
+0xb5,0x05,0x06,0xe4,0xb5,0x04,0x02,0x80,0x12,0xef,0x24,0x02,0xff,0xe4,0x3e,0xfe,
+0x90,0x9e,0x57,0xe0,0xb5,0x07,0x0a,0xe4,0xb5,0x06,0x06,0x90,0x05,0x58,0xe0,0x04,
+0xf0,0xe9,0xff,0x90,0x9e,0x5c,0xe0,0x2f,0xff,0xe4,0x33,0xfe,0x90,0x9e,0x57,0xe0,
+0xd3,0x9f,0xee,0x64,0x80,0xf8,0x74,0x80,0x98,0x40,0x0d,0xe5,0x60,0xb4,0x01,0x0b,
+0xa3,0xe0,0x70,0x07,0xe0,0x04,0xf0,0x22,0x12,0x44,0xcb,0x22,0x90,0x9e,0x5f,0xe0,
+0xa3,0xe0,0x90,0x05,0x58,0xf0,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,
+0x93,0x12,0x43,0x8b,0x90,0x9e,0x96,0xe0,0x54,0xf0,0x44,0x06,0xff,0xf0,0xed,0x54,
+0x0f,0xc4,0x54,0xf0,0xfe,0xef,0x54,0x0f,0x4e,0xf0,0x90,0x9e,0x93,0x12,0x43,0x6b,
+0x90,0x9e,0x90,0x12,0x43,0x8b,0x7b,0x01,0x7a,0x9e,0x79,0x96,0x12,0x53,0xf1,0xd0,
+0xd0,0x92,0xaf,0x22,0xe0,0xfd,0x74,0x26,0x25,0x14,0xf5,0x82,0xe4,0x34,0x9d,0xf5,
+0x83,0xed,0xf0,0xaf,0x14,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0xef,0xc3,0x94,0x20,
+0x50,0x0e,0x74,0x84,0x2f,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xed,0xf0,0x80,0x29,
+0x74,0xa6,0x2f,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xed,0xf0,0x90,0x9e,0x68,0xef,
+0xf0,0x24,0xa6,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x90,0x9e,0x69,0xf0,0x7b,
+0x01,0x7a,0x9e,0x79,0x68,0x7d,0x02,0x51,0x57,0xd0,0xd0,0x92,0xaf,0x22,0x8f,0x0a,
+0x8d,0x0b,0xe5,0x0b,0x54,0x1f,0xf5,0x10,0x74,0x01,0x2f,0xf5,0x82,0xe4,0x34,0x94,
+0xf5,0x83,0xe0,0xf5,0x0e,0x90,0x04,0xfd,0xe0,0xb4,0x01,0x05,0x75,0x11,0x03,0x80,
+0x03,0x75,0x11,0x01,0xeb,0xc3,0x95,0x11,0x40,0x04,0xaf,0x0a,0x80,0x33,0xe5,0x0e,
+0x25,0x0d,0xf5,0x0f,0xe5,0x10,0x90,0x41,0xd6,0x93,0xff,0xe5,0x0f,0xd3,0x9f,0x74,
+0x01,0x40,0x11,0x25,0x0a,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe4,0xf0,0xad,0x0b,
+0xaf,0x0a,0x41,0xa5,0x25,0x0a,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe5,0x0f,0xf0,
+0x22,0xad,0x07,0x75,0xf0,0x09,0xed,0x90,0x96,0x48,0x12,0x43,0x5f,0xe0,0xff,0x74,
+0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xe0,0x54,0x1f,0xf5,0x12,0xd3,0x9f,
+0x40,0x02,0x8f,0x12,0xe5,0x12,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,
+0x83,0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xe5,0x12,0x25,0xe0,0x24,0x66,0xf5,0x82,
+0xe4,0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,
+0xef,0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,
+0xf0,0xa3,0xef,0xf0,0xaf,0x05,0xad,0x12,0x51,0xa5,0xaf,0x12,0x22,0xac,0x07,0xec,
+0xc3,0x94,0x20,0x50,0x0d,0x74,0x84,0x2c,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,
+0x80,0x0b,0x74,0xa6,0x2c,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x54,0x7f,0xf5,
+0x1f,0xe5,0x1f,0x54,0x1f,0xff,0x90,0x9e,0x25,0xf0,0x75,0xf0,0x09,0xec,0x90,0x96,
+0x49,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x27,0xf0,0x75,0xf0,0x09,0xec,0x90,0x96,0x48,
+0x12,0x43,0x5f,0xe0,0xfe,0x90,0x9e,0x28,0xf0,0xec,0x25,0xe0,0x24,0xc6,0xf5,0x82,
+0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x9e,0x29,0xcb,0xf0,0xa3,0xeb,
+0xf0,0xec,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xfb,0xa3,
+0xe0,0x90,0x9e,0x2b,0xcb,0xf0,0xa3,0xeb,0xf0,0xef,0xd3,0x9e,0x40,0x0a,0x90,0x9e,
+0x28,0xe0,0x90,0x9e,0x25,0xf0,0xf5,0x1f,0xed,0x70,0x02,0xa1,0x13,0x90,0x9e,0x26,
+0xed,0xf0,0xe5,0x1f,0x30,0xe6,0x0a,0x90,0x9e,0x25,0xe0,0xf5,0x1f,0xa3,0xe0,0x14,
+0xf0,0x90,0x9e,0x26,0xe0,0x70,0x02,0xa1,0x13,0x90,0x9e,0x25,0xe0,0xff,0xd3,0x94,
+0x00,0x50,0x02,0xa1,0x13,0xe4,0x90,0x9e,0x24,0xf0,0xef,0x14,0x90,0x9e,0x23,0xf0,
+0x90,0x9e,0x27,0xe0,0xfd,0x90,0x9e,0x23,0xe0,0xff,0xd3,0x9d,0x40,0x6b,0xef,0x94,
+0x10,0x40,0x21,0xef,0x24,0xf0,0xff,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,
+0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x9e,0x2b,0xe0,0x5e,0xfe,0xa3,0xe0,
+0x5f,0x4e,0x70,0x27,0x90,0x9e,0x23,0xe0,0xff,0xc3,0x94,0x10,0x50,0x33,0x74,0x01,
+0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,
+0x9e,0x29,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x16,0x90,0x9e,0x23,0xe0,0xf5,
+0x1f,0xa3,0xe0,0x04,0xf0,0x90,0x9e,0x26,0xe0,0xff,0x90,0x9e,0x24,0xe0,0x6f,0x60,
+0x08,0x90,0x9e,0x23,0xe0,0x14,0xf0,0x80,0x87,0x90,0x9e,0x26,0xe0,0xff,0x90,0x9e,
+0x24,0xe0,0xc3,0x9f,0x50,0x0d,0x90,0x9e,0x23,0xe0,0xb5,0x05,0x06,0x90,0x9e,0x27,
+0xe0,0xf5,0x1f,0xe5,0x1f,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,
+0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xe5,0x1f,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,
+0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,
+0x13,0xff,0xec,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,
+0xa3,0xef,0xf0,0xaf,0x04,0xad,0x1f,0x51,0xa5,0xaf,0x1f,0x22,0xad,0x07,0xed,0xc3,
+0x94,0x20,0x50,0x0d,0x74,0x84,0x2d,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x80,
+0x0b,0x74,0xa6,0x2d,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x54,0x7f,0xf5,0x1f,
+0xe5,0x1f,0x54,0x1f,0xfc,0x75,0xf0,0x09,0xed,0x90,0x96,0x48,0x12,0x43,0x5f,0xe0,
+0xff,0x90,0x9e,0x23,0xf0,0xed,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,
+0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x9e,0x24,0xcb,0xf0,0xa3,0xeb,0xf0,0xed,0x25,0xe0,
+0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x9e,0x26,
+0xcb,0xf0,0xa3,0xeb,0xf0,0xec,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,
+0x83,0xe4,0x93,0xfa,0x74,0x01,0x93,0xfb,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,
+0x34,0x95,0xf5,0x83,0xea,0xf0,0xa3,0xeb,0xf0,0xec,0xc3,0x9f,0x40,0x02,0xc1,0x7a,
+0x74,0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xec,0xf0,0x04,0xfb,0x90,0x9e,
+0x23,0xe0,0xff,0xeb,0xd3,0x9f,0x40,0x02,0xc1,0xab,0xeb,0xc3,0x94,0x10,0x40,0x21,
+0xeb,0x24,0xf0,0xff,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,
+0x33,0xce,0xd8,0xf9,0xff,0x90,0x9e,0x24,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x70,
+0x23,0xeb,0xc3,0x94,0x10,0x50,0x40,0x74,0x01,0x7e,0x00,0xa8,0x03,0x08,0x80,0x05,
+0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x9e,0x26,0xe0,0x5e,0xfe,0xa3,0xe0,
+0x5f,0x4e,0x60,0x23,0xbb,0x11,0x09,0x90,0x9e,0x25,0xe0,0x30,0xe7,0x02,0x7b,0x17,
+0xeb,0x64,0x13,0x60,0x03,0xbb,0x12,0x09,0x90,0x9e,0x24,0xe0,0x30,0xe0,0x02,0x7b,
+0x18,0xac,0x03,0x8c,0x1f,0x80,0x34,0x0b,0x80,0x84,0x90,0x9e,0x23,0xe0,0xfb,0x6c,
+0x70,0x69,0x74,0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xec,0xf0,0x75,0xf0,
+0x09,0xed,0x90,0x96,0x4a,0x12,0x43,0x5f,0xe0,0xb4,0x01,0x0c,0xe5,0x1f,0x20,0xe6,
+0x07,0xec,0x44,0x40,0xf5,0x1f,0x80,0x03,0xaf,0x1f,0x22,0xec,0x25,0xe0,0x24,0x9e,
+0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xec,0x25,
+0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,0xff,0xe4,
+0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,
+0x34,0x95,0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0x80,0x5b,0xec,0xd3,0x9b,0x40,0x56,
+0x90,0x9e,0x23,0xe0,0xff,0x74,0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xef,
+0xf0,0xac,0x07,0x8f,0x1f,0xec,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,
+0x83,0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xec,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,
+0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,
+0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,
+0xa3,0xef,0xf0,0xaf,0x1f,0x22,0x74,0x01,0x2d,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,
+0xe4,0xf0,0xaf,0x05,0xe5,0x1f,0x44,0x80,0xfd,0x51,0xa5,0xe5,0x1f,0x44,0x80,0xff,
+0x22,0xef,0xc3,0x94,0x20,0x50,0x39,0xef,0x30,0xe0,0x17,0xed,0xc4,0x54,0xf0,0xfd,
+0xef,0xc3,0x13,0xfe,0x24,0xa4,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x54,0x0f,
+0x80,0x10,0xef,0xc3,0x13,0xfe,0x24,0xa4,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,
+0x54,0xf0,0xf0,0x74,0xa4,0x2e,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x4d,0xf0,
+0x22,0xe4,0xf5,0x14,0xe5,0x14,0xb4,0x20,0x14,0x90,0x9a,0xc5,0xe0,0x04,0xf0,0x90,
+0x95,0x01,0xe0,0xff,0x90,0x9a,0xc5,0xe0,0xb5,0x07,0x02,0xe4,0xf0,0x75,0xf0,0x09,
+0xe5,0x14,0x90,0x96,0x4b,0x12,0x43,0x5f,0xe0,0x64,0x01,0x60,0x03,0x02,0x6e,0x6a,
+0xe5,0x14,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe0,0xfe,0xa3,
+0xe0,0xd3,0x94,0x00,0xee,0x94,0x00,0x50,0x03,0x02,0x6e,0x6a,0xe5,0x14,0x94,0x20,
+0x40,0x09,0x90,0x9a,0xc5,0xe0,0x60,0x03,0x02,0x6e,0x76,0xe5,0x14,0x75,0xf0,0x0a,
+0xa4,0x24,0x00,0xf9,0x74,0x90,0x35,0xf0,0x75,0x18,0x01,0xf5,0x19,0x89,0x1a,0xe5,
+0x14,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe0,0xff,0xa3,0xe0,
+0x90,0x9e,0x1b,0xcf,0xf0,0xa3,0xef,0xf0,0xe5,0x14,0x25,0xe0,0x24,0xc4,0xf5,0x82,
+0xe4,0x34,0x98,0xf5,0x83,0xe0,0xff,0xa3,0xe0,0x90,0x9e,0x1d,0xcf,0xf0,0xa3,0xef,
+0xf0,0xe5,0x14,0xc3,0x94,0x20,0x50,0x14,0x74,0x84,0x25,0x14,0xf5,0x82,0xe4,0x34,
+0x04,0xf5,0x83,0xe0,0x54,0x3f,0x90,0x9e,0x19,0xf0,0x80,0x12,0x74,0xa6,0x25,0x14,
+0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x54,0x3f,0x90,0x9e,0x19,0xf0,0x90,0x9e,
+0x19,0xe0,0xfe,0x54,0x1f,0xa3,0xf0,0x75,0xf0,0x09,0xe5,0x14,0x90,0x96,0x48,0x12,
+0x43,0x5f,0xe0,0x90,0x9e,0x20,0xf0,0x74,0xe6,0x25,0x14,0xf5,0x82,0xe4,0x34,0x9c,
+0xf5,0x83,0xe0,0xc3,0x94,0x05,0x40,0x02,0x41,0x9f,0x90,0x9e,0x20,0xe0,0xff,0x90,
+0x9e,0x1a,0xe0,0x9f,0x40,0x13,0x90,0x9e,0x20,0xe0,0x90,0x9e,0x1a,0xf0,0xee,0x54,
+0x40,0xfe,0x90,0x9e,0x19,0xf0,0xef,0x4e,0xf0,0x90,0x04,0xfd,0xe0,0x54,0x05,0x64,
+0x01,0x70,0x29,0x90,0x9e,0x1a,0xe0,0xff,0x90,0x41,0x4a,0x93,0xfe,0x74,0x44,0x25,
+0x14,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xc3,0x9e,0x40,0x06,0xef,0x90,0x40,
+0xda,0x80,0x30,0x90,0x9e,0x1a,0xe0,0x90,0x40,0xf6,0x80,0x27,0x90,0x9e,0x1a,0xe0,
+0xff,0x90,0x41,0x4a,0x93,0xfe,0x74,0x44,0x25,0x14,0xf5,0x82,0xe4,0x34,0x9a,0xf5,
+0x83,0xe0,0xc3,0x9e,0x40,0x06,0xef,0x90,0x41,0x12,0x80,0x07,0x90,0x9e,0x1a,0xe0,
+0x90,0x41,0x2e,0x93,0x90,0x9e,0x1f,0xf0,0x90,0x9e,0x1f,0xe0,0x75,0xf0,0x06,0xa4,
+0x24,0x50,0xf9,0x74,0x40,0x35,0xf0,0xfa,0x7b,0xff,0x8b,0x15,0xf5,0x16,0x89,0x17,
+0xe5,0x14,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xf5,0x1b,
+0xa3,0xe0,0xf5,0x1c,0x12,0x29,0xd9,0xff,0x7e,0x00,0xab,0x18,0xaa,0x19,0xa9,0x1a,
+0x12,0x42,0x97,0xfd,0xac,0xf0,0x12,0x29,0xf2,0xef,0x25,0x1c,0xf5,0x1c,0xee,0x35,
+0x1b,0xf5,0x1b,0xab,0x15,0xaa,0x16,0xa9,0x17,0x90,0x00,0x01,0x12,0x42,0x20,0xff,
+0x7e,0x00,0xab,0x18,0xaa,0x19,0xa9,0x1a,0x90,0x00,0x02,0x12,0x42,0xc2,0xfd,0xac,
+0xf0,0x12,0x29,0xf2,0xef,0x25,0x1c,0xf5,0x1c,0xee,0x35,0x1b,0xf5,0x1b,0xab,0x15,
+0xaa,0x16,0xa9,0x17,0x90,0x00,0x02,0x12,0x42,0x20,0xff,0x7e,0x00,0xab,0x18,0xaa,
+0x19,0xa9,0x1a,0x90,0x00,0x04,0x12,0x42,0xc2,0xfd,0xac,0xf0,0x12,0x29,0xf2,0xef,
+0x25,0x1c,0xf5,0x1c,0xee,0x35,0x1b,0xf5,0x1b,0xab,0x15,0xaa,0x16,0xa9,0x17,0x90,
+0x00,0x03,0x12,0x42,0x20,0xff,0x7e,0x00,0xab,0x18,0xaa,0x19,0xa9,0x1a,0x90,0x00,
+0x06,0x12,0x42,0xc2,0xfd,0xac,0xf0,0x12,0x29,0xf2,0xef,0x25,0x1c,0xf5,0x1c,0xee,
+0x35,0x1b,0xf5,0x1b,0xab,0x15,0xaa,0x16,0xa9,0x17,0x90,0x00,0x04,0x12,0x42,0x20,
+0xff,0x7e,0x00,0xab,0x18,0xaa,0x19,0xa9,0x1a,0x90,0x00,0x08,0x12,0x42,0xc2,0xfd,
+0xac,0xf0,0x12,0x29,0xf2,0xef,0x25,0x1c,0xf5,0x1c,0xee,0x35,0x1b,0xf5,0x1b,0xab,
+0x15,0xaa,0x16,0xa9,0x17,0x90,0x00,0x05,0x12,0x42,0x20,0xff,0x7e,0x00,0x90,0x9e,
+0x1b,0xe0,0xfc,0xa3,0xe0,0xfd,0x12,0x29,0xf2,0xd3,0xe5,0x1c,0x9f,0xe5,0x1b,0x9e,
+0x40,0x0c,0xe5,0x1c,0x9f,0xf5,0x1c,0xe5,0x1b,0x9e,0xf5,0x1b,0x80,0x05,0xe4,0xf5,
+0x1b,0xf5,0x1c,0xe5,0x14,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,
+0xe5,0x1b,0xf0,0xa3,0xe5,0x1c,0xf0,0x90,0x9e,0x19,0xe0,0x25,0xe0,0x24,0x66,0xf5,
+0x82,0xe4,0x34,0x41,0xf5,0x83,0xc3,0x74,0x01,0x93,0x95,0x1c,0xe4,0x93,0x95,0x1b,
+0x50,0x07,0xaf,0x14,0x12,0x65,0x5c,0xa1,0x31,0x90,0x9e,0x19,0xe0,0x25,0xe0,0x24,
+0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xd3,0x74,0x01,0x93,0x95,0x1c,0xe4,0x93,
+0x95,0x1b,0x50,0x02,0xa1,0x31,0x7d,0x01,0xaf,0x14,0x12,0x63,0xbd,0xa1,0x31,0x74,
+0xe6,0x25,0x14,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0xfc,0x64,0x05,0x60,0x02,
+0x81,0x3a,0x90,0x96,0x43,0xe0,0xff,0xb4,0x03,0x0b,0x90,0x9e,0x1a,0xe0,0xc3,0x94,
+0x19,0x40,0x3d,0x80,0x2e,0xef,0xb4,0x02,0x0b,0x90,0x9e,0x1a,0xe0,0xc3,0x94,0x11,
+0x40,0x2e,0x80,0x1f,0x90,0x96,0x43,0xe0,0xff,0xb4,0x01,0x0b,0x90,0x9e,0x1a,0xe0,
+0xc3,0x94,0x0a,0x40,0x1b,0x80,0x0c,0xef,0x70,0x11,0x90,0x9e,0x1a,0xe0,0xc3,0x94,
+0x03,0x40,0x0d,0x90,0x9a,0x84,0x74,0x01,0xf0,0x80,0x05,0xe4,0x90,0x9a,0x84,0xf0,
+0x74,0x84,0x25,0x14,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe0,0xf5,0x1e,0x74,0x44,
+0x25,0x14,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xff,0xc3,0x94,0x30,0x50,0x02,
+0x61,0xe7,0x90,0x9a,0x84,0xe0,0x64,0x01,0x60,0x02,0x61,0xe7,0x74,0x85,0x25,0x14,
+0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0x64,0x0a,0x60,0x51,0xef,0x24,0x05,0xff,
+0xe4,0x33,0xfe,0x74,0x41,0x25,0x14,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe0,0xfd,
+0xd3,0x9f,0xee,0x64,0x80,0xf8,0x74,0x80,0x98,0x50,0x32,0xed,0x24,0x05,0xff,0xe4,
+0x33,0xfe,0x74,0x44,0x25,0x14,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xd3,0x9f,
+0xee,0x64,0x80,0xf8,0x74,0x80,0x98,0x50,0x14,0x74,0x26,0x25,0x14,0xf5,0x82,0xe4,
+0x34,0x9d,0xf5,0x83,0xe0,0xff,0x90,0x9e,0x1a,0xe0,0x6f,0x60,0x3d,0x74,0x44,0x25,
+0x14,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xff,0xd3,0x94,0x42,0x40,0x05,0x75,
+0x1e,0x05,0x80,0x0e,0xef,0xd3,0x94,0x39,0x40,0x05,0x75,0x1e,0x03,0x80,0x03,0x75,
+0x1e,0x01,0x74,0x41,0x25,0x14,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xef,0xf0,0x74,
+0x85,0x25,0x14,0xf5,0x82,0xe4,0x34,0x9a,0x80,0x29,0x74,0xe6,0x25,0x14,0xf5,0x82,
+0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x74,0x85,0x25,0x14,0xf5,0x82,0xe4,0x34,0x9a,
+0xf5,0x83,0xe0,0x04,0xf0,0x80,0x10,0xe4,0xf5,0x1e,0x74,0xe6,0x25,0x14,0xf5,0x82,
+0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x90,0x9e,0x1a,0xe0,0xff,0x74,0x26,0x25,0x14,
+0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xef,0xf0,0x74,0x84,0x25,0x14,0xf5,0x82,0xe4,
+0x34,0x98,0xf5,0x83,0xe5,0x1e,0xf0,0x75,0xf0,0x09,0xe5,0x14,0x90,0x96,0x4c,0x12,
+0x43,0x5f,0xe0,0xb4,0x01,0x10,0xe4,0xf5,0x1e,0x74,0xe6,0x25,0x14,0xf5,0x82,0xe4,
+0x34,0x9c,0xf5,0x83,0xe4,0xf0,0xad,0x1e,0xa1,0x2c,0xec,0x64,0x06,0x60,0x02,0xa1,
+0x31,0xf5,0x1b,0xf5,0x1c,0x90,0x42,0x13,0x93,0xff,0x7e,0x00,0x90,0x9e,0x1b,0xe0,
+0xfc,0xa3,0xe0,0xfd,0x12,0x29,0xf2,0x90,0x9e,0x21,0xee,0xf0,0xa3,0xef,0xf0,0x74,
+0x84,0x25,0x14,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe0,0xf5,0x1e,0xe4,0xf5,0x1d,
+0xab,0x18,0xaa,0x19,0xa9,0x1a,0x75,0xf0,0x02,0xe5,0x1d,0xa4,0xf5,0x82,0x85,0xf0,
+0x83,0x12,0x42,0xc2,0xfd,0xac,0xf0,0xe5,0x1d,0x90,0x42,0x0e,0x93,0xff,0x7e,0x00,
+0x12,0x29,0xf2,0xef,0x25,0x1c,0xf5,0x1c,0xee,0x35,0x1b,0xf5,0x1b,0xc3,0x90,0x9e,
+0x22,0xe0,0x95,0x1c,0x90,0x9e,0x21,0xe0,0x95,0x1b,0x40,0x07,0x05,0x1d,0xe5,0x1d,
+0xb4,0x05,0xbd,0xe5,0x1d,0xc3,0x13,0xf5,0x1d,0xe5,0x1e,0xb4,0x01,0x06,0xe5,0x1d,
+0x70,0x46,0x80,0x13,0xe5,0x1e,0xb4,0x03,0x15,0xe5,0x1d,0x70,0x05,0x75,0x1e,0x03,
+0x80,0x39,0xe5,0x1d,0xb4,0x01,0x05,0x75,0x1e,0x01,0x80,0x2f,0x80,0x2a,0xe5,0x1e,
+0xb4,0x05,0x28,0xe5,0x1d,0x70,0x05,0x75,0x1e,0x05,0x80,0x0d,0xe5,0x1d,0xb4,0x01,
+0x05,0x75,0x1e,0x03,0x80,0x03,0x75,0x1e,0x01,0xd3,0x90,0x9e,0x1e,0xe0,0x94,0x03,
+0x90,0x9e,0x1d,0xe0,0x94,0x00,0x40,0x03,0xe4,0xf5,0x1e,0xd3,0x90,0x9e,0x1e,0xe0,
+0x94,0x03,0x90,0x9e,0x1d,0xe0,0x94,0x00,0x40,0x03,0xe4,0xf5,0x1e,0x74,0x84,0x25,
+0x14,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe5,0x1e,0xf0,0xfd,0xaf,0x14,0x12,0x67,
+0x61,0x74,0xe6,0x25,0x14,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0xd3,0x94,0x05,
+0x74,0xe6,0x50,0x0e,0x25,0x14,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x04,0xf0,
+0x80,0x0b,0x25,0x14,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x90,0x9e,0x1d,
+0xe0,0xfe,0xa3,0xe0,0xff,0xc3,0x74,0xff,0x9f,0xfd,0x74,0xff,0x9e,0xfc,0xe5,0x14,
+0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xfa,0xa3,0xe0,0xd3,
+0x9d,0xea,0x9c,0xe5,0x14,0x50,0x13,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9a,
+0xf5,0x83,0xee,0x8f,0xf0,0x12,0x42,0x81,0x80,0x10,0x25,0xe0,0x24,0xc6,0xf5,0x82,
+0xe4,0x34,0x9a,0xf5,0x83,0x74,0xff,0xf0,0xa3,0xf0,0xe5,0x14,0x25,0xe0,0x24,0x44,
+0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0xff,0xc3,0x74,0xff,0x9f,
+0xfd,0x74,0xff,0x9e,0xfc,0xe5,0x14,0x25,0xe0,0x24,0x46,0xf5,0x82,0xe4,0x34,0x9b,
+0xf5,0x83,0xe0,0xfa,0xa3,0xe0,0xd3,0x9d,0xea,0x9c,0xe5,0x14,0x50,0x13,0x25,0xe0,
+0x24,0x46,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xee,0x8f,0xf0,0x12,0x42,0x81,0x80,
+0x10,0x25,0xe0,0x24,0x46,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0xff,0xf0,0xa3,
+0xf0,0xab,0x18,0xaa,0x19,0xa9,0x1a,0xe4,0xf5,0xf0,0x12,0x42,0xfa,0xab,0x18,0xaa,
+0x19,0xa9,0x1a,0x90,0x00,0x02,0xe4,0xf5,0xf0,0x12,0x43,0x19,0x90,0x00,0x04,0xe4,
+0xf5,0xf0,0x12,0x43,0x19,0x90,0x00,0x06,0xe4,0xf5,0xf0,0x12,0x43,0x19,0x90,0x00,
+0x08,0xe4,0xf5,0xf0,0x12,0x43,0x19,0xe5,0x14,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,
+0x34,0x93,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xe5,0x14,0x25,0xe0,0x24,0xc4,0xf5,0x82,
+0xe4,0x34,0x98,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xe5,0x14,0x25,0xe0,0x24,0x44,0xf5,
+0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0x05,0x14,0xe5,0x14,0xc3,0x94,
+0x40,0x50,0x03,0x02,0x67,0xa4,0x22,0x90,0x04,0x44,0x74,0x11,0xf0,0xa3,0x74,0xf0,
+0xf0,0xa3,0x74,0x0f,0xf0,0xa3,0xe4,0xf0,0xfd,0x74,0xa4,0x2d,0xf5,0x82,0xe4,0x34,
+0x04,0xf5,0x83,0xe4,0xf0,0x0d,0xbd,0x10,0xf0,0xe4,0x90,0x9a,0xc5,0xf0,0x90,0x95,
+0x01,0x04,0xf0,0xe4,0xfd,0x75,0xf0,0x0a,0xed,0x90,0x90,0x00,0x12,0x43,0x5f,0xe4,
+0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,0x90,0x02,0x12,0x43,0x5f,0xe4,0xf0,0xa3,
+0xf0,0x75,0xf0,0x0a,0xed,0x90,0x90,0x04,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,
+0xf0,0x0a,0xed,0x90,0x90,0x06,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,
+0xed,0x90,0x90,0x08,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x74,0x26,0x2d,0xf5,0x82,
+0xe4,0x34,0x9d,0xf5,0x83,0x74,0x13,0xf0,0x74,0x85,0x2d,0xf5,0x82,0xe4,0x34,0x9a,
+0xf5,0x83,0xe4,0xf0,0x74,0x84,0x2d,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe4,0xf0,
+0xed,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,
+0xed,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,
+0xed,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,
+0xed,0x25,0xe0,0x24,0x44,0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,
+0xed,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,
+0xed,0x25,0xe0,0x24,0x46,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,
+0x74,0x86,0x2d,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x74,0x46,0x2d,0xf5,
+0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x74,0xe6,0x2d,0xf5,0x82,0xe4,0x34,0x9c,
+0xf5,0x83,0xe4,0xf0,0x90,0x41,0xc4,0x93,0xfe,0x74,0x01,0x93,0xff,0x90,0x41,0x8c,
+0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,0xed,0x25,
+0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0x75,
+0xf0,0x09,0xed,0x90,0x96,0x4b,0x12,0x43,0x5f,0x74,0x01,0xf0,0x75,0xf0,0x09,0xed,
+0x90,0x96,0x4a,0x12,0x43,0x5f,0x74,0x01,0xf0,0x74,0x82,0x2d,0xf5,0x82,0xe4,0x34,
+0x95,0xf5,0x83,0x74,0x0c,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x46,0x12,0x43,0x5f,
+0x74,0xff,0xf0,0xa3,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x44,0x12,0x43,0x5f,0xe4,
+0xf0,0xa3,0x74,0x0f,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x48,0x12,0x43,0x5f,0x74,
+0x13,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x49,0x12,0x43,0x5f,0xe4,0xf0,0xed,0xc3,
+0x94,0x20,0x50,0x0f,0x74,0x84,0x2d,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0x74,0x13,
+0xf0,0x80,0x0d,0x74,0xa6,0x2d,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0x74,0x13,0xf0,
+0x0d,0xed,0x64,0x40,0x60,0x03,0x02,0x6e,0xa5,0x22,0x12,0x29,0xd9,0xf5,0x14,0xc3,
+0x94,0x40,0x50,0x15,0x90,0x00,0x02,0x12,0x42,0x20,0xff,0x74,0x44,0x25,0x14,0xf5,
+0x82,0xe4,0x34,0x9a,0xf5,0x83,0xef,0xf0,0x22,0xe5,0x14,0xb4,0x40,0x0a,0x90,0x00,
+0x02,0x12,0x42,0x20,0x90,0x96,0x42,0xf0,0x22,0x90,0x9e,0x30,0x12,0x43,0x8b,0x90,
+0x9e,0x33,0xe0,0x54,0xf0,0x44,0x02,0xf0,0x54,0x0f,0x44,0xc0,0xf0,0x90,0x9e,0x30,
+0x12,0x43,0x6b,0x90,0x9e,0x90,0x12,0x43,0x8b,0x7b,0x01,0x7a,0x9e,0x79,0x33,0x02,
+0x53,0xf1,0x90,0x00,0x02,0x12,0x42,0x20,0xfd,0x90,0x00,0x01,0x12,0x42,0x20,0xfc,
+0xed,0xc3,0x94,0x40,0x40,0x02,0xe4,0xfd,0xec,0xc3,0x94,0x40,0x40,0x02,0xe4,0xfc,
+0xed,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xfa,0xa3,0xe0,
+0xfb,0xea,0x90,0x9e,0x24,0xf0,0xeb,0xa3,0xf0,0xed,0x25,0xe0,0x24,0x46,0xf5,0x82,
+0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfa,0xa3,0xe0,0xfb,0xea,0x90,0x9e,0x26,0xf0,0xeb,
+0xa3,0xf0,0xa3,0xed,0xf0,0xa3,0x74,0xff,0xf0,0xec,0x25,0xe0,0x24,0xc6,0xf5,0x82,
+0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xfa,0xa3,0xe0,0xfb,0xea,0x90,0x9e,0x2a,0xf0,0xeb,
+0xa3,0xf0,0xec,0x25,0xe0,0x24,0x46,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfa,
+0xa3,0xe0,0xfb,0xea,0x90,0x9e,0x2c,0xf0,0xeb,0xa3,0xf0,0xa3,0xec,0xf0,0xa3,0x74,
+0xff,0xf0,0xed,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe4,0xf0,
+0xa3,0xf0,0xed,0x25,0xe0,0x24,0x46,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe4,0xf0,
+0xa3,0xf0,0xec,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe4,0xf0,
+0xa3,0xf0,0xec,0x25,0xe0,0x24,0x46,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe4,0xf0,
+0xa3,0xf0,0x7b,0x01,0x7a,0x9e,0x79,0x24,0x01,0x79,0xd3,0x10,0xaf,0x01,0xc3,0xc0,
+0xd0,0x90,0x9e,0xa4,0xee,0xf0,0xa3,0xef,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0x90,0x9e,
+0xa4,0xe0,0xfe,0xa3,0xe0,0xf5,0x82,0x8e,0x83,0xe0,0x60,0x2d,0xc3,0x90,0x9e,0xa7,
+0xe0,0x94,0xe8,0x90,0x9e,0xa6,0xe0,0x94,0x03,0x40,0x0b,0x90,0x01,0xc6,0xe0,0x44,
+0x10,0xf0,0x7f,0x00,0x80,0x15,0x90,0x9e,0xa6,0xe4,0x75,0xf0,0x01,0x12,0x42,0x81,
+0x7f,0x0a,0x7e,0x00,0x12,0x37,0x54,0x80,0xc5,0x7f,0x01,0xd0,0xd0,0x92,0xaf,0x22,
+0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x24,0x12,0x2a,0x8b,0x00,0x00,0x00,
+0x00,0x90,0x00,0x01,0x12,0x42,0x20,0x90,0x9e,0x66,0xf0,0x90,0x00,0x03,0x12,0x42,
+0x20,0x90,0x9e,0x55,0xf0,0x12,0x56,0x22,0x90,0x01,0xe5,0xe5,0x63,0xf0,0x90,0x9e,
+0x66,0xe0,0x90,0x01,0xe6,0xf0,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x00,0x02,0x12,0x42,
+0x20,0xff,0x30,0xe0,0x25,0x12,0x29,0xd9,0x90,0x9e,0x5c,0xf0,0x90,0x00,0x01,0x12,
+0x42,0x20,0x90,0x9e,0x5d,0xf0,0xef,0xc3,0x13,0x54,0x7f,0x90,0x9e,0x5b,0xf0,0x90,
+0x00,0x03,0x12,0x42,0x20,0x90,0x9e,0x62,0xf0,0x22,0x90,0x9e,0x5c,0x74,0x0a,0xf0,
+0x90,0x9e,0x5d,0x74,0x05,0xf0,0x90,0x9e,0x5b,0x74,0x14,0xf0,0x90,0x9e,0x62,0x74,
+0x05,0xf0,0x22,0x12,0x29,0xd9,0x30,0xe0,0x19,0xc3,0x13,0x54,0x7f,0x90,0x9e,0x61,
+0xf0,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0x90,0x9e,0x5f,0xe4,0xf0,0xa3,0xef,0xf0,
+0x80,0x0f,0x90,0x9e,0x61,0x74,0x07,0xf0,0x90,0x9e,0x5f,0xe4,0xf0,0xa3,0x74,0x03,
+0xf0,0x90,0x9e,0x5f,0xe0,0xa3,0xe0,0x90,0x05,0x58,0xf0,0x22,0x90,0x9e,0x24,0x12,
+0x2a,0x8b,0x00,0x00,0x00,0x00,0x12,0x29,0xd9,0x60,0x0d,0x90,0x9e,0x5e,0xf0,0xe4,
+0xfd,0x7f,0x04,0x12,0x54,0xe7,0x80,0x05,0xe4,0x90,0x9e,0x5e,0xf0,0x90,0x9e,0x5e,
+0xe0,0x90,0x01,0xe7,0xf0,0x22,0x90,0x02,0x09,0xe0,0xfd,0x12,0x29,0xd9,0xfe,0xaf,
+0x05,0xed,0x2e,0x90,0x9e,0x78,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0xed,0x2f,
+0x90,0x9e,0x79,0xf0,0x90,0x00,0x02,0x12,0x42,0x20,0xff,0xed,0x2f,0x90,0x9e,0x7a,
+0xf0,0x90,0x00,0x03,0x12,0x42,0x20,0xff,0xed,0x2f,0x90,0x9e,0x7b,0xf0,0x90,0x00,
+0x04,0x12,0x42,0x20,0xff,0xae,0x05,0xed,0x2f,0x90,0x9e,0x7c,0xf0,0x22,0xd3,0x10,
+0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x24,0x12,0x43,0x8b,0x90,0x9e,0x24,0x12,0x43,
+0x6b,0x90,0x00,0x01,0x12,0x42,0xc2,0xfa,0xe5,0xf0,0x24,0x00,0xff,0xe4,0x3a,0xfe,
+0x90,0x9e,0x24,0x12,0x43,0x6b,0x90,0x00,0x01,0xee,0x8f,0xf0,0x12,0x43,0x19,0x12,
+0x29,0xd9,0xff,0x60,0x2d,0xb5,0x65,0x16,0x90,0x9e,0x24,0x12,0x43,0x6b,0x90,0x00,
+0x01,0x12,0x42,0xc2,0x65,0x67,0x70,0x04,0xe5,0x66,0x65,0xf0,0x60,0x24,0x90,0x9e,
+0x24,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,0x42,0xc2,0xff,0xae,0xf0,0x12,0x4e,0x37,
+0x80,0x10,0x90,0x9e,0x24,0x12,0x43,0x6b,0x12,0x29,0xd9,0x65,0x65,0x60,0x03,0x12,
+0x44,0xc2,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x06,0x34,0x74,0xff,0xf0,0xe4,0xa3,0xf0,
+0xa3,0xf0,0xa3,0xf0,0x22,0x90,0x06,0x34,0xe0,0x60,0x24,0x14,0x70,0x1a,0x7b,0x01,
+0x7a,0x06,0x79,0x35,0x7f,0xf9,0x7e,0x01,0x71,0xb0,0xbf,0x01,0x09,0x90,0x06,0x35,
+0xe0,0x54,0x0f,0xf0,0x80,0x04,0x80,0x00,0x80,0xcd,0xe4,0x90,0x06,0x34,0xf0,0x22,
+0x8e,0x14,0x8f,0x15,0x8b,0x16,0x8a,0x17,0x89,0x18,0xe4,0x90,0x9e,0x19,0xf0,0xef,
+0x90,0x00,0x31,0xf0,0x12,0x4d,0x45,0xe5,0x14,0x54,0x03,0xff,0x90,0x00,0x32,0xe0,
+0x54,0xfc,0x4f,0xf0,0x12,0x4d,0x45,0x90,0x00,0x33,0xe0,0x54,0x7f,0xf0,0x12,0x4d,
+0x45,0x90,0x00,0x33,0xe0,0x20,0xe7,0x0e,0x90,0x9e,0x19,0xe0,0xc3,0x94,0x64,0x50,
+0x05,0xe0,0x04,0xf0,0x80,0xeb,0x90,0x9e,0x19,0xe0,0xc3,0x94,0x64,0x50,0x10,0x90,
+0x00,0x30,0xe0,0xab,0x16,0xaa,0x17,0xa9,0x18,0x12,0x42,0x4d,0x7f,0x01,0x22,0x7f,
+0x00,0x22,0xe4,0x90,0x9e,0xac,0xf0,0xa3,0xf0,0x90,0x05,0xf8,0xe0,0x70,0x0f,0xa3,
+0xe0,0x70,0x0b,0xa3,0xe0,0x70,0x07,0xa3,0xe0,0x70,0x03,0x7f,0x01,0x22,0xd3,0x90,
+0x9e,0xad,0xe0,0x94,0xe8,0x90,0x9e,0xac,0xe0,0x94,0x03,0x40,0x03,0x7f,0x00,0x22,
+0x7f,0x32,0x7e,0x00,0x12,0x37,0x54,0x90,0x9e,0xac,0xe4,0x75,0xf0,0x01,0x12,0x42,
+0x81,0x80,0xc6,0x90,0x00,0x11,0xe0,0x44,0x09,0xf0,0x12,0x4d,0x45,0x90,0x9d,0xff,
+0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x78,0x7e,0x08,0x12,0x2f,0xd9,
+0x90,0x9e,0x03,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,
+0x12,0x2f,0xd9,0x90,0x9e,0x07,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
+0x00,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9e,0x0b,0x12,0x43,0x53,0x90,0x80,0x85,0x12,
+0x2a,0x7f,0x7f,0x70,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x59,0x12,0x2a,0x8b,0x00,
+0x03,0x2d,0x95,0xe4,0xfd,0xff,0x12,0x34,0x81,0x90,0x9e,0x80,0xe0,0xb4,0x01,0x11,
+0x90,0x80,0x59,0x12,0x2a,0x8b,0x00,0x03,0x2d,0x95,0xe4,0xfd,0x7f,0x01,0x12,0x34,
+0x81,0x22,0x7f,0x78,0x7e,0x08,0x12,0x27,0xde,0x90,0x9d,0xff,0x12,0x2a,0x7f,0x7f,
+0x04,0x7e,0x0c,0x12,0x27,0xde,0x90,0x9e,0x03,0x12,0x2a,0x7f,0x7f,0x00,0x7e,0x08,
+0x12,0x27,0xde,0x90,0x9e,0x07,0x12,0x2a,0x7f,0x90,0x9e,0x80,0xe0,0x90,0x9d,0xff,
+0xb4,0x01,0x0d,0x12,0x43,0x53,0xef,0x54,0xc7,0xff,0xed,0x54,0xc7,0xfd,0x80,0x07,
+0x12,0x43,0x53,0xef,0x54,0xc7,0xff,0xec,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x78,
+0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9e,0x03,0x12,0x43,0x53,0xef,0x54,0x0f,0xff,0xec,
+0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x90,0x9e,0x07,
+0x12,0x43,0x53,0xef,0x44,0x02,0xff,0xec,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x00,
+0x7e,0x08,0x12,0x2f,0xd9,0x7f,0x70,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9e,0x0b,0x12,
+0x2a,0x7f,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x1b,0x25,0xa0,0x7f,0x70,0x7e,0x0e,
+0x12,0x2f,0xd9,0x90,0x80,0x59,0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0xe4,0xfd,0xff,
+0x12,0x34,0x81,0x90,0x9e,0x80,0xe0,0xb4,0x01,0x11,0x90,0x80,0x59,0x12,0x2a,0x8b,
+0x00,0x00,0x00,0x00,0xe4,0xfd,0x7f,0x01,0x12,0x34,0x81,0x90,0x00,0x11,0xe0,0x54,
+0xf6,0xf0,0x02,0x4d,0x45,0xef,0x70,0x02,0xe1,0x5c,0x90,0x9e,0x0f,0xe0,0x60,0x03,
+0x02,0x7b,0x28,0x90,0x9d,0xfb,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
+0x8c,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9d,0xa7,0x12,0x43,0x53,0x90,0x80,0x85,0x12,
+0x2a,0x7f,0x7f,0x44,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9d,0xab,0x12,0x43,0x53,0x90,
+0x80,0x85,0x12,0x2a,0x7f,0x7f,0x5c,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9d,0xaf,0x12,
+0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x6c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,
+0x9d,0xb3,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x70,0x7e,0x0e,0x12,
+0x2f,0xd9,0x90,0x9d,0xb7,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x74,
+0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xbb,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,
+0x7f,0x7f,0x78,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xbf,0x12,0x43,0x53,0x90,0x80,
+0x85,0x12,0x2a,0x7f,0x7f,0x7c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xc3,0x12,0x43,
+0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,
+0xc7,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x84,0x7e,0x0e,0x12,0x2f,
+0xd9,0x90,0x9d,0xcb,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x88,0x7e,
+0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xcf,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,
+0x7f,0x8c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xd3,0x12,0x43,0x53,0x90,0x80,0x85,
+0x12,0x2a,0x7f,0x7f,0xd0,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xd7,0x12,0x43,0x53,
+0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0xd4,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xdb,
+0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0xd8,0x7e,0x0e,0x12,0x2f,0xd9,
+0x90,0x9d,0xdf,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0xdc,0x7e,0x0e,
+0x12,0x2f,0xd9,0x90,0x9d,0xe3,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
+0xe0,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xe7,0x12,0x43,0x53,0x90,0x80,0x85,0x12,
+0x2a,0x7f,0x7f,0xec,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xeb,0x12,0x43,0x53,0x90,
+0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x90,0x9d,0xef,0x12,
+0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0d,0x12,0x2f,0xd9,0x90,
+0x9d,0xf3,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,
+0x2f,0xd9,0x90,0x9d,0xf7,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,
+0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9e,0x0f,0x74,0x01,0xf0,0x22,0x90,0x9e,0x0f,0xe0,
+0x64,0x01,0x60,0x03,0x02,0x7b,0x28,0x7f,0x8c,0x7e,0x08,0x12,0x27,0xde,0x90,0x9d,
+0xfb,0x12,0x2a,0x7f,0x7f,0x44,0x7e,0x08,0x12,0x27,0xde,0x90,0x9d,0xa7,0x12,0x2a,
+0x7f,0x7f,0x5c,0x7e,0x08,0x12,0x27,0xde,0x90,0x9d,0xab,0x12,0x2a,0x7f,0x7f,0x6c,
+0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xaf,0x12,0x2a,0x7f,0x7f,0x70,0x7e,0x0e,0x12,
+0x27,0xde,0x90,0x9d,0xb3,0x12,0x2a,0x7f,0x7f,0x74,0x7e,0x0e,0x12,0x27,0xde,0x90,
+0x9d,0xb7,0x12,0x2a,0x7f,0x7f,0x78,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xbb,0x12,
+0x2a,0x7f,0x7f,0x7c,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xbf,0x12,0x2a,0x7f,0x7f,
+0x80,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xc3,0x12,0x2a,0x7f,0x7f,0x84,0x7e,0x0e,
+0x12,0x27,0xde,0x90,0x9d,0xc7,0x12,0x2a,0x7f,0x7f,0x88,0x7e,0x0e,0x12,0x27,0xde,
+0x90,0x9d,0xcb,0x12,0x2a,0x7f,0x7f,0x8c,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xcf,
+0x12,0x2a,0x7f,0x7f,0xd0,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xd3,0x12,0x2a,0x7f,
+0x7f,0xd4,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xd7,0x12,0x2a,0x7f,0x7f,0xd8,0x7e,
+0x0e,0x12,0x27,0xde,0x90,0x9d,0xdb,0x12,0x2a,0x7f,0x7f,0xdc,0x7e,0x0e,0x12,0x27,
+0xde,0x90,0x9d,0xdf,0x12,0x2a,0x7f,0x7f,0xe0,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,
+0xe3,0x12,0x2a,0x7f,0x7f,0xec,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xe7,0x12,0x2a,
+0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x27,0xde,0x90,0x9d,0xeb,0x12,0x2a,0x7f,0x7f,0x04,
+0x7e,0x0d,0x12,0x27,0xde,0x90,0x9d,0xef,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,
+0x27,0xde,0x90,0x9d,0xf3,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x08,0x12,0x27,0xde,0x90,
+0x9d,0xf7,0x12,0x2a,0x7f,0x7f,0x8c,0x7e,0x08,0x12,0x27,0xde,0x90,0x9e,0xa8,0x12,
+0x2a,0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,0xed,0x44,0xc0,0xfd,0xec,0x90,0x9e,0xa8,
+0x12,0x2a,0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
+0x8c,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x01,0x00,0x00,
+0x7f,0x44,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0xdb,0x25,
+0xa4,0x7f,0x5c,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,
+0x25,0xa4,0x7f,0x6c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,
+0xdb,0x25,0xa4,0x7f,0x70,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,
+0x04,0x1b,0x25,0xa4,0x7f,0x74,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,
+0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x78,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,
+0x2a,0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x7c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,
+0x12,0x2a,0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x80,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,
+0x85,0x12,0x2a,0x8b,0x63,0xdb,0x25,0xa4,0x7f,0x84,0x7e,0x0e,0x12,0x2f,0xd9,0x90,
+0x80,0x85,0x12,0x2a,0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x88,0x7e,0x0e,0x12,0x2f,0xd9,
+0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0x8c,0x7e,0x0e,0x12,0x2f,
+0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd0,0x7e,0x0e,0x12,
+0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd4,0x7e,0x0e,
+0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd8,0x7e,
+0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x1b,0x25,0xa4,0x7f,0xdc,
+0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x1b,0x25,0xa4,0x7f,
+0xe0,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x24,0xdb,0x25,0xa4,
+0x7f,0xec,0x7e,0x0e,0x12,0x2f,0xd9,0x7f,0x04,0x7e,0x0c,0x12,0x27,0xde,0x90,0x9e,
+0xa8,0x12,0x2a,0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,0xe4,0xff,0xec,0x90,0x9e,0xa8,
+0x12,0x2a,0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,0xef,0x44,0x11,0xff,0xec,0x90,0x9e,
+0xa8,0x12,0x2a,0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,
+0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x7f,0x04,0x7e,0x0d,0x12,0x27,0xde,0x90,0x9e,
+0xa8,0x12,0x2a,0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,0xef,0x54,0xf0,0xff,0xec,0x90,
+0x9e,0xa8,0x12,0x2a,0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,0xef,0x44,0x01,0xff,0xec,
+0x90,0x9e,0xa8,0x12,0x2a,0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,0x90,0x80,0x85,0x12,
+0x2a,0x7f,0x7f,0x04,0x7e,0x0d,0x12,0x2f,0xd9,0x7f,0x0c,0x7e,0x09,0x12,0x27,0xde,
+0x90,0x9e,0xa8,0x12,0x2a,0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,0xe4,0xff,0xec,0x90,
+0x9e,0xa8,0x12,0x2a,0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,0xef,0x44,0x11,0xff,0xec,
+0x90,0x9e,0xa8,0x12,0x2a,0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,0x90,0x80,0x85,0x12,
+0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,0x2f,0xd9,0x7f,0x0c,0x7e,0x09,0x12,0x27,0xde,
+0x90,0x9e,0xa8,0x12,0x2a,0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,0xed,0x54,0x0f,0xfd,
+0xec,0x54,0xf0,0xfc,0x90,0x9e,0xa8,0x12,0x2a,0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,
+0xed,0x44,0x10,0xfd,0xec,0x44,0x01,0xfc,0x90,0x9e,0xa8,0x12,0x2a,0x7f,0x90,0x9e,
+0xa8,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,0x2f,
+0xd9,0x7f,0x04,0x7e,0x08,0x12,0x27,0xde,0x90,0x9e,0xa8,0x12,0x2a,0x7f,0x90,0x9e,
+0xa8,0x12,0x43,0x53,0xef,0x54,0xf0,0xff,0xec,0x90,0x9e,0xa8,0x12,0x2a,0x7f,0x90,
+0x9e,0xa8,0x12,0x43,0x53,0xef,0x44,0x01,0xff,0xec,0x90,0x9e,0xa8,0x12,0x2a,0x7f,
+0x90,0x9e,0xa8,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x08,
+0x12,0x2f,0xd9,0xe4,0x90,0x9e,0x0f,0xf0,0x22,0x90,0x00,0x02,0x12,0x42,0x20,0x90,
+0x9e,0x43,0xf0,0xe0,0x60,0x04,0xe0,0xf4,0x70,0x21,0xa2,0xaf,0xe4,0x33,0xf5,0x14,
+0xc2,0xaf,0x90,0x00,0x47,0xe0,0x54,0xfb,0xfd,0x7f,0x47,0x12,0x49,0x05,0x7d,0x40,
+0x7f,0x01,0x12,0x36,0xaf,0xe5,0x14,0x24,0xff,0x92,0xaf,0x22,0x90,0x9e,0x3a,0xe0,
+0xc3,0x94,0x14,0x50,0x05,0xe0,0x04,0xf0,0x81,0x14,0x90,0x9e,0x3a,0xe0,0x64,0x14,
+0x60,0x02,0x81,0x14,0x90,0x9e,0x49,0xe0,0x70,0x25,0x90,0x9e,0x4c,0xe0,0x70,0x1f,
+0x90,0x9e,0x4a,0xe0,0x70,0x19,0x90,0x9e,0x4d,0xe0,0x70,0x13,0x90,0x9e,0x4b,0xe0,
+0x70,0x0d,0x90,0x9e,0x4e,0xe0,0x70,0x07,0x90,0x04,0xfd,0xe0,0x54,0xfe,0xf0,0x90,
+0x9e,0x49,0xe0,0x90,0x04,0x44,0xf0,0x90,0x9e,0x4a,0xe0,0x90,0x04,0x45,0xf0,0x90,
+0x9e,0x4b,0xe0,0x90,0x04,0x46,0xf0,0xa3,0xe4,0xf0,0x90,0x9e,0x4c,0xe0,0x90,0x04,
+0x48,0xf0,0x90,0x9e,0x4d,0xe0,0x90,0x04,0x49,0xf0,0x90,0x9e,0x4e,0xe0,0x90,0x04,
+0x4a,0xf0,0xa3,0xe4,0xf0,0x90,0x9e,0x35,0xe0,0x90,0x04,0x4c,0xf0,0x90,0x9e,0x36,
+0xe0,0x90,0x04,0x4d,0xf0,0x90,0x9e,0x37,0xe0,0x90,0x04,0x4e,0xf0,0x90,0x9e,0x38,
+0xe0,0x90,0x04,0x4f,0xf0,0xe4,0x90,0x9e,0x3a,0xf0,0x90,0x9e,0x35,0x04,0xf0,0xe4,
+0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x9e,0x49,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,
+0xa3,0xf0,0xa3,0xf0,0x90,0x05,0x60,0xe0,0x90,0x9e,0x19,0xf0,0x90,0x05,0x61,0xe0,
+0x90,0x9e,0x1a,0xf0,0x90,0x05,0x62,0xe0,0x90,0x9e,0x1b,0xf0,0x90,0x05,0x63,0xe0,
+0x90,0x9e,0x1c,0xf0,0x90,0x9e,0x52,0xe0,0xff,0x90,0x9e,0x1c,0xe0,0xfe,0xd3,0x9f,
+0x50,0x0b,0x90,0x9e,0x52,0xe0,0xc3,0x9e,0xd3,0x94,0x01,0x40,0x11,0x90,0x9e,0x40,
+0xe0,0xb4,0x01,0x02,0x80,0x03,0x90,0x9e,0x44,0xe0,0xff,0x12,0x4c,0xf0,0x22,0x90,
+0x9e,0x53,0xe0,0x64,0x01,0x60,0x08,0x90,0x9e,0x41,0xe0,0x60,0x02,0xa1,0x36,0x90,
+0x9e,0x35,0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,0x3b,0x90,0x9e,0x36,
+0xe0,0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,0x28,0x90,0x9e,0x37,0xe0,
+0xc3,0x94,0xff,0x50,0x0a,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x36,0xf0,0x80,0x15,0x90,
+0x9e,0x38,0xe0,0xc3,0x94,0xff,0x50,0x10,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x37,0xf0,
+0x90,0x9e,0x36,0xf0,0x90,0x9e,0x35,0xf0,0x90,0x00,0x44,0xe0,0x54,0x0c,0x60,0x76,
+0xe0,0x30,0xe2,0x32,0x90,0x9e,0x49,0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,
+0x80,0x24,0x90,0x9e,0x4a,0xe0,0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,
+0x11,0x90,0x9e,0x4b,0xe0,0xc3,0x94,0xff,0x50,0x0c,0xe0,0x04,0xf0,0xe4,0x90,0x9e,
+0x4a,0xf0,0x90,0x9e,0x49,0xf0,0x90,0x00,0x44,0xe0,0x30,0xe3,0x32,0x90,0x9e,0x4c,
+0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,0x24,0x90,0x9e,0x4d,0xe0,0xc3,
+0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,0x11,0x90,0x9e,0x4e,0xe0,0xc3,0x94,
+0xff,0x50,0x0c,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x4d,0xf0,0x90,0x9e,0x4c,0xf0,0x90,
+0x04,0xfd,0xe0,0x44,0x01,0xf0,0x22,0x00,0x37,0xda,};
+
+// =================== v79 UMC A Cut COMMON 2011-10-06 =====================
+u8 Rtl8192CUFwUMCACutImgArray[UMCACutImgArrayLength] = {
+0xc1,0x88,0x02,0x00,0x4f,0x00,0x00,0x00,0x0a,0x06,0x18,0x09,0x58,0x3f,0x01,0x00,
+0x61,0x80,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x02,0x43,0xba,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x02,0x5a,0x45,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x02,0x5f,0xfb,0x00,0x00,0x00,0x00,0x00,0xa1,0xdf,0x00,0x00,0x00,
+0x05,0x04,0x03,0x02,0x00,0x03,0x06,0x05,0x04,0x03,0x00,0x04,0x06,0x05,0x04,0x02,
+0x00,0x04,0x08,0x07,0x06,0x04,0x00,0x06,0x0a,0x09,0x08,0x06,0x00,0x08,0x0a,0x09,
+0x08,0x04,0x00,0x08,0x0a,0x09,0x08,0x02,0x00,0x08,0x0a,0x09,0x08,0x00,0x00,0x08,
+0x12,0x11,0x10,0x08,0x00,0x10,0x1a,0x19,0x18,0x10,0x00,0x18,0x22,0x21,0x20,0x18,
+0x00,0x20,0x22,0x21,0x20,0x10,0x00,0x20,0x22,0x21,0x20,0x08,0x00,0x20,0x22,0x21,
+0x1c,0x08,0x00,0x20,0x22,0x21,0x14,0x08,0x00,0x20,0x22,0x20,0x18,0x08,0x00,0x20,
+0x31,0x30,0x20,0x10,0x00,0x30,0x31,0x30,0x18,0x00,0x00,0x30,0x31,0x2f,0x10,0x10,
+0x00,0x30,0x31,0x2c,0x10,0x10,0x00,0x30,0x31,0x28,0x10,0x00,0x00,0x30,0x31,0x20,
+0x10,0x00,0x00,0x30,0x31,0x10,0x10,0x00,0x00,0x30,0x04,0x04,0x04,0x05,0x04,0x04,
+0x04,0x05,0x05,0x05,0x06,0x06,0x04,0x04,0x04,0x05,0x05,0x05,0x06,0x06,0x04,0x04,
+0x05,0x05,0x05,0x05,0x06,0x06,0x04,0x04,0x05,0x05,0x05,0x05,0x06,0x07,0x0a,0x0b,
+0x0d,0x10,0x04,0x05,0x05,0x06,0x06,0x09,0x0c,0x11,0x08,0x08,0x09,0x09,0x0a,0x0c,
+0x10,0x11,0x04,0x04,0x04,0x05,0x04,0x04,0x05,0x07,0x07,0x07,0x08,0x0a,0x04,0x04,
+0x04,0x04,0x06,0x0a,0x0b,0x0d,0x05,0x05,0x07,0x07,0x08,0x0b,0x0d,0x0f,0x04,0x04,
+0x04,0x05,0x07,0x07,0x09,0x09,0x0c,0x0e,0x10,0x12,0x04,0x04,0x05,0x05,0x06,0x0a,
+0x11,0x13,0x09,0x09,0x09,0x09,0x0c,0x0e,0x11,0x13,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x24,0x26,0x2a,0x18,0x1a,0x1d,0x1f,0x21,0x27,0x29,0x2a,0x00,0x00,
+0x00,0x1f,0x23,0x28,0x2a,0x2c,0x00,0x04,0x00,0x04,0x00,0x08,0x00,0x10,0x00,0x18,
+0x00,0x24,0x00,0x30,0x00,0x48,0x00,0x60,0x00,0x90,0x00,0xc0,0x00,0xd8,0x00,0x50,
+0x00,0x78,0x00,0xa0,0x00,0xc8,0x01,0x40,0x01,0x90,0x01,0xe0,0x02,0x30,0x01,0x2c,
+0x01,0x40,0x01,0xe0,0x02,0xd0,0x03,0xe8,0x04,0xb0,0x06,0x40,0x07,0xd0,0x00,0x02,
+0x00,0x02,0x00,0x04,0x00,0x08,0x00,0x0c,0x00,0x12,0x00,0x18,0x00,0x24,0x00,0x30,
+0x00,0x48,0x00,0x60,0x00,0x6c,0x00,0x28,0x00,0x3c,0x00,0x50,0x00,0x64,0x00,0xa0,
+0x00,0xc8,0x00,0xf0,0x01,0x18,0x00,0x64,0x00,0xa0,0x00,0xf0,0x01,0x68,0x01,0xf4,
+0x02,0x58,0x03,0x20,0x03,0xe8,0x02,0x02,0x02,0x02,0x02,0x02,0x03,0x03,0x04,0x04,
+0x05,0x07,0x04,0x04,0x07,0x0a,0x0a,0x0c,0x0c,0x12,0x05,0x07,0x07,0x08,0x0b,0x12,
+0x24,0x3c,0x01,0x01,0x01,0x01,0x01,0x02,0x03,0x04,0x05,0x06,0x07,0x08,0x01,0x02,
+0x03,0x04,0x05,0x06,0x07,0x08,0x05,0x06,0x07,0x08,0x09,0x0a,0x0b,0x0c,0x20,0x1e,
+0x1c,0x18,0x10,0x18,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0xbb,0x01,0x0c,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe0,0x22,0x50,
+0x06,0xe9,0x25,0x82,0xf8,0xe6,0x22,0xbb,0xfe,0x06,0xe9,0x25,0x82,0xf8,0xe2,0x22,
+0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe4,0x93,0x22,0xbb,0x01,0x06,
+0x89,0x82,0x8a,0x83,0xf0,0x22,0x50,0x02,0xf7,0x22,0xbb,0xfe,0x01,0xf3,0x22,0xf8,
+0xbb,0x01,0x0d,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe8,0xf0,0x22,
+0x50,0x06,0xe9,0x25,0x82,0xc8,0xf6,0x22,0xbb,0xfe,0x05,0xe9,0x25,0x82,0xc8,0xf2,
+0x22,0xc5,0xf0,0xf8,0xa3,0xe0,0x28,0xf0,0xc5,0xf0,0xf8,0xe5,0x82,0x15,0x82,0x70,
+0x02,0x15,0x83,0xe0,0x38,0xf0,0x22,0xbb,0x01,0x0a,0x89,0x82,0x8a,0x83,0xe0,0xf5,
+0xf0,0xa3,0xe0,0x22,0x50,0x06,0x87,0xf0,0x09,0xe7,0x19,0x22,0xbb,0xfe,0x07,0xe3,
+0xf5,0xf0,0x09,0xe3,0x19,0x22,0x89,0x82,0x8a,0x83,0xe4,0x93,0xf5,0xf0,0x74,0x01,
+0x93,0x22,0xbb,0x01,0x10,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe0,
+0xf5,0xf0,0xa3,0xe0,0x22,0x50,0x09,0xe9,0x25,0x82,0xf8,0x86,0xf0,0x08,0xe6,0x22,
+0xbb,0xfe,0x0a,0xe9,0x25,0x82,0xf8,0xe2,0xf5,0xf0,0x08,0xe2,0x22,0xe5,0x83,0x2a,
+0xf5,0x83,0xe9,0x93,0xf5,0xf0,0xa3,0xe9,0x93,0x22,0xbb,0x01,0x0a,0x89,0x82,0x8a,
+0x83,0xf0,0xe5,0xf0,0xa3,0xf0,0x22,0x50,0x06,0xf7,0x09,0xa7,0xf0,0x19,0x22,0xbb,
+0xfe,0x06,0xf3,0xe5,0xf0,0x09,0xf3,0x19,0x22,0xf8,0xbb,0x01,0x11,0xe5,0x82,0x29,
+0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe8,0xf0,0xe5,0xf0,0xa3,0xf0,0x22,0x50,0x09,
+0xe9,0x25,0x82,0xc8,0xf6,0x08,0xa6,0xf0,0x22,0xbb,0xfe,0x09,0xe9,0x25,0x82,0xc8,
+0xf2,0xe5,0xf0,0x08,0xf2,0x22,0xef,0x4b,0xff,0xee,0x4a,0xfe,0xed,0x49,0xfd,0xec,
+0x48,0xfc,0x22,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x22,0xa4,
+0x25,0x82,0xf5,0x82,0xe5,0xf0,0x35,0x83,0xf5,0x83,0x22,0xe0,0xfb,0xa3,0xe0,0xfa,
+0xa3,0xe0,0xf9,0x22,0xf8,0xe0,0xfb,0xa3,0xa3,0xe0,0xf9,0x25,0xf0,0xf0,0xe5,0x82,
+0x15,0x82,0x70,0x02,0x15,0x83,0xe0,0xfa,0x38,0xf0,0x22,0xeb,0xf0,0xa3,0xea,0xf0,
+0xa3,0xe9,0xf0,0x22,0xd0,0x83,0xd0,0x82,0xf8,0xe4,0x93,0x70,0x12,0x74,0x01,0x93,
+0x70,0x0d,0xa3,0xa3,0x93,0xf8,0x74,0x01,0x93,0xf5,0x82,0x88,0x83,0xe4,0x73,0x74,
+0x02,0x93,0x68,0x60,0xef,0xa3,0xa3,0xa3,0x80,0xdf,0x02,0x43,0xf8,0x02,0x50,0xa9,
+0xe4,0x93,0xa3,0xf8,0xe4,0x93,0xa3,0x40,0x03,0xf6,0x80,0x01,0xf2,0x08,0xdf,0xf4,
+0x80,0x29,0xe4,0x93,0xa3,0xf8,0x54,0x07,0x24,0x0c,0xc8,0xc3,0x33,0xc4,0x54,0x0f,
+0x44,0x20,0xc8,0x83,0x40,0x04,0xf4,0x56,0x80,0x01,0x46,0xf6,0xdf,0xe4,0x80,0x0b,
+0x01,0x02,0x04,0x08,0x10,0x20,0x40,0x80,0x90,0x44,0x3d,0xe4,0x7e,0x01,0x93,0x60,
+0xbc,0xa3,0xff,0x54,0x3f,0x30,0xe5,0x09,0x54,0x1f,0xfe,0xe4,0x93,0xa3,0x60,0x01,
+0x0e,0xcf,0x54,0xc0,0x25,0xe0,0x60,0xa8,0x40,0xb8,0xe4,0x93,0xa3,0xfa,0xe4,0x93,
+0xa3,0xf8,0xe4,0x93,0xa3,0xc8,0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,0xf0,0xa3,0xc8,
+0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,0xdf,0xe9,0xde,0xe7,0x80,0xbe,0x41,0x9e,0x66,
+0x00,0x41,0x9e,0xae,0x00,0x41,0x9e,0x4d,0x80,0x41,0x9e,0x4e,0x80,0x41,0x9e,0xb0,
+0x00,0x00,0xf0,0x90,0x9e,0x57,0xe0,0x90,0x9e,0x8a,0xf0,0xe4,0xfb,0xfd,0x7f,0x54,
+0x7e,0x01,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x88,0xeb,0xf0,0xa3,0xe0,
+0xfb,0xa3,0xe0,0xf5,0x44,0xe4,0xf5,0x45,0x12,0x30,0x62,0xd0,0xd0,0x92,0xaf,0x22,
+0x90,0x01,0x5f,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x08,0xf0,0xe4,0x90,0x9e,0x89,0xf0,
+0x90,0x9e,0x55,0xe0,0x90,0x9e,0x8a,0xf0,0xe4,0xfb,0xfd,0x7f,0x5c,0x7e,0x01,0x91,
+0x62,0x90,0x01,0x5f,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x02,0xf0,0x90,0x9e,0x5c,
+0x14,0xf0,0x90,0x9e,0x5e,0xe0,0x54,0x0f,0xc3,0x94,0x0c,0x50,0x02,0xf1,0x16,0x22,
+0x8f,0x82,0x8e,0x83,0xa3,0xa3,0xa3,0xe4,0xf0,0x22,0xe4,0xf5,0x22,0x7f,0x60,0x7e,
+0x01,0x80,0xed,0x90,0x9e,0x60,0xe0,0xff,0x7d,0x01,0xe1,0x1a,0xb1,0xb1,0xbf,0x01,
+0x0f,0x90,0x9e,0x68,0xe0,0xff,0xe4,0xfd,0xf1,0xfe,0x90,0x04,0x1f,0x74,0x20,0xf0,
+0x22,0x90,0x01,0xca,0xe5,0x25,0xf0,0xef,0x60,0x03,0x12,0x4f,0x2a,0x22,0x22,0x22,
+0x22,0x22,0x00,0x02,0x60,0x8d,0x02,0x60,0x94,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
+0x8b,0x1b,0x8a,0x1c,0x89,0x1d,0x90,0x9e,0x8b,0x71,0x8b,0xab,0x1e,0xaa,0x1f,0xa9,
+0x20,0x90,0x9e,0x8e,0x71,0x8b,0xaf,0x21,0x15,0x21,0xef,0x60,0x1b,0x90,0x9e,0x8e,
+0xe4,0x75,0xf0,0x01,0x71,0x74,0x12,0x24,0x62,0xff,0x90,0x9e,0x8b,0xe4,0x75,0xf0,
+0x01,0x71,0x74,0xef,0x51,0x4d,0x80,0xde,0xab,0x1b,0xaa,0x1c,0xa9,0x1d,0xd0,0xd0,
+0x92,0xaf,0x22,0x90,0x06,0xa9,0xe0,0xf5,0x50,0x54,0xc0,0x70,0x0d,0x90,0x9e,0x63,
+0xe0,0x54,0xfe,0xf0,0xe0,0x54,0xfd,0xf0,0x91,0xd3,0xe5,0x50,0x30,0xe6,0x17,0x90,
+0x9e,0x63,0xe0,0x44,0x01,0xf0,0x90,0x9e,0x61,0xe0,0x64,0x02,0x60,0x04,0x91,0xdc,
+0x80,0x0b,0x91,0x80,0x80,0x07,0x90,0x9e,0x63,0xe0,0x54,0xfe,0xf0,0xe5,0x50,0x90,
+0x9e,0x63,0x30,0xe7,0x17,0xe0,0x44,0x02,0xf0,0xe4,0x90,0x9e,0x89,0x91,0x52,0x90,
+0x01,0x57,0x74,0x05,0xf0,0x90,0x9e,0x62,0x74,0x01,0xf0,0x22,0xe0,0x54,0xfd,0xf0,
+0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x04,0x1d,0xe0,0x60,0x1a,0x90,0x05,
+0x22,0xe0,0x54,0x90,0x60,0x07,0x90,0x01,0xc6,0xe0,0x44,0x40,0xf0,0x90,0x01,0xc7,
+0xe0,0x30,0xe1,0xe4,0x7f,0x00,0x80,0x02,0x7f,0x01,0xd0,0xd0,0x92,0xaf,0x22,0xc0,
+0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,0xc0,0x01,
+0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,0x01,0xc4,0x74,
+0xdf,0xf0,0x74,0x45,0xa3,0xf0,0x53,0x91,0xdf,0x90,0x01,0x3c,0xe0,0x55,0x30,0xf5,
+0x34,0xa3,0xe0,0x55,0x31,0xf5,0x35,0xa3,0xe0,0x55,0x32,0xf5,0x36,0xa3,0xe0,0x55,
+0x33,0xf5,0x37,0xe5,0x34,0x30,0xe0,0x06,0x90,0x01,0x3c,0x74,0x01,0xf0,0xe5,0x34,
+0x30,0xe1,0x08,0x90,0x01,0x3c,0x74,0x02,0xf0,0xf1,0xbc,0xe5,0x34,0x30,0xe2,0x38,
+0x90,0x01,0x3c,0x74,0x04,0xf0,0x90,0x06,0x92,0xe0,0x30,0xe0,0x24,0x90,0x9e,0x89,
+0xe4,0xf0,0x90,0x9e,0x55,0xe0,0x90,0x9e,0x8a,0xf0,0xe4,0xfb,0xfd,0x7f,0x58,0x7e,
+0x01,0x91,0x62,0x90,0x01,0x5b,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x01,0xf0,0x80,
+0x07,0x90,0x9e,0x5d,0xe4,0xf0,0x91,0xd3,0xe5,0x34,0x30,0xe3,0x38,0x90,0x01,0x3c,
+0x74,0x08,0xf0,0x90,0x06,0x92,0xe0,0x30,0xe1,0x24,0x90,0x9e,0x89,0xe4,0xf0,0x90,
+0x9e,0x55,0xe0,0x90,0x9e,0x8a,0xf0,0xe4,0xfb,0xfd,0x7f,0x5c,0x7e,0x01,0x91,0x62,
+0x90,0x01,0x5f,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x02,0xf0,0x80,0x07,0x90,0x9e,
+0x5c,0xe4,0xf0,0x91,0xd3,0xe5,0x34,0x30,0xe4,0x09,0x90,0x01,0x3c,0x74,0x10,0xf0,
+0x12,0x4d,0xe2,0xe5,0x34,0x30,0xe5,0x09,0x90,0x01,0x3c,0x74,0x20,0xf0,0x12,0x4e,
+0x25,0xe5,0x35,0x30,0xe0,0x1a,0x90,0x01,0x3d,0x74,0x01,0xf0,0x90,0x01,0x2f,0xe0,
+0x44,0x7f,0xf0,0x90,0x00,0x83,0xe0,0x90,0x9e,0x60,0xf0,0x12,0x64,0xa1,0x91,0xd3,
+0x74,0xdf,0x04,0x90,0x01,0xc4,0xf0,0x74,0x45,0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,
+0x05,0xd0,0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,
+0x83,0xd0,0xf0,0xd0,0xe0,0x32,0x7d,0x01,0x7f,0x0c,0x8f,0x71,0x8d,0x72,0xe5,0x71,
+0x54,0x0f,0xff,0x90,0x9e,0x5e,0xe0,0x54,0x0f,0x6f,0x60,0x72,0xe5,0x71,0x30,0xe2,
+0x2b,0x90,0x9e,0x5e,0xe0,0x20,0xe2,0x05,0x7f,0x01,0x12,0x63,0x92,0x90,0x9e,0x5e,
+0xe0,0x30,0xe3,0x07,0xe5,0x71,0x20,0xe3,0x02,0x80,0x54,0x90,0x9e,0x5e,0xe0,0x20,
+0xe3,0x4c,0xe5,0x71,0x30,0xe3,0x47,0xaf,0x72,0x02,0x63,0x2e,0x90,0x9e,0x5e,0xe0,
+0x54,0x0f,0xff,0xbf,0x0c,0x0d,0xe5,0x71,0x20,0xe3,0x08,0x12,0x5e,0xf1,0xef,0x60,
+0x2d,0xf1,0x9f,0x90,0x9e,0x5e,0xe0,0x54,0x0f,0xff,0xbf,0x04,0x0e,0xe5,0x71,0x20,
+0xe2,0x09,0x12,0x62,0x50,0xef,0x60,0x16,0x12,0x48,0xaa,0x90,0x9e,0x5e,0xe0,0x54,
+0x0f,0xff,0xbf,0x02,0x09,0x12,0x62,0xbb,0xef,0x60,0x03,0x12,0x64,0x87,0x22,0x90,
+0x06,0x04,0xe0,0x44,0x40,0xf0,0xe5,0x73,0xb4,0x01,0x05,0x7f,0x01,0x12,0x63,0x4d,
+0x90,0x9e,0x5e,0xe0,0x54,0xf0,0xf0,0xe0,0x44,0x04,0xf0,0x22,0x90,0x9e,0x62,0xe0,
+0x60,0x0e,0xe4,0xf0,0xa3,0xe0,0x54,0xfd,0xf0,0xe0,0x54,0x07,0x70,0x2b,0x80,0x27,
+0x90,0x9e,0x51,0xe0,0x04,0xf0,0x90,0x9e,0x63,0xe0,0x54,0xef,0xf0,0x90,0x9e,0x56,
+0xe0,0xff,0x90,0x9e,0x51,0xe0,0xd3,0x9f,0x40,0x0d,0xe5,0x73,0xb4,0x01,0x0a,0xa3,
+0xe0,0x70,0x06,0xe0,0x04,0xf0,0x22,0x91,0xd3,0x22,0xe0,0xff,0x7d,0x01,0x90,0x9e,
+0x9c,0xef,0xf0,0xa3,0xed,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xe5,0x74,0x60,0x04,0xe4,
+0xff,0x11,0x8f,0x90,0x9e,0x9c,0xe0,0x30,0xe0,0x09,0x90,0x9e,0x9e,0xe4,0xf0,0xa3,
+0x74,0x80,0xf0,0x90,0x9e,0x9c,0xe0,0xff,0xc3,0x13,0x90,0xfd,0x10,0xf0,0x90,0x04,
+0x25,0xef,0xf0,0x90,0x9e,0x9d,0xe0,0x60,0x1f,0xa3,0xa3,0xe0,0xff,0x24,0x0f,0xf5,
+0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x80,0xf0,0x74,0x10,0x2f,0xf5,0x82,0xe4,
+0x34,0xfc,0xf5,0x83,0xe0,0x44,0x80,0xf0,0x90,0x9e,0x9e,0xa3,0xe0,0xff,0xfd,0x24,
+0x08,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe4,0xf0,0x74,0x09,0x2d,0xf5,0x82,0xe4,
+0x34,0xfc,0xf5,0x83,0xe0,0x54,0xf0,0xf0,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,
+0xf5,0x83,0xe0,0x54,0xf7,0xf0,0x90,0x9e,0x9e,0xe0,0xfe,0xa3,0xe0,0xff,0x22,0xef,
+0x60,0x0b,0x90,0x9e,0x77,0xe0,0xb4,0x01,0x10,0xe4,0xff,0x80,0x09,0x90,0x9e,0x77,
+0xe0,0xb4,0x01,0x05,0x7f,0x01,0x12,0x77,0x66,0x22,0x90,0x01,0x37,0x74,0x02,0xf0,
+0x90,0x05,0x22,0x74,0xff,0xf0,0x12,0x77,0x1c,0xef,0x70,0x06,0x90,0x01,0xc8,0x74,
+0xfd,0xf0,0x7d,0x02,0x7f,0x03,0x12,0x31,0x9d,0xe5,0x74,0x60,0x04,0x7f,0x01,0x11,
+0x8f,0x11,0xdf,0x90,0x9e,0x5e,0xe0,0x54,0xf0,0xf0,0xe0,0x44,0x02,0xf0,0x22,0x7f,
+0x78,0x7e,0x08,0x12,0x22,0x65,0x90,0x9d,0xff,0x12,0x25,0x08,0x7f,0x04,0x7e,0x0c,
+0x12,0x22,0x65,0x90,0x9e,0x03,0x12,0x25,0x08,0x7f,0x00,0x7e,0x08,0x12,0x22,0x65,
+0x90,0x9e,0x07,0x12,0x25,0x08,0x90,0x9e,0x77,0xe0,0x90,0x9d,0xff,0xb4,0x01,0x0d,
+0x12,0x43,0x53,0xef,0x54,0xc7,0xff,0xed,0x54,0xc7,0xfd,0x80,0x07,0x12,0x43,0x53,
+0xef,0x54,0xc7,0xff,0xec,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x78,0x7e,0x08,0x12,
+0x2b,0x08,0x90,0x9e,0x03,0x12,0x43,0x53,0xef,0x54,0x0f,0xff,0xec,0x90,0x80,0x96,
+0x12,0x25,0x08,0x7f,0x04,0x7e,0x0c,0x12,0x2b,0x08,0x90,0x9e,0x07,0x12,0x43,0x53,
+0xef,0x44,0x02,0xff,0xec,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x00,0x7e,0x08,0x12,
+0x2b,0x08,0x7f,0x70,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9e,0x0b,0x12,0x25,0x08,0x90,
+0x80,0x96,0x12,0x25,0x14,0x00,0x1b,0x25,0xa0,0x7f,0x70,0x7e,0x0e,0x12,0x2b,0x08,
+0x90,0x80,0x68,0x12,0x25,0x14,0x00,0x00,0x00,0x00,0xe4,0xfd,0xff,0x12,0x30,0x2c,
+0x90,0x9e,0x77,0xe0,0xb4,0x01,0x11,0x90,0x80,0x68,0x12,0x25,0x14,0x00,0x00,0x00,
+0x00,0xe4,0xfd,0x7f,0x01,0x12,0x30,0x2c,0x90,0x00,0x11,0xe0,0x54,0xf6,0xf0,0x80,
+0x08,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
+0x7f,0x10,0xdf,0xfe,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
+0x90,0x9e,0xad,0xed,0xf0,0x90,0x9e,0xac,0xef,0xf0,0xd3,0x94,0x07,0x50,0x63,0xe0,
+0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,
+0x47,0xe0,0x5f,0xf0,0x31,0xb9,0x90,0x9e,0xac,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,
+0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x46,0xe0,0x4f,0xf0,0x31,0xb9,0x90,
+0x9e,0xad,0xe0,0x60,0x16,0x90,0x9e,0xac,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,
+0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x45,0x80,0x66,0x90,0x9e,0xac,0xe0,0xff,
+0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x45,
+0x80,0x6b,0x90,0x9e,0xac,0xe0,0x24,0xf8,0xf0,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,
+0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0x31,0xb1,0x90,0x9e,0xac,0xe0,0xff,
+0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x43,0xe0,
+0x4f,0xf0,0x31,0xb9,0x90,0x9e,0xad,0xe0,0x60,0x1b,0x90,0x9e,0xac,0xe0,0xff,0x74,
+0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xff,0x90,0x00,
+0x42,0xe0,0x4f,0x80,0x1a,0x90,0x9e,0xac,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,
+0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xf4,0xff,0x90,0x00,0x42,0xe0,0x5f,0xf0,
+0x31,0xb9,0xd0,0xd0,0x92,0xaf,0x22,0xf0,0x90,0x00,0x45,0xe0,0x54,0xfe,0xfd,0x7f,
+0x45,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x8f,0x82,0x75,0x83,0x00,0xed,0xf0,0x31,
+0xb9,0xd0,0xd0,0x92,0xaf,0x22,0xef,0x14,0x60,0x30,0x14,0x60,0x66,0x24,0x02,0x60,
+0x02,0x61,0x7d,0x90,0x9e,0x1a,0x74,0x02,0xf0,0x90,0x00,0x48,0xe0,0x44,0x0c,0xfd,
+0x7f,0x48,0x51,0xc1,0x90,0x00,0x47,0xe0,0x44,0x08,0xfd,0x7f,0x47,0x51,0xc1,0x90,
+0x00,0x45,0xe0,0x44,0x10,0xfd,0x7f,0x45,0x80,0x71,0xe4,0x90,0x9e,0x1a,0xf0,0x90,
+0x9e,0x16,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x80,0x7e,0x08,0x12,
+0x2b,0x08,0x90,0x00,0x45,0xe0,0x44,0xef,0xfd,0x7f,0x45,0x51,0xc1,0x90,0x00,0x45,
+0xe0,0x54,0xef,0xfd,0x7f,0x45,0x51,0xc1,0x90,0x00,0x46,0xe0,0x44,0x10,0xfd,0x7f,
+0x46,0x80,0x38,0x90,0x9e,0x1a,0x74,0x01,0xf0,0x90,0x9e,0x20,0x12,0x43,0x53,0x90,
+0x80,0x96,0x12,0x25,0x08,0x7f,0x80,0x7e,0x08,0x12,0x2b,0x08,0x90,0x00,0x45,0xe0,
+0x44,0x20,0xfd,0x7f,0x45,0x51,0xc1,0x90,0x00,0x45,0xe0,0x44,0x10,0xfd,0x7f,0x45,
+0x51,0xc1,0x90,0x00,0x46,0xe0,0x44,0x10,0xfd,0x7f,0x46,0x51,0xc1,0x22,0x90,0x00,
+0x02,0x12,0x42,0x20,0x90,0x9e,0x1c,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,0x25,0xe0,
+0x25,0xe0,0x90,0x9e,0x1b,0xf0,0x12,0x24,0x62,0x25,0xe0,0x25,0xe0,0x90,0x9e,0x1f,
+0xf0,0x90,0x05,0x60,0xe0,0x90,0x9e,0x2a,0xf0,0x90,0x05,0x61,0xe0,0x90,0x9e,0x2b,
+0xf0,0x90,0x05,0x62,0xe0,0x90,0x9e,0x2c,0xf0,0x90,0x05,0x63,0xe0,0x90,0x9e,0x2d,
+0xf0,0xa2,0xaf,0xe4,0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x90,0x9e,0x1b,0xe0,0xff,
+0xd1,0xd8,0x90,0x9e,0x3f,0xe0,0x24,0xff,0x92,0xaf,0x90,0x9e,0x1c,0xe0,0x70,0x02,
+0x81,0x84,0x90,0x9e,0x1b,0xe0,0x70,0x02,0x81,0x84,0x90,0x9e,0x1f,0xe0,0x70,0x02,
+0x81,0x84,0xa2,0xaf,0xe4,0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x90,0x9e,0x2e,0x74,
+0x01,0xf0,0x90,0x9e,0x3f,0xe0,0x24,0xff,0x92,0xaf,0x51,0xb8,0x90,0x00,0x46,0xe0,
+0x44,0x01,0xfd,0x7f,0x46,0x51,0xc1,0x90,0x9e,0x14,0xe0,0x60,0x15,0x90,0x9e,0x20,
+0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x80,0x7e,0x08,0x12,0x2b,0x08,
+0x80,0x06,0x90,0x05,0x22,0x74,0x7f,0xf0,0x90,0x00,0x45,0xe0,0x54,0xef,0xfd,0x7f,
+0x45,0x51,0xc1,0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,0x9e,0x2a,0xe0,0x90,0x05,
+0x84,0xf0,0x90,0x9e,0x2b,0xe0,0x90,0x05,0x85,0xf0,0x90,0x9e,0x2c,0xe0,0x90,0x05,
+0x86,0xf0,0x90,0x9e,0x2d,0xe0,0x90,0x05,0x87,0xf0,0xa2,0xaf,0xe4,0x33,0x90,0x9e,
+0x3f,0xf0,0xc2,0xaf,0x90,0x01,0x3c,0xe0,0x44,0x20,0xf0,0x7d,0x20,0xe4,0xff,0x12,
+0x31,0xb7,0x80,0x2b,0x90,0x9e,0x1c,0xe0,0x70,0x2d,0x90,0x9e,0x2e,0x51,0xb7,0x90,
+0x00,0x46,0xe0,0x54,0xfe,0xfd,0x7f,0x46,0x51,0xc1,0x90,0x05,0x22,0xe4,0xf0,0xa2,
+0xaf,0x33,0x90,0x9e,0x3f,0xf0,0xc2,0xaf,0x7d,0x20,0xe4,0xff,0x12,0x31,0x49,0x90,
+0x9e,0x3f,0xe0,0x24,0xff,0x92,0xaf,0x22,0x8b,0x59,0x8a,0x5a,0x89,0x5b,0x90,0x00,
+0x02,0x12,0x42,0x20,0x90,0x9e,0x1d,0xf0,0xe0,0x30,0xe0,0x4b,0x90,0x9e,0x14,0x74,
+0x01,0xf0,0x7f,0x80,0x7e,0x08,0x12,0x22,0x65,0x90,0x9e,0x16,0x12,0x25,0x08,0xab,
+0x59,0xaa,0x5a,0xa9,0x5b,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0xe4,0xfc,0xfd,0xfe,
+0x78,0x1a,0x12,0x24,0xf5,0xa8,0x04,0xa9,0x05,0xaa,0x06,0xab,0x07,0x90,0x9e,0x16,
+0x12,0x43,0x53,0xec,0x54,0x03,0xfc,0x12,0x43,0x46,0x90,0x9e,0x20,0x12,0x25,0x08,
+0x90,0x05,0x22,0xe4,0xf0,0x80,0x2d,0xe4,0x90,0x9e,0x14,0xf0,0x7f,0x80,0x7e,0x08,
+0x12,0x22,0x65,0xec,0x54,0x03,0xfc,0xec,0x44,0xc0,0xfc,0x90,0x9e,0x16,0x12,0x25,
+0x08,0x90,0x9e,0x16,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x80,0x7e,
+0x08,0x12,0x2b,0x08,0x90,0x9e,0x1d,0xe0,0x30,0xe1,0x19,0x7d,0x0c,0x7f,0x47,0x51,
+0xc1,0x90,0x00,0x48,0xe0,0x44,0x0c,0xfd,0x7f,0x48,0x51,0xc1,0x90,0x00,0x46,0xe0,
+0x44,0x10,0x80,0x1c,0x90,0x00,0x47,0xe0,0x54,0xf3,0xfd,0x7f,0x47,0x51,0xc1,0x90,
+0x00,0x48,0xe0,0x54,0xf3,0xfd,0x7f,0x48,0x51,0xc1,0x90,0x00,0x46,0xe0,0x54,0xef,
+0xfd,0x7f,0x46,0x51,0xc1,0xe4,0x90,0x9e,0x1a,0xf0,0x22,0x90,0x01,0x3c,0x74,0xff,
+0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x01,0x34,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xfd,
+0x7f,0x54,0x51,0xc1,0x7d,0xff,0x7f,0x55,0x51,0xc1,0x7d,0xff,0x7f,0x56,0x51,0xc1,
+0x7d,0xff,0x7f,0x57,0x41,0xc1,0x90,0x01,0x30,0xe4,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,
+0xf0,0x90,0x01,0x38,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xfd,0x7f,0x50,0x51,0xc1,
+0xe4,0xfd,0x7f,0x51,0x51,0xc1,0xe4,0xfd,0x7f,0x52,0x51,0xc1,0xe4,0xfd,0x7f,0x53,
+0x41,0xc1,0xe5,0x22,0x64,0x01,0x70,0x3c,0xf1,0xbe,0xbf,0x01,0x05,0x7f,0x01,0x12,
+0x44,0xf1,0x90,0x00,0x46,0xe0,0x44,0x04,0xfd,0x7f,0x46,0x51,0xc1,0x90,0x00,0x44,
+0xe0,0x54,0xfb,0xfd,0x7f,0x44,0x51,0xc1,0x90,0x00,0x46,0xe0,0x54,0xfb,0xfd,0x7f,
+0x46,0x51,0xc1,0x7f,0x02,0xf1,0xea,0x8f,0x26,0x90,0x01,0xc9,0xe5,0x26,0xf0,0xb4,
+0x01,0x02,0xf1,0x2a,0x22,0x90,0x9e,0x1c,0xe0,0x64,0x01,0x60,0x02,0xc1,0xd7,0x90,
+0x00,0x46,0xe0,0x44,0x01,0xfd,0x7f,0x46,0x51,0xc1,0x90,0x9e,0x2e,0xe0,0x70,0x31,
+0x90,0x9e,0x14,0xe0,0x60,0x15,0x90,0x9e,0x20,0x12,0x43,0x53,0x90,0x80,0x96,0x12,
+0x25,0x08,0x7f,0x80,0x7e,0x08,0x12,0x2b,0x08,0x80,0x06,0x90,0x05,0x22,0x74,0x7f,
+0xf0,0x90,0x9e,0x1b,0xe0,0xff,0xd1,0xd8,0x90,0x9e,0x2e,0x74,0x01,0x51,0xb7,0x80,
+0x3f,0x90,0x9e,0x2e,0xe0,0x64,0x01,0x70,0x37,0x90,0x9e,0x1f,0xe0,0xff,0xd1,0xd8,
+0xe4,0x90,0x9e,0x2e,0xf0,0x90,0x00,0x45,0xe0,0x44,0x01,0xfd,0x7f,0x45,0x51,0xc1,
+0x90,0x9e,0x14,0xe0,0x60,0x15,0x90,0x9e,0x16,0x12,0x43,0x53,0x90,0x80,0x96,0x12,
+0x25,0x08,0x7f,0x80,0x7e,0x08,0x12,0x2b,0x08,0x80,0x05,0x90,0x05,0x22,0xe4,0xf0,
+0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,0x9e,0x2a,0xe0,0x90,0x05,0x84,0xf0,0x90,
+0x9e,0x2b,0xe0,0x90,0x05,0x85,0xf0,0x90,0x9e,0x2c,0xe0,0x90,0x05,0x86,0xf0,0x90,
+0x9e,0x2d,0xe0,0x90,0x05,0x87,0xf0,0x22,0x90,0x05,0x60,0xe0,0x90,0x9e,0x2a,0xf0,
+0x90,0x05,0x61,0xe0,0x90,0x9e,0x2b,0xf0,0x90,0x05,0x62,0xe0,0x90,0x9e,0x2c,0xf0,
+0x90,0x05,0x63,0xe0,0x90,0x9e,0x2d,0xf0,0xc3,0x74,0xff,0x9f,0xfe,0x90,0x9e,0x2b,
+0xe0,0xd3,0x9e,0x40,0x1e,0xe0,0x2f,0xf0,0xa3,0xe0,0xb4,0xff,0x0f,0xe4,0xf0,0xa3,
+0xe0,0xb4,0xff,0x03,0xe4,0xf0,0x22,0x90,0x9e,0x2d,0x80,0x03,0x90,0x9e,0x2c,0xe0,
+0x04,0xf0,0x22,0x90,0x9e,0x2b,0xe0,0x2f,0xf0,0x22,0x90,0x00,0x49,0xe0,0x90,0x9e,
+0xb1,0xf0,0xe0,0x54,0x0f,0xf0,0x44,0xf0,0xfd,0x7f,0x49,0x51,0xc1,0x90,0x9e,0xb1,
+0xe0,0x44,0xb0,0xfd,0x7f,0x49,0x41,0xc1,0x8e,0x59,0x8f,0x5a,0x8b,0x5b,0x8a,0x5c,
+0x89,0x5d,0xe4,0x90,0x9e,0x34,0xf0,0xef,0x90,0x00,0x31,0xf0,0x31,0xb9,0xe5,0x59,
+0x54,0x03,0xff,0x90,0x00,0x32,0xe0,0x54,0xfc,0x4f,0xf0,0x31,0xb9,0x90,0x00,0x33,
+0xe0,0x54,0x7f,0xf0,0x31,0xb9,0x90,0x00,0x33,0xe0,0x20,0xe7,0x0e,0x90,0x9e,0x34,
+0xe0,0xc3,0x94,0x64,0x50,0x05,0xe0,0x04,0xf0,0x80,0xeb,0x90,0x9e,0x34,0xe0,0xc3,
+0x94,0x64,0x50,0x10,0x90,0x00,0x30,0xe0,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x12,0x42,
+0x4d,0x7f,0x01,0x22,0x7f,0x00,0x22,0x12,0x45,0xb1,0xbf,0x01,0x10,0x90,0x02,0x09,
+0xe0,0xff,0x7d,0x01,0x12,0x47,0xfe,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0x7f,0x0b,
+0xf1,0xea,0xef,0x65,0x25,0x60,0x10,0xe5,0x25,0xb4,0x01,0x05,0xe4,0xf5,0x25,0x80,
+0x03,0x75,0x25,0x01,0x7f,0x01,0x22,0x7f,0x00,0x22,0xe4,0x90,0x9e,0x74,0xf0,0x90,
+0x00,0x80,0xe0,0x44,0x80,0xfd,0x7f,0x80,0x41,0xc1,0xd3,0x10,0xaf,0x01,0xc3,0xc0,
+0xd0,0x90,0x9e,0xb2,0xef,0xf0,0xd3,0x94,0x07,0x50,0x47,0xe0,0xff,0x74,0x01,0xa8,
+0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x46,0xe0,0x5f,0xf0,
+0x12,0x49,0xb9,0x90,0x9e,0xb2,0xe0,0xfd,0x74,0x01,0x7e,0x00,0xa8,0x05,0x08,0x80,
+0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x00,0x44,0xe0,0xfb,0xe4,0xfe,
+0xef,0x5b,0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,0x13,0xce,0x13,0xd8,0xf8,0xff,
+0x80,0x44,0x90,0x9e,0xb2,0xe0,0x24,0xf8,0xf0,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,
+0x80,0x02,0xc3,0x33,0xd8,0xfc,0x12,0x49,0xb1,0x90,0x9e,0xb2,0xe0,0xfd,0x74,0x01,
+0x7e,0x00,0xa8,0x05,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,
+0x00,0x42,0xe0,0xfb,0xe4,0xfe,0xef,0x5b,0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,
+0x13,0xce,0x13,0xd8,0xf8,0xff,0xd0,0xd0,0x92,0xaf,0x22,0x75,0x28,0x33,0xe4,0xf5,
+0x29,0x75,0x2a,0x03,0xf5,0x2b,0x90,0x01,0x30,0xe5,0x28,0xf0,0xa3,0xe5,0x29,0xf0,
+0xa3,0xe5,0x2a,0xf0,0xa3,0xe5,0x2b,0xf0,0x22,0xe4,0x90,0x9e,0x31,0xf0,0xa3,0xf0,
+0x75,0x8e,0x02,0x12,0x4f,0xda,0x12,0x5f,0xa9,0x12,0x5f,0xbc,0xe4,0xf5,0x12,0x12,
+0x6f,0xa1,0x12,0x77,0x5d,0x12,0x60,0x9b,0x12,0x2e,0x01,0x12,0x77,0x18,0x11,0x8b,
+0x90,0x00,0xf3,0xe0,0x30,0xe2,0x0d,0x90,0x05,0x41,0x74,0x10,0xf0,0x90,0x05,0x5a,
+0xf0,0xa3,0xe4,0xf0,0x12,0x5f,0xf4,0x12,0x5f,0x91,0x12,0x44,0xfe,0x12,0x7d,0x1d,
+0x90,0x9e,0x33,0xe5,0xd9,0xf0,0x12,0x4d,0x8b,0xc2,0xaf,0x90,0x00,0x80,0xe0,0x44,
+0x40,0xf0,0x12,0x49,0xb9,0x75,0xe8,0x03,0x43,0xa8,0x85,0xd2,0xaf,0x90,0x01,0xbe,
+0xe0,0x04,0xf0,0x90,0x01,0xc0,0xe0,0x04,0xf0,0x90,0x9e,0x31,0xe0,0x64,0x01,0xf0,
+0x24,0xa9,0x90,0x01,0xc4,0xf0,0x74,0x50,0xa3,0xf0,0xe5,0x12,0x30,0xe4,0x09,0xc2,
+0xaf,0x53,0x12,0xef,0xd2,0xaf,0x31,0x8e,0xe5,0x12,0x30,0xe6,0x17,0xc2,0xaf,0x53,
+0x12,0xbf,0xd2,0xaf,0x12,0x69,0x51,0x90,0x9e,0x1e,0xe0,0xff,0x60,0x03,0xb4,0x01,
+0x03,0x12,0x7d,0x7b,0x90,0x9e,0x1e,0xe0,0x70,0x03,0x12,0x7e,0x7e,0x31,0x61,0x80,
+0xb8,0x90,0x06,0x34,0xe0,0x60,0x26,0x14,0x70,0x1b,0x7b,0x01,0x7a,0x06,0x79,0x35,
+0x7f,0xf9,0x7e,0x01,0x12,0x4f,0x48,0xbf,0x01,0x09,0x90,0x06,0x35,0xe0,0x54,0x0f,
+0xf0,0x80,0x05,0x80,0x00,0x02,0x77,0x0a,0xe4,0x90,0x06,0x34,0xf0,0x22,0x90,0x01,
+0xcc,0xe0,0x54,0x0f,0x90,0x9e,0x34,0xf0,0x90,0x9e,0x34,0xe0,0xfd,0x70,0x02,0x41,
+0xcf,0x90,0x9e,0xae,0xe0,0xff,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,
+0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xef,0x5d,0x70,0x02,0x41,0xc8,0x90,0x9e,0xae,
+0xe0,0x75,0xf0,0x04,0x90,0x01,0xd0,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x35,0xf0,0x75,
+0x1e,0x01,0x75,0x1f,0x9e,0x75,0x20,0x35,0x75,0x21,0x01,0x7b,0x01,0x7a,0x9e,0x79,
+0x36,0x12,0x45,0x09,0x90,0x9e,0x36,0xe0,0xff,0xc4,0x13,0x13,0x13,0x54,0x01,0x90,
+0x9e,0xae,0x30,0xe0,0x59,0xe0,0x75,0xf0,0x02,0x90,0x00,0x88,0x12,0x43,0x5f,0xe0,
+0x90,0x9e,0x37,0xf0,0x90,0x9e,0xae,0xe0,0x75,0xf0,0x02,0x90,0x00,0x89,0x12,0x43,
+0x5f,0xe0,0x90,0x9e,0x38,0xf0,0x90,0x9e,0xae,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd1,
+0x12,0x43,0x5f,0xe0,0x90,0x9e,0x39,0xf0,0x90,0x9e,0xae,0xe0,0x75,0xf0,0x04,0x90,
+0x01,0xd2,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x3a,0xf0,0x90,0x9e,0xae,0xe0,0x75,0xf0,
+0x04,0x90,0x01,0xd3,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x3b,0xf0,0x80,0x33,0xe0,0x75,
+0xf0,0x04,0x90,0x01,0xd1,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x37,0xf0,0x90,0x9e,0xae,
+0xe0,0x75,0xf0,0x04,0x90,0x01,0xd2,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x38,0xf0,0x90,
+0x9e,0xae,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd3,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x39,
+0xf0,0xef,0x54,0x7f,0xff,0x7b,0x01,0x7a,0x9e,0x79,0x37,0x51,0xd0,0x90,0x9e,0x34,
+0xe0,0xff,0x90,0x9e,0xae,0xe0,0xfe,0x74,0x01,0xa8,0x06,0x08,0x80,0x02,0xc3,0x33,
+0xd8,0xfc,0xf4,0x5f,0x90,0x9e,0x34,0xf0,0x90,0x9e,0xae,0xe0,0xff,0x74,0x01,0xa8,
+0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0x90,0x01,0xcc,0xf0,0x90,0x9e,0xae,0xe0,
+0x04,0xf0,0xe0,0x54,0x03,0xf0,0x21,0x98,0x90,0x01,0xc6,0xe0,0x44,0x02,0xf0,0x22,
+0x90,0x9e,0x3c,0x12,0x43,0x8b,0xef,0x12,0x43,0x94,0x53,0x0b,0x01,0x53,0x14,0x02,
+0x53,0x2f,0x03,0x53,0x38,0x05,0x53,0x41,0x06,0x53,0x8f,0x07,0x53,0x49,0x09,0x53,
+0x52,0x0c,0x53,0x5b,0x0d,0x53,0x64,0x0e,0x53,0x6d,0x1b,0x53,0x76,0x1c,0x53,0x7f,
+0x2c,0x53,0x1d,0x2d,0x53,0x26,0x2e,0x00,0x00,0x53,0x88,0x90,0x9e,0x3c,0x12,0x43,
+0x6b,0x02,0x61,0x9d,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x71,0xc4,0x90,0x9e,0x3c,
+0x12,0x43,0x6b,0x02,0x71,0xca,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x72,0x12,0x90,
+0x9e,0x3c,0x12,0x43,0x6b,0x02,0x72,0x40,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x71,
+0x74,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x80,0x47,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,
+0x72,0x88,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x4b,0x7e,0x90,0x9e,0x3c,0x12,0x43,
+0x6b,0x02,0x7c,0xea,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x4c,0xb8,0x90,0x9e,0x3c,
+0x12,0x43,0x6b,0x02,0x71,0xbc,0x90,0x9e,0x3c,0x12,0x43,0x6b,0x02,0x71,0xa3,0x90,
+0x9e,0x3c,0x12,0x43,0x6b,0x02,0x75,0xea,0x90,0x01,0xc6,0xe0,0x44,0x01,0xf0,0x22,
+0x90,0x00,0x04,0x12,0x42,0x20,0xff,0x54,0x1f,0xfe,0xef,0x54,0x20,0xc4,0x13,0x54,
+0x07,0xfd,0xaf,0x06,0x90,0x9e,0x3f,0xef,0xf0,0xa3,0xed,0xf0,0xa3,0x12,0x43,0x8b,
+0x90,0x9e,0x41,0x12,0x43,0x6b,0x90,0x00,0x03,0x12,0x42,0x20,0x54,0xf0,0xc4,0x54,
+0x0f,0x90,0x9e,0x44,0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0x54,0x40,0xc4,0x13,0x13,
+0x54,0x03,0x90,0x9e,0x45,0xf0,0x90,0x9e,0x3f,0xe0,0xff,0x75,0xf0,0x09,0x90,0x96,
+0x46,0x12,0x43,0x5f,0xad,0x82,0xac,0x83,0x90,0x9e,0x46,0xec,0xf0,0xa3,0xed,0xf0,
+0xef,0x75,0xf0,0x09,0xa4,0x24,0x44,0xf9,0x74,0x96,0x35,0xf0,0xfa,0x7b,0x01,0xa3,
+0x12,0x43,0x8b,0x90,0x9e,0x41,0x12,0x43,0x6b,0x90,0x00,0x03,0x12,0x42,0x20,0x54,
+0x0f,0xff,0x90,0x9e,0x48,0x12,0x43,0x6b,0xef,0x12,0x42,0x4d,0x90,0x9e,0x41,0x12,
+0x43,0x6b,0x90,0x00,0x02,0x12,0x42,0x20,0xff,0x90,0x9e,0x48,0x12,0x43,0x6b,0x90,
+0x00,0x01,0xef,0x12,0x42,0x5f,0x90,0x9e,0x41,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,
+0x42,0x20,0xff,0x90,0x9e,0x46,0xe0,0xfc,0xa3,0xe0,0xfd,0xf5,0x82,0x8c,0x83,0xef,
+0xf0,0x12,0x24,0x62,0x8d,0x82,0x8c,0x83,0xa3,0xf0,0x90,0x9e,0x44,0xe0,0xfe,0x90,
+0x9e,0x3f,0xe0,0xff,0x24,0x82,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0x90,
+0x9e,0x40,0xe0,0xfe,0x75,0xf0,0x09,0xef,0x90,0x96,0x4a,0x12,0x43,0x5f,0xee,0xf0,
+0x75,0xf0,0x09,0xef,0x90,0x96,0x4b,0x12,0x43,0x5f,0x74,0x01,0xf0,0x90,0x9e,0x45,
+0xe0,0xfe,0x75,0xf0,0x09,0xef,0x90,0x96,0x4c,0x12,0x43,0x5f,0xee,0xf0,0x8f,0x59,
+0xef,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xaf,0x82,0xf5,0x5b,0x8f,0x5c,
+0xe5,0x59,0x75,0xf0,0x02,0xa4,0x24,0x02,0xf9,0x74,0x95,0x35,0xf0,0x75,0x5d,0x01,
+0xf5,0x5e,0x89,0x5f,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x46,0x12,0x43,0x5f,0xaf,
+0x82,0x85,0x83,0x60,0x8f,0x61,0xe5,0x59,0x75,0xf0,0x09,0xa4,0x24,0x44,0xf9,0x74,
+0x96,0x35,0xf0,0x75,0x62,0x01,0xf5,0x63,0x89,0x64,0x74,0x82,0x25,0x59,0xf5,0x82,
+0xe4,0x34,0x95,0xf5,0x83,0xe0,0x12,0x43,0x94,0x55,0x1e,0x00,0x55,0x33,0x01,0x55,
+0x48,0x02,0x55,0x5d,0x03,0x55,0x86,0x04,0x55,0x9b,0x05,0x55,0xb0,0x06,0x55,0xd6,
+0x0c,0x56,0x03,0x0d,0x56,0x30,0x0e,0x56,0x5d,0x0f,0x00,0x00,0x56,0x91,0xe5,0x59,
+0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0x74,
+0x15,0x80,0x3c,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,
+0x74,0xf0,0xf0,0xa3,0x74,0x10,0x80,0x27,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,
+0xe4,0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0x74,0x05,0x80,0x12,0xe5,0x59,0x25,
+0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0xe4,0xf0,
+0xe5,0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0x74,0x0f,0xf0,
+0xa3,0x74,0x8f,0xf0,0xc1,0x91,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,
+0x9b,0xf5,0x83,0x74,0x0f,0xf0,0xa3,0x74,0xf5,0x80,0x27,0xe5,0x59,0x25,0xe0,0x24,
+0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0x0f,0xf0,0xa3,0x74,0xf0,0x80,0x12,
+0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe4,0xf0,0xa3,
+0x74,0x0d,0xf0,0xe5,0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,
+0xe4,0xf0,0xa3,0xf0,0xc1,0x91,0x90,0x04,0x47,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,
+0x12,0x42,0x4d,0x90,0x04,0x46,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x90,0x00,0x01,
+0x12,0x42,0x5f,0x90,0x04,0x45,0xe0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xf0,0x90,0x04,
+0x44,0xc1,0x88,0x90,0x04,0x4b,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x12,0x42,0x4d,
+0x90,0x04,0x4a,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x90,0x00,0x01,0x12,0x42,0x5f,
+0x90,0x04,0x49,0xe0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xf0,0x90,0x04,0x48,0x80,0x58,
+0x90,0x04,0x4f,0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x12,0x42,0x4d,0x90,0x04,0x4e,
+0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x90,0x00,0x01,0x12,0x42,0x5f,0x90,0x04,0x4d,
+0xe0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xf0,0x90,0x04,0x4c,0x80,0x2b,0x90,0x04,0x53,
+0xe0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0x12,0x42,0x4d,0x90,0x04,0x52,0xe0,0xab,0x5d,
+0xaa,0x5e,0xa9,0x5f,0x90,0x00,0x01,0x12,0x42,0x5f,0x90,0x04,0x51,0xe0,0x85,0x5c,
+0x82,0x85,0x5b,0x83,0xf0,0x90,0x04,0x50,0xe0,0x85,0x5c,0x82,0x85,0x5b,0x83,0xa3,
+0xf0,0xab,0x5d,0xaa,0x5e,0xa9,0x5f,0xc0,0x03,0xc0,0x02,0xc0,0x01,0x12,0x24,0x62,
+0xff,0xab,0x62,0xaa,0x63,0xa9,0x64,0x12,0x24,0x62,0x5f,0xd0,0x01,0xd0,0x02,0xd0,
+0x03,0x12,0x42,0x4d,0xab,0x5d,0xe5,0x5f,0x24,0x01,0xf9,0xe4,0x35,0x5e,0xfa,0xc0,
+0x03,0xc0,0x02,0xc0,0x01,0x12,0x24,0x62,0xff,0xab,0x62,0xaa,0x63,0xa9,0x64,0x90,
+0x00,0x01,0x12,0x42,0x20,0x5f,0xd0,0x01,0xd0,0x02,0xd0,0x03,0x12,0x42,0x4d,0x85,
+0x5c,0x82,0x85,0x5b,0x83,0xc0,0x83,0xc0,0x82,0xe0,0xff,0x85,0x61,0x82,0x85,0x60,
+0x83,0xe0,0xfe,0xef,0x5e,0xd0,0x82,0xd0,0x83,0xf0,0x85,0x5c,0x82,0x85,0x5b,0x83,
+0xa3,0xc0,0x83,0xc0,0x82,0xe0,0xff,0x85,0x61,0x82,0x85,0x60,0x83,0xa3,0xe0,0xfe,
+0xef,0x5e,0xd0,0x82,0xd0,0x83,0xf0,0xe5,0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,
+0x34,0x95,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3b,0x75,0x5a,0x0b,0x74,0x01,
+0x7e,0x00,0xa8,0x5a,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xe5,
+0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0x5e,0xfe,0xa3,
+0xe0,0x5f,0x4e,0x60,0x06,0xe5,0x5a,0x24,0x10,0x80,0x5d,0x15,0x5a,0xe5,0x5a,0xc3,
+0x94,0x00,0x50,0xca,0x80,0x56,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,
+0x9b,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3d,0x75,0x5a,0x0f,0x74,0x01,0x7e,
+0x00,0xa8,0x5a,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xe5,0x59,
+0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,0x5e,0xfe,0xa3,0xe0,
+0x5f,0x4e,0x60,0x08,0x90,0x9e,0x4b,0xe5,0x5a,0xf0,0x80,0x10,0x15,0x5a,0xe5,0x5a,
+0xc3,0x94,0x00,0x50,0xc8,0x80,0x05,0xe4,0x90,0x9e,0x4b,0xf0,0xe5,0x59,0x25,0xe0,
+0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3b,
+0xe4,0xf5,0x5a,0x74,0x01,0x7e,0x00,0xa8,0x5a,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,
+0xce,0xd8,0xf9,0xff,0xe5,0x59,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,
+0x83,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x08,0x90,0x9e,0x4c,0xe5,0x5a,0xf0,
+0x80,0x5b,0x05,0x5a,0xe5,0x5a,0xb4,0x10,0xca,0x80,0x52,0xe5,0x59,0x25,0xe0,0x24,
+0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x39,0xe4,
+0xf5,0x5a,0x74,0x01,0x7e,0x00,0xa8,0x5a,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,
+0xd8,0xf9,0xff,0xe5,0x59,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,
+0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x06,0xe5,0x5a,0x24,0x10,0x80,0x0a,0x05,
+0x5a,0xe5,0x5a,0xb4,0x0c,0xcc,0x80,0x05,0xe4,0x90,0x9e,0x4c,0xf0,0x90,0x9e,0x4b,
+0xe0,0xff,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x48,0x12,0x43,0x5f,0xef,0xf0,0x90,
+0x9e,0x4c,0xe0,0xfe,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x49,0x12,0x43,0x5f,0xee,
+0xf0,0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0xd3,0x9f,0x40,
+0x05,0x90,0x9e,0x4b,0x11,0xe0,0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x04,0xf5,
+0x83,0xe0,0xff,0x90,0x9e,0x4c,0xe0,0xfe,0xef,0xc3,0x9e,0x50,0x02,0x11,0xe0,0x90,
+0x9e,0x4b,0xe0,0xff,0xd3,0x94,0x13,0x40,0x07,0x90,0x96,0x43,0x74,0x03,0xf0,0x22,
+0xef,0xd3,0x94,0x0b,0x40,0x07,0x90,0x96,0x43,0x74,0x02,0xf0,0x22,0xef,0xd3,0x94,
+0x03,0x40,0x07,0x90,0x96,0x43,0x74,0x01,0xf0,0x22,0xe4,0x90,0x96,0x43,0xf0,0x22,
+0xe0,0xfd,0x74,0x26,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xed,0xf0,0xaf,
+0x59,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0xef,0xc3,0x94,0x20,0x50,0x0e,0x74,0x84,
+0x2f,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xed,0xf0,0x80,0x29,0x74,0xa6,0x2f,0xf5,
+0x82,0xe4,0x34,0x9c,0xf5,0x83,0xed,0xf0,0x90,0x9e,0x78,0xef,0xf0,0x24,0xa6,0xf5,
+0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x90,0x9e,0x79,0xf0,0x7b,0x01,0x7a,0x9e,0x79,
+0x78,0x7d,0x02,0x31,0x3a,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,
+0xd0,0x90,0x9e,0x97,0x12,0x43,0x8b,0x90,0x9e,0x9a,0xe0,0x54,0xf0,0x44,0x06,0xff,
+0xf0,0xed,0x54,0x0f,0xc4,0x54,0xf0,0xfe,0xef,0x54,0x0f,0x4e,0xf0,0x90,0x9e,0x97,
+0x12,0x43,0x6b,0x90,0x9e,0x94,0x12,0x43,0x8b,0x7b,0x01,0x7a,0x9e,0x79,0x9a,0xd1,
+0x14,0xd0,0xd0,0x92,0xaf,0x22,0x8f,0x50,0x8d,0x51,0xe5,0x51,0x54,0x1f,0xf5,0x56,
+0x74,0x01,0x2f,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe0,0xf5,0x54,0x90,0x04,0xfd,
+0xe0,0xb4,0x01,0x05,0x75,0x57,0x03,0x80,0x03,0x75,0x57,0x01,0xeb,0xc3,0x95,0x57,
+0x40,0x04,0xaf,0x50,0x80,0x33,0xe5,0x54,0x25,0x53,0xf5,0x55,0xe5,0x56,0x90,0x41,
+0xd6,0x93,0xff,0xe5,0x55,0xd3,0x9f,0x74,0x01,0x40,0x11,0x25,0x50,0xf5,0x82,0xe4,
+0x34,0x94,0xf5,0x83,0xe4,0xf0,0xad,0x51,0xaf,0x50,0x01,0xf1,0x25,0x50,0xf5,0x82,
+0xe4,0x34,0x94,0xf5,0x83,0xe5,0x55,0xf0,0x22,0xad,0x07,0x75,0xf0,0x09,0xed,0x90,
+0x96,0x48,0x12,0x43,0x5f,0xe0,0xff,0x74,0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,
+0x83,0xe0,0x54,0x1f,0xf5,0x58,0xd3,0x9f,0x40,0x02,0x8f,0x58,0xe5,0x58,0x25,0xe0,
+0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,
+0xe5,0x58,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0x74,0x01,0x93,
+0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,
+0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0xaf,0x05,0xad,0x58,
+0x11,0xf1,0xaf,0x58,0x22,0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,0x75,
+0xd0,0x00,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,0x06,
+0xc0,0x07,0x90,0x01,0xc4,0x74,0x45,0xf0,0x74,0x5a,0xa3,0xf0,0x90,0x01,0x34,0xe0,
+0x55,0x28,0xf5,0x2c,0x90,0x01,0x36,0xe0,0x55,0x2a,0xf5,0x2e,0xa3,0xe0,0x55,0x2b,
+0xf5,0x2f,0xe5,0x2c,0x20,0xe0,0x02,0x61,0xe1,0x90,0x01,0x34,0x74,0x01,0xf0,0x85,
+0xd1,0x08,0x85,0xd2,0x09,0x85,0xd3,0x0a,0x85,0xd4,0x0b,0x85,0xd5,0x0c,0x85,0xd6,
+0x0d,0x85,0xd7,0x0e,0x85,0xd9,0x0f,0xe5,0x0f,0x54,0x40,0xc3,0x13,0xff,0xe5,0x0e,
+0x54,0x20,0x6f,0x70,0x02,0x61,0x93,0xe5,0x0f,0x30,0xe5,0x02,0x61,0x93,0xe5,0x0d,
+0x54,0x3f,0xf5,0x4d,0xe5,0x08,0x54,0x3f,0xf5,0x4e,0xe5,0x0c,0x54,0x1f,0xff,0xe5,
+0x4d,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0x8f,0xf0,0x12,
+0x42,0x81,0xe5,0x0e,0x54,0x1f,0xff,0xe5,0x4d,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,
+0x34,0x93,0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x4e,0xd3,0x94,0x04,0x40,
+0x03,0x75,0x4e,0x04,0x75,0xf0,0x0a,0xe5,0x4d,0x90,0x90,0x00,0x12,0x43,0x5f,0x75,
+0xf0,0x02,0xe5,0x4e,0x12,0x43,0x5f,0xe0,0xfe,0xa3,0xe0,0xff,0xe5,0x0e,0x54,0x1f,
+0x2f,0xff,0xe4,0x3e,0xfe,0x75,0xf0,0x0a,0xe5,0x4d,0x90,0x90,0x00,0x12,0x43,0x5f,
+0x75,0xf0,0x02,0xe5,0x4e,0x12,0x43,0x5f,0xee,0xf0,0xa3,0xef,0xf0,0xe5,0x0f,0x20,
+0xe6,0x23,0xe5,0x0e,0x54,0x1f,0xff,0xe5,0x4d,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,
+0x34,0x98,0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x0a,0x30,0xe7,0x34,0xaf,
+0x4d,0x31,0xd9,0x80,0x2e,0xe5,0x0e,0x54,0x1f,0xff,0xe5,0x4d,0x25,0xe0,0x24,0x44,
+0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x0a,0x30,
+0xe7,0x11,0xe5,0x0a,0x54,0x7f,0xfd,0xe5,0x0e,0x54,0x1f,0xf5,0x53,0xab,0x4e,0xaf,
+0x4d,0x31,0x76,0xe5,0x74,0x14,0x24,0xfd,0x50,0x02,0x80,0x45,0x90,0x9e,0x61,0xe0,
+0x60,0x37,0x90,0x01,0x5b,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x04,0xf0,0xd1,0x05,0xef,
+0x64,0x01,0x70,0x2d,0x90,0x9e,0x55,0xe0,0xf5,0x44,0x75,0x45,0x00,0xe4,0xfb,0xfd,
+0x7f,0x58,0x7e,0x01,0x12,0x30,0x62,0x90,0x01,0x5b,0x74,0x05,0xf0,0x90,0x06,0x92,
+0x74,0x01,0xf0,0x90,0x9e,0x5d,0xf0,0x80,0x08,0xd1,0x05,0xbf,0x01,0x03,0x12,0x44,
+0xd3,0xe5,0x2c,0x30,0xe1,0x20,0x90,0x01,0x34,0x74,0x02,0xf0,0x85,0xd1,0x13,0x85,
+0xd2,0x14,0x85,0xd3,0x15,0x85,0xd4,0x16,0x85,0xd5,0x17,0x85,0xd6,0x18,0x85,0xd7,
+0x19,0x85,0xd9,0x1a,0xd1,0x9c,0xe5,0x2c,0x30,0xe3,0x06,0x90,0x01,0x34,0x74,0x08,
+0xf0,0xe5,0x2c,0x30,0xe4,0x09,0x90,0x01,0x34,0x74,0x10,0xf0,0x43,0x12,0x10,0xe5,
+0x2c,0x30,0xe5,0x26,0x90,0x01,0xcf,0xe0,0x30,0xe5,0x1f,0xe0,0x54,0xdf,0xf0,0x90,
+0x01,0x34,0x74,0x20,0xf0,0x75,0xa8,0x00,0x75,0xe8,0x00,0x12,0x4d,0xb6,0x90,0x00,
+0x03,0xe0,0x54,0xfb,0xf0,0x12,0x49,0xb9,0x80,0xfe,0xe5,0x2c,0x30,0xe6,0x06,0x90,
+0x01,0x34,0x74,0x40,0xf0,0xe5,0x2e,0x30,0xe1,0x3c,0x90,0x01,0x36,0x74,0x02,0xf0,
+0x43,0x12,0x40,0x90,0x01,0x02,0xe0,0x54,0x03,0x64,0x01,0x70,0x29,0x90,0x01,0x37,
+0xe0,0x30,0xe0,0x0a,0x74,0x01,0xf0,0x90,0x9e,0x66,0xe4,0xf0,0x80,0x18,0x90,0x9e,
+0x66,0xe0,0x04,0xf0,0xe0,0xc3,0x94,0x0a,0x40,0x0c,0xe4,0xf0,0x90,0x04,0x19,0xe0,
+0x30,0xe0,0x03,0x12,0x4f,0xa7,0xe5,0x2e,0x30,0xe0,0x12,0x90,0x9e,0x76,0x74,0x01,
+0xf0,0x90,0x01,0x36,0xf0,0x12,0x64,0xfe,0x90,0x9e,0x76,0xe4,0xf0,0xe5,0x2e,0x30,
+0xe2,0x78,0x90,0x01,0x36,0x74,0x04,0xf0,0x90,0x01,0xbd,0xe0,0x04,0xf0,0xe5,0x73,
+0x64,0x01,0x70,0x66,0xe5,0x74,0x60,0x62,0xe5,0x74,0x64,0x02,0x60,0x06,0xe5,0x74,
+0x64,0x05,0x70,0x27,0x90,0x06,0xab,0xe0,0x90,0x9e,0x50,0xf0,0x90,0x06,0xaa,0xe0,
+0x90,0x9e,0x5f,0xf0,0x90,0x9e,0x50,0xe0,0x70,0x07,0x90,0x9e,0x5f,0xe0,0xff,0x80,
+0x05,0x90,0x9e,0x50,0xe0,0xff,0x90,0x9e,0x50,0xef,0xf0,0x90,0x9e,0x52,0xe0,0x60,
+0x03,0xe0,0x14,0xf0,0x90,0x9e,0x51,0xe4,0xf0,0x90,0x01,0x57,0xf0,0x90,0x01,0x3c,
+0x74,0x02,0xf0,0x90,0x9e,0x63,0xe0,0x54,0xfd,0xf0,0xe0,0x54,0xef,0xf0,0xe5,0x74,
+0x14,0x24,0xfd,0x50,0x02,0x80,0x03,0x12,0x45,0x53,0xe5,0x2e,0x30,0xe3,0x28,0x90,
+0x01,0x36,0x74,0x08,0xf0,0xe5,0x73,0x64,0x01,0x70,0x1c,0xe5,0x74,0x60,0x18,0x90,
+0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x90,0x9e,0x89,0xe4,0x12,0x44,
+0x52,0x90,0x01,0x57,0x74,0x05,0xf0,0xe5,0x2e,0x30,0xe4,0x2f,0x90,0x01,0x36,0x74,
+0x10,0xf0,0xe5,0x73,0x64,0x01,0x70,0x23,0xe5,0x74,0x60,0x1f,0x90,0x01,0x57,0xe4,
+0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x90,0x9e,0x62,0xe4,0xf0,0x90,0x9e,0x63,0xe0,
+0x54,0xfd,0xf0,0xe0,0x54,0x07,0x70,0x03,0x12,0x44,0xd3,0xe5,0x2e,0x30,0xe5,0x1f,
+0x90,0x01,0x36,0x74,0x20,0xf0,0xe5,0x73,0xb4,0x01,0x14,0xe5,0x74,0x60,0x10,0x90,
+0x9e,0x61,0xe0,0x64,0x02,0x60,0x05,0x12,0x44,0xdc,0x80,0x03,0x12,0x44,0x80,0xe5,
+0x2e,0x30,0xe6,0x1e,0x90,0x01,0x36,0x74,0x40,0xf0,0xe5,0x73,0xb4,0x01,0x13,0xe5,
+0x74,0x60,0x0f,0x90,0x9e,0x63,0xe0,0x54,0xfe,0xf0,0xe0,0x54,0x07,0x70,0x03,0x12,
+0x44,0xd3,0xe5,0x2f,0x30,0xe1,0x08,0x90,0x01,0x37,0x74,0x02,0xf0,0xd1,0xbd,0x74,
+0x45,0x04,0x90,0x01,0xc4,0xf0,0x74,0x5a,0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,
+0xd0,0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,
+0xd0,0xf0,0xd0,0xe0,0x32,0x90,0x04,0x1b,0xe0,0x54,0x7f,0x64,0x7f,0x7f,0x01,0x60,
+0x02,0x7f,0x00,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x91,0x12,0x43,
+0x8b,0x90,0x9e,0x75,0xe0,0x64,0x02,0x60,0x6e,0x90,0x9e,0x75,0xe0,0x64,0x01,0x70,
+0x66,0x90,0x9e,0xb0,0xe0,0xff,0x04,0xf0,0x90,0x9e,0x91,0x12,0x43,0x6b,0x90,0x00,
+0x01,0xef,0x12,0x42,0x5f,0x7f,0xaf,0x7e,0x01,0xf1,0x3b,0xef,0x60,0x49,0x90,0x9e,
+0x91,0x12,0x43,0x6b,0x8b,0x1e,0x8a,0x1f,0x89,0x20,0x75,0x21,0x02,0x7b,0x01,0x7a,
+0x01,0x79,0xa0,0x12,0x45,0x09,0x90,0x9e,0x94,0x12,0x43,0x6b,0x8b,0x1e,0x8a,0x1f,
+0x89,0x20,0x90,0x9e,0x91,0x12,0x43,0x6b,0x12,0x24,0x62,0xff,0xc4,0x54,0x0f,0xf5,
+0x21,0x7b,0x01,0x7a,0x01,0x79,0xa2,0x12,0x45,0x09,0x90,0x01,0xaf,0x74,0xff,0xf0,
+0x90,0x01,0xcb,0xe0,0x64,0x80,0xf0,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x9e,0x2f,0xe0,
+0x54,0xf0,0x44,0x03,0xf0,0x54,0x0f,0x44,0x80,0xf0,0x7b,0x00,0x7a,0x00,0x79,0x13,
+0x90,0x9e,0x94,0x12,0x43,0x8b,0x0b,0x7a,0x9e,0x79,0x2f,0xc1,0x14,0x7d,0x02,0x7f,
+0x03,0x12,0x31,0x2c,0xe5,0x74,0x14,0x24,0xfd,0x50,0x02,0x80,0x23,0x90,0x9e,0x61,
+0xe0,0x60,0x06,0x7d,0x01,0x7f,0x0c,0x80,0x0f,0x90,0x9e,0x5e,0xe0,0x54,0x0f,0xc3,
+0x94,0x04,0x50,0x07,0x7d,0x01,0x7f,0x04,0x12,0x47,0x1a,0xe4,0xff,0x12,0x48,0x8f,
+0x22,0xd1,0x05,0xef,0x64,0x01,0x60,0x08,0x90,0x01,0xb9,0x74,0x01,0xf0,0x80,0x32,
+0x90,0x9e,0x5d,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x24,0x90,0x9e,
+0x5c,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x04,0xf0,0x80,0x16,0x90,0x9e,0x60,0xe0,
+0x54,0x0f,0xd3,0x94,0x04,0x40,0x08,0x90,0x01,0xb9,0x74,0x08,0xf0,0x80,0x03,0x7f,
+0x01,0x22,0x90,0x01,0xb8,0x74,0x08,0xf0,0x7f,0x00,0x22,0xd3,0x10,0xaf,0x01,0xc3,
+0xc0,0xd0,0x90,0x9e,0xa0,0xee,0xf0,0xa3,0xef,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0x90,
+0x9e,0xa0,0xe0,0xfe,0xa3,0xe0,0xf5,0x82,0x8e,0x83,0xe0,0x60,0x2d,0xc3,0x90,0x9e,
+0xa3,0xe0,0x94,0xe8,0x90,0x9e,0xa2,0xe0,0x94,0x03,0x40,0x0b,0x90,0x01,0xc6,0xe0,
+0x44,0x10,0xf0,0x7f,0x00,0x80,0x15,0x90,0x9e,0xa2,0xe4,0x75,0xf0,0x01,0x12,0x42,
+0x81,0x7f,0x0a,0x7e,0x00,0x12,0x32,0x15,0x80,0xc5,0x7f,0x01,0xd0,0xd0,0x92,0xaf,
+0x22,0x75,0x30,0x1f,0x75,0x31,0x01,0xe4,0xf5,0x32,0x90,0x01,0x38,0xe5,0x30,0xf0,
+0xa3,0xe5,0x31,0xf0,0xa3,0xe5,0x32,0xf0,0x22,0x90,0x00,0x02,0xe0,0x54,0xe0,0x90,
+0x9e,0x75,0x60,0x04,0x74,0x01,0xf0,0x22,0x74,0x02,0xf0,0x22,0x90,0x00,0xf3,0xe0,
+0x30,0xe3,0x08,0x90,0x9e,0x77,0x74,0x01,0xf0,0x80,0x05,0xe4,0x90,0x9e,0x77,0xf0,
+0x90,0x9e,0x77,0xe0,0xb4,0x01,0x12,0x90,0x00,0xf2,0xe0,0x30,0xe7,0x0b,0x90,0x9e,
+0x64,0x74,0xfd,0xf0,0xa3,0x74,0x33,0xf0,0x22,0x90,0x9e,0x64,0x74,0xfd,0xf0,0xa3,
+0x74,0x2f,0xf0,0x22,0x90,0x01,0x64,0x74,0xa0,0xf0,0x22,0xc0,0xe0,0xc0,0xf0,0xc0,
+0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,
+0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,0x01,0xc4,0x74,0xfb,0xf0,0x74,0x5f,
+0xa3,0xf0,0x53,0x91,0xef,0x90,0x00,0x51,0xe0,0xff,0x90,0x00,0x55,0xe0,0x5f,0xf5,
+0x3d,0xe5,0x3d,0x30,0xe6,0x18,0x74,0x40,0xf0,0x90,0x9e,0x1d,0xe0,0x54,0x03,0xff,
+0xbf,0x03,0x0b,0x90,0x9e,0x1a,0xe0,0x60,0x05,0x7f,0x01,0x12,0x4a,0xd6,0xe5,0x3d,
+0x30,0xe7,0x15,0x90,0x00,0x55,0x74,0x80,0xf0,0x90,0x9e,0x1d,0xe0,0x54,0x03,0xff,
+0xbf,0x03,0x05,0x7f,0x02,0x12,0x4a,0xd6,0x90,0x01,0xc4,0x74,0xfb,0xf0,0x74,0x5f,
+0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,
+0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,0xd0,0xf0,0xd0,0xe0,0x32,0x8f,0x6b,0x8c,
+0x6c,0x8d,0x6d,0x22,0x8f,0x6e,0x8c,0x6f,0x8d,0x70,0x22,0xe4,0xf5,0x73,0x90,0x9e,
+0x63,0xf0,0xf5,0x74,0x90,0x9e,0x60,0x74,0x0c,0xf0,0x90,0x9e,0x5e,0xf0,0xe4,0x90,
+0x9e,0x61,0xf0,0x90,0x9e,0x5d,0xf0,0x90,0x9e,0x5c,0xf0,0x90,0x9e,0x5f,0x04,0xf0,
+0x90,0x9e,0x50,0xf0,0xe4,0x90,0x9e,0x62,0xf0,0x90,0x9e,0x52,0xf0,0x90,0x9e,0x5a,
+0x74,0x07,0xf0,0xe4,0x90,0x9e,0x51,0xf0,0x90,0x9e,0x58,0xf0,0xa3,0x74,0x02,0xf0,
+0x90,0x9e,0x56,0x14,0xf0,0xa3,0x74,0x03,0xf0,0x90,0x9e,0x55,0x74,0x14,0xf0,0x90,
+0x9e,0x5b,0x74,0x05,0xf0,0xe4,0x90,0x9e,0x54,0xf0,0x90,0x9e,0x4f,0xf0,0x90,0x9e,
+0x76,0xf0,0x22,0xe4,0x90,0x9e,0x62,0xf0,0x90,0x9e,0x51,0xf0,0x90,0x9e,0x63,0xf0,
+0x22,0x8b,0x59,0x8a,0x5a,0x89,0x5b,0x31,0x03,0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x12,
+0x24,0x62,0xf5,0x74,0x14,0x60,0x0e,0x14,0x60,0x1e,0x14,0x60,0x2f,0x24,0x03,0x70,
+0x40,0x7f,0x01,0x80,0x3a,0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x90,0x00,0x02,0x12,0x42,
+0x20,0xfd,0xe4,0xff,0x31,0x72,0x80,0x27,0xab,0x59,0xaa,0x5a,0xa9,0x5b,0x90,0x00,
+0x02,0x12,0x42,0x20,0xfd,0x7f,0x01,0x31,0x72,0x1f,0x80,0x13,0xab,0x59,0xaa,0x5a,
+0xa9,0x5b,0x90,0x00,0x02,0x12,0x42,0x20,0xfd,0x7f,0x02,0x31,0x72,0xe4,0xff,0x31,
+0xc6,0x22,0xef,0x24,0xfe,0x60,0x0b,0x04,0x70,0x22,0x90,0x9e,0x5f,0x74,0x01,0xf0,
+0x80,0x16,0xed,0x70,0x0a,0x90,0x9e,0x5b,0xe0,0x90,0x9e,0x5f,0xf0,0x80,0x05,0x90,
+0x9e,0x5f,0xed,0xf0,0x90,0x9e,0x5f,0xe0,0x90,0x9e,0x50,0xf0,0x22,0xd3,0x10,0xaf,
+0x01,0xc3,0xc0,0xd0,0x90,0x00,0x01,0x12,0x42,0x20,0x90,0x9e,0x61,0xf0,0x90,0x00,
+0x03,0x12,0x42,0x20,0x90,0x9e,0x4f,0xf0,0x12,0x24,0x62,0x65,0x74,0x60,0x02,0x31,
+0x11,0xd0,0xd0,0x92,0xaf,0x22,0xef,0x64,0x01,0x70,0x30,0x7d,0x7c,0x7f,0x02,0x12,
+0x31,0x2c,0x7d,0x02,0x7f,0x03,0x12,0x31,0x2c,0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,
+0x3c,0x74,0x02,0xf0,0x12,0x47,0x16,0xe4,0xff,0x12,0x48,0x8f,0x90,0x06,0x04,0xe0,
+0x54,0x7f,0xf0,0x90,0x06,0x0a,0xe0,0x54,0xf8,0xf0,0x22,0x90,0x01,0x36,0x74,0x7c,
+0xf0,0xa3,0x74,0x02,0xf0,0x7d,0x7c,0xff,0x12,0x31,0x9d,0x7d,0x02,0x7f,0x03,0x12,
+0x31,0x9d,0x90,0x06,0x04,0xe0,0x44,0x80,0xf0,0x90,0x06,0x0a,0xe0,0x44,0x07,0xf0,
+0x90,0x9e,0x58,0xe0,0xa3,0xe0,0x90,0x05,0x58,0xf0,0xe5,0x73,0x30,0xe0,0x1b,0x90,
+0x9e,0x52,0xe0,0x70,0x1a,0xe0,0x04,0xf0,0x90,0x9e,0x5e,0xe0,0x54,0x0f,0xc3,0x94,
+0x04,0x50,0x0c,0x7d,0x01,0x7f,0x04,0x02,0x47,0x1a,0xe4,0x90,0x9e,0x52,0xf0,0x22,
+0x12,0x5e,0x05,0xef,0x64,0x01,0x60,0x08,0x90,0x01,0xb9,0x74,0x01,0xf0,0x80,0x52,
+0x90,0x9e,0x63,0xe0,0x54,0x03,0x60,0x08,0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x42,
+0x90,0x9e,0x60,0xe0,0x54,0x0f,0xd3,0x94,0x02,0x40,0x08,0x90,0x01,0xb9,0x74,0x04,
+0xf0,0x80,0x2f,0x90,0x9e,0x63,0xe0,0x30,0xe2,0x08,0x90,0x01,0xb9,0x74,0x08,0xf0,
+0x80,0x20,0x90,0x9e,0x63,0xe0,0x30,0xe4,0x08,0x90,0x01,0xb9,0x74,0x10,0xf0,0x80,
+0x11,0x90,0x9e,0x52,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x20,0xf0,0x80,0x03,0x7f,
+0x01,0x22,0x90,0x01,0xb8,0x74,0x04,0xf0,0x7f,0x00,0x22,0xe5,0x12,0x60,0x08,0x90,
+0x01,0xb9,0x74,0x01,0xf0,0x80,0x5e,0x90,0x9e,0x60,0xe0,0x54,0x0f,0xd3,0x94,0x01,
+0x40,0x08,0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x4b,0x90,0x02,0x87,0xe0,0x60,0x08,
+0x90,0x01,0xb9,0x74,0x04,0xf0,0x80,0x3d,0x90,0x9e,0x75,0xe0,0xb4,0x02,0x10,0x90,
+0x9e,0x64,0xe0,0xfe,0xa3,0xe0,0xf5,0x82,0x8e,0x83,0xe0,0x60,0x17,0x80,0x26,0x90,
+0x9e,0x75,0xe0,0xb4,0x01,0x0e,0x90,0x01,0xaf,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,
+0x08,0xf0,0x80,0x11,0x90,0x9e,0x54,0xe0,0x70,0x08,0x90,0x01,0xb9,0x74,0x10,0xf0,
+0x80,0x03,0x7f,0x01,0x22,0x90,0x01,0xb8,0x74,0x02,0xf0,0x7f,0x00,0x22,0x90,0x06,
+0x04,0xe0,0x54,0xbf,0xf0,0xef,0x60,0x09,0xe5,0x73,0xb4,0x01,0x04,0xe4,0xff,0x71,
+0x4d,0x90,0x9e,0x5e,0xe0,0x54,0xf0,0xf0,0xe0,0x44,0x0c,0xf0,0x22,0x8f,0x76,0x90,
+0x9e,0x5e,0xe0,0x90,0x01,0xc1,0xf0,0xa3,0xe5,0x12,0xf0,0x12,0x45,0xb1,0xef,0x64,
+0x01,0x70,0x2e,0x90,0x9e,0x69,0x12,0x47,0xfa,0xe5,0x76,0x60,0x10,0x74,0x21,0x2f,
+0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x10,0xf0,0x80,0x0e,0x74,0x21,0x2f,
+0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xef,0xf0,0x90,0x04,0x1f,0x74,0x20,
+0xf0,0x22,0x90,0x9e,0xaf,0xef,0xf0,0x71,0xb0,0x90,0x9e,0xaf,0xe0,0x60,0x05,0x90,
+0x05,0x22,0xe4,0xf0,0x90,0x9e,0x5e,0xe0,0x54,0xf0,0xf0,0xe0,0x44,0x04,0xf0,0x22,
+0x90,0x00,0x11,0xe0,0x44,0x09,0xf0,0x12,0x49,0xb9,0x90,0x9d,0xff,0x12,0x43,0x53,
+0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x78,0x7e,0x08,0x12,0x2b,0x08,0x90,0x9e,0x03,
+0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x04,0x7e,0x0c,0x12,0x2b,0x08,
+0x90,0x9e,0x07,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x00,0x7e,0x08,
+0x12,0x2b,0x08,0x90,0x9e,0x0b,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,
+0x70,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x68,0x12,0x25,0x14,0x00,0x03,0x2d,0x95,
+0xe4,0xfd,0xff,0x12,0x30,0x2c,0x90,0x9e,0x77,0xe0,0xb4,0x01,0x11,0x90,0x80,0x68,
+0x12,0x25,0x14,0x00,0x03,0x2d,0x95,0xe4,0xfd,0x7f,0x01,0x12,0x30,0x2c,0x22,0x8f,
+0x27,0xe4,0x90,0x9e,0xa8,0xf0,0xa3,0xf0,0x90,0x01,0x09,0xe0,0x7f,0x00,0x30,0xe7,
+0x02,0x7f,0x01,0xef,0x65,0x27,0x60,0x3e,0xc3,0x90,0x9e,0xa9,0xe0,0x94,0x88,0x90,
+0x9e,0xa8,0xe0,0x94,0x13,0x40,0x08,0x90,0x01,0xc6,0xe0,0x44,0x80,0xf0,0x22,0x90,
+0x9e,0xa8,0xe4,0x75,0xf0,0x01,0x12,0x42,0x81,0x7f,0x14,0x7e,0x00,0x12,0x32,0x15,
+0xd3,0x90,0x9e,0xa9,0xe0,0x94,0x32,0x90,0x9e,0xa8,0xe0,0x94,0x00,0x40,0xb9,0x90,
+0x01,0xc7,0xe0,0x30,0xe0,0xb2,0x22,0x90,0x9e,0x5e,0xe0,0x54,0xf0,0xf0,0xe0,0x44,
+0x01,0xf0,0x12,0x44,0xff,0x12,0x45,0x00,0xe0,0x54,0xf0,0xf0,0xe0,0x44,0x02,0xf0,
+0x22,0x90,0x9e,0x60,0xe0,0x30,0xe6,0x1c,0xe0,0x54,0x0f,0xff,0x90,0x9e,0x4e,0xe0,
+0xfe,0x4f,0x90,0x01,0x2f,0xf0,0xee,0x64,0x80,0x90,0x9e,0x4e,0xf0,0x90,0x9e,0x60,
+0xe0,0x54,0xbf,0xf0,0x22,0x8f,0x75,0x12,0x45,0xb1,0xef,0x64,0x01,0x70,0x2e,0x90,
+0x9e,0x6a,0x12,0x47,0xfa,0xe5,0x75,0x60,0x10,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,
+0xfc,0xf5,0x83,0xe0,0x44,0x10,0xf0,0x80,0x0e,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,
+0xfc,0xf5,0x83,0xe0,0x54,0xef,0xf0,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0xe4,0x90,
+0x9e,0x2f,0xf0,0xe5,0x74,0x60,0x6a,0xe5,0x73,0x64,0x01,0x70,0x64,0xe5,0x74,0x14,
+0x60,0x29,0x24,0xfd,0x60,0x25,0x24,0x02,0x24,0xfb,0x50,0x02,0x80,0x23,0x90,0x9e,
+0x50,0xe0,0x14,0xf0,0xe0,0x60,0x04,0xa3,0xe0,0x60,0x16,0x90,0x9e,0x50,0xe0,0x70,
+0x0a,0x90,0x9e,0x5f,0xe0,0x90,0x9e,0x50,0xf0,0x80,0x00,0x90,0x9e,0x2f,0x74,0x01,
+0xf0,0x90,0x9e,0x2f,0xe0,0x60,0x2a,0x90,0x9e,0x63,0xe0,0x44,0x10,0xf0,0xe4,0x90,
+0x9e,0x89,0xf0,0x90,0x9e,0x5a,0x12,0x44,0x56,0x90,0x01,0x57,0x74,0x05,0xf0,0x90,
+0x9e,0x5e,0xe0,0x54,0x0f,0xc3,0x94,0x04,0x50,0x07,0x7d,0x01,0x7f,0x04,0x12,0x47,
+0x1a,0x22,0xef,0xc3,0x94,0x20,0x50,0x39,0xef,0x30,0xe0,0x17,0xed,0xc4,0x54,0xf0,
+0xfd,0xef,0xc3,0x13,0xfe,0x24,0xa4,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x54,
+0x0f,0x80,0x10,0xef,0xc3,0x13,0xfe,0x24,0xa4,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,
+0xe0,0x54,0xf0,0xf0,0x74,0xa4,0x2e,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x4d,
+0xf0,0x22,0xad,0x07,0xed,0xc3,0x94,0x20,0x50,0x0d,0x74,0x84,0x2d,0xf5,0x82,0xe4,
+0x34,0x04,0xf5,0x83,0xe0,0x80,0x0b,0x74,0xa6,0x2d,0xf5,0x82,0xe4,0x34,0x9c,0xf5,
+0x83,0xe0,0x54,0x7f,0xf5,0x64,0xe5,0x64,0x54,0x1f,0xfc,0x75,0xf0,0x09,0xed,0x90,
+0x96,0x48,0x12,0x43,0x5f,0xe0,0xff,0x90,0x9e,0x3e,0xf0,0xed,0x25,0xe0,0x24,0x02,
+0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x9e,0x3f,0xcb,0xf0,
+0xa3,0xeb,0xf0,0xed,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,
+0xfb,0xa3,0xe0,0x90,0x9e,0x41,0xcb,0xf0,0xa3,0xeb,0xf0,0xec,0x25,0xe0,0x24,0x66,
+0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfa,0x74,0x01,0x93,0xfb,0xed,0x25,
+0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xea,0xf0,0xa3,0xeb,0xf0,0xec,
+0xc3,0x9f,0x40,0x02,0xc1,0xc9,0x74,0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,
+0xec,0xf0,0x04,0xfb,0x90,0x9e,0x3e,0xe0,0xff,0xeb,0xd3,0x9f,0x40,0x02,0xc1,0xfa,
+0xeb,0xc3,0x94,0x10,0x40,0x21,0xeb,0x24,0xf0,0xff,0x74,0x01,0x7e,0x00,0xa8,0x07,
+0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x9e,0x3f,0xe0,0x5e,
+0xfe,0xa3,0xe0,0x5f,0x4e,0x70,0x23,0xeb,0xc3,0x94,0x10,0x50,0x39,0x74,0x01,0x7e,
+0x00,0xa8,0x03,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x9e,
+0x41,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x1c,0xeb,0x64,0x13,0x60,0x08,0xeb,
+0x64,0x12,0x60,0x03,0xbb,0x11,0x09,0x90,0x9e,0x3f,0xe0,0x30,0xe0,0x02,0x7b,0x18,
+0xac,0x03,0x8c,0x64,0x80,0x34,0x0b,0x80,0x8b,0x90,0x9e,0x3e,0xe0,0xfb,0x6c,0x70,
+0x69,0x74,0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xec,0xf0,0x75,0xf0,0x09,
+0xed,0x90,0x96,0x4a,0x12,0x43,0x5f,0xe0,0xb4,0x01,0x0c,0xe5,0x64,0x20,0xe6,0x07,
+0xec,0x44,0x40,0xf5,0x64,0x80,0x03,0xaf,0x64,0x22,0xec,0x25,0xe0,0x24,0x9e,0xf5,
+0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xec,0x25,0xe0,
+0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,
+0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,
+0x95,0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0x80,0x5b,0xec,0xd3,0x9b,0x40,0x56,0x90,
+0x9e,0x3e,0xe0,0xff,0x74,0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xef,0xf0,
+0xac,0x07,0x8f,0x64,0xec,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,
+0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xec,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,
+0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,
+0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0xa3,
+0xef,0xf0,0xaf,0x64,0x22,0x74,0x01,0x2d,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe4,
+0xf0,0xaf,0x05,0xe5,0x64,0x44,0x80,0xfd,0x12,0x58,0xf1,0xe5,0x64,0x44,0x80,0xff,
+0x22,0xac,0x07,0xec,0xc3,0x94,0x20,0x50,0x0d,0x74,0x84,0x2c,0xf5,0x82,0xe4,0x34,
+0x04,0xf5,0x83,0xe0,0x80,0x0b,0x74,0xa6,0x2c,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,
+0xe0,0x54,0x7f,0xf5,0x64,0xe5,0x64,0x54,0x1f,0xff,0x90,0x9e,0x40,0xf0,0x75,0xf0,
+0x09,0xec,0x90,0x96,0x49,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x42,0xf0,0x75,0xf0,0x09,
+0xec,0x90,0x96,0x48,0x12,0x43,0x5f,0xe0,0xfe,0x90,0x9e,0x43,0xf0,0xec,0x25,0xe0,
+0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x9e,0x44,
+0xcb,0xf0,0xa3,0xeb,0xf0,0xec,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,
+0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x9e,0x46,0xcb,0xf0,0xa3,0xeb,0xf0,0xef,0xd3,0x9e,
+0x40,0x0a,0x90,0x9e,0x43,0xe0,0x90,0x9e,0x40,0xf0,0xf5,0x64,0xed,0x70,0x02,0x21,
+0x07,0x90,0x9e,0x41,0xed,0xf0,0xe5,0x64,0x30,0xe6,0x0a,0x90,0x9e,0x40,0xe0,0xf5,
+0x64,0xa3,0xe0,0x14,0xf0,0x90,0x9e,0x41,0xe0,0x70,0x02,0x21,0x07,0x90,0x9e,0x40,
+0xe0,0xff,0xd3,0x94,0x00,0x50,0x02,0x21,0x07,0xe4,0x90,0x9e,0x3f,0xf0,0xef,0x14,
+0x90,0x9e,0x3e,0xf0,0x90,0x9e,0x42,0xe0,0xfd,0x90,0x9e,0x3e,0xe0,0xff,0xd3,0x9d,
+0x40,0x6b,0xef,0x94,0x10,0x40,0x21,0xef,0x24,0xf0,0xff,0x74,0x01,0x7e,0x00,0xa8,
+0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x9e,0x46,0xe0,
+0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x70,0x27,0x90,0x9e,0x3e,0xe0,0xff,0xc3,0x94,0x10,
+0x50,0x33,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,
+0xd8,0xf9,0xff,0x90,0x9e,0x44,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x16,0x90,
+0x9e,0x3e,0xe0,0xf5,0x64,0xa3,0xe0,0x04,0xf0,0x90,0x9e,0x41,0xe0,0xff,0x90,0x9e,
+0x3f,0xe0,0x6f,0x60,0x08,0x90,0x9e,0x3e,0xe0,0x14,0xf0,0x80,0x87,0x90,0x9e,0x41,
+0xe0,0xff,0x90,0x9e,0x3f,0xe0,0xc3,0x9f,0x50,0x0d,0x90,0x9e,0x3e,0xe0,0xb5,0x05,
+0x06,0x90,0x9e,0x42,0xe0,0xf5,0x64,0xe5,0x64,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,
+0x34,0x41,0xf5,0x83,0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xe5,0x64,0x25,0xe0,0x24,
+0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,
+0xc3,0x13,0xfe,0xef,0x13,0xff,0xec,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,
+0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0xaf,0x04,0xad,0x64,0x12,0x58,0xf1,0xaf,0x64,
+0x22,0xe4,0xf5,0x59,0xe5,0x59,0xb4,0x20,0x14,0x90,0x9a,0xc5,0xe0,0x04,0xf0,0x90,
+0x95,0x01,0xe0,0xff,0x90,0x9a,0xc5,0xe0,0xb5,0x07,0x02,0xe4,0xf0,0x75,0xf0,0x09,
+0xe5,0x59,0x90,0x96,0x4b,0x12,0x43,0x5f,0xe0,0x64,0x01,0x60,0x02,0xe1,0x95,0xe5,
+0x59,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,
+0xd3,0x94,0x00,0xee,0x94,0x00,0x50,0x02,0xe1,0x95,0xe5,0x59,0x94,0x20,0x40,0x08,
+0x90,0x9a,0xc5,0xe0,0x60,0x02,0xe1,0xa0,0xe5,0x59,0x75,0xf0,0x0a,0xa4,0x24,0x00,
+0xf9,0x74,0x90,0x35,0xf0,0x75,0x5e,0x01,0xf5,0x5f,0x89,0x60,0xe5,0x59,0x25,0xe0,
+0x24,0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe0,0xff,0xa3,0xe0,0x90,0x9e,0x38,
+0xcf,0xf0,0xa3,0xef,0xf0,0xe5,0x59,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x98,
+0xf5,0x83,0xe0,0xff,0xa3,0xe0,0x90,0x9e,0x3a,0xcf,0xf0,0xa3,0xef,0xf0,0xe5,0x59,
+0xc3,0x94,0x20,0x50,0x14,0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,
+0xe0,0x54,0x3f,0x90,0x9e,0x34,0xf0,0x80,0x12,0x74,0xa6,0x25,0x59,0xf5,0x82,0xe4,
+0x34,0x9c,0xf5,0x83,0xe0,0x54,0x3f,0x90,0x9e,0x34,0xf0,0x90,0x9e,0x34,0xe0,0xfe,
+0x54,0x1f,0xa3,0xf0,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x48,0x12,0x43,0x5f,0xe0,
+0x90,0x9e,0x3d,0xf0,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,
+0xc3,0x94,0x05,0x40,0x02,0x81,0x6e,0x90,0x9e,0x3d,0xe0,0xff,0x90,0x9e,0x35,0xe0,
+0x9f,0x40,0x13,0x90,0x9e,0x3d,0xe0,0x90,0x9e,0x35,0xf0,0xee,0x54,0x40,0xfe,0x90,
+0x9e,0x34,0xf0,0xef,0x4e,0xf0,0x90,0x04,0xfd,0xe0,0x64,0x01,0x70,0x29,0x90,0x9e,
+0x35,0xe0,0xff,0x90,0x41,0x4a,0x93,0xfe,0x74,0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,
+0x9a,0xf5,0x83,0xe0,0xc3,0x9e,0x40,0x06,0xef,0x90,0x40,0xda,0x80,0x30,0x90,0x9e,
+0x35,0xe0,0x90,0x40,0xf6,0x80,0x27,0x90,0x9e,0x35,0xe0,0xff,0x90,0x41,0x4a,0x93,
+0xfe,0x74,0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xc3,0x9e,0x40,
+0x06,0xef,0x90,0x41,0x12,0x80,0x07,0x90,0x9e,0x35,0xe0,0x90,0x41,0x2e,0x93,0x90,
+0x9e,0x3c,0xf0,0x90,0x9e,0x3c,0xe0,0x75,0xf0,0x06,0xa4,0x24,0x50,0xf9,0x74,0x40,
+0x35,0xf0,0x75,0x5b,0xff,0xf5,0x5c,0x89,0x5d,0x90,0x9e,0x34,0xe0,0x90,0x41,0xf2,
+0x93,0xff,0xd3,0x90,0x9e,0x3b,0xe0,0x9f,0x90,0x9e,0x3a,0xe0,0x94,0x00,0x40,0x09,
+0xe4,0xfd,0xaf,0x59,0x12,0x67,0xb1,0xe1,0x2c,0xe5,0x59,0x25,0xe0,0x24,0xc2,0xf5,
+0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xf5,0x61,0xa3,0xe0,0xf5,0x62,0xab,0x5b,0xaa,
+0x5c,0xa9,0x5d,0x12,0x24,0x62,0xff,0x7e,0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x12,
+0x42,0x97,0xfd,0xac,0xf0,0x12,0x24,0x7b,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,
+0xf5,0x61,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0x7e,
+0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x02,0x12,0x42,0xc2,0xfd,0xac,0xf0,
+0x12,0x24,0x7b,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xab,0x5b,0xaa,
+0x5c,0xa9,0x5d,0x90,0x00,0x02,0x12,0x42,0x20,0xff,0x7e,0x00,0xab,0x5e,0xaa,0x5f,
+0xa9,0x60,0x90,0x00,0x04,0x12,0x42,0xc2,0xfd,0xac,0xf0,0x12,0x24,0x7b,0xef,0x25,
+0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x90,0x00,
+0x03,0x12,0x42,0x20,0xff,0x7e,0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x06,
+0x12,0x42,0xc2,0xfd,0xac,0xf0,0x12,0x24,0x7b,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,
+0x61,0xf5,0x61,0xab,0x5b,0xaa,0x5c,0xa9,0x5d,0x90,0x00,0x04,0x12,0x42,0x20,0xff,
+0x7e,0x00,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,0x08,0x12,0x42,0xc2,0xfd,0xac,
+0xf0,0x12,0x24,0x7b,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xab,0x5b,
+0xaa,0x5c,0xa9,0x5d,0x90,0x00,0x05,0x12,0x42,0x20,0xff,0x7e,0x00,0x90,0x9e,0x38,
+0xe0,0xfc,0xa3,0xe0,0xfd,0x12,0x24,0x7b,0xd3,0xe5,0x62,0x9f,0xe5,0x61,0x9e,0x40,
+0x0c,0xe5,0x62,0x9f,0xf5,0x62,0xe5,0x61,0x9e,0xf5,0x61,0x80,0x05,0xe4,0xf5,0x61,
+0xf5,0x62,0xe5,0x59,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe5,
+0x61,0xf0,0xa3,0xe5,0x62,0xf0,0x90,0x9e,0x34,0xe0,0x25,0xe0,0x24,0x66,0xf5,0x82,
+0xe4,0x34,0x41,0xf5,0x83,0xc3,0x74,0x01,0x93,0x95,0x62,0xe4,0x93,0x95,0x61,0x50,
+0x07,0xaf,0x59,0x12,0x65,0xb2,0xe1,0x00,0x90,0x9e,0x34,0xe0,0x25,0xe0,0x24,0x9e,
+0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xd3,0x74,0x01,0x93,0x95,0x62,0xe4,0x93,0x95,
+0x61,0x50,0x02,0xe1,0x00,0x7d,0x01,0xaf,0x59,0x12,0x67,0xb1,0xe1,0x00,0x74,0xe6,
+0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0xfc,0x64,0x05,0x60,0x02,0xc1,
+0x09,0x90,0x96,0x43,0xe0,0xff,0xb4,0x03,0x0b,0x90,0x9e,0x35,0xe0,0xc3,0x94,0x19,
+0x40,0x3d,0x80,0x2e,0xef,0xb4,0x02,0x0b,0x90,0x9e,0x35,0xe0,0xc3,0x94,0x11,0x40,
+0x2e,0x80,0x1f,0x90,0x96,0x43,0xe0,0xff,0xb4,0x01,0x0b,0x90,0x9e,0x35,0xe0,0xc3,
+0x94,0x0a,0x40,0x1b,0x80,0x0c,0xef,0x70,0x11,0x90,0x9e,0x35,0xe0,0xc3,0x94,0x03,
+0x40,0x0d,0x90,0x9a,0x84,0x74,0x01,0xf0,0x80,0x05,0xe4,0x90,0x9a,0x84,0xf0,0x74,
+0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe0,0xf5,0x63,0x74,0x44,0x25,
+0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xff,0xc3,0x94,0x30,0x50,0x02,0xa1,
+0xb6,0x90,0x9a,0x84,0xe0,0x64,0x01,0x60,0x02,0xa1,0xb6,0x74,0x85,0x25,0x59,0xf5,
+0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0x64,0x0a,0x60,0x51,0xef,0x24,0x05,0xff,0xe4,
+0x33,0xfe,0x74,0x41,0x25,0x59,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe0,0xfd,0xd3,
+0x9f,0xee,0x64,0x80,0xf8,0x74,0x80,0x98,0x50,0x32,0xed,0x24,0x05,0xff,0xe4,0x33,
+0xfe,0x74,0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xd3,0x9f,0xee,
+0x64,0x80,0xf8,0x74,0x80,0x98,0x50,0x14,0x74,0x26,0x25,0x59,0xf5,0x82,0xe4,0x34,
+0x9d,0xf5,0x83,0xe0,0xff,0x90,0x9e,0x35,0xe0,0x6f,0x60,0x3d,0x74,0x44,0x25,0x59,
+0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xff,0xd3,0x94,0x42,0x40,0x05,0x75,0x63,
+0x05,0x80,0x0e,0xef,0xd3,0x94,0x39,0x40,0x05,0x75,0x63,0x03,0x80,0x03,0x75,0x63,
+0x01,0x74,0x41,0x25,0x59,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xef,0xf0,0x74,0x85,
+0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0x80,0x29,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,
+0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x74,0x85,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,
+0x83,0xe0,0x04,0xf0,0x80,0x10,0xe4,0xf5,0x63,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,
+0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x90,0x9e,0x35,0xe0,0xff,0x74,0x26,0x25,0x59,0xf5,
+0x82,0xe4,0x34,0x9d,0xf5,0x83,0xef,0xf0,0x74,0x84,0x25,0x59,0xf5,0x82,0xe4,0x34,
+0x98,0xf5,0x83,0xe5,0x63,0xf0,0x75,0xf0,0x09,0xe5,0x59,0x90,0x96,0x4c,0x12,0x43,
+0x5f,0xe0,0xb4,0x01,0x10,0xe4,0xf5,0x63,0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,
+0x9c,0xf5,0x83,0xe4,0xf0,0xad,0x63,0xc1,0xfb,0xec,0x64,0x06,0x60,0x02,0xe1,0x00,
+0xf5,0x61,0xf5,0x62,0x90,0x42,0x13,0x93,0xff,0x7e,0x00,0x90,0x9e,0x38,0xe0,0xfc,
+0xa3,0xe0,0xfd,0x12,0x24,0x7b,0x90,0x9e,0x36,0xee,0xf0,0xa3,0xef,0xf0,0x74,0x84,
+0x25,0x59,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe0,0xf5,0x63,0xe4,0xf5,0x5a,0xab,
+0x5e,0xaa,0x5f,0xa9,0x60,0x75,0xf0,0x02,0xe5,0x5a,0xa4,0xf5,0x82,0x85,0xf0,0x83,
+0x12,0x42,0xc2,0xfd,0xac,0xf0,0xe5,0x5a,0x90,0x42,0x0e,0x93,0xff,0x7e,0x00,0x12,
+0x24,0x7b,0xef,0x25,0x62,0xf5,0x62,0xee,0x35,0x61,0xf5,0x61,0xc3,0x90,0x9e,0x37,
+0xe0,0x95,0x62,0x90,0x9e,0x36,0xe0,0x95,0x61,0x40,0x07,0x05,0x5a,0xe5,0x5a,0xb4,
+0x05,0xbd,0xe5,0x5a,0xc3,0x13,0xf5,0x5a,0xe5,0x63,0xb4,0x01,0x06,0xe5,0x5a,0x70,
+0x46,0x80,0x13,0xe5,0x63,0xb4,0x03,0x15,0xe5,0x5a,0x70,0x05,0x75,0x63,0x03,0x80,
+0x39,0xe5,0x5a,0xb4,0x01,0x05,0x75,0x63,0x01,0x80,0x2f,0x80,0x2a,0xe5,0x63,0xb4,
+0x05,0x28,0xe5,0x5a,0x70,0x05,0x75,0x63,0x05,0x80,0x0d,0xe5,0x5a,0xb4,0x01,0x05,
+0x75,0x63,0x03,0x80,0x03,0x75,0x63,0x01,0xd3,0x90,0x9e,0x3b,0xe0,0x94,0x03,0x90,
+0x9e,0x3a,0xe0,0x94,0x00,0x40,0x03,0xe4,0xf5,0x63,0xd3,0x90,0x9e,0x3b,0xe0,0x94,
+0x03,0x90,0x9e,0x3a,0xe0,0x94,0x00,0x40,0x03,0xe4,0xf5,0x63,0x74,0x84,0x25,0x59,
+0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe5,0x63,0xf0,0xfd,0xaf,0x59,0x12,0x65,0x72,
+0x74,0xe6,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0xd3,0x94,0x05,0x74,
+0xe6,0x50,0x0e,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x04,0xf0,0x80,
+0x0b,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0xab,0x5e,0xaa,0x5f,
+0xa9,0x60,0xe4,0xf5,0xf0,0x12,0x42,0xfa,0xab,0x5e,0xaa,0x5f,0xa9,0x60,0x90,0x00,
+0x02,0xe4,0xf5,0xf0,0x12,0x43,0x19,0x90,0x00,0x04,0xe4,0xf5,0xf0,0x12,0x43,0x19,
+0x90,0x00,0x06,0xe4,0xf5,0xf0,0x12,0x43,0x19,0x90,0x00,0x08,0xe4,0xf5,0xf0,0x12,
+0x43,0x19,0xe5,0x59,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe4,
+0xf0,0xa3,0xf0,0xe5,0x59,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,
+0xe4,0xf0,0xa3,0xf0,0xe5,0x59,0x25,0xe0,0x24,0x44,0xf5,0x82,0xe4,0x34,0x99,0xf5,
+0x83,0xe4,0xf0,0xa3,0xf0,0x05,0x59,0xe5,0x59,0xc3,0x94,0x40,0x50,0x02,0x21,0x54,
+0x22,0x90,0x04,0x44,0x74,0x11,0xf0,0xa3,0x74,0xf0,0xf0,0xa3,0x74,0x0f,0xf0,0xa3,
+0xe4,0xf0,0xfd,0x74,0xa4,0x2d,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe4,0xf0,0x0d,
+0xbd,0x10,0xf0,0xe4,0x90,0x9a,0xc5,0xf0,0x90,0x95,0x01,0x04,0xf0,0xe4,0xfd,0x75,
+0xf0,0x0a,0xed,0x90,0x90,0x00,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,
+0xed,0x90,0x90,0x02,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,
+0x90,0x04,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,0x90,0x06,
+0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,0x90,0x08,0x12,0x43,
+0x5f,0xe4,0xf0,0xa3,0xf0,0x74,0x26,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0x74,
+0x13,0xf0,0x74,0x85,0x2d,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe4,0xf0,0x74,0x84,
+0x2d,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe4,0xf0,0xed,0x25,0xe0,0x24,0x80,0xf5,
+0x82,0xe4,0x34,0x93,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0xc4,0xf5,
+0x82,0xe4,0x34,0x98,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0xc4,0xf5,
+0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0x44,0xf5,
+0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0xc6,0xf5,
+0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xed,0x25,0xe0,0x24,0x46,0xf5,
+0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0x74,0x86,0x2d,0xf5,0x82,0xe4,
+0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x74,0x46,0x2d,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,
+0xe4,0xf0,0x74,0xe6,0x2d,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x90,0x41,
+0xc4,0x93,0xfe,0x74,0x01,0x93,0xff,0x90,0x41,0x8c,0x74,0x01,0x93,0x2f,0xff,0xe4,
+0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,
+0x34,0x95,0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x4b,
+0x12,0x43,0x5f,0x74,0x01,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x4a,0x12,0x43,0x5f,
+0x74,0x01,0xf0,0x74,0x82,0x2d,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0x74,0x0c,0xf0,
+0x75,0xf0,0x09,0xed,0x90,0x96,0x46,0x12,0x43,0x5f,0x74,0xff,0xf0,0xa3,0xf0,0x75,
+0xf0,0x09,0xed,0x90,0x96,0x44,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0x74,0x0f,0xf0,0x75,
+0xf0,0x09,0xed,0x90,0x96,0x48,0x12,0x43,0x5f,0x74,0x13,0xf0,0x75,0xf0,0x09,0xed,
+0x90,0x96,0x49,0x12,0x43,0x5f,0xe4,0xf0,0xed,0xc3,0x94,0x20,0x50,0x0f,0x74,0x84,
+0x2d,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0x74,0x13,0xf0,0x80,0x0d,0x74,0xa6,0x2d,
+0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0x74,0x13,0xf0,0x0d,0xed,0x64,0x40,0x60,0x03,
+0x02,0x6f,0xcf,0x22,0x12,0x24,0x62,0xf5,0x59,0xc3,0x94,0x40,0x50,0x15,0x90,0x00,
+0x02,0x12,0x42,0x20,0xff,0x74,0x44,0x25,0x59,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,
+0xef,0xf0,0x22,0xe5,0x59,0xb4,0x40,0x0a,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x96,
+0x42,0xf0,0x22,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0x54,0x3f,0xfe,0xef,0x54,0x80,
+0xc4,0x13,0x13,0x13,0x54,0x01,0xfd,0xaf,0x06,0x02,0x53,0xa4,0x12,0x24,0x62,0x90,
+0x95,0x01,0xf0,0x22,0x12,0x24,0x62,0xf5,0x73,0x22,0x90,0x00,0x02,0x12,0x42,0x20,
+0xff,0x30,0xe0,0x25,0x12,0x24,0x62,0x90,0x9e,0x56,0xf0,0x90,0x00,0x01,0x12,0x42,
+0x20,0x90,0x9e,0x57,0xf0,0xef,0xc3,0x13,0x54,0x7f,0x90,0x9e,0x55,0xf0,0x90,0x00,
+0x03,0x12,0x42,0x20,0x90,0x9e,0x5b,0xf0,0x22,0x90,0x9e,0x56,0x74,0x01,0xf0,0x90,
+0x9e,0x57,0x74,0x03,0xf0,0x90,0x9e,0x55,0x74,0x14,0xf0,0x90,0x9e,0x5b,0x74,0x05,
+0xf0,0x22,0x12,0x24,0x62,0x30,0xe0,0x18,0xc3,0x13,0x54,0x7f,0x90,0x9e,0x5a,0xf0,
+0x90,0x00,0x01,0x12,0x42,0x20,0xff,0x90,0x9e,0x58,0xe4,0xf0,0xa3,0xef,0xf0,0x22,
+0x90,0x9e,0x5a,0x74,0x07,0xf0,0x90,0x9e,0x58,0xe4,0xf0,0xa3,0x74,0x02,0xf0,0x22,
+0x90,0x02,0x09,0xe0,0xfd,0x12,0x24,0x62,0xfe,0xaf,0x05,0xed,0x2e,0x90,0x9e,0x67,
+0xf0,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0xed,0x2f,0x90,0x9e,0x68,0xf0,0x90,0x00,
+0x02,0x12,0x42,0x20,0xff,0xed,0x2f,0x90,0x9e,0x69,0xf0,0x90,0x00,0x03,0x12,0x42,
+0x20,0xff,0xed,0x2f,0x90,0x9e,0x6a,0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0xae,
+0x05,0xed,0x2f,0x90,0x9e,0x6b,0xf0,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,
+0x9e,0x3f,0x12,0x43,0x8b,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,0x42,
+0xc2,0xfa,0xe5,0xf0,0x24,0x00,0xff,0xe4,0x3a,0xfe,0x90,0x9e,0x3f,0x12,0x43,0x6b,
+0x90,0x00,0x01,0xee,0x8f,0xf0,0x12,0x43,0x19,0x12,0x24,0x62,0xff,0x60,0x2c,0xb5,
+0x22,0x16,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,0x42,0xc2,0x65,0x24,
+0x70,0x04,0xe5,0x23,0x65,0xf0,0x60,0x23,0x90,0x9e,0x3f,0x12,0x43,0x6b,0x90,0x00,
+0x01,0x12,0x42,0xc2,0xff,0xae,0xf0,0x71,0x00,0x80,0x10,0x90,0x9e,0x3f,0x12,0x43,
+0x6b,0x12,0x24,0x62,0x65,0x22,0x60,0x03,0x12,0x44,0xca,0xd0,0xd0,0x92,0xaf,0x22,
+0x90,0x9e,0x42,0xee,0xf0,0xa3,0xef,0xf0,0x75,0x22,0x01,0x8e,0x23,0xf5,0x24,0xe4,
+0xfd,0x7f,0x0b,0x71,0x44,0xe4,0xfd,0x7f,0x02,0x71,0x44,0x12,0x4f,0xbe,0xe4,0xff,
+0x12,0x44,0xf1,0xe4,0xf5,0x26,0x90,0x01,0xc9,0xe5,0x26,0xf0,0x90,0x9e,0x42,0xe0,
+0xfc,0xa3,0xe0,0xfd,0xec,0xfb,0x8d,0x44,0xe4,0xf5,0x45,0x7d,0x01,0x7f,0x60,0x7e,
+0x01,0x02,0x30,0x62,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x45,0xed,0xf0,
+0x90,0x9e,0x44,0xef,0xf0,0xd3,0x94,0x07,0x50,0x4f,0xa3,0xe0,0x70,0x1a,0x90,0x9e,
+0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,
+0x90,0x00,0x47,0xe0,0x5f,0xf0,0x80,0x17,0x90,0x9e,0x44,0xe0,0xff,0x74,0x01,0xa8,
+0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x47,0xe0,0x4f,0xf0,0x12,
+0x49,0xb9,0x90,0x9e,0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,
+0xd8,0xfc,0xf4,0xff,0x90,0x00,0x46,0x80,0x5a,0x90,0x9e,0x44,0xe0,0x24,0xf8,0xf0,
+0xa3,0xe0,0x70,0x1d,0x90,0x9e,0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,
+0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0x80,
+0x1a,0x90,0x9e,0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,
+0xfc,0xc4,0x54,0xf0,0xff,0x90,0x00,0x43,0xe0,0x4f,0xf0,0x12,0x49,0xb9,0x90,0x9e,
+0x44,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,
+0x90,0x00,0x43,0xe0,0x5f,0xf0,0x12,0x49,0xb9,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,
+0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x6d,0xe0,0x90,0x9e,0x40,0xf0,0x90,0x9e,0x6e,
+0xe0,0xf5,0x64,0xa3,0xe0,0xf5,0x65,0xe4,0xf5,0x61,0x74,0x70,0x25,0x61,0xf5,0x82,
+0xe4,0x34,0x9e,0xf5,0x83,0xe0,0xff,0x74,0x66,0x25,0x61,0xf8,0xa6,0x07,0x05,0x61,
+0xe5,0x61,0xb4,0x04,0xe5,0x90,0x9e,0x40,0xe0,0x12,0x43,0x94,0x74,0x6b,0x00,0x75,
+0x93,0x01,0x74,0x71,0x02,0x74,0x71,0x03,0x74,0x71,0x04,0x75,0x93,0x05,0x75,0x63,
+0x80,0x75,0x79,0x81,0x75,0x93,0x82,0x00,0x00,0x75,0x8f,0xaf,0x69,0xb1,0x9a,0xa1,
+0x93,0x90,0x9e,0x40,0xe0,0xff,0xb4,0x02,0x08,0x90,0x9e,0x3f,0x74,0x01,0xf0,0x80,
+0x0f,0xef,0x90,0x9e,0x3f,0xb4,0x03,0x05,0x74,0x02,0xf0,0x80,0x03,0x74,0x04,0xf0,
+0xc3,0xe5,0x64,0x94,0x08,0x50,0x49,0xe4,0xf5,0x61,0x90,0x9e,0x3f,0xe0,0xff,0xe5,
+0x61,0xc3,0x9f,0x40,0x02,0xa1,0x93,0xc3,0xe5,0x64,0x94,0x01,0x50,0x14,0xe5,0x61,
+0x25,0x65,0xff,0xc3,0x74,0x03,0x95,0x61,0x24,0x66,0xf8,0xe6,0xfd,0x12,0x4a,0xc1,
+0x80,0x1a,0xc3,0x74,0x03,0x95,0x61,0x24,0x66,0xf8,0xe6,0xff,0xe5,0x61,0x7c,0x00,
+0x25,0x65,0xfd,0xec,0x35,0x64,0x8d,0x82,0xf5,0x83,0xef,0xf0,0x05,0x61,0x80,0xba,
+0xc3,0xe5,0x64,0x94,0x10,0x40,0x02,0xa1,0x93,0x90,0x9e,0x40,0xe0,0x64,0x04,0x60,
+0x02,0xa1,0x93,0xaf,0x67,0xfc,0xfd,0xfe,0x78,0x10,0x12,0x24,0xf5,0xc0,0x04,0xc0,
+0x05,0xc0,0x06,0xc0,0x07,0xaf,0x66,0xe4,0xfc,0xfd,0xfe,0x78,0x18,0x12,0x24,0xf5,
+0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0x12,0x43,0x46,0xc0,0x04,0xc0,0x05,0xc0,
+0x06,0xc0,0x07,0xaf,0x68,0xe4,0xfc,0xfd,0xfe,0x78,0x08,0x12,0x24,0xf5,0xd0,0x03,
+0xd0,0x02,0xd0,0x01,0xd0,0x00,0x12,0x43,0x46,0xa8,0x04,0xa9,0x05,0xaa,0x06,0xab,
+0x07,0xaf,0x69,0xe4,0xfc,0xfd,0xfe,0x12,0x43,0x46,0xa3,0x12,0x25,0x08,0x90,0x9e,
+0x41,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0xaf,0x65,0xae,0x64,0x12,0x2b,
+0x08,0x80,0x30,0xe5,0x68,0x7f,0x00,0xfe,0xef,0x25,0x69,0xf5,0x63,0xe4,0x3e,0xf5,
+0x62,0xaf,0x63,0xfe,0x12,0x32,0x15,0x80,0x1a,0xe5,0x68,0x7f,0x00,0xfe,0xef,0x25,
+0x69,0xf5,0x63,0xe4,0x3e,0xf5,0x62,0xaf,0x63,0xfe,0x12,0x31,0x82,0x80,0x04,0x7f,
+0x00,0x80,0x02,0x7f,0x01,0xd0,0xd0,0x92,0xaf,0x22,0x8f,0x6a,0xe4,0x90,0x9e,0x45,
+0xf0,0xe5,0x6a,0x14,0xfe,0x90,0x9e,0x45,0xe0,0xff,0xc3,0x9e,0x50,0x0e,0xef,0x04,
+0xfd,0x12,0x2d,0x4d,0x90,0x9e,0x45,0xe0,0x04,0xf0,0x80,0xe5,0xe5,0x6a,0x14,0xff,
+0x7d,0xff,0x12,0x2d,0x4d,0x90,0x9e,0x45,0xe5,0x6a,0xf0,0x90,0x9e,0x45,0xe0,0xc3,
+0x94,0xff,0x50,0x0f,0xe0,0xff,0x04,0xfd,0x12,0x2d,0x4d,0x90,0x9e,0x45,0xe0,0x04,
+0xf0,0x80,0xe8,0xad,0x6a,0x7f,0xff,0x02,0x2d,0x4d,0xd3,0x10,0xaf,0x01,0xc3,0xc0,
+0xd0,0xe4,0xf5,0x5b,0x75,0x5c,0x04,0xf5,0x5d,0xf5,0x5f,0xf5,0x60,0x90,0x02,0x09,
+0xe0,0xff,0x12,0x24,0x62,0xfe,0xef,0x2e,0xf5,0x5e,0x30,0xe0,0x08,0x75,0x59,0x00,
+0x75,0x5a,0x80,0x80,0x05,0xe4,0xf5,0x59,0xf5,0x5a,0xe5,0x5e,0xc3,0x13,0x90,0xfd,
+0x10,0xf0,0x74,0x20,0x25,0x5b,0xf5,0x5b,0xad,0x5a,0xe5,0x5b,0x2d,0xff,0x24,0x01,
+0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x90,0x9e,0x6d,0xf0,0x74,0x02,0x2f,0xf5,
+0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0xfe,0xe5,0x5b,0x2d,0x24,0x03,0xf5,0x82,0xe4,
+0x34,0xfc,0xf5,0x83,0xe0,0x24,0x00,0xff,0xe4,0x3e,0x90,0x9e,0x6e,0xf0,0xa3,0xef,
+0xf0,0x7f,0x04,0xe5,0x5b,0x25,0x5a,0x2f,0x24,0x00,0xf5,0x82,0xe4,0x34,0xfc,0xf5,
+0x83,0xe0,0xfe,0x74,0x6c,0x2f,0xf5,0x82,0xe4,0x34,0x9e,0xf5,0x83,0xee,0xf0,0x0f,
+0xbf,0x08,0xe0,0x91,0x0e,0xef,0x70,0x3f,0x90,0x01,0xc3,0xe0,0x60,0x25,0xc3,0xe5,
+0x60,0x94,0xe8,0xe5,0x5f,0x94,0x03,0x40,0x09,0x90,0x01,0xc6,0xe0,0x44,0x10,0xf0,
+0x80,0x63,0x05,0x60,0xe5,0x60,0x70,0x02,0x05,0x5f,0x7f,0x0a,0x7e,0x00,0x12,0x32,
+0x15,0x80,0xd5,0x90,0x01,0xc6,0xe0,0x90,0x01,0xc3,0x30,0xe2,0x05,0x74,0xfe,0xf0,
+0x80,0x43,0x74,0xff,0xf0,0x80,0x3e,0xe5,0x5b,0xb4,0x78,0x23,0xe4,0xf5,0x5b,0x05,
+0x5e,0xe5,0x5a,0x64,0x80,0x45,0x59,0x70,0x06,0xf5,0x59,0xf5,0x5a,0x80,0x06,0x75,
+0x59,0x00,0x75,0x5a,0x80,0xe5,0x5e,0xc3,0x13,0x90,0xfd,0x10,0xf0,0x80,0x06,0x74,
+0x08,0x25,0x5b,0xf5,0x5b,0xe5,0x5d,0x15,0x5d,0x70,0x02,0x15,0x5c,0xe5,0x5d,0x45,
+0x5c,0x60,0x02,0xc1,0x28,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x06,0x34,0x74,0xff,0xf0,
+0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x22,0xe4,0xf5,0x25,0x22,0xe4,0x90,0x9e,0xaa,
+0xf0,0xa3,0xf0,0x90,0x05,0xf8,0xe0,0x70,0x0f,0xa3,0xe0,0x70,0x0b,0xa3,0xe0,0x70,
+0x07,0xa3,0xe0,0x70,0x03,0x7f,0x01,0x22,0xd3,0x90,0x9e,0xab,0xe0,0x94,0xe8,0x90,
+0x9e,0xaa,0xe0,0x94,0x03,0x40,0x03,0x7f,0x00,0x22,0x7f,0x32,0x7e,0x00,0x12,0x32,
+0x15,0x90,0x9e,0xaa,0xe4,0x75,0xf0,0x01,0x12,0x42,0x81,0x80,0xc6,0x90,0x9e,0x77,
+0xe0,0x90,0x9e,0x0f,0xf0,0x22,0xef,0x70,0x03,0x02,0x79,0x1e,0x90,0x9e,0x0f,0xe0,
+0x60,0x03,0x02,0x7c,0xe9,0x90,0x9d,0xfb,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,
+0x08,0x7f,0x8c,0x7e,0x08,0x12,0x2b,0x08,0x90,0x9d,0xa7,0x12,0x43,0x53,0x90,0x80,
+0x96,0x12,0x25,0x08,0x7f,0x44,0x7e,0x08,0x12,0x2b,0x08,0x90,0x9d,0xab,0x12,0x43,
+0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x5c,0x7e,0x08,0x12,0x2b,0x08,0x90,0x9d,
+0xaf,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x6c,0x7e,0x0e,0x12,0x2b,
+0x08,0x90,0x9d,0xb3,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x70,0x7e,
+0x0e,0x12,0x2b,0x08,0x90,0x9d,0xb7,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,
+0x7f,0x74,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xbb,0x12,0x43,0x53,0x90,0x80,0x96,
+0x12,0x25,0x08,0x7f,0x78,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xbf,0x12,0x43,0x53,
+0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x7c,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xc3,
+0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x80,0x7e,0x0e,0x12,0x2b,0x08,
+0x90,0x9d,0xc7,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x84,0x7e,0x0e,
+0x12,0x2b,0x08,0x90,0x9d,0xcb,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,
+0x88,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xcf,0x12,0x43,0x53,0x90,0x80,0x96,0x12,
+0x25,0x08,0x7f,0x8c,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xd3,0x12,0x43,0x53,0x90,
+0x80,0x96,0x12,0x25,0x08,0x7f,0xd0,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xd7,0x12,
+0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0xd4,0x7e,0x0e,0x12,0x2b,0x08,0x90,
+0x9d,0xdb,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0xd8,0x7e,0x0e,0x12,
+0x2b,0x08,0x90,0x9d,0xdf,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0xdc,
+0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xe3,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,
+0x08,0x7f,0xe0,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xe7,0x12,0x43,0x53,0x90,0x80,
+0x96,0x12,0x25,0x08,0x7f,0xec,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x9d,0xeb,0x12,0x43,
+0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x04,0x7e,0x0c,0x12,0x2b,0x08,0x90,0x9d,
+0xef,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x04,0x7e,0x0d,0x12,0x2b,
+0x08,0x90,0x9d,0xf3,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x0c,0x7e,
+0x09,0x12,0x2b,0x08,0x90,0x9d,0xf7,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,
+0x7f,0x04,0x7e,0x08,0x12,0x2b,0x08,0x90,0x9e,0x0f,0x74,0x01,0xf0,0x22,0x90,0x9e,
+0x0f,0xe0,0x64,0x01,0x60,0x02,0x81,0xe9,0x7f,0x8c,0x7e,0x08,0x12,0x22,0x65,0x90,
+0x9d,0xfb,0x12,0x25,0x08,0x7f,0x44,0x7e,0x08,0x12,0x22,0x65,0x90,0x9d,0xa7,0x12,
+0x25,0x08,0x7f,0x5c,0x7e,0x08,0x12,0x22,0x65,0x90,0x9d,0xab,0x12,0x25,0x08,0x7f,
+0x6c,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xaf,0x12,0x25,0x08,0x7f,0x70,0x7e,0x0e,
+0x12,0x22,0x65,0x90,0x9d,0xb3,0x12,0x25,0x08,0x7f,0x74,0x7e,0x0e,0x12,0x22,0x65,
+0x90,0x9d,0xb7,0x12,0x25,0x08,0x7f,0x78,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xbb,
+0x12,0x25,0x08,0x7f,0x7c,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xbf,0x12,0x25,0x08,
+0x7f,0x80,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xc3,0x12,0x25,0x08,0x7f,0x84,0x7e,
+0x0e,0x12,0x22,0x65,0x90,0x9d,0xc7,0x12,0x25,0x08,0x7f,0x88,0x7e,0x0e,0x12,0x22,
+0x65,0x90,0x9d,0xcb,0x12,0x25,0x08,0x7f,0x8c,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,
+0xcf,0x12,0x25,0x08,0x7f,0xd0,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xd3,0x12,0x25,
+0x08,0x7f,0xd4,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xd7,0x12,0x25,0x08,0x7f,0xd8,
+0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xdb,0x12,0x25,0x08,0x7f,0xdc,0x7e,0x0e,0x12,
+0x22,0x65,0x90,0x9d,0xdf,0x12,0x25,0x08,0x7f,0xe0,0x7e,0x0e,0x12,0x22,0x65,0x90,
+0x9d,0xe3,0x12,0x25,0x08,0x7f,0xec,0x7e,0x0e,0x12,0x22,0x65,0x90,0x9d,0xe7,0x12,
+0x25,0x08,0x7f,0x04,0x7e,0x0c,0x12,0x22,0x65,0x90,0x9d,0xeb,0x12,0x25,0x08,0x7f,
+0x04,0x7e,0x0d,0x12,0x22,0x65,0x90,0x9d,0xef,0x12,0x25,0x08,0x7f,0x0c,0x7e,0x09,
+0x12,0x22,0x65,0x90,0x9d,0xf3,0x12,0x25,0x08,0x7f,0x04,0x7e,0x08,0x12,0x22,0x65,
+0x90,0x9d,0xf7,0x12,0x25,0x08,0x7f,0x8c,0x7e,0x08,0x12,0x22,0x65,0x90,0x9e,0xa4,
+0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0xed,0x44,0xc0,0xfd,0xec,0x90,0x9e,
+0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,
+0x7f,0x8c,0x7e,0x08,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x00,0x01,0x00,
+0x00,0x7f,0x44,0x7e,0x08,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x00,0xdb,
+0x25,0xa4,0x7f,0x5c,0x7e,0x08,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x20,
+0xdb,0x25,0xa4,0x7f,0x6c,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,
+0x20,0xdb,0x25,0xa4,0x7f,0x70,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,
+0x14,0x04,0x1b,0x25,0xa4,0x7f,0x74,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,
+0x25,0x14,0x04,0x1b,0x25,0xa4,0x7f,0x78,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,
+0x12,0x25,0x14,0x04,0x1b,0x25,0xa4,0x7f,0x7c,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,
+0x96,0x12,0x25,0x14,0x04,0x1b,0x25,0xa4,0x7f,0x80,0x7e,0x0e,0x12,0x2b,0x08,0x90,
+0x80,0x96,0x12,0x25,0x14,0x63,0xdb,0x25,0xa4,0x7f,0x84,0x7e,0x0e,0x12,0x2b,0x08,
+0x90,0x80,0x96,0x12,0x25,0x14,0x04,0x1b,0x25,0xa4,0x7f,0x88,0x7e,0x0e,0x12,0x2b,
+0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x20,0xdb,0x25,0xa4,0x7f,0x8c,0x7e,0x0e,0x12,
+0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x20,0xdb,0x25,0xa4,0x7f,0xd0,0x7e,0x0e,
+0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x20,0xdb,0x25,0xa4,0x7f,0xd4,0x7e,
+0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x20,0xdb,0x25,0xa4,0x7f,0xd8,
+0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x00,0x1b,0x25,0xa4,0x7f,
+0xdc,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x00,0x1b,0x25,0xa4,
+0x7f,0xe0,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x24,0xdb,0x25,
+0xa4,0x7f,0xec,0x7e,0x0e,0x12,0x2b,0x08,0x7f,0x04,0x7e,0x0c,0x12,0x22,0x65,0x90,
+0x9e,0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0xe4,0xff,0xec,0x90,0x9e,
+0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0xef,0x44,0x11,0xff,0xec,0x90,
+0x9e,0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,
+0x08,0x7f,0x04,0x7e,0x0c,0x12,0x2b,0x08,0x7f,0x04,0x7e,0x0d,0x12,0x22,0x65,0x90,
+0x9e,0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0xef,0x54,0xf0,0xff,0xec,
+0x90,0x9e,0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0xef,0x44,0x01,0xff,
+0xec,0x90,0x9e,0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0x90,0x80,0x96,
+0x12,0x25,0x08,0x7f,0x04,0x7e,0x0d,0x12,0x2b,0x08,0x7f,0x0c,0x7e,0x09,0x12,0x22,
+0x65,0x90,0x9e,0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0xe4,0xff,0xec,
+0x90,0x9e,0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0xef,0x44,0x11,0xff,
+0xec,0x90,0x9e,0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0x90,0x80,0x96,
+0x12,0x25,0x08,0x7f,0x0c,0x7e,0x09,0x12,0x2b,0x08,0x7f,0x0c,0x7e,0x09,0x12,0x22,
+0x65,0x90,0x9e,0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0xed,0x54,0x0f,
+0xfd,0xec,0x54,0xf0,0xfc,0x90,0x9e,0xa4,0x12,0x25,0x08,0x90,0x9e,0xa4,0x12,0x43,
+0x53,0xed,0x44,0x10,0xfd,0xec,0x44,0x01,0xfc,0x90,0x9e,0xa4,0x12,0x25,0x08,0x90,
+0x9e,0xa4,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x0c,0x7e,0x09,0x12,
+0x2b,0x08,0x7f,0x04,0x7e,0x08,0x12,0x22,0x65,0x90,0x9e,0xa4,0x12,0x25,0x08,0x90,
+0x9e,0xa4,0x12,0x43,0x53,0xef,0x54,0xf0,0xff,0xec,0x90,0x9e,0xa4,0x12,0x25,0x08,
+0x90,0x9e,0xa4,0x12,0x43,0x53,0xef,0x44,0x01,0xff,0xec,0x90,0x9e,0xa4,0x12,0x25,
+0x08,0x90,0x9e,0xa4,0x12,0x43,0x53,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x04,0x7e,
+0x08,0x12,0x2b,0x08,0xe4,0x90,0x9e,0x0f,0xf0,0x22,0x90,0x00,0x02,0x12,0x42,0x20,
+0x90,0x9e,0x1e,0xf0,0xe0,0x60,0x04,0xe0,0xf4,0x70,0x21,0xa2,0xaf,0xe4,0x33,0xf5,
+0x59,0xc2,0xaf,0x90,0x00,0x47,0xe0,0x54,0xfb,0xfd,0x7f,0x47,0x12,0x4a,0xc1,0x7d,
+0x40,0x7f,0x01,0x12,0x31,0x66,0xe5,0x59,0x24,0xff,0x92,0xaf,0x22,0xe4,0xfd,0x7f,
+0x45,0x12,0x4a,0xc1,0x90,0x04,0xfd,0xe4,0xf0,0xa3,0xf0,0x90,0x9e,0x1e,0xf0,0x90,
+0x9e,0x24,0xf0,0x90,0x9e,0x27,0xf0,0x90,0x9e,0x25,0xf0,0x90,0x9e,0x28,0xf0,0x90,
+0x9e,0x26,0xf0,0x90,0x9e,0x29,0xf0,0x90,0x9e,0x10,0x04,0xf0,0xe4,0xa3,0xf0,0xa3,
+0xf0,0xa3,0xf0,0x90,0x9e,0x15,0xf0,0x90,0x9e,0x1a,0xf0,0x90,0x9e,0x1c,0xf0,0x90,
+0x9e,0x2e,0xf0,0x90,0x9e,0x1f,0xf0,0x90,0x9e,0x1b,0xf0,0x90,0x9e,0x14,0xf0,0x90,
+0x00,0x51,0xe0,0x44,0xc0,0xfd,0x7f,0x51,0x02,0x4a,0xc1,0x90,0x9e,0x15,0xe0,0xc3,
+0x94,0x14,0x50,0x05,0xe0,0x04,0xf0,0xc1,0x33,0x90,0x9e,0x15,0xe0,0x64,0x14,0x60,
+0x02,0xc1,0x33,0x90,0x9e,0x24,0xe0,0x70,0x25,0x90,0x9e,0x27,0xe0,0x70,0x1f,0x90,
+0x9e,0x25,0xe0,0x70,0x19,0x90,0x9e,0x28,0xe0,0x70,0x13,0x90,0x9e,0x26,0xe0,0x70,
+0x0d,0x90,0x9e,0x29,0xe0,0x70,0x07,0x90,0x04,0xfd,0xe0,0x54,0xfe,0xf0,0x90,0x9e,
+0x24,0xe0,0x90,0x04,0x44,0xf0,0x90,0x9e,0x25,0xe0,0x90,0x04,0x45,0xf0,0x90,0x9e,
+0x26,0xe0,0x90,0x04,0x46,0xf0,0xa3,0xe4,0xf0,0x90,0x9e,0x27,0xe0,0x90,0x04,0x48,
+0xf0,0x90,0x9e,0x28,0xe0,0x90,0x04,0x49,0xf0,0x90,0x9e,0x29,0xe0,0x90,0x04,0x4a,
+0xf0,0xa3,0xe4,0xf0,0x90,0x9e,0x10,0xe0,0x90,0x04,0x4c,0xf0,0x90,0x9e,0x11,0xe0,
+0x90,0x04,0x4d,0xf0,0x90,0x9e,0x12,0xe0,0x90,0x04,0x4e,0xf0,0x90,0x9e,0x13,0xe0,
+0x90,0x04,0x4f,0xf0,0xe4,0x90,0x9e,0x15,0xf0,0x90,0x9e,0x10,0x04,0xf0,0xe4,0xa3,
+0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x9e,0x24,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,
+0xf0,0xa3,0xf0,0x90,0x05,0x60,0xe0,0x90,0x9e,0x34,0xf0,0x90,0x05,0x61,0xe0,0x90,
+0x9e,0x35,0xf0,0x90,0x05,0x62,0xe0,0x90,0x9e,0x36,0xf0,0x90,0x05,0x63,0xe0,0x90,
+0x9e,0x37,0xf0,0x90,0x9e,0x2d,0xe0,0xff,0x90,0x9e,0x37,0xe0,0xfe,0xd3,0x9f,0x50,
+0x0b,0x90,0x9e,0x2d,0xe0,0xc3,0x9e,0xd3,0x94,0x01,0x40,0x11,0x90,0x9e,0x1b,0xe0,
+0xb4,0x01,0x02,0x80,0x03,0x90,0x9e,0x1f,0xe0,0xff,0x12,0x4e,0xd8,0x22,0x90,0x9e,
+0x2e,0xe0,0x64,0x01,0x60,0x08,0x90,0x9e,0x1c,0xe0,0x60,0x02,0xe1,0x55,0x90,0x9e,
+0x10,0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,0x3b,0x90,0x9e,0x11,0xe0,
+0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,0x28,0x90,0x9e,0x12,0xe0,0xc3,
+0x94,0xff,0x50,0x0a,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x11,0xf0,0x80,0x15,0x90,0x9e,
+0x13,0xe0,0xc3,0x94,0xff,0x50,0x10,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x12,0xf0,0x90,
+0x9e,0x11,0xf0,0x90,0x9e,0x10,0xf0,0x90,0x00,0x44,0xe0,0x54,0x0c,0x60,0x76,0xe0,
+0x30,0xe2,0x32,0x90,0x9e,0x24,0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,
+0x24,0x90,0x9e,0x25,0xe0,0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,0x11,
+0x90,0x9e,0x26,0xe0,0xc3,0x94,0xff,0x50,0x0c,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x25,
+0xf0,0x90,0x9e,0x24,0xf0,0x90,0x00,0x44,0xe0,0x30,0xe3,0x32,0x90,0x9e,0x27,0xe0,
+0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,0x24,0x90,0x9e,0x28,0xe0,0xc3,0x94,
+0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,0x11,0x90,0x9e,0x29,0xe0,0xc3,0x94,0xff,
+0x50,0x0c,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x28,0xf0,0x90,0x9e,0x27,0xf0,0x90,0x04,
+0xfd,0xe0,0x44,0x01,0xf0,0x22,0xf5,0x67,};
+
+// =================== v84 UMC B Cut COMMON 2012-04-13 =====================
+u8 Rtl8192CUFwUMCBCutImgArray[UMCBCutImgArrayLength] = {
+0xc2,0x88,0x02,0x00,0x54,0x00,0x01,0x00,0x04,0x13,0x11,0x08,0x26,0x3d,0x01,0x00,
+0x58,0x97,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x02,0x43,0xba,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x02,0x50,0xa1,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x02,0x57,0x91,0x00,0x00,0x00,0x00,0x00,0xa1,0xe8,0x00,0x00,0x00,
+0x05,0x04,0x03,0x02,0x00,0x03,0x06,0x05,0x04,0x03,0x00,0x04,0x06,0x05,0x04,0x02,
+0x00,0x04,0x08,0x07,0x06,0x04,0x00,0x06,0x0a,0x09,0x08,0x06,0x00,0x08,0x0a,0x09,
+0x08,0x04,0x00,0x08,0x0a,0x09,0x08,0x02,0x00,0x08,0x0a,0x09,0x08,0x00,0x00,0x08,
+0x12,0x11,0x10,0x08,0x00,0x10,0x1a,0x19,0x18,0x10,0x00,0x18,0x22,0x21,0x20,0x18,
+0x00,0x20,0x22,0x21,0x20,0x10,0x00,0x20,0x22,0x21,0x20,0x08,0x00,0x20,0x22,0x21,
+0x1c,0x08,0x00,0x20,0x22,0x21,0x14,0x08,0x00,0x20,0x22,0x20,0x18,0x08,0x00,0x20,
+0x31,0x30,0x20,0x10,0x00,0x30,0x31,0x30,0x18,0x00,0x00,0x30,0x31,0x2f,0x10,0x10,
+0x00,0x30,0x31,0x2c,0x10,0x10,0x00,0x30,0x31,0x28,0x10,0x00,0x00,0x30,0x31,0x20,
+0x10,0x00,0x00,0x30,0x31,0x10,0x10,0x00,0x00,0x30,0x04,0x04,0x04,0x05,0x04,0x04,
+0x04,0x05,0x05,0x05,0x06,0x06,0x04,0x04,0x04,0x05,0x05,0x05,0x06,0x06,0x04,0x04,
+0x05,0x05,0x05,0x05,0x06,0x06,0x04,0x04,0x05,0x05,0x05,0x05,0x06,0x07,0x0a,0x0b,
+0x0d,0x10,0x04,0x05,0x05,0x06,0x06,0x09,0x0c,0x11,0x08,0x08,0x09,0x09,0x0a,0x0c,
+0x10,0x11,0x04,0x04,0x04,0x05,0x04,0x04,0x05,0x07,0x07,0x07,0x08,0x0a,0x04,0x04,
+0x04,0x04,0x06,0x0a,0x0b,0x0d,0x05,0x05,0x07,0x07,0x08,0x0b,0x0d,0x0f,0x04,0x04,
+0x04,0x05,0x07,0x07,0x09,0x09,0x0c,0x0e,0x10,0x12,0x04,0x04,0x05,0x05,0x06,0x0a,
+0x11,0x13,0x09,0x09,0x09,0x09,0x0c,0x0e,0x11,0x13,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x24,0x26,0x2a,0x18,0x1a,0x1d,0x1f,0x21,0x27,0x29,0x2a,0x00,0x00,
+0x00,0x1f,0x23,0x28,0x2a,0x2c,0x00,0x04,0x00,0x04,0x00,0x08,0x00,0x10,0x00,0x18,
+0x00,0x24,0x00,0x30,0x00,0x48,0x00,0x60,0x00,0x90,0x00,0xc0,0x00,0xd8,0x00,0x50,
+0x00,0x78,0x00,0xa0,0x00,0xc8,0x01,0x40,0x01,0x90,0x01,0xe0,0x02,0x30,0x01,0x2c,
+0x01,0x40,0x01,0xe0,0x02,0xd0,0x03,0xe8,0x04,0xb0,0x06,0x40,0x07,0xd0,0x00,0x02,
+0x00,0x02,0x00,0x04,0x00,0x08,0x00,0x0c,0x00,0x12,0x00,0x18,0x00,0x24,0x00,0x30,
+0x00,0x48,0x00,0x60,0x00,0x6c,0x00,0x28,0x00,0x3c,0x00,0x50,0x00,0x64,0x00,0xa0,
+0x00,0xc8,0x00,0xf0,0x01,0x18,0x00,0x64,0x00,0xa0,0x00,0xf0,0x01,0x68,0x01,0xf4,
+0x02,0x58,0x03,0x20,0x03,0xe8,0x02,0x02,0x02,0x02,0x02,0x02,0x03,0x03,0x04,0x04,
+0x05,0x07,0x04,0x04,0x07,0x0a,0x0a,0x0c,0x0c,0x12,0x05,0x07,0x07,0x08,0x0b,0x12,
+0x24,0x3c,0x01,0x01,0x01,0x01,0x01,0x02,0x03,0x04,0x05,0x06,0x07,0x08,0x01,0x02,
+0x03,0x04,0x05,0x06,0x07,0x08,0x05,0x06,0x07,0x08,0x09,0x0a,0x0b,0x0c,0x20,0x1e,
+0x1c,0x18,0x10,0x18,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0xbb,0x01,0x0c,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe0,0x22,0x50,
+0x06,0xe9,0x25,0x82,0xf8,0xe6,0x22,0xbb,0xfe,0x06,0xe9,0x25,0x82,0xf8,0xe2,0x22,
+0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe4,0x93,0x22,0xbb,0x01,0x06,
+0x89,0x82,0x8a,0x83,0xf0,0x22,0x50,0x02,0xf7,0x22,0xbb,0xfe,0x01,0xf3,0x22,0xf8,
+0xbb,0x01,0x0d,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe8,0xf0,0x22,
+0x50,0x06,0xe9,0x25,0x82,0xc8,0xf6,0x22,0xbb,0xfe,0x05,0xe9,0x25,0x82,0xc8,0xf2,
+0x22,0xc5,0xf0,0xf8,0xa3,0xe0,0x28,0xf0,0xc5,0xf0,0xf8,0xe5,0x82,0x15,0x82,0x70,
+0x02,0x15,0x83,0xe0,0x38,0xf0,0x22,0xbb,0x01,0x0a,0x89,0x82,0x8a,0x83,0xe0,0xf5,
+0xf0,0xa3,0xe0,0x22,0x50,0x06,0x87,0xf0,0x09,0xe7,0x19,0x22,0xbb,0xfe,0x07,0xe3,
+0xf5,0xf0,0x09,0xe3,0x19,0x22,0x89,0x82,0x8a,0x83,0xe4,0x93,0xf5,0xf0,0x74,0x01,
+0x93,0x22,0xbb,0x01,0x10,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe0,
+0xf5,0xf0,0xa3,0xe0,0x22,0x50,0x09,0xe9,0x25,0x82,0xf8,0x86,0xf0,0x08,0xe6,0x22,
+0xbb,0xfe,0x0a,0xe9,0x25,0x82,0xf8,0xe2,0xf5,0xf0,0x08,0xe2,0x22,0xe5,0x83,0x2a,
+0xf5,0x83,0xe9,0x93,0xf5,0xf0,0xa3,0xe9,0x93,0x22,0xbb,0x01,0x0a,0x89,0x82,0x8a,
+0x83,0xf0,0xe5,0xf0,0xa3,0xf0,0x22,0x50,0x06,0xf7,0x09,0xa7,0xf0,0x19,0x22,0xbb,
+0xfe,0x06,0xf3,0xe5,0xf0,0x09,0xf3,0x19,0x22,0xf8,0xbb,0x01,0x11,0xe5,0x82,0x29,
+0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe8,0xf0,0xe5,0xf0,0xa3,0xf0,0x22,0x50,0x09,
+0xe9,0x25,0x82,0xc8,0xf6,0x08,0xa6,0xf0,0x22,0xbb,0xfe,0x09,0xe9,0x25,0x82,0xc8,
+0xf2,0xe5,0xf0,0x08,0xf2,0x22,0xef,0x4b,0xff,0xee,0x4a,0xfe,0xed,0x49,0xfd,0xec,
+0x48,0xfc,0x22,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,0xfe,0xa3,0xe0,0xff,0x22,0xa4,
+0x25,0x82,0xf5,0x82,0xe5,0xf0,0x35,0x83,0xf5,0x83,0x22,0xe0,0xfb,0xa3,0xe0,0xfa,
+0xa3,0xe0,0xf9,0x22,0xf8,0xe0,0xfb,0xa3,0xa3,0xe0,0xf9,0x25,0xf0,0xf0,0xe5,0x82,
+0x15,0x82,0x70,0x02,0x15,0x83,0xe0,0xfa,0x38,0xf0,0x22,0xeb,0xf0,0xa3,0xea,0xf0,
+0xa3,0xe9,0xf0,0x22,0xd0,0x83,0xd0,0x82,0xf8,0xe4,0x93,0x70,0x12,0x74,0x01,0x93,
+0x70,0x0d,0xa3,0xa3,0x93,0xf8,0x74,0x01,0x93,0xf5,0x82,0x88,0x83,0xe4,0x73,0x74,
+0x02,0x93,0x68,0x60,0xef,0xa3,0xa3,0xa3,0x80,0xdf,0x02,0x43,0xf8,0x02,0x48,0x29,
+0xe4,0x93,0xa3,0xf8,0xe4,0x93,0xa3,0x40,0x03,0xf6,0x80,0x01,0xf2,0x08,0xdf,0xf4,
+0x80,0x29,0xe4,0x93,0xa3,0xf8,0x54,0x07,0x24,0x0c,0xc8,0xc3,0x33,0xc4,0x54,0x0f,
+0x44,0x20,0xc8,0x83,0x40,0x04,0xf4,0x56,0x80,0x01,0x46,0xf6,0xdf,0xe4,0x80,0x0b,
+0x01,0x02,0x04,0x08,0x10,0x20,0x40,0x80,0x90,0x44,0x3d,0xe4,0x7e,0x01,0x93,0x60,
+0xbc,0xa3,0xff,0x54,0x3f,0x30,0xe5,0x09,0x54,0x1f,0xfe,0xe4,0x93,0xa3,0x60,0x01,
+0x0e,0xcf,0x54,0xc0,0x25,0xe0,0x60,0xa8,0x40,0xb8,0xe4,0x93,0xa3,0xfa,0xe4,0x93,
+0xa3,0xf8,0xe4,0x93,0xa3,0xc8,0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,0xf0,0xa3,0xc8,
+0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,0xdf,0xe9,0xde,0xe7,0x80,0xbe,0x41,0x9e,0x77,
+0x00,0x41,0x9e,0xae,0x00,0x41,0x9e,0x54,0x80,0x41,0x9e,0xb0,0x00,0x00,0xf0,0x90,
+0x9e,0x5d,0xe0,0x90,0x9e,0x86,0xf0,0xe4,0xfb,0xfd,0x7f,0x54,0x7e,0x01,0xd3,0x10,
+0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x85,0xe0,0xfb,0xa3,0xe0,0xf5,0x44,0xe4,0xf5,
+0x45,0x12,0x35,0xab,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x01,0x5f,0xe4,0xf0,0x90,0x01,
+0x3c,0x74,0x08,0xf0,0xe4,0x90,0x9e,0x85,0xf0,0x90,0x9e,0x5b,0xe0,0x90,0x9e,0x86,
+0xf0,0xe4,0xfb,0xfd,0x7f,0x5c,0x7e,0x01,0x91,0x5e,0x90,0x01,0x5f,0x74,0x05,0xf0,
+0x90,0x06,0x92,0x74,0x02,0xf0,0x90,0x9e,0x63,0x14,0xf0,0xe5,0x61,0x54,0x0f,0xc3,
+0x94,0x0c,0x50,0x03,0x12,0x54,0xe3,0x22,0x8f,0x82,0x8e,0x83,0xa3,0xa3,0xa3,0xe4,
+0xf0,0x22,0xe4,0xf5,0x65,0x7f,0x60,0x7e,0x01,0x80,0xed,0x7d,0x01,0xaf,0x62,0x02,
+0x54,0xe7,0xb1,0xb0,0xbf,0x01,0x12,0x90,0x9e,0x79,0xe0,0xff,0xe4,0xfd,0xf1,0x79,
+0x12,0x5f,0xf7,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0xb1,0xb0,0xbf,0x01,0x0f,0x90,
+0x02,0x09,0xe0,0xff,0x7d,0x01,0xf1,0x79,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0x22,
+0x22,0x22,0x00,0x02,0x45,0x03,0x02,0x45,0x06,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
+0x8b,0x20,0x8a,0x21,0x89,0x22,0x90,0x9e,0x87,0x71,0x8b,0xab,0x23,0xaa,0x24,0xa9,
+0x25,0x90,0x9e,0x8a,0x71,0x8b,0xaf,0x26,0x15,0x26,0xef,0x60,0x1b,0x90,0x9e,0x8a,
+0xe4,0x75,0xf0,0x01,0x71,0x74,0x12,0x29,0xd9,0xff,0x90,0x9e,0x87,0xe4,0x75,0xf0,
+0x01,0x71,0x74,0xef,0x51,0x4d,0x80,0xde,0xab,0x20,0xaa,0x21,0xa9,0x22,0xd0,0xd0,
+0x92,0xaf,0x22,0x90,0x9e,0x11,0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0x90,0x06,0xa9,
+0xe0,0x90,0x9e,0x10,0xf0,0xe0,0x54,0xc0,0x70,0x08,0x53,0x64,0xfe,0x53,0x64,0xfd,
+0x91,0xcb,0x90,0x9e,0x10,0xe0,0x30,0xe6,0x13,0x43,0x64,0x01,0x90,0x9e,0x66,0xe0,
+0x64,0x02,0x60,0x04,0x91,0xd2,0x80,0x07,0x91,0x79,0x80,0x03,0x53,0x64,0xfe,0x90,
+0x9e,0x10,0xe0,0x30,0xe7,0x16,0x43,0x64,0x02,0xe4,0x90,0x9e,0x85,0x91,0x4e,0x90,
+0x01,0x57,0x74,0x05,0xf0,0x90,0x9e,0x67,0x74,0x01,0xf0,0x22,0x53,0x64,0xfd,0x22,
+0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x01,0xc4,0x74,0xb0,0xf0,0x74,0x45,0xa3,
+0xf0,0x90,0x04,0x1d,0xe0,0x60,0x1a,0x90,0x05,0x22,0xe0,0x54,0x90,0x60,0x07,0x90,
+0x01,0xc6,0xe0,0x44,0x40,0xf0,0x90,0x01,0xc7,0xe0,0x30,0xe1,0xe4,0x7f,0x00,0x80,
+0x02,0x7f,0x01,0xd0,0xd0,0x92,0xaf,0x22,0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,
+0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,
+0x05,0xc0,0x06,0xc0,0x07,0x75,0x13,0x00,0x90,0x01,0xc4,0x74,0xe8,0xf0,0x74,0x45,
+0xa3,0xf0,0x53,0x91,0xdf,0x90,0x01,0x3c,0xe0,0x55,0x30,0xf5,0x34,0xa3,0xe0,0x55,
+0x31,0xf5,0x35,0xa3,0xe0,0x55,0x32,0xf5,0x36,0xa3,0xe0,0x55,0x33,0xf5,0x37,0xe5,
+0x34,0x30,0xe0,0x06,0x90,0x01,0x3c,0x74,0x01,0xf0,0xe5,0x34,0x30,0xe1,0x09,0x90,
+0x01,0x3c,0x74,0x02,0xf0,0x12,0x61,0xc9,0xe5,0x34,0x30,0xe2,0x38,0x90,0x01,0x3c,
+0x74,0x04,0xf0,0x90,0x06,0x92,0xe0,0x30,0xe0,0x24,0x90,0x9e,0x85,0xe4,0xf0,0x90,
+0x9e,0x5b,0xe0,0x90,0x9e,0x86,0xf0,0xe4,0xfb,0xfd,0x7f,0x58,0x7e,0x01,0x91,0x5e,
+0x90,0x01,0x5b,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x01,0xf0,0x80,0x07,0x90,0x9e,
+0x64,0xe4,0xf0,0x91,0xcb,0xe5,0x34,0x30,0xe3,0x38,0x90,0x01,0x3c,0x74,0x08,0xf0,
+0x90,0x06,0x92,0xe0,0x30,0xe1,0x24,0x90,0x9e,0x85,0xe4,0xf0,0x90,0x9e,0x5b,0xe0,
+0x90,0x9e,0x86,0xf0,0xe4,0xfb,0xfd,0x7f,0x5c,0x7e,0x01,0x91,0x5e,0x90,0x01,0x5f,
+0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x02,0xf0,0x80,0x07,0x90,0x9e,0x63,0xe4,0xf0,
+0x91,0xcb,0xe5,0x34,0x30,0xe4,0x09,0x90,0x01,0x3c,0x74,0x10,0xf0,0x12,0x4b,0xfb,
+0xe5,0x34,0x30,0xe5,0x09,0x90,0x01,0x3c,0x74,0x20,0xf0,0x12,0x4c,0x3d,0xe5,0x35,
+0x30,0xe0,0x44,0x90,0x01,0x3d,0x74,0x01,0xf0,0x90,0x01,0x2f,0xe0,0x44,0x7f,0xf0,
+0x90,0x00,0x83,0xe0,0x54,0x0f,0xf5,0x13,0xb4,0x01,0x02,0x80,0x1c,0xe5,0x13,0xb4,
+0x02,0x05,0x90,0x00,0x83,0x80,0x12,0xe5,0x13,0xb4,0x04,0x05,0x90,0x00,0x83,0x80,
+0x08,0xe5,0x13,0xb4,0x0c,0x06,0x90,0x00,0x83,0xe0,0xf5,0x62,0x90,0x01,0xbb,0xe5,
+0x62,0xf0,0x12,0x60,0xc0,0x91,0xcb,0xe5,0x35,0x30,0xe2,0x06,0x90,0x01,0x3d,0x74,
+0x04,0xf0,0xe5,0x35,0x30,0xe4,0x06,0x90,0x01,0x3d,0x74,0x10,0xf0,0xe5,0x36,0x30,
+0xe0,0x06,0x90,0x01,0x3e,0x74,0x01,0xf0,0xe5,0x36,0x30,0xe1,0x06,0x90,0x01,0x3e,
+0x74,0x02,0xf0,0x74,0xe8,0x04,0x90,0x01,0xc4,0xf0,0x74,0x45,0xa3,0xf0,0xd0,0x07,
+0xd0,0x06,0xd0,0x05,0xd0,0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,
+0xd0,0x82,0xd0,0x83,0xd0,0xf0,0xd0,0xe0,0x32,0x90,0x9e,0x98,0xef,0xf0,0xa3,0xed,
+0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xe5,0x63,0x60,0x05,0xe4,0xff,0x12,0x54,0x97,0x90,
+0x9e,0x98,0xe0,0x30,0xe0,0x09,0x90,0x9e,0x9a,0xe4,0xf0,0xa3,0x74,0x80,0xf0,0x90,
+0x9e,0x98,0xe0,0xff,0xc3,0x13,0x90,0xfd,0x10,0xf0,0x90,0x04,0x25,0xef,0xf0,0x90,
+0x9e,0x99,0xe0,0x60,0x1f,0xa3,0xa3,0xe0,0xff,0x24,0x0f,0xf5,0x82,0xe4,0x34,0xfc,
+0xf5,0x83,0xe0,0x44,0x80,0xf0,0x74,0x10,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,
+0xe0,0x44,0x80,0xf0,0x90,0x9e,0x9a,0xa3,0xe0,0xff,0xfd,0x24,0x08,0xf5,0x82,0xe4,
+0x34,0xfc,0xf5,0x83,0xe4,0xf0,0x74,0x09,0x2d,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,
+0xe0,0x54,0xf0,0xf0,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,
+0xf7,0xf0,0x90,0x9e,0x9a,0xe0,0xfe,0xa3,0xe0,0xff,0x22,0x75,0x28,0x33,0xe4,0xf5,
+0x29,0x75,0x2a,0x07,0xf5,0x2b,0x90,0x01,0x30,0xe5,0x28,0xf0,0xa3,0xe5,0x29,0xf0,
+0xa3,0xe5,0x2a,0xf0,0xa3,0xe5,0x2b,0xf0,0x22,0xe4,0x90,0x9e,0x16,0xf0,0xa3,0xf0,
+0x75,0x8e,0x02,0xf1,0xa1,0xf1,0xe9,0x90,0x9e,0x7e,0xef,0xf0,0xf1,0xdd,0x90,0x9e,
+0x80,0xef,0xf0,0xf1,0xf6,0x90,0x9e,0x75,0xee,0xf0,0xa3,0xef,0xf0,0xe4,0xf5,0x57,
+0x12,0x6e,0x77,0xf1,0xd4,0x12,0x60,0x4b,0x12,0x32,0x3d,0xf1,0xc9,0x11,0x0b,0x12,
+0x50,0x0e,0xf1,0xcd,0xf1,0xb1,0x12,0x44,0xff,0xf1,0x45,0x90,0x9e,0x18,0xe5,0xd9,
+0xf0,0x11,0xd0,0xc2,0xaf,0x90,0x00,0x80,0xe0,0x44,0x40,0xf0,0xb1,0x45,0x75,0xe8,
+0x03,0x43,0xa8,0x85,0xd2,0xaf,0x90,0x9e,0x16,0xe0,0x64,0x01,0xf0,0x24,0x29,0x90,
+0x01,0xc4,0xf0,0x74,0x48,0xa3,0xf0,0xe5,0x57,0x30,0xe4,0x0a,0xc2,0xaf,0x53,0x57,
+0xef,0xd2,0xaf,0x12,0x58,0x74,0xe5,0x57,0x30,0xe6,0x17,0xc2,0xaf,0x53,0x57,0xbf,
+0xd2,0xaf,0x12,0x67,0xa1,0x90,0x9e,0x43,0xe0,0xff,0x60,0x03,0xb4,0x01,0x03,0x12,
+0x7b,0x49,0x90,0x9e,0x43,0xe0,0x70,0x03,0x12,0x7c,0x4c,0x12,0x73,0x85,0x80,0xb6,
+0x90,0x01,0x3c,0x74,0xff,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x01,0x34,0xf0,0xa3,0xf0,
+0xa3,0xf0,0xa3,0xf0,0xfd,0x7f,0x54,0x31,0x05,0x7d,0xff,0x7f,0x55,0x31,0x05,0x7d,
+0xff,0x7f,0x56,0x31,0x05,0x7d,0xff,0x7f,0x57,0x80,0x0a,0xf0,0x90,0x00,0x45,0xe0,
+0x54,0xfe,0xfd,0x7f,0x45,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x8f,0x82,0x75,0x83,
+0x00,0xed,0xf0,0xb1,0x45,0xd0,0xd0,0x92,0xaf,0x22,0xef,0x14,0x60,0x30,0x14,0x60,
+0x66,0x24,0x02,0x60,0x02,0x21,0xc1,0x90,0x9e,0x3f,0x74,0x02,0xf0,0x90,0x00,0x48,
+0xe0,0x44,0x0c,0xfd,0x7f,0x48,0x31,0x05,0x90,0x00,0x47,0xe0,0x44,0x08,0xfd,0x7f,
+0x47,0x31,0x05,0x90,0x00,0x45,0xe0,0x44,0x10,0xfd,0x7f,0x45,0x80,0x71,0xe4,0x90,
+0x9e,0x3f,0xf0,0x90,0x9e,0x3b,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
+0x80,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x00,0x45,0xe0,0x44,0xef,0xfd,0x7f,0x45,0x31,
+0x05,0x90,0x00,0x45,0xe0,0x54,0xef,0xfd,0x7f,0x45,0x31,0x05,0x90,0x00,0x46,0xe0,
+0x44,0x10,0xfd,0x7f,0x46,0x80,0x38,0x90,0x9e,0x3f,0x74,0x01,0xf0,0x90,0x9e,0x45,
+0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,
+0x90,0x00,0x45,0xe0,0x44,0x20,0xfd,0x7f,0x45,0x31,0x05,0x90,0x00,0x45,0xe0,0x44,
+0x10,0xfd,0x7f,0x45,0x31,0x05,0x90,0x00,0x46,0xe0,0x44,0x10,0xfd,0x7f,0x46,0x31,
+0x05,0x22,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x9e,0x41,0xf0,0x90,0x00,0x01,0x12,
+0x42,0x20,0x25,0xe0,0x25,0xe0,0x90,0x9e,0x40,0xf0,0x12,0x29,0xd9,0x25,0xe0,0x25,
+0xe0,0x90,0x9e,0x44,0xf0,0x90,0x05,0x60,0xe0,0x90,0x9e,0x4f,0xf0,0x90,0x05,0x61,
+0xe0,0x90,0x9e,0x50,0xf0,0x90,0x05,0x62,0xe0,0x90,0x9e,0x51,0xf0,0x90,0x05,0x63,
+0xe0,0x90,0x9e,0x52,0xf0,0xa2,0xaf,0xe4,0x33,0x90,0x9e,0x24,0xf0,0xc2,0xaf,0x90,
+0x9e,0x40,0xe0,0xff,0x91,0xf0,0x90,0x9e,0x24,0xe0,0x24,0xff,0x92,0xaf,0x90,0x9e,
+0x41,0xe0,0x70,0x02,0x41,0xc8,0x90,0x9e,0x40,0xe0,0x70,0x02,0x41,0xc8,0x90,0x9e,
+0x44,0xe0,0x70,0x02,0x41,0xc8,0xa2,0xaf,0xe4,0x33,0x90,0x9e,0x24,0xf0,0xc2,0xaf,
+0x90,0x9e,0x53,0x74,0x01,0xf0,0x90,0x9e,0x24,0xe0,0x24,0xff,0x92,0xaf,0x11,0xfc,
+0x90,0x00,0x46,0xe0,0x44,0x01,0xfd,0x7f,0x46,0x31,0x05,0x90,0x9e,0x39,0xe0,0x60,
+0x15,0x90,0x9e,0x45,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,
+0x08,0x12,0x2f,0xd9,0x80,0x06,0x90,0x05,0x22,0x74,0x7f,0xf0,0x90,0x00,0x45,0xe0,
+0x54,0xef,0xfd,0x7f,0x45,0x31,0x05,0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,0x9e,
+0x4f,0xe0,0x90,0x05,0x84,0xf0,0x90,0x9e,0x50,0xe0,0x90,0x05,0x85,0xf0,0x90,0x9e,
+0x51,0xe0,0x90,0x05,0x86,0xf0,0x90,0x9e,0x52,0xe0,0x90,0x05,0x87,0xf0,0xa2,0xaf,
+0xe4,0x33,0x90,0x9e,0x24,0xf0,0xc2,0xaf,0x90,0x01,0x3c,0xe0,0x44,0x20,0xf0,0x7d,
+0x20,0xe4,0xff,0x12,0x37,0x00,0x80,0x2b,0x90,0x9e,0x41,0xe0,0x70,0x2d,0x90,0x9e,
+0x53,0x11,0xfb,0x90,0x00,0x46,0xe0,0x54,0xfe,0xfd,0x7f,0x46,0x31,0x05,0x90,0x05,
+0x22,0xe4,0xf0,0xa2,0xaf,0x33,0x90,0x9e,0x24,0xf0,0xc2,0xaf,0x7d,0x20,0xe4,0xff,
+0x12,0x36,0x92,0x90,0x9e,0x24,0xe0,0x24,0xff,0x92,0xaf,0x22,0x8b,0x14,0x8a,0x15,
+0x89,0x16,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x9e,0x42,0xf0,0xe0,0x30,0xe0,0x4b,
+0x90,0x9e,0x39,0x74,0x01,0xf0,0x7f,0x80,0x7e,0x08,0x12,0x27,0xde,0x90,0x9e,0x3b,
+0x12,0x2a,0x7f,0xab,0x14,0xaa,0x15,0xa9,0x16,0x90,0x00,0x01,0x12,0x42,0x20,0xff,
+0xe4,0xfc,0xfd,0xfe,0x78,0x1a,0x12,0x2a,0x6c,0xa8,0x04,0xa9,0x05,0xaa,0x06,0xab,
+0x07,0x90,0x9e,0x3b,0x12,0x43,0x53,0xec,0x54,0x03,0xfc,0x12,0x43,0x46,0x90,0x9e,
+0x45,0x12,0x2a,0x7f,0x90,0x05,0x22,0xe4,0xf0,0x80,0x2d,0xe4,0x90,0x9e,0x39,0xf0,
+0x7f,0x80,0x7e,0x08,0x12,0x27,0xde,0xec,0x54,0x03,0xfc,0xec,0x44,0xc0,0xfc,0x90,
+0x9e,0x3b,0x12,0x2a,0x7f,0x90,0x9e,0x3b,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,
+0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9e,0x42,0xe0,0x30,0xe1,0x19,0x7d,
+0x0c,0x7f,0x47,0x31,0x05,0x90,0x00,0x48,0xe0,0x44,0x0c,0xfd,0x7f,0x48,0x31,0x05,
+0x90,0x00,0x46,0xe0,0x44,0x10,0x80,0x1c,0x90,0x00,0x47,0xe0,0x54,0xf3,0xfd,0x7f,
+0x47,0x31,0x05,0x90,0x00,0x48,0xe0,0x54,0xf3,0xfd,0x7f,0x48,0x31,0x05,0x90,0x00,
+0x46,0xe0,0x54,0xef,0xfd,0x7f,0x46,0x31,0x05,0xe4,0x90,0x9e,0x3f,0xf0,0x22,0x90,
+0x01,0x30,0xe4,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x01,0x38,0xf0,0xa3,0xf0,
+0xa3,0xf0,0xa3,0xf0,0xfd,0x7f,0x50,0x31,0x05,0xe4,0xfd,0x7f,0x51,0x31,0x05,0xe4,
+0xfd,0x7f,0x52,0x31,0x05,0xe4,0xfd,0x7f,0x53,0x21,0x05,0xe5,0x65,0x64,0x01,0x70,
+0x3b,0xd1,0x85,0xbf,0x01,0x04,0x7f,0x01,0xd1,0x79,0x90,0x00,0x46,0xe0,0x44,0x04,
+0xfd,0x7f,0x46,0x31,0x05,0x90,0x00,0x44,0xe0,0x54,0xfb,0xfd,0x7f,0x44,0x31,0x05,
+0x90,0x00,0x46,0xe0,0x54,0xfb,0xfd,0x7f,0x46,0x31,0x05,0x7f,0x02,0xd1,0xa1,0x8f,
+0x69,0x90,0x01,0xc9,0xe5,0x69,0xf0,0xb4,0x01,0x02,0xd1,0x19,0x22,0x90,0x9e,0x41,
+0xe0,0x64,0x01,0x60,0x02,0x81,0xef,0x90,0x00,0x46,0xe0,0x44,0x01,0xfd,0x7f,0x46,
+0x31,0x05,0x90,0x9e,0x53,0xe0,0x70,0x31,0x90,0x9e,0x39,0xe0,0x60,0x15,0x90,0x9e,
+0x45,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,
+0xd9,0x80,0x06,0x90,0x05,0x22,0x74,0x7f,0xf0,0x90,0x9e,0x40,0xe0,0xff,0x91,0xf0,
+0x90,0x9e,0x53,0x74,0x01,0x11,0xfb,0x80,0x3f,0x90,0x9e,0x53,0xe0,0x64,0x01,0x70,
+0x37,0x90,0x9e,0x44,0xe0,0xff,0x91,0xf0,0xe4,0x90,0x9e,0x53,0xf0,0x90,0x00,0x45,
+0xe0,0x44,0x01,0xfd,0x7f,0x45,0x31,0x05,0x90,0x9e,0x39,0xe0,0x60,0x15,0x90,0x9e,
+0x3b,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,
+0xd9,0x80,0x05,0x90,0x05,0x22,0xe4,0xf0,0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,
+0x9e,0x4f,0xe0,0x90,0x05,0x84,0xf0,0x90,0x9e,0x50,0xe0,0x90,0x05,0x85,0xf0,0x90,
+0x9e,0x51,0xe0,0x90,0x05,0x86,0xf0,0x90,0x9e,0x52,0xe0,0x90,0x05,0x87,0xf0,0x22,
+0x90,0x05,0x60,0xe0,0x90,0x9e,0x4f,0xf0,0x90,0x05,0x61,0xe0,0x90,0x9e,0x50,0xf0,
+0x90,0x05,0x62,0xe0,0x90,0x9e,0x51,0xf0,0x90,0x05,0x63,0xe0,0x90,0x9e,0x52,0xf0,
+0xc3,0x74,0xff,0x9f,0xfe,0x90,0x9e,0x50,0xe0,0xd3,0x9e,0x40,0x1e,0xe0,0x2f,0xf0,
+0xa3,0xe0,0xb4,0xff,0x0f,0xe4,0xf0,0xa3,0xe0,0xb4,0xff,0x03,0xe4,0xf0,0x22,0x90,
+0x9e,0x52,0x80,0x03,0x90,0x9e,0x51,0xe0,0x04,0xf0,0x22,0x90,0x9e,0x50,0xe0,0x2f,
+0xf0,0x22,0xe0,0x5f,0xf0,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x7f,0x10,0xdf,0xfe,
+0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x2a,0xed,
+0xf0,0x90,0x9e,0x29,0xef,0xf0,0xd3,0x94,0x07,0x50,0x4e,0xa3,0xe0,0x70,0x1a,0x90,
+0x9e,0x29,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,
+0xff,0x90,0x00,0x47,0xe0,0x5f,0xf0,0x80,0x17,0x90,0x9e,0x29,0xe0,0xff,0x74,0x01,
+0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x47,0xe0,0x4f,0xf0,
+0xb1,0x45,0x90,0x9e,0x29,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,
+0xd8,0xfc,0xf4,0xff,0x90,0x00,0x46,0x80,0x59,0x90,0x9e,0x29,0xe0,0x24,0xf8,0xf0,
+0xa3,0xe0,0x70,0x1d,0x90,0x9e,0x29,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,
+0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0x80,
+0x1a,0x90,0x9e,0x29,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,
+0xfc,0xc4,0x54,0xf0,0xff,0x90,0x00,0x43,0xe0,0x4f,0xf0,0xb1,0x45,0x90,0x9e,0x29,
+0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,
+0x00,0x43,0xb1,0x42,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x00,0x49,0xe0,0x90,0x9e,0xb1,
+0xf0,0xe0,0x54,0x0f,0xf0,0x44,0xf0,0xfd,0x7f,0x49,0x31,0x05,0x90,0x9e,0xb1,0xe0,
+0x44,0xb0,0xfd,0x7f,0x49,0x21,0x05,0x90,0x9e,0x27,0xee,0xf0,0xa3,0xef,0xf0,0x75,
+0x65,0x01,0x8e,0x66,0xf5,0x67,0xe4,0xfd,0x7f,0x0b,0xb1,0x55,0xe4,0xfd,0x7f,0x02,
+0xb1,0x55,0xd1,0x85,0xe4,0xff,0xd1,0x79,0xe4,0xf5,0x69,0x90,0x01,0xc9,0xe5,0x69,
+0xf0,0x90,0x9e,0x27,0xe0,0xfc,0xa3,0xe0,0xfd,0xec,0xfb,0x8d,0x44,0xe4,0xf5,0x45,
+0x7d,0x01,0x7f,0x60,0x7e,0x01,0x02,0x35,0xab,0x90,0x01,0xca,0xe5,0x68,0xf0,0xef,
+0x60,0x02,0xd1,0x19,0x22,0x7f,0x0b,0xd1,0xa1,0xef,0x65,0x68,0x60,0x10,0xe5,0x68,
+0xb4,0x01,0x05,0xe4,0xf5,0x68,0x80,0x03,0x75,0x68,0x01,0x7f,0x01,0x22,0x7f,0x00,
+0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0xb2,0xef,0xf0,0xd3,0x94,0x07,
+0x50,0x43,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,
+0xff,0x90,0x00,0x46,0xb1,0x42,0x90,0x9e,0xb2,0xe0,0xfd,0x74,0x01,0x7e,0x00,0xa8,
+0x05,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x00,0x44,0xe0,
+0xfb,0xe4,0xfe,0xef,0x5b,0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,0x13,0xce,0x13,
+0xd8,0xf8,0xff,0x80,0x4b,0x90,0x9e,0xb2,0xe0,0x24,0xf8,0xf0,0xe0,0xff,0x74,0x01,
+0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,
+0xf0,0xb1,0x45,0x90,0x9e,0xb2,0xe0,0xfd,0x74,0x01,0x7e,0x00,0xa8,0x05,0x08,0x80,
+0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x00,0x42,0xe0,0xfb,0xe4,0xfe,
+0xef,0x5b,0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,0x13,0xce,0x13,0xd8,0xf8,0xff,
+0xd0,0xd0,0x92,0xaf,0x22,0xe4,0xfd,0x7f,0x45,0x31,0x05,0x90,0x04,0xfd,0xe4,0xf0,
+0xa3,0xf0,0x90,0x9e,0x43,0xf0,0x90,0x9e,0x49,0xf0,0x90,0x9e,0x4c,0xf0,0x90,0x9e,
+0x4a,0xf0,0x90,0x9e,0x4d,0xf0,0x90,0x9e,0x4b,0xf0,0x90,0x9e,0x4e,0xf0,0x90,0x9e,
+0x35,0x04,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x9e,0x3a,0xf0,0x90,0x9e,
+0x3f,0xf0,0x90,0x9e,0x41,0xf0,0x90,0x9e,0x53,0xf0,0x90,0x9e,0x44,0xf0,0x90,0x9e,
+0x40,0xf0,0x90,0x9e,0x39,0xf0,0x90,0x00,0x51,0xe0,0x44,0xc0,0xfd,0x7f,0x51,0x21,
+0x05,0xe4,0x90,0x9e,0x7d,0xf0,0x90,0x00,0x80,0xe0,0x44,0x80,0xfd,0x7f,0x80,0x21,
+0x05,0x75,0x30,0x1f,0x75,0x31,0x01,0xe4,0xf5,0x32,0x90,0x01,0x38,0xe5,0x30,0xf0,
+0xa3,0xe5,0x31,0xf0,0xa3,0xe5,0x32,0xf0,0x22,0xe4,0xf5,0x68,0x22,0x90,0x01,0x64,
+0x74,0xa0,0xf0,0x22,0x90,0x9e,0x80,0xe0,0x90,0x9e,0x0f,0xf0,0x22,0x90,0x00,0xf3,
+0xe0,0x7f,0x00,0x30,0xe3,0x02,0x7f,0x01,0x22,0x90,0x00,0x02,0xe0,0x54,0xe0,0x7f,
+0x01,0x60,0x02,0x7f,0x00,0x22,0x90,0x9e,0x80,0xe0,0xb4,0x01,0x0c,0x90,0x00,0xf2,
+0xe0,0x30,0xe7,0x05,0x7e,0xfd,0x7f,0x33,0x22,0x7e,0xfd,0x7f,0x2f,0x22,0x90,0x00,
+0xf3,0xe0,0x30,0xe2,0x0d,0x90,0x05,0x41,0x74,0x10,0xf0,0x90,0x05,0x5a,0xf0,0xa3,
+0xe4,0xf0,0x22,0x90,0x01,0x02,0xe0,0x54,0x03,0xff,0xe0,0x54,0x0c,0x13,0x13,0x54,
+0x3f,0xfe,0xef,0x64,0x01,0x60,0x04,0xef,0xb4,0x03,0x10,0x90,0x9e,0x10,0x74,0x01,
+0xf0,0xa3,0x74,0x37,0xf0,0xa3,0x74,0x01,0xf0,0x80,0x1a,0xee,0x64,0x01,0x60,0x07,
+0xaf,0x06,0xee,0x64,0x03,0x70,0x49,0x90,0x9e,0x10,0x74,0x01,0xf0,0xa3,0x74,0x3d,
+0xf0,0xa3,0x74,0x40,0xf0,0x90,0x9e,0x10,0xe0,0xfe,0xa3,0xe0,0xff,0xf5,0x82,0x8e,
+0x83,0xe0,0xfd,0x90,0x9e,0x12,0xe0,0xfc,0xed,0x5c,0x60,0x0c,0x8f,0x82,0x8e,0x83,
+0xec,0xf0,0xe4,0x90,0x9e,0x77,0xf0,0x22,0x90,0x9e,0x77,0xe0,0x04,0xf0,0xe0,0xc3,
+0x94,0x0a,0x40,0x0c,0xe4,0xf0,0x90,0x04,0x19,0xe0,0x30,0xe0,0x03,0x12,0x44,0xea,
+0x22,0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,
+0xc0,0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,0x01,
+0xc4,0x74,0xa1,0xf0,0x74,0x50,0xa3,0xf0,0x90,0x01,0x34,0xe0,0x55,0x28,0xf5,0x2c,
+0xa3,0xe0,0x55,0x29,0xf5,0x2d,0xa3,0xe0,0x55,0x2a,0xf5,0x2e,0xa3,0xe0,0x55,0x2b,
+0xf5,0x2f,0xe5,0x2c,0x20,0xe0,0x02,0x41,0x46,0x90,0x01,0x34,0x74,0x01,0xf0,0x85,
+0xd1,0x4d,0x85,0xd2,0x4e,0x85,0xd3,0x4f,0x85,0xd4,0x50,0x85,0xd5,0x51,0x85,0xd6,
+0x52,0x85,0xd7,0x53,0x85,0xd9,0x54,0xe5,0x54,0x54,0x40,0xc3,0x13,0xff,0xe5,0x53,
+0x54,0x20,0x6f,0x70,0x02,0x21,0xf5,0xe5,0x54,0x30,0xe5,0x02,0x21,0xf5,0xe5,0x52,
+0x54,0x3f,0xf5,0x08,0xe5,0x4d,0x54,0x3f,0xf5,0x09,0xe5,0x51,0x54,0x1f,0xff,0xe5,
+0x08,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0x8f,0xf0,0x12,
+0x42,0x81,0xe5,0x53,0x54,0x1f,0xff,0xe5,0x08,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,
+0x34,0x93,0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x09,0xd3,0x94,0x04,0x40,
+0x03,0x75,0x09,0x04,0x75,0xf0,0x0a,0xe5,0x08,0x90,0x90,0x00,0x12,0x43,0x5f,0x75,
+0xf0,0x02,0xe5,0x09,0x12,0x43,0x5f,0xe0,0xfe,0xa3,0xe0,0xff,0xe5,0x53,0x54,0x1f,
+0x2f,0xff,0xe4,0x3e,0xfe,0x75,0xf0,0x0a,0xe5,0x08,0x90,0x90,0x00,0x12,0x43,0x5f,
+0x75,0xf0,0x02,0xe5,0x09,0x12,0x43,0x5f,0xee,0xf0,0xa3,0xef,0xf0,0xe5,0x54,0x20,
+0xe6,0x24,0xe5,0x53,0x54,0x1f,0xff,0xe5,0x08,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,
+0x34,0x98,0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x4f,0x30,0xe7,0x36,0xaf,
+0x08,0x12,0x63,0x51,0x80,0x2f,0xe5,0x53,0x54,0x1f,0xff,0xe5,0x08,0x25,0xe0,0x24,
+0x44,0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0x8f,0xf0,0x12,0x42,0x81,0xe5,0x4f,
+0x30,0xe7,0x12,0xe5,0x4f,0x54,0x7f,0xfd,0xe5,0x53,0x54,0x1f,0xf5,0x0d,0xab,0x09,
+0xaf,0x08,0x12,0x62,0xee,0xe5,0x63,0x14,0x24,0xfd,0x50,0x02,0x80,0x48,0x90,0x9e,
+0x66,0xe0,0x60,0x3a,0x90,0x01,0x5b,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x04,0xf0,0x71,
+0xc3,0xef,0x64,0x01,0x70,0x30,0x90,0x9e,0x85,0xf0,0x90,0x9e,0x5b,0xe0,0x90,0x9e,
+0x86,0xf0,0xe4,0xfb,0xfd,0x7f,0x58,0x7e,0x01,0x12,0x44,0x5e,0x90,0x01,0x5b,0x74,
+0x05,0xf0,0x90,0x06,0x92,0x74,0x01,0xf0,0x90,0x9e,0x64,0xf0,0x80,0x08,0x71,0xc3,
+0xbf,0x01,0x03,0x12,0x44,0xcb,0xe5,0x2c,0x30,0xe1,0x20,0x90,0x01,0x34,0x74,0x02,
+0xf0,0x85,0xd1,0x58,0x85,0xd2,0x59,0x85,0xd3,0x5a,0x85,0xd4,0x5b,0x85,0xd5,0x5c,
+0x85,0xd6,0x5d,0x85,0xd7,0x5e,0x85,0xd9,0x5f,0x71,0xd2,0xe5,0x2c,0x30,0xe3,0x06,
+0x90,0x01,0x34,0x74,0x08,0xf0,0xe5,0x2c,0x30,0xe4,0x09,0x90,0x01,0x34,0x74,0x10,
+0xf0,0x43,0x57,0x10,0xe5,0x2c,0x30,0xe5,0x26,0x90,0x01,0xcf,0xe0,0x30,0xe5,0x1f,
+0xe0,0x54,0xdf,0xf0,0x90,0x01,0x34,0x74,0x20,0xf0,0x75,0xa8,0x00,0x75,0xe8,0x00,
+0x12,0x4b,0xcf,0x90,0x00,0x03,0xe0,0x54,0xfb,0xf0,0x12,0x4d,0x45,0x80,0xfe,0xe5,
+0x2c,0x30,0xe6,0x06,0x90,0x01,0x34,0x74,0x40,0xf0,0xe5,0x2e,0x30,0xe0,0x12,0x90,
+0x9e,0x7f,0x74,0x01,0xf0,0x90,0x01,0x36,0xf0,0x12,0x61,0x4e,0x90,0x9e,0x7f,0xe4,
+0xf0,0xe5,0x2e,0x30,0xe1,0x0b,0x90,0x01,0x36,0x74,0x02,0xf0,0x43,0x57,0x40,0x11,
+0x23,0xe5,0x2e,0x30,0xe2,0x09,0x90,0x01,0x36,0x74,0x04,0xf0,0x12,0x60,0xdf,0xe5,
+0x2e,0x30,0xe3,0x28,0x90,0x01,0x36,0x74,0x08,0xf0,0xe5,0x60,0x64,0x01,0x70,0x1c,
+0xe5,0x63,0x60,0x18,0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x90,
+0x9e,0x85,0xe4,0x12,0x44,0x4e,0x90,0x01,0x57,0x74,0x05,0xf0,0xe5,0x2e,0x30,0xe4,
+0x2b,0x90,0x01,0x36,0x74,0x10,0xf0,0xe5,0x60,0xb4,0x01,0x20,0xe5,0x63,0x60,0x1c,
+0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x90,0x9e,0x67,0xe4,0xf0,
+0x53,0x64,0xfd,0xe5,0x64,0x54,0x07,0x70,0x03,0x12,0x44,0xcb,0xe5,0x2e,0x30,0xe5,
+0x1f,0x90,0x01,0x36,0x74,0x20,0xf0,0xe5,0x60,0xb4,0x01,0x14,0xe5,0x63,0x60,0x10,
+0x90,0x9e,0x66,0xe0,0x64,0x02,0x60,0x05,0x12,0x44,0xd2,0x80,0x03,0x12,0x44,0x79,
+0xe5,0x2e,0x30,0xe6,0x1b,0x90,0x01,0x36,0x74,0x40,0xf0,0xe5,0x60,0xb4,0x01,0x10,
+0xe5,0x63,0x60,0x0c,0x53,0x64,0xfe,0xe5,0x64,0x54,0x07,0x70,0x03,0x12,0x44,0xcb,
+0xe5,0x2f,0x30,0xe1,0x08,0x90,0x01,0x37,0x74,0x02,0xf0,0x91,0x64,0x74,0xa1,0x04,
+0x90,0x01,0xc4,0xf0,0x74,0x50,0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,0x04,
+0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,0xd0,0xf0,
+0xd0,0xe0,0x32,0x90,0x04,0x1b,0xe0,0x54,0x7f,0x64,0x7f,0x7f,0x01,0x60,0x02,0x7f,
+0x00,0x22,0x90,0x9e,0x10,0xe0,0x54,0xf0,0x44,0x03,0xf0,0x54,0x0f,0x44,0x80,0xf0,
+0x7b,0x00,0x7a,0x00,0x79,0x58,0x90,0x9e,0x90,0x12,0x43,0x8b,0x0b,0x7a,0x9e,0x79,
+0x10,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x8d,0x12,0x43,0x8b,0x90,0x9e,
+0xb0,0xe0,0xff,0x04,0xf0,0x90,0x00,0x01,0xef,0x12,0x42,0x5f,0x7f,0xaf,0x7e,0x01,
+0x12,0x71,0x7a,0xef,0x60,0x49,0x90,0x9e,0x8d,0x12,0x43,0x6b,0x8b,0x23,0x8a,0x24,
+0x89,0x25,0x75,0x26,0x02,0x7b,0x01,0x7a,0x01,0x79,0xa0,0x12,0x45,0x09,0x90,0x9e,
+0x90,0x12,0x43,0x6b,0x8b,0x23,0x8a,0x24,0x89,0x25,0x90,0x9e,0x8d,0x12,0x43,0x6b,
+0x12,0x29,0xd9,0xff,0xc4,0x54,0x0f,0xf5,0x26,0x7b,0x01,0x7a,0x01,0x79,0xa2,0x12,
+0x45,0x09,0x90,0x01,0xaf,0x74,0xff,0xf0,0x90,0x01,0xcb,0xe0,0x64,0x80,0xf0,0xd0,
+0xd0,0x92,0xaf,0x22,0x90,0x9e,0xa0,0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0xe5,0x63,
+0x14,0x24,0xfd,0x50,0x02,0x80,0x1f,0x90,0x9e,0x66,0xe0,0x60,0x06,0x7d,0x01,0x7f,
+0x0c,0x80,0x0d,0xe5,0x61,0x54,0x0f,0xc3,0x94,0x04,0x50,0x06,0x7d,0x01,0x7f,0x04,
+0x91,0xe7,0xe4,0xff,0x91,0x97,0x22,0xef,0x60,0x0b,0x90,0x9e,0x80,0xe0,0xb4,0x01,
+0x10,0xe4,0xff,0x80,0x09,0x90,0x9e,0x80,0xe0,0xb4,0x01,0x05,0x7f,0x01,0x12,0x75,
+0x92,0x22,0x90,0x01,0x37,0x74,0x02,0xf0,0x90,0x05,0x22,0x74,0xff,0xf0,0x12,0x74,
+0x12,0xef,0x70,0x06,0x90,0x01,0xc8,0x74,0xfd,0xf0,0x7d,0x02,0x7f,0x03,0x12,0x36,
+0xe6,0xe5,0x63,0x60,0x04,0x7f,0x01,0x91,0x97,0x12,0x74,0xc8,0x53,0x61,0xf0,0x43,
+0x61,0x02,0x22,0x7d,0x01,0x7f,0x0c,0x8f,0x6a,0x8d,0x6b,0xe5,0x6a,0x54,0x0f,0xff,
+0xe5,0x61,0x54,0x0f,0x6f,0x60,0x65,0xe5,0x6a,0x30,0xe2,0x28,0xe5,0x61,0x20,0xe2,
+0x04,0x7f,0x01,0xd1,0xc2,0xe5,0x61,0x30,0xe3,0x0c,0xe5,0x6a,0x20,0xe3,0x07,0xb1,
+0x5d,0xef,0x60,0x48,0xa1,0xa5,0xe5,0x61,0x20,0xe3,0x41,0xe5,0x6a,0x30,0xe3,0x3c,
+0xaf,0x6b,0xc1,0xdc,0xe5,0x61,0x54,0x0f,0xff,0xbf,0x0c,0x0c,0xe5,0x6a,0x20,0xe3,
+0x07,0xb1,0x5d,0xef,0x60,0x26,0xb1,0xa5,0xe5,0x61,0x54,0x0f,0xff,0xbf,0x04,0x0c,
+0xe5,0x6a,0x20,0xe2,0x07,0xf1,0x21,0xef,0x60,0x12,0x91,0xb2,0xe5,0x61,0x54,0x0f,
+0xff,0xbf,0x02,0x08,0x12,0x60,0xbd,0xef,0x60,0x02,0xd1,0xaf,0x22,0x71,0xc3,0xef,
+0x64,0x01,0x60,0x08,0x90,0x01,0xb9,0x74,0x01,0xf0,0x80,0x30,0x90,0x9e,0x64,0xe0,
+0x60,0x08,0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x22,0x90,0x9e,0x63,0xe0,0x60,0x08,
+0x90,0x01,0xb9,0x74,0x04,0xf0,0x80,0x14,0xe5,0x62,0x54,0x0f,0xd3,0x94,0x04,0x40,
+0x08,0x90,0x01,0xb9,0x74,0x08,0xf0,0x80,0x03,0x7f,0x01,0x22,0x90,0x01,0xb8,0x74,
+0x08,0xf0,0x7f,0x00,0x22,0x90,0x06,0x04,0xe0,0x44,0x40,0xf0,0xe5,0x60,0xb4,0x01,
+0x04,0x7f,0x01,0xd1,0xf6,0x53,0x61,0xf0,0x43,0x61,0x04,0x22,0xef,0x64,0x01,0x70,
+0x2e,0x7d,0x78,0x7f,0x02,0x12,0x36,0x75,0x7d,0x02,0x7f,0x03,0x12,0x36,0x75,0x90,
+0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x91,0xe3,0xe4,0xff,0x91,0x97,
+0x90,0x06,0x04,0xe0,0x54,0x7f,0xf0,0x90,0x06,0x0a,0xe0,0x54,0xf8,0xf0,0x22,0x90,
+0x01,0x36,0x74,0x7b,0xf0,0xa3,0x74,0x02,0xf0,0x7d,0x7b,0xff,0x12,0x36,0xe6,0x7d,
+0x02,0x7f,0x03,0x12,0x36,0xe6,0x90,0x06,0x04,0xe0,0x44,0x80,0xf0,0x90,0x06,0x0a,
+0xe0,0x44,0x07,0xf0,0x12,0x62,0x4c,0xe5,0x60,0x20,0xe0,0x05,0xe4,0x90,0x9e,0x58,
+0xf0,0x22,0x8b,0x14,0x8a,0x15,0x89,0x16,0x12,0x60,0xb1,0xab,0x14,0xaa,0x15,0xa9,
+0x16,0x12,0x29,0xd9,0xf5,0x63,0x14,0x60,0x0e,0x14,0x60,0x1e,0x14,0x60,0x2f,0x24,
+0x03,0x70,0x40,0x7f,0x01,0x80,0x3a,0xab,0x14,0xaa,0x15,0xa9,0x16,0x90,0x00,0x02,
+0x12,0x42,0x20,0xfd,0xe4,0xff,0xd1,0x84,0x80,0x27,0xab,0x14,0xaa,0x15,0xa9,0x16,
+0x90,0x00,0x02,0x12,0x42,0x20,0xfd,0x7f,0x01,0xd1,0x84,0x1f,0x80,0x13,0xab,0x14,
+0xaa,0x15,0xa9,0x16,0x90,0x00,0x02,0x12,0x42,0x20,0xfd,0x7f,0x02,0xd1,0x84,0xe4,
+0xff,0xb1,0xbc,0x22,0xef,0x24,0xfe,0x60,0x0b,0x04,0x70,0x22,0x90,0x9e,0x65,0x74,
+0x01,0xf0,0x80,0x16,0xed,0x70,0x0a,0x90,0x9e,0x62,0xe0,0x90,0x9e,0x65,0xf0,0x80,
+0x05,0x90,0x9e,0x65,0xed,0xf0,0x90,0x9e,0x65,0xe0,0x90,0x9e,0x56,0xf0,0x22,0x53,
+0x61,0xf0,0x43,0x61,0x01,0x12,0x45,0x00,0x12,0x45,0x01,0x53,0x61,0xf0,0x43,0x61,
+0x02,0x22,0x90,0x9e,0xaf,0xef,0xf0,0x12,0x74,0x53,0x90,0x9e,0xaf,0xe0,0x60,0x05,
+0x90,0x05,0x22,0xe4,0xf0,0x53,0x61,0xf0,0x43,0x61,0x04,0x22,0x90,0x06,0x04,0xe0,
+0x54,0xbf,0xf0,0xef,0x60,0x09,0xe5,0x60,0xb4,0x01,0x04,0xe4,0xff,0xd1,0xf6,0x53,
+0x61,0xf0,0x43,0x61,0x0c,0x22,0x8f,0x27,0x12,0x45,0xb0,0xbf,0x01,0x22,0x90,0x9e,
+0x7a,0xe0,0xff,0x7d,0x01,0x12,0x47,0x79,0xab,0x07,0xaa,0x06,0xad,0x03,0xac,0x02,
+0xaf,0x27,0x12,0x60,0x2a,0xaf,0x03,0x12,0x5f,0xf7,0x90,0x04,0x1f,0x74,0x20,0xf0,
+0x22,0x71,0xc3,0xef,0x64,0x01,0x60,0x08,0x90,0x01,0xb9,0x74,0x01,0xf0,0x80,0x58,
+0xe5,0x64,0x54,0x03,0x60,0x08,0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x4a,0xe5,0x62,
+0x54,0x0f,0xd3,0x94,0x02,0x40,0x08,0x90,0x01,0xb9,0x74,0x04,0xf0,0x80,0x39,0xe5,
+0x64,0x30,0xe2,0x08,0x90,0x01,0xb9,0x74,0x08,0xf0,0x80,0x2c,0xe5,0x64,0x30,0xe4,
+0x08,0x90,0x01,0xb9,0x74,0x10,0xf0,0x80,0x1f,0x90,0x9e,0x58,0xe0,0x60,0x08,0x90,
+0x01,0xb9,0x74,0x20,0xf0,0x80,0x11,0x90,0x9e,0x5e,0xe0,0x60,0x08,0x90,0x01,0xb9,
+0x74,0x80,0xf0,0x80,0x03,0x7f,0x01,0x22,0x90,0x01,0xb8,0x74,0x04,0xf0,0x7f,0x00,
+0x22,0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,
+0xc0,0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,0x01,
+0xc4,0x74,0x91,0xf0,0x74,0x57,0xa3,0xf0,0x53,0x91,0xef,0x90,0x00,0x51,0xe0,0xff,
+0x90,0x00,0x55,0xe0,0x5f,0xf5,0x3d,0x90,0x00,0x52,0xe0,0xff,0x90,0x00,0x56,0xe0,
+0x5f,0xf5,0x3e,0xe5,0x3d,0x30,0xe4,0x06,0x90,0x00,0x55,0x74,0x10,0xf0,0xe5,0x3d,
+0x30,0xe5,0x06,0x90,0x00,0x55,0x74,0x20,0xf0,0xe5,0x3d,0x30,0xe6,0x1b,0x90,0x00,
+0x55,0x74,0x40,0xf0,0x90,0x9e,0x42,0xe0,0x54,0x03,0xff,0xbf,0x03,0x0b,0x90,0x9e,
+0x3f,0xe0,0x60,0x05,0x7f,0x01,0x12,0x49,0x1a,0xe5,0x3d,0x30,0xe7,0x15,0x90,0x00,
+0x55,0x74,0x80,0xf0,0x90,0x9e,0x42,0xe0,0x54,0x03,0xff,0xbf,0x03,0x05,0x7f,0x02,
+0x12,0x49,0x1a,0xe5,0x3e,0x30,0xe0,0x06,0x90,0x00,0x56,0x74,0x01,0xf0,0xe5,0x3e,
+0x30,0xe1,0x06,0x90,0x00,0x56,0x74,0x02,0xf0,0xe5,0x3e,0x30,0xe2,0x06,0x90,0x00,
+0x56,0x74,0x04,0xf0,0xe5,0x3e,0x30,0xe3,0x06,0x90,0x00,0x56,0x74,0x08,0xf0,0x90,
+0x01,0xc4,0x74,0x91,0xf0,0x74,0x57,0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,
+0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,0xd0,
+0xf0,0xd0,0xe0,0x32,0x90,0x01,0xcc,0xe0,0x54,0x0f,0x90,0x9e,0x19,0xf0,0x90,0x9e,
+0x19,0xe0,0xfd,0x70,0x02,0x21,0xb5,0x90,0x9e,0xae,0xe0,0xff,0x74,0x01,0x7e,0x00,
+0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xef,0x5d,0x70,
+0x02,0x21,0xae,0x90,0x9e,0xae,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd0,0x12,0x43,0x5f,
+0xe0,0x90,0x9e,0x1a,0xf0,0x75,0x23,0x01,0x75,0x24,0x9e,0x75,0x25,0x1a,0x75,0x26,
+0x01,0x7b,0x01,0x7a,0x9e,0x79,0x1b,0x12,0x45,0x09,0x90,0x9e,0x1b,0xe0,0xff,0xc4,
+0x13,0x13,0x13,0x54,0x01,0x90,0x9e,0xae,0x30,0xe0,0x59,0xe0,0x75,0xf0,0x02,0x90,
+0x00,0x88,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x1c,0xf0,0x90,0x9e,0xae,0xe0,0x75,0xf0,
+0x02,0x90,0x00,0x89,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x1d,0xf0,0x90,0x9e,0xae,0xe0,
+0x75,0xf0,0x04,0x90,0x01,0xd1,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x1e,0xf0,0x90,0x9e,
+0xae,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd2,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x1f,0xf0,
+0x90,0x9e,0xae,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd3,0x12,0x43,0x5f,0xe0,0x90,0x9e,
+0x20,0xf0,0x80,0x33,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd1,0x12,0x43,0x5f,0xe0,0x90,
+0x9e,0x1c,0xf0,0x90,0x9e,0xae,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd2,0x12,0x43,0x5f,
+0xe0,0x90,0x9e,0x1d,0xf0,0x90,0x9e,0xae,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd3,0x12,
+0x43,0x5f,0xe0,0x90,0x9e,0x1e,0xf0,0xef,0x54,0x7f,0xff,0x7b,0x01,0x7a,0x9e,0x79,
+0x1c,0x31,0xb6,0x90,0x9e,0x19,0xe0,0xff,0x90,0x9e,0xae,0xe0,0xfe,0x74,0x01,0xa8,
+0x06,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0x5f,0x90,0x9e,0x19,0xf0,0x90,0x9e,
+0xae,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0x90,0x01,
+0xcc,0xf0,0x90,0x9e,0xae,0xe0,0x04,0xf0,0xe0,0x54,0x03,0xf0,0x01,0x7e,0x90,0x01,
+0xc6,0xe0,0x44,0x02,0xf0,0x22,0x90,0x9e,0x21,0x12,0x43,0x8b,0xef,0x12,0x43,0x94,
+0x59,0xfc,0x01,0x59,0xf4,0x02,0x5a,0x20,0x03,0x5a,0x29,0x05,0x5a,0x32,0x06,0x5a,
+0x7e,0x07,0x5a,0x3a,0x09,0x5a,0x43,0x0b,0x5a,0x4c,0x0c,0x5a,0x55,0x0d,0x5a,0x5e,
+0x0e,0x5a,0x67,0x1b,0x5a,0x6f,0x1c,0x5a,0x05,0x2d,0x5a,0x0e,0x2e,0x5a,0x17,0x3b,
+0x00,0x00,0x5a,0x77,0x90,0x9e,0x21,0x12,0x43,0x6b,0xe1,0xe9,0x90,0x9e,0x21,0x12,
+0x43,0x6b,0x02,0x71,0xd0,0x90,0x9e,0x21,0x12,0x43,0x6b,0x02,0x72,0x0b,0x90,0x9e,
+0x21,0x12,0x43,0x6b,0x02,0x72,0x53,0x90,0x9e,0x21,0x12,0x43,0x6b,0x02,0x72,0x8c,
+0x90,0x9e,0x21,0x12,0x43,0x6b,0x02,0x72,0xb6,0x90,0x9e,0x21,0x12,0x43,0x6b,0x02,
+0x70,0x4a,0x90,0x9e,0x21,0x12,0x43,0x6b,0x80,0x45,0x90,0x9e,0x21,0x12,0x43,0x6b,
+0x02,0x72,0xfe,0x90,0x9e,0x21,0x12,0x43,0x6b,0x02,0x70,0xa2,0x90,0x9e,0x21,0x12,
+0x43,0x6b,0x02,0x49,0xc2,0x90,0x9e,0x21,0x12,0x43,0x6b,0x02,0x7b,0x16,0x90,0x9e,
+0x21,0x12,0x43,0x6b,0x02,0x4a,0xfc,0x90,0x9e,0x21,0x12,0x43,0x6b,0xe1,0xef,0x90,
+0x9e,0x21,0x12,0x43,0x6b,0xe1,0xd1,0x90,0x01,0xc6,0xe0,0x44,0x01,0xf0,0x22,0x90,
+0x00,0x04,0x12,0x42,0x20,0xff,0x54,0x1f,0xfe,0xef,0x54,0x20,0xc4,0x13,0x54,0x07,
+0xfd,0xaf,0x06,0x90,0x9e,0x24,0xef,0xf0,0xa3,0xed,0xf0,0xa3,0x12,0x43,0x8b,0x90,
+0x9e,0x26,0x12,0x43,0x6b,0x90,0x00,0x03,0x12,0x42,0x20,0x54,0xf0,0xc4,0x54,0x0f,
+0x90,0x9e,0x29,0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0x54,0x40,0xc4,0x13,0x13,0x54,
+0x03,0x90,0x9e,0x2a,0xf0,0x90,0x9e,0x24,0xe0,0xff,0x75,0xf0,0x09,0x90,0x96,0x46,
+0x12,0x43,0x5f,0xad,0x82,0xac,0x83,0x90,0x9e,0x2b,0xec,0xf0,0xa3,0xed,0xf0,0xef,
+0x75,0xf0,0x09,0xa4,0x24,0x44,0xf9,0x74,0x96,0x35,0xf0,0xfa,0x7b,0x01,0xa3,0x12,
+0x43,0x8b,0x90,0x9e,0x26,0x12,0x43,0x6b,0x90,0x00,0x03,0x12,0x42,0x20,0x54,0x0f,
+0xff,0x90,0x9e,0x2d,0x12,0x43,0x6b,0xef,0x12,0x42,0x4d,0x90,0x9e,0x26,0x12,0x43,
+0x6b,0x90,0x00,0x02,0x12,0x42,0x20,0xff,0x90,0x9e,0x2d,0x12,0x43,0x6b,0x90,0x00,
+0x01,0xef,0x12,0x42,0x5f,0x90,0x9e,0x26,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,0x42,
+0x20,0xff,0x90,0x9e,0x2b,0xe0,0xfc,0xa3,0xe0,0xfd,0xf5,0x82,0x8c,0x83,0xef,0xf0,
+0x12,0x29,0xd9,0x8d,0x82,0x8c,0x83,0xa3,0xf0,0x90,0x9e,0x29,0xe0,0xfe,0x90,0x9e,
+0x24,0xe0,0xff,0x24,0x82,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0x90,0x9e,
+0x25,0xe0,0xfe,0x75,0xf0,0x09,0xef,0x90,0x96,0x4a,0x12,0x43,0x5f,0xee,0xf0,0x75,
+0xf0,0x09,0xef,0x90,0x96,0x4b,0x12,0x43,0x5f,0x74,0x01,0xf0,0x90,0x9e,0x2a,0xe0,
+0xfe,0x75,0xf0,0x09,0xef,0x90,0x96,0x4c,0x12,0x43,0x5f,0xee,0xf0,0x8f,0x14,0xef,
+0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xaf,0x82,0xf5,0x16,0x8f,0x17,0xe5,
+0x14,0x75,0xf0,0x02,0xa4,0x24,0x02,0xf9,0x74,0x95,0x35,0xf0,0x75,0x18,0x01,0xf5,
+0x19,0x89,0x1a,0x75,0xf0,0x09,0xe5,0x14,0x90,0x96,0x46,0x12,0x43,0x5f,0xaf,0x82,
+0x85,0x83,0x1b,0x8f,0x1c,0xe5,0x14,0x75,0xf0,0x09,0xa4,0x24,0x44,0xf9,0x74,0x96,
+0x35,0xf0,0x75,0x1d,0x01,0xf5,0x1e,0x89,0x1f,0x74,0x82,0x25,0x14,0xf5,0x82,0xe4,
+0x34,0x95,0xf5,0x83,0xe0,0x12,0x43,0x94,0x5c,0x0d,0x00,0x5c,0x22,0x01,0x5c,0x37,
+0x02,0x5c,0x4c,0x03,0x5c,0x75,0x04,0x5c,0x8a,0x05,0x5c,0x9f,0x06,0x5c,0xc5,0x0c,
+0x5c,0xf2,0x0d,0x5d,0x1f,0x0e,0x5d,0x4c,0x0f,0x00,0x00,0x5d,0x80,0xe5,0x14,0x25,
+0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0x74,0x15,
+0x80,0x3c,0xe5,0x14,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,
+0xf0,0xf0,0xa3,0x74,0x10,0x80,0x27,0xe5,0x14,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,
+0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0x74,0x05,0x80,0x12,0xe5,0x14,0x25,0xe0,
+0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0xf0,0xf0,0xa3,0xe4,0xf0,0xe5,
+0x14,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0x74,0x0f,0xf0,0xa3,
+0x74,0x8f,0xf0,0xa1,0x80,0xe5,0x14,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,
+0xf5,0x83,0x74,0x0f,0xf0,0xa3,0x74,0xf5,0x80,0x27,0xe5,0x14,0x25,0xe0,0x24,0xc6,
+0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0x0f,0xf0,0xa3,0x74,0xf0,0x80,0x12,0xe5,
+0x14,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe4,0xf0,0xa3,0x74,
+0x0d,0xf0,0xe5,0x14,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe4,
+0xf0,0xa3,0xf0,0xa1,0x80,0x90,0x04,0x47,0xe0,0xab,0x18,0xaa,0x19,0xa9,0x1a,0x12,
+0x42,0x4d,0x90,0x04,0x46,0xe0,0xab,0x18,0xaa,0x19,0xa9,0x1a,0x90,0x00,0x01,0x12,
+0x42,0x5f,0x90,0x04,0x45,0xe0,0x85,0x17,0x82,0x85,0x16,0x83,0xf0,0x90,0x04,0x44,
+0xa1,0x77,0x90,0x04,0x4b,0xe0,0xab,0x18,0xaa,0x19,0xa9,0x1a,0x12,0x42,0x4d,0x90,
+0x04,0x4a,0xe0,0xab,0x18,0xaa,0x19,0xa9,0x1a,0x90,0x00,0x01,0x12,0x42,0x5f,0x90,
+0x04,0x49,0xe0,0x85,0x17,0x82,0x85,0x16,0x83,0xf0,0x90,0x04,0x48,0x80,0x58,0x90,
+0x04,0x4f,0xe0,0xab,0x18,0xaa,0x19,0xa9,0x1a,0x12,0x42,0x4d,0x90,0x04,0x4e,0xe0,
+0xab,0x18,0xaa,0x19,0xa9,0x1a,0x90,0x00,0x01,0x12,0x42,0x5f,0x90,0x04,0x4d,0xe0,
+0x85,0x17,0x82,0x85,0x16,0x83,0xf0,0x90,0x04,0x4c,0x80,0x2b,0x90,0x04,0x53,0xe0,
+0xab,0x18,0xaa,0x19,0xa9,0x1a,0x12,0x42,0x4d,0x90,0x04,0x52,0xe0,0xab,0x18,0xaa,
+0x19,0xa9,0x1a,0x90,0x00,0x01,0x12,0x42,0x5f,0x90,0x04,0x51,0xe0,0x85,0x17,0x82,
+0x85,0x16,0x83,0xf0,0x90,0x04,0x50,0xe0,0x85,0x17,0x82,0x85,0x16,0x83,0xa3,0xf0,
+0xab,0x18,0xaa,0x19,0xa9,0x1a,0xc0,0x03,0xc0,0x02,0xc0,0x01,0x12,0x29,0xd9,0xff,
+0xab,0x1d,0xaa,0x1e,0xa9,0x1f,0x12,0x29,0xd9,0x5f,0xd0,0x01,0xd0,0x02,0xd0,0x03,
+0x12,0x42,0x4d,0xab,0x18,0xe5,0x1a,0x24,0x01,0xf9,0xe4,0x35,0x19,0xfa,0xc0,0x03,
+0xc0,0x02,0xc0,0x01,0x12,0x29,0xd9,0xff,0xab,0x1d,0xaa,0x1e,0xa9,0x1f,0x90,0x00,
+0x01,0x12,0x42,0x20,0x5f,0xd0,0x01,0xd0,0x02,0xd0,0x03,0x12,0x42,0x4d,0x85,0x17,
+0x82,0x85,0x16,0x83,0xc0,0x83,0xc0,0x82,0xe0,0xff,0x85,0x1c,0x82,0x85,0x1b,0x83,
+0xe0,0xfe,0xef,0x5e,0xd0,0x82,0xd0,0x83,0xf0,0x85,0x17,0x82,0x85,0x16,0x83,0xa3,
+0xc0,0x83,0xc0,0x82,0xe0,0xff,0x85,0x1c,0x82,0x85,0x1b,0x83,0xa3,0xe0,0xfe,0xef,
+0x5e,0xd0,0x82,0xd0,0x83,0xf0,0xe5,0x14,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,
+0x95,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3b,0x75,0x15,0x0b,0x74,0x01,0x7e,
+0x00,0xa8,0x15,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xe5,0x14,
+0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0x5e,0xfe,0xa3,0xe0,
+0x5f,0x4e,0x60,0x06,0xe5,0x15,0x24,0x10,0x80,0x5d,0x15,0x15,0xe5,0x15,0xc3,0x94,
+0x00,0x50,0xca,0x80,0x56,0xe5,0x14,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,
+0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3d,0x75,0x15,0x0f,0x74,0x01,0x7e,0x00,
+0xa8,0x15,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xe5,0x14,0x25,
+0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,
+0x4e,0x60,0x08,0x90,0x9e,0x30,0xe5,0x15,0xf0,0x80,0x10,0x15,0x15,0xe5,0x15,0xc3,
+0x94,0x00,0x50,0xc8,0x80,0x05,0xe4,0x90,0x9e,0x30,0xf0,0xe5,0x14,0x25,0xe0,0x24,
+0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x3b,0xe4,
+0xf5,0x15,0x74,0x01,0x7e,0x00,0xa8,0x15,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,
+0xd8,0xf9,0xff,0xe5,0x14,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,
+0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x08,0x90,0x9e,0x31,0xe5,0x15,0xf0,0x80,
+0x5b,0x05,0x15,0xe5,0x15,0xb4,0x10,0xca,0x80,0x52,0xe5,0x14,0x25,0xe0,0x24,0x02,
+0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0x4e,0x60,0x39,0xe4,0xf5,
+0x15,0x74,0x01,0x7e,0x00,0xa8,0x15,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,
+0xf9,0xff,0xe5,0x14,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,
+0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x06,0xe5,0x15,0x24,0x10,0x80,0x0a,0x05,0x15,
+0xe5,0x15,0xb4,0x0c,0xcc,0x80,0x05,0xe4,0x90,0x9e,0x31,0xf0,0x90,0x9e,0x30,0xe0,
+0xff,0x75,0xf0,0x09,0xe5,0x14,0x90,0x96,0x48,0x12,0x43,0x5f,0xef,0xf0,0x90,0x9e,
+0x31,0xe0,0xfe,0x75,0xf0,0x09,0xe5,0x14,0x90,0x96,0x49,0x12,0x43,0x5f,0xee,0xf0,
+0x74,0x84,0x25,0x14,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0xd3,0x9f,0x40,0x06,
+0x90,0x9e,0x30,0x12,0x62,0x94,0x74,0x84,0x25,0x14,0xf5,0x82,0xe4,0x34,0x04,0xf5,
+0x83,0xe0,0xff,0x90,0x9e,0x31,0xe0,0xfe,0xef,0xc3,0x9e,0x50,0x03,0x12,0x62,0x94,
+0x90,0x9e,0x30,0xe0,0xff,0xd3,0x94,0x13,0x40,0x07,0x90,0x96,0x43,0x74,0x03,0xf0,
+0x22,0xef,0xd3,0x94,0x0b,0x40,0x07,0x90,0x96,0x43,0x74,0x02,0xf0,0x22,0xef,0xd3,
+0x94,0x03,0x40,0x07,0x90,0x96,0x43,0x74,0x01,0xf0,0x22,0xe4,0x90,0x96,0x43,0xf0,
+0x22,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0x54,0x3f,0xfe,0xef,0x54,0x80,0xc4,0x13,
+0x13,0x13,0x54,0x01,0xfd,0xaf,0x06,0x41,0x93,0x12,0x29,0xd9,0xf5,0x60,0x22,0x12,
+0x29,0xd9,0x90,0x95,0x01,0xf0,0x22,0xad,0x07,0x74,0x11,0x2d,0xf5,0x82,0xe4,0x34,
+0xfc,0xf5,0x83,0xe0,0x44,0x01,0xf0,0x90,0x04,0x80,0xe0,0x54,0x0f,0xfc,0x74,0x14,
+0x2d,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xc0,0x4c,0xfd,0x74,0x14,0x2f,
+0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xed,0xf0,0x22,0xef,0x60,0x0f,0x74,0x21,0x2d,
+0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x10,0xf0,0x22,0x74,0x21,0x2d,0xf5,
+0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xef,0xf0,0x22,0xe4,0xf5,0x60,0xf5,0x64,
+0xf5,0x63,0x75,0x62,0x0c,0x75,0x61,0x0c,0x90,0x9e,0x66,0xf0,0x90,0x9e,0x64,0xf0,
+0x90,0x9e,0x63,0xf0,0x90,0x9e,0x65,0x04,0xf0,0x90,0x9e,0x56,0xf0,0xe4,0x90,0x9e,
+0x67,0xf0,0x90,0x9e,0x58,0xf0,0x90,0x9e,0x61,0x74,0x07,0xf0,0xe4,0x90,0x9e,0x57,
+0xf0,0x90,0x9e,0x5f,0xf0,0xa3,0x74,0x03,0xf0,0x90,0x9e,0x5c,0x74,0x0a,0xf0,0xa3,
+0x74,0x05,0xf0,0x90,0x9e,0x5b,0x74,0x14,0xf0,0x90,0x9e,0x62,0x74,0x05,0xf0,0xe4,
+0x90,0x9e,0x5a,0xf0,0x90,0x9e,0x55,0xf0,0x90,0x9e,0x7f,0xf0,0x90,0x9e,0x5e,0xf0,
+0x22,0xe4,0x90,0x9e,0x67,0xf0,0x90,0x9e,0x57,0xf0,0xf5,0x64,0x22,0x7f,0x00,0x22,
+0xe5,0x62,0x30,0xe6,0x19,0xe5,0x62,0x54,0x0f,0xff,0x90,0x9e,0x54,0xe0,0xfe,0x4f,
+0x90,0x01,0x2f,0xf0,0xee,0x64,0x80,0x90,0x9e,0x54,0xf0,0x53,0x62,0xbf,0x22,0xe5,
+0x60,0x64,0x01,0x70,0x68,0xe5,0x63,0x60,0x64,0xe5,0x63,0x64,0x02,0x60,0x06,0xe5,
+0x63,0x64,0x05,0x70,0x27,0x90,0x06,0xab,0xe0,0x90,0x9e,0x56,0xf0,0x90,0x06,0xaa,
+0xe0,0x90,0x9e,0x65,0xf0,0x90,0x9e,0x56,0xe0,0x70,0x07,0x90,0x9e,0x65,0xe0,0xff,
+0x80,0x05,0x90,0x9e,0x56,0xe0,0xff,0x90,0x9e,0x56,0xef,0xf0,0x90,0x9e,0x58,0xe0,
+0x60,0x03,0xe0,0x14,0xf0,0xe4,0x90,0x9e,0x57,0xf0,0x90,0x05,0x58,0x74,0x03,0xf0,
+0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x53,0x64,0xfd,0x53,0x64,
+0xef,0xe5,0x63,0x14,0x24,0xfd,0x50,0x02,0x80,0x03,0x12,0x45,0x53,0x22,0xe4,0xfb,
+0x90,0x9e,0x9c,0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0xe5,0x63,0x60,0x6a,0xe5,0x60,
+0x64,0x01,0x70,0x64,0xe5,0x63,0x14,0x60,0x2b,0x24,0xfd,0x60,0x27,0x24,0x02,0x24,
+0xfb,0x50,0x02,0x80,0x21,0x90,0x9e,0x56,0xe0,0x14,0xf0,0xe0,0x60,0x04,0xa3,0xe0,
+0x60,0x14,0x90,0x9e,0x56,0xe0,0x70,0x08,0x90,0x9e,0x65,0xe0,0x90,0x9e,0x56,0xf0,
+0x7b,0x01,0x80,0x02,0x7b,0x01,0xeb,0x60,0x2f,0x43,0x64,0x10,0xe4,0x90,0x9e,0x85,
+0xf0,0x90,0x9e,0x57,0xe0,0x75,0xf0,0x03,0xa4,0xff,0x90,0x9e,0x61,0xe0,0x2f,0x12,
+0x44,0x53,0x90,0x01,0x57,0x74,0x05,0xf0,0xe5,0x61,0x54,0x0f,0xc3,0x94,0x04,0x50,
+0x07,0x7d,0x01,0x7f,0x04,0x12,0x54,0xe7,0x22,0xe4,0x90,0x9e,0x15,0xf0,0xe5,0x63,
+0x60,0x79,0x90,0x9e,0x67,0xe0,0x60,0x0d,0xe4,0xf0,0x53,0x64,0xfd,0xe5,0x64,0x54,
+0x07,0x70,0x68,0x80,0x63,0x90,0x9e,0x57,0xe0,0x04,0xf0,0x53,0x64,0xef,0x90,0x9e,
+0x15,0xe0,0xf9,0xff,0x7e,0x00,0x24,0x01,0xfd,0xee,0x33,0xfc,0x90,0x9e,0x57,0xe0,
+0xb5,0x05,0x06,0xe4,0xb5,0x04,0x02,0x80,0x12,0xef,0x24,0x02,0xff,0xe4,0x3e,0xfe,
+0x90,0x9e,0x57,0xe0,0xb5,0x07,0x0a,0xe4,0xb5,0x06,0x06,0x90,0x05,0x58,0xe0,0x04,
+0xf0,0xe9,0xff,0x90,0x9e,0x5c,0xe0,0x2f,0xff,0xe4,0x33,0xfe,0x90,0x9e,0x57,0xe0,
+0xd3,0x9f,0xee,0x64,0x80,0xf8,0x74,0x80,0x98,0x40,0x0d,0xe5,0x60,0xb4,0x01,0x0b,
+0xa3,0xe0,0x70,0x07,0xe0,0x04,0xf0,0x22,0x12,0x44,0xcb,0x22,0x90,0x9e,0x5f,0xe0,
+0xa3,0xe0,0x90,0x05,0x58,0xf0,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,
+0x93,0x12,0x43,0x8b,0x90,0x9e,0x96,0xe0,0x54,0xf0,0x44,0x06,0xff,0xf0,0xed,0x54,
+0x0f,0xc4,0x54,0xf0,0xfe,0xef,0x54,0x0f,0x4e,0xf0,0x90,0x9e,0x93,0x12,0x43,0x6b,
+0x90,0x9e,0x90,0x12,0x43,0x8b,0x7b,0x01,0x7a,0x9e,0x79,0x96,0x12,0x53,0xf1,0xd0,
+0xd0,0x92,0xaf,0x22,0xe0,0xfd,0x74,0x26,0x25,0x14,0xf5,0x82,0xe4,0x34,0x9d,0xf5,
+0x83,0xed,0xf0,0xaf,0x14,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0xef,0xc3,0x94,0x20,
+0x50,0x0e,0x74,0x84,0x2f,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xed,0xf0,0x80,0x29,
+0x74,0xa6,0x2f,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xed,0xf0,0x90,0x9e,0x68,0xef,
+0xf0,0x24,0xa6,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x90,0x9e,0x69,0xf0,0x7b,
+0x01,0x7a,0x9e,0x79,0x68,0x7d,0x02,0x51,0x57,0xd0,0xd0,0x92,0xaf,0x22,0x8f,0x0a,
+0x8d,0x0b,0xe5,0x0b,0x54,0x1f,0xf5,0x10,0x74,0x01,0x2f,0xf5,0x82,0xe4,0x34,0x94,
+0xf5,0x83,0xe0,0xf5,0x0e,0x90,0x04,0xfd,0xe0,0xb4,0x01,0x05,0x75,0x11,0x03,0x80,
+0x03,0x75,0x11,0x01,0xeb,0xc3,0x95,0x11,0x40,0x04,0xaf,0x0a,0x80,0x33,0xe5,0x0e,
+0x25,0x0d,0xf5,0x0f,0xe5,0x10,0x90,0x41,0xd6,0x93,0xff,0xe5,0x0f,0xd3,0x9f,0x74,
+0x01,0x40,0x11,0x25,0x0a,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe4,0xf0,0xad,0x0b,
+0xaf,0x0a,0x41,0xa5,0x25,0x0a,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe5,0x0f,0xf0,
+0x22,0xad,0x07,0x75,0xf0,0x09,0xed,0x90,0x96,0x48,0x12,0x43,0x5f,0xe0,0xff,0x74,
+0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xe0,0x54,0x1f,0xf5,0x12,0xd3,0x9f,
+0x40,0x02,0x8f,0x12,0xe5,0x12,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,
+0x83,0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xe5,0x12,0x25,0xe0,0x24,0x66,0xf5,0x82,
+0xe4,0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,
+0xef,0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,
+0xf0,0xa3,0xef,0xf0,0xaf,0x05,0xad,0x12,0x51,0xa5,0xaf,0x12,0x22,0xac,0x07,0xec,
+0xc3,0x94,0x20,0x50,0x0d,0x74,0x84,0x2c,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,
+0x80,0x0b,0x74,0xa6,0x2c,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x54,0x7f,0xf5,
+0x1f,0xe5,0x1f,0x54,0x1f,0xff,0x90,0x9e,0x25,0xf0,0x75,0xf0,0x09,0xec,0x90,0x96,
+0x49,0x12,0x43,0x5f,0xe0,0x90,0x9e,0x27,0xf0,0x75,0xf0,0x09,0xec,0x90,0x96,0x48,
+0x12,0x43,0x5f,0xe0,0xfe,0x90,0x9e,0x28,0xf0,0xec,0x25,0xe0,0x24,0xc6,0xf5,0x82,
+0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x9e,0x29,0xcb,0xf0,0xa3,0xeb,
+0xf0,0xec,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xfb,0xa3,
+0xe0,0x90,0x9e,0x2b,0xcb,0xf0,0xa3,0xeb,0xf0,0xef,0xd3,0x9e,0x40,0x0a,0x90,0x9e,
+0x28,0xe0,0x90,0x9e,0x25,0xf0,0xf5,0x1f,0xed,0x70,0x02,0xa1,0x13,0x90,0x9e,0x26,
+0xed,0xf0,0xe5,0x1f,0x30,0xe6,0x0a,0x90,0x9e,0x25,0xe0,0xf5,0x1f,0xa3,0xe0,0x14,
+0xf0,0x90,0x9e,0x26,0xe0,0x70,0x02,0xa1,0x13,0x90,0x9e,0x25,0xe0,0xff,0xd3,0x94,
+0x00,0x50,0x02,0xa1,0x13,0xe4,0x90,0x9e,0x24,0xf0,0xef,0x14,0x90,0x9e,0x23,0xf0,
+0x90,0x9e,0x27,0xe0,0xfd,0x90,0x9e,0x23,0xe0,0xff,0xd3,0x9d,0x40,0x6b,0xef,0x94,
+0x10,0x40,0x21,0xef,0x24,0xf0,0xff,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,
+0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x9e,0x2b,0xe0,0x5e,0xfe,0xa3,0xe0,
+0x5f,0x4e,0x70,0x27,0x90,0x9e,0x23,0xe0,0xff,0xc3,0x94,0x10,0x50,0x33,0x74,0x01,
+0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,
+0x9e,0x29,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x60,0x16,0x90,0x9e,0x23,0xe0,0xf5,
+0x1f,0xa3,0xe0,0x04,0xf0,0x90,0x9e,0x26,0xe0,0xff,0x90,0x9e,0x24,0xe0,0x6f,0x60,
+0x08,0x90,0x9e,0x23,0xe0,0x14,0xf0,0x80,0x87,0x90,0x9e,0x26,0xe0,0xff,0x90,0x9e,
+0x24,0xe0,0xc3,0x9f,0x50,0x0d,0x90,0x9e,0x23,0xe0,0xb5,0x05,0x06,0x90,0x9e,0x27,
+0xe0,0xf5,0x1f,0xe5,0x1f,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,
+0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xe5,0x1f,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,
+0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,
+0x13,0xff,0xec,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,
+0xa3,0xef,0xf0,0xaf,0x04,0xad,0x1f,0x51,0xa5,0xaf,0x1f,0x22,0xad,0x07,0xed,0xc3,
+0x94,0x20,0x50,0x0d,0x74,0x84,0x2d,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x80,
+0x0b,0x74,0xa6,0x2d,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x54,0x7f,0xf5,0x1f,
+0xe5,0x1f,0x54,0x1f,0xfc,0x75,0xf0,0x09,0xed,0x90,0x96,0x48,0x12,0x43,0x5f,0xe0,
+0xff,0x90,0x9e,0x23,0xf0,0xed,0x25,0xe0,0x24,0x02,0xf5,0x82,0xe4,0x34,0x95,0xf5,
+0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x9e,0x24,0xcb,0xf0,0xa3,0xeb,0xf0,0xed,0x25,0xe0,
+0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfb,0xa3,0xe0,0x90,0x9e,0x26,
+0xcb,0xf0,0xa3,0xeb,0xf0,0xec,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,
+0x83,0xe4,0x93,0xfa,0x74,0x01,0x93,0xfb,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,
+0x34,0x95,0xf5,0x83,0xea,0xf0,0xa3,0xeb,0xf0,0xec,0xc3,0x9f,0x40,0x02,0xc1,0x7a,
+0x74,0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xec,0xf0,0x04,0xfb,0x90,0x9e,
+0x23,0xe0,0xff,0xeb,0xd3,0x9f,0x40,0x02,0xc1,0xab,0xeb,0xc3,0x94,0x10,0x40,0x21,
+0xeb,0x24,0xf0,0xff,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,
+0x33,0xce,0xd8,0xf9,0xff,0x90,0x9e,0x24,0xe0,0x5e,0xfe,0xa3,0xe0,0x5f,0x4e,0x70,
+0x23,0xeb,0xc3,0x94,0x10,0x50,0x40,0x74,0x01,0x7e,0x00,0xa8,0x03,0x08,0x80,0x05,
+0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x9e,0x26,0xe0,0x5e,0xfe,0xa3,0xe0,
+0x5f,0x4e,0x60,0x23,0xbb,0x11,0x09,0x90,0x9e,0x25,0xe0,0x30,0xe7,0x02,0x7b,0x17,
+0xeb,0x64,0x13,0x60,0x03,0xbb,0x12,0x09,0x90,0x9e,0x24,0xe0,0x30,0xe0,0x02,0x7b,
+0x18,0xac,0x03,0x8c,0x1f,0x80,0x34,0x0b,0x80,0x84,0x90,0x9e,0x23,0xe0,0xfb,0x6c,
+0x70,0x69,0x74,0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xec,0xf0,0x75,0xf0,
+0x09,0xed,0x90,0x96,0x4a,0x12,0x43,0x5f,0xe0,0xb4,0x01,0x0c,0xe5,0x1f,0x20,0xe6,
+0x07,0xec,0x44,0x40,0xf5,0x1f,0x80,0x03,0xaf,0x1f,0x22,0xec,0x25,0xe0,0x24,0x9e,
+0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xec,0x25,
+0xe0,0x24,0x66,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,0xff,0xe4,
+0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,
+0x34,0x95,0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0x80,0x5b,0xec,0xd3,0x9b,0x40,0x56,
+0x90,0x9e,0x23,0xe0,0xff,0x74,0x67,0x2d,0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xef,
+0xf0,0xac,0x07,0x8f,0x1f,0xec,0x25,0xe0,0x24,0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,
+0x83,0xe4,0x93,0xfe,0x74,0x01,0x93,0xff,0xec,0x25,0xe0,0x24,0x66,0xf5,0x82,0xe4,
+0x34,0x41,0xf5,0x83,0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,
+0x13,0xff,0xed,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,
+0xa3,0xef,0xf0,0xaf,0x1f,0x22,0x74,0x01,0x2d,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,
+0xe4,0xf0,0xaf,0x05,0xe5,0x1f,0x44,0x80,0xfd,0x51,0xa5,0xe5,0x1f,0x44,0x80,0xff,
+0x22,0xef,0xc3,0x94,0x20,0x50,0x39,0xef,0x30,0xe0,0x17,0xed,0xc4,0x54,0xf0,0xfd,
+0xef,0xc3,0x13,0xfe,0x24,0xa4,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x54,0x0f,
+0x80,0x10,0xef,0xc3,0x13,0xfe,0x24,0xa4,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,
+0x54,0xf0,0xf0,0x74,0xa4,0x2e,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0xe0,0x4d,0xf0,
+0x22,0xe4,0xf5,0x14,0xe5,0x14,0xb4,0x20,0x14,0x90,0x9a,0xc5,0xe0,0x04,0xf0,0x90,
+0x95,0x01,0xe0,0xff,0x90,0x9a,0xc5,0xe0,0xb5,0x07,0x02,0xe4,0xf0,0x75,0xf0,0x09,
+0xe5,0x14,0x90,0x96,0x4b,0x12,0x43,0x5f,0xe0,0x64,0x01,0x60,0x03,0x02,0x6e,0x6a,
+0xe5,0x14,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe0,0xfe,0xa3,
+0xe0,0xd3,0x94,0x00,0xee,0x94,0x00,0x50,0x03,0x02,0x6e,0x6a,0xe5,0x14,0x94,0x20,
+0x40,0x09,0x90,0x9a,0xc5,0xe0,0x60,0x03,0x02,0x6e,0x76,0xe5,0x14,0x75,0xf0,0x0a,
+0xa4,0x24,0x00,0xf9,0x74,0x90,0x35,0xf0,0x75,0x18,0x01,0xf5,0x19,0x89,0x1a,0xe5,
+0x14,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe0,0xff,0xa3,0xe0,
+0x90,0x9e,0x1b,0xcf,0xf0,0xa3,0xef,0xf0,0xe5,0x14,0x25,0xe0,0x24,0xc4,0xf5,0x82,
+0xe4,0x34,0x98,0xf5,0x83,0xe0,0xff,0xa3,0xe0,0x90,0x9e,0x1d,0xcf,0xf0,0xa3,0xef,
+0xf0,0xe5,0x14,0xc3,0x94,0x20,0x50,0x14,0x74,0x84,0x25,0x14,0xf5,0x82,0xe4,0x34,
+0x04,0xf5,0x83,0xe0,0x54,0x3f,0x90,0x9e,0x19,0xf0,0x80,0x12,0x74,0xa6,0x25,0x14,
+0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x54,0x3f,0x90,0x9e,0x19,0xf0,0x90,0x9e,
+0x19,0xe0,0xfe,0x54,0x1f,0xa3,0xf0,0x75,0xf0,0x09,0xe5,0x14,0x90,0x96,0x48,0x12,
+0x43,0x5f,0xe0,0x90,0x9e,0x20,0xf0,0x74,0xe6,0x25,0x14,0xf5,0x82,0xe4,0x34,0x9c,
+0xf5,0x83,0xe0,0xc3,0x94,0x05,0x40,0x02,0x41,0x9f,0x90,0x9e,0x20,0xe0,0xff,0x90,
+0x9e,0x1a,0xe0,0x9f,0x40,0x13,0x90,0x9e,0x20,0xe0,0x90,0x9e,0x1a,0xf0,0xee,0x54,
+0x40,0xfe,0x90,0x9e,0x19,0xf0,0xef,0x4e,0xf0,0x90,0x04,0xfd,0xe0,0x54,0x05,0x64,
+0x01,0x70,0x29,0x90,0x9e,0x1a,0xe0,0xff,0x90,0x41,0x4a,0x93,0xfe,0x74,0x44,0x25,
+0x14,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xc3,0x9e,0x40,0x06,0xef,0x90,0x40,
+0xda,0x80,0x30,0x90,0x9e,0x1a,0xe0,0x90,0x40,0xf6,0x80,0x27,0x90,0x9e,0x1a,0xe0,
+0xff,0x90,0x41,0x4a,0x93,0xfe,0x74,0x44,0x25,0x14,0xf5,0x82,0xe4,0x34,0x9a,0xf5,
+0x83,0xe0,0xc3,0x9e,0x40,0x06,0xef,0x90,0x41,0x12,0x80,0x07,0x90,0x9e,0x1a,0xe0,
+0x90,0x41,0x2e,0x93,0x90,0x9e,0x1f,0xf0,0x90,0x9e,0x1f,0xe0,0x75,0xf0,0x06,0xa4,
+0x24,0x50,0xf9,0x74,0x40,0x35,0xf0,0xfa,0x7b,0xff,0x8b,0x15,0xf5,0x16,0x89,0x17,
+0xe5,0x14,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xe0,0xf5,0x1b,
+0xa3,0xe0,0xf5,0x1c,0x12,0x29,0xd9,0xff,0x7e,0x00,0xab,0x18,0xaa,0x19,0xa9,0x1a,
+0x12,0x42,0x97,0xfd,0xac,0xf0,0x12,0x29,0xf2,0xef,0x25,0x1c,0xf5,0x1c,0xee,0x35,
+0x1b,0xf5,0x1b,0xab,0x15,0xaa,0x16,0xa9,0x17,0x90,0x00,0x01,0x12,0x42,0x20,0xff,
+0x7e,0x00,0xab,0x18,0xaa,0x19,0xa9,0x1a,0x90,0x00,0x02,0x12,0x42,0xc2,0xfd,0xac,
+0xf0,0x12,0x29,0xf2,0xef,0x25,0x1c,0xf5,0x1c,0xee,0x35,0x1b,0xf5,0x1b,0xab,0x15,
+0xaa,0x16,0xa9,0x17,0x90,0x00,0x02,0x12,0x42,0x20,0xff,0x7e,0x00,0xab,0x18,0xaa,
+0x19,0xa9,0x1a,0x90,0x00,0x04,0x12,0x42,0xc2,0xfd,0xac,0xf0,0x12,0x29,0xf2,0xef,
+0x25,0x1c,0xf5,0x1c,0xee,0x35,0x1b,0xf5,0x1b,0xab,0x15,0xaa,0x16,0xa9,0x17,0x90,
+0x00,0x03,0x12,0x42,0x20,0xff,0x7e,0x00,0xab,0x18,0xaa,0x19,0xa9,0x1a,0x90,0x00,
+0x06,0x12,0x42,0xc2,0xfd,0xac,0xf0,0x12,0x29,0xf2,0xef,0x25,0x1c,0xf5,0x1c,0xee,
+0x35,0x1b,0xf5,0x1b,0xab,0x15,0xaa,0x16,0xa9,0x17,0x90,0x00,0x04,0x12,0x42,0x20,
+0xff,0x7e,0x00,0xab,0x18,0xaa,0x19,0xa9,0x1a,0x90,0x00,0x08,0x12,0x42,0xc2,0xfd,
+0xac,0xf0,0x12,0x29,0xf2,0xef,0x25,0x1c,0xf5,0x1c,0xee,0x35,0x1b,0xf5,0x1b,0xab,
+0x15,0xaa,0x16,0xa9,0x17,0x90,0x00,0x05,0x12,0x42,0x20,0xff,0x7e,0x00,0x90,0x9e,
+0x1b,0xe0,0xfc,0xa3,0xe0,0xfd,0x12,0x29,0xf2,0xd3,0xe5,0x1c,0x9f,0xe5,0x1b,0x9e,
+0x40,0x0c,0xe5,0x1c,0x9f,0xf5,0x1c,0xe5,0x1b,0x9e,0xf5,0x1b,0x80,0x05,0xe4,0xf5,
+0x1b,0xf5,0x1c,0xe5,0x14,0x25,0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,
+0xe5,0x1b,0xf0,0xa3,0xe5,0x1c,0xf0,0x90,0x9e,0x19,0xe0,0x25,0xe0,0x24,0x66,0xf5,
+0x82,0xe4,0x34,0x41,0xf5,0x83,0xc3,0x74,0x01,0x93,0x95,0x1c,0xe4,0x93,0x95,0x1b,
+0x50,0x07,0xaf,0x14,0x12,0x65,0x5c,0xa1,0x31,0x90,0x9e,0x19,0xe0,0x25,0xe0,0x24,
+0x9e,0xf5,0x82,0xe4,0x34,0x41,0xf5,0x83,0xd3,0x74,0x01,0x93,0x95,0x1c,0xe4,0x93,
+0x95,0x1b,0x50,0x02,0xa1,0x31,0x7d,0x01,0xaf,0x14,0x12,0x63,0xbd,0xa1,0x31,0x74,
+0xe6,0x25,0x14,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0xfc,0x64,0x05,0x60,0x02,
+0x81,0x3a,0x90,0x96,0x43,0xe0,0xff,0xb4,0x03,0x0b,0x90,0x9e,0x1a,0xe0,0xc3,0x94,
+0x19,0x40,0x3d,0x80,0x2e,0xef,0xb4,0x02,0x0b,0x90,0x9e,0x1a,0xe0,0xc3,0x94,0x11,
+0x40,0x2e,0x80,0x1f,0x90,0x96,0x43,0xe0,0xff,0xb4,0x01,0x0b,0x90,0x9e,0x1a,0xe0,
+0xc3,0x94,0x0a,0x40,0x1b,0x80,0x0c,0xef,0x70,0x11,0x90,0x9e,0x1a,0xe0,0xc3,0x94,
+0x03,0x40,0x0d,0x90,0x9a,0x84,0x74,0x01,0xf0,0x80,0x05,0xe4,0x90,0x9a,0x84,0xf0,
+0x74,0x84,0x25,0x14,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe0,0xf5,0x1e,0x74,0x44,
+0x25,0x14,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xff,0xc3,0x94,0x30,0x50,0x02,
+0x61,0xe7,0x90,0x9a,0x84,0xe0,0x64,0x01,0x60,0x02,0x61,0xe7,0x74,0x85,0x25,0x14,
+0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0x64,0x0a,0x60,0x51,0xef,0x24,0x05,0xff,
+0xe4,0x33,0xfe,0x74,0x41,0x25,0x14,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xe0,0xfd,
+0xd3,0x9f,0xee,0x64,0x80,0xf8,0x74,0x80,0x98,0x50,0x32,0xed,0x24,0x05,0xff,0xe4,
+0x33,0xfe,0x74,0x44,0x25,0x14,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xd3,0x9f,
+0xee,0x64,0x80,0xf8,0x74,0x80,0x98,0x50,0x14,0x74,0x26,0x25,0x14,0xf5,0x82,0xe4,
+0x34,0x9d,0xf5,0x83,0xe0,0xff,0x90,0x9e,0x1a,0xe0,0x6f,0x60,0x3d,0x74,0x44,0x25,
+0x14,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xff,0xd3,0x94,0x42,0x40,0x05,0x75,
+0x1e,0x05,0x80,0x0e,0xef,0xd3,0x94,0x39,0x40,0x05,0x75,0x1e,0x03,0x80,0x03,0x75,
+0x1e,0x01,0x74,0x41,0x25,0x14,0xf5,0x82,0xe4,0x34,0x94,0xf5,0x83,0xef,0xf0,0x74,
+0x85,0x25,0x14,0xf5,0x82,0xe4,0x34,0x9a,0x80,0x29,0x74,0xe6,0x25,0x14,0xf5,0x82,
+0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x74,0x85,0x25,0x14,0xf5,0x82,0xe4,0x34,0x9a,
+0xf5,0x83,0xe0,0x04,0xf0,0x80,0x10,0xe4,0xf5,0x1e,0x74,0xe6,0x25,0x14,0xf5,0x82,
+0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x90,0x9e,0x1a,0xe0,0xff,0x74,0x26,0x25,0x14,
+0xf5,0x82,0xe4,0x34,0x9d,0xf5,0x83,0xef,0xf0,0x74,0x84,0x25,0x14,0xf5,0x82,0xe4,
+0x34,0x98,0xf5,0x83,0xe5,0x1e,0xf0,0x75,0xf0,0x09,0xe5,0x14,0x90,0x96,0x4c,0x12,
+0x43,0x5f,0xe0,0xb4,0x01,0x10,0xe4,0xf5,0x1e,0x74,0xe6,0x25,0x14,0xf5,0x82,0xe4,
+0x34,0x9c,0xf5,0x83,0xe4,0xf0,0xad,0x1e,0xa1,0x2c,0xec,0x64,0x06,0x60,0x02,0xa1,
+0x31,0xf5,0x1b,0xf5,0x1c,0x90,0x42,0x13,0x93,0xff,0x7e,0x00,0x90,0x9e,0x1b,0xe0,
+0xfc,0xa3,0xe0,0xfd,0x12,0x29,0xf2,0x90,0x9e,0x21,0xee,0xf0,0xa3,0xef,0xf0,0x74,
+0x84,0x25,0x14,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe0,0xf5,0x1e,0xe4,0xf5,0x1d,
+0xab,0x18,0xaa,0x19,0xa9,0x1a,0x75,0xf0,0x02,0xe5,0x1d,0xa4,0xf5,0x82,0x85,0xf0,
+0x83,0x12,0x42,0xc2,0xfd,0xac,0xf0,0xe5,0x1d,0x90,0x42,0x0e,0x93,0xff,0x7e,0x00,
+0x12,0x29,0xf2,0xef,0x25,0x1c,0xf5,0x1c,0xee,0x35,0x1b,0xf5,0x1b,0xc3,0x90,0x9e,
+0x22,0xe0,0x95,0x1c,0x90,0x9e,0x21,0xe0,0x95,0x1b,0x40,0x07,0x05,0x1d,0xe5,0x1d,
+0xb4,0x05,0xbd,0xe5,0x1d,0xc3,0x13,0xf5,0x1d,0xe5,0x1e,0xb4,0x01,0x06,0xe5,0x1d,
+0x70,0x46,0x80,0x13,0xe5,0x1e,0xb4,0x03,0x15,0xe5,0x1d,0x70,0x05,0x75,0x1e,0x03,
+0x80,0x39,0xe5,0x1d,0xb4,0x01,0x05,0x75,0x1e,0x01,0x80,0x2f,0x80,0x2a,0xe5,0x1e,
+0xb4,0x05,0x28,0xe5,0x1d,0x70,0x05,0x75,0x1e,0x05,0x80,0x0d,0xe5,0x1d,0xb4,0x01,
+0x05,0x75,0x1e,0x03,0x80,0x03,0x75,0x1e,0x01,0xd3,0x90,0x9e,0x1e,0xe0,0x94,0x03,
+0x90,0x9e,0x1d,0xe0,0x94,0x00,0x40,0x03,0xe4,0xf5,0x1e,0xd3,0x90,0x9e,0x1e,0xe0,
+0x94,0x03,0x90,0x9e,0x1d,0xe0,0x94,0x00,0x40,0x03,0xe4,0xf5,0x1e,0x74,0x84,0x25,
+0x14,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe5,0x1e,0xf0,0xfd,0xaf,0x14,0x12,0x67,
+0x61,0x74,0xe6,0x25,0x14,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0xd3,0x94,0x05,
+0x74,0xe6,0x50,0x0e,0x25,0x14,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe0,0x04,0xf0,
+0x80,0x0b,0x25,0x14,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x90,0x9e,0x1d,
+0xe0,0xfe,0xa3,0xe0,0xff,0xc3,0x74,0xff,0x9f,0xfd,0x74,0xff,0x9e,0xfc,0xe5,0x14,
+0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xfa,0xa3,0xe0,0xd3,
+0x9d,0xea,0x9c,0xe5,0x14,0x50,0x13,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9a,
+0xf5,0x83,0xee,0x8f,0xf0,0x12,0x42,0x81,0x80,0x10,0x25,0xe0,0x24,0xc6,0xf5,0x82,
+0xe4,0x34,0x9a,0xf5,0x83,0x74,0xff,0xf0,0xa3,0xf0,0xe5,0x14,0x25,0xe0,0x24,0x44,
+0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,0xe0,0xfe,0xa3,0xe0,0xff,0xc3,0x74,0xff,0x9f,
+0xfd,0x74,0xff,0x9e,0xfc,0xe5,0x14,0x25,0xe0,0x24,0x46,0xf5,0x82,0xe4,0x34,0x9b,
+0xf5,0x83,0xe0,0xfa,0xa3,0xe0,0xd3,0x9d,0xea,0x9c,0xe5,0x14,0x50,0x13,0x25,0xe0,
+0x24,0x46,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xee,0x8f,0xf0,0x12,0x42,0x81,0x80,
+0x10,0x25,0xe0,0x24,0x46,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0x74,0xff,0xf0,0xa3,
+0xf0,0xab,0x18,0xaa,0x19,0xa9,0x1a,0xe4,0xf5,0xf0,0x12,0x42,0xfa,0xab,0x18,0xaa,
+0x19,0xa9,0x1a,0x90,0x00,0x02,0xe4,0xf5,0xf0,0x12,0x43,0x19,0x90,0x00,0x04,0xe4,
+0xf5,0xf0,0x12,0x43,0x19,0x90,0x00,0x06,0xe4,0xf5,0xf0,0x12,0x43,0x19,0x90,0x00,
+0x08,0xe4,0xf5,0xf0,0x12,0x43,0x19,0xe5,0x14,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,
+0x34,0x93,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xe5,0x14,0x25,0xe0,0x24,0xc4,0xf5,0x82,
+0xe4,0x34,0x98,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0xe5,0x14,0x25,0xe0,0x24,0x44,0xf5,
+0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,0x05,0x14,0xe5,0x14,0xc3,0x94,
+0x40,0x50,0x03,0x02,0x67,0xa4,0x22,0x90,0x04,0x44,0x74,0x11,0xf0,0xa3,0x74,0xf0,
+0xf0,0xa3,0x74,0x0f,0xf0,0xa3,0xe4,0xf0,0xfd,0x74,0xa4,0x2d,0xf5,0x82,0xe4,0x34,
+0x04,0xf5,0x83,0xe4,0xf0,0x0d,0xbd,0x10,0xf0,0xe4,0x90,0x9a,0xc5,0xf0,0x90,0x95,
+0x01,0x04,0xf0,0xe4,0xfd,0x75,0xf0,0x0a,0xed,0x90,0x90,0x00,0x12,0x43,0x5f,0xe4,
+0xf0,0xa3,0xf0,0x75,0xf0,0x0a,0xed,0x90,0x90,0x02,0x12,0x43,0x5f,0xe4,0xf0,0xa3,
+0xf0,0x75,0xf0,0x0a,0xed,0x90,0x90,0x04,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,
+0xf0,0x0a,0xed,0x90,0x90,0x06,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x75,0xf0,0x0a,
+0xed,0x90,0x90,0x08,0x12,0x43,0x5f,0xe4,0xf0,0xa3,0xf0,0x74,0x26,0x2d,0xf5,0x82,
+0xe4,0x34,0x9d,0xf5,0x83,0x74,0x13,0xf0,0x74,0x85,0x2d,0xf5,0x82,0xe4,0x34,0x9a,
+0xf5,0x83,0xe4,0xf0,0x74,0x84,0x2d,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe4,0xf0,
+0xed,0x25,0xe0,0x24,0x80,0xf5,0x82,0xe4,0x34,0x93,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,
+0xed,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x98,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,
+0xed,0x25,0xe0,0x24,0xc4,0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,
+0xed,0x25,0xe0,0x24,0x44,0xf5,0x82,0xe4,0x34,0x99,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,
+0xed,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,
+0xed,0x25,0xe0,0x24,0x46,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe4,0xf0,0xa3,0xf0,
+0x74,0x86,0x2d,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x74,0x46,0x2d,0xf5,
+0x82,0xe4,0x34,0x9c,0xf5,0x83,0xe4,0xf0,0x74,0xe6,0x2d,0xf5,0x82,0xe4,0x34,0x9c,
+0xf5,0x83,0xe4,0xf0,0x90,0x41,0xc4,0x93,0xfe,0x74,0x01,0x93,0xff,0x90,0x41,0x8c,
+0x74,0x01,0x93,0x2f,0xff,0xe4,0x93,0x3e,0xc3,0x13,0xfe,0xef,0x13,0xff,0xed,0x25,
+0xe0,0x24,0xc2,0xf5,0x82,0xe4,0x34,0x95,0xf5,0x83,0xee,0xf0,0xa3,0xef,0xf0,0x75,
+0xf0,0x09,0xed,0x90,0x96,0x4b,0x12,0x43,0x5f,0x74,0x01,0xf0,0x75,0xf0,0x09,0xed,
+0x90,0x96,0x4a,0x12,0x43,0x5f,0x74,0x01,0xf0,0x74,0x82,0x2d,0xf5,0x82,0xe4,0x34,
+0x95,0xf5,0x83,0x74,0x0c,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x46,0x12,0x43,0x5f,
+0x74,0xff,0xf0,0xa3,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x44,0x12,0x43,0x5f,0xe4,
+0xf0,0xa3,0x74,0x0f,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x48,0x12,0x43,0x5f,0x74,
+0x13,0xf0,0x75,0xf0,0x09,0xed,0x90,0x96,0x49,0x12,0x43,0x5f,0xe4,0xf0,0xed,0xc3,
+0x94,0x20,0x50,0x0f,0x74,0x84,0x2d,0xf5,0x82,0xe4,0x34,0x04,0xf5,0x83,0x74,0x13,
+0xf0,0x80,0x0d,0x74,0xa6,0x2d,0xf5,0x82,0xe4,0x34,0x9c,0xf5,0x83,0x74,0x13,0xf0,
+0x0d,0xed,0x64,0x40,0x60,0x03,0x02,0x6e,0xa5,0x22,0x12,0x29,0xd9,0xf5,0x14,0xc3,
+0x94,0x40,0x50,0x15,0x90,0x00,0x02,0x12,0x42,0x20,0xff,0x74,0x44,0x25,0x14,0xf5,
+0x82,0xe4,0x34,0x9a,0xf5,0x83,0xef,0xf0,0x22,0xe5,0x14,0xb4,0x40,0x0a,0x90,0x00,
+0x02,0x12,0x42,0x20,0x90,0x96,0x42,0xf0,0x22,0x90,0x9e,0x30,0x12,0x43,0x8b,0x90,
+0x9e,0x33,0xe0,0x54,0xf0,0x44,0x02,0xf0,0x54,0x0f,0x44,0xc0,0xf0,0x90,0x9e,0x30,
+0x12,0x43,0x6b,0x90,0x9e,0x90,0x12,0x43,0x8b,0x7b,0x01,0x7a,0x9e,0x79,0x33,0x02,
+0x53,0xf1,0x90,0x00,0x02,0x12,0x42,0x20,0xfd,0x90,0x00,0x01,0x12,0x42,0x20,0xfc,
+0xed,0xc3,0x94,0x40,0x40,0x02,0xe4,0xfd,0xec,0xc3,0x94,0x40,0x40,0x02,0xe4,0xfc,
+0xed,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xfa,0xa3,0xe0,
+0xfb,0xea,0x90,0x9e,0x24,0xf0,0xeb,0xa3,0xf0,0xed,0x25,0xe0,0x24,0x46,0xf5,0x82,
+0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfa,0xa3,0xe0,0xfb,0xea,0x90,0x9e,0x26,0xf0,0xeb,
+0xa3,0xf0,0xa3,0xed,0xf0,0xa3,0x74,0xff,0xf0,0xec,0x25,0xe0,0x24,0xc6,0xf5,0x82,
+0xe4,0x34,0x9a,0xf5,0x83,0xe0,0xfa,0xa3,0xe0,0xfb,0xea,0x90,0x9e,0x2a,0xf0,0xeb,
+0xa3,0xf0,0xec,0x25,0xe0,0x24,0x46,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe0,0xfa,
+0xa3,0xe0,0xfb,0xea,0x90,0x9e,0x2c,0xf0,0xeb,0xa3,0xf0,0xa3,0xec,0xf0,0xa3,0x74,
+0xff,0xf0,0xed,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe4,0xf0,
+0xa3,0xf0,0xed,0x25,0xe0,0x24,0x46,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe4,0xf0,
+0xa3,0xf0,0xec,0x25,0xe0,0x24,0xc6,0xf5,0x82,0xe4,0x34,0x9a,0xf5,0x83,0xe4,0xf0,
+0xa3,0xf0,0xec,0x25,0xe0,0x24,0x46,0xf5,0x82,0xe4,0x34,0x9b,0xf5,0x83,0xe4,0xf0,
+0xa3,0xf0,0x7b,0x01,0x7a,0x9e,0x79,0x24,0x01,0x79,0xd3,0x10,0xaf,0x01,0xc3,0xc0,
+0xd0,0x90,0x9e,0xa4,0xee,0xf0,0xa3,0xef,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0x90,0x9e,
+0xa4,0xe0,0xfe,0xa3,0xe0,0xf5,0x82,0x8e,0x83,0xe0,0x60,0x2d,0xc3,0x90,0x9e,0xa7,
+0xe0,0x94,0xe8,0x90,0x9e,0xa6,0xe0,0x94,0x03,0x40,0x0b,0x90,0x01,0xc6,0xe0,0x44,
+0x10,0xf0,0x7f,0x00,0x80,0x15,0x90,0x9e,0xa6,0xe4,0x75,0xf0,0x01,0x12,0x42,0x81,
+0x7f,0x0a,0x7e,0x00,0x12,0x37,0x54,0x80,0xc5,0x7f,0x01,0xd0,0xd0,0x92,0xaf,0x22,
+0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x24,0x12,0x2a,0x8b,0x00,0x00,0x00,
+0x00,0x90,0x00,0x01,0x12,0x42,0x20,0x90,0x9e,0x66,0xf0,0x90,0x00,0x03,0x12,0x42,
+0x20,0x90,0x9e,0x55,0xf0,0x12,0x56,0x22,0x90,0x01,0xe5,0xe5,0x63,0xf0,0x90,0x9e,
+0x66,0xe0,0x90,0x01,0xe6,0xf0,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x00,0x02,0x12,0x42,
+0x20,0xff,0x30,0xe0,0x25,0x12,0x29,0xd9,0x90,0x9e,0x5c,0xf0,0x90,0x00,0x01,0x12,
+0x42,0x20,0x90,0x9e,0x5d,0xf0,0xef,0xc3,0x13,0x54,0x7f,0x90,0x9e,0x5b,0xf0,0x90,
+0x00,0x03,0x12,0x42,0x20,0x90,0x9e,0x62,0xf0,0x22,0x90,0x9e,0x5c,0x74,0x0a,0xf0,
+0x90,0x9e,0x5d,0x74,0x05,0xf0,0x90,0x9e,0x5b,0x74,0x14,0xf0,0x90,0x9e,0x62,0x74,
+0x05,0xf0,0x22,0x12,0x29,0xd9,0x30,0xe0,0x19,0xc3,0x13,0x54,0x7f,0x90,0x9e,0x61,
+0xf0,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0x90,0x9e,0x5f,0xe4,0xf0,0xa3,0xef,0xf0,
+0x80,0x0f,0x90,0x9e,0x61,0x74,0x07,0xf0,0x90,0x9e,0x5f,0xe4,0xf0,0xa3,0x74,0x03,
+0xf0,0x90,0x9e,0x5f,0xe0,0xa3,0xe0,0x90,0x05,0x58,0xf0,0x22,0x90,0x9e,0x24,0x12,
+0x2a,0x8b,0x00,0x00,0x00,0x00,0x12,0x29,0xd9,0x60,0x0d,0x90,0x9e,0x5e,0xf0,0xe4,
+0xfd,0x7f,0x04,0x12,0x54,0xe7,0x80,0x05,0xe4,0x90,0x9e,0x5e,0xf0,0x90,0x9e,0x5e,
+0xe0,0x90,0x01,0xe7,0xf0,0x22,0x90,0x02,0x09,0xe0,0xfd,0x12,0x29,0xd9,0xfe,0xaf,
+0x05,0xed,0x2e,0x90,0x9e,0x78,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0xed,0x2f,
+0x90,0x9e,0x79,0xf0,0x90,0x00,0x02,0x12,0x42,0x20,0xff,0xed,0x2f,0x90,0x9e,0x7a,
+0xf0,0x90,0x00,0x03,0x12,0x42,0x20,0xff,0xed,0x2f,0x90,0x9e,0x7b,0xf0,0x90,0x00,
+0x04,0x12,0x42,0x20,0xff,0xae,0x05,0xed,0x2f,0x90,0x9e,0x7c,0xf0,0x22,0xd3,0x10,
+0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x9e,0x24,0x12,0x43,0x8b,0x90,0x9e,0x24,0x12,0x43,
+0x6b,0x90,0x00,0x01,0x12,0x42,0xc2,0xfa,0xe5,0xf0,0x24,0x00,0xff,0xe4,0x3a,0xfe,
+0x90,0x9e,0x24,0x12,0x43,0x6b,0x90,0x00,0x01,0xee,0x8f,0xf0,0x12,0x43,0x19,0x12,
+0x29,0xd9,0xff,0x60,0x2d,0xb5,0x65,0x16,0x90,0x9e,0x24,0x12,0x43,0x6b,0x90,0x00,
+0x01,0x12,0x42,0xc2,0x65,0x67,0x70,0x04,0xe5,0x66,0x65,0xf0,0x60,0x24,0x90,0x9e,
+0x24,0x12,0x43,0x6b,0x90,0x00,0x01,0x12,0x42,0xc2,0xff,0xae,0xf0,0x12,0x4e,0x37,
+0x80,0x10,0x90,0x9e,0x24,0x12,0x43,0x6b,0x12,0x29,0xd9,0x65,0x65,0x60,0x03,0x12,
+0x44,0xc2,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x06,0x34,0x74,0xff,0xf0,0xe4,0xa3,0xf0,
+0xa3,0xf0,0xa3,0xf0,0x22,0x90,0x06,0x34,0xe0,0x60,0x24,0x14,0x70,0x1a,0x7b,0x01,
+0x7a,0x06,0x79,0x35,0x7f,0xf9,0x7e,0x01,0x71,0xb0,0xbf,0x01,0x09,0x90,0x06,0x35,
+0xe0,0x54,0x0f,0xf0,0x80,0x04,0x80,0x00,0x80,0xcd,0xe4,0x90,0x06,0x34,0xf0,0x22,
+0x8e,0x14,0x8f,0x15,0x8b,0x16,0x8a,0x17,0x89,0x18,0xe4,0x90,0x9e,0x19,0xf0,0xef,
+0x90,0x00,0x31,0xf0,0x12,0x4d,0x45,0xe5,0x14,0x54,0x03,0xff,0x90,0x00,0x32,0xe0,
+0x54,0xfc,0x4f,0xf0,0x12,0x4d,0x45,0x90,0x00,0x33,0xe0,0x54,0x7f,0xf0,0x12,0x4d,
+0x45,0x90,0x00,0x33,0xe0,0x20,0xe7,0x0e,0x90,0x9e,0x19,0xe0,0xc3,0x94,0x64,0x50,
+0x05,0xe0,0x04,0xf0,0x80,0xeb,0x90,0x9e,0x19,0xe0,0xc3,0x94,0x64,0x50,0x10,0x90,
+0x00,0x30,0xe0,0xab,0x16,0xaa,0x17,0xa9,0x18,0x12,0x42,0x4d,0x7f,0x01,0x22,0x7f,
+0x00,0x22,0xe4,0x90,0x9e,0xac,0xf0,0xa3,0xf0,0x90,0x05,0xf8,0xe0,0x70,0x0f,0xa3,
+0xe0,0x70,0x0b,0xa3,0xe0,0x70,0x07,0xa3,0xe0,0x70,0x03,0x7f,0x01,0x22,0xd3,0x90,
+0x9e,0xad,0xe0,0x94,0xe8,0x90,0x9e,0xac,0xe0,0x94,0x03,0x40,0x03,0x7f,0x00,0x22,
+0x7f,0x32,0x7e,0x00,0x12,0x37,0x54,0x90,0x9e,0xac,0xe4,0x75,0xf0,0x01,0x12,0x42,
+0x81,0x80,0xc6,0x90,0x9d,0xff,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
+0x78,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9e,0x03,0x12,0x43,0x53,0x90,0x80,0x85,0x12,
+0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x90,0x9e,0x07,0x12,0x43,0x53,0x90,
+0x80,0x85,0x12,0x2a,0x7f,0x7f,0x00,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9e,0x0b,0x12,
+0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x70,0x7e,0x0e,0x12,0x2f,0xd9,0x90,
+0x80,0x59,0x12,0x2a,0x8b,0x00,0x03,0x2d,0x95,0xe4,0xfd,0xff,0x12,0x34,0x81,0x90,
+0x9e,0x80,0xe0,0xb4,0x01,0x11,0x90,0x80,0x59,0x12,0x2a,0x8b,0x00,0x03,0x2d,0x95,
+0xe4,0xfd,0x7f,0x01,0x12,0x34,0x81,0x22,0x7f,0x78,0x7e,0x08,0x12,0x27,0xde,0x90,
+0x9d,0xff,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x27,0xde,0x90,0x9e,0x03,0x12,
+0x2a,0x7f,0x7f,0x00,0x7e,0x08,0x12,0x27,0xde,0x90,0x9e,0x07,0x12,0x2a,0x7f,0x90,
+0x9e,0x80,0xe0,0x90,0x9d,0xff,0xb4,0x01,0x0d,0x12,0x43,0x53,0xef,0x54,0xc7,0xff,
+0xed,0x54,0xc7,0xfd,0x80,0x07,0x12,0x43,0x53,0xef,0x54,0xc7,0xff,0xec,0x90,0x80,
+0x85,0x12,0x2a,0x7f,0x7f,0x78,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9e,0x03,0x12,0x43,
+0x53,0xef,0x54,0x0f,0xff,0xec,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,
+0x12,0x2f,0xd9,0x90,0x9e,0x07,0x12,0x43,0x53,0xef,0x44,0x02,0xff,0xec,0x90,0x80,
+0x85,0x12,0x2a,0x7f,0x7f,0x00,0x7e,0x08,0x12,0x2f,0xd9,0x7f,0x70,0x7e,0x0e,0x12,
+0x27,0xde,0x90,0x9e,0x0b,0x12,0x2a,0x7f,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x1b,
+0x25,0xa0,0x7f,0x70,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x59,0x12,0x2a,0x8b,0x00,
+0x00,0x00,0x00,0xe4,0xfd,0xff,0x12,0x34,0x81,0x90,0x9e,0x80,0xe0,0xb4,0x01,0x11,
+0x90,0x80,0x59,0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0xe4,0xfd,0x7f,0x01,0x12,0x34,
+0x81,0x22,0xef,0x70,0x02,0xe1,0x49,0x90,0x9e,0x0f,0xe0,0x60,0x03,0x02,0x7b,0x15,
+0x90,0x9d,0xfb,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x8c,0x7e,0x08,
+0x12,0x2f,0xd9,0x90,0x9d,0xa7,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
+0x44,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9d,0xab,0x12,0x43,0x53,0x90,0x80,0x85,0x12,
+0x2a,0x7f,0x7f,0x5c,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x9d,0xaf,0x12,0x43,0x53,0x90,
+0x80,0x85,0x12,0x2a,0x7f,0x7f,0x6c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xb3,0x12,
+0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x70,0x7e,0x0e,0x12,0x2f,0xd9,0x90,
+0x9d,0xb7,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x74,0x7e,0x0e,0x12,
+0x2f,0xd9,0x90,0x9d,0xbb,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x78,
+0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xbf,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,
+0x7f,0x7f,0x7c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xc3,0x12,0x43,0x53,0x90,0x80,
+0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xc7,0x12,0x43,
+0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x84,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,
+0xcb,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x88,0x7e,0x0e,0x12,0x2f,
+0xd9,0x90,0x9d,0xcf,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x8c,0x7e,
+0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xd3,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,
+0x7f,0xd0,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xd7,0x12,0x43,0x53,0x90,0x80,0x85,
+0x12,0x2a,0x7f,0x7f,0xd4,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xdb,0x12,0x43,0x53,
+0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0xd8,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xdf,
+0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0xdc,0x7e,0x0e,0x12,0x2f,0xd9,
+0x90,0x9d,0xe3,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0xe0,0x7e,0x0e,
+0x12,0x2f,0xd9,0x90,0x9d,0xe7,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
+0xec,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x9d,0xeb,0x12,0x43,0x53,0x90,0x80,0x85,0x12,
+0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x90,0x9d,0xef,0x12,0x43,0x53,0x90,
+0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0d,0x12,0x2f,0xd9,0x90,0x9d,0xf3,0x12,
+0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,0x2f,0xd9,0x90,
+0x9d,0xf7,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x08,0x12,
+0x2f,0xd9,0x90,0x9e,0x0f,0x74,0x01,0xf0,0x22,0x90,0x9e,0x0f,0xe0,0x64,0x01,0x60,
+0x03,0x02,0x7b,0x15,0x7f,0x8c,0x7e,0x08,0x12,0x27,0xde,0x90,0x9d,0xfb,0x12,0x2a,
+0x7f,0x7f,0x44,0x7e,0x08,0x12,0x27,0xde,0x90,0x9d,0xa7,0x12,0x2a,0x7f,0x7f,0x5c,
+0x7e,0x08,0x12,0x27,0xde,0x90,0x9d,0xab,0x12,0x2a,0x7f,0x7f,0x6c,0x7e,0x0e,0x12,
+0x27,0xde,0x90,0x9d,0xaf,0x12,0x2a,0x7f,0x7f,0x70,0x7e,0x0e,0x12,0x27,0xde,0x90,
+0x9d,0xb3,0x12,0x2a,0x7f,0x7f,0x74,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xb7,0x12,
+0x2a,0x7f,0x7f,0x78,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xbb,0x12,0x2a,0x7f,0x7f,
+0x7c,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xbf,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x0e,
+0x12,0x27,0xde,0x90,0x9d,0xc3,0x12,0x2a,0x7f,0x7f,0x84,0x7e,0x0e,0x12,0x27,0xde,
+0x90,0x9d,0xc7,0x12,0x2a,0x7f,0x7f,0x88,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xcb,
+0x12,0x2a,0x7f,0x7f,0x8c,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xcf,0x12,0x2a,0x7f,
+0x7f,0xd0,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xd3,0x12,0x2a,0x7f,0x7f,0xd4,0x7e,
+0x0e,0x12,0x27,0xde,0x90,0x9d,0xd7,0x12,0x2a,0x7f,0x7f,0xd8,0x7e,0x0e,0x12,0x27,
+0xde,0x90,0x9d,0xdb,0x12,0x2a,0x7f,0x7f,0xdc,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,
+0xdf,0x12,0x2a,0x7f,0x7f,0xe0,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xe3,0x12,0x2a,
+0x7f,0x7f,0xec,0x7e,0x0e,0x12,0x27,0xde,0x90,0x9d,0xe7,0x12,0x2a,0x7f,0x7f,0x04,
+0x7e,0x0c,0x12,0x27,0xde,0x90,0x9d,0xeb,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0d,0x12,
+0x27,0xde,0x90,0x9d,0xef,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,0x27,0xde,0x90,
+0x9d,0xf3,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x08,0x12,0x27,0xde,0x90,0x9d,0xf7,0x12,
+0x2a,0x7f,0x7f,0x8c,0x7e,0x08,0x12,0x27,0xde,0x90,0x9e,0xa8,0x12,0x2a,0x7f,0x90,
+0x9e,0xa8,0x12,0x43,0x53,0xed,0x44,0xc0,0xfd,0xec,0x90,0x9e,0xa8,0x12,0x2a,0x7f,
+0x90,0x9e,0xa8,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x8c,0x7e,0x08,
+0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x01,0x00,0x00,0x7f,0x44,0x7e,
+0x08,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0xdb,0x25,0xa4,0x7f,0x5c,
+0x7e,0x08,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,
+0x6c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,
+0x7f,0x70,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x04,0x1b,0x25,
+0xa4,0x7f,0x74,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x04,0x1b,
+0x25,0xa4,0x7f,0x78,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x04,
+0x1b,0x25,0xa4,0x7f,0x7c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,
+0x04,0x1b,0x25,0xa4,0x7f,0x80,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,
+0x8b,0x63,0xdb,0x25,0xa4,0x7f,0x84,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,
+0x2a,0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x88,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,
+0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0x8c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,
+0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd0,0x7e,0x0e,0x12,0x2f,0xd9,0x90,
+0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd4,0x7e,0x0e,0x12,0x2f,0xd9,
+0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd8,0x7e,0x0e,0x12,0x2f,
+0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x1b,0x25,0xa4,0x7f,0xdc,0x7e,0x0e,0x12,
+0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x1b,0x25,0xa4,0x7f,0xe0,0x7e,0x0e,
+0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x24,0xdb,0x25,0xa4,0x7f,0xec,0x7e,
+0x0e,0x12,0x2f,0xd9,0x7f,0x04,0x7e,0x0c,0x12,0x27,0xde,0x90,0x9e,0xa8,0x12,0x2a,
+0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,0xe4,0xff,0xec,0x90,0x9e,0xa8,0x12,0x2a,0x7f,
+0x90,0x9e,0xa8,0x12,0x43,0x53,0xef,0x44,0x11,0xff,0xec,0x90,0x9e,0xa8,0x12,0x2a,
+0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,
+0x0c,0x12,0x2f,0xd9,0x7f,0x04,0x7e,0x0d,0x12,0x27,0xde,0x90,0x9e,0xa8,0x12,0x2a,
+0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,0xef,0x54,0xf0,0xff,0xec,0x90,0x9e,0xa8,0x12,
+0x2a,0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,0xef,0x44,0x01,0xff,0xec,0x90,0x9e,0xa8,
+0x12,0x2a,0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
+0x04,0x7e,0x0d,0x12,0x2f,0xd9,0x7f,0x0c,0x7e,0x09,0x12,0x27,0xde,0x90,0x9e,0xa8,
+0x12,0x2a,0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,0xe4,0xff,0xec,0x90,0x9e,0xa8,0x12,
+0x2a,0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,0xef,0x44,0x11,0xff,0xec,0x90,0x9e,0xa8,
+0x12,0x2a,0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
+0x0c,0x7e,0x09,0x12,0x2f,0xd9,0x7f,0x0c,0x7e,0x09,0x12,0x27,0xde,0x90,0x9e,0xa8,
+0x12,0x2a,0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,0xed,0x54,0x0f,0xfd,0xec,0x54,0xf0,
+0xfc,0x90,0x9e,0xa8,0x12,0x2a,0x7f,0x90,0x9e,0xa8,0x12,0x43,0x53,0xed,0x44,0x10,
+0xfd,0xec,0x44,0x01,0xfc,0x90,0x9e,0xa8,0x12,0x2a,0x7f,0x90,0x9e,0xa8,0x12,0x43,
+0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,0x2f,0xd9,0x7f,0x04,
+0x7e,0x08,0x12,0x27,0xde,0x90,0x9e,0xa8,0x12,0x2a,0x7f,0x90,0x9e,0xa8,0x12,0x43,
+0x53,0xef,0x54,0xf0,0xff,0xec,0x90,0x9e,0xa8,0x12,0x2a,0x7f,0x90,0x9e,0xa8,0x12,
+0x43,0x53,0xef,0x44,0x01,0xff,0xec,0x90,0x9e,0xa8,0x12,0x2a,0x7f,0x90,0x9e,0xa8,
+0x12,0x43,0x53,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x08,0x12,0x2f,0xd9,
+0xe4,0x90,0x9e,0x0f,0xf0,0x22,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x9e,0x43,0xf0,
+0xe0,0x60,0x04,0xe0,0xf4,0x70,0x21,0xa2,0xaf,0xe4,0x33,0xf5,0x14,0xc2,0xaf,0x90,
+0x00,0x47,0xe0,0x54,0xfb,0xfd,0x7f,0x47,0x12,0x49,0x05,0x7d,0x40,0x7f,0x01,0x12,
+0x36,0xaf,0xe5,0x14,0x24,0xff,0x92,0xaf,0x22,0x90,0x9e,0x3a,0xe0,0xc3,0x94,0x14,
+0x50,0x05,0xe0,0x04,0xf0,0x81,0x01,0x90,0x9e,0x3a,0xe0,0x64,0x14,0x60,0x02,0x81,
+0x01,0x90,0x9e,0x49,0xe0,0x70,0x25,0x90,0x9e,0x4c,0xe0,0x70,0x1f,0x90,0x9e,0x4a,
+0xe0,0x70,0x19,0x90,0x9e,0x4d,0xe0,0x70,0x13,0x90,0x9e,0x4b,0xe0,0x70,0x0d,0x90,
+0x9e,0x4e,0xe0,0x70,0x07,0x90,0x04,0xfd,0xe0,0x54,0xfe,0xf0,0x90,0x9e,0x49,0xe0,
+0x90,0x04,0x44,0xf0,0x90,0x9e,0x4a,0xe0,0x90,0x04,0x45,0xf0,0x90,0x9e,0x4b,0xe0,
+0x90,0x04,0x46,0xf0,0xa3,0xe4,0xf0,0x90,0x9e,0x4c,0xe0,0x90,0x04,0x48,0xf0,0x90,
+0x9e,0x4d,0xe0,0x90,0x04,0x49,0xf0,0x90,0x9e,0x4e,0xe0,0x90,0x04,0x4a,0xf0,0xa3,
+0xe4,0xf0,0x90,0x9e,0x35,0xe0,0x90,0x04,0x4c,0xf0,0x90,0x9e,0x36,0xe0,0x90,0x04,
+0x4d,0xf0,0x90,0x9e,0x37,0xe0,0x90,0x04,0x4e,0xf0,0x90,0x9e,0x38,0xe0,0x90,0x04,
+0x4f,0xf0,0xe4,0x90,0x9e,0x3a,0xf0,0x90,0x9e,0x35,0x04,0xf0,0xe4,0xa3,0xf0,0xa3,
+0xf0,0xa3,0xf0,0x90,0x9e,0x49,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,
+0xf0,0x90,0x05,0x60,0xe0,0x90,0x9e,0x19,0xf0,0x90,0x05,0x61,0xe0,0x90,0x9e,0x1a,
+0xf0,0x90,0x05,0x62,0xe0,0x90,0x9e,0x1b,0xf0,0x90,0x05,0x63,0xe0,0x90,0x9e,0x1c,
+0xf0,0x90,0x9e,0x52,0xe0,0xff,0x90,0x9e,0x1c,0xe0,0xfe,0xd3,0x9f,0x50,0x0b,0x90,
+0x9e,0x52,0xe0,0xc3,0x9e,0xd3,0x94,0x01,0x40,0x11,0x90,0x9e,0x40,0xe0,0xb4,0x01,
+0x02,0x80,0x03,0x90,0x9e,0x44,0xe0,0xff,0x12,0x4c,0xf0,0x22,0x90,0x9e,0x53,0xe0,
+0x64,0x01,0x60,0x08,0x90,0x9e,0x41,0xe0,0x60,0x02,0xa1,0x23,0x90,0x9e,0x35,0xe0,
+0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,0x3b,0x90,0x9e,0x36,0xe0,0xc3,0x94,
+0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,0x28,0x90,0x9e,0x37,0xe0,0xc3,0x94,0xff,
+0x50,0x0a,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x36,0xf0,0x80,0x15,0x90,0x9e,0x38,0xe0,
+0xc3,0x94,0xff,0x50,0x10,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x37,0xf0,0x90,0x9e,0x36,
+0xf0,0x90,0x9e,0x35,0xf0,0x90,0x00,0x44,0xe0,0x54,0x0c,0x60,0x76,0xe0,0x30,0xe2,
+0x32,0x90,0x9e,0x49,0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,0x24,0x90,
+0x9e,0x4a,0xe0,0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,0x11,0x90,0x9e,
+0x4b,0xe0,0xc3,0x94,0xff,0x50,0x0c,0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x4a,0xf0,0x90,
+0x9e,0x49,0xf0,0x90,0x00,0x44,0xe0,0x30,0xe3,0x32,0x90,0x9e,0x4c,0xe0,0xc3,0x94,
+0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,0x24,0x90,0x9e,0x4d,0xe0,0xc3,0x94,0xff,0x50,
+0x06,0xe0,0x04,0xf0,0xe4,0x80,0x11,0x90,0x9e,0x4e,0xe0,0xc3,0x94,0xff,0x50,0x0c,
+0xe0,0x04,0xf0,0xe4,0x90,0x9e,0x4d,0xf0,0x90,0x9e,0x4c,0xf0,0x90,0x04,0xfd,0xe0,
+0x44,0x01,0xf0,0x22,0x68,0x4c,};
+#else
+// =================== v88 TSMC P2PPS with CCX report C2H 2012-12-05 =======================
+u8 Rtl8192CUFwTSMCImgArray[TSMCImgArrayLength] = {
+0xC1, 0x88, 0x02, 0x05, 0x58, 0x00, 0x02, 0x00, 0x12, 0x05, 0x17, 0x12, 0xDE, 0x3E, 0x00, 0x00,
+0x94, 0x18, 0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+0x02, 0x46, 0x30, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+0x00, 0x00, 0x00, 0x02, 0x60, 0xF2, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+0x00, 0x00, 0x00, 0x02, 0x68, 0x91, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02, 0x4B, 0x87, 0x00, 0x00,
+0x05, 0x04, 0x03, 0x02, 0x00, 0x03, 0x06, 0x05, 0x04, 0x03, 0x00, 0x04, 0x06, 0x05, 0x04, 0x02,
+0x00, 0x04, 0x08, 0x07, 0x06, 0x04, 0x00, 0x06, 0x0A, 0x09, 0x08, 0x06, 0x00, 0x08, 0x0A, 0x09,
+0x08, 0x04, 0x00, 0x08, 0x0A, 0x09, 0x08, 0x02, 0x00, 0x08, 0x0A, 0x09, 0x08, 0x00, 0x00, 0x08,
+0x12, 0x11, 0x10, 0x08, 0x00, 0x10, 0x1A, 0x19, 0x18, 0x10, 0x00, 0x18, 0x22, 0x21, 0x20, 0x18,
+0x00, 0x20, 0x22, 0x21, 0x20, 0x10, 0x00, 0x20, 0x22, 0x21, 0x20, 0x08, 0x00, 0x20, 0x22, 0x21,
+0x1C, 0x08, 0x00, 0x20, 0x22, 0x21, 0x14, 0x08, 0x00, 0x20, 0x22, 0x20, 0x18, 0x08, 0x00, 0x20,
+0x31, 0x30, 0x20, 0x10, 0x00, 0x30, 0x31, 0x30, 0x18, 0x00, 0x00, 0x30, 0x31, 0x2F, 0x10, 0x10,
+0x00, 0x30, 0x31, 0x2C, 0x10, 0x10, 0x00, 0x30, 0x31, 0x28, 0x10, 0x00, 0x00, 0x30, 0x31, 0x20,
+0x10, 0x00, 0x00, 0x30, 0x31, 0x10, 0x10, 0x00, 0x00, 0x30, 0x04, 0x04, 0x04, 0x05, 0x04, 0x04,
+0x05, 0x07, 0x07, 0x07, 0x08, 0x0A, 0x04, 0x04, 0x04, 0x04, 0x06, 0x0A, 0x0B, 0x0D, 0x05, 0x05,
+0x07, 0x07, 0x08, 0x0B, 0x0D, 0x0F, 0x04, 0x04, 0x04, 0x05, 0x07, 0x07, 0x09, 0x09, 0x0C, 0x0E,
+0x10, 0x12, 0x06, 0x07, 0x09, 0x0A, 0x0C, 0x0E, 0x11, 0x13, 0x09, 0x09, 0x09, 0x09, 0x0C, 0x0E,
+0x11, 0x13, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x24, 0x26, 0x2A, 0x18, 0x1A,
+0x1D, 0x1F, 0x21, 0x27, 0x29, 0x2A, 0x00, 0x00, 0x00, 0x1F, 0x23, 0x28, 0x2A, 0x2C, 0x00, 0x04,
+0x00, 0x04, 0x00, 0x08, 0x00, 0x10, 0x00, 0x18, 0x00, 0x24, 0x00, 0x30, 0x00, 0x48, 0x00, 0x60,
+0x00, 0x90, 0x00, 0xC0, 0x00, 0xD8, 0x00, 0x50, 0x00, 0x78, 0x00, 0xA0, 0x00, 0xC8, 0x01, 0x40,
+0x01, 0x90, 0x01, 0xE0, 0x02, 0x30, 0x01, 0x2C, 0x01, 0x40, 0x01, 0xE0, 0x02, 0xD0, 0x03, 0xE8,
+0x04, 0xB0, 0x06, 0x40, 0x07, 0xD0, 0x00, 0x02, 0x00, 0x02, 0x00, 0x04, 0x00, 0x08, 0x00, 0x0C,
+0x00, 0x12, 0x00, 0x18, 0x00, 0x24, 0x00, 0x30, 0x00, 0x48, 0x00, 0x60, 0x00, 0x6C, 0x00, 0x28,
+0x00, 0x3C, 0x00, 0x50, 0x00, 0x64, 0x00, 0xA0, 0x00, 0xC8, 0x00, 0xF0, 0x01, 0x18, 0x00, 0x64,
+0x00, 0xA0, 0x00, 0xF0, 0x01, 0x68, 0x01, 0xF4, 0x02, 0x58, 0x03, 0x20, 0x03, 0xE8, 0x02, 0x02,
+0x02, 0x02, 0x02, 0x02, 0x03, 0x03, 0x04, 0x04, 0x05, 0x07, 0x02, 0x03, 0x04, 0x0A, 0x0C, 0x0E,
+0x10, 0x12, 0x05, 0x07, 0x07, 0x08, 0x0B, 0x12, 0x24, 0x3C, 0x01, 0x01, 0x01, 0x01, 0x01, 0x02,
+0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x05, 0x06,
+0x07, 0x08, 0x09, 0x0A, 0x0B, 0x0C, 0x20, 0x1E, 0x1C, 0x18, 0x10, 0x18, 0x00, 0x00, 0x00, 0x00,
+0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+0xBB, 0x01, 0x0C, 0xE5, 0x82, 0x29, 0xF5, 0x82, 0xE5, 0x83, 0x3A, 0xF5, 0x83, 0xE0, 0x22, 0x50,
+0x06, 0xE9, 0x25, 0x82, 0xF8, 0xE6, 0x22, 0xBB, 0xFE, 0x06, 0xE9, 0x25, 0x82, 0xF8, 0xE2, 0x22,
+0xE5, 0x82, 0x29, 0xF5, 0x82, 0xE5, 0x83, 0x3A, 0xF5, 0x83, 0xE4, 0x93, 0x22, 0xBB, 0x01, 0x06,
+0x89, 0x82, 0x8A, 0x83, 0xF0, 0x22, 0x50, 0x02, 0xF7, 0x22, 0xBB, 0xFE, 0x01, 0xF3, 0x22, 0xF8,
+0xBB, 0x01, 0x0D, 0xE5, 0x82, 0x29, 0xF5, 0x82, 0xE5, 0x83, 0x3A, 0xF5, 0x83, 0xE8, 0xF0, 0x22,
+0x50, 0x06, 0xE9, 0x25, 0x82, 0xC8, 0xF6, 0x22, 0xBB, 0xFE, 0x05, 0xE9, 0x25, 0x82, 0xC8, 0xF2,
+0x22, 0xC5, 0xF0, 0xF8, 0xA3, 0xE0, 0x28, 0xF0, 0xC5, 0xF0, 0xF8, 0xE5, 0x82, 0x15, 0x82, 0x70,
+0x02, 0x15, 0x83, 0xE0, 0x38, 0xF0, 0x22, 0xBB, 0x01, 0x0A, 0x89, 0x82, 0x8A, 0x83, 0xE0, 0xF5,
+0xF0, 0xA3, 0xE0, 0x22, 0x50, 0x06, 0x87, 0xF0, 0x09, 0xE7, 0x19, 0x22, 0xBB, 0xFE, 0x07, 0xE3,
+0xF5, 0xF0, 0x09, 0xE3, 0x19, 0x22, 0x89, 0x82, 0x8A, 0x83, 0xE4, 0x93, 0xF5, 0xF0, 0x74, 0x01,
+0x93, 0x22, 0xBB, 0x01, 0x10, 0xE5, 0x82, 0x29, 0xF5, 0x82, 0xE5, 0x83, 0x3A, 0xF5, 0x83, 0xE0,
+0xF5, 0xF0, 0xA3, 0xE0, 0x22, 0x50, 0x09, 0xE9, 0x25, 0x82, 0xF8, 0x86, 0xF0, 0x08, 0xE6, 0x22,
+0xBB, 0xFE, 0x0A, 0xE9, 0x25, 0x82, 0xF8, 0xE2, 0xF5, 0xF0, 0x08, 0xE2, 0x22, 0xE5, 0x83, 0x2A,
+0xF5, 0x83, 0xE9, 0x93, 0xF5, 0xF0, 0xA3, 0xE9, 0x93, 0x22, 0xBB, 0x01, 0x0A, 0x89, 0x82, 0x8A,
+0x83, 0xF0, 0xE5, 0xF0, 0xA3, 0xF0, 0x22, 0x50, 0x06, 0xF7, 0x09, 0xA7, 0xF0, 0x19, 0x22, 0xBB,
+0xFE, 0x06, 0xF3, 0xE5, 0xF0, 0x09, 0xF3, 0x19, 0x22, 0xF8, 0xBB, 0x01, 0x11, 0xE5, 0x82, 0x29,
+0xF5, 0x82, 0xE5, 0x83, 0x3A, 0xF5, 0x83, 0xE8, 0xF0, 0xE5, 0xF0, 0xA3, 0xF0, 0x22, 0x50, 0x09,
+0xE9, 0x25, 0x82, 0xC8, 0xF6, 0x08, 0xA6, 0xF0, 0x22, 0xBB, 0xFE, 0x09, 0xE9, 0x25, 0x82, 0xC8,
+0xF2, 0xE5, 0xF0, 0x08, 0xF2, 0x22, 0xEF, 0x4B, 0xFF, 0xEE, 0x4A, 0xFE, 0xED, 0x49, 0xFD, 0xEC,
+0x48, 0xFC, 0x22, 0xE0, 0xFC, 0xA3, 0xE0, 0xFD, 0xA3, 0xE0, 0xFE, 0xA3, 0xE0, 0xFF, 0x22, 0xA4,
+0x25, 0x82, 0xF5, 0x82, 0xE5, 0xF0, 0x35, 0x83, 0xF5, 0x83, 0x22, 0xE0, 0xFB, 0xA3, 0xE0, 0xFA,
+0xA3, 0xE0, 0xF9, 0x22, 0xF8, 0xE0, 0xFB, 0xA3, 0xA3, 0xE0, 0xF9, 0x25, 0xF0, 0xF0, 0xE5, 0x82,
+0x15, 0x82, 0x70, 0x02, 0x15, 0x83, 0xE0, 0xFA, 0x38, 0xF0, 0x22, 0xEB, 0xF0, 0xA3, 0xEA, 0xF0,
+0xA3, 0xE9, 0xF0, 0x22, 0xD0, 0x83, 0xD0, 0x82, 0xF8, 0xE4, 0x93, 0x70, 0x12, 0x74, 0x01, 0x93,
+0x70, 0x0D, 0xA3, 0xA3, 0x93, 0xF8, 0x74, 0x01, 0x93, 0xF5, 0x82, 0x88, 0x83, 0xE4, 0x73, 0x74,
+0x02, 0x93, 0x68, 0x60, 0xEF, 0xA3, 0xA3, 0xA3, 0x80, 0xDF, 0xD0, 0x83, 0xD0, 0x82, 0xF8, 0xE4,
+0x93, 0x70, 0x12, 0x74, 0x01, 0x93, 0x70, 0x0D, 0xA3, 0xA3, 0x93, 0xF8, 0x74, 0x01, 0x93, 0xF5,
+0x82, 0x88, 0x83, 0xE4, 0x73, 0x74, 0x02, 0x93, 0xB5, 0xF0, 0x06, 0x74, 0x03, 0x93, 0x68, 0x60,
+0xE9, 0xA3, 0xA3, 0xA3, 0xA3, 0x80, 0xD8, 0xE4, 0x90, 0x8A, 0xC5, 0xF0, 0xE5, 0x24, 0x70, 0x03,
+0x02, 0x44, 0x9D, 0xE5, 0x21, 0x64, 0x01, 0x60, 0x03, 0x02, 0x44, 0x9D, 0xE5, 0x24, 0x14, 0x60,
+0x29, 0x24, 0xFD, 0x60, 0x25, 0x24, 0x02, 0x24, 0xFB, 0x50, 0x02, 0x80, 0x23, 0x90, 0x8B, 0x0B,
+0xE0, 0x14, 0xF0, 0xE0, 0x60, 0x04, 0xA3, 0xE0, 0x60, 0x16, 0x90, 0x8B, 0x0B, 0xE0, 0x70, 0x0A,
+0x90, 0x8B, 0x19, 0xE0, 0x90, 0x8B, 0x0B, 0xF0, 0x80, 0x00, 0x90, 0x8A, 0xC5, 0x74, 0x01, 0xF0,
+0x90, 0x8B, 0x2C, 0xE0, 0x30, 0xE0, 0x16, 0xA3, 0xE0, 0xB4, 0x06, 0x05, 0xE4, 0x90, 0x8A, 0xC5,
+0xF0, 0xE4, 0xFF, 0x12, 0x4D, 0xE0, 0xEF, 0x70, 0x04, 0x90, 0x8A, 0xC5, 0xF0, 0x90, 0x8A, 0xC5,
+0xE0, 0x60, 0x4A, 0x43, 0x25, 0x10, 0xE4, 0x90, 0x8B, 0x3D, 0xF0, 0x90, 0x8B, 0x0C, 0xE0, 0x75,
+0xF0, 0x03, 0xA4, 0xFF, 0x90, 0x8B, 0x15, 0xE0, 0x2F, 0x90, 0x8B, 0x3E, 0xF0, 0xE4, 0xFB, 0xFD,
+0x7F, 0x54, 0x7E, 0x01, 0x12, 0x4B, 0x6C, 0x90, 0x01, 0x57, 0x74, 0x05, 0xF0, 0xE5, 0x22, 0x54,
+0x0F, 0xC3, 0x94, 0x04, 0x50, 0x07, 0x7D, 0x01, 0x7F, 0x04, 0x12, 0x45, 0xA2, 0x90, 0x8B, 0x2C,
+0xE0, 0x30, 0xE0, 0x09, 0x12, 0x7D, 0xC1, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x22, 0xE4, 0xF5,
+0x25, 0xF5, 0x24, 0x75, 0x23, 0x0C, 0x75, 0x22, 0x0C, 0x90, 0x8B, 0x1A, 0xF0, 0x90, 0x8B, 0x18,
+0xF0, 0x90, 0x8B, 0x17, 0xF0, 0x90, 0x8B, 0x19, 0x04, 0xF0, 0x90, 0x8B, 0x0B, 0xF0, 0xE4, 0x90,
+0x8B, 0x1B, 0xF0, 0x90, 0x8B, 0x0D, 0xF0, 0x90, 0x8B, 0x15, 0x74, 0x05, 0xF0, 0xE4, 0x90, 0x8B,
+0x0C, 0xF0, 0x90, 0x8B, 0x13, 0xF0, 0xA3, 0x74, 0x03, 0xF0, 0x90, 0x8B, 0x10, 0xF0, 0xA3, 0x74,
+0x05, 0xF0, 0x90, 0x8B, 0x0F, 0x74, 0x14, 0xF0, 0x90, 0x8B, 0x16, 0x74, 0x05, 0xF0, 0xE4, 0x90,
+0x8B, 0x0E, 0xF0, 0x90, 0x8B, 0x0A, 0xF0, 0x90, 0x8B, 0x08, 0xF0, 0x90, 0x8B, 0x12, 0xF0, 0x22,
+0x7F, 0x00, 0x22, 0x02, 0x45, 0x03, 0x02, 0x45, 0x06, 0x8E, 0x64, 0x8F, 0x65, 0xAD, 0x65, 0xAC,
+0x64, 0xAF, 0x63, 0x12, 0x4A, 0x5B, 0xAF, 0x65, 0xAE, 0x64, 0x90, 0x04, 0x80, 0xE0, 0x54, 0x0F,
+0xFD, 0xAC, 0x07, 0x74, 0x11, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x44, 0x01,
+0xF0, 0x74, 0x11, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x54, 0xFB, 0xF0, 0xAC,
+0x07, 0x74, 0x16, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x44, 0xFA, 0xF0, 0x74,
+0x15, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x44, 0x1F, 0xF0, 0xAC, 0x07, 0x74,
+0x06, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x44, 0x0F, 0xF0, 0x90, 0x04, 0x53,
+0xE4, 0xF0, 0x90, 0x04, 0x52, 0xF0, 0x90, 0x04, 0x51, 0x74, 0xFF, 0xF0, 0x90, 0x04, 0x50, 0x74,
+0xFD, 0xF0, 0x74, 0x14, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x54, 0xC0, 0x4D,
+0xFD, 0x74, 0x14, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xED, 0xF0, 0x22, 0x7D, 0x01,
+0x7F, 0x0C, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x8F, 0x67, 0x8D, 0x68, 0xE5, 0x67, 0x54,
+0x0F, 0xFF, 0xE5, 0x22, 0x54, 0x0F, 0x6F, 0x60, 0x72, 0xE5, 0x67, 0x30, 0xE2, 0x30, 0xE5, 0x22,
+0x20, 0xE2, 0x05, 0x7F, 0x01, 0x12, 0x4A, 0xB2, 0xE5, 0x22, 0x30, 0xE3, 0x10, 0xE5, 0x67, 0x20,
+0xE3, 0x0B, 0x12, 0x49, 0xD5, 0xEF, 0x60, 0x53, 0x12, 0x4A, 0xCC, 0x80, 0x4E, 0xE5, 0x22, 0x20,
+0xE3, 0x49, 0xE5, 0x67, 0x30, 0xE3, 0x44, 0xAF, 0x68, 0x12, 0x4A, 0x7C, 0x80, 0x3D, 0xE5, 0x22,
+0x54, 0x0F, 0xFF, 0xBF, 0x0C, 0x0E, 0xE5, 0x67, 0x20, 0xE3, 0x09, 0x12, 0x49, 0xD5, 0xEF, 0x60,
+0x2A, 0x12, 0x4A, 0xCC, 0xE5, 0x22, 0x54, 0x0F, 0xFF, 0xBF, 0x04, 0x0E, 0xE5, 0x67, 0x20, 0xE2,
+0x09, 0x12, 0x49, 0x93, 0xEF, 0x60, 0x14, 0x12, 0x4A, 0x32, 0xE5, 0x22, 0x54, 0x0F, 0xFF, 0xBF,
+0x02, 0x09, 0x12, 0x45, 0x00, 0xEF, 0x60, 0x03, 0x12, 0x4B, 0x10, 0xD0, 0xD0, 0x92, 0xAF, 0x22,
+0x02, 0x46, 0x6E, 0x02, 0x50, 0xC6, 0xE4, 0x93, 0xA3, 0xF8, 0xE4, 0x93, 0xA3, 0x40, 0x03, 0xF6,
+0x80, 0x01, 0xF2, 0x08, 0xDF, 0xF4, 0x80, 0x29, 0xE4, 0x93, 0xA3, 0xF8, 0x54, 0x07, 0x24, 0x0C,
+0xC8, 0xC3, 0x33, 0xC4, 0x54, 0x0F, 0x44, 0x20, 0xC8, 0x83, 0x40, 0x04, 0xF4, 0x56, 0x80, 0x01,
+0x46, 0xF6, 0xDF, 0xE4, 0x80, 0x0B, 0x01, 0x02, 0x04, 0x08, 0x10, 0x20, 0x40, 0x80, 0x90, 0x4B,
+0x23, 0xE4, 0x7E, 0x01, 0x93, 0x60, 0xBC, 0xA3, 0xFF, 0x54, 0x3F, 0x30, 0xE5, 0x09, 0x54, 0x1F,
+0xFE, 0xE4, 0x93, 0xA3, 0x60, 0x01, 0x0E, 0xCF, 0x54, 0xC0, 0x25, 0xE0, 0x60, 0xA8, 0x40, 0xB8,
+0xE4, 0x93, 0xA3, 0xFA, 0xE4, 0x93, 0xA3, 0xF8, 0xE4, 0x93, 0xA3, 0xC8, 0xC5, 0x82, 0xC8, 0xCA,
+0xC5, 0x83, 0xCA, 0xF0, 0xA3, 0xC8, 0xC5, 0x82, 0xC8, 0xCA, 0xC5, 0x83, 0xCA, 0xDF, 0xE9, 0xDE,
+0xE7, 0x80, 0xBE, 0xE5, 0x21, 0x64, 0x01, 0x70, 0x67, 0xE5, 0x24, 0x60, 0x63, 0xE5, 0x24, 0x64,
+0x02, 0x60, 0x06, 0xE5, 0x24, 0x64, 0x05, 0x70, 0x27, 0x90, 0x06, 0xAB, 0xE0, 0x90, 0x8B, 0x0B,
+0xF0, 0x90, 0x06, 0xAA, 0xE0, 0x90, 0x8B, 0x19, 0xF0, 0x90, 0x8B, 0x0B, 0xE0, 0x70, 0x07, 0x90,
+0x8B, 0x19, 0xE0, 0xFF, 0x80, 0x05, 0x90, 0x8B, 0x0B, 0xE0, 0xFF, 0x90, 0x8B, 0x0B, 0xEF, 0xF0,
+0x90, 0x8B, 0x0D, 0xE0, 0x60, 0x02, 0xE4, 0xF0, 0xE4, 0x90, 0x8B, 0x0C, 0xF0, 0x90, 0x05, 0x58,
+0x74, 0x03, 0xF0, 0x90, 0x01, 0x57, 0xE4, 0xF0, 0x90, 0x01, 0x3C, 0x74, 0x02, 0xF0, 0x53, 0x25,
+0xFD, 0x53, 0x25, 0xEF, 0xE5, 0x24, 0x14, 0x24, 0xFD, 0x50, 0x02, 0x80, 0x03, 0x12, 0x47, 0x8E,
+0x22, 0xEF, 0x64, 0x01, 0x70, 0x35, 0x7D, 0x78, 0x7F, 0x02, 0x12, 0x36, 0x75, 0x7D, 0x02, 0x7F,
+0x03, 0x12, 0x36, 0x75, 0x90, 0x01, 0x57, 0xE4, 0xF0, 0x90, 0x01, 0x3C, 0x74, 0x02, 0xF0, 0x12,
+0x45, 0x9E, 0x90, 0x8B, 0x2C, 0xE0, 0x30, 0xE0, 0x03, 0x12, 0x7D, 0xC1, 0x90, 0x06, 0x04, 0xE0,
+0x54, 0x7F, 0xF0, 0x90, 0x06, 0x0A, 0xE0, 0x54, 0xF8, 0xF0, 0x22, 0x90, 0x01, 0x36, 0x74, 0x7B,
+0xF0, 0xA3, 0x74, 0x02, 0xF0, 0x7D, 0x7B, 0xFF, 0x12, 0x36, 0xE6, 0x7D, 0x02, 0x7F, 0x03, 0x12,
+0x36, 0xE6, 0x90, 0x06, 0x04, 0xE0, 0x44, 0x80, 0xF0, 0x90, 0x06, 0x0A, 0xE0, 0x44, 0x07, 0xF0,
+0x12, 0x4B, 0x4F, 0xE5, 0x21, 0x20, 0xE0, 0x05, 0xE4, 0x90, 0x8B, 0x0D, 0xF0, 0x22, 0xE4, 0x90,
+0x8A, 0xC5, 0xF0, 0x90, 0x06, 0xA9, 0xE0, 0x90, 0x8A, 0xC5, 0xF0, 0xE0, 0x54, 0xC0, 0x70, 0x09,
+0x53, 0x25, 0xFE, 0x53, 0x25, 0xFD, 0x12, 0x4A, 0xFC, 0x90, 0x8A, 0xC5, 0xE0, 0x30, 0xE6, 0x15,
+0x43, 0x25, 0x01, 0x90, 0x8B, 0x1A, 0xE0, 0x64, 0x02, 0x60, 0x05, 0x12, 0x4A, 0x97, 0x80, 0x08,
+0x12, 0x49, 0x49, 0x80, 0x03, 0x53, 0x25, 0xFE, 0x90, 0x8A, 0xC5, 0xE0, 0x30, 0xE7, 0x27, 0x43,
+0x25, 0x02, 0xE4, 0x90, 0x8B, 0x3D, 0xF0, 0x90, 0x8B, 0x11, 0xE0, 0x90, 0x8B, 0x3E, 0xF0, 0xE4,
+0xFB, 0xFD, 0x7F, 0x54, 0x7E, 0x01, 0x12, 0x4B, 0x6C, 0x90, 0x01, 0x57, 0x74, 0x05, 0xF0, 0x90,
+0x8B, 0x1B, 0x74, 0x01, 0xF0, 0x22, 0x53, 0x25, 0xFD, 0x22, 0x90, 0x8A, 0xDE, 0x12, 0x43, 0x8B,
+0x12, 0x4B, 0x43, 0x90, 0x8A, 0xDE, 0x12, 0x43, 0x6B, 0x12, 0x29, 0xD9, 0xF5, 0x24, 0x14, 0x60,
+0x0E, 0x14, 0x60, 0x1F, 0x14, 0x60, 0x31, 0x24, 0x03, 0x70, 0x44, 0x7F, 0x01, 0x80, 0x3D, 0x90,
+0x8A, 0xDE, 0x12, 0x43, 0x6B, 0x90, 0x00, 0x02, 0x12, 0x42, 0x20, 0xFD, 0xE4, 0xFF, 0x12, 0x4A,
+0x07, 0x80, 0x29, 0x90, 0x8A, 0xDE, 0x12, 0x43, 0x6B, 0x90, 0x00, 0x02, 0x12, 0x42, 0x20, 0xFD,
+0x7F, 0x01, 0x12, 0x4A, 0x07, 0x1F, 0x80, 0x14, 0x90, 0x8A, 0xDE, 0x12, 0x43, 0x6B, 0x90, 0x00,
+0x02, 0x12, 0x42, 0x20, 0xFD, 0x7F, 0x02, 0x12, 0x4A, 0x07, 0xE4, 0xFF, 0x12, 0x47, 0x21, 0x22,
+0xE4, 0x90, 0x8A, 0xCB, 0xF0, 0xE5, 0x24, 0x60, 0x49, 0x90, 0x8B, 0x1B, 0xE0, 0x60, 0x0D, 0xE4,
+0xF0, 0x53, 0x25, 0xFD, 0xE5, 0x25, 0x54, 0x07, 0x70, 0x38, 0x80, 0x33, 0x90, 0x8B, 0x0C, 0xE0,
+0x04, 0xF0, 0x53, 0x25, 0xEF, 0x90, 0x8A, 0xCB, 0xE0, 0xFF, 0x90, 0x8B, 0x10, 0xE0, 0x2F, 0xFF,
+0xE4, 0x33, 0xFE, 0x90, 0x8B, 0x0C, 0xE0, 0xD3, 0x9F, 0xEE, 0x64, 0x80, 0xF8, 0x74, 0x80, 0x98,
+0x40, 0x0D, 0xE5, 0x21, 0xB4, 0x01, 0x0B, 0xA3, 0xE0, 0x70, 0x07, 0xE0, 0x04, 0xF0, 0x22, 0x12,
+0x4A, 0xFC, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x8F, 0x63, 0x90, 0x04, 0x1D, 0xE0,
+0x60, 0x24, 0x90, 0x05, 0x22, 0xE0, 0xF5, 0x66, 0x74, 0xFF, 0xF0, 0x12, 0x7E, 0x9A, 0xBF, 0x01,
+0x0D, 0x90, 0x8A, 0xF9, 0xE0, 0xFF, 0x7D, 0x01, 0x12, 0x5F, 0xFD, 0x12, 0x45, 0x09, 0x90, 0x05,
+0x22, 0xE5, 0x66, 0xF0, 0x80, 0x0D, 0x90, 0x8A, 0xF9, 0xE0, 0xFF, 0x7D, 0x01, 0x12, 0x5F, 0xFD,
+0x12, 0x45, 0x09, 0x90, 0x04, 0x1F, 0x74, 0x20, 0xF0, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xE5, 0x24,
+0x14, 0x24, 0xFD, 0x50, 0x02, 0x80, 0x41, 0x90, 0x8B, 0x1A, 0xE0, 0x60, 0x2B, 0x12, 0x45, 0x9E,
+0xE4, 0x90, 0x8B, 0x3D, 0xF0, 0x90, 0x8B, 0x0F, 0xE0, 0x90, 0x8B, 0x3E, 0xF0, 0xE4, 0xFB, 0xFD,
+0x7F, 0x58, 0x7E, 0x01, 0x12, 0x4B, 0x6C, 0x90, 0x01, 0x5B, 0x74, 0x05, 0xF0, 0x90, 0x06, 0x92,
+0x74, 0x01, 0xF0, 0x90, 0x8B, 0x18, 0xF0, 0x22, 0xE5, 0x22, 0x54, 0x0F, 0xC3, 0x94, 0x04, 0x50,
+0x07, 0x7D, 0x01, 0x7F, 0x04, 0x12, 0x45, 0xA2, 0x22, 0x90, 0x01, 0x5F, 0xE4, 0xF0, 0x90, 0x01,
+0x3C, 0x74, 0x08, 0xF0, 0xE4, 0x90, 0x8B, 0x3D, 0xF0, 0x90, 0x8B, 0x0F, 0xE0, 0x90, 0x8B, 0x3E,
+0xF0, 0xE4, 0xFB, 0xFD, 0x7F, 0x5C, 0x7E, 0x01, 0x12, 0x4B, 0x6C, 0x90, 0x01, 0x5F, 0x74, 0x05,
+0xF0, 0x90, 0x06, 0x92, 0x74, 0x02, 0xF0, 0x90, 0x8B, 0x17, 0x14, 0xF0, 0xE5, 0x22, 0x54, 0x0F,
+0xC3, 0x94, 0x0C, 0x50, 0x0D, 0x12, 0x45, 0x9E, 0x90, 0x8B, 0x2C, 0xE0, 0x30, 0xE0, 0x03, 0x12,
+0x7D, 0xC1, 0x22, 0x12, 0x4B, 0x34, 0xEF, 0x64, 0x01, 0x70, 0x37, 0xE5, 0x25, 0x54, 0x03, 0x70,
+0x31, 0xE5, 0x23, 0x54, 0x0F, 0xD3, 0x94, 0x02, 0x50, 0x28, 0xE5, 0x25, 0x20, 0xE2, 0x23, 0xE5,
+0x25, 0x20, 0xE4, 0x1E, 0x90, 0x8B, 0x0D, 0xE0, 0x70, 0x18, 0x90, 0x8B, 0x12, 0xE0, 0x70, 0x12,
+0xE5, 0x26, 0x70, 0x0E, 0x90, 0x01, 0xB9, 0xE4, 0xF0, 0x90, 0x01, 0xB8, 0x74, 0x04, 0xF0, 0x7F,
+0x01, 0x22, 0x7F, 0x00, 0x22, 0x12, 0x4B, 0x34, 0xEF, 0x64, 0x01, 0x70, 0x27, 0x90, 0x8B, 0x18,
+0xE0, 0x70, 0x21, 0x90, 0x8B, 0x17, 0xE0, 0x70, 0x1B, 0xE5, 0x23, 0x54, 0x0F, 0xD3, 0x94, 0x04,
+0x50, 0x12, 0xE5, 0x26, 0x70, 0x0E, 0x90, 0x01, 0xB9, 0xE4, 0xF0, 0x90, 0x01, 0xB8, 0x74, 0x08,
+0xF0, 0x7F, 0x01, 0x22, 0x7F, 0x00, 0x22, 0xEF, 0x24, 0xFE, 0x60, 0x0B, 0x04, 0x70, 0x22, 0x90,
+0x8B, 0x19, 0x74, 0x01, 0xF0, 0x80, 0x16, 0xED, 0x70, 0x0A, 0x90, 0x8B, 0x16, 0xE0, 0x90, 0x8B,
+0x19, 0xF0, 0x80, 0x05, 0x90, 0x8B, 0x19, 0xED, 0xF0, 0x90, 0x8B, 0x19, 0xE0, 0x90, 0x8B, 0x0B,
+0xF0, 0x22, 0x90, 0x01, 0x37, 0x74, 0x02, 0xF0, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x12, 0x7E,
+0x9A, 0xEF, 0x70, 0x06, 0x90, 0x01, 0xC8, 0x74, 0xFD, 0xF0, 0x7D, 0x02, 0x7F, 0x03, 0x12, 0x36,
+0xE6, 0x12, 0x7C, 0x50, 0x53, 0x22, 0xF0, 0x43, 0x22, 0x02, 0x22, 0xEF, 0x60, 0x0F, 0x74, 0x21,
+0x2D, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x44, 0x10, 0xF0, 0x22, 0x74, 0x21, 0x2D,
+0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x54, 0xEF, 0xF0, 0x22, 0x90, 0x06, 0x04, 0xE0,
+0x54, 0xBF, 0xF0, 0xEF, 0x60, 0x0A, 0xE5, 0x21, 0xB4, 0x01, 0x05, 0xE4, 0xFF, 0x12, 0x48, 0xB3,
+0x53, 0x22, 0xF0, 0x43, 0x22, 0x0C, 0x22, 0x90, 0x04, 0x1D, 0xE0, 0x70, 0x14, 0x90, 0x8A, 0xF8,
+0xE0, 0xFF, 0xE4, 0xFD, 0x12, 0x5F, 0xFD, 0x8E, 0x69, 0x8F, 0x6A, 0x90, 0x04, 0x1F, 0x74, 0x20,
+0xF0, 0x22, 0x90, 0x8B, 0x52, 0xEF, 0xF0, 0x12, 0x7D, 0x42, 0x90, 0x8B, 0x52, 0xE0, 0x60, 0x05,
+0x90, 0x05, 0x22, 0xE4, 0xF0, 0x53, 0x22, 0xF0, 0x43, 0x22, 0x04, 0x22, 0x90, 0x06, 0x04, 0xE0,
+0x44, 0x40, 0xF0, 0xE5, 0x21, 0xB4, 0x01, 0x05, 0x7F, 0x01, 0x12, 0x48, 0xB3, 0x53, 0x22, 0xF0,
+0x43, 0x22, 0x04, 0x22, 0xE5, 0x23, 0x30, 0xE6, 0x12, 0xE5, 0x23, 0x54, 0x0F, 0xFF, 0x90, 0x01,
+0x2F, 0xE0, 0x54, 0x80, 0x4F, 0x64, 0x80, 0xF0, 0x53, 0x23, 0xBF, 0x22, 0x90, 0x8B, 0x2C, 0xE0,
+0x30, 0xE0, 0x05, 0xAF, 0x23, 0x02, 0x7E, 0x06, 0x7D, 0x01, 0xAF, 0x23, 0x12, 0x45, 0xA2, 0x22,
+0x53, 0x22, 0xF0, 0x43, 0x22, 0x01, 0x12, 0x4B, 0x5A, 0x12, 0x4B, 0x5B, 0x53, 0x22, 0xF0, 0x43,
+0x22, 0x02, 0x22, 0x41, 0x8A, 0xF6, 0x00, 0x41, 0x8B, 0x05, 0x00, 0x41, 0x8B, 0x51, 0x00, 0x41,
+0x8B, 0x53, 0x00, 0x00, 0x90, 0x04, 0x1B, 0xE0, 0x54, 0x7F, 0x64, 0x7F, 0x7F, 0x01, 0x60, 0x02,
+0x7F, 0x00, 0x22, 0xE4, 0x90, 0x8B, 0x1B, 0xF0, 0x90, 0x8B, 0x0C, 0xF0, 0xF5, 0x25, 0x22, 0x90,
+0x8B, 0x13, 0xE0, 0xA3, 0xE0, 0x90, 0x05, 0x58, 0xF0, 0x22, 0x22, 0x22, 0xF0, 0x90, 0x8B, 0x0F,
+0xE0, 0x90, 0x8B, 0x3E, 0xF0, 0xE4, 0xFB, 0xFD, 0x7F, 0x58, 0x7E, 0x01, 0xD3, 0x10, 0xAF, 0x01,
+0xC3, 0xC0, 0xD0, 0x90, 0x8B, 0x3D, 0xE0, 0xFB, 0xA3, 0xE0, 0xF5, 0x44, 0xE4, 0xF5, 0x45, 0x12,
+0x35, 0xAB, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xC0, 0xE0, 0xC0, 0xF0, 0xC0, 0x83, 0xC0, 0x82, 0xC0,
+0xD0, 0x75, 0xD0, 0x00, 0xC0, 0x00, 0xC0, 0x01, 0xC0, 0x02, 0xC0, 0x03, 0xC0, 0x04, 0xC0, 0x05,
+0xC0, 0x06, 0xC0, 0x07, 0x75, 0x0E, 0x00, 0x90, 0x01, 0xC4, 0x74, 0x87, 0xF0, 0x74, 0x4B, 0xA3,
+0xF0, 0x53, 0x91, 0xDF, 0x90, 0x01, 0x3C, 0xE0, 0x55, 0x30, 0xF5, 0x34, 0xA3, 0xE0, 0x55, 0x31,
+0xF5, 0x35, 0xA3, 0xE0, 0x55, 0x32, 0xF5, 0x36, 0xA3, 0xE0, 0x55, 0x33, 0xF5, 0x37, 0xE5, 0x34,
+0x30, 0xE0, 0x51, 0x90, 0x01, 0x3C, 0x74, 0x01, 0xF0, 0x90, 0x8B, 0x32, 0xE0, 0x30, 0xE0, 0x1F,
+0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x18, 0x90, 0x8B, 0x34, 0xE4, 0xF0, 0x90, 0x8B, 0x33, 0xE0,
+0x64, 0x03, 0x60, 0x0B, 0x7F, 0x01, 0xB1, 0xE0, 0xEF, 0x70, 0x04, 0x7F, 0x02, 0xD1, 0x89, 0x90,
+0x8B, 0x2C, 0xE0, 0xFF, 0x30, 0xE0, 0x1D, 0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x16, 0x90, 0x8B,
+0x2E, 0xE4, 0xF0, 0x90, 0x8B, 0x2D, 0xE0, 0x64, 0x06, 0x60, 0x09, 0xE4, 0xFF, 0xB1, 0xE0, 0xEF,
+0x70, 0x02, 0xD1, 0x56, 0xE5, 0x34, 0x30, 0xE1, 0x08, 0x90, 0x01, 0x3C, 0x74, 0x02, 0xF0, 0x11,
+0x60, 0xE5, 0x34, 0x30, 0xE2, 0x28, 0x90, 0x01, 0x3C, 0x74, 0x04, 0xF0, 0x90, 0x06, 0x92, 0xE0,
+0x30, 0xE0, 0x14, 0x90, 0x8B, 0x3D, 0xE4, 0x71, 0x5C, 0x90, 0x01, 0x5B, 0x74, 0x05, 0xF0, 0x90,
+0x06, 0x92, 0x74, 0x01, 0xF0, 0x80, 0x07, 0x90, 0x8B, 0x18, 0xE4, 0xF0, 0x51, 0xFC, 0xE5, 0x34,
+0x30, 0xE3, 0x38, 0x90, 0x01, 0x3C, 0x74, 0x08, 0xF0, 0x90, 0x06, 0x92, 0xE0, 0x30, 0xE1, 0x24,
+0x90, 0x8B, 0x3D, 0xE4, 0xF0, 0x90, 0x8B, 0x0F, 0xE0, 0x90, 0x8B, 0x3E, 0xF0, 0xE4, 0xFB, 0xFD,
+0x7F, 0x5C, 0x7E, 0x01, 0x71, 0x6C, 0x90, 0x01, 0x5F, 0x74, 0x05, 0xF0, 0x90, 0x06, 0x92, 0x74,
+0x02, 0xF0, 0x80, 0x07, 0x90, 0x8B, 0x17, 0xE4, 0xF0, 0x51, 0xFC, 0xE5, 0x34, 0x30, 0xE4, 0x09,
+0x90, 0x01, 0x3C, 0x74, 0x10, 0xF0, 0x12, 0x51, 0xC9, 0xE5, 0x34, 0x30, 0xE5, 0x06, 0x90, 0x01,
+0x3C, 0x74, 0x20, 0xF0, 0xE5, 0x35, 0x30, 0xE0, 0x10, 0x90, 0x01, 0x3D, 0x74, 0x01, 0xF0, 0x90,
+0x00, 0x83, 0xE0, 0xF5, 0x23, 0x51, 0xE4, 0x51, 0xFC, 0xE5, 0x35, 0x30, 0xE2, 0x06, 0x90, 0x01,
+0x3D, 0x74, 0x04, 0xF0, 0xE5, 0x35, 0x30, 0xE4, 0x1B, 0x90, 0x01, 0x3D, 0x74, 0x10, 0xF0, 0x90,
+0x8B, 0x05, 0xE0, 0x60, 0x0F, 0xE4, 0xF0, 0x90, 0x05, 0x53, 0xE0, 0x44, 0x01, 0xF0, 0x90, 0x05,
+0xFD, 0xE0, 0x04, 0xF0, 0xE5, 0x36, 0x30, 0xE0, 0x75, 0x90, 0x01, 0x3E, 0x74, 0x01, 0xF0, 0x90,
+0x8B, 0x32, 0xE0, 0x30, 0xE0, 0x18, 0x90, 0x8B, 0x36, 0xE4, 0xF0, 0x90, 0x8B, 0x33, 0xE0, 0x64,
+0x03, 0x60, 0x0B, 0x7F, 0x01, 0xB1, 0xE0, 0xEF, 0x60, 0x04, 0x7F, 0x01, 0xD1, 0x89, 0x90, 0x8B,
+0x2C, 0xE0, 0x30, 0xE0, 0x49, 0x90, 0x8B, 0x30, 0xE4, 0xF0, 0xFF, 0xB1, 0xE0, 0xEF, 0x60, 0x3E,
+0x12, 0x65, 0x5F, 0x90, 0x8B, 0x2D, 0xE0, 0xFF, 0x64, 0x06, 0x60, 0x32, 0xEF, 0xB4, 0x04, 0x02,
+0x80, 0x07, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x05, 0x04, 0xE4, 0xFF, 0x80, 0x14, 0x90, 0x8B, 0x2D,
+0xE0, 0xB4, 0x03, 0x04, 0x7F, 0x01, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x02, 0x05, 0x7F,
+0x01, 0x12, 0x65, 0x82, 0x7D, 0x01, 0xAF, 0x23, 0x12, 0x45, 0xA2, 0x12, 0x7D, 0xC1, 0xE5, 0x36,
+0x30, 0xE1, 0x47, 0x90, 0x01, 0x3E, 0x74, 0x02, 0xF0, 0x90, 0x8B, 0x32, 0xE0, 0x30, 0xE0, 0x19,
+0x90, 0x8B, 0x36, 0x74, 0x01, 0xF0, 0x90, 0x8B, 0x33, 0xE0, 0x64, 0x03, 0x60, 0x0B, 0x7F, 0x01,
+0xB1, 0xE0, 0xEF, 0x70, 0x04, 0x7F, 0x02, 0xD1, 0x89, 0x90, 0x8B, 0x2C, 0xE0, 0x30, 0xE0, 0x1A,
+0x90, 0x8B, 0x30, 0x74, 0x01, 0xF0, 0x12, 0x7E, 0x2B, 0x90, 0x8B, 0x2D, 0xE0, 0x64, 0x06, 0x60,
+0x09, 0xE4, 0xFF, 0xB1, 0xE0, 0xEF, 0x70, 0x02, 0xD1, 0x56, 0x74, 0x87, 0x04, 0x90, 0x01, 0xC4,
+0xF0, 0x74, 0x4B, 0xA3, 0xF0, 0xD0, 0x07, 0xD0, 0x06, 0xD0, 0x05, 0xD0, 0x04, 0xD0, 0x03, 0xD0,
+0x02, 0xD0, 0x01, 0xD0, 0x00, 0xD0, 0xD0, 0xD0, 0x82, 0xD0, 0x83, 0xD0, 0xF0, 0xD0, 0xE0, 0x32,
+0xEF, 0x64, 0x01, 0x70, 0x3D, 0x90, 0x8B, 0x35, 0xE0, 0x60, 0x03, 0x7F, 0x00, 0x22, 0x90, 0x8B,
+0x08, 0xE0, 0x60, 0x03, 0x7F, 0x01, 0x22, 0x90, 0x8B, 0x34, 0xE0, 0x60, 0x03, 0x7F, 0x01, 0x22,
+0x90, 0x8B, 0x32, 0xE0, 0xFF, 0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x0B, 0xEF, 0xC4, 0x13, 0x54,
+0x07, 0x30, 0xE0, 0x03, 0x7F, 0x00, 0x22, 0x90, 0x8B, 0x36, 0xE0, 0x7F, 0x01, 0x60, 0x36, 0x7F,
+0x00, 0x22, 0x90, 0x8B, 0x2F, 0xE0, 0x60, 0x03, 0x7F, 0x00, 0x22, 0x90, 0x8B, 0x08, 0xE0, 0x60,
+0x03, 0x7F, 0x01, 0x22, 0x90, 0x8B, 0x2E, 0xE0, 0x60, 0x03, 0x7F, 0x01, 0x22, 0x90, 0x8B, 0x2C,
+0xE0, 0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x03, 0x7F, 0x00, 0x22, 0x90, 0x8B, 0x30, 0xE0, 0x7F,
+0x01, 0x60, 0x02, 0x7F, 0x00, 0x22, 0x90, 0x8B, 0x0D, 0xE0, 0x60, 0x16, 0x90, 0x8B, 0x2D, 0xE0,
+0x70, 0x04, 0x7F, 0x05, 0x80, 0x1F, 0x90, 0x8B, 0x2D, 0xE0, 0x64, 0x01, 0x70, 0x1A, 0x7F, 0x02,
+0x80, 0x13, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x01, 0x04, 0x7F, 0x03, 0x80, 0x08, 0x90, 0x8B, 0x2D,
+0xE0, 0x70, 0x05, 0x7F, 0x04, 0x12, 0x65, 0x82, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0,
+0x90, 0x8B, 0x33, 0xE0, 0x90, 0x8B, 0x55, 0xF0, 0x6F, 0x70, 0x02, 0xE1, 0x55, 0xEF, 0x14, 0x60,
+0x3B, 0x14, 0x60, 0x5F, 0x14, 0x70, 0x02, 0xE1, 0x30, 0x24, 0x03, 0x60, 0x02, 0xE1, 0x55, 0x90,
+0x8B, 0x55, 0xE0, 0xB4, 0x03, 0x04, 0xF1, 0xC2, 0xE1, 0x55, 0x90, 0x8B, 0x55, 0xE0, 0xB4, 0x02,
+0x04, 0xF1, 0xAF, 0xE1, 0x55, 0x90, 0x8B, 0x55, 0xE0, 0xB4, 0x04, 0x04, 0xF1, 0xC6, 0xE1, 0x55,
+0x90, 0x8B, 0x55, 0xE0, 0x64, 0x01, 0x70, 0x7D, 0xF1, 0xB1, 0x80, 0x79, 0x90, 0x8B, 0x55, 0xE0,
+0xFF, 0xB4, 0x03, 0x04, 0xF1, 0xCA, 0x80, 0x6D, 0xEF, 0xB4, 0x02, 0x04, 0xF1, 0xA1, 0x80, 0x65,
+0x90, 0x8B, 0x55, 0xE0, 0xFF, 0xB4, 0x04, 0x04, 0xF1, 0xD5, 0x80, 0x59, 0xEF, 0x70, 0x56, 0xF1,
+0x8E, 0x80, 0x52, 0x90, 0x8B, 0x55, 0xE0, 0xB4, 0x03, 0x05, 0x12, 0x7C, 0x41, 0x80, 0x46, 0x90,
+0x8B, 0x55, 0xE0, 0xB4, 0x01, 0x04, 0xF1, 0x72, 0x80, 0x3B, 0x90, 0x8B, 0x55, 0xE0, 0xB4, 0x04,
+0x05, 0x12, 0x7D, 0x23, 0x80, 0x2F, 0x90, 0x8B, 0x55, 0xE0, 0x70, 0x29, 0xF1, 0x70, 0x80, 0x25,
+0x90, 0x8B, 0x55, 0xE0, 0xFF, 0xB4, 0x01, 0x04, 0xF1, 0x5A, 0x80, 0x19, 0xEF, 0xB4, 0x02, 0x04,
+0xF1, 0x6B, 0x80, 0x11, 0x90, 0x8B, 0x55, 0xE0, 0xFF, 0xB4, 0x04, 0x04, 0xF1, 0x5A, 0x80, 0x05,
+0xEF, 0x70, 0x02, 0xF1, 0x67, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x90, 0x05, 0x22, 0x74, 0x6F, 0xF0,
+0x90, 0x8B, 0x33, 0x74, 0x03, 0xF0, 0x22, 0xF1, 0x8E, 0x80, 0xEF, 0x12, 0x7D, 0x42, 0x80, 0xEA,
+0xF1, 0x8E, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x12, 0x7E, 0x9A, 0xEF, 0x70, 0x06, 0x90, 0x01,
+0xC8, 0x74, 0xFD, 0xF0, 0x12, 0x7C, 0x50, 0x90, 0x8B, 0x33, 0x74, 0x02, 0xF0, 0x22, 0x90, 0x01,
+0x3E, 0x74, 0x03, 0xF0, 0xFD, 0x7F, 0x02, 0x12, 0x37, 0x00, 0x90, 0x8B, 0x33, 0x74, 0x01, 0xF0,
+0x22, 0x12, 0x7D, 0x42, 0x90, 0x05, 0x22, 0xE4, 0xF0, 0x90, 0x8B, 0x33, 0x04, 0xF0, 0x22, 0xF1,
+0xA1, 0x7D, 0x03, 0x7F, 0x02, 0x12, 0x36, 0x92, 0x90, 0x05, 0x27, 0xE4, 0xF0, 0x90, 0x8B, 0x33,
+0xF0, 0x22, 0xF1, 0xCA, 0x80, 0xEB, 0xF1, 0xD5, 0x80, 0xE7, 0x90, 0x05, 0x22, 0xE4, 0xF0, 0x90,
+0x8B, 0x33, 0x04, 0xF0, 0x22, 0x90, 0x05, 0x22, 0xE4, 0xF0, 0x90, 0x8B, 0x33, 0x04, 0xF0, 0x22,
+0xF1, 0x8E, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x90, 0x8B, 0x33, 0x74, 0x04, 0xF0, 0x22, 0x90,
+0x02, 0x84, 0xEF, 0xF0, 0xA3, 0xEE, 0xF0, 0xA3, 0x74, 0x05, 0xF0, 0x22, 0xEF, 0x8E, 0xF0, 0x12,
+0x43, 0xBA, 0x50, 0x1A, 0x00, 0x40, 0x50, 0x42, 0x00, 0x80, 0x50, 0x6D, 0x01, 0x00, 0x50, 0x81,
+0x02, 0x00, 0x50, 0x99, 0x04, 0x00, 0x00, 0x00, 0x50, 0xB6, 0xED, 0x54, 0x3F, 0x70, 0x04, 0xFE,
+0xFF, 0x80, 0x04, 0x7E, 0x00, 0x7F, 0x40, 0xEF, 0x2D, 0xFF, 0xEE, 0x3C, 0xFE, 0xEF, 0x78, 0x06,
+0xCE, 0xC3, 0x13, 0xCE, 0x13, 0xD8, 0xF9, 0x78, 0x06, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8, 0xF9,
+0x80, 0x26, 0xED, 0x54, 0x7F, 0x70, 0x04, 0xFE, 0xFF, 0x80, 0x04, 0x7E, 0x00, 0x7F, 0x80, 0xEF,
+0x2D, 0xFF, 0xEE, 0x3C, 0xFE, 0xEF, 0x78, 0x07, 0xCE, 0xC3, 0x13, 0xCE, 0x13, 0xD8, 0xF9, 0x78,
+0x07, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8, 0xF9, 0xFD, 0xAC, 0x06, 0x80, 0x49, 0xED, 0x70, 0x04,
+0xFE, 0xFF, 0x80, 0x04, 0x7E, 0x01, 0x7F, 0x00, 0xEF, 0x2D, 0xEE, 0x3C, 0x7D, 0x00, 0xFC, 0x80,
+0x35, 0xEC, 0x54, 0x01, 0x4D, 0x70, 0x04, 0xFE, 0xFF, 0x80, 0x04, 0x7E, 0x02, 0x7F, 0x00, 0xEF,
+0x2D, 0xEE, 0x3C, 0xC3, 0x13, 0x7D, 0x00, 0x80, 0x1A, 0xEC, 0x54, 0x03, 0x4D, 0x70, 0x04, 0xFE,
+0xFF, 0x80, 0x04, 0x7E, 0x04, 0x7F, 0x00, 0xEF, 0x2D, 0xEE, 0x3C, 0x13, 0x13, 0x54, 0x3F, 0x7D,
+0x00, 0x25, 0xE0, 0x25, 0xE0, 0xFC, 0xAE, 0x04, 0xAF, 0x05, 0x22, 0x90, 0x01, 0xE4, 0x74, 0x58,
+0xF0, 0xA3, 0x74, 0x02, 0xF0, 0x22, 0xE4, 0x90, 0x8A, 0xCC, 0xF0, 0xA3, 0xF0, 0x75, 0x8E, 0x02,
+0x91, 0x0E, 0x12, 0x68, 0x44, 0x90, 0x8B, 0x07, 0xEF, 0xF0, 0x12, 0x68, 0x51, 0x90, 0x8B, 0x09,
+0xEF, 0xF0, 0x12, 0x68, 0x5D, 0x90, 0x8A, 0xF4, 0xEE, 0xF0, 0xA3, 0xEF, 0xF0, 0xE4, 0xF5, 0x55,
+0xF5, 0x21, 0x12, 0x72, 0x55, 0x12, 0x44, 0x9E, 0x12, 0x32, 0x3D, 0x7F, 0x03, 0x12, 0x78, 0x42,
+0x12, 0x7C, 0x3D, 0x12, 0x68, 0x0A, 0x12, 0x68, 0x75, 0x12, 0x68, 0x8A, 0x12, 0x68, 0x28, 0x12,
+0x68, 0x43, 0x90, 0x8A, 0xCE, 0xE5, 0xD9, 0xF0, 0x31, 0x5F, 0xC2, 0xAF, 0x90, 0x00, 0x80, 0xE0,
+0x44, 0x40, 0xF0, 0x51, 0x0E, 0x75, 0xE8, 0x03, 0x43, 0xA8, 0x85, 0xD2, 0xAF, 0x11, 0xBB, 0x90,
+0x8A, 0xCC, 0xE0, 0x64, 0x01, 0xF0, 0x24, 0xC6, 0x90, 0x01, 0xC4, 0xF0, 0x74, 0x50, 0xA3, 0xF0,
+0xE5, 0x55, 0x30, 0xE4, 0x09, 0xC2, 0xAF, 0x53, 0x55, 0xEF, 0xD2, 0xAF, 0xB1, 0x59, 0xE5, 0x55,
+0x30, 0xE6, 0xDC, 0xC2, 0xAF, 0x53, 0x55, 0xBF, 0xD2, 0xAF, 0x12, 0x6B, 0xBD, 0x80, 0xD0, 0x90,
+0x01, 0x3C, 0x74, 0xFF, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0x90, 0x01, 0x34, 0xF0, 0xA3, 0xF0, 0xA3,
+0xF0, 0xA3, 0xF0, 0xFD, 0x7F, 0x54, 0x31, 0x88, 0x7D, 0xFF, 0x7F, 0x55, 0x31, 0x88, 0x7D, 0xFF,
+0x7F, 0x56, 0x31, 0x88, 0x7D, 0xFF, 0x7F, 0x57, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x8F,
+0x82, 0x75, 0x83, 0x00, 0xED, 0xF0, 0x51, 0x0E, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x90, 0x01, 0x30,
+0xE4, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0x90, 0x01, 0x38, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0,
+0xA3, 0xF0, 0xFD, 0x7F, 0x50, 0x31, 0x88, 0xE4, 0xFD, 0x7F, 0x51, 0x31, 0x88, 0xE4, 0xFD, 0x7F,
+0x52, 0x31, 0x88, 0xE4, 0xFD, 0x7F, 0x53, 0x80, 0xBF, 0xE5, 0x5E, 0x64, 0x01, 0x70, 0x3B, 0x71,
+0x4E, 0xBF, 0x01, 0x04, 0x7F, 0x01, 0x71, 0x42, 0x90, 0x00, 0x46, 0xE0, 0x44, 0x04, 0xFD, 0x7F,
+0x46, 0x31, 0x88, 0x90, 0x00, 0x44, 0xE0, 0x54, 0xFB, 0xFD, 0x7F, 0x44, 0x31, 0x88, 0x90, 0x00,
+0x46, 0xE0, 0x54, 0xFB, 0xFD, 0x7F, 0x46, 0x31, 0x88, 0x7F, 0x02, 0x71, 0x6A, 0x8F, 0x62, 0x90,
+0x01, 0xC9, 0xE5, 0x62, 0xF0, 0xB4, 0x01, 0x02, 0x51, 0xE2, 0x22, 0xE0, 0x5F, 0xF0, 0xD3, 0x10,
+0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x7F, 0x10, 0xDF, 0xFE, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xD3, 0x10,
+0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x90, 0x8A, 0xE0, 0xED, 0xF0, 0x90, 0x8A, 0xDF, 0xEF, 0xF0, 0xD3,
+0x94, 0x07, 0x50, 0x4E, 0xA3, 0xE0, 0x70, 0x1A, 0x90, 0x8A, 0xDF, 0xE0, 0xFF, 0x74, 0x01, 0xA8,
+0x07, 0x08, 0x80, 0x02, 0xC3, 0x33, 0xD8, 0xFC, 0xF4, 0xFF, 0x90, 0x00, 0x47, 0xE0, 0x5F, 0xF0,
+0x80, 0x17, 0x90, 0x8A, 0xDF, 0xE0, 0xFF, 0x74, 0x01, 0xA8, 0x07, 0x08, 0x80, 0x02, 0xC3, 0x33,
+0xD8, 0xFC, 0xFF, 0x90, 0x00, 0x47, 0xE0, 0x4F, 0xF0, 0x51, 0x0E, 0x90, 0x8A, 0xDF, 0xE0, 0xFF,
+0x74, 0x01, 0xA8, 0x07, 0x08, 0x80, 0x02, 0xC3, 0x33, 0xD8, 0xFC, 0xF4, 0xFF, 0x90, 0x00, 0x46,
+0x80, 0x59, 0x90, 0x8A, 0xDF, 0xE0, 0x24, 0xF8, 0xF0, 0xA3, 0xE0, 0x70, 0x1D, 0x90, 0x8A, 0xDF,
+0xE0, 0xFF, 0x74, 0x01, 0xA8, 0x07, 0x08, 0x80, 0x02, 0xC3, 0x33, 0xD8, 0xFC, 0xC4, 0x54, 0xF0,
+0xF4, 0xFF, 0x90, 0x00, 0x43, 0xE0, 0x5F, 0xF0, 0x80, 0x1A, 0x90, 0x8A, 0xDF, 0xE0, 0xFF, 0x74,
+0x01, 0xA8, 0x07, 0x08, 0x80, 0x02, 0xC3, 0x33, 0xD8, 0xFC, 0xC4, 0x54, 0xF0, 0xFF, 0x90, 0x00,
+0x43, 0xE0, 0x4F, 0xF0, 0x51, 0x0E, 0x90, 0x8A, 0xDF, 0xE0, 0xFF, 0x74, 0x01, 0xA8, 0x07, 0x08,
+0x80, 0x02, 0xC3, 0x33, 0xD8, 0xFC, 0xF4, 0xFF, 0x90, 0x00, 0x43, 0x51, 0x0B, 0xD0, 0xD0, 0x92,
+0xAF, 0x22, 0x90, 0x00, 0x49, 0xE0, 0x90, 0x8B, 0x54, 0xF0, 0xE0, 0x54, 0x0F, 0xF0, 0x44, 0xF0,
+0xFD, 0x7F, 0x49, 0x31, 0x88, 0x90, 0x8B, 0x54, 0xE0, 0x44, 0xB0, 0xFD, 0x7F, 0x49, 0x21, 0x88,
+0x90, 0x8A, 0xDD, 0xEE, 0xF0, 0xA3, 0xEF, 0xF0, 0x75, 0x5E, 0x01, 0x8E, 0x5F, 0xF5, 0x60, 0xE4,
+0xFD, 0x7F, 0x0B, 0x51, 0x1E, 0xE4, 0xFD, 0x7F, 0x02, 0x51, 0x1E, 0x71, 0x4E, 0xE4, 0xFF, 0x71,
+0x42, 0xE4, 0xF5, 0x62, 0x90, 0x01, 0xC9, 0xE5, 0x62, 0xF0, 0x90, 0x8A, 0xDD, 0xE0, 0xFC, 0xA3,
+0xE0, 0xFD, 0xEC, 0xFB, 0x8D, 0x44, 0xE4, 0xF5, 0x45, 0x7D, 0x01, 0x7F, 0x60, 0x7E, 0x01, 0x02,
+0x35, 0xAB, 0x90, 0x01, 0xCA, 0xE5, 0x61, 0xF0, 0xEF, 0x60, 0x02, 0x51, 0xE2, 0x22, 0x7F, 0x0B,
+0x71, 0x6A, 0xEF, 0x65, 0x61, 0x60, 0x10, 0xE5, 0x61, 0xB4, 0x01, 0x05, 0xE4, 0xF5, 0x61, 0x80,
+0x03, 0x75, 0x61, 0x01, 0x7F, 0x01, 0x22, 0x7F, 0x00, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0,
+0xD0, 0x90, 0x8B, 0x57, 0xEF, 0xF0, 0xD3, 0x94, 0x07, 0x50, 0x43, 0xE0, 0xFF, 0x74, 0x01, 0xA8,
+0x07, 0x08, 0x80, 0x02, 0xC3, 0x33, 0xD8, 0xFC, 0xF4, 0xFF, 0x90, 0x00, 0x46, 0x51, 0x0B, 0x90,
+0x8B, 0x57, 0xE0, 0xFD, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x05, 0x08, 0x80, 0x05, 0xC3, 0x33, 0xCE,
+0x33, 0xCE, 0xD8, 0xF9, 0xFF, 0x90, 0x00, 0x44, 0xE0, 0xFB, 0xE4, 0xFE, 0xEF, 0x5B, 0xA8, 0x05,
+0x08, 0x80, 0x06, 0xCE, 0xA2, 0xE7, 0x13, 0xCE, 0x13, 0xD8, 0xF8, 0xFF, 0x80, 0x4B, 0x90, 0x8B,
+0x57, 0xE0, 0x24, 0xF8, 0xF0, 0xE0, 0xFF, 0x74, 0x01, 0xA8, 0x07, 0x08, 0x80, 0x02, 0xC3, 0x33,
+0xD8, 0xFC, 0xF4, 0xFF, 0x90, 0x00, 0x43, 0xE0, 0x5F, 0xF0, 0x51, 0x0E, 0x90, 0x8B, 0x57, 0xE0,
+0xFD, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x05, 0x08, 0x80, 0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8,
+0xF9, 0xFF, 0x90, 0x00, 0x42, 0xE0, 0xFB, 0xE4, 0xFE, 0xEF, 0x5B, 0xA8, 0x05, 0x08, 0x80, 0x06,
+0xCE, 0xA2, 0xE7, 0x13, 0xCE, 0x13, 0xD8, 0xF8, 0xFF, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xE4, 0x90,
+0x8B, 0x04, 0xF0, 0x90, 0x00, 0x80, 0xE0, 0x44, 0x80, 0xFD, 0x7F, 0x80, 0x21, 0x88, 0xD3, 0x10,
+0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x90, 0x8A, 0xDA, 0x12, 0x43, 0x8B, 0x90, 0x8A, 0xDA, 0x12, 0x43,
+0x6B, 0x90, 0x00, 0x01, 0x12, 0x42, 0xC2, 0xFA, 0xE5, 0xF0, 0x24, 0x00, 0xFF, 0xE4, 0x3A, 0xFE,
+0x90, 0x8A, 0xDA, 0x12, 0x43, 0x6B, 0x90, 0x00, 0x01, 0xEE, 0x8F, 0xF0, 0x12, 0x43, 0x19, 0x12,
+0x29, 0xD9, 0xFF, 0x60, 0x2C, 0xB5, 0x5E, 0x16, 0x90, 0x8A, 0xDA, 0x12, 0x43, 0x6B, 0x90, 0x00,
+0x01, 0x12, 0x42, 0xC2, 0x65, 0x60, 0x70, 0x04, 0xE5, 0x5F, 0x65, 0xF0, 0x60, 0x22, 0x90, 0x8A,
+0xDA, 0x12, 0x43, 0x6B, 0x90, 0x00, 0x01, 0x12, 0x42, 0xC2, 0xFF, 0xAE, 0xF0, 0x71, 0x00, 0x80,
+0x0F, 0x90, 0x8A, 0xDA, 0x12, 0x43, 0x6B, 0x12, 0x29, 0xD9, 0x65, 0x5E, 0x60, 0x02, 0x91, 0x95,
+0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xE4, 0xF5, 0x5E, 0x7F, 0x60, 0x7E, 0x01, 0x8F, 0x82, 0x8E, 0x83,
+0xA3, 0xA3, 0xA3, 0xE4, 0xF0, 0x22, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x8B, 0xEF, 0x12, 0x43, 0x94,
+0x54, 0xE7, 0x01, 0x54, 0xDE, 0x02, 0x55, 0x0B, 0x03, 0x55, 0x14, 0x05, 0x55, 0x1D, 0x06, 0x55,
+0x58, 0x07, 0x55, 0x25, 0x08, 0x55, 0x2E, 0x09, 0x55, 0x36, 0x20, 0x55, 0x3F, 0x2C, 0x54, 0xF0,
+0x2D, 0x54, 0xF9, 0x2E, 0x55, 0x02, 0x3B, 0x55, 0x48, 0x4B, 0x00, 0x00, 0x55, 0x51, 0x90, 0x8A,
+0xD7, 0x12, 0x43, 0x6B, 0x02, 0x74, 0x85, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02, 0x74, 0x8B,
+0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02, 0x74, 0xB8, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02,
+0x75, 0x00, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02, 0x75, 0x39, 0x90, 0x8A, 0xD7, 0x12, 0x43,
+0x6B, 0x02, 0x75, 0x52, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02, 0x74, 0x0F, 0x90, 0x8A, 0xD7,
+0x12, 0x43, 0x6B, 0xC1, 0xA6, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02, 0x75, 0x9A, 0x90, 0x8A,
+0xD7, 0x12, 0x43, 0x6B, 0x81, 0x1E, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02, 0x78, 0x81, 0x90,
+0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02, 0x7A, 0xC2, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02, 0x7C,
+0x2B, 0x90, 0x01, 0xC6, 0xE0, 0x44, 0x01, 0xF0, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0,
+0x90, 0x01, 0xCC, 0xE0, 0x54, 0x0F, 0x90, 0x8A, 0xCF, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0xFD, 0x70,
+0x02, 0xC1, 0xA1, 0x90, 0x8B, 0x51, 0xE0, 0xFF, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08, 0x80,
+0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8, 0xF9, 0xFF, 0xEF, 0x5D, 0x70, 0x02, 0xC1, 0x9A, 0x90,
+0x8B, 0x51, 0xE0, 0x75, 0xF0, 0x04, 0x90, 0x01, 0xD0, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xD0,
+0xF0, 0x75, 0x1D, 0x01, 0x75, 0x1E, 0x8A, 0x75, 0x1F, 0xD0, 0x75, 0x20, 0x01, 0x7B, 0x01, 0x7A,
+0x8A, 0x79, 0xD1, 0x12, 0x5E, 0xE4, 0x90, 0x8A, 0xD1, 0xE0, 0xFF, 0xC4, 0x13, 0x13, 0x13, 0x54,
+0x01, 0x90, 0x8B, 0x51, 0x30, 0xE0, 0x59, 0xE0, 0x75, 0xF0, 0x02, 0x90, 0x00, 0x88, 0x12, 0x43,
+0x5F, 0xE0, 0x90, 0x8A, 0xD2, 0xF0, 0x90, 0x8B, 0x51, 0xE0, 0x75, 0xF0, 0x02, 0x90, 0x00, 0x89,
+0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xD3, 0xF0, 0x90, 0x8B, 0x51, 0xE0, 0x75, 0xF0, 0x04, 0x90,
+0x01, 0xD1, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xD4, 0xF0, 0x90, 0x8B, 0x51, 0xE0, 0x75, 0xF0,
+0x04, 0x90, 0x01, 0xD2, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xD5, 0xF0, 0x90, 0x8B, 0x51, 0xE0,
+0x75, 0xF0, 0x04, 0x90, 0x01, 0xD3, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xD6, 0xF0, 0x80, 0x33,
+0xE0, 0x75, 0xF0, 0x04, 0x90, 0x01, 0xD1, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xD2, 0xF0, 0x90,
+0x8B, 0x51, 0xE0, 0x75, 0xF0, 0x04, 0x90, 0x01, 0xD2, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xD3,
+0xF0, 0x90, 0x8B, 0x51, 0xE0, 0x75, 0xF0, 0x04, 0x90, 0x01, 0xD3, 0x12, 0x43, 0x5F, 0xE0, 0x90,
+0x8A, 0xD4, 0xF0, 0xEF, 0x54, 0x7F, 0xFF, 0x7B, 0x01, 0x7A, 0x8A, 0x79, 0xD2, 0x91, 0xA6, 0x90,
+0x8A, 0xCF, 0xE0, 0xFF, 0x90, 0x8B, 0x51, 0xE0, 0xFE, 0x74, 0x01, 0xA8, 0x06, 0x08, 0x80, 0x02,
+0xC3, 0x33, 0xD8, 0xFC, 0xF4, 0x5F, 0x90, 0x8A, 0xCF, 0xF0, 0x90, 0x8B, 0x51, 0xE0, 0xFF, 0x74,
+0x01, 0xA8, 0x07, 0x08, 0x80, 0x02, 0xC3, 0x33, 0xD8, 0xFC, 0x90, 0x01, 0xCC, 0xF0, 0x90, 0x8B,
+0x51, 0xE0, 0x04, 0xF0, 0xE0, 0x54, 0x03, 0xF0, 0xA1, 0x6A, 0x90, 0x01, 0xC6, 0xE0, 0x44, 0x02,
+0xF0, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x90, 0x00, 0x04, 0x12, 0x42, 0x20, 0xFF, 0x54, 0x1F, 0xFE,
+0xEF, 0x54, 0x20, 0xC4, 0x13, 0x54, 0x07, 0xFD, 0xAF, 0x06, 0x90, 0x8A, 0xDA, 0xEF, 0xF0, 0xA3,
+0xED, 0xF0, 0xA3, 0x12, 0x43, 0x8B, 0x90, 0x8A, 0xDC, 0x12, 0x43, 0x6B, 0x90, 0x00, 0x03, 0x12,
+0x42, 0x20, 0x54, 0xF0, 0xC4, 0x54, 0x0F, 0x90, 0x8A, 0xDF, 0xF0, 0x90, 0x00, 0x04, 0x12, 0x42,
+0x20, 0x54, 0x40, 0xC4, 0x13, 0x13, 0x54, 0x03, 0x90, 0x8A, 0xE0, 0xF0, 0x90, 0x8A, 0xDA, 0xE0,
+0xFF, 0x75, 0xF0, 0x09, 0x90, 0x87, 0x25, 0x12, 0x43, 0x5F, 0xAD, 0x82, 0xAC, 0x83, 0x90, 0x8A,
+0xE1, 0xEC, 0xF0, 0xA3, 0xED, 0xF0, 0xEF, 0x75, 0xF0, 0x09, 0xA4, 0x24, 0x23, 0xF9, 0x74, 0x87,
+0x35, 0xF0, 0xFA, 0x7B, 0x01, 0xA3, 0x12, 0x43, 0x8B, 0x90, 0x8A, 0xDC, 0x12, 0x43, 0x6B, 0x90,
+0x00, 0x03, 0x12, 0x42, 0x20, 0x54, 0x0F, 0xFF, 0x90, 0x8A, 0xE3, 0x12, 0x43, 0x6B, 0xEF, 0x12,
+0x42, 0x4D, 0x90, 0x8A, 0xDC, 0x12, 0x43, 0x6B, 0x90, 0x00, 0x02, 0x12, 0x42, 0x20, 0xFF, 0x90,
+0x8A, 0xE3, 0x12, 0x43, 0x6B, 0x90, 0x00, 0x01, 0xEF, 0x12, 0x42, 0x5F, 0x90, 0x8A, 0xDC, 0x12,
+0x43, 0x6B, 0x90, 0x00, 0x01, 0x12, 0x42, 0x20, 0xFF, 0x90, 0x8A, 0xE1, 0xE0, 0xFC, 0xA3, 0xE0,
+0xFD, 0xF5, 0x82, 0x8C, 0x83, 0xEF, 0xF0, 0x12, 0x29, 0xD9, 0x8D, 0x82, 0x8C, 0x83, 0xA3, 0xF0,
+0x90, 0x8A, 0xDF, 0xE0, 0xFE, 0x90, 0x8A, 0xDA, 0xE0, 0xFF, 0x24, 0xC1, 0xF5, 0x82, 0xE4, 0x34,
+0x86, 0xF5, 0x83, 0xEE, 0xF0, 0x90, 0x8A, 0xDB, 0xE0, 0xFE, 0x75, 0xF0, 0x09, 0xEF, 0x90, 0x87,
+0x29, 0x12, 0x43, 0x5F, 0xEE, 0xF0, 0x75, 0xF0, 0x09, 0xEF, 0x90, 0x87, 0x2A, 0x12, 0x43, 0x5F,
+0x74, 0x01, 0xF0, 0x90, 0x8A, 0xE0, 0xE0, 0xFE, 0x75, 0xF0, 0x09, 0xEF, 0x90, 0x87, 0x2B, 0x12,
+0x43, 0x5F, 0xEE, 0xF0, 0x8F, 0x0F, 0xEF, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89,
+0xAF, 0x82, 0xF5, 0x10, 0x8F, 0x11, 0xE5, 0x0F, 0x75, 0xF0, 0x02, 0xA4, 0x24, 0x81, 0xF9, 0x74,
+0x86, 0x35, 0xF0, 0x75, 0x12, 0x01, 0xF5, 0x13, 0x89, 0x14, 0x75, 0xF0, 0x09, 0xE5, 0x0F, 0x90,
+0x87, 0x25, 0x12, 0x43, 0x5F, 0xAF, 0x82, 0x85, 0x83, 0x15, 0x8F, 0x16, 0xE5, 0x0F, 0x75, 0xF0,
+0x09, 0xA4, 0x24, 0x23, 0xF9, 0x74, 0x87, 0x35, 0xF0, 0x75, 0x17, 0x01, 0xF5, 0x18, 0x89, 0x19,
+0x74, 0xC1, 0x25, 0x0F, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE0, 0x12, 0x43, 0x94, 0x58,
+0x34, 0x00, 0x58, 0x49, 0x01, 0x58, 0x5E, 0x02, 0x58, 0x73, 0x03, 0x58, 0x9C, 0x04, 0x58, 0xB1,
+0x05, 0x58, 0xC6, 0x06, 0x58, 0xEC, 0x0C, 0x59, 0x19, 0x0D, 0x59, 0x46, 0x0E, 0x59, 0x73, 0x0F,
+0x00, 0x00, 0x59, 0xA7, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5,
+0x83, 0x74, 0xF0, 0xF0, 0xA3, 0x74, 0x15, 0x80, 0x3C, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5,
+0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0x74, 0xF0, 0xF0, 0xA3, 0x74, 0x10, 0x80, 0x27, 0xE5, 0x0F,
+0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0x74, 0xF0, 0xF0, 0xA3, 0x74,
+0x05, 0x80, 0x12, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83,
+0x74, 0xF0, 0xF0, 0xA3, 0xE4, 0xF0, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0x81, 0xF5, 0x82, 0xE4, 0x34,
+0x86, 0xF5, 0x83, 0x74, 0x0F, 0xF0, 0xA3, 0x74, 0x8F, 0xF0, 0x21, 0xA7, 0xE5, 0x0F, 0x25, 0xE0,
+0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0x74, 0x0F, 0xF0, 0xA3, 0x74, 0xF5, 0x80,
+0x27, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0x74, 0x0F,
+0xF0, 0xA3, 0x74, 0xF0, 0x80, 0x12, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34,
+0x89, 0xF5, 0x83, 0xE4, 0xF0, 0xA3, 0x74, 0x0D, 0xF0, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0x81, 0xF5,
+0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE4, 0xF0, 0xA3, 0xF0, 0x21, 0xA7, 0x90, 0x04, 0x47, 0xE0,
+0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x12, 0x42, 0x4D, 0x90, 0x04, 0x46, 0xE0, 0xAB, 0x12, 0xAA,
+0x13, 0xA9, 0x14, 0x90, 0x00, 0x01, 0x12, 0x42, 0x5F, 0x90, 0x04, 0x45, 0xE0, 0x85, 0x11, 0x82,
+0x85, 0x10, 0x83, 0xF0, 0x90, 0x04, 0x44, 0x21, 0x9E, 0x90, 0x04, 0x4B, 0xE0, 0xAB, 0x12, 0xAA,
+0x13, 0xA9, 0x14, 0x12, 0x42, 0x4D, 0x90, 0x04, 0x4A, 0xE0, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14,
+0x90, 0x00, 0x01, 0x12, 0x42, 0x5F, 0x90, 0x04, 0x49, 0xE0, 0x85, 0x11, 0x82, 0x85, 0x10, 0x83,
+0xF0, 0x90, 0x04, 0x48, 0x80, 0x58, 0x90, 0x04, 0x4F, 0xE0, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14,
+0x12, 0x42, 0x4D, 0x90, 0x04, 0x4E, 0xE0, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x90, 0x00, 0x01,
+0x12, 0x42, 0x5F, 0x90, 0x04, 0x4D, 0xE0, 0x85, 0x11, 0x82, 0x85, 0x10, 0x83, 0xF0, 0x90, 0x04,
+0x4C, 0x80, 0x2B, 0x90, 0x04, 0x53, 0xE0, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x12, 0x42, 0x4D,
+0x90, 0x04, 0x52, 0xE0, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x90, 0x00, 0x01, 0x12, 0x42, 0x5F,
+0x90, 0x04, 0x51, 0xE0, 0x85, 0x11, 0x82, 0x85, 0x10, 0x83, 0xF0, 0x90, 0x04, 0x50, 0xE0, 0x85,
+0x11, 0x82, 0x85, 0x10, 0x83, 0xA3, 0xF0, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0xC0, 0x03, 0xC0,
+0x02, 0xC0, 0x01, 0x12, 0x29, 0xD9, 0xFF, 0xAB, 0x17, 0xAA, 0x18, 0xA9, 0x19, 0x12, 0x29, 0xD9,
+0x5F, 0xD0, 0x01, 0xD0, 0x02, 0xD0, 0x03, 0x12, 0x42, 0x4D, 0xAB, 0x12, 0xE5, 0x14, 0x24, 0x01,
+0xF9, 0xE4, 0x35, 0x13, 0xFA, 0xC0, 0x03, 0xC0, 0x02, 0xC0, 0x01, 0x12, 0x29, 0xD9, 0xFF, 0xAB,
+0x17, 0xAA, 0x18, 0xA9, 0x19, 0x90, 0x00, 0x01, 0x12, 0x42, 0x20, 0x5F, 0xD0, 0x01, 0xD0, 0x02,
+0xD0, 0x03, 0x12, 0x42, 0x4D, 0x85, 0x11, 0x82, 0x85, 0x10, 0x83, 0xC0, 0x83, 0xC0, 0x82, 0xE0,
+0xFF, 0x85, 0x16, 0x82, 0x85, 0x15, 0x83, 0xE0, 0xFE, 0xEF, 0x5E, 0xD0, 0x82, 0xD0, 0x83, 0xF0,
+0x85, 0x11, 0x82, 0x85, 0x10, 0x83, 0xA3, 0xC0, 0x83, 0xC0, 0x82, 0xE0, 0xFF, 0x85, 0x16, 0x82,
+0x85, 0x15, 0x83, 0xA3, 0xE0, 0xFE, 0xEF, 0x5E, 0xD0, 0x82, 0xD0, 0x83, 0xF0, 0xE5, 0x0F, 0x25,
+0xE0, 0x24, 0x81, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE0, 0xFE, 0xA3, 0xE0, 0x4E, 0x60,
+0x4B, 0x90, 0x8A, 0xE6, 0x74, 0x0B, 0xF0, 0x90, 0x8A, 0xE6, 0xE0, 0xFF, 0xC3, 0x94, 0x00, 0x50,
+0x02, 0x41, 0xEC, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08, 0x80, 0x05, 0xC3, 0x33, 0xCE, 0x33,
+0xCE, 0xD8, 0xF9, 0xFF, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0x81, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5,
+0x83, 0xE0, 0x5E, 0xFE, 0xA3, 0xE0, 0x5F, 0x4E, 0x60, 0x0A, 0x90, 0x8A, 0xE6, 0xE0, 0x24, 0x10,
+0xA3, 0xF0, 0x80, 0x68, 0x90, 0x8A, 0xE6, 0xE0, 0x14, 0xF0, 0x80, 0xBB, 0xE5, 0x0F, 0x25, 0xE0,
+0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xFE, 0xA3, 0xE0, 0x4E, 0x60, 0x47,
+0x90, 0x8A, 0xE6, 0x74, 0x0F, 0xF0, 0x90, 0x8A, 0xE6, 0xE0, 0xFF, 0xC3, 0x94, 0x00, 0x40, 0x3C,
+0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08, 0x80, 0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8, 0xF9,
+0xFF, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0x5E,
+0xFE, 0xA3, 0xE0, 0x5F, 0x4E, 0x60, 0x08, 0x90, 0x8A, 0xE6, 0xE0, 0xA3, 0xF0, 0x80, 0x0D, 0x90,
+0x8A, 0xE6, 0xE0, 0x14, 0xF0, 0x80, 0xBF, 0xE4, 0x90, 0x8A, 0xE7, 0xF0, 0xE5, 0x0F, 0x25, 0xE0,
+0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xFE, 0xA3, 0xE0, 0x4E, 0x60, 0x46,
+0xE4, 0x90, 0x8A, 0xE6, 0xF0, 0x90, 0x8A, 0xE6, 0xE0, 0xFF, 0xC3, 0x94, 0x10, 0x40, 0x02, 0x61,
+0xA5, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08, 0x80, 0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8,
+0xF9, 0xFF, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0,
+0x5E, 0xFE, 0xA3, 0xE0, 0x5F, 0x4E, 0x60, 0x06, 0x90, 0x8A, 0xE6, 0xE0, 0x80, 0x63, 0x90, 0x8A,
+0xE6, 0xE0, 0x04, 0xF0, 0x80, 0xBF, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0x81, 0xF5, 0x82, 0xE4, 0x34,
+0x86, 0xF5, 0x83, 0xE0, 0xFE, 0xA3, 0xE0, 0x4E, 0x60, 0x46, 0xE4, 0x90, 0x8A, 0xE6, 0xF0, 0x90,
+0x8A, 0xE6, 0xE0, 0xFF, 0xC3, 0x94, 0x0C, 0x50, 0x3C, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08,
+0x80, 0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8, 0xF9, 0xFF, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0x81,
+0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE0, 0x5E, 0xFE, 0xA3, 0xE0, 0x5F, 0x4E, 0x60, 0x08,
+0x90, 0x8A, 0xE6, 0xE0, 0x24, 0x10, 0x80, 0x09, 0x90, 0x8A, 0xE6, 0xE0, 0x04, 0xF0, 0x80, 0xBF,
+0xE4, 0x90, 0x8A, 0xE8, 0xF0, 0x90, 0x8A, 0xE7, 0xE0, 0xFF, 0x75, 0xF0, 0x09, 0xE5, 0x0F, 0x90,
+0x87, 0x27, 0x12, 0x43, 0x5F, 0xEF, 0xF0, 0x90, 0x8A, 0xE8, 0xE0, 0xFE, 0x75, 0xF0, 0x09, 0xE5,
+0x0F, 0x90, 0x87, 0x28, 0x12, 0x43, 0x5F, 0xEE, 0xF0, 0xE5, 0x0F, 0xC3, 0x94, 0x20, 0x50, 0x32,
+0x74, 0x84, 0x25, 0x0F, 0xF5, 0x82, 0xE4, 0x34, 0x04, 0xF5, 0x83, 0xE0, 0xD3, 0x9F, 0x40, 0x02,
+0x80, 0x18, 0x74, 0x84, 0x25, 0x0F, 0xF5, 0x82, 0xE4, 0x34, 0x04, 0xF5, 0x83, 0xE0, 0xC3, 0x9E,
+0x50, 0x08, 0x90, 0x8A, 0xE8, 0xE0, 0xA3, 0xF0, 0x80, 0x08, 0x90, 0x8A, 0xE7, 0xE0, 0x90, 0x8A,
+0xE9, 0xF0, 0x90, 0x8A, 0xE9, 0xE0, 0xFD, 0xAF, 0x0F, 0x91, 0x4E, 0x90, 0x8A, 0xE9, 0xE0, 0xFF,
+0x74, 0x84, 0x25, 0x0F, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xEF, 0xF0, 0x90, 0x8A, 0xE7,
+0xE0, 0xFF, 0xD3, 0x94, 0x13, 0x40, 0x07, 0x90, 0x87, 0x22, 0x74, 0x03, 0xF0, 0x22, 0xEF, 0xD3,
+0x94, 0x0B, 0x40, 0x07, 0x90, 0x87, 0x22, 0x74, 0x02, 0xF0, 0x22, 0xEF, 0xD3, 0x94, 0x03, 0x40,
+0x07, 0x90, 0x87, 0x22, 0x74, 0x01, 0xF0, 0x22, 0xE4, 0x90, 0x87, 0x22, 0xF0, 0x22, 0xD3, 0x10,
+0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x74, 0x84, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x04, 0xF5, 0x83, 0xED,
+0xF0, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xAC, 0x07, 0xED, 0x54, 0x1F, 0x90, 0x8A, 0xC7, 0xF0, 0x74,
+0x01, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE0, 0x90, 0x8A, 0xC5, 0xF0, 0x90, 0x8A,
+0xC8, 0x74, 0x01, 0xF0, 0xEB, 0xC3, 0x94, 0x01, 0x40, 0x02, 0x80, 0x37, 0x90, 0x8A, 0xC5, 0xE0,
+0x25, 0x0D, 0xFF, 0xA3, 0xF0, 0xA3, 0xE0, 0x90, 0x41, 0x9E, 0x93, 0xFE, 0xEF, 0xD3, 0x9E, 0x40,
+0x10, 0x74, 0x01, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE4, 0xF0, 0xAF, 0x04, 0x80,
+0x9D, 0x90, 0x8A, 0xC6, 0xE0, 0xFF, 0x74, 0x01, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83,
+0xEF, 0xF0, 0x22, 0xAD, 0x07, 0x75, 0xF0, 0x09, 0xED, 0x90, 0x87, 0x27, 0x12, 0x43, 0x5F, 0xE0,
+0xFF, 0x90, 0x8A, 0xCA, 0xF0, 0x74, 0xA5, 0x2D, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE0,
+0x54, 0x1F, 0x90, 0x8A, 0xC9, 0xF0, 0xD3, 0x9F, 0x40, 0x06, 0xA3, 0xE0, 0x90, 0x8A, 0xC9, 0xF0,
+0x90, 0x8A, 0xC9, 0xE0, 0xFF, 0x25, 0xE0, 0x24, 0x66, 0xF5, 0x82, 0xE4, 0x34, 0x41, 0xF5, 0x83,
+0xE4, 0x93, 0xFA, 0x74, 0x01, 0x93, 0xFB, 0xEF, 0x25, 0xE0, 0x24, 0x2E, 0xF5, 0x82, 0xE4, 0x34,
+0x41, 0xF5, 0x83, 0x74, 0x01, 0x93, 0x2B, 0xFF, 0xE4, 0x93, 0x3A, 0xC3, 0x13, 0xFE, 0xEF, 0x13,
+0xFF, 0xED, 0x25, 0xE0, 0x24, 0xE1, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xEE, 0xF0, 0xA3,
+0xEF, 0xF0, 0xAF, 0x05, 0x90, 0x8A, 0xC9, 0xE0, 0xFD, 0x91, 0x4E, 0x90, 0x8A, 0xC9, 0xE0, 0xFF,
+0x22, 0xAC, 0x07, 0x74, 0x84, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0x04, 0xF5, 0x83, 0xE0, 0x54, 0x7F,
+0x90, 0x8A, 0xDE, 0xF0, 0xE0, 0x54, 0x1F, 0xFF, 0x90, 0x8A, 0xE1, 0xF0, 0x75, 0xF0, 0x09, 0xEC,
+0x90, 0x87, 0x28, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xE3, 0xF0, 0x75, 0xF0, 0x09, 0xEC, 0x90,
+0x87, 0x27, 0x12, 0x43, 0x5F, 0xE0, 0xFE, 0x90, 0x8A, 0xE4, 0xF0, 0xEC, 0x25, 0xE0, 0x24, 0xE4,
+0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xFB, 0xA3, 0xE0, 0x90, 0x8A, 0xE5, 0xCB, 0xF0,
+0xA3, 0xEB, 0xF0, 0xEC, 0x25, 0xE0, 0x24, 0x81, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE0,
+0xFB, 0xA3, 0xE0, 0x90, 0x8A, 0xE7, 0xCB, 0xF0, 0xA3, 0xEB, 0xF0, 0xEF, 0xD3, 0x9E, 0x40, 0x0C,
+0x90, 0x8A, 0xE4, 0xE0, 0x90, 0x8A, 0xE1, 0xF0, 0x90, 0x8A, 0xDE, 0xF0, 0xED, 0x70, 0x02, 0xC1,
+0x93, 0x90, 0x8A, 0xE2, 0xED, 0xF0, 0x90, 0x8A, 0xDE, 0xE0, 0x30, 0xE6, 0x0E, 0x90, 0x8A, 0xE1,
+0xE0, 0x90, 0x8A, 0xDE, 0xF0, 0x90, 0x8A, 0xE2, 0xE0, 0x14, 0xF0, 0x90, 0x8A, 0xE2, 0xE0, 0x70,
+0x02, 0xC1, 0x93, 0x90, 0x8A, 0xE1, 0xE0, 0xFF, 0xD3, 0x94, 0x00, 0x50, 0x02, 0xC1, 0x93, 0xE4,
+0x90, 0x8A, 0xE0, 0xF0, 0xEF, 0x14, 0x90, 0x8A, 0xDF, 0xF0, 0x90, 0x8A, 0xE3, 0xE0, 0xFD, 0x90,
+0x8A, 0xDF, 0xE0, 0xFF, 0xD3, 0x9D, 0x40, 0x6F, 0xEF, 0x94, 0x10, 0x40, 0x21, 0xEF, 0x24, 0xF0,
+0xFF, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08, 0x80, 0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8,
+0xF9, 0xFF, 0x90, 0x8A, 0xE7, 0xE0, 0x5E, 0xFE, 0xA3, 0xE0, 0x5F, 0x4E, 0x70, 0x27, 0x90, 0x8A,
+0xDF, 0xE0, 0xFF, 0xC3, 0x94, 0x10, 0x50, 0x37, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08, 0x80,
+0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8, 0xF9, 0xFF, 0x90, 0x8A, 0xE5, 0xE0, 0x5E, 0xFE, 0xA3,
+0xE0, 0x5F, 0x4E, 0x60, 0x1A, 0x90, 0x8A, 0xDF, 0xE0, 0x90, 0x8A, 0xDE, 0xF0, 0x90, 0x8A, 0xE0,
+0xE0, 0x04, 0xF0, 0x90, 0x8A, 0xE2, 0xE0, 0xFF, 0x90, 0x8A, 0xE0, 0xE0, 0x6F, 0x60, 0x08, 0x90,
+0x8A, 0xDF, 0xE0, 0x14, 0xF0, 0x80, 0x83, 0x90, 0x8A, 0xE2, 0xE0, 0xFF, 0x90, 0x8A, 0xE0, 0xE0,
+0xC3, 0x9F, 0x50, 0x0F, 0x90, 0x8A, 0xDF, 0xE0, 0xB5, 0x05, 0x08, 0x90, 0x8A, 0xE3, 0xE0, 0x90,
+0x8A, 0xDE, 0xF0, 0x90, 0x8A, 0xDE, 0xE0, 0xFF, 0x25, 0xE0, 0x24, 0x66, 0xF5, 0x82, 0xE4, 0x34,
+0x41, 0xF5, 0x83, 0xE4, 0x93, 0xFA, 0x74, 0x01, 0x93, 0xFB, 0xEF, 0x25, 0xE0, 0x24, 0x2E, 0xF5,
+0x82, 0xE4, 0x34, 0x41, 0xF5, 0x83, 0x74, 0x01, 0x93, 0x2B, 0xFF, 0xE4, 0x93, 0x3A, 0xC3, 0x13,
+0xFE, 0xEF, 0x13, 0xFF, 0xEC, 0x25, 0xE0, 0x24, 0xE1, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83,
+0xEE, 0xF0, 0xA3, 0xEF, 0xF0, 0xAF, 0x04, 0x90, 0x8A, 0xDE, 0xE0, 0xFD, 0x91, 0x4E, 0x90, 0x8A,
+0xDE, 0xE0, 0xFF, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x8B, 0x1A, 0x8A, 0x1B, 0x89,
+0x1C, 0x90, 0x8B, 0x3F, 0x12, 0x43, 0x8B, 0xAB, 0x1D, 0xAA, 0x1E, 0xA9, 0x1F, 0x90, 0x8B, 0x42,
+0x12, 0x43, 0x8B, 0xAF, 0x20, 0x15, 0x20, 0xEF, 0x60, 0x1E, 0x90, 0x8B, 0x42, 0xE4, 0x75, 0xF0,
+0x01, 0x12, 0x43, 0x74, 0x12, 0x29, 0xD9, 0xFF, 0x90, 0x8B, 0x3F, 0xE4, 0x75, 0xF0, 0x01, 0x12,
+0x43, 0x74, 0xEF, 0x12, 0x42, 0x4D, 0x80, 0xDB, 0xAB, 0x1A, 0xAA, 0x1B, 0xA9, 0x1C, 0xD0, 0xD0,
+0x92, 0xAF, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x90, 0x8B, 0x45, 0x12, 0x43, 0x8B,
+0x90, 0x8B, 0x53, 0xE0, 0xFF, 0x04, 0xF0, 0x90, 0x00, 0x01, 0xEF, 0x12, 0x42, 0x5F, 0x7F, 0xAF,
+0x7E, 0x01, 0x12, 0x74, 0x3B, 0xEF, 0x60, 0x47, 0x90, 0x8B, 0x45, 0x12, 0x43, 0x6B, 0x8B, 0x1D,
+0x8A, 0x1E, 0x89, 0x1F, 0x75, 0x20, 0x02, 0x7B, 0x01, 0x7A, 0x01, 0x79, 0xA0, 0xD1, 0xE4, 0x90,
+0x8B, 0x48, 0x12, 0x43, 0x6B, 0x8B, 0x1D, 0x8A, 0x1E, 0x89, 0x1F, 0x90, 0x8B, 0x45, 0x12, 0x43,
+0x6B, 0x12, 0x29, 0xD9, 0xFF, 0xC4, 0x54, 0x0F, 0xF5, 0x20, 0x7B, 0x01, 0x7A, 0x01, 0x79, 0xA2,
+0xD1, 0xE4, 0x90, 0x01, 0xAF, 0x74, 0xFF, 0xF0, 0x90, 0x01, 0xCB, 0xE0, 0x64, 0x80, 0xF0, 0xD0,
+0xD0, 0x92, 0xAF, 0x22, 0x90, 0x8A, 0xC5, 0xE0, 0x54, 0xF0, 0x44, 0x03, 0xF0, 0x54, 0x0F, 0x44,
+0x80, 0xF0, 0x7B, 0x00, 0x7A, 0x00, 0x79, 0x56, 0x90, 0x8B, 0x48, 0x12, 0x43, 0x8B, 0x0B, 0x7A,
+0x8A, 0x79, 0xC5, 0xE1, 0x33, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x90, 0x01, 0xC4, 0x74,
+0xC5, 0xF0, 0x74, 0x5F, 0xA3, 0xF0, 0x90, 0x04, 0x1D, 0xE0, 0x60, 0x1A, 0x90, 0x05, 0x22, 0xE0,
+0x54, 0x90, 0x60, 0x07, 0x90, 0x01, 0xC6, 0xE0, 0x44, 0x40, 0xF0, 0x90, 0x01, 0xC7, 0xE0, 0x30,
+0xE1, 0xE4, 0x7F, 0x00, 0x80, 0x02, 0x7F, 0x01, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xD3, 0x10, 0xAF,
+0x01, 0xC3, 0xC0, 0xD0, 0xE4, 0xFB, 0xFA, 0xEF, 0x30, 0xE0, 0x02, 0x7B, 0x80, 0xEF, 0xC3, 0x13,
+0x90, 0xFD, 0x10, 0xF0, 0x90, 0x04, 0x25, 0xEF, 0xF0, 0xED, 0x60, 0x1E, 0xAF, 0x03, 0x74, 0x0F,
+0x2F, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x44, 0x80, 0xF0, 0x74, 0x10, 0x2F, 0xF5,
+0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x44, 0x80, 0xF0, 0xAF, 0x03, 0x74, 0x08, 0x2F, 0xF5,
+0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE4, 0xF0, 0x74, 0x09, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0xFC,
+0xF5, 0x83, 0xE0, 0x54, 0xF0, 0xF0, 0x74, 0x21, 0x2B, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83,
+0xE0, 0x54, 0xF7, 0xF0, 0xAE, 0x02, 0xAF, 0x03, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x12, 0x5F, 0xC5,
+0xBF, 0x01, 0x10, 0x90, 0x02, 0x09, 0xE0, 0xFF, 0x7D, 0x01, 0x12, 0x5F, 0xFD, 0x90, 0x04, 0x1F,
+0x74, 0x20, 0xF0, 0x22, 0x90, 0x01, 0x02, 0xE0, 0x54, 0x03, 0xFF, 0xE0, 0x54, 0x0C, 0x13, 0x13,
+0x54, 0x3F, 0xFE, 0xEF, 0x64, 0x01, 0x60, 0x04, 0xEF, 0xB4, 0x03, 0x0E, 0x90, 0x8A, 0xC5, 0x74,
+0x01, 0xF0, 0xA3, 0x74, 0x37, 0xF0, 0x79, 0x01, 0x80, 0x18, 0xEE, 0x64, 0x01, 0x60, 0x07, 0xAF,
+0x06, 0xEE, 0x64, 0x03, 0x70, 0x3B, 0x90, 0x8A, 0xC5, 0x74, 0x01, 0xF0, 0xA3, 0x74, 0x3D, 0xF0,
+0x79, 0x40, 0x90, 0x8A, 0xC5, 0xE0, 0xFE, 0xA3, 0xE0, 0xFF, 0xF5, 0x82, 0x8E, 0x83, 0xE0, 0x59,
+0x60, 0x08, 0xE9, 0xF0, 0xE4, 0x90, 0x8A, 0xF6, 0xF0, 0x22, 0x90, 0x8A, 0xF6, 0xE0, 0x04, 0xF0,
+0xE0, 0xC3, 0x94, 0x0A, 0x40, 0x0B, 0xE4, 0xF0, 0x90, 0x04, 0x19, 0xE0, 0x30, 0xE0, 0x02, 0x11,
+0x6D, 0x22, 0xC0, 0xE0, 0xC0, 0xF0, 0xC0, 0x83, 0xC0, 0x82, 0xC0, 0xD0, 0x75, 0xD0, 0x00, 0xC0,
+0x00, 0xC0, 0x01, 0xC0, 0x02, 0xC0, 0x03, 0xC0, 0x04, 0xC0, 0x05, 0xC0, 0x06, 0xC0, 0x07, 0x90,
+0x01, 0xC4, 0x74, 0xF2, 0xF0, 0x74, 0x60, 0xA3, 0xF0, 0x90, 0x01, 0x34, 0xE0, 0x55, 0x28, 0xF5,
+0x2C, 0xA3, 0xE0, 0x55, 0x29, 0xF5, 0x2D, 0xA3, 0xE0, 0x55, 0x2A, 0xF5, 0x2E, 0xA3, 0xE0, 0x55,
+0x2B, 0xF5, 0x2F, 0xE5, 0x2C, 0x20, 0xE0, 0x02, 0x41, 0x89, 0x90, 0x01, 0x34, 0x74, 0x01, 0xF0,
+0x85, 0xD1, 0x4D, 0x85, 0xD2, 0x4E, 0x85, 0xD3, 0x4F, 0x85, 0xD4, 0x50, 0x85, 0xD5, 0x51, 0x85,
+0xD6, 0x52, 0x85, 0xD7, 0x53, 0x85, 0xD9, 0x54, 0xE5, 0x54, 0x54, 0x40, 0xC3, 0x13, 0xFF, 0xE5,
+0x53, 0x54, 0x20, 0x6F, 0x70, 0x02, 0x41, 0x46, 0xE5, 0x54, 0x30, 0xE5, 0x02, 0x41, 0x46, 0xE5,
+0x52, 0x54, 0x1F, 0xF5, 0x08, 0xE5, 0x4D, 0x54, 0x3F, 0xF5, 0x09, 0xE5, 0x51, 0x54, 0x1F, 0xFF,
+0xE5, 0x08, 0x25, 0xE0, 0x24, 0xE3, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83, 0xE4, 0x8F, 0xF0,
+0x12, 0x42, 0x81, 0xE5, 0x53, 0x54, 0x1F, 0xFF, 0xE5, 0x08, 0x25, 0xE0, 0x24, 0xC0, 0xF5, 0x82,
+0xE4, 0x34, 0x85, 0xF5, 0x83, 0xE4, 0x8F, 0xF0, 0x12, 0x42, 0x81, 0xE5, 0x09, 0xD3, 0x94, 0x04,
+0x40, 0x03, 0x75, 0x09, 0x04, 0x75, 0xF0, 0x0A, 0xE5, 0x08, 0x90, 0x84, 0x00, 0x12, 0x43, 0x5F,
+0x75, 0xF0, 0x02, 0xE5, 0x09, 0x12, 0x43, 0x5F, 0xE0, 0xFE, 0xA3, 0xE0, 0xFF, 0xE5, 0x53, 0x54,
+0x1F, 0x2F, 0xFF, 0xE4, 0x3E, 0xFE, 0x75, 0xF0, 0x0A, 0xE5, 0x08, 0x90, 0x84, 0x00, 0x12, 0x43,
+0x5F, 0x75, 0xF0, 0x02, 0xE5, 0x09, 0x12, 0x43, 0x5F, 0xEE, 0xF0, 0xA3, 0xEF, 0xF0, 0xE5, 0x54,
+0x20, 0xE6, 0x24, 0xE5, 0x53, 0x54, 0x1F, 0xFF, 0xE5, 0x08, 0x25, 0xE0, 0x24, 0x63, 0xF5, 0x82,
+0xE4, 0x34, 0x88, 0xF5, 0x83, 0xE4, 0x8F, 0xF0, 0x12, 0x42, 0x81, 0xE5, 0x4F, 0x30, 0xE7, 0x36,
+0xAF, 0x08, 0x12, 0x5C, 0xC3, 0x80, 0x2F, 0xE5, 0x53, 0x54, 0x1F, 0xFF, 0xE5, 0x08, 0x25, 0xE0,
+0x24, 0xA3, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83, 0xE4, 0x8F, 0xF0, 0x12, 0x42, 0x81, 0xE5,
+0x4F, 0x30, 0xE7, 0x12, 0xE5, 0x4F, 0x54, 0x7F, 0xFD, 0xE5, 0x53, 0x54, 0x1F, 0xF5, 0x0D, 0xAB,
+0x09, 0xAF, 0x08, 0x12, 0x5C, 0x66, 0xE5, 0x24, 0x14, 0x24, 0xFD, 0x50, 0x02, 0x80, 0x3A, 0x90,
+0x8B, 0x1A, 0xE0, 0x60, 0x2B, 0x90, 0x01, 0x5B, 0xE4, 0xF0, 0x90, 0x01, 0x3C, 0x74, 0x04, 0xF0,
+0x12, 0x4B, 0x34, 0xEF, 0x64, 0x01, 0x70, 0x21, 0x90, 0x8B, 0x3D, 0x12, 0x4B, 0x5C, 0x90, 0x01,
+0x5B, 0x74, 0x05, 0xF0, 0x90, 0x06, 0x92, 0x74, 0x01, 0xF0, 0x90, 0x8B, 0x18, 0xF0, 0x80, 0x09,
+0x12, 0x4B, 0x34, 0xBF, 0x01, 0x03, 0x12, 0x4A, 0xFC, 0xE5, 0x2C, 0x30, 0xE1, 0x21, 0x90, 0x01,
+0x34, 0x74, 0x02, 0xF0, 0x85, 0xD1, 0x56, 0x85, 0xD2, 0x57, 0x85, 0xD3, 0x58, 0x85, 0xD4, 0x59,
+0x85, 0xD5, 0x5A, 0x85, 0xD6, 0x5B, 0x85, 0xD7, 0x5C, 0x85, 0xD9, 0x5D, 0x12, 0x5F, 0xA4, 0xE5,
+0x2C, 0x30, 0xE3, 0x06, 0x90, 0x01, 0x34, 0x74, 0x08, 0xF0, 0xE5, 0x2C, 0x30, 0xE4, 0x09, 0x90,
+0x01, 0x34, 0x74, 0x10, 0xF0, 0x43, 0x55, 0x10, 0xE5, 0x2C, 0x30, 0xE5, 0x26, 0x90, 0x01, 0xCF,
+0xE0, 0x30, 0xE5, 0x1F, 0xE0, 0x54, 0xDF, 0xF0, 0x90, 0x01, 0x34, 0x74, 0x20, 0xF0, 0x75, 0xA8,
+0x00, 0x75, 0xE8, 0x00, 0x12, 0x51, 0x9D, 0x90, 0x00, 0x03, 0xE0, 0x54, 0xFB, 0xF0, 0x12, 0x52,
+0x0E, 0x80, 0xFE, 0xE5, 0x2C, 0x30, 0xE6, 0x2D, 0x90, 0x01, 0x34, 0x74, 0x40, 0xF0, 0x90, 0x8B,
+0x32, 0xE0, 0x30, 0xE0, 0x0C, 0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x05, 0x90, 0x8B, 0x34, 0xE4,
+0xF0, 0x90, 0x8B, 0x2C, 0xE0, 0xFF, 0x30, 0xE0, 0x0C, 0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x05,
+0x90, 0x8B, 0x2E, 0xE4, 0xF0, 0xE5, 0x2E, 0x20, 0xE0, 0x02, 0x61, 0xE6, 0x90, 0x8B, 0x08, 0x74,
+0x01, 0xF0, 0x90, 0x01, 0x36, 0xF0, 0x90, 0x8B, 0x06, 0xE0, 0x60, 0x0F, 0xE4, 0xF0, 0x90, 0x05,
+0x53, 0xE0, 0x44, 0x02, 0xF0, 0x90, 0x05, 0xFC, 0xE0, 0x04, 0xF0, 0x90, 0x8B, 0x32, 0xE0, 0x30,
+0xE0, 0x2F, 0x90, 0x8B, 0x37, 0x74, 0x01, 0xF0, 0x90, 0x8B, 0x32, 0xE0, 0xFF, 0x13, 0x13, 0x54,
+0x3F, 0x30, 0xE0, 0x1D, 0x90, 0x8B, 0x34, 0x74, 0x01, 0xF0, 0xB1, 0x39, 0x90, 0x8B, 0x33, 0xE0,
+0x64, 0x03, 0x60, 0x0D, 0x7F, 0x01, 0x12, 0x4D, 0xE0, 0xEF, 0x60, 0x05, 0x7F, 0x04, 0x12, 0x4E,
+0x89, 0x90, 0x8B, 0x2C, 0xE0, 0xFF, 0x30, 0xE0, 0x55, 0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x4E,
+0x90, 0x8B, 0x2E, 0x74, 0x01, 0xF0, 0xB1, 0x39, 0xE4, 0xFF, 0x12, 0x4D, 0xE0, 0xEF, 0x60, 0x3E,
+0xB1, 0x5F, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x90, 0x8B, 0x2D, 0xE0, 0xFF, 0x64, 0x06, 0x60,
+0x2D, 0xEF, 0xB4, 0x04, 0x02, 0x80, 0x07, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x05, 0x04, 0xE4, 0xFF,
+0x80, 0x14, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x03, 0x04, 0x7F, 0x01, 0x80, 0x09, 0x90, 0x8B, 0x2D,
+0xE0, 0xB4, 0x02, 0x04, 0x7F, 0x01, 0xB1, 0x82, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x12, 0x43,
+0xE7, 0x90, 0x8B, 0x08, 0xE4, 0xF0, 0xE5, 0x2E, 0x30, 0xE1, 0x2F, 0x90, 0x01, 0x36, 0x74, 0x02,
+0xF0, 0x43, 0x55, 0x40, 0x11, 0x84, 0x90, 0x8B, 0x37, 0xE0, 0xB4, 0x01, 0x09, 0x90, 0x05, 0x22,
+0xE4, 0xF0, 0x90, 0x8B, 0x37, 0xF0, 0x90, 0x8B, 0x2C, 0xE0, 0x30, 0xE0, 0x0D, 0xE4, 0xFF, 0x12,
+0x4D, 0xE0, 0xEF, 0x60, 0x05, 0x90, 0x05, 0x22, 0xE4, 0xF0, 0xE5, 0x2E, 0x30, 0xE2, 0x16, 0x90,
+0x01, 0x36, 0x74, 0x04, 0xF0, 0x90, 0x8B, 0x2C, 0xE0, 0x30, 0xE0, 0x06, 0xA3, 0xE0, 0x64, 0x06,
+0x60, 0x03, 0x12, 0x46, 0xB3, 0xE5, 0x2E, 0x30, 0xE3, 0x38, 0x90, 0x01, 0x36, 0x74, 0x08, 0xF0,
+0xE5, 0x21, 0x64, 0x01, 0x70, 0x2C, 0xE5, 0x24, 0x60, 0x28, 0x90, 0x01, 0x57, 0xE4, 0xF0, 0x90,
+0x01, 0x3C, 0x74, 0x02, 0xF0, 0x90, 0x8B, 0x3D, 0xE4, 0xF0, 0x90, 0x8B, 0x11, 0xE0, 0x90, 0x8B,
+0x3E, 0xF0, 0xE4, 0xFB, 0xFD, 0x7F, 0x54, 0x7E, 0x01, 0x12, 0x4B, 0x6C, 0x90, 0x01, 0x57, 0x74,
+0x05, 0xF0, 0xE5, 0x2E, 0x30, 0xE4, 0x2B, 0x90, 0x01, 0x36, 0x74, 0x10, 0xF0, 0xE5, 0x21, 0xB4,
+0x01, 0x20, 0xE5, 0x24, 0x60, 0x1C, 0x90, 0x01, 0x57, 0xE4, 0xF0, 0x90, 0x01, 0x3C, 0x74, 0x02,
+0xF0, 0x90, 0x8B, 0x1B, 0xE4, 0xF0, 0x53, 0x25, 0xFD, 0xE5, 0x25, 0x54, 0x07, 0x70, 0x03, 0x12,
+0x4A, 0xFC, 0xE5, 0x2E, 0x30, 0xE5, 0x1F, 0x90, 0x01, 0x36, 0x74, 0x20, 0xF0, 0xE5, 0x21, 0xB4,
+0x01, 0x14, 0xE5, 0x24, 0x60, 0x10, 0x90, 0x8B, 0x1A, 0xE0, 0x64, 0x02, 0x60, 0x05, 0x12, 0x4A,
+0x97, 0x80, 0x03, 0x12, 0x49, 0x49, 0xE5, 0x2E, 0x30, 0xE6, 0x1B, 0x90, 0x01, 0x36, 0x74, 0x40,
+0xF0, 0xE5, 0x21, 0xB4, 0x01, 0x10, 0xE5, 0x24, 0x60, 0x0C, 0x53, 0x25, 0xFE, 0xE5, 0x25, 0x54,
+0x07, 0x70, 0x03, 0x12, 0x4A, 0xFC, 0xE5, 0x2F, 0x30, 0xE1, 0x28, 0x90, 0x01, 0x37, 0x74, 0x02,
+0xF0, 0x90, 0x8B, 0x2C, 0xE0, 0x30, 0xE0, 0x18, 0xE4, 0xFF, 0x12, 0x4D, 0xE0, 0xEF, 0x60, 0x08,
+0x12, 0x48, 0xFE, 0x12, 0x7D, 0xC1, 0x80, 0x0B, 0x90, 0x8B, 0x31, 0x74, 0x01, 0xF0, 0x80, 0x03,
+0x12, 0x48, 0xFE, 0x74, 0xF2, 0x04, 0x90, 0x01, 0xC4, 0xF0, 0x74, 0x60, 0xA3, 0xF0, 0xD0, 0x07,
+0xD0, 0x06, 0xD0, 0x05, 0xD0, 0x04, 0xD0, 0x03, 0xD0, 0x02, 0xD0, 0x01, 0xD0, 0x00, 0xD0, 0xD0,
+0xD0, 0x82, 0xD0, 0x83, 0xD0, 0xF0, 0xD0, 0xE0, 0x32, 0xE4, 0x90, 0x8B, 0x3D, 0xF0, 0x90, 0x05,
+0x58, 0xE0, 0xFF, 0x90, 0x8B, 0x38, 0xE0, 0x2F, 0x24, 0xFE, 0x90, 0x8B, 0x3E, 0xF0, 0xE4, 0xFB,
+0xFD, 0x7F, 0x50, 0x7E, 0x01, 0x12, 0x4B, 0x6C, 0x90, 0x01, 0x53, 0x74, 0x05, 0xF0, 0x22, 0x90,
+0x8B, 0x2C, 0xE0, 0xFF, 0xC4, 0x13, 0x13, 0x54, 0x03, 0x30, 0xE0, 0x0A, 0xA3, 0xE0, 0x64, 0x06,
+0x60, 0x04, 0x7F, 0x06, 0xB1, 0x82, 0x90, 0x8B, 0x2D, 0xE0, 0x64, 0x06, 0x60, 0x03, 0x12, 0x78,
+0x35, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x90, 0x8B, 0x2D, 0xE0, 0xFE, 0x6F, 0x70,
+0x02, 0xE1, 0x4E, 0xEF, 0x12, 0x43, 0x94, 0x65, 0xB0, 0x00, 0x65, 0xEA, 0x01, 0x66, 0x30, 0x02,
+0x66, 0x6A, 0x03, 0x66, 0xA2, 0x04, 0x66, 0xDB, 0x05, 0x67, 0x16, 0x06, 0x00, 0x00, 0x67, 0x4E,
+0xEE, 0xB4, 0x04, 0x06, 0x7F, 0x01, 0xF1, 0x81, 0xE1, 0x4E, 0x90, 0x8B, 0x2D, 0xE0, 0xFF, 0xB4,
+0x05, 0x04, 0xF1, 0x5D, 0xE1, 0x4E, 0xEF, 0xB4, 0x06, 0x06, 0x7F, 0x01, 0xF1, 0x72, 0x80, 0x16,
+0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x03, 0x06, 0x7F, 0x01, 0xF1, 0x53, 0x80, 0x09, 0x90, 0x8B, 0x2D,
+0xE0, 0xB4, 0x02, 0x02, 0xF1, 0x67, 0xF1, 0xA4, 0xE1, 0x4E, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x04,
+0x06, 0x7F, 0x01, 0xF1, 0x81, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x05, 0x02, 0xF1, 0x5D,
+0x90, 0x8B, 0x2D, 0xE0, 0x70, 0x04, 0xF1, 0x9A, 0xE1, 0x4E, 0x90, 0x8B, 0x2D, 0xE0, 0xFE, 0xB4,
+0x06, 0x06, 0x7F, 0x01, 0xF1, 0x72, 0xE1, 0x4E, 0xEE, 0xB4, 0x03, 0x06, 0x7F, 0x01, 0xF1, 0x53,
+0xE1, 0x4E, 0x90, 0x8B, 0x2D, 0xE0, 0x64, 0x02, 0x60, 0x02, 0xE1, 0x4E, 0xF1, 0x67, 0xE1, 0x4E,
+0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x04, 0x06, 0x7F, 0x01, 0xF1, 0x81, 0x80, 0x09, 0x90, 0x8B, 0x2D,
+0xE0, 0xB4, 0x05, 0x02, 0xF1, 0x5D, 0x90, 0x8B, 0x2D, 0xE0, 0x70, 0x04, 0xF1, 0x9A, 0x80, 0x16,
+0x90, 0x8B, 0x2D, 0xE0, 0xFE, 0xB4, 0x06, 0x06, 0x7F, 0x01, 0xF1, 0x72, 0x80, 0x08, 0xEE, 0xB4,
+0x03, 0x04, 0x7F, 0x01, 0xF1, 0x53, 0xF1, 0xD0, 0xE1, 0x4E, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x04,
+0x06, 0x7F, 0x01, 0xF1, 0x81, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x05, 0x02, 0xF1, 0x5D,
+0x90, 0x8B, 0x2D, 0xE0, 0x70, 0x04, 0xF1, 0x9A, 0x80, 0x14, 0x90, 0x8B, 0x2D, 0xE0, 0xFE, 0xB4,
+0x06, 0x06, 0xE4, 0xFF, 0xF1, 0x72, 0x80, 0x06, 0xEE, 0xB4, 0x02, 0x02, 0xF1, 0x67, 0xF1, 0xB9,
+0xE1, 0x4E, 0x90, 0x8B, 0x2D, 0xE0, 0xFE, 0xB4, 0x06, 0x06, 0xE4, 0xFF, 0xF1, 0x72, 0x80, 0x13,
+0xEE, 0xB4, 0x03, 0x06, 0x7F, 0x01, 0xF1, 0x53, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x02,
+0x02, 0xF1, 0x67, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x01, 0x04, 0xF1, 0xA4, 0x80, 0x09, 0x90, 0x8B,
+0x2D, 0xE0, 0xB4, 0x05, 0x02, 0xF1, 0x5D, 0xF1, 0xAF, 0x80, 0x73, 0x90, 0x8B, 0x2D, 0xE0, 0xFE,
+0xB4, 0x06, 0x06, 0xE4, 0xFF, 0xF1, 0x72, 0x80, 0x13, 0xEE, 0xB4, 0x03, 0x06, 0x7F, 0x01, 0xF1,
+0x53, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x02, 0x02, 0xF1, 0x67, 0x90, 0x8B, 0x2D, 0xE0,
+0xB4, 0x01, 0x04, 0xF1, 0xA4, 0x80, 0x0B, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x04, 0x04, 0x7F, 0x01,
+0xF1, 0x81, 0xF1, 0xC3, 0x80, 0x38, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x04, 0x06, 0x7F, 0x01, 0xF1,
+0x81, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x05, 0x02, 0xF1, 0x5D, 0x90, 0x8B, 0x2D, 0xE0,
+0x70, 0x04, 0xF1, 0x9A, 0x80, 0x16, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x03, 0x06, 0xE4, 0xFF, 0xF1,
+0x53, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x02, 0x02, 0xF1, 0x67, 0xF1, 0xDD, 0xD0, 0xD0,
+0x92, 0xAF, 0x22, 0x12, 0x4A, 0xB2, 0x90, 0x8B, 0x2D, 0x74, 0x01, 0xF0, 0x22, 0x90, 0x05, 0x22,
+0xE4, 0xF0, 0x90, 0x8B, 0x2D, 0xF0, 0x22, 0x90, 0x05, 0x22, 0xE4, 0xF0, 0x90, 0x8B, 0x2D, 0x04,
+0xF0, 0x22, 0xEF, 0x60, 0x05, 0x90, 0x05, 0x22, 0xE4, 0xF0, 0x90, 0x8B, 0x2D, 0x74, 0x01, 0xF0,
+0x22, 0x90, 0x8B, 0x56, 0xEF, 0xF0, 0x12, 0x7D, 0x42, 0x90, 0x8B, 0x56, 0xE0, 0x60, 0x05, 0x90,
+0x05, 0x22, 0xE4, 0xF0, 0xE4, 0x90, 0x8B, 0x2D, 0xF0, 0x22, 0x12, 0x4A, 0xCC, 0x90, 0x8B, 0x2D,
+0x74, 0x01, 0xF0, 0x22, 0x7F, 0x01, 0x12, 0x4A, 0x7C, 0xE4, 0x90, 0x8B, 0x2D, 0xF0, 0x22, 0x12,
+0x7C, 0x4A, 0x90, 0x8B, 0x2D, 0x74, 0x04, 0xF0, 0x22, 0x12, 0x4A, 0x32, 0x90, 0x8B, 0x2D, 0x74,
+0x03, 0xF0, 0x22, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x90, 0x8B, 0x2D, 0x74, 0x05, 0xF0, 0x22,
+0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x90, 0x8B, 0x2D, 0x74, 0x02, 0xF0, 0x22, 0x90, 0x05, 0x22,
+0x74, 0x6F, 0xF0, 0x90, 0x8B, 0x2D, 0x74, 0x06, 0xF0, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0,
+0xD0, 0xE4, 0xFD, 0xFC, 0xEF, 0x30, 0xE0, 0x02, 0x7D, 0x80, 0xEF, 0xC3, 0x13, 0x90, 0xFD, 0x10,
+0xF0, 0xAE, 0x04, 0xAF, 0x05, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x75, 0x28, 0x33, 0xE4, 0xF5, 0x29,
+0x75, 0x2A, 0x07, 0xF5, 0x2B, 0x90, 0x01, 0x30, 0xE5, 0x28, 0xF0, 0xA3, 0xE5, 0x29, 0xF0, 0xA3,
+0xE5, 0x2A, 0xF0, 0xA3, 0xE5, 0x2B, 0xF0, 0x22, 0x75, 0x30, 0x1F, 0x75, 0x31, 0x01, 0x43, 0x31,
+0x10, 0xE4, 0xF5, 0x32, 0x90, 0x01, 0x38, 0xE5, 0x30, 0xF0, 0xA3, 0xE5, 0x31, 0xF0, 0xA3, 0xE5,
+0x32, 0xF0, 0x22, 0x22, 0x90, 0x00, 0x02, 0xE0, 0x54, 0xE0, 0x7F, 0x01, 0x60, 0x02, 0x7F, 0x00,
+0x22, 0x90, 0x00, 0xF3, 0xE0, 0x7F, 0x00, 0x30, 0xE3, 0x02, 0x7F, 0x01, 0x22, 0x90, 0x8B, 0x09,
+0xE0, 0xB4, 0x01, 0x0C, 0x90, 0x00, 0xF2, 0xE0, 0x30, 0xE7, 0x05, 0x7E, 0xFD, 0x7F, 0x33, 0x22,
+0x7E, 0xFD, 0x7F, 0x2F, 0x22, 0x90, 0x00, 0xF3, 0xE0, 0x30, 0xE2, 0x0D, 0x90, 0x05, 0x41, 0x74,
+0x10, 0xF0, 0x90, 0x05, 0x5A, 0xF0, 0xA3, 0xE4, 0xF0, 0x22, 0x90, 0x01, 0x64, 0x74, 0xA0, 0xF0,
+0x22, 0xC0, 0xE0, 0xC0, 0x83, 0xC0, 0x82, 0xC0, 0xD0, 0x75, 0xD0, 0x00, 0xC0, 0x05, 0xC0, 0x06,
+0xC0, 0x07, 0x7D, 0x91, 0x90, 0x01, 0xC4, 0xED, 0xF0, 0x74, 0x68, 0xFF, 0xA3, 0xF0, 0x53, 0x91,
+0xEF, 0x90, 0x00, 0x51, 0xE0, 0xFE, 0x90, 0x00, 0x55, 0xE0, 0x5E, 0xF5, 0x3D, 0x90, 0x00, 0x52,
+0xE0, 0xFE, 0x90, 0x00, 0x56, 0xE0, 0x5E, 0xF5, 0x3E, 0xE5, 0x3D, 0x30, 0xE4, 0x06, 0x90, 0x00,
+0x55, 0x74, 0x10, 0xF0, 0xE5, 0x3D, 0x30, 0xE5, 0x06, 0x90, 0x00, 0x55, 0x74, 0x20, 0xF0, 0xE5,
+0x3D, 0x30, 0xE6, 0x06, 0x90, 0x00, 0x55, 0x74, 0x40, 0xF0, 0xE5, 0x3D, 0x30, 0xE7, 0x06, 0x90,
+0x00, 0x55, 0x74, 0x80, 0xF0, 0xE5, 0x3E, 0x30, 0xE0, 0x06, 0x90, 0x00, 0x56, 0x74, 0x01, 0xF0,
+0xE5, 0x3E, 0x30, 0xE1, 0x06, 0x90, 0x00, 0x56, 0x74, 0x02, 0xF0, 0xE5, 0x3E, 0x30, 0xE2, 0x06,
+0x90, 0x00, 0x56, 0x74, 0x04, 0xF0, 0xE5, 0x3E, 0x30, 0xE3, 0x06, 0x90, 0x00, 0x56, 0x74, 0x08,
+0xF0, 0x90, 0x01, 0xC4, 0xED, 0xF0, 0xA3, 0xEF, 0xF0, 0xD0, 0x07, 0xD0, 0x06, 0xD0, 0x05, 0xD0,
+0xD0, 0xD0, 0x82, 0xD0, 0x83, 0xD0, 0xE0, 0x32, 0xEF, 0xC3, 0x94, 0x20, 0x50, 0x39, 0xEF, 0x30,
+0xE0, 0x17, 0xED, 0xC4, 0x54, 0xF0, 0xFD, 0xEF, 0xC3, 0x13, 0xFE, 0x24, 0xA4, 0xF5, 0x82, 0xE4,
+0x34, 0x04, 0xF5, 0x83, 0xE0, 0x54, 0x0F, 0x80, 0x10, 0xEF, 0xC3, 0x13, 0xFE, 0x24, 0xA4, 0xF5,
+0x82, 0xE4, 0x34, 0x04, 0xF5, 0x83, 0xE0, 0x54, 0xF0, 0xF0, 0x74, 0xA4, 0x2E, 0xF5, 0x82, 0xE4,
+0x34, 0x04, 0xF5, 0x83, 0xE0, 0x4D, 0xF0, 0x22, 0xAD, 0x07, 0x74, 0x84, 0x2D, 0xF5, 0x82, 0xE4,
+0x34, 0x04, 0xF5, 0x83, 0xE0, 0x54, 0x7F, 0x90, 0x8A, 0xDE, 0xF0, 0xE0, 0xF9, 0x54, 0x1F, 0xA3,
+0xF0, 0x75, 0xF0, 0x09, 0xED, 0x90, 0x87, 0x27, 0x12, 0x43, 0x5F, 0xE0, 0xFF, 0x90, 0x8A, 0xE1,
+0xF0, 0xED, 0x25, 0xE0, 0x24, 0x81, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE0, 0xFB, 0xA3,
+0xE0, 0x90, 0x8A, 0xE2, 0xCB, 0xF0, 0xA3, 0xEB, 0xF0, 0xED, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82,
+0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xFB, 0xA3, 0xE0, 0x90, 0x8A, 0xE4, 0xCB, 0xF0, 0xA3, 0xEB,
+0xF0, 0x90, 0x8A, 0xDF, 0xE0, 0xFE, 0x25, 0xE0, 0x24, 0x2E, 0xF5, 0x82, 0xE4, 0x34, 0x41, 0xF5,
+0x83, 0xE4, 0x93, 0xFA, 0x74, 0x01, 0x93, 0xFB, 0xED, 0x25, 0xE0, 0x24, 0xE1, 0xF5, 0x82, 0xE4,
+0x34, 0x86, 0xF5, 0x83, 0xEA, 0xF0, 0xA3, 0xEB, 0xF0, 0xEE, 0xC3, 0x9F, 0x40, 0x02, 0x41, 0xB9,
+0x90, 0x8A, 0xDF, 0xE0, 0xFF, 0x74, 0xA5, 0x2D, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xEF,
+0xF0, 0xEF, 0x04, 0x90, 0x8A, 0xE0, 0xF0, 0x90, 0x8A, 0xE1, 0xE0, 0xFF, 0x90, 0x8A, 0xE0, 0xE0,
+0xFE, 0xD3, 0x9F, 0x40, 0x02, 0x41, 0xF3, 0xEE, 0xC3, 0x94, 0x10, 0x40, 0x21, 0xEE, 0x24, 0xF0,
+0xFF, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08, 0x80, 0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8,
+0xF9, 0xFF, 0x90, 0x8A, 0xE2, 0xE0, 0x5E, 0xFE, 0xA3, 0xE0, 0x5F, 0x4E, 0x70, 0x27, 0x90, 0x8A,
+0xE0, 0xE0, 0xFF, 0xC3, 0x94, 0x10, 0x50, 0x59, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08, 0x80,
+0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8, 0xF9, 0xFF, 0x90, 0x8A, 0xE4, 0xE0, 0x5E, 0xFE, 0xA3,
+0xE0, 0x5F, 0x4E, 0x60, 0x3C, 0x90, 0x8A, 0xE0, 0xE0, 0xB4, 0x11, 0x0D, 0x90, 0x8A, 0xE3, 0xE0,
+0x30, 0xE7, 0x06, 0x90, 0x8A, 0xE0, 0x74, 0x17, 0xF0, 0x90, 0x8A, 0xE0, 0xE0, 0xFF, 0x64, 0x13,
+0x60, 0x04, 0xEF, 0xB4, 0x12, 0x0D, 0x90, 0x8A, 0xE2, 0xE0, 0x30, 0xE0, 0x06, 0x90, 0x8A, 0xE0,
+0x74, 0x18, 0xF0, 0x90, 0x8A, 0xE0, 0xE0, 0x90, 0x8A, 0xDF, 0xF0, 0x90, 0x8A, 0xDE, 0xF0, 0x80,
+0x42, 0x90, 0x8A, 0xE0, 0xE0, 0x04, 0xF0, 0x41, 0x17, 0x90, 0x8A, 0xE1, 0xE0, 0xFC, 0x90, 0x8A,
+0xDF, 0xE0, 0xFF, 0x6C, 0x70, 0x71, 0x74, 0xA5, 0x2D, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83,
+0xEF, 0xF0, 0x75, 0xF0, 0x09, 0xED, 0x90, 0x87, 0x29, 0x12, 0x43, 0x5F, 0xE0, 0xB4, 0x01, 0x10,
+0xE9, 0x20, 0xE6, 0x0C, 0x90, 0x8A, 0xDF, 0xE0, 0x44, 0x40, 0x90, 0x8A, 0xDE, 0xF0, 0x80, 0x03,
+0xAF, 0x01, 0x22, 0x90, 0x8A, 0xDF, 0xE0, 0xFF, 0x25, 0xE0, 0x24, 0x66, 0xF5, 0x82, 0xE4, 0x34,
+0x41, 0xF5, 0x83, 0xE4, 0x93, 0xFA, 0x74, 0x01, 0x93, 0xFB, 0xEF, 0x25, 0xE0, 0x24, 0x2E, 0xF5,
+0x82, 0xE4, 0x34, 0x41, 0xF5, 0x83, 0x74, 0x01, 0x93, 0x2B, 0xFF, 0xE4, 0x93, 0x3A, 0xC3, 0x13,
+0xFE, 0xEF, 0x13, 0xFF, 0xED, 0x25, 0xE0, 0x24, 0xE1, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83,
+0xEE, 0xF0, 0xA3, 0xEF, 0xF0, 0x80, 0x66, 0x90, 0x8A, 0xDF, 0xE0, 0xD3, 0x9C, 0x40, 0x5E, 0x90,
+0x8A, 0xE1, 0xE0, 0xFF, 0x74, 0xA5, 0x2D, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xEF, 0xF0,
+0x90, 0x8A, 0xDF, 0xEF, 0xF0, 0x90, 0x8A, 0xDE, 0xF0, 0xFC, 0xA3, 0xE0, 0xFF, 0x25, 0xE0, 0x24,
+0x66, 0xF5, 0x82, 0xE4, 0x34, 0x41, 0xF5, 0x83, 0xE4, 0x93, 0xFA, 0x74, 0x01, 0x93, 0xFB, 0xEF,
+0x25, 0xE0, 0x24, 0x2E, 0xF5, 0x82, 0xE4, 0x34, 0x41, 0xF5, 0x83, 0x74, 0x01, 0x93, 0x2B, 0xFF,
+0xE4, 0x93, 0x3A, 0xC3, 0x13, 0xFE, 0xEF, 0x13, 0xFF, 0xED, 0x25, 0xE0, 0x24, 0xE1, 0xF5, 0x82,
+0xE4, 0x34, 0x86, 0xF5, 0x83, 0xEE, 0xF0, 0xA3, 0xEF, 0xF0, 0xAF, 0x04, 0x22, 0x74, 0x01, 0x2D,
+0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE4, 0xF0, 0xAF, 0x05, 0x90, 0x8A, 0xDE, 0xE0, 0x44,
+0x80, 0xFD, 0x12, 0x5C, 0x4E, 0x90, 0x8A, 0xDE, 0xE0, 0x44, 0x80, 0xFF, 0x22, 0xE4, 0x90, 0x8A,
+0xCF, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0xC3, 0x94, 0x20, 0x40, 0x03, 0x02, 0x72, 0x54, 0x75,
+0xF0, 0x09, 0xEF, 0x90, 0x87, 0x2A, 0x12, 0x43, 0x5F, 0xE0, 0x64, 0x01, 0x60, 0x03, 0x02, 0x72,
+0x4B, 0x90, 0x8A, 0xCF, 0xE0, 0x25, 0xE0, 0x24, 0xC0, 0xF5, 0x82, 0xE4, 0x34, 0x85, 0xF5, 0x83,
+0xE0, 0xFC, 0xA3, 0xE0, 0xD3, 0x94, 0x00, 0xEC, 0x94, 0x00, 0x50, 0x03, 0x02, 0x72, 0x4B, 0xEF,
+0x75, 0xF0, 0x0A, 0xA4, 0x24, 0x00, 0xF9, 0x74, 0x84, 0x35, 0xF0, 0x75, 0x12, 0x01, 0xF5, 0x13,
+0x89, 0x14, 0x90, 0x8A, 0xCF, 0xE0, 0x25, 0xE0, 0x24, 0xC0, 0xF5, 0x82, 0xE4, 0x34, 0x85, 0xF5,
+0x83, 0xE0, 0xFD, 0xA3, 0xE0, 0x90, 0x8A, 0xD4, 0xCD, 0xF0, 0xA3, 0xED, 0xF0, 0xEF, 0x25, 0xE0,
+0x24, 0x63, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83, 0xE0, 0xFF, 0xA3, 0xE0, 0x90, 0x8A, 0xD6,
+0xCF, 0xF0, 0xA3, 0xEF, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0xFE, 0x24, 0x84, 0xF5, 0x82, 0xE4, 0x34,
+0x04, 0xF5, 0x83, 0xE0, 0x54, 0x3F, 0x90, 0x8A, 0xD0, 0xF0, 0xE0, 0xFD, 0x54, 0x1F, 0xA3, 0xF0,
+0x75, 0xF0, 0x09, 0xEE, 0x90, 0x87, 0x27, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xD9, 0xF0, 0x90,
+0x8A, 0xCF, 0xE0, 0xFB, 0x24, 0x64, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE0, 0xC3, 0x94,
+0x05, 0x40, 0x02, 0xC1, 0x9C, 0x90, 0x8A, 0xD9, 0xE0, 0xFE, 0x90, 0x8A, 0xD1, 0xE0, 0x9E, 0x40,
+0x13, 0x90, 0x8A, 0xD9, 0xE0, 0x90, 0x8A, 0xD1, 0xF0, 0xED, 0x54, 0x40, 0xFD, 0x90, 0x8A, 0xD0,
+0xF0, 0xEE, 0x4D, 0xF0, 0x90, 0x8A, 0xD1, 0xE0, 0xFF, 0x90, 0x41, 0x12, 0x93, 0xFE, 0x74, 0x23,
+0x2B, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xC3, 0x9E, 0x40, 0x06, 0xEF, 0x90, 0x40,
+0xDA, 0x80, 0x07, 0x90, 0x8A, 0xD1, 0xE0, 0x90, 0x40, 0xF6, 0x93, 0x90, 0x8A, 0xD8, 0xF0, 0x90,
+0x8A, 0xD8, 0xE0, 0x75, 0xF0, 0x06, 0xA4, 0x24, 0x50, 0xF9, 0x74, 0x40, 0x35, 0xF0, 0x75, 0x0F,
+0xFF, 0xF5, 0x10, 0x89, 0x11, 0x90, 0x8A, 0xD0, 0xE0, 0x90, 0x41, 0xBA, 0x93, 0xFF, 0xD3, 0x90,
+0x8A, 0xD7, 0xE0, 0x9F, 0x90, 0x8A, 0xD6, 0xE0, 0x94, 0x00, 0x40, 0x0D, 0x90, 0x8A, 0xCF, 0xE0,
+0xFF, 0xE4, 0xFD, 0x12, 0x5D, 0x41, 0x02, 0x71, 0xE1, 0x90, 0x8A, 0xCF, 0xE0, 0x25, 0xE0, 0x24,
+0xE1, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE0, 0xFF, 0xA3, 0xE0, 0x90, 0x8A, 0xD2, 0xCF,
+0xF0, 0xA3, 0xEF, 0xF0, 0xAB, 0x0F, 0xAA, 0x10, 0xA9, 0x11, 0x12, 0x29, 0xD9, 0xFF, 0x7E, 0x00,
+0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x12, 0x42, 0x97, 0xFD, 0xAC, 0xF0, 0x12, 0x29, 0xF2, 0x90,
+0x8A, 0xD2, 0xEE, 0x8F, 0xF0, 0x12, 0x42, 0x81, 0xAB, 0x0F, 0xAA, 0x10, 0xA9, 0x11, 0x90, 0x00,
+0x01, 0x12, 0x42, 0x20, 0xFF, 0x7E, 0x00, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x90, 0x00, 0x02,
+0x12, 0x42, 0xC2, 0xFD, 0xAC, 0xF0, 0x12, 0x29, 0xF2, 0x90, 0x8A, 0xD2, 0xEE, 0x8F, 0xF0, 0x12,
+0x42, 0x81, 0xAB, 0x0F, 0xAA, 0x10, 0xA9, 0x11, 0x90, 0x00, 0x02, 0x12, 0x42, 0x20, 0xFF, 0x7E,
+0x00, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x90, 0x00, 0x04, 0x12, 0x42, 0xC2, 0xFD, 0xAC, 0xF0,
+0x12, 0x29, 0xF2, 0x90, 0x8A, 0xD2, 0xEE, 0x8F, 0xF0, 0x12, 0x42, 0x81, 0xAB, 0x0F, 0xAA, 0x10,
+0xA9, 0x11, 0x90, 0x00, 0x03, 0x12, 0x42, 0x20, 0xFF, 0x7E, 0x00, 0xAB, 0x12, 0xAA, 0x13, 0xA9,
+0x14, 0x90, 0x00, 0x06, 0x12, 0x42, 0xC2, 0xFD, 0xAC, 0xF0, 0x12, 0x29, 0xF2, 0x90, 0x8A, 0xD2,
+0xEE, 0x8F, 0xF0, 0x12, 0x42, 0x81, 0xAB, 0x0F, 0xAA, 0x10, 0xA9, 0x11, 0x90, 0x00, 0x04, 0x12,
+0x42, 0x20, 0xFF, 0x7E, 0x00, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x90, 0x00, 0x08, 0x12, 0x42,
+0xC2, 0xFD, 0xAC, 0xF0, 0x12, 0x29, 0xF2, 0x90, 0x8A, 0xD2, 0xEE, 0x8F, 0xF0, 0x12, 0x42, 0x81,
+0xAB, 0x0F, 0xAA, 0x10, 0xA9, 0x11, 0x90, 0x00, 0x05, 0x12, 0x42, 0x20, 0xFF, 0x7E, 0x00, 0x90,
+0x8A, 0xD4, 0xE0, 0xFC, 0xA3, 0xE0, 0xFD, 0x12, 0x29, 0xF2, 0xD3, 0x90, 0x8A, 0xD3, 0xE0, 0x9F,
+0x90, 0x8A, 0xD2, 0xE0, 0x9E, 0x40, 0x0C, 0xA3, 0xE0, 0x9F, 0xF0, 0x90, 0x8A, 0xD2, 0xE0, 0x9E,
+0xF0, 0x80, 0x07, 0xE4, 0x90, 0x8A, 0xD2, 0xF0, 0xA3, 0xF0, 0x90, 0x8A, 0xD2, 0xE0, 0xFC, 0xA3,
+0xE0, 0xFD, 0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0x25, 0xE0, 0x24, 0xE1, 0xF5, 0x82, 0xE4, 0x34, 0x86,
+0xF5, 0x83, 0xEC, 0xF0, 0xA3, 0xED, 0xF0, 0x90, 0x8A, 0xD0, 0xE0, 0x25, 0xE0, 0x24, 0x2E, 0xF5,
+0x82, 0xE4, 0x34, 0x41, 0xF5, 0x83, 0xE4, 0x93, 0xFA, 0x74, 0x01, 0x93, 0xFB, 0xD3, 0xED, 0x9B,
+0xEC, 0x9A, 0x40, 0x05, 0x31, 0x78, 0x02, 0x71, 0xAF, 0x90, 0x8A, 0xD0, 0xE0, 0x25, 0xE0, 0x24,
+0x66, 0xF5, 0x82, 0xE4, 0x34, 0x41, 0xF5, 0x83, 0xE4, 0x93, 0xFE, 0x74, 0x01, 0x93, 0xFF, 0xC3,
+0x90, 0x8A, 0xD3, 0xE0, 0x9F, 0x90, 0x8A, 0xD2, 0xE0, 0x9E, 0x40, 0x03, 0x02, 0x71, 0xAF, 0x90,
+0x8A, 0xCF, 0xE0, 0xFF, 0x7D, 0x01, 0x12, 0x5D, 0x41, 0x02, 0x71, 0xAF, 0x90, 0x8A, 0xCF, 0xE0,
+0xFF, 0x24, 0x64, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE0, 0xFC, 0x64, 0x05, 0x60, 0x03,
+0x02, 0x70, 0x7D, 0x90, 0x87, 0x22, 0xE0, 0xFE, 0xB4, 0x03, 0x0B, 0x90, 0x8A, 0xD1, 0xE0, 0xC3,
+0x94, 0x19, 0x40, 0x3D, 0x80, 0x2E, 0xEE, 0xB4, 0x02, 0x0B, 0x90, 0x8A, 0xD1, 0xE0, 0xC3, 0x94,
+0x11, 0x40, 0x2E, 0x80, 0x1F, 0x90, 0x87, 0x22, 0xE0, 0xFE, 0xB4, 0x01, 0x0B, 0x90, 0x8A, 0xD1,
+0xE0, 0xC3, 0x94, 0x0A, 0x40, 0x1B, 0x80, 0x0C, 0xEE, 0x70, 0x11, 0x90, 0x8A, 0xD1, 0xE0, 0xC3,
+0x94, 0x03, 0x40, 0x0D, 0x90, 0x89, 0x43, 0x74, 0x01, 0xF0, 0x80, 0x05, 0xE4, 0x90, 0x89, 0x43,
+0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0xFE, 0x24, 0x43, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83, 0xE0,
+0x90, 0x8A, 0xDD, 0xF0, 0x74, 0x23, 0x2E, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xFE,
+0xC3, 0x94, 0x30, 0x50, 0x0B, 0xE4, 0x90, 0x8A, 0xDD, 0xF0, 0x74, 0x64, 0x2F, 0x02, 0x70, 0x28,
+0x90, 0x89, 0x43, 0xE0, 0x64, 0x01, 0x60, 0x03, 0x02, 0x70, 0x1D, 0x90, 0x8A, 0xCF, 0xE0, 0x24,
+0x44, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0x64, 0x0A, 0x60, 0x5B, 0x90, 0x8A, 0xCF,
+0xE0, 0xFF, 0xEE, 0x24, 0x05, 0xFB, 0xE4, 0x33, 0xFA, 0x74, 0x21, 0x2F, 0xF5, 0x82, 0xE4, 0x34,
+0x86, 0xF5, 0x83, 0xE0, 0xFF, 0xD3, 0x9B, 0xEA, 0x64, 0x80, 0xF8, 0x74, 0x80, 0x98, 0x50, 0x38,
+0x90, 0x8A, 0xCF, 0xE0, 0xFE, 0xEF, 0x24, 0x05, 0xFB, 0xE4, 0x33, 0xFA, 0x74, 0x23, 0x2E, 0xF5,
+0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xD3, 0x9B, 0xEA, 0x64, 0x80, 0xF8, 0x74, 0x80, 0x98,
+0x50, 0x16, 0x90, 0x8A, 0xCF, 0xE0, 0x24, 0x84, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE0,
+0xFF, 0x90, 0x8A, 0xD1, 0xE0, 0x6F, 0x60, 0x56, 0x90, 0x8A, 0xCF, 0xE0, 0x24, 0x23, 0xF5, 0x82,
+0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xFF, 0xD3, 0x94, 0x42, 0x40, 0x08, 0x90, 0x8A, 0xDD, 0x74,
+0x05, 0xF0, 0x80, 0x11, 0xEF, 0xD3, 0x94, 0x39, 0x90, 0x8A, 0xDD, 0x40, 0x05, 0x74, 0x03, 0xF0,
+0x80, 0x03, 0x74, 0x01, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0x24, 0x23, 0xF5, 0x82, 0xE4, 0x34,
+0x89, 0xF5, 0x83, 0xE0, 0xFE, 0x74, 0x21, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xEE,
+0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0x24, 0x44, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0x80, 0x2F, 0x90, 0x8A,
+0xCF, 0xE0, 0xFF, 0x24, 0x64, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE4, 0xF0, 0x74, 0x44,
+0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0x04, 0xF0, 0x80, 0x14, 0xE4, 0x90, 0x8A,
+0xDD, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0x24, 0x64, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE4,
+0xF0, 0x90, 0x8A, 0xD1, 0xE0, 0xFE, 0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0x24, 0x84, 0xF5, 0x82, 0xE4,
+0x34, 0x8A, 0xF5, 0x83, 0xEE, 0xF0, 0x90, 0x8A, 0xDD, 0xE0, 0xFE, 0x74, 0x43, 0x2F, 0xF5, 0x82,
+0xE4, 0x34, 0x88, 0xF5, 0x83, 0xEE, 0xF0, 0x75, 0xF0, 0x09, 0xEF, 0x90, 0x87, 0x2B, 0x12, 0x43,
+0x5F, 0xE0, 0xB4, 0x01, 0x11, 0xE4, 0x90, 0x8A, 0xDD, 0xF0, 0x74, 0x64, 0x2F, 0xF5, 0x82, 0xE4,
+0x34, 0x8A, 0xF5, 0x83, 0xE4, 0xF0, 0x90, 0x8A, 0xDD, 0xE0, 0xFD, 0x21, 0xAC, 0xEC, 0x64, 0x06,
+0x60, 0x02, 0x21, 0xAF, 0x90, 0x8A, 0xD2, 0xF0, 0xA3, 0xF0, 0x90, 0x41, 0xDB, 0x93, 0xFF, 0x7E,
+0x00, 0x90, 0x8A, 0xD4, 0xE0, 0xFC, 0xA3, 0xE0, 0xFD, 0x12, 0x29, 0xF2, 0x90, 0x8A, 0xDB, 0xEE,
+0xF0, 0xA3, 0xEF, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0x24, 0x43, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5,
+0x83, 0xE0, 0x90, 0x8A, 0xDD, 0xF0, 0xE4, 0x90, 0x8A, 0xDA, 0xF0, 0x90, 0x8A, 0xDA, 0xE0, 0xFF,
+0xD3, 0x94, 0x04, 0x50, 0x47, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x75, 0xF0, 0x02, 0xEF, 0xA4,
+0xF5, 0x82, 0x85, 0xF0, 0x83, 0x12, 0x42, 0xC2, 0xFD, 0xAC, 0xF0, 0xEF, 0x90, 0x41, 0xD6, 0x93,
+0xFF, 0x7E, 0x00, 0x12, 0x29, 0xF2, 0x90, 0x8A, 0xD2, 0xEE, 0x8F, 0xF0, 0x12, 0x42, 0x81, 0x90,
+0x8A, 0xDB, 0xE0, 0xFE, 0xA3, 0xE0, 0xFF, 0xD3, 0x90, 0x8A, 0xD3, 0xE0, 0x9F, 0x90, 0x8A, 0xD2,
+0xE0, 0x9E, 0x50, 0x08, 0x90, 0x8A, 0xDA, 0xE0, 0x04, 0xF0, 0x80, 0xAF, 0x90, 0x8A, 0xDA, 0xE0,
+0xC3, 0x13, 0xF0, 0x90, 0x8A, 0xDD, 0xE0, 0xFF, 0xB4, 0x01, 0x0D, 0x90, 0x8A, 0xDA, 0xE0, 0x70,
+0x5D, 0x90, 0x8A, 0xDD, 0x04, 0xF0, 0x80, 0x5B, 0xEF, 0xB4, 0x03, 0x1D, 0x90, 0x8A, 0xDA, 0xE0,
+0xFF, 0x70, 0x08, 0x90, 0x8A, 0xDD, 0x74, 0x03, 0xF0, 0x80, 0x48, 0xEF, 0xB4, 0x01, 0x08, 0x90,
+0x8A, 0xDD, 0x74, 0x01, 0xF0, 0x80, 0x3C, 0x80, 0x35, 0x90, 0x8A, 0xDD, 0xE0, 0x64, 0x05, 0x70,
+0x32, 0x90, 0x8A, 0xDA, 0xE0, 0xFF, 0x70, 0x08, 0x90, 0x8A, 0xDD, 0x74, 0x05, 0xF0, 0x80, 0x0F,
+0xEF, 0x90, 0x8A, 0xDD, 0xB4, 0x01, 0x05, 0x74, 0x03, 0xF0, 0x80, 0x03, 0x74, 0x01, 0xF0, 0xD3,
+0x90, 0x8A, 0xD7, 0xE0, 0x94, 0x03, 0x90, 0x8A, 0xD6, 0xE0, 0x94, 0x00, 0x40, 0x05, 0xE4, 0x90,
+0x8A, 0xDD, 0xF0, 0xD3, 0x90, 0x8A, 0xD7, 0xE0, 0x94, 0x03, 0x90, 0x8A, 0xD6, 0xE0, 0x94, 0x00,
+0x40, 0x05, 0xE4, 0x90, 0x8A, 0xDD, 0xF0, 0x90, 0x8A, 0xDD, 0xE0, 0xFD, 0x90, 0x8A, 0xCF, 0xE0,
+0xFF, 0x24, 0x43, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83, 0xED, 0xF0, 0x12, 0x69, 0x38, 0x90,
+0x8A, 0xCF, 0xE0, 0xFF, 0x24, 0x64, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE0, 0xD3, 0x94,
+0x05, 0x50, 0x0F, 0x74, 0x64, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE0, 0x04, 0xF0,
+0x80, 0x0F, 0x90, 0x8A, 0xCF, 0xE0, 0x24, 0x64, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE4,
+0xF0, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0xE4, 0xF5, 0xF0, 0x12, 0x42, 0xFA, 0xAB, 0x12, 0xAA,
+0x13, 0xA9, 0x14, 0x90, 0x00, 0x02, 0xE4, 0xF5, 0xF0, 0x12, 0x43, 0x19, 0x90, 0x00, 0x04, 0xE4,
+0xF5, 0xF0, 0x12, 0x43, 0x19, 0x90, 0x00, 0x06, 0xE4, 0xF5, 0xF0, 0x12, 0x43, 0x19, 0x90, 0x00,
+0x08, 0xE4, 0xF5, 0xF0, 0x12, 0x43, 0x19, 0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0x25, 0xE0, 0x24, 0xC0,
+0xF5, 0x82, 0xE4, 0x34, 0x85, 0xF5, 0x83, 0xE4, 0xF0, 0xA3, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0x63,
+0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83, 0xE4, 0xF0, 0xA3, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0xA3,
+0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83, 0xE4, 0xF0, 0xA3, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0x04,
+0xF0, 0x02, 0x6B, 0xC2, 0x22, 0xE4, 0x90, 0x8A, 0xCF, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0xC3,
+0x94, 0x10, 0x50, 0x14, 0x74, 0xA4, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x04, 0xF5, 0x83, 0xE4, 0xF0,
+0x90, 0x8A, 0xCF, 0xE0, 0x04, 0xF0, 0x80, 0xE2, 0xE4, 0x90, 0x8A, 0xCF, 0xF0, 0x90, 0x8A, 0xCF,
+0xE0, 0xFF, 0xC3, 0x94, 0x20, 0x40, 0x02, 0x81, 0x0E, 0x75, 0xF0, 0x0A, 0xEF, 0x90, 0x84, 0x00,
+0x12, 0x43, 0x5F, 0xE4, 0xF0, 0xA3, 0xF0, 0x75, 0xF0, 0x0A, 0xEF, 0x90, 0x84, 0x02, 0x12, 0x43,
+0x5F, 0xE4, 0xF0, 0xA3, 0xF0, 0x75, 0xF0, 0x0A, 0xEF, 0x90, 0x84, 0x04, 0x12, 0x43, 0x5F, 0xE4,
+0xF0, 0xA3, 0xF0, 0x75, 0xF0, 0x0A, 0xEF, 0x90, 0x84, 0x06, 0x12, 0x43, 0x5F, 0xE4, 0xF0, 0xA3,
+0xF0, 0x75, 0xF0, 0x0A, 0xEF, 0x90, 0x84, 0x08, 0x12, 0x43, 0x5F, 0xE4, 0xF0, 0xA3, 0xF0, 0x74,
+0x84, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0x74, 0x13, 0xF0, 0x74, 0x44, 0x2F, 0xF5,
+0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE4, 0xF0, 0x74, 0x43, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x88,
+0xF5, 0x83, 0xE4, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0xC0, 0xF5, 0x82, 0xE4, 0x34, 0x85, 0xF5, 0x83,
+0xE4, 0xF0, 0xA3, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0x63, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83,
+0xE4, 0xF0, 0xA3, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0xE3, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83,
+0xE4, 0xF0, 0xA3, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0xA3, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83,
+0xE4, 0xF0, 0xA3, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0x64, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83,
+0xE4, 0xF0, 0xA3, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0xA4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83,
+0xE4, 0xF0, 0xA3, 0xF0, 0x74, 0x44, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE4, 0xF0,
+0x74, 0x24, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE4, 0xF0, 0x74, 0x64, 0x2F, 0xF5,
+0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE4, 0xF0, 0x90, 0x41, 0x8C, 0x93, 0xFE, 0x74, 0x01, 0x93,
+0xFF, 0x90, 0x41, 0x54, 0x74, 0x01, 0x93, 0x2F, 0xFF, 0xE4, 0x93, 0x3E, 0xC3, 0x13, 0xFE, 0xEF,
+0x13, 0xFF, 0x90, 0x8A, 0xCF, 0xE0, 0xFD, 0x25, 0xE0, 0x24, 0xE1, 0xF5, 0x82, 0xE4, 0x34, 0x86,
+0xF5, 0x83, 0xEE, 0xF0, 0xA3, 0xEF, 0xF0, 0x75, 0xF0, 0x09, 0xED, 0x90, 0x87, 0x29, 0x12, 0x43,
+0x5F, 0x74, 0x01, 0xF0, 0x74, 0xC1, 0x2D, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0x74, 0x0C,
+0xF0, 0x75, 0xF0, 0x09, 0xED, 0x90, 0x87, 0x25, 0x12, 0x43, 0x5F, 0x74, 0xFF, 0xF0, 0xA3, 0xF0,
+0x75, 0xF0, 0x09, 0xED, 0x90, 0x87, 0x23, 0x12, 0x43, 0x5F, 0xE4, 0xF0, 0xA3, 0x74, 0x0F, 0xF0,
+0x75, 0xF0, 0x09, 0xED, 0x90, 0x87, 0x27, 0x12, 0x43, 0x5F, 0x74, 0x13, 0xF0, 0x75, 0xF0, 0x09,
+0xED, 0x90, 0x87, 0x28, 0x12, 0x43, 0x5F, 0xE4, 0xF0, 0x74, 0x84, 0x2D, 0xF5, 0x82, 0xE4, 0x34,
+0x04, 0xF5, 0x83, 0x74, 0x13, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0x04, 0xF0, 0x41, 0x7D, 0x22, 0x12,
+0x29, 0xD9, 0xFF, 0xC3, 0x94, 0x20, 0x50, 0x14, 0x90, 0x00, 0x02, 0x12, 0x42, 0x20, 0xFE, 0x74,
+0x23, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xEE, 0xF0, 0x22, 0xEF, 0xB4, 0x20, 0x0A,
+0x90, 0x00, 0x02, 0x12, 0x42, 0x20, 0x90, 0x87, 0x21, 0xF0, 0x22, 0x90, 0x8B, 0x4B, 0xEE, 0xF0,
+0xA3, 0xEF, 0xF0, 0xE4, 0xA3, 0xF0, 0xA3, 0xF0, 0x90, 0x8B, 0x4B, 0xE0, 0xFE, 0xA3, 0xE0, 0xF5,
+0x82, 0x8E, 0x83, 0xE0, 0x60, 0x2C, 0xC3, 0x90, 0x8B, 0x4E, 0xE0, 0x94, 0xE8, 0x90, 0x8B, 0x4D,
+0xE0, 0x94, 0x03, 0x40, 0x0A, 0x90, 0x01, 0xC6, 0xE0, 0x44, 0x10, 0xF0, 0x7F, 0x00, 0x22, 0x90,
+0x8B, 0x4D, 0xE4, 0x75, 0xF0, 0x01, 0x12, 0x42, 0x81, 0x7F, 0x0A, 0x7E, 0x00, 0x12, 0x37, 0x54,
+0x80, 0xC6, 0x7F, 0x01, 0x22, 0x12, 0x29, 0xD9, 0xF5, 0x21, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3,
+0xC0, 0xD0, 0x90, 0x8A, 0xDA, 0x12, 0x2A, 0x8B, 0x00, 0x00, 0x00, 0x00, 0x90, 0x00, 0x01, 0x12,
+0x42, 0x20, 0x90, 0x8B, 0x1A, 0xF0, 0x90, 0x00, 0x03, 0x12, 0x42, 0x20, 0x90, 0x8B, 0x0A, 0xF0,
+0x12, 0x47, 0xFA, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x90, 0x00, 0x02, 0x12, 0x42, 0x20, 0xFF, 0x30,
+0xE0, 0x25, 0x12, 0x29, 0xD9, 0x90, 0x8B, 0x10, 0xF0, 0x90, 0x00, 0x01, 0x12, 0x42, 0x20, 0x90,
+0x8B, 0x11, 0xF0, 0xEF, 0xC3, 0x13, 0x54, 0x7F, 0x90, 0x8B, 0x0F, 0xF0, 0x90, 0x00, 0x03, 0x12,
+0x42, 0x20, 0x90, 0x8B, 0x16, 0xF0, 0x22, 0x90, 0x8B, 0x10, 0x74, 0x03, 0xF0, 0x90, 0x8B, 0x11,
+0x74, 0x05, 0xF0, 0x90, 0x8B, 0x0F, 0x74, 0x14, 0xF0, 0x90, 0x8B, 0x16, 0x74, 0x05, 0xF0, 0x22,
+0x12, 0x29, 0xD9, 0x30, 0xE0, 0x19, 0xC3, 0x13, 0x54, 0x7F, 0x90, 0x8B, 0x15, 0xF0, 0x90, 0x00,
+0x01, 0x12, 0x42, 0x20, 0xFF, 0x90, 0x8B, 0x13, 0xE4, 0xF0, 0xA3, 0xEF, 0xF0, 0x80, 0x0F, 0x90,
+0x8B, 0x15, 0x74, 0x05, 0xF0, 0x90, 0x8B, 0x13, 0xE4, 0xF0, 0xA3, 0x74, 0x03, 0xF0, 0x90, 0x8B,
+0x13, 0xE0, 0xA3, 0xE0, 0x90, 0x05, 0x58, 0xF0, 0x22, 0x12, 0x29, 0xD9, 0x90, 0x8B, 0x12, 0xF0,
+0x60, 0x07, 0xE4, 0xFD, 0x7F, 0x04, 0x12, 0x45, 0xA2, 0x90, 0x8B, 0x12, 0xE0, 0x90, 0x01, 0xE7,
+0xF0, 0x22, 0x90, 0x02, 0x09, 0xE0, 0xFD, 0x12, 0x29, 0xD9, 0xFE, 0xAF, 0x05, 0xED, 0x2E, 0x90,
+0x8A, 0xF7, 0xF0, 0x90, 0x00, 0x01, 0x12, 0x42, 0x20, 0xFF, 0xED, 0x2F, 0x90, 0x8A, 0xF8, 0xF0,
+0x90, 0x00, 0x02, 0x12, 0x42, 0x20, 0xFF, 0xED, 0x2F, 0x90, 0x8A, 0xF9, 0xF0, 0x90, 0x00, 0x03,
+0x12, 0x42, 0x20, 0xFF, 0xED, 0x2F, 0x90, 0x8A, 0xFA, 0xF0, 0x90, 0x00, 0x04, 0x12, 0x42, 0x20,
+0xFF, 0xAE, 0x05, 0xED, 0x2F, 0x90, 0x8A, 0xFB, 0xF0, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0,
+0xD0, 0x90, 0x8A, 0xDA, 0x12, 0x43, 0x8B, 0xE4, 0x90, 0x8A, 0xDD, 0xF0, 0x12, 0x29, 0xD9, 0xC3,
+0x13, 0x20, 0xE0, 0x02, 0xC1, 0xED, 0x90, 0x8A, 0xDA, 0x12, 0x43, 0x6B, 0x12, 0x29, 0xD9, 0xFF,
+0x54, 0x02, 0xFE, 0x90, 0x8B, 0x32, 0xE0, 0x54, 0xFD, 0x4E, 0xFE, 0xF0, 0xEF, 0x54, 0x01, 0xFF,
+0xEE, 0x54, 0xFE, 0x4F, 0xFF, 0xF0, 0x12, 0x29, 0xD9, 0xFE, 0x54, 0x08, 0xFD, 0xEF, 0x54, 0xF7,
+0x4D, 0xFF, 0x90, 0x8B, 0x32, 0xF0, 0xEE, 0x54, 0x10, 0xFE, 0xEF, 0x54, 0xEF, 0x4E, 0xFF, 0xF0,
+0x12, 0x29, 0xD9, 0xFE, 0x54, 0x20, 0xFD, 0xEF, 0x54, 0xDF, 0x4D, 0xFF, 0x90, 0x8B, 0x32, 0xF0,
+0xEE, 0x54, 0x40, 0xFE, 0xEF, 0x54, 0xBF, 0x4E, 0xF0, 0x20, 0xE0, 0x02, 0xC1, 0xD9, 0x90, 0x8A,
+0xDD, 0x74, 0x21, 0xF0, 0x90, 0x8A, 0xDA, 0x12, 0x43, 0x6B, 0x12, 0x29, 0xD9, 0xFF, 0x13, 0x13,
+0x54, 0x01, 0xFE, 0x90, 0x8B, 0x32, 0xE0, 0xFD, 0x13, 0x13, 0x54, 0x01, 0x6E, 0x60, 0x2A, 0xEF,
+0x54, 0x04, 0xFF, 0xED, 0x54, 0xFB, 0x4F, 0xF0, 0xE0, 0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x0E,
+0x90, 0x01, 0x34, 0x74, 0x40, 0xF0, 0xFD, 0xE4, 0xFF, 0x12, 0x36, 0xE6, 0x80, 0x0B, 0xE4, 0x90,
+0x8B, 0x34, 0xF0, 0x7D, 0x40, 0xFF, 0x12, 0x36, 0x75, 0x90, 0x8B, 0x32, 0xE0, 0xFD, 0x13, 0x13,
+0x13, 0x54, 0x1F, 0x30, 0xE0, 0x07, 0x90, 0x8A, 0xDD, 0xE0, 0x44, 0x12, 0xF0, 0xED, 0xC4, 0x54,
+0x0F, 0x30, 0xE0, 0x07, 0x90, 0x8A, 0xDD, 0xE0, 0x44, 0x14, 0xF0, 0x90, 0x8B, 0x32, 0xE0, 0xC4,
+0x13, 0x54, 0x07, 0x30, 0xE0, 0x07, 0x90, 0x8A, 0xDD, 0xE0, 0x44, 0x80, 0xF0, 0x90, 0x8B, 0x32,
+0xE0, 0xC4, 0x13, 0x13, 0x54, 0x03, 0x20, 0xE0, 0x07, 0x90, 0x8A, 0xDD, 0xE0, 0x44, 0x40, 0xF0,
+0x90, 0x8A, 0xDD, 0xE0, 0x90, 0x05, 0x27, 0xF0, 0x90, 0x8B, 0x33, 0xE0, 0x70, 0x05, 0x7F, 0x01,
+0x12, 0x4E, 0x89, 0x90, 0x8B, 0x32, 0xE0, 0xC4, 0x13, 0x13, 0x54, 0x03, 0x30, 0xE0, 0x04, 0x7F,
+0x03, 0x80, 0x0E, 0x7F, 0x01, 0x12, 0x4D, 0xE0, 0xEF, 0x60, 0x04, 0x7F, 0x01, 0x80, 0x02, 0x7F,
+0x02, 0x12, 0x4E, 0x89, 0x7F, 0x02, 0x02, 0x78, 0x2E, 0x90, 0x8A, 0xDD, 0x74, 0x01, 0xF0, 0x90,
+0x05, 0x27, 0xF0, 0xE4, 0xFF, 0x12, 0x4E, 0x89, 0x7F, 0x03, 0x02, 0x78, 0x2E, 0x90, 0x8A, 0xDA,
+0x12, 0x43, 0x6B, 0x12, 0x29, 0xD9, 0xFF, 0x54, 0x02, 0xFE, 0x90, 0x8B, 0x2C, 0xE0, 0x54, 0xFD,
+0x4E, 0xFE, 0xF0, 0xEF, 0x54, 0x01, 0xFF, 0xEE, 0x54, 0xFE, 0x4F, 0xFF, 0xF0, 0x12, 0x29, 0xD9,
+0xFE, 0x54, 0x08, 0xFD, 0xEF, 0x54, 0xF7, 0x4D, 0xFF, 0x90, 0x8B, 0x2C, 0xF0, 0xEE, 0x54, 0x10,
+0xFE, 0xEF, 0x54, 0xEF, 0x4E, 0xFF, 0xF0, 0x12, 0x29, 0xD9, 0xFE, 0x54, 0x40, 0xFD, 0xEF, 0x54,
+0xBF, 0x4D, 0xFF, 0x90, 0x8B, 0x2C, 0xF0, 0xEE, 0x54, 0x04, 0xFE, 0xEF, 0x54, 0xFB, 0x4E, 0xF0,
+0x20, 0xE0, 0x02, 0xE1, 0xE2, 0x90, 0x8A, 0xDD, 0x74, 0x31, 0xF0, 0x90, 0x8B, 0x2C, 0xE0, 0x13,
+0x13, 0x54, 0x3F, 0x20, 0xE0, 0x0B, 0xE4, 0x90, 0x8B, 0x2E, 0xF0, 0x7D, 0x40, 0xFF, 0x12, 0x36,
+0x75, 0x90, 0x8B, 0x2C, 0xE0, 0xFD, 0x13, 0x13, 0x13, 0x54, 0x1F, 0x30, 0xE0, 0x07, 0x90, 0x8A,
+0xDD, 0xE0, 0x44, 0x02, 0xF0, 0xED, 0xC4, 0x54, 0x0F, 0x30, 0xE0, 0x07, 0x90, 0x8A, 0xDD, 0xE0,
+0x44, 0x04, 0xF0, 0x90, 0x8A, 0xDD, 0xE0, 0x54, 0x06, 0x60, 0x0C, 0x90, 0x01, 0x3E, 0x74, 0x03,
+0xF0, 0xFD, 0x7F, 0x02, 0x12, 0x37, 0x00, 0x90, 0x8A, 0xDD, 0xE0, 0x90, 0x05, 0x27, 0xF0, 0x90,
+0x8B, 0x2C, 0xE0, 0xFF, 0xC4, 0x13, 0x13, 0x54, 0x03, 0x30, 0xE0, 0x0D, 0xA3, 0xE0, 0x64, 0x06,
+0x60, 0x2C, 0x7F, 0x06, 0x12, 0x65, 0x82, 0x80, 0x25, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x06, 0x1B,
+0x7F, 0x01, 0x12, 0x65, 0x82, 0xE4, 0xFF, 0x12, 0x4D, 0xE0, 0xEF, 0x60, 0x09, 0x7D, 0x01, 0xAF,
+0x23, 0x12, 0x45, 0xA2, 0x80, 0x05, 0x12, 0x4E, 0x56, 0x80, 0x03, 0x12, 0x7D, 0xC1, 0x7F, 0x01,
+0x80, 0x4C, 0x90, 0x8A, 0xDD, 0x74, 0x01, 0xF0, 0x90, 0x05, 0x27, 0xF0, 0x7D, 0x03, 0x7F, 0x02,
+0x12, 0x36, 0x92, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x06, 0x02, 0x80, 0x1B, 0x90, 0x8B, 0x2D, 0xE0,
+0xB4, 0x04, 0x02, 0x80, 0x07, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x05, 0x04, 0xE4, 0xFF, 0x80, 0x14,
+0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x03, 0x04, 0x7F, 0x01, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4,
+0x02, 0x05, 0x7F, 0x01, 0x12, 0x65, 0x82, 0x11, 0x35, 0x12, 0x4A, 0xFC, 0x7F, 0x03, 0x11, 0x42,
+0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x90, 0x8B, 0x31, 0xE0, 0xB4, 0x01, 0x05, 0xE4, 0xF0, 0x12, 0x48,
+0xFE, 0x22, 0xAD, 0x07, 0xEF, 0x64, 0x01, 0x60, 0x04, 0xEF, 0xB4, 0x03, 0x15, 0x90, 0x8B, 0x32,
+0xE0, 0x54, 0xFE, 0xF0, 0x54, 0xFB, 0xF0, 0xE4, 0xA3, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0,
+0xA3, 0xF0, 0xED, 0x64, 0x02, 0x60, 0x04, 0xED, 0xB4, 0x03, 0x15, 0x90, 0x8B, 0x2C, 0xE0, 0x54,
+0xFE, 0xF0, 0x54, 0xFB, 0xF0, 0xE4, 0xA3, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0,
+0x22, 0x12, 0x29, 0xD9, 0x90, 0x8B, 0x38, 0xF0, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0,
+0x90, 0x8A, 0xFD, 0xE0, 0x90, 0x8A, 0xE8, 0xF0, 0x90, 0x8A, 0xFE, 0xE0, 0xFF, 0xA3, 0xE0, 0x90,
+0x8A, 0xE9, 0xCF, 0xF0, 0xA3, 0xEF, 0xF0, 0xE4, 0x90, 0x8A, 0xE4, 0xF0, 0x90, 0x8A, 0xE4, 0xE0,
+0xFF, 0x24, 0x00, 0xF5, 0x82, 0xE4, 0x34, 0x8B, 0xF5, 0x83, 0xE0, 0xFE, 0x74, 0xEB, 0x2F, 0xF5,
+0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xEE, 0xF0, 0x90, 0x8A, 0xE4, 0xE0, 0x04, 0xF0, 0xE0, 0xB4,
+0x04, 0xDA, 0x90, 0x8A, 0xE8, 0xE0, 0x12, 0x43, 0x94, 0x78, 0xF8, 0x00, 0x7A, 0x6B, 0x01, 0x79,
+0x01, 0x02, 0x79, 0x01, 0x03, 0x79, 0x01, 0x04, 0x7A, 0x6B, 0x05, 0x7A, 0x35, 0x80, 0x7A, 0x4E,
+0x81, 0x7A, 0x6B, 0x82, 0x00, 0x00, 0x7A, 0x67, 0x90, 0x8A, 0xEE, 0xE0, 0xFF, 0x51, 0x72, 0x41,
+0x6B, 0x90, 0x8A, 0xE8, 0xE0, 0xFF, 0xB4, 0x02, 0x08, 0x90, 0x8A, 0xE5, 0x74, 0x01, 0xF0, 0x80,
+0x0F, 0xEF, 0x90, 0x8A, 0xE5, 0xB4, 0x03, 0x05, 0x74, 0x02, 0xF0, 0x80, 0x03, 0x74, 0x04, 0xF0,
+0xC3, 0x90, 0x8A, 0xE9, 0xE0, 0x94, 0x08, 0x50, 0x78, 0xE4, 0x90, 0x8A, 0xE4, 0xF0, 0x90, 0x8A,
+0xE5, 0xE0, 0xFF, 0x90, 0x8A, 0xE4, 0xE0, 0xC3, 0x9F, 0x40, 0x02, 0x41, 0x6B, 0x90, 0x8A, 0xE9,
+0xE0, 0xFE, 0xA3, 0xE0, 0xFF, 0xC3, 0xEE, 0x94, 0x01, 0x90, 0x8A, 0xE4, 0xE0, 0x50, 0x1F, 0xFE,
+0x2F, 0xFF, 0xEE, 0xFD, 0xC3, 0x74, 0x03, 0x9D, 0xFD, 0xE4, 0x94, 0x00, 0xFC, 0x74, 0xEB, 0x2D,
+0xF5, 0x82, 0x74, 0x8A, 0x3C, 0xF5, 0x83, 0xE0, 0xFD, 0x12, 0x51, 0x88, 0x80, 0x2B, 0xFF, 0xFD,
+0xC3, 0x74, 0x03, 0x9D, 0xFD, 0xE4, 0x94, 0x00, 0xFC, 0x74, 0xEB, 0x2D, 0xF5, 0x82, 0x74, 0x8A,
+0x3C, 0xF5, 0x83, 0xE0, 0xFE, 0xEF, 0xFD, 0x90, 0x8A, 0xEA, 0xE0, 0x2D, 0xFD, 0x90, 0x8A, 0xE9,
+0xE0, 0x34, 0x00, 0x8D, 0x82, 0xF5, 0x83, 0xEE, 0xF0, 0x90, 0x8A, 0xE4, 0xE0, 0x04, 0xF0, 0x80,
+0x8D, 0xC3, 0x90, 0x8A, 0xE9, 0xE0, 0x94, 0x10, 0x40, 0x02, 0x41, 0x6B, 0x90, 0x8A, 0xE8, 0xE0,
+0x64, 0x04, 0x60, 0x02, 0x41, 0x6B, 0x90, 0x8A, 0xEC, 0xE0, 0xFF, 0xE4, 0xFC, 0xFD, 0xFE, 0x78,
+0x10, 0x12, 0x2A, 0x6C, 0xC0, 0x04, 0xC0, 0x05, 0xC0, 0x06, 0xC0, 0x07, 0x90, 0x8A, 0xEB, 0xE0,
+0xFF, 0xE4, 0xFC, 0xFD, 0xFE, 0x78, 0x18, 0x12, 0x2A, 0x6C, 0xD0, 0x03, 0xD0, 0x02, 0xD0, 0x01,
+0xD0, 0x00, 0x12, 0x43, 0x46, 0xC0, 0x04, 0xC0, 0x05, 0xC0, 0x06, 0xC0, 0x07, 0x90, 0x8A, 0xED,
+0xE0, 0xFF, 0xE4, 0xFC, 0xFD, 0xFE, 0x78, 0x08, 0x12, 0x2A, 0x6C, 0xD0, 0x03, 0xD0, 0x02, 0xD0,
+0x01, 0xD0, 0x00, 0x12, 0x43, 0x46, 0xA8, 0x04, 0xA9, 0x05, 0xAA, 0x06, 0xAB, 0x07, 0xA3, 0xE0,
+0xFF, 0xE4, 0xFC, 0xFD, 0xFE, 0x12, 0x43, 0x46, 0xA3, 0x12, 0x2A, 0x7F, 0x90, 0x8A, 0xEF, 0x12,
+0x43, 0x53, 0x90, 0x80, 0x85, 0x12, 0x2A, 0x7F, 0x90, 0x8A, 0xE9, 0xE0, 0xFE, 0xA3, 0xE0, 0xFF,
+0x12, 0x2F, 0xD9, 0x80, 0x36, 0x90, 0x8A, 0xED, 0xE0, 0xFE, 0xA3, 0xE0, 0x24, 0x00, 0xFF, 0xE4,
+0x3E, 0xFE, 0x90, 0x8A, 0xE6, 0xF0, 0xA3, 0xEF, 0xF0, 0x12, 0x37, 0x54, 0x80, 0x1D, 0x90, 0x8A,
+0xED, 0xE0, 0xFE, 0xA3, 0xE0, 0x24, 0x00, 0xFF, 0xE4, 0x3E, 0xFE, 0x90, 0x8A, 0xE6, 0xF0, 0xA3,
+0xEF, 0xF0, 0x12, 0x36, 0xCB, 0x80, 0x04, 0x7F, 0x00, 0x80, 0x02, 0x7F, 0x01, 0xD0, 0xD0, 0x92,
+0xAF, 0x22, 0x8F, 0x0F, 0xE4, 0x90, 0x8A, 0xF3, 0xF0, 0xE5, 0x0F, 0x14, 0xFE, 0x90, 0x8A, 0xF3,
+0xE0, 0xFF, 0xC3, 0x9E, 0x50, 0x0E, 0xEF, 0x04, 0xFD, 0x12, 0x34, 0xB7, 0x90, 0x8A, 0xF3, 0xE0,
+0x04, 0xF0, 0x80, 0xE5, 0xE5, 0x0F, 0x14, 0xFF, 0x7D, 0xFF, 0x12, 0x34, 0xB7, 0x90, 0x8A, 0xF3,
+0xE5, 0x0F, 0xF0, 0x90, 0x8A, 0xF3, 0xE0, 0xC3, 0x94, 0xFF, 0x50, 0x0F, 0xE0, 0xFF, 0x04, 0xFD,
+0x12, 0x34, 0xB7, 0x90, 0x8A, 0xF3, 0xE0, 0x04, 0xF0, 0x80, 0xE8, 0xAD, 0x0F, 0x7F, 0xFF, 0x02,
+0x34, 0xB7, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0xE4, 0x90, 0x8A, 0xDD, 0xF0, 0xA3, 0x74,
+0x04, 0xF0, 0xA3, 0xE4, 0xF0, 0x90, 0x8A, 0xE2, 0xF0, 0xA3, 0xF0, 0x90, 0x02, 0x09, 0xE0, 0x90,
+0x8A, 0xE1, 0xF0, 0x12, 0x29, 0xD9, 0xFF, 0x90, 0x8A, 0xE1, 0xE0, 0x2F, 0x90, 0x8A, 0xE0, 0xF0,
+0x30, 0xE0, 0x0B, 0x90, 0x8A, 0xDB, 0xE4, 0xF0, 0xA3, 0x74, 0x80, 0xF0, 0x80, 0x07, 0xE4, 0x90,
+0x8A, 0xDB, 0xF0, 0xA3, 0xF0, 0x90, 0x8A, 0xE0, 0xE0, 0xC3, 0x13, 0x90, 0xFD, 0x10, 0xF0, 0x90,
+0x8A, 0xDD, 0xE0, 0x24, 0x20, 0xF0, 0x90, 0x8A, 0xDB, 0xA3, 0xE0, 0xFD, 0xA3, 0xE0, 0xFC, 0x2D,
+0xFF, 0x24, 0x01, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x90, 0x8A, 0xFD, 0xF0, 0x74,
+0x02, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0xFE, 0xEC, 0x2D, 0x24, 0x03, 0xF5,
+0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x24, 0x00, 0xFF, 0xE4, 0x3E, 0x90, 0x8A, 0xFE, 0xF0,
+0xA3, 0xEF, 0xF0, 0x90, 0x8A, 0xDA, 0x74, 0x04, 0xF0, 0x90, 0x8A, 0xDB, 0xA3, 0xE0, 0xFF, 0xA3,
+0xE0, 0x2F, 0xFF, 0x90, 0x8A, 0xDA, 0xE0, 0xFE, 0x2F, 0x24, 0x00, 0xF5, 0x82, 0xE4, 0x34, 0xFC,
+0xF5, 0x83, 0xE0, 0xFF, 0x74, 0xFC, 0x2E, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xEF, 0xF0,
+0x90, 0x8A, 0xDA, 0xE0, 0x04, 0xF0, 0xE0, 0xB4, 0x08, 0xCF, 0x11, 0x89, 0xEF, 0x70, 0x45, 0x90,
+0x01, 0xC3, 0xE0, 0x60, 0x2B, 0xC3, 0x90, 0x8A, 0xE3, 0xE0, 0x94, 0xE8, 0x90, 0x8A, 0xE2, 0xE0,
+0x94, 0x03, 0x40, 0x09, 0x90, 0x01, 0xC6, 0xE0, 0x44, 0x10, 0xF0, 0x80, 0x79, 0x90, 0x8A, 0xE2,
+0xE4, 0x75, 0xF0, 0x01, 0x12, 0x42, 0x81, 0x7F, 0x0A, 0x7E, 0x00, 0x12, 0x37, 0x54, 0x80, 0xCF,
+0x90, 0x01, 0xC6, 0xE0, 0x90, 0x01, 0xC3, 0x30, 0xE2, 0x05, 0x74, 0xFE, 0xF0, 0x80, 0x57, 0x74,
+0xFF, 0xF0, 0x80, 0x52, 0x90, 0x8A, 0xDD, 0xE0, 0xB4, 0x78, 0x2E, 0xE4, 0xF0, 0x90, 0x8A, 0xE0,
+0xE0, 0x04, 0xF0, 0x90, 0x8A, 0xDB, 0xE0, 0x70, 0x04, 0xA3, 0xE0, 0x64, 0x80, 0x90, 0x8A, 0xDB,
+0x70, 0x05, 0xF0, 0xA3, 0xF0, 0x80, 0x06, 0xE4, 0xF0, 0xA3, 0x74, 0x80, 0xF0, 0x90, 0x8A, 0xE0,
+0xE0, 0xC3, 0x13, 0x90, 0xFD, 0x10, 0xF0, 0x80, 0x07, 0x90, 0x8A, 0xDD, 0xE0, 0x24, 0x08, 0xF0,
+0x90, 0x8A, 0xDE, 0x74, 0xFF, 0xF5, 0xF0, 0x12, 0x42, 0x81, 0x90, 0x8A, 0xDE, 0xE0, 0x70, 0x02,
+0xA3, 0xE0, 0x60, 0x02, 0x61, 0x16, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x12, 0x29, 0xD9, 0x90, 0x8B,
+0x05, 0xF0, 0x90, 0x00, 0x01, 0x12, 0x42, 0x20, 0x90, 0x8B, 0x06, 0xF0, 0x22, 0xE4, 0xF5, 0x61,
+0x22, 0x91, 0x4A, 0x90, 0x8B, 0x33, 0x74, 0x02, 0xF0, 0x22, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0,
+0x7F, 0x78, 0x7E, 0x08, 0x12, 0x27, 0xDE, 0x90, 0x8B, 0x1C, 0x12, 0x2A, 0x7F, 0x7F, 0x04, 0x7E,
+0x0C, 0x12, 0x27, 0xDE, 0x90, 0x8B, 0x20, 0x12, 0x2A, 0x7F, 0x7F, 0x00, 0x7E, 0x08, 0x12, 0x27,
+0xDE, 0x90, 0x8B, 0x24, 0x12, 0x2A, 0x7F, 0x90, 0x8B, 0x09, 0xE0, 0x90, 0x8B, 0x1C, 0xB4, 0x01,
+0x0D, 0x12, 0x43, 0x53, 0xEF, 0x54, 0xC7, 0xFF, 0xED, 0x54, 0xC7, 0xFD, 0x80, 0x07, 0x12, 0x43,
+0x53, 0xEF, 0x54, 0xC7, 0xFF, 0xEC, 0x90, 0x80, 0x85, 0x12, 0x2A, 0x7F, 0x7F, 0x78, 0x7E, 0x08,
+0x12, 0x2F, 0xD9, 0x90, 0x8B, 0x20, 0x12, 0x43, 0x53, 0xEF, 0x54, 0x0F, 0xFF, 0xEC, 0x90, 0x80,
+0x85, 0x12, 0x2A, 0x7F, 0x7F, 0x04, 0x7E, 0x0C, 0x12, 0x2F, 0xD9, 0x90, 0x8B, 0x24, 0x12, 0x43,
+0x53, 0xEF, 0x44, 0x02, 0xFF, 0xEC, 0x90, 0x80, 0x85, 0x12, 0x2A, 0x7F, 0x7F, 0x00, 0x7E, 0x08,
+0x12, 0x2F, 0xD9, 0x7F, 0x70, 0x7E, 0x0E, 0x12, 0x27, 0xDE, 0x90, 0x8B, 0x28, 0x12, 0x2A, 0x7F,
+0x90, 0x80, 0x85, 0x12, 0x2A, 0x8B, 0x00, 0x1B, 0x25, 0xA0, 0x7F, 0x70, 0x7E, 0x0E, 0x12, 0x2F,
+0xD9, 0x90, 0x80, 0x59, 0x12, 0x2A, 0x8B, 0x00, 0x00, 0x00, 0x00, 0xE4, 0xFD, 0xFF, 0x12, 0x34,
+0x81, 0x90, 0x8B, 0x09, 0xE0, 0xB4, 0x01, 0x11, 0x90, 0x80, 0x59, 0x12, 0x2A, 0x8B, 0x00, 0x00,
+0x00, 0x00, 0xE4, 0xFD, 0x7F, 0x01, 0x12, 0x34, 0x81, 0x90, 0x00, 0x11, 0xE0, 0x54, 0xF6, 0xF0,
+0x02, 0x52, 0x0E, 0x91, 0x50, 0x90, 0x8B, 0x33, 0x74, 0x02, 0xF0, 0x22, 0x90, 0x05, 0x22, 0x74,
+0xFF, 0xF0, 0x90, 0x8B, 0x33, 0x74, 0x04, 0xF0, 0x22, 0xB1, 0x42, 0x90, 0x8B, 0x33, 0x74, 0x04,
+0xF0, 0x22, 0x90, 0x00, 0x11, 0xE0, 0x44, 0x09, 0xF0, 0x12, 0x52, 0x0E, 0x90, 0x8B, 0x1C, 0x12,
+0x43, 0x53, 0x90, 0x80, 0x85, 0x12, 0x2A, 0x7F, 0x7F, 0x78, 0x7E, 0x08, 0x12, 0x2F, 0xD9, 0x90,
+0x8B, 0x20, 0x12, 0x43, 0x53, 0x90, 0x80, 0x85, 0x12, 0x2A, 0x7F, 0x7F, 0x04, 0x7E, 0x0C, 0x12,
+0x2F, 0xD9, 0x90, 0x8B, 0x24, 0x12, 0x43, 0x53, 0x90, 0x80, 0x85, 0x12, 0x2A, 0x7F, 0x7F, 0x00,
+0x7E, 0x08, 0x12, 0x2F, 0xD9, 0x90, 0x8B, 0x28, 0x12, 0x43, 0x53, 0x90, 0x80, 0x85, 0x12, 0x2A,
+0x7F, 0x7F, 0x70, 0x7E, 0x0E, 0x12, 0x2F, 0xD9, 0x90, 0x80, 0x59, 0x12, 0x2A, 0x8B, 0x00, 0x03,
+0x2D, 0x95, 0xE4, 0xFD, 0xFF, 0x12, 0x34, 0x81, 0x90, 0x8B, 0x09, 0xE0, 0xB4, 0x01, 0x11, 0x90,
+0x80, 0x59, 0x12, 0x2A, 0x8B, 0x00, 0x03, 0x2D, 0x95, 0xE4, 0xFD, 0x7F, 0x01, 0x12, 0x34, 0x81,
+0x22, 0x90, 0x8B, 0x2D, 0xE0, 0x64, 0x06, 0x60, 0x3C, 0xE5, 0x22, 0x54, 0x0F, 0x14, 0x60, 0x2E,
+0x14, 0x60, 0x1E, 0x24, 0xFE, 0x60, 0x0E, 0x24, 0xF8, 0x70, 0x2A, 0xE4, 0x90, 0x8B, 0x2D, 0xF0,
+0x90, 0x05, 0x22, 0xF0, 0x22, 0x90, 0x8B, 0x2D, 0x74, 0x01, 0xF0, 0x90, 0x05, 0x22, 0xE4, 0xF0,
+0x22, 0x90, 0x8B, 0x2D, 0x74, 0x03, 0xF0, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x22, 0x90, 0x01,
+0xC6, 0xE0, 0x44, 0x08, 0xF0, 0x22, 0xAE, 0x07, 0xE4, 0xFF, 0x12, 0x4D, 0xE0, 0xEF, 0x60, 0x18,
+0x90, 0x8B, 0x2C, 0xE0, 0xC4, 0x13, 0x13, 0x54, 0x03, 0x20, 0xE0, 0x0C, 0xAF, 0x06, 0x7D, 0x01,
+0x12, 0x45, 0xA2, 0xB1, 0xC1, 0x7F, 0x01, 0x22, 0x7F, 0x00, 0x22, 0x90, 0x01, 0x57, 0xE0, 0x60,
+0x3C, 0x90, 0x01, 0x57, 0xE4, 0xF0, 0x90, 0x01, 0x3C, 0x74, 0x02, 0xF0, 0x90, 0x8B, 0x1B, 0xE0,
+0x60, 0x07, 0xE4, 0xF0, 0x53, 0x25, 0xFD, 0x80, 0x24, 0x90, 0x8B, 0x0C, 0xE0, 0x04, 0xF0, 0x53,
+0x25, 0xEF, 0x90, 0x8B, 0x10, 0xE0, 0xFF, 0x90, 0x8B, 0x0C, 0xE0, 0xD3, 0x9F, 0x40, 0x0E, 0xE5,
+0x21, 0xB4, 0x01, 0x09, 0x90, 0x8B, 0x0D, 0xE0, 0x70, 0x03, 0xE0, 0x04, 0xF0, 0x90, 0x01, 0x5B,
+0xE0, 0x60, 0x10, 0x90, 0x01, 0x5B, 0xE4, 0xF0, 0x90, 0x01, 0x3C, 0x74, 0x04, 0xF0, 0xE4, 0x90,
+0x8B, 0x18, 0xF0, 0x90, 0x01, 0x5F, 0xE0, 0x60, 0x10, 0x90, 0x01, 0x5F, 0xE4, 0xF0, 0x90, 0x01,
+0x3C, 0x74, 0x08, 0xF0, 0xE4, 0x90, 0x8B, 0x17, 0xF0, 0x22, 0xE4, 0x90, 0x8B, 0x4F, 0xF0, 0xA3,
+0xF0, 0x90, 0x05, 0xF8, 0xE0, 0x70, 0x0F, 0xA3, 0xE0, 0x70, 0x0B, 0xA3, 0xE0, 0x70, 0x07, 0xA3,
+0xE0, 0x70, 0x03, 0x7F, 0x01, 0x22, 0xD3, 0x90, 0x8B, 0x50, 0xE0, 0x94, 0xE8, 0x90, 0x8B, 0x4F,
+0xE0, 0x94, 0x03, 0x40, 0x03, 0x7F, 0x00, 0x22, 0x7F, 0x32, 0x7E, 0x00, 0x12, 0x37, 0x54, 0x90,
+0x8B, 0x4F, 0xE4, 0x75, 0xF0, 0x01, 0x12, 0x42, 0x81, 0x80, 0xC6, 0x00, 0x92, 0x00};
+
+// =================== v88 UMC A Cut P2PPS with CCX report C2H 2012-12-05 =====================
+u8 Rtl8192CUFwUMCACutImgArray[UMCACutImgArrayLength] = {
+0xC1, 0x88, 0x02, 0x05, 0x58, 0x00, 0x02, 0x00, 0x12, 0x05, 0x17, 0x11, 0xDE, 0x3E, 0x01, 0x00,
+0x94, 0x18, 0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+0x02, 0x46, 0x30, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+0x00, 0x00, 0x00, 0x02, 0x60, 0xF2, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+0x00, 0x00, 0x00, 0x02, 0x68, 0x91, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02, 0x4B, 0x87, 0x00, 0x00,
+0x05, 0x04, 0x03, 0x02, 0x00, 0x03, 0x06, 0x05, 0x04, 0x03, 0x00, 0x04, 0x06, 0x05, 0x04, 0x02,
+0x00, 0x04, 0x08, 0x07, 0x06, 0x04, 0x00, 0x06, 0x0A, 0x09, 0x08, 0x06, 0x00, 0x08, 0x0A, 0x09,
+0x08, 0x04, 0x00, 0x08, 0x0A, 0x09, 0x08, 0x02, 0x00, 0x08, 0x0A, 0x09, 0x08, 0x00, 0x00, 0x08,
+0x12, 0x11, 0x10, 0x08, 0x00, 0x10, 0x1A, 0x19, 0x18, 0x10, 0x00, 0x18, 0x22, 0x21, 0x20, 0x18,
+0x00, 0x20, 0x22, 0x21, 0x20, 0x10, 0x00, 0x20, 0x22, 0x21, 0x20, 0x08, 0x00, 0x20, 0x22, 0x21,
+0x1C, 0x08, 0x00, 0x20, 0x22, 0x21, 0x14, 0x08, 0x00, 0x20, 0x22, 0x20, 0x18, 0x08, 0x00, 0x20,
+0x31, 0x30, 0x20, 0x10, 0x00, 0x30, 0x31, 0x30, 0x18, 0x00, 0x00, 0x30, 0x31, 0x2F, 0x10, 0x10,
+0x00, 0x30, 0x31, 0x2C, 0x10, 0x10, 0x00, 0x30, 0x31, 0x28, 0x10, 0x00, 0x00, 0x30, 0x31, 0x20,
+0x10, 0x00, 0x00, 0x30, 0x31, 0x10, 0x10, 0x00, 0x00, 0x30, 0x04, 0x04, 0x04, 0x05, 0x04, 0x04,
+0x05, 0x07, 0x07, 0x07, 0x08, 0x0A, 0x04, 0x04, 0x04, 0x04, 0x06, 0x0A, 0x0B, 0x0D, 0x05, 0x05,
+0x07, 0x07, 0x08, 0x0B, 0x0D, 0x0F, 0x04, 0x04, 0x04, 0x05, 0x07, 0x07, 0x09, 0x09, 0x0C, 0x0E,
+0x10, 0x12, 0x06, 0x07, 0x09, 0x0A, 0x0C, 0x0E, 0x11, 0x13, 0x09, 0x09, 0x09, 0x09, 0x0C, 0x0E,
+0x11, 0x13, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x24, 0x26, 0x2A, 0x18, 0x1A,
+0x1D, 0x1F, 0x21, 0x27, 0x29, 0x2A, 0x00, 0x00, 0x00, 0x1F, 0x23, 0x28, 0x2A, 0x2C, 0x00, 0x04,
+0x00, 0x04, 0x00, 0x08, 0x00, 0x10, 0x00, 0x18, 0x00, 0x24, 0x00, 0x30, 0x00, 0x48, 0x00, 0x60,
+0x00, 0x90, 0x00, 0xC0, 0x00, 0xD8, 0x00, 0x50, 0x00, 0x78, 0x00, 0xA0, 0x00, 0xC8, 0x01, 0x40,
+0x01, 0x90, 0x01, 0xE0, 0x02, 0x30, 0x01, 0x2C, 0x01, 0x40, 0x01, 0xE0, 0x02, 0xD0, 0x03, 0xE8,
+0x04, 0xB0, 0x06, 0x40, 0x07, 0xD0, 0x00, 0x02, 0x00, 0x02, 0x00, 0x04, 0x00, 0x08, 0x00, 0x0C,
+0x00, 0x12, 0x00, 0x18, 0x00, 0x24, 0x00, 0x30, 0x00, 0x48, 0x00, 0x60, 0x00, 0x6C, 0x00, 0x28,
+0x00, 0x3C, 0x00, 0x50, 0x00, 0x64, 0x00, 0xA0, 0x00, 0xC8, 0x00, 0xF0, 0x01, 0x18, 0x00, 0x64,
+0x00, 0xA0, 0x00, 0xF0, 0x01, 0x68, 0x01, 0xF4, 0x02, 0x58, 0x03, 0x20, 0x03, 0xE8, 0x02, 0x02,
+0x02, 0x02, 0x02, 0x02, 0x03, 0x03, 0x04, 0x04, 0x05, 0x07, 0x02, 0x03, 0x04, 0x0A, 0x0C, 0x0E,
+0x10, 0x12, 0x05, 0x07, 0x07, 0x08, 0x0B, 0x12, 0x24, 0x3C, 0x01, 0x01, 0x01, 0x01, 0x01, 0x02,
+0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x05, 0x06,
+0x07, 0x08, 0x09, 0x0A, 0x0B, 0x0C, 0x20, 0x1E, 0x1C, 0x18, 0x10, 0x18, 0x00, 0x00, 0x00, 0x00,
+0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+0xBB, 0x01, 0x0C, 0xE5, 0x82, 0x29, 0xF5, 0x82, 0xE5, 0x83, 0x3A, 0xF5, 0x83, 0xE0, 0x22, 0x50,
+0x06, 0xE9, 0x25, 0x82, 0xF8, 0xE6, 0x22, 0xBB, 0xFE, 0x06, 0xE9, 0x25, 0x82, 0xF8, 0xE2, 0x22,
+0xE5, 0x82, 0x29, 0xF5, 0x82, 0xE5, 0x83, 0x3A, 0xF5, 0x83, 0xE4, 0x93, 0x22, 0xBB, 0x01, 0x06,
+0x89, 0x82, 0x8A, 0x83, 0xF0, 0x22, 0x50, 0x02, 0xF7, 0x22, 0xBB, 0xFE, 0x01, 0xF3, 0x22, 0xF8,
+0xBB, 0x01, 0x0D, 0xE5, 0x82, 0x29, 0xF5, 0x82, 0xE5, 0x83, 0x3A, 0xF5, 0x83, 0xE8, 0xF0, 0x22,
+0x50, 0x06, 0xE9, 0x25, 0x82, 0xC8, 0xF6, 0x22, 0xBB, 0xFE, 0x05, 0xE9, 0x25, 0x82, 0xC8, 0xF2,
+0x22, 0xC5, 0xF0, 0xF8, 0xA3, 0xE0, 0x28, 0xF0, 0xC5, 0xF0, 0xF8, 0xE5, 0x82, 0x15, 0x82, 0x70,
+0x02, 0x15, 0x83, 0xE0, 0x38, 0xF0, 0x22, 0xBB, 0x01, 0x0A, 0x89, 0x82, 0x8A, 0x83, 0xE0, 0xF5,
+0xF0, 0xA3, 0xE0, 0x22, 0x50, 0x06, 0x87, 0xF0, 0x09, 0xE7, 0x19, 0x22, 0xBB, 0xFE, 0x07, 0xE3,
+0xF5, 0xF0, 0x09, 0xE3, 0x19, 0x22, 0x89, 0x82, 0x8A, 0x83, 0xE4, 0x93, 0xF5, 0xF0, 0x74, 0x01,
+0x93, 0x22, 0xBB, 0x01, 0x10, 0xE5, 0x82, 0x29, 0xF5, 0x82, 0xE5, 0x83, 0x3A, 0xF5, 0x83, 0xE0,
+0xF5, 0xF0, 0xA3, 0xE0, 0x22, 0x50, 0x09, 0xE9, 0x25, 0x82, 0xF8, 0x86, 0xF0, 0x08, 0xE6, 0x22,
+0xBB, 0xFE, 0x0A, 0xE9, 0x25, 0x82, 0xF8, 0xE2, 0xF5, 0xF0, 0x08, 0xE2, 0x22, 0xE5, 0x83, 0x2A,
+0xF5, 0x83, 0xE9, 0x93, 0xF5, 0xF0, 0xA3, 0xE9, 0x93, 0x22, 0xBB, 0x01, 0x0A, 0x89, 0x82, 0x8A,
+0x83, 0xF0, 0xE5, 0xF0, 0xA3, 0xF0, 0x22, 0x50, 0x06, 0xF7, 0x09, 0xA7, 0xF0, 0x19, 0x22, 0xBB,
+0xFE, 0x06, 0xF3, 0xE5, 0xF0, 0x09, 0xF3, 0x19, 0x22, 0xF8, 0xBB, 0x01, 0x11, 0xE5, 0x82, 0x29,
+0xF5, 0x82, 0xE5, 0x83, 0x3A, 0xF5, 0x83, 0xE8, 0xF0, 0xE5, 0xF0, 0xA3, 0xF0, 0x22, 0x50, 0x09,
+0xE9, 0x25, 0x82, 0xC8, 0xF6, 0x08, 0xA6, 0xF0, 0x22, 0xBB, 0xFE, 0x09, 0xE9, 0x25, 0x82, 0xC8,
+0xF2, 0xE5, 0xF0, 0x08, 0xF2, 0x22, 0xEF, 0x4B, 0xFF, 0xEE, 0x4A, 0xFE, 0xED, 0x49, 0xFD, 0xEC,
+0x48, 0xFC, 0x22, 0xE0, 0xFC, 0xA3, 0xE0, 0xFD, 0xA3, 0xE0, 0xFE, 0xA3, 0xE0, 0xFF, 0x22, 0xA4,
+0x25, 0x82, 0xF5, 0x82, 0xE5, 0xF0, 0x35, 0x83, 0xF5, 0x83, 0x22, 0xE0, 0xFB, 0xA3, 0xE0, 0xFA,
+0xA3, 0xE0, 0xF9, 0x22, 0xF8, 0xE0, 0xFB, 0xA3, 0xA3, 0xE0, 0xF9, 0x25, 0xF0, 0xF0, 0xE5, 0x82,
+0x15, 0x82, 0x70, 0x02, 0x15, 0x83, 0xE0, 0xFA, 0x38, 0xF0, 0x22, 0xEB, 0xF0, 0xA3, 0xEA, 0xF0,
+0xA3, 0xE9, 0xF0, 0x22, 0xD0, 0x83, 0xD0, 0x82, 0xF8, 0xE4, 0x93, 0x70, 0x12, 0x74, 0x01, 0x93,
+0x70, 0x0D, 0xA3, 0xA3, 0x93, 0xF8, 0x74, 0x01, 0x93, 0xF5, 0x82, 0x88, 0x83, 0xE4, 0x73, 0x74,
+0x02, 0x93, 0x68, 0x60, 0xEF, 0xA3, 0xA3, 0xA3, 0x80, 0xDF, 0xD0, 0x83, 0xD0, 0x82, 0xF8, 0xE4,
+0x93, 0x70, 0x12, 0x74, 0x01, 0x93, 0x70, 0x0D, 0xA3, 0xA3, 0x93, 0xF8, 0x74, 0x01, 0x93, 0xF5,
+0x82, 0x88, 0x83, 0xE4, 0x73, 0x74, 0x02, 0x93, 0xB5, 0xF0, 0x06, 0x74, 0x03, 0x93, 0x68, 0x60,
+0xE9, 0xA3, 0xA3, 0xA3, 0xA3, 0x80, 0xD8, 0xE4, 0x90, 0x8A, 0xC5, 0xF0, 0xE5, 0x24, 0x70, 0x03,
+0x02, 0x44, 0x9D, 0xE5, 0x21, 0x64, 0x01, 0x60, 0x03, 0x02, 0x44, 0x9D, 0xE5, 0x24, 0x14, 0x60,
+0x29, 0x24, 0xFD, 0x60, 0x25, 0x24, 0x02, 0x24, 0xFB, 0x50, 0x02, 0x80, 0x23, 0x90, 0x8B, 0x0B,
+0xE0, 0x14, 0xF0, 0xE0, 0x60, 0x04, 0xA3, 0xE0, 0x60, 0x16, 0x90, 0x8B, 0x0B, 0xE0, 0x70, 0x0A,
+0x90, 0x8B, 0x19, 0xE0, 0x90, 0x8B, 0x0B, 0xF0, 0x80, 0x00, 0x90, 0x8A, 0xC5, 0x74, 0x01, 0xF0,
+0x90, 0x8B, 0x2C, 0xE0, 0x30, 0xE0, 0x16, 0xA3, 0xE0, 0xB4, 0x06, 0x05, 0xE4, 0x90, 0x8A, 0xC5,
+0xF0, 0xE4, 0xFF, 0x12, 0x4D, 0xE0, 0xEF, 0x70, 0x04, 0x90, 0x8A, 0xC5, 0xF0, 0x90, 0x8A, 0xC5,
+0xE0, 0x60, 0x4A, 0x43, 0x25, 0x10, 0xE4, 0x90, 0x8B, 0x3D, 0xF0, 0x90, 0x8B, 0x0C, 0xE0, 0x75,
+0xF0, 0x03, 0xA4, 0xFF, 0x90, 0x8B, 0x15, 0xE0, 0x2F, 0x90, 0x8B, 0x3E, 0xF0, 0xE4, 0xFB, 0xFD,
+0x7F, 0x54, 0x7E, 0x01, 0x12, 0x4B, 0x6C, 0x90, 0x01, 0x57, 0x74, 0x05, 0xF0, 0xE5, 0x22, 0x54,
+0x0F, 0xC3, 0x94, 0x04, 0x50, 0x07, 0x7D, 0x01, 0x7F, 0x04, 0x12, 0x45, 0xA2, 0x90, 0x8B, 0x2C,
+0xE0, 0x30, 0xE0, 0x09, 0x12, 0x7D, 0xC1, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x22, 0xE4, 0xF5,
+0x25, 0xF5, 0x24, 0x75, 0x23, 0x0C, 0x75, 0x22, 0x0C, 0x90, 0x8B, 0x1A, 0xF0, 0x90, 0x8B, 0x18,
+0xF0, 0x90, 0x8B, 0x17, 0xF0, 0x90, 0x8B, 0x19, 0x04, 0xF0, 0x90, 0x8B, 0x0B, 0xF0, 0xE4, 0x90,
+0x8B, 0x1B, 0xF0, 0x90, 0x8B, 0x0D, 0xF0, 0x90, 0x8B, 0x15, 0x74, 0x05, 0xF0, 0xE4, 0x90, 0x8B,
+0x0C, 0xF0, 0x90, 0x8B, 0x13, 0xF0, 0xA3, 0x74, 0x03, 0xF0, 0x90, 0x8B, 0x10, 0xF0, 0xA3, 0x74,
+0x05, 0xF0, 0x90, 0x8B, 0x0F, 0x74, 0x14, 0xF0, 0x90, 0x8B, 0x16, 0x74, 0x05, 0xF0, 0xE4, 0x90,
+0x8B, 0x0E, 0xF0, 0x90, 0x8B, 0x0A, 0xF0, 0x90, 0x8B, 0x08, 0xF0, 0x90, 0x8B, 0x12, 0xF0, 0x22,
+0x7F, 0x00, 0x22, 0x02, 0x45, 0x03, 0x02, 0x45, 0x06, 0x8E, 0x64, 0x8F, 0x65, 0xAD, 0x65, 0xAC,
+0x64, 0xAF, 0x63, 0x12, 0x4A, 0x5B, 0xAF, 0x65, 0xAE, 0x64, 0x90, 0x04, 0x80, 0xE0, 0x54, 0x0F,
+0xFD, 0xAC, 0x07, 0x74, 0x11, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x44, 0x01,
+0xF0, 0x74, 0x11, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x54, 0xFB, 0xF0, 0xAC,
+0x07, 0x74, 0x16, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x44, 0xFA, 0xF0, 0x74,
+0x15, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x44, 0x1F, 0xF0, 0xAC, 0x07, 0x74,
+0x06, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x44, 0x0F, 0xF0, 0x90, 0x04, 0x53,
+0xE4, 0xF0, 0x90, 0x04, 0x52, 0xF0, 0x90, 0x04, 0x51, 0x74, 0xFF, 0xF0, 0x90, 0x04, 0x50, 0x74,
+0xFD, 0xF0, 0x74, 0x14, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x54, 0xC0, 0x4D,
+0xFD, 0x74, 0x14, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xED, 0xF0, 0x22, 0x7D, 0x01,
+0x7F, 0x0C, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x8F, 0x67, 0x8D, 0x68, 0xE5, 0x67, 0x54,
+0x0F, 0xFF, 0xE5, 0x22, 0x54, 0x0F, 0x6F, 0x60, 0x72, 0xE5, 0x67, 0x30, 0xE2, 0x30, 0xE5, 0x22,
+0x20, 0xE2, 0x05, 0x7F, 0x01, 0x12, 0x4A, 0xB2, 0xE5, 0x22, 0x30, 0xE3, 0x10, 0xE5, 0x67, 0x20,
+0xE3, 0x0B, 0x12, 0x49, 0xD5, 0xEF, 0x60, 0x53, 0x12, 0x4A, 0xCC, 0x80, 0x4E, 0xE5, 0x22, 0x20,
+0xE3, 0x49, 0xE5, 0x67, 0x30, 0xE3, 0x44, 0xAF, 0x68, 0x12, 0x4A, 0x7C, 0x80, 0x3D, 0xE5, 0x22,
+0x54, 0x0F, 0xFF, 0xBF, 0x0C, 0x0E, 0xE5, 0x67, 0x20, 0xE3, 0x09, 0x12, 0x49, 0xD5, 0xEF, 0x60,
+0x2A, 0x12, 0x4A, 0xCC, 0xE5, 0x22, 0x54, 0x0F, 0xFF, 0xBF, 0x04, 0x0E, 0xE5, 0x67, 0x20, 0xE2,
+0x09, 0x12, 0x49, 0x93, 0xEF, 0x60, 0x14, 0x12, 0x4A, 0x32, 0xE5, 0x22, 0x54, 0x0F, 0xFF, 0xBF,
+0x02, 0x09, 0x12, 0x45, 0x00, 0xEF, 0x60, 0x03, 0x12, 0x4B, 0x10, 0xD0, 0xD0, 0x92, 0xAF, 0x22,
+0x02, 0x46, 0x6E, 0x02, 0x50, 0xC6, 0xE4, 0x93, 0xA3, 0xF8, 0xE4, 0x93, 0xA3, 0x40, 0x03, 0xF6,
+0x80, 0x01, 0xF2, 0x08, 0xDF, 0xF4, 0x80, 0x29, 0xE4, 0x93, 0xA3, 0xF8, 0x54, 0x07, 0x24, 0x0C,
+0xC8, 0xC3, 0x33, 0xC4, 0x54, 0x0F, 0x44, 0x20, 0xC8, 0x83, 0x40, 0x04, 0xF4, 0x56, 0x80, 0x01,
+0x46, 0xF6, 0xDF, 0xE4, 0x80, 0x0B, 0x01, 0x02, 0x04, 0x08, 0x10, 0x20, 0x40, 0x80, 0x90, 0x4B,
+0x23, 0xE4, 0x7E, 0x01, 0x93, 0x60, 0xBC, 0xA3, 0xFF, 0x54, 0x3F, 0x30, 0xE5, 0x09, 0x54, 0x1F,
+0xFE, 0xE4, 0x93, 0xA3, 0x60, 0x01, 0x0E, 0xCF, 0x54, 0xC0, 0x25, 0xE0, 0x60, 0xA8, 0x40, 0xB8,
+0xE4, 0x93, 0xA3, 0xFA, 0xE4, 0x93, 0xA3, 0xF8, 0xE4, 0x93, 0xA3, 0xC8, 0xC5, 0x82, 0xC8, 0xCA,
+0xC5, 0x83, 0xCA, 0xF0, 0xA3, 0xC8, 0xC5, 0x82, 0xC8, 0xCA, 0xC5, 0x83, 0xCA, 0xDF, 0xE9, 0xDE,
+0xE7, 0x80, 0xBE, 0xE5, 0x21, 0x64, 0x01, 0x70, 0x67, 0xE5, 0x24, 0x60, 0x63, 0xE5, 0x24, 0x64,
+0x02, 0x60, 0x06, 0xE5, 0x24, 0x64, 0x05, 0x70, 0x27, 0x90, 0x06, 0xAB, 0xE0, 0x90, 0x8B, 0x0B,
+0xF0, 0x90, 0x06, 0xAA, 0xE0, 0x90, 0x8B, 0x19, 0xF0, 0x90, 0x8B, 0x0B, 0xE0, 0x70, 0x07, 0x90,
+0x8B, 0x19, 0xE0, 0xFF, 0x80, 0x05, 0x90, 0x8B, 0x0B, 0xE0, 0xFF, 0x90, 0x8B, 0x0B, 0xEF, 0xF0,
+0x90, 0x8B, 0x0D, 0xE0, 0x60, 0x02, 0xE4, 0xF0, 0xE4, 0x90, 0x8B, 0x0C, 0xF0, 0x90, 0x05, 0x58,
+0x74, 0x03, 0xF0, 0x90, 0x01, 0x57, 0xE4, 0xF0, 0x90, 0x01, 0x3C, 0x74, 0x02, 0xF0, 0x53, 0x25,
+0xFD, 0x53, 0x25, 0xEF, 0xE5, 0x24, 0x14, 0x24, 0xFD, 0x50, 0x02, 0x80, 0x03, 0x12, 0x47, 0x8E,
+0x22, 0xEF, 0x64, 0x01, 0x70, 0x35, 0x7D, 0x78, 0x7F, 0x02, 0x12, 0x31, 0x2C, 0x7D, 0x02, 0x7F,
+0x03, 0x12, 0x31, 0x2C, 0x90, 0x01, 0x57, 0xE4, 0xF0, 0x90, 0x01, 0x3C, 0x74, 0x02, 0xF0, 0x12,
+0x45, 0x9E, 0x90, 0x8B, 0x2C, 0xE0, 0x30, 0xE0, 0x03, 0x12, 0x7D, 0xC1, 0x90, 0x06, 0x04, 0xE0,
+0x54, 0x7F, 0xF0, 0x90, 0x06, 0x0A, 0xE0, 0x54, 0xF8, 0xF0, 0x22, 0x90, 0x01, 0x36, 0x74, 0x7B,
+0xF0, 0xA3, 0x74, 0x02, 0xF0, 0x7D, 0x7B, 0xFF, 0x12, 0x31, 0x9D, 0x7D, 0x02, 0x7F, 0x03, 0x12,
+0x31, 0x9D, 0x90, 0x06, 0x04, 0xE0, 0x44, 0x80, 0xF0, 0x90, 0x06, 0x0A, 0xE0, 0x44, 0x07, 0xF0,
+0x12, 0x4B, 0x4F, 0xE5, 0x21, 0x20, 0xE0, 0x05, 0xE4, 0x90, 0x8B, 0x0D, 0xF0, 0x22, 0xE4, 0x90,
+0x8A, 0xC5, 0xF0, 0x90, 0x06, 0xA9, 0xE0, 0x90, 0x8A, 0xC5, 0xF0, 0xE0, 0x54, 0xC0, 0x70, 0x09,
+0x53, 0x25, 0xFE, 0x53, 0x25, 0xFD, 0x12, 0x4A, 0xFC, 0x90, 0x8A, 0xC5, 0xE0, 0x30, 0xE6, 0x15,
+0x43, 0x25, 0x01, 0x90, 0x8B, 0x1A, 0xE0, 0x64, 0x02, 0x60, 0x05, 0x12, 0x4A, 0x97, 0x80, 0x08,
+0x12, 0x49, 0x49, 0x80, 0x03, 0x53, 0x25, 0xFE, 0x90, 0x8A, 0xC5, 0xE0, 0x30, 0xE7, 0x27, 0x43,
+0x25, 0x02, 0xE4, 0x90, 0x8B, 0x3D, 0xF0, 0x90, 0x8B, 0x11, 0xE0, 0x90, 0x8B, 0x3E, 0xF0, 0xE4,
+0xFB, 0xFD, 0x7F, 0x54, 0x7E, 0x01, 0x12, 0x4B, 0x6C, 0x90, 0x01, 0x57, 0x74, 0x05, 0xF0, 0x90,
+0x8B, 0x1B, 0x74, 0x01, 0xF0, 0x22, 0x53, 0x25, 0xFD, 0x22, 0x90, 0x8A, 0xDE, 0x12, 0x43, 0x8B,
+0x12, 0x4B, 0x43, 0x90, 0x8A, 0xDE, 0x12, 0x43, 0x6B, 0x12, 0x24, 0x62, 0xF5, 0x24, 0x14, 0x60,
+0x0E, 0x14, 0x60, 0x1F, 0x14, 0x60, 0x31, 0x24, 0x03, 0x70, 0x44, 0x7F, 0x01, 0x80, 0x3D, 0x90,
+0x8A, 0xDE, 0x12, 0x43, 0x6B, 0x90, 0x00, 0x02, 0x12, 0x42, 0x20, 0xFD, 0xE4, 0xFF, 0x12, 0x4A,
+0x07, 0x80, 0x29, 0x90, 0x8A, 0xDE, 0x12, 0x43, 0x6B, 0x90, 0x00, 0x02, 0x12, 0x42, 0x20, 0xFD,
+0x7F, 0x01, 0x12, 0x4A, 0x07, 0x1F, 0x80, 0x14, 0x90, 0x8A, 0xDE, 0x12, 0x43, 0x6B, 0x90, 0x00,
+0x02, 0x12, 0x42, 0x20, 0xFD, 0x7F, 0x02, 0x12, 0x4A, 0x07, 0xE4, 0xFF, 0x12, 0x47, 0x21, 0x22,
+0xE4, 0x90, 0x8A, 0xCB, 0xF0, 0xE5, 0x24, 0x60, 0x49, 0x90, 0x8B, 0x1B, 0xE0, 0x60, 0x0D, 0xE4,
+0xF0, 0x53, 0x25, 0xFD, 0xE5, 0x25, 0x54, 0x07, 0x70, 0x38, 0x80, 0x33, 0x90, 0x8B, 0x0C, 0xE0,
+0x04, 0xF0, 0x53, 0x25, 0xEF, 0x90, 0x8A, 0xCB, 0xE0, 0xFF, 0x90, 0x8B, 0x10, 0xE0, 0x2F, 0xFF,
+0xE4, 0x33, 0xFE, 0x90, 0x8B, 0x0C, 0xE0, 0xD3, 0x9F, 0xEE, 0x64, 0x80, 0xF8, 0x74, 0x80, 0x98,
+0x40, 0x0D, 0xE5, 0x21, 0xB4, 0x01, 0x0B, 0xA3, 0xE0, 0x70, 0x07, 0xE0, 0x04, 0xF0, 0x22, 0x12,
+0x4A, 0xFC, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x8F, 0x63, 0x90, 0x04, 0x1D, 0xE0,
+0x60, 0x24, 0x90, 0x05, 0x22, 0xE0, 0xF5, 0x66, 0x74, 0xFF, 0xF0, 0x12, 0x7E, 0x9A, 0xBF, 0x01,
+0x0D, 0x90, 0x8A, 0xF9, 0xE0, 0xFF, 0x7D, 0x01, 0x12, 0x5F, 0xFD, 0x12, 0x45, 0x09, 0x90, 0x05,
+0x22, 0xE5, 0x66, 0xF0, 0x80, 0x0D, 0x90, 0x8A, 0xF9, 0xE0, 0xFF, 0x7D, 0x01, 0x12, 0x5F, 0xFD,
+0x12, 0x45, 0x09, 0x90, 0x04, 0x1F, 0x74, 0x20, 0xF0, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xE5, 0x24,
+0x14, 0x24, 0xFD, 0x50, 0x02, 0x80, 0x41, 0x90, 0x8B, 0x1A, 0xE0, 0x60, 0x2B, 0x12, 0x45, 0x9E,
+0xE4, 0x90, 0x8B, 0x3D, 0xF0, 0x90, 0x8B, 0x0F, 0xE0, 0x90, 0x8B, 0x3E, 0xF0, 0xE4, 0xFB, 0xFD,
+0x7F, 0x58, 0x7E, 0x01, 0x12, 0x4B, 0x6C, 0x90, 0x01, 0x5B, 0x74, 0x05, 0xF0, 0x90, 0x06, 0x92,
+0x74, 0x01, 0xF0, 0x90, 0x8B, 0x18, 0xF0, 0x22, 0xE5, 0x22, 0x54, 0x0F, 0xC3, 0x94, 0x04, 0x50,
+0x07, 0x7D, 0x01, 0x7F, 0x04, 0x12, 0x45, 0xA2, 0x22, 0x90, 0x01, 0x5F, 0xE4, 0xF0, 0x90, 0x01,
+0x3C, 0x74, 0x08, 0xF0, 0xE4, 0x90, 0x8B, 0x3D, 0xF0, 0x90, 0x8B, 0x0F, 0xE0, 0x90, 0x8B, 0x3E,
+0xF0, 0xE4, 0xFB, 0xFD, 0x7F, 0x5C, 0x7E, 0x01, 0x12, 0x4B, 0x6C, 0x90, 0x01, 0x5F, 0x74, 0x05,
+0xF0, 0x90, 0x06, 0x92, 0x74, 0x02, 0xF0, 0x90, 0x8B, 0x17, 0x14, 0xF0, 0xE5, 0x22, 0x54, 0x0F,
+0xC3, 0x94, 0x0C, 0x50, 0x0D, 0x12, 0x45, 0x9E, 0x90, 0x8B, 0x2C, 0xE0, 0x30, 0xE0, 0x03, 0x12,
+0x7D, 0xC1, 0x22, 0x12, 0x4B, 0x34, 0xEF, 0x64, 0x01, 0x70, 0x37, 0xE5, 0x25, 0x54, 0x03, 0x70,
+0x31, 0xE5, 0x23, 0x54, 0x0F, 0xD3, 0x94, 0x02, 0x50, 0x28, 0xE5, 0x25, 0x20, 0xE2, 0x23, 0xE5,
+0x25, 0x20, 0xE4, 0x1E, 0x90, 0x8B, 0x0D, 0xE0, 0x70, 0x18, 0x90, 0x8B, 0x12, 0xE0, 0x70, 0x12,
+0xE5, 0x26, 0x70, 0x0E, 0x90, 0x01, 0xB9, 0xE4, 0xF0, 0x90, 0x01, 0xB8, 0x74, 0x04, 0xF0, 0x7F,
+0x01, 0x22, 0x7F, 0x00, 0x22, 0x12, 0x4B, 0x34, 0xEF, 0x64, 0x01, 0x70, 0x27, 0x90, 0x8B, 0x18,
+0xE0, 0x70, 0x21, 0x90, 0x8B, 0x17, 0xE0, 0x70, 0x1B, 0xE5, 0x23, 0x54, 0x0F, 0xD3, 0x94, 0x04,
+0x50, 0x12, 0xE5, 0x26, 0x70, 0x0E, 0x90, 0x01, 0xB9, 0xE4, 0xF0, 0x90, 0x01, 0xB8, 0x74, 0x08,
+0xF0, 0x7F, 0x01, 0x22, 0x7F, 0x00, 0x22, 0xEF, 0x24, 0xFE, 0x60, 0x0B, 0x04, 0x70, 0x22, 0x90,
+0x8B, 0x19, 0x74, 0x01, 0xF0, 0x80, 0x16, 0xED, 0x70, 0x0A, 0x90, 0x8B, 0x16, 0xE0, 0x90, 0x8B,
+0x19, 0xF0, 0x80, 0x05, 0x90, 0x8B, 0x19, 0xED, 0xF0, 0x90, 0x8B, 0x19, 0xE0, 0x90, 0x8B, 0x0B,
+0xF0, 0x22, 0x90, 0x01, 0x37, 0x74, 0x02, 0xF0, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x12, 0x7E,
+0x9A, 0xEF, 0x70, 0x06, 0x90, 0x01, 0xC8, 0x74, 0xFD, 0xF0, 0x7D, 0x02, 0x7F, 0x03, 0x12, 0x31,
+0x9D, 0x12, 0x7C, 0x50, 0x53, 0x22, 0xF0, 0x43, 0x22, 0x02, 0x22, 0xEF, 0x60, 0x0F, 0x74, 0x21,
+0x2D, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x44, 0x10, 0xF0, 0x22, 0x74, 0x21, 0x2D,
+0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x54, 0xEF, 0xF0, 0x22, 0x90, 0x06, 0x04, 0xE0,
+0x54, 0xBF, 0xF0, 0xEF, 0x60, 0x0A, 0xE5, 0x21, 0xB4, 0x01, 0x05, 0xE4, 0xFF, 0x12, 0x48, 0xB3,
+0x53, 0x22, 0xF0, 0x43, 0x22, 0x0C, 0x22, 0x90, 0x04, 0x1D, 0xE0, 0x70, 0x14, 0x90, 0x8A, 0xF8,
+0xE0, 0xFF, 0xE4, 0xFD, 0x12, 0x5F, 0xFD, 0x8E, 0x69, 0x8F, 0x6A, 0x90, 0x04, 0x1F, 0x74, 0x20,
+0xF0, 0x22, 0x90, 0x8B, 0x52, 0xEF, 0xF0, 0x12, 0x7D, 0x42, 0x90, 0x8B, 0x52, 0xE0, 0x60, 0x05,
+0x90, 0x05, 0x22, 0xE4, 0xF0, 0x53, 0x22, 0xF0, 0x43, 0x22, 0x04, 0x22, 0x90, 0x06, 0x04, 0xE0,
+0x44, 0x40, 0xF0, 0xE5, 0x21, 0xB4, 0x01, 0x05, 0x7F, 0x01, 0x12, 0x48, 0xB3, 0x53, 0x22, 0xF0,
+0x43, 0x22, 0x04, 0x22, 0xE5, 0x23, 0x30, 0xE6, 0x12, 0xE5, 0x23, 0x54, 0x0F, 0xFF, 0x90, 0x01,
+0x2F, 0xE0, 0x54, 0x80, 0x4F, 0x64, 0x80, 0xF0, 0x53, 0x23, 0xBF, 0x22, 0x90, 0x8B, 0x2C, 0xE0,
+0x30, 0xE0, 0x05, 0xAF, 0x23, 0x02, 0x7E, 0x06, 0x7D, 0x01, 0xAF, 0x23, 0x12, 0x45, 0xA2, 0x22,
+0x53, 0x22, 0xF0, 0x43, 0x22, 0x01, 0x12, 0x4B, 0x5A, 0x12, 0x4B, 0x5B, 0x53, 0x22, 0xF0, 0x43,
+0x22, 0x02, 0x22, 0x41, 0x8A, 0xF6, 0x00, 0x41, 0x8B, 0x05, 0x00, 0x41, 0x8B, 0x51, 0x00, 0x41,
+0x8B, 0x53, 0x00, 0x00, 0x90, 0x04, 0x1B, 0xE0, 0x54, 0x7F, 0x64, 0x7F, 0x7F, 0x01, 0x60, 0x02,
+0x7F, 0x00, 0x22, 0xE4, 0x90, 0x8B, 0x1B, 0xF0, 0x90, 0x8B, 0x0C, 0xF0, 0xF5, 0x25, 0x22, 0x90,
+0x8B, 0x13, 0xE0, 0xA3, 0xE0, 0x90, 0x05, 0x58, 0xF0, 0x22, 0x22, 0x22, 0xF0, 0x90, 0x8B, 0x0F,
+0xE0, 0x90, 0x8B, 0x3E, 0xF0, 0xE4, 0xFB, 0xFD, 0x7F, 0x58, 0x7E, 0x01, 0xD3, 0x10, 0xAF, 0x01,
+0xC3, 0xC0, 0xD0, 0x90, 0x8B, 0x3D, 0xE0, 0xFB, 0xA3, 0xE0, 0xF5, 0x44, 0xE4, 0xF5, 0x45, 0x12,
+0x30, 0x62, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xC0, 0xE0, 0xC0, 0xF0, 0xC0, 0x83, 0xC0, 0x82, 0xC0,
+0xD0, 0x75, 0xD0, 0x00, 0xC0, 0x00, 0xC0, 0x01, 0xC0, 0x02, 0xC0, 0x03, 0xC0, 0x04, 0xC0, 0x05,
+0xC0, 0x06, 0xC0, 0x07, 0x75, 0x0E, 0x00, 0x90, 0x01, 0xC4, 0x74, 0x87, 0xF0, 0x74, 0x4B, 0xA3,
+0xF0, 0x53, 0x91, 0xDF, 0x90, 0x01, 0x3C, 0xE0, 0x55, 0x30, 0xF5, 0x34, 0xA3, 0xE0, 0x55, 0x31,
+0xF5, 0x35, 0xA3, 0xE0, 0x55, 0x32, 0xF5, 0x36, 0xA3, 0xE0, 0x55, 0x33, 0xF5, 0x37, 0xE5, 0x34,
+0x30, 0xE0, 0x51, 0x90, 0x01, 0x3C, 0x74, 0x01, 0xF0, 0x90, 0x8B, 0x32, 0xE0, 0x30, 0xE0, 0x1F,
+0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x18, 0x90, 0x8B, 0x34, 0xE4, 0xF0, 0x90, 0x8B, 0x33, 0xE0,
+0x64, 0x03, 0x60, 0x0B, 0x7F, 0x01, 0xB1, 0xE0, 0xEF, 0x70, 0x04, 0x7F, 0x02, 0xD1, 0x89, 0x90,
+0x8B, 0x2C, 0xE0, 0xFF, 0x30, 0xE0, 0x1D, 0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x16, 0x90, 0x8B,
+0x2E, 0xE4, 0xF0, 0x90, 0x8B, 0x2D, 0xE0, 0x64, 0x06, 0x60, 0x09, 0xE4, 0xFF, 0xB1, 0xE0, 0xEF,
+0x70, 0x02, 0xD1, 0x56, 0xE5, 0x34, 0x30, 0xE1, 0x08, 0x90, 0x01, 0x3C, 0x74, 0x02, 0xF0, 0x11,
+0x60, 0xE5, 0x34, 0x30, 0xE2, 0x28, 0x90, 0x01, 0x3C, 0x74, 0x04, 0xF0, 0x90, 0x06, 0x92, 0xE0,
+0x30, 0xE0, 0x14, 0x90, 0x8B, 0x3D, 0xE4, 0x71, 0x5C, 0x90, 0x01, 0x5B, 0x74, 0x05, 0xF0, 0x90,
+0x06, 0x92, 0x74, 0x01, 0xF0, 0x80, 0x07, 0x90, 0x8B, 0x18, 0xE4, 0xF0, 0x51, 0xFC, 0xE5, 0x34,
+0x30, 0xE3, 0x38, 0x90, 0x01, 0x3C, 0x74, 0x08, 0xF0, 0x90, 0x06, 0x92, 0xE0, 0x30, 0xE1, 0x24,
+0x90, 0x8B, 0x3D, 0xE4, 0xF0, 0x90, 0x8B, 0x0F, 0xE0, 0x90, 0x8B, 0x3E, 0xF0, 0xE4, 0xFB, 0xFD,
+0x7F, 0x5C, 0x7E, 0x01, 0x71, 0x6C, 0x90, 0x01, 0x5F, 0x74, 0x05, 0xF0, 0x90, 0x06, 0x92, 0x74,
+0x02, 0xF0, 0x80, 0x07, 0x90, 0x8B, 0x17, 0xE4, 0xF0, 0x51, 0xFC, 0xE5, 0x34, 0x30, 0xE4, 0x09,
+0x90, 0x01, 0x3C, 0x74, 0x10, 0xF0, 0x12, 0x51, 0xC9, 0xE5, 0x34, 0x30, 0xE5, 0x06, 0x90, 0x01,
+0x3C, 0x74, 0x20, 0xF0, 0xE5, 0x35, 0x30, 0xE0, 0x10, 0x90, 0x01, 0x3D, 0x74, 0x01, 0xF0, 0x90,
+0x00, 0x83, 0xE0, 0xF5, 0x23, 0x51, 0xE4, 0x51, 0xFC, 0xE5, 0x35, 0x30, 0xE2, 0x06, 0x90, 0x01,
+0x3D, 0x74, 0x04, 0xF0, 0xE5, 0x35, 0x30, 0xE4, 0x1B, 0x90, 0x01, 0x3D, 0x74, 0x10, 0xF0, 0x90,
+0x8B, 0x05, 0xE0, 0x60, 0x0F, 0xE4, 0xF0, 0x90, 0x05, 0x53, 0xE0, 0x44, 0x01, 0xF0, 0x90, 0x05,
+0xFD, 0xE0, 0x04, 0xF0, 0xE5, 0x36, 0x30, 0xE0, 0x75, 0x90, 0x01, 0x3E, 0x74, 0x01, 0xF0, 0x90,
+0x8B, 0x32, 0xE0, 0x30, 0xE0, 0x18, 0x90, 0x8B, 0x36, 0xE4, 0xF0, 0x90, 0x8B, 0x33, 0xE0, 0x64,
+0x03, 0x60, 0x0B, 0x7F, 0x01, 0xB1, 0xE0, 0xEF, 0x60, 0x04, 0x7F, 0x01, 0xD1, 0x89, 0x90, 0x8B,
+0x2C, 0xE0, 0x30, 0xE0, 0x49, 0x90, 0x8B, 0x30, 0xE4, 0xF0, 0xFF, 0xB1, 0xE0, 0xEF, 0x60, 0x3E,
+0x12, 0x65, 0x5F, 0x90, 0x8B, 0x2D, 0xE0, 0xFF, 0x64, 0x06, 0x60, 0x32, 0xEF, 0xB4, 0x04, 0x02,
+0x80, 0x07, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x05, 0x04, 0xE4, 0xFF, 0x80, 0x14, 0x90, 0x8B, 0x2D,
+0xE0, 0xB4, 0x03, 0x04, 0x7F, 0x01, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x02, 0x05, 0x7F,
+0x01, 0x12, 0x65, 0x82, 0x7D, 0x01, 0xAF, 0x23, 0x12, 0x45, 0xA2, 0x12, 0x7D, 0xC1, 0xE5, 0x36,
+0x30, 0xE1, 0x47, 0x90, 0x01, 0x3E, 0x74, 0x02, 0xF0, 0x90, 0x8B, 0x32, 0xE0, 0x30, 0xE0, 0x19,
+0x90, 0x8B, 0x36, 0x74, 0x01, 0xF0, 0x90, 0x8B, 0x33, 0xE0, 0x64, 0x03, 0x60, 0x0B, 0x7F, 0x01,
+0xB1, 0xE0, 0xEF, 0x70, 0x04, 0x7F, 0x02, 0xD1, 0x89, 0x90, 0x8B, 0x2C, 0xE0, 0x30, 0xE0, 0x1A,
+0x90, 0x8B, 0x30, 0x74, 0x01, 0xF0, 0x12, 0x7E, 0x2B, 0x90, 0x8B, 0x2D, 0xE0, 0x64, 0x06, 0x60,
+0x09, 0xE4, 0xFF, 0xB1, 0xE0, 0xEF, 0x70, 0x02, 0xD1, 0x56, 0x74, 0x87, 0x04, 0x90, 0x01, 0xC4,
+0xF0, 0x74, 0x4B, 0xA3, 0xF0, 0xD0, 0x07, 0xD0, 0x06, 0xD0, 0x05, 0xD0, 0x04, 0xD0, 0x03, 0xD0,
+0x02, 0xD0, 0x01, 0xD0, 0x00, 0xD0, 0xD0, 0xD0, 0x82, 0xD0, 0x83, 0xD0, 0xF0, 0xD0, 0xE0, 0x32,
+0xEF, 0x64, 0x01, 0x70, 0x3D, 0x90, 0x8B, 0x35, 0xE0, 0x60, 0x03, 0x7F, 0x00, 0x22, 0x90, 0x8B,
+0x08, 0xE0, 0x60, 0x03, 0x7F, 0x01, 0x22, 0x90, 0x8B, 0x34, 0xE0, 0x60, 0x03, 0x7F, 0x01, 0x22,
+0x90, 0x8B, 0x32, 0xE0, 0xFF, 0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x0B, 0xEF, 0xC4, 0x13, 0x54,
+0x07, 0x30, 0xE0, 0x03, 0x7F, 0x00, 0x22, 0x90, 0x8B, 0x36, 0xE0, 0x7F, 0x01, 0x60, 0x36, 0x7F,
+0x00, 0x22, 0x90, 0x8B, 0x2F, 0xE0, 0x60, 0x03, 0x7F, 0x00, 0x22, 0x90, 0x8B, 0x08, 0xE0, 0x60,
+0x03, 0x7F, 0x01, 0x22, 0x90, 0x8B, 0x2E, 0xE0, 0x60, 0x03, 0x7F, 0x01, 0x22, 0x90, 0x8B, 0x2C,
+0xE0, 0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x03, 0x7F, 0x00, 0x22, 0x90, 0x8B, 0x30, 0xE0, 0x7F,
+0x01, 0x60, 0x02, 0x7F, 0x00, 0x22, 0x90, 0x8B, 0x0D, 0xE0, 0x60, 0x16, 0x90, 0x8B, 0x2D, 0xE0,
+0x70, 0x04, 0x7F, 0x05, 0x80, 0x1F, 0x90, 0x8B, 0x2D, 0xE0, 0x64, 0x01, 0x70, 0x1A, 0x7F, 0x02,
+0x80, 0x13, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x01, 0x04, 0x7F, 0x03, 0x80, 0x08, 0x90, 0x8B, 0x2D,
+0xE0, 0x70, 0x05, 0x7F, 0x04, 0x12, 0x65, 0x82, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0,
+0x90, 0x8B, 0x33, 0xE0, 0x90, 0x8B, 0x55, 0xF0, 0x6F, 0x70, 0x02, 0xE1, 0x55, 0xEF, 0x14, 0x60,
+0x3B, 0x14, 0x60, 0x5F, 0x14, 0x70, 0x02, 0xE1, 0x30, 0x24, 0x03, 0x60, 0x02, 0xE1, 0x55, 0x90,
+0x8B, 0x55, 0xE0, 0xB4, 0x03, 0x04, 0xF1, 0xC2, 0xE1, 0x55, 0x90, 0x8B, 0x55, 0xE0, 0xB4, 0x02,
+0x04, 0xF1, 0xAF, 0xE1, 0x55, 0x90, 0x8B, 0x55, 0xE0, 0xB4, 0x04, 0x04, 0xF1, 0xC6, 0xE1, 0x55,
+0x90, 0x8B, 0x55, 0xE0, 0x64, 0x01, 0x70, 0x7D, 0xF1, 0xB1, 0x80, 0x79, 0x90, 0x8B, 0x55, 0xE0,
+0xFF, 0xB4, 0x03, 0x04, 0xF1, 0xCA, 0x80, 0x6D, 0xEF, 0xB4, 0x02, 0x04, 0xF1, 0xA1, 0x80, 0x65,
+0x90, 0x8B, 0x55, 0xE0, 0xFF, 0xB4, 0x04, 0x04, 0xF1, 0xD5, 0x80, 0x59, 0xEF, 0x70, 0x56, 0xF1,
+0x8E, 0x80, 0x52, 0x90, 0x8B, 0x55, 0xE0, 0xB4, 0x03, 0x05, 0x12, 0x7C, 0x41, 0x80, 0x46, 0x90,
+0x8B, 0x55, 0xE0, 0xB4, 0x01, 0x04, 0xF1, 0x72, 0x80, 0x3B, 0x90, 0x8B, 0x55, 0xE0, 0xB4, 0x04,
+0x05, 0x12, 0x7D, 0x23, 0x80, 0x2F, 0x90, 0x8B, 0x55, 0xE0, 0x70, 0x29, 0xF1, 0x70, 0x80, 0x25,
+0x90, 0x8B, 0x55, 0xE0, 0xFF, 0xB4, 0x01, 0x04, 0xF1, 0x5A, 0x80, 0x19, 0xEF, 0xB4, 0x02, 0x04,
+0xF1, 0x6B, 0x80, 0x11, 0x90, 0x8B, 0x55, 0xE0, 0xFF, 0xB4, 0x04, 0x04, 0xF1, 0x5A, 0x80, 0x05,
+0xEF, 0x70, 0x02, 0xF1, 0x67, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x90, 0x05, 0x22, 0x74, 0x6F, 0xF0,
+0x90, 0x8B, 0x33, 0x74, 0x03, 0xF0, 0x22, 0xF1, 0x8E, 0x80, 0xEF, 0x12, 0x7D, 0x42, 0x80, 0xEA,
+0xF1, 0x8E, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x12, 0x7E, 0x9A, 0xEF, 0x70, 0x06, 0x90, 0x01,
+0xC8, 0x74, 0xFD, 0xF0, 0x12, 0x7C, 0x50, 0x90, 0x8B, 0x33, 0x74, 0x02, 0xF0, 0x22, 0x90, 0x01,
+0x3E, 0x74, 0x03, 0xF0, 0xFD, 0x7F, 0x02, 0x12, 0x31, 0xB7, 0x90, 0x8B, 0x33, 0x74, 0x01, 0xF0,
+0x22, 0x12, 0x7D, 0x42, 0x90, 0x05, 0x22, 0xE4, 0xF0, 0x90, 0x8B, 0x33, 0x04, 0xF0, 0x22, 0xF1,
+0xA1, 0x7D, 0x03, 0x7F, 0x02, 0x12, 0x31, 0x49, 0x90, 0x05, 0x27, 0xE4, 0xF0, 0x90, 0x8B, 0x33,
+0xF0, 0x22, 0xF1, 0xCA, 0x80, 0xEB, 0xF1, 0xD5, 0x80, 0xE7, 0x90, 0x05, 0x22, 0xE4, 0xF0, 0x90,
+0x8B, 0x33, 0x04, 0xF0, 0x22, 0x90, 0x05, 0x22, 0xE4, 0xF0, 0x90, 0x8B, 0x33, 0x04, 0xF0, 0x22,
+0xF1, 0x8E, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x90, 0x8B, 0x33, 0x74, 0x04, 0xF0, 0x22, 0x90,
+0x02, 0x84, 0xEF, 0xF0, 0xA3, 0xEE, 0xF0, 0xA3, 0x74, 0x05, 0xF0, 0x22, 0xEF, 0x8E, 0xF0, 0x12,
+0x43, 0xBA, 0x50, 0x1A, 0x00, 0x40, 0x50, 0x42, 0x00, 0x80, 0x50, 0x6D, 0x01, 0x00, 0x50, 0x81,
+0x02, 0x00, 0x50, 0x99, 0x04, 0x00, 0x00, 0x00, 0x50, 0xB6, 0xED, 0x54, 0x3F, 0x70, 0x04, 0xFE,
+0xFF, 0x80, 0x04, 0x7E, 0x00, 0x7F, 0x40, 0xEF, 0x2D, 0xFF, 0xEE, 0x3C, 0xFE, 0xEF, 0x78, 0x06,
+0xCE, 0xC3, 0x13, 0xCE, 0x13, 0xD8, 0xF9, 0x78, 0x06, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8, 0xF9,
+0x80, 0x26, 0xED, 0x54, 0x7F, 0x70, 0x04, 0xFE, 0xFF, 0x80, 0x04, 0x7E, 0x00, 0x7F, 0x80, 0xEF,
+0x2D, 0xFF, 0xEE, 0x3C, 0xFE, 0xEF, 0x78, 0x07, 0xCE, 0xC3, 0x13, 0xCE, 0x13, 0xD8, 0xF9, 0x78,
+0x07, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8, 0xF9, 0xFD, 0xAC, 0x06, 0x80, 0x49, 0xED, 0x70, 0x04,
+0xFE, 0xFF, 0x80, 0x04, 0x7E, 0x01, 0x7F, 0x00, 0xEF, 0x2D, 0xEE, 0x3C, 0x7D, 0x00, 0xFC, 0x80,
+0x35, 0xEC, 0x54, 0x01, 0x4D, 0x70, 0x04, 0xFE, 0xFF, 0x80, 0x04, 0x7E, 0x02, 0x7F, 0x00, 0xEF,
+0x2D, 0xEE, 0x3C, 0xC3, 0x13, 0x7D, 0x00, 0x80, 0x1A, 0xEC, 0x54, 0x03, 0x4D, 0x70, 0x04, 0xFE,
+0xFF, 0x80, 0x04, 0x7E, 0x04, 0x7F, 0x00, 0xEF, 0x2D, 0xEE, 0x3C, 0x13, 0x13, 0x54, 0x3F, 0x7D,
+0x00, 0x25, 0xE0, 0x25, 0xE0, 0xFC, 0xAE, 0x04, 0xAF, 0x05, 0x22, 0x90, 0x01, 0xE4, 0x74, 0x58,
+0xF0, 0xA3, 0x74, 0x02, 0xF0, 0x22, 0xE4, 0x90, 0x8A, 0xCC, 0xF0, 0xA3, 0xF0, 0x75, 0x8E, 0x02,
+0x91, 0x0E, 0x12, 0x68, 0x44, 0x90, 0x8B, 0x07, 0xEF, 0xF0, 0x12, 0x68, 0x51, 0x90, 0x8B, 0x09,
+0xEF, 0xF0, 0x12, 0x68, 0x5D, 0x90, 0x8A, 0xF4, 0xEE, 0xF0, 0xA3, 0xEF, 0xF0, 0xE4, 0xF5, 0x55,
+0xF5, 0x21, 0x12, 0x72, 0x55, 0x12, 0x44, 0x9E, 0x12, 0x2E, 0x01, 0x7F, 0x03, 0x12, 0x78, 0x42,
+0x12, 0x7C, 0x3D, 0x12, 0x68, 0x0A, 0x12, 0x68, 0x75, 0x12, 0x68, 0x8A, 0x12, 0x68, 0x28, 0x12,
+0x68, 0x43, 0x90, 0x8A, 0xCE, 0xE5, 0xD9, 0xF0, 0x31, 0x5F, 0xC2, 0xAF, 0x90, 0x00, 0x80, 0xE0,
+0x44, 0x40, 0xF0, 0x51, 0x0E, 0x75, 0xE8, 0x03, 0x43, 0xA8, 0x85, 0xD2, 0xAF, 0x11, 0xBB, 0x90,
+0x8A, 0xCC, 0xE0, 0x64, 0x01, 0xF0, 0x24, 0xC6, 0x90, 0x01, 0xC4, 0xF0, 0x74, 0x50, 0xA3, 0xF0,
+0xE5, 0x55, 0x30, 0xE4, 0x09, 0xC2, 0xAF, 0x53, 0x55, 0xEF, 0xD2, 0xAF, 0xB1, 0x59, 0xE5, 0x55,
+0x30, 0xE6, 0xDC, 0xC2, 0xAF, 0x53, 0x55, 0xBF, 0xD2, 0xAF, 0x12, 0x6B, 0xBD, 0x80, 0xD0, 0x90,
+0x01, 0x3C, 0x74, 0xFF, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0x90, 0x01, 0x34, 0xF0, 0xA3, 0xF0, 0xA3,
+0xF0, 0xA3, 0xF0, 0xFD, 0x7F, 0x54, 0x31, 0x88, 0x7D, 0xFF, 0x7F, 0x55, 0x31, 0x88, 0x7D, 0xFF,
+0x7F, 0x56, 0x31, 0x88, 0x7D, 0xFF, 0x7F, 0x57, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x8F,
+0x82, 0x75, 0x83, 0x00, 0xED, 0xF0, 0x51, 0x0E, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x90, 0x01, 0x30,
+0xE4, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0x90, 0x01, 0x38, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0,
+0xA3, 0xF0, 0xFD, 0x7F, 0x50, 0x31, 0x88, 0xE4, 0xFD, 0x7F, 0x51, 0x31, 0x88, 0xE4, 0xFD, 0x7F,
+0x52, 0x31, 0x88, 0xE4, 0xFD, 0x7F, 0x53, 0x80, 0xBF, 0xE5, 0x5E, 0x64, 0x01, 0x70, 0x3B, 0x71,
+0x4E, 0xBF, 0x01, 0x04, 0x7F, 0x01, 0x71, 0x42, 0x90, 0x00, 0x46, 0xE0, 0x44, 0x04, 0xFD, 0x7F,
+0x46, 0x31, 0x88, 0x90, 0x00, 0x44, 0xE0, 0x54, 0xFB, 0xFD, 0x7F, 0x44, 0x31, 0x88, 0x90, 0x00,
+0x46, 0xE0, 0x54, 0xFB, 0xFD, 0x7F, 0x46, 0x31, 0x88, 0x7F, 0x02, 0x71, 0x6A, 0x8F, 0x62, 0x90,
+0x01, 0xC9, 0xE5, 0x62, 0xF0, 0xB4, 0x01, 0x02, 0x51, 0xE2, 0x22, 0xE0, 0x5F, 0xF0, 0xD3, 0x10,
+0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x7F, 0x10, 0xDF, 0xFE, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xD3, 0x10,
+0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x90, 0x8A, 0xE0, 0xED, 0xF0, 0x90, 0x8A, 0xDF, 0xEF, 0xF0, 0xD3,
+0x94, 0x07, 0x50, 0x4E, 0xA3, 0xE0, 0x70, 0x1A, 0x90, 0x8A, 0xDF, 0xE0, 0xFF, 0x74, 0x01, 0xA8,
+0x07, 0x08, 0x80, 0x02, 0xC3, 0x33, 0xD8, 0xFC, 0xF4, 0xFF, 0x90, 0x00, 0x47, 0xE0, 0x5F, 0xF0,
+0x80, 0x17, 0x90, 0x8A, 0xDF, 0xE0, 0xFF, 0x74, 0x01, 0xA8, 0x07, 0x08, 0x80, 0x02, 0xC3, 0x33,
+0xD8, 0xFC, 0xFF, 0x90, 0x00, 0x47, 0xE0, 0x4F, 0xF0, 0x51, 0x0E, 0x90, 0x8A, 0xDF, 0xE0, 0xFF,
+0x74, 0x01, 0xA8, 0x07, 0x08, 0x80, 0x02, 0xC3, 0x33, 0xD8, 0xFC, 0xF4, 0xFF, 0x90, 0x00, 0x46,
+0x80, 0x59, 0x90, 0x8A, 0xDF, 0xE0, 0x24, 0xF8, 0xF0, 0xA3, 0xE0, 0x70, 0x1D, 0x90, 0x8A, 0xDF,
+0xE0, 0xFF, 0x74, 0x01, 0xA8, 0x07, 0x08, 0x80, 0x02, 0xC3, 0x33, 0xD8, 0xFC, 0xC4, 0x54, 0xF0,
+0xF4, 0xFF, 0x90, 0x00, 0x43, 0xE0, 0x5F, 0xF0, 0x80, 0x1A, 0x90, 0x8A, 0xDF, 0xE0, 0xFF, 0x74,
+0x01, 0xA8, 0x07, 0x08, 0x80, 0x02, 0xC3, 0x33, 0xD8, 0xFC, 0xC4, 0x54, 0xF0, 0xFF, 0x90, 0x00,
+0x43, 0xE0, 0x4F, 0xF0, 0x51, 0x0E, 0x90, 0x8A, 0xDF, 0xE0, 0xFF, 0x74, 0x01, 0xA8, 0x07, 0x08,
+0x80, 0x02, 0xC3, 0x33, 0xD8, 0xFC, 0xF4, 0xFF, 0x90, 0x00, 0x43, 0x51, 0x0B, 0xD0, 0xD0, 0x92,
+0xAF, 0x22, 0x90, 0x00, 0x49, 0xE0, 0x90, 0x8B, 0x54, 0xF0, 0xE0, 0x54, 0x0F, 0xF0, 0x44, 0xF0,
+0xFD, 0x7F, 0x49, 0x31, 0x88, 0x90, 0x8B, 0x54, 0xE0, 0x44, 0xB0, 0xFD, 0x7F, 0x49, 0x21, 0x88,
+0x90, 0x8A, 0xDD, 0xEE, 0xF0, 0xA3, 0xEF, 0xF0, 0x75, 0x5E, 0x01, 0x8E, 0x5F, 0xF5, 0x60, 0xE4,
+0xFD, 0x7F, 0x0B, 0x51, 0x1E, 0xE4, 0xFD, 0x7F, 0x02, 0x51, 0x1E, 0x71, 0x4E, 0xE4, 0xFF, 0x71,
+0x42, 0xE4, 0xF5, 0x62, 0x90, 0x01, 0xC9, 0xE5, 0x62, 0xF0, 0x90, 0x8A, 0xDD, 0xE0, 0xFC, 0xA3,
+0xE0, 0xFD, 0xEC, 0xFB, 0x8D, 0x44, 0xE4, 0xF5, 0x45, 0x7D, 0x01, 0x7F, 0x60, 0x7E, 0x01, 0x02,
+0x30, 0x62, 0x90, 0x01, 0xCA, 0xE5, 0x61, 0xF0, 0xEF, 0x60, 0x02, 0x51, 0xE2, 0x22, 0x7F, 0x0B,
+0x71, 0x6A, 0xEF, 0x65, 0x61, 0x60, 0x10, 0xE5, 0x61, 0xB4, 0x01, 0x05, 0xE4, 0xF5, 0x61, 0x80,
+0x03, 0x75, 0x61, 0x01, 0x7F, 0x01, 0x22, 0x7F, 0x00, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0,
+0xD0, 0x90, 0x8B, 0x57, 0xEF, 0xF0, 0xD3, 0x94, 0x07, 0x50, 0x43, 0xE0, 0xFF, 0x74, 0x01, 0xA8,
+0x07, 0x08, 0x80, 0x02, 0xC3, 0x33, 0xD8, 0xFC, 0xF4, 0xFF, 0x90, 0x00, 0x46, 0x51, 0x0B, 0x90,
+0x8B, 0x57, 0xE0, 0xFD, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x05, 0x08, 0x80, 0x05, 0xC3, 0x33, 0xCE,
+0x33, 0xCE, 0xD8, 0xF9, 0xFF, 0x90, 0x00, 0x44, 0xE0, 0xFB, 0xE4, 0xFE, 0xEF, 0x5B, 0xA8, 0x05,
+0x08, 0x80, 0x06, 0xCE, 0xA2, 0xE7, 0x13, 0xCE, 0x13, 0xD8, 0xF8, 0xFF, 0x80, 0x4B, 0x90, 0x8B,
+0x57, 0xE0, 0x24, 0xF8, 0xF0, 0xE0, 0xFF, 0x74, 0x01, 0xA8, 0x07, 0x08, 0x80, 0x02, 0xC3, 0x33,
+0xD8, 0xFC, 0xF4, 0xFF, 0x90, 0x00, 0x43, 0xE0, 0x5F, 0xF0, 0x51, 0x0E, 0x90, 0x8B, 0x57, 0xE0,
+0xFD, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x05, 0x08, 0x80, 0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8,
+0xF9, 0xFF, 0x90, 0x00, 0x42, 0xE0, 0xFB, 0xE4, 0xFE, 0xEF, 0x5B, 0xA8, 0x05, 0x08, 0x80, 0x06,
+0xCE, 0xA2, 0xE7, 0x13, 0xCE, 0x13, 0xD8, 0xF8, 0xFF, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xE4, 0x90,
+0x8B, 0x04, 0xF0, 0x90, 0x00, 0x80, 0xE0, 0x44, 0x80, 0xFD, 0x7F, 0x80, 0x21, 0x88, 0xD3, 0x10,
+0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x90, 0x8A, 0xDA, 0x12, 0x43, 0x8B, 0x90, 0x8A, 0xDA, 0x12, 0x43,
+0x6B, 0x90, 0x00, 0x01, 0x12, 0x42, 0xC2, 0xFA, 0xE5, 0xF0, 0x24, 0x00, 0xFF, 0xE4, 0x3A, 0xFE,
+0x90, 0x8A, 0xDA, 0x12, 0x43, 0x6B, 0x90, 0x00, 0x01, 0xEE, 0x8F, 0xF0, 0x12, 0x43, 0x19, 0x12,
+0x24, 0x62, 0xFF, 0x60, 0x2C, 0xB5, 0x5E, 0x16, 0x90, 0x8A, 0xDA, 0x12, 0x43, 0x6B, 0x90, 0x00,
+0x01, 0x12, 0x42, 0xC2, 0x65, 0x60, 0x70, 0x04, 0xE5, 0x5F, 0x65, 0xF0, 0x60, 0x22, 0x90, 0x8A,
+0xDA, 0x12, 0x43, 0x6B, 0x90, 0x00, 0x01, 0x12, 0x42, 0xC2, 0xFF, 0xAE, 0xF0, 0x71, 0x00, 0x80,
+0x0F, 0x90, 0x8A, 0xDA, 0x12, 0x43, 0x6B, 0x12, 0x24, 0x62, 0x65, 0x5E, 0x60, 0x02, 0x91, 0x95,
+0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xE4, 0xF5, 0x5E, 0x7F, 0x60, 0x7E, 0x01, 0x8F, 0x82, 0x8E, 0x83,
+0xA3, 0xA3, 0xA3, 0xE4, 0xF0, 0x22, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x8B, 0xEF, 0x12, 0x43, 0x94,
+0x54, 0xE7, 0x01, 0x54, 0xDE, 0x02, 0x55, 0x0B, 0x03, 0x55, 0x14, 0x05, 0x55, 0x1D, 0x06, 0x55,
+0x58, 0x07, 0x55, 0x25, 0x08, 0x55, 0x2E, 0x09, 0x55, 0x36, 0x20, 0x55, 0x3F, 0x2C, 0x54, 0xF0,
+0x2D, 0x54, 0xF9, 0x2E, 0x55, 0x02, 0x3B, 0x55, 0x48, 0x4B, 0x00, 0x00, 0x55, 0x51, 0x90, 0x8A,
+0xD7, 0x12, 0x43, 0x6B, 0x02, 0x74, 0x85, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02, 0x74, 0x8B,
+0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02, 0x74, 0xB8, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02,
+0x75, 0x00, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02, 0x75, 0x39, 0x90, 0x8A, 0xD7, 0x12, 0x43,
+0x6B, 0x02, 0x75, 0x52, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02, 0x74, 0x0F, 0x90, 0x8A, 0xD7,
+0x12, 0x43, 0x6B, 0xC1, 0xA6, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02, 0x75, 0x9A, 0x90, 0x8A,
+0xD7, 0x12, 0x43, 0x6B, 0x81, 0x1E, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02, 0x78, 0x81, 0x90,
+0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02, 0x7A, 0xC2, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02, 0x7C,
+0x2B, 0x90, 0x01, 0xC6, 0xE0, 0x44, 0x01, 0xF0, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0,
+0x90, 0x01, 0xCC, 0xE0, 0x54, 0x0F, 0x90, 0x8A, 0xCF, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0xFD, 0x70,
+0x02, 0xC1, 0xA1, 0x90, 0x8B, 0x51, 0xE0, 0xFF, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08, 0x80,
+0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8, 0xF9, 0xFF, 0xEF, 0x5D, 0x70, 0x02, 0xC1, 0x9A, 0x90,
+0x8B, 0x51, 0xE0, 0x75, 0xF0, 0x04, 0x90, 0x01, 0xD0, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xD0,
+0xF0, 0x75, 0x1D, 0x01, 0x75, 0x1E, 0x8A, 0x75, 0x1F, 0xD0, 0x75, 0x20, 0x01, 0x7B, 0x01, 0x7A,
+0x8A, 0x79, 0xD1, 0x12, 0x5E, 0xE4, 0x90, 0x8A, 0xD1, 0xE0, 0xFF, 0xC4, 0x13, 0x13, 0x13, 0x54,
+0x01, 0x90, 0x8B, 0x51, 0x30, 0xE0, 0x59, 0xE0, 0x75, 0xF0, 0x02, 0x90, 0x00, 0x88, 0x12, 0x43,
+0x5F, 0xE0, 0x90, 0x8A, 0xD2, 0xF0, 0x90, 0x8B, 0x51, 0xE0, 0x75, 0xF0, 0x02, 0x90, 0x00, 0x89,
+0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xD3, 0xF0, 0x90, 0x8B, 0x51, 0xE0, 0x75, 0xF0, 0x04, 0x90,
+0x01, 0xD1, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xD4, 0xF0, 0x90, 0x8B, 0x51, 0xE0, 0x75, 0xF0,
+0x04, 0x90, 0x01, 0xD2, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xD5, 0xF0, 0x90, 0x8B, 0x51, 0xE0,
+0x75, 0xF0, 0x04, 0x90, 0x01, 0xD3, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xD6, 0xF0, 0x80, 0x33,
+0xE0, 0x75, 0xF0, 0x04, 0x90, 0x01, 0xD1, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xD2, 0xF0, 0x90,
+0x8B, 0x51, 0xE0, 0x75, 0xF0, 0x04, 0x90, 0x01, 0xD2, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xD3,
+0xF0, 0x90, 0x8B, 0x51, 0xE0, 0x75, 0xF0, 0x04, 0x90, 0x01, 0xD3, 0x12, 0x43, 0x5F, 0xE0, 0x90,
+0x8A, 0xD4, 0xF0, 0xEF, 0x54, 0x7F, 0xFF, 0x7B, 0x01, 0x7A, 0x8A, 0x79, 0xD2, 0x91, 0xA6, 0x90,
+0x8A, 0xCF, 0xE0, 0xFF, 0x90, 0x8B, 0x51, 0xE0, 0xFE, 0x74, 0x01, 0xA8, 0x06, 0x08, 0x80, 0x02,
+0xC3, 0x33, 0xD8, 0xFC, 0xF4, 0x5F, 0x90, 0x8A, 0xCF, 0xF0, 0x90, 0x8B, 0x51, 0xE0, 0xFF, 0x74,
+0x01, 0xA8, 0x07, 0x08, 0x80, 0x02, 0xC3, 0x33, 0xD8, 0xFC, 0x90, 0x01, 0xCC, 0xF0, 0x90, 0x8B,
+0x51, 0xE0, 0x04, 0xF0, 0xE0, 0x54, 0x03, 0xF0, 0xA1, 0x6A, 0x90, 0x01, 0xC6, 0xE0, 0x44, 0x02,
+0xF0, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x90, 0x00, 0x04, 0x12, 0x42, 0x20, 0xFF, 0x54, 0x1F, 0xFE,
+0xEF, 0x54, 0x20, 0xC4, 0x13, 0x54, 0x07, 0xFD, 0xAF, 0x06, 0x90, 0x8A, 0xDA, 0xEF, 0xF0, 0xA3,
+0xED, 0xF0, 0xA3, 0x12, 0x43, 0x8B, 0x90, 0x8A, 0xDC, 0x12, 0x43, 0x6B, 0x90, 0x00, 0x03, 0x12,
+0x42, 0x20, 0x54, 0xF0, 0xC4, 0x54, 0x0F, 0x90, 0x8A, 0xDF, 0xF0, 0x90, 0x00, 0x04, 0x12, 0x42,
+0x20, 0x54, 0x40, 0xC4, 0x13, 0x13, 0x54, 0x03, 0x90, 0x8A, 0xE0, 0xF0, 0x90, 0x8A, 0xDA, 0xE0,
+0xFF, 0x75, 0xF0, 0x09, 0x90, 0x87, 0x25, 0x12, 0x43, 0x5F, 0xAD, 0x82, 0xAC, 0x83, 0x90, 0x8A,
+0xE1, 0xEC, 0xF0, 0xA3, 0xED, 0xF0, 0xEF, 0x75, 0xF0, 0x09, 0xA4, 0x24, 0x23, 0xF9, 0x74, 0x87,
+0x35, 0xF0, 0xFA, 0x7B, 0x01, 0xA3, 0x12, 0x43, 0x8B, 0x90, 0x8A, 0xDC, 0x12, 0x43, 0x6B, 0x90,
+0x00, 0x03, 0x12, 0x42, 0x20, 0x54, 0x0F, 0xFF, 0x90, 0x8A, 0xE3, 0x12, 0x43, 0x6B, 0xEF, 0x12,
+0x42, 0x4D, 0x90, 0x8A, 0xDC, 0x12, 0x43, 0x6B, 0x90, 0x00, 0x02, 0x12, 0x42, 0x20, 0xFF, 0x90,
+0x8A, 0xE3, 0x12, 0x43, 0x6B, 0x90, 0x00, 0x01, 0xEF, 0x12, 0x42, 0x5F, 0x90, 0x8A, 0xDC, 0x12,
+0x43, 0x6B, 0x90, 0x00, 0x01, 0x12, 0x42, 0x20, 0xFF, 0x90, 0x8A, 0xE1, 0xE0, 0xFC, 0xA3, 0xE0,
+0xFD, 0xF5, 0x82, 0x8C, 0x83, 0xEF, 0xF0, 0x12, 0x24, 0x62, 0x8D, 0x82, 0x8C, 0x83, 0xA3, 0xF0,
+0x90, 0x8A, 0xDF, 0xE0, 0xFE, 0x90, 0x8A, 0xDA, 0xE0, 0xFF, 0x24, 0xC1, 0xF5, 0x82, 0xE4, 0x34,
+0x86, 0xF5, 0x83, 0xEE, 0xF0, 0x90, 0x8A, 0xDB, 0xE0, 0xFE, 0x75, 0xF0, 0x09, 0xEF, 0x90, 0x87,
+0x29, 0x12, 0x43, 0x5F, 0xEE, 0xF0, 0x75, 0xF0, 0x09, 0xEF, 0x90, 0x87, 0x2A, 0x12, 0x43, 0x5F,
+0x74, 0x01, 0xF0, 0x90, 0x8A, 0xE0, 0xE0, 0xFE, 0x75, 0xF0, 0x09, 0xEF, 0x90, 0x87, 0x2B, 0x12,
+0x43, 0x5F, 0xEE, 0xF0, 0x8F, 0x0F, 0xEF, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89,
+0xAF, 0x82, 0xF5, 0x10, 0x8F, 0x11, 0xE5, 0x0F, 0x75, 0xF0, 0x02, 0xA4, 0x24, 0x81, 0xF9, 0x74,
+0x86, 0x35, 0xF0, 0x75, 0x12, 0x01, 0xF5, 0x13, 0x89, 0x14, 0x75, 0xF0, 0x09, 0xE5, 0x0F, 0x90,
+0x87, 0x25, 0x12, 0x43, 0x5F, 0xAF, 0x82, 0x85, 0x83, 0x15, 0x8F, 0x16, 0xE5, 0x0F, 0x75, 0xF0,
+0x09, 0xA4, 0x24, 0x23, 0xF9, 0x74, 0x87, 0x35, 0xF0, 0x75, 0x17, 0x01, 0xF5, 0x18, 0x89, 0x19,
+0x74, 0xC1, 0x25, 0x0F, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE0, 0x12, 0x43, 0x94, 0x58,
+0x34, 0x00, 0x58, 0x49, 0x01, 0x58, 0x5E, 0x02, 0x58, 0x73, 0x03, 0x58, 0x9C, 0x04, 0x58, 0xB1,
+0x05, 0x58, 0xC6, 0x06, 0x58, 0xEC, 0x0C, 0x59, 0x19, 0x0D, 0x59, 0x46, 0x0E, 0x59, 0x73, 0x0F,
+0x00, 0x00, 0x59, 0xA7, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5,
+0x83, 0x74, 0xF0, 0xF0, 0xA3, 0x74, 0x15, 0x80, 0x3C, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5,
+0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0x74, 0xF0, 0xF0, 0xA3, 0x74, 0x10, 0x80, 0x27, 0xE5, 0x0F,
+0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0x74, 0xF0, 0xF0, 0xA3, 0x74,
+0x05, 0x80, 0x12, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83,
+0x74, 0xF0, 0xF0, 0xA3, 0xE4, 0xF0, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0x81, 0xF5, 0x82, 0xE4, 0x34,
+0x86, 0xF5, 0x83, 0x74, 0x0F, 0xF0, 0xA3, 0x74, 0x8F, 0xF0, 0x21, 0xA7, 0xE5, 0x0F, 0x25, 0xE0,
+0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0x74, 0x0F, 0xF0, 0xA3, 0x74, 0xF5, 0x80,
+0x27, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0x74, 0x0F,
+0xF0, 0xA3, 0x74, 0xF0, 0x80, 0x12, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34,
+0x89, 0xF5, 0x83, 0xE4, 0xF0, 0xA3, 0x74, 0x0D, 0xF0, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0x81, 0xF5,
+0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE4, 0xF0, 0xA3, 0xF0, 0x21, 0xA7, 0x90, 0x04, 0x47, 0xE0,
+0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x12, 0x42, 0x4D, 0x90, 0x04, 0x46, 0xE0, 0xAB, 0x12, 0xAA,
+0x13, 0xA9, 0x14, 0x90, 0x00, 0x01, 0x12, 0x42, 0x5F, 0x90, 0x04, 0x45, 0xE0, 0x85, 0x11, 0x82,
+0x85, 0x10, 0x83, 0xF0, 0x90, 0x04, 0x44, 0x21, 0x9E, 0x90, 0x04, 0x4B, 0xE0, 0xAB, 0x12, 0xAA,
+0x13, 0xA9, 0x14, 0x12, 0x42, 0x4D, 0x90, 0x04, 0x4A, 0xE0, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14,
+0x90, 0x00, 0x01, 0x12, 0x42, 0x5F, 0x90, 0x04, 0x49, 0xE0, 0x85, 0x11, 0x82, 0x85, 0x10, 0x83,
+0xF0, 0x90, 0x04, 0x48, 0x80, 0x58, 0x90, 0x04, 0x4F, 0xE0, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14,
+0x12, 0x42, 0x4D, 0x90, 0x04, 0x4E, 0xE0, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x90, 0x00, 0x01,
+0x12, 0x42, 0x5F, 0x90, 0x04, 0x4D, 0xE0, 0x85, 0x11, 0x82, 0x85, 0x10, 0x83, 0xF0, 0x90, 0x04,
+0x4C, 0x80, 0x2B, 0x90, 0x04, 0x53, 0xE0, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x12, 0x42, 0x4D,
+0x90, 0x04, 0x52, 0xE0, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x90, 0x00, 0x01, 0x12, 0x42, 0x5F,
+0x90, 0x04, 0x51, 0xE0, 0x85, 0x11, 0x82, 0x85, 0x10, 0x83, 0xF0, 0x90, 0x04, 0x50, 0xE0, 0x85,
+0x11, 0x82, 0x85, 0x10, 0x83, 0xA3, 0xF0, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0xC0, 0x03, 0xC0,
+0x02, 0xC0, 0x01, 0x12, 0x24, 0x62, 0xFF, 0xAB, 0x17, 0xAA, 0x18, 0xA9, 0x19, 0x12, 0x24, 0x62,
+0x5F, 0xD0, 0x01, 0xD0, 0x02, 0xD0, 0x03, 0x12, 0x42, 0x4D, 0xAB, 0x12, 0xE5, 0x14, 0x24, 0x01,
+0xF9, 0xE4, 0x35, 0x13, 0xFA, 0xC0, 0x03, 0xC0, 0x02, 0xC0, 0x01, 0x12, 0x24, 0x62, 0xFF, 0xAB,
+0x17, 0xAA, 0x18, 0xA9, 0x19, 0x90, 0x00, 0x01, 0x12, 0x42, 0x20, 0x5F, 0xD0, 0x01, 0xD0, 0x02,
+0xD0, 0x03, 0x12, 0x42, 0x4D, 0x85, 0x11, 0x82, 0x85, 0x10, 0x83, 0xC0, 0x83, 0xC0, 0x82, 0xE0,
+0xFF, 0x85, 0x16, 0x82, 0x85, 0x15, 0x83, 0xE0, 0xFE, 0xEF, 0x5E, 0xD0, 0x82, 0xD0, 0x83, 0xF0,
+0x85, 0x11, 0x82, 0x85, 0x10, 0x83, 0xA3, 0xC0, 0x83, 0xC0, 0x82, 0xE0, 0xFF, 0x85, 0x16, 0x82,
+0x85, 0x15, 0x83, 0xA3, 0xE0, 0xFE, 0xEF, 0x5E, 0xD0, 0x82, 0xD0, 0x83, 0xF0, 0xE5, 0x0F, 0x25,
+0xE0, 0x24, 0x81, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE0, 0xFE, 0xA3, 0xE0, 0x4E, 0x60,
+0x4B, 0x90, 0x8A, 0xE6, 0x74, 0x0B, 0xF0, 0x90, 0x8A, 0xE6, 0xE0, 0xFF, 0xC3, 0x94, 0x00, 0x50,
+0x02, 0x41, 0xEC, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08, 0x80, 0x05, 0xC3, 0x33, 0xCE, 0x33,
+0xCE, 0xD8, 0xF9, 0xFF, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0x81, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5,
+0x83, 0xE0, 0x5E, 0xFE, 0xA3, 0xE0, 0x5F, 0x4E, 0x60, 0x0A, 0x90, 0x8A, 0xE6, 0xE0, 0x24, 0x10,
+0xA3, 0xF0, 0x80, 0x68, 0x90, 0x8A, 0xE6, 0xE0, 0x14, 0xF0, 0x80, 0xBB, 0xE5, 0x0F, 0x25, 0xE0,
+0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xFE, 0xA3, 0xE0, 0x4E, 0x60, 0x47,
+0x90, 0x8A, 0xE6, 0x74, 0x0F, 0xF0, 0x90, 0x8A, 0xE6, 0xE0, 0xFF, 0xC3, 0x94, 0x00, 0x40, 0x3C,
+0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08, 0x80, 0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8, 0xF9,
+0xFF, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0x5E,
+0xFE, 0xA3, 0xE0, 0x5F, 0x4E, 0x60, 0x08, 0x90, 0x8A, 0xE6, 0xE0, 0xA3, 0xF0, 0x80, 0x0D, 0x90,
+0x8A, 0xE6, 0xE0, 0x14, 0xF0, 0x80, 0xBF, 0xE4, 0x90, 0x8A, 0xE7, 0xF0, 0xE5, 0x0F, 0x25, 0xE0,
+0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xFE, 0xA3, 0xE0, 0x4E, 0x60, 0x46,
+0xE4, 0x90, 0x8A, 0xE6, 0xF0, 0x90, 0x8A, 0xE6, 0xE0, 0xFF, 0xC3, 0x94, 0x10, 0x40, 0x02, 0x61,
+0xA5, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08, 0x80, 0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8,
+0xF9, 0xFF, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0,
+0x5E, 0xFE, 0xA3, 0xE0, 0x5F, 0x4E, 0x60, 0x06, 0x90, 0x8A, 0xE6, 0xE0, 0x80, 0x63, 0x90, 0x8A,
+0xE6, 0xE0, 0x04, 0xF0, 0x80, 0xBF, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0x81, 0xF5, 0x82, 0xE4, 0x34,
+0x86, 0xF5, 0x83, 0xE0, 0xFE, 0xA3, 0xE0, 0x4E, 0x60, 0x46, 0xE4, 0x90, 0x8A, 0xE6, 0xF0, 0x90,
+0x8A, 0xE6, 0xE0, 0xFF, 0xC3, 0x94, 0x0C, 0x50, 0x3C, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08,
+0x80, 0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8, 0xF9, 0xFF, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0x81,
+0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE0, 0x5E, 0xFE, 0xA3, 0xE0, 0x5F, 0x4E, 0x60, 0x08,
+0x90, 0x8A, 0xE6, 0xE0, 0x24, 0x10, 0x80, 0x09, 0x90, 0x8A, 0xE6, 0xE0, 0x04, 0xF0, 0x80, 0xBF,
+0xE4, 0x90, 0x8A, 0xE8, 0xF0, 0x90, 0x8A, 0xE7, 0xE0, 0xFF, 0x75, 0xF0, 0x09, 0xE5, 0x0F, 0x90,
+0x87, 0x27, 0x12, 0x43, 0x5F, 0xEF, 0xF0, 0x90, 0x8A, 0xE8, 0xE0, 0xFE, 0x75, 0xF0, 0x09, 0xE5,
+0x0F, 0x90, 0x87, 0x28, 0x12, 0x43, 0x5F, 0xEE, 0xF0, 0xE5, 0x0F, 0xC3, 0x94, 0x20, 0x50, 0x32,
+0x74, 0x84, 0x25, 0x0F, 0xF5, 0x82, 0xE4, 0x34, 0x04, 0xF5, 0x83, 0xE0, 0xD3, 0x9F, 0x40, 0x02,
+0x80, 0x18, 0x74, 0x84, 0x25, 0x0F, 0xF5, 0x82, 0xE4, 0x34, 0x04, 0xF5, 0x83, 0xE0, 0xC3, 0x9E,
+0x50, 0x08, 0x90, 0x8A, 0xE8, 0xE0, 0xA3, 0xF0, 0x80, 0x08, 0x90, 0x8A, 0xE7, 0xE0, 0x90, 0x8A,
+0xE9, 0xF0, 0x90, 0x8A, 0xE9, 0xE0, 0xFD, 0xAF, 0x0F, 0x91, 0x4E, 0x90, 0x8A, 0xE9, 0xE0, 0xFF,
+0x74, 0x84, 0x25, 0x0F, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xEF, 0xF0, 0x90, 0x8A, 0xE7,
+0xE0, 0xFF, 0xD3, 0x94, 0x13, 0x40, 0x07, 0x90, 0x87, 0x22, 0x74, 0x03, 0xF0, 0x22, 0xEF, 0xD3,
+0x94, 0x0B, 0x40, 0x07, 0x90, 0x87, 0x22, 0x74, 0x02, 0xF0, 0x22, 0xEF, 0xD3, 0x94, 0x03, 0x40,
+0x07, 0x90, 0x87, 0x22, 0x74, 0x01, 0xF0, 0x22, 0xE4, 0x90, 0x87, 0x22, 0xF0, 0x22, 0xD3, 0x10,
+0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x74, 0x84, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x04, 0xF5, 0x83, 0xED,
+0xF0, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xAC, 0x07, 0xED, 0x54, 0x1F, 0x90, 0x8A, 0xC7, 0xF0, 0x74,
+0x01, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE0, 0x90, 0x8A, 0xC5, 0xF0, 0x90, 0x8A,
+0xC8, 0x74, 0x01, 0xF0, 0xEB, 0xC3, 0x94, 0x01, 0x40, 0x02, 0x80, 0x37, 0x90, 0x8A, 0xC5, 0xE0,
+0x25, 0x0D, 0xFF, 0xA3, 0xF0, 0xA3, 0xE0, 0x90, 0x41, 0x9E, 0x93, 0xFE, 0xEF, 0xD3, 0x9E, 0x40,
+0x10, 0x74, 0x01, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE4, 0xF0, 0xAF, 0x04, 0x80,
+0x9D, 0x90, 0x8A, 0xC6, 0xE0, 0xFF, 0x74, 0x01, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83,
+0xEF, 0xF0, 0x22, 0xAD, 0x07, 0x75, 0xF0, 0x09, 0xED, 0x90, 0x87, 0x27, 0x12, 0x43, 0x5F, 0xE0,
+0xFF, 0x90, 0x8A, 0xCA, 0xF0, 0x74, 0xA5, 0x2D, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE0,
+0x54, 0x1F, 0x90, 0x8A, 0xC9, 0xF0, 0xD3, 0x9F, 0x40, 0x06, 0xA3, 0xE0, 0x90, 0x8A, 0xC9, 0xF0,
+0x90, 0x8A, 0xC9, 0xE0, 0xFF, 0x25, 0xE0, 0x24, 0x66, 0xF5, 0x82, 0xE4, 0x34, 0x41, 0xF5, 0x83,
+0xE4, 0x93, 0xFA, 0x74, 0x01, 0x93, 0xFB, 0xEF, 0x25, 0xE0, 0x24, 0x2E, 0xF5, 0x82, 0xE4, 0x34,
+0x41, 0xF5, 0x83, 0x74, 0x01, 0x93, 0x2B, 0xFF, 0xE4, 0x93, 0x3A, 0xC3, 0x13, 0xFE, 0xEF, 0x13,
+0xFF, 0xED, 0x25, 0xE0, 0x24, 0xE1, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xEE, 0xF0, 0xA3,
+0xEF, 0xF0, 0xAF, 0x05, 0x90, 0x8A, 0xC9, 0xE0, 0xFD, 0x91, 0x4E, 0x90, 0x8A, 0xC9, 0xE0, 0xFF,
+0x22, 0xAC, 0x07, 0x74, 0x84, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0x04, 0xF5, 0x83, 0xE0, 0x54, 0x7F,
+0x90, 0x8A, 0xDE, 0xF0, 0xE0, 0x54, 0x1F, 0xFF, 0x90, 0x8A, 0xE1, 0xF0, 0x75, 0xF0, 0x09, 0xEC,
+0x90, 0x87, 0x28, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xE3, 0xF0, 0x75, 0xF0, 0x09, 0xEC, 0x90,
+0x87, 0x27, 0x12, 0x43, 0x5F, 0xE0, 0xFE, 0x90, 0x8A, 0xE4, 0xF0, 0xEC, 0x25, 0xE0, 0x24, 0xE4,
+0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xFB, 0xA3, 0xE0, 0x90, 0x8A, 0xE5, 0xCB, 0xF0,
+0xA3, 0xEB, 0xF0, 0xEC, 0x25, 0xE0, 0x24, 0x81, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE0,
+0xFB, 0xA3, 0xE0, 0x90, 0x8A, 0xE7, 0xCB, 0xF0, 0xA3, 0xEB, 0xF0, 0xEF, 0xD3, 0x9E, 0x40, 0x0C,
+0x90, 0x8A, 0xE4, 0xE0, 0x90, 0x8A, 0xE1, 0xF0, 0x90, 0x8A, 0xDE, 0xF0, 0xED, 0x70, 0x02, 0xC1,
+0x93, 0x90, 0x8A, 0xE2, 0xED, 0xF0, 0x90, 0x8A, 0xDE, 0xE0, 0x30, 0xE6, 0x0E, 0x90, 0x8A, 0xE1,
+0xE0, 0x90, 0x8A, 0xDE, 0xF0, 0x90, 0x8A, 0xE2, 0xE0, 0x14, 0xF0, 0x90, 0x8A, 0xE2, 0xE0, 0x70,
+0x02, 0xC1, 0x93, 0x90, 0x8A, 0xE1, 0xE0, 0xFF, 0xD3, 0x94, 0x00, 0x50, 0x02, 0xC1, 0x93, 0xE4,
+0x90, 0x8A, 0xE0, 0xF0, 0xEF, 0x14, 0x90, 0x8A, 0xDF, 0xF0, 0x90, 0x8A, 0xE3, 0xE0, 0xFD, 0x90,
+0x8A, 0xDF, 0xE0, 0xFF, 0xD3, 0x9D, 0x40, 0x6F, 0xEF, 0x94, 0x10, 0x40, 0x21, 0xEF, 0x24, 0xF0,
+0xFF, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08, 0x80, 0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8,
+0xF9, 0xFF, 0x90, 0x8A, 0xE7, 0xE0, 0x5E, 0xFE, 0xA3, 0xE0, 0x5F, 0x4E, 0x70, 0x27, 0x90, 0x8A,
+0xDF, 0xE0, 0xFF, 0xC3, 0x94, 0x10, 0x50, 0x37, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08, 0x80,
+0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8, 0xF9, 0xFF, 0x90, 0x8A, 0xE5, 0xE0, 0x5E, 0xFE, 0xA3,
+0xE0, 0x5F, 0x4E, 0x60, 0x1A, 0x90, 0x8A, 0xDF, 0xE0, 0x90, 0x8A, 0xDE, 0xF0, 0x90, 0x8A, 0xE0,
+0xE0, 0x04, 0xF0, 0x90, 0x8A, 0xE2, 0xE0, 0xFF, 0x90, 0x8A, 0xE0, 0xE0, 0x6F, 0x60, 0x08, 0x90,
+0x8A, 0xDF, 0xE0, 0x14, 0xF0, 0x80, 0x83, 0x90, 0x8A, 0xE2, 0xE0, 0xFF, 0x90, 0x8A, 0xE0, 0xE0,
+0xC3, 0x9F, 0x50, 0x0F, 0x90, 0x8A, 0xDF, 0xE0, 0xB5, 0x05, 0x08, 0x90, 0x8A, 0xE3, 0xE0, 0x90,
+0x8A, 0xDE, 0xF0, 0x90, 0x8A, 0xDE, 0xE0, 0xFF, 0x25, 0xE0, 0x24, 0x66, 0xF5, 0x82, 0xE4, 0x34,
+0x41, 0xF5, 0x83, 0xE4, 0x93, 0xFA, 0x74, 0x01, 0x93, 0xFB, 0xEF, 0x25, 0xE0, 0x24, 0x2E, 0xF5,
+0x82, 0xE4, 0x34, 0x41, 0xF5, 0x83, 0x74, 0x01, 0x93, 0x2B, 0xFF, 0xE4, 0x93, 0x3A, 0xC3, 0x13,
+0xFE, 0xEF, 0x13, 0xFF, 0xEC, 0x25, 0xE0, 0x24, 0xE1, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83,
+0xEE, 0xF0, 0xA3, 0xEF, 0xF0, 0xAF, 0x04, 0x90, 0x8A, 0xDE, 0xE0, 0xFD, 0x91, 0x4E, 0x90, 0x8A,
+0xDE, 0xE0, 0xFF, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x8B, 0x1A, 0x8A, 0x1B, 0x89,
+0x1C, 0x90, 0x8B, 0x3F, 0x12, 0x43, 0x8B, 0xAB, 0x1D, 0xAA, 0x1E, 0xA9, 0x1F, 0x90, 0x8B, 0x42,
+0x12, 0x43, 0x8B, 0xAF, 0x20, 0x15, 0x20, 0xEF, 0x60, 0x1E, 0x90, 0x8B, 0x42, 0xE4, 0x75, 0xF0,
+0x01, 0x12, 0x43, 0x74, 0x12, 0x24, 0x62, 0xFF, 0x90, 0x8B, 0x3F, 0xE4, 0x75, 0xF0, 0x01, 0x12,
+0x43, 0x74, 0xEF, 0x12, 0x42, 0x4D, 0x80, 0xDB, 0xAB, 0x1A, 0xAA, 0x1B, 0xA9, 0x1C, 0xD0, 0xD0,
+0x92, 0xAF, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x90, 0x8B, 0x45, 0x12, 0x43, 0x8B,
+0x90, 0x8B, 0x53, 0xE0, 0xFF, 0x04, 0xF0, 0x90, 0x00, 0x01, 0xEF, 0x12, 0x42, 0x5F, 0x7F, 0xAF,
+0x7E, 0x01, 0x12, 0x74, 0x3B, 0xEF, 0x60, 0x47, 0x90, 0x8B, 0x45, 0x12, 0x43, 0x6B, 0x8B, 0x1D,
+0x8A, 0x1E, 0x89, 0x1F, 0x75, 0x20, 0x02, 0x7B, 0x01, 0x7A, 0x01, 0x79, 0xA0, 0xD1, 0xE4, 0x90,
+0x8B, 0x48, 0x12, 0x43, 0x6B, 0x8B, 0x1D, 0x8A, 0x1E, 0x89, 0x1F, 0x90, 0x8B, 0x45, 0x12, 0x43,
+0x6B, 0x12, 0x24, 0x62, 0xFF, 0xC4, 0x54, 0x0F, 0xF5, 0x20, 0x7B, 0x01, 0x7A, 0x01, 0x79, 0xA2,
+0xD1, 0xE4, 0x90, 0x01, 0xAF, 0x74, 0xFF, 0xF0, 0x90, 0x01, 0xCB, 0xE0, 0x64, 0x80, 0xF0, 0xD0,
+0xD0, 0x92, 0xAF, 0x22, 0x90, 0x8A, 0xC5, 0xE0, 0x54, 0xF0, 0x44, 0x03, 0xF0, 0x54, 0x0F, 0x44,
+0x80, 0xF0, 0x7B, 0x00, 0x7A, 0x00, 0x79, 0x56, 0x90, 0x8B, 0x48, 0x12, 0x43, 0x8B, 0x0B, 0x7A,
+0x8A, 0x79, 0xC5, 0xE1, 0x33, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x90, 0x01, 0xC4, 0x74,
+0xC5, 0xF0, 0x74, 0x5F, 0xA3, 0xF0, 0x90, 0x04, 0x1D, 0xE0, 0x60, 0x1A, 0x90, 0x05, 0x22, 0xE0,
+0x54, 0x90, 0x60, 0x07, 0x90, 0x01, 0xC6, 0xE0, 0x44, 0x40, 0xF0, 0x90, 0x01, 0xC7, 0xE0, 0x30,
+0xE1, 0xE4, 0x7F, 0x00, 0x80, 0x02, 0x7F, 0x01, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xD3, 0x10, 0xAF,
+0x01, 0xC3, 0xC0, 0xD0, 0xE4, 0xFB, 0xFA, 0xEF, 0x30, 0xE0, 0x02, 0x7B, 0x80, 0xEF, 0xC3, 0x13,
+0x90, 0xFD, 0x10, 0xF0, 0x90, 0x04, 0x25, 0xEF, 0xF0, 0xED, 0x60, 0x1E, 0xAF, 0x03, 0x74, 0x0F,
+0x2F, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x44, 0x80, 0xF0, 0x74, 0x10, 0x2F, 0xF5,
+0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x44, 0x80, 0xF0, 0xAF, 0x03, 0x74, 0x08, 0x2F, 0xF5,
+0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE4, 0xF0, 0x74, 0x09, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0xFC,
+0xF5, 0x83, 0xE0, 0x54, 0xF0, 0xF0, 0x74, 0x21, 0x2B, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83,
+0xE0, 0x54, 0xF7, 0xF0, 0xAE, 0x02, 0xAF, 0x03, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x12, 0x5F, 0xC5,
+0xBF, 0x01, 0x10, 0x90, 0x02, 0x09, 0xE0, 0xFF, 0x7D, 0x01, 0x12, 0x5F, 0xFD, 0x90, 0x04, 0x1F,
+0x74, 0x20, 0xF0, 0x22, 0x90, 0x01, 0x02, 0xE0, 0x54, 0x03, 0xFF, 0xE0, 0x54, 0x0C, 0x13, 0x13,
+0x54, 0x3F, 0xFE, 0xEF, 0x64, 0x01, 0x60, 0x04, 0xEF, 0xB4, 0x03, 0x0E, 0x90, 0x8A, 0xC5, 0x74,
+0x01, 0xF0, 0xA3, 0x74, 0x37, 0xF0, 0x79, 0x01, 0x80, 0x18, 0xEE, 0x64, 0x01, 0x60, 0x07, 0xAF,
+0x06, 0xEE, 0x64, 0x03, 0x70, 0x3B, 0x90, 0x8A, 0xC5, 0x74, 0x01, 0xF0, 0xA3, 0x74, 0x3D, 0xF0,
+0x79, 0x40, 0x90, 0x8A, 0xC5, 0xE0, 0xFE, 0xA3, 0xE0, 0xFF, 0xF5, 0x82, 0x8E, 0x83, 0xE0, 0x59,
+0x60, 0x08, 0xE9, 0xF0, 0xE4, 0x90, 0x8A, 0xF6, 0xF0, 0x22, 0x90, 0x8A, 0xF6, 0xE0, 0x04, 0xF0,
+0xE0, 0xC3, 0x94, 0x0A, 0x40, 0x0B, 0xE4, 0xF0, 0x90, 0x04, 0x19, 0xE0, 0x30, 0xE0, 0x02, 0x11,
+0x6D, 0x22, 0xC0, 0xE0, 0xC0, 0xF0, 0xC0, 0x83, 0xC0, 0x82, 0xC0, 0xD0, 0x75, 0xD0, 0x00, 0xC0,
+0x00, 0xC0, 0x01, 0xC0, 0x02, 0xC0, 0x03, 0xC0, 0x04, 0xC0, 0x05, 0xC0, 0x06, 0xC0, 0x07, 0x90,
+0x01, 0xC4, 0x74, 0xF2, 0xF0, 0x74, 0x60, 0xA3, 0xF0, 0x90, 0x01, 0x34, 0xE0, 0x55, 0x28, 0xF5,
+0x2C, 0xA3, 0xE0, 0x55, 0x29, 0xF5, 0x2D, 0xA3, 0xE0, 0x55, 0x2A, 0xF5, 0x2E, 0xA3, 0xE0, 0x55,
+0x2B, 0xF5, 0x2F, 0xE5, 0x2C, 0x20, 0xE0, 0x02, 0x41, 0x89, 0x90, 0x01, 0x34, 0x74, 0x01, 0xF0,
+0x85, 0xD1, 0x4D, 0x85, 0xD2, 0x4E, 0x85, 0xD3, 0x4F, 0x85, 0xD4, 0x50, 0x85, 0xD5, 0x51, 0x85,
+0xD6, 0x52, 0x85, 0xD7, 0x53, 0x85, 0xD9, 0x54, 0xE5, 0x54, 0x54, 0x40, 0xC3, 0x13, 0xFF, 0xE5,
+0x53, 0x54, 0x20, 0x6F, 0x70, 0x02, 0x41, 0x46, 0xE5, 0x54, 0x30, 0xE5, 0x02, 0x41, 0x46, 0xE5,
+0x52, 0x54, 0x1F, 0xF5, 0x08, 0xE5, 0x4D, 0x54, 0x3F, 0xF5, 0x09, 0xE5, 0x51, 0x54, 0x1F, 0xFF,
+0xE5, 0x08, 0x25, 0xE0, 0x24, 0xE3, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83, 0xE4, 0x8F, 0xF0,
+0x12, 0x42, 0x81, 0xE5, 0x53, 0x54, 0x1F, 0xFF, 0xE5, 0x08, 0x25, 0xE0, 0x24, 0xC0, 0xF5, 0x82,
+0xE4, 0x34, 0x85, 0xF5, 0x83, 0xE4, 0x8F, 0xF0, 0x12, 0x42, 0x81, 0xE5, 0x09, 0xD3, 0x94, 0x04,
+0x40, 0x03, 0x75, 0x09, 0x04, 0x75, 0xF0, 0x0A, 0xE5, 0x08, 0x90, 0x84, 0x00, 0x12, 0x43, 0x5F,
+0x75, 0xF0, 0x02, 0xE5, 0x09, 0x12, 0x43, 0x5F, 0xE0, 0xFE, 0xA3, 0xE0, 0xFF, 0xE5, 0x53, 0x54,
+0x1F, 0x2F, 0xFF, 0xE4, 0x3E, 0xFE, 0x75, 0xF0, 0x0A, 0xE5, 0x08, 0x90, 0x84, 0x00, 0x12, 0x43,
+0x5F, 0x75, 0xF0, 0x02, 0xE5, 0x09, 0x12, 0x43, 0x5F, 0xEE, 0xF0, 0xA3, 0xEF, 0xF0, 0xE5, 0x54,
+0x20, 0xE6, 0x24, 0xE5, 0x53, 0x54, 0x1F, 0xFF, 0xE5, 0x08, 0x25, 0xE0, 0x24, 0x63, 0xF5, 0x82,
+0xE4, 0x34, 0x88, 0xF5, 0x83, 0xE4, 0x8F, 0xF0, 0x12, 0x42, 0x81, 0xE5, 0x4F, 0x30, 0xE7, 0x36,
+0xAF, 0x08, 0x12, 0x5C, 0xC3, 0x80, 0x2F, 0xE5, 0x53, 0x54, 0x1F, 0xFF, 0xE5, 0x08, 0x25, 0xE0,
+0x24, 0xA3, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83, 0xE4, 0x8F, 0xF0, 0x12, 0x42, 0x81, 0xE5,
+0x4F, 0x30, 0xE7, 0x12, 0xE5, 0x4F, 0x54, 0x7F, 0xFD, 0xE5, 0x53, 0x54, 0x1F, 0xF5, 0x0D, 0xAB,
+0x09, 0xAF, 0x08, 0x12, 0x5C, 0x66, 0xE5, 0x24, 0x14, 0x24, 0xFD, 0x50, 0x02, 0x80, 0x3A, 0x90,
+0x8B, 0x1A, 0xE0, 0x60, 0x2B, 0x90, 0x01, 0x5B, 0xE4, 0xF0, 0x90, 0x01, 0x3C, 0x74, 0x04, 0xF0,
+0x12, 0x4B, 0x34, 0xEF, 0x64, 0x01, 0x70, 0x21, 0x90, 0x8B, 0x3D, 0x12, 0x4B, 0x5C, 0x90, 0x01,
+0x5B, 0x74, 0x05, 0xF0, 0x90, 0x06, 0x92, 0x74, 0x01, 0xF0, 0x90, 0x8B, 0x18, 0xF0, 0x80, 0x09,
+0x12, 0x4B, 0x34, 0xBF, 0x01, 0x03, 0x12, 0x4A, 0xFC, 0xE5, 0x2C, 0x30, 0xE1, 0x21, 0x90, 0x01,
+0x34, 0x74, 0x02, 0xF0, 0x85, 0xD1, 0x56, 0x85, 0xD2, 0x57, 0x85, 0xD3, 0x58, 0x85, 0xD4, 0x59,
+0x85, 0xD5, 0x5A, 0x85, 0xD6, 0x5B, 0x85, 0xD7, 0x5C, 0x85, 0xD9, 0x5D, 0x12, 0x5F, 0xA4, 0xE5,
+0x2C, 0x30, 0xE3, 0x06, 0x90, 0x01, 0x34, 0x74, 0x08, 0xF0, 0xE5, 0x2C, 0x30, 0xE4, 0x09, 0x90,
+0x01, 0x34, 0x74, 0x10, 0xF0, 0x43, 0x55, 0x10, 0xE5, 0x2C, 0x30, 0xE5, 0x26, 0x90, 0x01, 0xCF,
+0xE0, 0x30, 0xE5, 0x1F, 0xE0, 0x54, 0xDF, 0xF0, 0x90, 0x01, 0x34, 0x74, 0x20, 0xF0, 0x75, 0xA8,
+0x00, 0x75, 0xE8, 0x00, 0x12, 0x51, 0x9D, 0x90, 0x00, 0x03, 0xE0, 0x54, 0xFB, 0xF0, 0x12, 0x52,
+0x0E, 0x80, 0xFE, 0xE5, 0x2C, 0x30, 0xE6, 0x2D, 0x90, 0x01, 0x34, 0x74, 0x40, 0xF0, 0x90, 0x8B,
+0x32, 0xE0, 0x30, 0xE0, 0x0C, 0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x05, 0x90, 0x8B, 0x34, 0xE4,
+0xF0, 0x90, 0x8B, 0x2C, 0xE0, 0xFF, 0x30, 0xE0, 0x0C, 0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x05,
+0x90, 0x8B, 0x2E, 0xE4, 0xF0, 0xE5, 0x2E, 0x20, 0xE0, 0x02, 0x61, 0xE6, 0x90, 0x8B, 0x08, 0x74,
+0x01, 0xF0, 0x90, 0x01, 0x36, 0xF0, 0x90, 0x8B, 0x06, 0xE0, 0x60, 0x0F, 0xE4, 0xF0, 0x90, 0x05,
+0x53, 0xE0, 0x44, 0x02, 0xF0, 0x90, 0x05, 0xFC, 0xE0, 0x04, 0xF0, 0x90, 0x8B, 0x32, 0xE0, 0x30,
+0xE0, 0x2F, 0x90, 0x8B, 0x37, 0x74, 0x01, 0xF0, 0x90, 0x8B, 0x32, 0xE0, 0xFF, 0x13, 0x13, 0x54,
+0x3F, 0x30, 0xE0, 0x1D, 0x90, 0x8B, 0x34, 0x74, 0x01, 0xF0, 0xB1, 0x39, 0x90, 0x8B, 0x33, 0xE0,
+0x64, 0x03, 0x60, 0x0D, 0x7F, 0x01, 0x12, 0x4D, 0xE0, 0xEF, 0x60, 0x05, 0x7F, 0x04, 0x12, 0x4E,
+0x89, 0x90, 0x8B, 0x2C, 0xE0, 0xFF, 0x30, 0xE0, 0x55, 0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x4E,
+0x90, 0x8B, 0x2E, 0x74, 0x01, 0xF0, 0xB1, 0x39, 0xE4, 0xFF, 0x12, 0x4D, 0xE0, 0xEF, 0x60, 0x3E,
+0xB1, 0x5F, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x90, 0x8B, 0x2D, 0xE0, 0xFF, 0x64, 0x06, 0x60,
+0x2D, 0xEF, 0xB4, 0x04, 0x02, 0x80, 0x07, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x05, 0x04, 0xE4, 0xFF,
+0x80, 0x14, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x03, 0x04, 0x7F, 0x01, 0x80, 0x09, 0x90, 0x8B, 0x2D,
+0xE0, 0xB4, 0x02, 0x04, 0x7F, 0x01, 0xB1, 0x82, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x12, 0x43,
+0xE7, 0x90, 0x8B, 0x08, 0xE4, 0xF0, 0xE5, 0x2E, 0x30, 0xE1, 0x2F, 0x90, 0x01, 0x36, 0x74, 0x02,
+0xF0, 0x43, 0x55, 0x40, 0x11, 0x84, 0x90, 0x8B, 0x37, 0xE0, 0xB4, 0x01, 0x09, 0x90, 0x05, 0x22,
+0xE4, 0xF0, 0x90, 0x8B, 0x37, 0xF0, 0x90, 0x8B, 0x2C, 0xE0, 0x30, 0xE0, 0x0D, 0xE4, 0xFF, 0x12,
+0x4D, 0xE0, 0xEF, 0x60, 0x05, 0x90, 0x05, 0x22, 0xE4, 0xF0, 0xE5, 0x2E, 0x30, 0xE2, 0x16, 0x90,
+0x01, 0x36, 0x74, 0x04, 0xF0, 0x90, 0x8B, 0x2C, 0xE0, 0x30, 0xE0, 0x06, 0xA3, 0xE0, 0x64, 0x06,
+0x60, 0x03, 0x12, 0x46, 0xB3, 0xE5, 0x2E, 0x30, 0xE3, 0x38, 0x90, 0x01, 0x36, 0x74, 0x08, 0xF0,
+0xE5, 0x21, 0x64, 0x01, 0x70, 0x2C, 0xE5, 0x24, 0x60, 0x28, 0x90, 0x01, 0x57, 0xE4, 0xF0, 0x90,
+0x01, 0x3C, 0x74, 0x02, 0xF0, 0x90, 0x8B, 0x3D, 0xE4, 0xF0, 0x90, 0x8B, 0x11, 0xE0, 0x90, 0x8B,
+0x3E, 0xF0, 0xE4, 0xFB, 0xFD, 0x7F, 0x54, 0x7E, 0x01, 0x12, 0x4B, 0x6C, 0x90, 0x01, 0x57, 0x74,
+0x05, 0xF0, 0xE5, 0x2E, 0x30, 0xE4, 0x2B, 0x90, 0x01, 0x36, 0x74, 0x10, 0xF0, 0xE5, 0x21, 0xB4,
+0x01, 0x20, 0xE5, 0x24, 0x60, 0x1C, 0x90, 0x01, 0x57, 0xE4, 0xF0, 0x90, 0x01, 0x3C, 0x74, 0x02,
+0xF0, 0x90, 0x8B, 0x1B, 0xE4, 0xF0, 0x53, 0x25, 0xFD, 0xE5, 0x25, 0x54, 0x07, 0x70, 0x03, 0x12,
+0x4A, 0xFC, 0xE5, 0x2E, 0x30, 0xE5, 0x1F, 0x90, 0x01, 0x36, 0x74, 0x20, 0xF0, 0xE5, 0x21, 0xB4,
+0x01, 0x14, 0xE5, 0x24, 0x60, 0x10, 0x90, 0x8B, 0x1A, 0xE0, 0x64, 0x02, 0x60, 0x05, 0x12, 0x4A,
+0x97, 0x80, 0x03, 0x12, 0x49, 0x49, 0xE5, 0x2E, 0x30, 0xE6, 0x1B, 0x90, 0x01, 0x36, 0x74, 0x40,
+0xF0, 0xE5, 0x21, 0xB4, 0x01, 0x10, 0xE5, 0x24, 0x60, 0x0C, 0x53, 0x25, 0xFE, 0xE5, 0x25, 0x54,
+0x07, 0x70, 0x03, 0x12, 0x4A, 0xFC, 0xE5, 0x2F, 0x30, 0xE1, 0x28, 0x90, 0x01, 0x37, 0x74, 0x02,
+0xF0, 0x90, 0x8B, 0x2C, 0xE0, 0x30, 0xE0, 0x18, 0xE4, 0xFF, 0x12, 0x4D, 0xE0, 0xEF, 0x60, 0x08,
+0x12, 0x48, 0xFE, 0x12, 0x7D, 0xC1, 0x80, 0x0B, 0x90, 0x8B, 0x31, 0x74, 0x01, 0xF0, 0x80, 0x03,
+0x12, 0x48, 0xFE, 0x74, 0xF2, 0x04, 0x90, 0x01, 0xC4, 0xF0, 0x74, 0x60, 0xA3, 0xF0, 0xD0, 0x07,
+0xD0, 0x06, 0xD0, 0x05, 0xD0, 0x04, 0xD0, 0x03, 0xD0, 0x02, 0xD0, 0x01, 0xD0, 0x00, 0xD0, 0xD0,
+0xD0, 0x82, 0xD0, 0x83, 0xD0, 0xF0, 0xD0, 0xE0, 0x32, 0xE4, 0x90, 0x8B, 0x3D, 0xF0, 0x90, 0x05,
+0x58, 0xE0, 0xFF, 0x90, 0x8B, 0x38, 0xE0, 0x2F, 0x24, 0xFE, 0x90, 0x8B, 0x3E, 0xF0, 0xE4, 0xFB,
+0xFD, 0x7F, 0x50, 0x7E, 0x01, 0x12, 0x4B, 0x6C, 0x90, 0x01, 0x53, 0x74, 0x05, 0xF0, 0x22, 0x90,
+0x8B, 0x2C, 0xE0, 0xFF, 0xC4, 0x13, 0x13, 0x54, 0x03, 0x30, 0xE0, 0x0A, 0xA3, 0xE0, 0x64, 0x06,
+0x60, 0x04, 0x7F, 0x06, 0xB1, 0x82, 0x90, 0x8B, 0x2D, 0xE0, 0x64, 0x06, 0x60, 0x03, 0x12, 0x78,
+0x35, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x90, 0x8B, 0x2D, 0xE0, 0xFE, 0x6F, 0x70,
+0x02, 0xE1, 0x4E, 0xEF, 0x12, 0x43, 0x94, 0x65, 0xB0, 0x00, 0x65, 0xEA, 0x01, 0x66, 0x30, 0x02,
+0x66, 0x6A, 0x03, 0x66, 0xA2, 0x04, 0x66, 0xDB, 0x05, 0x67, 0x16, 0x06, 0x00, 0x00, 0x67, 0x4E,
+0xEE, 0xB4, 0x04, 0x06, 0x7F, 0x01, 0xF1, 0x81, 0xE1, 0x4E, 0x90, 0x8B, 0x2D, 0xE0, 0xFF, 0xB4,
+0x05, 0x04, 0xF1, 0x5D, 0xE1, 0x4E, 0xEF, 0xB4, 0x06, 0x06, 0x7F, 0x01, 0xF1, 0x72, 0x80, 0x16,
+0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x03, 0x06, 0x7F, 0x01, 0xF1, 0x53, 0x80, 0x09, 0x90, 0x8B, 0x2D,
+0xE0, 0xB4, 0x02, 0x02, 0xF1, 0x67, 0xF1, 0xA4, 0xE1, 0x4E, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x04,
+0x06, 0x7F, 0x01, 0xF1, 0x81, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x05, 0x02, 0xF1, 0x5D,
+0x90, 0x8B, 0x2D, 0xE0, 0x70, 0x04, 0xF1, 0x9A, 0xE1, 0x4E, 0x90, 0x8B, 0x2D, 0xE0, 0xFE, 0xB4,
+0x06, 0x06, 0x7F, 0x01, 0xF1, 0x72, 0xE1, 0x4E, 0xEE, 0xB4, 0x03, 0x06, 0x7F, 0x01, 0xF1, 0x53,
+0xE1, 0x4E, 0x90, 0x8B, 0x2D, 0xE0, 0x64, 0x02, 0x60, 0x02, 0xE1, 0x4E, 0xF1, 0x67, 0xE1, 0x4E,
+0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x04, 0x06, 0x7F, 0x01, 0xF1, 0x81, 0x80, 0x09, 0x90, 0x8B, 0x2D,
+0xE0, 0xB4, 0x05, 0x02, 0xF1, 0x5D, 0x90, 0x8B, 0x2D, 0xE0, 0x70, 0x04, 0xF1, 0x9A, 0x80, 0x16,
+0x90, 0x8B, 0x2D, 0xE0, 0xFE, 0xB4, 0x06, 0x06, 0x7F, 0x01, 0xF1, 0x72, 0x80, 0x08, 0xEE, 0xB4,
+0x03, 0x04, 0x7F, 0x01, 0xF1, 0x53, 0xF1, 0xD0, 0xE1, 0x4E, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x04,
+0x06, 0x7F, 0x01, 0xF1, 0x81, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x05, 0x02, 0xF1, 0x5D,
+0x90, 0x8B, 0x2D, 0xE0, 0x70, 0x04, 0xF1, 0x9A, 0x80, 0x14, 0x90, 0x8B, 0x2D, 0xE0, 0xFE, 0xB4,
+0x06, 0x06, 0xE4, 0xFF, 0xF1, 0x72, 0x80, 0x06, 0xEE, 0xB4, 0x02, 0x02, 0xF1, 0x67, 0xF1, 0xB9,
+0xE1, 0x4E, 0x90, 0x8B, 0x2D, 0xE0, 0xFE, 0xB4, 0x06, 0x06, 0xE4, 0xFF, 0xF1, 0x72, 0x80, 0x13,
+0xEE, 0xB4, 0x03, 0x06, 0x7F, 0x01, 0xF1, 0x53, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x02,
+0x02, 0xF1, 0x67, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x01, 0x04, 0xF1, 0xA4, 0x80, 0x09, 0x90, 0x8B,
+0x2D, 0xE0, 0xB4, 0x05, 0x02, 0xF1, 0x5D, 0xF1, 0xAF, 0x80, 0x73, 0x90, 0x8B, 0x2D, 0xE0, 0xFE,
+0xB4, 0x06, 0x06, 0xE4, 0xFF, 0xF1, 0x72, 0x80, 0x13, 0xEE, 0xB4, 0x03, 0x06, 0x7F, 0x01, 0xF1,
+0x53, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x02, 0x02, 0xF1, 0x67, 0x90, 0x8B, 0x2D, 0xE0,
+0xB4, 0x01, 0x04, 0xF1, 0xA4, 0x80, 0x0B, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x04, 0x04, 0x7F, 0x01,
+0xF1, 0x81, 0xF1, 0xC3, 0x80, 0x38, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x04, 0x06, 0x7F, 0x01, 0xF1,
+0x81, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x05, 0x02, 0xF1, 0x5D, 0x90, 0x8B, 0x2D, 0xE0,
+0x70, 0x04, 0xF1, 0x9A, 0x80, 0x16, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x03, 0x06, 0xE4, 0xFF, 0xF1,
+0x53, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x02, 0x02, 0xF1, 0x67, 0xF1, 0xDD, 0xD0, 0xD0,
+0x92, 0xAF, 0x22, 0x12, 0x4A, 0xB2, 0x90, 0x8B, 0x2D, 0x74, 0x01, 0xF0, 0x22, 0x90, 0x05, 0x22,
+0xE4, 0xF0, 0x90, 0x8B, 0x2D, 0xF0, 0x22, 0x90, 0x05, 0x22, 0xE4, 0xF0, 0x90, 0x8B, 0x2D, 0x04,
+0xF0, 0x22, 0xEF, 0x60, 0x05, 0x90, 0x05, 0x22, 0xE4, 0xF0, 0x90, 0x8B, 0x2D, 0x74, 0x01, 0xF0,
+0x22, 0x90, 0x8B, 0x56, 0xEF, 0xF0, 0x12, 0x7D, 0x42, 0x90, 0x8B, 0x56, 0xE0, 0x60, 0x05, 0x90,
+0x05, 0x22, 0xE4, 0xF0, 0xE4, 0x90, 0x8B, 0x2D, 0xF0, 0x22, 0x12, 0x4A, 0xCC, 0x90, 0x8B, 0x2D,
+0x74, 0x01, 0xF0, 0x22, 0x7F, 0x01, 0x12, 0x4A, 0x7C, 0xE4, 0x90, 0x8B, 0x2D, 0xF0, 0x22, 0x12,
+0x7C, 0x4A, 0x90, 0x8B, 0x2D, 0x74, 0x04, 0xF0, 0x22, 0x12, 0x4A, 0x32, 0x90, 0x8B, 0x2D, 0x74,
+0x03, 0xF0, 0x22, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x90, 0x8B, 0x2D, 0x74, 0x05, 0xF0, 0x22,
+0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x90, 0x8B, 0x2D, 0x74, 0x02, 0xF0, 0x22, 0x90, 0x05, 0x22,
+0x74, 0x6F, 0xF0, 0x90, 0x8B, 0x2D, 0x74, 0x06, 0xF0, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0,
+0xD0, 0xE4, 0xFD, 0xFC, 0xEF, 0x30, 0xE0, 0x02, 0x7D, 0x80, 0xEF, 0xC3, 0x13, 0x90, 0xFD, 0x10,
+0xF0, 0xAE, 0x04, 0xAF, 0x05, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x75, 0x28, 0x33, 0xE4, 0xF5, 0x29,
+0x75, 0x2A, 0x07, 0xF5, 0x2B, 0x90, 0x01, 0x30, 0xE5, 0x28, 0xF0, 0xA3, 0xE5, 0x29, 0xF0, 0xA3,
+0xE5, 0x2A, 0xF0, 0xA3, 0xE5, 0x2B, 0xF0, 0x22, 0x75, 0x30, 0x1F, 0x75, 0x31, 0x01, 0x43, 0x31,
+0x10, 0xE4, 0xF5, 0x32, 0x90, 0x01, 0x38, 0xE5, 0x30, 0xF0, 0xA3, 0xE5, 0x31, 0xF0, 0xA3, 0xE5,
+0x32, 0xF0, 0x22, 0x22, 0x90, 0x00, 0x02, 0xE0, 0x54, 0xE0, 0x7F, 0x01, 0x60, 0x02, 0x7F, 0x00,
+0x22, 0x90, 0x00, 0xF3, 0xE0, 0x7F, 0x00, 0x30, 0xE3, 0x02, 0x7F, 0x01, 0x22, 0x90, 0x8B, 0x09,
+0xE0, 0xB4, 0x01, 0x0C, 0x90, 0x00, 0xF2, 0xE0, 0x30, 0xE7, 0x05, 0x7E, 0xFD, 0x7F, 0x33, 0x22,
+0x7E, 0xFD, 0x7F, 0x2F, 0x22, 0x90, 0x00, 0xF3, 0xE0, 0x30, 0xE2, 0x0D, 0x90, 0x05, 0x41, 0x74,
+0x10, 0xF0, 0x90, 0x05, 0x5A, 0xF0, 0xA3, 0xE4, 0xF0, 0x22, 0x90, 0x01, 0x64, 0x74, 0xA0, 0xF0,
+0x22, 0xC0, 0xE0, 0xC0, 0x83, 0xC0, 0x82, 0xC0, 0xD0, 0x75, 0xD0, 0x00, 0xC0, 0x05, 0xC0, 0x06,
+0xC0, 0x07, 0x7D, 0x91, 0x90, 0x01, 0xC4, 0xED, 0xF0, 0x74, 0x68, 0xFF, 0xA3, 0xF0, 0x53, 0x91,
+0xEF, 0x90, 0x00, 0x51, 0xE0, 0xFE, 0x90, 0x00, 0x55, 0xE0, 0x5E, 0xF5, 0x3D, 0x90, 0x00, 0x52,
+0xE0, 0xFE, 0x90, 0x00, 0x56, 0xE0, 0x5E, 0xF5, 0x3E, 0xE5, 0x3D, 0x30, 0xE4, 0x06, 0x90, 0x00,
+0x55, 0x74, 0x10, 0xF0, 0xE5, 0x3D, 0x30, 0xE5, 0x06, 0x90, 0x00, 0x55, 0x74, 0x20, 0xF0, 0xE5,
+0x3D, 0x30, 0xE6, 0x06, 0x90, 0x00, 0x55, 0x74, 0x40, 0xF0, 0xE5, 0x3D, 0x30, 0xE7, 0x06, 0x90,
+0x00, 0x55, 0x74, 0x80, 0xF0, 0xE5, 0x3E, 0x30, 0xE0, 0x06, 0x90, 0x00, 0x56, 0x74, 0x01, 0xF0,
+0xE5, 0x3E, 0x30, 0xE1, 0x06, 0x90, 0x00, 0x56, 0x74, 0x02, 0xF0, 0xE5, 0x3E, 0x30, 0xE2, 0x06,
+0x90, 0x00, 0x56, 0x74, 0x04, 0xF0, 0xE5, 0x3E, 0x30, 0xE3, 0x06, 0x90, 0x00, 0x56, 0x74, 0x08,
+0xF0, 0x90, 0x01, 0xC4, 0xED, 0xF0, 0xA3, 0xEF, 0xF0, 0xD0, 0x07, 0xD0, 0x06, 0xD0, 0x05, 0xD0,
+0xD0, 0xD0, 0x82, 0xD0, 0x83, 0xD0, 0xE0, 0x32, 0xEF, 0xC3, 0x94, 0x20, 0x50, 0x39, 0xEF, 0x30,
+0xE0, 0x17, 0xED, 0xC4, 0x54, 0xF0, 0xFD, 0xEF, 0xC3, 0x13, 0xFE, 0x24, 0xA4, 0xF5, 0x82, 0xE4,
+0x34, 0x04, 0xF5, 0x83, 0xE0, 0x54, 0x0F, 0x80, 0x10, 0xEF, 0xC3, 0x13, 0xFE, 0x24, 0xA4, 0xF5,
+0x82, 0xE4, 0x34, 0x04, 0xF5, 0x83, 0xE0, 0x54, 0xF0, 0xF0, 0x74, 0xA4, 0x2E, 0xF5, 0x82, 0xE4,
+0x34, 0x04, 0xF5, 0x83, 0xE0, 0x4D, 0xF0, 0x22, 0xAD, 0x07, 0x74, 0x84, 0x2D, 0xF5, 0x82, 0xE4,
+0x34, 0x04, 0xF5, 0x83, 0xE0, 0x54, 0x7F, 0x90, 0x8A, 0xDE, 0xF0, 0xE0, 0xF9, 0x54, 0x1F, 0xA3,
+0xF0, 0x75, 0xF0, 0x09, 0xED, 0x90, 0x87, 0x27, 0x12, 0x43, 0x5F, 0xE0, 0xFF, 0x90, 0x8A, 0xE1,
+0xF0, 0xED, 0x25, 0xE0, 0x24, 0x81, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE0, 0xFB, 0xA3,
+0xE0, 0x90, 0x8A, 0xE2, 0xCB, 0xF0, 0xA3, 0xEB, 0xF0, 0xED, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82,
+0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xFB, 0xA3, 0xE0, 0x90, 0x8A, 0xE4, 0xCB, 0xF0, 0xA3, 0xEB,
+0xF0, 0x90, 0x8A, 0xDF, 0xE0, 0xFE, 0x25, 0xE0, 0x24, 0x2E, 0xF5, 0x82, 0xE4, 0x34, 0x41, 0xF5,
+0x83, 0xE4, 0x93, 0xFA, 0x74, 0x01, 0x93, 0xFB, 0xED, 0x25, 0xE0, 0x24, 0xE1, 0xF5, 0x82, 0xE4,
+0x34, 0x86, 0xF5, 0x83, 0xEA, 0xF0, 0xA3, 0xEB, 0xF0, 0xEE, 0xC3, 0x9F, 0x40, 0x02, 0x41, 0xB9,
+0x90, 0x8A, 0xDF, 0xE0, 0xFF, 0x74, 0xA5, 0x2D, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xEF,
+0xF0, 0xEF, 0x04, 0x90, 0x8A, 0xE0, 0xF0, 0x90, 0x8A, 0xE1, 0xE0, 0xFF, 0x90, 0x8A, 0xE0, 0xE0,
+0xFE, 0xD3, 0x9F, 0x40, 0x02, 0x41, 0xF3, 0xEE, 0xC3, 0x94, 0x10, 0x40, 0x21, 0xEE, 0x24, 0xF0,
+0xFF, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08, 0x80, 0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8,
+0xF9, 0xFF, 0x90, 0x8A, 0xE2, 0xE0, 0x5E, 0xFE, 0xA3, 0xE0, 0x5F, 0x4E, 0x70, 0x27, 0x90, 0x8A,
+0xE0, 0xE0, 0xFF, 0xC3, 0x94, 0x10, 0x50, 0x59, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08, 0x80,
+0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8, 0xF9, 0xFF, 0x90, 0x8A, 0xE4, 0xE0, 0x5E, 0xFE, 0xA3,
+0xE0, 0x5F, 0x4E, 0x60, 0x3C, 0x90, 0x8A, 0xE0, 0xE0, 0xB4, 0x11, 0x0D, 0x90, 0x8A, 0xE3, 0xE0,
+0x30, 0xE7, 0x06, 0x90, 0x8A, 0xE0, 0x74, 0x17, 0xF0, 0x90, 0x8A, 0xE0, 0xE0, 0xFF, 0x64, 0x13,
+0x60, 0x04, 0xEF, 0xB4, 0x12, 0x0D, 0x90, 0x8A, 0xE2, 0xE0, 0x30, 0xE0, 0x06, 0x90, 0x8A, 0xE0,
+0x74, 0x18, 0xF0, 0x90, 0x8A, 0xE0, 0xE0, 0x90, 0x8A, 0xDF, 0xF0, 0x90, 0x8A, 0xDE, 0xF0, 0x80,
+0x42, 0x90, 0x8A, 0xE0, 0xE0, 0x04, 0xF0, 0x41, 0x17, 0x90, 0x8A, 0xE1, 0xE0, 0xFC, 0x90, 0x8A,
+0xDF, 0xE0, 0xFF, 0x6C, 0x70, 0x71, 0x74, 0xA5, 0x2D, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83,
+0xEF, 0xF0, 0x75, 0xF0, 0x09, 0xED, 0x90, 0x87, 0x29, 0x12, 0x43, 0x5F, 0xE0, 0xB4, 0x01, 0x10,
+0xE9, 0x20, 0xE6, 0x0C, 0x90, 0x8A, 0xDF, 0xE0, 0x44, 0x40, 0x90, 0x8A, 0xDE, 0xF0, 0x80, 0x03,
+0xAF, 0x01, 0x22, 0x90, 0x8A, 0xDF, 0xE0, 0xFF, 0x25, 0xE0, 0x24, 0x66, 0xF5, 0x82, 0xE4, 0x34,
+0x41, 0xF5, 0x83, 0xE4, 0x93, 0xFA, 0x74, 0x01, 0x93, 0xFB, 0xEF, 0x25, 0xE0, 0x24, 0x2E, 0xF5,
+0x82, 0xE4, 0x34, 0x41, 0xF5, 0x83, 0x74, 0x01, 0x93, 0x2B, 0xFF, 0xE4, 0x93, 0x3A, 0xC3, 0x13,
+0xFE, 0xEF, 0x13, 0xFF, 0xED, 0x25, 0xE0, 0x24, 0xE1, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83,
+0xEE, 0xF0, 0xA3, 0xEF, 0xF0, 0x80, 0x66, 0x90, 0x8A, 0xDF, 0xE0, 0xD3, 0x9C, 0x40, 0x5E, 0x90,
+0x8A, 0xE1, 0xE0, 0xFF, 0x74, 0xA5, 0x2D, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xEF, 0xF0,
+0x90, 0x8A, 0xDF, 0xEF, 0xF0, 0x90, 0x8A, 0xDE, 0xF0, 0xFC, 0xA3, 0xE0, 0xFF, 0x25, 0xE0, 0x24,
+0x66, 0xF5, 0x82, 0xE4, 0x34, 0x41, 0xF5, 0x83, 0xE4, 0x93, 0xFA, 0x74, 0x01, 0x93, 0xFB, 0xEF,
+0x25, 0xE0, 0x24, 0x2E, 0xF5, 0x82, 0xE4, 0x34, 0x41, 0xF5, 0x83, 0x74, 0x01, 0x93, 0x2B, 0xFF,
+0xE4, 0x93, 0x3A, 0xC3, 0x13, 0xFE, 0xEF, 0x13, 0xFF, 0xED, 0x25, 0xE0, 0x24, 0xE1, 0xF5, 0x82,
+0xE4, 0x34, 0x86, 0xF5, 0x83, 0xEE, 0xF0, 0xA3, 0xEF, 0xF0, 0xAF, 0x04, 0x22, 0x74, 0x01, 0x2D,
+0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE4, 0xF0, 0xAF, 0x05, 0x90, 0x8A, 0xDE, 0xE0, 0x44,
+0x80, 0xFD, 0x12, 0x5C, 0x4E, 0x90, 0x8A, 0xDE, 0xE0, 0x44, 0x80, 0xFF, 0x22, 0xE4, 0x90, 0x8A,
+0xCF, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0xC3, 0x94, 0x20, 0x40, 0x03, 0x02, 0x72, 0x54, 0x75,
+0xF0, 0x09, 0xEF, 0x90, 0x87, 0x2A, 0x12, 0x43, 0x5F, 0xE0, 0x64, 0x01, 0x60, 0x03, 0x02, 0x72,
+0x4B, 0x90, 0x8A, 0xCF, 0xE0, 0x25, 0xE0, 0x24, 0xC0, 0xF5, 0x82, 0xE4, 0x34, 0x85, 0xF5, 0x83,
+0xE0, 0xFC, 0xA3, 0xE0, 0xD3, 0x94, 0x00, 0xEC, 0x94, 0x00, 0x50, 0x03, 0x02, 0x72, 0x4B, 0xEF,
+0x75, 0xF0, 0x0A, 0xA4, 0x24, 0x00, 0xF9, 0x74, 0x84, 0x35, 0xF0, 0x75, 0x12, 0x01, 0xF5, 0x13,
+0x89, 0x14, 0x90, 0x8A, 0xCF, 0xE0, 0x25, 0xE0, 0x24, 0xC0, 0xF5, 0x82, 0xE4, 0x34, 0x85, 0xF5,
+0x83, 0xE0, 0xFD, 0xA3, 0xE0, 0x90, 0x8A, 0xD4, 0xCD, 0xF0, 0xA3, 0xED, 0xF0, 0xEF, 0x25, 0xE0,
+0x24, 0x63, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83, 0xE0, 0xFF, 0xA3, 0xE0, 0x90, 0x8A, 0xD6,
+0xCF, 0xF0, 0xA3, 0xEF, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0xFE, 0x24, 0x84, 0xF5, 0x82, 0xE4, 0x34,
+0x04, 0xF5, 0x83, 0xE0, 0x54, 0x3F, 0x90, 0x8A, 0xD0, 0xF0, 0xE0, 0xFD, 0x54, 0x1F, 0xA3, 0xF0,
+0x75, 0xF0, 0x09, 0xEE, 0x90, 0x87, 0x27, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xD9, 0xF0, 0x90,
+0x8A, 0xCF, 0xE0, 0xFB, 0x24, 0x64, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE0, 0xC3, 0x94,
+0x05, 0x40, 0x02, 0xC1, 0x9C, 0x90, 0x8A, 0xD9, 0xE0, 0xFE, 0x90, 0x8A, 0xD1, 0xE0, 0x9E, 0x40,
+0x13, 0x90, 0x8A, 0xD9, 0xE0, 0x90, 0x8A, 0xD1, 0xF0, 0xED, 0x54, 0x40, 0xFD, 0x90, 0x8A, 0xD0,
+0xF0, 0xEE, 0x4D, 0xF0, 0x90, 0x8A, 0xD1, 0xE0, 0xFF, 0x90, 0x41, 0x12, 0x93, 0xFE, 0x74, 0x23,
+0x2B, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xC3, 0x9E, 0x40, 0x06, 0xEF, 0x90, 0x40,
+0xDA, 0x80, 0x07, 0x90, 0x8A, 0xD1, 0xE0, 0x90, 0x40, 0xF6, 0x93, 0x90, 0x8A, 0xD8, 0xF0, 0x90,
+0x8A, 0xD8, 0xE0, 0x75, 0xF0, 0x06, 0xA4, 0x24, 0x50, 0xF9, 0x74, 0x40, 0x35, 0xF0, 0x75, 0x0F,
+0xFF, 0xF5, 0x10, 0x89, 0x11, 0x90, 0x8A, 0xD0, 0xE0, 0x90, 0x41, 0xBA, 0x93, 0xFF, 0xD3, 0x90,
+0x8A, 0xD7, 0xE0, 0x9F, 0x90, 0x8A, 0xD6, 0xE0, 0x94, 0x00, 0x40, 0x0D, 0x90, 0x8A, 0xCF, 0xE0,
+0xFF, 0xE4, 0xFD, 0x12, 0x5D, 0x41, 0x02, 0x71, 0xE1, 0x90, 0x8A, 0xCF, 0xE0, 0x25, 0xE0, 0x24,
+0xE1, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE0, 0xFF, 0xA3, 0xE0, 0x90, 0x8A, 0xD2, 0xCF,
+0xF0, 0xA3, 0xEF, 0xF0, 0xAB, 0x0F, 0xAA, 0x10, 0xA9, 0x11, 0x12, 0x24, 0x62, 0xFF, 0x7E, 0x00,
+0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x12, 0x42, 0x97, 0xFD, 0xAC, 0xF0, 0x12, 0x24, 0x7B, 0x90,
+0x8A, 0xD2, 0xEE, 0x8F, 0xF0, 0x12, 0x42, 0x81, 0xAB, 0x0F, 0xAA, 0x10, 0xA9, 0x11, 0x90, 0x00,
+0x01, 0x12, 0x42, 0x20, 0xFF, 0x7E, 0x00, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x90, 0x00, 0x02,
+0x12, 0x42, 0xC2, 0xFD, 0xAC, 0xF0, 0x12, 0x24, 0x7B, 0x90, 0x8A, 0xD2, 0xEE, 0x8F, 0xF0, 0x12,
+0x42, 0x81, 0xAB, 0x0F, 0xAA, 0x10, 0xA9, 0x11, 0x90, 0x00, 0x02, 0x12, 0x42, 0x20, 0xFF, 0x7E,
+0x00, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x90, 0x00, 0x04, 0x12, 0x42, 0xC2, 0xFD, 0xAC, 0xF0,
+0x12, 0x24, 0x7B, 0x90, 0x8A, 0xD2, 0xEE, 0x8F, 0xF0, 0x12, 0x42, 0x81, 0xAB, 0x0F, 0xAA, 0x10,
+0xA9, 0x11, 0x90, 0x00, 0x03, 0x12, 0x42, 0x20, 0xFF, 0x7E, 0x00, 0xAB, 0x12, 0xAA, 0x13, 0xA9,
+0x14, 0x90, 0x00, 0x06, 0x12, 0x42, 0xC2, 0xFD, 0xAC, 0xF0, 0x12, 0x24, 0x7B, 0x90, 0x8A, 0xD2,
+0xEE, 0x8F, 0xF0, 0x12, 0x42, 0x81, 0xAB, 0x0F, 0xAA, 0x10, 0xA9, 0x11, 0x90, 0x00, 0x04, 0x12,
+0x42, 0x20, 0xFF, 0x7E, 0x00, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x90, 0x00, 0x08, 0x12, 0x42,
+0xC2, 0xFD, 0xAC, 0xF0, 0x12, 0x24, 0x7B, 0x90, 0x8A, 0xD2, 0xEE, 0x8F, 0xF0, 0x12, 0x42, 0x81,
+0xAB, 0x0F, 0xAA, 0x10, 0xA9, 0x11, 0x90, 0x00, 0x05, 0x12, 0x42, 0x20, 0xFF, 0x7E, 0x00, 0x90,
+0x8A, 0xD4, 0xE0, 0xFC, 0xA3, 0xE0, 0xFD, 0x12, 0x24, 0x7B, 0xD3, 0x90, 0x8A, 0xD3, 0xE0, 0x9F,
+0x90, 0x8A, 0xD2, 0xE0, 0x9E, 0x40, 0x0C, 0xA3, 0xE0, 0x9F, 0xF0, 0x90, 0x8A, 0xD2, 0xE0, 0x9E,
+0xF0, 0x80, 0x07, 0xE4, 0x90, 0x8A, 0xD2, 0xF0, 0xA3, 0xF0, 0x90, 0x8A, 0xD2, 0xE0, 0xFC, 0xA3,
+0xE0, 0xFD, 0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0x25, 0xE0, 0x24, 0xE1, 0xF5, 0x82, 0xE4, 0x34, 0x86,
+0xF5, 0x83, 0xEC, 0xF0, 0xA3, 0xED, 0xF0, 0x90, 0x8A, 0xD0, 0xE0, 0x25, 0xE0, 0x24, 0x2E, 0xF5,
+0x82, 0xE4, 0x34, 0x41, 0xF5, 0x83, 0xE4, 0x93, 0xFA, 0x74, 0x01, 0x93, 0xFB, 0xD3, 0xED, 0x9B,
+0xEC, 0x9A, 0x40, 0x05, 0x31, 0x78, 0x02, 0x71, 0xAF, 0x90, 0x8A, 0xD0, 0xE0, 0x25, 0xE0, 0x24,
+0x66, 0xF5, 0x82, 0xE4, 0x34, 0x41, 0xF5, 0x83, 0xE4, 0x93, 0xFE, 0x74, 0x01, 0x93, 0xFF, 0xC3,
+0x90, 0x8A, 0xD3, 0xE0, 0x9F, 0x90, 0x8A, 0xD2, 0xE0, 0x9E, 0x40, 0x03, 0x02, 0x71, 0xAF, 0x90,
+0x8A, 0xCF, 0xE0, 0xFF, 0x7D, 0x01, 0x12, 0x5D, 0x41, 0x02, 0x71, 0xAF, 0x90, 0x8A, 0xCF, 0xE0,
+0xFF, 0x24, 0x64, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE0, 0xFC, 0x64, 0x05, 0x60, 0x03,
+0x02, 0x70, 0x7D, 0x90, 0x87, 0x22, 0xE0, 0xFE, 0xB4, 0x03, 0x0B, 0x90, 0x8A, 0xD1, 0xE0, 0xC3,
+0x94, 0x19, 0x40, 0x3D, 0x80, 0x2E, 0xEE, 0xB4, 0x02, 0x0B, 0x90, 0x8A, 0xD1, 0xE0, 0xC3, 0x94,
+0x11, 0x40, 0x2E, 0x80, 0x1F, 0x90, 0x87, 0x22, 0xE0, 0xFE, 0xB4, 0x01, 0x0B, 0x90, 0x8A, 0xD1,
+0xE0, 0xC3, 0x94, 0x0A, 0x40, 0x1B, 0x80, 0x0C, 0xEE, 0x70, 0x11, 0x90, 0x8A, 0xD1, 0xE0, 0xC3,
+0x94, 0x03, 0x40, 0x0D, 0x90, 0x89, 0x43, 0x74, 0x01, 0xF0, 0x80, 0x05, 0xE4, 0x90, 0x89, 0x43,
+0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0xFE, 0x24, 0x43, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83, 0xE0,
+0x90, 0x8A, 0xDD, 0xF0, 0x74, 0x23, 0x2E, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xFE,
+0xC3, 0x94, 0x30, 0x50, 0x0B, 0xE4, 0x90, 0x8A, 0xDD, 0xF0, 0x74, 0x64, 0x2F, 0x02, 0x70, 0x28,
+0x90, 0x89, 0x43, 0xE0, 0x64, 0x01, 0x60, 0x03, 0x02, 0x70, 0x1D, 0x90, 0x8A, 0xCF, 0xE0, 0x24,
+0x44, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0x64, 0x0A, 0x60, 0x5B, 0x90, 0x8A, 0xCF,
+0xE0, 0xFF, 0xEE, 0x24, 0x05, 0xFB, 0xE4, 0x33, 0xFA, 0x74, 0x21, 0x2F, 0xF5, 0x82, 0xE4, 0x34,
+0x86, 0xF5, 0x83, 0xE0, 0xFF, 0xD3, 0x9B, 0xEA, 0x64, 0x80, 0xF8, 0x74, 0x80, 0x98, 0x50, 0x38,
+0x90, 0x8A, 0xCF, 0xE0, 0xFE, 0xEF, 0x24, 0x05, 0xFB, 0xE4, 0x33, 0xFA, 0x74, 0x23, 0x2E, 0xF5,
+0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xD3, 0x9B, 0xEA, 0x64, 0x80, 0xF8, 0x74, 0x80, 0x98,
+0x50, 0x16, 0x90, 0x8A, 0xCF, 0xE0, 0x24, 0x84, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE0,
+0xFF, 0x90, 0x8A, 0xD1, 0xE0, 0x6F, 0x60, 0x56, 0x90, 0x8A, 0xCF, 0xE0, 0x24, 0x23, 0xF5, 0x82,
+0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xFF, 0xD3, 0x94, 0x42, 0x40, 0x08, 0x90, 0x8A, 0xDD, 0x74,
+0x05, 0xF0, 0x80, 0x11, 0xEF, 0xD3, 0x94, 0x39, 0x90, 0x8A, 0xDD, 0x40, 0x05, 0x74, 0x03, 0xF0,
+0x80, 0x03, 0x74, 0x01, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0x24, 0x23, 0xF5, 0x82, 0xE4, 0x34,
+0x89, 0xF5, 0x83, 0xE0, 0xFE, 0x74, 0x21, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xEE,
+0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0x24, 0x44, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0x80, 0x2F, 0x90, 0x8A,
+0xCF, 0xE0, 0xFF, 0x24, 0x64, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE4, 0xF0, 0x74, 0x44,
+0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0x04, 0xF0, 0x80, 0x14, 0xE4, 0x90, 0x8A,
+0xDD, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0x24, 0x64, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE4,
+0xF0, 0x90, 0x8A, 0xD1, 0xE0, 0xFE, 0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0x24, 0x84, 0xF5, 0x82, 0xE4,
+0x34, 0x8A, 0xF5, 0x83, 0xEE, 0xF0, 0x90, 0x8A, 0xDD, 0xE0, 0xFE, 0x74, 0x43, 0x2F, 0xF5, 0x82,
+0xE4, 0x34, 0x88, 0xF5, 0x83, 0xEE, 0xF0, 0x75, 0xF0, 0x09, 0xEF, 0x90, 0x87, 0x2B, 0x12, 0x43,
+0x5F, 0xE0, 0xB4, 0x01, 0x11, 0xE4, 0x90, 0x8A, 0xDD, 0xF0, 0x74, 0x64, 0x2F, 0xF5, 0x82, 0xE4,
+0x34, 0x8A, 0xF5, 0x83, 0xE4, 0xF0, 0x90, 0x8A, 0xDD, 0xE0, 0xFD, 0x21, 0xAC, 0xEC, 0x64, 0x06,
+0x60, 0x02, 0x21, 0xAF, 0x90, 0x8A, 0xD2, 0xF0, 0xA3, 0xF0, 0x90, 0x41, 0xDB, 0x93, 0xFF, 0x7E,
+0x00, 0x90, 0x8A, 0xD4, 0xE0, 0xFC, 0xA3, 0xE0, 0xFD, 0x12, 0x24, 0x7B, 0x90, 0x8A, 0xDB, 0xEE,
+0xF0, 0xA3, 0xEF, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0x24, 0x43, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5,
+0x83, 0xE0, 0x90, 0x8A, 0xDD, 0xF0, 0xE4, 0x90, 0x8A, 0xDA, 0xF0, 0x90, 0x8A, 0xDA, 0xE0, 0xFF,
+0xD3, 0x94, 0x04, 0x50, 0x47, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x75, 0xF0, 0x02, 0xEF, 0xA4,
+0xF5, 0x82, 0x85, 0xF0, 0x83, 0x12, 0x42, 0xC2, 0xFD, 0xAC, 0xF0, 0xEF, 0x90, 0x41, 0xD6, 0x93,
+0xFF, 0x7E, 0x00, 0x12, 0x24, 0x7B, 0x90, 0x8A, 0xD2, 0xEE, 0x8F, 0xF0, 0x12, 0x42, 0x81, 0x90,
+0x8A, 0xDB, 0xE0, 0xFE, 0xA3, 0xE0, 0xFF, 0xD3, 0x90, 0x8A, 0xD3, 0xE0, 0x9F, 0x90, 0x8A, 0xD2,
+0xE0, 0x9E, 0x50, 0x08, 0x90, 0x8A, 0xDA, 0xE0, 0x04, 0xF0, 0x80, 0xAF, 0x90, 0x8A, 0xDA, 0xE0,
+0xC3, 0x13, 0xF0, 0x90, 0x8A, 0xDD, 0xE0, 0xFF, 0xB4, 0x01, 0x0D, 0x90, 0x8A, 0xDA, 0xE0, 0x70,
+0x5D, 0x90, 0x8A, 0xDD, 0x04, 0xF0, 0x80, 0x5B, 0xEF, 0xB4, 0x03, 0x1D, 0x90, 0x8A, 0xDA, 0xE0,
+0xFF, 0x70, 0x08, 0x90, 0x8A, 0xDD, 0x74, 0x03, 0xF0, 0x80, 0x48, 0xEF, 0xB4, 0x01, 0x08, 0x90,
+0x8A, 0xDD, 0x74, 0x01, 0xF0, 0x80, 0x3C, 0x80, 0x35, 0x90, 0x8A, 0xDD, 0xE0, 0x64, 0x05, 0x70,
+0x32, 0x90, 0x8A, 0xDA, 0xE0, 0xFF, 0x70, 0x08, 0x90, 0x8A, 0xDD, 0x74, 0x05, 0xF0, 0x80, 0x0F,
+0xEF, 0x90, 0x8A, 0xDD, 0xB4, 0x01, 0x05, 0x74, 0x03, 0xF0, 0x80, 0x03, 0x74, 0x01, 0xF0, 0xD3,
+0x90, 0x8A, 0xD7, 0xE0, 0x94, 0x03, 0x90, 0x8A, 0xD6, 0xE0, 0x94, 0x00, 0x40, 0x05, 0xE4, 0x90,
+0x8A, 0xDD, 0xF0, 0xD3, 0x90, 0x8A, 0xD7, 0xE0, 0x94, 0x03, 0x90, 0x8A, 0xD6, 0xE0, 0x94, 0x00,
+0x40, 0x05, 0xE4, 0x90, 0x8A, 0xDD, 0xF0, 0x90, 0x8A, 0xDD, 0xE0, 0xFD, 0x90, 0x8A, 0xCF, 0xE0,
+0xFF, 0x24, 0x43, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83, 0xED, 0xF0, 0x12, 0x69, 0x38, 0x90,
+0x8A, 0xCF, 0xE0, 0xFF, 0x24, 0x64, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE0, 0xD3, 0x94,
+0x05, 0x50, 0x0F, 0x74, 0x64, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE0, 0x04, 0xF0,
+0x80, 0x0F, 0x90, 0x8A, 0xCF, 0xE0, 0x24, 0x64, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE4,
+0xF0, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0xE4, 0xF5, 0xF0, 0x12, 0x42, 0xFA, 0xAB, 0x12, 0xAA,
+0x13, 0xA9, 0x14, 0x90, 0x00, 0x02, 0xE4, 0xF5, 0xF0, 0x12, 0x43, 0x19, 0x90, 0x00, 0x04, 0xE4,
+0xF5, 0xF0, 0x12, 0x43, 0x19, 0x90, 0x00, 0x06, 0xE4, 0xF5, 0xF0, 0x12, 0x43, 0x19, 0x90, 0x00,
+0x08, 0xE4, 0xF5, 0xF0, 0x12, 0x43, 0x19, 0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0x25, 0xE0, 0x24, 0xC0,
+0xF5, 0x82, 0xE4, 0x34, 0x85, 0xF5, 0x83, 0xE4, 0xF0, 0xA3, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0x63,
+0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83, 0xE4, 0xF0, 0xA3, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0xA3,
+0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83, 0xE4, 0xF0, 0xA3, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0x04,
+0xF0, 0x02, 0x6B, 0xC2, 0x22, 0xE4, 0x90, 0x8A, 0xCF, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0xC3,
+0x94, 0x10, 0x50, 0x14, 0x74, 0xA4, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x04, 0xF5, 0x83, 0xE4, 0xF0,
+0x90, 0x8A, 0xCF, 0xE0, 0x04, 0xF0, 0x80, 0xE2, 0xE4, 0x90, 0x8A, 0xCF, 0xF0, 0x90, 0x8A, 0xCF,
+0xE0, 0xFF, 0xC3, 0x94, 0x20, 0x40, 0x02, 0x81, 0x0E, 0x75, 0xF0, 0x0A, 0xEF, 0x90, 0x84, 0x00,
+0x12, 0x43, 0x5F, 0xE4, 0xF0, 0xA3, 0xF0, 0x75, 0xF0, 0x0A, 0xEF, 0x90, 0x84, 0x02, 0x12, 0x43,
+0x5F, 0xE4, 0xF0, 0xA3, 0xF0, 0x75, 0xF0, 0x0A, 0xEF, 0x90, 0x84, 0x04, 0x12, 0x43, 0x5F, 0xE4,
+0xF0, 0xA3, 0xF0, 0x75, 0xF0, 0x0A, 0xEF, 0x90, 0x84, 0x06, 0x12, 0x43, 0x5F, 0xE4, 0xF0, 0xA3,
+0xF0, 0x75, 0xF0, 0x0A, 0xEF, 0x90, 0x84, 0x08, 0x12, 0x43, 0x5F, 0xE4, 0xF0, 0xA3, 0xF0, 0x74,
+0x84, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0x74, 0x13, 0xF0, 0x74, 0x44, 0x2F, 0xF5,
+0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE4, 0xF0, 0x74, 0x43, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x88,
+0xF5, 0x83, 0xE4, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0xC0, 0xF5, 0x82, 0xE4, 0x34, 0x85, 0xF5, 0x83,
+0xE4, 0xF0, 0xA3, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0x63, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83,
+0xE4, 0xF0, 0xA3, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0xE3, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83,
+0xE4, 0xF0, 0xA3, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0xA3, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83,
+0xE4, 0xF0, 0xA3, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0x64, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83,
+0xE4, 0xF0, 0xA3, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0xA4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83,
+0xE4, 0xF0, 0xA3, 0xF0, 0x74, 0x44, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE4, 0xF0,
+0x74, 0x24, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE4, 0xF0, 0x74, 0x64, 0x2F, 0xF5,
+0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE4, 0xF0, 0x90, 0x41, 0x8C, 0x93, 0xFE, 0x74, 0x01, 0x93,
+0xFF, 0x90, 0x41, 0x54, 0x74, 0x01, 0x93, 0x2F, 0xFF, 0xE4, 0x93, 0x3E, 0xC3, 0x13, 0xFE, 0xEF,
+0x13, 0xFF, 0x90, 0x8A, 0xCF, 0xE0, 0xFD, 0x25, 0xE0, 0x24, 0xE1, 0xF5, 0x82, 0xE4, 0x34, 0x86,
+0xF5, 0x83, 0xEE, 0xF0, 0xA3, 0xEF, 0xF0, 0x75, 0xF0, 0x09, 0xED, 0x90, 0x87, 0x29, 0x12, 0x43,
+0x5F, 0x74, 0x01, 0xF0, 0x74, 0xC1, 0x2D, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0x74, 0x0C,
+0xF0, 0x75, 0xF0, 0x09, 0xED, 0x90, 0x87, 0x25, 0x12, 0x43, 0x5F, 0x74, 0xFF, 0xF0, 0xA3, 0xF0,
+0x75, 0xF0, 0x09, 0xED, 0x90, 0x87, 0x23, 0x12, 0x43, 0x5F, 0xE4, 0xF0, 0xA3, 0x74, 0x0F, 0xF0,
+0x75, 0xF0, 0x09, 0xED, 0x90, 0x87, 0x27, 0x12, 0x43, 0x5F, 0x74, 0x13, 0xF0, 0x75, 0xF0, 0x09,
+0xED, 0x90, 0x87, 0x28, 0x12, 0x43, 0x5F, 0xE4, 0xF0, 0x74, 0x84, 0x2D, 0xF5, 0x82, 0xE4, 0x34,
+0x04, 0xF5, 0x83, 0x74, 0x13, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0x04, 0xF0, 0x41, 0x7D, 0x22, 0x12,
+0x24, 0x62, 0xFF, 0xC3, 0x94, 0x20, 0x50, 0x14, 0x90, 0x00, 0x02, 0x12, 0x42, 0x20, 0xFE, 0x74,
+0x23, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xEE, 0xF0, 0x22, 0xEF, 0xB4, 0x20, 0x0A,
+0x90, 0x00, 0x02, 0x12, 0x42, 0x20, 0x90, 0x87, 0x21, 0xF0, 0x22, 0x90, 0x8B, 0x4B, 0xEE, 0xF0,
+0xA3, 0xEF, 0xF0, 0xE4, 0xA3, 0xF0, 0xA3, 0xF0, 0x90, 0x8B, 0x4B, 0xE0, 0xFE, 0xA3, 0xE0, 0xF5,
+0x82, 0x8E, 0x83, 0xE0, 0x60, 0x2C, 0xC3, 0x90, 0x8B, 0x4E, 0xE0, 0x94, 0xE8, 0x90, 0x8B, 0x4D,
+0xE0, 0x94, 0x03, 0x40, 0x0A, 0x90, 0x01, 0xC6, 0xE0, 0x44, 0x10, 0xF0, 0x7F, 0x00, 0x22, 0x90,
+0x8B, 0x4D, 0xE4, 0x75, 0xF0, 0x01, 0x12, 0x42, 0x81, 0x7F, 0x0A, 0x7E, 0x00, 0x12, 0x32, 0x15,
+0x80, 0xC6, 0x7F, 0x01, 0x22, 0x12, 0x24, 0x62, 0xF5, 0x21, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3,
+0xC0, 0xD0, 0x90, 0x8A, 0xDA, 0x12, 0x25, 0x14, 0x00, 0x00, 0x00, 0x00, 0x90, 0x00, 0x01, 0x12,
+0x42, 0x20, 0x90, 0x8B, 0x1A, 0xF0, 0x90, 0x00, 0x03, 0x12, 0x42, 0x20, 0x90, 0x8B, 0x0A, 0xF0,
+0x12, 0x47, 0xFA, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x90, 0x00, 0x02, 0x12, 0x42, 0x20, 0xFF, 0x30,
+0xE0, 0x25, 0x12, 0x24, 0x62, 0x90, 0x8B, 0x10, 0xF0, 0x90, 0x00, 0x01, 0x12, 0x42, 0x20, 0x90,
+0x8B, 0x11, 0xF0, 0xEF, 0xC3, 0x13, 0x54, 0x7F, 0x90, 0x8B, 0x0F, 0xF0, 0x90, 0x00, 0x03, 0x12,
+0x42, 0x20, 0x90, 0x8B, 0x16, 0xF0, 0x22, 0x90, 0x8B, 0x10, 0x74, 0x03, 0xF0, 0x90, 0x8B, 0x11,
+0x74, 0x05, 0xF0, 0x90, 0x8B, 0x0F, 0x74, 0x14, 0xF0, 0x90, 0x8B, 0x16, 0x74, 0x05, 0xF0, 0x22,
+0x12, 0x24, 0x62, 0x30, 0xE0, 0x19, 0xC3, 0x13, 0x54, 0x7F, 0x90, 0x8B, 0x15, 0xF0, 0x90, 0x00,
+0x01, 0x12, 0x42, 0x20, 0xFF, 0x90, 0x8B, 0x13, 0xE4, 0xF0, 0xA3, 0xEF, 0xF0, 0x80, 0x0F, 0x90,
+0x8B, 0x15, 0x74, 0x05, 0xF0, 0x90, 0x8B, 0x13, 0xE4, 0xF0, 0xA3, 0x74, 0x03, 0xF0, 0x90, 0x8B,
+0x13, 0xE0, 0xA3, 0xE0, 0x90, 0x05, 0x58, 0xF0, 0x22, 0x12, 0x24, 0x62, 0x90, 0x8B, 0x12, 0xF0,
+0x60, 0x07, 0xE4, 0xFD, 0x7F, 0x04, 0x12, 0x45, 0xA2, 0x90, 0x8B, 0x12, 0xE0, 0x90, 0x01, 0xE7,
+0xF0, 0x22, 0x90, 0x02, 0x09, 0xE0, 0xFD, 0x12, 0x24, 0x62, 0xFE, 0xAF, 0x05, 0xED, 0x2E, 0x90,
+0x8A, 0xF7, 0xF0, 0x90, 0x00, 0x01, 0x12, 0x42, 0x20, 0xFF, 0xED, 0x2F, 0x90, 0x8A, 0xF8, 0xF0,
+0x90, 0x00, 0x02, 0x12, 0x42, 0x20, 0xFF, 0xED, 0x2F, 0x90, 0x8A, 0xF9, 0xF0, 0x90, 0x00, 0x03,
+0x12, 0x42, 0x20, 0xFF, 0xED, 0x2F, 0x90, 0x8A, 0xFA, 0xF0, 0x90, 0x00, 0x04, 0x12, 0x42, 0x20,
+0xFF, 0xAE, 0x05, 0xED, 0x2F, 0x90, 0x8A, 0xFB, 0xF0, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0,
+0xD0, 0x90, 0x8A, 0xDA, 0x12, 0x43, 0x8B, 0xE4, 0x90, 0x8A, 0xDD, 0xF0, 0x12, 0x24, 0x62, 0xC3,
+0x13, 0x20, 0xE0, 0x02, 0xC1, 0xED, 0x90, 0x8A, 0xDA, 0x12, 0x43, 0x6B, 0x12, 0x24, 0x62, 0xFF,
+0x54, 0x02, 0xFE, 0x90, 0x8B, 0x32, 0xE0, 0x54, 0xFD, 0x4E, 0xFE, 0xF0, 0xEF, 0x54, 0x01, 0xFF,
+0xEE, 0x54, 0xFE, 0x4F, 0xFF, 0xF0, 0x12, 0x24, 0x62, 0xFE, 0x54, 0x08, 0xFD, 0xEF, 0x54, 0xF7,
+0x4D, 0xFF, 0x90, 0x8B, 0x32, 0xF0, 0xEE, 0x54, 0x10, 0xFE, 0xEF, 0x54, 0xEF, 0x4E, 0xFF, 0xF0,
+0x12, 0x24, 0x62, 0xFE, 0x54, 0x20, 0xFD, 0xEF, 0x54, 0xDF, 0x4D, 0xFF, 0x90, 0x8B, 0x32, 0xF0,
+0xEE, 0x54, 0x40, 0xFE, 0xEF, 0x54, 0xBF, 0x4E, 0xF0, 0x20, 0xE0, 0x02, 0xC1, 0xD9, 0x90, 0x8A,
+0xDD, 0x74, 0x21, 0xF0, 0x90, 0x8A, 0xDA, 0x12, 0x43, 0x6B, 0x12, 0x24, 0x62, 0xFF, 0x13, 0x13,
+0x54, 0x01, 0xFE, 0x90, 0x8B, 0x32, 0xE0, 0xFD, 0x13, 0x13, 0x54, 0x01, 0x6E, 0x60, 0x2A, 0xEF,
+0x54, 0x04, 0xFF, 0xED, 0x54, 0xFB, 0x4F, 0xF0, 0xE0, 0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x0E,
+0x90, 0x01, 0x34, 0x74, 0x40, 0xF0, 0xFD, 0xE4, 0xFF, 0x12, 0x31, 0x9D, 0x80, 0x0B, 0xE4, 0x90,
+0x8B, 0x34, 0xF0, 0x7D, 0x40, 0xFF, 0x12, 0x31, 0x2C, 0x90, 0x8B, 0x32, 0xE0, 0xFD, 0x13, 0x13,
+0x13, 0x54, 0x1F, 0x30, 0xE0, 0x07, 0x90, 0x8A, 0xDD, 0xE0, 0x44, 0x12, 0xF0, 0xED, 0xC4, 0x54,
+0x0F, 0x30, 0xE0, 0x07, 0x90, 0x8A, 0xDD, 0xE0, 0x44, 0x14, 0xF0, 0x90, 0x8B, 0x32, 0xE0, 0xC4,
+0x13, 0x54, 0x07, 0x30, 0xE0, 0x07, 0x90, 0x8A, 0xDD, 0xE0, 0x44, 0x80, 0xF0, 0x90, 0x8B, 0x32,
+0xE0, 0xC4, 0x13, 0x13, 0x54, 0x03, 0x20, 0xE0, 0x07, 0x90, 0x8A, 0xDD, 0xE0, 0x44, 0x40, 0xF0,
+0x90, 0x8A, 0xDD, 0xE0, 0x90, 0x05, 0x27, 0xF0, 0x90, 0x8B, 0x33, 0xE0, 0x70, 0x05, 0x7F, 0x01,
+0x12, 0x4E, 0x89, 0x90, 0x8B, 0x32, 0xE0, 0xC4, 0x13, 0x13, 0x54, 0x03, 0x30, 0xE0, 0x04, 0x7F,
+0x03, 0x80, 0x0E, 0x7F, 0x01, 0x12, 0x4D, 0xE0, 0xEF, 0x60, 0x04, 0x7F, 0x01, 0x80, 0x02, 0x7F,
+0x02, 0x12, 0x4E, 0x89, 0x7F, 0x02, 0x02, 0x78, 0x2E, 0x90, 0x8A, 0xDD, 0x74, 0x01, 0xF0, 0x90,
+0x05, 0x27, 0xF0, 0xE4, 0xFF, 0x12, 0x4E, 0x89, 0x7F, 0x03, 0x02, 0x78, 0x2E, 0x90, 0x8A, 0xDA,
+0x12, 0x43, 0x6B, 0x12, 0x24, 0x62, 0xFF, 0x54, 0x02, 0xFE, 0x90, 0x8B, 0x2C, 0xE0, 0x54, 0xFD,
+0x4E, 0xFE, 0xF0, 0xEF, 0x54, 0x01, 0xFF, 0xEE, 0x54, 0xFE, 0x4F, 0xFF, 0xF0, 0x12, 0x24, 0x62,
+0xFE, 0x54, 0x08, 0xFD, 0xEF, 0x54, 0xF7, 0x4D, 0xFF, 0x90, 0x8B, 0x2C, 0xF0, 0xEE, 0x54, 0x10,
+0xFE, 0xEF, 0x54, 0xEF, 0x4E, 0xFF, 0xF0, 0x12, 0x24, 0x62, 0xFE, 0x54, 0x40, 0xFD, 0xEF, 0x54,
+0xBF, 0x4D, 0xFF, 0x90, 0x8B, 0x2C, 0xF0, 0xEE, 0x54, 0x04, 0xFE, 0xEF, 0x54, 0xFB, 0x4E, 0xF0,
+0x20, 0xE0, 0x02, 0xE1, 0xE2, 0x90, 0x8A, 0xDD, 0x74, 0x31, 0xF0, 0x90, 0x8B, 0x2C, 0xE0, 0x13,
+0x13, 0x54, 0x3F, 0x20, 0xE0, 0x0B, 0xE4, 0x90, 0x8B, 0x2E, 0xF0, 0x7D, 0x40, 0xFF, 0x12, 0x31,
+0x2C, 0x90, 0x8B, 0x2C, 0xE0, 0xFD, 0x13, 0x13, 0x13, 0x54, 0x1F, 0x30, 0xE0, 0x07, 0x90, 0x8A,
+0xDD, 0xE0, 0x44, 0x02, 0xF0, 0xED, 0xC4, 0x54, 0x0F, 0x30, 0xE0, 0x07, 0x90, 0x8A, 0xDD, 0xE0,
+0x44, 0x04, 0xF0, 0x90, 0x8A, 0xDD, 0xE0, 0x54, 0x06, 0x60, 0x0C, 0x90, 0x01, 0x3E, 0x74, 0x03,
+0xF0, 0xFD, 0x7F, 0x02, 0x12, 0x31, 0xB7, 0x90, 0x8A, 0xDD, 0xE0, 0x90, 0x05, 0x27, 0xF0, 0x90,
+0x8B, 0x2C, 0xE0, 0xFF, 0xC4, 0x13, 0x13, 0x54, 0x03, 0x30, 0xE0, 0x0D, 0xA3, 0xE0, 0x64, 0x06,
+0x60, 0x2C, 0x7F, 0x06, 0x12, 0x65, 0x82, 0x80, 0x25, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x06, 0x1B,
+0x7F, 0x01, 0x12, 0x65, 0x82, 0xE4, 0xFF, 0x12, 0x4D, 0xE0, 0xEF, 0x60, 0x09, 0x7D, 0x01, 0xAF,
+0x23, 0x12, 0x45, 0xA2, 0x80, 0x05, 0x12, 0x4E, 0x56, 0x80, 0x03, 0x12, 0x7D, 0xC1, 0x7F, 0x01,
+0x80, 0x4C, 0x90, 0x8A, 0xDD, 0x74, 0x01, 0xF0, 0x90, 0x05, 0x27, 0xF0, 0x7D, 0x03, 0x7F, 0x02,
+0x12, 0x31, 0x49, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x06, 0x02, 0x80, 0x1B, 0x90, 0x8B, 0x2D, 0xE0,
+0xB4, 0x04, 0x02, 0x80, 0x07, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x05, 0x04, 0xE4, 0xFF, 0x80, 0x14,
+0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x03, 0x04, 0x7F, 0x01, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4,
+0x02, 0x05, 0x7F, 0x01, 0x12, 0x65, 0x82, 0x11, 0x35, 0x12, 0x4A, 0xFC, 0x7F, 0x03, 0x11, 0x42,
+0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x90, 0x8B, 0x31, 0xE0, 0xB4, 0x01, 0x05, 0xE4, 0xF0, 0x12, 0x48,
+0xFE, 0x22, 0xAD, 0x07, 0xEF, 0x64, 0x01, 0x60, 0x04, 0xEF, 0xB4, 0x03, 0x15, 0x90, 0x8B, 0x32,
+0xE0, 0x54, 0xFE, 0xF0, 0x54, 0xFB, 0xF0, 0xE4, 0xA3, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0,
+0xA3, 0xF0, 0xED, 0x64, 0x02, 0x60, 0x04, 0xED, 0xB4, 0x03, 0x15, 0x90, 0x8B, 0x2C, 0xE0, 0x54,
+0xFE, 0xF0, 0x54, 0xFB, 0xF0, 0xE4, 0xA3, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0,
+0x22, 0x12, 0x24, 0x62, 0x90, 0x8B, 0x38, 0xF0, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0,
+0x90, 0x8A, 0xFD, 0xE0, 0x90, 0x8A, 0xE8, 0xF0, 0x90, 0x8A, 0xFE, 0xE0, 0xFF, 0xA3, 0xE0, 0x90,
+0x8A, 0xE9, 0xCF, 0xF0, 0xA3, 0xEF, 0xF0, 0xE4, 0x90, 0x8A, 0xE4, 0xF0, 0x90, 0x8A, 0xE4, 0xE0,
+0xFF, 0x24, 0x00, 0xF5, 0x82, 0xE4, 0x34, 0x8B, 0xF5, 0x83, 0xE0, 0xFE, 0x74, 0xEB, 0x2F, 0xF5,
+0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xEE, 0xF0, 0x90, 0x8A, 0xE4, 0xE0, 0x04, 0xF0, 0xE0, 0xB4,
+0x04, 0xDA, 0x90, 0x8A, 0xE8, 0xE0, 0x12, 0x43, 0x94, 0x78, 0xF8, 0x00, 0x7A, 0x6B, 0x01, 0x79,
+0x01, 0x02, 0x79, 0x01, 0x03, 0x79, 0x01, 0x04, 0x7A, 0x6B, 0x05, 0x7A, 0x35, 0x80, 0x7A, 0x4E,
+0x81, 0x7A, 0x6B, 0x82, 0x00, 0x00, 0x7A, 0x67, 0x90, 0x8A, 0xEE, 0xE0, 0xFF, 0x51, 0x72, 0x41,
+0x6B, 0x90, 0x8A, 0xE8, 0xE0, 0xFF, 0xB4, 0x02, 0x08, 0x90, 0x8A, 0xE5, 0x74, 0x01, 0xF0, 0x80,
+0x0F, 0xEF, 0x90, 0x8A, 0xE5, 0xB4, 0x03, 0x05, 0x74, 0x02, 0xF0, 0x80, 0x03, 0x74, 0x04, 0xF0,
+0xC3, 0x90, 0x8A, 0xE9, 0xE0, 0x94, 0x08, 0x50, 0x78, 0xE4, 0x90, 0x8A, 0xE4, 0xF0, 0x90, 0x8A,
+0xE5, 0xE0, 0xFF, 0x90, 0x8A, 0xE4, 0xE0, 0xC3, 0x9F, 0x40, 0x02, 0x41, 0x6B, 0x90, 0x8A, 0xE9,
+0xE0, 0xFE, 0xA3, 0xE0, 0xFF, 0xC3, 0xEE, 0x94, 0x01, 0x90, 0x8A, 0xE4, 0xE0, 0x50, 0x1F, 0xFE,
+0x2F, 0xFF, 0xEE, 0xFD, 0xC3, 0x74, 0x03, 0x9D, 0xFD, 0xE4, 0x94, 0x00, 0xFC, 0x74, 0xEB, 0x2D,
+0xF5, 0x82, 0x74, 0x8A, 0x3C, 0xF5, 0x83, 0xE0, 0xFD, 0x12, 0x51, 0x88, 0x80, 0x2B, 0xFF, 0xFD,
+0xC3, 0x74, 0x03, 0x9D, 0xFD, 0xE4, 0x94, 0x00, 0xFC, 0x74, 0xEB, 0x2D, 0xF5, 0x82, 0x74, 0x8A,
+0x3C, 0xF5, 0x83, 0xE0, 0xFE, 0xEF, 0xFD, 0x90, 0x8A, 0xEA, 0xE0, 0x2D, 0xFD, 0x90, 0x8A, 0xE9,
+0xE0, 0x34, 0x00, 0x8D, 0x82, 0xF5, 0x83, 0xEE, 0xF0, 0x90, 0x8A, 0xE4, 0xE0, 0x04, 0xF0, 0x80,
+0x8D, 0xC3, 0x90, 0x8A, 0xE9, 0xE0, 0x94, 0x10, 0x40, 0x02, 0x41, 0x6B, 0x90, 0x8A, 0xE8, 0xE0,
+0x64, 0x04, 0x60, 0x02, 0x41, 0x6B, 0x90, 0x8A, 0xEC, 0xE0, 0xFF, 0xE4, 0xFC, 0xFD, 0xFE, 0x78,
+0x10, 0x12, 0x24, 0xF5, 0xC0, 0x04, 0xC0, 0x05, 0xC0, 0x06, 0xC0, 0x07, 0x90, 0x8A, 0xEB, 0xE0,
+0xFF, 0xE4, 0xFC, 0xFD, 0xFE, 0x78, 0x18, 0x12, 0x24, 0xF5, 0xD0, 0x03, 0xD0, 0x02, 0xD0, 0x01,
+0xD0, 0x00, 0x12, 0x43, 0x46, 0xC0, 0x04, 0xC0, 0x05, 0xC0, 0x06, 0xC0, 0x07, 0x90, 0x8A, 0xED,
+0xE0, 0xFF, 0xE4, 0xFC, 0xFD, 0xFE, 0x78, 0x08, 0x12, 0x24, 0xF5, 0xD0, 0x03, 0xD0, 0x02, 0xD0,
+0x01, 0xD0, 0x00, 0x12, 0x43, 0x46, 0xA8, 0x04, 0xA9, 0x05, 0xAA, 0x06, 0xAB, 0x07, 0xA3, 0xE0,
+0xFF, 0xE4, 0xFC, 0xFD, 0xFE, 0x12, 0x43, 0x46, 0xA3, 0x12, 0x25, 0x08, 0x90, 0x8A, 0xEF, 0x12,
+0x43, 0x53, 0x90, 0x80, 0x96, 0x12, 0x25, 0x08, 0x90, 0x8A, 0xE9, 0xE0, 0xFE, 0xA3, 0xE0, 0xFF,
+0x12, 0x2B, 0x08, 0x80, 0x36, 0x90, 0x8A, 0xED, 0xE0, 0xFE, 0xA3, 0xE0, 0x24, 0x00, 0xFF, 0xE4,
+0x3E, 0xFE, 0x90, 0x8A, 0xE6, 0xF0, 0xA3, 0xEF, 0xF0, 0x12, 0x32, 0x15, 0x80, 0x1D, 0x90, 0x8A,
+0xED, 0xE0, 0xFE, 0xA3, 0xE0, 0x24, 0x00, 0xFF, 0xE4, 0x3E, 0xFE, 0x90, 0x8A, 0xE6, 0xF0, 0xA3,
+0xEF, 0xF0, 0x12, 0x31, 0x82, 0x80, 0x04, 0x7F, 0x00, 0x80, 0x02, 0x7F, 0x01, 0xD0, 0xD0, 0x92,
+0xAF, 0x22, 0x8F, 0x0F, 0xE4, 0x90, 0x8A, 0xF3, 0xF0, 0xE5, 0x0F, 0x14, 0xFE, 0x90, 0x8A, 0xF3,
+0xE0, 0xFF, 0xC3, 0x9E, 0x50, 0x0E, 0xEF, 0x04, 0xFD, 0x12, 0x2D, 0x4D, 0x90, 0x8A, 0xF3, 0xE0,
+0x04, 0xF0, 0x80, 0xE5, 0xE5, 0x0F, 0x14, 0xFF, 0x7D, 0xFF, 0x12, 0x2D, 0x4D, 0x90, 0x8A, 0xF3,
+0xE5, 0x0F, 0xF0, 0x90, 0x8A, 0xF3, 0xE0, 0xC3, 0x94, 0xFF, 0x50, 0x0F, 0xE0, 0xFF, 0x04, 0xFD,
+0x12, 0x2D, 0x4D, 0x90, 0x8A, 0xF3, 0xE0, 0x04, 0xF0, 0x80, 0xE8, 0xAD, 0x0F, 0x7F, 0xFF, 0x02,
+0x2D, 0x4D, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0xE4, 0x90, 0x8A, 0xDD, 0xF0, 0xA3, 0x74,
+0x04, 0xF0, 0xA3, 0xE4, 0xF0, 0x90, 0x8A, 0xE2, 0xF0, 0xA3, 0xF0, 0x90, 0x02, 0x09, 0xE0, 0x90,
+0x8A, 0xE1, 0xF0, 0x12, 0x24, 0x62, 0xFF, 0x90, 0x8A, 0xE1, 0xE0, 0x2F, 0x90, 0x8A, 0xE0, 0xF0,
+0x30, 0xE0, 0x0B, 0x90, 0x8A, 0xDB, 0xE4, 0xF0, 0xA3, 0x74, 0x80, 0xF0, 0x80, 0x07, 0xE4, 0x90,
+0x8A, 0xDB, 0xF0, 0xA3, 0xF0, 0x90, 0x8A, 0xE0, 0xE0, 0xC3, 0x13, 0x90, 0xFD, 0x10, 0xF0, 0x90,
+0x8A, 0xDD, 0xE0, 0x24, 0x20, 0xF0, 0x90, 0x8A, 0xDB, 0xA3, 0xE0, 0xFD, 0xA3, 0xE0, 0xFC, 0x2D,
+0xFF, 0x24, 0x01, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x90, 0x8A, 0xFD, 0xF0, 0x74,
+0x02, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0xFE, 0xEC, 0x2D, 0x24, 0x03, 0xF5,
+0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x24, 0x00, 0xFF, 0xE4, 0x3E, 0x90, 0x8A, 0xFE, 0xF0,
+0xA3, 0xEF, 0xF0, 0x90, 0x8A, 0xDA, 0x74, 0x04, 0xF0, 0x90, 0x8A, 0xDB, 0xA3, 0xE0, 0xFF, 0xA3,
+0xE0, 0x2F, 0xFF, 0x90, 0x8A, 0xDA, 0xE0, 0xFE, 0x2F, 0x24, 0x00, 0xF5, 0x82, 0xE4, 0x34, 0xFC,
+0xF5, 0x83, 0xE0, 0xFF, 0x74, 0xFC, 0x2E, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xEF, 0xF0,
+0x90, 0x8A, 0xDA, 0xE0, 0x04, 0xF0, 0xE0, 0xB4, 0x08, 0xCF, 0x11, 0x89, 0xEF, 0x70, 0x45, 0x90,
+0x01, 0xC3, 0xE0, 0x60, 0x2B, 0xC3, 0x90, 0x8A, 0xE3, 0xE0, 0x94, 0xE8, 0x90, 0x8A, 0xE2, 0xE0,
+0x94, 0x03, 0x40, 0x09, 0x90, 0x01, 0xC6, 0xE0, 0x44, 0x10, 0xF0, 0x80, 0x79, 0x90, 0x8A, 0xE2,
+0xE4, 0x75, 0xF0, 0x01, 0x12, 0x42, 0x81, 0x7F, 0x0A, 0x7E, 0x00, 0x12, 0x32, 0x15, 0x80, 0xCF,
+0x90, 0x01, 0xC6, 0xE0, 0x90, 0x01, 0xC3, 0x30, 0xE2, 0x05, 0x74, 0xFE, 0xF0, 0x80, 0x57, 0x74,
+0xFF, 0xF0, 0x80, 0x52, 0x90, 0x8A, 0xDD, 0xE0, 0xB4, 0x78, 0x2E, 0xE4, 0xF0, 0x90, 0x8A, 0xE0,
+0xE0, 0x04, 0xF0, 0x90, 0x8A, 0xDB, 0xE0, 0x70, 0x04, 0xA3, 0xE0, 0x64, 0x80, 0x90, 0x8A, 0xDB,
+0x70, 0x05, 0xF0, 0xA3, 0xF0, 0x80, 0x06, 0xE4, 0xF0, 0xA3, 0x74, 0x80, 0xF0, 0x90, 0x8A, 0xE0,
+0xE0, 0xC3, 0x13, 0x90, 0xFD, 0x10, 0xF0, 0x80, 0x07, 0x90, 0x8A, 0xDD, 0xE0, 0x24, 0x08, 0xF0,
+0x90, 0x8A, 0xDE, 0x74, 0xFF, 0xF5, 0xF0, 0x12, 0x42, 0x81, 0x90, 0x8A, 0xDE, 0xE0, 0x70, 0x02,
+0xA3, 0xE0, 0x60, 0x02, 0x61, 0x16, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x12, 0x24, 0x62, 0x90, 0x8B,
+0x05, 0xF0, 0x90, 0x00, 0x01, 0x12, 0x42, 0x20, 0x90, 0x8B, 0x06, 0xF0, 0x22, 0xE4, 0xF5, 0x61,
+0x22, 0x91, 0x4A, 0x90, 0x8B, 0x33, 0x74, 0x02, 0xF0, 0x22, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0,
+0x7F, 0x78, 0x7E, 0x08, 0x12, 0x22, 0x65, 0x90, 0x8B, 0x1C, 0x12, 0x25, 0x08, 0x7F, 0x04, 0x7E,
+0x0C, 0x12, 0x22, 0x65, 0x90, 0x8B, 0x20, 0x12, 0x25, 0x08, 0x7F, 0x00, 0x7E, 0x08, 0x12, 0x22,
+0x65, 0x90, 0x8B, 0x24, 0x12, 0x25, 0x08, 0x90, 0x8B, 0x09, 0xE0, 0x90, 0x8B, 0x1C, 0xB4, 0x01,
+0x0D, 0x12, 0x43, 0x53, 0xEF, 0x54, 0xC7, 0xFF, 0xED, 0x54, 0xC7, 0xFD, 0x80, 0x07, 0x12, 0x43,
+0x53, 0xEF, 0x54, 0xC7, 0xFF, 0xEC, 0x90, 0x80, 0x96, 0x12, 0x25, 0x08, 0x7F, 0x78, 0x7E, 0x08,
+0x12, 0x2B, 0x08, 0x90, 0x8B, 0x20, 0x12, 0x43, 0x53, 0xEF, 0x54, 0x0F, 0xFF, 0xEC, 0x90, 0x80,
+0x96, 0x12, 0x25, 0x08, 0x7F, 0x04, 0x7E, 0x0C, 0x12, 0x2B, 0x08, 0x90, 0x8B, 0x24, 0x12, 0x43,
+0x53, 0xEF, 0x44, 0x02, 0xFF, 0xEC, 0x90, 0x80, 0x96, 0x12, 0x25, 0x08, 0x7F, 0x00, 0x7E, 0x08,
+0x12, 0x2B, 0x08, 0x7F, 0x70, 0x7E, 0x0E, 0x12, 0x22, 0x65, 0x90, 0x8B, 0x28, 0x12, 0x25, 0x08,
+0x90, 0x80, 0x96, 0x12, 0x25, 0x14, 0x00, 0x1B, 0x25, 0xA0, 0x7F, 0x70, 0x7E, 0x0E, 0x12, 0x2B,
+0x08, 0x90, 0x80, 0x68, 0x12, 0x25, 0x14, 0x00, 0x00, 0x00, 0x00, 0xE4, 0xFD, 0xFF, 0x12, 0x30,
+0x2C, 0x90, 0x8B, 0x09, 0xE0, 0xB4, 0x01, 0x11, 0x90, 0x80, 0x68, 0x12, 0x25, 0x14, 0x00, 0x00,
+0x00, 0x00, 0xE4, 0xFD, 0x7F, 0x01, 0x12, 0x30, 0x2C, 0x90, 0x00, 0x11, 0xE0, 0x54, 0xF6, 0xF0,
+0x02, 0x52, 0x0E, 0x91, 0x50, 0x90, 0x8B, 0x33, 0x74, 0x02, 0xF0, 0x22, 0x90, 0x05, 0x22, 0x74,
+0xFF, 0xF0, 0x90, 0x8B, 0x33, 0x74, 0x04, 0xF0, 0x22, 0xB1, 0x42, 0x90, 0x8B, 0x33, 0x74, 0x04,
+0xF0, 0x22, 0x90, 0x00, 0x11, 0xE0, 0x44, 0x09, 0xF0, 0x12, 0x52, 0x0E, 0x90, 0x8B, 0x1C, 0x12,
+0x43, 0x53, 0x90, 0x80, 0x96, 0x12, 0x25, 0x08, 0x7F, 0x78, 0x7E, 0x08, 0x12, 0x2B, 0x08, 0x90,
+0x8B, 0x20, 0x12, 0x43, 0x53, 0x90, 0x80, 0x96, 0x12, 0x25, 0x08, 0x7F, 0x04, 0x7E, 0x0C, 0x12,
+0x2B, 0x08, 0x90, 0x8B, 0x24, 0x12, 0x43, 0x53, 0x90, 0x80, 0x96, 0x12, 0x25, 0x08, 0x7F, 0x00,
+0x7E, 0x08, 0x12, 0x2B, 0x08, 0x90, 0x8B, 0x28, 0x12, 0x43, 0x53, 0x90, 0x80, 0x96, 0x12, 0x25,
+0x08, 0x7F, 0x70, 0x7E, 0x0E, 0x12, 0x2B, 0x08, 0x90, 0x80, 0x68, 0x12, 0x25, 0x14, 0x00, 0x03,
+0x2D, 0x95, 0xE4, 0xFD, 0xFF, 0x12, 0x30, 0x2C, 0x90, 0x8B, 0x09, 0xE0, 0xB4, 0x01, 0x11, 0x90,
+0x80, 0x68, 0x12, 0x25, 0x14, 0x00, 0x03, 0x2D, 0x95, 0xE4, 0xFD, 0x7F, 0x01, 0x12, 0x30, 0x2C,
+0x22, 0x90, 0x8B, 0x2D, 0xE0, 0x64, 0x06, 0x60, 0x3C, 0xE5, 0x22, 0x54, 0x0F, 0x14, 0x60, 0x2E,
+0x14, 0x60, 0x1E, 0x24, 0xFE, 0x60, 0x0E, 0x24, 0xF8, 0x70, 0x2A, 0xE4, 0x90, 0x8B, 0x2D, 0xF0,
+0x90, 0x05, 0x22, 0xF0, 0x22, 0x90, 0x8B, 0x2D, 0x74, 0x01, 0xF0, 0x90, 0x05, 0x22, 0xE4, 0xF0,
+0x22, 0x90, 0x8B, 0x2D, 0x74, 0x03, 0xF0, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x22, 0x90, 0x01,
+0xC6, 0xE0, 0x44, 0x08, 0xF0, 0x22, 0xAE, 0x07, 0xE4, 0xFF, 0x12, 0x4D, 0xE0, 0xEF, 0x60, 0x18,
+0x90, 0x8B, 0x2C, 0xE0, 0xC4, 0x13, 0x13, 0x54, 0x03, 0x20, 0xE0, 0x0C, 0xAF, 0x06, 0x7D, 0x01,
+0x12, 0x45, 0xA2, 0xB1, 0xC1, 0x7F, 0x01, 0x22, 0x7F, 0x00, 0x22, 0x90, 0x01, 0x57, 0xE0, 0x60,
+0x3C, 0x90, 0x01, 0x57, 0xE4, 0xF0, 0x90, 0x01, 0x3C, 0x74, 0x02, 0xF0, 0x90, 0x8B, 0x1B, 0xE0,
+0x60, 0x07, 0xE4, 0xF0, 0x53, 0x25, 0xFD, 0x80, 0x24, 0x90, 0x8B, 0x0C, 0xE0, 0x04, 0xF0, 0x53,
+0x25, 0xEF, 0x90, 0x8B, 0x10, 0xE0, 0xFF, 0x90, 0x8B, 0x0C, 0xE0, 0xD3, 0x9F, 0x40, 0x0E, 0xE5,
+0x21, 0xB4, 0x01, 0x09, 0x90, 0x8B, 0x0D, 0xE0, 0x70, 0x03, 0xE0, 0x04, 0xF0, 0x90, 0x01, 0x5B,
+0xE0, 0x60, 0x10, 0x90, 0x01, 0x5B, 0xE4, 0xF0, 0x90, 0x01, 0x3C, 0x74, 0x04, 0xF0, 0xE4, 0x90,
+0x8B, 0x18, 0xF0, 0x90, 0x01, 0x5F, 0xE0, 0x60, 0x10, 0x90, 0x01, 0x5F, 0xE4, 0xF0, 0x90, 0x01,
+0x3C, 0x74, 0x08, 0xF0, 0xE4, 0x90, 0x8B, 0x17, 0xF0, 0x22, 0xE4, 0x90, 0x8B, 0x4F, 0xF0, 0xA3,
+0xF0, 0x90, 0x05, 0xF8, 0xE0, 0x70, 0x0F, 0xA3, 0xE0, 0x70, 0x0B, 0xA3, 0xE0, 0x70, 0x07, 0xA3,
+0xE0, 0x70, 0x03, 0x7F, 0x01, 0x22, 0xD3, 0x90, 0x8B, 0x50, 0xE0, 0x94, 0xE8, 0x90, 0x8B, 0x4F,
+0xE0, 0x94, 0x03, 0x40, 0x03, 0x7F, 0x00, 0x22, 0x7F, 0x32, 0x7E, 0x00, 0x12, 0x32, 0x15, 0x90,
+0x8B, 0x4F, 0xE4, 0x75, 0xF0, 0x01, 0x12, 0x42, 0x81, 0x80, 0xC6, 0x00, 0xFB, 0x98};
+
+// =================== v88 UMC B Cut P2PPS with CCX report C2H 2012-12-05 =====================
+u8 Rtl8192CUFwUMCBCutImgArray[UMCBCutImgArrayLength] = {
+0xC2, 0x88, 0x02, 0x05, 0x58, 0x00, 0x02, 0x00, 0x12, 0x05, 0x17, 0x10, 0xC0, 0x3E, 0x01, 0x00,
+0x94, 0x18, 0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+0x02, 0x46, 0x30, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+0x00, 0x00, 0x00, 0x02, 0x60, 0xF3, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+0x00, 0x00, 0x00, 0x02, 0x67, 0x5B, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02, 0x4B, 0x87, 0x00, 0x00,
+0x05, 0x04, 0x03, 0x02, 0x00, 0x03, 0x06, 0x05, 0x04, 0x03, 0x00, 0x04, 0x06, 0x05, 0x04, 0x02,
+0x00, 0x04, 0x08, 0x07, 0x06, 0x04, 0x00, 0x06, 0x0A, 0x09, 0x08, 0x06, 0x00, 0x08, 0x0A, 0x09,
+0x08, 0x04, 0x00, 0x08, 0x0A, 0x09, 0x08, 0x02, 0x00, 0x08, 0x0A, 0x09, 0x08, 0x00, 0x00, 0x08,
+0x12, 0x11, 0x10, 0x08, 0x00, 0x10, 0x1A, 0x19, 0x18, 0x10, 0x00, 0x18, 0x22, 0x21, 0x20, 0x18,
+0x00, 0x20, 0x22, 0x21, 0x20, 0x10, 0x00, 0x20, 0x22, 0x21, 0x20, 0x08, 0x00, 0x20, 0x22, 0x21,
+0x1C, 0x08, 0x00, 0x20, 0x22, 0x21, 0x14, 0x08, 0x00, 0x20, 0x22, 0x20, 0x18, 0x08, 0x00, 0x20,
+0x31, 0x30, 0x20, 0x10, 0x00, 0x30, 0x31, 0x30, 0x18, 0x00, 0x00, 0x30, 0x31, 0x2F, 0x10, 0x10,
+0x00, 0x30, 0x31, 0x2C, 0x10, 0x10, 0x00, 0x30, 0x31, 0x28, 0x10, 0x00, 0x00, 0x30, 0x31, 0x20,
+0x10, 0x00, 0x00, 0x30, 0x31, 0x10, 0x10, 0x00, 0x00, 0x30, 0x04, 0x04, 0x04, 0x05, 0x04, 0x04,
+0x05, 0x07, 0x07, 0x07, 0x08, 0x0A, 0x04, 0x04, 0x04, 0x04, 0x06, 0x0A, 0x0B, 0x0D, 0x05, 0x05,
+0x07, 0x07, 0x08, 0x0B, 0x0D, 0x0F, 0x04, 0x04, 0x04, 0x05, 0x07, 0x07, 0x09, 0x09, 0x0C, 0x0E,
+0x10, 0x12, 0x06, 0x07, 0x09, 0x0A, 0x0C, 0x0E, 0x11, 0x13, 0x09, 0x09, 0x09, 0x09, 0x0C, 0x0E,
+0x11, 0x13, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x24, 0x26, 0x2A, 0x18, 0x1A,
+0x1D, 0x1F, 0x21, 0x27, 0x29, 0x2A, 0x00, 0x00, 0x00, 0x1F, 0x23, 0x28, 0x2A, 0x2C, 0x00, 0x04,
+0x00, 0x04, 0x00, 0x08, 0x00, 0x10, 0x00, 0x18, 0x00, 0x24, 0x00, 0x30, 0x00, 0x48, 0x00, 0x60,
+0x00, 0x90, 0x00, 0xC0, 0x00, 0xD8, 0x00, 0x50, 0x00, 0x78, 0x00, 0xA0, 0x00, 0xC8, 0x01, 0x40,
+0x01, 0x90, 0x01, 0xE0, 0x02, 0x30, 0x01, 0x2C, 0x01, 0x40, 0x01, 0xE0, 0x02, 0xD0, 0x03, 0xE8,
+0x04, 0xB0, 0x06, 0x40, 0x07, 0xD0, 0x00, 0x02, 0x00, 0x02, 0x00, 0x04, 0x00, 0x08, 0x00, 0x0C,
+0x00, 0x12, 0x00, 0x18, 0x00, 0x24, 0x00, 0x30, 0x00, 0x48, 0x00, 0x60, 0x00, 0x6C, 0x00, 0x28,
+0x00, 0x3C, 0x00, 0x50, 0x00, 0x64, 0x00, 0xA0, 0x00, 0xC8, 0x00, 0xF0, 0x01, 0x18, 0x00, 0x64,
+0x00, 0xA0, 0x00, 0xF0, 0x01, 0x68, 0x01, 0xF4, 0x02, 0x58, 0x03, 0x20, 0x03, 0xE8, 0x02, 0x02,
+0x02, 0x02, 0x02, 0x02, 0x03, 0x03, 0x04, 0x04, 0x05, 0x07, 0x02, 0x03, 0x04, 0x0A, 0x0C, 0x0E,
+0x10, 0x12, 0x05, 0x07, 0x07, 0x08, 0x0B, 0x12, 0x24, 0x3C, 0x01, 0x01, 0x01, 0x01, 0x01, 0x02,
+0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x05, 0x06,
+0x07, 0x08, 0x09, 0x0A, 0x0B, 0x0C, 0x20, 0x1E, 0x1C, 0x18, 0x10, 0x18, 0x00, 0x00, 0x00, 0x00,
+0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+0xBB, 0x01, 0x0C, 0xE5, 0x82, 0x29, 0xF5, 0x82, 0xE5, 0x83, 0x3A, 0xF5, 0x83, 0xE0, 0x22, 0x50,
+0x06, 0xE9, 0x25, 0x82, 0xF8, 0xE6, 0x22, 0xBB, 0xFE, 0x06, 0xE9, 0x25, 0x82, 0xF8, 0xE2, 0x22,
+0xE5, 0x82, 0x29, 0xF5, 0x82, 0xE5, 0x83, 0x3A, 0xF5, 0x83, 0xE4, 0x93, 0x22, 0xBB, 0x01, 0x06,
+0x89, 0x82, 0x8A, 0x83, 0xF0, 0x22, 0x50, 0x02, 0xF7, 0x22, 0xBB, 0xFE, 0x01, 0xF3, 0x22, 0xF8,
+0xBB, 0x01, 0x0D, 0xE5, 0x82, 0x29, 0xF5, 0x82, 0xE5, 0x83, 0x3A, 0xF5, 0x83, 0xE8, 0xF0, 0x22,
+0x50, 0x06, 0xE9, 0x25, 0x82, 0xC8, 0xF6, 0x22, 0xBB, 0xFE, 0x05, 0xE9, 0x25, 0x82, 0xC8, 0xF2,
+0x22, 0xC5, 0xF0, 0xF8, 0xA3, 0xE0, 0x28, 0xF0, 0xC5, 0xF0, 0xF8, 0xE5, 0x82, 0x15, 0x82, 0x70,
+0x02, 0x15, 0x83, 0xE0, 0x38, 0xF0, 0x22, 0xBB, 0x01, 0x0A, 0x89, 0x82, 0x8A, 0x83, 0xE0, 0xF5,
+0xF0, 0xA3, 0xE0, 0x22, 0x50, 0x06, 0x87, 0xF0, 0x09, 0xE7, 0x19, 0x22, 0xBB, 0xFE, 0x07, 0xE3,
+0xF5, 0xF0, 0x09, 0xE3, 0x19, 0x22, 0x89, 0x82, 0x8A, 0x83, 0xE4, 0x93, 0xF5, 0xF0, 0x74, 0x01,
+0x93, 0x22, 0xBB, 0x01, 0x10, 0xE5, 0x82, 0x29, 0xF5, 0x82, 0xE5, 0x83, 0x3A, 0xF5, 0x83, 0xE0,
+0xF5, 0xF0, 0xA3, 0xE0, 0x22, 0x50, 0x09, 0xE9, 0x25, 0x82, 0xF8, 0x86, 0xF0, 0x08, 0xE6, 0x22,
+0xBB, 0xFE, 0x0A, 0xE9, 0x25, 0x82, 0xF8, 0xE2, 0xF5, 0xF0, 0x08, 0xE2, 0x22, 0xE5, 0x83, 0x2A,
+0xF5, 0x83, 0xE9, 0x93, 0xF5, 0xF0, 0xA3, 0xE9, 0x93, 0x22, 0xBB, 0x01, 0x0A, 0x89, 0x82, 0x8A,
+0x83, 0xF0, 0xE5, 0xF0, 0xA3, 0xF0, 0x22, 0x50, 0x06, 0xF7, 0x09, 0xA7, 0xF0, 0x19, 0x22, 0xBB,
+0xFE, 0x06, 0xF3, 0xE5, 0xF0, 0x09, 0xF3, 0x19, 0x22, 0xF8, 0xBB, 0x01, 0x11, 0xE5, 0x82, 0x29,
+0xF5, 0x82, 0xE5, 0x83, 0x3A, 0xF5, 0x83, 0xE8, 0xF0, 0xE5, 0xF0, 0xA3, 0xF0, 0x22, 0x50, 0x09,
+0xE9, 0x25, 0x82, 0xC8, 0xF6, 0x08, 0xA6, 0xF0, 0x22, 0xBB, 0xFE, 0x09, 0xE9, 0x25, 0x82, 0xC8,
+0xF2, 0xE5, 0xF0, 0x08, 0xF2, 0x22, 0xEF, 0x4B, 0xFF, 0xEE, 0x4A, 0xFE, 0xED, 0x49, 0xFD, 0xEC,
+0x48, 0xFC, 0x22, 0xE0, 0xFC, 0xA3, 0xE0, 0xFD, 0xA3, 0xE0, 0xFE, 0xA3, 0xE0, 0xFF, 0x22, 0xA4,
+0x25, 0x82, 0xF5, 0x82, 0xE5, 0xF0, 0x35, 0x83, 0xF5, 0x83, 0x22, 0xE0, 0xFB, 0xA3, 0xE0, 0xFA,
+0xA3, 0xE0, 0xF9, 0x22, 0xF8, 0xE0, 0xFB, 0xA3, 0xA3, 0xE0, 0xF9, 0x25, 0xF0, 0xF0, 0xE5, 0x82,
+0x15, 0x82, 0x70, 0x02, 0x15, 0x83, 0xE0, 0xFA, 0x38, 0xF0, 0x22, 0xEB, 0xF0, 0xA3, 0xEA, 0xF0,
+0xA3, 0xE9, 0xF0, 0x22, 0xD0, 0x83, 0xD0, 0x82, 0xF8, 0xE4, 0x93, 0x70, 0x12, 0x74, 0x01, 0x93,
+0x70, 0x0D, 0xA3, 0xA3, 0x93, 0xF8, 0x74, 0x01, 0x93, 0xF5, 0x82, 0x88, 0x83, 0xE4, 0x73, 0x74,
+0x02, 0x93, 0x68, 0x60, 0xEF, 0xA3, 0xA3, 0xA3, 0x80, 0xDF, 0xD0, 0x83, 0xD0, 0x82, 0xF8, 0xE4,
+0x93, 0x70, 0x12, 0x74, 0x01, 0x93, 0x70, 0x0D, 0xA3, 0xA3, 0x93, 0xF8, 0x74, 0x01, 0x93, 0xF5,
+0x82, 0x88, 0x83, 0xE4, 0x73, 0x74, 0x02, 0x93, 0xB5, 0xF0, 0x06, 0x74, 0x03, 0x93, 0x68, 0x60,
+0xE9, 0xA3, 0xA3, 0xA3, 0xA3, 0x80, 0xD8, 0xE4, 0x90, 0x8A, 0xC5, 0xF0, 0xE5, 0x24, 0x70, 0x03,
+0x02, 0x44, 0x9D, 0xE5, 0x21, 0x64, 0x01, 0x60, 0x03, 0x02, 0x44, 0x9D, 0xE5, 0x24, 0x14, 0x60,
+0x29, 0x24, 0xFD, 0x60, 0x25, 0x24, 0x02, 0x24, 0xFB, 0x50, 0x02, 0x80, 0x23, 0x90, 0x8B, 0x0B,
+0xE0, 0x14, 0xF0, 0xE0, 0x60, 0x04, 0xA3, 0xE0, 0x60, 0x16, 0x90, 0x8B, 0x0B, 0xE0, 0x70, 0x0A,
+0x90, 0x8B, 0x19, 0xE0, 0x90, 0x8B, 0x0B, 0xF0, 0x80, 0x00, 0x90, 0x8A, 0xC5, 0x74, 0x01, 0xF0,
+0x90, 0x8B, 0x2C, 0xE0, 0x30, 0xE0, 0x16, 0xA3, 0xE0, 0xB4, 0x06, 0x05, 0xE4, 0x90, 0x8A, 0xC5,
+0xF0, 0xE4, 0xFF, 0x12, 0x4D, 0xE0, 0xEF, 0x70, 0x04, 0x90, 0x8A, 0xC5, 0xF0, 0x90, 0x8A, 0xC5,
+0xE0, 0x60, 0x4A, 0x43, 0x25, 0x10, 0xE4, 0x90, 0x8B, 0x3D, 0xF0, 0x90, 0x8B, 0x0C, 0xE0, 0x75,
+0xF0, 0x03, 0xA4, 0xFF, 0x90, 0x8B, 0x15, 0xE0, 0x2F, 0x90, 0x8B, 0x3E, 0xF0, 0xE4, 0xFB, 0xFD,
+0x7F, 0x54, 0x7E, 0x01, 0x12, 0x4B, 0x6C, 0x90, 0x01, 0x57, 0x74, 0x05, 0xF0, 0xE5, 0x22, 0x54,
+0x0F, 0xC3, 0x94, 0x04, 0x50, 0x07, 0x7D, 0x01, 0x7F, 0x04, 0x12, 0x45, 0xA2, 0x90, 0x8B, 0x2C,
+0xE0, 0x30, 0xE0, 0x09, 0x12, 0x66, 0x20, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x22, 0xE4, 0xF5,
+0x25, 0xF5, 0x24, 0x75, 0x23, 0x0C, 0x75, 0x22, 0x0C, 0x90, 0x8B, 0x1A, 0xF0, 0x90, 0x8B, 0x18,
+0xF0, 0x90, 0x8B, 0x17, 0xF0, 0x90, 0x8B, 0x19, 0x04, 0xF0, 0x90, 0x8B, 0x0B, 0xF0, 0xE4, 0x90,
+0x8B, 0x1B, 0xF0, 0x90, 0x8B, 0x0D, 0xF0, 0x90, 0x8B, 0x15, 0x74, 0x05, 0xF0, 0xE4, 0x90, 0x8B,
+0x0C, 0xF0, 0x90, 0x8B, 0x13, 0xF0, 0xA3, 0x74, 0x03, 0xF0, 0x90, 0x8B, 0x10, 0xF0, 0xA3, 0x74,
+0x05, 0xF0, 0x90, 0x8B, 0x0F, 0x74, 0x14, 0xF0, 0x90, 0x8B, 0x16, 0x74, 0x05, 0xF0, 0xE4, 0x90,
+0x8B, 0x0E, 0xF0, 0x90, 0x8B, 0x0A, 0xF0, 0x90, 0x8B, 0x08, 0xF0, 0x90, 0x8B, 0x12, 0xF0, 0x22,
+0x7F, 0x00, 0x22, 0x02, 0x45, 0x03, 0x02, 0x45, 0x06, 0x8E, 0x64, 0x8F, 0x65, 0xAD, 0x65, 0xAC,
+0x64, 0xAF, 0x63, 0x12, 0x4A, 0x5B, 0xAF, 0x65, 0xAE, 0x64, 0x90, 0x04, 0x80, 0xE0, 0x54, 0x0F,
+0xFD, 0xAC, 0x07, 0x74, 0x11, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x44, 0x01,
+0xF0, 0x74, 0x11, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x54, 0xFB, 0xF0, 0xAC,
+0x07, 0x74, 0x16, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x44, 0xFA, 0xF0, 0x74,
+0x15, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x44, 0x1F, 0xF0, 0xAC, 0x07, 0x74,
+0x06, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x44, 0x0F, 0xF0, 0x90, 0x04, 0x53,
+0xE4, 0xF0, 0x90, 0x04, 0x52, 0xF0, 0x90, 0x04, 0x51, 0x74, 0xFF, 0xF0, 0x90, 0x04, 0x50, 0x74,
+0xFD, 0xF0, 0x74, 0x14, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x54, 0xC0, 0x4D,
+0xFD, 0x74, 0x14, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xED, 0xF0, 0x22, 0x7D, 0x01,
+0x7F, 0x0C, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x8F, 0x67, 0x8D, 0x68, 0xE5, 0x67, 0x54,
+0x0F, 0xFF, 0xE5, 0x22, 0x54, 0x0F, 0x6F, 0x60, 0x72, 0xE5, 0x67, 0x30, 0xE2, 0x30, 0xE5, 0x22,
+0x20, 0xE2, 0x05, 0x7F, 0x01, 0x12, 0x4A, 0xB2, 0xE5, 0x22, 0x30, 0xE3, 0x10, 0xE5, 0x67, 0x20,
+0xE3, 0x0B, 0x12, 0x49, 0xD5, 0xEF, 0x60, 0x53, 0x12, 0x4A, 0xCC, 0x80, 0x4E, 0xE5, 0x22, 0x20,
+0xE3, 0x49, 0xE5, 0x67, 0x30, 0xE3, 0x44, 0xAF, 0x68, 0x12, 0x4A, 0x7C, 0x80, 0x3D, 0xE5, 0x22,
+0x54, 0x0F, 0xFF, 0xBF, 0x0C, 0x0E, 0xE5, 0x67, 0x20, 0xE3, 0x09, 0x12, 0x49, 0xD5, 0xEF, 0x60,
+0x2A, 0x12, 0x4A, 0xCC, 0xE5, 0x22, 0x54, 0x0F, 0xFF, 0xBF, 0x04, 0x0E, 0xE5, 0x67, 0x20, 0xE2,
+0x09, 0x12, 0x49, 0x93, 0xEF, 0x60, 0x14, 0x12, 0x4A, 0x32, 0xE5, 0x22, 0x54, 0x0F, 0xFF, 0xBF,
+0x02, 0x09, 0x12, 0x45, 0x00, 0xEF, 0x60, 0x03, 0x12, 0x4B, 0x10, 0xD0, 0xD0, 0x92, 0xAF, 0x22,
+0x02, 0x46, 0x6E, 0x02, 0x51, 0x39, 0xE4, 0x93, 0xA3, 0xF8, 0xE4, 0x93, 0xA3, 0x40, 0x03, 0xF6,
+0x80, 0x01, 0xF2, 0x08, 0xDF, 0xF4, 0x80, 0x29, 0xE4, 0x93, 0xA3, 0xF8, 0x54, 0x07, 0x24, 0x0C,
+0xC8, 0xC3, 0x33, 0xC4, 0x54, 0x0F, 0x44, 0x20, 0xC8, 0x83, 0x40, 0x04, 0xF4, 0x56, 0x80, 0x01,
+0x46, 0xF6, 0xDF, 0xE4, 0x80, 0x0B, 0x01, 0x02, 0x04, 0x08, 0x10, 0x20, 0x40, 0x80, 0x90, 0x4B,
+0x23, 0xE4, 0x7E, 0x01, 0x93, 0x60, 0xBC, 0xA3, 0xFF, 0x54, 0x3F, 0x30, 0xE5, 0x09, 0x54, 0x1F,
+0xFE, 0xE4, 0x93, 0xA3, 0x60, 0x01, 0x0E, 0xCF, 0x54, 0xC0, 0x25, 0xE0, 0x60, 0xA8, 0x40, 0xB8,
+0xE4, 0x93, 0xA3, 0xFA, 0xE4, 0x93, 0xA3, 0xF8, 0xE4, 0x93, 0xA3, 0xC8, 0xC5, 0x82, 0xC8, 0xCA,
+0xC5, 0x83, 0xCA, 0xF0, 0xA3, 0xC8, 0xC5, 0x82, 0xC8, 0xCA, 0xC5, 0x83, 0xCA, 0xDF, 0xE9, 0xDE,
+0xE7, 0x80, 0xBE, 0xE5, 0x21, 0x64, 0x01, 0x70, 0x67, 0xE5, 0x24, 0x60, 0x63, 0xE5, 0x24, 0x64,
+0x02, 0x60, 0x06, 0xE5, 0x24, 0x64, 0x05, 0x70, 0x27, 0x90, 0x06, 0xAB, 0xE0, 0x90, 0x8B, 0x0B,
+0xF0, 0x90, 0x06, 0xAA, 0xE0, 0x90, 0x8B, 0x19, 0xF0, 0x90, 0x8B, 0x0B, 0xE0, 0x70, 0x07, 0x90,
+0x8B, 0x19, 0xE0, 0xFF, 0x80, 0x05, 0x90, 0x8B, 0x0B, 0xE0, 0xFF, 0x90, 0x8B, 0x0B, 0xEF, 0xF0,
+0x90, 0x8B, 0x0D, 0xE0, 0x60, 0x02, 0xE4, 0xF0, 0xE4, 0x90, 0x8B, 0x0C, 0xF0, 0x90, 0x05, 0x58,
+0x74, 0x03, 0xF0, 0x90, 0x01, 0x57, 0xE4, 0xF0, 0x90, 0x01, 0x3C, 0x74, 0x02, 0xF0, 0x53, 0x25,
+0xFD, 0x53, 0x25, 0xEF, 0xE5, 0x24, 0x14, 0x24, 0xFD, 0x50, 0x02, 0x80, 0x03, 0x12, 0x47, 0x8E,
+0x22, 0xEF, 0x64, 0x01, 0x70, 0x35, 0x7D, 0x78, 0x7F, 0x02, 0x12, 0x36, 0x75, 0x7D, 0x02, 0x7F,
+0x03, 0x12, 0x36, 0x75, 0x90, 0x01, 0x57, 0xE4, 0xF0, 0x90, 0x01, 0x3C, 0x74, 0x02, 0xF0, 0x12,
+0x45, 0x9E, 0x90, 0x8B, 0x2C, 0xE0, 0x30, 0xE0, 0x03, 0x12, 0x66, 0x20, 0x90, 0x06, 0x04, 0xE0,
+0x54, 0x7F, 0xF0, 0x90, 0x06, 0x0A, 0xE0, 0x54, 0xF8, 0xF0, 0x22, 0x90, 0x01, 0x36, 0x74, 0x7B,
+0xF0, 0xA3, 0x74, 0x02, 0xF0, 0x7D, 0x7B, 0xFF, 0x12, 0x36, 0xE6, 0x7D, 0x02, 0x7F, 0x03, 0x12,
+0x36, 0xE6, 0x90, 0x06, 0x04, 0xE0, 0x44, 0x80, 0xF0, 0x90, 0x06, 0x0A, 0xE0, 0x44, 0x07, 0xF0,
+0x12, 0x4B, 0x4F, 0xE5, 0x21, 0x20, 0xE0, 0x05, 0xE4, 0x90, 0x8B, 0x0D, 0xF0, 0x22, 0xE4, 0x90,
+0x8A, 0xC5, 0xF0, 0x90, 0x06, 0xA9, 0xE0, 0x90, 0x8A, 0xC5, 0xF0, 0xE0, 0x54, 0xC0, 0x70, 0x09,
+0x53, 0x25, 0xFE, 0x53, 0x25, 0xFD, 0x12, 0x4A, 0xFC, 0x90, 0x8A, 0xC5, 0xE0, 0x30, 0xE6, 0x15,
+0x43, 0x25, 0x01, 0x90, 0x8B, 0x1A, 0xE0, 0x64, 0x02, 0x60, 0x05, 0x12, 0x4A, 0x97, 0x80, 0x08,
+0x12, 0x49, 0x49, 0x80, 0x03, 0x53, 0x25, 0xFE, 0x90, 0x8A, 0xC5, 0xE0, 0x30, 0xE7, 0x27, 0x43,
+0x25, 0x02, 0xE4, 0x90, 0x8B, 0x3D, 0xF0, 0x90, 0x8B, 0x11, 0xE0, 0x90, 0x8B, 0x3E, 0xF0, 0xE4,
+0xFB, 0xFD, 0x7F, 0x54, 0x7E, 0x01, 0x12, 0x4B, 0x6C, 0x90, 0x01, 0x57, 0x74, 0x05, 0xF0, 0x90,
+0x8B, 0x1B, 0x74, 0x01, 0xF0, 0x22, 0x53, 0x25, 0xFD, 0x22, 0x90, 0x8A, 0xDE, 0x12, 0x43, 0x8B,
+0x12, 0x4B, 0x43, 0x90, 0x8A, 0xDE, 0x12, 0x43, 0x6B, 0x12, 0x29, 0xD9, 0xF5, 0x24, 0x14, 0x60,
+0x0E, 0x14, 0x60, 0x1F, 0x14, 0x60, 0x31, 0x24, 0x03, 0x70, 0x44, 0x7F, 0x01, 0x80, 0x3D, 0x90,
+0x8A, 0xDE, 0x12, 0x43, 0x6B, 0x90, 0x00, 0x02, 0x12, 0x42, 0x20, 0xFD, 0xE4, 0xFF, 0x12, 0x4A,
+0x07, 0x80, 0x29, 0x90, 0x8A, 0xDE, 0x12, 0x43, 0x6B, 0x90, 0x00, 0x02, 0x12, 0x42, 0x20, 0xFD,
+0x7F, 0x01, 0x12, 0x4A, 0x07, 0x1F, 0x80, 0x14, 0x90, 0x8A, 0xDE, 0x12, 0x43, 0x6B, 0x90, 0x00,
+0x02, 0x12, 0x42, 0x20, 0xFD, 0x7F, 0x02, 0x12, 0x4A, 0x07, 0xE4, 0xFF, 0x12, 0x47, 0x21, 0x22,
+0xE4, 0x90, 0x8A, 0xCB, 0xF0, 0xE5, 0x24, 0x60, 0x49, 0x90, 0x8B, 0x1B, 0xE0, 0x60, 0x0D, 0xE4,
+0xF0, 0x53, 0x25, 0xFD, 0xE5, 0x25, 0x54, 0x07, 0x70, 0x38, 0x80, 0x33, 0x90, 0x8B, 0x0C, 0xE0,
+0x04, 0xF0, 0x53, 0x25, 0xEF, 0x90, 0x8A, 0xCB, 0xE0, 0xFF, 0x90, 0x8B, 0x10, 0xE0, 0x2F, 0xFF,
+0xE4, 0x33, 0xFE, 0x90, 0x8B, 0x0C, 0xE0, 0xD3, 0x9F, 0xEE, 0x64, 0x80, 0xF8, 0x74, 0x80, 0x98,
+0x40, 0x0D, 0xE5, 0x21, 0xB4, 0x01, 0x0B, 0xA3, 0xE0, 0x70, 0x07, 0xE0, 0x04, 0xF0, 0x22, 0x12,
+0x4A, 0xFC, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x8F, 0x63, 0x90, 0x04, 0x1D, 0xE0,
+0x60, 0x24, 0x90, 0x05, 0x22, 0xE0, 0xF5, 0x66, 0x74, 0xFF, 0xF0, 0x12, 0x7E, 0x2D, 0xBF, 0x01,
+0x0D, 0x90, 0x8A, 0xF9, 0xE0, 0xFF, 0x7D, 0x01, 0x12, 0x5F, 0xDE, 0x12, 0x45, 0x09, 0x90, 0x05,
+0x22, 0xE5, 0x66, 0xF0, 0x80, 0x0D, 0x90, 0x8A, 0xF9, 0xE0, 0xFF, 0x7D, 0x01, 0x12, 0x5F, 0xDE,
+0x12, 0x45, 0x09, 0x90, 0x04, 0x1F, 0x74, 0x20, 0xF0, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xE5, 0x24,
+0x14, 0x24, 0xFD, 0x50, 0x02, 0x80, 0x41, 0x90, 0x8B, 0x1A, 0xE0, 0x60, 0x2B, 0x12, 0x45, 0x9E,
+0xE4, 0x90, 0x8B, 0x3D, 0xF0, 0x90, 0x8B, 0x0F, 0xE0, 0x90, 0x8B, 0x3E, 0xF0, 0xE4, 0xFB, 0xFD,
+0x7F, 0x58, 0x7E, 0x01, 0x12, 0x4B, 0x6C, 0x90, 0x01, 0x5B, 0x74, 0x05, 0xF0, 0x90, 0x06, 0x92,
+0x74, 0x01, 0xF0, 0x90, 0x8B, 0x18, 0xF0, 0x22, 0xE5, 0x22, 0x54, 0x0F, 0xC3, 0x94, 0x04, 0x50,
+0x07, 0x7D, 0x01, 0x7F, 0x04, 0x12, 0x45, 0xA2, 0x22, 0x90, 0x01, 0x5F, 0xE4, 0xF0, 0x90, 0x01,
+0x3C, 0x74, 0x08, 0xF0, 0xE4, 0x90, 0x8B, 0x3D, 0xF0, 0x90, 0x8B, 0x0F, 0xE0, 0x90, 0x8B, 0x3E,
+0xF0, 0xE4, 0xFB, 0xFD, 0x7F, 0x5C, 0x7E, 0x01, 0x12, 0x4B, 0x6C, 0x90, 0x01, 0x5F, 0x74, 0x05,
+0xF0, 0x90, 0x06, 0x92, 0x74, 0x02, 0xF0, 0x90, 0x8B, 0x17, 0x14, 0xF0, 0xE5, 0x22, 0x54, 0x0F,
+0xC3, 0x94, 0x0C, 0x50, 0x0D, 0x12, 0x45, 0x9E, 0x90, 0x8B, 0x2C, 0xE0, 0x30, 0xE0, 0x03, 0x12,
+0x66, 0x20, 0x22, 0x12, 0x4B, 0x34, 0xEF, 0x64, 0x01, 0x70, 0x37, 0xE5, 0x25, 0x54, 0x03, 0x70,
+0x31, 0xE5, 0x23, 0x54, 0x0F, 0xD3, 0x94, 0x02, 0x50, 0x28, 0xE5, 0x25, 0x20, 0xE2, 0x23, 0xE5,
+0x25, 0x20, 0xE4, 0x1E, 0x90, 0x8B, 0x0D, 0xE0, 0x70, 0x18, 0x90, 0x8B, 0x12, 0xE0, 0x70, 0x12,
+0xE5, 0x26, 0x70, 0x0E, 0x90, 0x01, 0xB9, 0xE4, 0xF0, 0x90, 0x01, 0xB8, 0x74, 0x04, 0xF0, 0x7F,
+0x01, 0x22, 0x7F, 0x00, 0x22, 0x12, 0x4B, 0x34, 0xEF, 0x64, 0x01, 0x70, 0x27, 0x90, 0x8B, 0x18,
+0xE0, 0x70, 0x21, 0x90, 0x8B, 0x17, 0xE0, 0x70, 0x1B, 0xE5, 0x23, 0x54, 0x0F, 0xD3, 0x94, 0x04,
+0x50, 0x12, 0xE5, 0x26, 0x70, 0x0E, 0x90, 0x01, 0xB9, 0xE4, 0xF0, 0x90, 0x01, 0xB8, 0x74, 0x08,
+0xF0, 0x7F, 0x01, 0x22, 0x7F, 0x00, 0x22, 0xEF, 0x24, 0xFE, 0x60, 0x0B, 0x04, 0x70, 0x22, 0x90,
+0x8B, 0x19, 0x74, 0x01, 0xF0, 0x80, 0x16, 0xED, 0x70, 0x0A, 0x90, 0x8B, 0x16, 0xE0, 0x90, 0x8B,
+0x19, 0xF0, 0x80, 0x05, 0x90, 0x8B, 0x19, 0xED, 0xF0, 0x90, 0x8B, 0x19, 0xE0, 0x90, 0x8B, 0x0B,
+0xF0, 0x22, 0x90, 0x01, 0x37, 0x74, 0x02, 0xF0, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x12, 0x7E,
+0x2D, 0xEF, 0x70, 0x06, 0x90, 0x01, 0xC8, 0x74, 0xFD, 0xF0, 0x7D, 0x02, 0x7F, 0x03, 0x12, 0x36,
+0xE6, 0x12, 0x7A, 0x6D, 0x53, 0x22, 0xF0, 0x43, 0x22, 0x02, 0x22, 0xEF, 0x60, 0x0F, 0x74, 0x21,
+0x2D, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x44, 0x10, 0xF0, 0x22, 0x74, 0x21, 0x2D,
+0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x54, 0xEF, 0xF0, 0x22, 0x90, 0x06, 0x04, 0xE0,
+0x54, 0xBF, 0xF0, 0xEF, 0x60, 0x0A, 0xE5, 0x21, 0xB4, 0x01, 0x05, 0xE4, 0xFF, 0x12, 0x48, 0xB3,
+0x53, 0x22, 0xF0, 0x43, 0x22, 0x0C, 0x22, 0x90, 0x04, 0x1D, 0xE0, 0x70, 0x14, 0x90, 0x8A, 0xF8,
+0xE0, 0xFF, 0xE4, 0xFD, 0x12, 0x5F, 0xDE, 0x8E, 0x69, 0x8F, 0x6A, 0x90, 0x04, 0x1F, 0x74, 0x20,
+0xF0, 0x22, 0x90, 0x8B, 0x52, 0xEF, 0xF0, 0x12, 0x4F, 0xED, 0x90, 0x8B, 0x52, 0xE0, 0x60, 0x05,
+0x90, 0x05, 0x22, 0xE4, 0xF0, 0x53, 0x22, 0xF0, 0x43, 0x22, 0x04, 0x22, 0x90, 0x06, 0x04, 0xE0,
+0x44, 0x40, 0xF0, 0xE5, 0x21, 0xB4, 0x01, 0x05, 0x7F, 0x01, 0x12, 0x48, 0xB3, 0x53, 0x22, 0xF0,
+0x43, 0x22, 0x04, 0x22, 0xE5, 0x23, 0x30, 0xE6, 0x12, 0xE5, 0x23, 0x54, 0x0F, 0xFF, 0x90, 0x01,
+0x2F, 0xE0, 0x54, 0x80, 0x4F, 0x64, 0x80, 0xF0, 0x53, 0x23, 0xBF, 0x22, 0x90, 0x8B, 0x2C, 0xE0,
+0x30, 0xE0, 0x05, 0xAF, 0x23, 0x02, 0x66, 0x65, 0x7D, 0x01, 0xAF, 0x23, 0x12, 0x45, 0xA2, 0x22,
+0x53, 0x22, 0xF0, 0x43, 0x22, 0x01, 0x12, 0x4B, 0x5A, 0x12, 0x4B, 0x5B, 0x53, 0x22, 0xF0, 0x43,
+0x22, 0x02, 0x22, 0x41, 0x8A, 0xF6, 0x00, 0x41, 0x8B, 0x05, 0x00, 0x41, 0x8B, 0x51, 0x00, 0x41,
+0x8B, 0x53, 0x00, 0x00, 0x90, 0x04, 0x1B, 0xE0, 0x54, 0x7F, 0x64, 0x7F, 0x7F, 0x01, 0x60, 0x02,
+0x7F, 0x00, 0x22, 0xE4, 0x90, 0x8B, 0x1B, 0xF0, 0x90, 0x8B, 0x0C, 0xF0, 0xF5, 0x25, 0x22, 0x90,
+0x8B, 0x13, 0xE0, 0xA3, 0xE0, 0x90, 0x05, 0x58, 0xF0, 0x22, 0x22, 0x22, 0xF0, 0x90, 0x8B, 0x0F,
+0xE0, 0x90, 0x8B, 0x3E, 0xF0, 0xE4, 0xFB, 0xFD, 0x7F, 0x58, 0x7E, 0x01, 0xD3, 0x10, 0xAF, 0x01,
+0xC3, 0xC0, 0xD0, 0x90, 0x8B, 0x3D, 0xE0, 0xFB, 0xA3, 0xE0, 0xF5, 0x44, 0xE4, 0xF5, 0x45, 0x12,
+0x35, 0xAB, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xC0, 0xE0, 0xC0, 0xF0, 0xC0, 0x83, 0xC0, 0x82, 0xC0,
+0xD0, 0x75, 0xD0, 0x00, 0xC0, 0x00, 0xC0, 0x01, 0xC0, 0x02, 0xC0, 0x03, 0xC0, 0x04, 0xC0, 0x05,
+0xC0, 0x06, 0xC0, 0x07, 0x75, 0x0E, 0x00, 0x90, 0x01, 0xC4, 0x74, 0x87, 0xF0, 0x74, 0x4B, 0xA3,
+0xF0, 0x53, 0x91, 0xDF, 0x90, 0x01, 0x3C, 0xE0, 0x55, 0x30, 0xF5, 0x34, 0xA3, 0xE0, 0x55, 0x31,
+0xF5, 0x35, 0xA3, 0xE0, 0x55, 0x32, 0xF5, 0x36, 0xA3, 0xE0, 0x55, 0x33, 0xF5, 0x37, 0xE5, 0x34,
+0x30, 0xE0, 0x51, 0x90, 0x01, 0x3C, 0x74, 0x01, 0xF0, 0x90, 0x8B, 0x32, 0xE0, 0x30, 0xE0, 0x1F,
+0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x18, 0x90, 0x8B, 0x34, 0xE4, 0xF0, 0x90, 0x8B, 0x33, 0xE0,
+0x64, 0x03, 0x60, 0x0B, 0x7F, 0x01, 0xB1, 0xE0, 0xEF, 0x70, 0x04, 0x7F, 0x02, 0xD1, 0x89, 0x90,
+0x8B, 0x2C, 0xE0, 0xFF, 0x30, 0xE0, 0x1D, 0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x16, 0x90, 0x8B,
+0x2E, 0xE4, 0xF0, 0x90, 0x8B, 0x2D, 0xE0, 0x64, 0x06, 0x60, 0x09, 0xE4, 0xFF, 0xB1, 0xE0, 0xEF,
+0x70, 0x02, 0xD1, 0x56, 0xE5, 0x34, 0x30, 0xE1, 0x08, 0x90, 0x01, 0x3C, 0x74, 0x02, 0xF0, 0x11,
+0x60, 0xE5, 0x34, 0x30, 0xE2, 0x28, 0x90, 0x01, 0x3C, 0x74, 0x04, 0xF0, 0x90, 0x06, 0x92, 0xE0,
+0x30, 0xE0, 0x14, 0x90, 0x8B, 0x3D, 0xE4, 0x71, 0x5C, 0x90, 0x01, 0x5B, 0x74, 0x05, 0xF0, 0x90,
+0x06, 0x92, 0x74, 0x01, 0xF0, 0x80, 0x07, 0x90, 0x8B, 0x18, 0xE4, 0xF0, 0x51, 0xFC, 0xE5, 0x34,
+0x30, 0xE3, 0x38, 0x90, 0x01, 0x3C, 0x74, 0x08, 0xF0, 0x90, 0x06, 0x92, 0xE0, 0x30, 0xE1, 0x24,
+0x90, 0x8B, 0x3D, 0xE4, 0xF0, 0x90, 0x8B, 0x0F, 0xE0, 0x90, 0x8B, 0x3E, 0xF0, 0xE4, 0xFB, 0xFD,
+0x7F, 0x5C, 0x7E, 0x01, 0x71, 0x6C, 0x90, 0x01, 0x5F, 0x74, 0x05, 0xF0, 0x90, 0x06, 0x92, 0x74,
+0x02, 0xF0, 0x80, 0x07, 0x90, 0x8B, 0x17, 0xE4, 0xF0, 0x51, 0xFC, 0xE5, 0x34, 0x30, 0xE4, 0x09,
+0x90, 0x01, 0x3C, 0x74, 0x10, 0xF0, 0x12, 0x52, 0x3C, 0xE5, 0x34, 0x30, 0xE5, 0x06, 0x90, 0x01,
+0x3C, 0x74, 0x20, 0xF0, 0xE5, 0x35, 0x30, 0xE0, 0x10, 0x90, 0x01, 0x3D, 0x74, 0x01, 0xF0, 0x90,
+0x00, 0x83, 0xE0, 0xF5, 0x23, 0x51, 0xE4, 0x51, 0xFC, 0xE5, 0x35, 0x30, 0xE2, 0x06, 0x90, 0x01,
+0x3D, 0x74, 0x04, 0xF0, 0xE5, 0x35, 0x30, 0xE4, 0x1B, 0x90, 0x01, 0x3D, 0x74, 0x10, 0xF0, 0x90,
+0x8B, 0x05, 0xE0, 0x60, 0x0F, 0xE4, 0xF0, 0x90, 0x05, 0x53, 0xE0, 0x44, 0x01, 0xF0, 0x90, 0x05,
+0xFD, 0xE0, 0x04, 0xF0, 0xE5, 0x36, 0x30, 0xE0, 0x75, 0x90, 0x01, 0x3E, 0x74, 0x01, 0xF0, 0x90,
+0x8B, 0x32, 0xE0, 0x30, 0xE0, 0x18, 0x90, 0x8B, 0x36, 0xE4, 0xF0, 0x90, 0x8B, 0x33, 0xE0, 0x64,
+0x03, 0x60, 0x0B, 0x7F, 0x01, 0xB1, 0xE0, 0xEF, 0x60, 0x04, 0x7F, 0x01, 0xD1, 0x89, 0x90, 0x8B,
+0x2C, 0xE0, 0x30, 0xE0, 0x49, 0x90, 0x8B, 0x30, 0xE4, 0xF0, 0xFF, 0xB1, 0xE0, 0xEF, 0x60, 0x3E,
+0x12, 0x65, 0xF0, 0x90, 0x8B, 0x2D, 0xE0, 0xFF, 0x64, 0x06, 0x60, 0x32, 0xEF, 0xB4, 0x04, 0x02,
+0x80, 0x07, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x05, 0x04, 0xE4, 0xFF, 0x80, 0x14, 0x90, 0x8B, 0x2D,
+0xE0, 0xB4, 0x03, 0x04, 0x7F, 0x01, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x02, 0x05, 0x7F,
+0x01, 0x12, 0x7B, 0x49, 0x7D, 0x01, 0xAF, 0x23, 0x12, 0x45, 0xA2, 0x12, 0x66, 0x20, 0xE5, 0x36,
+0x30, 0xE1, 0x47, 0x90, 0x01, 0x3E, 0x74, 0x02, 0xF0, 0x90, 0x8B, 0x32, 0xE0, 0x30, 0xE0, 0x19,
+0x90, 0x8B, 0x36, 0x74, 0x01, 0xF0, 0x90, 0x8B, 0x33, 0xE0, 0x64, 0x03, 0x60, 0x0B, 0x7F, 0x01,
+0xB1, 0xE0, 0xEF, 0x70, 0x04, 0x7F, 0x02, 0xD1, 0x89, 0x90, 0x8B, 0x2C, 0xE0, 0x30, 0xE0, 0x1A,
+0x90, 0x8B, 0x30, 0x74, 0x01, 0xF0, 0x12, 0x7D, 0xBE, 0x90, 0x8B, 0x2D, 0xE0, 0x64, 0x06, 0x60,
+0x09, 0xE4, 0xFF, 0xB1, 0xE0, 0xEF, 0x70, 0x02, 0xD1, 0x56, 0x74, 0x87, 0x04, 0x90, 0x01, 0xC4,
+0xF0, 0x74, 0x4B, 0xA3, 0xF0, 0xD0, 0x07, 0xD0, 0x06, 0xD0, 0x05, 0xD0, 0x04, 0xD0, 0x03, 0xD0,
+0x02, 0xD0, 0x01, 0xD0, 0x00, 0xD0, 0xD0, 0xD0, 0x82, 0xD0, 0x83, 0xD0, 0xF0, 0xD0, 0xE0, 0x32,
+0xEF, 0x64, 0x01, 0x70, 0x3D, 0x90, 0x8B, 0x35, 0xE0, 0x60, 0x03, 0x7F, 0x00, 0x22, 0x90, 0x8B,
+0x08, 0xE0, 0x60, 0x03, 0x7F, 0x01, 0x22, 0x90, 0x8B, 0x34, 0xE0, 0x60, 0x03, 0x7F, 0x01, 0x22,
+0x90, 0x8B, 0x32, 0xE0, 0xFF, 0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x0B, 0xEF, 0xC4, 0x13, 0x54,
+0x07, 0x30, 0xE0, 0x03, 0x7F, 0x00, 0x22, 0x90, 0x8B, 0x36, 0xE0, 0x7F, 0x01, 0x60, 0x36, 0x7F,
+0x00, 0x22, 0x90, 0x8B, 0x2F, 0xE0, 0x60, 0x03, 0x7F, 0x00, 0x22, 0x90, 0x8B, 0x08, 0xE0, 0x60,
+0x03, 0x7F, 0x01, 0x22, 0x90, 0x8B, 0x2E, 0xE0, 0x60, 0x03, 0x7F, 0x01, 0x22, 0x90, 0x8B, 0x2C,
+0xE0, 0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x03, 0x7F, 0x00, 0x22, 0x90, 0x8B, 0x30, 0xE0, 0x7F,
+0x01, 0x60, 0x02, 0x7F, 0x00, 0x22, 0x90, 0x8B, 0x0D, 0xE0, 0x60, 0x16, 0x90, 0x8B, 0x2D, 0xE0,
+0x70, 0x04, 0x7F, 0x05, 0x80, 0x1F, 0x90, 0x8B, 0x2D, 0xE0, 0x64, 0x01, 0x70, 0x1A, 0x7F, 0x02,
+0x80, 0x13, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x01, 0x04, 0x7F, 0x03, 0x80, 0x08, 0x90, 0x8B, 0x2D,
+0xE0, 0x70, 0x05, 0x7F, 0x04, 0x12, 0x7B, 0x49, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0,
+0x90, 0x8B, 0x33, 0xE0, 0x90, 0x8B, 0x55, 0xF0, 0x6F, 0x70, 0x02, 0xE1, 0x55, 0xEF, 0x14, 0x60,
+0x3B, 0x14, 0x60, 0x5F, 0x14, 0x70, 0x02, 0xE1, 0x30, 0x24, 0x03, 0x60, 0x02, 0xE1, 0x55, 0x90,
+0x8B, 0x55, 0xE0, 0xB4, 0x03, 0x04, 0xF1, 0xC0, 0xE1, 0x55, 0x90, 0x8B, 0x55, 0xE0, 0xB4, 0x02,
+0x04, 0xF1, 0xAD, 0xE1, 0x55, 0x90, 0x8B, 0x55, 0xE0, 0xB4, 0x04, 0x04, 0xF1, 0xC4, 0xE1, 0x55,
+0x90, 0x8B, 0x55, 0xE0, 0x64, 0x01, 0x70, 0x7D, 0xF1, 0xAF, 0x80, 0x79, 0x90, 0x8B, 0x55, 0xE0,
+0xFF, 0xB4, 0x03, 0x04, 0xF1, 0xC8, 0x80, 0x6D, 0xEF, 0xB4, 0x02, 0x04, 0xF1, 0xA0, 0x80, 0x65,
+0x90, 0x8B, 0x55, 0xE0, 0xFF, 0xB4, 0x04, 0x04, 0xF1, 0xD3, 0x80, 0x59, 0xEF, 0x70, 0x56, 0xF1,
+0x8D, 0x80, 0x52, 0x90, 0x8B, 0x55, 0xE0, 0xB4, 0x03, 0x05, 0x12, 0x7A, 0x5E, 0x80, 0x46, 0x90,
+0x8B, 0x55, 0xE0, 0xB4, 0x01, 0x04, 0xF1, 0x71, 0x80, 0x3B, 0x90, 0x8B, 0x55, 0xE0, 0xB4, 0x04,
+0x05, 0x12, 0x7B, 0x37, 0x80, 0x2F, 0x90, 0x8B, 0x55, 0xE0, 0x70, 0x29, 0xF1, 0x6F, 0x80, 0x25,
+0x90, 0x8B, 0x55, 0xE0, 0xFF, 0xB4, 0x01, 0x04, 0xF1, 0x5A, 0x80, 0x19, 0xEF, 0xB4, 0x02, 0x04,
+0xF1, 0x6B, 0x80, 0x11, 0x90, 0x8B, 0x55, 0xE0, 0xFF, 0xB4, 0x04, 0x04, 0xF1, 0x5A, 0x80, 0x05,
+0xEF, 0x70, 0x02, 0xF1, 0x67, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x90, 0x05, 0x22, 0x74, 0x6F, 0xF0,
+0x90, 0x8B, 0x33, 0x74, 0x03, 0xF0, 0x22, 0xF1, 0x8D, 0x80, 0xEF, 0xF1, 0xED, 0x80, 0xEB, 0xF1,
+0x8D, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x12, 0x7E, 0x2D, 0xEF, 0x70, 0x06, 0x90, 0x01, 0xC8,
+0x74, 0xFD, 0xF0, 0x12, 0x7A, 0x6D, 0x90, 0x8B, 0x33, 0x74, 0x02, 0xF0, 0x22, 0x90, 0x01, 0x3E,
+0x74, 0x03, 0xF0, 0xFD, 0x7F, 0x02, 0x12, 0x37, 0x00, 0x90, 0x8B, 0x33, 0x74, 0x01, 0xF0, 0x22,
+0xF1, 0xED, 0x90, 0x05, 0x22, 0xE4, 0xF0, 0x90, 0x8B, 0x33, 0x04, 0xF0, 0x22, 0xF1, 0xA0, 0x7D,
+0x03, 0x7F, 0x02, 0x12, 0x36, 0x92, 0x90, 0x05, 0x27, 0xE4, 0xF0, 0x90, 0x8B, 0x33, 0xF0, 0x22,
+0xF1, 0xC8, 0x80, 0xEB, 0xF1, 0xD3, 0x80, 0xE7, 0x90, 0x05, 0x22, 0xE4, 0xF0, 0x90, 0x8B, 0x33,
+0x04, 0xF0, 0x22, 0x90, 0x05, 0x22, 0xE4, 0xF0, 0x90, 0x8B, 0x33, 0x04, 0xF0, 0x22, 0xF1, 0x8D,
+0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x90, 0x8B, 0x33, 0x74, 0x04, 0xF0, 0x22, 0x90, 0x8B, 0x1C,
+0x12, 0x43, 0x53, 0x90, 0x80, 0x85, 0x12, 0x2A, 0x7F, 0x7F, 0x78, 0x7E, 0x08, 0x12, 0x2F, 0xD9,
+0x90, 0x8B, 0x20, 0x12, 0x43, 0x53, 0x90, 0x80, 0x85, 0x12, 0x2A, 0x7F, 0x7F, 0x04, 0x7E, 0x0C,
+0x12, 0x2F, 0xD9, 0x90, 0x8B, 0x24, 0x12, 0x43, 0x53, 0x90, 0x80, 0x85, 0x12, 0x2A, 0x7F, 0x7F,
+0x00, 0x7E, 0x08, 0x12, 0x2F, 0xD9, 0x90, 0x8B, 0x28, 0x12, 0x43, 0x53, 0x90, 0x80, 0x85, 0x12,
+0x2A, 0x7F, 0x7F, 0x70, 0x7E, 0x0E, 0x12, 0x2F, 0xD9, 0x90, 0x80, 0x59, 0x12, 0x2A, 0x8B, 0x00,
+0x03, 0x2D, 0x95, 0xE4, 0xFD, 0xFF, 0x12, 0x34, 0x81, 0x90, 0x8B, 0x09, 0xE0, 0xB4, 0x01, 0x11,
+0x90, 0x80, 0x59, 0x12, 0x2A, 0x8B, 0x00, 0x03, 0x2D, 0x95, 0xE4, 0xFD, 0x7F, 0x01, 0x12, 0x34,
+0x81, 0x22, 0x90, 0x02, 0x84, 0xEF, 0xF0, 0xA3, 0xEE, 0xF0, 0xA3, 0x74, 0x05, 0xF0, 0x22, 0xEF,
+0x8E, 0xF0, 0x12, 0x43, 0xBA, 0x50, 0x8D, 0x00, 0x40, 0x50, 0xB5, 0x00, 0x80, 0x50, 0xE0, 0x01,
+0x00, 0x50, 0xF4, 0x02, 0x00, 0x51, 0x0C, 0x04, 0x00, 0x00, 0x00, 0x51, 0x29, 0xED, 0x54, 0x3F,
+0x70, 0x04, 0xFE, 0xFF, 0x80, 0x04, 0x7E, 0x00, 0x7F, 0x40, 0xEF, 0x2D, 0xFF, 0xEE, 0x3C, 0xFE,
+0xEF, 0x78, 0x06, 0xCE, 0xC3, 0x13, 0xCE, 0x13, 0xD8, 0xF9, 0x78, 0x06, 0xC3, 0x33, 0xCE, 0x33,
+0xCE, 0xD8, 0xF9, 0x80, 0x26, 0xED, 0x54, 0x7F, 0x70, 0x04, 0xFE, 0xFF, 0x80, 0x04, 0x7E, 0x00,
+0x7F, 0x80, 0xEF, 0x2D, 0xFF, 0xEE, 0x3C, 0xFE, 0xEF, 0x78, 0x07, 0xCE, 0xC3, 0x13, 0xCE, 0x13,
+0xD8, 0xF9, 0x78, 0x07, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8, 0xF9, 0xFD, 0xAC, 0x06, 0x80, 0x49,
+0xED, 0x70, 0x04, 0xFE, 0xFF, 0x80, 0x04, 0x7E, 0x01, 0x7F, 0x00, 0xEF, 0x2D, 0xEE, 0x3C, 0x7D,
+0x00, 0xFC, 0x80, 0x35, 0xEC, 0x54, 0x01, 0x4D, 0x70, 0x04, 0xFE, 0xFF, 0x80, 0x04, 0x7E, 0x02,
+0x7F, 0x00, 0xEF, 0x2D, 0xEE, 0x3C, 0xC3, 0x13, 0x7D, 0x00, 0x80, 0x1A, 0xEC, 0x54, 0x03, 0x4D,
+0x70, 0x04, 0xFE, 0xFF, 0x80, 0x04, 0x7E, 0x04, 0x7F, 0x00, 0xEF, 0x2D, 0xEE, 0x3C, 0x13, 0x13,
+0x54, 0x3F, 0x7D, 0x00, 0x25, 0xE0, 0x25, 0xE0, 0xFC, 0xAE, 0x04, 0xAF, 0x05, 0x22, 0x90, 0x01,
+0xE4, 0x74, 0x58, 0xF0, 0xA3, 0x74, 0x02, 0xF0, 0x22, 0xE4, 0x90, 0x8A, 0xCC, 0xF0, 0xA3, 0xF0,
+0x75, 0x8E, 0x02, 0x91, 0x81, 0x12, 0x67, 0x0E, 0x90, 0x8B, 0x07, 0xEF, 0xF0, 0x12, 0x67, 0x1B,
+0x90, 0x8B, 0x09, 0xEF, 0xF0, 0x12, 0x67, 0x27, 0x90, 0x8A, 0xF4, 0xEE, 0xF0, 0xA3, 0xEF, 0xF0,
+0xE4, 0xF5, 0x55, 0xF5, 0x21, 0x12, 0x71, 0x16, 0x12, 0x44, 0x9E, 0x12, 0x32, 0x3D, 0x7F, 0x03,
+0x12, 0x76, 0xAB, 0x12, 0x7A, 0x5A, 0x12, 0x66, 0xD4, 0x12, 0x67, 0x3F, 0x12, 0x67, 0x54, 0x12,
+0x66, 0xF2, 0x12, 0x67, 0x0D, 0x90, 0x8A, 0xCE, 0xE5, 0xD9, 0xF0, 0x31, 0xD2, 0xC2, 0xAF, 0x90,
+0x00, 0x80, 0xE0, 0x44, 0x40, 0xF0, 0x51, 0x81, 0x75, 0xE8, 0x03, 0x43, 0xA8, 0x85, 0xD2, 0xAF,
+0x31, 0x2E, 0x90, 0x8A, 0xCC, 0xE0, 0x64, 0x01, 0xF0, 0x24, 0x39, 0x90, 0x01, 0xC4, 0xF0, 0x74,
+0x51, 0xA3, 0xF0, 0xE5, 0x55, 0x30, 0xE4, 0x09, 0xC2, 0xAF, 0x53, 0x55, 0xEF, 0xD2, 0xAF, 0xB1,
+0xCC, 0xE5, 0x55, 0x30, 0xE6, 0xDC, 0xC2, 0xAF, 0x53, 0x55, 0xBF, 0xD2, 0xAF, 0x12, 0x68, 0x42,
+0x80, 0xD0, 0x90, 0x01, 0x3C, 0x74, 0xFF, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0x90, 0x01, 0x34, 0xF0,
+0xA3, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0xFD, 0x7F, 0x54, 0x31, 0xFB, 0x7D, 0xFF, 0x7F, 0x55, 0x31,
+0xFB, 0x7D, 0xFF, 0x7F, 0x56, 0x31, 0xFB, 0x7D, 0xFF, 0x7F, 0x57, 0xD3, 0x10, 0xAF, 0x01, 0xC3,
+0xC0, 0xD0, 0x8F, 0x82, 0x75, 0x83, 0x00, 0xED, 0xF0, 0x51, 0x81, 0xD0, 0xD0, 0x92, 0xAF, 0x22,
+0x90, 0x01, 0x30, 0xE4, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0x90, 0x01, 0x38, 0xF0, 0xA3,
+0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0xFD, 0x7F, 0x50, 0x31, 0xFB, 0xE4, 0xFD, 0x7F, 0x51, 0x31, 0xFB,
+0xE4, 0xFD, 0x7F, 0x52, 0x31, 0xFB, 0xE4, 0xFD, 0x7F, 0x53, 0x80, 0xBF, 0xE5, 0x5E, 0x64, 0x01,
+0x70, 0x3B, 0x71, 0xC1, 0xBF, 0x01, 0x04, 0x7F, 0x01, 0x71, 0xB5, 0x90, 0x00, 0x46, 0xE0, 0x44,
+0x04, 0xFD, 0x7F, 0x46, 0x31, 0xFB, 0x90, 0x00, 0x44, 0xE0, 0x54, 0xFB, 0xFD, 0x7F, 0x44, 0x31,
+0xFB, 0x90, 0x00, 0x46, 0xE0, 0x54, 0xFB, 0xFD, 0x7F, 0x46, 0x31, 0xFB, 0x7F, 0x02, 0x71, 0xDD,
+0x8F, 0x62, 0x90, 0x01, 0xC9, 0xE5, 0x62, 0xF0, 0xB4, 0x01, 0x02, 0x71, 0x55, 0x22, 0xE0, 0x5F,
+0xF0, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x7F, 0x10, 0xDF, 0xFE, 0xD0, 0xD0, 0x92, 0xAF,
+0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x90, 0x8A, 0xE0, 0xED, 0xF0, 0x90, 0x8A, 0xDF,
+0xEF, 0xF0, 0xD3, 0x94, 0x07, 0x50, 0x4E, 0xA3, 0xE0, 0x70, 0x1A, 0x90, 0x8A, 0xDF, 0xE0, 0xFF,
+0x74, 0x01, 0xA8, 0x07, 0x08, 0x80, 0x02, 0xC3, 0x33, 0xD8, 0xFC, 0xF4, 0xFF, 0x90, 0x00, 0x47,
+0xE0, 0x5F, 0xF0, 0x80, 0x17, 0x90, 0x8A, 0xDF, 0xE0, 0xFF, 0x74, 0x01, 0xA8, 0x07, 0x08, 0x80,
+0x02, 0xC3, 0x33, 0xD8, 0xFC, 0xFF, 0x90, 0x00, 0x47, 0xE0, 0x4F, 0xF0, 0x51, 0x81, 0x90, 0x8A,
+0xDF, 0xE0, 0xFF, 0x74, 0x01, 0xA8, 0x07, 0x08, 0x80, 0x02, 0xC3, 0x33, 0xD8, 0xFC, 0xF4, 0xFF,
+0x90, 0x00, 0x46, 0x80, 0x59, 0x90, 0x8A, 0xDF, 0xE0, 0x24, 0xF8, 0xF0, 0xA3, 0xE0, 0x70, 0x1D,
+0x90, 0x8A, 0xDF, 0xE0, 0xFF, 0x74, 0x01, 0xA8, 0x07, 0x08, 0x80, 0x02, 0xC3, 0x33, 0xD8, 0xFC,
+0xC4, 0x54, 0xF0, 0xF4, 0xFF, 0x90, 0x00, 0x43, 0xE0, 0x5F, 0xF0, 0x80, 0x1A, 0x90, 0x8A, 0xDF,
+0xE0, 0xFF, 0x74, 0x01, 0xA8, 0x07, 0x08, 0x80, 0x02, 0xC3, 0x33, 0xD8, 0xFC, 0xC4, 0x54, 0xF0,
+0xFF, 0x90, 0x00, 0x43, 0xE0, 0x4F, 0xF0, 0x51, 0x81, 0x90, 0x8A, 0xDF, 0xE0, 0xFF, 0x74, 0x01,
+0xA8, 0x07, 0x08, 0x80, 0x02, 0xC3, 0x33, 0xD8, 0xFC, 0xF4, 0xFF, 0x90, 0x00, 0x43, 0x51, 0x7E,
+0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x90, 0x00, 0x49, 0xE0, 0x90, 0x8B, 0x54, 0xF0, 0xE0, 0x54, 0x0F,
+0xF0, 0x44, 0xF0, 0xFD, 0x7F, 0x49, 0x31, 0xFB, 0x90, 0x8B, 0x54, 0xE0, 0x44, 0xB0, 0xFD, 0x7F,
+0x49, 0x21, 0xFB, 0x90, 0x8A, 0xDD, 0xEE, 0xF0, 0xA3, 0xEF, 0xF0, 0x75, 0x5E, 0x01, 0x8E, 0x5F,
+0xF5, 0x60, 0xE4, 0xFD, 0x7F, 0x0B, 0x51, 0x91, 0xE4, 0xFD, 0x7F, 0x02, 0x51, 0x91, 0x71, 0xC1,
+0xE4, 0xFF, 0x71, 0xB5, 0xE4, 0xF5, 0x62, 0x90, 0x01, 0xC9, 0xE5, 0x62, 0xF0, 0x90, 0x8A, 0xDD,
+0xE0, 0xFC, 0xA3, 0xE0, 0xFD, 0xEC, 0xFB, 0x8D, 0x44, 0xE4, 0xF5, 0x45, 0x7D, 0x01, 0x7F, 0x60,
+0x7E, 0x01, 0x02, 0x35, 0xAB, 0x90, 0x01, 0xCA, 0xE5, 0x61, 0xF0, 0xEF, 0x60, 0x02, 0x71, 0x55,
+0x22, 0x7F, 0x0B, 0x71, 0xDD, 0xEF, 0x65, 0x61, 0x60, 0x10, 0xE5, 0x61, 0xB4, 0x01, 0x05, 0xE4,
+0xF5, 0x61, 0x80, 0x03, 0x75, 0x61, 0x01, 0x7F, 0x01, 0x22, 0x7F, 0x00, 0x22, 0xD3, 0x10, 0xAF,
+0x01, 0xC3, 0xC0, 0xD0, 0x90, 0x8B, 0x57, 0xEF, 0xF0, 0xD3, 0x94, 0x07, 0x50, 0x43, 0xE0, 0xFF,
+0x74, 0x01, 0xA8, 0x07, 0x08, 0x80, 0x02, 0xC3, 0x33, 0xD8, 0xFC, 0xF4, 0xFF, 0x90, 0x00, 0x46,
+0x51, 0x7E, 0x90, 0x8B, 0x57, 0xE0, 0xFD, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x05, 0x08, 0x80, 0x05,
+0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8, 0xF9, 0xFF, 0x90, 0x00, 0x44, 0xE0, 0xFB, 0xE4, 0xFE, 0xEF,
+0x5B, 0xA8, 0x05, 0x08, 0x80, 0x06, 0xCE, 0xA2, 0xE7, 0x13, 0xCE, 0x13, 0xD8, 0xF8, 0xFF, 0x80,
+0x4B, 0x90, 0x8B, 0x57, 0xE0, 0x24, 0xF8, 0xF0, 0xE0, 0xFF, 0x74, 0x01, 0xA8, 0x07, 0x08, 0x80,
+0x02, 0xC3, 0x33, 0xD8, 0xFC, 0xF4, 0xFF, 0x90, 0x00, 0x43, 0xE0, 0x5F, 0xF0, 0x51, 0x81, 0x90,
+0x8B, 0x57, 0xE0, 0xFD, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x05, 0x08, 0x80, 0x05, 0xC3, 0x33, 0xCE,
+0x33, 0xCE, 0xD8, 0xF9, 0xFF, 0x90, 0x00, 0x42, 0xE0, 0xFB, 0xE4, 0xFE, 0xEF, 0x5B, 0xA8, 0x05,
+0x08, 0x80, 0x06, 0xCE, 0xA2, 0xE7, 0x13, 0xCE, 0x13, 0xD8, 0xF8, 0xFF, 0xD0, 0xD0, 0x92, 0xAF,
+0x22, 0xE4, 0x90, 0x8B, 0x04, 0xF0, 0x90, 0x00, 0x80, 0xE0, 0x44, 0x80, 0xFD, 0x7F, 0x80, 0x21,
+0xFB, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x90, 0x8A, 0xDA, 0x12, 0x43, 0x8B, 0x90, 0x8A,
+0xDA, 0x12, 0x43, 0x6B, 0x90, 0x00, 0x01, 0x12, 0x42, 0xC2, 0xFA, 0xE5, 0xF0, 0x24, 0x00, 0xFF,
+0xE4, 0x3A, 0xFE, 0x90, 0x8A, 0xDA, 0x12, 0x43, 0x6B, 0x90, 0x00, 0x01, 0xEE, 0x8F, 0xF0, 0x12,
+0x43, 0x19, 0x12, 0x29, 0xD9, 0xFF, 0x60, 0x2C, 0xB5, 0x5E, 0x16, 0x90, 0x8A, 0xDA, 0x12, 0x43,
+0x6B, 0x90, 0x00, 0x01, 0x12, 0x42, 0xC2, 0x65, 0x60, 0x70, 0x04, 0xE5, 0x5F, 0x65, 0xF0, 0x60,
+0x22, 0x90, 0x8A, 0xDA, 0x12, 0x43, 0x6B, 0x90, 0x00, 0x01, 0x12, 0x42, 0xC2, 0xFF, 0xAE, 0xF0,
+0x71, 0x73, 0x80, 0x0F, 0x90, 0x8A, 0xDA, 0x12, 0x43, 0x6B, 0x12, 0x29, 0xD9, 0x65, 0x5E, 0x60,
+0x02, 0xB1, 0x08, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xE4, 0xF5, 0x5E, 0x7F, 0x60, 0x7E, 0x01, 0x8F,
+0x82, 0x8E, 0x83, 0xA3, 0xA3, 0xA3, 0xE4, 0xF0, 0x22, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x8B, 0xEF,
+0x12, 0x43, 0x94, 0x55, 0x5A, 0x01, 0x55, 0x51, 0x02, 0x55, 0x7E, 0x03, 0x55, 0x87, 0x05, 0x55,
+0x90, 0x06, 0x55, 0xCB, 0x07, 0x55, 0x98, 0x08, 0x55, 0xA1, 0x09, 0x55, 0xA9, 0x20, 0x55, 0xB2,
+0x2C, 0x55, 0x63, 0x2D, 0x55, 0x6C, 0x2E, 0x55, 0x75, 0x3B, 0x55, 0xBB, 0x4B, 0x00, 0x00, 0x55,
+0xC4, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02, 0x72, 0xFC, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B,
+0x02, 0x73, 0x02, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02, 0x73, 0x2F, 0x90, 0x8A, 0xD7, 0x12,
+0x43, 0x6B, 0x02, 0x73, 0x77, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02, 0x73, 0xB0, 0x90, 0x8A,
+0xD7, 0x12, 0x43, 0x6B, 0x02, 0x73, 0xC9, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02, 0x72, 0xD0,
+0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0xE1, 0x19, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02, 0x74,
+0x11, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x81, 0x91, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02,
+0x76, 0xEA, 0x90, 0x8A, 0xD7, 0x12, 0x43, 0x6B, 0x02, 0x78, 0xDE, 0x90, 0x8A, 0xD7, 0x12, 0x43,
+0x6B, 0x02, 0x7A, 0x48, 0x90, 0x01, 0xC6, 0xE0, 0x44, 0x01, 0xF0, 0x22, 0xD3, 0x10, 0xAF, 0x01,
+0xC3, 0xC0, 0xD0, 0x90, 0x01, 0xCC, 0xE0, 0x54, 0x0F, 0x90, 0x8A, 0xCF, 0xF0, 0x90, 0x8A, 0xCF,
+0xE0, 0xFD, 0x70, 0x02, 0xE1, 0x14, 0x90, 0x8B, 0x51, 0xE0, 0xFF, 0x74, 0x01, 0x7E, 0x00, 0xA8,
+0x07, 0x08, 0x80, 0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8, 0xF9, 0xFF, 0xEF, 0x5D, 0x70, 0x02,
+0xE1, 0x0D, 0x90, 0x8B, 0x51, 0xE0, 0x75, 0xF0, 0x04, 0x90, 0x01, 0xD0, 0x12, 0x43, 0x5F, 0xE0,
+0x90, 0x8A, 0xD0, 0xF0, 0x75, 0x1D, 0x01, 0x75, 0x1E, 0x8A, 0x75, 0x1F, 0xD0, 0x75, 0x20, 0x01,
+0x7B, 0x01, 0x7A, 0x8A, 0x79, 0xD1, 0x12, 0x5F, 0x57, 0x90, 0x8A, 0xD1, 0xE0, 0xFF, 0xC4, 0x13,
+0x13, 0x13, 0x54, 0x01, 0x90, 0x8B, 0x51, 0x30, 0xE0, 0x59, 0xE0, 0x75, 0xF0, 0x02, 0x90, 0x00,
+0x88, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xD2, 0xF0, 0x90, 0x8B, 0x51, 0xE0, 0x75, 0xF0, 0x02,
+0x90, 0x00, 0x89, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xD3, 0xF0, 0x90, 0x8B, 0x51, 0xE0, 0x75,
+0xF0, 0x04, 0x90, 0x01, 0xD1, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xD4, 0xF0, 0x90, 0x8B, 0x51,
+0xE0, 0x75, 0xF0, 0x04, 0x90, 0x01, 0xD2, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xD5, 0xF0, 0x90,
+0x8B, 0x51, 0xE0, 0x75, 0xF0, 0x04, 0x90, 0x01, 0xD3, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xD6,
+0xF0, 0x80, 0x33, 0xE0, 0x75, 0xF0, 0x04, 0x90, 0x01, 0xD1, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A,
+0xD2, 0xF0, 0x90, 0x8B, 0x51, 0xE0, 0x75, 0xF0, 0x04, 0x90, 0x01, 0xD2, 0x12, 0x43, 0x5F, 0xE0,
+0x90, 0x8A, 0xD3, 0xF0, 0x90, 0x8B, 0x51, 0xE0, 0x75, 0xF0, 0x04, 0x90, 0x01, 0xD3, 0x12, 0x43,
+0x5F, 0xE0, 0x90, 0x8A, 0xD4, 0xF0, 0xEF, 0x54, 0x7F, 0xFF, 0x7B, 0x01, 0x7A, 0x8A, 0x79, 0xD2,
+0xB1, 0x19, 0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0x90, 0x8B, 0x51, 0xE0, 0xFE, 0x74, 0x01, 0xA8, 0x06,
+0x08, 0x80, 0x02, 0xC3, 0x33, 0xD8, 0xFC, 0xF4, 0x5F, 0x90, 0x8A, 0xCF, 0xF0, 0x90, 0x8B, 0x51,
+0xE0, 0xFF, 0x74, 0x01, 0xA8, 0x07, 0x08, 0x80, 0x02, 0xC3, 0x33, 0xD8, 0xFC, 0x90, 0x01, 0xCC,
+0xF0, 0x90, 0x8B, 0x51, 0xE0, 0x04, 0xF0, 0xE0, 0x54, 0x03, 0xF0, 0xA1, 0xDD, 0x90, 0x01, 0xC6,
+0xE0, 0x44, 0x02, 0xF0, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x90, 0x00, 0x04, 0x12, 0x42, 0x20, 0xFF,
+0x54, 0x1F, 0xFE, 0xEF, 0x54, 0x20, 0xC4, 0x13, 0x54, 0x07, 0xFD, 0xAF, 0x06, 0x90, 0x8A, 0xDA,
+0xEF, 0xF0, 0xA3, 0xED, 0xF0, 0xA3, 0x12, 0x43, 0x8B, 0x90, 0x8A, 0xDC, 0x12, 0x43, 0x6B, 0x90,
+0x00, 0x03, 0x12, 0x42, 0x20, 0x54, 0xF0, 0xC4, 0x54, 0x0F, 0x90, 0x8A, 0xDF, 0xF0, 0x90, 0x00,
+0x04, 0x12, 0x42, 0x20, 0x54, 0x40, 0xC4, 0x13, 0x13, 0x54, 0x03, 0x90, 0x8A, 0xE0, 0xF0, 0x90,
+0x8A, 0xDA, 0xE0, 0xFF, 0x75, 0xF0, 0x09, 0x90, 0x87, 0x25, 0x12, 0x43, 0x5F, 0xAD, 0x82, 0xAC,
+0x83, 0x90, 0x8A, 0xE1, 0xEC, 0xF0, 0xA3, 0xED, 0xF0, 0xEF, 0x75, 0xF0, 0x09, 0xA4, 0x24, 0x23,
+0xF9, 0x74, 0x87, 0x35, 0xF0, 0xFA, 0x7B, 0x01, 0xA3, 0x12, 0x43, 0x8B, 0x90, 0x8A, 0xDC, 0x12,
+0x43, 0x6B, 0x90, 0x00, 0x03, 0x12, 0x42, 0x20, 0x54, 0x0F, 0xFF, 0x90, 0x8A, 0xE3, 0x12, 0x43,
+0x6B, 0xEF, 0x12, 0x42, 0x4D, 0x90, 0x8A, 0xDC, 0x12, 0x43, 0x6B, 0x90, 0x00, 0x02, 0x12, 0x42,
+0x20, 0xFF, 0x90, 0x8A, 0xE3, 0x12, 0x43, 0x6B, 0x90, 0x00, 0x01, 0xEF, 0x12, 0x42, 0x5F, 0x90,
+0x8A, 0xDC, 0x12, 0x43, 0x6B, 0x90, 0x00, 0x01, 0x12, 0x42, 0x20, 0xFF, 0x90, 0x8A, 0xE1, 0xE0,
+0xFC, 0xA3, 0xE0, 0xFD, 0xF5, 0x82, 0x8C, 0x83, 0xEF, 0xF0, 0x12, 0x29, 0xD9, 0x8D, 0x82, 0x8C,
+0x83, 0xA3, 0xF0, 0x90, 0x8A, 0xDF, 0xE0, 0xFE, 0x90, 0x8A, 0xDA, 0xE0, 0xFF, 0x24, 0xC1, 0xF5,
+0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xEE, 0xF0, 0x90, 0x8A, 0xDB, 0xE0, 0xFE, 0x75, 0xF0, 0x09,
+0xEF, 0x90, 0x87, 0x29, 0x12, 0x43, 0x5F, 0xEE, 0xF0, 0x75, 0xF0, 0x09, 0xEF, 0x90, 0x87, 0x2A,
+0x12, 0x43, 0x5F, 0x74, 0x01, 0xF0, 0x90, 0x8A, 0xE0, 0xE0, 0xFE, 0x75, 0xF0, 0x09, 0xEF, 0x90,
+0x87, 0x2B, 0x12, 0x43, 0x5F, 0xEE, 0xF0, 0x8F, 0x0F, 0xEF, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82,
+0xE4, 0x34, 0x89, 0xAF, 0x82, 0xF5, 0x10, 0x8F, 0x11, 0xE5, 0x0F, 0x75, 0xF0, 0x02, 0xA4, 0x24,
+0x81, 0xF9, 0x74, 0x86, 0x35, 0xF0, 0x75, 0x12, 0x01, 0xF5, 0x13, 0x89, 0x14, 0x75, 0xF0, 0x09,
+0xE5, 0x0F, 0x90, 0x87, 0x25, 0x12, 0x43, 0x5F, 0xAF, 0x82, 0x85, 0x83, 0x15, 0x8F, 0x16, 0xE5,
+0x0F, 0x75, 0xF0, 0x09, 0xA4, 0x24, 0x23, 0xF9, 0x74, 0x87, 0x35, 0xF0, 0x75, 0x17, 0x01, 0xF5,
+0x18, 0x89, 0x19, 0x74, 0xC1, 0x25, 0x0F, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE0, 0x12,
+0x43, 0x94, 0x58, 0xA7, 0x00, 0x58, 0xBC, 0x01, 0x58, 0xD1, 0x02, 0x58, 0xE6, 0x03, 0x59, 0x0F,
+0x04, 0x59, 0x24, 0x05, 0x59, 0x39, 0x06, 0x59, 0x5F, 0x0C, 0x59, 0x8C, 0x0D, 0x59, 0xB9, 0x0E,
+0x59, 0xE6, 0x0F, 0x00, 0x00, 0x5A, 0x1A, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4,
+0x34, 0x89, 0xF5, 0x83, 0x74, 0xF0, 0xF0, 0xA3, 0x74, 0x15, 0x80, 0x3C, 0xE5, 0x0F, 0x25, 0xE0,
+0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0x74, 0xF0, 0xF0, 0xA3, 0x74, 0x10, 0x80,
+0x27, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0x74, 0xF0,
+0xF0, 0xA3, 0x74, 0x05, 0x80, 0x12, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34,
+0x89, 0xF5, 0x83, 0x74, 0xF0, 0xF0, 0xA3, 0xE4, 0xF0, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0x81, 0xF5,
+0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0x74, 0x0F, 0xF0, 0xA3, 0x74, 0x8F, 0xF0, 0x41, 0x1A, 0xE5,
+0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0x74, 0x0F, 0xF0, 0xA3,
+0x74, 0xF5, 0x80, 0x27, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5,
+0x83, 0x74, 0x0F, 0xF0, 0xA3, 0x74, 0xF0, 0x80, 0x12, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5,
+0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE4, 0xF0, 0xA3, 0x74, 0x0D, 0xF0, 0xE5, 0x0F, 0x25, 0xE0,
+0x24, 0x81, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE4, 0xF0, 0xA3, 0xF0, 0x41, 0x1A, 0x90,
+0x04, 0x47, 0xE0, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x12, 0x42, 0x4D, 0x90, 0x04, 0x46, 0xE0,
+0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x90, 0x00, 0x01, 0x12, 0x42, 0x5F, 0x90, 0x04, 0x45, 0xE0,
+0x85, 0x11, 0x82, 0x85, 0x10, 0x83, 0xF0, 0x90, 0x04, 0x44, 0x41, 0x11, 0x90, 0x04, 0x4B, 0xE0,
+0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x12, 0x42, 0x4D, 0x90, 0x04, 0x4A, 0xE0, 0xAB, 0x12, 0xAA,
+0x13, 0xA9, 0x14, 0x90, 0x00, 0x01, 0x12, 0x42, 0x5F, 0x90, 0x04, 0x49, 0xE0, 0x85, 0x11, 0x82,
+0x85, 0x10, 0x83, 0xF0, 0x90, 0x04, 0x48, 0x80, 0x58, 0x90, 0x04, 0x4F, 0xE0, 0xAB, 0x12, 0xAA,
+0x13, 0xA9, 0x14, 0x12, 0x42, 0x4D, 0x90, 0x04, 0x4E, 0xE0, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14,
+0x90, 0x00, 0x01, 0x12, 0x42, 0x5F, 0x90, 0x04, 0x4D, 0xE0, 0x85, 0x11, 0x82, 0x85, 0x10, 0x83,
+0xF0, 0x90, 0x04, 0x4C, 0x80, 0x2B, 0x90, 0x04, 0x53, 0xE0, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14,
+0x12, 0x42, 0x4D, 0x90, 0x04, 0x52, 0xE0, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x90, 0x00, 0x01,
+0x12, 0x42, 0x5F, 0x90, 0x04, 0x51, 0xE0, 0x85, 0x11, 0x82, 0x85, 0x10, 0x83, 0xF0, 0x90, 0x04,
+0x50, 0xE0, 0x85, 0x11, 0x82, 0x85, 0x10, 0x83, 0xA3, 0xF0, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14,
+0xC0, 0x03, 0xC0, 0x02, 0xC0, 0x01, 0x12, 0x29, 0xD9, 0xFF, 0xAB, 0x17, 0xAA, 0x18, 0xA9, 0x19,
+0x12, 0x29, 0xD9, 0x5F, 0xD0, 0x01, 0xD0, 0x02, 0xD0, 0x03, 0x12, 0x42, 0x4D, 0xAB, 0x12, 0xE5,
+0x14, 0x24, 0x01, 0xF9, 0xE4, 0x35, 0x13, 0xFA, 0xC0, 0x03, 0xC0, 0x02, 0xC0, 0x01, 0x12, 0x29,
+0xD9, 0xFF, 0xAB, 0x17, 0xAA, 0x18, 0xA9, 0x19, 0x90, 0x00, 0x01, 0x12, 0x42, 0x20, 0x5F, 0xD0,
+0x01, 0xD0, 0x02, 0xD0, 0x03, 0x12, 0x42, 0x4D, 0x85, 0x11, 0x82, 0x85, 0x10, 0x83, 0xC0, 0x83,
+0xC0, 0x82, 0xE0, 0xFF, 0x85, 0x16, 0x82, 0x85, 0x15, 0x83, 0xE0, 0xFE, 0xEF, 0x5E, 0xD0, 0x82,
+0xD0, 0x83, 0xF0, 0x85, 0x11, 0x82, 0x85, 0x10, 0x83, 0xA3, 0xC0, 0x83, 0xC0, 0x82, 0xE0, 0xFF,
+0x85, 0x16, 0x82, 0x85, 0x15, 0x83, 0xA3, 0xE0, 0xFE, 0xEF, 0x5E, 0xD0, 0x82, 0xD0, 0x83, 0xF0,
+0xE5, 0x0F, 0x25, 0xE0, 0x24, 0x81, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE0, 0xFE, 0xA3,
+0xE0, 0x4E, 0x60, 0x4B, 0x90, 0x8A, 0xE6, 0x74, 0x0B, 0xF0, 0x90, 0x8A, 0xE6, 0xE0, 0xFF, 0xC3,
+0x94, 0x00, 0x50, 0x02, 0x61, 0x5F, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08, 0x80, 0x05, 0xC3,
+0x33, 0xCE, 0x33, 0xCE, 0xD8, 0xF9, 0xFF, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0x81, 0xF5, 0x82, 0xE4,
+0x34, 0x86, 0xF5, 0x83, 0xE0, 0x5E, 0xFE, 0xA3, 0xE0, 0x5F, 0x4E, 0x60, 0x0A, 0x90, 0x8A, 0xE6,
+0xE0, 0x24, 0x10, 0xA3, 0xF0, 0x80, 0x68, 0x90, 0x8A, 0xE6, 0xE0, 0x14, 0xF0, 0x80, 0xBB, 0xE5,
+0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xFE, 0xA3, 0xE0,
+0x4E, 0x60, 0x47, 0x90, 0x8A, 0xE6, 0x74, 0x0F, 0xF0, 0x90, 0x8A, 0xE6, 0xE0, 0xFF, 0xC3, 0x94,
+0x00, 0x40, 0x3C, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08, 0x80, 0x05, 0xC3, 0x33, 0xCE, 0x33,
+0xCE, 0xD8, 0xF9, 0xFF, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5,
+0x83, 0xE0, 0x5E, 0xFE, 0xA3, 0xE0, 0x5F, 0x4E, 0x60, 0x08, 0x90, 0x8A, 0xE6, 0xE0, 0xA3, 0xF0,
+0x80, 0x0D, 0x90, 0x8A, 0xE6, 0xE0, 0x14, 0xF0, 0x80, 0xBF, 0xE4, 0x90, 0x8A, 0xE7, 0xF0, 0xE5,
+0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xFE, 0xA3, 0xE0,
+0x4E, 0x60, 0x46, 0xE4, 0x90, 0x8A, 0xE6, 0xF0, 0x90, 0x8A, 0xE6, 0xE0, 0xFF, 0xC3, 0x94, 0x10,
+0x40, 0x02, 0x81, 0x18, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08, 0x80, 0x05, 0xC3, 0x33, 0xCE,
+0x33, 0xCE, 0xD8, 0xF9, 0xFF, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89,
+0xF5, 0x83, 0xE0, 0x5E, 0xFE, 0xA3, 0xE0, 0x5F, 0x4E, 0x60, 0x06, 0x90, 0x8A, 0xE6, 0xE0, 0x80,
+0x63, 0x90, 0x8A, 0xE6, 0xE0, 0x04, 0xF0, 0x80, 0xBF, 0xE5, 0x0F, 0x25, 0xE0, 0x24, 0x81, 0xF5,
+0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE0, 0xFE, 0xA3, 0xE0, 0x4E, 0x60, 0x46, 0xE4, 0x90, 0x8A,
+0xE6, 0xF0, 0x90, 0x8A, 0xE6, 0xE0, 0xFF, 0xC3, 0x94, 0x0C, 0x50, 0x3C, 0x74, 0x01, 0x7E, 0x00,
+0xA8, 0x07, 0x08, 0x80, 0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8, 0xF9, 0xFF, 0xE5, 0x0F, 0x25,
+0xE0, 0x24, 0x81, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE0, 0x5E, 0xFE, 0xA3, 0xE0, 0x5F,
+0x4E, 0x60, 0x08, 0x90, 0x8A, 0xE6, 0xE0, 0x24, 0x10, 0x80, 0x09, 0x90, 0x8A, 0xE6, 0xE0, 0x04,
+0xF0, 0x80, 0xBF, 0xE4, 0x90, 0x8A, 0xE8, 0xF0, 0x90, 0x8A, 0xE7, 0xE0, 0xFF, 0x75, 0xF0, 0x09,
+0xE5, 0x0F, 0x90, 0x87, 0x27, 0x12, 0x43, 0x5F, 0xEF, 0xF0, 0x90, 0x8A, 0xE8, 0xE0, 0xFE, 0x75,
+0xF0, 0x09, 0xE5, 0x0F, 0x90, 0x87, 0x28, 0x12, 0x43, 0x5F, 0xEE, 0xF0, 0xE5, 0x0F, 0xC3, 0x94,
+0x20, 0x50, 0x32, 0x74, 0x84, 0x25, 0x0F, 0xF5, 0x82, 0xE4, 0x34, 0x04, 0xF5, 0x83, 0xE0, 0xD3,
+0x9F, 0x40, 0x02, 0x80, 0x18, 0x74, 0x84, 0x25, 0x0F, 0xF5, 0x82, 0xE4, 0x34, 0x04, 0xF5, 0x83,
+0xE0, 0xC3, 0x9E, 0x50, 0x08, 0x90, 0x8A, 0xE8, 0xE0, 0xA3, 0xF0, 0x80, 0x08, 0x90, 0x8A, 0xE7,
+0xE0, 0x90, 0x8A, 0xE9, 0xF0, 0x90, 0x8A, 0xE9, 0xE0, 0xFD, 0xAF, 0x0F, 0x91, 0xC1, 0x90, 0x8A,
+0xE9, 0xE0, 0xFF, 0x74, 0x84, 0x25, 0x0F, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xEF, 0xF0,
+0x90, 0x8A, 0xE7, 0xE0, 0xFF, 0xD3, 0x94, 0x13, 0x40, 0x07, 0x90, 0x87, 0x22, 0x74, 0x03, 0xF0,
+0x22, 0xEF, 0xD3, 0x94, 0x0B, 0x40, 0x07, 0x90, 0x87, 0x22, 0x74, 0x02, 0xF0, 0x22, 0xEF, 0xD3,
+0x94, 0x03, 0x40, 0x07, 0x90, 0x87, 0x22, 0x74, 0x01, 0xF0, 0x22, 0xE4, 0x90, 0x87, 0x22, 0xF0,
+0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x74, 0x84, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x04,
+0xF5, 0x83, 0xED, 0xF0, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xAC, 0x07, 0xED, 0x54, 0x1F, 0x90, 0x8A,
+0xC7, 0xF0, 0x74, 0x01, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE0, 0x90, 0x8A, 0xC5,
+0xF0, 0x90, 0x8A, 0xC8, 0x74, 0x01, 0xF0, 0xEB, 0xC3, 0x94, 0x01, 0x40, 0x02, 0x80, 0x37, 0x90,
+0x8A, 0xC5, 0xE0, 0x25, 0x0D, 0xFF, 0xA3, 0xF0, 0xA3, 0xE0, 0x90, 0x41, 0x9E, 0x93, 0xFE, 0xEF,
+0xD3, 0x9E, 0x40, 0x10, 0x74, 0x01, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE4, 0xF0,
+0xAF, 0x04, 0x80, 0x9D, 0x90, 0x8A, 0xC6, 0xE0, 0xFF, 0x74, 0x01, 0x2C, 0xF5, 0x82, 0xE4, 0x34,
+0x86, 0xF5, 0x83, 0xEF, 0xF0, 0x22, 0xAD, 0x07, 0x75, 0xF0, 0x09, 0xED, 0x90, 0x87, 0x27, 0x12,
+0x43, 0x5F, 0xE0, 0xFF, 0x90, 0x8A, 0xCA, 0xF0, 0x74, 0xA5, 0x2D, 0xF5, 0x82, 0xE4, 0x34, 0x8A,
+0xF5, 0x83, 0xE0, 0x54, 0x1F, 0x90, 0x8A, 0xC9, 0xF0, 0xD3, 0x9F, 0x40, 0x06, 0xA3, 0xE0, 0x90,
+0x8A, 0xC9, 0xF0, 0x90, 0x8A, 0xC9, 0xE0, 0xFF, 0x25, 0xE0, 0x24, 0x66, 0xF5, 0x82, 0xE4, 0x34,
+0x41, 0xF5, 0x83, 0xE4, 0x93, 0xFA, 0x74, 0x01, 0x93, 0xFB, 0xEF, 0x25, 0xE0, 0x24, 0x2E, 0xF5,
+0x82, 0xE4, 0x34, 0x41, 0xF5, 0x83, 0x74, 0x01, 0x93, 0x2B, 0xFF, 0xE4, 0x93, 0x3A, 0xC3, 0x13,
+0xFE, 0xEF, 0x13, 0xFF, 0xED, 0x25, 0xE0, 0x24, 0xE1, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83,
+0xEE, 0xF0, 0xA3, 0xEF, 0xF0, 0xAF, 0x05, 0x90, 0x8A, 0xC9, 0xE0, 0xFD, 0x91, 0xC1, 0x90, 0x8A,
+0xC9, 0xE0, 0xFF, 0x22, 0xAC, 0x07, 0x74, 0x84, 0x2C, 0xF5, 0x82, 0xE4, 0x34, 0x04, 0xF5, 0x83,
+0xE0, 0x54, 0x7F, 0x90, 0x8A, 0xDE, 0xF0, 0xE0, 0x54, 0x1F, 0xFF, 0x90, 0x8A, 0xE1, 0xF0, 0x75,
+0xF0, 0x09, 0xEC, 0x90, 0x87, 0x28, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xE3, 0xF0, 0x75, 0xF0,
+0x09, 0xEC, 0x90, 0x87, 0x27, 0x12, 0x43, 0x5F, 0xE0, 0xFE, 0x90, 0x8A, 0xE4, 0xF0, 0xEC, 0x25,
+0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xFB, 0xA3, 0xE0, 0x90, 0x8A,
+0xE5, 0xCB, 0xF0, 0xA3, 0xEB, 0xF0, 0xEC, 0x25, 0xE0, 0x24, 0x81, 0xF5, 0x82, 0xE4, 0x34, 0x86,
+0xF5, 0x83, 0xE0, 0xFB, 0xA3, 0xE0, 0x90, 0x8A, 0xE7, 0xCB, 0xF0, 0xA3, 0xEB, 0xF0, 0xEF, 0xD3,
+0x9E, 0x40, 0x0C, 0x90, 0x8A, 0xE4, 0xE0, 0x90, 0x8A, 0xE1, 0xF0, 0x90, 0x8A, 0xDE, 0xF0, 0xED,
+0x70, 0x02, 0xE1, 0x06, 0x90, 0x8A, 0xE2, 0xED, 0xF0, 0x90, 0x8A, 0xDE, 0xE0, 0x30, 0xE6, 0x0E,
+0x90, 0x8A, 0xE1, 0xE0, 0x90, 0x8A, 0xDE, 0xF0, 0x90, 0x8A, 0xE2, 0xE0, 0x14, 0xF0, 0x90, 0x8A,
+0xE2, 0xE0, 0x70, 0x02, 0xE1, 0x06, 0x90, 0x8A, 0xE1, 0xE0, 0xFF, 0xD3, 0x94, 0x00, 0x50, 0x02,
+0xE1, 0x06, 0xE4, 0x90, 0x8A, 0xE0, 0xF0, 0xEF, 0x14, 0x90, 0x8A, 0xDF, 0xF0, 0x90, 0x8A, 0xE3,
+0xE0, 0xFD, 0x90, 0x8A, 0xDF, 0xE0, 0xFF, 0xD3, 0x9D, 0x40, 0x6F, 0xEF, 0x94, 0x10, 0x40, 0x21,
+0xEF, 0x24, 0xF0, 0xFF, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08, 0x80, 0x05, 0xC3, 0x33, 0xCE,
+0x33, 0xCE, 0xD8, 0xF9, 0xFF, 0x90, 0x8A, 0xE7, 0xE0, 0x5E, 0xFE, 0xA3, 0xE0, 0x5F, 0x4E, 0x70,
+0x27, 0x90, 0x8A, 0xDF, 0xE0, 0xFF, 0xC3, 0x94, 0x10, 0x50, 0x37, 0x74, 0x01, 0x7E, 0x00, 0xA8,
+0x07, 0x08, 0x80, 0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8, 0xF9, 0xFF, 0x90, 0x8A, 0xE5, 0xE0,
+0x5E, 0xFE, 0xA3, 0xE0, 0x5F, 0x4E, 0x60, 0x1A, 0x90, 0x8A, 0xDF, 0xE0, 0x90, 0x8A, 0xDE, 0xF0,
+0x90, 0x8A, 0xE0, 0xE0, 0x04, 0xF0, 0x90, 0x8A, 0xE2, 0xE0, 0xFF, 0x90, 0x8A, 0xE0, 0xE0, 0x6F,
+0x60, 0x08, 0x90, 0x8A, 0xDF, 0xE0, 0x14, 0xF0, 0x80, 0x83, 0x90, 0x8A, 0xE2, 0xE0, 0xFF, 0x90,
+0x8A, 0xE0, 0xE0, 0xC3, 0x9F, 0x50, 0x0F, 0x90, 0x8A, 0xDF, 0xE0, 0xB5, 0x05, 0x08, 0x90, 0x8A,
+0xE3, 0xE0, 0x90, 0x8A, 0xDE, 0xF0, 0x90, 0x8A, 0xDE, 0xE0, 0xFF, 0x25, 0xE0, 0x24, 0x66, 0xF5,
+0x82, 0xE4, 0x34, 0x41, 0xF5, 0x83, 0xE4, 0x93, 0xFA, 0x74, 0x01, 0x93, 0xFB, 0xEF, 0x25, 0xE0,
+0x24, 0x2E, 0xF5, 0x82, 0xE4, 0x34, 0x41, 0xF5, 0x83, 0x74, 0x01, 0x93, 0x2B, 0xFF, 0xE4, 0x93,
+0x3A, 0xC3, 0x13, 0xFE, 0xEF, 0x13, 0xFF, 0xEC, 0x25, 0xE0, 0x24, 0xE1, 0xF5, 0x82, 0xE4, 0x34,
+0x86, 0xF5, 0x83, 0xEE, 0xF0, 0xA3, 0xEF, 0xF0, 0xAF, 0x04, 0x90, 0x8A, 0xDE, 0xE0, 0xFD, 0x91,
+0xC1, 0x90, 0x8A, 0xDE, 0xE0, 0xFF, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x8B, 0x1A,
+0x8A, 0x1B, 0x89, 0x1C, 0x90, 0x8B, 0x3F, 0x12, 0x43, 0x8B, 0xAB, 0x1D, 0xAA, 0x1E, 0xA9, 0x1F,
+0x90, 0x8B, 0x42, 0x12, 0x43, 0x8B, 0xAF, 0x20, 0x15, 0x20, 0xEF, 0x60, 0x1E, 0x90, 0x8B, 0x42,
+0xE4, 0x75, 0xF0, 0x01, 0x12, 0x43, 0x74, 0x12, 0x29, 0xD9, 0xFF, 0x90, 0x8B, 0x3F, 0xE4, 0x75,
+0xF0, 0x01, 0x12, 0x43, 0x74, 0xEF, 0x12, 0x42, 0x4D, 0x80, 0xDB, 0xAB, 0x1A, 0xAA, 0x1B, 0xA9,
+0x1C, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x90, 0x01, 0xC4,
+0x74, 0xA6, 0xF0, 0x74, 0x5F, 0xA3, 0xF0, 0x90, 0x04, 0x1D, 0xE0, 0x60, 0x1A, 0x90, 0x05, 0x22,
+0xE0, 0x54, 0x90, 0x60, 0x07, 0x90, 0x01, 0xC6, 0xE0, 0x44, 0x40, 0xF0, 0x90, 0x01, 0xC7, 0xE0,
+0x30, 0xE1, 0xE4, 0x7F, 0x00, 0x80, 0x02, 0x7F, 0x01, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xD3, 0x10,
+0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0xE4, 0xFB, 0xFA, 0xEF, 0x30, 0xE0, 0x02, 0x7B, 0x80, 0xEF, 0xC3,
+0x13, 0x90, 0xFD, 0x10, 0xF0, 0x90, 0x04, 0x25, 0xEF, 0xF0, 0xED, 0x60, 0x1E, 0xAF, 0x03, 0x74,
+0x0F, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x44, 0x80, 0xF0, 0x74, 0x10, 0x2F,
+0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x44, 0x80, 0xF0, 0xAF, 0x03, 0x74, 0x08, 0x2F,
+0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE4, 0xF0, 0x74, 0x09, 0x2F, 0xF5, 0x82, 0xE4, 0x34,
+0xFC, 0xF5, 0x83, 0xE0, 0x54, 0xF0, 0xF0, 0x74, 0x21, 0x2B, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5,
+0x83, 0xE0, 0x54, 0xF7, 0xF0, 0xAE, 0x02, 0xAF, 0x03, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xD3, 0x10,
+0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0xE4, 0xFD, 0xFC, 0xEF, 0x30, 0xE0, 0x02, 0x7D, 0x80, 0xEF, 0xC3,
+0x13, 0x90, 0xFD, 0x10, 0xF0, 0xAE, 0x04, 0xAF, 0x05, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x12, 0x5F,
+0xA6, 0xBF, 0x01, 0x10, 0x90, 0x02, 0x09, 0xE0, 0xFF, 0x7D, 0x01, 0x12, 0x5F, 0xDE, 0x90, 0x04,
+0x1F, 0x74, 0x20, 0xF0, 0x22, 0x90, 0x01, 0x02, 0xE0, 0x54, 0x03, 0xFF, 0xE0, 0x54, 0x0C, 0x13,
+0x13, 0x54, 0x3F, 0xFE, 0xEF, 0x64, 0x01, 0x60, 0x04, 0xEF, 0xB4, 0x03, 0x0E, 0x90, 0x8A, 0xC5,
+0x74, 0x01, 0xF0, 0xA3, 0x74, 0x37, 0xF0, 0x79, 0x01, 0x80, 0x18, 0xEE, 0x64, 0x01, 0x60, 0x07,
+0xAF, 0x06, 0xEE, 0x64, 0x03, 0x70, 0x3B, 0x90, 0x8A, 0xC5, 0x74, 0x01, 0xF0, 0xA3, 0x74, 0x3D,
+0xF0, 0x79, 0x40, 0x90, 0x8A, 0xC5, 0xE0, 0xFE, 0xA3, 0xE0, 0xFF, 0xF5, 0x82, 0x8E, 0x83, 0xE0,
+0x59, 0x60, 0x08, 0xE9, 0xF0, 0xE4, 0x90, 0x8A, 0xF6, 0xF0, 0x22, 0x90, 0x8A, 0xF6, 0xE0, 0x04,
+0xF0, 0xE0, 0xC3, 0x94, 0x0A, 0x40, 0x0B, 0xE4, 0xF0, 0x90, 0x04, 0x19, 0xE0, 0x30, 0xE0, 0x02,
+0x11, 0x6E, 0x22, 0xC0, 0xE0, 0xC0, 0xF0, 0xC0, 0x83, 0xC0, 0x82, 0xC0, 0xD0, 0x75, 0xD0, 0x00,
+0xC0, 0x00, 0xC0, 0x01, 0xC0, 0x02, 0xC0, 0x03, 0xC0, 0x04, 0xC0, 0x05, 0xC0, 0x06, 0xC0, 0x07,
+0x90, 0x01, 0xC4, 0x74, 0xF3, 0xF0, 0x74, 0x60, 0xA3, 0xF0, 0x90, 0x01, 0x34, 0xE0, 0x55, 0x28,
+0xF5, 0x2C, 0xA3, 0xE0, 0x55, 0x29, 0xF5, 0x2D, 0xA3, 0xE0, 0x55, 0x2A, 0xF5, 0x2E, 0xA3, 0xE0,
+0x55, 0x2B, 0xF5, 0x2F, 0xE5, 0x2C, 0x20, 0xE0, 0x02, 0x41, 0x8A, 0x90, 0x01, 0x34, 0x74, 0x01,
+0xF0, 0x85, 0xD1, 0x4D, 0x85, 0xD2, 0x4E, 0x85, 0xD3, 0x4F, 0x85, 0xD4, 0x50, 0x85, 0xD5, 0x51,
+0x85, 0xD6, 0x52, 0x85, 0xD7, 0x53, 0x85, 0xD9, 0x54, 0xE5, 0x54, 0x54, 0x40, 0xC3, 0x13, 0xFF,
+0xE5, 0x53, 0x54, 0x20, 0x6F, 0x70, 0x02, 0x41, 0x47, 0xE5, 0x54, 0x30, 0xE5, 0x02, 0x41, 0x47,
+0xE5, 0x52, 0x54, 0x1F, 0xF5, 0x08, 0xE5, 0x4D, 0x54, 0x3F, 0xF5, 0x09, 0xE5, 0x51, 0x54, 0x1F,
+0xFF, 0xE5, 0x08, 0x25, 0xE0, 0x24, 0xE3, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83, 0xE4, 0x8F,
+0xF0, 0x12, 0x42, 0x81, 0xE5, 0x53, 0x54, 0x1F, 0xFF, 0xE5, 0x08, 0x25, 0xE0, 0x24, 0xC0, 0xF5,
+0x82, 0xE4, 0x34, 0x85, 0xF5, 0x83, 0xE4, 0x8F, 0xF0, 0x12, 0x42, 0x81, 0xE5, 0x09, 0xD3, 0x94,
+0x04, 0x40, 0x03, 0x75, 0x09, 0x04, 0x75, 0xF0, 0x0A, 0xE5, 0x08, 0x90, 0x84, 0x00, 0x12, 0x43,
+0x5F, 0x75, 0xF0, 0x02, 0xE5, 0x09, 0x12, 0x43, 0x5F, 0xE0, 0xFE, 0xA3, 0xE0, 0xFF, 0xE5, 0x53,
+0x54, 0x1F, 0x2F, 0xFF, 0xE4, 0x3E, 0xFE, 0x75, 0xF0, 0x0A, 0xE5, 0x08, 0x90, 0x84, 0x00, 0x12,
+0x43, 0x5F, 0x75, 0xF0, 0x02, 0xE5, 0x09, 0x12, 0x43, 0x5F, 0xEE, 0xF0, 0xA3, 0xEF, 0xF0, 0xE5,
+0x54, 0x20, 0xE6, 0x24, 0xE5, 0x53, 0x54, 0x1F, 0xFF, 0xE5, 0x08, 0x25, 0xE0, 0x24, 0x63, 0xF5,
+0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83, 0xE4, 0x8F, 0xF0, 0x12, 0x42, 0x81, 0xE5, 0x4F, 0x30, 0xE7,
+0x36, 0xAF, 0x08, 0x12, 0x5D, 0x36, 0x80, 0x2F, 0xE5, 0x53, 0x54, 0x1F, 0xFF, 0xE5, 0x08, 0x25,
+0xE0, 0x24, 0xA3, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83, 0xE4, 0x8F, 0xF0, 0x12, 0x42, 0x81,
+0xE5, 0x4F, 0x30, 0xE7, 0x12, 0xE5, 0x4F, 0x54, 0x7F, 0xFD, 0xE5, 0x53, 0x54, 0x1F, 0xF5, 0x0D,
+0xAB, 0x09, 0xAF, 0x08, 0x12, 0x5C, 0xD9, 0xE5, 0x24, 0x14, 0x24, 0xFD, 0x50, 0x02, 0x80, 0x3A,
+0x90, 0x8B, 0x1A, 0xE0, 0x60, 0x2B, 0x90, 0x01, 0x5B, 0xE4, 0xF0, 0x90, 0x01, 0x3C, 0x74, 0x04,
+0xF0, 0x12, 0x4B, 0x34, 0xEF, 0x64, 0x01, 0x70, 0x21, 0x90, 0x8B, 0x3D, 0x12, 0x4B, 0x5C, 0x90,
+0x01, 0x5B, 0x74, 0x05, 0xF0, 0x90, 0x06, 0x92, 0x74, 0x01, 0xF0, 0x90, 0x8B, 0x18, 0xF0, 0x80,
+0x09, 0x12, 0x4B, 0x34, 0xBF, 0x01, 0x03, 0x12, 0x4A, 0xFC, 0xE5, 0x2C, 0x30, 0xE1, 0x20, 0x90,
+0x01, 0x34, 0x74, 0x02, 0xF0, 0x85, 0xD1, 0x56, 0x85, 0xD2, 0x57, 0x85, 0xD3, 0x58, 0x85, 0xD4,
+0x59, 0x85, 0xD5, 0x5A, 0x85, 0xD6, 0x5B, 0x85, 0xD7, 0x5C, 0x85, 0xD9, 0x5D, 0xB1, 0x5F, 0xE5,
+0x2C, 0x30, 0xE3, 0x06, 0x90, 0x01, 0x34, 0x74, 0x08, 0xF0, 0xE5, 0x2C, 0x30, 0xE4, 0x09, 0x90,
+0x01, 0x34, 0x74, 0x10, 0xF0, 0x43, 0x55, 0x10, 0xE5, 0x2C, 0x30, 0xE5, 0x26, 0x90, 0x01, 0xCF,
+0xE0, 0x30, 0xE5, 0x1F, 0xE0, 0x54, 0xDF, 0xF0, 0x90, 0x01, 0x34, 0x74, 0x20, 0xF0, 0x75, 0xA8,
+0x00, 0x75, 0xE8, 0x00, 0x12, 0x52, 0x10, 0x90, 0x00, 0x03, 0xE0, 0x54, 0xFB, 0xF0, 0x12, 0x52,
+0x81, 0x80, 0xFE, 0xE5, 0x2C, 0x30, 0xE6, 0x2D, 0x90, 0x01, 0x34, 0x74, 0x40, 0xF0, 0x90, 0x8B,
+0x32, 0xE0, 0x30, 0xE0, 0x0C, 0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x05, 0x90, 0x8B, 0x34, 0xE4,
+0xF0, 0x90, 0x8B, 0x2C, 0xE0, 0xFF, 0x30, 0xE0, 0x0C, 0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x05,
+0x90, 0x8B, 0x2E, 0xE4, 0xF0, 0xE5, 0x2E, 0x20, 0xE0, 0x02, 0x61, 0xE7, 0x90, 0x8B, 0x08, 0x74,
+0x01, 0xF0, 0x90, 0x01, 0x36, 0xF0, 0x90, 0x8B, 0x06, 0xE0, 0x60, 0x0F, 0xE4, 0xF0, 0x90, 0x05,
+0x53, 0xE0, 0x44, 0x02, 0xF0, 0x90, 0x05, 0xFC, 0xE0, 0x04, 0xF0, 0x90, 0x8B, 0x32, 0xE0, 0x30,
+0xE0, 0x2F, 0x90, 0x8B, 0x37, 0x74, 0x01, 0xF0, 0x90, 0x8B, 0x32, 0xE0, 0xFF, 0x13, 0x13, 0x54,
+0x3F, 0x30, 0xE0, 0x1D, 0x90, 0x8B, 0x34, 0x74, 0x01, 0xF0, 0xB1, 0x39, 0x90, 0x8B, 0x33, 0xE0,
+0x64, 0x03, 0x60, 0x0D, 0x7F, 0x01, 0x12, 0x4D, 0xE0, 0xEF, 0x60, 0x05, 0x7F, 0x04, 0x12, 0x4E,
+0x89, 0x90, 0x8B, 0x2C, 0xE0, 0xFF, 0x30, 0xE0, 0x56, 0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x4F,
+0x90, 0x8B, 0x2E, 0x74, 0x01, 0xF0, 0xB1, 0x39, 0xE4, 0xFF, 0x12, 0x4D, 0xE0, 0xEF, 0x60, 0x3F,
+0xB1, 0xF0, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x90, 0x8B, 0x2D, 0xE0, 0xFF, 0x64, 0x06, 0x60,
+0x2E, 0xEF, 0xB4, 0x04, 0x02, 0x80, 0x07, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x05, 0x04, 0xE4, 0xFF,
+0x80, 0x14, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x03, 0x04, 0x7F, 0x01, 0x80, 0x09, 0x90, 0x8B, 0x2D,
+0xE0, 0xB4, 0x02, 0x05, 0x7F, 0x01, 0x12, 0x7B, 0x49, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x12,
+0x43, 0xE7, 0x90, 0x8B, 0x08, 0xE4, 0xF0, 0xE5, 0x2E, 0x30, 0xE1, 0x2F, 0x90, 0x01, 0x36, 0x74,
+0x02, 0xF0, 0x43, 0x55, 0x40, 0x11, 0x85, 0x90, 0x8B, 0x37, 0xE0, 0xB4, 0x01, 0x09, 0x90, 0x05,
+0x22, 0xE4, 0xF0, 0x90, 0x8B, 0x37, 0xF0, 0x90, 0x8B, 0x2C, 0xE0, 0x30, 0xE0, 0x0D, 0xE4, 0xFF,
+0x12, 0x4D, 0xE0, 0xEF, 0x60, 0x05, 0x90, 0x05, 0x22, 0xE4, 0xF0, 0xE5, 0x2E, 0x30, 0xE2, 0x16,
+0x90, 0x01, 0x36, 0x74, 0x04, 0xF0, 0x90, 0x8B, 0x2C, 0xE0, 0x30, 0xE0, 0x06, 0xA3, 0xE0, 0x64,
+0x06, 0x60, 0x03, 0x12, 0x46, 0xB3, 0xE5, 0x2E, 0x30, 0xE3, 0x38, 0x90, 0x01, 0x36, 0x74, 0x08,
+0xF0, 0xE5, 0x21, 0x64, 0x01, 0x70, 0x2C, 0xE5, 0x24, 0x60, 0x28, 0x90, 0x01, 0x57, 0xE4, 0xF0,
+0x90, 0x01, 0x3C, 0x74, 0x02, 0xF0, 0x90, 0x8B, 0x3D, 0xE4, 0xF0, 0x90, 0x8B, 0x11, 0xE0, 0x90,
+0x8B, 0x3E, 0xF0, 0xE4, 0xFB, 0xFD, 0x7F, 0x54, 0x7E, 0x01, 0x12, 0x4B, 0x6C, 0x90, 0x01, 0x57,
+0x74, 0x05, 0xF0, 0xE5, 0x2E, 0x30, 0xE4, 0x2B, 0x90, 0x01, 0x36, 0x74, 0x10, 0xF0, 0xE5, 0x21,
+0xB4, 0x01, 0x20, 0xE5, 0x24, 0x60, 0x1C, 0x90, 0x01, 0x57, 0xE4, 0xF0, 0x90, 0x01, 0x3C, 0x74,
+0x02, 0xF0, 0x90, 0x8B, 0x1B, 0xE4, 0xF0, 0x53, 0x25, 0xFD, 0xE5, 0x25, 0x54, 0x07, 0x70, 0x03,
+0x12, 0x4A, 0xFC, 0xE5, 0x2E, 0x30, 0xE5, 0x1F, 0x90, 0x01, 0x36, 0x74, 0x20, 0xF0, 0xE5, 0x21,
+0xB4, 0x01, 0x14, 0xE5, 0x24, 0x60, 0x10, 0x90, 0x8B, 0x1A, 0xE0, 0x64, 0x02, 0x60, 0x05, 0x12,
+0x4A, 0x97, 0x80, 0x03, 0x12, 0x49, 0x49, 0xE5, 0x2E, 0x30, 0xE6, 0x1B, 0x90, 0x01, 0x36, 0x74,
+0x40, 0xF0, 0xE5, 0x21, 0xB4, 0x01, 0x10, 0xE5, 0x24, 0x60, 0x0C, 0x53, 0x25, 0xFE, 0xE5, 0x25,
+0x54, 0x07, 0x70, 0x03, 0x12, 0x4A, 0xFC, 0xE5, 0x2F, 0x30, 0xE1, 0x27, 0x90, 0x01, 0x37, 0x74,
+0x02, 0xF0, 0x90, 0x8B, 0x2C, 0xE0, 0x30, 0xE0, 0x17, 0xE4, 0xFF, 0x12, 0x4D, 0xE0, 0xEF, 0x60,
+0x07, 0x12, 0x48, 0xFE, 0xD1, 0x20, 0x80, 0x0B, 0x90, 0x8B, 0x31, 0x74, 0x01, 0xF0, 0x80, 0x03,
+0x12, 0x48, 0xFE, 0x74, 0xF3, 0x04, 0x90, 0x01, 0xC4, 0xF0, 0x74, 0x60, 0xA3, 0xF0, 0xD0, 0x07,
+0xD0, 0x06, 0xD0, 0x05, 0xD0, 0x04, 0xD0, 0x03, 0xD0, 0x02, 0xD0, 0x01, 0xD0, 0x00, 0xD0, 0xD0,
+0xD0, 0x82, 0xD0, 0x83, 0xD0, 0xF0, 0xD0, 0xE0, 0x32, 0xE4, 0x90, 0x8B, 0x3D, 0xF0, 0x90, 0x05,
+0x58, 0xE0, 0xFF, 0x90, 0x8B, 0x38, 0xE0, 0x2F, 0x24, 0xFE, 0x90, 0x8B, 0x3E, 0xF0, 0xE4, 0xFB,
+0xFD, 0x7F, 0x50, 0x7E, 0x01, 0x12, 0x4B, 0x6C, 0x90, 0x01, 0x53, 0x74, 0x05, 0xF0, 0x22, 0x90,
+0x8A, 0xC5, 0xE0, 0x54, 0xF0, 0x44, 0x03, 0xF0, 0x54, 0x0F, 0x44, 0x80, 0xF0, 0x7B, 0x00, 0x7A,
+0x00, 0x79, 0x56, 0x90, 0x8B, 0x48, 0x12, 0x43, 0x8B, 0x0B, 0x7A, 0x8A, 0x79, 0xC5, 0xD3, 0x10,
+0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x90, 0x8B, 0x45, 0x12, 0x43, 0x8B, 0x90, 0x8B, 0x53, 0xE0, 0xFF,
+0x04, 0xF0, 0x90, 0x00, 0x01, 0xEF, 0x12, 0x42, 0x5F, 0x7F, 0xAF, 0x7E, 0x01, 0xD1, 0x8A, 0xEF,
+0x60, 0x49, 0x90, 0x8B, 0x45, 0x12, 0x43, 0x6B, 0x8B, 0x1D, 0x8A, 0x1E, 0x89, 0x1F, 0x75, 0x20,
+0x02, 0x7B, 0x01, 0x7A, 0x01, 0x79, 0xA0, 0x12, 0x5F, 0x57, 0x90, 0x8B, 0x48, 0x12, 0x43, 0x6B,
+0x8B, 0x1D, 0x8A, 0x1E, 0x89, 0x1F, 0x90, 0x8B, 0x45, 0x12, 0x43, 0x6B, 0x12, 0x29, 0xD9, 0xFF,
+0xC4, 0x54, 0x0F, 0xF5, 0x20, 0x7B, 0x01, 0x7A, 0x01, 0x79, 0xA2, 0x12, 0x5F, 0x57, 0x90, 0x01,
+0xAF, 0x74, 0xFF, 0xF0, 0x90, 0x01, 0xCB, 0xE0, 0x64, 0x80, 0xF0, 0xD0, 0xD0, 0x92, 0xAF, 0x22,
+0x90, 0x8B, 0x2C, 0xE0, 0xFF, 0xC4, 0x13, 0x13, 0x54, 0x03, 0x30, 0xE0, 0x0B, 0xA3, 0xE0, 0x64,
+0x06, 0x60, 0x05, 0x7F, 0x06, 0x12, 0x7B, 0x49, 0x90, 0x8B, 0x2D, 0xE0, 0x64, 0x06, 0x60, 0x02,
+0xD1, 0x13, 0x22, 0x90, 0x8B, 0x31, 0xE0, 0xB4, 0x01, 0x05, 0xE4, 0xF0, 0x12, 0x48, 0xFE, 0x22,
+0x90, 0x8B, 0x2D, 0xE0, 0x64, 0x06, 0x60, 0x3C, 0xE5, 0x22, 0x54, 0x0F, 0x14, 0x60, 0x2E, 0x14,
+0x60, 0x1E, 0x24, 0xFE, 0x60, 0x0E, 0x24, 0xF8, 0x70, 0x2A, 0xE4, 0x90, 0x8B, 0x2D, 0xF0, 0x90,
+0x05, 0x22, 0xF0, 0x22, 0x90, 0x8B, 0x2D, 0x74, 0x01, 0xF0, 0x90, 0x05, 0x22, 0xE4, 0xF0, 0x22,
+0x90, 0x8B, 0x2D, 0x74, 0x03, 0xF0, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x22, 0x90, 0x01, 0xC6,
+0xE0, 0x44, 0x08, 0xF0, 0x22, 0xAE, 0x07, 0xE4, 0xFF, 0x12, 0x4D, 0xE0, 0xEF, 0x60, 0x18, 0x90,
+0x8B, 0x2C, 0xE0, 0xC4, 0x13, 0x13, 0x54, 0x03, 0x20, 0xE0, 0x0C, 0xAF, 0x06, 0x7D, 0x01, 0x12,
+0x45, 0xA2, 0xD1, 0x20, 0x7F, 0x01, 0x22, 0x7F, 0x00, 0x22, 0x90, 0x8B, 0x4B, 0xEE, 0xF0, 0xA3,
+0xEF, 0xF0, 0xE4, 0xA3, 0xF0, 0xA3, 0xF0, 0x90, 0x8B, 0x4B, 0xE0, 0xFE, 0xA3, 0xE0, 0xF5, 0x82,
+0x8E, 0x83, 0xE0, 0x60, 0x2C, 0xC3, 0x90, 0x8B, 0x4E, 0xE0, 0x94, 0xE8, 0x90, 0x8B, 0x4D, 0xE0,
+0x94, 0x03, 0x40, 0x0A, 0x90, 0x01, 0xC6, 0xE0, 0x44, 0x10, 0xF0, 0x7F, 0x00, 0x22, 0x90, 0x8B,
+0x4D, 0xE4, 0x75, 0xF0, 0x01, 0x12, 0x42, 0x81, 0x7F, 0x0A, 0x7E, 0x00, 0x12, 0x37, 0x54, 0x80,
+0xC6, 0x7F, 0x01, 0x22, 0x75, 0x28, 0x33, 0xE4, 0xF5, 0x29, 0x75, 0x2A, 0x07, 0xF5, 0x2B, 0x90,
+0x01, 0x30, 0xE5, 0x28, 0xF0, 0xA3, 0xE5, 0x29, 0xF0, 0xA3, 0xE5, 0x2A, 0xF0, 0xA3, 0xE5, 0x2B,
+0xF0, 0x22, 0x75, 0x30, 0x1F, 0x75, 0x31, 0x01, 0x43, 0x31, 0x10, 0xE4, 0xF5, 0x32, 0x90, 0x01,
+0x38, 0xE5, 0x30, 0xF0, 0xA3, 0xE5, 0x31, 0xF0, 0xA3, 0xE5, 0x32, 0xF0, 0x22, 0x22, 0x90, 0x00,
+0x02, 0xE0, 0x54, 0xE0, 0x7F, 0x01, 0x60, 0x02, 0x7F, 0x00, 0x22, 0x90, 0x00, 0xF3, 0xE0, 0x7F,
+0x00, 0x30, 0xE3, 0x02, 0x7F, 0x01, 0x22, 0x90, 0x8B, 0x09, 0xE0, 0xB4, 0x01, 0x0C, 0x90, 0x00,
+0xF2, 0xE0, 0x30, 0xE7, 0x05, 0x7E, 0xFD, 0x7F, 0x33, 0x22, 0x7E, 0xFD, 0x7F, 0x2F, 0x22, 0x90,
+0x00, 0xF3, 0xE0, 0x30, 0xE2, 0x0D, 0x90, 0x05, 0x41, 0x74, 0x10, 0xF0, 0x90, 0x05, 0x5A, 0xF0,
+0xA3, 0xE4, 0xF0, 0x22, 0x90, 0x01, 0x64, 0x74, 0xA0, 0xF0, 0x22, 0xC0, 0xE0, 0xC0, 0x83, 0xC0,
+0x82, 0xC0, 0xD0, 0x75, 0xD0, 0x00, 0xC0, 0x05, 0xC0, 0x06, 0xC0, 0x07, 0x7D, 0x5B, 0x90, 0x01,
+0xC4, 0xED, 0xF0, 0x74, 0x67, 0xFF, 0xA3, 0xF0, 0x53, 0x91, 0xEF, 0x90, 0x00, 0x51, 0xE0, 0xFE,
+0x90, 0x00, 0x55, 0xE0, 0x5E, 0xF5, 0x3D, 0x90, 0x00, 0x52, 0xE0, 0xFE, 0x90, 0x00, 0x56, 0xE0,
+0x5E, 0xF5, 0x3E, 0xE5, 0x3D, 0x30, 0xE4, 0x06, 0x90, 0x00, 0x55, 0x74, 0x10, 0xF0, 0xE5, 0x3D,
+0x30, 0xE5, 0x06, 0x90, 0x00, 0x55, 0x74, 0x20, 0xF0, 0xE5, 0x3D, 0x30, 0xE6, 0x06, 0x90, 0x00,
+0x55, 0x74, 0x40, 0xF0, 0xE5, 0x3D, 0x30, 0xE7, 0x06, 0x90, 0x00, 0x55, 0x74, 0x80, 0xF0, 0xE5,
+0x3E, 0x30, 0xE0, 0x06, 0x90, 0x00, 0x56, 0x74, 0x01, 0xF0, 0xE5, 0x3E, 0x30, 0xE1, 0x06, 0x90,
+0x00, 0x56, 0x74, 0x02, 0xF0, 0xE5, 0x3E, 0x30, 0xE2, 0x06, 0x90, 0x00, 0x56, 0x74, 0x04, 0xF0,
+0xE5, 0x3E, 0x30, 0xE3, 0x06, 0x90, 0x00, 0x56, 0x74, 0x08, 0xF0, 0x90, 0x01, 0xC4, 0xED, 0xF0,
+0xA3, 0xEF, 0xF0, 0xD0, 0x07, 0xD0, 0x06, 0xD0, 0x05, 0xD0, 0xD0, 0xD0, 0x82, 0xD0, 0x83, 0xD0,
+0xE0, 0x32, 0xEF, 0xC3, 0x94, 0x20, 0x50, 0x39, 0xEF, 0x30, 0xE0, 0x17, 0xED, 0xC4, 0x54, 0xF0,
+0xFD, 0xEF, 0xC3, 0x13, 0xFE, 0x24, 0xA4, 0xF5, 0x82, 0xE4, 0x34, 0x04, 0xF5, 0x83, 0xE0, 0x54,
+0x0F, 0x80, 0x10, 0xEF, 0xC3, 0x13, 0xFE, 0x24, 0xA4, 0xF5, 0x82, 0xE4, 0x34, 0x04, 0xF5, 0x83,
+0xE0, 0x54, 0xF0, 0xF0, 0x74, 0xA4, 0x2E, 0xF5, 0x82, 0xE4, 0x34, 0x04, 0xF5, 0x83, 0xE0, 0x4D,
+0xF0, 0x22, 0xE4, 0x90, 0x8A, 0xCF, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0xC3, 0x94, 0x20, 0x40,
+0x02, 0xC1, 0xCD, 0x75, 0xF0, 0x09, 0xEF, 0x90, 0x87, 0x2A, 0x12, 0x43, 0x5F, 0xE0, 0x64, 0x01,
+0x60, 0x02, 0xC1, 0xC5, 0x90, 0x8A, 0xCF, 0xE0, 0x25, 0xE0, 0x24, 0xC0, 0xF5, 0x82, 0xE4, 0x34,
+0x85, 0xF5, 0x83, 0xE0, 0xFC, 0xA3, 0xE0, 0xD3, 0x94, 0x00, 0xEC, 0x94, 0x00, 0x50, 0x02, 0xC1,
+0xC5, 0xEF, 0x75, 0xF0, 0x0A, 0xA4, 0x24, 0x00, 0xF9, 0x74, 0x84, 0x35, 0xF0, 0x75, 0x12, 0x01,
+0xF5, 0x13, 0x89, 0x14, 0x90, 0x8A, 0xCF, 0xE0, 0x25, 0xE0, 0x24, 0xC0, 0xF5, 0x82, 0xE4, 0x34,
+0x85, 0xF5, 0x83, 0xE0, 0xFD, 0xA3, 0xE0, 0x90, 0x8A, 0xD4, 0xCD, 0xF0, 0xA3, 0xED, 0xF0, 0xEF,
+0x25, 0xE0, 0x24, 0x63, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83, 0xE0, 0xFF, 0xA3, 0xE0, 0x90,
+0x8A, 0xD6, 0xCF, 0xF0, 0xA3, 0xEF, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0xFE, 0x24, 0x84, 0xF5, 0x82,
+0xE4, 0x34, 0x04, 0xF5, 0x83, 0xE0, 0x54, 0x3F, 0x90, 0x8A, 0xD0, 0xF0, 0xE0, 0xFD, 0x54, 0x1F,
+0xA3, 0xF0, 0x75, 0xF0, 0x09, 0xEE, 0x90, 0x87, 0x27, 0x12, 0x43, 0x5F, 0xE0, 0x90, 0x8A, 0xD9,
+0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0xFB, 0x24, 0x64, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE0,
+0xC3, 0x94, 0x05, 0x40, 0x02, 0x61, 0x1A, 0x90, 0x8A, 0xD9, 0xE0, 0xFE, 0x90, 0x8A, 0xD1, 0xE0,
+0x9E, 0x40, 0x13, 0x90, 0x8A, 0xD9, 0xE0, 0x90, 0x8A, 0xD1, 0xF0, 0xED, 0x54, 0x40, 0xFD, 0x90,
+0x8A, 0xD0, 0xF0, 0xEE, 0x4D, 0xF0, 0x90, 0x8A, 0xD1, 0xE0, 0xFF, 0x90, 0x41, 0x12, 0x93, 0xFE,
+0x74, 0x23, 0x2B, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xC3, 0x9E, 0x40, 0x06, 0xEF,
+0x90, 0x40, 0xDA, 0x80, 0x07, 0x90, 0x8A, 0xD1, 0xE0, 0x90, 0x40, 0xF6, 0x93, 0x90, 0x8A, 0xD8,
+0xF0, 0x90, 0x8A, 0xD8, 0xE0, 0x75, 0xF0, 0x06, 0xA4, 0x24, 0x50, 0xF9, 0x74, 0x40, 0x35, 0xF0,
+0x75, 0x0F, 0xFF, 0xF5, 0x10, 0x89, 0x11, 0x90, 0x8A, 0xD0, 0xE0, 0x90, 0x41, 0xBA, 0x93, 0xFF,
+0xD3, 0x90, 0x8A, 0xD7, 0xE0, 0x9F, 0x90, 0x8A, 0xD6, 0xE0, 0x94, 0x00, 0x40, 0x0C, 0x90, 0x8A,
+0xCF, 0xE0, 0xFF, 0xE4, 0xFD, 0x12, 0x5D, 0xB4, 0xC1, 0x5B, 0x90, 0x8A, 0xCF, 0xE0, 0x25, 0xE0,
+0x24, 0xE1, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE0, 0xFF, 0xA3, 0xE0, 0x90, 0x8A, 0xD2,
+0xCF, 0xF0, 0xA3, 0xEF, 0xF0, 0xAB, 0x0F, 0xAA, 0x10, 0xA9, 0x11, 0x12, 0x29, 0xD9, 0xFF, 0x7E,
+0x00, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x12, 0x42, 0x97, 0xFD, 0xAC, 0xF0, 0x12, 0x29, 0xF2,
+0x90, 0x8A, 0xD2, 0xEE, 0x8F, 0xF0, 0x12, 0x42, 0x81, 0xAB, 0x0F, 0xAA, 0x10, 0xA9, 0x11, 0x90,
+0x00, 0x01, 0x12, 0x42, 0x20, 0xFF, 0x7E, 0x00, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x90, 0x00,
+0x02, 0x12, 0x42, 0xC2, 0xFD, 0xAC, 0xF0, 0x12, 0x29, 0xF2, 0x90, 0x8A, 0xD2, 0xEE, 0x8F, 0xF0,
+0x12, 0x42, 0x81, 0xAB, 0x0F, 0xAA, 0x10, 0xA9, 0x11, 0x90, 0x00, 0x02, 0x12, 0x42, 0x20, 0xFF,
+0x7E, 0x00, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x90, 0x00, 0x04, 0x12, 0x42, 0xC2, 0xFD, 0xAC,
+0xF0, 0x12, 0x29, 0xF2, 0x90, 0x8A, 0xD2, 0xEE, 0x8F, 0xF0, 0x12, 0x42, 0x81, 0xAB, 0x0F, 0xAA,
+0x10, 0xA9, 0x11, 0x90, 0x00, 0x03, 0x12, 0x42, 0x20, 0xFF, 0x7E, 0x00, 0xAB, 0x12, 0xAA, 0x13,
+0xA9, 0x14, 0x90, 0x00, 0x06, 0x12, 0x42, 0xC2, 0xFD, 0xAC, 0xF0, 0x12, 0x29, 0xF2, 0x90, 0x8A,
+0xD2, 0xEE, 0x8F, 0xF0, 0x12, 0x42, 0x81, 0xAB, 0x0F, 0xAA, 0x10, 0xA9, 0x11, 0x90, 0x00, 0x04,
+0x12, 0x42, 0x20, 0xFF, 0x7E, 0x00, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x90, 0x00, 0x08, 0x12,
+0x42, 0xC2, 0xFD, 0xAC, 0xF0, 0x12, 0x29, 0xF2, 0x90, 0x8A, 0xD2, 0xEE, 0x8F, 0xF0, 0x12, 0x42,
+0x81, 0xAB, 0x0F, 0xAA, 0x10, 0xA9, 0x11, 0x90, 0x00, 0x05, 0x12, 0x42, 0x20, 0xFF, 0x7E, 0x00,
+0x90, 0x8A, 0xD4, 0xE0, 0xFC, 0xA3, 0xE0, 0xFD, 0x12, 0x29, 0xF2, 0xD3, 0x90, 0x8A, 0xD3, 0xE0,
+0x9F, 0x90, 0x8A, 0xD2, 0xE0, 0x9E, 0x40, 0x0C, 0xA3, 0xE0, 0x9F, 0xF0, 0x90, 0x8A, 0xD2, 0xE0,
+0x9E, 0xF0, 0x80, 0x07, 0xE4, 0x90, 0x8A, 0xD2, 0xF0, 0xA3, 0xF0, 0x90, 0x8A, 0xD2, 0xE0, 0xFC,
+0xA3, 0xE0, 0xFD, 0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0x25, 0xE0, 0x24, 0xE1, 0xF5, 0x82, 0xE4, 0x34,
+0x86, 0xF5, 0x83, 0xEC, 0xF0, 0xA3, 0xED, 0xF0, 0x90, 0x8A, 0xD0, 0xE0, 0x25, 0xE0, 0x24, 0x2E,
+0xF5, 0x82, 0xE4, 0x34, 0x41, 0xF5, 0x83, 0xE4, 0x93, 0xFA, 0x74, 0x01, 0x93, 0xFB, 0xD3, 0xED,
+0x9B, 0xEC, 0x9A, 0x40, 0x04, 0xD1, 0xCE, 0xC1, 0x29, 0x90, 0x8A, 0xD0, 0xE0, 0x25, 0xE0, 0x24,
+0x66, 0xF5, 0x82, 0xE4, 0x34, 0x41, 0xF5, 0x83, 0xE4, 0x93, 0xFE, 0x74, 0x01, 0x93, 0xFF, 0xC3,
+0x90, 0x8A, 0xD3, 0xE0, 0x9F, 0x90, 0x8A, 0xD2, 0xE0, 0x9E, 0x40, 0x02, 0xC1, 0x29, 0x90, 0x8A,
+0xCF, 0xE0, 0xFF, 0x7D, 0x01, 0x12, 0x5D, 0xB4, 0xC1, 0x29, 0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0x24,
+0x64, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE0, 0xFC, 0x64, 0x05, 0x60, 0x02, 0x81, 0xF8,
+0x90, 0x87, 0x22, 0xE0, 0xFE, 0xB4, 0x03, 0x0B, 0x90, 0x8A, 0xD1, 0xE0, 0xC3, 0x94, 0x19, 0x40,
+0x3D, 0x80, 0x2E, 0xEE, 0xB4, 0x02, 0x0B, 0x90, 0x8A, 0xD1, 0xE0, 0xC3, 0x94, 0x11, 0x40, 0x2E,
+0x80, 0x1F, 0x90, 0x87, 0x22, 0xE0, 0xFE, 0xB4, 0x01, 0x0B, 0x90, 0x8A, 0xD1, 0xE0, 0xC3, 0x94,
+0x0A, 0x40, 0x1B, 0x80, 0x0C, 0xEE, 0x70, 0x11, 0x90, 0x8A, 0xD1, 0xE0, 0xC3, 0x94, 0x03, 0x40,
+0x0D, 0x90, 0x89, 0x43, 0x74, 0x01, 0xF0, 0x80, 0x05, 0xE4, 0x90, 0x89, 0x43, 0xF0, 0x90, 0x8A,
+0xCF, 0xE0, 0xFE, 0x24, 0x43, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83, 0xE0, 0x90, 0x8A, 0xDD,
+0xF0, 0x74, 0x23, 0x2E, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xFE, 0xC3, 0x94, 0x30,
+0x50, 0x0A, 0xE4, 0x90, 0x8A, 0xDD, 0xF0, 0x74, 0x64, 0x2F, 0x81, 0xA3, 0x90, 0x89, 0x43, 0xE0,
+0x64, 0x01, 0x60, 0x02, 0x81, 0x98, 0x90, 0x8A, 0xCF, 0xE0, 0x24, 0x44, 0xF5, 0x82, 0xE4, 0x34,
+0x89, 0xF5, 0x83, 0xE0, 0x64, 0x0A, 0x60, 0x5B, 0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0xEE, 0x24, 0x05,
+0xFB, 0xE4, 0x33, 0xFA, 0x74, 0x21, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xE0, 0xFF,
+0xD3, 0x9B, 0xEA, 0x64, 0x80, 0xF8, 0x74, 0x80, 0x98, 0x50, 0x38, 0x90, 0x8A, 0xCF, 0xE0, 0xFE,
+0xEF, 0x24, 0x05, 0xFB, 0xE4, 0x33, 0xFA, 0x74, 0x23, 0x2E, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5,
+0x83, 0xE0, 0xD3, 0x9B, 0xEA, 0x64, 0x80, 0xF8, 0x74, 0x80, 0x98, 0x50, 0x16, 0x90, 0x8A, 0xCF,
+0xE0, 0x24, 0x84, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE0, 0xFF, 0x90, 0x8A, 0xD1, 0xE0,
+0x6F, 0x60, 0x56, 0x90, 0x8A, 0xCF, 0xE0, 0x24, 0x23, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83,
+0xE0, 0xFF, 0xD3, 0x94, 0x42, 0x40, 0x08, 0x90, 0x8A, 0xDD, 0x74, 0x05, 0xF0, 0x80, 0x11, 0xEF,
+0xD3, 0x94, 0x39, 0x90, 0x8A, 0xDD, 0x40, 0x05, 0x74, 0x03, 0xF0, 0x80, 0x03, 0x74, 0x01, 0xF0,
+0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0x24, 0x23, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xFE,
+0x74, 0x21, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xEE, 0xF0, 0x90, 0x8A, 0xCF, 0xE0,
+0x24, 0x44, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0x80, 0x2F, 0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0x24, 0x64,
+0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE4, 0xF0, 0x74, 0x44, 0x2F, 0xF5, 0x82, 0xE4, 0x34,
+0x89, 0xF5, 0x83, 0xE0, 0x04, 0xF0, 0x80, 0x14, 0xE4, 0x90, 0x8A, 0xDD, 0xF0, 0x90, 0x8A, 0xCF,
+0xE0, 0x24, 0x64, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE4, 0xF0, 0x90, 0x8A, 0xD1, 0xE0,
+0xFE, 0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0x24, 0x84, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xEE,
+0xF0, 0x90, 0x8A, 0xDD, 0xE0, 0xFE, 0x74, 0x43, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83,
+0xEE, 0xF0, 0x75, 0xF0, 0x09, 0xEF, 0x90, 0x87, 0x2B, 0x12, 0x43, 0x5F, 0xE0, 0xB4, 0x01, 0x11,
+0xE4, 0x90, 0x8A, 0xDD, 0xF0, 0x74, 0x64, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE4,
+0xF0, 0x90, 0x8A, 0xDD, 0xE0, 0xFD, 0xC1, 0x27, 0xEC, 0x64, 0x06, 0x60, 0x02, 0xC1, 0x29, 0x90,
+0x8A, 0xD2, 0xF0, 0xA3, 0xF0, 0x90, 0x41, 0xDB, 0x93, 0xFF, 0x7E, 0x00, 0x90, 0x8A, 0xD4, 0xE0,
+0xFC, 0xA3, 0xE0, 0xFD, 0x12, 0x29, 0xF2, 0x90, 0x8A, 0xDB, 0xEE, 0xF0, 0xA3, 0xEF, 0xF0, 0x90,
+0x8A, 0xCF, 0xE0, 0x24, 0x43, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5, 0x83, 0xE0, 0x90, 0x8A, 0xDD,
+0xF0, 0xE4, 0x90, 0x8A, 0xDA, 0xF0, 0x90, 0x8A, 0xDA, 0xE0, 0xFF, 0xD3, 0x94, 0x04, 0x50, 0x47,
+0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x75, 0xF0, 0x02, 0xEF, 0xA4, 0xF5, 0x82, 0x85, 0xF0, 0x83,
+0x12, 0x42, 0xC2, 0xFD, 0xAC, 0xF0, 0xEF, 0x90, 0x41, 0xD6, 0x93, 0xFF, 0x7E, 0x00, 0x12, 0x29,
+0xF2, 0x90, 0x8A, 0xD2, 0xEE, 0x8F, 0xF0, 0x12, 0x42, 0x81, 0x90, 0x8A, 0xDB, 0xE0, 0xFE, 0xA3,
+0xE0, 0xFF, 0xD3, 0x90, 0x8A, 0xD3, 0xE0, 0x9F, 0x90, 0x8A, 0xD2, 0xE0, 0x9E, 0x50, 0x08, 0x90,
+0x8A, 0xDA, 0xE0, 0x04, 0xF0, 0x80, 0xAF, 0x90, 0x8A, 0xDA, 0xE0, 0xC3, 0x13, 0xF0, 0x90, 0x8A,
+0xDD, 0xE0, 0xFF, 0xB4, 0x01, 0x0D, 0x90, 0x8A, 0xDA, 0xE0, 0x70, 0x5D, 0x90, 0x8A, 0xDD, 0x04,
+0xF0, 0x80, 0x5B, 0xEF, 0xB4, 0x03, 0x1D, 0x90, 0x8A, 0xDA, 0xE0, 0xFF, 0x70, 0x08, 0x90, 0x8A,
+0xDD, 0x74, 0x03, 0xF0, 0x80, 0x48, 0xEF, 0xB4, 0x01, 0x08, 0x90, 0x8A, 0xDD, 0x74, 0x01, 0xF0,
+0x80, 0x3C, 0x80, 0x35, 0x90, 0x8A, 0xDD, 0xE0, 0x64, 0x05, 0x70, 0x32, 0x90, 0x8A, 0xDA, 0xE0,
+0xFF, 0x70, 0x08, 0x90, 0x8A, 0xDD, 0x74, 0x05, 0xF0, 0x80, 0x0F, 0xEF, 0x90, 0x8A, 0xDD, 0xB4,
+0x01, 0x05, 0x74, 0x03, 0xF0, 0x80, 0x03, 0x74, 0x01, 0xF0, 0xD3, 0x90, 0x8A, 0xD7, 0xE0, 0x94,
+0x03, 0x90, 0x8A, 0xD6, 0xE0, 0x94, 0x00, 0x40, 0x05, 0xE4, 0x90, 0x8A, 0xDD, 0xF0, 0xD3, 0x90,
+0x8A, 0xD7, 0xE0, 0x94, 0x03, 0x90, 0x8A, 0xD6, 0xE0, 0x94, 0x00, 0x40, 0x05, 0xE4, 0x90, 0x8A,
+0xDD, 0xF0, 0x90, 0x8A, 0xDD, 0xE0, 0xFD, 0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0x24, 0x43, 0xF5, 0x82,
+0xE4, 0x34, 0x88, 0xF5, 0x83, 0xED, 0xF0, 0x11, 0x02, 0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0x24, 0x64,
+0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE0, 0xD3, 0x94, 0x05, 0x50, 0x0F, 0x74, 0x64, 0x2F,
+0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE0, 0x04, 0xF0, 0x80, 0x0F, 0x90, 0x8A, 0xCF, 0xE0,
+0x24, 0x64, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE4, 0xF0, 0xAB, 0x12, 0xAA, 0x13, 0xA9,
+0x14, 0xE4, 0xF5, 0xF0, 0x12, 0x42, 0xFA, 0xAB, 0x12, 0xAA, 0x13, 0xA9, 0x14, 0x90, 0x00, 0x02,
+0xE4, 0xF5, 0xF0, 0x12, 0x43, 0x19, 0x90, 0x00, 0x04, 0xE4, 0xF5, 0xF0, 0x12, 0x43, 0x19, 0x90,
+0x00, 0x06, 0xE4, 0xF5, 0xF0, 0x12, 0x43, 0x19, 0x90, 0x00, 0x08, 0xE4, 0xF5, 0xF0, 0x12, 0x43,
+0x19, 0x90, 0x8A, 0xCF, 0xE0, 0xFF, 0x25, 0xE0, 0x24, 0xC0, 0xF5, 0x82, 0xE4, 0x34, 0x85, 0xF5,
+0x83, 0xE4, 0xF0, 0xA3, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0x63, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5,
+0x83, 0xE4, 0xF0, 0xA3, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0xA3, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5,
+0x83, 0xE4, 0xF0, 0xA3, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0x04, 0xF0, 0x01, 0x47, 0x22, 0xAD, 0x07,
+0x74, 0x84, 0x2D, 0xF5, 0x82, 0xE4, 0x34, 0x04, 0xF5, 0x83, 0xE0, 0x54, 0x7F, 0x90, 0x8A, 0xDE,
+0xF0, 0xE0, 0xF9, 0x54, 0x1F, 0xA3, 0xF0, 0x75, 0xF0, 0x09, 0xED, 0x90, 0x87, 0x27, 0x12, 0x43,
+0x5F, 0xE0, 0xFF, 0x90, 0x8A, 0xE1, 0xF0, 0xED, 0x25, 0xE0, 0x24, 0x81, 0xF5, 0x82, 0xE4, 0x34,
+0x86, 0xF5, 0x83, 0xE0, 0xFB, 0xA3, 0xE0, 0x90, 0x8A, 0xE2, 0xCB, 0xF0, 0xA3, 0xEB, 0xF0, 0xED,
+0x25, 0xE0, 0x24, 0xE4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE0, 0xFB, 0xA3, 0xE0, 0x90,
+0x8A, 0xE4, 0xCB, 0xF0, 0xA3, 0xEB, 0xF0, 0x90, 0x8A, 0xDF, 0xE0, 0xFE, 0x25, 0xE0, 0x24, 0x2E,
+0xF5, 0x82, 0xE4, 0x34, 0x41, 0xF5, 0x83, 0xE4, 0x93, 0xFA, 0x74, 0x01, 0x93, 0xFB, 0xED, 0x25,
+0xE0, 0x24, 0xE1, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xEA, 0xF0, 0xA3, 0xEB, 0xF0, 0xEE,
+0xC3, 0x9F, 0x40, 0x03, 0x02, 0x70, 0x12, 0x90, 0x8A, 0xDF, 0xE0, 0xFF, 0x74, 0xA5, 0x2D, 0xF5,
+0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xEF, 0xF0, 0xEF, 0x04, 0x90, 0x8A, 0xE0, 0xF0, 0x90, 0x8A,
+0xE1, 0xE0, 0xFF, 0x90, 0x8A, 0xE0, 0xE0, 0xFE, 0xD3, 0x9F, 0x40, 0x03, 0x02, 0x70, 0x4C, 0xEE,
+0xC3, 0x94, 0x10, 0x40, 0x21, 0xEE, 0x24, 0xF0, 0xFF, 0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08,
+0x80, 0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8, 0xF9, 0xFF, 0x90, 0x8A, 0xE2, 0xE0, 0x5E, 0xFE,
+0xA3, 0xE0, 0x5F, 0x4E, 0x70, 0x27, 0x90, 0x8A, 0xE0, 0xE0, 0xFF, 0xC3, 0x94, 0x10, 0x50, 0x59,
+0x74, 0x01, 0x7E, 0x00, 0xA8, 0x07, 0x08, 0x80, 0x05, 0xC3, 0x33, 0xCE, 0x33, 0xCE, 0xD8, 0xF9,
+0xFF, 0x90, 0x8A, 0xE4, 0xE0, 0x5E, 0xFE, 0xA3, 0xE0, 0x5F, 0x4E, 0x60, 0x3C, 0x90, 0x8A, 0xE0,
+0xE0, 0xB4, 0x11, 0x0D, 0x90, 0x8A, 0xE3, 0xE0, 0x30, 0xE7, 0x06, 0x90, 0x8A, 0xE0, 0x74, 0x17,
+0xF0, 0x90, 0x8A, 0xE0, 0xE0, 0xFF, 0x64, 0x13, 0x60, 0x04, 0xEF, 0xB4, 0x12, 0x0D, 0x90, 0x8A,
+0xE2, 0xE0, 0x30, 0xE0, 0x06, 0x90, 0x8A, 0xE0, 0x74, 0x18, 0xF0, 0x90, 0x8A, 0xE0, 0xE0, 0x90,
+0x8A, 0xDF, 0xF0, 0x90, 0x8A, 0xDE, 0xF0, 0x80, 0x43, 0x90, 0x8A, 0xE0, 0xE0, 0x04, 0xF0, 0x02,
+0x6F, 0x6E, 0x90, 0x8A, 0xE1, 0xE0, 0xFC, 0x90, 0x8A, 0xDF, 0xE0, 0xFF, 0x6C, 0x70, 0x71, 0x74,
+0xA5, 0x2D, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xEF, 0xF0, 0x75, 0xF0, 0x09, 0xED, 0x90,
+0x87, 0x29, 0x12, 0x43, 0x5F, 0xE0, 0xB4, 0x01, 0x10, 0xE9, 0x20, 0xE6, 0x0C, 0x90, 0x8A, 0xDF,
+0xE0, 0x44, 0x40, 0x90, 0x8A, 0xDE, 0xF0, 0x80, 0x03, 0xAF, 0x01, 0x22, 0x90, 0x8A, 0xDF, 0xE0,
+0xFF, 0x25, 0xE0, 0x24, 0x66, 0xF5, 0x82, 0xE4, 0x34, 0x41, 0xF5, 0x83, 0xE4, 0x93, 0xFA, 0x74,
+0x01, 0x93, 0xFB, 0xEF, 0x25, 0xE0, 0x24, 0x2E, 0xF5, 0x82, 0xE4, 0x34, 0x41, 0xF5, 0x83, 0x74,
+0x01, 0x93, 0x2B, 0xFF, 0xE4, 0x93, 0x3A, 0xC3, 0x13, 0xFE, 0xEF, 0x13, 0xFF, 0xED, 0x25, 0xE0,
+0x24, 0xE1, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xEE, 0xF0, 0xA3, 0xEF, 0xF0, 0x80, 0x66,
+0x90, 0x8A, 0xDF, 0xE0, 0xD3, 0x9C, 0x40, 0x5E, 0x90, 0x8A, 0xE1, 0xE0, 0xFF, 0x74, 0xA5, 0x2D,
+0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xEF, 0xF0, 0x90, 0x8A, 0xDF, 0xEF, 0xF0, 0x90, 0x8A,
+0xDE, 0xF0, 0xFC, 0xA3, 0xE0, 0xFF, 0x25, 0xE0, 0x24, 0x66, 0xF5, 0x82, 0xE4, 0x34, 0x41, 0xF5,
+0x83, 0xE4, 0x93, 0xFA, 0x74, 0x01, 0x93, 0xFB, 0xEF, 0x25, 0xE0, 0x24, 0x2E, 0xF5, 0x82, 0xE4,
+0x34, 0x41, 0xF5, 0x83, 0x74, 0x01, 0x93, 0x2B, 0xFF, 0xE4, 0x93, 0x3A, 0xC3, 0x13, 0xFE, 0xEF,
+0x13, 0xFF, 0xED, 0x25, 0xE0, 0x24, 0xE1, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0xEE, 0xF0,
+0xA3, 0xEF, 0xF0, 0xAF, 0x04, 0x22, 0x74, 0x01, 0x2D, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83,
+0xE4, 0xF0, 0xAF, 0x05, 0x90, 0x8A, 0xDE, 0xE0, 0x44, 0x80, 0xFD, 0x12, 0x5C, 0xC1, 0x90, 0x8A,
+0xDE, 0xE0, 0x44, 0x80, 0xFF, 0x22, 0xE4, 0x90, 0x8A, 0xCF, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0xFF,
+0xC3, 0x94, 0x10, 0x50, 0x14, 0x74, 0xA4, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x04, 0xF5, 0x83, 0xE4,
+0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0x04, 0xF0, 0x80, 0xE2, 0xE4, 0x90, 0x8A, 0xCF, 0xF0, 0x90, 0x8A,
+0xCF, 0xE0, 0xFF, 0xC3, 0x94, 0x20, 0x40, 0x02, 0x41, 0xCF, 0x75, 0xF0, 0x0A, 0xEF, 0x90, 0x84,
+0x00, 0x12, 0x43, 0x5F, 0xE4, 0xF0, 0xA3, 0xF0, 0x75, 0xF0, 0x0A, 0xEF, 0x90, 0x84, 0x02, 0x12,
+0x43, 0x5F, 0xE4, 0xF0, 0xA3, 0xF0, 0x75, 0xF0, 0x0A, 0xEF, 0x90, 0x84, 0x04, 0x12, 0x43, 0x5F,
+0xE4, 0xF0, 0xA3, 0xF0, 0x75, 0xF0, 0x0A, 0xEF, 0x90, 0x84, 0x06, 0x12, 0x43, 0x5F, 0xE4, 0xF0,
+0xA3, 0xF0, 0x75, 0xF0, 0x0A, 0xEF, 0x90, 0x84, 0x08, 0x12, 0x43, 0x5F, 0xE4, 0xF0, 0xA3, 0xF0,
+0x74, 0x84, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0x74, 0x13, 0xF0, 0x74, 0x44, 0x2F,
+0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xE4, 0xF0, 0x74, 0x43, 0x2F, 0xF5, 0x82, 0xE4, 0x34,
+0x88, 0xF5, 0x83, 0xE4, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0xC0, 0xF5, 0x82, 0xE4, 0x34, 0x85, 0xF5,
+0x83, 0xE4, 0xF0, 0xA3, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0x63, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5,
+0x83, 0xE4, 0xF0, 0xA3, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0xE3, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5,
+0x83, 0xE4, 0xF0, 0xA3, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0xA3, 0xF5, 0x82, 0xE4, 0x34, 0x88, 0xF5,
+0x83, 0xE4, 0xF0, 0xA3, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0x64, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5,
+0x83, 0xE4, 0xF0, 0xA3, 0xF0, 0xEF, 0x25, 0xE0, 0x24, 0xA4, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5,
+0x83, 0xE4, 0xF0, 0xA3, 0xF0, 0x74, 0x44, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE4,
+0xF0, 0x74, 0x24, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE4, 0xF0, 0x74, 0x64, 0x2F,
+0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xE4, 0xF0, 0x90, 0x41, 0x8C, 0x93, 0xFE, 0x74, 0x01,
+0x93, 0xFF, 0x90, 0x41, 0x54, 0x74, 0x01, 0x93, 0x2F, 0xFF, 0xE4, 0x93, 0x3E, 0xC3, 0x13, 0xFE,
+0xEF, 0x13, 0xFF, 0x90, 0x8A, 0xCF, 0xE0, 0xFD, 0x25, 0xE0, 0x24, 0xE1, 0xF5, 0x82, 0xE4, 0x34,
+0x86, 0xF5, 0x83, 0xEE, 0xF0, 0xA3, 0xEF, 0xF0, 0x75, 0xF0, 0x09, 0xED, 0x90, 0x87, 0x29, 0x12,
+0x43, 0x5F, 0x74, 0x01, 0xF0, 0x74, 0xC1, 0x2D, 0xF5, 0x82, 0xE4, 0x34, 0x86, 0xF5, 0x83, 0x74,
+0x0C, 0xF0, 0x75, 0xF0, 0x09, 0xED, 0x90, 0x87, 0x25, 0x12, 0x43, 0x5F, 0x74, 0xFF, 0xF0, 0xA3,
+0xF0, 0x75, 0xF0, 0x09, 0xED, 0x90, 0x87, 0x23, 0x12, 0x43, 0x5F, 0xE4, 0xF0, 0xA3, 0x74, 0x0F,
+0xF0, 0x75, 0xF0, 0x09, 0xED, 0x90, 0x87, 0x27, 0x12, 0x43, 0x5F, 0x74, 0x13, 0xF0, 0x75, 0xF0,
+0x09, 0xED, 0x90, 0x87, 0x28, 0x12, 0x43, 0x5F, 0xE4, 0xF0, 0x74, 0x84, 0x2D, 0xF5, 0x82, 0xE4,
+0x34, 0x04, 0xF5, 0x83, 0x74, 0x13, 0xF0, 0x90, 0x8A, 0xCF, 0xE0, 0x04, 0xF0, 0x21, 0x3E, 0x22,
+0x12, 0x29, 0xD9, 0xFF, 0xC3, 0x94, 0x20, 0x50, 0x14, 0x90, 0x00, 0x02, 0x12, 0x42, 0x20, 0xFE,
+0x74, 0x23, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x89, 0xF5, 0x83, 0xEE, 0xF0, 0x22, 0xEF, 0xB4, 0x20,
+0x0A, 0x90, 0x00, 0x02, 0x12, 0x42, 0x20, 0x90, 0x87, 0x21, 0xF0, 0x22, 0x12, 0x29, 0xD9, 0xF5,
+0x21, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x90, 0x8A, 0xDA, 0x12, 0x2A, 0x8B, 0x00,
+0x00, 0x00, 0x00, 0x90, 0x00, 0x01, 0x12, 0x42, 0x20, 0x90, 0x8B, 0x1A, 0xF0, 0x90, 0x00, 0x03,
+0x12, 0x42, 0x20, 0x90, 0x8B, 0x0A, 0xF0, 0x12, 0x47, 0xFA, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x90,
+0x00, 0x02, 0x12, 0x42, 0x20, 0xFF, 0x30, 0xE0, 0x25, 0x12, 0x29, 0xD9, 0x90, 0x8B, 0x10, 0xF0,
+0x90, 0x00, 0x01, 0x12, 0x42, 0x20, 0x90, 0x8B, 0x11, 0xF0, 0xEF, 0xC3, 0x13, 0x54, 0x7F, 0x90,
+0x8B, 0x0F, 0xF0, 0x90, 0x00, 0x03, 0x12, 0x42, 0x20, 0x90, 0x8B, 0x16, 0xF0, 0x22, 0x90, 0x8B,
+0x10, 0x74, 0x03, 0xF0, 0x90, 0x8B, 0x11, 0x74, 0x05, 0xF0, 0x90, 0x8B, 0x0F, 0x74, 0x14, 0xF0,
+0x90, 0x8B, 0x16, 0x74, 0x05, 0xF0, 0x22, 0x12, 0x29, 0xD9, 0x30, 0xE0, 0x19, 0xC3, 0x13, 0x54,
+0x7F, 0x90, 0x8B, 0x15, 0xF0, 0x90, 0x00, 0x01, 0x12, 0x42, 0x20, 0xFF, 0x90, 0x8B, 0x13, 0xE4,
+0xF0, 0xA3, 0xEF, 0xF0, 0x80, 0x0F, 0x90, 0x8B, 0x15, 0x74, 0x05, 0xF0, 0x90, 0x8B, 0x13, 0xE4,
+0xF0, 0xA3, 0x74, 0x03, 0xF0, 0x90, 0x8B, 0x13, 0xE0, 0xA3, 0xE0, 0x90, 0x05, 0x58, 0xF0, 0x22,
+0x12, 0x29, 0xD9, 0x90, 0x8B, 0x12, 0xF0, 0x60, 0x07, 0xE4, 0xFD, 0x7F, 0x04, 0x12, 0x45, 0xA2,
+0x90, 0x8B, 0x12, 0xE0, 0x90, 0x01, 0xE7, 0xF0, 0x22, 0x90, 0x02, 0x09, 0xE0, 0xFD, 0x12, 0x29,
+0xD9, 0xFE, 0xAF, 0x05, 0xED, 0x2E, 0x90, 0x8A, 0xF7, 0xF0, 0x90, 0x00, 0x01, 0x12, 0x42, 0x20,
+0xFF, 0xED, 0x2F, 0x90, 0x8A, 0xF8, 0xF0, 0x90, 0x00, 0x02, 0x12, 0x42, 0x20, 0xFF, 0xED, 0x2F,
+0x90, 0x8A, 0xF9, 0xF0, 0x90, 0x00, 0x03, 0x12, 0x42, 0x20, 0xFF, 0xED, 0x2F, 0x90, 0x8A, 0xFA,
+0xF0, 0x90, 0x00, 0x04, 0x12, 0x42, 0x20, 0xFF, 0xAE, 0x05, 0xED, 0x2F, 0x90, 0x8A, 0xFB, 0xF0,
+0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x90, 0x8A, 0xDA, 0x12, 0x43, 0x8B, 0xE4, 0x90,
+0x8A, 0xDD, 0xF0, 0x12, 0x29, 0xD9, 0xC3, 0x13, 0x20, 0xE0, 0x02, 0xA1, 0x62, 0x90, 0x8A, 0xDA,
+0x12, 0x43, 0x6B, 0x12, 0x29, 0xD9, 0xFF, 0x54, 0x02, 0xFE, 0x90, 0x8B, 0x32, 0xE0, 0x54, 0xFD,
+0x4E, 0xFE, 0xF0, 0xEF, 0x54, 0x01, 0xFF, 0xEE, 0x54, 0xFE, 0x4F, 0xFF, 0xF0, 0x12, 0x29, 0xD9,
+0xFE, 0x54, 0x08, 0xFD, 0xEF, 0x54, 0xF7, 0x4D, 0xFF, 0x90, 0x8B, 0x32, 0xF0, 0xEE, 0x54, 0x10,
+0xFE, 0xEF, 0x54, 0xEF, 0x4E, 0xFF, 0xF0, 0x12, 0x29, 0xD9, 0xFE, 0x54, 0x20, 0xFD, 0xEF, 0x54,
+0xDF, 0x4D, 0xFF, 0x90, 0x8B, 0x32, 0xF0, 0xEE, 0x54, 0x40, 0xFE, 0xEF, 0x54, 0xBF, 0x4E, 0xF0,
+0x20, 0xE0, 0x02, 0xA1, 0x4F, 0x90, 0x8A, 0xDD, 0x74, 0x21, 0xF0, 0x90, 0x8A, 0xDA, 0x12, 0x43,
+0x6B, 0x12, 0x29, 0xD9, 0xFF, 0x13, 0x13, 0x54, 0x01, 0xFE, 0x90, 0x8B, 0x32, 0xE0, 0xFD, 0x13,
+0x13, 0x54, 0x01, 0x6E, 0x60, 0x2A, 0xEF, 0x54, 0x04, 0xFF, 0xED, 0x54, 0xFB, 0x4F, 0xF0, 0xE0,
+0x13, 0x13, 0x54, 0x3F, 0x30, 0xE0, 0x0E, 0x90, 0x01, 0x34, 0x74, 0x40, 0xF0, 0xFD, 0xE4, 0xFF,
+0x12, 0x36, 0xE6, 0x80, 0x0B, 0xE4, 0x90, 0x8B, 0x34, 0xF0, 0x7D, 0x40, 0xFF, 0x12, 0x36, 0x75,
+0x90, 0x8B, 0x32, 0xE0, 0xFD, 0x13, 0x13, 0x13, 0x54, 0x1F, 0x30, 0xE0, 0x07, 0x90, 0x8A, 0xDD,
+0xE0, 0x44, 0x12, 0xF0, 0xED, 0xC4, 0x54, 0x0F, 0x30, 0xE0, 0x07, 0x90, 0x8A, 0xDD, 0xE0, 0x44,
+0x14, 0xF0, 0x90, 0x8B, 0x32, 0xE0, 0xC4, 0x13, 0x54, 0x07, 0x30, 0xE0, 0x07, 0x90, 0x8A, 0xDD,
+0xE0, 0x44, 0x80, 0xF0, 0x90, 0x8B, 0x32, 0xE0, 0xC4, 0x13, 0x13, 0x54, 0x03, 0x20, 0xE0, 0x07,
+0x90, 0x8A, 0xDD, 0xE0, 0x44, 0x40, 0xF0, 0x90, 0x8A, 0xDD, 0xE0, 0x90, 0x05, 0x27, 0xF0, 0x90,
+0x8B, 0x33, 0xE0, 0x70, 0x05, 0x7F, 0x01, 0x12, 0x4E, 0x89, 0x90, 0x8B, 0x32, 0xE0, 0xC4, 0x13,
+0x13, 0x54, 0x03, 0x30, 0xE0, 0x04, 0x7F, 0x03, 0x80, 0x0E, 0x7F, 0x01, 0x12, 0x4D, 0xE0, 0xEF,
+0x60, 0x04, 0x7F, 0x01, 0x80, 0x02, 0x7F, 0x02, 0x12, 0x4E, 0x89, 0x7F, 0x02, 0xC1, 0xA4, 0x90,
+0x8A, 0xDD, 0x74, 0x01, 0xF0, 0x90, 0x05, 0x27, 0xF0, 0xE4, 0xFF, 0x12, 0x4E, 0x89, 0x7F, 0x03,
+0xC1, 0xA4, 0x90, 0x8A, 0xDA, 0x12, 0x43, 0x6B, 0x12, 0x29, 0xD9, 0xFF, 0x54, 0x02, 0xFE, 0x90,
+0x8B, 0x2C, 0xE0, 0x54, 0xFD, 0x4E, 0xFE, 0xF0, 0xEF, 0x54, 0x01, 0xFF, 0xEE, 0x54, 0xFE, 0x4F,
+0xFF, 0xF0, 0x12, 0x29, 0xD9, 0xFE, 0x54, 0x08, 0xFD, 0xEF, 0x54, 0xF7, 0x4D, 0xFF, 0x90, 0x8B,
+0x2C, 0xF0, 0xEE, 0x54, 0x10, 0xFE, 0xEF, 0x54, 0xEF, 0x4E, 0xFF, 0xF0, 0x12, 0x29, 0xD9, 0xFE,
+0x54, 0x40, 0xFD, 0xEF, 0x54, 0xBF, 0x4D, 0xFF, 0x90, 0x8B, 0x2C, 0xF0, 0xEE, 0x54, 0x04, 0xFE,
+0xEF, 0x54, 0xFB, 0x4E, 0xF0, 0x20, 0xE0, 0x02, 0xC1, 0x57, 0x90, 0x8A, 0xDD, 0x74, 0x31, 0xF0,
+0x90, 0x8B, 0x2C, 0xE0, 0x13, 0x13, 0x54, 0x3F, 0x20, 0xE0, 0x0B, 0xE4, 0x90, 0x8B, 0x2E, 0xF0,
+0x7D, 0x40, 0xFF, 0x12, 0x36, 0x75, 0x90, 0x8B, 0x2C, 0xE0, 0xFD, 0x13, 0x13, 0x13, 0x54, 0x1F,
+0x30, 0xE0, 0x07, 0x90, 0x8A, 0xDD, 0xE0, 0x44, 0x02, 0xF0, 0xED, 0xC4, 0x54, 0x0F, 0x30, 0xE0,
+0x07, 0x90, 0x8A, 0xDD, 0xE0, 0x44, 0x04, 0xF0, 0x90, 0x8A, 0xDD, 0xE0, 0x54, 0x06, 0x60, 0x0C,
+0x90, 0x01, 0x3E, 0x74, 0x03, 0xF0, 0xFD, 0x7F, 0x02, 0x12, 0x37, 0x00, 0x90, 0x8A, 0xDD, 0xE0,
+0x90, 0x05, 0x27, 0xF0, 0x90, 0x8B, 0x2C, 0xE0, 0xFF, 0xC4, 0x13, 0x13, 0x54, 0x03, 0x30, 0xE0,
+0x0D, 0xA3, 0xE0, 0x64, 0x06, 0x60, 0x2C, 0x7F, 0x06, 0x12, 0x7B, 0x49, 0x80, 0x25, 0x90, 0x8B,
+0x2D, 0xE0, 0xB4, 0x06, 0x1B, 0x7F, 0x01, 0x12, 0x7B, 0x49, 0xE4, 0xFF, 0x12, 0x4D, 0xE0, 0xEF,
+0x60, 0x09, 0x7D, 0x01, 0xAF, 0x23, 0x12, 0x45, 0xA2, 0x80, 0x05, 0x12, 0x4E, 0x56, 0x80, 0x03,
+0x12, 0x66, 0x20, 0x7F, 0x01, 0x80, 0x4D, 0x90, 0x8A, 0xDD, 0x74, 0x01, 0xF0, 0x90, 0x05, 0x27,
+0xF0, 0x7D, 0x03, 0x7F, 0x02, 0x12, 0x36, 0x92, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x06, 0x02, 0x80,
+0x1B, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x04, 0x02, 0x80, 0x07, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x05,
+0x04, 0xE4, 0xFF, 0x80, 0x14, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x03, 0x04, 0x7F, 0x01, 0x80, 0x09,
+0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x02, 0x05, 0x7F, 0x01, 0x12, 0x7B, 0x49, 0x12, 0x66, 0x13, 0x12,
+0x4A, 0xFC, 0x7F, 0x03, 0xD1, 0xAB, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xAD, 0x07, 0xEF, 0x64, 0x01,
+0x60, 0x04, 0xEF, 0xB4, 0x03, 0x15, 0x90, 0x8B, 0x32, 0xE0, 0x54, 0xFE, 0xF0, 0x54, 0xFB, 0xF0,
+0xE4, 0xA3, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0xED, 0x64, 0x02, 0x60, 0x04,
+0xED, 0xB4, 0x03, 0x15, 0x90, 0x8B, 0x2C, 0xE0, 0x54, 0xFE, 0xF0, 0x54, 0xFB, 0xF0, 0xE4, 0xA3,
+0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0xA3, 0xF0, 0x22, 0x12, 0x29, 0xD9, 0x90, 0x8B, 0x38,
+0xF0, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0x90, 0x8A, 0xFD, 0xE0, 0x90, 0x8A, 0xE8,
+0xF0, 0x90, 0x8A, 0xFE, 0xE0, 0xFF, 0xA3, 0xE0, 0x90, 0x8A, 0xE9, 0xCF, 0xF0, 0xA3, 0xEF, 0xF0,
+0xE4, 0x90, 0x8A, 0xE4, 0xF0, 0x90, 0x8A, 0xE4, 0xE0, 0xFF, 0x24, 0x00, 0xF5, 0x82, 0xE4, 0x34,
+0x8B, 0xF5, 0x83, 0xE0, 0xFE, 0x74, 0xEB, 0x2F, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xEE,
+0xF0, 0x90, 0x8A, 0xE4, 0xE0, 0x04, 0xF0, 0xE0, 0xB4, 0x04, 0xDA, 0x90, 0x8A, 0xE8, 0xE0, 0x12,
+0x43, 0x94, 0x77, 0x61, 0x00, 0x78, 0xD7, 0x01, 0x77, 0x6C, 0x02, 0x77, 0x6C, 0x03, 0x77, 0x6C,
+0x04, 0x78, 0xD7, 0x05, 0x78, 0xA1, 0x80, 0x78, 0xBA, 0x81, 0x78, 0xD7, 0x82, 0x00, 0x00, 0x78,
+0xD3, 0x90, 0x8A, 0xEE, 0xE0, 0xFF, 0x12, 0x7E, 0x6E, 0x02, 0x78, 0xD7, 0x90, 0x8A, 0xE8, 0xE0,
+0xFF, 0xB4, 0x02, 0x08, 0x90, 0x8A, 0xE5, 0x74, 0x01, 0xF0, 0x80, 0x0F, 0xEF, 0x90, 0x8A, 0xE5,
+0xB4, 0x03, 0x05, 0x74, 0x02, 0xF0, 0x80, 0x03, 0x74, 0x04, 0xF0, 0xC3, 0x90, 0x8A, 0xE9, 0xE0,
+0x94, 0x08, 0x50, 0x79, 0xE4, 0x90, 0x8A, 0xE4, 0xF0, 0x90, 0x8A, 0xE5, 0xE0, 0xFF, 0x90, 0x8A,
+0xE4, 0xE0, 0xC3, 0x9F, 0x40, 0x03, 0x02, 0x78, 0xD7, 0x90, 0x8A, 0xE9, 0xE0, 0xFE, 0xA3, 0xE0,
+0xFF, 0xC3, 0xEE, 0x94, 0x01, 0x90, 0x8A, 0xE4, 0xE0, 0x50, 0x1F, 0xFE, 0x2F, 0xFF, 0xEE, 0xFD,
+0xC3, 0x74, 0x03, 0x9D, 0xFD, 0xE4, 0x94, 0x00, 0xFC, 0x74, 0xEB, 0x2D, 0xF5, 0x82, 0x74, 0x8A,
+0x3C, 0xF5, 0x83, 0xE0, 0xFD, 0x12, 0x51, 0xFB, 0x80, 0x2B, 0xFF, 0xFD, 0xC3, 0x74, 0x03, 0x9D,
+0xFD, 0xE4, 0x94, 0x00, 0xFC, 0x74, 0xEB, 0x2D, 0xF5, 0x82, 0x74, 0x8A, 0x3C, 0xF5, 0x83, 0xE0,
+0xFE, 0xEF, 0xFD, 0x90, 0x8A, 0xEA, 0xE0, 0x2D, 0xFD, 0x90, 0x8A, 0xE9, 0xE0, 0x34, 0x00, 0x8D,
+0x82, 0xF5, 0x83, 0xEE, 0xF0, 0x90, 0x8A, 0xE4, 0xE0, 0x04, 0xF0, 0x80, 0x8C, 0xC3, 0x90, 0x8A,
+0xE9, 0xE0, 0x94, 0x10, 0x40, 0x02, 0x01, 0xD7, 0x90, 0x8A, 0xE8, 0xE0, 0x64, 0x04, 0x60, 0x02,
+0x01, 0xD7, 0x90, 0x8A, 0xEC, 0xE0, 0xFF, 0xE4, 0xFC, 0xFD, 0xFE, 0x78, 0x10, 0x12, 0x2A, 0x6C,
+0xC0, 0x04, 0xC0, 0x05, 0xC0, 0x06, 0xC0, 0x07, 0x90, 0x8A, 0xEB, 0xE0, 0xFF, 0xE4, 0xFC, 0xFD,
+0xFE, 0x78, 0x18, 0x12, 0x2A, 0x6C, 0xD0, 0x03, 0xD0, 0x02, 0xD0, 0x01, 0xD0, 0x00, 0x12, 0x43,
+0x46, 0xC0, 0x04, 0xC0, 0x05, 0xC0, 0x06, 0xC0, 0x07, 0x90, 0x8A, 0xED, 0xE0, 0xFF, 0xE4, 0xFC,
+0xFD, 0xFE, 0x78, 0x08, 0x12, 0x2A, 0x6C, 0xD0, 0x03, 0xD0, 0x02, 0xD0, 0x01, 0xD0, 0x00, 0x12,
+0x43, 0x46, 0xA8, 0x04, 0xA9, 0x05, 0xAA, 0x06, 0xAB, 0x07, 0xA3, 0xE0, 0xFF, 0xE4, 0xFC, 0xFD,
+0xFE, 0x12, 0x43, 0x46, 0xA3, 0x12, 0x2A, 0x7F, 0x90, 0x8A, 0xEF, 0x12, 0x43, 0x53, 0x90, 0x80,
+0x85, 0x12, 0x2A, 0x7F, 0x90, 0x8A, 0xE9, 0xE0, 0xFE, 0xA3, 0xE0, 0xFF, 0x12, 0x2F, 0xD9, 0x80,
+0x36, 0x90, 0x8A, 0xED, 0xE0, 0xFE, 0xA3, 0xE0, 0x24, 0x00, 0xFF, 0xE4, 0x3E, 0xFE, 0x90, 0x8A,
+0xE6, 0xF0, 0xA3, 0xEF, 0xF0, 0x12, 0x37, 0x54, 0x80, 0x1D, 0x90, 0x8A, 0xED, 0xE0, 0xFE, 0xA3,
+0xE0, 0x24, 0x00, 0xFF, 0xE4, 0x3E, 0xFE, 0x90, 0x8A, 0xE6, 0xF0, 0xA3, 0xEF, 0xF0, 0x12, 0x36,
+0xCB, 0x80, 0x04, 0x7F, 0x00, 0x80, 0x02, 0x7F, 0x01, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0xD3, 0x10,
+0xAF, 0x01, 0xC3, 0xC0, 0xD0, 0xE4, 0x90, 0x8A, 0xDD, 0xF0, 0xA3, 0x74, 0x04, 0xF0, 0xA3, 0xE4,
+0xF0, 0x90, 0x8A, 0xE2, 0xF0, 0xA3, 0xF0, 0x90, 0x02, 0x09, 0xE0, 0x90, 0x8A, 0xE1, 0xF0, 0x12,
+0x29, 0xD9, 0xFF, 0x90, 0x8A, 0xE1, 0xE0, 0x2F, 0x90, 0x8A, 0xE0, 0xF0, 0x30, 0xE0, 0x0B, 0x90,
+0x8A, 0xDB, 0xE4, 0xF0, 0xA3, 0x74, 0x80, 0xF0, 0x80, 0x07, 0xE4, 0x90, 0x8A, 0xDB, 0xF0, 0xA3,
+0xF0, 0x90, 0x8A, 0xE0, 0xE0, 0xC3, 0x13, 0x90, 0xFD, 0x10, 0xF0, 0x90, 0x8A, 0xDD, 0xE0, 0x24,
+0x20, 0xF0, 0x90, 0x8A, 0xDB, 0xA3, 0xE0, 0xFD, 0xA3, 0xE0, 0xFC, 0x2D, 0xFF, 0x24, 0x01, 0xF5,
+0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0x90, 0x8A, 0xFD, 0xF0, 0x74, 0x02, 0x2F, 0xF5, 0x82,
+0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0xFE, 0xEC, 0x2D, 0x24, 0x03, 0xF5, 0x82, 0xE4, 0x34, 0xFC,
+0xF5, 0x83, 0xE0, 0x24, 0x00, 0xFF, 0xE4, 0x3E, 0x90, 0x8A, 0xFE, 0xF0, 0xA3, 0xEF, 0xF0, 0x90,
+0x8A, 0xDA, 0x74, 0x04, 0xF0, 0x90, 0x8A, 0xDB, 0xA3, 0xE0, 0xFF, 0xA3, 0xE0, 0x2F, 0xFF, 0x90,
+0x8A, 0xDA, 0xE0, 0xFE, 0x2F, 0x24, 0x00, 0xF5, 0x82, 0xE4, 0x34, 0xFC, 0xF5, 0x83, 0xE0, 0xFF,
+0x74, 0xFC, 0x2E, 0xF5, 0x82, 0xE4, 0x34, 0x8A, 0xF5, 0x83, 0xEF, 0xF0, 0x90, 0x8A, 0xDA, 0xE0,
+0x04, 0xF0, 0xE0, 0xB4, 0x08, 0xCF, 0x12, 0x76, 0xF2, 0xEF, 0x70, 0x45, 0x90, 0x01, 0xC3, 0xE0,
+0x60, 0x2B, 0xC3, 0x90, 0x8A, 0xE3, 0xE0, 0x94, 0xE8, 0x90, 0x8A, 0xE2, 0xE0, 0x94, 0x03, 0x40,
+0x09, 0x90, 0x01, 0xC6, 0xE0, 0x44, 0x10, 0xF0, 0x80, 0x79, 0x90, 0x8A, 0xE2, 0xE4, 0x75, 0xF0,
+0x01, 0x12, 0x42, 0x81, 0x7F, 0x0A, 0x7E, 0x00, 0x12, 0x37, 0x54, 0x80, 0xCF, 0x90, 0x01, 0xC6,
+0xE0, 0x90, 0x01, 0xC3, 0x30, 0xE2, 0x05, 0x74, 0xFE, 0xF0, 0x80, 0x57, 0x74, 0xFF, 0xF0, 0x80,
+0x52, 0x90, 0x8A, 0xDD, 0xE0, 0xB4, 0x78, 0x2E, 0xE4, 0xF0, 0x90, 0x8A, 0xE0, 0xE0, 0x04, 0xF0,
+0x90, 0x8A, 0xDB, 0xE0, 0x70, 0x04, 0xA3, 0xE0, 0x64, 0x80, 0x90, 0x8A, 0xDB, 0x70, 0x05, 0xF0,
+0xA3, 0xF0, 0x80, 0x06, 0xE4, 0xF0, 0xA3, 0x74, 0x80, 0xF0, 0x90, 0x8A, 0xE0, 0xE0, 0xC3, 0x13,
+0x90, 0xFD, 0x10, 0xF0, 0x80, 0x07, 0x90, 0x8A, 0xDD, 0xE0, 0x24, 0x08, 0xF0, 0x90, 0x8A, 0xDE,
+0x74, 0xFF, 0xF5, 0xF0, 0x12, 0x42, 0x81, 0x90, 0x8A, 0xDE, 0xE0, 0x70, 0x02, 0xA3, 0xE0, 0x60,
+0x02, 0x21, 0x32, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x12, 0x29, 0xD9, 0x90, 0x8B, 0x05, 0xF0, 0x90,
+0x00, 0x01, 0x12, 0x42, 0x20, 0x90, 0x8B, 0x06, 0xF0, 0x22, 0xE4, 0xF5, 0x61, 0x22, 0x51, 0x67,
+0x90, 0x8B, 0x33, 0x74, 0x02, 0xF0, 0x22, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x7F, 0x78, 0x7E,
+0x08, 0x12, 0x27, 0xDE, 0x90, 0x8B, 0x1C, 0x12, 0x2A, 0x7F, 0x7F, 0x04, 0x7E, 0x0C, 0x12, 0x27,
+0xDE, 0x90, 0x8B, 0x20, 0x12, 0x2A, 0x7F, 0x7F, 0x00, 0x7E, 0x08, 0x12, 0x27, 0xDE, 0x90, 0x8B,
+0x24, 0x12, 0x2A, 0x7F, 0x90, 0x8B, 0x09, 0xE0, 0x90, 0x8B, 0x1C, 0xB4, 0x01, 0x0D, 0x12, 0x43,
+0x53, 0xEF, 0x54, 0xC7, 0xFF, 0xED, 0x54, 0xC7, 0xFD, 0x80, 0x07, 0x12, 0x43, 0x53, 0xEF, 0x54,
+0xC7, 0xFF, 0xEC, 0x90, 0x80, 0x85, 0x12, 0x2A, 0x7F, 0x7F, 0x78, 0x7E, 0x08, 0x12, 0x2F, 0xD9,
+0x90, 0x8B, 0x20, 0x12, 0x43, 0x53, 0xEF, 0x54, 0x0F, 0xFF, 0xEC, 0x90, 0x80, 0x85, 0x12, 0x2A,
+0x7F, 0x7F, 0x04, 0x7E, 0x0C, 0x12, 0x2F, 0xD9, 0x90, 0x8B, 0x24, 0x12, 0x43, 0x53, 0xEF, 0x44,
+0x02, 0xFF, 0xEC, 0x90, 0x80, 0x85, 0x12, 0x2A, 0x7F, 0x7F, 0x00, 0x7E, 0x08, 0x12, 0x2F, 0xD9,
+0x7F, 0x70, 0x7E, 0x0E, 0x12, 0x27, 0xDE, 0x90, 0x8B, 0x28, 0x12, 0x2A, 0x7F, 0x90, 0x80, 0x85,
+0x12, 0x2A, 0x8B, 0x00, 0x1B, 0x25, 0xA0, 0x7F, 0x70, 0x7E, 0x0E, 0x12, 0x2F, 0xD9, 0x90, 0x80,
+0x59, 0x12, 0x2A, 0x8B, 0x00, 0x00, 0x00, 0x00, 0xE4, 0xFD, 0xFF, 0x12, 0x34, 0x81, 0x90, 0x8B,
+0x09, 0xE0, 0xB4, 0x01, 0x11, 0x90, 0x80, 0x59, 0x12, 0x2A, 0x8B, 0x00, 0x00, 0x00, 0x00, 0xE4,
+0xFD, 0x7F, 0x01, 0x12, 0x34, 0x81, 0x22, 0x51, 0x6D, 0x90, 0x8B, 0x33, 0x74, 0x02, 0xF0, 0x22,
+0x51, 0x67, 0x90, 0x8B, 0x2D, 0x74, 0x04, 0xF0, 0x22, 0xD3, 0x10, 0xAF, 0x01, 0xC3, 0xC0, 0xD0,
+0x90, 0x8B, 0x2D, 0xE0, 0xFE, 0x6F, 0x70, 0x02, 0xA1, 0x15, 0xEF, 0x12, 0x43, 0x94, 0x7B, 0x77,
+0x00, 0x7B, 0xB1, 0x01, 0x7B, 0xF7, 0x02, 0x7C, 0x31, 0x03, 0x7C, 0x69, 0x04, 0x7C, 0xA2, 0x05,
+0x7C, 0xDD, 0x06, 0x00, 0x00, 0x7D, 0x15, 0xEE, 0xB4, 0x04, 0x06, 0x7F, 0x01, 0xB1, 0x48, 0xA1,
+0x15, 0x90, 0x8B, 0x2D, 0xE0, 0xFF, 0xB4, 0x05, 0x04, 0xB1, 0x24, 0xA1, 0x15, 0xEF, 0xB4, 0x06,
+0x06, 0x7F, 0x01, 0xB1, 0x39, 0x80, 0x16, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x03, 0x06, 0x7F, 0x01,
+0xB1, 0x1A, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x02, 0x02, 0xB1, 0x2E, 0xB1, 0x6B, 0xA1,
+0x15, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x04, 0x06, 0x7F, 0x01, 0xB1, 0x48, 0x80, 0x09, 0x90, 0x8B,
+0x2D, 0xE0, 0xB4, 0x05, 0x02, 0xB1, 0x24, 0x90, 0x8B, 0x2D, 0xE0, 0x70, 0x04, 0xB1, 0x61, 0xA1,
+0x15, 0x90, 0x8B, 0x2D, 0xE0, 0xFE, 0xB4, 0x06, 0x06, 0x7F, 0x01, 0xB1, 0x39, 0xA1, 0x15, 0xEE,
+0xB4, 0x03, 0x06, 0x7F, 0x01, 0xB1, 0x1A, 0xA1, 0x15, 0x90, 0x8B, 0x2D, 0xE0, 0x64, 0x02, 0x60,
+0x02, 0xA1, 0x15, 0xB1, 0x2E, 0xA1, 0x15, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x04, 0x06, 0x7F, 0x01,
+0xB1, 0x48, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x05, 0x02, 0xB1, 0x24, 0x90, 0x8B, 0x2D,
+0xE0, 0x70, 0x04, 0xB1, 0x61, 0x80, 0x16, 0x90, 0x8B, 0x2D, 0xE0, 0xFE, 0xB4, 0x06, 0x06, 0x7F,
+0x01, 0xB1, 0x39, 0x80, 0x08, 0xEE, 0xB4, 0x03, 0x04, 0x7F, 0x01, 0xB1, 0x1A, 0xB1, 0x8D, 0xA1,
+0x15, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x04, 0x06, 0x7F, 0x01, 0xB1, 0x48, 0x80, 0x09, 0x90, 0x8B,
+0x2D, 0xE0, 0xB4, 0x05, 0x02, 0xB1, 0x24, 0x90, 0x8B, 0x2D, 0xE0, 0x70, 0x04, 0xB1, 0x61, 0x80,
+0x14, 0x90, 0x8B, 0x2D, 0xE0, 0xFE, 0xB4, 0x06, 0x06, 0xE4, 0xFF, 0xB1, 0x39, 0x80, 0x06, 0xEE,
+0xB4, 0x02, 0x02, 0xB1, 0x2E, 0xB1, 0x76, 0xA1, 0x15, 0x90, 0x8B, 0x2D, 0xE0, 0xFE, 0xB4, 0x06,
+0x06, 0xE4, 0xFF, 0xB1, 0x39, 0x80, 0x13, 0xEE, 0xB4, 0x03, 0x06, 0x7F, 0x01, 0xB1, 0x1A, 0x80,
+0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x02, 0x02, 0xB1, 0x2E, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x01,
+0x04, 0xB1, 0x6B, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x05, 0x02, 0xB1, 0x24, 0x71, 0x40,
+0x80, 0x73, 0x90, 0x8B, 0x2D, 0xE0, 0xFE, 0xB4, 0x06, 0x06, 0xE4, 0xFF, 0xB1, 0x39, 0x80, 0x13,
+0xEE, 0xB4, 0x03, 0x06, 0x7F, 0x01, 0xB1, 0x1A, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x02,
+0x02, 0xB1, 0x2E, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x01, 0x04, 0xB1, 0x6B, 0x80, 0x0B, 0x90, 0x8B,
+0x2D, 0xE0, 0xB4, 0x04, 0x04, 0x7F, 0x01, 0xB1, 0x48, 0xB1, 0x80, 0x80, 0x38, 0x90, 0x8B, 0x2D,
+0xE0, 0xB4, 0x04, 0x06, 0x7F, 0x01, 0xB1, 0x48, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x05,
+0x02, 0xB1, 0x24, 0x90, 0x8B, 0x2D, 0xE0, 0x70, 0x04, 0xB1, 0x61, 0x80, 0x16, 0x90, 0x8B, 0x2D,
+0xE0, 0xB4, 0x03, 0x06, 0xE4, 0xFF, 0xB1, 0x1A, 0x80, 0x09, 0x90, 0x8B, 0x2D, 0xE0, 0xB4, 0x02,
+0x02, 0xB1, 0x2E, 0xB1, 0x9A, 0xD0, 0xD0, 0x92, 0xAF, 0x22, 0x12, 0x4A, 0xB2, 0x90, 0x8B, 0x2D,
+0x74, 0x01, 0xF0, 0x22, 0x90, 0x05, 0x22, 0xE4, 0xF0, 0x90, 0x8B, 0x2D, 0xF0, 0x22, 0x90, 0x05,
+0x22, 0xE4, 0xF0, 0x90, 0x8B, 0x2D, 0x04, 0xF0, 0x22, 0xEF, 0x60, 0x05, 0x90, 0x05, 0x22, 0xE4,
+0xF0, 0x90, 0x8B, 0x2D, 0x74, 0x01, 0xF0, 0x22, 0x90, 0x8B, 0x56, 0xEF, 0xF0, 0x12, 0x4F, 0xED,
+0x90, 0x8B, 0x56, 0xE0, 0x60, 0x05, 0x90, 0x05, 0x22, 0xE4, 0xF0, 0xE4, 0x90, 0x8B, 0x2D, 0xF0,
+0x22, 0x12, 0x4A, 0xCC, 0x90, 0x8B, 0x2D, 0x74, 0x01, 0xF0, 0x22, 0x7F, 0x01, 0x12, 0x4A, 0x7C,
+0xE4, 0x90, 0x8B, 0x2D, 0xF0, 0x22, 0x12, 0x4A, 0x32, 0x90, 0x8B, 0x2D, 0x74, 0x03, 0xF0, 0x22,
+0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x90, 0x8B, 0x2D, 0x74, 0x05, 0xF0, 0x22, 0x90, 0x05, 0x22,
+0x74, 0xFF, 0xF0, 0x90, 0x8B, 0x2D, 0x74, 0x02, 0xF0, 0x22, 0x90, 0x05, 0x22, 0x74, 0x6F, 0xF0,
+0x90, 0x8B, 0x2D, 0x74, 0x06, 0xF0, 0x22, 0x90, 0x05, 0x22, 0x74, 0xFF, 0xF0, 0x90, 0x8B, 0x33,
+0x74, 0x04, 0xF0, 0x22, 0x12, 0x4F, 0xED, 0x90, 0x8B, 0x33, 0x74, 0x04, 0xF0, 0x22, 0x90, 0x01,
+0x57, 0xE0, 0x60, 0x3C, 0x90, 0x01, 0x57, 0xE4, 0xF0, 0x90, 0x01, 0x3C, 0x74, 0x02, 0xF0, 0x90,
+0x8B, 0x1B, 0xE0, 0x60, 0x07, 0xE4, 0xF0, 0x53, 0x25, 0xFD, 0x80, 0x24, 0x90, 0x8B, 0x0C, 0xE0,
+0x04, 0xF0, 0x53, 0x25, 0xEF, 0x90, 0x8B, 0x10, 0xE0, 0xFF, 0x90, 0x8B, 0x0C, 0xE0, 0xD3, 0x9F,
+0x40, 0x0E, 0xE5, 0x21, 0xB4, 0x01, 0x09, 0x90, 0x8B, 0x0D, 0xE0, 0x70, 0x03, 0xE0, 0x04, 0xF0,
+0x90, 0x01, 0x5B, 0xE0, 0x60, 0x10, 0x90, 0x01, 0x5B, 0xE4, 0xF0, 0x90, 0x01, 0x3C, 0x74, 0x04,
+0xF0, 0xE4, 0x90, 0x8B, 0x18, 0xF0, 0x90, 0x01, 0x5F, 0xE0, 0x60, 0x10, 0x90, 0x01, 0x5F, 0xE4,
+0xF0, 0x90, 0x01, 0x3C, 0x74, 0x08, 0xF0, 0xE4, 0x90, 0x8B, 0x17, 0xF0, 0x22, 0xE4, 0x90, 0x8B,
+0x4F, 0xF0, 0xA3, 0xF0, 0x90, 0x05, 0xF8, 0xE0, 0x70, 0x0F, 0xA3, 0xE0, 0x70, 0x0B, 0xA3, 0xE0,
+0x70, 0x07, 0xA3, 0xE0, 0x70, 0x03, 0x7F, 0x01, 0x22, 0xD3, 0x90, 0x8B, 0x50, 0xE0, 0x94, 0xE8,
+0x90, 0x8B, 0x4F, 0xE0, 0x94, 0x03, 0x40, 0x03, 0x7F, 0x00, 0x22, 0x7F, 0x32, 0x7E, 0x00, 0x12,
+0x37, 0x54, 0x90, 0x8B, 0x4F, 0xE4, 0x75, 0xF0, 0x01, 0x12, 0x42, 0x81, 0x80, 0xC6, 0x8F, 0x0F,
+0xE4, 0x90, 0x8A, 0xF3, 0xF0, 0xE5, 0x0F, 0x14, 0xFE, 0x90, 0x8A, 0xF3, 0xE0, 0xFF, 0xC3, 0x9E,
+0x50, 0x0E, 0xEF, 0x04, 0xFD, 0x12, 0x34, 0xB7, 0x90, 0x8A, 0xF3, 0xE0, 0x04, 0xF0, 0x80, 0xE5,
+0xE5, 0x0F, 0x14, 0xFF, 0x7D, 0xFF, 0x12, 0x34, 0xB7, 0x90, 0x8A, 0xF3, 0xE5, 0x0F, 0xF0, 0x90,
+0x8A, 0xF3, 0xE0, 0xC3, 0x94, 0xFF, 0x50, 0x0F, 0xE0, 0xFF, 0x04, 0xFD, 0x12, 0x34, 0xB7, 0x90,
+0x8A, 0xF3, 0xE0, 0x04, 0xF0, 0x80, 0xE8, 0xAD, 0x0F, 0x7F, 0xFF, 0x02, 0x34, 0xB7, 0xDC, 0xD3,
+};
+#endif
+
+//8188C_Formal_All_PHYforMP_111117     2011-11-23
+//8192C_Formal_92CU_PHYforMP_110817    2011-11-23
+
+u32 Rtl8192CUPHY_REG_2TArray[PHY_REG_2TArrayLength] = {
+0x024,0x0011800f,
+0x028,0x00ffdb83,
+0x800,0x80040002,
+0x804,0x00000003,
+0x808,0x0000fc00,
+0x80c,0x0000000a,
+0x810,0x10000330, //for Broadcom AP IOT
+0x814,0x020c3d10,
+0x818,0x02200385,
+0x81c,0x00000000,
+0x820,0x01000100,
+0x824,0x00390004,
+0x828,0x01000100,
+0x82c,0x00390004,
+0x830,0x27272727,
+0x834,0x27272727,
+0x838,0x27272727,
+0x83c,0x27272727,
+0x840,0x00010000,
+0x844,0x00010000,
+0x848,0x27272727,
+0x84c,0x27272727,
+0x850,0x00000000,
+0x854,0x00000000,
+0x858,0x569a569a,
+0x85c,0x0c1b25a4,
+0x860,0x66e60230,
+0x864,0x061f0130,
+0x868,0x27272727,
+0x86c,0x2b2b2b27,
+0x870,0x07000700,
+0x874,0x22184000,
+0x878,0x08080808,
+0x87c,0x00000000,
+0x880,0xc0083070,
+0x884,0x000004d5,
+0x888,0x00000000,
+0x88c,0xcc0000c0,
+0x890,0x00000800,
+0x894,0xfffffffe,
+0x898,0x40302010,
+0x89c,0x00706050,
+0x900,0x00000000,
+0x904,0x00000023,
+0x908,0x00000000,
+0x90c,0x81121313,
+0xa00,0x00d047c8,
+0xa04,0x80ff000c,
+0xa08,0x8c838300,
+0xa0c,0x2e68120f,
+0xa10,0x9500bb78,
+0xa14,0x11144028,
+0xa18,0x00881117,
+0xa1c,0x89140f00,
+0xa20,0x1a1b0000,
+0xa24,0x090e1317,
+0xa28,0x00000204,
+0xa2c,0x00d30000,
+0xa70,0x101fbf00,
+0xa74,0x00000007,
+0xc00,0x48071d40,
+0xc04,0x03a05633,
+0xc08,0x000000e4,
+0xc0c,0x6c6c6c6c,
+0xc10,0x08800000,
+0xc14,0x40000100,
+0xc18,0x08800000,
+0xc1c,0x40000100,
+0xc20,0x00000000,
+0xc24,0x00000000,
+0xc28,0x00000000,
+0xc2c,0x00000000,
+0xc30,0x69e9ac44,
+0xc34,0x469652cf,
+0xc38,0x49795994,
+0xc3c,0x0a97971c,
+0xc40,0x1f7c403f,
+0xc44,0x000100b7,
+0xc48,0xec020107,
+0xc4c,0x007f037f,
+0xc50,0x69543420,
+0xc54,0x43bc0094,
+0xc58,0x69543420,
+0xc5c,0x433c0094,
+0xc60,0x00000000,
+0xc64,0x5116848b,
+0xc68,0x47c00bff,
+0xc6c,0x00000036,
+0xc70,0x2c7f000d,
+0xc74,0x2186115b,
+0xc78,0x0000001f,
+0xc7c,0x00b99612,
+0xc80,0x40000100,
+0xc84,0x20f60000,
+0xc88,0x40000100,
+0xc8c,0xa0e40000,
+0xc90,0x00121820,
+0xc94,0x00000000,
+0xc98,0x00121820,
+0xc9c,0x00007f7f,
+0xca0,0x00000000,
+0xca4,0x00000080,
+0xca8,0x00000000,
+0xcac,0x00000000,
+0xcb0,0x00000000,
+0xcb4,0x00000000,
+0xcb8,0x00000000,
+0xcbc,0x28000000,
+0xcc0,0x00000000,
+0xcc4,0x00000000,
+0xcc8,0x00000000,
+0xccc,0x00000000,
+0xcd0,0x00000000,
+0xcd4,0x00000000,
+0xcd8,0x64b22427,
+0xcdc,0x00766932,
+0xce0,0x00222222,
+0xce4,0x00000000,
+0xce8,0x37644302,
+0xcec,0x2f97d40c,
+0xd00,0x00080740,
+0xd04,0x00020403,
+0xd08,0x0000907f,
+0xd0c,0x20010201,
+0xd10,0xa0633333,
+0xd14,0x3333bc43,
+0xd18,0x7a8f5b6b,
+0xd2c,0xcc979975,
+0xd30,0x00000000,
+0xd34,0x80608000,
+0xd38,0x00000000,
+0xd3c,0x00027293,
+0xd40,0x00000000,
+0xd44,0x00000000,
+0xd48,0x00000000,
+0xd4c,0x00000000,
+0xd50,0x6437140a,
+0xd54,0x00000000,
+0xd58,0x00000000,
+0xd5c,0x30032064,
+0xd60,0x4653de68,
+0xd64,0x04518a3c,
+0xd68,0x00002101,
+0xd6c,0x2a201c16,
+0xd70,0x1812362e,
+0xd74,0x322c2220,
+0xd78,0x000e3c24,
+0xe00,0x2a2a2a2a,
+0xe04,0x2a2a2a2a,
+0xe08,0x03902a2a,
+0xe10,0x2a2a2a2a,
+0xe14,0x2a2a2a2a,
+0xe18,0x2a2a2a2a,
+0xe1c,0x2a2a2a2a,
+0xe28,0x00000000,
+0xe30,0x1000dc1f,
+0xe34,0x10008c1f,
+0xe38,0x02140102,
+0xe3c,0x681604c2,
+0xe40,0x01007c00,
+0xe44,0x01004800,
+0xe48,0xfb000000,
+0xe4c,0x000028d1,
+0xe50,0x1000dc1f,
+0xe54,0x10008c1f,
+0xe58,0x02140102,
+0xe5c,0x28160d05,
+0xe60,0x00000010,
+0xe68,0x001b25a4,
+0xe6c,0x63db25a4,
+0xe70,0x63db25a4,
+0xe74,0x0c1b25a4,
+0xe78,0x0c1b25a4,
+0xe7c,0x0c1b25a4,
+0xe80,0x0c1b25a4,
+0xe84,0x63db25a4,
+0xe88,0x0c1b25a4,
+0xe8c,0x63db25a4,
+0xed0,0x63db25a4,
+0xed4,0x63db25a4,
+0xed8,0x63db25a4,
+0xedc,0x001b25a4,
+0xee0,0x001b25a4,
+0xeec,0x6fdb25a4,
+0xf14,0x00000003,
+0xf4c,0x00000000,
+0xf00,0x00000300,
+};
+
+u32 Rtl8192CUPHY_REG_1TArray[PHY_REG_1TArrayLength] = {
+0x024,0x0011800f,
+0x028,0x00ffdb83,
+0x800,0x80040000,
+0x804,0x00000001,
+0x808,0x0000fc00,
+0x80c,0x0000000a,
+0x810,0x10000330, //for Broadcom AP IOT
+0x814,0x020c3d10,
+0x818,0x02200385,
+0x81c,0x00000000,
+0x820,0x01000100,
+0x824,0x00390004,
+0x828,0x00000000,
+0x82c,0x00000000,
+0x830,0x00000000,
+0x834,0x00000000,
+0x838,0x00000000,
+0x83c,0x00000000,
+0x840,0x00010000,
+0x844,0x00000000,
+0x848,0x00000000,
+0x84c,0x00000000,
+0x850,0x00000000,
+0x854,0x00000000,
+0x858,0x569a569a,
+0x85c,0x001b25a4,
+0x860,0x66e60230,
+0x864,0x061f0130,
+0x868,0x00000000,
+0x86c,0x32323200,
+0x870,0x07000700,
+0x874,0x22004000,
+0x878,0x00000808,
+0x87c,0x00000000,
+0x880,0xc0083070,
+0x884,0x000004d5,
+0x888,0x00000000,
+0x88c,0xccc000c0,
+0x890,0x00000800,
+0x894,0xfffffffe,
+0x898,0x40302010,
+0x89c,0x00706050,
+0x900,0x00000000,
+0x904,0x00000023,
+0x908,0x00000000,
+0x90c,0x81121111,
+0xa00,0x00d047c8,
+0xa04,0x80ff000c,
+0xa08,0x8c838300,
+0xa0c,0x2e68120f,
+0xa10,0x9500bb78,
+0xa14,0x11144028,
+0xa18,0x00881117,
+0xa1c,0x89140f00,
+0xa20,0x1a1b0000,
+0xa24,0x090e1317,
+0xa28,0x00000204,
+0xa2c,0x00d30000,
+0xa70,0x101fbf00,
+0xa74,0x00000007,
+0xc00,0x48071d40,
+0xc04,0x03a05611,
+0xc08,0x000000e4,
+0xc0c,0x6c6c6c6c,
+0xc10,0x08800000,
+0xc14,0x40000100,
+0xc18,0x08800000,
+0xc1c,0x40000100,
+0xc20,0x00000000,
+0xc24,0x00000000,
+0xc28,0x00000000,
+0xc2c,0x00000000,
+0xc30,0x69e9ac44,
+0xc34,0x469652cf,
+0xc38,0x49795994,
+0xc3c,0x0a97971c,
+0xc40,0x1f7c403f,
+0xc44,0x000100b7,
+0xc48,0xec020107,
+0xc4c,0x007f037f,
+0xc50,0x69543420,
+0xc54,0x43bc0094,
+0xc58,0x69543420,
+0xc5c,0x433c0094,
+0xc60,0x00000000,
+0xc64,0x5116848b,
+0xc68,0x47c00bff,
+0xc6c,0x00000036,
+0xc70,0x2c7f000d,
+0xc74,0x018610db,
+0xc78,0x0000001f,
+0xc7c,0x00b91612,
+0xc80,0x40000100,
+0xc84,0x20f60000,
+0xc88,0x40000100,
+0xc8c,0x20200000,
+0xc90,0x00121820,
+0xc94,0x00000000,
+0xc98,0x00121820,
+0xc9c,0x00007f7f,
+0xca0,0x00000000,
+0xca4,0x00000080,
+0xca8,0x00000000,
+0xcac,0x00000000,
+0xcb0,0x00000000,
+0xcb4,0x00000000,
+0xcb8,0x00000000,
+0xcbc,0x28000000,
+0xcc0,0x00000000,
+0xcc4,0x00000000,
+0xcc8,0x00000000,
+0xccc,0x00000000,
+0xcd0,0x00000000,
+0xcd4,0x00000000,
+0xcd8,0x64b22427,
+0xcdc,0x00766932,
+0xce0,0x00222222,
+0xce4,0x00000000,
+0xce8,0x37644302,
+0xcec,0x2f97d40c,
+0xd00,0x00000740,
+0xd04,0x00020401,
+0xd08,0x0000907f,
+0xd0c,0x20010201,
+0xd10,0xa0633333,
+0xd14,0x3333bc43,
+0xd18,0x7a8f5b6b,
+0xd2c,0xcc979975,
+0xd30,0x00000000,
+0xd34,0x80608000,
+0xd38,0x00000000,
+0xd3c,0x00027293,
+0xd40,0x00000000,
+0xd44,0x00000000,
+0xd48,0x00000000,
+0xd4c,0x00000000,
+0xd50,0x6437140a,
+0xd54,0x00000000,
+0xd58,0x00000000,
+0xd5c,0x30032064,
+0xd60,0x4653de68,
+0xd64,0x04518a3c,
+0xd68,0x00002101,
+0xd6c,0x2a201c16,
+0xd70,0x1812362e,
+0xd74,0x322c2220,
+0xd78,0x000e3c24,
+0xe00,0x2a2a2a2a,
+0xe04,0x2a2a2a2a,
+0xe08,0x03902a2a,
+0xe10,0x2a2a2a2a,
+0xe14,0x2a2a2a2a,
+0xe18,0x2a2a2a2a,
+0xe1c,0x2a2a2a2a,
+0xe28,0x00000000,
+0xe30,0x1000dc1f,
+0xe34,0x10008c1f,
+0xe38,0x02140102,
+0xe3c,0x681604c2,
+0xe40,0x01007c00,
+0xe44,0x01004800,
+0xe48,0xfb000000,
+0xe4c,0x000028d1,
+0xe50,0x1000dc1f,
+0xe54,0x10008c1f,
+0xe58,0x02140102,
+0xe5c,0x28160d05,
+0xe60,0x00000008,
+0xe68,0x001b25a4,
+0xe6c,0x631b25a0,
+0xe70,0x631b25a0,
+0xe74,0x081b25a0,
+0xe78,0x081b25a0,
+0xe7c,0x081b25a0,
+0xe80,0x081b25a0,
+0xe84,0x631b25a0,
+0xe88,0x081b25a0,
+0xe8c,0x631b25a0,
+0xed0,0x631b25a0,
+0xed4,0x631b25a0,
+0xed8,0x631b25a0,
+0xedc,0x001b25a0,
+0xee0,0x001b25a0,
+0xeec,0x6b1b25a0,
+0xf14,0x00000003,
+0xf4c,0x00000000,
+0xf00,0x00000300,
+};
+
+u32 Rtl8192CUPHY_ChangeTo_1T1RArray[PHY_ChangeTo_1T1RArrayLength] = {
+0x0, };
+
+u32 Rtl8192CUPHY_ChangeTo_1T2RArray[PHY_ChangeTo_1T2RArrayLength] = {
+0x0, };
+
+u32 Rtl8192CUPHY_ChangeTo_2T2RArray[PHY_ChangeTo_2T2RArrayLength] = {
+0x0, };
+
+u32 Rtl8192CUPHY_REG_Array_PG[PHY_REG_Array_PGLength] = {
+0xe00,0xffffffff,0x07090c0c,
+0xe04,0xffffffff,0x01020405,
+0xe08,0x0000ff00,0x00000000,
+0x86c,0xffffff00,0x00000000,
+0xe10,0xffffffff,0x0b0c0c0e,
+0xe14,0xffffffff,0x01030506,
+0xe18,0xffffffff,0x0b0c0d0e,
+0xe1c,0xffffffff,0x01030509,
+0x830,0xffffffff,0x07090c0c,
+0x834,0xffffffff,0x01020405,
+0x838,0xffffff00,0x00000000,
+0x86c,0x000000ff,0x00000000,
+0x83c,0xffffffff,0x0b0c0d0e,
+0x848,0xffffffff,0x01030509,
+0x84c,0xffffffff,0x0b0c0d0e,
+0x868,0xffffffff,0x01030509,
+0xe00,0xffffffff,0x00000000,
+0xe04,0xffffffff,0x00000000,
+0xe08,0x0000ff00,0x00000000,
+0x86c,0xffffff00,0x00000000,
+0xe10,0xffffffff,0x00000000,
+0xe14,0xffffffff,0x00000000,
+0xe18,0xffffffff,0x00000000,
+0xe1c,0xffffffff,0x00000000,
+0x830,0xffffffff,0x00000000,
+0x834,0xffffffff,0x00000000,
+0x838,0xffffff00,0x00000000,
+0x86c,0x000000ff,0x00000000,
+0x83c,0xffffffff,0x00000000,
+0x848,0xffffffff,0x00000000,
+0x84c,0xffffffff,0x00000000,
+0x868,0xffffffff,0x00000000,
+0xe00,0xffffffff,0x04040404,
+0xe04,0xffffffff,0x00020204,
+0xe08,0x0000ff00,0x00000000,
+0x86c,0xffffff00,0x00000000,
+0xe10,0xffffffff,0x06060606,
+0xe14,0xffffffff,0x00020406,
+0xe18,0xffffffff,0x00000000,
+0xe1c,0xffffffff,0x00000000,
+0x830,0xffffffff,0x04040404,
+0x834,0xffffffff,0x00020204,
+0x838,0xffffff00,0x00000000,
+0x86c,0x000000ff,0x00000000,
+0x83c,0xffffffff,0x06060606,
+0x848,0xffffffff,0x00020406,
+0x84c,0xffffffff,0x00000000,
+0x868,0xffffffff,0x00000000,
+0xe00,0xffffffff,0x00000000,
+0xe04,0xffffffff,0x00000000,
+0xe08,0x0000ff00,0x00000000,
+0x86c,0xffffff00,0x00000000,
+0xe10,0xffffffff,0x00000000,
+0xe14,0xffffffff,0x00000000,
+0xe18,0xffffffff,0x00000000,
+0xe1c,0xffffffff,0x00000000,
+0x830,0xffffffff,0x00000000,
+0x834,0xffffffff,0x00000000,
+0x838,0xffffff00,0x00000000,
+0x86c,0x000000ff,0x00000000,
+0x83c,0xffffffff,0x00000000,
+0x848,0xffffffff,0x00000000,
+0x84c,0xffffffff,0x00000000,
+0x868,0xffffffff,0x00000000,
+0xe00,0xffffffff,0x00000000,
+0xe04,0xffffffff,0x00000000,
+0xe08,0x0000ff00,0x00000000,
+0x86c,0xffffff00,0x00000000,
+0xe10,0xffffffff,0x00000000,
+0xe14,0xffffffff,0x00000000,
+0xe18,0xffffffff,0x00000000,
+0xe1c,0xffffffff,0x00000000,
+0x830,0xffffffff,0x00000000,
+0x834,0xffffffff,0x00000000,
+0x838,0xffffff00,0x00000000,
+0x86c,0x000000ff,0x00000000,
+0x83c,0xffffffff,0x00000000,
+0x848,0xffffffff,0x00000000,
+0x84c,0xffffffff,0x00000000,
+0x868,0xffffffff,0x00000000,
+0xe00,0xffffffff,0x04040404,
+0xe04,0xffffffff,0x00020204,
+0xe08,0x0000ff00,0x00000000,
+0x86c,0xffffff00,0x00000000,
+0xe10,0xffffffff,0x00000000,
+0xe14,0xffffffff,0x00000000,
+0xe18,0xffffffff,0x00000000,
+0xe1c,0xffffffff,0x00000000,
+0x830,0xffffffff,0x04040404,
+0x834,0xffffffff,0x00020204,
+0x838,0xffffff00,0x00000000,
+0x86c,0x000000ff,0x00000000,
+0x83c,0xffffffff,0x00000000,
+0x848,0xffffffff,0x00000000,
+0x84c,0xffffffff,0x00000000,
+0x868,0xffffffff,0x00000000,
+0xe00,0xffffffff,0x00000000,
+0xe04,0xffffffff,0x00000000,
+0xe08,0x0000ff00,0x00000000,
+0x86c,0xffffff00,0x00000000,
+0xe10,0xffffffff,0x00000000,
+0xe14,0xffffffff,0x00000000,
+0xe18,0xffffffff,0x00000000,
+0xe1c,0xffffffff,0x00000000,
+0x830,0xffffffff,0x00000000,
+0x834,0xffffffff,0x00000000,
+0x838,0xffffff00,0x00000000,
+0x86c,0x000000ff,0x00000000,
+0x83c,0xffffffff,0x00000000,
+0x848,0xffffffff,0x00000000,
+0x84c,0xffffffff,0x00000000,
+0x868,0xffffffff,0x00000000,
+};
+
+u32  Rtl8192CUPHY_REG_Array_PG_mCard[PHY_REG_Array_PG_mCardLength] = {
+0xe00,0xffffffff,0x0a0c0c0c,
+0xe04,0xffffffff,0x02040608,
+0xe08,0x0000ff00,0x00000000,
+0x86c,0xffffff00,0x00000000,
+0xe10,0xffffffff,0x0a0c0d0e,
+0xe14,0xffffffff,0x02040608,
+0xe18,0xffffffff,0x0a0c0d0e,
+0xe1c,0xffffffff,0x02040608,
+0x830,0xffffffff,0x0a0c0c0c,
+0x834,0xffffffff,0x02040608,
+0x838,0xffffff00,0x00000000,
+0x86c,0x000000ff,0x00000000,
+0x83c,0xffffffff,0x0a0c0d0e,
+0x848,0xffffffff,0x02040608,
+0x84c,0xffffffff,0x0a0c0d0e,
+0x868,0xffffffff,0x02040608,
+0xe00,0xffffffff,0x00000000,
+0xe04,0xffffffff,0x00000000,
+0xe08,0x0000ff00,0x00000000,
+0x86c,0xffffff00,0x00000000,
+0xe10,0xffffffff,0x00000000,
+0xe14,0xffffffff,0x00000000,
+0xe18,0xffffffff,0x00000000,
+0xe1c,0xffffffff,0x00000000,
+0x830,0xffffffff,0x00000000,
+0x834,0xffffffff,0x00000000,
+0x838,0xffffff00,0x00000000,
+0x86c,0x000000ff,0x00000000,
+0x83c,0xffffffff,0x00000000,
+0x848,0xffffffff,0x00000000,
+0x84c,0xffffffff,0x00000000,
+0x868,0xffffffff,0x00000000,
+0xe00,0xffffffff,0x04040404,
+0xe04,0xffffffff,0x00020204,
+0xe08,0x0000ff00,0x00000000,
+0x86c,0xffffff00,0x00000000,
+0xe10,0xffffffff,0x06060606,
+0xe14,0xffffffff,0x00020406,
+0xe18,0xffffffff,0x00000000,
+0xe1c,0xffffffff,0x00000000,
+0x830,0xffffffff,0x04040404,
+0x834,0xffffffff,0x00020204,
+0x838,0xffffff00,0x00000000,
+0x86c,0x000000ff,0x00000000,
+0x83c,0xffffffff,0x06060606,
+0x848,0xffffffff,0x00020406,
+0x84c,0xffffffff,0x00000000,
+0x868,0xffffffff,0x00000000,
+0xe00,0xffffffff,0x00000000,
+0xe04,0xffffffff,0x00000000,
+0xe08,0x0000ff00,0x00000000,
+0x86c,0xffffff00,0x00000000,
+0xe10,0xffffffff,0x00000000,
+0xe14,0xffffffff,0x00000000,
+0xe18,0xffffffff,0x00000000,
+0xe1c,0xffffffff,0x00000000,
+0x830,0xffffffff,0x00000000,
+0x834,0xffffffff,0x00000000,
+0x838,0xffffff00,0x00000000,
+0x86c,0x000000ff,0x00000000,
+0x83c,0xffffffff,0x00000000,
+0x848,0xffffffff,0x00000000,
+0x84c,0xffffffff,0x00000000,
+0x868,0xffffffff,0x00000000,
+0xe00,0xffffffff,0x00000000,
+0xe04,0xffffffff,0x00000000,
+0xe08,0x0000ff00,0x00000000,
+0x86c,0xffffff00,0x00000000,
+0xe10,0xffffffff,0x00000000,
+0xe14,0xffffffff,0x00000000,
+0xe18,0xffffffff,0x00000000,
+0xe1c,0xffffffff,0x00000000,
+0x830,0xffffffff,0x00000000,
+0x834,0xffffffff,0x00000000,
+0x838,0xffffff00,0x00000000,
+0x86c,0x000000ff,0x00000000,
+0x83c,0xffffffff,0x00000000,
+0x848,0xffffffff,0x00000000,
+0x84c,0xffffffff,0x00000000,
+0x868,0xffffffff,0x00000000,
+0xe00,0xffffffff,0x04040404,
+0xe04,0xffffffff,0x00020204,
+0xe08,0x0000ff00,0x00000000,
+0x86c,0xffffff00,0x00000000,
+0xe10,0xffffffff,0x00000000,
+0xe14,0xffffffff,0x00000000,
+0xe18,0xffffffff,0x00000000,
+0xe1c,0xffffffff,0x00000000,
+0x830,0xffffffff,0x04040404,
+0x834,0xffffffff,0x00020204,
+0x838,0xffffff00,0x00000000,
+0x86c,0x000000ff,0x00000000,
+0x83c,0xffffffff,0x00000000,
+0x848,0xffffffff,0x00000000,
+0x84c,0xffffffff,0x00000000,
+0x868,0xffffffff,0x00000000,
+0xe00,0xffffffff,0x00000000,
+0xe04,0xffffffff,0x00000000,
+0xe08,0x0000ff00,0x00000000,
+0x86c,0xffffff00,0x00000000,
+0xe10,0xffffffff,0x00000000,
+0xe14,0xffffffff,0x00000000,
+0xe18,0xffffffff,0x00000000,
+0xe1c,0xffffffff,0x00000000,
+0x830,0xffffffff,0x00000000,
+0x834,0xffffffff,0x00000000,
+0x838,0xffffff00,0x00000000,
+0x86c,0x000000ff,0x00000000,
+0x83c,0xffffffff,0x00000000,
+0x848,0xffffffff,0x00000000,
+0x84c,0xffffffff,0x00000000,
+0x868,0xffffffff,0x00000000,
+};
+
+u32 Rtl8192CUPHY_REG_Array_MP[PHY_REG_Array_MPLength] = {
+0xc30,0x69e9ac4a,
+0xc3c,0x0a979718,
+};
+
+u32 Rtl8192CUPHY_REG_1T_HPArray[PHY_REG_1T_HPArrayLength] = {
+0x024,0x0011800f,
+0x028,0x00ffdb83,
+0x040,0x000c0004,
+0x800,0x80040000,
+0x804,0x00000001,
+0x808,0x0000fc00,
+0x80c,0x0000000a,
+0x810,0x10000330, //for Broadcom AP IOT
+0x814,0x020c3d10,
+0x818,0x02200385,
+0x81c,0x00000000,
+0x820,0x01000100,
+0x824,0x00390204,
+0x828,0x00000000,
+0x82c,0x00000000,
+0x830,0x00000000,
+0x834,0x00000000,
+0x838,0x00000000,
+0x83c,0x00000000,
+0x840,0x00010000,
+0x844,0x00000000,
+0x848,0x00000000,
+0x84c,0x00000000,
+0x850,0x00000000,
+0x854,0x00000000,
+0x858,0x569a569a,
+0x85c,0x001b25a4,
+0x860,0x66e60230,
+0x864,0x061f0130,
+0x868,0x00000000,
+0x86c,0x20202000,
+0x870,0x03000300,
+0x874,0x22004000,
+0x878,0x00000808,
+0x87c,0x00ffc3f1,
+0x880,0xc0083070,
+0x884,0x000004d5,
+0x888,0x00000000,
+0x88c,0xccc000c0,
+0x890,0x00000800,
+0x894,0xfffffffe,
+0x898,0x40302010,
+0x89c,0x00706050,
+0x900,0x00000000,
+0x904,0x00000023,
+0x908,0x00000000,
+0x90c,0x81121111,
+0xa00,0x00d047c8,
+0xa04,0x80ff000c,
+0xa08,0x8c838300,
+0xa0c,0x2e68120f,
+0xa10,0x9500bb78,
+0xa14,0x11144028,
+0xa18,0x00881117,
+0xa1c,0x89140f00,
+0xa20,0x15160000,
+0xa24,0x070b0f12,
+0xa28,0x00000104,
+0xa2c,0x00d30000,
+0xa70,0x101fbf00,
+0xa74,0x00000007,
+0xc00,0x48071d40,
+0xc04,0x03a05611,
+0xc08,0x000000e4,
+0xc0c,0x6c6c6c6c,
+0xc10,0x08800000,
+0xc14,0x40000100,
+0xc18,0x08800000,
+0xc1c,0x40000100,
+0xc20,0x00000000,
+0xc24,0x00000000,
+0xc28,0x00000000,
+0xc2c,0x00000000,
+0xc30,0x69e9ac44,
+0xc34,0x469652cf,
+0xc38,0x49795994,
+0xc3c,0x0a97971c,
+0xc40,0x1f7c403f,
+0xc44,0x000100b7,
+0xc48,0xec020107,
+0xc4c,0x007f037f,
+0xc50,0x6954342e,
+0xc54,0x43bc0094,
+0xc58,0x6954342f,
+0xc5c,0x433c0094,
+0xc60,0x00000000,
+0xc64,0x5116848b,
+0xc68,0x47c00bff,
+0xc6c,0x00000036,
+0xc70,0x2c46000d,
+0xc74,0x018610db,
+0xc78,0x0000001f,
+0xc7c,0x00b91612,
+0xc80,0x24000090,
+0xc84,0x20f60000,
+0xc88,0x24000090,
+0xc8c,0x20200000,
+0xc90,0x00121820,
+0xc94,0x00000000,
+0xc98,0x00121820,
+0xc9c,0x00007f7f,
+0xca0,0x00000000,
+0xca4,0x00000080,
+0xca8,0x00000000,
+0xcac,0x00000000,
+0xcb0,0x00000000,
+0xcb4,0x00000000,
+0xcb8,0x00000000,
+0xcbc,0x28000000,
+0xcc0,0x00000000,
+0xcc4,0x00000000,
+0xcc8,0x00000000,
+0xccc,0x00000000,
+0xcd0,0x00000000,
+0xcd4,0x00000000,
+0xcd8,0x64b22427,
+0xcdc,0x00766932,
+0xce0,0x00222222,
+0xce4,0x00000000,
+0xce8,0x37644302,
+0xcec,0x2f97d40c,
+0xd00,0x00000740,
+0xd04,0x00020401,
+0xd08,0x0000907f,
+0xd0c,0x20010201,
+0xd10,0xa0633333,
+0xd14,0x3333bc43,
+0xd18,0x7a8f5b6b,
+0xd2c,0xcc979975,
+0xd30,0x00000000,
+0xd34,0x80608000,
+0xd38,0x00000000,
+0xd3c,0x00027293,
+0xd40,0x00000000,
+0xd44,0x00000000,
+0xd48,0x00000000,
+0xd4c,0x00000000,
+0xd50,0x6437140a,
+0xd54,0x00000000,
+0xd58,0x00000000,
+0xd5c,0x30032064,
+0xd60,0x4653de68,
+0xd64,0x04518a3c,
+0xd68,0x00002101,
+0xd6c,0x2a201c16,
+0xd70,0x1812362e,
+0xd74,0x322c2220,
+0xd78,0x000e3c24,
+0xe00,0x24242424,
+0xe04,0x24242424,
+0xe08,0x03902024,
+0xe10,0x24242424,
+0xe14,0x24242424,
+0xe18,0x24242424,
+0xe1c,0x24242424,
+0xe28,0x00000000,
+0xe30,0x1000dc1f,
+0xe34,0x10008c1f,
+0xe38,0x02140102,
+0xe3c,0x681604c2,
+0xe40,0x01007c00,
+0xe44,0x01004800,
+0xe48,0xfb000000,
+0xe4c,0x000028d1,
+0xe50,0x1000dc1f,
+0xe54,0x10008c1f,
+0xe58,0x02140102,
+0xe5c,0x28160d05,
+0xe60,0x00000008,
+0xe68,0x001b25a4,
+0xe6c,0x631b25a0,
+0xe70,0x631b25a0,
+0xe74,0x081b25a0,
+0xe78,0x081b25a0,
+0xe7c,0x081b25a0,
+0xe80,0x081b25a0,
+0xe84,0x631b25a0,
+0xe88,0x081b25a0,
+0xe8c,0x631b25a0,
+0xed0,0x631b25a0,
+0xed4,0x631b25a0,
+0xed8,0x631b25a0,
+0xedc,0x001b25a0,
+0xee0,0x001b25a0,
+0xeec,0x6b1b25a0,
+0xee8,0x31555448,
+0xf14,0x00000003,
+0xf4c,0x00000000,
+0xf00,0x00000300,
+};
+
+u32 Rtl8192CUPHY_REG_1T_mCardArray[PHY_REG_1T_mCardArrayLength] = {
+0x024,0x0011800d,
+0x028,0x00ffdb83,
+0x800,0x80040000,
+0x804,0x00000001,
+0x808,0x0000fc00,
+0x80c,0x0000000a,
+0x810,0x10000330, //for Broadcom AP IOT
+0x814,0x020c3d10,
+0x818,0x02200385,
+0x81c,0x00000000,
+0x820,0x01000100,
+0x824,0x00390004,
+0x828,0x00000000,
+0x82c,0x00000000,
+0x830,0x00000000,
+0x834,0x00000000,
+0x838,0x00000000,
+0x83c,0x00000000,
+0x840,0x00010000,
+0x844,0x00000000,
+0x848,0x00000000,
+0x84c,0x00000000,
+0x850,0x00000000,
+0x854,0x00000000,
+0x858,0x569a569a,
+0x85c,0x001b25a4,
+0x860,0x66e60230,
+0x864,0x061f0130,
+0x868,0x00000000,
+0x86c,0x32323200,
+0x870,0x07000700,
+0x874,0x22004000,
+0x878,0x00000808,
+0x87c,0x00000000,
+0x880,0xc0083070,
+0x884,0x000004d5,
+0x888,0x00000000,
+0x88c,0xccc000c0,
+0x890,0x00000800,
+0x894,0xfffffffe,
+0x898,0x40302010,
+0x89c,0x00706050,
+0x900,0x00000000,
+0x904,0x00000023,
+0x908,0x00000000,
+0x90c,0x81121111,
+0xa00,0x00d047c8,
+0xa04,0x80ff000c,
+0xa08,0x8c838300,
+0xa0c,0x2e68120f,
+0xa10,0x9500bb78,
+0xa14,0x11144028,
+0xa18,0x00881117,
+0xa1c,0x89140f00,
+0xa20,0x1a1b0000,
+0xa24,0x090e1317,
+0xa28,0x00000204,
+0xa2c,0x00d30000,
+0xa70,0x101fbf00,
+0xa74,0x00000007,
+0xc00,0x48071d40,
+0xc04,0x03a05611,
+0xc08,0x000000e4,
+0xc0c,0x6c6c6c6c,
+0xc10,0x08800000,
+0xc14,0x40000100,
+0xc18,0x08800000,
+0xc1c,0x40000100,
+0xc20,0x00000000,
+0xc24,0x00000000,
+0xc28,0x00000000,
+0xc2c,0x00000000,
+0xc30,0x69e9ac44,
+0xc34,0x469652cf,
+0xc38,0x49795994,
+0xc3c,0x0a97971c,
+0xc40,0x1f7c403f,
+0xc44,0x000100b7,
+0xc48,0xec020107,
+0xc4c,0x007f037f,
+0xc50,0x69543420,
+0xc54,0x43bc0094,
+0xc58,0x69543420,
+0xc5c,0x433c0094,
+0xc60,0x00000000,
+0xc64,0x5116848b,
+0xc68,0x47c00bff,
+0xc6c,0x00000036,
+0xc70,0x2c7f000d,
+0xc74,0x018610db,
+0xc78,0x0000001f,
+0xc7c,0x00b91612,
+0xc80,0x40000100,
+0xc84,0x20f60000,
+0xc88,0x40000100,
+0xc8c,0x20200000,
+0xc90,0x00121820,
+0xc94,0x00000000,
+0xc98,0x00121820,
+0xc9c,0x00007f7f,
+0xca0,0x00000000,
+0xca4,0x00000080,
+0xca8,0x00000000,
+0xcac,0x00000000,
+0xcb0,0x00000000,
+0xcb4,0x00000000,
+0xcb8,0x00000000,
+0xcbc,0x28000000,
+0xcc0,0x00000000,
+0xcc4,0x00000000,
+0xcc8,0x00000000,
+0xccc,0x00000000,
+0xcd0,0x00000000,
+0xcd4,0x00000000,
+0xcd8,0x64b22427,
+0xcdc,0x00766932,
+0xce0,0x00222222,
+0xce4,0x00000000,
+0xce8,0x37644302,
+0xcec,0x2f97d40c,
+0xd00,0x00000740,
+0xd04,0x00020401,
+0xd08,0x0000907f,
+0xd0c,0x20010201,
+0xd10,0xa0633333,
+0xd14,0x3333bc43,
+0xd18,0x7a8f5b6b,
+0xd2c,0xcc979975,
+0xd30,0x00000000,
+0xd34,0x80608000,
+0xd38,0x00000000,
+0xd3c,0x00027293,
+0xd40,0x00000000,
+0xd44,0x00000000,
+0xd48,0x00000000,
+0xd4c,0x00000000,
+0xd50,0x6437140a,
+0xd54,0x00000000,
+0xd58,0x00000000,
+0xd5c,0x30032064,
+0xd60,0x4653de68,
+0xd64,0x04518a3c,
+0xd68,0x00002101,
+0xd6c,0x2a201c16,
+0xd70,0x1812362e,
+0xd74,0x322c2220,
+0xd78,0x000e3c24,
+0xe00,0x2a2a2a2a,
+0xe04,0x2a2a2a2a,
+0xe08,0x03902a2a,
+0xe10,0x2a2a2a2a,
+0xe14,0x2a2a2a2a,
+0xe18,0x2a2a2a2a,
+0xe1c,0x2a2a2a2a,
+0xe28,0x00000000,
+0xe30,0x1000dc1f,
+0xe34,0x10008c1f,
+0xe38,0x02140102,
+0xe3c,0x681604c2,
+0xe40,0x01007c00,
+0xe44,0x01004800,
+0xe48,0xfb000000,
+0xe4c,0x000028d1,
+0xe50,0x1000dc1f,
+0xe54,0x10008c1f,
+0xe58,0x02140102,
+0xe5c,0x28160d05,
+0xe60,0x00000008,
+0xe68,0x001b25a4,
+0xe6c,0x631b25a0,
+0xe70,0x631b25a0,
+0xe74,0x081b25a0,
+0xe78,0x081b25a0,
+0xe7c,0x081b25a0,
+0xe80,0x081b25a0,
+0xe84,0x631b25a0,
+0xe88,0x081b25a0,
+0xe8c,0x631b25a0,
+0xed0,0x631b25a0,
+0xed4,0x631b25a0,
+0xed8,0x631b25a0,
+0xedc,0x001b25a0,
+0xee0,0x001b25a0,
+0xeec,0x6b1b25a0,
+0xf14,0x00000003,
+0xf4c,0x00000000,
+0xf00,0x00000300,
+};
+
+u32 Rtl8192CUPHY_REG_2T_mCardArray[PHY_REG_2T_mCardArrayLength] = {
+0x024,0x0011800d,
+0x028,0x00ffdb83,
+0x800,0x80040002,
+0x804,0x00000003,
+0x808,0x0000fc00,
+0x80c,0x0000000a,
+0x810,0x10000330, //for Broadcom AP IOT
+0x814,0x020c3d10,
+0x818,0x02200385,
+0x81c,0x00000000,
+0x820,0x01000100,
+0x824,0x00390004,
+0x828,0x01000100,
+0x82c,0x00390004,
+0x830,0x27272727,
+0x834,0x27272727,
+0x838,0x27272727,
+0x83c,0x27272727,
+0x840,0x00010000,
+0x844,0x00010000,
+0x848,0x27272727,
+0x84c,0x27272727,
+0x850,0x00000000,
+0x854,0x00000000,
+0x858,0x569a569a,
+0x85c,0x0c1b25a4,
+0x860,0x66e60230,
+0x864,0x061f0130,
+0x868,0x27272727,
+0x86c,0x2b2b2b27,
+0x870,0x07000700,
+0x874,0x22184000,
+0x878,0x08080808,
+0x87c,0x00000000,
+0x880,0xc0083070,
+0x884,0x000004d5,
+0x888,0x00000000,
+0x88c,0xcc0000c0,
+0x890,0x00000800,
+0x894,0xfffffffe,
+0x898,0x40302010,
+0x89c,0x00706050,
+0x900,0x00000000,
+0x904,0x00000023,
+0x908,0x00000000,
+0x90c,0x81121313,
+0xa00,0x00d047c8,
+0xa04,0x80ff000c,
+0xa08,0x8c838300,
+0xa0c,0x2e68120f,
+0xa10,0x9500bb78,
+0xa14,0x11144028,
+0xa18,0x00881117,
+0xa1c,0x89140f00,
+0xa20,0x1a1b0000,
+0xa24,0x090e1317,
+0xa28,0x00000204,
+0xa2c,0x00d30000,
+0xa70,0x101fbf00,
+0xa74,0x00000007,
+0xc00,0x48071d40,
+0xc04,0x03a05633,
+0xc08,0x000000e4,
+0xc0c,0x6c6c6c6c,
+0xc10,0x08800000,
+0xc14,0x40000100,
+0xc18,0x08800000,
+0xc1c,0x40000100,
+0xc20,0x00000000,
+0xc24,0x00000000,
+0xc28,0x00000000,
+0xc2c,0x00000000,
+0xc30,0x69e9ac44,
+0xc34,0x469652cf,
+0xc38,0x49795994,
+0xc3c,0x0a97971c,
+0xc40,0x1f7c403f,
+0xc44,0x000100b7,
+0xc48,0xec020107,
+0xc4c,0x007f037f,
+0xc50,0x69543420,
+0xc54,0x43bc0094,
+0xc58,0x69543420,
+0xc5c,0x433c0094,
+0xc60,0x00000000,
+0xc64,0x5116848b,
+0xc68,0x47c00bff,
+0xc6c,0x00000036,
+0xc70,0x2c7f000d,
+0xc74,0x218610db,
+0xc78,0x0000001f,
+0xc7c,0x00b91612,
+0xc80,0x40000100,
+0xc84,0x20f60000,
+0xc88,0x40000100,
+0xc8c,0xa0e40000,
+0xc90,0x00121820,
+0xc94,0x00000000,
+0xc98,0x00121820,
+0xc9c,0x00007f7f,
+0xca0,0x00000000,
+0xca4,0x00000080,
+0xca8,0x00000000,
+0xcac,0x00000000,
+0xcb0,0x00000000,
+0xcb4,0x00000000,
+0xcb8,0x00000000,
+0xcbc,0x28000000,
+0xcc0,0x00000000,
+0xcc4,0x00000000,
+0xcc8,0x00000000,
+0xccc,0x00000000,
+0xcd0,0x00000000,
+0xcd4,0x00000000,
+0xcd8,0x64b22427,
+0xcdc,0x00766932,
+0xce0,0x00222222,
+0xce4,0x00000000,
+0xce8,0x37644302,
+0xcec,0x2f97d40c,
+0xd00,0x00080740,
+0xd04,0x00020403,
+0xd08,0x0000907f,
+0xd0c,0x20010201,
+0xd10,0xa0633333,
+0xd14,0x3333bc43,
+0xd18,0x7a8f5b6b,
+0xd2c,0xcc979975,
+0xd30,0x00000000,
+0xd34,0x80608000,
+0xd38,0x00000000,
+0xd3c,0x00027293,
+0xd40,0x00000000,
+0xd44,0x00000000,
+0xd48,0x00000000,
+0xd4c,0x00000000,
+0xd50,0x6437140a,
+0xd54,0x00000000,
+0xd58,0x00000000,
+0xd5c,0x30032064,
+0xd60,0x4653de68,
+0xd64,0x04518a3c,
+0xd68,0x00002101,
+0xd6c,0x2a201c16,
+0xd70,0x1812362e,
+0xd74,0x322c2220,
+0xd78,0x000e3c24,
+0xe00,0x2a2a2a2a,
+0xe04,0x2a2a2a2a,
+0xe08,0x03902a2a,
+0xe10,0x2a2a2a2a,
+0xe14,0x2a2a2a2a,
+0xe18,0x2a2a2a2a,
+0xe1c,0x2a2a2a2a,
+0xe28,0x00000000,
+0xe30,0x1000dc1f,
+0xe34,0x10008c1f,
+0xe38,0x02140102,
+0xe3c,0x681604c2,
+0xe40,0x01007c00,
+0xe44,0x01004800,
+0xe48,0xfb000000,
+0xe4c,0x000028d1,
+0xe50,0x1000dc1f,
+0xe54,0x10008c1f,
+0xe58,0x02140102,
+0xe5c,0x28160d05,
+0xe60,0x00000010,
+0xe68,0x001b25a4,
+0xe6c,0x63db25a4,
+0xe70,0x63db25a4,
+0xe74,0x0c1b25a4,
+0xe78,0x0c1b25a4,
+0xe7c,0x0c1b25a4,
+0xe80,0x0c1b25a4,
+0xe84,0x63db25a4,
+0xe88,0x0c1b25a4,
+0xe8c,0x63db25a4,
+0xed0,0x63db25a4,
+0xed4,0x63db25a4,
+0xed8,0x63db25a4,
+0xedc,0x001b25a4,
+0xee0,0x001b25a4,
+0xeec,0x6fdb25a4,
+0xf14,0x00000003,
+0xf4c,0x00000000,
+0xf00,0x00000300,
+};
+
+u32 Rtl8192CUPHY_REG_Array_PG_HP[PHY_REG_Array_PG_HPLength] = {
+0xe00,0xffffffff,0x06080808,
+0xe04,0xffffffff,0x00040406,
+0xe08,0x0000ff00,0x00000000,
+0x86c,0xffffff00,0x00000000,
+0xe10,0xffffffff,0x04060608,
+0xe14,0xffffffff,0x00020204,
+0xe18,0xffffffff,0x04060608,
+0xe1c,0xffffffff,0x00020204,
+0x830,0xffffffff,0x06080808,
+0x834,0xffffffff,0x00040406,
+0x838,0xffffff00,0x00000000,
+0x86c,0x000000ff,0x00000000,
+0x83c,0xffffffff,0x04060608,
+0x848,0xffffffff,0x00020204,
+0x84c,0xffffffff,0x04060608,
+0x868,0xffffffff,0x00020204,
+0xe00,0xffffffff,0x00000000,
+0xe04,0xffffffff,0x00000000,
+0xe08,0x0000ff00,0x00000000,
+0x86c,0xffffff00,0x00000000,
+0xe10,0xffffffff,0x00000000,
+0xe14,0xffffffff,0x00000000,
+0xe18,0xffffffff,0x00000000,
+0xe1c,0xffffffff,0x00000000,
+0x830,0xffffffff,0x00000000,
+0x834,0xffffffff,0x00000000,
+0x838,0xffffff00,0x00000000,
+0x86c,0x000000ff,0x00000000,
+0x83c,0xffffffff,0x00000000,
+0x848,0xffffffff,0x00000000,
+0x84c,0xffffffff,0x00000000,
+0x868,0xffffffff,0x00000000,
+0xe00,0xffffffff,0x00000000,
+0xe04,0xffffffff,0x00000000,
+0xe08,0x0000ff00,0x00000000,
+0x86c,0xffffff00,0x00000000,
+0xe10,0xffffffff,0x00000000,
+0xe14,0xffffffff,0x00000000,
+0xe18,0xffffffff,0x00000000,
+0xe1c,0xffffffff,0x00000000,
+0x830,0xffffffff,0x00000000,
+0x834,0xffffffff,0x00000000,
+0x838,0xffffff00,0x00000000,
+0x86c,0x000000ff,0x00000000,
+0x83c,0xffffffff,0x00000000,
+0x848,0xffffffff,0x00000000,
+0x84c,0xffffffff,0x00000000,
+0x868,0xffffffff,0x00000000,
+0xe00,0xffffffff,0x00000000,
+0xe04,0xffffffff,0x00000000,
+0xe08,0x0000ff00,0x00000000,
+0x86c,0xffffff00,0x00000000,
+0xe10,0xffffffff,0x00000000,
+0xe14,0xffffffff,0x00000000,
+0xe18,0xffffffff,0x00000000,
+0xe1c,0xffffffff,0x00000000,
+0x830,0xffffffff,0x00000000,
+0x834,0xffffffff,0x00000000,
+0x838,0xffffff00,0x00000000,
+0x86c,0x000000ff,0x00000000,
+0x83c,0xffffffff,0x00000000,
+0x848,0xffffffff,0x00000000,
+0x84c,0xffffffff,0x00000000,
+0x868,0xffffffff,0x00000000,
+0xe00,0xffffffff,0x00000000,
+0xe04,0xffffffff,0x00000000,
+0xe08,0x0000ff00,0x00000000,
+0x86c,0xffffff00,0x00000000,
+0xe10,0xffffffff,0x00000000,
+0xe14,0xffffffff,0x00000000,
+0xe18,0xffffffff,0x00000000,
+0xe1c,0xffffffff,0x00000000,
+0x830,0xffffffff,0x00000000,
+0x834,0xffffffff,0x00000000,
+0x838,0xffffff00,0x00000000,
+0x86c,0x000000ff,0x00000000,
+0x83c,0xffffffff,0x00000000,
+0x848,0xffffffff,0x00000000,
+0x84c,0xffffffff,0x00000000,
+0x868,0xffffffff,0x00000000,
+0xe00,0xffffffff,0x00000000,
+0xe04,0xffffffff,0x00000000,
+0xe08,0x0000ff00,0x00000000,
+0x86c,0xffffff00,0x00000000,
+0xe10,0xffffffff,0x00000000,
+0xe14,0xffffffff,0x00000000,
+0xe18,0xffffffff,0x00000000,
+0xe1c,0xffffffff,0x00000000,
+0x830,0xffffffff,0x00000000,
+0x834,0xffffffff,0x00000000,
+0x838,0xffffff00,0x00000000,
+0x86c,0x000000ff,0x00000000,
+0x83c,0xffffffff,0x00000000,
+0x848,0xffffffff,0x00000000,
+0x84c,0xffffffff,0x00000000,
+0x868,0xffffffff,0x00000000,
+0xe00,0xffffffff,0x00000000,
+0xe04,0xffffffff,0x00000000,
+0xe08,0x0000ff00,0x00000000,
+0x86c,0xffffff00,0x00000000,
+0xe10,0xffffffff,0x00000000,
+0xe14,0xffffffff,0x00000000,
+0xe18,0xffffffff,0x00000000,
+0xe1c,0xffffffff,0x00000000,
+0x830,0xffffffff,0x00000000,
+0x834,0xffffffff,0x00000000,
+0x838,0xffffff00,0x00000000,
+0x86c,0x000000ff,0x00000000,
+0x83c,0xffffffff,0x00000000,
+0x848,0xffffffff,0x00000000,
+0x84c,0xffffffff,0x00000000,
+0x868,0xffffffff,0x00000000,
+};
+
+u32 Rtl8192CURadioA_2TArray[RadioA_2TArrayLength] = {
+0x000,0x00030159,
+0x001,0x00031284,
+0x002,0x00098000,
+0x003,0x00018c63,
+0x004,0x000210e7,
+0x009,0x0002044f,
+0x00a,0x0001adb1,
+0x00b,0x00054867,
+0x00c,0x0008992e,
+0x00d,0x0000e52c,
+0x00e,0x00039ce7,
+0x00f,0x00000451,
+0x019,0x00000000,
+0x01a,0x00010255,
+0x01b,0x00060a00,
+0x01c,0x000fc378,
+0x01d,0x000a1250,
+0x01e,0x0004445f,
+0x01f,0x00080001,
+0x020,0x0000b614,
+0x021,0x0006c000,
+0x022,0x00000000,
+0x023,0x00001558,
+0x024,0x00000060,
+0x025,0x00000483,
+0x026,0x0004f000,
+0x027,0x000ec7d9,
+0x028,0x000577c0,
+0x029,0x00004783,
+0x02a,0x00000001,
+0x02b,0x00021334,
+0x02a,0x00000000,
+0x02b,0x00000054,
+0x02a,0x00000001,
+0x02b,0x00000808,
+0x02b,0x00053333,
+0x02c,0x0000000c,
+0x02a,0x00000002,
+0x02b,0x00000808,
+0x02b,0x0005b333,
+0x02c,0x0000000d,
+0x02a,0x00000003,
+0x02b,0x00000808,
+0x02b,0x00063333,
+0x02c,0x0000000d,
+0x02a,0x00000004,
+0x02b,0x00000808,
+0x02b,0x0006b333,
+0x02c,0x0000000d,
+0x02a,0x00000005,
+0x02b,0x00000808,
+0x02b,0x00073333,
+0x02c,0x0000000d,
+0x02a,0x00000006,
+0x02b,0x00000709,
+0x02b,0x0005b333,
+0x02c,0x0000000d,
+0x02a,0x00000007,
+0x02b,0x00000709,
+0x02b,0x00063333,
+0x02c,0x0000000d,
+0x02a,0x00000008,
+0x02b,0x0000060a,
+0x02b,0x0004b333,
+0x02c,0x0000000d,
+0x02a,0x00000009,
+0x02b,0x0000060a,
+0x02b,0x00053333,
+0x02c,0x0000000d,
+0x02a,0x0000000a,
+0x02b,0x0000060a,
+0x02b,0x0005b333,
+0x02c,0x0000000d,
+0x02a,0x0000000b,
+0x02b,0x0000060a,
+0x02b,0x00063333,
+0x02c,0x0000000d,
+0x02a,0x0000000c,
+0x02b,0x0000060a,
+0x02b,0x0006b333,
+0x02c,0x0000000d,
+0x02a,0x0000000d,
+0x02b,0x0000060a,
+0x02b,0x00073333,
+0x02c,0x0000000d,
+0x02a,0x0000000e,
+0x02b,0x0000050b,
+0x02b,0x00066666,
+0x02c,0x0000001a,
+0x02a,0x000e0000,
+0x010,0x0004000f,
+0x011,0x000e31fc,
+0x010,0x0006000f,
+0x011,0x000ff9f8,
+0x010,0x0002000f,
+0x011,0x000203f9,
+0x010,0x0003000f,
+0x011,0x000ff500,
+0x010,0x00000000,
+0x011,0x00000000,
+0x010,0x0008000f,
+0x011,0x0003f100,
+0x010,0x0009000f,
+0x011,0x00023100,
+0x012,0x00032000,
+0x012,0x00071000,
+0x012,0x000b0000,
+0x012,0x000fc000,
+0x013,0x000287b3,
+0x013,0x000244b7,
+0x013,0x000204ab,
+0x013,0x0001c49f,
+0x013,0x00018493,
+0x013,0x0001429b,
+0x013,0x00010299,
+0x013,0x0000c29c,
+0x013,0x000081a0,
+0x013,0x000040ac,
+0x013,0x00000020,
+0x014,0x0001944c,
+0x014,0x00059444,
+0x014,0x0009944c,
+0x014,0x000d9444,
+0x015,0x0000f424,
+0x015,0x0004f424,
+0x015,0x0008f424,
+0x015,0x000cf424,
+0x016,0x000e0330,
+0x016,0x000a0330,
+0x016,0x00060330,
+0x016,0x00020330,
+0x000,0x00010159,
+0x018,0x0000f401,
+0x0fe,0x00000000,
+0x0fe,0x00000000,
+0x01f,0x00080003,
+0x0fe,0x00000000,
+0x0fe,0x00000000,
+0x01e,0x00044457,
+0x01f,0x00080000,
+0x000,0x00030159,
+};
+
+u32 Rtl8192CURadioB_2TArray[RadioB_2TArrayLength] = {
+0x000,0x00030159,
+0x001,0x00031284,
+0x002,0x00098000,
+0x003,0x00018c63,
+0x004,0x000210e7,
+0x009,0x0002044f,
+0x00a,0x0001adb1,
+0x00b,0x00054867,
+0x00c,0x0008992e,
+0x00d,0x0000e52c,
+0x00e,0x00039ce7,
+0x00f,0x00000451,
+0x012,0x00032000,
+0x012,0x00071000,
+0x012,0x000b0000,
+0x012,0x000fc000,
+0x013,0x000287af,
+0x013,0x000244b7,
+0x013,0x000204ab,
+0x013,0x0001c49f,
+0x013,0x00018493,
+0x013,0x00014297,
+0x013,0x00010295,
+0x013,0x0000c298,
+0x013,0x0000819c,
+0x013,0x000040a8,
+0x013,0x0000001c,
+0x014,0x0001944c,
+0x014,0x00059444,
+0x014,0x0009944c,
+0x014,0x000d9444,
+0x015,0x0000f424,
+0x015,0x0004f424,
+0x015,0x0008f424,
+0x015,0x000cf424,
+0x016,0x000e0330,
+0x016,0x000a0330,
+0x016,0x00060330,
+0x016,0x00020330,
+};
+
+u32 Rtl8192CURadioA_1TArray[RadioA_1TArrayLength] = {
+0x000,0x00030159,
+0x001,0x00031284,
+0x002,0x00098000,
+0x003,0x00018c63,
+0x004,0x000210e7,
+0x009,0x0002044f,
+0x00a,0x0001adb1,
+0x00b,0x00054867,
+0x00c,0x0008992e,
+0x00d,0x0000e52c,
+0x00e,0x00039ce7,
+0x00f,0x00000451,
+0x019,0x00000000,
+0x01a,0x00010255,
+0x01b,0x00060a00,
+0x01c,0x000fc378,
+0x01d,0x000a1250,
+0x01e,0x0004445f,
+0x01f,0x00080001,
+0x020,0x0000b614,
+0x021,0x0006c000,
+0x022,0x00000000,
+0x023,0x00001558,
+0x024,0x00000060,
+0x025,0x00000483,
+0x026,0x0004f000,
+0x027,0x000ec7d9,
+0x028,0x000577c0,
+0x029,0x00004783,
+0x02a,0x00000001,
+0x02b,0x00021334,
+0x02a,0x00000000,
+0x02b,0x00000054,
+0x02a,0x00000001,
+0x02b,0x00000808,
+0x02b,0x00053333,
+0x02c,0x0000000c,
+0x02a,0x00000002,
+0x02b,0x00000808,
+0x02b,0x0005b333,
+0x02c,0x0000000d,
+0x02a,0x00000003,
+0x02b,0x00000808,
+0x02b,0x00063333,
+0x02c,0x0000000d,
+0x02a,0x00000004,
+0x02b,0x00000808,
+0x02b,0x0006b333,
+0x02c,0x0000000d,
+0x02a,0x00000005,
+0x02b,0x00000808,
+0x02b,0x00073333,
+0x02c,0x0000000d,
+0x02a,0x00000006,
+0x02b,0x00000709,
+0x02b,0x0005b333,
+0x02c,0x0000000d,
+0x02a,0x00000007,
+0x02b,0x00000709,
+0x02b,0x00063333,
+0x02c,0x0000000d,
+0x02a,0x00000008,
+0x02b,0x0000060a,
+0x02b,0x0004b333,
+0x02c,0x0000000d,
+0x02a,0x00000009,
+0x02b,0x0000060a,
+0x02b,0x00053333,
+0x02c,0x0000000d,
+0x02a,0x0000000a,
+0x02b,0x0000060a,
+0x02b,0x0005b333,
+0x02c,0x0000000d,
+0x02a,0x0000000b,
+0x02b,0x0000060a,
+0x02b,0x00063333,
+0x02c,0x0000000d,
+0x02a,0x0000000c,
+0x02b,0x0000060a,
+0x02b,0x0006b333,
+0x02c,0x0000000d,
+0x02a,0x0000000d,
+0x02b,0x0000060a,
+0x02b,0x00073333,
+0x02c,0x0000000d,
+0x02a,0x0000000e,
+0x02b,0x0000050b,
+0x02b,0x00066666,
+0x02c,0x0000001a,
+0x02a,0x000e0000,
+0x010,0x0004000f,
+0x011,0x000e31fc,
+0x010,0x0006000f,
+0x011,0x000ff9f8,
+0x010,0x0002000f,
+0x011,0x000203f9,
+0x010,0x0003000f,
+0x011,0x000ff500,
+0x010,0x00000000,
+0x011,0x00000000,
+0x010,0x0008000f,
+0x011,0x0003f100,
+0x010,0x0009000f,
+0x011,0x00023100,
+0x012,0x00032000,
+0x012,0x00071000,
+0x012,0x000b0000,
+0x012,0x000fc000,
+0x013,0x000287b3,
+0x013,0x000244b7,
+0x013,0x000204ab,
+0x013,0x0001c49f,
+0x013,0x00018493,
+0x013,0x0001429b,
+0x013,0x00010299,
+0x013,0x0000c29c,
+0x013,0x000081a0,
+0x013,0x000040ac,
+0x013,0x00000020,
+0x014,0x0001944c,
+0x014,0x00059444,
+0x014,0x0009944c,
+0x014,0x000d9444,
+0x015,0x0000f405,
+0x015,0x0004f405,
+0x015,0x0008f405,
+0x015,0x000cf405,
+0x016,0x000e0330,
+0x016,0x000a0330,
+0x016,0x00060330,
+0x016,0x00020330,
+0x000,0x00010159,
+0x018,0x0000f401,
+0x0fe,0x00000000,
+0x0fe,0x00000000,
+0x01f,0x00080003,
+0x0fe,0x00000000,
+0x0fe,0x00000000,
+0x01e,0x00044457,
+0x01f,0x00080000,
+0x000,0x00030159,
+};
+
+u32 Rtl8192CURadioB_1TArray[RadioB_1TArrayLength] = {
+0x0, };
+
+
+u32 Rtl8192CURadioA_2T_mCardArray[RadioA_2T_mCardArrayLength] = {
+0x000,0x00030159,
+0x001,0x00031284,
+0x002,0x00098000,
+0x003,0x00018c63,
+0x004,0x000210e7,
+0x009,0x0002044f,
+0x00a,0x0001adb1,
+0x00b,0x00054867,
+0x00c,0x0008992e,
+0x00d,0x0000e52c,
+0x00e,0x00039ce7,
+0x00f,0x00000451,
+0x019,0x00000000,
+0x01a,0x00010255,
+0x01b,0x00060a00,
+0x01c,0x000fc378,
+0x01d,0x000a1250,
+0x01e,0x0004445f,
+0x01f,0x00080001,
+0x020,0x0000b614,
+0x021,0x0006c000,
+0x022,0x00000000,
+0x023,0x00001558,
+0x024,0x00000060,
+0x025,0x00000483,
+0x026,0x0004f000,
+0x027,0x000ec7d9,
+0x028,0x000577c0,
+0x029,0x00004783,
+0x02a,0x00000001,
+0x02b,0x00021334,
+0x02a,0x00000000,
+0x02b,0x00000054,
+0x02a,0x00000001,
+0x02b,0x00000808,
+0x02b,0x00053333,
+0x02c,0x0000000c,
+0x02a,0x00000002,
+0x02b,0x00000808,
+0x02b,0x0005b333,
+0x02c,0x0000000d,
+0x02a,0x00000003,
+0x02b,0x00000808,
+0x02b,0x00063333,
+0x02c,0x0000000d,
+0x02a,0x00000004,
+0x02b,0x00000808,
+0x02b,0x0006b333,
+0x02c,0x0000000d,
+0x02a,0x00000005,
+0x02b,0x00000808,
+0x02b,0x00073333,
+0x02c,0x0000000d,
+0x02a,0x00000006,
+0x02b,0x00000709,
+0x02b,0x0005b333,
+0x02c,0x0000000d,
+0x02a,0x00000007,
+0x02b,0x00000709,
+0x02b,0x00063333,
+0x02c,0x0000000d,
+0x02a,0x00000008,
+0x02b,0x0000060a,
+0x02b,0x0004b333,
+0x02c,0x0000000d,
+0x02a,0x00000009,
+0x02b,0x0000060a,
+0x02b,0x00053333,
+0x02c,0x0000000d,
+0x02a,0x0000000a,
+0x02b,0x0000060a,
+0x02b,0x0005b333,
+0x02c,0x0000000d,
+0x02a,0x0000000b,
+0x02b,0x0000060a,
+0x02b,0x00063333,
+0x02c,0x0000000d,
+0x02a,0x0000000c,
+0x02b,0x0000060a,
+0x02b,0x0006b333,
+0x02c,0x0000000d,
+0x02a,0x0000000d,
+0x02b,0x0000060a,
+0x02b,0x00073333,
+0x02c,0x0000000d,
+0x02a,0x0000000e,
+0x02b,0x0000050b,
+0x02b,0x00066666,
+0x02c,0x0000001a,
+0x02a,0x000e0000,
+0x010,0x0004000f,
+0x011,0x000e31fc,
+0x010,0x0006000f,
+0x011,0x000ff9f8,
+0x010,0x0002000f,
+0x011,0x000203f9,
+0x010,0x0003000f,
+0x011,0x000ff500,
+0x010,0x00000000,
+0x011,0x00000000,
+0x010,0x0008000f,
+0x011,0x0003f100,
+0x010,0x0009000f,
+0x011,0x00023100,
+0x012,0x00032000,
+0x012,0x00071000,
+0x012,0x000b0000,
+0x012,0x000fc000,
+0x013,0x000287b3,
+0x013,0x000244b7,
+0x013,0x000204ab,
+0x013,0x0001c49f,
+0x013,0x00018493,
+0x013,0x0001429b,
+0x013,0x00010299,
+0x013,0x0000c29c,
+0x013,0x000081a0,
+0x013,0x000040ac,
+0x013,0x00000020,
+0x014,0x0001944c,
+0x014,0x00059444,
+0x014,0x0009944c,
+0x014,0x000d9444,
+0x015,0x0000f424,
+0x015,0x0004f424,
+0x015,0x0008f424,
+0x015,0x000cf424,
+0x016,0x000e0330,
+0x016,0x000a0330,
+0x016,0x00060330,
+0x016,0x00020330,
+0x000,0x00010159,
+0x018,0x0000f401,
+0x0fe,0x00000000,
+0x0fe,0x00000000,
+0x01f,0x00080003,
+0x0fe,0x00000000,
+0x0fe,0x00000000,
+0x01e,0x00044457,
+0x01f,0x00080000,
+0x000,0x00030159,
+};
+
+u32 Rtl8192CURadioB_2T_mCardArray[RadioB_2T_mCardArrayLength] = {
+0x000,0x00030159,
+0x001,0x00031284,
+0x002,0x00098000,
+0x003,0x00018c63,
+0x004,0x000210e7,
+0x009,0x0002044f,
+0x00a,0x0001adb1,
+0x00b,0x00054867,
+0x00c,0x0008992e,
+0x00d,0x0000e52c,
+0x00e,0x00039ce7,
+0x00f,0x00000451,
+0x012,0x00032000,
+0x012,0x00071000,
+0x012,0x000b0000,
+0x012,0x000fc000,
+0x013,0x000287af,
+0x013,0x000244b7,
+0x013,0x000204ab,
+0x013,0x0001c49f,
+0x013,0x00018493,
+0x013,0x00014297,
+0x013,0x00010295,
+0x013,0x0000c298,
+0x013,0x0000819c,
+0x013,0x000040a8,
+0x013,0x0000001c,
+0x014,0x0001944c,
+0x014,0x00059444,
+0x014,0x0009944c,
+0x014,0x000d9444,
+0x015,0x0000f424,
+0x015,0x0004f424,
+0x015,0x0008f424,
+0x015,0x000cf424,
+0x016,0x000e0330,
+0x016,0x000a0330,
+0x016,0x00060330,
+0x016,0x00020330,
+};
+
+u32 Rtl8192CURadioA_1T_mCardArray[RadioA_1T_mCardArrayLength] = {
+0x000,0x00030159,
+0x001,0x00031284,
+0x002,0x00098000,
+0x003,0x00018c63,
+0x004,0x000210e7,
+0x009,0x0002044f,
+0x00a,0x0001adb1,
+0x00b,0x00054867,
+0x00c,0x0008992e,
+0x00d,0x0000e52c,
+0x00e,0x00039ce7,
+0x00f,0x00000451,
+0x019,0x00000000,
+0x01a,0x00010255,
+0x01b,0x00060a00,
+0x01c,0x000fc378,
+0x01d,0x000a1250,
+0x01e,0x0004445f,
+0x01f,0x00080001,
+0x020,0x0000b614,
+0x021,0x0006c000,
+0x022,0x00000000,
+0x023,0x00001558,
+0x024,0x00000060,
+0x025,0x00000483,
+0x026,0x0004f200,
+0x027,0x000ec7d9,
+0x028,0x000577c0,
+0x029,0x00004783,
+0x02a,0x00000001,
+0x02b,0x00021334,
+0x02a,0x00000000,
+0x02b,0x00000054,
+0x02a,0x00000001,
+0x02b,0x00000808,
+0x02b,0x00053333,
+0x02c,0x0000000c,
+0x02a,0x00000002,
+0x02b,0x00000808,
+0x02b,0x0005b333,
+0x02c,0x0000000d,
+0x02a,0x00000003,
+0x02b,0x00000808,
+0x02b,0x00063333,
+0x02c,0x0000000d,
+0x02a,0x00000004,
+0x02b,0x00000808,
+0x02b,0x0006b333,
+0x02c,0x0000000d,
+0x02a,0x00000005,
+0x02b,0x00000808,
+0x02b,0x00073333,
+0x02c,0x0000000d,
+0x02a,0x00000006,
+0x02b,0x00000709,
+0x02b,0x0005b333,
+0x02c,0x0000000d,
+0x02a,0x00000007,
+0x02b,0x00000709,
+0x02b,0x00063333,
+0x02c,0x0000000d,
+0x02a,0x00000008,
+0x02b,0x0000060a,
+0x02b,0x0004b333,
+0x02c,0x0000000d,
+0x02a,0x00000009,
+0x02b,0x0000060a,
+0x02b,0x00053333,
+0x02c,0x0000000d,
+0x02a,0x0000000a,
+0x02b,0x0000060a,
+0x02b,0x0005b333,
+0x02c,0x0000000d,
+0x02a,0x0000000b,
+0x02b,0x0000060a,
+0x02b,0x00063333,
+0x02c,0x0000000d,
+0x02a,0x0000000c,
+0x02b,0x0000060a,
+0x02b,0x0006b333,
+0x02c,0x0000000d,
+0x02a,0x0000000d,
+0x02b,0x0000060a,
+0x02b,0x00073333,
+0x02c,0x0000000d,
+0x02a,0x0000000e,
+0x02b,0x0000050b,
+0x02b,0x00066666,
+0x02c,0x0000001a,
+0x02a,0x000e0000,
+0x010,0x0004000f,
+0x011,0x000e31fc,
+0x010,0x0006000f,
+0x011,0x000ff9f8,
+0x010,0x0002000f,
+0x011,0x000203f9,
+0x010,0x0003000f,
+0x011,0x000ff500,
+0x010,0x00000000,
+0x011,0x00000000,
+0x010,0x0008000f,
+0x011,0x0003f100,
+0x010,0x0009000f,
+0x011,0x00023100,
+0x012,0x00032000,
+0x012,0x00071000,
+0x012,0x000b0000,
+0x012,0x000fc000,
+0x013,0x000287b3,
+0x013,0x000244b7,
+0x013,0x000204ab,
+0x013,0x0001c49f,
+0x013,0x00018493,
+0x013,0x0001429b,
+0x013,0x00010299,
+0x013,0x0000c29c,
+0x013,0x000081a0,
+0x013,0x000040ac,
+0x013,0x00000020,
+0x014,0x0001944c,
+0x014,0x00059444,
+0x014,0x0009944c,
+0x014,0x000d9444,
+0x015,0x0000f424,
+0x015,0x0004f424,
+0x015,0x0008f424,
+0x015,0x000cf424,
+0x016,0x000e0330,
+0x016,0x000a0330,
+0x016,0x00060330,
+0x016,0x00020330,
+0x000,0x00010159,
+0x018,0x0000f401,
+0x0fe,0x00000000,
+0x0fe,0x00000000,
+0x01f,0x00080003,
+0x0fe,0x00000000,
+0x0fe,0x00000000,
+0x01e,0x00044457,
+0x01f,0x00080000,
+0x000,0x00030159,
+};
+
+u32 Rtl8192CURadioB_1T_mCardArray[RadioB_1T_mCardArrayLength] = {
+0x0, };
+
+u32 Rtl8192CURadioA_1T_HPArray[RadioA_1T_HPArrayLength] = {
+0x000,0x00030159,
+0x001,0x00031284,
+0x002,0x00098000,
+0x003,0x00018c63,
+0x004,0x000210e7,
+0x009,0x0002044f,
+0x00a,0x0001adb0,
+0x00b,0x00054867,
+0x00c,0x0008992e,
+0x00d,0x0000e529,
+0x00e,0x00039ce7,
+0x00f,0x00000451,
+0x019,0x00000000,
+0x01a,0x00000255,
+0x01b,0x00060a00,
+0x01c,0x000fc378,
+0x01d,0x000a1250,
+0x01e,0x0004445f,
+0x01f,0x00080001,
+0x020,0x0000b614,
+0x021,0x0006c000,
+0x022,0x0000083c,
+0x023,0x00001558,
+0x024,0x00000060,
+0x025,0x00000483,
+0x026,0x0004f000,
+0x027,0x000ec7d9,
+0x028,0x000977c0,
+0x029,0x00004783,
+0x02a,0x00000001,
+0x02b,0x00021334,
+0x02a,0x00000000,
+0x02b,0x00000054,
+0x02a,0x00000001,
+0x02b,0x00000808,
+0x02b,0x00053333,
+0x02c,0x0000000c,
+0x02a,0x00000002,
+0x02b,0x00000808,
+0x02b,0x0005b333,
+0x02c,0x0000000d,
+0x02a,0x00000003,
+0x02b,0x00000808,
+0x02b,0x00063333,
+0x02c,0x0000000d,
+0x02a,0x00000004,
+0x02b,0x00000808,
+0x02b,0x0006b333,
+0x02c,0x0000000d,
+0x02a,0x00000005,
+0x02b,0x00000808,
+0x02b,0x00073333,
+0x02c,0x0000000d,
+0x02a,0x00000006,
+0x02b,0x00000709,
+0x02b,0x0005b333,
+0x02c,0x0000000d,
+0x02a,0x00000007,
+0x02b,0x00000709,
+0x02b,0x00063333,
+0x02c,0x0000000d,
+0x02a,0x00000008,
+0x02b,0x0000060a,
+0x02b,0x0004b333,
+0x02c,0x0000000d,
+0x02a,0x00000009,
+0x02b,0x0000060a,
+0x02b,0x00053333,
+0x02c,0x0000000d,
+0x02a,0x0000000a,
+0x02b,0x0000060a,
+0x02b,0x0005b333,
+0x02c,0x0000000d,
+0x02a,0x0000000b,
+0x02b,0x0000060a,
+0x02b,0x00063333,
+0x02c,0x0000000d,
+0x02a,0x0000000c,
+0x02b,0x0000060a,
+0x02b,0x0006b333,
+0x02c,0x0000000d,
+0x02a,0x0000000d,
+0x02b,0x0000060a,
+0x02b,0x00073333,
+0x02c,0x0000000d,
+0x02a,0x0000000e,
+0x02b,0x0000050b,
+0x02b,0x00066666,
+0x02c,0x0000001a,
+0x02a,0x000e0000,
+0x010,0x0004000f,
+0x011,0x000e31fc,
+0x010,0x0006000f,
+0x011,0x000ff9f8,
+0x010,0x0002000f,
+0x011,0x000203f9,
+0x010,0x0003000f,
+0x011,0x000ff500,
+0x010,0x00000000,
+0x011,0x00000000,
+0x010,0x0008000f,
+0x011,0x0003f100,
+0x010,0x0009000f,
+0x011,0x00023100,
+0x012,0x000d8000,
+0x012,0x00090000,
+0x012,0x00051000,
+0x012,0x00012000,
+0x013,0x00028fb4,
+0x013,0x00024fa8,
+0x013,0x000207a4,
+0x013,0x0001c3b0,
+0x013,0x000183a4,
+0x013,0x00014398,
+0x013,0x000101a4,
+0x013,0x0000c198,
+0x013,0x000080a4,
+0x013,0x00004098,
+0x013,0x00000000,
+0x014,0x0001944c,
+0x014,0x00059444,
+0x014,0x0009944c,
+0x014,0x000d9444,
+0x015,0x0000f405,
+0x015,0x0004f405,
+0x015,0x0008f405,
+0x015,0x000cf405,
+0x016,0x000e0330,
+0x016,0x000a0330,
+0x016,0x00060330,
+0x016,0x00020330,
+0x000,0x00010159,
+0x018,0x0000f401,
+0x0fe,0x00000000,
+0x0fe,0x00000000,
+0x01f,0x00080003,
+0x0fe,0x00000000,
+0x0fe,0x00000000,
+0x01e,0x00044457,
+0x01f,0x00080000,
+0x000,0x00030159,
+};
+
+u32 Rtl8192CURadioB_GM_Array[RadioB_GM_ArrayLength] = {
+0x0, };
+
+// MAC reg V14 - 2011-11-23
+u32 Rtl8192CUMAC_2T_Array[MAC_2T_ArrayLength] = {
+0x420,0x00000080,
+0x423,0x00000000,
+0x430,0x00000000,
+0x431,0x00000000,
+0x432,0x00000000,
+0x433,0x00000001,
+0x434,0x00000004,
+0x435,0x00000005,
+0x436,0x00000006,
+0x437,0x00000007,
+0x438,0x00000000,
+0x439,0x00000000,
+0x43a,0x00000000,
+0x43b,0x00000001,
+0x43c,0x00000004,
+0x43d,0x00000005,
+0x43e,0x00000006,
+0x43f,0x00000007,
+0x440,0x0000005d,
+0x441,0x00000001,
+0x442,0x00000000,
+0x444,0x00000015,
+0x445,0x000000f0,
+0x446,0x0000000f,
+0x447,0x00000000,
+0x458,0x00000041,
+0x459,0x000000a8,
+0x45a,0x00000072,
+0x45b,0x000000b9,
+0x460,0x00000066,
+0x461,0x00000066,
+0x462,0x00000008,
+0x463,0x00000003,
+0x4c8,0x000000ff,
+0x4c9,0x00000008,
+0x4cc,0x000000ff,
+0x4cd,0x000000ff,
+0x4ce,0x00000001,
+0x500,0x00000026,
+0x501,0x000000a2,
+0x502,0x0000002f,
+0x503,0x00000000,
+0x504,0x00000028,
+0x505,0x000000a3,
+0x506,0x0000005e,
+0x507,0x00000000,
+0x508,0x0000002b,
+0x509,0x000000a4,
+0x50a,0x0000005e,
+0x50b,0x00000000,
+0x50c,0x0000004f,
+0x50d,0x000000a4,
+0x50e,0x00000000,
+0x50f,0x00000000,
+0x512,0x0000001c,
+0x514,0x0000000a,
+0x515,0x00000010,
+0x516,0x0000000a,
+0x517,0x00000010,
+0x51a,0x00000016,
+0x524,0x0000000f,
+0x525,0x0000004f,
+0x546,0x00000040,
+0x547,0x00000000,
+0x550,0x00000010,
+0x551,0x00000010,
+0x559,0x00000002,
+0x55a,0x00000002,
+0x55d,0x000000ff,
+0x605,0x00000030,
+0x608,0x0000000e,
+0x609,0x0000002a,
+0x652,0x00000020,
+0x652,0x00000020,
+0x63c,0x00000008,
+0x63d,0x00000008,
+0x63e,0x0000000c,
+0x63f,0x0000000c,
+0x66e,0x00000005,
+0x700,0x00000021,
+0x701,0x00000043,
+0x702,0x00000065,
+0x703,0x00000087,
+0x708,0x00000021,
+0x709,0x00000043,
+0x70a,0x00000065,
+0x70b,0x00000087,
+};
+
+u32 Rtl8192CUMACPHY_Array_PG[MACPHY_Array_PGLength] = {
+0x0, };
+
+u32 Rtl8192CUAGCTAB_2TArray[AGCTAB_2TArrayLength] = {
+0xc78,0x7b000001,
+0xc78,0x7b010001,
+0xc78,0x7b020001,
+0xc78,0x7b030001,
+0xc78,0x7b040001,
+0xc78,0x7b050001,
+0xc78,0x7a060001,
+0xc78,0x79070001,
+0xc78,0x78080001,
+0xc78,0x77090001,
+0xc78,0x760a0001,
+0xc78,0x750b0001,
+0xc78,0x740c0001,
+0xc78,0x730d0001,
+0xc78,0x720e0001,
+0xc78,0x710f0001,
+0xc78,0x70100001,
+0xc78,0x6f110001,
+0xc78,0x6e120001,
+0xc78,0x6d130001,
+0xc78,0x6c140001,
+0xc78,0x6b150001,
+0xc78,0x6a160001,
+0xc78,0x69170001,
+0xc78,0x68180001,
+0xc78,0x67190001,
+0xc78,0x661a0001,
+0xc78,0x651b0001,
+0xc78,0x641c0001,
+0xc78,0x631d0001,
+0xc78,0x621e0001,
+0xc78,0x611f0001,
+0xc78,0x60200001,
+0xc78,0x49210001,
+0xc78,0x48220001,
+0xc78,0x47230001,
+0xc78,0x46240001,
+0xc78,0x45250001,
+0xc78,0x44260001,
+0xc78,0x43270001,
+0xc78,0x42280001,
+0xc78,0x41290001,
+0xc78,0x402a0001,
+0xc78,0x262b0001,
+0xc78,0x252c0001,
+0xc78,0x242d0001,
+0xc78,0x232e0001,
+0xc78,0x222f0001,
+0xc78,0x21300001,
+0xc78,0x20310001,
+0xc78,0x06320001,
+0xc78,0x05330001,
+0xc78,0x04340001,
+0xc78,0x03350001,
+0xc78,0x02360001,
+0xc78,0x01370001,
+0xc78,0x00380001,
+0xc78,0x00390001,
+0xc78,0x003a0001,
+0xc78,0x003b0001,
+0xc78,0x003c0001,
+0xc78,0x003d0001,
+0xc78,0x003e0001,
+0xc78,0x003f0001,
+0xc78,0x7b400001,
+0xc78,0x7b410001,
+0xc78,0x7b420001,
+0xc78,0x7b430001,
+0xc78,0x7b440001,
+0xc78,0x7b450001,
+0xc78,0x7a460001,
+0xc78,0x79470001,
+0xc78,0x78480001,
+0xc78,0x77490001,
+0xc78,0x764a0001,
+0xc78,0x754b0001,
+0xc78,0x744c0001,
+0xc78,0x734d0001,
+0xc78,0x724e0001,
+0xc78,0x714f0001,
+0xc78,0x70500001,
+0xc78,0x6f510001,
+0xc78,0x6e520001,
+0xc78,0x6d530001,
+0xc78,0x6c540001,
+0xc78,0x6b550001,
+0xc78,0x6a560001,
+0xc78,0x69570001,
+0xc78,0x68580001,
+0xc78,0x67590001,
+0xc78,0x665a0001,
+0xc78,0x655b0001,
+0xc78,0x645c0001,
+0xc78,0x635d0001,
+0xc78,0x625e0001,
+0xc78,0x615f0001,
+0xc78,0x60600001,
+0xc78,0x49610001,
+0xc78,0x48620001,
+0xc78,0x47630001,
+0xc78,0x46640001,
+0xc78,0x45650001,
+0xc78,0x44660001,
+0xc78,0x43670001,
+0xc78,0x42680001,
+0xc78,0x41690001,
+0xc78,0x406a0001,
+0xc78,0x266b0001,
+0xc78,0x256c0001,
+0xc78,0x246d0001,
+0xc78,0x236e0001,
+0xc78,0x226f0001,
+0xc78,0x21700001,
+0xc78,0x20710001,
+0xc78,0x06720001,
+0xc78,0x05730001,
+0xc78,0x04740001,
+0xc78,0x03750001,
+0xc78,0x02760001,
+0xc78,0x01770001,
+0xc78,0x00780001,
+0xc78,0x00790001,
+0xc78,0x007a0001,
+0xc78,0x007b0001,
+0xc78,0x007c0001,
+0xc78,0x007d0001,
+0xc78,0x007e0001,
+0xc78,0x007f0001,
+0xc78,0x3800001e,
+0xc78,0x3801001e,
+0xc78,0x3802001e,
+0xc78,0x3803001e,
+0xc78,0x3804001e,
+0xc78,0x3805001e,
+0xc78,0x3806001e,
+0xc78,0x3807001e,
+0xc78,0x3808001e,
+0xc78,0x3c09001e,
+0xc78,0x3e0a001e,
+0xc78,0x400b001e,
+0xc78,0x440c001e,
+0xc78,0x480d001e,
+0xc78,0x4c0e001e,
+0xc78,0x500f001e,
+0xc78,0x5210001e,
+0xc78,0x5611001e,
+0xc78,0x5a12001e,
+0xc78,0x5e13001e,
+0xc78,0x6014001e,
+0xc78,0x6015001e,
+0xc78,0x6016001e,
+0xc78,0x6217001e,
+0xc78,0x6218001e,
+0xc78,0x6219001e,
+0xc78,0x621a001e,
+0xc78,0x621b001e,
+0xc78,0x621c001e,
+0xc78,0x621d001e,
+0xc78,0x621e001e,
+0xc78,0x621f001e,
+};
+
+u32 Rtl8192CUAGCTAB_1TArray[AGCTAB_1TArrayLength] = {
+0xc78,0x7b000001,
+0xc78,0x7b010001,
+0xc78,0x7b020001,
+0xc78,0x7b030001,
+0xc78,0x7b040001,
+0xc78,0x7b050001,
+0xc78,0x7a060001,
+0xc78,0x79070001,
+0xc78,0x78080001,
+0xc78,0x77090001,
+0xc78,0x760a0001,
+0xc78,0x750b0001,
+0xc78,0x740c0001,
+0xc78,0x730d0001,
+0xc78,0x720e0001,
+0xc78,0x710f0001,
+0xc78,0x70100001,
+0xc78,0x6f110001,
+0xc78,0x6e120001,
+0xc78,0x6d130001,
+0xc78,0x6c140001,
+0xc78,0x6b150001,
+0xc78,0x6a160001,
+0xc78,0x69170001,
+0xc78,0x68180001,
+0xc78,0x67190001,
+0xc78,0x661a0001,
+0xc78,0x651b0001,
+0xc78,0x641c0001,
+0xc78,0x631d0001,
+0xc78,0x621e0001,
+0xc78,0x611f0001,
+0xc78,0x60200001,
+0xc78,0x49210001,
+0xc78,0x48220001,
+0xc78,0x47230001,
+0xc78,0x46240001,
+0xc78,0x45250001,
+0xc78,0x44260001,
+0xc78,0x43270001,
+0xc78,0x42280001,
+0xc78,0x41290001,
+0xc78,0x402a0001,
+0xc78,0x262b0001,
+0xc78,0x252c0001,
+0xc78,0x242d0001,
+0xc78,0x232e0001,
+0xc78,0x222f0001,
+0xc78,0x21300001,
+0xc78,0x20310001,
+0xc78,0x06320001,
+0xc78,0x05330001,
+0xc78,0x04340001,
+0xc78,0x03350001,
+0xc78,0x02360001,
+0xc78,0x01370001,
+0xc78,0x00380001,
+0xc78,0x00390001,
+0xc78,0x003a0001,
+0xc78,0x003b0001,
+0xc78,0x003c0001,
+0xc78,0x003d0001,
+0xc78,0x003e0001,
+0xc78,0x003f0001,
+0xc78,0x7b400001,
+0xc78,0x7b410001,
+0xc78,0x7b420001,
+0xc78,0x7b430001,
+0xc78,0x7b440001,
+0xc78,0x7b450001,
+0xc78,0x7a460001,
+0xc78,0x79470001,
+0xc78,0x78480001,
+0xc78,0x77490001,
+0xc78,0x764a0001,
+0xc78,0x754b0001,
+0xc78,0x744c0001,
+0xc78,0x734d0001,
+0xc78,0x724e0001,
+0xc78,0x714f0001,
+0xc78,0x70500001,
+0xc78,0x6f510001,
+0xc78,0x6e520001,
+0xc78,0x6d530001,
+0xc78,0x6c540001,
+0xc78,0x6b550001,
+0xc78,0x6a560001,
+0xc78,0x69570001,
+0xc78,0x68580001,
+0xc78,0x67590001,
+0xc78,0x665a0001,
+0xc78,0x655b0001,
+0xc78,0x645c0001,
+0xc78,0x635d0001,
+0xc78,0x625e0001,
+0xc78,0x615f0001,
+0xc78,0x60600001,
+0xc78,0x49610001,
+0xc78,0x48620001,
+0xc78,0x47630001,
+0xc78,0x46640001,
+0xc78,0x45650001,
+0xc78,0x44660001,
+0xc78,0x43670001,
+0xc78,0x42680001,
+0xc78,0x41690001,
+0xc78,0x406a0001,
+0xc78,0x266b0001,
+0xc78,0x256c0001,
+0xc78,0x246d0001,
+0xc78,0x236e0001,
+0xc78,0x226f0001,
+0xc78,0x21700001,
+0xc78,0x20710001,
+0xc78,0x06720001,
+0xc78,0x05730001,
+0xc78,0x04740001,
+0xc78,0x03750001,
+0xc78,0x02760001,
+0xc78,0x01770001,
+0xc78,0x00780001,
+0xc78,0x00790001,
+0xc78,0x007a0001,
+0xc78,0x007b0001,
+0xc78,0x007c0001,
+0xc78,0x007d0001,
+0xc78,0x007e0001,
+0xc78,0x007f0001,
+0xc78,0x3800001e,
+0xc78,0x3801001e,
+0xc78,0x3802001e,
+0xc78,0x3803001e,
+0xc78,0x3804001e,
+0xc78,0x3805001e,
+0xc78,0x3806001e,
+0xc78,0x3807001e,
+0xc78,0x3808001e,
+0xc78,0x3c09001e,
+0xc78,0x3e0a001e,
+0xc78,0x400b001e,
+0xc78,0x440c001e,
+0xc78,0x480d001e,
+0xc78,0x4c0e001e,
+0xc78,0x500f001e,
+0xc78,0x5210001e,
+0xc78,0x5611001e,
+0xc78,0x5a12001e,
+0xc78,0x5e13001e,
+0xc78,0x6014001e,
+0xc78,0x6015001e,
+0xc78,0x6016001e,
+0xc78,0x6217001e,
+0xc78,0x6218001e,
+0xc78,0x6219001e,
+0xc78,0x621a001e,
+0xc78,0x621b001e,
+0xc78,0x621c001e,
+0xc78,0x621d001e,
+0xc78,0x621e001e,
+0xc78,0x621f001e,
+};
+
+u32 Rtl8192CUAGCTAB_1T_HPArray[AGCTAB_1T_HPArrayLength] = {
+0xc78,0x7b000001,
+0xc78,0x7b010001,
+0xc78,0x7b020001,
+0xc78,0x7b030001,
+0xc78,0x7b040001,
+0xc78,0x7b050001,
+0xc78,0x7b060001,
+0xc78,0x7b070001,
+0xc78,0x7b080001,
+0xc78,0x7a090001,
+0xc78,0x790a0001,
+0xc78,0x780b0001,
+0xc78,0x770c0001,
+0xc78,0x760d0001,
+0xc78,0x750e0001,
+0xc78,0x740f0001,
+0xc78,0x73100001,
+0xc78,0x72110001,
+0xc78,0x71120001,
+0xc78,0x70130001,
+0xc78,0x6f140001,
+0xc78,0x6e150001,
+0xc78,0x6d160001,
+0xc78,0x6c170001,
+0xc78,0x6b180001,
+0xc78,0x6a190001,
+0xc78,0x691a0001,
+0xc78,0x681b0001,
+0xc78,0x671c0001,
+0xc78,0x661d0001,
+0xc78,0x651e0001,
+0xc78,0x641f0001,
+0xc78,0x63200001,
+0xc78,0x62210001,
+0xc78,0x61220001,
+0xc78,0x60230001,
+0xc78,0x46240001,
+0xc78,0x45250001,
+0xc78,0x44260001,
+0xc78,0x43270001,
+0xc78,0x42280001,
+0xc78,0x41290001,
+0xc78,0x402a0001,
+0xc78,0x262b0001,
+0xc78,0x252c0001,
+0xc78,0x242d0001,
+0xc78,0x232e0001,
+0xc78,0x222f0001,
+0xc78,0x21300001,
+0xc78,0x20310001,
+0xc78,0x06320001,
+0xc78,0x05330001,
+0xc78,0x04340001,
+0xc78,0x03350001,
+0xc78,0x02360001,
+0xc78,0x01370001,
+0xc78,0x00380001,
+0xc78,0x00390001,
+0xc78,0x003a0001,
+0xc78,0x003b0001,
+0xc78,0x003c0001,
+0xc78,0x003d0001,
+0xc78,0x003e0001,
+0xc78,0x003f0001,
+0xc78,0x7b400001,
+0xc78,0x7b410001,
+0xc78,0x7b420001,
+0xc78,0x7b430001,
+0xc78,0x7b440001,
+0xc78,0x7b450001,
+0xc78,0x7b460001,
+0xc78,0x7b470001,
+0xc78,0x7b480001,
+0xc78,0x7a490001,
+0xc78,0x794a0001,
+0xc78,0x784b0001,
+0xc78,0x774c0001,
+0xc78,0x764d0001,
+0xc78,0x754e0001,
+0xc78,0x744f0001,
+0xc78,0x73500001,
+0xc78,0x72510001,
+0xc78,0x71520001,
+0xc78,0x70530001,
+0xc78,0x6f540001,
+0xc78,0x6e550001,
+0xc78,0x6d560001,
+0xc78,0x6c570001,
+0xc78,0x6b580001,
+0xc78,0x6a590001,
+0xc78,0x695a0001,
+0xc78,0x685b0001,
+0xc78,0x675c0001,
+0xc78,0x665d0001,
+0xc78,0x655e0001,
+0xc78,0x645f0001,
+0xc78,0x63600001,
+0xc78,0x62610001,
+0xc78,0x61620001,
+0xc78,0x60630001,
+0xc78,0x46640001,
+0xc78,0x45650001,
+0xc78,0x44660001,
+0xc78,0x43670001,
+0xc78,0x42680001,
+0xc78,0x41690001,
+0xc78,0x406a0001,
+0xc78,0x266b0001,
+0xc78,0x256c0001,
+0xc78,0x246d0001,
+0xc78,0x236e0001,
+0xc78,0x226f0001,
+0xc78,0x21700001,
+0xc78,0x20710001,
+0xc78,0x06720001,
+0xc78,0x05730001,
+0xc78,0x04740001,
+0xc78,0x03750001,
+0xc78,0x02760001,
+0xc78,0x01770001,
+0xc78,0x00780001,
+0xc78,0x00790001,
+0xc78,0x007a0001,
+0xc78,0x007b0001,
+0xc78,0x007c0001,
+0xc78,0x007d0001,
+0xc78,0x007e0001,
+0xc78,0x007f0001,
+0xc78,0x3800001e,
+0xc78,0x3801001e,
+0xc78,0x3802001e,
+0xc78,0x3803001e,
+0xc78,0x3804001e,
+0xc78,0x3805001e,
+0xc78,0x3806001e,
+0xc78,0x3807001e,
+0xc78,0x3808001e,
+0xc78,0x3c09001e,
+0xc78,0x3e0a001e,
+0xc78,0x400b001e,
+0xc78,0x440c001e,
+0xc78,0x480d001e,
+0xc78,0x4c0e001e,
+0xc78,0x500f001e,
+0xc78,0x5210001e,
+0xc78,0x5611001e,
+0xc78,0x5a12001e,
+0xc78,0x5e13001e,
+0xc78,0x6014001e,
+0xc78,0x6015001e,
+0xc78,0x6016001e,
+0xc78,0x6217001e,
+0xc78,0x6218001e,
+0xc78,0x6219001e,
+0xc78,0x621a001e,
+0xc78,0x621b001e,
+0xc78,0x621c001e,
+0xc78,0x621d001e,
+0xc78,0x621e001e,
+0xc78,0x621f001e,
+};
diff --git a/drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/usb/Hal8192CUHWImg_wowlan.c b/drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/usb/Hal8192CUHWImg_wowlan.c
new file mode 100644 (file)
index 0000000..5554813
--- /dev/null
@@ -0,0 +1,2557 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+/*Created on  2011/11/ 8, 14:15*/
+
+#include <basic_types.h>
+#include "Hal8192CUHWImg_wowlan.h"
+
+
+u8 Rtl8192CUFwTSMCWWImgArray[TSMCWWImgArrayLength] = {
+0xc1,0x88,0x02,0x00,0x51,0x00,0x00,0x00,0x03,0x23,0x16,0x43,0x72,0x34,0x00,0x00,
+0x58,0x92,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x02,0x43,0x9d,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x02,0x57,0xcb,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x02,0x5c,0xb6,0x00,0x00,0x00,0x00,0x00,0x02,0x5d,0x99,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0xbb,0x01,0x0c,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe0,0x22,0x50,
+0x06,0xe9,0x25,0x82,0xf8,0xe6,0x22,0xbb,0xfe,0x06,0xe9,0x25,0x82,0xf8,0xe2,0x22,
+0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe4,0x93,0x22,0xbb,0x01,0x06,
+0x89,0x82,0x8a,0x83,0xf0,0x22,0x50,0x02,0xf7,0x22,0xbb,0xfe,0x01,0xf3,0x22,0xf8,
+0xbb,0x01,0x0d,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe8,0xf0,0x22,
+0x50,0x06,0xe9,0x25,0x82,0xc8,0xf6,0x22,0xbb,0xfe,0x05,0xe9,0x25,0x82,0xc8,0xf2,
+0x22,0xc5,0xf0,0xf8,0xa3,0xe0,0x28,0xf0,0xc5,0xf0,0xf8,0xe5,0x82,0x15,0x82,0x70,
+0x02,0x15,0x83,0xe0,0x38,0xf0,0x22,0xbb,0x01,0x10,0xe5,0x82,0x29,0xf5,0x82,0xe5,
+0x83,0x3a,0xf5,0x83,0xe0,0xf5,0xf0,0xa3,0xe0,0x22,0x50,0x09,0xe9,0x25,0x82,0xf8,
+0x86,0xf0,0x08,0xe6,0x22,0xbb,0xfe,0x0a,0xe9,0x25,0x82,0xf8,0xe2,0xf5,0xf0,0x08,
+0xe2,0x22,0xe5,0x83,0x2a,0xf5,0x83,0xe9,0x93,0xf5,0xf0,0xa3,0xe9,0x93,0x22,0xf8,
+0xbb,0x01,0x11,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe8,0xf0,0xe5,
+0xf0,0xa3,0xf0,0x22,0x50,0x09,0xe9,0x25,0x82,0xc8,0xf6,0x08,0xa6,0xf0,0x22,0xbb,
+0xfe,0x09,0xe9,0x25,0x82,0xc8,0xf2,0xe5,0xf0,0x08,0xf2,0x22,0xef,0x4b,0xff,0xee,
+0x4a,0xfe,0xed,0x49,0xfd,0xec,0x48,0xfc,0x22,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,
+0xfe,0xa3,0xe0,0xff,0x22,0xa4,0x25,0x82,0xf5,0x82,0xe5,0xf0,0x35,0x83,0xf5,0x83,
+0x22,0xe0,0xfb,0xa3,0xe0,0xfa,0xa3,0xe0,0xf9,0x22,0xf8,0xe0,0xfb,0xa3,0xa3,0xe0,
+0xf9,0x25,0xf0,0xf0,0xe5,0x82,0x15,0x82,0x70,0x02,0x15,0x83,0xe0,0xfa,0x38,0xf0,
+0x22,0xeb,0xf0,0xa3,0xea,0xf0,0xa3,0xe9,0xf0,0x22,0xd0,0x83,0xd0,0x82,0xf8,0xe4,
+0x93,0x70,0x12,0x74,0x01,0x93,0x70,0x0d,0xa3,0xa3,0x93,0xf8,0x74,0x01,0x93,0xf5,
+0x82,0x88,0x83,0xe4,0x73,0x74,0x02,0x93,0x68,0x60,0xef,0xa3,0xa3,0xa3,0x80,0xdf,
+0xd0,0x83,0xd0,0x82,0xf8,0xe4,0x93,0x70,0x12,0x74,0x01,0x93,0x70,0x0d,0xa3,0xa3,
+0x93,0xf8,0x74,0x01,0x93,0xf5,0x82,0x88,0x83,0xe4,0x73,0x74,0x02,0x93,0xb5,0xf0,
+0x06,0x74,0x03,0x93,0x68,0x60,0xe9,0xa3,0xa3,0xa3,0xa3,0x80,0xd8,0x02,0x43,0xdb,
+0x02,0x50,0x2a,0xe4,0x93,0xa3,0xf8,0xe4,0x93,0xa3,0x40,0x03,0xf6,0x80,0x01,0xf2,
+0x08,0xdf,0xf4,0x80,0x29,0xe4,0x93,0xa3,0xf8,0x54,0x07,0x24,0x0c,0xc8,0xc3,0x33,
+0xc4,0x54,0x0f,0x44,0x20,0xc8,0x83,0x40,0x04,0xf4,0x56,0x80,0x01,0x46,0xf6,0xdf,
+0xe4,0x80,0x0b,0x01,0x02,0x04,0x08,0x10,0x20,0x40,0x80,0x90,0x44,0x20,0xe4,0x7e,
+0x01,0x93,0x60,0xbc,0xa3,0xff,0x54,0x3f,0x30,0xe5,0x09,0x54,0x1f,0xfe,0xe4,0x93,
+0xa3,0x60,0x01,0x0e,0xcf,0x54,0xc0,0x25,0xe0,0x60,0xa8,0x40,0xb8,0xe4,0x93,0xa3,
+0xfa,0xe4,0x93,0xa3,0xf8,0xe4,0x93,0xa3,0xc8,0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,
+0xf0,0xa3,0xc8,0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,0xdf,0xe9,0xde,0xe7,0x80,0xbe,
+0x41,0x91,0x40,0x00,0x41,0x91,0x9c,0x00,0x41,0x91,0x23,0x80,0x41,0x91,0x24,0x80,
+0x41,0x91,0x9e,0x00,0x41,0x91,0x52,0x00,0x41,0x91,0x93,0x00,0x41,0x91,0x91,0x00,
+0x41,0x91,0x90,0x00,0x41,0x91,0x92,0x00,0x00,0xf0,0x90,0x91,0x30,0xe0,0x90,0x91,
+0x67,0xf0,0xe4,0xfb,0xfd,0x7f,0x54,0x7e,0x01,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
+0x90,0x91,0x65,0xeb,0xf0,0xa3,0xe0,0xfb,0xa3,0xe0,0xf5,0x44,0xe4,0xf5,0x45,0x12,
+0x35,0xab,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x01,0x5f,0xe4,0xf0,0x90,0x01,0x3c,0x74,
+0x08,0xf0,0xe4,0x90,0x91,0x66,0xf0,0x90,0x91,0x2d,0xe0,0x90,0x91,0x67,0xf0,0xe4,
+0xfb,0xfd,0x7f,0x5c,0x7e,0x01,0x91,0x59,0x90,0x01,0x5f,0x74,0x05,0xf0,0x90,0x06,
+0x92,0x74,0x02,0xf0,0x90,0x91,0x36,0x14,0xf0,0xe5,0x6e,0x54,0x0f,0xc3,0x94,0x0c,
+0x50,0x02,0xf1,0x23,0x22,0x90,0x02,0x84,0xef,0xf0,0xa3,0xee,0xf0,0xa3,0x74,0x05,
+0xf0,0x22,0x7d,0x01,0xaf,0x6f,0xe1,0x27,0xf1,0xe6,0xbf,0x01,0x10,0x90,0x91,0x42,
+0xe0,0xff,0xe4,0xfd,0x12,0x48,0x22,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0x8f,0x82,
+0x8e,0x83,0xa3,0xa3,0xa3,0xe4,0xf0,0x22,0xe4,0xf5,0x72,0x7f,0x60,0x7e,0x01,0x80,
+0xed,0x7f,0x00,0x22,0x90,0x91,0x53,0xe0,0x54,0xfe,0xf0,0x02,0x50,0xd6,0x22,0xe4,
+0xf5,0x75,0x22,0x02,0x5f,0xe2,0x02,0x5f,0xe9,0xef,0x8e,0xf0,0x71,0x70,0x45,0x26,
+0x00,0x40,0x45,0x4e,0x00,0x80,0x45,0x79,0x01,0x00,0x45,0x8d,0x02,0x00,0x45,0xa5,
+0x04,0x00,0x00,0x00,0x45,0xc2,0xed,0x54,0x3f,0x70,0x04,0xfe,0xff,0x80,0x04,0x7e,
+0x00,0x7f,0x40,0xef,0x2d,0xff,0xee,0x3c,0xfe,0xef,0x78,0x06,0xce,0xc3,0x13,0xce,
+0x13,0xd8,0xf9,0x78,0x06,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0x80,0x26,0xed,0x54,
+0x7f,0x70,0x04,0xfe,0xff,0x80,0x04,0x7e,0x00,0x7f,0x80,0xef,0x2d,0xff,0xee,0x3c,
+0xfe,0xef,0x78,0x07,0xce,0xc3,0x13,0xce,0x13,0xd8,0xf9,0x78,0x07,0xc3,0x33,0xce,
+0x33,0xce,0xd8,0xf9,0xfd,0xac,0x06,0x80,0x49,0xed,0x70,0x04,0xfe,0xff,0x80,0x04,
+0x7e,0x01,0x7f,0x00,0xef,0x2d,0xee,0x3c,0x7d,0x00,0xfc,0x80,0x35,0xec,0x54,0x01,
+0x4d,0x70,0x04,0xfe,0xff,0x80,0x04,0x7e,0x02,0x7f,0x00,0xef,0x2d,0xee,0x3c,0xc3,
+0x13,0x7d,0x00,0x80,0x1a,0xec,0x54,0x03,0x4d,0x70,0x04,0xfe,0xff,0x80,0x04,0x7e,
+0x04,0x7f,0x00,0xef,0x2d,0xee,0x3c,0x13,0x13,0x54,0x3f,0x7d,0x00,0x25,0xe0,0x25,
+0xe0,0xfc,0xae,0x04,0xaf,0x05,0x22,0x90,0x91,0x09,0x12,0x2a,0x8b,0x00,0x00,0x00,
+0x00,0x90,0x06,0xa9,0xe0,0x90,0x91,0x08,0xf0,0xe0,0x54,0xc0,0x70,0x0a,0x53,0x71,
+0xfe,0x53,0x71,0xfd,0x91,0xc2,0x80,0x47,0x90,0x91,0x26,0xe0,0x60,0x41,0x90,0x91,
+0x38,0xe0,0x70,0x3b,0x90,0x91,0x38,0x74,0x01,0xf0,0x7f,0x00,0x7e,0x08,0x12,0x27,
+0xde,0x90,0x91,0x09,0x12,0x2a,0x7f,0x90,0x91,0x09,0x71,0x09,0xec,0x44,0x02,0xfc,
+0x90,0x91,0x09,0x12,0x2a,0x7f,0x90,0x91,0x09,0x71,0x09,0x90,0x80,0x85,0x12,0x2a,
+0x7f,0x7f,0x00,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x02,0x86,0xe0,0x54,0xfb,0xf0,0x90,
+0x91,0x08,0xe0,0x30,0xe6,0x13,0x43,0x71,0x01,0x90,0x91,0x3b,0xe0,0x64,0x02,0x60,
+0x04,0x91,0xc8,0x80,0x07,0x91,0x77,0x80,0x03,0x53,0x71,0xfe,0x90,0x91,0x08,0xe0,
+0x30,0xe7,0x16,0x43,0x71,0x02,0xe4,0x90,0x91,0x66,0x91,0x49,0x90,0x01,0x57,0x74,
+0x05,0xf0,0x90,0x91,0x3c,0x74,0x01,0xf0,0x22,0x53,0x71,0xfd,0x22,0xd3,0x10,0xaf,
+0x01,0xc3,0xc0,0xd0,0x8b,0x60,0x8a,0x61,0x89,0x62,0x90,0x91,0x68,0x71,0x41,0xab,
+0x63,0xaa,0x64,0xa9,0x65,0x90,0x91,0x6b,0x71,0x41,0xaf,0x66,0x15,0x66,0xef,0x60,
+0x1b,0x90,0x91,0x6b,0xe4,0x75,0xf0,0x01,0x71,0x2a,0x12,0x29,0xd9,0xff,0x90,0x91,
+0x68,0xe4,0x75,0xf0,0x01,0x71,0x2a,0xef,0x51,0x4d,0x80,0xde,0xab,0x60,0xaa,0x61,
+0xa9,0x62,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x91,
+0x6e,0x71,0x41,0x90,0x91,0x9e,0xe0,0xff,0x04,0xf0,0x90,0x00,0x01,0xef,0x51,0x5f,
+0x7f,0xaf,0x7e,0x01,0x12,0x64,0x1c,0xef,0x60,0x44,0x90,0x91,0x6e,0x71,0x21,0x8b,
+0x63,0x8a,0x64,0x89,0x65,0x75,0x66,0x02,0x7b,0x01,0x7a,0x01,0x79,0xa0,0xd1,0x6d,
+0x90,0x91,0x71,0x71,0x21,0x8b,0x63,0x8a,0x64,0x89,0x65,0x90,0x91,0x6e,0x71,0x21,
+0x12,0x29,0xd9,0xff,0xc4,0x54,0x0f,0xf5,0x66,0x7b,0x01,0x7a,0x01,0x79,0xa2,0xd1,
+0x6d,0x90,0x01,0xaf,0x74,0xff,0xf0,0x90,0x01,0xcb,0xe0,0x64,0x80,0xf0,0xd0,0xd0,
+0x92,0xaf,0x22,0x7d,0x01,0x7f,0x0c,0x90,0x91,0x95,0xed,0xf0,0x90,0x91,0x94,0xef,
+0xf0,0x54,0x0f,0xff,0xe5,0x6e,0x54,0x0f,0x6f,0x60,0x76,0x90,0x91,0x94,0xe0,0x30,
+0xe2,0x30,0xe5,0x6e,0x20,0xe2,0x05,0x7f,0x01,0x12,0x62,0x65,0xe5,0x6e,0x30,0xe3,
+0x0f,0x90,0x91,0x94,0xe0,0x20,0xe3,0x08,0x12,0x5a,0x3f,0xef,0x60,0x53,0x80,0x52,
+0xe5,0x6e,0x20,0xe3,0x4c,0x90,0x91,0x94,0xe0,0x30,0xe3,0x45,0xa3,0xe0,0xff,0x02,
+0x62,0x4a,0xe5,0x6e,0x54,0x0f,0xff,0xbf,0x0c,0x0f,0x90,0x91,0x94,0xe0,0x20,0xe3,
+0x08,0x12,0x5a,0x3f,0xef,0x60,0x2a,0xf1,0xb2,0xe5,0x6e,0x54,0x0f,0xff,0xbf,0x04,
+0x10,0x90,0x91,0x94,0xe0,0x20,0xe2,0x09,0x12,0x5b,0xb3,0xef,0x60,0x13,0x12,0x48,
+0xce,0xe5,0x6e,0x54,0x0f,0xff,0xbf,0x02,0x08,0x91,0xf1,0xef,0x60,0x03,0x12,0x63,
+0x56,0x22,0x90,0x06,0x04,0xe0,0x44,0x40,0xf0,0xe5,0x6d,0xb4,0x01,0x04,0x7f,0x01,
+0xf1,0xc9,0x53,0x6e,0xf0,0x43,0x6e,0x04,0x22,0x8f,0x67,0xf1,0xe6,0xbf,0x01,0x15,
+0x90,0x91,0x43,0x12,0x48,0x1e,0xad,0x07,0xac,0x06,0xaf,0x67,0x12,0x61,0xa3,0x90,
+0x04,0x1f,0x74,0x20,0xf0,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x01,0xc4,
+0x74,0xe6,0xf0,0x74,0x47,0xa3,0xf0,0x90,0x04,0x1d,0xe0,0x60,0x1a,0x90,0x05,0x22,
+0xe0,0x54,0x90,0x60,0x07,0x90,0x01,0xc6,0xe0,0x44,0x40,0xf0,0x90,0x01,0xc7,0xe0,
+0x30,0xe1,0xe4,0x7f,0x00,0x80,0x02,0x7f,0x01,0xd0,0xd0,0x92,0xaf,0x22,0xe0,0xff,
+0x7d,0x01,0x90,0x91,0x74,0xef,0xf0,0xa3,0xed,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xe5,
+0x70,0x60,0x04,0xe4,0xff,0x11,0xb3,0x90,0x91,0x74,0xe0,0x30,0xe0,0x09,0x90,0x91,
+0x76,0xe4,0xf0,0xa3,0x74,0x80,0xf0,0x90,0x91,0x74,0xe0,0xff,0xc3,0x13,0x90,0xfd,
+0x10,0xf0,0x90,0x04,0x25,0xef,0xf0,0x90,0x91,0x75,0xe0,0x60,0x1f,0xa3,0xa3,0xe0,
+0xff,0x24,0x0f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x80,0xf0,0x74,0x10,
+0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x80,0xf0,0x90,0x91,0x76,0xa3,
+0xe0,0xff,0xfd,0x24,0x08,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe4,0xf0,0x74,0x09,
+0x2d,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xf0,0xf0,0x74,0x21,0x2f,0xf5,
+0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xf7,0xf0,0x90,0x91,0x76,0xe0,0xfe,0xa3,
+0xe0,0xff,0x22,0xef,0x60,0x0b,0x90,0x91,0x51,0xe0,0xb4,0x01,0x10,0xe4,0xff,0x80,
+0x09,0x90,0x91,0x51,0xe0,0xb4,0x01,0x05,0x7f,0x01,0x12,0x68,0x87,0x22,0x90,0x01,
+0x37,0x74,0x02,0xf0,0x90,0x05,0x22,0x74,0xff,0xf0,0x12,0x68,0x46,0xef,0x70,0x06,
+0x90,0x01,0xc8,0x74,0xfd,0xf0,0x7d,0x02,0x7f,0x03,0x12,0x36,0xe6,0xe5,0x70,0x60,
+0x04,0x7f,0x01,0x11,0xb3,0x51,0x0c,0x53,0x6e,0xf0,0x43,0x6e,0x02,0x22,0xef,0x64,
+0x01,0x70,0x42,0x7d,0x78,0x7f,0x02,0x12,0x36,0x75,0x7d,0x02,0x7f,0x03,0x12,0x36,
+0x75,0x90,0x01,0x36,0x74,0x03,0xf0,0xfd,0x7f,0x02,0x12,0x36,0xe6,0x7d,0x10,0x7f,
+0x03,0x12,0x36,0x92,0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x12,
+0x47,0x23,0xe4,0xff,0x11,0xb3,0x90,0x06,0x04,0xe0,0x54,0x7f,0xf0,0x90,0x06,0x0a,
+0xe0,0x54,0xf8,0xf0,0x22,0x90,0x01,0x36,0x74,0x7b,0xf0,0xa3,0x74,0x02,0xf0,0x7d,
+0x7b,0xff,0x12,0x36,0xe6,0x7d,0x02,0x7f,0x03,0x12,0x36,0xe6,0x7d,0x10,0x7f,0x03,
+0x12,0x36,0x92,0x90,0x06,0x04,0xe0,0x44,0x80,0xf0,0x90,0x06,0x0a,0xe0,0x44,0x07,
+0xf0,0x12,0x64,0x11,0xe5,0x6d,0x20,0xe0,0x05,0xe4,0x90,0x91,0x29,0xf0,0x22,0x8b,
+0x0e,0x8a,0x0f,0x89,0x10,0x12,0x62,0x3e,0xab,0x0e,0xaa,0x0f,0xa9,0x10,0x12,0x29,
+0xd9,0xf5,0x70,0x14,0x60,0x0e,0x14,0x60,0x1e,0x14,0x60,0x2f,0x24,0x03,0x70,0x40,
+0x7f,0x01,0x80,0x3a,0xab,0x0e,0xaa,0x0f,0xa9,0x10,0x90,0x00,0x02,0x12,0x42,0x20,
+0xfd,0xe4,0xff,0x31,0xe1,0x80,0x27,0xab,0x0e,0xaa,0x0f,0xa9,0x10,0x90,0x00,0x02,
+0x12,0x42,0x20,0xfd,0x7f,0x01,0x31,0xe1,0x1f,0x80,0x13,0xab,0x0e,0xaa,0x0f,0xa9,
+0x10,0x90,0x00,0x02,0x12,0x42,0x20,0xfd,0x7f,0x02,0x31,0xe1,0xe4,0xff,0x11,0xfe,
+0x22,0xef,0x24,0xfe,0x60,0x0b,0x04,0x70,0x22,0x90,0x91,0x39,0x74,0x01,0xf0,0x80,
+0x16,0xed,0x70,0x0a,0x90,0x91,0x35,0xe0,0x90,0x91,0x39,0xf0,0x80,0x05,0x90,0x91,
+0x39,0xed,0xf0,0x90,0x91,0x39,0xe0,0x90,0x91,0x27,0xf0,0x22,0x7f,0x78,0x7e,0x08,
+0x12,0x27,0xde,0x90,0x90,0xd8,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x27,0xde,
+0x90,0x90,0xdc,0x12,0x2a,0x7f,0x7f,0x00,0x7e,0x08,0x12,0x27,0xde,0x90,0x90,0xe0,
+0x12,0x2a,0x7f,0x90,0x91,0x51,0xe0,0x90,0x90,0xd8,0xb4,0x01,0x0d,0x12,0x43,0x09,
+0xef,0x54,0xc7,0xff,0xed,0x54,0xc7,0xfd,0x80,0x07,0x12,0x43,0x09,0xef,0x54,0xc7,
+0xff,0xec,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x78,0x7e,0x08,0x12,0x2f,0xd9,0x90,
+0x90,0xdc,0x12,0x43,0x09,0xef,0x54,0x0f,0xff,0xec,0x90,0x80,0x85,0x12,0x2a,0x7f,
+0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x90,0x90,0xe0,0x12,0x43,0x09,0xef,0x44,0x02,
+0xff,0xec,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x00,0x7e,0x08,0x12,0x2f,0xd9,0x7f,
+0x70,0x7e,0x0e,0x12,0x27,0xde,0x90,0x90,0xe4,0x12,0x2a,0x7f,0x90,0x80,0x85,0x12,
+0x2a,0x8b,0x00,0x1b,0x25,0xa0,0x7f,0x70,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x59,
+0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0xe4,0xfd,0xff,0x12,0x34,0x81,0x90,0x91,0x51,
+0xe0,0xb4,0x01,0x11,0x90,0x80,0x59,0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0xe4,0xfd,
+0x7f,0x01,0x12,0x34,0x81,0x90,0x00,0x11,0xe0,0x54,0xf6,0xf0,0x80,0x08,0xf4,0xff,
+0x90,0x00,0x43,0xe0,0x5f,0xf0,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x7f,0x10,0xdf,
+0xfe,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x91,0x9b,
+0xed,0xf0,0x90,0x91,0x9a,0xef,0xf0,0xd3,0x94,0x07,0x50,0x63,0xe0,0xff,0x74,0x01,
+0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x47,0xe0,0x5f,
+0xf0,0x51,0xe6,0x90,0x91,0x9a,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,
+0x33,0xd8,0xfc,0xff,0x90,0x00,0x46,0xe0,0x4f,0xf0,0x51,0xe6,0x90,0x91,0x9b,0xe0,
+0x60,0x16,0x90,0x91,0x9a,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,
+0xd8,0xfc,0xff,0x90,0x00,0x45,0x80,0x66,0x90,0x91,0x9a,0xe0,0xff,0x74,0x01,0xa8,
+0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x45,0x80,0x6b,0x90,
+0x91,0x9a,0xe0,0x24,0xf8,0xf0,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,
+0x33,0xd8,0xfc,0xc4,0x54,0xf0,0x51,0xde,0x90,0x91,0x9a,0xe0,0xff,0x74,0x01,0xa8,
+0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x43,0xe0,0x4f,0xf0,0x51,
+0xe6,0x90,0x91,0x9b,0xe0,0x60,0x1b,0x90,0x91,0x9a,0xe0,0xff,0x74,0x01,0xa8,0x07,
+0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xff,0x90,0x00,0x42,0xe0,0x4f,
+0x80,0x1a,0x90,0x91,0x9a,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,
+0xd8,0xfc,0xc4,0x54,0xf0,0xf4,0xff,0x90,0x00,0x42,0xe0,0x5f,0xf0,0x51,0xe6,0xd0,
+0xd0,0x92,0xaf,0x22,0xf0,0x90,0x00,0x45,0xe0,0x54,0xfe,0xfd,0x7f,0x45,0xd3,0x10,
+0xaf,0x01,0xc3,0xc0,0xd0,0x8f,0x82,0x75,0x83,0x00,0xed,0xf0,0x51,0xe6,0xd0,0xd0,
+0x92,0xaf,0x22,0xef,0x14,0x60,0x30,0x14,0x60,0x66,0x24,0x02,0x60,0x02,0x81,0xaa,
+0x90,0x90,0xf3,0x74,0x02,0xf0,0x90,0x00,0x48,0xe0,0x44,0x0c,0xfd,0x7f,0x48,0x71,
+0xee,0x90,0x00,0x47,0xe0,0x44,0x08,0xfd,0x7f,0x47,0x71,0xee,0x90,0x00,0x45,0xe0,
+0x44,0x10,0xfd,0x7f,0x45,0x80,0x71,0xe4,0x90,0x90,0xf3,0xf0,0x90,0x90,0xef,0x12,
+0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,0x90,
+0x00,0x45,0xe0,0x44,0xef,0xfd,0x7f,0x45,0x71,0xee,0x90,0x00,0x45,0xe0,0x54,0xef,
+0xfd,0x7f,0x45,0x71,0xee,0x90,0x00,0x46,0xe0,0x44,0x10,0xfd,0x7f,0x46,0x80,0x38,
+0x90,0x90,0xf3,0x74,0x01,0xf0,0x90,0x90,0xf9,0x12,0x43,0x09,0x90,0x80,0x85,0x12,
+0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x00,0x45,0xe0,0x44,0x20,0xfd,
+0x7f,0x45,0x71,0xee,0x90,0x00,0x45,0xe0,0x44,0x10,0xfd,0x7f,0x45,0x71,0xee,0x90,
+0x00,0x46,0xe0,0x44,0x10,0xfd,0x7f,0x46,0x71,0xee,0x22,0x90,0x00,0x02,0x12,0x42,
+0x20,0x90,0x90,0xf5,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,0x25,0xe0,0x25,0xe0,0x90,
+0x90,0xf4,0xf0,0x12,0x29,0xd9,0x25,0xe0,0x25,0xe0,0x90,0x90,0xf8,0xf0,0x90,0x05,
+0x60,0xe0,0x90,0x91,0x03,0xf0,0x90,0x05,0x61,0xe0,0x90,0x91,0x04,0xf0,0x90,0x05,
+0x62,0xe0,0x90,0x91,0x05,0xf0,0x90,0x05,0x63,0xe0,0x90,0x91,0x06,0xf0,0xa2,0xaf,
+0xe4,0x33,0x90,0x91,0x1c,0xf0,0xc2,0xaf,0x90,0x90,0xf4,0xe0,0xff,0x12,0x6e,0x67,
+0x90,0x91,0x1c,0xe0,0x24,0xff,0x92,0xaf,0x90,0x90,0xf5,0xe0,0x70,0x02,0xa1,0xb2,
+0x90,0x90,0xf4,0xe0,0x70,0x02,0xa1,0xb2,0x90,0x90,0xf8,0xe0,0x70,0x02,0xa1,0xb2,
+0xa2,0xaf,0xe4,0x33,0x90,0x91,0x1c,0xf0,0xc2,0xaf,0x90,0x91,0x07,0x74,0x01,0xf0,
+0x90,0x91,0x1c,0xe0,0x24,0xff,0x92,0xaf,0x71,0xe5,0x90,0x00,0x46,0xe0,0x44,0x01,
+0xfd,0x7f,0x46,0x71,0xee,0x90,0x90,0xed,0xe0,0x60,0x15,0x90,0x90,0xf9,0x12,0x43,
+0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,0x80,0x06,
+0x90,0x05,0x22,0x74,0x7f,0xf0,0x90,0x00,0x45,0xe0,0x54,0xef,0xfd,0x7f,0x45,0x71,
+0xee,0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,0x91,0x03,0xe0,0x90,0x05,0x84,0xf0,
+0x90,0x91,0x04,0xe0,0x90,0x05,0x85,0xf0,0x90,0x91,0x05,0xe0,0x90,0x05,0x86,0xf0,
+0x90,0x91,0x06,0xe0,0x90,0x05,0x87,0xf0,0xa2,0xaf,0xe4,0x33,0x90,0x91,0x1c,0xf0,
+0xc2,0xaf,0x90,0x01,0x3c,0xe0,0x44,0x20,0xf0,0x7d,0x20,0xe4,0xff,0x12,0x37,0x00,
+0x80,0x2b,0x90,0x90,0xf5,0xe0,0x70,0x2d,0x90,0x91,0x07,0x71,0xe4,0x90,0x00,0x46,
+0xe0,0x54,0xfe,0xfd,0x7f,0x46,0x71,0xee,0x90,0x05,0x22,0xe4,0xf0,0xa2,0xaf,0x33,
+0x90,0x91,0x1c,0xf0,0xc2,0xaf,0x7d,0x20,0xe4,0xff,0x12,0x36,0x92,0x90,0x91,0x1c,
+0xe0,0x24,0xff,0x92,0xaf,0x22,0x8b,0x0e,0x8a,0x0f,0x89,0x10,0x90,0x00,0x02,0x12,
+0x42,0x20,0x90,0x90,0xf6,0xf0,0xe0,0x30,0xe0,0x4b,0x90,0x90,0xed,0x74,0x01,0xf0,
+0x7f,0x80,0x7e,0x08,0x12,0x27,0xde,0x90,0x90,0xef,0x12,0x2a,0x7f,0xab,0x0e,0xaa,
+0x0f,0xa9,0x10,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0xe4,0xfc,0xfd,0xfe,0x78,0x1a,
+0x12,0x2a,0x6c,0xa8,0x04,0xa9,0x05,0xaa,0x06,0xab,0x07,0x90,0x90,0xef,0x12,0x43,
+0x09,0xec,0x54,0x03,0xfc,0x12,0x42,0xfc,0x90,0x90,0xf9,0x12,0x2a,0x7f,0x90,0x05,
+0x22,0xe4,0xf0,0x80,0x2d,0xe4,0x90,0x90,0xed,0xf0,0x7f,0x80,0x7e,0x08,0x12,0x27,
+0xde,0xec,0x54,0x03,0xfc,0xec,0x44,0xc0,0xfc,0x90,0x90,0xef,0x12,0x2a,0x7f,0x90,
+0x90,0xef,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,
+0x2f,0xd9,0x90,0x90,0xf6,0xe0,0x30,0xe1,0x19,0x7d,0x0c,0x7f,0x47,0x71,0xee,0x90,
+0x00,0x48,0xe0,0x44,0x0c,0xfd,0x7f,0x48,0x71,0xee,0x90,0x00,0x46,0xe0,0x44,0x10,
+0x80,0x1c,0x90,0x00,0x47,0xe0,0x54,0xf3,0xfd,0x7f,0x47,0x71,0xee,0x90,0x00,0x48,
+0xe0,0x54,0xf3,0xfd,0x7f,0x48,0x71,0xee,0x90,0x00,0x46,0xe0,0x54,0xef,0xfd,0x7f,
+0x46,0x71,0xee,0xe4,0x90,0x90,0xf3,0xf0,0x22,0x90,0x01,0x3c,0x74,0xff,0xf0,0xa3,
+0xf0,0xa3,0xf0,0x90,0x01,0x34,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xfd,0x7f,0x54,
+0x71,0xee,0x7d,0xff,0x7f,0x55,0x71,0xee,0x7d,0xff,0x7f,0x56,0x71,0xee,0x7d,0xff,
+0x7f,0x57,0x61,0xee,0x90,0x01,0x30,0xe4,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,
+0x01,0x38,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xfd,0x7f,0x50,0x71,0xee,0xe4,0xfd,
+0x7f,0x51,0x71,0xee,0xe4,0xfd,0x7f,0x52,0x71,0xee,0xe4,0xfd,0x7f,0x53,0x61,0xee,
+0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x91,0x22,0xed,0xf0,0x90,0x91,0x21,0xef,
+0xf0,0xd3,0x94,0x07,0x50,0x4e,0xa3,0xe0,0x70,0x1a,0x90,0x91,0x21,0xe0,0xff,0x74,
+0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x47,0xe0,
+0x5f,0xf0,0x80,0x17,0x90,0x91,0x21,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,
+0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x47,0xe0,0x4f,0xf0,0x51,0xe6,0x90,0x91,0x21,
+0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,
+0x00,0x46,0x80,0x59,0x90,0x91,0x21,0xe0,0x24,0xf8,0xf0,0xa3,0xe0,0x70,0x1d,0x90,
+0x91,0x21,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,
+0x54,0xf0,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0x80,0x1a,0x90,0x91,0x21,0xe0,
+0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xff,
+0x90,0x00,0x43,0xe0,0x4f,0xf0,0x51,0xe6,0x90,0x91,0x21,0xe0,0xff,0x74,0x01,0xa8,
+0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,
+0x51,0xe6,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x00,0x49,0xe0,0x90,0x91,0x9f,0xf0,0xe0,
+0x54,0x0f,0xf0,0x44,0xf0,0xfd,0x7f,0x49,0x71,0xee,0x90,0x91,0x9f,0xe0,0x44,0xb0,
+0xfd,0x7f,0x49,0x61,0xee,0x12,0x47,0xe6,0xbf,0x01,0x10,0x90,0x02,0x09,0xe0,0xff,
+0x7d,0x01,0x12,0x48,0x22,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0x75,0x28,0x33,0xe4,
+0xf5,0x29,0x75,0x2a,0x07,0xf5,0x2b,0x90,0x01,0x30,0xe5,0x28,0xf0,0xa3,0xe5,0x29,
+0xf0,0xa3,0xe5,0x2a,0xf0,0xa3,0xe5,0x2b,0xf0,0x22,0xe4,0x90,0x91,0x0e,0xf0,0xa3,
+0xf0,0x75,0x8e,0x02,0xf1,0x25,0xd1,0xe8,0x90,0x91,0x4f,0xef,0xf0,0xf1,0x0b,0x90,
+0x91,0x51,0xef,0xf0,0xf1,0x60,0x90,0x91,0x3d,0xee,0xf0,0xa3,0xef,0xf0,0xe4,0xf5,
+0x57,0xf1,0x02,0x12,0x61,0xc4,0x12,0x32,0x3d,0x12,0x44,0xff,0x11,0x0c,0xf1,0x36,
+0xd1,0xfb,0xd1,0xd0,0x12,0x44,0xfe,0x31,0x13,0x12,0x44,0xf4,0x12,0x6e,0x09,0x90,
+0x91,0x10,0xe5,0xd9,0xf0,0x12,0x4e,0xb9,0xc2,0xaf,0x90,0x00,0x80,0xe0,0x44,0x40,
+0xf0,0x12,0x4a,0xe6,0x75,0xe8,0x03,0x43,0xa8,0x85,0xd2,0xaf,0x90,0x91,0x0e,0xe0,
+0x64,0x01,0xf0,0x24,0x2a,0x90,0x01,0xc4,0xf0,0x74,0x50,0xa3,0xf0,0xe5,0x57,0x30,
+0xe2,0x10,0x12,0x5f,0xf0,0xbf,0x01,0x0a,0xc2,0xaf,0x53,0x57,0xfb,0xd2,0xaf,0x12,
+0x71,0x97,0xe5,0x57,0x30,0xe4,0x0a,0xc2,0xaf,0x53,0x57,0xef,0xd2,0xaf,0x12,0x60,
+0x2d,0x90,0x90,0xf7,0xe0,0x70,0x03,0x12,0x70,0x74,0x11,0xe7,0x90,0x91,0x3f,0xe0,
+0x90,0x01,0xba,0xf0,0x80,0xb6,0xe4,0x90,0x91,0x55,0xf0,0x90,0x91,0x53,0xe0,0x54,
+0x7f,0xf0,0xa3,0x74,0x0a,0xf0,0x22,0x90,0x06,0x34,0xe0,0x60,0x25,0x14,0x70,0x1b,
+0x7b,0x01,0x7a,0x06,0x79,0x35,0x7f,0xf9,0x7e,0x01,0x12,0x67,0xe4,0xbf,0x01,0x09,
+0x90,0x06,0x35,0xe0,0x54,0x0f,0xf0,0x80,0x04,0x80,0x00,0xe1,0x17,0xe4,0x90,0x06,
+0x34,0xf0,0x22,0x90,0x91,0x56,0xe0,0x54,0xfe,0xf0,0xe0,0x54,0x7f,0xf0,0x90,0x01,
+0x17,0xe0,0xfe,0x90,0x01,0x16,0xe0,0x7c,0x00,0x24,0x00,0xff,0xec,0x3e,0x90,0x91,
+0x5c,0xf0,0xa3,0xef,0xf0,0x90,0x01,0x04,0xe0,0x54,0x0f,0x90,0x91,0x1c,0xf0,0xe0,
+0xff,0x74,0x40,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,
+0xf9,0x90,0x91,0x5b,0xf0,0xee,0x90,0x91,0x5a,0xf0,0x90,0x91,0x5e,0xe0,0x54,0xfe,
+0xf0,0xe0,0x54,0xfd,0xf0,0xe0,0x54,0xfb,0xf0,0xe0,0x54,0xf7,0xf0,0xe0,0x54,0xef,
+0xf0,0xe0,0x54,0xdf,0xf0,0xe0,0x54,0xbf,0xf0,0xe0,0x54,0x7f,0xf0,0xe4,0xa3,0xf0,
+0xa3,0xf0,0xa3,0xe0,0x54,0xfe,0xf0,0xe0,0x54,0xfd,0xf0,0xe0,0x54,0xf7,0xf0,0x22,
+0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x12,0x29,0xd9,0x54,0x01,0xff,0x90,0x91,0x56,
+0xe0,0x54,0xfe,0x4f,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,0x90,0x91,0x57,0xf0,0x90,
+0x00,0x02,0x12,0x42,0x20,0x90,0x91,0x58,0xf0,0x90,0x91,0x56,0xe0,0x30,0xe0,0x1a,
+0x90,0x06,0x09,0xe0,0x54,0xfe,0xf0,0x90,0x02,0x86,0xe0,0x44,0x04,0xf0,0x43,0x57,
+0x04,0x7d,0x08,0xe4,0xff,0x12,0x36,0xe6,0x80,0x12,0x7d,0x08,0xe4,0xff,0x12,0x36,
+0x75,0x90,0x02,0x86,0xe0,0x54,0xfb,0xf0,0x31,0xf1,0x31,0x13,0xd0,0xd0,0x92,0xaf,
+0x22,0x90,0x06,0x90,0xe4,0xf0,0x21,0x5a,0x90,0x91,0x19,0x12,0x43,0x41,0xef,0x12,
+0x43,0x4a,0x52,0x30,0x01,0x52,0x39,0x02,0x52,0x5b,0x03,0x52,0x64,0x09,0x52,0x6c,
+0x0c,0x52,0x75,0x0d,0x52,0x7d,0x0e,0x52,0x8e,0x1a,0x52,0x96,0x2c,0x52,0x41,0x2d,
+0x52,0x4a,0x2e,0x52,0x9e,0x30,0x52,0x53,0x3b,0x52,0x86,0x3c,0x00,0x00,0x52,0xa6,
+0x90,0x91,0x19,0x12,0x43,0x21,0x02,0x64,0x72,0x90,0x91,0x19,0x12,0x43,0x21,0xc1,
+0xf5,0x90,0x91,0x19,0x12,0x43,0x21,0x02,0x65,0x8d,0x90,0x91,0x19,0x12,0x43,0x21,
+0x02,0x65,0xd5,0x90,0x91,0x19,0x12,0x43,0x21,0xe1,0x4b,0x90,0x91,0x19,0x12,0x43,
+0x21,0x02,0x66,0x0e,0x90,0x91,0x19,0x12,0x43,0x21,0x80,0x42,0x90,0x91,0x19,0x12,
+0x43,0x21,0x02,0x4c,0xab,0x90,0x91,0x19,0x12,0x43,0x21,0xe1,0x98,0x90,0x91,0x19,
+0x12,0x43,0x21,0x02,0x4d,0xe6,0x90,0x91,0x19,0x12,0x43,0x21,0x21,0x90,0x90,0x91,
+0x19,0x12,0x43,0x21,0xa1,0x9b,0x90,0x91,0x19,0x12,0x43,0x21,0x81,0x7a,0x90,0x91,
+0x19,0x12,0x43,0x21,0xe1,0x78,0x90,0x01,0xc6,0xe0,0x44,0x01,0xf0,0x22,0xd3,0x10,
+0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x91,0x1c,0x12,0x43,0x41,0x90,0x91,0x1c,0x12,0x43,
+0x21,0x90,0x00,0x01,0x12,0x42,0x97,0xfa,0xe5,0xf0,0x24,0x00,0xff,0xe4,0x3a,0xfe,
+0x90,0x91,0x1c,0x12,0x43,0x21,0x90,0x00,0x01,0xee,0x8f,0xf0,0x12,0x42,0xcf,0x12,
+0x29,0xd9,0xff,0x60,0x2c,0xb5,0x72,0x16,0x90,0x91,0x1c,0x12,0x43,0x21,0x90,0x00,
+0x01,0x12,0x42,0x97,0x65,0x74,0x70,0x04,0xe5,0x73,0x65,0xf0,0x60,0x23,0x90,0x91,
+0x1c,0x12,0x43,0x21,0x90,0x00,0x01,0x12,0x42,0x97,0xff,0xae,0xf0,0x71,0x26,0x80,
+0x10,0x90,0x91,0x1c,0x12,0x43,0x21,0x12,0x29,0xd9,0x65,0x72,0x60,0x03,0x12,0x44,
+0xe8,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x91,0x1f,0xee,0xf0,0xa3,0xef,0xf0,0x75,0x72,
+0x01,0x8e,0x73,0xf5,0x74,0xe4,0xfd,0x7f,0x0b,0x12,0x4f,0x10,0xe4,0xfd,0x7f,0x02,
+0x12,0x4f,0x10,0x71,0x6a,0xe4,0xff,0x71,0xcc,0xe4,0xf5,0x76,0x90,0x01,0xc9,0xe5,
+0x76,0xf0,0x90,0x91,0x1f,0xe0,0xfc,0xa3,0xe0,0xfd,0xec,0xfb,0x8d,0x44,0xe4,0xf5,
+0x45,0x7d,0x01,0x7f,0x60,0x7e,0x01,0x02,0x35,0xab,0x7f,0x0b,0x71,0xd9,0xef,0x65,
+0x75,0x60,0x10,0xe5,0x75,0xb4,0x01,0x05,0xe4,0xf5,0x75,0x80,0x03,0x75,0x75,0x01,
+0x7f,0x01,0x22,0x7f,0x00,0x22,0xe5,0x72,0x64,0x01,0x70,0x3f,0x71,0x6a,0xbf,0x01,
+0x04,0x7f,0x01,0x71,0xcc,0x90,0x00,0x46,0xe0,0x44,0x04,0xfd,0x7f,0x46,0x12,0x4b,
+0xee,0x90,0x00,0x44,0xe0,0x54,0xfb,0xfd,0x7f,0x44,0x12,0x4b,0xee,0x90,0x00,0x46,
+0xe0,0x54,0xfb,0xfd,0x7f,0x46,0x12,0x4b,0xee,0x7f,0x02,0x71,0xd9,0x8f,0x76,0x90,
+0x01,0xc9,0xe5,0x76,0xf0,0xb4,0x01,0x03,0x12,0x4f,0xd7,0x22,0x90,0x01,0xca,0xe5,
+0x75,0xf0,0xef,0x60,0x03,0x12,0x4f,0xd7,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
+0x90,0x91,0xa0,0xef,0xf0,0xd3,0x94,0x07,0x50,0x47,0xe0,0xff,0x74,0x01,0xa8,0x07,
+0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x46,0xe0,0x5f,0xf0,0x12,
+0x4a,0xe6,0x90,0x91,0xa0,0xe0,0xfd,0x74,0x01,0x7e,0x00,0xa8,0x05,0x08,0x80,0x05,
+0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x00,0x44,0xe0,0xfb,0xe4,0xfe,0xef,
+0x5b,0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,0x13,0xce,0x13,0xd8,0xf8,0xff,0x80,
+0x44,0x90,0x91,0xa0,0xe0,0x24,0xf8,0xf0,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,
+0x02,0xc3,0x33,0xd8,0xfc,0x12,0x4a,0xde,0x90,0x91,0xa0,0xe0,0xfd,0x74,0x01,0x7e,
+0x00,0xa8,0x05,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x00,
+0x42,0xe0,0xfb,0xe4,0xfe,0xef,0x5b,0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,0x13,
+0xce,0x13,0xd8,0xf8,0xff,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,
+0xd0,0xe4,0xf5,0x10,0x75,0x11,0x04,0xf5,0x12,0xf5,0x14,0xf5,0x15,0x90,0x02,0x09,
+0xe0,0xff,0x12,0x29,0xd9,0xfe,0xef,0x2e,0xf5,0x13,0x30,0xe0,0x08,0x75,0x0e,0x00,
+0x75,0x0f,0x80,0x80,0x05,0xe4,0xf5,0x0e,0xf5,0x0f,0xe5,0x13,0xc3,0x13,0x90,0xfd,
+0x10,0xf0,0x74,0x20,0x25,0x10,0xf5,0x10,0xad,0x0f,0xe5,0x10,0x2d,0xff,0x24,0x01,
+0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x90,0x91,0x47,0xf0,0x74,0x02,0x2f,0xf5,
+0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0xfe,0xe5,0x10,0x2d,0x24,0x03,0xf5,0x82,0xe4,
+0x34,0xfc,0xf5,0x83,0xe0,0x24,0x00,0xff,0xe4,0x3e,0x90,0x91,0x48,0xf0,0xa3,0xef,
+0xf0,0x7f,0x04,0xe5,0x10,0x25,0x0f,0x2f,0x24,0x00,0xf5,0x82,0xe4,0x34,0xfc,0xf5,
+0x83,0xe0,0xfe,0x74,0x46,0x2f,0xf5,0x82,0xe4,0x34,0x91,0xf5,0x83,0xee,0xf0,0x0f,
+0xbf,0x08,0xe0,0x12,0x66,0x56,0xef,0x70,0x3f,0x90,0x01,0xc3,0xe0,0x60,0x25,0xc3,
+0xe5,0x15,0x94,0xe8,0xe5,0x14,0x94,0x03,0x40,0x09,0x90,0x01,0xc6,0xe0,0x44,0x10,
+0xf0,0x80,0x63,0x05,0x15,0xe5,0x15,0x70,0x02,0x05,0x14,0x7f,0x0a,0x7e,0x00,0x12,
+0x37,0x54,0x80,0xd5,0x90,0x01,0xc6,0xe0,0x90,0x01,0xc3,0x30,0xe2,0x05,0x74,0xfe,
+0xf0,0x80,0x43,0x74,0xff,0xf0,0x80,0x3e,0xe5,0x10,0xb4,0x78,0x23,0xe4,0xf5,0x10,
+0x05,0x13,0xe5,0x0f,0x64,0x80,0x45,0x0e,0x70,0x06,0xf5,0x0e,0xf5,0x0f,0x80,0x06,
+0x75,0x0e,0x00,0x75,0x0f,0x80,0xe5,0x13,0xc3,0x13,0x90,0xfd,0x10,0xf0,0x80,0x06,
+0x74,0x08,0x25,0x10,0xf5,0x10,0xe5,0x12,0x15,0x12,0x70,0x02,0x15,0x11,0xe5,0x12,
+0x45,0x11,0x60,0x02,0x81,0xb8,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x91,0x1c,0x12,0x43,
+0x41,0x12,0x29,0xd9,0xff,0x54,0x01,0xfe,0x90,0x91,0x5e,0xe0,0x54,0xfe,0x4e,0xf0,
+0xef,0x54,0x04,0xff,0xe0,0x54,0xfb,0x4f,0xf0,0x12,0x29,0xd9,0xff,0x54,0x02,0xfe,
+0x90,0x91,0x5e,0xe0,0x54,0xfd,0x4e,0xf0,0xef,0x54,0x08,0xff,0xe0,0x54,0xf7,0x4f,
+0xf0,0x12,0x29,0xd9,0xff,0x54,0x10,0xfe,0x90,0x91,0x5e,0xe0,0x54,0xef,0x4e,0xf0,
+0xef,0x54,0x20,0xff,0xe0,0x54,0xdf,0x4f,0xf0,0x12,0x29,0xd9,0xff,0x54,0x40,0xfe,
+0x90,0x91,0x5e,0xe0,0x54,0xbf,0x4e,0xf0,0xef,0x54,0x80,0xff,0xe0,0x54,0x7f,0x4f,
+0xf0,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x91,0x60,0xf0,0x90,0x00,0x01,0x12,0x42,
+0x20,0x90,0x91,0x5f,0xf0,0x90,0x00,0x03,0x12,0x42,0x20,0xff,0x54,0x01,0xfe,0x90,
+0x91,0x61,0xe0,0x54,0xfe,0x4e,0xf0,0xef,0x54,0x02,0xff,0xe0,0x54,0xfd,0x4f,0xf0,
+0x90,0x00,0x03,0x12,0x42,0x20,0x54,0x04,0xff,0x90,0x91,0x61,0xe0,0x54,0xfb,0x4f,
+0xf0,0x90,0x91,0x5e,0xe0,0x54,0x01,0x90,0x01,0xb8,0xf0,0x90,0x91,0x5e,0xe0,0xff,
+0xc4,0x13,0x54,0x01,0x90,0x01,0xb9,0xf0,0x90,0x91,0x61,0xe0,0x54,0x01,0x90,0x01,
+0xba,0xf0,0xa3,0x74,0xff,0xf0,0x12,0x29,0xd9,0x20,0xe0,0x02,0x21,0xf1,0xe4,0xfd,
+0x7f,0x81,0x12,0x4b,0xee,0x90,0x91,0x1c,0x12,0x43,0x21,0x12,0x29,0xd9,0xff,0xc3,
+0x13,0x30,0xe0,0x07,0x90,0x06,0x90,0xe0,0x44,0x02,0xf0,0xef,0x13,0x13,0x54,0x3f,
+0x30,0xe0,0x07,0x90,0x06,0x90,0xe0,0x44,0x04,0xf0,0x12,0x29,0xd9,0x13,0x13,0x13,
+0x54,0x1f,0x30,0xe0,0x07,0x90,0x06,0x90,0xe0,0x44,0x08,0xf0,0x90,0x91,0x61,0xe0,
+0x30,0xe0,0x1c,0x90,0x91,0x5e,0xe0,0xc4,0x13,0x54,0x07,0x30,0xe0,0x07,0xa3,0xe0,
+0xff,0xe4,0xfd,0x80,0x07,0x90,0x91,0x5f,0xe0,0xff,0x7d,0x01,0x12,0x4a,0xf6,0x22,
+0x75,0x30,0x1f,0x75,0x31,0x01,0xe4,0xf5,0x32,0x90,0x01,0x38,0xe5,0x30,0xf0,0xa3,
+0xe5,0x31,0xf0,0xa3,0xe5,0x32,0xf0,0x22,0x90,0x00,0x02,0xe0,0x54,0xe0,0x7f,0x01,
+0x60,0x02,0x7f,0x00,0x22,0x12,0x29,0xd9,0xf5,0x6d,0x22,0x90,0x01,0x64,0x74,0xa0,
+0xf0,0x22,0x90,0x91,0x51,0xe0,0x90,0x90,0xe8,0xf0,0x22,0x90,0x00,0xf3,0xe0,0x7f,
+0x00,0x30,0xe3,0x02,0x7f,0x01,0x22,0x90,0x06,0x34,0x74,0xff,0xf0,0xe4,0xa3,0xf0,
+0xa3,0xf0,0xa3,0xf0,0x22,0xe4,0x90,0x91,0x4e,0xf0,0x90,0x00,0x80,0xe0,0x44,0x80,
+0xfd,0x7f,0x80,0x02,0x4b,0xee,0x90,0x00,0xf3,0xe0,0x30,0xe2,0x0d,0x90,0x05,0x41,
+0x74,0x10,0xf0,0x90,0x05,0x5a,0xf0,0xa3,0xe4,0xf0,0x22,0x12,0x29,0xd9,0x60,0x02,
+0x80,0x01,0xe4,0x90,0x91,0x31,0xf0,0x90,0x91,0x31,0xe0,0x90,0x01,0xe7,0xf0,0x22,
+0x90,0x91,0x51,0xe0,0xb4,0x01,0x0c,0x90,0x00,0xf2,0xe0,0x30,0xe7,0x05,0x7e,0xfd,
+0x7f,0x33,0x22,0x7e,0xfd,0x7f,0x2f,0x22,0x12,0x29,0xd9,0xff,0x54,0x01,0xfe,0x90,
+0x91,0x53,0xe0,0x54,0xfe,0x4e,0xf0,0xef,0xc3,0x13,0x30,0xe0,0x0a,0x90,0x00,0x01,
+0x12,0x42,0x20,0x90,0x91,0x54,0xf0,0x22,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x90,
+0xf7,0xf0,0xe0,0x60,0x04,0xe0,0xf4,0x70,0x21,0xa2,0xaf,0xe4,0x33,0xf5,0x0e,0xc2,
+0xaf,0x90,0x00,0x47,0xe0,0x54,0xfb,0xfd,0x7f,0x47,0x12,0x4b,0xee,0x7d,0x40,0x7f,
+0x01,0x12,0x36,0xaf,0xe5,0x0e,0x24,0xff,0x92,0xaf,0x22,0xc0,0xe0,0xc0,0xf0,0xc0,
+0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,
+0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,0x01,0xc4,0x74,0xcb,0xf0,0x74,0x57,
+0xa3,0xf0,0x90,0x01,0x34,0xe0,0x55,0x28,0xf5,0x2c,0x90,0x01,0x36,0xe0,0x55,0x2a,
+0xf5,0x2e,0xa3,0xe0,0x55,0x2b,0xf5,0x2f,0xe5,0x2c,0x30,0xe0,0x5a,0x90,0x01,0x34,
+0x74,0x01,0xf0,0x85,0xd9,0x54,0xe5,0x70,0x14,0x24,0xfd,0x50,0x02,0x80,0x48,0x90,
+0x91,0x3b,0xe0,0x60,0x3a,0x90,0x01,0x5b,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x04,0xf0,
+0x51,0x30,0xef,0x64,0x01,0x70,0x30,0x90,0x91,0x66,0xf0,0x90,0x91,0x2d,0xe0,0x90,
+0x91,0x67,0xf0,0xe4,0xfb,0xfd,0x7f,0x58,0x7e,0x01,0x12,0x44,0x59,0x90,0x01,0x5b,
+0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x01,0xf0,0x90,0x91,0x37,0xf0,0x80,0x08,0x51,
+0x30,0xbf,0x01,0x03,0x12,0x44,0xc2,0xe5,0x2c,0x30,0xe1,0x20,0x90,0x01,0x34,0x74,
+0x02,0xf0,0x85,0xd1,0x58,0x85,0xd2,0x59,0x85,0xd3,0x5a,0x85,0xd4,0x5b,0x85,0xd5,
+0x5c,0x85,0xd6,0x5d,0x85,0xd7,0x5e,0x85,0xd9,0x5f,0x71,0x5c,0xe5,0x2c,0x30,0xe3,
+0x10,0x90,0x01,0x34,0x74,0x08,0xf0,0x90,0x91,0x56,0xe0,0x30,0xe0,0x03,0x43,0x57,
+0x04,0xe5,0x2c,0x30,0xe4,0x09,0x90,0x01,0x34,0x74,0x10,0xf0,0x43,0x57,0x10,0xe5,
+0x2c,0x30,0xe5,0x26,0x90,0x01,0xcf,0xe0,0x30,0xe5,0x1f,0xe0,0x54,0xdf,0xf0,0x90,
+0x01,0x34,0x74,0x20,0xf0,0x75,0xa8,0x00,0x75,0xe8,0x00,0x12,0x4e,0xe4,0x90,0x00,
+0x03,0xe0,0x54,0xfb,0xf0,0x12,0x4a,0xe6,0x80,0xfe,0xe5,0x2c,0x30,0xe6,0x06,0x90,
+0x01,0x34,0x74,0x40,0xf0,0xe5,0x2e,0x30,0xe0,0x13,0x90,0x91,0x50,0x74,0x01,0xf0,
+0x90,0x01,0x36,0xf0,0x91,0x23,0x51,0x87,0x90,0x91,0x50,0xe4,0xf0,0xe5,0x2e,0x30,
+0xe1,0x3c,0x90,0x01,0x36,0x74,0x02,0xf0,0x43,0x57,0x40,0x90,0x01,0x02,0xe0,0x54,
+0x03,0x64,0x01,0x70,0x29,0x90,0x01,0x37,0xe0,0x30,0xe0,0x0a,0x74,0x01,0xf0,0x90,
+0x91,0x40,0xe4,0xf0,0x80,0x18,0x90,0x91,0x40,0xe0,0x04,0xf0,0xe0,0xc3,0x94,0x0a,
+0x40,0x0c,0xe4,0xf0,0x90,0x04,0x19,0xe0,0x30,0xe0,0x03,0x12,0x4f,0xf5,0xe5,0x2e,
+0x30,0xe2,0x19,0x90,0x01,0x36,0x74,0x04,0xf0,0x90,0x91,0x3a,0xe4,0xf0,0x90,0x05,
+0x58,0x74,0x03,0xf0,0x51,0xd8,0x90,0x91,0x3f,0xe0,0x04,0xf0,0xe5,0x2e,0x30,0xe3,
+0x28,0x90,0x01,0x36,0x74,0x08,0xf0,0xe5,0x6d,0x64,0x01,0x70,0x1c,0xe5,0x70,0x60,
+0x18,0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x90,0x91,0x66,0xe4,
+0x12,0x44,0x49,0x90,0x01,0x57,0x74,0x05,0xf0,0xe5,0x2e,0x30,0xe4,0x2b,0x90,0x01,
+0x36,0x74,0x10,0xf0,0xe5,0x6d,0xb4,0x01,0x20,0xe5,0x70,0x60,0x1c,0x90,0x01,0x57,
+0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x90,0x91,0x3c,0xe4,0xf0,0x53,0x71,0xfd,
+0xe5,0x71,0x54,0x07,0x70,0x03,0x12,0x44,0xc2,0xe5,0x2e,0x30,0xe5,0x1f,0x90,0x01,
+0x36,0x74,0x20,0xf0,0xe5,0x6d,0xb4,0x01,0x14,0xe5,0x70,0x60,0x10,0x90,0x91,0x3b,
+0xe0,0x64,0x02,0x60,0x05,0x12,0x44,0xc8,0x80,0x03,0x12,0x44,0x77,0xe5,0x2e,0x30,
+0xe6,0x1b,0x90,0x01,0x36,0x74,0x40,0xf0,0xe5,0x6d,0xb4,0x01,0x10,0xe5,0x70,0x60,
+0x0c,0x53,0x71,0xfe,0xe5,0x71,0x54,0x07,0x70,0x03,0x12,0x44,0xc2,0xe5,0x2f,0x30,
+0xe1,0x08,0x90,0x01,0x37,0x74,0x02,0xf0,0x71,0x7e,0x74,0xcb,0x04,0x90,0x01,0xc4,
+0xf0,0x74,0x57,0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,0x04,0xd0,0x03,0xd0,
+0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,0xd0,0xf0,0xd0,0xe0,0x32,
+0x90,0x04,0x1b,0xe0,0x54,0x7f,0x64,0x7f,0x7f,0x01,0x60,0x02,0x7f,0x00,0x22,0x51,
+0x30,0xef,0x64,0x01,0x60,0x08,0x90,0x01,0xb9,0x74,0x01,0xf0,0x80,0x30,0x90,0x91,
+0x37,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x22,0x90,0x91,0x36,0xe0,
+0x60,0x08,0x90,0x01,0xb9,0x74,0x04,0xf0,0x80,0x14,0xe5,0x6f,0x54,0x0f,0xd3,0x94,
+0x04,0x40,0x08,0x90,0x01,0xb9,0x74,0x08,0xf0,0x80,0x03,0x7f,0x01,0x22,0x90,0x01,
+0xb8,0x74,0x08,0xf0,0x7f,0x00,0x22,0x90,0x91,0x53,0xe0,0x30,0xe0,0x49,0xe5,0x6d,
+0x64,0x01,0x70,0x43,0x90,0x91,0x52,0xe0,0x04,0xf0,0xe5,0x70,0x64,0x03,0x60,0x05,
+0xe5,0x70,0xb4,0x06,0x0d,0x90,0x91,0x52,0xe0,0xff,0x74,0x01,0xd3,0x9f,0x50,0x14,
+0x80,0x07,0x90,0x91,0x52,0xe0,0xb4,0x0a,0x0b,0x90,0x91,0x55,0xe0,0x04,0xf0,0xe4,
+0x90,0x91,0x52,0xf0,0x90,0x91,0x55,0xe0,0xff,0x90,0x91,0x54,0xe0,0xb5,0x07,0x07,
+0x71,0x4e,0xe4,0x90,0x91,0x55,0xf0,0x22,0xe5,0x6d,0x64,0x01,0x70,0x63,0xe5,0x70,
+0x60,0x5f,0xe5,0x70,0x64,0x02,0x60,0x06,0xe5,0x70,0x64,0x05,0x70,0x27,0x90,0x06,
+0xab,0xe0,0x90,0x91,0x27,0xf0,0x90,0x06,0xaa,0xe0,0x90,0x91,0x39,0xf0,0x90,0x91,
+0x27,0xe0,0x70,0x07,0x90,0x91,0x39,0xe0,0xff,0x80,0x05,0x90,0x91,0x27,0xe0,0xff,
+0x90,0x91,0x27,0xef,0xf0,0x90,0x91,0x29,0xe0,0x60,0x03,0xe0,0x14,0xf0,0xe4,0x90,
+0x91,0x28,0xf0,0x90,0x01,0x57,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x53,0x71,0xfd,
+0x53,0x71,0xef,0xe5,0x70,0x14,0x24,0xfd,0x50,0x02,0x80,0x03,0x12,0x45,0xc7,0x71,
+0x42,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0xd0,0xd0,0x92,0xaf,0x22,0xe5,0x6e,
+0x30,0xe3,0x04,0xe4,0xff,0x80,0x02,0x7f,0x01,0x02,0x47,0xc9,0x90,0x91,0x08,0xe0,
+0x54,0xf0,0x44,0x03,0xf0,0x54,0x0f,0x44,0x80,0xf0,0x7b,0x00,0x7a,0x00,0x79,0x58,
+0x90,0x91,0x71,0x12,0x43,0x41,0x0b,0x7a,0x91,0x79,0x08,0x02,0x46,0xb7,0x90,0x91,
+0x80,0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0xe5,0x70,0x14,0x24,0xfd,0x50,0x02,0x80,
+0x21,0x90,0x91,0x3b,0xe0,0x60,0x06,0x7d,0x01,0x7f,0x0c,0x80,0x0d,0xe5,0x6e,0x54,
+0x0f,0xc3,0x94,0x04,0x50,0x07,0x7d,0x01,0x7f,0x04,0x12,0x47,0x27,0xe4,0xff,0x12,
+0x48,0xb3,0x22,0x51,0x30,0xef,0x64,0x01,0x60,0x08,0x90,0x01,0xb9,0x74,0x01,0xf0,
+0x80,0x58,0xe5,0x71,0x54,0x03,0x60,0x08,0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x4a,
+0xe5,0x6f,0x54,0x0f,0xd3,0x94,0x02,0x40,0x08,0x90,0x01,0xb9,0x74,0x04,0xf0,0x80,
+0x39,0xe5,0x71,0x30,0xe2,0x08,0x90,0x01,0xb9,0x74,0x08,0xf0,0x80,0x2c,0xe5,0x71,
+0x30,0xe4,0x08,0x90,0x01,0xb9,0x74,0x10,0xf0,0x80,0x1f,0x90,0x91,0x29,0xe0,0x60,
+0x08,0x90,0x01,0xb9,0x74,0x20,0xf0,0x80,0x11,0x90,0x91,0x31,0xe0,0x60,0x08,0x90,
+0x01,0xb9,0x74,0x80,0xf0,0x80,0x03,0x7f,0x01,0x22,0x90,0x01,0xb8,0x74,0x04,0xf0,
+0x7f,0x00,0x22,0xe4,0xfb,0x90,0x91,0x78,0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0xe5,
+0x70,0x70,0x02,0x81,0xb5,0xe5,0x6d,0x64,0x01,0x70,0x7a,0xe5,0x70,0x14,0x60,0x2b,
+0x24,0xfd,0x60,0x27,0x24,0x02,0x24,0xfb,0x50,0x02,0x80,0x21,0x90,0x91,0x27,0xe0,
+0x14,0xf0,0xe0,0x60,0x04,0xa3,0xe0,0x60,0x14,0x90,0x91,0x27,0xe0,0x70,0x08,0x90,
+0x91,0x39,0xe0,0x90,0x91,0x27,0xf0,0x7b,0x01,0x80,0x02,0x7b,0x01,0xeb,0x60,0x45,
+0x43,0x71,0x10,0xe4,0x90,0x91,0x66,0xf0,0x90,0x91,0x3a,0xe0,0x75,0xf0,0x05,0xa4,
+0xff,0x90,0x91,0x34,0xe0,0x2f,0x12,0x44,0x4e,0x90,0x01,0x57,0x74,0x05,0xf0,0xe5,
+0x6e,0x54,0x0f,0xc3,0x94,0x04,0x50,0x07,0x7d,0x01,0x7f,0x04,0x12,0x47,0x27,0x90,
+0x91,0x2e,0xe0,0x60,0x10,0x90,0x91,0x2c,0xe0,0x90,0x07,0x78,0x60,0x04,0x74,0x0d,
+0xf0,0x22,0x74,0x09,0xf0,0x22,0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,
+0x75,0xd0,0x00,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,
+0x06,0xc0,0x07,0x90,0x01,0xc4,0x74,0xb6,0xf0,0x74,0x5c,0xa3,0xf0,0x53,0x91,0xef,
+0x90,0x00,0x51,0xe0,0xff,0x90,0x00,0x55,0xe0,0x5f,0xf5,0x3d,0x90,0x00,0x52,0xe0,
+0xff,0x90,0x00,0x56,0xe0,0x5f,0xf5,0x3e,0xe5,0x3d,0x30,0xe4,0x06,0x90,0x00,0x55,
+0x74,0x10,0xf0,0xe5,0x3d,0x30,0xe5,0x06,0x90,0x00,0x55,0x74,0x20,0xf0,0xe5,0x3d,
+0x30,0xe6,0x1b,0x90,0x00,0x55,0x74,0x40,0xf0,0x90,0x90,0xf6,0xe0,0x54,0x03,0xff,
+0xbf,0x03,0x0b,0x90,0x90,0xf3,0xe0,0x60,0x05,0x7f,0x01,0x12,0x4c,0x03,0xe5,0x3d,
+0x30,0xe7,0x15,0x90,0x00,0x55,0x74,0x80,0xf0,0x90,0x90,0xf6,0xe0,0x54,0x03,0xff,
+0xbf,0x03,0x05,0x7f,0x02,0x12,0x4c,0x03,0xe5,0x3e,0x30,0xe0,0x06,0x90,0x00,0x56,
+0x74,0x01,0xf0,0xe5,0x3e,0x30,0xe1,0x06,0x90,0x00,0x56,0x74,0x02,0xf0,0xe5,0x3e,
+0x30,0xe2,0x06,0x90,0x00,0x56,0x74,0x04,0xf0,0xe5,0x3e,0x30,0xe3,0x06,0x90,0x00,
+0x56,0x74,0x08,0xf0,0x90,0x01,0xc4,0x74,0xb6,0xf0,0x74,0x5c,0xa3,0xf0,0xd0,0x07,
+0xd0,0x06,0xd0,0x05,0xd0,0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,
+0xd0,0x82,0xd0,0x83,0xd0,0xf0,0xd0,0xe0,0x32,0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,
+0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,
+0xc0,0x05,0xc0,0x06,0xc0,0x07,0x75,0x0d,0x00,0x90,0x01,0xc4,0x74,0x99,0xf0,0x74,
+0x5d,0xa3,0xf0,0x53,0x91,0xdf,0x90,0x01,0x3c,0xe0,0x55,0x30,0xf5,0x34,0xa3,0xe0,
+0x55,0x31,0xf5,0x35,0xa3,0xe0,0x55,0x32,0xf5,0x36,0xa3,0xe0,0x55,0x33,0xf5,0x37,
+0xe5,0x34,0x30,0xe0,0x06,0x90,0x01,0x3c,0x74,0x01,0xf0,0xe5,0x34,0x30,0xe1,0x08,
+0x90,0x01,0x3c,0x74,0x02,0xf0,0xf1,0x57,0xe5,0x34,0x30,0xe2,0x3a,0x90,0x01,0x3c,
+0x74,0x04,0xf0,0x90,0x06,0x92,0xe0,0x30,0xe0,0x25,0x90,0x91,0x66,0xe4,0xf0,0x90,
+0x91,0x2d,0xe0,0x90,0x91,0x67,0xf0,0xe4,0xfb,0xfd,0x7f,0x58,0x7e,0x01,0x12,0x44,
+0x59,0x90,0x01,0x5b,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x01,0xf0,0x80,0x08,0x90,
+0x91,0x37,0xe4,0xf0,0x12,0x44,0xc2,0xe5,0x34,0x30,0xe3,0x3a,0x90,0x01,0x3c,0x74,
+0x08,0xf0,0x90,0x06,0x92,0xe0,0x30,0xe1,0x25,0x90,0x91,0x66,0xe4,0xf0,0x90,0x91,
+0x2d,0xe0,0x90,0x91,0x67,0xf0,0xe4,0xfb,0xfd,0x7f,0x5c,0x7e,0x01,0x12,0x44,0x59,
+0x90,0x01,0x5f,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x02,0xf0,0x80,0x08,0x90,0x91,
+0x36,0xe4,0xf0,0x12,0x44,0xc2,0xe5,0x34,0x30,0xe4,0x09,0x90,0x01,0x3c,0x74,0x10,
+0xf0,0x12,0x53,0x86,0xe5,0x34,0x30,0xe5,0x09,0x90,0x01,0x3c,0x74,0x20,0xf0,0x12,
+0x6e,0xb9,0xe5,0x35,0x30,0xe0,0x5a,0x90,0x01,0x3d,0x74,0x01,0xf0,0x90,0x01,0x2f,
+0xe0,0x44,0x7f,0xf0,0x90,0x00,0x83,0xe0,0x54,0x0f,0xf5,0x0d,0xb4,0x01,0x02,0x80,
+0x1c,0xe5,0x0d,0xb4,0x02,0x05,0x90,0x00,0x83,0x80,0x12,0xe5,0x0d,0xb4,0x04,0x05,
+0x90,0x00,0x83,0x80,0x08,0xe5,0x0d,0xb4,0x0c,0x08,0x90,0x00,0x83,0xe0,0xf5,0x6f,
+0x80,0x06,0x90,0x01,0xbe,0xe0,0x04,0xf0,0x90,0x01,0xbb,0xe5,0x6f,0xf0,0xe5,0x6f,
+0x30,0xe0,0x03,0xa3,0x80,0x03,0x90,0x01,0xbd,0xe0,0x04,0xf0,0xf1,0x38,0x12,0x44,
+0xc2,0xe5,0x35,0x30,0xe2,0x06,0x90,0x01,0x3d,0x74,0x04,0xf0,0xe5,0x36,0x30,0xe0,
+0x06,0x90,0x01,0x3e,0x74,0x01,0xf0,0xe5,0x36,0x30,0xe1,0x06,0x90,0x01,0x3e,0x74,
+0x02,0xf0,0x74,0x99,0x04,0x90,0x01,0xc4,0xf0,0x74,0x5d,0xa3,0xf0,0xd0,0x07,0xd0,
+0x06,0xd0,0x05,0xd0,0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,
+0x82,0xd0,0x83,0xd0,0xf0,0xd0,0xe0,0x32,0xe5,0x6f,0x30,0xe6,0x19,0xe5,0x6f,0x54,
+0x0f,0xff,0x90,0x91,0x24,0xe0,0xfe,0x4f,0x90,0x01,0x2f,0xf0,0xee,0x64,0x80,0x90,
+0x91,0x24,0xf0,0x53,0x6f,0xbf,0x22,0xe4,0x90,0x91,0x0d,0xf0,0xe5,0x70,0x70,0x02,
+0xe1,0xe1,0x90,0x91,0x3c,0xe0,0x60,0x0d,0xe4,0xf0,0x53,0x71,0xfd,0xe5,0x71,0x54,
+0x07,0x70,0x6e,0x80,0x69,0x90,0x91,0x28,0xe0,0x04,0xf0,0x53,0x71,0xef,0x90,0x91,
+0x3a,0xe0,0x04,0xf0,0x90,0x91,0x0d,0xe0,0xf9,0xff,0x7e,0x00,0x24,0x01,0xfd,0xee,
+0x33,0xfc,0x90,0x91,0x3a,0xe0,0xb5,0x05,0x06,0xe4,0xb5,0x04,0x02,0x80,0x12,0xef,
+0x24,0x02,0xff,0xe4,0x3e,0xfe,0x90,0x91,0x3a,0xe0,0xb5,0x07,0x0a,0xe4,0xb5,0x06,
+0x06,0x90,0x05,0x58,0xe0,0x04,0xf0,0xe9,0xff,0x90,0x91,0x2f,0xe0,0x2f,0xff,0xe4,
+0x33,0xfe,0x90,0x91,0x28,0xe0,0xd3,0x9f,0xee,0x64,0x80,0xf8,0x74,0x80,0x98,0x40,
+0x0d,0xe5,0x6d,0xb4,0x01,0x0b,0xa3,0xe0,0x70,0x07,0xe0,0x04,0xf0,0x22,0x12,0x44,
+0xc2,0x22,0x8f,0x20,0x8c,0x21,0x8d,0x22,0x22,0x8f,0x23,0x8c,0x24,0x8d,0x25,0x22,
+0xe4,0x90,0x91,0x11,0xf0,0xa3,0xf0,0x90,0x02,0x86,0xe0,0x20,0xe1,0x2c,0xc3,0x90,
+0x91,0x12,0xe0,0x94,0x20,0x90,0x91,0x11,0xe0,0x94,0x03,0x40,0x0a,0x90,0x01,0xc6,
+0xe0,0x44,0x20,0xf0,0x7f,0x00,0x22,0x90,0x91,0x11,0xe4,0x75,0xf0,0x01,0x12,0x42,
+0x81,0x7f,0x01,0x7e,0x00,0x12,0x37,0x54,0x80,0xcd,0x7f,0x01,0x22,0x90,0x01,0xcc,
+0xe0,0x54,0x0f,0x90,0x91,0x11,0xf0,0x90,0x91,0x11,0xe0,0xfd,0x70,0x02,0x21,0x6f,
+0x90,0x91,0x9c,0xe0,0xff,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,
+0xce,0x33,0xce,0xd8,0xf9,0xff,0xef,0x5d,0x70,0x02,0x21,0x68,0x90,0x91,0x9c,0xe0,
+0x75,0xf0,0x04,0x90,0x01,0xd0,0x12,0x43,0x15,0xe0,0x90,0x91,0x12,0xf0,0x75,0x63,
+0x01,0x75,0x64,0x91,0x75,0x65,0x12,0x75,0x66,0x01,0x7b,0x01,0x7a,0x91,0x79,0x13,
+0x12,0x46,0x6d,0x90,0x91,0x13,0xe0,0xff,0xc4,0x13,0x13,0x13,0x54,0x01,0x90,0x91,
+0x9c,0x30,0xe0,0x59,0xe0,0x75,0xf0,0x02,0x90,0x00,0x88,0x12,0x43,0x15,0xe0,0x90,
+0x91,0x14,0xf0,0x90,0x91,0x9c,0xe0,0x75,0xf0,0x02,0x90,0x00,0x89,0x12,0x43,0x15,
+0xe0,0x90,0x91,0x15,0xf0,0x90,0x91,0x9c,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd1,0x12,
+0x43,0x15,0xe0,0x90,0x91,0x16,0xf0,0x90,0x91,0x9c,0xe0,0x75,0xf0,0x04,0x90,0x01,
+0xd2,0x12,0x43,0x15,0xe0,0x90,0x91,0x17,0xf0,0x90,0x91,0x9c,0xe0,0x75,0xf0,0x04,
+0x90,0x01,0xd3,0x12,0x43,0x15,0xe0,0x90,0x91,0x18,0xf0,0x80,0x33,0xe0,0x75,0xf0,
+0x04,0x90,0x01,0xd1,0x12,0x43,0x15,0xe0,0x90,0x91,0x14,0xf0,0x90,0x91,0x9c,0xe0,
+0x75,0xf0,0x04,0x90,0x01,0xd2,0x12,0x43,0x15,0xe0,0x90,0x91,0x15,0xf0,0x90,0x91,
+0x9c,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd3,0x12,0x43,0x15,0xe0,0x90,0x91,0x16,0xf0,
+0xef,0x54,0x7f,0xff,0x7b,0x01,0x7a,0x91,0x79,0x14,0x12,0x51,0xf8,0x90,0x91,0x11,
+0xe0,0xff,0x90,0x91,0x9c,0xe0,0xfe,0x74,0x01,0xa8,0x06,0x08,0x80,0x02,0xc3,0x33,
+0xd8,0xfc,0xf4,0x5f,0x90,0x91,0x11,0xf0,0x90,0x91,0x9c,0xe0,0xff,0x74,0x01,0xa8,
+0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0x90,0x01,0xcc,0xf0,0x90,0x91,0x9c,0xe0,
+0x04,0xf0,0xe0,0x54,0x03,0xf0,0x01,0x37,0x90,0x01,0xc6,0xe0,0x44,0x02,0xf0,0x22,
+0xad,0x07,0x74,0x11,0x2d,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x01,0xf0,
+0x90,0x04,0x80,0xe0,0x54,0x0f,0xfc,0x74,0x14,0x2d,0xf5,0x82,0xe4,0x34,0xfc,0xf5,
+0x83,0xe0,0x54,0xc0,0x4c,0xfd,0x74,0x14,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,
+0xed,0xf0,0x22,0xef,0x60,0x0f,0x74,0x21,0x2d,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,
+0xe0,0x44,0x10,0xf0,0x22,0x74,0x21,0x2d,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,
+0x54,0xef,0xf0,0x22,0xe4,0xf5,0x6d,0xf5,0x71,0xf5,0x70,0x75,0x6f,0x0c,0x75,0x6e,
+0x0c,0x90,0x91,0x3b,0xf0,0x90,0x91,0x37,0xf0,0x90,0x91,0x36,0xf0,0x90,0x91,0x39,
+0x04,0xf0,0x90,0x91,0x27,0xf0,0xe4,0x90,0x91,0x3c,0xf0,0x90,0x91,0x29,0xf0,0x90,
+0x91,0x34,0x74,0x07,0xf0,0xe4,0x90,0x91,0x28,0xf0,0x90,0x91,0x32,0xf0,0xa3,0x74,
+0x03,0xf0,0x90,0x91,0x2f,0x74,0x0a,0xf0,0xa3,0x74,0x05,0xf0,0x90,0x91,0x2d,0x74,
+0x14,0xf0,0x90,0x91,0x35,0x74,0x05,0xf0,0xe4,0x90,0x91,0x2b,0xf0,0x90,0x91,0x25,
+0xf0,0x90,0x91,0x50,0xf0,0x90,0x91,0x31,0xf0,0x90,0x91,0x3a,0xf0,0x90,0x91,0x26,
+0xf0,0x90,0x91,0x38,0xf0,0x90,0x91,0x2e,0xf0,0x90,0x91,0x2c,0xf0,0x22,0xe4,0x90,
+0x91,0x3c,0xf0,0x90,0x91,0x28,0xf0,0xf5,0x71,0x22,0x90,0x06,0x04,0xe0,0x54,0xbf,
+0xf0,0xef,0x60,0x0a,0xe5,0x6d,0xb4,0x01,0x05,0xe4,0xff,0x12,0x47,0xc9,0x53,0x6e,
+0xf0,0x43,0x6e,0x0c,0x22,0x90,0x91,0x9d,0xef,0xf0,0x51,0x7e,0x90,0x91,0x9d,0xe0,
+0x60,0x05,0x90,0x05,0x22,0xe4,0xf0,0x53,0x6e,0xf0,0x43,0x6e,0x04,0x22,0x90,0x00,
+0x11,0xe0,0x44,0x09,0xf0,0x12,0x4a,0xe6,0x90,0x90,0xd8,0x12,0x43,0x09,0x90,0x80,
+0x85,0x12,0x2a,0x7f,0x7f,0x78,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x90,0xdc,0x12,0x43,
+0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x90,0x90,
+0xe0,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x00,0x7e,0x08,0x12,0x2f,
+0xd9,0x90,0x90,0xe4,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x70,0x7e,
+0x0e,0x12,0x2f,0xd9,0x90,0x80,0x59,0x12,0x2a,0x8b,0x00,0x03,0x2d,0x95,0xe4,0xfd,
+0xff,0x12,0x34,0x81,0x90,0x91,0x51,0xe0,0xb4,0x01,0x11,0x90,0x80,0x59,0x12,0x2a,
+0x8b,0x00,0x03,0x2d,0x95,0xe4,0xfd,0x7f,0x01,0x12,0x34,0x81,0x22,0x8f,0x77,0xe4,
+0x90,0x91,0x96,0xf0,0xa3,0xf0,0x90,0x01,0x09,0xe0,0x7f,0x00,0x30,0xe7,0x02,0x7f,
+0x01,0xef,0x65,0x77,0x60,0x3e,0xc3,0x90,0x91,0x97,0xe0,0x94,0x88,0x90,0x91,0x96,
+0xe0,0x94,0x13,0x40,0x08,0x90,0x01,0xc6,0xe0,0x44,0x80,0xf0,0x22,0x90,0x91,0x96,
+0xe4,0x75,0xf0,0x01,0x12,0x42,0x81,0x7f,0x14,0x7e,0x00,0x12,0x37,0x54,0xd3,0x90,
+0x91,0x97,0xe0,0x94,0x32,0x90,0x91,0x96,0xe0,0x94,0x00,0x40,0xb9,0x90,0x01,0xc7,
+0xe0,0x30,0xe0,0xb2,0x22,0x22,0x53,0x6e,0xf0,0x43,0x6e,0x01,0x71,0x55,0x71,0x67,
+0x53,0x6e,0xf0,0x43,0x6e,0x02,0x22,0x22,0x8f,0x78,0x12,0x47,0xe6,0xef,0x64,0x01,
+0x70,0x2e,0x90,0x91,0x44,0x12,0x48,0x1e,0xe5,0x78,0x60,0x10,0x74,0x21,0x2f,0xf5,
+0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x10,0xf0,0x80,0x0e,0x74,0x21,0x2f,0xf5,
+0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xef,0xf0,0x90,0x04,0x1f,0x74,0x20,0xf0,
+0x22,0xe4,0xfb,0x90,0x91,0x7c,0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0xe5,0x70,0x60,
+0x5f,0xe5,0x6d,0x64,0x01,0x70,0x59,0x0b,0x90,0x91,0x27,0xf0,0x04,0x60,0x51,0x43,
+0x71,0x10,0xe4,0x90,0x91,0x66,0xf0,0x90,0x91,0x3a,0xe0,0x75,0xf0,0x05,0xa4,0xff,
+0x90,0x91,0x34,0xe0,0x2f,0x90,0x91,0x67,0xf0,0xe4,0x1b,0x12,0x44,0x54,0x90,0x01,
+0x57,0x74,0x05,0xf0,0xe5,0x6e,0x54,0x0f,0xc3,0x94,0x04,0x50,0x07,0x7d,0x01,0x7f,
+0x04,0x12,0x47,0x27,0x90,0x91,0x2e,0xe0,0x60,0x11,0x90,0x91,0x2c,0xe0,0x90,0x07,
+0x78,0x60,0x05,0x74,0x0d,0xf0,0x80,0x03,0x74,0x09,0xf0,0x90,0x05,0x22,0xe4,0xf0,
+0x22,0x90,0x91,0x32,0xe0,0xa3,0xe0,0x90,0x05,0x58,0xf0,0x22,0xd3,0x10,0xaf,0x01,
+0xc3,0xc0,0xd0,0x90,0x91,0x84,0xee,0xf0,0xa3,0xef,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,
+0x90,0x91,0x84,0xe0,0xfe,0xa3,0xe0,0xf5,0x82,0x8e,0x83,0xe0,0x60,0x2d,0xc3,0x90,
+0x91,0x87,0xe0,0x94,0xe8,0x90,0x91,0x86,0xe0,0x94,0x03,0x40,0x0b,0x90,0x01,0xc6,
+0xe0,0x44,0x10,0xf0,0x7f,0x00,0x80,0x15,0x90,0x91,0x86,0xe4,0x75,0xf0,0x01,0x12,
+0x42,0x81,0x7f,0x0a,0x7e,0x00,0x12,0x37,0x54,0x80,0xc5,0x7f,0x01,0xd0,0xd0,0x92,
+0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x91,0x1c,0x12,0x43,0x41,0x90,
+0x91,0x1f,0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0x90,0x91,0x1c,0x12,0x43,0x21,0x90,
+0x00,0x01,0x12,0x42,0x20,0x90,0x91,0x3b,0xf0,0x90,0x00,0x03,0x12,0x42,0x20,0x90,
+0x91,0x25,0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0x54,0x01,0x90,0x91,0x26,0xf0,
+0xef,0xc3,0x13,0x54,0x01,0x90,0x91,0x2e,0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0xff,
+0x13,0x13,0x54,0x01,0x90,0x91,0x2c,0xf0,0x90,0x91,0x2e,0xe0,0x90,0x91,0x1f,0x70,
+0x26,0x12,0x2a,0x8b,0x00,0x00,0x02,0x10,0x90,0x91,0x1f,0x12,0x43,0x09,0x90,0x80,
+0x85,0x12,0x2a,0x7f,0x7f,0x60,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x91,0x1f,0x12,0x2a,
+0x8b,0x00,0x00,0x03,0x10,0x80,0x24,0x12,0x2a,0x8b,0x00,0x00,0x01,0x10,0x90,0x91,
+0x1f,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x60,0x7e,0x08,0x12,0x2f,
+0xd9,0x90,0x91,0x1f,0x12,0x2a,0x8b,0x00,0x00,0x03,0x00,0x90,0x91,0x1f,0x12,0x43,
+0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x70,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x91,
+0x26,0xe0,0x70,0x3d,0x90,0x91,0x38,0x74,0x01,0xf0,0x7f,0x00,0x7e,0x08,0x12,0x27,
+0xde,0x90,0x91,0x1f,0x12,0x2a,0x7f,0x90,0x91,0x1f,0x12,0x43,0x09,0xec,0x44,0x02,
+0xfc,0x90,0x91,0x1f,0x12,0x2a,0x7f,0x90,0x91,0x1f,0x12,0x43,0x09,0x90,0x80,0x85,
+0x12,0x2a,0x7f,0x7f,0x00,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x02,0x86,0xe0,0x54,0xfb,
+0xf0,0x90,0x91,0x1c,0x12,0x43,0x21,0x12,0x49,0x7f,0x90,0x01,0xe5,0xe5,0x70,0xf0,
+0x90,0x91,0x3b,0xe0,0x90,0x01,0xe6,0xf0,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x00,0x02,
+0x12,0x42,0x20,0xff,0x30,0xe0,0x25,0x12,0x29,0xd9,0x90,0x91,0x2f,0xf0,0x90,0x00,
+0x01,0x12,0x42,0x20,0x90,0x91,0x30,0xf0,0xef,0xc3,0x13,0x54,0x7f,0x90,0x91,0x2d,
+0xf0,0x90,0x00,0x03,0x12,0x42,0x20,0x90,0x91,0x35,0xf0,0x22,0x90,0x91,0x2f,0x74,
+0x0a,0xf0,0x90,0x91,0x30,0x74,0x05,0xf0,0x90,0x91,0x2d,0x74,0x14,0xf0,0x90,0x91,
+0x35,0x74,0x05,0xf0,0x22,0x12,0x29,0xd9,0x30,0xe0,0x19,0xc3,0x13,0x54,0x7f,0x90,
+0x91,0x34,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0x90,0x91,0x32,0xe4,0xf0,0xa3,
+0xef,0xf0,0x80,0x0f,0x90,0x91,0x34,0x74,0x07,0xf0,0x90,0x91,0x32,0xe4,0xf0,0xa3,
+0x74,0x03,0xf0,0x90,0x91,0x32,0xe0,0xa3,0xe0,0x90,0x05,0x58,0xf0,0x22,0x90,0x02,
+0x09,0xe0,0xfd,0x12,0x29,0xd9,0xfe,0xaf,0x05,0xed,0x2e,0x90,0x91,0x41,0xf0,0x90,
+0x00,0x01,0x12,0x42,0x20,0xff,0xed,0x2f,0x90,0x91,0x42,0xf0,0x90,0x00,0x02,0x12,
+0x42,0x20,0xff,0xed,0x2f,0x90,0x91,0x43,0xf0,0x90,0x00,0x03,0x12,0x42,0x20,0xff,
+0xed,0x2f,0x90,0x91,0x44,0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0xae,0x05,0xed,
+0x2f,0x90,0x91,0x45,0xf0,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x91,0x47,
+0xe0,0x90,0x91,0x1d,0xf0,0x90,0x91,0x48,0xe0,0xf5,0x19,0xa3,0xe0,0xf5,0x1a,0xe4,
+0xf5,0x16,0x74,0x4a,0x25,0x16,0xf5,0x82,0xe4,0x34,0x91,0xf5,0x83,0xe0,0xff,0x74,
+0x1b,0x25,0x16,0xf8,0xa6,0x07,0x05,0x16,0xe5,0x16,0xb4,0x04,0xe5,0x90,0x91,0x1d,
+0xe0,0x12,0x43,0x4a,0x66,0xb3,0x00,0x67,0xdc,0x01,0x66,0xba,0x02,0x66,0xba,0x03,
+0x66,0xba,0x04,0x67,0xdc,0x05,0x67,0xac,0x80,0x67,0xc2,0x81,0x67,0xdc,0x82,0x00,
+0x00,0x67,0xd8,0xaf,0x1e,0x12,0x73,0xea,0xe1,0xdc,0x90,0x91,0x1d,0xe0,0xff,0xb4,
+0x02,0x08,0x90,0x91,0x1c,0x74,0x01,0xf0,0x80,0x0f,0xef,0x90,0x91,0x1c,0xb4,0x03,
+0x05,0x74,0x02,0xf0,0x80,0x03,0x74,0x04,0xf0,0xc3,0xe5,0x19,0x94,0x08,0x50,0x49,
+0xe4,0xf5,0x16,0x90,0x91,0x1c,0xe0,0xff,0xe5,0x16,0xc3,0x9f,0x40,0x02,0xe1,0xdc,
+0xc3,0xe5,0x19,0x94,0x01,0x50,0x14,0xe5,0x16,0x25,0x1a,0xff,0xc3,0x74,0x03,0x95,
+0x16,0x24,0x1b,0xf8,0xe6,0xfd,0x12,0x4b,0xee,0x80,0x1a,0xc3,0x74,0x03,0x95,0x16,
+0x24,0x1b,0xf8,0xe6,0xff,0xe5,0x16,0x7c,0x00,0x25,0x1a,0xfd,0xec,0x35,0x19,0x8d,
+0x82,0xf5,0x83,0xef,0xf0,0x05,0x16,0x80,0xba,0xc3,0xe5,0x19,0x94,0x10,0x40,0x02,
+0xe1,0xdc,0x90,0x91,0x1d,0xe0,0x64,0x04,0x60,0x02,0xe1,0xdc,0xaf,0x1c,0xfc,0xfd,
+0xfe,0x78,0x10,0x12,0x2a,0x6c,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0xaf,0x1b,
+0xe4,0xfc,0xfd,0xfe,0x78,0x18,0x12,0x2a,0x6c,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,
+0x00,0x12,0x42,0xfc,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0xaf,0x1d,0xe4,0xfc,
+0xfd,0xfe,0x78,0x08,0x12,0x2a,0x6c,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0x12,
+0x42,0xfc,0xa8,0x04,0xa9,0x05,0xaa,0x06,0xab,0x07,0xaf,0x1e,0xe4,0xfc,0xfd,0xfe,
+0x12,0x42,0xfc,0xa3,0x12,0x2a,0x7f,0x90,0x91,0x1e,0x12,0x43,0x09,0x90,0x80,0x85,
+0x12,0x2a,0x7f,0xaf,0x1a,0xae,0x19,0x12,0x2f,0xd9,0x80,0x30,0xe5,0x1d,0x7f,0x00,
+0xfe,0xef,0x25,0x1e,0xf5,0x18,0xe4,0x3e,0xf5,0x17,0xaf,0x18,0xfe,0x12,0x37,0x54,
+0x80,0x1a,0xe5,0x1d,0x7f,0x00,0xfe,0xef,0x25,0x1e,0xf5,0x18,0xe4,0x3e,0xf5,0x17,
+0xaf,0x18,0xfe,0x12,0x36,0xcb,0x80,0x04,0x7f,0x00,0x80,0x02,0x7f,0x01,0xd0,0xd0,
+0x92,0xaf,0x22,0x22,0x8e,0x0e,0x8f,0x0f,0x8b,0x10,0x8a,0x11,0x89,0x12,0xe4,0x90,
+0x91,0x11,0xf0,0xef,0x90,0x00,0x31,0xf0,0x12,0x4a,0xe6,0xe5,0x0e,0x54,0x03,0xff,
+0x90,0x00,0x32,0xe0,0x54,0xfc,0x4f,0xf0,0x12,0x4a,0xe6,0x90,0x00,0x33,0xe0,0x54,
+0x7f,0xf0,0x12,0x4a,0xe6,0x90,0x00,0x33,0xe0,0x20,0xe7,0x0e,0x90,0x91,0x11,0xe0,
+0xc3,0x94,0x64,0x50,0x05,0xe0,0x04,0xf0,0x80,0xeb,0x90,0x91,0x11,0xe0,0xc3,0x94,
+0x64,0x50,0x10,0x90,0x00,0x30,0xe0,0xab,0x10,0xaa,0x11,0xa9,0x12,0x12,0x42,0x4d,
+0x7f,0x01,0x22,0x7f,0x00,0x22,0xe4,0x90,0x91,0x98,0xf0,0xa3,0xf0,0x90,0x05,0xf8,
+0xe0,0x70,0x0f,0xa3,0xe0,0x70,0x0b,0xa3,0xe0,0x70,0x07,0xa3,0xe0,0x70,0x03,0x7f,
+0x01,0x22,0xd3,0x90,0x91,0x99,0xe0,0x94,0xe8,0x90,0x91,0x98,0xe0,0x94,0x03,0x40,
+0x03,0x7f,0x00,0x22,0x7f,0x32,0x7e,0x00,0x12,0x37,0x54,0x90,0x91,0x98,0xe4,0x75,
+0xf0,0x01,0x12,0x42,0x81,0x80,0xc6,0xef,0x70,0x02,0x41,0x3d,0x90,0x90,0xe8,0xe0,
+0x60,0x02,0xc1,0x08,0x90,0x90,0xd4,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,
+0x7f,0x8c,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x90,0x80,0x12,0x43,0x09,0x90,0x80,0x85,
+0x12,0x2a,0x7f,0x7f,0x44,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x90,0x84,0x12,0x43,0x09,
+0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x5c,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x90,0x88,
+0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x6c,0x7e,0x0e,0x12,0x2f,0xd9,
+0x90,0x90,0x8c,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x70,0x7e,0x0e,
+0x12,0x2f,0xd9,0x90,0x90,0x90,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
+0x74,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x90,0x94,0x12,0x43,0x09,0x90,0x80,0x85,0x12,
+0x2a,0x7f,0x7f,0x78,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x90,0x98,0x12,0x43,0x09,0x90,
+0x80,0x85,0x12,0x2a,0x7f,0x7f,0x7c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x90,0x9c,0x12,
+0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x0e,0x12,0x2f,0xd9,0x90,
+0x90,0xa0,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x84,0x7e,0x0e,0x12,
+0x2f,0xd9,0x90,0x90,0xa4,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x88,
+0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x90,0xa8,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,
+0x7f,0x7f,0x8c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x90,0xac,0x12,0x43,0x09,0x90,0x80,
+0x85,0x12,0x2a,0x7f,0x7f,0xd0,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x90,0xb0,0x12,0x43,
+0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0xd4,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x90,
+0xb4,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0xd8,0x7e,0x0e,0x12,0x2f,
+0xd9,0x90,0x90,0xb8,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0xdc,0x7e,
+0x0e,0x12,0x2f,0xd9,0x90,0x90,0xbc,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,
+0x7f,0xe0,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x90,0xc0,0x12,0x43,0x09,0x90,0x80,0x85,
+0x12,0x2a,0x7f,0x7f,0xec,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x90,0xc4,0x12,0x43,0x09,
+0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x90,0x90,0xc8,
+0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0d,0x12,0x2f,0xd9,
+0x90,0x90,0xcc,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,
+0x12,0x2f,0xd9,0x90,0x90,0xd0,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
+0x04,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x90,0xe8,0x74,0x01,0xf0,0x22,0x90,0x90,0xe8,
+0xe0,0x64,0x01,0x60,0x02,0xc1,0x08,0x7f,0x8c,0x7e,0x08,0x12,0x27,0xde,0x90,0x90,
+0xd4,0x12,0x2a,0x7f,0x7f,0x44,0x7e,0x08,0x12,0x27,0xde,0x90,0x90,0x80,0x12,0x2a,
+0x7f,0x7f,0x5c,0x7e,0x08,0x12,0x27,0xde,0x90,0x90,0x84,0x12,0x2a,0x7f,0x7f,0x6c,
+0x7e,0x0e,0x12,0x27,0xde,0x90,0x90,0x88,0x12,0x2a,0x7f,0x7f,0x70,0x7e,0x0e,0x12,
+0x27,0xde,0x90,0x90,0x8c,0x12,0x2a,0x7f,0x7f,0x74,0x7e,0x0e,0x12,0x27,0xde,0x90,
+0x90,0x90,0x12,0x2a,0x7f,0x7f,0x78,0x7e,0x0e,0x12,0x27,0xde,0x90,0x90,0x94,0x12,
+0x2a,0x7f,0x7f,0x7c,0x7e,0x0e,0x12,0x27,0xde,0x90,0x90,0x98,0x12,0x2a,0x7f,0x7f,
+0x80,0x7e,0x0e,0x12,0x27,0xde,0x90,0x90,0x9c,0x12,0x2a,0x7f,0x7f,0x84,0x7e,0x0e,
+0x12,0x27,0xde,0x90,0x90,0xa0,0x12,0x2a,0x7f,0x7f,0x88,0x7e,0x0e,0x12,0x27,0xde,
+0x90,0x90,0xa4,0x12,0x2a,0x7f,0x7f,0x8c,0x7e,0x0e,0x12,0x27,0xde,0x90,0x90,0xa8,
+0x12,0x2a,0x7f,0x7f,0xd0,0x7e,0x0e,0x12,0x27,0xde,0x90,0x90,0xac,0x12,0x2a,0x7f,
+0x7f,0xd4,0x7e,0x0e,0x12,0x27,0xde,0x90,0x90,0xb0,0x12,0x2a,0x7f,0x7f,0xd8,0x7e,
+0x0e,0x12,0x27,0xde,0x90,0x90,0xb4,0x12,0x2a,0x7f,0x7f,0xdc,0x7e,0x0e,0x12,0x27,
+0xde,0x90,0x90,0xb8,0x12,0x2a,0x7f,0x7f,0xe0,0x7e,0x0e,0x12,0x27,0xde,0x90,0x90,
+0xbc,0x12,0x2a,0x7f,0x7f,0xec,0x7e,0x0e,0x12,0x27,0xde,0x90,0x90,0xc0,0x12,0x2a,
+0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x27,0xde,0x90,0x90,0xc4,0x12,0x2a,0x7f,0x7f,0x04,
+0x7e,0x0d,0x12,0x27,0xde,0x90,0x90,0xc8,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,
+0x27,0xde,0x90,0x90,0xcc,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x08,0x12,0x27,0xde,0x90,
+0x90,0xd0,0x12,0x2a,0x7f,0x7f,0x8c,0x7e,0x08,0x12,0x27,0xde,0x90,0x91,0x88,0x12,
+0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0xed,0x44,0xc0,0xfd,0xec,0x90,0x91,0x88,
+0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
+0x8c,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x01,0x00,0x00,
+0x7f,0x44,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0xdb,0x25,
+0xa4,0x7f,0x5c,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,
+0x25,0xa4,0x7f,0x6c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,
+0xdb,0x25,0xa4,0x7f,0x70,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,
+0x04,0x1b,0x25,0xa4,0x7f,0x74,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,
+0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x78,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,
+0x2a,0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x7c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,
+0x12,0x2a,0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x80,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,
+0x85,0x12,0x2a,0x8b,0x63,0xdb,0x25,0xa4,0x7f,0x84,0x7e,0x0e,0x12,0x2f,0xd9,0x90,
+0x80,0x85,0x12,0x2a,0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x88,0x7e,0x0e,0x12,0x2f,0xd9,
+0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0x8c,0x7e,0x0e,0x12,0x2f,
+0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd0,0x7e,0x0e,0x12,
+0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd4,0x7e,0x0e,
+0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd8,0x7e,
+0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x1b,0x25,0xa4,0x7f,0xdc,
+0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x1b,0x25,0xa4,0x7f,
+0xe0,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x24,0xdb,0x25,0xa4,
+0x7f,0xec,0x7e,0x0e,0x12,0x2f,0xd9,0x7f,0x04,0x7e,0x0c,0x12,0x27,0xde,0x90,0x91,
+0x88,0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0xe4,0xff,0xec,0x90,0x91,0x88,
+0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0xef,0x44,0x11,0xff,0xec,0x90,0x91,
+0x88,0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,
+0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x7f,0x04,0x7e,0x0d,0x12,0x27,0xde,0x90,0x91,
+0x88,0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0xef,0x54,0xf0,0xff,0xec,0x90,
+0x91,0x88,0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0xef,0x44,0x01,0xff,0xec,
+0x90,0x91,0x88,0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0x90,0x80,0x85,0x12,
+0x2a,0x7f,0x7f,0x04,0x7e,0x0d,0x12,0x2f,0xd9,0x7f,0x0c,0x7e,0x09,0x12,0x27,0xde,
+0x90,0x91,0x88,0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0xe4,0xff,0xec,0x90,
+0x91,0x88,0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0xef,0x44,0x11,0xff,0xec,
+0x90,0x91,0x88,0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0x90,0x80,0x85,0x12,
+0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,0x2f,0xd9,0x7f,0x0c,0x7e,0x09,0x12,0x27,0xde,
+0x90,0x91,0x88,0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0xed,0x54,0x0f,0xfd,
+0xec,0x54,0xf0,0xfc,0x90,0x91,0x88,0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,
+0xed,0x44,0x10,0xfd,0xec,0x44,0x01,0xfc,0x90,0x91,0x88,0x12,0x2a,0x7f,0x90,0x91,
+0x88,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,0x2f,
+0xd9,0x7f,0x04,0x7e,0x08,0x12,0x27,0xde,0x90,0x91,0x88,0x12,0x2a,0x7f,0x90,0x91,
+0x88,0x12,0x43,0x09,0xef,0x54,0xf0,0xff,0xec,0x90,0x91,0x88,0x12,0x2a,0x7f,0x90,
+0x91,0x88,0x12,0x43,0x09,0xef,0x44,0x01,0xff,0xec,0x90,0x91,0x88,0x12,0x2a,0x7f,
+0x90,0x91,0x88,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x08,
+0x12,0x2f,0xd9,0xe4,0x90,0x90,0xe8,0xf0,0x22,0xe4,0xfd,0x7f,0x45,0x12,0x4b,0xee,
+0x90,0x04,0xfd,0xe4,0xf0,0xa3,0xf0,0x90,0x90,0xf7,0xf0,0x90,0x90,0xfd,0xf0,0x90,
+0x91,0x00,0xf0,0x90,0x90,0xfe,0xf0,0x90,0x91,0x01,0xf0,0x90,0x90,0xff,0xf0,0x90,
+0x91,0x02,0xf0,0x90,0x90,0xe9,0x04,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,
+0x90,0xee,0xf0,0x90,0x90,0xf3,0xf0,0x90,0x90,0xf5,0xf0,0x90,0x91,0x07,0xf0,0x90,
+0x90,0xf8,0xf0,0x90,0x90,0xf4,0xf0,0x90,0x90,0xed,0xf0,0x90,0x00,0x51,0xe0,0x44,
+0xc0,0xfd,0x7f,0x51,0x02,0x4b,0xee,0x90,0x05,0x60,0xe0,0x90,0x91,0x03,0xf0,0x90,
+0x05,0x61,0xe0,0x90,0x91,0x04,0xf0,0x90,0x05,0x62,0xe0,0x90,0x91,0x05,0xf0,0x90,
+0x05,0x63,0xe0,0x90,0x91,0x06,0xf0,0xc3,0x74,0xff,0x9f,0xfe,0x90,0x91,0x04,0xe0,
+0xd3,0x9e,0x40,0x1e,0xe0,0x2f,0xf0,0xa3,0xe0,0xb4,0xff,0x0f,0xe4,0xf0,0xa3,0xe0,
+0xb4,0xff,0x03,0xe4,0xf0,0x22,0x90,0x91,0x06,0x80,0x03,0x90,0x91,0x05,0xe0,0x04,
+0xf0,0x22,0x90,0x91,0x04,0xe0,0x2f,0xf0,0x22,0x90,0x90,0xf5,0xe0,0x64,0x01,0x60,
+0x02,0xe1,0x6e,0x90,0x00,0x46,0xe0,0x44,0x01,0xfd,0x7f,0x46,0x12,0x4b,0xee,0x90,
+0x91,0x07,0xe0,0x70,0x32,0x90,0x90,0xed,0xe0,0x60,0x15,0x90,0x90,0xf9,0x12,0x43,
+0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,0x80,0x06,
+0x90,0x05,0x22,0x74,0x7f,0xf0,0x90,0x90,0xf4,0xe0,0xff,0xd1,0x67,0x90,0x91,0x07,
+0x74,0x01,0x12,0x4b,0xe4,0x80,0x40,0x90,0x91,0x07,0xe0,0x64,0x01,0x70,0x38,0x90,
+0x90,0xf8,0xe0,0xff,0xd1,0x67,0xe4,0x90,0x91,0x07,0xf0,0x90,0x00,0x45,0xe0,0x44,
+0x01,0xfd,0x7f,0x45,0x12,0x4b,0xee,0x90,0x90,0xed,0xe0,0x60,0x15,0x90,0x90,0xef,
+0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,
+0x80,0x05,0x90,0x05,0x22,0xe4,0xf0,0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,0x91,
+0x03,0xe0,0x90,0x05,0x84,0xf0,0x90,0x91,0x04,0xe0,0x90,0x05,0x85,0xf0,0x90,0x91,
+0x05,0xe0,0x90,0x05,0x86,0xf0,0x90,0x91,0x06,0xe0,0x90,0x05,0x87,0xf0,0x22,0x90,
+0x90,0xee,0xe0,0xc3,0x94,0x14,0x50,0x06,0xe0,0x04,0xf0,0x02,0x70,0x29,0x90,0x90,
+0xee,0xe0,0x64,0x14,0x60,0x03,0x02,0x70,0x29,0x90,0x90,0xfd,0xe0,0x70,0x25,0x90,
+0x91,0x00,0xe0,0x70,0x1f,0x90,0x90,0xfe,0xe0,0x70,0x19,0x90,0x91,0x01,0xe0,0x70,
+0x13,0x90,0x90,0xff,0xe0,0x70,0x0d,0x90,0x91,0x02,0xe0,0x70,0x07,0x90,0x04,0xfd,
+0xe0,0x54,0xfe,0xf0,0x90,0x90,0xfd,0xe0,0x90,0x04,0x44,0xf0,0x90,0x90,0xfe,0xe0,
+0x90,0x04,0x45,0xf0,0x90,0x90,0xff,0xe0,0x90,0x04,0x46,0xf0,0xa3,0xe4,0xf0,0x90,
+0x91,0x00,0xe0,0x90,0x04,0x48,0xf0,0x90,0x91,0x01,0xe0,0x90,0x04,0x49,0xf0,0x90,
+0x91,0x02,0xe0,0x90,0x04,0x4a,0xf0,0xa3,0xe4,0xf0,0x90,0x90,0xe9,0xe0,0x90,0x04,
+0x4c,0xf0,0x90,0x90,0xea,0xe0,0x90,0x04,0x4d,0xf0,0x90,0x90,0xeb,0xe0,0x90,0x04,
+0x4e,0xf0,0x90,0x90,0xec,0xe0,0x90,0x04,0x4f,0xf0,0xe4,0x90,0x90,0xee,0xf0,0x90,
+0x90,0xe9,0x04,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x90,0xfd,0xf0,0xa3,
+0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x05,0x60,0xe0,0x90,0x91,0x8c,
+0xf0,0x90,0x05,0x61,0xe0,0x90,0x91,0x8d,0xf0,0x90,0x05,0x62,0xe0,0x90,0x91,0x8e,
+0xf0,0x90,0x05,0x63,0xe0,0x90,0x91,0x8f,0xf0,0x90,0x91,0x06,0xe0,0xff,0x90,0x91,
+0x8f,0xe0,0xfe,0xd3,0x9f,0x50,0x0b,0x90,0x91,0x06,0xe0,0xc3,0x9e,0xd3,0x94,0x01,
+0x40,0x11,0x90,0x90,0xf4,0xe0,0xb4,0x01,0x02,0x80,0x03,0x90,0x90,0xf8,0xe0,0xff,
+0x12,0x6e,0x67,0x22,0x90,0x91,0x07,0xe0,0x64,0x01,0x60,0x08,0x90,0x90,0xf5,0xe0,
+0x60,0x02,0x21,0x4b,0x90,0x90,0xe9,0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,
+0x80,0x3b,0x90,0x90,0xea,0xe0,0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,
+0x28,0x90,0x90,0xeb,0xe0,0xc3,0x94,0xff,0x50,0x0a,0xe0,0x04,0xf0,0xe4,0x90,0x90,
+0xea,0xf0,0x80,0x15,0x90,0x90,0xec,0xe0,0xc3,0x94,0xff,0x50,0x10,0xe0,0x04,0xf0,
+0xe4,0x90,0x90,0xeb,0xf0,0x90,0x90,0xea,0xf0,0x90,0x90,0xe9,0xf0,0x90,0x00,0x44,
+0xe0,0x54,0x0c,0x60,0x76,0xe0,0x30,0xe2,0x32,0x90,0x90,0xfd,0xe0,0xc3,0x94,0xff,
+0x50,0x05,0xe0,0x04,0xf0,0x80,0x24,0x90,0x90,0xfe,0xe0,0xc3,0x94,0xff,0x50,0x06,
+0xe0,0x04,0xf0,0xe4,0x80,0x11,0x90,0x90,0xff,0xe0,0xc3,0x94,0xff,0x50,0x0c,0xe0,
+0x04,0xf0,0xe4,0x90,0x90,0xfe,0xf0,0x90,0x90,0xfd,0xf0,0x90,0x00,0x44,0xe0,0x30,
+0xe3,0x32,0x90,0x91,0x00,0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,0x24,
+0x90,0x91,0x01,0xe0,0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,0x11,0x90,
+0x91,0x02,0xe0,0xc3,0x94,0xff,0x50,0x0c,0xe0,0x04,0xf0,0xe4,0x90,0x91,0x01,0xf0,
+0x90,0x91,0x00,0xf0,0x90,0x04,0xfd,0xe0,0x44,0x01,0xf0,0x22,0x90,0x06,0x90,0xe0,
+0x44,0x01,0xf0,0x90,0x91,0x61,0xe0,0x30,0xe0,0x3c,0x90,0x91,0x5f,0xe0,0xff,0x90,
+0x91,0x5e,0xe0,0xfe,0xc4,0x13,0x54,0x01,0xfd,0x12,0x4a,0xf6,0x90,0x91,0x60,0xe0,
+0x75,0xf0,0x20,0xa4,0xff,0xae,0xf0,0x12,0x37,0x54,0x90,0x91,0x5e,0xe0,0xc4,0x13,
+0x54,0x07,0x30,0xe0,0x07,0xa3,0xe0,0xff,0xe4,0xfd,0x80,0x07,0x90,0x91,0x5f,0xe0,
+0xff,0x7d,0x01,0x12,0x4a,0xf6,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0xe4,0x90,
+0x91,0x19,0xf0,0xa3,0x74,0x08,0xf0,0xa3,0xf0,0xe4,0xa3,0xf0,0x90,0x01,0x1f,0xe0,
+0xfe,0x90,0x01,0x1e,0xe0,0x7c,0x00,0x24,0x00,0xff,0xec,0x3e,0x90,0x91,0x11,0xf0,
+0xa3,0xef,0xf0,0x90,0x02,0x87,0xe0,0x90,0x91,0x18,0xf0,0x90,0x91,0x56,0xe0,0x20,
+0xe0,0x02,0x61,0xc4,0xe4,0x90,0x91,0x17,0xf0,0x90,0x91,0x18,0xe0,0xff,0x90,0x91,
+0x17,0xe0,0xc3,0x9f,0x40,0x02,0x61,0xc4,0x90,0x91,0x11,0xe0,0xfc,0xa3,0xe0,0xfd,
+0xec,0xff,0x90,0xfd,0x11,0xf0,0x90,0x91,0x1c,0xef,0xf0,0x74,0x02,0x2d,0xf5,0x82,
+0xe4,0x34,0xfb,0xf5,0x83,0xe0,0x54,0x0f,0xfc,0x33,0x33,0x33,0x54,0xf8,0xff,0xed,
+0x24,0x18,0x2f,0x90,0x91,0x15,0xf0,0xe0,0x24,0x00,0xf5,0x82,0xe4,0x34,0xfb,0xf5,
+0x83,0xe0,0x54,0xfc,0x90,0x91,0x16,0xf0,0x74,0x01,0x2d,0xf5,0x82,0xe4,0x34,0xfb,
+0xf5,0x83,0xe0,0xfe,0x74,0x00,0x2d,0xf5,0x82,0xe4,0x34,0xfb,0xf5,0x83,0xe0,0x7a,
+0x00,0x24,0x00,0xff,0xea,0x3e,0x54,0x3f,0xab,0x07,0xfa,0x90,0x91,0x13,0xf0,0xa3,
+0xeb,0xf0,0xaf,0x04,0xef,0x75,0xf0,0x08,0xa4,0x24,0x18,0xff,0xe4,0x35,0xf0,0xfe,
+0xef,0x2b,0xfb,0xee,0x3a,0xfa,0x90,0x91,0x5a,0xe0,0xfe,0xa3,0xe0,0xff,0xad,0x03,
+0xac,0x02,0x12,0x45,0x09,0xaa,0x06,0xab,0x07,0x90,0x91,0x15,0xe0,0x24,0x00,0xf5,
+0x82,0xe4,0x34,0xfb,0xf5,0x83,0xe0,0x30,0xe7,0x08,0x90,0x91,0x19,0x74,0x02,0xf0,
+0x80,0x05,0xe4,0x90,0x91,0x19,0xf0,0xaf,0x03,0x90,0x91,0x11,0xea,0x8f,0xf0,0x12,
+0x42,0x81,0x90,0x91,0x5c,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x91,0x11,0xe0,0xfc,0xa3,
+0xe0,0xfd,0xd3,0x9f,0xec,0x9e,0x40,0x1b,0x90,0x91,0x5d,0xe0,0x24,0x01,0xff,0x90,
+0x91,0x5c,0xe0,0x34,0x00,0xfe,0xc3,0xed,0x9f,0xff,0xec,0x9e,0x90,0x91,0x11,0xf0,
+0xa3,0xef,0xf0,0x90,0x91,0x16,0xe0,0xff,0x24,0x40,0x60,0x04,0x24,0x20,0x70,0x27,
+0x90,0x91,0x5e,0xe0,0xfe,0xc4,0x13,0x13,0x13,0x54,0x01,0x20,0xe0,0x02,0x61,0x9c,
+0xef,0x90,0x00,0x81,0xb4,0xa0,0x05,0xe0,0x44,0x04,0x80,0x03,0xe0,0x44,0x08,0xfd,
+0x7f,0x81,0x12,0x4b,0xee,0x61,0x95,0x90,0x91,0x5e,0xe0,0xc4,0x13,0x13,0x54,0x03,
+0x20,0xe0,0x02,0x61,0x9c,0x90,0x91,0x15,0xe0,0xff,0x24,0x00,0xf5,0x82,0xe4,0x34,
+0xfb,0xf5,0x83,0xe0,0x54,0x0c,0x64,0x08,0x70,0x72,0x90,0x91,0x19,0xe0,0xfe,0xef,
+0x2e,0xff,0xa3,0xe0,0x2f,0xff,0x24,0x1e,0xf5,0x82,0xe4,0x34,0xfb,0xf5,0x83,0xe0,
+0x64,0x88,0x70,0x58,0x74,0x1f,0x2f,0xf5,0x82,0xe4,0x34,0xfb,0xf5,0x83,0xe0,0x64,
+0x8e,0x70,0x49,0x90,0x91,0x19,0xe0,0xff,0x90,0x91,0x15,0xe0,0x2f,0xff,0x90,0x91,
+0x1a,0xe0,0x2f,0xff,0xa3,0xe0,0x2f,0xff,0x24,0x19,0xf5,0x82,0xe4,0x34,0xfb,0xf5,
+0x83,0xe0,0x64,0x03,0x70,0x26,0x74,0x1e,0x2f,0xf5,0x82,0xe4,0x34,0xfb,0xf5,0x83,
+0xe0,0x90,0x00,0x81,0x30,0xe3,0x05,0xe0,0x44,0x01,0x80,0x03,0xe0,0x44,0x02,0xfd,
+0x7f,0x81,0x12,0x4b,0xee,0x90,0x91,0x56,0xe0,0x44,0x80,0xf0,0x90,0x91,0x56,0xe0,
+0xff,0xc4,0x13,0x13,0x13,0x54,0x01,0x30,0xe0,0x02,0x31,0x4c,0x71,0xc9,0xbf,0x01,
+0x13,0x90,0x91,0x11,0xe0,0xfe,0xa3,0xe0,0xff,0x12,0x44,0xb5,0x90,0x91,0x17,0xe0,
+0x04,0xf0,0x21,0xd9,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x91,0x56,0xe0,0xc4,0x13,0x13,
+0x13,0x54,0x01,0x30,0xe0,0x11,0xe0,0x44,0x80,0xf0,0x90,0x91,0x5e,0xe0,0xc4,0x54,
+0x0f,0x20,0xe0,0x03,0x7f,0x00,0x22,0x7f,0x01,0x22,0x8f,0x1f,0xe4,0x90,0x91,0x22,
+0xf0,0xe5,0x1f,0x14,0xfe,0x90,0x91,0x22,0xe0,0xff,0xc3,0x9e,0x50,0x0e,0xef,0x04,
+0xfd,0x12,0x34,0xb7,0x90,0x91,0x22,0xe0,0x04,0xf0,0x80,0xe5,0xe5,0x1f,0x14,0xff,
+0x7d,0xff,0x12,0x34,0xb7,0x90,0x91,0x22,0xe5,0x1f,0xf0,0x90,0x91,0x22,0xe0,0xc3,
+0x94,0xff,0x50,0x0f,0xe0,0xff,0x04,0xfd,0x12,0x34,0xb7,0x90,0x91,0x22,0xe0,0x04,
+0xf0,0x80,0xe8,0xad,0x1f,0x7f,0xff,0x02,0x34,0xb7,0xc3,0xee,0x94,0x01,0x40,0x0a,
+0x0d,0xed,0x13,0x90,0xfd,0x10,0xf0,0xe4,0x2f,0xff,0x22,0xc3,0xee,0x94,0x01,0x40,
+0x1e,0x90,0xfd,0x11,0xe0,0xb5,0x05,0x14,0x90,0x01,0x17,0xe0,0xb5,0x05,0x07,0x90,
+0xfd,0x11,0xe4,0xf0,0x80,0x06,0xed,0x04,0x90,0xfd,0x11,0xf0,0xe4,0x2f,0xff,0x22,
+0x0f,0x75,};
+
+u8 Rtl8192CUFwUMCACutWWImgArray[UMCACutWWImgArrayLength] = {
+0xc1,0x88,0x02,0x00,0x51,0x00,0x00,0x00,0x03,0x23,0x16,0x44,0x72,0x34,0x01,0x00,
+0x58,0x92,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x02,0x43,0x9d,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x02,0x57,0xcb,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x02,0x5c,0xb6,0x00,0x00,0x00,0x00,0x00,0x02,0x5d,0x99,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0xbb,0x01,0x0c,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe0,0x22,0x50,
+0x06,0xe9,0x25,0x82,0xf8,0xe6,0x22,0xbb,0xfe,0x06,0xe9,0x25,0x82,0xf8,0xe2,0x22,
+0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe4,0x93,0x22,0xbb,0x01,0x06,
+0x89,0x82,0x8a,0x83,0xf0,0x22,0x50,0x02,0xf7,0x22,0xbb,0xfe,0x01,0xf3,0x22,0xf8,
+0xbb,0x01,0x0d,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe8,0xf0,0x22,
+0x50,0x06,0xe9,0x25,0x82,0xc8,0xf6,0x22,0xbb,0xfe,0x05,0xe9,0x25,0x82,0xc8,0xf2,
+0x22,0xc5,0xf0,0xf8,0xa3,0xe0,0x28,0xf0,0xc5,0xf0,0xf8,0xe5,0x82,0x15,0x82,0x70,
+0x02,0x15,0x83,0xe0,0x38,0xf0,0x22,0xbb,0x01,0x10,0xe5,0x82,0x29,0xf5,0x82,0xe5,
+0x83,0x3a,0xf5,0x83,0xe0,0xf5,0xf0,0xa3,0xe0,0x22,0x50,0x09,0xe9,0x25,0x82,0xf8,
+0x86,0xf0,0x08,0xe6,0x22,0xbb,0xfe,0x0a,0xe9,0x25,0x82,0xf8,0xe2,0xf5,0xf0,0x08,
+0xe2,0x22,0xe5,0x83,0x2a,0xf5,0x83,0xe9,0x93,0xf5,0xf0,0xa3,0xe9,0x93,0x22,0xf8,
+0xbb,0x01,0x11,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe8,0xf0,0xe5,
+0xf0,0xa3,0xf0,0x22,0x50,0x09,0xe9,0x25,0x82,0xc8,0xf6,0x08,0xa6,0xf0,0x22,0xbb,
+0xfe,0x09,0xe9,0x25,0x82,0xc8,0xf2,0xe5,0xf0,0x08,0xf2,0x22,0xef,0x4b,0xff,0xee,
+0x4a,0xfe,0xed,0x49,0xfd,0xec,0x48,0xfc,0x22,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,
+0xfe,0xa3,0xe0,0xff,0x22,0xa4,0x25,0x82,0xf5,0x82,0xe5,0xf0,0x35,0x83,0xf5,0x83,
+0x22,0xe0,0xfb,0xa3,0xe0,0xfa,0xa3,0xe0,0xf9,0x22,0xf8,0xe0,0xfb,0xa3,0xa3,0xe0,
+0xf9,0x25,0xf0,0xf0,0xe5,0x82,0x15,0x82,0x70,0x02,0x15,0x83,0xe0,0xfa,0x38,0xf0,
+0x22,0xeb,0xf0,0xa3,0xea,0xf0,0xa3,0xe9,0xf0,0x22,0xd0,0x83,0xd0,0x82,0xf8,0xe4,
+0x93,0x70,0x12,0x74,0x01,0x93,0x70,0x0d,0xa3,0xa3,0x93,0xf8,0x74,0x01,0x93,0xf5,
+0x82,0x88,0x83,0xe4,0x73,0x74,0x02,0x93,0x68,0x60,0xef,0xa3,0xa3,0xa3,0x80,0xdf,
+0xd0,0x83,0xd0,0x82,0xf8,0xe4,0x93,0x70,0x12,0x74,0x01,0x93,0x70,0x0d,0xa3,0xa3,
+0x93,0xf8,0x74,0x01,0x93,0xf5,0x82,0x88,0x83,0xe4,0x73,0x74,0x02,0x93,0xb5,0xf0,
+0x06,0x74,0x03,0x93,0x68,0x60,0xe9,0xa3,0xa3,0xa3,0xa3,0x80,0xd8,0x02,0x43,0xdb,
+0x02,0x50,0x2a,0xe4,0x93,0xa3,0xf8,0xe4,0x93,0xa3,0x40,0x03,0xf6,0x80,0x01,0xf2,
+0x08,0xdf,0xf4,0x80,0x29,0xe4,0x93,0xa3,0xf8,0x54,0x07,0x24,0x0c,0xc8,0xc3,0x33,
+0xc4,0x54,0x0f,0x44,0x20,0xc8,0x83,0x40,0x04,0xf4,0x56,0x80,0x01,0x46,0xf6,0xdf,
+0xe4,0x80,0x0b,0x01,0x02,0x04,0x08,0x10,0x20,0x40,0x80,0x90,0x44,0x20,0xe4,0x7e,
+0x01,0x93,0x60,0xbc,0xa3,0xff,0x54,0x3f,0x30,0xe5,0x09,0x54,0x1f,0xfe,0xe4,0x93,
+0xa3,0x60,0x01,0x0e,0xcf,0x54,0xc0,0x25,0xe0,0x60,0xa8,0x40,0xb8,0xe4,0x93,0xa3,
+0xfa,0xe4,0x93,0xa3,0xf8,0xe4,0x93,0xa3,0xc8,0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,
+0xf0,0xa3,0xc8,0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,0xdf,0xe9,0xde,0xe7,0x80,0xbe,
+0x41,0x91,0x40,0x00,0x41,0x91,0x9c,0x00,0x41,0x91,0x23,0x80,0x41,0x91,0x24,0x80,
+0x41,0x91,0x9e,0x00,0x41,0x91,0x52,0x00,0x41,0x91,0x93,0x00,0x41,0x91,0x91,0x00,
+0x41,0x91,0x90,0x00,0x41,0x91,0x92,0x00,0x00,0xf0,0x90,0x91,0x30,0xe0,0x90,0x91,
+0x67,0xf0,0xe4,0xfb,0xfd,0x7f,0x54,0x7e,0x01,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
+0x90,0x91,0x65,0xeb,0xf0,0xa3,0xe0,0xfb,0xa3,0xe0,0xf5,0x44,0xe4,0xf5,0x45,0x12,
+0x30,0x62,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x01,0x5f,0xe4,0xf0,0x90,0x01,0x3c,0x74,
+0x08,0xf0,0xe4,0x90,0x91,0x66,0xf0,0x90,0x91,0x2d,0xe0,0x90,0x91,0x67,0xf0,0xe4,
+0xfb,0xfd,0x7f,0x5c,0x7e,0x01,0x91,0x59,0x90,0x01,0x5f,0x74,0x05,0xf0,0x90,0x06,
+0x92,0x74,0x02,0xf0,0x90,0x91,0x36,0x14,0xf0,0xe5,0x6e,0x54,0x0f,0xc3,0x94,0x0c,
+0x50,0x02,0xf1,0x23,0x22,0x90,0x02,0x84,0xef,0xf0,0xa3,0xee,0xf0,0xa3,0x74,0x05,
+0xf0,0x22,0x7d,0x01,0xaf,0x6f,0xe1,0x27,0xf1,0xe6,0xbf,0x01,0x10,0x90,0x91,0x42,
+0xe0,0xff,0xe4,0xfd,0x12,0x48,0x22,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0x8f,0x82,
+0x8e,0x83,0xa3,0xa3,0xa3,0xe4,0xf0,0x22,0xe4,0xf5,0x72,0x7f,0x60,0x7e,0x01,0x80,
+0xed,0x7f,0x00,0x22,0x90,0x91,0x53,0xe0,0x54,0xfe,0xf0,0x02,0x50,0xd6,0x22,0xe4,
+0xf5,0x75,0x22,0x02,0x5f,0xe2,0x02,0x5f,0xe9,0xef,0x8e,0xf0,0x71,0x70,0x45,0x26,
+0x00,0x40,0x45,0x4e,0x00,0x80,0x45,0x79,0x01,0x00,0x45,0x8d,0x02,0x00,0x45,0xa5,
+0x04,0x00,0x00,0x00,0x45,0xc2,0xed,0x54,0x3f,0x70,0x04,0xfe,0xff,0x80,0x04,0x7e,
+0x00,0x7f,0x40,0xef,0x2d,0xff,0xee,0x3c,0xfe,0xef,0x78,0x06,0xce,0xc3,0x13,0xce,
+0x13,0xd8,0xf9,0x78,0x06,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0x80,0x26,0xed,0x54,
+0x7f,0x70,0x04,0xfe,0xff,0x80,0x04,0x7e,0x00,0x7f,0x80,0xef,0x2d,0xff,0xee,0x3c,
+0xfe,0xef,0x78,0x07,0xce,0xc3,0x13,0xce,0x13,0xd8,0xf9,0x78,0x07,0xc3,0x33,0xce,
+0x33,0xce,0xd8,0xf9,0xfd,0xac,0x06,0x80,0x49,0xed,0x70,0x04,0xfe,0xff,0x80,0x04,
+0x7e,0x01,0x7f,0x00,0xef,0x2d,0xee,0x3c,0x7d,0x00,0xfc,0x80,0x35,0xec,0x54,0x01,
+0x4d,0x70,0x04,0xfe,0xff,0x80,0x04,0x7e,0x02,0x7f,0x00,0xef,0x2d,0xee,0x3c,0xc3,
+0x13,0x7d,0x00,0x80,0x1a,0xec,0x54,0x03,0x4d,0x70,0x04,0xfe,0xff,0x80,0x04,0x7e,
+0x04,0x7f,0x00,0xef,0x2d,0xee,0x3c,0x13,0x13,0x54,0x3f,0x7d,0x00,0x25,0xe0,0x25,
+0xe0,0xfc,0xae,0x04,0xaf,0x05,0x22,0x90,0x91,0x09,0x12,0x25,0x14,0x00,0x00,0x00,
+0x00,0x90,0x06,0xa9,0xe0,0x90,0x91,0x08,0xf0,0xe0,0x54,0xc0,0x70,0x0a,0x53,0x71,
+0xfe,0x53,0x71,0xfd,0x91,0xc2,0x80,0x47,0x90,0x91,0x26,0xe0,0x60,0x41,0x90,0x91,
+0x38,0xe0,0x70,0x3b,0x90,0x91,0x38,0x74,0x01,0xf0,0x7f,0x00,0x7e,0x08,0x12,0x22,
+0x65,0x90,0x91,0x09,0x12,0x25,0x08,0x90,0x91,0x09,0x71,0x09,0xec,0x44,0x02,0xfc,
+0x90,0x91,0x09,0x12,0x25,0x08,0x90,0x91,0x09,0x71,0x09,0x90,0x80,0x96,0x12,0x25,
+0x08,0x7f,0x00,0x7e,0x08,0x12,0x2b,0x08,0x90,0x02,0x86,0xe0,0x54,0xfb,0xf0,0x90,
+0x91,0x08,0xe0,0x30,0xe6,0x13,0x43,0x71,0x01,0x90,0x91,0x3b,0xe0,0x64,0x02,0x60,
+0x04,0x91,0xc8,0x80,0x07,0x91,0x77,0x80,0x03,0x53,0x71,0xfe,0x90,0x91,0x08,0xe0,
+0x30,0xe7,0x16,0x43,0x71,0x02,0xe4,0x90,0x91,0x66,0x91,0x49,0x90,0x01,0x57,0x74,
+0x05,0xf0,0x90,0x91,0x3c,0x74,0x01,0xf0,0x22,0x53,0x71,0xfd,0x22,0xd3,0x10,0xaf,
+0x01,0xc3,0xc0,0xd0,0x8b,0x60,0x8a,0x61,0x89,0x62,0x90,0x91,0x68,0x71,0x41,0xab,
+0x63,0xaa,0x64,0xa9,0x65,0x90,0x91,0x6b,0x71,0x41,0xaf,0x66,0x15,0x66,0xef,0x60,
+0x1b,0x90,0x91,0x6b,0xe4,0x75,0xf0,0x01,0x71,0x2a,0x12,0x24,0x62,0xff,0x90,0x91,
+0x68,0xe4,0x75,0xf0,0x01,0x71,0x2a,0xef,0x51,0x4d,0x80,0xde,0xab,0x60,0xaa,0x61,
+0xa9,0x62,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x91,
+0x6e,0x71,0x41,0x90,0x91,0x9e,0xe0,0xff,0x04,0xf0,0x90,0x00,0x01,0xef,0x51,0x5f,
+0x7f,0xaf,0x7e,0x01,0x12,0x64,0x1c,0xef,0x60,0x44,0x90,0x91,0x6e,0x71,0x21,0x8b,
+0x63,0x8a,0x64,0x89,0x65,0x75,0x66,0x02,0x7b,0x01,0x7a,0x01,0x79,0xa0,0xd1,0x6d,
+0x90,0x91,0x71,0x71,0x21,0x8b,0x63,0x8a,0x64,0x89,0x65,0x90,0x91,0x6e,0x71,0x21,
+0x12,0x24,0x62,0xff,0xc4,0x54,0x0f,0xf5,0x66,0x7b,0x01,0x7a,0x01,0x79,0xa2,0xd1,
+0x6d,0x90,0x01,0xaf,0x74,0xff,0xf0,0x90,0x01,0xcb,0xe0,0x64,0x80,0xf0,0xd0,0xd0,
+0x92,0xaf,0x22,0x7d,0x01,0x7f,0x0c,0x90,0x91,0x95,0xed,0xf0,0x90,0x91,0x94,0xef,
+0xf0,0x54,0x0f,0xff,0xe5,0x6e,0x54,0x0f,0x6f,0x60,0x76,0x90,0x91,0x94,0xe0,0x30,
+0xe2,0x30,0xe5,0x6e,0x20,0xe2,0x05,0x7f,0x01,0x12,0x62,0x65,0xe5,0x6e,0x30,0xe3,
+0x0f,0x90,0x91,0x94,0xe0,0x20,0xe3,0x08,0x12,0x5a,0x3f,0xef,0x60,0x53,0x80,0x52,
+0xe5,0x6e,0x20,0xe3,0x4c,0x90,0x91,0x94,0xe0,0x30,0xe3,0x45,0xa3,0xe0,0xff,0x02,
+0x62,0x4a,0xe5,0x6e,0x54,0x0f,0xff,0xbf,0x0c,0x0f,0x90,0x91,0x94,0xe0,0x20,0xe3,
+0x08,0x12,0x5a,0x3f,0xef,0x60,0x2a,0xf1,0xb2,0xe5,0x6e,0x54,0x0f,0xff,0xbf,0x04,
+0x10,0x90,0x91,0x94,0xe0,0x20,0xe2,0x09,0x12,0x5b,0xb3,0xef,0x60,0x13,0x12,0x48,
+0xce,0xe5,0x6e,0x54,0x0f,0xff,0xbf,0x02,0x08,0x91,0xf1,0xef,0x60,0x03,0x12,0x63,
+0x56,0x22,0x90,0x06,0x04,0xe0,0x44,0x40,0xf0,0xe5,0x6d,0xb4,0x01,0x04,0x7f,0x01,
+0xf1,0xc9,0x53,0x6e,0xf0,0x43,0x6e,0x04,0x22,0x8f,0x67,0xf1,0xe6,0xbf,0x01,0x15,
+0x90,0x91,0x43,0x12,0x48,0x1e,0xad,0x07,0xac,0x06,0xaf,0x67,0x12,0x61,0xa3,0x90,
+0x04,0x1f,0x74,0x20,0xf0,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x01,0xc4,
+0x74,0xe6,0xf0,0x74,0x47,0xa3,0xf0,0x90,0x04,0x1d,0xe0,0x60,0x1a,0x90,0x05,0x22,
+0xe0,0x54,0x90,0x60,0x07,0x90,0x01,0xc6,0xe0,0x44,0x40,0xf0,0x90,0x01,0xc7,0xe0,
+0x30,0xe1,0xe4,0x7f,0x00,0x80,0x02,0x7f,0x01,0xd0,0xd0,0x92,0xaf,0x22,0xe0,0xff,
+0x7d,0x01,0x90,0x91,0x74,0xef,0xf0,0xa3,0xed,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xe5,
+0x70,0x60,0x04,0xe4,0xff,0x11,0xb3,0x90,0x91,0x74,0xe0,0x30,0xe0,0x09,0x90,0x91,
+0x76,0xe4,0xf0,0xa3,0x74,0x80,0xf0,0x90,0x91,0x74,0xe0,0xff,0xc3,0x13,0x90,0xfd,
+0x10,0xf0,0x90,0x04,0x25,0xef,0xf0,0x90,0x91,0x75,0xe0,0x60,0x1f,0xa3,0xa3,0xe0,
+0xff,0x24,0x0f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x80,0xf0,0x74,0x10,
+0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x80,0xf0,0x90,0x91,0x76,0xa3,
+0xe0,0xff,0xfd,0x24,0x08,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe4,0xf0,0x74,0x09,
+0x2d,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xf0,0xf0,0x74,0x21,0x2f,0xf5,
+0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xf7,0xf0,0x90,0x91,0x76,0xe0,0xfe,0xa3,
+0xe0,0xff,0x22,0xef,0x60,0x0b,0x90,0x91,0x51,0xe0,0xb4,0x01,0x10,0xe4,0xff,0x80,
+0x09,0x90,0x91,0x51,0xe0,0xb4,0x01,0x05,0x7f,0x01,0x12,0x68,0x87,0x22,0x90,0x01,
+0x37,0x74,0x02,0xf0,0x90,0x05,0x22,0x74,0xff,0xf0,0x12,0x68,0x46,0xef,0x70,0x06,
+0x90,0x01,0xc8,0x74,0xfd,0xf0,0x7d,0x02,0x7f,0x03,0x12,0x31,0x9d,0xe5,0x70,0x60,
+0x04,0x7f,0x01,0x11,0xb3,0x51,0x0c,0x53,0x6e,0xf0,0x43,0x6e,0x02,0x22,0xef,0x64,
+0x01,0x70,0x42,0x7d,0x78,0x7f,0x02,0x12,0x31,0x2c,0x7d,0x02,0x7f,0x03,0x12,0x31,
+0x2c,0x90,0x01,0x36,0x74,0x03,0xf0,0xfd,0x7f,0x02,0x12,0x31,0x9d,0x7d,0x10,0x7f,
+0x03,0x12,0x31,0x49,0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x12,
+0x47,0x23,0xe4,0xff,0x11,0xb3,0x90,0x06,0x04,0xe0,0x54,0x7f,0xf0,0x90,0x06,0x0a,
+0xe0,0x54,0xf8,0xf0,0x22,0x90,0x01,0x36,0x74,0x7b,0xf0,0xa3,0x74,0x02,0xf0,0x7d,
+0x7b,0xff,0x12,0x31,0x9d,0x7d,0x02,0x7f,0x03,0x12,0x31,0x9d,0x7d,0x10,0x7f,0x03,
+0x12,0x31,0x49,0x90,0x06,0x04,0xe0,0x44,0x80,0xf0,0x90,0x06,0x0a,0xe0,0x44,0x07,
+0xf0,0x12,0x64,0x11,0xe5,0x6d,0x20,0xe0,0x05,0xe4,0x90,0x91,0x29,0xf0,0x22,0x8b,
+0x0e,0x8a,0x0f,0x89,0x10,0x12,0x62,0x3e,0xab,0x0e,0xaa,0x0f,0xa9,0x10,0x12,0x24,
+0x62,0xf5,0x70,0x14,0x60,0x0e,0x14,0x60,0x1e,0x14,0x60,0x2f,0x24,0x03,0x70,0x40,
+0x7f,0x01,0x80,0x3a,0xab,0x0e,0xaa,0x0f,0xa9,0x10,0x90,0x00,0x02,0x12,0x42,0x20,
+0xfd,0xe4,0xff,0x31,0xe1,0x80,0x27,0xab,0x0e,0xaa,0x0f,0xa9,0x10,0x90,0x00,0x02,
+0x12,0x42,0x20,0xfd,0x7f,0x01,0x31,0xe1,0x1f,0x80,0x13,0xab,0x0e,0xaa,0x0f,0xa9,
+0x10,0x90,0x00,0x02,0x12,0x42,0x20,0xfd,0x7f,0x02,0x31,0xe1,0xe4,0xff,0x11,0xfe,
+0x22,0xef,0x24,0xfe,0x60,0x0b,0x04,0x70,0x22,0x90,0x91,0x39,0x74,0x01,0xf0,0x80,
+0x16,0xed,0x70,0x0a,0x90,0x91,0x35,0xe0,0x90,0x91,0x39,0xf0,0x80,0x05,0x90,0x91,
+0x39,0xed,0xf0,0x90,0x91,0x39,0xe0,0x90,0x91,0x27,0xf0,0x22,0x7f,0x78,0x7e,0x08,
+0x12,0x22,0x65,0x90,0x90,0xd8,0x12,0x25,0x08,0x7f,0x04,0x7e,0x0c,0x12,0x22,0x65,
+0x90,0x90,0xdc,0x12,0x25,0x08,0x7f,0x00,0x7e,0x08,0x12,0x22,0x65,0x90,0x90,0xe0,
+0x12,0x25,0x08,0x90,0x91,0x51,0xe0,0x90,0x90,0xd8,0xb4,0x01,0x0d,0x12,0x43,0x09,
+0xef,0x54,0xc7,0xff,0xed,0x54,0xc7,0xfd,0x80,0x07,0x12,0x43,0x09,0xef,0x54,0xc7,
+0xff,0xec,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x78,0x7e,0x08,0x12,0x2b,0x08,0x90,
+0x90,0xdc,0x12,0x43,0x09,0xef,0x54,0x0f,0xff,0xec,0x90,0x80,0x96,0x12,0x25,0x08,
+0x7f,0x04,0x7e,0x0c,0x12,0x2b,0x08,0x90,0x90,0xe0,0x12,0x43,0x09,0xef,0x44,0x02,
+0xff,0xec,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x00,0x7e,0x08,0x12,0x2b,0x08,0x7f,
+0x70,0x7e,0x0e,0x12,0x22,0x65,0x90,0x90,0xe4,0x12,0x25,0x08,0x90,0x80,0x96,0x12,
+0x25,0x14,0x00,0x1b,0x25,0xa0,0x7f,0x70,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x68,
+0x12,0x25,0x14,0x00,0x00,0x00,0x00,0xe4,0xfd,0xff,0x12,0x30,0x2c,0x90,0x91,0x51,
+0xe0,0xb4,0x01,0x11,0x90,0x80,0x68,0x12,0x25,0x14,0x00,0x00,0x00,0x00,0xe4,0xfd,
+0x7f,0x01,0x12,0x30,0x2c,0x90,0x00,0x11,0xe0,0x54,0xf6,0xf0,0x80,0x08,0xf4,0xff,
+0x90,0x00,0x43,0xe0,0x5f,0xf0,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x7f,0x10,0xdf,
+0xfe,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x91,0x9b,
+0xed,0xf0,0x90,0x91,0x9a,0xef,0xf0,0xd3,0x94,0x07,0x50,0x63,0xe0,0xff,0x74,0x01,
+0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x47,0xe0,0x5f,
+0xf0,0x51,0xe6,0x90,0x91,0x9a,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,
+0x33,0xd8,0xfc,0xff,0x90,0x00,0x46,0xe0,0x4f,0xf0,0x51,0xe6,0x90,0x91,0x9b,0xe0,
+0x60,0x16,0x90,0x91,0x9a,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,
+0xd8,0xfc,0xff,0x90,0x00,0x45,0x80,0x66,0x90,0x91,0x9a,0xe0,0xff,0x74,0x01,0xa8,
+0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x45,0x80,0x6b,0x90,
+0x91,0x9a,0xe0,0x24,0xf8,0xf0,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,
+0x33,0xd8,0xfc,0xc4,0x54,0xf0,0x51,0xde,0x90,0x91,0x9a,0xe0,0xff,0x74,0x01,0xa8,
+0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x43,0xe0,0x4f,0xf0,0x51,
+0xe6,0x90,0x91,0x9b,0xe0,0x60,0x1b,0x90,0x91,0x9a,0xe0,0xff,0x74,0x01,0xa8,0x07,
+0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xff,0x90,0x00,0x42,0xe0,0x4f,
+0x80,0x1a,0x90,0x91,0x9a,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,
+0xd8,0xfc,0xc4,0x54,0xf0,0xf4,0xff,0x90,0x00,0x42,0xe0,0x5f,0xf0,0x51,0xe6,0xd0,
+0xd0,0x92,0xaf,0x22,0xf0,0x90,0x00,0x45,0xe0,0x54,0xfe,0xfd,0x7f,0x45,0xd3,0x10,
+0xaf,0x01,0xc3,0xc0,0xd0,0x8f,0x82,0x75,0x83,0x00,0xed,0xf0,0x51,0xe6,0xd0,0xd0,
+0x92,0xaf,0x22,0xef,0x14,0x60,0x30,0x14,0x60,0x66,0x24,0x02,0x60,0x02,0x81,0xaa,
+0x90,0x90,0xf3,0x74,0x02,0xf0,0x90,0x00,0x48,0xe0,0x44,0x0c,0xfd,0x7f,0x48,0x71,
+0xee,0x90,0x00,0x47,0xe0,0x44,0x08,0xfd,0x7f,0x47,0x71,0xee,0x90,0x00,0x45,0xe0,
+0x44,0x10,0xfd,0x7f,0x45,0x80,0x71,0xe4,0x90,0x90,0xf3,0xf0,0x90,0x90,0xef,0x12,
+0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x80,0x7e,0x08,0x12,0x2b,0x08,0x90,
+0x00,0x45,0xe0,0x44,0xef,0xfd,0x7f,0x45,0x71,0xee,0x90,0x00,0x45,0xe0,0x54,0xef,
+0xfd,0x7f,0x45,0x71,0xee,0x90,0x00,0x46,0xe0,0x44,0x10,0xfd,0x7f,0x46,0x80,0x38,
+0x90,0x90,0xf3,0x74,0x01,0xf0,0x90,0x90,0xf9,0x12,0x43,0x09,0x90,0x80,0x96,0x12,
+0x25,0x08,0x7f,0x80,0x7e,0x08,0x12,0x2b,0x08,0x90,0x00,0x45,0xe0,0x44,0x20,0xfd,
+0x7f,0x45,0x71,0xee,0x90,0x00,0x45,0xe0,0x44,0x10,0xfd,0x7f,0x45,0x71,0xee,0x90,
+0x00,0x46,0xe0,0x44,0x10,0xfd,0x7f,0x46,0x71,0xee,0x22,0x90,0x00,0x02,0x12,0x42,
+0x20,0x90,0x90,0xf5,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,0x25,0xe0,0x25,0xe0,0x90,
+0x90,0xf4,0xf0,0x12,0x24,0x62,0x25,0xe0,0x25,0xe0,0x90,0x90,0xf8,0xf0,0x90,0x05,
+0x60,0xe0,0x90,0x91,0x03,0xf0,0x90,0x05,0x61,0xe0,0x90,0x91,0x04,0xf0,0x90,0x05,
+0x62,0xe0,0x90,0x91,0x05,0xf0,0x90,0x05,0x63,0xe0,0x90,0x91,0x06,0xf0,0xa2,0xaf,
+0xe4,0x33,0x90,0x91,0x1c,0xf0,0xc2,0xaf,0x90,0x90,0xf4,0xe0,0xff,0x12,0x6e,0x67,
+0x90,0x91,0x1c,0xe0,0x24,0xff,0x92,0xaf,0x90,0x90,0xf5,0xe0,0x70,0x02,0xa1,0xb2,
+0x90,0x90,0xf4,0xe0,0x70,0x02,0xa1,0xb2,0x90,0x90,0xf8,0xe0,0x70,0x02,0xa1,0xb2,
+0xa2,0xaf,0xe4,0x33,0x90,0x91,0x1c,0xf0,0xc2,0xaf,0x90,0x91,0x07,0x74,0x01,0xf0,
+0x90,0x91,0x1c,0xe0,0x24,0xff,0x92,0xaf,0x71,0xe5,0x90,0x00,0x46,0xe0,0x44,0x01,
+0xfd,0x7f,0x46,0x71,0xee,0x90,0x90,0xed,0xe0,0x60,0x15,0x90,0x90,0xf9,0x12,0x43,
+0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x80,0x7e,0x08,0x12,0x2b,0x08,0x80,0x06,
+0x90,0x05,0x22,0x74,0x7f,0xf0,0x90,0x00,0x45,0xe0,0x54,0xef,0xfd,0x7f,0x45,0x71,
+0xee,0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,0x91,0x03,0xe0,0x90,0x05,0x84,0xf0,
+0x90,0x91,0x04,0xe0,0x90,0x05,0x85,0xf0,0x90,0x91,0x05,0xe0,0x90,0x05,0x86,0xf0,
+0x90,0x91,0x06,0xe0,0x90,0x05,0x87,0xf0,0xa2,0xaf,0xe4,0x33,0x90,0x91,0x1c,0xf0,
+0xc2,0xaf,0x90,0x01,0x3c,0xe0,0x44,0x20,0xf0,0x7d,0x20,0xe4,0xff,0x12,0x31,0xb7,
+0x80,0x2b,0x90,0x90,0xf5,0xe0,0x70,0x2d,0x90,0x91,0x07,0x71,0xe4,0x90,0x00,0x46,
+0xe0,0x54,0xfe,0xfd,0x7f,0x46,0x71,0xee,0x90,0x05,0x22,0xe4,0xf0,0xa2,0xaf,0x33,
+0x90,0x91,0x1c,0xf0,0xc2,0xaf,0x7d,0x20,0xe4,0xff,0x12,0x31,0x49,0x90,0x91,0x1c,
+0xe0,0x24,0xff,0x92,0xaf,0x22,0x8b,0x0e,0x8a,0x0f,0x89,0x10,0x90,0x00,0x02,0x12,
+0x42,0x20,0x90,0x90,0xf6,0xf0,0xe0,0x30,0xe0,0x4b,0x90,0x90,0xed,0x74,0x01,0xf0,
+0x7f,0x80,0x7e,0x08,0x12,0x22,0x65,0x90,0x90,0xef,0x12,0x25,0x08,0xab,0x0e,0xaa,
+0x0f,0xa9,0x10,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0xe4,0xfc,0xfd,0xfe,0x78,0x1a,
+0x12,0x24,0xf5,0xa8,0x04,0xa9,0x05,0xaa,0x06,0xab,0x07,0x90,0x90,0xef,0x12,0x43,
+0x09,0xec,0x54,0x03,0xfc,0x12,0x42,0xfc,0x90,0x90,0xf9,0x12,0x25,0x08,0x90,0x05,
+0x22,0xe4,0xf0,0x80,0x2d,0xe4,0x90,0x90,0xed,0xf0,0x7f,0x80,0x7e,0x08,0x12,0x22,
+0x65,0xec,0x54,0x03,0xfc,0xec,0x44,0xc0,0xfc,0x90,0x90,0xef,0x12,0x25,0x08,0x90,
+0x90,0xef,0x12,0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x80,0x7e,0x08,0x12,
+0x2b,0x08,0x90,0x90,0xf6,0xe0,0x30,0xe1,0x19,0x7d,0x0c,0x7f,0x47,0x71,0xee,0x90,
+0x00,0x48,0xe0,0x44,0x0c,0xfd,0x7f,0x48,0x71,0xee,0x90,0x00,0x46,0xe0,0x44,0x10,
+0x80,0x1c,0x90,0x00,0x47,0xe0,0x54,0xf3,0xfd,0x7f,0x47,0x71,0xee,0x90,0x00,0x48,
+0xe0,0x54,0xf3,0xfd,0x7f,0x48,0x71,0xee,0x90,0x00,0x46,0xe0,0x54,0xef,0xfd,0x7f,
+0x46,0x71,0xee,0xe4,0x90,0x90,0xf3,0xf0,0x22,0x90,0x01,0x3c,0x74,0xff,0xf0,0xa3,
+0xf0,0xa3,0xf0,0x90,0x01,0x34,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xfd,0x7f,0x54,
+0x71,0xee,0x7d,0xff,0x7f,0x55,0x71,0xee,0x7d,0xff,0x7f,0x56,0x71,0xee,0x7d,0xff,
+0x7f,0x57,0x61,0xee,0x90,0x01,0x30,0xe4,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,
+0x01,0x38,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xfd,0x7f,0x50,0x71,0xee,0xe4,0xfd,
+0x7f,0x51,0x71,0xee,0xe4,0xfd,0x7f,0x52,0x71,0xee,0xe4,0xfd,0x7f,0x53,0x61,0xee,
+0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x91,0x22,0xed,0xf0,0x90,0x91,0x21,0xef,
+0xf0,0xd3,0x94,0x07,0x50,0x4e,0xa3,0xe0,0x70,0x1a,0x90,0x91,0x21,0xe0,0xff,0x74,
+0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x47,0xe0,
+0x5f,0xf0,0x80,0x17,0x90,0x91,0x21,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,
+0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x47,0xe0,0x4f,0xf0,0x51,0xe6,0x90,0x91,0x21,
+0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,
+0x00,0x46,0x80,0x59,0x90,0x91,0x21,0xe0,0x24,0xf8,0xf0,0xa3,0xe0,0x70,0x1d,0x90,
+0x91,0x21,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,
+0x54,0xf0,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0x80,0x1a,0x90,0x91,0x21,0xe0,
+0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xff,
+0x90,0x00,0x43,0xe0,0x4f,0xf0,0x51,0xe6,0x90,0x91,0x21,0xe0,0xff,0x74,0x01,0xa8,
+0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,
+0x51,0xe6,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x00,0x49,0xe0,0x90,0x91,0x9f,0xf0,0xe0,
+0x54,0x0f,0xf0,0x44,0xf0,0xfd,0x7f,0x49,0x71,0xee,0x90,0x91,0x9f,0xe0,0x44,0xb0,
+0xfd,0x7f,0x49,0x61,0xee,0x12,0x47,0xe6,0xbf,0x01,0x10,0x90,0x02,0x09,0xe0,0xff,
+0x7d,0x01,0x12,0x48,0x22,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0x75,0x28,0x33,0xe4,
+0xf5,0x29,0x75,0x2a,0x07,0xf5,0x2b,0x90,0x01,0x30,0xe5,0x28,0xf0,0xa3,0xe5,0x29,
+0xf0,0xa3,0xe5,0x2a,0xf0,0xa3,0xe5,0x2b,0xf0,0x22,0xe4,0x90,0x91,0x0e,0xf0,0xa3,
+0xf0,0x75,0x8e,0x02,0xf1,0x25,0xd1,0xe8,0x90,0x91,0x4f,0xef,0xf0,0xf1,0x0b,0x90,
+0x91,0x51,0xef,0xf0,0xf1,0x60,0x90,0x91,0x3d,0xee,0xf0,0xa3,0xef,0xf0,0xe4,0xf5,
+0x57,0xf1,0x02,0x12,0x61,0xc4,0x12,0x2e,0x01,0x12,0x44,0xff,0x11,0x0c,0xf1,0x36,
+0xd1,0xfb,0xd1,0xd0,0x12,0x44,0xfe,0x31,0x13,0x12,0x44,0xf4,0x12,0x6e,0x09,0x90,
+0x91,0x10,0xe5,0xd9,0xf0,0x12,0x4e,0xb9,0xc2,0xaf,0x90,0x00,0x80,0xe0,0x44,0x40,
+0xf0,0x12,0x4a,0xe6,0x75,0xe8,0x03,0x43,0xa8,0x85,0xd2,0xaf,0x90,0x91,0x0e,0xe0,
+0x64,0x01,0xf0,0x24,0x2a,0x90,0x01,0xc4,0xf0,0x74,0x50,0xa3,0xf0,0xe5,0x57,0x30,
+0xe2,0x10,0x12,0x5f,0xf0,0xbf,0x01,0x0a,0xc2,0xaf,0x53,0x57,0xfb,0xd2,0xaf,0x12,
+0x71,0x97,0xe5,0x57,0x30,0xe4,0x0a,0xc2,0xaf,0x53,0x57,0xef,0xd2,0xaf,0x12,0x60,
+0x2d,0x90,0x90,0xf7,0xe0,0x70,0x03,0x12,0x70,0x74,0x11,0xe7,0x90,0x91,0x3f,0xe0,
+0x90,0x01,0xba,0xf0,0x80,0xb6,0xe4,0x90,0x91,0x55,0xf0,0x90,0x91,0x53,0xe0,0x54,
+0x7f,0xf0,0xa3,0x74,0x0a,0xf0,0x22,0x90,0x06,0x34,0xe0,0x60,0x25,0x14,0x70,0x1b,
+0x7b,0x01,0x7a,0x06,0x79,0x35,0x7f,0xf9,0x7e,0x01,0x12,0x67,0xe4,0xbf,0x01,0x09,
+0x90,0x06,0x35,0xe0,0x54,0x0f,0xf0,0x80,0x04,0x80,0x00,0xe1,0x17,0xe4,0x90,0x06,
+0x34,0xf0,0x22,0x90,0x91,0x56,0xe0,0x54,0xfe,0xf0,0xe0,0x54,0x7f,0xf0,0x90,0x01,
+0x17,0xe0,0xfe,0x90,0x01,0x16,0xe0,0x7c,0x00,0x24,0x00,0xff,0xec,0x3e,0x90,0x91,
+0x5c,0xf0,0xa3,0xef,0xf0,0x90,0x01,0x04,0xe0,0x54,0x0f,0x90,0x91,0x1c,0xf0,0xe0,
+0xff,0x74,0x40,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,
+0xf9,0x90,0x91,0x5b,0xf0,0xee,0x90,0x91,0x5a,0xf0,0x90,0x91,0x5e,0xe0,0x54,0xfe,
+0xf0,0xe0,0x54,0xfd,0xf0,0xe0,0x54,0xfb,0xf0,0xe0,0x54,0xf7,0xf0,0xe0,0x54,0xef,
+0xf0,0xe0,0x54,0xdf,0xf0,0xe0,0x54,0xbf,0xf0,0xe0,0x54,0x7f,0xf0,0xe4,0xa3,0xf0,
+0xa3,0xf0,0xa3,0xe0,0x54,0xfe,0xf0,0xe0,0x54,0xfd,0xf0,0xe0,0x54,0xf7,0xf0,0x22,
+0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x12,0x24,0x62,0x54,0x01,0xff,0x90,0x91,0x56,
+0xe0,0x54,0xfe,0x4f,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,0x90,0x91,0x57,0xf0,0x90,
+0x00,0x02,0x12,0x42,0x20,0x90,0x91,0x58,0xf0,0x90,0x91,0x56,0xe0,0x30,0xe0,0x1a,
+0x90,0x06,0x09,0xe0,0x54,0xfe,0xf0,0x90,0x02,0x86,0xe0,0x44,0x04,0xf0,0x43,0x57,
+0x04,0x7d,0x08,0xe4,0xff,0x12,0x31,0x9d,0x80,0x12,0x7d,0x08,0xe4,0xff,0x12,0x31,
+0x2c,0x90,0x02,0x86,0xe0,0x54,0xfb,0xf0,0x31,0xf1,0x31,0x13,0xd0,0xd0,0x92,0xaf,
+0x22,0x90,0x06,0x90,0xe4,0xf0,0x21,0x5a,0x90,0x91,0x19,0x12,0x43,0x41,0xef,0x12,
+0x43,0x4a,0x52,0x30,0x01,0x52,0x39,0x02,0x52,0x5b,0x03,0x52,0x64,0x09,0x52,0x6c,
+0x0c,0x52,0x75,0x0d,0x52,0x7d,0x0e,0x52,0x8e,0x1a,0x52,0x96,0x2c,0x52,0x41,0x2d,
+0x52,0x4a,0x2e,0x52,0x9e,0x30,0x52,0x53,0x3b,0x52,0x86,0x3c,0x00,0x00,0x52,0xa6,
+0x90,0x91,0x19,0x12,0x43,0x21,0x02,0x64,0x72,0x90,0x91,0x19,0x12,0x43,0x21,0xc1,
+0xf5,0x90,0x91,0x19,0x12,0x43,0x21,0x02,0x65,0x8d,0x90,0x91,0x19,0x12,0x43,0x21,
+0x02,0x65,0xd5,0x90,0x91,0x19,0x12,0x43,0x21,0xe1,0x4b,0x90,0x91,0x19,0x12,0x43,
+0x21,0x02,0x66,0x0e,0x90,0x91,0x19,0x12,0x43,0x21,0x80,0x42,0x90,0x91,0x19,0x12,
+0x43,0x21,0x02,0x4c,0xab,0x90,0x91,0x19,0x12,0x43,0x21,0xe1,0x98,0x90,0x91,0x19,
+0x12,0x43,0x21,0x02,0x4d,0xe6,0x90,0x91,0x19,0x12,0x43,0x21,0x21,0x90,0x90,0x91,
+0x19,0x12,0x43,0x21,0xa1,0x9b,0x90,0x91,0x19,0x12,0x43,0x21,0x81,0x7a,0x90,0x91,
+0x19,0x12,0x43,0x21,0xe1,0x78,0x90,0x01,0xc6,0xe0,0x44,0x01,0xf0,0x22,0xd3,0x10,
+0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x91,0x1c,0x12,0x43,0x41,0x90,0x91,0x1c,0x12,0x43,
+0x21,0x90,0x00,0x01,0x12,0x42,0x97,0xfa,0xe5,0xf0,0x24,0x00,0xff,0xe4,0x3a,0xfe,
+0x90,0x91,0x1c,0x12,0x43,0x21,0x90,0x00,0x01,0xee,0x8f,0xf0,0x12,0x42,0xcf,0x12,
+0x24,0x62,0xff,0x60,0x2c,0xb5,0x72,0x16,0x90,0x91,0x1c,0x12,0x43,0x21,0x90,0x00,
+0x01,0x12,0x42,0x97,0x65,0x74,0x70,0x04,0xe5,0x73,0x65,0xf0,0x60,0x23,0x90,0x91,
+0x1c,0x12,0x43,0x21,0x90,0x00,0x01,0x12,0x42,0x97,0xff,0xae,0xf0,0x71,0x26,0x80,
+0x10,0x90,0x91,0x1c,0x12,0x43,0x21,0x12,0x24,0x62,0x65,0x72,0x60,0x03,0x12,0x44,
+0xe8,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x91,0x1f,0xee,0xf0,0xa3,0xef,0xf0,0x75,0x72,
+0x01,0x8e,0x73,0xf5,0x74,0xe4,0xfd,0x7f,0x0b,0x12,0x4f,0x10,0xe4,0xfd,0x7f,0x02,
+0x12,0x4f,0x10,0x71,0x6a,0xe4,0xff,0x71,0xcc,0xe4,0xf5,0x76,0x90,0x01,0xc9,0xe5,
+0x76,0xf0,0x90,0x91,0x1f,0xe0,0xfc,0xa3,0xe0,0xfd,0xec,0xfb,0x8d,0x44,0xe4,0xf5,
+0x45,0x7d,0x01,0x7f,0x60,0x7e,0x01,0x02,0x30,0x62,0x7f,0x0b,0x71,0xd9,0xef,0x65,
+0x75,0x60,0x10,0xe5,0x75,0xb4,0x01,0x05,0xe4,0xf5,0x75,0x80,0x03,0x75,0x75,0x01,
+0x7f,0x01,0x22,0x7f,0x00,0x22,0xe5,0x72,0x64,0x01,0x70,0x3f,0x71,0x6a,0xbf,0x01,
+0x04,0x7f,0x01,0x71,0xcc,0x90,0x00,0x46,0xe0,0x44,0x04,0xfd,0x7f,0x46,0x12,0x4b,
+0xee,0x90,0x00,0x44,0xe0,0x54,0xfb,0xfd,0x7f,0x44,0x12,0x4b,0xee,0x90,0x00,0x46,
+0xe0,0x54,0xfb,0xfd,0x7f,0x46,0x12,0x4b,0xee,0x7f,0x02,0x71,0xd9,0x8f,0x76,0x90,
+0x01,0xc9,0xe5,0x76,0xf0,0xb4,0x01,0x03,0x12,0x4f,0xd7,0x22,0x90,0x01,0xca,0xe5,
+0x75,0xf0,0xef,0x60,0x03,0x12,0x4f,0xd7,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
+0x90,0x91,0xa0,0xef,0xf0,0xd3,0x94,0x07,0x50,0x47,0xe0,0xff,0x74,0x01,0xa8,0x07,
+0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x46,0xe0,0x5f,0xf0,0x12,
+0x4a,0xe6,0x90,0x91,0xa0,0xe0,0xfd,0x74,0x01,0x7e,0x00,0xa8,0x05,0x08,0x80,0x05,
+0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x00,0x44,0xe0,0xfb,0xe4,0xfe,0xef,
+0x5b,0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,0x13,0xce,0x13,0xd8,0xf8,0xff,0x80,
+0x44,0x90,0x91,0xa0,0xe0,0x24,0xf8,0xf0,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,
+0x02,0xc3,0x33,0xd8,0xfc,0x12,0x4a,0xde,0x90,0x91,0xa0,0xe0,0xfd,0x74,0x01,0x7e,
+0x00,0xa8,0x05,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x00,
+0x42,0xe0,0xfb,0xe4,0xfe,0xef,0x5b,0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,0x13,
+0xce,0x13,0xd8,0xf8,0xff,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,
+0xd0,0xe4,0xf5,0x10,0x75,0x11,0x04,0xf5,0x12,0xf5,0x14,0xf5,0x15,0x90,0x02,0x09,
+0xe0,0xff,0x12,0x24,0x62,0xfe,0xef,0x2e,0xf5,0x13,0x30,0xe0,0x08,0x75,0x0e,0x00,
+0x75,0x0f,0x80,0x80,0x05,0xe4,0xf5,0x0e,0xf5,0x0f,0xe5,0x13,0xc3,0x13,0x90,0xfd,
+0x10,0xf0,0x74,0x20,0x25,0x10,0xf5,0x10,0xad,0x0f,0xe5,0x10,0x2d,0xff,0x24,0x01,
+0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x90,0x91,0x47,0xf0,0x74,0x02,0x2f,0xf5,
+0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0xfe,0xe5,0x10,0x2d,0x24,0x03,0xf5,0x82,0xe4,
+0x34,0xfc,0xf5,0x83,0xe0,0x24,0x00,0xff,0xe4,0x3e,0x90,0x91,0x48,0xf0,0xa3,0xef,
+0xf0,0x7f,0x04,0xe5,0x10,0x25,0x0f,0x2f,0x24,0x00,0xf5,0x82,0xe4,0x34,0xfc,0xf5,
+0x83,0xe0,0xfe,0x74,0x46,0x2f,0xf5,0x82,0xe4,0x34,0x91,0xf5,0x83,0xee,0xf0,0x0f,
+0xbf,0x08,0xe0,0x12,0x66,0x56,0xef,0x70,0x3f,0x90,0x01,0xc3,0xe0,0x60,0x25,0xc3,
+0xe5,0x15,0x94,0xe8,0xe5,0x14,0x94,0x03,0x40,0x09,0x90,0x01,0xc6,0xe0,0x44,0x10,
+0xf0,0x80,0x63,0x05,0x15,0xe5,0x15,0x70,0x02,0x05,0x14,0x7f,0x0a,0x7e,0x00,0x12,
+0x32,0x15,0x80,0xd5,0x90,0x01,0xc6,0xe0,0x90,0x01,0xc3,0x30,0xe2,0x05,0x74,0xfe,
+0xf0,0x80,0x43,0x74,0xff,0xf0,0x80,0x3e,0xe5,0x10,0xb4,0x78,0x23,0xe4,0xf5,0x10,
+0x05,0x13,0xe5,0x0f,0x64,0x80,0x45,0x0e,0x70,0x06,0xf5,0x0e,0xf5,0x0f,0x80,0x06,
+0x75,0x0e,0x00,0x75,0x0f,0x80,0xe5,0x13,0xc3,0x13,0x90,0xfd,0x10,0xf0,0x80,0x06,
+0x74,0x08,0x25,0x10,0xf5,0x10,0xe5,0x12,0x15,0x12,0x70,0x02,0x15,0x11,0xe5,0x12,
+0x45,0x11,0x60,0x02,0x81,0xb8,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x91,0x1c,0x12,0x43,
+0x41,0x12,0x24,0x62,0xff,0x54,0x01,0xfe,0x90,0x91,0x5e,0xe0,0x54,0xfe,0x4e,0xf0,
+0xef,0x54,0x04,0xff,0xe0,0x54,0xfb,0x4f,0xf0,0x12,0x24,0x62,0xff,0x54,0x02,0xfe,
+0x90,0x91,0x5e,0xe0,0x54,0xfd,0x4e,0xf0,0xef,0x54,0x08,0xff,0xe0,0x54,0xf7,0x4f,
+0xf0,0x12,0x24,0x62,0xff,0x54,0x10,0xfe,0x90,0x91,0x5e,0xe0,0x54,0xef,0x4e,0xf0,
+0xef,0x54,0x20,0xff,0xe0,0x54,0xdf,0x4f,0xf0,0x12,0x24,0x62,0xff,0x54,0x40,0xfe,
+0x90,0x91,0x5e,0xe0,0x54,0xbf,0x4e,0xf0,0xef,0x54,0x80,0xff,0xe0,0x54,0x7f,0x4f,
+0xf0,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x91,0x60,0xf0,0x90,0x00,0x01,0x12,0x42,
+0x20,0x90,0x91,0x5f,0xf0,0x90,0x00,0x03,0x12,0x42,0x20,0xff,0x54,0x01,0xfe,0x90,
+0x91,0x61,0xe0,0x54,0xfe,0x4e,0xf0,0xef,0x54,0x02,0xff,0xe0,0x54,0xfd,0x4f,0xf0,
+0x90,0x00,0x03,0x12,0x42,0x20,0x54,0x04,0xff,0x90,0x91,0x61,0xe0,0x54,0xfb,0x4f,
+0xf0,0x90,0x91,0x5e,0xe0,0x54,0x01,0x90,0x01,0xb8,0xf0,0x90,0x91,0x5e,0xe0,0xff,
+0xc4,0x13,0x54,0x01,0x90,0x01,0xb9,0xf0,0x90,0x91,0x61,0xe0,0x54,0x01,0x90,0x01,
+0xba,0xf0,0xa3,0x74,0xff,0xf0,0x12,0x24,0x62,0x20,0xe0,0x02,0x21,0xf1,0xe4,0xfd,
+0x7f,0x81,0x12,0x4b,0xee,0x90,0x91,0x1c,0x12,0x43,0x21,0x12,0x24,0x62,0xff,0xc3,
+0x13,0x30,0xe0,0x07,0x90,0x06,0x90,0xe0,0x44,0x02,0xf0,0xef,0x13,0x13,0x54,0x3f,
+0x30,0xe0,0x07,0x90,0x06,0x90,0xe0,0x44,0x04,0xf0,0x12,0x24,0x62,0x13,0x13,0x13,
+0x54,0x1f,0x30,0xe0,0x07,0x90,0x06,0x90,0xe0,0x44,0x08,0xf0,0x90,0x91,0x61,0xe0,
+0x30,0xe0,0x1c,0x90,0x91,0x5e,0xe0,0xc4,0x13,0x54,0x07,0x30,0xe0,0x07,0xa3,0xe0,
+0xff,0xe4,0xfd,0x80,0x07,0x90,0x91,0x5f,0xe0,0xff,0x7d,0x01,0x12,0x4a,0xf6,0x22,
+0x75,0x30,0x1f,0x75,0x31,0x01,0xe4,0xf5,0x32,0x90,0x01,0x38,0xe5,0x30,0xf0,0xa3,
+0xe5,0x31,0xf0,0xa3,0xe5,0x32,0xf0,0x22,0x90,0x00,0x02,0xe0,0x54,0xe0,0x7f,0x01,
+0x60,0x02,0x7f,0x00,0x22,0x12,0x24,0x62,0xf5,0x6d,0x22,0x90,0x01,0x64,0x74,0xa0,
+0xf0,0x22,0x90,0x91,0x51,0xe0,0x90,0x90,0xe8,0xf0,0x22,0x90,0x00,0xf3,0xe0,0x7f,
+0x00,0x30,0xe3,0x02,0x7f,0x01,0x22,0x90,0x06,0x34,0x74,0xff,0xf0,0xe4,0xa3,0xf0,
+0xa3,0xf0,0xa3,0xf0,0x22,0xe4,0x90,0x91,0x4e,0xf0,0x90,0x00,0x80,0xe0,0x44,0x80,
+0xfd,0x7f,0x80,0x02,0x4b,0xee,0x90,0x00,0xf3,0xe0,0x30,0xe2,0x0d,0x90,0x05,0x41,
+0x74,0x10,0xf0,0x90,0x05,0x5a,0xf0,0xa3,0xe4,0xf0,0x22,0x12,0x24,0x62,0x60,0x02,
+0x80,0x01,0xe4,0x90,0x91,0x31,0xf0,0x90,0x91,0x31,0xe0,0x90,0x01,0xe7,0xf0,0x22,
+0x90,0x91,0x51,0xe0,0xb4,0x01,0x0c,0x90,0x00,0xf2,0xe0,0x30,0xe7,0x05,0x7e,0xfd,
+0x7f,0x33,0x22,0x7e,0xfd,0x7f,0x2f,0x22,0x12,0x24,0x62,0xff,0x54,0x01,0xfe,0x90,
+0x91,0x53,0xe0,0x54,0xfe,0x4e,0xf0,0xef,0xc3,0x13,0x30,0xe0,0x0a,0x90,0x00,0x01,
+0x12,0x42,0x20,0x90,0x91,0x54,0xf0,0x22,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x90,
+0xf7,0xf0,0xe0,0x60,0x04,0xe0,0xf4,0x70,0x21,0xa2,0xaf,0xe4,0x33,0xf5,0x0e,0xc2,
+0xaf,0x90,0x00,0x47,0xe0,0x54,0xfb,0xfd,0x7f,0x47,0x12,0x4b,0xee,0x7d,0x40,0x7f,
+0x01,0x12,0x31,0x66,0xe5,0x0e,0x24,0xff,0x92,0xaf,0x22,0xc0,0xe0,0xc0,0xf0,0xc0,
+0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,
+0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,0x01,0xc4,0x74,0xcb,0xf0,0x74,0x57,
+0xa3,0xf0,0x90,0x01,0x34,0xe0,0x55,0x28,0xf5,0x2c,0x90,0x01,0x36,0xe0,0x55,0x2a,
+0xf5,0x2e,0xa3,0xe0,0x55,0x2b,0xf5,0x2f,0xe5,0x2c,0x30,0xe0,0x5a,0x90,0x01,0x34,
+0x74,0x01,0xf0,0x85,0xd9,0x54,0xe5,0x70,0x14,0x24,0xfd,0x50,0x02,0x80,0x48,0x90,
+0x91,0x3b,0xe0,0x60,0x3a,0x90,0x01,0x5b,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x04,0xf0,
+0x51,0x30,0xef,0x64,0x01,0x70,0x30,0x90,0x91,0x66,0xf0,0x90,0x91,0x2d,0xe0,0x90,
+0x91,0x67,0xf0,0xe4,0xfb,0xfd,0x7f,0x58,0x7e,0x01,0x12,0x44,0x59,0x90,0x01,0x5b,
+0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x01,0xf0,0x90,0x91,0x37,0xf0,0x80,0x08,0x51,
+0x30,0xbf,0x01,0x03,0x12,0x44,0xc2,0xe5,0x2c,0x30,0xe1,0x20,0x90,0x01,0x34,0x74,
+0x02,0xf0,0x85,0xd1,0x58,0x85,0xd2,0x59,0x85,0xd3,0x5a,0x85,0xd4,0x5b,0x85,0xd5,
+0x5c,0x85,0xd6,0x5d,0x85,0xd7,0x5e,0x85,0xd9,0x5f,0x71,0x5c,0xe5,0x2c,0x30,0xe3,
+0x10,0x90,0x01,0x34,0x74,0x08,0xf0,0x90,0x91,0x56,0xe0,0x30,0xe0,0x03,0x43,0x57,
+0x04,0xe5,0x2c,0x30,0xe4,0x09,0x90,0x01,0x34,0x74,0x10,0xf0,0x43,0x57,0x10,0xe5,
+0x2c,0x30,0xe5,0x26,0x90,0x01,0xcf,0xe0,0x30,0xe5,0x1f,0xe0,0x54,0xdf,0xf0,0x90,
+0x01,0x34,0x74,0x20,0xf0,0x75,0xa8,0x00,0x75,0xe8,0x00,0x12,0x4e,0xe4,0x90,0x00,
+0x03,0xe0,0x54,0xfb,0xf0,0x12,0x4a,0xe6,0x80,0xfe,0xe5,0x2c,0x30,0xe6,0x06,0x90,
+0x01,0x34,0x74,0x40,0xf0,0xe5,0x2e,0x30,0xe0,0x13,0x90,0x91,0x50,0x74,0x01,0xf0,
+0x90,0x01,0x36,0xf0,0x91,0x23,0x51,0x87,0x90,0x91,0x50,0xe4,0xf0,0xe5,0x2e,0x30,
+0xe1,0x3c,0x90,0x01,0x36,0x74,0x02,0xf0,0x43,0x57,0x40,0x90,0x01,0x02,0xe0,0x54,
+0x03,0x64,0x01,0x70,0x29,0x90,0x01,0x37,0xe0,0x30,0xe0,0x0a,0x74,0x01,0xf0,0x90,
+0x91,0x40,0xe4,0xf0,0x80,0x18,0x90,0x91,0x40,0xe0,0x04,0xf0,0xe0,0xc3,0x94,0x0a,
+0x40,0x0c,0xe4,0xf0,0x90,0x04,0x19,0xe0,0x30,0xe0,0x03,0x12,0x4f,0xf5,0xe5,0x2e,
+0x30,0xe2,0x19,0x90,0x01,0x36,0x74,0x04,0xf0,0x90,0x91,0x3a,0xe4,0xf0,0x90,0x05,
+0x58,0x74,0x03,0xf0,0x51,0xd8,0x90,0x91,0x3f,0xe0,0x04,0xf0,0xe5,0x2e,0x30,0xe3,
+0x28,0x90,0x01,0x36,0x74,0x08,0xf0,0xe5,0x6d,0x64,0x01,0x70,0x1c,0xe5,0x70,0x60,
+0x18,0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x90,0x91,0x66,0xe4,
+0x12,0x44,0x49,0x90,0x01,0x57,0x74,0x05,0xf0,0xe5,0x2e,0x30,0xe4,0x2b,0x90,0x01,
+0x36,0x74,0x10,0xf0,0xe5,0x6d,0xb4,0x01,0x20,0xe5,0x70,0x60,0x1c,0x90,0x01,0x57,
+0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x90,0x91,0x3c,0xe4,0xf0,0x53,0x71,0xfd,
+0xe5,0x71,0x54,0x07,0x70,0x03,0x12,0x44,0xc2,0xe5,0x2e,0x30,0xe5,0x1f,0x90,0x01,
+0x36,0x74,0x20,0xf0,0xe5,0x6d,0xb4,0x01,0x14,0xe5,0x70,0x60,0x10,0x90,0x91,0x3b,
+0xe0,0x64,0x02,0x60,0x05,0x12,0x44,0xc8,0x80,0x03,0x12,0x44,0x77,0xe5,0x2e,0x30,
+0xe6,0x1b,0x90,0x01,0x36,0x74,0x40,0xf0,0xe5,0x6d,0xb4,0x01,0x10,0xe5,0x70,0x60,
+0x0c,0x53,0x71,0xfe,0xe5,0x71,0x54,0x07,0x70,0x03,0x12,0x44,0xc2,0xe5,0x2f,0x30,
+0xe1,0x08,0x90,0x01,0x37,0x74,0x02,0xf0,0x71,0x7e,0x74,0xcb,0x04,0x90,0x01,0xc4,
+0xf0,0x74,0x57,0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,0x04,0xd0,0x03,0xd0,
+0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,0xd0,0xf0,0xd0,0xe0,0x32,
+0x90,0x04,0x1b,0xe0,0x54,0x7f,0x64,0x7f,0x7f,0x01,0x60,0x02,0x7f,0x00,0x22,0x51,
+0x30,0xef,0x64,0x01,0x60,0x08,0x90,0x01,0xb9,0x74,0x01,0xf0,0x80,0x30,0x90,0x91,
+0x37,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x22,0x90,0x91,0x36,0xe0,
+0x60,0x08,0x90,0x01,0xb9,0x74,0x04,0xf0,0x80,0x14,0xe5,0x6f,0x54,0x0f,0xd3,0x94,
+0x04,0x40,0x08,0x90,0x01,0xb9,0x74,0x08,0xf0,0x80,0x03,0x7f,0x01,0x22,0x90,0x01,
+0xb8,0x74,0x08,0xf0,0x7f,0x00,0x22,0x90,0x91,0x53,0xe0,0x30,0xe0,0x49,0xe5,0x6d,
+0x64,0x01,0x70,0x43,0x90,0x91,0x52,0xe0,0x04,0xf0,0xe5,0x70,0x64,0x03,0x60,0x05,
+0xe5,0x70,0xb4,0x06,0x0d,0x90,0x91,0x52,0xe0,0xff,0x74,0x01,0xd3,0x9f,0x50,0x14,
+0x80,0x07,0x90,0x91,0x52,0xe0,0xb4,0x0a,0x0b,0x90,0x91,0x55,0xe0,0x04,0xf0,0xe4,
+0x90,0x91,0x52,0xf0,0x90,0x91,0x55,0xe0,0xff,0x90,0x91,0x54,0xe0,0xb5,0x07,0x07,
+0x71,0x4e,0xe4,0x90,0x91,0x55,0xf0,0x22,0xe5,0x6d,0x64,0x01,0x70,0x63,0xe5,0x70,
+0x60,0x5f,0xe5,0x70,0x64,0x02,0x60,0x06,0xe5,0x70,0x64,0x05,0x70,0x27,0x90,0x06,
+0xab,0xe0,0x90,0x91,0x27,0xf0,0x90,0x06,0xaa,0xe0,0x90,0x91,0x39,0xf0,0x90,0x91,
+0x27,0xe0,0x70,0x07,0x90,0x91,0x39,0xe0,0xff,0x80,0x05,0x90,0x91,0x27,0xe0,0xff,
+0x90,0x91,0x27,0xef,0xf0,0x90,0x91,0x29,0xe0,0x60,0x03,0xe0,0x14,0xf0,0xe4,0x90,
+0x91,0x28,0xf0,0x90,0x01,0x57,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x53,0x71,0xfd,
+0x53,0x71,0xef,0xe5,0x70,0x14,0x24,0xfd,0x50,0x02,0x80,0x03,0x12,0x45,0xc7,0x71,
+0x42,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0xd0,0xd0,0x92,0xaf,0x22,0xe5,0x6e,
+0x30,0xe3,0x04,0xe4,0xff,0x80,0x02,0x7f,0x01,0x02,0x47,0xc9,0x90,0x91,0x08,0xe0,
+0x54,0xf0,0x44,0x03,0xf0,0x54,0x0f,0x44,0x80,0xf0,0x7b,0x00,0x7a,0x00,0x79,0x58,
+0x90,0x91,0x71,0x12,0x43,0x41,0x0b,0x7a,0x91,0x79,0x08,0x02,0x46,0xb7,0x90,0x91,
+0x80,0x12,0x25,0x14,0x00,0x00,0x00,0x00,0xe5,0x70,0x14,0x24,0xfd,0x50,0x02,0x80,
+0x21,0x90,0x91,0x3b,0xe0,0x60,0x06,0x7d,0x01,0x7f,0x0c,0x80,0x0d,0xe5,0x6e,0x54,
+0x0f,0xc3,0x94,0x04,0x50,0x07,0x7d,0x01,0x7f,0x04,0x12,0x47,0x27,0xe4,0xff,0x12,
+0x48,0xb3,0x22,0x51,0x30,0xef,0x64,0x01,0x60,0x08,0x90,0x01,0xb9,0x74,0x01,0xf0,
+0x80,0x58,0xe5,0x71,0x54,0x03,0x60,0x08,0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x4a,
+0xe5,0x6f,0x54,0x0f,0xd3,0x94,0x02,0x40,0x08,0x90,0x01,0xb9,0x74,0x04,0xf0,0x80,
+0x39,0xe5,0x71,0x30,0xe2,0x08,0x90,0x01,0xb9,0x74,0x08,0xf0,0x80,0x2c,0xe5,0x71,
+0x30,0xe4,0x08,0x90,0x01,0xb9,0x74,0x10,0xf0,0x80,0x1f,0x90,0x91,0x29,0xe0,0x60,
+0x08,0x90,0x01,0xb9,0x74,0x20,0xf0,0x80,0x11,0x90,0x91,0x31,0xe0,0x60,0x08,0x90,
+0x01,0xb9,0x74,0x80,0xf0,0x80,0x03,0x7f,0x01,0x22,0x90,0x01,0xb8,0x74,0x04,0xf0,
+0x7f,0x00,0x22,0xe4,0xfb,0x90,0x91,0x78,0x12,0x25,0x14,0x00,0x00,0x00,0x00,0xe5,
+0x70,0x70,0x02,0x81,0xb5,0xe5,0x6d,0x64,0x01,0x70,0x7a,0xe5,0x70,0x14,0x60,0x2b,
+0x24,0xfd,0x60,0x27,0x24,0x02,0x24,0xfb,0x50,0x02,0x80,0x21,0x90,0x91,0x27,0xe0,
+0x14,0xf0,0xe0,0x60,0x04,0xa3,0xe0,0x60,0x14,0x90,0x91,0x27,0xe0,0x70,0x08,0x90,
+0x91,0x39,0xe0,0x90,0x91,0x27,0xf0,0x7b,0x01,0x80,0x02,0x7b,0x01,0xeb,0x60,0x45,
+0x43,0x71,0x10,0xe4,0x90,0x91,0x66,0xf0,0x90,0x91,0x3a,0xe0,0x75,0xf0,0x05,0xa4,
+0xff,0x90,0x91,0x34,0xe0,0x2f,0x12,0x44,0x4e,0x90,0x01,0x57,0x74,0x05,0xf0,0xe5,
+0x6e,0x54,0x0f,0xc3,0x94,0x04,0x50,0x07,0x7d,0x01,0x7f,0x04,0x12,0x47,0x27,0x90,
+0x91,0x2e,0xe0,0x60,0x10,0x90,0x91,0x2c,0xe0,0x90,0x07,0x78,0x60,0x04,0x74,0x0d,
+0xf0,0x22,0x74,0x09,0xf0,0x22,0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,
+0x75,0xd0,0x00,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,
+0x06,0xc0,0x07,0x90,0x01,0xc4,0x74,0xb6,0xf0,0x74,0x5c,0xa3,0xf0,0x53,0x91,0xef,
+0x90,0x00,0x51,0xe0,0xff,0x90,0x00,0x55,0xe0,0x5f,0xf5,0x3d,0x90,0x00,0x52,0xe0,
+0xff,0x90,0x00,0x56,0xe0,0x5f,0xf5,0x3e,0xe5,0x3d,0x30,0xe4,0x06,0x90,0x00,0x55,
+0x74,0x10,0xf0,0xe5,0x3d,0x30,0xe5,0x06,0x90,0x00,0x55,0x74,0x20,0xf0,0xe5,0x3d,
+0x30,0xe6,0x1b,0x90,0x00,0x55,0x74,0x40,0xf0,0x90,0x90,0xf6,0xe0,0x54,0x03,0xff,
+0xbf,0x03,0x0b,0x90,0x90,0xf3,0xe0,0x60,0x05,0x7f,0x01,0x12,0x4c,0x03,0xe5,0x3d,
+0x30,0xe7,0x15,0x90,0x00,0x55,0x74,0x80,0xf0,0x90,0x90,0xf6,0xe0,0x54,0x03,0xff,
+0xbf,0x03,0x05,0x7f,0x02,0x12,0x4c,0x03,0xe5,0x3e,0x30,0xe0,0x06,0x90,0x00,0x56,
+0x74,0x01,0xf0,0xe5,0x3e,0x30,0xe1,0x06,0x90,0x00,0x56,0x74,0x02,0xf0,0xe5,0x3e,
+0x30,0xe2,0x06,0x90,0x00,0x56,0x74,0x04,0xf0,0xe5,0x3e,0x30,0xe3,0x06,0x90,0x00,
+0x56,0x74,0x08,0xf0,0x90,0x01,0xc4,0x74,0xb6,0xf0,0x74,0x5c,0xa3,0xf0,0xd0,0x07,
+0xd0,0x06,0xd0,0x05,0xd0,0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,
+0xd0,0x82,0xd0,0x83,0xd0,0xf0,0xd0,0xe0,0x32,0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,
+0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,
+0xc0,0x05,0xc0,0x06,0xc0,0x07,0x75,0x0d,0x00,0x90,0x01,0xc4,0x74,0x99,0xf0,0x74,
+0x5d,0xa3,0xf0,0x53,0x91,0xdf,0x90,0x01,0x3c,0xe0,0x55,0x30,0xf5,0x34,0xa3,0xe0,
+0x55,0x31,0xf5,0x35,0xa3,0xe0,0x55,0x32,0xf5,0x36,0xa3,0xe0,0x55,0x33,0xf5,0x37,
+0xe5,0x34,0x30,0xe0,0x06,0x90,0x01,0x3c,0x74,0x01,0xf0,0xe5,0x34,0x30,0xe1,0x08,
+0x90,0x01,0x3c,0x74,0x02,0xf0,0xf1,0x57,0xe5,0x34,0x30,0xe2,0x3a,0x90,0x01,0x3c,
+0x74,0x04,0xf0,0x90,0x06,0x92,0xe0,0x30,0xe0,0x25,0x90,0x91,0x66,0xe4,0xf0,0x90,
+0x91,0x2d,0xe0,0x90,0x91,0x67,0xf0,0xe4,0xfb,0xfd,0x7f,0x58,0x7e,0x01,0x12,0x44,
+0x59,0x90,0x01,0x5b,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x01,0xf0,0x80,0x08,0x90,
+0x91,0x37,0xe4,0xf0,0x12,0x44,0xc2,0xe5,0x34,0x30,0xe3,0x3a,0x90,0x01,0x3c,0x74,
+0x08,0xf0,0x90,0x06,0x92,0xe0,0x30,0xe1,0x25,0x90,0x91,0x66,0xe4,0xf0,0x90,0x91,
+0x2d,0xe0,0x90,0x91,0x67,0xf0,0xe4,0xfb,0xfd,0x7f,0x5c,0x7e,0x01,0x12,0x44,0x59,
+0x90,0x01,0x5f,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x02,0xf0,0x80,0x08,0x90,0x91,
+0x36,0xe4,0xf0,0x12,0x44,0xc2,0xe5,0x34,0x30,0xe4,0x09,0x90,0x01,0x3c,0x74,0x10,
+0xf0,0x12,0x53,0x86,0xe5,0x34,0x30,0xe5,0x09,0x90,0x01,0x3c,0x74,0x20,0xf0,0x12,
+0x6e,0xb9,0xe5,0x35,0x30,0xe0,0x5a,0x90,0x01,0x3d,0x74,0x01,0xf0,0x90,0x01,0x2f,
+0xe0,0x44,0x7f,0xf0,0x90,0x00,0x83,0xe0,0x54,0x0f,0xf5,0x0d,0xb4,0x01,0x02,0x80,
+0x1c,0xe5,0x0d,0xb4,0x02,0x05,0x90,0x00,0x83,0x80,0x12,0xe5,0x0d,0xb4,0x04,0x05,
+0x90,0x00,0x83,0x80,0x08,0xe5,0x0d,0xb4,0x0c,0x08,0x90,0x00,0x83,0xe0,0xf5,0x6f,
+0x80,0x06,0x90,0x01,0xbe,0xe0,0x04,0xf0,0x90,0x01,0xbb,0xe5,0x6f,0xf0,0xe5,0x6f,
+0x30,0xe0,0x03,0xa3,0x80,0x03,0x90,0x01,0xbd,0xe0,0x04,0xf0,0xf1,0x38,0x12,0x44,
+0xc2,0xe5,0x35,0x30,0xe2,0x06,0x90,0x01,0x3d,0x74,0x04,0xf0,0xe5,0x36,0x30,0xe0,
+0x06,0x90,0x01,0x3e,0x74,0x01,0xf0,0xe5,0x36,0x30,0xe1,0x06,0x90,0x01,0x3e,0x74,
+0x02,0xf0,0x74,0x99,0x04,0x90,0x01,0xc4,0xf0,0x74,0x5d,0xa3,0xf0,0xd0,0x07,0xd0,
+0x06,0xd0,0x05,0xd0,0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,
+0x82,0xd0,0x83,0xd0,0xf0,0xd0,0xe0,0x32,0xe5,0x6f,0x30,0xe6,0x19,0xe5,0x6f,0x54,
+0x0f,0xff,0x90,0x91,0x24,0xe0,0xfe,0x4f,0x90,0x01,0x2f,0xf0,0xee,0x64,0x80,0x90,
+0x91,0x24,0xf0,0x53,0x6f,0xbf,0x22,0xe4,0x90,0x91,0x0d,0xf0,0xe5,0x70,0x70,0x02,
+0xe1,0xe1,0x90,0x91,0x3c,0xe0,0x60,0x0d,0xe4,0xf0,0x53,0x71,0xfd,0xe5,0x71,0x54,
+0x07,0x70,0x6e,0x80,0x69,0x90,0x91,0x28,0xe0,0x04,0xf0,0x53,0x71,0xef,0x90,0x91,
+0x3a,0xe0,0x04,0xf0,0x90,0x91,0x0d,0xe0,0xf9,0xff,0x7e,0x00,0x24,0x01,0xfd,0xee,
+0x33,0xfc,0x90,0x91,0x3a,0xe0,0xb5,0x05,0x06,0xe4,0xb5,0x04,0x02,0x80,0x12,0xef,
+0x24,0x02,0xff,0xe4,0x3e,0xfe,0x90,0x91,0x3a,0xe0,0xb5,0x07,0x0a,0xe4,0xb5,0x06,
+0x06,0x90,0x05,0x58,0xe0,0x04,0xf0,0xe9,0xff,0x90,0x91,0x2f,0xe0,0x2f,0xff,0xe4,
+0x33,0xfe,0x90,0x91,0x28,0xe0,0xd3,0x9f,0xee,0x64,0x80,0xf8,0x74,0x80,0x98,0x40,
+0x0d,0xe5,0x6d,0xb4,0x01,0x0b,0xa3,0xe0,0x70,0x07,0xe0,0x04,0xf0,0x22,0x12,0x44,
+0xc2,0x22,0x8f,0x20,0x8c,0x21,0x8d,0x22,0x22,0x8f,0x23,0x8c,0x24,0x8d,0x25,0x22,
+0xe4,0x90,0x91,0x11,0xf0,0xa3,0xf0,0x90,0x02,0x86,0xe0,0x20,0xe1,0x2c,0xc3,0x90,
+0x91,0x12,0xe0,0x94,0x20,0x90,0x91,0x11,0xe0,0x94,0x03,0x40,0x0a,0x90,0x01,0xc6,
+0xe0,0x44,0x20,0xf0,0x7f,0x00,0x22,0x90,0x91,0x11,0xe4,0x75,0xf0,0x01,0x12,0x42,
+0x81,0x7f,0x01,0x7e,0x00,0x12,0x32,0x15,0x80,0xcd,0x7f,0x01,0x22,0x90,0x01,0xcc,
+0xe0,0x54,0x0f,0x90,0x91,0x11,0xf0,0x90,0x91,0x11,0xe0,0xfd,0x70,0x02,0x21,0x6f,
+0x90,0x91,0x9c,0xe0,0xff,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,
+0xce,0x33,0xce,0xd8,0xf9,0xff,0xef,0x5d,0x70,0x02,0x21,0x68,0x90,0x91,0x9c,0xe0,
+0x75,0xf0,0x04,0x90,0x01,0xd0,0x12,0x43,0x15,0xe0,0x90,0x91,0x12,0xf0,0x75,0x63,
+0x01,0x75,0x64,0x91,0x75,0x65,0x12,0x75,0x66,0x01,0x7b,0x01,0x7a,0x91,0x79,0x13,
+0x12,0x46,0x6d,0x90,0x91,0x13,0xe0,0xff,0xc4,0x13,0x13,0x13,0x54,0x01,0x90,0x91,
+0x9c,0x30,0xe0,0x59,0xe0,0x75,0xf0,0x02,0x90,0x00,0x88,0x12,0x43,0x15,0xe0,0x90,
+0x91,0x14,0xf0,0x90,0x91,0x9c,0xe0,0x75,0xf0,0x02,0x90,0x00,0x89,0x12,0x43,0x15,
+0xe0,0x90,0x91,0x15,0xf0,0x90,0x91,0x9c,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd1,0x12,
+0x43,0x15,0xe0,0x90,0x91,0x16,0xf0,0x90,0x91,0x9c,0xe0,0x75,0xf0,0x04,0x90,0x01,
+0xd2,0x12,0x43,0x15,0xe0,0x90,0x91,0x17,0xf0,0x90,0x91,0x9c,0xe0,0x75,0xf0,0x04,
+0x90,0x01,0xd3,0x12,0x43,0x15,0xe0,0x90,0x91,0x18,0xf0,0x80,0x33,0xe0,0x75,0xf0,
+0x04,0x90,0x01,0xd1,0x12,0x43,0x15,0xe0,0x90,0x91,0x14,0xf0,0x90,0x91,0x9c,0xe0,
+0x75,0xf0,0x04,0x90,0x01,0xd2,0x12,0x43,0x15,0xe0,0x90,0x91,0x15,0xf0,0x90,0x91,
+0x9c,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd3,0x12,0x43,0x15,0xe0,0x90,0x91,0x16,0xf0,
+0xef,0x54,0x7f,0xff,0x7b,0x01,0x7a,0x91,0x79,0x14,0x12,0x51,0xf8,0x90,0x91,0x11,
+0xe0,0xff,0x90,0x91,0x9c,0xe0,0xfe,0x74,0x01,0xa8,0x06,0x08,0x80,0x02,0xc3,0x33,
+0xd8,0xfc,0xf4,0x5f,0x90,0x91,0x11,0xf0,0x90,0x91,0x9c,0xe0,0xff,0x74,0x01,0xa8,
+0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0x90,0x01,0xcc,0xf0,0x90,0x91,0x9c,0xe0,
+0x04,0xf0,0xe0,0x54,0x03,0xf0,0x01,0x37,0x90,0x01,0xc6,0xe0,0x44,0x02,0xf0,0x22,
+0xad,0x07,0x74,0x11,0x2d,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x01,0xf0,
+0x90,0x04,0x80,0xe0,0x54,0x0f,0xfc,0x74,0x14,0x2d,0xf5,0x82,0xe4,0x34,0xfc,0xf5,
+0x83,0xe0,0x54,0xc0,0x4c,0xfd,0x74,0x14,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,
+0xed,0xf0,0x22,0xef,0x60,0x0f,0x74,0x21,0x2d,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,
+0xe0,0x44,0x10,0xf0,0x22,0x74,0x21,0x2d,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,
+0x54,0xef,0xf0,0x22,0xe4,0xf5,0x6d,0xf5,0x71,0xf5,0x70,0x75,0x6f,0x0c,0x75,0x6e,
+0x0c,0x90,0x91,0x3b,0xf0,0x90,0x91,0x37,0xf0,0x90,0x91,0x36,0xf0,0x90,0x91,0x39,
+0x04,0xf0,0x90,0x91,0x27,0xf0,0xe4,0x90,0x91,0x3c,0xf0,0x90,0x91,0x29,0xf0,0x90,
+0x91,0x34,0x74,0x07,0xf0,0xe4,0x90,0x91,0x28,0xf0,0x90,0x91,0x32,0xf0,0xa3,0x74,
+0x03,0xf0,0x90,0x91,0x2f,0x74,0x0a,0xf0,0xa3,0x74,0x05,0xf0,0x90,0x91,0x2d,0x74,
+0x14,0xf0,0x90,0x91,0x35,0x74,0x05,0xf0,0xe4,0x90,0x91,0x2b,0xf0,0x90,0x91,0x25,
+0xf0,0x90,0x91,0x50,0xf0,0x90,0x91,0x31,0xf0,0x90,0x91,0x3a,0xf0,0x90,0x91,0x26,
+0xf0,0x90,0x91,0x38,0xf0,0x90,0x91,0x2e,0xf0,0x90,0x91,0x2c,0xf0,0x22,0xe4,0x90,
+0x91,0x3c,0xf0,0x90,0x91,0x28,0xf0,0xf5,0x71,0x22,0x90,0x06,0x04,0xe0,0x54,0xbf,
+0xf0,0xef,0x60,0x0a,0xe5,0x6d,0xb4,0x01,0x05,0xe4,0xff,0x12,0x47,0xc9,0x53,0x6e,
+0xf0,0x43,0x6e,0x0c,0x22,0x90,0x91,0x9d,0xef,0xf0,0x51,0x7e,0x90,0x91,0x9d,0xe0,
+0x60,0x05,0x90,0x05,0x22,0xe4,0xf0,0x53,0x6e,0xf0,0x43,0x6e,0x04,0x22,0x90,0x00,
+0x11,0xe0,0x44,0x09,0xf0,0x12,0x4a,0xe6,0x90,0x90,0xd8,0x12,0x43,0x09,0x90,0x80,
+0x96,0x12,0x25,0x08,0x7f,0x78,0x7e,0x08,0x12,0x2b,0x08,0x90,0x90,0xdc,0x12,0x43,
+0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x04,0x7e,0x0c,0x12,0x2b,0x08,0x90,0x90,
+0xe0,0x12,0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x00,0x7e,0x08,0x12,0x2b,
+0x08,0x90,0x90,0xe4,0x12,0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x70,0x7e,
+0x0e,0x12,0x2b,0x08,0x90,0x80,0x68,0x12,0x25,0x14,0x00,0x03,0x2d,0x95,0xe4,0xfd,
+0xff,0x12,0x30,0x2c,0x90,0x91,0x51,0xe0,0xb4,0x01,0x11,0x90,0x80,0x68,0x12,0x25,
+0x14,0x00,0x03,0x2d,0x95,0xe4,0xfd,0x7f,0x01,0x12,0x30,0x2c,0x22,0x8f,0x77,0xe4,
+0x90,0x91,0x96,0xf0,0xa3,0xf0,0x90,0x01,0x09,0xe0,0x7f,0x00,0x30,0xe7,0x02,0x7f,
+0x01,0xef,0x65,0x77,0x60,0x3e,0xc3,0x90,0x91,0x97,0xe0,0x94,0x88,0x90,0x91,0x96,
+0xe0,0x94,0x13,0x40,0x08,0x90,0x01,0xc6,0xe0,0x44,0x80,0xf0,0x22,0x90,0x91,0x96,
+0xe4,0x75,0xf0,0x01,0x12,0x42,0x81,0x7f,0x14,0x7e,0x00,0x12,0x32,0x15,0xd3,0x90,
+0x91,0x97,0xe0,0x94,0x32,0x90,0x91,0x96,0xe0,0x94,0x00,0x40,0xb9,0x90,0x01,0xc7,
+0xe0,0x30,0xe0,0xb2,0x22,0x22,0x53,0x6e,0xf0,0x43,0x6e,0x01,0x71,0x55,0x71,0x67,
+0x53,0x6e,0xf0,0x43,0x6e,0x02,0x22,0x22,0x8f,0x78,0x12,0x47,0xe6,0xef,0x64,0x01,
+0x70,0x2e,0x90,0x91,0x44,0x12,0x48,0x1e,0xe5,0x78,0x60,0x10,0x74,0x21,0x2f,0xf5,
+0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x10,0xf0,0x80,0x0e,0x74,0x21,0x2f,0xf5,
+0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xef,0xf0,0x90,0x04,0x1f,0x74,0x20,0xf0,
+0x22,0xe4,0xfb,0x90,0x91,0x7c,0x12,0x25,0x14,0x00,0x00,0x00,0x00,0xe5,0x70,0x60,
+0x5f,0xe5,0x6d,0x64,0x01,0x70,0x59,0x0b,0x90,0x91,0x27,0xf0,0x04,0x60,0x51,0x43,
+0x71,0x10,0xe4,0x90,0x91,0x66,0xf0,0x90,0x91,0x3a,0xe0,0x75,0xf0,0x05,0xa4,0xff,
+0x90,0x91,0x34,0xe0,0x2f,0x90,0x91,0x67,0xf0,0xe4,0x1b,0x12,0x44,0x54,0x90,0x01,
+0x57,0x74,0x05,0xf0,0xe5,0x6e,0x54,0x0f,0xc3,0x94,0x04,0x50,0x07,0x7d,0x01,0x7f,
+0x04,0x12,0x47,0x27,0x90,0x91,0x2e,0xe0,0x60,0x11,0x90,0x91,0x2c,0xe0,0x90,0x07,
+0x78,0x60,0x05,0x74,0x0d,0xf0,0x80,0x03,0x74,0x09,0xf0,0x90,0x05,0x22,0xe4,0xf0,
+0x22,0x90,0x91,0x32,0xe0,0xa3,0xe0,0x90,0x05,0x58,0xf0,0x22,0xd3,0x10,0xaf,0x01,
+0xc3,0xc0,0xd0,0x90,0x91,0x84,0xee,0xf0,0xa3,0xef,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,
+0x90,0x91,0x84,0xe0,0xfe,0xa3,0xe0,0xf5,0x82,0x8e,0x83,0xe0,0x60,0x2d,0xc3,0x90,
+0x91,0x87,0xe0,0x94,0xe8,0x90,0x91,0x86,0xe0,0x94,0x03,0x40,0x0b,0x90,0x01,0xc6,
+0xe0,0x44,0x10,0xf0,0x7f,0x00,0x80,0x15,0x90,0x91,0x86,0xe4,0x75,0xf0,0x01,0x12,
+0x42,0x81,0x7f,0x0a,0x7e,0x00,0x12,0x32,0x15,0x80,0xc5,0x7f,0x01,0xd0,0xd0,0x92,
+0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x91,0x1c,0x12,0x43,0x41,0x90,
+0x91,0x1f,0x12,0x25,0x14,0x00,0x00,0x00,0x00,0x90,0x91,0x1c,0x12,0x43,0x21,0x90,
+0x00,0x01,0x12,0x42,0x20,0x90,0x91,0x3b,0xf0,0x90,0x00,0x03,0x12,0x42,0x20,0x90,
+0x91,0x25,0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0x54,0x01,0x90,0x91,0x26,0xf0,
+0xef,0xc3,0x13,0x54,0x01,0x90,0x91,0x2e,0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0xff,
+0x13,0x13,0x54,0x01,0x90,0x91,0x2c,0xf0,0x90,0x91,0x2e,0xe0,0x90,0x91,0x1f,0x70,
+0x26,0x12,0x25,0x14,0x00,0x00,0x02,0x10,0x90,0x91,0x1f,0x12,0x43,0x09,0x90,0x80,
+0x96,0x12,0x25,0x08,0x7f,0x60,0x7e,0x08,0x12,0x2b,0x08,0x90,0x91,0x1f,0x12,0x25,
+0x14,0x00,0x00,0x03,0x10,0x80,0x24,0x12,0x25,0x14,0x00,0x00,0x01,0x10,0x90,0x91,
+0x1f,0x12,0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x60,0x7e,0x08,0x12,0x2b,
+0x08,0x90,0x91,0x1f,0x12,0x25,0x14,0x00,0x00,0x03,0x00,0x90,0x91,0x1f,0x12,0x43,
+0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x70,0x7e,0x08,0x12,0x2b,0x08,0x90,0x91,
+0x26,0xe0,0x70,0x3d,0x90,0x91,0x38,0x74,0x01,0xf0,0x7f,0x00,0x7e,0x08,0x12,0x22,
+0x65,0x90,0x91,0x1f,0x12,0x25,0x08,0x90,0x91,0x1f,0x12,0x43,0x09,0xec,0x44,0x02,
+0xfc,0x90,0x91,0x1f,0x12,0x25,0x08,0x90,0x91,0x1f,0x12,0x43,0x09,0x90,0x80,0x96,
+0x12,0x25,0x08,0x7f,0x00,0x7e,0x08,0x12,0x2b,0x08,0x90,0x02,0x86,0xe0,0x54,0xfb,
+0xf0,0x90,0x91,0x1c,0x12,0x43,0x21,0x12,0x49,0x7f,0x90,0x01,0xe5,0xe5,0x70,0xf0,
+0x90,0x91,0x3b,0xe0,0x90,0x01,0xe6,0xf0,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x00,0x02,
+0x12,0x42,0x20,0xff,0x30,0xe0,0x25,0x12,0x24,0x62,0x90,0x91,0x2f,0xf0,0x90,0x00,
+0x01,0x12,0x42,0x20,0x90,0x91,0x30,0xf0,0xef,0xc3,0x13,0x54,0x7f,0x90,0x91,0x2d,
+0xf0,0x90,0x00,0x03,0x12,0x42,0x20,0x90,0x91,0x35,0xf0,0x22,0x90,0x91,0x2f,0x74,
+0x0a,0xf0,0x90,0x91,0x30,0x74,0x05,0xf0,0x90,0x91,0x2d,0x74,0x14,0xf0,0x90,0x91,
+0x35,0x74,0x05,0xf0,0x22,0x12,0x24,0x62,0x30,0xe0,0x19,0xc3,0x13,0x54,0x7f,0x90,
+0x91,0x34,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0x90,0x91,0x32,0xe4,0xf0,0xa3,
+0xef,0xf0,0x80,0x0f,0x90,0x91,0x34,0x74,0x07,0xf0,0x90,0x91,0x32,0xe4,0xf0,0xa3,
+0x74,0x03,0xf0,0x90,0x91,0x32,0xe0,0xa3,0xe0,0x90,0x05,0x58,0xf0,0x22,0x90,0x02,
+0x09,0xe0,0xfd,0x12,0x24,0x62,0xfe,0xaf,0x05,0xed,0x2e,0x90,0x91,0x41,0xf0,0x90,
+0x00,0x01,0x12,0x42,0x20,0xff,0xed,0x2f,0x90,0x91,0x42,0xf0,0x90,0x00,0x02,0x12,
+0x42,0x20,0xff,0xed,0x2f,0x90,0x91,0x43,0xf0,0x90,0x00,0x03,0x12,0x42,0x20,0xff,
+0xed,0x2f,0x90,0x91,0x44,0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0xae,0x05,0xed,
+0x2f,0x90,0x91,0x45,0xf0,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x91,0x47,
+0xe0,0x90,0x91,0x1d,0xf0,0x90,0x91,0x48,0xe0,0xf5,0x19,0xa3,0xe0,0xf5,0x1a,0xe4,
+0xf5,0x16,0x74,0x4a,0x25,0x16,0xf5,0x82,0xe4,0x34,0x91,0xf5,0x83,0xe0,0xff,0x74,
+0x1b,0x25,0x16,0xf8,0xa6,0x07,0x05,0x16,0xe5,0x16,0xb4,0x04,0xe5,0x90,0x91,0x1d,
+0xe0,0x12,0x43,0x4a,0x66,0xb3,0x00,0x67,0xdc,0x01,0x66,0xba,0x02,0x66,0xba,0x03,
+0x66,0xba,0x04,0x67,0xdc,0x05,0x67,0xac,0x80,0x67,0xc2,0x81,0x67,0xdc,0x82,0x00,
+0x00,0x67,0xd8,0xaf,0x1e,0x12,0x73,0xea,0xe1,0xdc,0x90,0x91,0x1d,0xe0,0xff,0xb4,
+0x02,0x08,0x90,0x91,0x1c,0x74,0x01,0xf0,0x80,0x0f,0xef,0x90,0x91,0x1c,0xb4,0x03,
+0x05,0x74,0x02,0xf0,0x80,0x03,0x74,0x04,0xf0,0xc3,0xe5,0x19,0x94,0x08,0x50,0x49,
+0xe4,0xf5,0x16,0x90,0x91,0x1c,0xe0,0xff,0xe5,0x16,0xc3,0x9f,0x40,0x02,0xe1,0xdc,
+0xc3,0xe5,0x19,0x94,0x01,0x50,0x14,0xe5,0x16,0x25,0x1a,0xff,0xc3,0x74,0x03,0x95,
+0x16,0x24,0x1b,0xf8,0xe6,0xfd,0x12,0x4b,0xee,0x80,0x1a,0xc3,0x74,0x03,0x95,0x16,
+0x24,0x1b,0xf8,0xe6,0xff,0xe5,0x16,0x7c,0x00,0x25,0x1a,0xfd,0xec,0x35,0x19,0x8d,
+0x82,0xf5,0x83,0xef,0xf0,0x05,0x16,0x80,0xba,0xc3,0xe5,0x19,0x94,0x10,0x40,0x02,
+0xe1,0xdc,0x90,0x91,0x1d,0xe0,0x64,0x04,0x60,0x02,0xe1,0xdc,0xaf,0x1c,0xfc,0xfd,
+0xfe,0x78,0x10,0x12,0x24,0xf5,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0xaf,0x1b,
+0xe4,0xfc,0xfd,0xfe,0x78,0x18,0x12,0x24,0xf5,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,
+0x00,0x12,0x42,0xfc,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0xaf,0x1d,0xe4,0xfc,
+0xfd,0xfe,0x78,0x08,0x12,0x24,0xf5,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0x12,
+0x42,0xfc,0xa8,0x04,0xa9,0x05,0xaa,0x06,0xab,0x07,0xaf,0x1e,0xe4,0xfc,0xfd,0xfe,
+0x12,0x42,0xfc,0xa3,0x12,0x25,0x08,0x90,0x91,0x1e,0x12,0x43,0x09,0x90,0x80,0x96,
+0x12,0x25,0x08,0xaf,0x1a,0xae,0x19,0x12,0x2b,0x08,0x80,0x30,0xe5,0x1d,0x7f,0x00,
+0xfe,0xef,0x25,0x1e,0xf5,0x18,0xe4,0x3e,0xf5,0x17,0xaf,0x18,0xfe,0x12,0x32,0x15,
+0x80,0x1a,0xe5,0x1d,0x7f,0x00,0xfe,0xef,0x25,0x1e,0xf5,0x18,0xe4,0x3e,0xf5,0x17,
+0xaf,0x18,0xfe,0x12,0x31,0x82,0x80,0x04,0x7f,0x00,0x80,0x02,0x7f,0x01,0xd0,0xd0,
+0x92,0xaf,0x22,0x22,0x8e,0x0e,0x8f,0x0f,0x8b,0x10,0x8a,0x11,0x89,0x12,0xe4,0x90,
+0x91,0x11,0xf0,0xef,0x90,0x00,0x31,0xf0,0x12,0x4a,0xe6,0xe5,0x0e,0x54,0x03,0xff,
+0x90,0x00,0x32,0xe0,0x54,0xfc,0x4f,0xf0,0x12,0x4a,0xe6,0x90,0x00,0x33,0xe0,0x54,
+0x7f,0xf0,0x12,0x4a,0xe6,0x90,0x00,0x33,0xe0,0x20,0xe7,0x0e,0x90,0x91,0x11,0xe0,
+0xc3,0x94,0x64,0x50,0x05,0xe0,0x04,0xf0,0x80,0xeb,0x90,0x91,0x11,0xe0,0xc3,0x94,
+0x64,0x50,0x10,0x90,0x00,0x30,0xe0,0xab,0x10,0xaa,0x11,0xa9,0x12,0x12,0x42,0x4d,
+0x7f,0x01,0x22,0x7f,0x00,0x22,0xe4,0x90,0x91,0x98,0xf0,0xa3,0xf0,0x90,0x05,0xf8,
+0xe0,0x70,0x0f,0xa3,0xe0,0x70,0x0b,0xa3,0xe0,0x70,0x07,0xa3,0xe0,0x70,0x03,0x7f,
+0x01,0x22,0xd3,0x90,0x91,0x99,0xe0,0x94,0xe8,0x90,0x91,0x98,0xe0,0x94,0x03,0x40,
+0x03,0x7f,0x00,0x22,0x7f,0x32,0x7e,0x00,0x12,0x32,0x15,0x90,0x91,0x98,0xe4,0x75,
+0xf0,0x01,0x12,0x42,0x81,0x80,0xc6,0xef,0x70,0x02,0x41,0x3d,0x90,0x90,0xe8,0xe0,
+0x60,0x02,0xc1,0x08,0x90,0x90,0xd4,0x12,0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,
+0x7f,0x8c,0x7e,0x08,0x12,0x2b,0x08,0x90,0x90,0x80,0x12,0x43,0x09,0x90,0x80,0x96,
+0x12,0x25,0x08,0x7f,0x44,0x7e,0x08,0x12,0x2b,0x08,0x90,0x90,0x84,0x12,0x43,0x09,
+0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x5c,0x7e,0x08,0x12,0x2b,0x08,0x90,0x90,0x88,
+0x12,0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x6c,0x7e,0x0e,0x12,0x2b,0x08,
+0x90,0x90,0x8c,0x12,0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x70,0x7e,0x0e,
+0x12,0x2b,0x08,0x90,0x90,0x90,0x12,0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,
+0x74,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x90,0x94,0x12,0x43,0x09,0x90,0x80,0x96,0x12,
+0x25,0x08,0x7f,0x78,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x90,0x98,0x12,0x43,0x09,0x90,
+0x80,0x96,0x12,0x25,0x08,0x7f,0x7c,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x90,0x9c,0x12,
+0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x80,0x7e,0x0e,0x12,0x2b,0x08,0x90,
+0x90,0xa0,0x12,0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x84,0x7e,0x0e,0x12,
+0x2b,0x08,0x90,0x90,0xa4,0x12,0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x88,
+0x7e,0x0e,0x12,0x2b,0x08,0x90,0x90,0xa8,0x12,0x43,0x09,0x90,0x80,0x96,0x12,0x25,
+0x08,0x7f,0x8c,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x90,0xac,0x12,0x43,0x09,0x90,0x80,
+0x96,0x12,0x25,0x08,0x7f,0xd0,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x90,0xb0,0x12,0x43,
+0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0xd4,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x90,
+0xb4,0x12,0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0xd8,0x7e,0x0e,0x12,0x2b,
+0x08,0x90,0x90,0xb8,0x12,0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0xdc,0x7e,
+0x0e,0x12,0x2b,0x08,0x90,0x90,0xbc,0x12,0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,
+0x7f,0xe0,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x90,0xc0,0x12,0x43,0x09,0x90,0x80,0x96,
+0x12,0x25,0x08,0x7f,0xec,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x90,0xc4,0x12,0x43,0x09,
+0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x04,0x7e,0x0c,0x12,0x2b,0x08,0x90,0x90,0xc8,
+0x12,0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x04,0x7e,0x0d,0x12,0x2b,0x08,
+0x90,0x90,0xcc,0x12,0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x0c,0x7e,0x09,
+0x12,0x2b,0x08,0x90,0x90,0xd0,0x12,0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,
+0x04,0x7e,0x08,0x12,0x2b,0x08,0x90,0x90,0xe8,0x74,0x01,0xf0,0x22,0x90,0x90,0xe8,
+0xe0,0x64,0x01,0x60,0x02,0xc1,0x08,0x7f,0x8c,0x7e,0x08,0x12,0x22,0x65,0x90,0x90,
+0xd4,0x12,0x25,0x08,0x7f,0x44,0x7e,0x08,0x12,0x22,0x65,0x90,0x90,0x80,0x12,0x25,
+0x08,0x7f,0x5c,0x7e,0x08,0x12,0x22,0x65,0x90,0x90,0x84,0x12,0x25,0x08,0x7f,0x6c,
+0x7e,0x0e,0x12,0x22,0x65,0x90,0x90,0x88,0x12,0x25,0x08,0x7f,0x70,0x7e,0x0e,0x12,
+0x22,0x65,0x90,0x90,0x8c,0x12,0x25,0x08,0x7f,0x74,0x7e,0x0e,0x12,0x22,0x65,0x90,
+0x90,0x90,0x12,0x25,0x08,0x7f,0x78,0x7e,0x0e,0x12,0x22,0x65,0x90,0x90,0x94,0x12,
+0x25,0x08,0x7f,0x7c,0x7e,0x0e,0x12,0x22,0x65,0x90,0x90,0x98,0x12,0x25,0x08,0x7f,
+0x80,0x7e,0x0e,0x12,0x22,0x65,0x90,0x90,0x9c,0x12,0x25,0x08,0x7f,0x84,0x7e,0x0e,
+0x12,0x22,0x65,0x90,0x90,0xa0,0x12,0x25,0x08,0x7f,0x88,0x7e,0x0e,0x12,0x22,0x65,
+0x90,0x90,0xa4,0x12,0x25,0x08,0x7f,0x8c,0x7e,0x0e,0x12,0x22,0x65,0x90,0x90,0xa8,
+0x12,0x25,0x08,0x7f,0xd0,0x7e,0x0e,0x12,0x22,0x65,0x90,0x90,0xac,0x12,0x25,0x08,
+0x7f,0xd4,0x7e,0x0e,0x12,0x22,0x65,0x90,0x90,0xb0,0x12,0x25,0x08,0x7f,0xd8,0x7e,
+0x0e,0x12,0x22,0x65,0x90,0x90,0xb4,0x12,0x25,0x08,0x7f,0xdc,0x7e,0x0e,0x12,0x22,
+0x65,0x90,0x90,0xb8,0x12,0x25,0x08,0x7f,0xe0,0x7e,0x0e,0x12,0x22,0x65,0x90,0x90,
+0xbc,0x12,0x25,0x08,0x7f,0xec,0x7e,0x0e,0x12,0x22,0x65,0x90,0x90,0xc0,0x12,0x25,
+0x08,0x7f,0x04,0x7e,0x0c,0x12,0x22,0x65,0x90,0x90,0xc4,0x12,0x25,0x08,0x7f,0x04,
+0x7e,0x0d,0x12,0x22,0x65,0x90,0x90,0xc8,0x12,0x25,0x08,0x7f,0x0c,0x7e,0x09,0x12,
+0x22,0x65,0x90,0x90,0xcc,0x12,0x25,0x08,0x7f,0x04,0x7e,0x08,0x12,0x22,0x65,0x90,
+0x90,0xd0,0x12,0x25,0x08,0x7f,0x8c,0x7e,0x08,0x12,0x22,0x65,0x90,0x91,0x88,0x12,
+0x25,0x08,0x90,0x91,0x88,0x12,0x43,0x09,0xed,0x44,0xc0,0xfd,0xec,0x90,0x91,0x88,
+0x12,0x25,0x08,0x90,0x91,0x88,0x12,0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,
+0x8c,0x7e,0x08,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x00,0x01,0x00,0x00,
+0x7f,0x44,0x7e,0x08,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x00,0xdb,0x25,
+0xa4,0x7f,0x5c,0x7e,0x08,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x20,0xdb,
+0x25,0xa4,0x7f,0x6c,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x20,
+0xdb,0x25,0xa4,0x7f,0x70,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,
+0x04,0x1b,0x25,0xa4,0x7f,0x74,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,
+0x14,0x04,0x1b,0x25,0xa4,0x7f,0x78,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,
+0x25,0x14,0x04,0x1b,0x25,0xa4,0x7f,0x7c,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,
+0x12,0x25,0x14,0x04,0x1b,0x25,0xa4,0x7f,0x80,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,
+0x96,0x12,0x25,0x14,0x63,0xdb,0x25,0xa4,0x7f,0x84,0x7e,0x0e,0x12,0x2b,0x08,0x90,
+0x80,0x96,0x12,0x25,0x14,0x04,0x1b,0x25,0xa4,0x7f,0x88,0x7e,0x0e,0x12,0x2b,0x08,
+0x90,0x80,0x96,0x12,0x25,0x14,0x20,0xdb,0x25,0xa4,0x7f,0x8c,0x7e,0x0e,0x12,0x2b,
+0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x20,0xdb,0x25,0xa4,0x7f,0xd0,0x7e,0x0e,0x12,
+0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x20,0xdb,0x25,0xa4,0x7f,0xd4,0x7e,0x0e,
+0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x20,0xdb,0x25,0xa4,0x7f,0xd8,0x7e,
+0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x00,0x1b,0x25,0xa4,0x7f,0xdc,
+0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x00,0x1b,0x25,0xa4,0x7f,
+0xe0,0x7e,0x0e,0x12,0x2b,0x08,0x90,0x80,0x96,0x12,0x25,0x14,0x24,0xdb,0x25,0xa4,
+0x7f,0xec,0x7e,0x0e,0x12,0x2b,0x08,0x7f,0x04,0x7e,0x0c,0x12,0x22,0x65,0x90,0x91,
+0x88,0x12,0x25,0x08,0x90,0x91,0x88,0x12,0x43,0x09,0xe4,0xff,0xec,0x90,0x91,0x88,
+0x12,0x25,0x08,0x90,0x91,0x88,0x12,0x43,0x09,0xef,0x44,0x11,0xff,0xec,0x90,0x91,
+0x88,0x12,0x25,0x08,0x90,0x91,0x88,0x12,0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,
+0x7f,0x04,0x7e,0x0c,0x12,0x2b,0x08,0x7f,0x04,0x7e,0x0d,0x12,0x22,0x65,0x90,0x91,
+0x88,0x12,0x25,0x08,0x90,0x91,0x88,0x12,0x43,0x09,0xef,0x54,0xf0,0xff,0xec,0x90,
+0x91,0x88,0x12,0x25,0x08,0x90,0x91,0x88,0x12,0x43,0x09,0xef,0x44,0x01,0xff,0xec,
+0x90,0x91,0x88,0x12,0x25,0x08,0x90,0x91,0x88,0x12,0x43,0x09,0x90,0x80,0x96,0x12,
+0x25,0x08,0x7f,0x04,0x7e,0x0d,0x12,0x2b,0x08,0x7f,0x0c,0x7e,0x09,0x12,0x22,0x65,
+0x90,0x91,0x88,0x12,0x25,0x08,0x90,0x91,0x88,0x12,0x43,0x09,0xe4,0xff,0xec,0x90,
+0x91,0x88,0x12,0x25,0x08,0x90,0x91,0x88,0x12,0x43,0x09,0xef,0x44,0x11,0xff,0xec,
+0x90,0x91,0x88,0x12,0x25,0x08,0x90,0x91,0x88,0x12,0x43,0x09,0x90,0x80,0x96,0x12,
+0x25,0x08,0x7f,0x0c,0x7e,0x09,0x12,0x2b,0x08,0x7f,0x0c,0x7e,0x09,0x12,0x22,0x65,
+0x90,0x91,0x88,0x12,0x25,0x08,0x90,0x91,0x88,0x12,0x43,0x09,0xed,0x54,0x0f,0xfd,
+0xec,0x54,0xf0,0xfc,0x90,0x91,0x88,0x12,0x25,0x08,0x90,0x91,0x88,0x12,0x43,0x09,
+0xed,0x44,0x10,0xfd,0xec,0x44,0x01,0xfc,0x90,0x91,0x88,0x12,0x25,0x08,0x90,0x91,
+0x88,0x12,0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x0c,0x7e,0x09,0x12,0x2b,
+0x08,0x7f,0x04,0x7e,0x08,0x12,0x22,0x65,0x90,0x91,0x88,0x12,0x25,0x08,0x90,0x91,
+0x88,0x12,0x43,0x09,0xef,0x54,0xf0,0xff,0xec,0x90,0x91,0x88,0x12,0x25,0x08,0x90,
+0x91,0x88,0x12,0x43,0x09,0xef,0x44,0x01,0xff,0xec,0x90,0x91,0x88,0x12,0x25,0x08,
+0x90,0x91,0x88,0x12,0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x04,0x7e,0x08,
+0x12,0x2b,0x08,0xe4,0x90,0x90,0xe8,0xf0,0x22,0xe4,0xfd,0x7f,0x45,0x12,0x4b,0xee,
+0x90,0x04,0xfd,0xe4,0xf0,0xa3,0xf0,0x90,0x90,0xf7,0xf0,0x90,0x90,0xfd,0xf0,0x90,
+0x91,0x00,0xf0,0x90,0x90,0xfe,0xf0,0x90,0x91,0x01,0xf0,0x90,0x90,0xff,0xf0,0x90,
+0x91,0x02,0xf0,0x90,0x90,0xe9,0x04,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,
+0x90,0xee,0xf0,0x90,0x90,0xf3,0xf0,0x90,0x90,0xf5,0xf0,0x90,0x91,0x07,0xf0,0x90,
+0x90,0xf8,0xf0,0x90,0x90,0xf4,0xf0,0x90,0x90,0xed,0xf0,0x90,0x00,0x51,0xe0,0x44,
+0xc0,0xfd,0x7f,0x51,0x02,0x4b,0xee,0x90,0x05,0x60,0xe0,0x90,0x91,0x03,0xf0,0x90,
+0x05,0x61,0xe0,0x90,0x91,0x04,0xf0,0x90,0x05,0x62,0xe0,0x90,0x91,0x05,0xf0,0x90,
+0x05,0x63,0xe0,0x90,0x91,0x06,0xf0,0xc3,0x74,0xff,0x9f,0xfe,0x90,0x91,0x04,0xe0,
+0xd3,0x9e,0x40,0x1e,0xe0,0x2f,0xf0,0xa3,0xe0,0xb4,0xff,0x0f,0xe4,0xf0,0xa3,0xe0,
+0xb4,0xff,0x03,0xe4,0xf0,0x22,0x90,0x91,0x06,0x80,0x03,0x90,0x91,0x05,0xe0,0x04,
+0xf0,0x22,0x90,0x91,0x04,0xe0,0x2f,0xf0,0x22,0x90,0x90,0xf5,0xe0,0x64,0x01,0x60,
+0x02,0xe1,0x6e,0x90,0x00,0x46,0xe0,0x44,0x01,0xfd,0x7f,0x46,0x12,0x4b,0xee,0x90,
+0x91,0x07,0xe0,0x70,0x32,0x90,0x90,0xed,0xe0,0x60,0x15,0x90,0x90,0xf9,0x12,0x43,
+0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x80,0x7e,0x08,0x12,0x2b,0x08,0x80,0x06,
+0x90,0x05,0x22,0x74,0x7f,0xf0,0x90,0x90,0xf4,0xe0,0xff,0xd1,0x67,0x90,0x91,0x07,
+0x74,0x01,0x12,0x4b,0xe4,0x80,0x40,0x90,0x91,0x07,0xe0,0x64,0x01,0x70,0x38,0x90,
+0x90,0xf8,0xe0,0xff,0xd1,0x67,0xe4,0x90,0x91,0x07,0xf0,0x90,0x00,0x45,0xe0,0x44,
+0x01,0xfd,0x7f,0x45,0x12,0x4b,0xee,0x90,0x90,0xed,0xe0,0x60,0x15,0x90,0x90,0xef,
+0x12,0x43,0x09,0x90,0x80,0x96,0x12,0x25,0x08,0x7f,0x80,0x7e,0x08,0x12,0x2b,0x08,
+0x80,0x05,0x90,0x05,0x22,0xe4,0xf0,0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,0x91,
+0x03,0xe0,0x90,0x05,0x84,0xf0,0x90,0x91,0x04,0xe0,0x90,0x05,0x85,0xf0,0x90,0x91,
+0x05,0xe0,0x90,0x05,0x86,0xf0,0x90,0x91,0x06,0xe0,0x90,0x05,0x87,0xf0,0x22,0x90,
+0x90,0xee,0xe0,0xc3,0x94,0x14,0x50,0x06,0xe0,0x04,0xf0,0x02,0x70,0x29,0x90,0x90,
+0xee,0xe0,0x64,0x14,0x60,0x03,0x02,0x70,0x29,0x90,0x90,0xfd,0xe0,0x70,0x25,0x90,
+0x91,0x00,0xe0,0x70,0x1f,0x90,0x90,0xfe,0xe0,0x70,0x19,0x90,0x91,0x01,0xe0,0x70,
+0x13,0x90,0x90,0xff,0xe0,0x70,0x0d,0x90,0x91,0x02,0xe0,0x70,0x07,0x90,0x04,0xfd,
+0xe0,0x54,0xfe,0xf0,0x90,0x90,0xfd,0xe0,0x90,0x04,0x44,0xf0,0x90,0x90,0xfe,0xe0,
+0x90,0x04,0x45,0xf0,0x90,0x90,0xff,0xe0,0x90,0x04,0x46,0xf0,0xa3,0xe4,0xf0,0x90,
+0x91,0x00,0xe0,0x90,0x04,0x48,0xf0,0x90,0x91,0x01,0xe0,0x90,0x04,0x49,0xf0,0x90,
+0x91,0x02,0xe0,0x90,0x04,0x4a,0xf0,0xa3,0xe4,0xf0,0x90,0x90,0xe9,0xe0,0x90,0x04,
+0x4c,0xf0,0x90,0x90,0xea,0xe0,0x90,0x04,0x4d,0xf0,0x90,0x90,0xeb,0xe0,0x90,0x04,
+0x4e,0xf0,0x90,0x90,0xec,0xe0,0x90,0x04,0x4f,0xf0,0xe4,0x90,0x90,0xee,0xf0,0x90,
+0x90,0xe9,0x04,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x90,0xfd,0xf0,0xa3,
+0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x05,0x60,0xe0,0x90,0x91,0x8c,
+0xf0,0x90,0x05,0x61,0xe0,0x90,0x91,0x8d,0xf0,0x90,0x05,0x62,0xe0,0x90,0x91,0x8e,
+0xf0,0x90,0x05,0x63,0xe0,0x90,0x91,0x8f,0xf0,0x90,0x91,0x06,0xe0,0xff,0x90,0x91,
+0x8f,0xe0,0xfe,0xd3,0x9f,0x50,0x0b,0x90,0x91,0x06,0xe0,0xc3,0x9e,0xd3,0x94,0x01,
+0x40,0x11,0x90,0x90,0xf4,0xe0,0xb4,0x01,0x02,0x80,0x03,0x90,0x90,0xf8,0xe0,0xff,
+0x12,0x6e,0x67,0x22,0x90,0x91,0x07,0xe0,0x64,0x01,0x60,0x08,0x90,0x90,0xf5,0xe0,
+0x60,0x02,0x21,0x4b,0x90,0x90,0xe9,0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,
+0x80,0x3b,0x90,0x90,0xea,0xe0,0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,
+0x28,0x90,0x90,0xeb,0xe0,0xc3,0x94,0xff,0x50,0x0a,0xe0,0x04,0xf0,0xe4,0x90,0x90,
+0xea,0xf0,0x80,0x15,0x90,0x90,0xec,0xe0,0xc3,0x94,0xff,0x50,0x10,0xe0,0x04,0xf0,
+0xe4,0x90,0x90,0xeb,0xf0,0x90,0x90,0xea,0xf0,0x90,0x90,0xe9,0xf0,0x90,0x00,0x44,
+0xe0,0x54,0x0c,0x60,0x76,0xe0,0x30,0xe2,0x32,0x90,0x90,0xfd,0xe0,0xc3,0x94,0xff,
+0x50,0x05,0xe0,0x04,0xf0,0x80,0x24,0x90,0x90,0xfe,0xe0,0xc3,0x94,0xff,0x50,0x06,
+0xe0,0x04,0xf0,0xe4,0x80,0x11,0x90,0x90,0xff,0xe0,0xc3,0x94,0xff,0x50,0x0c,0xe0,
+0x04,0xf0,0xe4,0x90,0x90,0xfe,0xf0,0x90,0x90,0xfd,0xf0,0x90,0x00,0x44,0xe0,0x30,
+0xe3,0x32,0x90,0x91,0x00,0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,0x24,
+0x90,0x91,0x01,0xe0,0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,0x11,0x90,
+0x91,0x02,0xe0,0xc3,0x94,0xff,0x50,0x0c,0xe0,0x04,0xf0,0xe4,0x90,0x91,0x01,0xf0,
+0x90,0x91,0x00,0xf0,0x90,0x04,0xfd,0xe0,0x44,0x01,0xf0,0x22,0x90,0x06,0x90,0xe0,
+0x44,0x01,0xf0,0x90,0x91,0x61,0xe0,0x30,0xe0,0x3c,0x90,0x91,0x5f,0xe0,0xff,0x90,
+0x91,0x5e,0xe0,0xfe,0xc4,0x13,0x54,0x01,0xfd,0x12,0x4a,0xf6,0x90,0x91,0x60,0xe0,
+0x75,0xf0,0x20,0xa4,0xff,0xae,0xf0,0x12,0x32,0x15,0x90,0x91,0x5e,0xe0,0xc4,0x13,
+0x54,0x07,0x30,0xe0,0x07,0xa3,0xe0,0xff,0xe4,0xfd,0x80,0x07,0x90,0x91,0x5f,0xe0,
+0xff,0x7d,0x01,0x12,0x4a,0xf6,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0xe4,0x90,
+0x91,0x19,0xf0,0xa3,0x74,0x08,0xf0,0xa3,0xf0,0xe4,0xa3,0xf0,0x90,0x01,0x1f,0xe0,
+0xfe,0x90,0x01,0x1e,0xe0,0x7c,0x00,0x24,0x00,0xff,0xec,0x3e,0x90,0x91,0x11,0xf0,
+0xa3,0xef,0xf0,0x90,0x02,0x87,0xe0,0x90,0x91,0x18,0xf0,0x90,0x91,0x56,0xe0,0x20,
+0xe0,0x02,0x61,0xc4,0xe4,0x90,0x91,0x17,0xf0,0x90,0x91,0x18,0xe0,0xff,0x90,0x91,
+0x17,0xe0,0xc3,0x9f,0x40,0x02,0x61,0xc4,0x90,0x91,0x11,0xe0,0xfc,0xa3,0xe0,0xfd,
+0xec,0xff,0x90,0xfd,0x11,0xf0,0x90,0x91,0x1c,0xef,0xf0,0x74,0x02,0x2d,0xf5,0x82,
+0xe4,0x34,0xfb,0xf5,0x83,0xe0,0x54,0x0f,0xfc,0x33,0x33,0x33,0x54,0xf8,0xff,0xed,
+0x24,0x18,0x2f,0x90,0x91,0x15,0xf0,0xe0,0x24,0x00,0xf5,0x82,0xe4,0x34,0xfb,0xf5,
+0x83,0xe0,0x54,0xfc,0x90,0x91,0x16,0xf0,0x74,0x01,0x2d,0xf5,0x82,0xe4,0x34,0xfb,
+0xf5,0x83,0xe0,0xfe,0x74,0x00,0x2d,0xf5,0x82,0xe4,0x34,0xfb,0xf5,0x83,0xe0,0x7a,
+0x00,0x24,0x00,0xff,0xea,0x3e,0x54,0x3f,0xab,0x07,0xfa,0x90,0x91,0x13,0xf0,0xa3,
+0xeb,0xf0,0xaf,0x04,0xef,0x75,0xf0,0x08,0xa4,0x24,0x18,0xff,0xe4,0x35,0xf0,0xfe,
+0xef,0x2b,0xfb,0xee,0x3a,0xfa,0x90,0x91,0x5a,0xe0,0xfe,0xa3,0xe0,0xff,0xad,0x03,
+0xac,0x02,0x12,0x45,0x09,0xaa,0x06,0xab,0x07,0x90,0x91,0x15,0xe0,0x24,0x00,0xf5,
+0x82,0xe4,0x34,0xfb,0xf5,0x83,0xe0,0x30,0xe7,0x08,0x90,0x91,0x19,0x74,0x02,0xf0,
+0x80,0x05,0xe4,0x90,0x91,0x19,0xf0,0xaf,0x03,0x90,0x91,0x11,0xea,0x8f,0xf0,0x12,
+0x42,0x81,0x90,0x91,0x5c,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x91,0x11,0xe0,0xfc,0xa3,
+0xe0,0xfd,0xd3,0x9f,0xec,0x9e,0x40,0x1b,0x90,0x91,0x5d,0xe0,0x24,0x01,0xff,0x90,
+0x91,0x5c,0xe0,0x34,0x00,0xfe,0xc3,0xed,0x9f,0xff,0xec,0x9e,0x90,0x91,0x11,0xf0,
+0xa3,0xef,0xf0,0x90,0x91,0x16,0xe0,0xff,0x24,0x40,0x60,0x04,0x24,0x20,0x70,0x27,
+0x90,0x91,0x5e,0xe0,0xfe,0xc4,0x13,0x13,0x13,0x54,0x01,0x20,0xe0,0x02,0x61,0x9c,
+0xef,0x90,0x00,0x81,0xb4,0xa0,0x05,0xe0,0x44,0x04,0x80,0x03,0xe0,0x44,0x08,0xfd,
+0x7f,0x81,0x12,0x4b,0xee,0x61,0x95,0x90,0x91,0x5e,0xe0,0xc4,0x13,0x13,0x54,0x03,
+0x20,0xe0,0x02,0x61,0x9c,0x90,0x91,0x15,0xe0,0xff,0x24,0x00,0xf5,0x82,0xe4,0x34,
+0xfb,0xf5,0x83,0xe0,0x54,0x0c,0x64,0x08,0x70,0x72,0x90,0x91,0x19,0xe0,0xfe,0xef,
+0x2e,0xff,0xa3,0xe0,0x2f,0xff,0x24,0x1e,0xf5,0x82,0xe4,0x34,0xfb,0xf5,0x83,0xe0,
+0x64,0x88,0x70,0x58,0x74,0x1f,0x2f,0xf5,0x82,0xe4,0x34,0xfb,0xf5,0x83,0xe0,0x64,
+0x8e,0x70,0x49,0x90,0x91,0x19,0xe0,0xff,0x90,0x91,0x15,0xe0,0x2f,0xff,0x90,0x91,
+0x1a,0xe0,0x2f,0xff,0xa3,0xe0,0x2f,0xff,0x24,0x19,0xf5,0x82,0xe4,0x34,0xfb,0xf5,
+0x83,0xe0,0x64,0x03,0x70,0x26,0x74,0x1e,0x2f,0xf5,0x82,0xe4,0x34,0xfb,0xf5,0x83,
+0xe0,0x90,0x00,0x81,0x30,0xe3,0x05,0xe0,0x44,0x01,0x80,0x03,0xe0,0x44,0x02,0xfd,
+0x7f,0x81,0x12,0x4b,0xee,0x90,0x91,0x56,0xe0,0x44,0x80,0xf0,0x90,0x91,0x56,0xe0,
+0xff,0xc4,0x13,0x13,0x13,0x54,0x01,0x30,0xe0,0x02,0x31,0x4c,0x71,0xc9,0xbf,0x01,
+0x13,0x90,0x91,0x11,0xe0,0xfe,0xa3,0xe0,0xff,0x12,0x44,0xb5,0x90,0x91,0x17,0xe0,
+0x04,0xf0,0x21,0xd9,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x91,0x56,0xe0,0xc4,0x13,0x13,
+0x13,0x54,0x01,0x30,0xe0,0x11,0xe0,0x44,0x80,0xf0,0x90,0x91,0x5e,0xe0,0xc4,0x54,
+0x0f,0x20,0xe0,0x03,0x7f,0x00,0x22,0x7f,0x01,0x22,0x8f,0x1f,0xe4,0x90,0x91,0x22,
+0xf0,0xe5,0x1f,0x14,0xfe,0x90,0x91,0x22,0xe0,0xff,0xc3,0x9e,0x50,0x0e,0xef,0x04,
+0xfd,0x12,0x2d,0x4d,0x90,0x91,0x22,0xe0,0x04,0xf0,0x80,0xe5,0xe5,0x1f,0x14,0xff,
+0x7d,0xff,0x12,0x2d,0x4d,0x90,0x91,0x22,0xe5,0x1f,0xf0,0x90,0x91,0x22,0xe0,0xc3,
+0x94,0xff,0x50,0x0f,0xe0,0xff,0x04,0xfd,0x12,0x2d,0x4d,0x90,0x91,0x22,0xe0,0x04,
+0xf0,0x80,0xe8,0xad,0x1f,0x7f,0xff,0x02,0x2d,0x4d,0xc3,0xee,0x94,0x01,0x40,0x0a,
+0x0d,0xed,0x13,0x90,0xfd,0x10,0xf0,0xe4,0x2f,0xff,0x22,0xc3,0xee,0x94,0x01,0x40,
+0x1e,0x90,0xfd,0x11,0xe0,0xb5,0x05,0x14,0x90,0x01,0x17,0xe0,0xb5,0x05,0x07,0x90,
+0xfd,0x11,0xe4,0xf0,0x80,0x06,0xed,0x04,0x90,0xfd,0x11,0xf0,0xe4,0x2f,0xff,0x22,
+0x14,0x25,};
+
+
+
+u8 Rtl8192CUFwUMCBCutWWImgArray[UMCBCutWWImgArrayLength] = {
+0xc2,0x88,0x02,0x00,0x51,0x00,0x00,0x00,0x03,0x23,0x16,0x45,0x66,0x34,0x01,0x00,
+0x58,0x92,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x02,0x43,0x9d,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x02,0x4a,0x22,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x02,0x57,0xe1,0x00,0x00,0x00,0x00,0x00,0x02,0x58,0xc4,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
+0xbb,0x01,0x0c,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe0,0x22,0x50,
+0x06,0xe9,0x25,0x82,0xf8,0xe6,0x22,0xbb,0xfe,0x06,0xe9,0x25,0x82,0xf8,0xe2,0x22,
+0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe4,0x93,0x22,0xbb,0x01,0x06,
+0x89,0x82,0x8a,0x83,0xf0,0x22,0x50,0x02,0xf7,0x22,0xbb,0xfe,0x01,0xf3,0x22,0xf8,
+0xbb,0x01,0x0d,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe8,0xf0,0x22,
+0x50,0x06,0xe9,0x25,0x82,0xc8,0xf6,0x22,0xbb,0xfe,0x05,0xe9,0x25,0x82,0xc8,0xf2,
+0x22,0xc5,0xf0,0xf8,0xa3,0xe0,0x28,0xf0,0xc5,0xf0,0xf8,0xe5,0x82,0x15,0x82,0x70,
+0x02,0x15,0x83,0xe0,0x38,0xf0,0x22,0xbb,0x01,0x10,0xe5,0x82,0x29,0xf5,0x82,0xe5,
+0x83,0x3a,0xf5,0x83,0xe0,0xf5,0xf0,0xa3,0xe0,0x22,0x50,0x09,0xe9,0x25,0x82,0xf8,
+0x86,0xf0,0x08,0xe6,0x22,0xbb,0xfe,0x0a,0xe9,0x25,0x82,0xf8,0xe2,0xf5,0xf0,0x08,
+0xe2,0x22,0xe5,0x83,0x2a,0xf5,0x83,0xe9,0x93,0xf5,0xf0,0xa3,0xe9,0x93,0x22,0xf8,
+0xbb,0x01,0x11,0xe5,0x82,0x29,0xf5,0x82,0xe5,0x83,0x3a,0xf5,0x83,0xe8,0xf0,0xe5,
+0xf0,0xa3,0xf0,0x22,0x50,0x09,0xe9,0x25,0x82,0xc8,0xf6,0x08,0xa6,0xf0,0x22,0xbb,
+0xfe,0x09,0xe9,0x25,0x82,0xc8,0xf2,0xe5,0xf0,0x08,0xf2,0x22,0xef,0x4b,0xff,0xee,
+0x4a,0xfe,0xed,0x49,0xfd,0xec,0x48,0xfc,0x22,0xe0,0xfc,0xa3,0xe0,0xfd,0xa3,0xe0,
+0xfe,0xa3,0xe0,0xff,0x22,0xa4,0x25,0x82,0xf5,0x82,0xe5,0xf0,0x35,0x83,0xf5,0x83,
+0x22,0xe0,0xfb,0xa3,0xe0,0xfa,0xa3,0xe0,0xf9,0x22,0xf8,0xe0,0xfb,0xa3,0xa3,0xe0,
+0xf9,0x25,0xf0,0xf0,0xe5,0x82,0x15,0x82,0x70,0x02,0x15,0x83,0xe0,0xfa,0x38,0xf0,
+0x22,0xeb,0xf0,0xa3,0xea,0xf0,0xa3,0xe9,0xf0,0x22,0xd0,0x83,0xd0,0x82,0xf8,0xe4,
+0x93,0x70,0x12,0x74,0x01,0x93,0x70,0x0d,0xa3,0xa3,0x93,0xf8,0x74,0x01,0x93,0xf5,
+0x82,0x88,0x83,0xe4,0x73,0x74,0x02,0x93,0x68,0x60,0xef,0xa3,0xa3,0xa3,0x80,0xdf,
+0xd0,0x83,0xd0,0x82,0xf8,0xe4,0x93,0x70,0x12,0x74,0x01,0x93,0x70,0x0d,0xa3,0xa3,
+0x93,0xf8,0x74,0x01,0x93,0xf5,0x82,0x88,0x83,0xe4,0x73,0x74,0x02,0x93,0xb5,0xf0,
+0x06,0x74,0x03,0x93,0x68,0x60,0xe9,0xa3,0xa3,0xa3,0xa3,0x80,0xd8,0x02,0x43,0xdb,
+0x02,0x50,0x34,0xe4,0x93,0xa3,0xf8,0xe4,0x93,0xa3,0x40,0x03,0xf6,0x80,0x01,0xf2,
+0x08,0xdf,0xf4,0x80,0x29,0xe4,0x93,0xa3,0xf8,0x54,0x07,0x24,0x0c,0xc8,0xc3,0x33,
+0xc4,0x54,0x0f,0x44,0x20,0xc8,0x83,0x40,0x04,0xf4,0x56,0x80,0x01,0x46,0xf6,0xdf,
+0xe4,0x80,0x0b,0x01,0x02,0x04,0x08,0x10,0x20,0x40,0x80,0x90,0x44,0x20,0xe4,0x7e,
+0x01,0x93,0x60,0xbc,0xa3,0xff,0x54,0x3f,0x30,0xe5,0x09,0x54,0x1f,0xfe,0xe4,0x93,
+0xa3,0x60,0x01,0x0e,0xcf,0x54,0xc0,0x25,0xe0,0x60,0xa8,0x40,0xb8,0xe4,0x93,0xa3,
+0xfa,0xe4,0x93,0xa3,0xf8,0xe4,0x93,0xa3,0xc8,0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,
+0xf0,0xa3,0xc8,0xc5,0x82,0xc8,0xca,0xc5,0x83,0xca,0xdf,0xe9,0xde,0xe7,0x80,0xbe,
+0x41,0x91,0x40,0x00,0x41,0x91,0x9c,0x00,0x41,0x91,0x23,0x80,0x41,0x91,0x24,0x80,
+0x41,0x91,0x9e,0x00,0x41,0x91,0x52,0x00,0x41,0x91,0x93,0x00,0x41,0x91,0x91,0x00,
+0x41,0x91,0x90,0x00,0x41,0x91,0x92,0x00,0x00,0xf0,0x90,0x91,0x30,0xe0,0x90,0x91,
+0x67,0xf0,0xe4,0xfb,0xfd,0x7f,0x54,0x7e,0x01,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
+0x90,0x91,0x65,0xeb,0xf0,0xa3,0xe0,0xfb,0xa3,0xe0,0xf5,0x44,0xe4,0xf5,0x45,0x12,
+0x35,0xab,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x01,0x5f,0xe4,0xf0,0x90,0x01,0x3c,0x74,
+0x08,0xf0,0xe4,0x90,0x91,0x66,0xf0,0x90,0x91,0x2d,0xe0,0x90,0x91,0x67,0xf0,0xe4,
+0xfb,0xfd,0x7f,0x5c,0x7e,0x01,0x91,0x59,0x90,0x01,0x5f,0x74,0x05,0xf0,0x90,0x06,
+0x92,0x74,0x02,0xf0,0x90,0x91,0x36,0x14,0xf0,0xe5,0x6e,0x54,0x0f,0xc3,0x94,0x0c,
+0x50,0x02,0xf1,0x23,0x22,0x90,0x02,0x84,0xef,0xf0,0xa3,0xee,0xf0,0xa3,0x74,0x05,
+0xf0,0x22,0x7d,0x01,0xaf,0x6f,0xe1,0x27,0xf1,0xe6,0xbf,0x01,0x10,0x90,0x91,0x42,
+0xe0,0xff,0xe4,0xfd,0x12,0x48,0x22,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0x8f,0x82,
+0x8e,0x83,0xa3,0xa3,0xa3,0xe4,0xf0,0x22,0xe4,0xf5,0x72,0x7f,0x60,0x7e,0x01,0x80,
+0xed,0x7f,0x00,0x22,0x90,0x91,0x32,0xe0,0xa3,0xe0,0x90,0x05,0x58,0xf0,0x22,0x22,
+0x22,0x22,0x22,0x02,0x5e,0x55,0x02,0x5e,0x5c,0xef,0x8e,0xf0,0x71,0x70,0x45,0x26,
+0x00,0x40,0x45,0x4e,0x00,0x80,0x45,0x79,0x01,0x00,0x45,0x8d,0x02,0x00,0x45,0xa5,
+0x04,0x00,0x00,0x00,0x45,0xc2,0xed,0x54,0x3f,0x70,0x04,0xfe,0xff,0x80,0x04,0x7e,
+0x00,0x7f,0x40,0xef,0x2d,0xff,0xee,0x3c,0xfe,0xef,0x78,0x06,0xce,0xc3,0x13,0xce,
+0x13,0xd8,0xf9,0x78,0x06,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0x80,0x26,0xed,0x54,
+0x7f,0x70,0x04,0xfe,0xff,0x80,0x04,0x7e,0x00,0x7f,0x80,0xef,0x2d,0xff,0xee,0x3c,
+0xfe,0xef,0x78,0x07,0xce,0xc3,0x13,0xce,0x13,0xd8,0xf9,0x78,0x07,0xc3,0x33,0xce,
+0x33,0xce,0xd8,0xf9,0xfd,0xac,0x06,0x80,0x49,0xed,0x70,0x04,0xfe,0xff,0x80,0x04,
+0x7e,0x01,0x7f,0x00,0xef,0x2d,0xee,0x3c,0x7d,0x00,0xfc,0x80,0x35,0xec,0x54,0x01,
+0x4d,0x70,0x04,0xfe,0xff,0x80,0x04,0x7e,0x02,0x7f,0x00,0xef,0x2d,0xee,0x3c,0xc3,
+0x13,0x7d,0x00,0x80,0x1a,0xec,0x54,0x03,0x4d,0x70,0x04,0xfe,0xff,0x80,0x04,0x7e,
+0x04,0x7f,0x00,0xef,0x2d,0xee,0x3c,0x13,0x13,0x54,0x3f,0x7d,0x00,0x25,0xe0,0x25,
+0xe0,0xfc,0xae,0x04,0xaf,0x05,0x22,0x90,0x91,0x09,0x12,0x2a,0x8b,0x00,0x00,0x00,
+0x00,0x90,0x06,0xa9,0xe0,0x90,0x91,0x08,0xf0,0xe0,0x54,0xc0,0x70,0x0a,0x53,0x71,
+0xfe,0x53,0x71,0xfd,0x91,0xc2,0x80,0x47,0x90,0x91,0x26,0xe0,0x60,0x41,0x90,0x91,
+0x38,0xe0,0x70,0x3b,0x90,0x91,0x38,0x74,0x01,0xf0,0x7f,0x00,0x7e,0x08,0x12,0x27,
+0xde,0x90,0x91,0x09,0x12,0x2a,0x7f,0x90,0x91,0x09,0x71,0x09,0xec,0x44,0x02,0xfc,
+0x90,0x91,0x09,0x12,0x2a,0x7f,0x90,0x91,0x09,0x71,0x09,0x90,0x80,0x85,0x12,0x2a,
+0x7f,0x7f,0x00,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x02,0x86,0xe0,0x54,0xfb,0xf0,0x90,
+0x91,0x08,0xe0,0x30,0xe6,0x13,0x43,0x71,0x01,0x90,0x91,0x3b,0xe0,0x64,0x02,0x60,
+0x04,0x91,0xc8,0x80,0x07,0x91,0x77,0x80,0x03,0x53,0x71,0xfe,0x90,0x91,0x08,0xe0,
+0x30,0xe7,0x16,0x43,0x71,0x02,0xe4,0x90,0x91,0x66,0x91,0x49,0x90,0x01,0x57,0x74,
+0x05,0xf0,0x90,0x91,0x3c,0x74,0x01,0xf0,0x22,0x53,0x71,0xfd,0x22,0xd3,0x10,0xaf,
+0x01,0xc3,0xc0,0xd0,0x8b,0x60,0x8a,0x61,0x89,0x62,0x90,0x91,0x68,0x71,0x41,0xab,
+0x63,0xaa,0x64,0xa9,0x65,0x90,0x91,0x6b,0x71,0x41,0xaf,0x66,0x15,0x66,0xef,0x60,
+0x1b,0x90,0x91,0x6b,0xe4,0x75,0xf0,0x01,0x71,0x2a,0x12,0x29,0xd9,0xff,0x90,0x91,
+0x68,0xe4,0x75,0xf0,0x01,0x71,0x2a,0xef,0x51,0x4d,0x80,0xde,0xab,0x60,0xaa,0x61,
+0xa9,0x62,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x91,
+0x6e,0x71,0x41,0x90,0x91,0x9e,0xe0,0xff,0x04,0xf0,0x90,0x00,0x01,0xef,0x51,0x5f,
+0x7f,0xaf,0x7e,0x01,0x12,0x64,0x88,0xef,0x60,0x44,0x90,0x91,0x6e,0x71,0x21,0x8b,
+0x63,0x8a,0x64,0x89,0x65,0x75,0x66,0x02,0x7b,0x01,0x7a,0x01,0x79,0xa0,0xd1,0x6d,
+0x90,0x91,0x71,0x71,0x21,0x8b,0x63,0x8a,0x64,0x89,0x65,0x90,0x91,0x6e,0x71,0x21,
+0x12,0x29,0xd9,0xff,0xc4,0x54,0x0f,0xf5,0x66,0x7b,0x01,0x7a,0x01,0x79,0xa2,0xd1,
+0x6d,0x90,0x01,0xaf,0x74,0xff,0xf0,0x90,0x01,0xcb,0xe0,0x64,0x80,0xf0,0xd0,0xd0,
+0x92,0xaf,0x22,0x7d,0x01,0x7f,0x0c,0x90,0x91,0x95,0xed,0xf0,0x90,0x91,0x94,0xef,
+0xf0,0x54,0x0f,0xff,0xe5,0x6e,0x54,0x0f,0x6f,0x60,0x76,0x90,0x91,0x94,0xe0,0x30,
+0xe2,0x30,0xe5,0x6e,0x20,0xe2,0x05,0x7f,0x01,0x12,0x61,0x86,0xe5,0x6e,0x30,0xe3,
+0x0f,0x90,0x91,0x94,0xe0,0x20,0xe3,0x08,0x12,0x60,0xb1,0xef,0x60,0x53,0x80,0x52,
+0xe5,0x6e,0x20,0xe3,0x4c,0x90,0x91,0x94,0xe0,0x30,0xe3,0x45,0xa3,0xe0,0xff,0x02,
+0x61,0x6b,0xe5,0x6e,0x54,0x0f,0xff,0xbf,0x0c,0x0f,0x90,0x91,0x94,0xe0,0x20,0xe3,
+0x08,0x12,0x60,0xb1,0xef,0x60,0x2a,0xf1,0xb2,0xe5,0x6e,0x54,0x0f,0xff,0xbf,0x04,
+0x10,0x90,0x91,0x94,0xe0,0x20,0xe2,0x09,0x12,0x60,0xfa,0xef,0x60,0x13,0x12,0x48,
+0xce,0xe5,0x6e,0x54,0x0f,0xff,0xbf,0x02,0x08,0x91,0xf1,0xef,0x60,0x03,0x12,0x62,
+0x6c,0x22,0x90,0x06,0x04,0xe0,0x44,0x40,0xf0,0xe5,0x6d,0xb4,0x01,0x04,0x7f,0x01,
+0xf1,0xc9,0x53,0x6e,0xf0,0x43,0x6e,0x04,0x22,0x8f,0x67,0xf1,0xe6,0xbf,0x01,0x15,
+0x90,0x91,0x43,0x12,0x48,0x1e,0xad,0x07,0xac,0x06,0xaf,0x67,0x12,0x60,0x16,0x90,
+0x04,0x1f,0x74,0x20,0xf0,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x01,0xc4,
+0x74,0xe6,0xf0,0x74,0x47,0xa3,0xf0,0x90,0x04,0x1d,0xe0,0x60,0x1a,0x90,0x05,0x22,
+0xe0,0x54,0x90,0x60,0x07,0x90,0x01,0xc6,0xe0,0x44,0x40,0xf0,0x90,0x01,0xc7,0xe0,
+0x30,0xe1,0xe4,0x7f,0x00,0x80,0x02,0x7f,0x01,0xd0,0xd0,0x92,0xaf,0x22,0xe0,0xff,
+0x7d,0x01,0x90,0x91,0x74,0xef,0xf0,0xa3,0xed,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xe5,
+0x70,0x60,0x04,0xe4,0xff,0x11,0xb3,0x90,0x91,0x74,0xe0,0x30,0xe0,0x09,0x90,0x91,
+0x76,0xe4,0xf0,0xa3,0x74,0x80,0xf0,0x90,0x91,0x74,0xe0,0xff,0xc3,0x13,0x90,0xfd,
+0x10,0xf0,0x90,0x04,0x25,0xef,0xf0,0x90,0x91,0x75,0xe0,0x60,0x1f,0xa3,0xa3,0xe0,
+0xff,0x24,0x0f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x80,0xf0,0x74,0x10,
+0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x80,0xf0,0x90,0x91,0x76,0xa3,
+0xe0,0xff,0xfd,0x24,0x08,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe4,0xf0,0x74,0x09,
+0x2d,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xf0,0xf0,0x74,0x21,0x2f,0xf5,
+0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xf7,0xf0,0x90,0x91,0x76,0xe0,0xfe,0xa3,
+0xe0,0xff,0x22,0xef,0x60,0x0b,0x90,0x91,0x51,0xe0,0xb4,0x01,0x10,0xe4,0xff,0x80,
+0x09,0x90,0x91,0x51,0xe0,0xb4,0x01,0x05,0x7f,0x01,0x12,0x69,0x87,0x22,0x90,0x01,
+0x37,0x74,0x02,0xf0,0x90,0x05,0x22,0x74,0xff,0xf0,0x12,0x68,0x7c,0xef,0x70,0x06,
+0x90,0x01,0xc8,0x74,0xfd,0xf0,0x7d,0x02,0x7f,0x03,0x12,0x36,0xe6,0xe5,0x70,0x60,
+0x04,0x7f,0x01,0x11,0xb3,0x12,0x68,0xbd,0x53,0x6e,0xf0,0x43,0x6e,0x02,0x22,0xef,
+0x64,0x01,0x70,0x42,0x7d,0x78,0x7f,0x02,0x12,0x36,0x75,0x7d,0x02,0x7f,0x03,0x12,
+0x36,0x75,0x90,0x01,0x36,0x74,0x03,0xf0,0xfd,0x7f,0x02,0x12,0x36,0xe6,0x7d,0x10,
+0x7f,0x03,0x12,0x36,0x92,0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,
+0x12,0x47,0x23,0xe4,0xff,0x11,0xb3,0x90,0x06,0x04,0xe0,0x54,0x7f,0xf0,0x90,0x06,
+0x0a,0xe0,0x54,0xf8,0xf0,0x22,0x90,0x01,0x36,0x74,0x7b,0xf0,0xa3,0x74,0x02,0xf0,
+0x7d,0x7b,0xff,0x12,0x36,0xe6,0x7d,0x02,0x7f,0x03,0x12,0x36,0xe6,0x7d,0x10,0x7f,
+0x03,0x12,0x36,0x92,0x90,0x06,0x04,0xe0,0x44,0x80,0xf0,0x90,0x06,0x0a,0xe0,0x44,
+0x07,0xf0,0x12,0x44,0xf4,0xe5,0x6d,0x20,0xe0,0x05,0xe4,0x90,0x91,0x29,0xf0,0x22,
+0x8b,0x0e,0x8a,0x0f,0x89,0x10,0xf1,0xf2,0xab,0x0e,0xaa,0x0f,0xa9,0x10,0x12,0x29,
+0xd9,0xf5,0x70,0x14,0x60,0x0e,0x14,0x60,0x1e,0x14,0x60,0x2f,0x24,0x03,0x70,0x40,
+0x7f,0x01,0x80,0x3a,0xab,0x0e,0xaa,0x0f,0xa9,0x10,0x90,0x00,0x02,0x12,0x42,0x20,
+0xfd,0xe4,0xff,0x31,0xe1,0x80,0x27,0xab,0x0e,0xaa,0x0f,0xa9,0x10,0x90,0x00,0x02,
+0x12,0x42,0x20,0xfd,0x7f,0x01,0x31,0xe1,0x1f,0x80,0x13,0xab,0x0e,0xaa,0x0f,0xa9,
+0x10,0x90,0x00,0x02,0x12,0x42,0x20,0xfd,0x7f,0x02,0x31,0xe1,0xe4,0xff,0x11,0xff,
+0x22,0xef,0x24,0xfe,0x60,0x0b,0x04,0x70,0x22,0x90,0x91,0x39,0x74,0x01,0xf0,0x80,
+0x16,0xed,0x70,0x0a,0x90,0x91,0x35,0xe0,0x90,0x91,0x39,0xf0,0x80,0x05,0x90,0x91,
+0x39,0xed,0xf0,0x90,0x91,0x39,0xe0,0x90,0x91,0x27,0xf0,0x22,0x12,0x47,0xe6,0xbf,
+0x01,0x0f,0x90,0x02,0x09,0xe0,0xff,0x7d,0x01,0x11,0x22,0x90,0x04,0x1f,0x74,0x20,
+0xf0,0x22,0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,
+0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,
+0x01,0xc4,0x74,0x22,0xf0,0x74,0x4a,0xa3,0xf0,0x90,0x01,0x34,0xe0,0x55,0x28,0xf5,
+0x2c,0x90,0x01,0x36,0xe0,0x55,0x2a,0xf5,0x2e,0xa3,0xe0,0x55,0x2b,0xf5,0x2f,0xe5,
+0x2c,0x30,0xe0,0x5a,0x90,0x01,0x34,0x74,0x01,0xf0,0x85,0xd9,0x54,0xe5,0x70,0x14,
+0x24,0xfd,0x50,0x02,0x80,0x48,0x90,0x91,0x3b,0xe0,0x60,0x3a,0x90,0x01,0x5b,0xe4,
+0xf0,0x90,0x01,0x3c,0x74,0x04,0xf0,0x91,0x89,0xef,0x64,0x01,0x70,0x30,0x90,0x91,
+0x66,0xf0,0x90,0x91,0x2d,0xe0,0x90,0x91,0x67,0xf0,0xe4,0xfb,0xfd,0x7f,0x58,0x7e,
+0x01,0x12,0x44,0x59,0x90,0x01,0x5b,0x74,0x05,0xf0,0x90,0x06,0x92,0x74,0x01,0xf0,
+0x90,0x91,0x37,0xf0,0x80,0x08,0x91,0x89,0xbf,0x01,0x03,0x12,0x44,0xc2,0xe5,0x2c,
+0x30,0xe1,0x21,0x90,0x01,0x34,0x74,0x02,0xf0,0x85,0xd1,0x58,0x85,0xd2,0x59,0x85,
+0xd3,0x5a,0x85,0xd4,0x5b,0x85,0xd5,0x5c,0x85,0xd6,0x5d,0x85,0xd7,0x5e,0x85,0xd9,
+0x5f,0x12,0x64,0x66,0xe5,0x2c,0x30,0xe3,0x10,0x90,0x01,0x34,0x74,0x08,0xf0,0x90,
+0x91,0x56,0xe0,0x30,0xe0,0x03,0x43,0x57,0x04,0xe5,0x2c,0x30,0xe4,0x09,0x90,0x01,
+0x34,0x74,0x10,0xf0,0x43,0x57,0x10,0xe5,0x2c,0x30,0xe5,0x24,0x90,0x01,0xcf,0xe0,
+0x30,0xe5,0x1d,0xe0,0x54,0xdf,0xf0,0x90,0x01,0x34,0x74,0x20,0xf0,0x75,0xa8,0x00,
+0x75,0xe8,0x00,0xd1,0x65,0x90,0x00,0x03,0xe0,0x54,0xfb,0xf0,0x91,0xa0,0x80,0xfe,
+0xe5,0x2c,0x30,0xe6,0x06,0x90,0x01,0x34,0x74,0x40,0xf0,0xe5,0x2e,0x30,0xe0,0x15,
+0x90,0x91,0x50,0x74,0x01,0xf0,0x90,0x01,0x36,0xf0,0x12,0x63,0x2e,0x12,0x70,0xee,
+0x90,0x91,0x50,0xe4,0xf0,0xe5,0x2e,0x30,0xe1,0x3b,0x90,0x01,0x36,0x74,0x02,0xf0,
+0x43,0x57,0x40,0x90,0x01,0x02,0xe0,0x54,0x03,0x64,0x01,0x70,0x28,0x90,0x01,0x37,
+0xe0,0x30,0xe0,0x0a,0x74,0x01,0xf0,0x90,0x91,0x40,0xe4,0xf0,0x80,0x17,0x90,0x91,
+0x40,0xe0,0x04,0xf0,0xe0,0xc3,0x94,0x0a,0x40,0x0b,0xe4,0xf0,0x90,0x04,0x19,0xe0,
+0x30,0xe0,0x02,0x51,0x0c,0xe5,0x2e,0x30,0xe2,0x1a,0x90,0x01,0x36,0x74,0x04,0xf0,
+0x90,0x91,0x3a,0xe4,0xf0,0x90,0x05,0x58,0x74,0x03,0xf0,0x12,0x62,0xb8,0x90,0x91,
+0x3f,0xe0,0x04,0xf0,0xe5,0x2e,0x30,0xe3,0x28,0x90,0x01,0x36,0x74,0x08,0xf0,0xe5,
+0x6d,0x64,0x01,0x70,0x1c,0xe5,0x70,0x60,0x18,0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,
+0x3c,0x74,0x02,0xf0,0x90,0x91,0x66,0xe4,0x12,0x44,0x49,0x90,0x01,0x57,0x74,0x05,
+0xf0,0xe5,0x2e,0x30,0xe4,0x2b,0x90,0x01,0x36,0x74,0x10,0xf0,0xe5,0x6d,0xb4,0x01,
+0x20,0xe5,0x70,0x60,0x1c,0x90,0x01,0x57,0xe4,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,
+0x90,0x91,0x3c,0xe4,0xf0,0x53,0x71,0xfd,0xe5,0x71,0x54,0x07,0x70,0x03,0x12,0x44,
+0xc2,0xe5,0x2e,0x30,0xe5,0x1f,0x90,0x01,0x36,0x74,0x20,0xf0,0xe5,0x6d,0xb4,0x01,
+0x14,0xe5,0x70,0x60,0x10,0x90,0x91,0x3b,0xe0,0x64,0x02,0x60,0x05,0x12,0x44,0xc8,
+0x80,0x03,0x12,0x44,0x77,0xe5,0x2e,0x30,0xe6,0x1b,0x90,0x01,0x36,0x74,0x40,0xf0,
+0xe5,0x6d,0xb4,0x01,0x10,0xe5,0x70,0x60,0x0c,0x53,0x71,0xfe,0xe5,0x71,0x54,0x07,
+0x70,0x03,0x12,0x44,0xc2,0xe5,0x2f,0x30,0xe1,0x09,0x90,0x01,0x37,0x74,0x02,0xf0,
+0x12,0x64,0x31,0x74,0x22,0x04,0x90,0x01,0xc4,0xf0,0x74,0x4a,0xa3,0xf0,0xd0,0x07,
+0xd0,0x06,0xd0,0x05,0xd0,0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,
+0xd0,0x82,0xd0,0x83,0xd0,0xf0,0xd0,0xe0,0x32,0x90,0x04,0x1b,0xe0,0x54,0x7f,0x64,
+0x7f,0x7f,0x01,0x60,0x02,0x7f,0x00,0x22,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,
+0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x7f,0x10,0xdf,0xfe,0xd0,0xd0,0x92,0xaf,0x22,
+0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x91,0x9b,0xed,0xf0,0x90,0x91,0x9a,0xef,
+0xf0,0xd3,0x94,0x07,0x50,0x63,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,
+0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x47,0xe0,0x5f,0xf0,0x91,0xa0,0x90,0x91,0x9a,
+0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,
+0x46,0xe0,0x4f,0xf0,0x91,0xa0,0x90,0x91,0x9b,0xe0,0x60,0x16,0x90,0x91,0x9a,0xe0,
+0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x45,
+0x80,0x66,0x90,0x91,0x9a,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,
+0xd8,0xfc,0xf4,0xff,0x90,0x00,0x45,0x80,0x6b,0x90,0x91,0x9a,0xe0,0x24,0xf8,0xf0,
+0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,
+0x91,0x98,0x90,0x91,0x9a,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,
+0xd8,0xfc,0xff,0x90,0x00,0x43,0xe0,0x4f,0xf0,0x91,0xa0,0x90,0x91,0x9b,0xe0,0x60,
+0x1b,0x90,0x91,0x9a,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,
+0xfc,0xc4,0x54,0xf0,0xff,0x90,0x00,0x42,0xe0,0x4f,0x80,0x1a,0x90,0x91,0x9a,0xe0,
+0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xf4,
+0xff,0x90,0x00,0x42,0xe0,0x5f,0xf0,0x91,0xa0,0xd0,0xd0,0x92,0xaf,0x22,0xf0,0x90,
+0x00,0x45,0xe0,0x54,0xfe,0xfd,0x7f,0x45,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x8f,
+0x82,0x75,0x83,0x00,0xed,0xf0,0x91,0xa0,0xd0,0xd0,0x92,0xaf,0x22,0xef,0x14,0x60,
+0x30,0x14,0x60,0x66,0x24,0x02,0x60,0x02,0xc1,0x64,0x90,0x90,0xf3,0x74,0x02,0xf0,
+0x90,0x00,0x48,0xe0,0x44,0x0c,0xfd,0x7f,0x48,0xb1,0xa8,0x90,0x00,0x47,0xe0,0x44,
+0x08,0xfd,0x7f,0x47,0xb1,0xa8,0x90,0x00,0x45,0xe0,0x44,0x10,0xfd,0x7f,0x45,0x80,
+0x71,0xe4,0x90,0x90,0xf3,0xf0,0x90,0x90,0xef,0x12,0x43,0x09,0x90,0x80,0x85,0x12,
+0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x00,0x45,0xe0,0x44,0xef,0xfd,
+0x7f,0x45,0xb1,0xa8,0x90,0x00,0x45,0xe0,0x54,0xef,0xfd,0x7f,0x45,0xb1,0xa8,0x90,
+0x00,0x46,0xe0,0x44,0x10,0xfd,0x7f,0x46,0x80,0x38,0x90,0x90,0xf3,0x74,0x01,0xf0,
+0x90,0x90,0xf9,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,
+0x12,0x2f,0xd9,0x90,0x00,0x45,0xe0,0x44,0x20,0xfd,0x7f,0x45,0xb1,0xa8,0x90,0x00,
+0x45,0xe0,0x44,0x10,0xfd,0x7f,0x45,0xb1,0xa8,0x90,0x00,0x46,0xe0,0x44,0x10,0xfd,
+0x7f,0x46,0xb1,0xa8,0x22,0x90,0x01,0x30,0xe4,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,
+0x90,0x01,0x38,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xfd,0x7f,0x50,0xb1,0xa8,0xe4,
+0xfd,0x7f,0x51,0xb1,0xa8,0xe4,0xfd,0x7f,0x52,0xb1,0xa8,0xe4,0xfd,0x7f,0x53,0xa1,
+0xa8,0x8b,0x0e,0x8a,0x0f,0x89,0x10,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x90,0xf6,
+0xf0,0xe0,0x30,0xe0,0x4b,0x90,0x90,0xed,0x74,0x01,0xf0,0x7f,0x80,0x7e,0x08,0x12,
+0x27,0xde,0x90,0x90,0xef,0x12,0x2a,0x7f,0xab,0x0e,0xaa,0x0f,0xa9,0x10,0x90,0x00,
+0x01,0x12,0x42,0x20,0xff,0xe4,0xfc,0xfd,0xfe,0x78,0x1a,0x12,0x2a,0x6c,0xa8,0x04,
+0xa9,0x05,0xaa,0x06,0xab,0x07,0x90,0x90,0xef,0x12,0x43,0x09,0xec,0x54,0x03,0xfc,
+0x12,0x42,0xfc,0x90,0x90,0xf9,0x12,0x2a,0x7f,0x90,0x05,0x22,0xe4,0xf0,0x80,0x2d,
+0xe4,0x90,0x90,0xed,0xf0,0x7f,0x80,0x7e,0x08,0x12,0x27,0xde,0xec,0x54,0x03,0xfc,
+0xec,0x44,0xc0,0xfc,0x90,0x90,0xef,0x12,0x2a,0x7f,0x90,0x90,0xef,0x12,0x43,0x09,
+0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x90,0xf6,
+0xe0,0x30,0xe1,0x19,0x7d,0x0c,0x7f,0x47,0xb1,0xa8,0x90,0x00,0x48,0xe0,0x44,0x0c,
+0xfd,0x7f,0x48,0xb1,0xa8,0x90,0x00,0x46,0xe0,0x44,0x10,0x80,0x1c,0x90,0x00,0x47,
+0xe0,0x54,0xf3,0xfd,0x7f,0x47,0xb1,0xa8,0x90,0x00,0x48,0xe0,0x54,0xf3,0xfd,0x7f,
+0x48,0xb1,0xa8,0x90,0x00,0x46,0xe0,0x54,0xef,0xfd,0x7f,0x46,0xb1,0xa8,0xe4,0x90,
+0x90,0xf3,0xf0,0x22,0x90,0x01,0x3c,0x74,0xff,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x01,
+0x34,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xfd,0x7f,0x54,0xb1,0xa8,0x7d,0xff,0x7f,
+0x55,0xb1,0xa8,0x7d,0xff,0x7f,0x56,0xb1,0xa8,0x7d,0xff,0x7f,0x57,0xa1,0xa8,0xe5,
+0x72,0x64,0x01,0x70,0x3e,0x12,0x54,0x41,0xbf,0x01,0x05,0x7f,0x01,0x12,0x56,0xe7,
+0x90,0x00,0x46,0xe0,0x44,0x04,0xfd,0x7f,0x46,0xb1,0xa8,0x90,0x00,0x44,0xe0,0x54,
+0xfb,0xfd,0x7f,0x44,0xb1,0xa8,0x90,0x00,0x46,0xe0,0x54,0xfb,0xfd,0x7f,0x46,0xb1,
+0xa8,0x7f,0x02,0x12,0x6f,0x09,0x8f,0x76,0x90,0x01,0xc9,0xe5,0x76,0xf0,0xb4,0x01,
+0x02,0xf1,0xd4,0x22,0x90,0x00,0x49,0xe0,0x90,0x91,0x9f,0xf0,0xe0,0x54,0x0f,0xf0,
+0x44,0xf0,0xfd,0x7f,0x49,0xb1,0xa8,0x90,0x91,0x9f,0xe0,0x44,0xb0,0xfd,0x7f,0x49,
+0xa1,0xa8,0xe4,0x90,0x91,0x3c,0xf0,0x90,0x91,0x28,0xf0,0xf5,0x71,0x22,0x75,0x28,
+0x33,0xe4,0xf5,0x29,0x75,0x2a,0x07,0xf5,0x2b,0x90,0x01,0x30,0xe5,0x28,0xf0,0xa3,
+0xe5,0x29,0xf0,0xa3,0xe5,0x2a,0xf0,0xa3,0xe5,0x2b,0xf0,0x22,0x75,0x30,0x1f,0x75,
+0x31,0x01,0xe4,0xf5,0x32,0x90,0x01,0x38,0xe5,0x30,0xf0,0xa3,0xe5,0x31,0xf0,0xa3,
+0xe5,0x32,0xf0,0x22,0xe4,0x90,0x91,0x0e,0xf0,0xa3,0xf0,0x75,0x8e,0x02,0xf1,0x02,
+0xd1,0xb4,0x90,0x91,0x4f,0xef,0xf0,0xd1,0xdb,0x90,0x91,0x51,0xef,0xf0,0xf1,0x3d,
+0x90,0x91,0x3d,0xee,0xf0,0xa3,0xef,0xf0,0xe4,0xf5,0x57,0xd1,0xd2,0x12,0x60,0x37,
+0x12,0x32,0x3d,0xd1,0xc1,0x12,0x4f,0xfe,0xf1,0x13,0xd1,0xcb,0x11,0x1c,0x12,0x44,
+0xff,0x31,0x23,0x11,0xdf,0x12,0x6f,0xaa,0x90,0x91,0x10,0xe5,0xd9,0xf0,0x12,0x4f,
+0x64,0xc2,0xaf,0x90,0x00,0x80,0xe0,0x44,0x40,0xf0,0x12,0x4c,0xa0,0x75,0xe8,0x03,
+0x43,0xa8,0x85,0xd2,0xaf,0x90,0x91,0x0e,0xe0,0x64,0x01,0xf0,0x24,0x34,0x90,0x01,
+0xc4,0xf0,0x74,0x50,0xa3,0xf0,0xe5,0x57,0x30,0xe2,0x10,0x12,0x5e,0x63,0xbf,0x01,
+0x0a,0xc2,0xaf,0x53,0x57,0xfb,0xd2,0xaf,0x12,0x71,0x8a,0xe5,0x57,0x30,0xe4,0x0a,
+0xc2,0xaf,0x53,0x57,0xef,0xd2,0xaf,0x12,0x5e,0xa0,0x90,0x90,0xf7,0xe0,0x70,0x03,
+0x12,0x70,0x08,0x11,0xf7,0x90,0x91,0x3f,0xe0,0x90,0x01,0xba,0xf0,0x80,0xb6,0x90,
+0x91,0x53,0xe0,0x54,0xfe,0xf0,0xe4,0x90,0x91,0x55,0xf0,0x90,0x91,0x53,0xe0,0x54,
+0x7f,0xf0,0xa3,0x74,0x0a,0xf0,0x22,0x90,0x06,0x34,0xe0,0x60,0x25,0x14,0x70,0x1b,
+0x7b,0x01,0x7a,0x06,0x79,0x35,0x7f,0xf9,0x7e,0x01,0x12,0x68,0x1a,0xbf,0x01,0x09,
+0x90,0x06,0x35,0xe0,0x54,0x0f,0xf0,0x80,0x04,0x80,0x00,0xc1,0xf4,0xe4,0x90,0x06,
+0x34,0xf0,0x22,0x90,0x91,0x56,0xe0,0x54,0xfe,0xf0,0xe0,0x54,0x7f,0xf0,0x90,0x01,
+0x17,0xe0,0xfe,0x90,0x01,0x16,0xe0,0x7c,0x00,0x24,0x00,0xff,0xec,0x3e,0x90,0x91,
+0x5c,0xf0,0xa3,0xef,0xf0,0x90,0x01,0x04,0xe0,0x54,0x0f,0x90,0x91,0x1c,0xf0,0xe0,
+0xff,0x74,0x40,0x7e,0x00,0xa8,0x07,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,
+0xf9,0x90,0x91,0x5b,0xf0,0xee,0x90,0x91,0x5a,0xf0,0x90,0x91,0x5e,0xe0,0x54,0xfe,
+0xf0,0xe0,0x54,0xfd,0xf0,0xe0,0x54,0xfb,0xf0,0xe0,0x54,0xf7,0xf0,0xe0,0x54,0xef,
+0xf0,0xe0,0x54,0xdf,0xf0,0xe0,0x54,0xbf,0xf0,0xe0,0x54,0x7f,0xf0,0xe4,0xa3,0xf0,
+0xa3,0xf0,0xa3,0xe0,0x54,0xfe,0xf0,0xe0,0x54,0xfd,0xf0,0xe0,0x54,0xf7,0xf0,0x22,
+0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x12,0x29,0xd9,0x54,0x01,0xff,0x90,0x91,0x56,
+0xe0,0x54,0xfe,0x4f,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,0x90,0x91,0x57,0xf0,0x90,
+0x00,0x02,0x12,0x42,0x20,0x90,0x91,0x58,0xf0,0x90,0x91,0x56,0xe0,0x30,0xe0,0x1a,
+0x90,0x06,0x09,0xe0,0x54,0xfe,0xf0,0x90,0x02,0x86,0xe0,0x44,0x04,0xf0,0x43,0x57,
+0x04,0x7d,0x08,0xe4,0xff,0x12,0x36,0xe6,0x80,0x12,0x7d,0x08,0xe4,0xff,0x12,0x36,
+0x75,0x90,0x02,0x86,0xe0,0x54,0xfb,0xf0,0x51,0x01,0x31,0x23,0xd0,0xd0,0x92,0xaf,
+0x22,0x90,0x06,0x90,0xe4,0xf0,0x21,0x6a,0x90,0x91,0x19,0x12,0x43,0x41,0xef,0x12,
+0x43,0x4a,0x52,0x40,0x01,0x52,0x49,0x02,0x52,0x6a,0x03,0x52,0x73,0x09,0x52,0x7b,
+0x0c,0x52,0x84,0x0d,0x52,0x8c,0x0e,0x52,0x9d,0x1a,0x52,0xa5,0x2c,0x52,0x51,0x2d,
+0x52,0x5a,0x2e,0x52,0xad,0x30,0x52,0x62,0x3b,0x52,0x95,0x3c,0x00,0x00,0x52,0xb5,
+0x90,0x91,0x19,0x12,0x43,0x21,0x02,0x64,0xde,0x90,0x91,0x19,0x12,0x43,0x21,0xc1,
+0xc5,0x90,0x91,0x19,0x12,0x43,0x21,0x02,0x65,0xf9,0x90,0x91,0x19,0x12,0x43,0x21,
+0xe1,0xa8,0x90,0x91,0x19,0x12,0x43,0x21,0xe1,0x28,0x90,0x91,0x19,0x12,0x43,0x21,
+0x02,0x66,0x41,0x90,0x91,0x19,0x12,0x43,0x21,0x80,0x42,0x90,0x91,0x19,0x12,0x43,
+0x21,0x02,0x5d,0x16,0x90,0x91,0x19,0x12,0x43,0x21,0xe1,0x75,0x90,0x91,0x19,0x12,
+0x43,0x21,0x02,0x4e,0x91,0x90,0x91,0x19,0x12,0x43,0x21,0x21,0xa0,0x90,0x91,0x19,
+0x12,0x43,0x21,0xa1,0x7f,0x90,0x91,0x19,0x12,0x43,0x21,0x81,0x5e,0x90,0x91,0x19,
+0x12,0x43,0x21,0xe1,0x55,0x90,0x01,0xc6,0xe0,0x44,0x01,0xf0,0x22,0xd3,0x10,0xaf,
+0x01,0xc3,0xc0,0xd0,0x90,0x91,0x1c,0x12,0x43,0x41,0x90,0x91,0x1c,0x12,0x43,0x21,
+0x90,0x00,0x01,0x12,0x42,0x97,0xfa,0xe5,0xf0,0x24,0x00,0xff,0xe4,0x3a,0xfe,0x90,
+0x91,0x1c,0x12,0x43,0x21,0x90,0x00,0x01,0xee,0x8f,0xf0,0x12,0x42,0xcf,0x12,0x29,
+0xd9,0xff,0x60,0x2c,0xb5,0x72,0x16,0x90,0x91,0x1c,0x12,0x43,0x21,0x90,0x00,0x01,
+0x12,0x42,0x97,0x65,0x74,0x70,0x04,0xe5,0x73,0x65,0xf0,0x60,0x23,0x90,0x91,0x1c,
+0x12,0x43,0x21,0x90,0x00,0x01,0x12,0x42,0x97,0xff,0xae,0xf0,0x71,0x35,0x80,0x10,
+0x90,0x91,0x1c,0x12,0x43,0x21,0x12,0x29,0xd9,0x65,0x72,0x60,0x03,0x12,0x44,0xe8,
+0xd0,0xd0,0x92,0xaf,0x22,0x90,0x91,0x1f,0xee,0xf0,0xa3,0xef,0xf0,0x75,0x72,0x01,
+0x8e,0x73,0xf5,0x74,0xe4,0xfd,0x7f,0x0b,0x71,0x77,0xe4,0xfd,0x7f,0x02,0x71,0x77,
+0x91,0x41,0xe4,0xff,0xd1,0xe7,0xe4,0xf5,0x76,0x90,0x01,0xc9,0xe5,0x76,0xf0,0x90,
+0x91,0x1f,0xe0,0xfc,0xa3,0xe0,0xfd,0xec,0xfb,0x8d,0x44,0xe4,0xf5,0x45,0x7d,0x01,
+0x7f,0x60,0x7e,0x01,0x02,0x35,0xab,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x91,
+0x22,0xed,0xf0,0x90,0x91,0x21,0xef,0xf0,0xd3,0x94,0x07,0x50,0x4f,0xa3,0xe0,0x70,
+0x1a,0x90,0x91,0x21,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,
+0xfc,0xf4,0xff,0x90,0x00,0x47,0xe0,0x5f,0xf0,0x80,0x17,0x90,0x91,0x21,0xe0,0xff,
+0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xff,0x90,0x00,0x47,0xe0,
+0x4f,0xf0,0x12,0x4c,0xa0,0x90,0x91,0x21,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,
+0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x46,0x80,0x5a,0x90,0x91,0x21,0xe0,
+0x24,0xf8,0xf0,0xa3,0xe0,0x70,0x1d,0x90,0x91,0x21,0xe0,0xff,0x74,0x01,0xa8,0x07,
+0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xf4,0xff,0x90,0x00,0x43,0xe0,
+0x5f,0xf0,0x80,0x1a,0x90,0x91,0x21,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,
+0xc3,0x33,0xd8,0xfc,0xc4,0x54,0xf0,0xff,0x90,0x00,0x43,0xe0,0x4f,0xf0,0x12,0x4c,
+0xa0,0x90,0x91,0x21,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,
+0xfc,0xf4,0xff,0x90,0x00,0x43,0xe0,0x5f,0xf0,0x12,0x4c,0xa0,0xd0,0xd0,0x92,0xaf,
+0x22,0x7f,0x0b,0x12,0x6f,0x09,0xef,0x65,0x75,0x60,0x10,0xe5,0x75,0xb4,0x01,0x05,
+0xe4,0xf5,0x75,0x80,0x03,0x75,0x75,0x01,0x7f,0x01,0x22,0x7f,0x00,0x22,0xd3,0x10,
+0xaf,0x01,0xc3,0xc0,0xd0,0xe4,0xf5,0x10,0x75,0x11,0x04,0xf5,0x12,0xf5,0x14,0xf5,
+0x15,0x90,0x02,0x09,0xe0,0xff,0x12,0x29,0xd9,0xfe,0xef,0x2e,0xf5,0x13,0x30,0xe0,
+0x08,0x75,0x0e,0x00,0x75,0x0f,0x80,0x80,0x05,0xe4,0xf5,0x0e,0xf5,0x0f,0xe5,0x13,
+0xc3,0x13,0x90,0xfd,0x10,0xf0,0x74,0x20,0x25,0x10,0xf5,0x10,0xad,0x0f,0xe5,0x10,
+0x2d,0xff,0x24,0x01,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x90,0x91,0x47,0xf0,
+0x74,0x02,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0xfe,0xe5,0x10,0x2d,0x24,
+0x03,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x24,0x00,0xff,0xe4,0x3e,0x90,0x91,
+0x48,0xf0,0xa3,0xef,0xf0,0x7f,0x04,0xe5,0x10,0x25,0x0f,0x2f,0x24,0x00,0xf5,0x82,
+0xe4,0x34,0xfc,0xf5,0x83,0xe0,0xfe,0x74,0x46,0x2f,0xf5,0x82,0xe4,0x34,0x91,0xf5,
+0x83,0xee,0xf0,0x0f,0xbf,0x08,0xe0,0x12,0x66,0x89,0xef,0x70,0x3f,0x90,0x01,0xc3,
+0xe0,0x60,0x25,0xc3,0xe5,0x15,0x94,0xe8,0xe5,0x14,0x94,0x03,0x40,0x09,0x90,0x01,
+0xc6,0xe0,0x44,0x10,0xf0,0x80,0x63,0x05,0x15,0xe5,0x15,0x70,0x02,0x05,0x14,0x7f,
+0x0a,0x7e,0x00,0x12,0x37,0x54,0x80,0xd5,0x90,0x01,0xc6,0xe0,0x90,0x01,0xc3,0x30,
+0xe2,0x05,0x74,0xfe,0xf0,0x80,0x43,0x74,0xff,0xf0,0x80,0x3e,0xe5,0x10,0xb4,0x78,
+0x23,0xe4,0xf5,0x10,0x05,0x13,0xe5,0x0f,0x64,0x80,0x45,0x0e,0x70,0x06,0xf5,0x0e,
+0xf5,0x0f,0x80,0x06,0x75,0x0e,0x00,0x75,0x0f,0x80,0xe5,0x13,0xc3,0x13,0x90,0xfd,
+0x10,0xf0,0x80,0x06,0x74,0x08,0x25,0x10,0xf5,0x10,0xe5,0x12,0x15,0x12,0x70,0x02,
+0x15,0x11,0xe5,0x12,0x45,0x11,0x60,0x02,0x81,0x9c,0xd0,0xd0,0x92,0xaf,0x22,0x90,
+0x91,0x1c,0x12,0x43,0x41,0x12,0x29,0xd9,0xff,0x54,0x01,0xfe,0x90,0x91,0x5e,0xe0,
+0x54,0xfe,0x4e,0xf0,0xef,0x54,0x04,0xff,0xe0,0x54,0xfb,0x4f,0xf0,0x12,0x29,0xd9,
+0xff,0x54,0x02,0xfe,0x90,0x91,0x5e,0xe0,0x54,0xfd,0x4e,0xf0,0xef,0x54,0x08,0xff,
+0xe0,0x54,0xf7,0x4f,0xf0,0x12,0x29,0xd9,0xff,0x54,0x10,0xfe,0x90,0x91,0x5e,0xe0,
+0x54,0xef,0x4e,0xf0,0xef,0x54,0x20,0xff,0xe0,0x54,0xdf,0x4f,0xf0,0x12,0x29,0xd9,
+0xff,0x54,0x40,0xfe,0x90,0x91,0x5e,0xe0,0x54,0xbf,0x4e,0xf0,0xef,0x54,0x80,0xff,
+0xe0,0x54,0x7f,0x4f,0xf0,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x91,0x60,0xf0,0x90,
+0x00,0x01,0x12,0x42,0x20,0x90,0x91,0x5f,0xf0,0x90,0x00,0x03,0x12,0x42,0x20,0xff,
+0x54,0x01,0xfe,0x90,0x91,0x61,0xe0,0x54,0xfe,0x4e,0xf0,0xef,0x54,0x02,0xff,0xe0,
+0x54,0xfd,0x4f,0xf0,0x90,0x00,0x03,0x12,0x42,0x20,0x54,0x04,0xff,0x90,0x91,0x61,
+0xe0,0x54,0xfb,0x4f,0xf0,0x90,0x91,0x5e,0xe0,0x54,0x01,0x90,0x01,0xb8,0xf0,0x90,
+0x91,0x5e,0xe0,0xff,0xc4,0x13,0x54,0x01,0x90,0x01,0xb9,0xf0,0x90,0x91,0x61,0xe0,
+0x54,0x01,0x90,0x01,0xba,0xf0,0xa3,0x74,0xff,0xf0,0x12,0x29,0xd9,0x20,0xe0,0x02,
+0x41,0x01,0xe4,0xfd,0x7f,0x81,0x12,0x4d,0xa8,0x90,0x91,0x1c,0x12,0x43,0x21,0x12,
+0x29,0xd9,0xff,0xc3,0x13,0x30,0xe0,0x07,0x90,0x06,0x90,0xe0,0x44,0x02,0xf0,0xef,
+0x13,0x13,0x54,0x3f,0x30,0xe0,0x07,0x90,0x06,0x90,0xe0,0x44,0x04,0xf0,0x12,0x29,
+0xd9,0x13,0x13,0x13,0x54,0x1f,0x30,0xe0,0x07,0x90,0x06,0x90,0xe0,0x44,0x08,0xf0,
+0x90,0x91,0x61,0xe0,0x30,0xe0,0x1c,0x90,0x91,0x5e,0xe0,0xc4,0x13,0x54,0x07,0x30,
+0xe0,0x07,0xa3,0xe0,0xff,0xe4,0xfd,0x80,0x07,0x90,0x91,0x5f,0xe0,0xff,0x7d,0x01,
+0x12,0x4c,0xb0,0x22,0x90,0x00,0x02,0xe0,0x54,0xe0,0x7f,0x01,0x60,0x02,0x7f,0x00,
+0x22,0xe4,0xf5,0x75,0x22,0x12,0x29,0xd9,0xf5,0x6d,0x22,0x90,0x01,0x64,0x74,0xa0,
+0xf0,0x22,0x90,0x91,0x51,0xe0,0x90,0x90,0xe8,0xf0,0x22,0x90,0x00,0xf3,0xe0,0x7f,
+0x00,0x30,0xe3,0x02,0x7f,0x01,0x22,0x90,0x01,0xca,0xe5,0x75,0xf0,0xef,0x60,0x03,
+0x12,0x4f,0xd4,0x22,0x90,0x06,0x34,0x74,0xff,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,
+0xf0,0x22,0xe4,0x90,0x91,0x4e,0xf0,0x90,0x00,0x80,0xe0,0x44,0x80,0xfd,0x7f,0x80,
+0x02,0x4d,0xa8,0x90,0x00,0xf3,0xe0,0x30,0xe2,0x0d,0x90,0x05,0x41,0x74,0x10,0xf0,
+0x90,0x05,0x5a,0xf0,0xa3,0xe4,0xf0,0x22,0x12,0x29,0xd9,0x60,0x02,0x80,0x01,0xe4,
+0x90,0x91,0x31,0xf0,0x90,0x91,0x31,0xe0,0x90,0x01,0xe7,0xf0,0x22,0x90,0x91,0x51,
+0xe0,0xb4,0x01,0x0c,0x90,0x00,0xf2,0xe0,0x30,0xe7,0x05,0x7e,0xfd,0x7f,0x33,0x22,
+0x7e,0xfd,0x7f,0x2f,0x22,0x12,0x29,0xd9,0xff,0x54,0x01,0xfe,0x90,0x91,0x53,0xe0,
+0x54,0xfe,0x4e,0xf0,0xef,0xc3,0x13,0x30,0xe0,0x0a,0x90,0x00,0x01,0x12,0x42,0x20,
+0x90,0x91,0x54,0xf0,0x22,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x90,0xf7,0xf0,0xe0,
+0x60,0x04,0xe0,0xf4,0x70,0x21,0xa2,0xaf,0xe4,0x33,0xf5,0x0e,0xc2,0xaf,0x90,0x00,
+0x47,0xe0,0x54,0xfb,0xfd,0x7f,0x47,0x12,0x4d,0xa8,0x7d,0x40,0x7f,0x01,0x12,0x36,
+0xaf,0xe5,0x0e,0x24,0xff,0x92,0xaf,0x22,0x12,0x29,0xd9,0x30,0xe0,0x19,0xc3,0x13,
+0x54,0x7f,0x90,0x91,0x34,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0x90,0x91,0x32,
+0xe4,0xf0,0xa3,0xef,0xf0,0x80,0x0f,0x90,0x91,0x34,0x74,0x07,0xf0,0x90,0x91,0x32,
+0xe4,0xf0,0xa3,0x74,0x03,0xf0,0x90,0x91,0x32,0xe0,0xa3,0xe0,0x90,0x05,0x58,0xf0,
+0x22,0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,0x00,0xc0,0x00,
+0xc0,0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,0x07,0x90,0x01,
+0xc4,0x74,0xe1,0xf0,0x74,0x57,0xa3,0xf0,0x53,0x91,0xef,0x90,0x00,0x51,0xe0,0xff,
+0x90,0x00,0x55,0xe0,0x5f,0xf5,0x3d,0x90,0x00,0x52,0xe0,0xff,0x90,0x00,0x56,0xe0,
+0x5f,0xf5,0x3e,0xe5,0x3d,0x30,0xe4,0x06,0x90,0x00,0x55,0x74,0x10,0xf0,0xe5,0x3d,
+0x30,0xe5,0x06,0x90,0x00,0x55,0x74,0x20,0xf0,0xe5,0x3d,0x30,0xe6,0x1b,0x90,0x00,
+0x55,0x74,0x40,0xf0,0x90,0x90,0xf6,0xe0,0x54,0x03,0xff,0xbf,0x03,0x0b,0x90,0x90,
+0xf3,0xe0,0x60,0x05,0x7f,0x01,0x12,0x4d,0xbd,0xe5,0x3d,0x30,0xe7,0x15,0x90,0x00,
+0x55,0x74,0x80,0xf0,0x90,0x90,0xf6,0xe0,0x54,0x03,0xff,0xbf,0x03,0x05,0x7f,0x02,
+0x12,0x4d,0xbd,0xe5,0x3e,0x30,0xe0,0x06,0x90,0x00,0x56,0x74,0x01,0xf0,0xe5,0x3e,
+0x30,0xe1,0x06,0x90,0x00,0x56,0x74,0x02,0xf0,0xe5,0x3e,0x30,0xe2,0x06,0x90,0x00,
+0x56,0x74,0x04,0xf0,0xe5,0x3e,0x30,0xe3,0x06,0x90,0x00,0x56,0x74,0x08,0xf0,0x90,
+0x01,0xc4,0x74,0xe1,0xf0,0x74,0x57,0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,
+0x04,0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,0xd0,
+0xf0,0xd0,0xe0,0x32,0xc0,0xe0,0xc0,0xf0,0xc0,0x83,0xc0,0x82,0xc0,0xd0,0x75,0xd0,
+0x00,0xc0,0x00,0xc0,0x01,0xc0,0x02,0xc0,0x03,0xc0,0x04,0xc0,0x05,0xc0,0x06,0xc0,
+0x07,0x75,0x0d,0x00,0x90,0x01,0xc4,0x74,0xc4,0xf0,0x74,0x58,0xa3,0xf0,0x53,0x91,
+0xdf,0x90,0x01,0x3c,0xe0,0x55,0x30,0xf5,0x34,0xa3,0xe0,0x55,0x31,0xf5,0x35,0xa3,
+0xe0,0x55,0x32,0xf5,0x36,0xa3,0xe0,0x55,0x33,0xf5,0x37,0xe5,0x34,0x30,0xe0,0x06,
+0x90,0x01,0x3c,0x74,0x01,0xf0,0xe5,0x34,0x30,0xe1,0x08,0x90,0x01,0x3c,0x74,0x02,
+0xf0,0x71,0x89,0xe5,0x34,0x30,0xe2,0x3a,0x90,0x01,0x3c,0x74,0x04,0xf0,0x90,0x06,
+0x92,0xe0,0x30,0xe0,0x25,0x90,0x91,0x66,0xe4,0xf0,0x90,0x91,0x2d,0xe0,0x90,0x91,
+0x67,0xf0,0xe4,0xfb,0xfd,0x7f,0x58,0x7e,0x01,0x12,0x44,0x59,0x90,0x01,0x5b,0x74,
+0x05,0xf0,0x90,0x06,0x92,0x74,0x01,0xf0,0x80,0x08,0x90,0x91,0x37,0xe4,0xf0,0x12,
+0x44,0xc2,0xe5,0x34,0x30,0xe3,0x3a,0x90,0x01,0x3c,0x74,0x08,0xf0,0x90,0x06,0x92,
+0xe0,0x30,0xe1,0x25,0x90,0x91,0x66,0xe4,0xf0,0x90,0x91,0x2d,0xe0,0x90,0x91,0x67,
+0xf0,0xe4,0xfb,0xfd,0x7f,0x5c,0x7e,0x01,0x12,0x44,0x59,0x90,0x01,0x5f,0x74,0x05,
+0xf0,0x90,0x06,0x92,0x74,0x02,0xf0,0x80,0x08,0x90,0x91,0x36,0xe4,0xf0,0x12,0x44,
+0xc2,0xe5,0x34,0x30,0xe4,0x09,0x90,0x01,0x3c,0x74,0x10,0xf0,0x12,0x4f,0x8f,0xe5,
+0x34,0x30,0xe5,0x08,0x90,0x01,0x3c,0x74,0x20,0xf0,0x51,0x62,0xe5,0x35,0x30,0xe0,
+0x5a,0x90,0x01,0x3d,0x74,0x01,0xf0,0x90,0x01,0x2f,0xe0,0x44,0x7f,0xf0,0x90,0x00,
+0x83,0xe0,0x54,0x0f,0xf5,0x0d,0xb4,0x01,0x02,0x80,0x1c,0xe5,0x0d,0xb4,0x02,0x05,
+0x90,0x00,0x83,0x80,0x12,0xe5,0x0d,0xb4,0x04,0x05,0x90,0x00,0x83,0x80,0x08,0xe5,
+0x0d,0xb4,0x0c,0x08,0x90,0x00,0x83,0xe0,0xf5,0x6f,0x80,0x06,0x90,0x01,0xbe,0xe0,
+0x04,0xf0,0x90,0x01,0xbb,0xe5,0x6f,0xf0,0xe5,0x6f,0x30,0xe0,0x03,0xa3,0x80,0x03,
+0x90,0x01,0xbd,0xe0,0x04,0xf0,0x71,0x6a,0x12,0x44,0xc2,0xe5,0x35,0x30,0xe2,0x06,
+0x90,0x01,0x3d,0x74,0x04,0xf0,0xe5,0x36,0x30,0xe0,0x06,0x90,0x01,0x3e,0x74,0x01,
+0xf0,0xe5,0x36,0x30,0xe1,0x06,0x90,0x01,0x3e,0x74,0x02,0xf0,0x74,0xc4,0x04,0x90,
+0x01,0xc4,0xf0,0x74,0x58,0xa3,0xf0,0xd0,0x07,0xd0,0x06,0xd0,0x05,0xd0,0x04,0xd0,
+0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0xd0,0xd0,0xd0,0x82,0xd0,0x83,0xd0,0xf0,0xd0,
+0xe0,0x32,0x90,0x90,0xf5,0xe0,0x64,0x01,0x60,0x02,0x61,0x17,0x90,0x00,0x46,0xe0,
+0x44,0x01,0xfd,0x7f,0x46,0x12,0x4d,0xa8,0x90,0x91,0x07,0xe0,0x70,0x32,0x90,0x90,
+0xed,0xe0,0x60,0x15,0x90,0x90,0xf9,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,
+0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,0x80,0x06,0x90,0x05,0x22,0x74,0x7f,0xf0,0x90,
+0x90,0xf4,0xe0,0xff,0x71,0x18,0x90,0x91,0x07,0x74,0x01,0x12,0x4d,0x9e,0x80,0x40,
+0x90,0x91,0x07,0xe0,0x64,0x01,0x70,0x38,0x90,0x90,0xf8,0xe0,0xff,0x71,0x18,0xe4,
+0x90,0x91,0x07,0xf0,0x90,0x00,0x45,0xe0,0x44,0x01,0xfd,0x7f,0x45,0x12,0x4d,0xa8,
+0x90,0x90,0xed,0xe0,0x60,0x15,0x90,0x90,0xef,0x12,0x43,0x09,0x90,0x80,0x85,0x12,
+0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,0x80,0x05,0x90,0x05,0x22,0xe4,0xf0,
+0x90,0x05,0x87,0xe0,0x64,0x80,0xf0,0x90,0x91,0x03,0xe0,0x90,0x05,0x84,0xf0,0x90,
+0x91,0x04,0xe0,0x90,0x05,0x85,0xf0,0x90,0x91,0x05,0xe0,0x90,0x05,0x86,0xf0,0x90,
+0x91,0x06,0xe0,0x90,0x05,0x87,0xf0,0x22,0x90,0x05,0x60,0xe0,0x90,0x91,0x03,0xf0,
+0x90,0x05,0x61,0xe0,0x90,0x91,0x04,0xf0,0x90,0x05,0x62,0xe0,0x90,0x91,0x05,0xf0,
+0x90,0x05,0x63,0xe0,0x90,0x91,0x06,0xf0,0xc3,0x74,0xff,0x9f,0xfe,0x90,0x91,0x04,
+0xe0,0xd3,0x9e,0x40,0x1e,0xe0,0x2f,0xf0,0xa3,0xe0,0xb4,0xff,0x0f,0xe4,0xf0,0xa3,
+0xe0,0xb4,0xff,0x03,0xe4,0xf0,0x22,0x90,0x91,0x06,0x80,0x03,0x90,0x91,0x05,0xe0,
+0x04,0xf0,0x22,0x90,0x91,0x04,0xe0,0x2f,0xf0,0x22,0xe5,0x6f,0x30,0xe6,0x19,0xe5,
+0x6f,0x54,0x0f,0xff,0x90,0x91,0x24,0xe0,0xfe,0x4f,0x90,0x01,0x2f,0xf0,0xee,0x64,
+0x80,0x90,0x91,0x24,0xf0,0x53,0x6f,0xbf,0x22,0xe4,0x90,0x91,0x0d,0xf0,0xe5,0x70,
+0x70,0x02,0x81,0x13,0x90,0x91,0x3c,0xe0,0x60,0x0d,0xe4,0xf0,0x53,0x71,0xfd,0xe5,
+0x71,0x54,0x07,0x70,0x6e,0x80,0x69,0x90,0x91,0x28,0xe0,0x04,0xf0,0x53,0x71,0xef,
+0x90,0x91,0x3a,0xe0,0x04,0xf0,0x90,0x91,0x0d,0xe0,0xf9,0xff,0x7e,0x00,0x24,0x01,
+0xfd,0xee,0x33,0xfc,0x90,0x91,0x3a,0xe0,0xb5,0x05,0x06,0xe4,0xb5,0x04,0x02,0x80,
+0x12,0xef,0x24,0x02,0xff,0xe4,0x3e,0xfe,0x90,0x91,0x3a,0xe0,0xb5,0x07,0x0a,0xe4,
+0xb5,0x06,0x06,0x90,0x05,0x58,0xe0,0x04,0xf0,0xe9,0xff,0x90,0x91,0x2f,0xe0,0x2f,
+0xff,0xe4,0x33,0xfe,0x90,0x91,0x28,0xe0,0xd3,0x9f,0xee,0x64,0x80,0xf8,0x74,0x80,
+0x98,0x40,0x0d,0xe5,0x6d,0xb4,0x01,0x0b,0xa3,0xe0,0x70,0x07,0xe0,0x04,0xf0,0x22,
+0x12,0x44,0xc2,0x22,0x90,0x90,0xee,0xe0,0xc3,0x94,0x14,0x50,0x05,0xe0,0x04,0xf0,
+0x81,0xcc,0x90,0x90,0xee,0xe0,0x64,0x14,0x60,0x02,0x81,0xcc,0x90,0x90,0xfd,0xe0,
+0x70,0x25,0x90,0x91,0x00,0xe0,0x70,0x1f,0x90,0x90,0xfe,0xe0,0x70,0x19,0x90,0x91,
+0x01,0xe0,0x70,0x13,0x90,0x90,0xff,0xe0,0x70,0x0d,0x90,0x91,0x02,0xe0,0x70,0x07,
+0x90,0x04,0xfd,0xe0,0x54,0xfe,0xf0,0x90,0x90,0xfd,0xe0,0x90,0x04,0x44,0xf0,0x90,
+0x90,0xfe,0xe0,0x90,0x04,0x45,0xf0,0x90,0x90,0xff,0xe0,0x90,0x04,0x46,0xf0,0xa3,
+0xe4,0xf0,0x90,0x91,0x00,0xe0,0x90,0x04,0x48,0xf0,0x90,0x91,0x01,0xe0,0x90,0x04,
+0x49,0xf0,0x90,0x91,0x02,0xe0,0x90,0x04,0x4a,0xf0,0xa3,0xe4,0xf0,0x90,0x90,0xe9,
+0xe0,0x90,0x04,0x4c,0xf0,0x90,0x90,0xea,0xe0,0x90,0x04,0x4d,0xf0,0x90,0x90,0xeb,
+0xe0,0x90,0x04,0x4e,0xf0,0x90,0x90,0xec,0xe0,0x90,0x04,0x4f,0xf0,0xe4,0x90,0x90,
+0xee,0xf0,0x90,0x90,0xe9,0x04,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x90,
+0xfd,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,0x90,0x05,0x60,0xe0,
+0x90,0x91,0x8c,0xf0,0x90,0x05,0x61,0xe0,0x90,0x91,0x8d,0xf0,0x90,0x05,0x62,0xe0,
+0x90,0x91,0x8e,0xf0,0x90,0x05,0x63,0xe0,0x90,0x91,0x8f,0xf0,0x90,0x91,0x06,0xe0,
+0xff,0x90,0x91,0x8f,0xe0,0xfe,0xd3,0x9f,0x50,0x0b,0x90,0x91,0x06,0xe0,0xc3,0x9e,
+0xd3,0x94,0x01,0x40,0x10,0x90,0x90,0xf4,0xe0,0xb4,0x01,0x02,0x80,0x03,0x90,0x90,
+0xf8,0xe0,0xff,0x71,0x18,0x22,0x90,0x00,0x02,0x12,0x42,0x20,0x90,0x90,0xf5,0xf0,
+0x90,0x00,0x01,0x12,0x42,0x20,0x25,0xe0,0x25,0xe0,0x90,0x90,0xf4,0xf0,0x12,0x29,
+0xd9,0x25,0xe0,0x25,0xe0,0x90,0x90,0xf8,0xf0,0x90,0x05,0x60,0xe0,0x90,0x91,0x03,
+0xf0,0x90,0x05,0x61,0xe0,0x90,0x91,0x04,0xf0,0x90,0x05,0x62,0xe0,0x90,0x91,0x05,
+0xf0,0x90,0x05,0x63,0xe0,0x90,0x91,0x06,0xf0,0xa2,0xaf,0xe4,0x33,0x90,0x91,0x1c,
+0xf0,0xc2,0xaf,0x90,0x90,0xf4,0xe0,0xff,0x71,0x18,0x90,0x91,0x1c,0xe0,0x24,0xff,
+0x92,0xaf,0x90,0x90,0xf5,0xe0,0x70,0x02,0xc1,0x1f,0x90,0x90,0xf4,0xe0,0x70,0x02,
+0xc1,0x1f,0x90,0x90,0xf8,0xe0,0x70,0x02,0xc1,0x1f,0xa2,0xaf,0xe4,0x33,0x90,0x91,
+0x1c,0xf0,0xc2,0xaf,0x90,0x91,0x07,0x74,0x01,0xf0,0x90,0x91,0x1c,0xe0,0x24,0xff,
+0x92,0xaf,0x12,0x4d,0x9f,0x90,0x00,0x46,0xe0,0x44,0x01,0xfd,0x7f,0x46,0x12,0x4d,
+0xa8,0x90,0x90,0xed,0xe0,0x60,0x15,0x90,0x90,0xf9,0x12,0x43,0x09,0x90,0x80,0x85,
+0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x08,0x12,0x2f,0xd9,0x80,0x06,0x90,0x05,0x22,0x74,
+0x7f,0xf0,0x90,0x00,0x45,0xe0,0x54,0xef,0xfd,0x7f,0x45,0x12,0x4d,0xa8,0x90,0x05,
+0x87,0xe0,0x64,0x80,0xf0,0x90,0x91,0x03,0xe0,0x90,0x05,0x84,0xf0,0x90,0x91,0x04,
+0xe0,0x90,0x05,0x85,0xf0,0x90,0x91,0x05,0xe0,0x90,0x05,0x86,0xf0,0x90,0x91,0x06,
+0xe0,0x90,0x05,0x87,0xf0,0xa2,0xaf,0xe4,0x33,0x90,0x91,0x1c,0xf0,0xc2,0xaf,0x90,
+0x01,0x3c,0xe0,0x44,0x20,0xf0,0x7d,0x20,0xe4,0xff,0x12,0x37,0x00,0x80,0x2d,0x90,
+0x90,0xf5,0xe0,0x70,0x2f,0x90,0x91,0x07,0x12,0x4d,0x9e,0x90,0x00,0x46,0xe0,0x54,
+0xfe,0xfd,0x7f,0x46,0x12,0x4d,0xa8,0x90,0x05,0x22,0xe4,0xf0,0xa2,0xaf,0x33,0x90,
+0x91,0x1c,0xf0,0xc2,0xaf,0x7d,0x20,0xe4,0xff,0x12,0x36,0x92,0x90,0x91,0x1c,0xe0,
+0x24,0xff,0x92,0xaf,0x22,0x8f,0x20,0x8c,0x21,0x8d,0x22,0x22,0x8f,0x23,0x8c,0x24,
+0x8d,0x25,0x22,0xe4,0x90,0x91,0x11,0xf0,0xa3,0xf0,0x90,0x02,0x86,0xe0,0x20,0xe1,
+0x2c,0xc3,0x90,0x91,0x12,0xe0,0x94,0x20,0x90,0x91,0x11,0xe0,0x94,0x03,0x40,0x0a,
+0x90,0x01,0xc6,0xe0,0x44,0x20,0xf0,0x7f,0x00,0x22,0x90,0x91,0x11,0xe4,0x75,0xf0,
+0x01,0x12,0x42,0x81,0x7f,0x01,0x7e,0x00,0x12,0x37,0x54,0x80,0xcd,0x7f,0x01,0x22,
+0x90,0x01,0xcc,0xe0,0x54,0x0f,0x90,0x91,0x11,0xf0,0x90,0x91,0x11,0xe0,0xfd,0x70,
+0x02,0xe1,0xe2,0x90,0x91,0x9c,0xe0,0xff,0x74,0x01,0x7e,0x00,0xa8,0x07,0x08,0x80,
+0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0xef,0x5d,0x70,0x02,0xe1,0xdb,0x90,
+0x91,0x9c,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd0,0x12,0x43,0x15,0xe0,0x90,0x91,0x12,
+0xf0,0x75,0x63,0x01,0x75,0x64,0x91,0x75,0x65,0x12,0x75,0x66,0x01,0x7b,0x01,0x7a,
+0x91,0x79,0x13,0x12,0x46,0x6d,0x90,0x91,0x13,0xe0,0xff,0xc4,0x13,0x13,0x13,0x54,
+0x01,0x90,0x91,0x9c,0x30,0xe0,0x59,0xe0,0x75,0xf0,0x02,0x90,0x00,0x88,0x12,0x43,
+0x15,0xe0,0x90,0x91,0x14,0xf0,0x90,0x91,0x9c,0xe0,0x75,0xf0,0x02,0x90,0x00,0x89,
+0x12,0x43,0x15,0xe0,0x90,0x91,0x15,0xf0,0x90,0x91,0x9c,0xe0,0x75,0xf0,0x04,0x90,
+0x01,0xd1,0x12,0x43,0x15,0xe0,0x90,0x91,0x16,0xf0,0x90,0x91,0x9c,0xe0,0x75,0xf0,
+0x04,0x90,0x01,0xd2,0x12,0x43,0x15,0xe0,0x90,0x91,0x17,0xf0,0x90,0x91,0x9c,0xe0,
+0x75,0xf0,0x04,0x90,0x01,0xd3,0x12,0x43,0x15,0xe0,0x90,0x91,0x18,0xf0,0x80,0x33,
+0xe0,0x75,0xf0,0x04,0x90,0x01,0xd1,0x12,0x43,0x15,0xe0,0x90,0x91,0x14,0xf0,0x90,
+0x91,0x9c,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd2,0x12,0x43,0x15,0xe0,0x90,0x91,0x15,
+0xf0,0x90,0x91,0x9c,0xe0,0x75,0xf0,0x04,0x90,0x01,0xd3,0x12,0x43,0x15,0xe0,0x90,
+0x91,0x16,0xf0,0xef,0x54,0x7f,0xff,0x7b,0x01,0x7a,0x91,0x79,0x14,0x12,0x52,0x08,
+0x90,0x91,0x11,0xe0,0xff,0x90,0x91,0x9c,0xe0,0xfe,0x74,0x01,0xa8,0x06,0x08,0x80,
+0x02,0xc3,0x33,0xd8,0xfc,0xf4,0x5f,0x90,0x91,0x11,0xf0,0x90,0x91,0x9c,0xe0,0xff,
+0x74,0x01,0xa8,0x07,0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0x90,0x01,0xcc,0xf0,0x90,
+0x91,0x9c,0xe0,0x04,0xf0,0xe0,0x54,0x03,0xf0,0xc1,0xaa,0x90,0x01,0xc6,0xe0,0x44,
+0x02,0xf0,0x22,0xad,0x07,0x74,0x11,0x2d,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,
+0x44,0x01,0xf0,0x90,0x04,0x80,0xe0,0x54,0x0f,0xfc,0x74,0x14,0x2d,0xf5,0x82,0xe4,
+0x34,0xfc,0xf5,0x83,0xe0,0x54,0xc0,0x4c,0xfd,0x74,0x14,0x2f,0xf5,0x82,0xe4,0x34,
+0xfc,0xf5,0x83,0xed,0xf0,0x22,0xef,0x60,0x0f,0x74,0x21,0x2d,0xf5,0x82,0xe4,0x34,
+0xfc,0xf5,0x83,0xe0,0x44,0x10,0xf0,0x22,0x74,0x21,0x2d,0xf5,0x82,0xe4,0x34,0xfc,
+0xf5,0x83,0xe0,0x54,0xef,0xf0,0x22,0xe4,0xf5,0x6d,0xf5,0x71,0xf5,0x70,0x75,0x6f,
+0x0c,0x75,0x6e,0x0c,0x90,0x91,0x3b,0xf0,0x90,0x91,0x37,0xf0,0x90,0x91,0x36,0xf0,
+0x90,0x91,0x39,0x04,0xf0,0x90,0x91,0x27,0xf0,0xe4,0x90,0x91,0x3c,0xf0,0x90,0x91,
+0x29,0xf0,0x90,0x91,0x34,0x74,0x07,0xf0,0xe4,0x90,0x91,0x28,0xf0,0x90,0x91,0x32,
+0xf0,0xa3,0x74,0x03,0xf0,0x90,0x91,0x2f,0x74,0x0a,0xf0,0xa3,0x74,0x05,0xf0,0x90,
+0x91,0x2d,0x74,0x14,0xf0,0x90,0x91,0x35,0x74,0x05,0xf0,0xe4,0x90,0x91,0x2b,0xf0,
+0x90,0x91,0x25,0xf0,0x90,0x91,0x50,0xf0,0x90,0x91,0x31,0xf0,0x90,0x91,0x3a,0xf0,
+0x90,0x91,0x26,0xf0,0x90,0x91,0x38,0xf0,0x90,0x91,0x2e,0xf0,0x90,0x91,0x2c,0xf0,
+0x22,0x12,0x4c,0x89,0xef,0x64,0x01,0x60,0x08,0x90,0x01,0xb9,0x74,0x01,0xf0,0x80,
+0x30,0x90,0x91,0x37,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x22,0x90,
+0x91,0x36,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x04,0xf0,0x80,0x14,0xe5,0x6f,0x54,
+0x0f,0xd3,0x94,0x04,0x40,0x08,0x90,0x01,0xb9,0x74,0x08,0xf0,0x80,0x03,0x7f,0x01,
+0x22,0x90,0x01,0xb8,0x74,0x08,0xf0,0x7f,0x00,0x22,0x12,0x4c,0x89,0xef,0x64,0x01,
+0x60,0x08,0x90,0x01,0xb9,0x74,0x01,0xf0,0x80,0x58,0xe5,0x71,0x54,0x03,0x60,0x08,
+0x90,0x01,0xb9,0x74,0x02,0xf0,0x80,0x4a,0xe5,0x6f,0x54,0x0f,0xd3,0x94,0x02,0x40,
+0x08,0x90,0x01,0xb9,0x74,0x04,0xf0,0x80,0x39,0xe5,0x71,0x30,0xe2,0x08,0x90,0x01,
+0xb9,0x74,0x08,0xf0,0x80,0x2c,0xe5,0x71,0x30,0xe4,0x08,0x90,0x01,0xb9,0x74,0x10,
+0xf0,0x80,0x1f,0x90,0x91,0x29,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x20,0xf0,0x80,
+0x11,0x90,0x91,0x31,0xe0,0x60,0x08,0x90,0x01,0xb9,0x74,0x80,0xf0,0x80,0x03,0x7f,
+0x01,0x22,0x90,0x01,0xb8,0x74,0x04,0xf0,0x7f,0x00,0x22,0x90,0x06,0x04,0xe0,0x54,
+0xbf,0xf0,0xef,0x60,0x0a,0xe5,0x6d,0xb4,0x01,0x05,0xe4,0xff,0x12,0x47,0xc9,0x53,
+0x6e,0xf0,0x43,0x6e,0x0c,0x22,0x90,0x91,0x9d,0xef,0xf0,0x31,0x9f,0x90,0x91,0x9d,
+0xe0,0x60,0x05,0x90,0x05,0x22,0xe4,0xf0,0x53,0x6e,0xf0,0x43,0x6e,0x04,0x22,0x90,
+0x90,0xd8,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x78,0x7e,0x08,0x12,
+0x2f,0xd9,0x90,0x90,0xdc,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,
+0x7e,0x0c,0x12,0x2f,0xd9,0x90,0x90,0xe0,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,
+0x7f,0x7f,0x00,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x90,0xe4,0x12,0x43,0x09,0x90,0x80,
+0x85,0x12,0x2a,0x7f,0x7f,0x70,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x59,0x12,0x2a,
+0x8b,0x00,0x03,0x2d,0x95,0xe4,0xfd,0xff,0x12,0x34,0x81,0x90,0x91,0x51,0xe0,0xb4,
+0x01,0x11,0x90,0x80,0x59,0x12,0x2a,0x8b,0x00,0x03,0x2d,0x95,0xe4,0xfd,0x7f,0x01,
+0x12,0x34,0x81,0x22,0x8f,0x77,0xe4,0x90,0x91,0x96,0xf0,0xa3,0xf0,0x90,0x01,0x09,
+0xe0,0x7f,0x00,0x30,0xe7,0x02,0x7f,0x01,0xef,0x65,0x77,0x60,0x3e,0xc3,0x90,0x91,
+0x97,0xe0,0x94,0x88,0x90,0x91,0x96,0xe0,0x94,0x13,0x40,0x08,0x90,0x01,0xc6,0xe0,
+0x44,0x80,0xf0,0x22,0x90,0x91,0x96,0xe4,0x75,0xf0,0x01,0x12,0x42,0x81,0x7f,0x14,
+0x7e,0x00,0x12,0x37,0x54,0xd3,0x90,0x91,0x97,0xe0,0x94,0x32,0x90,0x91,0x96,0xe0,
+0x94,0x00,0x40,0xb9,0x90,0x01,0xc7,0xe0,0x30,0xe0,0xb2,0x22,0x53,0x6e,0xf0,0x43,
+0x6e,0x01,0x12,0x45,0x00,0x12,0x45,0x01,0x53,0x6e,0xf0,0x43,0x6e,0x02,0x22,0x8f,
+0x78,0x12,0x47,0xe6,0xef,0x64,0x01,0x70,0x2e,0x90,0x91,0x44,0x12,0x48,0x1e,0xe5,
+0x78,0x60,0x10,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x44,0x10,
+0xf0,0x80,0x0e,0x74,0x21,0x2f,0xf5,0x82,0xe4,0x34,0xfc,0xf5,0x83,0xe0,0x54,0xef,
+0xf0,0x90,0x04,0x1f,0x74,0x20,0xf0,0x22,0xe5,0x6d,0x64,0x01,0x70,0x63,0xe5,0x70,
+0x60,0x5f,0xe5,0x70,0x64,0x02,0x60,0x06,0xe5,0x70,0x64,0x05,0x70,0x27,0x90,0x06,
+0xab,0xe0,0x90,0x91,0x27,0xf0,0x90,0x06,0xaa,0xe0,0x90,0x91,0x39,0xf0,0x90,0x91,
+0x27,0xe0,0x70,0x07,0x90,0x91,0x39,0xe0,0xff,0x80,0x05,0x90,0x91,0x27,0xe0,0xff,
+0x90,0x91,0x27,0xef,0xf0,0x90,0x91,0x29,0xe0,0x60,0x03,0xe0,0x14,0xf0,0xe4,0x90,
+0x91,0x28,0xf0,0x90,0x01,0x57,0xf0,0x90,0x01,0x3c,0x74,0x02,0xf0,0x53,0x71,0xfd,
+0x53,0x71,0xef,0xe5,0x70,0x14,0x24,0xfd,0x50,0x02,0x80,0x03,0x12,0x45,0xc7,0x71,
+0x22,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0xd0,0xd0,0x92,0xaf,0x22,0xe4,0xfb,
+0x90,0x91,0x78,0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0xe5,0x70,0x70,0x02,0x61,0xc0,
+0xe5,0x6d,0x64,0x01,0x70,0x7a,0xe5,0x70,0x14,0x60,0x2b,0x24,0xfd,0x60,0x27,0x24,
+0x02,0x24,0xfb,0x50,0x02,0x80,0x21,0x90,0x91,0x27,0xe0,0x14,0xf0,0xe0,0x60,0x04,
+0xa3,0xe0,0x60,0x14,0x90,0x91,0x27,0xe0,0x70,0x08,0x90,0x91,0x39,0xe0,0x90,0x91,
+0x27,0xf0,0x7b,0x01,0x80,0x02,0x7b,0x01,0xeb,0x60,0x45,0x43,0x71,0x10,0xe4,0x90,
+0x91,0x66,0xf0,0x90,0x91,0x3a,0xe0,0x75,0xf0,0x05,0xa4,0xff,0x90,0x91,0x34,0xe0,
+0x2f,0x12,0x44,0x4e,0x90,0x01,0x57,0x74,0x05,0xf0,0xe5,0x6e,0x54,0x0f,0xc3,0x94,
+0x04,0x50,0x07,0x7d,0x01,0x7f,0x04,0x12,0x47,0x27,0x90,0x91,0x2e,0xe0,0x60,0x10,
+0x90,0x91,0x2c,0xe0,0x90,0x07,0x78,0x60,0x04,0x74,0x0d,0xf0,0x22,0x74,0x09,0xf0,
+0x22,0xe4,0xfb,0x90,0x91,0x7c,0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0xe5,0x70,0x60,
+0x5f,0xe5,0x6d,0x64,0x01,0x70,0x59,0x0b,0x90,0x91,0x27,0xf0,0x04,0x60,0x51,0x43,
+0x71,0x10,0xe4,0x90,0x91,0x66,0xf0,0x90,0x91,0x3a,0xe0,0x75,0xf0,0x05,0xa4,0xff,
+0x90,0x91,0x34,0xe0,0x2f,0x90,0x91,0x67,0xf0,0xe4,0x1b,0x12,0x44,0x54,0x90,0x01,
+0x57,0x74,0x05,0xf0,0xe5,0x6e,0x54,0x0f,0xc3,0x94,0x04,0x50,0x07,0x7d,0x01,0x7f,
+0x04,0x12,0x47,0x27,0x90,0x91,0x2e,0xe0,0x60,0x11,0x90,0x91,0x2c,0xe0,0x90,0x07,
+0x78,0x60,0x05,0x74,0x0d,0xf0,0x80,0x03,0x74,0x09,0xf0,0x90,0x05,0x22,0xe4,0xf0,
+0x22,0x90,0x91,0x80,0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0xe5,0x70,0x14,0x24,0xfd,
+0x50,0x02,0x80,0x21,0x90,0x91,0x3b,0xe0,0x60,0x06,0x7d,0x01,0x7f,0x0c,0x80,0x0d,
+0xe5,0x6e,0x54,0x0f,0xc3,0x94,0x04,0x50,0x07,0x7d,0x01,0x7f,0x04,0x12,0x47,0x27,
+0xe4,0xff,0x12,0x48,0xb3,0x22,0x90,0x91,0x08,0xe0,0x54,0xf0,0x44,0x03,0xf0,0x54,
+0x0f,0x44,0x80,0xf0,0x7b,0x00,0x7a,0x00,0x79,0x58,0x90,0x91,0x71,0x12,0x43,0x41,
+0x0b,0x7a,0x91,0x79,0x08,0x02,0x46,0xb7,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,0x90,
+0x91,0x84,0xee,0xf0,0xa3,0xef,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0x90,0x91,0x84,0xe0,
+0xfe,0xa3,0xe0,0xf5,0x82,0x8e,0x83,0xe0,0x60,0x2d,0xc3,0x90,0x91,0x87,0xe0,0x94,
+0xe8,0x90,0x91,0x86,0xe0,0x94,0x03,0x40,0x0b,0x90,0x01,0xc6,0xe0,0x44,0x10,0xf0,
+0x7f,0x00,0x80,0x15,0x90,0x91,0x86,0xe4,0x75,0xf0,0x01,0x12,0x42,0x81,0x7f,0x0a,
+0x7e,0x00,0x12,0x37,0x54,0x80,0xc5,0x7f,0x01,0xd0,0xd0,0x92,0xaf,0x22,0xd3,0x10,
+0xaf,0x01,0xc3,0xc0,0xd0,0x90,0x91,0x1c,0x12,0x43,0x41,0x90,0x91,0x1f,0x12,0x2a,
+0x8b,0x00,0x00,0x00,0x00,0x90,0x91,0x1c,0x12,0x43,0x21,0x90,0x00,0x01,0x12,0x42,
+0x20,0x90,0x91,0x3b,0xf0,0x90,0x00,0x03,0x12,0x42,0x20,0x90,0x91,0x25,0xf0,0x90,
+0x00,0x04,0x12,0x42,0x20,0xff,0x54,0x01,0x90,0x91,0x26,0xf0,0xef,0xc3,0x13,0x54,
+0x01,0x90,0x91,0x2e,0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0xff,0x13,0x13,0x54,0x01,
+0x90,0x91,0x2c,0xf0,0x90,0x91,0x2e,0xe0,0x90,0x91,0x1f,0x70,0x26,0x12,0x2a,0x8b,
+0x00,0x00,0x02,0x10,0x90,0x91,0x1f,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,
+0x7f,0x60,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x91,0x1f,0x12,0x2a,0x8b,0x00,0x00,0x03,
+0x10,0x80,0x24,0x12,0x2a,0x8b,0x00,0x00,0x01,0x10,0x90,0x91,0x1f,0x12,0x43,0x09,
+0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x60,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x91,0x1f,
+0x12,0x2a,0x8b,0x00,0x00,0x03,0x00,0x90,0x91,0x1f,0x12,0x43,0x09,0x90,0x80,0x85,
+0x12,0x2a,0x7f,0x7f,0x70,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x91,0x26,0xe0,0x70,0x3d,
+0x90,0x91,0x38,0x74,0x01,0xf0,0x7f,0x00,0x7e,0x08,0x12,0x27,0xde,0x90,0x91,0x1f,
+0x12,0x2a,0x7f,0x90,0x91,0x1f,0x12,0x43,0x09,0xec,0x44,0x02,0xfc,0x90,0x91,0x1f,
+0x12,0x2a,0x7f,0x90,0x91,0x1f,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
+0x00,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x02,0x86,0xe0,0x54,0xfb,0xf0,0x90,0x91,0x1c,
+0x12,0x43,0x21,0x12,0x49,0x80,0x90,0x01,0xe5,0xe5,0x70,0xf0,0x90,0x91,0x3b,0xe0,
+0x90,0x01,0xe6,0xf0,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x00,0x02,0x12,0x42,0x20,0xff,
+0x30,0xe0,0x25,0x12,0x29,0xd9,0x90,0x91,0x2f,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,
+0x90,0x91,0x30,0xf0,0xef,0xc3,0x13,0x54,0x7f,0x90,0x91,0x2d,0xf0,0x90,0x00,0x03,
+0x12,0x42,0x20,0x90,0x91,0x35,0xf0,0x22,0x90,0x91,0x2f,0x74,0x0a,0xf0,0x90,0x91,
+0x30,0x74,0x05,0xf0,0x90,0x91,0x2d,0x74,0x14,0xf0,0x90,0x91,0x35,0x74,0x05,0xf0,
+0x22,0x90,0x02,0x09,0xe0,0xfd,0x12,0x29,0xd9,0xfe,0xaf,0x05,0xed,0x2e,0x90,0x91,
+0x41,0xf0,0x90,0x00,0x01,0x12,0x42,0x20,0xff,0xed,0x2f,0x90,0x91,0x42,0xf0,0x90,
+0x00,0x02,0x12,0x42,0x20,0xff,0xed,0x2f,0x90,0x91,0x43,0xf0,0x90,0x00,0x03,0x12,
+0x42,0x20,0xff,0xed,0x2f,0x90,0x91,0x44,0xf0,0x90,0x00,0x04,0x12,0x42,0x20,0xff,
+0xae,0x05,0xed,0x2f,0x90,0x91,0x45,0xf0,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
+0x90,0x91,0x47,0xe0,0x90,0x91,0x1d,0xf0,0x90,0x91,0x48,0xe0,0xf5,0x19,0xa3,0xe0,
+0xf5,0x1a,0xe4,0xf5,0x16,0x74,0x4a,0x25,0x16,0xf5,0x82,0xe4,0x34,0x91,0xf5,0x83,
+0xe0,0xff,0x74,0x1b,0x25,0x16,0xf8,0xa6,0x07,0x05,0x16,0xe5,0x16,0xb4,0x04,0xe5,
+0x90,0x91,0x1d,0xe0,0x12,0x43,0x4a,0x66,0xe6,0x00,0x68,0x13,0x01,0x66,0xee,0x02,
+0x66,0xee,0x03,0x66,0xee,0x04,0x68,0x13,0x05,0x67,0xe3,0x80,0x67,0xf9,0x81,0x68,
+0x13,0x82,0x00,0x00,0x68,0x0f,0xaf,0x1e,0x12,0x73,0xdd,0x02,0x68,0x13,0x90,0x91,
+0x1d,0xe0,0xff,0xb4,0x02,0x08,0x90,0x91,0x1c,0x74,0x01,0xf0,0x80,0x0f,0xef,0x90,
+0x91,0x1c,0xb4,0x03,0x05,0x74,0x02,0xf0,0x80,0x03,0x74,0x04,0xf0,0xc3,0xe5,0x19,
+0x94,0x08,0x50,0x4a,0xe4,0xf5,0x16,0x90,0x91,0x1c,0xe0,0xff,0xe5,0x16,0xc3,0x9f,
+0x40,0x03,0x02,0x68,0x13,0xc3,0xe5,0x19,0x94,0x01,0x50,0x14,0xe5,0x16,0x25,0x1a,
+0xff,0xc3,0x74,0x03,0x95,0x16,0x24,0x1b,0xf8,0xe6,0xfd,0x12,0x4d,0xa8,0x80,0x1a,
+0xc3,0x74,0x03,0x95,0x16,0x24,0x1b,0xf8,0xe6,0xff,0xe5,0x16,0x7c,0x00,0x25,0x1a,
+0xfd,0xec,0x35,0x19,0x8d,0x82,0xf5,0x83,0xef,0xf0,0x05,0x16,0x80,0xb9,0xc3,0xe5,
+0x19,0x94,0x10,0x40,0x03,0x02,0x68,0x13,0x90,0x91,0x1d,0xe0,0x64,0x04,0x60,0x03,
+0x02,0x68,0x13,0xaf,0x1c,0xfc,0xfd,0xfe,0x78,0x10,0x12,0x2a,0x6c,0xc0,0x04,0xc0,
+0x05,0xc0,0x06,0xc0,0x07,0xaf,0x1b,0xe4,0xfc,0xfd,0xfe,0x78,0x18,0x12,0x2a,0x6c,
+0xd0,0x03,0xd0,0x02,0xd0,0x01,0xd0,0x00,0x12,0x42,0xfc,0xc0,0x04,0xc0,0x05,0xc0,
+0x06,0xc0,0x07,0xaf,0x1d,0xe4,0xfc,0xfd,0xfe,0x78,0x08,0x12,0x2a,0x6c,0xd0,0x03,
+0xd0,0x02,0xd0,0x01,0xd0,0x00,0x12,0x42,0xfc,0xa8,0x04,0xa9,0x05,0xaa,0x06,0xab,
+0x07,0xaf,0x1e,0xe4,0xfc,0xfd,0xfe,0x12,0x42,0xfc,0xa3,0x12,0x2a,0x7f,0x90,0x91,
+0x1e,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0xaf,0x1a,0xae,0x19,0x12,0x2f,
+0xd9,0x80,0x30,0xe5,0x1d,0x7f,0x00,0xfe,0xef,0x25,0x1e,0xf5,0x18,0xe4,0x3e,0xf5,
+0x17,0xaf,0x18,0xfe,0x12,0x37,0x54,0x80,0x1a,0xe5,0x1d,0x7f,0x00,0xfe,0xef,0x25,
+0x1e,0xf5,0x18,0xe4,0x3e,0xf5,0x17,0xaf,0x18,0xfe,0x12,0x36,0xcb,0x80,0x04,0x7f,
+0x00,0x80,0x02,0x7f,0x01,0xd0,0xd0,0x92,0xaf,0x22,0x8e,0x0e,0x8f,0x0f,0x8b,0x10,
+0x8a,0x11,0x89,0x12,0xe4,0x90,0x91,0x11,0xf0,0xef,0x90,0x00,0x31,0xf0,0x12,0x4c,
+0xa0,0xe5,0x0e,0x54,0x03,0xff,0x90,0x00,0x32,0xe0,0x54,0xfc,0x4f,0xf0,0x12,0x4c,
+0xa0,0x90,0x00,0x33,0xe0,0x54,0x7f,0xf0,0x12,0x4c,0xa0,0x90,0x00,0x33,0xe0,0x20,
+0xe7,0x0e,0x90,0x91,0x11,0xe0,0xc3,0x94,0x64,0x50,0x05,0xe0,0x04,0xf0,0x80,0xeb,
+0x90,0x91,0x11,0xe0,0xc3,0x94,0x64,0x50,0x10,0x90,0x00,0x30,0xe0,0xab,0x10,0xaa,
+0x11,0xa9,0x12,0x12,0x42,0x4d,0x7f,0x01,0x22,0x7f,0x00,0x22,0xe4,0x90,0x91,0x98,
+0xf0,0xa3,0xf0,0x90,0x05,0xf8,0xe0,0x70,0x0f,0xa3,0xe0,0x70,0x0b,0xa3,0xe0,0x70,
+0x07,0xa3,0xe0,0x70,0x03,0x7f,0x01,0x22,0xd3,0x90,0x91,0x99,0xe0,0x94,0xe8,0x90,
+0x91,0x98,0xe0,0x94,0x03,0x40,0x03,0x7f,0x00,0x22,0x7f,0x32,0x7e,0x00,0x12,0x37,
+0x54,0x90,0x91,0x98,0xe4,0x75,0xf0,0x01,0x12,0x42,0x81,0x80,0xc6,0x7f,0x78,0x7e,
+0x08,0x12,0x27,0xde,0x90,0x90,0xd8,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x27,
+0xde,0x90,0x90,0xdc,0x12,0x2a,0x7f,0x7f,0x00,0x7e,0x08,0x12,0x27,0xde,0x90,0x90,
+0xe0,0x12,0x2a,0x7f,0x90,0x91,0x51,0xe0,0x90,0x90,0xd8,0xb4,0x01,0x0d,0x12,0x43,
+0x09,0xef,0x54,0xc7,0xff,0xed,0x54,0xc7,0xfd,0x80,0x07,0x12,0x43,0x09,0xef,0x54,
+0xc7,0xff,0xec,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x78,0x7e,0x08,0x12,0x2f,0xd9,
+0x90,0x90,0xdc,0x12,0x43,0x09,0xef,0x54,0x0f,0xff,0xec,0x90,0x80,0x85,0x12,0x2a,
+0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x90,0x90,0xe0,0x12,0x43,0x09,0xef,0x44,
+0x02,0xff,0xec,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x00,0x7e,0x08,0x12,0x2f,0xd9,
+0x7f,0x70,0x7e,0x0e,0x12,0x27,0xde,0x90,0x90,0xe4,0x12,0x2a,0x7f,0x90,0x80,0x85,
+0x12,0x2a,0x8b,0x00,0x1b,0x25,0xa0,0x7f,0x70,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,
+0x59,0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0xe4,0xfd,0xff,0x12,0x34,0x81,0x90,0x91,
+0x51,0xe0,0xb4,0x01,0x11,0x90,0x80,0x59,0x12,0x2a,0x8b,0x00,0x00,0x00,0x00,0xe4,
+0xfd,0x7f,0x01,0x12,0x34,0x81,0x22,0xef,0x70,0x02,0x61,0x3d,0x90,0x90,0xe8,0xe0,
+0x60,0x02,0xe1,0x08,0x90,0x90,0xd4,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,
+0x7f,0x8c,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x90,0x80,0x12,0x43,0x09,0x90,0x80,0x85,
+0x12,0x2a,0x7f,0x7f,0x44,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x90,0x84,0x12,0x43,0x09,
+0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x5c,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x90,0x88,
+0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x6c,0x7e,0x0e,0x12,0x2f,0xd9,
+0x90,0x90,0x8c,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x70,0x7e,0x0e,
+0x12,0x2f,0xd9,0x90,0x90,0x90,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
+0x74,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x90,0x94,0x12,0x43,0x09,0x90,0x80,0x85,0x12,
+0x2a,0x7f,0x7f,0x78,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x90,0x98,0x12,0x43,0x09,0x90,
+0x80,0x85,0x12,0x2a,0x7f,0x7f,0x7c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x90,0x9c,0x12,
+0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x80,0x7e,0x0e,0x12,0x2f,0xd9,0x90,
+0x90,0xa0,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x84,0x7e,0x0e,0x12,
+0x2f,0xd9,0x90,0x90,0xa4,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x88,
+0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x90,0xa8,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,
+0x7f,0x7f,0x8c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x90,0xac,0x12,0x43,0x09,0x90,0x80,
+0x85,0x12,0x2a,0x7f,0x7f,0xd0,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x90,0xb0,0x12,0x43,
+0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0xd4,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x90,
+0xb4,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0xd8,0x7e,0x0e,0x12,0x2f,
+0xd9,0x90,0x90,0xb8,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0xdc,0x7e,
+0x0e,0x12,0x2f,0xd9,0x90,0x90,0xbc,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,
+0x7f,0xe0,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x90,0xc0,0x12,0x43,0x09,0x90,0x80,0x85,
+0x12,0x2a,0x7f,0x7f,0xec,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x90,0xc4,0x12,0x43,0x09,
+0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x90,0x90,0xc8,
+0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x0d,0x12,0x2f,0xd9,
+0x90,0x90,0xcc,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,
+0x12,0x2f,0xd9,0x90,0x90,0xd0,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
+0x04,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x90,0xe8,0x74,0x01,0xf0,0x22,0x90,0x90,0xe8,
+0xe0,0x64,0x01,0x60,0x02,0xe1,0x08,0x7f,0x8c,0x7e,0x08,0x12,0x27,0xde,0x90,0x90,
+0xd4,0x12,0x2a,0x7f,0x7f,0x44,0x7e,0x08,0x12,0x27,0xde,0x90,0x90,0x80,0x12,0x2a,
+0x7f,0x7f,0x5c,0x7e,0x08,0x12,0x27,0xde,0x90,0x90,0x84,0x12,0x2a,0x7f,0x7f,0x6c,
+0x7e,0x0e,0x12,0x27,0xde,0x90,0x90,0x88,0x12,0x2a,0x7f,0x7f,0x70,0x7e,0x0e,0x12,
+0x27,0xde,0x90,0x90,0x8c,0x12,0x2a,0x7f,0x7f,0x74,0x7e,0x0e,0x12,0x27,0xde,0x90,
+0x90,0x90,0x12,0x2a,0x7f,0x7f,0x78,0x7e,0x0e,0x12,0x27,0xde,0x90,0x90,0x94,0x12,
+0x2a,0x7f,0x7f,0x7c,0x7e,0x0e,0x12,0x27,0xde,0x90,0x90,0x98,0x12,0x2a,0x7f,0x7f,
+0x80,0x7e,0x0e,0x12,0x27,0xde,0x90,0x90,0x9c,0x12,0x2a,0x7f,0x7f,0x84,0x7e,0x0e,
+0x12,0x27,0xde,0x90,0x90,0xa0,0x12,0x2a,0x7f,0x7f,0x88,0x7e,0x0e,0x12,0x27,0xde,
+0x90,0x90,0xa4,0x12,0x2a,0x7f,0x7f,0x8c,0x7e,0x0e,0x12,0x27,0xde,0x90,0x90,0xa8,
+0x12,0x2a,0x7f,0x7f,0xd0,0x7e,0x0e,0x12,0x27,0xde,0x90,0x90,0xac,0x12,0x2a,0x7f,
+0x7f,0xd4,0x7e,0x0e,0x12,0x27,0xde,0x90,0x90,0xb0,0x12,0x2a,0x7f,0x7f,0xd8,0x7e,
+0x0e,0x12,0x27,0xde,0x90,0x90,0xb4,0x12,0x2a,0x7f,0x7f,0xdc,0x7e,0x0e,0x12,0x27,
+0xde,0x90,0x90,0xb8,0x12,0x2a,0x7f,0x7f,0xe0,0x7e,0x0e,0x12,0x27,0xde,0x90,0x90,
+0xbc,0x12,0x2a,0x7f,0x7f,0xec,0x7e,0x0e,0x12,0x27,0xde,0x90,0x90,0xc0,0x12,0x2a,
+0x7f,0x7f,0x04,0x7e,0x0c,0x12,0x27,0xde,0x90,0x90,0xc4,0x12,0x2a,0x7f,0x7f,0x04,
+0x7e,0x0d,0x12,0x27,0xde,0x90,0x90,0xc8,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,
+0x27,0xde,0x90,0x90,0xcc,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x08,0x12,0x27,0xde,0x90,
+0x90,0xd0,0x12,0x2a,0x7f,0x7f,0x8c,0x7e,0x08,0x12,0x27,0xde,0x90,0x91,0x88,0x12,
+0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0xed,0x44,0xc0,0xfd,0xec,0x90,0x91,0x88,
+0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,
+0x8c,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x01,0x00,0x00,
+0x7f,0x44,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0xdb,0x25,
+0xa4,0x7f,0x5c,0x7e,0x08,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,
+0x25,0xa4,0x7f,0x6c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,
+0xdb,0x25,0xa4,0x7f,0x70,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,
+0x04,0x1b,0x25,0xa4,0x7f,0x74,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,
+0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x78,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,
+0x2a,0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x7c,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,
+0x12,0x2a,0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x80,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,
+0x85,0x12,0x2a,0x8b,0x63,0xdb,0x25,0xa4,0x7f,0x84,0x7e,0x0e,0x12,0x2f,0xd9,0x90,
+0x80,0x85,0x12,0x2a,0x8b,0x04,0x1b,0x25,0xa4,0x7f,0x88,0x7e,0x0e,0x12,0x2f,0xd9,
+0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0x8c,0x7e,0x0e,0x12,0x2f,
+0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd0,0x7e,0x0e,0x12,
+0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd4,0x7e,0x0e,
+0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x20,0xdb,0x25,0xa4,0x7f,0xd8,0x7e,
+0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x1b,0x25,0xa4,0x7f,0xdc,
+0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x00,0x1b,0x25,0xa4,0x7f,
+0xe0,0x7e,0x0e,0x12,0x2f,0xd9,0x90,0x80,0x85,0x12,0x2a,0x8b,0x24,0xdb,0x25,0xa4,
+0x7f,0xec,0x7e,0x0e,0x12,0x2f,0xd9,0x7f,0x04,0x7e,0x0c,0x12,0x27,0xde,0x90,0x91,
+0x88,0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0xe4,0xff,0xec,0x90,0x91,0x88,
+0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0xef,0x44,0x11,0xff,0xec,0x90,0x91,
+0x88,0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,
+0x7f,0x04,0x7e,0x0c,0x12,0x2f,0xd9,0x7f,0x04,0x7e,0x0d,0x12,0x27,0xde,0x90,0x91,
+0x88,0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0xef,0x54,0xf0,0xff,0xec,0x90,
+0x91,0x88,0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0xef,0x44,0x01,0xff,0xec,
+0x90,0x91,0x88,0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0x90,0x80,0x85,0x12,
+0x2a,0x7f,0x7f,0x04,0x7e,0x0d,0x12,0x2f,0xd9,0x7f,0x0c,0x7e,0x09,0x12,0x27,0xde,
+0x90,0x91,0x88,0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0xe4,0xff,0xec,0x90,
+0x91,0x88,0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0xef,0x44,0x11,0xff,0xec,
+0x90,0x91,0x88,0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0x90,0x80,0x85,0x12,
+0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,0x2f,0xd9,0x7f,0x0c,0x7e,0x09,0x12,0x27,0xde,
+0x90,0x91,0x88,0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,0xed,0x54,0x0f,0xfd,
+0xec,0x54,0xf0,0xfc,0x90,0x91,0x88,0x12,0x2a,0x7f,0x90,0x91,0x88,0x12,0x43,0x09,
+0xed,0x44,0x10,0xfd,0xec,0x44,0x01,0xfc,0x90,0x91,0x88,0x12,0x2a,0x7f,0x90,0x91,
+0x88,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x0c,0x7e,0x09,0x12,0x2f,
+0xd9,0x7f,0x04,0x7e,0x08,0x12,0x27,0xde,0x90,0x91,0x88,0x12,0x2a,0x7f,0x90,0x91,
+0x88,0x12,0x43,0x09,0xef,0x54,0xf0,0xff,0xec,0x90,0x91,0x88,0x12,0x2a,0x7f,0x90,
+0x91,0x88,0x12,0x43,0x09,0xef,0x44,0x01,0xff,0xec,0x90,0x91,0x88,0x12,0x2a,0x7f,
+0x90,0x91,0x88,0x12,0x43,0x09,0x90,0x80,0x85,0x12,0x2a,0x7f,0x7f,0x04,0x7e,0x08,
+0x12,0x2f,0xd9,0xe4,0x90,0x90,0xe8,0xf0,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,0xd0,
+0x90,0x91,0xa0,0xef,0xf0,0xd3,0x94,0x07,0x50,0x47,0xe0,0xff,0x74,0x01,0xa8,0x07,
+0x08,0x80,0x02,0xc3,0x33,0xd8,0xfc,0xf4,0xff,0x90,0x00,0x46,0xe0,0x5f,0xf0,0x12,
+0x4c,0xa0,0x90,0x91,0xa0,0xe0,0xfd,0x74,0x01,0x7e,0x00,0xa8,0x05,0x08,0x80,0x05,
+0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x00,0x44,0xe0,0xfb,0xe4,0xfe,0xef,
+0x5b,0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,0x13,0xce,0x13,0xd8,0xf8,0xff,0x80,
+0x44,0x90,0x91,0xa0,0xe0,0x24,0xf8,0xf0,0xe0,0xff,0x74,0x01,0xa8,0x07,0x08,0x80,
+0x02,0xc3,0x33,0xd8,0xfc,0x12,0x4c,0x98,0x90,0x91,0xa0,0xe0,0xfd,0x74,0x01,0x7e,
+0x00,0xa8,0x05,0x08,0x80,0x05,0xc3,0x33,0xce,0x33,0xce,0xd8,0xf9,0xff,0x90,0x00,
+0x42,0xe0,0xfb,0xe4,0xfe,0xef,0x5b,0xa8,0x05,0x08,0x80,0x06,0xce,0xa2,0xe7,0x13,
+0xce,0x13,0xd8,0xf8,0xff,0xd0,0xd0,0x92,0xaf,0x22,0xe4,0xfd,0x7f,0x45,0x12,0x4d,
+0xa8,0x90,0x04,0xfd,0xe4,0xf0,0xa3,0xf0,0x90,0x90,0xf7,0xf0,0x90,0x90,0xfd,0xf0,
+0x90,0x91,0x00,0xf0,0x90,0x90,0xfe,0xf0,0x90,0x91,0x01,0xf0,0x90,0x90,0xff,0xf0,
+0x90,0x91,0x02,0xf0,0x90,0x90,0xe9,0x04,0xf0,0xe4,0xa3,0xf0,0xa3,0xf0,0xa3,0xf0,
+0x90,0x90,0xee,0xf0,0x90,0x90,0xf3,0xf0,0x90,0x90,0xf5,0xf0,0x90,0x91,0x07,0xf0,
+0x90,0x90,0xf8,0xf0,0x90,0x90,0xf4,0xf0,0x90,0x90,0xed,0xf0,0x90,0x00,0x51,0xe0,
+0x44,0xc0,0xfd,0x7f,0x51,0x02,0x4d,0xa8,0x90,0x91,0x07,0xe0,0x64,0x01,0x60,0x08,
+0x90,0x90,0xf5,0xe0,0x60,0x02,0x01,0xdf,0x90,0x90,0xe9,0xe0,0xc3,0x94,0xff,0x50,
+0x05,0xe0,0x04,0xf0,0x80,0x3b,0x90,0x90,0xea,0xe0,0xc3,0x94,0xff,0x50,0x06,0xe0,
+0x04,0xf0,0xe4,0x80,0x28,0x90,0x90,0xeb,0xe0,0xc3,0x94,0xff,0x50,0x0a,0xe0,0x04,
+0xf0,0xe4,0x90,0x90,0xea,0xf0,0x80,0x15,0x90,0x90,0xec,0xe0,0xc3,0x94,0xff,0x50,
+0x10,0xe0,0x04,0xf0,0xe4,0x90,0x90,0xeb,0xf0,0x90,0x90,0xea,0xf0,0x90,0x90,0xe9,
+0xf0,0x90,0x00,0x44,0xe0,0x54,0x0c,0x60,0x76,0xe0,0x30,0xe2,0x32,0x90,0x90,0xfd,
+0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,0x04,0xf0,0x80,0x24,0x90,0x90,0xfe,0xe0,0xc3,
+0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,0xe4,0x80,0x11,0x90,0x90,0xff,0xe0,0xc3,0x94,
+0xff,0x50,0x0c,0xe0,0x04,0xf0,0xe4,0x90,0x90,0xfe,0xf0,0x90,0x90,0xfd,0xf0,0x90,
+0x00,0x44,0xe0,0x30,0xe3,0x32,0x90,0x91,0x00,0xe0,0xc3,0x94,0xff,0x50,0x05,0xe0,
+0x04,0xf0,0x80,0x24,0x90,0x91,0x01,0xe0,0xc3,0x94,0xff,0x50,0x06,0xe0,0x04,0xf0,
+0xe4,0x80,0x11,0x90,0x91,0x02,0xe0,0xc3,0x94,0xff,0x50,0x0c,0xe0,0x04,0xf0,0xe4,
+0x90,0x91,0x01,0xf0,0x90,0x91,0x00,0xf0,0x90,0x04,0xfd,0xe0,0x44,0x01,0xf0,0x22,
+0xe5,0x6e,0x30,0xe3,0x04,0xe4,0xff,0x80,0x02,0x7f,0x01,0x02,0x47,0xc9,0x90,0x91,
+0x53,0xe0,0x30,0xe0,0x49,0xe5,0x6d,0x64,0x01,0x70,0x43,0x90,0x91,0x52,0xe0,0x04,
+0xf0,0xe5,0x70,0x64,0x03,0x60,0x05,0xe5,0x70,0xb4,0x06,0x0d,0x90,0x91,0x52,0xe0,
+0xff,0x74,0x01,0xd3,0x9f,0x50,0x14,0x80,0x07,0x90,0x91,0x52,0xe0,0xb4,0x0a,0x0b,
+0x90,0x91,0x55,0xe0,0x04,0xf0,0xe4,0x90,0x91,0x52,0xf0,0x90,0x91,0x55,0xe0,0xff,
+0x90,0x91,0x54,0xe0,0xb5,0x07,0x07,0x11,0xe0,0xe4,0x90,0x91,0x55,0xf0,0x22,0x90,
+0x06,0x90,0xe0,0x44,0x01,0xf0,0x90,0x91,0x61,0xe0,0x30,0xe0,0x3c,0x90,0x91,0x5f,
+0xe0,0xff,0x90,0x91,0x5e,0xe0,0xfe,0xc4,0x13,0x54,0x01,0xfd,0x12,0x4c,0xb0,0x90,
+0x91,0x60,0xe0,0x75,0xf0,0x20,0xa4,0xff,0xae,0xf0,0x12,0x37,0x54,0x90,0x91,0x5e,
+0xe0,0xc4,0x13,0x54,0x07,0x30,0xe0,0x07,0xa3,0xe0,0xff,0xe4,0xfd,0x80,0x07,0x90,
+0x91,0x5f,0xe0,0xff,0x7d,0x01,0x12,0x4c,0xb0,0x22,0xd3,0x10,0xaf,0x01,0xc3,0xc0,
+0xd0,0xe4,0x90,0x91,0x19,0xf0,0xa3,0x74,0x08,0xf0,0xa3,0xf0,0xe4,0xa3,0xf0,0x90,
+0x01,0x1f,0xe0,0xfe,0x90,0x01,0x1e,0xe0,0x7c,0x00,0x24,0x00,0xff,0xec,0x3e,0x90,
+0x91,0x11,0xf0,0xa3,0xef,0xf0,0x90,0x02,0x87,0xe0,0x90,0x91,0x18,0xf0,0x90,0x91,
+0x56,0xe0,0x20,0xe0,0x02,0x61,0xb7,0xe4,0x90,0x91,0x17,0xf0,0x90,0x91,0x18,0xe0,
+0xff,0x90,0x91,0x17,0xe0,0xc3,0x9f,0x40,0x02,0x61,0xb7,0x90,0x91,0x11,0xe0,0xfc,
+0xa3,0xe0,0xfd,0xec,0xff,0x90,0xfd,0x11,0xf0,0x90,0x91,0x1c,0xef,0xf0,0x74,0x02,
+0x2d,0xf5,0x82,0xe4,0x34,0xfb,0xf5,0x83,0xe0,0x54,0x0f,0xfc,0x33,0x33,0x33,0x54,
+0xf8,0xff,0xed,0x24,0x18,0x2f,0x90,0x91,0x15,0xf0,0xe0,0x24,0x00,0xf5,0x82,0xe4,
+0x34,0xfb,0xf5,0x83,0xe0,0x54,0xfc,0x90,0x91,0x16,0xf0,0x74,0x01,0x2d,0xf5,0x82,
+0xe4,0x34,0xfb,0xf5,0x83,0xe0,0xfe,0x74,0x00,0x2d,0xf5,0x82,0xe4,0x34,0xfb,0xf5,
+0x83,0xe0,0x7a,0x00,0x24,0x00,0xff,0xea,0x3e,0x54,0x3f,0xab,0x07,0xfa,0x90,0x91,
+0x13,0xf0,0xa3,0xeb,0xf0,0xaf,0x04,0xef,0x75,0xf0,0x08,0xa4,0x24,0x18,0xff,0xe4,
+0x35,0xf0,0xfe,0xef,0x2b,0xfb,0xee,0x3a,0xfa,0x90,0x91,0x5a,0xe0,0xfe,0xa3,0xe0,
+0xff,0xad,0x03,0xac,0x02,0x12,0x45,0x09,0xaa,0x06,0xab,0x07,0x90,0x91,0x15,0xe0,
+0x24,0x00,0xf5,0x82,0xe4,0x34,0xfb,0xf5,0x83,0xe0,0x30,0xe7,0x08,0x90,0x91,0x19,
+0x74,0x02,0xf0,0x80,0x05,0xe4,0x90,0x91,0x19,0xf0,0xaf,0x03,0x90,0x91,0x11,0xea,
+0x8f,0xf0,0x12,0x42,0x81,0x90,0x91,0x5c,0xe0,0xfe,0xa3,0xe0,0xff,0x90,0x91,0x11,
+0xe0,0xfc,0xa3,0xe0,0xfd,0xd3,0x9f,0xec,0x9e,0x40,0x1b,0x90,0x91,0x5d,0xe0,0x24,
+0x01,0xff,0x90,0x91,0x5c,0xe0,0x34,0x00,0xfe,0xc3,0xed,0x9f,0xff,0xec,0x9e,0x90,
+0x91,0x11,0xf0,0xa3,0xef,0xf0,0x90,0x91,0x16,0xe0,0xff,0x24,0x40,0x60,0x04,0x24,
+0x20,0x70,0x27,0x90,0x91,0x5e,0xe0,0xfe,0xc4,0x13,0x13,0x13,0x54,0x01,0x20,0xe0,
+0x02,0x61,0x8f,0xef,0x90,0x00,0x81,0xb4,0xa0,0x05,0xe0,0x44,0x04,0x80,0x03,0xe0,
+0x44,0x08,0xfd,0x7f,0x81,0x12,0x4d,0xa8,0x61,0x88,0x90,0x91,0x5e,0xe0,0xc4,0x13,
+0x13,0x54,0x03,0x20,0xe0,0x02,0x61,0x8f,0x90,0x91,0x15,0xe0,0xff,0x24,0x00,0xf5,
+0x82,0xe4,0x34,0xfb,0xf5,0x83,0xe0,0x54,0x0c,0x64,0x08,0x70,0x72,0x90,0x91,0x19,
+0xe0,0xfe,0xef,0x2e,0xff,0xa3,0xe0,0x2f,0xff,0x24,0x1e,0xf5,0x82,0xe4,0x34,0xfb,
+0xf5,0x83,0xe0,0x64,0x88,0x70,0x58,0x74,0x1f,0x2f,0xf5,0x82,0xe4,0x34,0xfb,0xf5,
+0x83,0xe0,0x64,0x8e,0x70,0x49,0x90,0x91,0x19,0xe0,0xff,0x90,0x91,0x15,0xe0,0x2f,
+0xff,0x90,0x91,0x1a,0xe0,0x2f,0xff,0xa3,0xe0,0x2f,0xff,0x24,0x19,0xf5,0x82,0xe4,
+0x34,0xfb,0xf5,0x83,0xe0,0x64,0x03,0x70,0x26,0x74,0x1e,0x2f,0xf5,0x82,0xe4,0x34,
+0xfb,0xf5,0x83,0xe0,0x90,0x00,0x81,0x30,0xe3,0x05,0xe0,0x44,0x01,0x80,0x03,0xe0,
+0x44,0x02,0xfd,0x7f,0x81,0x12,0x4d,0xa8,0x90,0x91,0x56,0xe0,0x44,0x80,0xf0,0x90,
+0x91,0x56,0xe0,0xff,0xc4,0x13,0x13,0x13,0x54,0x01,0x30,0xe0,0x02,0x31,0x3f,0x71,
+0xbc,0xbf,0x01,0x13,0x90,0x91,0x11,0xe0,0xfe,0xa3,0xe0,0xff,0x12,0x44,0xb5,0x90,
+0x91,0x17,0xe0,0x04,0xf0,0x21,0xcc,0xd0,0xd0,0x92,0xaf,0x22,0x90,0x91,0x56,0xe0,
+0xc4,0x13,0x13,0x13,0x54,0x01,0x30,0xe0,0x11,0xe0,0x44,0x80,0xf0,0x90,0x91,0x5e,
+0xe0,0xc4,0x54,0x0f,0x20,0xe0,0x03,0x7f,0x00,0x22,0x7f,0x01,0x22,0x8f,0x1f,0xe4,
+0x90,0x91,0x22,0xf0,0xe5,0x1f,0x14,0xfe,0x90,0x91,0x22,0xe0,0xff,0xc3,0x9e,0x50,
+0x0e,0xef,0x04,0xfd,0x12,0x34,0xb7,0x90,0x91,0x22,0xe0,0x04,0xf0,0x80,0xe5,0xe5,
+0x1f,0x14,0xff,0x7d,0xff,0x12,0x34,0xb7,0x90,0x91,0x22,0xe5,0x1f,0xf0,0x90,0x91,
+0x22,0xe0,0xc3,0x94,0xff,0x50,0x0f,0xe0,0xff,0x04,0xfd,0x12,0x34,0xb7,0x90,0x91,
+0x22,0xe0,0x04,0xf0,0x80,0xe8,0xad,0x1f,0x7f,0xff,0x02,0x34,0xb7,0xc3,0xee,0x94,
+0x01,0x40,0x0a,0x0d,0xed,0x13,0x90,0xfd,0x10,0xf0,0xe4,0x2f,0xff,0x22,0xc3,0xee,
+0x94,0x01,0x40,0x1e,0x90,0xfd,0x11,0xe0,0xb5,0x05,0x14,0x90,0x01,0x17,0xe0,0xb5,
+0x05,0x07,0x90,0xfd,0x11,0xe4,0xf0,0x80,0x06,0xed,0x04,0x90,0xfd,0x11,0xf0,0xe4,
+0x2f,0xff,0x22,0x00,0x18,0x58,};
diff --git a/drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/usb/rtl8192cu_led.c b/drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/usb/rtl8192cu_led.c
new file mode 100644 (file)
index 0000000..382b978
--- /dev/null
@@ -0,0 +1,2674 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+
+#include "drv_types.h"
+#include "rtl8192c_hal.h"
+
+//================================================================================
+//     Constant.
+//================================================================================
+
+//
+// Default LED behavior.
+//
+#define LED_BLINK_NORMAL_INTERVAL      100
+#define LED_BLINK_SLOWLY_INTERVAL      200
+#define LED_BLINK_LONG_INTERVAL        400
+
+#define LED_BLINK_NO_LINK_INTERVAL_ALPHA               1000
+#define LED_BLINK_LINK_INTERVAL_ALPHA                  500             //500
+#define LED_BLINK_SCAN_INTERVAL_ALPHA          180     //150
+#define LED_BLINK_FASTER_INTERVAL_ALPHA                50
+#define LED_BLINK_WPS_SUCESS_INTERVAL_ALPHA    5000
+
+//================================================================================
+// LED object.
+//================================================================================
+
+
+//================================================================================
+//     Prototype of protected function.
+//================================================================================
+
+
+static void
+BlinkTimerCallback(
+       unsigned long data
+       );
+
+static void
+BlinkWorkItemCallback(
+       struct work_struct *work
+       );
+
+//
+//     Description:
+//             Reset blinking status of LED_871x object.
+//
+static void
+ResetLedStatus(PLED_871x       pLed) {
+       pLed->CurrLedState = RTW_LED_OFF; // Current LED state.
+       pLed->bLedOn = _FALSE; // true if LED is ON, false if LED is OFF.
+
+       pLed->bLedBlinkInProgress = _FALSE; // true if it is blinking, false o.w..
+       pLed->bLedNoLinkBlinkInProgress = _FALSE;
+       pLed->bLedLinkBlinkInProgress = _FALSE;
+       pLed->bLedStartToLinkBlinkInProgress = _FALSE;
+       pLed->bLedScanBlinkInProgress = _FALSE;
+       pLed->bLedWPSBlinkInProgress = _FALSE;
+       pLed->BlinkTimes = 0; // Number of times to toggle led state for blinking.
+       pLed->BlinkingLedState = LED_UNKNOWN; // Next state for blinking, either RTW_LED_ON or RTW_LED_OFF are.
+}
+
+//================================================================================
+// LED_819xUsb routines.
+//================================================================================
+
+//
+//     Description:
+//             Initialize an LED_871x object.
+//
+static void
+InitLed871x(
+       _adapter                        *padapter,
+       PLED_871x               pLed,
+       LED_PIN_871x    LedPin
+       )
+{
+       pLed->padapter = padapter;
+       pLed->LedPin = LedPin;
+
+       ResetLedStatus(pLed);
+
+       _init_timer(&(pLed->BlinkTimer), padapter->pnetdev, BlinkTimerCallback, pLed);
+       _init_workitem(&(pLed->BlinkWorkItem), BlinkWorkItemCallback, pLed);
+}
+
+
+//
+//     Description:
+//             DeInitialize an LED_871x object.
+//
+static void
+DeInitLed871x(
+       PLED_871x                       pLed
+       )
+{
+       //call _cancel_workitem_sync(&(pLed->BlinkWorkItem))
+    //before _cancel_timer_ex(&(pLed->BlinkTimer)) to
+    //avoid led timer restarting when driver is removed
+
+       _cancel_workitem_sync(&(pLed->BlinkWorkItem));
+
+       _cancel_timer_ex(&(pLed->BlinkTimer));
+
+       // We should reset bLedBlinkInProgress if we cancel the LedControlTimer, 2005.03.10, by rcnjko.
+       ResetLedStatus(pLed);
+}
+
+//
+//     Description:
+//             Turn on LED according to LedPin specified.
+//
+static void
+SwLedOn(
+       _adapter                        *padapter,
+       PLED_871x               pLed
+)
+{
+       u8      LedCfg;
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
+
+       if( (padapter->bSurpriseRemoved == _TRUE) || ( padapter->bDriverStopped == _TRUE))
+       {
+               return;
+       }
+
+       if(     (BOARD_MINICARD == pHalData->BoardType )||
+               (BOARD_USB_SOLO == pHalData->BoardType)||
+               (BOARD_USB_COMBO == pHalData->BoardType))
+       {
+               LedCfg = rtw_read8(padapter, REG_LEDCFG2);
+               switch(pLed->LedPin)
+               {
+                       case LED_PIN_GPIO0:
+                               break;
+
+                       case LED_PIN_LED0:
+                               rtw_write8(padapter, REG_LEDCFG2, (LedCfg&0xf0)|BIT5|BIT6); // SW control led0 on.
+                               break;
+
+                       case LED_PIN_LED1:
+                               rtw_write8(padapter, REG_LEDCFG2, (LedCfg&0x0f)|BIT5); // SW control led1 on.
+                               break;
+
+                       default:
+                               break;
+
+               }
+       }
+       else
+       {
+               switch(pLed->LedPin)
+               {
+                       case LED_PIN_GPIO0:
+                               break;
+
+                       case LED_PIN_LED0:
+#ifdef CONFIG_SW_ANTENNA_DIVERSITY
+                               if(pHalData->AntDivCfg)
+                               {
+                                       LedCfg = rtw_read8(padapter, REG_LEDCFG2);
+                                       rtw_write8(padapter, REG_LEDCFG2, (LedCfg&0xe0)|BIT7|BIT6|BIT5); // SW control led0 on.
+                                       //RT_TRACE(COMP_LED, DBG_LOUD, ("SwLedOn LED0 0x%x\n", PlatformEFIORead4Byte(Adapter, REG_LEDCFG2)));
+                               }
+                               else
+#endif
+                               {
+                                       LedCfg = rtw_read8(padapter, REG_LEDCFG0);
+                                       rtw_write8(padapter,REG_LEDCFG0, LedCfg&0x70); // SW control led0 on.
+                                       //RT_TRACE(COMP_LED, DBG_LOUD, ("SwLedOn LED0 0x%lx\n", PlatformEFIORead4Byte(Adapter, REG_LEDCFG0)));
+                               }
+                               break;
+
+                       case LED_PIN_LED1:
+                               LedCfg = rtw_read8(padapter,(REG_LEDCFG1));
+                               rtw_write8(padapter,(REG_LEDCFG1), LedCfg&0x70); // SW control led1 on.
+                               //RT_TRACE(COMP_LED, DBG_LOUD, ("SwLedOn LED1 0x%lx\n", PlatformEFIORead4Byte(Adapter, REG_LEDCFG0)));
+
+                               break;
+
+                       default:
+                               break;
+               }
+       }
+       pLed->bLedOn = _TRUE;
+
+}
+
+
+//
+//     Description:
+//             Turn off LED according to LedPin specified.
+//
+static void
+SwLedOff(
+       _adapter                        *padapter,
+       PLED_871x               pLed
+)
+{
+       u8      LedCfg;
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
+
+       if((padapter->bSurpriseRemoved == _TRUE) || ( padapter->bDriverStopped == _TRUE))
+       {
+               goto exit;
+       }
+
+       if(     (BOARD_MINICARD == pHalData->BoardType )||
+               (BOARD_USB_SOLO == pHalData->BoardType)||
+               (BOARD_USB_COMBO == pHalData->BoardType))
+       {
+               LedCfg = rtw_read8(padapter, REG_LEDCFG2);//0x4E
+
+               switch(pLed->LedPin)
+               {
+
+                       case LED_PIN_GPIO0:
+                               break;
+
+                       case LED_PIN_LED0:
+                               if(BOARD_USB_COMBO == pHalData->BoardType)
+                               {
+                                       LedCfg &= 0x90; // Set to software control.
+                                       rtw_write8(padapter, REG_LEDCFG2, (LedCfg|BIT3));
+                                       LedCfg = rtw_read8(padapter, REG_MAC_PINMUX_CFG);
+                                       LedCfg &= 0xFE;
+                                       rtw_write8(padapter, REG_MAC_PINMUX_CFG, LedCfg);
+                               }
+                               else
+                               {
+                                       LedCfg &= 0xf0; // Set to software control.
+                                       if(pHalData->bLedOpenDrain == _TRUE) // Open-drain arrangement for controlling the LED
+                                               rtw_write8(padapter, REG_LEDCFG2, (LedCfg|BIT1|BIT5|BIT6));
+                                       else
+                                               rtw_write8(padapter, REG_LEDCFG2, (LedCfg|BIT3|BIT5|BIT6));
+                               }
+                               break;
+
+                       case LED_PIN_LED1:
+                               LedCfg &= 0x0f; // Set to software control.
+                               rtw_write8(padapter, REG_LEDCFG2, (LedCfg|BIT3));
+                               break;
+
+                       default:
+                               break;
+               }
+       }
+       else
+       {
+               switch(pLed->LedPin)
+               {
+                       case LED_PIN_GPIO0:
+                               break;
+
+                       case LED_PIN_LED0:
+#ifdef CONFIG_SW_ANTENNA_DIVERSITY
+                               if(pHalData->AntDivCfg)
+                               {
+                                       LedCfg = rtw_read8(padapter, REG_LEDCFG2);
+                                       LedCfg &= 0xe0; // Set to software control.
+                                       rtw_write8(padapter, REG_LEDCFG2, (LedCfg|BIT3|BIT7|BIT6|BIT5));
+                                       //RT_TRACE(COMP_LED, DBG_LOUD, ("SwLedOff LED0 0x%x\n", PlatformEFIORead4Byte(Adapter, REG_LEDCFG2)));
+                               }
+                               else
+#endif
+                               {
+                                       LedCfg = rtw_read8(padapter, REG_LEDCFG0);
+                                       LedCfg &= 0x70; // Set to software control.
+                                       rtw_write8(padapter, REG_LEDCFG0, (LedCfg|BIT3));
+                                       //RT_TRACE(COMP_LED, DBG_LOUD, ("SwLedOff LED0 0x%lx\n", PlatformEFIORead4Byte(Adapter, REG_LEDCFG0)));
+                               }
+                               break;
+
+                       case LED_PIN_LED1:
+                               LedCfg = rtw_read8(padapter, (REG_LEDCFG1));
+                               LedCfg &= 0x70; // Set to software control.
+                               rtw_write8(padapter,  (REG_LEDCFG1), (LedCfg|BIT3));
+                               //RT_TRACE(COMP_LED, DBG_LOUD, ("SwLedOff LED1 0x%lx\n", PlatformEFIORead4Byte(Adapter, REG_LEDCFG0)));
+                               break;
+
+                       default:
+                               break;
+               }
+       }
+
+exit:
+       pLed->bLedOn = _FALSE;
+
+}
+
+//================================================================================
+// Interface to manipulate LED objects.
+//================================================================================
+
+
+//
+//     Description:
+//             Implementation of LED blinking behavior.
+//             It toggle off LED and schedule corresponding timer if necessary.
+//
+static void
+SwLedBlink(
+       PLED_871x                       pLed
+       )
+{
+       _adapter                        *padapter = pLed->padapter;
+       struct mlme_priv        *pmlmepriv = &(padapter->mlmepriv);
+       u8                              bStopBlinking = _FALSE;
+
+       // Change LED according to BlinkingLedState specified.
+       if( pLed->BlinkingLedState == RTW_LED_ON )
+       {
+               SwLedOn(padapter, pLed);
+               RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("Blinktimes (%d): turn on\n", pLed->BlinkTimes));
+       }
+       else
+       {
+               SwLedOff(padapter, pLed);
+               RT_TRACE(_module_rtl8712_led_c_,_drv_info_,( "Blinktimes (%d): turn off\n", pLed->BlinkTimes));
+       }
+
+       // Determine if we shall change LED state again.
+       pLed->BlinkTimes--;
+       switch(pLed->CurrLedState)
+       {
+
+       case LED_BLINK_NORMAL:
+               if(pLed->BlinkTimes == 0)
+               {
+                       bStopBlinking = _TRUE;
+               }
+               break;
+
+       case LED_BLINK_StartToBlink:
+               if( check_fwstate(pmlmepriv, _FW_LINKED) && check_fwstate(pmlmepriv, WIFI_STATION_STATE) )
+               {
+                       bStopBlinking = _TRUE;
+               }
+               if( check_fwstate(pmlmepriv, _FW_LINKED) &&
+                       (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) || check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)) )
+               {
+                       bStopBlinking = _TRUE;
+               }
+               else if(pLed->BlinkTimes == 0)
+               {
+                       bStopBlinking = _TRUE;
+               }
+               break;
+
+       case LED_BLINK_WPS:
+               if( pLed->BlinkTimes == 0 )
+               {
+                       bStopBlinking = _TRUE;
+               }
+               break;
+
+
+       default:
+               bStopBlinking = _TRUE;
+               break;
+
+       }
+
+       if(bStopBlinking)
+       {
+               //if( padapter->pwrctrlpriv.cpwm >= PS_STATE_S2)
+               if(0)
+               {
+                       SwLedOff(padapter, pLed);
+               }
+               else if( (check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE) && (pLed->bLedOn == _FALSE))
+               {
+                       SwLedOn(padapter, pLed);
+               }
+               else if( (check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE) &&  pLed->bLedOn == _TRUE)
+               {
+                       SwLedOff(padapter, pLed);
+               }
+
+               pLed->BlinkTimes = 0;
+               pLed->bLedBlinkInProgress = _FALSE;
+       }
+       else
+       {
+               // Assign LED state to toggle.
+               if( pLed->BlinkingLedState == RTW_LED_ON )
+                       pLed->BlinkingLedState = RTW_LED_OFF;
+               else
+                       pLed->BlinkingLedState = RTW_LED_ON;
+
+               // Schedule a timer to toggle LED state.
+               switch( pLed->CurrLedState )
+               {
+               case LED_BLINK_NORMAL:
+                       _set_timer(&(pLed->BlinkTimer), LED_BLINK_NORMAL_INTERVAL);
+                       break;
+
+               case LED_BLINK_SLOWLY:
+               case LED_BLINK_StartToBlink:
+                       _set_timer(&(pLed->BlinkTimer), LED_BLINK_SLOWLY_INTERVAL);
+                       break;
+
+               case LED_BLINK_WPS:
+                       {
+                               if( pLed->BlinkingLedState == RTW_LED_ON )
+                                       _set_timer(&(pLed->BlinkTimer), LED_BLINK_LONG_INTERVAL);
+                               else
+                                       _set_timer(&(pLed->BlinkTimer), LED_BLINK_LONG_INTERVAL);
+                       }
+                       break;
+
+               default:
+                       _set_timer(&(pLed->BlinkTimer), LED_BLINK_SLOWLY_INTERVAL);
+                       break;
+               }
+       }
+}
+
+
+static void
+SwLedBlink1(
+       PLED_871x                       pLed
+       )
+{
+       _adapter                                *padapter = pLed->padapter;
+       HAL_DATA_TYPE           *pHalData = GET_HAL_DATA(padapter);
+       struct led_priv         *ledpriv = &(padapter->ledpriv);
+       struct mlme_priv                *pmlmepriv = &(padapter->mlmepriv);
+       PLED_871x                       pLed1 = &(ledpriv->SwLed1);
+       u8                                      bStopBlinking = _FALSE;
+
+       if(pHalData->EEPROMCustomerID == RT_CID_819x_CAMEO)
+               pLed = &(ledpriv->SwLed1);
+
+       // Change LED according to BlinkingLedState specified.
+       if( pLed->BlinkingLedState == RTW_LED_ON )
+       {
+               SwLedOn(padapter, pLed);
+               RT_TRACE(_module_rtl8712_led_c_,_drv_info_,( "Blinktimes (%d): turn on\n", pLed->BlinkTimes));
+       }
+       else
+       {
+               SwLedOff(padapter, pLed);
+               RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("Blinktimes (%d): turn off\n", pLed->BlinkTimes));
+       }
+
+
+       if(pHalData->EEPROMCustomerID == RT_CID_DEFAULT)
+       {
+               if(check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE)
+               {
+                       if(!pLed1->bSWLedCtrl)
+                       {
+                               SwLedOn(padapter, pLed1);
+                               pLed1->bSWLedCtrl = _TRUE;
+                       }
+                       else if(!pLed1->bLedOn)
+                               SwLedOn(padapter, pLed1);
+                       RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("Blinktimes (): turn on pLed1\n"));
+               }
+               else
+               {
+                       if(!pLed1->bSWLedCtrl)
+                       {
+                               SwLedOff(padapter, pLed1);
+                               pLed1->bSWLedCtrl = _TRUE;
+                       }
+                       else if(pLed1->bLedOn)
+                               SwLedOff(padapter, pLed1);
+                       RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("Blinktimes (): turn off pLed1\n"));
+               }
+       }
+
+
+       if( padapter->pwrctrlpriv.rf_pwrstate != rf_on )
+       {
+               SwLedOff(padapter, pLed);
+               ResetLedStatus(pLed);
+               return;
+       }
+
+
+       switch(pLed->CurrLedState)
+       {
+               case LED_BLINK_SLOWLY:
+                       if( pLed->bLedOn )
+                               pLed->BlinkingLedState = RTW_LED_OFF;
+                       else
+                               pLed->BlinkingLedState = RTW_LED_ON;
+                       _set_timer(&(pLed->BlinkTimer), LED_BLINK_NO_LINK_INTERVAL_ALPHA);
+                       break;
+
+               case LED_BLINK_NORMAL:
+                       if( pLed->bLedOn )
+                               pLed->BlinkingLedState = RTW_LED_OFF;
+                       else
+                               pLed->BlinkingLedState = RTW_LED_ON;
+                       _set_timer(&(pLed->BlinkTimer), LED_BLINK_LINK_INTERVAL_ALPHA);
+                       break;
+
+               case LED_SCAN_BLINK:
+                       pLed->BlinkTimes--;
+                       if( pLed->BlinkTimes == 0 )
+                       {
+                               bStopBlinking = _TRUE;
+                       }
+
+                       if(bStopBlinking)
+                       {
+                               if(check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE)
+                               {
+                                       pLed->bLedLinkBlinkInProgress = _TRUE;
+                                       pLed->CurrLedState = LED_BLINK_NORMAL;
+                                       if( pLed->bLedOn )
+                                               pLed->BlinkingLedState = RTW_LED_OFF;
+                                       else
+                                               pLed->BlinkingLedState = RTW_LED_ON;
+                                       _set_timer(&(pLed->BlinkTimer), LED_BLINK_LINK_INTERVAL_ALPHA);
+                                       RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("CurrLedState %d\n", pLed->CurrLedState));
+
+                               }
+                               else if(check_fwstate(pmlmepriv, _FW_LINKED)== _FALSE)
+                               {
+                                       pLed->bLedNoLinkBlinkInProgress = _TRUE;
+                                       pLed->CurrLedState = LED_BLINK_SLOWLY;
+                                       if( pLed->bLedOn )
+                                               pLed->BlinkingLedState = RTW_LED_OFF;
+                                       else
+                                               pLed->BlinkingLedState = RTW_LED_ON;
+                                       _set_timer(&(pLed->BlinkTimer), LED_BLINK_NO_LINK_INTERVAL_ALPHA);
+                                       RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("CurrLedState %d\n", pLed->CurrLedState));
+                               }
+                               pLed->bLedScanBlinkInProgress = _FALSE;
+                       }
+                       else
+                       {
+                               if( pLed->bLedOn )
+                                       pLed->BlinkingLedState = RTW_LED_OFF;
+                               else
+                                       pLed->BlinkingLedState = RTW_LED_ON;
+                               _set_timer(&(pLed->BlinkTimer), LED_BLINK_SCAN_INTERVAL_ALPHA);
+                       }
+                       break;
+
+               case LED_TXRX_BLINK:
+                       pLed->BlinkTimes--;
+                       if( pLed->BlinkTimes == 0 )
+                       {
+                               bStopBlinking = _TRUE;
+                       }
+                       if(bStopBlinking)
+                       {
+                               if(check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE)
+                               {
+                                       pLed->bLedLinkBlinkInProgress = _TRUE;
+                                       pLed->CurrLedState = LED_BLINK_NORMAL;
+                                       if( pLed->bLedOn )
+                                               pLed->BlinkingLedState = RTW_LED_OFF;
+                                       else
+                                               pLed->BlinkingLedState = RTW_LED_ON;
+                                       _set_timer(&(pLed->BlinkTimer), LED_BLINK_LINK_INTERVAL_ALPHA);
+                                       RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("CurrLedState %d\n", pLed->CurrLedState));
+                               }
+                               else if(check_fwstate(pmlmepriv, _FW_LINKED)== _FALSE)
+                               {
+                                       pLed->bLedNoLinkBlinkInProgress = _TRUE;
+                                       pLed->CurrLedState = LED_BLINK_SLOWLY;
+                                       if( pLed->bLedOn )
+                                               pLed->BlinkingLedState = RTW_LED_OFF;
+                                       else
+                                               pLed->BlinkingLedState = RTW_LED_ON;
+                                       _set_timer(&(pLed->BlinkTimer), LED_BLINK_NO_LINK_INTERVAL_ALPHA);
+                                       RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("CurrLedState %d\n", pLed->CurrLedState));
+                               }
+                               pLed->BlinkTimes = 0;
+                               pLed->bLedBlinkInProgress = _FALSE;
+                       }
+                       else
+                       {
+                               if( pLed->bLedOn )
+                                       pLed->BlinkingLedState = RTW_LED_OFF;
+                               else
+                                       pLed->BlinkingLedState = RTW_LED_ON;
+                               _set_timer(&(pLed->BlinkTimer), LED_BLINK_FASTER_INTERVAL_ALPHA);
+                       }
+                       break;
+
+               case LED_BLINK_WPS:
+                       if( pLed->bLedOn )
+                               pLed->BlinkingLedState = RTW_LED_OFF;
+                       else
+                               pLed->BlinkingLedState = RTW_LED_ON;
+                       _set_timer(&(pLed->BlinkTimer), LED_BLINK_SCAN_INTERVAL_ALPHA);
+                       break;
+
+               case LED_BLINK_WPS_STOP:        //WPS success
+                       if(pLed->BlinkingLedState == RTW_LED_ON)
+                               bStopBlinking = _FALSE;
+                       else
+                               bStopBlinking = _TRUE;
+
+                       if(bStopBlinking)
+                       {
+                               pLed->bLedLinkBlinkInProgress = _TRUE;
+                               pLed->CurrLedState = LED_BLINK_NORMAL;
+                               if( pLed->bLedOn )
+                                       pLed->BlinkingLedState = RTW_LED_OFF;
+                               else
+                                       pLed->BlinkingLedState = RTW_LED_ON;
+                               _set_timer(&(pLed->BlinkTimer), LED_BLINK_LINK_INTERVAL_ALPHA);
+                               RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("CurrLedState %d\n", pLed->CurrLedState));
+
+                               pLed->bLedWPSBlinkInProgress = _FALSE;
+                       }
+                       else
+                       {
+                               pLed->BlinkingLedState = RTW_LED_OFF;
+                               _set_timer(&(pLed->BlinkTimer), LED_BLINK_WPS_SUCESS_INTERVAL_ALPHA);
+                       }
+                       break;
+
+               default:
+                       break;
+       }
+
+}
+
+static void
+SwLedBlink2(
+       PLED_871x                       pLed
+       )
+{
+       _adapter                                *padapter = pLed->padapter;
+       struct mlme_priv                *pmlmepriv = &(padapter->mlmepriv);
+       u8                                      bStopBlinking = _FALSE;
+
+       // Change LED according to BlinkingLedState specified.
+       if( pLed->BlinkingLedState == RTW_LED_ON)
+       {
+               SwLedOn(padapter, pLed);
+               RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("Blinktimes (%d): turn on\n", pLed->BlinkTimes));
+       }
+       else
+       {
+               SwLedOff(padapter, pLed);
+               RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("Blinktimes (%d): turn off\n", pLed->BlinkTimes));
+       }
+
+       switch(pLed->CurrLedState)
+       {
+               case LED_SCAN_BLINK:
+                       pLed->BlinkTimes--;
+                       if( pLed->BlinkTimes == 0 )
+                       {
+                               bStopBlinking = _TRUE;
+                       }
+
+                       if(bStopBlinking)
+                       {
+                               if( padapter->pwrctrlpriv.rf_pwrstate != rf_on )
+                               {
+                                       SwLedOff(padapter, pLed);
+                               }
+                               else if(check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE)
+                               {
+                                       pLed->CurrLedState = RTW_LED_ON;
+                                       pLed->BlinkingLedState = RTW_LED_ON;
+                                       SwLedOn(padapter, pLed);
+                                       RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("stop scan blink CurrLedState %d\n", pLed->CurrLedState));
+
+                               }
+                               else if(check_fwstate(pmlmepriv, _FW_LINKED)== _FALSE)
+                               {
+                                       pLed->CurrLedState = RTW_LED_OFF;
+                                       pLed->BlinkingLedState = RTW_LED_OFF;
+                                       SwLedOff(padapter, pLed);
+                                       RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("stop scan blink CurrLedState %d\n", pLed->CurrLedState));
+                               }
+                               pLed->bLedScanBlinkInProgress = _FALSE;
+                       }
+                       else
+                       {
+                               if( padapter->pwrctrlpriv.rf_pwrstate != rf_on )
+                               {
+                                       SwLedOff(padapter, pLed);
+                               }
+                               else
+                               {
+                                        if( pLed->bLedOn )
+                                               pLed->BlinkingLedState = RTW_LED_OFF;
+                                       else
+                                               pLed->BlinkingLedState = RTW_LED_ON;
+                                       _set_timer(&(pLed->BlinkTimer), LED_BLINK_SCAN_INTERVAL_ALPHA);
+                               }
+                       }
+                       break;
+
+               case LED_TXRX_BLINK:
+                       pLed->BlinkTimes--;
+                       if( pLed->BlinkTimes == 0 )
+                       {
+                               bStopBlinking = _TRUE;
+                       }
+                       if(bStopBlinking)
+                       {
+                               if( padapter->pwrctrlpriv.rf_pwrstate != rf_on )
+                               {
+                                       SwLedOff(padapter, pLed);
+                               }
+                               else if(check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE)
+                               {
+                                       pLed->CurrLedState = RTW_LED_ON;
+                                       pLed->BlinkingLedState = RTW_LED_ON;
+                                       SwLedOn(padapter, pLed);
+                                       RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("stop CurrLedState %d\n", pLed->CurrLedState));
+
+                               }
+                               else if(check_fwstate(pmlmepriv, _FW_LINKED)== _FALSE)
+                               {
+                                       pLed->CurrLedState = RTW_LED_OFF;
+                                       pLed->BlinkingLedState = RTW_LED_OFF;
+                                       SwLedOff(padapter, pLed);
+                                       RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("stop CurrLedState %d\n", pLed->CurrLedState));
+                               }
+                               pLed->bLedBlinkInProgress = _FALSE;
+                       }
+                       else
+                       {
+                               if( padapter->pwrctrlpriv.rf_pwrstate != rf_on )
+                               {
+                                       SwLedOff(padapter, pLed);
+                               }
+                               else
+                               {
+                                        if( pLed->bLedOn )
+                                               pLed->BlinkingLedState = RTW_LED_OFF;
+                                       else
+                                               pLed->BlinkingLedState = RTW_LED_ON;
+                                       _set_timer(&(pLed->BlinkTimer), LED_BLINK_FASTER_INTERVAL_ALPHA);
+                               }
+                       }
+                       break;
+
+               default:
+                       break;
+       }
+
+}
+
+static void
+SwLedBlink3(
+       PLED_871x                       pLed
+       )
+{
+       _adapter                        *padapter = pLed->padapter;
+       struct mlme_priv        *pmlmepriv = &(padapter->mlmepriv);
+       u8                              bStopBlinking = _FALSE;
+
+       // Change LED according to BlinkingLedState specified.
+       if( pLed->BlinkingLedState == RTW_LED_ON )
+       {
+               SwLedOn(padapter, pLed);
+               RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("Blinktimes (%d): turn on\n", pLed->BlinkTimes));
+       }
+       else
+       {
+               if(pLed->CurrLedState != LED_BLINK_WPS_STOP)
+                       SwLedOff(padapter, pLed);
+               RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("Blinktimes (%d): turn off\n", pLed->BlinkTimes));
+       }
+
+       switch(pLed->CurrLedState)
+       {
+               case LED_SCAN_BLINK:
+                       pLed->BlinkTimes--;
+                       if( pLed->BlinkTimes == 0 )
+                       {
+                               bStopBlinking = _TRUE;
+                       }
+
+                       if(bStopBlinking)
+                       {
+                               if( padapter->pwrctrlpriv.rf_pwrstate != rf_on )
+                               {
+                                       SwLedOff(padapter, pLed);
+                               }
+                               else if(check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE)
+                               {
+                                       pLed->CurrLedState = RTW_LED_ON;
+                                       pLed->BlinkingLedState = RTW_LED_ON;
+                                       if( !pLed->bLedOn )
+                                               SwLedOn(padapter, pLed);
+
+                                       RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("CurrLedState %d\n", pLed->CurrLedState));
+                               }
+                               else if(check_fwstate(pmlmepriv, _FW_LINKED)== _FALSE)
+                               {
+                                       pLed->CurrLedState = RTW_LED_OFF;
+                                       pLed->BlinkingLedState = RTW_LED_OFF;
+                                       if( pLed->bLedOn )
+                                               SwLedOff(padapter, pLed);
+
+                                       RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("CurrLedState %d\n", pLed->CurrLedState));
+                               }
+                               pLed->bLedScanBlinkInProgress = _FALSE;
+                       }
+                       else
+                       {
+                               if( padapter->pwrctrlpriv.rf_pwrstate != rf_on )
+                               {
+                                       SwLedOff(padapter, pLed);
+                               }
+                               else
+                               {
+                                       if( pLed->bLedOn )
+                                               pLed->BlinkingLedState = RTW_LED_OFF;
+                                       else
+                                               pLed->BlinkingLedState = RTW_LED_ON;
+                                       _set_timer(&(pLed->BlinkTimer), LED_BLINK_SCAN_INTERVAL_ALPHA);
+                               }
+                       }
+                       break;
+
+               case LED_TXRX_BLINK:
+                       pLed->BlinkTimes--;
+                       if( pLed->BlinkTimes == 0 )
+                       {
+                               bStopBlinking = _TRUE;
+                       }
+                       if(bStopBlinking)
+                       {
+                               if( padapter->pwrctrlpriv.rf_pwrstate != rf_on )
+                               {
+                                       SwLedOff(padapter, pLed);
+                               }
+                               else if(check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE)
+                               {
+                                       pLed->CurrLedState = RTW_LED_ON;
+                                       pLed->BlinkingLedState = RTW_LED_ON;
+
+                                       if( !pLed->bLedOn )
+                                               SwLedOn(padapter, pLed);
+
+                                       RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("CurrLedState %d\n", pLed->CurrLedState));
+                               }
+                               else if(check_fwstate(pmlmepriv, _FW_LINKED)== _FALSE)
+                               {
+                                       pLed->CurrLedState = RTW_LED_OFF;
+                                       pLed->BlinkingLedState = RTW_LED_OFF;
+
+                                       if( pLed->bLedOn )
+                                               SwLedOff(padapter, pLed);
+
+
+                                       RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("CurrLedState %d\n", pLed->CurrLedState));
+                               }
+                               pLed->bLedBlinkInProgress = _FALSE;
+                       }
+                       else
+                       {
+                               if( padapter->pwrctrlpriv.rf_pwrstate != rf_on )
+                               {
+                                       SwLedOff(padapter, pLed);
+                               }
+                               else
+                               {
+                                       if( pLed->bLedOn )
+                                               pLed->BlinkingLedState = RTW_LED_OFF;
+                                       else
+                                               pLed->BlinkingLedState = RTW_LED_ON;
+                                       _set_timer(&(pLed->BlinkTimer), LED_BLINK_FASTER_INTERVAL_ALPHA);
+                               }
+                       }
+                       break;
+
+               case LED_BLINK_WPS:
+                       if( pLed->bLedOn )
+                               pLed->BlinkingLedState = RTW_LED_OFF;
+                       else
+                               pLed->BlinkingLedState = RTW_LED_ON;
+                       _set_timer(&(pLed->BlinkTimer), LED_BLINK_SCAN_INTERVAL_ALPHA);
+                       break;
+
+               case LED_BLINK_WPS_STOP:        //WPS success
+                       if(pLed->BlinkingLedState == RTW_LED_ON)
+                       {
+                               pLed->BlinkingLedState = RTW_LED_OFF;
+                               _set_timer(&(pLed->BlinkTimer), LED_BLINK_WPS_SUCESS_INTERVAL_ALPHA);
+                               bStopBlinking = _FALSE;
+                       }
+                       else
+                       {
+                               bStopBlinking = _TRUE;
+                       }
+
+                       if(bStopBlinking)
+                       {
+                               if( padapter->pwrctrlpriv.rf_pwrstate != rf_on )
+                               {
+                                       SwLedOff(padapter, pLed);
+                               }
+                               else
+                               {
+                                       pLed->CurrLedState = RTW_LED_ON;
+                                       pLed->BlinkingLedState = RTW_LED_ON;
+                                       SwLedOn(padapter, pLed);
+                                       RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("CurrLedState %d\n", pLed->CurrLedState));
+                               }
+                               pLed->bLedWPSBlinkInProgress = _FALSE;
+                       }
+                       break;
+
+
+               default:
+                       break;
+       }
+
+}
+
+
+static void
+SwLedBlink4(
+       PLED_871x                       pLed
+       )
+{
+       _adapter                        *padapter = pLed->padapter;
+       struct led_priv *ledpriv = &(padapter->ledpriv);
+       struct mlme_priv        *pmlmepriv = &(padapter->mlmepriv);
+       PLED_871x               pLed1 = &(ledpriv->SwLed1);
+       u8                              bStopBlinking = _FALSE;
+
+       // Change LED according to BlinkingLedState specified.
+       if( pLed->BlinkingLedState == RTW_LED_ON )
+       {
+               SwLedOn(padapter, pLed);
+               RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("Blinktimes (%d): turn on\n", pLed->BlinkTimes));
+       }
+       else
+       {
+               SwLedOff(padapter, pLed);
+               RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("Blinktimes (%d): turn off\n", pLed->BlinkTimes));
+       }
+
+       if(!pLed1->bLedWPSBlinkInProgress && pLed1->BlinkingLedState == LED_UNKNOWN)
+       {
+               pLed1->BlinkingLedState = RTW_LED_OFF;
+               pLed1->CurrLedState = RTW_LED_OFF;
+               SwLedOff(padapter, pLed1);
+       }
+
+       switch(pLed->CurrLedState)
+       {
+               case LED_BLINK_SLOWLY:
+                       if( pLed->bLedOn )
+                               pLed->BlinkingLedState = RTW_LED_OFF;
+                       else
+                               pLed->BlinkingLedState = RTW_LED_ON;
+                       _set_timer(&(pLed->BlinkTimer), LED_BLINK_NO_LINK_INTERVAL_ALPHA);
+                       break;
+
+               case LED_BLINK_StartToBlink:
+                       if( pLed->bLedOn )
+                       {
+                               pLed->BlinkingLedState = RTW_LED_OFF;
+                               _set_timer(&(pLed->BlinkTimer), LED_BLINK_SLOWLY_INTERVAL);
+                       }
+                       else
+                       {
+                               pLed->BlinkingLedState = RTW_LED_ON;
+                               _set_timer(&(pLed->BlinkTimer), LED_BLINK_NORMAL_INTERVAL);
+                       }
+                       break;
+
+               case LED_SCAN_BLINK:
+                       pLed->BlinkTimes--;
+                       if( pLed->BlinkTimes == 0 )
+                       {
+                               bStopBlinking = _FALSE;
+                       }
+
+                       if(bStopBlinking)
+                       {
+                               if( padapter->pwrctrlpriv.rf_pwrstate != rf_on && padapter->pwrctrlpriv.rfoff_reason > RF_CHANGE_BY_PS)
+                               {
+                                       SwLedOff(padapter, pLed);
+                               }
+                               else
+                               {
+                                       pLed->bLedNoLinkBlinkInProgress = _FALSE;
+                                       pLed->CurrLedState = LED_BLINK_SLOWLY;
+                                       if( pLed->bLedOn )
+                                               pLed->BlinkingLedState = RTW_LED_OFF;
+                                       else
+                                               pLed->BlinkingLedState = RTW_LED_ON;
+                                       _set_timer(&(pLed->BlinkTimer), LED_BLINK_NO_LINK_INTERVAL_ALPHA);
+                               }
+                               pLed->bLedScanBlinkInProgress = _FALSE;
+                       }
+                       else
+                       {
+                               if( padapter->pwrctrlpriv.rf_pwrstate != rf_on && padapter->pwrctrlpriv.rfoff_reason > RF_CHANGE_BY_PS)
+                               {
+                                       SwLedOff(padapter, pLed);
+                               }
+                               else
+                               {
+                                        if( pLed->bLedOn )
+                                               pLed->BlinkingLedState = RTW_LED_OFF;
+                                       else
+                                               pLed->BlinkingLedState = RTW_LED_ON;
+                                       _set_timer(&(pLed->BlinkTimer), LED_BLINK_SCAN_INTERVAL_ALPHA);
+                               }
+                       }
+                       break;
+
+               case LED_TXRX_BLINK:
+                       pLed->BlinkTimes--;
+                       if( pLed->BlinkTimes == 0 )
+                       {
+                               bStopBlinking = _TRUE;
+                       }
+                       if(bStopBlinking)
+                       {
+                               if( padapter->pwrctrlpriv.rf_pwrstate != rf_on && padapter->pwrctrlpriv.rfoff_reason > RF_CHANGE_BY_PS)
+                               {
+                                       SwLedOff(padapter, pLed);
+                               }
+                               else
+                               {
+                                       pLed->bLedNoLinkBlinkInProgress = _TRUE;
+                                       pLed->CurrLedState = LED_BLINK_SLOWLY;
+                                       if( pLed->bLedOn )
+                                               pLed->BlinkingLedState = RTW_LED_OFF;
+                                       else
+                                               pLed->BlinkingLedState = RTW_LED_ON;
+                                       _set_timer(&(pLed->BlinkTimer), LED_BLINK_NO_LINK_INTERVAL_ALPHA);
+                               }
+                               pLed->bLedBlinkInProgress = _FALSE;
+                       }
+                       else
+                       {
+                               if( padapter->pwrctrlpriv.rf_pwrstate != rf_on && padapter->pwrctrlpriv.rfoff_reason > RF_CHANGE_BY_PS)
+                               {
+                                       SwLedOff(padapter, pLed);
+                               }
+                               else
+                               {
+                                        if( pLed->bLedOn )
+                                               pLed->BlinkingLedState = RTW_LED_OFF;
+                                       else
+                                               pLed->BlinkingLedState = RTW_LED_ON;
+                                       _set_timer(&(pLed->BlinkTimer), LED_BLINK_FASTER_INTERVAL_ALPHA);
+                               }
+                       }
+                       break;
+
+               case LED_BLINK_WPS:
+                       if( pLed->bLedOn )
+                       {
+                               pLed->BlinkingLedState = RTW_LED_OFF;
+                               _set_timer(&(pLed->BlinkTimer), LED_BLINK_SLOWLY_INTERVAL);
+                       }
+                       else
+                       {
+                               pLed->BlinkingLedState = RTW_LED_ON;
+                               _set_timer(&(pLed->BlinkTimer), LED_BLINK_NORMAL_INTERVAL);
+                       }
+                       break;
+
+               case LED_BLINK_WPS_STOP:        //WPS authentication fail
+                       if( pLed->bLedOn )
+                               pLed->BlinkingLedState = RTW_LED_OFF;
+                       else
+                               pLed->BlinkingLedState = RTW_LED_ON;
+
+                       _set_timer(&(pLed->BlinkTimer), LED_BLINK_NORMAL_INTERVAL);
+                       break;
+
+               case LED_BLINK_WPS_STOP_OVERLAP:        //WPS session overlap
+                       pLed->BlinkTimes--;
+                       if(pLed->BlinkTimes == 0)
+                       {
+                               if(pLed->bLedOn)
+                               {
+                                       pLed->BlinkTimes = 1;
+                               }
+                               else
+                               {
+                                       bStopBlinking = _TRUE;
+                               }
+                       }
+
+                       if(bStopBlinking)
+                       {
+                               pLed->BlinkTimes = 10;
+                               pLed->BlinkingLedState = RTW_LED_ON;
+                               _set_timer(&(pLed->BlinkTimer), LED_BLINK_LINK_INTERVAL_ALPHA);
+                       }
+                       else
+                       {
+                               if( pLed->bLedOn )
+                                       pLed->BlinkingLedState = RTW_LED_OFF;
+                               else
+                                       pLed->BlinkingLedState = RTW_LED_ON;
+
+                               _set_timer(&(pLed->BlinkTimer), LED_BLINK_NORMAL_INTERVAL);
+                       }
+                       break;
+
+
+               default:
+                       break;
+       }
+
+       RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("SwLedBlink4 CurrLedState %d\n", pLed->CurrLedState));
+
+
+}
+
+static void
+SwLedBlink5(
+       PLED_871x                       pLed
+       )
+{
+       _adapter                        *padapter = pLed->padapter;
+       struct mlme_priv        *pmlmepriv = &(padapter->mlmepriv);
+       u8                              bStopBlinking = _FALSE;
+
+       // Change LED according to BlinkingLedState specified.
+       if( pLed->BlinkingLedState == RTW_LED_ON )
+       {
+               SwLedOn(padapter, pLed);
+               RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("Blinktimes (%d): turn on\n", pLed->BlinkTimes));
+       }
+       else
+       {
+               SwLedOff(padapter, pLed);
+               RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("Blinktimes (%d): turn off\n", pLed->BlinkTimes));
+       }
+
+       switch(pLed->CurrLedState)
+       {
+               case LED_SCAN_BLINK:
+                       pLed->BlinkTimes--;
+                       if( pLed->BlinkTimes == 0 )
+                       {
+                               bStopBlinking = _TRUE;
+                       }
+
+                       if(bStopBlinking)
+                       {
+                               if( padapter->pwrctrlpriv.rf_pwrstate != rf_on && padapter->pwrctrlpriv.rfoff_reason > RF_CHANGE_BY_PS)
+                               {
+                                       pLed->CurrLedState = RTW_LED_OFF;
+                                       pLed->BlinkingLedState = RTW_LED_OFF;
+                                       if(pLed->bLedOn)
+                                               SwLedOff(padapter, pLed);
+                               }
+                               else
+                               {               pLed->CurrLedState = RTW_LED_ON;
+                                               pLed->BlinkingLedState = RTW_LED_ON;
+                                               if(!pLed->bLedOn)
+                                                       _set_timer(&(pLed->BlinkTimer), LED_BLINK_FASTER_INTERVAL_ALPHA);
+                               }
+
+                               pLed->bLedScanBlinkInProgress = _FALSE;
+                       }
+                       else
+                       {
+                               if( padapter->pwrctrlpriv.rf_pwrstate != rf_on && padapter->pwrctrlpriv.rfoff_reason > RF_CHANGE_BY_PS)
+                               {
+                                       SwLedOff(padapter, pLed);
+                               }
+                               else
+                               {
+                                       if( pLed->bLedOn )
+                                               pLed->BlinkingLedState = RTW_LED_OFF;
+                                       else
+                                               pLed->BlinkingLedState = RTW_LED_ON;
+                                       _set_timer(&(pLed->BlinkTimer), LED_BLINK_SCAN_INTERVAL_ALPHA);
+                               }
+                       }
+                       break;
+
+
+               case LED_TXRX_BLINK:
+                       pLed->BlinkTimes--;
+                       if( pLed->BlinkTimes == 0 )
+                       {
+                               bStopBlinking = _TRUE;
+                       }
+
+                       if(bStopBlinking)
+                       {
+                               if( padapter->pwrctrlpriv.rf_pwrstate != rf_on && padapter->pwrctrlpriv.rfoff_reason > RF_CHANGE_BY_PS)
+                               {
+                                       pLed->CurrLedState = RTW_LED_OFF;
+                                       pLed->BlinkingLedState = RTW_LED_OFF;
+                                       if(pLed->bLedOn)
+                                               SwLedOff(padapter, pLed);
+                               }
+                               else
+                               {
+                                       pLed->CurrLedState = RTW_LED_ON;
+                                       pLed->BlinkingLedState = RTW_LED_ON;
+                                       if(!pLed->bLedOn)
+                                               _set_timer(&(pLed->BlinkTimer), LED_BLINK_FASTER_INTERVAL_ALPHA);
+                               }
+
+                               pLed->bLedBlinkInProgress = _FALSE;
+                       }
+                       else
+                       {
+                               if( padapter->pwrctrlpriv.rf_pwrstate != rf_on && padapter->pwrctrlpriv.rfoff_reason > RF_CHANGE_BY_PS)
+                               {
+                                       SwLedOff(padapter, pLed);
+                               }
+                               else
+                               {
+                                        if( pLed->bLedOn )
+                                               pLed->BlinkingLedState = RTW_LED_OFF;
+                                       else
+                                               pLed->BlinkingLedState = RTW_LED_ON;
+                                       _set_timer(&(pLed->BlinkTimer), LED_BLINK_FASTER_INTERVAL_ALPHA);
+                               }
+                       }
+                       break;
+
+               default:
+                       break;
+       }
+
+       RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("SwLedBlink5 CurrLedState %d\n", pLed->CurrLedState));
+
+
+}
+
+static void
+SwLedBlink6(
+       PLED_871x                       pLed
+       )
+{
+       _adapter                        *padapter = pLed->padapter;
+       struct mlme_priv        *pmlmepriv = &(padapter->mlmepriv);
+       u8                              bStopBlinking = _FALSE;
+
+       // Change LED according to BlinkingLedState specified.
+       if( pLed->BlinkingLedState == RTW_LED_ON )
+       {
+               SwLedOn(padapter, pLed);
+               RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("Blinktimes (%d): turn on\n", pLed->BlinkTimes));
+       }
+       else
+       {
+               SwLedOff(padapter, pLed);
+               RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("Blinktimes (%d): turn off\n", pLed->BlinkTimes));
+       }
+
+       RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("<==== blink6\n"));
+}
+
+
+//
+//     Description:
+//             Callback function of LED BlinkTimer,
+//             it just schedules to corresponding BlinkWorkItem.
+//
+static void
+BlinkTimerCallback(
+       unsigned long data
+       )
+{
+       PLED_871x        pLed = (PLED_871x)data;
+       _adapter                *padapter = pLed->padapter;
+
+       //DBG_871X("%s\n", __FUNCTION__);
+
+       if( (padapter->bSurpriseRemoved == _TRUE) || ( padapter->bDriverStopped == _TRUE))
+       {
+               //DBG_871X("%s bSurpriseRemoved:%d, bDriverStopped:%d\n", __FUNCTION__, padapter->bSurpriseRemoved, padapter->bDriverStopped);
+               return;
+       }
+
+#ifdef CONFIG_LED_HANDLED_BY_CMD_THREAD
+       rtw_led_blink_cmd(padapter, pLed);
+#else
+       _set_workitem(&(pLed->BlinkWorkItem));
+#endif
+}
+
+//
+//     Description:
+//             Handler function of LED Blinking.
+//             We dispatch acture LED blink action according to LedStrategy.
+//
+void BlinkHandler(PLED_871x     pLed)
+{
+       struct led_priv *ledpriv = &(pLed->padapter->ledpriv);
+       _adapter                *padapter = pLed->padapter;
+
+       //DBG_871X("%s (%s:%d)\n",__FUNCTION__, current->comm, current->pid);
+
+       if( (padapter->bSurpriseRemoved == _TRUE) || ( padapter->bDriverStopped == _TRUE))
+       {
+               //DBG_871X("%s bSurpriseRemoved:%d, bDriverStopped:%d\n", __FUNCTION__, padapter->bSurpriseRemoved, padapter->bDriverStopped);
+               return;
+       }
+
+       switch(ledpriv->LedStrategy)
+       {
+               case SW_LED_MODE0:
+                       SwLedBlink(pLed);
+                       break;
+
+               case SW_LED_MODE1:
+                       SwLedBlink1(pLed);
+                       break;
+
+               case SW_LED_MODE2:
+                       SwLedBlink2(pLed);
+                       break;
+
+               case SW_LED_MODE3:
+                       SwLedBlink3(pLed);
+                       break;
+
+               case SW_LED_MODE4:
+                       SwLedBlink4(pLed);
+                       break;
+
+               case SW_LED_MODE5:
+                       SwLedBlink5(pLed);
+                       break;
+
+               case SW_LED_MODE6:
+                       SwLedBlink6(pLed);
+                       break;
+
+               default:
+                       //RT_TRACE(COMP_LED, DBG_LOUD, ("BlinkWorkItemCallback 0x%x \n", pHalData->LedStrategy));
+                       //SwLedBlink(pLed);
+                       break;
+       }
+}
+
+//
+//     Description:
+//             Callback function of LED BlinkWorkItem.
+//             We dispatch acture LED blink action according to LedStrategy.
+//
+static void BlinkWorkItemCallback(struct work_struct *work)
+{
+       PLED_871x        pLed = container_of(work, LED_871x, BlinkWorkItem);
+       BlinkHandler(pLed);
+}
+
+
+
+//================================================================================
+// Default LED behavior.
+//================================================================================
+
+//
+//     Description:
+//             Implement each led action for SW_LED_MODE0.
+//             This is default strategy.
+//
+static void
+SwLedControlMode0(
+       _adapter                *padapter,
+       LED_CTL_MODE            LedAction
+)
+{
+       struct led_priv *ledpriv = &(padapter->ledpriv);
+       PLED_871x       pLed = &(ledpriv->SwLed1);
+
+       // Decide led state
+       switch(LedAction)
+       {
+       case LED_CTL_TX:
+       case LED_CTL_RX:
+               if( pLed->bLedBlinkInProgress == _FALSE )
+               {
+                       pLed->bLedBlinkInProgress = _TRUE;
+
+                       pLed->CurrLedState = LED_BLINK_NORMAL;
+                       pLed->BlinkTimes = 2;
+
+                       if( pLed->bLedOn )
+                               pLed->BlinkingLedState = RTW_LED_OFF;
+                       else
+                               pLed->BlinkingLedState = RTW_LED_ON;
+                       _set_timer(&(pLed->BlinkTimer), LED_BLINK_NORMAL_INTERVAL);
+               }
+               break;
+
+       case LED_CTL_START_TO_LINK:
+               if( pLed->bLedBlinkInProgress == _FALSE )
+               {
+                       pLed->bLedBlinkInProgress = _TRUE;
+
+                       pLed->CurrLedState = LED_BLINK_StartToBlink;
+                       pLed->BlinkTimes = 24;
+
+                       if( pLed->bLedOn )
+                               pLed->BlinkingLedState = RTW_LED_OFF;
+                       else
+                               pLed->BlinkingLedState = RTW_LED_ON;
+                       _set_timer(&(pLed->BlinkTimer), LED_BLINK_SLOWLY_INTERVAL);
+               }
+               else
+               {
+                       pLed->CurrLedState = LED_BLINK_StartToBlink;
+               }
+               break;
+
+       case LED_CTL_LINK:
+               pLed->CurrLedState = RTW_LED_ON;
+               if( pLed->bLedBlinkInProgress == _FALSE )
+               {
+                       SwLedOn(padapter, pLed);
+               }
+               break;
+
+       case LED_CTL_NO_LINK:
+               pLed->CurrLedState = RTW_LED_OFF;
+               if( pLed->bLedBlinkInProgress == _FALSE )
+               {
+                       SwLedOff(padapter, pLed);
+               }
+               break;
+
+       case LED_CTL_POWER_OFF:
+               pLed->CurrLedState = RTW_LED_OFF;
+               if(pLed->bLedBlinkInProgress)
+               {
+                       _cancel_timer_ex(&(pLed->BlinkTimer));
+                       pLed->bLedBlinkInProgress = _FALSE;
+               }
+               SwLedOff(padapter, pLed);
+               break;
+
+       case LED_CTL_START_WPS:
+               if( pLed->bLedBlinkInProgress == _FALSE || pLed->CurrLedState == RTW_LED_ON)
+               {
+                       pLed->bLedBlinkInProgress = _TRUE;
+
+                       pLed->CurrLedState = LED_BLINK_WPS;
+                       pLed->BlinkTimes = 20;
+
+                       if( pLed->bLedOn )
+                       {
+                               pLed->BlinkingLedState = RTW_LED_OFF;
+                               _set_timer(&(pLed->BlinkTimer), LED_BLINK_LONG_INTERVAL);
+                       }
+                       else
+                       {
+                               pLed->BlinkingLedState = RTW_LED_ON;
+                               _set_timer(&(pLed->BlinkTimer), LED_BLINK_LONG_INTERVAL);
+                       }
+               }
+               break;
+
+       case LED_CTL_STOP_WPS:
+               if(pLed->bLedBlinkInProgress)
+               {
+                       pLed->CurrLedState = RTW_LED_OFF;
+                       _cancel_timer_ex(&(pLed->BlinkTimer));
+                       pLed->bLedBlinkInProgress = _FALSE;
+               }
+               break;
+
+
+       default:
+               break;
+       }
+
+       RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("Led %d\n", pLed->CurrLedState));
+
+}
+
+ //ALPHA, added by chiyoko, 20090106
+static void
+SwLedControlMode1(
+       _adapter                *padapter,
+       LED_CTL_MODE            LedAction
+)
+{
+       HAL_DATA_TYPE           *pHalData = GET_HAL_DATA(padapter);
+       struct led_priv         *ledpriv = &(padapter->ledpriv);
+       PLED_871x                       pLed = &(ledpriv->SwLed0);
+       struct mlme_priv                *pmlmepriv = &(padapter->mlmepriv);
+
+       if(pHalData->EEPROMCustomerID == RT_CID_819x_CAMEO)
+               pLed = &(ledpriv->SwLed1);
+
+       switch(LedAction)
+       {
+               case LED_CTL_POWER_ON:
+               case LED_CTL_START_TO_LINK:
+               case LED_CTL_NO_LINK:
+                       if( pLed->bLedNoLinkBlinkInProgress == _FALSE )
+                       {
+                               if(pLed->CurrLedState == LED_SCAN_BLINK || IS_LED_WPS_BLINKING(pLed))
+                               {
+                                       return;
+                               }
+                               if( pLed->bLedLinkBlinkInProgress == _TRUE )
+                               {
+                                       _cancel_timer_ex(&(pLed->BlinkTimer));
+                                       pLed->bLedLinkBlinkInProgress = _FALSE;
+                               }
+                               if(pLed->bLedBlinkInProgress ==_TRUE)
+                               {
+                                       _cancel_timer_ex(&(pLed->BlinkTimer));
+                                       pLed->bLedBlinkInProgress = _FALSE;
+                               }
+
+                               pLed->bLedNoLinkBlinkInProgress = _TRUE;
+                               pLed->CurrLedState = LED_BLINK_SLOWLY;
+                               if( pLed->bLedOn )
+                                       pLed->BlinkingLedState = RTW_LED_OFF;
+                               else
+                                       pLed->BlinkingLedState = RTW_LED_ON;
+                               _set_timer(&(pLed->BlinkTimer), LED_BLINK_NO_LINK_INTERVAL_ALPHA);
+                       }
+                       break;
+
+               case LED_CTL_LINK:
+                       if( pLed->bLedLinkBlinkInProgress == _FALSE )
+                       {
+                               if(pLed->CurrLedState == LED_SCAN_BLINK || IS_LED_WPS_BLINKING(pLed))
+                               {
+                                       return;
+                               }
+                               if(pLed->bLedNoLinkBlinkInProgress == _TRUE)
+                               {
+                                       _cancel_timer_ex(&(pLed->BlinkTimer));
+                                       pLed->bLedNoLinkBlinkInProgress = _FALSE;
+                               }
+                               if(pLed->bLedBlinkInProgress ==_TRUE)
+                               {
+                                       _cancel_timer_ex(&(pLed->BlinkTimer));
+                                       pLed->bLedBlinkInProgress = _FALSE;
+                               }
+                               pLed->bLedLinkBlinkInProgress = _TRUE;
+                               pLed->CurrLedState = LED_BLINK_NORMAL;
+                               if( pLed->bLedOn )
+                                       pLed->BlinkingLedState = RTW_LED_OFF;
+                               else
+                                       pLed->BlinkingLedState = RTW_LED_ON;
+                               _set_timer(&(pLed->BlinkTimer), LED_BLINK_LINK_INTERVAL_ALPHA);
+                       }
+                       break;
+
+               case LED_CTL_SITE_SURVEY:
+                        if((pmlmepriv->LinkDetectInfo.bBusyTraffic) && (check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE))
+                               ;
+                        else if(pLed->bLedScanBlinkInProgress ==_FALSE)
+                        {
+                               if(IS_LED_WPS_BLINKING(pLed))
+                                       return;
+
+                               if(pLed->bLedNoLinkBlinkInProgress == _TRUE)
+                               {
+                                       _cancel_timer_ex(&(pLed->BlinkTimer));
+                                       pLed->bLedNoLinkBlinkInProgress = _FALSE;
+                               }
+                               if( pLed->bLedLinkBlinkInProgress == _TRUE )
+                               {
+                                       _cancel_timer_ex(&(pLed->BlinkTimer));
+                                        pLed->bLedLinkBlinkInProgress = _FALSE;
+                               }
+                               if(pLed->bLedBlinkInProgress ==_TRUE)
+                               {
+                                       _cancel_timer_ex(&(pLed->BlinkTimer));
+                                       pLed->bLedBlinkInProgress = _FALSE;
+                               }
+                               pLed->bLedScanBlinkInProgress = _TRUE;
+                               pLed->CurrLedState = LED_SCAN_BLINK;
+                               pLed->BlinkTimes = 24;
+                               if( pLed->bLedOn )
+                                       pLed->BlinkingLedState = RTW_LED_OFF;
+                               else
+                                       pLed->BlinkingLedState = RTW_LED_ON;
+                               _set_timer(&(pLed->BlinkTimer), LED_BLINK_SCAN_INTERVAL_ALPHA);
+                        }
+                       break;
+
+               case LED_CTL_TX:
+               case LED_CTL_RX:
+                       if(pLed->bLedBlinkInProgress ==_FALSE)
+                       {
+                               if(pLed->CurrLedState == LED_SCAN_BLINK || IS_LED_WPS_BLINKING(pLed))
+                               {
+                                       return;
+                               }
+                               if(pLed->bLedNoLinkBlinkInProgress == _TRUE)
+                               {
+                                       _cancel_timer_ex(&(pLed->BlinkTimer));
+                                       pLed->bLedNoLinkBlinkInProgress = _FALSE;
+                               }
+                               if( pLed->bLedLinkBlinkInProgress == _TRUE )
+                               {
+                                       _cancel_timer_ex(&(pLed->BlinkTimer));
+                                       pLed->bLedLinkBlinkInProgress = _FALSE;
+                               }
+                               pLed->bLedBlinkInProgress = _TRUE;
+                               pLed->CurrLedState = LED_TXRX_BLINK;
+                               pLed->BlinkTimes = 2;
+                               if( pLed->bLedOn )
+                                       pLed->BlinkingLedState = RTW_LED_OFF;
+                               else
+                                       pLed->BlinkingLedState = RTW_LED_ON;
+                               _set_timer(&(pLed->BlinkTimer), LED_BLINK_FASTER_INTERVAL_ALPHA);
+                       }
+                       break;
+
+               case LED_CTL_START_WPS: //wait until xinpin finish
+               case LED_CTL_START_WPS_BOTTON:
+                        if(pLed->bLedWPSBlinkInProgress ==_FALSE)
+                        {
+                               if(pLed->bLedNoLinkBlinkInProgress == _TRUE)
+                               {
+                                       _cancel_timer_ex(&(pLed->BlinkTimer));
+                                       pLed->bLedNoLinkBlinkInProgress = _FALSE;
+                               }
+                               if( pLed->bLedLinkBlinkInProgress == _TRUE )
+                               {
+                                       _cancel_timer_ex(&(pLed->BlinkTimer));
+                                        pLed->bLedLinkBlinkInProgress = _FALSE;
+                               }
+                               if(pLed->bLedBlinkInProgress ==_TRUE)
+                               {
+                                       _cancel_timer_ex(&(pLed->BlinkTimer));
+                                       pLed->bLedBlinkInProgress = _FALSE;
+                               }
+                               if(pLed->bLedScanBlinkInProgress ==_TRUE)
+                               {
+                                       _cancel_timer_ex(&(pLed->BlinkTimer));
+                                       pLed->bLedScanBlinkInProgress = _FALSE;
+                               }
+                               pLed->bLedWPSBlinkInProgress = _TRUE;
+                               pLed->CurrLedState = LED_BLINK_WPS;
+                               if( pLed->bLedOn )
+                                       pLed->BlinkingLedState = RTW_LED_OFF;
+                               else
+                                       pLed->BlinkingLedState = RTW_LED_ON;
+                               _set_timer(&(pLed->BlinkTimer), LED_BLINK_SCAN_INTERVAL_ALPHA);
+                        }
+                       break;
+
+
+               case LED_CTL_STOP_WPS:
+                       if(pLed->bLedNoLinkBlinkInProgress == _TRUE)
+                       {
+                               _cancel_timer_ex(&(pLed->BlinkTimer));
+                               pLed->bLedNoLinkBlinkInProgress = _FALSE;
+                       }
+                       if( pLed->bLedLinkBlinkInProgress == _TRUE )
+                       {
+                               _cancel_timer_ex(&(pLed->BlinkTimer));
+                                pLed->bLedLinkBlinkInProgress = _FALSE;
+                       }
+                       if(pLed->bLedBlinkInProgress ==_TRUE)
+                       {
+                               _cancel_timer_ex(&(pLed->BlinkTimer));
+                               pLed->bLedBlinkInProgress = _FALSE;
+                       }
+                       if(pLed->bLedScanBlinkInProgress ==_TRUE)
+                       {
+                               _cancel_timer_ex(&(pLed->BlinkTimer));
+                               pLed->bLedScanBlinkInProgress = _FALSE;
+                       }
+                       if(pLed->bLedWPSBlinkInProgress)
+                       {
+                               _cancel_timer_ex(&(pLed->BlinkTimer));
+                       }
+                       else
+                       {
+                               pLed->bLedWPSBlinkInProgress = _TRUE;
+                       }
+
+                       pLed->CurrLedState = LED_BLINK_WPS_STOP;
+                       if(pLed->bLedOn)
+                       {
+                               pLed->BlinkingLedState = RTW_LED_OFF;
+                               _set_timer(&(pLed->BlinkTimer), LED_BLINK_WPS_SUCESS_INTERVAL_ALPHA);
+                       }
+                       else
+                       {
+                               pLed->BlinkingLedState = RTW_LED_ON;
+                               _set_timer(&(pLed->BlinkTimer), 0);
+                       }
+                       break;
+
+               case LED_CTL_STOP_WPS_FAIL:
+                       if(pLed->bLedWPSBlinkInProgress)
+                       {
+                               _cancel_timer_ex(&(pLed->BlinkTimer));
+                               pLed->bLedWPSBlinkInProgress = _FALSE;
+                       }
+
+                       pLed->bLedNoLinkBlinkInProgress = _TRUE;
+                       pLed->CurrLedState = LED_BLINK_SLOWLY;
+                       if( pLed->bLedOn )
+                               pLed->BlinkingLedState = RTW_LED_OFF;
+                       else
+                               pLed->BlinkingLedState = RTW_LED_ON;
+                       _set_timer(&(pLed->BlinkTimer), LED_BLINK_NO_LINK_INTERVAL_ALPHA);
+                       break;
+
+               case LED_CTL_POWER_OFF:
+                       pLed->CurrLedState = RTW_LED_OFF;
+                       pLed->BlinkingLedState = RTW_LED_OFF;
+                       if( pLed->bLedNoLinkBlinkInProgress)
+                       {
+                               _cancel_timer_ex(&(pLed->BlinkTimer));
+                               pLed->bLedNoLinkBlinkInProgress = _FALSE;
+                       }
+                       if( pLed->bLedLinkBlinkInProgress)
+                       {
+                               _cancel_timer_ex(&(pLed->BlinkTimer));
+                               pLed->bLedLinkBlinkInProgress = _FALSE;
+                       }
+                       if( pLed->bLedBlinkInProgress)
+                       {
+                               _cancel_timer_ex(&(pLed->BlinkTimer));
+                               pLed->bLedBlinkInProgress = _FALSE;
+                       }
+                       if( pLed->bLedWPSBlinkInProgress )
+                       {
+                               _cancel_timer_ex(&(pLed->BlinkTimer));
+                               pLed->bLedWPSBlinkInProgress = _FALSE;
+                       }
+                       if( pLed->bLedScanBlinkInProgress)
+                       {
+                               _cancel_timer_ex(&(pLed->BlinkTimer));
+                               pLed->bLedScanBlinkInProgress = _FALSE;
+                       }
+
+                       SwLedOff(padapter, pLed);
+                       break;
+
+               default:
+                       break;
+
+       }
+
+       RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("Led %d\n", pLed->CurrLedState));
+}
+
+ //Arcadyan/Sitecom , added by chiyoko, 20090216
+static void
+SwLedControlMode2(
+       _adapter                                *padapter,
+       LED_CTL_MODE            LedAction
+)
+{
+       struct led_priv *ledpriv = &(padapter->ledpriv);
+       struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
+       PLED_871x               pLed = &(ledpriv->SwLed0);
+
+       switch(LedAction)
+       {
+               case LED_CTL_SITE_SURVEY:
+                        if(pmlmepriv->LinkDetectInfo.bBusyTraffic)
+                               ;
+                        else if(pLed->bLedScanBlinkInProgress ==_FALSE)
+                        {
+                               if(IS_LED_WPS_BLINKING(pLed))
+                                       return;
+
+                               if(pLed->bLedBlinkInProgress ==_TRUE)
+                               {
+                                       _cancel_timer_ex(&(pLed->BlinkTimer));
+                                       pLed->bLedBlinkInProgress = _FALSE;
+                               }
+                               pLed->bLedScanBlinkInProgress = _TRUE;
+                               pLed->CurrLedState = LED_SCAN_BLINK;
+                               pLed->BlinkTimes = 24;
+                               if( pLed->bLedOn )
+                                       pLed->BlinkingLedState = RTW_LED_OFF;
+                               else
+                                       pLed->BlinkingLedState = RTW_LED_ON;
+                               _set_timer(&(pLed->BlinkTimer), LED_BLINK_SCAN_INTERVAL_ALPHA);
+                        }
+                       break;
+
+               case LED_CTL_TX:
+               case LED_CTL_RX:
+                       if((pLed->bLedBlinkInProgress ==_FALSE) && (check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE))
+                       {
+                               if(pLed->CurrLedState == LED_SCAN_BLINK || IS_LED_WPS_BLINKING(pLed))
+                               {
+                                       return;
+                               }
+
+                               pLed->bLedBlinkInProgress = _TRUE;
+                               pLed->CurrLedState = LED_TXRX_BLINK;
+                               pLed->BlinkTimes = 2;
+                               if( pLed->bLedOn )
+                                       pLed->BlinkingLedState = RTW_LED_OFF;
+                               else
+                                       pLed->BlinkingLedState = RTW_LED_ON;
+                               _set_timer(&(pLed->BlinkTimer), LED_BLINK_FASTER_INTERVAL_ALPHA);
+                       }
+                       break;
+
+               case LED_CTL_LINK:
+                       pLed->CurrLedState = RTW_LED_ON;
+                       pLed->BlinkingLedState = RTW_LED_ON;
+                       if( pLed->bLedBlinkInProgress)
+                       {
+                               _cancel_timer_ex(&(pLed->BlinkTimer));
+                               pLed->bLedBlinkInProgress = _FALSE;
+                       }
+                       if( pLed->bLedScanBlinkInProgress)
+                       {
+                               _cancel_timer_ex(&(pLed->BlinkTimer));
+                               pLed->bLedScanBlinkInProgress = _FALSE;
+                       }
+
+                       _set_timer(&(pLed->BlinkTimer), 0);
+                       break;
+
+               case LED_CTL_START_WPS: //wait until xinpin finish
+               case LED_CTL_START_WPS_BOTTON:
+                       if(pLed->bLedWPSBlinkInProgress ==_FALSE)
+                       {
+                               if(pLed->bLedBlinkInProgress ==_TRUE)
+                               {
+                                       _cancel_timer_ex(&(pLed->BlinkTimer));
+                                       pLed->bLedBlinkInProgress = _FALSE;
+                               }
+                               if(pLed->bLedScanBlinkInProgress ==_TRUE)
+                               {
+                                       _cancel_timer_ex(&(pLed->BlinkTimer));
+                                       pLed->bLedScanBlinkInProgress = _FALSE;
+                               }
+                               pLed->bLedWPSBlinkInProgress = _TRUE;
+                               pLed->CurrLedState = RTW_LED_ON;
+                               pLed->BlinkingLedState = RTW_LED_ON;
+                               _set_timer(&(pLed->BlinkTimer), 0);
+                        }
+                       break;
+
+               case LED_CTL_STOP_WPS:
+                       pLed->bLedWPSBlinkInProgress = _FALSE;
+                       if(padapter->pwrctrlpriv.rf_pwrstate != rf_on)
+                       {
+                               SwLedOff(padapter, pLed);
+                       }
+                       else
+                       {
+                               pLed->CurrLedState = RTW_LED_ON;
+                               pLed->BlinkingLedState = RTW_LED_ON;
+                               _set_timer(&(pLed->BlinkTimer), 0);
+                               RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("CurrLedState %d\n", pLed->CurrLedState));
+                       }
+                       break;
+
+               case LED_CTL_STOP_WPS_FAIL:
+                       pLed->bLedWPSBlinkInProgress = _FALSE;
+                       if(padapter->pwrctrlpriv.rf_pwrstate != rf_on)
+                       {
+                               SwLedOff(padapter, pLed);
+                       }
+                       else
+                       {
+                               pLed->CurrLedState = RTW_LED_OFF;
+                               pLed->BlinkingLedState = RTW_LED_OFF;
+                               _set_timer(&(pLed->BlinkTimer), 0);
+                               RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("CurrLedState %d\n", pLed->CurrLedState));
+                       }
+                       break;
+
+               case LED_CTL_START_TO_LINK:
+               case LED_CTL_NO_LINK:
+                       if(!IS_LED_BLINKING(pLed))
+                       {
+                               pLed->CurrLedState = RTW_LED_OFF;
+                               pLed->BlinkingLedState = RTW_LED_OFF;
+                               _set_timer(&(pLed->BlinkTimer), 0);
+                       }
+                       break;
+
+               case LED_CTL_POWER_OFF:
+                       pLed->CurrLedState = RTW_LED_OFF;
+                       pLed->BlinkingLedState = RTW_LED_OFF;
+                       if( pLed->bLedBlinkInProgress)
+                       {
+                               _cancel_timer_ex(&(pLed->BlinkTimer));
+                               pLed->bLedBlinkInProgress = _FALSE;
+                       }
+                       if( pLed->bLedScanBlinkInProgress)
+                       {
+                               _cancel_timer_ex(&(pLed->BlinkTimer));
+                               pLed->bLedScanBlinkInProgress = _FALSE;
+                       }
+                       if( pLed->bLedWPSBlinkInProgress )
+                       {
+                               _cancel_timer_ex(&(pLed->BlinkTimer));
+                               pLed->bLedWPSBlinkInProgress = _FALSE;
+                       }
+
+                       _set_timer(&(pLed->BlinkTimer), 0);
+                       break;
+
+               default:
+                       break;
+
+       }
+
+       RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("CurrLedState %d\n", pLed->CurrLedState));
+}
+
+  //COREGA, added by chiyoko, 20090316
+ static void
+ SwLedControlMode3(
+       _adapter                                *padapter,
+       LED_CTL_MODE            LedAction
+)
+{
+       struct led_priv *ledpriv = &(padapter->ledpriv);
+       struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
+       PLED_871x               pLed = &(ledpriv->SwLed0);
+
+       switch(LedAction)
+       {
+               case LED_CTL_SITE_SURVEY:
+                       if(pmlmepriv->LinkDetectInfo.bBusyTraffic)
+                               ;
+                       else if(pLed->bLedScanBlinkInProgress ==_FALSE)
+                       {
+                               if(IS_LED_WPS_BLINKING(pLed))
+                                       return;
+
+                               if(pLed->bLedBlinkInProgress ==_TRUE)
+                               {
+                                       _cancel_timer_ex(&(pLed->BlinkTimer));
+                                       pLed->bLedBlinkInProgress = _FALSE;
+                               }
+                               pLed->bLedScanBlinkInProgress = _TRUE;
+                               pLed->CurrLedState = LED_SCAN_BLINK;
+                               pLed->BlinkTimes = 24;
+                               if( pLed->bLedOn )
+                                       pLed->BlinkingLedState = RTW_LED_OFF;
+                               else
+                                       pLed->BlinkingLedState = RTW_LED_ON;
+                               _set_timer(&(pLed->BlinkTimer), LED_BLINK_SCAN_INTERVAL_ALPHA);
+                       }
+                       break;
+
+               case LED_CTL_TX:
+               case LED_CTL_RX:
+                       if((pLed->bLedBlinkInProgress ==_FALSE) && (check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE))
+                       {
+                               if(pLed->CurrLedState == LED_SCAN_BLINK || IS_LED_WPS_BLINKING(pLed))
+                               {
+                                       return;
+                               }
+
+                               pLed->bLedBlinkInProgress = _TRUE;
+                               pLed->CurrLedState = LED_TXRX_BLINK;
+                               pLed->BlinkTimes = 2;
+                               if( pLed->bLedOn )
+                                       pLed->BlinkingLedState = RTW_LED_OFF;
+                               else
+                                       pLed->BlinkingLedState = RTW_LED_ON;
+                               _set_timer(&(pLed->BlinkTimer), LED_BLINK_FASTER_INTERVAL_ALPHA);
+                       }
+                       break;
+
+               case LED_CTL_LINK:
+                       if(IS_LED_WPS_BLINKING(pLed))
+                               return;
+
+                       pLed->CurrLedState = RTW_LED_ON;
+                       pLed->BlinkingLedState = RTW_LED_ON;
+                       if( pLed->bLedBlinkInProgress)
+                       {
+                               _cancel_timer_ex(&(pLed->BlinkTimer));
+                               pLed->bLedBlinkInProgress = _FALSE;
+                       }
+                       if( pLed->bLedScanBlinkInProgress)
+                       {
+                               _cancel_timer_ex(&(pLed->BlinkTimer));
+                               pLed->bLedScanBlinkInProgress = _FALSE;
+                       }
+
+                       _set_timer(&(pLed->BlinkTimer), 0);
+                       break;
+
+               case LED_CTL_START_WPS: //wait until xinpin finish
+               case LED_CTL_START_WPS_BOTTON:
+                       if(pLed->bLedWPSBlinkInProgress ==_FALSE)
+                       {
+                               if(pLed->bLedBlinkInProgress ==_TRUE)
+                               {
+                                       _cancel_timer_ex(&(pLed->BlinkTimer));
+                                       pLed->bLedBlinkInProgress = _FALSE;
+                               }
+                               if(pLed->bLedScanBlinkInProgress ==_TRUE)
+                               {
+                                       _cancel_timer_ex(&(pLed->BlinkTimer));
+                                       pLed->bLedScanBlinkInProgress = _FALSE;
+                               }
+                               pLed->bLedWPSBlinkInProgress = _TRUE;
+                               pLed->CurrLedState = LED_BLINK_WPS;
+                               if( pLed->bLedOn )
+                                       pLed->BlinkingLedState = RTW_LED_OFF;
+                               else
+                                       pLed->BlinkingLedState = RTW_LED_ON;
+                               _set_timer(&(pLed->BlinkTimer), LED_BLINK_SCAN_INTERVAL_ALPHA);
+                       }
+                       break;
+
+               case LED_CTL_STOP_WPS:
+                       if(pLed->bLedWPSBlinkInProgress)
+                       {
+                               _cancel_timer_ex(&(pLed->BlinkTimer));
+                               pLed->bLedWPSBlinkInProgress = _FALSE;
+                       }
+                       else
+                       {
+                               pLed->bLedWPSBlinkInProgress = _TRUE;
+                       }
+
+                       pLed->CurrLedState = LED_BLINK_WPS_STOP;
+                       if(pLed->bLedOn)
+                       {
+                               pLed->BlinkingLedState = RTW_LED_OFF;
+                               _set_timer(&(pLed->BlinkTimer), LED_BLINK_WPS_SUCESS_INTERVAL_ALPHA);
+                       }
+                       else
+                       {
+                               pLed->BlinkingLedState = RTW_LED_ON;
+                               _set_timer(&(pLed->BlinkTimer), 0);
+                       }
+
+                       break;
+
+               case LED_CTL_STOP_WPS_FAIL:
+                       if(pLed->bLedWPSBlinkInProgress)
+                       {
+                               _cancel_timer_ex(&(pLed->BlinkTimer));
+                               pLed->bLedWPSBlinkInProgress = _FALSE;
+                       }
+
+                       pLed->CurrLedState = RTW_LED_OFF;
+                       pLed->BlinkingLedState = RTW_LED_OFF;
+                       _set_timer(&(pLed->BlinkTimer), 0);
+                       break;
+
+               case LED_CTL_START_TO_LINK:
+               case LED_CTL_NO_LINK:
+                       if(!IS_LED_BLINKING(pLed))
+                       {
+                               pLed->CurrLedState = RTW_LED_OFF;
+                               pLed->BlinkingLedState = RTW_LED_OFF;
+                               _set_timer(&(pLed->BlinkTimer), 0);
+                       }
+                       break;
+
+               case LED_CTL_POWER_OFF:
+                       pLed->CurrLedState = RTW_LED_OFF;
+                       pLed->BlinkingLedState = RTW_LED_OFF;
+                       if( pLed->bLedBlinkInProgress)
+                       {
+                               _cancel_timer_ex(&(pLed->BlinkTimer));
+                               pLed->bLedBlinkInProgress = _FALSE;
+                       }
+                       if( pLed->bLedScanBlinkInProgress)
+                       {
+                               _cancel_timer_ex(&(pLed->BlinkTimer));
+                               pLed->bLedScanBlinkInProgress = _FALSE;
+                       }
+                       if( pLed->bLedWPSBlinkInProgress )
+                       {
+                               _cancel_timer_ex(&(pLed->BlinkTimer));
+                               pLed->bLedWPSBlinkInProgress = _FALSE;
+                       }
+
+                       _set_timer(&(pLed->BlinkTimer), 0);
+                       break;
+
+               default:
+                       break;
+
+       }
+
+       RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("CurrLedState %d\n", pLed->CurrLedState));
+}
+
+
+ //Edimax-Belkin, added by chiyoko, 20090413
+static void
+SwLedControlMode4(
+       _adapter                                *padapter,
+       LED_CTL_MODE            LedAction
+)
+{
+       struct led_priv *ledpriv = &(padapter->ledpriv);
+       struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
+       PLED_871x               pLed = &(ledpriv->SwLed0);
+       PLED_871x               pLed1 = &(ledpriv->SwLed1);
+
+       switch(LedAction)
+       {
+               case LED_CTL_START_TO_LINK:
+                       if(pLed1->bLedWPSBlinkInProgress)
+                       {
+                               pLed1->bLedWPSBlinkInProgress = _FALSE;
+                               _cancel_timer_ex(&(pLed1->BlinkTimer));
+
+                               pLed1->BlinkingLedState = RTW_LED_OFF;
+                               pLed1->CurrLedState = RTW_LED_OFF;
+
+                               if(pLed1->bLedOn)
+                                       _set_timer(&(pLed->BlinkTimer), 0);
+                       }
+
+                       if( pLed->bLedStartToLinkBlinkInProgress == _FALSE )
+                       {
+                               if(pLed->CurrLedState == LED_SCAN_BLINK || IS_LED_WPS_BLINKING(pLed))
+                               {
+                                       return;
+                               }
+                               if(pLed->bLedBlinkInProgress ==_TRUE)
+                               {
+                                       _cancel_timer_ex(&(pLed->BlinkTimer));
+                                       pLed->bLedBlinkInProgress = _FALSE;
+                               }
+                               if(pLed->bLedNoLinkBlinkInProgress ==_TRUE)
+                               {
+                                       _cancel_timer_ex(&(pLed->BlinkTimer));
+                                       pLed->bLedNoLinkBlinkInProgress = _FALSE;
+                               }
+
+                               pLed->bLedStartToLinkBlinkInProgress = _TRUE;
+                               pLed->CurrLedState = LED_BLINK_StartToBlink;
+                               if( pLed->bLedOn )
+                               {
+                                       pLed->BlinkingLedState = RTW_LED_OFF;
+                                       _set_timer(&(pLed->BlinkTimer), LED_BLINK_SLOWLY_INTERVAL);
+                               }
+                               else
+                               {
+                                       pLed->BlinkingLedState = RTW_LED_ON;
+                                       _set_timer(&(pLed->BlinkTimer), LED_BLINK_NORMAL_INTERVAL);
+                               }
+                       }
+                       break;
+
+               case LED_CTL_LINK:
+               case LED_CTL_NO_LINK:
+                       //LED1 settings
+                       if(LedAction == LED_CTL_LINK)
+                       {
+                               if(pLed1->bLedWPSBlinkInProgress)
+                               {
+                                       pLed1->bLedWPSBlinkInProgress = _FALSE;
+                                       _cancel_timer_ex(&(pLed1->BlinkTimer));
+
+                                       pLed1->BlinkingLedState = RTW_LED_OFF;
+                                       pLed1->CurrLedState = RTW_LED_OFF;
+
+                                       if(pLed1->bLedOn)
+                                               _set_timer(&(pLed->BlinkTimer), 0);
+                               }
+                       }
+
+                       if( pLed->bLedNoLinkBlinkInProgress == _FALSE )
+                       {
+                               if(pLed->CurrLedState == LED_SCAN_BLINK || IS_LED_WPS_BLINKING(pLed))
+                               {
+                                       return;
+                               }
+                               if(pLed->bLedBlinkInProgress ==_TRUE)
+                               {
+                                       _cancel_timer_ex(&(pLed->BlinkTimer));
+                                       pLed->bLedBlinkInProgress = _FALSE;
+                               }
+
+                               pLed->bLedNoLinkBlinkInProgress = _TRUE;
+                               pLed->CurrLedState = LED_BLINK_SLOWLY;
+                               if( pLed->bLedOn )
+                                       pLed->BlinkingLedState = RTW_LED_OFF;
+                               else
+                                       pLed->BlinkingLedState = RTW_LED_ON;
+                               _set_timer(&(pLed->BlinkTimer), LED_BLINK_NO_LINK_INTERVAL_ALPHA);
+                       }
+                       break;
+
+               case LED_CTL_SITE_SURVEY:
+                       if((pmlmepriv->LinkDetectInfo.bBusyTraffic) && (check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE))
+                               ;
+                       else if(pLed->bLedScanBlinkInProgress ==_FALSE)
+                       {
+                               if(IS_LED_WPS_BLINKING(pLed))
+                                       return;
+
+                               if(pLed->bLedNoLinkBlinkInProgress == _TRUE)
+                               {
+                                       _cancel_timer_ex(&(pLed->BlinkTimer));
+                                       pLed->bLedNoLinkBlinkInProgress = _FALSE;
+                               }
+                               if(pLed->bLedBlinkInProgress ==_TRUE)
+                               {
+                                       _cancel_timer_ex(&(pLed->BlinkTimer));
+                                       pLed->bLedBlinkInProgress = _FALSE;
+                               }
+                               pLed->bLedScanBlinkInProgress = _TRUE;
+                               pLed->CurrLedState = LED_SCAN_BLINK;
+                               pLed->BlinkTimes = 24;
+                               if( pLed->bLedOn )
+                                       pLed->BlinkingLedState = RTW_LED_OFF;
+                               else
+                                       pLed->BlinkingLedState = RTW_LED_ON;
+                               _set_timer(&(pLed->BlinkTimer), LED_BLINK_SCAN_INTERVAL_ALPHA);
+                       }
+                       break;
+
+               case LED_CTL_TX:
+               case LED_CTL_RX:
+                       if(pLed->bLedBlinkInProgress ==_FALSE)
+                       {
+                               if(pLed->CurrLedState == LED_SCAN_BLINK || IS_LED_WPS_BLINKING(pLed))
+                               {
+                                       return;
+                               }
+                               if(pLed->bLedNoLinkBlinkInProgress == _TRUE)
+                               {
+                                       _cancel_timer_ex(&(pLed->BlinkTimer));
+                                       pLed->bLedNoLinkBlinkInProgress = _FALSE;
+                               }
+                               pLed->bLedBlinkInProgress = _TRUE;
+                               pLed->CurrLedState = LED_TXRX_BLINK;
+                               pLed->BlinkTimes = 2;
+                               if( pLed->bLedOn )
+                                       pLed->BlinkingLedState = RTW_LED_OFF;
+                               else
+                                       pLed->BlinkingLedState = RTW_LED_ON;
+                               _set_timer(&(pLed->BlinkTimer), LED_BLINK_FASTER_INTERVAL_ALPHA);
+                       }
+                       break;
+
+               case LED_CTL_START_WPS: //wait until xinpin finish
+               case LED_CTL_START_WPS_BOTTON:
+                       if(pLed1->bLedWPSBlinkInProgress)
+                       {
+                               pLed1->bLedWPSBlinkInProgress = _FALSE;
+                               _cancel_timer_ex(&(pLed1->BlinkTimer));
+
+                               pLed1->BlinkingLedState = RTW_LED_OFF;
+                               pLed1->CurrLedState = RTW_LED_OFF;
+
+                               if(pLed1->bLedOn)
+                                       _set_timer(&(pLed->BlinkTimer), 0);
+                       }
+
+                       if(pLed->bLedWPSBlinkInProgress ==_FALSE)
+                       {
+                               if(pLed->bLedNoLinkBlinkInProgress == _TRUE)
+                               {
+                                       _cancel_timer_ex(&(pLed->BlinkTimer));
+                                       pLed->bLedNoLinkBlinkInProgress = _FALSE;
+                               }
+                               if(pLed->bLedBlinkInProgress ==_TRUE)
+                               {
+                                       _cancel_timer_ex(&(pLed->BlinkTimer));
+                                       pLed->bLedBlinkInProgress = _FALSE;
+                               }
+                               if(pLed->bLedScanBlinkInProgress ==_TRUE)
+                               {
+                                       _cancel_timer_ex(&(pLed->BlinkTimer));
+                                       pLed->bLedScanBlinkInProgress = _FALSE;
+                               }
+                               pLed->bLedWPSBlinkInProgress = _TRUE;
+                               pLed->CurrLedState = LED_BLINK_WPS;
+                               if( pLed->bLedOn )
+                               {
+                                       pLed->BlinkingLedState = RTW_LED_OFF;
+                                       _set_timer(&(pLed->BlinkTimer), LED_BLINK_SLOWLY_INTERVAL);
+                               }
+                               else
+                               {
+                                       pLed->BlinkingLedState = RTW_LED_ON;
+                                       _set_timer(&(pLed->BlinkTimer), LED_BLINK_NORMAL_INTERVAL);
+                               }
+                       }
+                       break;
+
+               case LED_CTL_STOP_WPS:  //WPS connect success
+                       if(pLed->bLedWPSBlinkInProgress)
+                       {
+                               _cancel_timer_ex(&(pLed->BlinkTimer));
+                               pLed->bLedWPSBlinkInProgress = _FALSE;
+                       }
+
+                       pLed->bLedNoLinkBlinkInProgress = _TRUE;
+                       pLed->CurrLedState = LED_BLINK_SLOWLY;
+                       if( pLed->bLedOn )
+                               pLed->BlinkingLedState = RTW_LED_OFF;
+                       else
+                               pLed->BlinkingLedState = RTW_LED_ON;
+                       _set_timer(&(pLed->BlinkTimer), LED_BLINK_NO_LINK_INTERVAL_ALPHA);
+
+                       break;
+
+               case LED_CTL_STOP_WPS_FAIL:             //WPS authentication fail
+                       if(pLed->bLedWPSBlinkInProgress)
+                       {
+                               _cancel_timer_ex(&(pLed->BlinkTimer));
+                               pLed->bLedWPSBlinkInProgress = _FALSE;
+                       }
+
+                       pLed->bLedNoLinkBlinkInProgress = _TRUE;
+                       pLed->CurrLedState = LED_BLINK_SLOWLY;
+                       if( pLed->bLedOn )
+                               pLed->BlinkingLedState = RTW_LED_OFF;
+                       else
+                               pLed->BlinkingLedState = RTW_LED_ON;
+                       _set_timer(&(pLed->BlinkTimer), LED_BLINK_NO_LINK_INTERVAL_ALPHA);
+
+                       //LED1 settings
+                       if(pLed1->bLedWPSBlinkInProgress)
+                               _cancel_timer_ex(&(pLed1->BlinkTimer));
+                       else
+                               pLed1->bLedWPSBlinkInProgress = _TRUE;
+
+                       pLed1->CurrLedState = LED_BLINK_WPS_STOP;
+                       if( pLed1->bLedOn )
+                               pLed1->BlinkingLedState = RTW_LED_OFF;
+                       else
+                               pLed1->BlinkingLedState = RTW_LED_ON;
+                       _set_timer(&(pLed->BlinkTimer), LED_BLINK_NORMAL_INTERVAL);
+
+                       break;
+
+               case LED_CTL_STOP_WPS_FAIL_OVERLAP:     //WPS session overlap
+                       if(pLed->bLedWPSBlinkInProgress)
+                       {
+                               _cancel_timer_ex(&(pLed->BlinkTimer));
+                               pLed->bLedWPSBlinkInProgress = _FALSE;
+                       }
+
+                       pLed->bLedNoLinkBlinkInProgress = _TRUE;
+                       pLed->CurrLedState = LED_BLINK_SLOWLY;
+                       if( pLed->bLedOn )
+                               pLed->BlinkingLedState = RTW_LED_OFF;
+                       else
+                               pLed->BlinkingLedState = RTW_LED_ON;
+                       _set_timer(&(pLed->BlinkTimer), LED_BLINK_NO_LINK_INTERVAL_ALPHA);
+
+                       //LED1 settings
+                       if(pLed1->bLedWPSBlinkInProgress)
+                               _cancel_timer_ex(&(pLed1->BlinkTimer));
+                       else
+                               pLed1->bLedWPSBlinkInProgress = _TRUE;
+
+                       pLed1->CurrLedState = LED_BLINK_WPS_STOP_OVERLAP;
+                       pLed1->BlinkTimes = 10;
+                       if( pLed1->bLedOn )
+                               pLed1->BlinkingLedState = RTW_LED_OFF;
+                       else
+                               pLed1->BlinkingLedState = RTW_LED_ON;
+                       _set_timer(&(pLed->BlinkTimer), LED_BLINK_NORMAL_INTERVAL);
+
+                       break;
+
+               case LED_CTL_POWER_OFF:
+                       pLed->CurrLedState = RTW_LED_OFF;
+                       pLed->BlinkingLedState = RTW_LED_OFF;
+
+                       if( pLed->bLedNoLinkBlinkInProgress)
+                       {
+                               _cancel_timer_ex(&(pLed->BlinkTimer));
+                               pLed->bLedNoLinkBlinkInProgress = _FALSE;
+                       }
+                       if( pLed->bLedLinkBlinkInProgress)
+                       {
+                               _cancel_timer_ex(&(pLed->BlinkTimer));
+                               pLed->bLedLinkBlinkInProgress = _FALSE;
+                       }
+                       if( pLed->bLedBlinkInProgress)
+                       {
+                               _cancel_timer_ex(&(pLed->BlinkTimer));
+                               pLed->bLedBlinkInProgress = _FALSE;
+                       }
+                       if( pLed->bLedWPSBlinkInProgress )
+                       {
+                               _cancel_timer_ex(&(pLed->BlinkTimer));
+                               pLed->bLedWPSBlinkInProgress = _FALSE;
+                       }
+                       if( pLed->bLedScanBlinkInProgress)
+                       {
+                               _cancel_timer_ex(&(pLed->BlinkTimer));
+                               pLed->bLedScanBlinkInProgress = _FALSE;
+                       }
+                       if( pLed->bLedStartToLinkBlinkInProgress)
+                       {
+                               _cancel_timer_ex(&(pLed->BlinkTimer));
+                               pLed->bLedStartToLinkBlinkInProgress = _FALSE;
+                       }
+
+                       if( pLed1->bLedWPSBlinkInProgress )
+                       {
+                               _cancel_timer_ex(&(pLed1->BlinkTimer));
+                               pLed1->bLedWPSBlinkInProgress = _FALSE;
+                       }
+
+                       pLed1->BlinkingLedState = LED_UNKNOWN;
+                       SwLedOff(padapter, pLed);
+                       SwLedOff(padapter, pLed1);
+                       break;
+
+               default:
+                       break;
+
+       }
+
+       RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("Led %d\n", pLed->CurrLedState));
+}
+
+
+
+ //Sercomm-Belkin, added by chiyoko, 20090415
+static void
+SwLedControlMode5(
+       _adapter                                *padapter,
+       LED_CTL_MODE            LedAction
+)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
+       struct led_priv *ledpriv = &(padapter->ledpriv);
+       struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
+       PLED_871x               pLed = &(ledpriv->SwLed0);
+
+       if(pHalData->EEPROMCustomerID == RT_CID_819x_CAMEO)
+               pLed = &(ledpriv->SwLed1);
+
+       switch(LedAction)
+       {
+               case LED_CTL_POWER_ON:
+               case LED_CTL_NO_LINK:
+               case LED_CTL_LINK:      //solid blue
+                       pLed->CurrLedState = RTW_LED_ON;
+                       pLed->BlinkingLedState = RTW_LED_ON;
+
+                       _set_timer(&(pLed->BlinkTimer), 0);
+                       break;
+
+               case LED_CTL_SITE_SURVEY:
+                       if((pmlmepriv->LinkDetectInfo.bBusyTraffic) && (check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE))
+                               ;
+                       else if(pLed->bLedScanBlinkInProgress ==_FALSE)
+                       {
+                               if(pLed->bLedBlinkInProgress ==_TRUE)
+                               {
+                                       _cancel_timer_ex(&(pLed->BlinkTimer));
+                                       pLed->bLedBlinkInProgress = _FALSE;
+                               }
+                               pLed->bLedScanBlinkInProgress = _TRUE;
+                               pLed->CurrLedState = LED_SCAN_BLINK;
+                               pLed->BlinkTimes = 24;
+                               if( pLed->bLedOn )
+                                       pLed->BlinkingLedState = RTW_LED_OFF;
+                               else
+                                       pLed->BlinkingLedState = RTW_LED_ON;
+                               _set_timer(&(pLed->BlinkTimer), LED_BLINK_SCAN_INTERVAL_ALPHA);
+                       }
+                       break;
+
+               case LED_CTL_TX:
+               case LED_CTL_RX:
+                       if(pLed->bLedBlinkInProgress ==_FALSE)
+                       {
+                               if(pLed->CurrLedState == LED_SCAN_BLINK)
+                               {
+                                       return;
+                               }
+                               pLed->bLedBlinkInProgress = _TRUE;
+                               pLed->CurrLedState = LED_TXRX_BLINK;
+                               pLed->BlinkTimes = 2;
+                               if( pLed->bLedOn )
+                                       pLed->BlinkingLedState = RTW_LED_OFF;
+                               else
+                                       pLed->BlinkingLedState = RTW_LED_ON;
+                               _set_timer(&(pLed->BlinkTimer), LED_BLINK_FASTER_INTERVAL_ALPHA);
+                       }
+                       break;
+
+               case LED_CTL_POWER_OFF:
+                       pLed->CurrLedState = RTW_LED_OFF;
+                       pLed->BlinkingLedState = RTW_LED_OFF;
+
+                       if( pLed->bLedBlinkInProgress)
+                       {
+                               _cancel_timer_ex(&(pLed->BlinkTimer));
+                               pLed->bLedBlinkInProgress = _FALSE;
+                       }
+
+                       SwLedOff(padapter, pLed);
+                       break;
+
+               default:
+                       break;
+
+       }
+
+       RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("Led %d\n", pLed->CurrLedState));
+}
+
+ //WNC-Corega, added by chiyoko, 20090902
+static void
+SwLedControlMode6(
+       _adapter                                *padapter,
+       LED_CTL_MODE            LedAction
+)
+{
+       struct led_priv *ledpriv = &(padapter->ledpriv);
+       struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
+       PLED_871x pLed0 = &(ledpriv->SwLed0);
+
+       switch(LedAction)
+       {
+               case LED_CTL_POWER_ON:
+               case LED_CTL_LINK:
+               case LED_CTL_NO_LINK:
+                       _cancel_timer_ex(&(pLed0->BlinkTimer));
+                       pLed0->CurrLedState = RTW_LED_ON;
+                       pLed0->BlinkingLedState = RTW_LED_ON;
+                       _set_timer(&(pLed0->BlinkTimer), 0);
+                       break;
+
+               case LED_CTL_POWER_OFF:
+                       SwLedOff(padapter, pLed0);
+                       break;
+
+               default:
+                       break;
+       }
+
+       RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("ledcontrol 6 Led %d\n", pLed0->CurrLedState));
+}
+
+
+//
+//     Description:
+//             Dispatch LED action according to pHalData->LedStrategy.
+//
+static void
+LedControl871x(
+       _adapter                                *padapter,
+       LED_CTL_MODE            LedAction
+       )
+{
+       struct led_priv *ledpriv = &(padapter->ledpriv);
+
+       if( (padapter->bSurpriseRemoved == _TRUE) || ( padapter->bDriverStopped == _TRUE)
+               ||(padapter->hw_init_completed == _FALSE) )
+       {
+             return;
+       }
+
+
+       if( ledpriv->bRegUseLed == _FALSE)
+               return;
+
+       //if (!priv->up)
+       //      return;
+
+       //if(priv->bInHctTest)
+       //      return;
+
+       if( (padapter->pwrctrlpriv.rf_pwrstate != rf_on &&
+               padapter->pwrctrlpriv.rfoff_reason > RF_CHANGE_BY_PS) &&
+               (LedAction == LED_CTL_TX || LedAction == LED_CTL_RX ||
+                LedAction == LED_CTL_SITE_SURVEY ||
+                LedAction == LED_CTL_LINK ||
+                LedAction == LED_CTL_NO_LINK ||
+                LedAction == LED_CTL_POWER_ON) )
+       {
+               return;
+       }
+
+       switch(ledpriv->LedStrategy)
+       {
+               case SW_LED_MODE0:
+                       //SwLedControlMode0(padapter, LedAction);
+                       break;
+
+               case SW_LED_MODE1:
+                       SwLedControlMode1(padapter, LedAction);
+                       break;
+               case SW_LED_MODE2:
+                       SwLedControlMode2(padapter, LedAction);
+                       break;
+
+               case SW_LED_MODE3:
+                       SwLedControlMode3(padapter, LedAction);
+                       break;
+
+               case SW_LED_MODE4:
+                       SwLedControlMode4(padapter, LedAction);
+                       break;
+
+               case SW_LED_MODE5:
+                       SwLedControlMode5(padapter, LedAction);
+                       break;
+
+               case SW_LED_MODE6:
+                       SwLedControlMode6(padapter, LedAction);
+                       break;
+
+               default:
+                       break;
+       }
+
+       RT_TRACE(_module_rtl8712_led_c_,_drv_info_,("LedStrategy:%d, LedAction %d\n", ledpriv->LedStrategy,LedAction));
+}
+
+//
+//     Description:
+//             Initialize all LED_871x objects.
+//
+void
+rtl8192cu_InitSwLeds(
+       _adapter        *padapter
+       )
+{
+       struct led_priv *pledpriv = &(padapter->ledpriv);
+
+       pledpriv->LedControlHandler = LedControl871x;
+
+       InitLed871x(padapter, &(pledpriv->SwLed0), LED_PIN_LED0);
+
+       InitLed871x(padapter,&(pledpriv->SwLed1), LED_PIN_LED1);
+}
+
+
+//
+//     Description:
+//             DeInitialize all LED_819xUsb objects.
+//
+void
+rtl8192cu_DeInitSwLeds(
+       _adapter        *padapter
+       )
+{
+       struct led_priv *ledpriv = &(padapter->ledpriv);
+
+       DeInitLed871x( &(ledpriv->SwLed0) );
+       DeInitLed871x( &(ledpriv->SwLed1) );
+}
diff --git a/drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/usb/rtl8192cu_recv.c b/drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/usb/rtl8192cu_recv.c
new file mode 100644 (file)
index 0000000..dd4383f
--- /dev/null
@@ -0,0 +1,227 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#define _RTL8192CU_RECV_C_
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <recv_osdep.h>
+#include <mlme_osdep.h>
+#include <ip.h>
+#include <if_ether.h>
+#include <ethernet.h>
+
+#include <usb_ops.h>
+
+#if defined (PLATFORM_LINUX) && defined (PLATFORM_WINDOWS)
+
+#error "Shall be Linux or Windows, but not both!\n"
+
+#endif
+
+#include <wifi.h>
+#include <circ_buf.h>
+
+#include <rtl8192c_hal.h>
+
+
+void rtl8192cu_init_recvbuf(_adapter *padapter, struct recv_buf *precvbuf)
+{
+
+       precvbuf->transfer_len = 0;
+
+       precvbuf->len = 0;
+
+       precvbuf->ref_cnt = 0;
+
+       if(precvbuf->pbuf)
+       {
+               precvbuf->pdata = precvbuf->phead = precvbuf->ptail = precvbuf->pbuf;
+               precvbuf->pend = precvbuf->pdata + MAX_RECVBUF_SZ;
+       }
+
+}
+
+int    rtl8192cu_init_recv_priv(_adapter *padapter)
+{
+       struct recv_priv        *precvpriv = &padapter->recvpriv;
+       int     i, res = _SUCCESS;
+       struct recv_buf *precvbuf;
+
+#ifdef CONFIG_RECV_THREAD_MODE
+       _rtw_init_sema(&precvpriv->recv_sema, 0);//will be removed
+       _rtw_init_sema(&precvpriv->terminate_recvthread_sema, 0);//will be removed
+#endif
+
+#ifdef PLATFORM_LINUX
+       tasklet_init(&precvpriv->recv_tasklet,
+            (void(*)(unsigned long))rtl8192cu_recv_tasklet,
+            (unsigned long)padapter);
+#endif
+
+#ifdef CONFIG_USB_INTERRUPT_IN_PIPE
+#ifdef PLATFORM_LINUX
+       precvpriv->int_in_urb = usb_alloc_urb(0, GFP_KERNEL);
+       if(precvpriv->int_in_urb == NULL){
+               DBG_8192C("alloc_urb for interrupt in endpoint fail !!!!\n");
+       }
+#endif
+       precvpriv->int_in_buf = rtw_zmalloc(sizeof(INTERRUPT_MSG_FORMAT_EX));
+       if(precvpriv->int_in_buf == NULL){
+               DBG_8192C("alloc_mem for interrupt in endpoint fail !!!!\n");
+       }
+#endif
+
+       //init recv_buf
+       _rtw_init_queue(&precvpriv->free_recv_buf_queue);
+
+#ifdef CONFIG_USE_USB_BUFFER_ALLOC_RX
+       _rtw_init_queue(&precvpriv->recv_buf_pending_queue);
+#endif // CONFIG_USE_USB_BUFFER_ALLOC_RX
+
+       precvpriv->pallocated_recv_buf = rtw_zmalloc(NR_RECVBUFF *sizeof(struct recv_buf) + 4);
+       if(precvpriv->pallocated_recv_buf==NULL){
+               res= _FAIL;
+               RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("alloc recv_buf fail!\n"));
+               goto exit;
+       }
+       _rtw_memset(precvpriv->pallocated_recv_buf, 0, NR_RECVBUFF *sizeof(struct recv_buf) + 4);
+
+       precvpriv->precv_buf = (u8 *)N_BYTE_ALIGMENT((SIZE_PTR)(precvpriv->pallocated_recv_buf), 4);
+       //precvpriv->precv_buf = precvpriv->pallocated_recv_buf + 4 -
+       //                                              ((uint) (precvpriv->pallocated_recv_buf) &(4-1));
+
+
+       precvbuf = (struct recv_buf*)precvpriv->precv_buf;
+
+       for(i=0; i < NR_RECVBUFF ; i++)
+       {
+               _rtw_init_listhead(&precvbuf->list);
+
+               _rtw_spinlock_init(&precvbuf->recvbuf_lock);
+
+               precvbuf->alloc_sz = MAX_RECVBUF_SZ;
+
+               res = rtw_os_recvbuf_resource_alloc(padapter, precvbuf);
+               if(res==_FAIL)
+                       break;
+
+               precvbuf->ref_cnt = 0;
+               precvbuf->adapter =padapter;
+
+
+               //rtw_list_insert_tail(&precvbuf->list, &(precvpriv->free_recv_buf_queue.queue));
+
+               precvbuf++;
+
+       }
+
+       precvpriv->free_recv_buf_queue_cnt = NR_RECVBUFF;
+
+#ifdef PLATFORM_LINUX
+
+       skb_queue_head_init(&precvpriv->rx_skb_queue);
+
+#ifdef CONFIG_PREALLOC_RECV_SKB
+       {
+               int i;
+               SIZE_PTR tmpaddr=0;
+               SIZE_PTR alignment=0;
+               struct sk_buff *pskb=NULL;
+
+               skb_queue_head_init(&precvpriv->free_recv_skb_queue);
+
+               for(i=0; i<NR_PREALLOC_RECV_SKB; i++)
+               {
+                       pskb = rtw_skb_alloc(MAX_RECVBUF_SZ + RECVBUFF_ALIGN_SZ);
+
+                       if(pskb)
+                       {
+                               pskb->dev = padapter->pnetdev;
+
+                               tmpaddr = (SIZE_PTR)pskb->data;
+                               alignment = tmpaddr & (RECVBUFF_ALIGN_SZ-1);
+                               skb_reserve(pskb, (RECVBUFF_ALIGN_SZ - alignment));
+
+                               skb_queue_tail(&precvpriv->free_recv_skb_queue, pskb);
+                       }
+
+                       pskb=NULL;
+
+               }
+       }
+#endif
+
+#endif
+
+exit:
+
+       return res;
+
+}
+
+void rtl8192cu_free_recv_priv (_adapter *padapter)
+{
+       int     i;
+       struct recv_buf *precvbuf;
+       struct recv_priv        *precvpriv = &padapter->recvpriv;
+
+       precvbuf = (struct recv_buf *)precvpriv->precv_buf;
+
+       for(i=0; i < NR_RECVBUFF ; i++)
+       {
+               rtw_os_recvbuf_resource_free(padapter, precvbuf);
+               precvbuf++;
+       }
+
+       if(precvpriv->pallocated_recv_buf)
+               rtw_mfree(precvpriv->pallocated_recv_buf, NR_RECVBUFF *sizeof(struct recv_buf) + 4);
+
+#ifdef CONFIG_USB_INTERRUPT_IN_PIPE
+#ifdef PLATFORM_LINUX
+       if(precvpriv->int_in_urb)
+       {
+               usb_free_urb(precvpriv->int_in_urb);
+       }
+#endif
+       if(precvpriv->int_in_buf)
+               rtw_mfree(precvpriv->int_in_buf, sizeof(INTERRUPT_MSG_FORMAT_EX));
+#endif
+
+#ifdef PLATFORM_LINUX
+
+       if (skb_queue_len(&precvpriv->rx_skb_queue)) {
+               DBG_8192C(KERN_WARNING "rx_skb_queue not empty\n");
+       }
+
+       rtw_skb_queue_purge(&precvpriv->rx_skb_queue);
+
+#ifdef CONFIG_PREALLOC_RECV_SKB
+
+       if (skb_queue_len(&precvpriv->free_recv_skb_queue)) {
+               DBG_8192C(KERN_WARNING "free_recv_skb_queue not empty, %d\n", skb_queue_len(&precvpriv->free_recv_skb_queue));
+       }
+
+       rtw_skb_queue_purge(&precvpriv->free_recv_skb_queue);
+
+#endif
+
+#endif
+
+}
diff --git a/drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/usb/rtl8192cu_xmit.c b/drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/usb/rtl8192cu_xmit.c
new file mode 100644 (file)
index 0000000..c7bcae7
--- /dev/null
@@ -0,0 +1,1149 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#define _RTL8192C_XMIT_C_
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <rtw_byteorder.h>
+#include <wifi.h>
+#include <osdep_intf.h>
+#include <circ_buf.h>
+#include <usb_ops.h>
+#include <rtl8192c_hal.h>
+
+#if defined (PLATFORM_LINUX) && defined (PLATFORM_WINDOWS)
+#error "Shall be Linux or Windows, but not both!\n"
+#endif
+
+
+s32    rtl8192cu_init_xmit_priv(_adapter *padapter)
+{
+       struct xmit_priv        *pxmitpriv = &padapter->xmitpriv;
+
+#ifdef PLATFORM_LINUX
+       tasklet_init(&pxmitpriv->xmit_tasklet,
+            (void(*)(unsigned long))rtl8192cu_xmit_tasklet,
+            (unsigned long)padapter);
+#endif
+       return _SUCCESS;
+}
+
+void   rtl8192cu_free_xmit_priv(_adapter *padapter)
+{
+}
+
+u32 rtw_get_ff_hwaddr(struct xmit_frame        *pxmitframe)
+{
+       u32 addr;
+       struct pkt_attrib *pattrib = &pxmitframe->attrib;
+
+       switch(pattrib->qsel)
+       {
+               case 0:
+               case 3:
+                       addr = BE_QUEUE_INX;
+                       break;
+               case 1:
+               case 2:
+                       addr = BK_QUEUE_INX;
+                       break;
+               case 4:
+               case 5:
+                       addr = VI_QUEUE_INX;
+                       break;
+               case 6:
+               case 7:
+                       addr = VO_QUEUE_INX;
+                       break;
+               case 0x10:
+                       addr = BCN_QUEUE_INX;
+                       break;
+               case 0x11://BC/MC in PS (HIQ)
+                       addr = HIGH_QUEUE_INX;
+                       break;
+               case 0x12:
+                       addr = MGT_QUEUE_INX;
+                       break;
+               default:
+                       addr = BE_QUEUE_INX;
+                       break;
+
+       }
+
+       return addr;
+
+}
+
+int urb_zero_packet_chk(_adapter *padapter, int sz)
+{
+       int blnSetTxDescOffset;
+       struct dvobj_priv       *pdvobj = adapter_to_dvobj(padapter);
+
+       if ( pdvobj->ishighspeed )
+       {
+               if ( ( (sz + TXDESC_SIZE) % 512 ) == 0 ) {
+                       blnSetTxDescOffset = 1;
+               } else {
+                       blnSetTxDescOffset = 0;
+               }
+       }
+       else
+       {
+               if ( ( (sz + TXDESC_SIZE) % 64 ) == 0 )         {
+                       blnSetTxDescOffset = 1;
+               } else {
+                       blnSetTxDescOffset = 0;
+               }
+       }
+
+       return blnSetTxDescOffset;
+
+}
+
+void rtl8192cu_cal_txdesc_chksum(struct tx_desc        *ptxdesc)
+{
+               u16     *usPtr = (u16*)ptxdesc;
+               u32 count = 16;         // (32 bytes / 2 bytes per XOR) => 16 times
+               u32 index;
+               u16 checksum = 0;
+
+               //Clear first
+               ptxdesc->txdw7 &= cpu_to_le32(0xffff0000);
+
+               for(index = 0 ; index < count ; index++){
+                       checksum = checksum ^ le16_to_cpu(*(usPtr + index));
+               }
+
+               ptxdesc->txdw7 |= cpu_to_le32(0x0000ffff&checksum);
+
+}
+
+void fill_txdesc_sectype(struct pkt_attrib *pattrib, struct tx_desc *ptxdesc)
+{
+       if ((pattrib->encrypt > 0) && !pattrib->bswenc)
+       {
+               switch (pattrib->encrypt)
+               {
+                       //SEC_TYPE
+                       case _WEP40_:
+                       case _WEP104_:
+                                       ptxdesc->txdw1 |= cpu_to_le32((0x01<<22)&0x00c00000);
+                                       break;
+                       case _TKIP_:
+                       case _TKIP_WTMIC_:
+                                       //ptxdesc->txdw1 |= cpu_to_le32((0x02<<22)&0x00c00000);
+                                       ptxdesc->txdw1 |= cpu_to_le32((0x01<<22)&0x00c00000);
+                                       break;
+                       case _AES_:
+                                       ptxdesc->txdw1 |= cpu_to_le32((0x03<<22)&0x00c00000);
+                                       break;
+                       case _NO_PRIVACY_:
+                       default:
+                                       break;
+
+               }
+
+       }
+
+}
+
+static void fill_txdesc_vcs(struct pkt_attrib *pattrib, u32 *pdw)
+{
+       //DBG_8192C("cvs_mode=%d\n", pattrib->vcs_mode);
+
+       switch(pattrib->vcs_mode)
+       {
+               case RTS_CTS:
+                       *pdw |= cpu_to_le32(BIT(12));
+                       break;
+               case CTS_TO_SELF:
+                       *pdw |= cpu_to_le32(BIT(11));
+                       break;
+               case NONE_VCS:
+               default:
+                       break;
+       }
+
+       if(pattrib->vcs_mode) {
+               *pdw |= cpu_to_le32(BIT(13));
+
+               // Set RTS BW
+               if(pattrib->ht_en)
+               {
+                       *pdw |= (pattrib->bwmode&HT_CHANNEL_WIDTH_40)?  cpu_to_le32(BIT(27)):0;
+
+                       if(pattrib->ch_offset == HAL_PRIME_CHNL_OFFSET_LOWER)
+                               *pdw |= cpu_to_le32((0x01<<28)&0x30000000);
+                       else if(pattrib->ch_offset == HAL_PRIME_CHNL_OFFSET_UPPER)
+                               *pdw |= cpu_to_le32((0x02<<28)&0x30000000);
+                       else if(pattrib->ch_offset == HAL_PRIME_CHNL_OFFSET_DONT_CARE)
+                               *pdw |= 0;
+                       else
+                               *pdw |= cpu_to_le32((0x03<<28)&0x30000000);
+               }
+       }
+}
+
+static void fill_txdesc_phy(struct pkt_attrib *pattrib, u32 *pdw)
+{
+       //DBG_8192C("bwmode=%d, ch_off=%d\n", pattrib->bwmode, pattrib->ch_offset);
+
+       if(pattrib->ht_en)
+       {
+               *pdw |= (pattrib->bwmode&HT_CHANNEL_WIDTH_40)?  cpu_to_le32(BIT(25)):0;
+
+               if(pattrib->ch_offset == HAL_PRIME_CHNL_OFFSET_LOWER)
+                       *pdw |= cpu_to_le32((0x01<<20)&0x00300000);
+               else if(pattrib->ch_offset == HAL_PRIME_CHNL_OFFSET_UPPER)
+                       *pdw |= cpu_to_le32((0x02<<20)&0x00300000);
+               else if(pattrib->ch_offset == HAL_PRIME_CHNL_OFFSET_DONT_CARE)
+                       *pdw |= 0;
+               else
+                       *pdw |= cpu_to_le32((0x03<<20)&0x00300000);
+       }
+}
+
+static s32 update_txdesc(struct xmit_frame *pxmitframe, u8 *pmem, s32 sz, u8 bagg_pkt)
+{
+       int     pull=0;
+       uint    qsel;
+       _adapter                        *padapter = pxmitframe->padapter;
+       struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
+       struct pkt_attrib       *pattrib = &pxmitframe->attrib;
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+       struct tx_desc  *ptxdesc = (struct tx_desc *)pmem;
+       struct ht_priv          *phtpriv = &pmlmepriv->htpriv;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       sint    bmcst = IS_MCAST(pattrib->ra);
+#ifdef CONFIG_P2P
+       struct wifidirect_info* pwdinfo = &padapter->wdinfo;
+#endif //CONFIG_P2P
+
+#ifndef CONFIG_USE_USB_BUFFER_ALLOC_TX
+       if((_FALSE == bagg_pkt) && (urb_zero_packet_chk(padapter, sz)==0))
+       {
+               ptxdesc = (struct tx_desc *)(pmem+PACKET_OFFSET_SZ);
+               pull = 1;
+               pxmitframe->pkt_offset --;
+       }
+#endif // CONFIG_USE_USB_BUFFER_ALLOC_TX
+
+       _rtw_memset(ptxdesc, 0, sizeof(struct tx_desc));
+
+       if((pxmitframe->frame_tag&0x0f) == DATA_FRAMETAG)
+       {
+               //DBG_8192C("pxmitframe->frame_tag == DATA_FRAMETAG\n");
+
+               //offset 4
+               ptxdesc->txdw1 |= cpu_to_le32(pattrib->mac_id&0x1f);
+
+               qsel = (uint)(pattrib->qsel & 0x0000001f);
+               ptxdesc->txdw1 |= cpu_to_le32((qsel << QSEL_SHT) & 0x00001f00);
+
+               ptxdesc->txdw1 |= cpu_to_le32((pattrib->raid<< 16) & 0x000f0000);
+
+               fill_txdesc_sectype(pattrib, ptxdesc);
+
+               if(pattrib->ampdu_en==_TRUE)
+                       ptxdesc->txdw1 |= cpu_to_le32(BIT(5));//AGG EN
+               else
+                       ptxdesc->txdw1 |= cpu_to_le32(BIT(6));//AGG BK
+
+               //offset 8
+
+
+               //offset 12
+               ptxdesc->txdw3 |= cpu_to_le32((pattrib->seqnum<<16)&0xffff0000);
+
+
+               //offset 16 , offset 20
+               if (pattrib->qos_en)
+                       ptxdesc->txdw4 |= cpu_to_le32(BIT(6));//QoS
+
+               if ((pattrib->ether_type != 0x888e) && (pattrib->ether_type != 0x0806) && (pattrib->dhcp_pkt != 1))
+               {
+               //Non EAP & ARP & DHCP type data packet
+
+                       fill_txdesc_vcs(pattrib, &ptxdesc->txdw4);
+                       fill_txdesc_phy(pattrib, &ptxdesc->txdw4);
+
+                       ptxdesc->txdw4 |= cpu_to_le32(0x00000008);//RTS Rate=24M
+                       ptxdesc->txdw5 |= cpu_to_le32(0x0001ff00);//
+                       //ptxdesc->txdw5 |= cpu_to_le32(0x0000000b);//DataRate - 54M
+
+                       //use REG_INIDATA_RATE_SEL value
+                       ptxdesc->txdw5 |= cpu_to_le32(pdmpriv->INIDATA_RATE[pattrib->mac_id]);
+
+               if(0)//for driver dbg
+                       {
+                               ptxdesc->txdw4 |= cpu_to_le32(BIT(8));//driver uses rate
+
+                               if(pattrib->ht_en)
+                                       ptxdesc->txdw5 |= cpu_to_le32(BIT(6));//SGI
+
+                               ptxdesc->txdw5 |= cpu_to_le32(0x00000013);//init rate - mcs7
+                       }
+
+               }
+               else
+               {
+                       // EAP data packet and ARP packet.
+                       // Use the 1M data rate to send the EAP/ARP packet.
+                       // This will maybe make the handshake smooth.
+
+                       ptxdesc->txdw1 |= cpu_to_le32(BIT(6));//AGG BK
+
+                       ptxdesc->txdw4 |= cpu_to_le32(BIT(8));//driver uses rate
+
+                       if (pmlmeinfo->preamble_mode == PREAMBLE_SHORT)
+                               ptxdesc->txdw4 |= cpu_to_le32(BIT(24));// DATA_SHORT
+
+                       ptxdesc->txdw5 |= cpu_to_le32(MRateToHwRate(pmlmeext->tx_rate));
+               }
+
+               //offset 24
+#ifdef CONFIG_TCP_CSUM_OFFLOAD_TX
+               if ( pattrib->hw_tcp_csum == 1 ) {
+                       // ptxdesc->txdw6 = 0; // clear TCP_CHECKSUM and IP_CHECKSUM. It's zero already!!
+                       u8 ip_hdr_offset = 32 + pattrib->hdrlen + pattrib->iv_len + 8;
+                       ptxdesc->txdw7 = (1 << 31) | (ip_hdr_offset << 16);
+                       DBG_8192C("ptxdesc->txdw7 = %08x\n", ptxdesc->txdw7);
+               }
+#endif
+       }
+       else if((pxmitframe->frame_tag&0x0f)== MGNT_FRAMETAG)
+       {
+               //DBG_8192C("pxmitframe->frame_tag == MGNT_FRAMETAG\n");
+
+               //offset 4
+               ptxdesc->txdw1 |= cpu_to_le32(pattrib->mac_id&0x1f);
+
+               qsel = (uint)(pattrib->qsel&0x0000001f);
+               ptxdesc->txdw1 |= cpu_to_le32((qsel<<QSEL_SHT)&0x00001f00);
+
+               ptxdesc->txdw1 |= cpu_to_le32((pattrib->raid<< 16) & 0x000f0000);
+
+               //fill_txdesc_sectype(pattrib, ptxdesc);
+
+               //offset 8
+#ifdef CONFIG_XMIT_ACK
+               //CCX-TXRPT ack for xmit mgmt frames.
+               if (pxmitframe->ack_report) {
+                       ptxdesc->txdw2 |= cpu_to_le32(BIT(19));
+                       #ifdef DBG_CCX
+                       DBG_871X("%s set ccx\n", __func__);
+                       #endif
+               }
+#endif //CONFIG_XMIT_ACK
+
+               //offset 12
+               ptxdesc->txdw3 |= cpu_to_le32((pattrib->seqnum<<16)&0xffff0000);
+
+               //offset 16
+               ptxdesc->txdw4 |= cpu_to_le32(BIT(8));//driver uses rate
+
+               //offset 20
+               ptxdesc->txdw5 |= cpu_to_le32(BIT(17));//retry limit enable
+               if(pattrib->retry_ctrl == _TRUE)
+               {
+#ifdef CONFIG_P2P
+                       if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+                       {
+#ifdef CONFIG_INTEL_WIDI
+                               if(padapter->mlmepriv.widi_enable == _TRUE)
+                                       ptxdesc->txdw5 |= cpu_to_le32(0x00180000);//retry limit = 6
+                               else
+#endif //CONFIG_INTEL_WIDI
+                                       ptxdesc->txdw5 |= cpu_to_le32(0x00080000);//retry limit = 2
+                       }
+                       else
+#endif //CONFIG_P2P
+                               ptxdesc->txdw5 |= cpu_to_le32(0x00180000);//retry limit = 6
+               }
+               else
+                       ptxdesc->txdw5 |= cpu_to_le32(0x00300000);//retry limit = 12
+
+#ifdef CONFIG_INTEL_PROXIM
+               if((padapter->proximity.proxim_on==_TRUE)&&(pattrib->intel_proxim==_TRUE)){
+                       printk("\n %s pattrib->rate=%d\n",__FUNCTION__,pattrib->rate);
+                       ptxdesc->txdw5 |= cpu_to_le32( pattrib->rate);
+               }
+               else
+#endif
+               {
+                       ptxdesc->txdw5 |= cpu_to_le32(MRateToHwRate(pmlmeext->tx_rate));
+               }
+       }
+       else if((pxmitframe->frame_tag&0x0f) == TXAGG_FRAMETAG)
+       {
+               DBG_8192C("pxmitframe->frame_tag == TXAGG_FRAMETAG\n");
+       }
+#ifdef CONFIG_MP_INCLUDED
+       else if((pxmitframe->frame_tag&0x0f) == MP_FRAMETAG)
+       {
+               fill_txdesc_for_mp(padapter, ptxdesc);
+       }
+#endif
+       else
+       {
+               DBG_8192C("pxmitframe->frame_tag = %d\n", pxmitframe->frame_tag);
+
+               //offset 4
+               ptxdesc->txdw1 |= cpu_to_le32((4)&0x1f);//CAM_ID(MAC_ID)
+
+               ptxdesc->txdw1 |= cpu_to_le32((6<< 16) & 0x000f0000);//raid
+
+               //offset 8
+
+               //offset 12
+               ptxdesc->txdw3 |= cpu_to_le32((pattrib->seqnum<<16)&0xffff0000);
+
+               //offset 16
+               ptxdesc->txdw4 |= cpu_to_le32(BIT(8));//driver uses rate
+
+               //offset 20
+               ptxdesc->txdw5 |= cpu_to_le32(MRateToHwRate(pmlmeext->tx_rate));
+       }
+
+       // 2009.11.05. tynli_test. Suggested by SD4 Filen for FW LPS.
+       // (1) The sequence number of each non-Qos frame / broadcast / multicast /
+       // mgnt frame should be controled by Hw because Fw will also send null data
+       // which we cannot control when Fw LPS enable.
+       // --> default enable non-Qos data sequense number. 2010.06.23. by tynli.
+       // (2) Enable HW SEQ control for beacon packet, because we use Hw beacon.
+       // (3) Use HW Qos SEQ to control the seq num of Ext port non-Qos packets.
+       // 2010.06.23. Added by tynli.
+       if(!pattrib->qos_en)
+       {
+               ptxdesc->txdw4 |= cpu_to_le32(BIT(7)); // Hw set sequence number
+               ptxdesc->txdw3 |= cpu_to_le32((8 <<28)); //set bit3 to 1. Suugested by TimChen. 2009.12.29.
+       }
+
+       //offset 0
+       ptxdesc->txdw0 |= cpu_to_le32(sz&0x0000ffff);
+       ptxdesc->txdw0 |= cpu_to_le32(OWN | FSG | LSG);
+       ptxdesc->txdw0 |= cpu_to_le32(((TXDESC_SIZE+OFFSET_SZ)<<OFFSET_SHT)&0x00ff0000);//32 bytes for TX Desc
+
+       if(bmcst)
+       {
+               ptxdesc->txdw0 |= cpu_to_le32(BIT(24));
+       }
+
+       RT_TRACE(_module_rtl871x_xmit_c_,_drv_info_,("offset0-txdesc=0x%x\n", ptxdesc->txdw0));
+
+       //offset 4
+       // pkt_offset, unit:8 bytes padding
+       if (pxmitframe->pkt_offset > 0)
+               ptxdesc->txdw1 |= cpu_to_le32((pxmitframe->pkt_offset << 26) & 0x7c000000);
+
+#ifdef CONFIG_USB_TX_AGGREGATION
+       if (pxmitframe->agg_num > 1)
+               ptxdesc->txdw5 |= cpu_to_le32((pxmitframe->agg_num << 24) & 0xff000000);
+#endif
+
+       rtl8192cu_cal_txdesc_chksum(ptxdesc);
+
+       return pull;
+
+}
+
+static s32 rtw_dump_xframe(_adapter *padapter, struct xmit_frame *pxmitframe)
+{
+       s32 ret = _SUCCESS;
+       s32 inner_ret = _SUCCESS;
+       int t, sz, w_sz, pull=0;
+       u8 *mem_addr;
+       u32 ff_hwaddr;
+       struct xmit_buf *pxmitbuf = pxmitframe->pxmitbuf;
+       struct pkt_attrib *pattrib = &pxmitframe->attrib;
+       struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
+       struct security_priv *psecuritypriv = &padapter->securitypriv;
+
+       if ((pxmitframe->frame_tag == DATA_FRAMETAG) &&
+           (pxmitframe->attrib.ether_type != 0x0806) &&
+           (pxmitframe->attrib.ether_type != 0x888e) &&
+           (pxmitframe->attrib.dhcp_pkt != 1))
+       {
+               rtw_issue_addbareq_cmd(padapter, pxmitframe);
+       }
+
+       mem_addr = pxmitframe->buf_addr;
+
+       RT_TRACE(_module_rtl871x_xmit_c_,_drv_info_,("rtw_dump_xframe()\n"));
+
+       for (t = 0; t < pattrib->nr_frags; t++)
+       {
+               if (inner_ret != _SUCCESS && ret == _SUCCESS)
+                       ret = _FAIL;
+
+               if (t != (pattrib->nr_frags - 1))
+               {
+                       RT_TRACE(_module_rtl871x_xmit_c_,_drv_err_,("pattrib->nr_frags=%d\n", pattrib->nr_frags));
+
+                       sz = pxmitpriv->frag_len;
+                       sz = sz - 4 - (psecuritypriv->sw_encrypt ? 0 : pattrib->icv_len);
+               }
+               else //no frag
+               {
+                       sz = pattrib->last_txcmdsz;
+               }
+
+               pull = update_txdesc(pxmitframe, mem_addr, sz, _FALSE);
+
+               if(pull)
+               {
+                       mem_addr += PACKET_OFFSET_SZ; //pull txdesc head
+
+                       //pxmitbuf ->pbuf = mem_addr;
+                       pxmitframe->buf_addr = mem_addr;
+
+                       w_sz = sz + TXDESC_SIZE;
+               }
+               else
+               {
+                       w_sz = sz + TXDESC_SIZE + PACKET_OFFSET_SZ;
+               }
+
+               ff_hwaddr = rtw_get_ff_hwaddr(pxmitframe);
+
+               inner_ret = rtw_write_port(padapter, ff_hwaddr, w_sz, (unsigned char*)pxmitbuf);
+
+               rtw_count_tx_stats(padapter, pxmitframe, sz);
+
+
+               RT_TRACE(_module_rtl871x_xmit_c_,_drv_info_,("rtw_write_port, w_sz=%d\n", w_sz));
+               //DBG_8192C("rtw_write_port, w_sz=%d, sz=%d, txdesc_sz=%d, tid=%d\n", w_sz, sz, w_sz-sz, pattrib->priority);
+
+               mem_addr += w_sz;
+
+               mem_addr = (u8 *)RND4(((SIZE_PTR)(mem_addr)));
+
+       }
+
+       rtw_free_xmitframe(pxmitpriv, pxmitframe);
+
+       if  (ret != _SUCCESS)
+               rtw_sctx_done_err(&pxmitbuf->sctx, RTW_SCTX_DONE_UNKNOWN);
+
+       return ret;
+}
+
+#ifdef CONFIG_USB_TX_AGGREGATION
+static u32 xmitframe_need_length(struct xmit_frame *pxmitframe)
+{
+       struct pkt_attrib *pattrib = &pxmitframe->attrib;
+
+       u32     len = 0;
+
+       // no consider fragement
+       len = pattrib->hdrlen + pattrib->iv_len +
+               SNAP_SIZE + sizeof(u16) +
+               pattrib->pktlen +
+               ((pattrib->bswenc) ? pattrib->icv_len : 0);
+
+       if(pattrib->encrypt ==_TKIP_)
+               len += 8;
+
+       return len;
+}
+
+#define IDEA_CONDITION 1       // check all packets before enqueue
+s32 rtl8192cu_xmitframe_complete(_adapter *padapter, struct xmit_priv *pxmitpriv, struct xmit_buf *pxmitbuf)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
+       struct xmit_frame *pxmitframe = NULL;
+       struct xmit_frame *pfirstframe = NULL;
+
+       // aggregate variable
+       struct hw_xmit *phwxmit;
+       struct sta_info *psta = NULL;
+       struct tx_servq *ptxservq = NULL;
+
+       _irqL irqL;
+       _list *xmitframe_plist = NULL, *xmitframe_phead = NULL;
+
+       u32     pbuf;   // next pkt address
+       u32     pbuf_tail;      // last pkt tail
+       u32     len;    // packet length, except TXDESC_SIZE and PKT_OFFSET
+
+       u32     bulkSize = pHalData->UsbBulkOutSize;
+       u8      descCount;
+       u32     bulkPtr;
+
+       // dump frame variable
+       u32 ff_hwaddr;
+
+#ifndef IDEA_CONDITION
+       int res = _SUCCESS;
+#endif
+
+       RT_TRACE(_module_rtl8192c_xmit_c_, _drv_info_, ("+xmitframe_complete\n"));
+
+
+       // check xmitbuffer is ok
+       if (pxmitbuf == NULL) {
+               pxmitbuf = rtw_alloc_xmitbuf(pxmitpriv);
+               if (pxmitbuf == NULL) return _FALSE;
+       }
+
+
+       //3 1. pick up first frame
+       do {
+               rtw_free_xmitframe(pxmitpriv, pxmitframe);
+
+               pxmitframe = rtw_dequeue_xframe(pxmitpriv, pxmitpriv->hwxmits, pxmitpriv->hwxmit_entry);
+               if (pxmitframe == NULL) {
+                       // no more xmit frame, release xmit buffer
+                       rtw_free_xmitbuf(pxmitpriv, pxmitbuf);
+                       return _FALSE;
+               }
+
+
+#ifndef IDEA_CONDITION
+               if (pxmitframe->frame_tag != DATA_FRAMETAG) {
+                       RT_TRACE(_module_rtl8192c_xmit_c_, _drv_err_,
+                                ("xmitframe_complete: frame tag(%d) is not DATA_FRAMETAG(%d)!\n",
+                                 pxmitframe->frame_tag, DATA_FRAMETAG));
+//                     rtw_free_xmitframe(pxmitpriv, pxmitframe);
+                       continue;
+               }
+
+               // TID 0~15
+               if ((pxmitframe->attrib.priority < 0) ||
+                   (pxmitframe->attrib.priority > 15)) {
+                       RT_TRACE(_module_rtl8192c_xmit_c_, _drv_err_,
+                                ("xmitframe_complete: TID(%d) should be 0~15!\n",
+                                 pxmitframe->attrib.priority));
+//                     rtw_free_xmitframe(pxmitpriv, pxmitframe);
+                       continue;
+               }
+#endif
+
+               pxmitframe->pxmitbuf = pxmitbuf;
+               pxmitframe->buf_addr = pxmitbuf->pbuf;
+               pxmitbuf->priv_data = pxmitframe;
+
+               //pxmitframe->agg_num = 1; // alloc xmitframe should assign to 1.
+               pxmitframe->pkt_offset = 1; // first frame of aggregation, reserve offset
+
+
+               if (rtw_xmitframe_coalesce(padapter, pxmitframe->pkt, pxmitframe) == _FALSE) {
+                       DBG_871X("%s coalesce 1st xmitframe failed \n",__FUNCTION__);
+                       continue;
+               }
+
+
+               // always return ndis_packet after rtw_xmitframe_coalesce
+               rtw_os_xmit_complete(padapter, pxmitframe);
+
+               break;
+       } while (1);
+
+       //3 2. aggregate same priority and same DA(AP or STA) frames
+       pfirstframe = pxmitframe;
+       len = xmitframe_need_length(pfirstframe) + TXDESC_OFFSET;
+       pbuf_tail = len;
+       pbuf = _RND8(pbuf_tail);
+
+       // check pkt amount in one bluk
+       descCount = 0;
+       bulkPtr = bulkSize;
+       if (pbuf < bulkPtr)
+               descCount++;
+       else {
+               descCount = 0;
+               bulkPtr = ((pbuf / bulkSize) + 1) * bulkSize; // round to next bulkSize
+       }
+
+       // dequeue same priority packet from station tx queue
+       psta = pfirstframe->attrib.psta;
+       switch (pfirstframe->attrib.priority) {
+               case 1:
+               case 2:
+                       ptxservq = &(psta->sta_xmitpriv.bk_q);
+                       phwxmit = pxmitpriv->hwxmits + 3;
+                       break;
+
+               case 4:
+               case 5:
+                       ptxservq = &(psta->sta_xmitpriv.vi_q);
+                       phwxmit = pxmitpriv->hwxmits + 1;
+                       break;
+
+               case 6:
+               case 7:
+                       ptxservq = &(psta->sta_xmitpriv.vo_q);
+                       phwxmit = pxmitpriv->hwxmits;
+                       break;
+
+               case 0:
+               case 3:
+               default:
+                       ptxservq = &(psta->sta_xmitpriv.be_q);
+                       phwxmit = pxmitpriv->hwxmits + 2;
+                       break;
+       }
+
+       _enter_critical_bh(&pxmitpriv->lock, &irqL);
+
+       xmitframe_phead = get_list_head(&ptxservq->sta_pending);
+       xmitframe_plist = get_next(xmitframe_phead);
+       while (rtw_end_of_queue_search(xmitframe_phead, xmitframe_plist) == _FALSE)
+       {
+               pxmitframe = LIST_CONTAINOR(xmitframe_plist, struct xmit_frame, list);
+               xmitframe_plist = get_next(xmitframe_plist);
+
+               len = xmitframe_need_length(pxmitframe) + TXDESC_SIZE; // no offset
+               if (pbuf + len > MAX_XMITBUF_SZ) break;
+
+               rtw_list_delete(&pxmitframe->list);
+               ptxservq->qcnt--;
+               phwxmit->accnt--;
+
+#ifndef IDEA_CONDITION
+               // suppose only data frames would be in queue
+               if (pxmitframe->frame_tag != DATA_FRAMETAG) {
+                       RT_TRACE(_module_rtl8192c_xmit_c_, _drv_err_,
+                                ("xmitframe_complete: frame tag(%d) is not DATA_FRAMETAG(%d)!\n",
+                                 pxmitframe->frame_tag, DATA_FRAMETAG));
+                       rtw_free_xmitframe(pxmitpriv, pxmitframe);
+                       continue;
+               }
+
+               // TID 0~15
+               if ((pxmitframe->attrib.priority < 0) ||
+                   (pxmitframe->attrib.priority > 15)) {
+                       RT_TRACE(_module_rtl8192c_xmit_c_, _drv_err_,
+                                ("xmitframe_complete: TID(%d) should be 0~15!\n",
+                                 pxmitframe->attrib.priority));
+                       rtw_free_xmitframe(pxmitpriv, pxmitframe);
+                       continue;
+               }
+#endif
+
+//             pxmitframe->pxmitbuf = pxmitbuf;
+               pxmitframe->buf_addr = pxmitbuf->pbuf + pbuf;
+
+               pxmitframe->agg_num = 0; // not first frame of aggregation
+               pxmitframe->pkt_offset = 0; // not first frame of aggregation, no need to reserve offset
+
+               if (rtw_xmitframe_coalesce(padapter, pxmitframe->pkt, pxmitframe) == _FALSE) {
+                       DBG_871X("%s coalesce failed \n",__FUNCTION__);
+                       rtw_free_xmitframe(pxmitpriv, pxmitframe);
+                       continue;
+               }
+
+               // always return ndis_packet after rtw_xmitframe_coalesce
+               rtw_os_xmit_complete(padapter, pxmitframe);
+
+               // (len - TXDESC_SIZE) == pxmitframe->attrib.last_txcmdsz
+               update_txdesc(pxmitframe, pxmitframe->buf_addr, pxmitframe->attrib.last_txcmdsz, _TRUE);
+
+               // don't need xmitframe any more
+               rtw_free_xmitframe(pxmitpriv, pxmitframe);
+
+               // handle pointer and stop condition
+               pbuf_tail = pbuf + len;
+               pbuf = _RND8(pbuf_tail);
+
+               pfirstframe->agg_num++;
+               if (MAX_TX_AGG_PACKET_NUMBER == pfirstframe->agg_num)
+                       break;
+
+               if (pbuf < bulkPtr) {
+                       descCount++;
+                       if (descCount == pHalData->UsbTxAggDescNum)
+                               break;
+               } else {
+                       descCount = 0;
+                       bulkPtr = ((pbuf / bulkSize) + 1) * bulkSize;
+               }
+       }
+       if (_rtw_queue_empty(&ptxservq->sta_pending) == _TRUE)
+               rtw_list_delete(&ptxservq->tx_pending);
+
+       _exit_critical_bh(&pxmitpriv->lock, &irqL);
+
+       if ((pfirstframe->attrib.ether_type != 0x0806) &&
+           (pfirstframe->attrib.ether_type != 0x888e) &&
+           (pfirstframe->attrib.dhcp_pkt != 1))
+       {
+               rtw_issue_addbareq_cmd(padapter, pfirstframe);
+       }
+
+#ifndef CONFIG_USE_USB_BUFFER_ALLOC_TX
+       //3 3. update first frame txdesc
+       if ((pbuf_tail % bulkSize) == 0) {
+               // remove pkt_offset
+               pbuf_tail -= PACKET_OFFSET_SZ;
+               pfirstframe->buf_addr += PACKET_OFFSET_SZ;
+               pfirstframe->pkt_offset = 0;
+       }
+#endif // CONFIG_USE_USB_BUFFER_ALLOC_TX
+       update_txdesc(pfirstframe, pfirstframe->buf_addr, pfirstframe->attrib.last_txcmdsz, _TRUE);
+
+       //3 4. write xmit buffer to USB FIFO
+       ff_hwaddr = rtw_get_ff_hwaddr(pfirstframe);
+
+       // xmit address == ((xmit_frame*)pxmitbuf->priv_data)->buf_addr
+       rtw_write_port(padapter, ff_hwaddr, pbuf_tail, (u8*)pxmitbuf);
+
+
+       //3 5. update statisitc
+       pbuf_tail -= (pfirstframe->agg_num * TXDESC_SIZE);
+       if (pfirstframe->pkt_offset == 1) pbuf_tail -= PACKET_OFFSET_SZ;
+
+       rtw_count_tx_stats(padapter, pfirstframe, pbuf_tail);
+
+       rtw_free_xmitframe(pxmitpriv, pfirstframe);
+
+       return _TRUE;
+}
+
+#else
+
+s32 rtl8192cu_xmitframe_complete(_adapter *padapter, struct xmit_priv *pxmitpriv, struct xmit_buf *pxmitbuf)
+{
+
+       struct hw_xmit *phwxmits;
+       sint hwentry;
+       struct xmit_frame *pxmitframe=NULL;
+       int res=_SUCCESS, xcnt = 0;
+
+       phwxmits = pxmitpriv->hwxmits;
+       hwentry = pxmitpriv->hwxmit_entry;
+
+       RT_TRACE(_module_rtl871x_xmit_c_,_drv_info_,("xmitframe_complete()\n"));
+
+       if(pxmitbuf==NULL)
+       {
+               pxmitbuf = rtw_alloc_xmitbuf(pxmitpriv);
+               if(!pxmitbuf)
+               {
+                       return _FALSE;
+               }
+       }
+
+
+       do
+       {
+               pxmitframe =  rtw_dequeue_xframe(pxmitpriv, phwxmits, hwentry);
+
+               if(pxmitframe)
+               {
+                       pxmitframe->pxmitbuf = pxmitbuf;
+
+                       pxmitframe->buf_addr = pxmitbuf->pbuf;
+
+                       pxmitbuf->priv_data = pxmitframe;
+
+                       if((pxmitframe->frame_tag&0x0f) == DATA_FRAMETAG)
+                       {
+                               if(pxmitframe->attrib.priority<=15)//TID0~15
+                               {
+                                       res = rtw_xmitframe_coalesce(padapter, pxmitframe->pkt, pxmitframe);
+                               }
+
+                               rtw_os_xmit_complete(padapter, pxmitframe);//always return ndis_packet after rtw_xmitframe_coalesce
+                       }
+
+
+                       RT_TRACE(_module_rtl871x_xmit_c_,_drv_info_,("xmitframe_complete(): rtw_dump_xframe\n"));
+
+
+                       if(res == _SUCCESS)
+                       {
+                               rtw_dump_xframe(padapter, pxmitframe);
+                       }
+                       else
+                       {
+                               rtw_free_xmitbuf(pxmitpriv, pxmitbuf);
+                               rtw_free_xmitframe(pxmitpriv, pxmitframe);
+                       }
+
+                       xcnt++;
+
+               }
+               else
+               {
+                       rtw_free_xmitbuf(pxmitpriv, pxmitbuf);
+                       return _FALSE;
+               }
+
+               break;
+
+       }while(0/*xcnt < (NR_XMITFRAME >> 3)*/);
+
+       return _TRUE;
+
+}
+#endif
+
+
+
+static s32 xmitframe_direct(_adapter *padapter, struct xmit_frame *pxmitframe)
+{
+       s32 res = _SUCCESS;
+
+
+       res = rtw_xmitframe_coalesce(padapter, pxmitframe->pkt, pxmitframe);
+       if (res == _SUCCESS) {
+               rtw_dump_xframe(padapter, pxmitframe);
+       }
+
+       return res;
+}
+
+/*
+ * Return
+ *     _TRUE   dump packet directly
+ *     _FALSE  enqueue packet
+ */
+static s32 pre_xmitframe(_adapter *padapter, struct xmit_frame *pxmitframe)
+{
+        _irqL irqL;
+       s32 res;
+       struct xmit_buf *pxmitbuf = NULL;
+       struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
+       struct pkt_attrib *pattrib = &pxmitframe->attrib;
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+
+
+       _enter_critical_bh(&pxmitpriv->lock, &irqL);
+
+
+       if (rtw_txframes_sta_ac_pending(padapter, pattrib) > 0)
+               goto enqueue;
+
+
+       if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY|_FW_UNDER_LINKING) == _TRUE)
+               goto enqueue;
+
+#ifdef CONFIG_CONCURRENT_MODE
+       if (check_buddy_fwstate(padapter, _FW_UNDER_SURVEY|_FW_UNDER_LINKING) == _TRUE)
+               goto enqueue;
+#endif
+
+       pxmitbuf = rtw_alloc_xmitbuf(pxmitpriv);
+       if (pxmitbuf == NULL)
+               goto enqueue;
+
+       _exit_critical_bh(&pxmitpriv->lock, &irqL);
+
+       pxmitframe->pxmitbuf = pxmitbuf;
+       pxmitframe->buf_addr = pxmitbuf->pbuf;
+       pxmitbuf->priv_data = pxmitframe;
+
+       if (xmitframe_direct(padapter, pxmitframe) != _SUCCESS) {
+               rtw_free_xmitbuf(pxmitpriv, pxmitbuf);
+               rtw_free_xmitframe(pxmitpriv, pxmitframe);
+       }
+
+       return _TRUE;
+
+enqueue:
+       res = rtw_xmitframe_enqueue(padapter, pxmitframe);
+       _exit_critical_bh(&pxmitpriv->lock, &irqL);
+
+       if (res != _SUCCESS) {
+               RT_TRACE(_module_xmit_osdep_c_, _drv_err_, ("pre_xmitframe: enqueue xmitframe fail\n"));
+               rtw_free_xmitframe(pxmitpriv, pxmitframe);
+
+               // Trick, make the statistics correct
+               pxmitpriv->tx_pkts--;
+               pxmitpriv->tx_drop++;
+               return _TRUE;
+       }
+
+       return _FALSE;
+}
+
+s32 rtl8192cu_mgnt_xmit(_adapter *padapter, struct xmit_frame *pmgntframe)
+{
+       return rtw_dump_xframe(padapter, pmgntframe);
+}
+
+/*
+ * Return
+ *     _TRUE   dump packet directly ok
+ *     _FALSE  temporary can't transmit packets to hardware
+ */
+s32 rtl8192cu_hal_xmit(_adapter *padapter, struct xmit_frame *pxmitframe)
+{
+       return pre_xmitframe(padapter, pxmitframe);
+}
+
+s32     rtl8192cu_hal_xmitframe_enqueue(_adapter *padapter, struct xmit_frame *pxmitframe)
+{
+       struct xmit_priv        *pxmitpriv = &padapter->xmitpriv;
+       s32 err;
+
+       if ((err=rtw_xmitframe_enqueue(padapter, pxmitframe)) != _SUCCESS)
+       {
+               rtw_free_xmitframe(pxmitpriv, pxmitframe);
+
+               // Trick, make the statistics correct
+               pxmitpriv->tx_pkts--;
+               pxmitpriv->tx_drop++;
+       }
+       else
+       {
+#ifdef PLATFORM_LINUX
+               tasklet_hi_schedule(&pxmitpriv->xmit_tasklet);
+#endif
+       }
+
+       return err;
+
+}
+
+#ifdef  CONFIG_HOSTAPD_MLME
+
+static void rtl8192cu_hostap_mgnt_xmit_cb(struct urb *urb)
+{
+#ifdef PLATFORM_LINUX
+       struct sk_buff *skb = (struct sk_buff *)urb->context;
+
+       //DBG_8192C("%s\n", __FUNCTION__);
+
+       rtw_skb_free(skb);
+#endif
+}
+
+s32 rtl8192cu_hostap_mgnt_xmit_entry(_adapter *padapter, _pkt *pkt)
+{
+#ifdef PLATFORM_LINUX
+       u16 fc;
+       int rc, len, pipe;
+       unsigned int bmcst, tid, qsel;
+       struct sk_buff *skb, *pxmit_skb;
+       struct urb *urb;
+       unsigned char *pxmitbuf;
+       struct tx_desc *ptxdesc;
+       struct rtw_ieee80211_hdr *tx_hdr;
+       struct hostapd_priv *phostapdpriv = padapter->phostapdpriv;
+       struct net_device *pnetdev = padapter->pnetdev;
+       HAL_DATA_TYPE *pHalData = GET_HAL_DATA(padapter);
+       struct dvobj_priv *pdvobj = adapter_to_dvobj(padapter);
+
+
+       //DBG_8192C("%s\n", __FUNCTION__);
+
+       skb = pkt;
+
+       len = skb->len;
+       tx_hdr = (struct rtw_ieee80211_hdr *)(skb->data);
+       fc = le16_to_cpu(tx_hdr->frame_ctl);
+       bmcst = IS_MCAST(tx_hdr->addr1);
+
+       if ((fc & RTW_IEEE80211_FCTL_FTYPE) != RTW_IEEE80211_FTYPE_MGMT)
+               goto _exit;
+
+       pxmit_skb = rtw_skb_alloc(len + TXDESC_SIZE);
+
+       if(!pxmit_skb)
+               goto _exit;
+
+       pxmitbuf = pxmit_skb->data;
+
+       urb = usb_alloc_urb(0, GFP_ATOMIC);
+       if (!urb) {
+               goto _exit;
+       }
+
+       // ----- fill tx desc -----
+       ptxdesc = (struct tx_desc *)pxmitbuf;
+       _rtw_memset(ptxdesc, 0, sizeof(*ptxdesc));
+
+       //offset 0
+       ptxdesc->txdw0 |= cpu_to_le32(len&0x0000ffff);
+       ptxdesc->txdw0 |= cpu_to_le32(((TXDESC_SIZE+OFFSET_SZ)<<OFFSET_SHT)&0x00ff0000);//default = 32 bytes for TX Desc
+       ptxdesc->txdw0 |= cpu_to_le32(OWN | FSG | LSG);
+
+       if(bmcst)
+       {
+               ptxdesc->txdw0 |= cpu_to_le32(BIT(24));
+       }
+
+       //offset 4
+       ptxdesc->txdw1 |= cpu_to_le32(0x00);//MAC_ID
+
+       ptxdesc->txdw1 |= cpu_to_le32((0x12<<QSEL_SHT)&0x00001f00);
+
+       ptxdesc->txdw1 |= cpu_to_le32((0x06<< 16) & 0x000f0000);//b mode
+
+       //offset 8
+
+       //offset 12
+       ptxdesc->txdw3 |= cpu_to_le32((le16_to_cpu(tx_hdr->seq_ctl)<<16)&0xffff0000);
+
+       //offset 16
+       ptxdesc->txdw4 |= cpu_to_le32(BIT(8));//driver uses rate
+
+       //offset 20
+
+
+       //HW append seq
+       ptxdesc->txdw4 |= cpu_to_le32(BIT(7)); // Hw set sequence number
+       ptxdesc->txdw3 |= cpu_to_le32((8 <<28)); //set bit3 to 1. Suugested by TimChen. 2009.12.29.
+
+
+       rtl8192cu_cal_txdesc_chksum(ptxdesc);
+       // ----- end of fill tx desc -----
+
+       //
+       skb_put(pxmit_skb, len + TXDESC_SIZE);
+       pxmitbuf = pxmitbuf + TXDESC_SIZE;
+       _rtw_memcpy(pxmitbuf, skb->data, len);
+
+       //DBG_8192C("mgnt_xmit, len=%x\n", pxmit_skb->len);
+
+
+       // ----- prepare urb for submit -----
+
+       //translate DMA FIFO addr to pipehandle
+       //pipe = ffaddr2pipehdl(pdvobj, MGT_QUEUE_INX);
+       pipe = usb_sndbulkpipe(pdvobj->pusbdev, pHalData->Queue2EPNum[(u8)MGT_QUEUE_INX]&0x0f);
+
+       usb_fill_bulk_urb(urb, pdvobj->pusbdev, pipe,
+                         pxmit_skb->data, pxmit_skb->len, rtl8192cu_hostap_mgnt_xmit_cb, pxmit_skb);
+
+       urb->transfer_flags |= URB_ZERO_PACKET;
+       usb_anchor_urb(urb, &phostapdpriv->anchored);
+       rc = usb_submit_urb(urb, GFP_ATOMIC);
+       if (rc < 0) {
+               usb_unanchor_urb(urb);
+               kfree_skb(skb);
+       }
+       usb_free_urb(urb);
+
+
+_exit:
+
+       rtw_skb_free(skb);
+
+#endif
+
+       return 0;
+
+}
+#endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/usb/usb_halinit.c b/drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/usb/usb_halinit.c
new file mode 100644 (file)
index 0000000..edb72c1
--- /dev/null
@@ -0,0 +1,6260 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#define _HCI_HAL_INIT_C_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <rtw_efuse.h>
+
+#include <rtl8192c_hal.h>
+#include <rtl8192c_led.h>
+
+#ifdef DBG_CONFIG_ERROR_DETECT
+#include "rtl8192c_sreset.h"
+#endif
+
+#ifdef CONFIG_IOL
+#include <rtw_iol.h>
+#endif
+
+#if defined (PLATFORM_LINUX) && defined (PLATFORM_WINDOWS)
+
+#error "Shall be Linux or Windows, but not both!\n"
+
+#endif
+
+#ifndef CONFIG_USB_HCI
+
+#error "CONFIG_USB_HCI shall be on!\n"
+
+#endif
+
+#include <usb_ops.h>
+#include <usb_hal.h>
+#include <usb_osintf.h>
+
+#if DISABLE_BB_RF
+       #define         HAL_MAC_ENABLE  0
+       #define         HAL_BB_ENABLE           0
+       #define         HAL_RF_ENABLE           0
+#else
+       #define         HAL_MAC_ENABLE  1
+       #define         HAL_BB_ENABLE           1
+       #define         HAL_RF_ENABLE           1
+#endif
+
+//endpoint number 1,2,3,4,5
+// bult in : 1
+// bult out: 2 (High)
+// bult out: 3 (Normal) for 3 out_ep, (Low) for 2 out_ep
+// interrupt in: 4
+// bult out: 5 (Low) for 3 out_ep
+
+
+static VOID
+_OneOutEpMapping(
+       IN      HAL_DATA_TYPE   *pHalData
+       )
+{
+       //only endpoint number 0x02
+
+       pHalData->Queue2EPNum[0] = pHalData->RtBulkOutPipe[0];//VO
+       pHalData->Queue2EPNum[1] = pHalData->RtBulkOutPipe[0];//VI
+       pHalData->Queue2EPNum[2] = pHalData->RtBulkOutPipe[0];//BE
+       pHalData->Queue2EPNum[3] = pHalData->RtBulkOutPipe[0];//BK
+
+       pHalData->Queue2EPNum[4] = pHalData->RtBulkOutPipe[0];//BCN
+       pHalData->Queue2EPNum[5] = pHalData->RtBulkOutPipe[0];//MGT
+       pHalData->Queue2EPNum[6] = pHalData->RtBulkOutPipe[0];//HIGH
+       pHalData->Queue2EPNum[7] = pHalData->RtBulkOutPipe[0];//TXCMD
+}
+
+
+static VOID
+_TwoOutEpMapping(
+       IN      HAL_DATA_TYPE   *pHalData,
+       IN      BOOLEAN                 bWIFICfg
+       )
+{
+
+/*
+#define VO_QUEUE_INX           0
+#define VI_QUEUE_INX           1
+#define BE_QUEUE_INX           2
+#define BK_QUEUE_INX           3
+#define BCN_QUEUE_INX  4
+#define MGT_QUEUE_INX  5
+#define HIGH_QUEUE_INX 6
+#define TXCMD_QUEUE_INX        7
+*/
+       if(bWIFICfg){ // Normal chip && wmm
+
+               //      BK,     BE,     VI,     VO,     BCN,    CMD,MGT,HIGH,HCCA
+               //{  0,         1,      0,      1,      0,      0,      0,      0,              0       };
+               //0:H(end_number=0x02), 1:L (end_number=0x03)
+
+               pHalData->Queue2EPNum[0] = pHalData->RtBulkOutPipe[1];//VO
+               pHalData->Queue2EPNum[1] = pHalData->RtBulkOutPipe[0];//VI
+               pHalData->Queue2EPNum[2] = pHalData->RtBulkOutPipe[1];//BE
+               pHalData->Queue2EPNum[3] = pHalData->RtBulkOutPipe[0];//BK
+
+               pHalData->Queue2EPNum[4] = pHalData->RtBulkOutPipe[0];//BCN
+               pHalData->Queue2EPNum[5] = pHalData->RtBulkOutPipe[0];//MGT
+               pHalData->Queue2EPNum[6] = pHalData->RtBulkOutPipe[0];//HIGH
+               pHalData->Queue2EPNum[7] = pHalData->RtBulkOutPipe[0];//TXCMD
+       }
+       else{//typical setting
+
+               //BK,   BE,     VI,     VO,     BCN,    CMD,MGT,HIGH,HCCA
+               //{  1,         1,      0,      0,      0,      0,      0,      0,              0       };
+               //0:H(end_number=0x02), 1:L (end_number=0x03)
+
+               pHalData->Queue2EPNum[0] = pHalData->RtBulkOutPipe[0];//VO
+               pHalData->Queue2EPNum[1] = pHalData->RtBulkOutPipe[0];//VI
+               pHalData->Queue2EPNum[2] = pHalData->RtBulkOutPipe[1];//BE
+               pHalData->Queue2EPNum[3] = pHalData->RtBulkOutPipe[1];//BK
+
+               pHalData->Queue2EPNum[4] = pHalData->RtBulkOutPipe[0];//BCN
+               pHalData->Queue2EPNum[5] = pHalData->RtBulkOutPipe[0];//MGT
+               pHalData->Queue2EPNum[6] = pHalData->RtBulkOutPipe[0];//HIGH
+               pHalData->Queue2EPNum[7] = pHalData->RtBulkOutPipe[0];//TXCMD
+       }
+
+}
+
+
+static VOID _ThreeOutEpMapping(
+       IN      HAL_DATA_TYPE   *pHalData,
+       IN      BOOLEAN                 bWIFICfg
+       )
+{
+       if(bWIFICfg){//for WMM
+
+               //      BK,     BE,     VI,     VO,     BCN,    CMD,MGT,HIGH,HCCA
+               //{  1,         2,      1,      0,      0,      0,      0,      0,              0       };
+               //0:H(end_number=0x02), 1:N(end_number=0x03), 2:L (end_number=0x05)
+
+               pHalData->Queue2EPNum[0] = pHalData->RtBulkOutPipe[0];//VO
+               pHalData->Queue2EPNum[1] = pHalData->RtBulkOutPipe[1];//VI
+               pHalData->Queue2EPNum[2] = pHalData->RtBulkOutPipe[2];//BE
+               pHalData->Queue2EPNum[3] = pHalData->RtBulkOutPipe[1];//BK
+
+               pHalData->Queue2EPNum[4] = pHalData->RtBulkOutPipe[0];//BCN
+               pHalData->Queue2EPNum[5] = pHalData->RtBulkOutPipe[0];//MGT
+               pHalData->Queue2EPNum[6] = pHalData->RtBulkOutPipe[0];//HIGH
+               pHalData->Queue2EPNum[7] = pHalData->RtBulkOutPipe[0];//TXCMD
+       }
+       else{//typical setting
+
+               //      BK,     BE,     VI,     VO,     BCN,    CMD,MGT,HIGH,HCCA
+               //{  2,         2,      1,      0,      0,      0,      0,      0,              0       };
+               //0:H(end_number=0x02), 1:N(end_number=0x03), 2:L (end_number=0x05)
+               pHalData->Queue2EPNum[0] = pHalData->RtBulkOutPipe[0];//VO
+               pHalData->Queue2EPNum[1] = pHalData->RtBulkOutPipe[1];//VI
+               pHalData->Queue2EPNum[2] = pHalData->RtBulkOutPipe[2];//BE
+               pHalData->Queue2EPNum[3] = pHalData->RtBulkOutPipe[2];//BK
+
+               pHalData->Queue2EPNum[4] = pHalData->RtBulkOutPipe[0];//BCN
+               pHalData->Queue2EPNum[5] = pHalData->RtBulkOutPipe[0];//MGT
+               pHalData->Queue2EPNum[6] = pHalData->RtBulkOutPipe[0];//HIGH
+               pHalData->Queue2EPNum[7] = pHalData->RtBulkOutPipe[0];//TXCMD
+       }
+
+}
+
+static BOOLEAN
+_MappingOutEP(
+       IN      PADAPTER        pAdapter,
+       IN      u8              NumOutPipe
+       )
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(pAdapter);
+       struct registry_priv *pregistrypriv = &pAdapter->registrypriv;
+
+       BOOLEAN  bWIFICfg = (pregistrypriv->wifi_spec) ?_TRUE:_FALSE;
+
+       BOOLEAN result = _TRUE;
+
+       switch(NumOutPipe)
+       {
+               case 2:
+                       _TwoOutEpMapping(pHalData, bWIFICfg);
+                       break;
+               case 3:
+                       _ThreeOutEpMapping(pHalData, bWIFICfg);
+                       break;
+               case 1:
+                       _OneOutEpMapping(pHalData);
+                       break;
+               default:
+                       result = _FALSE;
+                       break;
+       }
+
+       return result;
+
+}
+
+static VOID
+_ConfigChipOutEP(
+       IN      PADAPTER        pAdapter,
+       IN      u8              NumOutPipe
+       )
+{
+       u8                      value8;
+       HAL_DATA_TYPE   *pHalData       = GET_HAL_DATA(pAdapter);
+
+       pHalData->OutEpQueueSel = 0;
+       pHalData->OutEpNumber   = 0;
+
+       // Normal and High queue
+       value8 = rtw_read8(pAdapter, (REG_NORMAL_SIE_EP + 1));
+
+       if(value8 & USB_NORMAL_SIE_EP_MASK){
+               pHalData->OutEpQueueSel |= TX_SELE_HQ;
+               pHalData->OutEpNumber++;
+       }
+
+#ifdef CONFIG_USB_ONE_OUT_EP
+               return;
+#endif
+
+       if((value8 >> USB_NORMAL_SIE_EP_SHIFT) & USB_NORMAL_SIE_EP_MASK){
+               pHalData->OutEpQueueSel |= TX_SELE_NQ;
+               pHalData->OutEpNumber++;
+       }
+
+       // Low queue
+       value8 = rtw_read8(pAdapter, (REG_NORMAL_SIE_EP + 2));
+       if(value8 & USB_NORMAL_SIE_EP_MASK){
+               pHalData->OutEpQueueSel |= TX_SELE_LQ;
+               pHalData->OutEpNumber++;
+       }
+
+       // TODO: Error recovery for this case
+       //RT_ASSERT((NumOutPipe == pHalData->OutEpNumber), ("Out EP number isn't match! %d(Descriptor) != %d (SIE reg)\n", (u4Byte)NumOutPipe, (u4Byte)pHalData->OutEpNumber));
+
+}
+
+static BOOLEAN HalUsbSetQueuePipeMapping8192CUsb(
+       IN      PADAPTER        pAdapter,
+       IN      u8              NumInPipe,
+       IN      u8              NumOutPipe
+       )
+{
+       HAL_DATA_TYPE   *pHalData       = GET_HAL_DATA(pAdapter);
+       BOOLEAN                 result          = _FALSE;
+
+       _ConfigChipOutEP(pAdapter, NumOutPipe);
+
+       #ifndef CONFIG_USB_ONE_OUT_EP
+       // Normal chip with one IN and one OUT doesn't have interrupt IN EP.
+       if(1 == pHalData->OutEpNumber){
+               if(1 != NumInPipe){
+                       return result;
+               }
+       }
+       #endif
+       result = _MappingOutEP(pAdapter, NumOutPipe);
+
+       return result;
+
+}
+
+void rtl8192cu_interface_configure(_adapter *padapter)
+{
+       HAL_DATA_TYPE   *pHalData       = GET_HAL_DATA(padapter);
+       struct dvobj_priv       *pdvobjpriv = adapter_to_dvobj(padapter);
+
+       if (pdvobjpriv->ishighspeed == _TRUE)
+       {
+               pHalData->UsbBulkOutSize = USB_HIGH_SPEED_BULK_SIZE;//512 bytes
+       }
+       else
+       {
+               pHalData->UsbBulkOutSize = USB_FULL_SPEED_BULK_SIZE;//64 bytes
+       }
+
+       pHalData->interfaceIndex = pdvobjpriv->InterfaceNumber;
+       pHalData->RtBulkInPipe = pdvobjpriv->ep_num[0];
+       pHalData->RtBulkOutPipe[0] = pdvobjpriv->ep_num[1];
+       pHalData->RtBulkOutPipe[1] = pdvobjpriv->ep_num[2];
+       pHalData->RtIntInPipe = pdvobjpriv->ep_num[3];
+       pHalData->RtBulkOutPipe[2] = pdvobjpriv->ep_num[4];
+
+#ifdef CONFIG_USB_TX_AGGREGATION
+       pHalData->UsbTxAggMode          = 1;
+       pHalData->UsbTxAggDescNum       = 0x6;  // only 4 bits
+#endif
+
+#ifdef CONFIG_USB_RX_AGGREGATION
+       pHalData->UsbRxAggMode          = USB_RX_AGG_DMA;// USB_RX_AGG_DMA;
+       pHalData->UsbRxAggBlockCount    = 8; //unit : 512b
+       pHalData->UsbRxAggBlockTimeout  = 0x6;
+       pHalData->UsbRxAggPageCount     = 48; //uint :128 b //0x0A;     // 10 = MAX_RX_DMA_BUFFER_SIZE/2/pHalData->UsbBulkOutSize
+       pHalData->UsbRxAggPageTimeout   = 0x4; //6, absolute time = 34ms/(2^6)
+#endif
+
+       HalUsbSetQueuePipeMapping8192CUsb(padapter, pdvobjpriv->RtNumInPipes,
+               #ifdef CONFIG_USB_ONE_OUT_EP
+               1
+               #else
+               pdvobjpriv->RtNumOutPipes
+               #endif
+               );
+
+}
+
+static u8 _InitPowerOn(_adapter *padapter)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
+       u8      ret = _SUCCESS;
+       u16     value16=0;
+       u8      value8 = 0;
+       u32  value32 = 0;
+
+       // polling autoload done.
+       u32     pollingCount = 0;
+
+       do
+       {
+               if(rtw_read8(padapter, REG_APS_FSMCO) & PFM_ALDN){
+                       //RT_TRACE(COMP_INIT,DBG_LOUD,("Autoload Done!\n"));
+                       break;
+               }
+
+               if(pollingCount++ > POLLING_READY_TIMEOUT_COUNT){
+                       //RT_TRACE(COMP_INIT,DBG_SERIOUS,("Failed to polling REG_APS_FSMCO[PFM_ALDN] done!\n"));
+                       return _FAIL;
+               }
+
+       }while(_TRUE);
+
+
+//     For hardware power on sequence.
+
+       //0.    RSV_CTRL 0x1C[7:0] = 0x00                       // unlock ISO/CLK/Power control register
+       rtw_write8(padapter, REG_RSV_CTRL, 0x0);
+       // Power on when re-enter from IPS/Radio off/card disable
+       rtw_write8(padapter, REG_SPS0_CTRL, 0x2b);//enable SPS into PWM mode
+/*
+       value16 = PlatformIORead2Byte(Adapter, REG_AFE_XTAL_CTRL);//enable AFE clock
+       value16 &=  (~XTAL_GATE_AFE);
+       PlatformIOWrite2Byte(Adapter,REG_AFE_XTAL_CTRL, value16 );
+*/
+
+       rtw_udelay_os(100);//PlatformSleepUs(150);//this is not necessary when initially power on
+
+       value8 = rtw_read8(padapter, REG_LDOV12D_CTRL);
+       if(0== (value8 & LDV12_EN) ){
+               value8 |= LDV12_EN;
+               rtw_write8(padapter, REG_LDOV12D_CTRL, value8);
+               //RT_TRACE(COMP_INIT, DBG_LOUD, (" power-on :REG_LDOV12D_CTRL Reg0x21:0x%02x.\n",value8));
+               rtw_udelay_os(100);//PlatformSleepUs(100);//this is not necessary when initially power on
+               value8 = rtw_read8(padapter, REG_SYS_ISO_CTRL);
+               value8 &= ~ISO_MD2PP;
+               rtw_write8(padapter, REG_SYS_ISO_CTRL, value8);
+       }
+
+       // auto enable WLAN
+       pollingCount = 0;
+       value16 = rtw_read16(padapter, REG_APS_FSMCO);
+       value16 |= APFM_ONMAC;
+       rtw_write16(padapter, REG_APS_FSMCO, value16);
+
+       do
+       {
+               if(0 == (rtw_read16(padapter, REG_APS_FSMCO) & APFM_ONMAC)){
+                       //RT_TRACE(COMP_INIT,DBG_LOUD,("MAC auto ON okay!\n"));
+                       break;
+               }
+
+               if(pollingCount++ > POLLING_READY_TIMEOUT_COUNT){
+                       //RT_TRACE(COMP_INIT,DBG_SERIOUS,("Failed to polling REG_APS_FSMCO[APFM_ONMAC] done!\n"));
+                       return _FAIL;
+               }
+
+       }while(_TRUE);
+
+       //Enable Radio ,GPIO ,and LED function
+       rtw_write16(padapter,REG_APS_FSMCO,0x0812);
+
+#ifdef CONFIG_AUTOSUSPEND
+       //for usb Combo card ,BT
+       if((BOARD_USB_COMBO == pHalData->BoardType)&&(padapter->registrypriv.usbss_enable))
+       {
+               value32 =  rtw_read32(padapter, REG_APS_FSMCO);
+               value32 |= (SOP_ABG|SOP_AMB|XOP_BTCK);
+               rtw_write32(padapter, REG_APS_FSMCO, value32);
+       }
+#endif
+
+       // release RF digital isolation
+       value16 = rtw_read16(padapter, REG_SYS_ISO_CTRL);
+       value16 &= ~ISO_DIOR;
+       rtw_write16(padapter, REG_SYS_ISO_CTRL, value16);
+
+       // Enable MAC DMA/WMAC/SCHEDULE/SEC block
+       value16 = rtw_read16(padapter, REG_CR);
+       value16 |= (HCI_TXDMA_EN | HCI_RXDMA_EN | TXDMA_EN | RXDMA_EN
+                               | PROTOCOL_EN | SCHEDULE_EN | MACTXEN | MACRXEN | ENSEC);
+       rtw_write16(padapter, REG_CR, value16);
+
+       //tynli_test for suspend mode.
+       {
+               rtw_write8(padapter,  0xfe10, 0x19);
+       }
+
+       // 2010/11/22 MH For slim combo debug mode check.
+       if (pHalData->BoardType == BOARD_USB_COMBO)
+       {
+               if (pHalData->SlimComboDbg == _TRUE)
+               {
+                       DBG_8192C("SlimComboDbg == TRUE\n");
+
+                       // 1. SIC?Test Mode ¤¤, Debug Ports ·|¦Û°Ê Enable, ©Ò¥H Driver ¤W¨Ó«á,
+                       //      ­nÃö±¼½Ð³]©w 0x 00[7] -> "1", ±N¥¦ Disable.   effect if not: power consumption increase
+                       rtw_write8(padapter, REG_SYS_ISO_CTRL, rtw_read8(padapter, REG_SYS_ISO_CTRL)|BIT7);
+
+                       // 2. SIC?Test Mode ¤¤, GPIO-8?·| report Power State ©Ò¥H Driver ¤W¨Ó«á, ½Ð³]©w? 0x04[6] -> "1" ±N¥¦ Disable
+                       // effect if not: GPIO-8 could not be GPIO or LED function
+                       rtw_write8(padapter, REG_APS_FSMCO, rtw_read8(padapter, REG_APS_FSMCO)|BIT6);
+
+                       // 3. SIC Test Mode ¤¤, EESK, EECS ·| report?Host Clock status, ©Ò¥H Driver ¤W¨Ó«á, ½Ð³]©w? 0x40[4] -> "1" ±N¥¦¤Á¦¨ EEPROM ¨Ï¥Î Pin (autoload still from Efuse)
+                       //  effect if not:power consumption increase
+                       value8 = rtw_read8(padapter, REG_GPIO_MUXCFG)|BIT4 ;
+               #ifdef CONFIG_BT_COEXIST
+                       // 2011/01/26 MH UMB-B cut bug. We need to support the modification.
+                       if (IS_81xxC_VENDOR_UMC_B_CUT(pHalData->VersionID) &&
+                               pHalData->bt_coexist.BT_Coexist)
+                       {
+                               value8 |= (BIT5);
+                       }
+               #endif
+                       rtw_write8(padapter, REG_GPIO_MUXCFG,value8 );
+
+
+                       // 4. SIC Test Mode ¤¤,?SIC Debug ports ·|¦Û°Ê Enable , ©Ò¥H Driver ¤W¨Ó«á°¨¤W, ½Ð³]©w? 0x40[15:11] -> ¡§0x00¡¨, ±N¥¦Disable
+                       //  4.1Two Steps setting for safety: 0x40[15,13,12, 11] -> "0", then ?0x40[14] -> "0"
+                       // effect if not: Host could not transfer packets, and GPIO-3,2 will occupied by SIC then Co-exist could not work.
+                       rtw_write16(padapter, REG_GPIO_MUXCFG, (rtw_read16(padapter, REG_GPIO_MUXCFG)&0x07FF)|BIT14);
+                       rtw_write16(padapter, REG_GPIO_MUXCFG, rtw_read16(padapter, REG_GPIO_MUXCFG)&0x07FF);
+               }
+       }
+
+
+       // 2011/02/18 To Fix RU LNA  power leakage problem. We need to execute below below in
+       // Adapter init and halt sequence. Accordingto EEchou's opinion, we can enable the ability for all
+       // IC. According to Johnny's opinion, only RU will meet the condition.
+       if (IS_HARDWARE_TYPE_8192C(padapter) && (pHalData->BoardType == BOARD_USB_High_PA))
+               rtw_write32(padapter, rFPGA0_XCD_RFParameter, rtw_read32(padapter, rFPGA0_XCD_RFParameter)&(~BIT1));
+       return ret;
+
+}
+
+
+static void _dbg_dump_macreg(_adapter *padapter)
+{
+       u32 offset = 0;
+       u32 val32 = 0;
+       u32 index =0 ;
+       for(index=0;index<64;index++)
+       {
+               offset = index*4;
+               val32 = rtw_read32(padapter,offset);
+               DBG_8192C("offset : 0x%02x ,val:0x%08x\n",offset,val32);
+       }
+}
+
+
+static void _InitPABias(_adapter *padapter)
+{
+       HAL_DATA_TYPE           *pHalData       = GET_HAL_DATA(padapter);
+       u8                      pa_setting;
+       BOOLEAN         is92C = IS_92C_SERIAL(pHalData->VersionID);
+
+       //FIXED PA current issue
+       //efuse_one_byte_read(padapter, 0x1FA, &pa_setting);
+       pa_setting = EFUSE_Read1Byte(padapter, 0x1FA);
+
+       //RT_TRACE(COMP_INIT, DBG_LOUD, ("_InitPABias 0x1FA 0x%x \n",pa_setting));
+
+       if(!(pa_setting & BIT0))
+       {
+               PHY_SetRFReg(padapter, RF_PATH_A, 0x15, 0x0FFFFF, 0x0F406);
+               PHY_SetRFReg(padapter, RF_PATH_A, 0x15, 0x0FFFFF, 0x4F406);
+               PHY_SetRFReg(padapter, RF_PATH_A, 0x15, 0x0FFFFF, 0x8F406);
+               PHY_SetRFReg(padapter, RF_PATH_A, 0x15, 0x0FFFFF, 0xCF406);
+               //RT_TRACE(COMP_INIT, DBG_LOUD, ("PA BIAS path A\n"));
+       }
+
+       if(!(pa_setting & BIT1) && is92C)
+       {
+               PHY_SetRFReg(padapter,RF_PATH_B, 0x15, 0x0FFFFF, 0x0F406);
+               PHY_SetRFReg(padapter,RF_PATH_B, 0x15, 0x0FFFFF, 0x4F406);
+               PHY_SetRFReg(padapter,RF_PATH_B, 0x15, 0x0FFFFF, 0x8F406);
+               PHY_SetRFReg(padapter,RF_PATH_B, 0x15, 0x0FFFFF, 0xCF406);
+               //RT_TRACE(COMP_INIT, DBG_LOUD, ("PA BIAS path B\n"));
+       }
+
+       if(!(pa_setting & BIT4))
+       {
+               pa_setting = rtw_read8(padapter, 0x16);
+               pa_setting &= 0x0F;
+               rtw_write8(padapter, 0x16, pa_setting | 0x90);
+       }
+}
+#ifdef CONFIG_BT_COEXIST
+static void _InitBTCoexist(_adapter *padapter)
+{
+       HAL_DATA_TYPE           *pHalData = GET_HAL_DATA(padapter);
+       struct btcoexist_priv   *pbtpriv = &(pHalData->bt_coexist);
+       u8 u1Tmp;
+
+       if(pbtpriv->BT_Coexist && pbtpriv->BT_CoexistType == BT_CSR_BC4)
+       {
+
+#if MP_DRIVER != 1
+               if(pbtpriv->BT_Ant_isolation)
+               {
+                       rtw_write8( padapter,REG_GPIO_MUXCFG, 0xa0);
+                       DBG_8192C("BT write 0x%x = 0x%x\n", REG_GPIO_MUXCFG, 0xa0);
+               }
+#endif
+
+               u1Tmp = rtw_read8(padapter, 0x4fd) & BIT0;
+               u1Tmp = u1Tmp |
+                               ((pbtpriv->BT_Ant_isolation==1)?0:BIT1) |
+                               ((pbtpriv->BT_Service==BT_SCO)?0:BIT2);
+               rtw_write8( padapter, 0x4fd, u1Tmp);
+               DBG_8192C("BT write 0x%x = 0x%x for non-isolation\n", 0x4fd, u1Tmp);
+
+
+               rtw_write32(padapter, REG_BT_COEX_TABLE+4, 0xaaaa9aaa);
+               DBG_8192C("BT write 0x%x = 0x%x\n", REG_BT_COEX_TABLE+4, 0xaaaa9aaa);
+
+               rtw_write32(padapter, REG_BT_COEX_TABLE+8, 0xffbd0040);
+               DBG_8192C("BT write 0x%x = 0x%x\n", REG_BT_COEX_TABLE+8, 0xffbd0040);
+
+               rtw_write32(padapter,  REG_BT_COEX_TABLE+0xc, 0x40000010);
+               DBG_8192C("BT write 0x%x = 0x%x\n", REG_BT_COEX_TABLE+0xc, 0x40000010);
+
+               //Config to 1T1R
+               u1Tmp =  rtw_read8(padapter,rOFDM0_TRxPathEnable);
+               u1Tmp &= ~(BIT1);
+               rtw_write8( padapter, rOFDM0_TRxPathEnable, u1Tmp);
+               DBG_8192C("BT write 0xC04 = 0x%x\n", u1Tmp);
+
+               u1Tmp = rtw_read8(padapter, rOFDM1_TRxPathEnable);
+               u1Tmp &= ~(BIT1);
+               rtw_write8( padapter, rOFDM1_TRxPathEnable, u1Tmp);
+               DBG_8192C("BT write 0xD04 = 0x%x\n", u1Tmp);
+
+       }
+}
+#endif
+
+//-------------------------------------------------------------------------
+//
+// LLT R/W/Init function
+//
+//-------------------------------------------------------------------------
+static u8 _LLTWrite(
+       IN  PADAPTER    Adapter,
+       IN      u32             address,
+       IN      u32             data
+       )
+{
+       u8      status = _SUCCESS;
+       int             count = 0;
+       u32             value = _LLT_INIT_ADDR(address) | _LLT_INIT_DATA(data) | _LLT_OP(_LLT_WRITE_ACCESS);
+
+       rtw_write32(Adapter, REG_LLT_INIT, value);
+
+       //polling
+       do{
+
+               value = rtw_read32(Adapter, REG_LLT_INIT);
+               if(_LLT_NO_ACTIVE == _LLT_OP_VALUE(value)){
+                       break;
+               }
+
+               if(count > POLLING_LLT_THRESHOLD){
+                       //RT_TRACE(COMP_INIT,DBG_SERIOUS,("Failed to polling write LLT done at address %d!\n", address));
+                       status = _FAIL;
+                       break;
+               }
+       }while(count++);
+
+       return status;
+
+}
+
+
+static u8 _LLTRead(
+       IN  PADAPTER    Adapter,
+       IN      u32             address
+       )
+{
+       int             count = 0;
+       u32             value = _LLT_INIT_ADDR(address) | _LLT_OP(_LLT_READ_ACCESS);
+
+       rtw_write32(Adapter, REG_LLT_INIT, value);
+
+       //polling and get value
+       do{
+
+               value = rtw_read32(Adapter, REG_LLT_INIT);
+               if(_LLT_NO_ACTIVE == _LLT_OP_VALUE(value)){
+                       return (u8)value;
+               }
+
+               if(count > POLLING_LLT_THRESHOLD){
+                       //RT_TRACE(COMP_INIT,DBG_SERIOUS,("Failed to polling read LLT done at address %d!\n", address));
+                       break;
+               }
+       }while(count++);
+
+       return 0xFF;
+
+}
+
+
+static u8 InitLLTTable(
+       IN  PADAPTER    Adapter,
+       IN      u32             boundary
+       )
+{
+       u8      status = _SUCCESS;
+       u32             i;
+
+#ifdef CONFIG_IOL_LLT
+       if(rtw_IOL_applied(Adapter))
+       {
+               struct xmit_frame       *xmit_frame;
+               if((xmit_frame=rtw_IOL_accquire_xmit_frame(Adapter)) == NULL)
+                       return _FAIL;
+
+               rtw_IOL_append_LLT_cmd(xmit_frame, boundary);
+               status = rtw_IOL_exec_cmds_sync(Adapter, xmit_frame, 1000);
+       }
+       else
+#endif
+       {
+               for(i = 0 ; i < (boundary - 1) ; i++){
+                       status = _LLTWrite(Adapter, i , i + 1);
+                       if(_SUCCESS != status){
+                               return status;
+                       }
+               }
+
+               // end of list
+               status = _LLTWrite(Adapter, (boundary - 1), 0xFF);
+               if(_SUCCESS != status){
+                       return status;
+               }
+
+               // Make the other pages as ring buffer
+               // This ring buffer is used as beacon buffer if we config this MAC as two MAC transfer.
+               // Otherwise used as local loopback buffer.
+               for(i = boundary ; i < LAST_ENTRY_OF_TX_PKT_BUFFER ; i++){
+                       status = _LLTWrite(Adapter, i, (i + 1));
+                       if(_SUCCESS != status){
+                               return status;
+                       }
+               }
+
+               // Let last entry point to the start entry of ring buffer
+               status = _LLTWrite(Adapter, LAST_ENTRY_OF_TX_PKT_BUFFER, boundary);
+               if(_SUCCESS != status){
+                       return status;
+               }
+       }
+
+       return status;
+
+}
+
+
+//---------------------------------------------------------------
+//
+//     MAC init functions
+//
+//---------------------------------------------------------------
+static VOID
+_SetMacID(
+       IN  PADAPTER Adapter, u8* MacID
+       )
+{
+       u32 i;
+       for(i=0 ; i< MAC_ADDR_LEN ; i++){
+#ifdef  CONFIG_CONCURRENT_MODE
+               if(Adapter->iface_type == IFACE_PORT1)
+                       rtw_write32(Adapter, REG_MACID1+i, MacID[i]);
+               else
+#endif
+               rtw_write32(Adapter, REG_MACID+i, MacID[i]);
+       }
+}
+
+static VOID
+_SetBSSID(
+       IN  PADAPTER Adapter, u8* BSSID
+       )
+{
+       u32 i;
+       for(i=0 ; i< MAC_ADDR_LEN ; i++){
+#ifdef  CONFIG_CONCURRENT_MODE
+               if(Adapter->iface_type == IFACE_PORT1)
+                       rtw_write32(Adapter, REG_BSSID1+i, BSSID[i]);
+               else
+#endif
+               rtw_write32(Adapter, REG_BSSID+i, BSSID[i]);
+       }
+}
+
+
+// Shall USB interface init this?
+static VOID
+_InitInterrupt(
+       IN  PADAPTER Adapter
+       )
+{
+       u32     value32;
+
+       // HISR - turn all on
+       value32 = 0xFFFFFFFF;
+       rtw_write32(Adapter, REG_HISR, value32);
+
+       // HIMR - turn all on
+       rtw_write32(Adapter, REG_HIMR, value32);
+}
+
+
+static VOID
+_InitQueueReservedPage(
+       IN  PADAPTER Adapter
+       )
+{
+       HAL_DATA_TYPE   *pHalData       = GET_HAL_DATA(Adapter);
+       struct registry_priv *pregistrypriv = &Adapter->registrypriv;
+
+       u32                     outEPNum        = (u32)pHalData->OutEpNumber;
+       u32                     numHQ           = 0;
+       u32                     numLQ           = 0;
+       u32                     numNQ           = 0;
+       u32                     numPubQ;
+       u32                     value32;
+       u8                      value8;
+       BOOLEAN         bWiFiConfig     = pregistrypriv->wifi_spec;
+       //u32                   txQPageNum, txQPageUnit,txQRemainPage;
+
+       { //for WMM
+               //RT_ASSERT((outEPNum>=2), ("for WMM ,number of out-ep must more than or equal to 2!\n"));
+
+               if(pHalData->OutEpQueueSel & TX_SELE_HQ){
+                       numHQ = (bWiFiConfig)?WMM_NORMAL_PAGE_NUM_HPQ:NORMAL_PAGE_NUM_HPQ;
+               }
+
+               if(pHalData->OutEpQueueSel & TX_SELE_LQ){
+                       numLQ = (bWiFiConfig)?WMM_NORMAL_PAGE_NUM_LPQ:NORMAL_PAGE_NUM_LPQ;
+               }
+               // NOTE: This step shall be proceed before writting REG_RQPN.
+               if(pHalData->OutEpQueueSel & TX_SELE_NQ){
+                       numNQ = (bWiFiConfig)?WMM_NORMAL_PAGE_NUM_NPQ:NORMAL_PAGE_NUM_NPQ;
+               }
+               value8 = (u8)_NPQ(numNQ);
+               rtw_write8(Adapter, REG_RQPN_NPQ, value8);
+
+               if (bWiFiConfig)
+                       numPubQ = WMM_NORMAL_TX_TOTAL_PAGE_NUMBER - numHQ - numLQ - numNQ;
+               else
+                       numPubQ = TX_TOTAL_PAGE_NUMBER - numHQ - numLQ - numNQ;
+       }
+
+       // TX DMA
+       value32 = _HPQ(numHQ) | _LPQ(numLQ) | _PUBQ(numPubQ) | LD_RQPN;
+       rtw_write32(Adapter, REG_RQPN, value32);
+}
+
+static VOID
+_InitTxBufferBoundary(
+       IN  PADAPTER Adapter
+       )
+{
+       struct registry_priv *pregistrypriv = &Adapter->registrypriv;
+       HAL_DATA_TYPE   *pHalData       = GET_HAL_DATA(Adapter);
+
+       u8      txpktbuf_bndy;
+
+       if(!pregistrypriv->wifi_spec){
+               txpktbuf_bndy = TX_PAGE_BOUNDARY;
+       }
+       else{//for WMM
+               txpktbuf_bndy = WMM_NORMAL_TX_PAGE_BOUNDARY;
+       }
+
+       rtw_write8(Adapter, REG_TXPKTBUF_BCNQ_BDNY, txpktbuf_bndy);
+       rtw_write8(Adapter, REG_TXPKTBUF_MGQ_BDNY, txpktbuf_bndy);
+       rtw_write8(Adapter, REG_TXPKTBUF_WMAC_LBK_BF_HD, txpktbuf_bndy);
+       rtw_write8(Adapter, REG_TRXFF_BNDY, txpktbuf_bndy);
+#if 1
+       rtw_write8(Adapter, REG_TDECTRL+1, txpktbuf_bndy);
+#else
+       txdmactrl = PlatformIORead2Byte(Adapter, REG_TDECTRL);
+       txdmactrl &= ~BCN_HEAD_MASK;
+       txdmactrl |= BCN_HEAD(txpktbuf_bndy);
+       PlatformIOWrite2Byte(Adapter, REG_TDECTRL, txdmactrl);
+#endif
+}
+
+static VOID
+_InitPageBoundary(
+       IN  PADAPTER Adapter
+       )
+{
+       // RX Page Boundary
+       //srand(static_cast<unsigned int>(time(NULL)) );
+       u16 rxff_bndy = 0x27FF;//(rand() % 1) ? 0x27FF : 0x23FF;
+
+       rtw_write16(Adapter, (REG_TRXFF_BNDY + 2), rxff_bndy);
+
+       // TODO: ?? shall we set tx boundary?
+}
+
+
+static VOID
+_InitNormalChipRegPriority(
+       IN      PADAPTER        Adapter,
+       IN      u16             beQ,
+       IN      u16             bkQ,
+       IN      u16             viQ,
+       IN      u16             voQ,
+       IN      u16             mgtQ,
+       IN      u16             hiQ
+       )
+{
+       u16 value16             = (rtw_read16(Adapter, REG_TRXDMA_CTRL) & 0x7);
+
+       value16 |=      _TXDMA_BEQ_MAP(beQ)     | _TXDMA_BKQ_MAP(bkQ) |
+                               _TXDMA_VIQ_MAP(viQ)     | _TXDMA_VOQ_MAP(voQ) |
+                               _TXDMA_MGQ_MAP(mgtQ)| _TXDMA_HIQ_MAP(hiQ);
+
+       rtw_write16(Adapter, REG_TRXDMA_CTRL, value16);
+}
+
+static VOID
+_InitNormalChipOneOutEpPriority(
+       IN      PADAPTER Adapter
+       )
+{
+       HAL_DATA_TYPE   *pHalData       = GET_HAL_DATA(Adapter);
+
+       u16     value = 0;
+       switch(pHalData->OutEpQueueSel)
+       {
+               case TX_SELE_HQ:
+                       value = QUEUE_HIGH;
+                       break;
+               case TX_SELE_LQ:
+                       value = QUEUE_LOW;
+                       break;
+               case TX_SELE_NQ:
+                       value = QUEUE_NORMAL;
+                       break;
+               default:
+                       //RT_ASSERT(FALSE,("Shall not reach here!\n"));
+                       break;
+       }
+
+       _InitNormalChipRegPriority(Adapter,
+                                                               value,
+                                                               value,
+                                                               value,
+                                                               value,
+                                                               value,
+                                                               value
+                                                               );
+
+}
+
+static VOID
+_InitNormalChipTwoOutEpPriority(
+       IN      PADAPTER Adapter
+       )
+{
+       HAL_DATA_TYPE   *pHalData       = GET_HAL_DATA(Adapter);
+       struct registry_priv *pregistrypriv = &Adapter->registrypriv;
+       u16                     beQ,bkQ,viQ,voQ,mgtQ,hiQ;
+
+
+       u16     valueHi = 0;
+       u16     valueLow = 0;
+
+       switch(pHalData->OutEpQueueSel)
+       {
+               case (TX_SELE_HQ | TX_SELE_LQ):
+                       valueHi = QUEUE_HIGH;
+                       valueLow = QUEUE_LOW;
+                       break;
+               case (TX_SELE_NQ | TX_SELE_LQ):
+                       valueHi = QUEUE_NORMAL;
+                       valueLow = QUEUE_LOW;
+                       break;
+               case (TX_SELE_HQ | TX_SELE_NQ):
+                       valueHi = QUEUE_HIGH;
+                       valueLow = QUEUE_NORMAL;
+                       break;
+               default:
+                       //RT_ASSERT(FALSE,("Shall not reach here!\n"));
+                       break;
+       }
+
+       if(!pregistrypriv->wifi_spec ){
+               beQ             = valueLow;
+               bkQ             = valueLow;
+               viQ             = valueHi;
+               voQ             = valueHi;
+               mgtQ    = valueHi;
+               hiQ             = valueHi;
+       }
+       else{//for WMM ,CONFIG_OUT_EP_WIFI_MODE
+               beQ             = valueLow;
+               bkQ             = valueHi;
+               viQ             = valueHi;
+               voQ             = valueLow;
+               mgtQ    = valueHi;
+               hiQ             = valueHi;
+       }
+
+       _InitNormalChipRegPriority(Adapter,beQ,bkQ,viQ,voQ,mgtQ,hiQ);
+
+}
+
+static VOID
+_InitNormalChipThreeOutEpPriority(
+       IN      PADAPTER Adapter
+       )
+{
+       struct registry_priv *pregistrypriv = &Adapter->registrypriv;
+       u16                     beQ,bkQ,viQ,voQ,mgtQ,hiQ;
+
+       if(!pregistrypriv->wifi_spec ){// typical setting
+               beQ             = QUEUE_LOW;
+               bkQ             = QUEUE_LOW;
+               viQ             = QUEUE_NORMAL;
+               voQ             = QUEUE_HIGH;
+               mgtQ    = QUEUE_HIGH;
+               hiQ             = QUEUE_HIGH;
+       }
+       else{// for WMM
+               beQ             = QUEUE_LOW;
+               bkQ             = QUEUE_NORMAL;
+               viQ             = QUEUE_NORMAL;
+               voQ             = QUEUE_HIGH;
+               mgtQ    = QUEUE_HIGH;
+               hiQ             = QUEUE_HIGH;
+       }
+       _InitNormalChipRegPriority(Adapter,beQ,bkQ,viQ,voQ,mgtQ,hiQ);
+}
+
+static VOID
+_InitNormalChipQueuePriority(
+       IN      PADAPTER Adapter
+       )
+{
+       HAL_DATA_TYPE   *pHalData       = GET_HAL_DATA(Adapter);
+
+       switch(pHalData->OutEpNumber)
+       {
+               case 1:
+                       _InitNormalChipOneOutEpPriority(Adapter);
+                       break;
+               case 2:
+                       _InitNormalChipTwoOutEpPriority(Adapter);
+                       break;
+               case 3:
+                       _InitNormalChipThreeOutEpPriority(Adapter);
+                       break;
+               default:
+                       //RT_ASSERT(FALSE,("Shall not reach here!\n"));
+                       break;
+       }
+
+
+}
+
+static VOID
+_InitQueuePriority(
+       IN  PADAPTER Adapter
+       )
+{
+       _InitNormalChipQueuePriority(Adapter);
+}
+
+static VOID
+_InitHardwareDropIncorrectBulkOut(
+       IN  PADAPTER Adapter
+       )
+{
+       u32     value32 = rtw_read32(Adapter, REG_TXDMA_OFFSET_CHK);
+       value32 |= DROP_DATA_EN;
+       rtw_write32(Adapter, REG_TXDMA_OFFSET_CHK, value32);
+}
+
+static VOID
+_InitNetworkType(
+       IN  PADAPTER Adapter
+       )
+{
+       u32     value32;
+
+       value32 = rtw_read32(Adapter, REG_CR);
+
+       // TODO: use the other function to set network type
+#if RTL8191C_FPGA_NETWORKTYPE_ADHOC
+       value32 = (value32 & ~MASK_NETTYPE) | _NETTYPE(NT_LINK_AD_HOC);
+#else
+       value32 = (value32 & ~MASK_NETTYPE) | _NETTYPE(NT_LINK_AP);
+#endif
+       rtw_write32(Adapter, REG_CR, value32);
+//     RASSERT(pIoBase->rtw_read8(REG_CR + 2) == 0x2);
+}
+
+static VOID
+_InitTransferPageSize(
+       IN  PADAPTER Adapter
+       )
+{
+       // Tx page size is always 128.
+
+       u8      value8;
+       value8 = _PSRX(PBP_128) | _PSTX(PBP_128);
+       rtw_write8(Adapter, REG_PBP, value8);
+}
+
+static VOID
+_InitDriverInfoSize(
+       IN  PADAPTER    Adapter,
+       IN      u8              drvInfoSize
+       )
+{
+       rtw_write8(Adapter,REG_RX_DRVINFO_SZ, drvInfoSize);
+}
+
+static VOID
+_InitWMACSetting(
+       IN  PADAPTER Adapter
+       )
+{
+       //u4Byte                        value32;
+       //u16                   value16;
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+
+       //pHalData->ReceiveConfig = AAP | APM | AM | AB | APP_ICV | ADF | AMF | APP_FCS | HTC_LOC_CTRL | APP_MIC | APP_PHYSTS;
+       //pHalData->ReceiveConfig = RCR_AAP | RCR_APM | RCR_AM | RCR_AB |RCR_CBSSID_DATA| RCR_CBSSID_BCN| RCR_APP_ICV | RCR_AMF | RCR_HTC_LOC_CTRL | RCR_APP_MIC | RCR_APP_PHYSTS;
+       // don't turn on AAP, it will allow all packets to driver
+       pHalData->ReceiveConfig = RCR_APM | RCR_AM | RCR_AB |RCR_CBSSID_DATA| RCR_CBSSID_BCN| RCR_APP_ICV | RCR_AMF | RCR_HTC_LOC_CTRL | RCR_APP_MIC | RCR_APP_PHYSTS;
+
+#if (0 == RTL8192C_RX_PACKET_NO_INCLUDE_CRC)
+       pHalData->ReceiveConfig |= ACRC32;
+#endif
+
+       // some REG_RCR will be modified later by phy_ConfigMACWithHeaderFile()
+       rtw_write32(Adapter, REG_RCR, pHalData->ReceiveConfig);
+
+       // Accept all multicast address
+       rtw_write32(Adapter, REG_MAR, 0xFFFFFFFF);
+       rtw_write32(Adapter, REG_MAR + 4, 0xFFFFFFFF);
+
+
+       // Accept all data frames
+       //value16 = 0xFFFF;
+       //rtw_write16(Adapter, REG_RXFLTMAP2, value16);
+
+       // 2010.09.08 hpfan
+       // Since ADF is removed from RCR, ps-poll will not be indicate to driver,
+       // RxFilterMap should mask ps-poll to gurantee AP mode can rx ps-poll.
+       //value16 = 0x400;
+       //rtw_write16(Adapter, REG_RXFLTMAP1, value16);
+
+       // Accept all management frames
+       //value16 = 0xFFFF;
+       //rtw_write16(Adapter, REG_RXFLTMAP0, value16);
+
+       //enable RX_SHIFT bits
+       //rtw_write8(Adapter, REG_TRXDMA_CTRL, rtw_read8(Adapter, REG_TRXDMA_CTRL)|BIT(1));
+
+}
+
+static VOID
+_InitAdaptiveCtrl(
+       IN  PADAPTER Adapter
+       )
+{
+       u16     value16;
+       u32     value32;
+
+       // Response Rate Set
+       value32 = rtw_read32(Adapter, REG_RRSR);
+       value32 &= ~RATE_BITMAP_ALL;
+       value32 |= RATE_RRSR_CCK_ONLY_1M;
+       rtw_write32(Adapter, REG_RRSR, value32);
+
+       // CF-END Threshold
+       //m_spIoBase->rtw_write8(REG_CFEND_TH, 0x1);
+
+       // SIFS (used in NAV)
+       value16 = _SPEC_SIFS_CCK(0x10) | _SPEC_SIFS_OFDM(0x10);
+       rtw_write16(Adapter, REG_SPEC_SIFS, value16);
+
+       // Retry Limit
+       value16 = _LRL(0x30) | _SRL(0x30);
+       rtw_write16(Adapter, REG_RL, value16);
+
+}
+
+static VOID
+_InitRateFallback(
+       IN  PADAPTER Adapter
+       )
+{
+       // Set Data Auto Rate Fallback Retry Count register.
+       rtw_write32(Adapter, REG_DARFRC, 0x00000000);
+       rtw_write32(Adapter, REG_DARFRC+4, 0x10080404);
+       rtw_write32(Adapter, REG_RARFRC, 0x04030201);
+       rtw_write32(Adapter, REG_RARFRC+4, 0x08070605);
+
+}
+
+
+static VOID
+_InitEDCA(
+       IN  PADAPTER Adapter
+       )
+{
+       // Set Spec SIFS (used in NAV)
+       rtw_write16(Adapter,REG_SPEC_SIFS, 0x100a);
+       rtw_write16(Adapter,REG_MAC_SPEC_SIFS, 0x100a);
+
+    //REG514:SIFS_CCK_CTX
+    //REG515:SIFS_OFDM_CTX
+       //REG516:SIFS_CCK_TRX
+    //REG517:SIFS_OFDM_TRX
+
+       // Set SIFS for CCK_CTS and OFDM_CTX
+       rtw_write16(Adapter,REG_SIFS_CTX, 0x100a);
+
+       // Set SIFS for CCK_TRX and OFDM_TRX
+       rtw_write16(Adapter,REG_SIFS_TRX, 0x100a);
+
+       // TXOP
+       rtw_write32(Adapter, REG_EDCA_BE_PARAM, 0x005EA42B);
+       rtw_write32(Adapter, REG_EDCA_BK_PARAM, 0x0000A44F);
+       rtw_write32(Adapter, REG_EDCA_VI_PARAM, 0x005EA324);
+       rtw_write32(Adapter, REG_EDCA_VO_PARAM, 0x002FA226);
+}
+
+
+static VOID
+_InitBeaconMaxError(
+       IN  PADAPTER    Adapter,
+       IN      BOOLEAN         InfraMode
+       )
+{
+#ifdef RTL8192CU_ADHOC_WORKAROUND_SETTING
+       rtw_write8(Adapter, REG_BCN_MAX_ERR, 0xFF);
+#else
+       //rtw_write8(Adapter, REG_BCN_MAX_ERR, (InfraMode ? 0xFF : 0x10));
+#endif
+}
+
+
+#ifdef CONFIG_LED
+static void _InitHWLed(PADAPTER Adapter)
+{
+       struct led_priv *pledpriv = &(Adapter->ledpriv);
+
+       if( pledpriv->LedStrategy != HW_LED)
+               return;
+
+// HW led control
+// to do ....
+//must consider cases of antenna diversity/ commbo card/solo card/mini card
+
+}
+#endif //CONFIG_LED
+
+static VOID
+_InitRDGSetting(
+       IN      PADAPTER Adapter
+       )
+{
+       rtw_write8(Adapter,REG_RD_CTRL,0xFF);
+       rtw_write16(Adapter, REG_RD_NAV_NXT, 0x200);
+       rtw_write8(Adapter,REG_RD_RESP_PKT_TH,0x05);
+}
+
+static VOID
+_InitRxSetting(
+       IN      PADAPTER Adapter
+       )
+{
+       rtw_write32(Adapter, REG_MACID, 0x87654321);
+       rtw_write32(Adapter, 0x0700, 0x87654321);
+}
+
+static VOID
+_InitRetryFunction(
+       IN  PADAPTER Adapter
+       )
+{
+       u8      value8;
+
+       value8 = rtw_read8(Adapter, REG_FWHW_TXQ_CTRL);
+       value8 |= EN_AMPDU_RTY_NEW;
+       rtw_write8(Adapter, REG_FWHW_TXQ_CTRL, value8);
+
+       // Set ACK timeout
+       rtw_write8(Adapter, REG_ACKTO, 0x40);
+}
+
+/*-----------------------------------------------------------------------------
+ * Function:   usb_AggSettingTxUpdate()
+ *
+ * Overview:   Seperate TX/RX parameters update independent for TP detection and
+ *                     dynamic TX/RX aggreagtion parameters update.
+ *
+ * Input:                      PADAPTER
+ *
+ * Output/Return:      NONE
+ *
+ * Revised History:
+ *     When            Who             Remark
+ *     12/10/2010      MHC             Seperate to smaller function.
+ *
+ *---------------------------------------------------------------------------*/
+static VOID
+usb_AggSettingTxUpdate(
+       IN      PADAPTER                        Adapter
+       )
+{
+#ifdef CONFIG_USB_TX_AGGREGATION
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       //PMGNT_INFO            pMgntInfo = &(Adapter->MgntInfo);
+       u32                     value32;
+
+       if(Adapter->registrypriv.wifi_spec)
+               pHalData->UsbTxAggMode = _FALSE;
+
+       if(pHalData->UsbTxAggMode){
+               value32 = rtw_read32(Adapter, REG_TDECTRL);
+               value32 = value32 & ~(BLK_DESC_NUM_MASK << BLK_DESC_NUM_SHIFT);
+               value32 |= ((pHalData->UsbTxAggDescNum & BLK_DESC_NUM_MASK) << BLK_DESC_NUM_SHIFT);
+
+               rtw_write32(Adapter, REG_TDECTRL, value32);
+       }
+
+#endif
+}      // usb_AggSettingTxUpdate
+
+
+/*-----------------------------------------------------------------------------
+ * Function:   usb_AggSettingRxUpdate()
+ *
+ * Overview:   Seperate TX/RX parameters update independent for TP detection and
+ *                     dynamic TX/RX aggreagtion parameters update.
+ *
+ * Input:                      PADAPTER
+ *
+ * Output/Return:      NONE
+ *
+ * Revised History:
+ *     When            Who             Remark
+ *     12/10/2010      MHC             Seperate to smaller function.
+ *
+ *---------------------------------------------------------------------------*/
+static VOID
+usb_AggSettingRxUpdate(
+       IN      PADAPTER                        Adapter
+       )
+{
+#ifdef CONFIG_USB_RX_AGGREGATION
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       //PMGNT_INFO            pMgntInfo = &(Adapter->MgntInfo);
+       u8                      valueDMA;
+       u8                      valueUSB;
+
+       valueDMA = rtw_read8(Adapter, REG_TRXDMA_CTRL);
+       valueUSB = rtw_read8(Adapter, REG_USB_SPECIAL_OPTION);
+
+       switch(pHalData->UsbRxAggMode)
+       {
+               case USB_RX_AGG_DMA:
+                       valueDMA |= RXDMA_AGG_EN;
+                       valueUSB &= ~USB_AGG_EN;
+                       break;
+               case USB_RX_AGG_USB:
+                       valueDMA &= ~RXDMA_AGG_EN;
+                       valueUSB |= USB_AGG_EN;
+                       break;
+               case USB_RX_AGG_MIX:
+                       valueDMA |= RXDMA_AGG_EN;
+                       valueUSB |= USB_AGG_EN;
+                       break;
+               case USB_RX_AGG_DISABLE:
+               default:
+                       valueDMA &= ~RXDMA_AGG_EN;
+                       valueUSB &= ~USB_AGG_EN;
+                       break;
+       }
+
+       rtw_write8(Adapter, REG_TRXDMA_CTRL, valueDMA);
+       rtw_write8(Adapter, REG_USB_SPECIAL_OPTION, valueUSB);
+
+       switch(pHalData->UsbRxAggMode)
+       {
+               case USB_RX_AGG_DMA:
+                       rtw_write8(Adapter, REG_RXDMA_AGG_PG_TH, pHalData->UsbRxAggPageCount);
+                       rtw_write8(Adapter, REG_USB_DMA_AGG_TO, pHalData->UsbRxAggPageTimeout);
+                       break;
+               case USB_RX_AGG_USB:
+                       rtw_write8(Adapter, REG_USB_AGG_TH, pHalData->UsbRxAggBlockCount);
+                       rtw_write8(Adapter, REG_USB_AGG_TO, pHalData->UsbRxAggBlockTimeout);
+                       break;
+               case USB_RX_AGG_MIX:
+                       rtw_write8(Adapter, REG_RXDMA_AGG_PG_TH, pHalData->UsbRxAggPageCount);
+                       rtw_write8(Adapter, REG_USB_DMA_AGG_TO, pHalData->UsbRxAggPageTimeout);
+                       rtw_write8(Adapter, REG_USB_AGG_TH, pHalData->UsbRxAggBlockCount);
+                       rtw_write8(Adapter, REG_USB_AGG_TO, pHalData->UsbRxAggBlockTimeout);
+                       break;
+               case USB_RX_AGG_DISABLE:
+               default:
+                       // TODO:
+                       break;
+       }
+
+       switch(PBP_128)
+       {
+               case PBP_128:
+                       pHalData->HwRxPageSize = 128;
+                       break;
+               case PBP_64:
+                       pHalData->HwRxPageSize = 64;
+                       break;
+               case PBP_256:
+                       pHalData->HwRxPageSize = 256;
+                       break;
+               case PBP_512:
+                       pHalData->HwRxPageSize = 512;
+                       break;
+               case PBP_1024:
+                       pHalData->HwRxPageSize = 1024;
+                       break;
+               default:
+                       //RT_ASSERT(FALSE, ("RX_PAGE_SIZE_REG_VALUE definition is incorrect!\n"));
+                       break;
+       }
+#endif
+}      // usb_AggSettingRxUpdate
+
+static VOID
+InitUsbAggregationSetting(
+       IN  PADAPTER Adapter
+       )
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+
+       // Tx aggregation setting
+       usb_AggSettingTxUpdate(Adapter);
+
+       // Rx aggregation setting
+       usb_AggSettingRxUpdate(Adapter);
+
+       // 201/12/10 MH Add for USB agg mode dynamic switch.
+       pHalData->UsbRxHighSpeedMode = _FALSE;
+}
+
+/*-----------------------------------------------------------------------------
+ * Function:   USB_AggModeSwitch()
+ *
+ * Overview:   When RX traffic is more than 40M, we need to adjust some parameters to increase
+ *                     RX speed by increasing batch indication size. This will decrease TCP ACK speed, we
+ *                     need to monitor the influence of FTP/network share.
+ *                     For TX mode, we are still ubder investigation.
+ *
+ * Input:              PADAPTER
+ *
+ * Output:             NONE
+ *
+ * Return:             NONE
+ *
+ * Revised History:
+ *     When            Who             Remark
+ *     12/10/2010      MHC             Create Version 0.
+ *
+ *---------------------------------------------------------------------------*/
+VOID
+USB_AggModeSwitch(
+       IN      PADAPTER                        Adapter
+       )
+{
+#if 0
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       struct mlme_priv        *pmlmepriv = &(Adapter->mlmepriv);
+
+       //pHalData->UsbRxHighSpeedMode = FALSE;
+       // How to measure the RX speed? We assume that when traffic is more than
+       if (pMgntInfo->bRegAggDMEnable == _FALSE)
+       {
+               return; // Inf not support.
+       }
+
+
+       if (pmlmepriv->LinkDetectInfo.bHigherBusyTraffic == _TRUE &&
+               pHalData->UsbRxHighSpeedMode == _FALSE)
+       {
+               pHalData->UsbRxHighSpeedMode = _TRUE;
+               DBG_8192C("UsbAggModeSwitchCheck to HIGH\n");
+       }
+       else if (pmlmepriv->LinkDetectInfo.bHigherBusyTraffic == _FALSE &&
+               pHalData->UsbRxHighSpeedMode == _TRUE)
+       {
+               pHalData->UsbRxHighSpeedMode = _FALSE;
+               DBG_8192C("UsbAggModeSwitchCheck to LOW\n");
+       }
+       else
+       {
+               return;
+       }
+
+       // 2010/12/10 MH Add for USB Aggregation judgement we need to
+       //if( pMgntInfo->LinkDetectInfo.NumRxOkInPeriod > 4000 ||
+               //                      pMgntInfo->LinkDetectInfo.NumTxOkInPeriod > 4000 )
+
+#ifdef CONFIG_USB_TX_AGGREGATION
+       //usb_AggSettingTxUpdate(Adapter);
+#endif
+
+#ifdef CONFIG_USB_RX_AGGREGATION
+       if (pHalData->UsbRxHighSpeedMode == _TRUE)
+       {
+               // 2010/12/10 MH The parameter is tested by SD1 engineer and SD3 channel emulator.
+               // USB mode
+               pHalData->UsbRxAggBlockCount            = 40;
+               pHalData->UsbRxAggBlockTimeout  = 5;
+               // Mix mode
+               pHalData->UsbRxAggPageCount             = 72;
+               pHalData->UsbRxAggPageTimeout   = 6;
+       }
+       else
+       {
+               // USB mode
+               pHalData->UsbRxAggBlockCount            = pMgntInfo->RegUsbRxAggBlockCount;
+               pHalData->UsbRxAggBlockTimeout  = pMgntInfo->RegUsbRxAggBlockTimeout;
+               // Mix mode
+               pHalData->UsbRxAggPageCount             = pMgntInfo->RegUsbRxAggPageCount;
+               pHalData->UsbRxAggPageTimeout   = pMgntInfo->RegUsbRxAggPageTimeout;
+       }
+#endif
+#endif
+}      // USB_AggModeSwitch
+
+static VOID
+_InitOperationMode(
+       IN      PADAPTER                        Adapter
+       )
+{
+#if 0//gtest
+       PHAL_DATA_8192CUSB      pHalData = GetHalData8192CUsb(Adapter);
+       u1Byte                          regBwOpMode = 0;
+       u4Byte                          regRATR = 0, regRRSR = 0;
+
+
+       //1 This part need to modified according to the rate set we filtered!!
+       //
+       // Set RRSR, RATR, and REG_BWOPMODE registers
+       //
+       switch(Adapter->RegWirelessMode)
+       {
+               case WIRELESS_MODE_B:
+                       regBwOpMode = BW_OPMODE_20MHZ;
+                       regRATR = RATE_ALL_CCK;
+                       regRRSR = RATE_ALL_CCK;
+                       break;
+               case WIRELESS_MODE_A:
+                       ASSERT(FALSE);
+#if 0
+                       regBwOpMode = BW_OPMODE_5G |BW_OPMODE_20MHZ;
+                       regRATR = RATE_ALL_OFDM_AG;
+                       regRRSR = RATE_ALL_OFDM_AG;
+#endif
+                       break;
+               case WIRELESS_MODE_G:
+                       regBwOpMode = BW_OPMODE_20MHZ;
+                       regRATR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
+                       regRRSR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
+                       break;
+               case WIRELESS_MODE_AUTO:
+                       if (Adapter->bInHctTest)
+                       {
+                           regBwOpMode = BW_OPMODE_20MHZ;
+                           regRATR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
+                           regRRSR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
+                       }
+                       else
+                       {
+                           regBwOpMode = BW_OPMODE_20MHZ;
+                           regRATR = RATE_ALL_CCK | RATE_ALL_OFDM_AG | RATE_ALL_OFDM_1SS | RATE_ALL_OFDM_2SS;
+                           regRRSR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
+                       }
+                       break;
+               case WIRELESS_MODE_N_24G:
+                       // It support CCK rate by default.
+                       // CCK rate will be filtered out only when associated AP does not support it.
+                       regBwOpMode = BW_OPMODE_20MHZ;
+                               regRATR = RATE_ALL_CCK | RATE_ALL_OFDM_AG | RATE_ALL_OFDM_1SS | RATE_ALL_OFDM_2SS;
+                               regRRSR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
+                       break;
+               case WIRELESS_MODE_N_5G:
+                       ASSERT(FALSE);
+#if 0
+                       regBwOpMode = BW_OPMODE_5G;
+                       regRATR = RATE_ALL_OFDM_AG | RATE_ALL_OFDM_1SS | RATE_ALL_OFDM_2SS;
+                       regRRSR = RATE_ALL_OFDM_AG;
+#endif
+                       break;
+       }
+
+       // Ziv ????????
+       //PlatformEFIOWrite4Byte(Adapter, REG_INIRTS_RATE_SEL, regRRSR);
+       PlatformEFIOWrite1Byte(Adapter, REG_BWOPMODE, regBwOpMode);
+
+       // For Min Spacing configuration.
+       switch(pHalData->RF_Type)
+       {
+               case RF_1T2R:
+               case RF_1T1R:
+                       RT_TRACE(COMP_INIT, DBG_LOUD, ("Initializeadapter: RF_Type%s\n", (pHalData->RF_Type==RF_1T1R? "(1T1R)":"(1T2R)")));
+                       Adapter->MgntInfo.MinSpaceCfg = (MAX_MSS_DENSITY_1T<<3);
+                       break;
+               case RF_2T2R:
+               case RF_2T2R_GREEN:
+                       RT_TRACE(COMP_INIT, DBG_LOUD, ("Initializeadapter:RF_Type(2T2R)\n"));
+                       Adapter->MgntInfo.MinSpaceCfg = (MAX_MSS_DENSITY_2T<<3);
+                       break;
+       }
+
+       PlatformEFIOWrite1Byte(Adapter, REG_AMPDU_MIN_SPACE, Adapter->MgntInfo.MinSpaceCfg);
+#endif
+}
+
+
+ static VOID
+_InitBeaconParameters(
+       IN  PADAPTER Adapter
+       )
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+
+       rtw_write16(Adapter, REG_BCN_CTRL, 0x1010);
+
+       // TODO: Remove these magic number
+       rtw_write16(Adapter, REG_TBTT_PROHIBIT,0x6404);// ms
+
+       rtw_write8(Adapter, REG_DRVERLYINT, DRIVER_EARLY_INT_TIME);// 5ms
+       rtw_write8(Adapter, REG_BCNDMATIM, BCN_DMA_ATIME_INT_TIME); // 2ms
+
+       // Suggested by designer timchen. Change beacon AIFS to the largest number
+       // beacause test chip does not contension before sending beacon. by tynli. 2009.11.03
+       rtw_write16(Adapter, REG_BCNTCFG, 0x660F);
+}
+
+static VOID
+_InitRFType(
+       IN      PADAPTER Adapter
+       )
+{
+       struct registry_priv     *pregpriv = &Adapter->registrypriv;
+       HAL_DATA_TYPE   *pHalData       = GET_HAL_DATA(Adapter);
+       BOOLEAN                 is92CU          = IS_92C_SERIAL(pHalData->VersionID);
+
+#if    DISABLE_BB_RF
+       pHalData->rf_chip       = RF_PSEUDO_11N;
+       return;
+#endif
+
+       pHalData->rf_chip       = RF_6052;
+
+       if(_FALSE == is92CU){
+               pHalData->rf_type = RF_1T1R;
+               DBG_8192C("Set RF Chip ID to RF_6052 and RF type to 1T1R.\n");
+               return;
+       }
+
+       // TODO: Consider that EEPROM set 92CU to 1T1R later.
+       // Force to overwrite setting according to chip version. Ignore EEPROM setting.
+       //pHalData->RF_Type = is92CU ? RF_2T2R : RF_1T1R;
+       MSG_8192C("Set RF Chip ID to RF_6052 and RF type to %d.\n", pHalData->rf_type);
+
+}
+
+static VOID _InitAdhocWorkaroundParams(IN PADAPTER Adapter)
+{
+#if RTL8192CU_ADHOC_WORKAROUND_SETTING
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       pHalData->RegBcnCtrlVal = rtw_read8(Adapter, REG_BCN_CTRL);
+       pHalData->RegTxPause = rtw_read8(Adapter, REG_TXPAUSE);
+       pHalData->RegFwHwTxQCtrl = rtw_read8(Adapter, REG_FWHW_TXQ_CTRL+2);
+       pHalData->RegReg542 = rtw_read8(Adapter, REG_TBTT_PROHIBIT+2);
+#endif
+}
+
+static VOID
+_BeaconFunctionEnable(
+       IN      PADAPTER                Adapter,
+       IN      BOOLEAN                 Enable,
+       IN      BOOLEAN                 Linked
+       )
+{
+       rtw_write8(Adapter, REG_BCN_CTRL, (BIT4 | BIT3 | BIT1));
+       //SetBcnCtrlReg(Adapter, (BIT4 | BIT3 | BIT1), 0x00);
+       //RT_TRACE(COMP_BEACON, DBG_LOUD, ("_BeaconFunctionEnable 0x550 0x%x\n", PlatformEFIORead1Byte(Adapter, 0x550)));
+
+       rtw_write8(Adapter, REG_RD_CTRL+1, 0x6F);
+}
+
+
+// Set CCK and OFDM Block "ON"
+static VOID _BBTurnOnBlock(
+       IN      PADAPTER                Adapter
+       )
+{
+#if (DISABLE_BB_RF)
+       return;
+#endif
+
+       PHY_SetBBReg(Adapter, rFPGA0_RFMOD, bCCKEn, 0x1);
+       PHY_SetBBReg(Adapter, rFPGA0_RFMOD, bOFDMEn, 0x1);
+}
+
+static VOID _RfPowerSave(
+       IN      PADAPTER                Adapter
+       )
+{
+#if 0
+       HAL_DATA_TYPE   *pHalData       = GET_HAL_DATA(Adapter);
+       PMGNT_INFO              pMgntInfo       = &(Adapter->MgntInfo);
+       u1Byte                  eRFPath;
+
+#if (DISABLE_BB_RF)
+       return;
+#endif
+
+       if(pMgntInfo->RegRfOff == TRUE){ // User disable RF via registry.
+               RT_TRACE((COMP_INIT|COMP_RF), DBG_LOUD, ("InitializeAdapter8192CUsb(): Turn off RF for RegRfOff.\n"));
+               MgntActSet_RF_State(Adapter, eRfOff, RF_CHANGE_BY_SW);
+               // Those action will be discard in MgntActSet_RF_State because off the same state
+               for(eRFPath = 0; eRFPath <pHalData->NumTotalRFPath; eRFPath++)
+                       PHY_SetRFReg(Adapter, (RF_RADIO_PATH_E)eRFPath, 0x4, 0xC00, 0x0);
+       }
+       else if(pMgntInfo->RfOffReason > RF_CHANGE_BY_PS){ // H/W or S/W RF OFF before sleep.
+               RT_TRACE((COMP_INIT|COMP_RF), DBG_LOUD, ("InitializeAdapter8192CUsb(): Turn off RF for RfOffReason(%ld).\n", pMgntInfo->RfOffReason));
+               MgntActSet_RF_State(Adapter, eRfOff, pMgntInfo->RfOffReason);
+       }
+       else{
+               pHalData->eRFPowerState = eRfOn;
+               pMgntInfo->RfOffReason = 0;
+               if(Adapter->bInSetPower || Adapter->bResetInProgress)
+                       PlatformUsbEnableInPipes(Adapter);
+               RT_TRACE((COMP_INIT|COMP_RF), DBG_LOUD, ("InitializeAdapter8192CUsb(): RF is on.\n"));
+       }
+#endif
+}
+
+enum {
+       Antenna_Lfet = 1,
+       Antenna_Right = 2,
+};
+
+static VOID
+_InitAntenna_Selection(IN      PADAPTER Adapter)
+{
+
+       HAL_DATA_TYPE   *pHalData       = GET_HAL_DATA(Adapter);
+
+       if(pHalData->AntDivCfg==0)
+               return;
+       DBG_8192C("==>  %s ....\n",__FUNCTION__);
+
+       if((RF_1T1R == pHalData->rf_type))
+       {
+               rtw_write32(Adapter, REG_LEDCFG0, rtw_read32(Adapter, REG_LEDCFG0)|BIT23);
+               PHY_SetBBReg(Adapter, rFPGA0_XAB_RFParameter, BIT13, 0x01);
+
+               if(PHY_QueryBBReg(Adapter, rFPGA0_XA_RFInterfaceOE, 0x300) == Antenna_A)
+                       pHalData->CurAntenna = Antenna_A;
+               else
+                       pHalData->CurAntenna = Antenna_B;
+               DBG_8192C("%s,Cur_ant:(%x)%s\n",__FUNCTION__,pHalData->CurAntenna,(pHalData->CurAntenna == Antenna_A)?"Antenna_A":"Antenna_B");
+
+}
+
+
+}
+//
+// 2010/08/09 MH Add for power down check.
+//
+static BOOLEAN
+HalDetectPwrDownMode(
+       IN PADAPTER                             Adapter
+       )
+{
+       u8      tmpvalue;
+       HAL_DATA_TYPE           *pHalData       = GET_HAL_DATA(Adapter);
+       struct pwrctrl_priv             *pwrctrlpriv = &Adapter->pwrctrlpriv;
+
+       EFUSE_ShadowRead(Adapter, 1, EEPROM_RF_OPT3, (u32 *)&tmpvalue);
+
+       // 2010/08/25 MH INF priority > PDN Efuse value.
+       if(tmpvalue & BIT4 && pwrctrlpriv->reg_pdnmode)
+       {
+               pHalData->pwrdown = _TRUE;
+       }
+       else
+       {
+               pHalData->pwrdown = _FALSE;
+       }
+
+       DBG_8192C("HalDetectPwrDownMode(): PDN=%d\n", pHalData->pwrdown);
+       return pHalData->pwrdown;
+
+}      // HalDetectPwrDownMode
+
+
+//
+// 2010/08/26 MH Add for selective suspend mode check.
+// If Efuse 0x0e bit1 is not enabled, we can not support selective suspend for Minicard and
+// slim card.
+//
+static VOID
+HalDetectSelectiveSuspendMode(
+       IN PADAPTER                             Adapter
+       )
+{
+       u8      tmpvalue;
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       struct dvobj_priv       *pdvobjpriv = adapter_to_dvobj(Adapter);
+
+       // If support HW radio detect, we need to enable WOL ability, otherwise, we
+       // can not use FW to notify host the power state switch.
+
+       EFUSE_ShadowRead(Adapter, 1, EEPROM_USB_OPTIONAL1, (u32 *)&tmpvalue);
+
+       DBG_8192C("HalDetectSelectiveSuspendMode(): SS ");
+       if(tmpvalue & BIT1)
+       {
+               DBG_8192C("Enable\n");
+       }
+       else
+       {
+               DBG_8192C("Disable\n");
+               pdvobjpriv->RegUsbSS = _FALSE;
+       }
+
+       // 2010/09/01 MH According to Dongle Selective Suspend INF. We can switch SS mode.
+       if (pdvobjpriv->RegUsbSS && !SUPPORT_HW_RADIO_DETECT(pHalData))
+       {
+               //PMGNT_INFO                            pMgntInfo = &(Adapter->MgntInfo);
+
+               //if (!pMgntInfo->bRegDongleSS)
+               //{
+               //      RT_TRACE(COMP_INIT, DBG_LOUD, ("Dongle disable SS\n"));
+                       pdvobjpriv->RegUsbSS = _FALSE;
+               //}
+       }
+}      // HalDetectSelectiveSuspendMode
+/*-----------------------------------------------------------------------------
+ * Function:   HwSuspendModeEnable92Cu()
+ *
+ * Overview:   HW suspend mode switch.
+ *
+ * Input:              NONE
+ *
+ * Output:     NONE
+ *
+ * Return:     NONE
+ *
+ * Revised History:
+ *     When            Who             Remark
+ *     08/23/2010      MHC             HW suspend mode switch test..
+ *---------------------------------------------------------------------------*/
+static VOID
+HwSuspendModeEnable92Cu(
+       IN      PADAPTER        pAdapter,
+       IN      u8                      Type
+       )
+{
+       //PRT_USB_DEVICE                pDevice = GET_RT_USB_DEVICE(pAdapter);
+       u16     reg = rtw_read16(pAdapter, REG_GPIO_MUXCFG);
+
+       //if (!pDevice->RegUsbSS)
+       {
+               return;
+       }
+
+       //
+       // 2010/08/23 MH According to Alfred's suggestion, we need to to prevent HW
+       // to enter suspend mode automatically. Otherwise, it will shut down major power
+       // domain and 8051 will stop. When we try to enter selective suspend mode, we
+       // need to prevent HW to enter D2 mode aumotmatically. Another way, Host will
+       // issue a S10 signal to power domain. Then it will cleat SIC setting(from Yngli).
+       // We need to enable HW suspend mode when enter S3/S4 or disable. We need
+       // to disable HW suspend mode for IPS/radio_off.
+       //
+       //RT_TRACE(COMP_RF, DBG_LOUD, ("HwSuspendModeEnable92Cu = %d\n", Type));
+       if (Type == _FALSE)
+       {
+               reg |= BIT14;
+               //RT_TRACE(COMP_RF, DBG_LOUD, ("REG_GPIO_MUXCFG = %x\n", reg));
+               rtw_write16(pAdapter, REG_GPIO_MUXCFG, reg);
+               reg |= BIT12;
+               //RT_TRACE(COMP_RF, DBG_LOUD, ("REG_GPIO_MUXCFG = %x\n", reg));
+               rtw_write16(pAdapter, REG_GPIO_MUXCFG, reg);
+       }
+       else
+       {
+               reg &= (~BIT12);
+               rtw_write16(pAdapter, REG_GPIO_MUXCFG, reg);
+               reg &= (~BIT14);
+               rtw_write16(pAdapter, REG_GPIO_MUXCFG, reg);
+       }
+
+}      // HwSuspendModeEnable92Cu
+rt_rf_power_state RfOnOffDetect(IN     PADAPTER pAdapter )
+{
+       HAL_DATA_TYPE           *pHalData = GET_HAL_DATA(pAdapter);
+       u8      val8;
+       rt_rf_power_state rfpowerstate = rf_off;
+
+       if(pAdapter->pwrctrlpriv.bHWPowerdown)
+       {
+               val8 = rtw_read8(pAdapter, REG_HSISR);
+               DBG_8192C("pwrdown, 0x5c(BIT7)=%02x\n", val8);
+               rfpowerstate = (val8 & BIT7) ? rf_off: rf_on;
+       }
+       else // rf on/off
+       {
+               rtw_write8(     pAdapter, REG_MAC_PINMUX_CFG,rtw_read8(pAdapter, REG_MAC_PINMUX_CFG)&~(BIT3));
+               val8 = rtw_read8(pAdapter, REG_GPIO_IO_SEL);
+               DBG_8192C("GPIO_IN=%02x\n", val8);
+               rfpowerstate = (val8 & BIT3) ? rf_on : rf_off;
+       }
+       return rfpowerstate;
+}      // HalDetectPwrDownMode
+
+void _ps_open_RF(_adapter *padapter);
+
+
+u32 rtl8192cu_hal_init(PADAPTER Adapter)
+{
+       u8      val8 = 0;
+       u32     boundary, status = _SUCCESS;
+       HAL_DATA_TYPE           *pHalData = GET_HAL_DATA(Adapter);
+       struct pwrctrl_priv             *pwrctrlpriv = &Adapter->pwrctrlpriv;
+       struct registry_priv    *pregistrypriv = &Adapter->registrypriv;
+       u8      is92C = IS_92C_SERIAL(pHalData->VersionID);
+       rt_rf_power_state               eRfPowerStateToSet;
+#ifdef CONFIG_BT_COEXIST
+       struct btcoexist_priv   *pbtpriv = &(pHalData->bt_coexist);
+#endif
+
+       u32 init_start_time = rtw_get_current_time();
+
+
+#ifdef DBG_HAL_INIT_PROFILING
+
+       enum HAL_INIT_STAGES {
+               HAL_INIT_STAGES_BEGIN = 0,
+               HAL_INIT_STAGES_INIT_PW_ON,
+               HAL_INIT_STAGES_MISC01,
+               HAL_INIT_STAGES_DOWNLOAD_FW,
+               HAL_INIT_STAGES_INIT_LLTT,
+               HAL_INIT_STAGES_MAC,
+               HAL_INIT_STAGES_MISC02,
+               HAL_INIT_STAGES_BB,
+               HAL_INIT_STAGES_RF,
+               HAL_INIT_STAGES_TURN_ON_BLOCK,
+               HAL_INIT_STAGES_INIT_SECURITY,
+               HAL_INIT_STAGES_MISC11,
+               //HAL_INIT_STAGES_RF_PS,
+               HAL_INIT_STAGES_IQK,
+               HAL_INIT_STAGES_PW_TRACK,
+               HAL_INIT_STAGES_LCK,
+               HAL_INIT_STAGES_MISC21,
+               HAL_INIT_STAGES_INIT_PABIAS,
+               HAL_INIT_STAGES_BT_COEXIST,
+               //HAL_INIT_STAGES_ANTENNA_SEL,
+               HAL_INIT_STAGES_INIT_HAL_DM,
+               HAL_INIT_STAGES_MISC31,
+               HAL_INIT_STAGES_END,
+               HAL_INIT_STAGES_NUM
+       };
+
+       char * hal_init_stages_str[] = {
+               "HAL_INIT_STAGES_BEGIN",
+               "HAL_INIT_STAGES_INIT_PW_ON",
+               "HAL_INIT_STAGES_MISC01",
+               "HAL_INIT_STAGES_DOWNLOAD_FW",
+               "HAL_INIT_STAGES_INIT_LLTT",
+               "HAL_INIT_STAGES_MAC",
+               "HAL_INIT_STAGES_MISC02",
+               "HAL_INIT_STAGES_BB",
+               "HAL_INIT_STAGES_RF",
+               "HAL_INIT_STAGES_TURN_ON_BLOCK",
+               "HAL_INIT_STAGES_INIT_SECURITY",
+               "HAL_INIT_STAGES_MISC11",
+               //"HAL_INIT_STAGES_RF_PS",
+               "HAL_INIT_STAGES_IQK",
+               "HAL_INIT_STAGES_PW_TRACK",
+               "HAL_INIT_STAGES_LCK",
+               "HAL_INIT_STAGES_MISC21",
+               "HAL_INIT_STAGES_INIT_PABIAS",
+               "HAL_INIT_STAGES_BT_COEXIST",
+               //"HAL_INIT_STAGES_ANTENNA_SEL",
+               "HAL_INIT_STAGES_INIT_HAL_DM",
+               "HAL_INIT_STAGES_MISC31",
+               "HAL_INIT_STAGES_END",
+       };
+
+       int hal_init_profiling_i;
+       u32 hal_init_stages_timestamp[HAL_INIT_STAGES_NUM]; //used to record the time of each stage's starting point
+
+       for(hal_init_profiling_i=0;hal_init_profiling_i<HAL_INIT_STAGES_NUM;hal_init_profiling_i++)
+               hal_init_stages_timestamp[hal_init_profiling_i]=0;
+
+       #define HAL_INIT_PROFILE_TAG(stage) hal_init_stages_timestamp[(stage)]=rtw_get_current_time();
+#else
+       #define HAL_INIT_PROFILE_TAG(stage) do {} while(0)
+#endif //DBG_HAL_INIT_PROFILING
+
+
+
+_func_enter_;
+
+HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_BEGIN);
+       if(Adapter->pwrctrlpriv.bkeepfwalive)
+       {
+               _ps_open_RF(Adapter);
+
+               if(pHalData->bIQKInitialized ){
+                       rtl8192c_PHY_IQCalibrate(Adapter,_TRUE);
+               }
+               else{
+                       rtl8192c_PHY_IQCalibrate(Adapter,_FALSE);
+                       pHalData->bIQKInitialized = _TRUE;
+               }
+               rtl8192c_dm_CheckTXPowerTracking(Adapter);
+               rtl8192c_PHY_LCCalibrate(Adapter);
+
+               goto exit;
+       }
+
+HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_INIT_PW_ON);
+       status = _InitPowerOn(Adapter);
+       if(status == _FAIL){
+               RT_TRACE(_module_hci_hal_init_c_, _drv_err_, ("Failed to init power on!\n"));
+               goto exit;
+       }
+
+
+HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_MISC01);
+       _InitQueueReservedPage(Adapter);
+       _InitTxBufferBoundary(Adapter);
+       _InitQueuePriority(Adapter);
+       _InitPageBoundary(Adapter);
+       _InitTransferPageSize(Adapter);
+
+
+#if ENABLE_USB_DROP_INCORRECT_OUT
+       _InitHardwareDropIncorrectBulkOut(Adapter);
+#endif
+
+       if(pHalData->bRDGEnable){
+               _InitRDGSetting(Adapter);
+       }
+
+HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_DOWNLOAD_FW);
+#if (1 == MP_DRIVER)
+       _InitRxSetting(Adapter);
+       // Don't Download Firmware
+       Adapter->bFWReady = _FALSE;
+#elif RTL8192CU_FW_DOWNLOAD_ENABLE
+       status = FirmwareDownload92C(Adapter,_FALSE);
+       if(status != _SUCCESS)
+       {
+               Adapter->bFWReady = _FALSE;
+               pHalData->fw_ractrl = _FALSE;
+               DBG_8192C("fw download fail!\n");
+               goto exit;
+       }
+       else
+       {
+               Adapter->bFWReady = _TRUE;
+               pHalData->fw_ractrl = _TRUE;
+               DBG_8192C("fw download ok!\n");
+       }
+#endif
+
+       InitializeFirmwareVars92C(Adapter);
+
+       if(pwrctrlpriv->reg_rfoff == _TRUE){
+               pwrctrlpriv->rf_pwrstate = rf_off;
+       }
+
+       // 2010/08/09 MH We need to check if we need to turnon or off RF after detecting
+       // HW GPIO pin. Before PHY_RFConfig8192C.
+       //HalDetectPwrDownMode(Adapter);
+       // 2010/08/26 MH If Efuse does not support sective suspend then disable the function.
+       //HalDetectSelectiveSuspendMode(Adapter);
+
+       // Set RF type for BB/RF configuration
+       _InitRFType(Adapter);//->_ReadRFType()
+
+       // Save target channel
+       // <Roger_Notes> Current Channel will be updated again later.
+       pHalData->CurrentChannel = 6;//default set to 6
+
+HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_INIT_LLTT);
+       if(!pregistrypriv->wifi_spec){
+               boundary = TX_PAGE_BOUNDARY;
+       }
+       else{// for WMM
+               boundary = WMM_NORMAL_TX_PAGE_BOUNDARY;
+       }
+       status =  InitLLTTable(Adapter, boundary);
+       if(status == _FAIL){
+               RT_TRACE(_module_hci_hal_init_c_, _drv_err_, ("Failed to init LLT table\n"));
+               goto exit;
+       }
+
+HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_MAC);
+#if (HAL_MAC_ENABLE == 1)
+       status = PHY_MACConfig8192C(Adapter);
+       if(status == _FAIL)
+       {
+               goto exit;
+       }
+#endif
+
+HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_MISC02);
+       // Get Rx PHY status in order to report RSSI and others.
+       _InitDriverInfoSize(Adapter, DRVINFO_SZ);
+
+       _InitInterrupt(Adapter);
+       hal_init_macaddr(Adapter);//set mac_address
+       _InitNetworkType(Adapter);//set msr
+       _InitWMACSetting(Adapter);
+       _InitAdaptiveCtrl(Adapter);
+       _InitEDCA(Adapter);
+       _InitRateFallback(Adapter);
+       _InitRetryFunction(Adapter);
+       InitUsbAggregationSetting(Adapter);
+       _InitOperationMode(Adapter);//todo
+       _InitBeaconParameters(Adapter);
+       _InitBeaconMaxError(Adapter, _TRUE);
+
+#if defined(CONFIG_CONCURRENT_MODE) || defined(CONFIG_TX_MCAST2UNI)
+
+#ifdef CONFIG_CHECK_AC_LIFETIME
+       // Enable lifetime check for the four ACs
+       rtw_write8(Adapter, REG_LIFETIME_EN, 0x0F);
+#endif // CONFIG_CHECK_AC_LIFETIME
+
+#ifdef CONFIG_TX_MCAST2UNI
+       rtw_write16(Adapter, REG_PKT_VO_VI_LIFE_TIME, 0x0400);  // unit: 256us. 256ms
+       rtw_write16(Adapter, REG_PKT_BE_BK_LIFE_TIME, 0x0400);  // unit: 256us. 256ms
+#else  // CONFIG_TX_MCAST2UNI
+       rtw_write16(Adapter, REG_PKT_VO_VI_LIFE_TIME, 0x3000);  // unit: 256us. 3s
+       rtw_write16(Adapter, REG_PKT_BE_BK_LIFE_TIME, 0x3000);  // unit: 256us. 3s
+#endif // CONFIG_TX_MCAST2UNI
+#endif // CONFIG_CONCURRENT_MODE || CONFIG_TX_MCAST2UNI
+
+
+#ifdef CONFIG_LED
+       _InitHWLed(Adapter);
+#endif //CONFIG_LED
+
+       //
+       //d. Initialize BB related configurations.
+       //
+
+HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_BB);
+#if (HAL_BB_ENABLE == 1)
+       status = PHY_BBConfig8192C(Adapter);
+       if(status == _FAIL)
+       {
+               goto exit;
+       }
+#endif
+
+       // 92CU use 3-wire to r/w RF
+       //pHalData->Rf_Mode = RF_OP_By_SW_3wire;
+
+HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_RF);
+#if (HAL_RF_ENABLE == 1)
+       status = PHY_RFConfig8192C(Adapter);
+       if(status == _FAIL)
+       {
+               goto exit;
+       }
+
+       if(IS_VENDOR_UMC_A_CUT(pHalData->VersionID) && !IS_92C_SERIAL(pHalData->VersionID))
+       {
+               PHY_SetRFReg(Adapter, RF_PATH_A, RF_RX_G1, bMaskDWord, 0x30255);
+               PHY_SetRFReg(Adapter, RF_PATH_A, RF_RX_G2, bMaskDWord, 0x50a00);
+       }
+#endif
+
+       //
+       // Joseph Note: Keep RfRegChnlVal for later use.
+       //
+       pHalData->RfRegChnlVal[0] = PHY_QueryRFReg(Adapter, (RF_RADIO_PATH_E)0, RF_CHNLBW, bRFRegOffsetMask);
+       pHalData->RfRegChnlVal[1] = PHY_QueryRFReg(Adapter, (RF_RADIO_PATH_E)1, RF_CHNLBW, bRFRegOffsetMask);
+
+HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_TURN_ON_BLOCK);
+       _BBTurnOnBlock(Adapter);
+       //NicIFSetMacAddress(padapter, padapter->PermanentAddress);
+
+HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_INIT_SECURITY);
+       invalidate_cam_all(Adapter);
+
+HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_MISC11);
+       // 2010/12/17 MH We need to set TX power according to EFUSE content at first.
+       PHY_SetTxPowerLevel8192C(Adapter, pHalData->CurrentChannel);
+
+// Move by Neo for USB SS to below setp
+//_RfPowerSave(Adapter);
+
+       if (!IS_92C_SERIAL( pHalData->VersionID) && (pHalData->AntDivCfg!=0))
+       { //for 88CU ,1T1R
+               _InitAntenna_Selection(Adapter);
+       }
+
+
+       //
+       // Disable BAR, suggested by Scott
+       // 2010.04.09 add by hpfan
+       //
+       rtw_write32(Adapter, REG_BAR_MODE_CTRL, 0x0201ffff);
+
+       // HW SEQ CTRL
+       //set 0x0 to 0xFF by tynli. Default enable HW SEQ NUM.
+       rtw_write8(Adapter,REG_HWSEQ_CTRL, 0xFF);
+
+       if(pregistrypriv->wifi_spec)
+               rtw_write16(Adapter,REG_FAST_EDCA_CTRL ,0);
+
+       //Nav limit , suggest by scott
+       rtw_write8(Adapter, 0x652, 0x0);
+
+#if (MP_DRIVER == 1)
+       Adapter->mppriv.channel = pHalData->CurrentChannel;
+       MPT_InitializeAdapter(Adapter, Adapter->mppriv.channel);
+#else
+       //
+       // 2010/08/11 MH Merge from 8192SE for Minicard init. We need to confirm current radio status
+       // and then decide to enable RF or not.!!!??? For Selective suspend mode. We may not
+       // call init_adapter. May cause some problem??
+       //
+       // Fix the bug that Hw/Sw radio off before S3/S4, the RF off action will not be executed
+       // in MgntActSet_RF_State() after wake up, because the value of pHalData->eRFPowerState
+       // is the same as eRfOff, we should change it to eRfOn after we config RF parameters.
+       // Added by tynli. 2010.03.30.
+       pwrctrlpriv->rf_pwrstate = rf_on;
+
+#if 0  //to do
+       RT_CLEAR_PS_LEVEL(pwrctrlpriv, RT_RF_OFF_LEVL_HALT_NIC);
+#if 1 //Todo
+       // 20100326 Joseph: Copy from GPIOChangeRFWorkItemCallBack() function to check HW radio on/off.
+       // 20100329 Joseph: Revise and integrate the HW/SW radio off code in initialization.
+
+       eRfPowerStateToSet = (rt_rf_power_state) RfOnOffDetect(Adapter);
+       pwrctrlpriv->rfoff_reason |= eRfPowerStateToSet==rf_on ? RF_CHANGE_BY_INIT : RF_CHANGE_BY_HW;
+       pwrctrlpriv->rfoff_reason |= (pwrctrlpriv->reg_rfoff) ? RF_CHANGE_BY_SW : 0;
+
+       if(pwrctrlpriv->rfoff_reason&RF_CHANGE_BY_HW)
+               pwrctrlpriv->b_hw_radio_off = _TRUE;
+
+       DBG_8192C("eRfPowerStateToSet=%d\n", eRfPowerStateToSet);
+
+       if(pwrctrlpriv->reg_rfoff == _TRUE)
+       {       // User disable RF via registry.
+               DBG_8192C("InitializeAdapter8192CU(): Turn off RF for RegRfOff.\n");
+               //MgntActSet_RF_State(Adapter, rf_off, RF_CHANGE_BY_SW, _TRUE);
+
+               // Those action will be discard in MgntActSet_RF_State because off the same state
+               //for(eRFPath = 0; eRFPath <pHalData->NumTotalRFPath; eRFPath++)
+                       //PHY_SetRFReg(Adapter, (RF_RADIO_PATH_E)eRFPath, 0x4, 0xC00, 0x0);
+       }
+       else if(pwrctrlpriv->rfoff_reason > RF_CHANGE_BY_PS)
+       {       // H/W or S/W RF OFF before sleep.
+               DBG_8192C(" Turn off RF for RfOffReason(%x) ----------\n", pwrctrlpriv->rfoff_reason);
+               //pwrctrlpriv->rfoff_reason = RF_CHANGE_BY_INIT;
+               pwrctrlpriv->rf_pwrstate = rf_on;
+               //MgntActSet_RF_State(Adapter, rf_off, pwrctrlpriv->rfoff_reason, _TRUE);
+       }
+       else
+       {
+               // Perform GPIO polling to find out current RF state. added by Roger, 2010.04.09.
+               if(pHalData->BoardType == BOARD_MINICARD /*&& (Adapter->MgntInfo.PowerSaveControl.bGpioRfSw)*/)
+               {
+                       DBG_8192C("InitializeAdapter8192CU(): RF=%d \n", eRfPowerStateToSet);
+                       if (eRfPowerStateToSet == rf_off)
+                       {
+                               //MgntActSet_RF_State(Adapter, rf_off, RF_CHANGE_BY_HW, _TRUE);
+                               pwrctrlpriv->b_hw_radio_off = _TRUE;
+                       }
+                       else
+                       {
+                               pwrctrlpriv->rf_pwrstate = rf_off;
+                               pwrctrlpriv->rfoff_reason = RF_CHANGE_BY_INIT;
+                               pwrctrlpriv->b_hw_radio_off = _FALSE;
+                               //MgntActSet_RF_State(Adapter, rf_on, pwrctrlpriv->rfoff_reason, _TRUE);
+                       }
+               }
+               else
+               {
+                       pwrctrlpriv->rf_pwrstate = rf_off;
+                       pwrctrlpriv->rfoff_reason = RF_CHANGE_BY_INIT;
+                       //MgntActSet_RF_State(Adapter, rf_on, pwrctrlpriv->rfoff_reason, _TRUE);
+               }
+
+               pwrctrlpriv->rfoff_reason = 0;
+               pwrctrlpriv->b_hw_radio_off = _FALSE;
+               pwrctrlpriv->rf_pwrstate = rf_on;
+               rtw_led_control(Adapter, LED_CTL_POWER_ON);
+
+       }
+
+       // 2010/-8/09 MH For power down module, we need to enable register block contrl reg at 0x1c.
+       // Then enable power down control bit of register 0x04 BIT4 and BIT15 as 1.
+       if(pHalData->pwrdown && eRfPowerStateToSet == rf_off)
+       {
+               // Enable register area 0x0-0xc.
+               rtw_write8(Adapter, REG_RSV_CTRL, 0x0);
+
+               //
+               // <Roger_Notes> We should configure HW PDn source for WiFi ONLY, and then
+               // our HW will be set in power-down mode if PDn source from all  functions are configured.
+               // 2010.10.06.
+               //
+               //if(IS_HARDWARE_TYPE_8723AU(Adapter))
+               //{
+               //      u1bTmp = rtw_read8(Adapter, REG_MULTI_FUNC_CTRL);
+               //      rtw_write8(Adapter, REG_MULTI_FUNC_CTRL, (u1bTmp|WL_HWPDN_EN));
+               //}
+               //else
+               //{
+                       rtw_write16(Adapter, REG_APS_FSMCO, 0x8812);
+               //}
+       }
+       //DrvIFIndicateCurrentPhyStatus(Adapter); // 2010/08/17 MH Disable to prevent BSOD.
+#endif
+#endif
+
+HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_IQK);
+       // 2010/08/26 MH Merge from 8192CE.
+       if(pwrctrlpriv->rf_pwrstate == rf_on)
+       {
+               if(pHalData->bIQKInitialized ){
+                       rtl8192c_PHY_IQCalibrate(Adapter,_TRUE);
+               }
+               else
+               {
+                       rtl8192c_PHY_IQCalibrate(Adapter,_FALSE);
+                       pHalData->bIQKInitialized = _TRUE;
+               }
+
+HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_PW_TRACK);
+               rtl8192c_dm_CheckTXPowerTracking(Adapter);
+
+HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_LCK);
+               rtl8192c_PHY_LCCalibrate(Adapter);
+       }
+#endif /* #if (MP_DRIVER == 1) */
+
+
+HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_MISC21);
+#if RTL8192CU_ADHOC_WORKAROUND_SETTING
+       _InitAdhocWorkaroundParams(Adapter);
+#endif
+
+
+#ifdef USB_INTERFERENCE_ISSUE
+ //fixed USB interface interference issue
+       rtw_write8(Adapter, 0xfe40, 0xe0);
+       rtw_write8(Adapter, 0xfe41, 0x8d);
+       rtw_write8(Adapter, 0xfe42, 0x80);
+       rtw_write32(Adapter,0x20c,0xfd0320);
+#if 1
+       //2011/01/07 ,suggest by Johnny,for solved the problem that too many protocol error on USB bus
+       if(!IS_VENDOR_UMC_A_CUT(pHalData->VersionID) )//&& !IS_92C_SERIAL(pHalData->VersionID))// TSMC , 8188
+       {
+               // 0xE6=0x94
+               rtw_write8(Adapter, 0xFE40, 0xE6);
+               rtw_write8(Adapter, 0xFE41, 0x94);
+               rtw_write8(Adapter, 0xFE42, 0x80);
+
+               // 0xE0=0x19
+               rtw_write8(Adapter, 0xFE40, 0xE0);
+               rtw_write8(Adapter, 0xFE41, 0x19);
+               rtw_write8(Adapter, 0xFE42, 0x80);
+
+               // 0xE5=0x91
+               rtw_write8(Adapter, 0xFE40, 0xE5);
+               rtw_write8(Adapter, 0xFE41, 0x91);
+               rtw_write8(Adapter, 0xFE42, 0x80);
+
+               // 0xE2=0x81
+               rtw_write8(Adapter, 0xFE40, 0xE2);
+               rtw_write8(Adapter, 0xFE41, 0x81);
+               rtw_write8(Adapter, 0xFE42, 0x80);
+
+       }
+
+#endif
+#endif //USB_INTERFERENCE_ISSUE
+
+HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_INIT_PABIAS);
+       _InitPABias(Adapter);
+
+HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_BT_COEXIST);
+#ifdef CONFIG_BT_COEXIST
+       _InitBTCoexist(Adapter);
+#endif
+
+HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_INIT_HAL_DM);
+       rtl8192c_InitHalDm(Adapter);
+
+       // 2010/08/23 MH According to Alfred's suggestion, we need to to prevent HW enter
+       // suspend mode automatically.
+       //HwSuspendModeEnable92Cu(Adapter, _FALSE);
+
+HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_MISC31);
+       rtw_write8(Adapter, 0x15, 0xe9);//suggest by Johnny for lower temperature
+
+        rtw_write8(Adapter, 0xc87, 0x50);//suggest by Jackson for CCA
+
+       //_dbg_dump_macreg(padapter);
+
+       rtw_write16(Adapter, REG_BCN_CTRL, 0x1818);     // For 2 PORT TSF SYNC
+
+
+
+#ifdef CONFIG_XMIT_ACK
+       //ack for xmit mgmt frames.
+       rtw_write32(Adapter, REG_FWHW_TXQ_CTRL, rtw_read32(Adapter, REG_FWHW_TXQ_CTRL)|BIT(12));
+#endif //CONFIG_XMIT_ACK
+
+exit:
+HAL_INIT_PROFILE_TAG(HAL_INIT_STAGES_END);
+
+       DBG_871X("%s in %dms\n", __FUNCTION__, rtw_get_passing_time_ms(init_start_time));
+
+       #ifdef DBG_HAL_INIT_PROFILING
+       hal_init_stages_timestamp[HAL_INIT_STAGES_END]=rtw_get_current_time();
+
+       for(hal_init_profiling_i=0;hal_init_profiling_i<HAL_INIT_STAGES_NUM-1;hal_init_profiling_i++) {
+               DBG_871X("DBG_HAL_INIT_PROFILING: %35s, %u, %5u, %5u\n"
+                       , hal_init_stages_str[hal_init_profiling_i]
+                       , hal_init_stages_timestamp[hal_init_profiling_i]
+                       , (hal_init_stages_timestamp[hal_init_profiling_i+1]-hal_init_stages_timestamp[hal_init_profiling_i])
+                       , rtw_get_time_interval_ms(hal_init_stages_timestamp[hal_init_profiling_i], hal_init_stages_timestamp[hal_init_profiling_i+1])
+               );
+       }
+       #endif
+
+
+_func_exit_;
+
+       return status;
+}
+
+
+#define SYNC_SD7_20110802_phy_SsPwrSwitch92CU
+#ifdef SYNC_SD7_20110802_phy_SsPwrSwitch92CU
+
+VOID
+phy_SsPwrSwitch92CU(
+       IN      PADAPTER                        Adapter,
+       IN      rt_rf_power_state       eRFPowerState,
+       IN      int bRegSSPwrLvl
+       )
+{
+       HAL_DATA_TYPE           *pHalData = GET_HAL_DATA(Adapter);
+       u8                              value8;
+
+       switch( eRFPowerState )
+       {
+               case rf_on:
+                       if (bRegSSPwrLvl == 1)
+                       {
+                               // 1. Enable MAC Clock. Can not be enabled now.
+                               //WriteXBYTE(REG_SYS_CLKR+1, ReadXBYTE(REG_SYS_CLKR+1) | BIT(3));
+
+                               // 2. Force PWM, Enable SPS18_LDO_Marco_Block
+                               rtw_write8(Adapter, REG_SPS0_CTRL,
+                               rtw_read8(Adapter, REG_SPS0_CTRL) | (BIT0|BIT3));
+
+                               // 3. restore BB, AFE control register.
+                               //RF
+                               if (pHalData->rf_type ==  RF_2T2R)
+                                       PHY_SetBBReg(Adapter, rFPGA0_XAB_RFParameter, 0x380038, 1);
+                               else
+                                       PHY_SetBBReg(Adapter, rFPGA0_XAB_RFParameter, 0x38, 1);
+                               PHY_SetBBReg(Adapter, rOFDM0_TRxPathEnable, 0xf0, 1);
+                               PHY_SetBBReg(Adapter, rFPGA0_RFMOD, BIT1, 0);
+
+                               //AFE
+                               //DbgPrint("0x0e70 = %x\n", Adapter->PS_BBRegBackup[PSBBREG_AFE0]);
+                               //PHY_SetBBReg(Adapter, 0x0e70, bMaskDWord ,Adapter->PS_BBRegBackup[PSBBREG_AFE0] );
+                               //PHY_SetBBReg(Adapter, 0x0e70, bMaskDWord ,0x631B25A0 );
+                               if (pHalData->rf_type ==  RF_2T2R)
+                                       PHY_SetBBReg(Adapter, rRx_Wait_CCA, bMaskDWord ,0x63DB25A0 );
+                               else if (pHalData->rf_type ==  RF_1T1R)
+                                       PHY_SetBBReg(Adapter, rRx_Wait_CCA, bMaskDWord ,0x631B25A0 );
+
+                               // 4. issue 3-wire command that RF set to Rx idle mode. This is used to re-write the RX idle mode.
+                               // We can only prvide a usual value instead and then HW will modify the value by itself.
+                               PHY_SetRFReg(Adapter,RF_PATH_A, 0, bRFRegOffsetMask,0x32D95);
+                               if (pHalData->rf_type ==  RF_2T2R)
+                               {
+                                       PHY_SetRFReg(Adapter,RF_PATH_B, 0, bRFRegOffsetMask,0x32D95);
+                               }
+                       }
+                       else            // Level 2 or others.
+                       {
+                               //h.    AFE_PLL_CTRL 0x28[7:0] = 0x80                   //disable AFE PLL
+                               rtw_write8(Adapter, REG_AFE_PLL_CTRL, 0x81);
+
+                               // i.   AFE_XTAL_CTRL 0x24[15:0] = 0x880F               //gated AFE DIG_CLOCK
+                               rtw_write16(Adapter, REG_AFE_XTAL_CTRL, 0x800F);
+                               rtw_mdelay_os(1);
+
+                               // 1. Enable MAC Clock. Can not be enabled now.
+                               //WriteXBYTE(REG_SYS_CLKR+1, ReadXBYTE(REG_SYS_CLKR+1) | BIT(3));
+
+                               // 2. Force PWM, Enable SPS18_LDO_Marco_Block
+                               rtw_write8(Adapter, REG_SPS0_CTRL,
+                               rtw_read8(Adapter, REG_SPS0_CTRL) | (BIT0|BIT3));
+
+                               // 3. restore BB, AFE control register.
+                               //RF
+                               if (pHalData->rf_type ==  RF_2T2R)
+                                       PHY_SetBBReg(Adapter, rFPGA0_XAB_RFParameter, 0x380038, 1);
+                               else
+                                       PHY_SetBBReg(Adapter, rFPGA0_XAB_RFParameter, 0x38, 1);
+                               PHY_SetBBReg(Adapter, rOFDM0_TRxPathEnable, 0xf0, 1);
+                               PHY_SetBBReg(Adapter, rFPGA0_RFMOD, BIT1, 0);
+
+                               //AFE
+                               if (pHalData->rf_type ==  RF_2T2R)
+                                       PHY_SetBBReg(Adapter, rRx_Wait_CCA, bMaskDWord ,0x63DB25A0 );
+                               else if (pHalData->rf_type ==  RF_1T1R)
+                                       PHY_SetBBReg(Adapter, rRx_Wait_CCA, bMaskDWord ,0x631B25A0 );
+
+                               // 4. issue 3-wire command that RF set to Rx idle mode. This is used to re-write the RX idle mode.
+                               // We can only prvide a usual value instead and then HW will modify the value by itself.
+                               PHY_SetRFReg(Adapter,RF_PATH_A, 0, bRFRegOffsetMask,0x32D95);
+                               if (pHalData->rf_type ==  RF_2T2R)
+                               {
+                                       PHY_SetRFReg(Adapter,RF_PATH_B, 0, bRFRegOffsetMask,0x32D95);
+                               }
+
+                               // 5. gated MAC Clock
+                               //WriteXBYTE(REG_SYS_CLKR+1, ReadXBYTE(REG_SYS_CLKR+1) & ~(BIT(3)));
+                               //PlatformEFIOWrite1Byte(Adapter, REG_SYS_CLKR+1, PlatformEFIORead1Byte(Adapter, REG_SYS_CLKR+1)|(BIT3));
+
+                               {
+                                       //u8                    eRFPath = RF_PATH_A,value8 = 0, retry = 0;
+                                       u8              bytetmp;
+                                       //PHY_SetRFReg(Adapter, (RF_RADIO_PATH_E)eRFPath, 0x0, bMaskByte0, 0x0);
+                                       // 2010/08/12 MH Add for B path under SS test.
+                                       //if (pHalData->RF_Type ==  RF_2T2R)
+                                               //PHY_SetRFReg(Adapter, RF_PATH_B, 0x0, bMaskByte0, 0x0);
+
+                                       bytetmp = rtw_read8(Adapter, REG_APSD_CTRL);
+                                       rtw_write8(Adapter, REG_APSD_CTRL, bytetmp & ~BIT6);
+
+                                       rtw_mdelay_os(10);
+
+                                       // Set BB reset at first
+                                       rtw_write8(Adapter, REG_SYS_FUNC_EN, 0x17 );//0x16
+                                       //undo clock gated
+                                       rtw_write32(Adapter, rFPGA0_XCD_RFParameter, rtw_read32(Adapter, rFPGA0_XCD_RFParameter)&(~BIT31));
+                                       // Enable TX
+                                       rtw_write8(Adapter, REG_TXPAUSE, 0x0);
+                               }
+                               //Adapter->HalFunc.InitializeAdapterHandler(Adapter, Adapter->MgntInfo.dot11CurrentChannelNumber);
+                               //CardSelectiveSuspendLeave(Adapter);
+                       }
+
+                       break;
+
+               case rf_sleep:
+               case rf_off:
+                               value8 = rtw_read8(Adapter, REG_SPS0_CTRL) ;
+                               if (IS_81xxC_VENDOR_UMC_B_CUT(pHalData->VersionID))
+                                       value8 &= ~(BIT0);
+                               else
+                                       value8 &= ~(BIT0|BIT3);
+                               if (bRegSSPwrLvl == 1)
+                               {
+                                       //RT_TRACE(COMP_POWER, DBG_LOUD, ("SS LVL1\n"));
+                                       // Disable RF and BB only for SelectSuspend.
+
+                                       // 1. Set BB/RF to shutdown.
+                                       //      (1) Reg878[5:3]= 0      // RF rx_code for preamble power saving
+                                       //      (2)Reg878[21:19]= 0     //Turn off RF-B
+                                       //      (3) RegC04[7:4]= 0      // turn off all paths for packet detection
+                                       //      (4) Reg800[1] = 1               // enable preamble power saving
+                                       Adapter->pwrctrlpriv.PS_BBRegBackup[PSBBREG_RF0] = PHY_QueryBBReg(Adapter, rFPGA0_XAB_RFParameter, bMaskDWord);
+                                       Adapter->pwrctrlpriv.PS_BBRegBackup[PSBBREG_RF1] = PHY_QueryBBReg(Adapter, rOFDM0_TRxPathEnable, bMaskDWord);
+                                       Adapter->pwrctrlpriv.PS_BBRegBackup[PSBBREG_RF2] = PHY_QueryBBReg(Adapter, rFPGA0_RFMOD, bMaskDWord);
+                                       if (pHalData->rf_type ==  RF_2T2R)
+                                       {
+                                               PHY_SetBBReg(Adapter, rFPGA0_XAB_RFParameter, 0x380038, 0);
+                                       }
+                                       else if (pHalData->rf_type ==  RF_1T1R)
+                                       {
+                                               PHY_SetBBReg(Adapter, rFPGA0_XAB_RFParameter, 0x38, 0);
+                                       }
+                                       PHY_SetBBReg(Adapter, rOFDM0_TRxPathEnable, 0xf0, 0);
+                                       PHY_SetBBReg(Adapter, rFPGA0_RFMOD, BIT1,1);
+
+                                       // 2 .AFE control register to power down. bit[30:22]
+                                       Adapter->pwrctrlpriv.PS_BBRegBackup[PSBBREG_AFE0] = PHY_QueryBBReg(Adapter, rRx_Wait_CCA, bMaskDWord);
+                                       if (pHalData->rf_type ==  RF_2T2R)
+                                               PHY_SetBBReg(Adapter, rRx_Wait_CCA, bMaskDWord ,0x00DB25A0);
+                                       else if (pHalData->rf_type ==  RF_1T1R)
+                                               PHY_SetBBReg(Adapter, rRx_Wait_CCA, bMaskDWord ,0x001B25A0);
+
+                                       // 3. issue 3-wire command that RF set to power down.
+                                       PHY_SetRFReg(Adapter,RF_PATH_A, 0, bRFRegOffsetMask,0);
+                                       if (pHalData->rf_type ==  RF_2T2R)
+                                       {
+                                               PHY_SetRFReg(Adapter,RF_PATH_B, 0, bRFRegOffsetMask,0);
+                                       }
+
+                                       // 4. Force PFM , disable SPS18_LDO_Marco_Block
+                                       rtw_write8(Adapter, REG_SPS0_CTRL, value8);
+
+                                       // 5. gated MAC Clock
+                                       //WriteXBYTE(REG_SYS_CLKR+1, ReadXBYTE(REG_SYS_CLKR+1) & ~(BIT(3)));
+                               }
+                               else    // Level 2 or others.
+                               {
+                                       //RT_TRACE(COMP_POWER, DBG_LOUD, ("SS LVL2\n"));
+                                       {
+                                               u8                      eRFPath = RF_PATH_A,value8 = 0;
+                                               rtw_write8(Adapter, REG_TXPAUSE, 0xFF);
+                                               PHY_SetRFReg(Adapter, (RF_RADIO_PATH_E)eRFPath, 0x0, bMaskByte0, 0x0);
+                                               // 2010/08/12 MH Add for B path under SS test.
+                                               //if (pHalData->RF_Type ==  RF_2T2R)
+                                                       //PHY_SetRFReg(Adapter, RF_PATH_B, 0x0, bMaskByte0, 0x0);
+
+                                               value8 |= APSDOFF;
+                                               rtw_write8(Adapter, REG_APSD_CTRL, value8);//0x40
+
+                                               // After switch APSD, we need to delay for stability
+                                               rtw_mdelay_os(10);
+                                               //before BB reset should do clock gated
+                                               rtw_write32(Adapter, rFPGA0_XCD_RFParameter, rtw_read32(Adapter, rFPGA0_XCD_RFParameter)|(BIT31));
+                                               // Set BB reset at first
+                                               value8 = 0 ;
+                                               value8 |=( FEN_USBD | FEN_USBA | FEN_BB_GLB_RSTn);
+                                               rtw_write8(Adapter, REG_SYS_FUNC_EN,value8 );//0x16
+                                       }
+
+                                       // Disable RF and BB only for SelectSuspend.
+
+                                       // 1. Set BB/RF to shutdown.
+                                       //      (1) Reg878[5:3]= 0      // RF rx_code for preamble power saving
+                                       //      (2)Reg878[21:19]= 0     //Turn off RF-B
+                                       //      (3) RegC04[7:4]= 0      // turn off all paths for packet detection
+                                       //      (4) Reg800[1] = 1               // enable preamble power saving
+                                       Adapter->pwrctrlpriv.PS_BBRegBackup[PSBBREG_RF0] = PHY_QueryBBReg(Adapter, rFPGA0_XAB_RFParameter, bMaskDWord);
+                                       Adapter->pwrctrlpriv.PS_BBRegBackup[PSBBREG_RF1] = PHY_QueryBBReg(Adapter, rOFDM0_TRxPathEnable, bMaskDWord);
+                                       Adapter->pwrctrlpriv.PS_BBRegBackup[PSBBREG_RF2] = PHY_QueryBBReg(Adapter, rFPGA0_RFMOD, bMaskDWord);
+                                       if (pHalData->rf_type ==  RF_2T2R)
+                                       {
+                                               PHY_SetBBReg(Adapter, rFPGA0_XAB_RFParameter, 0x380038, 0);
+                                       }
+                                       else if (pHalData->rf_type ==  RF_1T1R)
+                                       {
+                                               PHY_SetBBReg(Adapter, rFPGA0_XAB_RFParameter, 0x38, 0);
+                                       }
+                                       PHY_SetBBReg(Adapter, rOFDM0_TRxPathEnable, 0xf0, 0);
+                                       PHY_SetBBReg(Adapter, rFPGA0_RFMOD, BIT1,1);
+
+                                       // 2 .AFE control register to power down. bit[30:22]
+                                       Adapter->pwrctrlpriv.PS_BBRegBackup[PSBBREG_AFE0] = PHY_QueryBBReg(Adapter, rRx_Wait_CCA, bMaskDWord);
+                                       if (pHalData->rf_type ==  RF_2T2R)
+                                               PHY_SetBBReg(Adapter, rRx_Wait_CCA, bMaskDWord ,0x00DB25A0);
+                                       else if (pHalData->rf_type ==  RF_1T1R)
+                                               PHY_SetBBReg(Adapter, rRx_Wait_CCA, bMaskDWord ,0x001B25A0);
+
+                                       // 3. issue 3-wire command that RF set to power down.
+                                       PHY_SetRFReg(Adapter,RF_PATH_A, 0, bRFRegOffsetMask,0);
+                                       if (pHalData->rf_type ==  RF_2T2R)
+                                       {
+                                               PHY_SetRFReg(Adapter,RF_PATH_B, 0, bRFRegOffsetMask,0);
+                                       }
+
+                                       // 4. Force PFM , disable SPS18_LDO_Marco_Block
+                                       rtw_write8(Adapter, REG_SPS0_CTRL, value8);
+
+                                       // 2010/10/13 MH/Isaachsu exchange sequence.
+                                       //h.    AFE_PLL_CTRL 0x28[7:0] = 0x80                   //disable AFE PLL
+                                       rtw_write8(Adapter, REG_AFE_PLL_CTRL, 0x80);
+                                       rtw_mdelay_os(1);
+
+                                       // i.   AFE_XTAL_CTRL 0x24[15:0] = 0x880F               //gated AFE DIG_CLOCK
+                                       rtw_write16(Adapter, REG_AFE_XTAL_CTRL, 0xA80F);
+
+                                       // 5. gated MAC Clock
+                                       //WriteXBYTE(REG_SYS_CLKR+1, ReadXBYTE(REG_SYS_CLKR+1) & ~(BIT(3)));
+                                       //PlatformEFIOWrite1Byte(Adapter, REG_SYS_CLKR+1, PlatformEFIORead1Byte(Adapter, REG_SYS_CLKR+1)& ~(BIT3))
+
+                                       //CardSelectiveSuspendEnter(Adapter);
+                               }
+
+                       break;
+
+               default:
+                       break;
+       }
+
+}      // phy_PowerSwitch92CU
+
+void _ps_open_RF(_adapter *padapter) {
+       //here call with bRegSSPwrLvl 1, bRegSSPwrLvl 2 needs to be verified
+       phy_SsPwrSwitch92CU(padapter, rf_on, 1);
+}
+
+void _ps_close_RF(_adapter *padapter){
+       //here call with bRegSSPwrLvl 1, bRegSSPwrLvl 2 needs to be verified
+       phy_SsPwrSwitch92CU(padapter, rf_off, 1);
+}
+#endif //SYNC_SD7_20110802_phy_SsPwrSwitch92CU
+
+
+
+static VOID
+_DisableGPIO(
+       IN      PADAPTER        Adapter
+       )
+{
+/***************************************
+j. GPIO_PIN_CTRL 0x44[31:0]=0x000              //
+k. Value = GPIO_PIN_CTRL[7:0]
+l.  GPIO_PIN_CTRL 0x44[31:0] = 0x00FF0000 | (value <<8); //write external PIN level
+m. GPIO_MUXCFG 0x42 [15:0] = 0x0780
+n. LEDCFG 0x4C[15:0] = 0x8080
+***************************************/
+       u8      value8;
+       u16     value16;
+       u32     value32;
+
+       //1. Disable GPIO[7:0]
+       rtw_write16(Adapter, REG_GPIO_PIN_CTRL+2, 0x0000);
+       value32 = rtw_read32(Adapter, REG_GPIO_PIN_CTRL) & 0xFFFF00FF;
+       value8 = (u8) (value32&0x000000FF);
+       value32 |= ((value8<<8) | 0x00FF0000);
+       rtw_write32(Adapter, REG_GPIO_PIN_CTRL, value32);
+
+       //2. Disable GPIO[10:8]
+       rtw_write8(Adapter, REG_GPIO_MUXCFG+3, 0x00);
+           value16 = rtw_read16(Adapter, REG_GPIO_MUXCFG+2) & 0xFF0F;
+       value8 = (u8) (value16&0x000F);
+       value16 |= ((value8<<4) | 0x0780);
+       rtw_write16(Adapter, REG_GPIO_MUXCFG+2, value16);
+
+       //3. Disable LED0 & 1
+       rtw_write16(Adapter, REG_LEDCFG0, 0x8080);
+
+       //RT_TRACE(COMP_INIT, DBG_LOUD, ("======> Disable GPIO and LED.\n"));
+
+} //end of _DisableGPIO()
+
+static VOID
+_ResetFWDownloadRegister(
+       IN PADAPTER                     Adapter
+       )
+{
+       u32     value32;
+
+       value32 = rtw_read32(Adapter, REG_MCUFWDL);
+       value32 &= ~(MCUFWDL_EN | MCUFWDL_RDY);
+       rtw_write32(Adapter, REG_MCUFWDL, value32);
+       //RT_TRACE(COMP_INIT, DBG_LOUD, ("Reset FW download register.\n"));
+}
+
+
+static int
+_DisableRF_AFE(
+       IN PADAPTER                     Adapter
+       )
+{
+       int             rtStatus = _SUCCESS;
+       u32                     pollingCount = 0;
+       u8                      value8;
+
+       //disable RF/ AFE AD/DA
+       value8 = APSDOFF;
+       rtw_write8(Adapter, REG_APSD_CTRL, value8);
+
+
+#if (RTL8192CU_ASIC_VERIFICATION)
+
+       do
+       {
+               if(rtw_read8(Adapter, REG_APSD_CTRL) & APSDOFF_STATUS){
+                       //RT_TRACE(COMP_INIT, DBG_LOUD, ("Disable RF, AFE, AD, DA Done!\n"));
+                       break;
+               }
+
+               if(pollingCount++ > POLLING_READY_TIMEOUT_COUNT){
+                       //RT_TRACE(COMP_INIT, DBG_SERIOUS, ("Failed to polling APSDOFF_STATUS done!\n"));
+                       return _FAIL;
+               }
+
+       }while(_TRUE);
+
+#endif
+
+       //RT_TRACE(COMP_INIT, DBG_LOUD, ("Disable RF, AFE,AD, DA.\n"));
+       return rtStatus;
+
+}
+
+static VOID
+_ResetBB(
+       IN PADAPTER                     Adapter
+       )
+{
+       u16     value16;
+
+       //before BB reset should do clock gated
+       rtw_write32(Adapter, rFPGA0_XCD_RFParameter, rtw_read32(Adapter, rFPGA0_XCD_RFParameter)|(BIT31));
+       //reset BB
+       value16 = rtw_read16(Adapter, REG_SYS_FUNC_EN);
+       value16 &= ~(FEN_BBRSTB | FEN_BB_GLB_RSTn);
+       rtw_write16(Adapter, REG_SYS_FUNC_EN, value16);
+       //RT_TRACE(COMP_INIT, DBG_LOUD, ("Reset BB.\n"));
+}
+
+static VOID
+_ResetMCU(
+       IN PADAPTER                     Adapter
+       )
+{
+       u16     value16;
+
+       // reset MCU
+       value16 = rtw_read16(Adapter, REG_SYS_FUNC_EN);
+       value16 &= ~FEN_CPUEN;
+       rtw_write16(Adapter, REG_SYS_FUNC_EN, value16);
+       //RT_TRACE(COMP_INIT, DBG_LOUD, ("Reset MCU.\n"));
+}
+
+static VOID
+_DisableMAC_AFE_PLL(
+       IN PADAPTER                     Adapter
+       )
+{
+       u32     value32;
+
+       //disable MAC/ AFE PLL
+       value32 = rtw_read32(Adapter, REG_APS_FSMCO);
+       value32 |= APDM_MAC;
+       rtw_write32(Adapter, REG_APS_FSMCO, value32);
+
+       value32 |= APFM_OFF;
+       rtw_write32(Adapter, REG_APS_FSMCO, value32);
+       //RT_TRACE(COMP_INIT, DBG_LOUD, ("Disable MAC, AFE PLL.\n"));
+}
+
+static VOID
+_AutoPowerDownToHostOff(
+       IN      PADAPTER                Adapter
+       )
+{
+       u32                     value32;
+       rtw_write8(Adapter, REG_SPS0_CTRL, 0x22);
+
+       value32 = rtw_read32(Adapter, REG_APS_FSMCO);
+
+       value32 |= APDM_HOST;//card disable
+       rtw_write32(Adapter, REG_APS_FSMCO, value32);
+       //RT_TRACE(COMP_INIT, DBG_LOUD, ("Auto Power Down to Host-off state.\n"));
+
+       // set USB suspend
+       value32 = rtw_read32(Adapter, REG_APS_FSMCO);
+       value32 &= ~AFSM_PCIE;
+       rtw_write32(Adapter, REG_APS_FSMCO, value32);
+
+}
+
+static VOID
+_SetUsbSuspend(
+       IN PADAPTER                     Adapter
+       )
+{
+       u32                     value32;
+
+       value32 = rtw_read32(Adapter, REG_APS_FSMCO);
+
+       // set USB suspend
+       value32 |= AFSM_HSUS;
+       rtw_write32(Adapter, REG_APS_FSMCO, value32);
+
+       //RT_ASSERT(0 == (rtw_read32(Adapter, REG_APS_FSMCO) & BIT(12)),(""));
+       //RT_TRACE(COMP_INIT, DBG_LOUD, ("Set USB suspend.\n"));
+
+}
+
+static VOID
+_DisableRFAFEAndResetBB(
+       IN PADAPTER                     Adapter
+       )
+{
+/**************************************
+a.     TXPAUSE 0x522[7:0] = 0xFF             //Pause MAC TX queue
+b.     RF path 0 offset 0x00 = 0x00            // disable RF
+c.     APSD_CTRL 0x600[7:0] = 0x40
+d.     SYS_FUNC_EN 0x02[7:0] = 0x16            //reset BB state machine
+e.     SYS_FUNC_EN 0x02[7:0] = 0x14            //reset BB state machine
+***************************************/
+       u8 eRFPath = 0,value8 = 0;
+       rtw_write8(Adapter, REG_TXPAUSE, 0xFF);
+       PHY_SetRFReg(Adapter, (RF_RADIO_PATH_E)eRFPath, 0x0, bMaskByte0, 0x0);
+
+       value8 |= APSDOFF;
+       rtw_write8(Adapter, REG_APSD_CTRL, value8);//0x40
+       //before BB reset should do clock gated
+       rtw_write32(Adapter, rFPGA0_XCD_RFParameter, rtw_read32(Adapter, rFPGA0_XCD_RFParameter)|(BIT31));
+       value8 = 0 ;
+       value8 |=( FEN_USBD | FEN_USBA | FEN_BB_GLB_RSTn);
+       rtw_write8(Adapter, REG_SYS_FUNC_EN,value8 );//0x16
+
+       value8 &=( ~FEN_BB_GLB_RSTn );
+       rtw_write8(Adapter, REG_SYS_FUNC_EN, value8); //0x14
+
+       //RT_TRACE(COMP_INIT, DBG_LOUD, ("======> RF off and reset BB.\n"));
+}
+
+static VOID
+_ResetDigitalProcedure1(
+       IN      PADAPTER                        Adapter,
+       IN      BOOLEAN                         bWithoutHWSM
+       )
+{
+
+       HAL_DATA_TYPE *pHalData = GET_HAL_DATA(Adapter);
+
+       if(pHalData->FirmwareVersion <=  0x20){
+               #if 0
+               /*****************************
+               f.      SYS_FUNC_EN 0x03[7:0]=0x54              // reset MAC register, DCORE
+               g.      MCUFWDL 0x80[7:0]=0                             // reset MCU ready status
+               ******************************/
+               u4Byte  value32 = 0;
+               PlatformIOWrite1Byte(Adapter, REG_SYS_FUNC_EN+1, 0x54);
+               PlatformIOWrite1Byte(Adapter, REG_MCUFWDL, 0);
+               #else
+               /*****************************
+               f.      MCUFWDL 0x80[7:0]=0                             // reset MCU ready status
+               g.      SYS_FUNC_EN 0x02[10]= 0                 // reset MCU register, (8051 reset)
+               h.      SYS_FUNC_EN 0x02[15-12]= 5              // reset MAC register, DCORE
+               i.     SYS_FUNC_EN 0x02[10]= 1                  // enable MCU register, (8051 enable)
+               ******************************/
+                       u16 valu16 = 0;
+                       rtw_write8(Adapter, REG_MCUFWDL, 0);
+
+                       valu16 = rtw_read16(Adapter, REG_SYS_FUNC_EN);
+                       rtw_write16(Adapter, REG_SYS_FUNC_EN, (valu16 & (~FEN_CPUEN)));//reset MCU ,8051
+
+                       valu16 = rtw_read16(Adapter, REG_SYS_FUNC_EN)&0x0FFF;
+                       rtw_write16(Adapter, REG_SYS_FUNC_EN, (valu16 |(FEN_HWPDN|FEN_ELDR)));//reset MAC
+
+                       #ifdef DBG_SHOW_MCUFWDL_BEFORE_51_ENABLE
+                       {
+                               u8 val;
+                               if( (val=rtw_read8(Adapter, REG_MCUFWDL)))
+                                       DBG_871X("DBG_SHOW_MCUFWDL_BEFORE_51_ENABLE %s:%d REG_MCUFWDL:0x%02x\n", __FUNCTION__, __LINE__, val);
+                       }
+                       #endif
+
+
+                       valu16 = rtw_read16(Adapter, REG_SYS_FUNC_EN);
+                       rtw_write16(Adapter, REG_SYS_FUNC_EN, (valu16 | FEN_CPUEN));//enable MCU ,8051
+
+
+               #endif
+       }
+       else{
+               u8 retry_cnts = 0;
+
+               if(rtw_read8(Adapter, REG_MCUFWDL) & BIT1)
+               { //IF fw in RAM code, do reset
+
+                       rtw_write8(Adapter, REG_MCUFWDL, 0);
+                       if(Adapter->bFWReady){
+                               // 2010/08/25 MH Accordign to RD alfred's suggestion, we need to disable other
+                               // HRCV INT to influence 8051 reset.
+                               rtw_write8(Adapter, REG_FWIMR, 0x20);
+
+                               rtw_write8(Adapter, REG_HMETFR+3, 0x20);//8051 reset by self
+
+                               while( (retry_cnts++ <100) && (FEN_CPUEN &rtw_read16(Adapter, REG_SYS_FUNC_EN)))
+                               {
+                                       rtw_udelay_os(50);//PlatformStallExecution(50);//us
+                               }
+
+                               if(retry_cnts >= 100){
+                                       DBG_8192C("%s #####=> 8051 reset failed!.........................\n", __FUNCTION__);
+                                       // if 8051 reset fail we trigger GPIO 0 for LA
+                                       //PlatformEFIOWrite4Byte(       Adapter,
+                                       //                                              REG_GPIO_PIN_CTRL,
+                                       //                                              0x00010100);
+                                       // 2010/08/31 MH According to Filen's info, if 8051 reset fail, reset MAC directly.
+                                       rtw_write8(Adapter, REG_SYS_FUNC_EN+1, 0x50);   //Reset MAC and Enable 8051
+                                       rtw_mdelay_os(10);
+                               }
+                               else {
+                                       //DBG_871X("%s =====> 8051 reset success (%d) .\n", __FUNCTION__, retry_cnts);
+                               }
+                       }
+                       else {
+                               DBG_871X("%s =====> 8051 in RAM but !Adapter->bFWReady\n", __FUNCTION__);
+                       }
+               }
+               else{
+                       //DBG_871X("%s =====> 8051 in ROM.\n", __FUNCTION__);
+               }
+
+               #ifdef DBG_SHOW_MCUFWDL_BEFORE_51_ENABLE
+               {
+                       u8 val;
+                       if( (val=rtw_read8(Adapter, REG_MCUFWDL)))
+                               DBG_871X("DBG_SHOW_MCUFWDL_BEFORE_51_ENABLE %s:%d REG_MCUFWDL:0x%02x\n", __FUNCTION__, __LINE__, val);
+               }
+               #endif
+
+               rtw_write8(Adapter, REG_SYS_FUNC_EN+1, 0x54);   //Reset MAC and Enable 8051
+       }
+
+       // Clear rpwm value for initial toggle bit trigger.
+       rtw_write8(Adapter, REG_USB_HRPWM, 0x00);
+
+       if(bWithoutHWSM){
+       /*****************************
+               Without HW auto state machine
+       g.      SYS_CLKR 0x08[15:0] = 0x30A3                    //disable MAC clock
+       h.      AFE_PLL_CTRL 0x28[7:0] = 0x80                   //disable AFE PLL
+       i.      AFE_XTAL_CTRL 0x24[15:0] = 0x880F               //gated AFE DIG_CLOCK
+       j.      SYS_ISO_CTRL 0x00[7:0] = 0xF9                   // isolated digital to PON
+       ******************************/
+               //rtw_write16(Adapter, REG_SYS_CLKR, 0x30A3);
+               rtw_write16(Adapter, REG_SYS_CLKR, 0x70A3);//modify to 0x70A3 by Scott.
+               rtw_write8(Adapter, REG_AFE_PLL_CTRL, 0x80);
+               rtw_write16(Adapter, REG_AFE_XTAL_CTRL, 0x880F);
+               rtw_write8(Adapter, REG_SYS_ISO_CTRL, 0xF9);
+       }
+       else
+       {
+               // Disable all RF/BB power
+               rtw_write8(Adapter, REG_RF_CTRL, 0x00);
+       }
+       //RT_TRACE(COMP_INIT, DBG_LOUD, ("======> Reset Digital.\n"));
+
+}
+
+static VOID
+_ResetDigitalProcedure2(
+       IN      PADAPTER                        Adapter
+)
+{
+/*****************************
+k.     SYS_FUNC_EN 0x03[7:0] = 0x44                    // disable ELDR runction
+l.     SYS_CLKR 0x08[15:0] = 0x3083                    // disable ELDR clock
+m.     SYS_ISO_CTRL 0x01[7:0] = 0x83                   // isolated ELDR to PON
+******************************/
+       //rtw_write8(Adapter, REG_SYS_FUNC_EN+1, 0x44);//marked by Scott.
+       //rtw_write16(Adapter, REG_SYS_CLKR, 0x3083);
+       //rtw_write8(Adapter, REG_SYS_ISO_CTRL+1, 0x83);
+
+       rtw_write16(Adapter, REG_SYS_CLKR, 0x70a3); //modify to 0x70a3 by Scott.
+       rtw_write8(Adapter, REG_SYS_ISO_CTRL+1, 0x82); //modify to 0x82 by Scott.
+}
+
+static VOID
+_DisableAnalog(
+       IN PADAPTER                     Adapter,
+       IN BOOLEAN                      bWithoutHWSM
+       )
+{
+       u16 value16 = 0;
+       u8 value8=0;
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+
+       if(bWithoutHWSM){
+       /*****************************
+       n.      LDOA15_CTRL 0x20[7:0] = 0x04            // disable A15 power
+       o.      LDOV12D_CTRL 0x21[7:0] = 0x54           // disable digital core power
+       r.      When driver call disable, the ASIC will turn off remaining clock automatically
+       ******************************/
+
+               rtw_write8(Adapter, REG_LDOA15_CTRL, 0x04);
+               //PlatformIOWrite1Byte(Adapter, REG_LDOV12D_CTRL, 0x54);
+
+               value8 = rtw_read8(Adapter, REG_LDOV12D_CTRL);
+               value8 &= (~LDV12_EN);
+               rtw_write8(Adapter, REG_LDOV12D_CTRL, value8);
+               //RT_TRACE(COMP_INIT, DBG_LOUD, (" REG_LDOV12D_CTRL Reg0x21:0x%02x.\n",value8));
+       }
+
+/*****************************
+h.     SPS0_CTRL 0x11[7:0] = 0x23                      //enter PFM mode
+i.     APS_FSMCO 0x04[15:0] = 0x4802           // set USB suspend
+******************************/
+
+
+       value8 = 0x23;
+       if (IS_81xxC_VENDOR_UMC_B_CUT(pHalData->VersionID))
+               value8 |= BIT3;
+
+       rtw_write8(Adapter, REG_SPS0_CTRL, value8);
+
+
+       if(bWithoutHWSM)
+       {
+               //value16 |= (APDM_HOST | /*AFSM_HSUS |*/PFM_ALDN);
+               // 2010/08/31 According to Filen description, we need to use HW to shut down 8051 automatically.
+               // Becasue suspend operatione need the asistance of 8051 to wait for 3ms.
+               value16 |= (APDM_HOST | AFSM_HSUS |PFM_ALDN);
+       }
+       else
+       {
+               value16 |= (APDM_HOST | AFSM_HSUS |PFM_ALDN);
+       }
+
+       rtw_write16(Adapter, REG_APS_FSMCO,value16 );//0x4802
+
+       rtw_write8(Adapter, REG_RSV_CTRL, 0x0e);
+
+ #if 0
+       //tynli_test for suspend mode.
+       if(!bWithoutHWSM){
+               rtw_write8(Adapter, 0xfe10, 0x19);
+       }
+#endif
+
+       //RT_TRACE(COMP_INIT, DBG_LOUD, ("======> Disable Analog Reg0x04:0x%04x.\n",value16));
+}
+
+static int
+CardDisableHWSM( // HW Auto state machine
+       IN      PADAPTER                Adapter,
+       IN      BOOLEAN                 resetMCU
+       )
+{
+       int             rtStatus = _SUCCESS;
+       if(Adapter->bSurpriseRemoved){
+               return rtStatus;
+       }
+#if 1
+       //==== RF Off Sequence ====
+       _DisableRFAFEAndResetBB(Adapter);
+
+       //  ==== Reset digital sequence   ======
+       _ResetDigitalProcedure1(Adapter, _FALSE);
+
+       //  ==== Pull GPIO PIN to balance level and LED control ======
+       _DisableGPIO(Adapter);
+
+       //  ==== Disable analog sequence ===
+       _DisableAnalog(Adapter, _FALSE);
+
+       RT_TRACE(_module_hci_hal_init_c_, _drv_info_, ("======> Card disable finished.\n"));
+#else
+       _DisableGPIO(Adapter);
+
+       //reset FW download register
+       _ResetFWDownloadRegister(Adapter);
+
+
+       //disable RF/ AFE AD/DA
+       rtStatus = _DisableRF_AFE(Adapter);
+       if(RT_STATUS_SUCCESS != rtStatus){
+               RT_TRACE(COMP_INIT, DBG_SERIOUS, ("_DisableRF_AFE failed!\n"));
+               goto Exit;
+       }
+       _ResetBB(Adapter);
+
+       if(resetMCU){
+               _ResetMCU(Adapter);
+       }
+
+       _AutoPowerDownToHostOff(Adapter);
+       //_DisableMAC_AFE_PLL(Adapter);
+
+       _SetUsbSuspend(Adapter);
+Exit:
+#endif
+       return rtStatus;
+
+}
+
+static int
+CardDisableWithoutHWSM( // without HW Auto state machine
+       IN      PADAPTER                Adapter
+       )
+{
+       int             rtStatus = _SUCCESS;
+
+       if(Adapter->bSurpriseRemoved){
+               return rtStatus;
+       }
+       //RT_TRACE(COMP_INIT, DBG_LOUD, ("======> Card Disable Without HWSM .\n"));
+       //==== RF Off Sequence ====
+       _DisableRFAFEAndResetBB(Adapter);
+
+       //  ==== Reset digital sequence   ======
+       _ResetDigitalProcedure1(Adapter, _TRUE);
+
+       //  ==== Pull GPIO PIN to balance level and LED control ======
+       _DisableGPIO(Adapter);
+
+       //  ==== Reset digital sequence   ======
+       _ResetDigitalProcedure2(Adapter);
+
+       //  ==== Disable analog sequence ===
+       _DisableAnalog(Adapter, _TRUE);
+       //RT_TRACE(COMP_INIT, DBG_LOUD, ("<====== Card Disable Without HWSM .\n"));
+       return rtStatus;
+}
+
+static void rtl8192cu_hw_power_down(_adapter *padapter)
+{
+       // 2010/-8/09 MH For power down module, we need to enable register block contrl reg at 0x1c.
+       // Then enable power down control bit of register 0x04 BIT4 and BIT15 as 1.
+
+       // Enable register area 0x0-0xc.
+       rtw_write8(padapter,REG_RSV_CTRL, 0x0);
+       rtw_write16(padapter, REG_APS_FSMCO, 0x8812);
+}
+
+u32 rtl8192cu_hal_deinit(PADAPTER Adapter)
+ {
+
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       DBG_8192C("==> %s \n",__FUNCTION__);
+       // 2011/02/18 To Fix RU LNA  power leakage problem. We need to execute below below in
+       // Adapter init and halt sequence. Accordingto EEchou's opinion, we can enable the ability for all
+       // IC. Accord to johnny's opinion, only RU need the support.
+       if (IS_HARDWARE_TYPE_8192C(Adapter)  && (pHalData->BoardType == BOARD_USB_High_PA))
+               rtw_write32(Adapter, rFPGA0_XCD_RFParameter, rtw_read32(Adapter, rFPGA0_XCD_RFParameter)|BIT1);
+
+ #ifdef SUPPORT_HW_RFOFF_DETECTED
+       DBG_8192C("bkeepfwalive(%x)\n",Adapter->pwrctrlpriv.bkeepfwalive);
+       if(Adapter->pwrctrlpriv.bkeepfwalive)
+       {
+               _ps_close_RF(Adapter);
+               if((Adapter->pwrctrlpriv.bHWPwrPindetect) && (Adapter->pwrctrlpriv.bHWPowerdown))
+                       rtl8192cu_hw_power_down(Adapter);
+       }
+       else
+#endif
+       {
+               if( Adapter->bCardDisableWOHSM == _FALSE)
+               {
+                       DBG_8192C("card disble HWSM...........\n");
+                       CardDisableHWSM(Adapter, _FALSE);
+               }
+               else
+               {
+                       DBG_8192C("card disble without HWSM...........\n");
+                       CardDisableWithoutHWSM(Adapter); // without HW Auto state machine
+
+                       if((Adapter->pwrctrlpriv.bHWPwrPindetect ) && (Adapter->pwrctrlpriv.bHWPowerdown))
+                               rtl8192cu_hw_power_down(Adapter);
+               }
+       }
+
+       return _SUCCESS;
+ }
+
+
+unsigned int rtl8192cu_inirp_init(PADAPTER Adapter)
+{
+       u8 i;
+       struct recv_buf *precvbuf;
+       uint    status;
+       struct dvobj_priv *pdev = adapter_to_dvobj(Adapter);
+       struct intf_hdl * pintfhdl=&Adapter->iopriv.intf;
+       struct recv_priv *precvpriv = &(Adapter->recvpriv);
+       u32 (*_read_port)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);
+#ifdef CONFIG_USB_INTERRUPT_IN_PIPE
+       u32 (*_read_interrupt)(struct intf_hdl *pintfhdl, u32 addr);
+#endif
+
+_func_enter_;
+
+       _read_port = pintfhdl->io_ops._read_port;
+
+       status = _SUCCESS;
+
+       RT_TRACE(_module_hci_hal_init_c_,_drv_info_,("===> usb_inirp_init \n"));
+
+       precvpriv->ff_hwaddr = RECV_BULK_IN_ADDR;
+
+       //issue Rx irp to receive data
+       precvbuf = (struct recv_buf *)precvpriv->precv_buf;
+       for(i=0; i<NR_RECVBUFF; i++)
+       {
+               if(_read_port(pintfhdl, precvpriv->ff_hwaddr, 0, (unsigned char *)precvbuf) == _FALSE )
+               {
+                       RT_TRACE(_module_hci_hal_init_c_,_drv_err_,("usb_rx_init: usb_read_port error \n"));
+                       status = _FAIL;
+                       goto exit;
+               }
+
+               precvbuf++;
+               precvpriv->free_recv_buf_queue_cnt--;
+       }
+
+#ifdef CONFIG_USB_INTERRUPT_IN_PIPE
+       _read_interrupt = pintfhdl->io_ops._read_interrupt;
+       if(_read_interrupt(pintfhdl, RECV_INT_IN_ADDR) == _FALSE )
+       {
+               RT_TRACE(_module_hci_hal_init_c_,_drv_err_,("usb_rx_init: usb_read_interrupt error \n"));
+               status = _FAIL;
+       }
+#endif
+
+exit:
+
+       RT_TRACE(_module_hci_hal_init_c_,_drv_info_,("<=== usb_inirp_init \n"));
+
+_func_exit_;
+
+       return status;
+
+}
+
+unsigned int rtl8192cu_inirp_deinit(PADAPTER Adapter)
+{
+       RT_TRACE(_module_hci_hal_init_c_,_drv_info_,("\n ===> usb_rx_deinit \n"));
+
+       rtw_read_port_cancel(Adapter);
+
+       RT_TRACE(_module_hci_hal_init_c_,_drv_info_,("\n <=== usb_rx_deinit \n"));
+
+       return _SUCCESS;
+}
+
+
+//-------------------------------------------------------------------------
+//
+//     EEPROM Power index mapping
+//
+//-------------------------------------------------------------------------
+
+ static VOID
+_ReadPowerValueFromPROM(
+       IN      PTxPowerInfo    pwrInfo,
+       IN      u8*                     PROMContent,
+       IN      BOOLEAN                 AutoLoadFail
+       )
+{
+       u32 rfPath, eeAddr, group;
+
+       _rtw_memset(pwrInfo, 0, sizeof(TxPowerInfo));
+
+       if(AutoLoadFail){
+               for(group = 0 ; group < CHANNEL_GROUP_MAX ; group++){
+                       for(rfPath = 0 ; rfPath < RF_PATH_MAX ; rfPath++){
+                               pwrInfo->CCKIndex[rfPath][group]                = EEPROM_Default_TxPowerLevel;
+                               pwrInfo->HT40_1SIndex[rfPath][group]    = EEPROM_Default_TxPowerLevel;
+                               pwrInfo->HT40_2SIndexDiff[rfPath][group]= EEPROM_Default_HT40_2SDiff;
+                               pwrInfo->HT20IndexDiff[rfPath][group]   = EEPROM_Default_HT20_Diff;
+                               pwrInfo->OFDMIndexDiff[rfPath][group]   = EEPROM_Default_LegacyHTTxPowerDiff;
+                               pwrInfo->HT40MaxOffset[rfPath][group]   = EEPROM_Default_HT40_PwrMaxOffset;
+                               pwrInfo->HT20MaxOffset[rfPath][group]   = EEPROM_Default_HT20_PwrMaxOffset;
+                       }
+               }
+
+               pwrInfo->TSSI_A = EEPROM_Default_TSSI;
+               pwrInfo->TSSI_B = EEPROM_Default_TSSI;
+
+               return;
+       }
+
+       for(rfPath = 0 ; rfPath < RF_PATH_MAX ; rfPath++){
+               for(group = 0 ; group < CHANNEL_GROUP_MAX ; group++){
+                       eeAddr = EEPROM_CCK_TX_PWR_INX + (rfPath * 3) + group;
+                       pwrInfo->CCKIndex[rfPath][group] = PROMContent[eeAddr];
+
+                       eeAddr = EEPROM_HT40_1S_TX_PWR_INX + (rfPath * 3) + group;
+                       pwrInfo->HT40_1SIndex[rfPath][group] = PROMContent[eeAddr];
+               }
+       }
+
+       for(group = 0 ; group < CHANNEL_GROUP_MAX ; group++){
+               for(rfPath = 0 ; rfPath < RF_PATH_MAX ; rfPath++){
+                       pwrInfo->HT40_2SIndexDiff[rfPath][group] =
+                       (PROMContent[EEPROM_HT40_2S_TX_PWR_INX_DIFF + group] >> (rfPath * 4)) & 0xF;
+
+#if 1
+                       pwrInfo->HT20IndexDiff[rfPath][group] =
+                       (PROMContent[EEPROM_HT20_TX_PWR_INX_DIFF + group] >> (rfPath * 4)) & 0xF;
+                       if(pwrInfo->HT20IndexDiff[rfPath][group] & BIT3)        //4bit sign number to 8 bit sign number
+                               pwrInfo->HT20IndexDiff[rfPath][group] |= 0xF0;
+#else
+                       pwrInfo->HT20IndexDiff[rfPath][group] =
+                       (PROMContent[EEPROM_HT20_TX_PWR_INX_DIFF + group] >> (rfPath * 4)) & 0xF;
+#endif
+
+                       pwrInfo->OFDMIndexDiff[rfPath][group] =
+                       (PROMContent[EEPROM_OFDM_TX_PWR_INX_DIFF+ group] >> (rfPath * 4)) & 0xF;
+
+                       pwrInfo->HT40MaxOffset[rfPath][group] =
+                       (PROMContent[EEPROM_HT40_MAX_PWR_OFFSET+ group] >> (rfPath * 4)) & 0xF;
+
+                       pwrInfo->HT20MaxOffset[rfPath][group] =
+                       (PROMContent[EEPROM_HT20_MAX_PWR_OFFSET+ group] >> (rfPath * 4)) & 0xF;
+               }
+       }
+
+       pwrInfo->TSSI_A = PROMContent[EEPROM_TSSI_A];
+       pwrInfo->TSSI_B = PROMContent[EEPROM_TSSI_B];
+
+}
+
+
+static u32
+_GetChannelGroup(
+       IN      u32     channel
+       )
+{
+       //RT_ASSERT((channel < 14), ("Channel %d no is supported!\n"));
+
+       if(channel < 3){        // Channel 1~3
+               return 0;
+       }
+       else if(channel < 9){ // Channel 4~9
+               return 1;
+       }
+
+       return 2;                               // Channel 10~14
+}
+
+
+static VOID
+ReadTxPowerInfo(
+       IN      PADAPTER                Adapter,
+       IN      u8*                     PROMContent,
+       IN      BOOLEAN                 AutoLoadFail
+       )
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       TxPowerInfo             pwrInfo;
+       u32                     rfPath, ch, group;
+       u8                      pwr, diff;
+
+       _ReadPowerValueFromPROM(&pwrInfo, PROMContent, AutoLoadFail);
+
+       if(!AutoLoadFail)
+               pHalData->bTXPowerDataReadFromEEPORM = _TRUE;
+
+       for(rfPath = 0 ; rfPath < RF_PATH_MAX ; rfPath++){
+               for(ch = 0 ; ch < CHANNEL_MAX_NUMBER ; ch++){
+                       group = _GetChannelGroup(ch);
+
+                       pHalData->TxPwrLevelCck[rfPath][ch]             = pwrInfo.CCKIndex[rfPath][group];
+                       pHalData->TxPwrLevelHT40_1S[rfPath][ch] = pwrInfo.HT40_1SIndex[rfPath][group];
+
+                       pHalData->TxPwrHt20Diff[rfPath][ch]             = pwrInfo.HT20IndexDiff[rfPath][group];
+                       pHalData->TxPwrLegacyHtDiff[rfPath][ch] = pwrInfo.OFDMIndexDiff[rfPath][group];
+                       pHalData->PwrGroupHT20[rfPath][ch]              = pwrInfo.HT20MaxOffset[rfPath][group];
+                       pHalData->PwrGroupHT40[rfPath][ch]              = pwrInfo.HT40MaxOffset[rfPath][group];
+
+                       pwr             = pwrInfo.HT40_1SIndex[rfPath][group];
+                       diff    = pwrInfo.HT40_2SIndexDiff[rfPath][group];
+
+                       pHalData->TxPwrLevelHT40_2S[rfPath][ch]  = (pwr > diff) ? (pwr - diff) : 0;
+               }
+       }
+
+#if DBG
+
+       for(rfPath = 0 ; rfPath < RF_PATH_MAX ; rfPath++){
+               for(ch = 0 ; ch < CHANNEL_MAX_NUMBER ; ch++){
+                       RTPRINT(FINIT, INIT_TxPower,
+                               ("RF(%d)-Ch(%d) [CCK / HT40_1S / HT40_2S] = [0x%x / 0x%x / 0x%x]\n",
+                               rfPath, ch, pHalData->TxPwrLevelCck[rfPath][ch],
+                               pHalData->TxPwrLevelHT40_1S[rfPath][ch],
+                               pHalData->TxPwrLevelHT40_2S[rfPath][ch]));
+
+               }
+       }
+
+       for(ch = 0 ; ch < CHANNEL_MAX_NUMBER ; ch++){
+               RTPRINT(FINIT, INIT_TxPower, ("RF-A Ht20 to HT40 Diff[%d] = 0x%x\n", ch, pHalData->TxPwrHt20Diff[RF_PATH_A][ch]));
+       }
+
+       for(ch = 0 ; ch < CHANNEL_MAX_NUMBER ; ch++){
+               RTPRINT(FINIT, INIT_TxPower, ("RF-A Legacy to Ht40 Diff[%d] = 0x%x\n", ch, pHalData->TxPwrLegacyHtDiff[RF_PATH_A][ch]));
+       }
+
+       for(ch = 0 ; ch < CHANNEL_MAX_NUMBER ; ch++){
+               RTPRINT(FINIT, INIT_TxPower, ("RF-B Ht20 to HT40 Diff[%d] = 0x%x\n", ch, pHalData->TxPwrHt20Diff[RF_PATH_B][ch]));
+       }
+
+       for(ch = 0 ; ch < CHANNEL_MAX_NUMBER ; ch++){
+               RTPRINT(FINIT, INIT_TxPower, ("RF-B Legacy to HT40 Diff[%d] = 0x%x\n", ch, pHalData->TxPwrLegacyHtDiff[RF_PATH_B][ch]));
+       }
+
+#endif
+       // 2010/10/19 MH Add Regulator recognize for CU.
+       if(!AutoLoadFail)
+       {
+               pHalData->EEPROMRegulatory = (PROMContent[RF_OPTION1]&0x7);     //bit0~2
+       }
+       else
+       {
+               pHalData->EEPROMRegulatory = 0;
+       }
+       DBG_8192C("EEPROMRegulatory = 0x%x\n", pHalData->EEPROMRegulatory);
+
+}
+
+
+//-------------------------------------------------------------------
+//
+//     EEPROM/EFUSE Content Parsing
+//
+//-------------------------------------------------------------------
+static void
+_ReadIDs(
+       IN      PADAPTER        Adapter,
+       IN      u8*             PROMContent,
+       IN      BOOLEAN         AutoloadFail
+       )
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+
+       if(_FALSE == AutoloadFail){
+               // VID, PID
+               pHalData->EEPROMVID = le16_to_cpu( *(u16 *)&PROMContent[EEPROM_VID]);
+               pHalData->EEPROMPID = le16_to_cpu( *(u16 *)&PROMContent[EEPROM_PID]);
+
+               // Customer ID, 0x00 and 0xff are reserved for Realtek.
+               pHalData->EEPROMCustomerID = *(u8 *)&PROMContent[EEPROM_CUSTOMER_ID];
+               pHalData->EEPROMSubCustomerID = *(u8 *)&PROMContent[EEPROM_SUBCUSTOMER_ID];
+
+       }
+       else{
+               pHalData->EEPROMVID      = EEPROM_Default_VID;
+               pHalData->EEPROMPID      = EEPROM_Default_PID;
+
+               // Customer ID, 0x00 and 0xff are reserved for Realtek.
+               pHalData->EEPROMCustomerID      = EEPROM_Default_CustomerID;
+               pHalData->EEPROMSubCustomerID = EEPROM_Default_SubCustomerID;
+
+       }
+
+       // For customized behavior.
+       if((pHalData->EEPROMVID == 0x103C) && (pHalData->EEPROMVID == 0x1629))// HP Lite-On for RTL8188CUS Slim Combo.
+               pHalData->CustomerID = RT_CID_819x_HP;
+
+       //      Decide CustomerID according to VID/DID or EEPROM
+       switch(pHalData->EEPROMCustomerID)
+       {
+               case EEPROM_CID_DEFAULT:
+                       if((pHalData->EEPROMVID == 0x2001) && (pHalData->EEPROMPID == 0x3308))
+                               pHalData->CustomerID = RT_CID_DLINK;
+                       else if((pHalData->EEPROMVID == 0x2001) && (pHalData->EEPROMPID == 0x3309))
+                               pHalData->CustomerID = RT_CID_DLINK;
+                       else if((pHalData->EEPROMVID == 0x2001) && (pHalData->EEPROMPID == 0x330a))
+                               pHalData->CustomerID = RT_CID_DLINK;
+                       break;
+               case EEPROM_CID_WHQL:
+/*
+                       Adapter->bInHctTest = TRUE;
+
+                       pMgntInfo->bSupportTurboMode = FALSE;
+                       pMgntInfo->bAutoTurboBy8186 = FALSE;
+
+                       pMgntInfo->PowerSaveControl.bInactivePs = FALSE;
+                       pMgntInfo->PowerSaveControl.bIPSModeBackup = FALSE;
+                       pMgntInfo->PowerSaveControl.bLeisurePs = FALSE;
+
+                       pMgntInfo->keepAliveLevel = 0;
+
+                       Adapter->bUnloadDriverwhenS3S4 = FALSE;
+*/
+                       break;
+               default:
+                       pHalData->CustomerID = RT_CID_DEFAULT;
+                       break;
+
+       }
+
+       MSG_8192C("EEPROMVID = 0x%04x\n", pHalData->EEPROMVID);
+       MSG_8192C("EEPROMPID = 0x%04x\n", pHalData->EEPROMPID);
+       MSG_8192C("EEPROMCustomerID : 0x%02x\n", pHalData->EEPROMCustomerID);
+       MSG_8192C("EEPROMSubCustomerID: 0x%02x\n", pHalData->EEPROMSubCustomerID);
+
+       MSG_8192C("RT_CustomerID: 0x%02x\n", pHalData->CustomerID);
+
+}
+
+
+static VOID
+_ReadMACAddress(
+       IN      PADAPTER        Adapter,
+       IN      u8*             PROMContent,
+       IN      BOOLEAN         AutoloadFail
+       )
+{
+       EEPROM_EFUSE_PRIV *pEEPROM = GET_EEPROM_EFUSE_PRIV(Adapter);
+
+       if(_FALSE == AutoloadFail){
+               //Read Permanent MAC address and set value to hardware
+               _rtw_memcpy(pEEPROM->mac_addr, &PROMContent[EEPROM_MAC_ADDR], ETH_ALEN);
+       }
+       else{
+               //Random assigh MAC address
+               u8 sMacAddr[MAC_ADDR_LEN] = {0x00, 0xE0, 0x4C, 0x81, 0x92, 0x00};
+               //sMacAddr[5] = (u8)GetRandomNumber(1, 254);
+               _rtw_memcpy(pEEPROM->mac_addr, sMacAddr, ETH_ALEN);
+       }
+       DBG_8192C("%s MAC Address from EFUSE = "MAC_FMT"\n",__FUNCTION__, MAC_ARG(pEEPROM->mac_addr));
+       //NicIFSetMacAddress(Adapter, Adapter->PermanentAddress);
+       //RT_PRINT_ADDR(COMP_INIT|COMP_EFUSE, DBG_LOUD, "MAC Addr: %s", Adapter->PermanentAddress);
+
+}
+
+static VOID
+_ReadBoardType(
+       IN      PADAPTER        Adapter,
+       IN      u8*             PROMContent,
+       IN      BOOLEAN         AutoloadFail
+       )
+{
+       HAL_DATA_TYPE           *pHalData = GET_HAL_DATA(Adapter);
+       u32                     value32;
+       u8                      boardType = BOARD_USB_DONGLE;
+
+       if(AutoloadFail){
+               if(IS_8723_SERIES(pHalData->VersionID))
+                       pHalData->rf_type = RF_1T1R;
+               else
+                       pHalData->rf_type = RF_2T2R;
+
+               pHalData->BluetoothCoexist = _FALSE;
+               pHalData->BoardType = boardType;
+               return;
+       }
+
+       boardType = PROMContent[EEPROM_NORMAL_BoardType];
+       boardType &= BOARD_TYPE_NORMAL_MASK;//bit[7:5]
+       boardType >>= 5;
+
+       pHalData->BoardType = boardType;
+       MSG_8192C("_ReadBoardType(%x)\n",pHalData->BoardType);
+
+       if (boardType == BOARD_USB_High_PA)
+               pHalData->ExternalPA = 1;
+}
+
+
+static VOID
+_ReadLEDSetting(
+       IN      PADAPTER        Adapter,
+       IN      u8*             PROMContent,
+       IN      BOOLEAN         AutoloadFail
+       )
+{
+       struct led_priv *pledpriv = &(Adapter->ledpriv);
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+#ifdef CONFIG_SW_LED
+       pledpriv->bRegUseLed = _TRUE;
+
+       //
+       // Led mode
+       //
+       switch(pHalData->CustomerID)
+       {
+               case RT_CID_DEFAULT:
+                       pledpriv->LedStrategy = SW_LED_MODE1;
+                       pledpriv->bRegUseLed = _TRUE;
+                       break;
+
+               case RT_CID_819x_HP:
+                       pledpriv->LedStrategy = SW_LED_MODE6;
+                       break;
+
+               default:
+                       pledpriv->LedStrategy = SW_LED_MODE1;
+                       break;
+       }
+
+       if( BOARD_MINICARD == pHalData->BoardType )
+       {
+               pledpriv->LedStrategy = SW_LED_MODE6;
+       }
+       pHalData->bLedOpenDrain = _TRUE;// Support Open-drain arrangement for controlling the LED. Added by Roger, 2009.10.16.
+#else // HW LED
+       pledpriv->LedStrategy = HW_LED;
+#endif //CONFIG_SW_LED
+}
+
+static VOID
+_ReadThermalMeter(
+       IN      PADAPTER        Adapter,
+       IN      u8*     PROMContent,
+       IN      BOOLEAN         AutoloadFail
+       )
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+       u8      tempval;
+
+       //
+       // ThermalMeter from EEPROM
+       //
+       if(!AutoloadFail)
+               tempval = PROMContent[EEPROM_THERMAL_METER];
+       else
+               tempval = EEPROM_Default_ThermalMeter;
+
+       pHalData->EEPROMThermalMeter = (tempval&0x1f);  //[4:0]
+
+       if(pHalData->EEPROMThermalMeter == 0x1f || AutoloadFail)
+               pdmpriv->bAPKThermalMeterIgnore = _TRUE;
+
+#if 0
+       if(pHalData->EEPROMThermalMeter < 0x06 || pHalData->EEPROMThermalMeter > 0x1c)
+               pHalData->EEPROMThermalMeter = 0x12;
+#endif
+
+       pdmpriv->ThermalMeter[0] = pHalData->EEPROMThermalMeter;
+
+       //RTPRINT(FINIT, INIT_TxPower, ("ThermalMeter = 0x%x\n", pHalData->EEPROMThermalMeter));
+
+}
+
+static VOID
+_ReadRFSetting(
+       IN      PADAPTER        Adapter,
+       IN      u8*     PROMContent,
+       IN      BOOLEAN         AutoloadFail
+       )
+{
+}
+
+static void
+_ReadPROMVersion(
+       IN      PADAPTER        Adapter,
+       IN      u8*     PROMContent,
+       IN      BOOLEAN         AutoloadFail
+       )
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+
+       if(AutoloadFail){
+               pHalData->EEPROMVersion = EEPROM_Default_Version;
+       }
+       else{
+               pHalData->EEPROMVersion = *(u8 *)&PROMContent[EEPROM_VERSION];
+       }
+}
+
+static VOID
+readAntennaDiversity(
+       IN      PADAPTER        pAdapter,
+       IN      u8                      *hwinfo,
+       IN      BOOLEAN         AutoLoadFail
+       )
+{
+
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(pAdapter);
+       struct registry_priv    *registry_par = &pAdapter->registrypriv;
+
+       if(!AutoLoadFail)
+       {
+               // Antenna Diversity setting.
+               if(registry_par->antdiv_cfg == 2) // 2: From Efuse
+                       pHalData->AntDivCfg = (hwinfo[EEPROM_RF_OPT1]&0x18)>>3;
+               else
+                       pHalData->AntDivCfg = registry_par->antdiv_cfg ;  // 0:OFF , 1:ON,
+
+               DBG_8192C("### AntDivCfg(%x)\n",pHalData->AntDivCfg);
+
+               //if(pHalData->EEPROMBluetoothCoexist!=0 && pHalData->EEPROMBluetoothAntNum==Ant_x1)
+               //      pHalData->AntDivCfg = 0;
+       }
+       else
+       {
+               pHalData->AntDivCfg = 0;
+       }
+
+}
+
+static VOID
+hal_InitPGData(
+       IN      PADAPTER        pAdapter,
+       IN      OUT     u8              *PROMContent
+       )
+{
+       EEPROM_EFUSE_PRIV *pEEPROM = GET_EEPROM_EFUSE_PRIV(pAdapter);
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(pAdapter);
+       u32     i;
+       u16     value16;
+
+       if(_FALSE == pEEPROM->bautoload_fail_flag)
+       { // autoload OK.
+               if (_TRUE == pEEPROM->EepromOrEfuse)
+               {
+                       // Read all Content from EEPROM or EFUSE.
+                       for(i = 0; i < HWSET_MAX_SIZE; i += 2)
+                       {
+                               //value16 = EF2Byte(ReadEEprom(pAdapter, (u2Byte) (i>>1)));
+                               //*((u16 *)(&PROMContent[i])) = value16;
+                       }
+               }
+               else
+               {
+                       // Read EFUSE real map to shadow.
+                       EFUSE_ShadowMapUpdate(pAdapter, EFUSE_WIFI, _FALSE);
+                       _rtw_memcpy((void*)PROMContent, (void*)pEEPROM->efuse_eeprom_data, HWSET_MAX_SIZE);
+               }
+       }
+       else
+       {//autoload fail
+               //RT_TRACE(COMP_INIT, DBG_LOUD, ("AutoLoad Fail reported from CR9346!!\n"));
+               pEEPROM->bautoload_fail_flag = _TRUE;
+               //update to default value 0xFF
+               if (_FALSE == pEEPROM->EepromOrEfuse)
+               EFUSE_ShadowMapUpdate(pAdapter, EFUSE_WIFI, _FALSE);
+       }
+}
+// Read HW power down mode selection
+static void _ReadPSSetting(IN PADAPTER Adapter,IN u8*PROMContent,IN u8 AutoloadFail)
+{
+       if(AutoloadFail){
+               Adapter->pwrctrlpriv.bHWPowerdown = _FALSE;
+               Adapter->pwrctrlpriv.bSupportRemoteWakeup = _FALSE;
+       }
+       else    {
+               //if(SUPPORT_HW_RADIO_DETECT(Adapter))
+                       Adapter->pwrctrlpriv.bHWPwrPindetect = Adapter->registrypriv.hwpwrp_detect;
+               //else
+                       //Adapter->pwrctrlpriv.bHWPwrPindetect = _FALSE;//dongle not support new
+
+
+               //hw power down mode selection , 0:rf-off / 1:power down
+
+               if(Adapter->registrypriv.hwpdn_mode==2)
+                       Adapter->pwrctrlpriv.bHWPowerdown = (PROMContent[EEPROM_RF_OPT3] & BIT4);
+               else
+                       Adapter->pwrctrlpriv.bHWPowerdown = Adapter->registrypriv.hwpdn_mode;
+#ifdef CONFIG_WOWLAN
+               // decide hw if support remote wakeup function
+               // if hw supported, 8051 (SIE) will generate WeakUP signal( D+/D- toggle) when autoresume
+               Adapter->pwrctrlpriv.bSupportRemoteWakeup = (PROMContent[EEPROM_TEST_USB_OPT] & BIT1)?_TRUE :_FALSE;
+#endif //CONFIG_WOWLAN
+
+               //if(SUPPORT_HW_RADIO_DETECT(Adapter))
+                       //Adapter->registrypriv.usbss_enable = Adapter->pwrctrlpriv.bSupportRemoteWakeup ;
+
+               DBG_8192C("%s...bHWPwrPindetect(%x)-bHWPowerdown(%x) ,bSupportRemoteWakeup(%x)\n",__FUNCTION__,
+               Adapter->pwrctrlpriv.bHWPwrPindetect,Adapter->pwrctrlpriv.bHWPowerdown ,Adapter->pwrctrlpriv.bSupportRemoteWakeup);
+
+               DBG_8192C("### PS params=>  power_mgnt(%x),usbss_enable(%x) ###\n",Adapter->registrypriv.power_mgnt,Adapter->registrypriv.usbss_enable);
+
+       }
+
+}
+
+static VOID
+readAdapterInfo_8192CU(
+       IN      PADAPTER        Adapter
+       )
+{
+       EEPROM_EFUSE_PRIV *pEEPROM = GET_EEPROM_EFUSE_PRIV(Adapter);
+       PHAL_DATA_TYPE pHalData = GET_HAL_DATA(Adapter);
+       u8      PROMContent[HWSET_MAX_SIZE]={0};
+
+       hal_InitPGData(Adapter, PROMContent);
+       rtl8192c_EfuseParseIDCode(Adapter, PROMContent);
+
+       _ReadPROMVersion(Adapter, PROMContent, pEEPROM->bautoload_fail_flag);
+       _ReadIDs(Adapter, PROMContent, pEEPROM->bautoload_fail_flag);
+       _ReadMACAddress(Adapter, PROMContent, pEEPROM->bautoload_fail_flag);
+       ReadTxPowerInfo(Adapter, PROMContent, pEEPROM->bautoload_fail_flag);
+       _ReadBoardType(Adapter, PROMContent, pEEPROM->bautoload_fail_flag);
+
+#ifdef CONFIG_BT_COEXIST
+       //
+       // Read Bluetooth co-exist and initialize
+       //
+       rtl8192c_ReadBluetoothCoexistInfo(Adapter, PROMContent, pEEPROM->bautoload_fail_flag);
+#endif
+
+       rtl8192c_EfuseParseChnlPlan(Adapter, PROMContent, pEEPROM->bautoload_fail_flag);
+       _ReadThermalMeter(Adapter, PROMContent, pEEPROM->bautoload_fail_flag);
+       _ReadLEDSetting(Adapter, PROMContent, pEEPROM->bautoload_fail_flag);
+       _ReadRFSetting(Adapter, PROMContent, pEEPROM->bautoload_fail_flag);
+       _ReadPSSetting(Adapter, PROMContent, pEEPROM->bautoload_fail_flag);
+       readAntennaDiversity(Adapter, PROMContent, pEEPROM->bautoload_fail_flag);
+
+       //hal_CustomizedBehavior_8723U(Adapter);
+
+       Adapter->bDongle = (PROMContent[EEPROM_EASY_REPLACEMENT] == 1)? 0: 1;
+       DBG_8192C("%s(): REPLACEMENT = %x\n",__FUNCTION__,Adapter->bDongle);
+#ifdef CONFIG_INTEL_PROXIM
+               /* for intel proximity */
+       if (pHalData->rf_type== RF_1T1R) {
+               Adapter->proximity.proxim_support = _TRUE;
+       } else if (pHalData->rf_type== RF_2T2R) {
+               if ((pHalData->EEPROMPID == 0x8186) &&
+                       (pHalData->EEPROMVID== 0x0bda))
+               Adapter->proximity.proxim_support = _TRUE;
+       } else {
+               Adapter->proximity.proxim_support = _FALSE;
+       }
+#endif //CONFIG_INTEL_PROXIM
+}
+
+static void _ReadPROMContent(
+       IN PADAPTER             Adapter
+       )
+{
+       EEPROM_EFUSE_PRIV *pEEPROM = GET_EEPROM_EFUSE_PRIV(Adapter);
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       u8                      PROMContent[HWSET_MAX_SIZE]={0};
+       u8                      eeValue;
+       u32                     i;
+       u16                     value16;
+
+       eeValue = rtw_read8(Adapter, REG_9346CR);
+       // To check system boot selection.
+       pEEPROM->EepromOrEfuse          = (eeValue & BOOT_FROM_EEPROM) ? _TRUE : _FALSE;
+       pEEPROM->bautoload_fail_flag    = (eeValue & EEPROM_EN) ? _FALSE : _TRUE;
+
+
+       DBG_8192C("Boot from %s, Autoload %s !\n", (pEEPROM->EepromOrEfuse ? "EEPROM" : "EFUSE"),
+                               (pEEPROM->bautoload_fail_flag ? "Fail" : "OK") );
+
+       //pHalData->EEType = IS_BOOT_FROM_EEPROM(Adapter) ? EEPROM_93C46 : EEPROM_BOOT_EFUSE;
+
+       //if(IS_HARDWARE_TYPE_8723A(Adapter))
+       //      readAdapterInfo_8723U(Adapter);
+       //else
+               readAdapterInfo_8192CU(Adapter);
+}
+
+
+static VOID
+_InitOtherVariable(
+       IN PADAPTER             Adapter
+       )
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+
+
+       //if(Adapter->bInHctTest){
+       //      pMgntInfo->PowerSaveControl.bInactivePs = FALSE;
+       //      pMgntInfo->PowerSaveControl.bIPSModeBackup = FALSE;
+       //      pMgntInfo->PowerSaveControl.bLeisurePs = FALSE;
+       //      pMgntInfo->keepAliveLevel = 0;
+       //}
+
+       // 2009/06/10 MH For 92S 1*1=1R/ 1*2&2*2 use 2R. We default set 1*1 use radio A
+       // So if you want to use radio B. Please modify RF path enable bit for correct signal
+       // strength calculate.
+       if (pHalData->rf_type == RF_1T1R){
+               pHalData->bRFPathRxEnable[0] = _TRUE;
+       }
+       else{
+               pHalData->bRFPathRxEnable[0] = pHalData->bRFPathRxEnable[1] = _TRUE;
+       }
+
+}
+
+static VOID
+_ReadRFType(
+       IN      PADAPTER        Adapter
+       )
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+
+#if DISABLE_BB_RF
+       pHalData->rf_chip = RF_PSEUDO_11N;
+#else
+       pHalData->rf_chip = RF_6052;
+#endif
+}
+
+void _ReadSilmComboMode(PADAPTER Adapter)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+
+       pHalData->SlimComboDbg = _FALSE;        // Default is not debug mode.
+
+       // 2010/11/22 MH We need to enter debug mode for TSMA and UMC A cut
+       if ((Adapter->chip_type == RTL8188C_8192C) &&
+               (pHalData->BoardType == BOARD_USB_COMBO))
+       {
+               switch (pHalData->VersionID)
+               {
+                       case    VERSION_NORMAL_TSMC_CHIP_88C:
+                       case    VERSION_NORMAL_TSMC_CHIP_92C:
+                       case    VERSION_NORMAL_TSMC_CHIP_92C_1T2R:
+                       case    VERSION_NORMAL_UMC_CHIP_88C_A_CUT:
+                       case    VERSION_NORMAL_UMC_CHIP_92C_A_CUT:
+                       case    VERSION_NORMAL_UMC_CHIP_92C_1T2R_A_CUT:
+                               if ((rtw_read8(Adapter, REG_SYS_CFG+3) &0xF0) == 0x20)
+                                       pHalData->SlimComboDbg = _TRUE;
+
+                               break;
+
+                       case    VERSION_NORMAL_UMC_CHIP_88C_B_CUT:
+                       case    VERSION_NORMAL_UMC_CHIP_92C_B_CUT:
+                       case    VERSION_NORMAL_UMC_CHIP_92C_1T2R_B_CUT:
+                               // 2011/02/15 MH UNC-B cut ECO fail, we need to support slim combo debug mode.
+                               if ((rtw_read8(Adapter, REG_SYS_CFG+3) &0xF0) == 0x20)
+                                       pHalData->SlimComboDbg = _TRUE;
+                               break;
+
+                       default:
+                               break;
+               }
+
+       }
+
+}
+static int _ReadAdapterInfo8192CU(PADAPTER     Adapter)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       u32 start=rtw_get_current_time();
+
+       MSG_8192C("====> ReadAdapterInfo8192C\n");
+
+       //Efuse_InitSomeVar(Adapter);
+
+       //if(IS_HARDWARE_TYPE_8723A(Adapter))
+       //      _EfuseCellSel(Adapter);
+
+       _ReadRFType(Adapter);//rf_chip -> _InitRFType()
+       _ReadPROMContent(Adapter);
+
+       // 2010/10/25 MH THe function must be called after borad_type & IC-Version recognize.
+       _ReadSilmComboMode(Adapter);
+
+       _InitOtherVariable(Adapter);
+
+       //MSG_8192C("%s()(done), rf_chip=0x%x, rf_type=0x%x\n",  __FUNCTION__, pHalData->rf_chip, pHalData->rf_type);
+
+       MSG_8192C("<==== ReadAdapterInfo8192C in %d ms\n", rtw_get_passing_time_ms(start));
+
+       return _SUCCESS;
+}
+
+
+static void ReadAdapterInfo8192CU(PADAPTER Adapter)
+{
+       // Read EEPROM size before call any EEPROM function
+       //Adapter->EepromAddressSize=Adapter->HalFunc.GetEEPROMSizeHandler(Adapter);
+       Adapter->EepromAddressSize = GetEEPROMSize8192C(Adapter);
+
+       _ReadAdapterInfo8192CU(Adapter);
+}
+
+
+#define GPIO_DEBUG_PORT_NUM 0
+static void rtl8192cu_trigger_gpio_0(_adapter *padapter)
+{
+
+       u32 gpioctrl;
+       DBG_8192C("==> trigger_gpio_0...\n");
+       rtw_write16_async(padapter,REG_GPIO_PIN_CTRL,0);
+       rtw_write8_async(padapter,REG_GPIO_PIN_CTRL+2,0xFF);
+       gpioctrl = (BIT(GPIO_DEBUG_PORT_NUM)<<24 )|(BIT(GPIO_DEBUG_PORT_NUM)<<16);
+       rtw_write32_async(padapter,REG_GPIO_PIN_CTRL,gpioctrl);
+       gpioctrl |= (BIT(GPIO_DEBUG_PORT_NUM)<<8);
+       rtw_write32_async(padapter,REG_GPIO_PIN_CTRL,gpioctrl);
+       DBG_8192C("<=== trigger_gpio_0...\n");
+
+}
+
+static void ResumeTxBeacon(_adapter *padapter)
+{
+       HAL_DATA_TYPE*  pHalData = GET_HAL_DATA(padapter);
+
+       // 2010.03.01. Marked by tynli. No need to call workitem beacause we record the value
+       // which should be read from register to a global variable.
+
+       rtw_write8(padapter, REG_FWHW_TXQ_CTRL+2, (pHalData->RegFwHwTxQCtrl) | BIT6);
+       pHalData->RegFwHwTxQCtrl |= BIT6;
+}
+
+static void StopTxBeacon(_adapter *padapter)
+{
+       HAL_DATA_TYPE*  pHalData = GET_HAL_DATA(padapter);
+
+       // 2010.03.01. Marked by tynli. No need to call workitem beacause we record the value
+       // which should be read from register to a global variable.
+
+       rtw_write8(padapter, REG_FWHW_TXQ_CTRL+2, (pHalData->RegFwHwTxQCtrl) & (~BIT6));
+       pHalData->RegFwHwTxQCtrl &= (~BIT6);
+
+        //todo: CheckFwRsvdPageContent(Adapter);  // 2010.06.23. Added by tynli.
+
+}
+
+u16 CRC16(u8 data,u16 CRC)
+{
+       unsigned char shift_in,CRC_BIT15,DataBit,CRC_BIT11,CRC_BIT4 ;
+       int index;
+       unsigned short CRC_Result;
+
+       for(index=0;index<8;index++)
+       {
+               CRC_BIT15=((CRC&BIT15) ? 1:0);
+               DataBit  =(data&(BIT0<<index) ? 1:0);
+               shift_in=CRC_BIT15^DataBit;
+               //printf("CRC_BIT15=%d, DataBit=%d, shift_in=%d \n",CRC_BIT15,DataBit,shift_in);
+
+               CRC_Result=CRC<<1;
+               //set BIT0
+               //      printf("CRC =%x\n",CRC_Result);
+               //CRC bit 0 =shift_in,
+               if(shift_in==0)
+               {
+                       CRC_Result&=(~BIT0);
+               }
+               else
+               {
+                       CRC_Result|=BIT0;
+               }
+               //printf("CRC =%x\n",CRC_Result);
+
+               CRC_BIT11 = ((CRC&BIT11) ? 1:0)^shift_in;
+               if(CRC_BIT11==0)
+               {
+                       CRC_Result&=(~BIT12);
+               }
+               else
+               {
+                       CRC_Result|=BIT12;
+               }
+               //printf("bit12 CRC =%x\n",CRC_Result);
+
+               CRC_BIT4 = ((CRC&BIT4) ? 1:0)^shift_in;
+               if(CRC_BIT4==0)
+               {
+                       CRC_Result&=(~BIT5);
+               }
+               else
+               {
+                       CRC_Result|=BIT5;
+               }
+               //printf("bit5 CRC =%x\n",CRC_Result);
+
+               CRC=CRC_Result; //­«½Æ¨Ï¥Î¤W¤@¦¸ªºµ²ªG
+       }
+
+       return CRC;
+
+}
+
+
+/////////////////////////////////////////////////
+//
+//function name :calc_crc
+//
+//input         : char* pattern , pattern size
+//
+//////////////////////////////////////////////////
+u16 calc_crc(u8 * pdata,int length)
+{
+//    unsigned char data[2]={0xC6,0xAA};
+       u16 CRC=0xffff;
+       int i;
+
+       for(i=0;i<length;i++)
+       {
+               CRC=CRC16(pdata[i],CRC);
+       }
+
+       CRC=~CRC;                  //¨ú¸É¼Æ
+       printk("CRC =%x\n",CRC);
+       return CRC;
+}
+
+static void hw_var_set_opmode(PADAPTER Adapter, u8 variable, u8* val)
+{
+       u8      val8;
+       u8      mode = *((u8 *)val);
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+
+#ifdef CONFIG_CONCURRENT_MODE
+       if(Adapter->iface_type == IFACE_PORT1)
+       {
+               // disable Port1 TSF update
+               rtw_write8(Adapter, REG_BCN_CTRL_1, rtw_read8(Adapter, REG_BCN_CTRL_1)|BIT(4));
+
+               // set net_type
+               val8 = rtw_read8(Adapter, MSR)&0x03;
+               val8 |= (mode<<2);
+               rtw_write8(Adapter, MSR, val8);
+
+               //reset TSF1
+               rtw_write8(Adapter, REG_DUAL_TSF_RST, BIT(1));
+
+               DBG_871X("%s()-%d mode = %d\n", __FUNCTION__, __LINE__, mode);
+
+               if((mode == _HW_STATE_STATION_) || (mode == _HW_STATE_NOLINK_))
+               {
+                       if(!check_buddy_mlmeinfo_state(Adapter, WIFI_FW_AP_STATE))
+                       {
+                               StopTxBeacon(Adapter);
+                       }
+
+                       rtw_write8(Adapter,REG_BCN_CTRL_1, 0x19);//disable atim wnd
+                       //rtw_write8(Adapter,REG_BCN_CTRL_1, 0x18);
+               }
+               else if((mode == _HW_STATE_ADHOC_) /*|| (mode == _HW_STATE_AP_)*/)
+               {
+                       ResumeTxBeacon(Adapter);
+                       rtw_write8(Adapter,REG_BCN_CTRL_1, 0x1a);
+               }
+               else if(mode == _HW_STATE_AP_)
+               {
+                       ResumeTxBeacon(Adapter);
+
+                       rtw_write8(Adapter, REG_BCN_CTRL_1, 0x12);
+
+                       //Set RCR
+                       //rtw_write32(padapter, REG_RCR, 0x70002a8e);//CBSSID_DATA must set to 0
+                       rtw_write32(Adapter, REG_RCR, 0x7000228e);//CBSSID_DATA must set to 0
+                       //enable to rx data frame
+                       rtw_write16(Adapter, REG_RXFLTMAP2, 0xFFFF);
+                       //enable to rx ps-poll
+                       rtw_write16(Adapter, REG_RXFLTMAP1, 0x0400);
+
+                       //Beacon Control related register for first time
+                       rtw_write8(Adapter, REG_BCNDMATIM, 0x02); // 2ms
+                       rtw_write8(Adapter, REG_DRVERLYINT, 0x05);// 5ms
+                       //rtw_write8(Adapter, REG_BCN_MAX_ERR, 0xFF);
+                       rtw_write8(Adapter, REG_ATIMWND_1, 0x0a); // 10ms for port1
+                       rtw_write16(Adapter, REG_BCNTCFG, 0x00);
+                       rtw_write16(Adapter, REG_TBTT_PROHIBIT, 0xff04);
+                       rtw_write16(Adapter, REG_TSFTR_SYN_OFFSET, 0x7fff);// +32767 (~32ms)
+
+
+                       //enable BCN1 Function for if2
+                       //don't enable update TSF1 for if2 (due to TSF update when beacon/probe rsp are received)
+                       rtw_write8(Adapter, REG_BCN_CTRL_1, (DIS_TSF_UDT0_NORMAL_CHIP|EN_BCN_FUNCTION | EN_TXBCN_RPT|BIT(1)));
+
+#ifdef CONFIG_CONCURRENT_MODE
+                       if(check_buddy_fwstate(Adapter, WIFI_FW_NULL_STATE))
+                               rtw_write8(Adapter, REG_BCN_CTRL,
+                                       rtw_read8(Adapter, REG_BCN_CTRL) & ~EN_BCN_FUNCTION);
+#endif
+
+                       DBG_871X("%s()-%d: REG_BCN_CTRL_1 = %02x\n", __FUNCTION__, __LINE__, rtw_read8(Adapter, REG_BCN_CTRL_1));
+
+                        //BCN1 TSF will sync to BCN0 TSF with offset(0x518) if if1_sta linked
+                       //rtw_write8(Adapter, REG_BCN_CTRL_1, rtw_read8(Adapter, REG_BCN_CTRL_1)|BIT(5));
+                       //rtw_write8(Adapter, REG_DUAL_TSF_RST, BIT(3));
+
+                       //dis BCN0 ATIM  WND if if1 is station
+                       rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)|BIT(0));
+#ifdef CONFIG_TSF_RESET_OFFLOAD
+                       // Reset TSF for STA+AP concurrent mode
+                       if ( check_buddy_fwstate(Adapter, (WIFI_STATION_STATE|WIFI_ASOC_STATE)) ) {
+                               if (reset_tsf(Adapter, IFACE_PORT1) == _FALSE)
+                                       DBG_871X("ERROR! %s()-%d: Reset port1 TSF fail\n",
+                                               __FUNCTION__, __LINE__);
+                       }
+#endif // CONFIG_TSF_RESET_OFFLOAD
+               }
+
+       }
+       else    // (Adapter->iface_type == IFACE_PORT1)
+#endif //CONFIG_CONCURRENT_MODE
+       {
+               // disable Port0 TSF update
+               rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)|BIT(4));
+
+               // set net_type
+               val8 = rtw_read8(Adapter, MSR)&0x0c;
+               val8 |= mode;
+               rtw_write8(Adapter, MSR, val8);
+
+               //reset TSF0
+               rtw_write8(Adapter, REG_DUAL_TSF_RST, BIT(0));
+
+               DBG_871X("%s()-%d mode = %d\n", __FUNCTION__, __LINE__, mode);
+
+               if((mode == _HW_STATE_STATION_) || (mode == _HW_STATE_NOLINK_))
+               {
+#ifdef CONFIG_CONCURRENT_MODE
+                       if(!check_buddy_mlmeinfo_state(Adapter, WIFI_FW_AP_STATE))
+#endif //CONFIG_CONCURRENT_MODE
+                       {
+                               StopTxBeacon(Adapter);
+                       }
+
+                       rtw_write8(Adapter,REG_BCN_CTRL, 0x19);//disable atim wnd
+                       //rtw_write8(Adapter,REG_BCN_CTRL, 0x18);
+               }
+               else if((mode == _HW_STATE_ADHOC_) /*|| (mode == _HW_STATE_AP_)*/)
+               {
+                       ResumeTxBeacon(Adapter);
+                       rtw_write8(Adapter,REG_BCN_CTRL, 0x1a);
+               }
+               else if(mode == _HW_STATE_AP_)
+               {
+                       ResumeTxBeacon(Adapter);
+
+                       rtw_write8(Adapter, REG_BCN_CTRL, 0x12);
+
+                       //Set RCR
+                       //write32(padapter, REG_RCR, 0x70002a8e);//CBSSID_DATA must set to 0
+                       rtw_write32(Adapter, REG_RCR, 0x7000228e);//CBSSID_DATA must set to 0
+                       //enable to rx data frame
+                       rtw_write16(Adapter, REG_RXFLTMAP2, 0xFFFF);
+                       //enable to rx ps-poll
+                       rtw_write16(Adapter, REG_RXFLTMAP1, 0x0400);
+
+                       //Beacon Control related register for first time
+
+                       rtw_write8(Adapter, REG_BCNDMATIM, 0x02); // 2ms
+                       rtw_write8(Adapter, REG_DRVERLYINT, 0x05);// 5ms
+
+                       //write8(Adapter, REG_BCN_MAX_ERR, 0xFF);
+                       rtw_write8(Adapter, REG_ATIMWND, 0x0a); // 10ms for port0
+                       rtw_write16(Adapter, REG_BCNTCFG, 0x00);
+                       rtw_write16(Adapter, REG_TBTT_PROHIBIT, 0xff04);
+                       rtw_write16(Adapter, REG_TSFTR_SYN_OFFSET, 0x7fff);// +32767 (~32ms)
+
+                       //enable BCN0 Function for if1
+                       //don't enable update TSF0 for if1 (due to TSF update when beacon/probe rsp are received)
+                       rtw_write8(Adapter, REG_BCN_CTRL, (DIS_TSF_UDT0_NORMAL_CHIP|EN_BCN_FUNCTION | EN_TXBCN_RPT|BIT(1)));
+
+#ifdef CONFIG_CONCURRENT_MODE
+                       if(check_buddy_fwstate(Adapter, WIFI_FW_NULL_STATE))
+                               rtw_write8(Adapter, REG_BCN_CTRL_1,
+                                       rtw_read8(Adapter, REG_BCN_CTRL_1) & ~EN_BCN_FUNCTION);
+#endif
+                       //BCN1 TSF will sync to BCN0 TSF with offset(0x518) if if1_sta linked
+                       //only interface 2 as AP MODE need to sync
+                       //rtw_write8(Adapter, REG_BCN_CTRL_1, rtw_read8(Adapter, REG_BCN_CTRL_1)|BIT(5));
+
+
+                       //dis BCN1 ATIM  WND if if2 is station
+                       rtw_write8(Adapter, REG_BCN_CTRL_1, rtw_read8(Adapter, REG_BCN_CTRL_1)|BIT(0));
+#ifdef CONFIG_TSF_RESET_OFFLOAD
+                       // Reset TSF for STA+AP concurrent mode
+                       if ( check_buddy_fwstate(Adapter, (WIFI_STATION_STATE|WIFI_ASOC_STATE)) ) {
+                               if (reset_tsf(Adapter, IFACE_PORT0) == _FALSE)
+                                       DBG_871X("ERROR! %s()-%d: Reset port0 TSF fail\n",
+                                               __FUNCTION__, __LINE__);
+                       }
+#endif // CONFIG_TSF_RESET_OFFLOAD
+
+               }
+
+
+       }
+
+}
+
+static void hw_var_set_macaddr(PADAPTER Adapter, u8 variable, u8* val)
+{
+       u8 idx = 0;
+       u32 reg_macid;
+
+#ifdef CONFIG_CONCURRENT_MODE
+       if(Adapter->iface_type == IFACE_PORT1)
+       {
+               reg_macid = REG_MACID1;
+       }
+       else
+#endif
+       {
+               reg_macid = REG_MACID;
+       }
+
+       for(idx = 0 ; idx < 6; idx++)
+       {
+               rtw_write8(Adapter, (reg_macid+idx), val[idx]);
+       }
+
+}
+
+static void hw_var_set_bssid(PADAPTER Adapter, u8 variable, u8* val)
+{
+       u8      idx = 0;
+       u32 reg_bssid;
+
+#ifdef CONFIG_CONCURRENT_MODE
+       if(Adapter->iface_type == IFACE_PORT1)
+       {
+               reg_bssid = REG_BSSID1;
+       }
+       else
+#endif
+       {
+               reg_bssid = REG_BSSID;
+       }
+
+       for(idx = 0 ; idx < 6; idx++)
+       {
+               rtw_write8(Adapter, (reg_bssid+idx), val[idx]);
+       }
+
+}
+
+static void hw_var_set_bcn_func(PADAPTER Adapter, u8 variable, u8* val)
+{
+       u32 bcn_ctrl_reg;
+
+#ifdef CONFIG_CONCURRENT_MODE
+       if(Adapter->iface_type == IFACE_PORT1)
+       {
+               bcn_ctrl_reg = REG_BCN_CTRL_1;
+
+               if(*((u8 *)val))
+               {
+                       rtw_write8(Adapter, bcn_ctrl_reg, (EN_BCN_FUNCTION | EN_TXBCN_RPT));
+               }
+               else
+               {
+                       rtw_write8(Adapter, bcn_ctrl_reg, rtw_read8(Adapter, bcn_ctrl_reg)&(~(EN_BCN_FUNCTION | EN_TXBCN_RPT)));
+               }
+       }
+       else
+#endif
+       {
+               bcn_ctrl_reg = REG_BCN_CTRL;
+               if(*((u8 *)val))
+               {
+                       rtw_write8(Adapter, bcn_ctrl_reg, (EN_BCN_FUNCTION | EN_TXBCN_RPT));
+               }
+               else
+               {
+                       //rtw_write8(Adapter, bcn_ctrl_reg, rtw_read8(Adapter, bcn_ctrl_reg)&(~(EN_BCN_FUNCTION | EN_TXBCN_RPT)));
+                       rtw_write8(Adapter, bcn_ctrl_reg, (rtw_read8(Adapter, bcn_ctrl_reg)&(~(EN_TXBCN_RPT))) | DIS_TSF_UDT0_NORMAL_CHIP);
+               }
+       }
+
+
+}
+
+#ifdef CONFIG_WOWLAN
+static int rtw_wowlan_set_pattern(_adapter *padapter ,u8* pbuf){
+       struct pwrctrl_priv *pwrpriv=&padapter->pwrctrlpriv;
+       int res=0,crc_idx;
+       u32 content=0,cmd=0;
+       u32 *pdata;
+       u8 config,crc,mc,bc,uc,idx,pattern_len,packet[200],packet_len,valid;
+       u16 crc_val=0,i;
+
+       config=pbuf[0];
+       bc=config & BIT(3)?1:0;
+       mc=config & BIT(4)?1:0;
+       uc=config & BIT(5)?1:0;
+       idx=config & 0x7;
+       crc=config & BIT(6)?1:0;
+       valid=config & BIT(7)?1:0;
+       pattern_len=pbuf[1];
+       packet_len=pattern_len*8;
+       pdata=(u32 *)pbuf;
+
+       // Write to the Wakeup CAM
+       //offset 0
+       if(pattern_len>=4){
+               content=pdata[1];
+       }
+       else{
+               content=0;
+       }
+       DBG_8192C("\nrtw_wowlan_set_pattern offset[0]  content  0x%x  [cpu_to_le32  0x%x]\n", content,__cpu_to_le32(content));
+       //rtw_write32(padapter, REG_WKFMCAM_RWD, __cpu_to_le32(content));
+       pwrpriv->wowlan_pattern_context[idx][0]= __cpu_to_le32(content);
+       //cmd=BIT(31)|BIT(16)|(idx+0);
+       //rtw_write32(padapter, REG_WKFMCAM_CMD, cmd);
+       //offset 4
+       if(pattern_len>=8){
+               content=pdata[2];
+       }
+       else{
+               content=0;
+       }
+       DBG_8192C("rtw_wowlan_set_pattern offset[4]  content  0x%x  [cpu_to_le32  0x%x]\n", content,__cpu_to_le32(content));
+       //rtw_write32(padapter, REG_WKFMCAM_RWD, __cpu_to_le32(content));
+       pwrpriv->wowlan_pattern_context[idx][1]= __cpu_to_le32(content);
+
+       //cmd=BIT(31)|BIT(16)|(idx+1);
+       //rtw_write32(padapter, REG_WKFMCAM_CMD, cmd);
+       //offset 8
+       if(pattern_len>=12){
+               content=pdata[3];
+       }
+       else{
+               content=0;
+       }
+       DBG_8192C("rtw_wowlan_set_pattern offset[8]  content  0x%x  [cpu_to_le32  0x%x]\n", content,__cpu_to_le32(content));
+       //rtw_write32(padapter, REG_WKFMCAM_RWD, __cpu_to_le32(content));
+       pwrpriv->wowlan_pattern_context[idx][2]= __cpu_to_le32(content);
+       //cmd=BIT(31)|BIT(16)|(idx+2);
+       //rtw_write32(padapter, REG_WKFMCAM_CMD, cmd);
+       //offset 12
+       if(pattern_len>=16){
+               content=pdata[4];
+       }
+       else{
+               content=0;
+       }
+       DBG_8192C("rtw_wowlan_set_pattern offset[12]  content  0x%x  [cpu_to_le32  0x%x]\n", content,__cpu_to_le32(content));
+       //rtw_write32(padapter, REG_WKFMCAM_RWD, __cpu_to_le32(content));
+       pwrpriv->wowlan_pattern_context[idx][3]= __cpu_to_le32(content);
+       //cmd=BIT(31)|BIT(16)|(idx+3);
+       //rtw_write32(padapter, REG_WKFMCAM_CMD, cmd);
+
+       if(crc){
+               // Have the CRC value
+               crc_val=*(u16 *)(&pbuf[2]);
+               DBG_8192C("rtw_wowlan_set_pattern crc_val  0x%x  \n", crc_val);
+               crc_val=__cpu_to_le16(crc_val);
+               DBG_8192C("rtw_wowlan_set_pattern crc_val  after 0x%x  \n", crc_val);
+       }
+       else{
+               DBG_8192C("+rtw_wowlan_set_pattern   crc=0[%x]  Should calculate the CRC\n", crc);
+               // calculate the CRC the write to the Wakeup CAM
+               crc_idx=0;
+               for(i=0;i<packet_len;i++){
+                       if(pbuf[4+(i/8)]&(0x01<<(i%8)))
+                       {
+                               packet[crc_idx++]=pbuf[20+i];
+               //              printk("\n i=%d packet[i]=%x pbuf[20+i(%d)]=%x \n",i,packet[i],20+i,pbuf[20+i]);
+                       }
+               }
+               crc_val=calc_crc(packet, crc_idx);
+               printk("+rtw_wowlan_set_pattern   crc_val=0x%.8x \n", crc_val);
+
+       }
+
+       //offset 16
+       content=(valid<<31)| (bc<<26)|(mc<<25)|(uc<<24) |crc_val;
+       printk("rtw_wowlan_set_pattern offset[16]  content  0x%x \n", content);
+       rtw_write32(padapter, REG_WKFMCAM_RWD,content);
+       pwrpriv->wowlan_pattern_context[idx][4]= content;
+       //cmd=BIT(31)|BIT(16)|(idx+4);
+       //rtw_write32(padapter, REG_WKFMCAM_CMD, cmd);
+       pwrpriv->wowlan_pattern_idx|=BIT(idx);
+
+_rtw_wowlan_set_pattern_exit:
+       return res;
+}
+
+
+
+void rtw_wowlan_reload_pattern(_adapter *padapter){
+       struct pwrctrl_priv *pwrpriv=&padapter->pwrctrlpriv;
+       u32 content=0,cmd=0;
+       u8 idx;
+
+       for (idx=0;idx<8;idx ++){
+               if(pwrpriv->wowlan_pattern_idx & BIT(idx)){
+                       //offset 0
+                       rtw_write32(padapter, REG_WKFMCAM_RWD, pwrpriv->wowlan_pattern_context[idx][0]);
+                       cmd=BIT(31)|BIT(16)|(idx+0);
+                       rtw_write32(padapter, REG_WKFMCAM_CMD, cmd);
+
+                       //offset 4
+                       rtw_write32(padapter, REG_WKFMCAM_RWD, pwrpriv->wowlan_pattern_context[idx][1]);
+                       cmd=BIT(31)|BIT(16)|(idx+1);
+                       rtw_write32(padapter, REG_WKFMCAM_CMD, cmd);
+
+                       //offset 8
+                       rtw_write32(padapter, REG_WKFMCAM_RWD, pwrpriv->wowlan_pattern_context[idx][2]);
+                       cmd=BIT(31)|BIT(16)|(idx+2);
+                       rtw_write32(padapter, REG_WKFMCAM_CMD, cmd);
+
+                       //offset 12
+                       rtw_write32(padapter, REG_WKFMCAM_RWD, pwrpriv->wowlan_pattern_context[idx][3]);
+                       cmd=BIT(31)|BIT(16)|(idx+3);
+                       rtw_write32(padapter, REG_WKFMCAM_CMD, cmd);
+
+                       //offset 16
+                       rtw_write32(padapter, REG_WKFMCAM_RWD, pwrpriv->wowlan_pattern_context[idx][4]);
+                       cmd=BIT(31)|BIT(16)|(idx+4);
+                       rtw_write32(padapter, REG_WKFMCAM_CMD, cmd);
+
+               }
+               printk("print WOWCAM  idx =%d\n",idx);
+               cmd=BIT(31)|(idx+0);
+               rtw_write32(padapter, REG_WKFMCAM_CMD, cmd);
+               printk("print WOWCAM  offset[0]  =%x\n",rtw_read32(padapter, REG_WKFMCAM_RWD));
+               cmd=BIT(31)|(idx+1);
+               rtw_write32(padapter, REG_WKFMCAM_CMD, cmd);
+               printk("print WOWCAM  offset[1]  =%x\n",rtw_read32(padapter, REG_WKFMCAM_RWD));
+               cmd=BIT(31)|(idx+2);
+               rtw_write32(padapter, REG_WKFMCAM_CMD, cmd);
+               printk("print WOWCAM  offset[2]  =%x\n",rtw_read32(padapter, REG_WKFMCAM_RWD));
+               cmd=BIT(31)|(idx+3);
+               rtw_write32(padapter, REG_WKFMCAM_CMD, cmd);
+               printk("print WOWCAM  offset[3]  =%x\n",rtw_read32(padapter, REG_WKFMCAM_RWD));
+               cmd=BIT(31)|(idx+4);
+               rtw_write32(padapter, REG_WKFMCAM_CMD, cmd);
+               printk("print WOWCAM  offset[4]  =%x\n",rtw_read32(padapter, REG_WKFMCAM_RWD));
+
+
+       }
+}
+#endif //CONFIG_WOWLAN
+
+static void hw_var_set_correct_tsf(PADAPTER Adapter, u8 variable, u8* val)
+{
+#ifdef CONFIG_CONCURRENT_MODE
+       u64     tsf;
+       struct mlme_ext_priv    *pmlmeext = &Adapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       //tsf = pmlmeext->TSFValue - ((u32)pmlmeext->TSFValue % (pmlmeinfo->bcn_interval*1024)) -1024; //us
+       tsf = pmlmeext->TSFValue - rtw_modular64(pmlmeext->TSFValue, (pmlmeinfo->bcn_interval*1024)) -1024; //us
+
+       if(((pmlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE) || ((pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE))
+       {
+               //pHalData->RegTxPause |= STOP_BCNQ;BIT(6)
+               //rtw_write8(Adapter, REG_TXPAUSE, (rtw_read8(Adapter, REG_TXPAUSE)|BIT(6)));
+               StopTxBeacon(Adapter);
+       }
+
+       if(Adapter->iface_type == IFACE_PORT1)
+       {
+               //disable related TSF function
+               rtw_write8(Adapter, REG_BCN_CTRL_1, rtw_read8(Adapter, REG_BCN_CTRL_1)&(~BIT(3)));
+
+               rtw_write32(Adapter, REG_TSFTR1, tsf);
+               rtw_write32(Adapter, REG_TSFTR1+4, tsf>>32);
+
+               //enable related TSF function
+               rtw_write8(Adapter, REG_BCN_CTRL_1, rtw_read8(Adapter, REG_BCN_CTRL_1)|BIT(3));
+
+
+#ifdef CONFIG_TSF_RESET_OFFLOAD
+               // Update buddy port's TSF(TBTT) if it is SoftAP for beacon TX issue!
+               if ( (pmlmeinfo->state&0x03) == WIFI_FW_STATION_STATE
+                       && check_buddy_fwstate(Adapter, WIFI_AP_STATE) ) {
+                       if (reset_tsf(Adapter, IFACE_PORT0) == _FALSE)
+                               DBG_871X("ERROR! %s()-%d: Reset port0 TSF fail\n",
+                                       __FUNCTION__, __LINE__);
+               }
+#endif // CONFIG_TSF_RESET_OFFLOAD
+
+       }
+       else    // Adapter->iface_type == IFACE_PORT1
+       {
+               //disable related TSF function
+               rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)&(~BIT(3)));
+               // disable TSF update instead! May induce burst beacon TX
+               //rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)|BIT(4));
+
+               rtw_write32(Adapter, REG_TSFTR, tsf);
+               rtw_write32(Adapter, REG_TSFTR+4, tsf>>32);
+
+               //enable related TSF function
+               rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)|BIT(3));
+               //rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)&(~BIT(4)));
+
+               // Update buddy port's TSF if it is SoftAP for beacon TX issue!
+               if ( (pmlmeinfo->state&0x03) == WIFI_FW_STATION_STATE
+                       && check_buddy_fwstate(Adapter, WIFI_AP_STATE)
+               ) {
+                       //disable related TSF function
+                       rtw_write8(Adapter, REG_BCN_CTRL_1, rtw_read8(Adapter, REG_BCN_CTRL_1)&(~BIT(3)));
+                       // disable TSF update instead!
+                       //rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL_1)|BIT(4));
+
+                       rtw_write32(Adapter, REG_TSFTR1, tsf);
+                       rtw_write32(Adapter, REG_TSFTR1+4, tsf>>32);
+
+                       //enable related TSF function
+                       rtw_write8(Adapter, REG_BCN_CTRL_1, rtw_read8(Adapter, REG_BCN_CTRL_1)|BIT(3));
+                       //rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL_1)&(~BIT(4)));
+               }
+#ifdef CONFIG_TSF_RESET_OFFLOAD
+               // Update buddy port's TSF if it is SoftAP for beacon TX issue!
+               if ( (pmlmeinfo->state&0x03) == WIFI_FW_STATION_STATE
+                       && check_buddy_fwstate(Adapter, WIFI_AP_STATE) ) {
+                       if (reset_tsf(Adapter, IFACE_PORT1) == _FALSE)
+                               DBG_871X("ERROR! %s()-%d: Reset port1 TSF fail\n",
+                                       __FUNCTION__, __LINE__);
+               }
+#endif // CONFIG_TSF_RESET_OFFLOAD
+       }
+
+       if(((pmlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE) || ((pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE))
+       {
+               //pHalData->RegTxPause  &= (~STOP_BCNQ);
+               //rtw_write8(Adapter, REG_TXPAUSE, (rtw_read8(Adapter, REG_TXPAUSE)&(~BIT(6))));
+               ResumeTxBeacon(Adapter);
+       }
+#endif // CONFIG_CONCURRENT_MODE
+}
+
+static void hw_var_set_mlme_disconnect(PADAPTER Adapter, u8 variable, u8* val)
+{
+#ifdef CONFIG_CONCURRENT_MODE
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       PADAPTER pbuddy_adapter = Adapter->pbuddy_adapter;
+
+
+       if(check_buddy_mlmeinfo_state(Adapter, _HW_STATE_NOLINK_))
+               rtw_write16(Adapter, REG_RXFLTMAP2, 0x00);
+
+
+       if(Adapter->iface_type == IFACE_PORT1)
+       {
+               int i;
+               u8 reg_bcn_ctrl_1;
+
+               // a.Driver set 0x422 bit 6 =0
+               rtw_write8(Adapter, REG_FWHW_TXQ_CTRL+2, (pHalData->RegFwHwTxQCtrl) & (~BIT6));
+               pHalData->RegFwHwTxQCtrl &= (~BIT6);
+
+
+#ifdef CONFIG_BEACON_DISABLE_OFFLOAD
+               u8 reg_bcn_disable_cnt = rtw_read8(Adapter, REG_FW_BCN_DIS_CNT);
+               DBG_871X("%s()-%d: reg_bcn_disable_cnt=%02x\n", __FUNCTION__, __LINE__, reg_bcn_disable_cnt);
+
+               reg_bcn_ctrl_1 = rtw_read8(Adapter, REG_BCN_CTRL_1);
+               DBG_871X("%s()-%d: reg_bcn_ctrl_1=%02x\n", __FUNCTION__, __LINE__, reg_bcn_ctrl_1);
+
+               // b. driver set h2c cmd
+               rtl8192c_dis_beacon_fun_cmd(Adapter);
+
+               /*
+                       // FW Job for port 0
+
+                  c. 8051 set nettype to ap
+                  d. 8051 check dma_int
+                  e. 8051 set nettype to no_link
+                  f.8051 dis_tsf_update   0x550 bit 4
+                  g.8051 reset  beacon function test count   0x553 bit0.
+                  h.8051 disable beacon function   0x550  bit3
+                  i. 8051 sent ready to driver
+
+               */
+
+               // The worst case is 100 + 15 ms
+               rtw_msleep_os(120);
+
+               for (i=0; i< 10; i++) {
+                       reg_bcn_ctrl_1 = rtw_read8(Adapter, REG_BCN_CTRL_1);
+                       if ( (reg_bcn_ctrl_1 & BIT(3)) == 0 ) {
+                               //DBG_871X("%s()-%d: BEACON_DISABLE_OFFLOAD finished! reg=%02x\n", __FUNCTION__, __LINE__, reg);
+                               break;
+                       }
+                       DBG_871X("%s()-%d: BEACON_DISABLE_OFFLOAD not finished! REG_BCN_CTRL_1=%02x\n", __FUNCTION__, __LINE__, reg_bcn_ctrl_1);
+                       DBG_871X("%s()-%d: reg_bcn_disable_cnt=%02x\n", __FUNCTION__, __LINE__, rtw_read8(Adapter, REG_FW_BCN_DIS_CNT));
+                       DBG_871X("%s()-%d: REG_BCN_CTRL=%02x\n", __FUNCTION__, __LINE__, rtw_read8(Adapter, REG_BCN_CTRL));
+                       DBG_871X("%s()-%d: FWISR=%08x\n", __FUNCTION__, __LINE__, rtw_read32(Adapter, REG_FWISR));
+                       rtw_msleep_os(100);
+               }
+               DBG_871X("%s()-%d: reg_bcn_disable_cnt=%02x\n", __FUNCTION__, __LINE__, rtw_read8(Adapter, REG_FW_BCN_DIS_CNT));
+               DBG_871X("%s()-%d: reg_bcn_ctrl_1=%02x\n", __FUNCTION__, __LINE__, reg_bcn_ctrl_1);
+
+#else   // CONFIG_BEACON_DISABLE_OFFLOAD
+
+               //disable update TSF1
+               rtw_write8(Adapter, REG_BCN_CTRL_1, rtw_read8(Adapter, REG_BCN_CTRL_1)|BIT(4));
+
+               //reset TSF1
+               rtw_write8(Adapter, REG_DUAL_TSF_RST, BIT(1));
+
+               // disable Port1's beacon function
+               rtw_write8(Adapter, REG_BCN_CTRL_1, rtw_read8(Adapter, REG_BCN_CTRL_1)&(~BIT(3)));
+
+#endif  // CONFIG_BEACON_DISABLE_OFFLOAD
+
+               // j, Driver set 0x422 bit 6 =1
+               rtw_write8(Adapter, REG_FWHW_TXQ_CTRL+2, (pHalData->RegFwHwTxQCtrl) | BIT6);
+               pHalData->RegFwHwTxQCtrl |= BIT6;
+
+               // k. re_download beacon pkt
+               if(check_buddy_mlmeinfo_state(Adapter, WIFI_FW_AP_STATE))
+                       set_tx_beacon_cmd(pbuddy_adapter);
+
+
+       }
+       else    // (Adapter->iface_type == IFACE_PORT1)
+       {
+               //disable update TSF
+               rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)|BIT(4));
+
+               //reset TSF
+               rtw_write8(Adapter, REG_DUAL_TSF_RST, BIT(0));
+
+               // Can't disable Port0's beacon function due to it is used by RA
+       }
+#endif
+}
+
+static void hw_var_set_mlme_sitesurvey(PADAPTER Adapter, u8 variable, u8* val)
+{
+       u32     value_rcr, rcr_clear_bit, reg_bcn_ctl;
+       u16     value_rxfltmap2;
+       struct mlme_priv *pmlmepriv=&(Adapter->mlmepriv);
+
+
+#ifdef CONFIG_CONCURRENT_MODE
+       if(Adapter->iface_type == IFACE_PORT1)
+               reg_bcn_ctl = REG_BCN_CTRL_1;
+       else
+#endif
+               reg_bcn_ctl = REG_BCN_CTRL;
+
+#ifdef CONFIG_FIND_BEST_CHANNEL
+
+       if( (check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
+#ifdef CONFIG_CONCURRENT_MODE
+               || (check_buddy_fwstate(Adapter, WIFI_AP_STATE) == _TRUE)
+#endif
+#ifdef CONFIG_TDLS
+               // TDLS will clear RCR_CBSSID_DATA bit for connection.
+               || ( Adapter->tdlsinfo.setup_state & TDLS_LINKED_STATE )
+#endif // CONFIG_TDLS
+               )
+       {
+               rcr_clear_bit = RCR_CBSSID_BCN;
+       }
+       else
+       {
+               rcr_clear_bit = (RCR_CBSSID_BCN | RCR_CBSSID_DATA);
+       }
+
+       // Recieve all data frames
+       value_rxfltmap2 = 0xFFFF;
+
+#else /* CONFIG_FIND_BEST_CHANNEL */
+
+       rcr_clear_bit = RCR_CBSSID_BCN;
+
+       //config RCR to receive different BSSID & not to receive data frame
+       value_rxfltmap2 = 0;
+
+#endif /* CONFIG_FIND_BEST_CHANNEL */
+
+       value_rcr = rtw_read32(Adapter, REG_RCR);
+
+       if(*((u8 *)val))//under sitesurvey
+       {
+               value_rcr &= ~(rcr_clear_bit);
+               rtw_write32(Adapter, REG_RCR, value_rcr);
+
+               rtw_write16(Adapter, REG_RXFLTMAP2, value_rxfltmap2);
+
+               if (check_fwstate(pmlmepriv, WIFI_STATION_STATE | WIFI_ADHOC_STATE |WIFI_ADHOC_MASTER_STATE)) {
+                       //disable update TSF
+                       rtw_write8(Adapter, reg_bcn_ctl, rtw_read8(Adapter, reg_bcn_ctl)|BIT(4));
+               }
+
+#ifdef CONFIG_CONCURRENT_MODE
+               if(check_buddy_mlmeinfo_state(Adapter, WIFI_FW_AP_STATE) &&
+                       check_buddy_fwstate(Adapter, _FW_LINKED))
+               {
+                       StopTxBeacon(Adapter);
+               }
+#endif
+       }
+       else//sitesurvey done
+       {
+               if(check_fwstate(pmlmepriv, _FW_LINKED) || check_fwstate(pmlmepriv, WIFI_AP_STATE)
+#ifdef CONFIG_CONCURRENT_MODE
+                       || check_buddy_fwstate(Adapter, _FW_LINKED) || check_buddy_fwstate(Adapter, WIFI_AP_STATE)
+#endif
+                       )
+               {
+                       //enable to rx data frame
+                       rtw_write16(Adapter, REG_RXFLTMAP2,0xFFFF);
+               }
+
+               if (check_fwstate(pmlmepriv, WIFI_STATION_STATE | WIFI_ADHOC_STATE |WIFI_ADHOC_MASTER_STATE)) {
+                       //enable update TSF
+                       rtw_write8(Adapter, reg_bcn_ctl, rtw_read8(Adapter, reg_bcn_ctl)&(~BIT(4)));
+               }
+
+               value_rcr |= rcr_clear_bit;
+               rtw_write32(Adapter, REG_RCR, value_rcr);
+
+#ifdef CONFIG_CONCURRENT_MODE
+               if(check_buddy_mlmeinfo_state(Adapter, WIFI_FW_AP_STATE) &&
+                       check_buddy_fwstate(Adapter, _FW_LINKED))
+               {
+                       ResumeTxBeacon(Adapter);
+               }
+#endif
+       }
+}
+
+static void hw_var_set_mlme_join(PADAPTER Adapter, u8 variable, u8* val)
+{
+#ifdef CONFIG_CONCURRENT_MODE
+       u8      RetryLimit = 0x30;
+       u8      type = *((u8 *)val);
+       HAL_DATA_TYPE *pHalData = GET_HAL_DATA(Adapter);
+       struct mlme_priv        *pmlmepriv = &Adapter->mlmepriv;
+
+       if(type == 0) // prepare to join
+       {
+               if(check_buddy_mlmeinfo_state(Adapter, WIFI_FW_AP_STATE) &&
+                       check_buddy_fwstate(Adapter, _FW_LINKED))
+               {
+                       StopTxBeacon(Adapter);
+               }
+
+               //enable to rx data frame.Accept all data frame
+               //rtw_write32(padapter, REG_RCR, rtw_read32(padapter, REG_RCR)|RCR_ADF);
+               rtw_write16(Adapter, REG_RXFLTMAP2,0xFFFF);
+
+               if(check_buddy_mlmeinfo_state(Adapter, WIFI_FW_AP_STATE))
+                       rtw_write32(Adapter, REG_RCR, rtw_read32(Adapter, REG_RCR)|RCR_CBSSID_BCN);
+               else
+                       rtw_write32(Adapter, REG_RCR, rtw_read32(Adapter, REG_RCR)|RCR_CBSSID_DATA|RCR_CBSSID_BCN);
+
+               if(check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _TRUE)
+               {
+                       RetryLimit = (pHalData->CustomerID == RT_CID_CCX) ? 7 : 48;
+               }
+               else // Ad-hoc Mode
+               {
+                       RetryLimit = 0x7;
+               }
+       }
+       else if(type == 1) //joinbss_event call back when join res < 0
+       {
+               if(check_buddy_mlmeinfo_state(Adapter, _HW_STATE_NOLINK_))
+                       rtw_write16(Adapter, REG_RXFLTMAP2,0x00);
+
+               if(check_buddy_mlmeinfo_state(Adapter, WIFI_FW_AP_STATE) &&
+                       check_buddy_fwstate(Adapter, _FW_LINKED))
+               {
+                       ResumeTxBeacon(Adapter);
+
+                       //reset TSF 1/2 after ResumeTxBeacon
+                       //rtw_write8(Adapter, REG_DUAL_TSF_RST, BIT(1)|BIT(0));
+
+               }
+       }
+       else if(type == 2) //sta add event call back
+       {
+
+               //enable update TSF
+               if(Adapter->iface_type == IFACE_PORT1)
+                       rtw_write8(Adapter, REG_BCN_CTRL_1, rtw_read8(Adapter, REG_BCN_CTRL_1)&(~BIT(4)));
+               else
+                       rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)&(~BIT(4)));
+
+
+               if(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE|WIFI_ADHOC_MASTER_STATE))
+               {
+                       //fixed beacon issue for 8191su...........
+                       rtw_write8(Adapter,0x542 ,0x02);
+                       RetryLimit = 0x7;
+               }
+
+
+               if(check_buddy_mlmeinfo_state(Adapter, WIFI_FW_AP_STATE) &&
+                       check_buddy_fwstate(Adapter, _FW_LINKED))
+               {
+                       ResumeTxBeacon(Adapter);
+
+                       //reset TSF 1/2 after ResumeTxBeacon
+                       //rtw_write8(Adapter, REG_DUAL_TSF_RST, BIT(1)|BIT(0));
+               }
+
+       }
+
+       rtw_write16(Adapter, REG_RL, RetryLimit << RETRY_LIMIT_SHORT_SHIFT | RetryLimit << RETRY_LIMIT_LONG_SHIFT);
+
+#endif
+}
+
+void SetHwReg8192CU(PADAPTER Adapter, u8 variable, u8* val)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+
+_func_enter_;
+
+       switch(variable)
+       {
+               case HW_VAR_MEDIA_STATUS:
+                       {
+                               u8 val8;
+
+                               val8 = rtw_read8(Adapter, MSR)&0x0c;
+                               val8 |= *((u8 *)val);
+                               rtw_write8(Adapter, MSR, val8);
+                       }
+                       break;
+               case HW_VAR_MEDIA_STATUS1:
+                       {
+                               u8 val8;
+
+                               val8 = rtw_read8(Adapter, MSR)&0x03;
+                               val8 |= *((u8 *)val) <<2;
+                               rtw_write8(Adapter, MSR, val8);
+                       }
+                       break;
+               case HW_VAR_SET_OPMODE:
+                       hw_var_set_opmode(Adapter, variable, val);
+                       break;
+               case HW_VAR_MAC_ADDR:
+                       hw_var_set_macaddr(Adapter, variable, val);
+                       break;
+               case HW_VAR_BSSID:
+                       hw_var_set_bssid(Adapter, variable, val);
+                       break;
+               case HW_VAR_BASIC_RATE:
+                       {
+                               u16                     BrateCfg = 0;
+                               u8                      RateIndex = 0;
+
+                               // 2007.01.16, by Emily
+                               // Select RRSR (in Legacy-OFDM and CCK)
+                               // For 8190, we select only 24M, 12M, 6M, 11M, 5.5M, 2M, and 1M from the Basic rate.
+                               // We do not use other rates.
+                               HalSetBrateCfg( Adapter, val, &BrateCfg );
+
+                               //2011.03.30 add by Luke Lee
+                               //CCK 2M ACK should be disabled for some BCM and Atheros AP IOT
+                               //because CCK 2M has poor TXEVM
+                               //CCK 5.5M & 11M ACK should be enabled for better performance
+
+                               pHalData->BasicRateSet = BrateCfg = (BrateCfg |0xd) & 0x15d;
+
+                               BrateCfg |= 0x01; // default enable 1M ACK rate
+
+                               DBG_8192C("HW_VAR_BASIC_RATE: BrateCfg(%#x)\n", BrateCfg);
+
+                               // Set RRSR rate table.
+                               rtw_write8(Adapter, REG_RRSR, BrateCfg&0xff);
+                               rtw_write8(Adapter, REG_RRSR+1, (BrateCfg>>8)&0xff);
+                               rtw_write8(Adapter, REG_RRSR+2, rtw_read8(Adapter, REG_RRSR+2)&0xf0);
+
+                               // Set RTS initial rate
+                               while(BrateCfg > 0x1)
+                               {
+                                       BrateCfg = (BrateCfg>> 1);
+                                       RateIndex++;
+                               }
+                               // Ziv - Check
+                               rtw_write8(Adapter, REG_INIRTS_RATE_SEL, RateIndex);
+                       }
+                       break;
+               case HW_VAR_TXPAUSE:
+                       rtw_write8(Adapter, REG_TXPAUSE, *((u8 *)val));
+                       break;
+               case HW_VAR_BCN_FUNC:
+                       hw_var_set_bcn_func(Adapter, variable, val);
+                       break;
+               case HW_VAR_CORRECT_TSF:
+#ifdef CONFIG_CONCURRENT_MODE
+                       hw_var_set_correct_tsf(Adapter, variable, val);
+#else
+                       {
+                               u64     tsf;
+                               struct mlme_ext_priv    *pmlmeext = &Adapter->mlmeextpriv;
+                               struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+                               //tsf = pmlmeext->TSFValue - ((u32)pmlmeext->TSFValue % (pmlmeinfo->bcn_interval*1024)) -1024; //us
+                               tsf = pmlmeext->TSFValue - rtw_modular64(pmlmeext->TSFValue, (pmlmeinfo->bcn_interval*1024)) -1024; //us
+
+                               if(((pmlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE) || ((pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE))
+                               {
+                                       //pHalData->RegTxPause |= STOP_BCNQ;BIT(6)
+                                       //rtw_write8(Adapter, REG_TXPAUSE, (rtw_read8(Adapter, REG_TXPAUSE)|BIT(6)));
+                                       StopTxBeacon(Adapter);
+                               }
+
+                               //disable related TSF function
+                               rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)&(~BIT(3)));
+
+                               rtw_write32(Adapter, REG_TSFTR, tsf);
+                               rtw_write32(Adapter, REG_TSFTR+4, tsf>>32);
+
+                               //enable related TSF function
+                               rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)|BIT(3));
+
+
+                               if(((pmlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE) || ((pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE))
+                               {
+                                       //pHalData->RegTxPause  &= (~STOP_BCNQ);
+                                       //rtw_write8(Adapter, REG_TXPAUSE, (rtw_read8(Adapter, REG_TXPAUSE)&(~BIT(6))));
+                                       ResumeTxBeacon(Adapter);
+                               }
+                       }
+#endif
+                       break;
+               case HW_VAR_CHECK_BSSID:
+                       if(*((u8 *)val))
+                       {
+                               rtw_write32(Adapter, REG_RCR, rtw_read32(Adapter, REG_RCR)|RCR_CBSSID_DATA|RCR_CBSSID_BCN);
+                       }
+                       else
+                       {
+                               u32     val32;
+
+                               val32 = rtw_read32(Adapter, REG_RCR);
+                               val32 &= ~(RCR_CBSSID_DATA | RCR_CBSSID_BCN);
+                               rtw_write32(Adapter, REG_RCR, val32);
+                       }
+                       break;
+               case HW_VAR_MLME_DISCONNECT:
+#ifdef CONFIG_CONCURRENT_MODE
+                       hw_var_set_mlme_disconnect(Adapter, variable, val);
+#else
+                       {
+                               //Set RCR to not to receive data frame when NO LINK state
+                               //rtw_write32(Adapter, REG_RCR, rtw_read32(padapter, REG_RCR) & ~RCR_ADF);
+                               //reject all data frames
+                               rtw_write16(Adapter, REG_RXFLTMAP2,0x00);
+
+                               //reset TSF
+                               rtw_write8(Adapter, REG_DUAL_TSF_RST, (BIT(0)|BIT(1)));
+
+                               //disable update TSF
+                               rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)|BIT(4));
+                       }
+#endif
+                       break;
+               case HW_VAR_MLME_SITESURVEY:
+                       hw_var_set_mlme_sitesurvey(Adapter, variable,  val);
+                       break;
+               case HW_VAR_MLME_JOIN:
+#ifdef CONFIG_CONCURRENT_MODE
+                       hw_var_set_mlme_join(Adapter, variable,  val);
+#else
+                       {
+                               u8      RetryLimit = 0x30;
+                               u8      type = *((u8 *)val);
+                               struct mlme_priv        *pmlmepriv = &Adapter->mlmepriv;
+
+                               if(type == 0) // prepare to join
+                               {
+                                       //enable to rx data frame.Accept all data frame
+                                       //rtw_write32(padapter, REG_RCR, rtw_read32(padapter, REG_RCR)|RCR_ADF);
+                                       rtw_write16(Adapter, REG_RXFLTMAP2,0xFFFF);
+
+                                       rtw_write32(Adapter, REG_RCR, rtw_read32(Adapter, REG_RCR)|RCR_CBSSID_DATA|RCR_CBSSID_BCN);
+
+                                       if(check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _TRUE)
+                                       {
+                                               RetryLimit = (pHalData->CustomerID == RT_CID_CCX) ? 7 : 48;
+                                       }
+                                       else // Ad-hoc Mode
+                                       {
+                                               RetryLimit = 0x7;
+                                       }
+                               }
+                               else if(type == 1) //joinbss_event call back when join res < 0
+                               {
+                                       rtw_write16(Adapter, REG_RXFLTMAP2,0x00);
+                               }
+                               else if(type == 2) //sta add event call back
+                               {
+                                       //enable update TSF
+                                       rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)&(~BIT(4)));
+
+                                       if(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE|WIFI_ADHOC_MASTER_STATE))
+                                       {
+                                               //fixed beacon issue for 8191su...........
+                                               rtw_write8(Adapter,0x542 ,0x02);
+                                               RetryLimit = 0x7;
+                                       }
+                               }
+
+                               rtw_write16(Adapter, REG_RL, RetryLimit << RETRY_LIMIT_SHORT_SHIFT | RetryLimit << RETRY_LIMIT_LONG_SHIFT);
+                       }
+#endif
+                       break;
+
+               case HW_VAR_ON_RCR_AM:
+                       rtw_write32(Adapter, REG_RCR, rtw_read32(Adapter, REG_RCR)|RCR_AM);
+                       DBG_871X("%s, %d, RCR= %x \n", __FUNCTION__,__LINE__, rtw_read32(Adapter, REG_RCR));
+                       break;
+               case HW_VAR_OFF_RCR_AM:
+                       rtw_write32(Adapter, REG_RCR, rtw_read32(Adapter, REG_RCR)& (~RCR_AM));
+                       DBG_871X("%s, %d, RCR= %x \n", __FUNCTION__,__LINE__, rtw_read32(Adapter, REG_RCR));
+                       break;
+
+               case HW_VAR_BEACON_INTERVAL:
+                       rtw_write16(Adapter, REG_BCN_INTERVAL, *((u16 *)val));
+                       break;
+               case HW_VAR_SLOT_TIME:
+                       {
+                               u8      u1bAIFS, aSifsTime;
+                               struct mlme_ext_priv    *pmlmeext = &Adapter->mlmeextpriv;
+                               struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+                               rtw_write8(Adapter, REG_SLOT, val[0]);
+
+                               if(pmlmeinfo->WMM_enable == 0)
+                               {
+                                       if( pmlmeext->cur_wireless_mode == WIRELESS_11B)
+                                               aSifsTime = 10;
+                                       else
+                                               aSifsTime = 16;
+
+                                       u1bAIFS = aSifsTime + (2 * pmlmeinfo->slotTime);
+
+                                       // <Roger_EXP> Temporary removed, 2008.06.20.
+                                       rtw_write8(Adapter, REG_EDCA_VO_PARAM, u1bAIFS);
+                                       rtw_write8(Adapter, REG_EDCA_VI_PARAM, u1bAIFS);
+                                       rtw_write8(Adapter, REG_EDCA_BE_PARAM, u1bAIFS);
+                                       rtw_write8(Adapter, REG_EDCA_BK_PARAM, u1bAIFS);
+                               }
+                       }
+                       break;
+               case HW_VAR_RESP_SIFS:
+                       {
+#if 0
+                               // SIFS for OFDM Data ACK
+                               rtw_write8(Adapter, REG_SIFS_CTX+1, val[0]);
+                               // SIFS for OFDM consecutive tx like CTS data!
+                               rtw_write8(Adapter, REG_SIFS_TRX+1, val[1]);
+
+                               rtw_write8(Adapter,REG_SPEC_SIFS+1, val[0]);
+                               rtw_write8(Adapter,REG_MAC_SPEC_SIFS+1, val[0]);
+
+                               // 20100719 Joseph: Revise SIFS setting due to Hardware register definition change.
+                               rtw_write8(Adapter, REG_R2T_SIFS+1, val[0]); //0x08 - CCK
+                               rtw_write8(Adapter, REG_T2T_SIFS+1, val[0]); //0x0e - OFDM
+#else
+                               //SIFS_Timer = 0x0a0a0808;
+                               //RESP_SIFS for CCK
+                               rtw_write8(Adapter, REG_R2T_SIFS, val[0]); // SIFS_T2T_CCK (0x08)
+                               rtw_write8(Adapter, REG_R2T_SIFS+1, val[1]); //SIFS_R2T_CCK(0x08)
+                               //RESP_SIFS for OFDM
+                               rtw_write8(Adapter, REG_T2T_SIFS, val[2]); //SIFS_T2T_OFDM (0x0a)
+                               rtw_write8(Adapter, REG_T2T_SIFS+1, val[3]); //SIFS_R2T_OFDM(0x0a)
+#endif
+                       }
+                       break;
+               case HW_VAR_ACK_PREAMBLE:
+                       {
+                               u8      regTmp;
+                               u8      bShortPreamble = *( (PBOOLEAN)val );
+                               // Joseph marked out for Netgear 3500 TKIP channel 7 issue.(Temporarily)
+                               regTmp = (pHalData->nCur40MhzPrimeSC)<<5;
+                               //regTmp = 0;
+                               if(bShortPreamble)
+                                       regTmp |= 0x80;
+
+                               rtw_write8(Adapter, REG_RRSR+2, regTmp);
+                       }
+                       break;
+               case HW_VAR_SEC_CFG:
+#ifdef CONFIG_CONCURRENT_MODE
+                       rtw_write8(Adapter, REG_SECCFG, 0x0c|BIT(5));// enable tx enc and rx dec engine, and no key search for MC/BC
+#else
+                       rtw_write8(Adapter, REG_SECCFG, *((u8 *)val));
+#endif
+                       break;
+               case HW_VAR_DM_FLAG:
+                       pdmpriv->DMFlag = *((u8 *)val);
+                       break;
+               case HW_VAR_DM_FUNC_OP:
+                       if(val[0])
+                       {// save dm flag
+                               pdmpriv->DMFlag_tmp = pdmpriv->DMFlag;
+                       }
+                       else
+                       {// restore dm flag
+                               pdmpriv->DMFlag = pdmpriv->DMFlag_tmp;
+                       }
+                       break;
+               case HW_VAR_DM_FUNC_SET:
+                       pdmpriv->DMFlag |= *((u8 *)val);
+                       break;
+               case HW_VAR_DM_FUNC_CLR:
+                       pdmpriv->DMFlag &= *((u8 *)val);
+                       break;
+               case HW_VAR_CAM_EMPTY_ENTRY:
+                       {
+                               u8      ucIndex = *((u8 *)val);
+                               u8      i;
+                               u32     ulCommand=0;
+                               u32     ulContent=0;
+                               u32     ulEncAlgo=CAM_AES;
+
+                               for(i=0;i<CAM_CONTENT_COUNT;i++)
+                               {
+                                       // filled id in CAM config 2 byte
+                                       if( i == 0)
+                                       {
+                                               ulContent |=(ucIndex & 0x03) | ((u16)(ulEncAlgo)<<2);
+                                               //ulContent |= CAM_VALID;
+                                       }
+                                       else
+                                       {
+                                               ulContent = 0;
+                                       }
+                                       // polling bit, and No Write enable, and address
+                                       ulCommand= CAM_CONTENT_COUNT*ucIndex+i;
+                                       ulCommand= ulCommand | CAM_POLLINIG|CAM_WRITE;
+                                       // write content 0 is equall to mark invalid
+                                       rtw_write32(Adapter, WCAMI, ulContent);  //delay_ms(40);
+                                       //RT_TRACE(COMP_SEC, DBG_LOUD, ("CAM_empty_entry(): WRITE A4: %lx \n",ulContent));
+                                       rtw_write32(Adapter, RWCAM, ulCommand);  //delay_ms(40);
+                                       //RT_TRACE(COMP_SEC, DBG_LOUD, ("CAM_empty_entry(): WRITE A0: %lx \n",ulCommand));
+                               }
+                       }
+                       break;
+               case HW_VAR_CAM_INVALID_ALL:
+                       rtw_write32(Adapter, RWCAM, BIT(31)|BIT(30));
+                       break;
+               case HW_VAR_CAM_WRITE:
+                       {
+                               u32     cmd;
+                               u32     *cam_val = (u32 *)val;
+                               rtw_write32(Adapter, WCAMI, cam_val[0]);
+
+                               cmd = CAM_POLLINIG | CAM_WRITE | cam_val[1];
+                               rtw_write32(Adapter, RWCAM, cmd);
+                       }
+                       break;
+               case HW_VAR_AC_PARAM_VO:
+                       rtw_write32(Adapter, REG_EDCA_VO_PARAM, ((u32 *)(val))[0]);
+                       break;
+               case HW_VAR_AC_PARAM_VI:
+                       rtw_write32(Adapter, REG_EDCA_VI_PARAM, ((u32 *)(val))[0]);
+                       break;
+               case HW_VAR_AC_PARAM_BE:
+                       pHalData->AcParam_BE = ((u32 *)(val))[0];
+                       rtw_write32(Adapter, REG_EDCA_BE_PARAM, ((u32 *)(val))[0]);
+                       break;
+               case HW_VAR_AC_PARAM_BK:
+                       rtw_write32(Adapter, REG_EDCA_BK_PARAM, ((u32 *)(val))[0]);
+                       break;
+               case HW_VAR_ACM_CTRL:
+                       {
+                               u8      acm_ctrl = *((u8 *)val);
+                               u8      AcmCtrl = rtw_read8( Adapter, REG_ACMHWCTRL);
+
+                               if(acm_ctrl > 1)
+                                       AcmCtrl = AcmCtrl | 0x1;
+
+                               if(acm_ctrl & BIT(3))
+                                       AcmCtrl |= AcmHw_VoqEn;
+                               else
+                                       AcmCtrl &= (~AcmHw_VoqEn);
+
+                               if(acm_ctrl & BIT(2))
+                                       AcmCtrl |= AcmHw_ViqEn;
+                               else
+                                       AcmCtrl &= (~AcmHw_ViqEn);
+
+                               if(acm_ctrl & BIT(1))
+                                       AcmCtrl |= AcmHw_BeqEn;
+                               else
+                                       AcmCtrl &= (~AcmHw_BeqEn);
+
+                               DBG_871X("[HW_VAR_ACM_CTRL] Write 0x%X\n", AcmCtrl );
+                               rtw_write8(Adapter, REG_ACMHWCTRL, AcmCtrl );
+                       }
+                       break;
+               case HW_VAR_AMPDU_MIN_SPACE:
+                       {
+                               u8      MinSpacingToSet;
+                               u8      SecMinSpace;
+
+                               MinSpacingToSet = *((u8 *)val);
+                               if(MinSpacingToSet <= 7)
+                               {
+                                       switch(Adapter->securitypriv.dot11PrivacyAlgrthm)
+                                       {
+                                               case _NO_PRIVACY_:
+                                               case _AES_:
+                                                       SecMinSpace = 0;
+                                                       break;
+
+                                               case _WEP40_:
+                                               case _WEP104_:
+                                               case _TKIP_:
+                                               case _TKIP_WTMIC_:
+                                                       SecMinSpace = 6;
+                                                       break;
+                                               default:
+                                                       SecMinSpace = 7;
+                                                       break;
+                                       }
+
+                                       if(MinSpacingToSet < SecMinSpace){
+                                               MinSpacingToSet = SecMinSpace;
+                                       }
+
+                                       //RT_TRACE(COMP_MLME, DBG_LOUD, ("Set HW_VAR_AMPDU_MIN_SPACE: %#x\n", Adapter->MgntInfo.MinSpaceCfg));
+                                       rtw_write8(Adapter, REG_AMPDU_MIN_SPACE, (rtw_read8(Adapter, REG_AMPDU_MIN_SPACE) & 0xf8) | MinSpacingToSet);
+                               }
+                       }
+                       break;
+               case HW_VAR_AMPDU_FACTOR:
+                       {
+                               u8      RegToSet_Normal[4]={0x41,0xa8,0x72, 0xb9};
+                               u8      RegToSet_BT[4]={0x31,0x74,0x42, 0x97};
+                               u8      FactorToSet;
+                               u8      *pRegToSet;
+                               u8      index = 0;
+
+#ifdef CONFIG_BT_COEXIST
+                               if(     (pHalData->bt_coexist.BT_Coexist) &&
+                                       (pHalData->bt_coexist.BT_CoexistType == BT_CSR_BC4) )
+                                       pRegToSet = RegToSet_BT; // 0x97427431;
+                               else
+#endif
+                                       pRegToSet = RegToSet_Normal; // 0xb972a841;
+
+                               FactorToSet = *((u8 *)val);
+                               if(FactorToSet <= 3)
+                               {
+                                       FactorToSet = (1<<(FactorToSet + 2));
+                                       if(FactorToSet>0xf)
+                                               FactorToSet = 0xf;
+
+                                       for(index=0; index<4; index++)
+                                       {
+                                               if((pRegToSet[index] & 0xf0) > (FactorToSet<<4))
+                                                       pRegToSet[index] = (pRegToSet[index] & 0x0f) | (FactorToSet<<4);
+
+                                               if((pRegToSet[index] & 0x0f) > FactorToSet)
+                                                       pRegToSet[index] = (pRegToSet[index] & 0xf0) | (FactorToSet);
+
+                                               rtw_write8(Adapter, (REG_AGGLEN_LMT+index), pRegToSet[index]);
+                                       }
+
+                                       //RT_TRACE(COMP_MLME, DBG_LOUD, ("Set HW_VAR_AMPDU_FACTOR: %#x\n", FactorToSet));
+                               }
+                       }
+                       break;
+               case HW_VAR_RXDMA_AGG_PG_TH:
+                       #ifdef CONFIG_USB_RX_AGGREGATION
+                       {
+                               u8      threshold = *((u8 *)val);
+                               if( threshold == 0)
+                               {
+                                       threshold = pHalData->UsbRxAggPageCount;
+                               }
+                               rtw_write8(Adapter, REG_RXDMA_AGG_PG_TH, threshold);
+                       }
+                       #endif
+                       break;
+               case HW_VAR_SET_RPWM:
+                       rtw_write8(Adapter, REG_USB_HRPWM, *((u8 *)val));
+                       break;
+               case HW_VAR_H2C_FW_PWRMODE:
+                       {
+                               u8      psmode = (*(u8 *)val);
+
+                               // Forece leave RF low power mode for 1T1R to prevent conficting setting in Fw power
+                               // saving sequence. 2010.06.07. Added by tynli. Suggested by SD3 yschang.
+                               if( (psmode != PS_MODE_ACTIVE) && (!IS_92C_SERIAL(pHalData->VersionID)))
+                               {
+                                       rtl8192c_dm_RF_Saving(Adapter, _TRUE);
+                               }
+                               rtl8192c_set_FwPwrMode_cmd(Adapter, psmode);
+                       }
+                       break;
+               case HW_VAR_H2C_FW_JOINBSSRPT:
+                       {
+                               u8      mstatus = (*(u8 *)val);
+                               rtl8192c_set_FwJoinBssReport_cmd(Adapter, mstatus);
+                       }
+                       break;
+#ifdef CONFIG_P2P_PS
+               case HW_VAR_H2C_FW_P2P_PS_OFFLOAD:
+                       {
+                               u8      p2p_ps_state = (*(u8 *)val);
+                               rtl8192c_set_p2p_ps_offload_cmd(Adapter, p2p_ps_state);
+                       }
+                       break;
+#endif // CONFIG_P2P_PS
+#ifdef CONFIG_TDLS
+               case HW_VAR_TDLS_WRCR:
+                       rtw_write32(Adapter, REG_RCR, rtw_read32(Adapter, REG_RCR)&(~ BIT(6) ));
+                       break;
+               case HW_VAR_TDLS_INIT_CH_SEN:
+                       {
+                               rtw_write32(Adapter, REG_RCR, rtw_read32(Adapter, REG_RCR)&(~ BIT(6) )&(~ BIT(7) ));
+                               rtw_write16(Adapter, REG_RXFLTMAP2,0xffff);
+
+                               //disable update TSF
+                               rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)|BIT(4));
+                       }
+                       break;
+               case HW_VAR_TDLS_DONE_CH_SEN:
+                       {
+                               //enable update TSF
+                               rtw_write8(Adapter, REG_BCN_CTRL, rtw_read8(Adapter, REG_BCN_CTRL)&(~ BIT(4)));
+                               rtw_write32(Adapter, REG_RCR, rtw_read32(Adapter, REG_RCR)|(BIT(7) ));
+                       }
+                       break;
+               case HW_VAR_TDLS_RS_RCR:
+                       rtw_write32(Adapter, REG_RCR, rtw_read32(Adapter, REG_RCR)|(BIT(6)));
+                       break;
+#endif //CONFIG_TDLS
+               case HW_VAR_INITIAL_GAIN:
+                       {
+                               DIG_T   *pDigTable = &pdmpriv->DM_DigTable;
+                               u32             rx_gain = ((u32 *)(val))[0];
+
+                               if(rx_gain == 0xff){//restore rx gain
+                                       pDigTable->CurIGValue = pDigTable->BackupIGValue;
+                                       PHY_SetBBReg(Adapter, rOFDM0_XAAGCCore1, 0x7f,pDigTable->CurIGValue );
+                                       PHY_SetBBReg(Adapter, rOFDM0_XBAGCCore1, 0x7f,pDigTable->CurIGValue);
+                               }
+                               else{
+                                       pDigTable->BackupIGValue = pDigTable->CurIGValue;
+                                       PHY_SetBBReg(Adapter, rOFDM0_XAAGCCore1, 0x7f,rx_gain );
+                                       PHY_SetBBReg(Adapter, rOFDM0_XBAGCCore1, 0x7f,rx_gain);
+                                       pDigTable->CurIGValue = (u8)rx_gain;
+                               }
+
+
+                       }
+                       break;
+               case HW_VAR_TRIGGER_GPIO_0:
+                       rtl8192cu_trigger_gpio_0(Adapter);
+                       break;
+#ifdef CONFIG_BT_COEXIST
+               case HW_VAR_BT_SET_COEXIST:
+                       {
+                               u8      bStart = (*(u8 *)val);
+                               rtl8192c_set_dm_bt_coexist(Adapter, bStart);
+                       }
+                       break;
+               case HW_VAR_BT_ISSUE_DELBA:
+                       {
+                               u8      dir = (*(u8 *)val);
+                               rtl8192c_issue_delete_ba(Adapter, dir);
+                       }
+                       break;
+#endif
+#ifdef CONFIG_SW_ANTENNA_DIVERSITY
+
+               case HW_VAR_ANTENNA_DIVERSITY_LINK:
+                       SwAntDivRestAfterLink8192C(Adapter);
+                       break;
+               case HW_VAR_ANTENNA_DIVERSITY_SELECT:
+                       {
+                               u8      Optimum_antenna = (*(u8 *)val);
+                               //switch antenna to Optimum_antenna
+               //              DBG_8192C("==> HW_VAR_ANTENNA_DIVERSITY_SELECT , Ant_(%s)\n",(Optimum_antenna==2)?"A":"B");
+                               if(pHalData->CurAntenna !=  Optimum_antenna)
+                               {
+                                       PHY_SetBBReg(Adapter, rFPGA0_XA_RFInterfaceOE, 0x300, Optimum_antenna);
+                                       pHalData->CurAntenna = Optimum_antenna ;
+                                       //DBG_8192C("==> HW_VAR_ANTENNA_DIVERSITY_SELECT , Ant_(%s)\n",(Optimum_antenna==2)?"A":"B");
+                               }
+                       }
+                       break;
+#endif
+               case HW_VAR_EFUSE_BYTES: // To set EFUE total used bytes, added by Roger, 2008.12.22.
+                       pHalData->EfuseUsedBytes = *((u16 *)val);
+                       break;
+               case HW_VAR_FIFO_CLEARN_UP:
+                       {
+                               #define RW_RELEASE_EN           BIT18
+                               #define RXDMA_IDLE                      BIT17
+
+                               struct pwrctrl_priv *pwrpriv = &Adapter->pwrctrlpriv;
+                               u8 trycnt = 100;
+
+                               //pause tx
+                               rtw_write8(Adapter,REG_TXPAUSE,0xff);
+
+                               //keep sn
+                               Adapter->xmitpriv.nqos_ssn = rtw_read16(Adapter,REG_NQOS_SEQ);
+
+                               if(pwrpriv->bkeepfwalive != _TRUE)
+                               {
+                                       //RX DMA stop
+                                       rtw_write32(Adapter,REG_RXPKT_NUM,(rtw_read32(Adapter,REG_RXPKT_NUM)|RW_RELEASE_EN));
+                                       do{
+                                               if(!(rtw_read32(Adapter,REG_RXPKT_NUM)&RXDMA_IDLE))
+                                                       break;
+                                       }while(trycnt--);
+                                       if(trycnt ==0)
+                                               DBG_8192C("Stop RX DMA failed...... \n");
+
+                                       //RQPN Load 0
+                                       rtw_write16(Adapter,REG_RQPN_NPQ,0x0);
+                                       rtw_write32(Adapter,REG_RQPN,0x80000000);
+                                       rtw_mdelay_os(10);
+                               }
+                       }
+                       break;
+                       case HW_VAR_WOWLAN:
+#ifdef CONFIG_WOWLAN
+                       {
+                               struct wowlan_ioctl_param *poidparam;
+
+                               int res;
+
+                               poidparam = (struct wowlan_ioctl_param *)val;
+                               switch (poidparam->subcode){
+                                       case WOWLAN_PATTERN_MATCH:
+                                               //Turn on the Pattern Match feature
+                                               DBG_8192C("\n PATTERN_MATCH poidparam->subcode_value=%d\n",poidparam->subcode_value);
+                                               if(poidparam->subcode_value==1){
+                                                       //rtw_write8(Adapter, REG_WOW_CTRL, (rtw_read8(Adapter, REG_WOW_CTRL)|BIT(1)));
+                                                       Adapter->pwrctrlpriv.wowlan_pattern=_TRUE;
+                                                       DBG_8192C("%s Adapter->pwrctrlpriv.wowlan_pattern=%x\n",__FUNCTION__,Adapter->pwrctrlpriv.wowlan_pattern);
+                                               }
+                                               else{
+                                                       //rtw_write8(Adapter, REG_WOW_CTRL, (rtw_read8(Adapter, REG_WOW_CTRL)&~BIT(1)));
+                                                       Adapter->pwrctrlpriv.wowlan_pattern=_FALSE;
+                                               }
+                                               break;
+                                       case WOWLAN_MAGIC_PACKET:
+                                               //Turn on the Magic Packet feature
+                                               DBG_8192C("\n MAGIC_PACKET poidparam->subcode_value=%d\n",poidparam->subcode_value);
+                                               if(poidparam->subcode_value==1){
+                                                       //rtw_write8(Adapter, REG_WOW_CTRL, (rtw_read8(Adapter, REG_WOW_CTRL)|BIT(2)));
+                                                       Adapter->pwrctrlpriv.wowlan_magic=_TRUE;
+                                                       DBG_8192C("%s Adapter->pwrctrlpriv.wowlan_magic=%x\n",__FUNCTION__,Adapter->pwrctrlpriv.wowlan_magic);
+                                               }
+                                               else{
+                                                       //rtw_write8(Adapter, REG_WOW_CTRL, (rtw_read8(Adapter, REG_WOW_CTRL)&~BIT(2)));
+                                                       Adapter->pwrctrlpriv.wowlan_magic=_FALSE;
+                                               }
+                                               break;
+                                       case WOWLAN_UNICAST:
+                                               //Turn on the Unicast wakeup feature
+                                               if(poidparam->subcode_value==1){
+                                                       //rtw_write8(Adapter, REG_WOW_CTRL, (rtw_read8(Adapter, REG_WOW_CTRL)|BIT(3)));
+                                                       Adapter->pwrctrlpriv.wowlan_unicast=_TRUE;
+                                               }
+                                               else{
+                                                       //rtw_write8(Adapter, REG_WOW_CTRL, (rtw_read8(Adapter, REG_WOW_CTRL)&~BIT(3)));
+                                                       Adapter->pwrctrlpriv.wowlan_unicast=_FALSE;
+                                                       DBG_8192C("%s Adapter->pwrctrlpriv.wowlan_unicast=%x\n",__FUNCTION__,Adapter->pwrctrlpriv.wowlan_unicast);
+                                               }
+                                               break;
+                                       case WOWLAN_SET_PATTERN:
+                                               //Setting the Pattern for wowlan
+                                               res=rtw_wowlan_set_pattern(Adapter,poidparam->pattern);
+                                               if(res)
+                                                       DBG_8192C("rtw_wowlan_set_pattern retern value=0x%x",res);
+                                               break;
+                                       case WOWLAN_DUMP_REG:
+                                               //dump the WKFMCAM and WOW_CTRL register
+                                               /*DBG_8192C("\n\n\n\n rtw_wowlan_ctrl: WOW_CTRL=0x%x \n",rtw_read8(Adapter, REG_WOW_CTRL));
+                                               DBG_8192C("print WKFMCAM index =%d ",poidparam->data[0]);
+                                               {       int cmd=0,offset=0;
+                                                       for(offset=0;offset<5;offset++){
+                                                               cmd=BIT(31)|(poidparam->data[0]+offset);
+                                                               rtw_write32(Adapter, REG_WKFMCAM_CMD, cmd);
+                                                               DBG_8192C("offset[%d]=0x%.8x  ",offset,rtw_read32(Adapter, REG_WKFMCAM_RWD));
+                                                               DBG_8192C("offset[%d]=MSB 0x%x:0x%x:0x%x:0x%x  ",offset,rtw_read8(Adapter, REG_WKFMCAM_RWD+3),rtw_read8(Adapter, REG_WKFMCAM_RWD+2),rtw_read8(Adapter, REG_WKFMCAM_RWD+1),rtw_read8(Adapter, REG_WKFMCAM_RWD));
+                                                       }
+                                               }*/
+
+                                               break;
+                                       case WOWLAN_ENABLE:
+                                               SetFwRelatedForWoWLAN8192CU(Adapter, _TRUE);
+                                               //Set Pattern
+                                               if(Adapter->pwrctrlpriv.wowlan_pattern==_TRUE)
+                                                       rtw_wowlan_reload_pattern(Adapter);
+                                               rtl8192c_set_wowlan_cmd(Adapter);
+                                               rtw_write8(Adapter, 0x6, rtw_read8(Adapter, 0x6)|BIT(3));
+                                               rtw_msleep_os(10);
+                                               //DBG_8192C(" \n REG_WOW_CTRL=0x%x \n",rtw_read8(Adapter, REG_WOW_CTRL));
+//                                             if(rtw_read8(Adapter, REG_WOW_CTRL)==0)
+//                                                     rtw_write8(Adapter, REG_WOW_CTRL, (rtw_read8(Adapter, REG_WOW_CTRL)|BIT(1)|BIT(2)|BIT(3)));
+                                               //DBG_8192C(" \n REG_WOW_CTRL=0x%x \n",rtw_read8(Adapter, REG_WOW_CTRL));
+                                               break;
+
+                                       case WOWLAN_DISABLE:
+                                               Adapter->pwrctrlpriv.wowlan_mode=_FALSE;
+                                               rtl8192c_set_wowlan_cmd(Adapter);
+                                               rtw_msleep_os(10);
+                                               break;
+
+                                       case WOWLAN_STATUS:
+                                               poidparam->wakeup_reason = rtw_read8(Adapter, REG_WOWLAN_REASON);
+                                               DBG_8192C("wake on wlan reason 0x%02x\n", poidparam->wakeup_reason);
+                                               break;
+
+                                       default:
+                                               break;
+                               }
+                               if (Adapter->pwrctrlpriv.wowlan_unicast||Adapter->pwrctrlpriv.wowlan_magic || Adapter->pwrctrlpriv.wowlan_pattern)
+                                       Adapter->pwrctrlpriv.wowlan_mode =_TRUE;
+                               else
+                                       Adapter->pwrctrlpriv.wowlan_mode =_FALSE;
+                       }
+
+                       break;
+#endif //CONFIG_WOWLAN
+               case HW_VAR_CHECK_TXBUF:
+#ifdef CONFIG_CONCURRENT_MODE
+                       {
+                               int i;
+                               u8      RetryLimit = 0x01;
+
+                               //rtw_write16(Adapter, REG_RL,0x0101);
+                               rtw_write16(Adapter, REG_RL, RetryLimit << RETRY_LIMIT_SHORT_SHIFT | RetryLimit << RETRY_LIMIT_LONG_SHIFT);
+
+                               for(i=0;i<1000;i++)
+                               {
+                                       if(rtw_read32(Adapter, 0x200) != rtw_read32(Adapter, 0x204))
+                                       {
+                                               //DBG_871X("packet in tx packet buffer - 0x204=%x, 0x200=%x (%d)\n", rtw_read32(Adapter, 0x204), rtw_read32(Adapter, 0x200), i);
+                                               rtw_msleep_os(10);
+                                       }
+                                       else
+                                       {
+                                               DBG_871X("no packet in tx packet buffer (%d)\n", i);
+                                               break;
+                                       }
+                               }
+
+                               RetryLimit = 0x30;
+                               rtw_write16(Adapter, REG_RL, RetryLimit << RETRY_LIMIT_SHORT_SHIFT | RetryLimit << RETRY_LIMIT_LONG_SHIFT);
+
+                       }
+#endif
+                       break;
+               case HW_VAR_BCN_VALID:
+                       //BCN_VALID, BIT16 of REG_TDECTRL = BIT0 of REG_TDECTRL+2, write 1 to clear, Clear by sw
+                       rtw_write8(Adapter, REG_TDECTRL+2, rtw_read8(Adapter, REG_TDECTRL+2) | BIT0);
+                       break;
+               case HW_VAR_USB_RXAGG_PAGE_TO:
+                       rtw_write8(Adapter, REG_USB_DMA_AGG_TO, *((u8 *)val));
+                       break;
+               default:
+                       break;
+       }
+
+_func_exit_;
+}
+
+void GetHwReg8192CU(PADAPTER Adapter, u8 variable, u8* val)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+
+_func_enter_;
+
+       switch(variable)
+       {
+               case HW_VAR_BASIC_RATE:
+                       *((u16 *)(val)) = pHalData->BasicRateSet;
+               case HW_VAR_TXPAUSE:
+                       val[0] = rtw_read8(Adapter, REG_TXPAUSE);
+                       break;
+               case HW_VAR_BCN_VALID:
+                       //BCN_VALID, BIT16 of REG_TDECTRL = BIT0 of REG_TDECTRL+2
+                       val[0] = (BIT0 & rtw_read8(Adapter, REG_TDECTRL+2))?_TRUE:_FALSE;
+                       break;
+               case HW_VAR_DM_FLAG:
+                       val[0] = pHalData->dmpriv.DMFlag;
+                       break;
+               case HW_VAR_RF_TYPE:
+                       val[0] = pHalData->rf_type;
+                       break;
+               case HW_VAR_FWLPS_RF_ON:
+                       {
+                               //When we halt NIC, we should check if FW LPS is leave.
+                               u32     valRCR;
+
+                               if(Adapter->pwrctrlpriv.rf_pwrstate == rf_off)
+                               {
+                                       // If it is in HW/SW Radio OFF or IPS state, we do not check Fw LPS Leave,
+                                       // because Fw is unload.
+                                       val[0] = _TRUE;
+                               }
+                               else
+                               {
+                                       valRCR = rtw_read32(Adapter, REG_RCR);
+                                       valRCR &= 0x00070000;
+                                       if(valRCR)
+                                               val[0] = _FALSE;
+                                       else
+                                               val[0] = _TRUE;
+                               }
+                       }
+                       break;
+#ifdef CONFIG_ANTENNA_DIVERSITY
+               case HW_VAR_CURRENT_ANTENNA:
+                       val[0] = pHalData->CurAntenna;
+                       break;
+#endif
+               case HW_VAR_EFUSE_BYTES: // To get EFUE total used bytes, added by Roger, 2008.12.22.
+                       *((u16 *)(val)) = pHalData->EfuseUsedBytes;
+                       break;
+               case HW_VAR_VID:
+                       *((u16 *)(val)) = pHalData->EEPROMVID;
+                       break;
+               case HW_VAR_PID:
+                       *((u16 *)(val)) = pHalData->EEPROMPID;
+                       break;
+               default:
+                       break;
+       }
+
+_func_exit_;
+}
+
+//
+//     Description:
+//             Query setting of specified variable.
+//
+u8
+GetHalDefVar8192CUsb(
+       IN      PADAPTER                                Adapter,
+       IN      HAL_DEF_VARIABLE                eVariable,
+       IN      PVOID                                   pValue
+       )
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       u8                      bResult = _TRUE;
+
+       switch(eVariable)
+       {
+               case HAL_DEF_UNDERCORATEDSMOOTHEDPWDB:
+#if 0 //trunk
+                       {
+                               struct mlme_priv *pmlmepriv = &Adapter->mlmepriv;
+                               struct sta_priv * pstapriv = &Adapter->stapriv;
+                               struct sta_info * psta;
+                               psta = rtw_get_stainfo(pstapriv, pmlmepriv->cur_network.network.MacAddress);
+                               if(psta)
+                               {
+                                       *((int *)pValue) = psta->rssi_stat.UndecoratedSmoothedPWDB;
+                               }
+                       }
+#else //v4 branch
+                               //if(check_fwstate(&Adapter->mlmepriv, WIFI_STATION_STATE) == _TRUE){
+                       *((int *)pValue) = pHalData->dmpriv.UndecoratedSmoothedPWDB;
+                               //}
+                               //else{
+
+                               //}
+#endif
+                       break;
+               case HAL_DEF_IS_SUPPORT_ANT_DIV:
+                       #ifdef CONFIG_ANTENNA_DIVERSITY
+                       *((u8 *)pValue) = (IS_92C_SERIAL(pHalData->VersionID) ||(pHalData->AntDivCfg==0))?_FALSE:_TRUE;
+                       #endif
+                       break;
+               case HAL_DEF_CURRENT_ANTENNA:
+                       #ifdef CONFIG_ANTENNA_DIVERSITY
+                       *(( u8*)pValue) = pHalData->CurAntenna;
+                       #endif
+                       break;
+               case HAL_DEF_DRVINFO_SZ:
+                       *(( u32*)pValue) = DRVINFO_SZ;
+                       break;
+               case HAL_DEF_MAX_RECVBUF_SZ:
+                       *(( u32*)pValue) = MAX_RECVBUF_SZ;
+                       break;
+               case HAL_DEF_RX_PACKET_OFFSET:
+                       *(( u32*)pValue) = RXDESC_SIZE + DRVINFO_SZ;
+                       break;
+               case HAL_DEF_DBG_DUMP_RXPKT:
+                       *(( u8*)pValue) = pHalData->bDumpRxPkt;
+                       break;
+               case HAL_DEF_DBG_DM_FUNC:
+                       *(( u8*)pValue) = pHalData->dmpriv.DMFlag;
+                       break;
+               default:
+                       //RT_TRACE(COMP_INIT, DBG_WARNING, ("GetHalDefVar8192CUsb(): Unkown variable: %d!\n", eVariable));
+                       bResult = _FALSE;
+                       break;
+       }
+
+       return bResult;
+}
+
+
+
+
+//
+//     Description:
+//             Change default setting of specified variable.
+//
+u8
+SetHalDefVar8192CUsb(
+       IN      PADAPTER                                Adapter,
+       IN      HAL_DEF_VARIABLE                eVariable,
+       IN      PVOID                                   pValue
+       )
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       u8                      bResult = _TRUE;
+
+       switch(eVariable)
+       {
+               case HAL_DEF_DBG_DUMP_RXPKT:
+                       pHalData->bDumpRxPkt = *(( u8*)pValue);
+                       break;
+               case HAL_DEF_DBG_DM_FUNC:
+                       {
+                               u8 dm_func = *(( u8*)pValue);
+                               struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+
+                               if(dm_func == 0){ //disable all dynamic func
+                                       pdmpriv->DMFlag = DYNAMIC_FUNC_DISABLE;
+                                       DBG_8192C("==> Disable all dynamic function...\n");
+                               }
+                               else if(dm_func == 1){//disable DIG
+                                       pdmpriv->DMFlag &= (~DYNAMIC_FUNC_DIG);
+                                       DBG_8192C("==> Disable DIG...\n");
+                               }
+                               else if(dm_func == 2){//disable High power
+                                       pdmpriv->DMFlag &= (~DYNAMIC_FUNC_HP);
+                               }
+                               else if(dm_func == 3){//disable tx power tracking
+                                       pdmpriv->DMFlag &= (~DYNAMIC_FUNC_SS);
+                                       DBG_8192C("==> Disable tx power tracking...\n");
+                               }
+                               else if(dm_func == 4){//disable BT coexistence
+                                       pdmpriv->DMFlag &= (~DYNAMIC_FUNC_BT);
+                               }
+                               else if(dm_func == 5){//disable antenna diversity
+                                       pdmpriv->DMFlag &= (~DYNAMIC_FUNC_ANT_DIV);
+                               }
+                               else if(dm_func == 6){//turn on all dynamic func
+                                       if(!(pdmpriv->DMFlag & DYNAMIC_FUNC_DIG))
+                                       {
+                                               struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+                                               DIG_T   *pDigTable = &pdmpriv->DM_DigTable;
+                                               pDigTable->PreIGValue = rtw_read8(Adapter,0xc50);
+                                       }
+
+                                       pdmpriv->DMFlag |= (DYNAMIC_FUNC_DIG|DYNAMIC_FUNC_HP|DYNAMIC_FUNC_SS|
+                                               DYNAMIC_FUNC_BT|DYNAMIC_FUNC_ANT_DIV) ;
+                                       DBG_8192C("==> Turn on all dynamic function...\n");
+                               }
+                       }
+                       break;
+               default:
+                       //RT_TRACE(COMP_INIT, DBG_TRACE, ("SetHalDefVar819xUsb(): Unkown variable: %d!\n", eVariable));
+                       bResult = _FALSE;
+                       break;
+       }
+
+       return bResult;
+}
+
+u32  _update_92cu_basic_rate(_adapter *padapter, unsigned int mask)
+{
+       HAL_DATA_TYPE           *pHalData = GET_HAL_DATA(padapter);
+#ifdef CONFIG_BT_COEXIST
+       struct btcoexist_priv   *pbtpriv = &(pHalData->bt_coexist);
+#endif
+       unsigned int BrateCfg = 0;
+
+#ifdef CONFIG_BT_COEXIST
+       if(     (pbtpriv->BT_Coexist) &&        (pbtpriv->BT_CoexistType == BT_CSR_BC4) )
+       {
+               BrateCfg = mask  & 0x151;
+               //DBG_8192C("BT temp disable cck 2/5.5/11M, (0x%x = 0x%x)\n", REG_RRSR, BrateCfg & 0x151);
+       }
+       else
+#endif
+       {
+               if(pHalData->VersionID != VERSION_TEST_CHIP_88C)
+                       BrateCfg = mask  & 0x15F;
+               else    //for 88CU 46PING setting, Disable CCK 2M, 5.5M, Others must tuning
+                       BrateCfg = mask  & 0x159;
+       }
+
+       BrateCfg |= 0x01; // default enable 1M ACK rate
+
+       return BrateCfg;
+}
+
+void _update_response_rate(_adapter *padapter,unsigned int mask)
+{
+       u8      RateIndex = 0;
+       // Set RRSR rate table.
+       rtw_write8(padapter, REG_RRSR, mask&0xff);
+       rtw_write8(padapter,REG_RRSR+1, (mask>>8)&0xff);
+
+
+       // Set RTS initial rate
+       while(mask > 0x1)
+       {
+               mask = (mask>> 1);
+               RateIndex++;
+       }
+       rtw_write8(padapter, REG_INIRTS_RATE_SEL, RateIndex);
+}
+
+void UpdateHalRAMask8192CUsb(PADAPTER padapter, u32 mac_id)
+{
+       //volatile unsigned int result;
+       u8      init_rate=0;
+       u8      networkType, raid;
+       u32     mask;
+       u8      shortGIrate = _FALSE;
+       int     supportRateNum = 0;
+       struct sta_info *psta;
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       WLAN_BSSID_EX           *cur_network = &(pmlmeinfo->network);
+#ifdef CONFIG_BT_COEXIST
+       struct btcoexist_priv   *pbtpriv = &(pHalData->bt_coexist);
+#endif
+
+       if (mac_id >= NUM_STA) //CAM_SIZE
+       {
+               return;
+       }
+
+       psta = pmlmeinfo->FW_sta_info[mac_id].psta;
+       if(psta == NULL)
+       {
+               return;
+       }
+
+       switch (mac_id)
+       {
+               case 0:// for infra mode
+#ifdef CONFIG_CONCURRENT_MODE
+               case 2:// first station uses macid=0, second station uses macid=2
+#endif
+                       supportRateNum = rtw_get_rateset_len(cur_network->SupportedRates);
+                       networkType = judge_network_type(padapter, cur_network->SupportedRates, supportRateNum) & 0xf;
+                       //pmlmeext->cur_wireless_mode = networkType;
+                       raid = networktype_to_raid(networkType);
+
+                       mask = update_supported_rate(cur_network->SupportedRates, supportRateNum);
+                       mask |= (pmlmeinfo->HT_enable)? update_MSC_rate(&(pmlmeinfo->HT_caps)): 0;
+                       mask |= ((raid<<28)&0xf0000000);
+
+                       if (support_short_GI(padapter, &(pmlmeinfo->HT_caps)))
+                       {
+                               shortGIrate = _TRUE;
+                       }
+
+                       break;
+
+               case 1://for broadcast/multicast
+                       supportRateNum = rtw_get_rateset_len(pmlmeinfo->FW_sta_info[mac_id].SupportedRates);
+                       if(pmlmeext->cur_wireless_mode & WIRELESS_11B)
+                               networkType = WIRELESS_11B;
+                       else
+                               networkType = WIRELESS_11G;
+                       raid = networktype_to_raid(networkType);
+
+                       mask = update_basic_rate(cur_network->SupportedRates, supportRateNum);
+                       mask |= ((raid<<28)&0xf0000000);
+
+                       break;
+
+               default: //for each sta in IBSS
+#ifdef CONFIG_TDLS
+                       if(psta->tdls_sta_state & TDLS_LINKED_STATE)
+                       {
+                               shortGIrate = update_sgi_tdls(padapter, psta);
+                               mask = update_mask_tdls(padapter, psta);
+                               raid = mask>>28;
+                               break;
+                       }
+                       else
+#endif //CONFIG_TDLS
+                       {
+                               supportRateNum = rtw_get_rateset_len(pmlmeinfo->FW_sta_info[mac_id].SupportedRates);
+                               networkType = judge_network_type(padapter, pmlmeinfo->FW_sta_info[mac_id].SupportedRates, supportRateNum) & 0xf;
+                               //pmlmeext->cur_wireless_mode = networkType;
+                               raid = networktype_to_raid(networkType);
+
+                               mask = update_supported_rate(cur_network->SupportedRates, supportRateNum);
+                               mask |= ((raid<<28)&0xf0000000);
+
+                               //todo: support HT in IBSS
+
+                               break;
+                       }
+       }
+
+#ifdef CONFIG_BT_COEXIST
+       if( (pbtpriv->BT_Coexist) &&
+               (pbtpriv->BT_CoexistType == BT_CSR_BC4) &&
+               (pbtpriv->BT_CUR_State) &&
+               (pbtpriv->BT_Ant_isolation) &&
+               ((pbtpriv->BT_Service==BT_SCO)||
+               (pbtpriv->BT_Service==BT_Busy)) )
+               mask &= 0xffffcfc0;
+       else
+#endif
+               mask &=0xffffffff;
+
+
+       init_rate = get_highest_rate_idx(mask)&0x3f;
+
+       if(pHalData->fw_ractrl == _TRUE)
+       {
+               u8 arg = 0;
+
+               //arg = (cam_idx-4)&0x1f;//MACID
+               arg = mac_id&0x1f;//MACID
+
+               arg |= BIT(7);
+
+               if (shortGIrate==_TRUE)
+                       arg |= BIT(5);
+
+               DBG_871X("update raid entry, mask=0x%x, arg=0x%x\n", mask, arg);
+               psta->ra_mask=mask;
+#ifdef CONFIG_INTEL_PROXIM
+               if(padapter->proximity.proxim_on ==_TRUE){
+                       arg &= ~BIT(6);
+               }
+               else {
+                       arg |= BIT(6);
+               }
+#endif //CONFIG_INTEL_PROXIM
+               rtl8192c_set_raid_cmd(padapter, mask, arg);
+
+       }
+       else
+       {
+               if (shortGIrate==_TRUE)
+                       init_rate |= BIT(6);
+
+               rtw_write8(padapter, (REG_INIDATA_RATE_SEL+mac_id), init_rate);
+       }
+
+
+       //set ra_id
+       psta->raid = raid;
+       psta->init_rate = init_rate;
+
+       //set correct initial date rate for each mac_id
+       pdmpriv->INIDATA_RATE[mac_id] = init_rate;
+}
+
+void SetBeaconRelatedRegisters8192CUsb(PADAPTER padapter)
+{
+       u32     value32;
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       //reset TSF, enable update TSF, correcting TSF On Beacon
+
+       //REG_BCN_INTERVAL
+       //REG_BCNDMATIM
+       //REG_ATIMWND
+       //REG_TBTT_PROHIBIT
+       //REG_DRVERLYINT
+       //REG_BCN_MAX_ERR
+       //REG_BCNTCFG //(0x510)
+       //REG_DUAL_TSF_RST
+       //REG_BCN_CTRL //(0x550)
+
+       //BCN interval
+       rtw_write16(padapter, REG_BCN_INTERVAL, pmlmeinfo->bcn_interval);
+       rtw_write8(padapter, REG_ATIMWND, 0x02);// 2ms
+
+       _InitBeaconParameters(padapter);
+
+       rtw_write8(padapter, REG_SLOT, 0x09);
+
+       value32 =rtw_read32(padapter, REG_TCR);
+       value32 &= ~TSFRST;
+       rtw_write32(padapter,  REG_TCR, value32);
+
+       value32 |= TSFRST;
+       rtw_write32(padapter, REG_TCR, value32);
+
+       // NOTE: Fix test chip's bug (about contention windows's randomness)
+       rtw_write8(padapter,  REG_RXTSF_OFFSET_CCK, 0x50);
+       rtw_write8(padapter, REG_RXTSF_OFFSET_OFDM, 0x50);
+
+       _BeaconFunctionEnable(padapter, _TRUE, _TRUE);
+
+       ResumeTxBeacon(padapter);
+
+       //rtw_write8(padapter, 0x422, rtw_read8(padapter, 0x422)|BIT(6));
+
+       //rtw_write8(padapter, 0x541, 0xff);
+
+       //rtw_write8(padapter, 0x542, rtw_read8(padapter, 0x541)|BIT(0));
+
+       rtw_write8(padapter, REG_BCN_CTRL, rtw_read8(padapter, REG_BCN_CTRL)|BIT(1));
+
+}
+
+static void rtl8192cu_init_default_value(_adapter * padapter)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
+       struct pwrctrl_priv *pwrctrlpriv = &padapter->pwrctrlpriv;
+       struct dm_priv  *pdmpriv = &pHalData->dmpriv;
+       u8      i;
+
+       //init default value
+       pHalData->fw_ractrl = _FALSE;
+       pHalData->bIQKInitialized = _FALSE;
+       if(!pwrctrlpriv->bkeepfwalive)
+               pHalData->LastHMEBoxNum = 0;
+
+       pHalData->bIQKInitialized = _FALSE;
+       //init dm default value
+       pdmpriv->TM_Trigger = 0;
+       pdmpriv->binitialized = _FALSE;
+       pdmpriv->prv_traffic_idx = 3;
+       pdmpriv->initialize = 0;
+
+       pdmpriv->ThermalValue_HP_index = 0;
+       for(i = 0; i < HP_THERMAL_NUM; i++)
+               pdmpriv->ThermalValue_HP[i] = 0;
+}
+
+static u8 rtl8192cu_ps_func(PADAPTER Adapter,HAL_INTF_PS_FUNC efunc_id, u8 *val)
+{
+       u8 bResult = _TRUE;
+       switch(efunc_id){
+
+               #if defined(CONFIG_AUTOSUSPEND) && defined(SUPPORT_HW_RFOFF_DETECTED)
+               case HAL_USB_SELECT_SUSPEND:
+                       {
+                               u8 bfwpoll = *(( u8*)val);
+                               rtl8192c_set_FwSelectSuspend_cmd(Adapter,bfwpoll ,500);//note fw to support hw power down ping detect
+                       }
+                       break;
+               #endif //CONFIG_AUTOSUSPEND && SUPPORT_HW_RFOFF_DETECTED
+
+               default:
+                       break;
+       }
+       return bResult;
+}
+
+void rtl8192cu_set_hal_ops(_adapter * padapter)
+{
+       struct hal_ops  *pHalFunc = &padapter->HalFunc;
+
+_func_enter_;
+
+       padapter->HalData = rtw_zmalloc(sizeof(HAL_DATA_TYPE));
+       if(padapter->HalData == NULL){
+               DBG_8192C("cant not alloc memory for HAL DATA \n");
+       }
+       //_rtw_memset(padapter->HalData, 0, sizeof(HAL_DATA_TYPE));
+       padapter->hal_data_sz = sizeof(HAL_DATA_TYPE);
+
+       pHalFunc->hal_init = &rtl8192cu_hal_init;
+       pHalFunc->hal_deinit = &rtl8192cu_hal_deinit;
+
+       //pHalFunc->free_hal_data = &rtl8192c_free_hal_data;
+
+       pHalFunc->inirp_init = &rtl8192cu_inirp_init;
+       pHalFunc->inirp_deinit = &rtl8192cu_inirp_deinit;
+
+       pHalFunc->init_xmit_priv = &rtl8192cu_init_xmit_priv;
+       pHalFunc->free_xmit_priv = &rtl8192cu_free_xmit_priv;
+
+       pHalFunc->init_recv_priv = &rtl8192cu_init_recv_priv;
+       pHalFunc->free_recv_priv = &rtl8192cu_free_recv_priv;
+#ifdef CONFIG_SW_LED
+       pHalFunc->InitSwLeds = &rtl8192cu_InitSwLeds;
+       pHalFunc->DeInitSwLeds = &rtl8192cu_DeInitSwLeds;
+#else //case of hw led or no led
+       pHalFunc->InitSwLeds = NULL;
+       pHalFunc->DeInitSwLeds = NULL;
+#endif//CONFIG_SW_LED
+
+       //pHalFunc->dm_init = &rtl8192c_init_dm_priv;
+       //pHalFunc->dm_deinit = &rtl8192c_deinit_dm_priv;
+
+       pHalFunc->init_default_value = &rtl8192cu_init_default_value;
+       pHalFunc->intf_chip_configure = &rtl8192cu_interface_configure;
+       pHalFunc->read_adapter_info = &ReadAdapterInfo8192CU;
+
+       //pHalFunc->set_bwmode_handler = &PHY_SetBWMode8192C;
+       //pHalFunc->set_channel_handler = &PHY_SwChnl8192C;
+
+       //pHalFunc->hal_dm_watchdog = &rtl8192c_HalDmWatchDog;
+
+       pHalFunc->SetHwRegHandler = &SetHwReg8192CU;
+       pHalFunc->GetHwRegHandler = &GetHwReg8192CU;
+       pHalFunc->GetHalDefVarHandler = &GetHalDefVar8192CUsb;
+       pHalFunc->SetHalDefVarHandler = &SetHalDefVar8192CUsb;
+
+       pHalFunc->UpdateRAMaskHandler = &UpdateHalRAMask8192CUsb;
+       pHalFunc->SetBeaconRelatedRegistersHandler = &SetBeaconRelatedRegisters8192CUsb;
+
+       //pHalFunc->Add_RateATid = &rtl8192c_Add_RateATid;
+
+//#ifdef CONFIG_SW_ANTENNA_DIVERSITY
+       //pHalFunc->AntDivBeforeLinkHandler = &SwAntDivBeforeLink8192C;
+       //pHalFunc->AntDivCompareHandler = &SwAntDivCompare8192C;
+//#endif
+
+       pHalFunc->hal_xmit = &rtl8192cu_hal_xmit;
+       pHalFunc->mgnt_xmit = &rtl8192cu_mgnt_xmit;
+       pHalFunc->hal_xmitframe_enqueue = &rtl8192cu_hal_xmitframe_enqueue;
+
+       //pHalFunc->read_bbreg = &rtl8192c_PHY_QueryBBReg;
+       //pHalFunc->write_bbreg = &rtl8192c_PHY_SetBBReg;
+       //pHalFunc->read_rfreg = &rtl8192c_PHY_QueryRFReg;
+       //pHalFunc->write_rfreg = &rtl8192c_PHY_SetRFReg;
+
+#ifdef CONFIG_HOSTAPD_MLME
+       pHalFunc->hostap_mgnt_xmit_entry = &rtl8192cu_hostap_mgnt_xmit_entry;
+#endif
+       pHalFunc->interface_ps_func = &rtl8192cu_ps_func;
+
+       rtl8192c_set_hal_ops(pHalFunc);
+_func_exit_;
+
+}
diff --git a/drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/usb/usb_ops_ce.c b/drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/usb/usb_ops_ce.c
new file mode 100644 (file)
index 0000000..26148fc
--- /dev/null
@@ -0,0 +1,1205 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#define _HCI_OPS_OS_C_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <osdep_intf.h>
+
+#ifndef PLATFORM_OS_CE
+    #error "PLATFORM_OS_CE shall be set \n"
+#endif
+
+#ifndef CONFIG_USB_HCI
+       #error "CONFIG_USB_HCI shall be on!\n"
+#endif
+
+#include <usb_ops.h>
+#include <recv_osdep.h>
+
+#include <circ_buf.h>
+
+
+struct zero_bulkout_context
+{
+       void *pbuf;
+       void *purb;
+       void *pirp;
+       void *padapter;
+};
+
+
+
+#define PUSB_ERROR LPDWORD
+#define USBD_HALTED(Status) ((ULONG)(Status) >> 30 == 3)
+
+
+USB_PIPE ffaddr2pipehdl(struct dvobj_priv *pNdisCEDvice, u32 addr);
+
+
+static NTSTATUS usb_async_interrupt_in_complete( LPVOID Context );
+static NTSTATUS usb_async_interrupt_out_complete( LPVOID Context );
+
+DWORD usb_write_port_complete( LPVOID Context );
+DWORD usb_read_port_complete( LPVOID Context );
+
+void usb_read_mem(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *rmem)
+{
+_func_enter_;
+       RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("%s(%u)\n",__FUNCTION__, __LINE__));
+_func_exit_;
+}
+
+
+
+BOOL
+CloseTransferHandle(
+    LPCUSB_FUNCS   pUsbFuncs,
+    USB_TRANSFER   hTransfer
+    )
+{
+    BOOL bRc = TRUE;
+
+    // This assert may fail on suprise remove,
+    // but should pass during normal I/O.
+    // ASSERT( pUsbFuncs->lpIsTransferComplete(hTransfer) );
+
+    // CloseTransfer aborts any pending transfers
+    if ( !pUsbFuncs->lpCloseTransfer(hTransfer) ) {
+
+       RT_TRACE( _module_hci_ops_os_c_, _drv_err_, ("*** CloseTransfer ERROR:%d ***\n", GetLastError()));
+        bRc = FALSE;
+    }
+
+    return bRc;
+}
+
+
+BOOL
+GetTransferStatus(
+    LPCUSB_FUNCS   pUsbFuncs,
+    USB_TRANSFER   hTransfer,
+    LPDWORD        pBytesTransferred , // OPTIONAL returns number of bytes transferred
+    PUSB_ERROR     pUsbError    // returns USB error code
+    )
+{
+
+    BOOL bRc = TRUE;
+
+    if ( pUsbFuncs->lpGetTransferStatus(hTransfer, pBytesTransferred, pUsbError) ) {
+        if ( USB_NO_ERROR != *pUsbError ) {
+               RT_TRACE( _module_hci_ops_os_c_, _drv_err_, ("*** CloseTransfer ERROR:%d ***\n", GetLastError()));
+            RT_TRACE( _module_hci_ops_os_c_, _drv_err_, ("GetTransferStatus (BytesTransferred:%d, UsbError:0x%x)\n", pBytesTransferred?*pBytesTransferred:-1, pUsbError?*pUsbError:-1 ));
+        }
+    } else {
+        RT_TRACE( _module_hci_ops_os_c_, _drv_err_,("*** GetTransferStatus ERROR:%d ***\n", GetLastError()));
+        *pUsbError = USB_CANCELED_ERROR;
+        bRc = FALSE;
+    }
+
+    return bRc;
+}
+
+
+// The driver should never read RxCmd register. We have to set
+// RCR CMDHAT0 (bit6) to append Rx status before the Rx frame.
+//
+// |<--------  pBulkUrb->TransferBufferLength  ------------>|
+// +------------------+-------------------+------------+
+//  | Rx status (16 bytes)  | Rx frame .....             | CRC(4 bytes) |
+// +------------------+-------------------+------------+
+// ^
+// ^pRfd->Buffer.VirtualAddress
+//
+/*! \brief USB RX IRP Complete Routine.
+       @param Context pointer of RT_RFD
+*/
+u32 usb_read_port(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *rmem)
+{
+    struct intf_priv   *pintfpriv              = pintfhdl->pintfpriv;
+    struct dvobj_priv  *pdvobj_priv    = (struct dvobj_priv*)pintfpriv->intf_dev;
+    _adapter                   *adapter                = (_adapter *)pdvobj_priv->padapter;
+
+       struct recv_priv        *precvpriv      = &adapter->recvpriv;
+
+       struct recv_buf         *precvbuf       = (struct recv_buf *)rmem;
+       DWORD dwErr = ERROR_SUCCESS ;
+       DWORD dwBytesTransferred = 0 ;
+       USB_TRANSFER hTransfer = NULL;
+       USB_PIPE        hPipe;
+       LPCUSB_FUNCS usb_funcs_vp = pdvobj_priv->usb_extension._lpUsbFuncs;
+
+_func_enter_;
+       RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("usb_read_port(%u)\n", __LINE__));
+
+#if (CONFIG_PWRCTRL == 1)
+    if (adapter->pwrctrlpriv.pnp_bstop_trx)
+       {
+        return _FALSE;
+    }
+#endif
+
+       if(adapter->bDriverStopped || adapter->bSurpriseRemoved)
+       {
+               RT_TRACE(_module_hci_ops_os_c_, _drv_info_,("usb_read_port:( padapter->bDriverStopped ||padapter->bSurpriseRemoved)!!!\n"));
+               return _FALSE;
+       }
+
+       if(precvbuf !=NULL)
+       {
+
+               // get a recv buffer
+               rtl8192cu_init_recvbuf(adapter, precvbuf);
+
+
+
+               _rtw_spinlock(&precvpriv->lock);
+               precvpriv->rx_pending_cnt++;
+               precvbuf->irp_pending = _TRUE;
+               _rtw_spinunlock(&precvpriv->lock);
+
+
+               //translate DMA FIFO addr to pipehandle
+               hPipe = ffaddr2pipehdl(pdvobj_priv, addr);
+
+
+               RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("usb_read_port(%u)\n", __LINE__));
+
+               precvbuf->usb_transfer_read_port = (*usb_funcs_vp->lpIssueBulkTransfer)(
+                       hPipe,
+                       usb_read_port_complete,
+                       precvbuf,
+                       USB_IN_TRANSFER|USB_SHORT_TRANSFER_OK,
+                       MAX_RECVBUF_SZ,
+                       precvbuf->pbuf,
+                       0);
+
+
+               if(precvbuf->usb_transfer_read_port)
+               {
+
+               //        GetTransferStatus(usb_funcs_vp, hTransfer, &dwBytesTransferred,&UsbRc);
+
+               //        CloseTransferHandle(usb_funcs_vp, hTransfer);
+
+               }
+               else
+               {
+
+                       dwErr = GetLastError();
+                       //RT_TRACE( _module_hci_ops_os_c_, _drv_err_, ("usb_read_port ERROR : %d\n", dwErr));
+
+               }
+
+//             if (  USB_NO_ERROR != UsbRc && ERROR_SUCCESS == dwErr) {
+//             dwErr = ERROR_GEN_FAILURE;
+//         }
+
+
+               if ( ERROR_SUCCESS != dwErr ) {
+
+                       SetLastError(dwErr);
+                       RT_TRACE( _module_hci_ops_os_c_, _drv_err_, ("usb_read_port ERROR : %d\n", dwErr));
+               }
+
+               RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("-usb_read_port(%u)\n", __LINE__));
+
+       }
+       else // if(precvbuf !=NULL)
+       {
+
+               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port:precv_frame ==NULL\n"));
+       }
+
+       return _TRUE;
+
+}
+
+DWORD usb_read_port_complete( PVOID context )
+{
+       struct recv_buf         *precvbuf       = (struct recv_buf *)context;
+       _adapter                        *adapter        = (_adapter *)precvbuf->adapter;
+       struct recv_priv        *precvpriv      = &adapter->recvpriv;
+
+
+       struct intf_hdl         *pintfhdl = &adapter->pio_queue->intf;
+    struct intf_priv   *pintfpriv    = pintfhdl->pintfpriv;
+    struct dvobj_priv  *pdvobj_priv  = (struct dvobj_priv*)pintfpriv->intf_dev;
+
+
+       LPCUSB_FUNCS usb_funcs_vp = pdvobj_priv->usb_extension._lpUsbFuncs;
+
+    DWORD dwBytesTransferred    = 0;
+    DWORD dwErr                 = USB_CANCELED_ERROR;
+
+       uint isevt, *pbuf;
+       int fComplete =_FALSE;
+
+
+       RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("usb_read_port_complete(%u)\n", __LINE__));
+
+_func_enter_;
+
+
+       _rtw_spinlock_ex(&precvpriv->lock);
+       precvbuf->irp_pending=_FALSE;
+       precvpriv->rx_pending_cnt --;
+       _rtw_spinunlock_ex(&precvpriv->lock);
+
+
+#if 1
+
+       (*usb_funcs_vp->lpGetTransferStatus)(precvbuf->usb_transfer_read_port, &dwBytesTransferred, &dwErr);
+       fComplete = (*usb_funcs_vp->lpIsTransferComplete)(precvbuf->usb_transfer_read_port);
+       if(fComplete!=_TRUE)
+       {
+               RT_TRACE( _module_hci_ops_os_c_, _drv_err_, ("usb_read_port_complete CloseTransfer before complete\n"));
+       }
+       (*usb_funcs_vp->lpCloseTransfer)(precvbuf->usb_transfer_read_port);
+
+
+#endif
+
+
+       if(USB_NO_ERROR != dwErr)
+               RT_TRACE( _module_hci_ops_os_c_, _drv_err_, ("usb_read_port_complete Fail :%d\n",dwErr));
+
+       {
+
+               if ( dwBytesTransferred > MAX_RECVBUF_SZ || dwBytesTransferred < RXDESC_SIZE )
+               {
+                       RT_TRACE(_module_hci_ops_os_c_,_drv_err_,
+                               ("\n usb_read_port_complete: (pbulkurb->TransferBufferLength > MAX_RECVBUF_SZ) || (pbulkurb->TransferBufferLength < RXDESC_SIZE): %d\n",dwBytesTransferred));
+                       rtw_read_port(adapter, precvpriv->ff_hwaddr, 0, (unsigned char *)precvbuf);
+
+           //usb_read_port(pintfhdl, 0, 0, (unsigned char *)precvframe);
+       }
+               else
+               {
+                       precvbuf->transfer_len = dwBytesTransferred;
+
+                       pbuf = (uint*)precvbuf->pbuf;
+
+                       if((isevt = *(pbuf+1)&0x1ff) == 0x1ff)
+                       {
+                               RT_TRACE(_module_hci_ops_os_c_,_drv_info_,
+                                       ("\n usb_read_port_complete: get a event\n"));
+                               rxcmd_event_hdl(adapter, pbuf);//rx c2h events
+
+                               rtw_read_port(adapter, precvpriv->ff_hwaddr, 0, (unsigned char *)precvbuf);
+                       }
+                       else
+                       {
+                               if(recvbuf2recvframe(adapter, precvbuf)==_FAIL)//rx packets
+                               {
+                                       //precvbuf->reuse = _TRUE;
+                                       rtw_read_port(adapter, precvpriv->ff_hwaddr, 0, (unsigned char *)precvbuf);
+                               }
+                       }
+           }
+       }
+
+       RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("-usb_read_port_complete(%u)\n", __LINE__));
+
+_func_exit_;
+       return ERROR_SUCCESS;
+//     return STATUS_MORE_PROCESSING_REQUIRED;
+}
+
+void usb_read_port_cancel(_adapter *padapter){
+       RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("usb_read_port_cancel(%u)\n",__FUNCTION__, __LINE__));
+}
+
+DWORD usb_write_mem_complete( LPVOID Context )
+{
+       int fComplete =_FALSE;
+       DWORD   dwBytes         = 0;
+       DWORD   dwErr           = USB_CANCELED_ERROR;
+
+       _irqL irqL;
+       _list   *head;
+       _list *plist;
+       struct io_req   *pio_req;
+       struct io_queue *pio_q = (struct io_queue *) Context;
+       struct intf_hdl *pintf = &(pio_q->intf);
+       struct intf_priv *pintfpriv = pintf->pintfpriv;
+       _adapter *padapter = (_adapter *)pintf->adapter;
+       NTSTATUS status = STATUS_SUCCESS;
+    struct xmit_priv * pxmitpriv       = &padapter->xmitpriv;
+
+       struct dvobj_priv * pdvobj_priv = (struct dvobj_priv*)pintfpriv->intf_dev;
+
+    USB_HANDLE         usbHandle               = pdvobj_priv->usb_extension._hDevice;
+    LPCUSB_FUNCS       usb_funcs_vp    = pdvobj_priv->usb_extension._lpUsbFuncs;
+
+       // get the head from the processing io_queue
+       head = &(pio_q->processing);
+
+_func_enter_;
+       RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("+usb_write_mem_complete %p\n", Context));
+
+#if 1
+       _enter_critical_bh(&(pio_q->lock), &irqL);
+
+
+       //free irp in processing list...
+       while(rtw_is_list_empty(head) != _TRUE)
+       {
+               plist = get_next(head);
+               rtw_list_delete(plist);
+               pio_req = LIST_CONTAINOR(plist, struct io_req, list);
+               _rtw_up_sema(&pio_req->sema);
+       }
+
+       _exit_critical_bh(&(pio_q->lock), &irqL);
+#endif
+
+
+#if 1
+
+       (*usb_funcs_vp->lpGetTransferStatus)(pio_req->usb_transfer_write_mem , &dwBytes, &dwErr);
+       fComplete = (*usb_funcs_vp->lpIsTransferComplete)(pio_req->usb_transfer_write_mem);
+       if(fComplete!=_TRUE)
+       {
+               RT_TRACE( _module_hci_ops_os_c_, _drv_err_, ("usb_write_mem_complete CloseTransfer before complete\n"));
+       }
+       (*usb_funcs_vp->lpCloseTransfer)(pio_req->usb_transfer_write_mem );
+
+#endif
+
+       RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("-usb_write_mem_complete\n"));
+
+_func_exit_;
+
+
+       return STATUS_MORE_PROCESSING_REQUIRED;
+
+}
+
+
+void usb_write_mem(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *wmem)
+{
+
+       NTSTATUS NtStatus = STATUS_SUCCESS;
+    USB_PIPE   hPipe;
+       _irqL   irqL;
+
+       int     fComplete       = _FALSE;
+       DWORD   dwBytes         = 0;
+       DWORD   dwErr           = USB_CANCELED_ERROR;
+
+
+       struct io_req           *pio_req;
+
+       _adapter                        *adapter        = (_adapter *)pintfhdl->adapter;
+       struct intf_priv        *pintfpriv      = pintfhdl->pintfpriv;
+       struct dvobj_priv   * pdvobj_priv   = (struct dvobj_priv*)pintfpriv->intf_dev;
+
+
+    struct xmit_priv   *pxmitpriv      = &adapter->xmitpriv;
+       struct io_queue         *pio_queue      = (struct io_queue *)adapter->pio_queue;
+
+       LPCUSB_FUNCS usb_funcs_vp = pdvobj_priv->usb_extension._lpUsbFuncs;
+
+
+_func_enter_;
+       RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("usb_write_mem(%u) pintfhdl %p wmem %p\n", __LINE__, pintfhdl, wmem));
+
+       // fetch a io_request from the io_queue
+       pio_req = alloc_ioreq(pio_queue);
+
+       if ((pio_req == NULL)||(adapter->bSurpriseRemoved))
+       {
+               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("async_irp_write32 : pio_req =0x%x adapter->bSurpriseRemoved=0x%x",pio_req,adapter->bSurpriseRemoved ));
+               goto exit;
+       }
+
+       _enter_critical_bh(&(pio_queue->lock), &irqL);
+
+
+       // insert the io_request into processing io_queue
+       rtw_list_insert_tail(&(pio_req->list),&(pio_queue->processing));
+
+
+       if((adapter->bDriverStopped) || (adapter->bSurpriseRemoved) ||(adapter->pwrctrlpriv.pnp_bstop_trx))
+       {
+               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("\npadapter->pwrctrlpriv.pnp_bstop_trx==_TRUE\n"));
+               goto exit;
+       }
+
+       //translate DMA FIFO addr to pipehandle
+       hPipe = ffaddr2pipehdl(pdvobj_priv, addr);
+
+       RT_TRACE( _module_hci_ops_os_c_, _drv_info_,("usb_write_mem(%u)\n",__LINE__));
+
+       pio_req->usb_transfer_write_mem = (*usb_funcs_vp->lpIssueBulkTransfer)(
+               hPipe,
+               usb_write_mem_complete,
+               pio_queue,
+               USB_OUT_TRANSFER,
+               cnt,
+               wmem,
+               0);
+
+#if 0
+
+       (*usb_funcs_vp->lpGetTransferStatus)(pio_req->usb_transfer_write_mem , &dwBytes, &dwErr);
+
+       while( fComplete != _TRUE)
+       {
+               fComplete = (*usb_funcs_vp->lpIsTransferComplete)(pio_req->usb_transfer_write_mem);
+               if(fComplete==_TRUE)
+               {
+                       (*usb_funcs_vp->lpCloseTransfer)(pio_req->usb_transfer_write_mem );
+                       RT_TRACE( _module_hci_ops_os_c_, _drv_err_, ("usb_write_mem finished\n"));
+                       break;
+               }
+               else
+               {
+                       RT_TRACE( _module_hci_ops_os_c_, _drv_err_,
+                               ("usb_write_mem not yet finished %X\n",
+                               pio_req->usb_transfer_write_mem));
+                       rtw_msleep_os(10);
+               }
+
+       }
+
+#endif
+
+
+//     _rtw_down_sema(&pio_req->sema);
+
+       RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("-usb_write_mem(%X)\n",pio_req->usb_transfer_write_mem));
+
+       _exit_critical_bh(&(pio_queue->lock), &irqL);
+
+       _rtw_down_sema(&pio_req->sema);
+       free_ioreq(pio_req, pio_queue);
+
+exit:
+_func_exit_;
+       return;
+}
+
+u32 usb_write_cnt=0;
+u32 usb_complete_cnt=0;
+
+USB_PIPE ffaddr2pipehdl(struct dvobj_priv *pNdisCEDvice, u32 addr)
+{
+       USB_PIPE        PipeHandle = NULL;
+       _adapter        *padapter = pNdisCEDvice->padapter;
+
+
+       if(pNdisCEDvice->nr_endpoint == 11)
+       {
+               switch(addr)
+               {
+                       case RTL8712_DMA_BEQ:
+                               PipeHandle= padapter->halpriv.pipehdls_r8712[3] ;
+                               break;
+                       case RTL8712_DMA_BKQ:
+                               PipeHandle=  padapter->halpriv.pipehdls_r8712[4];
+                               break;
+                       case RTL8712_DMA_VIQ:
+                               PipeHandle=  padapter->halpriv.pipehdls_r8712[2];
+                               break;
+                       case RTL8712_DMA_VOQ:
+                               PipeHandle=  padapter->halpriv.pipehdls_r8712[1];
+                               break;
+                     case RTL8712_DMA_BCNQ:
+                               PipeHandle=  padapter->halpriv.pipehdls_r8712[6];
+                               break;
+                       case RTL8712_DMA_BMCQ:  //HI Queue
+                               PipeHandle=  padapter->halpriv.pipehdls_r8712[7];
+                               break;
+                       case RTL8712_DMA_MGTQ:
+                               PipeHandle=  padapter->halpriv.pipehdls_r8712[8];
+                               break;
+                     case RTL8712_DMA_RX0FF:
+                               PipeHandle=  padapter->halpriv.pipehdls_r8712[0];
+                               break;
+                       case RTL8712_DMA_C2HCMD:
+                               PipeHandle=  padapter->halpriv.pipehdls_r8712[5];
+                               break;
+                       case RTL8712_DMA_H2CCMD:
+                               PipeHandle=  padapter->halpriv.pipehdls_r8712[9];
+                               break;
+
+               }
+
+       }
+       else if(pNdisCEDvice->nr_endpoint == 6)
+       {
+               switch(addr)
+               {
+                       case RTL8712_DMA_BEQ:
+                               PipeHandle=  padapter->halpriv.pipehdls_r8712[3];
+                               break;
+               case RTL8712_DMA_BKQ:
+                               PipeHandle=  padapter->halpriv.pipehdls_r8712[4];
+                               break;
+               case RTL8712_DMA_VIQ:
+                               PipeHandle=  padapter->halpriv.pipehdls_r8712[2];
+                               break;
+               case RTL8712_DMA_VOQ:
+                               PipeHandle=  padapter->halpriv.pipehdls_r8712[1];
+                               break;
+                       case RTL8712_DMA_RX0FF:
+                       case RTL8712_DMA_C2HCMD:
+                               PipeHandle=  padapter->halpriv.pipehdls_r8712[0];
+                               break;
+                       case RTL8712_DMA_H2CCMD:
+                       case RTL8712_DMA_BCNQ:
+                       case RTL8712_DMA_BMCQ:
+                       case RTL8712_DMA_MGTQ:
+                               PipeHandle=  padapter->halpriv.pipehdls_r8712[5];
+                               break;
+
+               }
+
+       }
+       else if(pNdisCEDvice->nr_endpoint == 4)
+       {
+               switch(addr)
+               {
+               case RTL8712_DMA_BEQ:
+                       case RTL8712_DMA_BKQ:
+                               PipeHandle=  padapter->halpriv.pipehdls_r8712[2];
+                               break;
+               case RTL8712_DMA_VIQ:
+                       case RTL8712_DMA_VOQ:
+                               PipeHandle=  padapter->halpriv.pipehdls_r8712[1];
+                               break;
+                       case RTL8712_DMA_RX0FF:
+                       case RTL8712_DMA_C2HCMD:
+                               PipeHandle=  padapter->halpriv.pipehdls_r8712[0];
+                               break;
+                       case RTL8712_DMA_H2CCMD:
+                       case RTL8712_DMA_BCNQ:
+                       case RTL8712_DMA_BMCQ:
+                       case RTL8712_DMA_MGTQ:
+                               PipeHandle=  padapter->halpriv.pipehdls_r8712[3];
+                               break;
+               }
+
+       }
+       else
+       {
+          RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("ffaddr2pipehdl():nr_endpoint=%d error!\n", pNdisCEDvice->nr_endpoint));
+       }
+
+       return PipeHandle;
+
+}
+
+DWORD usb_bulkout_zero_complete( LPVOID pZeroContext )
+{
+       struct zero_bulkout_context *pcontext = (struct zero_bulkout_context *)pZeroContext;
+       _adapter * padapter = pcontext->padapter;
+    struct dvobj_priv *        pdvobj_priv = (struct dvobj_priv *)&padapter->dvobjpriv;
+       LPCUSB_FUNCS usb_funcs_vp = pdvobj_priv->usb_extension._lpUsbFuncs;
+       struct xmit_priv  * pxmitpriv   = &padapter->xmitpriv;
+
+       int     fComplete                       =_FALSE;
+       DWORD   dwBytesTransferred      = 0;
+       DWORD   dwErr                           = USB_CANCELED_ERROR;
+
+_func_enter_;
+
+#if 1
+
+       (*usb_funcs_vp->lpGetTransferStatus)(pxmitpriv->usb_transfer_write_port, &dwBytesTransferred, &dwErr);
+       fComplete = (*usb_funcs_vp->lpIsTransferComplete)(pxmitpriv->usb_transfer_write_port);
+       if(fComplete!=_TRUE)
+       {
+               RT_TRACE( _module_hci_ops_os_c_, _drv_err_, ("usb_bulkout_zero_complete CloseTransfer before complete\n"));
+       }
+       (*usb_funcs_vp->lpCloseTransfer)(pxmitpriv->usb_transfer_write_port);
+
+#endif
+
+       if(pcontext)
+       {
+               if(pcontext->pbuf)
+               {
+                       rtw_mfree(pcontext->pbuf, sizeof(int));
+               }
+
+               rtw_mfree((u8*)pcontext, sizeof(struct zero_bulkout_context));
+       }
+
+_func_exit_;
+
+       return ERROR_SUCCESS;
+
+
+}
+
+u32 usb_bulkout_zero(struct intf_hdl *pintfhdl, u32 addr)
+{
+       struct zero_bulkout_context *pcontext;
+       unsigned char *pbuf;
+       u8 len = 0 ;
+       _adapter *padapter = (_adapter *)pintfhdl->adapter;
+       struct dvobj_priv       *pdvobj = (struct dvobj_priv *)&padapter->dvobjpriv;
+       struct xmit_priv        * pxmitpriv     = &padapter->xmitpriv;
+
+
+       LPCUSB_FUNCS usb_funcs_vp = pdvobj->usb_extension._lpUsbFuncs;
+
+       USB_PIPE        hPipe;
+
+_func_enter_;
+
+       if((padapter->bDriverStopped) || (padapter->bSurpriseRemoved) ||(padapter->pwrctrlpriv.pnp_bstop_trx))
+       {
+               return _FAIL;
+       }
+
+
+       pcontext = (struct zero_bulkout_context *)rtw_zmalloc(sizeof(struct zero_bulkout_context));
+
+       pbuf = (unsigned char *)rtw_zmalloc(sizeof(int));
+
+       len = 0;
+
+       pcontext->pbuf = pbuf;
+       pcontext->purb = NULL;
+       pcontext->pirp = NULL;
+       pcontext->padapter = padapter;
+
+
+//translate DMA FIFO addr to pipehandle
+       hPipe = ffaddr2pipehdl(pdvobj, addr);
+
+
+
+
+       pxmitpriv->usb_transfer_write_port = (*usb_funcs_vp->lpIssueBulkTransfer)(
+                                                       hPipe, usb_bulkout_zero_complete,
+                                                       pcontext, USB_OUT_TRANSFER,
+                                                   len, pbuf, 0);
+
+
+_func_exit_;
+
+       return _SUCCESS;
+
+}
+
+u32 usb_write_port(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *wmem)
+{
+
+    u32        i, bwritezero = _FALSE;
+       u32     ac_tag = addr;
+
+    u8*        ptr;
+
+       struct intf_priv    * pintfpriv     = pintfhdl->pintfpriv;
+       struct dvobj_priv   * pdvobj_priv   = (struct dvobj_priv*)pintfpriv->intf_dev;
+       _adapter            * padapter      = pdvobj_priv->padapter;
+
+    struct xmit_priv   * pxmitpriv     = &padapter->xmitpriv;
+    struct xmit_frame   * pxmitframe    = (struct xmit_frame *)wmem;
+
+       LPCUSB_FUNCS usb_funcs_vp = pdvobj_priv->usb_extension._lpUsbFuncs;
+
+    USB_PIPE   hPipe;
+
+       u32                     bResult = _FALSE;
+
+_func_enter_;
+       RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("+usb_write_port\n"));
+
+#if (CONFIG_PWRCTRL == 1)
+    if(padapter->pwrctrlpriv.pnp_bstop_trx==_TRUE){
+       RT_TRACE( _module_hci_ops_os_c_, _drv_err_, ("\npadapter->pwrctrlpriv.pnp_bstop_trx==_TRUE\n"));
+
+    }
+#endif
+
+       if((padapter->bDriverStopped) || (padapter->bSurpriseRemoved) ||(padapter->pwrctrlpriv.pnp_bstop_trx))
+       {
+               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port:( padapter->bDriverStopped ||padapter->bSurpriseRemoved ||adapter->pwrctrlpriv.pnp_bstop_trx)!!!\n"));
+               bResult = _FALSE;
+               goto exit;
+       }
+
+       RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("usb_write_port(%u)\n", __LINE__));
+
+       for(i=0; i<8; i++)
+       {
+               if(pxmitframe->bpending[i] == _FALSE)
+               {
+                       _rtw_spinlock(&pxmitpriv->lock);
+                       pxmitpriv->txirp_cnt++;
+                       pxmitframe->bpending[i]  = _TRUE;
+                       _rtw_spinunlock(&pxmitpriv->lock);
+
+                       pxmitframe->sz[i] = cnt;
+                       pxmitframe->ac_tag[i] = ac_tag;
+
+                       break;
+               }
+       }
+
+
+       //TODO:
+       if (pdvobj_priv->ishighspeed)
+       {
+               if(cnt> 0 && cnt%512 == 0)
+               {
+                       RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("ishighspeed, cnt=%d\n", cnt));
+               //      cnt=cnt+1;
+                       bwritezero = _TRUE;
+
+               }
+       }
+       else
+       {
+               if(cnt > 0 && cnt%64 == 0)
+               {
+                       RT_TRACE(_module_hci_ops_os_c_,_drv_info_,("cnt=%d\n", cnt));
+               //      cnt=cnt+1;
+                       bwritezero = _TRUE;
+
+               }
+       }
+
+       RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("usb_write_port: pipe handle convert\n"));
+
+       //translate DMA FIFO addr to pipehandle
+       hPipe = ffaddr2pipehdl(pdvobj_priv, addr);
+
+
+#if 0
+       // for tx fifo, the maximum payload number is 8,
+       // we workaround this issue here by separate whole fifo into 8 segments.
+       if (cnt <= 500)
+               cnt = 500;
+#endif
+
+       RT_TRACE( _module_hci_ops_os_c_, _drv_info_,
+               ("usb_write_port(%u): pxmitframe %X  pxmitframe->padapter %X\n",__LINE__, pxmitframe, pxmitframe->padapter));
+
+       pxmitpriv->usb_transfer_write_port = (*usb_funcs_vp->lpIssueBulkTransfer)(
+                                                       hPipe, usb_write_port_complete,
+                                                       pxmitframe, USB_OUT_TRANSFER,
+                                                   cnt, pxmitframe->mem_addr, 0);
+
+       RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("%s(%u)\n",__FUNCTION__, __LINE__));
+
+       ptr=(u8 *)&pxmitframe->mem;
+
+#if 0
+       if (pdvobj_priv->ishighspeed)
+       {
+               ptr=ptr+512;
+       }
+       else
+       {
+               ptr=ptr+64;
+
+       }
+#endif
+       if(bwritezero == _TRUE)
+       {
+               usb_bulkout_zero(pintfhdl, addr);
+       }
+
+//     if (!pxmitframe->usb_transfer_xmit)
+//         padapter->bSurpriseRemoved=_TRUE;
+
+       RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("%s(%u)\n",__FUNCTION__, __LINE__));
+       bResult = _SUCCESS;
+
+exit:
+_func_exit_;
+       return bResult;
+}
+
+DWORD usb_write_port_complete( LPVOID Context )
+{
+
+//    u8 *ptr;
+
+    struct xmit_frame *        pxmitframe  = (struct xmit_frame *) Context;
+    _adapter          * padapter    = pxmitframe->padapter;
+    struct dvobj_priv *        pdvobj_priv = (struct dvobj_priv *)&padapter->dvobjpriv;
+       struct xmit_priv  * pxmitpriv   = &padapter->xmitpriv;
+       struct xmit_buf *pxmitbuf = pxmitframe->pxmitbuf;
+       LPCUSB_FUNCS usb_funcs_vp = pdvobj_priv->usb_extension._lpUsbFuncs;
+
+       int             fComplete                       =_FALSE;
+       DWORD   dwBytesTransferred      = 0;
+       DWORD   dwErr                           = USB_CANCELED_ERROR;
+
+       RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("%s(%u), pxmitframe %X\n",__FUNCTION__, __LINE__, Context));
+
+_func_enter_;
+
+       RT_TRACE(_module_hci_ops_os_c_,_drv_info_,("+usb_write_port_complete\n"));
+
+       _rtw_spinlock_ex(&pxmitpriv->lock);
+       pxmitpriv->txirp_cnt--;
+       _rtw_spinunlock_ex(&pxmitpriv->lock);
+
+       if(pxmitpriv->txirp_cnt==0){
+               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port_complete: txirp_cnt== 0, set allrxreturnevt!\n"));
+               _rtw_up_sema(&(pxmitpriv->tx_retevt));
+       }
+
+
+       //not to consider tx fragment
+       rtw_free_xmitframe(pxmitpriv, pxmitframe);
+
+
+#if 1
+
+       (*usb_funcs_vp->lpGetTransferStatus)(pxmitpriv->usb_transfer_write_port, &dwBytesTransferred, &dwErr);
+       fComplete = (*usb_funcs_vp->lpIsTransferComplete)(pxmitpriv->usb_transfer_write_port);
+       if(fComplete!=_TRUE)
+       {
+               RT_TRACE( _module_hci_ops_os_c_, _drv_err_, ("usb_write_port_complete CloseTransfer before complete\n"));
+       }
+       (*usb_funcs_vp->lpCloseTransfer)(pxmitpriv->usb_transfer_write_port);
+
+#else
+
+       if((*usb_funcs_vp->lpIsTransferComplete)(pxmitpriv->usb_transfer_write_port))
+       {
+               (*usb_funcs_vp->lpCloseTransfer)(pxmitpriv->usb_transfer_write_port);
+       }
+
+#endif
+
+       RT_TRACE( _module_hci_ops_os_c_, _drv_info_,
+               ("%s(%u): pxmitpriv %X pxmitpriv->free_xmitframe_cnt %X pxmitframe->padapter %X pxmitframe->padapter %X\n",
+               __LINE__, pxmitpriv, pxmitpriv->free_xmitframe_cnt, pxmitframe->padapter));
+
+    rtl8192cu_xmitframe_complete(padapter, pxmitpriv, pxmitbuf);
+
+_func_exit_;
+
+    return STATUS_SUCCESS;
+}
+
+DWORD usb_write_scsi_complete(LPVOID pTxContext)
+{
+#ifndef PLATFORM_OS_CE
+       struct SCSI_BUFFER_ENTRY *psb_entry = (struct SCSI_BUFFER_ENTRY *)pTxContext;
+       _adapter                                 *padapter      = psb_entry->padapter;
+       struct SCSI_BUFFER               *psb           = padapter->pscsi_buf;
+       struct xmit_priv                 *pxmitpriv = &(padapter->xmitpriv);
+    struct dvobj_priv          *pdvobj_priv = (struct dvobj_priv *)&padapter->dvobjpriv;
+       LPCUSB_FUNCS                     lpUsbFuncs = pdvobj_priv->pUsbExtension->_lpUsbFuncs;
+
+       int     fComplete                       =_FALSE;
+       DWORD   dwBytesTransferred      = 0;
+       DWORD   dwErr                           = USB_CANCELED_ERROR;
+
+_func_enter_;
+       RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("%s(%u): circ_space = %d\n",__FUNCTION__, __LINE__, CIRC_SPACE( psb->head,psb->tail,  SCSI_BUFFER_NUMBER)));
+
+#if 1
+
+       (*lpUsbFuncs->lpGetTransferStatus)(psb_entry->usb_transfer_scsi_txcmd, &dwBytesTransferred, &dwErr);
+       fComplete = (*lpUsbFuncs->lpIsTransferComplete)(psb_entry->usb_transfer_scsi_txcmd);
+       if(fComplete!=_TRUE)
+       {
+               RT_TRACE( _module_hci_ops_os_c_, _drv_err_, ("usb_write_scsi_complete CloseTransfer before complete\n"));
+       }
+       (*lpUsbFuncs->lpCloseTransfer)(psb_entry->usb_transfer_scsi_txcmd);
+
+#else
+
+       if((*lpUsbFuncs->lpIsTransferComplete)(psb_entry->usb_transfer_scsi_txcmd))
+               (*lpUsbFuncs->lpCloseTransfer)(psb_entry->usb_transfer_scsi_txcmd);
+#endif
+
+       memset(psb_entry->entry_memory, 0, 8);
+
+       RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("%s(%u)\n",__FUNCTION__, __LINE__));
+       if((psb->tail+1)==SCSI_BUFFER_NUMBER)
+               psb->tail=0;
+       else
+               psb->tail++;
+
+       RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("%s(%u)\n",__FUNCTION__, __LINE__));
+       if(CIRC_CNT(psb->head,psb->tail,SCSI_BUFFER_NUMBER)==0){
+               RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("write_txcmd_scsififo_callback: up_sema\n"));
+               _rtw_up_sema(&pxmitpriv->xmit_sema);
+       }
+
+       RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("%s(%u)\n",__FUNCTION__, __LINE__));
+       if(padapter->bSurpriseRemoved) {
+               return STATUS_MORE_PROCESSING_REQUIRED;
+       }
+
+_func_exit_;
+#endif
+       RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("%s(%u)\n",__FUNCTION__, __LINE__));
+       return STATUS_MORE_PROCESSING_REQUIRED;
+}
+
+uint usb_write_scsi(struct intf_hdl *pintfhdl, u32 cnt, u8 *wmem)
+{
+
+#ifndef PLATFORM_OS_CE
+
+       _adapter                  *padapter = (_adapter *)pintfhdl->adapter;
+       struct dvobj_priv *pdev         = (struct dvobj_priv*)&padapter->dvobjpriv;
+
+       struct SCSI_BUFFER       *psb      =padapter->pscsi_buf;
+       struct SCSI_BUFFER_ENTRY *psb_entry=LIST_CONTAINOR(wmem,struct SCSI_BUFFER_ENTRY,entry_memory);
+
+_func_enter_;
+       if(padapter->bSurpriseRemoved||padapter->bDriverStopped)
+               return 0;
+
+       RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("%s(%u)\n",__FUNCTION__, __LINE__));
+       psb_entry->usb_transfer_scsi_txcmd=pdev->pUsbExtension->_lpUsbFuncs->lpIssueBulkTransfer(
+                       pdev->scsi_out_pipehandle,
+                       usb_write_scsi_complete,
+                       psb_entry,
+                       USB_OUT_TRANSFER,
+                       cnt,
+                       wmem,
+                       0);
+
+_func_exit_;
+#endif
+
+   return _SUCCESS;
+}
+
+
+/*
+ */
+uint usb_init_intf_priv(struct intf_priv *pintfpriv)
+{
+       // get the dvobj_priv object
+       struct dvobj_priv * pNdisCEDvice = (struct dvobj_priv *) pintfpriv->intf_dev;
+
+       RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("%s(%u)\n",__FUNCTION__, __LINE__));
+       // set init intf_priv init status as _IOREADY
+       pintfpriv->intf_status = _IOREADY;
+
+       //  determine the max io size by dvobj_priv.ishighspeed
+       if(pNdisCEDvice->ishighspeed)
+               pintfpriv->max_iosz =  128;
+       else
+               pintfpriv->max_iosz =  64;
+
+       //  read/write size set as 0
+       pintfpriv->io_wsz = 0;
+       pintfpriv->io_rsz = 0;
+
+       //  init io_rwmem buffer
+       pintfpriv->allocated_io_rwmem = rtw_zmalloc(pintfpriv->max_iosz +4);
+       if (pintfpriv->allocated_io_rwmem == NULL)
+       {
+               rtw_mfree((u8 *)(pintfpriv->allocated_io_rwmem), pintfpriv->max_iosz +4);
+               return _FAIL;
+       }
+       else
+       {
+               // word align the io_rwmem
+               pintfpriv->io_rwmem = pintfpriv->allocated_io_rwmem + 4 - ( (u32)(pintfpriv->allocated_io_rwmem) & 3);
+       }
+
+#ifndef PLATFORM_OS_CE
+
+       //  init io_r_mem buffer
+       pintfpriv->allocated_io_r_mem = rtw_zmalloc(pintfpriv->max_iosz +4);
+       if (pintfpriv->allocated_io_r_mem == NULL)
+       {
+               rtw_mfree((u8 *)(pintfpriv->allocated_io_r_mem), pintfpriv->max_iosz +4);
+               return _FAIL;
+       }
+       else
+       {
+               // word align the io_rwmem
+               pintfpriv->io_r_mem = pintfpriv->allocated_io_r_mem + 4 - ( (u32)(pintfpriv->allocated_io_r_mem) & 3);
+       }
+#endif
+
+       return _SUCCESS;
+}
+
+void usb_unload_intf_priv(struct intf_priv *pintfpriv)
+{
+#ifndef PLATFORM_OS_CE
+
+       rtw_mfree((u8 *)(pintfpriv->allocated_io_rwmem), pintfpriv->max_iosz+4);
+       rtw_mfree((u8 *)(pintfpriv->allocated_io_r_mem), pintfpriv->max_iosz+4);
+#endif
+
+       RT_TRACE( _module_hci_ops_os_c_, _drv_info_, ("%s(%u)\n",__FUNCTION__, __LINE__));
+}
+
+
+
+void usb_write_port_cancel(_adapter *padapter)
+{
+
+       sint i,j;
+       struct dvobj_priv   *pdev = &padapter->dvobjpriv;
+       struct xmit_priv *pxmitpriv=&padapter->xmitpriv;
+       struct xmit_frame *pxmitframe;
+
+       _rtw_spinlock(&pxmitpriv->lock);
+       pxmitpriv->txirp_cnt--; //decrease 1 for Initialize ++
+       _rtw_spinunlock(&pxmitpriv->lock);
+
+       if (pxmitpriv->txirp_cnt)
+       {
+               // Canceling Pending Recv Irp
+               pxmitframe= (struct xmit_frame *)pxmitpriv->pxmit_frame_buf;
+
+               for( i = 0; i < NR_XMITFRAME; i++ )
+               {
+                       for(j=0;j<8;j++)
+                       {
+                               if (pxmitframe->bpending[j]==_TRUE)
+                               {
+
+                                       RT_TRACE(_module_hci_ops_os_c_,_drv_err_,(" usb_write_port_cancel() :IoCancelIrp\n"));
+
+                               }
+                       }
+
+                       pxmitframe++;
+               }
+
+               _rtw_down_sema(&(pxmitpriv->tx_retevt));
+
+       }
+
+}
+
+DWORD usbctrl_vendorreq_complete(LPVOID lpvNotifyParameter)
+{
+       struct dvobj_priv  *pdvobjpriv = (struct dvobj_priv*)lpvNotifyParameter;
+
+       RT_TRACE(_module_hci_ops_os_c_,_drv_debug_,("+usbctrl_vendorreq_complete\n"));
+
+    return STATUS_SUCCESS;
+}
+
+
+int usbctrl_vendorreq(struct intf_priv *pintfpriv, u8 request, u16 value, u16 index, void *pdata, u16 len, u8 requesttype)
+{
+       u8                      ret=_TRUE;
+//     NTSTATUS        ntstatus;
+//     int             fComplete;
+//     LPCUSB_DEVICE           lpDeviceInfo;
+
+       struct dvobj_priv  *pdvobjpriv = (struct dvobj_priv  *)pintfpriv->intf_dev;
+
+    USB_TRANSFER        usbTrans;
+    USB_DEVICE_REQUEST  usb_device_req;
+    USB_HANDLE      usbHandle   = pdvobjpriv->usb_extension._hDevice;
+    LPCUSB_FUNCS    usbFuncs    = pdvobjpriv->usb_extension._lpUsbFuncs;
+
+       u32     transfer_flags = 0;
+
+       _func_enter_;
+
+    memset( &usb_device_req, 0, sizeof( USB_DEVICE_REQUEST ) );
+
+    if( 0x01 == requesttype )
+       {
+        usb_device_req.bmRequestType = USB_REQUEST_DEVICE_TO_HOST | USB_REQUEST_VENDOR | USB_REQUEST_FOR_DEVICE;
+    }
+       else
+    {
+        usb_device_req.bmRequestType = USB_REQUEST_HOST_TO_DEVICE | USB_REQUEST_VENDOR | USB_REQUEST_FOR_DEVICE;
+    }
+
+       usb_device_req.bRequest                 = request;
+       usb_device_req.wValue                   = value;
+       usb_device_req.wIndex           = index;
+       usb_device_req.wLength          = len;
+
+       if (requesttype == 0x01)
+       {
+               transfer_flags = USB_IN_TRANSFER;//read_in
+       }
+       else
+       {
+               transfer_flags= USB_OUT_TRANSFER;//write_out
+       }
+
+       RT_TRACE(_module_hci_ops_os_c_,_drv_debug_,("+usbctrl_vendorreq\n",__FUNCTION__,__LINE__));
+
+#if 0
+       // Remember to add callback for sync
+       usbTrans = (*usbFuncs->lpIssueVendorTransfer)(usbHandle,
+                                                       usbctrl_vendorreq_complete, pdvobjpriv,
+                                                       transfer_flags, &usb_device_req, pdata, 0);
+#else
+       // Remember to add callback for sync
+       usbTrans = (*usbFuncs->lpIssueVendorTransfer)(usbHandle,
+                                                       NULL, 0,
+                                                       transfer_flags, &usb_device_req, pdata, 0);
+#endif
+
+//     rtw_usleep_os(10);
+
+       if ( usbTrans )
+       {
+               DWORD   dwBytes         = 0;
+               DWORD   dwErr           = USB_CANCELED_ERROR;
+               int     fComplete;
+
+               (*usbFuncs->lpGetTransferStatus)(usbTrans, &dwBytes, &dwErr);
+
+               fComplete = (*usbFuncs->lpIsTransferComplete)(usbTrans);
+
+               if (fComplete== _TRUE)
+               {
+                       (*usbFuncs->lpCloseTransfer)(usbTrans);
+                       RT_TRACE(_module_hci_ops_os_c_,_drv_debug_,("usbctrl_vendorreq lpCloseTransfer\n"));
+               }
+
+               if ( dwErr != USB_NO_ERROR || fComplete != _TRUE)
+               {
+                       RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usbctrl_vendorreq lpCloseTransfer without complete\n"));
+                       ret = _FALSE;
+                       goto exit;
+               }
+       }
+       else
+       {
+               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usbctrl_vendorreq without usbTrans\n"));
+               ret = _FALSE;
+               goto exit;
+
+       }
+
+exit:
+       RT_TRACE(_module_hci_ops_os_c_,_drv_debug_,("-usbctrl_vendorreq\n"));
+_func_exit_;
+
+       return ret;
+
+}
diff --git a/drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/usb/usb_ops_linux.c b/drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/usb/usb_ops_linux.c
new file mode 100644 (file)
index 0000000..7167c26
--- /dev/null
@@ -0,0 +1,1535 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#define _HCI_OPS_OS_C_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <osdep_intf.h>
+#include <usb_ops.h>
+#include <circ_buf.h>
+#include <recv_osdep.h>
+#include <rtl8192c_hal.h>
+
+#if defined (PLATFORM_LINUX) && defined (PLATFORM_WINDOWS)
+
+#error "Shall be Linux or Windows, but not both!\n"
+
+#endif
+
+static int usbctrl_vendorreq(struct intf_hdl *pintfhdl, u8 request, u16 value, u16 index, void *pdata, u16 len, u8 requesttype)
+{
+       _adapter *padapter = pintfhdl->padapter;
+       struct dvobj_priv  *pdvobjpriv = adapter_to_dvobj(padapter);
+       struct usb_device *udev = pdvobjpriv->pusbdev;
+
+       unsigned int pipe;
+       int status = 0;
+       u32 tmp_buflen=0;
+       u8 reqtype;
+       u8 *pIo_buf;
+       int vendorreq_times = 0;
+
+       #ifdef CONFIG_USB_VENDOR_REQ_BUFFER_DYNAMIC_ALLOCATE
+       u8 *tmp_buf;
+       #else // use stack memory
+       u8 tmp_buf[MAX_USB_IO_CTL_SIZE];
+       #endif
+
+#ifdef CONFIG_CONCURRENT_MODE
+       if(padapter->adapter_type > PRIMARY_ADAPTER)
+       {
+               padapter = padapter->pbuddy_adapter;
+               pdvobjpriv = adapter_to_dvobj(padapter);
+               udev = pdvobjpriv->pusbdev;
+       }
+#endif
+
+
+       //DBG_871X("%s %s:%d\n",__FUNCTION__, current->comm, current->pid);
+
+       if((padapter->bSurpriseRemoved) ||(padapter->pwrctrlpriv.pnp_bstop_trx)){
+               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usbctrl_vendorreq:(padapter->bSurpriseRemoved ||adapter->pwrctrlpriv.pnp_bstop_trx)!!!\n"));
+               status = -EPERM;
+               goto exit;
+       }
+
+       if(len>MAX_VENDOR_REQ_CMD_SIZE){
+               DBG_8192C( "[%s] Buffer len error ,vendor request failed\n", __FUNCTION__ );
+               status = -EINVAL;
+               goto exit;
+       }
+
+       #ifdef CONFIG_USB_VENDOR_REQ_MUTEX
+       _enter_critical_mutex(&pdvobjpriv->usb_vendor_req_mutex, NULL);
+       #endif
+
+
+       // Acquire IO memory for vendorreq
+#ifdef CONFIG_USB_VENDOR_REQ_BUFFER_PREALLOC
+       pIo_buf = pdvobjpriv->usb_vendor_req_buf;
+#else
+       #ifdef CONFIG_USB_VENDOR_REQ_BUFFER_DYNAMIC_ALLOCATE
+       tmp_buf = rtw_malloc( (u32) len + ALIGNMENT_UNIT);
+       tmp_buflen =  (u32)len + ALIGNMENT_UNIT;
+       #else // use stack memory
+       tmp_buflen = MAX_USB_IO_CTL_SIZE;
+       #endif
+
+       // Added by Albert 2010/02/09
+       // For mstar platform, mstar suggests the address for USB IO should be 16 bytes alignment.
+       // Trying to fix it here.
+       pIo_buf = (tmp_buf==NULL)?NULL:tmp_buf + ALIGNMENT_UNIT -((SIZE_PTR)(tmp_buf) & 0x0f );
+#endif
+
+       if ( pIo_buf== NULL) {
+               DBG_8192C( "[%s] pIo_buf == NULL \n", __FUNCTION__ );
+               status = -ENOMEM;
+               goto release_mutex;
+       }
+
+       while(++vendorreq_times<= MAX_USBCTRL_VENDORREQ_TIMES)
+       {
+               _rtw_memset(pIo_buf, 0, len);
+
+               if (requesttype == 0x01)
+               {
+                       pipe = usb_rcvctrlpipe(udev, 0);//read_in
+                       reqtype =  REALTEK_USB_VENQT_READ;
+               }
+               else
+               {
+                       pipe = usb_sndctrlpipe(udev, 0);//write_out
+                       reqtype =  REALTEK_USB_VENQT_WRITE;
+                       _rtw_memcpy( pIo_buf, pdata, len);
+               }
+
+               #if 0
+               //timeout test for firmware downloading
+               status = rtw_usb_control_msg(udev, pipe, request, reqtype, value, index, pIo_buf, len
+                       , ((value >= FW_8192C_START_ADDRESS && value <= FW_8192C_END_ADDRESS) ||value!=0x1000) ?RTW_USB_CONTROL_MSG_TIMEOUT : RTW_USB_CONTROL_MSG_TIMEOUT_TEST
+               );
+               #else
+               status = rtw_usb_control_msg(udev, pipe, request, reqtype, value, index, pIo_buf, len, RTW_USB_CONTROL_MSG_TIMEOUT);
+               #endif
+
+               if ( status == len)   // Success this control transfer.
+               {
+                       rtw_reset_continual_urb_error(pdvobjpriv);
+                       if ( requesttype == 0x01 )
+                       {   // For Control read transfer, we have to copy the read data from pIo_buf to pdata.
+                               _rtw_memcpy( pdata, pIo_buf,  len );
+                       }
+               }
+               else { // error cases
+                       DBG_8192C("reg 0x%x, usb %s %u fail, status:%d value=0x%x, vendorreq_times:%d\n"
+                               , value,(requesttype == 0x01)?"read":"write" , len, status, *(u32*)pdata, vendorreq_times);
+
+                       if (status < 0) {
+                               if(status == (-ESHUTDOWN)       || status == -ENODEV    )
+                               {
+                                       padapter->bSurpriseRemoved = _TRUE;
+                               } else {
+                                       #ifdef DBG_CONFIG_ERROR_DETECT
+                                       {
+                                               HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
+                                               pHalData->srestpriv.Wifi_Error_Status = USB_VEN_REQ_CMD_FAIL;
+                                       }
+                                       #endif
+                               }
+                       }
+                       else // status != len && status >= 0
+                       {
+                               if(status > 0) {
+                                       if ( requesttype == 0x01 )
+                                       {   // For Control read transfer, we have to copy the read data from pIo_buf to pdata.
+                                               _rtw_memcpy( pdata, pIo_buf,  len );
+                                       }
+                               }
+                       }
+
+                       if(rtw_inc_and_chk_continual_urb_error(pdvobjpriv) == _TRUE ){
+                               padapter->bSurpriseRemoved = _TRUE;
+                               break;
+                       }
+
+               }
+
+               // firmware download is checksumed, don't retry
+               if( (value >= FW_8192C_START_ADDRESS && value <= FW_8192C_END_ADDRESS) || status == len )
+                       break;
+
+       }
+
+       // release IO memory used by vendorreq
+       #ifdef CONFIG_USB_VENDOR_REQ_BUFFER_DYNAMIC_ALLOCATE
+       rtw_mfree(tmp_buf, tmp_buflen);
+       #endif
+
+release_mutex:
+       #ifdef CONFIG_USB_VENDOR_REQ_MUTEX
+       _exit_critical_mutex(&pdvobjpriv->usb_vendor_req_mutex, NULL);
+       #endif
+exit:
+       return status;
+
+}
+
+static u8 usb_read8(struct intf_hdl *pintfhdl, u32 addr)
+{
+       u8 request;
+       u8 requesttype;
+       u16 wvalue;
+       u16 index;
+       u16 len;
+       u32 data=0;
+
+       _func_enter_;
+
+       request = 0x05;
+       requesttype = 0x01;//read_in
+       index = 0;//n/a
+
+       wvalue = (u16)(addr&0x0000ffff);
+       len = 1;
+
+       usbctrl_vendorreq(pintfhdl, request, wvalue, index, &data, len, requesttype);
+
+       _func_exit_;
+
+       return (u8)(le32_to_cpu(data)&0x0ff);
+
+}
+
+static u16 usb_read16(struct intf_hdl *pintfhdl, u32 addr)
+{
+       u8 request;
+       u8 requesttype;
+       u16 wvalue;
+       u16 index;
+       u16 len;
+       u32 data=0;
+
+       _func_enter_;
+
+       request = 0x05;
+       requesttype = 0x01;//read_in
+       index = 0;//n/a
+
+       wvalue = (u16)(addr&0x0000ffff);
+       len = 2;
+
+       usbctrl_vendorreq(pintfhdl, request, wvalue, index, &data, len, requesttype);
+
+       _func_exit_;
+
+       return (u16)(le32_to_cpu(data)&0xffff);
+
+}
+
+static u32 usb_read32(struct intf_hdl *pintfhdl, u32 addr)
+{
+       u8 request;
+       u8 requesttype;
+       u16 wvalue;
+       u16 index;
+       u16 len;
+       u32 data=0;
+
+       _func_enter_;
+
+       request = 0x05;
+       requesttype = 0x01;//read_in
+       index = 0;//n/a
+
+       wvalue = (u16)(addr&0x0000ffff);
+       len = 4;
+
+       usbctrl_vendorreq(pintfhdl, request, wvalue, index, &data, len, requesttype);
+
+       _func_exit_;
+
+       return le32_to_cpu(data);
+
+}
+
+static int usb_write8(struct intf_hdl *pintfhdl, u32 addr, u8 val)
+{
+       u8 request;
+       u8 requesttype;
+       u16 wvalue;
+       u16 index;
+       u16 len;
+       u32 data;
+       int ret;
+
+       _func_enter_;
+
+       request = 0x05;
+       requesttype = 0x00;//write_out
+       index = 0;//n/a
+
+       wvalue = (u16)(addr&0x0000ffff);
+       len = 1;
+
+       data = val;
+       data = cpu_to_le32(data&0x000000ff);
+
+       ret = usbctrl_vendorreq(pintfhdl, request, wvalue, index, &data, len, requesttype);
+
+       _func_exit_;
+
+       return ret;
+
+}
+
+static int usb_write16(struct intf_hdl *pintfhdl, u32 addr, u16 val)
+{
+       u8 request;
+       u8 requesttype;
+       u16 wvalue;
+       u16 index;
+       u16 len;
+       u32 data;
+       int ret;
+
+       _func_enter_;
+
+       request = 0x05;
+       requesttype = 0x00;//write_out
+       index = 0;//n/a
+
+       wvalue = (u16)(addr&0x0000ffff);
+       len = 2;
+
+       data = val;
+       data = cpu_to_le32(data&0x0000ffff);
+
+       ret = usbctrl_vendorreq(pintfhdl, request, wvalue, index, &data, len, requesttype);
+
+       _func_exit_;
+
+       return ret;
+
+}
+
+static int usb_write32(struct intf_hdl *pintfhdl, u32 addr, u32 val)
+{
+       u8 request;
+       u8 requesttype;
+       u16 wvalue;
+       u16 index;
+       u16 len;
+       u32 data;
+       int ret;
+
+       _func_enter_;
+
+       request = 0x05;
+       requesttype = 0x00;//write_out
+       index = 0;//n/a
+
+       wvalue = (u16)(addr&0x0000ffff);
+       len = 4;
+       data = cpu_to_le32(val);
+
+
+       ret =usbctrl_vendorreq(pintfhdl, request, wvalue, index, &data, len, requesttype);
+
+       _func_exit_;
+
+       return ret;
+
+}
+
+static int usb_writeN(struct intf_hdl *pintfhdl, u32 addr, u32 length, u8 *pdata)
+{
+       u8 request;
+       u8 requesttype;
+       u16 wvalue;
+       u16 index;
+       u16 len;
+       u8 buf[VENDOR_CMD_MAX_DATA_LEN]={0};
+       int ret;
+
+       _func_enter_;
+
+       request = 0x05;
+       requesttype = 0x00;//write_out
+       index = 0;//n/a
+
+       wvalue = (u16)(addr&0x0000ffff);
+       len = length;
+        _rtw_memcpy(buf, pdata, len );
+
+       ret = usbctrl_vendorreq(pintfhdl, request, wvalue, index, buf, len, requesttype);
+
+       _func_exit_;
+
+       return ret;
+
+}
+
+#ifdef CONFIG_USB_INTERRUPT_IN_PIPE
+static void usb_read_interrupt_complete(struct urb *purb, struct pt_regs *regs)
+{
+       int     err;
+       _adapter                *padapter = (_adapter    *)purb->context;
+
+       if(purb->status==0)//SUCCESS
+       {
+               if (purb->actual_length > sizeof(INTERRUPT_MSG_FORMAT_EX))
+               {
+                       DBG_8192C("usb_read_interrupt_complete: purb->actual_length > sizeof(INTERRUPT_MSG_FORMAT_EX) \n");
+               }
+
+               err = usb_submit_urb(purb, GFP_ATOMIC);
+               if((err) && (err != (-EPERM)))
+               {
+                       DBG_8192C("cannot submit interrupt in-token(err = 0x%08x),urb_status = %d\n",err, purb->status);
+               }
+       }
+       else
+       {
+               DBG_8192C("###=> usb_read_interrupt_complete => urb status(%d)\n", purb->status);
+
+               switch(purb->status) {
+                       case -EINVAL:
+                       case -EPIPE:
+                       case -ENODEV:
+                       case -ESHUTDOWN:
+                               //padapter->bSurpriseRemoved=_TRUE;
+                               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_complete:bSurpriseRemoved=TRUE\n"));
+                       case -ENOENT:
+                               padapter->bDriverStopped=_TRUE;
+                               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_complete:bDriverStopped=TRUE\n"));
+                               break;
+                       case -EPROTO:
+                               break;
+                       case -EINPROGRESS:
+                               DBG_8192C("ERROR: URB IS IN PROGRESS!/n");
+                               break;
+                       default:
+                               break;
+               }
+       }
+
+}
+
+static u32 usb_read_interrupt(struct intf_hdl *pintfhdl, u32 addr)
+{
+       int     err;
+       unsigned int pipe;
+       u32     ret = _SUCCESS;
+       _adapter                        *adapter = pintfhdl->padapter;
+       struct dvobj_priv       *pdvobj = adapter_to_dvobj(adapter);
+       struct recv_priv        *precvpriv = &adapter->recvpriv;
+       struct usb_device       *pusbd = pdvobj->pusbdev;
+
+_func_enter_;
+
+       //translate DMA FIFO addr to pipehandle
+       pipe = ffaddr2pipehdl(pdvobj, addr);
+
+       usb_fill_int_urb(precvpriv->int_in_urb, pusbd, pipe,
+                                       precvpriv->int_in_buf,
+                                       sizeof(INTERRUPT_MSG_FORMAT_EX),
+                                       usb_read_interrupt_complete,
+                                       adapter,
+                                       1);
+
+       err = usb_submit_urb(precvpriv->int_in_urb, GFP_ATOMIC);
+       if((err) && (err != (-EPERM)))
+       {
+               DBG_8192C("cannot submit interrupt in-token(err = 0x%08x),urb_status = %d\n",err, precvpriv->int_in_urb->status);
+               ret = _FAIL;
+       }
+
+_func_exit_;
+
+       return ret;
+}
+#endif
+
+static s32 pre_recv_entry(union recv_frame *precvframe, struct recv_stat *prxstat, struct phy_stat *pphy_info)
+{
+       s32 ret=_SUCCESS;
+#ifdef CONFIG_CONCURRENT_MODE
+       u8 *primary_myid, *secondary_myid, *paddr1;
+       union recv_frame        *precvframe_if2 = NULL;
+       _adapter *primary_padapter = precvframe->u.hdr.adapter;
+       _adapter *secondary_padapter = primary_padapter->pbuddy_adapter;
+       struct recv_priv *precvpriv = &primary_padapter->recvpriv;
+       _queue *pfree_recv_queue = &precvpriv->free_recv_queue;
+       u8      *pbuf = precvframe->u.hdr.rx_data;
+
+       if(!secondary_padapter)
+               return ret;
+
+       paddr1 = GetAddr1Ptr(precvframe->u.hdr.rx_data);
+
+       if(IS_MCAST(paddr1) == _FALSE)//unicast packets
+       {
+               //primary_myid = myid(&primary_padapter->eeprompriv);
+               secondary_myid = myid(&secondary_padapter->eeprompriv);
+
+               if(_rtw_memcmp(paddr1, secondary_myid, ETH_ALEN))
+               {
+                       //change to secondary interface
+                       precvframe->u.hdr.adapter = secondary_padapter;
+               }
+
+               //ret = recv_entry(precvframe);
+
+       }
+       else // Handle BC/MC Packets
+       {
+
+               u8 clone = _TRUE;
+#if 0
+               u8 type, subtype, *paddr2, *paddr3;
+
+               type =  GetFrameType(pbuf);
+               subtype = GetFrameSubType(pbuf); //bit(7)~bit(2)
+
+               switch (type)
+               {
+                       case WIFI_MGT_TYPE: //Handle BC/MC mgnt Packets
+                               if(subtype == WIFI_BEACON)
+                               {
+                                       paddr3 = GetAddr3Ptr(precvframe->u.hdr.rx_data);
+
+                                       if (check_fwstate(&secondary_padapter->mlmepriv, _FW_LINKED) &&
+                                               _rtw_memcmp(paddr3, get_bssid(&secondary_padapter->mlmepriv), ETH_ALEN))
+                                       {
+                                               //change to secondary interface
+                                               precvframe->u.hdr.adapter = secondary_padapter;
+                                               clone = _FALSE;
+                                       }
+
+                                       if(check_fwstate(&primary_padapter->mlmepriv, _FW_LINKED) &&
+                                               _rtw_memcmp(paddr3, get_bssid(&primary_padapter->mlmepriv), ETH_ALEN))
+                                       {
+                                               if(clone==_FALSE)
+                                               {
+                                                       clone = _TRUE;
+                                               }
+                                               else
+                                               {
+                                                       clone = _FALSE;
+                                               }
+
+                                               precvframe->u.hdr.adapter = primary_padapter;
+                                       }
+
+                                       if(check_fwstate(&primary_padapter->mlmepriv, _FW_UNDER_SURVEY|_FW_UNDER_LINKING) ||
+                                               check_fwstate(&secondary_padapter->mlmepriv, _FW_UNDER_SURVEY|_FW_UNDER_LINKING))
+                                       {
+                                               clone = _TRUE;
+                                               precvframe->u.hdr.adapter = primary_padapter;
+                                       }
+
+                               }
+                               else if(subtype == WIFI_PROBEREQ)
+                               {
+                                       //probe req frame is only for interface2
+                                       //change to secondary interface
+                                       precvframe->u.hdr.adapter = secondary_padapter;
+                                       clone = _FALSE;
+                               }
+                               break;
+                       case WIFI_CTRL_TYPE: // Handle BC/MC ctrl Packets
+
+                               break;
+                       case WIFI_DATA_TYPE: //Handle BC/MC data Packets
+                                       //Notes: AP MODE never rx BC/MC data packets
+
+                               paddr2 = GetAddr2Ptr(precvframe->u.hdr.rx_data);
+
+                               if(_rtw_memcmp(paddr2, get_bssid(&secondary_padapter->mlmepriv), ETH_ALEN))
+                               {
+                                       //change to secondary interface
+                                       precvframe->u.hdr.adapter = secondary_padapter;
+                                       clone = _FALSE;
+                               }
+
+                               break;
+                       default:
+
+                               break;
+               }
+#endif
+
+               if(_TRUE == clone)
+               {
+                       //clone/copy to if2
+                       u8 shift_sz = 0;
+                       u32 alloc_sz, skb_len;
+                       _pkt     *pkt_copy = NULL;
+                       struct rx_pkt_attrib *pattrib = NULL;
+
+                       precvframe_if2 = rtw_alloc_recvframe(pfree_recv_queue);
+                       if(precvframe_if2)
+                       {
+                               precvframe_if2->u.hdr.adapter = secondary_padapter;
+
+                               _rtw_init_listhead(&precvframe_if2->u.hdr.list);
+                               precvframe_if2->u.hdr.precvbuf = NULL;  //can't access the precvbuf for new arch.
+                               precvframe_if2->u.hdr.len=0;
+
+                               _rtw_memcpy(&precvframe_if2->u.hdr.attrib, &precvframe->u.hdr.attrib, sizeof(struct rx_pkt_attrib));
+
+                               pattrib = &precvframe_if2->u.hdr.attrib;
+
+                               //      Modified by Albert 20101213
+                               //      For 8 bytes IP header alignment.
+                               if (pattrib->qos)       //      Qos data, wireless lan header length is 26
+                               {
+                                       shift_sz = 6;
+                               }
+                               else
+                               {
+                                       shift_sz = 0;
+                               }
+
+                               skb_len = pattrib->pkt_len;
+
+                               // for first fragment packet, driver need allocate 1536+drvinfo_sz+RXDESC_SIZE to defrag packet.
+                               // modify alloc_sz for recvive crc error packet by thomas 2011-06-02
+                               if((pattrib->mfrag == 1)&&(pattrib->frag_num == 0)){
+                                       //alloc_sz = 1664;      //1664 is 128 alignment.
+                                       if(skb_len <= 1650)
+                                               alloc_sz = 1664;
+                                       else
+                                               alloc_sz = skb_len + 14;
+                               }
+                               else {
+                                       alloc_sz = skb_len;
+                                       //      6 is for IP header 8 bytes alignment in QoS packet case.
+                                       //      8 is for skb->data 4 bytes alignment.
+                                       alloc_sz += 14;
+                               }
+
+                               pkt_copy = rtw_skb_alloc(alloc_sz);
+
+                               if(pkt_copy)
+                               {
+                                       pkt_copy->dev = secondary_padapter->pnetdev;
+                                       precvframe_if2->u.hdr.pkt = pkt_copy;
+                                       precvframe_if2->u.hdr.rx_head = pkt_copy->data;
+                                       precvframe_if2->u.hdr.rx_end = pkt_copy->data + alloc_sz;
+                                       skb_reserve( pkt_copy, 8 - ((SIZE_PTR)( pkt_copy->data ) & 7 ));//force pkt_copy->data at 8-byte alignment address
+                                       skb_reserve( pkt_copy, shift_sz );//force ip_hdr at 8-byte alignment address according to shift_sz.
+                                       _rtw_memcpy(pkt_copy->data, pbuf, skb_len);
+                                       precvframe_if2->u.hdr.rx_data = precvframe_if2->u.hdr.rx_tail = pkt_copy->data;
+
+
+                                       recvframe_put(precvframe_if2, skb_len);
+                                       //recvframe_pull(precvframe_if2, drvinfo_sz + RXDESC_SIZE);
+
+                                       rtl8192c_translate_rx_signal_stuff(precvframe_if2, pphy_info);
+
+                                       ret = rtw_recv_entry(precvframe_if2);
+
+                               } else {
+                                       rtw_free_recvframe(precvframe_if2, pfree_recv_queue);
+                                       DBG_8192C("%s()-%d: alloc_skb() failed!\n", __FUNCTION__, __LINE__);
+                               }
+
+                       }
+
+               }
+
+       }
+
+       rtl8192c_translate_rx_signal_stuff(precvframe, pphy_info);
+
+       ret = rtw_recv_entry(precvframe);
+
+#endif
+
+       return ret;
+
+}
+
+#ifdef CONFIG_USE_USB_BUFFER_ALLOC_RX
+static int recvbuf2recvframe(_adapter *padapter, struct recv_buf *precvbuf)
+{
+       u8      *pbuf;
+       u8      shift_sz = 0;
+       u16     pkt_cnt, drvinfo_sz;
+       u32     pkt_offset, skb_len, alloc_sz;
+       s32     transfer_len;
+       struct recv_stat        *prxstat;
+       struct phy_stat *pphy_info = NULL;
+       _pkt                            *pkt_copy = NULL;
+       union recv_frame        *precvframe = NULL;
+       struct rx_pkt_attrib    *pattrib = NULL;
+       HAL_DATA_TYPE           *pHalData = GET_HAL_DATA(padapter);
+       struct recv_priv        *precvpriv = &padapter->recvpriv;
+       _queue                  *pfree_recv_queue = &precvpriv->free_recv_queue;
+
+
+       transfer_len = (s32)precvbuf->transfer_len;
+       pbuf = precvbuf->pbuf;
+
+       prxstat = (struct recv_stat *)pbuf;
+       pkt_cnt = (le32_to_cpu(prxstat->rxdw2)>>16) & 0xff;
+
+#if 0 //temp remove when disable usb rx aggregation
+       if((pkt_cnt > 10) || (pkt_cnt < 1) || (transfer_len<RXDESC_SIZE) ||(pkt_len<=0))
+       {
+               return _FAIL;
+       }
+#endif
+
+       do{
+               RT_TRACE(_module_rtl871x_recv_c_, _drv_info_,
+                        ("recvbuf2recvframe: rxdesc=offsset 0:0x%08x, 4:0x%08x, 8:0x%08x, C:0x%08x\n",
+                         prxstat->rxdw0, prxstat->rxdw1, prxstat->rxdw2, prxstat->rxdw4));
+
+               prxstat = (struct recv_stat *)pbuf;
+
+               precvframe = rtw_alloc_recvframe(pfree_recv_queue);
+               if(precvframe==NULL)
+               {
+                       RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("recvbuf2recvframe: precvframe==NULL\n"));
+                       DBG_8192C("%s()-%d: rtw_alloc_recvframe() failed! RX Drop!\n", __FUNCTION__, __LINE__);
+                       goto _exit_recvbuf2recvframe;
+               }
+
+               _rtw_init_listhead(&precvframe->u.hdr.list);
+               precvframe->u.hdr.precvbuf = NULL;      //can't access the precvbuf for new arch.
+               precvframe->u.hdr.len=0;
+
+               rtl8192c_query_rx_desc_status(precvframe, prxstat);
+
+               pattrib = &precvframe->u.hdr.attrib;
+               if(pattrib->physt)
+               {
+                       pphy_info = (struct phy_stat *)(pbuf + RXDESC_OFFSET);
+               }
+
+               pkt_offset = RXDESC_SIZE + pattrib->drvinfo_sz + pattrib->shift_sz + pattrib->pkt_len;
+
+               if((pattrib->pkt_len<=0) || (pkt_offset>transfer_len))
+               {
+                       RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("recvbuf2recvframe: pkt_len<=0\n"));
+                       DBG_8192C("%s()-%d: RX Warning!\n", __FUNCTION__, __LINE__);
+                       rtw_free_recvframe(precvframe, pfree_recv_queue);
+                       goto _exit_recvbuf2recvframe;
+               }
+
+               //      Modified by Albert 20101213
+               //      For 8 bytes IP header alignment.
+               if (pattrib->qos)       //      Qos data, wireless lan header length is 26
+               {
+                       shift_sz = 6;
+               }
+               else
+               {
+                       shift_sz = 0;
+               }
+
+               skb_len = pattrib->pkt_len;
+
+               // for first fragment packet, driver need allocate 1536+drvinfo_sz+RXDESC_SIZE to defrag packet.
+               // modify alloc_sz for recvive crc error packet by thomas 2011-06-02
+               if((pattrib->mfrag == 1)&&(pattrib->frag_num == 0)){
+                       //alloc_sz = 1664;      //1664 is 128 alignment.
+                       if(skb_len <= 1650)
+                               alloc_sz = 1664;
+                       else
+                               alloc_sz = skb_len + 14;
+               }
+               else {
+                       alloc_sz = skb_len;
+                       //      6 is for IP header 8 bytes alignment in QoS packet case.
+                       //      8 is for skb->data 4 bytes alignment.
+                       alloc_sz += 14;
+               }
+
+               pkt_copy = rtw_skb_alloc(alloc_sz);
+
+               if(pkt_copy)
+               {
+                       pkt_copy->dev = padapter->pnetdev;
+                       precvframe->u.hdr.pkt = pkt_copy;
+                       precvframe->u.hdr.rx_head = pkt_copy->data;
+                       precvframe->u.hdr.rx_end = pkt_copy->data + alloc_sz;
+                       skb_reserve( pkt_copy, 8 - ((SIZE_PTR)( pkt_copy->data ) & 7 ));//force pkt_copy->data at 8-byte alignment address
+                       skb_reserve( pkt_copy, shift_sz );//force ip_hdr at 8-byte alignment address according to shift_sz.
+                       _rtw_memcpy(pkt_copy->data, (pbuf + pattrib->shift_sz + pattrib->drvinfo_sz + RXDESC_SIZE), skb_len);
+                       precvframe->u.hdr.rx_data = precvframe->u.hdr.rx_tail = pkt_copy->data;
+               }
+               else
+               {
+                       DBG_8192C("recvbuf2recvframe:can not allocate memory for skb copy\n");
+                       //precvframe->u.hdr.pkt = rtw_skb_clone(pskb);
+                       //precvframe->u.hdr.rx_head = precvframe->u.hdr.rx_data = precvframe->u.hdr.rx_tail = pbuf;
+                       //precvframe->u.hdr.rx_end = pbuf + (pkt_offset>1612?pkt_offset:1612);
+
+                       precvframe->u.hdr.pkt = NULL;
+                       rtw_free_recvframe(precvframe, pfree_recv_queue);
+
+                       goto _exit_recvbuf2recvframe;
+               }
+
+               recvframe_put(precvframe, skb_len);
+               //recvframe_pull(precvframe, drvinfo_sz + RXDESC_SIZE);
+
+#ifdef CONFIG_USB_RX_AGGREGATION
+               switch(pHalData->UsbRxAggMode)
+               {
+                       case USB_RX_AGG_DMA:
+                       case USB_RX_AGG_MIX:
+                               pkt_offset = (u16)_RND128(pkt_offset);
+                               break;
+                               case USB_RX_AGG_USB:
+                               pkt_offset = (u16)_RND4(pkt_offset);
+                               break;
+                       case USB_RX_AGG_DISABLE:
+                       default:
+                               break;
+               }
+#endif
+
+#ifdef CONFIG_CONCURRENT_MODE
+               if(rtw_buddy_adapter_up(padapter))
+               {
+                       if(pre_recv_entry(precvframe, prxstat, pphy_info) != _SUCCESS)
+                       {
+                               RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("recvbuf2recvframe: recv_entry(precvframe) != _SUCCESS\n"));
+                       }
+               }
+               else
+               {
+                       rtl8192c_translate_rx_signal_stuff(precvframe, pphy_info);
+                       if(rtw_recv_entry(precvframe) != _SUCCESS)
+                       {
+                               RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("recvbuf2recvframe: rtw_recv_entry(precvframe) != _SUCCESS\n"));
+                       }
+               }
+
+#else
+               rtl8192c_translate_rx_signal_stuff(precvframe, pphy_info);
+               if(rtw_recv_entry(precvframe) != _SUCCESS)
+               {
+                       RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("recvbuf2recvframe: rtw_recv_entry(precvframe) != _SUCCESS\n"));
+               }
+#endif
+
+               pkt_cnt--;
+               transfer_len -= pkt_offset;
+               pbuf += pkt_offset;
+               precvframe = NULL;
+               pkt_copy = NULL;
+
+               if(transfer_len>0 && pkt_cnt==0)
+                       pkt_cnt = (le32_to_cpu(prxstat->rxdw2)>>16) & 0xff;
+
+       }while((transfer_len>0) && (pkt_cnt>0));
+
+_exit_recvbuf2recvframe:
+
+       return _SUCCESS;
+}
+
+void rtl8192cu_recv_tasklet(void *priv)
+{
+       struct recv_buf *precvbuf = NULL;
+       _adapter        *padapter = (_adapter*)priv;
+       struct recv_priv        *precvpriv = &padapter->recvpriv;
+
+       while (NULL != (precvbuf = rtw_dequeue_recvbuf(&precvpriv->recv_buf_pending_queue)))
+       {
+               if ((padapter->bDriverStopped == _TRUE)||(padapter->bSurpriseRemoved== _TRUE))
+               {
+                       DBG_8192C("recv_tasklet => bDriverStopped or bSurpriseRemoved \n");
+
+                       break;
+               }
+
+
+               recvbuf2recvframe(padapter, precvbuf);
+
+               rtw_read_port(padapter, precvpriv->ff_hwaddr, 0, (unsigned char *)precvbuf);
+       }
+
+}
+
+static void usb_read_port_complete(struct urb *purb, struct pt_regs *regs)
+{
+       struct recv_buf *precvbuf = (struct recv_buf *)purb->context;
+       _adapter                        *padapter =(_adapter *)precvbuf->adapter;
+       struct recv_priv        *precvpriv = &padapter->recvpriv;
+
+       RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_complete!!!\n"));
+
+       precvpriv->rx_pending_cnt --;
+
+       if(padapter->bSurpriseRemoved || padapter->bDriverStopped||padapter->bReadPortCancel)
+       {
+               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_complete:bDriverStopped(%d) OR bSurpriseRemoved(%d)\n", padapter->bDriverStopped, padapter->bSurpriseRemoved));
+
+               goto exit;
+       }
+
+       if(purb->status==0)//SUCCESS
+       {
+               if ((purb->actual_length > MAX_RECVBUF_SZ) || (purb->actual_length < RXDESC_SIZE))
+               {
+                       RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_complete: (purb->actual_length > MAX_RECVBUF_SZ) || (purb->actual_length < RXDESC_SIZE)\n"));
+
+                       rtw_read_port(padapter, precvpriv->ff_hwaddr, 0, (unsigned char *)precvbuf);
+               }
+               else
+               {
+                       rtw_reset_continual_urb_error(adapter_to_dvobj(padapter));
+
+                       precvbuf->transfer_len = purb->actual_length;
+
+                       //rtw_enqueue_rx_transfer_buffer(precvpriv, rx_transfer_buf);
+                       rtw_enqueue_recvbuf(precvbuf, &precvpriv->recv_buf_pending_queue);
+
+                       tasklet_schedule(&precvpriv->recv_tasklet);
+               }
+       }
+       else
+       {
+               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_complete : purb->status(%d) != 0 \n", purb->status));
+
+               DBG_8192C("###=> usb_read_port_complete => urb status(%d)\n", purb->status);
+
+               if(rtw_inc_and_chk_continual_urb_error(adapter_to_dvobj(padapter)) == _TRUE ){
+                       padapter->bSurpriseRemoved = _TRUE;
+               }
+
+               switch(purb->status) {
+                       case -EINVAL:
+                       case -EPIPE:
+                       case -ENODEV:
+                       case -ESHUTDOWN:
+                               //padapter->bSurpriseRemoved=_TRUE;
+                               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_complete:bSurpriseRemoved=TRUE\n"));
+                       case -ENOENT:
+                               padapter->bDriverStopped=_TRUE;
+                               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_complete:bDriverStopped=TRUE\n"));
+                               break;
+                       case -EPROTO:
+                       case -EILSEQ:
+                       case -ETIME:
+                       case -ECOMM:
+                       case -EOVERFLOW:
+                               #ifdef DBG_CONFIG_ERROR_DETECT
+                               {
+                                       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
+                                       pHalData->srestpriv.Wifi_Error_Status = USB_READ_PORT_FAIL;
+                               }
+                               #endif
+                               rtw_read_port(padapter, precvpriv->ff_hwaddr, 0, (unsigned char *)precvbuf);
+                               break;
+                       case -EINPROGRESS:
+                               DBG_8192C("ERROR: URB IS IN PROGRESS!/n");
+                               break;
+                       default:
+                               break;
+               }
+
+       }
+
+exit:
+
+_func_exit_;
+
+}
+
+static u32 usb_read_port(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *rmem)
+{
+       int err;
+       unsigned int pipe;
+       u32 ret = _SUCCESS;
+       PURB purb = NULL;
+       struct recv_buf *precvbuf = (struct recv_buf *)rmem;
+       _adapter *adapter = pintfhdl->padapter;
+       struct dvobj_priv       *pdvobj = adapter_to_dvobj(adapter);
+       struct recv_priv        *precvpriv = &adapter->recvpriv;
+       struct usb_device       *pusbd = pdvobj->pusbdev;
+
+_func_enter_;
+
+       if(adapter->bDriverStopped || adapter->bSurpriseRemoved ||adapter->pwrctrlpriv.pnp_bstop_trx)
+       {
+               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port:( padapter->bDriverStopped ||padapter->bSurpriseRemoved ||adapter->pwrctrlpriv.pnp_bstop_trx)!!!\n"));
+               return _FAIL;
+       }
+
+       if(precvbuf !=NULL)
+       {
+               rtl8192cu_init_recvbuf(adapter, precvbuf);
+
+               if(precvbuf->pbuf)
+               {
+                       precvpriv->rx_pending_cnt++;
+
+                       purb = precvbuf->purb;
+
+                       //translate DMA FIFO addr to pipehandle
+                       pipe = ffaddr2pipehdl(pdvobj, addr);
+
+                       usb_fill_bulk_urb(purb, pusbd, pipe,
+                                               precvbuf->pbuf,
+                                               MAX_RECVBUF_SZ,
+                                               usb_read_port_complete,
+                                               precvbuf);//context is precvbuf
+
+                       purb->transfer_dma = precvbuf->dma_transfer_addr;
+                       purb->transfer_flags |= URB_NO_TRANSFER_DMA_MAP;
+
+                       err = usb_submit_urb(purb, GFP_ATOMIC);
+                       if((err) && (err != (-EPERM)))
+                       {
+                               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("cannot submit rx in-token(err=0x%.8x), URB_STATUS =0x%.8x", err, purb->status));
+                               DBG_8192C("cannot submit rx in-token(err = 0x%08x),urb_status = %d\n",err,purb->status);
+                               ret = _FAIL;
+                       }
+
+               }
+
+       }
+       else
+       {
+               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port:precvbuf ==NULL\n"));
+               ret = _FAIL;
+       }
+
+_func_exit_;
+
+       return ret;
+}
+#else  // CONFIG_USE_USB_BUFFER_ALLOC_RX
+static int recvbuf2recvframe(_adapter *padapter, _pkt *pskb)
+{
+       u8      *pbuf;
+       u8      shift_sz = 0;
+       u16     pkt_cnt;
+       u32     pkt_offset, skb_len, alloc_sz;
+       s32     transfer_len;
+       struct recv_stat        *prxstat;
+       struct phy_stat *pphy_info = NULL;
+       _pkt                            *pkt_copy = NULL;
+       union recv_frame        *precvframe = NULL;
+       struct rx_pkt_attrib    *pattrib = NULL;
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
+       struct recv_priv        *precvpriv = &padapter->recvpriv;
+       _queue                  *pfree_recv_queue = &precvpriv->free_recv_queue;
+
+
+       transfer_len = (s32)pskb->len;
+       pbuf = pskb->data;
+
+       prxstat = (struct recv_stat *)pbuf;
+       pkt_cnt = (le32_to_cpu(prxstat->rxdw2)>>16) & 0xff;
+
+#if 0 //temp remove when disable usb rx aggregation
+       if((pkt_cnt > 10) || (pkt_cnt < 1) || (transfer_len<RXDESC_SIZE) ||(pkt_len<=0))
+       {
+               return _FAIL;
+       }
+#endif
+
+       do{
+               RT_TRACE(_module_rtl871x_recv_c_, _drv_info_,
+                        ("recvbuf2recvframe: rxdesc=offsset 0:0x%08x, 4:0x%08x, 8:0x%08x, C:0x%08x\n",
+                         prxstat->rxdw0, prxstat->rxdw1, prxstat->rxdw2, prxstat->rxdw4));
+
+               prxstat = (struct recv_stat *)pbuf;
+
+               precvframe = rtw_alloc_recvframe(pfree_recv_queue);
+               if(precvframe==NULL)
+               {
+                       RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("recvbuf2recvframe: precvframe==NULL\n"));
+                       DBG_8192C("%s()-%d: rtw_alloc_recvframe() failed! RX Drop!\n", __FUNCTION__, __LINE__);
+                       goto _exit_recvbuf2recvframe;
+               }
+
+               _rtw_init_listhead(&precvframe->u.hdr.list);
+               precvframe->u.hdr.precvbuf = NULL;      //can't access the precvbuf for new arch.
+               precvframe->u.hdr.len=0;
+
+               rtl8192c_query_rx_desc_status(precvframe, prxstat);
+
+               pattrib = &precvframe->u.hdr.attrib;
+               if(pattrib->physt)
+               {
+                       pphy_info = (struct phy_stat *)(pbuf + RXDESC_OFFSET);
+               }
+
+               pkt_offset = RXDESC_SIZE + pattrib->drvinfo_sz + pattrib->shift_sz + pattrib->pkt_len;
+
+               if((pattrib->pkt_len<=0) || (pkt_offset>transfer_len))
+               {
+                       RT_TRACE(_module_rtl871x_recv_c_,_drv_info_,("recvbuf2recvframe: pkt_len<=0\n"));
+                       DBG_8192C("%s()-%d: RX Warning!\n", __FUNCTION__, __LINE__);
+                       rtw_free_recvframe(precvframe, pfree_recv_queue);
+                       goto _exit_recvbuf2recvframe;
+               }
+
+               //      Modified by Albert 20101213
+               //      For 8 bytes IP header alignment.
+               if (pattrib->qos)       //      Qos data, wireless lan header length is 26
+               {
+                       shift_sz = 6;
+               }
+               else
+               {
+                       shift_sz = 0;
+               }
+
+               skb_len = pattrib->pkt_len;
+
+               // for first fragment packet, driver need allocate 1536+drvinfo_sz+RXDESC_SIZE to defrag packet.
+               // modify alloc_sz for recvive crc error packet by thomas 2011-06-02
+               if((pattrib->mfrag == 1)&&(pattrib->frag_num == 0)){
+                       //alloc_sz = 1664;      //1664 is 128 alignment.
+                       if(skb_len <= 1650)
+                               alloc_sz = 1664;
+                       else
+                               alloc_sz = skb_len + 14;
+               }
+               else {
+                       alloc_sz = skb_len;
+                       //      6 is for IP header 8 bytes alignment in QoS packet case.
+                       //      8 is for skb->data 4 bytes alignment.
+                       alloc_sz += 14;
+               }
+
+               pkt_copy = rtw_skb_alloc(alloc_sz);
+
+               if(pkt_copy)
+               {
+                       pkt_copy->dev = padapter->pnetdev;
+                       precvframe->u.hdr.pkt = pkt_copy;
+                       precvframe->u.hdr.rx_head = pkt_copy->data;
+                       precvframe->u.hdr.rx_end = pkt_copy->data + alloc_sz;
+                       skb_reserve( pkt_copy, 8 - ((SIZE_PTR)( pkt_copy->data ) & 7 ));//force pkt_copy->data at 8-byte alignment address
+                       skb_reserve( pkt_copy, shift_sz );//force ip_hdr at 8-byte alignment address according to shift_sz.
+                       _rtw_memcpy(pkt_copy->data, (pbuf + pattrib->shift_sz + pattrib->drvinfo_sz + RXDESC_SIZE), skb_len);
+                       precvframe->u.hdr.rx_data = precvframe->u.hdr.rx_tail = pkt_copy->data;
+
+               }
+               else
+               {
+                       precvframe->u.hdr.pkt = rtw_skb_clone(pskb);
+                       if(pkt_copy)
+                       {
+                               precvframe->u.hdr.rx_head = precvframe->u.hdr.rx_data = precvframe->u.hdr.rx_tail = pbuf;
+                               precvframe->u.hdr.rx_end = pbuf + alloc_sz;
+                       }
+                       else
+                       {
+                               DBG_8192C("recvbuf2recvframe: rtw_skb_clone fail\n");
+                               rtw_free_recvframe(precvframe, pfree_recv_queue);
+                               goto _exit_recvbuf2recvframe;
+                       }
+               }
+
+               recvframe_put(precvframe, skb_len);
+               //recvframe_pull(precvframe, drvinfo_sz + RXDESC_SIZE);
+
+#ifdef CONFIG_USB_RX_AGGREGATION
+               switch(pHalData->UsbRxAggMode)
+               {
+                       case USB_RX_AGG_DMA:
+                       case USB_RX_AGG_MIX:
+                               pkt_offset = (u16)_RND128(pkt_offset);
+                               break;
+                               case USB_RX_AGG_USB:
+                               pkt_offset = (u16)_RND4(pkt_offset);
+                               break;
+                       case USB_RX_AGG_DISABLE:
+                       default:
+                               break;
+               }
+#endif
+
+#ifdef CONFIG_CONCURRENT_MODE
+               if(rtw_buddy_adapter_up(padapter))
+               {
+                       if(pre_recv_entry(precvframe, prxstat, pphy_info) != _SUCCESS)
+                       {
+                               RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("recvbuf2recvframe: recv_entry(precvframe) != _SUCCESS\n"));
+                       }
+               }
+               else
+               {
+                       rtl8192c_translate_rx_signal_stuff(precvframe, pphy_info);
+                       if(rtw_recv_entry(precvframe) != _SUCCESS)
+                       {
+                               RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("recvbuf2recvframe: rtw_recv_entry(precvframe) != _SUCCESS\n"));
+                       }
+               }
+
+#else
+               rtl8192c_translate_rx_signal_stuff(precvframe, pphy_info);
+               if(rtw_recv_entry(precvframe) != _SUCCESS)
+               {
+                       RT_TRACE(_module_rtl871x_recv_c_,_drv_err_,("recvbuf2recvframe: rtw_recv_entry(precvframe) != _SUCCESS\n"));
+               }
+#endif
+
+               pkt_cnt--;
+               transfer_len -= pkt_offset;
+               pbuf += pkt_offset;
+               precvframe = NULL;
+               pkt_copy = NULL;
+
+               if(transfer_len>0 && pkt_cnt==0)
+                       pkt_cnt = (le32_to_cpu(prxstat->rxdw2)>>16) & 0xff;
+
+       }while((transfer_len>0) && (pkt_cnt>0));
+
+_exit_recvbuf2recvframe:
+
+       return _SUCCESS;
+}
+
+void rtl8192cu_recv_tasklet(void *priv)
+{
+       _pkt                    *pskb;
+       _adapter                *padapter = (_adapter*)priv;
+       struct recv_priv        *precvpriv = &padapter->recvpriv;
+
+       while (NULL != (pskb = skb_dequeue(&precvpriv->rx_skb_queue)))
+       {
+               if ((padapter->bDriverStopped == _TRUE)||(padapter->bSurpriseRemoved== _TRUE))
+               {
+                       DBG_8192C("recv_tasklet => bDriverStopped or bSurpriseRemoved \n");
+                       rtw_skb_free(pskb);
+                       break;
+               }
+
+               recvbuf2recvframe(padapter, pskb);
+
+#ifdef CONFIG_PREALLOC_RECV_SKB
+
+               skb_reset_tail_pointer(pskb);
+
+               pskb->len = 0;
+
+               skb_queue_tail(&precvpriv->free_recv_skb_queue, pskb);
+
+#else
+               rtw_skb_free(pskb);
+#endif
+
+       }
+
+}
+
+
+static void usb_read_port_complete(struct urb *purb, struct pt_regs *regs)
+{
+       _irqL irqL;
+       uint isevt, *pbuf;
+       struct recv_buf *precvbuf = (struct recv_buf *)purb->context;
+       _adapter                        *padapter =(_adapter *)precvbuf->adapter;
+       struct recv_priv        *precvpriv = &padapter->recvpriv;
+
+       RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_complete!!!\n"));
+
+       //_enter_critical(&precvpriv->lock, &irqL);
+       //precvbuf->irp_pending=_FALSE;
+       //precvpriv->rx_pending_cnt --;
+       //_exit_critical(&precvpriv->lock, &irqL);
+
+       precvpriv->rx_pending_cnt --;
+
+       //if(precvpriv->rx_pending_cnt== 0)
+       //{
+       //      RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_complete: rx_pending_cnt== 0, set allrxreturnevt!\n"));
+       //      _rtw_up_sema(&precvpriv->allrxreturnevt);
+       //}
+
+       if(padapter->bSurpriseRemoved || padapter->bDriverStopped||padapter->bReadPortCancel)
+       {
+               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_complete:bDriverStopped(%d) OR bSurpriseRemoved(%d)\n", padapter->bDriverStopped, padapter->bSurpriseRemoved));
+
+       #ifdef CONFIG_PREALLOC_RECV_SKB
+               precvbuf->reuse = _TRUE;
+       #else
+               if(precvbuf->pskb){
+                       DBG_8192C("==> free skb(%p)\n",precvbuf->pskb);
+                       rtw_skb_free(precvbuf->pskb);
+               }
+       #endif
+               DBG_8192C("%s()-%d: RX Warning! bDriverStopped(%d) OR bSurpriseRemoved(%d) bReadPortCancel(%d)\n",
+               __FUNCTION__, __LINE__,padapter->bDriverStopped, padapter->bSurpriseRemoved,padapter->bReadPortCancel);
+               goto exit;
+       }
+
+       if(purb->status==0)//SUCCESS
+       {
+               if ((purb->actual_length > MAX_RECVBUF_SZ) || (purb->actual_length < RXDESC_SIZE))
+               {
+                       RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_complete: (purb->actual_length > MAX_RECVBUF_SZ) || (purb->actual_length < RXDESC_SIZE)\n"));
+                       precvbuf->reuse = _TRUE;
+                       rtw_read_port(padapter, precvpriv->ff_hwaddr, 0, (unsigned char *)precvbuf);
+                       DBG_8192C("%s()-%d: RX Warning!\n", __FUNCTION__, __LINE__);
+               }
+               else
+               {
+                       rtw_reset_continual_urb_error(adapter_to_dvobj(padapter));
+
+                       precvbuf->transfer_len = purb->actual_length;
+                       skb_put(precvbuf->pskb, purb->actual_length);
+                       skb_queue_tail(&precvpriv->rx_skb_queue, precvbuf->pskb);
+
+                       if (skb_queue_len(&precvpriv->rx_skb_queue)<=1)
+                               tasklet_schedule(&precvpriv->recv_tasklet);
+
+                       precvbuf->pskb = NULL;
+                       precvbuf->reuse = _FALSE;
+                       rtw_read_port(padapter, precvpriv->ff_hwaddr, 0, (unsigned char *)precvbuf);
+               }
+       }
+       else
+       {
+               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_complete : purb->status(%d) != 0 \n", purb->status));
+
+               DBG_8192C("###=> usb_read_port_complete => urb status(%d)\n", purb->status);
+
+               if(rtw_inc_and_chk_continual_urb_error(adapter_to_dvobj(padapter)) == _TRUE ){
+                       padapter->bSurpriseRemoved = _TRUE;
+               }
+
+               switch(purb->status) {
+                       case -EINVAL:
+                       case -EPIPE:
+                       case -ENODEV:
+                       case -ESHUTDOWN:
+                               //padapter->bSurpriseRemoved=_TRUE;
+                               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_complete:bSurpriseRemoved=TRUE\n"));
+                       case -ENOENT:
+                               padapter->bDriverStopped=_TRUE;
+                               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_complete:bDriverStopped=TRUE\n"));
+                               break;
+                       case -EPROTO:
+                       case -EILSEQ:
+                       case -ETIME:
+                       case -ECOMM:
+                       case -EOVERFLOW:
+                               #ifdef DBG_CONFIG_ERROR_DETECT
+                               {
+                                       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
+                                       pHalData->srestpriv.Wifi_Error_Status = USB_READ_PORT_FAIL;
+                               }
+                               #endif
+                               precvbuf->reuse = _TRUE;
+                               rtw_read_port(padapter, precvpriv->ff_hwaddr, 0, (unsigned char *)precvbuf);
+                               break;
+                       case -EINPROGRESS:
+                               precvpriv->read_port_complete_EINPROGRESS_cnt++;
+                               DBG_8192C("ERROR: URB IS IN PROGRESS!/n");
+                               break;
+                       default:
+                               precvpriv->read_port_complete_other_urb_err_cnt++;
+                               break;
+               }
+
+       }
+
+exit:
+
+_func_exit_;
+
+}
+
+static u32 usb_read_port(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *rmem)
+{
+       _irqL irqL;
+       int err;
+       unsigned int pipe;
+       SIZE_PTR tmpaddr=0;
+       SIZE_PTR alignment=0;
+       u32 ret = _SUCCESS;
+       PURB purb = NULL;
+       struct recv_buf *precvbuf = (struct recv_buf *)rmem;
+       _adapter                *adapter = pintfhdl->padapter;
+       struct dvobj_priv       *pdvobj = adapter_to_dvobj(adapter);
+       struct recv_priv        *precvpriv = &adapter->recvpriv;
+       struct usb_device       *pusbd = pdvobj->pusbdev;
+
+_func_enter_;
+
+       if(adapter->bDriverStopped || adapter->bSurpriseRemoved ||adapter->pwrctrlpriv.pnp_bstop_trx)
+       {
+               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port:( padapter->bDriverStopped ||padapter->bSurpriseRemoved ||adapter->pwrctrlpriv.pnp_bstop_trx)!!!\n"));
+               return _FAIL;
+       }
+
+#ifdef CONFIG_PREALLOC_RECV_SKB
+       if((precvbuf->reuse == _FALSE) || (precvbuf->pskb == NULL))
+       {
+               if (NULL != (precvbuf->pskb = skb_dequeue(&precvpriv->free_recv_skb_queue)))
+               {
+                       precvbuf->reuse = _TRUE;
+               }
+       }
+#endif
+
+
+       if(precvbuf !=NULL)
+       {
+               rtl8192cu_init_recvbuf(adapter, precvbuf);
+
+               //re-assign for linux based on skb
+               if((precvbuf->reuse == _FALSE) || (precvbuf->pskb == NULL))
+               {
+                       precvbuf->pskb = rtw_skb_alloc(MAX_RECVBUF_SZ + RECVBUFF_ALIGN_SZ);
+
+                       if(precvbuf->pskb == NULL)
+                       {
+                               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("init_recvbuf(): alloc_skb fail!\n"));
+                               precvpriv->recvbuf_skb_alloc_fail_cnt++;
+                               return _FAIL;
+                       }
+
+                       tmpaddr = (SIZE_PTR)precvbuf->pskb->data;
+                       alignment = tmpaddr & (RECVBUFF_ALIGN_SZ-1);
+                       skb_reserve(precvbuf->pskb, (RECVBUFF_ALIGN_SZ - alignment));
+
+                       precvbuf->phead = precvbuf->pskb->head;
+                       precvbuf->pdata = precvbuf->pskb->data;
+                       precvbuf->ptail = skb_tail_pointer(precvbuf->pskb);
+                       precvbuf->pend = skb_end_pointer(precvbuf->pskb);
+                       precvbuf->pbuf = precvbuf->pskb->data;
+               }
+               else//reuse skb
+               {
+                       precvbuf->phead = precvbuf->pskb->head;
+                       precvbuf->pdata = precvbuf->pskb->data;
+                       precvbuf->ptail = skb_tail_pointer(precvbuf->pskb);
+                       precvbuf->pend = skb_end_pointer(precvbuf->pskb);
+               precvbuf->pbuf = precvbuf->pskb->data;
+
+                       precvbuf->reuse = _FALSE;
+               }
+
+               //_enter_critical(&precvpriv->lock, &irqL);
+               //precvpriv->rx_pending_cnt++;
+               //precvbuf->irp_pending = _TRUE;
+               //_exit_critical(&precvpriv->lock, &irqL);
+
+               precvpriv->rx_pending_cnt++;
+
+               purb = precvbuf->purb;
+
+               //translate DMA FIFO addr to pipehandle
+               pipe = ffaddr2pipehdl(pdvobj, addr);
+
+               usb_fill_bulk_urb(purb, pusbd, pipe,
+                                               precvbuf->pbuf,
+                                               MAX_RECVBUF_SZ,
+                                               usb_read_port_complete,
+                                               precvbuf);//context is precvbuf
+
+               err = usb_submit_urb(purb, GFP_ATOMIC);
+               if((err) && (err != (-EPERM)))
+               {
+                       RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("cannot submit rx in-token(err=0x%.8x), URB_STATUS =0x%.8x", err, purb->status));
+                       DBG_8192C("cannot submit rx in-token(err = 0x%08x),urb_status = %d\n",err,purb->status);
+                       ret = _FAIL;
+               }
+       }
+       else
+       {
+               precvpriv->recvbuf_null_cnt++;
+               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port:precvbuf ==NULL\n"));
+               ret = _FAIL;
+       }
+
+_func_exit_;
+
+       return ret;
+}
+#endif // CONFIG_USE_USB_BUFFER_ALLOC_RX
+
+void rtl8192cu_xmit_tasklet(void *priv)
+{
+       int ret = _FALSE;
+       _adapter *padapter = (_adapter*)priv;
+       struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
+
+       if(check_fwstate(&padapter->mlmepriv, _FW_UNDER_SURVEY) == _TRUE)
+               return;
+
+       while(1)
+       {
+               if ((padapter->bDriverStopped == _TRUE)||(padapter->bSurpriseRemoved== _TRUE) || (padapter->bWritePortCancel == _TRUE))
+               {
+                       DBG_8192C("xmit_tasklet => bDriverStopped or bSurpriseRemoved or bWritePortCancel\n");
+                       break;
+               }
+
+               ret = rtl8192cu_xmitframe_complete(padapter, pxmitpriv, NULL);
+
+               if(ret==_FALSE)
+                       break;
+
+       }
+
+}
+
+void rtl8192cu_set_intf_ops(struct _io_ops     *pops)
+{
+       _func_enter_;
+
+       _rtw_memset((u8 *)pops, 0, sizeof(struct _io_ops));
+
+       pops->_read8 = &usb_read8;
+       pops->_read16 = &usb_read16;
+       pops->_read32 = &usb_read32;
+       pops->_read_mem = &usb_read_mem;
+       pops->_read_port = &usb_read_port;
+
+       pops->_write8 = &usb_write8;
+       pops->_write16 = &usb_write16;
+       pops->_write32 = &usb_write32;
+       pops->_writeN = &usb_writeN;
+
+#ifdef CONFIG_USB_SUPPORT_ASYNC_VDN_REQ
+       pops->_write8_async= &usb_async_write8;
+       pops->_write16_async = &usb_async_write16;
+       pops->_write32_async = &usb_async_write32;
+#endif
+       pops->_write_mem = &usb_write_mem;
+       pops->_write_port = &usb_write_port;
+
+       pops->_read_port_cancel = &usb_read_port_cancel;
+       pops->_write_port_cancel = &usb_write_port_cancel;
+
+#ifdef CONFIG_USB_INTERRUPT_IN_PIPE
+       pops->_read_interrupt = &usb_read_interrupt;
+#endif
+
+       _func_exit_;
+
+}
diff --git a/drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/usb/usb_ops_xp.c b/drivers/net/wireless/realtek/rtl8192cu/hal/rtl8192c/usb/usb_ops_xp.c
new file mode 100644 (file)
index 0000000..59143e3
--- /dev/null
@@ -0,0 +1,1264 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#define _HCI_OPS_OS_C_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <osdep_intf.h>
+#include <circ_buf.h>
+
+#if defined (PLATFORM_LINUX) && defined (PLATFORM_WINDOWS)
+       #error "Shall be Linux or Windows, but not both!\n"
+#endif
+
+#ifndef CONFIG_USB_HCI
+       #error "CONFIG_USB_HCI shall be on!\n"
+#endif
+
+
+#include <usb.h>
+#include <usbdlib.h>
+#include <usbioctl.h>
+
+#include <usb_ops.h>
+#include <recv_osdep.h>
+
+#include <usb_osintf.h>
+
+
+struct zero_bulkout_context
+{
+       void *pbuf;
+       void *purb;
+       void *pirp;
+       void *padapter;
+};
+
+#define usb_write_cmd usb_write_mem
+#define usb_read_cmd usb_read_mem
+#define usb_write_cmd_complete usb_write_mem_complete
+//#define usb_read_cmd_complete usb_read_mem_complete
+
+
+
+uint usb_init_intf_priv(struct intf_priv *pintfpriv)
+{
+
+       PURB    piorw_urb;
+       u8              NextDeviceStackSize;
+       struct dvobj_priv   *pdev = (struct dvobj_priv   *)pintfpriv->intf_dev;
+       _adapter * padapter=pdev->padapter;
+
+_func_enter_;
+
+       RT_TRACE(_module_hci_ops_os_c_,_drv_info_,("\n +usb_init_intf_priv\n"));
+
+       pintfpriv->intf_status = _IOREADY;
+
+       if(pdev->ishighspeed) pintfpriv->max_iosz =  128;
+       else pintfpriv->max_iosz =  64;
+
+
+       _init_timer(&pintfpriv->io_timer, padapter->hndis_adapter, io_irp_timeout_handler, pintfpriv);
+
+
+       RT_TRACE(_module_hci_ops_os_c_,_drv_info_,("usb_init_intf_priv:pintfpriv->max_iosz:%d\n",pintfpriv->max_iosz));
+
+       pintfpriv->io_wsz = 0;
+       pintfpriv->io_rsz = 0;
+
+       pintfpriv->allocated_io_rwmem = rtw_zmalloc(pintfpriv->max_iosz +4);
+
+       if (pintfpriv->allocated_io_rwmem == NULL){
+               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("\n usb_init_intf_priv:pintfpriv->allocated_io_rwmem == NULL\n"));
+               goto usb_init_intf_priv_fail;
+       }
+
+       pintfpriv->io_rwmem = pintfpriv->allocated_io_rwmem +  4 \
+                                       -( (u32)(pintfpriv->allocated_io_rwmem) & 3);
+
+
+
+     NextDeviceStackSize = (u8)pdev->nextdevstacksz;//pintfpriv->pUsbDevObj->StackSize + 1;
+
+      piorw_urb = (PURB)ExAllocatePool(NonPagedPool, sizeof(URB) );
+      if(piorw_urb == NULL)
+         goto usb_init_intf_priv_fail;
+
+      pintfpriv->piorw_urb = piorw_urb;
+
+      pintfpriv->piorw_irp = IoAllocateIrp(NextDeviceStackSize , FALSE);
+
+
+      pintfpriv->io_irp_cnt=1;
+      pintfpriv->bio_irp_pending=_FALSE;
+
+     _rtw_init_sema(&(pintfpriv->io_retevt), 0);//NdisInitializeEvent(&pintfpriv->io_irp_return_evt);
+
+_func_exit_;
+       return _SUCCESS;
+
+usb_init_intf_priv_fail:
+
+       if (pintfpriv->allocated_io_rwmem)
+               rtw_mfree((u8 *)(pintfpriv->allocated_io_rwmem), pintfpriv->max_iosz +4);
+
+       if(piorw_urb)
+               ExFreePool(piorw_urb);
+
+       RT_TRACE(_module_hci_ops_os_c_,_drv_info_,("\n -usb_init_intf_priv(usb_init_intf_priv_fail)\n"));
+
+_func_exit_;
+       return _FAIL;
+
+}
+
+void usb_unload_intf_priv(struct intf_priv *pintfpriv)
+{
+
+_func_enter_;
+
+       RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("\n+usb_unload_intf_priv\n"));
+
+       rtw_mfree((u8 *)(pintfpriv->allocated_io_rwmem), pintfpriv->max_iosz+4);
+
+#ifdef PLATFORM_WINDOWS
+       if(pintfpriv->piorw_urb)
+               ExFreePool(pintfpriv->piorw_urb);
+
+       if(pintfpriv->piorw_irp)
+               IoFreeIrp(pintfpriv->piorw_irp);
+#endif
+
+
+#ifdef PLATFORM_LINUX
+       RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("\npintfpriv->io_irp_cnt=%d\n",pintfpriv->io_irp_cnt));
+       pintfpriv->io_irp_cnt--;
+       if(pintfpriv->io_irp_cnt){
+               if(pintfpriv->bio_irp_pending==_TRUE){
+               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("\nkill iorw_urb\n"));
+               usb_kill_urb(pintfpriv->piorw_urb);
+               }
+               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("\n wait io_retevt\n"));
+               _rtw_down_sema(&(pintfpriv->io_retevt));
+       }
+       RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("\n cancel io_urb ok\n"));
+#endif
+
+       RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("\n-usb_unload_intf_priv\n"));
+
+_func_exit_;
+
+}
+
+void *ffaddr2pipehdl(struct dvobj_priv *pNdisCEDvice, u32 addr)
+{
+       HANDLE PipeHandle = NULL;
+       _adapter        *padapter = pNdisCEDvice->padapter;
+
+
+       if(pNdisCEDvice->nr_endpoint == 11)
+       {
+               switch(addr)
+               {
+                       case RTL8712_DMA_BEQ:
+                               PipeHandle= padapter->halpriv.pipehdls_r8712[3] ;
+                               break;
+                       case RTL8712_DMA_BKQ:
+                               PipeHandle=  padapter->halpriv.pipehdls_r8712[4];
+                               break;
+                       case RTL8712_DMA_VIQ:
+                               PipeHandle=  padapter->halpriv.pipehdls_r8712[2];
+                               break;
+                       case RTL8712_DMA_VOQ:
+                               PipeHandle=  padapter->halpriv.pipehdls_r8712[1];
+                               break;
+                     case RTL8712_DMA_BCNQ:
+                               PipeHandle=  padapter->halpriv.pipehdls_r8712[6];
+                               break;
+                       case RTL8712_DMA_BMCQ:  //HI Queue
+                               PipeHandle=  padapter->halpriv.pipehdls_r8712[7];
+                               break;
+                       case RTL8712_DMA_MGTQ:
+                               PipeHandle=  padapter->halpriv.pipehdls_r8712[8];
+                               break;
+                     case RTL8712_DMA_RX0FF:
+                               PipeHandle=  padapter->halpriv.pipehdls_r8712[0];
+                               break;
+                       case RTL8712_DMA_C2HCMD:
+                               PipeHandle=  padapter->halpriv.pipehdls_r8712[5];
+                               break;
+                       case RTL8712_DMA_H2CCMD:
+                               PipeHandle=  padapter->halpriv.pipehdls_r8712[9];
+                               break;
+
+               }
+
+       }
+       else if(pNdisCEDvice->nr_endpoint == 6)
+       {
+               switch(addr)
+               {
+                       case RTL8712_DMA_BEQ:
+                               PipeHandle=  padapter->halpriv.pipehdls_r8712[3];
+                               break;
+                       case RTL8712_DMA_BKQ:
+                               PipeHandle=  padapter->halpriv.pipehdls_r8712[4];
+                               break;
+                       case RTL8712_DMA_VIQ:
+                               PipeHandle=  padapter->halpriv.pipehdls_r8712[2];
+                               break;
+                       case RTL8712_DMA_VOQ:
+                               PipeHandle=  padapter->halpriv.pipehdls_r8712[1];
+                               break;
+                     case RTL8712_DMA_RX0FF:
+                       case RTL8712_DMA_C2HCMD:
+                               PipeHandle=  padapter->halpriv.pipehdls_r8712[0];
+                               break;
+                       case RTL8712_DMA_H2CCMD:
+                       case RTL8712_DMA_BCNQ:
+                       case RTL8712_DMA_BMCQ:
+                       case RTL8712_DMA_MGTQ:
+                               PipeHandle=  padapter->halpriv.pipehdls_r8712[5];
+                               break;
+
+               }
+
+       }
+       else if(pNdisCEDvice->nr_endpoint == 4)
+       {
+               switch(addr)
+               {
+                       case RTL8712_DMA_BEQ:
+                       //case RTL8712_DMA_BKQ:
+                               PipeHandle=  padapter->halpriv.pipehdls_r8712[2];
+                               break;
+                       //case RTL8712_DMA_VIQ:
+                       case RTL8712_DMA_VOQ:
+                               PipeHandle=  padapter->halpriv.pipehdls_r8712[1];
+                               break;
+                       case RTL8712_DMA_RX0FF:
+                       case RTL8712_DMA_C2HCMD:
+                               PipeHandle=  padapter->halpriv.pipehdls_r8712[0];
+                               break;
+                       case RTL8712_DMA_H2CCMD:
+                       case RTL8712_DMA_BCNQ:
+                       case RTL8712_DMA_BMCQ:
+                       case RTL8712_DMA_MGTQ:
+                               PipeHandle=  padapter->halpriv.pipehdls_r8712[3];
+                               break;
+               }
+
+       }
+       else
+       {
+          RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("ffaddr2pipehdl():nr_endpoint=%d error!\n", pNdisCEDvice->nr_endpoint));
+       }
+
+       return PipeHandle;
+
+}
+
+
+NTSTATUS usb_bulkout_zero_complete(
+       PDEVICE_OBJECT  pUsbDevObj,
+       PIRP            pIrp, void*     pZeroContext)
+{
+       struct zero_bulkout_context *pcontext = (struct zero_bulkout_context *)pZeroContext;
+
+_func_enter_;
+
+       if(pcontext)
+       {
+               if(pcontext->pbuf)
+               {
+                       ExFreePool(pcontext->pbuf);
+               }
+
+               if(pcontext->purb)
+               {
+                       ExFreePool(pcontext->purb);
+               }
+
+               if(pcontext->pirp && (pIrp ==pcontext->pirp))
+               {
+                       IoFreeIrp(pIrp);
+               }
+
+               ExFreePool(pcontext);
+       }
+
+_func_exit_;
+
+       return STATUS_MORE_PROCESSING_REQUIRED;
+
+
+}
+
+u32 usb_bulkout_zero(struct intf_hdl *pintfhdl, u32 addr)
+{
+       struct zero_bulkout_context *pcontext;
+       unsigned char *pbuf;
+       char NextDeviceStackSize, len;
+       PIO_STACK_LOCATION      nextStack;
+       USBD_STATUS             usbdstatus;
+       HANDLE                          PipeHandle;
+       PIRP                                    pirp = NULL;
+       PURB                            purb = NULL;
+       NDIS_STATUS                     ndisStatus = NDIS_STATUS_SUCCESS;
+       _adapter *padapter = (_adapter *)pintfhdl->adapter;
+       struct dvobj_priv       *pdvobj = (struct dvobj_priv *)&padapter->dvobjpriv;
+
+
+_func_enter_;
+
+       if((padapter->bDriverStopped) || (padapter->bSurpriseRemoved) ||(padapter->pwrctrlpriv.pnp_bstop_trx))
+       {
+               return _FAIL;
+       }
+
+       len = 0;
+       NextDeviceStackSize = (char)pdvobj->nextdevstacksz;
+
+       pcontext = (struct zero_bulkout_context *)ExAllocatePool(NonPagedPool, sizeof(struct zero_bulkout_context));
+       pbuf = (unsigned char *)ExAllocatePool(NonPagedPool, sizeof(int));
+       purb = (PURB)ExAllocatePool(NonPagedPool, sizeof(URB));
+       pirp = IoAllocateIrp(NextDeviceStackSize, FALSE);
+
+       pcontext->pbuf = pbuf;
+       pcontext->purb = purb;
+       pcontext->pirp = pirp;
+       pcontext->padapter = padapter;
+
+       //translate DMA FIFO addr to pipehandle
+       PipeHandle = ffaddr2pipehdl(pdvobj, addr);
+
+
+       // Build our URB for USBD
+       UsbBuildInterruptOrBulkTransferRequest(
+                               purb,
+                               sizeof(struct _URB_BULK_OR_INTERRUPT_TRANSFER),
+                               PipeHandle,
+                               pbuf,
+                               NULL,
+                               len,
+                               0,
+                               NULL);
+
+       //
+       // call the calss driver to perform the operation
+       // pass the URB to the USB driver stack
+       //
+       nextStack = IoGetNextIrpStackLocation(pirp);
+       nextStack->MajorFunction = IRP_MJ_INTERNAL_DEVICE_CONTROL;
+       nextStack->Parameters.Others.Argument1 = purb;
+       nextStack->Parameters.DeviceIoControl.IoControlCode = IOCTL_INTERNAL_USB_SUBMIT_URB;
+
+       //Set Completion Routine
+       IoSetCompletionRoutine(pirp,                                    // irp to use
+                                              usb_bulkout_zero_complete,       // callback routine
+                                              pcontext,                                // context
+                                              TRUE,                                    // call on success
+                                              TRUE,                                    // call on error
+                                              TRUE);                                   // call on cancel
+
+
+       // Call IoCallDriver to send the irp to the usb bus driver
+       //
+       ndisStatus = IoCallDriver(pdvobj->pnextdevobj, pirp);
+       usbdstatus = URB_STATUS(purb);
+
+       if( USBD_HALTED(usbdstatus) )
+       {
+               padapter->bDriverStopped=_TRUE;
+               padapter->bSurpriseRemoved=_TRUE;
+       }
+
+       //
+       // The usb bus driver should always return STATUS_PENDING when bulk out irp async
+       //
+       if ( ndisStatus != STATUS_PENDING )
+       {
+               return _FAIL;
+       }
+
+_func_exit_;
+
+       return _SUCCESS;
+
+}
+
+void usb_read_mem(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *rmem)
+{
+       _func_enter_;
+
+
+
+       _func_exit_;
+}
+
+NTSTATUS usb_write_mem_complete(PDEVICE_OBJECT pUsbDevObj, PIRP piowrite_irp, PVOID pusb_cnxt)
+{
+
+       _irqL irqL;
+       _list   *head, *plist;
+       struct io_req   *pio_req;
+       struct io_queue *pio_q = (struct io_queue *) pusb_cnxt;
+       struct intf_hdl *pintf = &(pio_q->intf);
+       struct intf_priv *pintfpriv = pintf->pintfpriv;
+       _adapter *padapter = (_adapter *)pintf->adapter;
+       NTSTATUS status = STATUS_SUCCESS;
+
+       head = &(pio_q->processing);
+
+       _func_enter_;
+
+       _enter_critical_bh(&(pio_q->lock), &irqL);
+
+       pintfpriv->io_irp_cnt--;
+       if(pintfpriv->io_irp_cnt ==0){
+               _rtw_up_sema(&(pintfpriv->io_retevt));
+       }
+
+       pintfpriv->bio_irp_pending=_FALSE;
+
+       switch(piowrite_irp->IoStatus.Status)
+       {
+               case STATUS_SUCCESS:
+                       break;
+
+               default:
+                       padapter->bSurpriseRemoved=_TRUE;
+                       RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("\n usbAsynIntOutComplete:pioread_irp->IoStatus.Status !=STATUS_SUCCESS\n"));
+                       break;
+       }
+
+       //free irp in processing list...
+       while(rtw_is_list_empty(head) != _TRUE)
+       {
+               plist = get_next(head);
+               rtw_list_delete(plist);
+               pio_req = LIST_CONTAINOR(plist, struct io_req, list);
+               _rtw_up_sema(&pio_req->sema);
+       }
+
+       _exit_critical_bh(&(pio_q->lock), &irqL);
+
+       _func_exit_;
+
+       return STATUS_MORE_PROCESSING_REQUIRED;
+
+}
+
+void usb_write_mem(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *wmem)
+{
+       u32 bwritezero;
+       _irqL   irqL;
+       USBD_STATUS                     usbdstatus;
+       PIO_STACK_LOCATION              nextStack;
+       HANDLE                          PipeHandle;
+       struct io_req *pio_req;
+
+       _adapter *adapter = (_adapter *)pintfhdl->adapter;
+       struct intf_priv *pintfpriv = pintfhdl->pintfpriv;
+       struct dvobj_priv   *pdev = (struct dvobj_priv   *)pintfpriv->intf_dev;
+       PURB    piorw_urb = pintfpriv->piorw_urb;
+       PIRP            piorw_irp  = pintfpriv->piorw_irp;
+       struct io_queue *pio_queue = (struct io_queue *)adapter->pio_queue;
+       NTSTATUS NtStatus = STATUS_SUCCESS;
+
+       _func_enter_;
+
+       pio_req = alloc_ioreq(pio_queue);
+
+       if ((pio_req == NULL)||(adapter->bSurpriseRemoved)){
+               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("async_irp_write32 : pio_req =0x%x adapter->bSurpriseRemoved=0x%x",pio_req,adapter->bSurpriseRemoved ));
+               goto exit;
+       }
+
+       _enter_critical_bh(&(pio_queue->lock), &irqL);
+
+       rtw_list_insert_tail(&(pio_req->list),&(pio_queue->processing));
+
+
+#ifdef NDIS51_MINIPORT
+       IoReuseIrp(piorw_irp, STATUS_SUCCESS);
+#else
+       piorw_irp->Cancel = _FALSE;
+#endif
+
+       if((adapter->bDriverStopped) || (adapter->bSurpriseRemoved) ||(adapter->pwrctrlpriv.pnp_bstop_trx))
+       {
+               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("\npadapter->pwrctrlpriv.pnp_bstop_trx==_TRUE\n"));
+               _func_exit_;
+               return;
+       }
+
+       //translate DMA FIFO addr to pipehandle
+       PipeHandle = ffaddr2pipehdl(pdev, addr);
+
+
+       pintfpriv->io_irp_cnt++;
+       pintfpriv->bio_irp_pending=_TRUE;
+       // Build our URB for USBD
+       UsbBuildInterruptOrBulkTransferRequest(
+                               piorw_urb,
+                               sizeof(struct _URB_BULK_OR_INTERRUPT_TRANSFER),
+                               PipeHandle,
+                               (PVOID)wmem,
+                               NULL,
+                               cnt,
+                               0,
+                               NULL);
+
+       //
+       // call the calss driver to perform the operation
+       // pass the URB to the USB driver stack
+       //
+       nextStack = IoGetNextIrpStackLocation(piorw_irp);
+       nextStack->MajorFunction = IRP_MJ_INTERNAL_DEVICE_CONTROL;
+       nextStack->Parameters.Others.Argument1 = (PURB)piorw_urb;
+       nextStack->Parameters.DeviceIoControl.IoControlCode = IOCTL_INTERNAL_USB_SUBMIT_URB;
+
+       IoSetCompletionRoutine(
+                               piorw_irp,                              // irp to use
+                               usb_write_mem_complete,         // routine to call when irp is done
+                               pio_queue,                              // context to pass routine
+                               TRUE,                                   // call on success
+                               TRUE,                                   // call on error
+                               TRUE);                                  // call on cancel
+
+       //
+       // Call IoCallDriver to send the irp to the usb port
+       //
+       NtStatus        = IoCallDriver(pdev->pnextdevobj, piorw_irp);
+       usbdstatus = URB_STATUS(piorw_urb);
+
+       //
+       // The USB driver should always return STATUS_PENDING when
+       // it receives a write irp
+       //
+       if ((NtStatus != STATUS_PENDING) || USBD_HALTED(usbdstatus) ) {
+
+               if( USBD_HALTED(usbdstatus) ) {
+
+                       RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_mem():USBD_HALTED(usbdstatus)=%X!\n",USBD_HALTED(usbdstatus)) );
+               }
+               _func_exit_;
+               return;//STATUS_UNSUCCESSFUL;
+       }
+
+       _exit_critical_bh(&(pio_queue->lock), &irqL);
+
+       _rtw_down_sema(&pio_req->sema);
+       free_ioreq(pio_req, pio_queue);
+
+
+       bwritezero = _FALSE;
+       if (pdev->ishighspeed)
+       {
+               if(cnt> 0 && cnt%512 == 0)
+                       bwritezero = _TRUE;
+
+       }
+       else
+       {
+               if(cnt > 0 && cnt%64 == 0)
+                       bwritezero = _TRUE;
+       }
+
+
+       if(bwritezero == _TRUE)
+       {
+               usb_bulkout_zero(pintfhdl, addr);
+       }
+
+exit:
+
+       _func_exit_;
+
+}
+
+NTSTATUS usb_read_port_complete(PDEVICE_OBJECT pUsbDevObj, PIRP pIrp, PVOID context)
+{
+       uint isevt, *pbuf;
+       struct _URB_BULK_OR_INTERRUPT_TRANSFER  *pbulkurb;
+       USBD_STATUS             usbdstatus;
+       struct recv_buf         *precvbuf = (struct recv_buf *)context;
+       _adapter                                *adapter =(_adapter *)precvbuf->adapter;
+       struct recv_priv                *precvpriv = &adapter->recvpriv;
+       struct dvobj_priv       *dev = (struct dvobj_priv   *)&adapter->dvobjpriv;
+       PURB                            purb = precvbuf->purb;
+       struct intf_hdl                 *pintfhdl = &adapter->pio_queue->intf;
+
+       //RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_complete!!!\n"));
+
+       usbdstatus = URB_STATUS(purb);
+
+       _rtw_spinlock_ex(&precvpriv->lock);
+       precvbuf->irp_pending=_FALSE;
+       precvpriv->rx_pending_cnt --;
+       _rtw_spinunlock_ex(&precvpriv->lock);
+
+       if(precvpriv->rx_pending_cnt== 0) {
+               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_complete: rx_pending_cnt== 0, set allrxreturnevt!\n"));
+               _rtw_up_sema(&precvpriv->allrxreturnevt);
+       }
+
+
+       if( pIrp->Cancel == _TRUE ) {
+
+               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_complete: One IRP has been cancelled succesfully\n"));
+               return STATUS_MORE_PROCESSING_REQUIRED;
+       }
+       if(adapter->bSurpriseRemoved) {
+
+               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_complete:bDriverStopped(%d) OR bSurpriseRemoved(%d)", adapter->bDriverStopped, adapter->bSurpriseRemoved));
+               return STATUS_MORE_PROCESSING_REQUIRED;
+       }
+
+       switch(pIrp->IoStatus.Status)
+       {
+               case STATUS_SUCCESS:
+
+                       pbulkurb = &(precvbuf->purb)->UrbBulkOrInterruptTransfer;
+                       if((pbulkurb->TransferBufferLength >(MAX_RECVBUF_SZ)) || (pbulkurb->TransferBufferLength < RXDESC_SIZE) )
+                       {
+                               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("\n usb_read_port_complete: (pbulkurb->TransferBufferLength > MAX_RECVBUF_SZ) || (pbulkurb->TransferBufferLength < RXDESC_SIZE)\n"));
+                               rtw_read_port(adapter, precvpriv->ff_hwaddr, 0, (unsigned char *)precvbuf);
+                       }
+                       else
+                       {
+                              precvbuf->transfer_len = pbulkurb->TransferBufferLength;
+
+                               pbuf = (uint*)precvbuf->pbuf;
+
+                               if((isevt = *(pbuf+1)&0x1ff) == 0x1ff)
+                               {
+                                       rxcmd_event_hdl(adapter, pbuf);//rx c2h events
+
+                                       rtw_read_port(adapter, precvpriv->ff_hwaddr, 0, (unsigned char *)precvbuf);
+                               }
+                               else
+                               {
+                                       if(recvbuf2recvframe(adapter, precvbuf)==_FAIL)//rx packets
+                                       {
+                                               //precvbuf->reuse = _TRUE;
+                                               rtw_read_port(adapter, precvpriv->ff_hwaddr, 0, (unsigned char *)precvbuf);
+                                       }
+                               }
+
+                       }
+
+                       break;
+
+               default:
+
+                       if( !USBD_HALTED(usbdstatus) )
+                       {
+                               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("\n usb_read_port_complete():USBD_HALTED(usbdstatus)=%x  (need to handle ) \n",USBD_HALTED(usbdstatus)));
+
+                       }
+                       else
+                       {
+                               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("\n usb_read_port_complete(): USBD_HALTED(usbdstatus)=%x \n\n", USBD_HALTED(usbdstatus)) );
+                               adapter->bDriverStopped = _TRUE;
+                               adapter->bSurpriseRemoved = _TRUE;
+                               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_complete(): USBD_HALTED(usbdstatus)=%x \n\n", USBD_HALTED(usbdstatus))) ;
+                       }
+
+                     break;
+
+       }
+
+       return STATUS_MORE_PROCESSING_REQUIRED;
+
+}
+
+u32 usb_read_port(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *rmem)
+{
+       u8                                      *pdata;
+       u16                                     size;
+       PURB                            purb;
+       PIRP                                    pirp;
+       PIO_STACK_LOCATION      nextStack;
+       NTSTATUS                        ntstatus;
+       USBD_STATUS             usbdstatus;
+       HANDLE                          PipeHandle;
+       struct recv_buf         *precvbuf = (struct recv_buf *)rmem;
+       struct intf_priv                *pintfpriv = pintfhdl->pintfpriv;
+       struct dvobj_priv               *pdev = (struct dvobj_priv   *)pintfpriv->intf_dev;
+       _adapter                                *adapter = (_adapter *)pdev->padapter;
+       struct recv_priv                *precvpriv = &adapter->recvpriv;
+       u32                                     bResult = _FALSE;
+
+_func_enter_;
+
+       if(adapter->bDriverStopped || adapter->bSurpriseRemoved ||adapter->pwrctrlpriv.pnp_bstop_trx) {
+               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port:( padapter->bDriverStopped ||padapter->bSurpriseRemoved ||adapter->pwrctrlpriv.pnp_bstop_trx)!!!\n"));
+               return bResult;
+       }
+
+       if(precvbuf !=NULL)
+       {
+
+               rtl8192cu_init_recvbuf(adapter, precvbuf);
+
+               _rtw_spinlock(&precvpriv->lock);
+               precvpriv->rx_pending_cnt++;
+               precvbuf->irp_pending = _TRUE;
+               _rtw_spinunlock(&precvpriv->lock);
+
+              pdata = (u8*)precvbuf->pbuf;
+
+               size     = sizeof( struct _URB_BULK_OR_INTERRUPT_TRANSFER );
+               purb = precvbuf->purb;
+
+               //translate DMA FIFO addr to pipehandle
+               PipeHandle = ffaddr2pipehdl(pdev, addr);
+
+               UsbBuildInterruptOrBulkTransferRequest(
+                       purb,
+                       (USHORT)size,
+                       PipeHandle,
+                       pdata,
+                       NULL,
+                       MAX_RECVBUF_SZ,
+                       USBD_TRANSFER_DIRECTION_IN | USBD_SHORT_TRANSFER_OK,
+                       NULL
+                       );
+
+               pirp = precvbuf->pirp;
+
+#if NDIS51_MINIPORT
+               IoReuseIrp(pirp, STATUS_SUCCESS);
+#else
+               pirp->Cancel = _FALSE;
+#endif
+
+               // call the class driver to perform the operation
+               // and pass the URB to the USB driver stack
+               nextStack = IoGetNextIrpStackLocation(pirp);
+               nextStack->Parameters.Others.Argument1 = purb;
+               nextStack->Parameters.DeviceIoControl.IoControlCode = IOCTL_INTERNAL_USB_SUBMIT_URB;
+               nextStack->MajorFunction = IRP_MJ_INTERNAL_DEVICE_CONTROL;
+
+               IoSetCompletionRoutine(
+                       pirp,                                   // irp to use
+                       usb_read_port_complete, // routine to call when irp is done
+                       precvbuf,                                       // context to pass routine
+                       TRUE,                                   // call on success
+                       TRUE,                                   // call on error
+                       TRUE);                                  // call on cancel
+
+               //
+               // The IoCallDriver routine
+               // sends an IRP to the driver associated with a specified device object.
+               //
+               ntstatus = IoCallDriver(pdev->pnextdevobj, pirp);
+               usbdstatus = URB_STATUS(purb);
+
+               if( USBD_HALTED(usbdstatus) ) {
+                       RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("\n usb_read_port(): USBD_HALTED(usbdstatus=0x%.8x)=%.8x  \n\n", usbdstatus, USBD_HALTED(usbdstatus)));
+                       pdev->padapter->bDriverStopped=_TRUE;
+                       pdev->padapter->bSurpriseRemoved=_TRUE;
+               }
+
+               if( ntstatus == STATUS_PENDING )
+               {
+                       bResult = _TRUE;// The IRP is pended in USBD as we expected.
+               }
+               else {
+                       RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port(): IoCallDriver failed!!! IRP STATUS: %X\n", ntstatus));
+                       RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port(): IoCallDriver failed!!! USB STATUS: %X\n", usbdstatus));
+               }
+
+       }
+       else{
+               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port:precv_frame ==NULL\n"));
+       }
+
+_func_exit_;
+
+       return bResult;
+
+}
+
+void usb_read_port_cancel(_adapter *padapter)
+{
+       struct recv_buf  *precvbuf;
+       sint i;
+       struct dvobj_priv   *pdev = &padapter->dvobjpriv;
+       struct recv_priv *precvpriv=&padapter->recvpriv;
+
+       RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("\n ==>usb_read_port_cancel\n"));
+
+       _rtw_spinlock(&precvpriv->lock);
+       precvpriv->rx_pending_cnt--; //decrease 1 for Initialize ++
+       _rtw_spinunlock(&precvpriv->lock);
+
+       if (precvpriv->rx_pending_cnt)
+       {
+               // Canceling Pending Recv Irp
+               precvbuf = (struct recv_buf  *)precvpriv->precv_buf;
+
+               for( i = 0; i < NR_RECVBUFF; i++ )
+               {
+                       if (precvbuf->irp_pending == _TRUE)
+                       {
+                               IoCancelIrp(precvbuf->pirp);
+                               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_cancel() :IoCancelIrp\n"));
+                       }
+
+                       precvbuf++;
+               }
+
+               _rtw_down_sema(&precvpriv->allrxreturnevt);
+
+               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_read_port_cancel:down sema\n"));
+
+       }
+
+       RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("<==usb_read_port_cancel\n"));
+
+}
+
+NTSTATUS usb_write_port_complete(
+       PDEVICE_OBJECT  pUsbDevObj,
+       PIRP                            pIrp,
+       PVOID                   pTxContext
+)
+{
+       u32     i, bIrpSuccess, sz;
+       NTSTATUS        status = STATUS_SUCCESS;
+       u8 *ptr;
+       struct xmit_frame       *pxmitframe = (struct xmit_frame *) pTxContext;
+        struct xmit_buf *pxmitbuf = pxmitframe->pxmitbuf;
+       _adapter                        *padapter = pxmitframe->padapter;
+       struct dvobj_priv       *pdev = (struct dvobj_priv *)&padapter->dvobjpriv;
+       struct io_queue *pio_queue = (struct io_queue *)padapter->pio_queue;
+       struct intf_hdl *pintfhdl = &(pio_queue->intf);
+       struct xmit_priv        *pxmitpriv = &padapter->xmitpriv;
+
+_func_enter_;
+
+       RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("+usb_write_port_complete\n"));
+
+       _rtw_spinlock_ex(&pxmitpriv->lock);
+       pxmitpriv->txirp_cnt--;
+       _rtw_spinunlock_ex(&pxmitpriv->lock);
+
+       if(pxmitpriv->txirp_cnt==0){
+               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port_complete: txirp_cnt== 0, set allrxreturnevt!\n"));
+               _rtw_up_sema(&(pxmitpriv->tx_retevt));
+       }
+
+       status = pIrp->IoStatus.Status;
+
+       if( status == STATUS_SUCCESS )
+               bIrpSuccess = _TRUE;
+       else
+               bIrpSuccess = _FALSE;
+
+       if( pIrp->Cancel == _TRUE )
+       {
+           if(pxmitframe !=NULL)
+           {
+                       RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("\n usb_write_port_complete:pIrp->Cancel == _TRUE,(pxmitframe !=NULL\n"));
+                       rtw_free_xmitframe(pxmitpriv, pxmitframe);
+           }
+
+            return STATUS_MORE_PROCESSING_REQUIRED;
+       }
+
+       if(padapter->bSurpriseRemoved)
+       {
+               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port_complete:bDriverStopped(%d) OR bSurpriseRemoved(%d)", padapter->bDriverStopped, padapter->bSurpriseRemoved));
+               return STATUS_MORE_PROCESSING_REQUIRED;
+       }
+
+
+       //
+       // Send 0-byte here if necessary.
+       //
+       // <Note>
+       // 1. We MUST keep at most one IRP pending in each endpoint, otherwise USB host controler driver will hang.
+       // Besides, even 0-byte IRP shall be count into #IRP sent down, so, we send 0-byte here instead of TxFillDescriptor8187().
+       // 2. If we don't count 0-byte IRP into an #IRP sent down, Tx will stuck when we download files via BT and
+       // play online video on XP SP1 EHCU.
+       // 2005.12.26, by rcnjko.
+       //
+
+
+       for(i=0; i< 8; i++)
+       {
+            if(pIrp == pxmitframe->pxmit_irp[i])
+            {
+                   pxmitframe->bpending[i] = _FALSE;//
+                   //ac_tag = pxmitframe->ac_tag[i];
+                  sz = pxmitframe->sz[i];
+                   break;
+            }
+       }
+
+#if 0
+       pxmitframe->fragcnt--;
+       if(pxmitframe->fragcnt == 0)// if((pxmitframe->fragcnt == 0) && (pxmitframe->irpcnt == 8)){
+       {
+               //RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("\n usb_write_port_complete:pxmitframe->fragcnt == 0\n"));
+               rtw_free_xmitframe(pxmitpriv,pxmitframe);
+       }
+#else
+
+       //not to consider tx fragment
+       rtw_free_xmitframe(pxmitpriv, pxmitframe);
+
+#endif
+
+       rtl8192cu_xmitframe_complete(padapter, pxmitpriv, pxmitbuf);
+
+_func_exit_;
+
+       return STATUS_MORE_PROCESSING_REQUIRED;
+
+}
+
+u32 usb_write_port(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *wmem)
+{
+       u32 i, bwritezero;
+       u8 *ptr;
+       PIO_STACK_LOCATION      nextStack;
+       USBD_STATUS             usbdstatus;
+       HANDLE                          PipeHandle;
+       PIRP                                    pirp = NULL;
+       PURB                            purb = NULL;
+       NDIS_STATUS                     ndisStatus = NDIS_STATUS_SUCCESS;
+       _adapter *padapter = (_adapter *)pintfhdl->adapter;
+       struct dvobj_priv       *pNdisCEDvice = (struct dvobj_priv   *)&padapter->dvobjpriv;
+       struct xmit_priv        *pxmitpriv = &padapter->xmitpriv;
+       struct xmit_frame *pxmitframe = (struct xmit_frame *)wmem;
+
+_func_enter_;
+
+       if((padapter->bDriverStopped) || (padapter->bSurpriseRemoved) ||(padapter->pwrctrlpriv.pnp_bstop_trx))
+       {
+               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port:( padapter->bDriverStopped ||padapter->bSurpriseRemoved ||adapter->pwrctrlpriv.pnp_bstop_trx)!!!\n"));
+               return _FAIL;
+       }
+
+
+       for(i=0; i<8; i++)
+       {
+               if(pxmitframe->bpending[i] == _FALSE)
+               {
+                       _rtw_spinlock(&pxmitpriv->lock);
+                       pxmitpriv->txirp_cnt++;
+                       pxmitframe->bpending[i]  = _TRUE;
+                       _rtw_spinunlock(&pxmitpriv->lock);
+
+                       pxmitframe->sz[i] = cnt;
+                       purb    = pxmitframe->pxmit_urb[i];
+                       pirp    = pxmitframe->pxmit_irp[i];
+
+                       //pxmitframe->ac_tag[i] = ac_tag;
+
+                       break;
+               }
+       }
+
+       bwritezero = _FALSE;
+       if (pNdisCEDvice->ishighspeed)
+       {
+               if(cnt> 0 && cnt%512 == 0)
+               {
+                       RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("ishighspeed, cnt=%d\n", cnt));
+                       //cnt=cnt+1;
+                       bwritezero = _TRUE;
+               }
+       }
+       else
+       {
+               if(cnt > 0 && cnt%64 == 0)
+               {
+                       RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("cnt=%d\n", cnt));
+                       //cnt=cnt+1;
+                       bwritezero = _TRUE;
+               }
+       }
+
+
+#ifdef NDIS51_MINIPORT
+       IoReuseIrp(pirp, STATUS_SUCCESS);
+#else
+       pirp->Cancel = _FALSE;
+#endif
+
+
+       //translate DMA FIFO addr to pipehandle
+       PipeHandle = ffaddr2pipehdl(pNdisCEDvice, addr);
+
+
+       // Build our URB for USBD
+       UsbBuildInterruptOrBulkTransferRequest(
+                               purb,
+                               sizeof(struct _URB_BULK_OR_INTERRUPT_TRANSFER),
+                               PipeHandle,
+                               pxmitframe->mem_addr,
+                               NULL,
+                               cnt,
+                               0,
+                               NULL);
+
+       //
+       // call the calss driver to perform the operation
+       // pass the URB to the USB driver stack
+       //
+       nextStack = IoGetNextIrpStackLocation(pirp);
+       nextStack->MajorFunction = IRP_MJ_INTERNAL_DEVICE_CONTROL;
+       nextStack->Parameters.Others.Argument1 = purb;
+       nextStack->Parameters.DeviceIoControl.IoControlCode = IOCTL_INTERNAL_USB_SUBMIT_URB;
+
+       //Set Completion Routine
+       IoSetCompletionRoutine(pirp,                                    // irp to use
+                                              usb_write_port_complete, // callback routine
+                                              pxmitframe,                              // context
+                                              TRUE,                                    // call on success
+                                              TRUE,                                    // call on error
+                                              TRUE);                                   // call on cancel
+
+
+       // Call IoCallDriver to send the irp to the usb bus driver
+       //
+       ndisStatus = IoCallDriver(pNdisCEDvice->pnextdevobj, pirp);
+       usbdstatus = URB_STATUS(purb);
+
+       if( USBD_HALTED(usbdstatus) )
+       {
+               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("\n usb_write_port(): USBD_HALTED(usbdstatus)=%x set bDriverStopped TRUE!\n\n",USBD_HALTED(usbdstatus)) );
+               padapter->bDriverStopped=_TRUE;
+               padapter->bSurpriseRemoved=_TRUE;
+       }
+
+       //
+       // The usb bus driver should always return STATUS_PENDING when bulk out irp async
+       //
+       if ( ndisStatus != STATUS_PENDING )
+       {
+               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("\n usb_write_port(): ndisStatus(%x) != STATUS_PENDING!\n\n", ndisStatus));
+
+               _func_exit_;
+
+               return _FAIL;
+       }
+
+       if(bwritezero == _TRUE)
+       {
+               usb_bulkout_zero(pintfhdl, addr);
+       }
+
+
+_func_exit_;
+
+       return _SUCCESS;
+
+}
+
+
+void usb_write_port_cancel(_adapter *padapter)
+{
+
+       sint i,j;
+       struct dvobj_priv   *pdev = &padapter->dvobjpriv;
+       struct xmit_priv *pxmitpriv=&padapter->xmitpriv;
+       struct xmit_frame *pxmitframe;
+
+       _rtw_spinlock(&pxmitpriv->lock);
+       pxmitpriv->txirp_cnt--; //decrease 1 for Initialize ++
+       _rtw_spinunlock(&pxmitpriv->lock);
+
+       if (pxmitpriv->txirp_cnt)
+       {
+               // Canceling Pending Recv Irp
+               pxmitframe= (struct xmit_frame *)pxmitpriv->pxmit_frame_buf;
+
+               for( i = 0; i < NR_XMITFRAME; i++ )
+               {
+                       for(j=0;j<8;j++)
+                       {
+                               if (pxmitframe->bpending[j]==_TRUE)
+                               {
+                                       IoCancelIrp(pxmitframe->pxmit_irp[j]);
+                                       RT_TRACE(_module_hci_ops_os_c_,_drv_err_,(" usb_write_port_cancel() :IoCancelIrp\n"));
+
+                               }
+                       }
+
+                       pxmitframe++;
+               }
+
+               _rtw_down_sema(&(pxmitpriv->tx_retevt));
+
+       }
+
+}
+
+
+/*! \brief Wrap the pUrb to an IRP and send this IRP to Bus Driver. Then wait for this IRP completion.
+       The Caller shall be at Passive Level.
+*/
+NTSTATUS  sync_callusbd(struct dvobj_priv *pdvobjpriv, PURB purb)
+{
+
+       KEVENT                                  kevent;
+       PIRP                                            irp;
+       IO_STATUS_BLOCK         iostatusblock;
+       PIO_STACK_LOCATION              nextstack;
+       USBD_STATUS                     usbdstatus;
+       LARGE_INTEGER                   waittime;
+       NTSTATUS ntstatus = STATUS_SUCCESS;
+       _adapter *padapter = pdvobjpriv->padapter;
+
+
+       _func_enter_;
+
+//     if(padapter->bDriverStopped) {
+//             goto exit;
+//     }
+
+       KeInitializeEvent(&kevent, NotificationEvent, _FALSE);
+       irp = IoBuildDeviceIoControlRequest(
+                       IOCTL_INTERNAL_USB_SUBMIT_URB,
+                       pdvobjpriv->pphysdevobj,//CEdevice->pUsbDevObj,
+                       NULL,
+                       0,
+                       NULL,
+                       0,
+                       _TRUE,
+                       &kevent,
+                       &iostatusblock);
+
+       if(irp == NULL) {
+               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("SyncCallUSBD: memory alloc for irp failed\n"));
+               ntstatus=STATUS_INSUFFICIENT_RESOURCES;
+               goto exit;
+       }
+
+       nextstack = IoGetNextIrpStackLocation(irp);
+       if(nextstack == NULL)
+               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("IoGetNextIrpStackLocation fail\n"));
+
+       nextstack->Parameters.Others.Argument1 = purb;
+
+       // Issue an IRP for Sync IO.
+       ntstatus = IoCallDriver(pdvobjpriv->pphysdevobj, irp);
+       usbdstatus = URB_STATUS(purb);
+
+       if(ntstatus == STATUS_PENDING)
+       {
+               // Method 1
+               waittime.QuadPart = -10000 * 50000;
+               ntstatus = KeWaitForSingleObject(&kevent, Executive, KernelMode, _FALSE, &waittime); //8150 code
+
+               // Method 2
+               //ntStatus = KeWaitForSingleObject(&Kevent, Executive, KernelMode, FALSE, NULL); //DDK sample
+
+               usbdstatus = URB_STATUS(purb);
+
+               if(ntstatus == STATUS_TIMEOUT)
+               {
+                       //usbdevice->nIoStuckCnt++;
+                       RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("SyncCallUSBD: TIMEOUT....5000ms\n"));
+
+                       // Method 2
+                       IoCancelIrp(irp);
+                       ntstatus = KeWaitForSingleObject(&kevent, Executive, KernelMode, _FALSE, NULL); //DDK sample
+                       usbdstatus = URB_STATUS(purb);
+
+                       usbdstatus = USBD_STATUS_SUCCESS;
+               }
+
+       }
+
+exit:
+
+       _func_exit_;
+
+       return ntstatus;
+
+}
+int usbctrl_vendorreq(struct intf_priv *pintfpriv, u8 request, u16 value, u16 index, void *pdata, u16 len, u8 requesttype)
+{
+       PURB                    purb;
+       u8                              ret;
+       unsigned long           transferflags;
+       NTSTATUS                ntstatus;
+
+       struct dvobj_priv  *pdvobjpriv = (struct dvobj_priv  *)pintfpriv->intf_dev;
+
+       _func_enter_;
+
+       ret=_TRUE;
+       purb = (PURB)ExAllocatePool(NonPagedPool, sizeof(struct _URB_CONTROL_VENDOR_OR_CLASS_REQUEST) );
+       if(purb == NULL) {
+
+               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usbctrl_vendorreq(): Failed to allocate urb !!!\n"));
+               ret =_FALSE;
+               goto exit;
+       }
+
+       if (requesttype == 0x01) {
+               transferflags = USBD_TRANSFER_DIRECTION_IN;//read_in
+       } else {
+               transferflags= 0;//write_out
+       }
+
+       UsbBuildVendorRequest(
+                       purb,           //Pointer to an URB that is to be formatted as a vendor or class request.
+                       URB_FUNCTION_VENDOR_DEVICE,     //Indicates the URB is a vendor-defined request for a USB device.
+                       sizeof(struct _URB_CONTROL_VENDOR_OR_CLASS_REQUEST),  //Specifies the length, in bytes, of the URB.
+                       transferflags,  //TransferFlags
+                       0,                      //ReservedBits
+                       request,        //Request
+                       value,          //Value
+                       index,          //Index
+                       pdata,          //TransferBuffer
+                       NULL,           //TransferBufferMDL
+                       len,                    //TransferBufferLength
+                       NULL            //Link
+       );
+
+       ntstatus = sync_callusbd(pdvobjpriv, purb);
+       if(!NT_SUCCESS(ntstatus))
+       {
+               ExFreePool(purb);
+               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,(" usbctrl_vendorreq() : SOMETHING WRONG\n") );
+               ret = _FALSE;
+               goto exit;
+       }
+
+       ExFreePool(purb);
+
+exit:
+       _func_exit_;
+
+       return ret;
+
+}
diff --git a/drivers/net/wireless/realtek/rtl8192cu/ifcfg-wlan0 b/drivers/net/wireless/realtek/rtl8192cu/ifcfg-wlan0
new file mode 100755 (executable)
index 0000000..7ecb7ae
--- /dev/null
@@ -0,0 +1,4 @@
+#DHCP client
+DEVICE=wlan0
+BOOTPROTO=dhcp
+ONBOOT=yes
\ No newline at end of file
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/Hal8192CEHWImg.h b/drivers/net/wireless/realtek/rtl8192cu/include/Hal8192CEHWImg.h
new file mode 100644 (file)
index 0000000..2ae36e4
--- /dev/null
@@ -0,0 +1,85 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __INC_HAL8192CE_FW_IMG_H
+#define __INC_HAL8192CE_FW_IMG_H
+
+#include <basic_types.h>
+
+/*Created on  2011/ 6/15,  5:45*/
+
+#ifdef CONFIG_BT_COEXISTENCE
+#define TSMCImgArrayLength 15706 //v84 TSMC COMMON 2012-04-13
+#else //#ifdef CONFIG_P2P
+#define TSMCImgArrayLength 16126 //v88 TSMC P2PPS with CCX report C2H 2012-12-05
+#endif
+extern u8 Rtl8192CEFwTSMCImgArray[TSMCImgArrayLength];
+
+#ifdef CONFIG_BT_COEXISTENCE
+#define UMCACutImgArrayLength 16248 //v79 UMC A Cut COMMON 2011-10-06
+#else //#ifdef CONFIG_P2P
+#define UMCACutImgArrayLength 16126 //v88 UMC A Cut P2PPS with CCX report C2H 2012-12-05
+#endif
+extern u8 Rtl8192CEFwUMCACutImgArray[UMCACutImgArrayLength];
+
+#ifdef CONFIG_BT_COEXISTENCE
+#define UMCBCutImgArrayLength 15686 //v84 UMC B Cut COMMON 2012-04-13
+#else //#ifdef CONFIG_P2P
+#define UMCBCutImgArrayLength 16096 //v88 UMC B Cut P2PPS with CCX report C2H 2012-12-05
+#endif
+extern u8 Rtl8192CEFwUMCBCutImgArray[UMCBCutImgArrayLength];
+
+//8192C_Formal_92CE_PHYforMP_110804 2011-11-23
+//8188C_Formal_88CE_PHYforMP_111117 2011-11-23
+
+#define PHY_REG_2TArrayLength 374
+extern u32 Rtl8192CEPHY_REG_2TArray[PHY_REG_2TArrayLength];
+#define PHY_REG_1TArrayLength 374
+extern u32 Rtl8192CEPHY_REG_1TArray[PHY_REG_1TArrayLength];
+#define PHY_ChangeTo_1T1RArrayLength 1
+extern u32 Rtl8192CEPHY_ChangeTo_1T1RArray[PHY_ChangeTo_1T1RArrayLength];
+#define PHY_ChangeTo_1T2RArrayLength 1
+extern u32 Rtl8192CEPHY_ChangeTo_1T2RArray[PHY_ChangeTo_1T2RArrayLength];
+#define PHY_ChangeTo_2T2RArrayLength 1
+extern u32 Rtl8192CEPHY_ChangeTo_2T2RArray[PHY_ChangeTo_2T2RArrayLength];
+#define PHY_REG_Array_PGLength 336
+extern u32 Rtl8192CEPHY_REG_Array_PG[PHY_REG_Array_PGLength];
+#define PHY_REG_Array_MPLength 4
+extern u32 Rtl8192CEPHY_REG_Array_MP[PHY_REG_Array_MPLength];
+#define RadioA_2TArrayLength 282
+extern u32 Rtl8192CERadioA_2TArray[RadioA_2TArrayLength];
+#define RadioB_2TArrayLength 78
+extern u32 Rtl8192CERadioB_2TArray[RadioB_2TArrayLength];
+#define RadioA_1TArrayLength 282
+extern u32 Rtl8192CERadioA_1TArray[RadioA_1TArrayLength];
+#define RadioB_1TArrayLength 1
+extern u32 Rtl8192CERadioB_1TArray[RadioB_1TArrayLength];
+#define RadioB_GM_ArrayLength 1
+extern u32 Rtl8192CERadioB_GM_Array[RadioB_GM_ArrayLength];
+// MAC reg V14 - 2011-11-23
+#define MAC_2T_ArrayLength 174
+extern u32 Rtl8192CEMAC_2T_Array[MAC_2T_ArrayLength];
+#define MACPHY_Array_PGLength 1
+extern u32 Rtl8192CEMACPHY_Array_PG[MACPHY_Array_PGLength];
+#define AGCTAB_2TArrayLength 320
+extern u32 Rtl8192CEAGCTAB_2TArray[AGCTAB_2TArrayLength];
+#define AGCTAB_1TArrayLength 320
+extern u32 Rtl8192CEAGCTAB_1TArray[AGCTAB_1TArrayLength];
+
+#endif //__INC_HAL8192CE_FW_IMG_H
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/Hal8192CPhyCfg.h b/drivers/net/wireless/realtek/rtl8192cu/include/Hal8192CPhyCfg.h
new file mode 100644 (file)
index 0000000..918b520
--- /dev/null
@@ -0,0 +1,427 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+/*****************************************************************************
+ * Module:     __INC_HAL8192CPHYCFG_H
+ *
+ *
+ * Note:
+ *
+ *
+ * Export:     Constants, macro, functions(API), global variables(None).
+ *
+ * Abbrev:
+ *
+ * History:
+ *             Data            Who             Remark
+ *      08/07/2007  MHC        1. Porting from 9x series PHYCFG.h.
+ *                                                     2. Reorganize code architecture.
+ *
+ *****************************************************************************/
+ /* Check to see if the file has been included already.  */
+#ifndef __INC_HAL8192CPHYCFG_H
+#define __INC_HAL8192CPHYCFG_H
+
+
+/*--------------------------Define Parameters-------------------------------*/
+#define LOOP_LIMIT                             5
+#define MAX_STALL_TIME                 50              //us
+#define AntennaDiversityValue  0x80    //(Adapter->bSoftwareAntennaDiversity ? 0x00:0x80)
+#define MAX_TXPWR_IDX_NMODE_92S        63
+#define Reset_Cnt_Limit                        3
+
+#define IQK_MAC_REG_NUM                4
+#define IQK_ADDA_REG_NUM               16
+#define IQK_BB_REG_NUM                 9
+#define HP_THERMAL_NUM         8
+
+#ifdef CONFIG_PCI_HCI
+#define MAX_AGGR_NUM   0x0A0A
+#else
+#define MAX_AGGR_NUM   0x0909
+#endif
+
+#ifdef CONFIG_PCI_HCI
+#define        SET_RTL8192SE_RF_SLEEP(_pAdapter)                                                       \
+{                                                                                                                                      \
+       u1Byte          u1bTmp;                                                                                         \
+       u1bTmp = PlatformEFIORead1Byte(_pAdapter, REG_LDOV12D_CTRL);            \
+       u1bTmp |= BIT0;                                                                                                 \
+       PlatformEFIOWrite1Byte(_pAdapter, REG_LDOV12D_CTRL, u1bTmp);            \
+       PlatformEFIOWrite1Byte(_pAdapter, REG_SPS_OCP_CFG, 0x0);                                \
+       PlatformEFIOWrite1Byte(_pAdapter, TXPAUSE, 0xFF);                               \
+       PlatformEFIOWrite2Byte(_pAdapter, CMDR, 0x57FC);                                \
+       delay_us(100);                                                                                                  \
+       PlatformEFIOWrite2Byte(_pAdapter, CMDR, 0x77FC);                                \
+       PlatformEFIOWrite1Byte(_pAdapter, PHY_CCA, 0x0);                                \
+       delay_us(10);                                                                                                   \
+       PlatformEFIOWrite2Byte(_pAdapter, CMDR, 0x37FC);                                \
+       delay_us(10);                                                                                                   \
+       PlatformEFIOWrite2Byte(_pAdapter, CMDR, 0x77FC);                                \
+       delay_us(10);                                                                                                   \
+       PlatformEFIOWrite2Byte(_pAdapter, CMDR, 0x57FC);                                \
+}
+#endif
+
+
+/*--------------------------Define Parameters-------------------------------*/
+
+
+/*------------------------------Define structure----------------------------*/
+typedef enum _SwChnlCmdID{
+       CmdID_End,
+       CmdID_SetTxPowerLevel,
+       CmdID_BBRegWrite10,
+       CmdID_WritePortUlong,
+       CmdID_WritePortUshort,
+       CmdID_WritePortUchar,
+       CmdID_RF_WriteReg,
+}SwChnlCmdID;
+
+
+/* 1. Switch channel related */
+typedef struct _SwChnlCmd{
+       SwChnlCmdID     CmdID;
+       u32                     Para1;
+       u32                     Para2;
+       u32                     msDelay;
+}SwChnlCmd;
+
+typedef enum _HW90_BLOCK{
+       HW90_BLOCK_MAC = 0,
+       HW90_BLOCK_PHY0 = 1,
+       HW90_BLOCK_PHY1 = 2,
+       HW90_BLOCK_RF = 3,
+       HW90_BLOCK_MAXIMUM = 4, // Never use this
+}HW90_BLOCK_E, *PHW90_BLOCK_E;
+
+#define        RF_PATH_MAX                     2
+
+#define CHANNEL_MAX_NUMBER             14      // 14 is the max channel number
+#define CHANNEL_GROUP_MAX              3       // ch1~3, ch4~9, ch10~14 total three groups
+
+typedef enum _WIRELESS_MODE {
+       WIRELESS_MODE_UNKNOWN = 0x00,
+       WIRELESS_MODE_A = 0x01,
+       WIRELESS_MODE_B = 0x02,
+       WIRELESS_MODE_G = 0x04,
+       WIRELESS_MODE_AUTO = 0x08,
+       WIRELESS_MODE_N_24G = 0x10,
+       WIRELESS_MODE_N_5G = 0x20
+} WIRELESS_MODE;
+
+typedef enum _BaseBand_Config_Type{
+       BaseBand_Config_PHY_REG = 0,                    //Radio Path A
+       BaseBand_Config_AGC_TAB = 1,                    //Radio Path B
+}BaseBand_Config_Type, *PBaseBand_Config_Type;
+
+
+typedef enum _PHY_Rate_Tx_Power_Offset_Area{
+       RA_OFFSET_LEGACY_OFDM1,
+       RA_OFFSET_LEGACY_OFDM2,
+       RA_OFFSET_HT_OFDM1,
+       RA_OFFSET_HT_OFDM2,
+       RA_OFFSET_HT_OFDM3,
+       RA_OFFSET_HT_OFDM4,
+       RA_OFFSET_HT_CCK,
+}RA_OFFSET_AREA,*PRA_OFFSET_AREA;
+
+
+/* BB/RF related */
+typedef        enum _RF_TYPE_8190P{
+       RF_TYPE_MIN,    // 0
+       RF_8225=1,                      // 1 11b/g RF for verification only
+       RF_8256=2,                      // 2 11b/g/n
+       RF_8258=3,                      // 3 11a/b/g/n RF
+       RF_6052=4,              // 4 11b/g/n RF
+       //RF_6052=5,            // 4 11b/g/n RF
+       // TODO: We sholud remove this psudo PHY RF after we get new RF.
+       RF_PSEUDO_11N=5,        // 5, It is a temporality RF.
+}RF_TYPE_8190P_E,*PRF_TYPE_8190P_E;
+
+typedef struct _BB_REGISTER_DEFINITION{
+       u32 rfintfs;                    // set software control:
+                                                       //              0x870~0x877[8 bytes]
+
+       u32 rfintfi;                    // readback data:
+                                                       //              0x8e0~0x8e7[8 bytes]
+
+       u32 rfintfo;            // output data:
+                                                       //              0x860~0x86f [16 bytes]
+
+       u32 rfintfe;            // output enable:
+                                                       //              0x860~0x86f [16 bytes]
+
+       u32 rf3wireOffset;      // LSSI data:
+                                                       //              0x840~0x84f [16 bytes]
+
+       u32 rfLSSI_Select;      // BB Band Select:
+                                                       //              0x878~0x87f [8 bytes]
+
+       u32 rfTxGainStage;      // Tx gain stage:
+                                                       //              0x80c~0x80f [4 bytes]
+
+       u32 rfHSSIPara1;        // wire parameter control1 :
+                                                       //              0x820~0x823,0x828~0x82b, 0x830~0x833, 0x838~0x83b [16 bytes]
+
+       u32 rfHSSIPara2;        // wire parameter control2 :
+                                                       //              0x824~0x827,0x82c~0x82f, 0x834~0x837, 0x83c~0x83f [16 bytes]
+
+       u32 rfSwitchControl; //Tx Rx antenna control :
+                                                       //              0x858~0x85f [16 bytes]
+
+       u32 rfAGCControl1;      //AGC parameter control1 :
+                                                       //              0xc50~0xc53,0xc58~0xc5b, 0xc60~0xc63, 0xc68~0xc6b [16 bytes]
+
+       u32 rfAGCControl2;      //AGC parameter control2 :
+                                                       //              0xc54~0xc57,0xc5c~0xc5f, 0xc64~0xc67, 0xc6c~0xc6f [16 bytes]
+
+       u32 rfRxIQImbalance; //OFDM Rx IQ imbalance matrix :
+                                                       //              0xc14~0xc17,0xc1c~0xc1f, 0xc24~0xc27, 0xc2c~0xc2f [16 bytes]
+
+       u32 rfRxAFE;            //Rx IQ DC ofset and Rx digital filter, Rx DC notch filter :
+                                                       //              0xc10~0xc13,0xc18~0xc1b, 0xc20~0xc23, 0xc28~0xc2b [16 bytes]
+
+       u32 rfTxIQImbalance; //OFDM Tx IQ imbalance matrix
+                                                       //              0xc80~0xc83,0xc88~0xc8b, 0xc90~0xc93, 0xc98~0xc9b [16 bytes]
+
+       u32 rfTxAFE;            //Tx IQ DC Offset and Tx DFIR type
+                                                       //              0xc84~0xc87,0xc8c~0xc8f, 0xc94~0xc97, 0xc9c~0xc9f [16 bytes]
+
+       u32 rfLSSIReadBack;     //LSSI RF readback data SI mode
+                                                               //              0x8a0~0x8af [16 bytes]
+
+       u32 rfLSSIReadBackPi;   //LSSI RF readback data PI mode 0x8b8-8bc for Path A and B
+
+}BB_REGISTER_DEFINITION_T, *PBB_REGISTER_DEFINITION_T;
+
+#ifdef CONFIG_MP_INCLUDED
+typedef enum _ANTENNA_PATH{
+        ANTENNA_NONE   = 0x00,
+               ANTENNA_D               ,
+               ANTENNA_C               ,
+               ANTENNA_CD              ,
+               ANTENNA_B               ,
+               ANTENNA_BD              ,
+               ANTENNA_BC              ,
+               ANTENNA_BCD             ,
+               ANTENNA_A               ,
+               ANTENNA_AD              ,
+               ANTENNA_AC              ,
+               ANTENNA_ACD             ,
+               ANTENNA_AB              ,
+               ANTENNA_ABD             ,
+               ANTENNA_ABC             ,
+               ANTENNA_ABCD
+} ANTENNA_PATH;
+#endif
+
+typedef struct _R_ANTENNA_SELECT_OFDM{
+       u32                     r_tx_antenna:4;
+       u32                     r_ant_l:4;
+       u32                     r_ant_non_ht:4;
+       u32                     r_ant_ht1:4;
+       u32                     r_ant_ht2:4;
+       u32                     r_ant_ht_s1:4;
+       u32                     r_ant_non_ht_s1:4;
+       u32                     OFDM_TXSC:2;
+       u32                     Reserved:2;
+}R_ANTENNA_SELECT_OFDM;
+
+typedef struct _R_ANTENNA_SELECT_CCK{
+       u8                      r_cckrx_enable_2:2;
+       u8                      r_cckrx_enable:2;
+       u8                      r_ccktx_enable:4;
+}R_ANTENNA_SELECT_CCK;
+
+/*------------------------------Define structure----------------------------*/
+
+
+/*------------------------Export global variable----------------------------*/
+/*------------------------Export global variable----------------------------*/
+
+
+/*------------------------Export Marco Definition---------------------------*/
+/*------------------------Export Marco Definition---------------------------*/
+
+
+/*--------------------------Exported Function prototype---------------------*/
+//
+// BB and RF register read/write
+//
+u32    rtl8192c_PHY_QueryBBReg(        IN      PADAPTER        Adapter,
+                                                               IN      u32             RegAddr,
+                                                               IN      u32             BitMask );
+void   rtl8192c_PHY_SetBBReg(  IN      PADAPTER        Adapter,
+                                                               IN      u32             RegAddr,
+                                                               IN      u32             BitMask,
+                                                               IN      u32             Data    );
+u32    rtl8192c_PHY_QueryRFReg(        IN      PADAPTER                        Adapter,
+                                                               IN      RF_RADIO_PATH_E eRFPath,
+                                                               IN      u32                             RegAddr,
+                                                               IN      u32                             BitMask );
+void   rtl8192c_PHY_SetRFReg(  IN      PADAPTER                        Adapter,
+                                                               IN      RF_RADIO_PATH_E eRFPath,
+                                                               IN      u32                             RegAddr,
+                                                               IN      u32                             BitMask,
+                                                               IN      u32                             Data    );
+
+//
+// Initialization related function
+//
+/* MAC/BB/RF HAL config */
+int    PHY_MACConfig8192C(     IN      PADAPTER        Adapter );
+int    PHY_BBConfig8192C(      IN      PADAPTER        Adapter );
+int    PHY_RFConfig8192C(      IN      PADAPTER        Adapter );
+/* RF config */
+int    rtl8192c_PHY_ConfigRFWithParaFile(      IN      PADAPTER        Adapter,
+                                                                                               IN      u8*     pFileName,
+                                                                                               IN      RF_RADIO_PATH_E eRFPath);
+int    rtl8192c_PHY_ConfigRFWithHeaderFile(    IN      PADAPTER                        Adapter,
+                                                                                               IN      RF_RADIO_PATH_E eRFPath);
+
+/* BB/RF readback check for making sure init OK */
+int    rtl8192c_PHY_CheckBBAndRFOK(    IN      PADAPTER                        Adapter,
+                                                                               IN      HW90_BLOCK_E            CheckBlock,
+                                                                               IN      RF_RADIO_PATH_E eRFPath   );
+/* Read initi reg value for tx power setting. */
+void   rtl8192c_PHY_GetHWRegOriginalValue(     IN      PADAPTER                Adapter );
+
+//
+// RF Power setting
+//
+//extern       BOOLEAN PHY_SetRFPowerState(IN  PADAPTER                        Adapter,
+//                                                                     IN      RT_RF_POWER_STATE       eRFPowerState);
+
+//
+// BB TX Power R/W
+//
+void   PHY_GetTxPowerLevel8192C(       IN      PADAPTER                Adapter,
+                                                                                       OUT u32*                powerlevel      );
+void   PHY_SetTxPowerLevel8192C(       IN      PADAPTER                Adapter,
+                                                                                       IN      u8                      channel );
+BOOLEAN        PHY_UpdateTxPowerDbm8192C(      IN      PADAPTER        Adapter,
+                                                                                       IN      int             powerInDbm      );
+
+//
+VOID
+PHY_ScanOperationBackup8192C(IN        PADAPTER        Adapter,
+                                                                               IN      u8              Operation       );
+
+//
+// Switch bandwidth for 8192S
+//
+//extern       void    PHY_SetBWModeCallback8192C(     IN      PRT_TIMER               pTimer  );
+void   PHY_SetBWMode8192C(     IN      PADAPTER                        pAdapter,
+                                                                       IN      HT_CHANNEL_WIDTH        ChnlWidth,
+                                                                       IN      unsigned char   Offset  );
+
+//
+// Set FW CMD IO for 8192S.
+//
+//extern       BOOLEAN HalSetIO8192C(  IN      PADAPTER                        Adapter,
+//                                                                     IN      IO_TYPE                         IOType);
+
+//
+// Set A2 entry to fw for 8192S
+//
+extern void FillA2Entry8192C(          IN      PADAPTER                        Adapter,
+                                                                               IN      u8                              index,
+                                                                               IN      u8*                             val);
+
+
+//
+// channel switch related funciton
+//
+//extern       void    PHY_SwChnlCallback8192C(        IN      PRT_TIMER               pTimer  );
+void   PHY_SwChnl8192C(        IN      PADAPTER                pAdapter,
+                                                                       IN      u8                      channel );
+                               // Call after initialization
+void   PHY_SwChnlPhy8192C(     IN      PADAPTER                pAdapter,
+                                                                       IN      u8                      channel );
+
+void ChkFwCmdIoDone(   IN      PADAPTER        Adapter);
+
+#ifdef USE_WORKITEM
+//extern       void SetIOWorkItemCallback( IN PVOID            pContext );
+#else
+//extern       void SetIOTimerCallback( IN PRT_TIMER           pTimer);
+#endif
+
+//
+// BB/MAC/RF other monitor API
+//
+void   PHY_SetMonitorMode8192C(IN      PADAPTER        pAdapter,
+                                                                               IN      BOOLEAN         bEnableMonitorMode      );
+
+BOOLEAN        PHY_CheckIsLegalRfPath8192C(IN  PADAPTER        pAdapter,
+                                                                                       IN      u32             eRFPath );
+
+//
+// IQ calibrate
+//
+VOID rtl8192c_PHY_IQCalibrate( IN PADAPTER pAdapter , IN BOOLEAN bReCovery);
+
+//
+// LC calibrate
+//
+VOID rtl8192c_PHY_LCCalibrate(IN       PADAPTER        pAdapter);
+
+//
+// AP calibrate
+//
+VOID rtl8192c_PHY_APCalibrate(IN       PADAPTER        pAdapter, IN    char            delta);
+
+VOID rtl8192c_PHY_SetRFPathSwitch(IN   PADAPTER        pAdapter, IN    BOOLEAN         bMain);
+
+//
+// Modify the value of the hw register when beacon interval be changed.
+//
+void
+rtl8192c_PHY_SetBeaconHwReg(   IN      PADAPTER                Adapter,
+                                       IN      u16                     BeaconInterval  );
+
+
+extern VOID
+PHY_SwitchEphyParameter(
+       IN      PADAPTER                        Adapter
+       );
+
+extern VOID
+PHY_EnableHostClkReq(
+       IN      PADAPTER                        Adapter
+       );
+
+BOOLEAN
+SetAntennaConfig92C(
+       IN      PADAPTER        Adapter,
+       IN      u8              DefaultAnt
+       );
+
+
+/*--------------------------Exported Function prototype---------------------*/
+
+#define PHY_QueryBBReg(Adapter, RegAddr, BitMask) rtl8192c_PHY_QueryBBReg((Adapter), (RegAddr), (BitMask))
+#define PHY_SetBBReg(Adapter, RegAddr, BitMask, Data) rtl8192c_PHY_SetBBReg((Adapter), (RegAddr), (BitMask), (Data))
+#define PHY_QueryRFReg(Adapter, eRFPath, RegAddr, BitMask) rtl8192c_PHY_QueryRFReg((Adapter), (eRFPath), (RegAddr), (BitMask))
+#define PHY_SetRFReg(Adapter, eRFPath, RegAddr, BitMask, Data) rtl8192c_PHY_SetRFReg((Adapter), (eRFPath), (RegAddr), (BitMask), (Data))
+
+#define PHY_SetMacReg  PHY_SetBBReg
+
+#endif // __INC_HAL8192CPHYCFG_H
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/Hal8192CPhyReg.h b/drivers/net/wireless/realtek/rtl8192cu/include/Hal8192CPhyReg.h
new file mode 100644 (file)
index 0000000..746326e
--- /dev/null
@@ -0,0 +1,1122 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+/*****************************************************************************
+ *
+ * Module:     __INC_HAL8192CPHYREG_H
+ *
+ *
+ * Note:       1. Define PMAC/BB register map
+ *                     2. Define RF register map
+ *                     3. PMAC/BB register bit mask.
+ *                     4. RF reg bit mask.
+ *                     5. Other BB/RF relative definition.
+ *
+ *
+ * Export:     Constants, macro, functions(API), global variables(None).
+ *
+ * Abbrev:
+ *
+ * History:
+ *             Data            Who             Remark
+ *      08/07/2007  MHC        1. Porting from 9x series PHYCFG.h.
+ *                                                     2. Reorganize code architecture.
+ *     09/25/2008      MH              1. Add RL6052 register definition
+ *
+ *****************************************************************************/
+#ifndef __INC_HAL8192CPHYREG_H
+#define __INC_HAL8192CPHYREG_H
+
+
+/*--------------------------Define Parameters-------------------------------*/
+
+//============================================================
+//       8192S Regsiter offset definition
+//============================================================
+
+//
+// BB-PHY register PMAC 0x100 PHY 0x800 - 0xEFF
+// 1. PMAC duplicate register due to connection: RF_Mode, TRxRN, NumOf L-STF
+// 2. 0x800/0x900/0xA00/0xC00/0xD00/0xE00
+// 3. RF register 0x00-2E
+// 4. Bit Mask for BB/RF register
+// 5. Other defintion for BB/RF R/W
+//
+
+
+//
+// 1. PMAC duplicate register due to connection: RF_Mode, TRxRN, NumOf L-STF
+// 1. Page1(0x100)
+//
+#define                rPMAC_Reset                                     0x100
+#define                rPMAC_TxStart                                   0x104
+#define                rPMAC_TxLegacySIG                               0x108
+#define                rPMAC_TxHTSIG1                          0x10c
+#define                rPMAC_TxHTSIG2                          0x110
+#define                rPMAC_PHYDebug                          0x114
+#define                rPMAC_TxPacketNum                               0x118
+#define                rPMAC_TxIdle                                    0x11c
+#define                rPMAC_TxMACHeader0                      0x120
+#define                rPMAC_TxMACHeader1                      0x124
+#define                rPMAC_TxMACHeader2                      0x128
+#define                rPMAC_TxMACHeader3                      0x12c
+#define                rPMAC_TxMACHeader4                      0x130
+#define                rPMAC_TxMACHeader5                      0x134
+#define                rPMAC_TxDataType                                0x138
+#define                rPMAC_TxRandomSeed                      0x13c
+#define                rPMAC_CCKPLCPPreamble                   0x140
+#define                rPMAC_CCKPLCPHeader                     0x144
+#define                rPMAC_CCKCRC16                          0x148
+#define                rPMAC_OFDMRxCRC32OK                     0x170
+#define                rPMAC_OFDMRxCRC32Er                     0x174
+#define                rPMAC_OFDMRxParityEr                    0x178
+#define                rPMAC_OFDMRxCRC8Er                      0x17c
+#define                rPMAC_CCKCRxRC16Er                      0x180
+#define                rPMAC_CCKCRxRC32Er                      0x184
+#define                rPMAC_CCKCRxRC32OK                      0x188
+#define                rPMAC_TxStatus                                  0x18c
+
+//
+// 2. Page2(0x200)
+//
+// The following two definition are only used for USB interface.
+#define                RF_BB_CMD_ADDR                          0x02c0  // RF/BB read/write command address.
+#define                RF_BB_CMD_DATA                          0x02c4  // RF/BB read/write command data.
+
+//
+// 3. Page8(0x800)
+//
+#define                rFPGA0_RFMOD                            0x800   //RF mode & CCK TxSC // RF BW Setting??
+
+#define                rFPGA0_TxInfo                           0x804   // Status report??
+#define                rFPGA0_PSDFunction                      0x808
+
+#define                rFPGA0_TxGainStage                      0x80c   // Set TX PWR init gain?
+
+#define                rFPGA0_RFTiming1                        0x810   // Useless now
+#define                rFPGA0_RFTiming2                        0x814
+
+#define                rFPGA0_XA_HSSIParameter1                0x820   // RF 3 wire register
+#define                rFPGA0_XA_HSSIParameter2                0x824
+#define                rFPGA0_XB_HSSIParameter1                0x828
+#define                rFPGA0_XB_HSSIParameter2                0x82c
+#define                rTxAGC_B_Rate18_06                              0x830
+#define                rTxAGC_B_Rate54_24                              0x834
+#define                rTxAGC_B_CCK1_55_Mcs32          0x838
+#define                rTxAGC_B_Mcs03_Mcs00                    0x83c
+
+#define                rTxAGC_B_Mcs07_Mcs04                    0x848
+#define                rTxAGC_B_Mcs11_Mcs08                    0x84c
+
+#define                rFPGA0_XA_LSSIParameter         0x840
+#define                rFPGA0_XB_LSSIParameter         0x844
+
+#define                rFPGA0_RFWakeUpParameter                0x850   // Useless now
+#define                rFPGA0_RFSleepUpParameter               0x854
+
+#define                rFPGA0_XAB_SwitchControl                0x858   // RF Channel switch
+#define                rFPGA0_XCD_SwitchControl                0x85c
+
+#define                rFPGA0_XA_RFInterfaceOE         0x860   // RF Channel switch
+#define                rFPGA0_XB_RFInterfaceOE         0x864
+
+#define                rTxAGC_B_Mcs15_Mcs12                    0x868
+#define                rTxAGC_B_CCK11_A_CCK2_11                0x86c
+
+#define                rFPGA0_XAB_RFInterfaceSW                0x870   // RF Interface Software Control
+#define                rFPGA0_XCD_RFInterfaceSW                0x874
+
+#define                rFPGA0_XAB_RFParameter          0x878   // RF Parameter
+#define                rFPGA0_XCD_RFParameter          0x87c
+
+#define                rFPGA0_AnalogParameter1         0x880   // Crystal cap setting RF-R/W protection for parameter4??
+#define                rFPGA0_AnalogParameter2         0x884
+#define                rFPGA0_AnalogParameter3         0x888   // Useless now
+#define                rFPGA0_AnalogParameter4         0x88c
+
+#define                rFPGA0_XA_LSSIReadBack          0x8a0   // Tranceiver LSSI Readback
+#define                rFPGA0_XB_LSSIReadBack          0x8a4
+#define                rFPGA0_XC_LSSIReadBack          0x8a8
+#define                rFPGA0_XD_LSSIReadBack          0x8ac
+
+#define                rFPGA0_PSDReport                                0x8b4   // Useless now
+#define                TransceiverA_HSPI_Readback      0x8b8   // Transceiver A HSPI Readback
+#define                TransceiverB_HSPI_Readback      0x8bc   // Transceiver B HSPI Readback
+#define                rFPGA0_XAB_RFInterfaceRB                0x8e0   // Useless now // RF Interface Readback Value
+#define                rFPGA0_XCD_RFInterfaceRB                0x8e4   // Useless now
+
+//
+// 4. Page9(0x900)
+//
+#define                rFPGA1_RFMOD                            0x900   //RF mode & OFDM TxSC // RF BW Setting??
+
+#define                rFPGA1_TxBlock                          0x904   // Useless now
+#define                rFPGA1_DebugSelect                      0x908   // Useless now
+#define                rFPGA1_TxInfo                           0x90c   // Useless now // Status report??
+
+//
+// 5. PageA(0xA00)
+//
+// Set Control channel to upper or lower. These settings are required only for 40MHz
+#define                rCCK0_System                            0xa00
+
+#define                rCCK0_AFESetting                        0xa04   // Disable init gain now // Select RX path by RSSI
+#define                rCCK0_CCA                                       0xa08   // Disable init gain now // Init gain
+
+#define                rCCK0_RxAGC1                            0xa0c   //AGC default value, saturation level // Antenna Diversity, RX AGC, LNA Threshold, RX LNA Threshold useless now. Not the same as 90 series
+#define                rCCK0_RxAGC2                            0xa10   //AGC & DAGC
+
+#define                rCCK0_RxHP                                      0xa14
+
+#define                rCCK0_DSPParameter1             0xa18   //Timing recovery & Channel estimation threshold
+#define                rCCK0_DSPParameter2             0xa1c   //SQ threshold
+
+#define                rCCK0_TxFilter1                         0xa20
+#define                rCCK0_TxFilter2                         0xa24
+#define                rCCK0_DebugPort                 0xa28   //debug port and Tx filter3
+#define                rCCK0_FalseAlarmReport          0xa2c   //0xa2d useless now 0xa30-a4f channel report
+#define                rCCK0_TRSSIReport                       0xa50
+#define                rCCK0_RxReport                          0xa54  //0xa57
+#define                rCCK0_FACounterLower            0xa5c  //0xa5b
+#define                rCCK0_FACounterUpper            0xa58  //0xa5c
+
+//
+// PageB(0xB00)
+//
+#define                rPdp_AntA                               0xb00
+#define                rPdp_AntA_4                             0xb04
+#define                rConfig_Pmpd_AntA                       0xb28
+#define                rConfig_AntA                            0xb68
+#define                rConfig_AntB                            0xb6c
+#define                rPdp_AntB                                       0xb70
+#define                rPdp_AntB_4                             0xb74
+#define                rConfig_Pmpd_AntB                       0xb98
+#define                rAPK                                            0xbd8
+
+//
+// 6. PageC(0xC00)
+//
+#define                rOFDM0_LSTF                             0xc00
+
+#define                rOFDM0_TRxPathEnable            0xc04
+#define                rOFDM0_TRMuxPar                 0xc08
+#define                rOFDM0_TRSWIsolation            0xc0c
+
+#define                rOFDM0_XARxAFE                  0xc10  //RxIQ DC offset, Rx digital filter, DC notch filter
+#define                rOFDM0_XARxIQImbalance          0xc14  //RxIQ imblance matrix
+#define                rOFDM0_XBRxAFE                          0xc18
+#define                rOFDM0_XBRxIQImbalance          0xc1c
+#define                rOFDM0_XCRxAFE                          0xc20
+#define                rOFDM0_XCRxIQImbalance          0xc24
+#define                rOFDM0_XDRxAFE                          0xc28
+#define                rOFDM0_XDRxIQImbalance          0xc2c
+
+#define                rOFDM0_RxDetector1                      0xc30  //PD,BW & SBD    // DM tune init gain
+#define                rOFDM0_RxDetector2                      0xc34  //SBD & Fame Sync.
+#define                rOFDM0_RxDetector3                      0xc38  //Frame Sync.
+#define                rOFDM0_RxDetector4                      0xc3c  //PD, SBD, Frame Sync & Short-GI
+
+#define                rOFDM0_RxDSP                            0xc40  //Rx Sync Path
+#define                rOFDM0_CFOandDAGC               0xc44  //CFO & DAGC
+#define                rOFDM0_CCADropThreshold 0xc48 //CCA Drop threshold
+#define                rOFDM0_ECCAThreshold            0xc4c // energy CCA
+
+#define                rOFDM0_XAAGCCore1                       0xc50   // DIG
+#define                rOFDM0_XAAGCCore2                       0xc54
+#define                rOFDM0_XBAGCCore1                       0xc58
+#define                rOFDM0_XBAGCCore2                       0xc5c
+#define                rOFDM0_XCAGCCore1                       0xc60
+#define                rOFDM0_XCAGCCore2                       0xc64
+#define                rOFDM0_XDAGCCore1                       0xc68
+#define                rOFDM0_XDAGCCore2                       0xc6c
+
+#define                rOFDM0_AGCParameter1                    0xc70
+#define                rOFDM0_AGCParameter2                    0xc74
+#define                rOFDM0_AGCRSSITable                     0xc78
+#define                rOFDM0_HTSTFAGC                         0xc7c
+
+#define                rOFDM0_XATxIQImbalance          0xc80   // TX PWR TRACK and DIG
+#define                rOFDM0_XATxAFE                          0xc84
+#define                rOFDM0_XBTxIQImbalance          0xc88
+#define                rOFDM0_XBTxAFE                          0xc8c
+#define                rOFDM0_XCTxIQImbalance          0xc90
+#define                rOFDM0_XCTxAFE                                  0xc94
+#define                rOFDM0_XDTxIQImbalance          0xc98
+#define                rOFDM0_XDTxAFE                          0xc9c
+
+#define                rOFDM0_RxIQExtAnta                      0xca0
+#define                rOFDM0_TxCoeff1                         0xca4
+#define                rOFDM0_TxCoeff2                         0xca8
+#define                rOFDM0_TxCoeff3                         0xcac
+#define                rOFDM0_TxCoeff4                         0xcb0
+#define                rOFDM0_TxCoeff5                         0xcb4
+#define                rOFDM0_TxCoeff6                         0xcb8
+#define                rOFDM0_RxHPParameter                    0xce0
+#define                rOFDM0_TxPseudoNoiseWgt         0xce4
+#define                rOFDM0_FrameSync                                0xcf0
+#define                rOFDM0_DFSReport                                0xcf4
+
+//
+// 7. PageD(0xD00)
+//
+#define                rOFDM1_LSTF                                     0xd00
+#define                rOFDM1_TRxPathEnable                    0xd04
+
+#define                rOFDM1_CFO                                              0xd08   // No setting now
+#define                rOFDM1_CSI1                                     0xd10
+#define                rOFDM1_SBD                                              0xd14
+#define                rOFDM1_CSI2                                     0xd18
+#define                rOFDM1_CFOTracking                      0xd2c
+#define                rOFDM1_TRxMesaure1                      0xd34
+#define                rOFDM1_IntfDet                                  0xd3c
+#define                rOFDM1_PseudoNoiseStateAB               0xd50
+#define                rOFDM1_PseudoNoiseStateCD               0xd54
+#define                rOFDM1_RxPseudoNoiseWgt         0xd58
+
+#define                rOFDM_PHYCounter1                               0xda0  //cca, parity fail
+#define                rOFDM_PHYCounter2                               0xda4  //rate illegal, crc8 fail
+#define                rOFDM_PHYCounter3                               0xda8  //MCS not support
+
+#define                rOFDM_ShortCFOAB                                0xdac   // No setting now
+#define                rOFDM_ShortCFOCD                                0xdb0
+#define                rOFDM_LongCFOAB                         0xdb4
+#define                rOFDM_LongCFOCD                         0xdb8
+#define                rOFDM_TailCFOAB                         0xdbc
+#define                rOFDM_TailCFOCD                         0xdc0
+#define                rOFDM_PWMeasure1                        0xdc4
+#define                rOFDM_PWMeasure2                        0xdc8
+#define                rOFDM_BWReport                          0xdcc
+#define                rOFDM_AGCReport                         0xdd0
+#define                rOFDM_RxSNR                                     0xdd4
+#define                rOFDM_RxEVMCSI                          0xdd8
+#define                rOFDM_SIGReport                         0xddc
+
+
+//
+// 8. PageE(0xE00)
+//
+#define                rTxAGC_A_Rate18_06                      0xe00
+#define                rTxAGC_A_Rate54_24                      0xe04
+#define                rTxAGC_A_CCK1_Mcs32                     0xe08
+#define                rTxAGC_A_Mcs03_Mcs00                    0xe10
+#define                rTxAGC_A_Mcs07_Mcs04                    0xe14
+#define                rTxAGC_A_Mcs11_Mcs08                    0xe18
+#define                rTxAGC_A_Mcs15_Mcs12                    0xe1c
+
+#define                rFPGA0_IQK                                      0xe28
+#define                rTx_IQK_Tone_A                          0xe30
+#define                rRx_IQK_Tone_A                          0xe34
+#define                rTx_IQK_PI_A                                    0xe38
+#define                rRx_IQK_PI_A                                    0xe3c
+
+#define                rTx_IQK                                                 0xe40
+#define                rRx_IQK                                         0xe44
+#define                rIQK_AGC_Pts                                    0xe48
+#define                rIQK_AGC_Rsp                                    0xe4c
+#define                rTx_IQK_Tone_B                          0xe50
+#define                rRx_IQK_Tone_B                          0xe54
+#define                rTx_IQK_PI_B                                    0xe58
+#define                rRx_IQK_PI_B                                    0xe5c
+#define                rIQK_AGC_Cont                           0xe60
+
+#define                rBlue_Tooth                                     0xe6c
+#define                rRx_Wait_CCA                                    0xe70
+#define                rTx_CCK_RFON                                    0xe74
+#define                rTx_CCK_BBON                            0xe78
+#define                rTx_OFDM_RFON                           0xe7c
+#define                rTx_OFDM_BBON                           0xe80
+#define                rTx_To_Rx                                       0xe84
+#define                rTx_To_Tx                                       0xe88
+#define                rRx_CCK                                         0xe8c
+
+#define                rTx_Power_Before_IQK_A          0xe94
+#define                rTx_Power_After_IQK_A                   0xe9c
+
+#define                rRx_Power_Before_IQK_A          0xea0
+#define                rRx_Power_Before_IQK_A_2                0xea4
+#define                rRx_Power_After_IQK_A                   0xea8
+#define                rRx_Power_After_IQK_A_2         0xeac
+
+#define                rTx_Power_Before_IQK_B          0xeb4
+#define                rTx_Power_After_IQK_B                   0xebc
+
+#define                rRx_Power_Before_IQK_B          0xec0
+#define                rRx_Power_Before_IQK_B_2                0xec4
+#define                rRx_Power_After_IQK_B                   0xec8
+#define                rRx_Power_After_IQK_B_2         0xecc
+
+#define                rRx_OFDM                                        0xed0
+#define                rRx_Wait_RIFS                           0xed4
+#define                rRx_TO_Rx                                       0xed8
+#define                rStandby                                                0xedc
+#define                rSleep                                          0xee0
+#define                rPMPD_ANAEN                             0xeec
+
+//
+// 7. RF Register 0x00-0x2E (RF 8256)
+//    RF-0222D 0x00-3F
+//
+//Zebra1
+#define                rZebra1_HSSIEnable                              0x0     // Useless now
+#define                rZebra1_TRxEnable1                              0x1
+#define                rZebra1_TRxEnable2                              0x2
+#define                rZebra1_AGC                                     0x4
+#define                rZebra1_ChargePump                      0x5
+#define                rZebra1_Channel                         0x7     // RF channel switch
+
+//#endif
+#define                rZebra1_TxGain                                  0x8     // Useless now
+#define                rZebra1_TxLPF                                   0x9
+#define                rZebra1_RxLPF                                   0xb
+#define                rZebra1_RxHPFCorner                     0xc
+
+//Zebra4
+#define                rGlobalCtrl                                             0       // Useless now
+#define                rRTL8256_TxLPF                                  19
+#define                rRTL8256_RxLPF                                  11
+
+//RTL8258
+#define                rRTL8258_TxLPF                                  0x11    // Useless now
+#define                rRTL8258_RxLPF                                  0x13
+#define                rRTL8258_RSSILPF                                0xa
+
+//
+// RL6052 Register definition
+//
+#define                RF_AC                                           0x00    //
+
+#define                RF_IQADJ_G1                             0x01    //
+#define                RF_IQADJ_G2                             0x02    //
+#define                RF_BS_PA_APSET_G1_G4            0x03
+#define                RF_BS_PA_APSET_G5_G8            0x04
+#define                RF_POW_TRSW                             0x05    //
+
+#define                RF_GAIN_RX                                      0x06    //
+#define                RF_GAIN_TX                                      0x07    //
+
+#define                RF_TXM_IDAC                             0x08    //
+#define                RF_IPA_G                                        0x09    //
+#define                RF_TXBIAS_G                             0x0A
+#define                RF_TXPA_AG                                      0x0B
+#define                RF_IPA_A                                        0x0C    //
+#define                RF_TXBIAS_A                             0x0D
+#define                RF_BS_PA_APSET_G9_G11   0x0E
+#define                RF_BS_IQGEN                             0x0F    //
+
+#define                RF_MODE1                                        0x10    //
+#define                RF_MODE2                                        0x11    //
+
+#define                RF_RX_AGC_HP                            0x12    //
+#define                RF_TX_AGC                                       0x13    //
+#define                RF_BIAS                                         0x14    //
+#define                RF_IPA                                          0x15    //
+#define                RF_POW_ABILITY                  0x17    //
+#define                RF_MODE_AG                              0x18    //
+#define                rRfChannel                                      0x18    // RF channel and BW switch
+#define                RF_CHNLBW                                       0x18    // RF channel and BW switch
+#define                RF_TOP                                          0x19    //
+
+#define                RF_RX_G1                                        0x1A    //
+#define                RF_RX_G2                                        0x1B    //
+
+#define                RF_RX_BB2                                       0x1C    //
+#define                RF_RX_BB1                                       0x1D    //
+
+#define                RF_RCK1                                 0x1E    //
+#define                RF_RCK2                                 0x1F    //
+
+#define                RF_TX_G1                                        0x20    //
+#define                RF_TX_G2                                        0x21    //
+#define                RF_TX_G3                                        0x22    //
+
+#define                RF_TX_BB1                                       0x23    //
+
+#define                RF_T_METER                                      0x24    //
+
+#define                RF_SYN_G1                                       0x25    // RF TX Power control
+#define                RF_SYN_G2                                       0x26    // RF TX Power control
+#define                RF_SYN_G3                                       0x27    // RF TX Power control
+#define                RF_SYN_G4                                       0x28    // RF TX Power control
+#define                RF_SYN_G5                                       0x29    // RF TX Power control
+#define                RF_SYN_G6                                       0x2A    // RF TX Power control
+#define                RF_SYN_G7                                       0x2B    // RF TX Power control
+#define                RF_SYN_G8                                       0x2C    // RF TX Power control
+
+#define                RF_RCK_OS                                       0x30    // RF TX PA control
+
+#define                RF_TXPA_G1                                      0x31    // RF TX PA control
+#define                RF_TXPA_G2                                      0x32    // RF TX PA control
+#define                RF_TXPA_G3                                      0x33    // RF TX PA control
+
+//
+//Bit Mask
+//
+// 1. Page1(0x100)
+#define                bBBResetB                                               0x100   // Useless now?
+#define                bGlobalResetB                                   0x200
+#define                bOFDMTxStart                                    0x4
+#define                bCCKTxStart                                             0x8
+#define                bCRC32Debug                                     0x100
+#define                bPMACLoopback                                   0x10
+#define                bTxLSIG                                                 0xffffff
+#define                bOFDMTxRate                                     0xf
+#define                bOFDMTxReserved                         0x10
+#define                bOFDMTxLength                                   0x1ffe0
+#define                bOFDMTxParity                                   0x20000
+#define                bTxHTSIG1                                               0xffffff
+#define                bTxHTMCSRate                                    0x7f
+#define                bTxHTBW                                         0x80
+#define                bTxHTLength                                     0xffff00
+#define                bTxHTSIG2                                               0xffffff
+#define                bTxHTSmoothing                                  0x1
+#define                bTxHTSounding                                   0x2
+#define                bTxHTReserved                                   0x4
+#define                bTxHTAggreation                         0x8
+#define                bTxHTSTBC                                               0x30
+#define                bTxHTAdvanceCoding                      0x40
+#define                bTxHTShortGI                                    0x80
+#define                bTxHTNumberHT_LTF                       0x300
+#define                bTxHTCRC8                                               0x3fc00
+#define                bCounterReset                                   0x10000
+#define                bNumOfOFDMTx                                    0xffff
+#define                bNumOfCCKTx                                     0xffff0000
+#define                bTxIdleInterval                                 0xffff
+#define                bOFDMService                                    0xffff0000
+#define                bTxMACHeader                                    0xffffffff
+#define                bTxDataInit                                             0xff
+#define                bTxHTMode                                               0x100
+#define                bTxDataType                                     0x30000
+#define                bTxRandomSeed                                   0xffffffff
+#define                bCCKTxPreamble                                  0x1
+#define                bCCKTxSFD                                               0xffff0000
+#define                bCCKTxSIG                                               0xff
+#define                bCCKTxService                                   0xff00
+#define                bCCKLengthExt                                   0x8000
+#define                bCCKTxLength                                    0xffff0000
+#define                bCCKTxCRC16                                     0xffff
+#define                bCCKTxStatus                                    0x1
+#define                bOFDMTxStatus                                   0x2
+
+#define                IS_BB_REG_OFFSET_92S(_Offset)           ((_Offset >= 0x800) && (_Offset <= 0xfff))
+
+// 2. Page8(0x800)
+#define                bRFMOD                                                  0x1     // Reg 0x800 rFPGA0_RFMOD
+#define                bJapanMode                                              0x2
+#define                bCCKTxSC                                                0x30
+#define                bCCKEn                                                  0x1000000
+#define                bOFDMEn                                         0x2000000
+
+#define                bOFDMRxADCPhase                         0x10000 // Useless now
+#define                bOFDMTxDACPhase                         0x40000
+#define                bXATxAGC                                        0x3f
+
+#define                bAntennaSelect                          0x0300
+
+#define                bXBTxAGC                                        0xf00   // Reg 80c rFPGA0_TxGainStage
+#define                bXCTxAGC                                        0xf000
+#define                bXDTxAGC                                        0xf0000
+
+#define                bPAStart                                        0xf0000000      // Useless now
+#define                bTRStart                                        0x00f00000
+#define                bRFStart                                        0x0000f000
+#define                bBBStart                                        0x000000f0
+#define                bBBCCKStart                             0x0000000f
+#define                bPAEnd                                          0xf          //Reg0x814
+#define                bTREnd                                          0x0f000000
+#define                bRFEnd                                          0x000f0000
+#define                bCCAMask                                        0x000000f0   //T2R
+#define                bR2RCCAMask                             0x00000f00
+#define                bHSSI_R2TDelay                          0xf8000000
+#define                bHSSI_T2RDelay                          0xf80000
+#define                bContTxHSSI                             0x400     //chane gain at continue Tx
+#define                bIGFromCCK                              0x200
+#define                bAGCAddress                             0x3f
+#define                bRxHPTx                                         0x7000
+#define                bRxHPT2R                                        0x38000
+#define                bRxHPCCKIni                             0xc0000
+#define                bAGCTxCode                              0xc00000
+#define                bAGCRxCode                              0x300000
+
+#define                b3WireDataLength                        0x800   // Reg 0x820~84f rFPGA0_XA_HSSIParameter1
+#define                b3WireAddressLength                     0x400
+
+#define                b3WireRFPowerDown                       0x1     // Useless now
+//#define bHWSISelect                          0x8
+#define                b5GPAPEPolarity                         0x40000000
+#define                b2GPAPEPolarity                         0x80000000
+#define                bRFSW_TxDefaultAnt                      0x3
+#define                bRFSW_TxOptionAnt                       0x30
+#define                bRFSW_RxDefaultAnt                      0x300
+#define                bRFSW_RxOptionAnt                       0x3000
+#define                bRFSI_3WireData                         0x1
+#define                bRFSI_3WireClock                        0x2
+#define                bRFSI_3WireLoad                         0x4
+#define                bRFSI_3WireRW                           0x8
+#define                bRFSI_3Wire                                     0xf
+
+#define                bRFSI_RFENV                             0x10    // Reg 0x870 rFPGA0_XAB_RFInterfaceSW
+
+#define                bRFSI_TRSW                              0x20    // Useless now
+#define                bRFSI_TRSWB                             0x40
+#define                bRFSI_ANTSW                             0x100
+#define                bRFSI_ANTSWB                            0x200
+#define                bRFSI_PAPE                                      0x400
+#define                bRFSI_PAPE5G                            0x800
+#define                bBandSelect                                     0x1
+#define                bHTSIG2_GI                                      0x80
+#define                bHTSIG2_Smoothing                       0x01
+#define                bHTSIG2_Sounding                        0x02
+#define                bHTSIG2_Aggreaton                       0x08
+#define                bHTSIG2_STBC                            0x30
+#define                bHTSIG2_AdvCoding                       0x40
+#define                bHTSIG2_NumOfHTLTF              0x300
+#define                bHTSIG2_CRC8                            0x3fc
+#define                bHTSIG1_MCS                             0x7f
+#define                bHTSIG1_BandWidth                       0x80
+#define                bHTSIG1_HTLength                        0xffff
+#define                bLSIG_Rate                                      0xf
+#define                bLSIG_Reserved                          0x10
+#define                bLSIG_Length                            0x1fffe
+#define                bLSIG_Parity                                    0x20
+#define                bCCKRxPhase                             0x4
+
+#define                bLSSIReadAddress                        0x7f800000   // T65 RF
+
+#define                bLSSIReadEdge                           0x80000000   //LSSI "Read" edge signal
+
+#define                bLSSIReadBackData                       0xfffff         // T65 RF
+
+#define                bLSSIReadOKFlag                         0x1000  // Useless now
+#define                bCCKSampleRate                          0x8       //0: 44MHz, 1:88MHz
+#define                bRegulator0Standby                      0x1
+#define                bRegulatorPLLStandby                    0x2
+#define                bRegulator1Standby                      0x4
+#define                bPLLPowerUp                             0x8
+#define                bDPLLPowerUp                            0x10
+#define                bDA10PowerUp                            0x20
+#define                bAD7PowerUp                             0x200
+#define                bDA6PowerUp                             0x2000
+#define                bXtalPowerUp                            0x4000
+#define                b40MDClkPowerUP                         0x8000
+#define                bDA6DebugMode                           0x20000
+#define                bDA6Swing                                       0x380000
+
+#define                bADClkPhase                             0x4000000       // Reg 0x880 rFPGA0_AnalogParameter1 20/40 CCK support switch 40/80 BB MHZ
+
+#define                b80MClkDelay                            0x18000000      // Useless
+#define                bAFEWatchDogEnable                      0x20000000
+
+#define                bXtalCap01                                      0xc0000000      // Reg 0x884 rFPGA0_AnalogParameter2 Crystal cap
+#define                bXtalCap23                                      0x3
+#define                bXtalCap92x                                     0x0f000000
+#define                bXtalCap                                        0x0f000000
+
+#define                bIntDifClkEnable                        0x400   // Useless
+#define                bExtSigClkEnable                        0x800
+#define                bBandgapMbiasPowerUp            0x10000
+#define                bAD11SHGain                             0xc0000
+#define                bAD11InputRange                         0x700000
+#define                bAD11OPCurrent                          0x3800000
+#define                bIPathLoopback                          0x4000000
+#define                bQPathLoopback                          0x8000000
+#define                bAFELoopback                            0x10000000
+#define                bDA10Swing                              0x7e0
+#define                bDA10Reverse                            0x800
+#define                bDAClkSource                            0x1000
+#define                bAD7InputRange                          0x6000
+#define                bAD7Gain                                        0x38000
+#define                bAD7OutputCMMode                        0x40000
+#define                bAD7InputCMMode                         0x380000
+#define                bAD7Current                                     0xc00000
+#define                bRegulatorAdjust                        0x7000000
+#define                bAD11PowerUpAtTx                        0x1
+#define                bDA10PSAtTx                             0x10
+#define                bAD11PowerUpAtRx                        0x100
+#define                bDA10PSAtRx                             0x1000
+#define                bCCKRxAGCFormat                         0x200
+#define                bPSDFFTSamplepPoint                     0xc000
+#define                bPSDAverageNum                          0x3000
+#define                bIQPathControl                          0xc00
+#define                bPSDFreq                                        0x3ff
+#define                bPSDAntennaPath                         0x30
+#define                bPSDIQSwitch                            0x40
+#define                bPSDRxTrigger                           0x400000
+#define                bPSDTxTrigger                           0x80000000
+#define                bPSDSineToneScale                       0x7f000000
+#define                bPSDReport                                      0xffff
+
+// 3. Page9(0x900)
+#define                bOFDMTxSC                               0x30000000      // Useless
+#define                bCCKTxOn                                        0x1
+#define                bOFDMTxOn                               0x2
+#define                bDebugPage                              0xfff  //reset debug page and also HWord, LWord
+#define                bDebugItem                              0xff   //reset debug page and LWord
+#define                bAntL                                   0x10
+#define                bAntNonHT                                       0x100
+#define                bAntHT1                                 0x1000
+#define                bAntHT2                                         0x10000
+#define                bAntHT1S1                                       0x100000
+#define                bAntNonHTS1                             0x1000000
+
+// 4. PageA(0xA00)
+#define                bCCKBBMode                              0x3     // Useless
+#define                bCCKTxPowerSaving               0x80
+#define                bCCKRxPowerSaving               0x40
+
+#define                bCCKSideBand                    0x10    // Reg 0xa00 rCCK0_System 20/40 switch
+
+#define                bCCKScramble                    0x8     // Useless
+#define                bCCKAntDiversity                0x8000
+#define                bCCKCarrierRecovery             0x4000
+#define                bCCKTxRate                              0x3000
+#define                bCCKDCCancel                    0x0800
+#define                bCCKISICancel                   0x0400
+#define                bCCKMatchFilter                 0x0200
+#define                bCCKEqualizer                   0x0100
+#define                bCCKPreambleDetect              0x800000
+#define                bCCKFastFalseCCA                0x400000
+#define                bCCKChEstStart                  0x300000
+#define                bCCKCCACount                    0x080000
+#define                bCCKcs_lim                              0x070000
+#define                bCCKBistMode                    0x80000000
+#define                bCCKCCAMask                     0x40000000
+#define                bCCKTxDACPhase          0x4
+#define                bCCKRxADCPhase          0x20000000   //r_rx_clk
+#define                bCCKr_cp_mode0          0x0100
+#define                bCCKTxDCOffset                  0xf0
+#define                bCCKRxDCOffset                  0xf
+#define                bCCKCCAMode                     0xc000
+#define                bCCKFalseCS_lim                 0x3f00
+#define                bCCKCS_ratio                    0xc00000
+#define                bCCKCorgBit_sel                 0x300000
+#define                bCCKPD_lim                              0x0f0000
+#define                bCCKNewCCA                      0x80000000
+#define                bCCKRxHPofIG                    0x8000
+#define                bCCKRxIG                                0x7f00
+#define                bCCKLNAPolarity                 0x800000
+#define                bCCKRx1stGain                   0x7f0000
+#define                bCCKRFExtend                    0x20000000 //CCK Rx Iinital gain polarity
+#define                bCCKRxAGCSatLevel               0x1f000000
+#define                bCCKRxAGCSatCount               0xe0
+#define                bCCKRxRFSettle                  0x1f       //AGCsamp_dly
+#define                bCCKFixedRxAGC                  0x8000
+//#define bCCKRxAGCFormat                      0x4000   //remove to HSSI register 0x824
+#define                bCCKAntennaPolarity             0x2000
+#define                bCCKTxFilterType                0x0c00
+#define                bCCKRxAGCReportType     0x0300
+#define                bCCKRxDAGCEn                    0x80000000
+#define                bCCKRxDAGCPeriod                0x20000000
+#define                bCCKRxDAGCSatLevel              0x1f000000
+#define                bCCKTimingRecovery              0x800000
+#define                bCCKTxC0                                0x3f0000
+#define                bCCKTxC1                                0x3f000000
+#define                bCCKTxC2                                0x3f
+#define                bCCKTxC3                                0x3f00
+#define                bCCKTxC4                                0x3f0000
+#define                bCCKTxC5                                0x3f000000
+#define                bCCKTxC6                                0x3f
+#define                bCCKTxC7                                0x3f00
+#define                bCCKDebugPort                   0xff0000
+#define                bCCKDACDebug                    0x0f000000
+#define                bCCKFalseAlarmEnable    0x8000
+#define                bCCKFalseAlarmRead              0x4000
+#define                bCCKTRSSI                               0x7f
+#define                bCCKRxAGCReport         0xfe
+#define                bCCKRxReport_AntSel     0x80000000
+#define                bCCKRxReport_MFOff              0x40000000
+#define                bCCKRxRxReport_SQLoss   0x20000000
+#define                bCCKRxReport_Pktloss    0x10000000
+#define                bCCKRxReport_Lockedbit  0x08000000
+#define                bCCKRxReport_RateError  0x04000000
+#define                bCCKRxReport_RxRate     0x03000000
+#define                bCCKRxFACounterLower    0xff
+#define                bCCKRxFACounterUpper    0xff000000
+#define                bCCKRxHPAGCStart                0xe000
+#define                bCCKRxHPAGCFinal                0x1c00
+#define                bCCKRxFalseAlarmEnable  0x8000
+#define                bCCKFACounterFreeze     0x4000
+#define                bCCKTxPathSel                   0x10000000
+#define                bCCKDefaultRxPath               0xc000000
+#define                bCCKOptionRxPath                0x3000000
+
+// 5. PageC(0xC00)
+#define                bNumOfSTF                               0x3     // Useless
+#define                bShift_L                                        0xc0
+#define                bGI_TH                                  0xc
+#define                bRxPathA                                0x1
+#define                bRxPathB                                0x2
+#define                bRxPathC                                0x4
+#define                bRxPathD                                0x8
+#define                bTxPathA                                0x1
+#define                bTxPathB                                0x2
+#define                bTxPathC                                0x4
+#define                bTxPathD                                0x8
+#define                bTRSSIFreq                              0x200
+#define                bADCBackoff                             0x3000
+#define                bDFIRBackoff                    0xc000
+#define                bTRSSILatchPhase                0x10000
+#define                bRxIDCOffset                    0xff
+#define                bRxQDCOffset                    0xff00
+#define                bRxDFIRMode                     0x1800000
+#define                bRxDCNFType                     0xe000000
+#define                bRXIQImb_A                              0x3ff
+#define                bRXIQImb_B                              0xfc00
+#define                bRXIQImb_C                              0x3f0000
+#define                bRXIQImb_D                              0xffc00000
+#define                bDC_dc_Notch                    0x60000
+#define                bRxNBINotch                     0x1f000000
+#define                bPD_TH                                  0xf
+#define                bPD_TH_Opt2                     0xc000
+#define                bPWED_TH                                0x700
+#define                bIfMF_Win_L                     0x800
+#define                bPD_Option                              0x1000
+#define                bMF_Win_L                               0xe000
+#define                bBW_Search_L                    0x30000
+#define                bwin_enh_L                              0xc0000
+#define                bBW_TH                                  0x700000
+#define                bED_TH2                         0x3800000
+#define                bBW_option                              0x4000000
+#define                bRatio_TH                               0x18000000
+#define                bWindow_L                               0xe0000000
+#define                bSBD_Option                             0x1
+#define                bFrame_TH                               0x1c
+#define                bFS_Option                              0x60
+#define                bDC_Slope_check         0x80
+#define                bFGuard_Counter_DC_L    0xe00
+#define                bFrame_Weight_Short     0x7000
+#define                bSub_Tune                               0xe00000
+#define                bFrame_DC_Length                0xe000000
+#define                bSBD_start_offset               0x30000000
+#define                bFrame_TH_2                     0x7
+#define                bFrame_GI2_TH                   0x38
+#define                bGI2_Sync_en                    0x40
+#define                bSarch_Short_Early              0x300
+#define                bSarch_Short_Late               0xc00
+#define                bSarch_GI2_Late         0x70000
+#define                bCFOAntSum                              0x1
+#define                bCFOAcc                         0x2
+#define                bCFOStartOffset                 0xc
+#define                bCFOLookBack                    0x70
+#define                bCFOSumWeight                   0x80
+#define                bDAGCEnable                     0x10000
+#define                bTXIQImb_A                              0x3ff
+#define                bTXIQImb_B                              0xfc00
+#define                bTXIQImb_C                              0x3f0000
+#define                bTXIQImb_D                              0xffc00000
+#define                bTxIDCOffset                    0xff
+#define                bTxQDCOffset                    0xff00
+#define                bTxDFIRMode                     0x10000
+#define                bTxPesudoNoiseOn                0x4000000
+#define                bTxPesudoNoise_A                0xff
+#define                bTxPesudoNoise_B                0xff00
+#define                bTxPesudoNoise_C                0xff0000
+#define                bTxPesudoNoise_D                0xff000000
+#define                bCCADropOption                  0x20000
+#define                bCCADropThres                   0xfff00000
+#define                bEDCCA_H                                0xf
+#define                bEDCCA_L                                0xf0
+#define                bLambda_ED                      0x300
+#define                bRxInitialGain                  0x7f
+#define                bRxAntDivEn                             0x80
+#define                bRxAGCAddressForLNA     0x7f00
+#define                bRxHighPowerFlow                0x8000
+#define                bRxAGCFreezeThres               0xc0000
+#define                bRxFreezeStep_AGC1      0x300000
+#define                bRxFreezeStep_AGC2      0xc00000
+#define                bRxFreezeStep_AGC3      0x3000000
+#define                bRxFreezeStep_AGC0      0xc000000
+#define                bRxRssi_Cmp_En                  0x10000000
+#define                bRxQuickAGCEn                   0x20000000
+#define                bRxAGCFreezeThresMode   0x40000000
+#define                bRxOverFlowCheckType    0x80000000
+#define                bRxAGCShift                             0x7f
+#define                bTRSW_Tri_Only                  0x80
+#define                bPowerThres                     0x300
+#define                bRxAGCEn                                0x1
+#define                bRxAGCTogetherEn                0x2
+#define                bRxAGCMin                               0x4
+#define                bRxHP_Ini                               0x7
+#define                bRxHP_TRLNA                     0x70
+#define                bRxHP_RSSI                              0x700
+#define                bRxHP_BBP1                              0x7000
+#define                bRxHP_BBP2                              0x70000
+#define                bRxHP_BBP3                              0x700000
+#define                bRSSI_H                                 0x7f0000     //the threshold for high power
+#define                bRSSI_Gen                               0x7f000000   //the threshold for ant diversity
+#define                bRxSettle_TRSW                  0x7
+#define                bRxSettle_LNA                   0x38
+#define                bRxSettle_RSSI                  0x1c0
+#define                bRxSettle_BBP                   0xe00
+#define                bRxSettle_RxHP                  0x7000
+#define                bRxSettle_AntSW_RSSI    0x38000
+#define                bRxSettle_AntSW         0xc0000
+#define                bRxProcessTime_DAGC     0x300000
+#define                bRxSettle_HSSI                  0x400000
+#define                bRxProcessTime_BBPPW    0x800000
+#define                bRxAntennaPowerShift    0x3000000
+#define                bRSSITableSelect                0xc000000
+#define                bRxHP_Final                             0x7000000
+#define                bRxHTSettle_BBP                 0x7
+#define                bRxHTSettle_HSSI                0x8
+#define                bRxHTSettle_RxHP                0x70
+#define                bRxHTSettle_BBPPW               0x80
+#define                bRxHTSettle_Idle                0x300
+#define                bRxHTSettle_Reserved    0x1c00
+#define                bRxHTRxHPEn                     0x8000
+#define                bRxHTAGCFreezeThres     0x30000
+#define                bRxHTAGCTogetherEn      0x40000
+#define                bRxHTAGCMin                     0x80000
+#define                bRxHTAGCEn                              0x100000
+#define                bRxHTDAGCEn                     0x200000
+#define                bRxHTRxHP_BBP                   0x1c00000
+#define                bRxHTRxHP_Final         0xe0000000
+#define                bRxPWRatioTH                    0x3
+#define                bRxPWRatioEn                    0x4
+#define                bRxMFHold                               0x3800
+#define                bRxPD_Delay_TH1         0x38
+#define                bRxPD_Delay_TH2         0x1c0
+#define                bRxPD_DC_COUNT_MAX      0x600
+//#define bRxMF_Hold               0x3800
+#define                bRxPD_Delay_TH                  0x8000
+#define                bRxProcess_Delay                0xf0000
+#define                bRxSearchrange_GI2_Early        0x700000
+#define                bRxFrame_Guard_Counter_L        0x3800000
+#define                bRxSGI_Guard_L                  0xc000000
+#define                bRxSGI_Search_L         0x30000000
+#define                bRxSGI_TH                               0xc0000000
+#define                bDFSCnt0                                0xff
+#define                bDFSCnt1                                0xff00
+#define                bDFSFlag                                0xf0000
+#define                bMFWeightSum                    0x300000
+#define                bMinIdxTH                               0x7f000000
+#define                bDAFormat                               0x40000
+#define                bTxChEmuEnable          0x01000000
+#define                bTRSWIsolation_A                0x7f
+#define                bTRSWIsolation_B                0x7f00
+#define                bTRSWIsolation_C                0x7f0000
+#define                bTRSWIsolation_D                0x7f000000
+#define                bExtLNAGain                             0x7c00
+
+// 6. PageE(0xE00)
+#define                bSTBCEn                         0x4     // Useless
+#define                bAntennaMapping         0x10
+#define                bNss                                    0x20
+#define                bCFOAntSumD                     0x200
+#define                bPHYCounterReset                0x8000000
+#define                bCFOReportGet                   0x4000000
+#define                bOFDMContinueTx         0x10000000
+#define                bOFDMSingleCarrier              0x20000000
+#define                bOFDMSingleTone         0x40000000
+//#define bRxPath1                 0x01
+//#define bRxPath2                 0x02
+//#define bRxPath3                 0x04
+//#define bRxPath4                 0x08
+//#define bTxPath1                 0x10
+//#define bTxPath2                 0x20
+#define                bHTDetect                       0x100
+#define                bCFOEn                          0x10000
+#define                bCFOValue                       0xfff00000
+#define                bSigTone_Re             0x3f
+#define                bSigTone_Im             0x7f00
+#define                bCounter_CCA            0xffff
+#define                bCounter_ParityFail     0xffff0000
+#define                bCounter_RateIllegal            0xffff
+#define                bCounter_CRC8Fail       0xffff0000
+#define                bCounter_MCSNoSupport   0xffff
+#define                bCounter_FastSync       0xffff
+#define                bShortCFO                       0xfff
+#define                bShortCFOTLength        12   //total
+#define                bShortCFOFLength        11   //fraction
+#define                bLongCFO                        0x7ff
+#define                bLongCFOTLength 11
+#define                bLongCFOFLength 11
+#define                bTailCFO                        0x1fff
+#define                bTailCFOTLength         13
+#define                bTailCFOFLength         12
+#define                bmax_en_pwdB            0xffff
+#define                bCC_power_dB            0xffff0000
+#define                bnoise_pwdB             0xffff
+#define                bPowerMeasTLength       10
+#define                bPowerMeasFLength       3
+#define                bRx_HT_BW                       0x1
+#define                bRxSC                           0x6
+#define                bRx_HT                          0x8
+#define                bNB_intf_det_on         0x1
+#define                bIntf_win_len_cfg       0x30
+#define                bNB_Intf_TH_cfg         0x1c0
+#define                bRFGain                         0x3f
+#define                bTableSel                       0x40
+#define                bTRSW                           0x80
+#define                bRxSNR_A                        0xff
+#define                bRxSNR_B                        0xff00
+#define                bRxSNR_C                        0xff0000
+#define                bRxSNR_D                        0xff000000
+#define                bSNREVMTLength          8
+#define                bSNREVMFLength          1
+#define                bCSI1st                         0xff
+#define                bCSI2nd                         0xff00
+#define                bRxEVM1st                       0xff0000
+#define                bRxEVM2nd                       0xff000000
+#define                bSIGEVM                 0xff
+#define                bPWDB                           0xff00
+#define                bSGIEN                          0x10000
+
+#define                bSFactorQAM1            0xf     // Useless
+#define                bSFactorQAM2            0xf0
+#define                bSFactorQAM3            0xf00
+#define                bSFactorQAM4            0xf000
+#define                bSFactorQAM5            0xf0000
+#define                bSFactorQAM6            0xf0000
+#define                bSFactorQAM7            0xf00000
+#define                bSFactorQAM8            0xf000000
+#define                bSFactorQAM9            0xf0000000
+#define                bCSIScheme                      0x100000
+
+#define                bNoiseLvlTopSet         0x3     // Useless
+#define                bChSmooth                       0x4
+#define                bChSmoothCfg1           0x38
+#define                bChSmoothCfg2           0x1c0
+#define                bChSmoothCfg3           0xe00
+#define                bChSmoothCfg4           0x7000
+#define                bMRCMode                        0x800000
+#define                bTHEVMCfg                       0x7000000
+
+#define                bLoopFitType            0x1     // Useless
+#define                bUpdCFO                 0x40
+#define                bUpdCFOOffData          0x80
+#define                bAdvUpdCFO                      0x100
+#define                bAdvTimeCtrl            0x800
+#define                bUpdClko                        0x1000
+#define                bFC                                     0x6000
+#define                bTrackingMode           0x8000
+#define                bPhCmpEnable            0x10000
+#define                bUpdClkoLTF             0x20000
+#define                bComChCFO                       0x40000
+#define                bCSIEstiMode            0x80000
+#define                bAdvUpdEqz                      0x100000
+#define                bUChCfg                         0x7000000
+#define                bUpdEqz                 0x8000000
+
+//Rx Pseduo noise
+#define                bRxPesudoNoiseOn                0x20000000      // Useless
+#define                bRxPesudoNoise_A                0xff
+#define                bRxPesudoNoise_B                0xff00
+#define                bRxPesudoNoise_C                0xff0000
+#define                bRxPesudoNoise_D                0xff000000
+#define                bPesudoNoiseState_A     0xffff
+#define                bPesudoNoiseState_B     0xffff0000
+#define                bPesudoNoiseState_C     0xffff
+#define                bPesudoNoiseState_D     0xffff0000
+
+//7. RF Register
+//Zebra1
+#define                bZebra1_HSSIEnable              0x8             // Useless
+#define                bZebra1_TRxControl              0xc00
+#define                bZebra1_TRxGainSetting  0x07f
+#define                bZebra1_RxCorner                0xc00
+#define                bZebra1_TxChargePump    0x38
+#define                bZebra1_RxChargePump    0x7
+#define                bZebra1_ChannelNum      0xf80
+#define                bZebra1_TxLPFBW         0x400
+#define                bZebra1_RxLPFBW         0x600
+
+//Zebra4
+#define                bRTL8256RegModeCtrl1    0x100   // Useless
+#define                bRTL8256RegModeCtrl0    0x40
+#define                bRTL8256_TxLPFBW                0x18
+#define                bRTL8256_RxLPFBW                0x600
+
+//RTL8258
+#define                bRTL8258_TxLPFBW                0xc     // Useless
+#define                bRTL8258_RxLPFBW                0xc00
+#define                bRTL8258_RSSILPFBW      0xc0
+
+
+//
+// Other Definition
+//
+
+//byte endable for sb_write
+#define                bByte0                          0x1     // Useless
+#define                bByte1                          0x2
+#define                bByte2                          0x4
+#define                bByte3                          0x8
+#define                bWord0                          0x3
+#define                bWord1                          0xc
+#define                bDWord                          0xf
+
+//for PutRegsetting & GetRegSetting BitMask
+#define                bMaskByte0                      0xff    // Reg 0xc50 rOFDM0_XAAGCCore~0xC6f
+#define                bMaskByte1                      0xff00
+#define                bMaskByte2                      0xff0000
+#define                bMaskByte3                      0xff000000
+#define                bMaskHWord              0xffff0000
+#define                bMaskLWord                      0x0000ffff
+#define                bMaskDWord              0xffffffff
+#define                bMask12Bits                     0xfff
+#define                bMaskH4Bits                     0xf0000000
+#define                bMaskOFDM_D             0xffc00000
+#define                bMaskCCK                        0x3f3f3f3f
+
+//for PutRFRegsetting & GetRFRegSetting BitMask
+//#define              bMask12Bits               0xfffff       // RF Reg mask bits
+//#define              bMask20Bits               0xfffff       // RF Reg mask bits T65 RF
+#define                bRFRegOffsetMask        0xfffff
+
+#define                bEnable                 0x1     // Useless
+#define                bDisable                0x0
+
+#define                LeftAntenna             0x0     // Useless
+#define                RightAntenna    0x1
+
+#define                tCheckTxStatus          500   //500ms // Useless
+#define                tUpdateRxCounter        100   //100ms
+
+#define                rateCCK         0       // Useless
+#define                rateOFDM        1
+#define                rateHT          2
+
+//define Register-End
+#define                bPMAC_End                       0x1ff   // Useless
+#define                bFPGAPHY0_End           0x8ff
+#define                bFPGAPHY1_End           0x9ff
+#define                bCCKPHY0_End            0xaff
+#define                bOFDMPHY0_End           0xcff
+#define                bOFDMPHY1_End           0xdff
+
+//define max debug item in each debug page
+//#define bMaxItem_FPGA_PHY0        0x9
+//#define bMaxItem_FPGA_PHY1        0x3
+//#define bMaxItem_PHY_11B          0x16
+//#define bMaxItem_OFDM_PHY0        0x29
+//#define bMaxItem_OFDM_PHY1        0x0
+
+#define                bPMACControl            0x0             // Useless
+#define                bWMACControl            0x1
+#define                bWNICControl            0x2
+
+#define                PathA                   0x0     // Useless
+#define                PathB                   0x1
+#define                PathC                   0x2
+#define                PathD                   0x3
+
+/*--------------------------Define Parameters-------------------------------*/
+
+
+#endif //__INC_HAL8192SPHYREG_H
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/Hal8192CUHWImg.h b/drivers/net/wireless/realtek/rtl8192cu/include/Hal8192CUHWImg.h
new file mode 100644 (file)
index 0000000..cafea7b
--- /dev/null
@@ -0,0 +1,105 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __INC_HAL8192CU_FW_IMG_H
+#define __INC_HAL8192CU_FW_IMG_H
+
+/*Created on  2011/ 6/15,  5:45*/
+
+#ifdef CONFIG_BT_COEXISTENCE
+#define TSMCImgArrayLength 15706 //v84 TSMC COMMON 2012-04-13
+#else //#ifdef CONFIG_P2P
+#define TSMCImgArrayLength 16126 //v88 TSMC P2PPS with CCX report C2H 2012-12-05
+#endif
+extern u8 Rtl8192CUFwTSMCImgArray[TSMCImgArrayLength];
+
+#ifdef CONFIG_BT_COEXISTENCE
+#define UMCACutImgArrayLength 16248 //v79 UMC A Cut COMMON 2011-10-06
+#else //#ifdef CONFIG_P2P
+#define UMCACutImgArrayLength 16126 //v88 UMC A Cut P2PPS with CCX report C2H 2012-12-05
+#endif
+extern u8 Rtl8192CUFwUMCACutImgArray[UMCACutImgArrayLength];
+
+#ifdef CONFIG_BT_COEXISTENCE
+#define UMCBCutImgArrayLength 15686 //v84 UMC B Cut COMMON 2012-04-13
+#else //#ifdef CONFIG_P2P
+#define UMCBCutImgArrayLength 16096 //v88 UMC B Cut P2PPS with CCX report C2H 2012-12-05
+#endif
+extern u8 Rtl8192CUFwUMCBCutImgArray[UMCBCutImgArrayLength];
+
+//8188C_Formal_All_PHYforMP_111117     2011-11-23
+//8192C_Formal_92CU_PHYforMP_110817    2011-11-23
+#define PHY_REG_2TArrayLength 374
+extern u32  Rtl8192CUPHY_REG_2TArray[PHY_REG_2TArrayLength];
+#define PHY_REG_1TArrayLength 374
+extern u32 Rtl8192CUPHY_REG_1TArray[PHY_REG_1TArrayLength];
+#define PHY_ChangeTo_1T1RArrayLength 1
+extern u32 Rtl8192CUPHY_ChangeTo_1T1RArray[PHY_ChangeTo_1T1RArrayLength];
+#define PHY_ChangeTo_1T2RArrayLength 1
+extern u32 Rtl8192CUPHY_ChangeTo_1T2RArray[PHY_ChangeTo_1T2RArrayLength];
+#define PHY_ChangeTo_2T2RArrayLength 1
+extern u32 Rtl8192CUPHY_ChangeTo_2T2RArray[PHY_ChangeTo_2T2RArrayLength];
+#define PHY_REG_Array_PGLength 336
+extern u32 Rtl8192CUPHY_REG_Array_PG[PHY_REG_Array_PGLength];
+#define PHY_REG_Array_PG_mCardLength 336
+extern u32 Rtl8192CUPHY_REG_Array_PG_mCard[PHY_REG_Array_PG_mCardLength];
+#define PHY_REG_Array_MPLength 4
+extern u32 Rtl8192CUPHY_REG_Array_MP[PHY_REG_Array_MPLength];
+#define PHY_REG_1T_HPArrayLength 378
+extern u32 Rtl8192CUPHY_REG_1T_HPArray[PHY_REG_1T_HPArrayLength];
+#define PHY_REG_1T_mCardArrayLength 374
+extern u32 Rtl8192CUPHY_REG_1T_mCardArray[PHY_REG_1T_mCardArrayLength];
+#define PHY_REG_2T_mCardArrayLength 374
+extern u32 Rtl8192CUPHY_REG_2T_mCardArray[PHY_REG_2T_mCardArrayLength];
+#define PHY_REG_Array_PG_HPLength 336
+extern u32 Rtl8192CUPHY_REG_Array_PG_HP[PHY_REG_Array_PG_HPLength];
+#define RadioA_2TArrayLength 282
+extern u32 Rtl8192CURadioA_2TArray[RadioA_2TArrayLength];
+#define RadioB_2TArrayLength 78
+extern u32 Rtl8192CURadioB_2TArray[RadioB_2TArrayLength];
+#define RadioA_1TArrayLength 282
+extern u32 Rtl8192CURadioA_1TArray[RadioA_1TArrayLength];
+#define RadioB_1TArrayLength 1
+extern u32 Rtl8192CURadioB_1TArray[RadioB_1TArrayLength];
+#define RadioA_2T_mCardArrayLength 282
+extern u32 Rtl8192CURadioA_2T_mCardArray[RadioA_2T_mCardArrayLength];
+#define RadioB_2T_mCardArrayLength 78
+extern u32 Rtl8192CURadioB_2T_mCardArray[RadioB_2T_mCardArrayLength];
+#define RadioA_1T_mCardArrayLength 282
+extern u32 Rtl8192CURadioA_1T_mCardArray[RadioA_1T_mCardArrayLength];
+#define RadioB_1T_mCardArrayLength 1
+extern u32 Rtl8192CURadioB_1T_mCardArray[RadioB_1T_mCardArrayLength];
+#define RadioA_1T_HPArrayLength 282
+extern u32 Rtl8192CURadioA_1T_HPArray[RadioA_1T_HPArrayLength];
+#define RadioB_GM_ArrayLength 1
+extern u32 Rtl8192CURadioB_GM_Array[RadioB_GM_ArrayLength];
+
+// MAC reg V14 - 2011-11-23
+#define MAC_2T_ArrayLength 174
+extern u32 Rtl8192CUMAC_2T_Array[MAC_2T_ArrayLength];
+#define MACPHY_Array_PGLength 1
+extern u32 Rtl8192CUMACPHY_Array_PG[MACPHY_Array_PGLength];
+#define AGCTAB_2TArrayLength 320
+extern u32 Rtl8192CUAGCTAB_2TArray[AGCTAB_2TArrayLength];
+#define AGCTAB_1TArrayLength 320
+extern u32 Rtl8192CUAGCTAB_1TArray[AGCTAB_1TArrayLength];
+#define AGCTAB_1T_HPArrayLength 320
+extern u32 Rtl8192CUAGCTAB_1T_HPArray[AGCTAB_1T_HPArrayLength];
+
+#endif //__INC_HAL8192CU_FW_IMG_H
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/Hal8192CUHWImg_wowlan.h b/drivers/net/wireless/realtek/rtl8192cu/include/Hal8192CUHWImg_wowlan.h
new file mode 100644 (file)
index 0000000..6e18fbc
--- /dev/null
@@ -0,0 +1,33 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __INC_HAL8192CU_FW_IMG_WOWLAN_H
+#define __INC_HAL8192CU_FW_IMG_WOWLAN_H
+
+/*Created on  2011/11/ 8, 14:15*/
+
+
+#define TSMCWWImgArrayLength 13458
+extern u8 Rtl8192CUFwTSMCWWImgArray[TSMCWWImgArrayLength];
+#define UMCACutWWImgArrayLength 13458
+extern u8 Rtl8192CUFwUMCACutWWImgArray[UMCACutWWImgArrayLength];
+#define UMCBCutWWImgArrayLength 13446
+extern u8 Rtl8192CUFwUMCBCutWWImgArray[UMCBCutWWImgArrayLength];
+
+#endif //__INC_HAL8192CU_FW_IMG_WOWLAN_H
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/Hal8192DEHWImg.h b/drivers/net/wireless/realtek/rtl8192cu/include/Hal8192DEHWImg.h
new file mode 100644 (file)
index 0000000..55998c2
--- /dev/null
@@ -0,0 +1,66 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __INC_HAL8192DE_FW_IMG_H
+#define __INC_HAL8192DE_FW_IMG_H
+
+#include <basic_types.h>
+
+/*Created on  2011/11/11,  8: 8*/
+
+#define Rtl8192DEImgArrayLength 32296
+extern const u8 Rtl8192DEFwImgArray[Rtl8192DEImgArrayLength];
+#define Rtl8192DEMainArrayLength 1
+extern const u8 Rtl8192DEFwMainArray[Rtl8192DEMainArrayLength];
+#define Rtl8192DEDataArrayLength 1
+extern const u8 Rtl8192DEFwDataArray[Rtl8192DEDataArrayLength];
+#define Rtl8192DEPHY_REG_2TArrayLength 372
+extern const u32 Rtl8192DEPHY_REG_2TArray[Rtl8192DEPHY_REG_2TArrayLength];
+#define Rtl8192DEPHY_REG_1TArrayLength 1
+extern const u32 Rtl8192DEPHY_REG_1TArray[Rtl8192DEPHY_REG_1TArrayLength];
+#define Rtl8192DEPHY_REG_Array_PGLength 624
+extern const u32 Rtl8192DEPHY_REG_Array_PG[Rtl8192DEPHY_REG_Array_PGLength];
+#define Rtl8192DEPHY_REG_Array_MPLength 12
+extern const u32 Rtl8192DEPHY_REG_Array_MP[Rtl8192DEPHY_REG_Array_MPLength];
+#define Rtl8192DERadioA_2TArrayLength 378
+extern const u32 Rtl8192DERadioA_2TArray[Rtl8192DERadioA_2TArrayLength];
+#define Rtl8192DERadioB_2TArrayLength 384
+extern const u32 Rtl8192DERadioB_2TArray[Rtl8192DERadioB_2TArrayLength];
+#define Rtl8192DERadioA_1TArrayLength 1
+extern const u32 Rtl8192DERadioA_1TArray[Rtl8192DERadioA_1TArrayLength];
+#define Rtl8192DERadioB_1TArrayLength 1
+extern const u32 Rtl8192DERadioB_1TArray[Rtl8192DERadioB_1TArrayLength];
+#define Rtl8192DERadioA_2T_intPAArrayLength 378
+extern const u32 Rtl8192DERadioA_2T_intPAArray[Rtl8192DERadioA_2T_intPAArrayLength];
+#define Rtl8192DERadioB_2T_intPAArrayLength 384
+extern const u32 Rtl8192DERadioB_2T_intPAArray[Rtl8192DERadioB_2T_intPAArrayLength];
+#define Rtl8192DEMAC_2T_ArrayLength 192
+extern const u32 Rtl8192DEMAC_2T_Array[Rtl8192DEMAC_2T_ArrayLength];
+#define Rtl8192DEAGCTAB_ArrayLength 386
+extern const u32 Rtl8192DEAGCTAB_Array[Rtl8192DEAGCTAB_ArrayLength];
+#define Rtl8192DEAGCTAB_5GArrayLength 194
+extern const u32 Rtl8192DEAGCTAB_5GArray[Rtl8192DEAGCTAB_5GArrayLength];
+#define Rtl8192DEAGCTAB_2GArrayLength 194
+extern const u32 Rtl8192DEAGCTAB_2GArray[Rtl8192DEAGCTAB_2GArrayLength];
+#define Rtl8192DEAGCTAB_2TArrayLength 1
+extern const u32 Rtl8192DEAGCTAB_2TArray[Rtl8192DEAGCTAB_2TArrayLength];
+#define Rtl8192DEAGCTAB_1TArrayLength 1
+extern const u32 Rtl8192DEAGCTAB_1TArray[Rtl8192DEAGCTAB_1TArrayLength];
+
+#endif //__INC_HAL8192CU_FW_IMG_H
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/Hal8192DPhyCfg.h b/drivers/net/wireless/realtek/rtl8192cu/include/Hal8192DPhyCfg.h
new file mode 100644 (file)
index 0000000..43c1188
--- /dev/null
@@ -0,0 +1,527 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+/*****************************************************************************
+ *
+ * Module:     __INC_HAL8192DPHYCFG_H
+ *
+ *
+ * Note:
+ *
+ *
+ * Export:     Constants, macro, functions(API), global variables(None).
+ *
+ * Abbrev:
+ *
+ * History:
+ *             Data            Who             Remark
+ *      08/07/2007  MHC        1. Porting from 9x series PHYCFG.h.
+ *                                                     2. Reorganize code architecture.
+ *
+ *****************************************************************************/
+ /* Check to see if the file has been included already.  */
+#ifndef __INC_HAL8192DPHYCFG_H
+#define __INC_HAL8192DPHYCFG_H
+
+
+/*--------------------------Define Parameters-------------------------------*/
+#define LOOP_LIMIT                             5
+#define MAX_STALL_TIME                 50              //us
+#define AntennaDiversityValue  0x80    //(Adapter->bSoftwareAntennaDiversity ? 0x00:0x80)
+#define MAX_TXPWR_IDX_NMODE_92S        63
+#define Reset_Cnt_Limit                        3
+
+
+#define IQK_MAC_REG_NUM                4
+#define IQK_ADDA_REG_NUM               16
+#define IQK_BB_REG_NUM                 10
+#define IQK_BB_REG_NUM_92C     9
+#define IQK_BB_REG_NUM_92D     10
+#define IQK_BB_REG_NUM_test    6
+#define index_mapping_NUM              13
+#define Rx_index_mapping_NUM   15
+#define AVG_THERMAL_NUM                8
+#define IQK_Matrix_REG_NUM     8
+#define IQK_Matrix_Settings_NUM        1+24+21
+
+#ifdef CONFIG_PCI_HCI
+#define        SET_RTL8192SE_RF_SLEEP(_pAdapter)                                                       \
+{                                                                                                                                      \
+       u1Byte          u1bTmp;                                                                                         \
+       u1bTmp = PlatformEFIORead1Byte(_pAdapter, REG_LDOV12D_CTRL);            \
+       u1bTmp |= BIT0;                                                                                                 \
+       PlatformEFIOWrite1Byte(_pAdapter, REG_LDOV12D_CTRL, u1bTmp);            \
+       PlatformEFIOWrite1Byte(_pAdapter, REG_SPS_OCP_CFG, 0x0);                                \
+       PlatformEFIOWrite1Byte(_pAdapter, TXPAUSE, 0xFF);                               \
+       PlatformEFIOWrite2Byte(_pAdapter, CMDR, 0x57FC);                                \
+       delay_us(100);                                                                                                  \
+       PlatformEFIOWrite2Byte(_pAdapter, CMDR, 0x77FC);                                \
+       PlatformEFIOWrite1Byte(_pAdapter, PHY_CCA, 0x0);                                \
+       delay_us(10);                                                                                                   \
+       PlatformEFIOWrite2Byte(_pAdapter, CMDR, 0x37FC);                                \
+       delay_us(10);                                                                                                   \
+       PlatformEFIOWrite2Byte(_pAdapter, CMDR, 0x77FC);                                \
+       delay_us(10);                                                                                                   \
+       PlatformEFIOWrite2Byte(_pAdapter, CMDR, 0x57FC);                                \
+}
+#endif
+
+
+/*--------------------------Define Parameters-------------------------------*/
+
+
+/*------------------------------Define structure----------------------------*/
+typedef enum _SwChnlCmdID{
+       CmdID_End,
+       CmdID_SetTxPowerLevel,
+       CmdID_BBRegWrite10,
+       CmdID_WritePortUlong,
+       CmdID_WritePortUshort,
+       CmdID_WritePortUchar,
+       CmdID_RF_WriteReg,
+}SwChnlCmdID;
+
+
+/* 1. Switch channel related */
+typedef struct _SwChnlCmd{
+       SwChnlCmdID     CmdID;
+       u32                     Para1;
+       u32                     Para2;
+       u32                     msDelay;
+}SwChnlCmd;
+
+typedef enum _HW90_BLOCK{
+       HW90_BLOCK_MAC = 0,
+       HW90_BLOCK_PHY0 = 1,
+       HW90_BLOCK_PHY1 = 2,
+       HW90_BLOCK_RF = 3,
+       HW90_BLOCK_MAXIMUM = 4, // Never use this
+}HW90_BLOCK_E, *PHW90_BLOCK_E;
+
+//vivi added this for read parameter from header, 20100908
+typedef enum _RF_CONTENT{
+       radioa_txt = 0x1000,
+       radiob_txt = 0x1001,
+       radioc_txt = 0x1002,
+       radiod_txt = 0x1003
+} RF_CONTENT;
+
+#define        RF_PATH_MAX                     2
+
+typedef enum _WIRELESS_MODE {
+       WIRELESS_MODE_UNKNOWN = 0x00,
+       WIRELESS_MODE_A = 0x01,
+       WIRELESS_MODE_B = 0x02,
+       WIRELESS_MODE_G = 0x04,
+       WIRELESS_MODE_AUTO = 0x08,
+       WIRELESS_MODE_N_24G = 0x10,
+       WIRELESS_MODE_N_5G = 0x20
+} WIRELESS_MODE;
+
+
+#define CHANNEL_MAX_NUMBER             14+24+21        // 14 is the max channel number
+#define CHANNEL_GROUP_MAX              3+9     // ch1~3, ch4~9, ch10~14 total three groups
+#define MAX_PG_GROUP 13
+
+#define        CHANNEL_GROUP_MAX_2G            3
+#define        CHANNEL_GROUP_IDX_5GL           3
+#define        CHANNEL_GROUP_IDX_5GM           6
+#define        CHANNEL_GROUP_IDX_5GH           9
+#define        CHANNEL_GROUP_MAX_5G            9
+#define        CHANNEL_MAX_NUMBER_2G           14
+
+typedef enum _BaseBand_Config_Type{
+       BaseBand_Config_PHY_REG = 0,                    //Radio Path A
+       BaseBand_Config_AGC_TAB = 1,                    //Radio Path B
+}BaseBand_Config_Type, *PBaseBand_Config_Type;
+
+typedef enum _MACPHY_MODE_8192D{
+       SINGLEMAC_SINGLEPHY,
+       DUALMAC_DUALPHY,
+       DUALMAC_SINGLEPHY,
+}MACPHY_MODE_8192D,*PMACPHY_MODE_8192D;
+
+typedef enum _MACPHY_MODE_CHANGE_ACTION{
+       DMDP2DMSP = 0,
+       DMSP2DMDP = 1,
+       DMDP2SMSP = 2,
+       SMSP2DMDP = 3,
+       DMSP2SMSP = 4,
+       SMSP2DMSP = 5,
+       MAXACTION
+}MACPHY_MODE_CHANGE_ACTION,*PMACPHY_MODE_CHANGE_ACTION;
+
+typedef enum _BAND_TYPE{
+       BAND_ON_2_4G = 0,
+       BAND_ON_5G,
+       BAND_ON_BOTH,
+       BANDMAX
+}BAND_TYPE,*PBAND_TYPE;
+
+typedef enum _PHY_Rate_Tx_Power_Offset_Area{
+       RA_OFFSET_LEGACY_OFDM1,
+       RA_OFFSET_LEGACY_OFDM2,
+       RA_OFFSET_HT_OFDM1,
+       RA_OFFSET_HT_OFDM2,
+       RA_OFFSET_HT_OFDM3,
+       RA_OFFSET_HT_OFDM4,
+       RA_OFFSET_HT_CCK,
+}RA_OFFSET_AREA,*PRA_OFFSET_AREA;
+
+
+/* BB/RF related */
+typedef        enum _RF_TYPE_8190P{
+       RF_TYPE_MIN,    // 0
+       RF_8225=1,                      // 1 11b/g RF for verification only
+       RF_8256=2,                      // 2 11b/g/n
+       RF_8258=3,                      // 3 11a/b/g/n RF
+       RF_6052=4,              // 4 11b/g/n RF
+       //RF_6052=5,            // 4 11b/g/n RF
+       // TODO: We sholud remove this psudo PHY RF after we get new RF.
+       RF_PSEUDO_11N=5,        // 5, It is a temporality RF.
+}RF_TYPE_8190P_E,*PRF_TYPE_8190P_E;
+
+typedef struct _BB_REGISTER_DEFINITION{
+       u32 rfintfs;                    // set software control:
+                                                       //              0x870~0x877[8 bytes]
+
+       u32 rfintfi;                    // readback data:
+                                                       //              0x8e0~0x8e7[8 bytes]
+
+       u32 rfintfo;            // output data:
+                                                       //              0x860~0x86f [16 bytes]
+
+       u32 rfintfe;            // output enable:
+                                                       //              0x860~0x86f [16 bytes]
+
+       u32 rf3wireOffset;      // LSSI data:
+                                                       //              0x840~0x84f [16 bytes]
+
+       u32 rfLSSI_Select;      // BB Band Select:
+                                                       //              0x878~0x87f [8 bytes]
+
+       u32 rfTxGainStage;      // Tx gain stage:
+                                                       //              0x80c~0x80f [4 bytes]
+
+       u32 rfHSSIPara1;        // wire parameter control1 :
+                                                       //              0x820~0x823,0x828~0x82b, 0x830~0x833, 0x838~0x83b [16 bytes]
+
+       u32 rfHSSIPara2;        // wire parameter control2 :
+                                                       //              0x824~0x827,0x82c~0x82f, 0x834~0x837, 0x83c~0x83f [16 bytes]
+
+       u32 rfSwitchControl; //Tx Rx antenna control :
+                                                       //              0x858~0x85f [16 bytes]
+
+       u32 rfAGCControl1;      //AGC parameter control1 :
+                                                       //              0xc50~0xc53,0xc58~0xc5b, 0xc60~0xc63, 0xc68~0xc6b [16 bytes]
+
+       u32 rfAGCControl2;      //AGC parameter control2 :
+                                                       //              0xc54~0xc57,0xc5c~0xc5f, 0xc64~0xc67, 0xc6c~0xc6f [16 bytes]
+
+       u32 rfRxIQImbalance; //OFDM Rx IQ imbalance matrix :
+                                                       //              0xc14~0xc17,0xc1c~0xc1f, 0xc24~0xc27, 0xc2c~0xc2f [16 bytes]
+
+       u32 rfRxAFE;            //Rx IQ DC ofset and Rx digital filter, Rx DC notch filter :
+                                                       //              0xc10~0xc13,0xc18~0xc1b, 0xc20~0xc23, 0xc28~0xc2b [16 bytes]
+
+       u32 rfTxIQImbalance; //OFDM Tx IQ imbalance matrix
+                                                       //              0xc80~0xc83,0xc88~0xc8b, 0xc90~0xc93, 0xc98~0xc9b [16 bytes]
+
+       u32 rfTxAFE;            //Tx IQ DC Offset and Tx DFIR type
+                                                       //              0xc84~0xc87,0xc8c~0xc8f, 0xc94~0xc97, 0xc9c~0xc9f [16 bytes]
+
+       u32 rfLSSIReadBack;     //LSSI RF readback data SI mode
+                                                               //              0x8a0~0x8af [16 bytes]
+
+       u32 rfLSSIReadBackPi;   //LSSI RF readback data PI mode 0x8b8-8bc for Path A and B
+
+}BB_REGISTER_DEFINITION_T, *PBB_REGISTER_DEFINITION_T;
+
+#ifdef CONFIG_MP_INCLUDED
+typedef enum _ANTENNA_PATH{
+        ANTENNA_NONE   = 0x00,
+               ANTENNA_D               ,
+               ANTENNA_C               ,
+               ANTENNA_CD              ,
+               ANTENNA_B               ,
+               ANTENNA_BD              ,
+               ANTENNA_BC              ,
+               ANTENNA_BCD             ,
+               ANTENNA_A               ,
+               ANTENNA_AD              ,
+               ANTENNA_AC              ,
+               ANTENNA_ACD             ,
+               ANTENNA_AB              ,
+               ANTENNA_ABD             ,
+               ANTENNA_ABC             ,
+               ANTENNA_ABCD
+} ANTENNA_PATH;
+#endif
+
+typedef struct _R_ANTENNA_SELECT_OFDM{
+       u32                     r_tx_antenna:4;
+       u32                     r_ant_l:4;
+       u32                     r_ant_non_ht:4;
+       u32                     r_ant_ht1:4;
+       u32                     r_ant_ht2:4;
+       u32                     r_ant_ht_s1:4;
+       u32                     r_ant_non_ht_s1:4;
+       u32                     OFDM_TXSC:2;
+       u32                     Reserved:2;
+}R_ANTENNA_SELECT_OFDM;
+
+typedef struct _R_ANTENNA_SELECT_CCK{
+       u8                      r_cckrx_enable_2:2;
+       u8                      r_cckrx_enable:2;
+       u8                      r_ccktx_enable:4;
+}R_ANTENNA_SELECT_CCK;
+
+/*------------------------------Define structure----------------------------*/
+
+
+/*------------------------Export global variable----------------------------*/
+/*------------------------Export global variable----------------------------*/
+
+
+/*------------------------Export Marco Definition---------------------------*/
+/*------------------------Export Marco Definition---------------------------*/
+
+//Added for TX Power
+//u8 GetRightChnlPlace(u8 chnl);
+u8 rtl8192d_GetRightChnlPlaceforIQK(u8 chnl);
+u8 rtl8192d_getChnlGroupfromArray(u8 chnl);
+/*--------------------------Exported Function prototype---------------------*/
+//
+// BB and RF register read/write
+//
+void   rtl8192d_PHY_SetBBReg1Byte(     IN      PADAPTER        Adapter,
+                                                               IN      u32             RegAddr,
+                                                               IN      u32             BitMask,
+                                                               IN      u32             Data    );
+u32    rtl8192d_PHY_QueryBBReg(        IN      PADAPTER        Adapter,
+                                                               IN      u32             RegAddr,
+                                                               IN      u32             BitMask );
+void   rtl8192d_PHY_SetBBReg(  IN      PADAPTER        Adapter,
+                                                               IN      u32             RegAddr,
+                                                               IN      u32             BitMask,
+                                                               IN      u32             Data    );
+u32    rtl8192d_PHY_QueryRFReg(        IN      PADAPTER                        Adapter,
+                                                               IN      RF_RADIO_PATH_E eRFPath,
+                                                               IN      u32                             RegAddr,
+                                                               IN      u32                             BitMask );
+void   rtl8192d_PHY_SetRFReg(  IN      PADAPTER                        Adapter,
+                                                               IN      RF_RADIO_PATH_E eRFPath,
+                                                               IN      u32                             RegAddr,
+                                                               IN      u32                             BitMask,
+                                                               IN      u32                             Data    );
+
+//
+// Initialization related function
+//
+/* MAC/BB/RF HAL config */
+extern int     PHY_MACConfig8192D(     IN      PADAPTER        Adapter );
+extern int     PHY_BBConfig8192D(      IN      PADAPTER        Adapter );
+extern int     PHY_RFConfig8192D(      IN      PADAPTER        Adapter );
+/* RF config */
+int    rtl8192d_PHY_ConfigRFWithParaFile(      IN      PADAPTER        Adapter,
+                                                                                               IN      u8*     pFileName,
+                                                                                               IN      RF_RADIO_PATH_E eRFPath);
+int    rtl8192d_PHY_ConfigRFWithHeaderFile(    IN      PADAPTER                        Adapter,
+                                                                                               IN      RF_CONTENT                      Content,
+                                                                                               IN      RF_RADIO_PATH_E eRFPath);
+/* BB/RF readback check for making sure init OK */
+int    rtl8192d_PHY_CheckBBAndRFOK(    IN      PADAPTER                        Adapter,
+                                                                               IN      HW90_BLOCK_E            CheckBlock,
+                                                                               IN      RF_RADIO_PATH_E eRFPath   );
+/* Read initi reg value for tx power setting. */
+void   rtl8192d_PHY_GetHWRegOriginalValue(     IN      PADAPTER                Adapter );
+
+//
+// RF Power setting
+//
+//extern       BOOLEAN PHY_SetRFPowerState(IN  PADAPTER                        Adapter,
+//                                                                     IN      RT_RF_POWER_STATE       eRFPowerState);
+
+//
+// BB TX Power R/W
+//
+void   PHY_GetTxPowerLevel8192D(       IN      PADAPTER                Adapter,
+                                                                                       OUT u32*                powerlevel      );
+void   PHY_SetTxPowerLevel8192D(       IN      PADAPTER                Adapter,
+                                                                                       IN      u8                      channel );
+BOOLEAN        PHY_UpdateTxPowerDbm8192D(      IN      PADAPTER        Adapter,
+                                                                                       IN      int             powerInDbm      );
+
+//
+VOID
+PHY_ScanOperationBackup8192D(IN        PADAPTER        Adapter,
+                                                                               IN      u8              Operation       );
+
+//
+// Switch bandwidth for 8192S
+//
+//void PHY_SetBWModeCallback8192C(     IN      PRT_TIMER               pTimer  );
+void   PHY_SetBWMode8192D(     IN      PADAPTER                        pAdapter,
+                                                                       IN      HT_CHANNEL_WIDTH        ChnlWidth,
+                                                                       IN      unsigned char   Offset  );
+
+//
+// Set FW CMD IO for 8192S.
+//
+//extern       BOOLEAN HalSetIO8192C(  IN      PADAPTER                        Adapter,
+//                                                                     IN      IO_TYPE                         IOType);
+
+//
+// Set A2 entry to fw for 8192S
+//
+extern void FillA2Entry8192C(          IN      PADAPTER                        Adapter,
+                                                                               IN      u8                              index,
+                                                                               IN      u8*                             val);
+
+
+//
+// channel switch related funciton
+//
+//extern       void    PHY_SwChnlCallback8192C(        IN      PRT_TIMER               pTimer  );
+void   PHY_SwChnl8192D(        IN      PADAPTER                pAdapter,
+                                                                       IN      u8                      channel );
+                               // Call after initialization
+void   PHY_SwChnlPhy8192D(     IN      PADAPTER                pAdapter,
+                                                                       IN      u8                      channel );
+
+extern void ChkFwCmdIoDone(    IN      PADAPTER        Adapter);
+
+#ifdef USE_WORKITEM
+//extern       void SetIOWorkItemCallback( IN PVOID            pContext );
+#else
+//extern       void SetIOTimerCallback( IN PRT_TIMER           pTimer);
+#endif
+
+//
+// BB/MAC/RF other monitor API
+//
+void   PHY_SetMonitorMode8192D(IN      PADAPTER        pAdapter,
+                                                                               IN      BOOLEAN         bEnableMonitorMode      );
+
+BOOLEAN        PHY_CheckIsLegalRfPath8192D(IN  PADAPTER        pAdapter,
+                                                                                       IN      u32             eRFPath );
+
+//
+// IQ calibrate
+//
+void   rtl8192d_PHY_IQCalibrate(       IN      PADAPTER        pAdapter);
+
+
+//
+// LC calibrate
+//
+void   rtl8192d_PHY_LCCalibrate(IN     PADAPTER        pAdapter);
+
+//
+// AP calibrate
+//
+void   rtl8192d_PHY_APCalibrate(IN     PADAPTER        pAdapter, IN    char            delta);
+
+
+//
+// Modify the value of the hw register when beacon interval be changed.
+//
+void
+rtl8192d_PHY_SetBeaconHwReg(   IN      PADAPTER                Adapter,
+                                       IN      u16                     BeaconInterval  );
+
+
+extern VOID
+PHY_SwitchEphyParameter(
+       IN      PADAPTER                        Adapter
+       );
+
+extern VOID
+PHY_EnableHostClkReq(
+       IN      PADAPTER                        Adapter
+       );
+
+BOOLEAN
+SetAntennaConfig92C(
+       IN      PADAPTER        Adapter,
+       IN      u8              DefaultAnt
+       );
+
+VOID
+PHY_StopTRXBeforeChangeBand8192D(
+         PADAPTER              Adapter
+);
+
+VOID
+PHY_UpdateBBRFConfiguration8192D(
+       IN PADAPTER Adapter,
+       IN BOOLEAN bisBandSwitch
+);
+
+VOID PHY_ReadMacPhyMode92D(
+       IN PADAPTER     Adapter,
+       IN BOOLEAN      AutoloadFail
+);
+
+VOID PHY_ConfigMacPhyMode92D(
+       IN PADAPTER     Adapter
+);
+
+VOID PHY_ConfigMacPhyModeInfo92D(
+       IN PADAPTER     Adapter
+);
+
+VOID PHY_ConfigMacCoexist_RFPage92D(
+       IN PADAPTER     Adapter
+);
+
+VOID
+rtl8192d_PHY_InitRxSetting(
+       IN      PADAPTER Adapter
+);
+
+VOID
+rtl8192d_PHY_ResetIQKResult(
+       IN      PADAPTER Adapter
+);
+
+
+VOID
+rtl8192d_PHY_SetRFPathSwitch(IN        PADAPTER        pAdapter, IN    BOOLEAN         bMain);
+
+VOID
+HalChangeCCKStatus8192D(
+       IN      PADAPTER        Adapter,
+       IN      BOOLEAN         bCCKDisable
+);
+
+VOID
+PHY_InitPABias92D(IN   PADAPTER Adapter);
+
+/*--------------------------Exported Function prototype---------------------*/
+
+#define PHY_SetBBReg1Byte(Adapter, RegAddr, BitMask, Data) rtl8192d_PHY_SetBBReg1Byte((Adapter), (RegAddr), (BitMask), (Data))
+#define PHY_QueryBBReg(Adapter, RegAddr, BitMask) rtl8192d_PHY_QueryBBReg((Adapter), (RegAddr), (BitMask))
+#define PHY_SetBBReg(Adapter, RegAddr, BitMask, Data) rtl8192d_PHY_SetBBReg((Adapter), (RegAddr), (BitMask), (Data))
+#define PHY_QueryRFReg(Adapter, eRFPath, RegAddr, BitMask) rtl8192d_PHY_QueryRFReg((Adapter), (eRFPath), (RegAddr), (BitMask))
+#define PHY_SetRFReg(Adapter, eRFPath, RegAddr, BitMask, Data) rtl8192d_PHY_SetRFReg((Adapter), (eRFPath), (RegAddr), (BitMask), (Data))
+
+#define PHY_SetMacReg  PHY_SetBBReg
+
+#endif // __INC_HAL8192SPHYCFG_H
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/Hal8192DPhyReg.h b/drivers/net/wireless/realtek/rtl8192cu/include/Hal8192DPhyReg.h
new file mode 100644 (file)
index 0000000..f79d8a2
--- /dev/null
@@ -0,0 +1,1170 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+/*****************************************************************************
+ *
+ * Module:     __INC_HAL8192DPHYREG_H
+ *
+ *
+ * Note:       1. Define PMAC/BB register map
+ *                     2. Define RF register map
+ *                     3. PMAC/BB register bit mask.
+ *                     4. RF reg bit mask.
+ *                     5. Other BB/RF relative definition.
+ *
+ *
+ * Export:     Constants, macro, functions(API), global variables(None).
+ *
+ * Abbrev:
+ *
+ * History:
+ *             Data            Who             Remark
+ *      08/07/2007  MHC        1. Porting from 9x series PHYCFG.h.
+ *                                                     2. Reorganize code architecture.
+ *     09/25/2008      MH              1. Add RL6052 register definition
+ *
+ *****************************************************************************/
+#ifndef __INC_HAL8192DPHYREG_H
+#define __INC_HAL8192DPHYREG_H
+
+
+/*--------------------------Define Parameters-------------------------------*/
+
+//============================================================
+//       8192S Regsiter offset definition
+//============================================================
+
+//
+// BB-PHY register PMAC 0x100 PHY 0x800 - 0xEFF
+// 1. PMAC duplicate register due to connection: RF_Mode, TRxRN, NumOf L-STF
+// 2. 0x800/0x900/0xA00/0xC00/0xD00/0xE00
+// 3. RF register 0x00-2E
+// 4. Bit Mask for BB/RF register
+// 5. Other defintion for BB/RF R/W
+//
+
+
+//
+// 1. PMAC duplicate register due to connection: RF_Mode, TRxRN, NumOf L-STF
+// 1. Page1(0x100)
+//
+#define                rPMAC_Reset                                     0x100
+#define                rPMAC_TxStart                                   0x104
+#define                rPMAC_TxLegacySIG                               0x108
+#define                rPMAC_TxHTSIG1                          0x10c
+#define                rPMAC_TxHTSIG2                          0x110
+#define                rPMAC_PHYDebug                          0x114
+#define                rPMAC_TxPacketNum                               0x118
+#define                rPMAC_TxIdle                                    0x11c
+#define                rPMAC_TxMACHeader0                      0x120
+#define                rPMAC_TxMACHeader1                      0x124
+#define                rPMAC_TxMACHeader2                      0x128
+#define                rPMAC_TxMACHeader3                      0x12c
+#define                rPMAC_TxMACHeader4                      0x130
+#define                rPMAC_TxMACHeader5                      0x134
+#define                rPMAC_TxDataType                                0x138
+#define                rPMAC_TxRandomSeed                      0x13c
+#define                rPMAC_CCKPLCPPreamble                   0x140
+#define                rPMAC_CCKPLCPHeader                     0x144
+#define                rPMAC_CCKCRC16                          0x148
+#define                rPMAC_OFDMRxCRC32OK                     0x170
+#define                rPMAC_OFDMRxCRC32Er                     0x174
+#define                rPMAC_OFDMRxParityEr                    0x178
+#define                rPMAC_OFDMRxCRC8Er                      0x17c
+#define                rPMAC_CCKCRxRC16Er                      0x180
+#define                rPMAC_CCKCRxRC32Er                      0x184
+#define                rPMAC_CCKCRxRC32OK                      0x188
+#define                rPMAC_TxStatus                                  0x18c
+
+//
+// 2. Page2(0x200)
+//
+// The following two definition are only used for USB interface.
+#define                RF_BB_CMD_ADDR                          0x02c0  // RF/BB read/write command address.
+#define                RF_BB_CMD_DATA                          0x02c4  // RF/BB read/write command data.
+
+//
+// 3. Page8(0x800)
+//
+#define                rFPGA0_RFMOD                            0x800   //RF mode & CCK TxSC // RF BW Setting??
+
+#define                rFPGA0_TxInfo                           0x804   // Status report??
+#define                rFPGA0_PSDFunction                      0x808
+
+#define                rFPGA0_TxGainStage                      0x80c   // Set TX PWR init gain?
+
+#define                rFPGA0_RFTiming1                        0x810   // Useless now
+#define                rFPGA0_RFTiming2                        0x814
+
+#define                rFPGA0_XA_HSSIParameter1                0x820   // RF 3 wire register
+#define                rFPGA0_XA_HSSIParameter2                0x824
+#define                rFPGA0_XB_HSSIParameter1                0x828
+#define                rFPGA0_XB_HSSIParameter2                0x82c
+
+#define                rFPGA0_XA_LSSIParameter         0x840
+#define                rFPGA0_XB_LSSIParameter         0x844
+
+#define                rFPGA0_RFWakeUpParameter                0x850   // Useless now
+#define                rFPGA0_RFSleepUpParameter               0x854
+
+#define                rFPGA0_XAB_SwitchControl                0x858   // RF Channel switch
+#define                rFPGA0_XCD_SwitchControl                0x85c
+
+#define                rFPGA0_XA_RFInterfaceOE         0x860   // RF Channel switch
+#define                rFPGA0_XB_RFInterfaceOE         0x864
+
+#define                rFPGA0_XAB_RFInterfaceSW                0x870   // RF Interface Software Control
+#define                rFPGA0_XCD_RFInterfaceSW                0x874
+
+#define                rFPGA0_XAB_RFParameter          0x878   // RF Parameter
+#define                rFPGA0_XCD_RFParameter          0x87c
+
+#define                rFPGA0_AnalogParameter1         0x880   // Crystal cap setting RF-R/W protection for parameter4??
+#define                rFPGA0_AnalogParameter2         0x884
+#define                rFPGA0_AnalogParameter3         0x888
+#define                rFPGA0_AdDaClockEn                      0x888   // enable ad/da clock1 for dual-phy
+#define                rFPGA0_AnalogParameter4         0x88c
+
+#define                rFPGA0_XA_LSSIReadBack          0x8a0   // Tranceiver LSSI Readback
+#define                rFPGA0_XB_LSSIReadBack          0x8a4
+#define                rFPGA0_XC_LSSIReadBack          0x8a8
+#define                rFPGA0_XD_LSSIReadBack          0x8ac
+
+#define                rFPGA0_PSDReport                                0x8b4   // Useless now
+#define                TransceiverA_HSPI_Readback      0x8b8   // Transceiver A HSPI Readback
+#define                TransceiverB_HSPI_Readback      0x8bc   // Transceiver B HSPI Readback
+#define                rFPGA0_XAB_RFInterfaceRB                0x8e0   // Useless now // RF Interface Readback Value
+#define                rFPGA0_XCD_RFInterfaceRB                0x8e4   // Useless now
+
+//
+// 4. Page9(0x900)
+//
+#define                rFPGA1_RFMOD                            0x900   //RF mode & OFDM TxSC // RF BW Setting??
+
+#define                rFPGA1_TxBlock                          0x904   // Useless now
+#define                rFPGA1_DebugSelect                      0x908   // Useless now
+#define                rFPGA1_TxInfo                           0x90c   // Useless now // Status report??
+
+//
+// 5. PageA(0xA00)
+//
+// Set Control channel to upper or lower. These settings are required only for 40MHz
+#define                rCCK0_System                            0xa00
+
+#define                rCCK0_AFESetting                        0xa04   // Disable init gain now // Select RX path by RSSI
+#define                rCCK0_CCA                                       0xa08   // Disable init gain now // Init gain
+
+#define                rCCK0_RxAGC1                            0xa0c   //AGC default value, saturation level // Antenna Diversity, RX AGC, LNA Threshold, RX LNA Threshold useless now. Not the same as 90 series
+#define                rCCK0_RxAGC2                            0xa10   //AGC & DAGC
+
+#define                rCCK0_RxHP                                      0xa14
+
+#define                rCCK0_DSPParameter1             0xa18   //Timing recovery & Channel estimation threshold
+#define                rCCK0_DSPParameter2             0xa1c   //SQ threshold
+
+#define                rCCK0_TxFilter1                         0xa20
+#define                rCCK0_TxFilter2                         0xa24
+#define                rCCK0_DebugPort                 0xa28   //debug port and Tx filter3
+#define                rCCK0_FalseAlarmReport          0xa2c   //0xa2d useless now 0xa30-a4f channel report
+#define                rCCK0_TRSSIReport                       0xa50
+#define                rCCK0_RxReport                          0xa54  //0xa57
+#define                rCCK0_FACounterLower            0xa5c  //0xa5b
+#define                rCCK0_FACounterUpper            0xa58  //0xa5c
+
+//
+// PageB(0xB00)
+//
+#define                rPdp_AntA                                       0xb00
+#define                rPdp_AntA_4                             0xb04
+#define                rPdp_AntA_8                             0xb08
+#define                rPdp_AntA_C                             0xb0c
+#define                rPdp_AntA_10                                    0xb10
+#define                rPdp_AntA_14                                    0xb14
+#define                rPdp_AntA_18                                    0xb18
+#define                rPdp_AntA_1C                                    0xb1c
+#define                rPdp_AntA_20                                    0xb20
+#define                rPdp_AntA_24                                    0xb24
+
+#define                rConfig_Pmpd_AntA                       0xb28
+#define                rConfig_ram64x16                                0xb2c
+
+#define                rBndA                                           0xb30
+#define                rHssiPar                                                0xb34
+
+#define                rConfig_AntA                                    0xb68
+#define                rConfig_AntB                                    0xb6c
+
+#define                rPdp_AntB                                       0xb70
+#define                rPdp_AntB_4                                     0xb74
+#define                rPdp_AntB_8                                     0xb78
+#define                rPdp_AntB_C                                     0xb7c
+#define                rPdp_AntB_10                                    0xb80
+#define                rPdp_AntB_14                                    0xb84
+#define                rPdp_AntB_18                                    0xb88
+#define                rPdp_AntB_1C                                    0xb8c
+#define                rPdp_AntB_20                                    0xb90
+#define                rPdp_AntB_24                                    0xb94
+
+#define                rConfig_Pmpd_AntB                       0xb98
+
+#define                rBndB                                           0xba0
+
+#define                rAPK                                                    0xbd8
+#define                rPm_Rx0_AntA                            0xbdc
+#define                rPm_Rx1_AntA                            0xbe0
+#define                rPm_Rx2_AntA                            0xbe4
+#define                rPm_Rx3_AntA                            0xbe8
+#define                rPm_Rx0_AntB                            0xbec
+#define                rPm_Rx1_AntB                            0xbf0
+#define                rPm_Rx2_AntB                            0xbf4
+#define                rPm_Rx3_AntB                            0xbf8
+
+//
+// 6. PageC(0xC00)
+//
+#define                rOFDM0_LSTF                             0xc00
+
+#define                rOFDM0_TRxPathEnable            0xc04
+#define                rOFDM0_TRMuxPar                 0xc08
+#define                rOFDM0_TRSWIsolation            0xc0c
+
+#define                rOFDM0_XARxAFE                  0xc10  //RxIQ DC offset, Rx digital filter, DC notch filter
+#define                rOFDM0_XARxIQImbalance          0xc14  //RxIQ imblance matrix
+#define                rOFDM0_XBRxAFE                          0xc18
+#define                rOFDM0_XBRxIQImbalance          0xc1c
+#define                rOFDM0_XCRxAFE                          0xc20
+#define                rOFDM0_XCRxIQImbalance          0xc24
+#define                rOFDM0_XDRxAFE                          0xc28
+#define                rOFDM0_XDRxIQImbalance          0xc2c
+
+#define                rOFDM0_RxDetector1                      0xc30  //PD,BW & SBD    // DM tune init gain
+#define                rOFDM0_RxDetector2                      0xc34  //SBD & Fame Sync.
+#define                rOFDM0_RxDetector3                      0xc38  //Frame Sync.
+#define                rOFDM0_RxDetector4                      0xc3c  //PD, SBD, Frame Sync & Short-GI
+
+#define                rOFDM0_RxDSP                            0xc40  //Rx Sync Path
+#define                rOFDM0_CFOandDAGC               0xc44  //CFO & DAGC
+#define                rOFDM0_CCADropThreshold 0xc48 //CCA Drop threshold
+#define                rOFDM0_ECCAThreshold            0xc4c // energy CCA
+
+#define                rOFDM0_XAAGCCore1                       0xc50   // DIG
+#define                rOFDM0_XAAGCCore2                       0xc54
+#define                rOFDM0_XBAGCCore1                       0xc58
+#define                rOFDM0_XBAGCCore2                       0xc5c
+#define                rOFDM0_XCAGCCore1                       0xc60
+#define                rOFDM0_XCAGCCore2                       0xc64
+#define                rOFDM0_XDAGCCore1                       0xc68
+#define                rOFDM0_XDAGCCore2                       0xc6c
+
+#define                rOFDM0_AGCParameter1                    0xc70
+#define                rOFDM0_AGCParameter2                    0xc74
+#define                rOFDM0_AGCRSSITable                     0xc78
+#define                rOFDM0_HTSTFAGC                         0xc7c
+
+#define                rOFDM0_XATxIQImbalance          0xc80   // TX PWR TRACK and DIG
+#define                rOFDM0_XATxAFE                          0xc84
+#define                rOFDM0_XBTxIQImbalance          0xc88
+#define                rOFDM0_XBTxAFE                          0xc8c
+#define                rOFDM0_XCTxIQImbalance          0xc90
+#define                rOFDM0_XCTxAFE                                  0xc94
+#define                rOFDM0_XDTxIQImbalance          0xc98
+#define                rOFDM0_XDTxAFE                          0xc9c
+
+#define                rOFDM0_RxIQExtAnta                      0xca0
+#define                rOFDM0_TxCoeff1                         0xca4
+#define                rOFDM0_TxCoeff2                         0xca8
+#define                rOFDM0_TxCoeff3                         0xcac
+#define                rOFDM0_TxCoeff4                         0xcb0
+#define                rOFDM0_TxCoeff5                         0xcb4
+#define                rOFDM0_TxCoeff6                         0xcb8
+#define                rOFDM0_RxHPParameter                    0xce0
+#define                rOFDM0_TxPseudoNoiseWgt         0xce4
+#define                rOFDM0_FrameSync                                0xcf0
+#define                rOFDM0_DFSReport                                0xcf4
+
+//
+// 7. PageD(0xD00)
+//
+#define                rOFDM1_LSTF                                     0xd00
+#define                rOFDM1_TRxPathEnable                    0xd04
+
+#define                rOFDM1_CFO                                              0xd08   // No setting now
+#define                rOFDM1_CSI1                                     0xd10
+#define                rOFDM1_SBD                                              0xd14
+#define                rOFDM1_CSI2                                     0xd18
+#define                rOFDM1_CFOTracking                      0xd2c
+#define                rOFDM1_TRxMesaure1                      0xd34
+#define                rOFDM1_IntfDet                                  0xd3c
+#define                rOFDM1_PseudoNoiseStateAB               0xd50
+#define                rOFDM1_PseudoNoiseStateCD               0xd54
+#define                rOFDM1_RxPseudoNoiseWgt         0xd58
+
+#define                rOFDM_PHYCounter1                               0xda0  //cca, parity fail
+#define                rOFDM_PHYCounter2                               0xda4  //rate illegal, crc8 fail
+#define                rOFDM_PHYCounter3                               0xda8  //MCS not support
+
+#define                rOFDM_ShortCFOAB                                0xdac   // No setting now
+#define                rOFDM_ShortCFOCD                                0xdb0
+#define                rOFDM_LongCFOAB                         0xdb4
+#define                rOFDM_LongCFOCD                         0xdb8
+#define                rOFDM_TailCFOAB                         0xdbc
+#define                rOFDM_TailCFOCD                         0xdc0
+#define                rOFDM_PWMeasure1                        0xdc4
+#define                rOFDM_PWMeasure2                        0xdc8
+#define                rOFDM_BWReport                          0xdcc
+#define                rOFDM_AGCReport                         0xdd0
+#define                rOFDM_RxSNR                                     0xdd4
+#define                rOFDM_RxEVMCSI                          0xdd8
+#define                rOFDM_SIGReport                         0xddc
+
+
+//
+// 8. PageE(0xE00)
+//
+#define                rTxAGC_A_Rate18_06                      0xe00
+#define                rTxAGC_A_Rate54_24                      0xe04
+#define                rTxAGC_A_CCK1_Mcs32                     0xe08
+#define                rTxAGC_A_Mcs03_Mcs00                    0xe10
+#define                rTxAGC_A_Mcs07_Mcs04                    0xe14
+#define                rTxAGC_A_Mcs11_Mcs08                    0xe18
+#define                rTxAGC_A_Mcs15_Mcs12                    0xe1c
+
+#define                rTxAGC_B_Rate18_06                      0x830
+#define                rTxAGC_B_Rate54_24                      0x834
+#define                rTxAGC_B_CCK1_55_Mcs32          0x838
+#define                rTxAGC_B_Mcs03_Mcs00                    0x83c
+#define                rTxAGC_B_Mcs07_Mcs04                    0x848
+#define                rTxAGC_B_Mcs11_Mcs08                    0x84c
+#define                rTxAGC_B_Mcs15_Mcs12                    0x868
+#define                rTxAGC_B_CCK11_A_CCK2_11                0x86c
+
+#define                rFPGA0_IQK                                              0xe28
+#define                rTx_IQK_Tone_A                                  0xe30
+#define                rRx_IQK_Tone_A                                  0xe34
+#define                rTx_IQK_PI_A                                    0xe38
+#define                rRx_IQK_PI_A                                    0xe3c
+
+#define                rTx_IQK                                                 0xe40
+#define                rRx_IQK                                                 0xe44
+#define                rIQK_AGC_Pts                                    0xe48
+#define                rIQK_AGC_Rsp                                    0xe4c
+#define                rTx_IQK_Tone_B                                  0xe50
+#define                rRx_IQK_Tone_B                                  0xe54
+#define                rTx_IQK_PI_B                                    0xe58
+#define                rRx_IQK_PI_B                                    0xe5c
+#define                rIQK_AGC_Cont                                   0xe60
+
+#define                rBlue_Tooth                                             0xe6c
+#define                rRx_Wait_CCA                                    0xe70
+#define                rTx_CCK_RFON                                    0xe74
+#define                rTx_CCK_BBON                                    0xe78
+#define                rTx_OFDM_RFON                                   0xe7c
+#define                rTx_OFDM_BBON                                   0xe80
+#define                rTx_To_Rx                                               0xe84
+#define                rTx_To_Tx                                               0xe88
+#define                rRx_CCK                                                 0xe8c
+
+#define                rTx_Power_Before_IQK_A          0xe94
+#define                rTx_Power_After_IQK_A                   0xe9c
+
+#define                rRx_Power_Before_IQK_A          0xea0
+#define                rRx_Power_Before_IQK_A_2                0xea4
+#define                rRx_Power_After_IQK_A                   0xea8
+#define                rRx_Power_After_IQK_A_2         0xeac
+
+#define                rTx_Power_Before_IQK_B          0xeb4
+#define                rTx_Power_After_IQK_B                   0xebc
+
+#define                rRx_Power_Before_IQK_B          0xec0
+#define                rRx_Power_Before_IQK_B_2                0xec4
+#define                rRx_Power_After_IQK_B                   0xec8
+#define                rRx_Power_After_IQK_B_2         0xecc
+
+#define                rRx_OFDM                                                0xed0
+#define                rRx_Wait_RIFS                                   0xed4
+#define                rRx_TO_Rx                                               0xed8
+#define                rStandby                                                0xedc
+#define                rSleep                                                  0xee0
+#define                rPMPD_ANAEN                                     0xeec
+
+//
+// 7. RF Register 0x00-0x2E (RF 8256)
+//    RF-0222D 0x00-3F
+//
+//Zebra1
+#define                rZebra1_HSSIEnable                              0x0     // Useless now
+#define                rZebra1_TRxEnable1                              0x1
+#define                rZebra1_TRxEnable2                              0x2
+#define                rZebra1_AGC                                     0x4
+#define                rZebra1_ChargePump                      0x5
+#define                rZebra1_Channel                         0x7     // RF channel switch
+
+//#endif
+#define                rZebra1_TxGain                                  0x8     // Useless now
+#define                rZebra1_TxLPF                                   0x9
+#define                rZebra1_RxLPF                                   0xb
+#define                rZebra1_RxHPFCorner                     0xc
+
+//Zebra4
+#define                rGlobalCtrl                                             0       // Useless now
+#define                rRTL8256_TxLPF                                  19
+#define                rRTL8256_RxLPF                                  11
+
+//RTL8258
+#define                rRTL8258_TxLPF                                  0x11    // Useless now
+#define                rRTL8258_RxLPF                                  0x13
+#define                rRTL8258_RSSILPF                                0xa
+
+//
+// RL6052 Register definition
+//
+#define                RF_AC                                           0x00    //
+
+#define                RF_IQADJ_G1                             0x01    //
+#define                RF_IQADJ_G2                             0x02    //
+#define                RF_BS_PA_APSET_G1_G4            0x03
+#define                RF_BS_PA_APSET_G5_G8            0x04
+#define                RF_POW_TRSW                             0x05    //
+
+#define                RF_GAIN_RX                                      0x06    //
+#define                RF_GAIN_TX                                      0x07    //
+
+#define                RF_TXM_IDAC                             0x08    //
+#define                RF_IPA_G                                        0x09    //
+#define                RF_TXBIAS_G                             0x0A
+#define                RF_TXPA_AG                                      0x0B
+#define                RF_IPA_A                                        0x0C    //
+#define                RF_TXBIAS_A                             0x0D
+#define                RF_BS_PA_APSET_G9_G11   0x0E
+#define                RF_BS_IQGEN                             0x0F    //
+
+#define                RF_MODE1                                        0x10    //
+#define                RF_MODE2                                        0x11    //
+
+#define                RF_RX_AGC_HP                            0x12    //
+#define                RF_TX_AGC                                       0x13    //
+#define                RF_BIAS                                         0x14    //
+#define                RF_IPA                                          0x15    //
+#define                RF_POW_ABILITY                  0x17    //
+#define                RF_MODE_AG                              0x18    //
+#define                rRfChannel                                      0x18    // RF channel and BW switch
+#define                RF_CHNLBW                                       0x18    // RF channel and BW switch
+#define                RF_TOP                                          0x19    //
+
+#define                RF_RX_G1                                        0x1A    //
+#define                RF_RX_G2                                        0x1B    //
+
+#define                RF_RX_BB2                                       0x1C    //
+#define                RF_RX_BB1                                       0x1D    //
+
+#define                RF_RCK1                                 0x1E    //
+#define                RF_RCK2                                 0x1F    //
+
+#define                RF_TX_G1                                        0x20    //
+#define                RF_TX_G2                                        0x21    //
+#define                RF_TX_G3                                        0x22    //
+
+#define                RF_TX_BB1                                       0x23    //
+
+#define                RF_T_METER                                      0x42    //
+
+#define                RF_SYN_G1                                       0x25    // RF TX Power control
+#define                RF_SYN_G2                                       0x26    // RF TX Power control
+#define                RF_SYN_G3                                       0x27    // RF TX Power control
+#define                RF_SYN_G4                                       0x28    // RF TX Power control
+#define                RF_SYN_G5                                       0x29    // RF TX Power control
+#define                RF_SYN_G6                                       0x2A    // RF TX Power control
+#define                RF_SYN_G7                                       0x2B    // RF TX Power control
+#define                RF_SYN_G8                                       0x2C    // RF TX Power control
+
+#define                RF_RCK_OS                                       0x30    // RF TX PA control
+
+#define                RF_TXPA_G1                                      0x31    // RF TX PA control
+#define                RF_TXPA_G2                                      0x32    // RF TX PA control
+#define                RF_TXPA_G3                                      0x33    // RF TX PA control
+#define                RF_LOBF_9                                       0x38
+#define                RF_RXRF_A3                                      0x3C    //
+#define                RF_TRSW                                 0x3F
+
+#define                RF_TXRF_A2                                      0x41
+#define                RF_TXPA_G4                                      0x46
+#define                RF_TXPA_A4                                      0x4B
+
+//
+//Bit Mask
+//
+// 1. Page1(0x100)
+#define                bBBResetB                                               0x100   // Useless now?
+#define                bGlobalResetB                                   0x200
+#define                bOFDMTxStart                                    0x4
+#define                bCCKTxStart                                             0x8
+#define                bCRC32Debug                                     0x100
+#define                bPMACLoopback                                   0x10
+#define                bTxLSIG                                                 0xffffff
+#define                bOFDMTxRate                                     0xf
+#define                bOFDMTxReserved                         0x10
+#define                bOFDMTxLength                                   0x1ffe0
+#define                bOFDMTxParity                                   0x20000
+#define                bTxHTSIG1                                               0xffffff
+#define                bTxHTMCSRate                                    0x7f
+#define                bTxHTBW                                         0x80
+#define                bTxHTLength                                     0xffff00
+#define                bTxHTSIG2                                               0xffffff
+#define                bTxHTSmoothing                                  0x1
+#define                bTxHTSounding                                   0x2
+#define                bTxHTReserved                                   0x4
+#define                bTxHTAggreation                         0x8
+#define                bTxHTSTBC                                               0x30
+#define                bTxHTAdvanceCoding                      0x40
+#define                bTxHTShortGI                                    0x80
+#define                bTxHTNumberHT_LTF                       0x300
+#define                bTxHTCRC8                                               0x3fc00
+#define                bCounterReset                                   0x10000
+#define                bNumOfOFDMTx                                    0xffff
+#define                bNumOfCCKTx                                     0xffff0000
+#define                bTxIdleInterval                                 0xffff
+#define                bOFDMService                                    0xffff0000
+#define                bTxMACHeader                                    0xffffffff
+#define                bTxDataInit                                             0xff
+#define                bTxHTMode                                               0x100
+#define                bTxDataType                                     0x30000
+#define                bTxRandomSeed                                   0xffffffff
+#define                bCCKTxPreamble                                  0x1
+#define                bCCKTxSFD                                               0xffff0000
+#define                bCCKTxSIG                                               0xff
+#define                bCCKTxService                                   0xff00
+#define                bCCKLengthExt                                   0x8000
+#define                bCCKTxLength                                    0xffff0000
+#define                bCCKTxCRC16                                     0xffff
+#define                bCCKTxStatus                                    0x1
+#define                bOFDMTxStatus                                   0x2
+
+#define                IS_BB_REG_OFFSET_92S(_Offset)           ((_Offset >= 0x800) && (_Offset <= 0xfff))
+
+// 2. Page8(0x800)
+#define                bRFMOD                                                  0x1     // Reg 0x800 rFPGA0_RFMOD
+#define                bJapanMode                                              0x2
+#define                bCCKTxSC                                                0x30
+#define                bCCKEn                                                  0x1000000
+#define                bOFDMEn                                         0x2000000
+
+#define                bOFDMRxADCPhase                         0x10000 // Useless now
+#define                bOFDMTxDACPhase                         0x40000
+#define                bXATxAGC                                        0x3f
+
+#define                bAntennaSelect                          0x0300
+
+#define                bXBTxAGC                                        0xf00   // Reg 80c rFPGA0_TxGainStage
+#define                bXCTxAGC                                        0xf000
+#define                bXDTxAGC                                        0xf0000
+
+#define                bPAStart                                        0xf0000000      // Useless now
+#define                bTRStart                                        0x00f00000
+#define                bRFStart                                        0x0000f000
+#define                bBBStart                                        0x000000f0
+#define                bBBCCKStart                             0x0000000f
+#define                bPAEnd                                          0xf          //Reg0x814
+#define                bTREnd                                          0x0f000000
+#define                bRFEnd                                          0x000f0000
+#define                bCCAMask                                        0x000000f0   //T2R
+#define                bR2RCCAMask                             0x00000f00
+#define                bHSSI_R2TDelay                          0xf8000000
+#define                bHSSI_T2RDelay                          0xf80000
+#define                bContTxHSSI                             0x400     //chane gain at continue Tx
+#define                bIGFromCCK                              0x200
+#define                bAGCAddress                             0x3f
+#define                bRxHPTx                                         0x7000
+#define                bRxHPT2R                                        0x38000
+#define                bRxHPCCKIni                             0xc0000
+#define                bAGCTxCode                              0xc00000
+#define                bAGCRxCode                              0x300000
+
+#define                b3WireDataLength                        0x800   // Reg 0x820~84f rFPGA0_XA_HSSIParameter1
+#define                b3WireAddressLength                     0x400
+
+#define                b3WireRFPowerDown                       0x1     // Useless now
+//#define bHWSISelect                          0x8
+#define                b5GPAPEPolarity                         0x40000000
+#define                b2GPAPEPolarity                         0x80000000
+#define                bRFSW_TxDefaultAnt                      0x3
+#define                bRFSW_TxOptionAnt                       0x30
+#define                bRFSW_RxDefaultAnt                      0x300
+#define                bRFSW_RxOptionAnt                       0x3000
+#define                bRFSI_3WireData                         0x1
+#define                bRFSI_3WireClock                        0x2
+#define                bRFSI_3WireLoad                         0x4
+#define                bRFSI_3WireRW                           0x8
+#define                bRFSI_3Wire                                     0xf
+
+#define                bRFSI_RFENV                             0x10    // Reg 0x870 rFPGA0_XAB_RFInterfaceSW
+
+#define                bRFSI_TRSW                              0x20    // Useless now
+#define                bRFSI_TRSWB                             0x40
+#define                bRFSI_ANTSW                             0x100
+#define                bRFSI_ANTSWB                            0x200
+#define                bRFSI_PAPE                                      0x400
+#define                bRFSI_PAPE5G                            0x800
+#define                bBandSelect                                     0x1
+#define                bHTSIG2_GI                                      0x80
+#define                bHTSIG2_Smoothing                       0x01
+#define                bHTSIG2_Sounding                        0x02
+#define                bHTSIG2_Aggreaton                       0x08
+#define                bHTSIG2_STBC                            0x30
+#define                bHTSIG2_AdvCoding                       0x40
+#define                bHTSIG2_NumOfHTLTF              0x300
+#define                bHTSIG2_CRC8                            0x3fc
+#define                bHTSIG1_MCS                             0x7f
+#define                bHTSIG1_BandWidth                       0x80
+#define                bHTSIG1_HTLength                        0xffff
+#define                bLSIG_Rate                                      0xf
+#define                bLSIG_Reserved                          0x10
+#define                bLSIG_Length                            0x1fffe
+#define                bLSIG_Parity                                    0x20
+#define                bCCKRxPhase                             0x4
+
+#define                bLSSIReadAddress                        0x7f800000   // T65 RF
+
+#define                bLSSIReadEdge                           0x80000000   //LSSI "Read" edge signal
+
+#define                bLSSIReadBackData                       0xfffff         // T65 RF
+
+#define                bLSSIReadOKFlag                         0x1000  // Useless now
+#define                bCCKSampleRate                          0x8       //0: 44MHz, 1:88MHz
+#define                bRegulator0Standby                      0x1
+#define                bRegulatorPLLStandby                    0x2
+#define                bRegulator1Standby                      0x4
+#define                bPLLPowerUp                             0x8
+#define                bDPLLPowerUp                            0x10
+#define                bDA10PowerUp                            0x20
+#define                bAD7PowerUp                             0x200
+#define                bDA6PowerUp                             0x2000
+#define                bXtalPowerUp                            0x4000
+#define                b40MDClkPowerUP                         0x8000
+#define                bDA6DebugMode                           0x20000
+#define                bDA6Swing                                       0x380000
+
+#define                bADClkPhase                             0x4000000       // Reg 0x880 rFPGA0_AnalogParameter1 20/40 CCK support switch 40/80 BB MHZ
+
+#define                b80MClkDelay                            0x18000000      // Useless
+#define                bAFEWatchDogEnable                      0x20000000
+
+#define                bXtalCap01                                      0xc0000000      // Reg 0x884 rFPGA0_AnalogParameter2 Crystal cap
+#define                bXtalCap23                                      0x3
+#define                bXtalCap92x                                     0x0f000000
+#define                bXtalCap                                        0x0f000000
+
+#define                bIntDifClkEnable                        0x400   // Useless
+#define                bExtSigClkEnable                        0x800
+#define                bBandgapMbiasPowerUp            0x10000
+#define                bAD11SHGain                             0xc0000
+#define                bAD11InputRange                         0x700000
+#define                bAD11OPCurrent                          0x3800000
+#define                bIPathLoopback                          0x4000000
+#define                bQPathLoopback                          0x8000000
+#define                bAFELoopback                            0x10000000
+#define                bDA10Swing                              0x7e0
+#define                bDA10Reverse                            0x800
+#define                bDAClkSource                            0x1000
+#define                bAD7InputRange                          0x6000
+#define                bAD7Gain                                        0x38000
+#define                bAD7OutputCMMode                        0x40000
+#define                bAD7InputCMMode                         0x380000
+#define                bAD7Current                                     0xc00000
+#define                bRegulatorAdjust                        0x7000000
+#define                bAD11PowerUpAtTx                        0x1
+#define                bDA10PSAtTx                             0x10
+#define                bAD11PowerUpAtRx                        0x100
+#define                bDA10PSAtRx                             0x1000
+#define                bCCKRxAGCFormat                         0x200
+#define                bPSDFFTSamplepPoint                     0xc000
+#define                bPSDAverageNum                          0x3000
+#define                bIQPathControl                          0xc00
+#define                bPSDFreq                                        0x3ff
+#define                bPSDAntennaPath                         0x30
+#define                bPSDIQSwitch                            0x40
+#define                bPSDRxTrigger                           0x400000
+#define                bPSDTxTrigger                           0x80000000
+#define                bPSDSineToneScale                       0x7f000000
+#define                bPSDReport                                      0xffff
+
+// 3. Page9(0x900)
+#define                bOFDMTxSC                               0x30000000      // Useless
+#define                bCCKTxOn                                        0x1
+#define                bOFDMTxOn                               0x2
+#define                bDebugPage                              0xfff  //reset debug page and also HWord, LWord
+#define                bDebugItem                              0xff   //reset debug page and LWord
+#define                bAntL                                   0x10
+#define                bAntNonHT                                       0x100
+#define                bAntHT1                                 0x1000
+#define                bAntHT2                                         0x10000
+#define                bAntHT1S1                                       0x100000
+#define                bAntNonHTS1                             0x1000000
+
+// 4. PageA(0xA00)
+#define                bCCKBBMode                              0x3     // Useless
+#define                bCCKTxPowerSaving               0x80
+#define                bCCKRxPowerSaving               0x40
+
+#define                bCCKSideBand                    0x10    // Reg 0xa00 rCCK0_System 20/40 switch
+
+#define                bCCKScramble                    0x8     // Useless
+#define                bCCKAntDiversity                0x8000
+#define                bCCKCarrierRecovery             0x4000
+#define                bCCKTxRate                              0x3000
+#define                bCCKDCCancel                    0x0800
+#define                bCCKISICancel                   0x0400
+#define                bCCKMatchFilter                 0x0200
+#define                bCCKEqualizer                   0x0100
+#define                bCCKPreambleDetect              0x800000
+#define                bCCKFastFalseCCA                0x400000
+#define                bCCKChEstStart                  0x300000
+#define                bCCKCCACount                    0x080000
+#define                bCCKcs_lim                              0x070000
+#define                bCCKBistMode                    0x80000000
+#define                bCCKCCAMask                     0x40000000
+#define                bCCKTxDACPhase          0x4
+#define                bCCKRxADCPhase          0x20000000   //r_rx_clk
+#define                bCCKr_cp_mode0          0x0100
+#define                bCCKTxDCOffset                  0xf0
+#define                bCCKRxDCOffset                  0xf
+#define                bCCKCCAMode                     0xc000
+#define                bCCKFalseCS_lim                 0x3f00
+#define                bCCKCS_ratio                    0xc00000
+#define                bCCKCorgBit_sel                 0x300000
+#define                bCCKPD_lim                              0x0f0000
+#define                bCCKNewCCA                      0x80000000
+#define                bCCKRxHPofIG                    0x8000
+#define                bCCKRxIG                                0x7f00
+#define                bCCKLNAPolarity                 0x800000
+#define                bCCKRx1stGain                   0x7f0000
+#define                bCCKRFExtend                    0x20000000 //CCK Rx Iinital gain polarity
+#define                bCCKRxAGCSatLevel               0x1f000000
+#define                bCCKRxAGCSatCount               0xe0
+#define                bCCKRxRFSettle                  0x1f       //AGCsamp_dly
+#define                bCCKFixedRxAGC                  0x8000
+//#define bCCKRxAGCFormat                      0x4000   //remove to HSSI register 0x824
+#define                bCCKAntennaPolarity             0x2000
+#define                bCCKTxFilterType                0x0c00
+#define                bCCKRxAGCReportType     0x0300
+#define                bCCKRxDAGCEn                    0x80000000
+#define                bCCKRxDAGCPeriod                0x20000000
+#define                bCCKRxDAGCSatLevel              0x1f000000
+#define                bCCKTimingRecovery              0x800000
+#define                bCCKTxC0                                0x3f0000
+#define                bCCKTxC1                                0x3f000000
+#define                bCCKTxC2                                0x3f
+#define                bCCKTxC3                                0x3f00
+#define                bCCKTxC4                                0x3f0000
+#define                bCCKTxC5                                0x3f000000
+#define                bCCKTxC6                                0x3f
+#define                bCCKTxC7                                0x3f00
+#define                bCCKDebugPort                   0xff0000
+#define                bCCKDACDebug                    0x0f000000
+#define                bCCKFalseAlarmEnable    0x8000
+#define                bCCKFalseAlarmRead              0x4000
+#define                bCCKTRSSI                               0x7f
+#define                bCCKRxAGCReport         0xfe
+#define                bCCKRxReport_AntSel     0x80000000
+#define                bCCKRxReport_MFOff              0x40000000
+#define                bCCKRxRxReport_SQLoss   0x20000000
+#define                bCCKRxReport_Pktloss    0x10000000
+#define                bCCKRxReport_Lockedbit  0x08000000
+#define                bCCKRxReport_RateError  0x04000000
+#define                bCCKRxReport_RxRate     0x03000000
+#define                bCCKRxFACounterLower    0xff
+#define                bCCKRxFACounterUpper    0xff000000
+#define                bCCKRxHPAGCStart                0xe000
+#define                bCCKRxHPAGCFinal                0x1c00
+#define                bCCKRxFalseAlarmEnable  0x8000
+#define                bCCKFACounterFreeze     0x4000
+#define                bCCKTxPathSel                   0x10000000
+#define                bCCKDefaultRxPath               0xc000000
+#define                bCCKOptionRxPath                0x3000000
+
+// 5. PageC(0xC00)
+#define                bNumOfSTF                               0x3     // Useless
+#define                bShift_L                                        0xc0
+#define                bGI_TH                                  0xc
+#define                bRxPathA                                0x1
+#define                bRxPathB                                0x2
+#define                bRxPathC                                0x4
+#define                bRxPathD                                0x8
+#define                bTxPathA                                0x1
+#define                bTxPathB                                0x2
+#define                bTxPathC                                0x4
+#define                bTxPathD                                0x8
+#define                bTRSSIFreq                              0x200
+#define                bADCBackoff                             0x3000
+#define                bDFIRBackoff                    0xc000
+#define                bTRSSILatchPhase                0x10000
+#define                bRxIDCOffset                    0xff
+#define                bRxQDCOffset                    0xff00
+#define                bRxDFIRMode                     0x1800000
+#define                bRxDCNFType                     0xe000000
+#define                bRXIQImb_A                              0x3ff
+#define                bRXIQImb_B                              0xfc00
+#define                bRXIQImb_C                              0x3f0000
+#define                bRXIQImb_D                              0xffc00000
+#define                bDC_dc_Notch                    0x60000
+#define                bRxNBINotch                     0x1f000000
+#define                bPD_TH                                  0xf
+#define                bPD_TH_Opt2                     0xc000
+#define                bPWED_TH                                0x700
+#define                bIfMF_Win_L                     0x800
+#define                bPD_Option                              0x1000
+#define                bMF_Win_L                               0xe000
+#define                bBW_Search_L                    0x30000
+#define                bwin_enh_L                              0xc0000
+#define                bBW_TH                                  0x700000
+#define                bED_TH2                         0x3800000
+#define                bBW_option                              0x4000000
+#define                bRatio_TH                               0x18000000
+#define                bWindow_L                               0xe0000000
+#define                bSBD_Option                             0x1
+#define                bFrame_TH                               0x1c
+#define                bFS_Option                              0x60
+#define                bDC_Slope_check         0x80
+#define                bFGuard_Counter_DC_L    0xe00
+#define                bFrame_Weight_Short     0x7000
+#define                bSub_Tune                               0xe00000
+#define                bFrame_DC_Length                0xe000000
+#define                bSBD_start_offset               0x30000000
+#define                bFrame_TH_2                     0x7
+#define                bFrame_GI2_TH                   0x38
+#define                bGI2_Sync_en                    0x40
+#define                bSarch_Short_Early              0x300
+#define                bSarch_Short_Late               0xc00
+#define                bSarch_GI2_Late         0x70000
+#define                bCFOAntSum                              0x1
+#define                bCFOAcc                         0x2
+#define                bCFOStartOffset                 0xc
+#define                bCFOLookBack                    0x70
+#define                bCFOSumWeight                   0x80
+#define                bDAGCEnable                     0x10000
+#define                bTXIQImb_A                              0x3ff
+#define                bTXIQImb_B                              0xfc00
+#define                bTXIQImb_C                              0x3f0000
+#define                bTXIQImb_D                              0xffc00000
+#define                bTxIDCOffset                    0xff
+#define                bTxQDCOffset                    0xff00
+#define                bTxDFIRMode                     0x10000
+#define                bTxPesudoNoiseOn                0x4000000
+#define                bTxPesudoNoise_A                0xff
+#define                bTxPesudoNoise_B                0xff00
+#define                bTxPesudoNoise_C                0xff0000
+#define                bTxPesudoNoise_D                0xff000000
+#define                bCCADropOption                  0x20000
+#define                bCCADropThres                   0xfff00000
+#define                bEDCCA_H                                0xf
+#define                bEDCCA_L                                0xf0
+#define                bLambda_ED                      0x300
+#define                bRxInitialGain                  0x7f
+#define                bRxAntDivEn                             0x80
+#define                bRxAGCAddressForLNA     0x7f00
+#define                bRxHighPowerFlow                0x8000
+#define                bRxAGCFreezeThres               0xc0000
+#define                bRxFreezeStep_AGC1      0x300000
+#define                bRxFreezeStep_AGC2      0xc00000
+#define                bRxFreezeStep_AGC3      0x3000000
+#define                bRxFreezeStep_AGC0      0xc000000
+#define                bRxRssi_Cmp_En                  0x10000000
+#define                bRxQuickAGCEn                   0x20000000
+#define                bRxAGCFreezeThresMode   0x40000000
+#define                bRxOverFlowCheckType    0x80000000
+#define                bRxAGCShift                             0x7f
+#define                bTRSW_Tri_Only                  0x80
+#define                bPowerThres                     0x300
+#define                bRxAGCEn                                0x1
+#define                bRxAGCTogetherEn                0x2
+#define                bRxAGCMin                               0x4
+#define                bRxHP_Ini                               0x7
+#define                bRxHP_TRLNA                     0x70
+#define                bRxHP_RSSI                              0x700
+#define                bRxHP_BBP1                              0x7000
+#define                bRxHP_BBP2                              0x70000
+#define                bRxHP_BBP3                              0x700000
+#define                bRSSI_H                                 0x7f0000     //the threshold for high power
+#define                bRSSI_Gen                               0x7f000000   //the threshold for ant diversity
+#define                bRxSettle_TRSW                  0x7
+#define                bRxSettle_LNA                   0x38
+#define                bRxSettle_RSSI                  0x1c0
+#define                bRxSettle_BBP                   0xe00
+#define                bRxSettle_RxHP                  0x7000
+#define                bRxSettle_AntSW_RSSI    0x38000
+#define                bRxSettle_AntSW         0xc0000
+#define                bRxProcessTime_DAGC     0x300000
+#define                bRxSettle_HSSI                  0x400000
+#define                bRxProcessTime_BBPPW    0x800000
+#define                bRxAntennaPowerShift    0x3000000
+#define                bRSSITableSelect                0xc000000
+#define                bRxHP_Final                             0x7000000
+#define                bRxHTSettle_BBP                 0x7
+#define                bRxHTSettle_HSSI                0x8
+#define                bRxHTSettle_RxHP                0x70
+#define                bRxHTSettle_BBPPW               0x80
+#define                bRxHTSettle_Idle                0x300
+#define                bRxHTSettle_Reserved    0x1c00
+#define                bRxHTRxHPEn                     0x8000
+#define                bRxHTAGCFreezeThres     0x30000
+#define                bRxHTAGCTogetherEn      0x40000
+#define                bRxHTAGCMin                     0x80000
+#define                bRxHTAGCEn                              0x100000
+#define                bRxHTDAGCEn                     0x200000
+#define                bRxHTRxHP_BBP                   0x1c00000
+#define                bRxHTRxHP_Final         0xe0000000
+#define                bRxPWRatioTH                    0x3
+#define                bRxPWRatioEn                    0x4
+#define                bRxMFHold                               0x3800
+#define                bRxPD_Delay_TH1         0x38
+#define                bRxPD_Delay_TH2         0x1c0
+#define                bRxPD_DC_COUNT_MAX      0x600
+//#define bRxMF_Hold               0x3800
+#define                bRxPD_Delay_TH                  0x8000
+#define                bRxProcess_Delay                0xf0000
+#define                bRxSearchrange_GI2_Early        0x700000
+#define                bRxFrame_Guard_Counter_L        0x3800000
+#define                bRxSGI_Guard_L                  0xc000000
+#define                bRxSGI_Search_L         0x30000000
+#define                bRxSGI_TH                               0xc0000000
+#define                bDFSCnt0                                0xff
+#define                bDFSCnt1                                0xff00
+#define                bDFSFlag                                0xf0000
+#define                bMFWeightSum                    0x300000
+#define                bMinIdxTH                               0x7f000000
+#define                bDAFormat                               0x40000
+#define                bTxChEmuEnable          0x01000000
+#define                bTRSWIsolation_A                0x7f
+#define                bTRSWIsolation_B                0x7f00
+#define                bTRSWIsolation_C                0x7f0000
+#define                bTRSWIsolation_D                0x7f000000
+#define                bExtLNAGain                             0x7c00
+
+// 6. PageE(0xE00)
+#define                bSTBCEn                         0x4     // Useless
+#define                bAntennaMapping         0x10
+#define                bNss                                    0x20
+#define                bCFOAntSumD                     0x200
+#define                bPHYCounterReset                0x8000000
+#define                bCFOReportGet                   0x4000000
+#define                bOFDMContinueTx         0x10000000
+#define                bOFDMSingleCarrier              0x20000000
+#define                bOFDMSingleTone         0x40000000
+//#define bRxPath1                 0x01
+//#define bRxPath2                 0x02
+//#define bRxPath3                 0x04
+//#define bRxPath4                 0x08
+//#define bTxPath1                 0x10
+//#define bTxPath2                 0x20
+#define                bHTDetect                       0x100
+#define                bCFOEn                          0x10000
+#define                bCFOValue                       0xfff00000
+#define                bSigTone_Re             0x3f
+#define                bSigTone_Im             0x7f00
+#define                bCounter_CCA            0xffff
+#define                bCounter_ParityFail     0xffff0000
+#define                bCounter_RateIllegal            0xffff
+#define                bCounter_CRC8Fail       0xffff0000
+#define                bCounter_MCSNoSupport   0xffff
+#define                bCounter_FastSync       0xffff
+#define                bShortCFO                       0xfff
+#define                bShortCFOTLength        12   //total
+#define                bShortCFOFLength        11   //fraction
+#define                bLongCFO                        0x7ff
+#define                bLongCFOTLength 11
+#define                bLongCFOFLength 11
+#define                bTailCFO                        0x1fff
+#define                bTailCFOTLength         13
+#define                bTailCFOFLength         12
+#define                bmax_en_pwdB            0xffff
+#define                bCC_power_dB            0xffff0000
+#define                bnoise_pwdB             0xffff
+#define                bPowerMeasTLength       10
+#define                bPowerMeasFLength       3
+#define                bRx_HT_BW                       0x1
+#define                bRxSC                           0x6
+#define                bRx_HT                          0x8
+#define                bNB_intf_det_on         0x1
+#define                bIntf_win_len_cfg       0x30
+#define                bNB_Intf_TH_cfg         0x1c0
+#define                bRFGain                         0x3f
+#define                bTableSel                       0x40
+#define                bTRSW                           0x80
+#define                bRxSNR_A                        0xff
+#define                bRxSNR_B                        0xff00
+#define                bRxSNR_C                        0xff0000
+#define                bRxSNR_D                        0xff000000
+#define                bSNREVMTLength          8
+#define                bSNREVMFLength          1
+#define                bCSI1st                         0xff
+#define                bCSI2nd                         0xff00
+#define                bRxEVM1st                       0xff0000
+#define                bRxEVM2nd                       0xff000000
+#define                bSIGEVM                 0xff
+#define                bPWDB                           0xff00
+#define                bSGIEN                          0x10000
+
+#define                bSFactorQAM1            0xf     // Useless
+#define                bSFactorQAM2            0xf0
+#define                bSFactorQAM3            0xf00
+#define                bSFactorQAM4            0xf000
+#define                bSFactorQAM5            0xf0000
+#define                bSFactorQAM6            0xf0000
+#define                bSFactorQAM7            0xf00000
+#define                bSFactorQAM8            0xf000000
+#define                bSFactorQAM9            0xf0000000
+#define                bCSIScheme                      0x100000
+
+#define                bNoiseLvlTopSet         0x3     // Useless
+#define                bChSmooth                       0x4
+#define                bChSmoothCfg1           0x38
+#define                bChSmoothCfg2           0x1c0
+#define                bChSmoothCfg3           0xe00
+#define                bChSmoothCfg4           0x7000
+#define                bMRCMode                        0x800000
+#define                bTHEVMCfg                       0x7000000
+
+#define                bLoopFitType            0x1     // Useless
+#define                bUpdCFO                 0x40
+#define                bUpdCFOOffData          0x80
+#define                bAdvUpdCFO                      0x100
+#define                bAdvTimeCtrl            0x800
+#define                bUpdClko                        0x1000
+#define                bFC                                     0x6000
+#define                bTrackingMode           0x8000
+#define                bPhCmpEnable            0x10000
+#define                bUpdClkoLTF             0x20000
+#define                bComChCFO                       0x40000
+#define                bCSIEstiMode            0x80000
+#define                bAdvUpdEqz                      0x100000
+#define                bUChCfg                         0x7000000
+#define                bUpdEqz                 0x8000000
+
+//Rx Pseduo noise
+#define                bRxPesudoNoiseOn                0x20000000      // Useless
+#define                bRxPesudoNoise_A                0xff
+#define                bRxPesudoNoise_B                0xff00
+#define                bRxPesudoNoise_C                0xff0000
+#define                bRxPesudoNoise_D                0xff000000
+#define                bPesudoNoiseState_A     0xffff
+#define                bPesudoNoiseState_B     0xffff0000
+#define                bPesudoNoiseState_C     0xffff
+#define                bPesudoNoiseState_D     0xffff0000
+
+//7. RF Register
+//Zebra1
+#define                bZebra1_HSSIEnable              0x8             // Useless
+#define                bZebra1_TRxControl              0xc00
+#define                bZebra1_TRxGainSetting  0x07f
+#define                bZebra1_RxCorner                0xc00
+#define                bZebra1_TxChargePump    0x38
+#define                bZebra1_RxChargePump    0x7
+#define                bZebra1_ChannelNum      0xf80
+#define                bZebra1_TxLPFBW         0x400
+#define                bZebra1_RxLPFBW         0x600
+
+//Zebra4
+#define                bRTL8256RegModeCtrl1    0x100   // Useless
+#define                bRTL8256RegModeCtrl0    0x40
+#define                bRTL8256_TxLPFBW                0x18
+#define                bRTL8256_RxLPFBW                0x600
+
+//RTL8258
+#define                bRTL8258_TxLPFBW                0xc     // Useless
+#define                bRTL8258_RxLPFBW                0xc00
+#define                bRTL8258_RSSILPFBW      0xc0
+
+
+//
+// Other Definition
+//
+
+//byte endable for sb_write
+#define                bByte0                          0x1     // Useless
+#define                bByte1                          0x2
+#define                bByte2                          0x4
+#define                bByte3                          0x8
+#define                bWord0                          0x3
+#define                bWord1                          0xc
+#define                bDWord                          0xf
+
+//for PutRegsetting & GetRegSetting BitMask
+#define                bMaskByte0                      0xff    // Reg 0xc50 rOFDM0_XAAGCCore~0xC6f
+#define                bMaskByte1                      0xff00
+#define                bMaskByte2                      0xff0000
+#define                bMaskByte3                      0xff000000
+#define                bMaskHWord              0xffff0000
+#define                bMaskLWord                      0x0000ffff
+#define                bMaskDWord              0xffffffff
+#define                bMask12Bits                     0xfff
+#define                bMaskH4Bits                     0xf0000000
+#define                bMaskOFDM_D             0xffc00000
+#define                bMaskCCK                        0x3f3f3f3f
+
+//for PutRFRegsetting & GetRFRegSetting BitMask
+//#define              bMask12Bits                     0xfffff // RF Reg mask bits
+//#define              bMask20Bits                     0xfffff // RF Reg mask bits T65 RF
+#define                bRFRegOffsetMask                0xfffff
+//#define              bRFRegOffsetMask                0xfff
+
+//MAC0 will wirte PHY1
+#define        MAC0_ACCESS_PHY1        0x4000
+//MAC1 will wirte PHY0
+#define        MAC1_ACCESS_PHY0        0x2000
+
+#define                bEnable                 0x1     // Useless
+#define                bDisable                0x0
+
+#define                LeftAntenna             0x0     // Useless
+#define                RightAntenna    0x1
+
+#define                tCheckTxStatus          500   //500ms // Useless
+#define                tUpdateRxCounter        100   //100ms
+
+#define                rateCCK         0       // Useless
+#define                rateOFDM        1
+#define                rateHT          2
+
+//define Register-End
+#define                bPMAC_End                       0x1ff   // Useless
+#define                bFPGAPHY0_End           0x8ff
+#define                bFPGAPHY1_End           0x9ff
+#define                bCCKPHY0_End            0xaff
+#define                bOFDMPHY0_End           0xcff
+#define                bOFDMPHY1_End           0xdff
+
+//define max debug item in each debug page
+//#define bMaxItem_FPGA_PHY0        0x9
+//#define bMaxItem_FPGA_PHY1        0x3
+//#define bMaxItem_PHY_11B          0x16
+//#define bMaxItem_OFDM_PHY0        0x29
+//#define bMaxItem_OFDM_PHY1        0x0
+
+#define                bPMACControl            0x0             // Useless
+#define                bWMACControl            0x1
+#define                bWNICControl            0x2
+
+#define                PathA                   0x0     // Useless
+#define                PathB                   0x1
+#define                PathC                   0x2
+#define                PathD                   0x3
+
+/*--------------------------Define Parameters-------------------------------*/
+
+
+#endif //__INC_HAL8192SPHYREG_H
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/Hal8192DUHWImg.h b/drivers/net/wireless/realtek/rtl8192cu/include/Hal8192DUHWImg.h
new file mode 100644 (file)
index 0000000..0d225ce
--- /dev/null
@@ -0,0 +1,66 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __INC_HAL8192DU_FW_IMG_H
+#define __INC_HAL8192DU_FW_IMG_H
+
+#include <basic_types.h>
+
+/*Created on  2011/11/11,  8: 8*/
+
+#define Rtl8192DUImgArrayLength 31452
+extern const u8 Rtl8192DUFwImgArray[Rtl8192DUImgArrayLength];
+#define Rtl8192DUMainArrayLength 1
+extern const u8 Rtl8192DUFwMainArray[Rtl8192DUMainArrayLength];
+#define Rtl8192DUDataArrayLength 1
+extern const u8 Rtl8192DUFwDataArray[Rtl8192DUDataArrayLength];
+#define Rtl8192DUPHY_REG_2TArrayLength 372
+extern const u32 Rtl8192DUPHY_REG_2TArray[Rtl8192DUPHY_REG_2TArrayLength];
+#define Rtl8192DUPHY_REG_1TArrayLength 1
+extern const u32 Rtl8192DUPHY_REG_1TArray[Rtl8192DUPHY_REG_1TArrayLength];
+#define Rtl8192DUPHY_REG_Array_PGLength 624
+extern const u32 Rtl8192DUPHY_REG_Array_PG[Rtl8192DUPHY_REG_Array_PGLength];
+#define Rtl8192DUPHY_REG_Array_MPLength 14
+extern const u32 Rtl8192DUPHY_REG_Array_MP[Rtl8192DUPHY_REG_Array_MPLength];
+#define Rtl8192DURadioA_2TArrayLength 378
+extern const u32 Rtl8192DURadioA_2TArray[Rtl8192DURadioA_2TArrayLength];
+#define Rtl8192DURadioB_2TArrayLength 384
+extern const u32 Rtl8192DURadioB_2TArray[Rtl8192DURadioB_2TArrayLength];
+#define Rtl8192DURadioA_1TArrayLength 1
+extern const u32 Rtl8192DURadioA_1TArray[Rtl8192DURadioA_1TArrayLength];
+#define Rtl8192DURadioB_1TArrayLength 1
+extern const u32 Rtl8192DURadioB_1TArray[Rtl8192DURadioB_1TArrayLength];
+#define Rtl8192DURadioA_2T_intPAArrayLength 378
+extern const u32 Rtl8192DURadioA_2T_intPAArray[Rtl8192DURadioA_2T_intPAArrayLength];
+#define Rtl8192DURadioB_2T_intPAArrayLength 384
+extern const u32 Rtl8192DURadioB_2T_intPAArray[Rtl8192DURadioB_2T_intPAArrayLength];
+#define Rtl8192DUMAC_2T_ArrayLength 192
+extern const u32 Rtl8192DUMAC_2T_Array[Rtl8192DUMAC_2T_ArrayLength];
+#define Rtl8192DUAGCTAB_ArrayLength 386
+extern const u32 Rtl8192DUAGCTAB_Array[Rtl8192DUAGCTAB_ArrayLength];
+#define Rtl8192DUAGCTAB_5GArrayLength 194
+extern const u32 Rtl8192DUAGCTAB_5GArray[Rtl8192DUAGCTAB_5GArrayLength];
+#define Rtl8192DUAGCTAB_2GArrayLength 194
+extern const u32 Rtl8192DUAGCTAB_2GArray[Rtl8192DUAGCTAB_2GArrayLength];
+#define Rtl8192DUAGCTAB_2TArrayLength 1
+extern const u32 Rtl8192DUAGCTAB_2TArray[Rtl8192DUAGCTAB_2TArrayLength];
+#define Rtl8192DUAGCTAB_1TArrayLength 1
+extern const u32 Rtl8192DUAGCTAB_1TArray[Rtl8192DUAGCTAB_1TArrayLength];
+
+#endif //__INC_HAL8192CU_FW_IMG_H
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/Hal8192DUHWImg_wowlan.h b/drivers/net/wireless/realtek/rtl8192cu/include/Hal8192DUHWImg_wowlan.h
new file mode 100644 (file)
index 0000000..b5ab71f
--- /dev/null
@@ -0,0 +1,29 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __INC_HAL8192DU_FW_IMG_WOWLAN_H
+#define __INC_HAL8192DU_FW_IMG_WOWLAN_H
+
+/*Created on  2011/11/ 8, 14:15*/
+
+
+#define DUWWImgArrayLength 24818
+extern u8 Rtl8192DUFwWWImgArray[DUWWImgArrayLength];
+
+#endif //__INC_HAL8192DU_FW_IMG_WOWLAN_H
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/HalPwrSeqCmd.h b/drivers/net/wireless/realtek/rtl8192cu/include/HalPwrSeqCmd.h
new file mode 100644 (file)
index 0000000..e5d151c
--- /dev/null
@@ -0,0 +1,137 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __HALPWRSEQCMD_H__
+#define __HALPWRSEQCMD_H__
+
+#include <drv_types.h>
+
+/*---------------------------------------------*/
+//3 The value of cmd: 4 bits
+/*---------------------------------------------*/
+#define PWR_CMD_READ                   0x00
+     // offset: the read register offset
+     // msk: the mask of the read value
+     // value: N/A, left by 0
+     // note: dirver shall implement this function by read & msk
+
+#define PWR_CMD_WRITE                  0x01
+     // offset: the read register offset
+     // msk: the mask of the write bits
+     // value: write value
+     // note: driver shall implement this cmd by read & msk after write
+
+#define PWR_CMD_POLLING                        0x02
+     // offset: the read register offset
+     // msk: the mask of the polled value
+     // value: the value to be polled, masked by the msd field.
+     // note: driver shall implement this cmd by
+     // do{
+     // if( (Read(offset) & msk) == (value & msk) )
+     // break;
+     // } while(not timeout);
+
+#define PWR_CMD_DELAY                  0x03
+     // offset: the value to delay
+     // msk: N/A
+     // value: the unit of delay, 0: us, 1: ms
+
+#define PWR_CMD_END                            0x04
+     // offset: N/A
+     // msk: N/A
+     // value: N/A
+
+/*---------------------------------------------*/
+//3 The value of base: 4 bits
+/*---------------------------------------------*/
+   // define the base address of each block
+#define PWR_BASEADDR_MAC               0x00
+#define PWR_BASEADDR_USB               0x01
+#define PWR_BASEADDR_PCIE              0x02
+#define PWR_BASEADDR_SDIO              0x03
+
+/*---------------------------------------------*/
+//3 The value of interface_msk: 4 bits
+/*---------------------------------------------*/
+#define        PWR_INTF_SDIO_MSK               BIT(0)
+#define        PWR_INTF_USB_MSK                BIT(1)
+#define        PWR_INTF_PCI_MSK                BIT(2)
+#define        PWR_INTF_ALL_MSK                (BIT(0)|BIT(1)|BIT(2)|BIT(3))
+
+/*---------------------------------------------*/
+//3 The value of fab_msk: 4 bits
+/*---------------------------------------------*/
+#define        PWR_FAB_TSMC_MSK                BIT(0)
+#define        PWR_FAB_UMC_MSK                 BIT(1)
+#define        PWR_FAB_ALL_MSK                 (BIT(0)|BIT(1)|BIT(2)|BIT(3))
+
+/*---------------------------------------------*/
+//3 The value of cut_msk: 8 bits
+/*---------------------------------------------*/
+#define        PWR_CUT_TESTCHIP_MSK    BIT(0)
+#define        PWR_CUT_A_MSK                   BIT(1)
+#define        PWR_CUT_B_MSK                   BIT(2)
+#define        PWR_CUT_C_MSK                   BIT(3)
+#define        PWR_CUT_D_MSK                   BIT(4)
+#define        PWR_CUT_E_MSK                   BIT(5)
+#define        PWR_CUT_F_MSK                   BIT(6)
+#define        PWR_CUT_G_MSK                   BIT(7)
+#define        PWR_CUT_ALL_MSK                 0xFF
+
+
+typedef enum _PWRSEQ_CMD_DELAY_UNIT_
+{
+       PWRSEQ_DELAY_US,
+       PWRSEQ_DELAY_MS,
+} PWRSEQ_DELAY_UNIT;
+
+typedef struct _WL_PWR_CFG_
+{
+       u16 offset;
+       u8 cut_msk;
+       u8 fab_msk:4;
+       u8 interface_msk:4;
+       u8 base:4;
+       u8 cmd:4;
+       u8 msk;
+       u8 value;
+} WLAN_PWR_CFG, *PWLAN_PWR_CFG;
+
+
+#define GET_PWR_CFG_OFFSET(__PWR_CMD)          __PWR_CMD.offset
+#define GET_PWR_CFG_CUT_MASK(__PWR_CMD)                __PWR_CMD.cut_msk
+#define GET_PWR_CFG_FAB_MASK(__PWR_CMD)                __PWR_CMD.fab_msk
+#define GET_PWR_CFG_INTF_MASK(__PWR_CMD)       __PWR_CMD.interface_msk
+#define GET_PWR_CFG_BASE(__PWR_CMD)                    __PWR_CMD.base
+#define GET_PWR_CFG_CMD(__PWR_CMD)                     __PWR_CMD.cmd
+#define GET_PWR_CFG_MASK(__PWR_CMD)                    __PWR_CMD.msk
+#define GET_PWR_CFG_VALUE(__PWR_CMD)           __PWR_CMD.value
+
+
+//================================================================================
+//     Prototype of protected function.
+//================================================================================
+u8 HalPwrSeqCmdParsing(
+       PADAPTER                padapter,
+       u8                              CutVersion,
+       u8                              FabVersion,
+       u8                              InterfaceType,
+       WLAN_PWR_CFG    PwrCfgCmd[]);
+
+#endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/autoconf.h b/drivers/net/wireless/realtek/rtl8192cu/include/autoconf.h
new file mode 100644 (file)
index 0000000..dcdb512
--- /dev/null
@@ -0,0 +1,336 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+
+/*
+ * Public  General Config
+ */
+#define AUTOCONF_INCLUDED
+#define RTL871X_MODULE_NAME "92CU"
+#define DRV_NAME "rtl8192cu"
+
+#define CONFIG_USB_HCI 1
+
+#define CONFIG_RTL8192C        1
+
+#define PLATFORM_LINUX 1
+
+//#define CONFIG_IOCTL_CFG80211 1
+#ifdef CONFIG_IOCTL_CFG80211
+       //#define RTW_USE_CFG80211_STA_EVENT /* Indecate new sta asoc through cfg80211_new_sta */
+       #define CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER
+       //#define CONFIG_DEBUG_CFG80211 1
+       //#define CONFIG_DRV_ISSUE_PROV_REQ // IOT FOR S2
+       #define CONFIG_SET_SCAN_DENY_TIMER
+#endif
+
+/*
+ * Internal  General Config
+ */
+//#define CONFIG_PWRCTRL
+//#define CONFIG_H2CLBK
+
+#define CONFIG_EMBEDDED_FWIMG  1
+//#define CONFIG_FILE_FWIMG
+
+#ifdef CONFIG_WAKE_ON_WLAN
+#define CONFIG_WOWLAN 1
+#endif //CONFIG_WAKE_ON_WLAN
+
+#define CONFIG_R871X_TEST      1
+
+#define CONFIG_XMIT_ACK
+#ifdef CONFIG_XMIT_ACK
+       #define CONFIG_XMIT_ACK_POLLING
+       #define CONFIG_ACTIVE_KEEP_ALIVE_CHECK
+#endif
+
+#define CONFIG_80211N_HT       1
+
+#define CONFIG_RECV_REORDERING_CTRL    1
+
+//#define CONFIG_TCP_CSUM_OFFLOAD_RX   1
+
+//#define CONFIG_BEFORE_LINKED_DIG
+//#define CONFIG_DRVEXT_MODULE 1
+
+#ifndef CONFIG_MP_INCLUDED
+       #define CONFIG_IPS      1
+       #ifdef CONFIG_IPS
+               //#define CONFIG_IPS_LEVEL_2    1 //enable this to set default IPS mode to IPS_LEVEL_2
+       #endif
+
+       #define SUPPORT_HW_RFOFF_DETECTED       1
+
+       #define CONFIG_LPS      1
+       #define CONFIG_BT_COEXIST       1
+
+       //befor link
+       #define CONFIG_ANTENNA_DIVERSITY
+
+       //after link
+       #ifdef CONFIG_ANTENNA_DIVERSITY
+               #define CONFIG_SW_ANTENNA_DIVERSITY
+               //#define CONFIG_HW_ANTENNA_DIVERSITY
+       #endif
+
+       #define CONFIG_IOL
+#else  //#ifndef CONFIG_MP_INCLUDED
+       #define CONFIG_MP_IWPRIV_SUPPORT        1
+#endif         //#ifndef CONFIG_MP_INCLUDED
+
+#define CONFIG_AP_MODE 1
+#ifdef CONFIG_AP_MODE
+       #define CONFIG_NATIVEAP_MLME    1
+       #ifndef CONFIG_NATIVEAP_MLME
+               #define CONFIG_HOSTAPD_MLME     1
+       #endif
+       #define CONFIG_FIND_BEST_CHANNEL        1
+       //#define CONFIG_NO_WIRELESS_HANDLERS   1
+#endif
+
+//     Added by Albert 20110314
+#define CONFIG_P2P     1
+#ifdef CONFIG_P2P
+       //Added by Albert 20110812
+       //The CONFIG_WFD is for supporting the Wi-Fi display
+       #define CONFIG_WFD
+
+       #ifndef CONFIG_WIFI_TEST
+               #define CONFIG_P2P_REMOVE_GROUP_INFO
+       #endif
+       //#define CONFIG_DBG_P2P
+
+       //#define CONFIG_P2P_PS
+       //#define CONFIG_P2P_IPS
+
+       #define P2P_OP_CHECK_SOCIAL_CH
+               // Added comment by Borg 2013/06/21
+               // Issue:  Nexus 4 is hard to do miracast.
+               // Root Cause: After group formation,
+               //                      Nexus 4 is possible to be not at OP channel of Invitation Resp/Nego Confirm but at social channel.
+               // Patch: While scan OP channel,
+               //               not only scan OP channel of Invitation Resp/Nego Confirm,
+               //               but also scan social channel(1, 6, 11)
+#endif
+
+//     Added by Kurt 20110511
+//#define CONFIG_TDLS  1
+#ifdef CONFIG_TDLS
+//     #ifndef CONFIG_WFD
+//             #define CONFIG_WFD      1
+//     #endif
+//     #define CONFIG_TDLS_AUTOSETUP                   1
+//     #define CONFIG_TDLS_AUTOCHECKALIVE              1
+#endif
+
+#define CONFIG_SKB_COPY        1//for amsdu
+
+#define CONFIG_LED
+#ifdef CONFIG_LED
+       #define CONFIG_SW_LED
+       #ifdef CONFIG_SW_LED
+               //#define CONFIG_LED_HANDLED_BY_CMD_THREAD
+       #endif
+#endif // CONFIG_LED
+
+
+
+#define USB_INTERFERENCE_ISSUE // this should be checked in all usb interface
+#define CONFIG_GLOBAL_UI_PID
+
+#define CONFIG_LAYER2_ROAMING
+#define CONFIG_LAYER2_ROAMING_RESUME
+//#define CONFIG_ADAPTOR_INFO_CACHING_FILE // now just applied on 8192cu only, should make it general...
+//#define CONFIG_RESUME_IN_WORKQUEUE
+//#define CONFIG_SET_SCAN_DENY_TIMER
+#define CONFIG_LONG_DELAY_ISSUE
+#define CONFIG_NEW_SIGNAL_STAT_PROCESS
+//#define CONFIG_SIGNAL_DISPLAY_DBM //display RX signal with dbm
+#define RTW_NOTCH_FILTER 0 /* 0:Disable, 1:Enable */
+#define CONFIG_DEAUTH_BEFORE_CONNECT
+
+#ifdef CONFIG_IOL
+       #define CONFIG_IOL_LLT
+       #define CONFIG_IOL_MAC
+       #define CONFIG_IOL_BB_PHY_REG
+       #define CONFIG_IOL_BB_AGC_TAB
+       #define CONFIG_IOL_RF_RF90_PATH_A
+       #define CONFIG_IOL_RF_RF90_PATH_B
+#endif
+
+#define CONFIG_BR_EXT  1       // Enable NAT2.5 support for STA mode interface with a L2 Bridge
+#ifdef CONFIG_BR_EXT
+#define CONFIG_BR_EXT_BRNAME   "br0"
+#endif // CONFIG_BR_EXT
+
+#define CONFIG_TX_MCAST2UNI    1       // Support IP multicast->unicast
+//#define CONFIG_DM_ADAPTIVITY
+//#define CONFIG_CHECK_AC_LIFETIME 1   // Check packet lifetime of 4 ACs.
+
+//#define CONFIG_CONCURRENT_MODE 1
+#ifdef CONFIG_CONCURRENT_MODE
+       #define CONFIG_TSF_RESET_OFFLOAD 1                      // For 2 PORT TSF SYNC.
+       //#define CONFIG_HWPORT_SWAP                            //Port0->Sec , Port1 -> Pri
+       //#define CONFIG_STA_MODE_SCAN_UNDER_AP_MODE
+       //#define CONFIG_MULTI_VIR_IFACES //besides primary&secondary interfaces, extend to support more interfaces
+#endif // CONFIG_CONCURRENT_MODE
+
+#define CONFIG_80211D
+
+/*
+ * Interface  Related Config
+ */
+
+//#define CONFIG_USB_ONE_OUT_EP
+//#define CONFIG_USB_INTERRUPT_IN_PIPE 1
+
+#ifndef CONFIG_MINIMAL_MEMORY_USAGE
+       #define CONFIG_USB_TX_AGGREGATION       1
+       #define CONFIG_USB_RX_AGGREGATION       1
+#endif
+
+#define CONFIG_PREALLOC_RECV_SKB       1
+//#define CONFIG_REDUCE_USB_TX_INT     1       // Trade-off: Improve performance, but may cause TX URBs blocked by USB Host/Bus driver on few platforms.
+//#define CONFIG_EASY_REPLACEMENT      1
+
+/*
+ * CONFIG_USE_USB_BUFFER_ALLOC_XX uses Linux USB Buffer alloc API and is for Linux platform only now!
+ */
+//#define CONFIG_USE_USB_BUFFER_ALLOC_TX 1     // Trade-off: For TX path, improve stability on some platforms, but may cause performance degrade on other platforms.
+//#define CONFIG_USE_USB_BUFFER_ALLOC_RX 1     // For RX path
+#ifdef CONFIG_USE_USB_BUFFER_ALLOC_RX
+#undef CONFIG_PREALLOC_RECV_SKB
+#endif
+
+/*
+ * USB VENDOR REQ BUFFER ALLOCATION METHOD
+ * if not set we'll use function local variable (stack memory)
+ */
+//#define CONFIG_USB_VENDOR_REQ_BUFFER_DYNAMIC_ALLOCATE
+#define CONFIG_USB_VENDOR_REQ_BUFFER_PREALLOC
+
+#define CONFIG_USB_VENDOR_REQ_MUTEX
+#define CONFIG_VENDOR_REQ_RETRY
+
+//#define CONFIG_USB_SUPPORT_ASYNC_VDN_REQ 1
+
+
+/*
+ * HAL  Related Config
+ */
+
+#define RTL8192C_RX_PACKET_NO_INCLUDE_CRC      1
+
+#define SUPPORTED_BLOCK_IO
+
+
+
+#define RTL8192CU_FW_DOWNLOAD_ENABLE   1
+
+#define CONFIG_ONLY_ONE_OUT_EP_TO_LOW  0
+
+#define CONFIG_OUT_EP_WIFI_MODE        0
+
+#define ENABLE_USB_DROP_INCORRECT_OUT  0
+
+#define RTL8192CU_ASIC_VERIFICATION    0       // For ASIC verification.
+
+#define RTL8192CU_ADHOC_WORKAROUND_SETTING     1
+
+#define DISABLE_BB_RF  0
+
+#define RTL8191C_FPGA_NETWORKTYPE_ADHOC 0
+
+#ifdef CONFIG_MP_INCLUDED
+       #define MP_DRIVER 1
+       #undef CONFIG_USB_TX_AGGREGATION
+       #undef CONFIG_USB_RX_AGGREGATION
+#else
+       #define MP_DRIVER 0
+#endif
+
+
+/*
+ * Platform  Related Config
+ */
+#ifdef CONFIG_PLATFORM_MN10300
+#define CONFIG_SPECIAL_SETTING_FOR_FUNAI_TV
+
+#if    defined (CONFIG_SW_ANTENNA_DIVERSITY)
+       #undef CONFIG_SW_ANTENNA_DIVERSITY
+       #define CONFIG_HW_ANTENNA_DIVERSITY
+#endif
+
+#endif
+
+#ifdef CONFIG_WISTRON_PLATFORM
+
+#endif
+
+#ifdef CONFIG_PLATFORM_TI_DM365
+#define CONFIG_USE_USB_BUFFER_ALLOC_RX 1
+#endif
+
+#define CONFIG_ATTEMPT_TO_FIX_AP_BEACON_ERROR
+
+/*
+ * Debug  Related Config
+ */
+//#define CONFIG_DEBUG_RTL871X
+
+#define DBG    0
+//#define CONFIG_DEBUG_RTL819X
+
+//#define CONFIG_PROC_DEBUG    1
+
+//#define DBG_IO
+//#define DBG_DELAY_OS
+//#define DBG_MEM_ALLOC
+//#define DBG_IOCTL
+
+//#define DBG_TX
+//#define DBG_XMIT_BUF
+//#define DBG_TX_DROP_FRAME
+
+//#define DBG_RX_DROP_FRAME
+//#define DBG_RX_SEQ
+//#define DBG_RX_SIGNAL_DISPLAY_PROCESSING
+//#define DBG_RX_SIGNAL_DISPLAY_SSID_MONITORED "jeff-ap"
+
+//#define DBG_EXPIRATION_CHK
+
+
+//#define DBG_SHOW_MCUFWDL_BEFORE_51_ENABLE
+//#define DBG_ROAMING_TEST
+
+//#define DBG_HAL_INIT_PROFILING
+
+//#define DBG_MEMORY_LEAK      1
+
+#define DBG_CONFIG_ERROR_DETECT
+//#define DBG_CONFIG_ERROR_RESET
+
+//TX use 1 urb
+//#define CONFIG_SINGLE_XMIT_BUF
+//RX use 1 urb
+//#define CONFIG_SINGLE_RECV_BUF
+
+//turn off power tracking when traffic is busy
+//#define CONFIG_BUSY_TRAFFIC_SKIP_PWR_TRACK
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/basic_types.h b/drivers/net/wireless/realtek/rtl8192cu/include/basic_types.h
new file mode 100644 (file)
index 0000000..c52fe3a
--- /dev/null
@@ -0,0 +1,320 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __BASIC_TYPES_H__
+#define __BASIC_TYPES_H__
+
+#include <drv_conf.h>
+
+
+#define SUCCESS        0
+#define FAIL   (-1)
+
+#ifndef TRUE
+       #define _TRUE   1
+#else
+       #define _TRUE   TRUE
+#endif
+
+#ifndef FALSE
+       #define _FALSE  0
+#else
+       #define _FALSE  FALSE
+#endif
+
+#ifdef PLATFORM_WINDOWS
+
+       typedef signed char s8;
+       typedef unsigned char u8;
+
+       typedef signed short s16;
+       typedef unsigned short u16;
+
+       typedef signed long s32;
+       typedef unsigned long u32;
+
+       typedef unsigned int    uint;
+       typedef signed int              sint;
+
+
+       typedef signed long long s64;
+       typedef unsigned long long u64;
+
+       #ifdef NDIS50_MINIPORT
+
+               #define NDIS_MAJOR_VERSION       5
+               #define NDIS_MINOR_VERSION       0
+
+       #endif
+
+       #ifdef NDIS51_MINIPORT
+
+               #define NDIS_MAJOR_VERSION       5
+               #define NDIS_MINOR_VERSION       1
+
+       #endif
+
+       typedef NDIS_PROC proc_t;
+
+       typedef LONG atomic_t;
+
+#endif
+
+
+#ifdef PLATFORM_LINUX
+
+       #include <linux/types.h>
+       #define IN
+       #define OUT
+       #define VOID void
+       #define NDIS_OID uint
+       #define NDIS_STATUS uint
+
+       typedef signed int sint;
+
+       #ifndef PVOID
+       typedef void * PVOID;
+       //#define PVOID (void *)
+       #endif
+
+        #define UCHAR u8
+       #define USHORT u16
+       #define UINT u32
+       #define ULONG u32
+
+       typedef void (*proc_t)(void*);
+
+       typedef         __kernel_size_t SIZE_T;
+       typedef __kernel_ssize_t        SSIZE_T;
+       #define FIELD_OFFSET(s,field)   ((SSIZE_T)&((s*)(0))->field)
+
+#endif
+
+
+#ifdef PLATFORM_FREEBSD
+
+       typedef signed char s8;
+       typedef unsigned char u8;
+
+       typedef signed short s16;
+       typedef unsigned short u16;
+
+       typedef signed int s32;
+       typedef unsigned int u32;
+
+       typedef unsigned int    uint;
+       typedef signed int              sint;
+       typedef long atomic_t;
+
+       typedef signed long long s64;
+       typedef unsigned long long u64;
+       #define IN
+       #define OUT
+       #define VOID void
+       #define NDIS_OID uint
+       #define NDIS_STATUS uint
+
+       #ifndef PVOID
+       typedef void * PVOID;
+       //#define PVOID (void *)
+       #endif
+       typedef u32 dma_addr_t;
+    #define UCHAR u8
+       #define USHORT u16
+       #define UINT u32
+       #define ULONG u32
+
+       typedef void (*proc_t)(void*);
+
+  typedef unsigned int __kernel_size_t;
+  typedef int __kernel_ssize_t;
+
+       typedef         __kernel_size_t SIZE_T;
+       typedef __kernel_ssize_t        SSIZE_T;
+       #define FIELD_OFFSET(s,field)   ((SSIZE_T)&((s*)(0))->field)
+
+#endif
+
+#define MEM_ALIGNMENT_OFFSET   (sizeof (SIZE_T))
+#define MEM_ALIGNMENT_PADDING  (sizeof(SIZE_T) - 1)
+
+#define SIZE_PTR SIZE_T
+#define SSIZE_PTR SSIZE_T
+
+//port from fw by thomas
+// TODO: Belows are Sync from SD7-Driver. It is necessary to check correctness
+
+/*
+ *     Call endian free function when
+ *             1. Read/write packet content.
+ *             2. Before write integer to IO.
+ *             3. After read integer from IO.
+*/
+
+//
+// Byte Swapping routine.
+//
+#define EF1Byte
+#define EF2Byte        le16_to_cpu
+#define EF4Byte        le32_to_cpu
+
+//
+// Read LE format data from memory
+//
+#define ReadEF1Byte(_ptr)              EF1Byte(*((u8 *)(_ptr)))
+#define ReadEF2Byte(_ptr)              EF2Byte(*((u16 *)(_ptr)))
+#define ReadEF4Byte(_ptr)              EF4Byte(*((u32 *)(_ptr)))
+
+//
+// Write LE data to memory
+//
+#define WriteEF1Byte(_ptr, _val)       (*((u8 *)(_ptr)))=EF1Byte(_val)
+#define WriteEF2Byte(_ptr, _val)       (*((u16 *)(_ptr)))=EF2Byte(_val)
+#define WriteEF4Byte(_ptr, _val)       (*((u32 *)(_ptr)))=EF4Byte(_val)
+
+//
+//     Example:
+//             BIT_LEN_MASK_32(0) => 0x00000000
+//             BIT_LEN_MASK_32(1) => 0x00000001
+//             BIT_LEN_MASK_32(2) => 0x00000003
+//             BIT_LEN_MASK_32(32) => 0xFFFFFFFF
+//
+#define BIT_LEN_MASK_32(__BitLen) \
+       (0xFFFFFFFF >> (32 - (__BitLen)))
+//
+//     Example:
+//             BIT_OFFSET_LEN_MASK_32(0, 2) => 0x00000003
+//             BIT_OFFSET_LEN_MASK_32(16, 2) => 0x00030000
+//
+#define BIT_OFFSET_LEN_MASK_32(__BitOffset, __BitLen) \
+       (BIT_LEN_MASK_32(__BitLen) << (__BitOffset))
+
+//
+//     Description:
+//             Return 4-byte value in host byte ordering from
+//             4-byte pointer in litten-endian system.
+//
+#define LE_P4BYTE_TO_HOST_4BYTE(__pStart) \
+       (EF4Byte(*((u32 *)(__pStart))))
+
+//
+//     Description:
+//             Translate subfield (continuous bits in little-endian) of 4-byte value in litten byte to
+//             4-byte value in host byte ordering.
+//
+#define LE_BITS_TO_4BYTE(__pStart, __BitOffset, __BitLen) \
+       ( \
+               ( LE_P4BYTE_TO_HOST_4BYTE(__pStart) >> (__BitOffset) ) \
+               & \
+               BIT_LEN_MASK_32(__BitLen) \
+       )
+
+//
+//     Description:
+//             Mask subfield (continuous bits in little-endian) of 4-byte value in litten byte oredering
+//             and return the result in 4-byte value in host byte ordering.
+//
+#define LE_BITS_CLEARED_TO_4BYTE(__pStart, __BitOffset, __BitLen) \
+       ( \
+               LE_P4BYTE_TO_HOST_4BYTE(__pStart) \
+               & \
+               ( ~BIT_OFFSET_LEN_MASK_32(__BitOffset, __BitLen) ) \
+       )
+
+//
+//     Description:
+//             Set subfield of little-endian 4-byte value to specified value.
+//
+#define SET_BITS_TO_LE_4BYTE(__pStart, __BitOffset, __BitLen, __Value) \
+       *((u32 *)(__pStart)) = \
+               EF4Byte( \
+                       LE_BITS_CLEARED_TO_4BYTE(__pStart, __BitOffset, __BitLen) \
+                       | \
+                       ( (((u32)__Value) & BIT_LEN_MASK_32(__BitLen)) << (__BitOffset) ) \
+               );
+
+
+#define BIT_LEN_MASK_16(__BitLen) \
+               (0xFFFF >> (16 - (__BitLen)))
+
+#define BIT_OFFSET_LEN_MASK_16(__BitOffset, __BitLen) \
+       (BIT_LEN_MASK_16(__BitLen) << (__BitOffset))
+
+#define LE_P2BYTE_TO_HOST_2BYTE(__pStart) \
+       (EF2Byte(*((u16 *)(__pStart))))
+
+#define LE_BITS_TO_2BYTE(__pStart, __BitOffset, __BitLen) \
+       ( \
+               ( LE_P2BYTE_TO_HOST_2BYTE(__pStart) >> (__BitOffset) ) \
+               & \
+               BIT_LEN_MASK_16(__BitLen) \
+       )
+
+#define LE_BITS_CLEARED_TO_2BYTE(__pStart, __BitOffset, __BitLen) \
+       ( \
+               LE_P2BYTE_TO_HOST_2BYTE(__pStart) \
+               & \
+               ( ~BIT_OFFSET_LEN_MASK_16(__BitOffset, __BitLen) ) \
+       )
+
+#define SET_BITS_TO_LE_2BYTE(__pStart, __BitOffset, __BitLen, __Value) \
+       *((u16 *)(__pStart)) = \
+               EF2Byte( \
+                       LE_BITS_CLEARED_TO_2BYTE(__pStart, __BitOffset, __BitLen) \
+                       | \
+                       ( (((u16)__Value) & BIT_LEN_MASK_16(__BitLen)) << (__BitOffset) ) \
+               );
+
+#define BIT_LEN_MASK_8(__BitLen) \
+               (0xFF >> (8 - (__BitLen)))
+
+#define BIT_OFFSET_LEN_MASK_8(__BitOffset, __BitLen) \
+       (BIT_LEN_MASK_8(__BitLen) << (__BitOffset))
+
+#define LE_P1BYTE_TO_HOST_1BYTE(__pStart) \
+       (EF1Byte(*((u8 *)(__pStart))))
+
+#define LE_BITS_TO_1BYTE(__pStart, __BitOffset, __BitLen) \
+       ( \
+               ( LE_P1BYTE_TO_HOST_1BYTE(__pStart) >> (__BitOffset) ) \
+               & \
+               BIT_LEN_MASK_8(__BitLen) \
+       )
+
+#define LE_BITS_CLEARED_TO_1BYTE(__pStart, __BitOffset, __BitLen) \
+       ( \
+               LE_P1BYTE_TO_HOST_1BYTE(__pStart) \
+               & \
+               ( ~BIT_OFFSET_LEN_MASK_8(__BitOffset, __BitLen) ) \
+       )
+
+#define SET_BITS_TO_LE_1BYTE(__pStart, __BitOffset, __BitLen, __Value) \
+       *((u8 *)(__pStart)) = \
+               EF1Byte( \
+                       LE_BITS_CLEARED_TO_1BYTE(__pStart, __BitOffset, __BitLen) \
+                       | \
+                       ( (((u8)__Value) & BIT_LEN_MASK_8(__BitLen)) << (__BitOffset) ) \
+               );
+
+// Get the N-bytes aligment offset from the current length
+#define N_BYTE_ALIGMENT(__Value, __Aligment) ((__Aligment == 1) ? (__Value) : (((__Value + __Aligment - 1) / __Aligment) * __Aligment))
+
+typedef unsigned char  BOOLEAN,*PBOOLEAN;
+
+#endif //__BASIC_TYPES_H__
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/byteorder/big_endian.h b/drivers/net/wireless/realtek/rtl8192cu/include/byteorder/big_endian.h
new file mode 100644 (file)
index 0000000..0cd3504
--- /dev/null
@@ -0,0 +1,87 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef _LINUX_BYTEORDER_BIG_ENDIAN_H
+#define _LINUX_BYTEORDER_BIG_ENDIAN_H
+
+#ifndef __BIG_ENDIAN
+#define __BIG_ENDIAN 4321
+#endif
+#ifndef __BIG_ENDIAN_BITFIELD
+#define __BIG_ENDIAN_BITFIELD
+#endif
+
+#include <byteorder/swab.h>
+
+#define __constant_htonl(x) ((__u32)(x))
+#define __constant_ntohl(x) ((__u32)(x))
+#define __constant_htons(x) ((__u16)(x))
+#define __constant_ntohs(x) ((__u16)(x))
+#define __constant_cpu_to_le64(x) ___constant_swab64((x))
+#define __constant_le64_to_cpu(x) ___constant_swab64((x))
+#define __constant_cpu_to_le32(x) ___constant_swab32((x))
+#define __constant_le32_to_cpu(x) ___constant_swab32((x))
+#define __constant_cpu_to_le16(x) ___constant_swab16((x))
+#define __constant_le16_to_cpu(x) ___constant_swab16((x))
+#define __constant_cpu_to_be64(x) ((__u64)(x))
+#define __constant_be64_to_cpu(x) ((__u64)(x))
+#define __constant_cpu_to_be32(x) ((__u32)(x))
+#define __constant_be32_to_cpu(x) ((__u32)(x))
+#define __constant_cpu_to_be16(x) ((__u16)(x))
+#define __constant_be16_to_cpu(x) ((__u16)(x))
+#define __cpu_to_le64(x) __swab64((x))
+#define __le64_to_cpu(x) __swab64((x))
+#define __cpu_to_le32(x) __swab32((x))
+#define __le32_to_cpu(x) __swab32((x))
+#define __cpu_to_le16(x) __swab16((x))
+#define __le16_to_cpu(x) __swab16((x))
+#define __cpu_to_be64(x) ((__u64)(x))
+#define __be64_to_cpu(x) ((__u64)(x))
+#define __cpu_to_be32(x) ((__u32)(x))
+#define __be32_to_cpu(x) ((__u32)(x))
+#define __cpu_to_be16(x) ((__u16)(x))
+#define __be16_to_cpu(x) ((__u16)(x))
+#define __cpu_to_le64p(x) __swab64p((x))
+#define __le64_to_cpup(x) __swab64p((x))
+#define __cpu_to_le32p(x) __swab32p((x))
+#define __le32_to_cpup(x) __swab32p((x))
+#define __cpu_to_le16p(x) __swab16p((x))
+#define __le16_to_cpup(x) __swab16p((x))
+#define __cpu_to_be64p(x) (*(__u64*)(x))
+#define __be64_to_cpup(x) (*(__u64*)(x))
+#define __cpu_to_be32p(x) (*(__u32*)(x))
+#define __be32_to_cpup(x) (*(__u32*)(x))
+#define __cpu_to_be16p(x) (*(__u16*)(x))
+#define __be16_to_cpup(x) (*(__u16*)(x))
+#define __cpu_to_le64s(x) __swab64s((x))
+#define __le64_to_cpus(x) __swab64s((x))
+#define __cpu_to_le32s(x) __swab32s((x))
+#define __le32_to_cpus(x) __swab32s((x))
+#define __cpu_to_le16s(x) __swab16s((x))
+#define __le16_to_cpus(x) __swab16s((x))
+#define __cpu_to_be64s(x) do {} while (0)
+#define __be64_to_cpus(x) do {} while (0)
+#define __cpu_to_be32s(x) do {} while (0)
+#define __be32_to_cpus(x) do {} while (0)
+#define __cpu_to_be16s(x) do {} while (0)
+#define __be16_to_cpus(x) do {} while (0)
+
+#include <byteorder/generic.h>
+
+#endif /* _LINUX_BYTEORDER_BIG_ENDIAN_H */
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/byteorder/generic.h b/drivers/net/wireless/realtek/rtl8192cu/include/byteorder/generic.h
new file mode 100644 (file)
index 0000000..11676a6
--- /dev/null
@@ -0,0 +1,212 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef _LINUX_BYTEORDER_GENERIC_H
+#define _LINUX_BYTEORDER_GENERIC_H
+
+/*
+ * linux/byteorder_generic.h
+ * Generic Byte-reordering support
+ *
+ * Francois-Rene Rideau <fare@tunes.org> 19970707
+ *    gathered all the good ideas from all asm-foo/byteorder.h into one file,
+ *    cleaned them up.
+ *    I hope it is compliant with non-GCC compilers.
+ *    I decided to put __BYTEORDER_HAS_U64__ in byteorder.h,
+ *    because I wasn't sure it would be ok to put it in types.h
+ *    Upgraded it to 2.1.43
+ * Francois-Rene Rideau <fare@tunes.org> 19971012
+ *    Upgraded it to 2.1.57
+ *    to please Linus T., replaced huge #ifdef's between little/big endian
+ *    by nestedly #include'd files.
+ * Francois-Rene Rideau <fare@tunes.org> 19971205
+ *    Made it to 2.1.71; now a facelift:
+ *    Put files under include/linux/byteorder/
+ *    Split swab from generic support.
+ *
+ * TODO:
+ *   = Regular kernel maintainers could also replace all these manual
+ *    byteswap macros that remain, disseminated among drivers,
+ *    after some grep or the sources...
+ *   = Linus might want to rename all these macros and files to fit his taste,
+ *    to fit his personal naming scheme.
+ *   = it seems that a few drivers would also appreciate
+ *    nybble swapping support...
+ *   = every architecture could add their byteswap macro in asm/byteorder.h
+ *    see how some architectures already do (i386, alpha, ppc, etc)
+ *   = cpu_to_beXX and beXX_to_cpu might some day need to be well
+ *    distinguished throughout the kernel. This is not the case currently,
+ *    since little endian, big endian, and pdp endian machines needn't it.
+ *    But this might be the case for, say, a port of Linux to 20/21 bit
+ *    architectures (and F21 Linux addict around?).
+ */
+
+/*
+ * The following macros are to be defined by <asm/byteorder.h>:
+ *
+ * Conversion of long and short int between network and host format
+ *     ntohl(__u32 x)
+ *     ntohs(__u16 x)
+ *     htonl(__u32 x)
+ *     htons(__u16 x)
+ * It seems that some programs (which? where? or perhaps a standard? POSIX?)
+ * might like the above to be functions, not macros (why?).
+ * if that's true, then detect them, and take measures.
+ * Anyway, the measure is: define only ___ntohl as a macro instead,
+ * and in a separate file, have
+ * unsigned long inline ntohl(x){return ___ntohl(x);}
+ *
+ * The same for constant arguments
+ *     __constant_ntohl(__u32 x)
+ *     __constant_ntohs(__u16 x)
+ *     __constant_htonl(__u32 x)
+ *     __constant_htons(__u16 x)
+ *
+ * Conversion of XX-bit integers (16- 32- or 64-)
+ * between native CPU format and little/big endian format
+ * 64-bit stuff only defined for proper architectures
+ *     cpu_to_[bl]eXX(__uXX x)
+ *     [bl]eXX_to_cpu(__uXX x)
+ *
+ * The same, but takes a pointer to the value to convert
+ *     cpu_to_[bl]eXXp(__uXX x)
+ *     [bl]eXX_to_cpup(__uXX x)
+ *
+ * The same, but change in situ
+ *     cpu_to_[bl]eXXs(__uXX x)
+ *     [bl]eXX_to_cpus(__uXX x)
+ *
+ * See asm-foo/byteorder.h for examples of how to provide
+ * architecture-optimized versions
+ *
+ */
+
+
+#if defined(PLATFORM_LINUX) || defined(PLATFORM_WINDOWS) || defined(PLATFORM_MPIXEL) || defined(PLATFORM_FREEBSD)
+/*
+ * inside the kernel, we can use nicknames;
+ * outside of it, we must avoid POSIX namespace pollution...
+ */
+#define cpu_to_le64 __cpu_to_le64
+#define le64_to_cpu __le64_to_cpu
+#define cpu_to_le32 __cpu_to_le32
+#define le32_to_cpu __le32_to_cpu
+#define cpu_to_le16 __cpu_to_le16
+#define le16_to_cpu __le16_to_cpu
+#define cpu_to_be64 __cpu_to_be64
+#define be64_to_cpu __be64_to_cpu
+#define cpu_to_be32 __cpu_to_be32
+#define be32_to_cpu __be32_to_cpu
+#define cpu_to_be16 __cpu_to_be16
+#define be16_to_cpu __be16_to_cpu
+#define cpu_to_le64p __cpu_to_le64p
+#define le64_to_cpup __le64_to_cpup
+#define cpu_to_le32p __cpu_to_le32p
+#define le32_to_cpup __le32_to_cpup
+#define cpu_to_le16p __cpu_to_le16p
+#define le16_to_cpup __le16_to_cpup
+#define cpu_to_be64p __cpu_to_be64p
+#define be64_to_cpup __be64_to_cpup
+#define cpu_to_be32p __cpu_to_be32p
+#define be32_to_cpup __be32_to_cpup
+#define cpu_to_be16p __cpu_to_be16p
+#define be16_to_cpup __be16_to_cpup
+#define cpu_to_le64s __cpu_to_le64s
+#define le64_to_cpus __le64_to_cpus
+#define cpu_to_le32s __cpu_to_le32s
+#define le32_to_cpus __le32_to_cpus
+#define cpu_to_le16s __cpu_to_le16s
+#define le16_to_cpus __le16_to_cpus
+#define cpu_to_be64s __cpu_to_be64s
+#define be64_to_cpus __be64_to_cpus
+#define cpu_to_be32s __cpu_to_be32s
+#define be32_to_cpus __be32_to_cpus
+#define cpu_to_be16s __cpu_to_be16s
+#define be16_to_cpus __be16_to_cpus
+#endif
+
+
+/*
+ * Handle ntohl and suches. These have various compatibility
+ * issues - like we want to give the prototype even though we
+ * also have a macro for them in case some strange program
+ * wants to take the address of the thing or something..
+ *
+ * Note that these used to return a "long" in libc5, even though
+ * long is often 64-bit these days.. Thus the casts.
+ *
+ * They have to be macros in order to do the constant folding
+ * correctly - if the argument passed into a inline function
+ * it is no longer constant according to gcc..
+ */
+
+#undef ntohl
+#undef ntohs
+#undef htonl
+#undef htons
+
+/*
+ * Do the prototypes. Somebody might want to take the
+ * address or some such sick thing..
+ */
+#if defined(PLATFORM_LINUX) || (defined (__GLIBC__) && __GLIBC__ >= 2)
+extern __u32                   ntohl(__u32);
+extern __u32                   htonl(__u32);
+#else //defined(PLATFORM_LINUX) || (defined (__GLIBC__) && __GLIBC__ >= 2)
+#ifndef PLATFORM_FREEBSD
+extern unsigned long int       ntohl(unsigned long int);
+extern unsigned long int       htonl(unsigned long int);
+#endif
+#endif
+#ifndef PLATFORM_FREEBSD
+extern unsigned short int      ntohs(unsigned short int);
+extern unsigned short int      htons(unsigned short int);
+#endif
+
+#if defined(__GNUC__) && (__GNUC__ >= 2) && defined(__OPTIMIZE__) ||  defined(PLATFORM_MPIXEL)
+
+#define ___htonl(x) __cpu_to_be32(x)
+#define ___htons(x) __cpu_to_be16(x)
+#define ___ntohl(x) __be32_to_cpu(x)
+#define ___ntohs(x) __be16_to_cpu(x)
+
+#if defined(PLATFORM_LINUX) || (defined (__GLIBC__) && __GLIBC__ >= 2)
+#define htonl(x) ___htonl(x)
+#define ntohl(x) ___ntohl(x)
+#else
+#define htonl(x) ((unsigned long)___htonl(x))
+#define ntohl(x) ((unsigned long)___ntohl(x))
+#endif
+#define htons(x) ___htons(x)
+#define ntohs(x) ___ntohs(x)
+
+#endif /* OPTIMIZE */
+
+
+#if defined (PLATFORM_WINDOWS)
+
+#define htonl(x) __cpu_to_be32(x)
+#define ntohl(x) __be32_to_cpu(x)
+#define htons(x) __cpu_to_be16(x)
+#define ntohs(x) __be16_to_cpu(x)
+
+
+#endif
+
+#endif /* _LINUX_BYTEORDER_GENERIC_H */
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/byteorder/little_endian.h b/drivers/net/wireless/realtek/rtl8192cu/include/byteorder/little_endian.h
new file mode 100644 (file)
index 0000000..9f77fb4
--- /dev/null
@@ -0,0 +1,89 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef _LINUX_BYTEORDER_LITTLE_ENDIAN_H
+#define _LINUX_BYTEORDER_LITTLE_ENDIAN_H
+
+#ifndef __LITTLE_ENDIAN
+#define __LITTLE_ENDIAN 1234
+#endif
+#ifndef __LITTLE_ENDIAN_BITFIELD
+#define __LITTLE_ENDIAN_BITFIELD
+#endif
+
+#include <byteorder/swab.h>
+
+#ifndef __constant_htonl
+#define __constant_htonl(x) ___constant_swab32((x))
+#define __constant_ntohl(x) ___constant_swab32((x))
+#define __constant_htons(x) ___constant_swab16((x))
+#define __constant_ntohs(x) ___constant_swab16((x))
+#define __constant_cpu_to_le64(x) ((__u64)(x))
+#define __constant_le64_to_cpu(x) ((__u64)(x))
+#define __constant_cpu_to_le32(x) ((__u32)(x))
+#define __constant_le32_to_cpu(x) ((__u32)(x))
+#define __constant_cpu_to_le16(x) ((__u16)(x))
+#define __constant_le16_to_cpu(x) ((__u16)(x))
+#define __constant_cpu_to_be64(x) ___constant_swab64((x))
+#define __constant_be64_to_cpu(x) ___constant_swab64((x))
+#define __constant_cpu_to_be32(x) ___constant_swab32((x))
+#define __constant_be32_to_cpu(x) ___constant_swab32((x))
+#define __constant_cpu_to_be16(x) ___constant_swab16((x))
+#define __constant_be16_to_cpu(x) ___constant_swab16((x))
+#define __cpu_to_le64(x) ((__u64)(x))
+#define __le64_to_cpu(x) ((__u64)(x))
+#define __cpu_to_le32(x) ((__u32)(x))
+#define __le32_to_cpu(x) ((__u32)(x))
+#define __cpu_to_le16(x) ((__u16)(x))
+#define __le16_to_cpu(x) ((__u16)(x))
+#define __cpu_to_be64(x) __swab64((x))
+#define __be64_to_cpu(x) __swab64((x))
+#define __cpu_to_be32(x) __swab32((x))
+#define __be32_to_cpu(x) __swab32((x))
+#define __cpu_to_be16(x) __swab16((x))
+#define __be16_to_cpu(x) __swab16((x))
+#define __cpu_to_le64p(x) (*(__u64*)(x))
+#define __le64_to_cpup(x) (*(__u64*)(x))
+#define __cpu_to_le32p(x) (*(__u32*)(x))
+#define __le32_to_cpup(x) (*(__u32*)(x))
+#define __cpu_to_le16p(x) (*(__u16*)(x))
+#define __le16_to_cpup(x) (*(__u16*)(x))
+#define __cpu_to_be64p(x) __swab64p((x))
+#define __be64_to_cpup(x) __swab64p((x))
+#define __cpu_to_be32p(x) __swab32p((x))
+#define __be32_to_cpup(x) __swab32p((x))
+#define __cpu_to_be16p(x) __swab16p((x))
+#define __be16_to_cpup(x) __swab16p((x))
+#define __cpu_to_le64s(x) do {} while (0)
+#define __le64_to_cpus(x) do {} while (0)
+#define __cpu_to_le32s(x) do {} while (0)
+#define __le32_to_cpus(x) do {} while (0)
+#define __cpu_to_le16s(x) do {} while (0)
+#define __le16_to_cpus(x) do {} while (0)
+#define __cpu_to_be64s(x) __swab64s((x))
+#define __be64_to_cpus(x) __swab64s((x))
+#define __cpu_to_be32s(x) __swab32s((x))
+#define __be32_to_cpus(x) __swab32s((x))
+#define __cpu_to_be16s(x) __swab16s((x))
+#define __be16_to_cpus(x) __swab16s((x))
+#endif // __constant_htonl
+
+#include <byteorder/generic.h>
+
+#endif /* _LINUX_BYTEORDER_LITTLE_ENDIAN_H */
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/byteorder/swab.h b/drivers/net/wireless/realtek/rtl8192cu/include/byteorder/swab.h
new file mode 100644 (file)
index 0000000..1cf2821
--- /dev/null
@@ -0,0 +1,140 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef _LINUX_BYTEORDER_SWAB_H
+#define _LINUX_BYTEORDER_SWAB_H
+
+#if !defined(CONFIG_PLATFORM_MSTAR)
+#ifndef __u16
+typedef unsigned short __u16;
+#endif
+
+#ifndef __u32
+typedef unsigned int   __u32;
+#endif
+
+#ifndef __u8
+typedef unsigned char __u8;
+#endif
+
+#ifndef __u64
+typedef unsigned long long     __u64;
+#endif
+
+
+__inline static __u16  ___swab16(__u16 x)
+{
+       __u16 __x = x;
+       return
+       ((__u16)(
+               (((__u16)(__x) & (__u16)0x00ffU) << 8) |
+               (((__u16)(__x) & (__u16)0xff00U) >> 8) ));
+
+}
+
+__inline static __u32  ___swab32(__u32 x)
+{
+       __u32 __x = (x);
+       return ((__u32)(
+               (((__u32)(__x) & (__u32)0x000000ffUL) << 24) |
+               (((__u32)(__x) & (__u32)0x0000ff00UL) <<  8) |
+               (((__u32)(__x) & (__u32)0x00ff0000UL) >>  8) |
+               (((__u32)(__x) & (__u32)0xff000000UL) >> 24) ));
+}
+
+__inline static __u64  ___swab64(__u64 x)
+{
+       __u64 __x = (x);
+
+       return
+       ((__u64)( \
+               (__u64)(((__u64)(__x) & (__u64)0x00000000000000ffULL) << 56) | \
+               (__u64)(((__u64)(__x) & (__u64)0x000000000000ff00ULL) << 40) | \
+               (__u64)(((__u64)(__x) & (__u64)0x0000000000ff0000ULL) << 24) | \
+               (__u64)(((__u64)(__x) & (__u64)0x00000000ff000000ULL) <<  8) | \
+               (__u64)(((__u64)(__x) & (__u64)0x000000ff00000000ULL) >>  8) | \
+               (__u64)(((__u64)(__x) & (__u64)0x0000ff0000000000ULL) >> 24) | \
+               (__u64)(((__u64)(__x) & (__u64)0x00ff000000000000ULL) >> 40) | \
+               (__u64)(((__u64)(__x) & (__u64)0xff00000000000000ULL) >> 56) )); \
+}
+#endif // CONFIG_PLATFORM_MSTAR
+
+#ifndef __arch__swab16
+__inline static __u16 __arch__swab16(__u16 x)
+{
+       return ___swab16(x);
+}
+
+#endif
+
+#ifndef __arch__swab32
+__inline static __u32 __arch__swab32(__u32 x)
+{
+       __u32 __tmp = (x) ;
+       return ___swab32(__tmp);
+}
+#endif
+
+#ifndef __arch__swab64
+
+__inline static __u64 __arch__swab64(__u64 x)
+{
+       __u64 __tmp = (x) ;
+       return ___swab64(__tmp);
+}
+
+
+#endif
+
+#ifndef __swab16
+#define __swab16(x) __fswab16(x)
+#define __swab32(x) __fswab32(x)
+#define __swab64(x) __fswab64(x)
+#endif // __swab16
+
+#ifdef PLATFORM_FREEBSD
+__inline static __u16 __fswab16(__u16 x)
+#else
+__inline static const __u16 __fswab16(__u16 x)
+#endif //PLATFORM_FREEBSD
+{
+       return __arch__swab16(x);
+}
+#ifdef PLATFORM_FREEBSD
+__inline static __u32 __fswab32(__u32 x)
+#else
+__inline static const __u32 __fswab32(__u32 x)
+#endif //PLATFORM_FREEBSD
+{
+       return __arch__swab32(x);
+}
+
+#if defined(PLATFORM_LINUX) || defined(PLATFORM_WINDOWS)
+#define swab16 __swab16
+#define swab32 __swab32
+#define swab64 __swab64
+#define swab16p __swab16p
+#define swab32p __swab32p
+#define swab64p __swab64p
+#define swab16s __swab16s
+#define swab32s __swab32s
+#define swab64s __swab64s
+#endif
+
+#endif /* _LINUX_BYTEORDER_SWAB_H */
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/byteorder/swabb.h b/drivers/net/wireless/realtek/rtl8192cu/include/byteorder/swabb.h
new file mode 100644 (file)
index 0000000..cf0fad6
--- /dev/null
@@ -0,0 +1,156 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef _LINUX_BYTEORDER_SWABB_H
+#define _LINUX_BYTEORDER_SWABB_H
+
+/*
+ * linux/byteorder/swabb.h
+ * SWAp Bytes Bizarrely
+ *     swaHHXX[ps]?(foo)
+ *
+ * Support for obNUXIous pdp-endian and other bizarre architectures.
+ * Will Linux ever run on such ancient beasts? if not, this file
+ * will be but a programming pearl. Still, it's a reminder that we
+ * shouldn't be making too many assumptions when trying to be portable.
+ *
+ */
+
+/*
+ * Meaning of the names I chose (vaxlinux people feel free to correct them):
+ * swahw32     swap 16-bit half-words in a 32-bit word
+ * swahb32     swap 8-bit halves of each 16-bit half-word in a 32-bit word
+ *
+ * No 64-bit support yet. I don't know NUXI conventions for long longs.
+ * I guarantee it will be a mess when it's there, though :->
+ * It will be even worse if there are conflicting 64-bit conventions.
+ * Hopefully, no one ever used 64-bit objects on NUXI machines.
+ *
+ */
+
+#define ___swahw32(x) \
+({ \
+       __u32 __x = (x); \
+       ((__u32)( \
+               (((__u32)(__x) & (__u32)0x0000ffffUL) << 16) | \
+               (((__u32)(__x) & (__u32)0xffff0000UL) >> 16) )); \
+})
+#define ___swahb32(x) \
+({ \
+       __u32 __x = (x); \
+       ((__u32)( \
+               (((__u32)(__x) & (__u32)0x00ff00ffUL) << 8) | \
+               (((__u32)(__x) & (__u32)0xff00ff00UL) >> 8) )); \
+})
+
+#define ___constant_swahw32(x) \
+       ((__u32)( \
+               (((__u32)(x) & (__u32)0x0000ffffUL) << 16) | \
+               (((__u32)(x) & (__u32)0xffff0000UL) >> 16) ))
+#define ___constant_swahb32(x) \
+       ((__u32)( \
+               (((__u32)(x) & (__u32)0x00ff00ffUL) << 8) | \
+               (((__u32)(x) & (__u32)0xff00ff00UL) >> 8) ))
+
+/*
+ * provide defaults when no architecture-specific optimization is detected
+ */
+#ifndef __arch__swahw32
+#  define __arch__swahw32(x) ___swahw32(x)
+#endif
+#ifndef __arch__swahb32
+#  define __arch__swahb32(x) ___swahb32(x)
+#endif
+
+#ifndef __arch__swahw32p
+#  define __arch__swahw32p(x) __swahw32(*(x))
+#endif
+#ifndef __arch__swahb32p
+#  define __arch__swahb32p(x) __swahb32(*(x))
+#endif
+
+#ifndef __arch__swahw32s
+#  define __arch__swahw32s(x) do { *(x) = __swahw32p((x)); } while (0)
+#endif
+#ifndef __arch__swahb32s
+#  define __arch__swahb32s(x) do { *(x) = __swahb32p((x)); } while (0)
+#endif
+
+
+/*
+ * Allow constant folding
+ */
+#if defined(__GNUC__) && (__GNUC__ >= 2) && defined(__OPTIMIZE__)
+#  define __swahw32(x) \
+(__builtin_constant_p((__u32)(x)) ? \
+ ___swahw32((x)) : \
+ __fswahw32((x)))
+#  define __swahb32(x) \
+(__builtin_constant_p((__u32)(x)) ? \
+ ___swahb32((x)) : \
+ __fswahb32((x)))
+#else
+#  define __swahw32(x) __fswahw32(x)
+#  define __swahb32(x) __fswahb32(x)
+#endif /* OPTIMIZE */
+
+
+__inline static__ __const__ __u32 __fswahw32(__u32 x)
+{
+       return __arch__swahw32(x);
+}
+__inline static__ __u32 __swahw32p(__u32 *x)
+{
+       return __arch__swahw32p(x);
+}
+__inline static__ void __swahw32s(__u32 *addr)
+{
+       __arch__swahw32s(addr);
+}
+
+
+__inline static__ __const__ __u32 __fswahb32(__u32 x)
+{
+       return __arch__swahb32(x);
+}
+__inline static__ __u32 __swahb32p(__u32 *x)
+{
+       return __arch__swahb32p(x);
+}
+__inline static__ void __swahb32s(__u32 *addr)
+{
+       __arch__swahb32s(addr);
+}
+
+#ifdef __BYTEORDER_HAS_U64__
+/*
+ * Not supported yet
+ */
+#endif /* __BYTEORDER_HAS_U64__ */
+
+#if defined(PLATFORM_LINUX)
+#define swahw32 __swahw32
+#define swahb32 __swahb32
+#define swahw32p __swahw32p
+#define swahb32p __swahb32p
+#define swahw32s __swahw32s
+#define swahb32s __swahb32s
+#endif
+
+#endif /* _LINUX_BYTEORDER_SWABB_H */
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/circ_buf.h b/drivers/net/wireless/realtek/rtl8192cu/include/circ_buf.h
new file mode 100644 (file)
index 0000000..236fbe6
--- /dev/null
@@ -0,0 +1,27 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __CIRC_BUF_H_
+#define __CIRC_BUF_H_ 1
+
+#define CIRC_CNT(head,tail,size) (((head) - (tail)) & ((size)-1))
+
+#define CIRC_SPACE(head,tail,size) CIRC_CNT((tail),((head)+1),(size))
+
+#endif //_CIRC_BUF_H_
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/cmd_osdep.h b/drivers/net/wireless/realtek/rtl8192cu/include/cmd_osdep.h
new file mode 100644 (file)
index 0000000..c4903f4
--- /dev/null
@@ -0,0 +1,35 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __CMD_OSDEP_H_
+#define __CMD_OSDEP_H_
+
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+
+extern sint _rtw_init_cmd_priv (struct cmd_priv *pcmdpriv);
+extern sint _rtw_init_evt_priv(struct evt_priv *pevtpriv);
+extern void _rtw_free_evt_priv (struct evt_priv *pevtpriv);
+extern void _rtw_free_cmd_priv (struct cmd_priv *pcmdpriv);
+extern sint _rtw_enqueue_cmd(_queue *queue, struct cmd_obj *obj);
+extern struct  cmd_obj *_rtw_dequeue_cmd(_queue *queue);
+
+#endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/drv_conf.h b/drivers/net/wireless/realtek/rtl8192cu/include/drv_conf.h
new file mode 100644 (file)
index 0000000..370a121
--- /dev/null
@@ -0,0 +1,77 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __DRV_CONF_H__
+#define __DRV_CONF_H__
+#include "autoconf.h"
+
+#if defined (PLATFORM_LINUX) && defined (PLATFORM_WINDOWS)
+
+#error "Shall be Linux or Windows, but not both!\n"
+
+#endif
+
+//Older Android kernel doesn't has CONFIG_ANDROID defined,
+//add this to force CONFIG_ANDROID defined
+#ifdef CONFIG_PLATFORM_ANDROID
+#define CONFIG_ANDROID
+#endif
+
+#ifdef CONFIG_ANDROID
+//Some Android build will restart the UI while non-printable ascii is passed
+//between java and c/c++ layer (JNI). We force CONFIG_VALIDATE_SSID
+//for Android here. If you are sure there is no risk on your system about this,
+//mask this macro define to support non-printable ascii ssid.
+//#define CONFIG_VALIDATE_SSID
+
+//Android expect dbm as the rx signal strength unit
+#define CONFIG_SIGNAL_DISPLAY_DBM
+#endif
+
+#if defined(CONFIG_HAS_EARLYSUSPEND) && defined (CONFIG_RESUME_IN_WORKQUEUE)
+       #warning "You have CONFIG_HAS_EARLYSUSPEND enabled in your system, we disable CONFIG_RESUME_IN_WORKQUEUE automatically"
+       #undef CONFIG_RESUME_IN_WORKQUEUE
+#endif
+
+#if defined(CONFIG_ANDROID_POWER) && defined (CONFIG_RESUME_IN_WORKQUEUE)
+       #warning "You have CONFIG_ANDROID_POWER enabled in your system, we disable CONFIG_RESUME_IN_WORKQUEUE automatically"
+       #undef CONFIG_RESUME_IN_WORKQUEUE
+#endif
+
+#ifdef CONFIG_RESUME_IN_WORKQUEUE //this can be removed, because there is no case for this...
+       #if !defined( CONFIG_WAKELOCK) && !defined(CONFIG_ANDROID_POWER)
+       #error "enable CONFIG_RESUME_IN_WORKQUEUE without CONFIG_WAKELOCK or CONFIG_ANDROID_POWER will suffer from the danger of wifi's unfunctionality..."
+       #error "If you still want to enable CONFIG_RESUME_IN_WORKQUEUE in this case, mask this preprossor checking and GOOD LUCK..."
+       #endif
+#endif
+
+//About USB VENDOR REQ
+#if defined(CONFIG_USB_VENDOR_REQ_BUFFER_PREALLOC) && !defined(CONFIG_USB_VENDOR_REQ_MUTEX)
+       #warning "define CONFIG_USB_VENDOR_REQ_MUTEX for CONFIG_USB_VENDOR_REQ_BUFFER_PREALLOC automatically"
+       #define CONFIG_USB_VENDOR_REQ_MUTEX
+#endif
+#if defined(CONFIG_VENDOR_REQ_RETRY) &&  !defined(CONFIG_USB_VENDOR_REQ_MUTEX)
+       #warning "define CONFIG_USB_VENDOR_REQ_MUTEX for CONFIG_VENDOR_REQ_RETRY automatically"
+       #define CONFIG_USB_VENDOR_REQ_MUTEX
+#endif
+
+
+//#include <rtl871x_byteorder.h>
+
+#endif // __DRV_CONF_H__
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/drv_types.h b/drivers/net/wireless/realtek/rtl8192cu/include/drv_types.h
new file mode 100644 (file)
index 0000000..46ab663
--- /dev/null
@@ -0,0 +1,661 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+/*-------------------------------------------------------------------------------
+
+       For type defines and data structure defines
+
+--------------------------------------------------------------------------------*/
+
+
+#ifndef __DRV_TYPES_H__
+#define __DRV_TYPES_H__
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <wlan_bssdef.h>
+
+
+#ifdef PLATFORM_OS_XP
+#include <drv_types_xp.h>
+#endif
+
+#ifdef PLATFORM_OS_CE
+#include <drv_types_ce.h>
+#endif
+
+#ifdef PLATFORM_LINUX
+#include <drv_types_linux.h>
+#endif
+
+enum _NIC_VERSION {
+
+       RTL8711_NIC,
+       RTL8712_NIC,
+       RTL8713_NIC,
+       RTL8716_NIC
+
+};
+
+enum{
+       UP_LINK,
+       DOWN_LINK,
+};
+typedef struct _ADAPTER _adapter, ADAPTER,*PADAPTER;
+
+#ifdef CONFIG_80211N_HT
+#include <rtw_ht.h>
+#endif
+
+#include <rtw_cmd.h>
+#include <wlan_bssdef.h>
+#include <rtw_security.h>
+#include <rtw_xmit.h>
+#include <rtw_recv.h>
+#include <hal_intf.h>
+#include <hal_com.h>
+#include <rtw_qos.h>
+#include <rtw_pwrctrl.h>
+#include <rtw_io.h>
+#include <rtw_eeprom.h>
+#include <sta_info.h>
+#include <rtw_mlme.h>
+#include <rtw_debug.h>
+#include <rtw_rf.h>
+#include <rtw_event.h>
+#include <rtw_led.h>
+#include <rtw_mlme_ext.h>
+#include <rtw_p2p.h>
+#include <rtw_tdls.h>
+#include <rtw_ap.h>
+
+#ifdef CONFIG_DRVEXT_MODULE
+#include <drvext_api.h>
+#endif
+
+#ifdef CONFIG_MP_INCLUDED
+#include <rtw_mp.h>
+#endif
+
+#ifdef CONFIG_BR_EXT
+#include <rtw_br_ext.h>
+#endif // CONFIG_BR_EXT
+
+#ifdef CONFIG_IOCTL_CFG80211
+       #include "ioctl_cfg80211.h"
+#endif //CONFIG_IOCTL_CFG80211
+
+#define SPEC_DEV_ID_NONE BIT(0)
+#define SPEC_DEV_ID_DISABLE_HT BIT(1)
+#define SPEC_DEV_ID_ENABLE_PS BIT(2)
+#define SPEC_DEV_ID_RF_CONFIG_1T1R BIT(3)
+#define SPEC_DEV_ID_RF_CONFIG_2T2R BIT(4)
+#define SPEC_DEV_ID_ASSIGN_IFNAME BIT(5)
+
+struct specific_device_id{
+
+       u32             flags;
+
+       u16             idVendor;
+       u16             idProduct;
+
+};
+
+struct registry_priv
+{
+       u8      chip_version;
+       u8      rfintfs;
+       u8      lbkmode;
+       u8      hci;
+       NDIS_802_11_SSID        ssid;
+       u8      network_mode;   //infra, ad-hoc, auto
+       u8      channel;//ad-hoc support requirement
+       u8      wireless_mode;//A, B, G, auto
+       u8      scan_mode;//active, passive
+       u8      radio_enable;
+       u8      preamble;//long, short, auto
+       u8      vrtl_carrier_sense;//Enable, Disable, Auto
+       u8      vcs_type;//RTS/CTS, CTS-to-self
+       u16     rts_thresh;
+       u16  frag_thresh;
+       u8      adhoc_tx_pwr;
+       u8      soft_ap;
+       u8      power_mgnt;
+       u8      ips_mode;
+       u8      smart_ps;
+       u8      long_retry_lmt;
+       u8      short_retry_lmt;
+       u16     busy_thresh;
+       u8      ack_policy;
+       u8      mp_mode;
+       u8      software_encrypt;
+       u8      software_decrypt;
+
+       u8      acm_method;
+         //UAPSD
+       u8      wmm_enable;
+       u8      uapsd_enable;
+       u8      uapsd_max_sp;
+       u8      uapsd_acbk_en;
+       u8      uapsd_acbe_en;
+       u8      uapsd_acvi_en;
+       u8      uapsd_acvo_en;
+
+       WLAN_BSSID_EX    dev_network;
+
+#ifdef CONFIG_80211N_HT
+       u8      ht_enable;
+       u8      cbw40_enable;
+       u8      ampdu_enable;//for tx
+       u8      rx_stbc;
+       u8      ampdu_amsdu;//A-MPDU Supports A-MSDU is permitted
+#endif
+       u8      lowrate_two_xmit;
+
+       u8      rf_config ;
+       u8      low_power ;
+
+       u8      wifi_spec;// !turbo_mode
+
+       u8      channel_plan;
+#ifdef CONFIG_BT_COEXIST
+       u8      bt_iso;
+       u8      bt_sco;
+       u8      bt_ampdu;
+#endif
+       BOOLEAN bAcceptAddbaReq;
+
+       u8      antdiv_cfg;
+
+       u8      usbss_enable;//0:disable,1:enable
+       u8      hwpdn_mode;//0:disable,1:enable,2:decide by EFUSE config
+       u8      hwpwrp_detect;//0:disable,1:enable
+
+       u8      hw_wps_pbc;//0:disable,1:enable
+
+#ifdef CONFIG_ADAPTOR_INFO_CACHING_FILE
+       char    adaptor_info_caching_file_path[PATH_LENGTH_MAX];
+#endif
+
+#ifdef CONFIG_LAYER2_ROAMING
+       u8      max_roaming_times; // the max number driver will try to roaming
+#endif
+
+#ifdef CONFIG_IOL
+       bool force_iol; //enable iol without other concern
+#endif
+       u8  special_rf_path; //0: 2T2R ,1: only turn on path A 1T1R, 2: only turn on path B 1T1R
+       u8      mac_phy_mode; //0:by efuse, 1:smsp, 2:dmdp, 3:dmsp.
+
+#ifdef CONFIG_80211D
+       u8 enable80211d;
+#endif
+
+       u8 ifname[16];
+       u8 if2name[16];
+
+       u8 notch_filter;
+
+#ifdef CONFIG_MULTI_VIR_IFACES
+       u8 ext_iface_num;//primary/secondary iface is excluded
+#endif
+};
+
+
+//For registry parameters
+#define RGTRY_OFT(field) ((ULONG)FIELD_OFFSET(struct registry_priv,field))
+#define RGTRY_SZ(field)   sizeof(((struct registry_priv*) 0)->field)
+#define BSSID_OFT(field) ((ULONG)FIELD_OFFSET(WLAN_BSSID_EX,field))
+#define BSSID_SZ(field)   sizeof(((PWLAN_BSSID_EX) 0)->field)
+
+#define MAX_CONTINUAL_URB_ERR 4
+
+#ifdef CONFIG_SDIO_HCI
+#include <drv_types_sdio.h>
+#define INTF_DATA SDIO_DATA
+#endif
+
+#define GET_PRIMARY_ADAPTER(padapter) (((_adapter *)padapter)->dvobj->if1)
+
+#define GET_IFACE_NUMS(padapter) (((_adapter *)padapter)->dvobj->iface_nums)
+#define GET_ADAPTER(padapter, iface_id) (((_adapter *)padapter)->dvobj->padapters[iface_id])
+
+enum _IFACE_ID {
+       IFACE_ID0, //maping to PRIMARY_ADAPTER
+       IFACE_ID1, //maping to SECONDARY_ADAPTER
+       IFACE_ID2,
+       IFACE_ID3,
+       IFACE_ID_MAX,
+};
+
+struct dvobj_priv
+{
+       _adapter *if1; //PRIMARY_ADAPTER
+       _adapter *if2; //SECONDARY_ADAPTER
+
+       s32 processing_dev_remove;
+
+       //for local/global synchronization
+       _mutex hw_init_mutex;
+       _mutex h2c_fwcmd_mutex;
+       _mutex setch_mutex;
+       _mutex setbw_mutex;
+
+       unsigned char   oper_channel; //saved channel info when call set_channel_bw
+       unsigned char   oper_bwmode;
+       unsigned char   oper_ch_offset;//PRIME_CHNL_OFFSET
+       u32 on_oper_ch_time;
+
+       //extend to support mulitu interface
+       //padapters[IFACE_ID0] == if1
+       //padapters[IFACE_ID1] == if2
+       _adapter *padapters[IFACE_ID_MAX];
+       u8 iface_nums; // total number of ifaces used runtime
+
+       //For 92D, DMDP have 2 interface.
+       u8      InterfaceNumber;
+       u8      NumInterfaces;
+       u8      DualMacMode;
+       u8      irq_alloc;
+
+/*-------- below is for SDIO INTERFACE --------*/
+
+#ifdef INTF_DATA
+       INTF_DATA intf_data;
+#endif
+
+/*-------- below is for USB INTERFACE --------*/
+
+#ifdef CONFIG_USB_HCI
+
+       u8      nr_endpoint;
+       u8      ishighspeed;
+       u8      RtNumInPipes;
+       u8      RtNumOutPipes;
+       int     ep_num[5]; //endpoint number
+
+       int     RegUsbSS;
+
+       _sema   usb_suspend_sema;
+
+#ifdef CONFIG_USB_VENDOR_REQ_MUTEX
+       _mutex  usb_vendor_req_mutex;
+#endif
+
+#ifdef CONFIG_USB_VENDOR_REQ_BUFFER_PREALLOC
+       u8 * usb_alloc_vendor_req_buf;
+       u8 * usb_vendor_req_buf;
+#endif
+
+#ifdef PLATFORM_WINDOWS
+       //related device objects
+       PDEVICE_OBJECT  pphysdevobj;//pPhysDevObj;
+       PDEVICE_OBJECT  pfuncdevobj;//pFuncDevObj;
+       PDEVICE_OBJECT  pnextdevobj;//pNextDevObj;
+
+       u8      nextdevstacksz;//unsigned char NextDeviceStackSize;     //= (CHAR)CEdevice->pUsbDevObj->StackSize + 1;
+
+       //urb for control diescriptor request
+
+#ifdef PLATFORM_OS_XP
+       struct _URB_CONTROL_DESCRIPTOR_REQUEST descriptor_urb;
+       PUSB_CONFIGURATION_DESCRIPTOR   pconfig_descriptor;//UsbConfigurationDescriptor;
+#endif
+
+#ifdef PLATFORM_OS_CE
+       WCHAR                   active_path[MAX_ACTIVE_REG_PATH];       // adapter regpath
+       USB_EXTENSION   usb_extension;
+
+       _nic_hdl                pipehdls_r8192c[0x10];
+#endif
+
+       u32     config_descriptor_len;//ULONG UsbConfigurationDescriptorLength;
+#endif//PLATFORM_WINDOWS
+
+#ifdef PLATFORM_LINUX
+       struct usb_interface *pusbintf;
+       struct usb_device *pusbdev;
+#endif//PLATFORM_LINUX
+
+#ifdef PLATFORM_FREEBSD
+       struct usb_interface *pusbintf;
+       struct usb_device *pusbdev;
+#endif//PLATFORM_FREEBSD
+       ATOMIC_T continual_urb_error;
+#endif//CONFIG_USB_HCI
+
+/*-------- below is for PCIE INTERFACE --------*/
+
+#ifdef CONFIG_PCI_HCI
+
+#ifdef PLATFORM_LINUX
+       struct pci_dev *ppcidev;
+
+       //PCI MEM map
+       unsigned long   pci_mem_end;    /* shared mem end       */
+       unsigned long   pci_mem_start;  /* shared mem start     */
+
+       //PCI IO map
+       unsigned long   pci_base_addr;  /* device I/O address   */
+
+       //PciBridge
+       struct pci_priv pcipriv;
+
+       u16     irqline;
+       u8      irq_enabled;
+       RT_ISR_CONTENT  isr_content;
+       _lock   irq_th_lock;
+
+       //ASPM
+       u8      const_pci_aspm;
+       u8      const_amdpci_aspm;
+       u8      const_hwsw_rfoff_d3;
+       u8      const_support_pciaspm;
+       // pci-e bridge */
+       u8      const_hostpci_aspm_setting;
+       // pci-e device */
+       u8      const_devicepci_aspm_setting;
+       u8      b_support_aspm; // If it supports ASPM, Offset[560h] = 0x40, otherwise Offset[560h] = 0x00.
+       u8      b_support_backdoor;
+       u8 bdma64;
+#endif//PLATFORM_LINUX
+
+#endif//CONFIG_PCI_HCI
+};
+
+#ifdef PLATFORM_LINUX
+static struct device *dvobj_to_dev(struct dvobj_priv *dvobj)
+{
+       /* todo: get interface type from dvobj and the return the dev accordingly */
+#ifdef RTW_DVOBJ_CHIP_HW_TYPE
+#endif
+
+#ifdef CONFIG_USB_HCI
+       return &dvobj->pusbintf->dev;
+#endif
+#ifdef CONFIG_SDIO_HCI
+       return &dvobj->intf_data.func->dev;
+#endif
+#ifdef CONFIG_PCI_HCI
+       return &dvobj->ppcidev->dev;
+#endif
+}
+#endif
+
+
+enum _IFACE_TYPE {
+       IFACE_PORT0, //mapping to port0 for C/D series chips
+       IFACE_PORT1, //mapping to port1 for C/D series chip
+       MAX_IFACE_PORT,
+};
+
+enum _ADAPTER_TYPE {
+       PRIMARY_ADAPTER,
+       SECONDARY_ADAPTER,
+       MAX_ADAPTER = 0xFF,
+};
+
+typedef enum _DRIVER_STATE{
+       DRIVER_NORMAL = 0,
+       DRIVER_DISAPPEAR = 1,
+       DRIVER_REPLACE_DONGLE = 2,
+}DRIVER_STATE;
+
+#ifdef CONFIG_INTEL_PROXIM
+struct proxim {
+       bool proxim_support;
+       bool proxim_on;
+
+       void *proximity_priv;
+       int (*proxim_rx)(_adapter *padapter,
+               union recv_frame *precv_frame);
+       u8      (*proxim_get_var)(_adapter* padapter, u8 type);
+};
+#endif //CONFIG_INTEL_PROXIM
+
+#ifdef RTL8723A_SDIO_LOOPBACK
+typedef struct loopbackdata
+{
+       _sema   sema;
+       _thread_hdl_ lbkthread;
+       u8 bstop;
+       u32 cnt;
+       u16 size;
+       u16 txsize;
+       u8 txbuf[0x8000];
+       u16 rxsize;
+       u8 rxbuf[0x8000];
+       u8 msg[100];
+
+}LOOPBACKDATA, *PLOOPBACKDATA;
+#endif
+
+struct _ADAPTER{
+       int     DriverState;// for disable driver using module, use dongle to replace module.
+       int     pid[3];//process id from UI, 0:wps, 1:hostapd, 2:dhcpcd
+       int     bDongle;//build-in module or external dongle
+       u16     chip_type;
+       u16     HardwareType;
+       u16     interface_type;//USB,SDIO,PCI
+
+       struct dvobj_priv *dvobj;
+       struct  mlme_priv mlmepriv;
+       struct  mlme_ext_priv mlmeextpriv;
+       struct  cmd_priv        cmdpriv;
+       struct  evt_priv        evtpriv;
+       //struct        io_queue        *pio_queue;
+       struct  io_priv iopriv;
+       struct  xmit_priv       xmitpriv;
+       struct  recv_priv       recvpriv;
+       struct  sta_priv        stapriv;
+       struct  security_priv   securitypriv;
+       _lock   security_key_mutex; // add for CONFIG_IEEE80211W, none 11w also can use
+       struct  registry_priv   registrypriv;
+       struct  pwrctrl_priv    pwrctrlpriv;
+       struct  eeprom_priv eeprompriv;
+       struct  led_priv        ledpriv;
+
+#ifdef CONFIG_MP_INCLUDED
+       struct  mp_priv mppriv;
+#endif
+
+#ifdef CONFIG_DRVEXT_MODULE
+       struct  drvext_priv     drvextpriv;
+#endif
+
+#ifdef CONFIG_AP_MODE
+       struct  hostapd_priv    *phostapdpriv;
+#endif
+
+#ifdef CONFIG_IOCTL_CFG80211
+#ifdef CONFIG_P2P
+       struct cfg80211_wifidirect_info cfg80211_wdinfo;
+#endif //CONFIG_P2P
+#endif //CONFIG_IOCTL_CFG80211
+       u32     setband;
+#ifdef CONFIG_P2P
+       struct wifidirect_info  wdinfo;
+#endif //CONFIG_P2P
+
+#ifdef CONFIG_TDLS
+       struct tdls_info        tdlsinfo;
+#endif //CONFIG_TDLS
+
+#ifdef CONFIG_WFD
+       struct wifi_display_info wfd_info;
+#endif //CONFIG_WFD
+
+       PVOID                   HalData;
+       u32 hal_data_sz;
+       struct hal_ops  HalFunc;
+
+#ifdef CONFIG_BT_COEXIST
+       //struct        btcoexist_priv  bt_coexist;
+#endif
+       s32     bDriverStopped;
+       s32     bSurpriseRemoved;
+       s32  bCardDisableWOHSM;
+
+       u32     IsrContent;
+       u32     ImrContent;
+
+       u8      EepromAddressSize;
+       u8      hw_init_completed;
+       u8      bDriverIsGoingToUnload;
+       u8      init_adpt_in_progress;
+       u8      bHaltInProgress;
+
+       _thread_hdl_ cmdThread;
+       _thread_hdl_ evtThread;
+       _thread_hdl_ xmitThread;
+       _thread_hdl_ recvThread;
+
+#ifndef PLATFORM_LINUX
+       NDIS_STATUS (*dvobj_init)(struct dvobj_priv     *dvobj);
+       void (*dvobj_deinit)(struct dvobj_priv *dvobj);
+#endif
+
+       void (*intf_start)(_adapter * adapter);
+       void (*intf_stop)(_adapter * adapter);
+
+#ifdef PLATFORM_WINDOWS
+       _nic_hdl                hndis_adapter;//hNdisAdapter(NDISMiniportAdapterHandle);
+       _nic_hdl                hndis_config;//hNdisConfiguration;
+       NDIS_STRING fw_img;
+
+       u32     NdisPacketFilter;
+       u8      MCList[MAX_MCAST_LIST_NUM][6];
+       u32     MCAddrCount;
+#endif //end of PLATFORM_WINDOWS
+
+
+#ifdef PLATFORM_LINUX
+       _nic_hdl pnetdev;
+
+       // used by rtw_rereg_nd_name related function
+       struct rereg_nd_name_data {
+               _nic_hdl old_pnetdev;
+               char old_ifname[IFNAMSIZ];
+               u8 old_ips_mode;
+               u8 old_bRegUseLed;
+       } rereg_nd_name_priv;
+
+       int bup;
+       struct net_device_stats stats;
+       struct iw_statistics iwstats;
+       struct proc_dir_entry *dir_dev;// for proc directory
+
+#ifdef CONFIG_IOCTL_CFG80211
+       struct wireless_dev *rtw_wdev;
+#endif //CONFIG_IOCTL_CFG80211
+
+#endif //end of PLATFORM_LINUX
+
+#ifdef PLATFORM_FREEBSD
+       _nic_hdl pifp;
+       int bup;
+       _lock glock;
+#endif //PLATFORM_FREEBSD
+       int net_closed;
+
+       u8 bFWReady;
+       u8 bReadPortCancel;
+       u8 bWritePortCancel;
+       u8 bRxRSSIDisplay;
+       //      Added by Albert 2012/07/26
+       //      The driver will write the initial gain everytime when running in the DM_Write_DIG function.
+       u8 bForceWriteInitGain;
+       //      Added by Albert 2012/10/26
+       //      The driver will show up the desired channel number when this flag is 1.
+       u8 bNotifyChannelChange;
+#ifdef CONFIG_P2P
+       //      Added by Albert 2012/12/06
+       //      The driver will show the current P2P status when the upper application reads it.
+       u8 bShowGetP2PState;
+#endif
+#ifdef CONFIG_AUTOSUSPEND
+       u8      bDisableAutosuspend;
+#endif
+
+       //pbuddy_adapter is used only in  two inteface case, (iface_nums=2 in struct dvobj_priv)
+       //PRIMARY_ADAPTER's buddy is SECONDARY_ADAPTER
+       //SECONDARY_ADAPTER's buddy is PRIMARY_ADAPTER
+       //for iface_id > SECONDARY_ADAPTER(IFACE_ID1), refer to padapters[iface_id]  in struct dvobj_priv
+       //and their pbuddy_adapter is PRIMARY_ADAPTER.
+       //for PRIMARY_ADAPTER(IFACE_ID0) can directly refer to if1 in struct dvobj_priv
+       _adapter *pbuddy_adapter;
+
+#if defined(CONFIG_CONCURRENT_MODE) || defined(CONFIG_DUALMAC_CONCURRENT)
+       u8 isprimary; //is primary adapter or not
+       //notes:
+       // if isprimary is true, the adapter_type value is 0, iface_id is IFACE_ID0 for PRIMARY_ADAPTER
+       // if isprimary is false, the adapter_type value is 1, iface_id is IFACE_ID1 for SECONDARY_ADAPTER
+       // refer to iface_id if iface_nums>2 and isprimary is false and the adapter_type value is 0xff.
+       u8 adapter_type;//used only in  two inteface case(PRIMARY_ADAPTER and SECONDARY_ADAPTER) .
+       u8 iface_type; //interface port type, it depends on HW port
+#endif
+
+       //extend to support multi interface
+       //IFACE_ID0 is equals to PRIMARY_ADAPTER
+       //IFACE_ID1 is equals to SECONDARY_ADAPTER
+       u8 iface_id;
+
+#ifdef CONFIG_DUALMAC_CONCURRENT
+       u8 DualMacConcurrent; // 1: DMSP 0:DMDP
+#endif
+
+#ifdef CONFIG_BR_EXT
+       _lock                                   br_ext_lock;
+       //unsigned int                  macclone_completed;
+       struct nat25_network_db_entry   *nethash[NAT25_HASH_SIZE];
+       int                             pppoe_connection_in_progress;
+       unsigned char                   pppoe_addr[MACADDRLEN];
+       unsigned char                   scdb_mac[MACADDRLEN];
+       unsigned char                   scdb_ip[4];
+       struct nat25_network_db_entry   *scdb_entry;
+       unsigned char                   br_mac[MACADDRLEN];
+       unsigned char                   br_ip[4];
+
+       struct br_ext_info              ethBrExtInfo;
+#endif // CONFIG_BR_EXT
+
+#ifdef CONFIG_INTEL_PROXIM
+       /* intel Proximity, should be alloc mem
+        * in intel Proximity module and can only
+        * be used in intel Proximity mode */
+       struct proxim proximity;
+#endif //CONFIG_INTEL_PROXIM
+
+#ifdef RTL8723A_SDIO_LOOPBACK
+       PLOOPBACKDATA ploopback;
+#endif
+
+};
+
+#define adapter_to_dvobj(adapter) (adapter->dvobj)
+
+int rtw_handle_dualmac(_adapter *adapter, bool init);
+
+__inline static u8 *myid(struct eeprom_priv *peepriv)
+{
+       return (peepriv->mac_addr);
+}
+
+
+#endif //__DRV_TYPES_H__
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/drv_types_ce.h b/drivers/net/wireless/realtek/rtl8192cu/include/drv_types_ce.h
new file mode 100644 (file)
index 0000000..25794fd
--- /dev/null
@@ -0,0 +1,92 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __DRV_TYPES_CE_H__
+#define __DRV_TYPES_CE_H__
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+
+#include <Sdcardddk.h>
+
+#define MAX_ACTIVE_REG_PATH 256
+
+#define MAX_MCAST_LIST_NUM                                     32
+
+
+
+//for ioctl
+#define MAKE_DRIVER_VERSION(_MainVer,_MinorVer)        ((((u32)(_MainVer))<<16)+_MinorVer)
+
+#define NIC_HEADER_SIZE                                14                      //!< can be moved to typedef.h
+#define NIC_MAX_PACKET_SIZE                    1514            //!< can be moved to typedef.h
+#define NIC_MAX_SEND_PACKETS                   10              // max number of send packets the MiniportSendPackets function can accept, can be moved to typedef.h
+#define NIC_VENDOR_DRIVER_VERSION       MAKE_DRIVER_VERSION(0,001)     //!< can be moved to typedef.h
+#define NIC_MAX_PACKET_SIZE                    1514            //!< can be moved to typedef.h
+
+typedef struct _MP_REG_ENTRY
+{
+
+       NDIS_STRING             RegName;        // variable name text
+       BOOLEAN                 bRequired;      // 1 -> required, 0 -> optional
+
+       u8                      Type;           // NdisParameterInteger/NdisParameterHexInteger/NdisParameterStringle/NdisParameterMultiString
+       uint                    FieldOffset;    // offset to MP_ADAPTER field
+       uint                    FieldSize;      // size (in bytes) of the field
+
+#ifdef UNDER_AMD64
+       u64                     Default;
+#else
+       u32                     Default;                // default value to use
+#endif
+
+       u32                     Min;                    // minimum value allowed
+       u32                     Max;            // maximum value allowed
+} MP_REG_ENTRY, *PMP_REG_ENTRY;
+
+#ifdef CONFIG_USB_HCI
+typedef struct _USB_EXTENSION {
+    LPCUSB_FUNCS    _lpUsbFuncs;
+       USB_HANDLE          _hDevice;
+    PVOID                  pAdapter;
+
+#if 0
+       USB_ENDPOINT_DESCRIPTOR         _endpACLIn;
+    USB_ENDPOINT_DESCRIPTOR            _endpACLOutHigh;
+       USB_ENDPOINT_DESCRIPTOR         _endpACLOutNormal;
+
+       USB_PIPE        pPipeIn;
+    USB_PIPE        pPipeOutNormal;
+    USB_PIPE        pPipeOutHigh;
+#endif
+
+} USB_EXTENSION, *PUSB_EXTENSION;
+#endif
+
+
+typedef struct _OCTET_STRING{
+       u8      *Octet;
+       u16      Length;
+} OCTET_STRING, *POCTET_STRING;
+
+
+
+
+
+#endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/drv_types_linux.h b/drivers/net/wireless/realtek/rtl8192cu/include/drv_types_linux.h
new file mode 100644 (file)
index 0000000..812b744
--- /dev/null
@@ -0,0 +1,24 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __DRV_TYPES_LINUX_H__
+#define __DRV_TYPES_LINUX_H__
+
+
+#endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/drv_types_sdio.h b/drivers/net/wireless/realtek/rtl8192cu/include/drv_types_sdio.h
new file mode 100644 (file)
index 0000000..c445712
--- /dev/null
@@ -0,0 +1,69 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __DRV_TYPES_SDIO_H__
+#define __DRV_TYPES_SDIO_H__
+
+#include <drv_conf.h>
+#include <basic_types.h>
+
+// SDIO Header Files
+#ifdef PLATFORM_LINUX
+#include <linux/mmc/sdio_func.h>
+#endif
+#ifdef PLATFORM_OS_XP
+#include <wdm.h>
+#include <ntddsd.h>
+#endif
+#ifdef PLATFORM_OS_CE
+#include <sdcardddk.h>
+#endif
+
+
+typedef struct sdio_data
+{
+       u8  func_number;
+
+       u8  tx_block_mode;
+       u8  rx_block_mode;
+       u32 block_transfer_len;
+
+#ifdef PLATFORM_LINUX
+       struct sdio_func         *func;
+#endif
+
+#ifdef PLATFORM_OS_XP
+       PDEVICE_OBJECT                          pphysdevobj;
+       PDEVICE_OBJECT                          pfuncdevobj;
+       PDEVICE_OBJECT                          pnextdevobj;
+       SDBUS_INTERFACE_STANDARD        sdbusinft;
+       u8                                                      nextdevstacksz;
+#endif
+
+#ifdef PLATFORM_OS_CE
+       SD_DEVICE_HANDLE                        hDevice;
+       SD_CARD_RCA                                     sd_rca;
+       SD_CARD_INTERFACE                       card_intf;
+       BOOLEAN                                         enableIsarWithStatus;
+       WCHAR                                           active_path[MAX_ACTIVE_REG_PATH];
+       SD_HOST_BLOCK_CAPABILITY        sd_host_blk_cap;
+#endif
+} SDIO_DATA, *PSDIO_DATA;
+
+#endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/drv_types_xp.h b/drivers/net/wireless/realtek/rtl8192cu/include/drv_types_xp.h
new file mode 100644 (file)
index 0000000..1d735d6
--- /dev/null
@@ -0,0 +1,94 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __DRV_TYPES_XP_H__
+#define __DRV_TYPES_XP_H__
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+
+
+
+#define MAX_MCAST_LIST_NUM                                     32
+
+
+
+//for ioctl
+#define MAKE_DRIVER_VERSION(_MainVer,_MinorVer)        ((((u32)(_MainVer))<<16)+_MinorVer)
+
+#define NIC_HEADER_SIZE                                14                      //!< can be moved to typedef.h
+#define NIC_MAX_PACKET_SIZE                    1514            //!< can be moved to typedef.h
+#define NIC_MAX_SEND_PACKETS                   10              // max number of send packets the MiniportSendPackets function can accept, can be moved to typedef.h
+#define NIC_VENDOR_DRIVER_VERSION       MAKE_DRIVER_VERSION(0,001)     //!< can be moved to typedef.h
+#define NIC_MAX_PACKET_SIZE                    1514            //!< can be moved to typedef.h
+
+
+#undef ON_VISTA
+//added by Jackson
+#ifndef ON_VISTA
+//
+// Bus driver versions
+//
+
+#define SDBUS_DRIVER_VERSION_1          0x100
+#define SDBUS_DRIVER_VERSION_2          0x200
+
+#define    SDP_FUNCTION_TYPE   4
+#define    SDP_BUS_DRIVER_VERSION 5
+#define    SDP_BUS_WIDTH 6
+#define    SDP_BUS_CLOCK 7
+#define    SDP_BUS_INTERFACE_CONTROL 8
+#define    SDP_HOST_BLOCK_LENGTH 9
+#define    SDP_FUNCTION_BLOCK_LENGTH 10
+#define    SDP_FN0_BLOCK_LENGTH 11
+#define    SDP_FUNCTION_INT_ENABLE 12
+#endif
+
+
+typedef struct _MP_REG_ENTRY
+{
+
+       NDIS_STRING             RegName;        // variable name text
+       BOOLEAN                 bRequired;      // 1 -> required, 0 -> optional
+
+       u8                      Type;           // NdisParameterInteger/NdisParameterHexInteger/NdisParameterStringle/NdisParameterMultiString
+       uint                    FieldOffset;    // offset to MP_ADAPTER field
+       uint                    FieldSize;      // size (in bytes) of the field
+
+#ifdef UNDER_AMD64
+       u64                     Default;
+#else
+       u32                     Default;                // default value to use
+#endif
+
+       u32                     Min;                    // minimum value allowed
+       u32                     Max;            // maximum value allowed
+} MP_REG_ENTRY, *PMP_REG_ENTRY;
+
+
+typedef struct _OCTET_STRING{
+       u8      *Octet;
+       u16      Length;
+} OCTET_STRING, *POCTET_STRING;
+
+
+
+
+
+#endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/ethernet.h b/drivers/net/wireless/realtek/rtl8192cu/include/ethernet.h
new file mode 100644 (file)
index 0000000..e22c12b
--- /dev/null
@@ -0,0 +1,41 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+/*! \file */
+#ifndef __INC_ETHERNET_H
+#define __INC_ETHERNET_H
+
+#define ETHERNET_ADDRESS_LENGTH                                6               //!< Ethernet Address Length
+#define ETHERNET_HEADER_SIZE                           14              //!< Ethernet Header Length
+#define LLC_HEADER_SIZE                                                6               //!< LLC Header Length
+#define TYPE_LENGTH_FIELD_SIZE                         2               //!< Type/Length Size
+#define MINIMUM_ETHERNET_PACKET_SIZE           60              //!< Minimum Ethernet Packet Size
+#define MAXIMUM_ETHERNET_PACKET_SIZE           1514    //!< Maximum Ethernet Packet Size
+
+#define RT_ETH_IS_MULTICAST(_pAddr)    ((((UCHAR *)(_pAddr))[0]&0x01)!=0)              //!< Is Multicast Address?
+#define RT_ETH_IS_BROADCAST(_pAddr)    (                                                                               \
+                                                                                       ((UCHAR *)(_pAddr))[0]==0xff    &&              \
+                                                                                       ((UCHAR *)(_pAddr))[1]==0xff    &&              \
+                                                                                       ((UCHAR *)(_pAddr))[2]==0xff    &&              \
+                                                                                       ((UCHAR *)(_pAddr))[3]==0xff    &&              \
+                                                                                       ((UCHAR *)(_pAddr))[4]==0xff    &&              \
+                                                                                       ((UCHAR *)(_pAddr))[5]==0xff            )       //!< Is Broadcast Address?
+
+
+#endif // #ifndef __INC_ETHERNET_H
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/h2clbk.h b/drivers/net/wireless/realtek/rtl8192cu/include/h2clbk.h
new file mode 100644 (file)
index 0000000..847356e
--- /dev/null
@@ -0,0 +1,35 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+
+
+#define _H2CLBK_H_
+
+
+#include <rtl8711_spec.h>
+#include <TypeDef.h>
+
+
+void _lbk_cmd(PADAPTER Adapter);
+
+void _lbk_rsp(PADAPTER Adapter);
+
+void _lbk_evt(IN PADAPTER Adapter);
+
+void h2c_event_callback(unsigned char *dev, unsigned char *pbuf);
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/hal_com.h b/drivers/net/wireless/realtek/rtl8192cu/include/hal_com.h
new file mode 100644 (file)
index 0000000..382f124
--- /dev/null
@@ -0,0 +1,145 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __HAL_COMMON_H__
+#define __HAL_COMMON_H__
+
+//CCK
+#define RATE_1M                                                BIT(0)
+#define RATE_2M                                                BIT(1)
+#define RATE_5_5M                                      BIT(2)
+#define RATE_11M                                       BIT(3)
+//OFDM
+#define RATE_6M                                                BIT(4)
+#define RATE_9M                                                BIT(5)
+#define RATE_12M                                       BIT(6)
+#define RATE_18M                                       BIT(7)
+#define RATE_24M                                       BIT(8)
+#define RATE_36M                                       BIT(9)
+#define RATE_48M                                       BIT(10)
+#define RATE_54M                                       BIT(11)
+//MCS 1 Spatial Stream
+#define RATE_MCS0                                      BIT(12)
+#define RATE_MCS1                                      BIT(13)
+#define RATE_MCS2                                      BIT(14)
+#define RATE_MCS3                                      BIT(15)
+#define RATE_MCS4                                      BIT(16)
+#define RATE_MCS5                                      BIT(17)
+#define RATE_MCS6                                      BIT(18)
+#define RATE_MCS7                                      BIT(19)
+//MCS 2 Spatial Stream
+#define RATE_MCS8                                      BIT(20)
+#define RATE_MCS9                                      BIT(21)
+#define RATE_MCS10                                     BIT(22)
+#define RATE_MCS11                                     BIT(23)
+#define RATE_MCS12                                     BIT(24)
+#define RATE_MCS13                                     BIT(25)
+#define RATE_MCS14                                     BIT(26)
+#define RATE_MCS15                                     BIT(27)
+
+// ALL CCK Rate
+#define        RATE_ALL_CCK                            RATR_1M|RATR_2M|RATR_55M|RATR_11M
+#define        RATE_ALL_OFDM_AG                        RATR_6M|RATR_9M|RATR_12M|RATR_18M|RATR_24M|\
+                                                                       RATR_36M|RATR_48M|RATR_54M
+#define        RATE_ALL_OFDM_1SS                       RATR_MCS0|RATR_MCS1|RATR_MCS2|RATR_MCS3 |\
+                                                                       RATR_MCS4|RATR_MCS5|RATR_MCS6   |RATR_MCS7
+#define        RATE_ALL_OFDM_2SS                       RATR_MCS8|RATR_MCS9     |RATR_MCS10|RATR_MCS11|\
+                                                                       RATR_MCS12|RATR_MCS13|RATR_MCS14|RATR_MCS15
+
+/*------------------------------ Tx Desc definition Macro ------------------------*/
+//#pragma mark -- Tx Desc related definition. --
+//----------------------------------------------------------------------------
+//-----------------------------------------------------------
+//     Rate
+//-----------------------------------------------------------
+// CCK Rates, TxHT = 0
+#define DESC_RATE1M                            0x00
+#define DESC_RATE2M                            0x01
+#define DESC_RATE5_5M                          0x02
+#define DESC_RATE11M                           0x03
+
+// OFDM Rates, TxHT = 0
+#define DESC_RATE6M                            0x04
+#define DESC_RATE9M                            0x05
+#define DESC_RATE12M                           0x06
+#define DESC_RATE18M                           0x07
+#define DESC_RATE24M                           0x08
+#define DESC_RATE36M                           0x09
+#define DESC_RATE48M                           0x0a
+#define DESC_RATE54M                           0x0b
+
+// MCS Rates, TxHT = 1
+#define DESC_RATEMCS0                          0x0c
+#define DESC_RATEMCS1                          0x0d
+#define DESC_RATEMCS2                          0x0e
+#define DESC_RATEMCS3                          0x0f
+#define DESC_RATEMCS4                          0x10
+#define DESC_RATEMCS5                          0x11
+#define DESC_RATEMCS6                          0x12
+#define DESC_RATEMCS7                          0x13
+#define DESC_RATEMCS8                          0x14
+#define DESC_RATEMCS9                          0x15
+#define DESC_RATEMCS10                         0x16
+#define DESC_RATEMCS11                         0x17
+#define DESC_RATEMCS12                         0x18
+#define DESC_RATEMCS13                         0x19
+#define DESC_RATEMCS14                         0x1a
+#define DESC_RATEMCS15                         0x1b
+#define DESC_RATEMCS15_SG                      0x1c
+#define DESC_RATEMCS32                         0x20
+
+//============================================================
+// Global var
+//============================================================
+#define        OFDM_TABLE_SIZE_92C     37
+#define        OFDM_TABLE_SIZE_92D     43
+#define        CCK_TABLE_SIZE          33
+
+extern u32 OFDMSwingTable[OFDM_TABLE_SIZE_92D] ;
+
+extern u8 CCKSwingTable_Ch1_Ch13[CCK_TABLE_SIZE][8];
+
+extern u8 CCKSwingTable_Ch14 [CCK_TABLE_SIZE][8];
+
+#ifdef CONFIG_CHIP_VER_INTEGRATION
+void dump_chip_info(HAL_VERSION        ChipVersion);
+#endif
+
+u8     //return the final channel plan decision
+hal_com_get_channel_plan(
+       IN      PADAPTER        padapter,
+       IN      u8                      hw_channel_plan,        //channel plan from HW (efuse/eeprom)
+       IN      u8                      sw_channel_plan,        //channel plan from SW (registry/module param)
+       IN      u8                      def_channel_plan,       //channel plan used when the former two is invalid
+       IN      BOOLEAN         AutoLoadFail
+       );
+
+void   HalSetBrateCfg(
+       IN PADAPTER             Adapter,
+       IN u8                   *mBratesOS,
+       OUT u16                 *pBrateCfg);
+
+u8     MRateToHwRate(u8 rate);
+
+void hal_init_macaddr(_adapter *adapter);
+
+void c2h_evt_clear(_adapter *adapter);
+s32 c2h_evt_read(_adapter *adapter, u8 *buf);
+
+#endif //__HAL_COMMON_H__
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/hal_intf.h b/drivers/net/wireless/realtek/rtl8192cu/include/hal_intf.h
new file mode 100644 (file)
index 0000000..cac4408
--- /dev/null
@@ -0,0 +1,431 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __HAL_INTF_H__
+#define __HAL_INTF_H__
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+
+#ifdef CONFIG_PCI_HCI
+#include <pci_hal.h>
+#endif
+
+
+enum RTL871X_HCI_TYPE {
+
+       RTW_SDIO,
+       RTW_USB,
+       RTW_PCIE
+};
+
+enum _CHIP_TYPE {
+
+       NULL_CHIP_TYPE,
+       RTL8712_8188S_8191S_8192S,
+       RTL8188C_8192C,
+       RTL8192D,
+       RTL8723A,
+       RTL8188E,
+       MAX_CHIP_TYPE
+};
+
+
+typedef enum _HW_VARIABLES{
+       HW_VAR_MEDIA_STATUS,
+       HW_VAR_MEDIA_STATUS1,
+       HW_VAR_SET_OPMODE,
+       HW_VAR_MAC_ADDR,
+       HW_VAR_BSSID,
+       HW_VAR_INIT_RTS_RATE,
+       HW_VAR_INIT_DATA_RATE,
+       HW_VAR_BASIC_RATE,
+       HW_VAR_TXPAUSE,
+       HW_VAR_BCN_FUNC,
+       HW_VAR_CORRECT_TSF,
+       HW_VAR_CHECK_BSSID,
+       HW_VAR_MLME_DISCONNECT,
+       HW_VAR_MLME_SITESURVEY,
+       HW_VAR_MLME_JOIN,
+       HW_VAR_ON_RCR_AM,
+       HW_VAR_OFF_RCR_AM,
+       HW_VAR_BEACON_INTERVAL,
+       HW_VAR_SLOT_TIME,
+       HW_VAR_RESP_SIFS,
+       HW_VAR_ACK_PREAMBLE,
+       HW_VAR_SEC_CFG,
+       HW_VAR_BCN_VALID,
+       HW_VAR_RF_TYPE,
+       HW_VAR_DM_FLAG,
+       HW_VAR_DM_FUNC_OP,
+       HW_VAR_DM_FUNC_SET,
+       HW_VAR_DM_FUNC_CLR,
+       HW_VAR_DM_INIT_PWDB,
+       HW_VAR_CAM_EMPTY_ENTRY,
+       HW_VAR_CAM_INVALID_ALL,
+       HW_VAR_CAM_WRITE,
+       HW_VAR_CAM_READ,
+       HW_VAR_AC_PARAM_VO,
+       HW_VAR_AC_PARAM_VI,
+       HW_VAR_AC_PARAM_BE,
+       HW_VAR_AC_PARAM_BK,
+       HW_VAR_ACM_CTRL,
+       HW_VAR_AMPDU_MIN_SPACE,
+       HW_VAR_AMPDU_FACTOR,
+       HW_VAR_RXDMA_AGG_PG_TH,
+       HW_VAR_SET_RPWM,
+       HW_VAR_H2C_FW_PWRMODE,
+       HW_VAR_H2C_FW_JOINBSSRPT,
+       HW_VAR_FWLPS_RF_ON,
+       HW_VAR_H2C_FW_P2P_PS_OFFLOAD,
+       HW_VAR_TDLS_WRCR,
+       HW_VAR_TDLS_INIT_CH_SEN,
+       HW_VAR_TDLS_RS_RCR,
+       HW_VAR_TDLS_DONE_CH_SEN,
+       HW_VAR_INITIAL_GAIN,
+       HW_VAR_TRIGGER_GPIO_0,
+       HW_VAR_BT_SET_COEXIST,
+       HW_VAR_BT_ISSUE_DELBA,
+       HW_VAR_CURRENT_ANTENNA,
+       HW_VAR_ANTENNA_DIVERSITY_LINK,
+       HW_VAR_ANTENNA_DIVERSITY_SELECT,
+       HW_VAR_SWITCH_EPHY_WoWLAN,
+       HW_VAR_EFUSE_BYTES,
+       HW_VAR_FIFO_CLEARN_UP,
+       HW_VAR_CHECK_TXBUF,
+       HW_VAR_APFM_ON_MAC, //Auto FSM to Turn On, include clock, isolation, power control for MAC only
+       HW_VAR_WOWLAN,
+       HW_VAR_VID,
+       HW_VAR_PID,
+       HW_VAR_MBSSID_CAM_WRITE,
+       HW_VAR_MBSSID_CAM_CLEAR,
+       HW_VAR_RCR_MBSSID_EN,
+       HW_VAR_USB_RXAGG_PAGE_TO,
+}HW_VARIABLES;
+
+typedef enum _HAL_DEF_VARIABLE{
+       HAL_DEF_UNDERCORATEDSMOOTHEDPWDB,
+       HAL_DEF_IS_SUPPORT_ANT_DIV,
+       HAL_DEF_CURRENT_ANTENNA,
+       HAL_DEF_DRVINFO_SZ,
+       HAL_DEF_MAX_RECVBUF_SZ,
+       HAL_DEF_RX_PACKET_OFFSET,
+       HAL_DEF_DBG_DUMP_RXPKT,//for dbg
+       HAL_DEF_DBG_DM_FUNC,//for dbg
+       HAL_DEF_DUAL_MAC_MODE,
+}HAL_DEF_VARIABLE;
+
+typedef enum _HAL_INTF_PS_FUNC{
+       HAL_USB_SELECT_SUSPEND,
+       HAL_MAX_ID,
+}HAL_INTF_PS_FUNC;
+
+typedef s32 (*c2h_id_filter)(u8 id);
+
+struct hal_ops {
+       u32     (*hal_init)(PADAPTER Adapter);
+       u32     (*hal_deinit)(PADAPTER Adapter);
+
+       void    (*free_hal_data)(PADAPTER Adapter);
+
+       u32     (*inirp_init)(PADAPTER Adapter);
+       u32     (*inirp_deinit)(PADAPTER Adapter);
+
+       s32     (*init_xmit_priv)(PADAPTER Adapter);
+       void    (*free_xmit_priv)(PADAPTER Adapter);
+
+       s32     (*init_recv_priv)(PADAPTER Adapter);
+       void    (*free_recv_priv)(PADAPTER Adapter);
+
+       void    (*InitSwLeds)(PADAPTER Adapter);
+       void    (*DeInitSwLeds)(PADAPTER Adapter);
+
+       void    (*dm_init)(PADAPTER Adapter);
+       void    (*dm_deinit)(PADAPTER Adapter);
+       void    (*read_chip_version)(PADAPTER Adapter);
+
+       void    (*init_default_value)(PADAPTER Adapter);
+
+       void    (*intf_chip_configure)(PADAPTER Adapter);
+
+       void    (*read_adapter_info)(PADAPTER Adapter);
+
+       void    (*enable_interrupt)(PADAPTER Adapter);
+       void    (*disable_interrupt)(PADAPTER Adapter);
+       s32     (*interrupt_handler)(PADAPTER Adapter);
+
+       void    (*set_bwmode_handler)(PADAPTER Adapter, HT_CHANNEL_WIDTH Bandwidth, u8 Offset);
+       void    (*set_channel_handler)(PADAPTER Adapter, u8 channel);
+
+       void    (*hal_dm_watchdog)(PADAPTER Adapter);
+
+       void    (*SetHwRegHandler)(PADAPTER Adapter, u8 variable,u8* val);
+       void    (*GetHwRegHandler)(PADAPTER Adapter, u8 variable,u8* val);
+
+       u8      (*GetHalDefVarHandler)(PADAPTER Adapter, HAL_DEF_VARIABLE eVariable, PVOID pValue);
+       u8      (*SetHalDefVarHandler)(PADAPTER Adapter, HAL_DEF_VARIABLE eVariable, PVOID pValue);
+
+       void    (*UpdateRAMaskHandler)(PADAPTER Adapter, u32 mac_id);
+       void    (*SetBeaconRelatedRegistersHandler)(PADAPTER Adapter);
+
+       void    (*Add_RateATid)(PADAPTER Adapter, u32 bitmap, u8 arg);
+
+#ifdef CONFIG_ANTENNA_DIVERSITY
+       u8      (*AntDivBeforeLinkHandler)(PADAPTER Adapter);
+       void    (*AntDivCompareHandler)(PADAPTER Adapter, WLAN_BSSID_EX *dst, WLAN_BSSID_EX *src);
+#endif
+       u8      (*interface_ps_func)(PADAPTER Adapter,HAL_INTF_PS_FUNC efunc_id, u8* val);
+
+       s32     (*hal_xmit)(PADAPTER Adapter, struct xmit_frame *pxmitframe);
+       s32     (*mgnt_xmit)(PADAPTER Adapter, struct xmit_frame *pmgntframe);
+        s32    (*hal_xmitframe_enqueue)(_adapter *padapter, struct xmit_frame *pxmitframe);
+
+       u32     (*read_bbreg)(PADAPTER Adapter, u32 RegAddr, u32 BitMask);
+       void    (*write_bbreg)(PADAPTER Adapter, u32 RegAddr, u32 BitMask, u32 Data);
+       u32     (*read_rfreg)(PADAPTER Adapter, u32 eRFPath, u32 RegAddr, u32 BitMask);
+       void    (*write_rfreg)(PADAPTER Adapter, u32 eRFPath, u32 RegAddr, u32 BitMask, u32 Data);
+
+#ifdef CONFIG_HOSTAPD_MLME
+       s32     (*hostap_mgnt_xmit_entry)(PADAPTER Adapter, _pkt *pkt);
+#endif
+       void (*EfusePowerSwitch)(PADAPTER pAdapter, u8 bWrite, u8 PwrState);
+       void (*ReadEFuse)(PADAPTER Adapter, u8 efuseType, u16 _offset, u16 _size_byte, u8 *pbuf, BOOLEAN bPseudoTest);
+       void (*EFUSEGetEfuseDefinition)(PADAPTER pAdapter, u8 efuseType, u8 type, PVOID *pOut, BOOLEAN bPseudoTest);
+       u16     (*EfuseGetCurrentSize)(PADAPTER pAdapter, u8 efuseType, BOOLEAN bPseudoTest);
+       int     (*Efuse_PgPacketRead)(PADAPTER pAdapter, u8 offset, u8 *data, BOOLEAN bPseudoTest);
+       int     (*Efuse_PgPacketWrite)(PADAPTER pAdapter, u8 offset, u8 word_en, u8 *data, BOOLEAN bPseudoTest);
+       u8      (*Efuse_WordEnableDataWrite)(PADAPTER pAdapter, u16 efuse_addr, u8 word_en, u8 *data, BOOLEAN bPseudoTest);
+
+#ifdef DBG_CONFIG_ERROR_DETECT
+       void (*sreset_init_value)(_adapter *padapter);
+       void (*sreset_reset_value)(_adapter *padapter);
+       void (*silentreset)(_adapter *padapter);
+       void (*sreset_xmit_status_check)(_adapter *padapter);
+       void (*sreset_linked_status_check) (_adapter *padapter);
+       u8 (*sreset_get_wifi_status)(_adapter *padapter);
+       bool (*sreset_inprogress)(_adapter *padapter);
+#endif
+
+#ifdef CONFIG_IOL
+       int (*IOL_exec_cmds_sync)(ADAPTER *adapter, struct xmit_frame *xmit_frame, u32 max_wating_ms);
+#endif
+       void (*hal_notch_filter)(_adapter * adapter, bool enable);
+       void (*hal_reset_security_engine)(_adapter * adapter);
+
+       s32 (*c2h_handler)(_adapter *padapter, struct c2h_evt_hdr *c2h_evt);
+       c2h_id_filter c2h_id_filter_ccx;
+};
+
+typedef        enum _RT_EEPROM_TYPE{
+       EEPROM_93C46,
+       EEPROM_93C56,
+       EEPROM_BOOT_EFUSE,
+}RT_EEPROM_TYPE,*PRT_EEPROM_TYPE;
+
+#define USB_HIGH_SPEED_BULK_SIZE       512
+#define USB_FULL_SPEED_BULK_SIZE       64
+
+#define RF_CHANGE_BY_INIT      0
+#define RF_CHANGE_BY_IPS       BIT28
+#define RF_CHANGE_BY_PS        BIT29
+#define RF_CHANGE_BY_HW        BIT30
+#define RF_CHANGE_BY_SW        BIT31
+
+typedef enum _HARDWARE_TYPE{
+       HARDWARE_TYPE_RTL8180,
+       HARDWARE_TYPE_RTL8185,
+       HARDWARE_TYPE_RTL8187,
+       HARDWARE_TYPE_RTL8188,
+       HARDWARE_TYPE_RTL8190P,
+       HARDWARE_TYPE_RTL8192E,
+       HARDWARE_TYPE_RTL819xU,
+       HARDWARE_TYPE_RTL8192SE,
+       HARDWARE_TYPE_RTL8192SU,
+       HARDWARE_TYPE_RTL8192CE,
+       HARDWARE_TYPE_RTL8192CU,
+       HARDWARE_TYPE_RTL8192DE,
+       HARDWARE_TYPE_RTL8192DU,
+       HARDWARE_TYPE_RTL8723AE,
+       HARDWARE_TYPE_RTL8723AU,
+       HARDWARE_TYPE_RTL8723AS,
+       HARDWARE_TYPE_RTL8188EE,
+       HARDWARE_TYPE_RTL8188EU,
+       HARDWARE_TYPE_RTL8188ES,
+       HARDWARE_TYPE_MAX,
+}HARDWARE_TYPE;
+
+//
+// RTL8192C Series
+//
+#define IS_HARDWARE_TYPE_8192CE(_Adapter)      (((PADAPTER)_Adapter)->HardwareType==HARDWARE_TYPE_RTL8192CE)
+#define IS_HARDWARE_TYPE_8192CU(_Adapter)      (((PADAPTER)_Adapter)->HardwareType==HARDWARE_TYPE_RTL8192CU)
+#define        IS_HARDWARE_TYPE_8192C(_Adapter)                        \
+(IS_HARDWARE_TYPE_8192CE(_Adapter) || IS_HARDWARE_TYPE_8192CU(_Adapter))
+
+//
+// RTL8192D Series
+//
+#define IS_HARDWARE_TYPE_8192DE(_Adapter)      (((PADAPTER)_Adapter)->HardwareType==HARDWARE_TYPE_RTL8192DE)
+#define IS_HARDWARE_TYPE_8192DU(_Adapter)      (((PADAPTER)_Adapter)->HardwareType==HARDWARE_TYPE_RTL8192DU)
+#define        IS_HARDWARE_TYPE_8192D(_Adapter)                        \
+(IS_HARDWARE_TYPE_8192DE(_Adapter) || IS_HARDWARE_TYPE_8192DU(_Adapter))
+
+//
+// RTL8723A Series
+//
+#define IS_HARDWARE_TYPE_8723AE(_Adapter)      (((PADAPTER)_Adapter)->HardwareType==HARDWARE_TYPE_RTL8723AE)
+#define IS_HARDWARE_TYPE_8723AU(_Adapter)      (((PADAPTER)_Adapter)->HardwareType==HARDWARE_TYPE_RTL8723AU)
+#define IS_HARDWARE_TYPE_8723AS(_Adapter)      (((PADAPTER)_Adapter)->HardwareType==HARDWARE_TYPE_RTL8723AS)
+#define        IS_HARDWARE_TYPE_8723A(_Adapter)        \
+(IS_HARDWARE_TYPE_8723AE(_Adapter) || IS_HARDWARE_TYPE_8723AU(_Adapter) || IS_HARDWARE_TYPE_8723AS(_Adapter))
+
+//
+// RTL8188E Series
+//
+#define IS_HARDWARE_TYPE_8188EE(_Adapter)      (((PADAPTER)_Adapter)->HardwareType==HARDWARE_TYPE_RTL8188EE)
+#define IS_HARDWARE_TYPE_8188EU(_Adapter)      (((PADAPTER)_Adapter)->HardwareType==HARDWARE_TYPE_RTL8188EU)
+#define IS_HARDWARE_TYPE_8188ES(_Adapter)      (((PADAPTER)_Adapter)->HardwareType==HARDWARE_TYPE_RTL8188ES)
+#define        IS_HARDWARE_TYPE_8188E(_Adapter)        \
+(IS_HARDWARE_TYPE_8188EE(_Adapter) || IS_HARDWARE_TYPE_8188EU(_Adapter) || IS_HARDWARE_TYPE_8188ES(_Adapter))
+
+
+typedef struct eeprom_priv EEPROM_EFUSE_PRIV, *PEEPROM_EFUSE_PRIV;
+#define GET_EEPROM_EFUSE_PRIV(priv)    (&priv->eeprompriv)
+
+#ifdef CONFIG_WOWLAN
+typedef enum _wowlan_subcode{
+       WOWLAN_PATTERN_MATCH = 1,
+       WOWLAN_MAGIC_PACKET  = 2,
+       WOWLAN_UNICAST       = 3,
+       WOWLAN_SET_PATTERN   = 4,
+       WOWLAN_DUMP_REG      = 5,
+       WOWLAN_ENABLE        = 6,
+       WOWLAN_DISABLE       = 7,
+       WOWLAN_STATUS           = 8,
+       WOWLAN_DEBUG_RELOAD_FW  = 9,
+       WOWLAN_DEBUG_1          =10,
+       WOWLAN_DEBUG_2          =11
+}wowlan_subcode;
+
+struct wowlan_ioctl_param{
+       unsigned int subcode;
+       unsigned int subcode_value;
+       unsigned int wakeup_reason;
+       unsigned int len;
+       unsigned char pattern[0];
+};
+
+#define Rx_Pairwisekey                 BIT(0)
+#define Rx_GTK                                 BIT(1)
+#define Rx_DisAssoc                            BIT(2)
+#define Rx_DeAuth                              BIT(3)
+#define FWDecisionDisconnect   BIT(4)
+#define Rx_MagicPkt                            BIT(5)
+#define FinishBtFwPatch                        BIT(7)
+
+#endif // CONFIG_WOWLAN
+
+void rtw_hal_def_value_init(_adapter *padapter);
+void rtw_hal_free_data(_adapter *padapter);
+
+void rtw_hal_dm_init(_adapter *padapter);
+void rtw_hal_dm_deinit(_adapter *padapter);
+void rtw_hal_sw_led_init(_adapter *padapter);
+void rtw_hal_sw_led_deinit(_adapter *padapter);
+
+uint rtw_hal_init(_adapter *padapter);
+uint rtw_hal_deinit(_adapter *padapter);
+void rtw_hal_stop(_adapter *padapter);
+
+void rtw_hal_set_hwreg(PADAPTER padapter, u8 variable, u8 *val);
+void rtw_hal_get_hwreg(PADAPTER padapter, u8 variable, u8 *val);
+
+void rtw_hal_chip_configure(_adapter *padapter);
+void rtw_hal_read_chip_info(_adapter *padapter);
+void rtw_hal_read_chip_version(_adapter *padapter);
+
+u8 rtw_hal_set_def_var(_adapter *padapter, HAL_DEF_VARIABLE eVariable, PVOID pValue);
+u8 rtw_hal_get_def_var(_adapter *padapter, HAL_DEF_VARIABLE eVariable, PVOID pValue);
+
+void rtw_hal_enable_interrupt(_adapter *padapter);
+void rtw_hal_disable_interrupt(_adapter *padapter);
+
+u32 rtw_hal_inirp_init(_adapter *padapter);
+u32 rtw_hal_inirp_deinit(_adapter *padapter);
+
+u8 rtw_hal_intf_ps_func(_adapter *padapter,HAL_INTF_PS_FUNC efunc_id, u8* val);
+
+s32    rtw_hal_xmitframe_enqueue(_adapter *padapter, struct xmit_frame *pxmitframe);
+s32 rtw_hal_xmit(_adapter *padapter, struct xmit_frame *pxmitframe);
+s32 rtw_hal_mgnt_xmit(_adapter *padapter, struct xmit_frame *pmgntframe);
+
+s32 rtw_hal_init_xmit_priv(_adapter *padapter);
+void rtw_hal_free_xmit_priv(_adapter *padapter);
+
+s32 rtw_hal_init_recv_priv(_adapter *padapter);
+void rtw_hal_free_recv_priv(_adapter *padapter);
+
+void rtw_hal_update_ra_mask(_adapter *padapter, u32 mac_id);
+void rtw_hal_add_ra_tid(_adapter *padapter, u32 bitmap, u8 arg);
+
+void rtw_hal_bcn_related_reg_setting(_adapter *padapter);
+
+u32 rtw_hal_read_bbreg(_adapter *padapter, u32 RegAddr, u32 BitMask);
+void rtw_hal_write_bbreg(_adapter *padapter, u32 RegAddr, u32 BitMask, u32 Data);
+u32 rtw_hal_read_rfreg(_adapter *padapter, u32 eRFPath, u32 RegAddr, u32 BitMask);
+void rtw_hal_write_rfreg(_adapter *padapter, u32 eRFPath, u32 RegAddr, u32 BitMask, u32 Data);
+
+s32 rtw_hal_interrupt_handler(_adapter *padapter);
+
+void rtw_hal_set_bwmode(_adapter *padapter, HT_CHANNEL_WIDTH Bandwidth, u8 Offset);
+void rtw_hal_set_chan(_adapter *padapter, u8 channel);
+
+void rtw_hal_dm_watchdog(_adapter *padapter);
+
+#ifdef CONFIG_ANTENNA_DIVERSITY
+u8 rtw_hal_antdiv_before_linked(_adapter *padapter);
+void rtw_hal_antdiv_rssi_compared(_adapter *padapter, WLAN_BSSID_EX *dst, WLAN_BSSID_EX *src);
+#endif
+
+#ifdef CONFIG_HOSTAPD_MLME
+s32 rtw_hal_hostap_mgnt_xmit_entry(_adapter *padapter, _pkt *pkt);
+#endif
+
+#ifdef DBG_CONFIG_ERROR_DETECT
+void rtw_hal_sreset_init(_adapter *padapter);
+void rtw_hal_sreset_reset(_adapter *padapter);
+void rtw_hal_sreset_reset_value(_adapter *padapter);
+void rtw_hal_sreset_xmit_status_check(_adapter *padapter);
+void rtw_hal_sreset_linked_status_check(_adapter *padapter);
+u8 rtw_hal_sreset_get_wifi_status(_adapter *padapter);
+bool rtw_hal_sreset_inprogress(_adapter *padapter);
+#endif
+
+#ifdef CONFIG_IOL
+int rtw_hal_iol_cmd(ADAPTER *adapter, struct xmit_frame *xmit_frame, u32 max_wating_ms);
+#endif
+
+void rtw_hal_notch_filter(_adapter * adapter, bool enable);
+void rtw_hal_reset_security_engine(_adapter * adapter);
+
+s32 rtw_hal_c2h_handler(_adapter *adapter, struct c2h_evt_hdr *c2h_evt);
+c2h_id_filter rtw_hal_c2h_id_filter_ccx(_adapter *adapter);
+
+#endif //__HAL_INTF_H__
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/ieee80211.h b/drivers/net/wireless/realtek/rtl8192cu/include/ieee80211.h
new file mode 100644 (file)
index 0000000..b3735bd
--- /dev/null
@@ -0,0 +1,1579 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __IEEE80211_H
+#define __IEEE80211_H
+
+
+#ifndef CONFIG_RTL8711FW
+
+       #include <drv_conf.h>
+       #include <osdep_service.h>
+       #include <drv_types.h>
+       #include "wifi.h"
+
+       #if defined PLATFORM_OS_XP
+       #include <ntstrsafe.h>
+       #endif
+       #if defined PLATFORM_LINUX
+       #include <linux/wireless.h>
+       #endif
+#else
+
+       #include <list.h>
+
+#endif
+
+#define MGMT_QUEUE_NUM 5
+
+#define ETH_ALEN       6
+#define ETH_TYPE_LEN           2
+#define PAYLOAD_TYPE_LEN       1
+
+#ifdef CONFIG_AP_MODE
+
+#define RTL_IOCTL_HOSTAPD (SIOCIWFIRSTPRIV + 28)
+
+/* RTL871X_IOCTL_HOSTAPD ioctl() cmd: */
+enum {
+       RTL871X_HOSTAPD_FLUSH = 1,
+       RTL871X_HOSTAPD_ADD_STA = 2,
+       RTL871X_HOSTAPD_REMOVE_STA = 3,
+       RTL871X_HOSTAPD_GET_INFO_STA = 4,
+       /* REMOVED: PRISM2_HOSTAPD_RESET_TXEXC_STA = 5, */
+       RTL871X_HOSTAPD_GET_WPAIE_STA = 5,
+       RTL871X_SET_ENCRYPTION = 6,
+       RTL871X_GET_ENCRYPTION = 7,
+       RTL871X_HOSTAPD_SET_FLAGS_STA = 8,
+       RTL871X_HOSTAPD_GET_RID = 9,
+       RTL871X_HOSTAPD_SET_RID = 10,
+       RTL871X_HOSTAPD_SET_ASSOC_AP_ADDR = 11,
+       RTL871X_HOSTAPD_SET_GENERIC_ELEMENT = 12,
+       RTL871X_HOSTAPD_MLME = 13,
+       RTL871X_HOSTAPD_SCAN_REQ = 14,
+       RTL871X_HOSTAPD_STA_CLEAR_STATS = 15,
+       RTL871X_HOSTAPD_SET_BEACON=16,
+       RTL871X_HOSTAPD_SET_WPS_BEACON = 17,
+       RTL871X_HOSTAPD_SET_WPS_PROBE_RESP = 18,
+       RTL871X_HOSTAPD_SET_WPS_ASSOC_RESP = 19,
+       RTL871X_HOSTAPD_SET_HIDDEN_SSID = 20,
+       RTL871X_HOSTAPD_SET_MACADDR_ACL = 21,
+       RTL871X_HOSTAPD_ACL_ADD_STA = 22,
+       RTL871X_HOSTAPD_ACL_REMOVE_STA = 23,
+};
+
+/* STA flags */
+#define WLAN_STA_AUTH BIT(0)
+#define WLAN_STA_ASSOC BIT(1)
+#define WLAN_STA_PS BIT(2)
+#define WLAN_STA_TIM BIT(3)
+#define WLAN_STA_PERM BIT(4)
+#define WLAN_STA_AUTHORIZED BIT(5)
+#define WLAN_STA_PENDING_POLL BIT(6) /* pending activity poll not ACKed */
+#define WLAN_STA_SHORT_PREAMBLE BIT(7)
+#define WLAN_STA_PREAUTH BIT(8)
+#define WLAN_STA_WME BIT(9)
+#define WLAN_STA_MFP BIT(10)
+#define WLAN_STA_HT BIT(11)
+#define WLAN_STA_WPS BIT(12)
+#define WLAN_STA_MAYBE_WPS BIT(13)
+#define WLAN_STA_NONERP BIT(31)
+
+#endif
+
+#define IEEE_CMD_SET_WPA_PARAM                 1
+#define IEEE_CMD_SET_WPA_IE                            2
+#define IEEE_CMD_SET_ENCRYPTION                        3
+#define IEEE_CMD_MLME                                          4
+
+#define IEEE_PARAM_WPA_ENABLED                         1
+#define IEEE_PARAM_TKIP_COUNTERMEASURES                2
+#define IEEE_PARAM_DROP_UNENCRYPTED                    3
+#define IEEE_PARAM_PRIVACY_INVOKED                     4
+#define IEEE_PARAM_AUTH_ALGS                                   5
+#define IEEE_PARAM_IEEE_802_1X                         6
+#define IEEE_PARAM_WPAX_SELECT                         7
+
+#define AUTH_ALG_OPEN_SYSTEM                   0x1
+#define AUTH_ALG_SHARED_KEY                    0x2
+#define AUTH_ALG_LEAP                          0x00000004
+
+#define IEEE_MLME_STA_DEAUTH                           1
+#define IEEE_MLME_STA_DISASSOC                 2
+
+#define IEEE_CRYPT_ERR_UNKNOWN_ALG                     2
+#define IEEE_CRYPT_ERR_UNKNOWN_ADDR                    3
+#define IEEE_CRYPT_ERR_CRYPT_INIT_FAILED               4
+#define IEEE_CRYPT_ERR_KEY_SET_FAILED                  5
+#define IEEE_CRYPT_ERR_TX_KEY_SET_FAILED               6
+#define IEEE_CRYPT_ERR_CARD_CONF_FAILED                7
+
+
+#define        IEEE_CRYPT_ALG_NAME_LEN                 16
+
+#define WPA_CIPHER_NONE        BIT(0)
+#define WPA_CIPHER_WEP40       BIT(1)
+#define WPA_CIPHER_WEP104 BIT(2)
+#define WPA_CIPHER_TKIP        BIT(3)
+#define WPA_CIPHER_CCMP        BIT(4)
+
+
+
+#define WPA_SELECTOR_LEN 4
+extern u8 RTW_WPA_OUI_TYPE[] ;
+extern u16 RTW_WPA_VERSION ;
+extern u8 WPA_AUTH_KEY_MGMT_NONE[];
+extern u8 WPA_AUTH_KEY_MGMT_UNSPEC_802_1X[];
+extern u8 WPA_AUTH_KEY_MGMT_PSK_OVER_802_1X[];
+extern u8 WPA_CIPHER_SUITE_NONE[];
+extern u8 WPA_CIPHER_SUITE_WEP40[];
+extern u8 WPA_CIPHER_SUITE_TKIP[];
+extern u8 WPA_CIPHER_SUITE_WRAP[];
+extern u8 WPA_CIPHER_SUITE_CCMP[];
+extern u8 WPA_CIPHER_SUITE_WEP104[];
+
+
+#define RSN_HEADER_LEN 4
+#define RSN_SELECTOR_LEN 4
+
+extern u16 RSN_VERSION_BSD;
+extern u8 RSN_AUTH_KEY_MGMT_UNSPEC_802_1X[];
+extern u8 RSN_AUTH_KEY_MGMT_PSK_OVER_802_1X[];
+extern u8 RSN_CIPHER_SUITE_NONE[];
+extern u8 RSN_CIPHER_SUITE_WEP40[];
+extern u8 RSN_CIPHER_SUITE_TKIP[];
+extern u8 RSN_CIPHER_SUITE_WRAP[];
+extern u8 RSN_CIPHER_SUITE_CCMP[];
+extern u8 RSN_CIPHER_SUITE_WEP104[];
+
+typedef enum _RATR_TABLE_MODE{
+       RATR_INX_WIRELESS_NGB = 0,      // BGN 40 Mhz 2SS 1SS
+       RATR_INX_WIRELESS_NG = 1,               // GN or N
+       RATR_INX_WIRELESS_NB = 2,               // BGN 20 Mhz 2SS 1SS  or BN
+       RATR_INX_WIRELESS_N = 3,
+       RATR_INX_WIRELESS_GB = 4,
+       RATR_INX_WIRELESS_G = 5,
+       RATR_INX_WIRELESS_B = 6,
+       RATR_INX_WIRELESS_MC = 7,
+       RATR_INX_WIRELESS_AC_N = 8,
+}RATR_TABLE_MODE, *PRATR_TABLE_MODE;
+
+enum NETWORK_TYPE
+{
+    WIRELESS_INVALID = 0,
+    //Sub-Element
+    WIRELESS_11B = BIT(0), // tx: cck only , rx: cck only, hw: cck
+    WIRELESS_11G = BIT(1), // tx: ofdm only, rx: ofdm & cck, hw: cck & ofdm
+    WIRELESS_11A = BIT(2), // tx: ofdm only, rx: ofdm only, hw: ofdm only
+    WIRELESS_11_24N = BIT(3), // tx: MCS only, rx: MCS & cck, hw: MCS & cck
+    WIRELESS_11_5N = BIT(4), // tx: MCS only, rx: MCS & ofdm, hw: ofdm only
+       //WIRELESS_AUTO         = BIT(5),
+       WIRELESS_AC             = BIT(6),
+
+    //Combination
+    WIRELESS_11BG = (WIRELESS_11B|WIRELESS_11G), // tx: cck & ofdm, rx: cck & ofdm & MCS, hw: cck & ofdm
+    WIRELESS_11G_24N = (WIRELESS_11G|WIRELESS_11_24N), // tx: ofdm & MCS, rx: ofdm & cck & MCS, hw: cck & ofdm
+    WIRELESS_11A_5N = (WIRELESS_11A|WIRELESS_11_5N), // tx: ofdm & MCS, rx: ofdm & MCS, hw: ofdm only
+    WIRELESS_11BG_24N = (WIRELESS_11B|WIRELESS_11G|WIRELESS_11_24N), // tx: ofdm & cck & MCS, rx: ofdm & cck & MCS, hw: ofdm & cck
+    WIRELESS_11AGN = (WIRELESS_11A|WIRELESS_11G|WIRELESS_11_24N|WIRELESS_11_5N), // tx: ofdm & MCS, rx: ofdm & MCS, hw: ofdm only
+    WIRELESS_11ABGN = (WIRELESS_11A|WIRELESS_11B|WIRELESS_11G|WIRELESS_11_24N|WIRELESS_11_5N),
+};
+
+#define SUPPORTED_24G_NETTYPE_MSK (WIRELESS_11B | WIRELESS_11G | WIRELESS_11_24N)
+#define SUPPORTED_5G_NETTYPE_MSK (WIRELESS_11A | WIRELESS_11_5N)
+
+#define IsSupported24G(NetType) ((NetType) & SUPPORTED_24G_NETTYPE_MSK ? _TRUE : _FALSE)
+#define IsSupported5G(NetType) ((NetType) & SUPPORTED_5G_NETTYPE_MSK ? _TRUE : _FALSE)
+
+#define IsEnableHWCCK(NetType) IsSupported24G(NetType)
+#define IsEnableHWOFDM(NetType) ((NetType) & (WIRELESS_11G|WIRELESS_11_24N|SUPPORTED_5G_NETTYPE_MSK) ? _TRUE : _FALSE)
+
+#define IsSupportedRxCCK(NetType) IsEnableHWCCK(NetType)
+#define IsSupportedRxOFDM(NetType) IsEnableHWOFDM(NetType)
+#define IsSupportedRxMCS(NetType) IsEnableHWOFDM(NetType)
+
+#define IsSupportedTxCCK(NetType) ((NetType) & (WIRELESS_11B) ? _TRUE : _FALSE)
+#define IsSupportedTxOFDM(NetType) ((NetType) & (WIRELESS_11G|WIRELESS_11A) ? _TRUE : _FALSE)
+#define IsSupportedTxMCS(NetType) ((NetType) & (WIRELESS_11_24N|WIRELESS_11_5N) ? _TRUE : _FALSE)
+
+
+typedef struct ieee_param {
+       u32 cmd;
+       u8 sta_addr[ETH_ALEN];
+       union {
+               struct {
+                       u8 name;
+                       u32 value;
+               } wpa_param;
+               struct {
+                       u32 len;
+                       u8 reserved[32];
+                       u8 data[0];
+               } wpa_ie;
+               struct{
+                       int command;
+                       int reason_code;
+               } mlme;
+               struct {
+                       u8 alg[IEEE_CRYPT_ALG_NAME_LEN];
+                       u8 set_tx;
+                       u32 err;
+                       u8 idx;
+                       u8 seq[8]; /* sequence counter (set: RX, get: TX) */
+                       u16 key_len;
+                       u8 key[0];
+               } crypt;
+#ifdef CONFIG_AP_MODE
+               struct {
+                       u16 aid;
+                       u16 capability;
+                       int flags;
+                       u8 tx_supp_rates[16];
+                       struct rtw_ieee80211_ht_cap ht_cap;
+               } add_sta;
+               struct {
+                       u8      reserved[2];//for set max_num_sta
+                       u8      buf[0];
+               } bcn_ie;
+#endif
+
+       } u;
+}ieee_param;
+
+#ifdef CONFIG_AP_MODE
+typedef struct ieee_param_ex {
+       u32 cmd;
+       u8 sta_addr[ETH_ALEN];
+       u8 data[0];
+}ieee_param_ex;
+
+struct sta_data{
+       u16 aid;
+       u16 capability;
+       int flags;
+       u32 sta_set;
+       u8 tx_supp_rates[16];
+       u32 tx_supp_rates_len;
+       struct rtw_ieee80211_ht_cap ht_cap;
+       u64     rx_pkts;
+       u64     rx_bytes;
+       u64     rx_drops;
+       u64     tx_pkts;
+       u64     tx_bytes;
+       u64     tx_drops;
+};
+#endif
+
+
+#if WIRELESS_EXT < 17
+#define IW_QUAL_QUAL_INVALID   0x10
+#define IW_QUAL_LEVEL_INVALID  0x20
+#define IW_QUAL_NOISE_INVALID  0x40
+#define IW_QUAL_QUAL_UPDATED   0x1
+#define IW_QUAL_LEVEL_UPDATED  0x2
+#define IW_QUAL_NOISE_UPDATED  0x4
+#endif
+
+#define IEEE80211_DATA_LEN             2304
+/* Maximum size for the MA-UNITDATA primitive, 802.11 standard section
+   6.2.1.1.2.
+
+   The figure in section 7.1.2 suggests a body size of up to 2312
+   bytes is allowed, which is a bit confusing, I suspect this
+   represents the 2304 bytes of real data, plus a possible 8 bytes of
+   WEP IV and ICV. (this interpretation suggested by Ramiro Barreiro) */
+
+
+#define IEEE80211_HLEN                 30
+#define IEEE80211_FRAME_LEN            (IEEE80211_DATA_LEN + IEEE80211_HLEN)
+
+
+/* this is stolen from ipw2200 driver */
+#define IEEE_IBSS_MAC_HASH_SIZE 31
+
+struct ieee_ibss_seq {
+       u8 mac[ETH_ALEN];
+       u16 seq_num;
+       u16 frag_num;
+       unsigned long packet_time;
+       _list   list;
+};
+
+#if defined(PLATFORM_LINUX) || defined(CONFIG_RTL8711FW)||defined(PLATFORM_FREEBSD)
+
+struct rtw_ieee80211_hdr {
+       u16 frame_ctl;
+       u16 duration_id;
+       u8 addr1[ETH_ALEN];
+       u8 addr2[ETH_ALEN];
+       u8 addr3[ETH_ALEN];
+       u16 seq_ctl;
+       u8 addr4[ETH_ALEN];
+} __attribute__ ((packed));
+
+struct rtw_ieee80211_hdr_3addr {
+       u16 frame_ctl;
+       u16 duration_id;
+       u8 addr1[ETH_ALEN];
+       u8 addr2[ETH_ALEN];
+       u8 addr3[ETH_ALEN];
+       u16 seq_ctl;
+} __attribute__ ((packed));
+
+
+struct rtw_ieee80211_hdr_qos {
+       u16 frame_ctl;
+       u16 duration_id;
+       u8 addr1[ETH_ALEN];
+       u8 addr2[ETH_ALEN];
+       u8 addr3[ETH_ALEN];
+       u16 seq_ctl;
+       u8 addr4[ETH_ALEN];
+       u16     qc;
+}  __attribute__ ((packed));
+
+struct rtw_ieee80211_hdr_3addr_qos {
+        u16 frame_ctl;
+       u16 duration_id;
+       u8 addr1[ETH_ALEN];
+       u8 addr2[ETH_ALEN];
+       u8 addr3[ETH_ALEN];
+       u16 seq_ctl;
+       u16     qc;
+}  __attribute__ ((packed));
+
+struct eapol {
+       u8 snap[6];
+       u16 ethertype;
+       u8 version;
+       u8 type;
+       u16 length;
+} __attribute__ ((packed));
+
+#endif
+
+
+
+#ifdef PLATFORM_WINDOWS
+
+#pragma pack(1)
+struct rtw_ieee80211_hdr {
+       u16 frame_ctl;
+       u16 duration_id;
+       u8 addr1[ETH_ALEN];
+       u8 addr2[ETH_ALEN];
+       u8 addr3[ETH_ALEN];
+       u16 seq_ctl;
+       u8 addr4[ETH_ALEN];
+};
+
+struct rtw_ieee80211_hdr_3addr {
+       u16 frame_ctl;
+       u16 duration_id;
+       u8 addr1[ETH_ALEN];
+       u8 addr2[ETH_ALEN];
+       u8 addr3[ETH_ALEN];
+       u16 seq_ctl;
+};
+
+
+struct rtw_ieee80211_hdr_qos {
+       struct rtw_ieee80211_hdr wlan_hdr;
+       u16     qc;
+};
+
+struct rtw_ieee80211_hdr_3addr_qos {
+        struct  rtw_ieee80211_hdr_3addr wlan_hdr;
+        u16     qc;
+};
+
+struct eapol {
+       u8 snap[6];
+       u16 ethertype;
+       u8 version;
+       u8 type;
+       u16 length;
+};
+#pragma pack()
+
+#endif
+
+
+
+enum eap_type {
+       EAP_PACKET = 0,
+       EAPOL_START,
+       EAPOL_LOGOFF,
+       EAPOL_KEY,
+       EAPOL_ENCAP_ASF_ALERT
+};
+
+#define IEEE80211_3ADDR_LEN 24
+#define IEEE80211_4ADDR_LEN 30
+#define IEEE80211_FCS_LEN    4
+
+#define MIN_FRAG_THRESHOLD     256U
+#define        MAX_FRAG_THRESHOLD     2346U
+
+/* Frame control field constants */
+#define RTW_IEEE80211_FCTL_VERS                0x0003
+#define RTW_IEEE80211_FCTL_FTYPE               0x000c
+#define RTW_IEEE80211_FCTL_STYPE               0x00f0
+#define RTW_IEEE80211_FCTL_TODS                0x0100
+#define RTW_IEEE80211_FCTL_FROMDS      0x0200
+#define RTW_IEEE80211_FCTL_MOREFRAGS   0x0400
+#define RTW_IEEE80211_FCTL_RETRY               0x0800
+#define RTW_IEEE80211_FCTL_PM          0x1000
+#define RTW_IEEE80211_FCTL_MOREDATA    0x2000
+#define RTW_IEEE80211_FCTL_PROTECTED   0x4000
+#define RTW_IEEE80211_FCTL_ORDER               0x8000
+#define RTW_IEEE80211_FCTL_CTL_EXT     0x0f00
+
+#define RTW_IEEE80211_FTYPE_MGMT               0x0000
+#define RTW_IEEE80211_FTYPE_CTL                0x0004
+#define RTW_IEEE80211_FTYPE_DATA               0x0008
+#define RTW_IEEE80211_FTYPE_EXT                0x000c
+
+/* management */
+#define RTW_IEEE80211_STYPE_ASSOC_REQ  0x0000
+#define RTW_IEEE80211_STYPE_ASSOC_RESP         0x0010
+#define RTW_IEEE80211_STYPE_REASSOC_REQ        0x0020
+#define RTW_IEEE80211_STYPE_REASSOC_RESP       0x0030
+#define RTW_IEEE80211_STYPE_PROBE_REQ  0x0040
+#define RTW_IEEE80211_STYPE_PROBE_RESP 0x0050
+#define RTW_IEEE80211_STYPE_BEACON             0x0080
+#define RTW_IEEE80211_STYPE_ATIM               0x0090
+#define RTW_IEEE80211_STYPE_DISASSOC   0x00A0
+#define RTW_IEEE80211_STYPE_AUTH               0x00B0
+#define RTW_IEEE80211_STYPE_DEAUTH             0x00C0
+#define RTW_IEEE80211_STYPE_ACTION             0x00D0
+
+/* control */
+#define RTW_IEEE80211_STYPE_CTL_EXT            0x0060
+#define RTW_IEEE80211_STYPE_BACK_REQ           0x0080
+#define RTW_IEEE80211_STYPE_BACK               0x0090
+#define RTW_IEEE80211_STYPE_PSPOLL             0x00A0
+#define RTW_IEEE80211_STYPE_RTS                0x00B0
+#define RTW_IEEE80211_STYPE_CTS                0x00C0
+#define RTW_IEEE80211_STYPE_ACK                0x00D0
+#define RTW_IEEE80211_STYPE_CFEND              0x00E0
+#define RTW_IEEE80211_STYPE_CFENDACK           0x00F0
+
+/* data */
+#define RTW_IEEE80211_STYPE_DATA               0x0000
+#define RTW_IEEE80211_STYPE_DATA_CFACK 0x0010
+#define RTW_IEEE80211_STYPE_DATA_CFPOLL        0x0020
+#define RTW_IEEE80211_STYPE_DATA_CFACKPOLL     0x0030
+#define RTW_IEEE80211_STYPE_NULLFUNC   0x0040
+#define RTW_IEEE80211_STYPE_CFACK              0x0050
+#define RTW_IEEE80211_STYPE_CFPOLL             0x0060
+#define RTW_IEEE80211_STYPE_CFACKPOLL  0x0070
+#define RTW_IEEE80211_STYPE_QOS_DATA           0x0080
+#define RTW_IEEE80211_STYPE_QOS_DATA_CFACK             0x0090
+#define RTW_IEEE80211_STYPE_QOS_DATA_CFPOLL            0x00A0
+#define RTW_IEEE80211_STYPE_QOS_DATA_CFACKPOLL 0x00B0
+#define RTW_IEEE80211_STYPE_QOS_NULLFUNC       0x00C0
+#define RTW_IEEE80211_STYPE_QOS_CFACK          0x00D0
+#define RTW_IEEE80211_STYPE_QOS_CFPOLL         0x00E0
+#define RTW_IEEE80211_STYPE_QOS_CFACKPOLL      0x00F0
+
+/* sequence control field */
+#define RTW_IEEE80211_SCTL_FRAG        0x000F
+#define RTW_IEEE80211_SCTL_SEQ 0xFFF0
+
+
+#define RTW_ERP_INFO_NON_ERP_PRESENT BIT(0)
+#define RTW_ERP_INFO_USE_PROTECTION BIT(1)
+#define RTW_ERP_INFO_BARKER_PREAMBLE_MODE BIT(2)
+
+/* QoS,QOS */
+#define NORMAL_ACK                     0
+#define NO_ACK                         1
+#define NON_EXPLICIT_ACK       2
+#define BLOCK_ACK                      3
+
+#ifndef ETH_P_PAE
+#define ETH_P_PAE 0x888E /* Port Access Entity (IEEE 802.1X) */
+#endif /* ETH_P_PAE */
+
+#define ETH_P_PREAUTH 0x88C7 /* IEEE 802.11i pre-authentication */
+
+#define ETH_P_ECONET   0x0018
+
+#ifndef ETH_P_80211_RAW
+#define ETH_P_80211_RAW (ETH_P_ECONET + 1)
+#endif
+
+/* IEEE 802.11 defines */
+
+#define P80211_OUI_LEN 3
+
+#if defined(PLATFORM_LINUX) || defined(CONFIG_RTL8711FW) || defined(PLATFORM_FREEBSD)
+
+struct ieee80211_snap_hdr {
+
+        u8    dsap;   /* always 0xAA */
+        u8    ssap;   /* always 0xAA */
+        u8    ctrl;   /* always 0x03 */
+        u8    oui[P80211_OUI_LEN];    /* organizational universal id */
+
+} __attribute__ ((packed));
+
+#endif
+
+#ifdef PLATFORM_WINDOWS
+
+#pragma pack(1)
+struct ieee80211_snap_hdr {
+
+        u8    dsap;   /* always 0xAA */
+        u8    ssap;   /* always 0xAA */
+        u8    ctrl;   /* always 0x03 */
+        u8    oui[P80211_OUI_LEN];    /* organizational universal id */
+
+};
+#pragma pack()
+
+#endif
+
+
+#define SNAP_SIZE sizeof(struct ieee80211_snap_hdr)
+
+#define WLAN_FC_GET_TYPE(fc) ((fc) & RTW_IEEE80211_FCTL_FTYPE)
+#define WLAN_FC_GET_STYPE(fc) ((fc) & RTW_IEEE80211_FCTL_STYPE)
+
+#define WLAN_QC_GET_TID(qc) ((qc) & 0x0f)
+
+#define WLAN_GET_SEQ_FRAG(seq) ((seq) & RTW_IEEE80211_SCTL_FRAG)
+#define WLAN_GET_SEQ_SEQ(seq)  ((seq) & RTW_IEEE80211_SCTL_SEQ)
+
+/* Authentication algorithms */
+#define WLAN_AUTH_OPEN 0
+#define WLAN_AUTH_SHARED_KEY 1
+
+#define WLAN_AUTH_CHALLENGE_LEN 128
+
+#define WLAN_CAPABILITY_BSS (1<<0)
+#define WLAN_CAPABILITY_IBSS (1<<1)
+#define WLAN_CAPABILITY_CF_POLLABLE (1<<2)
+#define WLAN_CAPABILITY_CF_POLL_REQUEST (1<<3)
+#define WLAN_CAPABILITY_PRIVACY (1<<4)
+#define WLAN_CAPABILITY_SHORT_PREAMBLE (1<<5)
+#define WLAN_CAPABILITY_PBCC (1<<6)
+#define WLAN_CAPABILITY_CHANNEL_AGILITY (1<<7)
+#define WLAN_CAPABILITY_SHORT_SLOT (1<<10)
+
+/* Status codes */
+#define WLAN_STATUS_SUCCESS 0
+#define WLAN_STATUS_UNSPECIFIED_FAILURE 1
+#define WLAN_STATUS_CAPS_UNSUPPORTED 10
+#define WLAN_STATUS_REASSOC_NO_ASSOC 11
+#define WLAN_STATUS_ASSOC_DENIED_UNSPEC 12
+#define WLAN_STATUS_NOT_SUPPORTED_AUTH_ALG 13
+#define WLAN_STATUS_UNKNOWN_AUTH_TRANSACTION 14
+#define WLAN_STATUS_CHALLENGE_FAIL 15
+#define WLAN_STATUS_AUTH_TIMEOUT 16
+#define WLAN_STATUS_AP_UNABLE_TO_HANDLE_NEW_STA 17
+#define WLAN_STATUS_ASSOC_DENIED_RATES 18
+/* 802.11b */
+#define WLAN_STATUS_ASSOC_DENIED_NOSHORT 19
+#define WLAN_STATUS_ASSOC_DENIED_NOPBCC 20
+#define WLAN_STATUS_ASSOC_DENIED_NOAGILITY 21
+
+/* Reason codes */
+#define WLAN_REASON_UNSPECIFIED 1
+#define WLAN_REASON_PREV_AUTH_NOT_VALID 2
+#define WLAN_REASON_DEAUTH_LEAVING 3
+#define WLAN_REASON_DISASSOC_DUE_TO_INACTIVITY 4
+#define WLAN_REASON_DISASSOC_AP_BUSY 5
+#define WLAN_REASON_CLASS2_FRAME_FROM_NONAUTH_STA 6
+#define WLAN_REASON_CLASS3_FRAME_FROM_NONASSOC_STA 7
+#define WLAN_REASON_DISASSOC_STA_HAS_LEFT 8
+#define WLAN_REASON_STA_REQ_ASSOC_WITHOUT_AUTH 9
+#define WLAN_REASON_JOIN_WRONG_CHANNEL       65534
+#define WLAN_REASON_EXPIRATION_CHK 65535
+
+/* Information Element IDs */
+#define WLAN_EID_SSID 0
+#define WLAN_EID_SUPP_RATES 1
+#define WLAN_EID_FH_PARAMS 2
+#define WLAN_EID_DS_PARAMS 3
+#define WLAN_EID_CF_PARAMS 4
+#define WLAN_EID_TIM 5
+#define WLAN_EID_IBSS_PARAMS 6
+#define WLAN_EID_CHALLENGE 16
+/* EIDs defined by IEEE 802.11h - START */
+#define WLAN_EID_PWR_CONSTRAINT 32
+#define WLAN_EID_PWR_CAPABILITY 33
+#define WLAN_EID_TPC_REQUEST 34
+#define WLAN_EID_TPC_REPORT 35
+#define WLAN_EID_SUPPORTED_CHANNELS 36
+#define WLAN_EID_CHANNEL_SWITCH 37
+#define WLAN_EID_MEASURE_REQUEST 38
+#define WLAN_EID_MEASURE_REPORT 39
+#define WLAN_EID_QUITE 40
+#define WLAN_EID_IBSS_DFS 41
+/* EIDs defined by IEEE 802.11h - END */
+#define WLAN_EID_ERP_INFO 42
+#define WLAN_EID_HT_CAP 45
+#define WLAN_EID_RSN 48
+#define WLAN_EID_EXT_SUPP_RATES 50
+#define WLAN_EID_MOBILITY_DOMAIN 54
+#define WLAN_EID_FAST_BSS_TRANSITION 55
+#define WLAN_EID_TIMEOUT_INTERVAL 56
+#define WLAN_EID_RIC_DATA 57
+#define WLAN_EID_HT_OPERATION 61
+#define WLAN_EID_SECONDARY_CHANNEL_OFFSET 62
+#define WLAN_EID_20_40_BSS_COEXISTENCE 72
+#define WLAN_EID_20_40_BSS_INTOLERANT 73
+#define WLAN_EID_OVERLAPPING_BSS_SCAN_PARAMS 74
+#define WLAN_EID_MMIE 76
+#define WLAN_EID_VENDOR_SPECIFIC 221
+#define WLAN_EID_GENERIC (WLAN_EID_VENDOR_SPECIFIC)
+
+#define IEEE80211_MGMT_HDR_LEN 24
+#define IEEE80211_DATA_HDR3_LEN 24
+#define IEEE80211_DATA_HDR4_LEN 30
+
+
+#define IEEE80211_STATMASK_SIGNAL (1<<0)
+#define IEEE80211_STATMASK_RSSI (1<<1)
+#define IEEE80211_STATMASK_NOISE (1<<2)
+#define IEEE80211_STATMASK_RATE (1<<3)
+#define IEEE80211_STATMASK_WEMASK 0x7
+
+
+#define IEEE80211_CCK_MODULATION    (1<<0)
+#define IEEE80211_OFDM_MODULATION   (1<<1)
+
+#define IEEE80211_24GHZ_BAND     (1<<0)
+#define IEEE80211_52GHZ_BAND     (1<<1)
+
+#define IEEE80211_CCK_RATE_LEN                 4
+#define IEEE80211_NUM_OFDM_RATESLEN    8
+
+
+#define IEEE80211_CCK_RATE_1MB                 0x02
+#define IEEE80211_CCK_RATE_2MB                 0x04
+#define IEEE80211_CCK_RATE_5MB                 0x0B
+#define IEEE80211_CCK_RATE_11MB                        0x16
+#define IEEE80211_OFDM_RATE_LEN                8
+#define IEEE80211_OFDM_RATE_6MB                        0x0C
+#define IEEE80211_OFDM_RATE_9MB                        0x12
+#define IEEE80211_OFDM_RATE_12MB               0x18
+#define IEEE80211_OFDM_RATE_18MB               0x24
+#define IEEE80211_OFDM_RATE_24MB               0x30
+#define IEEE80211_OFDM_RATE_36MB               0x48
+#define IEEE80211_OFDM_RATE_48MB               0x60
+#define IEEE80211_OFDM_RATE_54MB               0x6C
+#define IEEE80211_BASIC_RATE_MASK              0x80
+
+#define IEEE80211_CCK_RATE_1MB_MASK            (1<<0)
+#define IEEE80211_CCK_RATE_2MB_MASK            (1<<1)
+#define IEEE80211_CCK_RATE_5MB_MASK            (1<<2)
+#define IEEE80211_CCK_RATE_11MB_MASK           (1<<3)
+#define IEEE80211_OFDM_RATE_6MB_MASK           (1<<4)
+#define IEEE80211_OFDM_RATE_9MB_MASK           (1<<5)
+#define IEEE80211_OFDM_RATE_12MB_MASK          (1<<6)
+#define IEEE80211_OFDM_RATE_18MB_MASK          (1<<7)
+#define IEEE80211_OFDM_RATE_24MB_MASK          (1<<8)
+#define IEEE80211_OFDM_RATE_36MB_MASK          (1<<9)
+#define IEEE80211_OFDM_RATE_48MB_MASK          (1<<10)
+#define IEEE80211_OFDM_RATE_54MB_MASK          (1<<11)
+
+#define IEEE80211_CCK_RATES_MASK               0x0000000F
+#define IEEE80211_CCK_BASIC_RATES_MASK (IEEE80211_CCK_RATE_1MB_MASK | \
+       IEEE80211_CCK_RATE_2MB_MASK)
+#define IEEE80211_CCK_DEFAULT_RATES_MASK       (IEEE80211_CCK_BASIC_RATES_MASK | \
+        IEEE80211_CCK_RATE_5MB_MASK | \
+        IEEE80211_CCK_RATE_11MB_MASK)
+
+#define IEEE80211_OFDM_RATES_MASK              0x00000FF0
+#define IEEE80211_OFDM_BASIC_RATES_MASK        (IEEE80211_OFDM_RATE_6MB_MASK | \
+       IEEE80211_OFDM_RATE_12MB_MASK | \
+       IEEE80211_OFDM_RATE_24MB_MASK)
+#define IEEE80211_OFDM_DEFAULT_RATES_MASK      (IEEE80211_OFDM_BASIC_RATES_MASK | \
+       IEEE80211_OFDM_RATE_9MB_MASK  | \
+       IEEE80211_OFDM_RATE_18MB_MASK | \
+       IEEE80211_OFDM_RATE_36MB_MASK | \
+       IEEE80211_OFDM_RATE_48MB_MASK | \
+       IEEE80211_OFDM_RATE_54MB_MASK)
+#define IEEE80211_DEFAULT_RATES_MASK (IEEE80211_OFDM_DEFAULT_RATES_MASK | \
+                                IEEE80211_CCK_DEFAULT_RATES_MASK)
+
+#define IEEE80211_NUM_OFDM_RATES           8
+#define IEEE80211_NUM_CCK_RATES                    4
+#define IEEE80211_OFDM_SHIFT_MASK_A         4
+
+
+
+
+/* NOTE: This data is for statistical purposes; not all hardware provides this
+ *       information for frames received.  Not setting these will not cause
+ *       any adverse affects. */
+struct ieee80211_rx_stats {
+       //u32 mac_time[2];
+       s8 rssi;
+       u8 signal;
+       u8 noise;
+       u8 received_channel;
+       u16 rate; /* in 100 kbps */
+       //u8 control;
+       u8 mask;
+       u8 freq;
+       u16 len;
+};
+
+/* IEEE 802.11 requires that STA supports concurrent reception of at least
+ * three fragmented frames. This define can be increased to support more
+ * concurrent frames, but it should be noted that each entry can consume about
+ * 2 kB of RAM and increasing cache size will slow down frame reassembly. */
+#define IEEE80211_FRAG_CACHE_LEN 4
+
+struct ieee80211_frag_entry {
+       u32 first_frag_time;
+       uint seq;
+       uint last_frag;
+       uint qos;   //jackson
+       uint tid;       //jackson
+       struct sk_buff *skb;
+       u8 src_addr[ETH_ALEN];
+       u8 dst_addr[ETH_ALEN];
+};
+
+#ifndef PLATFORM_FREEBSD //Baron BSD has already defined
+struct ieee80211_stats {
+       uint tx_unicast_frames;
+       uint tx_multicast_frames;
+       uint tx_fragments;
+       uint tx_unicast_octets;
+       uint tx_multicast_octets;
+       uint tx_deferred_transmissions;
+       uint tx_single_retry_frames;
+       uint tx_multiple_retry_frames;
+       uint tx_retry_limit_exceeded;
+       uint tx_discards;
+       uint rx_unicast_frames;
+       uint rx_multicast_frames;
+       uint rx_fragments;
+       uint rx_unicast_octets;
+       uint rx_multicast_octets;
+       uint rx_fcs_errors;
+       uint rx_discards_no_buffer;
+       uint tx_discards_wrong_sa;
+       uint rx_discards_undecryptable;
+       uint rx_message_in_msg_fragments;
+       uint rx_message_in_bad_msg_fragments;
+};
+#endif //PLATFORM_FREEBSD
+struct ieee80211_softmac_stats{
+       uint rx_ass_ok;
+       uint rx_ass_err;
+       uint rx_probe_rq;
+       uint tx_probe_rs;
+       uint tx_beacons;
+       uint rx_auth_rq;
+       uint rx_auth_rs_ok;
+       uint rx_auth_rs_err;
+       uint tx_auth_rq;
+       uint no_auth_rs;
+       uint no_ass_rs;
+       uint tx_ass_rq;
+       uint rx_ass_rq;
+       uint tx_probe_rq;
+       uint reassoc;
+       uint swtxstop;
+       uint swtxawake;
+};
+
+#define SEC_KEY_1         (1<<0)
+#define SEC_KEY_2         (1<<1)
+#define SEC_KEY_3         (1<<2)
+#define SEC_KEY_4         (1<<3)
+#define SEC_ACTIVE_KEY    (1<<4)
+#define SEC_AUTH_MODE     (1<<5)
+#define SEC_UNICAST_GROUP (1<<6)
+#define SEC_LEVEL         (1<<7)
+#define SEC_ENABLED       (1<<8)
+
+#define SEC_LEVEL_0      0 /* None */
+#define SEC_LEVEL_1      1 /* WEP 40 and 104 bit */
+#define SEC_LEVEL_2      2 /* Level 1 + TKIP */
+#define SEC_LEVEL_2_CKIP 3 /* Level 1 + CKIP */
+#define SEC_LEVEL_3      4 /* Level 2 + CCMP */
+
+#define WEP_KEYS 4
+#define WEP_KEY_LEN 13
+
+#ifdef CONFIG_IEEE80211W
+#define BIP_MAX_KEYID 5
+#define BIP_AAD_SIZE  20
+#endif //CONFIG_IEEE80211W
+
+#if defined(PLATFORM_LINUX) || defined(CONFIG_RTL8711FW)
+
+struct ieee80211_security {
+       u16 active_key:2,
+            enabled:1,
+           auth_mode:2,
+            auth_algo:4,
+            unicast_uses_group:1;
+       u8 key_sizes[WEP_KEYS];
+       u8 keys[WEP_KEYS][WEP_KEY_LEN];
+       u8 level;
+       u16 flags;
+} __attribute__ ((packed));
+
+#endif
+
+#ifdef PLATFORM_WINDOWS
+
+#pragma pack(1)
+struct ieee80211_security {
+       u16 active_key:2,
+            enabled:1,
+           auth_mode:2,
+            auth_algo:4,
+            unicast_uses_group:1;
+       u8 key_sizes[WEP_KEYS];
+       u8 keys[WEP_KEYS][WEP_KEY_LEN];
+       u8 level;
+       u16 flags;
+} ;
+#pragma pack()
+
+#endif
+
+/*
+
+ 802.11 data frame from AP
+
+      ,-------------------------------------------------------------------.
+Bytes |  2   |  2   |    6    |    6    |    6    |  2   | 0..2312 |   4  |
+      |------|------|---------|---------|---------|------|---------|------|
+Desc. | ctrl | dura |  DA/RA  |   TA    |    SA   | Sequ |  frame  |  fcs |
+      |      | tion | (BSSID) |         |         | ence |  data   |      |
+      `-------------------------------------------------------------------'
+
+Total: 28-2340 bytes
+
+*/
+
+struct ieee80211_header_data {
+       u16 frame_ctl;
+       u16 duration_id;
+       u8 addr1[6];
+       u8 addr2[6];
+       u8 addr3[6];
+       u16 seq_ctrl;
+};
+
+#define BEACON_PROBE_SSID_ID_POSITION 12
+
+/* Management Frame Information Element Types */
+#define MFIE_TYPE_SSID       0
+#define MFIE_TYPE_RATES      1
+#define MFIE_TYPE_FH_SET     2
+#define MFIE_TYPE_DS_SET     3
+#define MFIE_TYPE_CF_SET     4
+#define MFIE_TYPE_TIM        5
+#define MFIE_TYPE_IBSS_SET   6
+#define MFIE_TYPE_CHALLENGE  16
+#define MFIE_TYPE_ERP        42
+#define MFIE_TYPE_RSN       48
+#define MFIE_TYPE_RATES_EX   50
+#define MFIE_TYPE_GENERIC    221
+
+#if defined(PLATFORM_LINUX) || defined(CONFIG_RTL8711FW)
+
+struct ieee80211_info_element_hdr {
+       u8 id;
+       u8 len;
+} __attribute__ ((packed));
+
+struct ieee80211_info_element {
+       u8 id;
+       u8 len;
+       u8 data[0];
+} __attribute__ ((packed));
+#endif
+
+#ifdef PLATFORM_WINDOWS
+
+#pragma pack(1)
+struct ieee80211_info_element_hdr {
+       u8 id;
+       u8 len;
+} ;
+
+struct ieee80211_info_element {
+       u8 id;
+       u8 len;
+       u8 data[0];
+} ;
+#pragma pack()
+
+#endif
+
+
+/*
+ * These are the data types that can make up management packets
+ *
+       u16 auth_algorithm;
+       u16 auth_sequence;
+       u16 beacon_interval;
+       u16 capability;
+       u8 current_ap[ETH_ALEN];
+       u16 listen_interval;
+       struct {
+               u16 association_id:14, reserved:2;
+       } __attribute__ ((packed));
+       u32 time_stamp[2];
+       u16 reason;
+       u16 status;
+*/
+
+#define IEEE80211_DEFAULT_TX_ESSID "Penguin"
+#define IEEE80211_DEFAULT_BASIC_RATE 10
+
+
+#if defined(PLATFORM_LINUX) || defined(CONFIG_RTL8711FW)
+
+
+struct ieee80211_authentication {
+       struct ieee80211_header_data header;
+       u16 algorithm;
+       u16 transaction;
+       u16 status;
+       //struct ieee80211_info_element_hdr info_element;
+} __attribute__ ((packed));
+
+
+struct ieee80211_probe_response {
+       struct ieee80211_header_data header;
+       u32 time_stamp[2];
+       u16 beacon_interval;
+       u16 capability;
+       struct ieee80211_info_element info_element;
+} __attribute__ ((packed));
+
+struct ieee80211_probe_request {
+       struct ieee80211_header_data header;
+       /*struct ieee80211_info_element info_element;*/
+} __attribute__ ((packed));
+
+struct ieee80211_assoc_request_frame {
+       struct rtw_ieee80211_hdr_3addr header;
+       u16 capability;
+       u16 listen_interval;
+       //u8 current_ap[ETH_ALEN];
+       struct ieee80211_info_element_hdr info_element;
+} __attribute__ ((packed));
+
+struct ieee80211_assoc_response_frame {
+       struct rtw_ieee80211_hdr_3addr header;
+       u16 capability;
+       u16 status;
+       u16 aid;
+//     struct ieee80211_info_element info_element; /* supported rates */
+} __attribute__ ((packed));
+#endif
+
+
+
+#ifdef PLATFORM_WINDOWS
+
+#pragma pack(1)
+
+struct ieee80211_authentication {
+       struct ieee80211_header_data header;
+       u16 algorithm;
+       u16 transaction;
+       u16 status;
+       //struct ieee80211_info_element_hdr info_element;
+} ;
+
+
+struct ieee80211_probe_response {
+       struct ieee80211_header_data header;
+       u32 time_stamp[2];
+       u16 beacon_interval;
+       u16 capability;
+       struct ieee80211_info_element info_element;
+} ;
+
+struct ieee80211_probe_request {
+       struct ieee80211_header_data header;
+       /*struct ieee80211_info_element info_element;*/
+} ;
+
+struct ieee80211_assoc_request_frame {
+       struct rtw_ieee80211_hdr_3addr header;
+       u16 capability;
+       u16 listen_interval;
+       //u8 current_ap[ETH_ALEN];
+       struct ieee80211_info_element_hdr info_element;
+} ;
+
+struct ieee80211_assoc_response_frame {
+       struct rtw_ieee80211_hdr_3addr header;
+       u16 capability;
+       u16 status;
+       u16 aid;
+//     struct ieee80211_info_element info_element; /* supported rates */
+};
+
+#pragma pack()
+
+#endif
+
+
+
+
+struct ieee80211_txb {
+       u8 nr_frags;
+       u8 encrypted;
+       u16 reserved;
+       u16 frag_size;
+       u16 payload_size;
+       struct sk_buff *fragments[0];
+};
+
+
+/* SWEEP TABLE ENTRIES NUMBER*/
+#define MAX_SWEEP_TAB_ENTRIES            42
+#define MAX_SWEEP_TAB_ENTRIES_PER_PACKET  7
+/* MAX_RATES_LENGTH needs to be 12.  The spec says 8, and many APs
+ * only use 8, and then use extended rates for the remaining supported
+ * rates.  Other APs, however, stick all of their supported rates on the
+ * main rates information element... */
+#define MAX_RATES_LENGTH                  ((u8)12)
+#define MAX_RATES_EX_LENGTH               ((u8)16)
+#define MAX_NETWORK_COUNT                  128
+#define MAX_CHANNEL_NUMBER                 161
+#define IEEE80211_SOFTMAC_SCAN_TIME      400
+//(HZ / 2)
+#define IEEE80211_SOFTMAC_ASSOC_RETRY_TIME (HZ * 2)
+
+#define CRC_LENGTH                 4U
+
+#define MAX_WPA_IE_LEN (256)
+#define MAX_WPS_IE_LEN (512)
+#define MAX_P2P_IE_LEN (256)
+#define MAX_WFD_IE_LEN (128)
+
+#define NETWORK_EMPTY_ESSID (1<<0)
+#define NETWORK_HAS_OFDM    (1<<1)
+#define NETWORK_HAS_CCK     (1<<2)
+
+#define IEEE80211_DTIM_MBCAST 4
+#define IEEE80211_DTIM_UCAST 2
+#define IEEE80211_DTIM_VALID 1
+#define IEEE80211_DTIM_INVALID 0
+
+#define IEEE80211_PS_DISABLED 0
+#define IEEE80211_PS_UNICAST IEEE80211_DTIM_UCAST
+#define IEEE80211_PS_MBCAST IEEE80211_DTIM_MBCAST
+#define IW_ESSID_MAX_SIZE 32
+#if 0
+struct ieee80211_network {
+       /* These entries are used to identify a unique network */
+       u8 bssid[ETH_ALEN];
+       u8 channel;
+       /* Ensure null-terminated for any debug msgs */
+       u8 ssid[IW_ESSID_MAX_SIZE + 1];
+       u8 ssid_len;
+       u8      rssi;   //relative signal strength
+       u8      sq;             //signal quality
+
+       /* These are network statistics */
+       //struct ieee80211_rx_stats stats;
+       u16 capability;
+       u16     aid;
+       u8 rates[MAX_RATES_LENGTH];
+       u8 rates_len;
+       u8 rates_ex[MAX_RATES_EX_LENGTH];
+       u8 rates_ex_len;
+
+       u8 edca_parmsets[18];
+
+       u8 mode;
+       u8 flags;
+       u8 time_stamp[8];
+       u16 beacon_interval;
+       u16 listen_interval;
+       u16 atim_window;
+       u8 wpa_ie[MAX_WPA_IE_LEN];
+       size_t wpa_ie_len;
+       u8 rsn_ie[MAX_WPA_IE_LEN];
+       size_t rsn_ie_len;
+       u8 country[6];
+       u8 dtim_period;
+       u8 dtim_data;
+       u8 power_constraint;
+       u8 qosinfo;
+       u8 qbssload[5];
+       u8 network_type;
+       int join_res;
+       unsigned long   last_scanned;
+};
+#endif
+/*
+join_res:
+-1: authentication fail
+-2: association fail
+> 0: TID
+*/
+
+#ifndef PLATFORM_FREEBSD //Baron BSD has already defined
+
+enum ieee80211_state {
+
+       /* the card is not linked at all */
+       IEEE80211_NOLINK = 0,
+
+       /* IEEE80211_ASSOCIATING* are for BSS client mode
+        * the driver shall not perform RX filtering unless
+        * the state is LINKED.
+        * The driver shall just check for the state LINKED and
+        * defaults to NOLINK for ALL the other states (including
+        * LINKED_SCANNING)
+        */
+
+       /* the association procedure will start (wq scheduling)*/
+       IEEE80211_ASSOCIATING,
+       IEEE80211_ASSOCIATING_RETRY,
+
+       /* the association procedure is sending AUTH request*/
+       IEEE80211_ASSOCIATING_AUTHENTICATING,
+
+       /* the association procedure has successfully authentcated
+        * and is sending association request
+        */
+       IEEE80211_ASSOCIATING_AUTHENTICATED,
+
+       /* the link is ok. the card associated to a BSS or linked
+        * to a ibss cell or acting as an AP and creating the bss
+        */
+       IEEE80211_LINKED,
+
+       /* same as LINKED, but the driver shall apply RX filter
+        * rules as we are in NO_LINK mode. As the card is still
+        * logically linked, but it is doing a syncro site survey
+        * then it will be back to LINKED state.
+        */
+       IEEE80211_LINKED_SCANNING,
+
+};
+#endif //PLATFORM_FREEBSD
+
+#define DEFAULT_MAX_SCAN_AGE (15 * HZ)
+#define DEFAULT_FTS 2346
+#define MAC_FMT "%02x:%02x:%02x:%02x:%02x:%02x"
+#define MAC_ARG(x) ((u8*)(x))[0],((u8*)(x))[1],((u8*)(x))[2],((u8*)(x))[3],((u8*)(x))[4],((u8*)(x))[5]
+
+#ifdef PLATFORM_FREEBSD //Baron change func to macro
+#define is_multicast_mac_addr(Addr) ((((Addr[0]) & 0x01) == 0x01) && ((Addr[0]) != 0xff))
+#define is_broadcast_mac_addr(Addr) ((((Addr[0]) & 0xff) == 0xff) && (((Addr[1]) & 0xff) == 0xff) && \
+(((Addr[2]) & 0xff) == 0xff) && (((Addr[3]) & 0xff) == 0xff) && (((Addr[4]) & 0xff) == 0xff) && \
+(((Addr[5]) & 0xff) == 0xff))
+#else
+extern __inline int is_multicast_mac_addr(const u8 *addr)
+{
+        return ((addr[0] != 0xff) && (0x01 & addr[0]));
+}
+
+extern __inline int is_broadcast_mac_addr(const u8 *addr)
+{
+       return ((addr[0] == 0xff) && (addr[1] == 0xff) && (addr[2] == 0xff) &&   \
+               (addr[3] == 0xff) && (addr[4] == 0xff) && (addr[5] == 0xff));
+}
+
+extern __inline int is_zero_mac_addr(const u8 *addr)
+{
+       return ((addr[0] == 0x00) && (addr[1] == 0x00) && (addr[2] == 0x00) &&   \
+               (addr[3] == 0x00) && (addr[4] == 0x00) && (addr[5] == 0x00));
+}
+#endif //PLATFORM_FREEBSD
+
+#define CFG_IEEE80211_RESERVE_FCS (1<<0)
+#define CFG_IEEE80211_COMPUTE_FCS (1<<1)
+
+typedef struct tx_pending_t{
+       int frag;
+       struct ieee80211_txb *txb;
+}tx_pending_t;
+
+
+
+#define MAXTID 16
+
+#define IEEE_A            (1<<0)
+#define IEEE_B            (1<<1)
+#define IEEE_G            (1<<2)
+#define IEEE_MODE_MASK    (IEEE_A|IEEE_B|IEEE_G)
+
+//Baron move to ieee80211.c
+int ieee80211_is_empty_essid(const char *essid, int essid_len);
+int ieee80211_get_hdrlen(u16 fc);
+
+#if 0
+/* Action frame categories (IEEE 802.11-2007, 7.3.1.11, Table 7-24) */
+#define WLAN_ACTION_SPECTRUM_MGMT 0
+#define WLAN_ACTION_QOS 1
+#define WLAN_ACTION_DLS 2
+#define WLAN_ACTION_BLOCK_ACK 3
+#define WLAN_ACTION_RADIO_MEASUREMENT 5
+#define WLAN_ACTION_FT 6
+#define WLAN_ACTION_SA_QUERY 8
+#define WLAN_ACTION_WMM 17
+#endif
+
+
+/* Action category code */
+enum rtw_ieee80211_category {
+       RTW_WLAN_CATEGORY_SPECTRUM_MGMT = 0,
+       RTW_WLAN_CATEGORY_QOS = 1,
+       RTW_WLAN_CATEGORY_DLS = 2,
+       RTW_WLAN_CATEGORY_BACK = 3,
+       RTW_WLAN_CATEGORY_PUBLIC = 4, //IEEE 802.11 public action frames
+       RTW_WLAN_CATEGORY_RADIO_MEASUREMENT  = 5,
+       RTW_WLAN_CATEGORY_FT = 6,
+       RTW_WLAN_CATEGORY_HT = 7,
+       RTW_WLAN_CATEGORY_SA_QUERY = 8,
+       RTW_WLAN_CATEGORY_UNPROTECTED_WNM = 11, // add for CONFIG_IEEE80211W, none 11w also can use
+       RTW_WLAN_CATEGORY_TDLS = 12,
+       RTW_WLAN_CATEGORY_SELF_PROTECTED = 15, // add for CONFIG_IEEE80211W, none 11w also can use
+       RTW_WLAN_CATEGORY_WMM = 17,
+       RTW_WLAN_CATEGORY_P2P = 0x7f,//P2P action frames
+};
+
+/* SPECTRUM_MGMT action code */
+enum rtw_ieee80211_spectrum_mgmt_actioncode {
+       RTW_WLAN_ACTION_SPCT_MSR_REQ = 0,
+       RTW_WLAN_ACTION_SPCT_MSR_RPRT = 1,
+       RTW_WLAN_ACTION_SPCT_TPC_REQ = 2,
+       RTW_WLAN_ACTION_SPCT_TPC_RPRT = 3,
+       RTW_WLAN_ACTION_SPCT_CHL_SWITCH = 4,
+       RTW_WLAN_ACTION_SPCT_EXT_CHL_SWITCH = 5,
+};
+
+enum _PUBLIC_ACTION{
+       ACT_PUBLIC_BSSCOEXIST = 0, // 20/40 BSS Coexistence
+       ACT_PUBLIC_DSE_ENABLE = 1,
+       ACT_PUBLIC_DSE_DEENABLE = 2,
+       ACT_PUBLIC_DSE_REG_LOCATION = 3,
+       ACT_PUBLIC_EXT_CHL_SWITCH = 4,
+       ACT_PUBLIC_DSE_MSR_REQ = 5,
+       ACT_PUBLIC_DSE_MSR_RPRT = 6,
+       ACT_PUBLIC_MP = 7, // Measurement Pilot
+       ACT_PUBLIC_DSE_PWR_CONSTRAINT = 8,
+       ACT_PUBLIC_VENDOR = 9, // for WIFI_DIRECT
+       ACT_PUBLIC_GAS_INITIAL_REQ = 10,
+       ACT_PUBLIC_GAS_INITIAL_RSP = 11,
+       ACT_PUBLIC_GAS_COMEBACK_REQ = 12,
+       ACT_PUBLIC_GAS_COMEBACK_RSP = 13,
+       ACT_PUBLIC_TDLS_DISCOVERY_RSP = 14,
+       ACT_PUBLIC_LOCATION_TRACK = 15,
+       ACT_PUBLIC_MAX
+};
+
+#ifdef CONFIG_TDLS
+enum TDLS_ACTION_FIELD{
+       TDLS_SETUP_REQUEST = 0,
+       TDLS_SETUP_RESPONSE = 1,
+       TDLS_SETUP_CONFIRM = 2,
+       TDLS_TEARDOWN = 3,
+       TDLS_PEER_TRAFFIC_INDICATION = 4,
+       TDLS_CHANNEL_SWITCH_REQUEST = 5,
+       TDLS_CHANNEL_SWITCH_RESPONSE = 6,
+       TDLS_PEER_PSM_REQUEST = 7,
+       TDLS_PEER_PSM_RESPONSE = 8,
+       TDLS_PEER_TRAFFIC_RESPONSE = 9,
+       TDLS_DISCOVERY_REQUEST = 10,
+       TDLS_DISCOVERY_RESPONSE = 14,   //it's used in public action frame
+};
+
+#define        TUNNELED_PROBE_REQ      15
+#define        TUNNELED_PROBE_RSP      16
+#endif //CONFIG_TDLS
+
+/* BACK action code */
+enum rtw_ieee80211_back_actioncode {
+       RTW_WLAN_ACTION_ADDBA_REQ = 0,
+       RTW_WLAN_ACTION_ADDBA_RESP = 1,
+       RTW_WLAN_ACTION_DELBA = 2,
+};
+
+/* HT features action code */
+enum rtw_ieee80211_ht_actioncode {
+       RTW_WLAN_ACTION_NOTIFY_CH_WIDTH = 0,
+       RTW_WLAN_ACTION_SM_PS = 1,
+       RTW_WLAN_ACTION_PSPM = 2,
+       RTW_WLAN_ACTION_PCO_PHASE = 3,
+       RTW_WLAN_ACTION_MIMO_CSI_MX = 4,
+       RTW_WLAN_ACTION_MIMO_NONCP_BF = 5,
+       RTW_WLAN_ACTION_MIMP_CP_BF = 6,
+       RTW_WLAN_ACTION_ASEL_INDICATES_FB = 7,
+       RTW_WLAN_ACTION_HI_INFO_EXCHG = 8,
+};
+
+/* BACK (block-ack) parties */
+enum rtw_ieee80211_back_parties {
+       RTW_WLAN_BACK_RECIPIENT = 0,
+       RTW_WLAN_BACK_INITIATOR = 1,
+       RTW_WLAN_BACK_TIMER = 2,
+};
+
+
+#define OUI_MICROSOFT 0x0050f2 /* Microsoft (also used in Wi-Fi specs)
+                               * 00:50:F2 */
+#ifndef PLATFORM_FREEBSD //Baron BSD has defined
+#define WME_OUI_TYPE 2
+#endif //PLATFORM_FREEBSD
+#define WME_OUI_SUBTYPE_INFORMATION_ELEMENT 0
+#define WME_OUI_SUBTYPE_PARAMETER_ELEMENT 1
+#define WME_OUI_SUBTYPE_TSPEC_ELEMENT 2
+#define WME_VERSION 1
+
+#define WME_ACTION_CODE_SETUP_REQUEST 0
+#define WME_ACTION_CODE_SETUP_RESPONSE 1
+#define WME_ACTION_CODE_TEARDOWN 2
+
+#define WME_SETUP_RESPONSE_STATUS_ADMISSION_ACCEPTED 0
+#define WME_SETUP_RESPONSE_STATUS_INVALID_PARAMETERS 1
+#define WME_SETUP_RESPONSE_STATUS_REFUSED 3
+
+#define WME_TSPEC_DIRECTION_UPLINK 0
+#define WME_TSPEC_DIRECTION_DOWNLINK 1
+#define WME_TSPEC_DIRECTION_BI_DIRECTIONAL 3
+
+
+#define OUI_BROADCOM 0x00904c /* Broadcom (Epigram) */
+
+#define VENDOR_HT_CAPAB_OUI_TYPE 0x33 /* 00-90-4c:0x33 */
+
+/**
+ * enum rtw_ieee80211_channel_flags - channel flags
+ *
+ * Channel flags set by the regulatory control code.
+ *
+ * @RTW_IEEE80211_CHAN_DISABLED: This channel is disabled.
+ * @RTW_IEEE80211_CHAN_PASSIVE_SCAN: Only passive scanning is permitted
+ *      on this channel.
+ * @RTW_IEEE80211_CHAN_NO_IBSS: IBSS is not allowed on this channel.
+ * @RTW_IEEE80211_CHAN_RADAR: Radar detection is required on this channel.
+ * @RTW_IEEE80211_CHAN_NO_HT40PLUS: extension channel above this channel
+ *      is not permitted.
+ * @RTW_IEEE80211_CHAN_NO_HT40MINUS: extension channel below this channel
+ *      is not permitted.
+ */
+  enum rtw_ieee80211_channel_flags {
+          RTW_IEEE80211_CHAN_DISABLED         = 1<<0,
+          RTW_IEEE80211_CHAN_PASSIVE_SCAN     = 1<<1,
+          RTW_IEEE80211_CHAN_NO_IBSS          = 1<<2,
+          RTW_IEEE80211_CHAN_RADAR            = 1<<3,
+          RTW_IEEE80211_CHAN_NO_HT40PLUS      = 1<<4,
+          RTW_IEEE80211_CHAN_NO_HT40MINUS     = 1<<5,
+  };
+
+  #define RTW_IEEE80211_CHAN_NO_HT40 \
+          (RTW_IEEE80211_CHAN_NO_HT40PLUS | RTW_IEEE80211_CHAN_NO_HT40MINUS)
+
+/* Represent channel details, subset of ieee80211_channel */
+struct rtw_ieee80211_channel {
+       //enum ieee80211_band band;
+       //u16 center_freq;
+       u16 hw_value;
+       u32 flags;
+       //int max_antenna_gain;
+       //int max_power;
+       //int max_reg_power;
+       //bool beacon_found;
+       //u32 orig_flags;
+       //int orig_mag;
+       //int orig_mpwr;
+};
+
+#define CHAN_FMT \
+       /*"band:%d, "*/ \
+       /*"center_freq:%u, "*/ \
+       "hw_value:%u, " \
+       "flags:0x%08x" \
+       /*"max_antenna_gain:%d\n"*/ \
+       /*"max_power:%d\n"*/ \
+       /*"max_reg_power:%d\n"*/ \
+       /*"beacon_found:%u\n"*/ \
+       /*"orig_flags:0x%08x\n"*/ \
+       /*"orig_mag:%d\n"*/ \
+       /*"orig_mpwr:%d\n"*/
+
+#define CHAN_ARG(channel) \
+       /*(channel)->band*/ \
+       /*, (channel)->center_freq*/ \
+       (channel)->hw_value \
+       , (channel)->flags \
+       /*, (channel)->max_antenna_gain*/ \
+       /*, (channel)->max_power*/ \
+       /*, (channel)->max_reg_power*/ \
+       /*, (channel)->beacon_found*/ \
+       /*, (channel)->orig_flags*/ \
+       /*, (channel)->orig_mag*/ \
+       /*, (channel)->orig_mpwr*/ \
+
+/* Parsed Information Elements */
+struct rtw_ieee802_11_elems {
+       u8 *ssid;
+       u8 ssid_len;
+       u8 *supp_rates;
+       u8 supp_rates_len;
+       u8 *fh_params;
+       u8 fh_params_len;
+       u8 *ds_params;
+       u8 ds_params_len;
+       u8 *cf_params;
+       u8 cf_params_len;
+       u8 *tim;
+       u8 tim_len;
+       u8 *ibss_params;
+       u8 ibss_params_len;
+       u8 *challenge;
+       u8 challenge_len;
+       u8 *erp_info;
+       u8 erp_info_len;
+       u8 *ext_supp_rates;
+       u8 ext_supp_rates_len;
+       u8 *wpa_ie;
+       u8 wpa_ie_len;
+       u8 *rsn_ie;
+       u8 rsn_ie_len;
+       u8 *wme;
+       u8 wme_len;
+       u8 *wme_tspec;
+       u8 wme_tspec_len;
+       u8 *wps_ie;
+       u8 wps_ie_len;
+       u8 *power_cap;
+       u8 power_cap_len;
+       u8 *supp_channels;
+       u8 supp_channels_len;
+       u8 *mdie;
+       u8 mdie_len;
+       u8 *ftie;
+       u8 ftie_len;
+       u8 *timeout_int;
+       u8 timeout_int_len;
+       u8 *ht_capabilities;
+       u8 ht_capabilities_len;
+       u8 *ht_operation;
+       u8 ht_operation_len;
+       u8 *vendor_ht_cap;
+       u8 vendor_ht_cap_len;
+};
+
+typedef enum { ParseOK = 0, ParseUnknown = 1, ParseFailed = -1 } ParseRes;
+
+ParseRes rtw_ieee802_11_parse_elems(u8 *start, uint len,
+                               struct rtw_ieee802_11_elems *elems,
+                               int show_errors);
+
+u8 *rtw_set_fixed_ie(unsigned char *pbuf, unsigned int len, unsigned char *source, unsigned int *frlen);
+u8 *rtw_set_ie(u8 *pbuf, sint index, uint len, u8 *source, uint *frlen);
+
+enum secondary_ch_offset {
+       SCN = 0, /* no secondary channel */
+       SCA = 1, /* secondary channel above */
+       SCB = 3,  /* secondary channel below */
+};
+u8 secondary_ch_offset_to_hal_ch_offset(u8 ch_offset);
+u8 hal_ch_offset_to_secondary_ch_offset(u8 ch_offset);
+u8 *rtw_set_ie_ch_switch(u8 *buf, u32 *buf_len, u8 ch_switch_mode, u8 new_ch, u8 ch_switch_cnt);
+u8 *rtw_set_ie_secondary_ch_offset(u8 *buf, u32 *buf_len, u8 secondary_ch_offset);
+u8 *rtw_set_ie_mesh_ch_switch_parm(u8 *buf, u32 *buf_len, u8 ttl, u8 flags, u16 reason, u16 precedence);
+
+u8 *rtw_get_ie(u8*pbuf, sint index, sint *len, sint limit);
+u8 *rtw_get_ie_ex(u8 *in_ie, uint in_len, u8 eid, u8 *oui, u8 oui_len, u8 *ie, uint *ielen);
+int rtw_ies_remove_ie(u8 *ies, uint *ies_len, uint offset, u8 eid, u8 *oui, u8 oui_len);
+
+void rtw_set_supported_rate(u8* SupportedRates, uint mode) ;
+
+unsigned char *rtw_get_wpa_ie(unsigned char *pie, int *wpa_ie_len, int limit);
+unsigned char *rtw_get_wpa2_ie(unsigned char *pie, int *rsn_ie_len, int limit);
+int rtw_get_wpa_cipher_suite(u8 *s);
+int rtw_get_wpa2_cipher_suite(u8 *s);
+int rtw_parse_wpa_ie(u8* wpa_ie, int wpa_ie_len, int *group_cipher, int *pairwise_cipher);
+int rtw_parse_wpa2_ie(u8* wpa_ie, int wpa_ie_len, int *group_cipher, int *pairwise_cipher);
+
+int rtw_get_sec_ie(u8 *in_ie,uint in_len,u8 *rsn_ie,u16 *rsn_len,u8 *wpa_ie,u16 *wpa_len);
+
+u8 rtw_is_wps_ie(u8 *ie_ptr, uint *wps_ielen);
+u8 *rtw_get_wps_ie(u8 *in_ie, uint in_len, u8 *wps_ie, uint *wps_ielen);
+u8 *rtw_get_wps_attr(u8 *wps_ie, uint wps_ielen, u16 target_attr_id ,u8 *buf_attr, u32 *len_attr);
+u8 *rtw_get_wps_attr_content(u8 *wps_ie, uint wps_ielen, u16 target_attr_id ,u8 *buf_content, uint *len_content);
+
+/**
+ * for_each_ie - iterate over continuous IEs
+ * @ie:
+ * @buf:
+ * @buf_len:
+ */
+#define for_each_ie(ie, buf, buf_len) \
+       for (ie = (void*)buf; (((u8*)ie) - ((u8*)buf) + 1) < buf_len; ie = (void*)(((u8*)ie) + *(((u8*)ie)+1) + 2))
+
+void dump_ies(u8 *buf, u32 buf_len);
+void dump_wps_ie(u8 *ie, u32 ie_len);
+
+#ifdef CONFIG_P2P
+u32 rtw_get_p2p_merged_ies_len(u8 *in_ie, u32 in_len);
+int rtw_p2p_merge_ies(u8 *in_ie, u32 in_len, u8 *merge_ie);
+void dump_p2p_ie(u8 *ie, u32 ie_len);
+u8 *rtw_get_p2p_ie(u8 *in_ie, int in_len, u8 *p2p_ie, uint *p2p_ielen);
+u8 *rtw_get_p2p_attr(u8 *p2p_ie, uint p2p_ielen, u8 target_attr_id ,u8 *buf_attr, u32 *len_attr);
+u8 *rtw_get_p2p_attr_content(u8 *p2p_ie, uint p2p_ielen, u8 target_attr_id ,u8 *buf_content, uint *len_content);
+u32 rtw_set_p2p_attr_content(u8 *pbuf, u8 attr_id, u16 attr_len, u8 *pdata_attr);
+void rtw_WLAN_BSSID_EX_remove_p2p_attr(WLAN_BSSID_EX *bss_ex, u8 attr_id);
+#endif
+
+#ifdef CONFIG_WFD
+int rtw_get_wfd_ie(u8 *in_ie, int in_len, u8 *wfd_ie, uint *wfd_ielen);
+int rtw_get_wfd_attr_content(u8 *wfd_ie, uint wfd_ielen, u8 target_attr_id ,u8 *attr_content, uint *attr_contentlen);
+#endif // CONFIG_WFD
+
+uint   rtw_get_rateset_len(u8  *rateset);
+
+struct registry_priv;
+int rtw_generate_ie(struct registry_priv *pregistrypriv);
+
+
+int rtw_get_bit_value_from_ieee_value(u8 val);
+
+uint   rtw_is_cckrates_included(u8 *rate);
+
+uint   rtw_is_cckratesonly_included(u8 *rate);
+
+int rtw_check_network_type(unsigned char *rate, int ratelen, int channel);
+
+void rtw_macaddr_cfg(u8 *mac_addr);
+
+u16 rtw_mcs_rate(u8 rf_type, u8 bw_40MHz, u8 short_GI_20, u8 short_GI_40, unsigned char * MCS_rate);
+
+int rtw_action_frame_parse(const u8 *frame, u32 frame_len, u8* category, u8 *action);
+const char *action_public_str(u8 action);
+
+#endif /* IEEE80211_H */
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/ieee80211_ext.h b/drivers/net/wireless/realtek/rtl8192cu/include/ieee80211_ext.h
new file mode 100644 (file)
index 0000000..eba9001
--- /dev/null
@@ -0,0 +1,476 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __IEEE80211_EXT_H
+#define __IEEE80211_EXT_H
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+
+#define WMM_OUI_TYPE 2
+#define WMM_OUI_SUBTYPE_INFORMATION_ELEMENT 0
+#define WMM_OUI_SUBTYPE_PARAMETER_ELEMENT 1
+#define WMM_OUI_SUBTYPE_TSPEC_ELEMENT 2
+#define WMM_VERSION 1
+
+#define WPA_PROTO_WPA BIT(0)
+#define WPA_PROTO_RSN BIT(1)
+
+#define WPA_KEY_MGMT_IEEE8021X BIT(0)
+#define WPA_KEY_MGMT_PSK BIT(1)
+#define WPA_KEY_MGMT_NONE BIT(2)
+#define WPA_KEY_MGMT_IEEE8021X_NO_WPA BIT(3)
+#define WPA_KEY_MGMT_WPA_NONE BIT(4)
+
+
+#define WPA_CAPABILITY_PREAUTH BIT(0)
+#define WPA_CAPABILITY_MGMT_FRAME_PROTECTION BIT(6)
+#define WPA_CAPABILITY_PEERKEY_ENABLED BIT(9)
+
+
+#define PMKID_LEN 16
+
+
+#ifdef PLATFORM_LINUX
+struct wpa_ie_hdr {
+       u8 elem_id;
+       u8 len;
+       u8 oui[4]; /* 24-bit OUI followed by 8-bit OUI type */
+       u8 version[2]; /* little endian */
+}__attribute__ ((packed));
+
+struct rsn_ie_hdr {
+       u8 elem_id; /* WLAN_EID_RSN */
+       u8 len;
+       u8 version[2]; /* little endian */
+}__attribute__ ((packed));
+
+struct wme_ac_parameter {
+#if defined(CONFIG_LITTLE_ENDIAN)
+       /* byte 1 */
+       u8      aifsn:4,
+               acm:1,
+               aci:2,
+               reserved:1;
+
+       /* byte 2 */
+       u8      eCWmin:4,
+               eCWmax:4;
+#elif defined(CONFIG_BIG_ENDIAN)
+       /* byte 1 */
+       u8      reserved:1,
+               aci:2,
+               acm:1,
+               aifsn:4;
+
+       /* byte 2 */
+       u8      eCWmax:4,
+               eCWmin:4;
+#else
+#error "Please fix <endian.h>"
+#endif
+
+       /* bytes 3 & 4 */
+       u16 txopLimit;
+} __attribute__ ((packed));
+
+struct wme_parameter_element {
+       /* required fields for WME version 1 */
+       u8 oui[3];
+       u8 oui_type;
+       u8 oui_subtype;
+       u8 version;
+       u8 acInfo;
+       u8 reserved;
+       struct wme_ac_parameter ac[4];
+
+} __attribute__ ((packed));
+
+#endif
+
+#ifdef PLATFORM_WINDOWS
+
+#pragma pack(1)
+
+struct wpa_ie_hdr {
+       u8 elem_id;
+       u8 len;
+       u8 oui[4]; /* 24-bit OUI followed by 8-bit OUI type */
+       u8 version[2]; /* little endian */
+};
+
+struct rsn_ie_hdr {
+       u8 elem_id; /* WLAN_EID_RSN */
+       u8 len;
+       u8 version[2]; /* little endian */
+};
+
+#pragma pack()
+
+#endif
+
+#define WPA_PUT_LE16(a, val)                   \
+       do {                                    \
+               (a)[1] = ((u16) (val)) >> 8;    \
+               (a)[0] = ((u16) (val)) & 0xff;  \
+       } while (0)
+
+#define WPA_PUT_BE32(a, val)                                   \
+       do {                                                    \
+               (a)[0] = (u8) ((((u32) (val)) >> 24) & 0xff);   \
+               (a)[1] = (u8) ((((u32) (val)) >> 16) & 0xff);   \
+               (a)[2] = (u8) ((((u32) (val)) >> 8) & 0xff);    \
+               (a)[3] = (u8) (((u32) (val)) & 0xff);           \
+       } while (0)
+
+#define WPA_PUT_LE32(a, val)                                   \
+       do {                                                    \
+               (a)[3] = (u8) ((((u32) (val)) >> 24) & 0xff);   \
+               (a)[2] = (u8) ((((u32) (val)) >> 16) & 0xff);   \
+               (a)[1] = (u8) ((((u32) (val)) >> 8) & 0xff);    \
+               (a)[0] = (u8) (((u32) (val)) & 0xff);           \
+       } while (0)
+
+#define RSN_SELECTOR_PUT(a, val) WPA_PUT_BE32((u8 *) (a), (val))
+//#define RSN_SELECTOR_PUT(a, val) WPA_PUT_LE32((u8 *) (a), (val))
+
+
+
+/* Action category code */
+enum ieee80211_category {
+       WLAN_CATEGORY_SPECTRUM_MGMT = 0,
+       WLAN_CATEGORY_QOS = 1,
+       WLAN_CATEGORY_DLS = 2,
+       WLAN_CATEGORY_BACK = 3,
+       WLAN_CATEGORY_HT = 7,
+       WLAN_CATEGORY_WMM = 17,
+};
+
+/* SPECTRUM_MGMT action code */
+enum ieee80211_spectrum_mgmt_actioncode {
+       WLAN_ACTION_SPCT_MSR_REQ = 0,
+       WLAN_ACTION_SPCT_MSR_RPRT = 1,
+       WLAN_ACTION_SPCT_TPC_REQ = 2,
+       WLAN_ACTION_SPCT_TPC_RPRT = 3,
+       WLAN_ACTION_SPCT_CHL_SWITCH = 4,
+       WLAN_ACTION_SPCT_EXT_CHL_SWITCH = 5,
+};
+
+/* BACK action code */
+enum ieee80211_back_actioncode {
+       WLAN_ACTION_ADDBA_REQ = 0,
+       WLAN_ACTION_ADDBA_RESP = 1,
+       WLAN_ACTION_DELBA = 2,
+};
+
+/* HT features action code */
+enum ieee80211_ht_actioncode {
+       WLAN_ACTION_NOTIFY_CH_WIDTH = 0,
+       WLAN_ACTION_SM_PS = 1,
+       WLAN_ACTION_PSPM = 2,
+       WLAN_ACTION_PCO_PHASE = 3,
+       WLAN_ACTION_MIMO_CSI_MX = 4,
+       WLAN_ACTION_MIMO_NONCP_BF = 5,
+       WLAN_ACTION_MIMP_CP_BF = 6,
+       WLAN_ACTION_ASEL_INDICATES_FB = 7,
+       WLAN_ACTION_HI_INFO_EXCHG = 8,
+};
+
+/* BACK (block-ack) parties */
+enum ieee80211_back_parties {
+       WLAN_BACK_RECIPIENT = 0,
+       WLAN_BACK_INITIATOR = 1,
+       WLAN_BACK_TIMER = 2,
+};
+
+#ifdef PLATFORM_LINUX
+
+struct ieee80211_mgmt {
+       u16 frame_control;
+       u16 duration;
+       u8 da[6];
+       u8 sa[6];
+       u8 bssid[6];
+       u16 seq_ctrl;
+       union {
+               struct {
+                       u16 auth_alg;
+                       u16 auth_transaction;
+                       u16 status_code;
+                       /* possibly followed by Challenge text */
+                       u8 variable[0];
+               }  __attribute__ ((packed)) auth;
+               struct {
+                       u16 reason_code;
+               }  __attribute__ ((packed)) deauth;
+               struct {
+                       u16 capab_info;
+                       u16 listen_interval;
+                       /* followed by SSID and Supported rates */
+                       u8 variable[0];
+               }  __attribute__ ((packed)) assoc_req;
+               struct {
+                       u16 capab_info;
+                       u16 status_code;
+                       u16 aid;
+                       /* followed by Supported rates */
+                       u8 variable[0];
+               }  __attribute__ ((packed)) assoc_resp, reassoc_resp;
+               struct {
+                       u16 capab_info;
+                       u16 listen_interval;
+                       u8 current_ap[6];
+                       /* followed by SSID and Supported rates */
+                       u8 variable[0];
+               }  __attribute__ ((packed)) reassoc_req;
+               struct {
+                       u16 reason_code;
+               }  __attribute__ ((packed)) disassoc;
+               struct {
+                       __le64 timestamp;
+                       u16 beacon_int;
+                       u16 capab_info;
+                       /* followed by some of SSID, Supported rates,
+                        * FH Params, DS Params, CF Params, IBSS Params, TIM */
+                       u8 variable[0];
+               }  __attribute__ ((packed)) beacon;
+               struct {
+                       /* only variable items: SSID, Supported rates */
+                       u8 variable[0];
+               }  __attribute__ ((packed)) probe_req;
+               struct {
+                       __le64 timestamp;
+                       u16 beacon_int;
+                       u16 capab_info;
+                       /* followed by some of SSID, Supported rates,
+                        * FH Params, DS Params, CF Params, IBSS Params */
+                       u8 variable[0];
+               }  __attribute__ ((packed)) probe_resp;
+               struct {
+                       u8 category;
+                       union {
+                               struct {
+                                       u8 action_code;
+                                       u8 dialog_token;
+                                       u8 status_code;
+                                       u8 variable[0];
+                               }  __attribute__ ((packed)) wme_action;
+#if 0
+                               struct{
+                                       u8 action_code;
+                                       u8 element_id;
+                                       u8 length;
+                                       struct ieee80211_channel_sw_ie sw_elem;
+                               }  __attribute__ ((packed)) chan_switch;
+                               struct{
+                                       u8 action_code;
+                                       u8 dialog_token;
+                                       u8 element_id;
+                                       u8 length;
+                                       struct ieee80211_msrment_ie msr_elem;
+                               }  __attribute__ ((packed)) measurement;
+#endif
+                               struct{
+                                       u8 action_code;
+                                       u8 dialog_token;
+                                       u16 capab;
+                                       u16 timeout;
+                                       u16 start_seq_num;
+                               }  __attribute__ ((packed)) addba_req;
+                               struct{
+                                       u8 action_code;
+                                       u8 dialog_token;
+                                       u16 status;
+                                       u16 capab;
+                                       u16 timeout;
+                               }  __attribute__ ((packed)) addba_resp;
+                               struct{
+                                       u8 action_code;
+                                       u16 params;
+                                       u16 reason_code;
+                               }  __attribute__ ((packed)) delba;
+                               struct{
+                                       u8 action_code;
+                                       /* capab_info for open and confirm,
+                                        * reason for close
+                                        */
+                                       u16 aux;
+                                       /* Followed in plink_confirm by status
+                                        * code, AID and supported rates,
+                                        * and directly by supported rates in
+                                        * plink_open and plink_close
+                                        */
+                                       u8 variable[0];
+                               }  __attribute__ ((packed)) plink_action;
+                               struct{
+                                       u8 action_code;
+                                       u8 variable[0];
+                               }  __attribute__ ((packed)) mesh_action;
+                       } __attribute__ ((packed)) u;
+               }  __attribute__ ((packed)) action;
+       } __attribute__ ((packed)) u;
+}__attribute__ ((packed));
+
+#endif
+
+
+#ifdef PLATFORM_WINDOWS
+
+#pragma pack(1)
+
+struct ieee80211_mgmt {
+       u16 frame_control;
+       u16 duration;
+       u8 da[6];
+       u8 sa[6];
+       u8 bssid[6];
+       u16 seq_ctrl;
+       union {
+               struct {
+                       u16 auth_alg;
+                       u16 auth_transaction;
+                       u16 status_code;
+                       /* possibly followed by Challenge text */
+                       u8 variable[0];
+               }  auth;
+               struct {
+                       u16 reason_code;
+               }  deauth;
+               struct {
+                       u16 capab_info;
+                       u16 listen_interval;
+                       /* followed by SSID and Supported rates */
+                       u8 variable[0];
+               }  assoc_req;
+               struct {
+                       u16 capab_info;
+                       u16 status_code;
+                       u16 aid;
+                       /* followed by Supported rates */
+                       u8 variable[0];
+               }  assoc_resp, reassoc_resp;
+               struct {
+                       u16 capab_info;
+                       u16 listen_interval;
+                       u8 current_ap[6];
+                       /* followed by SSID and Supported rates */
+                       u8 variable[0];
+               }  reassoc_req;
+               struct {
+                       u16 reason_code;
+               }  disassoc;
+#if 0
+               struct {
+                       __le64 timestamp;
+                       u16 beacon_int;
+                       u16 capab_info;
+                       /* followed by some of SSID, Supported rates,
+                        * FH Params, DS Params, CF Params, IBSS Params, TIM */
+                       u8 variable[0];
+               }  beacon;
+               struct {
+                       /* only variable items: SSID, Supported rates */
+                       u8 variable[0];
+               }  probe_req;
+
+               struct {
+                       __le64 timestamp;
+                       u16 beacon_int;
+                       u16 capab_info;
+                       /* followed by some of SSID, Supported rates,
+                        * FH Params, DS Params, CF Params, IBSS Params */
+                       u8 variable[0];
+               }  probe_resp;
+#endif
+               struct {
+                       u8 category;
+                       union {
+                               struct {
+                                       u8 action_code;
+                                       u8 dialog_token;
+                                       u8 status_code;
+                                       u8 variable[0];
+                               }  wme_action;
+/*
+                               struct{
+                                       u8 action_code;
+                                       u8 element_id;
+                                       u8 length;
+                                       struct ieee80211_channel_sw_ie sw_elem;
+                               }  chan_switch;
+                               struct{
+                                       u8 action_code;
+                                       u8 dialog_token;
+                                       u8 element_id;
+                                       u8 length;
+                                       struct ieee80211_msrment_ie msr_elem;
+                               }  measurement;
+*/
+                               struct{
+                                       u8 action_code;
+                                       u8 dialog_token;
+                                       u16 capab;
+                                       u16 timeout;
+                                       u16 start_seq_num;
+                               }  addba_req;
+                               struct{
+                                       u8 action_code;
+                                       u8 dialog_token;
+                                       u16 status;
+                                       u16 capab;
+                                       u16 timeout;
+                               }  addba_resp;
+                               struct{
+                                       u8 action_code;
+                                       u16 params;
+                                       u16 reason_code;
+                               }  delba;
+                               struct{
+                                       u8 action_code;
+                                       /* capab_info for open and confirm,
+                                        * reason for close
+                                        */
+                                       u16 aux;
+                                       /* Followed in plink_confirm by status
+                                        * code, AID and supported rates,
+                                        * and directly by supported rates in
+                                        * plink_open and plink_close
+                                        */
+                                       u8 variable[0];
+                               }  plink_action;
+                               struct{
+                                       u8 action_code;
+                                       u8 variable[0];
+                               }  mesh_action;
+                       } u;
+               }  action;
+       } u;
+} ;
+
+#pragma pack()
+
+#endif
+
+/* mgmt header + 1 byte category code */
+#define IEEE80211_MIN_ACTION_SIZE FIELD_OFFSET(struct ieee80211_mgmt, u.action.u)
+
+
+
+#endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/if_ether.h b/drivers/net/wireless/realtek/rtl8192cu/include/if_ether.h
new file mode 100644 (file)
index 0000000..c81c536
--- /dev/null
@@ -0,0 +1,112 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+
+#ifndef _LINUX_IF_ETHER_H
+#define _LINUX_IF_ETHER_H
+
+/*
+ *     IEEE 802.3 Ethernet magic constants.  The frame sizes omit the preamble
+ *     and FCS/CRC (frame check sequence).
+ */
+
+#define ETH_ALEN       6               /* Octets in one ethernet addr   */
+#define ETH_HLEN       14              /* Total octets in header.       */
+#define ETH_ZLEN       60              /* Min. octets in frame sans FCS */
+#define ETH_DATA_LEN   1500            /* Max. octets in payload        */
+#define ETH_FRAME_LEN  1514            /* Max. octets in frame sans FCS */
+
+/*
+ *     These are the defined Ethernet Protocol ID's.
+ */
+
+#define ETH_P_LOOP     0x0060          /* Ethernet Loopback packet     */
+#define ETH_P_PUP      0x0200          /* Xerox PUP packet             */
+#define ETH_P_PUPAT    0x0201          /* Xerox PUP Addr Trans packet  */
+#define ETH_P_IP       0x0800          /* Internet Protocol packet     */
+#define ETH_P_X25      0x0805          /* CCITT X.25                   */
+#define ETH_P_ARP      0x0806          /* Address Resolution packet    */
+#define        ETH_P_BPQ       0x08FF          /* G8BPQ AX.25 Ethernet Packet  [ NOT AN OFFICIALLY REGISTERED ID ] */
+#define ETH_P_IEEEPUP  0x0a00          /* Xerox IEEE802.3 PUP packet */
+#define ETH_P_IEEEPUPAT        0x0a01          /* Xerox IEEE802.3 PUP Addr Trans packet */
+#define ETH_P_DEC       0x6000          /* DEC Assigned proto           */
+#define ETH_P_DNA_DL    0x6001          /* DEC DNA Dump/Load            */
+#define ETH_P_DNA_RC    0x6002          /* DEC DNA Remote Console       */
+#define ETH_P_DNA_RT    0x6003          /* DEC DNA Routing              */
+#define ETH_P_LAT       0x6004          /* DEC LAT                      */
+#define ETH_P_DIAG      0x6005          /* DEC Diagnostics              */
+#define ETH_P_CUST      0x6006          /* DEC Customer use             */
+#define ETH_P_SCA       0x6007          /* DEC Systems Comms Arch       */
+#define ETH_P_RARP      0x8035         /* Reverse Addr Res packet      */
+#define ETH_P_ATALK    0x809B          /* Appletalk DDP                */
+#define ETH_P_AARP     0x80F3          /* Appletalk AARP               */
+#define ETH_P_8021Q    0x8100          /* 802.1Q VLAN Extended Header  */
+#define ETH_P_IPX      0x8137          /* IPX over DIX                 */
+#define ETH_P_IPV6     0x86DD          /* IPv6 over bluebook           */
+#define ETH_P_PPP_DISC 0x8863          /* PPPoE discovery messages     */
+#define ETH_P_PPP_SES  0x8864          /* PPPoE session messages       */
+#define ETH_P_ATMMPOA  0x884c          /* MultiProtocol Over ATM       */
+#define ETH_P_ATMFATE  0x8884          /* Frame-based ATM Transport
+                                        * over Ethernet
+                                        */
+
+/*
+ *     Non DIX types. Won't clash for 1500 types.
+ */
+
+#define ETH_P_802_3    0x0001          /* Dummy type for 802.3 frames  */
+#define ETH_P_AX25     0x0002          /* Dummy protocol id for AX.25  */
+#define ETH_P_ALL      0x0003          /* Every packet (be careful!!!) */
+#define ETH_P_802_2    0x0004          /* 802.2 frames                 */
+#define ETH_P_SNAP     0x0005          /* Internal only                */
+#define ETH_P_DDCMP     0x0006          /* DEC DDCMP: Internal only     */
+#define ETH_P_WAN_PPP   0x0007          /* Dummy type for WAN PPP frames*/
+#define ETH_P_PPP_MP    0x0008          /* Dummy type for PPP MP frames */
+#define ETH_P_LOCALTALK 0x0009         /* Localtalk pseudo type        */
+#define ETH_P_PPPTALK  0x0010          /* Dummy type for Atalk over PPP*/
+#define ETH_P_TR_802_2 0x0011          /* 802.2 frames                 */
+#define ETH_P_MOBITEX  0x0015          /* Mobitex (kaz@cafe.net)       */
+#define ETH_P_CONTROL  0x0016          /* Card specific control frames */
+#define ETH_P_IRDA     0x0017          /* Linux-IrDA                   */
+#define ETH_P_ECONET   0x0018          /* Acorn Econet                 */
+
+/*
+ *     This is an Ethernet frame header.
+ */
+
+struct ethhdr
+{
+       unsigned char   h_dest[ETH_ALEN];       /* destination eth addr */
+       unsigned char   h_source[ETH_ALEN];     /* source ether addr    */
+       unsigned short  h_proto;                /* packet type ID field */
+};
+
+struct _vlan {
+   unsigned short       h_vlan_TCI;                // Encapsulates priority and VLAN ID
+   unsigned short       h_vlan_encapsulated_proto;
+};
+
+
+
+#define get_vlan_id(pvlan) ((ntohs((unsigned short )pvlan->h_vlan_TCI)) & 0xfff)
+#define get_vlan_priority(pvlan) ((ntohs((unsigned short )pvlan->h_vlan_TCI))>>13)
+#define get_vlan_encap_proto(pvlan) (ntohs((unsigned short )pvlan->h_vlan_encapsulated_proto))
+
+
+#endif /* _LINUX_IF_ETHER_H */
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/ioctl_cfg80211.h b/drivers/net/wireless/realtek/rtl8192cu/include/ioctl_cfg80211.h
new file mode 100644 (file)
index 0000000..b2b2e97
--- /dev/null
@@ -0,0 +1,179 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __IOCTL_CFG80211_H__
+#define __IOCTL_CFG80211_H__
+
+#if defined(CONFIG_IOCTL_CFG80211) && !defined(CONFIG_CFG80211) && !defined(CONFIG_CFG80211_MODULE)
+       #error "Can't define CONFIG_IOCTL_CFG80211 because neither CONFIG_CFG80211 nor CONFIG_CFG80211_MODULE is defined in kernel"
+#endif
+#if defined(CONFIG_IOCTL_CFG80211) && LINUX_VERSION_CODE < KERNEL_VERSION(2,6,35)
+       #error "We haven't verify our cfg80211 solution below kernel version 2.6.35"
+#endif
+
+#if defined(RTW_USE_CFG80211_STA_EVENT)
+       #undef CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER
+#endif
+
+struct rtw_wdev_invit_info {
+       u8 state; /* 0: req, 1:rep */
+       u8 peer_mac[ETH_ALEN];
+       u8 active;
+       u8 token;
+       u8 flags;
+       u8 status;
+       u8 req_op_ch;
+       u8 rsp_op_ch;
+};
+
+#define rtw_wdev_invit_info_init(invit_info) \
+       do { \
+               (invit_info)->state = 0xff; \
+               _rtw_memset((invit_info)->peer_mac, 0, ETH_ALEN); \
+               (invit_info)->active = 0xff; \
+               (invit_info)->token = 0; \
+               (invit_info)->flags = 0x00; \
+               (invit_info)->status = 0xff; \
+               (invit_info)->req_op_ch = 0; \
+               (invit_info)->rsp_op_ch = 0; \
+       } while (0)
+
+struct rtw_wdev_nego_info {
+       u8 state; /* 0: req, 1:rep, 3:conf */
+       u8 peer_mac[ETH_ALEN];
+       u8 active;
+       u8 token;
+       u8 status;
+       u8 req_intent;
+       u8 req_op_ch;
+       u8 req_listen_ch;
+       u8 rsp_intent;
+       u8 rsp_op_ch;
+       u8 conf_op_ch;
+};
+
+#define rtw_wdev_nego_info_init(nego_info) \
+       do { \
+               (nego_info)->state = 0xff; \
+               _rtw_memset((nego_info)->peer_mac, 0, ETH_ALEN); \
+               (nego_info)->active = 0xff; \
+               (nego_info)->token = 0; \
+               (nego_info)->status = 0xff; \
+               (nego_info)->req_intent = 0xff; \
+               (nego_info)->req_op_ch = 0; \
+               (nego_info)->req_listen_ch = 0; \
+               (nego_info)->rsp_intent = 0xff; \
+               (nego_info)->rsp_op_ch = 0; \
+               (nego_info)->conf_op_ch = 0; \
+       } while (0)
+
+struct rtw_wdev_priv
+{
+       struct wireless_dev *rtw_wdev;
+
+       _adapter *padapter;
+
+       struct cfg80211_scan_request *scan_request;
+       _lock scan_req_lock;
+
+       struct net_device *pmon_ndev;//for monitor interface
+       char ifname_mon[IFNAMSIZ + 1]; //interface name for monitor interface
+
+       u8 p2p_enabled;
+
+       u8 provdisc_req_issued;
+
+       struct rtw_wdev_invit_info invit_info;
+       struct rtw_wdev_nego_info nego_info;
+
+       u8 bandroid_scan;
+       bool block;
+       bool power_mgmt;
+
+#ifdef CONFIG_CONCURRENT_MODE
+       ATOMIC_T ro_ch_to;
+       ATOMIC_T switch_ch_to;
+#endif
+
+};
+
+#define wdev_to_priv(w) ((struct rtw_wdev_priv *)(wdev_priv(w)))
+
+#define wiphy_to_adapter(x) (_adapter *)(((struct rtw_wdev_priv*)wiphy_priv(x))->padapter)
+
+#define wiphy_to_wdev(x) (struct wireless_dev *)(((struct rtw_wdev_priv*)wiphy_priv(x))->rtw_wdev)
+
+int rtw_wdev_alloc(_adapter *padapter, struct device *dev);
+void rtw_wdev_free(struct wireless_dev *wdev);
+void rtw_wdev_unregister(struct wireless_dev *wdev);
+
+void rtw_cfg80211_init_wiphy(_adapter *padapter);
+
+void rtw_cfg80211_surveydone_event_callback(_adapter *padapter);
+int rtw_cfg80211_check_bss(_adapter *padapter);
+void rtw_cfg80211_indicate_connect(_adapter *padapter);
+void rtw_cfg80211_indicate_disconnect(_adapter *padapter);
+void rtw_cfg80211_indicate_scan_done(struct rtw_wdev_priv *pwdev_priv, bool aborted);
+
+#ifdef CONFIG_AP_MODE
+void rtw_cfg80211_indicate_sta_assoc(_adapter *padapter, u8 *pmgmt_frame, uint frame_len);
+void rtw_cfg80211_indicate_sta_disassoc(_adapter *padapter, unsigned char *da, unsigned short reason);
+#endif //CONFIG_AP_MODE
+
+void rtw_cfg80211_issue_p2p_provision_request(_adapter *padapter, const u8 *buf, size_t len);
+void rtw_cfg80211_rx_p2p_action_public(_adapter *padapter, u8 *pmgmt_frame, uint frame_len);
+void rtw_cfg80211_rx_action_p2p(_adapter *padapter, u8 *pmgmt_frame, uint frame_len);
+void rtw_cfg80211_rx_action(_adapter *adapter, u8 *frame, uint frame_len, const char*msg);
+
+int rtw_cfg80211_set_mgnt_wpsp2pie(struct net_device *net, char *buf, int len, int type);
+
+bool rtw_cfg80211_pwr_mgmt(_adapter *adapter);
+
+#if (LINUX_VERSION_CODE < KERNEL_VERSION(3,4,0))  && !defined(COMPAT_KERNEL_RELEASE)
+#define rtw_cfg80211_rx_mgmt(adapter, freq, sig_dbm, buf, len, gfp) cfg80211_rx_mgmt((adapter)->pnetdev, freq, buf, len, gfp)
+#elif (LINUX_VERSION_CODE < KERNEL_VERSION(3,6,0))
+#define rtw_cfg80211_rx_mgmt(adapter, freq, sig_dbm, buf, len, gfp) cfg80211_rx_mgmt((adapter)->pnetdev, freq, sig_dbm, buf, len, gfp)
+#else
+#define rtw_cfg80211_rx_mgmt(adapter, freq, sig_dbm, buf, len, gfp) cfg80211_rx_mgmt((adapter)->rtw_wdev, freq, sig_dbm, buf, len, gfp)
+#endif
+
+#if (LINUX_VERSION_CODE < KERNEL_VERSION(3,4,0))  && !defined(COMPAT_KERNEL_RELEASE)
+#define rtw_cfg80211_send_rx_assoc(adapter, bss, buf, len) cfg80211_send_rx_assoc((adapter)->pnetdev, buf, len)
+#else
+#define rtw_cfg80211_send_rx_assoc(adapter, bss, buf, len) cfg80211_send_rx_assoc((adapter)->pnetdev, bss, buf, len)
+#endif
+
+#if (LINUX_VERSION_CODE < KERNEL_VERSION(3,6,0))
+#define rtw_cfg80211_mgmt_tx_status(adapter, cookie, buf, len, ack, gfp) cfg80211_mgmt_tx_status((adapter)->pnetdev, cookie, buf, len, ack, gfp)
+#else
+#define rtw_cfg80211_mgmt_tx_status(adapter, cookie, buf, len, ack, gfp) cfg80211_mgmt_tx_status((adapter)->rtw_wdev, cookie, buf, len, ack, gfp)
+#endif
+
+#if (LINUX_VERSION_CODE < KERNEL_VERSION(3,6,0))
+#define rtw_cfg80211_ready_on_channel(adapter, cookie, chan, channel_type, duration, gfp)  cfg80211_ready_on_channel((adapter)->pnetdev, cookie, chan, channel_type, duration, gfp)
+#define rtw_cfg80211_remain_on_channel_expired(adapter, cookie, chan, chan_type, gfp) cfg80211_remain_on_channel_expired((adapter)->pnetdev, cookie, chan, chan_type, gfp)
+#elif (LINUX_VERSION_CODE < KERNEL_VERSION(3,8,0))
+#define rtw_cfg80211_ready_on_channel(adapter, cookie, chan, channel_type, duration, gfp)  cfg80211_ready_on_channel((adapter)->rtw_wdev, cookie, chan, channel_type, duration, gfp)
+#define rtw_cfg80211_remain_on_channel_expired(adapter, cookie, chan, chan_type, gfp) cfg80211_remain_on_channel_expired((adapter)->rtw_wdev, cookie, chan, chan_type, gfp)
+#else
+#define rtw_cfg80211_ready_on_channel(adapter, cookie, chan, channel_type, duration, gfp)  cfg80211_ready_on_channel((adapter)->rtw_wdev, cookie, chan, duration, gfp)
+#define rtw_cfg80211_remain_on_channel_expired(adapter, cookie, chan, chan_type, gfp) cfg80211_remain_on_channel_expired((adapter)->rtw_wdev, cookie, chan, gfp)
+#endif
+
+#endif //__IOCTL_CFG80211_H__
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/ip.h b/drivers/net/wireless/realtek/rtl8192cu/include/ip.h
new file mode 100644 (file)
index 0000000..2c3d2f3
--- /dev/null
@@ -0,0 +1,141 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef _LINUX_IP_H
+#define _LINUX_IP_H
+#include <rtw_byteorder.h>
+
+/* SOL_IP socket options */
+
+#define IPTOS_TOS_MASK         0x1E
+#define IPTOS_TOS(tos)         ((tos)&IPTOS_TOS_MASK)
+#define        IPTOS_LOWDELAY          0x10
+#define        IPTOS_THROUGHPUT        0x08
+#define        IPTOS_RELIABILITY       0x04
+#define        IPTOS_MINCOST           0x02
+
+#define IPTOS_PREC_MASK                0xE0
+#define IPTOS_PREC(tos)                ((tos)&IPTOS_PREC_MASK)
+#define IPTOS_PREC_NETCONTROL           0xe0
+#define IPTOS_PREC_INTERNETCONTROL      0xc0
+#define IPTOS_PREC_CRITIC_ECP           0xa0
+#define IPTOS_PREC_FLASHOVERRIDE        0x80
+#define IPTOS_PREC_FLASH                0x60
+#define IPTOS_PREC_IMMEDIATE            0x40
+#define IPTOS_PREC_PRIORITY             0x20
+#define IPTOS_PREC_ROUTINE              0x00
+
+
+/* IP options */
+#define IPOPT_COPY             0x80
+#define IPOPT_CLASS_MASK       0x60
+#define IPOPT_NUMBER_MASK      0x1f
+
+#define        IPOPT_COPIED(o)         ((o)&IPOPT_COPY)
+#define        IPOPT_CLASS(o)          ((o)&IPOPT_CLASS_MASK)
+#define        IPOPT_NUMBER(o)         ((o)&IPOPT_NUMBER_MASK)
+
+#define        IPOPT_CONTROL           0x00
+#define        IPOPT_RESERVED1         0x20
+#define        IPOPT_MEASUREMENT       0x40
+#define        IPOPT_RESERVED2         0x60
+
+#define IPOPT_END      (0 |IPOPT_CONTROL)
+#define IPOPT_NOOP     (1 |IPOPT_CONTROL)
+#define IPOPT_SEC      (2 |IPOPT_CONTROL|IPOPT_COPY)
+#define IPOPT_LSRR     (3 |IPOPT_CONTROL|IPOPT_COPY)
+#define IPOPT_TIMESTAMP        (4 |IPOPT_MEASUREMENT)
+#define IPOPT_RR       (7 |IPOPT_CONTROL)
+#define IPOPT_SID      (8 |IPOPT_CONTROL|IPOPT_COPY)
+#define IPOPT_SSRR     (9 |IPOPT_CONTROL|IPOPT_COPY)
+#define IPOPT_RA       (20|IPOPT_CONTROL|IPOPT_COPY)
+
+#define IPVERSION      4
+#define MAXTTL         255
+#define IPDEFTTL       64
+
+/* struct timestamp, struct route and MAX_ROUTES are removed.
+
+   REASONS: it is clear that nobody used them because:
+   - MAX_ROUTES value was wrong.
+   - "struct route" was wrong.
+   - "struct timestamp" had fatally misaligned bitfields and was completely unusable.
+ */
+
+#define IPOPT_OPTVAL 0
+#define IPOPT_OLEN   1
+#define IPOPT_OFFSET 2
+#define IPOPT_MINOFF 4
+#define MAX_IPOPTLEN 40
+#define IPOPT_NOP IPOPT_NOOP
+#define IPOPT_EOL IPOPT_END
+#define IPOPT_TS  IPOPT_TIMESTAMP
+
+#define        IPOPT_TS_TSONLY         0               /* timestamps only */
+#define        IPOPT_TS_TSANDADDR      1               /* timestamps and addresses */
+#define        IPOPT_TS_PRESPEC        3               /* specified modules only */
+
+#ifdef PLATFORM_LINUX
+
+struct ip_options {
+  __u32                faddr;                          /* Saved first hop address */
+  unsigned char        optlen;
+  unsigned char srr;
+  unsigned char rr;
+  unsigned char ts;
+  unsigned char is_setbyuser:1,                        /* Set by setsockopt?                   */
+                is_data:1,                     /* Options in __data, rather than skb   */
+                is_strictroute:1,              /* Strict source route                  */
+                srr_is_hit:1,                  /* Packet destination addr was our one  */
+                is_changed:1,                  /* IP checksum more not valid           */
+                rr_needaddr:1,                 /* Need to record addr of outgoing dev  */
+                ts_needtime:1,                 /* Need to record timestamp             */
+                ts_needaddr:1;                 /* Need to record addr of outgoing dev  */
+  unsigned char router_alert;
+  unsigned char __pad1;
+  unsigned char __pad2;
+  unsigned char __data[0];
+};
+
+#define optlength(opt) (sizeof(struct ip_options) + opt->optlen)
+#endif
+
+struct iphdr {
+#if defined(__LITTLE_ENDIAN_BITFIELD)
+       __u8    ihl:4,
+               version:4;
+#elif defined (__BIG_ENDIAN_BITFIELD)
+       __u8    version:4,
+               ihl:4;
+#else
+#error "Please fix <asm/byteorder.h>"
+#endif
+       __u8    tos;
+       __u16   tot_len;
+       __u16   id;
+       __u16   frag_off;
+       __u8    ttl;
+       __u8    protocol;
+       __u16   check;
+       __u32   saddr;
+       __u32   daddr;
+       /*The options start here. */
+};
+
+#endif /* _LINUX_IP_H */
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/linux/wireless.h b/drivers/net/wireless/realtek/rtl8192cu/include/linux/wireless.h
new file mode 100644 (file)
index 0000000..036fc32
--- /dev/null
@@ -0,0 +1,90 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+
+#ifndef _LINUX_WIRELESS_H
+#define _LINUX_WIRELESS_H
+
+/***************************** INCLUDES *****************************/
+
+#if 0
+#include <linux/types.h>               /* for __u* and __s* typedefs */
+#include <linux/socket.h>              /* for "struct sockaddr" et al  */
+#include <linux/if.h>                  /* for IFNAMSIZ and co... */
+#else
+#define __user
+//typedef uint16_t     __u16;
+#include <sys/socket.h>                        /* for "struct sockaddr" et al  */
+#include <net/if.h>                    /* for IFNAMSIZ and co... */
+#endif
+
+/****************************** TYPES ******************************/
+
+/* --------------------------- SUBTYPES --------------------------- */
+/*
+ *     For all data larger than 16 octets, we need to use a
+ *     pointer to memory allocated in user space.
+ */
+struct iw_point
+{
+  void __user  *pointer;       /* Pointer to the data  (in user space) */
+  __u16                length;         /* number of fields or size in bytes */
+  __u16                flags;          /* Optional params */
+};
+
+
+/* ------------------------ IOCTL REQUEST ------------------------ */
+/*
+ * This structure defines the payload of an ioctl, and is used
+ * below.
+ *
+ * Note that this structure should fit on the memory footprint
+ * of iwreq (which is the same as ifreq), which mean a max size of
+ * 16 octets = 128 bits. Warning, pointers might be 64 bits wide...
+ * You should check this when increasing the structures defined
+ * above in this file...
+ */
+union  iwreq_data
+{
+       /* Config - generic */
+       char            name[IFNAMSIZ];
+       /* Name : used to verify the presence of  wireless extensions.
+        * Name of the protocol/provider... */
+
+       struct iw_point data;           /* Other large parameters */
+};
+
+/*
+ * The structure to exchange data for ioctl.
+ * This structure is the same as 'struct ifreq', but (re)defined for
+ * convenience...
+ * Do I need to remind you about structure size (32 octets) ?
+ */
+struct iwreq
+{
+       union
+       {
+               char    ifrn_name[IFNAMSIZ];    /* if name, e.g. "eth0" */
+       } ifr_ifrn;
+
+       /* Data part (defined just above) */
+       union   iwreq_data      u;
+};
+
+#endif /* _LINUX_WIRELESS_H */
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/mlme_osdep.h b/drivers/net/wireless/realtek/rtl8192cu/include/mlme_osdep.h
new file mode 100644 (file)
index 0000000..383fc38
--- /dev/null
@@ -0,0 +1,39 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef        __MLME_OSDEP_H_
+#define __MLME_OSDEP_H_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+
+#if defined(PLATFORM_WINDOWS) || defined(PLATFORM_MPIXEL)
+extern int time_after(u32 now, u32 old);
+#endif
+
+extern void rtw_init_mlme_timer(_adapter *padapter);
+extern void rtw_os_indicate_disconnect( _adapter *adapter );
+extern void rtw_os_indicate_connect( _adapter *adapter );
+void rtw_os_indicate_scan_done( _adapter *padapter, bool aborted);
+extern void rtw_report_sec_ie(_adapter *adapter,u8 authmode,u8 *sec_ie);
+
+void rtw_reset_securitypriv( _adapter *adapter );
+
+#endif //_MLME_OSDEP_H_
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/mp_custom_oid.h b/drivers/net/wireless/realtek/rtl8192cu/include/mp_custom_oid.h
new file mode 100644 (file)
index 0000000..9c9c69b
--- /dev/null
@@ -0,0 +1,353 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef        __CUSTOM_OID_H
+#define __CUSTOM_OID_H
+
+// by Owen
+// 0xFF818000 - 0xFF81802F             RTL8180 Mass Production Kit
+// 0xFF818500 - 0xFF81850F             RTL8185 Setup Utility
+// 0xFF818580 - 0xFF81858F             RTL8185 Phy Status Utility
+
+//
+
+// by Owen for Production Kit
+// For Production Kit with Agilent Equipments
+// in order to make our custom oids hopefully somewhat unique
+// we will use 0xFF (indicating implementation specific OID)
+//               81(first byte of non zero Realtek unique identifier)
+//               80 (second byte of non zero Realtek unique identifier)
+//               XX (the custom OID number - providing 255 possible custom oids)
+
+#define OID_RT_PRO_RESET_DUT                           0xFF818000
+#define OID_RT_PRO_SET_DATA_RATE                       0xFF818001
+#define OID_RT_PRO_START_TEST                          0xFF818002
+#define OID_RT_PRO_STOP_TEST                           0xFF818003
+#define OID_RT_PRO_SET_PREAMBLE                                0xFF818004
+#define OID_RT_PRO_SET_SCRAMBLER                       0xFF818005
+#define OID_RT_PRO_SET_FILTER_BB                       0xFF818006
+#define OID_RT_PRO_SET_MANUAL_DIVERSITY_BB             0xFF818007
+#define OID_RT_PRO_SET_CHANNEL_DIRECT_CALL             0xFF818008
+#define OID_RT_PRO_SET_SLEEP_MODE_DIRECT_CALL          0xFF818009
+#define OID_RT_PRO_SET_WAKE_MODE_DIRECT_CALL           0xFF81800A
+
+#define OID_RT_PRO_SET_TX_ANTENNA_BB                   0xFF81800D
+#define OID_RT_PRO_SET_ANTENNA_BB                      0xFF81800E
+#define OID_RT_PRO_SET_CR_SCRAMBLER                    0xFF81800F
+#define OID_RT_PRO_SET_CR_NEW_FILTER                   0xFF818010
+#define OID_RT_PRO_SET_TX_POWER_CONTROL                        0xFF818011
+#define OID_RT_PRO_SET_CR_TX_CONFIG                    0xFF818012
+#define OID_RT_PRO_GET_TX_POWER_CONTROL                        0xFF818013
+#define OID_RT_PRO_GET_CR_SIGNAL_QUALITY               0xFF818014
+#define OID_RT_PRO_SET_CR_SETPOINT                     0xFF818015
+#define OID_RT_PRO_SET_INTEGRATOR                      0xFF818016
+#define OID_RT_PRO_SET_SIGNAL_QUALITY                  0xFF818017
+#define OID_RT_PRO_GET_INTEGRATOR                      0xFF818018
+#define OID_RT_PRO_GET_SIGNAL_QUALITY                  0xFF818019
+#define OID_RT_PRO_QUERY_EEPROM_TYPE                   0xFF81801A
+#define OID_RT_PRO_WRITE_MAC_ADDRESS                   0xFF81801B
+#define OID_RT_PRO_READ_MAC_ADDRESS                    0xFF81801C
+#define OID_RT_PRO_WRITE_CIS_DATA                      0xFF81801D
+#define OID_RT_PRO_READ_CIS_DATA                       0xFF81801E
+#define OID_RT_PRO_WRITE_POWER_CONTROL                 0xFF81801F
+#define OID_RT_PRO_READ_POWER_CONTROL                  0xFF818020
+#define OID_RT_PRO_WRITE_EEPROM                                0xFF818021
+#define OID_RT_PRO_READ_EEPROM                         0xFF818022
+#define OID_RT_PRO_RESET_TX_PACKET_SENT                        0xFF818023
+#define OID_RT_PRO_QUERY_TX_PACKET_SENT                        0xFF818024
+#define OID_RT_PRO_RESET_RX_PACKET_RECEIVED            0xFF818025
+#define OID_RT_PRO_QUERY_RX_PACKET_RECEIVED            0xFF818026
+#define OID_RT_PRO_QUERY_RX_PACKET_CRC32_ERROR         0xFF818027
+#define OID_RT_PRO_QUERY_CURRENT_ADDRESS               0xFF818028
+#define OID_RT_PRO_QUERY_PERMANENT_ADDRESS             0xFF818029
+#define OID_RT_PRO_SET_PHILIPS_RF_PARAMETERS           0xFF81802A
+#define OID_RT_PRO_RECEIVE_PACKET                      0xFF81802C
+// added by Owen on 04/08/03 for Cameo's request
+#define OID_RT_PRO_WRITE_EEPROM_BYTE                   0xFF81802D
+#define OID_RT_PRO_READ_EEPROM_BYTE                    0xFF81802E
+#define OID_RT_PRO_SET_MODULATION                      0xFF81802F
+//
+
+//Sean
+#define OID_RT_DRIVER_OPTION                           0xFF818080
+#define OID_RT_RF_OFF                                  0xFF818081
+#define OID_RT_AUTH_STATUS                             0xFF818082
+
+//========================================================================
+#define OID_RT_PRO_SET_CONTINUOUS_TX                   0xFF81800B
+#define OID_RT_PRO_SET_SINGLE_CARRIER_TX               0xFF81800C
+#define OID_RT_PRO_SET_CARRIER_SUPPRESSION_TX          0xFF81802B
+#define OID_RT_PRO_SET_SINGLE_TONE_TX                  0xFF818043
+//========================================================================
+
+
+// by Owen for RTL8185 Phy Status Report Utility
+#define OID_RT_UTILITY_FALSE_ALARM_COUNTERS                            0xFF818580
+#define OID_RT_UTILITY_SELECT_DEBUG_MODE                               0xFF818581
+#define OID_RT_UTILITY_SELECT_SUBCARRIER_NUMBER                                0xFF818582
+#define OID_RT_UTILITY_GET_RSSI_STATUS                                 0xFF818583
+#define OID_RT_UTILITY_GET_FRAME_DETECTION_STATUS                      0xFF818584
+#define OID_RT_UTILITY_GET_AGC_AND_FREQUENCY_OFFSET_ESTIMATION_STATUS  0xFF818585
+#define OID_RT_UTILITY_GET_CHANNEL_ESTIMATION_STATUS                   0xFF818586
+//
+
+// by Owen on 03/09/19-03/09/22 for RTL8185
+#define OID_RT_WIRELESS_MODE                           0xFF818500
+#define OID_RT_SUPPORTED_RATES                         0xFF818501
+#define OID_RT_DESIRED_RATES                           0xFF818502
+#define OID_RT_WIRELESS_MODE_STARTING_ADHOC            0xFF818503
+//
+
+#define OID_RT_GET_CONNECT_STATE                       0xFF030001
+#define OID_RT_RESCAN                                  0xFF030002
+#define OID_RT_SET_KEY_LENGTH                          0xFF030003
+#define OID_RT_SET_DEFAULT_KEY_ID                      0xFF030004
+
+#define OID_RT_SET_CHANNEL                             0xFF010182
+#define OID_RT_SET_SNIFFER_MODE                        0xFF010183
+#define OID_RT_GET_SIGNAL_QUALITY                      0xFF010184
+#define OID_RT_GET_SMALL_PACKET_CRC                    0xFF010185
+#define OID_RT_GET_MIDDLE_PACKET_CRC                   0xFF010186
+#define OID_RT_GET_LARGE_PACKET_CRC                    0xFF010187
+#define OID_RT_GET_TX_RETRY                            0xFF010188
+#define OID_RT_GET_RX_RETRY                            0xFF010189
+#define OID_RT_PRO_SET_FW_DIG_STATE                    0xFF01018A//S
+#define OID_RT_PRO_SET_FW_RA_STATE                     0xFF01018B//S
+
+#define OID_RT_GET_RX_TOTAL_PACKET                     0xFF010190
+#define OID_RT_GET_TX_BEACON_OK                                0xFF010191
+#define OID_RT_GET_TX_BEACON_ERR                       0xFF010192
+#define OID_RT_GET_RX_ICV_ERR                          0xFF010193
+#define OID_RT_SET_ENCRYPTION_ALGORITHM                        0xFF010194
+#define OID_RT_SET_NO_AUTO_RESCAN                      0xFF010195
+#define OID_RT_GET_PREAMBLE_MODE                       0xFF010196
+#define OID_RT_GET_DRIVER_UP_DELTA_TIME                        0xFF010197
+#define OID_RT_GET_AP_IP                               0xFF010198
+#define OID_RT_GET_CHANNELPLAN                         0xFF010199
+#define OID_RT_SET_PREAMBLE_MODE                       0xFF01019A
+#define OID_RT_SET_BCN_INTVL                           0xFF01019B
+#define OID_RT_GET_RF_VENDER                           0xFF01019C
+#define OID_RT_DEDICATE_PROBE                          0xFF01019D
+#define OID_RT_PRO_RX_FILTER_PATTERN                   0xFF01019E
+
+#define OID_RT_GET_DCST_CURRENT_THRESHOLD              0xFF01019F
+
+#define OID_RT_GET_CCA_ERR                             0xFF0101A0
+#define OID_RT_GET_CCA_UPGRADE_THRESHOLD               0xFF0101A1
+#define OID_RT_GET_CCA_FALLBACK_THRESHOLD              0xFF0101A2
+
+#define OID_RT_GET_CCA_UPGRADE_EVALUATE_TIMES          0xFF0101A3
+#define OID_RT_GET_CCA_FALLBACK_EVALUATE_TIMES         0xFF0101A4
+
+// by Owen on 03/31/03 for Cameo's request
+#define OID_RT_SET_RATE_ADAPTIVE                       0xFF0101A5
+//
+#define OID_RT_GET_DCST_EVALUATE_PERIOD                        0xFF0101A5
+#define OID_RT_GET_DCST_TIME_UNIT_INDEX                        0xFF0101A6
+#define OID_RT_GET_TOTAL_TX_BYTES                      0xFF0101A7
+#define OID_RT_GET_TOTAL_RX_BYTES                      0xFF0101A8
+#define OID_RT_CURRENT_TX_POWER_LEVEL                  0xFF0101A9
+#define OID_RT_GET_ENC_KEY_MISMATCH_COUNT              0xFF0101AA
+#define OID_RT_GET_ENC_KEY_MATCH_COUNT                 0xFF0101AB
+#define OID_RT_GET_CHANNEL                             0xFF0101AC
+
+#define OID_RT_SET_CHANNELPLAN                         0xFF0101AD
+#define OID_RT_GET_HARDWARE_RADIO_OFF                  0xFF0101AE
+#define OID_RT_CHANNELPLAN_BY_COUNTRY                  0xFF0101AF
+#define OID_RT_SCAN_AVAILABLE_BSSID                    0xFF0101B0
+#define OID_RT_GET_HARDWARE_VERSION                    0xFF0101B1
+#define OID_RT_GET_IS_ROAMING                          0xFF0101B2
+#define OID_RT_GET_IS_PRIVACY                          0xFF0101B3
+#define OID_RT_GET_KEY_MISMATCH                                0xFF0101B4
+#define OID_RT_SET_RSSI_ROAM_TRAFFIC_TH                        0xFF0101B5
+#define OID_RT_SET_RSSI_ROAM_SIGNAL_TH                 0xFF0101B6
+#define OID_RT_RESET_LOG                               0xFF0101B7
+#define OID_RT_GET_LOG                                 0xFF0101B8
+#define OID_RT_SET_INDICATE_HIDDEN_AP                  0xFF0101B9
+#define OID_RT_GET_HEADER_FAIL                         0xFF0101BA
+#define OID_RT_SUPPORTED_WIRELESS_MODE                 0xFF0101BB
+#define OID_RT_GET_CHANNEL_LIST                                0xFF0101BC
+#define OID_RT_GET_SCAN_IN_PROGRESS                    0xFF0101BD
+#define OID_RT_GET_TX_INFO                             0xFF0101BE
+#define OID_RT_RF_READ_WRITE_OFFSET                    0xFF0101BF
+#define OID_RT_RF_READ_WRITE                           0xFF0101C0
+
+// For Netgear request. 2005.01.13, by rcnjko.
+#define OID_RT_FORCED_DATA_RATE                                0xFF0101C1
+#define OID_RT_WIRELESS_MODE_FOR_SCAN_LIST             0xFF0101C2
+// For Netgear request. 2005.02.17, by rcnjko.
+#define OID_RT_GET_BSS_WIRELESS_MODE                   0xFF0101C3
+// For AZ project. 2005.06.27, by rcnjko.
+#define OID_RT_SCAN_WITH_MAGIC_PACKET                  0xFF0101C4
+
+// Vincent 8185MP
+#define OID_RT_PRO_RX_FILTER                           0xFF0111C0
+
+//Andy TEST
+//#define OID_RT_PRO_WRITE_REGISTRY                    0xFF0111C1
+//#define OID_RT_PRO_READ_REGISTRY                     0xFF0111C2
+#define OID_CE_USB_WRITE_REGISTRY                      0xFF0111C1
+#define OID_CE_USB_READ_REGISTRY                       0xFF0111C2
+
+
+#define OID_RT_PRO_SET_INITIAL_GAIN                    0xFF0111C3
+#define OID_RT_PRO_SET_BB_RF_STANDBY_MODE              0xFF0111C4
+#define OID_RT_PRO_SET_BB_RF_SHUTDOWN_MODE             0xFF0111C5
+#define OID_RT_PRO_SET_TX_CHARGE_PUMP                  0xFF0111C6
+#define OID_RT_PRO_SET_RX_CHARGE_PUMP                  0xFF0111C7
+#define OID_RT_PRO_RF_WRITE_REGISTRY                   0xFF0111C8
+#define OID_RT_PRO_RF_READ_REGISTRY                    0xFF0111C9
+#define OID_RT_PRO_QUERY_RF_TYPE                       0xFF0111CA
+
+// AP OID
+#define OID_RT_AP_GET_ASSOCIATED_STATION_LIST          0xFF010300
+#define OID_RT_AP_GET_CURRENT_TIME_STAMP               0xFF010301
+#define OID_RT_AP_SWITCH_INTO_AP_MODE                  0xFF010302
+#define OID_RT_AP_SET_DTIM_PERIOD                      0xFF010303
+#define OID_RT_AP_SUPPORTED                            0xFF010304      // Determine if driver supports AP mode. 2004.08.27, by rcnjko.
+#define OID_RT_AP_SET_PASSPHRASE                       0xFF010305      // Set WPA-PSK passphrase into authenticator. 2005.07.08, byrcnjko.
+
+// 8187MP. 2004.09.06, by rcnjko.
+#define OID_RT_PRO8187_WI_POLL                         0xFF818780
+#define OID_RT_PRO_WRITE_BB_REG                                0xFF818781
+#define OID_RT_PRO_READ_BB_REG                         0xFF818782
+#define OID_RT_PRO_WRITE_RF_REG                                0xFF818783
+#define OID_RT_PRO_READ_RF_REG                         0xFF818784
+
+// Meeting House. added by Annie, 2005-07-20.
+#define OID_RT_MH_VENDER_ID                            0xFFEDC100
+
+//8711 MP OID added 20051230.
+#define OID_RT_PRO8711_JOIN_BSS                                0xFF871100//S
+
+#define OID_RT_PRO_READ_REGISTER                       0xFF871101 //Q
+#define OID_RT_PRO_WRITE_REGISTER                      0xFF871102 //S
+
+#define OID_RT_PRO_BURST_READ_REGISTER                 0xFF871103 //Q
+#define OID_RT_PRO_BURST_WRITE_REGISTER                0xFF871104 //S
+
+#define OID_RT_PRO_WRITE_TXCMD                         0xFF871105 //S
+
+#define OID_RT_PRO_READ16_EEPROM                       0xFF871106 //Q
+#define OID_RT_PRO_WRITE16_EEPROM                      0xFF871107 //S
+
+#define OID_RT_PRO_H2C_SET_COMMAND                     0xFF871108 //S
+#define OID_RT_PRO_H2C_QUERY_RESULT                    0xFF871109 //Q
+
+#define OID_RT_PRO8711_WI_POLL                         0xFF87110A //Q
+#define OID_RT_PRO8711_PKT_LOSS                                0xFF87110B //Q
+#define OID_RT_RD_ATTRIB_MEM                           0xFF87110C//Q
+#define OID_RT_WR_ATTRIB_MEM                           0xFF87110D//S
+
+
+//Method 2 for H2C/C2H
+#define OID_RT_PRO_H2C_CMD_MODE                                0xFF871110 //S
+#define OID_RT_PRO_H2C_CMD_RSP_MODE                    0xFF871111 //Q
+#define OID_RT_PRO_H2C_CMD_EVENT_MODE                  0xFF871112 //S
+#define OID_RT_PRO_WAIT_C2H_EVENT                      0xFF871113 //Q
+#define OID_RT_PRO_RW_ACCESS_PROTOCOL_TEST             0xFF871114//Q
+
+#define OID_RT_PRO_SCSI_ACCESS_TEST                    0xFF871115 //Q, S
+
+#define OID_RT_PRO_SCSI_TCPIPOFFLOAD_OUT               0xFF871116 //S
+#define OID_RT_PRO_SCSI_TCPIPOFFLOAD_IN                        0xFF871117 //Q,S
+#define OID_RT_RRO_RX_PKT_VIA_IOCTRL                   0xFF871118 //Q
+#define OID_RT_RRO_RX_PKTARRAY_VIA_IOCTRL              0xFF871119 //Q
+
+#define OID_RT_RPO_SET_PWRMGT_TEST                     0xFF87111A //S
+#define OID_RT_PRO_QRY_PWRMGT_TEST                     0XFF87111B //Q
+#define OID_RT_RPO_ASYNC_RWIO_TEST                     0xFF87111C //S
+#define OID_RT_RPO_ASYNC_RWIO_POLL                     0xFF87111D //Q
+#define OID_RT_PRO_SET_RF_INTFS                                0xFF87111E //S
+#define OID_RT_POLL_RX_STATUS                          0xFF87111F //Q
+
+#define OID_RT_PRO_CFG_DEBUG_MESSAGE                   0xFF871120 //Q,S
+#define OID_RT_PRO_SET_DATA_RATE_EX                    0xFF871121//S
+#define OID_RT_PRO_SET_BASIC_RATE                      0xFF871122//S
+#define OID_RT_PRO_READ_TSSI                           0xFF871123//S
+#define OID_RT_PRO_SET_POWER_TRACKING                  0xFF871124//S
+
+
+#define OID_RT_PRO_QRY_PWRSTATE                                0xFF871150 //Q
+#define OID_RT_PRO_SET_PWRSTATE                                0xFF871151 //S
+
+//Method 2 , using workitem
+#define OID_RT_SET_READ_REG                            0xFF871181 //S
+#define OID_RT_SET_WRITE_REG                           0xFF871182 //S
+#define OID_RT_SET_BURST_READ_REG                      0xFF871183 //S
+#define OID_RT_SET_BURST_WRITE_REG                     0xFF871184 //S
+#define OID_RT_SET_WRITE_TXCMD                         0xFF871185 //S
+#define OID_RT_SET_READ16_EEPROM                       0xFF871186 //S
+#define OID_RT_SET_WRITE16_EEPROM                      0xFF871187 //S
+#define OID_RT_QRY_POLL_WKITEM                         0xFF871188 //Q
+
+//For SDIO INTERFACE only
+#define OID_RT_PRO_SYNCPAGERW_SRAM                     0xFF8711A0 //Q, S
+#define OID_RT_PRO_871X_DRV_EXT                        0xFF8711A1
+
+//For USB INTERFACE only
+#define OID_RT_PRO_USB_VENDOR_REQ                      0xFF8711B0 //Q, S
+#define OID_RT_PRO_SCSI_AUTO_TEST                      0xFF8711B1 //S
+#define OID_RT_PRO_USB_MAC_AC_FIFO_WRITE               0xFF8711B2 //S
+#define OID_RT_PRO_USB_MAC_RX_FIFO_READ                        0xFF8711B3 //Q
+#define OID_RT_PRO_USB_MAC_RX_FIFO_POLLING             0xFF8711B4 //Q
+
+#define OID_RT_PRO_H2C_SET_RATE_TABLE                  0xFF8711FB //S
+#define OID_RT_PRO_H2C_GET_RATE_TABLE                  0xFF8711FC //S
+#define OID_RT_PRO_H2C_C2H_LBK_TEST                    0xFF8711FE
+
+#define OID_RT_PRO_ENCRYPTION_CTRL                     0xFF871200 //Q, S
+#define OID_RT_PRO_ADD_STA_INFO                                0xFF871201 //S
+#define OID_RT_PRO_DELE_STA_INFO                       0xFF871202 //S
+#define OID_RT_PRO_QUERY_DR_VARIABLE                           0xFF871203 //Q
+
+#define OID_RT_PRO_RX_PACKET_TYPE                      0xFF871204 //Q, S
+
+#define OID_RT_PRO_READ_EFUSE                          0xFF871205 //Q
+#define OID_RT_PRO_WRITE_EFUSE                         0xFF871206 //S
+#define OID_RT_PRO_RW_EFUSE_PGPKT                      0xFF871207 //Q, S
+#define OID_RT_GET_EFUSE_CURRENT_SIZE                  0xFF871208 //Q
+
+#define OID_RT_SET_BANDWIDTH                           0xFF871209 //S
+#define OID_RT_SET_CRYSTAL_CAP                         0xFF87120A //S
+
+#define OID_RT_SET_RX_PACKET_TYPE                      0xFF87120B //S
+
+#define OID_RT_GET_EFUSE_MAX_SIZE                      0xFF87120C //Q
+
+#define OID_RT_PRO_SET_TX_AGC_OFFSET                   0xFF87120D //S
+
+#define OID_RT_PRO_SET_PKT_TEST_MODE                   0xFF87120E //S
+
+#define OID_RT_PRO_FOR_EVM_TEST_SETTING                        0xFF87120F //S
+
+#define OID_RT_PRO_GET_THERMAL_METER                   0xFF871210 //Q
+
+#define OID_RT_RESET_PHY_RX_PACKET_COUNT               0xFF871211 //S
+#define OID_RT_GET_PHY_RX_PACKET_RECEIVED              0xFF871212 //Q
+#define OID_RT_GET_PHY_RX_PACKET_CRC32_ERROR           0xFF871213 //Q
+
+#define OID_RT_SET_POWER_DOWN                          0xFF871214 //S
+
+#define OID_RT_GET_POWER_MODE                          0xFF871215 //Q
+
+#define OID_RT_PRO_EFUSE                               0xFF871216 //Q, S
+#define OID_RT_PRO_EFUSE_MAP                           0xFF871217 //Q, S
+
+#endif //#ifndef       __CUSTOM_OID_H
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/nic_spec.h b/drivers/net/wireless/realtek/rtl8192cu/include/nic_spec.h
new file mode 100644 (file)
index 0000000..fba5e56
--- /dev/null
@@ -0,0 +1,46 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+
+
+#ifndef __NIC_SPEC_H__
+#define __NIC_SPEC_H__
+
+#include <drv_conf.h>
+
+#define RTL8711_MCTRL_         (0x20000)
+#define RTL8711_UART_          (0x30000)
+#define RTL8711_TIMER_         (0x40000)
+#define RTL8711_FINT_          (0x50000)
+#define RTL8711_HINT_          (0x50000)
+#define RTL8711_GPIO_          (0x60000)
+#define RTL8711_WLANCTRL_      (0x200000)
+#define RTL8711_WLANFF_                (0xe00000)
+#define RTL8711_HCICTRL_       (0x600000)
+#define RTL8711_SYSCFG_                (0x620000)
+#define RTL8711_SYSCTRL_       (0x620000)
+#define RTL8711_MCCTRL_                (0x020000)
+
+
+#include <rtl8711_regdef.h>
+
+#include <rtl8711_bitdef.h>
+
+
+#endif // __RTL8711_SPEC_H__
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/osdep_ce_service.h b/drivers/net/wireless/realtek/rtl8192cu/include/osdep_ce_service.h
new file mode 100644 (file)
index 0000000..4b4def0
--- /dev/null
@@ -0,0 +1,170 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+
+#ifndef __OSDEP_CE_SERVICE_H_
+#define __OSDEP_CE_SERVICE_H_
+
+
+#include <ndis.h>
+#include <ntddndis.h>
+
+#ifdef CONFIG_SDIO_HCI
+#include "SDCardDDK.h"
+#endif
+
+#ifdef CONFIG_USB_HCI
+#include <usbdi.h>
+#endif
+
+typedef HANDLE         _sema;
+typedef        LIST_ENTRY      _list;
+typedef NDIS_STATUS _OS_STATUS;
+
+typedef NDIS_SPIN_LOCK _lock;
+
+typedef HANDLE                 _rwlock; //Mutex
+
+typedef u32    _irqL;
+
+typedef NDIS_HANDLE  _nic_hdl;
+
+
+typedef NDIS_MINIPORT_TIMER    _timer;
+
+struct __queue {
+       LIST_ENTRY      queue;
+       _lock   lock;
+};
+
+typedef        NDIS_PACKET     _pkt;
+typedef NDIS_BUFFER    _buffer;
+typedef struct __queue _queue;
+
+typedef HANDLE         _thread_hdl_;
+typedef DWORD thread_return;
+typedef void*  thread_context;
+typedef NDIS_WORK_ITEM _workitem;
+
+#define thread_exit() ExitThread(STATUS_SUCCESS); return 0;
+
+
+#define SEMA_UPBND     (0x7FFFFFFF)   //8192
+
+__inline static _list *get_prev(_list  *list)
+{
+       return list->Blink;
+}
+
+__inline static _list *get_next(_list  *list)
+{
+       return list->Flink;
+}
+
+__inline static _list  *get_list_head(_queue   *queue)
+{
+       return (&(queue->queue));
+}
+
+#define LIST_CONTAINOR(ptr, type, member) CONTAINING_RECORD(ptr, type, member)
+
+__inline static void _enter_critical(_lock *plock, _irqL *pirqL)
+{
+       NdisAcquireSpinLock(plock);
+}
+
+__inline static void _exit_critical(_lock *plock, _irqL *pirqL)
+{
+       NdisReleaseSpinLock(plock);
+}
+
+__inline static _enter_critical_ex(_lock *plock, _irqL *pirqL)
+{
+       NdisDprAcquireSpinLock(plock);
+}
+
+__inline static _exit_critical_ex(_lock *plock, _irqL *pirqL)
+{
+       NdisDprReleaseSpinLock(plock);
+}
+
+
+__inline static void _enter_hwio_critical(_rwlock *prwlock, _irqL *pirqL)
+{
+       WaitForSingleObject(*prwlock, INFINITE );
+
+}
+
+__inline static void _exit_hwio_critical(_rwlock *prwlock, _irqL *pirqL)
+{
+       ReleaseMutex(*prwlock);
+}
+
+__inline static void rtw_list_delete(_list *plist)
+{
+       RemoveEntryList(plist);
+       InitializeListHead(plist);
+}
+
+__inline static void _init_timer(_timer *ptimer,_nic_hdl nic_hdl,void *pfunc,PVOID cntx)
+{
+       NdisMInitializeTimer(ptimer, nic_hdl, pfunc, cntx);
+}
+
+__inline static void _set_timer(_timer *ptimer,u32 delay_time)
+{
+       NdisMSetTimer(ptimer,delay_time);
+}
+
+__inline static void _cancel_timer(_timer *ptimer,u8 *bcancelled)
+{
+       NdisMCancelTimer(ptimer,bcancelled);
+}
+
+__inline static void _init_workitem(_workitem *pwork, void *pfunc, PVOID cntx)
+{
+
+       NdisInitializeWorkItem(pwork, pfunc, cntx);
+}
+
+__inline static void _set_workitem(_workitem *pwork)
+{
+       NdisScheduleWorkItem(pwork);
+}
+
+#define ATOMIC_INIT(i)  { (i) }
+
+//
+// Global Mutex: can only be used at PASSIVE level.
+//
+
+#define ACQUIRE_GLOBAL_MUTEX(_MutexCounter)                              \
+{                                                               \
+    while (NdisInterlockedIncrement((PULONG)&(_MutexCounter)) != 1)\
+    {                                                           \
+        NdisInterlockedDecrement((PULONG)&(_MutexCounter));        \
+        NdisMSleep(10000);                          \
+    }                                                           \
+}
+
+#define RELEASE_GLOBAL_MUTEX(_MutexCounter)                              \
+{                                                               \
+    NdisInterlockedDecrement((PULONG)&(_MutexCounter));              \
+}
+#endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/osdep_intf.h b/drivers/net/wireless/realtek/rtl8192cu/include/osdep_intf.h
new file mode 100644 (file)
index 0000000..10e5e4a
--- /dev/null
@@ -0,0 +1,154 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+
+#ifndef __OSDEP_INTF_H_
+#define __OSDEP_INTF_H_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+
+struct intf_priv {
+
+       u8 *intf_dev;
+       u32     max_iosz;       //USB2.0: 128, USB1.1: 64, SDIO:64
+       u32     max_xmitsz; //USB2.0: unlimited, SDIO:512
+       u32     max_recvsz; //USB2.0: unlimited, SDIO:512
+
+       volatile u8 *io_rwmem;
+       volatile u8 *allocated_io_rwmem;
+       u32     io_wsz; //unit: 4bytes
+       u32     io_rsz;//unit: 4bytes
+       u8 intf_status;
+
+       void (*_bus_io)(u8 *priv);
+
+/*
+Under Sync. IRP (SDIO/USB)
+A protection mechanism is necessary for the io_rwmem(read/write protocol)
+
+Under Async. IRP (SDIO/USB)
+The protection mechanism is through the pending queue.
+*/
+
+       _mutex ioctl_mutex;
+
+
+#ifdef PLATFORM_LINUX
+       #ifdef CONFIG_USB_HCI
+       // when in USB, IO is through interrupt in/out endpoints
+       struct usb_device       *udev;
+       PURB    piorw_urb;
+       u8 io_irp_cnt;
+       u8 bio_irp_pending;
+       _sema io_retevt;
+       _timer  io_timer;
+       u8 bio_irp_timeout;
+       u8 bio_timer_cancel;
+       #endif
+#endif
+
+#ifdef PLATFORM_OS_XP
+       #ifdef CONFIG_SDIO_HCI
+               // below is for io_rwmem...
+               PMDL pmdl;
+               PSDBUS_REQUEST_PACKET  sdrp;
+               PSDBUS_REQUEST_PACKET  recv_sdrp;
+               PSDBUS_REQUEST_PACKET  xmit_sdrp;
+
+                       PIRP            piorw_irp;
+
+       #endif
+       #ifdef CONFIG_USB_HCI
+               PURB    piorw_urb;
+               PIRP            piorw_irp;
+               u8 io_irp_cnt;
+               u8 bio_irp_pending;
+               _sema io_retevt;
+       #endif
+#endif
+
+};
+
+
+#ifdef CONFIG_R871X_TEST
+int rtw_start_pseudo_adhoc(_adapter *padapter);
+int rtw_stop_pseudo_adhoc(_adapter *padapter);
+#endif
+
+struct dvobj_priv *devobj_init(void);
+void devobj_deinit(struct dvobj_priv *pdvobj);
+
+u8 rtw_init_drv_sw(_adapter *padapter);
+u8 rtw_free_drv_sw(_adapter *padapter);
+u8 rtw_reset_drv_sw(_adapter *padapter);
+
+u32 rtw_start_drv_threads(_adapter *padapter);
+void rtw_stop_drv_threads (_adapter *padapter);
+void rtw_cancel_all_timer(_adapter *padapter);
+
+#ifdef PLATFORM_LINUX
+int rtw_ioctl(struct net_device *dev, struct ifreq *rq, int cmd);
+
+int rtw_init_netdev_name(struct net_device *pnetdev, const char *ifname);
+struct net_device *rtw_init_netdev(_adapter *padapter);
+void rtw_unregister_netdevs(struct dvobj_priv *dvobj);
+
+#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,35))
+u16 rtw_recv_select_queue(struct sk_buff *skb);
+#endif //LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,35)
+
+#ifdef CONFIG_PROC_DEBUG
+void rtw_proc_init_one(struct net_device *dev);
+void rtw_proc_remove_one(struct net_device *dev);
+#else //!CONFIG_PROC_DEBUG
+static void rtw_proc_init_one(struct net_device *dev){}
+static void rtw_proc_remove_one(struct net_device *dev){}
+#endif //!CONFIG_PROC_DEBUG
+#endif //PLATFORM_LINUX
+
+
+#ifdef PLATFORM_FREEBSD
+extern int rtw_ioctl(struct ifnet * ifp, u_long cmd, caddr_t data);
+#endif
+
+void rtw_ips_dev_unload(_adapter *padapter);
+#ifdef CONFIG_IPS
+int rtw_ips_pwr_up(_adapter *padapter);
+void rtw_ips_pwr_down(_adapter *padapter);
+#endif
+
+#ifdef CONFIG_CONCURRENT_MODE
+struct _io_ops;
+_adapter *rtw_drv_if2_init(_adapter *primary_padapter, void (*set_intf_ops)(struct _io_ops *pops));
+void rtw_drv_if2_free(_adapter *if2);
+void rtw_drv_if2_stop(_adapter *if2);
+#ifdef CONFIG_MULTI_VIR_IFACES
+struct dvobj_priv;
+_adapter *rtw_drv_add_vir_if(_adapter *primary_padapter, void (*set_intf_ops)(struct _io_ops *pops));
+void rtw_drv_stop_vir_ifaces(struct dvobj_priv *dvobj);
+void rtw_drv_free_vir_ifaces(struct dvobj_priv *dvobj);
+#endif //CONFIG_MULTI_VIR_IFACES
+#endif
+
+int rtw_drv_register_netdev(_adapter *padapter);
+void rtw_ndev_destructor(_nic_hdl ndev);
+
+#endif //_OSDEP_INTF_H_
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/osdep_service.h b/drivers/net/wireless/realtek/rtl8192cu/include/osdep_service.h
new file mode 100644 (file)
index 0000000..f1511aa
--- /dev/null
@@ -0,0 +1,1813 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __OSDEP_SERVICE_H_
+#define __OSDEP_SERVICE_H_
+
+#include <drv_conf.h>
+#include <basic_types.h>
+//#include <rtl871x_byteorder.h>
+
+#define _FAIL          0
+#define _SUCCESS       1
+#define RTW_RX_HANDLED 2
+//#define RTW_STATUS_TIMEDOUT -110
+
+#undef _TRUE
+#define _TRUE          1
+
+#undef _FALSE
+#define _FALSE         0
+
+
+#ifdef PLATFORM_FREEBSD
+#include <sys/cdefs.h>
+#include <sys/types.h>
+#include <sys/systm.h>
+#include <sys/param.h>
+#include <sys/sockio.h>
+#include <sys/sysctl.h>
+#include <sys/lock.h>
+#include <sys/mutex.h>
+#include <sys/mbuf.h>
+#include <sys/kernel.h>
+#include <sys/socket.h>
+#include <sys/systm.h>
+#include <sys/malloc.h>
+#include <sys/module.h>
+#include <sys/bus.h>
+#include <sys/endian.h>
+#include <sys/kdb.h>
+#include <sys/kthread.h>
+#include <machine/atomic.h>
+
+#include <machine/bus.h>
+#include <machine/resource.h>
+#include <sys/rman.h>
+
+#include <net/bpf.h>
+#include <net/if.h>
+#include <net/if_arp.h>
+#include <net/ethernet.h>
+#include <net/if_dl.h>
+#include <net/if_media.h>
+#include <net/if_types.h>
+#include <net/route.h>
+
+
+#include <netinet/in.h>
+#include <netinet/in_systm.h>
+#include <netinet/in_var.h>
+#include <netinet/if_ether.h>
+
+#include <net80211/ieee80211_var.h>
+#include <net80211/ieee80211_regdomain.h>
+#include <net80211/ieee80211_radiotap.h>
+#include <net80211/ieee80211_ratectl.h>
+
+#include <dev/usb/usb.h>
+#include <dev/usb/usbdi.h>
+#include "usbdevs.h"
+
+#define        USB_DEBUG_VAR rum_debug
+#include <dev/usb/usb_debug.h>
+
+#if 1 //Baron porting from linux, it's all temp solution, needs to check again
+#include <sys/sema.h>
+#include <sys/pcpu.h> /* XXX for PCPU_GET */
+//     typedef struct  semaphore _sema;
+       typedef struct  sema _sema;
+//     typedef spinlock_t      _lock;
+       typedef struct mtx      _lock;
+       typedef struct mtx              _mutex;
+       typedef struct timer_list _timer;
+       struct list_head {
+       struct list_head *next, *prev;
+       };
+       struct  __queue {
+               struct  list_head       queue;
+               _lock   lock;
+       };
+
+       //typedef       struct sk_buff  _pkt;
+       typedef struct mbuf     _pkt;
+       typedef struct mbuf     _buffer;
+
+       typedef struct  __queue _queue;
+       typedef struct  list_head       _list;
+       typedef int     _OS_STATUS;
+       //typedef u32   _irqL;
+       typedef unsigned long _irqL;
+       typedef struct  ifnet * _nic_hdl;
+
+       typedef pid_t           _thread_hdl_;
+//     typedef struct thread           _thread_hdl_;
+       typedef void            thread_return;
+       typedef void*   thread_context;
+
+       //#define thread_exit() complete_and_exit(NULL, 0)
+
+       typedef void timer_hdl_return;
+       typedef void* timer_hdl_context;
+       typedef struct work_struct _workitem;
+
+#define   KERNEL_VERSION(a,b,c) (((a) << 16) + ((b) << 8) + (c))
+/* emulate a modern version */
+#define LINUX_VERSION_CODE KERNEL_VERSION(2, 6, 35)
+
+#define WIRELESS_EXT -1
+#define HZ hz
+#define spin_lock_irqsave mtx_lock_irqsave
+#define spin_lock_bh mtx_lock_irqsave
+#define mtx_lock_irqsave(lock, x) mtx_lock(lock)//{local_irq_save((x)); mtx_lock_spin((lock));}
+//#define IFT_RTW      0xf9 //ifnet allocate type for RTW
+#define free_netdev if_free
+#define LIST_CONTAINOR(ptr, type, member) \
+        ((type *)((char *)(ptr)-(SIZE_T)(&((type *)0)->member)))
+#define container_of(p,t,n) (t*)((p)-&(((t*)0)->n))
+/*
+ * Linux timers are emulated using FreeBSD callout functions
+ * (and taskqueue functionality).
+ *
+ * Currently no timer stats functionality.
+ *
+ * See (linux_compat) processes.c
+ *
+ */
+struct timer_list {
+
+        /* FreeBSD callout related fields */
+        struct callout callout;
+
+       //timeout function
+        void (*function)(void*);
+       //argument
+        void *arg;
+
+};
+struct workqueue_struct;
+struct work_struct;
+typedef void (*work_func_t)(struct work_struct *work);
+/* Values for the state of an item of work (work_struct) */
+typedef enum work_state {
+        WORK_STATE_UNSET = 0,
+        WORK_STATE_CALLOUT_PENDING = 1,
+        WORK_STATE_TASK_PENDING = 2,
+        WORK_STATE_WORK_CANCELLED = 3
+} work_state_t;
+
+struct work_struct {
+        struct task task; /* FreeBSD task */
+        work_state_t state; /* the pending or otherwise state of work. */
+        work_func_t func;
+};
+#define spin_unlock_irqrestore mtx_unlock_irqrestore
+#define spin_unlock_bh mtx_unlock_irqrestore
+#define mtx_unlock_irqrestore(lock,x)    mtx_unlock(lock);
+extern void    _rtw_spinlock_init(_lock *plock);
+
+//modify private structure to match freebsd
+#define BITS_PER_LONG 32
+union ktime {
+       s64     tv64;
+#if BITS_PER_LONG != 64 && !defined(CONFIG_KTIME_SCALAR)
+       struct {
+#ifdef __BIG_ENDIAN
+       s32     sec, nsec;
+#else
+       s32     nsec, sec;
+#endif
+       } tv;
+#endif
+};
+#define kmemcheck_bitfield_begin(name)
+#define kmemcheck_bitfield_end(name)
+#define CHECKSUM_NONE 0
+typedef unsigned char *sk_buff_data_t;
+typedef union ktime ktime_t;           /* Kill this */
+
+void rtw_mtx_lock(_lock *plock);
+
+void rtw_mtx_unlock(_lock *plock);
+
+/**
+ *     struct sk_buff - socket buffer
+ *     @next: Next buffer in list
+ *     @prev: Previous buffer in list
+ *     @sk: Socket we are owned by
+ *     @tstamp: Time we arrived
+ *     @dev: Device we arrived on/are leaving by
+ *     @transport_header: Transport layer header
+ *     @network_header: Network layer header
+ *     @mac_header: Link layer header
+ *     @_skb_refdst: destination entry (with norefcount bit)
+ *     @sp: the security path, used for xfrm
+ *     @cb: Control buffer. Free for use by every layer. Put private vars here
+ *     @len: Length of actual data
+ *     @data_len: Data length
+ *     @mac_len: Length of link layer header
+ *     @hdr_len: writable header length of cloned skb
+ *     @csum: Checksum (must include start/offset pair)
+ *     @csum_start: Offset from skb->head where checksumming should start
+ *     @csum_offset: Offset from csum_start where checksum should be stored
+ *     @local_df: allow local fragmentation
+ *     @cloned: Head may be cloned (check refcnt to be sure)
+ *     @nohdr: Payload reference only, must not modify header
+ *     @pkt_type: Packet class
+ *     @fclone: skbuff clone status
+ *     @ip_summed: Driver fed us an IP checksum
+ *     @priority: Packet queueing priority
+ *     @users: User count - see {datagram,tcp}.c
+ *     @protocol: Packet protocol from driver
+ *     @truesize: Buffer size
+ *     @head: Head of buffer
+ *     @data: Data head pointer
+ *     @tail: Tail pointer
+ *     @end: End pointer
+ *     @destructor: Destruct function
+ *     @mark: Generic packet mark
+ *     @nfct: Associated connection, if any
+ *     @ipvs_property: skbuff is owned by ipvs
+ *     @peeked: this packet has been seen already, so stats have been
+ *             done for it, don't do them again
+ *     @nf_trace: netfilter packet trace flag
+ *     @nfctinfo: Relationship of this skb to the connection
+ *     @nfct_reasm: netfilter conntrack re-assembly pointer
+ *     @nf_bridge: Saved data about a bridged frame - see br_netfilter.c
+ *     @skb_iif: ifindex of device we arrived on
+ *     @rxhash: the packet hash computed on receive
+ *     @queue_mapping: Queue mapping for multiqueue devices
+ *     @tc_index: Traffic control index
+ *     @tc_verd: traffic control verdict
+ *     @ndisc_nodetype: router type (from link layer)
+ *     @dma_cookie: a cookie to one of several possible DMA operations
+ *             done by skb DMA functions
+ *     @secmark: security marking
+ *     @vlan_tci: vlan tag control information
+ */
+
+struct sk_buff {
+       /* These two members must be first. */
+       struct sk_buff          *next;
+       struct sk_buff          *prev;
+
+       ktime_t                 tstamp;
+
+       struct sock             *sk;
+       //struct net_device     *dev;
+       struct ifnet *dev;
+
+       /*
+        * This is the control buffer. It is free to use for every
+        * layer. Please put your private variables there. If you
+        * want to keep them across layers you have to do a skb_clone()
+        * first. This is owned by whoever has the skb queued ATM.
+        */
+       char                    cb[48] __aligned(8);
+
+       unsigned long           _skb_refdst;
+#ifdef CONFIG_XFRM
+       struct  sec_path        *sp;
+#endif
+       unsigned int            len,
+                               data_len;
+       u16                     mac_len,
+                               hdr_len;
+       union {
+               u32             csum;
+               struct {
+                       u16     csum_start;
+                       u16     csum_offset;
+               }smbol2;
+       }smbol1;
+       u32                     priority;
+       kmemcheck_bitfield_begin(flags1);
+       u8                      local_df:1,
+                               cloned:1,
+                               ip_summed:2,
+                               nohdr:1,
+                               nfctinfo:3;
+       u8                      pkt_type:3,
+                               fclone:2,
+                               ipvs_property:1,
+                               peeked:1,
+                               nf_trace:1;
+       kmemcheck_bitfield_end(flags1);
+       u16                     protocol;
+
+       void                    (*destructor)(struct sk_buff *skb);
+#if defined(CONFIG_NF_CONNTRACK) || defined(CONFIG_NF_CONNTRACK_MODULE)
+       struct nf_conntrack     *nfct;
+       struct sk_buff          *nfct_reasm;
+#endif
+#ifdef CONFIG_BRIDGE_NETFILTER
+       struct nf_bridge_info   *nf_bridge;
+#endif
+
+       int                     skb_iif;
+#ifdef CONFIG_NET_SCHED
+       u16                     tc_index;       /* traffic control index */
+#ifdef CONFIG_NET_CLS_ACT
+       u16                     tc_verd;        /* traffic control verdict */
+#endif
+#endif
+
+       u32                     rxhash;
+
+       kmemcheck_bitfield_begin(flags2);
+       u16                     queue_mapping:16;
+#ifdef CONFIG_IPV6_NDISC_NODETYPE
+       u8                      ndisc_nodetype:2,
+                               deliver_no_wcard:1;
+#else
+       u8                      deliver_no_wcard:1;
+#endif
+       kmemcheck_bitfield_end(flags2);
+
+       /* 0/14 bit hole */
+
+#ifdef CONFIG_NET_DMA
+       dma_cookie_t            dma_cookie;
+#endif
+#ifdef CONFIG_NETWORK_SECMARK
+       u32                     secmark;
+#endif
+       union {
+               u32             mark;
+               u32             dropcount;
+       }symbol3;
+
+       u16                     vlan_tci;
+
+       sk_buff_data_t          transport_header;
+       sk_buff_data_t          network_header;
+       sk_buff_data_t          mac_header;
+       /* These elements must be at the end, see alloc_skb() for details.  */
+       sk_buff_data_t          tail;
+       sk_buff_data_t          end;
+       unsigned char           *head,
+                               *data;
+       unsigned int            truesize;
+       atomic_t                users;
+};
+struct sk_buff_head {
+       /* These two members must be first. */
+       struct sk_buff  *next;
+       struct sk_buff  *prev;
+
+       u32             qlen;
+       _lock   lock;
+};
+#define skb_tail_pointer(skb)  skb->tail
+static inline unsigned char *skb_put(struct sk_buff *skb, unsigned int len)
+{
+       unsigned char *tmp = skb_tail_pointer(skb);
+       //SKB_LINEAR_ASSERT(skb);
+       skb->tail += len;
+       skb->len  += len;
+       return tmp;
+}
+
+static inline unsigned char *__skb_pull(struct sk_buff *skb, unsigned int len)
+{
+       skb->len -= len;
+       if(skb->len < skb->data_len)
+               printf("%s(),%d,error!\n",__FUNCTION__,__LINE__);
+       return skb->data += len;
+}
+static inline unsigned char *skb_pull(struct sk_buff *skb, unsigned int len)
+{
+       #ifdef PLATFORM_FREEBSD
+       return __skb_pull(skb, len);
+       #else
+       return unlikely(len > skb->len) ? NULL : __skb_pull(skb, len);
+       #endif //PLATFORM_FREEBSD
+}
+static inline u32 skb_queue_len(const struct sk_buff_head *list_)
+{
+       return list_->qlen;
+}
+static inline void __skb_insert(struct sk_buff *newsk,
+                               struct sk_buff *prev, struct sk_buff *next,
+                               struct sk_buff_head *list)
+{
+       newsk->next = next;
+       newsk->prev = prev;
+       next->prev  = prev->next = newsk;
+       list->qlen++;
+}
+static inline void __skb_queue_before(struct sk_buff_head *list,
+                                     struct sk_buff *next,
+                                     struct sk_buff *newsk)
+{
+       __skb_insert(newsk, next->prev, next, list);
+}
+static inline void skb_queue_tail(struct sk_buff_head *list,
+                                  struct sk_buff *newsk)
+{
+       mtx_lock(&list->lock);
+       __skb_queue_before(list, (struct sk_buff *)list, newsk);
+       mtx_unlock(&list->lock);
+}
+static inline struct sk_buff *skb_peek(struct sk_buff_head *list_)
+{
+       struct sk_buff *list = ((struct sk_buff *)list_)->next;
+       if (list == (struct sk_buff *)list_)
+               list = NULL;
+       return list;
+}
+static inline void __skb_unlink(struct sk_buff *skb, struct sk_buff_head *list)
+{
+       struct sk_buff *next, *prev;
+
+       list->qlen--;
+       next       = skb->next;
+       prev       = skb->prev;
+       skb->next  = skb->prev = NULL;
+       next->prev = prev;
+       prev->next = next;
+}
+
+static inline struct sk_buff *skb_dequeue(struct sk_buff_head *list)
+{
+       mtx_lock(&list->lock);
+
+       struct sk_buff *skb = skb_peek(list);
+       if (skb)
+               __skb_unlink(skb, list);
+
+       mtx_unlock(&list->lock);
+
+       return skb;
+}
+static inline void skb_reserve(struct sk_buff *skb, int len)
+{
+       skb->data += len;
+       skb->tail += len;
+}
+static inline void __skb_queue_head_init(struct sk_buff_head *list)
+{
+       list->prev = list->next = (struct sk_buff *)list;
+       list->qlen = 0;
+}
+/*
+ * This function creates a split out lock class for each invocation;
+ * this is needed for now since a whole lot of users of the skb-queue
+ * infrastructure in drivers have different locking usage (in hardirq)
+ * than the networking core (in softirq only). In the long run either the
+ * network layer or drivers should need annotation to consolidate the
+ * main types of usage into 3 classes.
+ */
+static inline void skb_queue_head_init(struct sk_buff_head *list)
+{
+       _rtw_spinlock_init(&list->lock);
+       __skb_queue_head_init(list);
+}
+unsigned long copy_from_user(void *to, const void *from, unsigned long n);
+unsigned long copy_to_user(void *to, const void *from, unsigned long n);
+struct sk_buff * dev_alloc_skb(unsigned int size);
+struct sk_buff *skb_clone(const struct sk_buff *skb);
+void dev_kfree_skb_any(struct sk_buff *skb);
+#endif //Baron porting from linux, it's all temp solution, needs to check again
+
+
+#if 1 // kenny add Linux compatibility code for Linux USB driver
+#include <dev/usb/usb_compat_linux.h>
+
+#define __init         // __attribute ((constructor))
+#define __exit         // __attribute ((destructor))
+
+/*
+ * Definitions for module_init and module_exit macros.
+ *
+ * These macros will use the SYSINIT framework to call a specified
+ * function (with no arguments) on module loading or unloading.
+ *
+ */
+
+void module_init_exit_wrapper(void *arg);
+
+#define module_init(initfn)                             \
+        SYSINIT(mod_init_ ## initfn,                    \
+                SI_SUB_KLD, SI_ORDER_FIRST,             \
+                module_init_exit_wrapper, initfn)
+
+#define module_exit(exitfn)                             \
+        SYSUNINIT(mod_exit_ ## exitfn,                  \
+                  SI_SUB_KLD, SI_ORDER_ANY,             \
+                  module_init_exit_wrapper, exitfn)
+
+/*
+ * The usb_register and usb_deregister functions are used to register
+ * usb drivers with the usb subsystem.
+ */
+int usb_register(struct usb_driver *driver);
+int usb_deregister(struct usb_driver *driver);
+
+/*
+ * usb_get_dev and usb_put_dev - increment/decrement the reference count
+ * of the usb device structure.
+ *
+ * Original body of usb_get_dev:
+ *
+ *       if (dev)
+ *               get_device(&dev->dev);
+ *       return dev;
+ *
+ * Reference counts are not currently used in this compatibility
+ * layer. So these functions will do nothing.
+ */
+static inline struct usb_device *
+usb_get_dev(struct usb_device *dev)
+{
+        return dev;
+}
+
+static inline void
+usb_put_dev(struct usb_device *dev)
+{
+        return;
+}
+
+
+// rtw_usb_compat_linux
+int rtw_usb_submit_urb(struct urb *urb, uint16_t mem_flags);
+int rtw_usb_unlink_urb(struct urb *urb);
+int rtw_usb_clear_halt(struct usb_device *dev, struct usb_host_endpoint *uhe);
+int rtw_usb_control_msg(struct usb_device *dev, struct usb_host_endpoint *uhe,
+    uint8_t request, uint8_t requesttype,
+    uint16_t value, uint16_t index, void *data,
+    uint16_t size, usb_timeout_t timeout);
+int rtw_usb_set_interface(struct usb_device *dev, uint8_t iface_no, uint8_t alt_index);
+int rtw_usb_setup_endpoint(struct usb_device *dev,
+    struct usb_host_endpoint *uhe, usb_size_t bufsize);
+struct urb *rtw_usb_alloc_urb(uint16_t iso_packets, uint16_t mem_flags);
+struct usb_host_endpoint *rtw_usb_find_host_endpoint(struct usb_device *dev, uint8_t type, uint8_t ep);
+struct usb_host_interface *rtw_usb_altnum_to_altsetting(const struct usb_interface *intf, uint8_t alt_index);
+struct usb_interface *rtw_usb_ifnum_to_if(struct usb_device *dev, uint8_t iface_no);
+void *rtw_usb_buffer_alloc(struct usb_device *dev, usb_size_t size, uint8_t *dma_addr);
+void *rtw_usbd_get_intfdata(struct usb_interface *intf);
+void rtw_usb_linux_register(void *arg);
+void rtw_usb_linux_deregister(void *arg);
+void rtw_usb_linux_free_device(struct usb_device *dev);
+void rtw_usb_buffer_free(struct usb_device *dev, usb_size_t size,
+    void *addr, uint8_t dma_addr);
+void rtw_usb_free_urb(struct urb *urb);
+void rtw_usb_init_urb(struct urb *urb);
+void rtw_usb_kill_urb(struct urb *urb);
+void rtw_usb_set_intfdata(struct usb_interface *intf, void *data);
+void rtw_usb_fill_bulk_urb(struct urb *urb, struct usb_device *udev,
+    struct usb_host_endpoint *uhe, void *buf,
+    int length, usb_complete_t callback, void *arg);
+int rtw_usb_bulk_msg(struct usb_device *udev, struct usb_host_endpoint *uhe,
+    void *data, int len, uint16_t *pactlen, usb_timeout_t timeout);
+void *usb_get_intfdata(struct usb_interface *intf);
+int usb_linux_init_endpoints(struct usb_device *udev);
+
+
+
+typedef struct urb *  PURB;
+
+typedef unsigned gfp_t;
+#define __GFP_WAIT      ((gfp_t)0x10u)  /* Can wait and reschedule? */
+#define __GFP_HIGH      ((gfp_t)0x20u)  /* Should access emergency pools? */
+#define __GFP_IO        ((gfp_t)0x40u)  /* Can start physical IO? */
+#define __GFP_FS        ((gfp_t)0x80u)  /* Can call down to low-level FS? */
+#define __GFP_COLD      ((gfp_t)0x100u) /* Cache-cold page required */
+#define __GFP_NOWARN    ((gfp_t)0x200u) /* Suppress page allocation failure warning */
+#define __GFP_REPEAT    ((gfp_t)0x400u) /* Retry the allocation.  Might fail */
+#define __GFP_NOFAIL    ((gfp_t)0x800u) /* Retry for ever.  Cannot fail */
+#define __GFP_NORETRY   ((gfp_t)0x1000u)/* Do not retry.  Might fail */
+#define __GFP_NO_GROW   ((gfp_t)0x2000u)/* Slab internal usage */
+#define __GFP_COMP      ((gfp_t)0x4000u)/* Add compound page metadata */
+#define __GFP_ZERO      ((gfp_t)0x8000u)/* Return zeroed page on success */
+#define __GFP_NOMEMALLOC ((gfp_t)0x10000u) /* Don't use emergency reserves */
+#define __GFP_HARDWALL   ((gfp_t)0x20000u) /* Enforce hardwall cpuset memory allocs */
+
+/* This equals 0, but use constants in case they ever change */
+#define GFP_NOWAIT      (GFP_ATOMIC & ~__GFP_HIGH)
+/* GFP_ATOMIC means both !wait (__GFP_WAIT not set) and use emergency pool */
+#define GFP_ATOMIC      (__GFP_HIGH)
+#define GFP_NOIO        (__GFP_WAIT)
+#define GFP_NOFS        (__GFP_WAIT | __GFP_IO)
+#define GFP_KERNEL      (__GFP_WAIT | __GFP_IO | __GFP_FS)
+#define GFP_USER        (__GFP_WAIT | __GFP_IO | __GFP_FS | __GFP_HARDWALL)
+#define GFP_HIGHUSER    (__GFP_WAIT | __GFP_IO | __GFP_FS | __GFP_HARDWALL | \
+                         __GFP_HIGHMEM)
+
+
+#endif // kenny add Linux compatibility code for Linux USB
+
+
+
+#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,24))
+       #define DMA_BIT_MASK(n) (((n) == 64) ? ~0ULL : ((1ULL<<(n))-1))
+#endif
+
+__inline static _list *get_next(_list  *list)
+{
+       return list->next;
+}
+
+__inline static _list  *get_list_head(_queue   *queue)
+{
+       return (&(queue->queue));
+}
+
+
+#define LIST_CONTAINOR(ptr, type, member) \
+        ((type *)((char *)(ptr)-(SIZE_T)(&((type *)0)->member)))
+
+
+__inline static void _enter_critical(_lock *plock, _irqL *pirqL)
+{
+       spin_lock_irqsave(plock, *pirqL);
+}
+
+__inline static void _exit_critical(_lock *plock, _irqL *pirqL)
+{
+       spin_unlock_irqrestore(plock, *pirqL);
+}
+
+__inline static void _enter_critical_ex(_lock *plock, _irqL *pirqL)
+{
+       spin_lock_irqsave(plock, *pirqL);
+}
+
+__inline static void _exit_critical_ex(_lock *plock, _irqL *pirqL)
+{
+       spin_unlock_irqrestore(plock, *pirqL);
+}
+
+__inline static void _enter_critical_bh(_lock *plock, _irqL *pirqL)
+{
+       spin_lock_bh(plock, *pirqL);
+}
+
+__inline static void _exit_critical_bh(_lock *plock, _irqL *pirqL)
+{
+       spin_unlock_bh(plock, *pirqL);
+}
+
+__inline static void _enter_critical_mutex(_mutex *pmutex, _irqL *pirqL)
+{
+
+               mtx_lock(pmutex);
+
+}
+
+
+__inline static void _exit_critical_mutex(_mutex *pmutex, _irqL *pirqL)
+{
+
+               mtx_unlock(pmutex);
+
+}
+static inline void __list_del(struct list_head * prev, struct list_head * next)
+{
+       next->prev = prev;
+       prev->next = next;
+}
+static inline void INIT_LIST_HEAD(struct list_head *list)
+{
+       list->next = list;
+       list->prev = list;
+}
+__inline static void rtw_list_delete(_list *plist)
+{
+       __list_del(plist->prev, plist->next);
+       INIT_LIST_HEAD(plist);
+}
+
+__inline static void _init_timer(_timer *ptimer,_nic_hdl padapter,void *pfunc,void* cntx)
+{
+       ptimer->function = pfunc;
+       ptimer->arg = cntx;
+       callout_init(&ptimer->callout, CALLOUT_MPSAFE);
+}
+
+__inline static void _set_timer(_timer *ptimer,u32 delay_time)
+{
+       //      mod_timer(ptimer , (jiffies+(delay_time*HZ/1000)));
+       if(ptimer->function && ptimer->arg){
+               rtw_mtx_lock(NULL);
+               callout_reset(&ptimer->callout, delay_time,ptimer->function, ptimer->arg);
+               rtw_mtx_unlock(NULL);
+       }
+}
+
+__inline static void _cancel_timer(_timer *ptimer,u8 *bcancelled)
+{
+       //      del_timer_sync(ptimer);
+       //      *bcancelled=  _TRUE;//TRUE ==1; FALSE==0
+       rtw_mtx_lock(NULL);
+       callout_drain(&ptimer->callout);
+       rtw_mtx_unlock(NULL);
+}
+
+__inline static void _init_workitem(_workitem *pwork, void *pfunc, PVOID cntx)
+{
+       printf("%s Not implement yet! \n",__FUNCTION__);
+}
+
+__inline static void _set_workitem(_workitem *pwork)
+{
+       printf("%s Not implement yet! \n",__FUNCTION__);
+//     schedule_work(pwork);
+}
+
+//
+// Global Mutex: can only be used at PASSIVE level.
+//
+
+#define ACQUIRE_GLOBAL_MUTEX(_MutexCounter)                              \
+{                                                               \
+}
+
+#define RELEASE_GLOBAL_MUTEX(_MutexCounter)                              \
+{                                                               \
+}
+
+#define ATOMIC_INIT(i)  { (i) }
+
+#endif //PLATFORM_FREEBSD
+
+
+#ifdef PLATFORM_LINUX
+       #include <linux/version.h>
+       #include <linux/spinlock.h>
+       #include <linux/compiler.h>
+       #include <linux/kernel.h>
+       #include <linux/errno.h>
+       #include <linux/init.h>
+       #include <linux/slab.h>
+       #include <linux/module.h>
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,5))
+       #include <linux/kref.h>
+#endif
+       //#include <linux/smp_lock.h>
+       #include <linux/netdevice.h>
+       #include <linux/skbuff.h>
+       #include <linux/circ_buf.h>
+       #include <asm/uaccess.h>
+       #include <asm/byteorder.h>
+       #include <asm/atomic.h>
+       #include <asm/io.h>
+#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,26))
+       #include <asm/semaphore.h>
+#else
+       #include <linux/semaphore.h>
+#endif
+       #include <linux/sem.h>
+       #include <linux/sched.h>
+       #include <linux/etherdevice.h>
+       #include <linux/wireless.h>
+       #include <net/iw_handler.h>
+       #include <linux/if_arp.h>
+       #include <linux/rtnetlink.h>
+       #include <linux/delay.h>
+       #include <linux/proc_fs.h>      // Necessary because we use the proc fs
+       #include <linux/interrupt.h>    // for struct tasklet_struct
+       #include <linux/ip.h>
+       #include <linux/kthread.h>
+
+#ifdef CONFIG_IOCTL_CFG80211
+//     #include <linux/ieee80211.h>
+        #include <net/ieee80211_radiotap.h>
+       #include <net/cfg80211.h>
+#endif //CONFIG_IOCTL_CFG80211
+
+#ifdef CONFIG_TCP_CSUM_OFFLOAD_TX
+       #include <linux/in.h>
+       #include <linux/udp.h>
+#endif
+
+#ifdef CONFIG_USB_HCI
+       #include <linux/usb.h>
+#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,21))
+       #include <linux/usb_ch9.h>
+#else
+       #include <linux/usb/ch9.h>
+#endif
+#endif
+
+#ifdef CONFIG_PCI_HCI
+       #include <linux/pci.h>
+#endif
+
+
+#ifdef CONFIG_USB_HCI
+       typedef struct urb *  PURB;
+#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,22))
+#ifdef CONFIG_USB_SUSPEND
+#define CONFIG_AUTOSUSPEND     1
+#endif
+#endif
+#endif
+
+       typedef struct  semaphore _sema;
+       typedef spinlock_t      _lock;
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
+       typedef struct mutex            _mutex;
+#else
+       typedef struct semaphore        _mutex;
+#endif
+       typedef struct timer_list _timer;
+
+       struct  __queue {
+               struct  list_head       queue;
+               _lock   lock;
+       };
+
+       typedef struct sk_buff  _pkt;
+       typedef unsigned char   _buffer;
+
+       typedef struct  __queue _queue;
+       typedef struct  list_head       _list;
+       typedef int     _OS_STATUS;
+       //typedef u32   _irqL;
+       typedef unsigned long _irqL;
+       typedef struct  net_device * _nic_hdl;
+
+       typedef void*           _thread_hdl_;
+       typedef int             thread_return;
+       typedef void*   thread_context;
+
+       #define thread_exit() complete_and_exit(NULL, 0)
+
+       typedef void timer_hdl_return;
+       typedef void* timer_hdl_context;
+       typedef struct work_struct _workitem;
+
+#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,24))
+       #define DMA_BIT_MASK(n) (((n) == 64) ? ~0ULL : ((1ULL<<(n))-1))
+#endif
+
+#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,22))
+// Porting from linux kernel, for compatible with old kernel.
+static inline unsigned char *skb_tail_pointer(const struct sk_buff *skb)
+{
+       return skb->tail;
+}
+
+static inline void skb_reset_tail_pointer(struct sk_buff *skb)
+{
+       skb->tail = skb->data;
+}
+
+static inline void skb_set_tail_pointer(struct sk_buff *skb, const int offset)
+{
+       skb->tail = skb->data + offset;
+}
+
+static inline unsigned char *skb_end_pointer(const struct sk_buff *skb)
+{
+       return skb->end;
+}
+#endif
+
+__inline static _list *get_next(_list  *list)
+{
+       return list->next;
+}
+
+__inline static _list  *get_list_head(_queue   *queue)
+{
+       return (&(queue->queue));
+}
+
+
+#define LIST_CONTAINOR(ptr, type, member) \
+        ((type *)((char *)(ptr)-(SIZE_T)(&((type *)0)->member)))
+
+
+__inline static void _enter_critical(_lock *plock, _irqL *pirqL)
+{
+       spin_lock_irqsave(plock, *pirqL);
+}
+
+__inline static void _exit_critical(_lock *plock, _irqL *pirqL)
+{
+       spin_unlock_irqrestore(plock, *pirqL);
+}
+
+__inline static void _enter_critical_ex(_lock *plock, _irqL *pirqL)
+{
+       spin_lock_irqsave(plock, *pirqL);
+}
+
+__inline static void _exit_critical_ex(_lock *plock, _irqL *pirqL)
+{
+       spin_unlock_irqrestore(plock, *pirqL);
+}
+
+__inline static void _enter_critical_bh(_lock *plock, _irqL *pirqL)
+{
+       spin_lock_bh(plock);
+}
+
+__inline static void _exit_critical_bh(_lock *plock, _irqL *pirqL)
+{
+       spin_unlock_bh(plock);
+}
+
+__inline static void _enter_critical_mutex(_mutex *pmutex, _irqL *pirqL)
+{
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
+               mutex_lock(pmutex);
+#else
+               down(pmutex);
+#endif
+}
+
+
+__inline static void _exit_critical_mutex(_mutex *pmutex, _irqL *pirqL)
+{
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
+               mutex_unlock(pmutex);
+#else
+               up(pmutex);
+#endif
+}
+
+__inline static void rtw_list_delete(_list *plist)
+{
+       list_del_init(plist);
+}
+
+__inline static void _init_timer(_timer *ptimer,_nic_hdl nic_hdl,void *pfunc,void* cntx)
+{
+       //setup_timer(ptimer, pfunc,(u32)cntx);
+       ptimer->function = pfunc;
+       ptimer->data = (unsigned long)cntx;
+       init_timer(ptimer);
+}
+
+__inline static void _set_timer(_timer *ptimer,u32 delay_time)
+{
+       mod_timer(ptimer , (jiffies+(delay_time*HZ/1000)));
+}
+
+__inline static void _cancel_timer(_timer *ptimer,u8 *bcancelled)
+{
+       del_timer_sync(ptimer);
+       *bcancelled=  _TRUE;//TRUE ==1; FALSE==0
+}
+
+#ifdef PLATFORM_LINUX
+#define RTW_TIMER_HDL_ARGS void *FunctionContext
+#elif defined(PLATFORM_OS_CE) || defined(PLATFORM_WINDOWS)
+#define RTW_TIMER_HDL_ARGS IN PVOID SystemSpecific1, IN PVOID FunctionContext, IN PVOID SystemSpecific2, IN PVOID SystemSpecific3
+#endif
+
+#define RTW_TIMER_HDL_NAME(name) rtw_##name##_timer_hdl
+#define RTW_DECLARE_TIMER_HDL(name) void RTW_TIMER_HDL_NAME(name)(RTW_TIMER_HDL_ARGS)
+
+
+__inline static void _init_workitem(_workitem *pwork, void *pfunc, PVOID cntx)
+{
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,20))
+       INIT_WORK(pwork, pfunc);
+#else
+       INIT_WORK(pwork, pfunc,pwork);
+#endif
+}
+
+__inline static void _set_workitem(_workitem *pwork)
+{
+       schedule_work(pwork);
+}
+
+__inline static void _cancel_workitem_sync(_workitem *pwork)
+{
+#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,22))
+       cancel_work_sync(pwork);
+#else
+       flush_scheduled_work();
+#endif
+}
+
+//
+// Global Mutex: can only be used at PASSIVE level.
+//
+
+#define ACQUIRE_GLOBAL_MUTEX(_MutexCounter)                              \
+{                                                               \
+       while (atomic_inc_return((atomic_t *)&(_MutexCounter)) != 1)\
+       {                                                           \
+               atomic_dec((atomic_t *)&(_MutexCounter));        \
+               msleep(10);                          \
+       }                                                           \
+}
+
+#define RELEASE_GLOBAL_MUTEX(_MutexCounter)                              \
+{                                                               \
+       atomic_dec((atomic_t *)&(_MutexCounter));        \
+}
+
+static inline int rtw_netif_queue_stopped(struct net_device *pnetdev)
+{
+#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,35))
+       return (netif_tx_queue_stopped(netdev_get_tx_queue(pnetdev, 0)) &&
+               netif_tx_queue_stopped(netdev_get_tx_queue(pnetdev, 1)) &&
+               netif_tx_queue_stopped(netdev_get_tx_queue(pnetdev, 2)) &&
+               netif_tx_queue_stopped(netdev_get_tx_queue(pnetdev, 3)) );
+#else
+       return netif_queue_stopped(pnetdev);
+#endif
+}
+
+static inline void rtw_netif_wake_queue(struct net_device *pnetdev)
+{
+#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,35))
+       netif_tx_wake_all_queues(pnetdev);
+#else
+       netif_wake_queue(pnetdev);
+#endif
+}
+
+static inline void rtw_netif_start_queue(struct net_device *pnetdev)
+{
+#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,35))
+       netif_tx_start_all_queues(pnetdev);
+#else
+       netif_start_queue(pnetdev);
+#endif
+}
+
+static inline void rtw_netif_stop_queue(struct net_device *pnetdev)
+{
+#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,35))
+       netif_tx_stop_all_queues(pnetdev);
+#else
+       netif_stop_queue(pnetdev);
+#endif
+}
+
+#endif // PLATFORM_LINUX
+
+
+#ifdef PLATFORM_OS_XP
+
+       #include <ndis.h>
+       #include <ntddk.h>
+       #include <ntddndis.h>
+       #include <ntdef.h>
+
+#ifdef CONFIG_USB_HCI
+       #include <usb.h>
+       #include <usbioctl.h>
+       #include <usbdlib.h>
+#endif
+
+       typedef KSEMAPHORE      _sema;
+       typedef LIST_ENTRY      _list;
+       typedef NDIS_STATUS _OS_STATUS;
+
+
+       typedef NDIS_SPIN_LOCK  _lock;
+
+       typedef KMUTEX                  _mutex;
+
+       typedef KIRQL   _irqL;
+
+       // USB_PIPE for WINCE , but handle can be use just integer under windows
+       typedef NDIS_HANDLE  _nic_hdl;
+
+
+       typedef NDIS_MINIPORT_TIMER    _timer;
+
+       struct  __queue {
+               LIST_ENTRY      queue;
+               _lock   lock;
+       };
+
+       typedef NDIS_PACKET     _pkt;
+       typedef NDIS_BUFFER     _buffer;
+       typedef struct  __queue _queue;
+
+       typedef PKTHREAD _thread_hdl_;
+       typedef void    thread_return;
+       typedef void* thread_context;
+
+       typedef NDIS_WORK_ITEM _workitem;
+
+       #define thread_exit() PsTerminateSystemThread(STATUS_SUCCESS);
+
+       #define HZ                      10000000
+       #define SEMA_UPBND      (0x7FFFFFFF)   //8192
+
+__inline static _list *get_next(_list  *list)
+{
+       return list->Flink;
+}
+
+__inline static _list  *get_list_head(_queue   *queue)
+{
+       return (&(queue->queue));
+}
+
+
+#define LIST_CONTAINOR(ptr, type, member) CONTAINING_RECORD(ptr, type, member)
+
+
+__inline static _enter_critical(_lock *plock, _irqL *pirqL)
+{
+       NdisAcquireSpinLock(plock);
+}
+
+__inline static _exit_critical(_lock *plock, _irqL *pirqL)
+{
+       NdisReleaseSpinLock(plock);
+}
+
+
+__inline static _enter_critical_ex(_lock *plock, _irqL *pirqL)
+{
+       NdisDprAcquireSpinLock(plock);
+}
+
+__inline static _exit_critical_ex(_lock *plock, _irqL *pirqL)
+{
+       NdisDprReleaseSpinLock(plock);
+}
+
+__inline static void _enter_critical_bh(_lock *plock, _irqL *pirqL)
+{
+       NdisDprAcquireSpinLock(plock);
+}
+
+__inline static void _exit_critical_bh(_lock *plock, _irqL *pirqL)
+{
+       NdisDprReleaseSpinLock(plock);
+}
+
+__inline static _enter_critical_mutex(_mutex *pmutex, _irqL *pirqL)
+{
+       KeWaitForSingleObject(pmutex, Executive, KernelMode, FALSE, NULL);
+}
+
+
+__inline static _exit_critical_mutex(_mutex *pmutex, _irqL *pirqL)
+{
+       KeReleaseMutex(pmutex, FALSE);
+}
+
+
+__inline static void rtw_list_delete(_list *plist)
+{
+       RemoveEntryList(plist);
+       InitializeListHead(plist);
+}
+
+__inline static void _init_timer(_timer *ptimer,_nic_hdl nic_hdl,void *pfunc,PVOID cntx)
+{
+       NdisMInitializeTimer(ptimer, nic_hdl, pfunc, cntx);
+}
+
+__inline static void _set_timer(_timer *ptimer,u32 delay_time)
+{
+       NdisMSetTimer(ptimer,delay_time);
+}
+
+__inline static void _cancel_timer(_timer *ptimer,u8 *bcancelled)
+{
+       NdisMCancelTimer(ptimer,bcancelled);
+}
+
+__inline static void _init_workitem(_workitem *pwork, void *pfunc, PVOID cntx)
+{
+
+       NdisInitializeWorkItem(pwork, pfunc, cntx);
+}
+
+__inline static void _set_workitem(_workitem *pwork)
+{
+       NdisScheduleWorkItem(pwork);
+}
+
+
+#define ATOMIC_INIT(i)  { (i) }
+
+//
+// Global Mutex: can only be used at PASSIVE level.
+//
+
+#define ACQUIRE_GLOBAL_MUTEX(_MutexCounter)                              \
+{                                                               \
+    while (NdisInterlockedIncrement((PULONG)&(_MutexCounter)) != 1)\
+    {                                                           \
+        NdisInterlockedDecrement((PULONG)&(_MutexCounter));        \
+        NdisMSleep(10000);                          \
+    }                                                           \
+}
+
+#define RELEASE_GLOBAL_MUTEX(_MutexCounter)                              \
+{                                                               \
+    NdisInterlockedDecrement((PULONG)&(_MutexCounter));              \
+}
+
+#endif // PLATFORM_OS_XP
+
+
+#ifdef PLATFORM_OS_CE
+#include <osdep_ce_service.h>
+#endif
+
+#include <rtw_byteorder.h>
+
+#ifndef BIT
+       #define BIT(x)  ( 1 << (x))
+#endif
+
+extern int RTW_STATUS_CODE(int error_code);
+
+#define CONFIG_USE_VMALLOC
+
+/* flags used for rtw_mstat_update() */
+enum mstat_f {
+       /* type: 0x00ff */
+       MSTAT_TYPE_VIR = 0x00,
+       MSTAT_TYPE_PHY= 0x01,
+       MSTAT_TYPE_SKB = 0x02,
+       MSTAT_TYPE_USB = 0x03,
+       MSTAT_TYPE_MAX = 0x04,
+
+       /* func: 0xff00 */
+       MSTAT_FUNC_UNSPECIFIED = 0x00<<8,
+       MSTAT_FUNC_IO = 0x01<<8,
+       MSTAT_FUNC_TX_IO = 0x02<<8,
+       MSTAT_FUNC_RX_IO = 0x03<<8,
+       MSTAT_FUNC_TX = 0x04<<8,
+       MSTAT_FUNC_RX = 0x05<<8,
+       MSTAT_FUNC_MAX = 0x06<<8,
+};
+
+#define mstat_tf_idx(flags) ((flags)&0xff)
+#define mstat_ff_idx(flags) (((flags)&0xff00) >> 8)
+
+typedef enum mstat_status{
+       MSTAT_ALLOC_SUCCESS = 0,
+       MSTAT_ALLOC_FAIL,
+       MSTAT_FREE
+} MSTAT_STATUS;
+
+#ifdef DBG_MEM_ALLOC
+void rtw_mstat_update(const enum mstat_f flags, const MSTAT_STATUS status, u32 sz);
+int _rtw_mstat_dump(char *buf, int len);
+void rtw_mstat_dump (void);
+u8* dbg_rtw_vmalloc(u32 sz, const enum mstat_f flags, const char *func, const int line);
+u8* dbg_rtw_zvmalloc(u32 sz, const enum mstat_f flags, const char *func, const int line);
+void dbg_rtw_vmfree(u8 *pbuf, const enum mstat_f flags, u32 sz, const char *func, const int line);
+u8* dbg_rtw_malloc(u32 sz, const enum mstat_f flags, const char *func, const int line);
+u8* dbg_rtw_zmalloc(u32 sz, const enum mstat_f flags, const char *func, const int line);
+void dbg_rtw_mfree(u8 *pbuf, const enum mstat_f flags, u32 sz, const char *func, const int line);
+
+struct sk_buff * dbg_rtw_skb_alloc(unsigned int size, const enum mstat_f flags, const char *func, const int line);
+void dbg_rtw_skb_free(struct sk_buff *skb, const enum mstat_f flags, const char *func, const int line);
+struct sk_buff *dbg_rtw_skb_copy(const struct sk_buff *skb, const enum mstat_f flags, const char *func, const int line);
+struct sk_buff *dbg_rtw_skb_clone(struct sk_buff *skb, const enum mstat_f flags, const char *func, const int line);
+int dbg_rtw_netif_rx(_nic_hdl ndev, struct sk_buff *skb, const enum mstat_f flags, const char *func, int line);
+void dbg_rtw_skb_queue_purge(struct sk_buff_head *list, enum mstat_f flags, const char *func, int line);
+
+#ifdef CONFIG_USB_HCI
+void *dbg_rtw_usb_buffer_alloc(struct usb_device *dev, size_t size, dma_addr_t *dma, const enum mstat_f flags, const char *func, const int line);
+void dbg_rtw_usb_buffer_free(struct usb_device *dev, size_t size, void *addr, dma_addr_t dma, const enum mstat_f flags, const char *func, const int line);
+#endif /* CONFIG_USB_HCI */
+
+#ifdef CONFIG_USE_VMALLOC
+#define rtw_vmalloc(sz)                        dbg_rtw_vmalloc((sz), MSTAT_TYPE_VIR, __FUNCTION__, __LINE__)
+#define rtw_zvmalloc(sz)                       dbg_rtw_zvmalloc((sz), MSTAT_TYPE_VIR, __FUNCTION__, __LINE__)
+#define rtw_vmfree(pbuf, sz)           dbg_rtw_vmfree((pbuf), (sz), MSTAT_TYPE_VIR, __FUNCTION__, __LINE__)
+#define rtw_vmalloc_f(sz, mstat_f)                     dbg_rtw_vmalloc((sz), ((mstat_f)&0xff00)|MSTAT_TYPE_VIR, __FUNCTION__, __LINE__)
+#define rtw_zvmalloc_f(sz, mstat_f)            dbg_rtw_zvmalloc((sz), ((mstat_f)&0xff00)|MSTAT_TYPE_VIR, __FUNCTION__, __LINE__)
+#define rtw_vmfree_f(pbuf, sz, mstat_f)        dbg_rtw_vmfree((pbuf), (sz), ((mstat_f)&0xff00)|MSTAT_TYPE_VIR, __FUNCTION__, __LINE__)
+#else /* CONFIG_USE_VMALLOC */
+#define rtw_vmalloc(sz)                        dbg_rtw_malloc((sz), MSTAT_TYPE_PHY, __FUNCTION__, __LINE__)
+#define rtw_zvmalloc(sz)                       dbg_rtw_zmalloc((sz), MSTAT_TYPE_PHY, __FUNCTION__, __LINE__)
+#define rtw_vmfree(pbuf, sz)           dbg_rtw_mfree((pbuf), (sz), MSTAT_TYPE_PHY, __FUNCTION__, __LINE__)
+#define rtw_vmalloc_f(sz, mstat_f)                     dbg_rtw_malloc((sz), ((mstat_f)&0xff00)|MSTAT_TYPE_PHY, __FUNCTION__, __LINE__)
+#define rtw_zvmalloc_f(sz, mstat_f)            dbg_rtw_zmalloc((sz), ((mstat_f)&0xff00)|MSTAT_TYPE_PHY, __FUNCTION__, __LINE__)
+#define rtw_vmfree_f(pbuf, sz, mstat_f)        dbg_rtw_mfree((pbuf), (sz), ((mstat_f)&0xff00)|MSTAT_TYPE_PHY, __FUNCTION__, __LINE__)
+#endif /* CONFIG_USE_VMALLOC */
+#define rtw_malloc(sz)                 dbg_rtw_malloc((sz), MSTAT_TYPE_PHY, __FUNCTION__, __LINE__)
+#define rtw_zmalloc(sz)                        dbg_rtw_zmalloc((sz), MSTAT_TYPE_PHY, __FUNCTION__, __LINE__)
+#define rtw_mfree(pbuf, sz)            dbg_rtw_mfree((pbuf), (sz), MSTAT_TYPE_PHY, __FUNCTION__, __LINE__)
+#define rtw_malloc_f(sz, mstat_f)                      dbg_rtw_malloc((sz), ((mstat_f)&0xff00)|MSTAT_TYPE_PHY, __FUNCTION__, __LINE__)
+#define rtw_zmalloc_f(sz, mstat_f)                     dbg_rtw_zmalloc((sz), ((mstat_f)&0xff00)|MSTAT_TYPE_PHY, __FUNCTION__, __LINE__)
+#define rtw_mfree_f(pbuf, sz, mstat_f)         dbg_rtw_mfree((pbuf), (sz), ((mstat_f)&0xff00)|MSTAT_TYPE_PHY, __FUNCTION__, __LINE__)
+
+#define rtw_skb_alloc(size)    dbg_rtw_skb_alloc((size), MSTAT_TYPE_SKB, __FUNCTION__, __LINE__)
+#define rtw_skb_free(skb)      dbg_rtw_skb_free((skb), MSTAT_TYPE_SKB, __FUNCTION__, __LINE__)
+#define rtw_skb_alloc_f(size, mstat_f) dbg_rtw_skb_alloc((size), ((mstat_f)&0xff00)|MSTAT_TYPE_SKB, __FUNCTION__, __LINE__)
+#define rtw_skb_free_f(skb, mstat_f)   dbg_rtw_skb_free((skb), ((mstat_f)&0xff00)|MSTAT_TYPE_SKB, __FUNCTION__, __LINE__)
+#define rtw_skb_copy(skb)      dbg_rtw_skb_copy((skb), MSTAT_TYPE_SKB, __FUNCTION__, __LINE__)
+#define rtw_skb_clone(skb)     dbg_rtw_skb_clone((skb), MSTAT_TYPE_SKB, __FUNCTION__, __LINE__)
+#define rtw_skb_copy_f(skb, mstat_f)   dbg_rtw_skb_copy((skb), ((mstat_f)&0xff00)|MSTAT_TYPE_SKB, __FUNCTION__, __LINE__)
+#define rtw_skb_clone_f(skb, mstat_f)  dbg_rtw_skb_clone((skb), ((mstat_f)&0xff00)|MSTAT_TYPE_SKB, __FUNCTION__, __LINE__)
+#define rtw_netif_rx(ndev, skb)        dbg_rtw_netif_rx(ndev, skb, MSTAT_TYPE_SKB, __FUNCTION__, __LINE__)
+#define rtw_skb_queue_purge(sk_buff_head) dbg_rtw_skb_queue_purge(sk_buff_head, MSTAT_TYPE_SKB, __FUNCTION__, __LINE__)
+#ifdef CONFIG_USB_HCI
+#define rtw_usb_buffer_alloc(dev, size, dma)           dbg_rtw_usb_buffer_alloc((dev), (size), (dma), MSTAT_TYPE_USB, __FUNCTION__, __LINE__)
+#define rtw_usb_buffer_free(dev, size, addr, dma)      dbg_rtw_usb_buffer_free((dev), (size), (addr), (dma), MSTAT_TYPE_USB, __FUNCTION__, __LINE__)
+#define rtw_usb_buffer_alloc_f(dev, size, dma, mstat_f)                        dbg_rtw_usb_buffer_alloc((dev), (size), (dma), ((mstat_f)&0xff00)|MSTAT_TYPE_USB, __FUNCTION__, __LINE__)
+#define rtw_usb_buffer_free_f(dev, size, addr, dma, mstat_f)   dbg_rtw_usb_buffer_free((dev), (size), (addr), (dma), ((mstat_f)&0xff00)|MSTAT_TYPE_USB, __FUNCTION__, __LINE__)
+#endif /* CONFIG_USB_HCI */
+
+#else /* DBG_MEM_ALLOC */
+#define rtw_mstat_update(flag, status, sz) do {} while(0)
+#define rtw_mstat_dump() do {} while(0)
+u8*    _rtw_vmalloc(u32 sz);
+u8*    _rtw_zvmalloc(u32 sz);
+void   _rtw_vmfree(u8 *pbuf, u32 sz);
+u8*    _rtw_zmalloc(u32 sz);
+u8*    _rtw_malloc(u32 sz);
+void   _rtw_mfree(u8 *pbuf, u32 sz);
+
+struct sk_buff *_rtw_skb_alloc(u32 sz);
+void _rtw_skb_free(struct sk_buff *skb);
+struct sk_buff *_rtw_skb_copy(const struct sk_buff *skb);
+struct sk_buff *_rtw_skb_clone(struct sk_buff *skb);
+int _rtw_netif_rx(_nic_hdl ndev, struct sk_buff *skb);
+void _rtw_skb_queue_purge(struct sk_buff_head *list);
+
+#ifdef CONFIG_USB_HCI
+void *_rtw_usb_buffer_alloc(struct usb_device *dev, size_t size, dma_addr_t *dma);
+void _rtw_usb_buffer_free(struct usb_device *dev, size_t size, void *addr, dma_addr_t dma);
+#endif /* CONFIG_USB_HCI */
+
+#ifdef CONFIG_USE_VMALLOC
+#define rtw_vmalloc(sz)                        _rtw_vmalloc((sz))
+#define rtw_zvmalloc(sz)                       _rtw_zvmalloc((sz))
+#define rtw_vmfree(pbuf, sz)           _rtw_vmfree((pbuf), (sz))
+#define rtw_vmalloc_f(sz, mstat_f)                     _rtw_vmalloc((sz))
+#define rtw_zvmalloc_f(sz, mstat_f)            _rtw_zvmalloc((sz))
+#define rtw_vmfree_f(pbuf, sz, mstat_f)        _rtw_vmfree((pbuf), (sz))
+#else /* CONFIG_USE_VMALLOC */
+#define rtw_vmalloc(sz)                        _rtw_malloc((sz))
+#define rtw_zvmalloc(sz)                       _rtw_zmalloc((sz))
+#define rtw_vmfree(pbuf, sz)           _rtw_mfree((pbuf), (sz))
+#define rtw_vmalloc_f(sz, mstat_f)                     _rtw_malloc((sz))
+#define rtw_zvmalloc_f(sz, mstat_f)            _rtw_zmalloc((sz))
+#define rtw_vmfree_f(pbuf, sz, mstat_f)        _rtw_mfree((pbuf), (sz))
+#endif /* CONFIG_USE_VMALLOC */
+#define rtw_malloc(sz)                 _rtw_malloc((sz))
+#define rtw_zmalloc(sz)                        _rtw_zmalloc((sz))
+#define rtw_mfree(pbuf, sz)            _rtw_mfree((pbuf), (sz))
+#define rtw_malloc_f(sz, mstat_f)                      _rtw_malloc((sz))
+#define rtw_zmalloc_f(sz, mstat_f)                     _rtw_zmalloc((sz))
+#define rtw_mfree_f(pbuf, sz, mstat_f)         _rtw_mfree((pbuf), (sz))
+
+#define rtw_skb_alloc(size) _rtw_skb_alloc((size))
+#define rtw_skb_free(skb) _rtw_skb_free((skb))
+#define rtw_skb_alloc_f(size, mstat_f) _rtw_skb_alloc((size))
+#define rtw_skb_free_f(skb, mstat_f)   _rtw_skb_free((skb))
+#define rtw_skb_copy(skb)      _rtw_skb_copy((skb))
+#define rtw_skb_clone(skb)     _rtw_skb_clone((skb))
+#define rtw_skb_copy_f(skb, mstat_f)   _rtw_skb_copy((skb))
+#define rtw_skb_clone_f(skb, mstat_f)  _rtw_skb_clone((skb))
+#define rtw_netif_rx(ndev, skb) _rtw_netif_rx(ndev, skb)
+#define rtw_skb_queue_purge(sk_buff_head) _rtw_skb_queue_purge(sk_buff_head)
+#ifdef CONFIG_USB_HCI
+#define rtw_usb_buffer_alloc(dev, size, dma) _rtw_usb_buffer_alloc((dev), (size), (dma))
+#define rtw_usb_buffer_free(dev, size, addr, dma) _rtw_usb_buffer_free((dev), (size), (addr), (dma))
+#define rtw_usb_buffer_alloc_f(dev, size, dma, mstat_f) _rtw_usb_buffer_alloc((dev), (size), (dma))
+#define rtw_usb_buffer_free_f(dev, size, addr, dma, mstat_f) _rtw_usb_buffer_free((dev), (size), (addr), (dma))
+#endif /* CONFIG_USB_HCI */
+#endif /* DBG_MEM_ALLOC */
+
+extern void*   rtw_malloc2d(int h, int w, int size);
+extern void    rtw_mfree2d(void *pbuf, int h, int w, int size);
+
+extern void    _rtw_memcpy(void* dec, void* sour, u32 sz);
+extern int     _rtw_memcmp(void *dst, void *src, u32 sz);
+extern void    _rtw_memset(void *pbuf, int c, u32 sz);
+
+extern void    _rtw_init_listhead(_list *list);
+extern u32     rtw_is_list_empty(_list *phead);
+extern void    rtw_list_insert_head(_list *plist, _list *phead);
+extern void    rtw_list_insert_tail(_list *plist, _list *phead);
+#ifndef PLATFORM_FREEBSD
+extern void    rtw_list_delete(_list *plist);
+#endif //PLATFORM_FREEBSD
+
+extern void    _rtw_init_sema(_sema *sema, int init_val);
+extern void    _rtw_free_sema(_sema    *sema);
+extern void    _rtw_up_sema(_sema      *sema);
+extern u32     _rtw_down_sema(_sema *sema);
+extern void    _rtw_mutex_init(_mutex *pmutex);
+extern void    _rtw_mutex_free(_mutex *pmutex);
+#ifndef PLATFORM_FREEBSD
+extern void    _rtw_spinlock_init(_lock *plock);
+#endif //PLATFORM_FREEBSD
+extern void    _rtw_spinlock_free(_lock *plock);
+extern void    _rtw_spinlock(_lock     *plock);
+extern void    _rtw_spinunlock(_lock   *plock);
+extern void    _rtw_spinlock_ex(_lock  *plock);
+extern void    _rtw_spinunlock_ex(_lock        *plock);
+
+extern void    _rtw_init_queue(_queue  *pqueue);
+extern u32     _rtw_queue_empty(_queue *pqueue);
+extern u32     rtw_end_of_queue_search(_list *queue, _list *pelement);
+
+extern u32     rtw_get_current_time(void);
+extern u32     rtw_systime_to_ms(u32 systime);
+extern u32     rtw_ms_to_systime(u32 ms);
+extern s32     rtw_get_passing_time_ms(u32 start);
+extern s32     rtw_get_time_interval_ms(u32 start, u32 end);
+
+extern void    rtw_sleep_schedulable(int ms);
+
+extern void    rtw_msleep_os(int ms);
+extern void    rtw_usleep_os(int us);
+
+extern u32     rtw_atoi(u8* s);
+
+#ifdef DBG_DELAY_OS
+#define rtw_mdelay_os(ms) _rtw_mdelay_os((ms), __FUNCTION__, __LINE__)
+#define rtw_udelay_os(ms) _rtw_udelay_os((ms), __FUNCTION__, __LINE__)
+extern void _rtw_mdelay_os(int ms, const char *func, const int line);
+extern void _rtw_udelay_os(int us, const char *func, const int line);
+#else
+extern void    rtw_mdelay_os(int ms);
+extern void    rtw_udelay_os(int us);
+#endif
+
+extern void rtw_yield_os(void);
+
+
+__inline static unsigned char _cancel_timer_ex(_timer *ptimer)
+{
+#ifdef PLATFORM_LINUX
+       return del_timer_sync(ptimer);
+#endif
+#ifdef PLATFORM_FREEBSD
+       _cancel_timer(ptimer,0);
+       return 0;
+#endif
+#ifdef PLATFORM_WINDOWS
+       u8 bcancelled;
+
+       _cancel_timer(ptimer, &bcancelled);
+
+       return bcancelled;
+#endif
+}
+
+#ifdef PLATFORM_FREEBSD
+static __inline void thread_enter(void *context);
+#endif //PLATFORM_FREEBSD
+static __inline void thread_enter(char *name)
+{
+#ifdef PLATFORM_LINUX
+       #if (LINUX_VERSION_CODE < KERNEL_VERSION(3, 8, 0))
+       daemonize("%s", name);
+       #endif
+       allow_signal(SIGTERM);
+#endif
+#ifdef PLATFORM_FREEBSD
+       printf("%s", "RTKTHREAD_enter");
+#endif
+}
+
+#ifdef PLATFORM_FREEBSD
+#define thread_exit() do{printf("%s", "RTKTHREAD_exit");}while(0)
+#endif //PLATFORM_FREEBSD
+__inline static void flush_signals_thread(void)
+{
+#ifdef PLATFORM_LINUX
+       if (signal_pending (current))
+       {
+               flush_signals(current);
+       }
+#endif
+}
+
+__inline static _OS_STATUS res_to_status(sint res)
+{
+
+
+#if defined (PLATFORM_LINUX) || defined (PLATFORM_MPIXEL) || defined (PLATFORM_FREEBSD)
+       return res;
+#endif
+
+#ifdef PLATFORM_WINDOWS
+
+       if (res == _SUCCESS)
+               return NDIS_STATUS_SUCCESS;
+       else
+               return NDIS_STATUS_FAILURE;
+
+#endif
+
+}
+
+__inline static void rtw_dump_stack(void)
+{
+#ifdef PLATFORM_LINUX
+       dump_stack();
+#endif
+}
+
+#ifdef PLATFORM_LINUX
+#define rtw_warn_on(condition) WARN_ON(condition)
+#else
+#define rtw_warn_on(condition) do {} while (0)
+#endif
+
+#define _RND(sz, r) ((((sz)+((r)-1))/(r))*(r))
+#define RND4(x)        (((x >> 2) + (((x & 3) == 0) ?  0: 1)) << 2)
+
+__inline static u32 _RND4(u32 sz)
+{
+
+       u32     val;
+
+       val = ((sz >> 2) + ((sz & 3) ? 1: 0)) << 2;
+
+       return val;
+
+}
+
+__inline static u32 _RND8(u32 sz)
+{
+
+       u32     val;
+
+       val = ((sz >> 3) + ((sz & 7) ? 1: 0)) << 3;
+
+       return val;
+
+}
+
+__inline static u32 _RND128(u32 sz)
+{
+
+       u32     val;
+
+       val = ((sz >> 7) + ((sz & 127) ? 1: 0)) << 7;
+
+       return val;
+
+}
+
+__inline static u32 _RND256(u32 sz)
+{
+
+       u32     val;
+
+       val = ((sz >> 8) + ((sz & 255) ? 1: 0)) << 8;
+
+       return val;
+
+}
+
+__inline static u32 _RND512(u32 sz)
+{
+
+       u32     val;
+
+       val = ((sz >> 9) + ((sz & 511) ? 1: 0)) << 9;
+
+       return val;
+
+}
+
+__inline static u32 bitshift(u32 bitmask)
+{
+       u32 i;
+
+       for (i = 0; i <= 31; i++)
+               if (((bitmask>>i) &  0x1) == 1) break;
+
+       return i;
+}
+
+#ifndef MAC_FMT
+#define MAC_FMT "%02x:%02x:%02x:%02x:%02x:%02x"
+#endif
+#ifndef MAC_ARG
+#define MAC_ARG(x) ((u8*)(x))[0],((u8*)(x))[1],((u8*)(x))[2],((u8*)(x))[3],((u8*)(x))[4],((u8*)(x))[5]
+#endif
+
+//#ifdef __GNUC__
+#ifdef PLATFORM_LINUX
+#define STRUCT_PACKED __attribute__ ((packed))
+#else
+#define STRUCT_PACKED
+#endif
+
+
+// limitation of path length
+#ifdef PLATFORM_LINUX
+       #define PATH_LENGTH_MAX PATH_MAX
+#elif defined(PLATFORM_WINDOWS)
+       #define PATH_LENGTH_MAX MAX_PATH
+#endif
+
+
+// Suspend lock prevent system from going suspend
+#ifdef CONFIG_WAKELOCK
+#include <linux/wakelock.h>
+#elif defined(CONFIG_ANDROID_POWER)
+#include <linux/android_power.h>
+#endif
+
+extern void rtw_suspend_lock_init(void);
+extern void rtw_suspend_lock_uninit(void);
+extern void rtw_lock_suspend(void);
+extern void rtw_unlock_suspend(void);
+extern void rtw_lock_suspend_timeout(u32 timeout_ms);
+
+
+//Atomic integer operations
+#ifdef PLATFORM_LINUX
+       #define ATOMIC_T atomic_t
+#elif defined(PLATFORM_WINDOWS)
+       #define ATOMIC_T LONG
+#elif defined(PLATFORM_FREEBSD)
+       typedef uint32_t ATOMIC_T ;
+#endif
+
+extern void ATOMIC_SET(ATOMIC_T *v, int i);
+extern int ATOMIC_READ(ATOMIC_T *v);
+extern void ATOMIC_ADD(ATOMIC_T *v, int i);
+extern void ATOMIC_SUB(ATOMIC_T *v, int i);
+extern void ATOMIC_INC(ATOMIC_T *v);
+extern void ATOMIC_DEC(ATOMIC_T *v);
+extern int ATOMIC_ADD_RETURN(ATOMIC_T *v, int i);
+extern int ATOMIC_SUB_RETURN(ATOMIC_T *v, int i);
+extern int ATOMIC_INC_RETURN(ATOMIC_T *v);
+extern int ATOMIC_DEC_RETURN(ATOMIC_T *v);
+
+//File operation APIs, just for linux now
+extern int rtw_is_file_readable(char *path);
+extern int rtw_retrive_from_file(char *path, u8* buf, u32 sz);
+extern int rtw_store_to_file(char *path, u8* buf, u32 sz);
+
+
+#if 1 //#ifdef MEM_ALLOC_REFINE_ADAPTOR
+struct rtw_netdev_priv_indicator {
+       void *priv;
+       u32 sizeof_priv;
+};
+struct net_device *rtw_alloc_etherdev_with_old_priv(int sizeof_priv, void *old_priv);
+extern struct net_device * rtw_alloc_etherdev(int sizeof_priv);
+
+#ifndef PLATFORM_FREEBSD
+#define rtw_netdev_priv(netdev) ( ((struct rtw_netdev_priv_indicator *)netdev_priv(netdev))->priv )
+#else //PLATFORM_FREEBSD
+#define rtw_netdev_priv(netdev) (((struct ifnet *)netdev)->if_softc)
+#endif //PLATFORM_FREEBSD
+
+#ifndef PLATFORM_FREEBSD
+extern void rtw_free_netdev(struct net_device * netdev);
+#else //PLATFORM_FREEBSD
+#define rtw_free_netdev(netdev) if_free((netdev))
+#endif //PLATFORM_FREEBSD
+
+#else //MEM_ALLOC_REFINE_ADAPTOR
+
+#define rtw_alloc_etherdev(sizeof_priv) alloc_etherdev((sizeof_priv))
+
+#ifndef PLATFORM_FREEBSD
+#define rtw_netdev_priv(netdev) netdev_priv((netdev))
+#define rtw_free_netdev(netdev) free_netdev((netdev))
+#else //PLATFORM_FREEBSD
+#define rtw_netdev_priv(netdev) (((struct ifnet *)netdev)->if_softc)
+#define rtw_free_netdev(netdev) if_free((netdev))
+#endif //PLATFORM_FREEBSD
+#endif
+
+#ifdef PLATFORM_LINUX
+#define NDEV_FMT "%s"
+#define NDEV_ARG(ndev) ndev->name
+#define ADPT_FMT "%s"
+#define ADPT_ARG(adapter) adapter->pnetdev->name
+#define FUNC_NDEV_FMT "%s(%s)"
+#define FUNC_NDEV_ARG(ndev) __func__, ndev->name
+#define FUNC_ADPT_FMT "%s(%s)"
+#define FUNC_ADPT_ARG(adapter) __func__, adapter->pnetdev->name
+#else
+#define NDEV_FMT "%s"
+#define NDEV_ARG(ndev) ""
+#define ADPT_FMT "%s"
+#define ADPT_ARG(adapter) ""
+#define FUNC_NDEV_FMT "%s"
+#define FUNC_NDEV_ARG(ndev) __func__
+#define FUNC_ADPT_FMT "%s"
+#define FUNC_ADPT_ARG(adapter) __func__
+#endif
+
+#ifdef PLATFORM_LINUX
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,27))
+#define rtw_signal_process(pid, sig) kill_pid(find_vpid((pid)),(sig), 1)
+#else //(LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,27))
+#define rtw_signal_process(pid, sig) kill_proc((pid), (sig), 1)
+#endif //(LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,27))
+#endif //PLATFORM_LINUX
+
+extern u64 rtw_modular64(u64 x, u64 y);
+extern u64 rtw_division64(u64 x, u64 y);
+
+
+/* Macros for handling unaligned memory accesses */
+
+#define RTW_GET_BE16(a) ((u16) (((a)[0] << 8) | (a)[1]))
+#define RTW_PUT_BE16(a, val)                   \
+       do {                                    \
+               (a)[0] = ((u16) (val)) >> 8;    \
+               (a)[1] = ((u16) (val)) & 0xff;  \
+       } while (0)
+
+#define RTW_GET_LE16(a) ((u16) (((a)[1] << 8) | (a)[0]))
+#define RTW_PUT_LE16(a, val)                   \
+       do {                                    \
+               (a)[1] = ((u16) (val)) >> 8;    \
+               (a)[0] = ((u16) (val)) & 0xff;  \
+       } while (0)
+
+#define RTW_GET_BE24(a) ((((u32) (a)[0]) << 16) | (((u32) (a)[1]) << 8) | \
+                        ((u32) (a)[2]))
+#define RTW_PUT_BE24(a, val)                                   \
+       do {                                                    \
+               (a)[0] = (u8) ((((u32) (val)) >> 16) & 0xff);   \
+               (a)[1] = (u8) ((((u32) (val)) >> 8) & 0xff);    \
+               (a)[2] = (u8) (((u32) (val)) & 0xff);           \
+       } while (0)
+
+#define RTW_GET_BE32(a) ((((u32) (a)[0]) << 24) | (((u32) (a)[1]) << 16) | \
+                        (((u32) (a)[2]) << 8) | ((u32) (a)[3]))
+#define RTW_PUT_BE32(a, val)                                   \
+       do {                                                    \
+               (a)[0] = (u8) ((((u32) (val)) >> 24) & 0xff);   \
+               (a)[1] = (u8) ((((u32) (val)) >> 16) & 0xff);   \
+               (a)[2] = (u8) ((((u32) (val)) >> 8) & 0xff);    \
+               (a)[3] = (u8) (((u32) (val)) & 0xff);           \
+       } while (0)
+
+#define RTW_GET_LE32(a) ((((u32) (a)[3]) << 24) | (((u32) (a)[2]) << 16) | \
+                        (((u32) (a)[1]) << 8) | ((u32) (a)[0]))
+#define RTW_PUT_LE32(a, val)                                   \
+       do {                                                    \
+               (a)[3] = (u8) ((((u32) (val)) >> 24) & 0xff);   \
+               (a)[2] = (u8) ((((u32) (val)) >> 16) & 0xff);   \
+               (a)[1] = (u8) ((((u32) (val)) >> 8) & 0xff);    \
+               (a)[0] = (u8) (((u32) (val)) & 0xff);           \
+       } while (0)
+
+#define RTW_GET_BE64(a) ((((u64) (a)[0]) << 56) | (((u64) (a)[1]) << 48) | \
+                        (((u64) (a)[2]) << 40) | (((u64) (a)[3]) << 32) | \
+                        (((u64) (a)[4]) << 24) | (((u64) (a)[5]) << 16) | \
+                        (((u64) (a)[6]) << 8) | ((u64) (a)[7]))
+#define RTW_PUT_BE64(a, val)                           \
+       do {                                            \
+               (a)[0] = (u8) (((u64) (val)) >> 56);    \
+               (a)[1] = (u8) (((u64) (val)) >> 48);    \
+               (a)[2] = (u8) (((u64) (val)) >> 40);    \
+               (a)[3] = (u8) (((u64) (val)) >> 32);    \
+               (a)[4] = (u8) (((u64) (val)) >> 24);    \
+               (a)[5] = (u8) (((u64) (val)) >> 16);    \
+               (a)[6] = (u8) (((u64) (val)) >> 8);     \
+               (a)[7] = (u8) (((u64) (val)) & 0xff);   \
+       } while (0)
+
+#define RTW_GET_LE64(a) ((((u64) (a)[7]) << 56) | (((u64) (a)[6]) << 48) | \
+                        (((u64) (a)[5]) << 40) | (((u64) (a)[4]) << 32) | \
+                        (((u64) (a)[3]) << 24) | (((u64) (a)[2]) << 16) | \
+                        (((u64) (a)[1]) << 8) | ((u64) (a)[0]))
+
+void rtw_buf_free(u8 **buf, u32 *buf_len);
+void rtw_buf_update(u8 **buf, u32 *buf_len, u8 *src, u32 src_len);
+
+struct rtw_cbuf {
+       u32 write;
+       u32 read;
+       u32 size;
+       void *bufs[0];
+};
+
+bool rtw_cbuf_full(struct rtw_cbuf *cbuf);
+bool rtw_cbuf_empty(struct rtw_cbuf *cbuf);
+bool rtw_cbuf_push(struct rtw_cbuf *cbuf, void *buf);
+void *rtw_cbuf_pop(struct rtw_cbuf *cbuf);
+struct rtw_cbuf *rtw_cbuf_alloc(u32 size);
+void rtw_cbuf_free(struct rtw_cbuf *cbuf);
+
+#endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/pci_hal.h b/drivers/net/wireless/realtek/rtl8192cu/include/pci_hal.h
new file mode 100644 (file)
index 0000000..650b04f
--- /dev/null
@@ -0,0 +1,167 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __PCI_HAL_H__
+#define __PCI_HAL_H__
+
+
+#define        INTEL_VENDOR_ID                         0x8086
+#define        SIS_VENDOR_ID                                   0x1039
+#define        ATI_VENDOR_ID                                   0x1002
+#define        ATI_DEVICE_ID                                   0x7914
+#define        AMD_VENDOR_ID                                   0x1022
+
+#define        PCI_MAX_BRIDGE_NUMBER                   255
+#define        PCI_MAX_DEVICES                         32
+#define        PCI_MAX_FUNCTION                                8
+
+#define        PCI_CONF_ADDRESS                                0x0CF8   // PCI Configuration Space Address
+#define        PCI_CONF_DATA                                   0x0CFC   // PCI Configuration Space Data
+
+#define        PCI_CLASS_BRIDGE_DEV                    0x06
+#define        PCI_SUBCLASS_BR_PCI_TO_PCI      0x04
+
+#define        PCI_CAPABILITY_ID_PCI_EXPRESS   0x10
+
+#define        U1DONTCARE                                      0xFF
+#define        U2DONTCARE                                      0xFFFF
+#define        U4DONTCARE                                      0xFFFFFFFF
+
+#define PCI_VENDER_ID_REALTEK          0x10ec
+
+#define HAL_HW_PCI_8180_DEVICE_ID              0x8180
+#define HAL_HW_PCI_8185_DEVICE_ID              0x8185  //8185 or 8185b
+#define HAL_HW_PCI_8188_DEVICE_ID              0x8188  //8185b
+#define HAL_HW_PCI_8198_DEVICE_ID              0x8198  //8185b
+#define HAL_HW_PCI_8190_DEVICE_ID              0x8190  //8190
+#define HAL_HW_PCI_8723E_DEVICE_ID             0x8723  //8723E
+#define HAL_HW_PCI_8192_DEVICE_ID              0x8192  //8192 PCI-E
+#define HAL_HW_PCI_8192SE_DEVICE_ID            0x8192  //8192 SE
+#define HAL_HW_PCI_8174_DEVICE_ID              0x8174  //8192 SE
+#define HAL_HW_PCI_8173_DEVICE_ID              0x8173  //8191 SE Crab
+#define HAL_HW_PCI_8172_DEVICE_ID              0x8172  //8191 SE RE
+#define HAL_HW_PCI_8171_DEVICE_ID              0x8171  //8191 SE Unicron
+#define HAL_HW_PCI_0045_DEVICE_ID                      0x0045  //8190 PCI for Ceraga
+#define HAL_HW_PCI_0046_DEVICE_ID                      0x0046  //8190 Cardbus for Ceraga
+#define HAL_HW_PCI_0044_DEVICE_ID                      0x0044  //8192e PCIE for Ceraga
+#define HAL_HW_PCI_0047_DEVICE_ID                      0x0047  //8192e Express Card for Ceraga
+#define HAL_HW_PCI_700F_DEVICE_ID                      0x700F
+#define HAL_HW_PCI_701F_DEVICE_ID                      0x701F
+#define HAL_HW_PCI_DLINK_DEVICE_ID             0x3304
+#define HAL_HW_PCI_8192CET_DEVICE_ID           0x8191  //8192ce
+#define HAL_HW_PCI_8192CE_DEVICE_ID            0x8178  //8192ce
+#define HAL_HW_PCI_8191CE_DEVICE_ID            0x8177  //8192ce
+#define HAL_HW_PCI_8188CE_DEVICE_ID            0x8176  //8192ce
+#define HAL_HW_PCI_8192CU_DEVICE_ID            0x8191  //8192ce
+#define HAL_HW_PCI_8192DE_DEVICE_ID            0x8193  //8192de
+#define HAL_HW_PCI_002B_DEVICE_ID                      0x002B  //8192de, provided by HW SD
+
+#define HAL_MEMORY_MAPPED_IO_RANGE_8190PCI             0x1000     //8190 support 16 pages of IO registers
+#define HAL_HW_PCI_REVISION_ID_8190PCI                 0x00
+#define HAL_MEMORY_MAPPED_IO_RANGE_8192PCIE    0x4000  //8192 support 16 pages of IO registers
+#define HAL_HW_PCI_REVISION_ID_8192PCIE                        0x01
+#define HAL_MEMORY_MAPPED_IO_RANGE_8192SE              0x4000  //8192 support 16 pages of IO registers
+#define HAL_HW_PCI_REVISION_ID_8192SE                  0x10
+#define HAL_HW_PCI_REVISION_ID_8192CE                  0x1
+#define HAL_MEMORY_MAPPED_IO_RANGE_8192CE              0x4000  //8192 support 16 pages of IO registers
+#define HAL_HW_PCI_REVISION_ID_8192DE                  0x0
+#define HAL_MEMORY_MAPPED_IO_RANGE_8192DE              0x4000  //8192 support 16 pages of IO registers
+
+enum pci_bridge_vendor {
+       PCI_BRIDGE_VENDOR_INTEL = 0x0,//0b'0000,0001
+       PCI_BRIDGE_VENDOR_ATI, //= 0x02,//0b'0000,0010
+       PCI_BRIDGE_VENDOR_AMD, //= 0x04,//0b'0000,0100
+       PCI_BRIDGE_VENDOR_SIS ,//= 0x08,//0b'0000,1000
+       PCI_BRIDGE_VENDOR_UNKNOWN, //= 0x40,//0b'0100,0000
+       PCI_BRIDGE_VENDOR_MAX ,//= 0x80
+} ;
+
+struct rt_pci_capabilities_header {
+       u8      capability_id;
+       u8      next;
+};
+
+struct pci_priv{
+       u8      linkctrl_reg;
+
+       u8      busnumber;
+       u8      devnumber;
+       u8      funcnumber;
+
+       u8      pcibridge_busnum;
+       u8      pcibridge_devnum;
+       u8      pcibridge_funcnum;
+       u8      pcibridge_vendor;
+       u16     pcibridge_vendorid;
+       u16     pcibridge_deviceid;
+       u8      pcibridge_pciehdr_offset;
+       u8      pcibridge_linkctrlreg;
+
+       u8      amd_l1_patch;
+};
+
+typedef struct _RT_ISR_CONTENT
+{
+       union{
+               u32                     IntArray[2];
+               u32                     IntReg4Byte;
+               u16                     IntReg2Byte;
+       };
+}RT_ISR_CONTENT, *PRT_ISR_CONTENT;
+
+//#define RegAddr(addr)           (addr + 0xB2000000UL)
+//some platform macros will def here
+static inline void NdisRawWritePortUlong(u32 port,  u32 val)
+{
+       outl(val, port);
+       //writel(val, (u8 *)RegAddr(port));
+}
+
+static inline void NdisRawWritePortUchar(u32 port,  u8 val)
+{
+       outb(val, port);
+       //writeb(val, (u8 *)RegAddr(port));
+}
+
+static inline void NdisRawReadPortUchar(u32 port, u8 *pval)
+{
+       *pval = inb(port);
+       //*pval = readb((u8 *)RegAddr(port));
+}
+
+static inline void NdisRawReadPortUshort(u32 port, u16 *pval)
+{
+       *pval = inw(port);
+       //*pval = readw((u8 *)RegAddr(port));
+}
+
+static inline void NdisRawReadPortUlong(u32 port, u32 *pval)
+{
+       *pval = inl(port);
+       //*pval = readl((u8 *)RegAddr(port));
+}
+
+#ifdef CONFIG_RTL8192C
+void rtl8192ce_set_hal_ops(_adapter * padapter);
+#endif
+#ifdef CONFIG_RTL8192D
+void rtl8192de_set_hal_ops(_adapter * padapter);
+#endif
+
+#endif //__PCIE_HAL_H__
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/pci_ops.h b/drivers/net/wireless/realtek/rtl8192cu/include/pci_ops.h
new file mode 100644 (file)
index 0000000..51d96c4
--- /dev/null
@@ -0,0 +1,60 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __PCI_OPS_H_
+#define __PCI_OPS_H_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <osdep_intf.h>
+
+#ifdef CONFIG_RTL8192C
+u32    rtl8192ce_init_desc_ring(_adapter * padapter);
+u32    rtl8192ce_free_desc_ring(_adapter * padapter);
+void   rtl8192ce_reset_desc_ring(_adapter * padapter);
+#ifdef CONFIG_64BIT_DMA
+u8     PlatformEnable92CEDMA64(PADAPTER Adapter);
+#endif
+int    rtl8192ce_interrupt(PADAPTER Adapter);
+void   rtl8192ce_xmit_tasklet(void *priv);
+void   rtl8192ce_recv_tasklet(void *priv);
+void   rtl8192ce_prepare_bcn_tasklet(void *priv);
+void   rtl8192ce_set_intf_ops(struct _io_ops   *pops);
+#define pci_set_intf_ops       rtl8192ce_set_intf_ops
+#endif
+
+#ifdef CONFIG_RTL8192D
+u32    rtl8192de_init_desc_ring(_adapter * padapter);
+u32    rtl8192de_free_desc_ring(_adapter * padapter);
+void   rtl8192de_reset_desc_ring(_adapter * padapter);
+#ifdef CONFIG_64BIT_DMA
+u8     PlatformEnable92DEDMA64(PADAPTER Adapter);
+#endif
+int    rtl8192de_interrupt(PADAPTER Adapter);
+void   rtl8192de_xmit_tasklet(void *priv);
+void   rtl8192de_recv_tasklet(void *priv);
+void   rtl8192de_prepare_bcn_tasklet(void *priv);
+void   rtl8192de_set_intf_ops(struct _io_ops   *pops);
+#define pci_set_intf_ops       rtl8192de_set_intf_ops
+u32    MpReadPCIDwordDBI8192D(IN PADAPTER Adapter, IN u16 Offset, IN u8 Direct);
+void   MpWritePCIDwordDBI8192D(IN PADAPTER Adapter, IN u16 Offset, IN u32 Value, IN u8 Direct);
+#endif
+
+#endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/pci_osintf.h b/drivers/net/wireless/realtek/rtl8192cu/include/pci_osintf.h
new file mode 100644 (file)
index 0000000..8d38a53
--- /dev/null
@@ -0,0 +1,32 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __PCI_OSINTF_H
+#define __PCI_OSINTF_H
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+
+
+void rtw_pci_disable_aspm(_adapter *padapter);
+void rtw_pci_enable_aspm(_adapter *padapter);
+
+
+#endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/recv_osdep.h b/drivers/net/wireless/realtek/rtl8192cu/include/recv_osdep.h
new file mode 100644 (file)
index 0000000..b39e00b
--- /dev/null
@@ -0,0 +1,57 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __RECV_OSDEP_H_
+#define __RECV_OSDEP_H_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+
+
+extern sint _rtw_init_recv_priv(struct recv_priv *precvpriv, _adapter *padapter);
+extern void _rtw_free_recv_priv (struct recv_priv *precvpriv);
+
+
+extern s32  rtw_recv_entry(union recv_frame *precv_frame);
+extern int rtw_recv_indicatepkt(_adapter *adapter, union recv_frame *precv_frame);
+extern void rtw_recv_returnpacket(IN _nic_hdl cnxt, IN _pkt *preturnedpkt);
+
+extern void rtw_hostapd_mlme_rx(_adapter *padapter, union recv_frame *precv_frame);
+extern void rtw_handle_tkip_mic_err(_adapter *padapter,u8 bgroup);
+
+
+int    rtw_init_recv_priv(struct recv_priv *precvpriv, _adapter *padapter);
+void rtw_free_recv_priv (struct recv_priv *precvpriv);
+
+
+int rtw_os_recv_resource_init(struct recv_priv *precvpriv, _adapter *padapter);
+int rtw_os_recv_resource_alloc(_adapter *padapter, union recv_frame *precvframe);
+void rtw_os_recv_resource_free(struct recv_priv *precvpriv);
+
+
+int rtw_os_recvbuf_resource_alloc(_adapter *padapter, struct recv_buf *precvbuf);
+int rtw_os_recvbuf_resource_free(_adapter *padapter, struct recv_buf *precvbuf);
+
+void rtw_os_read_port(_adapter *padapter, struct recv_buf *precvbuf);
+
+void rtw_init_recv_timer(struct recv_reorder_ctrl *preorder_ctrl);
+
+
+#endif //
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtl8192c_cmd.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtl8192c_cmd.h
new file mode 100644 (file)
index 0000000..3a63316
--- /dev/null
@@ -0,0 +1,152 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __RTL8192C_CMD_H_
+#define __RTL8192C_CMD_H_
+
+
+enum cmd_msg_element_id
+{
+       NONE_CMDMSG_EID,
+       AP_OFFLOAD_EID=0,
+       SET_PWRMODE_EID=1,
+       JOINBSS_RPT_EID=2,
+       RSVD_PAGE_EID=3,
+       RSSI_4_EID = 4,
+       RSSI_SETTING_EID=5,
+       MACID_CONFIG_EID=6,
+       MACID_PS_MODE_EID=7,
+       P2P_PS_OFFLOAD_EID=8,
+       SELECTIVE_SUSPEND_ROF_CMD=9,
+#ifdef CONFIG_WOWLAN
+       H2C_WO_WLAN_CMD = 26,   // Wake on Wlan.
+       EXT_MACID_PERIOD_EID = 27,      // support macid to 64
+       MACID64_CONFIG_EID = 28,        // support macid to 64
+#endif // CONFIG_WOWLAN
+       P2P_PS_CTW_CMD_EID=32,
+       H2C_92C_IO_OFFLOAD=44,
+#ifdef CONFIG_WOWLAN
+       KEEP_ALIVE_CONTROL_CMD=48,
+       DISCONNECT_DECISION_CTRL_CMD=49,
+       REMOTE_WAKE_CTRL_CMD=60,
+#endif // CONFIG_WOWLAN
+       H2C_92C_TSF_SYNC=67,
+       H2C_92C_DISABLE_BCN_FUNC=68,
+       H2C_92C_RESET_TSF = 75,
+       H2C_92C_CMD_MAX
+};
+
+struct cmd_msg_parm {
+       u8 eid; //element id
+       u8 sz; // sz
+       u8 buf[6];
+};
+
+typedef struct _SETPWRMODE_PARM{
+       u8      Mode;
+       u8      SmartPS;
+       u8      BcnPassTime;    // unit: 100ms
+}SETPWRMODE_PARM, *PSETPWRMODE_PARM;
+
+#ifdef CONFIG_WOWLAN
+typedef struct _SETWOWLAN_PARM{
+       u8      mode;
+       u8      gpio_index;
+       u8      gpio_duration;
+       u8  second_mode;
+       u8  reserve;
+}SETWOWLAN_PARM, *PSETWOWLAN_PARM;
+
+#define FW_WOWLAN_FUN_EN                       BIT(0)
+#define FW_WOWLAN_PATTERN_MATCH                BIT(1)
+#define FW_WOWLAN_MAGIC_PKT                    BIT(2)
+#define FW_WOWLAN_UNICAST                      BIT(3)
+#define FW_WOWLAN_ALL_PKT_DROP         BIT(4)
+#define FW_WOWLAN_GPIO_ACTIVE          BIT(5)
+#define FW_WOWLAN_REKEY_WAKEUP         BIT(6)
+#define FW_WOWLAN_DEAUTH_WAKEUP                BIT(7)
+
+#define FW_WOWLAN_GPIO_WAKEUP_EN       BIT(0)
+#define FW_FW_PARSE_MAGIC_PKT          BIT(1)
+#endif // CONFIG_WOWLAN
+
+struct H2C_SS_RFOFF_PARAM{
+       u8      ROFOn; // 1: on, 0:off
+       u16     gpio_period; // unit: 1024 us
+}__attribute__ ((packed));
+
+
+typedef struct JOINBSSRPT_PARM{
+       u8      OpMode; // RT_MEDIA_STATUS
+}JOINBSSRPT_PARM, *PJOINBSSRPT_PARM;
+
+typedef struct _RSVDPAGE_LOC{
+       u8      LocProbeRsp;
+       u8      LocPsPoll;
+       u8      LocNullData;
+}RSVDPAGE_LOC, *PRSVDPAGE_LOC;
+
+struct P2P_PS_Offload_t {
+ unsigned char Offload_En:1;
+ unsigned char role:1; // 1: Owner, 0: Client
+ unsigned char CTWindow_En:1;
+ unsigned char NoA0_En:1;
+ unsigned char NoA1_En:1;
+ unsigned char AllStaSleep:1; // Only valid in Owner
+ unsigned char discovery:1;
+ unsigned char rsvd:1;
+};
+
+struct P2P_PS_CTWPeriod_t {
+    unsigned char CTWPeriod;   //TU
+};
+
+// host message to firmware cmd
+void   rtl8192c_set_FwPwrMode_cmd(_adapter*padapter, u8 Mode);
+void   rtl8192c_set_FwJoinBssReport_cmd(_adapter* padapter, u8 mstatus);
+u8     rtl8192c_set_rssi_cmd(_adapter*padapter, u8 *param);
+u8     rtl8192c_set_raid_cmd(_adapter*padapter, u32 mask, u8 arg);
+void   rtl8192c_Add_RateATid(PADAPTER pAdapter, u32 bitmap, u8 arg);
+u8     rtl8192c_set_FwSelectSuspend_cmd(_adapter*padapter,u8 bfwpoll, u16 period);
+#ifdef CONFIG_P2P
+void   rtl8192c_set_p2p_ps_offload_cmd(_adapter* padapter, u8 p2p_ps_state);
+#endif //CONFIG_P2P
+
+#ifdef CONFIG_IOL
+typedef struct _IO_OFFLOAD_LOC{
+       u8      LocCmd;
+}IO_OFFLOAD_LOC, *PIO_OFFLOAD_LOC;
+int rtl8192c_IOL_exec_cmds_sync(ADAPTER *adapter, struct xmit_frame *xmit_frame, u32 max_wating_ms);
+#endif //CONFIG_IOL
+
+#ifdef CONFIG_BEACON_DISABLE_OFFLOAD
+u8 rtl8192c_dis_beacon_fun_cmd(_adapter* padapter);
+#endif  // CONFIG_BEACON_DISABLE_OFFLOAD
+
+
+#ifdef CONFIG_TSF_RESET_OFFLOAD
+int reset_tsf(PADAPTER Adapter, u8 reset_port );
+#endif // CONFIG_TSF_RESET_OFFLOAD
+
+#ifdef CONFIG_WOWLAN
+void rtl8192c_set_wowlan_cmd(_adapter* padapter);
+void SetFwRelatedForWoWLAN8192CU(_adapter*     padapter,u8 bHostIsGoingtoSleep);
+#endif // CONFIG_WOWLAN
+
+#endif // __RTL8192C_CMD_H_
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtl8192c_dm.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtl8192c_dm.h
new file mode 100644 (file)
index 0000000..3c56d49
--- /dev/null
@@ -0,0 +1,515 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef        __RTL8192C_DM_H__
+#define __RTL8192C_DM_H__
+//============================================================
+// Description:
+//
+// This file is for 92CE/92CU dynamic mechanism only
+//
+//
+//============================================================
+
+#define        RSSI_CCK                0
+#define        RSSI_OFDM               1
+#define        RSSI_DEFAULT    2
+
+//============================================================
+// structure and define
+//============================================================
+
+typedef struct _FALSE_ALARM_STATISTICS{
+       u32     Cnt_Parity_Fail;
+       u32     Cnt_Rate_Illegal;
+       u32     Cnt_Crc8_fail;
+       u32     Cnt_Mcs_fail;
+       u32     Cnt_Ofdm_fail;
+       u32     Cnt_Cck_fail;
+       u32     Cnt_all;
+       u32     Cnt_Fast_Fsync;
+       u32     Cnt_SB_Search_fail;
+}FALSE_ALARM_STATISTICS, *PFALSE_ALARM_STATISTICS;
+
+typedef struct _Dynamic_Power_Saving_
+{
+       u8              PreCCAState;
+       u8              CurCCAState;
+
+       u8              PreRFState;
+       u8              CurRFState;
+
+       s32             Rssi_val_min;
+
+}PS_T;
+
+typedef struct _Dynamic_Initial_Gain_Threshold_
+{
+       u8              Dig_Enable_Flag;
+       u8              Dig_Ext_Port_Stage;
+
+       int             RssiLowThresh;
+       int             RssiHighThresh;
+
+       u32             FALowThresh;
+       u32             FAHighThresh;
+
+       u8              CurSTAConnectState;
+       u8              PreSTAConnectState;
+       u8              CurMultiSTAConnectState;
+
+       u8              PreIGValue;
+       u8              CurIGValue;
+       u8              BackupIGValue;
+
+       char            BackoffVal;
+       char            BackoffVal_range_max;
+       char            BackoffVal_range_min;
+       u8              rx_gain_range_max;
+       u8              rx_gain_range_min;
+       u8              Rssi_val_min;
+
+       u8              PreCCKPDState;
+       u8              CurCCKPDState;
+        u8             PreCCKFAState;
+       u8              CurCCKFAState;
+       u8              PreCCAState;
+       u8              CurCCAState;
+
+       u8              LargeFAHit;
+       u8              ForbiddenIGI;
+       u32             Recover_cnt;
+       u8              rx_gain_range_min_nolink;
+
+}DIG_T;
+
+typedef enum tag_Dynamic_Init_Gain_Operation_Type_Definition
+{
+       DIG_TYPE_THRESH_HIGH    = 0,
+       DIG_TYPE_THRESH_LOW     = 1,
+       DIG_TYPE_BACKOFF                = 2,
+       DIG_TYPE_RX_GAIN_MIN    = 3,
+       DIG_TYPE_RX_GAIN_MAX    = 4,
+       DIG_TYPE_ENABLE                 = 5,
+       DIG_TYPE_DISABLE                = 6,
+       DIG_OP_TYPE_MAX
+}DM_DIG_OP_E;
+
+typedef enum tag_CCK_Packet_Detection_Threshold_Type_Definition
+{
+       CCK_PD_STAGE_LowRssi = 0,
+       CCK_PD_STAGE_HighRssi = 1,
+       CCK_PD_STAGE_MAX = 3,
+}DM_CCK_PDTH_E;
+
+typedef enum tag_1R_CCA_Type_Definition
+{
+       CCA_1R =0,
+       CCA_2R = 1,
+       CCA_MAX = 2,
+}DM_1R_CCA_E;
+
+typedef enum tag_RF_Type_Definition
+{
+       RF_Save =0,
+       RF_Normal = 1,
+       RF_MAX = 2,
+}DM_RF_E;
+
+typedef enum tag_DIG_EXT_PORT_ALGO_Definition
+{
+       DIG_EXT_PORT_STAGE_0 = 0,
+       DIG_EXT_PORT_STAGE_1 = 1,
+       DIG_EXT_PORT_STAGE_2 = 2,
+       DIG_EXT_PORT_STAGE_3 = 3,
+       DIG_EXT_PORT_STAGE_MAX = 4,
+}DM_DIG_EXT_PORT_ALG_E;
+
+
+typedef enum tag_DIG_Connect_Definition
+{
+       DIG_STA_DISCONNECT = 0,
+       DIG_STA_CONNECT = 1,
+       DIG_STA_BEFORE_CONNECT = 2,
+       DIG_MultiSTA_DISCONNECT = 3,
+       DIG_MultiSTA_CONNECT = 4,
+       DIG_CONNECT_MAX
+}DM_DIG_CONNECT_E;
+
+
+
+typedef        enum _BT_Ant_NUM{
+       Ant_x2  = 0,
+       Ant_x1  = 1
+} BT_Ant_NUM, *PBT_Ant_NUM;
+
+typedef        enum _BT_CoType{
+       BT_2Wire                = 0,
+       BT_ISSC_3Wire   = 1,
+       BT_Accel                = 2,
+       BT_CSR_BC4              = 3,
+       BT_CSR_BC8              = 4,
+       BT_RTL8756              = 5,
+} BT_CoType, *PBT_CoType;
+
+typedef        enum _BT_CurState{
+       BT_OFF          = 0,
+       BT_ON           = 1,
+} BT_CurState, *PBT_CurState;
+
+typedef        enum _BT_ServiceType{
+       BT_SCO          = 0,
+       BT_A2DP         = 1,
+       BT_HID          = 2,
+       BT_HID_Idle     = 3,
+       BT_Scan         = 4,
+       BT_Idle         = 5,
+       BT_OtherAction  = 6,
+       BT_Busy                 = 7,
+       BT_OtherBusy            = 8,
+       BT_PAN                  = 9,
+} BT_ServiceType, *PBT_ServiceType;
+
+typedef        enum _BT_RadioShared{
+       BT_Radio_Shared         = 0,
+       BT_Radio_Individual     = 1,
+} BT_RadioShared, *PBT_RadioShared;
+
+struct btcoexist_priv  {
+       u8                                      BT_Coexist;
+       u8                                      BT_Ant_Num;
+       u8                                      BT_CoexistType;
+       u8                                      BT_State;
+       u8                                      BT_CUR_State;           //0:on, 1:off
+       u8                                      BT_Ant_isolation;       //0:good, 1:bad
+       u8                                      BT_PapeCtrl;            //0:SW, 1:SW/HW dynamic
+       u8                                      BT_Service;
+       u8                                      BT_Ampdu;       // 0:Disable BT control A-MPDU, 1:Enable BT control A-MPDU.
+       u8                                      BT_RadioSharedType;
+       u32                                     Ratio_Tx;
+       u32                                     Ratio_PRI;
+       u8                                      BtRfRegOrigin1E;
+       u8                                      BtRfRegOrigin1F;
+       u8                                      BtRssiState;
+       u32                                     BtEdcaUL;
+       u32                                     BtEdcaDL;
+       u32                                     BT_EDCA[2];
+       u8                                      bCOBT;
+
+       u8                                      bInitSet;
+       u8                                      bBTBusyTraffic;
+       u8                                      bBTTrafficModeSet;
+       u8                                      bBTNonTrafficModeSet;
+       //BTTraffic                             BT21TrafficStatistics;
+       u32                                     CurrentState;
+       u32                                     PreviousState;
+       u8                                      BtPreRssiState;
+       u8                                      bFWCoexistAllOff;
+       u8                                      bSWCoexistAllOff;
+};
+
+#define                BW_AUTO_SWITCH_HIGH_LOW 25
+#define                BW_AUTO_SWITCH_LOW_HIGH 30
+
+#define                DM_DIG_THRESH_HIGH                      40
+#define                DM_DIG_THRESH_LOW                       35
+
+#define                DM_FALSEALARM_THRESH_LOW        400
+#define                DM_FALSEALARM_THRESH_HIGH       1000
+
+#define                DM_DIG_MAX                                      0x3e
+#define                DM_DIG_MIN                                      0x1e //0x22//0x1c
+
+#define                DM_DIG_FA_UPPER                         0x3e
+#define                DM_DIG_FA_LOWER                         0x20
+#define                DM_DIG_FA_TH0                                   0x20
+#define                DM_DIG_FA_TH1                                   0x100
+#define                DM_DIG_FA_TH2                                   0x200
+
+#define                DM_DIG_BACKOFF_MAX                      12
+#define                DM_DIG_BACKOFF_MIN                      (-4)
+#define                DM_DIG_BACKOFF_DEFAULT          10
+
+#define                RxPathSelection_SS_TH_low               30
+#define                RxPathSelection_diff_TH                 18
+
+#define                DM_RATR_STA_INIT                        0
+#define                DM_RATR_STA_HIGH                        1
+#define                DM_RATR_STA_MIDDLE              2
+#define                DM_RATR_STA_LOW                 3
+
+#define                CTSToSelfTHVal                                  30
+#define                RegC38_TH                                               20
+
+#define                WAIotTHVal                                              25
+
+//Dynamic Tx Power Control Threshold
+#define                TX_POWER_NEAR_FIELD_THRESH_LVL2 74
+#define                TX_POWER_NEAR_FIELD_THRESH_LVL1 67
+
+#define                TxHighPwrLevel_Normal           0
+#define                TxHighPwrLevel_Level1           1
+#define                TxHighPwrLevel_Level2           2
+#define                TxHighPwrLevel_BT1                      3
+#define                TxHighPwrLevel_BT2                      4
+#define                TxHighPwrLevel_15                       5
+#define                TxHighPwrLevel_35                       6
+#define                TxHighPwrLevel_50                       7
+#define                TxHighPwrLevel_70                       8
+#define                TxHighPwrLevel_100                      9
+
+#define                DM_Type_ByFW                    0
+#define                DM_Type_ByDriver                1
+
+
+typedef struct _RATE_ADAPTIVE
+{
+       u8                              RateAdaptiveDisabled;
+       u8                              RATRState;
+       u16                             reserve;
+
+       u32                             HighRSSIThreshForRA;
+       u32                             High2LowRSSIThreshForRA;
+       u8                              Low2HighRSSIThreshForRA40M;
+       u32                             LowRSSIThreshForRA40M;
+       u8                              Low2HighRSSIThreshForRA20M;
+       u32                             LowRSSIThreshForRA20M;
+       u32                             UpperRSSIThresholdRATR;
+       u32                             MiddleRSSIThresholdRATR;
+       u32                             LowRSSIThresholdRATR;
+       u32                             LowRSSIThresholdRATR40M;
+       u32                             LowRSSIThresholdRATR20M;
+       u8                              PingRSSIEnable; //cosa add for Netcore long range ping issue
+       u32                             PingRSSIRATR;   //cosa add for Netcore long range ping issue
+       u32                             PingRSSIThreshForRA;//cosa add for Netcore long range ping issue
+       u32                             LastRATR;
+       u8                              PreRATRState;
+
+} RATE_ADAPTIVE, *PRATE_ADAPTIVE;
+
+typedef enum tag_SW_Antenna_Switch_Definition
+{
+       Antenna_B = 1,
+       Antenna_A = 2,
+       Antenna_MAX = 3,
+}DM_SWAS_E;
+
+#ifdef CONFIG_ANTENNA_DIVERSITY
+// This indicates two different the steps.
+// In SWAW_STEP_PEAK, driver needs to switch antenna and listen to the signal on the air.
+// In SWAW_STEP_DETERMINE, driver just compares the signal captured in SWAW_STEP_PEAK
+// with original RSSI to determine if it is necessary to switch antenna.
+#define SWAW_STEP_PEAK         0
+#define SWAW_STEP_DETERMINE    1
+
+#define        TP_MODE         0
+#define        RSSI_MODE               1
+#define        TRAFFIC_LOW     0
+#define        TRAFFIC_HIGH    1
+
+typedef struct _SW_Antenna_Switch_
+{
+       u8              try_flag;
+       s32             PreRSSI;
+       u8              CurAntenna;
+       u8              PreAntenna;
+       u8              RSSI_Trying;
+       u8              TestMode;
+       u8              bTriggerAntennaSwitch;
+       u8              SelectAntennaMap;
+       // Before link Antenna Switch check
+       u8              SWAS_NoLink_State;
+
+}SWAT_T;
+
+
+#endif
+
+
+struct         dm_priv
+{
+       u8      DM_Type;
+       u8      DMFlag, DMFlag_tmp;
+
+
+       //for DIG
+       u8      bDMInitialGainEnable;
+       u8      binitialized; // for dm_initial_gain_Multi_STA use.
+       DIG_T   DM_DigTable;
+
+       PS_T    DM_PSTable;
+
+       FALSE_ALARM_STATISTICS FalseAlmCnt;
+
+       //for rate adaptive, in fact,  88c/92c fw will handle this
+       u8 bUseRAMask;
+       RATE_ADAPTIVE RateAdaptive;
+
+       //* Upper and Lower Signal threshold for Rate Adaptive*/
+       int     UndecoratedSmoothedPWDB;
+       int     UndecoratedSmoothedCCK;
+       int     EntryMinUndecoratedSmoothedPWDB;
+       int     EntryMaxUndecoratedSmoothedPWDB;
+
+
+       //for High Power
+       u8 bDynamicTxPowerEnable;
+       u8 LastDTPLvl;
+       u8 DynamicTxHighPowerLvl;//Add by Jacken Tx Power Control for Near/Far Range 2008/03/06
+
+       //for tx power tracking
+       //u8    bTXPowerTracking;
+       u8      TXPowercount;
+       u8      bTXPowerTrackingInit;
+       u8      TxPowerTrackControl;    //for mp mode, turn off txpwrtracking as default
+       u8      TM_Trigger;
+
+       u8      ThermalMeter[2];                                // ThermalMeter, index 0 for RFIC0, and 1 for RFIC1
+       u8      ThermalValue;
+       u8      ThermalValue_LCK;
+       u8      ThermalValue_IQK;
+       u8      ThermalValue_DPK;
+
+       u8      bRfPiEnable;
+
+       //for APK
+       u32     APKoutput[2][2];        //path A/B; output1_1a/output1_2a
+       u8      bAPKdone;
+       u8      bAPKThermalMeterIgnore;
+       u8      bDPdone;
+       u8      bDPPathAOK;
+       u8      bDPPathBOK;
+
+       //for IQK
+       u32     RegC04;
+       u32     Reg874;
+       u32     RegC08;
+       u32     RegB68;
+       u32     RegB6C;
+       u32     Reg870;
+       u32     Reg860;
+       u32     Reg864;
+       u32     ADDA_backup[IQK_ADDA_REG_NUM];
+       u32     IQK_MAC_backup[IQK_MAC_REG_NUM];
+       u32     IQK_BB_backup_recover[9];
+       u32     IQK_BB_backup[IQK_BB_REG_NUM];
+       u8      PowerIndex_backup[6];
+
+       u8      bCCKinCH14;
+
+       char    CCK_index;
+       char    OFDM_index[2];
+
+       BOOLEAN         bDoneTxpower;
+       char    CCK_index_HP;
+       char    OFDM_index_HP[2];
+       u8      ThermalValue_HP[HP_THERMAL_NUM];
+       u8      ThermalValue_HP_index;
+
+       //for TxPwrTracking
+       int     RegE94;
+       int     RegE9C;
+       int     RegEB4;
+       int     RegEBC;
+
+       u32     TXPowerTrackingCallbackCnt;     //cosa add for debug
+
+       u32     prv_traffic_idx; // edca turbo
+
+       // for dm_RF_Saving
+       u8      initialize;
+       u32     rf_saving_Reg874;
+       u32     rf_saving_RegC70;
+       u32     rf_saving_Reg85C;
+       u32     rf_saving_RegA74;
+
+       //for Antenna diversity
+#ifdef CONFIG_ANTENNA_DIVERSITY
+       SWAT_T DM_SWAT_Table;
+#endif
+#ifdef CONFIG_SW_ANTENNA_DIVERSITY
+       _timer SwAntennaSwitchTimer;
+
+       u64     lastTxOkCnt;
+       u64     lastRxOkCnt;
+       u64     TXByteCnt_A;
+       u64     TXByteCnt_B;
+       u64     RXByteCnt_A;
+       u64     RXByteCnt_B;
+       u8      DoubleComfirm;
+       u8      TrafficLoad;
+#endif
+
+       s32     OFDM_Pkt_Cnt;
+       u8      RSSI_Select;
+       u8      DIG_Dynamic_MIN ;
+
+       // Add for Reading Initial Data Rate SEL Register 0x484 during watchdog. Using for fill tx desc. 2011.3.21 by Thomas
+       u8      INIDATA_RATE[32];
+
+#ifdef CONFIG_DM_ADAPTIVITY
+       /* Ported from ODM, for ESTI Adaptivity test */
+       s8 TH_L2H_ini;
+       s8 TH_EDCCA_HL_diff;
+       s8 IGI_Base;
+       u8 IGI_target;
+       bool ForceEDCCA;
+       u8 AdapEn_RSSI;
+       s8 Force_TH_H;
+       s8 Force_TH_L;
+       u8 IGI_LowerBound;
+
+       bool    bPreEdccaEnable;
+#endif
+};
+
+
+/*------------------------Export global variable----------------------------*/
+/*------------------------Export global variable----------------------------*/
+/*------------------------Export Marco Definition---------------------------*/
+//#define DM_MultiSTA_InitGainChangeNotify(Event) {DM_DigTable.CurMultiSTAConnectState = Event;}
+
+
+//============================================================
+// function prototype
+//============================================================
+void rtl8192c_init_dm_priv(IN PADAPTER Adapter);
+void rtl8192c_deinit_dm_priv(IN PADAPTER Adapter);
+void rtl8192c_InitHalDm(IN PADAPTER Adapter);
+void rtl8192c_HalDmWatchDog(IN PADAPTER Adapter);
+
+VOID rtl8192c_dm_CheckTXPowerTracking(IN PADAPTER Adapter);
+
+void rtl8192c_dm_RF_Saving(IN PADAPTER pAdapter, IN u8 bForceInNormal);
+
+#ifdef CONFIG_BT_COEXIST
+void rtl8192c_set_dm_bt_coexist(_adapter *padapter, u8 bStart);
+void rtl8192c_issue_delete_ba(_adapter *padapter, u8 dir);
+#endif
+
+#ifdef CONFIG_SW_ANTENNA_DIVERSITY
+void SwAntDivRSSICheck8192C(_adapter *padapter ,u32 RxPWDBAll);
+void SwAntDivRestAfterLink8192C(IN     PADAPTER Adapter);
+#endif
+#ifdef CONFIG_ANTENNA_DIVERSITY
+void   SwAntDivCompare8192C(PADAPTER Adapter, WLAN_BSSID_EX *dst, WLAN_BSSID_EX *src);
+u8 SwAntDivBeforeLink8192C(IN PADAPTER Adapter);
+#endif
+
+#endif //__HAL8190PCIDM_H__
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtl8192c_event.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtl8192c_event.h
new file mode 100644 (file)
index 0000000..ddc08bf
--- /dev/null
@@ -0,0 +1,26 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef _RTL8192C_EVENT_H_
+#define _RTL8192C_EVENT_H_
+
+
+
+
+#endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtl8192c_hal.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtl8192c_hal.h
new file mode 100644 (file)
index 0000000..c803139
--- /dev/null
@@ -0,0 +1,934 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __RTL8192C_HAL_H__
+#define __RTL8192C_HAL_H__
+
+#include "hal_com.h"
+#include "rtl8192c_spec.h"
+#include "Hal8192CPhyReg.h"
+#include "Hal8192CPhyCfg.h"
+#include "rtl8192c_rf.h"
+#include "rtl8192c_dm.h"
+#include "rtl8192c_recv.h"
+#include "rtl8192c_xmit.h"
+#include "rtl8192c_cmd.h"
+#ifdef DBG_CONFIG_ERROR_DETECT
+#include "rtl8192c_sreset.h"
+#endif
+
+#ifdef CONFIG_PCI_HCI
+
+       #include "Hal8192CEHWImg.h"
+
+       #define RTL819X_DEFAULT_RF_TYPE                 RF_2T2R
+       //#define RTL819X_DEFAULT_RF_TYPE                       RF_1T2R
+       #define RTL819X_TOTAL_RF_PATH                           2
+
+       //2TODO:  The following need to check!!
+       #define RTL8192C_FW_TSMC_IMG                            "rtl8192CE\\rtl8192cfwT.bin"
+       #define RTL8192C_FW_UMC_IMG                             "rtl8192CE\\rtl8192cfwU.bin"
+       #define RTL8192C_FW_UMC_B_IMG                           "rtl8192CE\\rtl8192cfwU_B.bin"
+
+       #define RTL8188C_PHY_REG                                        "rtl8192CE\\PHY_REG_1T.txt"
+       #define RTL8188C_PHY_RADIO_A                            "rtl8192CE\\radio_a_1T.txt"
+       #define RTL8188C_PHY_RADIO_B                            "rtl8192CE\\radio_b_1T.txt"
+       #define RTL8188C_AGC_TAB                                        "rtl8192CE\\AGC_TAB_1T.txt"
+       #define RTL8188C_PHY_MACREG                             "rtl8192CE\\MACREG_1T.txt"
+
+       #define RTL8192C_PHY_REG                                        "rtl8192CE\\PHY_REG_2T.txt"
+       #define RTL8192C_PHY_RADIO_A                            "rtl8192CE\\radio_a_2T.txt"
+       #define RTL8192C_PHY_RADIO_B                            "rtl8192CE\\radio_b_2T.txt"
+       #define RTL8192C_AGC_TAB                                        "rtl8192CE\\AGC_TAB_2T.txt"
+       #define RTL8192C_PHY_MACREG                             "rtl8192CE\\MACREG_2T.txt"
+
+       #define RTL819X_PHY_MACPHY_REG                  "rtl8192CE\\MACPHY_reg.txt"
+       #define RTL819X_PHY_MACPHY_REG_PG               "rtl8192CE\\MACPHY_reg_PG.txt"
+       #define RTL819X_PHY_MACREG                              "rtl8192CE\\MAC_REG.txt"
+       #define RTL819X_PHY_REG                                 "rtl8192CE\\PHY_REG.txt"
+       #define RTL819X_PHY_REG_1T2R                            "rtl8192CE\\PHY_REG_1T2R.txt"
+       #define RTL819X_PHY_REG_to1T1R                          "rtl8192CE\\phy_to1T1R_a.txt"
+       #define RTL819X_PHY_REG_to1T2R                          "rtl8192CE\\phy_to1T2R.txt"
+       #define RTL819X_PHY_REG_to2T2R                          "rtl8192CE\\phy_to2T2R.txt"
+       #define RTL819X_PHY_REG_PG                                      "rtl8192CE\\PHY_REG_PG.txt"
+       #define RTL819X_AGC_TAB                                 "rtl8192CE\\AGC_TAB.txt"
+       #define RTL819X_PHY_RADIO_A                             "rtl8192CE\\radio_a.txt"
+       #define RTL819X_PHY_RADIO_A_1T                  "rtl8192CE\\radio_a_1t.txt"
+       #define RTL819X_PHY_RADIO_A_2T                  "rtl8192CE\\radio_a_2t.txt"
+       #define RTL819X_PHY_RADIO_B                             "rtl8192CE\\radio_b.txt"
+       #define RTL819X_PHY_RADIO_B_GM                  "rtl8192CE\\radio_b_gm.txt"
+       #define RTL819X_PHY_RADIO_C                             "rtl8192CE\\radio_c.txt"
+       #define RTL819X_PHY_RADIO_D                             "rtl8192CE\\radio_d.txt"
+       #define RTL819X_EEPROM_MAP                              "rtl8192CE\\8192ce.map"
+       #define RTL819X_EFUSE_MAP                                       "rtl8192CE\\8192ce.map"
+
+//---------------------------------------------------------------------
+//             RTL8723E From file
+//---------------------------------------------------------------------
+       #define RTL8723_FW_UMC_IMG                              "rtl8723E\\rtl8723fw.bin"
+       #define RTL8723_PHY_REG                                 "rtl8723E\\PHY_REG_1T.txt"
+       #define RTL8723_PHY_RADIO_A                             "rtl8723E\\radio_a_1T.txt"
+       #define RTL8723_PHY_RADIO_B                             "rtl8723E\\radio_b_1T.txt"
+       #define RTL8723_AGC_TAB                                 "rtl8723E\\AGC_TAB_1T.txt"
+       #define RTL8723_PHY_MACREG                              "rtl8723E\\MAC_REG.txt"
+       #define RTL8723_PHY_MACREG                              "rtl8723E\\MAC_REG.txt"
+       #define RTL8723_PHY_REG_PG                                      "rtl8723E\\PHY_REG_PG.txt"
+       #define RTL8723_PHY_REG_MP                              "rtl8723E\\PHY_REG_MP.txt"
+
+       // The file name "_2T" is for 92CE, "_1T"  is for 88CE. Modified by tynli. 2009.11.24.
+       #define Rtl819XFwTSMCImageArray                 Rtl8192CEFwTSMCImgArray
+       #define Rtl819XFwUMCACutImageArray                      Rtl8192CEFwUMCACutImgArray
+       #define Rtl819XFwUMCBCutImageArray                      Rtl8192CEFwUMCBCutImgArray
+
+       #define Rtl8723FwUMCImageArray                          Rtl8192CEFwUMC8723ImgArray
+       #define Rtl819XMAC_Array                                        Rtl8192CEMAC_2T_Array
+       #define Rtl819XAGCTAB_2TArray                           Rtl8192CEAGCTAB_2TArray
+       #define Rtl819XAGCTAB_1TArray                           Rtl8192CEAGCTAB_1TArray
+       #define Rtl819XPHY_REG_2TArray                          Rtl8192CEPHY_REG_2TArray
+       #define Rtl819XPHY_REG_1TArray                          Rtl8192CEPHY_REG_1TArray
+       #define Rtl819XRadioA_2TArray                           Rtl8192CERadioA_2TArray
+       #define Rtl819XRadioA_1TArray                           Rtl8192CERadioA_1TArray
+       #define Rtl819XRadioB_2TArray                           Rtl8192CERadioB_2TArray
+       #define Rtl819XRadioB_1TArray                           Rtl8192CERadioB_1TArray
+       #define Rtl819XPHY_REG_Array_PG                         Rtl8192CEPHY_REG_Array_PG
+       #define Rtl819XPHY_REG_Array_MP                         Rtl8192CEPHY_REG_Array_MP
+
+#elif defined(CONFIG_USB_HCI)
+
+       #include "Hal8192CUHWImg.h"
+#ifdef CONFIG_WOWLAN
+       #include "Hal8192CUHWImg_wowlan.h"
+#endif //CONFIG_WOWLAN
+       //2TODO: We should define 8192S firmware related macro settings here!!
+       #define RTL819X_DEFAULT_RF_TYPE                 RF_1T2R
+       #define RTL819X_TOTAL_RF_PATH                           2
+
+       //TODO:  The following need to check!!
+       #define RTL8192C_FW_TSMC_IMG                            "rtl8192CU\\rtl8192cfwT.bin"
+       #define RTL8192C_FW_UMC_IMG                             "rtl8192CU\\rtl8192cfwU.bin"
+       #define RTL8192C_FW_UMC_B_IMG                           "rtl8192CU\\rtl8192cfwU_B.bin"
+#ifdef CONFIG_WOWLAN
+       #define         RTL8192C_FW_TSMC_WW_IMG                 "rtl8192CU\\rtl8192cfwTww.bin"
+       #define         RTL8192C_FW_UMC_WW_IMG                  "rtl8192CU\\rtl8192cfwUww.bin"
+       #define         RTL8192C_FW_UMC_B_WW_IMG                "rtl8192CU\\rtl8192cfwU_Bww.bin"
+#endif // CONFIG_WOWLAN
+       //#define RTL819X_FW_BOOT_IMG                                   "rtl8192CU\\boot.img"
+       //#define RTL819X_FW_MAIN_IMG                           "rtl8192CU\\main.img"
+       //#define RTL819X_FW_DATA_IMG                           "rtl8192CU\\data.img"
+
+       #define RTL8188C_PHY_REG                                        "rtl8188CU\\PHY_REG.txt"
+       #define RTL8188C_PHY_RADIO_A                            "rtl8188CU\\radio_a.txt"
+       #define RTL8188C_PHY_RADIO_B                            "rtl8188CU\\radio_b.txt"
+       #define RTL8188C_PHY_RADIO_A_mCard              "rtl8192CU\\radio_a_1T_mCard.txt"
+       #define RTL8188C_PHY_RADIO_B_mCard              "rtl8192CU\\radio_b_1T_mCard.txt"
+       #define RTL8188C_PHY_RADIO_A_HP                 "rtl8192CU\\radio_a_1T_HP.txt"
+       #define RTL8188C_AGC_TAB                                        "rtl8188CU\\AGC_TAB.txt"
+       #define RTL8188C_PHY_MACREG                             "rtl8188CU\\MACREG.txt"
+
+       #define RTL8192C_PHY_REG                                        "rtl8192CU\\PHY_REG.txt"
+       #define RTL8192C_PHY_RADIO_A                            "rtl8192CU\\radio_a.txt"
+       #define RTL8192C_PHY_RADIO_B                            "rtl8192CU\\radio_b.txt"
+       #define RTL8192C_AGC_TAB                                        "rtl8192CU\\AGC_TAB.txt"
+       #define RTL8192C_PHY_MACREG                             "rtl8192CU\\MACREG.txt"
+
+       #define RTL819X_PHY_REG_PG                                      "rtl8192CU\\PHY_REG_PG.txt"
+
+//---------------------------------------------------------------------
+//             RTL8723U From file
+//---------------------------------------------------------------------
+       #define RTL8723_FW_UMC_IMG                              "rtl8723U\\rtl8723fw.bin"
+       #define RTL8723_PHY_REG                                 "rtl8723U\\PHY_REG_1T.txt"
+       #define RTL8723_PHY_RADIO_A                             "rtl8723U\\radio_a_1T.txt"
+       #define RTL8723_PHY_RADIO_B                             "rtl8723U\\radio_b_1T.txt"
+       #define RTL8723_AGC_TAB                                 "rtl8723U\\AGC_TAB_1T.txt"
+       #define RTL8723_PHY_MACREG                              "rtl8723U\\MAC_REG.txt"
+       #define RTL8723_PHY_MACREG                              "rtl8723U\\MAC_REG.txt"
+       #define RTL8723_PHY_REG_PG                                      "rtl8723U\\PHY_REG_PG.txt"
+       #define RTL8723_PHY_REG_MP                                      "rtl8723U\\PHY_REG_MP.txt"
+
+       // The file name "_2T" is for 92CU, "_1T"  is for 88CU. Modified by tynli. 2009.11.24.
+       #define Rtl819XFwImageArray                                     Rtl8192CUFwTSMCImgArray
+       #define Rtl819XFwTSMCImageArray                 Rtl8192CUFwTSMCImgArray
+       #define Rtl819XFwUMCACutImageArray                      Rtl8192CUFwUMCACutImgArray
+       #define Rtl819XFwUMCBCutImageArray                      Rtl8192CUFwUMCBCutImgArray
+#ifdef CONFIG_WOWLAN
+       #define Rtl8192C_FwTSMCWWImageArray             Rtl8192CUFwTSMCWWImgArray
+       #define Rtl8192C_FwUMCWWImageArray              Rtl8192CUFwUMCACutWWImgArray
+       #define Rtl8192C_FwUMCBCutWWImageArray  Rtl8192CUFwUMCBCutWWImgArray
+#endif //CONFIG_WOWLAN
+       #define Rtl819XMAC_Array                                        Rtl8192CUMAC_2T_Array
+       #define Rtl819XAGCTAB_2TArray                           Rtl8192CUAGCTAB_2TArray
+       #define Rtl819XAGCTAB_1TArray                           Rtl8192CUAGCTAB_1TArray
+       #define Rtl819XAGCTAB_1T_HPArray                        Rtl8192CUAGCTAB_1T_HPArray
+       #define Rtl819XPHY_REG_2TArray                          Rtl8192CUPHY_REG_2TArray
+       #define Rtl819XPHY_REG_1TArray                          Rtl8192CUPHY_REG_1TArray
+       #define Rtl819XPHY_REG_1T_mCardArray            Rtl8192CUPHY_REG_1T_mCardArray
+       #define Rtl819XPHY_REG_2T_mCardArray            Rtl8192CUPHY_REG_2T_mCardArray
+       #define Rtl819XPHY_REG_1T_HPArray                       Rtl8192CUPHY_REG_1T_HPArray
+       #define Rtl819XRadioA_2TArray                           Rtl8192CURadioA_2TArray
+       #define Rtl819XRadioA_1TArray                           Rtl8192CURadioA_1TArray
+       #define Rtl819XRadioA_1T_mCardArray             Rtl8192CURadioA_1T_mCardArray
+       #define Rtl819XRadioB_2TArray                           Rtl8192CURadioB_2TArray
+       #define Rtl819XRadioB_1TArray                           Rtl8192CURadioB_1TArray
+       #define Rtl819XRadioB_1T_mCardArray             Rtl8192CURadioB_1T_mCardArray
+       #define Rtl819XRadioA_1T_HPArray                        Rtl8192CURadioA_1T_HPArray
+       #define Rtl819XPHY_REG_Array_PG                         Rtl8192CUPHY_REG_Array_PG
+       #define Rtl819XPHY_REG_Array_PG_mCard           Rtl8192CUPHY_REG_Array_PG_mCard
+       #define Rtl819XPHY_REG_Array_PG_HP                      Rtl8192CUPHY_REG_Array_PG_HP
+       #define Rtl819XPHY_REG_Array_MP                         Rtl8192CUPHY_REG_Array_MP
+#endif
+
+#define DRVINFO_SZ     4 // unit is 8bytes
+#define PageNum_128(_Len)              (u32)(((_Len)>>7) + ((_Len)&0x7F ? 1:0))
+
+#define FW_8192C_SIZE                                  16384+32//16k
+#define FW_8192C_START_ADDRESS         0x1000
+//#define FW_8192C_END_ADDRESS         0x3FFF //Filen said this is for test chip
+#define FW_8192C_END_ADDRESS           0x1FFF
+
+#define MAX_PAGE_SIZE                  4096    // @ page : 4k bytes
+
+#define IS_FW_HEADER_EXIST(_pFwHdr)    ((le16_to_cpu(_pFwHdr->Signature)&0xFFF0) == 0x92C0 ||\
+                                                                       (le16_to_cpu(_pFwHdr->Signature)&0xFFF0) == 0x88C0 ||\
+                                                                       (le16_to_cpu(_pFwHdr->Signature)&0xFFF0) == 0x2300)
+
+typedef enum _FIRMWARE_SOURCE{
+       FW_SOURCE_IMG_FILE = 0,
+       FW_SOURCE_HEADER_FILE = 1,              //from header file
+}FIRMWARE_SOURCE, *PFIRMWARE_SOURCE;
+
+typedef struct _RT_FIRMWARE{
+       FIRMWARE_SOURCE eFWSource;
+       u8*                     szFwBuffer;
+       u32                     ulFwLength;
+#ifdef CONFIG_WOWLAN
+       u8*                     szWoWLANFwBuffer;
+       u32                     ulWoWLANFwLength;
+#endif //CONFIG_WOWLAN
+}RT_FIRMWARE, *PRT_FIRMWARE, RT_FIRMWARE_92C, *PRT_FIRMWARE_92C;
+
+//
+// This structure must be cared byte-ordering
+//
+// Added by tynli. 2009.12.04.
+typedef struct _RT_8192C_FIRMWARE_HDR {//8-byte alinment required
+
+       //--- LONG WORD 0 ----
+       u16             Signature;      // 92C0: test chip; 92C, 88C0: test chip; 88C1: MP A-cut; 92C1: MP A-cut
+       u8              Category;       // AP/NIC and USB/PCI
+       u8              Function;       // Reserved for different FW function indcation, for further use when driver needs to download different FW in different conditions
+       u16             Version;                // FW Version
+       u8              Subversion;     // FW Subversion, default 0x00
+       u16             Rsvd1;
+
+
+       //--- LONG WORD 1 ----
+       u8              Month;  // Release time Month field
+       u8              Date;   // Release time Date field
+       u8              Hour;   // Release time Hour field
+       u8              Minute; // Release time Minute field
+       u16             RamCodeSize;    // The size of RAM code
+       u16             Rsvd2;
+
+       //--- LONG WORD 2 ----
+       u32             SvnIdx; // The SVN entry index
+       u32             Rsvd3;
+
+       //--- LONG WORD 3 ----
+       u32             Rsvd4;
+       u32             Rsvd5;
+
+}RT_8192C_FIRMWARE_HDR, *PRT_8192C_FIRMWARE_HDR;
+
+#define DRIVER_EARLY_INT_TIME          0x05
+#define BCN_DMA_ATIME_INT_TIME         0x02
+
+#ifdef CONFIG_USB_RX_AGGREGATION
+
+typedef enum _USB_RX_AGG_MODE{
+       USB_RX_AGG_DISABLE,
+       USB_RX_AGG_DMA,
+       USB_RX_AGG_USB,
+       USB_RX_AGG_MIX
+}USB_RX_AGG_MODE;
+
+#define MAX_RX_DMA_BUFFER_SIZE 10240           // 10K for 8192C RX DMA buffer
+
+#endif
+
+
+#define TX_SELE_HQ                     BIT(0)          // High Queue
+#define TX_SELE_LQ                     BIT(1)          // Low Queue
+#define TX_SELE_NQ                     BIT(2)          // Normal Queue
+
+
+// Note: We will divide number of page equally for each queue other than public queue!
+
+#define TX_TOTAL_PAGE_NUMBER           0xF8
+#define TX_PAGE_BOUNDARY               (TX_TOTAL_PAGE_NUMBER + 1)
+
+// For Normal Chip Setting
+// (HPQ + LPQ + NPQ + PUBQ) shall be TX_TOTAL_PAGE_NUMBER
+#define NORMAL_PAGE_NUM_PUBQ                   0xE7
+#define NORMAL_PAGE_NUM_HPQ                    0x0C
+#define NORMAL_PAGE_NUM_LPQ                    0x02
+#define NORMAL_PAGE_NUM_NPQ                    0x02
+
+
+// For Test Chip Setting
+// (HPQ + LPQ + PUBQ) shall be TX_TOTAL_PAGE_NUMBER
+#define TEST_PAGE_NUM_PUBQ             0x7E
+
+
+// For Test Chip Setting
+#define WMM_TEST_TX_TOTAL_PAGE_NUMBER  0xF5
+#define WMM_TEST_TX_PAGE_BOUNDARY      (WMM_TEST_TX_TOTAL_PAGE_NUMBER + 1) //F6
+
+#define WMM_TEST_PAGE_NUM_PUBQ         0xA3
+#define WMM_TEST_PAGE_NUM_HPQ          0x29
+#define WMM_TEST_PAGE_NUM_LPQ          0x29
+
+
+//Note: For Normal Chip Setting ,modify later
+#define WMM_NORMAL_TX_TOTAL_PAGE_NUMBER        0xF5
+#define WMM_NORMAL_TX_PAGE_BOUNDARY    (WMM_TEST_TX_TOTAL_PAGE_NUMBER + 1) //F6
+
+#define WMM_NORMAL_PAGE_NUM_PUBQ               0x65
+#define WMM_NORMAL_PAGE_NUM_HPQ                0x30
+#define WMM_NORMAL_PAGE_NUM_LPQ                        0x30
+#define WMM_NORMAL_PAGE_NUM_NPQ                0x30
+
+//-------------------------------------------------------------------------
+//     Chip specific
+//-------------------------------------------------------------------------
+#define CHIP_BONDING_IDENTIFIER(_value)        (((_value)>>22)&0x3)
+#define CHIP_BONDING_92C_1T2R  0x1
+#define CHIP_BONDING_88C_USB_MCARD     0x2
+#define CHIP_BONDING_88C_USB_HP        0x1
+
+//
+// 2011.01.06. Define new structure of chip version for RTL8723 and so on. Added by tynli.
+//
+/*
+     | BIT15:12           |  BIT11:8        | BIT 7              |  BIT6:4  |      BIT3          | BIT2:0  |
+     |-------------+-----------+-----------+-------+-----------+-------|
+     | IC version(CUT)  | ROM version  | Manufacturer  | RF type  |  Chip type       | IC Type |
+     |                           |                      | TSMC/UMC    |              | TEST/NORMAL|             |
+*/
+// [15:12] IC version(CUT): A-cut=0, B-cut=1, C-cut=2, D-cut=3
+// [7] Manufacturer: TSMC=0, UMC=1
+// [6:4] RF type: 1T1R=0, 1T2R=1, 2T2R=2
+// [3] Chip type: TEST=0, NORMAL=1
+// [2:0] IC type: 81xxC=0, 8723=1, 92D=2
+
+#define CHIP_8723                                              BIT(0)
+#define CHIP_92D                                               BIT(1)
+#define NORMAL_CHIP                                    BIT(3)
+#define RF_TYPE_1T1R                                   (~(BIT(4)|BIT(5)|BIT(6)))
+#define RF_TYPE_1T2R                                   BIT(4)
+#define RF_TYPE_2T2R                                   BIT(5)
+#define CHIP_VENDOR_UMC                                BIT(7)
+#define B_CUT_VERSION                                  BIT(12)
+#define C_CUT_VERSION                                  BIT(13)
+#define D_CUT_VERSION                                  ((BIT(13)|BIT(14)))
+
+
+// MASK
+#define IC_TYPE_MASK                                   (BIT(0)|BIT(1)|BIT(2))
+#define CHIP_TYPE_MASK                                 BIT(3)
+#define RF_TYPE_MASK                                   (BIT(4)|BIT(5)|BIT(6))
+#define MANUFACTUER_MASK                       BIT(7)
+#define ROM_VERSION_MASK                               (BIT(11)|BIT(10)|BIT(9)|BIT(8))
+#define CUT_VERSION_MASK                               (BIT(15)|BIT(14)|BIT(13)|BIT(12))
+
+// Get element
+#define GET_CVID_IC_TYPE(version)                      ((version) & IC_TYPE_MASK)
+#define GET_CVID_CHIP_TYPE(version)                    ((version) & CHIP_TYPE_MASK)
+#define GET_CVID_RF_TYPE(version)                      ((version) & RF_TYPE_MASK)
+#define GET_CVID_MANUFACTUER(version)          ((version) & MANUFACTUER_MASK)
+#define GET_CVID_ROM_VERSION(version)          ((version) & ROM_VERSION_MASK)
+#define GET_CVID_CUT_VERSION(version)          ((version) & CUT_VERSION_MASK)
+
+#define IS_81XXC(version)                                      ((GET_CVID_IC_TYPE(version) == 0)? _TRUE : _FALSE)
+#define IS_8723_SERIES(version)                                ((GET_CVID_IC_TYPE(version) == CHIP_8723)? _TRUE : _FALSE)
+#define IS_92D(version)                                                ((GET_CVID_IC_TYPE(version) == CHIP_92D)? _TRUE : _FALSE)
+#define IS_1T1R(version)                                               ((GET_CVID_RF_TYPE(version))? _FALSE : _TRUE)
+#define IS_1T2R(version)                                               ((GET_CVID_RF_TYPE(version) == RF_TYPE_1T2R)? _TRUE : _FALSE)
+#define IS_2T2R(version)                                               ((GET_CVID_RF_TYPE(version) == RF_TYPE_2T2R)? _TRUE : _FALSE)
+#define IS_NORMAL_CHIP(version)                                ((GET_CVID_CHIP_TYPE(version))? _TRUE: _FALSE)
+#define IS_CHIP_VENDOR_UMC(version)                    ((GET_CVID_MANUFACTUER(version))? _TRUE: _FALSE)
+
+#define IS_81XXC_TEST_CHIP(version)                    ((IS_81XXC(version) && (!IS_NORMAL_CHIP(version)))? _TRUE: _FALSE)
+#define IS_92D_TEST_CHIP(version)                              ((IS_92D(version) && (!IS_NORMAL_CHIP(version)))? _TRUE: _FALSE)
+#define IS_92C_SERIAL(version)                                 ((IS_81XXC(version) && IS_2T2R(version)) ? _TRUE : _FALSE)
+#define IS_VENDOR_UMC_A_CUT(version)           ((IS_CHIP_VENDOR_UMC(version)) ? ((GET_CVID_CUT_VERSION(version)) ? _FALSE : _TRUE) : _FALSE)
+#define IS_VENDOR_8723_A_CUT(version)          ((IS_8723_SERIES(version)) ? ((GET_CVID_CUT_VERSION(version)) ? _FALSE : _TRUE) : _FALSE)
+// <tynli_Note> 88/92C UMC B-cut vendor is set to TSMC so we need to check CHIP_VENDOR_UMC bit is not 1.
+#define IS_81xxC_VENDOR_UMC_B_CUT(version)     ((IS_CHIP_VENDOR_UMC(version)) ? ((GET_CVID_CUT_VERSION(version) == B_CUT_VERSION) ? _TRUE : _FALSE):_FALSE)
+#define IS_92D_SINGLEPHY(version)                      ((IS_92D(version)) ? (IS_2T2R(version) ? _TRUE: _FALSE) : _FALSE)
+#define IS_92D_C_CUT(version)                                  ((IS_92D(version)) ? ((GET_CVID_CUT_VERSION(version) == 0x2) ? _TRUE : _FALSE) : _FALSE)
+#define IS_92D_D_CUT(version)                                  ((IS_92D(version)) ? ((GET_CVID_CUT_VERSION(version) == 0x3) ? _TRUE : _FALSE) : _FALSE)
+
+typedef enum _VERSION_8192C{
+       VERSION_TEST_CHIP_88C = 0x0000,
+       VERSION_TEST_CHIP_92C = 0x0020,
+       VERSION_TEST_UMC_CHIP_8723 = 0x0081,
+       VERSION_NORMAL_TSMC_CHIP_88C = 0x0008,
+       VERSION_NORMAL_TSMC_CHIP_92C = 0x0028,
+       VERSION_NORMAL_TSMC_CHIP_92C_1T2R = 0x0018,
+       VERSION_NORMAL_UMC_CHIP_88C_A_CUT = 0x0088,
+       VERSION_NORMAL_UMC_CHIP_92C_A_CUT = 0x00a8,
+       VERSION_NORMAL_UMC_CHIP_92C_1T2R_A_CUT = 0x0098,
+       VERSION_NORMAL_UMC_CHIP_8723_1T1R_A_CUT = 0x0089,
+       VERSION_NORMAL_UMC_CHIP_8723_1T1R_B_CUT = 0x1089,
+       VERSION_NORMAL_UMC_CHIP_88C_B_CUT = 0x1088,
+       VERSION_NORMAL_UMC_CHIP_92C_B_CUT = 0x10a8,
+       VERSION_NORMAL_UMC_CHIP_92C_1T2R_B_CUT = 0x1090,
+       VERSION_TEST_CHIP_92D_SINGLEPHY= 0x0022,
+       VERSION_TEST_CHIP_92D_DUALPHY = 0x0002,
+       VERSION_NORMAL_CHIP_92D_SINGLEPHY= 0x002a,
+       VERSION_NORMAL_CHIP_92D_DUALPHY = 0x000a,
+       VERSION_NORMAL_CHIP_92D_C_CUT_SINGLEPHY = 0x202a,
+       VERSION_NORMAL_CHIP_92D_C_CUT_DUALPHY = 0x200a,
+       VERSION_NORMAL_CHIP_92D_D_CUT_SINGLEPHY = 0x302a,
+       VERSION_NORMAL_CHIP_92D_D_CUT_DUALPHY = 0x300a,
+}VERSION_8192C,*PVERSION_8192C;
+
+
+
+//-------------------------------------------------------------------------
+//     Channel Plan
+//-------------------------------------------------------------------------
+enum ChannelPlan{
+       CHPL_FCC        = 0,
+       CHPL_IC         = 1,
+       CHPL_ETSI       = 2,
+       CHPL_SPAIN      = 3,
+       CHPL_FRANCE     = 4,
+       CHPL_MKK        = 5,
+       CHPL_MKK1       = 6,
+       CHPL_ISRAEL     = 7,
+       CHPL_TELEC      = 8,
+       CHPL_GLOBAL     = 9,
+       CHPL_WORLD      = 10,
+};
+
+typedef struct _TxPowerInfo{
+       u8 CCKIndex[RF_PATH_MAX][CHANNEL_GROUP_MAX];
+       u8 HT40_1SIndex[RF_PATH_MAX][CHANNEL_GROUP_MAX];
+       u8 HT40_2SIndexDiff[RF_PATH_MAX][CHANNEL_GROUP_MAX];
+       s8 HT20IndexDiff[RF_PATH_MAX][CHANNEL_GROUP_MAX];
+       u8 OFDMIndexDiff[RF_PATH_MAX][CHANNEL_GROUP_MAX];
+       u8 HT40MaxOffset[RF_PATH_MAX][CHANNEL_GROUP_MAX];
+       u8 HT20MaxOffset[RF_PATH_MAX][CHANNEL_GROUP_MAX];
+       u8 TSSI_A;
+       u8 TSSI_B;
+}TxPowerInfo, *PTxPowerInfo;
+
+#define                EFUSE_REAL_CONTENT_LEN          512
+#define                EFUSE_MAP_LEN                                   128
+#define                EFUSE_MAX_SECTION                       16
+#define                EFUSE_IC_ID_OFFSET                      506     //For some inferiority IC purpose. added by Roger, 2009.09.02.
+#define                AVAILABLE_EFUSE_ADDR(addr)      (addr < EFUSE_REAL_CONTENT_LEN)
+//
+// <Roger_Notes> To prevent out of boundary programming case, leave 1byte and program full section
+// 9bytes + 1byt + 5bytes and pre 1byte.
+// For worst case:
+// | 1byte|----8bytes----|1byte|--5bytes--|
+// |         |            Reserved(14bytes)          |
+//
+#define                EFUSE_OOB_PROTECT_BYTES                 15      // PG data exclude header, dummy 6 bytes frome CP test and reserved 1byte.
+
+
+#define                EFUSE_MAP_LEN_8723                      256
+#define                EFUSE_MAX_SECTION_8723          32
+
+//========================================================
+//                     EFUSE for BT definition
+//========================================================
+#define                EFUSE_BT_REAL_CONTENT_LEN               1536    // 512*3
+#define                EFUSE_BT_MAP_LEN                                        1024    // 1k bytes
+#define                EFUSE_BT_MAX_SECTION                            128             // 1024/8
+
+#define                EFUSE_PROTECT_BYTES_BANK                        16
+
+//
+// <Roger_Notes> For RTL8723 WiFi/BT/GPS multi-function configuration. 2010.10.06.
+//
+typedef enum _RT_MULTI_FUNC{
+       RT_MULTI_FUNC_NONE = 0x00,
+       RT_MULTI_FUNC_WIFI = 0x01,
+       RT_MULTI_FUNC_BT = 0x02,
+       RT_MULTI_FUNC_GPS = 0x04,
+}RT_MULTI_FUNC,*PRT_MULTI_FUNC;
+
+//
+// <Roger_Notes> For RTL8723 WiFi PDn/GPIO polarity control configuration. 2010.10.08.
+//
+typedef enum _RT_POLARITY_CTL{
+       RT_POLARITY_LOW_ACT = 0,
+       RT_POLARITY_HIGH_ACT = 1,
+}RT_POLARITY_CTL,*PRT_POLARITY_CTL;
+
+// For RTL8723 regulator mode. by tynli. 2011.01.14.
+typedef enum _RT_REGULATOR_MODE{
+       RT_SWITCHING_REGULATOR = 0,
+       RT_LDO_REGULATOR = 1,
+}RT_REGULATOR_MODE,*PRT_REGULATOR_MODE;
+
+enum c2h_id_8192c {
+       C2H_DBG = 0,
+       C2H_TSF = 1,
+       C2H_AP_RPT_RSP = 2,
+       C2H_CCX_TX_RPT = 3,
+       C2H_BT_RSSI = 4,
+       C2H_BT_OP_MODE = 5,
+       C2H_EXT_RA_RPT = 6,
+       C2H_HW_INFO_EXCH = 10,
+       C2H_C2H_H2C_TEST = 11,
+       C2H_BT_INFO = 12,
+       C2H_BT_MP_INFO = 15,
+       MAX_C2HEVENT
+};
+
+#ifdef CONFIG_PCI_HCI
+struct hal_data_8192ce
+{
+       VERSION_8192C           VersionID;
+       RT_MULTI_FUNC           MultiFunc; // For multi-function consideration.
+       RT_POLARITY_CTL         PolarityCtl; // For Wifi PDn Polarity control.
+       RT_REGULATOR_MODE       RegulatorMode; // switching regulator or LDO
+       u16     CustomerID;
+
+       u16     FirmwareVersion;
+       u16     FirmwareVersionRev;
+       u16     FirmwareSubVersion;
+
+       u32     IntrMask[2];
+       u32     IntrMaskToSet[2];
+
+       u32     DisabledFunctions;
+
+       //current WIFI_PHY values
+       u32     ReceiveConfig;
+       u32     TransmitConfig;
+       WIRELESS_MODE           CurrentWirelessMode;
+       HT_CHANNEL_WIDTH        CurrentChannelBW;
+       u8      CurrentChannel;
+       u8      nCur40MhzPrimeSC;// Control channel sub-carrier
+
+       u16     BasicRateSet;
+
+       //rf_ctrl
+       _lock   rf_lock;
+       u8      rf_chip;
+       u8      rf_type;
+       u8      NumTotalRFPath;
+
+       INTERFACE_SELECT_8192CPCIe      InterfaceSel;
+
+       //
+       // EEPROM setting.
+       //
+       u16     EEPROMVID;
+       u16     EEPROMDID;
+       u16     EEPROMSVID;
+       u16     EEPROMSMID;
+       u16     EEPROMChannelPlan;
+       u16     EEPROMVersion;
+
+       u8      EEPROMChnlAreaTxPwrCCK[2][3];
+       u8      EEPROMChnlAreaTxPwrHT40_1S[2][3];
+       u8      EEPROMChnlAreaTxPwrHT40_2SDiff[2][3];
+       u8      EEPROMPwrLimitHT20[3];
+       u8      EEPROMPwrLimitHT40[3];
+
+       u8      bTXPowerDataReadFromEEPORM;
+       u8      EEPROMThermalMeter;
+       u8      EEPROMTSSI[2];
+
+       u8      EEPROMCustomerID;
+       u8      EEPROMBoardType;
+       u8      EEPROMRegulatory;
+
+       u8      bDefaultAntenna;
+       u8      bIQKInitialized;
+
+       u8      TxPwrLevelCck[RF_PATH_MAX][CHANNEL_MAX_NUMBER];
+       u8      TxPwrLevelHT40_1S[RF_PATH_MAX][CHANNEL_MAX_NUMBER];     // For HT 40MHZ pwr
+       u8      TxPwrLevelHT40_2S[RF_PATH_MAX][CHANNEL_MAX_NUMBER];     // For HT 40MHZ pwr
+       s8      TxPwrHt20Diff[RF_PATH_MAX][CHANNEL_MAX_NUMBER];// HT 20<->40 Pwr diff
+       u8      TxPwrLegacyHtDiff[RF_PATH_MAX][CHANNEL_MAX_NUMBER];// For HT<->legacy pwr diff
+       // For power group
+       u8      PwrGroupHT20[RF_PATH_MAX][CHANNEL_MAX_NUMBER];
+       u8      PwrGroupHT40[RF_PATH_MAX][CHANNEL_MAX_NUMBER];
+
+       u8      LegacyHTTxPowerDiff;// Legacy to HT rate power diff
+
+#ifdef CONFIG_BT_COEXIST
+       struct btcoexist_priv   bt_coexist;
+#endif
+
+       // Read/write are allow for following hardware information variables
+       u8      framesync;
+       u32     framesyncC34;
+       u8      framesyncMonitor;
+       u8      DefaultInitialGain[4];
+       u8      pwrGroupCnt;
+       u32     MCSTxPowerLevelOriginalOffset[7][16];
+       u32     CCKTxPowerLevelOriginalOffset;
+
+       u32     AntennaTxPath;                                  // Antenna path Tx
+       u32     AntennaRxPath;                                  // Antenna path Rx
+       u8      BluetoothCoexist;
+       u8      ExternalPA;
+
+       //u32   LedControlNum;
+       //u32   LedControlMode;
+       u8      bLedOpenDrain; // Support Open-drain arrangement for controlling the LED. Added by Roger, 2009.10.16.
+       //u32   TxPowerTrackControl;
+       u8      b1x1RecvCombine;        // for 1T1R receive combining
+
+       u8      bCurrentTurboEDCA;
+       u32     AcParam_BE; //Original parameter for BE, use for EDCA turbo.
+
+       //vivi, for tx power tracking, 20080407
+       //u16   TSSI_13dBm;
+       //u32   Pwr_Track;
+       // The current Tx Power Level
+       u8      CurrentCckTxPwrIdx;
+       u8      CurrentOfdm24GTxPwrIdx;
+
+       BB_REGISTER_DEFINITION_T        PHYRegDef[4];   //Radio A/B/C/D
+
+       BOOLEAN         bRFPathRxEnable[4];     // We support 4 RF path now.
+
+       u32     RfRegChnlVal[2];
+
+       u8      bCckHighPower;
+
+       //RDG enable
+       BOOLEAN  bRDGEnable;
+
+       //for host message to fw
+       u8      LastHMEBoxNum;
+
+       u8      fw_ractrl;
+       u8      RegTxPause;
+       // Beacon function related global variable.
+       u32     RegBcnCtrlVal;
+       u8      RegFwHwTxQCtrl;
+       u8      RegReg542;
+       u8      CurAntenna;
+       u8      AntDivCfg;
+
+#ifdef CONFIG_SW_ANTENNA_DIVERSITY
+       //SW Antenna Switch
+       s32                             RSSI_sum_A;
+       s32                             RSSI_sum_B;
+       s32                             RSSI_cnt_A;
+       s32                             RSSI_cnt_B;
+       BOOLEAN         RSSI_test;
+#endif
+#ifdef CONFIG_HW_ANTENNA_DIVERSITY
+       //Hybrid Antenna Diversity
+       u32                             CCK_Ant1_Cnt;
+       u32                             CCK_Ant2_Cnt;
+       u32                             OFDM_Ant1_Cnt;
+       u32                             OFDM_Ant2_Cnt;
+#endif
+
+       struct dm_priv  dmpriv;
+       u8      bDumpRxPkt;//for debug
+#ifdef DBG_CONFIG_ERROR_DETECT
+       struct sreset_priv srestpriv;
+#endif
+       u8      bInterruptMigration;
+       u8      bDisableTxInt;
+       u8      bGpioHwWpsPbc;
+
+       u8      FwRsvdPageStartOffset; //2010.06.23. Added by tynli. Reserve page start offset except beacon in TxQ.
+
+       u16     EfuseUsedBytes;
+
+#ifdef CONFIG_P2P
+       struct P2P_PS_Offload_t p2p_ps_offload;
+#endif //CONFIG_P2P
+};
+
+typedef struct hal_data_8192ce HAL_DATA_TYPE, *PHAL_DATA_TYPE;
+
+//
+// Function disabled.
+//
+#define DF_TX_BIT              BIT0
+#define DF_RX_BIT              BIT1
+#define DF_IO_BIT              BIT2
+#define DF_IO_D3_BIT                   BIT3
+
+#define RT_DF_TYPE             u32
+#define RT_DISABLE_FUNC(__pAdapter, __FuncBits) ((__pAdapter)->DisabledFunctions |= ((RT_DF_TYPE)(__FuncBits)))
+#define RT_ENABLE_FUNC(__pAdapter, __FuncBits) ((__pAdapter)->DisabledFunctions &= (~((RT_DF_TYPE)(__FuncBits))))
+#define RT_IS_FUNC_DISABLED(__pAdapter, __FuncBits) ( (__pAdapter)->DisabledFunctions & (__FuncBits) )
+#define IS_MULTI_FUNC_CHIP(_Adapter)   (((((PHAL_DATA_TYPE)(_Adapter->HalData))->MultiFunc) & (RT_MULTI_FUNC_BT|RT_MULTI_FUNC_GPS)) ? _TRUE : _FALSE)
+
+void InterruptRecognized8192CE(PADAPTER Adapter, PRT_ISR_CONTENT pIsrContent);
+VOID UpdateInterruptMask8192CE(PADAPTER Adapter, u32 AddMSR, u32 AddMSR1, u32 RemoveMSR, u32 RemoveMSR1);
+#endif
+
+#ifdef CONFIG_USB_HCI
+struct hal_data_8192cu
+{
+       VERSION_8192C           VersionID;
+       RT_MULTI_FUNC           MultiFunc; // For multi-function consideration.
+       RT_POLARITY_CTL         PolarityCtl; // For Wifi PDn Polarity control.
+       RT_REGULATOR_MODE       RegulatorMode; // switching regulator or LDO
+       u16     CustomerID;
+
+       u16     FirmwareVersion;
+       u16     FirmwareVersionRev;
+       u16     FirmwareSubVersion;
+
+       //current WIFI_PHY values
+       u32     ReceiveConfig;
+       WIRELESS_MODE           CurrentWirelessMode;
+       HT_CHANNEL_WIDTH        CurrentChannelBW;
+       u8      CurrentChannel;
+       u8      nCur40MhzPrimeSC;// Control channel sub-carrier
+
+       u16     BasicRateSet;
+
+       //rf_ctrl
+       u8      rf_chip;
+       u8      rf_type;
+       u8      NumTotalRFPath;
+
+       u8      BoardType;
+       //INTERFACE_SELECT_8192CUSB     InterfaceSel;
+
+       //
+       // EEPROM setting.
+       //
+       u16     EEPROMVID;
+       u16     EEPROMPID;
+       u16     EEPROMSVID;
+       u16     EEPROMSDID;
+       u8      EEPROMCustomerID;
+       u8      EEPROMSubCustomerID;
+       u8      EEPROMVersion;
+       u8      EEPROMRegulatory;
+
+       u8      bTXPowerDataReadFromEEPORM;
+       u8      EEPROMThermalMeter;
+
+       u8      bIQKInitialized;
+
+       u8      TxPwrLevelCck[RF_PATH_MAX][CHANNEL_MAX_NUMBER];
+       u8      TxPwrLevelHT40_1S[RF_PATH_MAX][CHANNEL_MAX_NUMBER];     // For HT 40MHZ pwr
+       u8      TxPwrLevelHT40_2S[RF_PATH_MAX][CHANNEL_MAX_NUMBER];     // For HT 40MHZ pwr
+       s8      TxPwrHt20Diff[RF_PATH_MAX][CHANNEL_MAX_NUMBER];// HT 20<->40 Pwr diff
+       u8      TxPwrLegacyHtDiff[RF_PATH_MAX][CHANNEL_MAX_NUMBER];// For HT<->legacy pwr diff
+       // For power group
+       u8      PwrGroupHT20[RF_PATH_MAX][CHANNEL_MAX_NUMBER];
+       u8      PwrGroupHT40[RF_PATH_MAX][CHANNEL_MAX_NUMBER];
+
+       u8      LegacyHTTxPowerDiff;// Legacy to HT rate power diff
+
+       // Read/write are allow for following hardware information variables
+       u8      framesync;
+       u32     framesyncC34;
+       u8      framesyncMonitor;
+       u8      DefaultInitialGain[4];
+       u8      pwrGroupCnt;
+       u32     MCSTxPowerLevelOriginalOffset[7][16];
+       u32     CCKTxPowerLevelOriginalOffset;
+
+       u32     AntennaTxPath;                                  // Antenna path Tx
+       u32     AntennaRxPath;                                  // Antenna path Rx
+       u8      BluetoothCoexist;
+       u8      ExternalPA;
+
+       u8      bLedOpenDrain; // Support Open-drain arrangement for controlling the LED. Added by Roger, 2009.10.16.
+
+       //u32   LedControlNum;
+       //u32   LedControlMode;
+       //u32   TxPowerTrackControl;
+       u8      b1x1RecvCombine;        // for 1T1R receive combining
+
+       u8      bCurrentTurboEDCA;
+       u32     AcParam_BE; //Original parameter for BE, use for EDCA turbo.
+
+       //vivi, for tx power tracking, 20080407
+       //u16   TSSI_13dBm;
+       //u32   Pwr_Track;
+       // The current Tx Power Level
+       u8      CurrentCckTxPwrIdx;
+       u8      CurrentOfdm24GTxPwrIdx;
+
+       BB_REGISTER_DEFINITION_T        PHYRegDef[4];   //Radio A/B/C/D
+
+       BOOLEAN         bRFPathRxEnable[4];     // We support 4 RF path now.
+
+       u32     RfRegChnlVal[2];
+
+       u8      bCckHighPower;
+
+       //RDG enable
+       BOOLEAN  bRDGEnable;
+
+       //for host message to fw
+       u8      LastHMEBoxNum;
+
+       u8      fw_ractrl;
+       u8      RegTxPause;
+       // Beacon function related global variable.
+       u32     RegBcnCtrlVal;
+       u8      RegFwHwTxQCtrl;
+       u8      RegReg542;
+
+       struct dm_priv  dmpriv;
+#ifdef DBG_CONFIG_ERROR_DETECT
+       struct sreset_priv srestpriv;
+#endif
+
+#ifdef CONFIG_BT_COEXIST
+       struct btcoexist_priv   bt_coexist;
+#endif
+       u8      CurAntenna;
+       u8      AntDivCfg;
+
+#ifdef CONFIG_SW_ANTENNA_DIVERSITY
+       //SW Antenna Switch
+       s32                             RSSI_sum_A;
+       s32                             RSSI_sum_B;
+       s32                             RSSI_cnt_A;
+       s32                             RSSI_cnt_B;
+       BOOLEAN         RSSI_test;
+#endif
+#ifdef CONFIG_HW_ANTENNA_DIVERSITY
+       //Hybrid Antenna Diversity
+       u32                             CCK_Ant1_Cnt;
+       u32                             CCK_Ant2_Cnt;
+       u32                             OFDM_Ant1_Cnt;
+       u32                             OFDM_Ant2_Cnt;
+#endif
+
+       u8      bDumpRxPkt;//for debug
+       u8      FwRsvdPageStartOffset; //2010.06.23. Added by tynli. Reserve page start offset except beacon in TxQ.
+
+       // 2010/08/09 MH Add CU power down mode.
+       BOOLEAN         pwrdown;
+
+       // For 92C USB endpoint setting
+       //
+
+       u32     UsbBulkOutSize;
+
+       int     RtBulkOutPipe[3];
+       int     RtBulkInPipe;
+       int     RtIntInPipe;
+       // Add for dual MAC  0--Mac0 1--Mac1
+       u32     interfaceIndex;
+
+       u8      OutEpQueueSel;
+       u8      OutEpNumber;
+
+       u8      Queue2EPNum[8];//for out endpoint number mapping
+
+#ifdef CONFIG_USB_TX_AGGREGATION
+       u8      UsbTxAggMode;
+       u8      UsbTxAggDescNum;
+#endif
+#ifdef CONFIG_USB_RX_AGGREGATION
+       u16     HwRxPageSize;                           // Hardware setting
+       u32     MaxUsbRxAggBlock;
+
+       USB_RX_AGG_MODE UsbRxAggMode;
+       u8      UsbRxAggBlockCount;                     // USB Block count. Block size is 512-byte in hight speed and 64-byte in full speed
+       u8      UsbRxAggBlockTimeout;
+       u8      UsbRxAggPageCount;                      // 8192C DMA page count
+       u8      UsbRxAggPageTimeout;
+#endif
+
+       // 2010/12/10 MH Add for USB aggreation mode dynamic shceme.
+       BOOLEAN         UsbRxHighSpeedMode;
+
+       // 2010/11/22 MH Add for slim combo debug mode selective.
+       // This is used for fix the drawback of CU TSMC-A/UMC-A cut. HW auto suspend ability. Close BT clock.
+       BOOLEAN         SlimComboDbg;
+
+       u16     EfuseUsedBytes;
+
+#ifdef CONFIG_P2P
+       struct P2P_PS_Offload_t p2p_ps_offload;
+#endif //CONFIG_P2P
+};
+
+typedef struct hal_data_8192cu HAL_DATA_TYPE, *PHAL_DATA_TYPE;
+#endif
+
+#define GET_HAL_DATA(__pAdapter)       ((HAL_DATA_TYPE *)((__pAdapter)->HalData))
+#define GET_RF_TYPE(priv)      (GET_HAL_DATA(priv)->rf_type)
+
+#define INCLUDE_MULTI_FUNC_BT(_Adapter)        (GET_HAL_DATA(_Adapter)->MultiFunc & RT_MULTI_FUNC_BT)
+#define INCLUDE_MULTI_FUNC_GPS(_Adapter)       (GET_HAL_DATA(_Adapter)->MultiFunc & RT_MULTI_FUNC_GPS)
+
+VOID rtl8192c_FirmwareSelfReset(IN PADAPTER Adapter);
+int FirmwareDownload92C(IN PADAPTER Adapter,IN BOOLEAN                 bUsedWoWLANFw);
+VOID InitializeFirmwareVars92C(PADAPTER Adapter);
+u8 GetEEPROMSize8192C(PADAPTER Adapter);
+void rtl8192c_EfuseParseChnlPlan(PADAPTER padapter, u8 *hwinfo, BOOLEAN AutoLoadFail);
+VERSION_8192C rtl8192c_ReadChipVersion(IN PADAPTER Adapter);
+void rtl8192c_ReadBluetoothCoexistInfo(PADAPTER Adapter, u8 *PROMContent, BOOLEAN AutoloadFail);
+//void rtl8192c_free_hal_data(_adapter * padapter);
+VOID rtl8192c_EfuseParseIDCode(PADAPTER pAdapter, u8 *hwinfo);
+void rtl8192c_set_hal_ops(struct hal_ops *pHalFunc);
+
+s32 c2h_id_filter_ccx_8192c(u8 id);
+#endif
+
+#ifdef CONFIG_MP_INCLUDED
+
+extern void Hal_SetAntenna(PADAPTER pAdapter);
+extern void Hal_SetBandwidth(PADAPTER pAdapter);
+
+extern void Hal_SetTxPower(PADAPTER pAdapter);
+extern void Hal_SetCarrierSuppressionTx(PADAPTER pAdapter, u8 bStart);
+extern void Hal_SetSingleToneTx ( PADAPTER pAdapter , u8 bStart );
+extern void Hal_SetSingleCarrierTx (PADAPTER pAdapter, u8 bStart);
+extern void Hal_SetContinuousTx (PADAPTER pAdapter, u8 bStart);
+
+extern void Hal_SetDataRate(PADAPTER pAdapter);
+extern void Hal_SetChannel(PADAPTER pAdapter);
+extern void Hal_SetAntennaPathPower(PADAPTER pAdapter);
+extern s32 Hal_SetThermalMeter(PADAPTER pAdapter, u8 target_ther);
+extern s32 Hal_SetPowerTracking(PADAPTER padapter, u8 enable);
+extern void Hal_GetPowerTracking(PADAPTER padapter, u8 * enable);
+extern void Hal_GetThermalMeter(PADAPTER pAdapter, u8 *value);
+extern void Hal_mpt_SwitchRfSetting(PADAPTER pAdapter);
+extern void Hal_MPT_CCKTxPowerAdjust(PADAPTER Adapter, BOOLEAN bInCH14);
+extern void Hal_MPT_CCKTxPowerAdjustbyIndex(PADAPTER pAdapter, BOOLEAN beven);
+extern void Hal_SetCCKTxPower(PADAPTER pAdapter, u8 * TxPower);
+extern void Hal_SetOFDMTxPower(PADAPTER pAdapter, u8 * TxPower);
+extern void Hal_TriggerRFThermalMeter(PADAPTER pAdapter);
+extern u8 Hal_ReadRFThermalMeter(PADAPTER pAdapter);
+extern void Hal_SetCCKContinuousTx(PADAPTER pAdapter, u8 bStart);
+extern void Hal_SetOFDMContinuousTx(PADAPTER pAdapter, u8 bStart);
+
+#endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtl8192c_led.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtl8192c_led.h
new file mode 100644 (file)
index 0000000..88002db
--- /dev/null
@@ -0,0 +1,41 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __RTL8192C_LED_H_
+#define __RTL8192C_LED_H_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+
+
+//================================================================================
+// Interface to manipulate LED objects.
+//================================================================================
+#ifdef CONFIG_USB_HCI
+void rtl8192cu_InitSwLeds(_adapter *padapter);
+void rtl8192cu_DeInitSwLeds(_adapter *padapter);
+#endif
+#ifdef CONFIG_PCI_HCI
+void rtl8192ce_gen_RefreshLedState(PADAPTER Adapter);
+void rtl8192ce_InitSwLeds(_adapter *padapter);
+void rtl8192ce_DeInitSwLeds(_adapter *padapter);
+#endif
+
+#endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtl8192c_recv.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtl8192c_recv.h
new file mode 100644 (file)
index 0000000..9cfca91
--- /dev/null
@@ -0,0 +1,183 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef _RTL8192C_RECV_H_
+#define _RTL8192C_RECV_H_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+
+
+#ifdef PLATFORM_OS_XP
+       #define NR_RECVBUFF (16)
+#elif defined(PLATFORM_OS_CE)
+       #define NR_RECVBUFF (4)
+#else
+#ifdef CONFIG_SINGLE_RECV_BUF
+       #define NR_RECVBUFF (1)
+#else
+       #define NR_RECVBUFF (4)
+#endif //CONFIG_SINGLE_RECV_BUF
+
+       #define NR_PREALLOC_RECV_SKB (8)
+#endif
+
+
+#define RECV_BLK_SZ 512
+#define RECV_BLK_CNT 16
+#define RECV_BLK_TH RECV_BLK_CNT
+
+#if defined(CONFIG_USB_HCI)
+
+#ifdef PLATFORM_OS_CE
+#define MAX_RECVBUF_SZ (8192+1024) // 8K+1k
+#else
+       #ifndef CONFIG_MINIMAL_MEMORY_USAGE
+               //#define MAX_RECVBUF_SZ (32768) // 32k
+               //#define MAX_RECVBUF_SZ (16384) //16K
+               //#define MAX_RECVBUF_SZ (10240) //10K
+               #ifdef CONFIG_PLATFORM_MSTAR
+                       #define MAX_RECVBUF_SZ (8192) // 8K
+               #else
+                       #define MAX_RECVBUF_SZ (15360) // 15k < 16k
+               #endif
+               //#define MAX_RECVBUF_SZ (8192+1024) // 8K+1k
+       #else
+               #define MAX_RECVBUF_SZ (4000) // about 4K
+       #endif
+#endif
+
+#elif defined(CONFIG_PCI_HCI)
+//#ifndef CONFIG_MINIMAL_MEMORY_USAGE
+//     #define MAX_RECVBUF_SZ (9100)
+//#else
+       #define MAX_RECVBUF_SZ (4000) // about 4K
+//#endif
+
+#define RX_MPDU_QUEUE                          0
+#define RX_CMD_QUEUE                           1
+#define RX_MAX_QUEUE                           2
+#endif
+
+
+#define RECV_BULK_IN_ADDR              0x80
+#define RECV_INT_IN_ADDR               0x81
+
+#define PHY_RSSI_SLID_WIN_MAX                          100
+#define PHY_LINKQUALITY_SLID_WIN_MAX           20
+
+
+struct phy_stat
+{
+       unsigned int phydw0;
+
+       unsigned int phydw1;
+
+       unsigned int phydw2;
+
+       unsigned int phydw3;
+
+       unsigned int phydw4;
+
+       unsigned int phydw5;
+
+       unsigned int phydw6;
+
+       unsigned int phydw7;
+};
+
+typedef struct _Phy_OFDM_Rx_Status_Report_8192cd
+{
+       unsigned char   trsw_gain_X[4];
+       unsigned char   pwdb_all;
+       unsigned char   cfosho_X[4];
+       unsigned char   cfotail_X[4];
+       unsigned char   rxevm_X[2];
+       unsigned char   rxsnr_X[4];
+       unsigned char   pdsnr_X[2];
+       unsigned char   csi_current_X[2];
+       unsigned char   csi_target_X[2];
+       unsigned char   sigevm;
+       unsigned char   max_ex_pwr;
+//#ifdef RTL8192SE
+#ifdef CONFIG_LITTLE_ENDIAN
+       unsigned char ex_intf_flg:1;
+       unsigned char sgi_en:1;
+       unsigned char rxsc:2;
+       //unsigned char rsvd:4;
+       unsigned char idle_long:1;
+       unsigned char r_ant_train_en:1;
+       unsigned char ANTSELB:1;
+       unsigned char ANTSEL:1;
+#else  // _BIG_ENDIAN_
+       //unsigned char rsvd:4;
+       unsigned char ANTSEL:1;
+       unsigned char ANTSELB:1;
+       unsigned char r_ant_train_en:1;
+       unsigned char idle_long:1;
+       unsigned char rxsc:2;
+       unsigned char sgi_en:1;
+       unsigned char ex_intf_flg:1;
+#endif
+//#else        // RTL8190, RTL8192E
+//     unsigned char   sgi_en;
+//     unsigned char   rxsc_sgien_exflg;
+//#endif
+} __attribute__ ((packed))PHY_STS_OFDM_8192CD_T,PHY_RX_DRIVER_INFO_8192CD;
+
+typedef struct _Phy_CCK_Rx_Status_Report_8192cd
+{
+       /* For CCK rate descriptor. This is a signed 8:1 variable. LSB bit presend
+               0.5. And MSB 7 bts presend a signed value. Range from -64~+63.5. */
+       u8      adc_pwdb_X[4];
+       u8      SQ_rpt;
+       u8      cck_agc_rpt;
+} PHY_STS_CCK_8192CD_T;
+
+
+// Rx smooth factor
+#define        Rx_Smooth_Factor (20)
+
+
+#ifdef CONFIG_USB_HCI
+typedef struct _INTERRUPT_MSG_FORMAT_EX{
+       unsigned int C2H_MSG0;
+       unsigned int C2H_MSG1;
+       unsigned int C2H_MSG2;
+       unsigned int C2H_MSG3;
+       unsigned int HISR; // from HISR Reg0x124, read to clear
+       unsigned int HISRE;// from HISRE Reg0x12c, read to clear
+       unsigned int  MSG_EX;
+}INTERRUPT_MSG_FORMAT_EX,*PINTERRUPT_MSG_FORMAT_EX;
+
+void rtl8192cu_init_recvbuf(_adapter *padapter, struct recv_buf *precvbuf);
+int    rtl8192cu_init_recv_priv(_adapter * padapter);
+void rtl8192cu_free_recv_priv(_adapter * padapter);
+#endif
+
+#ifdef CONFIG_PCI_HCI
+int    rtl8192ce_init_recv_priv(_adapter * padapter);
+void rtl8192ce_free_recv_priv(_adapter * padapter);
+#endif
+
+void rtl8192c_translate_rx_signal_stuff(union recv_frame *precvframe, struct phy_stat *pphy_info);
+void rtl8192c_query_rx_desc_status(union recv_frame *precvframe, struct recv_stat *pdesc);
+
+#endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtl8192c_rf.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtl8192c_rf.h
new file mode 100644 (file)
index 0000000..7e22503
--- /dev/null
@@ -0,0 +1,91 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+/******************************************************************************
+ *
+ *
+ * Module:     rtl8192c_rf.h   ( Header File)
+ *
+ * Note:       Collect every HAL RF type exter API or constant.
+ *
+ * Function:
+ *
+ * Export:
+ *
+ * Abbrev:
+ *
+ * History:
+ * Data                        Who             Remark
+ *
+ * 09/25/2008  MHC             Create initial version.
+ *
+ *
+******************************************************************************/
+#ifndef _RTL8192C_RF_H_
+#define _RTL8192C_RF_H_
+/* Check to see if the file has been included already.  */
+
+
+/*--------------------------Define Parameters-------------------------------*/
+
+//
+// For RF 6052 Series
+//
+#define                RF6052_MAX_TX_PWR                       0x3F
+#define                RF6052_MAX_REG                          0x3F
+#define                RF6052_MAX_PATH                         2
+/*--------------------------Define Parameters-------------------------------*/
+
+
+/*------------------------------Define structure----------------------------*/
+
+/*------------------------------Define structure----------------------------*/
+
+
+/*------------------------Export global variable----------------------------*/
+/*------------------------Export global variable----------------------------*/
+
+/*------------------------Export Marco Definition---------------------------*/
+
+/*------------------------Export Marco Definition---------------------------*/
+
+
+/*--------------------------Exported Function prototype---------------------*/
+
+//
+// RF RL6052 Series API
+//
+void           rtl8192c_RF_ChangeTxPath(       IN      PADAPTER        Adapter,
+                                                                               IN      u16             DataRate);
+void           rtl8192c_PHY_RF6052SetBandwidth(
+                                                                               IN      PADAPTER                                Adapter,
+                                                                               IN      HT_CHANNEL_WIDTH                Bandwidth);
+VOID   rtl8192c_PHY_RF6052SetCckTxPower(
+                                                                               IN      PADAPTER        Adapter,
+                                                                               IN      u8*             pPowerlevel);
+VOID   rtl8192c_PHY_RF6052SetOFDMTxPower(
+                                                                               IN      PADAPTER        Adapter,
+                                                                               IN      u8*             pPowerLevel,
+                                                                               IN      u8              Channel);
+int    PHY_RF6052_Config8192C( IN      PADAPTER                Adapter );
+
+/*--------------------------Exported Function prototype---------------------*/
+
+
+#endif/* End of HalRf.h */
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtl8192c_spec.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtl8192c_spec.h
new file mode 100644 (file)
index 0000000..c45a140
--- /dev/null
@@ -0,0 +1,1864 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __RTL8192C_SPEC_H__
+#define __RTL8192C_SPEC_H__
+
+#include <drv_conf.h>
+
+#ifndef BIT
+#define BIT(x)         (1 << (x))
+#endif
+
+#define BIT0           0x00000001
+#define BIT1           0x00000002
+#define BIT2           0x00000004
+#define BIT3           0x00000008
+#define BIT4           0x00000010
+#define BIT5           0x00000020
+#define BIT6           0x00000040
+#define BIT7           0x00000080
+#define BIT8           0x00000100
+#define BIT9           0x00000200
+#define BIT10  0x00000400
+#define BIT11  0x00000800
+#define BIT12  0x00001000
+#define BIT13  0x00002000
+#define BIT14  0x00004000
+#define BIT15  0x00008000
+#define BIT16  0x00010000
+#define BIT17  0x00020000
+#define BIT18  0x00040000
+#define BIT19  0x00080000
+#define BIT20  0x00100000
+#define BIT21  0x00200000
+#define BIT22  0x00400000
+#define BIT23  0x00800000
+#define BIT24  0x01000000
+#define BIT25  0x02000000
+#define BIT26  0x04000000
+#define BIT27  0x08000000
+#define BIT28  0x10000000
+#define BIT29  0x20000000
+#define BIT30  0x40000000
+#define BIT31  0x80000000
+
+
+//============================================================
+//       8192C Regsiter offset definition
+//============================================================
+
+
+//============================================================
+//
+//============================================================
+
+//-----------------------------------------------------
+//
+//     0x0000h ~ 0x00FFh       System Configuration
+//
+//-----------------------------------------------------
+#define REG_SYS_ISO_CTRL                       0x0000
+#define REG_SYS_FUNC_EN                        0x0002
+#define REG_APS_FSMCO                          0x0004
+#define REG_SYS_CLKR                           0x0008
+#define REG_9346CR                                     0x000A
+#define REG_EE_VPD                                     0x000C
+#define REG_AFE_MISC                           0x0010
+#define REG_SPS0_CTRL                          0x0011
+#define REG_SPS_OCP_CFG                        0x0018
+#define REG_RSV_CTRL                           0x001C
+#define REG_RF_CTRL                                    0x001F
+#define REG_LDOA15_CTRL                        0x0020
+#define REG_LDOV12D_CTRL                       0x0021
+#define REG_LDOHCI12_CTRL                      0x0022
+#define REG_LPLDO_CTRL                         0x0023
+#define REG_AFE_XTAL_CTRL                      0x0024
+#define REG_AFE_PLL_CTRL                       0x0028
+#define REG_EFUSE_CTRL                         0x0030
+#define REG_EFUSE_TEST                         0x0034
+#define REG_PWR_DATA                           0x0038
+#define REG_CAL_TIMER                          0x003C
+#define REG_ACLK_MON                           0x003E
+#define REG_GPIO_MUXCFG                        0x0040
+#define REG_GPIO_IO_SEL                                0x0042
+#define REG_MAC_PINMUX_CFG             0x0043
+#define REG_GPIO_PIN_CTRL                      0x0044
+#define REG_GPIO_INTM                          0x0048
+#define REG_LEDCFG0                                    0x004C
+#define REG_LEDCFG1                                    0x004D
+#define REG_LEDCFG2                                    0x004E
+#define REG_LEDCFG3                                    0x004F
+#define REG_LEDCFG                                     REG_LEDCFG2
+#define REG_FSIMR                                      0x0050
+#define REG_FSISR                                      0x0054
+#define REG_HSIMR                                      0x0058
+#define REG_HSISR                                      0x005c
+#define REG_GPIO_PIN_CTRL_2            0x0060 // RTL8723 WIFI/BT/GPS Multi-Function GPIO Pin Control.
+#define REG_GPIO_IO_SEL_2                      0x0062 // RTL8723 WIFI/BT/GPS Multi-Function GPIO Select.
+#define REG_MULTI_FUNC_CTRL            0x0068 // RTL8723 WIFI/BT/GPS Multi-Function control source.
+#define REG_MCUFWDL                            0x0080
+#ifdef CONFIG_WOWLAN
+#define REG_WOWLAN_REASON                      0x0081
+#endif //CONFIG_WOWLAN
+#define REG_HMEBOX_EXT_0                       0x0088
+#define REG_HMEBOX_EXT_1                       0x008A
+#define REG_HMEBOX_EXT_2                       0x008C
+#define REG_HMEBOX_EXT_3                       0x008E
+#define REG_HOST_SUSP_CNT                      0x00BC  // Host suspend counter on FPGA platform
+#define REG_EFUSE_ACCESS                       0x00CF  // Efuse access protection for RTL8723
+#define REG_BIST_SCAN                          0x00D0
+#define REG_BIST_RPT                           0x00D4
+#define REG_BIST_ROM_RPT                       0x00D8
+#define REG_USB_SIE_INTF                       0x00E0
+#define REG_PCIE_MIO_INTF                      0x00E4
+#define REG_PCIE_MIO_INTD                      0x00E8
+#define REG_HPON_FSM                           0x00EC
+#define REG_SYS_CFG                                    0x00F0
+#define REG_GPIO_OUTSTS                        0x00F4  // For RTL8723 only.
+
+//-----------------------------------------------------
+//
+//     0x0100h ~ 0x01FFh       MACTOP General Configuration
+//
+//-----------------------------------------------------
+#define REG_CR                                         0x0100
+#define REG_PBP                                                0x0104
+#define REG_TRXDMA_CTRL                        0x010C
+#define REG_TRXFF_BNDY                         0x0114
+#define REG_TRXFF_STATUS                       0x0118
+#define REG_RXFF_PTR                           0x011C
+#define REG_HIMR                                       0x0120
+#define REG_HISR                                       0x0124
+#define REG_HIMRE                                      0x0128
+#define REG_HISRE                                      0x012C
+#define REG_CPWM                                       0x012F
+#define REG_FWIMR                                      0x0130
+#define REG_FWISR                                      0x0134
+#define REG_PKTBUF_DBG_CTRL            0x0140
+#define REG_PKTBUF_DBG_DATA_L          0x0144
+#define REG_PKTBUF_DBG_DATA_H  0x0148
+
+#define REG_TC0_CTRL                           0x0150
+#define REG_TC1_CTRL                           0x0154
+#define REG_TC2_CTRL                           0x0158
+#define REG_TC3_CTRL                           0x015C
+#define REG_TC4_CTRL                           0x0160
+#define REG_TCUNIT_BASE                        0x0164
+#define REG_MBIST_START                        0x0174
+#define REG_MBIST_DONE                         0x0178
+#define REG_MBIST_FAIL                         0x017C
+#define REG_C2HEVT_MSG_NORMAL  0x01A0
+#define REG_C2HEVT_CLEAR                       0x01AF
+#define REG_C2HEVT_MSG_TEST            0x01B8
+#define REG_MCUTST_1                           0x01c0
+#define REG_FMETHR                                     0x01C8
+#define REG_HMETFR                                     0x01CC
+#define REG_HMEBOX_0                           0x01D0
+#define REG_HMEBOX_1                           0x01D4
+#define REG_HMEBOX_2                           0x01D8
+#define REG_HMEBOX_3                           0x01DC
+
+#define REG_LLT_INIT                           0x01E0
+#define REG_BB_ACCEESS_CTRL            0x01E8
+#define REG_BB_ACCESS_DATA             0x01EC
+
+
+//-----------------------------------------------------
+//
+//     0x0200h ~ 0x027Fh       TXDMA Configuration
+//
+//-----------------------------------------------------
+#define REG_RQPN                                       0x0200
+#define REG_FIFOPAGE                           0x0204
+#define REG_TDECTRL                                    0x0208
+#define REG_TXDMA_OFFSET_CHK           0x020C
+#define REG_TXDMA_STATUS                       0x0210
+#define REG_RQPN_NPQ                           0x0214
+
+//-----------------------------------------------------
+//
+//     0x0280h ~ 0x02FFh       RXDMA Configuration
+//
+//-----------------------------------------------------
+#define REG_RXDMA_AGG_PG_TH            0x0280
+#define REG_RXPKT_NUM                          0x0284
+#define REG_RXDMA_STATUS                       0x0288
+
+
+//-----------------------------------------------------
+//
+//     0x0300h ~ 0x03FFh       PCIe
+//
+//-----------------------------------------------------
+#define        REG_PCIE_CTRL_REG                       0x0300
+#define        REG_INT_MIG                             0x0304  // Interrupt Migration
+#define        REG_BCNQ_DESA                           0x0308  // TX Beacon Descriptor Address
+#define        REG_HQ_DESA                             0x0310  // TX High Queue Descriptor Address
+#define        REG_MGQ_DESA                            0x0318  // TX Manage Queue Descriptor Address
+#define        REG_VOQ_DESA                            0x0320  // TX VO Queue Descriptor Address
+#define        REG_VIQ_DESA                            0x0328  // TX VI Queue Descriptor Address
+#define        REG_BEQ_DESA                            0x0330  // TX BE Queue Descriptor Address
+#define        REG_BKQ_DESA                            0x0338  // TX BK Queue Descriptor Address
+#define        REG_RX_DESA                             0x0340  // RX Queue     Descriptor Address
+#define        REG_DBI                                 0x0348  // Backdoor REG for Access Configuration
+#define        REG_MDIO                                        0x0354  // MDIO for Access PCIE PHY
+#define        REG_DBG_SEL                             0x0360  // Debug Selection Register
+#define        REG_PCIE_HRPWM                  0x0361  //PCIe RPWM
+#define        REG_PCIE_HCPWM                  0x0363  //PCIe CPWM
+#define        REG_UART_CTRL                           0x0364  // UART Control
+#define        REG_UART_TX_DESA                        0x0370  // UART TX Descriptor Address
+#define        REG_UART_RX_DESA                        0x0378  // UART Rx Descriptor Address
+
+
+// spec version 11
+//-----------------------------------------------------
+//
+//     0x0400h ~ 0x047Fh       Protocol Configuration
+//
+//-----------------------------------------------------
+#define REG_VOQ_INFORMATION                    0x0400
+#define REG_VIQ_INFORMATION                    0x0404
+#define REG_BEQ_INFORMATION                    0x0408
+#define REG_BKQ_INFORMATION                    0x040C
+#define REG_MGQ_INFORMATION                    0x0410
+#define REG_HGQ_INFORMATION                    0x0414
+#define REG_BCNQ_INFORMATION                   0x0418
+
+
+#define REG_CPU_MGQ_INFORMATION                0x041C
+#define REG_FWHW_TXQ_CTRL                              0x0420
+#define REG_HWSEQ_CTRL                                 0x0423
+#define REG_TXPKTBUF_BCNQ_BDNY         0x0424
+#define REG_TXPKTBUF_MGQ_BDNY          0x0425
+#define REG_LIFETIME_EN                                0x0426
+#define REG_MULTI_BCNQ_OFFSET                  0x0427
+#define REG_SPEC_SIFS                                  0x0428
+#define REG_RL                                                 0x042A
+#define REG_DARFRC                                             0x0430
+#define REG_RARFRC                                             0x0438
+#define REG_RRSR                                               0x0440
+#define REG_ARFR0                                              0x0444
+#define REG_ARFR1                                              0x0448
+#define REG_ARFR2                                              0x044C
+#define REG_ARFR3                                              0x0450
+#define REG_AGGLEN_LMT                                 0x0458
+#define REG_AMPDU_MIN_SPACE                    0x045C
+#define REG_TXPKTBUF_WMAC_LBK_BF_HD    0x045D
+#define REG_FAST_EDCA_CTRL                             0x0460
+#define REG_RD_RESP_PKT_TH                             0x0463
+#define REG_INIRTS_RATE_SEL                    0x0480
+#define REG_INIDATA_RATE_SEL                   0x0484
+
+//#define REG_FW_TSF_SYNC_CNT                          0x04A0
+#define REG_FW_RESET_TSF_CNT_1                         0x05FC
+#define REG_FW_RESET_TSF_CNT_0                         0x05FD
+#define REG_FW_BCN_DIS_CNT                             0x05FE
+
+#define REG_POWER_STATUS                               0x04A4
+#define REG_POWER_STAGE1                               0x04B4
+#define REG_POWER_STAGE2                               0x04B8
+#define REG_PKT_VO_VI_LIFE_TIME                0x04C0
+#define REG_PKT_BE_BK_LIFE_TIME                0x04C2
+#define REG_STBC_SETTING                               0x04C4
+#define REG_PROT_MODE_CTRL                     0x04C8
+#define REG_MAX_AGGR_NUM                               0x04CA
+#define REG_RTS_MAX_AGGR_NUM                   0x04CB
+#define REG_BAR_MODE_CTRL                              0x04CC
+#define REG_RA_TRY_RATE_AGG_LMT                0x04CF
+#define REG_NQOS_SEQ                                   0x04DC
+#define REG_QOS_SEQ                                    0x04DE
+#define REG_NEED_CPU_HANDLE                    0x04E0
+#define REG_PKT_LOSE_RPT                               0x04E1
+#define REG_PTCL_ERR_STATUS                    0x04E2
+#define REG_DUMMY                                              0x04FC
+
+
+
+//-----------------------------------------------------
+//
+//     0x0500h ~ 0x05FFh       EDCA Configuration
+//
+//-----------------------------------------------------
+#define REG_EDCA_VO_PARAM                      0x0500
+#define REG_EDCA_VI_PARAM                      0x0504
+#define REG_EDCA_BE_PARAM                      0x0508
+#define REG_EDCA_BK_PARAM                      0x050C
+#define REG_BCNTCFG                                    0x0510
+#define REG_PIFS                                               0x0512
+#define REG_RDG_PIFS                           0x0513
+#define REG_SIFS_CCK                           0x0514
+#define REG_SIFS_OFDM                          0x0516
+#define REG_SIFS_CTX                           0x0514
+#define REG_SIFS_TRX                           0x0516
+#define REG_TSFTR_SYN_OFFSET           0x0518
+#define REG_AGGR_BREAK_TIME            0x051A
+#define REG_SLOT                                       0x051B
+#define REG_TX_PTCL_CTRL                       0x0520
+#define REG_TXPAUSE                                    0x0522
+#define REG_DIS_TXREQ_CLR                      0x0523
+#define REG_RD_CTRL                                    0x0524
+#define REG_TBTT_PROHIBIT                      0x0540
+#define REG_RD_NAV_NXT                         0x0544
+#define REG_NAV_PROT_LEN                       0x0546
+#define REG_BCN_CTRL                           0x0550
+#define REG_BCN_CTRL_1                         0x0551
+#define REG_MBID_NUM                           0x0552
+#define REG_DUAL_TSF_RST                       0x0553
+#define REG_BCN_INTERVAL                       0x0554  // The same as REG_MBSSID_BCN_SPACE
+#define REG_MBSSID_BCN_SPACE           0x0554
+#define REG_DRVERLYINT                         0x0558
+#define REG_BCNDMATIM                          0x0559
+#define REG_ATIMWND                            0x055A
+#define REG_BCN_MAX_ERR                        0x055D
+#define REG_RXTSF_OFFSET_CCK           0x055E
+#define REG_RXTSF_OFFSET_OFDM          0x055F
+#define REG_TSFTR                                      0x0560
+#define REG_TSFTR1                                     0x0568
+#define REG_INIT_TSFTR                         0x0564
+#define REG_ATIMWND_1                          0x0570
+#define REG_PSTIMER                                    0x0580
+#define REG_TIMER0                                     0x0584
+#define REG_TIMER1                                     0x0588
+#define REG_ACMHWCTRL                          0x05C0
+#define REG_ACMRSTCTRL                         0x05C1
+#define REG_ACMAVG                                     0x05C2
+#define REG_VO_ADMTIME                         0x05C4
+#define REG_VI_ADMTIME                         0x05C6
+#define REG_BE_ADMTIME                         0x05C8
+#define REG_EDCA_RANDOM_GEN            0x05CC
+#define REG_SCH_TXCMD                          0x05D0
+
+
+//-----------------------------------------------------
+//
+//     0x0600h ~ 0x07FFh       WMAC Configuration
+//
+//-----------------------------------------------------
+#define REG_APSD_CTRL                          0x0600
+#define REG_BWOPMODE                           0x0603
+#define REG_TCR                                                0x0604
+#define REG_RCR                                                0x0608
+#define REG_RX_PKT_LIMIT                       0x060C
+#define REG_RX_DLK_TIME                        0x060D
+#define REG_RX_DRVINFO_SZ                      0x060F
+
+#define REG_MACID                                      0x0610
+#define REG_BSSID                                      0x0618
+#define REG_MAR                                                0x0620
+#define REG_MBIDCAMCFG                         0x0628
+
+#define REG_USTIME_EDCA                        0x0638
+#define REG_MAC_SPEC_SIFS                      0x063A
+
+// 20100719 Joseph: Hardware register definition change. (HW datasheet v54)
+#define REG_R2T_SIFS                           0x063C  // [15:8]SIFS_R2T_OFDM, [7:0]SIFS_R2T_CCK
+#define REG_T2T_SIFS                           0x063E  // [15:8]SIFS_T2T_OFDM, [7:0]SIFS_T2T_CCK
+#define REG_ACKTO                                      0x0640
+#define REG_CTS2TO                                     0x0641
+#define REG_EIFS                                               0x0642
+
+//WMA, BA, CCX
+#define REG_NAV_CTRL                           0x0650
+#define REG_BACAMCMD                           0x0654
+#define REG_BACAMCONTENT                       0x0658
+#define REG_LBDLY                                      0x0660
+#define REG_FWDLY                                      0x0661
+#define REG_RXERR_RPT                          0x0664
+#define REG_WMAC_TRXPTCL_CTL           0x0668
+
+
+// Security
+#define REG_CAMCMD                                     0x0670
+#define REG_CAMWRITE                           0x0674
+#define REG_CAMREAD                            0x0678
+#define REG_CAMDBG                                     0x067C
+#define REG_SECCFG                                     0x0680
+
+// Power
+#define REG_WOW_CTRL                           0x0690
+#define REG_PSSTATUS                           0x0691
+#define REG_PS_RX_INFO                         0x0692
+#define REG_LPNAV_CTRL                         0x0694
+#define REG_WKFMCAM_CMD                        0x0698
+#define REG_WKFMCAM_RWD                        0x069C
+#define REG_RXFLTMAP0                          0x06A0
+#define REG_RXFLTMAP1                          0x06A2
+#define REG_RXFLTMAP2                          0x06A4
+#define REG_BCN_PSR_RPT                        0x06A8
+#define REG_CALB32K_CTRL                       0x06AC
+#define REG_PKT_MON_CTRL                       0x06B4
+#define REG_BT_COEX_TABLE                      0x06C0
+#define REG_WMAC_RESP_TXINFO           0x06D8
+
+#define REG_MACID1                                     0x0700
+#define REG_BSSID1                                     0x0708
+
+
+//-----------------------------------------------------
+//
+//     0xFE00h ~ 0xFE55h       USB Configuration
+//
+//-----------------------------------------------------
+#define REG_USB_INFO                           0xFE17
+#define REG_USB_SPECIAL_OPTION 0xFE55
+#define REG_USB_DMA_AGG_TO             0xFE5B
+#define REG_USB_AGG_TO                         0xFE5C
+#define REG_USB_AGG_TH                         0xFE5D
+
+// For test chip
+#define REG_TEST_USB_TXQS                      0xFE48
+#define REG_TEST_SIE_VID                       0xFE60          // 0xFE60~0xFE61
+#define REG_TEST_SIE_PID                       0xFE62          // 0xFE62~0xFE63
+#define REG_TEST_SIE_OPTIONAL          0xFE64
+#define REG_TEST_SIE_CHIRP_K           0xFE65
+#define REG_TEST_SIE_PHY                       0xFE66          // 0xFE66~0xFE6B
+#define REG_TEST_SIE_MAC_ADDR          0xFE70          // 0xFE70~0xFE75
+#define REG_TEST_SIE_STRING            0xFE80          // 0xFE80~0xFEB9
+
+
+// For normal chip
+#define REG_NORMAL_SIE_VID                     0xFE60          // 0xFE60~0xFE61
+#define REG_NORMAL_SIE_PID                     0xFE62          // 0xFE62~0xFE63
+#define REG_NORMAL_SIE_OPTIONAL        0xFE64
+#define REG_NORMAL_SIE_EP                      0xFE65          // 0xFE65~0xFE67
+#define REG_NORMAL_SIE_PHY             0xFE68          // 0xFE68~0xFE6B
+#define REG_NORMAL_SIE_OPTIONAL2       0xFE6C
+#define REG_NORMAL_SIE_GPS_EP          0xFE6D          // 0xFE6D, for RTL8723 only.
+#define REG_NORMAL_SIE_MAC_ADDR        0xFE70          // 0xFE70~0xFE75
+#define REG_NORMAL_SIE_STRING          0xFE80          // 0xFE80~0xFEDF
+
+
+//-----------------------------------------------------
+//
+//     Redifine 8192C register definition for compatibility
+//
+//-----------------------------------------------------
+
+// TODO: use these definition when using REG_xxx naming rule.
+// NOTE: DO NOT Remove these definition. Use later.
+
+#define        SYS_ISO_CTRL                            REG_SYS_ISO_CTRL        // System Isolation Interface Control.
+#define        SYS_FUNC_EN                             REG_SYS_FUNC_EN         // System Function Enable.
+#define        SYS_CLK                                         REG_SYS_CLKR
+#define        CR9346                                          REG_9346CR                      // 93C46/93C56 Command Register.
+#define        EFUSE_CTRL                                      REG_EFUSE_CTRL          // E-Fuse Control.
+#define        EFUSE_TEST                                      REG_EFUSE_TEST          // E-Fuse Test.
+#define        MSR                                                     (REG_CR + 2)            // Media Status register
+#define        ISR                                                     REG_HISR
+#define        TSFR                                            REG_TSFTR                       // Timing Sync Function Timer Register.
+
+#define        MACIDR0                                 REG_MACID                       // MAC ID Register, Offset 0x0050-0x0053
+#define        MACIDR4                                 (REG_MACID + 4)         // MAC ID Register, Offset 0x0054-0x0055
+
+#define        PBP                                                     REG_PBP
+
+// Redifine MACID register, to compatible prior ICs.
+#define        IDR0                                            MACIDR0
+#define        IDR4                                            MACIDR4
+
+
+//
+// 9. Security Control Registers       (Offset: )
+//
+#define        RWCAM                                           REG_CAMCMD              //IN 8190 Data Sheet is called CAMcmd
+#define        WCAMI                                           REG_CAMWRITE    // Software write CAM input content
+#define        RCAMO                                           REG_CAMREAD             // Software read/write CAM config
+#define        CAMDBG                                          REG_CAMDBG
+#define        SECR                                            REG_SECCFG              //Security Configuration Register
+
+// Unused register
+#define        UnusedRegister                          0x1BF
+#define        DCAM                                            UnusedRegister
+#define        PSR                                                     UnusedRegister
+#define        BBAddr                                          UnusedRegister
+#define        PhyDataR                                        UnusedRegister
+
+#define        InvalidBBRFValue                        0x12345678
+
+// Min Spacing related settings.
+#define        MAX_MSS_DENSITY_2T                      0x13
+#define        MAX_MSS_DENSITY_1T                      0x0A
+
+//----------------------------------------------------------------------------
+//       8192C Cmd9346CR bits                                  (Offset 0xA, 16bit)
+//----------------------------------------------------------------------------
+#define        CmdEEPROM_En                            BIT5     // EEPROM enable when set 1
+#define        CmdEERPOMSEL                            BIT4    // System EEPROM select, 0: boot from E-FUSE, 1: The EEPROM used is 9346
+#define        Cmd9346CR_9356SEL                       BIT4
+#define        AutoLoadEEPROM                  (CmdEEPROM_En|CmdEERPOMSEL)
+#define        AutoLoadEFUSE                           CmdEEPROM_En
+
+//----------------------------------------------------------------------------
+//       8192C GPIO MUX Configuration Register (offset 0x40, 4 byte)
+//----------------------------------------------------------------------------
+#define        GPIOSEL_GPIO                            0
+#define        GPIOSEL_ENBT                            BIT5
+
+//----------------------------------------------------------------------------
+//       8192C GPIO PIN Control Register (offset 0x44, 4 byte)
+//----------------------------------------------------------------------------
+#define        GPIO_IN                                         REG_GPIO_PIN_CTRL               // GPIO pins input value
+#define        GPIO_OUT                                        (REG_GPIO_PIN_CTRL+1)   // GPIO pins output value
+#define        GPIO_IO_SEL                             (REG_GPIO_PIN_CTRL+2)   // GPIO pins output enable when a bit is set to "1"; otherwise, input is configured.
+#define        GPIO_MOD                                        (REG_GPIO_PIN_CTRL+3)
+
+//----------------------------------------------------------------------------
+//       8192C (MSR) Media Status Register     (Offset 0x4C, 8 bits)
+//----------------------------------------------------------------------------
+/*
+Network Type
+00: No link
+01: Link in ad hoc network
+10: Link in infrastructure network
+11: AP mode
+Default: 00b.
+*/
+#define        MSR_NOLINK                                      0x00
+#define        MSR_ADHOC                                       0x01
+#define        MSR_INFRA                                       0x02
+#define        MSR_AP                                          0x03
+
+//
+// 6. Adaptive Control Registers  (Offset: 0x0160 - 0x01CF)
+//
+//----------------------------------------------------------------------------
+//       8192C Response Rate Set Register      (offset 0x181, 24bits)
+//----------------------------------------------------------------------------
+#define        RRSR_RSC_OFFSET                 21
+#define        RRSR_SHORT_OFFSET                       23
+#define        RRSR_RSC_BW_40M                 0x600000
+#define        RRSR_RSC_UPSUBCHNL              0x400000
+#define        RRSR_RSC_LOWSUBCHNL             0x200000
+#define        RRSR_SHORT                                      0x800000
+#define        RRSR_1M                                 BIT0
+#define        RRSR_2M                                 BIT1
+#define        RRSR_5_5M                                       BIT2
+#define        RRSR_11M                                        BIT3
+#define        RRSR_6M                                 BIT4
+#define        RRSR_9M                                 BIT5
+#define        RRSR_12M                                        BIT6
+#define        RRSR_18M                                        BIT7
+#define        RRSR_24M                                        BIT8
+#define        RRSR_36M                                        BIT9
+#define        RRSR_48M                                        BIT10
+#define        RRSR_54M                                        BIT11
+#define        RRSR_MCS0                                       BIT12
+#define        RRSR_MCS1                                       BIT13
+#define        RRSR_MCS2                                       BIT14
+#define        RRSR_MCS3                                       BIT15
+#define        RRSR_MCS4                                       BIT16
+#define        RRSR_MCS5                                       BIT17
+#define        RRSR_MCS6                                       BIT18
+#define        RRSR_MCS7                                       BIT19
+#define        BRSR_AckShortPmb                        BIT23
+// CCK ACK: use Short Preamble or not
+
+
+//----------------------------------------------------------------------------
+//       8192C Rate Definition
+//----------------------------------------------------------------------------
+//CCK
+#define        RATR_1M                                 0x00000001
+#define        RATR_2M                                 0x00000002
+#define        RATR_55M                                        0x00000004
+#define        RATR_11M                                        0x00000008
+//OFDM
+#define        RATR_6M                                 0x00000010
+#define        RATR_9M                                 0x00000020
+#define        RATR_12M                                        0x00000040
+#define        RATR_18M                                        0x00000080
+#define        RATR_24M                                        0x00000100
+#define        RATR_36M                                        0x00000200
+#define        RATR_48M                                        0x00000400
+#define        RATR_54M                                        0x00000800
+//MCS 1 Spatial Stream
+#define        RATR_MCS0                                       0x00001000
+#define        RATR_MCS1                                       0x00002000
+#define        RATR_MCS2                                       0x00004000
+#define        RATR_MCS3                                       0x00008000
+#define        RATR_MCS4                                       0x00010000
+#define        RATR_MCS5                                       0x00020000
+#define        RATR_MCS6                                       0x00040000
+#define        RATR_MCS7                                       0x00080000
+//MCS 2 Spatial Stream
+#define        RATR_MCS8                                       0x00100000
+#define        RATR_MCS9                                       0x00200000
+#define        RATR_MCS10                                      0x00400000
+#define        RATR_MCS11                                      0x00800000
+#define        RATR_MCS12                                      0x01000000
+#define        RATR_MCS13                                      0x02000000
+#define        RATR_MCS14                                      0x04000000
+#define        RATR_MCS15                                      0x08000000
+
+//----------------------------------------------------------------------------
+//       8192C BW_OPMODE bits                                  (Offset 0x203, 8bit)
+//----------------------------------------------------------------------------
+#define        BW_OPMODE_20MHZ                 BIT2
+#define        BW_OPMODE_5G                            BIT1
+#define        BW_OPMODE_11J                           BIT0
+
+
+//----------------------------------------------------------------------------
+//       8192C CAM Config Setting (offset 0x250, 1 byte)
+//----------------------------------------------------------------------------
+#define        CAM_VALID                                       BIT15
+#define        CAM_NOTVALID                            0x0000
+#define        CAM_USEDK                                       BIT5
+
+#define        CAM_CONTENT_COUNT               8
+
+#define        CAM_NONE                                        0x0
+#define        CAM_WEP40                                       0x01
+#define        CAM_TKIP                                        0x02
+#define        CAM_AES                                 0x04
+#define        CAM_WEP104                              0x05
+
+#define        TOTAL_CAM_ENTRY                 32
+#define        HALF_CAM_ENTRY                  16
+
+#define        CAM_CONFIG_USEDK                        _TRUE
+#define        CAM_CONFIG_NO_USEDK             _FALSE
+
+#define        CAM_WRITE                                       BIT16
+#define        CAM_READ                                        0x00000000
+#define        CAM_POLLINIG                            BIT31
+
+#define        SCR_UseDK                                       0x01
+#define        SCR_TxSecEnable                 0x02
+#define        SCR_RxSecEnable                 0x04
+
+
+//
+// 12. Host Interrupt Status Registers  (Offset: 0x0300 - 0x030F)
+//
+//----------------------------------------------------------------------------
+//       8190 IMR/ISR bits                                             (offset 0xfd,  8bits)
+//----------------------------------------------------------------------------
+#define        IMR8190_DISABLED                                0x0
+// IMR DW0 Bit 0-31
+#define        IMR_BCNDMAINT6                          BIT31           // Beacon DMA Interrupt 6
+#define        IMR_BCNDMAINT5                          BIT30           // Beacon DMA Interrupt 5
+#define        IMR_BCNDMAINT4                          BIT29           // Beacon DMA Interrupt 4
+#define        IMR_BCNDMAINT3                          BIT28           // Beacon DMA Interrupt 3
+#define        IMR_BCNDMAINT2                          BIT27           // Beacon DMA Interrupt 2
+#define        IMR_BCNDMAINT1                          BIT26           // Beacon DMA Interrupt 1
+#define        IMR_BCNDOK8                                     BIT25           // Beacon Queue DMA OK Interrup 8
+#define        IMR_BCNDOK7                                     BIT24           // Beacon Queue DMA OK Interrup 7
+#define        IMR_BCNDOK6                                     BIT23           // Beacon Queue DMA OK Interrup 6
+#define        IMR_BCNDOK5                                     BIT22           // Beacon Queue DMA OK Interrup 5
+#define        IMR_BCNDOK4                                     BIT21           // Beacon Queue DMA OK Interrup 4
+#define        IMR_BCNDOK3                                     BIT20           // Beacon Queue DMA OK Interrup 3
+#define        IMR_BCNDOK2                                     BIT19           // Beacon Queue DMA OK Interrup 2
+#define        IMR_BCNDOK1                                     BIT18           // Beacon Queue DMA OK Interrup 1
+#define        IMR_TIMEOUT2                                    BIT17           // Timeout interrupt 2
+#define        IMR_TIMEOUT1                                    BIT16           // Timeout interrupt 1
+#define        IMR_TXFOVW                                      BIT15           // Transmit FIFO Overflow
+#define        IMR_PSTIMEOUT                                   BIT14           // Power save time out interrupt
+#define        IMR_BcnInt                                              BIT13           // Beacon DMA Interrupt 0
+#define        IMR_RXFOVW                                      BIT12           // Receive FIFO Overflow
+#define        IMR_RDU                                         BIT11           // Receive Descriptor Unavailable
+#define        IMR_ATIMEND                                     BIT10           // For 92C,ATIM Window End Interrupt
+#define        IMR_BDOK                                                BIT9            // Beacon Queue DMA OK Interrup
+#define        IMR_HIGHDOK                                     BIT8            // High Queue DMA OK Interrupt
+#define        IMR_TBDOK                                               BIT7            // Transmit Beacon OK interrup
+#define        IMR_MGNTDOK                                     BIT6            // Management Queue DMA OK Interrupt
+#define        IMR_TBDER                                               BIT5            // For 92C,Transmit Beacon Error Interrupt
+#define        IMR_BKDOK                                               BIT4            // AC_BK DMA OK Interrupt
+#define        IMR_BEDOK                                               BIT3            // AC_BE DMA OK Interrupt
+#define        IMR_VIDOK                                               BIT2            // AC_VI DMA OK Interrupt
+#define        IMR_VODOK                                               BIT1            // AC_VO DMA Interrupt
+#define        IMR_ROK                                         BIT0            // Receive DMA OK Interrupt
+
+#define        IMR_RX_MASK             (IMR_ROK|IMR_RDU|IMR_RXFOVW)
+#define        IMR_TX_MASK             (IMR_VODOK|IMR_VIDOK|IMR_BEDOK|IMR_BKDOK|IMR_MGNTDOK|IMR_HIGHDOK|IMR_BDOK)
+
+// 13. Host Interrupt Status Extension Register         (Offset: 0x012C-012Eh)
+#define        IMR_BcnInt_E                            BIT12
+#define        IMR_TXERR                               BIT11
+#define        IMR_RXERR                               BIT10
+#define        IMR_C2HCMD                      BIT9
+#define        IMR_CPWM                                BIT8
+//RSVD [2-7]
+#define        IMR_OCPINT                              BIT1
+#define        IMR_WLANOFF                     BIT0
+
+
+
+//----------------------------------------------------------------------------
+// 8192C EFUSE
+//----------------------------------------------------------------------------
+#define        HWSET_MAX_SIZE                          128
+
+
+//----------------------------------------------------------------------------
+//       8192C EEPROM/EFUSE share register definition.
+//----------------------------------------------------------------------------
+
+//
+// Default Value for EEPROM or EFUSE!!!
+//
+#define EEPROM_Default_TSSI                                    0x0
+#define EEPROM_Default_TxPowerDiff                     0x0
+#define EEPROM_Default_CrystalCap                      0x5
+#define EEPROM_Default_BoardType                       0x02 // Default: 2X2, RTL8192CE(QFPN68)
+#define EEPROM_Default_TxPower                         0x1010
+#define EEPROM_Default_HT2T_TxPwr                      0x10
+
+#define EEPROM_Default_LegacyHTTxPowerDiff     0x3
+#define EEPROM_Default_ThermalMeter                    0x12
+
+#define EEPROM_Default_AntTxPowerDiff          0x0
+#define EEPROM_Default_TxPwDiff_CrystalCap     0x5
+#define EEPROM_Default_TxPowerLevel            0x22
+#define EEPROM_Default_HT40_2SDiff                     0x0
+#define EEPROM_Default_HT20_Diff                       2       // HT20<->40 default Tx Power Index Difference
+#define EEPROM_Default_LegacyHTTxPowerDiff     0x3
+#define EEPROM_Default_HT40_PwrMaxOffset       0
+#define EEPROM_Default_HT20_PwrMaxOffset       0
+
+// For debug
+#define EEPROM_Default_PID                                     0x1234
+#define EEPROM_Default_VID                                     0x5678
+#define EEPROM_Default_CustomerID                      0xAB
+#define EEPROM_Default_SubCustomerID           0xCD
+#define EEPROM_Default_Version                         0
+
+#define EEPROM_CHANNEL_PLAN_FCC                                0x0
+#define EEPROM_CHANNEL_PLAN_IC                         0x1
+#define EEPROM_CHANNEL_PLAN_ETSI                               0x2
+#define EEPROM_CHANNEL_PLAN_SPAIN                      0x3
+#define EEPROM_CHANNEL_PLAN_FRANCE                     0x4
+#define EEPROM_CHANNEL_PLAN_MKK                                0x5
+#define EEPROM_CHANNEL_PLAN_MKK1                               0x6
+#define EEPROM_CHANNEL_PLAN_ISRAEL                     0x7
+#define EEPROM_CHANNEL_PLAN_TELEC                      0x8
+#define EEPROM_CHANNEL_PLAN_GLOBAL_DOMAIN      0x9
+#define EEPROM_CHANNEL_PLAN_WORLD_WIDE_13      0xA
+#define EEPROM_CHANNEL_PLAN_NCC                                0xB
+#define EEPROM_USB_OPTIONAL1                                   0xE
+#define EEPROM_CHANNEL_PLAN_BY_HW_MASK         0x80
+
+
+#define EEPROM_CID_DEFAULT                             0x0
+#define EEPROM_CID_TOSHIBA                                     0x4
+#define EEPROM_CID_CCX                                         0x10 // CCX test. By Bruce, 2009-02-25.
+#define EEPROM_CID_QMI                                         0x0D
+#define EEPROM_CID_WHQL                                        0xFE // added by chiyoko for dtm, 20090108
+
+
+#define        RTL_EEPROM_ID                                           0x8129
+
+
+#ifdef CONFIG_PCI_HCI
+#define RT_IBSS_INT_MASKS                              (IMR_BcnInt | IMR_TBDOK | IMR_TBDER)
+#define RT_AC_INT_MASKS                                (IMR_VIDOK | IMR_VODOK | IMR_BEDOK|IMR_BKDOK)
+#define RT_BSS_INT_MASKS                               (RT_IBSS_INT_MASKS)
+
+//
+// Interface type.
+//
+typedef        enum _INTERFACE_SELECT_8192CPCIe{
+       INTF_SEL0_SOLO_MINICARD                 = 0,            // WiFi solo-mCard
+       INTF_SEL1_BT_COMBO_MINICARD             = 1,            // WiFi+BT combo-mCard
+       INTF_SEL2_PCIe                                  = 2,            // PCIe Card
+} INTERFACE_SELECT_8192CPCIe, *PINTERFACE_SELECT_8192CPCIe;
+
+#define RTL8190_EEPROM_ID                                      0x8129  // 0-1
+#define EEPROM_HPON                                            0x02 // LDO settings.2-5
+#define EEPROM_CLK                                                     0x06 // Clock settings.6-7
+#define EEPROM_TESTR                                           0x08 // SE Test mode.8
+
+#define EEPROM_VID                                                     0x0A // SE Vendor ID.A-B
+#define EEPROM_DID                                                     0x0C // SE Device ID. C-D
+#define EEPROM_SVID                                                    0x0E // SE Vendor ID.E-F
+#define EEPROM_SMID                                            0x10 // SE PCI Subsystem ID. 10-11
+
+#define EEPROM_MAC_ADDR                                        0x16 // SEMAC Address. 12-17
+
+//----------------------------------------------------------------
+// Ziv - Let PCIe and USB use the same define. Modify address mapping later.
+#define EEPROM_CCK_TX_PWR_INX                                  0x5A
+#define EEPROM_HT40_1S_TX_PWR_INX                      0x60
+#define EEPROM_HT40_2S_TX_PWR_INX_DIFF         0x66
+#define EEPROM_HT20_TX_PWR_INX_DIFF                    0x69
+#define EEPROM_OFDM_TX_PWR_INX_DIFF                    0x6C
+#define EEPROM_HT40_MAX_PWR_OFFSET                     0x6F
+#define EEPROM_HT20_MAX_PWR_OFFSET                     0x72
+
+#define EEPROM_CHANNEL_PLAN                            0x75
+#define EEPROM_TSSI_A                                          0x76
+#define EEPROM_TSSI_B                                          0x77
+#define EEPROM_THERMAL_METER                           0x78
+#define EEPROM_RF_OPT1                                         0x79
+#define EEPROM_RF_OPT2                                         0x7A
+#define EEPROM_RF_OPT3                                         0x7B
+#define EEPROM_RF_OPT4                                         0x7C
+#define EEPROM_VERSION                                         0x7E
+#define EEPROM_CUSTOMER_ID                             0x7F
+
+#define EEPROM_NORMAL_BoardType                        EEPROM_RF_OPT1  //[7:5]
+
+#endif
+
+#ifdef CONFIG_USB_HCI
+
+//should be renamed and moved to another file
+typedef        enum _BOARD_TYPE_8192CUSB{
+       BOARD_USB_DONGLE                        = 0,            // USB dongle
+       BOARD_USB_High_PA               = 1,            // USB dongle with high power PA
+       BOARD_MINICARD                  = 2,            // Minicard
+       BOARD_USB_SOLO                  = 3,            // USB solo-Slim module
+       BOARD_USB_COMBO                 = 4,            // USB Combo-Slim module
+} BOARD_TYPE_8192CUSB, *PBOARD_TYPE_8192CUSB;
+
+#define        SUPPORT_HW_RADIO_DETECT(pHalData)       (pHalData->BoardType == BOARD_MINICARD||\
+                                                                                                       pHalData->BoardType == BOARD_USB_SOLO||\
+                                                                                                       pHalData->BoardType == BOARD_USB_COMBO)
+
+//---------------------------------------------------------------
+// EEPROM address for Test chip
+//---------------------------------------------------------------
+#define EEPROM_TEST_USB_OPT                                            0x0E
+#define EEPROM_TEST_CHIRP_K                                            0x0F
+#define EEPROM_TEST_EP_SETTING                                 0x0E
+#define EEPROM_TEST_USB_PHY                                            0x10
+
+
+//---------------------------------------------------------------
+// EEPROM address for Normal chip
+//---------------------------------------------------------------
+#define EEPROM_NORMAL_USB_OPT                                  0x0E
+#define EEPROM_NORMAL_CHIRP_K                                          0x0E    // Changed
+#define EEPROM_NORMAL_EP_SETTING                                       0x0F    // Changed
+#define EEPROM_NORMAL_USB_PHY                                  0x12    // Changed
+
+
+// Test chip and normal chip common define
+//---------------------------------------------------------------
+// EEPROM address for both
+//---------------------------------------------------------------
+#define EEPROM_ID0                                                             0x00
+#define EEPROM_ID1                                                             0x01
+#define EEPROM_RTK_RSV1                                                0x02
+#define EEPROM_RTK_RSV2                                                0x03
+#define EEPROM_RTK_RSV3                                                0x04
+#define EEPROM_RTK_RSV4                                                0x05
+#define EEPROM_RTK_RSV5                                                0x06
+#define EEPROM_DBG_SEL                                                 0x07
+#define EEPROM_RTK_RSV6                                                0x08
+#define EEPROM_VID                                                             0x0A
+#define EEPROM_PID                                                             0x0C
+
+#define EEPROM_MAC_ADDR                                                0x16
+#define EEPROM_STRING                                                  0x1C
+#define EEPROM_SUBCUSTOMER_ID                                  0x59
+#define EEPROM_CCK_TX_PWR_INX                                  0x5A
+#define EEPROM_HT40_1S_TX_PWR_INX                      0x60
+#define EEPROM_HT40_2S_TX_PWR_INX_DIFF         0x66
+#define EEPROM_HT20_TX_PWR_INX_DIFF                    0x69
+#define EEPROM_OFDM_TX_PWR_INX_DIFF                    0x6C
+#define EEPROM_HT40_MAX_PWR_OFFSET                     0x6F
+#define EEPROM_HT20_MAX_PWR_OFFSET                     0x72
+
+#define EEPROM_CHANNEL_PLAN                                    0x75
+#define EEPROM_TSSI_A                                                  0x76
+#define EEPROM_TSSI_B                                                  0x77
+#define EEPROM_THERMAL_METER                                   0x78
+#define EEPROM_RF_OPT1                                                 0x79
+#define EEPROM_RF_OPT2                                                 0x7A
+#define EEPROM_RF_OPT3                                                 0x7B
+#define EEPROM_RF_OPT4                                                 0x7C
+#define EEPROM_VERSION                                                 0x7E
+#define EEPROM_CUSTOMER_ID                                     0x7F
+
+#define EEPROM_BoardType                                               0x54 //0x0: RTL8188SU, 0x1: RTL8191SU, 0x2: RTL8192SU, 0x3: RTL8191GU
+#define EEPROM_TxPwIndex                                               0x5C //0x5C-0x76, Tx Power index.
+#define EEPROM_PwDiff                                                  0x67 // Difference of gain index between legacy and high throughput OFDM.
+
+#define EEPROM_TxPowerCCK                                              0x5A // CCK Tx Power
+
+// 2009/02/09 Cosa Add for SD3 requirement
+#define EEPROM_TX_PWR_HT20_DIFF                                0x6e// HT20 Tx Power Index Difference
+#define DEFAULT_HT20_TXPWR_DIFF                                2       // HT20<->40 default Tx Power Index Difference
+#define EEPROM_TX_PWR_OFDM_DIFF                                0x71// OFDM Tx Power Index Difference
+
+#define EEPROM_TxPWRGroup                                              0x73// Power diff for channel group
+#define EEPROM_Regulatory                                              0x79// Check if power safety is need
+
+#define EEPROM_BLUETOOTH_COEXIST                               0x7E // 92cu, 0x7E[4]
+#define EEPROM_NORMAL_BoardType                                EEPROM_RF_OPT1  //[7:5]
+#define BOARD_TYPE_NORMAL_MASK                         0xE0
+#define BOARD_TYPE_TEST_MASK                                   0x0F
+#define EEPROM_EASY_REPLACEMENT                                0x50//BIT0 1 for build-in module, 0 for external dongle
+//-------------------------------------------------------------
+//     \14EEPROM content definitions
+//-------------------------------------------------------------
+#define OS_LINK_SPEED                                                  BIT(5)
+
+#define BOARD_TYPE_MASK                                                0xF
+
+#define BT_COEXISTENCE                                                 BIT(4)
+#define BT_CO_SHIFT                                                            4
+
+#define EP_NUMBER_MASK                                                 0x30    //bit 4:5 0Eh
+#define EP_NUMBER_SHIFT                                                4
+
+
+#define USB_PHY_PARA_SIZE                                              5
+
+
+//-------------------------------------------------------------
+//     \14EEPROM default value definitions
+//-------------------------------------------------------------
+// Use 0xABCD instead of 0x8192 for debug
+#define EEPROM_DEF_ID_0                                                0xCD    // Byte 0x00
+#define EEPROM_DEF_ID_1                                                0xAB    // Byte 0x01
+
+#define EEPROM_DEF_RTK_RSV_A3                                  0x74    // Byte 0x03
+#define EEPROM_DEF_RTK_RSV_A4                                  0x6D    // Byte 0x04
+#define EEPROM_DEF_RTK_RSV_A8                                  0xFF    // Byte 0x08
+
+#define EEPROM_DEF_VID_0                                               0x0A    // Byte 0x0A
+#define EEPROM_DEF_VID_1                                               0x0B
+
+#define EEPROM_DEF_PID_0                                               0x92    // Byte 0x0C
+#define EEPROM_DEF_PID_1                                               0x81
+
+
+#define EEPROM_TEST_DEF_USB_OPT                                0x80    // Byte 0x0E
+#define EEPROM_NORMAL_DEF_USB_OPT                      0x00    // Byte 0x0E
+
+#define EEPROM_DEF_CHIRPK                                              0x15    // Byte 0x0F
+
+#define EEPROM_DEF_USB_PHY_0                                   0x85    // Byte 0x10
+#define EEPROM_DEF_USB_PHY_1                                   0x62    // Byte 0x11
+#define EEPROM_DEF_USB_PHY_2                                   0x9E    // Byte 0x12
+#define EEPROM_DEF_USB_PHY_3                                   0x06    // Byte 0x13
+
+#define EEPROM_DEF_TSSI_A                                              0x09    // Byte 0x78
+#define EEPROM_DEF_TSSI_B                                              0x09    // Byte 0x79
+
+
+#define EEPROM_DEF_THERMAL_METER                               0x12    // Byte 0x7A
+
+#define RF_OPTION1                                     0x79// Check if power safety spec is need
+#define RF_OPTION2                                     0x7A
+#define RF_OPTION3                                     0x7B
+#define RF_OPTION4                                     0x7C
+
+
+#define        EEPROM_USB_SN                                                   BIT(0)
+#define        EEPROM_USB_REMOTE_WAKEUP                        BIT(1)
+#define        EEPROM_USB_DEVICE_PWR                           BIT(2)
+#define        EEPROM_EP_NUMBER                                                (BIT(3)|BIT(4))
+
+#if 0
+#define        EEPROM_CHANNEL_PLAN_FCC                                 0x0
+#define        EEPROM_CHANNEL_PLAN_IC                                  0x1
+#define        EEPROM_CHANNEL_PLAN_ETSI                                0x2
+#define        EEPROM_CHANNEL_PLAN_SPAIN                               0x3
+#define        EEPROM_CHANNEL_PLAN_FRANCE                              0x4
+#define        EEPROM_CHANNEL_PLAN_MKK                                 0x5
+#define        EEPROM_CHANNEL_PLAN_MKK1                                0x6
+#define        EEPROM_CHANNEL_PLAN_ISRAEL                              0x7
+#define        EEPROM_CHANNEL_PLAN_TELEC                               0x8
+#define        EEPROM_CHANNEL_PLAN_GLOBAL_DOMAIN               0x9
+#define        EEPROM_CHANNEL_PLAN_WORLD_WIDE_13               0xA
+#define        EEPROM_CHANNEL_PLAN_BY_HW_MASK                  0x80
+
+#define        EEPROM_CID_DEFAULT                                              0x0
+
+#define        EEPROM_CID_WHQL                                                 0xFE // added by chiyoko for dtm, 20090108
+
+
+#define        EEPROM_CID_CCX                                                  0x10 // CCX test. By Bruce, 2009-02-25.
+#endif
+
+#endif
+
+
+/*===================================================================
+=====================================================================
+Here the register defines are for 92C. When the define is as same with 92C,
+we will use the 92C's define for the consistency
+So the following defines for 92C is not entire!!!!!!
+=====================================================================
+=====================================================================*/
+/*
+Based on Datasheet V33---090401
+Register Summary
+Current IOREG MAP
+0x0000h ~ 0x00FFh   System Configuration (256 Bytes)
+0x0100h ~ 0x01FFh   MACTOP General Configuration (256 Bytes)
+0x0200h ~ 0x027Fh   TXDMA Configuration (128 Bytes)
+0x0280h ~ 0x02FFh   RXDMA Configuration (128 Bytes)
+0x0300h ~ 0x03FFh   PCIE EMAC Reserved Region (256 Bytes)
+0x0400h ~ 0x04FFh   Protocol Configuration (256 Bytes)
+0x0500h ~ 0x05FFh   EDCA Configuration (256 Bytes)
+0x0600h ~ 0x07FFh   WMAC Configuration (512 Bytes)
+0x2000h ~ 0x3FFFh   8051 FW Download Region (8196 Bytes)
+*/
+
+//----------------------------------------------------------------------------
+//       8192C (RCR) Receive Configuration Register    (Offset 0x608, 32 bits)
+//----------------------------------------------------------------------------
+#define        RCR_APPFCS                                      BIT31           //WMAC append FCS after pauload
+#define        RCR_APP_MIC                             BIT30           //
+#define        RCR_APP_PHYSTS                  BIT28//
+#define        RCR_APP_ICV                             BIT29       //
+#define        RCR_APP_PHYST_RXFF              BIT28       //
+#define        RCR_APP_BA_SSN                  BIT27           //Accept BA SSN
+#define        RCR_ENMBID                                      BIT24           //Enable Multiple BssId.
+#define        RCR_LSIGEN                                      BIT23
+#define        RCR_MFBEN                                       BIT22
+#define        RCR_HTC_LOC_CTRL                        BIT14       //MFC<--HTC=1 MFC-->HTC=0
+#define        RCR_AMF                                 BIT13           //Accept management type frame
+#define        RCR_ACF                                 BIT12           //Accept control type frame
+#define        RCR_ADF                                 BIT11           //Accept data type frame
+#define        RCR_AICV                                        BIT9            //Accept ICV error packet
+#define        RCR_ACRC32                                      BIT8            //Accept CRC32 error packet
+#define        RCR_CBSSID_BCN                  BIT7            //Accept BSSID match packet (Rx beacon, probe rsp)
+#define        RCR_CBSSID_DATA                 BIT6            //Accept BSSID match packet (Data)
+#define        RCR_CBSSID                                      RCR_CBSSID_DATA         //Accept BSSID match packet
+#define        RCR_APWRMGT                             BIT5            //Accept power management packet
+#define        RCR_ADD3                                        BIT4            //Accept address 3 match packet
+#define        RCR_AB                                          BIT3            //Accept broadcast packet
+#define        RCR_AM                                          BIT2            //Accept multicast packet
+#define        RCR_APM                                 BIT1            //Accept physical match packet
+#define        RCR_AAP                                 BIT0            //Accept all unicast packet
+#define        RCR_MXDMA_OFFSET                        8
+#define        RCR_FIFO_OFFSET                 13
+
+
+
+//============================================================================
+//       8192c USB specific Regsiter Offset and Content definition,
+//       2009.08.18, added by vivi. for merge 92c and 92C into one driver
+//============================================================================
+//#define APS_FSMCO                            0x0004  same with 92Ce
+#define RSV_CTRL                                       0x001C
+#define RD_CTRL                                        0x0524
+
+//-----------------------------------------------------
+//
+//     0xFE00h ~ 0xFE55h       USB Configuration
+//
+//-----------------------------------------------------
+#define REG_USB_INFO                           0xFE17
+#define REG_USB_SPECIAL_OPTION 0xFE55
+#define REG_USB_DMA_AGG_TO             0xFE5B
+#define REG_USB_AGG_TO                         0xFE5C
+#define REG_USB_AGG_TH                         0xFE5D
+
+#define REG_USB_VID                                    0xFE60
+#define REG_USB_PID                                    0xFE62
+#define REG_USB_OPTIONAL                       0xFE64
+#define REG_USB_CHIRP_K                        0xFE65
+#define REG_USB_PHY                                    0xFE66
+#define REG_USB_MAC_ADDR                       0xFE70
+
+#define REG_USB_HRPWM                          0xFE58
+#define REG_USB_HCPWM                          0xFE57
+
+#define        InvalidBBRFValue                        0x12345678
+
+//============================================================================
+//       8192C Regsiter Bit and Content definition
+//============================================================================
+//-----------------------------------------------------
+//
+//     0x0000h ~ 0x00FFh       System Configuration
+//
+//-----------------------------------------------------
+
+//2 SPS0_CTRL
+#define SW18_FPWM                                      BIT(3)
+
+
+//2 SYS_ISO_CTRL
+#define ISO_MD2PP                                      BIT(0)
+#define ISO_UA2USB                                     BIT(1)
+#define ISO_UD2CORE                                    BIT(2)
+#define ISO_PA2PCIE                                    BIT(3)
+#define ISO_PD2CORE                                    BIT(4)
+#define ISO_IP2MAC                                     BIT(5)
+#define ISO_DIOP                                               BIT(6)
+#define ISO_DIOE                                               BIT(7)
+#define ISO_EB2CORE                                    BIT(8)
+#define ISO_DIOR                                               BIT(9)
+
+#define PWC_EV25V                                      BIT(14)
+#define PWC_EV12V                                      BIT(15)
+
+
+//2 SYS_FUNC_EN
+#define FEN_BBRSTB                                     BIT(0)
+#define FEN_BB_GLB_RSTn                        BIT(1)
+#define FEN_USBA                                       BIT(2)
+#define FEN_UPLL                                       BIT(3)
+#define FEN_USBD                                       BIT(4)
+#define FEN_DIO_PCIE                           BIT(5)
+#define FEN_PCIEA                                      BIT(6)
+#define FEN_PPLL                                               BIT(7)
+#define FEN_PCIED                                      BIT(8)
+#define FEN_DIOE                                       BIT(9)
+#define FEN_CPUEN                                      BIT(10)
+#define FEN_DCORE                                      BIT(11)
+#define FEN_ELDR                                       BIT(12)
+#define FEN_DIO_RF                                     BIT(13)
+#define FEN_HWPDN                                      BIT(14)
+#define FEN_MREGEN                                     BIT(15)
+
+//2 APS_FSMCO
+#define PFM_LDALL                                      BIT(0)
+#define PFM_ALDN                                       BIT(1)
+#define PFM_LDKP                                       BIT(2)
+#define PFM_WOWL                                       BIT(3)
+#define EnPDN                                          BIT(4)
+#define PDN_PL                                         BIT(5)
+#define APFM_ONMAC                                     BIT(8)
+#define APFM_OFF                                       BIT(9)
+#define APFM_RSM                                       BIT(10)
+#define AFSM_HSUS                                      BIT(11)
+#define AFSM_PCIE                                      BIT(12)
+#define APDM_MAC                                       BIT(13)
+#define APDM_HOST                                      BIT(14)
+#define APDM_HPDN                                      BIT(15)
+#define RDY_MACON                                      BIT(16)
+#define SUS_HOST                                       BIT(17)
+#define ROP_ALD                                                BIT(20)
+#define ROP_PWR                                                BIT(21)
+#define ROP_SPS                                                BIT(22)
+#define SOP_MRST                                       BIT(25)
+#define SOP_FUSE                                       BIT(26)
+#define SOP_ABG                                                BIT(27)
+#define SOP_AMB                                                BIT(28)
+#define SOP_RCK                                                BIT(29)
+#define SOP_A8M                                                BIT(30)
+#define XOP_BTCK                                       BIT(31)
+
+//2 SYS_CLKR
+#define ANAD16V_EN                                     BIT(0)
+#define ANA8M                                          BIT(1)
+#define MACSLP                                         BIT(4)
+#define LOADER_CLK_EN                          BIT(5)
+#define _80M_SSC_DIS                           BIT(7)
+#define _80M_SSC_EN_HO                         BIT(8)
+#define PHY_SSC_RSTB                           BIT(9)
+#define SEC_CLK_EN                                     BIT(10)
+#define MAC_CLK_EN                                     BIT(11)
+#define SYS_CLK_EN                                     BIT(12)
+#define RING_CLK_EN                                    BIT(13)
+
+
+//2 9346CR
+
+
+#define        EEDO                                    BIT(0)
+#define        EEDI                                    BIT(1)
+#define        EESK                                    BIT(2)
+#define        EECS                                    BIT(3)
+//#define      EERPROMSEL                      BIT(4)
+//#define      EEPROM_EN                       BIT(5)
+#define                BOOT_FROM_EEPROM                BIT(4)
+#define                EEPROM_EN                               BIT(5)
+#define        EEM0                                    BIT(6)
+#define        EEM1                                    BIT(7)
+
+
+//2 AFE_MISC
+#define AFE_BGEN                                       BIT(0)
+#define AFE_MBEN                                       BIT(1)
+#define MAC_ID_EN                                      BIT(7)
+
+
+//2 SPS0_CTRL
+
+
+//2 SPS_OCP_CFG
+
+
+//2 RSV_CTRL
+#define WLOCK_ALL                                      BIT(0)
+#define WLOCK_00                                       BIT(1)
+#define WLOCK_04                                       BIT(2)
+#define WLOCK_08                                       BIT(3)
+#define WLOCK_40                                       BIT(4)
+#define R_DIS_PRST_0                           BIT(5)
+#define R_DIS_PRST_1                           BIT(6)
+#define LOCK_ALL_EN                                    BIT(7)
+
+//2 RF_CTRL
+#define RF_EN                                          BIT(0)
+#define RF_RSTB                                                BIT(1)
+#define RF_SDMRSTB                                     BIT(2)
+
+
+
+//2 LDOA15_CTRL
+#define LDA15_EN                                       BIT(0)
+#define LDA15_STBY                                     BIT(1)
+#define LDA15_OBUF                                     BIT(2)
+#define LDA15_REG_VOS                          BIT(3)
+#define _LDA15_VOADJ(x)                                (((x) & 0x7) << 4)
+
+
+
+//2 LDOV12D_CTRL
+#define LDV12_EN                                       BIT(0)
+#define LDV12_SDBY                                     BIT(1)
+#define LPLDO_HSM                                      BIT(2)
+#define LPLDO_LSM_DIS                          BIT(3)
+#define _LDV12_VADJ(x)                         (((x) & 0xF) << 4)
+
+
+//2 AFE_XTAL_CTRL
+#define XTAL_EN                                                BIT(0)
+#define XTAL_BSEL                                      BIT(1)
+#define _XTAL_BOSC(x)                          (((x) & 0x3) << 2)
+#define _XTAL_CADJ(x)                          (((x) & 0xF) << 4)
+#define XTAL_GATE_USB                          BIT(8)
+#define _XTAL_USB_DRV(x)                       (((x) & 0x3) << 9)
+#define XTAL_GATE_AFE                          BIT(11)
+#define _XTAL_AFE_DRV(x)                       (((x) & 0x3) << 12)
+#define XTAL_RF_GATE                           BIT(14)
+#define _XTAL_RF_DRV(x)                                (((x) & 0x3) << 15)
+#define XTAL_GATE_DIG                          BIT(17)
+#define _XTAL_DIG_DRV(x)                       (((x) & 0x3) << 18)
+#define XTAL_BT_GATE                           BIT(20)
+#define _XTAL_BT_DRV(x)                                (((x) & 0x3) << 21)
+#define _XTAL_GPIO(x)                          (((x) & 0x7) << 23)
+
+
+#define CKDLY_AFE                                      BIT(26)
+#define CKDLY_USB                                      BIT(27)
+#define CKDLY_DIG                                      BIT(28)
+#define CKDLY_BT                                       BIT(29)
+
+
+//2 AFE_PLL_CTRL
+#define APLL_EN                                                BIT(0)
+#define APLL_320_EN                                    BIT(1)
+#define APLL_FREF_SEL                          BIT(2)
+#define APLL_EDGE_SEL                          BIT(3)
+#define APLL_WDOGB                                     BIT(4)
+#define APLL_LPFEN                                     BIT(5)
+
+#define APLL_REF_CLK_13MHZ                     0x1
+#define APLL_REF_CLK_19_2MHZ           0x2
+#define APLL_REF_CLK_20MHZ                     0x3
+#define APLL_REF_CLK_25MHZ                     0x4
+#define APLL_REF_CLK_26MHZ                     0x5
+#define APLL_REF_CLK_38_4MHZ           0x6
+#define APLL_REF_CLK_40MHZ                     0x7
+
+#define APLL_320EN                                     BIT(14)
+#define APLL_80EN                                      BIT(15)
+#define APLL_1MEN                                      BIT(24)
+
+
+//2 EFUSE_CTRL
+#define ALD_EN                                         BIT(18)
+#define EF_PD                                          BIT(19)
+#define EF_FLAG                                                BIT(31)
+
+//2 EFUSE_TEST (For RTL8723 partially)
+#define EF_TRPT                                                BIT(7)
+#define EF_CELL_SEL                                    (BIT(8)|BIT(9)) // 00: Wifi Efuse, 01: BT Efuse0, 10: BT Efuse1, 11: BT Efuse2
+#define LDOE25_EN                                      BIT(31)
+#define EFUSE_SEL(x)                                   (((x) & 0x3) << 8)
+#define EFUSE_SEL_MASK                         0x300
+#define EFUSE_WIFI_SEL_0                       0x0
+#define EFUSE_BT_SEL_0                         0x1
+#define EFUSE_BT_SEL_1                         0x2
+#define EFUSE_BT_SEL_2                         0x3
+
+#define EFUSE_ACCESS_ON                        0x69    // For RTL8723 only.
+#define EFUSE_ACCESS_OFF                       0x00    // For RTL8723 only.
+
+//2 PWR_DATA
+
+//2 CAL_TIMER
+
+//2 ACLK_MON
+#define RSM_EN                                         BIT(0)
+#define Timer_EN                                               BIT(4)
+
+
+//2 GPIO_MUXCFG
+#define TRSW0EN                                                BIT(2)
+#define TRSW1EN                                                BIT(3)
+#define EROM_EN                                                BIT(4)
+#define EnBT                                                   BIT(5)
+#define EnUart                                         BIT(8)
+#define Uart_910                                               BIT(9)
+#define EnPMAC                                         BIT(10)
+#define SIC_SWRST                                      BIT(11)
+#define EnSIC                                          BIT(12)
+#define SIC_23                                         BIT(13)
+#define EnHDP                                          BIT(14)
+#define SIC_LBK                                                BIT(15)
+
+//2 GPIO_PIN_CTRL
+
+// GPIO BIT
+#define HAL_8192C_HW_GPIO_WPS_BIT              BIT(2)
+
+//2 GPIO_INTM
+
+//2 LEDCFG
+#define LED0PL                                                 BIT(4)
+#define LED0DIS                                                BIT(7)
+#define LED1DIS                                                BIT(15)
+#define LED1PL                                                 BIT(12)
+
+#define  SECCAM_CLR                                    BIT(30)
+
+
+//2 FSIMR
+
+//2 FSISR
+
+
+//2 8051FWDL
+//2 MCUFWDL
+#define MCUFWDL_EN                                     BIT(0)
+#define MCUFWDL_RDY                            BIT(1)
+#define FWDL_ChkSum_rpt                        BIT(2)
+#define MACINI_RDY                                     BIT(3)
+#define BBINI_RDY                                      BIT(4)
+#define RFINI_RDY                                      BIT(5)
+#define WINTINI_RDY                                    BIT(6)
+#define CPRST                                          BIT(23)
+
+//2REG_HPON_FSM
+#define BOND92CE_1T2R_CFG                      BIT(22)
+
+
+//2 REG_SYS_CFG
+#define XCLK_VLD                                               BIT(0)
+#define ACLK_VLD                                       BIT(1)
+#define UCLK_VLD                                       BIT(2)
+#define PCLK_VLD                                               BIT(3)
+#define PCIRSTB                                                BIT(4)
+#define V15_VLD                                                BIT(5)
+#define TRP_B15V_EN                                    BIT(7)
+#define SIC_IDLE                                               BIT(8)
+#define BD_MAC2                                                BIT(9)
+#define BD_MAC1                                                BIT(10)
+#define IC_MACPHY_MODE                         BIT(11)
+#define CHIP_VER                                               (BIT(12)|BIT(13)|BIT(14)|BIT(15))
+#define BT_FUNC                                                BIT(16)
+#define VENDOR_ID                                      BIT(19)
+#define PAD_HWPD_IDN                           BIT(22)
+#define TRP_VAUX_EN                                    BIT(23)
+#define TRP_BT_EN                                      BIT(24)
+#define BD_PKG_SEL                                     BIT(25)
+#define BD_HCI_SEL                                     BIT(26)
+#define TYPE_ID                                                BIT(27)
+
+#define CHIP_VER_RTL_MASK                      0xF000  //Bit 12 ~ 15
+#define CHIP_VER_RTL_SHIFT                     12
+
+//2REG_GPIO_OUTSTS (For RTL8723 only)
+#define        EFS_HCI_SEL                             (BIT(0)|BIT(1))
+#define        PAD_HCI_SEL                             (BIT(2)|BIT(3))
+#define        HCI_SEL                                         (BIT(4)|BIT(5))
+#define        PKG_SEL_HCI                             BIT(6)
+#define        FEN_GPS                                 BIT(7)
+#define        FEN_BT                                          BIT(8)
+#define        FEN_WL                                          BIT(9)
+#define        FEN_PCI                                         BIT(10)
+#define        FEN_USB                                 BIT(11)
+#define        BTRF_HWPDN_N                            BIT(12)
+#define        WLRF_HWPDN_N                            BIT(13)
+#define        PDN_BT_N                                        BIT(14)
+#define        PDN_GPS_N                                       BIT(15)
+#define        BT_CTL_HWPDN                            BIT(16)
+#define        GPS_CTL_HWPDN                           BIT(17)
+#define        PPHY_SUSB                                       BIT(20)
+#define        UPHY_SUSB                                       BIT(21)
+#define        PCI_SUSEN                                       BIT(22)
+#define        USB_SUSEN                                       BIT(23)
+#define        RF_RL_ID                                        (BIT(31)|BIT(30)|BIT(29)|BIT(28))
+
+//-----------------------------------------------------
+//
+//     0x0100h ~ 0x01FFh       MACTOP General Configuration
+//
+//-----------------------------------------------------
+
+
+//2 Function Enable Registers
+//2 CR
+
+#define REG_LBMODE                                     (REG_CR + 3)
+
+
+#define HCI_TXDMA_EN                           BIT(0)
+#define HCI_RXDMA_EN                           BIT(1)
+#define TXDMA_EN                                       BIT(2)
+#define RXDMA_EN                                       BIT(3)
+#define PROTOCOL_EN                                    BIT(4)
+#define SCHEDULE_EN                                    BIT(5)
+#define MACTXEN                                                BIT(6)
+#define MACRXEN                                                BIT(7)
+#define ENSWBCN                                                BIT(8)
+#define ENSEC                                          BIT(9)
+
+// Network type
+#define _NETTYPE(x)                                    (((x) & 0x3) << 16)
+#define MASK_NETTYPE                           0x30000
+#define NT_NO_LINK                                     0x0
+#define NT_LINK_AD_HOC                         0x1
+#define NT_LINK_AP                                     0x2
+#define NT_AS_AP                                       0x3
+
+#define _LBMODE(x)                                     (((x) & 0xF) << 24)
+#define MASK_LBMODE                            0xF000000
+#define LOOPBACK_NORMAL                        0x0
+#define LOOPBACK_IMMEDIATELY           0xB
+#define LOOPBACK_MAC_DELAY             0x3
+#define LOOPBACK_PHY                           0x1
+#define LOOPBACK_DMA                           0x7
+
+
+//2 PBP - Page Size Register
+#define GET_RX_PAGE_SIZE(value)                ((value) & 0xF)
+#define GET_TX_PAGE_SIZE(value)                (((value) & 0xF0) >> 4)
+#define _PSRX_MASK                                     0xF
+#define _PSTX_MASK                                     0xF0
+#define _PSRX(x)                                               (x)
+#define _PSTX(x)                                               ((x) << 4)
+
+#define PBP_64                                         0x0
+#define PBP_128                                                0x1
+#define PBP_256                                                0x2
+#define PBP_512                                                0x3
+#define PBP_1024                                       0x4
+
+
+//2 TX/RXDMA
+#define RXDMA_ARBBW_EN                 BIT(0)
+#define RXSHFT_EN                                      BIT(1)
+#define RXDMA_AGG_EN                           BIT(2)
+#define QS_VO_QUEUE                            BIT(8)
+#define QS_VI_QUEUE                                    BIT(9)
+#define QS_BE_QUEUE                            BIT(10)
+#define QS_BK_QUEUE                            BIT(11)
+#define QS_MANAGER_QUEUE                       BIT(12)
+#define QS_HIGH_QUEUE                          BIT(13)
+
+#define HQSEL_VOQ                                      BIT(0)
+#define HQSEL_VIQ                                      BIT(1)
+#define HQSEL_BEQ                                      BIT(2)
+#define HQSEL_BKQ                                      BIT(3)
+#define HQSEL_MGTQ                                     BIT(4)
+#define HQSEL_HIQ                                      BIT(5)
+
+// For normal driver, 0x10C
+#define _TXDMA_HIQ_MAP(x)                      (((x)&0x3) << 14)
+#define _TXDMA_MGQ_MAP(x)                      (((x)&0x3) << 12)
+#define _TXDMA_BKQ_MAP(x)                      (((x)&0x3) << 10)
+#define _TXDMA_BEQ_MAP(x)                      (((x)&0x3) << 8 )
+#define _TXDMA_VIQ_MAP(x)                      (((x)&0x3) << 6 )
+#define _TXDMA_VOQ_MAP(x)                      (((x)&0x3) << 4 )
+
+#define QUEUE_LOW                                      1
+#define QUEUE_NORMAL                           2
+#define QUEUE_HIGH                                     3
+
+
+
+//2 TRXFF_BNDY
+
+
+//2 LLT_INIT
+#define _LLT_NO_ACTIVE                         0x0
+#define _LLT_WRITE_ACCESS                      0x1
+#define _LLT_READ_ACCESS                       0x2
+
+#define _LLT_INIT_DATA(x)                      ((x) & 0xFF)
+#define _LLT_INIT_ADDR(x)                      (((x) & 0xFF) << 8)
+#define _LLT_OP(x)                                     (((x) & 0x3) << 30)
+#define _LLT_OP_VALUE(x)                       (((x) >> 30) & 0x3)
+
+
+//2 BB_ACCESS_CTRL
+#define BB_WRITE_READ_MASK             (BIT(31) | BIT(30))
+#define BB_WRITE_EN                                    BIT(30)
+#define BB_READ_EN                                     BIT(31)
+//#define BB_ADDR_MASK                         0xFFF
+//#define _BB_ADDR(x)                                  ((x) & BB_ADDR_MASK)
+
+//-----------------------------------------------------
+//
+//     0x0200h ~ 0x027Fh       TXDMA Configuration
+//
+//-----------------------------------------------------
+//2 RQPN
+#define _HPQ(x)                                                ((x) & 0xFF)
+#define _LPQ(x)                                                (((x) & 0xFF) << 8)
+#define _PUBQ(x)                                               (((x) & 0xFF) << 16)
+#define _NPQ(x)                                                ((x) & 0xFF)                    // NOTE: in RQPN_NPQ register
+
+
+#define HPQ_PUBLIC_DIS                         BIT(24)
+#define LPQ_PUBLIC_DIS                         BIT(25)
+#define LD_RQPN                                                BIT(31)
+
+
+//2 TDECTRL
+#define BCN_VALID                                      BIT(16)
+#define BCN_HEAD(x)                                    (((x) & 0xFF) << 8)
+#define        BCN_HEAD_MASK                           0xFF00
+
+//2 TDECTL
+#define BLK_DESC_NUM_SHIFT                     4
+#define BLK_DESC_NUM_MASK                      0xF
+
+
+//2 TXDMA_OFFSET_CHK
+#define DROP_DATA_EN                           BIT(9)
+
+//-----------------------------------------------------
+//
+//     0x0400h ~ 0x047Fh       Protocol Configuration
+//
+//-----------------------------------------------------
+//2 FWHW_TXQ_CTRL
+#define EN_AMPDU_RTY_NEW                       BIT(7)
+
+//2 INIRTSMCS_SEL
+#define _INIRTSMCS_SEL(x)                      ((x) & 0x3F)
+
+
+//2 SPEC SIFS
+#define _SPEC_SIFS_CCK(x)                      ((x) & 0xFF)
+#define _SPEC_SIFS_OFDM(x)                     (((x) & 0xFF) << 8)
+
+
+//2 RRSR
+
+#define RATE_REG_BITMAP_ALL                    0xFFFFF
+
+#define _RRSC_BITMAP(x)                                        ((x) & 0xFFFFF)
+
+#define _RRSR_RSC(x)                                           (((x) & 0x3) << 21)
+#define RRSR_RSC_RESERVED                              0x0
+#define RRSR_RSC_UPPER_SUBCHANNEL      0x1
+#define RRSR_RSC_LOWER_SUBCHANNEL      0x2
+#define RRSR_RSC_DUPLICATE_MODE                0x3
+
+
+//2 ARFR
+#define USE_SHORT_G1                           BIT(20)
+
+//2 AGGLEN_LMT_L
+#define _AGGLMT_MCS0(x)                                ((x) & 0xF)
+#define _AGGLMT_MCS1(x)                                (((x) & 0xF) << 4)
+#define _AGGLMT_MCS2(x)                                (((x) & 0xF) << 8)
+#define _AGGLMT_MCS3(x)                                (((x) & 0xF) << 12)
+#define _AGGLMT_MCS4(x)                                (((x) & 0xF) << 16)
+#define _AGGLMT_MCS5(x)                                (((x) & 0xF) << 20)
+#define _AGGLMT_MCS6(x)                                (((x) & 0xF) << 24)
+#define _AGGLMT_MCS7(x)                                (((x) & 0xF) << 28)
+
+
+//2 RL
+#define        RETRY_LIMIT_SHORT_SHIFT         8
+#define        RETRY_LIMIT_LONG_SHIFT          0
+
+
+//2 DARFRC
+#define _DARF_RC1(x)                           ((x) & 0x1F)
+#define _DARF_RC2(x)                           (((x) & 0x1F) << 8)
+#define _DARF_RC3(x)                           (((x) & 0x1F) << 16)
+#define _DARF_RC4(x)                           (((x) & 0x1F) << 24)
+// NOTE: shift starting from address (DARFRC + 4)
+#define _DARF_RC5(x)                           ((x) & 0x1F)
+#define _DARF_RC6(x)                           (((x) & 0x1F) << 8)
+#define _DARF_RC7(x)                           (((x) & 0x1F) << 16)
+#define _DARF_RC8(x)                           (((x) & 0x1F) << 24)
+
+
+//2 RARFRC
+#define _RARF_RC1(x)                           ((x) & 0x1F)
+#define _RARF_RC2(x)                           (((x) & 0x1F) << 8)
+#define _RARF_RC3(x)                           (((x) & 0x1F) << 16)
+#define _RARF_RC4(x)                           (((x) & 0x1F) << 24)
+// NOTE: shift starting from address (RARFRC + 4)
+#define _RARF_RC5(x)                           ((x) & 0x1F)
+#define _RARF_RC6(x)                           (((x) & 0x1F) << 8)
+#define _RARF_RC7(x)                           (((x) & 0x1F) << 16)
+#define _RARF_RC8(x)                           (((x) & 0x1F) << 24)
+
+
+
+
+//-----------------------------------------------------
+//
+//     0x0500h ~ 0x05FFh       EDCA Configuration
+//
+//-----------------------------------------------------
+
+
+
+//2 EDCA setting
+#define AC_PARAM_TXOP_LIMIT_OFFSET     16
+#define AC_PARAM_ECW_MAX_OFFSET                12
+#define AC_PARAM_ECW_MIN_OFFSET                8
+#define AC_PARAM_AIFS_OFFSET                   0
+
+
+//2 EDCA_VO_PARAM
+#define _AIFS(x)                                               (x)
+#define _ECW_MAX_MIN(x)                        ((x) << 8)
+#define _TXOP_LIMIT(x)                         ((x) << 16)
+
+
+#define _BCNIFS(x)                                     ((x) & 0xFF)
+#define _BCNECW(x)                                     (((x) & 0xF))<< 8)
+
+
+#define _LRL(x)                                                ((x) & 0x3F)
+#define _SRL(x)                                                (((x) & 0x3F) << 8)
+
+
+//2 SIFS_CCK
+#define _SIFS_CCK_CTX(x)                       ((x) & 0xFF)
+#define _SIFS_CCK_TRX(x)                       (((x) & 0xFF) << 8);
+
+
+//2 SIFS_OFDM
+#define _SIFS_OFDM_CTX(x)                      ((x) & 0xFF)
+#define _SIFS_OFDM_TRX(x)                      (((x) & 0xFF) << 8);
+
+
+//2 TBTT PROHIBIT
+#define _TBTT_PROHIBIT_HOLD(x)         (((x) & 0xFF) << 8)
+
+
+//2 REG_RD_CTRL
+#define DIS_EDCA_CNT_DWN                       BIT(11)
+
+
+//2 BCN_CTRL
+#define EN_MBSSID                                              BIT(1)
+#define EN_TXBCN_RPT                                   BIT(2)
+#define        EN_BCN_FUNCTION                         BIT(3)
+// The same function but different bit field.
+#define        DIS_TSF_UDT0_NORMAL_CHIP        BIT(4)
+#define        DIS_TSF_UDT0_TEST_CHIP          BIT(5)
+
+//2 ACMHWCTRL
+#define        AcmHw_HwEn                                      BIT(0)
+#define        AcmHw_BeqEn                                     BIT(1)
+#define        AcmHw_ViqEn                                     BIT(2)
+#define        AcmHw_VoqEn                                     BIT(3)
+#define        AcmHw_BeqStatus                         BIT(4)
+#define        AcmHw_ViqStatus                         BIT(5)
+#define        AcmHw_VoqStatus                         BIT(6)
+
+
+
+//-----------------------------------------------------
+//
+//     0x0600h ~ 0x07FFh       WMAC Configuration
+//
+//-----------------------------------------------------
+
+//2 APSD_CTRL
+#define APSDOFF                                                BIT(6)
+#define APSDOFF_STATUS                         BIT(7)
+
+
+//2 BWOPMODE
+#define BW_20MHZ                                       BIT(2)
+//#define BW_OPMODE_20MHZ                              BIT(2)  // For compability
+
+
+#define RATE_BITMAP_ALL                        0xFFFFF
+
+// Only use CCK 1M rate for ACK
+#define RATE_RRSR_CCK_ONLY_1M          0xFFFF1
+
+//2 TCR
+#define TSFRST                                         BIT(0)
+#define DIS_GCLK                                               BIT(1)
+#define PAD_SEL                                                BIT(2)
+#define PWR_ST                                         BIT(6)
+#define PWRBIT_OW_EN                           BIT(7)
+#define ACRC                                                   BIT(8)
+#define CFENDFORM                                      BIT(9)
+#define ICV                                                    BIT(10)
+
+
+
+//2 RCR
+#define AAP                                                    BIT(0)
+#define APM                                                    BIT(1)
+#define AM                                                     BIT(2)
+#define AB                                                     BIT(3)
+#define ADD3                                                   BIT(4)
+#define APWRMGT                                        BIT(5)
+#define CBSSID                                         BIT(6)
+#define CBSSID_BCN                                     BIT(7)
+#define ACRC32                                         BIT(8)
+#define AICV                                                   BIT(9)
+#define ADF                                                    BIT(11)
+#define ACF                                                    BIT(12)
+#define AMF                                                    BIT(13)
+#define HTC_LOC_CTRL                           BIT(14)
+#define UC_DATA_EN                                     BIT(16)
+#define BM_DATA_EN                                     BIT(17)
+#define MFBEN                                          BIT(22)
+#define LSIGEN                                         BIT(23)
+#define EnMBID                                         BIT(24)
+#define APP_BASSN                                      BIT(27)
+#define APP_PHYSTS                                     BIT(28)
+#define APP_ICV                                                BIT(29)
+#define APP_MIC                                                BIT(30)
+#define APP_FCS                                                BIT(31)
+
+//2 RX_PKT_LIMIT
+
+//2 RX_DLK_TIME
+
+//2 MBIDCAMCFG
+
+
+
+//2 AMPDU_MIN_SPACE
+#define _MIN_SPACE(x)                          ((x) & 0x7)
+#define _SHORT_GI_PADDING(x)           (((x) & 0x1F) << 3)
+
+
+//2 RXERR_RPT
+#define RXERR_TYPE_OFDM_PPDU                           0
+#define RXERR_TYPE_OFDM_FALSE_ALARM            1
+#define        RXERR_TYPE_OFDM_MPDU_OK                 2
+#define RXERR_TYPE_OFDM_MPDU_FAIL              3
+#define RXERR_TYPE_CCK_PPDU                            4
+#define RXERR_TYPE_CCK_FALSE_ALARM             5
+#define RXERR_TYPE_CCK_MPDU_OK                 6
+#define RXERR_TYPE_CCK_MPDU_FAIL                       7
+#define RXERR_TYPE_HT_PPDU                                     8
+#define RXERR_TYPE_HT_FALSE_ALARM              9
+#define RXERR_TYPE_HT_MPDU_TOTAL                       10
+#define RXERR_TYPE_HT_MPDU_OK                          11
+#define RXERR_TYPE_HT_MPDU_FAIL                        12
+#define RXERR_TYPE_RX_FULL_DROP                        15
+
+#define RXERR_COUNTER_MASK                             0xFFFFF
+#define RXERR_RPT_RST                                          BIT(27)
+#define _RXERR_RPT_SEL(type)                           ((type) << 28)
+
+
+//2 SECCFG
+#define        SCR_TxUseDK                                             BIT(0)                  //Force Tx Use Default Key
+#define        SCR_RxUseDK                                             BIT(1)                  //Force Rx Use Default Key
+#define        SCR_TxEncEnable                                 BIT(2)                  //Enable Tx Encryption
+#define        SCR_RxDecEnable                                 BIT(3)                  //Enable Rx Decryption
+#define        SCR_SKByA2                                                      BIT(4)                  //Search kEY BY A2
+#define        SCR_NoSKMC                                                      BIT(5)                  //No Key Search Multicast
+
+
+
+//-----------------------------------------------------
+//
+//     0xFE00h ~ 0xFE55h       USB Configuration
+//
+//-----------------------------------------------------
+
+//2 USB Information (0xFE17)
+#define USB_IS_HIGH_SPEED                              0
+#define USB_IS_FULL_SPEED                              1
+#define USB_SPEED_MASK                                 BIT(5)
+
+#define USB_NORMAL_SIE_EP_MASK         0xF
+#define USB_NORMAL_SIE_EP_SHIFT                4
+
+#define USB_TEST_EP_MASK                               0x30
+#define USB_TEST_EP_SHIFT                              4
+
+//2 Special Option
+#define USB_AGG_EN                                             BIT(3)
+
+
+//2REG_C2HEVT_CLEAR
+#define                C2H_EVT_HOST_CLOSE              0x00    // Set by driver and notify FW that the driver has read the C2H command message
+#define                C2H_EVT_FW_CLOSE                0xFF    // Set by FW indicating that FW had set the C2H command message and it's not yet read by driver.
+
+
+//2REG_MULTI_FUNC_CTRL(For RTL8723 Only)
+#define        WL_HWPDN_EN                             BIT0            // Enable GPIO[9] as WiFi HW PDn source
+#define        WL_HWPDN_SL                             BIT1            // WiFi HW PDn polarity control
+#define        WL_FUNC_EN                              BIT2            // WiFi function enable
+#define        WL_HWROF_EN                             BIT3            // Enable GPIO[9] as WiFi RF HW PDn source
+#define        BT_HWPDN_EN                             BIT16   // Enable GPIO[11] as BT HW PDn source
+#define        BT_HWPDN_SL                             BIT17   // BT HW PDn polarity control
+#define        BT_FUNC_EN                                      BIT18   // BT function enable
+#define        BT_HWROF_EN                             BIT19   // Enable GPIO[11] as BT/GPS RF HW PDn source
+#define        GPS_HWPDN_EN                            BIT20   // Enable GPIO[10] as GPS HW PDn source
+#define        GPS_HWPDN_SL                            BIT21   // GPS HW PDn polarity control
+#define        GPS_FUNC_EN                             BIT22   // GPS function enable
+
+//3 REG_LIFECTRL_CTRL
+#define        HAL92C_EN_PKT_LIFE_TIME_BK              BIT3
+#define        HAL92C_EN_PKT_LIFE_TIME_BE              BIT2
+#define        HAL92C_EN_PKT_LIFE_TIME_VI              BIT1
+#define        HAL92C_EN_PKT_LIFE_TIME_VO              BIT0
+
+#define        HAL92C_MSDU_LIFE_TIME_UNIT              128             // in us, said by Tim.
+
+//========================================================
+// General definitions
+//========================================================
+
+#define MAC_ADDR_LEN                                   6
+#define LAST_ENTRY_OF_TX_PKT_BUFFER    255
+
+#define POLLING_LLT_THRESHOLD                  20
+#define POLLING_READY_TIMEOUT_COUNT    1000
+
+// Min Spacing related settings.
+#define        MAX_MSS_DENSITY_2T                              0x13
+#define        MAX_MSS_DENSITY_1T                              0x0A
+
+//----------------------------------------------------------------------------
+//       8192C GPIO MUX Configuration Register (offset 0x40, 4 byte)
+//----------------------------------------------------------------------------
+#define        GPIOSEL_GPIO                            0
+#define        GPIOSEL_ENBT                            BIT5
+
+//----------------------------------------------------------------------------
+//       8192C GPIO PIN Control Register (offset 0x44, 4 byte)
+//----------------------------------------------------------------------------
+#define        GPIO_IN                                         REG_GPIO_PIN_CTRL               // GPIO pins input value
+#define        GPIO_OUT                                        (REG_GPIO_PIN_CTRL+1)   // GPIO pins output value
+#define        GPIO_IO_SEL                             (REG_GPIO_PIN_CTRL+2)   // GPIO pins output enable when a bit is set to "1"; otherwise, input is configured.
+#define        GPIO_MOD                                        (REG_GPIO_PIN_CTRL+3)
+
+
+
+#include "basic_types.h"
+
+#endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtl8192c_sreset.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtl8192c_sreset.h
new file mode 100644 (file)
index 0000000..6f5b953
--- /dev/null
@@ -0,0 +1,32 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef _RTL8192C_SRESET_C_
+#define _RTL8192C_SRESET_C_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <rtw_sreset.h>
+
+#ifdef DBG_CONFIG_ERROR_DETECT
+extern void rtl8192c_sreset_xmit_status_check(_adapter *padapter);
+extern void rtl8192c_sreset_linked_status_check(_adapter *padapter);
+#endif
+#endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtl8192c_xmit.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtl8192c_xmit.h
new file mode 100644 (file)
index 0000000..9abbae9
--- /dev/null
@@ -0,0 +1,128 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef _RTL8192C_XMIT_H_
+#define _RTL8192C_XMIT_H_
+
+//
+// Queue Select Value in TxDesc
+//
+#define QSLT_BK                                                        0x2//0x01
+#define QSLT_BE                                                        0x0
+#define QSLT_VI                                                        0x5//0x4
+#define QSLT_VO                                                        0x7//0x6
+#define QSLT_BEACON                                            0x10
+#define QSLT_HIGH                                              0x11
+#define QSLT_MGNT                                              0x12
+#define QSLT_CMD                                               0x13
+
+struct txrpt_ccx_8192c {
+       /* offset 0 */
+       u8 retry_cnt:6;
+       u8 rsvd_0:2;
+
+       /* offset 1 */
+       u8 rts_retry_cnt:6;
+       u8 rsvd_1:2;
+
+       /* offset 2 */
+       u8 ccx_qtime0;
+       u8 ccx_qtime1;
+
+       /* offset 4 */
+       u8 missed_pkt_num:5;
+       u8 rsvd_4:3;
+
+       /* offset 5 */
+       u8 mac_id:5;
+       u8 des1_fragssn:3;
+
+       /* offset 6 */
+       u8 rpt_pkt_num:5;
+       u8 pkt_drop:1;
+       u8 lifetime_over:1;
+       u8 retry_over:1;
+
+       /* offset 7*/
+       u8 edca_tx_queue:4;
+       u8 rsvd_7:1;
+       u8 bmc:1;
+       u8 pkt_ok:1;
+       u8 int_ccx:1;
+};
+
+#define txrpt_ccx_qtime_8192c(txrpt_ccx) ((txrpt_ccx)->ccx_qtime0+((txrpt_ccx)->ccx_qtime1<<8))
+
+#ifdef CONFIG_XMIT_ACK
+void dump_txrpt_ccx_8192c(void *buf);
+void handle_txrpt_ccx_8192c(_adapter *adapter, void *buf);
+#else
+#define dump_txrpt_ccx_8192c(buf) do {} while(0)
+#define handle_txrpt_ccx_8192c(adapter, buf) do {} while(0)
+#endif
+
+#ifdef CONFIG_USB_HCI
+
+#ifdef CONFIG_USB_TX_AGGREGATION
+#define MAX_TX_AGG_PACKET_NUMBER 0xFF
+#endif
+
+s32    rtl8192cu_init_xmit_priv(_adapter * padapter);
+
+void   rtl8192cu_free_xmit_priv(_adapter * padapter);
+
+void rtl8192cu_cal_txdesc_chksum(struct tx_desc        *ptxdesc);
+
+s32 rtl8192cu_xmitframe_complete(_adapter *padapter, struct xmit_priv *pxmitpriv, struct xmit_buf *pxmitbuf);
+
+s32 rtl8192cu_mgnt_xmit(_adapter *padapter, struct xmit_frame *pmgntframe);
+
+s32 rtl8192cu_hal_xmit(_adapter *padapter, struct xmit_frame *pxmitframe);
+
+s32     rtl8192cu_hal_xmitframe_enqueue(_adapter *padapter, struct xmit_frame *pxmitframe);
+
+#ifdef CONFIG_HOSTAPD_MLME
+s32 rtl8192cu_hostap_mgnt_xmit_entry(_adapter *padapter, _pkt *pkt);
+#endif
+
+#endif
+
+#ifdef CONFIG_PCI_HCI
+s32    rtl8192ce_init_xmit_priv(_adapter * padapter);
+void   rtl8192ce_free_xmit_priv(_adapter * padapter);
+
+s32    rtl8192ce_enqueue_xmitbuf(struct rtw_tx_ring *ring, struct xmit_buf *pxmitbuf);
+struct xmit_buf *rtl8192ce_dequeue_xmitbuf(struct rtw_tx_ring *ring);
+
+void   rtl8192ce_xmitframe_resume(_adapter *padapter);
+
+s32    rtl8192ce_mgnt_xmit(_adapter *padapter, struct xmit_frame *pmgntframe);
+
+s32    rtl8192ce_hal_xmit(_adapter *padapter, struct xmit_frame *pxmitframe);
+
+s32     rtl8192ce_hal_xmitframe_enqueue(_adapter *padapter, struct xmit_frame *pxmitframe);
+
+
+#ifdef CONFIG_HOSTAPD_MLME
+s32    rtl8192ce_hostap_mgnt_xmit_entry(_adapter *padapter, _pkt *pkt);
+#endif
+
+#endif
+
+#endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtl8192d_cmd.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtl8192d_cmd.h
new file mode 100644 (file)
index 0000000..8a8873a
--- /dev/null
@@ -0,0 +1,140 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __RTL8192D_CMD_H_
+#define __RTL8192D_CMD_H_
+
+
+//--------------------------------------------
+//3                            Host Message Box
+//--------------------------------------------
+
+// User Define Message [31:8]
+
+//_SETPWRMODE_PARM
+#define SET_H2CCMD_PWRMODE_PARM_MODE(__pH2CCmd, __Value)                       SET_BITS_TO_LE_1BYTE(__pH2CCmd, 0, 8, __Value)
+#define SET_H2CCMD_PWRMODE_PARM_SMART_PS(__pH2CCmd, __Value)           SET_BITS_TO_LE_1BYTE((__pH2CCmd)+1, 0, 8, __Value)
+#define SET_H2CCMD_PWRMODE_PARM_BCN_PASS_TIME(__pH2CCmd, __Value)      SET_BITS_TO_LE_1BYTE((__pH2CCmd)+2, 0, 8, __Value)
+
+//JOINBSSRPT_PARM
+#define SET_H2CCMD_JOINBSSRPT_PARM_OPMODE(__pH2CCmd, __Value)          SET_BITS_TO_LE_1BYTE(__pH2CCmd, 0, 8, __Value)
+
+//_RSVDPAGE_LOC
+#define SET_H2CCMD_RSVDPAGE_LOC_PROBE_RSP(__pH2CCmd, __Value)          SET_BITS_TO_LE_1BYTE(__pH2CCmd, 0, 8, __Value)
+#define SET_H2CCMD_RSVDPAGE_LOC_PSPOLL(__pH2CCmd, __Value)                     SET_BITS_TO_LE_1BYTE((__pH2CCmd)+1, 0, 8, __Value)
+#define SET_H2CCMD_RSVDPAGE_LOC_NULL_DATA(__pH2CCmd, __Value)          SET_BITS_TO_LE_1BYTE((__pH2CCmd)+2, 0, 8, __Value)
+
+//P2P_PS_OFFLOAD
+
+struct P2P_PS_Offload_t {
+ unsigned char Offload_En:1;
+ unsigned char role:1; // 1: Owner, 0: Client
+ unsigned char CTWindow_En:1;
+ unsigned char NoA0_En:1;
+ unsigned char NoA1_En:1;
+ unsigned char AllStaSleep:1; // Only valid in Owner
+ unsigned char discovery:1;
+ unsigned char rsvd:1;
+};
+
+#define SET_H2CCMD_P2P_PS_OFFLOAD_EN(__pH2CCmd, __Value)               SET_BITS_TO_LE_1BYTE(__pH2CCmd, 0, 1, __Value)
+#define SET_H2CCMD_P2P_PS_OFFLOAD_ROLE(__pH2CCmd, __Value)             SET_BITS_TO_LE_1BYTE(__pH2CCmd, 1, 1, __Value)
+#define SET_H2CCMD_P2P_PS_OFFLOAD_CTW(__pH2CCmd, __Value)              SET_BITS_TO_LE_1BYTE(__pH2CCmd, 2, 1, __Value)
+#define SET_H2CCMD_P2P_PS_OFFLOAD_NOA0(__pH2CCmd, __Value)             SET_BITS_TO_LE_1BYTE(__pH2CCmd, 3, 1, __Value)
+#define SET_H2CCMD_P2P_PS_OFFLOAD_NOA1(__pH2CCmd, __Value)             SET_BITS_TO_LE_1BYTE(__pH2CCmd, 4, 1, __Value)
+#define SET_H2CCMD_P2P_PS_OFFLOAD_ALLSTASLEEP(__pH2CCmd, __Value)              SET_BITS_TO_LE_1BYTE(__pH2CCmd, 5, 1, __Value)
+#define SET_H2CCMD_P2P_PS_OFFLOAD_DISCOVERY(__pH2CCmd, __Value)                SET_BITS_TO_LE_1BYTE(__pH2CCmd, 6, 1, __Value)
+
+// Description: Determine the types of H2C commands that are the same in driver and Fw.
+// Fisrt constructed by tynli. 2009.10.09.
+typedef enum _RTL8192D_H2C_CMD
+{
+       H2C_AP_OFFLOAD = 0,             /*0*/
+       H2C_SETPWRMODE = 1,             /*1*/
+       H2C_JOINBSSRPT = 2,             /*2*/
+       H2C_RSVDPAGE = 3,
+       H2C_RSSI_REPORT = 5,
+       H2C_RA_MASK = 6,
+       H2C_P2P_PS_OFFLOAD = 8,
+       H2C_MAC_MODE_SEL = 9,
+       H2C_PWRM=15,
+#ifdef CONFIG_WOWLAN
+       H2C_WO_WLAN_CMD = 20,   // Wake on Wlan.
+#endif // CONFIG_WOWLAN
+       H2C_P2P_PS_CTW_CMD = 24,
+       H2C_PathDiv = 26,                  //PathDiv--NeilChen--2011.07.15
+#ifdef CONFIG_WOWLAN
+       KEEP_ALIVE_CONTROL_CMD=31, //keep alive for wake on wlan
+       DISCONNECT_DECISION_CTRL_CMD=32,
+       REMOTE_WAKE_CTRL_CMD=34,
+#endif // CONFIG_WOWLAN
+       H2C_92D_TSF_SYNC=36,
+       H2C_92D_RESET_TSF = 43,
+       H2C_CMD_MAX
+}RTL8192D_H2C_CMD;
+
+struct cmd_msg_parm {
+       u8 eid; //element id
+       u8 sz; // sz
+       u8 buf[6];
+};
+
+
+void   FillH2CCmd92D(_adapter* padapter, u8 ElementID, u32 CmdLen, u8* pCmdBuffer);
+
+// host message to firmware cmd
+void   rtl8192d_set_FwPwrMode_cmd(_adapter*padapter, u8 Mode);
+void   rtl8192d_set_FwJoinBssReport_cmd(_adapter* padapter, u8 mstatus);
+u8     rtl8192d_set_rssi_cmd(_adapter*padapter, u8 *param);
+u8     rtl8192d_set_raid_cmd(_adapter*padapter, u32 mask, u8 arg);
+void   rtl8192d_Add_RateATid(PADAPTER pAdapter, u32 bitmap, u8 arg);
+#ifdef CONFIG_P2P
+void   rtl8192d_set_p2p_ps_offload_cmd(_adapter* padapter, u8 p2p_ps_state);
+#endif //CONFIG_P2P
+
+#ifdef CONFIG_TSF_RESET_OFFLOAD
+int reset_tsf(PADAPTER Adapter, u8 reset_port );
+#endif // CONFIG_TSF_RESET_OFFLOAD
+
+#ifdef CONFIG_WOWLAN
+typedef struct _SETWOWLAN_PARM{
+       u8      mode;
+       u8      gpio_index;
+       u8      gpio_duration;
+       u8  second_mode;
+       u8  reserve;
+}SETWOWLAN_PARM, *PSETWOWLAN_PARM;
+
+#define FW_WOWLAN_FUN_EN                       BIT(0)
+#define FW_WOWLAN_PATTERN_MATCH                BIT(1)
+#define FW_WOWLAN_MAGIC_PKT                    BIT(2)
+#define FW_WOWLAN_UNICAST                      BIT(3)
+#define FW_WOWLAN_ALL_PKT_DROP         BIT(4)
+#define FW_WOWLAN_GPIO_ACTIVE          BIT(5)
+#define FW_WOWLAN_REKEY_WAKEUP         BIT(6)
+#define FW_WOWLAN_DEAUTH_WAKEUP                BIT(7)
+
+#define FW_WOWLAN_GPIO_WAKEUP_EN       BIT(0)
+#define FW_FW_PARSE_MAGIC_PKT          BIT(1)
+
+void rtl8192d_set_wowlan_cmd(_adapter* padapter);
+void SetFwRelatedForWoWLAN8192DU(_adapter*     padapter,u8 bHostIsGoingtoSleep);
+#endif // CONFIG_WOWLAN
+
+#endif // __RTL8192D_CMD_H_
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtl8192d_dm.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtl8192d_dm.h
new file mode 100644 (file)
index 0000000..eaf1e4f
--- /dev/null
@@ -0,0 +1,420 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef        __RTL8192D_DM_H__
+#define __RTL8192D_DM_H__
+//============================================================
+// Description:
+//
+// This file is for 92CE/92CU dynamic mechanism only
+//
+//
+//============================================================
+//============================================================
+// Global var
+//============================================================
+
+extern u32 EDCAParam[maxAP][3] ;
+
+//============================================================
+// structure and define
+//============================================================
+
+typedef struct _FALSE_ALARM_STATISTICS{
+       u32     Cnt_Parity_Fail;
+       u32     Cnt_Rate_Illegal;
+       u32     Cnt_Crc8_fail;
+       u32     Cnt_Mcs_fail;
+       u32     Cnt_Ofdm_fail;
+       u32     Cnt_Cck_fail;
+       u32     Cnt_all;
+       u32     Cnt_Fast_Fsync;
+       u32     Cnt_SB_Search_fail;
+}FALSE_ALARM_STATISTICS, *PFALSE_ALARM_STATISTICS;
+
+typedef struct _Dynamic_Power_Saving_
+{
+       u8              PreCCAState;
+       u8              CurCCAState;
+
+       u8              PreRFState;
+       u8              CurRFState;
+
+       //int           Rssi_val_min;
+
+}PS_T,*pPS_T;
+
+typedef struct _Dynamic_Initial_Gain_Threshold_
+{
+       u8              Dig_Enable_Flag;
+       u8              Dig_Ext_Port_Stage;
+
+       int             RssiLowThresh;
+       int             RssiHighThresh;
+
+       u32             FALowThresh;
+       u32             FAHighThresh;
+
+       u8              CurSTAConnectState;
+       u8              PreSTAConnectState;
+       u8              CurMultiSTAConnectState;
+
+       u8              PreIGValue;
+       u8              CurIGValue;
+       u8             BackupIGValue;
+
+       char            BackoffVal;
+       char            BackoffVal_range_max;
+       char            BackoffVal_range_min;
+       u8              rx_gain_range_max;
+       u8              rx_gain_range_min;
+       u8              Rssi_val_min;
+
+       u8              PreCCKPDState;
+       u8              CurCCKPDState;
+
+       u8              LargeFAHit;
+       u8              ForbiddenIGI;
+       u32             Recover_cnt;
+       u8              rx_gain_range_min_nolink;
+}DIG_T,*pDIG_T;
+
+typedef enum tag_Dynamic_Init_Gain_Operation_Type_Definition
+{
+       DIG_TYPE_THRESH_HIGH    = 0,
+       DIG_TYPE_THRESH_LOW     = 1,
+       DIG_TYPE_BACKOFF                = 2,
+       DIG_TYPE_RX_GAIN_MIN    = 3,
+       DIG_TYPE_RX_GAIN_MAX    = 4,
+       DIG_TYPE_ENABLE                 = 5,
+       DIG_TYPE_DISABLE                = 6,
+       DIG_OP_TYPE_MAX
+}DM_DIG_OP_E;
+
+typedef enum tag_CCK_Packet_Detection_Threshold_Type_Definition
+{
+       CCK_PD_STAGE_LowRssi = 0,
+       CCK_PD_STAGE_HighRssi = 1,
+       CCK_PD_STAGE_MAX = 3,
+}DM_CCK_PDTH_E;
+
+typedef enum tag_1R_CCA_Type_Definition
+{
+       CCA_MIN = 0,
+       CCA_1R =1,
+       CCA_2R = 2,
+       CCA_MAX = 3,
+}DM_1R_CCA_E;
+
+typedef enum tag_RF_Type_Definition
+{
+       RF_Save =0,
+       RF_Normal = 1,
+       RF_MAX = 2,
+}DM_RF_E;
+
+typedef enum tag_DIG_EXT_PORT_ALGO_Definition
+{
+       DIG_EXT_PORT_STAGE_0 = 0,
+       DIG_EXT_PORT_STAGE_1 = 1,
+       DIG_EXT_PORT_STAGE_2 = 2,
+       DIG_EXT_PORT_STAGE_3 = 3,
+       DIG_EXT_PORT_STAGE_MAX = 4,
+}DM_DIG_EXT_PORT_ALG_E;
+
+
+typedef enum tag_DIG_Connect_Definition
+{
+       DIG_STA_DISCONNECT = 0,
+       DIG_STA_CONNECT = 1,
+       DIG_STA_BEFORE_CONNECT = 2,
+       DIG_MultiSTA_DISCONNECT = 3,
+       DIG_MultiSTA_CONNECT = 4,
+       DIG_CONNECT_MAX
+}DM_DIG_CONNECT_E;
+
+
+#define                DM_DIG_THRESH_HIGH                      40
+#define                DM_DIG_THRESH_LOW                       35
+
+#define                DM_FALSEALARM_THRESH_LOW        400
+#define                DM_FALSEALARM_THRESH_HIGH       1000
+
+#define                DM_DIG_MAX                                      0x3e
+#define                DM_DIG_MIN                                      0x1e //0x22//0x1c
+
+#define                DM_DIG_FA_UPPER                         0x32
+#define                DM_DIG_FA_LOWER                         0x20
+
+//vivi 92c&92d has different definition, 20110504
+//this is for 92c
+#define                DM_DIG_FA_TH0                           0x200//0x20
+#define                DM_DIG_FA_TH1                           0x300//0x100
+#define                DM_DIG_FA_TH2                           0x400//0x200
+//this is for 92d
+#define                DM_DIG_FA_TH0_92D                       0x100
+#define                DM_DIG_FA_TH1_92D                       0x150
+#define                DM_DIG_FA_TH2_92D                       0x250
+
+#define                DM_DIG_BACKOFF_MAX                      12
+#define                DM_DIG_BACKOFF_MIN                      (-4)
+#define                DM_DIG_BACKOFF_DEFAULT          10
+
+#define                RxPathSelection_SS_TH_low               30
+#define                RxPathSelection_diff_TH                 18
+
+#define                DM_RATR_STA_INIT                        0
+#define                DM_RATR_STA_HIGH                        1
+#define                DM_RATR_STA_MIDDLE              2
+#define                DM_RATR_STA_LOW                 3
+
+#define                CTSToSelfTHVal                                  30
+#define                RegC38_TH                                               20
+
+#define                WAIotTHVal                                              25
+
+//Dynamic Tx Power Control Threshold
+#define                TX_POWER_NEAR_FIELD_THRESH_LVL2 74
+#define                TX_POWER_NEAR_FIELD_THRESH_LVL1 67
+
+#define                TxHighPwrLevel_Normal           0
+#define                TxHighPwrLevel_Level1           1
+#define                TxHighPwrLevel_Level2           2
+#define                TxHighPwrLevel_BT1                      3
+#define                TxHighPwrLevel_BT2                      4
+#define                TxHighPwrLevel_15                       5
+#define                TxHighPwrLevel_35                       6
+#define                TxHighPwrLevel_50                       7
+#define                TxHighPwrLevel_70                       8
+#define                TxHighPwrLevel_100                      9
+
+#define                DM_Type_ByFW                    0
+#define                DM_Type_ByDriver                1
+
+typedef struct _RATE_ADAPTIVE
+{
+       u8                              RateAdaptiveDisabled;
+       u8                              RATRState;
+       u16                             reserve;
+
+       u32                             HighRSSIThreshForRA;
+       u32                             High2LowRSSIThreshForRA;
+       u8                              Low2HighRSSIThreshForRA40M;
+       u32                             LowRSSIThreshForRA40M;
+       u8                              Low2HighRSSIThreshForRA20M;
+       u32                             LowRSSIThreshForRA20M;
+       u32                             UpperRSSIThresholdRATR;
+       u32                             MiddleRSSIThresholdRATR;
+       u32                             LowRSSIThresholdRATR;
+       u32                             LowRSSIThresholdRATR40M;
+       u32                             LowRSSIThresholdRATR20M;
+       u8                              PingRSSIEnable; //cosa add for Netcore long range ping issue
+       u32                             PingRSSIRATR;   //cosa add for Netcore long range ping issue
+       u32                             PingRSSIThreshForRA;//cosa add for Netcore long range ping issue
+       u32                             LastRATR;
+       u8                              PreRATRState;
+
+} RATE_ADAPTIVE, *PRATE_ADAPTIVE;
+
+typedef enum tag_SW_Antenna_Switch_Definition
+{
+       Antenna_B = 1,
+       Antenna_A = 2,
+       Antenna_MAX = 3,
+}DM_SWAS_E;
+
+// 20100514 Joseph: Add definition for antenna switching test after link.
+// This indicates two different the steps.
+// In SWAW_STEP_PEAK, driver needs to switch antenna and listen to the signal on the air.
+// In SWAW_STEP_DETERMINE, driver just compares the signal captured in SWAW_STEP_PEAK
+// with original RSSI to determine if it is necessary to switch antenna.
+#define SWAW_STEP_PEAK         0
+#define SWAW_STEP_DETERMINE    1
+
+#define        TP_MODE         0
+#define        RSSI_MODE               1
+#define        TRAFFIC_LOW     0
+#define        TRAFFIC_HIGH    1
+
+//=============================
+//Neil Chen---2011--06--15--
+//==============================
+//3 PathDiv
+typedef struct _SW_Antenna_Switch_
+{
+       u8              try_flag;
+       s32             PreRSSI;
+       u8              CurAntenna;
+       u8              PreAntenna;
+       u8              RSSI_Trying;
+       u8              TestMode;
+       u8              bTriggerAntennaSwitch;
+       u8              SelectAntennaMap;
+
+       // Before link Antenna Switch check
+       u8              SWAS_NoLink_State;
+       u32             SWAS_NoLink_BK_Reg860;
+}SWAT_T, *pSWAT_T;
+//========================================
+
+struct         dm_priv
+{
+       u8      DM_Type;
+       u8      DMFlag, DMFlag_tmp;
+
+       //for DIG
+       u8      bDMInitialGainEnable;
+       //u8    binitialized; // for dm_initial_gain_Multi_STA use.
+       DIG_T   DM_DigTable;
+
+       PS_T    DM_PSTable;
+
+       FALSE_ALARM_STATISTICS  FalseAlmCnt;
+
+       //for rate adaptive, in fact,  88c/92c fw will handle this
+       u8      bUseRAMask;
+       RATE_ADAPTIVE   RateAdaptive;
+
+       //* Upper and Lower Signal threshold for Rate Adaptive*/
+       int     UndecoratedSmoothedPWDB;
+       int     EntryMinUndecoratedSmoothedPWDB;
+       int     EntryMaxUndecoratedSmoothedPWDB;
+       int     MinUndecoratedPWDBForDM;
+       int     LastMinUndecoratedPWDBForDM;
+#ifdef CONFIG_DUALMAC_CONCURRENT
+       int     RssiValMinForAnotherMacOfDMSP;
+       u32     CurDigValueForAnotherMacOfDMSP;
+       BOOLEAN         bWriteDigForAnotherMacOfDMSP;
+       BOOLEAN         bChangeCCKPDStateForAnotherMacOfDMSP;
+       u8      CurCCKPDStateForAnotherMacOfDMSP;
+       BOOLEAN         bChangeTxHighPowerLvlForAnotherMacOfDMSP;
+       u8      CurTxHighLvlForAnotherMacOfDMSP;
+#endif
+
+       //for High Power
+       u8      bDynamicTxPowerEnable;
+       u8      LastDTPLvl;
+       u8      DynamicTxHighPowerLvl;//Add by Jacken Tx Power Control for Near/Far Range 2008/03/06
+
+       //for tx power tracking
+       u8      bTXPowerTracking;
+       u8      TXPowercount;
+       u8      bTXPowerTrackingInit;
+       u8      TxPowerTrackControl;    //for mp mode, turn off txpwrtracking as default
+       u8      TM_Trigger;
+
+       u8      ThermalMeter[2];        // ThermalMeter, index 0 for RFIC0, and 1 for RFIC1
+       u8      ThermalValue;
+       u8      ThermalValue_LCK;
+       u8      ThermalValue_IQK;
+       u8      ThermalValue_AVG[AVG_THERMAL_NUM];
+       u8      ThermalValue_AVG_index;
+       u8      ThermalValue_RxGain;
+       u8      ThermalValue_Crystal;
+       u8      Delta_IQK;
+       u8      Delta_LCK;
+       u8      bRfPiEnable;
+       u8      bReloadtxpowerindex;
+       u8      bDoneTxpower;
+
+       //for APK
+       u32     APKoutput[2][2];        //path A/B; output1_1a/output1_2a
+       u8      bAPKdone;
+       u8      bAPKThermalMeterIgnore;
+       BOOLEAN         bDPKdone[2];
+       BOOLEAN         bDPKstore;
+       BOOLEAN         bDPKworking;
+       u8      OFDM_min_index_internalPA_DPK[2];
+       u8      TxPowerLevelDPK[2];
+
+       u32     RegA24;
+
+       //for IQK
+       u32     Reg874;
+       u32     RegC08;
+       u32     Reg88C;
+       u8      Reg522;
+       u8      Reg550;
+       u8      Reg551;
+       u32     Reg870;
+       u32     ADDA_backup[IQK_ADDA_REG_NUM];
+       u32     IQK_MAC_backup[IQK_MAC_REG_NUM];
+       u32     IQK_BB_backup[IQK_BB_REG_NUM];
+
+       u8      bCCKinCH14;
+
+       char    CCK_index;
+       //u8 Record_CCK_20Mindex;
+       //u8 Record_CCK_40Mindex;
+       char    OFDM_index[2];
+
+       SWAT_T DM_SWAT_Table;
+
+       //for TxPwrTracking
+       int     RegE94;
+       int     RegE9C;
+       int     RegEB4;
+       int     RegEBC;
+#if MP_DRIVER == 1
+       u8      RegC04_MP;
+       u32     RegD04_MP;
+#endif
+       u32     TXPowerTrackingCallbackCnt;     //cosa add for debug
+
+       u32     prv_traffic_idx; // edca turbo
+
+       u32     RegRF3C[2];     //pathA / pathB
+
+       // Add for Reading Initial Data Rate SEL Register 0x484 during watchdog. Using for fill tx desc. 2011.3.21 by Thomas
+       u8      INIDATA_RATE[32];
+
+#ifdef CONFIG_DM_ADAPTIVITY
+       /* Ported from ODM, for ESTI Adaptivity test */
+       s8 TH_L2H_ini;
+       s8 TH_EDCCA_HL_diff;
+       s8 IGI_Base;
+       u8 IGI_target;
+       bool ForceEDCCA;
+       u8 AdapEn_RSSI;
+       s8 Force_TH_H;
+       s8 Force_TH_L;
+       u8 IGI_LowerBound;
+
+       bool    bPreEdccaEnable;
+#endif
+};
+
+
+/*------------------------Export global variable----------------------------*/
+/*------------------------Export global variable----------------------------*/
+/*------------------------Export Marco Definition---------------------------*/
+//#define DM_MultiSTA_InitGainChangeNotify(Event) {DM_DigTable.CurMultiSTAConnectState = Event;}
+
+
+//============================================================
+// function prototype
+//============================================================
+void rtl8192d_init_dm_priv(IN PADAPTER Adapter);
+void rtl8192d_deinit_dm_priv(IN PADAPTER Adapter);
+void   rtl8192d_InitHalDm(IN PADAPTER Adapter);
+void   rtl8192d_HalDmWatchDog(IN PADAPTER Adapter);
+
+VOID rtl8192d_dm_CheckTXPowerTracking(IN PADAPTER Adapter);
+
+#endif //__HAL8190PCIDM_H__
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtl8192d_hal.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtl8192d_hal.h
new file mode 100644 (file)
index 0000000..347337c
--- /dev/null
@@ -0,0 +1,1125 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __RTL8192D_HAL_H__
+#define __RTL8192D_HAL_H__
+
+#include "hal_com.h"
+#include "rtl8192d_spec.h"
+#include "Hal8192DPhyReg.h"
+#include "Hal8192DPhyCfg.h"
+#include "rtl8192d_rf.h"
+#include "rtl8192d_dm.h"
+#include "rtl8192d_recv.h"
+#include "rtl8192d_xmit.h"
+#include "rtl8192d_cmd.h"
+
+/*---------------------------Define Local Constant---------------------------*/
+/* Channel switch:The size of command tables for switch channel*/
+#define MAX_PRECMD_CNT 16
+#define MAX_RFDEPENDCMD_CNT 16
+#define MAX_POSTCMD_CNT 16
+
+#define MAX_DOZE_WAITING_TIMES_9x 64
+
+#define MAX_RF_IMR_INDEX 12
+#define MAX_RF_IMR_INDEX_NORMAL 13
+#define RF_REG_NUM_for_C_CUT_5G        6
+#define RF_REG_NUM_for_C_CUT_5G_internalPA     7
+#define RF_REG_NUM_for_C_CUT_2G        5
+#define RF_CHNL_NUM_5G                 19
+#define RF_CHNL_NUM_5G_40M             17
+#define TARGET_CHNL_NUM_5G     221
+#define TARGET_CHNL_NUM_2G     14
+#define TARGET_CHNL_NUM_2G_5G  59
+#define CV_CURVE_CNT                   64
+
+//static u32    RF_REG_FOR_5G_SWCHNL[MAX_RF_IMR_INDEX]={0,0x2f,0x30,0x31,0x32,0x33,0x34,0x35,0x36,0x38,0x39,0x0};
+static u32        RF_REG_FOR_5G_SWCHNL_NORMAL[MAX_RF_IMR_INDEX_NORMAL]={0,0x2f,0x30,0x31,0x32,0x33,0x34,0x35,0x36,0x37,0x38,0x39,0x0};
+
+static u8      RF_REG_for_C_CUT_5G[RF_REG_NUM_for_C_CUT_5G] =
+                       {RF_SYN_G1, RF_SYN_G2,  RF_SYN_G3,      RF_SYN_G4,      RF_SYN_G5,      RF_SYN_G6};
+
+static u8      RF_REG_for_C_CUT_5G_internalPA[RF_REG_NUM_for_C_CUT_5G_internalPA] =
+                       {0x0B,  0x48,   0x49,   0x4B,   0x03,   0x04,   0x0E};
+static u8      RF_REG_for_C_CUT_2G[RF_REG_NUM_for_C_CUT_2G] =
+                       {RF_SYN_G1, RF_SYN_G2,  RF_SYN_G3,      RF_SYN_G7,      RF_SYN_G8};
+
+#if DBG
+static u32     RF_REG_MASK_for_C_CUT_2G[RF_REG_NUM_for_C_CUT_2G] =
+                       {BIT19|BIT18|BIT17|BIT14|BIT1,  BIT10|BIT9,
+                       BIT18|BIT17|BIT16|BIT1,         BIT2|BIT1,
+                       BIT15|BIT14|BIT13|BIT12|BIT11};
+#endif //amy, temp remove
+static u8      RF_CHNL_5G[RF_CHNL_NUM_5G] =
+                       {36,40,44,48,52,56,60,64,100,104,108,112,116,120,124,128,132,136,140};
+static u8      RF_CHNL_5G_40M[RF_CHNL_NUM_5G_40M] =
+                       {38,42,46,50,54,58,62,102,106,110,114,118,122,126,130,134,138};
+
+static u32     RF_REG_Param_for_C_CUT_5G[5][RF_REG_NUM_for_C_CUT_5G] = {
+                       {0xE43BE,       0xFC638,        0x77C0A,        0xDE471,        0xd7110,        0x8EB04},
+                       {0xE43BE,       0xFC078,        0xF7C1A,        0xE0C71,        0xD7550,        0xAEB04},
+                       {0xE43BF,       0xFF038,        0xF7C0A,        0xDE471,        0xE5550,        0xAEB04},
+                       {0xE43BF,       0xFF079,        0xF7C1A,        0xDE471,        0xE5550,        0xAEB04},
+                       {0xE43BF,       0xFF038,        0xF7C1A,        0xDE471,        0xd7550,        0xAEB04}};
+
+static u32     RF_REG_Param_for_C_CUT_2G[3][RF_REG_NUM_for_C_CUT_2G] = {
+                       {0x643BC,       0xFC038,        0x77C1A,        0x41289,        0x01840},
+                       {0x643BC,       0xFC038,        0x07C1A,        0x41289,        0x01840},
+                       {0x243BC,       0xFC438,        0x07C1A,        0x4128B,        0x0FC41}};
+
+#if SWLCK == 1
+static u32 RF_REG_SYN_G4_for_C_CUT_2G = 0xD1C31&0x7FF;
+#endif
+
+static u32     RF_REG_Param_for_C_CUT_5G_internalPA[3][RF_REG_NUM_for_C_CUT_5G_internalPA] = {
+                       {0x01a00,       0x40443,        0x00eb5,        0x89bec,        0x94a12,        0x94a12,        0x94a12},
+                       {0x01800,       0xc0443,        0x00730,        0x896ee,        0x94a52,        0x94a52,        0x94a52},
+                       {0x01800,       0xc0443,        0x00730,        0x896ee,        0x94a12,        0x94a12,        0x94a12}};
+
+
+
+//[mode][patha+b][reg]
+static u32 RF_IMR_Param_Normal[1][3][MAX_RF_IMR_INDEX_NORMAL]={{
+       {0x70000,0x00ff0,0x4400f,0x00ff0,0x0,0x0,0x0,0x0,0x0,0x64888,0xe266c,0x00090,0x22fff},// channel 1-14.
+       {0x70000,0x22880,0x4470f,0x55880,0x00070, 0x88000, 0x0,0x88080,0x70000,0x64a82,0xe466c,0x00090,0x32c9a}, //path 36-64
+       {0x70000,0x44880,0x4477f,0x77880,0x00070, 0x88000, 0x0,0x880b0,0x0,0x64b82,0xe466c,0x00090,0x32c9a} //100 -165
+}
+};
+
+//static u32 CurveIndex_5G[TARGET_CHNL_NUM_5G]={0};
+//static u32 CurveIndex_2G[TARGET_CHNL_NUM_2G]={0};
+static u32 CurveIndex[TARGET_CHNL_NUM_2G_5G]={0};
+
+static u32 TargetChnl_5G[TARGET_CHNL_NUM_5G] = {
+25141, 25116,  25091,  25066,  25041,
+25016, 24991,  24966,  24941,  24917,
+24892, 24867,  24843,  24818,  24794,
+24770, 24765,  24721,  24697,  24672,
+24648, 24624,  24600,  24576,  24552,
+24528, 24504,  24480,  24457,  24433,
+24409, 24385,  24362,  24338,  24315,
+24291, 24268,  24245,  24221,  24198,
+24175, 24151,  24128,  24105,  24082,
+24059, 24036,  24013,  23990,  23967,
+23945, 23922,  23899,  23876,  23854,
+23831, 23809,  23786,  23764,  23741,
+23719, 23697,  23674,  23652,  23630,
+23608, 23586,  23564,  23541,  23519,
+23498, 23476,  23454,  23432,  23410,
+23388, 23367,  23345,  23323,  23302,
+23280, 23259,  23237,  23216,  23194,
+23173, 23152,  23130,  23109,  23088,
+23067, 23046,  23025,  23003,  22982,
+22962, 22941,  22920,  22899,  22878,
+22857, 22837,  22816,  22795,  22775,
+22754, 22733,  22713,  22692,  22672,
+22652, 22631,  22611,  22591,  22570,
+22550, 22530,  22510,  22490,  22469,
+22449, 22429,  22409,  22390,  22370,
+22350, 22336,  22310,  22290,  22271,
+22251, 22231,  22212,  22192,  22173,
+22153, 22134,  22114,  22095,  22075,
+22056, 22037,  22017,  21998,  21979,
+21960, 21941,  21921,  21902,  21883,
+21864, 21845,  21826,  21807,  21789,
+21770, 21751,  21732,  21713,  21695,
+21676, 21657,  21639,  21620,  21602,
+21583, 21565,  21546,  21528,  21509,
+21491, 21473,  21454,  21436,  21418,
+21400, 21381,  21363,  21345,  21327,
+21309, 21291,  21273,  21255,  21237,
+21219, 21201,  21183,  21166,  21148,
+21130, 21112,  21095,  21077,  21059,
+21042, 21024,  21007,  20989,  20972,
+25679, 25653,  25627,  25601,  25575,
+25549, 25523,  25497,  25471,  25446,
+25420, 25394,  25369,  25343,  25318,
+25292, 25267,  25242,  25216,  25191,
+25166  };
+
+static u32 TargetChnl_2G[TARGET_CHNL_NUM_2G] = {       // channel 1~14
+26084, 26030, 25976, 25923, 25869, 25816, 25764,
+25711, 25658, 25606, 25554, 25502, 25451, 25328
+};
+
+
+#ifdef CONFIG_PCI_HCI
+       #include <pci_ops.h>
+       #include "Hal8192DEHWImg.h"
+
+       #define RTL819X_DEFAULT_RF_TYPE                 RF_2T2R
+
+//---------------------------------------------------------------------
+//             RTL8192DE From file
+//---------------------------------------------------------------------
+       #define RTL8192D_FW_IMG                                         "rtl8192DE\\rtl8192dfw.bin"
+
+       #define RTL8192D_PHY_REG                                        "rtl8192DE\\PHY_REG.txt"
+       #define RTL8192D_PHY_REG_PG                             "rtl8192DE\\PHY_REG_PG.txt"
+       #define RTL8192D_PHY_REG_MP                             "rtl8192DE\\PHY_REG_MP.txt"
+
+       #define RTL8192D_AGC_TAB                                        "rtl8192DE\\AGC_TAB.txt"
+       #define RTL8192D_AGC_TAB_2G                             "rtl8192DE\\AGC_TAB_2G.txt"
+       #define RTL8192D_AGC_TAB_5G                             "rtl8192DE\\AGC_TAB_5G.txt"
+       #define RTL8192D_PHY_RADIO_A                            "rtl8192DE\\radio_a.txt"
+       #define RTL8192D_PHY_RADIO_B                            "rtl8192DE\\radio_b.txt"
+       #define RTL8192D_PHY_RADIO_A_intPA              "rtl8192DE\\radio_a_intPA.txt"
+       #define RTL8192D_PHY_RADIO_B_intPA              "rtl8192DE\\radio_b_intPA.txt"
+       #define RTL8192D_PHY_MACREG                             "rtl8192DE\\MAC_REG.txt"
+
+//---------------------------------------------------------------------
+//             RTL8192DE From header
+//---------------------------------------------------------------------
+
+       // Fw Array
+       #define Rtl8192D_FwImageArray                           Rtl8192DEFwImgArray
+
+       // MAC/BB/PHY Array
+       #define Rtl8192D_MAC_Array                                      Rtl8192DEMAC_2T_Array
+       #define Rtl8192D_AGCTAB_Array                           Rtl8192DEAGCTAB_Array
+       #define Rtl8192D_AGCTAB_5GArray                 Rtl8192DEAGCTAB_5GArray
+       #define Rtl8192D_AGCTAB_2GArray                 Rtl8192DEAGCTAB_2GArray
+       #define Rtl8192D_AGCTAB_2TArray                         Rtl8192DEAGCTAB_2TArray
+       #define Rtl8192D_AGCTAB_1TArray                         Rtl8192DEAGCTAB_1TArray
+       #define Rtl8192D_PHY_REG_2TArray                        Rtl8192DEPHY_REG_2TArray
+       #define Rtl8192D_PHY_REG_1TArray                        Rtl8192DEPHY_REG_1TArray
+       #define Rtl8192D_PHY_REG_Array_PG                       Rtl8192DEPHY_REG_Array_PG
+       #define Rtl8192D_PHY_REG_Array_MP                       Rtl8192DEPHY_REG_Array_MP
+       #define Rtl8192D_RadioA_2TArray                         Rtl8192DERadioA_2TArray
+       #define Rtl8192D_RadioA_1TArray                         Rtl8192DERadioA_1TArray
+       #define Rtl8192D_RadioB_2TArray                         Rtl8192DERadioB_2TArray
+       #define Rtl8192D_RadioB_1TArray                         Rtl8192DERadioB_1TArray
+       #define Rtl8192D_RadioA_2T_intPAArray           Rtl8192DERadioA_2T_intPAArray
+       #define Rtl8192D_RadioB_2T_intPAArray           Rtl8192DERadioB_2T_intPAArray
+
+       // Array length
+       #define Rtl8192D_FwImageArrayLength                             Rtl8192DEImgArrayLength
+       #define Rtl8192D_MAC_ArrayLength                                Rtl8192DEMAC_2T_ArrayLength
+       #define Rtl8192D_AGCTAB_5GArrayLength                   Rtl8192DEAGCTAB_5GArrayLength
+       #define Rtl8192D_AGCTAB_2GArrayLength                   Rtl8192DEAGCTAB_2GArrayLength
+       #define Rtl8192D_AGCTAB_2TArrayLength                   Rtl8192DEAGCTAB_2TArrayLength
+       #define Rtl8192D_AGCTAB_1TArrayLength                   Rtl8192DEAGCTAB_1TArrayLength
+       #define Rtl8192D_AGCTAB_ArrayLength                     Rtl8192DEAGCTAB_ArrayLength
+       #define Rtl8192D_PHY_REG_2TArrayLength                  Rtl8192DEPHY_REG_2TArrayLength
+       #define Rtl8192D_PHY_REG_1TArrayLength                  Rtl8192DEPHY_REG_1TArrayLength
+       #define Rtl8192D_PHY_REG_Array_PGLength         Rtl8192DEPHY_REG_Array_PGLength
+       #define Rtl8192D_PHY_REG_Array_MPLength         Rtl8192DEPHY_REG_Array_MPLength
+       #define Rtl8192D_RadioA_2TArrayLength                   Rtl8192DERadioA_2TArrayLength
+       #define Rtl8192D_RadioB_2TArrayLength                   Rtl8192DERadioB_2TArrayLength
+       #define Rtl8192D_RadioA_2T_intPAArrayLength             Rtl8192DERadioA_2T_intPAArrayLength
+       #define Rtl8192D_RadioB_2T_intPAArrayLength             Rtl8192DERadioB_2T_intPAArrayLength
+
+#elif defined(CONFIG_USB_HCI)
+
+       #include "Hal8192DUHWImg.h"
+#ifdef CONFIG_WOWLAN
+       #include "Hal8192DUHWImg_wowlan.h"
+#endif //CONFIG_WOWLAN
+       #define RTL819X_DEFAULT_RF_TYPE         RF_1T2R
+
+//---------------------------------------------------------------------
+//             RTL8192DU From file
+//---------------------------------------------------------------------
+       #define RTL8192D_FW_IMG                                 "rtl8192DU\\rtl8192dfw.bin"
+
+       #define RTL8192D_PHY_REG                                        "rtl8192DU\\PHY_REG.txt"
+       #define RTL8192D_PHY_REG_PG                             "rtl8192DU\\PHY_REG_PG.txt"
+       #define RTL8192D_PHY_REG_MP                             "rtl8192DU\\PHY_REG_MP.txt"
+
+       #define RTL8192D_AGC_TAB                                        "rtl8192DU\\AGC_TAB.txt"
+       #define RTL8192D_AGC_TAB_2G                             "rtl8192DU\\AGC_TAB_2G.txt"
+       #define RTL8192D_AGC_TAB_5G                             "rtl8192DU\\AGC_TAB_5G.txt"
+       #define RTL8192D_PHY_RADIO_A                            "rtl8192DU\\radio_a.txt"
+       #define RTL8192D_PHY_RADIO_B                            "rtl8192DU\\radio_b.txt"
+       #define RTL8192D_PHY_RADIO_A_intPA              "rtl8192DU\\radio_a_intPA.txt"
+       #define RTL8192D_PHY_RADIO_B_intPA              "rtl8192DU\\radio_b_intPA.txt"
+       #define RTL8192D_PHY_MACREG                             "rtl8192DU\\MAC_REG.txt"
+
+//---------------------------------------------------------------------
+//             RTL8192DU From header
+//---------------------------------------------------------------------
+
+       // Fw Array
+       #define Rtl8192D_FwImageArray                                   Rtl8192DUFwImgArray
+#ifdef CONFIG_WOWLAN
+       #define Rtl8192D_FwWWImageArray                         Rtl8192DUFwWWImgArray
+#endif //CONFIG_WOWLAN
+       // MAC/BB/PHY Array
+       #define Rtl8192D_MAC_Array                                              Rtl8192DUMAC_2T_Array
+       #define Rtl8192D_AGCTAB_Array                                   Rtl8192DUAGCTAB_Array
+       #define Rtl8192D_AGCTAB_5GArray                         Rtl8192DUAGCTAB_5GArray
+       #define Rtl8192D_AGCTAB_2GArray                         Rtl8192DUAGCTAB_2GArray
+       #define Rtl8192D_AGCTAB_2TArray                                 Rtl8192DUAGCTAB_2TArray
+       #define Rtl8192D_AGCTAB_1TArray                                 Rtl8192DUAGCTAB_1TArray
+       #define Rtl8192D_PHY_REG_2TArray                                Rtl8192DUPHY_REG_2TArray
+       #define Rtl8192D_PHY_REG_1TArray                                Rtl8192DUPHY_REG_1TArray
+       #define Rtl8192D_PHY_REG_Array_PG                               Rtl8192DUPHY_REG_Array_PG
+       #define Rtl8192D_PHY_REG_Array_MP                               Rtl8192DUPHY_REG_Array_MP
+       #define Rtl8192D_RadioA_2TArray                                 Rtl8192DURadioA_2TArray
+       #define Rtl8192D_RadioA_1TArray                                 Rtl8192DURadioA_1TArray
+       #define Rtl8192D_RadioB_2TArray                                 Rtl8192DURadioB_2TArray
+       #define Rtl8192D_RadioB_1TArray                                 Rtl8192DURadioB_1TArray
+       #define Rtl8192D_RadioA_2T_intPAArray                   Rtl8192DURadioA_2T_intPAArray
+       #define Rtl8192D_RadioB_2T_intPAArray                   Rtl8192DURadioB_2T_intPAArray
+
+       // Array length
+       #define Rtl8192D_FwImageArrayLength                     Rtl8192DUImgArrayLength
+       #define Rtl8192D_MAC_ArrayLength                                Rtl8192DUMAC_2T_ArrayLength
+       #define Rtl8192D_AGCTAB_5GArrayLength                   Rtl8192DUAGCTAB_5GArrayLength
+       #define Rtl8192D_AGCTAB_2GArrayLength                   Rtl8192DUAGCTAB_2GArrayLength
+       #define Rtl8192D_AGCTAB_2TArrayLength                   Rtl8192DUAGCTAB_2TArrayLength
+       #define Rtl8192D_AGCTAB_1TArrayLength                   Rtl8192DUAGCTAB_1TArrayLength
+       #define Rtl8192D_AGCTAB_ArrayLength                     Rtl8192DUAGCTAB_ArrayLength
+       #define Rtl8192D_PHY_REG_2TArrayLength                  Rtl8192DUPHY_REG_2TArrayLength
+       #define Rtl8192D_PHY_REG_1TArrayLength                  Rtl8192DUPHY_REG_1TArrayLength
+       #define Rtl8192D_PHY_REG_Array_PGLength         Rtl8192DUPHY_REG_Array_PGLength
+       #define Rtl8192D_PHY_REG_Array_MPLength         Rtl8192DUPHY_REG_Array_MPLength
+       #define Rtl8192D_RadioA_2TArrayLength                   Rtl8192DURadioA_2TArrayLength
+       #define Rtl8192D_RadioB_2TArrayLength                   Rtl8192DURadioB_2TArrayLength
+       #define Rtl8192D_RadioA_2T_intPAArrayLength             Rtl8192DURadioA_2T_intPAArrayLength
+       #define Rtl8192D_RadioB_2T_intPAArrayLength             Rtl8192DURadioB_2T_intPAArrayLength
+
+       // The file name "_2T" is for 92CU, "_1T"  is for 88CU. Modified by tynli. 2009.11.24.
+/*     #define Rtl819XFwImageArray                                     Rtl8192DUFwImgArray
+       #define Rtl819XMAC_Array                                        Rtl8192DUMAC_2TArray
+       #define Rtl819XAGCTAB_Array                                     Rtl8192DUAGCTAB_Array
+       #define Rtl819XAGCTAB_5GArray                           Rtl8192DUAGCTAB_5GArray
+       #define Rtl819XAGCTAB_2GArray                           Rtl8192DUAGCTAB_2GArray
+       #define Rtl819XPHY_REG_2TArray                          Rtl8192DUPHY_REG_2TArray
+       #define Rtl819XPHY_REG_1TArray                          Rtl8192DUPHY_REG_1TArray
+       #define Rtl819XRadioA_2TArray                           Rtl8192DURadioA_2TArray
+       #define Rtl819XRadioA_1TArray                           Rtl8192DURadioA_1TArray
+       #define Rtl819XRadioA_2T_intPAArray                     Rtl8192DURadioA_2T_intPAArray
+       #define Rtl819XRadioB_2TArray                           Rtl8192DURadioB_2TArray
+       #define Rtl819XRadioB_1TArray                           Rtl8192DURadioB_1TArray
+       #define Rtl819XRadioB_2T_intPAArray                     Rtl8192DURadioB_2T_intPAArray
+       #define Rtl819XPHY_REG_Array_PG                         Rtl8192DUPHY_REG_Array_PG
+       #define Rtl819XPHY_REG_Array_MP                         Rtl8192DUPHY_REG_Array_MP
+
+       #define Rtl819XAGCTAB_2TArray                           Rtl8192DUAGCTAB_2TArray
+       #define Rtl819XAGCTAB_1TArray                           Rtl8192DUAGCTAB_1TArray*/
+
+#endif
+
+#define DRVINFO_SZ     4 // unit is 8bytes
+#define PageNum_128(_Len)              (u32)(((_Len)>>7) + ((_Len)&0x7F ? 1:0))
+
+//
+// Check if FW header exists. We do not consider the lower 4 bits in this case.
+// By tynli. 2009.12.04.
+//
+#define IS_FW_HEADER_EXIST(_pFwHdr)    ((le16_to_cpu(_pFwHdr->Signature)&0xFFF0) == 0x92C0 ||\
+                                                                       (le16_to_cpu(_pFwHdr->Signature)&0xFFF0) == 0x88C0 ||\
+                                                                       (le16_to_cpu(_pFwHdr->Signature)&0xFFFF) == 0x92D0 ||\
+                                                                       (le16_to_cpu(_pFwHdr->Signature)&0xFFFF) == 0x92D1 ||\
+                                                                       (le16_to_cpu(_pFwHdr->Signature)&0xFFFF) == 0x92D2 ||\
+                                                                       (le16_to_cpu(_pFwHdr->Signature)&0xFFFF) == 0x92D3 )
+
+#define FW_8192D_SIZE                          0x8020 // Max FW len = 32k + 32(FW header length).
+#define FW_8192D_START_ADDRESS 0x1000
+#define FW_8192D_END_ADDRESS           0x1FFF
+
+#define MAX_PAGE_SIZE                          4096    // @ page : 4k bytes
+
+typedef enum _FIRMWARE_SOURCE{
+       FW_SOURCE_IMG_FILE = 0,
+       FW_SOURCE_HEADER_FILE = 1,              //from header file
+}FIRMWARE_SOURCE, *PFIRMWARE_SOURCE;
+
+typedef struct _RT_FIRMWARE{
+       FIRMWARE_SOURCE eFWSource;
+       u8*                     szFwBuffer;
+       u32                     ulFwLength;
+#ifdef CONFIG_WOWLAN
+       u8*                     szWoWLANFwBuffer;
+       u32                     ulWoWLANFwLength;
+#endif //CONFIG_WOWLAN
+}RT_FIRMWARE, *PRT_FIRMWARE, RT_FIRMWARE_92D, *PRT_FIRMWARE_92D;
+
+//
+// This structure must be cared byte-ordering
+//
+// Added by tynli. 2009.12.04.
+typedef struct _RT_8192D_FIRMWARE_HDR {//8-byte alinment required
+
+       //--- LONG WORD 0 ----
+       u16             Signature;      // 92C0: test chip; 92C, 88C0: test chip; 88C1: MP A-cut; 92C1: MP A-cut
+       u8              Category;       // AP/NIC and USB/PCI
+       u8              Function;       // Reserved for different FW function indcation, for further use when driver needs to download different FW in different conditions
+       u16             Version;                // FW Version
+       u8              Subversion;     // FW Subversion, default 0x00
+       u8              Rsvd1;
+
+
+       //--- LONG WORD 1 ----
+       u8              Month;  // Release time Month field
+       u8              Date;   // Release time Date field
+       u8              Hour;   // Release time Hour field
+       u8              Minute; // Release time Minute field
+       u16             RamCodeSize;    // The size of RAM code
+       u16             Rsvd2;
+
+       //--- LONG WORD 2 ----
+       u32             SvnIdx; // The SVN entry index
+       u32             Rsvd3;
+
+       //--- LONG WORD 3 ----
+       u32             Rsvd4;
+       u32             Rsvd5;
+
+}RT_8192D_FIRMWARE_HDR, *PRT_8192D_FIRMWARE_HDR;
+
+#define DRIVER_EARLY_INT_TIME          0x05
+#define BCN_DMA_ATIME_INT_TIME         0x02
+
+typedef        enum _BT_CoType{
+       BT_2Wire                        = 0,
+       BT_ISSC_3Wire   = 1,
+       BT_Accel                        = 2,
+       BT_CSR                  = 3,
+       BT_CSR_ENHAN    = 4,
+       BT_RTL8756              = 5,
+} BT_CoType, *PBT_CoType;
+
+typedef        enum _BT_CurState{
+       BT_OFF          = 0,
+       BT_ON           = 1,
+} BT_CurState, *PBT_CurState;
+
+typedef        enum _BT_ServiceType{
+       BT_SCO                  = 0,
+       BT_A2DP                 = 1,
+       BT_HID                  = 2,
+       BT_HID_Idle             = 3,
+       BT_Scan                 = 4,
+       BT_Idle                 = 5,
+       BT_OtherAction  = 6,
+       BT_Busy                 = 7,
+       BT_OtherBusy            = 8,
+} BT_ServiceType, *PBT_ServiceType;
+
+typedef        enum _BT_RadioShared{
+       BT_Radio_Shared         = 0,
+       BT_Radio_Individual     = 1,
+} BT_RadioShared, *PBT_RadioShared;
+
+typedef struct _BT_COEXIST_STR{
+       u8                                      BluetoothCoexist;
+       u8                                      BT_Ant_Num;
+       u8                                      BT_CoexistType;
+       u8                                      BT_State;
+       u8                                      BT_CUR_State;           //0:on, 1:off
+       u8                                      BT_Ant_isolation;       //0:good, 1:bad
+       u8                                      BT_PapeCtrl;            //0:SW, 1:SW/HW dynamic
+       u8                                      BT_Service;
+       u8                                      BT_RadioSharedType;
+       u8                                      Ratio_Tx;
+       u8                                      Ratio_PRI;
+}BT_COEXIST_STR, *PBT_COEXIST_STR;
+
+//Added for 92D IQK setting.
+typedef struct _IQK_MATRIX_REGS_SETTING{
+       BOOLEAN         bIQKDone;
+#if 1
+       int             Value[1][IQK_Matrix_REG_NUM];
+#else
+       u32             Mark[IQK_Matrix_REG_NUM];
+       u32             Value[IQK_Matrix_REG_NUM];
+#endif
+}IQK_MATRIX_REGS_SETTING,*PIQK_MATRIX_REGS_SETTING;
+
+#ifdef CONFIG_USB_RX_AGGREGATION
+
+typedef enum _USB_RX_AGG_MODE{
+       USB_RX_AGG_DISABLE,
+       USB_RX_AGG_DMA,
+       USB_RX_AGG_USB,
+       USB_RX_AGG_DMA_USB
+}USB_RX_AGG_MODE;
+
+#define MAX_RX_DMA_BUFFER_SIZE 10240           // 10K for 8192C RX DMA buffer
+
+#endif
+
+
+#define TX_SELE_HQ                     BIT(0)          // High Queue
+#define TX_SELE_LQ                     BIT(1)          // Low Queue
+#define TX_SELE_NQ                     BIT(2)          // Normal Queue
+
+
+// Note: We will divide number of page equally for each queue other than public queue!
+
+#define TX_TOTAL_PAGE_NUMBER           0xF8
+#define TX_PAGE_BOUNDARY                       (TX_TOTAL_PAGE_NUMBER + 1)
+
+// For Normal Chip Setting
+// (HPQ + LPQ + NPQ + PUBQ) shall be TX_TOTAL_PAGE_NUMBER
+#define NORMAL_PAGE_NUM_PUBQ           0x56
+
+
+// For Test Chip Setting
+// (HPQ + LPQ + PUBQ) shall be TX_TOTAL_PAGE_NUMBER
+#define TEST_PAGE_NUM_PUBQ_92DU                        0x89
+#define TX_TOTAL_PAGE_NUMBER_92D_DUAL_MAC              0x7A
+#define NORMAL_PAGE_NUM_PUBQ_92D_DUAL_MAC                      0x5A
+#define NORMAL_PAGE_NUM_HPQ_92D_DUAL_MAC                       0x10
+#define NORMAL_PAGE_NUM_LPQ_92D_DUAL_MAC                       0x10
+#define NORMAL_PAGE_NUM_NORMALQ_92D_DUAL_MAC           0
+
+#define TX_PAGE_BOUNDARY_DUAL_MAC                      (TX_TOTAL_PAGE_NUMBER_92D_DUAL_MAC + 1)
+
+// For Test Chip Setting
+#define WMM_TEST_TX_TOTAL_PAGE_NUMBER  0xF5
+#define WMM_TEST_TX_PAGE_BOUNDARY      (WMM_TEST_TX_TOTAL_PAGE_NUMBER + 1) //F6
+
+#define WMM_TEST_PAGE_NUM_PUBQ         0xA3
+#define WMM_TEST_PAGE_NUM_HPQ          0x29
+#define WMM_TEST_PAGE_NUM_LPQ          0x29
+
+
+//Note: For Normal Chip Setting ,modify later
+#define WMM_NORMAL_TX_TOTAL_PAGE_NUMBER        0xF5
+#define WMM_NORMAL_TX_PAGE_BOUNDARY    (WMM_TEST_TX_TOTAL_PAGE_NUMBER + 1) //F6
+
+#define WMM_NORMAL_PAGE_NUM_PUBQ_92D           0X65//0x82
+#define WMM_NORMAL_PAGE_NUM_HPQ_92D            0X30//0x29
+#define WMM_NORMAL_PAGE_NUM_LPQ_92D            0X30
+#define WMM_NORMAL_PAGE_NUM_NPQ_92D            0X30
+
+#define WMM_NORMAL_PAGE_NUM_PUBQ_92D_DUAL_MAC          0X32
+#define WMM_NORMAL_PAGE_NUM_HPQ_92D_DUAL_MAC           0X18
+#define WMM_NORMAL_PAGE_NUM_LPQ_92D_DUAL_MAC           0X18
+#define WMM_NORMAL_PAGE_NUM_NPQ_92D_DUAL_MAC           0X18
+
+//-------------------------------------------------------------------------
+//     Chip specific
+//-------------------------------------------------------------------------
+
+#define CHIP_BONDING_IDENTIFIER(_value)        (((_value)>>22)&0x3)
+#define CHIP_BONDING_92C_1T2R  0x1
+#define CHIP_BONDING_88C_USB_MCARD     0x2
+#define CHIP_BONDING_88C_USB_HP        0x1
+
+//
+// 2011.01.06. Define new structure of chip version for RTL8723 and so on. Added by tynli.
+//
+/*
+     | BIT15:12           |  BIT11:8        | BIT 7              |  BIT6:4  |      BIT3          | BIT2:0  |
+     |-------------+-----------+-----------+-------+-----------+-------|
+     | IC version(CUT)  | ROM version  | Manufacturer  | RF type  |  Chip type       | IC Type |
+     |                           |                      | TSMC/UMC    |              | TEST/NORMAL|             |
+*/
+// [15:12] IC version(CUT): A-cut=0, B-cut=1, C-cut=2, D-cut=3
+// [7] Manufacturer: TSMC=0, UMC=1
+// [6:4] RF type: 1T1R=0, 1T2R=1, 2T2R=2
+// [3] Chip type: TEST=0, NORMAL=1
+// [2:0] IC type: 81xxC=0, 8723=1, 92D=2
+
+#define CHIP_8723                                              BIT(0)
+#define CHIP_92D                                               BIT(1)
+#define NORMAL_CHIP                                    BIT(3)
+#define RF_TYPE_1T1R                                   (~(BIT(4)|BIT(5)|BIT(6)))
+#define RF_TYPE_1T2R                                   BIT(4)
+#define RF_TYPE_2T2R                                   BIT(5)
+#define CHIP_VENDOR_UMC                                BIT(7)
+#define B_CUT_VERSION                                  BIT(12)
+#define C_CUT_VERSION                                  BIT(13)
+#define D_CUT_VERSION                                  ((BIT(12)|BIT(13)))
+#define E_CUT_VERSION                                  BIT(14)
+
+
+// MASK
+#define IC_TYPE_MASK                                   (BIT(0)|BIT(1)|BIT(2))
+#define CHIP_TYPE_MASK                                 BIT(3)
+#define RF_TYPE_MASK                                   (BIT(4)|BIT(5)|BIT(6))
+#define MANUFACTUER_MASK                       BIT(7)
+#define ROM_VERSION_MASK                               (BIT(11)|BIT(10)|BIT(9)|BIT(8))
+#define CUT_VERSION_MASK                               (BIT(15)|BIT(14)|BIT(13)|BIT(12))
+
+// Get element
+#define GET_CVID_IC_TYPE(version)                      ((version) & IC_TYPE_MASK)
+#define GET_CVID_CHIP_TYPE(version)                    ((version) & CHIP_TYPE_MASK)
+#define GET_CVID_RF_TYPE(version)                      ((version) & RF_TYPE_MASK)
+#define GET_CVID_MANUFACTUER(version)          ((version) & MANUFACTUER_MASK)
+#define GET_CVID_ROM_VERSION(version)          ((version) & ROM_VERSION_MASK)
+#define GET_CVID_CUT_VERSION(version)          ((version) & CUT_VERSION_MASK)
+
+#define IS_81XXC(version)                                      ((GET_CVID_IC_TYPE(version) == 0)? _TRUE : _FALSE)
+#define IS_8723_SERIES(version)                                ((GET_CVID_IC_TYPE(version) == CHIP_8723)? _TRUE : _FALSE)
+#define IS_92D(version)                                                ((GET_CVID_IC_TYPE(version) == CHIP_92D)? _TRUE : _FALSE)
+#define IS_1T1R(version)                                               ((GET_CVID_RF_TYPE(version))? _FALSE : _TRUE)
+#define IS_1T2R(version)                                               ((GET_CVID_RF_TYPE(version) == RF_TYPE_1T2R)? _TRUE : _FALSE)
+#define IS_2T2R(version)                                               ((GET_CVID_RF_TYPE(version) == RF_TYPE_2T2R)? _TRUE : _FALSE)
+#define IS_CHIP_VENDOR_UMC(version)                    ((GET_CVID_MANUFACTUER(version))? _TRUE: _FALSE)
+
+#define IS_92C_SERIAL(version)                                 ((IS_81XXC(version) && IS_2T2R(version)) ? _TRUE : _FALSE)
+#define IS_VENDOR_UMC_A_CUT(version)           ((IS_CHIP_VENDOR_UMC(version)) ? ((GET_CVID_CUT_VERSION(version)) ? _FALSE : _TRUE) : _FALSE)
+#define IS_VENDOR_8723_A_CUT(version)          ((IS_8723_SERIES(version)) ? ((GET_CVID_CUT_VERSION(version)) ? _FALSE : _TRUE) : _FALSE)
+// <tynli_Note> 88/92C UMC B-cut vendor is set to TSMC so we need to check CHIP_VENDOR_UMC bit is not 1.
+#define IS_81xxC_VENDOR_UMC_B_CUT(version)     ((IS_CHIP_VENDOR_UMC(version)) ? ((GET_CVID_CUT_VERSION(version) == B_CUT_VERSION) ? _TRUE : _FALSE):_FALSE)
+#define IS_92D_SINGLEPHY(version)                      ((IS_92D(version)) ? (IS_2T2R(version) ? _TRUE: _FALSE) : _FALSE)
+
+#define IS_92D_C_CUT(version)                          ((IS_92D(version)) ? ((GET_CVID_CUT_VERSION(version) == C_CUT_VERSION) ? _TRUE : _FALSE) : _FALSE)
+#define IS_92D_D_CUT(version)                          ((IS_92D(version)) ? ((GET_CVID_CUT_VERSION(version) == D_CUT_VERSION) ? _TRUE : _FALSE) : _FALSE)
+#define IS_92D_E_CUT(version)                          ((IS_92D(version)) ? ((GET_CVID_CUT_VERSION(version) == E_CUT_VERSION) ? _TRUE : _FALSE) : _FALSE)
+#define IS_NORMAL_CHIP92D(version)             ((GET_CVID_CHIP_TYPE(version))? _TRUE: _FALSE)
+
+typedef enum _VERSION_8192D{
+       VERSION_TEST_CHIP_88C = 0x0000,
+       VERSION_TEST_CHIP_92C = 0x0020,
+       VERSION_TEST_UMC_CHIP_8723 = 0x0081,
+       VERSION_NORMAL_TSMC_CHIP_88C = 0x0008,
+       VERSION_NORMAL_TSMC_CHIP_92C = 0x0028,
+       VERSION_NORMAL_TSMC_CHIP_92C_1T2R = 0x0018,
+       VERSION_NORMAL_UMC_CHIP_88C_A_CUT = 0x0088,
+       VERSION_NORMAL_UMC_CHIP_92C_A_CUT = 0x00a8,
+       VERSION_NORMAL_UMC_CHIP_92C_1T2R_A_CUT = 0x0098,
+       VERSION_NORMAL_UMC_CHIP_8723_1T1R_A_CUT = 0x0089,
+       VERSION_NORMAL_UMC_CHIP_8723_1T1R_B_CUT = 0x1089,
+       VERSION_NORMAL_UMC_CHIP_88C_B_CUT = 0x1088,
+       VERSION_NORMAL_UMC_CHIP_92C_B_CUT = 0x10a8,
+       VERSION_NORMAL_UMC_CHIP_92C_1T2R_B_CUT = 0x1090,
+       VERSION_TEST_CHIP_92D_SINGLEPHY= 0x0022,
+       VERSION_TEST_CHIP_92D_DUALPHY = 0x0002,
+       VERSION_NORMAL_CHIP_92D_SINGLEPHY= 0x002a,
+       VERSION_NORMAL_CHIP_92D_DUALPHY = 0x000a,
+       VERSION_NORMAL_CHIP_92D_C_CUT_SINGLEPHY = 0x202a,
+       VERSION_NORMAL_CHIP_92D_C_CUT_DUALPHY = 0x200a,
+       VERSION_NORMAL_CHIP_92D_D_CUT_SINGLEPHY = 0x302a,
+       VERSION_NORMAL_CHIP_92D_D_CUT_DUALPHY = 0x300a,
+       VERSION_NORMAL_CHIP_92D_E_CUT_SINGLEPHY = 0x402a,
+       VERSION_NORMAL_CHIP_92D_E_CUT_DUALPHY = 0x400a,
+}VERSION_8192D,*PVERSION_8192D;
+
+
+//-------------------------------------------------------------------------
+//     Channel Plan
+//-------------------------------------------------------------------------
+enum ChannelPlan{
+       CHPL_FCC        = 0,
+       CHPL_IC         = 1,
+       CHPL_ETSI       = 2,
+       CHPL_SPAIN      = 3,
+       CHPL_FRANCE     = 4,
+       CHPL_MKK        = 5,
+       CHPL_MKK1       = 6,
+       CHPL_ISRAEL     = 7,
+       CHPL_TELEC      = 8,
+       CHPL_GLOBAL     = 9,
+       CHPL_WORLD      = 10,
+};
+
+typedef struct _TxPowerInfo{
+       u8 CCKIndex[RF_PATH_MAX][CHANNEL_GROUP_MAX];
+       u8 HT40_1SIndex[RF_PATH_MAX][CHANNEL_GROUP_MAX];
+       u8 HT40_2SIndexDiff[RF_PATH_MAX][CHANNEL_GROUP_MAX];
+       s8 HT20IndexDiff[RF_PATH_MAX][CHANNEL_GROUP_MAX];
+       u8 OFDMIndexDiff[RF_PATH_MAX][CHANNEL_GROUP_MAX];
+       u8 HT40MaxOffset[RF_PATH_MAX][CHANNEL_GROUP_MAX];
+       u8 HT20MaxOffset[RF_PATH_MAX][CHANNEL_GROUP_MAX];
+       u8 TSSI_A[3];
+       u8 TSSI_B[3];
+       u8 TSSI_A_5G[3];                //5GL/5GM/5GH
+       u8 TSSI_B_5G[3];
+}TxPowerInfo, *PTxPowerInfo;
+
+#define EFUSE_REAL_CONTENT_LEN 1024
+#define EFUSE_MAP_LEN                          256
+#define EFUSE_MAX_SECTION                      32
+#define EFUSE_MAX_SECTION_BASE 16
+// <Roger_Notes> To prevent out of boundary programming case, leave 1byte and program full section
+// 9bytes + 1byt + 5bytes and pre 1byte.
+// For worst case:
+// | 2byte|----8bytes----|1byte|--7bytes--| //92D
+#define EFUSE_OOB_PROTECT_BYTES        18 // PG data exclude header, dummy 7 bytes frome CP test and reserved 1byte.
+
+typedef enum _PA_MODE {
+       PA_MODE_EXTERNAL = 0x00,
+       PA_MODE_INTERNAL_SP3T = 0x01,
+       PA_MODE_INTERNAL_SPDT = 0x02
+} PA_MODE;
+
+/* Copy from rtl8192c */
+enum c2h_id_8192d {
+       C2H_DBG = 0,
+       C2H_TSF = 1,
+       C2H_AP_RPT_RSP = 2,
+       C2H_CCX_TX_RPT = 3,
+       C2H_BT_RSSI = 4,
+       C2H_BT_OP_MODE = 5,
+       C2H_EXT_RA_RPT = 6,
+       C2H_HW_INFO_EXCH = 10,
+       C2H_C2H_H2C_TEST = 11,
+       C2H_BT_INFO = 12,
+       C2H_BT_MP_INFO = 15,
+       MAX_C2HEVENT
+};
+
+#ifdef CONFIG_PCI_HCI
+struct hal_data_8192de
+{
+       VERSION_8192D   VersionID;
+
+       // add for 92D Phy mode/mac/Band mode
+       MACPHY_MODE_8192D       MacPhyMode92D;
+       BAND_TYPE       CurrentBandType92D;     //0:2.4G, 1:5G
+       BAND_TYPE       BandSet92D;
+       BOOLEAN         bIsVS;
+       BOOLEAN         bSupportRemoteWakeUp;
+       u8      AutoLoadStatusFor8192D;
+
+       BOOLEAN         bNOPG;
+
+       BOOLEAN       bMasterOfDMSP;
+       BOOLEAN       bSlaveOfDMSP;
+
+       u16     CustomerID;
+
+       u16     FirmwareVersion;
+       u16     FirmwareVersionRev;
+       u16     FirmwareSubVersion;
+
+       u32     IntrMask[2];
+       u32     IntrMaskToSet[2];
+
+       u32     DisabledFunctions;
+
+       //current WIFI_PHY values
+       u32     ReceiveConfig;
+       u32     TransmitConfig;
+       WIRELESS_MODE   CurrentWirelessMode;
+       HT_CHANNEL_WIDTH        CurrentChannelBW;
+       u8      CurrentChannel;
+       u8      nCur40MhzPrimeSC;// Control channel sub-carrier
+       u16     BasicRateSet;
+
+       //rf_ctrl
+       u8      rf_chip;
+       u8      rf_type;
+       u8      NumTotalRFPath;
+
+       //
+       // EEPROM setting.
+       //
+       u16     EEPROMVID;
+       u16     EEPROMDID;
+       u16     EEPROMSVID;
+       u16     EEPROMSMID;
+       u16     EEPROMChannelPlan;
+       u16     EEPROMVersion;
+
+       u8      EEPROMCustomerID;
+       u8      EEPROMBoardType;
+       u8      EEPROMRegulatory;
+
+       u8      EEPROMThermalMeter;
+
+       u8      EEPROMC9;
+       u8      EEPROMCC;
+       u8      PAMode;
+
+       u8      TxPwrLevelCck[RF_PATH_MAX][CHANNEL_MAX_NUMBER_2G];
+       u8      TxPwrLevelHT40_1S[RF_PATH_MAX][CHANNEL_MAX_NUMBER];     // For HT 40MHZ pwr
+       u8      TxPwrLevelHT40_2S[RF_PATH_MAX][CHANNEL_MAX_NUMBER];     // For HT 40MHZ pwr
+       s8      TxPwrHt20Diff[RF_PATH_MAX][CHANNEL_MAX_NUMBER];// HT 20<->40 Pwr diff
+       u8      TxPwrLegacyHtDiff[RF_PATH_MAX][CHANNEL_MAX_NUMBER];// For HT<->legacy pwr diff
+       // For power group
+       u8      PwrGroupHT20[RF_PATH_MAX][CHANNEL_MAX_NUMBER];
+       u8      PwrGroupHT40[RF_PATH_MAX][CHANNEL_MAX_NUMBER];
+
+       u8      LegacyHTTxPowerDiff;// Legacy to HT rate power diff
+
+       u8      CrystalCap;     // CrystalCap.
+
+#ifdef CONFIG_BT_COEXIST
+       struct btcoexist_priv   bt_coexist;
+#endif
+
+       // Read/write are allow for following hardware information variables
+       u8      framesync;
+       u32     framesyncC34;
+       u8      framesyncMonitor;
+       u8      DefaultInitialGain[4];
+       u8      pwrGroupCnt;
+       u32     MCSTxPowerLevelOriginalOffset[MAX_PG_GROUP][16];
+       u32     CCKTxPowerLevelOriginalOffset;
+
+       u32     AntennaTxPath;                                  // Antenna path Tx
+       u32     AntennaRxPath;                                  // Antenna path Rx
+       u8      BluetoothCoexist;
+       u8      ExternalPA;
+       u8      InternalPA5G[2];        //pathA / pathB
+
+       //u32   LedControlNum;
+       //u32   LedControlMode;
+       //u32   TxPowerTrackControl;
+       u8      b1x1RecvCombine;        // for 1T1R receive combining
+
+       u8      bCurrentTurboEDCA;
+       u32     AcParam_BE; //Original parameter for BE, use for EDCA turbo.
+
+       //vivi, for tx power tracking, 20080407
+       //u16   TSSI_13dBm;
+       //u32   Pwr_Track;
+       // The current Tx Power Level
+       u8      CurrentCckTxPwrIdx;
+       u8      CurrentOfdm24GTxPwrIdx;
+
+       BB_REGISTER_DEFINITION_T        PHYRegDef[4];   //Radio A/B/C/D
+
+       BOOLEAN         bRFPathRxEnable[4];     // We support 4 RF path now.
+
+       u32     RfRegChnlVal[2];
+
+       u8      bCckHighPower;
+
+       BOOLEAN         bPhyValueInitReady;
+
+       BOOLEAN         bTXPowerDataReadFromEEPORM;
+
+       BOOLEAN         bInSetPower;
+
+       //RDG enable
+       BOOLEAN         bRDGEnable;
+
+       BOOLEAN         bLoadIMRandIQKSettingFor2G;// True if IMR or IQK  have done  for 2.4G in scan progress
+       BOOLEAN         bNeedIQK;
+
+       BOOLEAN         bLCKInProgress;
+
+       BOOLEAN         bEarlyModeEnable;
+
+#if 1
+       IQK_MATRIX_REGS_SETTING IQKMatrixRegSetting[IQK_Matrix_Settings_NUM];
+#else
+       //regc80¡¢regc94¡¢regc4c¡¢regc88¡¢regc9c¡¢regc14¡¢regca0¡¢regc1c¡¢regc78
+       u4Byte                          IQKMatrixReg[IQK_Matrix_REG_NUM];
+       IQK_MATRIX_REGS_SETTING                    IQKMatrixRegSetting[IQK_Matrix_Settings_NUM];        // 1->2G,24->5G 20M channel,21->5G 40M channel.
+#endif
+
+       //for host message to fw
+       u8      LastHMEBoxNum;
+
+       u8      fw_ractrl;
+       // Beacon function related global variable.
+       u32     RegBcnCtrlVal;
+       u8      RegTxPause;
+       u8      RegFwHwTxQCtrl;
+       u8      RegReg542;
+       u8      RegCR_1;
+
+       struct dm_priv  dmpriv;
+
+       u8      bInterruptMigration;
+
+       u8      FwRsvdPageStartOffset; //2010.06.23. Added by tynli. Reserve page start offset except beacon in TxQ.
+
+       // Add for dual MAC  0--Mac0 1--Mac1
+       u32     interfaceIndex;
+
+       u16     RegRRSR;
+
+       u16     EfuseUsedBytes;
+       u8      RTSInitRate;     // 2010.11.24.by tynli.
+#ifdef CONFIG_P2P
+       struct P2P_PS_Offload_t p2p_ps_offload;
+#endif //CONFIG_P2P
+};
+
+typedef struct hal_data_8192de HAL_DATA_TYPE, *PHAL_DATA_TYPE;
+
+//
+// Function disabled.
+//
+#define DF_TX_BIT              BIT0
+#define DF_RX_BIT              BIT1
+#define DF_IO_BIT              BIT2
+#define DF_IO_D3_BIT                   BIT3
+
+#define RT_DF_TYPE             u32
+#define RT_DISABLE_FUNC(__pAdapter, __FuncBits) ((__pAdapter)->DisabledFunctions |= ((RT_DF_TYPE)(__FuncBits)))
+#define RT_ENABLE_FUNC(__pAdapter, __FuncBits) ((__pAdapter)->DisabledFunctions &= (~((RT_DF_TYPE)(__FuncBits))))
+#define RT_IS_FUNC_DISABLED(__pAdapter, __FuncBits) ( (__pAdapter)->DisabledFunctions & (__FuncBits) )
+
+void InterruptRecognized8192DE(PADAPTER Adapter, PRT_ISR_CONTENT pIsrContent);
+VOID UpdateInterruptMask8192DE(PADAPTER Adapter, u32 AddMSR, u32 RemoveMSR);
+#endif
+
+#ifdef CONFIG_USB_HCI
+
+//should be renamed and moved to another file
+typedef        enum _INTERFACE_SELECT_8192DUSB{
+       INTF_SEL0_USB                   = 0,            // USB
+       INTF_SEL1_MINICARD      = 1,            // Minicard
+       INTF_SEL2_EKB_PRO               = 2,            // Eee keyboard proprietary
+       INTF_SEL3_PRO                   = 3,            // Customized proprietary
+} INTERFACE_SELECT_8192DUSB, *PINTERFACE_SELECT_8192DUSB;
+
+typedef INTERFACE_SELECT_8192DUSB INTERFACE_SELECT_USB;
+
+struct hal_data_8192du
+{
+       VERSION_8192D   VersionID;
+
+       // add for 92D Phy mode/mac/Band mode
+       MACPHY_MODE_8192D       MacPhyMode92D;
+       BAND_TYPE       CurrentBandType92D;     //0:2.4G, 1:5G
+       BAND_TYPE       BandSet92D;
+       BOOLEAN         bIsVS;
+
+       BOOLEAN         bNOPG;
+
+       BOOLEAN         bSupportRemoteWakeUp;
+       BOOLEAN         bMasterOfDMSP;
+       BOOLEAN         bSlaveOfDMSP;
+#ifdef CONFIG_DUALMAC_CONCURRENT
+       BOOLEAN         bInModeSwitchProcess;
+#endif
+
+       u16     CustomerID;
+
+       u16     FirmwareVersion;
+       u16     FirmwareVersionRev;
+       u16     FirmwareSubVersion;
+
+       //current WIFI_PHY values
+       u32     ReceiveConfig;
+       WIRELESS_MODE   CurrentWirelessMode;
+       HT_CHANNEL_WIDTH        CurrentChannelBW;
+       u8      CurrentChannel;
+       u8      nCur40MhzPrimeSC;// Control channel sub-carrier
+       u16     BasicRateSet;
+
+       INTERFACE_SELECT_8192DUSB       InterfaceSel;
+
+       //rf_ctrl
+       u8      rf_chip;
+       u8      rf_type;
+       u8      NumTotalRFPath;
+
+       //
+       // EEPROM setting.
+       //
+       u8      EEPROMVersion;
+       u16     EEPROMVID;
+       u16     EEPROMPID;
+       u16     EEPROMSVID;
+       u16     EEPROMSDID;
+       u8      EEPROMCustomerID;
+       u8      EEPROMSubCustomerID;
+       u8      EEPROMRegulatory;
+
+       u8      EEPROMThermalMeter;
+
+       u8      EEPROMC9;
+       u8      EEPROMCC;
+       u8      PAMode;
+
+       u8      TxPwrLevelCck[RF_PATH_MAX][CHANNEL_MAX_NUMBER_2G];
+       u8      TxPwrLevelHT40_1S[RF_PATH_MAX][CHANNEL_MAX_NUMBER];     // For HT 40MHZ pwr
+       u8      TxPwrLevelHT40_2S[RF_PATH_MAX][CHANNEL_MAX_NUMBER];     // For HT 40MHZ pwr
+       s8      TxPwrHt20Diff[RF_PATH_MAX][CHANNEL_MAX_NUMBER];// HT 20<->40 Pwr diff
+       u8      TxPwrLegacyHtDiff[RF_PATH_MAX][CHANNEL_MAX_NUMBER];// For HT<->legacy pwr diff
+       // For power group
+       u8      PwrGroupHT20[RF_PATH_MAX][CHANNEL_MAX_NUMBER];
+       u8      PwrGroupHT40[RF_PATH_MAX][CHANNEL_MAX_NUMBER];
+
+       u8      LegacyHTTxPowerDiff;// Legacy to HT rate power diff
+
+       u8      CrystalCap;     // CrystalCap.
+
+#ifdef CONFIG_BT_COEXIST
+       struct btcoexist_priv   bt_coexist;
+#endif
+
+       // Read/write are allow for following hardware information variables
+       u8      framesync;
+       u32     framesyncC34;
+       u8      framesyncMonitor;
+       u8      DefaultInitialGain[4];
+       u8      pwrGroupCnt;
+       u32     MCSTxPowerLevelOriginalOffset[MAX_PG_GROUP][16];
+       u32     CCKTxPowerLevelOriginalOffset;
+
+       u32     AntennaTxPath;                                  // Antenna path Tx
+       u32     AntennaRxPath;                                  // Antenna path Rx
+       u8      BluetoothCoexist;
+       u8      ExternalPA;
+       u8      InternalPA5G[2];        //pathA / pathB
+
+       //u32   LedControlNum;
+       //u32   LedControlMode;
+       //u32   TxPowerTrackControl;
+       u8      b1x1RecvCombine;        // for 1T1R receive combining
+
+       u8      bCurrentTurboEDCA;
+       u32     AcParam_BE; //Original parameter for BE, use for EDCA turbo.
+
+       //vivi, for tx power tracking, 20080407
+       //u16   TSSI_13dBm;
+       //u32   Pwr_Track;
+       // The current Tx Power Level
+       u8      CurrentCckTxPwrIdx;
+       u8      CurrentOfdm24GTxPwrIdx;
+
+       BB_REGISTER_DEFINITION_T        PHYRegDef[4];   //Radio A/B/C/D
+
+       BOOLEAN         bRFPathRxEnable[4];     // We support 4 RF path now.
+
+       u32     RfRegChnlVal[2];
+
+       u8      bCckHighPower;
+
+       BOOLEAN         bPhyValueInitReady;
+
+       BOOLEAN         bTXPowerDataReadFromEEPORM;
+
+       BOOLEAN         bInSetPower;
+
+       //RDG enable
+       BOOLEAN         bRDGEnable;
+
+       BOOLEAN         bLoadIMRandIQKSettingFor2G;// True if IMR or IQK  have done  for 2.4G in scan progress
+       BOOLEAN         bNeedIQK;
+
+       BOOLEAN         bLCKInProgress;
+
+       BOOLEAN         bEarlyModeEnable;
+
+#if 1
+       IQK_MATRIX_REGS_SETTING IQKMatrixRegSetting[IQK_Matrix_Settings_NUM];
+#else
+       //regc80¡¢regc94¡¢regc4c¡¢regc88¡¢regc9c¡¢regc14¡¢regca0¡¢regc1c¡¢regc78
+       u4Byte                          IQKMatrixReg[IQK_Matrix_REG_NUM];
+       IQK_MATRIX_REGS_SETTING                    IQKMatrixRegSetting[IQK_Matrix_Settings_NUM];        // 1->2G,24->5G 20M channel,21->5G 40M channel.
+#endif
+
+       //for host message to fw
+       u8      LastHMEBoxNum;
+
+       u8      fw_ractrl;
+       // Beacon function related global variable.
+       u32     RegBcnCtrlVal;
+       u8      RegTxPause;
+       u8      RegFwHwTxQCtrl;
+       u8      RegReg542;
+       u8      RegCR_1;
+
+       struct dm_priv  dmpriv;
+
+       u8      FwRsvdPageStartOffset; //2010.06.23. Added by tynli. Reserve page start offset except beacon in TxQ.
+
+       //Query RF by FW
+       BOOLEAN         bReadRFbyFW;
+
+       // For 92C USB endpoint setting
+       //
+
+       u32     UsbBulkOutSize;
+
+       int     RtBulkOutPipe[3];
+       int     RtBulkInPipe;
+       int     RtIntInPipe;
+
+       // Add for dual MAC  0--Mac0 1--Mac1
+       u32     interfaceIndex;
+
+       u8      OutEpQueueSel;
+       u8      OutEpNumber;
+
+       u8      Queue2EPNum[8];//for out endpoint number mapping
+
+#ifdef CONFIG_USB_TX_AGGREGATION
+       u8      UsbTxAggMode;
+       u8      UsbTxAggDescNum;
+#endif
+#ifdef CONFIG_USB_RX_AGGREGATION
+       u16     HwRxPageSize;                           // Hardware setting
+       u32     MaxUsbRxAggBlock;
+
+       USB_RX_AGG_MODE UsbRxAggMode;
+       u8      UsbRxAggBlockCount;                     // USB Block count. Block size is 512-byte in hight speed and 64-byte in full speed
+       u8      UsbRxAggBlockTimeout;
+       u8      UsbRxAggPageCount;                      // 8192C DMA page count
+       u8      UsbRxAggPageTimeout;
+#endif
+
+       u16     RegRRSR;
+
+       u16     EfuseUsedBytes;
+       u8      RTSInitRate;     // 2010.11.24.by tynli.
+#ifdef CONFIG_P2P
+       struct P2P_PS_Offload_t p2p_ps_offload;
+#endif //CONFIG_P2P
+};
+
+typedef struct hal_data_8192du HAL_DATA_TYPE, *PHAL_DATA_TYPE;
+#endif
+
+#define GET_HAL_DATA(__pAdapter)       ((HAL_DATA_TYPE *)((__pAdapter)->HalData))
+#define GET_RF_TYPE(priv)      (GET_HAL_DATA(priv)->rf_type)
+
+int FirmwareDownload92D(IN     PADAPTER Adapter,IN     BOOLEAN  bUsedWoWLANFw);
+VOID rtl8192d_FirmwareSelfReset(IN PADAPTER Adapter);
+void rtl8192d_ReadChipVersion(IN PADAPTER Adapter);
+VOID rtl8192d_EfuseParseChnlPlan(PADAPTER Adapter, u8 *hwinfo, BOOLEAN AutoLoadFail);
+VOID rtl8192d_ReadTxPowerInfo(PADAPTER Adapter, u8* PROMContent, BOOLEAN AutoLoadFail);
+VOID rtl8192d_ResetDualMacSwitchVariables(IN PADAPTER Adapter);
+u8 GetEEPROMSize8192D(PADAPTER Adapter);
+BOOLEAN PHY_CheckPowerOffFor8192D(PADAPTER Adapter);
+VOID PHY_SetPowerOnFor8192D(PADAPTER Adapter);
+//void PHY_ConfigMacPhyMode92D(PADAPTER Adapter);
+void rtl8192d_free_hal_data(_adapter * padapter);
+void rtl8192d_set_hal_ops(struct hal_ops *pHalFunc);
+
+#endif
+
+#ifdef CONFIG_MP_INCLUDED
+
+
+extern void Hal_SetAntenna(PADAPTER pAdapter);
+extern void Hal_SetBandwidth(PADAPTER pAdapter);
+
+extern void Hal_SetTxPower(PADAPTER pAdapter);
+extern void Hal_SetCarrierSuppressionTx(PADAPTER pAdapter, u8 bStart);
+extern void Hal_SetSingleToneTx ( PADAPTER pAdapter , u8 bStart );
+extern void Hal_SetSingleCarrierTx (PADAPTER pAdapter, u8 bStart);
+extern void Hal_SetContinuousTx (PADAPTER pAdapter, u8 bStart);
+extern void Hal_SetBandwidth(PADAPTER pAdapter);
+
+extern void Hal_SetDataRate(PADAPTER pAdapter);
+extern void Hal_SetChannel(PADAPTER pAdapter);
+extern void Hal_SetAntennaPathPower(PADAPTER pAdapter);
+extern s32 Hal_SetThermalMeter(PADAPTER pAdapter, u8 target_ther);
+extern s32 Hal_SetPowerTracking(PADAPTER padapter, u8 enable);
+extern void Hal_GetPowerTracking(PADAPTER padapter, u8 * enable);
+extern void Hal_GetThermalMeter(PADAPTER pAdapter, u8 *value);
+extern void Hal_mpt_SwitchRfSetting(PADAPTER pAdapter);
+extern void Hal_MPT_CCKTxPowerAdjust(PADAPTER Adapter, BOOLEAN bInCH14);
+extern void Hal_MPT_CCKTxPowerAdjustbyIndex(PADAPTER pAdapter, BOOLEAN beven);
+extern void Hal_SetCCKTxPower(PADAPTER pAdapter, u8 * TxPower);
+extern void Hal_SetOFDMTxPower(PADAPTER pAdapter, u8 * TxPower);
+extern void Hal_TriggerRFThermalMeter(PADAPTER pAdapter);
+extern u8 Hal_ReadRFThermalMeter(PADAPTER pAdapter);
+extern void Hal_SetCCKContinuousTx(PADAPTER pAdapter, u8 bStart);
+extern void Hal_SetOFDMContinuousTx(PADAPTER pAdapter, u8 bStart);
+
+
+#endif //end CONFIG_MP_INCLUDED
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtl8192d_led.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtl8192d_led.h
new file mode 100644 (file)
index 0000000..b1f7a94
--- /dev/null
@@ -0,0 +1,42 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __RTL8192D_LED_H_
+#define __RTL8192D_LED_H_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+
+
+//================================================================================
+// Interface to manipulate LED objects.
+//================================================================================
+#ifdef CONFIG_USB_HCI
+void rtl8192du_InitSwLeds(_adapter *padapter);
+void rtl8192du_DeInitSwLeds(_adapter *padapter);
+#endif
+
+#ifdef CONFIG_PCI_HCI
+void rtl8192de_gen_RefreshLedState(PADAPTER Adapter);
+void rtl8192de_InitSwLeds(_adapter *padapter);
+void rtl8192de_DeInitSwLeds(_adapter *padapter);
+#endif
+
+#endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtl8192d_recv.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtl8192d_recv.h
new file mode 100644 (file)
index 0000000..e03347a
--- /dev/null
@@ -0,0 +1,186 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef _RTL8192D_RECV_H_
+#define _RTL8192D_RECV_H_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+
+
+#ifdef PLATFORM_OS_XP
+       #ifdef CONFIG_SDIO_HCI
+               #define NR_RECVBUFF 1024//512//128
+       #else
+               #define NR_RECVBUFF (16)
+       #endif
+#elif defined(PLATFORM_OS_CE)
+       #ifdef CONFIG_SDIO_HCI
+               #define NR_RECVBUFF (128)
+       #else
+               #define NR_RECVBUFF (4)
+       #endif
+#else
+#ifdef CONFIG_SINGLE_RECV_BUF
+       #define NR_RECVBUFF (1)
+#else
+       #define NR_RECVBUFF (4)
+#endif //CONFIG_SINGLE_RECV_BUF
+       #define NR_PREALLOC_RECV_SKB (8)
+#endif
+
+
+
+#define RECV_BLK_SZ 512
+#define RECV_BLK_CNT 16
+#define RECV_BLK_TH RECV_BLK_CNT
+
+#if defined(CONFIG_USB_HCI)
+
+#ifdef PLATFORM_OS_CE
+#define MAX_RECVBUF_SZ (8192+1024) // 8K+1k
+#else
+       #ifndef CONFIG_MINIMAL_MEMORY_USAGE
+               //#define MAX_RECVBUF_SZ (32768) // 32k
+               //#define MAX_RECVBUF_SZ (16384) //16K
+               //#define MAX_RECVBUF_SZ (10240) //10K
+               #ifdef CONFIG_PLATFORM_MSTAR
+                       #define MAX_RECVBUF_SZ (8192) // 8K
+               #else
+                       #define MAX_RECVBUF_SZ (15360) // 15k < 16k
+               #endif
+       #else
+               #define MAX_RECVBUF_SZ (4000) // about 4K
+       #endif
+#endif
+
+#elif defined(CONFIG_PCI_HCI)
+//#ifndef CONFIG_MINIMAL_MEMORY_USAGE
+//     #define MAX_RECVBUF_SZ (9100)
+//#else
+       #define MAX_RECVBUF_SZ (4000) // about 4K
+//#endif
+
+#define RX_MPDU_QUEUE                          0
+#define RX_CMD_QUEUE                           1
+#define RX_MAX_QUEUE                           2
+#endif
+
+#define RECV_BULK_IN_ADDR              0x80
+#define RECV_INT_IN_ADDR               0x81
+
+#define PHY_RSSI_SLID_WIN_MAX                          100
+#define PHY_LINKQUALITY_SLID_WIN_MAX           20
+
+struct phy_stat
+{
+       unsigned int phydw0;
+
+       unsigned int phydw1;
+
+       unsigned int phydw2;
+
+       unsigned int phydw3;
+
+       unsigned int phydw4;
+
+       unsigned int phydw5;
+
+       unsigned int phydw6;
+
+       unsigned int phydw7;
+};
+
+typedef struct _Phy_OFDM_Rx_Status_Report_8192cd
+{
+       unsigned char   trsw_gain_X[4];
+       unsigned char   pwdb_all;
+       unsigned char   cfosho_X[4];
+       unsigned char   cfotail_X[4];
+       unsigned char   rxevm_X[2];
+       unsigned char   rxsnr_X[4];
+       unsigned char   pdsnr_X[2];
+       unsigned char   csi_current_X[2];
+       unsigned char   csi_target_X[2];
+       unsigned char   sigevm;
+       unsigned char   max_ex_pwr;
+//#ifdef RTL8192SE
+#ifdef CONFIG_LITTLE_ENDIAN
+       unsigned char ex_intf_flg:1;
+       unsigned char sgi_en:1;
+       unsigned char rxsc:2;
+       //unsigned char rsvd:4;
+       unsigned char idle_long:1;
+       unsigned char r_ant_train_en:1;
+       unsigned char ANTSELB:1;
+       unsigned char ANTSEL:1;
+#else  // _BIG_ENDIAN_
+       //unsigned char rsvd:4;
+       unsigned char ANTSEL:1;
+       unsigned char ANTSELB:1;
+       unsigned char r_ant_train_en:1;
+       unsigned char idle_long:1;
+       unsigned char rxsc:2;
+       unsigned char sgi_en:1;
+       unsigned char ex_intf_flg:1;
+#endif
+//#else        // RTL8190, RTL8192E
+//     unsigned char   sgi_en;
+//     unsigned char   rxsc_sgien_exflg;
+//#endif
+}__attribute__ ((packed)) PHY_STS_OFDM_8192CD_T,PHY_RX_DRIVER_INFO_8192CD;
+
+typedef struct _Phy_CCK_Rx_Status_Report_8192cd
+{
+       /* For CCK rate descriptor. This is a signed 8:1 variable. LSB bit presend
+               0.5. And MSB 7 bts presend a signed value. Range from -64~+63.5. */
+       u8      adc_pwdb_X[4];
+       u8      SQ_rpt;
+       u8      cck_agc_rpt;
+} PHY_STS_CCK_8192CD_T;
+
+// Rx smooth factor
+#define        Rx_Smooth_Factor (20)
+
+#ifdef CONFIG_USB_HCI
+typedef struct _INTERRUPT_MSG_FORMAT_EX{
+       unsigned int C2H_MSG0;
+       unsigned int C2H_MSG1;
+       unsigned int C2H_MSG2;
+       unsigned int C2H_MSG3;
+       unsigned int HISR; // from HISR Reg0x124, read to clear
+       unsigned int HISRE;// from HISRE Reg0x12c, read to clear
+       unsigned int  MSG_EX;
+}INTERRUPT_MSG_FORMAT_EX,*PINTERRUPT_MSG_FORMAT_EX;
+
+void rtl8192du_init_recvbuf(_adapter *padapter, struct recv_buf *precvbuf);
+int    rtl8192du_init_recv_priv(_adapter * padapter);
+void   rtl8192du_free_recv_priv(_adapter * padapter);
+#endif
+
+#ifdef CONFIG_PCI_HCI
+int    rtl8192de_init_recv_priv(_adapter * padapter);
+void rtl8192de_free_recv_priv(_adapter * padapter);
+#endif
+
+void rtl8192d_translate_rx_signal_stuff(union recv_frame *precvframe, struct phy_stat *pphy_info);
+void rtl8192d_query_rx_desc_status(union recv_frame *precvframe, struct recv_stat *pdesc);
+
+#endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtl8192d_rf.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtl8192d_rf.h
new file mode 100644 (file)
index 0000000..1aba229
--- /dev/null
@@ -0,0 +1,96 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+/******************************************************************************
+ *
+ *
+ * Module:     rtl8192d_rf.h   ( Header File)
+ *
+ * Note:       Collect every HAL RF type exter API or constant.
+ *
+ * Function:
+ *
+ * Export:
+ *
+ * Abbrev:
+ *
+ * History:
+ * Data                        Who             Remark
+ *
+ * 09/25/2008  MHC             Create initial version.
+ *
+ *
+******************************************************************************/
+#ifndef _RTL8192D_RF_H_
+#define _RTL8192D_RF_H_
+/* Check to see if the file has been included already.  */
+
+
+/*--------------------------Define Parameters-------------------------------*/
+
+//
+// For RF 6052 Series
+//
+#define                RF6052_MAX_TX_PWR                       0x3F
+#define                RF6052_MAX_REG                          0x3F
+#define                RF6052_MAX_PATH                         2
+/*--------------------------Define Parameters-------------------------------*/
+
+
+/*------------------------------Define structure----------------------------*/
+
+/*------------------------------Define structure----------------------------*/
+
+
+/*------------------------Export global variable----------------------------*/
+/*------------------------Export global variable----------------------------*/
+
+/*------------------------Export Marco Definition---------------------------*/
+
+/*------------------------Export Marco Definition---------------------------*/
+
+
+/*--------------------------Exported Function prototype---------------------*/
+
+//
+// RF RL6052 Series API
+//
+void           rtl8192d_RF_ChangeTxPath(       IN      PADAPTER        Adapter,
+                                                                               IN      u16             DataRate);
+void           rtl8192d_PHY_RF6052SetBandwidth(
+                                                                               IN      PADAPTER                                Adapter,
+                                                                               IN      HT_CHANNEL_WIDTH                Bandwidth);
+VOID   rtl8192d_PHY_RF6052SetCckTxPower(
+                                                                               IN      PADAPTER        Adapter,
+                                                                               IN      u8*             pPowerlevel);
+VOID   rtl8192d_PHY_RF6052SetOFDMTxPower(
+                                                                               IN      PADAPTER        Adapter,
+                                                                               IN      u8*             pPowerLevel,
+                                                                               IN      u8              Channel);
+int    PHY_RF6052_Config8192D( IN      PADAPTER                Adapter );
+
+BOOLEAN        rtl8192d_PHY_EnableAnotherPHY(IN        PADAPTER Adapter, IN    BOOLEAN  bMac0);
+
+void   rtl8192d_PHY_PowerDownAnotherPHY(IN PADAPTER Adapter, IN BOOLEAN bMac0);
+
+
+/*--------------------------Exported Function prototype---------------------*/
+
+
+#endif/* End of HalRf.h */
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtl8192d_spec.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtl8192d_spec.h
new file mode 100644 (file)
index 0000000..d2d3e89
--- /dev/null
@@ -0,0 +1,1840 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+
+#ifndef __RTL8192D_SPEC_H__
+#define __RTL8192D_SPEC_H__
+
+#include <drv_conf.h>
+
+#ifndef BIT
+#define BIT(x)         (1 << (x))
+#endif
+
+#define BIT0           0x00000001
+#define BIT1           0x00000002
+#define BIT2           0x00000004
+#define BIT3           0x00000008
+#define BIT4           0x00000010
+#define BIT5           0x00000020
+#define BIT6           0x00000040
+#define BIT7           0x00000080
+#define BIT8           0x00000100
+#define BIT9           0x00000200
+#define BIT10  0x00000400
+#define BIT11  0x00000800
+#define BIT12  0x00001000
+#define BIT13  0x00002000
+#define BIT14  0x00004000
+#define BIT15  0x00008000
+#define BIT16  0x00010000
+#define BIT17  0x00020000
+#define BIT18  0x00040000
+#define BIT19  0x00080000
+#define BIT20  0x00100000
+#define BIT21  0x00200000
+#define BIT22  0x00400000
+#define BIT23  0x00800000
+#define BIT24  0x01000000
+#define BIT25  0x02000000
+#define BIT26  0x04000000
+#define BIT27  0x08000000
+#define BIT28  0x10000000
+#define BIT29  0x20000000
+#define BIT30  0x40000000
+#define BIT31  0x80000000
+
+
+//============================================================
+//       8192D Regsiter offset definition
+//============================================================
+
+
+//============================================================
+//
+//============================================================
+
+//-----------------------------------------------------
+//
+//     0x0000h ~ 0x00FFh       System Configuration
+//
+//-----------------------------------------------------
+#define REG_SYS_ISO_CTRL                       0x0000
+#define REG_SYS_FUNC_EN                        0x0002
+#define REG_APS_FSMCO                          0x0004
+#define REG_SYS_CLKR                           0x0008
+#define REG_9346CR                                     0x000A
+#define REG_EE_VPD                                     0x000C
+#define REG_AFE_MISC                           0x0010
+#define REG_SPS0_CTRL                          0x0011
+#define REG_POWER_OFF_IN_PROCESS 0x0017
+#define REG_SPS_OCP_CFG                        0x0018
+#define REG_RSV_CTRL                           0x001C
+#define REG_RF_CTRL                                    0x001F
+#define REG_LDOA15_CTRL                        0x0020
+#define REG_LDOV12D_CTRL                       0x0021
+#define REG_LDOHCI12_CTRL                      0x0022
+#define REG_LPLDO_CTRL                         0x0023
+#define REG_AFE_XTAL_CTRL                      0x0024
+#define REG_AFE_PLL_CTRL                       0x0028
+#define REG_MAC_PHY_CTRL                       0x002c //for 92d, DMDP,SMSP,DMSP contrl
+#define REG_EFUSE_CTRL                         0x0030
+#define REG_EFUSE_TEST                         0x0034
+#define REG_PWR_DATA                           0x0038
+#define REG_CAL_TIMER                          0x003C
+#define REG_ACLK_MON                           0x003E
+#define REG_GPIO_MUXCFG                        0x0040
+//#define REG_GPIO_MUXCFG                              0x0041
+#define REG_GPIO_IO_SEL                                0x0042
+#define REG_MAC_PINMUX_CFG             0x0043
+#define REG_GPIO_PIN_CTRL                      0x0044
+#define REG_GPIO_INTM                          0x0048
+#define REG_LEDCFG0                                    0x004C
+#define REG_LEDCFG1                                    0x004D
+#define REG_LEDCFG2                                    0x004E
+#define REG_LEDCFG3                                    0x004F
+#define REG_FSIMR                                      0x0050
+#define REG_FSISR                                      0x0054
+
+#define REG_MCUFWDL                            0x0080
+#ifdef CONFIG_WOWLAN
+#define REG_WOWLAN_REASON                      0x00FC
+#endif // CONFIG_WOWLAN
+#define REG_HMEBOX_EXT_0                       0x0088
+#define REG_HMEBOX_EXT_1                       0x008A
+#define REG_HMEBOX_EXT_2                       0x008C
+#define REG_HMEBOX_EXT_3                       0x008E
+
+#define REG_BIST_SCAN                          0x00D0
+#define REG_BIST_RPT                           0x00D4
+#define REG_BIST_ROM_RPT                       0x00D8
+#define REG_USB_SIE_INTF                       0x00E0
+#define REG_PCIE_MIO_INTF                      0x00E4
+#define REG_PCIE_MIO_INTD                      0x00E8
+#define REG_HPON_FSM                           0x00EC
+#define REG_SYS_CFG                                    0x00F0
+#define REG_MAC_PHY_CTRL_NORMAL        0x00f8
+
+#define  REG_MAC0                                      0x0081
+#define  REG_MAC1                                      0x0053
+#define  FW_MAC0_ready                         0x18
+#define  FW_MAC1_ready                         0x1A
+#define  MAC0_ON                                       BIT7
+#define  MAC1_ON                                       BIT0
+#define  mac0_ready                                    BIT0
+#define  mac1_ready                                    BIT0
+
+
+//-----------------------------------------------------
+//
+//     0x0100h ~ 0x01FFh       MACTOP General Configuration
+//
+//-----------------------------------------------------
+#define REG_CR                                         0x0100
+#define REG_PBP                                                0x0104
+#define REG_TRXDMA_CTRL                        0x010C
+#define REG_TRXFF_BNDY                         0x0114
+#define REG_TRXFF_STATUS                       0x0118
+#define REG_RXFF_PTR                           0x011C
+#define REG_HIMR                                       0x0120
+#define REG_HISR                                       0x0124
+#define REG_HIMRE                                      0x0128
+#define REG_HISRE                                      0x012C
+#define REG_CPWM                                       0x012F
+#define REG_FWIMR                                      0x0130
+#define REG_FWISR                                      0x0134
+#define REG_FTIMR                                      0x0138
+#define REG_PKTBUF_DBG_CTRL            0x0140
+#define REG_PKTBUF_DBG_DATA_L          0x0144
+#define REG_PKTBUF_DBG_DATA_H  0x0148
+
+#define REG_TC0_CTRL                           0x0150
+#define REG_TC1_CTRL                           0x0154
+#define REG_TC2_CTRL                           0x0158
+#define REG_TC3_CTRL                           0x015C
+#define REG_TC4_CTRL                           0x0160
+#define REG_TCUNIT_BASE                        0x0164
+#define REG_MBIST_START                        0x0174
+#define REG_MBIST_DONE                         0x0178
+#define REG_MBIST_FAIL                         0x017C
+#define REG_C2HEVT_MSG_NORMAL  0x01A0
+#define REG_C2HEVT_CLEAR                       0x01AF
+#define REG_C2HEVT_MSG_TEST            0x01B8
+#define REG_MCUTST_1                           0x01c0
+#define REG_FMETHR                                     0x01C8
+#define REG_HMETFR                                     0x01CC
+#define REG_HMEBOX_0                           0x01D0
+#define REG_HMEBOX_1                           0x01D4
+#define REG_HMEBOX_2                           0x01D8
+#define REG_HMEBOX_3                           0x01DC
+
+#define REG_LLT_INIT                           0x01E0
+#define REG_BB_ACCEESS_CTRL            0x01E8
+#define REG_BB_ACCESS_DATA             0x01EC
+
+
+//-----------------------------------------------------
+//
+//     0x0200h ~ 0x027Fh       TXDMA Configuration
+//
+//-----------------------------------------------------
+#define REG_RQPN                                       0x0200
+#define REG_FIFOPAGE                           0x0204
+#define REG_TDECTRL                                    0x0208
+#define REG_TXDMA_OFFSET_CHK           0x020C
+#define REG_TXDMA_STATUS                       0x0210
+#define REG_RQPN_NPQ                           0x0214
+
+//-----------------------------------------------------
+//
+//     0x0280h ~ 0x02FFh       RXDMA Configuration
+//
+//-----------------------------------------------------
+#define REG_RXDMA_AGG_PG_TH            0x0280
+#define REG_RXPKT_NUM                          0x0284
+#define REG_RXDMA_STATUS                       0x0288
+
+
+//-----------------------------------------------------
+//
+//     0x0300h ~ 0x03FFh       PCIe
+//
+//-----------------------------------------------------
+#define        REG_PCIE_CTRL_REG                       0x0300
+#define        REG_INT_MIG                             0x0304  // Interrupt Migration
+#define        REG_BCNQ_DESA                           0x0308  // TX Beacon Descriptor Address
+#define        REG_HQ_DESA                             0x0310  // TX High Queue Descriptor Address
+#define        REG_MGQ_DESA                            0x0318  // TX Manage Queue Descriptor Address
+#define        REG_VOQ_DESA                            0x0320  // TX VO Queue Descriptor Address
+#define        REG_VIQ_DESA                            0x0328  // TX VI Queue Descriptor Address
+#define        REG_BEQ_DESA                            0x0330  // TX BE Queue Descriptor Address
+#define        REG_BKQ_DESA                            0x0338  // TX BK Queue Descriptor Address
+#define        REG_RX_DESA                             0x0340  // RX Queue     Descriptor Address
+#define        REG_DBI                                 0x0348  // Backdoor REG for Access Configuration
+//sherry added for DBI Read/Write  20091126
+#define        REG_DBI_WDATA                           0x0348  // Backdoor REG for Access Configuration
+#define        REG_DBI_RDATA                           0x034C //Backdoor REG for Access Configuration
+#define        REG_DBI_CTRL                            0x0350  //Backdoor REG for Access Configuration
+#define        REG_DBI_FLAG                            0x0352 //Backdoor REG for Access Configuration#define   REG_MDIO                                        0x0354  // MDIO for Access PCIE PHY
+#define        REG_MDIO                                        0x0354  // MDIO for Access PCIE PHY
+#define        REG_DBG_SEL                             0x0360  // Debug Selection Register
+#define        REG_PCIE_HRPWM                  0x0361  //PCIe RPWM
+#define        REG_PCIE_HCPWM                  0x0363  //PCIe CPWM
+#define        REG_UART_CTRL                           0x0364  // UART Control
+#define        REG_UART_TX_DESA                        0x0370  // UART TX Descriptor Address
+#define        REG_UART_RX_DESA                        0x0378  // UART Rx Descriptor Address
+
+
+// spec version 11
+//-----------------------------------------------------
+//
+//     0x0400h ~ 0x047Fh       Protocol Configuration
+//
+//-----------------------------------------------------
+#define REG_VOQ_INFORMATION                    0x0400
+#define REG_VIQ_INFORMATION                    0x0404
+#define REG_BEQ_INFORMATION                    0x0408
+#define REG_BKQ_INFORMATION                    0x040C
+#define REG_MGQ_INFORMATION                    0x0410
+#define REG_HGQ_INFORMATION                    0x0414
+#define REG_BCNQ_INFORMATION                   0x0418
+
+
+#define REG_CPU_MGQ_INFORMATION                0x041C
+#define REG_FWHW_TXQ_CTRL                              0x0420
+#define REG_HWSEQ_CTRL                                 0x0423
+#define REG_TXPKTBUF_BCNQ_BDNY         0x0424
+#define REG_TXPKTBUF_MGQ_BDNY          0x0425
+#define REG_LIFETIME_EN                                0x0426
+#define REG_MULTI_BCNQ_OFFSET                  0x0427
+#define REG_SPEC_SIFS                                  0x0428
+#define REG_RL                                                 0x042A
+#define REG_DARFRC                                             0x0430
+#define REG_RARFRC                                             0x0438
+#define REG_RRSR                                               0x0440
+#define REG_ARFR0                                              0x0444
+#define REG_ARFR1                                              0x0448
+#define REG_ARFR2                                              0x044C
+#define REG_ARFR3                                              0x0450
+#define REG_AGGLEN_LMT                                 0x0458
+#define REG_AMPDU_MIN_SPACE                    0x045C
+#define REG_TXPKTBUF_WMAC_LBK_BF_HD    0x045D
+#define REG_FAST_EDCA_CTRL                             0x0460
+#define REG_RD_RESP_PKT_TH                             0x0463
+#define REG_INIRTS_RATE_SEL                    0x0480
+#define REG_INIDATA_RATE_SEL                   0x0484
+
+//#define REG_FW_TSF_SYNC_CNT                          0x04A0
+#define REG_FW_RESET_TSF_CNT_1                         0x05FC
+#define REG_FW_RESET_TSF_CNT_0                         0x05FD
+#define REG_FW_BCN_DIS_CNT                             0x05FE
+
+#define REG_POWER_STATUS                               0x04A4
+#define REG_POWER_STAGE1                               0x04B4
+#define REG_POWER_STAGE2                               0x04B8
+#define REG_PKT_VO_VI_LIFE_TIME                        0x04C0
+#define REG_PKT_BE_BK_LIFE_TIME                        0x04C2
+#define REG_STBC_SETTING                               0x04C4
+#define REG_PROT_MODE_CTRL                     0x04C8
+#define REG_MAX_AGGR_NUM                               0x04CA
+#define REG_RTS_MAX_AGGR_NUM                   0x04CB
+#define REG_BAR_MODE_CTRL                              0x04CC
+#define REG_RA_TRY_RATE_AGG_LMT                0x04CF
+#define REG_EARLY_MODE_CONTROL         0x04D0
+#define REG_NQOS_SEQ                                   0x04DC
+#define REG_QOS_SEQ                                    0x04DE
+#define REG_NEED_CPU_HANDLE                    0x04E0
+#define REG_PKT_LOSE_RPT                               0x04E1
+#define REG_PTCL_ERR_STATUS                    0x04E2
+#define REG_DUMMY                                              0x04FC
+
+
+
+//-----------------------------------------------------
+//
+//     0x0500h ~ 0x05FFh       EDCA Configuration
+//
+//-----------------------------------------------------
+#define REG_EDCA_VO_PARAM                      0x0500
+#define REG_EDCA_VI_PARAM                      0x0504
+#define REG_EDCA_BE_PARAM                      0x0508
+#define REG_EDCA_BK_PARAM                      0x050C
+#define REG_BCNTCFG                                    0x0510
+#define REG_PIFS                                               0x0512
+#define REG_RDG_PIFS                           0x0513
+#define REG_SIFS_CTX                           0x0514
+#define REG_SIFS_TRX                           0x0516
+#define REG_TSFTR_SYN_OFFSET           0x0518
+#define REG_AGGR_BREAK_TIME            0x051A
+#define REG_SLOT                                       0x051B
+#define REG_TX_PTCL_CTRL                       0x0520
+#define REG_TXPAUSE                                    0x0522
+#define REG_DIS_TXREQ_CLR                      0x0523
+#define REG_RD_CTRL                                    0x0524
+#define REG_TBTT_PROHIBIT                      0x0540
+#define REG_RD_NAV_NXT                         0x0544
+#define REG_NAV_PROT_LEN                       0x0546
+#define REG_BCN_CTRL                           0x0550
+#define REG_BCN_CTRL_1                         0x0551
+#define REG_MBID_NUM                           0x0552
+#define REG_DUAL_TSF_RST                       0x0553
+#define REG_BCN_INTERVAL                       0x0554  // The same as REG_MBSSID_BCN_SPACE
+#define REG_MBSSID_BCN_SPACE           0x0554
+#define REG_DRVERLYINT                         0x0558
+#define REG_BCNDMATIM                          0x0559
+#define REG_ATIMWND                            0x055A
+#define REG_USTIME_TSF                         0x055C
+#define REG_BCN_MAX_ERR                        0x055D
+#define REG_RXTSF_OFFSET_CCK           0x055E
+#define REG_RXTSF_OFFSET_OFDM          0x055F
+#define REG_TSFTR                                      0x0560
+#define REG_TSFTR1                                     0x0568
+#define REG_INIT_TSFTR                         0x0564
+#define REG_ATIMWND_1                          0x0570
+#define REG_PSTIMER                                    0x0580
+#define REG_TIMER0                                     0x0584
+#define REG_TIMER1                                     0x0588
+#define REG_ACMHWCTRL                          0x05C0
+#define REG_ACMRSTCTRL                         0x05C1
+#define REG_ACMAVG                                     0x05C2
+#define REG_VO_ADMTIME                         0x05C4
+#define REG_VI_ADMTIME                         0x05C6
+#define REG_BE_ADMTIME                         0x05C8
+#define REG_EDCA_RANDOM_GEN            0x05CC
+#define REG_SCH_TXCMD                          0x05D0
+
+#define REG_DMC                                                0x05F0  //Dual MAC Co-Existence Register
+
+
+//-----------------------------------------------------
+//
+//     0x0600h ~ 0x07FFh       WMAC Configuration
+//
+//-----------------------------------------------------
+#define REG_APSD_CTRL                          0x0600
+#define REG_BWOPMODE                           0x0603
+#define REG_TCR                                                0x0604
+#define REG_RCR                                                0x0608
+#define REG_RX_PKT_LIMIT                       0x060C
+#define REG_RX_DLK_TIME                        0x060D
+#define REG_RX_DRVINFO_SZ                      0x060F
+
+#define REG_MACID                                      0x0610
+#define REG_BSSID                                      0x0618
+#define REG_MAR                                                0x0620
+#define REG_MBIDCAMCFG                         0x0628
+
+#define REG_USTIME_EDCA                        0x0638
+#define REG_MAC_SPEC_SIFS                      0x063A
+#define REG_RESP_SIFS_CCK                      0x063C
+#define REG_RESP_SIFS_OFDM                     0x063E
+#define REG_ACKTO                                      0x0640
+#define REG_CTS2TO                                     0x0641
+#define REG_EIFS                                               0x0642
+
+
+//WMA, BA, CCX
+#define REG_NAV_CTRL                           0x0650
+#define REG_BACAMCMD                           0x0654
+#define REG_BACAMCONTENT                       0x0658
+#define REG_LBDLY                                      0x0660
+#define REG_FWDLY                                      0x0661
+#define REG_RXERR_RPT                          0x0664
+#define REG_WMAC_TRXPTCL_CTL           0x0668
+
+
+// Security
+#define REG_CAMCMD                                     0x0670
+#define REG_CAMWRITE                           0x0674
+#define REG_CAMREAD                            0x0678
+#define REG_CAMDBG                                     0x067C
+#define REG_SECCFG                                     0x0680
+
+// Power
+#define REG_WOW_CTRL                           0x0690
+#define REG_PSSTATUS                           0x0691
+#define REG_PS_RX_INFO                         0x0692
+#define REG_LPNAV_CTRL                         0x0694
+#define REG_WKFMCAM_CMD                        0x0698
+#define REG_WKFMCAM_RWD                        0x069C
+#define REG_RXFLTMAP0                          0x06A0
+#define REG_RXFLTMAP1                          0x06A2
+#define REG_RXFLTMAP2                          0x06A4
+#define REG_BCN_PSR_RPT                        0x06A8
+#define REG_CALB32K_CTRL                       0x06AC
+#define REG_PKT_MON_CTRL                       0x06B4
+#define REG_BT_COEX_TABLE                      0x06C0
+#define REG_WMAC_RESP_TXINFO           0x06D8
+
+#define REG_MACID1                                     0x0700
+#define REG_BSSID1                                     0x0708
+
+//-----------------------------------------------------
+//
+//     0xFE00h ~ 0xFE55h       USB Configuration
+//
+//-----------------------------------------------------
+#define REG_USB_INFO                           0xFE17
+#define REG_USB_SPECIAL_OPTION 0xFE55
+#define REG_USB_DMA_AGG_TO             0xFE5B
+#define REG_USB_AGG_TO                         0xFE5C
+#define REG_USB_AGG_TH                         0xFE5D
+
+// for 92DU high_Queue low_Queue Normal_Queue select
+#define REG_USB_High_NORMAL_Queue_Select_MAC0  0xFE44
+//#define REG_USB_LOW_Queue_Select_MAC0       0xFE45
+#define REG_USB_High_NORMAL_Queue_Select_MAC1  0xFE47
+//#define REG_USB_LOW_Queue_Select_MAC1       0xFE48
+
+// For test chip
+#define REG_TEST_USB_TXQS                      0xFE48
+#define REG_TEST_SIE_VID                       0xFE60          // 0xFE60~0xFE61
+#define REG_TEST_SIE_PID                       0xFE62          // 0xFE62~0xFE63
+#define REG_TEST_SIE_OPTIONAL          0xFE64
+#define REG_TEST_SIE_CHIRP_K           0xFE65
+#define REG_TEST_SIE_PHY                       0xFE66          // 0xFE66~0xFE6B
+#define REG_TEST_SIE_MAC_ADDR          0xFE70          // 0xFE70~0xFE75
+#define REG_TEST_SIE_STRING            0xFE80          // 0xFE80~0xFEB9
+
+
+// For normal chip
+#define REG_NORMAL_SIE_VID                     0xFE60          // 0xFE60~0xFE61
+#define REG_NORMAL_SIE_PID                     0xFE62          // 0xFE62~0xFE63
+#define REG_NORMAL_SIE_OPTIONAL        0xFE64
+#define REG_NORMAL_SIE_EP                      0xFE65          // 0xFE65~0xFE67
+#define REG_NORMAL_SIE_PHY             0xFE68          // 0xFE68~0xFE6B
+#define REG_NORMAL_SIE_MAC_ADDR        0xFE70          // 0xFE70~0xFE75
+#define REG_NORMAL_SIE_STRING          0xFE80          // 0xFE80~0xFEDF
+
+
+//-----------------------------------------------------
+//
+//     Redifine 8192C register definition for compatibility
+//
+//-----------------------------------------------------
+
+// TODO: use these definition when using REG_xxx naming rule.
+// NOTE: DO NOT Remove these definition. Use later.
+
+#define        SYS_ISO_CTRL                            REG_SYS_ISO_CTRL        // System Isolation Interface Control.
+#define        SYS_FUNC_EN                             REG_SYS_FUNC_EN         // System Function Enable.
+#define        SYS_CLK                                         REG_SYS_CLKR
+#define        CR9346                                          REG_9346CR                      // 93C46/93C56 Command Register.
+#define        EFUSE_CTRL                                      REG_EFUSE_CTRL          // E-Fuse Control.
+#define        EFUSE_TEST                                      REG_EFUSE_TEST          // E-Fuse Test.
+#define        MSR                                                     (REG_CR + 2)            // Media Status register
+#define        ISR                                                     REG_HISR
+#define        TSFR                                            REG_TSFTR                       // Timing Sync Function Timer Register.
+
+#define        MACIDR0                                 REG_MACID                       // MAC ID Register, Offset 0x0050-0x0053
+#define        MACIDR4                                 (REG_MACID + 4)         // MAC ID Register, Offset 0x0054-0x0055
+
+#define        PBP                                                     REG_PBP
+
+// Redifine MACID register, to compatible prior ICs.
+#define        IDR0                                            MACIDR0
+#define        IDR4                                            MACIDR4
+
+
+//
+// 9. Security Control Registers       (Offset: )
+//
+#define        RWCAM                                           REG_CAMCMD              //IN 8190 Data Sheet is called CAMcmd
+#define        WCAMI                                           REG_CAMWRITE    // Software write CAM input content
+#define        RCAMO                                           REG_CAMREAD             // Software read/write CAM config
+#define        CAMDBG                                          REG_CAMDBG
+#define        SECR                                            REG_SECCFG              //Security Configuration Register
+
+// Unused register
+#define        UnusedRegister                          0x1BF
+#define        DCAM                                            UnusedRegister
+#define        PSR                                                     UnusedRegister
+#define        BBAddr                                          UnusedRegister
+#define        PhyDataR                                        UnusedRegister
+
+#define        InvalidBBRFValue                        0x12345678
+
+// Min Spacing related settings.
+#define        MAX_MSS_DENSITY_2T                      0x13
+#define        MAX_MSS_DENSITY_1T                      0x0A
+
+//----------------------------------------------------------------------------
+//       8192C Cmd9346CR bits                                  (Offset 0xA, 16bit)
+//----------------------------------------------------------------------------
+#define        CmdEEPROM_En                            BIT5     // EEPROM enable when set 1
+#define        CmdEERPOMSEL                            BIT4    // System EEPROM select, 0: boot from E-FUSE, 1: The EEPROM used is 9346
+#define        Cmd9346CR_9356SEL                       BIT4
+#define        AutoLoadEEPROM                  (CmdEEPROM_En|CmdEERPOMSEL)
+#define        AutoLoadEFUSE                           CmdEEPROM_En
+
+//       8192C GPIO MUX Configuration Register (offset 0x40, 4 byte)
+//----------------------------------------------------------------------------
+#define        GPIOSEL_GPIO                            0
+#define        GPIOSEL_ENBT                            BIT5
+
+//----------------------------------------------------------------------------
+//       8192C GPIO PIN Control Register (offset 0x44, 4 byte)
+//----------------------------------------------------------------------------
+#define        GPIO_IN                                         REG_GPIO_PIN_CTRL               // GPIO pins input value
+#define        GPIO_OUT                                        (REG_GPIO_PIN_CTRL+1)   // GPIO pins output value
+#define        GPIO_IO_SEL                             (REG_GPIO_PIN_CTRL+2)   // GPIO pins output enable when a bit is set to "1"; otherwise, input is configured.
+#define        GPIO_MOD                                        (REG_GPIO_PIN_CTRL+3)
+
+
+//----------------------------------------------------------------------------
+//       8192C (MSR) Media Status Register     (Offset 0x4C, 8 bits)
+//----------------------------------------------------------------------------
+/*
+Network Type
+00: No link
+01: Link in ad hoc network
+10: Link in infrastructure network
+11: AP mode
+Default: 00b.
+*/
+#define        MSR_NOLINK                                      0x00
+#define        MSR_ADHOC                                       0x01
+#define        MSR_INFRA                                       0x02
+#define        MSR_AP                                          0x03
+
+//
+// 6. Adaptive Control Registers  (Offset: 0x0160 - 0x01CF)
+//
+//----------------------------------------------------------------------------
+//       8192C Response Rate Set Register      (offset 0x181, 24bits)
+//----------------------------------------------------------------------------
+#define        RRSR_RSC_OFFSET                 21
+#define        RRSR_SHORT_OFFSET                       23
+#define        RRSR_RSC_BW_40M                 0x600000
+#define        RRSR_RSC_UPSUBCHNL              0x400000
+#define        RRSR_RSC_LOWSUBCHNL             0x200000
+#define        RRSR_SHORT                                      0x800000
+#define        RRSR_1M                                 BIT0
+#define        RRSR_2M                                 BIT1
+#define        RRSR_5_5M                                       BIT2
+#define        RRSR_11M                                        BIT3
+#define        RRSR_6M                                 BIT4
+#define        RRSR_9M                                 BIT5
+#define        RRSR_12M                                        BIT6
+#define        RRSR_18M                                        BIT7
+#define        RRSR_24M                                        BIT8
+#define        RRSR_36M                                        BIT9
+#define        RRSR_48M                                        BIT10
+#define        RRSR_54M                                        BIT11
+#define        RRSR_MCS0                                       BIT12
+#define        RRSR_MCS1                                       BIT13
+#define        RRSR_MCS2                                       BIT14
+#define        RRSR_MCS3                                       BIT15
+#define        RRSR_MCS4                                       BIT16
+#define        RRSR_MCS5                                       BIT17
+#define        RRSR_MCS6                                       BIT18
+#define        RRSR_MCS7                                       BIT19
+#define        BRSR_AckShortPmb                        BIT23
+// CCK ACK: use Short Preamble or not
+
+
+//----------------------------------------------------------------------------
+//       8192C Rate Definition
+//----------------------------------------------------------------------------
+//CCK
+#define        RATR_1M                                 0x00000001
+#define        RATR_2M                                 0x00000002
+#define        RATR_55M                                        0x00000004
+#define        RATR_11M                                        0x00000008
+//OFDM
+#define        RATR_6M                                 0x00000010
+#define        RATR_9M                                 0x00000020
+#define        RATR_12M                                        0x00000040
+#define        RATR_18M                                        0x00000080
+#define        RATR_24M                                        0x00000100
+#define        RATR_36M                                        0x00000200
+#define        RATR_48M                                        0x00000400
+#define        RATR_54M                                        0x00000800
+//MCS 1 Spatial Stream
+#define        RATR_MCS0                                       0x00001000
+#define        RATR_MCS1                                       0x00002000
+#define        RATR_MCS2                                       0x00004000
+#define        RATR_MCS3                                       0x00008000
+#define        RATR_MCS4                                       0x00010000
+#define        RATR_MCS5                                       0x00020000
+#define        RATR_MCS6                                       0x00040000
+#define        RATR_MCS7                                       0x00080000
+//MCS 2 Spatial Stream
+#define        RATR_MCS8                                       0x00100000
+#define        RATR_MCS9                                       0x00200000
+#define        RATR_MCS10                                      0x00400000
+#define        RATR_MCS11                                      0x00800000
+#define        RATR_MCS12                                      0x01000000
+#define        RATR_MCS13                                      0x02000000
+#define        RATR_MCS14                                      0x04000000
+#define        RATR_MCS15                                      0x08000000
+
+//----------------------------------------------------------------------------
+//       8192C BW_OPMODE bits                                  (Offset 0x203, 8bit)
+//----------------------------------------------------------------------------
+#define        BW_OPMODE_20MHZ                 BIT2
+#define        BW_OPMODE_5G                            BIT1
+#define        BW_OPMODE_11J                           BIT0
+
+
+//----------------------------------------------------------------------------
+//       8192C CAM Config Setting (offset 0x250, 1 byte)
+//----------------------------------------------------------------------------
+#define        CAM_VALID                                       BIT15
+#define        CAM_NOTVALID                            0x0000
+#define        CAM_USEDK                                       BIT5
+
+#define        CAM_CONTENT_COUNT               8
+
+#define        CAM_NONE                                        0x0
+#define        CAM_WEP40                                       0x01
+#define        CAM_TKIP                                        0x02
+#define        CAM_AES                                 0x04
+#define        CAM_WEP104                              0x05
+#define        CAM_SMS4                                        0x6
+
+
+#define        TOTAL_CAM_ENTRY                 32
+#define        HALF_CAM_ENTRY                  16
+
+#define        CAM_CONFIG_USEDK                        _TRUE
+#define        CAM_CONFIG_NO_USEDK             _FALSE
+
+#define        CAM_WRITE                                       BIT16
+#define        CAM_READ                                        0x00000000
+#define        CAM_POLLINIG                            BIT31
+
+#define        SCR_UseDK                                       0x01
+#define        SCR_TxSecEnable                 0x02
+#define        SCR_RxSecEnable                 0x04
+
+
+//
+// 12. Host Interrupt Status Registers  (Offset: 0x0300 - 0x030F)
+//
+//----------------------------------------------------------------------------
+//       8190 IMR/ISR bits                                             (offset 0xfd,  8bits)
+//----------------------------------------------------------------------------
+#define        IMR8190_DISABLED                        0x0
+// IMR DW0 Bit 0-31
+#define        IMR_BCNDMAINT6                  BIT31           // Beacon DMA Interrupt 6
+#define        IMR_BCNDMAINT5                  BIT30           // Beacon DMA Interrupt 5
+#define        IMR_BCNDMAINT4                  BIT29           // Beacon DMA Interrupt 4
+#define        IMR_BCNDMAINT3                  BIT28           // Beacon DMA Interrupt 3
+#define        IMR_BCNDMAINT2                  BIT27           // Beacon DMA Interrupt 2
+#define        IMR_BCNDMAINT1                  BIT26           // Beacon DMA Interrupt 1
+#define        IMR_BCNDOK8                             BIT25           // Beacon Queue DMA OK Interrup 8
+#define        IMR_BCNDOK7                             BIT24           // Beacon Queue DMA OK Interrup 7
+#define        IMR_BCNDOK6                             BIT23           // Beacon Queue DMA OK Interrup 6
+#define        IMR_BCNDOK5                             BIT22           // Beacon Queue DMA OK Interrup 5
+#define        IMR_BCNDOK4                             BIT21           // Beacon Queue DMA OK Interrup 4
+#define        IMR_BCNDOK3                             BIT20           // Beacon Queue DMA OK Interrup 3
+#define        IMR_BCNDOK2                             BIT19           // Beacon Queue DMA OK Interrup 2
+#define        IMR_BCNDOK1                             BIT18           // Beacon Queue DMA OK Interrup 1
+#define        IMR_TIMEOUT2                            BIT17           // Timeout interrupt 2
+#define        IMR_TIMEOUT1                            BIT16           // Timeout interrupt 1
+#define        IMR_TXFOVW                              BIT15           // Transmit FIFO Overflow
+#define        IMR_PSTIMEOUT                           BIT14           // Power save time out interrupt
+#define        IMR_BcnInt                                      BIT13           // Beacon DMA Interrupt 0
+#define        IMR_RXFOVW                              BIT12           // Receive FIFO Overflow
+#define        IMR_RDU                                 BIT11           // Receive Descriptor Unavailable
+#define        IMR_ATIMEND                             BIT10           // For 92C,ATIM Window End Interrupt
+#define        IMR_BDOK                                        BIT9            // Beacon Queue DMA OK Interrup
+#define        IMR_HIGHDOK                             BIT8            // High Queue DMA OK Interrupt
+#define        IMR_TBDOK                                       BIT7            // Transmit Beacon OK interrup
+#define        IMR_MGNTDOK                             BIT6            // Management Queue DMA OK Interrupt
+#define        IMR_TBDER                                       BIT5            // For 92C,Transmit Beacon Error Interrupt
+#define        IMR_BKDOK                                       BIT4            // AC_BK DMA OK Interrupt
+#define        IMR_BEDOK                                       BIT3            // AC_BE DMA OK Interrupt
+#define        IMR_VIDOK                                       BIT2            // AC_VI DMA OK Interrupt
+#define        IMR_VODOK                                       BIT1            // AC_VO DMA Interrupt
+#define        IMR_ROK                                 BIT0            // Receive DMA OK Interrupt
+
+// 13. Host Interrupt Status Extension Register         (Offset: 0x012C-012Eh)
+#define        IMR_TXERR                                       BIT11
+#define        IMR_RXERR                                       BIT10
+#define        IMR_C2HCMD                              BIT9
+#define        IMR_CPWM                                        BIT8
+//RSVD [2-7]
+#define        IMR_OCPINT                                      BIT1
+#define        IMR_WLANOFF                             BIT0
+
+
+
+//----------------------------------------------------------------------------
+// 8192D EFUSE
+//----------------------------------------------------------------------------
+#define        HWSET_MAX_SIZE                          256
+
+//----------------------------------------------------------------------------
+//       8192C EEPROM/EFUSE share register definition.
+//----------------------------------------------------------------------------
+
+//
+// Default Value for EEPROM or EFUSE!!!
+//
+#define        EEPROM_Default_TSSI                                     0x0
+#define        EEPROM_Default_TxPowerDiff                              0x0
+#define        EEPROM_Default_CrystalCap                               0x0             //92D default 0x0
+#define        EEPROM_Default_BoardType                                0x02 // Default: 2X2, RTL8192CE(QFPN68)
+#define        EEPROM_Default_TxPower                          0x1010
+#define        EEPROM_Default_HT2T_TxPwr                               0x10
+
+#define        EEPROM_Default_LegacyHTTxPowerDiff      0x4
+#define        EEPROM_Default_ThermalMeter                     0x12
+
+#define        EEPROM_Default_AntTxPowerDiff                   0x0
+//#define      EEPROM_Default_TxPwDiff_CrystalCap              0x5
+#define        EEPROM_Default_TxPowerLevel_2G          0x2C
+#define        EEPROM_Default_TxPowerLevel_5G          0x22
+
+#define        EEPROM_Default_HT40_2SDiff                              0x0
+#define        EEPROM_Default_HT20_Diff                                2       // HT20<->40 default Tx Power Index Difference
+#define        EEPROM_Default_LegacyHTTxPowerDiff      0x4     //OFDM Tx Power index diff
+#define        EEPROM_Default_HT40_PwrMaxOffset                0
+#define        EEPROM_Default_HT20_PwrMaxOffset                0
+
+// For debug
+#define        EEPROM_Default_PID                                              0x1234
+#define        EEPROM_Default_VID                                              0x5678
+#define        EEPROM_Default_CustomerID                               0xAB
+#define        EEPROM_Default_SubCustomerID                    0xCD
+#define        EEPROM_Default_Version                                  0
+
+#define        EEPROM_Default_externalPA_C9            0x00
+#define        EEPROM_Default_externalPA_CC            0xFF
+#define        EEPROM_Default_internalPA_SP3T_C9       0xAA
+#define        EEPROM_Default_internalPA_SP3T_CC       0xAF
+#define        EEPROM_Default_internalPA_SPDT_C9       0xAA
+#ifdef CONFIG_PCI_HCI
+#define        EEPROM_Default_internalPA_SPDT_CC       0xA0
+#else
+#define        EEPROM_Default_internalPA_SPDT_CC       0xFA
+#endif
+
+#define        EEPROM_CHANNEL_PLAN_FCC                         0x0
+#define        EEPROM_CHANNEL_PLAN_IC                          0x1
+#define        EEPROM_CHANNEL_PLAN_ETSI                        0x2
+#define        EEPROM_CHANNEL_PLAN_SPAIN                       0x3
+#define        EEPROM_CHANNEL_PLAN_FRANCE                      0x4
+#define        EEPROM_CHANNEL_PLAN_MKK                         0x5
+#define        EEPROM_CHANNEL_PLAN_MKK1                        0x6
+#define        EEPROM_CHANNEL_PLAN_ISRAEL                      0x7
+#define        EEPROM_CHANNEL_PLAN_TELEC                       0x8
+#define        EEPROM_CHANNEL_PLAN_GLOBAL_DOMAIN       0x9
+#define        EEPROM_CHANNEL_PLAN_WORLD_WIDE_13       0xA
+#define        EEPROM_CHANNEL_PLAN_NCC                         0xB
+#define        EEPROM_CHANNEL_PLAN_BY_HW_MASK  0x80
+
+
+#define        EEPROM_CID_DEFAULT                                      0x0
+#define        EEPROM_CID_TOSHIBA                                      0x4
+#define        EEPROM_CID_CCX                                          0x10 // CCX test. By Bruce, 2009-02-25.
+#define        EEPROM_CID_QMI                                          0x0D
+#define        EEPROM_CID_WHQL                                                 0xFE // added by chiyoko for dtm, 20090108
+
+
+#define        RTL8192_EEPROM_ID                                               0x8129
+#define        EEPROM_WAPI_SUPPORT                                     0x78
+
+
+#ifdef CONFIG_PCI_HCI
+#define RT_IBSS_INT_MASKS                              (IMR_BcnInt | IMR_TBDOK | IMR_TBDER)
+#define RT_AC_INT_MASKS                                (IMR_VIDOK | IMR_VODOK | IMR_BEDOK|IMR_BKDOK)
+#define RT_BSS_INT_MASKS                               (RT_IBSS_INT_MASKS)
+
+#define RTL8190_EEPROM_ID                                              0x8129  // 0-1
+#define EEPROM_HPON                                                    0x02 // LDO settings.2-5
+#define EEPROM_CLK                                                             0x06 // Clock settings.6-7
+#define EEPROM_MAC_FUNCTION                                    0x08 // SE Test mode.8
+
+#define EEPROM_VID                                                             0x28 // SE Vendor ID.A-B
+#define EEPROM_DID                                                             0x2A // SE Device ID. C-D
+#define EEPROM_SVID                                                            0x2C // SE Vendor ID.E-F
+#define EEPROM_SMID                                                    0x2E // SE PCI Subsystem ID. 10-11
+
+#define EEPROM_MAC_ADDR                                                0x16 // SEMAC Address. 12-17
+#define EEPROM_MAC_ADDR_MAC0_92D                       0x55
+#define EEPROM_MAC_ADDR_MAC1_92D                       0x5B
+//----------------------------------------------------------------
+// 2.4G band Tx power index setting
+#define EEPROM_CCK_TX_PWR_INX_2G                               0x61
+#define EEPROM_HT40_1S_TX_PWR_INX_2G           0x67
+#define EEPROM_HT40_2S_TX_PWR_INX_DIFF_2G      0x6D
+#define EEPROM_HT20_TX_PWR_INX_DIFF_2G         0x70
+#define EEPROM_OFDM_TX_PWR_INX_DIFF_2G         0x73
+#define EEPROM_HT40_MAX_PWR_OFFSET_2G          0x76
+#define EEPROM_HT20_MAX_PWR_OFFSET_2G          0x79
+
+//5GL channel 32-64
+#define EEPROM_HT40_1S_TX_PWR_INX_5GL          0x7C
+#define EEPROM_HT40_2S_TX_PWR_INX_DIFF_5GL     0x82
+#define EEPROM_HT20_TX_PWR_INX_DIFF_5GL                0x85
+#define EEPROM_OFDM_TX_PWR_INX_DIFF_5GL                0x88
+#define EEPROM_HT40_MAX_PWR_OFFSET_5GL         0x8B
+#define EEPROM_HT20_MAX_PWR_OFFSET_5GL         0x8E
+
+//5GM channel 100-140
+#define EEPROM_HT40_1S_TX_PWR_INX_5GM          0x91
+#define EEPROM_HT40_2S_TX_PWR_INX_DIFF_5GM     0x97
+#define EEPROM_HT20_TX_PWR_INX_DIFF_5GM                0x9A
+#define EEPROM_OFDM_TX_PWR_INX_DIFF_5GM        0x9D
+#define EEPROM_HT40_MAX_PWR_OFFSET_5GM         0xA0
+#define EEPROM_HT20_MAX_PWR_OFFSET_5GM         0xA3
+
+//5GH channel 149-165
+#define EEPROM_HT40_1S_TX_PWR_INX_5GH          0xA6
+#define EEPROM_HT40_2S_TX_PWR_INX_DIFF_5GH     0xAC
+#define EEPROM_HT20_TX_PWR_INX_DIFF_5GH                0xAF
+#define EEPROM_OFDM_TX_PWR_INX_DIFF_5GH                0xB2
+#define EEPROM_HT40_MAX_PWR_OFFSET_5GH         0xB5
+#define EEPROM_HT20_MAX_PWR_OFFSET_5GH         0xB8
+
+#define EEPROM_CHANNEL_PLAN                                    0xBB // Map of supported channels.
+#define EEPROM_IQK_DELTA                                               0xBC
+#define EEPROM_LCK_DELTA                                               0xBC
+#define EEPROM_XTAL_K                                                  0xBD    //[7:5]
+#define EEPROM_TSSI_A_5G                                               0xBE
+#define EEPROM_TSSI_B_5G                                               0xBF
+#define EEPROM_TSSI_AB_5G                                              0xC0
+#define EEPROM_THERMAL_METER                                   0xC3    //[4:0]
+#define EEPROM_PATHDIV                                                 0xC4
+#define EEPROM_RF_OPT1                                                 0xC4
+#define EEPROM_RF_OPT2                                                 0xC5
+#define EEPROM_RF_OPT3                                                 0xC6
+#define EEPROM_RF_OPT4                                                 0xC7
+#define EEPROM_RF_OPT5                                                 0xC8
+#define EEPROM_RF_OPT6                                                 0xC9
+#define EEPROM_VERSION                                                 0xCA
+#define EEPROM_CUSTOMER_ID                                     0xCB
+#define EEPROM_RF_OPT7                                                 0xCC
+
+#define EEPROM_WIDIPAIRING_ADDR                                0xF0
+#define EEPROM_WIDIPAIRING_KEY                         0xF6
+
+#define EEPROM_DEF_PART_NO                                     0x3FD  //Byte
+#define EEPROME_CHIP_VERSION_L                         0x3FF
+#define EEPROME_CHIP_VERSION_H                         0x3FE
+#endif
+
+#ifdef CONFIG_USB_HCI
+#define RTL8190_EEPROM_ID                                              0x8129  // 0-1
+#define EEPROM_HPON                                                    0x02 // LDO settings.2-5
+#define EEPROM_CLK                                                             0x06 // Clock settings.6-7
+#define EEPROM_MAC_FUNCTION                                    0x08 // SE Test mode.8
+
+#define EEPROM_VID                                                             0xC // SE Vendor ID.A-B
+#define EEPROM_PID                                                             0xE // SE Device ID. C-D
+#define EEPROM_ENDPOINT_SETTING                                0x10
+#ifdef CONFIG_WOWLAN
+#define EEPROM_Option_Setting                          0x11
+#endif // CONFIG_WOWLAN
+#define EEPROM_CHIRP_K                                                 0x12    // Changed
+#define EEPROM_USB_PHY                                                 0x13    // Changed
+#define EEPROM_NORMAL_BoardType                                EEPROM_RF_OPT1  //[7:5]
+#define EEPROM_MAC_ADDR                                                0x16 // SEMAC Address. 12-17
+#define EEPROM_STRING                                                  0x1F
+#define EEPROM_SUBCUSTOMER_ID                                  0x59
+
+#define EEPROM_MAC_ADDR_MAC0_92D                       0x19
+#define EEPROM_MAC_ADDR_MAC1_92D                       0x5B
+//----------------------------------------------------------------
+// 2.4G band Tx power index setting
+#define EEPROM_CCK_TX_PWR_INX_2G                               0x61
+#define EEPROM_HT40_1S_TX_PWR_INX_2G           0x67
+#define EEPROM_HT40_2S_TX_PWR_INX_DIFF_2G      0x6D
+#define EEPROM_HT20_TX_PWR_INX_DIFF_2G         0x70
+#define EEPROM_OFDM_TX_PWR_INX_DIFF_2G         0x73
+#define EEPROM_HT40_MAX_PWR_OFFSET_2G          0x76
+#define EEPROM_HT20_MAX_PWR_OFFSET_2G          0x79
+
+//5GL channel 32-64
+#define EEPROM_HT40_1S_TX_PWR_INX_5GL          0x7C
+#define EEPROM_HT40_2S_TX_PWR_INX_DIFF_5GL     0x82
+#define EEPROM_HT20_TX_PWR_INX_DIFF_5GL                0x85
+#define EEPROM_OFDM_TX_PWR_INX_DIFF_5GL                0x88
+#define EEPROM_HT40_MAX_PWR_OFFSET_5GL         0x8B
+#define EEPROM_HT20_MAX_PWR_OFFSET_5GL         0x8E
+
+//5GM channel 100-140
+#define EEPROM_HT40_1S_TX_PWR_INX_5GM          0x91
+#define EEPROM_HT40_2S_TX_PWR_INX_DIFF_5GM     0x97
+#define EEPROM_HT20_TX_PWR_INX_DIFF_5GM                0x9A
+#define EEPROM_OFDM_TX_PWR_INX_DIFF_5GM        0x9D
+#define EEPROM_HT40_MAX_PWR_OFFSET_5GM         0xA0
+#define EEPROM_HT20_MAX_PWR_OFFSET_5GM         0xA3
+
+//5GH channel 149-165
+#define EEPROM_HT40_1S_TX_PWR_INX_5GH          0xA6
+#define EEPROM_HT40_2S_TX_PWR_INX_DIFF_5GH     0xAC
+#define EEPROM_HT20_TX_PWR_INX_DIFF_5GH                0xAF
+#define EEPROM_OFDM_TX_PWR_INX_DIFF_5GH                0xB2
+#define EEPROM_HT40_MAX_PWR_OFFSET_5GH         0xB5
+#define EEPROM_HT20_MAX_PWR_OFFSET_5GH         0xB8
+
+#define EEPROM_CHANNEL_PLAN                                    0xBB // Map of supported channels.
+#define EEPROM_TEST_CHANNEL_PLAN                               0xBB
+#define EEPROM_IQK_DELTA                                               0xBC
+#define EEPROM_LCK_DELTA                                               0xBC
+#define EEPROM_XTAL_K                                                  0xBD    //[7:5]
+#define EEPROM_TSSI_A_5G                                               0xBE
+#define EEPROM_TSSI_B_5G                                               0xBF
+#define EEPROM_TSSI_AB_5G                                              0xC0
+#define EEPROM_THERMAL_METER                                   0xC3    //[4:0]
+#define EEPROM_RF_OPT1                                                 0xC4
+#define EEPROM_RF_OPT2                                                 0xC5
+#define EEPROM_RF_OPT3                                                 0xC6
+#define EEPROM_RF_OPT4                                                 0xC7
+#define EEPROM_RF_OPT5                                                 0xC8
+#define EEPROM_RF_OPT6                                                 0xC9
+#define EEPROM_VERSION                                                 0xCA
+#define EEPROM_CUSTOMER_ID                                     0xCB
+#define EEPROM_RF_OPT7                                                 0xCC
+
+#define EEPROM_DEF_PART_NO                                     0x3FD  //Byte
+#define EEPROME_CHIP_VERSION_L                         0x3FF
+#define EEPROME_CHIP_VERSION_H                         0x3FE
+
+//-------------------------------------------------------------
+//     \14EEPROM content definitions
+//-------------------------------------------------------------
+#define OS_LINK_SPEED_NORMAL_MASK                      BIT3 | BIT2
+#define OS_LINK_SPEED_TEST_MASK                                BIT3 | BIT4
+
+#define BOARD_TYPE_NORMAL_MASK                         0xE0
+#define BOARD_TYPE_TEST_MASK                                   0xF
+
+#define BT_COEXISTENCE_TEST                                    BIT4
+#define BT_COEXISTENCE_NORMAL                                  BIT5
+
+#define BT_CO_SHIFT_TEST                                               4
+#define BT_CO_SHIFT_NORMAL                                     5
+
+#define EP_NUMBER_MASK_TEST                                    0x30    //bit 4:5 0Eh
+#define EP_NUMBER_SHIFT_TEST                                   4
+
+#define USB_PHY_PARA_SIZE_TEST                         6
+#define USB_PHY_PARA_SIZE_NORMAL                               4
+
+//-------------------------------------------------------------
+//     \14EEPROM default value definitions
+//-------------------------------------------------------------
+// Use 0xABCD instead of 0x8192 for debug
+#define        EEPROM_DEF_ID_0                                         0xCD    // Byte 0x00
+#define        EEPROM_DEF_ID_1                                         0xAB    // Byte 0x01
+
+#define EEPROM_DEF_RTK_RSV_A3                                  0x74    // Byte 0x03
+#define EEPROM_DEF_RTK_RSV_A4                                  0x6D    // Byte 0x04
+#define EEPROM_DEF_RTK_RSV_A8                                  0xFF    // Byte 0x08
+
+#define EEPROM_DEF_VID_0                                               0x0A    // Byte 0x0A
+#define EEPROM_DEF_VID_1                                               0x0B
+
+#define EEPROM_DEF_PID_0                                               0x92    // Byte 0x0C
+#define EEPROM_DEF_PID_1                                               0x81
+
+
+#define EEPROM_TEST_DEF_USB_OPT                                0x80    // Byte 0x0E
+#define EEPROM_NORMAL_DEF_USB_OPT                      0x00    // Byte 0x0E
+
+#define EEPROM_DEF_CHIRPK                                              0x15    // Byte 0x0F
+
+#define EEPROM_DEF_USB_PHY_0                                   0x85    // Byte 0x10
+#define EEPROM_DEF_USB_PHY_1                                   0x62    // Byte 0x11
+#define EEPROM_DEF_USB_PHY_2                                   0x9E    // Byte 0x12
+#define EEPROM_DEF_USB_PHY_3                                   0x06    // Byte 0x13
+
+#define EEPROM_DEF_TSSI_A                                              0x09    // Byte 0x78
+#define EEPROM_DEF_TSSI_B                                              0x09    // Byte 0x79
+
+
+#define EEPROM_DEF_THERMAL_METER                               0x12    // Byte 0x7A
+
+
+#define        EEPROM_USB_SN                                                   BIT(0)
+#define        EEPROM_USB_REMOTE_WAKEUP                        BIT(1)
+#define        EEPROM_USB_DEVICE_PWR                           BIT(2)
+#define        EEPROM_EP_NUMBER                                                (BIT(3)|BIT(4))
+
+#if 0
+#define        EEPROM_CHANNEL_PLAN_FCC                                 0x0
+#define        EEPROM_CHANNEL_PLAN_IC                                  0x1
+#define        EEPROM_CHANNEL_PLAN_ETSI                                0x2
+#define        EEPROM_CHANNEL_PLAN_SPAIN                               0x3
+#define        EEPROM_CHANNEL_PLAN_FRANCE                              0x4
+#define        EEPROM_CHANNEL_PLAN_MKK                                 0x5
+#define        EEPROM_CHANNEL_PLAN_MKK1                                0x6
+#define        EEPROM_CHANNEL_PLAN_ISRAEL                              0x7
+#define        EEPROM_CHANNEL_PLAN_TELEC                               0x8
+#define        EEPROM_CHANNEL_PLAN_GLOBAL_DOMAIN               0x9
+#define        EEPROM_CHANNEL_PLAN_WORLD_WIDE_13               0xA
+#define        EEPROM_CHANNEL_PLAN_BY_HW_MASK                  0x80
+
+#define        EEPROM_CID_DEFAULT                                              0x0
+
+#define        EEPROM_CID_WHQL                                                 0xFE // added by chiyoko for dtm, 20090108
+
+
+#define        EEPROM_CID_CCX                                                  0x10 // CCX test. By Bruce, 2009-02-25.
+
+#endif
+#endif
+
+
+/*===================================================================
+=====================================================================
+Here the register defines are for 92C. When the define is as same with 92C,
+we will use the 92C's define for the consistency
+So the following defines for 92C is not entire!!!!!!
+=====================================================================
+=====================================================================*/
+/*
+Based on Datasheet V33---090401
+Register Summary
+Current IOREG MAP
+0x0000h ~ 0x00FFh   System Configuration (256 Bytes)
+0x0100h ~ 0x01FFh   MACTOP General Configuration (256 Bytes)
+0x0200h ~ 0x027Fh   TXDMA Configuration (128 Bytes)
+0x0280h ~ 0x02FFh   RXDMA Configuration (128 Bytes)
+0x0300h ~ 0x03FFh   PCIE EMAC Reserved Region (256 Bytes)
+0x0400h ~ 0x04FFh   Protocol Configuration (256 Bytes)
+0x0500h ~ 0x05FFh   EDCA Configuration (256 Bytes)
+0x0600h ~ 0x07FFh   WMAC Configuration (512 Bytes)
+0x2000h ~ 0x3FFFh   8051 FW Download Region (8196 Bytes)
+*/
+
+//----------------------------------------------------------------------------
+//       8192C (RCR) Receive Configuration Register    (Offset 0x608, 32 bits)
+//----------------------------------------------------------------------------
+#define        RCR_APPFCS                                      BIT31           //WMAC append FCS after pauload
+#define        RCR_APP_MIC                             BIT30           //
+#define        RCR_APP_ICV                             BIT29       //
+#define        RCR_APP_PHYST_RXFF              BIT28       //
+#define        RCR_APP_BA_SSN                  BIT27           //Accept BA SSN
+#define        RCR_ENMBID                                      BIT24           //Enable Multiple BssId.
+#define        RCR_LSIGEN                                      BIT23
+#define        RCR_MFBEN                                       BIT22
+#define        RCR_HTC_LOC_CTRL                        BIT14       //MFC<--HTC=1 MFC-->HTC=0
+#define        RCR_AMF                                 BIT13           //Accept management type frame
+#define        RCR_ACF                                 BIT12           //Accept control type frame
+#define        RCR_ADF                                 BIT11           //Accept data type frame
+#define        RCR_AICV                                        BIT9            //Accept ICV error packet
+#define        RCR_ACRC32                                      BIT8            //Accept CRC32 error packet
+#define        RCR_CBSSID_BCN                  BIT7            //Accept BSSID match packet (Rx beacon, probe rsp)
+#define        RCR_CBSSID_DATA                 BIT6            //Accept BSSID match packet (Data)
+#define        RCR_CBSSID                                      RCR_CBSSID_DATA         //Accept BSSID match packet
+#define        RCR_APWRMGT                             BIT5            //Accept power management packet
+#define        RCR_ADD3                                        BIT4            //Accept address 3 match packet
+#define        RCR_AB                                          BIT3            //Accept broadcast packet
+#define        RCR_AM                                          BIT2            //Accept multicast packet
+#define        RCR_APM                                 BIT1            //Accept physical match packet
+#define        RCR_AAP                                 BIT0            //Accept all unicast packet
+#define        RCR_MXDMA_OFFSET                        8
+#define        RCR_FIFO_OFFSET                 13
+
+
+
+//============================================================================
+//       8192c USB specific Regsiter Offset and Content definition,
+//       2009.08.18, added by vivi. for merge 92c and 92C into one driver
+//============================================================================
+//#define APS_FSMCO                            0x0004  same with 92Ce
+#define RSV_CTRL                                       0x001C
+#define RD_CTRL                                        0x0524
+
+//-----------------------------------------------------
+//
+//     0xFE00h ~ 0xFE55h       USB Configuration
+//
+//-----------------------------------------------------
+#define REG_USB_INFO                           0xFE17
+#define REG_USB_SPECIAL_OPTION 0xFE55
+#define REG_USB_DMA_AGG_TO             0xFE5B
+#define REG_USB_AGG_TO                         0xFE5C
+#define REG_USB_AGG_TH                         0xFE5D
+
+#define REG_USB_VID                                    0xFE60
+#define REG_USB_PID                                    0xFE62
+#define REG_USB_OPTIONAL                       0xFE64
+#define REG_USB_CHIRP_K                        0xFE65
+#define REG_USB_PHY                                    0xFE66
+#define REG_USB_MAC_ADDR                       0xFE70
+
+#define REG_USB_HRPWM                          0xFE58
+#define REG_USB_HCPWM                          0xFE57
+
+#define InvalidBBRFValue                       0x12345678
+
+//============================================================================
+//       8192C Regsiter Bit and Content definition
+//============================================================================
+//-----------------------------------------------------
+//
+//     0x0000h ~ 0x00FFh       System Configuration
+//
+//-----------------------------------------------------
+
+//2 SPS0_CTRL
+#define SW18_FPWM                                      BIT(3)
+
+
+//2 SYS_ISO_CTRL
+#define ISO_MD2PP                                      BIT(0)
+#define ISO_UA2USB                                     BIT(1)
+#define ISO_UD2CORE                                    BIT(2)
+#define ISO_PA2PCIE                                    BIT(3)
+#define ISO_PD2CORE                                    BIT(4)
+#define ISO_IP2MAC                                     BIT(5)
+#define ISO_DIOP                                               BIT(6)
+#define ISO_DIOE                                               BIT(7)
+#define ISO_EB2CORE                                    BIT(8)
+#define ISO_DIOR                                               BIT(9)
+
+#define PWC_EV25V                                      BIT(14)
+#define PWC_EV12V                                      BIT(15)
+
+
+//2 SYS_FUNC_EN
+#define FEN_BBRSTB                                     BIT(0)
+#define FEN_BB_GLB_RSTn                        BIT(1)
+#define FEN_USBA                                       BIT(2)
+#define FEN_UPLL                                       BIT(3)
+#define FEN_USBD                                       BIT(4)
+#define FEN_DIO_PCIE                           BIT(5)
+#define FEN_PCIEA                                      BIT(6)
+#define FEN_PPLL                                               BIT(7)
+#define FEN_PCIED                                      BIT(8)
+#define FEN_DIOE                                       BIT(9)
+#define FEN_CPUEN                                      BIT(10)
+#define FEN_DCORE                                      BIT(11)
+#define FEN_ELDR                                       BIT(12)
+#define FEN_DIO_RF                                     BIT(13)
+#define FEN_HWPDN                                      BIT(14)
+#define FEN_MREGEN                                     BIT(15)
+
+//2 APS_FSMCO
+#define PFM_LDALL                                      BIT(0)
+#define PFM_ALDN                                       BIT(1)
+#define PFM_LDKP                                       BIT(2)
+#define PFM_WOWL                                       BIT(3)
+#define EnPDN                                          BIT(4)
+#define PDN_PL                                         BIT(5)
+#define APFM_ONMAC                                     BIT(8)
+#define APFM_OFF                                       BIT(9)
+#define APFM_RSM                                       BIT(10)
+#define AFSM_HSUS                                      BIT(11)
+#define AFSM_PCIE                                      BIT(12)
+#define APDM_MAC                                       BIT(13)
+#define APDM_HOST                                      BIT(14)
+#define APDM_HPDN                                      BIT(15)
+#define RDY_MACON                                      BIT(16)
+#define SUS_HOST                                       BIT(17)
+#define ROP_ALD                                                BIT(20)
+#define ROP_PWR                                                BIT(21)
+#define ROP_SPS                                                BIT(22)
+#define SOP_MRST                                       BIT(25)
+#define SOP_FUSE                                       BIT(26)
+#define SOP_ABG                                                BIT(27)
+#define SOP_AMB                                                BIT(28)
+#define SOP_RCK                                                BIT(29)
+#define SOP_A8M                                                BIT(30)
+#define XOP_BTCK                                       BIT(31)
+
+//2 SYS_CLKR
+#define ANAD16V_EN                                     BIT(0)
+#define ANA8M                                          BIT(1)
+#define MACSLP                                         BIT(4)
+#define LOADER_CLK_EN                          BIT(5)
+#define _80M_SSC_DIS                           BIT(7)
+#define _80M_SSC_EN_HO                         BIT(8)
+#define PHY_SSC_RSTB                           BIT(9)
+#define SEC_CLK_EN                                     BIT(10)
+#define MAC_CLK_EN                                     BIT(11)
+#define SYS_CLK_EN                                     BIT(12)
+#define RING_CLK_EN                                    BIT(13)
+
+
+//2 9346CR
+
+#define BOOT_FROM_EEPROM                       BIT(4)
+#define EEPROM_EN                                      BIT(5)
+
+
+//2 AFE_MISC
+#define AFE_BGEN                                       BIT(0)
+#define AFE_MBEN                                       BIT(1)
+#define MAC_ID_EN                                      BIT(7)
+
+
+//2 SPS0_CTRL
+
+
+//2 SPS_OCP_CFG
+
+
+//2 RSV_CTRL
+#define WLOCK_ALL                                      BIT(0)
+#define WLOCK_00                                       BIT(1)
+#define WLOCK_04                                       BIT(2)
+#define WLOCK_08                                       BIT(3)
+#define WLOCK_40                                       BIT(4)
+#define R_DIS_PRST_0                           BIT(5)
+#define R_DIS_PRST_1                           BIT(6)
+#define LOCK_ALL_EN                                    BIT(7)
+
+//2 RF_CTRL
+#define RF_EN                                          BIT(0)
+#define RF_RSTB                                                BIT(1)
+#define RF_SDMRSTB                                     BIT(2)
+
+
+
+//2 LDOA15_CTRL
+#define LDA15_EN                                       BIT(0)
+#define LDA15_STBY                                     BIT(1)
+#define LDA15_OBUF                                     BIT(2)
+#define LDA15_REG_VOS                          BIT(3)
+#define _LDA15_VOADJ(x)                                (((x) & 0x7) << 4)
+
+
+
+//2 LDOV12D_CTRL
+#define LDV12_EN                                       BIT(0)
+#define LDV12_SDBY                                     BIT(1)
+#define LPLDO_HSM                                      BIT(2)
+#define LPLDO_LSM_DIS                          BIT(3)
+#define _LDV12_VADJ(x)                         (((x) & 0xF) << 4)
+
+
+//2 AFE_XTAL_CTRL
+#define XTAL_EN                                                BIT(0)
+#define XTAL_BSEL                                      BIT(1)
+#define _XTAL_BOSC(x)                          (((x) & 0x3) << 2)
+#define _XTAL_CADJ(x)                          (((x) & 0xF) << 4)
+#define XTAL_GATE_USB                          BIT(8)
+#define _XTAL_USB_DRV(x)                       (((x) & 0x3) << 9)
+#define XTAL_GATE_AFE                          BIT(11)
+#define _XTAL_AFE_DRV(x)                       (((x) & 0x3) << 12)
+#define XTAL_RF_GATE                           BIT(14)
+#define _XTAL_RF_DRV(x)                                (((x) & 0x3) << 15)
+#define XTAL_GATE_DIG                          BIT(17)
+#define _XTAL_DIG_DRV(x)                       (((x) & 0x3) << 18)
+#define XTAL_BT_GATE                           BIT(20)
+#define _XTAL_BT_DRV(x)                                (((x) & 0x3) << 21)
+#define _XTAL_GPIO(x)                          (((x) & 0x7) << 23)
+
+
+#define CKDLY_AFE                                      BIT(26)
+#define CKDLY_USB                                      BIT(27)
+#define CKDLY_DIG                                      BIT(28)
+#define CKDLY_BT                                       BIT(29)
+
+
+//2 AFE_PLL_CTRL
+#define APLL_EN                                                BIT(0)
+#define APLL_320_EN                                    BIT(1)
+#define APLL_FREF_SEL                          BIT(2)
+#define APLL_EDGE_SEL                          BIT(3)
+#define APLL_WDOGB                                     BIT(4)
+#define APLL_LPFEN                                     BIT(5)
+
+#define APLL_REF_CLK_13MHZ                     0x1
+#define APLL_REF_CLK_19_2MHZ           0x2
+#define APLL_REF_CLK_20MHZ                     0x3
+#define APLL_REF_CLK_25MHZ                     0x4
+#define APLL_REF_CLK_26MHZ                     0x5
+#define APLL_REF_CLK_38_4MHZ           0x6
+#define APLL_REF_CLK_40MHZ                     0x7
+
+#define APLL_320EN                                     BIT(14)
+#define APLL_80EN                                      BIT(15)
+#define APLL_1MEN                                      BIT(24)
+
+
+//2 EFUSE_CTRL
+#define ALD_EN                                         BIT(18)
+#define EF_PD                                          BIT(19)
+#define EF_FLAG                                                BIT(31)
+
+//2 EFUSE_TEST
+#define EF_TRPT                                                BIT(7)
+#define LDOE25_EN                                      BIT(31)
+
+//2 PWR_DATA
+
+//2 CAL_TIMER
+
+//2 ACLK_MON
+#define RSM_EN                                         BIT(0)
+#define Timer_EN                                               BIT(4)
+
+
+//2 GPIO_MUXCFG
+#define TRSW0EN                                                BIT(2)
+#define TRSW1EN                                                BIT(3)
+#define EROM_EN                                                BIT(4)
+#define EnBT                                                   BIT(5)
+#define EnUart                                         BIT(8)
+#define Uart_910                                               BIT(9)
+#define EnPMAC                                         BIT(10)
+#define SIC_SWRST                                      BIT(11)
+#define EnSIC                                          BIT(12)
+#define SIC_23                                         BIT(13)
+#define EnHDP                                          BIT(14)
+#define SIC_LBK                                                BIT(15)
+
+//2 GPIO_PIN_CTRL
+
+
+
+//2 GPIO_INTM
+
+//2 LEDCFG
+#define LED0PL                                         BIT(4)
+#define LED1PL                                         BIT(12)
+#define LED0DIS                                        BIT(7)
+
+#define  SECCAM_CLR                            BIT(30)
+
+//2 FSIMR
+
+//2 FSISR
+
+
+//2 8051FWDL
+//2 MCUFWDL
+#define MCUFWDL_EN                                     BIT(0)
+#define MCUFWDL_RDY                            BIT(1)
+#define FWDL_ChkSum_rpt                        BIT(2)
+#define MACINI_RDY                                     BIT(3)
+#define BBINI_RDY                                      BIT(4)
+#define RFINI_RDY                                      BIT(5)
+#define WINTINI_RDY                                    BIT(6)
+#define MAC1_WINTINI_RDY                       BIT(11)// 0X81 BIT3
+#define CPRST                                          BIT(23)
+
+
+
+
+//2 REG_SYS_CFG
+#define XCLK_VLD                                               BIT(0)
+#define ACLK_VLD                                       BIT(1)
+#define UCLK_VLD                                       BIT(2)
+#define PCLK_VLD                                               BIT(3)
+#define PCIRSTB                                                BIT(4)
+#define V15_VLD                                                BIT(5)
+#define TRP_B15V_EN                                    BIT(7)
+#define SIC_IDLE                                               BIT(8)
+#define BD_MAC2                                                BIT(9)
+#define BD_MAC1                                                BIT(10)
+#define IC_MACPHY_MODE                         BIT(11)
+#define PAD_HWPD_IDN                           BIT(22)
+#define TRP_VAUX_EN                                    BIT(23)
+#define TRP_BT_EN                                      BIT(24)
+#define BD_PKG_SEL                                     BIT(25)
+#define BD_HCI_SEL                                     BIT(26)
+#define TYPE_ID                                                BIT(27)
+
+#define CHIP_VER_RTL_MASK                      0xF000  //Bit 12 ~ 15
+#define CHIP_VER_RTL_SHIFT                     12
+
+//-----------------------------------------------------
+//
+//     0x0100h ~ 0x01FFh       MACTOP General Configuration
+//
+//-----------------------------------------------------
+
+
+//2 Function Enable Registers
+//2 CR
+
+#define REG_LBMODE                                     (REG_CR + 3)
+
+
+#define HCI_TXDMA_EN                           BIT(0)
+#define HCI_RXDMA_EN                           BIT(1)
+#define TXDMA_EN                                       BIT(2)
+#define RXDMA_EN                                       BIT(3)
+#define PROTOCOL_EN                                    BIT(4)
+#define SCHEDULE_EN                                    BIT(5)
+#define MACTXEN                                                BIT(6)
+#define MACRXEN                                                BIT(7)
+#define ENSWBCN                                                BIT(8)
+#define ENSEC                                          BIT(9)
+
+// Network type
+#define _NETTYPE(x)                                    (((x) & 0x3) << 16)
+#define MASK_NETTYPE                           0x30000
+#define NT_NO_LINK                                     0x0
+#define NT_LINK_AD_HOC                         0x1
+#define NT_LINK_AP                                     0x2
+#define NT_AS_AP                                       0x3
+
+#define _LBMODE(x)                                     (((x) & 0xF) << 24)
+#define MASK_LBMODE                            0xF000000
+#define LOOPBACK_NORMAL                        0x0
+#define LOOPBACK_IMMEDIATELY           0xB
+#define LOOPBACK_MAC_DELAY             0x3
+#define LOOPBACK_PHY                           0x1
+#define LOOPBACK_DMA                           0x7
+
+
+//2 PBP - Page Size Register
+#define GET_RX_PAGE_SIZE(value)                ((value) & 0xF)
+#define GET_TX_PAGE_SIZE(value)                (((value) & 0xF0) >> 4)
+#define _PSRX_MASK                                     0xF
+#define _PSTX_MASK                                     0xF0
+#define _PSRX(x)                                               (x)
+#define _PSTX(x)                                               ((x) << 4)
+
+#define PBP_64                                         0x0
+#define PBP_128                                                0x1
+#define PBP_256                                                0x2
+#define PBP_512                                                0x3
+#define PBP_1024                                       0x4
+
+
+//2 TX/RXDMA
+#define RXDMA_ARBBW_EN                 BIT(0)
+#define RXSHFT_EN                                      BIT(1)
+#define RXDMA_AGG_EN                           BIT(2)
+#define QS_VO_QUEUE                            BIT(8)
+#define QS_VI_QUEUE                                    BIT(9)
+#define QS_BE_QUEUE                            BIT(10)
+#define QS_BK_QUEUE                            BIT(11)
+#define QS_MANAGER_QUEUE                       BIT(12)
+#define QS_HIGH_QUEUE                          BIT(13)
+
+#define HQSEL_VOQ                                      BIT(0)
+#define HQSEL_VIQ                                      BIT(1)
+#define HQSEL_BEQ                                      BIT(2)
+#define HQSEL_BKQ                                      BIT(3)
+#define HQSEL_MGTQ                                     BIT(4)
+#define HQSEL_HIQ                                      BIT(5)
+
+// For normal driver, 0x10C
+#define _TXDMA_HIQ_MAP(x)                      (((x)&0x3) << 14)
+#define _TXDMA_MGQ_MAP(x)                      (((x)&0x3) << 12)
+#define _TXDMA_BKQ_MAP(x)                      (((x)&0x3) << 10)
+#define _TXDMA_BEQ_MAP(x)                      (((x)&0x3) << 8 )
+#define _TXDMA_VIQ_MAP(x)                      (((x)&0x3) << 6 )
+#define _TXDMA_VOQ_MAP(x)                      (((x)&0x3) << 4 )
+
+#define QUEUE_LOW                                      1
+#define QUEUE_NORMAL                           2
+#define QUEUE_HIGH                                     3
+
+
+
+//2 TRXFF_BNDY
+
+
+//2 LLT_INIT
+#define _LLT_NO_ACTIVE                         0x0
+#define _LLT_WRITE_ACCESS                      0x1
+#define _LLT_READ_ACCESS                       0x2
+
+#define _LLT_INIT_DATA(x)                      ((x) & 0xFF)
+#define _LLT_INIT_ADDR(x)                      (((x) & 0xFF) << 8)
+#define _LLT_OP(x)                                     (((x) & 0x3) << 30)
+#define _LLT_OP_VALUE(x)                       (((x) >> 30) & 0x3)
+
+
+//2 BB_ACCESS_CTRL
+#define BB_WRITE_READ_MASK             (BIT(31) | BIT(30))
+#define BB_WRITE_EN                                    BIT(30)
+#define BB_READ_EN                                     BIT(31)
+//#define BB_ADDR_MASK                         0xFFF
+//#define _BB_ADDR(x)                                  ((x) & BB_ADDR_MASK)
+
+//-----------------------------------------------------
+//
+//     0x0200h ~ 0x027Fh       TXDMA Configuration
+//
+//-----------------------------------------------------
+//2 RQPN
+#define _HPQ(x)                                                ((x) & 0xFF)
+#define _LPQ(x)                                                (((x) & 0xFF) << 8)
+#define _PUBQ(x)                                               (((x) & 0xFF) << 16)
+#define _NPQ(x)                                                ((x) & 0xFF)                    // NOTE: in RQPN_NPQ register
+
+
+#define HPQ_PUBLIC_DIS                         BIT(24)
+#define LPQ_PUBLIC_DIS                         BIT(25)
+#define LD_RQPN                                                BIT(31)
+
+
+//2 TDECTRL
+#define BCN_VALID                                      BIT(16)
+#define BCN_HEAD(x)                                    (((x) & 0xFF) << 8)
+#define        BCN_HEAD_MASK                           0xFF00
+
+//2 TDECTL
+#define BLK_DESC_NUM_SHIFT                     4
+#define BLK_DESC_NUM_MASK                      0xF
+
+
+//2 TXDMA_OFFSET_CHK
+#define DROP_DATA_EN                           BIT(9)
+
+//-----------------------------------------------------
+//
+//     0x0400h ~ 0x047Fh       Protocol Configuration
+//
+//-----------------------------------------------------
+//2 FWHW_TXQ_CTRL
+#define EN_AMPDU_RTY_NEW                       BIT(7)
+
+//2 INIRTSMCS_SEL
+#define _INIRTSMCS_SEL(x)                      ((x) & 0x3F)
+
+
+//2 SPEC SIFS
+#define _SPEC_SIFS_CCK(x)                      ((x) & 0xFF)
+#define _SPEC_SIFS_OFDM(x)                     (((x) & 0xFF) << 8)
+
+
+//2 RRSR
+
+#define RATE_REG_BITMAP_ALL                    0xFFFFF
+
+#define _RRSC_BITMAP(x)                                        ((x) & 0xFFFFF)
+
+#define _RRSR_RSC(x)                                           (((x) & 0x3) << 21)
+#define RRSR_RSC_RESERVED                              0x0
+#define RRSR_RSC_UPPER_SUBCHANNEL      0x1
+#define RRSR_RSC_LOWER_SUBCHANNEL      0x2
+#define RRSR_RSC_DUPLICATE_MODE                0x3
+
+
+//2 ARFR
+#define USE_SHORT_G1                           BIT(20)
+
+//2 AGGLEN_LMT_L
+#define _AGGLMT_MCS0(x)                                ((x) & 0xF)
+#define _AGGLMT_MCS1(x)                                (((x) & 0xF) << 4)
+#define _AGGLMT_MCS2(x)                                (((x) & 0xF) << 8)
+#define _AGGLMT_MCS3(x)                                (((x) & 0xF) << 12)
+#define _AGGLMT_MCS4(x)                                (((x) & 0xF) << 16)
+#define _AGGLMT_MCS5(x)                                (((x) & 0xF) << 20)
+#define _AGGLMT_MCS6(x)                                (((x) & 0xF) << 24)
+#define _AGGLMT_MCS7(x)                                (((x) & 0xF) << 28)
+
+
+//2 RL
+#define        RETRY_LIMIT_SHORT_SHIFT         8
+#define        RETRY_LIMIT_LONG_SHIFT          0
+
+
+//2 DARFRC
+#define _DARF_RC1(x)                           ((x) & 0x1F)
+#define _DARF_RC2(x)                           (((x) & 0x1F) << 8)
+#define _DARF_RC3(x)                           (((x) & 0x1F) << 16)
+#define _DARF_RC4(x)                           (((x) & 0x1F) << 24)
+// NOTE: shift starting from address (DARFRC + 4)
+#define _DARF_RC5(x)                           ((x) & 0x1F)
+#define _DARF_RC6(x)                           (((x) & 0x1F) << 8)
+#define _DARF_RC7(x)                           (((x) & 0x1F) << 16)
+#define _DARF_RC8(x)                           (((x) & 0x1F) << 24)
+
+
+//2 RARFRC
+#define _RARF_RC1(x)                           ((x) & 0x1F)
+#define _RARF_RC2(x)                           (((x) & 0x1F) << 8)
+#define _RARF_RC3(x)                           (((x) & 0x1F) << 16)
+#define _RARF_RC4(x)                           (((x) & 0x1F) << 24)
+// NOTE: shift starting from address (RARFRC + 4)
+#define _RARF_RC5(x)                           ((x) & 0x1F)
+#define _RARF_RC6(x)                           (((x) & 0x1F) << 8)
+#define _RARF_RC7(x)                           (((x) & 0x1F) << 16)
+#define _RARF_RC8(x)                           (((x) & 0x1F) << 24)
+
+
+
+
+//-----------------------------------------------------
+//
+//     0x0500h ~ 0x05FFh       EDCA Configuration
+//
+//-----------------------------------------------------
+
+
+
+//2 EDCA setting
+#define AC_PARAM_TXOP_LIMIT_OFFSET     16
+#define AC_PARAM_ECW_MAX_OFFSET                12
+#define AC_PARAM_ECW_MIN_OFFSET                8
+#define AC_PARAM_AIFS_OFFSET                   0
+
+
+//2 EDCA_VO_PARAM
+#define _AIFS(x)                                               (x)
+#define _ECW_MAX_MIN(x)                        ((x) << 8)
+#define _TXOP_LIMIT(x)                         ((x) << 16)
+
+
+#define _BCNIFS(x)                                     ((x) & 0xFF)
+#define _BCNECW(x)                                     (((x) & 0xF))<< 8)
+
+
+#define _LRL(x)                                                ((x) & 0x3F)
+#define _SRL(x)                                                (((x) & 0x3F) << 8)
+
+
+//2 SIFS_CCK
+#define _SIFS_CCK_CTX(x)                       ((x) & 0xFF)
+#define _SIFS_CCK_TRX(x)                       (((x) & 0xFF) << 8);
+
+
+//2 SIFS_OFDM
+#define _SIFS_OFDM_CTX(x)                      ((x) & 0xFF)
+#define _SIFS_OFDM_TRX(x)                      (((x) & 0xFF) << 8);
+
+
+//2 TBTT PROHIBIT
+#define _TBTT_PROHIBIT_HOLD(x)         (((x) & 0xFF) << 8)
+
+
+//2 REG_RD_CTRL
+#define DIS_EDCA_CNT_DWN                       BIT(11)
+
+
+//2 BCN_CTRL
+#define EN_MBSSID                                              BIT(1)
+#define EN_TXBCN_RPT                                   BIT(2)
+#define EN_BCN_FUNCTION                                BIT(3)
+// The same function but different bit field.
+#define DIS_TSF_UDT0_NORMAL_CHIP               BIT(4)
+#define DIS_TSF_UDT0_TEST_CHIP         BIT(5)
+
+//2 ACMHWCTRL
+#define        AcmHw_HwEn                                      BIT(0)
+#define        AcmHw_BeqEn                                     BIT(1)
+#define        AcmHw_ViqEn                                     BIT(2)
+#define        AcmHw_VoqEn                                     BIT(3)
+#define        AcmHw_BeqStatus                         BIT(4)
+#define        AcmHw_ViqStatus                         BIT(5)
+#define        AcmHw_VoqStatus                         BIT(6)
+
+
+
+//-----------------------------------------------------
+//
+//     0x0600h ~ 0x07FFh       WMAC Configuration
+//
+//-----------------------------------------------------
+
+//2 APSD_CTRL
+#define APSDOFF                                                BIT(6)
+#define APSDOFF_STATUS                         BIT(7)
+
+
+//2 BWOPMODE
+#define BW_20MHZ                                       BIT(2)
+//#define BW_OPMODE_20MHZ                              BIT(2)  // For compability
+
+
+#define RATE_BITMAP_ALL                        0xFFFFF
+
+// Only use CCK 1M rate for ACK
+#define RATE_RRSR_CCK_ONLY_1M          0xFFFF1
+#define RATE_RRSR_WITHOUT_CCK          0xFFFF0
+
+//2 TCR
+#define TSFRST                                         BIT(0)
+#define DIS_GCLK                                               BIT(1)
+#define PAD_SEL                                                BIT(2)
+#define PWR_ST                                         BIT(6)
+#define PWRBIT_OW_EN                           BIT(7)
+#define ACRC                                                   BIT(8)
+#define CFENDFORM                                      BIT(9)
+#define ICV                                                    BIT(10)
+
+
+
+//2 RCR
+#define AAP                                                    BIT(0)
+#define APM                                                    BIT(1)
+#define AM                                                     BIT(2)
+#define AB                                                     BIT(3)
+#define ADD3                                                   BIT(4)
+#define APWRMGT                                        BIT(5)
+#define CBSSID                                         BIT(6)
+#define CBSSID_BCN                                     BIT(7)
+#define ACRC32                                         BIT(8)
+#define AICV                                                   BIT(9)
+#define ADF                                                    BIT(11)
+#define ACF                                                    BIT(12)
+#define AMF                                                    BIT(13)
+#define HTC_LOC_CTRL                           BIT(14)
+#define UC_DATA_EN                                     BIT(16)
+#define BM_DATA_EN                                     BIT(17)
+#define MFBEN                                          BIT(22)
+#define LSIGEN                                         BIT(23)
+#define EnMBID                                         BIT(24)
+#define APP_BASSN                                      BIT(27)
+#define APP_PHYSTS                                     BIT(28)
+#define APP_ICV                                                BIT(29)
+#define APP_MIC                                                BIT(30)
+#define APP_FCS                                                BIT(31)
+
+//2 RX_PKT_LIMIT
+
+//2 RX_DLK_TIME
+
+//2 MBIDCAMCFG
+
+
+
+//2 AMPDU_MIN_SPACE
+#define _MIN_SPACE(x)                          ((x) & 0x7)
+#define _SHORT_GI_PADDING(x)           (((x) & 0x1F) << 3)
+
+
+//2 RXERR_RPT
+#define RXERR_TYPE_OFDM_PPDU                   0
+#define RXERR_TYPE_OFDM_FALSE_ALARM    1
+#define RXERR_TYPE_OFDM_MPDU_OK                2
+#define RXERR_TYPE_OFDM_MPDU_FAIL      3
+#define RXERR_TYPE_CCK_PPDU                    4
+#define RXERR_TYPE_CCK_FALSE_ALARM     5
+#define RXERR_TYPE_CCK_MPDU_OK         6
+#define RXERR_TYPE_CCK_MPDU_FAIL               7
+#define RXERR_TYPE_HT_PPDU                             8
+#define RXERR_TYPE_HT_FALSE_ALARM      9
+#define RXERR_TYPE_HT_MPDU_TOTAL               10
+#define RXERR_TYPE_HT_MPDU_OK                  11
+#define RXERR_TYPE_HT_MPDU_FAIL                12
+#define RXERR_TYPE_RX_FULL_DROP                15
+
+#define RXERR_COUNTER_MASK                     0xFFFFF
+#define RXERR_RPT_RST                                  BIT(27)
+#define _RXERR_RPT_SEL(type)                   ((type) << 28)
+
+
+//2 SECCFG
+#define        SCR_TxUseDK                                     BIT(0)                  //Force Tx Use Default Key
+#define        SCR_RxUseDK                                     BIT(1)                  //Force Rx Use Default Key
+#define        SCR_TxEncEnable                         BIT(2)                  //Enable Tx Encryption
+#define        SCR_RxDecEnable                         BIT(3)                  //Enable Rx Decryption
+#define        SCR_SKByA2                                              BIT(4)                  //Search kEY BY A2
+#define        SCR_NoSKMC                                              BIT(5)                  //No Key Search Multicast
+#define        SCR_TXBCUSEDK                                   BIT(6)                  // Force Tx Broadcast packets Use Default Key
+#define        SCR_RXBCUSEDK                                   BIT(7)                  // Force Rx Broadcast packets Use Default Key
+
+//vivi added for new cam search flow, 20091028
+#ifdef HW_EN_DE_CRYPTION_FOR_NEW_CAM_SEARCH_FLOW
+#define        SCR_TxUseBroadcastDK                    BIT6                    //Force Tx Use Broadcast Default Key
+#define        SCR_RxUseBroadcastDK                    BIT7                    //Force Rx Use Broadcast Default Key
+#endif
+
+
+//-----------------------------------------------------
+//
+//     0xFE00h ~ 0xFE55h       USB Configuration
+//
+//-----------------------------------------------------
+
+//2 USB Information (0xFE17)
+#define USB_IS_HIGH_SPEED                              0
+#define USB_IS_FULL_SPEED                              1
+#define USB_SPEED_MASK                                 BIT(5)
+
+#define USB_NORMAL_SIE_EP_MASK         0xF
+#define USB_NORMAL_SIE_EP_SHIFT                4
+
+#define USB_TEST_EP_MASK                               0x30
+#define USB_TEST_EP_SHIFT                              4
+
+//2 Special Option
+#define USB_AGG_EN                                             BIT(3)
+
+
+//2REG_C2HEVT_CLEAR
+#define C2H_EVT_HOST_CLOSE                             0x00    // Set by driver and notify FW that the driver has read the C2H command message
+#define C2H_EVT_FW_CLOSE                               0xFF    // Set by FW indicating that FW had set the C2H command message and it's not yet read by driver.
+
+//2 8192D PartNo.
+#define                PARTNO_92D_NIC                  (BIT7|BIT6)
+#define                PARTNO_92D_NIC_REMARK (BIT5|BIT4)
+#define                PARTNO_SINGLE_BAND_VS  BIT3
+#define                PARTNO_SINGLE_BAND_VS_REMARK BIT1
+#define                PARTNO_CONCURRENT_BAND_VC (BIT3|BIT2)
+#define                PARTNO_CONCURRENT_BAND_VC_REMARK (BIT1|BIT0)
+//========================================================
+// General definitions
+//========================================================
+
+#define MAC_ADDR_LEN                                           6
+#define LAST_ENTRY_OF_TX_PKT_BUFFER            255
+#define LAST_ENTRY_OF_TX_PKT_BUFFER_DUAL_MAC   127
+
+#define POLLING_LLT_THRESHOLD                          20
+#define POLLING_READY_TIMEOUT_COUNT            1000
+
+// Min Spacing related settings.
+#define        MAX_MSS_DENSITY_2T                              0x13
+#define        MAX_MSS_DENSITY_1T                              0x0A
+// GPIO BIT
+#define        HAL_8192C_HW_GPIO_WPS_BIT               BIT2
+
+
+#include "basic_types.h"
+
+#endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtl8192d_xmit.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtl8192d_xmit.h
new file mode 100644 (file)
index 0000000..bc651c1
--- /dev/null
@@ -0,0 +1,144 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef _RTL8192D_XMIT_H_
+#define _RTL8192D_XMIT_H_
+
+//
+// Queue Select Value in TxDesc
+//
+#define QSLT_BK                                                        0x2//0x01
+#define QSLT_BE                                                        0x0
+#define QSLT_VI                                                        0x5//0x4
+#define QSLT_VO                                                        0x7//0x6
+#define QSLT_BEACON                                            0x10
+#define QSLT_HIGH                                              0x11
+#define QSLT_MGNT                                              0x12
+#define QSLT_CMD                                               0x13
+
+//Because we open EM for normal case, we just always insert 2*8 bytes.by wl
+#define USB_92D_DUMMY_OFFSET           2
+#define USB_92D_DUMMY_LENGTH           (USB_92D_DUMMY_OFFSET * PACKET_OFFSET_SZ)
+#define USB_HWDESC_HEADER_LEN  (TXDESC_SIZE + USB_92D_DUMMY_LENGTH)
+
+//For 92D early mode
+#define SET_EARLYMODE_PKTNUM(__pAddr, __Value) SET_BITS_TO_LE_4BYTE(__pAddr, 0, 3, __Value)
+#define SET_EARLYMODE_LEN0(__pAddr, __Value) SET_BITS_TO_LE_4BYTE(__pAddr, 4, 12, __Value)
+#define SET_EARLYMODE_LEN1(__pAddr, __Value) SET_BITS_TO_LE_4BYTE(__pAddr, 16, 12, __Value)
+#define SET_EARLYMODE_LEN2_1(__pAddr, __Value) SET_BITS_TO_LE_4BYTE(__pAddr, 28, 4, __Value)
+#define SET_EARLYMODE_LEN2_2(__pAddr, __Value) SET_BITS_TO_LE_4BYTE(__pAddr+4, 0, 8, __Value)
+#define SET_EARLYMODE_LEN3(__pAddr, __Value) SET_BITS_TO_LE_4BYTE(__pAddr+4, 8, 12, __Value)
+#define SET_EARLYMODE_LEN4(__pAddr, __Value) SET_BITS_TO_LE_4BYTE(__pAddr+4, 20, 12, __Value)
+
+/* Copy from rtl8192c */
+struct txrpt_ccx_8192d {
+       /* offset 0 */
+       u8 retry_cnt:6;
+       u8 rsvd_0:2;
+
+       /* offset 1 */
+       u8 rts_retry_cnt:6;
+       u8 rsvd_1:2;
+
+       /* offset 2 */
+       u8 ccx_qtime0;
+       u8 ccx_qtime1;
+
+       /* offset 4 */
+       u8 missed_pkt_num:5;
+       u8 rsvd_4:3;
+
+       /* offset 5 */
+       u8 mac_id:5;
+       u8 des1_fragssn:3;
+
+       /* offset 6 */
+       u8 rpt_pkt_num:5;
+       u8 pkt_drop:1;
+       u8 lifetime_over:1;
+       u8 retry_over:1;
+
+       /* offset 7*/
+       u8 edca_tx_queue:4;
+       u8 rsvd_7:1;
+       u8 bmc:1;
+       u8 pkt_ok:1;
+       u8 int_ccx:1;
+};
+
+#define txrpt_ccx_qtime_8192d(txrpt_ccx) ((txrpt_ccx)->ccx_qtime0+((txrpt_ccx)->ccx_qtime1<<8))
+
+#ifdef CONFIG_XMIT_ACK
+void dump_txrpt_ccx_8192d(void *buf);
+void handle_txrpt_ccx_8192d(_adapter *adapter, void *buf);
+#else
+#define dump_txrpt_ccx_8192d(buf) do {} while(0)
+#define handle_txrpt_ccx_8192d(adapter, buf) do {} while(0)
+#endif
+
+#ifdef CONFIG_USB_HCI
+
+#ifdef CONFIG_USB_TX_AGGREGATION
+#define MAX_TX_AGG_PACKET_NUMBER 0xFF
+#endif
+
+s32    rtl8192du_init_xmit_priv(_adapter * padapter);
+
+void   rtl8192du_free_xmit_priv(_adapter * padapter);
+
+void rtl8192du_cal_txdesc_chksum(struct tx_desc        *ptxdesc);
+
+s32 rtl8192du_xmitframe_complete(_adapter *padapter, struct xmit_priv *pxmitpriv, struct xmit_buf *pxmitbuf);
+
+s32 rtl8192du_mgnt_xmit(_adapter *padapter, struct xmit_frame *pmgntframe);
+
+s32 rtl8192du_hal_xmit(_adapter *padapter, struct xmit_frame *pxmitframe);
+
+s32     rtl8192du_hal_xmitframe_enqueue(_adapter *padapter, struct xmit_frame *pxmitframe);
+
+
+#ifdef CONFIG_HOSTAPD_MLME
+s32    rtl8192du_hostap_mgnt_xmit_entry(_adapter *padapter, _pkt *pkt);
+#endif
+
+#endif
+
+#ifdef CONFIG_PCI_HCI
+s32    rtl8192de_init_xmit_priv(_adapter * padapter);
+void   rtl8192de_free_xmit_priv(_adapter * padapter);
+
+s32    rtl8192de_enqueue_xmitbuf(struct rtw_tx_ring *ring, struct xmit_buf *pxmitbuf);
+struct xmit_buf *rtl8192de_dequeue_xmitbuf(struct rtw_tx_ring *ring);
+
+void   rtl8192de_xmitframe_resume(_adapter *padapter);
+
+s32    rtl8192de_mgnt_xmit(_adapter *padapter, struct xmit_frame *pmgntframe);
+
+s32    rtl8192de_hal_xmit(_adapter *padapter, struct xmit_frame *pxmitframe);
+
+s32     rtl8192de_hal_xmitframe_enqueue(_adapter *padapter, struct xmit_frame *pxmitframe);
+
+#ifdef CONFIG_HOSTAPD_MLME
+s32    rtl8192de_hostap_mgnt_xmit_entry(_adapter *padapter, _pkt *pkt);
+#endif
+
+#endif
+
+
+#endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtw_android.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtw_android.h
new file mode 100644 (file)
index 0000000..468ae77
--- /dev/null
@@ -0,0 +1,89 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+
+#ifndef __RTW_ANDROID_H__
+#define __RTW_ANDROID_H__
+
+#include <linux/module.h>
+#include <linux/netdevice.h>
+
+enum ANDROID_WIFI_CMD {
+       ANDROID_WIFI_CMD_START,
+       ANDROID_WIFI_CMD_STOP,
+       ANDROID_WIFI_CMD_SCAN_ACTIVE,
+       ANDROID_WIFI_CMD_SCAN_PASSIVE,
+       ANDROID_WIFI_CMD_RSSI,
+       ANDROID_WIFI_CMD_LINKSPEED,
+       ANDROID_WIFI_CMD_RXFILTER_START,
+       ANDROID_WIFI_CMD_RXFILTER_STOP,
+       ANDROID_WIFI_CMD_RXFILTER_ADD,
+       ANDROID_WIFI_CMD_RXFILTER_REMOVE,
+       ANDROID_WIFI_CMD_BTCOEXSCAN_START,
+       ANDROID_WIFI_CMD_BTCOEXSCAN_STOP,
+       ANDROID_WIFI_CMD_BTCOEXMODE,
+       ANDROID_WIFI_CMD_SETSUSPENDOPT,
+       ANDROID_WIFI_CMD_P2P_DEV_ADDR,
+       ANDROID_WIFI_CMD_SETFWPATH,
+       ANDROID_WIFI_CMD_SETBAND,
+       ANDROID_WIFI_CMD_GETBAND,
+       ANDROID_WIFI_CMD_COUNTRY,
+       ANDROID_WIFI_CMD_P2P_SET_NOA,
+       ANDROID_WIFI_CMD_P2P_GET_NOA,
+       ANDROID_WIFI_CMD_P2P_SET_PS,
+       ANDROID_WIFI_CMD_SET_AP_WPS_P2P_IE,
+#ifdef PNO_SUPPORT
+       ANDROID_WIFI_CMD_PNOSSIDCLR_SET,
+       ANDROID_WIFI_CMD_PNOSETUP_SET,
+       ANDROID_WIFI_CMD_PNOENABLE_SET,
+       ANDROID_WIFI_CMD_PNODEBUG_SET,
+#endif
+
+       ANDROID_WIFI_CMD_MACADDR,
+
+       ANDROID_WIFI_CMD_BLOCK,
+
+       ANDROID_WIFI_CMD_WFD_ENABLE,
+       ANDROID_WIFI_CMD_WFD_DISABLE,
+
+       ANDROID_WIFI_CMD_WFD_SET_TCPPORT,
+       ANDROID_WIFI_CMD_WFD_SET_MAX_TPUT,
+       ANDROID_WIFI_CMD_WFD_SET_DEVTYPE,
+
+       ANDROID_WIFI_CMD_MAX
+};
+
+int rtw_android_cmdstr_to_num(char *cmdstr);
+int rtw_android_priv_cmd(struct net_device *net, struct ifreq *ifr, int cmd);
+
+#if defined(RTW_ENABLE_WIFI_CONTROL_FUNC)
+int rtw_android_wifictrl_func_add(void);
+void rtw_android_wifictrl_func_del(void);
+void* wl_android_prealloc(int section, unsigned long size);
+
+int wifi_get_irq_number(unsigned long *irq_flags_ptr);
+int wifi_set_power(int on, unsigned long msec);
+int wifi_get_mac_addr(unsigned char *buf);
+void *wifi_get_country_code(char *ccode);
+#else
+static int rtw_android_wifictrl_func_add(void) { return 0; }
+static void rtw_android_wifictrl_func_del(void) {}
+#endif /* defined(RTW_ENABLE_WIFI_CONTROL_FUNC) */
+
+#endif //__RTW_ANDROID_H__
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtw_ap.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtw_ap.h
new file mode 100644 (file)
index 0000000..1265174
--- /dev/null
@@ -0,0 +1,63 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __RTW_AP_H_
+#define __RTW_AP_H_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+
+
+#ifdef CONFIG_AP_MODE
+
+//external function
+extern void rtw_indicate_sta_assoc_event(_adapter *padapter, struct sta_info *psta);
+extern void rtw_indicate_sta_disassoc_event(_adapter *padapter, struct sta_info *psta);
+
+
+void init_mlme_ap_info(_adapter *padapter);
+void free_mlme_ap_info(_adapter *padapter);
+//void update_BCNTIM(_adapter *padapter);
+void rtw_add_bcn_ie(_adapter *padapter, WLAN_BSSID_EX *pnetwork, u8 index, u8 *data, u8 len);
+void rtw_remove_bcn_ie(_adapter *padapter, WLAN_BSSID_EX *pnetwork, u8 index);
+void update_beacon(_adapter *padapter, u8 ie_id, u8 *oui, u8 tx);
+void expire_timeout_chk(_adapter *padapter);
+void update_sta_info_apmode(_adapter *padapter, struct sta_info *psta);
+int rtw_check_beacon_data(_adapter *padapter, u8 *pbuf,  int len);
+void rtw_ap_restore_network(_adapter *padapter);
+void rtw_set_macaddr_acl(_adapter *padapter, int mode);
+int rtw_acl_add_sta(_adapter *padapter, u8 *addr);
+int rtw_acl_remove_sta(_adapter *padapter, u8 *addr);
+
+#ifdef CONFIG_NATIVEAP_MLME
+void associated_clients_update(_adapter *padapter, u8 updated);
+void bss_cap_update_on_sta_join(_adapter *padapter, struct sta_info *psta);
+u8 bss_cap_update_on_sta_leave(_adapter *padapter, struct sta_info *psta);
+void sta_info_update(_adapter *padapter, struct sta_info *psta);
+void ap_sta_info_defer_update(_adapter *padapter, struct sta_info *psta);
+u8 ap_free_sta(_adapter *padapter, struct sta_info *psta, bool active, u16 reason);
+int rtw_sta_flush(_adapter *padapter);
+int rtw_ap_inform_ch_switch(_adapter *padapter, u8 new_ch, u8 ch_offset);
+void start_ap_mode(_adapter *padapter);
+void stop_ap_mode(_adapter *padapter);
+#endif
+#endif //end of CONFIG_AP_MODE
+
+#endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtw_br_ext.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtw_br_ext.h
new file mode 100644 (file)
index 0000000..1b5709a
--- /dev/null
@@ -0,0 +1,75 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef _RTW_BR_EXT_H_
+#define _RTW_BR_EXT_H_
+
+#if 1  // rtw_wifi_driver
+#define CL_IPV6_PASS           1
+#define MACADDRLEN             6
+#define _DEBUG_ERR             printk
+#define _DEBUG_INFO            //printk
+#define DEBUG_WARN             printk
+#define DEBUG_INFO             //printk
+#define DEBUG_ERR              printk
+//#define GET_MY_HWADDR                ((GET_MIB(priv))->dot11OperationEntry.hwaddr)
+#define GET_MY_HWADDR(padapter)                ((padapter)->eeprompriv.mac_addr)
+#endif // rtw_wifi_driver
+
+#define NAT25_HASH_BITS                4
+#define NAT25_HASH_SIZE                (1 << NAT25_HASH_BITS)
+#define NAT25_AGEING_TIME      300
+
+#ifdef CL_IPV6_PASS
+#define MAX_NETWORK_ADDR_LEN   17
+#else
+#define MAX_NETWORK_ADDR_LEN   11
+#endif
+
+struct nat25_network_db_entry
+{
+       struct nat25_network_db_entry   *next_hash;
+       struct nat25_network_db_entry   **pprev_hash;
+       atomic_t                                                use_count;
+       unsigned char                                   macAddr[6];
+       unsigned long                                   ageing_timer;
+       unsigned char                                   networkAddr[MAX_NETWORK_ADDR_LEN];
+};
+
+enum NAT25_METHOD {
+       NAT25_MIN,
+       NAT25_CHECK,
+       NAT25_INSERT,
+       NAT25_LOOKUP,
+       NAT25_PARSE,
+       NAT25_MAX
+};
+
+struct br_ext_info {
+       unsigned int    nat25_disable;
+       unsigned int    macclone_enable;
+       unsigned int    dhcp_bcst_disable;
+       int             addPPPoETag;            // 1: Add PPPoE relay-SID, 0: disable
+       unsigned char   nat25_dmzMac[MACADDRLEN];
+       unsigned int    nat25sc_disable;
+};
+
+void nat25_db_cleanup(_adapter *priv);
+
+#endif // _RTW_BR_EXT_H_
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtw_byteorder.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtw_byteorder.h
new file mode 100644 (file)
index 0000000..757b01d
--- /dev/null
@@ -0,0 +1,39 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef _RTL871X_BYTEORDER_H_
+#define _RTL871X_BYTEORDER_H_
+
+#include <drv_conf.h>
+
+#if defined (CONFIG_LITTLE_ENDIAN) && defined (CONFIG_BIG_ENDIAN)
+#error "Shall be CONFIG_LITTLE_ENDIAN or CONFIG_BIG_ENDIAN, but not both!\n"
+#endif
+
+#if defined (CONFIG_LITTLE_ENDIAN)
+#ifndef CONFIG_PLATFORM_MSTAR389
+#  include <byteorder/little_endian.h>
+#endif
+#elif defined (CONFIG_BIG_ENDIAN)
+#  include <byteorder/big_endian.h>
+#else
+#  error "Must be LITTLE/BIG Endian Host"
+#endif
+
+#endif /* _RTL871X_BYTEORDER_H_ */
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtw_cmd.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtw_cmd.h
new file mode 100644 (file)
index 0000000..5253911
--- /dev/null
@@ -0,0 +1,1166 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __RTW_CMD_H_
+#define __RTW_CMD_H_
+
+#include <drv_conf.h>
+#include <wlan_bssdef.h>
+#include <rtw_rf.h>
+#include <rtw_led.h>
+
+#define C2H_MEM_SZ (16*1024)
+
+#ifndef CONFIG_RTL8711FW
+
+       #include <osdep_service.h>
+       #include <ieee80211.h> // <ieee80211/ieee80211.h>
+
+
+       #define FREE_CMDOBJ_SZ  128
+
+       #define MAX_CMDSZ       1024
+       #define MAX_RSPSZ       512
+       #define MAX_EVTSZ       1024
+
+#ifdef PLATFORM_OS_CE
+       #define CMDBUFF_ALIGN_SZ 4
+#else
+       #define CMDBUFF_ALIGN_SZ 512
+#endif
+
+       struct cmd_obj {
+               _adapter *padapter;
+               u16     cmdcode;
+               u8      res;
+               u8      *parmbuf;
+               u32     cmdsz;
+               u8      *rsp;
+               u32     rspsz;
+               //_sema         cmd_sem;
+               _list   list;
+       };
+
+       struct cmd_priv {
+               _sema   cmd_queue_sema;
+               //_sema cmd_done_sema;
+               _sema   terminate_cmdthread_sema;
+               _queue  cmd_queue;
+               u8      cmd_seq;
+               u8      *cmd_buf;       //shall be non-paged, and 4 bytes aligned
+               u8      *cmd_allocated_buf;
+               u8      *rsp_buf;       //shall be non-paged, and 4 bytes aligned
+               u8      *rsp_allocated_buf;
+               u32     cmd_issued_cnt;
+               u32     cmd_done_cnt;
+               u32     rsp_cnt;
+               u8 cmdthd_running;
+               u8 stop_req;
+               _adapter *padapter;
+       };
+
+#ifdef CONFIG_EVENT_THREAD_MODE
+       struct evt_obj {
+               u16     evtcode;
+               u8      res;
+               u8      *parmbuf;
+               u32     evtsz;
+               _list   list;
+       };
+#endif
+
+       struct  evt_priv {
+#ifdef CONFIG_EVENT_THREAD_MODE
+               _sema   evt_notify;
+               _sema   terminate_evtthread_sema;
+               _queue  evt_queue;
+#endif
+
+//#define CONFIG_C2H_WK
+#ifdef CONFIG_C2H_WK
+               _workitem c2h_wk;
+               bool c2h_wk_alive;
+               struct rtw_cbuf *c2h_queue;
+               #define C2H_QUEUE_MAX_LEN 10
+#endif
+
+#ifdef CONFIG_H2CLBK
+               _sema   lbkevt_done;
+               u8      lbkevt_limit;
+               u8      lbkevt_num;
+               u8      *cmdevt_parm;
+#endif
+               ATOMIC_T event_seq;
+               u8      *evt_buf;       //shall be non-paged, and 4 bytes aligned
+               u8      *evt_allocated_buf;
+               u32     evt_done_cnt;
+#ifdef CONFIG_SDIO_HCI
+               u8      *c2h_mem;
+               u8      *allocated_c2h_mem;
+#ifdef PLATFORM_OS_XP
+               PMDL    pc2h_mdl;
+#endif
+#endif
+
+       };
+
+#define init_h2fwcmd_w_parm_no_rsp(pcmd, pparm, code) \
+do {\
+       _rtw_init_listhead(&pcmd->list);\
+       pcmd->cmdcode = code;\
+       pcmd->parmbuf = (u8 *)(pparm);\
+       pcmd->cmdsz = sizeof (*pparm);\
+       pcmd->rsp = NULL;\
+       pcmd->rspsz = 0;\
+} while(0)
+
+struct c2h_evt_hdr {
+       u8 id:4;
+       u8 plen:4;
+       u8 seq;
+       u8 payload[0];
+};
+
+#define c2h_evt_exist(c2h_evt) ((c2h_evt)->id || (c2h_evt)->plen)
+
+extern u32 rtw_enqueue_cmd(struct cmd_priv *pcmdpriv, struct cmd_obj *obj);
+extern struct cmd_obj *rtw_dequeue_cmd(struct cmd_priv *pcmdpriv);
+extern void rtw_free_cmd_obj(struct cmd_obj *pcmd);
+
+#ifdef CONFIG_EVENT_THREAD_MODE
+extern u32 rtw_enqueue_evt(struct evt_priv *pevtpriv, struct evt_obj *obj);
+extern struct evt_obj *rtw_dequeue_evt(_queue *queue);
+extern void rtw_free_evt_obj(struct evt_obj *pcmd);
+#endif
+
+void rtw_stop_cmd_thread(_adapter *adapter);
+thread_return rtw_cmd_thread(thread_context context);
+
+extern u32 rtw_init_cmd_priv (struct cmd_priv *pcmdpriv);
+extern void rtw_free_cmd_priv (struct cmd_priv *pcmdpriv);
+
+extern u32 rtw_init_evt_priv (struct evt_priv *pevtpriv);
+extern void rtw_free_evt_priv (struct evt_priv *pevtpriv);
+extern void rtw_cmd_clr_isr(struct cmd_priv *pcmdpriv);
+extern void rtw_evt_notify_isr(struct evt_priv *pevtpriv);
+#ifdef CONFIG_P2P
+u8 p2p_protocol_wk_cmd(_adapter*padapter, int intCmdType );
+#endif //CONFIG_P2P
+
+#else
+       #include <ieee80211.h>
+#endif /* CONFIG_RTL8711FW */
+
+enum rtw_drvextra_cmd_id
+{
+       NONE_WK_CID,
+       DYNAMIC_CHK_WK_CID,
+       DM_CTRL_WK_CID,
+       PBC_POLLING_WK_CID,
+       POWER_SAVING_CTRL_WK_CID,//IPS,AUTOSuspend
+       LPS_CTRL_WK_CID,
+       ANT_SELECT_WK_CID,
+       P2P_PS_WK_CID,
+       P2P_PROTO_WK_CID,
+       CHECK_HIQ_WK_CID,//for softap mode, check hi queue if empty
+       INTEl_WIDI_WK_CID,
+       C2H_WK_CID,
+       RESET_SECURITYPRIV, // add for CONFIG_IEEE80211W, none 11w also can use
+       FREE_ASSOC_RESOURCES, // add for CONFIG_IEEE80211W, none 11w also can use
+       MAX_WK_CID
+};
+
+enum LPS_CTRL_TYPE
+{
+       LPS_CTRL_SCAN=0,
+       LPS_CTRL_JOINBSS=1,
+       LPS_CTRL_CONNECT=2,
+       LPS_CTRL_DISCONNECT=3,
+       LPS_CTRL_SPECIAL_PACKET=4,
+};
+
+enum RFINTFS {
+       SWSI,
+       HWSI,
+       HWPI,
+};
+
+/*
+Caller Mode: Infra, Ad-HoC(C)
+
+Notes: To enter USB suspend mode
+
+Command Mode
+
+*/
+struct usb_suspend_parm {
+       u32 action;// 1: sleep, 0:resume
+};
+
+/*
+Caller Mode: Infra, Ad-HoC
+
+Notes: To join a known BSS.
+
+Command-Event Mode
+
+*/
+
+/*
+Caller Mode: Infra, Ad-Hoc
+
+Notes: To join the specified bss
+
+Command Event Mode
+
+*/
+struct joinbss_parm {
+       WLAN_BSSID_EX network;
+};
+
+/*
+Caller Mode: Infra, Ad-HoC(C)
+
+Notes: To disconnect the current associated BSS
+
+Command Mode
+
+*/
+struct disconnect_parm {
+       u32 deauth_timeout_ms;
+};
+
+/*
+Caller Mode: AP, Ad-HoC(M)
+
+Notes: To create a BSS
+
+Command Mode
+*/
+struct createbss_parm {
+       WLAN_BSSID_EX network;
+};
+
+/*
+Caller Mode: AP, Ad-HoC, Infra
+
+Notes: To set the NIC mode of RTL8711
+
+Command Mode
+
+The definition of mode:
+
+#define IW_MODE_AUTO   0       // Let the driver decides which AP to join
+#define IW_MODE_ADHOC  1       // Single cell network (Ad-Hoc Clients)
+#define IW_MODE_INFRA  2       // Multi cell network, roaming, ..
+#define IW_MODE_MASTER 3       // Synchronisation master or Access Point
+#define IW_MODE_REPEAT 4       // Wireless Repeater (forwarder)
+#define IW_MODE_SECOND 5       // Secondary master/repeater (backup)
+#define IW_MODE_MONITOR        6       // Passive monitor (listen only)
+
+*/
+struct setopmode_parm {
+       u8      mode;
+       u8      rsvd[3];
+};
+
+/*
+Caller Mode: AP, Ad-HoC, Infra
+
+Notes: To ask RTL8711 performing site-survey
+
+Command-Event Mode
+
+*/
+
+#define RTW_SSID_SCAN_AMOUNT 9 // for WEXT_CSCAN_AMOUNT 9
+#define RTW_CHANNEL_SCAN_AMOUNT (14+37)
+struct sitesurvey_parm {
+       sint scan_mode; //active: 1, passive: 0
+       /* sint bsslimit;       // 1 ~ 48 */
+       u8 ssid_num;
+       u8 ch_num;
+       NDIS_802_11_SSID ssid[RTW_SSID_SCAN_AMOUNT];
+       struct rtw_ieee80211_channel ch[RTW_CHANNEL_SCAN_AMOUNT];
+};
+
+/*
+Caller Mode: Any
+
+Notes: To set the auth type of RTL8711. open/shared/802.1x
+
+Command Mode
+
+*/
+struct setauth_parm {
+       u8 mode;  //0: legacy open, 1: legacy shared 2: 802.1x
+       u8 _1x;   //0: PSK, 1: TLS
+       u8 rsvd[2];
+};
+
+/*
+Caller Mode: Infra
+
+a. algorithm: wep40, wep104, tkip & aes
+b. keytype: grp key/unicast key
+c. key contents
+
+when shared key ==> keyid is the camid
+when 802.1x ==> keyid [0:1] ==> grp key
+when 802.1x ==> keyid > 2 ==> unicast key
+
+*/
+struct setkey_parm {
+       u8      algorithm;      // encryption algorithm, could be none, wep40, TKIP, CCMP, wep104
+       u8      keyid;
+       u8      grpkey;         // 1: this is the grpkey for 802.1x. 0: this is the unicast key for 802.1x
+       u8      set_tx;         // 1: main tx key for wep. 0: other key.
+       u8      key[16];        // this could be 40 or 104
+};
+
+/*
+When in AP or Ad-Hoc mode, this is used to
+allocate an sw/hw entry for a newly associated sta.
+
+Command
+
+when shared key ==> algorithm/keyid
+
+*/
+struct set_stakey_parm {
+       u8      addr[ETH_ALEN];
+       u8      algorithm;
+       u8      id;// currently for erasing cam entry if algorithm == _NO_PRIVACY_
+       u8      key[16];
+};
+
+struct set_stakey_rsp {
+       u8      addr[ETH_ALEN];
+       u8      keyid;
+       u8      rsvd;
+};
+
+/*
+Caller Ad-Hoc/AP
+
+Command -Rsp(AID == CAMID) mode
+
+This is to force fw to add an sta_data entry per driver's request.
+
+FW will write an cam entry associated with it.
+
+*/
+struct set_assocsta_parm {
+       u8      addr[ETH_ALEN];
+};
+
+struct set_assocsta_rsp {
+       u8      cam_id;
+       u8      rsvd[3];
+};
+
+/*
+       Caller Ad-Hoc/AP
+
+       Command mode
+
+       This is to force fw to del an sta_data entry per driver's request
+
+       FW will invalidate the cam entry associated with it.
+
+*/
+struct del_assocsta_parm {
+       u8      addr[ETH_ALEN];
+};
+
+/*
+Caller Mode: AP/Ad-HoC(M)
+
+Notes: To notify fw that given staid has changed its power state
+
+Command Mode
+
+*/
+struct setstapwrstate_parm {
+       u8      staid;
+       u8      status;
+       u8      hwaddr[6];
+};
+
+/*
+Caller Mode: Any
+
+Notes: To setup the basic rate of RTL8711
+
+Command Mode
+
+*/
+struct setbasicrate_parm {
+       u8      basicrates[NumRates];
+};
+
+/*
+Caller Mode: Any
+
+Notes: To read the current basic rate
+
+Command-Rsp Mode
+
+*/
+struct getbasicrate_parm {
+       u32 rsvd;
+};
+
+struct getbasicrate_rsp {
+       u8 basicrates[NumRates];
+};
+
+/*
+Caller Mode: Any
+
+Notes: To setup the data rate of RTL8711
+
+Command Mode
+
+*/
+struct setdatarate_parm {
+#ifdef MP_FIRMWARE_OFFLOAD
+       u32     curr_rateidx;
+#else
+       u8      mac_id;
+       u8      datarates[NumRates];
+#endif
+};
+
+/*
+Caller Mode: Any
+
+Notes: To read the current data rate
+
+Command-Rsp Mode
+
+*/
+struct getdatarate_parm {
+       u32 rsvd;
+
+};
+struct getdatarate_rsp {
+       u8 datarates[NumRates];
+};
+
+
+/*
+Caller Mode: Any
+AP: AP can use the info for the contents of beacon frame
+Infra: STA can use the info when sitesurveying
+Ad-HoC(M): Like AP
+Ad-HoC(C): Like STA
+
+
+Notes: To set the phy capability of the NIC
+
+Command Mode
+
+*/
+
+struct setphyinfo_parm {
+       struct regulatory_class class_sets[NUM_REGULATORYS];
+       u8      status;
+};
+
+struct getphyinfo_parm {
+       u32 rsvd;
+};
+
+struct getphyinfo_rsp {
+       struct regulatory_class class_sets[NUM_REGULATORYS];
+       u8      status;
+};
+
+/*
+Caller Mode: Any
+
+Notes: To set the channel/modem/band
+This command will be used when channel/modem/band is changed.
+
+Command Mode
+
+*/
+struct setphy_parm {
+       u8      rfchannel;
+       u8      modem;
+};
+
+/*
+Caller Mode: Any
+
+Notes: To get the current setting of channel/modem/band
+
+Command-Rsp Mode
+
+*/
+struct getphy_parm {
+       u32 rsvd;
+
+};
+struct getphy_rsp {
+       u8      rfchannel;
+       u8      modem;
+};
+
+struct readBB_parm {
+       u8      offset;
+};
+struct readBB_rsp {
+       u8      value;
+};
+
+struct readTSSI_parm {
+       u8      offset;
+};
+struct readTSSI_rsp {
+       u8      value;
+};
+
+struct writeBB_parm {
+       u8      offset;
+       u8      value;
+};
+
+struct readRF_parm {
+       u8      offset;
+};
+struct readRF_rsp {
+       u32     value;
+};
+
+struct writeRF_parm {
+       u32     offset;
+       u32     value;
+};
+
+struct getrfintfs_parm {
+       u8      rfintfs;
+};
+
+
+struct Tx_Beacon_param
+{
+       WLAN_BSSID_EX network;
+};
+
+/*
+       Notes: This command is used for H2C/C2H loopback testing
+
+       mac[0] == 0
+       ==> CMD mode, return H2C_SUCCESS.
+       The following condition must be ture under CMD mode
+               mac[1] == mac[4], mac[2] == mac[3], mac[0]=mac[5]= 0;
+               s0 == 0x1234, s1 == 0xabcd, w0 == 0x78563412, w1 == 0x5aa5def7;
+               s2 == (b1 << 8 | b0);
+
+       mac[0] == 1
+       ==> CMD_RSP mode, return H2C_SUCCESS_RSP
+
+       The rsp layout shall be:
+       rsp:                    parm:
+               mac[0]  =   mac[5];
+               mac[1]  =   mac[4];
+               mac[2]  =   mac[3];
+               mac[3]  =   mac[2];
+               mac[4]  =   mac[1];
+               mac[5]  =   mac[0];
+               s0              =   s1;
+               s1              =   swap16(s0);
+               w0              =       swap32(w1);
+               b0              =       b1
+               s2              =       s0 + s1
+               b1              =       b0
+               w1              =       w0
+
+       mac[0] ==       2
+       ==> CMD_EVENT mode, return      H2C_SUCCESS
+       The event layout shall be:
+       event:                  parm:
+               mac[0]  =   mac[5];
+               mac[1]  =   mac[4];
+               mac[2]  =   event's sequence number, starting from 1 to parm's marc[3]
+               mac[3]  =   mac[2];
+               mac[4]  =   mac[1];
+               mac[5]  =   mac[0];
+               s0              =   swap16(s0) - event.mac[2];
+               s1              =   s1 + event.mac[2];
+               w0              =       swap32(w0);
+               b0              =       b1
+               s2              =       s0 + event.mac[2]
+               b1              =       b0
+               w1              =       swap32(w1) - event.mac[2];
+
+               parm->mac[3] is the total event counts that host requested.
+
+
+       event will be the same with the cmd's param.
+
+*/
+
+#ifdef CONFIG_H2CLBK
+
+struct seth2clbk_parm {
+       u8 mac[6];
+       u16     s0;
+       u16     s1;
+       u32     w0;
+       u8      b0;
+       u16  s2;
+       u8      b1;
+       u32     w1;
+};
+
+struct geth2clbk_parm {
+       u32 rsv;
+};
+
+struct geth2clbk_rsp {
+       u8      mac[6];
+       u16     s0;
+       u16     s1;
+       u32     w0;
+       u8      b0;
+       u16     s2;
+       u8      b1;
+       u32     w1;
+};
+
+#endif /* CONFIG_H2CLBK */
+
+// CMD param Formart for driver extra cmd handler
+struct drvextra_cmd_parm {
+       int ec_id; //extra cmd id
+       int type_size; // Can use this field as the type id or command size
+       unsigned char *pbuf;
+};
+
+/*------------------- Below are used for RF/BB tunning ---------------------*/
+
+struct setantenna_parm {
+       u8      tx_antset;
+       u8      rx_antset;
+       u8      tx_antenna;
+       u8      rx_antenna;
+};
+
+struct enrateadaptive_parm {
+       u32     en;
+};
+
+struct settxagctbl_parm {
+       u32     txagc[MAX_RATES_LENGTH];
+};
+
+struct gettxagctbl_parm {
+       u32 rsvd;
+};
+struct gettxagctbl_rsp {
+       u32     txagc[MAX_RATES_LENGTH];
+};
+
+struct setagcctrl_parm {
+       u32     agcctrl;                // 0: pure hw, 1: fw
+};
+
+
+struct setssup_parm    {
+       u32     ss_ForceUp[MAX_RATES_LENGTH];
+};
+
+struct getssup_parm    {
+       u32 rsvd;
+};
+struct getssup_rsp     {
+       u8      ss_ForceUp[MAX_RATES_LENGTH];
+};
+
+
+struct setssdlevel_parm        {
+       u8      ss_DLevel[MAX_RATES_LENGTH];
+};
+
+struct getssdlevel_parm        {
+       u32 rsvd;
+};
+struct getssdlevel_rsp {
+       u8      ss_DLevel[MAX_RATES_LENGTH];
+};
+
+struct setssulevel_parm        {
+       u8      ss_ULevel[MAX_RATES_LENGTH];
+};
+
+struct getssulevel_parm        {
+       u32 rsvd;
+};
+struct getssulevel_rsp {
+       u8      ss_ULevel[MAX_RATES_LENGTH];
+};
+
+
+struct setcountjudge_parm {
+       u8      count_judge[MAX_RATES_LENGTH];
+};
+
+struct getcountjudge_parm {
+       u32 rsvd;
+};
+struct getcountjudge_rsp {
+       u8      count_judge[MAX_RATES_LENGTH];
+};
+
+
+struct setratable_parm {
+       u8 ss_ForceUp[NumRates];
+       u8 ss_ULevel[NumRates];
+       u8 ss_DLevel[NumRates];
+       u8 count_judge[NumRates];
+};
+
+struct getratable_parm {
+                uint rsvd;
+};
+struct getratable_rsp {
+        u8 ss_ForceUp[NumRates];
+        u8 ss_ULevel[NumRates];
+        u8 ss_DLevel[NumRates];
+        u8 count_judge[NumRates];
+};
+
+
+//to get TX,RX retry count
+struct gettxretrycnt_parm{
+       unsigned int rsvd;
+};
+struct gettxretrycnt_rsp{
+       unsigned long tx_retrycnt;
+};
+
+struct getrxretrycnt_parm{
+       unsigned int rsvd;
+};
+struct getrxretrycnt_rsp{
+       unsigned long rx_retrycnt;
+};
+
+//to get BCNOK,BCNERR count
+struct getbcnokcnt_parm{
+       unsigned int rsvd;
+};
+struct getbcnokcnt_rsp{
+       unsigned long  bcnokcnt;
+};
+
+struct getbcnerrcnt_parm{
+       unsigned int rsvd;
+};
+struct getbcnerrcnt_rsp{
+       unsigned long bcnerrcnt;
+};
+
+// to get current TX power level
+struct getcurtxpwrlevel_parm{
+       unsigned int rsvd;
+};
+struct getcurtxpwrlevel_rsp{
+       unsigned short tx_power;
+};
+
+struct setprobereqextraie_parm {
+       unsigned char e_id;
+       unsigned char ie_len;
+       unsigned char ie[0];
+};
+
+struct setassocreqextraie_parm {
+       unsigned char e_id;
+       unsigned char ie_len;
+       unsigned char ie[0];
+};
+
+struct setproberspextraie_parm {
+       unsigned char e_id;
+       unsigned char ie_len;
+       unsigned char ie[0];
+};
+
+struct setassocrspextraie_parm {
+       unsigned char e_id;
+       unsigned char ie_len;
+       unsigned char ie[0];
+};
+
+
+struct addBaReq_parm
+{
+       unsigned int tid;
+       u8      addr[ETH_ALEN];
+};
+
+/*H2C Handler index: 46 */
+struct set_ch_parm {
+       u8 ch;
+       u8 bw;
+       u8 ch_offset;
+};
+
+#ifdef MP_FIRMWARE_OFFLOAD
+/*H2C Handler index: 47 */
+struct SetTxPower_parm
+{
+       u8 TxPower;
+};
+
+/*H2C Handler index: 48 */
+struct SwitchAntenna_parm
+{
+       u16 antenna_tx;
+       u16 antenna_rx;
+//     R_ANTENNA_SELECT_CCK cck_txrx;
+       u8 cck_txrx;
+};
+
+/*H2C Handler index: 49 */
+struct SetCrystalCap_parm
+{
+       u32 curr_crystalcap;
+};
+
+/*H2C Handler index: 50 */
+struct SetSingleCarrierTx_parm
+{
+       u8 bStart;
+};
+
+/*H2C Handler index: 51 */
+struct SetSingleToneTx_parm
+{
+       u8 bStart;
+       u8 curr_rfpath;
+};
+
+/*H2C Handler index: 52 */
+struct SetCarrierSuppressionTx_parm
+{
+       u8 bStart;
+       u32 curr_rateidx;
+};
+
+/*H2C Handler index: 53 */
+struct SetContinuousTx_parm
+{
+       u8 bStart;
+       u8 CCK_flag; /*1:CCK 2:OFDM*/
+       u32 curr_rateidx;
+};
+
+/*H2C Handler index: 54 */
+struct SwitchBandwidth_parm
+{
+       u8 curr_bandwidth;
+};
+
+#endif /* MP_FIRMWARE_OFFLOAD */
+
+/*H2C Handler index: 59 */
+struct SetChannelPlan_param
+{
+       u8 channel_plan;
+};
+
+/*H2C Handler index: 60 */
+struct LedBlink_param
+{
+       PLED_871x        pLed;
+};
+
+/*H2C Handler index: 61 */
+struct SetChannelSwitch_param
+{
+       u8 new_ch_no;
+};
+
+/*H2C Handler index: 62 */
+struct TDLSoption_param
+{
+       u8 addr[ETH_ALEN];
+       u8 option;
+};
+
+#define GEN_CMD_CODE(cmd)      cmd ## _CMD_
+
+
+/*
+
+Result:
+0x00: success
+0x01: sucess, and check Response.
+0x02: cmd ignored due to duplicated sequcne number
+0x03: cmd dropped due to invalid cmd code
+0x04: reserved.
+
+*/
+
+#define H2C_RSP_OFFSET                 512
+
+#define H2C_SUCCESS                    0x00
+#define H2C_SUCCESS_RSP                        0x01
+#define H2C_DUPLICATED                 0x02
+#define H2C_DROPPED                    0x03
+#define H2C_PARAMETERS_ERROR           0x04
+#define H2C_REJECTED                   0x05
+#define H2C_CMD_OVERFLOW               0x06
+#define H2C_RESERVED                   0x07
+
+extern u8 rtw_setassocsta_cmd(_adapter  *padapter, u8 *mac_addr);
+extern u8 rtw_setstandby_cmd(_adapter *padapter, uint action);
+u8 rtw_sitesurvey_cmd(_adapter  *padapter, NDIS_802_11_SSID *ssid, int ssid_num, struct rtw_ieee80211_channel *ch, int ch_num);
+extern u8 rtw_createbss_cmd(_adapter  *padapter);
+extern u8 rtw_createbss_cmd_ex(_adapter  *padapter, unsigned char *pbss, unsigned int sz);
+extern u8 rtw_setphy_cmd(_adapter  *padapter, u8 modem, u8 ch);
+extern u8 rtw_setstakey_cmd(_adapter  *padapter, u8 *psta, u8 unicast_key);
+extern u8 rtw_clearstakey_cmd(_adapter *padapter, u8 *psta, u8 entry, u8 enqueue);
+extern u8 rtw_joinbss_cmd(_adapter  *padapter, struct wlan_network* pnetwork);
+u8 rtw_disassoc_cmd(_adapter *padapter, u32 deauth_timeout_ms, bool enqueue);
+extern u8 rtw_setopmode_cmd(_adapter  *padapter, NDIS_802_11_NETWORK_INFRASTRUCTURE networktype);
+extern u8 rtw_setdatarate_cmd(_adapter  *padapter, u8 *rateset);
+extern u8 rtw_setbasicrate_cmd(_adapter  *padapter, u8 *rateset);
+extern u8 rtw_setbbreg_cmd(_adapter * padapter, u8 offset, u8 val);
+extern u8 rtw_setrfreg_cmd(_adapter * padapter, u8 offset, u32 val);
+extern u8 rtw_getbbreg_cmd(_adapter * padapter, u8 offset, u8 * pval);
+extern u8 rtw_getrfreg_cmd(_adapter * padapter, u8 offset, u8 * pval);
+extern u8 rtw_setrfintfs_cmd(_adapter  *padapter, u8 mode);
+extern u8 rtw_setrttbl_cmd(_adapter  *padapter, struct setratable_parm *prate_table);
+extern u8 rtw_getrttbl_cmd(_adapter  *padapter, struct getratable_rsp *pval);
+
+extern u8 rtw_gettssi_cmd(_adapter  *padapter, u8 offset,u8 *pval);
+extern u8 rtw_setfwdig_cmd(_adapter*padapter, u8 type);
+extern u8 rtw_setfwra_cmd(_adapter*padapter, u8 type);
+
+extern u8 rtw_addbareq_cmd(_adapter*padapter, u8 tid, u8 *addr);
+// add for CONFIG_IEEE80211W, none 11w also can use
+extern u8 rtw_reset_securitypriv_cmd(_adapter*padapter);
+extern u8 rtw_free_assoc_resources_cmd(_adapter *padapter);
+extern u8 rtw_dynamic_chk_wk_cmd(_adapter *adapter);
+
+u8 rtw_lps_ctrl_wk_cmd(_adapter*padapter, u8 lps_ctrl_type, u8 enqueue);
+
+#ifdef CONFIG_ANTENNA_DIVERSITY
+extern  u8 rtw_antenna_select_cmd(_adapter*padapter, u8 antenna,u8 enqueue);
+#endif
+
+extern u8 rtw_ps_cmd(_adapter*padapter);
+
+
+#ifdef CONFIG_AP_MODE
+u8 rtw_chk_hi_queue_cmd(_adapter*padapter);
+#endif
+
+u8 rtw_set_ch_cmd(_adapter*padapter, u8 ch, u8 bw, u8 ch_offset, u8 enqueue);
+extern u8 rtw_set_chplan_cmd(_adapter*padapter, u8 chplan, u8 enqueue);
+extern u8 rtw_led_blink_cmd(_adapter*padapter, PLED_871x pLed);
+extern u8 rtw_set_csa_cmd(_adapter*padapter, u8 new_ch_no);
+extern u8 rtw_tdls_cmd(_adapter*padapter, u8 *addr, u8 option);
+
+extern u8 rtw_c2h_wk_cmd(PADAPTER padapter, u8 *c2h_evt);
+
+u8 rtw_drvextra_cmd_hdl(_adapter *padapter, unsigned char *pbuf);
+
+extern void rtw_survey_cmd_callback(_adapter  *padapter, struct cmd_obj *pcmd);
+extern void rtw_disassoc_cmd_callback(_adapter  *padapter, struct cmd_obj *pcmd);
+extern void rtw_joinbss_cmd_callback(_adapter  *padapter, struct cmd_obj *pcmd);
+extern void rtw_createbss_cmd_callback(_adapter  *padapter, struct cmd_obj *pcmd);
+extern void rtw_getbbrfreg_cmdrsp_callback(_adapter  *padapter, struct cmd_obj *pcmd);
+extern void rtw_readtssi_cmdrsp_callback(_adapter*     padapter,  struct cmd_obj *pcmd);
+
+extern void rtw_setstaKey_cmdrsp_callback(_adapter  *padapter,  struct cmd_obj *pcmd);
+extern void rtw_setassocsta_cmdrsp_callback(_adapter  *padapter,  struct cmd_obj *pcmd);
+extern void rtw_getrttbl_cmdrsp_callback(_adapter  *padapter,  struct cmd_obj *pcmd);
+
+
+struct _cmd_callback {
+       u32     cmd_code;
+       void (*callback)(_adapter  *padapter, struct cmd_obj *cmd);
+};
+
+enum rtw_h2c_cmd
+{
+       GEN_CMD_CODE(_Read_MACREG) ,    /*0*/
+       GEN_CMD_CODE(_Write_MACREG) ,
+       GEN_CMD_CODE(_Read_BBREG) ,
+       GEN_CMD_CODE(_Write_BBREG) ,
+       GEN_CMD_CODE(_Read_RFREG) ,
+       GEN_CMD_CODE(_Write_RFREG) , /*5*/
+       GEN_CMD_CODE(_Read_EEPROM) ,
+       GEN_CMD_CODE(_Write_EEPROM) ,
+       GEN_CMD_CODE(_Read_EFUSE) ,
+       GEN_CMD_CODE(_Write_EFUSE) ,
+
+       GEN_CMD_CODE(_Read_CAM) ,       /*10*/
+       GEN_CMD_CODE(_Write_CAM) ,
+       GEN_CMD_CODE(_setBCNITV),
+       GEN_CMD_CODE(_setMBIDCFG),
+       GEN_CMD_CODE(_JoinBss),   /*14*/
+       GEN_CMD_CODE(_DisConnect) , /*15*/
+       GEN_CMD_CODE(_CreateBss) ,
+       GEN_CMD_CODE(_SetOpMode) ,
+       GEN_CMD_CODE(_SiteSurvey),  /*18*/
+       GEN_CMD_CODE(_SetAuth) ,
+
+       GEN_CMD_CODE(_SetKey) , /*20*/
+       GEN_CMD_CODE(_SetStaKey) ,
+       GEN_CMD_CODE(_SetAssocSta) ,
+       GEN_CMD_CODE(_DelAssocSta) ,
+       GEN_CMD_CODE(_SetStaPwrState) ,
+       GEN_CMD_CODE(_SetBasicRate) , /*25*/
+       GEN_CMD_CODE(_GetBasicRate) ,
+       GEN_CMD_CODE(_SetDataRate) ,
+       GEN_CMD_CODE(_GetDataRate) ,
+       GEN_CMD_CODE(_SetPhyInfo) ,
+
+       GEN_CMD_CODE(_GetPhyInfo) ,     /*30*/
+       GEN_CMD_CODE(_SetPhy) ,
+       GEN_CMD_CODE(_GetPhy) ,
+       GEN_CMD_CODE(_readRssi) ,
+       GEN_CMD_CODE(_readGain) ,
+       GEN_CMD_CODE(_SetAtim) , /*35*/
+       GEN_CMD_CODE(_SetPwrMode) ,
+       GEN_CMD_CODE(_JoinbssRpt),
+       GEN_CMD_CODE(_SetRaTable) ,
+       GEN_CMD_CODE(_GetRaTable) ,
+
+       GEN_CMD_CODE(_GetCCXReport), /*40*/
+       GEN_CMD_CODE(_GetDTMReport),
+       GEN_CMD_CODE(_GetTXRateStatistics),
+       GEN_CMD_CODE(_SetUsbSuspend),
+       GEN_CMD_CODE(_SetH2cLbk),
+       GEN_CMD_CODE(_AddBAReq) , /*45*/
+       GEN_CMD_CODE(_SetChannel), /*46*/
+       GEN_CMD_CODE(_SetTxPower),
+       GEN_CMD_CODE(_SwitchAntenna),
+       GEN_CMD_CODE(_SetCrystalCap),
+       GEN_CMD_CODE(_SetSingleCarrierTx), /*50*/
+
+       GEN_CMD_CODE(_SetSingleToneTx),/*51*/
+       GEN_CMD_CODE(_SetCarrierSuppressionTx),
+       GEN_CMD_CODE(_SetContinuousTx),
+       GEN_CMD_CODE(_SwitchBandwidth), /*54*/
+       GEN_CMD_CODE(_TX_Beacon), /*55*/
+
+       GEN_CMD_CODE(_Set_MLME_EVT), /*56*/
+       GEN_CMD_CODE(_Set_Drv_Extra), /*57*/
+       GEN_CMD_CODE(_Set_H2C_MSG), /*58*/
+
+       GEN_CMD_CODE(_SetChannelPlan), /*59*/
+       GEN_CMD_CODE(_LedBlink), /*60*/
+
+       GEN_CMD_CODE(_SetChannelSwitch), /*61*/
+       GEN_CMD_CODE(_TDLS), /*62*/
+
+       MAX_H2CCMD
+};
+
+#define _GetBBReg_CMD_         _Read_BBREG_CMD_
+#define _SetBBReg_CMD_                 _Write_BBREG_CMD_
+#define _GetRFReg_CMD_                 _Read_RFREG_CMD_
+#define _SetRFReg_CMD_                 _Write_RFREG_CMD_
+
+#ifdef _RTW_CMD_C_
+struct _cmd_callback   rtw_cmd_callback[] =
+{
+       {GEN_CMD_CODE(_Read_MACREG), NULL}, /*0*/
+       {GEN_CMD_CODE(_Write_MACREG), NULL},
+       {GEN_CMD_CODE(_Read_BBREG), &rtw_getbbrfreg_cmdrsp_callback},
+       {GEN_CMD_CODE(_Write_BBREG), NULL},
+       {GEN_CMD_CODE(_Read_RFREG), &rtw_getbbrfreg_cmdrsp_callback},
+       {GEN_CMD_CODE(_Write_RFREG), NULL}, /*5*/
+       {GEN_CMD_CODE(_Read_EEPROM), NULL},
+       {GEN_CMD_CODE(_Write_EEPROM), NULL},
+       {GEN_CMD_CODE(_Read_EFUSE), NULL},
+       {GEN_CMD_CODE(_Write_EFUSE), NULL},
+
+       {GEN_CMD_CODE(_Read_CAM),       NULL},  /*10*/
+       {GEN_CMD_CODE(_Write_CAM),       NULL},
+       {GEN_CMD_CODE(_setBCNITV), NULL},
+       {GEN_CMD_CODE(_setMBIDCFG), NULL},
+       {GEN_CMD_CODE(_JoinBss), &rtw_joinbss_cmd_callback},  /*14*/
+       {GEN_CMD_CODE(_DisConnect), &rtw_disassoc_cmd_callback}, /*15*/
+       {GEN_CMD_CODE(_CreateBss), &rtw_createbss_cmd_callback},
+       {GEN_CMD_CODE(_SetOpMode), NULL},
+       {GEN_CMD_CODE(_SiteSurvey), &rtw_survey_cmd_callback}, /*18*/
+       {GEN_CMD_CODE(_SetAuth), NULL},
+
+       {GEN_CMD_CODE(_SetKey), NULL},  /*20*/
+       {GEN_CMD_CODE(_SetStaKey), &rtw_setstaKey_cmdrsp_callback},
+       {GEN_CMD_CODE(_SetAssocSta), &rtw_setassocsta_cmdrsp_callback},
+       {GEN_CMD_CODE(_DelAssocSta), NULL},
+       {GEN_CMD_CODE(_SetStaPwrState), NULL},
+       {GEN_CMD_CODE(_SetBasicRate), NULL}, /*25*/
+       {GEN_CMD_CODE(_GetBasicRate), NULL},
+       {GEN_CMD_CODE(_SetDataRate), NULL},
+       {GEN_CMD_CODE(_GetDataRate), NULL},
+       {GEN_CMD_CODE(_SetPhyInfo), NULL},
+
+       {GEN_CMD_CODE(_GetPhyInfo), NULL}, /*30*/
+       {GEN_CMD_CODE(_SetPhy), NULL},
+       {GEN_CMD_CODE(_GetPhy), NULL},
+       {GEN_CMD_CODE(_readRssi), NULL},
+       {GEN_CMD_CODE(_readGain), NULL},
+       {GEN_CMD_CODE(_SetAtim), NULL}, /*35*/
+       {GEN_CMD_CODE(_SetPwrMode), NULL},
+       {GEN_CMD_CODE(_JoinbssRpt), NULL},
+       {GEN_CMD_CODE(_SetRaTable), NULL},
+       {GEN_CMD_CODE(_GetRaTable) , NULL},
+
+       {GEN_CMD_CODE(_GetCCXReport), NULL}, /*40*/
+       {GEN_CMD_CODE(_GetDTMReport),   NULL},
+       {GEN_CMD_CODE(_GetTXRateStatistics), NULL},
+       {GEN_CMD_CODE(_SetUsbSuspend), NULL},
+       {GEN_CMD_CODE(_SetH2cLbk), NULL},
+       {GEN_CMD_CODE(_AddBAReq), NULL}, /*45*/
+       {GEN_CMD_CODE(_SetChannel), NULL},              /*46*/
+       {GEN_CMD_CODE(_SetTxPower), NULL},
+       {GEN_CMD_CODE(_SwitchAntenna), NULL},
+       {GEN_CMD_CODE(_SetCrystalCap), NULL},
+       {GEN_CMD_CODE(_SetSingleCarrierTx), NULL},      /*50*/
+
+       {GEN_CMD_CODE(_SetSingleToneTx), NULL}, /*51*/
+       {GEN_CMD_CODE(_SetCarrierSuppressionTx), NULL},
+       {GEN_CMD_CODE(_SetContinuousTx), NULL},
+       {GEN_CMD_CODE(_SwitchBandwidth), NULL},         /*54*/
+       {GEN_CMD_CODE(_TX_Beacon), NULL},/*55*/
+
+       {GEN_CMD_CODE(_Set_MLME_EVT), NULL},/*56*/
+       {GEN_CMD_CODE(_Set_Drv_Extra), NULL},/*57*/
+       {GEN_CMD_CODE(_Set_H2C_MSG), NULL},/*58*/
+       {GEN_CMD_CODE(_SetChannelPlan), NULL},/*59*/
+       {GEN_CMD_CODE(_LedBlink), NULL},/*60*/
+
+       {GEN_CMD_CODE(_SetChannelSwitch), NULL},/*61*/
+       {GEN_CMD_CODE(_TDLS), NULL},/*62*/
+};
+#endif
+
+#endif // _CMD_H_
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtw_debug.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtw_debug.h
new file mode 100644 (file)
index 0000000..9c72f70
--- /dev/null
@@ -0,0 +1,537 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __RTW_DEBUG_H__
+#define __RTW_DEBUG_H__
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+
+
+#define        _no_debug_                      0
+#define _drv_emerg_                    1
+#define _drv_alert_                    2
+#define _drv_crit_                     3
+#define _drv_err_                      4
+#define        _drv_warning_           5
+#define _drv_notice_                   6
+#define _drv_info_                     7
+#define _drv_dump_                     8
+#define        _drv_debug_             9
+#define _drv_always_ _drv_emerg_
+
+#define _module_rtl871x_xmit_c_                BIT(0)
+#define _module_xmit_osdep_c_          BIT(1)
+#define _module_rtl871x_recv_c_                BIT(2)
+#define _module_recv_osdep_c_          BIT(3)
+#define _module_rtl871x_mlme_c_                BIT(4)
+#define _module_mlme_osdep_c_          BIT(5)
+#define _module_rtl871x_sta_mgt_c_             BIT(6)
+#define _module_rtl871x_cmd_c_                 BIT(7)
+#define _module_cmd_osdep_c_           BIT(8)
+#define _module_rtl871x_io_c_                          BIT(9)
+#define _module_io_osdep_c_            BIT(10)
+#define _module_os_intfs_c_                    BIT(11)
+#define _module_rtl871x_security_c_            BIT(12)
+#define _module_rtl871x_eeprom_c_                      BIT(13)
+#define _module_hal_init_c_            BIT(14)
+#define _module_hci_hal_init_c_                BIT(15)
+#define _module_rtl871x_ioctl_c_               BIT(16)
+#define _module_rtl871x_ioctl_set_c_           BIT(17)
+#define _module_rtl871x_ioctl_query_c_ BIT(18)
+#define _module_rtl871x_pwrctrl_c_                     BIT(19)
+#define _module_hci_intfs_c_                   BIT(20)
+#define _module_hci_ops_c_                     BIT(21)
+#define _module_osdep_service_c_                       BIT(22)
+#define _module_mp_                    BIT(23)
+#define _module_hci_ops_os_c_                  BIT(24)
+#define _module_rtl871x_ioctl_os_c             BIT(25)
+#define _module_rtl8712_cmd_c_         BIT(26)
+//#define _module_efuse_                       BIT(27)
+#define        _module_rtl8192c_xmit_c_ BIT(28)
+#define _module_hal_xmit_c_    BIT(28)
+#define _module_efuse_                 BIT(29)
+#define _module_rtl8712_recv_c_                BIT(30)
+#define _module_rtl8712_led_c_         BIT(31)
+
+#undef _MODULE_DEFINE_
+
+#if defined _RTW_XMIT_C_
+       #define _MODULE_DEFINE_ _module_rtl871x_xmit_c_
+#elif defined _XMIT_OSDEP_C_
+       #define _MODULE_DEFINE_ _module_xmit_osdep_c_
+#elif defined _RTW_RECV_C_
+       #define _MODULE_DEFINE_ _module_rtl871x_recv_c_
+#elif defined _RECV_OSDEP_C_
+       #define _MODULE_DEFINE_ _module_recv_osdep_c_
+#elif defined _RTW_MLME_C_
+       #define _MODULE_DEFINE_ _module_rtl871x_mlme_c_
+#elif defined _MLME_OSDEP_C_
+       #define _MODULE_DEFINE_ _module_mlme_osdep_c_
+#elif defined _RTW_MLME_EXT_C_
+       #define _MODULE_DEFINE_ 1
+#elif defined _RTW_STA_MGT_C_
+       #define _MODULE_DEFINE_ _module_rtl871x_sta_mgt_c_
+#elif defined _RTW_CMD_C_
+       #define _MODULE_DEFINE_ _module_rtl871x_cmd_c_
+#elif defined _CMD_OSDEP_C_
+       #define _MODULE_DEFINE_ _module_cmd_osdep_c_
+#elif defined _RTW_IO_C_
+       #define _MODULE_DEFINE_ _module_rtl871x_io_c_
+#elif defined _IO_OSDEP_C_
+       #define _MODULE_DEFINE_ _module_io_osdep_c_
+#elif defined _OS_INTFS_C_
+       #define _MODULE_DEFINE_ _module_os_intfs_c_
+#elif defined _RTW_SECURITY_C_
+       #define _MODULE_DEFINE_ _module_rtl871x_security_c_
+#elif defined _RTW_EEPROM_C_
+       #define _MODULE_DEFINE_ _module_rtl871x_eeprom_c_
+#elif defined _HAL_INTF_C_
+       #define _MODULE_DEFINE_ _module_hal_init_c_
+#elif defined _HCI_HAL_INIT_C_
+       #define _MODULE_DEFINE_ _module_hci_hal_init_c_
+#elif defined _RTL871X_IOCTL_C_
+       #define _MODULE_DEFINE_ _module_rtl871x_ioctl_c_
+#elif defined _RTL871X_IOCTL_SET_C_
+       #define _MODULE_DEFINE_ _module_rtl871x_ioctl_set_c_
+#elif defined _RTL871X_IOCTL_QUERY_C_
+       #define _MODULE_DEFINE_ _module_rtl871x_ioctl_query_c_
+#elif defined _RTL871X_PWRCTRL_C_
+       #define _MODULE_DEFINE_ _module_rtl871x_pwrctrl_c_
+#elif defined _RTW_PWRCTRL_C_
+       #define _MODULE_DEFINE_ 1
+#elif defined _HCI_INTF_C_
+       #define _MODULE_DEFINE_ _module_hci_intfs_c_
+#elif defined _HCI_OPS_C_
+       #define _MODULE_DEFINE_ _module_hci_ops_c_
+#elif defined _SDIO_OPS_C_
+       #define _MODULE_DEFINE_ 1
+#elif defined _OSDEP_HCI_INTF_C_
+       #define _MODULE_DEFINE_ _module_hci_intfs_c_
+#elif defined _OSDEP_SERVICE_C_
+       #define _MODULE_DEFINE_ _module_osdep_service_c_
+#elif defined _HCI_OPS_OS_C_
+       #define _MODULE_DEFINE_ _module_hci_ops_os_c_
+#elif defined _RTL871X_IOCTL_LINUX_C_
+       #define _MODULE_DEFINE_ _module_rtl871x_ioctl_os_c
+#elif defined _RTL8712_CMD_C_
+       #define _MODULE_DEFINE_ _module_rtl8712_cmd_c_
+#elif defined _RTL8192C_XMIT_C_
+       #define _MODULE_DEFINE_ 1
+#elif defined _RTL8723AS_XMIT_C_
+       #define _MODULE_DEFINE_ 1
+#elif defined _RTL8712_RECV_C_
+       #define _MODULE_DEFINE_ _module_rtl8712_recv_c_
+#elif defined _RTL8192CU_RECV_C_
+       #define _MODULE_DEFINE_ _module_rtl8712_recv_c_
+#elif defined _RTL871X_MLME_EXT_C_
+       #define _MODULE_DEFINE_ _module_mlme_osdep_c_
+#elif defined _RTW_MP_C_
+       #define _MODULE_DEFINE_ _module_mp_
+#elif defined _RTW_MP_IOCTL_C_
+       #define _MODULE_DEFINE_ _module_mp_
+#elif defined _RTW_EFUSE_C_
+       #define _MODULE_DEFINE_ _module_efuse_
+#endif
+
+#ifdef PLATFORM_OS_CE
+extern void rtl871x_cedbg(const char *fmt, ...);
+#endif
+
+#define RT_TRACE(_Comp, _Level, Fmt) do{}while(0)
+#define _func_enter_ do{}while(0)
+#define _func_exit_ do{}while(0)
+#define RT_PRINT_DATA(_Comp, _Level, _TitleString, _HexData, _HexDataLen) do{}while(0)
+
+#undef _dbgdump
+
+#ifdef CONFIG_DEBUG_RTL871X
+
+#ifndef _RTL871X_DEBUG_C_
+       extern u32 GlobalDebugLevel;
+       extern u64 GlobalDebugComponents;
+#endif
+
+#ifdef PLATFORM_WINDOWS
+
+       #ifdef PLATFORM_OS_XP
+
+       #define _dbgdump        DbgPrint
+
+       #elif defined PLATFORM_OS_CE
+
+       #define _dbgdump        rtl871x_cedbg
+
+       #endif
+
+#elif defined PLATFORM_LINUX
+
+       #define _dbgdump        printk
+
+#elif defined PLATFORM_FREEBSD
+
+       #define _dbgdump        printf
+
+#endif
+
+#endif /* CONFIG_DEBUG_RTL871X */
+
+
+#if    defined (_dbgdump) && defined (_MODULE_DEFINE_)
+
+               #undef RT_TRACE
+               #define RT_TRACE(_Comp, _Level, Fmt)\
+               do {\
+                       if((_Comp & GlobalDebugComponents) && (_Level <= GlobalDebugLevel)) {\
+                               _dbgdump("%s [0x%08x,%d]", RTL871X_MODULE_NAME, (unsigned int)_Comp, _Level);\
+                               _dbgdump Fmt;\
+                       }\
+               }while(0)
+
+#endif
+
+
+#if    defined (_dbgdump)
+
+               #undef  _func_enter_
+               #define _func_enter_ \
+               do {    \
+                       if (GlobalDebugLevel >= _drv_debug_) \
+                       {                                                                                                                                       \
+                               _dbgdump("\n %s : %s enters at %d\n", RTL871X_MODULE_NAME, __FUNCTION__, __LINE__);\
+                       }               \
+               } while(0)
+
+               #undef  _func_exit_
+               #define _func_exit_ \
+               do {    \
+                       if (GlobalDebugLevel >= _drv_debug_) \
+                       {                                                                                                                                       \
+                               _dbgdump("\n %s : %s exits at %d\n", RTL871X_MODULE_NAME, __FUNCTION__, __LINE__); \
+                       }       \
+               } while(0)
+
+               #undef RT_PRINT_DATA
+               #define RT_PRINT_DATA(_Comp, _Level, _TitleString, _HexData, _HexDataLen)                       \
+                       if(((_Comp) & GlobalDebugComponents) && (_Level <= GlobalDebugLevel))   \
+                       {                                                                       \
+                               int __i;                                                                \
+                               u8      *ptr = (u8 *)_HexData;                          \
+                               _dbgdump("Rtl871x: ");                                          \
+                               _dbgdump(_TitleString);                                         \
+                               for( __i=0; __i<(int)_HexDataLen; __i++ )                               \
+                               {                                                               \
+                                       _dbgdump("%02X%s", ptr[__i], (((__i + 1) % 4) == 0)?"  ":" ");  \
+                                       if (((__i + 1) % 16) == 0)      _dbgdump("\n");                 \
+                               }                                                               \
+                               _dbgdump("\n");                                                 \
+                       }
+#endif
+
+
+#ifdef CONFIG_DEBUG_RTL819X
+
+#undef _dbgdump
+
+#ifdef PLATFORM_WINDOWS
+
+       #ifdef PLATFORM_OS_XP
+
+       #define _dbgdump        DbgPrint
+
+       #elif defined PLATFORM_OS_CE
+
+       #define _dbgdump        rtl871x_cedbg
+
+       #endif
+
+#elif defined PLATFORM_LINUX
+
+       #define _dbgdump        printk
+
+#elif defined PLATFORM_FREEBSD
+
+       #define _dbgdump        printf
+
+#endif
+
+#endif /* CONFIG_DEBUG_RTL819X */
+
+
+#ifdef PLATFORM_WINDOWS
+       #define DBG_871X do {} while(0)
+       #define MSG_8192C do {} while(0)
+       #define DBG_8192C do {} while(0)
+       #define WRN_8192C do {} while(0)
+       #define ERR_8192C do {} while(0)
+#endif
+
+#ifdef PLATFORM_LINUX
+       #define DBG_871X(x, ...) do {} while(0)
+       #define MSG_8192C(x, ...) do {} while(0)
+       #define DBG_8192C(x,...) do {} while(0)
+       #define WRN_8192C(x,...) do {} while(0)
+       #define ERR_8192C(x,...) do {} while(0)
+#endif
+
+#ifdef PLATFORM_FREEBSD
+       #define _dbgdump        printf
+       #define DBG_871X(x, ...) do {} while(0)
+       #define MSG_8192C(x, ...) do {} while(0)
+       #define DBG_8192C(x,...) do {} while(0)
+       #define WRN_8192C(x,...) do {} while(0)
+       #define ERR_8192C(x,...) do {} while(0)
+#endif
+
+extern u32 GlobalDebugLevel;
+#define LOG_LEVEL(level, ...)\
+                do {\
+                        if(level <= GlobalDebugLevel) {\
+                                printk(__VA_ARGS__);\
+                        }\
+                }while(0)
+
+#define DBG_871X_LEVEL LOG_LEVEL
+
+#if     defined (_dbgdump)
+        #undef DBG_871X
+//      #define DBG_871X _dbgdump
+        #define DBG_871X(...) LOG_LEVEL(_drv_emerg_ , __VA_ARGS__)
+
+        #undef MSG_8192C
+//      #define MSG_8192C _dbgdump
+        #define MSG_8192C(...) LOG_LEVEL(_drv_emerg_ , __VA_ARGS__)
+
+        #undef DBG_8192C
+//      #define DBG_8192C _dbgdump
+        #define DBG_8192C(...) LOG_LEVEL(_drv_emerg_ ,  __VA_ARGS__)
+
+
+       #undef WRN_8192C
+       #define WRN_8192C _dbgdump
+
+       #undef ERR_8192C
+       #define ERR_8192C _dbgdump
+#endif
+
+
+#ifdef CONFIG_PROC_DEBUG
+
+       int proc_get_drv_version(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data);
+
+       int proc_get_log_level(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data);
+
+       int proc_set_log_level(struct file *file, const char *buffer,
+                       unsigned long count, void *data);
+
+#ifdef DBG_MEM_ALLOC
+       int proc_get_mstat(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data);
+#endif /* DBG_MEM_ALLOC */
+
+       int proc_get_write_reg(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data);
+
+       int proc_set_write_reg(struct file *file, const char *buffer,
+               unsigned long count, void *data);
+
+       int proc_get_read_reg(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data);
+
+       int proc_set_read_reg(struct file *file, const char *buffer,
+               unsigned long count, void *data);
+
+
+       int proc_get_fwstate(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data);
+
+       int proc_get_sec_info(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data);
+
+       int proc_get_mlmext_state(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data);
+
+       int proc_get_qos_option(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data);
+
+       int proc_get_ht_option(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data);
+
+       int proc_get_rf_info(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data);
+
+       int proc_get_ap_info(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data);
+
+       int proc_get_adapter_state(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data);
+
+       int proc_get_trx_info(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data);
+
+       int proc_get_mac_reg_dump1(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data);
+
+       int proc_get_mac_reg_dump2(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data);
+
+       int proc_get_mac_reg_dump3(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data);
+
+       int proc_get_bb_reg_dump1(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data);
+
+       int proc_get_bb_reg_dump2(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data);
+
+       int proc_get_bb_reg_dump3(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data);
+
+       int proc_get_rf_reg_dump1(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data);
+
+       int proc_get_rf_reg_dump2(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data);
+
+       int proc_get_rf_reg_dump3(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data);
+
+       int proc_get_rf_reg_dump4(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data);
+
+#ifdef CONFIG_AP_MODE
+
+       int proc_get_all_sta_info(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data);
+
+#endif
+
+#ifdef DBG_MEMORY_LEAK
+       int proc_get_malloc_cnt(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data);
+#endif
+
+#ifdef CONFIG_FIND_BEST_CHANNEL
+       int proc_get_best_channel(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data);
+       int proc_set_best_channel(struct file *file, const char *buffer,
+               unsigned long count, void *data);
+#endif
+
+       int proc_get_rx_signal(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data);
+
+       int proc_set_rx_signal(struct file *file, const char *buffer,
+               unsigned long count, void *data);
+
+       int proc_get_ht_enable(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data);
+
+       int proc_set_ht_enable(struct file *file, const char *buffer,
+               unsigned long count, void *data);
+
+       int proc_get_cbw40_enable(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data);
+
+       int proc_set_cbw40_enable(struct file *file, const char *buffer,
+               unsigned long count, void *data);
+
+       int proc_get_ampdu_enable(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data);
+
+       int proc_set_ampdu_enable(struct file *file, const char *buffer,
+               unsigned long count, void *data);
+
+       int proc_get_two_path_rssi(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data);
+
+       int proc_get_rx_stbc(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data);
+
+       int proc_set_rx_stbc(struct file *file, const char *buffer,
+               unsigned long count, void *data);
+
+
+       int proc_get_vid(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data);
+
+       int proc_get_pid(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data);
+
+       int proc_get_rssi_disp(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data);
+
+       int proc_set_rssi_disp(struct file *file, const char *buffer,
+               unsigned long count, void *data);
+
+#if defined(DBG_CONFIG_ERROR_DETECT)
+int proc_get_sreset(char *page, char **start, off_t offset, int count, int *eof, void *data);
+int proc_set_sreset(struct file *file, const char *buffer, unsigned long count, void *data);
+#endif /* DBG_CONFIG_ERROR_DETECT */
+
+#ifdef CONFIG_DM_ADAPTIVITY
+int proc_get_dm_adaptivity(char *page, char **start,
+                         off_t offset, int count,
+                         int *eof, void *data);
+int proc_set_dm_adaptivity(struct file *file, const char *buffer,
+               unsigned long count, void *data);
+#endif /* CONFIG_DM_ADAPTIVITY */
+
+#endif //CONFIG_PROC_DEBUG
+
+#endif //__RTW_DEBUG_H__
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtw_eeprom.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtw_eeprom.h
new file mode 100644 (file)
index 0000000..4326109
--- /dev/null
@@ -0,0 +1,152 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __RTW_EEPROM_H__
+#define __RTW_EEPROM_H__
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+
+#define        RTL8712_EEPROM_ID                       0x8712
+#define        EEPROM_MAX_SIZE                 256
+#define        CLOCK_RATE                                      50                      //100us
+
+//- EEPROM opcodes
+#define EEPROM_READ_OPCODE             06
+#define EEPROM_WRITE_OPCODE            05
+#define EEPROM_ERASE_OPCODE            07
+#define EEPROM_EWEN_OPCODE             19      // Erase/write enable
+#define EEPROM_EWDS_OPCODE             16      // Erase/write disable
+
+//Country codes
+#define USA                                                    0x555320
+#define EUROPE                                         0x1 //temp, should be provided later
+#define JAPAN                                          0x2 //temp, should be provided later
+
+#ifdef CONFIG_SDIO_HCI
+#define eeprom_cis0_sz 17
+#define eeprom_cis1_sz 50
+#endif
+
+#define        EEPROM_CID_DEFAULT                      0x0
+#define        EEPROM_CID_ALPHA                                0x1
+#define        EEPROM_CID_Senao                                0x3
+#define        EEPROM_CID_NetCore                              0x5
+#define        EEPROM_CID_CAMEO                                0X8
+#define        EEPROM_CID_SITECOM                              0x9
+#define        EEPROM_CID_COREGA                               0xB
+#define        EEPROM_CID_EDIMAX_BELKIN                0xC
+#define        EEPROM_CID_SERCOMM_BELKIN               0xE
+#define        EEPROM_CID_CAMEO1                               0xF
+#define        EEPROM_CID_WNC_COREGA           0x12
+#define        EEPROM_CID_CLEVO                                0x13
+#define        EEPROM_CID_WHQL                         0xFE // added by chiyoko for dtm, 20090108
+
+//
+// Customer ID, note that:
+// This variable is initiailzed through EEPROM or registry,
+// however, its definition may be different with that in EEPROM for
+// EEPROM size consideration. So, we have to perform proper translation between them.
+// Besides, CustomerID of registry has precedence of that of EEPROM.
+// defined below. 060703, by rcnjko.
+//
+typedef enum _RT_CUSTOMER_ID
+{
+       RT_CID_DEFAULT = 0,
+       RT_CID_8187_ALPHA0 = 1,
+       RT_CID_8187_SERCOMM_PS = 2,
+       RT_CID_8187_HW_LED = 3,
+       RT_CID_8187_NETGEAR = 4,
+       RT_CID_WHQL = 5,
+       RT_CID_819x_CAMEO  = 6,
+       RT_CID_819x_RUNTOP = 7,
+       RT_CID_819x_Senao = 8,
+       RT_CID_TOSHIBA = 9,     // Merge by Jacken, 2008/01/31.
+       RT_CID_819x_Netcore = 10,
+       RT_CID_Nettronix = 11,
+       RT_CID_DLINK = 12,
+       RT_CID_PRONET = 13,
+       RT_CID_COREGA = 14,
+       RT_CID_CHINA_MOBILE = 15,
+       RT_CID_819x_ALPHA = 16,
+       RT_CID_819x_Sitecom = 17,
+       RT_CID_CCX = 18, // It's set under CCX logo test and isn't demanded for CCX functions, but for test behavior like retry limit and tx report. By Bruce, 2009-02-17.
+       RT_CID_819x_Lenovo = 19,
+       RT_CID_819x_QMI = 20,
+       RT_CID_819x_Edimax_Belkin = 21,
+       RT_CID_819x_Sercomm_Belkin = 22,
+       RT_CID_819x_CAMEO1 = 23,
+       RT_CID_819x_MSI = 24,
+       RT_CID_819x_Acer = 25,
+       RT_CID_819x_AzWave_ASUS = 26,
+       RT_CID_819x_AzWave = 27, // For AzWave in PCIe, The ID is AzWave use and not only Asus
+       RT_CID_819x_HP = 28,
+       RT_CID_819x_WNC_COREGA = 29,
+       RT_CID_819x_Arcadyan_Belkin = 30,
+       RT_CID_819x_SAMSUNG = 31,
+       RT_CID_819x_CLEVO = 32,
+       RT_CID_819x_DELL = 33,
+       RT_CID_819x_PRONETS = 34,
+       RT_CID_819x_Edimax_ASUS = 35,
+       RT_CID_819x_CAMEO_NETGEAR = 36,
+}RT_CUSTOMER_ID, *PRT_CUSTOMER_ID;
+
+struct eeprom_priv
+{
+       u8              bautoload_fail_flag;
+       //u8            bempty;
+       //u8            sys_config;
+       u8              mac_addr[6];    //PermanentAddress
+       //u8            config0;
+       u16             channel_plan;
+       //u8            country_string[3];
+       //u8            tx_power_b[15];
+       //u8            tx_power_g[15];
+       //u8            tx_power_a[201];
+
+       u8              EepromOrEfuse;
+
+       u8              efuse_eeprom_data[EEPROM_MAX_SIZE];
+
+#ifdef CONFIG_SDIO_HCI
+       u8              sdio_setting;
+       u32             ocr;
+       u8              cis0[eeprom_cis0_sz];
+       u8              cis1[eeprom_cis1_sz];
+#endif
+};
+
+
+extern void eeprom_write16(_adapter *padapter, u16 reg, u16 data);
+extern u16 eeprom_read16(_adapter *padapter, u16 reg);
+extern void read_eeprom_content(_adapter *padapter);
+extern void eeprom_read_sz(_adapter * padapter, u16 reg,u8* data, u32 sz);
+
+extern void read_eeprom_content_by_attrib(_adapter *   padapter        );
+
+#ifdef PLATFORM_LINUX
+#ifdef CONFIG_ADAPTOR_INFO_CACHING_FILE
+extern int isAdaptorInfoFileValid(void);
+extern int storeAdaptorInfoFile(char *path, struct eeprom_priv * eeprom_priv);
+extern int retriveAdaptorInfoFile(char *path, struct eeprom_priv * eeprom_priv);
+#endif //CONFIG_ADAPTOR_INFO_CACHING_FILE
+#endif //PLATFORM_LINUX
+
+#endif  //__RTL871X_EEPROM_H__
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtw_efuse.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtw_efuse.h
new file mode 100644 (file)
index 0000000..dd09b85
--- /dev/null
@@ -0,0 +1,123 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __RTW_EFUSE_H__
+#define __RTW_EFUSE_H__
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+
+#define        EFUSE_ERROE_HANDLE              1
+
+#define        PG_STATE_HEADER                 0x01
+#define        PG_STATE_WORD_0         0x02
+#define        PG_STATE_WORD_1         0x04
+#define        PG_STATE_WORD_2         0x08
+#define        PG_STATE_WORD_3         0x10
+#define        PG_STATE_DATA                   0x20
+
+#define        PG_SWBYTE_H                     0x01
+#define        PG_SWBYTE_L                     0x02
+
+#define        PGPKT_DATA_SIZE         8
+
+#define        EFUSE_WIFI                              0
+#define        EFUSE_BT                                1
+
+enum _EFUSE_DEF_TYPE {
+       TYPE_EFUSE_MAX_SECTION                          = 0,
+       TYPE_EFUSE_REAL_CONTENT_LEN                     = 1,
+       TYPE_AVAILABLE_EFUSE_BYTES_BANK         = 2,
+       TYPE_AVAILABLE_EFUSE_BYTES_TOTAL        = 3,
+       TYPE_EFUSE_MAP_LEN                                      = 4,
+       TYPE_EFUSE_PROTECT_BYTES_BANK           = 5,
+};
+
+#define                EFUSE_MAX_MAP_LEN               256
+#define                EFUSE_MAX_HW_SIZE               512
+#define                EFUSE_MAX_SECTION_BASE  16
+
+#define EXT_HEADER(header) ((header & 0x1F ) == 0x0F)
+#define ALL_WORDS_DISABLED(wde)        ((wde & 0x0F) == 0x0F)
+#define GET_HDR_OFFSET_2_0(header) ( (header & 0xE0) >> 5)
+
+#define                EFUSE_REPEAT_THRESHOLD_                 3
+
+//=============================================
+//     The following is for BT Efuse definition
+//=============================================
+#define                EFUSE_BT_MAX_MAP_LEN            1024
+#define                EFUSE_MAX_BANK                  4
+#define                EFUSE_MAX_BT_BANK               (EFUSE_MAX_BANK-1)
+//=============================================
+/*--------------------------Define Parameters-------------------------------*/
+#define                EFUSE_MAX_WORD_UNIT                     4
+
+/*------------------------------Define structure----------------------------*/
+typedef struct PG_PKT_STRUCT_A{
+       u8 offset;
+       u8 word_en;
+       u8 data[8];
+       u8 word_cnts;
+}PGPKT_STRUCT,*PPGPKT_STRUCT;
+/*------------------------------Define structure----------------------------*/
+
+
+/*------------------------Export global variable----------------------------*/
+extern u8 fakeEfuseBank;
+extern u32 fakeEfuseUsedBytes;
+extern u8 fakeEfuseContent[];
+extern u8 fakeEfuseInitMap[];
+extern u8 fakeEfuseModifiedMap[];
+
+extern u32 BTEfuseUsedBytes;
+extern u8 BTEfuseContent[EFUSE_MAX_BT_BANK][EFUSE_MAX_HW_SIZE];
+extern u8 BTEfuseInitMap[];
+extern u8 BTEfuseModifiedMap[];
+
+extern u32 fakeBTEfuseUsedBytes;
+extern u8 fakeBTEfuseContent[EFUSE_MAX_BT_BANK][EFUSE_MAX_HW_SIZE];
+extern u8 fakeBTEfuseInitMap[];
+extern u8 fakeBTEfuseModifiedMap[];
+/*------------------------Export global variable----------------------------*/
+
+u8     efuse_GetCurrentSize(PADAPTER padapter, u16 *size);
+u16    efuse_GetMaxSize(PADAPTER padapter);
+u8     rtw_efuse_access(PADAPTER padapter, u8 bRead, u16 start_addr, u16 cnts, u8 *data);
+u8     rtw_efuse_map_read(PADAPTER padapter, u16 addr, u16 cnts, u8 *data);
+u8     rtw_efuse_map_write(PADAPTER padapter, u16 addr, u16 cnts, u8 *data);
+
+u16    Efuse_GetCurrentSize(PADAPTER pAdapter, u8 efuseType, BOOLEAN bPseudoTest);
+u8     Efuse_CalculateWordCnts(u8 word_en);
+void   ReadEFuseByte(PADAPTER Adapter, u16 _offset, u8 *pbuf, BOOLEAN bPseudoTest) ;
+void   EFUSE_GetEfuseDefinition(PADAPTER pAdapter, u8 efuseType, u8 type, void *pOut, BOOLEAN bPseudoTest);
+u8     efuse_OneByteRead(PADAPTER pAdapter, u16 addr, u8 *data, BOOLEAN         bPseudoTest);
+u8     efuse_OneByteWrite(PADAPTER pAdapter, u16 addr, u8 data, BOOLEAN         bPseudoTest);
+
+void   Efuse_PowerSwitch(PADAPTER pAdapter,u8  bWrite,u8        PwrState);
+int    Efuse_PgPacketRead(PADAPTER pAdapter, u8 offset, u8 *data, BOOLEAN bPseudoTest);
+int    Efuse_PgPacketWrite(PADAPTER pAdapter, u8 offset, u8 word_en, u8 *data, BOOLEAN bPseudoTest);
+void   efuse_WordEnableDataRead(u8 word_en, u8 *sourdata, u8 *targetdata);
+u8     Efuse_WordEnableDataWrite(PADAPTER pAdapter, u16 efuse_addr, u8 word_en, u8 *data, BOOLEAN bPseudoTest);
+
+u8     EFUSE_Read1Byte(PADAPTER pAdapter, u16 Address);
+void   EFUSE_ShadowMapUpdate(PADAPTER pAdapter, u8 efuseType, BOOLEAN bPseudoTest);
+void   EFUSE_ShadowRead(PADAPTER pAdapter, u8 Type, u16 Offset, u32 *Value);
+
+#endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtw_event.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtw_event.h
new file mode 100644 (file)
index 0000000..3a0bbf3
--- /dev/null
@@ -0,0 +1,153 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef _RTW_EVENT_H_
+#define _RTW_EVENT_H_
+#include <drv_conf.h>
+#include <osdep_service.h>
+
+#ifndef CONFIG_RTL8711FW
+#ifdef PLATFORM_LINUX
+#include <wlan_bssdef.h>
+#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,26))
+#include <asm/semaphore.h>
+#else
+#include <linux/semaphore.h>
+#endif
+#include <linux/sem.h>
+#endif
+#else
+#include <wlan_bssdef.h>
+#endif//CONFIG_RTL8711FW
+
+
+
+#ifdef CONFIG_H2CLBK
+#include <h2clbk.h>
+#endif
+
+/*
+Used to report a bss has been scanned
+
+*/
+struct survey_event    {
+       WLAN_BSSID_EX bss;
+};
+
+/*
+Used to report that the requested site survey has been done.
+
+bss_cnt indicates the number of bss that has been reported.
+
+
+*/
+struct surveydone_event {
+       unsigned int    bss_cnt;
+
+};
+
+/*
+Used to report the link result of joinning the given bss
+
+
+join_res:
+-1: authentication fail
+-2: association fail
+> 0: TID
+
+*/
+struct joinbss_event {
+       struct  wlan_network    network;
+};
+
+/*
+Used to report a given STA has joinned the created BSS.
+It is used in AP/Ad-HoC(M) mode.
+
+
+*/
+struct stassoc_event {
+       unsigned char macaddr[6];
+       unsigned char rsvd[2];
+       int    cam_id;
+
+};
+
+struct stadel_event {
+ unsigned char macaddr[6];
+ unsigned char rsvd[2]; //for reason
+ int mac_id;
+};
+
+struct addba_event
+{
+       unsigned int tid;
+};
+
+
+#ifdef CONFIG_H2CLBK
+struct c2hlbk_event{
+       unsigned char mac[6];
+       unsigned short  s0;
+       unsigned short  s1;
+       unsigned int    w0;
+       unsigned char   b0;
+       unsigned short  s2;
+       unsigned char   b1;
+       unsigned int    w1;
+};
+#endif//CONFIG_H2CLBK
+
+#define GEN_EVT_CODE(event)    event ## _EVT_
+
+
+
+struct fwevent {
+       u32     parmsize;
+       void (*event_callback)(_adapter *dev, u8 *pbuf);
+};
+
+
+#define C2HEVENT_SZ                    32
+
+struct event_node{
+       unsigned char *node;
+       unsigned char evt_code;
+       unsigned short evt_sz;
+       volatile int    *caller_ff_tail;
+       int     caller_ff_sz;
+};
+
+struct c2hevent_queue {
+       volatile int    head;
+       volatile int    tail;
+       struct  event_node      nodes[C2HEVENT_SZ];
+       unsigned char   seq;
+};
+
+#define NETWORK_QUEUE_SZ       4
+
+struct network_queue {
+       volatile int    head;
+       volatile int    tail;
+       WLAN_BSSID_EX networks[NETWORK_QUEUE_SZ];
+};
+
+
+#endif // _WLANEVENT_H_
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtw_ht.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtw_ht.h
new file mode 100644 (file)
index 0000000..74e416d
--- /dev/null
@@ -0,0 +1,49 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef _RTW_HT_H_
+#define _RTW_HT_H_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include "wifi.h"
+
+struct ht_priv
+{
+       u32     ht_option;
+       u32     ampdu_enable;//for enable Tx A-MPDU
+       //u8    baddbareq_issued[16];
+       u32     tx_amsdu_enable;//for enable Tx A-MSDU
+       u32     tx_amdsu_maxlen; // 1: 8k, 0:4k ; default:8k, for tx
+       u32     rx_ampdu_maxlen; //for rx reordering ctrl win_sz, updated when join_callback.
+
+       u8      bwmode;//
+       u8      ch_offset;//PRIME_CHNL_OFFSET
+       u8      sgi;//short GI
+
+       //for processing Tx A-MPDU
+       u8      agg_enable_bitmap;
+       //u8    ADDBA_retry_count;
+       u8      candidate_tid_bitmap;
+
+       struct rtw_ieee80211_ht_cap ht_cap;
+
+};
+
+#endif //_RTL871X_HT_H_
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtw_io.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtw_io.h
new file mode 100644 (file)
index 0000000..daf342a
--- /dev/null
@@ -0,0 +1,504 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+
+#ifndef _RTW_IO_H_
+#define _RTW_IO_H_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <osdep_intf.h>
+
+#ifdef PLATFORM_LINUX
+#include <asm/byteorder.h>
+#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,26))
+#include <asm/semaphore.h>
+#else
+#include <linux/semaphore.h>
+#endif
+#include <linux/list.h>
+//#include <linux/smp_lock.h>
+#include <linux/spinlock.h>
+#include <asm/atomic.h>
+
+#ifdef CONFIG_USB_HCI
+#include <linux/usb.h>
+#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,21))
+#include <linux/usb_ch9.h>
+#else
+#include <linux/usb/ch9.h>
+#endif
+#endif //CONFIG_USB_HCI
+
+#endif //PLATFORM_LINUX
+
+
+#define NUM_IOREQ              8
+
+#ifdef PLATFORM_WINDOWS
+#define MAX_PROT_SZ    64
+#endif
+#ifdef PLATFORM_LINUX
+#define MAX_PROT_SZ    (64-16)
+#endif
+
+#define _IOREADY                       0
+#define _IO_WAIT_COMPLETE   1
+#define _IO_WAIT_RSP        2
+
+// IO COMMAND TYPE
+#define _IOSZ_MASK_            (0x7F)
+#define _IO_WRITE_             BIT(7)
+#define _IO_FIXED_             BIT(8)
+#define _IO_BURST_             BIT(9)
+#define _IO_BYTE_              BIT(10)
+#define _IO_HW_                        BIT(11)
+#define _IO_WORD_              BIT(12)
+#define _IO_SYNC_              BIT(13)
+#define _IO_CMDMASK_   (0x1F80)
+
+
+/*
+       For prompt mode accessing, caller shall free io_req
+       Otherwise, io_handler will free io_req
+*/
+
+
+
+// IO STATUS TYPE
+#define _IO_ERR_               BIT(2)
+#define _IO_SUCCESS_   BIT(1)
+#define _IO_DONE_              BIT(0)
+
+
+#define IO_RD32                        (_IO_SYNC_ | _IO_WORD_)
+#define IO_RD16                        (_IO_SYNC_ | _IO_HW_)
+#define IO_RD8                 (_IO_SYNC_ | _IO_BYTE_)
+
+#define IO_RD32_ASYNC  (_IO_WORD_)
+#define IO_RD16_ASYNC  (_IO_HW_)
+#define IO_RD8_ASYNC   (_IO_BYTE_)
+
+#define IO_WR32                        (_IO_WRITE_ | _IO_SYNC_ | _IO_WORD_)
+#define IO_WR16                        (_IO_WRITE_ | _IO_SYNC_ | _IO_HW_)
+#define IO_WR8                 (_IO_WRITE_ | _IO_SYNC_ | _IO_BYTE_)
+
+#define IO_WR32_ASYNC  (_IO_WRITE_ | _IO_WORD_)
+#define IO_WR16_ASYNC  (_IO_WRITE_ | _IO_HW_)
+#define IO_WR8_ASYNC   (_IO_WRITE_ | _IO_BYTE_)
+
+/*
+
+       Only Sync. burst accessing is provided.
+
+*/
+
+#define IO_WR_BURST(x)         (_IO_WRITE_ | _IO_SYNC_ | _IO_BURST_ | ( (x) & _IOSZ_MASK_))
+#define IO_RD_BURST(x)         (_IO_SYNC_ | _IO_BURST_ | ( (x) & _IOSZ_MASK_))
+
+
+
+//below is for the intf_option bit defition...
+
+#define _INTF_ASYNC_   BIT(0)  //support async io
+
+struct intf_priv;
+struct intf_hdl;
+struct io_queue;
+
+struct _io_ops
+{
+               u8 (*_read8)(struct intf_hdl *pintfhdl, u32 addr);
+               u16 (*_read16)(struct intf_hdl *pintfhdl, u32 addr);
+               u32 (*_read32)(struct intf_hdl *pintfhdl, u32 addr);
+
+               int (*_write8)(struct intf_hdl *pintfhdl, u32 addr, u8 val);
+               int (*_write16)(struct intf_hdl *pintfhdl, u32 addr, u16 val);
+               int (*_write32)(struct intf_hdl *pintfhdl, u32 addr, u32 val);
+               int (*_writeN)(struct intf_hdl *pintfhdl, u32 addr, u32 length, u8 *pdata);
+
+               int (*_write8_async)(struct intf_hdl *pintfhdl, u32 addr, u8 val);
+               int (*_write16_async)(struct intf_hdl *pintfhdl, u32 addr, u16 val);
+               int (*_write32_async)(struct intf_hdl *pintfhdl, u32 addr, u32 val);
+
+               void (*_read_mem)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);
+               void (*_write_mem)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);
+
+               void (*_sync_irp_protocol_rw)(struct io_queue *pio_q);
+
+               u32 (*_read_interrupt)(struct intf_hdl *pintfhdl, u32 addr);
+
+               u32 (*_read_port)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);
+               u32 (*_write_port)(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *pmem);
+
+               u32 (*_write_scsi)(struct intf_hdl *pintfhdl,u32 cnt, u8 *pmem);
+
+               void (*_read_port_cancel)(struct intf_hdl *pintfhdl);
+               void (*_write_port_cancel)(struct intf_hdl *pintfhdl);
+
+};
+
+struct io_req {
+       _list   list;
+       u32     addr;
+       volatile u32    val;
+       u32     command;
+       u32     status;
+       u8      *pbuf;
+       _sema   sema;
+
+#ifdef PLATFORM_OS_CE
+#ifdef CONFIG_USB_HCI
+       // URB handler for rtw_write_mem
+       USB_TRANSFER usb_transfer_write_mem;
+#endif
+#endif
+
+       void (*_async_io_callback)(_adapter *padater, struct io_req *pio_req, u8 *cnxt);
+       u8 *cnxt;
+
+#ifdef PLATFORM_OS_XP
+       PMDL pmdl;
+       PIRP  pirp;
+
+#ifdef CONFIG_SDIO_HCI
+       PSDBUS_REQUEST_PACKET sdrp;
+#endif
+
+#endif
+
+
+};
+
+struct intf_hdl {
+
+/*
+       u32     intf_option;
+       u32     bus_status;
+       u32     do_flush;
+       u8      *adapter;
+       u8      *intf_dev;
+       struct intf_priv        *pintfpriv;
+       u8      cnt;
+       void (*intf_hdl_init)(u8 *priv);
+       void (*intf_hdl_unload)(u8 *priv);
+       void (*intf_hdl_open)(u8 *priv);
+       void (*intf_hdl_close)(u8 *priv);
+       struct  _io_ops io_ops;
+       //u8 intf_status;//moved to struct intf_priv
+       u16 len;
+       u16 done_len;
+*/
+       _adapter *padapter;
+       struct dvobj_priv *pintf_dev;// pointer to &(padapter->dvobjpriv);
+
+       struct _io_ops  io_ops;
+
+};
+
+struct reg_protocol_rd {
+
+#ifdef CONFIG_LITTLE_ENDIAN
+
+       //DW1
+       u32             NumOfTrans:4;
+       u32             Reserved1:4;
+       u32             Reserved2:24;
+       //DW2
+       u32             ByteCount:7;
+       u32             WriteEnable:1;          //0:read, 1:write
+       u32             FixOrContinuous:1;      //0:continuous, 1: Fix
+       u32             BurstMode:1;
+       u32             Byte1Access:1;
+       u32             Byte2Access:1;
+       u32             Byte4Access:1;
+       u32             Reserved3:3;
+       u32             Reserved4:16;
+       //DW3
+       u32             BusAddress;
+       //DW4
+       //u32           Value;
+#else
+
+
+//DW1
+       u32 Reserved1  :4;
+       u32 NumOfTrans :4;
+
+       u32 Reserved2  :24;
+
+       //DW2
+       u32 WriteEnable : 1;
+       u32 ByteCount :7;
+
+
+       u32 Reserved3 : 3;
+       u32 Byte4Access : 1;
+
+       u32 Byte2Access : 1;
+       u32 Byte1Access : 1;
+       u32 BurstMode :1 ;
+       u32 FixOrContinuous : 1;
+
+       u32 Reserved4 : 16;
+
+       //DW3
+       u32             BusAddress;
+
+       //DW4
+       //u32           Value;
+
+#endif
+
+};
+
+
+struct reg_protocol_wt {
+
+
+#ifdef CONFIG_LITTLE_ENDIAN
+
+       //DW1
+       u32             NumOfTrans:4;
+       u32             Reserved1:4;
+       u32             Reserved2:24;
+       //DW2
+       u32             ByteCount:7;
+       u32             WriteEnable:1;          //0:read, 1:write
+       u32             FixOrContinuous:1;      //0:continuous, 1: Fix
+       u32             BurstMode:1;
+       u32             Byte1Access:1;
+       u32             Byte2Access:1;
+       u32             Byte4Access:1;
+       u32             Reserved3:3;
+       u32             Reserved4:16;
+       //DW3
+       u32             BusAddress;
+       //DW4
+       u32             Value;
+
+#else
+       //DW1
+       u32 Reserved1  :4;
+       u32 NumOfTrans :4;
+
+       u32 Reserved2  :24;
+
+       //DW2
+       u32 WriteEnable : 1;
+       u32 ByteCount :7;
+
+       u32 Reserved3 : 3;
+       u32 Byte4Access : 1;
+
+       u32 Byte2Access : 1;
+       u32 Byte1Access : 1;
+       u32 BurstMode :1 ;
+       u32 FixOrContinuous : 1;
+
+       u32 Reserved4 : 16;
+
+       //DW3
+       u32             BusAddress;
+
+       //DW4
+       u32             Value;
+
+#endif
+
+};
+
+
+
+/*
+Below is the data structure used by _io_handler
+
+*/
+
+struct io_queue {
+       _lock   lock;
+       _list   free_ioreqs;
+       _list           pending;                //The io_req list that will be served in the single protocol read/write.
+       _list           processing;
+       u8      *free_ioreqs_buf; // 4-byte aligned
+       u8      *pallocated_free_ioreqs_buf;
+       struct  intf_hdl        intf;
+};
+
+struct io_priv{
+
+       _adapter *padapter;
+
+       struct intf_hdl intf;
+
+};
+
+extern uint ioreq_flush(_adapter *adapter, struct io_queue *ioqueue);
+extern void sync_ioreq_enqueue(struct io_req *preq,struct io_queue *ioqueue);
+extern uint sync_ioreq_flush(_adapter *adapter, struct io_queue *ioqueue);
+
+
+extern uint free_ioreq(struct io_req *preq, struct io_queue *pio_queue);
+extern struct io_req *alloc_ioreq(struct io_queue *pio_q);
+
+extern uint register_intf_hdl(u8 *dev, struct intf_hdl *pintfhdl);
+extern void unregister_intf_hdl(struct intf_hdl *pintfhdl);
+
+extern void _rtw_attrib_read(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem);
+extern void _rtw_attrib_write(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem);
+
+extern u8 _rtw_read8(_adapter *adapter, u32 addr);
+extern u16 _rtw_read16(_adapter *adapter, u32 addr);
+extern u32 _rtw_read32(_adapter *adapter, u32 addr);
+extern void _rtw_read_mem(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem);
+extern void _rtw_read_port(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem);
+extern void _rtw_read_port_cancel(_adapter *adapter);
+
+
+extern int _rtw_write8(_adapter *adapter, u32 addr, u8 val);
+extern int _rtw_write16(_adapter *adapter, u32 addr, u16 val);
+extern int _rtw_write32(_adapter *adapter, u32 addr, u32 val);
+extern int _rtw_writeN(_adapter *adapter, u32 addr, u32 length, u8 *pdata);
+
+extern int _rtw_write8_async(_adapter *adapter, u32 addr, u8 val);
+extern int _rtw_write16_async(_adapter *adapter, u32 addr, u16 val);
+extern int _rtw_write32_async(_adapter *adapter, u32 addr, u32 val);
+
+extern void _rtw_write_mem(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem);
+extern u32 _rtw_write_port(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem);
+u32 _rtw_write_port_and_wait(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem, int timeout_ms);
+extern void _rtw_write_port_cancel(_adapter *adapter);
+
+#ifdef DBG_IO
+bool match_read_sniff_ranges(u16 addr, u16 len);
+bool match_write_sniff_ranges(u16 addr, u16 len);
+
+extern u8 dbg_rtw_read8(_adapter *adapter, u32 addr, const char *caller, const int line);
+extern u16 dbg_rtw_read16(_adapter *adapter, u32 addr, const char *caller, const int line);
+extern u32 dbg_rtw_read32(_adapter *adapter, u32 addr, const char *caller, const int line);
+
+extern int dbg_rtw_write8(_adapter *adapter, u32 addr, u8 val, const char *caller, const int line);
+extern int dbg_rtw_write16(_adapter *adapter, u32 addr, u16 val, const char *caller, const int line);
+extern int dbg_rtw_write32(_adapter *adapter, u32 addr, u32 val, const char *caller, const int line);
+extern int dbg_rtw_writeN(_adapter *adapter, u32 addr ,u32 length , u8 *data, const char *caller, const int line);
+
+#define rtw_read8(adapter, addr) dbg_rtw_read8((adapter), (addr), __FUNCTION__, __LINE__)
+#define rtw_read16(adapter, addr) dbg_rtw_read16((adapter), (addr), __FUNCTION__, __LINE__)
+#define rtw_read32(adapter, addr) dbg_rtw_read32((adapter), (addr), __FUNCTION__, __LINE__)
+#define rtw_read_mem(adapter, addr, cnt, mem) _rtw_read_mem((adapter), (addr), (cnt), (mem))
+#define rtw_read_port(adapter, addr, cnt, mem) _rtw_read_port((adapter), (addr), (cnt), (mem))
+#define rtw_read_port_cancel(adapter) _rtw_read_port_cancel((adapter))
+
+#define  rtw_write8(adapter, addr, val) dbg_rtw_write8((adapter), (addr), (val), __FUNCTION__, __LINE__)
+#define  rtw_write16(adapter, addr, val) dbg_rtw_write16((adapter), (addr), (val), __FUNCTION__, __LINE__)
+#define  rtw_write32(adapter, addr, val) dbg_rtw_write32((adapter), (addr), (val), __FUNCTION__, __LINE__)
+#define  rtw_writeN(adapter, addr, length, data) dbg_rtw_writeN((adapter), (addr), (length), (data), __FUNCTION__, __LINE__)
+
+#define rtw_write8_async(adapter, addr, val) _rtw_write8_async((adapter), (addr), (val))
+#define rtw_write16_async(adapter, addr, val) _rtw_write16_async((adapter), (addr), (val))
+#define rtw_write32_async(adapter, addr, val) _rtw_write32_async((adapter), (addr), (val))
+
+#define rtw_write_mem(adapter, addr, cnt, mem) _rtw_write_mem((adapter), addr, cnt, mem)
+#define rtw_write_port(adapter, addr, cnt, mem) _rtw_write_port(adapter, addr, cnt, mem)
+#define rtw_write_port_and_wait(adapter, addr, cnt, mem, timeout_ms) _rtw_write_port_and_wait((adapter), (addr), (cnt), (mem), (timeout_ms))
+#define rtw_write_port_cancel(adapter) _rtw_write_port_cancel(adapter)
+#else //DBG_IO
+#define rtw_read8(adapter, addr) _rtw_read8((adapter), (addr))
+#define rtw_read16(adapter, addr) _rtw_read16((adapter), (addr))
+#define rtw_read32(adapter, addr) _rtw_read32((adapter), (addr))
+#define rtw_read_mem(adapter, addr, cnt, mem) _rtw_read_mem((adapter), (addr), (cnt), (mem))
+#define rtw_read_port(adapter, addr, cnt, mem) _rtw_read_port((adapter), (addr), (cnt), (mem))
+#define rtw_read_port_cancel(adapter) _rtw_read_port_cancel((adapter))
+
+#define  rtw_write8(adapter, addr, val) _rtw_write8((adapter), (addr), (val))
+#define  rtw_write16(adapter, addr, val) _rtw_write16((adapter), (addr), (val))
+#define  rtw_write32(adapter, addr, val) _rtw_write32((adapter), (addr), (val))
+#define  rtw_writeN(adapter, addr, length, data) _rtw_writeN((adapter), (addr), (length), (data))
+
+#define rtw_write8_async(adapter, addr, val) _rtw_write8_async((adapter), (addr), (val))
+#define rtw_write16_async(adapter, addr, val) _rtw_write16_async((adapter), (addr), (val))
+#define rtw_write32_async(adapter, addr, val) _rtw_write32_async((adapter), (addr), (val))
+
+#define rtw_write_mem(adapter, addr, cnt, mem) _rtw_write_mem((adapter), (addr), (cnt), (mem))
+#define rtw_write_port(adapter, addr, cnt, mem) _rtw_write_port((adapter), (addr), (cnt), (mem))
+#define rtw_write_port_and_wait(adapter, addr, cnt, mem, timeout_ms) _rtw_write_port_and_wait((adapter), (addr), (cnt), (mem), (timeout_ms))
+#define rtw_write_port_cancel(adapter) _rtw_write_port_cancel((adapter))
+#endif //DBG_IO
+
+extern void rtw_write_scsi(_adapter *adapter, u32 cnt, u8 *pmem);
+
+//ioreq
+extern void ioreq_read8(_adapter *adapter, u32 addr, u8 *pval);
+extern void ioreq_read16(_adapter *adapter, u32 addr, u16 *pval);
+extern void ioreq_read32(_adapter *adapter, u32 addr, u32 *pval);
+extern void ioreq_write8(_adapter *adapter, u32 addr, u8 val);
+extern void ioreq_write16(_adapter *adapter, u32 addr, u16 val);
+extern void ioreq_write32(_adapter *adapter, u32 addr, u32 val);
+
+
+extern uint async_read8(_adapter *adapter, u32 addr, u8 *pbuff,
+       void (*_async_io_callback)(_adapter *padater, struct io_req *pio_req, u8 *cnxt), u8 *cnxt);
+extern uint async_read16(_adapter *adapter, u32 addr,  u8 *pbuff,
+       void (*_async_io_callback)(_adapter *padater, struct io_req *pio_req, u8 *cnxt), u8 *cnxt);
+extern uint async_read32(_adapter *adapter, u32 addr,  u8 *pbuff,
+       void (*_async_io_callback)(_adapter *padater, struct io_req *pio_req, u8 *cnxt), u8 *cnxt);
+
+extern void async_read_mem(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem);
+extern void async_read_port(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem);
+
+extern void async_write8(_adapter *adapter, u32 addr, u8 val,
+       void (*_async_io_callback)(_adapter *padater, struct io_req *pio_req, u8 *cnxt), u8 *cnxt);
+extern void async_write16(_adapter *adapter, u32 addr, u16 val,
+       void (*_async_io_callback)(_adapter *padater, struct io_req *pio_req, u8 *cnxt), u8 *cnxt);
+extern void async_write32(_adapter *adapter, u32 addr, u32 val,
+       void (*_async_io_callback)(_adapter *padater, struct io_req *pio_req, u8 *cnxt), u8 *cnxt);
+
+extern void async_write_mem(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem);
+extern void async_write_port(_adapter *adapter, u32 addr, u32 cnt, u8 *pmem);
+
+
+int rtw_init_io_priv(_adapter *padapter, void (*set_intf_ops)(struct _io_ops *pops));
+
+
+extern uint alloc_io_queue(_adapter *adapter);
+extern void free_io_queue(_adapter *adapter);
+extern void async_bus_io(struct io_queue *pio_q);
+extern void bus_sync_io(struct io_queue *pio_q);
+extern u32 _ioreq2rwmem(struct io_queue *pio_q);
+extern void dev_power_down(_adapter * Adapter, u8 bpwrup);
+
+/*
+#define RTL_R8(reg)            rtw_read8(padapter, reg)
+#define RTL_R16(reg)            rtw_read16(padapter, reg)
+#define RTL_R32(reg)            rtw_read32(padapter, reg)
+#define RTL_W8(reg, val8)       rtw_write8(padapter, reg, val8)
+#define RTL_W16(reg, val16)     rtw_write16(padapter, reg, val16)
+#define RTL_W32(reg, val32)     rtw_write32(padapter, reg, val32)
+*/
+
+/*
+#define RTL_W8_ASYNC(reg, val8) rtw_write32_async(padapter, reg, val8)
+#define RTL_W16_ASYNC(reg, val16) rtw_write32_async(padapter, reg, val16)
+#define RTL_W32_ASYNC(reg, val32) rtw_write32_async(padapter, reg, val32)
+
+#define RTL_WRITE_BB(reg, val32)       phy_SetUsbBBReg(padapter, reg, val32)
+#define RTL_READ_BB(reg)       phy_QueryUsbBBReg(padapter, reg)
+*/
+
+#endif //_RTL8711_IO_H_
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtw_ioctl.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtw_ioctl.h
new file mode 100644 (file)
index 0000000..093e46b
--- /dev/null
@@ -0,0 +1,268 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef _RTW_IOCTL_H_
+#define _RTW_IOCTL_H_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+
+#ifndef OID_802_11_CAPABILITY
+       #define OID_802_11_CAPABILITY                   0x0d010122
+#endif
+
+#ifndef OID_802_11_PMKID
+       #define OID_802_11_PMKID                        0x0d010123
+#endif
+
+
+// For DDK-defined OIDs
+#define OID_NDIS_SEG1  0x00010100
+#define OID_NDIS_SEG2  0x00010200
+#define OID_NDIS_SEG3  0x00020100
+#define OID_NDIS_SEG4  0x01010100
+#define OID_NDIS_SEG5  0x01020100
+#define OID_NDIS_SEG6  0x01020200
+#define OID_NDIS_SEG7  0xFD010100
+#define OID_NDIS_SEG8  0x0D010100
+#define OID_NDIS_SEG9  0x0D010200
+#define OID_NDIS_SEG10 0x0D020200
+
+#define SZ_OID_NDIS_SEG1                 23
+#define SZ_OID_NDIS_SEG2                   3
+#define SZ_OID_NDIS_SEG3                   6
+#define SZ_OID_NDIS_SEG4                   6
+#define SZ_OID_NDIS_SEG5                   4
+#define SZ_OID_NDIS_SEG6                   8
+#define SZ_OID_NDIS_SEG7                   7
+#define SZ_OID_NDIS_SEG8                 36
+#define SZ_OID_NDIS_SEG9                 24
+#define SZ_OID_NDIS_SEG10                19
+
+// For Realtek-defined OIDs
+#define OID_MP_SEG1            0xFF871100
+#define OID_MP_SEG2            0xFF818000
+
+#define OID_MP_SEG3            0xFF818700
+#define OID_MP_SEG4            0xFF011100
+
+#define DEBUG_OID(dbg, str)                    \
+       if((!dbg))                                                      \
+       {                                                               \
+          RT_TRACE(_module_rtl871x_ioctl_c_,_drv_info_,("%s(%d): %s", __FUNCTION__, __LINE__, str));   \
+       }
+
+
+enum oid_type
+{
+       QUERY_OID,
+       SET_OID
+};
+
+struct oid_funs_node {
+       unsigned int oid_start; //the starting number for OID
+       unsigned int oid_end; //the ending number for OID
+       struct oid_obj_priv *node_array;
+       unsigned int array_sz; //the size of node_array
+       int query_counter; //count the number of query hits for this segment
+       int set_counter; //count the number of set hits for this segment
+};
+
+struct oid_par_priv
+{
+       void            *adapter_context;
+       NDIS_OID        oid;
+       void            *information_buf;
+       u32             information_buf_len;
+       u32             *bytes_rw;
+       u32             *bytes_needed;
+       enum oid_type   type_of_oid;
+       u32             dbg;
+};
+
+struct oid_obj_priv {
+       unsigned char   dbg; // 0: without OID debug message  1: with OID debug message
+       NDIS_STATUS (*oidfuns)(struct oid_par_priv *poid_par_priv);
+};
+
+#if (defined(CONFIG_MP_INCLUDED) && defined(_RTW_MP_IOCTL_C_)) || \
+       (defined(PLATFORM_WINDOWS) && defined(_RTW_IOCTL_RTL_C_))
+static NDIS_STATUS oid_null_function(struct oid_par_priv* poid_par_priv)
+{
+       _func_enter_;
+       _func_exit_;
+       return NDIS_STATUS_SUCCESS;
+}
+#endif
+
+#ifdef PLATFORM_WINDOWS
+
+int TranslateNdisPsToRtPs(IN NDIS_802_11_POWER_MODE    ndisPsMode);
+
+//OID Handler for Segment 1
+NDIS_STATUS oid_gen_supported_list_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_gen_hardware_status_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_gen_media_supported_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_gen_media_in_use_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_gen_maximum_lookahead_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_gen_maximum_frame_size_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_gen_link_speed_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_gen_transmit_buffer_space_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_gen_receive_buffer_space_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_gen_transmit_block_size_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_gen_receive_block_size_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_gen_vendor_id_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_gen_vendor_description_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_gen_current_packet_filter_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_gen_current_lookahead_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_gen_driver_version_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_gen_maximum_total_size_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_gen_protocol_options_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_gen_mac_options_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_gen_media_connect_status_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_gen_maximum_send_packets_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_gen_vendor_driver_version_hdl(struct oid_par_priv* poid_par_priv);
+
+
+//OID Handler for Segment 2
+NDIS_STATUS oid_gen_physical_medium_hdl(struct oid_par_priv* poid_par_priv);
+
+//OID Handler for Segment 3
+NDIS_STATUS oid_gen_xmit_ok_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_gen_rcv_ok_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_gen_xmit_error_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_gen_rcv_error_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_gen_rcv_no_buffer_hdl(struct oid_par_priv* poid_par_priv);
+
+
+//OID Handler for Segment 4
+NDIS_STATUS oid_802_3_permanent_address_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_802_3_current_address_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_802_3_multicast_list_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_802_3_maximum_list_size_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_802_3_mac_options_hdl(struct oid_par_priv* poid_par_priv);
+
+
+
+//OID Handler for Segment 5
+NDIS_STATUS oid_802_3_rcv_error_alignment_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_802_3_xmit_one_collision_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_802_3_xmit_more_collisions_hdl(struct oid_par_priv* poid_par_priv);
+
+
+//OID Handler for Segment 6
+NDIS_STATUS oid_802_3_xmit_deferred_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_802_3_xmit_max_collisions_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_802_3_rcv_overrun_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_802_3_xmit_underrun_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_802_3_xmit_heartbeat_failure_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_802_3_xmit_times_crs_lost_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_802_3_xmit_late_collisions_hdl(struct oid_par_priv* poid_par_priv);
+
+
+
+//OID Handler for Segment 7
+NDIS_STATUS oid_pnp_capabilities_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_pnp_set_power_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_pnp_query_power_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_pnp_add_wake_up_pattern_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_pnp_remove_wake_up_pattern_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_pnp_wake_up_pattern_list_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_pnp_enable_wake_up_hdl(struct oid_par_priv* poid_par_priv);
+
+
+
+//OID Handler for Segment 8
+NDIS_STATUS oid_802_11_bssid_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_802_11_ssid_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_802_11_infrastructure_mode_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_802_11_add_wep_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_802_11_remove_wep_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_802_11_disassociate_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_802_11_authentication_mode_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_802_11_privacy_filter_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_802_11_bssid_list_scan_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_802_11_encryption_status_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_802_11_reload_defaults_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_802_11_add_key_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_802_11_remove_key_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_802_11_association_information_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_802_11_test_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_802_11_media_stream_mode_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_802_11_capability_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_802_11_pmkid_hdl(struct oid_par_priv* poid_par_priv);
+
+
+
+
+
+//OID Handler for Segment 9
+NDIS_STATUS oid_802_11_network_types_supported_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_802_11_network_type_in_use_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_802_11_tx_power_level_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_802_11_rssi_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_802_11_rssi_trigger_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_802_11_fragmentation_threshold_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_802_11_rts_threshold_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_802_11_number_of_antennas_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_802_11_rx_antenna_selected_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_802_11_tx_antenna_selected_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_802_11_supported_rates_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_802_11_desired_rates_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_802_11_configuration_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_802_11_power_mode_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_802_11_bssid_list_hdl(struct oid_par_priv* poid_par_priv);
+
+
+//OID Handler for Segment 10
+NDIS_STATUS oid_802_11_statistics_hdl(struct oid_par_priv* poid_par_priv);
+
+
+//OID Handler for Segment ED
+NDIS_STATUS oid_rt_mh_vender_id_hdl(struct oid_par_priv* poid_par_priv);
+
+void Set_802_3_MULTICAST_LIST(ADAPTER *pAdapter, UCHAR *MCListbuf, ULONG MCListlen, BOOLEAN bAcceptAllMulticast);
+
+#endif// end of PLATFORM_WINDOWS
+
+
+#if defined(PLATFORM_LINUX) && defined(CONFIG_WIRELESS_EXT)
+extern struct iw_handler_def  rtw_handlers_def;
+#endif
+
+extern NDIS_STATUS drv_query_info(
+       IN      _nic_hdl                MiniportAdapterContext,
+       IN      NDIS_OID                Oid,
+       IN      void *                  InformationBuffer,
+       IN      u32                     InformationBufferLength,
+       OUT     u32*                    BytesWritten,
+       OUT     u32*                    BytesNeeded
+       );
+
+extern NDIS_STATUS     drv_set_info(
+       IN      _nic_hdl                MiniportAdapterContext,
+       IN      NDIS_OID                Oid,
+       IN      void *                  InformationBuffer,
+       IN      u32                     InformationBufferLength,
+       OUT     u32*                    BytesRead,
+       OUT     u32*                    BytesNeeded
+       );
+
+#endif // #ifndef __INC_CEINFO_
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtw_ioctl_query.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtw_ioctl_query.h
new file mode 100644 (file)
index 0000000..3fcbc54
--- /dev/null
@@ -0,0 +1,35 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef _RTW_IOCTL_QUERY_H_
+#define _RTW_IOCTL_QUERY_H_
+
+#include <drv_conf.h>
+#include <drv_types.h>
+
+
+#ifdef PLATFORM_WINDOWS
+
+u8 query_802_11_capability(_adapter*   padapter,u8*    pucBuf,u32 *    pulOutLen);
+u8 query_802_11_association_information (_adapter * padapter, PNDIS_802_11_ASSOCIATION_INFORMATION pAssocInfo);
+
+#endif
+
+
+#endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtw_ioctl_rtl.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtw_ioctl_rtl.h
new file mode 100644 (file)
index 0000000..c017006
--- /dev/null
@@ -0,0 +1,83 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef _RTW_IOCTL_RTL_H_
+#define _RTW_IOCTL_RTL_H_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+
+//************** oid_rtl_seg_01_01 **************
+NDIS_STATUS oid_rt_get_signal_quality_hdl(struct oid_par_priv* poid_par_priv);//84
+NDIS_STATUS oid_rt_get_small_packet_crc_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_get_middle_packet_crc_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_get_large_packet_crc_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_get_tx_retry_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_get_rx_retry_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_get_rx_total_packet_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_get_tx_beacon_ok_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_get_tx_beacon_err_hdl(struct oid_par_priv* poid_par_priv);
+
+NDIS_STATUS oid_rt_pro_set_fw_dig_state_hdl(struct oid_par_priv* poid_par_priv);       //8a
+NDIS_STATUS oid_rt_pro_set_fw_ra_state_hdl(struct oid_par_priv* poid_par_priv);        //8b
+
+NDIS_STATUS oid_rt_get_rx_icv_err_hdl(struct oid_par_priv* poid_par_priv);//93
+NDIS_STATUS oid_rt_set_encryption_algorithm_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_get_preamble_mode_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_get_ap_ip_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_get_channelplan_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_set_channelplan_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_set_preamble_mode_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_set_bcn_intvl_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_dedicate_probe_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_get_total_tx_bytes_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_get_total_rx_bytes_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_current_tx_power_level_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_get_enc_key_mismatch_count_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_get_enc_key_match_count_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_get_channel_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_get_hardware_radio_off_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_get_key_mismatch_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_supported_wireless_mode_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_get_channel_list_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_get_scan_in_progress_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_forced_data_rate_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_wireless_mode_for_scan_list_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_get_bss_wireless_mode_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_scan_with_magic_packet_hdl(struct oid_par_priv* poid_par_priv);
+
+//**************  oid_rtl_seg_01_03 section start **************
+NDIS_STATUS oid_rt_ap_get_associated_station_list_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_ap_switch_into_ap_mode_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_ap_supported_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_ap_set_passphrase_hdl(struct oid_par_priv* poid_par_priv);
+
+// oid_rtl_seg_01_11
+NDIS_STATUS oid_rt_pro_rf_write_registry_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_pro_rf_read_registry_hdl(struct oid_par_priv* poid_par_priv);
+
+//**************  oid_rtl_seg_03_00 section start **************
+NDIS_STATUS oid_rt_get_connect_state_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_set_default_key_id_hdl(struct oid_par_priv* poid_par_priv);
+
+
+
+
+#endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtw_ioctl_set.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtw_ioctl_set.h
new file mode 100644 (file)
index 0000000..5e21408
--- /dev/null
@@ -0,0 +1,78 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __RTW_IOCTL_SET_H_
+#define __RTW_IOCTL_SET_H_
+
+#include <drv_conf.h>
+#include <drv_types.h>
+
+
+typedef u8 NDIS_802_11_PMKID_VALUE[16];
+
+typedef struct _BSSIDInfo {
+       NDIS_802_11_MAC_ADDRESS  BSSID;
+       NDIS_802_11_PMKID_VALUE  PMKID;
+} BSSIDInfo, *PBSSIDInfo;
+
+
+#ifdef PLATFORM_OS_XP
+typedef struct _NDIS_802_11_PMKID {
+       u32     Length;
+       u32     BSSIDInfoCount;
+       BSSIDInfo BSSIDInfo[1];
+} NDIS_802_11_PMKID, *PNDIS_802_11_PMKID;
+#endif
+
+
+#ifdef PLATFORM_WINDOWS
+u8 rtw_set_802_11_reload_defaults(_adapter * padapter, NDIS_802_11_RELOAD_DEFAULTS reloadDefaults);
+u8 rtw_set_802_11_test(_adapter * padapter, NDIS_802_11_TEST * test);
+u8 rtw_set_802_11_pmkid(_adapter *pdapter, NDIS_802_11_PMKID *pmkid);
+
+u8 rtw_pnp_set_power_sleep(_adapter* padapter);
+u8 rtw_pnp_set_power_wakeup(_adapter* padapter);
+
+void rtw_pnp_resume_wk(void *context);
+void rtw_pnp_sleep_wk(void * context);
+
+#endif
+
+u8 rtw_set_802_11_add_key(_adapter * padapter, NDIS_802_11_KEY * key);
+u8 rtw_set_802_11_authentication_mode(_adapter *pdapter, NDIS_802_11_AUTHENTICATION_MODE authmode);
+u8 rtw_set_802_11_bssid(_adapter* padapter, u8 *bssid);
+u8 rtw_set_802_11_add_wep(_adapter * padapter, NDIS_802_11_WEP * wep);
+u8 rtw_set_802_11_disassociate(_adapter * padapter);
+u8 rtw_set_802_11_bssid_list_scan(_adapter* padapter, NDIS_802_11_SSID *pssid, int ssid_max_num);
+u8 rtw_set_802_11_infrastructure_mode(_adapter * padapter, NDIS_802_11_NETWORK_INFRASTRUCTURE networktype);
+u8 rtw_set_802_11_remove_wep(_adapter * padapter, u32 keyindex);
+u8 rtw_set_802_11_ssid(_adapter * padapter, NDIS_802_11_SSID * ssid);
+u8 rtw_set_802_11_connect(_adapter* padapter, u8 *bssid, NDIS_802_11_SSID *ssid);
+u8 rtw_set_802_11_remove_key(_adapter * padapter, NDIS_802_11_REMOVE_KEY * key);
+
+u8 rtw_validate_bssid(u8 *bssid);
+u8 rtw_validate_ssid(NDIS_802_11_SSID *ssid);
+
+u16 rtw_get_cur_max_rate(_adapter *adapter);
+int rtw_set_scan_mode(_adapter *adapter, RT_SCAN_TYPE scan_mode);
+int rtw_set_channel_plan(_adapter *adapter, u8 channel_plan);
+int rtw_set_country(_adapter *adapter, const char *country_code);
+int rtw_set_band(_adapter *adapter, enum _BAND band);
+
+#endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtw_iol.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtw_iol.h
new file mode 100644 (file)
index 0000000..59786ee
--- /dev/null
@@ -0,0 +1,89 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __RTW_IOL_H_
+#define __RTW_IOL_H_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+
+typedef struct _io_offload_cmd {
+       u8 rsvd0;
+       u8 cmd;
+       u16 address;
+       u32 value;
+} IO_OFFLOAD_CMD, IOL_CMD;
+
+#define IOL_CMD_LLT                    0x00
+//#define IOL_CMD_R_EFUSE      0x01
+#define IOL_CMD_WB_REG         0x02
+#define IOL_CMD_WW_REG         0x03
+#define IOL_CMD_WD_REG         0x04
+//#define IOL_CMD_W_RF         0x05
+#define IOL_CMD_DELAY_US       0x80
+#define IOL_CMD_DELAY_MS       0x81
+//#define IOL_CMD_DELAY_S      0x82
+#define IOL_CMD_END                    0x83
+
+/*****************************************************
+CMD                                    Address                 Value
+(B1)                                   (B2/B3:H/L addr)        (B4:B7 : MSB:LSB)
+******************************************************
+IOL_CMD_LLT                    -                               B7: PGBNDY
+//IOL_CMD_R_EFUSE      -                               -
+IOL_CMD_WB_REG         0x0~0xFFFF              B7
+IOL_CMD_WW_REG 0x0~0xFFFF              B6~B7
+IOL_CMD_WD_REG 0x0~0xFFFF              B4~B7
+//IOL_CMD_W_RF         RF Reg                  B5~B7
+IOL_CMD_DELAY_US       -                               B6~B7
+IOL_CMD_DELAY_MS       -                               B6~B7
+//IOL_CMD_DELAY_S      -                               B6~B7
+IOL_CMD_END            -                               -
+******************************************************/
+
+struct xmit_frame      *rtw_IOL_accquire_xmit_frame(ADAPTER *adapter);
+int rtw_IOL_append_cmds(struct xmit_frame *xmit_frame, u8 *IOL_cmds, u32 cmd_len);
+int rtw_IOL_append_LLT_cmd(struct xmit_frame *xmit_frame, u8 page_boundary);
+int _rtw_IOL_append_WB_cmd(struct xmit_frame *xmit_frame, u16 addr, u8 value);
+int _rtw_IOL_append_WW_cmd(struct xmit_frame *xmit_frame, u16 addr, u16 value);
+int _rtw_IOL_append_WD_cmd(struct xmit_frame *xmit_frame, u16 addr, u32 value);
+int rtw_IOL_append_DELAY_US_cmd(struct xmit_frame *xmit_frame, u16 us);
+int rtw_IOL_append_DELAY_MS_cmd(struct xmit_frame *xmit_frame, u16 ms);
+int rtw_IOL_append_END_cmd(struct xmit_frame *xmit_frame);
+int rtw_IOL_exec_cmds_sync(ADAPTER *adapter, struct xmit_frame *xmit_frame, u32 max_wating_ms);
+int rtw_IOL_exec_cmd_array_sync(PADAPTER adapter, u8 *IOL_cmds, u32 cmd_num, u32 max_wating_ms);
+int rtw_IOL_exec_empty_cmds_sync(ADAPTER *adapter, u32 max_wating_ms);
+
+#ifdef DBG_IO
+int dbg_rtw_IOL_append_WB_cmd(struct xmit_frame *xmit_frame, u16 addr, u8 value, const char *caller, const int line);
+int dbg_rtw_IOL_append_WW_cmd(struct xmit_frame *xmit_frame, u16 addr, u16 value, const char *caller, const int line);
+int dbg_rtw_IOL_append_WD_cmd(struct xmit_frame *xmit_frame, u16 addr, u32 value, const char *caller, const int line);
+#define rtw_IOL_append_WB_cmd(xmit_frame, addr, value) dbg_rtw_IOL_append_WB_cmd((xmit_frame), (addr), (value), __FUNCTION__, __LINE__)
+#define rtw_IOL_append_WW_cmd(xmit_frame, addr, value) dbg_rtw_IOL_append_WW_cmd((xmit_frame), (addr), (value), __FUNCTION__, __LINE__)
+#define rtw_IOL_append_WD_cmd(xmit_frame, addr, value) dbg_rtw_IOL_append_WD_cmd((xmit_frame), (addr), (value), __FUNCTION__, __LINE__)
+#else
+#define rtw_IOL_append_WB_cmd(xmit_frame, addr, value) _rtw_IOL_append_WB_cmd((xmit_frame), (addr), (value))
+#define rtw_IOL_append_WW_cmd(xmit_frame, addr, value) _rtw_IOL_append_WW_cmd((xmit_frame), (addr), (value))
+#define rtw_IOL_append_WD_cmd(xmit_frame, addr, value) _rtw_IOL_append_WD_cmd((xmit_frame), (addr), (value))
+#endif
+
+bool rtw_IOL_applied(ADAPTER *adapter);
+
+#endif //__RTW_IOL_H_
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtw_led.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtw_led.h
new file mode 100644 (file)
index 0000000..7de268e
--- /dev/null
@@ -0,0 +1,216 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __RTW_LED_H_
+#define __RTW_LED_H_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+
+#define MSECS(t)        (HZ * ((t) / 1000) + (HZ * ((t) % 1000)) / 1000)
+
+typedef enum _LED_CTL_MODE{
+        LED_CTL_POWER_ON = 1,
+        LED_CTL_LINK = 2,
+        LED_CTL_NO_LINK = 3,
+        LED_CTL_TX = 4,
+        LED_CTL_RX = 5,
+        LED_CTL_SITE_SURVEY = 6,
+        LED_CTL_POWER_OFF = 7,
+        LED_CTL_START_TO_LINK = 8,
+        LED_CTL_START_WPS = 9,
+        LED_CTL_STOP_WPS = 10,
+        LED_CTL_START_WPS_BOTTON = 11, //added for runtop
+        LED_CTL_STOP_WPS_FAIL = 12, //added for ALPHA
+        LED_CTL_STOP_WPS_FAIL_OVERLAP = 13, //added for BELKIN
+}LED_CTL_MODE;
+
+
+#if defined(CONFIG_USB_HCI) || defined(CONFIG_SDIO_HCI)
+//================================================================================
+// LED object.
+//================================================================================
+
+typedef enum _LED_STATE_871x{
+       LED_UNKNOWN = 0,
+       RTW_LED_ON = 1,
+       RTW_LED_OFF = 2,
+       LED_BLINK_NORMAL = 3,
+       LED_BLINK_SLOWLY = 4,
+       LED_POWER_ON_BLINK = 5,
+       LED_SCAN_BLINK = 6, // LED is blinking during scanning period, the # of times to blink is depend on time for scanning.
+       LED_NO_LINK_BLINK = 7, // LED is blinking during no link state.
+       LED_BLINK_StartToBlink = 8,// Customzied for Sercomm Printer Server case
+       LED_BLINK_WPS = 9,      // LED is blinkg during WPS communication
+       LED_TXRX_BLINK = 10,
+       LED_BLINK_WPS_STOP = 11,        //for ALPHA
+       LED_BLINK_WPS_STOP_OVERLAP = 12,        //for BELKIN
+}LED_STATE_871x;
+
+#define IS_LED_WPS_BLINKING(_LED_871x) (((PLED_871x)_LED_871x)->CurrLedState==LED_BLINK_WPS \
+                                       || ((PLED_871x)_LED_871x)->CurrLedState==LED_BLINK_WPS_STOP \
+                                       || ((PLED_871x)_LED_871x)->bLedWPSBlinkInProgress)
+
+#define IS_LED_BLINKING(_LED_871x)     (((PLED_871x)_LED_871x)->bLedWPSBlinkInProgress \
+                                       ||((PLED_871x)_LED_871x)->bLedScanBlinkInProgress)
+
+typedef enum _LED_PIN_871x{
+       LED_PIN_GPIO0,
+       LED_PIN_LED0,
+       LED_PIN_LED1
+}LED_PIN_871x;
+
+typedef struct _LED_871x{
+       _adapter                                *padapter;
+       LED_PIN_871x            LedPin; // Identify how to implement this SW led.
+       LED_STATE_871x          CurrLedState; // Current LED state.
+       u8                                      bLedOn; // true if LED is ON, false if LED is OFF.
+
+       u8                                      bSWLedCtrl;
+
+       u8                                      bLedBlinkInProgress; // true if it is blinking, false o.w..
+       // ALPHA, added by chiyoko, 20090106
+       u8                                      bLedNoLinkBlinkInProgress;
+       u8                                      bLedLinkBlinkInProgress;
+       u8                                      bLedStartToLinkBlinkInProgress;
+       u8                                      bLedScanBlinkInProgress;
+       u8                                      bLedWPSBlinkInProgress;
+
+       u32                                     BlinkTimes; // Number of times to toggle led state for blinking.
+       LED_STATE_871x          BlinkingLedState; // Next state for blinking, either RTW_LED_ON or RTW_LED_OFF are.
+
+       _timer                          BlinkTimer; // Timer object for led blinking.
+#if LINUX_VERSION_CODE > KERNEL_VERSION(2,5,0)|| defined PLATFORM_FREEBSD
+       _workitem                       BlinkWorkItem; // Workitem used by BlinkTimer to manipulate H/W to blink LED.
+#endif
+} LED_871x, *PLED_871x;
+
+
+//================================================================================
+// LED customization.
+//================================================================================
+
+typedef        enum _LED_STRATEGY_871x{
+       SW_LED_MODE0, // SW control 1 LED via GPIO0. It is default option.
+       SW_LED_MODE1, // 2 LEDs, through LED0 and LED1. For ALPHA.
+       SW_LED_MODE2, // SW control 1 LED via GPIO0, customized for AzWave 8187 minicard.
+       SW_LED_MODE3, // SW control 1 LED via GPIO0, customized for Sercomm Printer Server case.
+       SW_LED_MODE4, //for Edimax / Belkin
+       SW_LED_MODE5, //for Sercomm / Belkin
+       SW_LED_MODE6, //for 88CU minicard, porting from ce SW_LED_MODE7
+       HW_LED, // HW control 2 LEDs, LED0 and LED1 (there are 4 different control modes, see MAC.CONFIG1 for details.)
+}LED_STRATEGY_871x, *PLED_STRATEGY_871x;
+#endif //CONFIG_USB_HCI
+
+#ifdef CONFIG_PCI_HCI
+//================================================================================
+// LED object.
+//================================================================================
+
+typedef        enum _LED_STATE_871x{
+       LED_UNKNOWN = 0,
+       RTW_LED_ON = 1,
+       RTW_LED_OFF = 2,
+       LED_BLINK_NORMAL = 3,
+       LED_BLINK_SLOWLY = 4,
+       LED_POWER_ON_BLINK = 5,
+       LED_SCAN_BLINK = 6, // LED is blinking during scanning period, the # of times to blink is depend on time for scanning.
+       LED_NO_LINK_BLINK = 7, // LED is blinking during no link state.
+       LED_BLINK_StartToBlink = 8,
+       LED_BLINK_TXRX = 9,
+       LED_BLINK_RUNTOP = 10, // Customized for RunTop
+       LED_BLINK_CAMEO = 11,
+}LED_STATE_871x;
+
+typedef enum _LED_PIN_871x{
+       LED_PIN_GPIO0,
+       LED_PIN_LED0,
+       LED_PIN_LED1,
+       LED_PIN_LED2
+}LED_PIN_871x;
+
+typedef struct _LED_871x{
+       _adapter                                *padapter;
+
+       LED_PIN_871x            LedPin; // Identify how to implement this SW led.
+
+       LED_STATE_871x          CurrLedState; // Current LED state.
+       u8                                      bLedOn; // TRUE if LED is ON, FALSE if LED is OFF.
+
+       u8                                      bLedBlinkInProgress; // TRUE if it is blinking, FALSE o.w..
+       u8                                      bLedWPSBlinkInProgress; // TRUE if it is blinking, FALSE o.w..
+
+       u8                                      bLedSlowBlinkInProgress;//added by vivi, for led new mode
+       u32                                     BlinkTimes; // Number of times to toggle led state for blinking.
+       LED_STATE_871x          BlinkingLedState; // Next state for blinking, either RTW_LED_ON or RTW_LED_OFF are.
+
+       _timer                          BlinkTimer; // Timer object for led blinking.
+
+       u8                                      bLedLinkBlinkInProgress;
+       u8                                      bLedNoLinkBlinkInProgress;
+       u8                                      bLedScanBlinkInProgress;
+} LED_871x, *PLED_871x;
+
+
+//================================================================================
+// LED customization.
+//================================================================================
+
+typedef        enum _LED_STRATEGY_871x{
+       SW_LED_MODE0, // SW control 1 LED via GPIO0. It is default option.
+       SW_LED_MODE1, // SW control for PCI Express
+       SW_LED_MODE2, // SW control for Cameo.
+       SW_LED_MODE3, // SW contorl for RunTop.
+       SW_LED_MODE4, // SW control for Netcore
+       SW_LED_MODE5, //added by vivi, for led new mode, DLINK
+       SW_LED_MODE6, //added by vivi, for led new mode, PRONET
+       SW_LED_MODE7, //added by chiyokolin, for Lenovo, PCI Express Minicard Spec Rev.1.2 spec
+       SW_LED_MODE8, //added by chiyokolin, for QMI
+       SW_LED_MODE9, //added by chiyokolin, for BITLAND, PCI Express Minicard Spec Rev.1.1
+       SW_LED_MODE10, //added by chiyokolin, for Edimax-ASUS
+       HW_LED, // HW control 2 LEDs, LED0 and LED1 (there are 4 different control modes)
+}LED_STRATEGY_871x, *PLED_STRATEGY_871x;
+
+#define LED_CM8_BLINK_INTERVAL         500     //for QMI
+#endif //CONFIG_PCI_HCI
+
+struct led_priv{
+       /* add for led controll */
+       LED_871x                        SwLed0;
+       LED_871x                        SwLed1;
+       LED_STRATEGY_871x       LedStrategy;
+       u8                                      bRegUseLed;
+       void (*LedControlHandler)(_adapter *padapter, LED_CTL_MODE LedAction);
+       /* add for led controll */
+};
+
+#ifdef CONFIG_SW_LED
+#define rtw_led_control(adapter, LedAction) \
+       do { \
+               if((adapter)->ledpriv.LedControlHandler) \
+                       (adapter)->ledpriv.LedControlHandler((adapter), (LedAction)); \
+       } while(0)
+#else //CONFIG_SW_LED
+#define rtw_led_control(adapter, LedAction)
+#endif //CONFIG_SW_LED
+
+extern void BlinkHandler(PLED_871x      pLed);
+
+#endif //__RTW_LED_H_
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtw_mlme.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtw_mlme.h
new file mode 100644 (file)
index 0000000..862326d
--- /dev/null
@@ -0,0 +1,843 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __RTW_MLME_H_
+#define __RTW_MLME_H_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <mlme_osdep.h>
+#include <drv_types.h>
+#include <wlan_bssdef.h>
+
+#ifdef CONFIG_INTEL_WIDI
+#include <rtw_intel_widi.h>
+#endif
+
+#define        MAX_BSS_CNT     128
+//#define   MAX_JOIN_TIMEOUT   2000
+//#define   MAX_JOIN_TIMEOUT   2500
+#define   MAX_JOIN_TIMEOUT     6500
+
+//     Commented by Albert 20101105
+//     Increase the scanning timeout because of increasing the SURVEY_TO value.
+
+#define        SCANNING_TIMEOUT        8000
+
+#define        SCAN_INTERVAL   (30) // unit:2sec, 30*2=60sec
+
+#ifdef PALTFORM_OS_WINCE
+#define        SCANQUEUE_LIFETIME 12000000 // unit:us
+#else
+#define        SCANQUEUE_LIFETIME 20 // unit:sec
+#endif
+
+#define        WIFI_NULL_STATE                 0x00000000
+
+#define        WIFI_ASOC_STATE                 0x00000001              // Under Linked state...
+#define        WIFI_REASOC_STATE               0x00000002
+#define        WIFI_SLEEP_STATE                        0x00000004
+#define        WIFI_STATION_STATE              0x00000008
+
+#define        WIFI_AP_STATE                           0x00000010
+#define        WIFI_ADHOC_STATE                        0x00000020
+#define   WIFI_ADHOC_MASTER_STATE 0x00000040
+#define   WIFI_UNDER_LINKING           0x00000080
+
+#define        WIFI_UNDER_WPS                  0x00000100
+//#define      WIFI_UNDER_CMD                  0x00000200
+//#define      WIFI_UNDER_P2P                  0x00000400
+#define        WIFI_STA_ALIVE_CHK_STATE        0x00000400
+#define        WIFI_SITE_MONITOR                       0x00000800              //to indicate the station is under site surveying
+
+#ifdef WDS
+#define        WIFI_WDS                                        0x00001000
+#define        WIFI_WDS_RX_BEACON              0x00002000              // already rx WDS AP beacon
+#endif
+#ifdef AUTO_CONFIG
+#define        WIFI_AUTOCONF                           0x00004000
+#define        WIFI_AUTOCONF_IND               0x00008000
+#endif
+
+/*
+// ========== P2P Section Start ===============
+#define        WIFI_P2P_LISTEN_STATE           0x00010000
+#define        WIFI_P2P_GROUP_FORMATION_STATE          0x00020000
+// ========== P2P Section End ===============
+*/
+
+//#ifdef UNDER_MPTEST
+#define        WIFI_MP_STATE                                                   0x00010000
+#define        WIFI_MP_CTX_BACKGROUND                          0x00020000      // in continous tx background
+#define        WIFI_MP_CTX_ST                                          0x00040000      // in continous tx with single-tone
+#define        WIFI_MP_CTX_BACKGROUND_PENDING  0x00080000      // pending in continous tx background due to out of skb
+#define        WIFI_MP_CTX_CCK_HW                                      0x00100000      // in continous tx
+#define        WIFI_MP_CTX_CCK_CS                                      0x00200000      // in continous tx with carrier suppression
+#define   WIFI_MP_LPBK_STATE                                   0x00400000
+//#endif
+
+//#define _FW_UNDER_CMD                WIFI_UNDER_CMD
+#define _FW_UNDER_LINKING      WIFI_UNDER_LINKING
+#define _FW_LINKED                     WIFI_ASOC_STATE
+#define _FW_UNDER_SURVEY       WIFI_SITE_MONITOR
+
+
+enum dot11AuthAlgrthmNum {
+ dot11AuthAlgrthm_Open = 0,
+ dot11AuthAlgrthm_Shared,
+ dot11AuthAlgrthm_8021X,
+ dot11AuthAlgrthm_Auto,
+ dot11AuthAlgrthm_MaxNum
+};
+
+// Scan type including active and passive scan.
+typedef enum _RT_SCAN_TYPE
+{
+       SCAN_PASSIVE,
+       SCAN_ACTIVE,
+       SCAN_MIX,
+}RT_SCAN_TYPE, *PRT_SCAN_TYPE;
+
+enum DriverInterface {
+       DRIVER_WEXT =  1,
+       DRIVER_CFG80211 = 2
+};
+
+enum  _BAND
+{
+       GHZ24_50 = 0,
+       GHZ_50,
+       GHZ_24,
+       GHZ_MAX,
+};
+
+#define rtw_band_valid(band) ((band) >= GHZ24_50 && (band) < GHZ_MAX)
+
+enum SCAN_RESULT_TYPE
+{
+       SCAN_RESULT_P2P_ONLY = 0,               //      Will return all the P2P devices.
+       SCAN_RESULT_ALL = 1,                    //      Will return all the scanned device, include AP.
+       SCAN_RESULT_WFD_TYPE = 2                //      Will just return the correct WFD device.
+                                                                       //      If this device is Miracast sink device, it will just return all the Miracast source devices.
+};
+
+/*
+
+there are several "locks" in mlme_priv,
+since mlme_priv is a shared resource between many threads,
+like ISR/Call-Back functions, the OID handlers, and even timer functions.
+
+
+Each _queue has its own locks, already.
+Other items are protected by mlme_priv.lock.
+
+To avoid possible dead lock, any thread trying to modifiying mlme_priv
+SHALL not lock up more than one locks at a time!
+
+*/
+
+
+#define traffic_threshold      10
+#define        traffic_scan_period     500
+
+struct sitesurvey_ctrl {
+       u64     last_tx_pkts;
+       uint    last_rx_pkts;
+       sint    traffic_busy;
+       _timer  sitesurvey_ctrl_timer;
+};
+
+typedef struct _RT_LINK_DETECT_T{
+       u32                             NumTxOkInPeriod;
+       u32                             NumRxOkInPeriod;
+       u32                             NumRxUnicastOkInPeriod;
+       BOOLEAN                 bBusyTraffic;
+       BOOLEAN                 bTxBusyTraffic;
+       BOOLEAN                 bRxBusyTraffic;
+       BOOLEAN                 bHigherBusyTraffic; // For interrupt migration purpose.
+       BOOLEAN                 bHigherBusyRxTraffic; // We may disable Tx interrupt according as Rx traffic.
+       BOOLEAN                 bHigherBusyTxTraffic; // We may disable Tx interrupt according as Tx traffic.
+}RT_LINK_DETECT_T, *PRT_LINK_DETECT_T;
+
+struct profile_info {
+       u8      ssidlen;
+       u8      ssid[ WLAN_SSID_MAXLEN ];
+       u8      peermac[ ETH_ALEN ];
+};
+
+struct tx_invite_req_info{
+       u8                                      token;
+       u8                                      benable;
+       u8                                      go_ssid[ WLAN_SSID_MAXLEN ];
+       u8                                      ssidlen;
+       u8                                      go_bssid[ ETH_ALEN ];
+       u8                                      peer_macaddr[ ETH_ALEN ];
+       u8                                      operating_ch;   //      This information will be set by using the p2p_set op_ch=x
+       u8                                      peer_ch;                //      The listen channel for peer P2P device
+
+};
+
+struct tx_invite_resp_info{
+       u8                                      token;  //      Used to record the dialog token of p2p invitation request frame.
+};
+
+#ifdef CONFIG_WFD
+
+struct wifi_display_info{
+       u16                                                     wfd_enable;                     //      Eanble/Disable the WFD function.
+       u16                                                     rtsp_ctrlport;          //      TCP port number at which the this WFD device listens for RTSP messages
+       u16                                                     peer_rtsp_ctrlport;     //      TCP port number at which the peer WFD device listens for RTSP messages
+                                                                                                       //      This filed should be filled when receiving the gropu negotiation request
+
+       u8                                                      peer_session_avail;     //      WFD session is available or not for the peer wfd device.
+                                                                                                       //      This variable will be set when sending the provisioning discovery request to peer WFD device.
+                                                                                                       //      And this variable will be reset when it is read by using the iwpriv p2p_get wfd_sa command.
+
+       u8                                                      ip_address[4];
+       u8                                                      peer_ip_address[4];
+       u8                                                      wfd_pc;                         //      WFD preferred connection
+                                                                                                       //      0 -> Prefer to use the P2P for WFD connection on peer side.
+                                                                                                       //      1 -> Prefer to use the TDLS for WFD connection on peer side.
+
+       u8                                                      wfd_device_type;        //      WFD Device Type
+                                                                                                       //      0 -> WFD Source Device
+                                                                                                       //      1 -> WFD Primary Sink Device
+       enum    SCAN_RESULT_TYPE        scan_result_type;       //      Used when P2P is enable. This parameter will impact the scan result.
+};
+#endif //CONFIG_WFD
+
+struct tx_provdisc_req_info{
+       u16                                     wps_config_method_request;      //      Used when sending the provisioning request frame
+       u16                                     peer_channel_num[2];            //      The channel number which the receiver stands.
+       NDIS_802_11_SSID        ssid;
+       u8                                      peerDevAddr[ ETH_ALEN ];                //      Peer device address
+       u8                                      peerIFAddr[ ETH_ALEN ];         //      Peer interface address
+       u8                                      benable;                                        //      This provision discovery request frame is trigger to send or not
+};
+
+struct rx_provdisc_req_info{   //When peer device issue prov_disc_req first, we should store the following informations
+       u8                                      peerDevAddr[ ETH_ALEN ];                //      Peer device address
+       u8                                      strconfig_method_desc_of_prov_disc_req[4];      //      description for the config method located in the provisioning discovery request frame.
+                                                                                                                                       //      The UI must know this information to know which config method the remote p2p device is requiring.
+};
+
+struct tx_nego_req_info{
+       u16                                     peer_channel_num[2];            //      The channel number which the receiver stands.
+       u8                                      peerDevAddr[ ETH_ALEN ];                //      Peer device address
+       u8                                      benable;                                        //      This negoitation request frame is trigger to send or not
+};
+
+struct group_id_info{
+       u8                                      go_device_addr[ ETH_ALEN ];     //      The GO's device address of this P2P group
+       u8                                      ssid[ WLAN_SSID_MAXLEN ];       //      The SSID of this P2P group
+};
+
+struct scan_limit_info{
+       u8                                      scan_op_ch_only;                        //      When this flag is set, the driver should just scan the operation channel
+#ifndef P2P_OP_CHECK_SOCIAL_CH
+       u8                                      operation_ch[2];                                //      Store the operation channel of invitation request frame
+#else
+       u8                                      operation_ch[5];                                //      Store additional channel 1,6,11  for Android 4.2 IOT & Nexus 4
+#endif //P2P_OP_CHECK_SOCIAL_CH
+};
+
+#ifdef CONFIG_IOCTL_CFG80211
+struct cfg80211_wifidirect_info{
+       _timer                                  remain_on_ch_timer;
+       u8                                              restore_channel;
+       struct ieee80211_channel        remain_on_ch_channel;
+       enum nl80211_channel_type       remain_on_ch_type;
+       u64                                             remain_on_ch_cookie;
+       bool is_ro_ch;
+};
+#endif //CONFIG_IOCTL_CFG80211
+
+struct wifidirect_info{
+       _adapter*                               padapter;
+       _timer                                  find_phase_timer;
+       _timer                                  restore_p2p_state_timer;
+
+       //      Used to do the scanning. After confirming the peer is availalble, the driver transmits the P2P frame to peer.
+       _timer                                  pre_tx_scan_timer;
+       _timer                                  reset_ch_sitesurvey;
+       _timer                                  reset_ch_sitesurvey2;   //      Just for resetting the scan limit function by using p2p nego
+#ifdef CONFIG_CONCURRENT_MODE
+       //      Used to switch the channel between legacy AP and listen state.
+       _timer                                  ap_p2p_switch_timer;
+#endif
+       struct tx_provdisc_req_info     tx_prov_disc_info;
+       struct rx_provdisc_req_info rx_prov_disc_info;
+       struct tx_invite_req_info       invitereq_info;
+       struct profile_info                     profileinfo[ P2P_MAX_PERSISTENT_GROUP_NUM ];    //      Store the profile information of persistent group
+       struct tx_invite_resp_info      inviteresp_info;
+       struct tx_nego_req_info nego_req_info;
+       struct group_id_info            groupid_info;   //      Store the group id information when doing the group negotiation handshake.
+       struct scan_limit_info          rx_invitereq_info;      //      Used for get the limit scan channel from the Invitation procedure
+       struct scan_limit_info          p2p_info;               //      Used for get the limit scan channel from the P2P negotiation handshake
+#ifdef CONFIG_WFD
+       struct wifi_display_info                *wfd_info;
+#endif
+       enum P2P_ROLE                   role;
+       enum P2P_STATE                  pre_p2p_state;
+       enum P2P_STATE                  p2p_state;
+       u8                                              device_addr[ETH_ALEN];  //      The device address should be the mac address of this device.
+       u8                                              interface_addr[ETH_ALEN];
+       u8                                              social_chan[4];
+       u8                                              listen_channel;
+       u8                                              operating_channel;
+       u8                                              listen_dwell;           //      This value should be between 1 and 3
+       u8                                              support_rate[8];
+       u8                                              p2p_wildcard_ssid[P2P_WILDCARD_SSID_LEN];
+       u8                                              intent;         //      should only include the intent value.
+       u8                                              p2p_peer_interface_addr[ ETH_ALEN ];
+       u8                                              p2p_peer_device_addr[ ETH_ALEN ];
+       u8                                              peer_intent;    //      Included the intent value and tie breaker value.
+       u8                                              device_name[ WPS_MAX_DEVICE_NAME_LEN ]; //      Device name for displaying on searching device screen
+       u8                                              device_name_len;
+       u8                                              profileindex;   //      Used to point to the index of profileinfo array
+       u8                                              peer_operating_ch;
+       u8                                              find_phase_state_exchange_cnt;
+       u16                                             device_password_id_for_nego;    //      The device password ID for group negotation
+       u8                                              negotiation_dialog_token;
+       u8                                              nego_ssid[ WLAN_SSID_MAXLEN ];  //      SSID information for group negotitation
+       u8                                              nego_ssidlen;
+       u8                                              p2p_group_ssid[WLAN_SSID_MAXLEN];
+       u8                                              p2p_group_ssid_len;
+       u8                                              persistent_supported;           //      Flag to know the persistent function should be supported or not.
+                                                                                                               //      In the Sigma test, the Sigma will provide this enable from the sta_set_p2p CAPI.
+                                                                                                               //      0: disable
+                                                                                                               //      1: enable
+       u8                                              session_available;                      //      Flag to set the WFD session available to enable or disable "by Sigma"
+                                                                                                               //      In the Sigma test, the Sigma will disable the session available by using the sta_preset CAPI.
+                                                                                                               //      0: disable
+                                                                                                               //      1: enable
+       u8                                              wfd_tdls_enable;                        //      Flag to enable or disable the TDLS by WFD Sigma
+                                                                                                               //      0: disable
+                                                                                                               //      1: enable
+       u8                                              wfd_tdls_weaksec;                       //      Flag to enable or disable the weak security function for TDLS by WFD Sigma
+                                                                                                               //      0: disable
+                                                                                                               //      In this case, the driver can't issue the tdsl setup request frame.
+                                                                                                               //      1: enable
+                                                                                                               //      In this case, the driver can issue the tdls setup request frame
+                                                                                                               //      even the current security is weak security.
+
+       enum    P2P_WPSINFO             ui_got_wps_info;                        //      This field will store the WPS value (PIN value or PBC) that UI had got from the user.
+       u16                                             supported_wps_cm;                       //      This field describes the WPS config method which this driver supported.
+                                                                                                               //      The value should be the combination of config method defined in page104 of WPS v2.0 spec.
+       u8                                              external_uuid;                          //  UUID flag
+       u8                                              uuid[16];                                       //  UUID
+       uint                                            channel_list_attr_len;          //      This field will contain the length of body of P2P Channel List attribute of group negotitation response frame.
+       u8                                              channel_list_attr[100];         //      This field will contain the body of P2P Channel List attribute of group negotitation response frame.
+                                                                                                               //      We will use the channel_cnt and channel_list fields when constructing the group negotitation confirm frame.
+       u8                                              driver_interface;                       // Indicate DRIVER_WEXT or DRIVER_CFG80211
+
+#ifdef CONFIG_CONCURRENT_MODE
+       u16                                             ext_listen_interval;    //      The interval to be available with legacy AP (ms)
+       u16                                             ext_listen_period;      //      The time period to be available for P2P listen state (ms)
+#endif
+#ifdef CONFIG_P2P_PS
+       enum P2P_PS_MODE                p2p_ps_mode; // indicate p2p ps mode
+       enum P2P_PS_STATE               p2p_ps_state; // indicate p2p ps state
+       u8                                              noa_index; // Identifies and instance of Notice of Absence timing.
+       u8                                              ctwindow; // Client traffic window. A period of time in TU after TBTT.
+       u8                                              opp_ps; // opportunistic power save.
+       u8                                              noa_num; // number of NoA descriptor in P2P IE.
+       u8                                              noa_count[P2P_MAX_NOA_NUM]; // Count for owner, Type of client.
+       u32                                             noa_duration[P2P_MAX_NOA_NUM]; // Max duration for owner, preferred or min acceptable duration for client.
+       u32                                             noa_interval[P2P_MAX_NOA_NUM]; // Length of interval for owner, preferred or max acceptable interval of client.
+       u32                                             noa_start_time[P2P_MAX_NOA_NUM]; // schedule expressed in terms of the lower 4 bytes of the TSF timer.
+#endif // CONFIG_P2P_PS
+};
+
+struct tdls_ss_record{ //signal strength record; recording the tdls sta with lowerest ss
+       u8              macaddr[ETH_ALEN];
+       u8              RxPWDBAll;
+       u8              is_tdls_sta;    // _TRUE: direct link sta, _FALSE: else
+};
+
+struct tdls_info{
+       u8                                      ap_prohibited;
+       uint                                    setup_state;
+       u8                                      sta_cnt;
+       u8                                      sta_maximum;    // 1:tdls sta is equal (NUM_STA-1), reach max direct link number; 0: else;
+       struct tdls_ss_record   ss_record;
+       u8                                      macid_index;    //macid entry that is ready to write
+       u8                                      clear_cam;      //cam entry that is trying to clear, using it in direct link teardown
+       u8                                      ch_sensing;
+       u8                                      cur_channel;
+       u8                                      candidate_ch;
+       u8                                      collect_pkt_num[MAX_CHANNEL_NUM];
+       _lock                           cmd_lock;
+       _lock                           hdl_lock;
+       u8                                      watchdog_count;
+       u8                                      dev_discovered;         //WFD_TDLS: for sigma test
+       u8                                      enable;
+#ifdef CONFIG_WFD
+       struct wifi_display_info                *wfd_info;
+#endif
+};
+
+struct mlme_priv {
+
+       _lock   lock;
+       sint    fw_state;       //shall we protect this variable? maybe not necessarily...
+
+       u8      to_join; //flag
+       #ifdef CONFIG_LAYER2_ROAMING
+       u8 to_roaming; // roaming trying times
+       #endif
+
+       u8      *nic_hdl;
+
+       u8      not_indic_disco;
+       _list           *pscanned;
+       _queue  free_bss_pool;
+       _queue  scanned_queue;
+       u8              *free_bss_buf;
+       u32     num_of_scanned;
+
+       NDIS_802_11_SSID        assoc_ssid;
+       u8      assoc_bssid[6];
+
+       struct wlan_network     cur_network;
+
+       //uint wireless_mode; no used, remove it
+
+       u32     scan_interval;
+
+       _timer assoc_timer;
+
+       uint assoc_by_bssid;
+       uint assoc_by_rssi;
+
+       _timer scan_to_timer; // driver itself handles scan_timeout status.
+       u32 scan_start_time; // used to evaluate the time spent in scanning
+
+       #ifdef CONFIG_SET_SCAN_DENY_TIMER
+       _timer set_scan_deny_timer;
+       ATOMIC_T set_scan_deny; //0: allowed, 1: deny
+       #endif
+
+       struct qos_priv qospriv;
+
+#ifdef CONFIG_80211N_HT
+
+       /* Number of non-HT AP/stations */
+       int num_sta_no_ht;
+
+       /* Number of HT AP/stations 20 MHz */
+       //int num_sta_ht_20mhz;
+
+
+       int num_FortyMHzIntolerant;
+
+       struct ht_priv  htpriv;
+
+#endif
+
+       RT_LINK_DETECT_T        LinkDetectInfo;
+       _timer  dynamic_chk_timer; //dynamic/periodic check timer
+
+       u8      acm_mask; // for wmm acm mask
+       u8      ChannelPlan;
+       RT_SCAN_TYPE    scan_mode; // active: 1, passive: 0
+
+       //u8 probereq_wpsie[MAX_WPS_IE_LEN];//added in probe req
+       //int probereq_wpsie_len;
+       u8 *wps_probe_req_ie;
+       u32 wps_probe_req_ie_len;
+
+#if defined (CONFIG_AP_MODE) && defined (CONFIG_NATIVEAP_MLME)
+       /* Number of associated Non-ERP stations (i.e., stations using 802.11b
+        * in 802.11g BSS) */
+       int num_sta_non_erp;
+
+       /* Number of associated stations that do not support Short Slot Time */
+       int num_sta_no_short_slot_time;
+
+       /* Number of associated stations that do not support Short Preamble */
+       int num_sta_no_short_preamble;
+
+       int olbc; /* Overlapping Legacy BSS Condition */
+
+       /* Number of HT associated stations that do not support greenfield */
+       int num_sta_ht_no_gf;
+
+       /* Number of associated non-HT stations */
+       //int num_sta_no_ht;
+
+       /* Number of HT associated stations 20 MHz */
+       int num_sta_ht_20mhz;
+
+       /* Overlapping BSS information */
+       int olbc_ht;
+
+#ifdef CONFIG_80211N_HT
+       u16 ht_op_mode;
+#endif /* CONFIG_80211N_HT */
+
+       u8 *assoc_req;
+       u32 assoc_req_len;
+       u8 *assoc_rsp;
+       u32 assoc_rsp_len;
+
+       u8 *wps_beacon_ie;
+       //u8 *wps_probe_req_ie;
+       u8 *wps_probe_resp_ie;
+       u8 *wps_assoc_resp_ie; // for CONFIG_IOCTL_CFG80211, this IE could include p2p ie / wfd ie
+
+       u32 wps_beacon_ie_len;
+       //u32 wps_probe_req_ie_len;
+       u32 wps_probe_resp_ie_len;
+       u32 wps_assoc_resp_ie_len; // for CONFIG_IOCTL_CFG80211, this IE len could include p2p ie / wfd ie
+
+       u8 *p2p_beacon_ie;
+       u8 *p2p_probe_req_ie;
+       u8 *p2p_probe_resp_ie;
+       u8 *p2p_go_probe_resp_ie; //for GO
+       u8 *p2p_assoc_req_ie;
+
+       u32 p2p_beacon_ie_len;
+       u32 p2p_probe_req_ie_len;
+       u32 p2p_probe_resp_ie_len;
+       u32 p2p_go_probe_resp_ie_len; //for GO
+       u32 p2p_assoc_req_ie_len;
+/*
+#if defined(CONFIG_P2P) && defined(CONFIG_IOCTL_CFG80211)
+       //u8 *wps_p2p_beacon_ie;
+       u8 *p2p_beacon_ie;
+       u8 *wps_p2p_probe_resp_ie;
+       u8 *wps_p2p_assoc_resp_ie;
+       //u32 wps_p2p_beacon_ie_len;
+       u32 p2p_beacon_ie_len;
+       u32 wps_p2p_probe_resp_ie_len;
+       u32 wps_p2p_assoc_resp_ie_len;
+#endif
+*/
+
+       _lock   bcn_update_lock;
+       u8              update_bcn;
+
+
+#endif //#if defined (CONFIG_AP_MODE) && defined (CONFIG_NATIVEAP_MLME)
+
+#if defined(CONFIG_WFD) && defined(CONFIG_IOCTL_CFG80211)
+
+       u8 *wfd_beacon_ie;
+       u8 *wfd_probe_req_ie;
+       u8 *wfd_probe_resp_ie;
+       u8 *wfd_go_probe_resp_ie; //for GO
+       u8 *wfd_assoc_req_ie;
+
+       u32 wfd_beacon_ie_len;
+       u32 wfd_probe_req_ie_len;
+       u32 wfd_probe_resp_ie_len;
+       u32 wfd_go_probe_resp_ie_len; //for GO
+       u32 wfd_assoc_req_ie_len;
+
+#endif
+
+#ifdef RTK_DMP_PLATFORM
+       // DMP kobject_hotplug function  signal need in passive level
+       _workitem       Linkup_workitem;
+       _workitem       Linkdown_workitem;
+#endif
+
+#ifdef CONFIG_INTEL_WIDI
+       int     widi_state;
+       int     listen_state;
+       _timer  listen_timer;
+       ATOMIC_T        rx_probe_rsp; // 1:receive probe respone from RDS source.
+       u8      *l2sdTaBuffer;
+       u8      channel_idx;
+       s8      group_cnt;      //For WiDi 3.5, they specified another scan algo. for WFD/RDS co-existed
+       u8      sa_ext[L2SDTA_SERVICE_VE_LEN];
+
+       u8      widi_enable;
+       /**
+        * For WiDi 4; upper layer would set
+        * p2p_primary_device_type_category_id
+        * p2p_primary_device_type_sub_category_id
+        * p2p_secondary_device_type_category_id
+        * p2p_secondary_device_type_sub_category_id
+        */
+       u16     p2p_pdt_cid;
+       u16     p2p_pdt_scid;
+       u8      num_p2p_sdt;
+       u16     p2p_sdt_cid[MAX_NUM_P2P_SDT];
+       u16     p2p_sdt_scid[MAX_NUM_P2P_SDT];
+       u8      p2p_reject_disable;     //When starting NL80211 wpa_supplicant/hostapd, it will call netdev_close
+                                                       //such that it will cause p2p disabled. Use this flag to reject.
+#endif // CONFIG_INTEL_WIDI
+
+#ifdef CONFIG_CONCURRENT_MODE
+       u8      scanning_via_buddy_intf;
+#endif
+};
+
+#ifdef CONFIG_AP_MODE
+
+struct hostapd_priv
+{
+       _adapter *padapter;
+
+#ifdef CONFIG_HOSTAPD_MLME
+       struct net_device *pmgnt_netdev;
+       struct usb_anchor anchored;
+#endif
+
+};
+
+extern int hostapd_mode_init(_adapter *padapter);
+extern void hostapd_mode_unload(_adapter *padapter);
+#endif
+
+
+extern void rtw_joinbss_event_prehandle(_adapter *adapter, u8 *pbuf);
+extern void rtw_survey_event_callback(_adapter *adapter, u8 *pbuf);
+extern void rtw_surveydone_event_callback(_adapter *adapter, u8 *pbuf);
+extern void rtw_joinbss_event_callback(_adapter *adapter, u8 *pbuf);
+extern void rtw_stassoc_event_callback(_adapter *adapter, u8 *pbuf);
+extern void rtw_stadel_event_callback(_adapter *adapter, u8 *pbuf);
+extern void rtw_atimdone_event_callback(_adapter *adapter, u8 *pbuf);
+extern void rtw_cpwm_event_callback(_adapter *adapter, u8 *pbuf);
+
+#ifdef PLATFORM_WINDOWS
+extern thread_return event_thread(void *context);
+
+extern void rtw_join_timeout_handler (
+       IN      PVOID                                   SystemSpecific1,
+       IN      PVOID                                   FunctionContext,
+       IN      PVOID                                   SystemSpecific2,
+       IN      PVOID                                   SystemSpecific3
+       );
+
+extern void _rtw_scan_timeout_handler (
+       IN      PVOID                                   SystemSpecific1,
+       IN      PVOID                                   FunctionContext,
+       IN      PVOID                                   SystemSpecific2,
+       IN      PVOID                                   SystemSpecific3
+       );
+
+#endif
+
+#if defined (PLATFORM_LINUX)|| defined (PLATFORM_FREEBSD)
+extern int event_thread(void *context);
+extern void rtw_join_timeout_handler(void* FunctionContext);
+extern void _rtw_scan_timeout_handler(void* FunctionContext);
+#endif
+
+extern void rtw_free_network_queue(_adapter *adapter,u8 isfreeall);
+extern int rtw_init_mlme_priv(_adapter *adapter);// (struct mlme_priv *pmlmepriv);
+
+extern void rtw_free_mlme_priv (struct mlme_priv *pmlmepriv);
+
+
+extern sint rtw_select_and_join_from_scanned_queue(struct mlme_priv *pmlmepriv);
+extern sint rtw_set_key(_adapter *adapter,struct security_priv *psecuritypriv,sint keyid, u8 set_tx);
+extern sint rtw_set_auth(_adapter *adapter,struct security_priv *psecuritypriv);
+
+__inline static u8 *get_bssid(struct mlme_priv *pmlmepriv)
+{      //if sta_mode:pmlmepriv->cur_network.network.MacAddress=> bssid
+       // if adhoc_mode:pmlmepriv->cur_network.network.MacAddress=> ibss mac address
+       return pmlmepriv->cur_network.network.MacAddress;
+}
+
+__inline static sint check_fwstate(struct mlme_priv *pmlmepriv, sint state)
+{
+       if (pmlmepriv->fw_state & state)
+               return _TRUE;
+
+       return _FALSE;
+}
+
+__inline static sint get_fwstate(struct mlme_priv *pmlmepriv)
+{
+       return pmlmepriv->fw_state;
+}
+
+/*
+ * No Limit on the calling context,
+ * therefore set it to be the critical section...
+ *
+ * ### NOTE:#### (!!!!)
+ * MUST TAKE CARE THAT BEFORE CALLING THIS FUNC, YOU SHOULD HAVE LOCKED pmlmepriv->lock
+ */
+__inline static void set_fwstate(struct mlme_priv *pmlmepriv, sint state)
+{
+       pmlmepriv->fw_state |= state;
+}
+
+__inline static void _clr_fwstate_(struct mlme_priv *pmlmepriv, sint state)
+{
+       pmlmepriv->fw_state &= ~state;
+}
+
+/*
+ * No Limit on the calling context,
+ * therefore set it to be the critical section...
+ */
+__inline static void clr_fwstate(struct mlme_priv *pmlmepriv, sint state)
+{
+       _irqL irqL;
+
+       _enter_critical_bh(&pmlmepriv->lock, &irqL);
+       if (check_fwstate(pmlmepriv, state) == _TRUE)
+               pmlmepriv->fw_state ^= state;
+       _exit_critical_bh(&pmlmepriv->lock, &irqL);
+}
+
+__inline static void clr_fwstate_ex(struct mlme_priv *pmlmepriv, sint state)
+{
+       _irqL irqL;
+
+       _enter_critical_bh(&pmlmepriv->lock, &irqL);
+       _clr_fwstate_(pmlmepriv, state);
+       _exit_critical_bh(&pmlmepriv->lock, &irqL);
+}
+
+__inline static void up_scanned_network(struct mlme_priv *pmlmepriv)
+{
+       _irqL irqL;
+
+       _enter_critical_bh(&pmlmepriv->lock, &irqL);
+       pmlmepriv->num_of_scanned++;
+       _exit_critical_bh(&pmlmepriv->lock, &irqL);
+}
+
+#ifdef CONFIG_CONCURRENT_MODE
+sint rtw_buddy_adapter_up(_adapter *padapter);
+sint check_buddy_fwstate(_adapter *padapter, sint state);
+#endif //CONFIG_CONCURRENT_MODE
+
+__inline static void down_scanned_network(struct mlme_priv *pmlmepriv)
+{
+       _irqL irqL;
+
+       _enter_critical_bh(&pmlmepriv->lock, &irqL);
+       pmlmepriv->num_of_scanned--;
+       _exit_critical_bh(&pmlmepriv->lock, &irqL);
+}
+
+__inline static void set_scanned_network_val(struct mlme_priv *pmlmepriv, sint val)
+{
+       _irqL irqL;
+
+       _enter_critical_bh(&pmlmepriv->lock, &irqL);
+       pmlmepriv->num_of_scanned = val;
+       _exit_critical_bh(&pmlmepriv->lock, &irqL);
+}
+
+extern u16 rtw_get_capability(WLAN_BSSID_EX *bss);
+extern void rtw_update_scanned_network(_adapter *adapter, WLAN_BSSID_EX *target);
+extern void rtw_disconnect_hdl_under_linked(_adapter* adapter, struct sta_info *psta, u8 free_assoc);
+extern void rtw_generate_random_ibss(u8 *pibss);
+extern struct wlan_network* rtw_find_network(_queue *scanned_queue, u8 *addr);
+extern struct wlan_network* rtw_get_oldest_wlan_network(_queue *scanned_queue);
+
+extern void rtw_free_assoc_resources(_adapter* adapter, int lock_scanned_queue);
+extern void rtw_indicate_disconnect(_adapter* adapter);
+extern void rtw_indicate_connect(_adapter* adapter);
+void rtw_indicate_scan_done( _adapter *padapter, bool aborted);
+void rtw_scan_abort(_adapter *adapter);
+
+extern int rtw_restruct_sec_ie(_adapter *adapter,u8 *in_ie,u8 *out_ie,uint in_len);
+extern int rtw_restruct_wmm_ie(_adapter *adapter, u8 *in_ie, u8 *out_ie, uint in_len, uint initial_out_len);
+extern void rtw_init_registrypriv_dev_network(_adapter *adapter);
+
+extern void rtw_update_registrypriv_dev_network(_adapter *adapter);
+
+extern void rtw_get_encrypt_decrypt_from_registrypriv(_adapter *adapter);
+
+extern void _rtw_join_timeout_handler(_adapter *adapter);
+extern void rtw_scan_timeout_handler(_adapter *adapter);
+
+extern void rtw_dynamic_check_timer_handlder(_adapter *adapter);
+#ifdef CONFIG_SET_SCAN_DENY_TIMER
+bool rtw_is_scan_deny(_adapter *adapter);
+void rtw_clear_scan_deny(_adapter *adapter);
+void rtw_set_scan_deny_timer_hdl(_adapter *adapter);
+void rtw_set_scan_deny(_adapter *adapter, u32 ms);
+#else
+#define rtw_is_scan_deny(adapter) _FALSE
+#define rtw_clear_scan_deny(adapter) do {} while (0)
+#define rtw_set_scan_deny_timer_hdl(adapter) do {} while (0)
+#define rtw_set_scan_deny(adapter, ms) do {} while (0)
+#endif
+
+
+extern int _rtw_init_mlme_priv(_adapter *padapter);
+
+void rtw_free_mlme_priv_ie_data(struct mlme_priv *pmlmepriv);
+
+extern void _rtw_free_mlme_priv(struct mlme_priv *pmlmepriv);
+
+extern int _rtw_enqueue_network(_queue *queue, struct wlan_network *pnetwork);
+
+extern struct wlan_network* _rtw_dequeue_network(_queue *queue);
+
+extern struct wlan_network* _rtw_alloc_network(struct mlme_priv *pmlmepriv);
+
+
+extern void _rtw_free_network(struct mlme_priv *pmlmepriv, struct wlan_network *pnetwork, u8 isfreeall);
+extern void _rtw_free_network_nolock(struct mlme_priv *pmlmepriv, struct wlan_network *pnetwork);
+
+
+extern struct wlan_network* _rtw_find_network(_queue *scanned_queue, u8 *addr);
+
+extern void _rtw_free_network_queue(_adapter* padapter, u8 isfreeall);
+
+extern sint rtw_if_up(_adapter *padapter);
+
+
+u8 *rtw_get_capability_from_ie(u8 *ie);
+u8 *rtw_get_timestampe_from_ie(u8 *ie);
+u8 *rtw_get_beacon_interval_from_ie(u8 *ie);
+
+
+void rtw_joinbss_reset(_adapter *padapter);
+
+#ifdef CONFIG_80211N_HT
+unsigned int rtw_restructure_ht_ie(_adapter *padapter, u8 *in_ie, u8 *out_ie, uint in_len, uint *pout_len, u8 channel);
+void rtw_update_ht_cap(_adapter *padapter, u8 *pie, uint ie_len, u8 channel);
+void rtw_issue_addbareq_cmd(_adapter *padapter, struct xmit_frame *pxmitframe);
+#endif
+
+int rtw_is_same_ibss(_adapter *adapter, struct wlan_network *pnetwork);
+int is_same_network(WLAN_BSSID_EX *src, WLAN_BSSID_EX *dst);
+
+#ifdef CONFIG_LAYER2_ROAMING
+void _rtw_roaming(_adapter *adapter, struct wlan_network *tgt_network);
+void rtw_roaming(_adapter *adapter, struct wlan_network *tgt_network);
+void rtw_set_roaming(_adapter *adapter, u8 to_roaming);
+u8 rtw_to_roaming(_adapter *adapter);
+#else
+#define _rtw_roaming(adapter, tgt_network) do {} while(0)
+#define rtw_roaming(adapter, tgt_network) do {} while(0)
+#define rtw_set_roaming(adapter, to_roaming) do {} while(0)
+#define rtw_to_roaming(adapter) 0
+#endif
+
+
+#ifdef CONFIG_INTEL_PROXIM
+void rtw_proxim_enable(_adapter *padapter);
+void rtw_proxim_disable(_adapter *padapter);
+void rtw_proxim_send_packet(_adapter *padapter,u8 *pbuf,u16 len,u8 hw_rate);
+#endif //CONFIG_INTEL_PROXIM
+#endif //__RTL871X_MLME_H_
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtw_mlme_ext.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtw_mlme_ext.h
new file mode 100644 (file)
index 0000000..4403244
--- /dev/null
@@ -0,0 +1,962 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __RTW_MLME_EXT_H_
+#define __RTW_MLME_EXT_H_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <wlan_bssdef.h>
+
+
+//     Commented by Albert 20101105
+//     Increase the SURVEY_TO value from 100 to 150  ( 100ms to 150ms )
+//     The Realtek 8188CE SoftAP will spend around 100ms to send the probe response after receiving the probe request.
+//     So, this driver tried to extend the dwell time for each scanning channel.
+//     This will increase the chance to receive the probe response from SoftAP.
+
+#define SURVEY_TO              (100)
+#define REAUTH_TO              (300) //(50)
+#define REASSOC_TO             (300) //(50)
+//#define DISCONNECT_TO        (3000)
+#define ADDBA_TO                       (2000)
+
+#define LINKED_TO (1) //unit:2 sec, 1x2=2 sec
+
+#define REAUTH_LIMIT   (4)
+#define REASSOC_LIMIT  (4)
+#define READDBA_LIMIT  (2)
+
+//#define      IOCMD_REG0              0x10250370
+//#define      IOCMD_REG1              0x10250374
+//#define      IOCMD_REG2              0x10250378
+
+//#define      FW_DYNAMIC_FUN_SWITCH   0x10250364
+
+//#define      WRITE_BB_CMD            0xF0000001
+//#define      SET_CHANNEL_CMD 0xF3000000
+//#define      UPDATE_RA_CMD   0xFD0000A2
+
+#define        DYNAMIC_FUNC_DISABLE            (0x0)
+#define        DYNAMIC_FUNC_DIG                        BIT(0)
+#define        DYNAMIC_FUNC_HP                 BIT(1)
+#define        DYNAMIC_FUNC_SS                 BIT(2) //Tx Power Tracking
+#define DYNAMIC_FUNC_BT                        BIT(3)
+#define DYNAMIC_FUNC_ANT_DIV           BIT(4)
+#define DYNAMIC_FUNC_ADAPTIVITY        BIT(5)
+
+#define _HW_STATE_NOLINK_              0x00
+#define _HW_STATE_ADHOC_               0x01
+#define _HW_STATE_STATION_     0x02
+#define _HW_STATE_AP_                  0x03
+
+
+#define                _1M_RATE_       0
+#define                _2M_RATE_       1
+#define                _5M_RATE_       2
+#define                _11M_RATE_      3
+#define                _6M_RATE_       4
+#define                _9M_RATE_       5
+#define                _12M_RATE_      6
+#define                _18M_RATE_      7
+#define                _24M_RATE_      8
+#define                _36M_RATE_      9
+#define                _48M_RATE_      10
+#define                _54M_RATE_      11
+
+
+extern unsigned char RTW_WPA_OUI[];
+extern unsigned char WMM_OUI[];
+extern unsigned char WPS_OUI[];
+extern unsigned char WFD_OUI[];
+extern unsigned char P2P_OUI[];
+
+extern unsigned char WMM_INFO_OUI[];
+extern unsigned char WMM_PARA_OUI[];
+
+
+//
+// Channel Plan Type.
+// Note:
+//     We just add new channel plan when the new channel plan is different from any of the following
+//     channel plan.
+//     If you just wnat to customize the acitions(scan period or join actions) about one of the channel plan,
+//     customize them in RT_CHANNEL_INFO in the RT_CHANNEL_LIST.
+//
+typedef enum _RT_CHANNEL_DOMAIN
+{
+       //===== old channel plan mapping =====//
+       RT_CHANNEL_DOMAIN_FCC = 0x00,
+       RT_CHANNEL_DOMAIN_IC = 0x01,
+       RT_CHANNEL_DOMAIN_ETSI = 0x02,
+       RT_CHANNEL_DOMAIN_SPAIN = 0x03,
+       RT_CHANNEL_DOMAIN_FRANCE = 0x04,
+       RT_CHANNEL_DOMAIN_MKK = 0x05,
+       RT_CHANNEL_DOMAIN_MKK1 = 0x06,
+       RT_CHANNEL_DOMAIN_ISRAEL = 0x07,
+       RT_CHANNEL_DOMAIN_TELEC = 0x08,
+       RT_CHANNEL_DOMAIN_GLOBAL_DOAMIN = 0x09,
+       RT_CHANNEL_DOMAIN_WORLD_WIDE_13 = 0x0A,
+       RT_CHANNEL_DOMAIN_TAIWAN = 0x0B,
+       RT_CHANNEL_DOMAIN_CHINA = 0x0C,
+       RT_CHANNEL_DOMAIN_SINGAPORE_INDIA_MEXICO = 0x0D,
+       RT_CHANNEL_DOMAIN_KOREA = 0x0E,
+       RT_CHANNEL_DOMAIN_TURKEY = 0x0F,
+       RT_CHANNEL_DOMAIN_JAPAN = 0x10,
+       RT_CHANNEL_DOMAIN_FCC_NO_DFS = 0x11,
+       RT_CHANNEL_DOMAIN_JAPAN_NO_DFS = 0x12,
+       RT_CHANNEL_DOMAIN_WORLD_WIDE_5G = 0x13,
+       RT_CHANNEL_DOMAIN_TAIWAN_NO_DFS = 0x14,
+
+       //===== new channel plan mapping, (2GDOMAIN_5GDOMAIN) =====//
+       RT_CHANNEL_DOMAIN_WORLD_NULL = 0x20,
+       RT_CHANNEL_DOMAIN_ETSI1_NULL = 0x21,
+       RT_CHANNEL_DOMAIN_FCC1_NULL = 0x22,
+       RT_CHANNEL_DOMAIN_MKK1_NULL = 0x23,
+       RT_CHANNEL_DOMAIN_ETSI2_NULL = 0x24,
+       RT_CHANNEL_DOMAIN_FCC1_FCC1 = 0x25,
+       RT_CHANNEL_DOMAIN_WORLD_ETSI1 = 0x26,
+       RT_CHANNEL_DOMAIN_MKK1_MKK1 = 0x27,
+       RT_CHANNEL_DOMAIN_WORLD_KCC1 = 0x28,
+       RT_CHANNEL_DOMAIN_WORLD_FCC2 = 0x29,
+       RT_CHANNEL_DOMAIN_WORLD_FCC3 = 0x30,
+       RT_CHANNEL_DOMAIN_WORLD_FCC4 = 0x31,
+       RT_CHANNEL_DOMAIN_WORLD_FCC5 = 0x32,
+       RT_CHANNEL_DOMAIN_WORLD_FCC6 = 0x33,
+       RT_CHANNEL_DOMAIN_FCC1_FCC7 = 0x34,
+       RT_CHANNEL_DOMAIN_WORLD_ETSI2 = 0x35,
+       RT_CHANNEL_DOMAIN_WORLD_ETSI3 = 0x36,
+       RT_CHANNEL_DOMAIN_MKK1_MKK2 = 0x37,
+       RT_CHANNEL_DOMAIN_MKK1_MKK3 = 0x38,
+       RT_CHANNEL_DOMAIN_FCC1_NCC1 = 0x39,
+       RT_CHANNEL_DOMAIN_FCC1_NCC2 = 0x40,
+
+       //===== Add new channel plan above this line===============//
+       RT_CHANNEL_DOMAIN_MAX,
+       RT_CHANNEL_DOMAIN_REALTEK_DEFINE = 0x7F,
+}RT_CHANNEL_DOMAIN, *PRT_CHANNEL_DOMAIN;
+
+typedef enum _RT_CHANNEL_DOMAIN_2G
+{
+       RT_CHANNEL_DOMAIN_2G_WORLD = 0x00,              //Worldwird 13
+       RT_CHANNEL_DOMAIN_2G_ETSI1 = 0x01,              //Europe
+       RT_CHANNEL_DOMAIN_2G_FCC1 = 0x02,               //US
+       RT_CHANNEL_DOMAIN_2G_MKK1 = 0x03,               //Japan
+       RT_CHANNEL_DOMAIN_2G_ETSI2 = 0x04,              //France
+       RT_CHANNEL_DOMAIN_2G_NULL = 0x05,
+       //===== Add new channel plan above this line===============//
+       RT_CHANNEL_DOMAIN_2G_MAX,
+}RT_CHANNEL_DOMAIN_2G, *PRT_CHANNEL_DOMAIN_2G;
+
+typedef enum _RT_CHANNEL_DOMAIN_5G
+{
+       RT_CHANNEL_DOMAIN_5G_NULL = 0x00,
+       RT_CHANNEL_DOMAIN_5G_ETSI1 = 0x01,              //Europe
+       RT_CHANNEL_DOMAIN_5G_ETSI2 = 0x02,              //Australia, New Zealand
+       RT_CHANNEL_DOMAIN_5G_ETSI3 = 0x03,              //Russia
+       RT_CHANNEL_DOMAIN_5G_FCC1 = 0x04,               //US
+       RT_CHANNEL_DOMAIN_5G_FCC2 = 0x05,               //FCC o/w DFS Channels
+       RT_CHANNEL_DOMAIN_5G_FCC3 = 0x06,               //India, Mexico
+       RT_CHANNEL_DOMAIN_5G_FCC4 = 0x07,               //Venezuela
+       RT_CHANNEL_DOMAIN_5G_FCC5 = 0x08,               //China
+       RT_CHANNEL_DOMAIN_5G_FCC6 = 0x09,               //Israel
+       RT_CHANNEL_DOMAIN_5G_FCC7_IC1 = 0x0A,   //US, Canada
+       RT_CHANNEL_DOMAIN_5G_KCC1 = 0x0B,               //Korea
+       RT_CHANNEL_DOMAIN_5G_MKK1 = 0x0C,               //Japan
+       RT_CHANNEL_DOMAIN_5G_MKK2 = 0x0D,               //Japan (W52, W53)
+       RT_CHANNEL_DOMAIN_5G_MKK3 = 0x0E,               //Japan (W56)
+       RT_CHANNEL_DOMAIN_5G_NCC1 = 0x0F,               //Taiwan
+       RT_CHANNEL_DOMAIN_5G_NCC2 = 0x10,               //Taiwan o/w DFS
+       //===== Add new channel plan above this line===============//
+       //===== Driver Self Defined =====//
+       RT_CHANNEL_DOMAIN_5G_FCC = 0x11,
+       RT_CHANNEL_DOMAIN_5G_JAPAN_NO_DFS = 0x12,
+       RT_CHANNEL_DOMAIN_5G_FCC4_NO_DFS = 0x13,
+       RT_CHANNEL_DOMAIN_5G_MAX,
+}RT_CHANNEL_DOMAIN_5G, *PRT_CHANNEL_DOMAIN_5G;
+
+#define rtw_is_channel_plan_valid(chplan) (chplan<RT_CHANNEL_DOMAIN_MAX || chplan == RT_CHANNEL_DOMAIN_REALTEK_DEFINE)
+
+typedef struct _RT_CHANNEL_PLAN
+{
+       unsigned char   Channel[MAX_CHANNEL_NUM];
+       unsigned char   Len;
+}RT_CHANNEL_PLAN, *PRT_CHANNEL_PLAN;
+
+typedef struct _RT_CHANNEL_PLAN_2G
+{
+       unsigned char   Channel[MAX_CHANNEL_NUM_2G];
+       unsigned char   Len;
+}RT_CHANNEL_PLAN_2G, *PRT_CHANNEL_PLAN_2G;
+
+typedef struct _RT_CHANNEL_PLAN_5G
+{
+       unsigned char   Channel[MAX_CHANNEL_NUM_5G];
+       unsigned char   Len;
+}RT_CHANNEL_PLAN_5G, *PRT_CHANNEL_PLAN_5G;
+
+typedef struct _RT_CHANNEL_PLAN_MAP
+{
+       unsigned char   Index2G;
+       unsigned char   Index5G;
+}RT_CHANNEL_PLAN_MAP, *PRT_CHANNEL_PLAN_MAP;
+
+enum Associated_AP
+{
+       atherosAP       = 0,
+       broadcomAP      = 1,
+       ciscoAP         = 2,
+       marvellAP       = 3,
+       ralinkAP        = 4,
+       realtekAP       = 5,
+       airgocapAP      = 6,
+       unknownAP       = 7,
+       maxAP,
+};
+
+enum SCAN_STATE
+{
+       SCAN_DISABLE = 0,
+       SCAN_START = 1,
+       SCAN_TXNULL = 2,
+       SCAN_PROCESS = 3,
+       SCAN_COMPLETE = 4,
+       SCAN_STATE_MAX,
+};
+
+struct mlme_handler {
+       unsigned int   num;
+       char* str;
+       unsigned int (*func)(_adapter *padapter, union recv_frame *precv_frame);
+};
+
+struct action_handler {
+       unsigned int   num;
+       char* str;
+       unsigned int (*func)(_adapter *padapter, union recv_frame *precv_frame);
+};
+
+struct ss_res
+{
+       int     state;
+       int     bss_cnt;
+       int     channel_idx;
+       int     scan_mode;
+       u8 ssid_num;
+       u8 ch_num;
+       NDIS_802_11_SSID ssid[RTW_SSID_SCAN_AMOUNT];
+       struct rtw_ieee80211_channel ch[RTW_CHANNEL_SCAN_AMOUNT];
+};
+
+//#define AP_MODE                              0x0C
+//#define STATION_MODE 0x08
+//#define AD_HOC_MODE          0x04
+//#define NO_LINK_MODE 0x00
+
+#define        WIFI_FW_NULL_STATE                      _HW_STATE_NOLINK_
+#define        WIFI_FW_STATION_STATE           _HW_STATE_STATION_
+#define        WIFI_FW_AP_STATE                                _HW_STATE_AP_
+#define        WIFI_FW_ADHOC_STATE                     _HW_STATE_ADHOC_
+
+#define        WIFI_FW_AUTH_NULL                       0x00000100
+#define        WIFI_FW_AUTH_STATE                      0x00000200
+#define        WIFI_FW_AUTH_SUCCESS                    0x00000400
+
+#define        WIFI_FW_ASSOC_STATE                     0x00002000
+#define        WIFI_FW_ASSOC_SUCCESS           0x00004000
+
+#define        WIFI_FW_LINKING_STATE           (WIFI_FW_AUTH_NULL | WIFI_FW_AUTH_STATE | WIFI_FW_AUTH_SUCCESS |WIFI_FW_ASSOC_STATE)
+
+#ifdef CONFIG_TDLS
+// 1: Write RCR DATA BIT
+// 2: Issue peer traffic indication
+// 3: Go back to the channel linked with AP, terminating channel switch procedure
+// 4: Init channel sensing, receive all data and mgnt frame
+// 5: Channel sensing and report candidate channel
+// 6: First time set channel to off channel
+// 7: Go back tp the channel linked with AP when set base channel as target channel
+// 8: Set channel back to base channel
+// 9: Set channel back to off channel
+// 10: Restore RCR DATA BIT
+// 11: Check alive
+// 12: Check alive
+// 13: Free TDLS sta
+enum TDLS_option
+{
+       TDLS_WRCR                       =       1,
+       TDLS_SD_PTI             =       2,
+       TDLS_CS_OFF             =       3,
+       TDLS_INIT_CH_SEN        =       4,
+       TDLS_DONE_CH_SEN        =       5,
+       TDLS_OFF_CH             =       6,
+       TDLS_BASE_CH            =       7,
+       TDLS_P_OFF_CH           =       8,
+       TDLS_P_BASE_CH  =       9,
+       TDLS_RS_RCR             =       10,
+       TDLS_CKALV_PH1  =       11,
+       TDLS_CKALV_PH2  =       12,
+       TDLS_FREE_STA           =       13,
+       maxTDLS,
+};
+
+#endif //CONFIG_TDLS
+
+struct FW_Sta_Info
+{
+       struct sta_info *psta;
+       u32     status;
+       u32     rx_pkt;
+       u32     retry;
+       NDIS_802_11_RATES_EX  SupportedRates;
+};
+
+/*
+ * Usage:
+ * When one iface acted as AP mode and the other iface is STA mode and scanning,
+ * it should switch back to AP's operating channel periodically.
+ * Parameters info:
+ * When the driver scanned RTW_SCAN_NUM_OF_CH channels, it would switch back to AP's operating channel for
+ * RTW_STAY_AP_CH_MILLISECOND * SURVEY_TO milliseconds.
+ * Example:
+ * For chip supports 2.4G + 5GHz and AP mode is operating in channel 1,
+ * RTW_SCAN_NUM_OF_CH is 8, RTW_STAY_AP_CH_MILLISECOND is 3 and SURVEY_TO is 100.
+ * When it's STA mode gets set_scan command,
+ * it would
+ * 1. Doing the scan on channel 1.2.3.4.5.6.7.8
+ * 2. Back to channel 1 for 300 milliseconds
+ * 3. Go through doing site survey on channel 9.10.11.36.40.44.48.52
+ * 4. Back to channel 1 for 300 milliseconds
+ * 5. ... and so on, till survey done.
+ */
+#if defined CONFIG_STA_MODE_SCAN_UNDER_AP_MODE && defined CONFIG_CONCURRENT_MODE
+#define RTW_SCAN_NUM_OF_CH                     8
+#define RTW_STAY_AP_CH_MILLISECOND     3       // this value is a multiplier,for example, when this value is 3, it would stay AP's op ch for
+                                                                                       // 3 * SURVEY_TO millisecond.
+#endif //defined CONFIG_STA_MODE_SCAN_UNDER_AP_MODE && defined CONFIG_CONCURRENT_MODE
+
+struct mlme_ext_info
+{
+       u32     state;
+       u32     reauth_count;
+       u32     reassoc_count;
+       u32     link_count;
+       u32     auth_seq;
+       u32     auth_algo;      // 802.11 auth, could be open, shared, auto
+       u32     authModeToggle;
+       u32     enc_algo;//encrypt algorithm;
+       u32     key_index;      // this is only valid for legendary wep, 0~3 for key id.
+       u32     iv;
+       u8      chg_txt[128];
+       u16     aid;
+       u16     bcn_interval;
+       u16     capability;
+       u8      assoc_AP_vendor;
+       u8      slotTime;
+       u8      preamble_mode;
+       u8      WMM_enable;
+       u8      ERP_enable;
+       u8      ERP_IE;
+       u8      HT_enable;
+       u8      HT_caps_enable;
+       u8      HT_info_enable;
+       u8      HT_protection;
+       u8      turboMode_cts2self;
+       u8      turboMode_rtsen;
+       u8      SM_PS;
+       u8      agg_enable_bitmap;
+       u8      ADDBA_retry_count;
+       u8      candidate_tid_bitmap;
+       u8      dialogToken;
+       // Accept ADDBA Request
+       BOOLEAN bAcceptAddbaReq;
+       u8      bwmode_updated;
+       u8      hidden_ssid_mode;
+
+       struct ADDBA_request            ADDBA_req;
+       struct WMM_para_element WMM_param;
+       struct HT_caps_element  HT_caps;
+       struct HT_info_element          HT_info;
+       WLAN_BSSID_EX                   network;//join network or bss_network, if in ap mode, it is the same to cur_network.network
+       struct FW_Sta_Info              FW_sta_info[NUM_STA];
+
+#ifdef CONFIG_STA_MODE_SCAN_UNDER_AP_MODE
+       u8 scan_cnt;
+#endif //CONFIG_STA_MODE_SCAN_UNDER_AP_MODE
+};
+
+// The channel information about this channel including joining, scanning, and power constraints.
+typedef struct _RT_CHANNEL_INFO
+{
+       u8                              ChannelNum;             // The channel number.
+       RT_SCAN_TYPE    ScanType;               // Scan type such as passive or active scan.
+       //u16                           ScanPeriod;             // Listen time in millisecond in this channel.
+       //s32                           MaxTxPwrDbm;    // Max allowed tx power.
+       //u32                           ExInfo;                 // Extended Information for this channel.
+#ifdef CONFIG_FIND_BEST_CHANNEL
+       u32                             rx_count;
+#endif
+}RT_CHANNEL_INFO, *PRT_CHANNEL_INFO;
+
+int rtw_ch_set_search_ch(RT_CHANNEL_INFO *ch_set, const u32 ch);
+bool rtw_mlme_band_check(_adapter *adapter, const u32 ch);
+
+// P2P_MAX_REG_CLASSES - Maximum number of regulatory classes
+#define P2P_MAX_REG_CLASSES 10
+
+// P2P_MAX_REG_CLASS_CHANNELS - Maximum number of channels per regulatory class
+#define P2P_MAX_REG_CLASS_CHANNELS 20
+
+//  struct p2p_channels - List of supported channels
+struct p2p_channels {
+       // struct p2p_reg_class - Supported regulatory class
+       struct p2p_reg_class {
+               // reg_class - Regulatory class (IEEE 802.11-2007, Annex J)
+               u8 reg_class;
+
+               // channel - Supported channels
+               u8 channel[P2P_MAX_REG_CLASS_CHANNELS];
+
+               // channels - Number of channel entries in use
+               size_t channels;
+       } reg_class[P2P_MAX_REG_CLASSES];
+
+       // reg_classes - Number of reg_class entries in use
+       size_t reg_classes;
+};
+
+struct p2p_oper_class_map {
+       enum hw_mode {IEEE80211G,IEEE80211A} mode;
+       u8 op_class;
+       u8 min_chan;
+       u8 max_chan;
+       u8 inc;
+       enum { BW20, BW40PLUS, BW40MINUS } bw;
+};
+
+struct mlme_ext_priv
+{
+       _adapter        *padapter;
+       u8      mlmeext_init;
+       ATOMIC_T                event_seq;
+       u16     mgnt_seq;
+#ifdef CONFIG_IEEE80211W
+       u16     sa_query_seq;
+       u64 mgnt_80211w_IPN;
+       u64 mgnt_80211w_IPN_rx;
+#endif //CONFIG_IEEE80211W
+       //struct fw_priv        fwpriv;
+
+       unsigned char   cur_channel;
+       unsigned char   cur_bwmode;
+       unsigned char   cur_ch_offset;//PRIME_CHNL_OFFSET
+       unsigned char   cur_wireless_mode;
+
+       unsigned char   max_chan_nums;
+       RT_CHANNEL_INFO         channel_set[MAX_CHANNEL_NUM];
+       struct p2p_channels channel_list;
+       unsigned char   basicrate[NumRates];
+       unsigned char   datarate[NumRates];
+
+       struct ss_res           sitesurvey_res;
+       struct mlme_ext_info    mlmext_info;//for sta/adhoc mode, including current scanning/connecting/connected related info.
+                                                     //for ap mode, network includes ap's cap_info
+       _timer          survey_timer;
+       _timer          link_timer;
+#ifdef CONFIG_IEEE80211W
+       _timer          sa_query_timer;
+#endif //CONFIG_IEEE80211W
+       //_timer                ADDBA_timer;
+       u16                     chan_scan_time;
+
+       u8      scan_abort;
+       u8      tx_rate; // TXRATE when USERATE is set.
+
+       u32     retry; //retry for issue probereq
+
+       u64 TSFValue;
+
+#ifdef CONFIG_AP_MODE
+       unsigned char bstart_bss;
+#endif
+
+       //recv_decache check for Action_public frame
+        u8 action_public_dialog_token;
+       u16      action_public_rxseq;
+
+#ifdef CONFIG_80211D
+       u8 update_channel_plan_by_ap_done;
+#endif
+
+#ifdef CONFIG_ACTIVE_KEEP_ALIVE_CHECK
+       u8 active_keep_alive_check;
+#endif
+
+};
+
+int init_mlme_ext_priv(_adapter* padapter);
+int init_hw_mlme_ext(_adapter *padapter);
+void free_mlme_ext_priv (struct mlme_ext_priv *pmlmeext);
+extern void init_mlme_ext_timer(_adapter *padapter);
+extern void init_addba_retry_timer(_adapter *padapter, struct sta_info *psta);
+extern struct xmit_frame *alloc_mgtxmitframe(struct xmit_priv *pxmitpriv);
+struct xmit_frame *alloc_mgtxmitframe_once(struct xmit_priv *pxmitpriv);
+
+//void fill_fwpriv(_adapter * padapter, struct fw_priv *pfwpriv);
+
+unsigned char networktype_to_raid(unsigned char network_type);
+int judge_network_type(_adapter *padapter, unsigned char *rate, int ratelen);
+void get_rate_set(_adapter *padapter, unsigned char *pbssrate, int *bssrate_len);
+void UpdateBrateTbl(_adapter *padapter,u8 *mBratesOS);
+void UpdateBrateTblForSoftAP(u8 *bssrateset, u32 bssratelen);
+void change_band_update_ie(_adapter *padapter, WLAN_BSSID_EX *pnetwork);
+
+void Save_DM_Func_Flag(_adapter *padapter);
+void Restore_DM_Func_Flag(_adapter *padapter);
+void Switch_DM_Func(_adapter *padapter, u8 mode, u8 enable);
+
+//void Set_NETYPE1_MSR(_adapter *padapter, u8 type);
+//void Set_NETYPE0_MSR(_adapter *padapter, u8 type);
+void Set_MSR(_adapter *padapter, u8 type);
+
+u8 rtw_get_oper_ch(_adapter *adapter);
+void rtw_set_oper_ch(_adapter *adapter, u8 ch);
+u8 rtw_get_oper_bw(_adapter *adapter);
+void rtw_set_oper_bw(_adapter *adapter, u8 bw);
+u8 rtw_get_oper_choffset(_adapter *adapter);
+void rtw_set_oper_choffset(_adapter *adapter, u8 offset);
+u32 rtw_get_on_oper_ch_time(_adapter *adapter);
+u32 rtw_get_on_cur_ch_time(_adapter *adapter);
+
+void set_channel_bwmode(_adapter *padapter, unsigned char channel, unsigned char channel_offset, unsigned short bwmode);
+void SelectChannel(_adapter *padapter, unsigned char channel);
+void SetBWMode(_adapter *padapter, unsigned short bwmode, unsigned char channel_offset);
+
+unsigned int decide_wait_for_beacon_timeout(unsigned int bcn_interval);
+
+void write_cam(_adapter *padapter, u8 entry, u16 ctrl, u8 *mac, u8 *key);
+void clear_cam_entry(_adapter *padapter, u8 entry);
+
+void invalidate_cam_all(_adapter *padapter);
+void CAM_empty_entry(PADAPTER Adapter, u8 ucIndex);
+
+
+int allocate_fw_sta_entry(_adapter *padapter);
+void flush_all_cam_entry(_adapter *padapter);
+
+BOOLEAN IsLegal5GChannel(PADAPTER Adapter, u8 channel);
+
+void site_survey(_adapter *padapter);
+u8 collect_bss_info(_adapter *padapter, union recv_frame *precv_frame, WLAN_BSSID_EX *bssid);
+
+int get_bsstype(unsigned short capability);
+u8* get_my_bssid(WLAN_BSSID_EX *pnetwork);
+u16 get_beacon_interval(WLAN_BSSID_EX *bss);
+
+int is_client_associated_to_ap(_adapter *padapter);
+int is_client_associated_to_ibss(_adapter *padapter);
+int is_IBSS_empty(_adapter *padapter);
+
+unsigned char check_assoc_AP(u8 *pframe, uint len);
+
+int WMM_param_handler(_adapter *padapter, PNDIS_802_11_VARIABLE_IEs    pIE);
+#ifdef CONFIG_WFD
+int WFD_info_handler(_adapter *padapter, PNDIS_802_11_VARIABLE_IEs     pIE);
+#endif
+void WMMOnAssocRsp(_adapter *padapter);
+
+void HT_caps_handler(_adapter *padapter, PNDIS_802_11_VARIABLE_IEs pIE);
+void HT_info_handler(_adapter *padapter, PNDIS_802_11_VARIABLE_IEs pIE);
+void HTOnAssocRsp(_adapter *padapter);
+
+void ERP_IE_handler(_adapter *padapter, PNDIS_802_11_VARIABLE_IEs pIE);
+void VCS_update(_adapter *padapter, struct sta_info *psta);
+
+void update_beacon_info(_adapter *padapter, u8 *pframe, uint len, struct sta_info *psta);
+#ifdef CONFIG_DFS
+void process_csa_ie(_adapter *padapter, u8 *pframe, uint len);
+#endif //CONFIG_DFS
+void update_IOT_info(_adapter *padapter);
+void update_capinfo(PADAPTER Adapter, u16 updateCap);
+void update_wireless_mode(_adapter * padapter);
+void update_tx_basic_rate(_adapter *padapter, u8 modulation);
+void update_bmc_sta_support_rate(_adapter *padapter, u32 mac_id);
+int update_sta_support_rate(_adapter *padapter, u8* pvar_ie, uint var_ie_len, int cam_idx);
+
+//for sta/adhoc mode
+void update_sta_info(_adapter *padapter, struct sta_info *psta);
+unsigned int update_basic_rate(unsigned char *ptn, unsigned int ptn_sz);
+unsigned int update_supported_rate(unsigned char *ptn, unsigned int ptn_sz);
+unsigned int update_MSC_rate(struct HT_caps_element *pHT_caps);
+void Update_RA_Entry(_adapter *padapter, u32 mac_id);
+void set_sta_rate(_adapter *padapter, struct sta_info *psta);
+
+unsigned int receive_disconnect(_adapter *padapter, unsigned char *MacAddr, unsigned short reason);
+
+unsigned char get_highest_rate_idx(u32 mask);
+int support_short_GI(_adapter *padapter, struct HT_caps_element *pHT_caps);
+unsigned int is_ap_in_tkip(_adapter *padapter);
+
+
+void report_join_res(_adapter *padapter, int res);
+void report_survey_event(_adapter *padapter, union recv_frame *precv_frame);
+void report_surveydone_event(_adapter *padapter);
+void report_del_sta_event(_adapter *padapter, unsigned char* MacAddr, unsigned short reason);
+void report_add_sta_event(_adapter *padapter, unsigned char* MacAddr, int cam_idx);
+
+void beacon_timing_control(_adapter *padapter);
+extern u8 set_tx_beacon_cmd(_adapter*padapter);
+unsigned int setup_beacon_frame(_adapter *padapter, unsigned char *beacon_frame);
+void update_mgnt_tx_rate(_adapter *padapter, u8 rate);
+void update_mgntframe_attrib(_adapter *padapter, struct pkt_attrib *pattrib);
+void dump_mgntframe(_adapter *padapter, struct xmit_frame *pmgntframe);
+s32 dump_mgntframe_and_wait(_adapter *padapter, struct xmit_frame *pmgntframe, int timeout_ms);
+s32 dump_mgntframe_and_wait_ack(_adapter *padapter, struct xmit_frame *pmgntframe);
+
+#ifdef CONFIG_P2P
+void issue_probersp_p2p(_adapter *padapter, unsigned char *da);
+void issue_p2p_provision_request( _adapter *padapter, u8* pssid, u8 ussidlen, u8* pdev_raddr);
+void issue_p2p_GO_request(_adapter *padapter, u8* raddr);
+void issue_probereq_p2p(_adapter *padapter, u8 *da);
+int issue_probereq_p2p_ex(_adapter *adapter, u8 *da, int try_cnt, int wait_ms);
+void issue_p2p_invitation_response(_adapter *padapter, u8* raddr, u8 dialogToken, u8 success);
+void issue_p2p_invitation_request(_adapter *padapter, u8* raddr );
+#endif //CONFIG_P2P
+void issue_beacon(_adapter *padapter);
+void issue_probersp(_adapter *padapter, unsigned char *da, u8 is_valid_p2p_probereq);
+void issue_assocreq(_adapter *padapter);
+void issue_asocrsp(_adapter *padapter, unsigned short status, struct sta_info *pstat, int pkt_type);
+void issue_auth(_adapter *padapter, struct sta_info *psta, unsigned short status);
+void issue_probereq(_adapter *padapter, NDIS_802_11_SSID *pssid, u8 *da);
+s32 issue_probereq_ex(_adapter *padapter, NDIS_802_11_SSID *pssid, u8* da, int try_cnt, int wait_ms);
+int issue_nulldata(_adapter *padapter, unsigned char *da, unsigned int power_mode, int try_cnt, int wait_ms);
+int issue_qos_nulldata(_adapter *padapter, unsigned char *da, u16 tid, int try_cnt, int wait_ms);
+int issue_deauth(_adapter *padapter, unsigned char *da, unsigned short reason);
+int issue_deauth_ex(_adapter *padapter, u8 *da, unsigned short reason, int try_cnt, int wait_ms);
+void issue_action_spct_ch_switch(_adapter *padapter, u8 *ra, u8 new_ch, u8 ch_offset);
+void issue_action_BA(_adapter *padapter, unsigned char *raddr, unsigned char action, unsigned short status);
+#ifdef CONFIG_IEEE80211W
+void issue_action_SA_Query(_adapter *padapter, unsigned char *raddr, unsigned char action, unsigned short tid);
+#endif //CONFIG_IEEE80211W
+unsigned int send_delba(_adapter *padapter, u8 initiator, u8 *addr);
+unsigned int send_beacon(_adapter *padapter);
+
+void start_clnt_assoc(_adapter *padapter);
+void start_clnt_auth(_adapter* padapter);
+void start_clnt_join(_adapter* padapter);
+void start_create_ibss(_adapter* padapter);
+
+unsigned int OnAssocReq(_adapter *padapter, union recv_frame *precv_frame);
+unsigned int OnAssocRsp(_adapter *padapter, union recv_frame *precv_frame);
+unsigned int OnProbeReq(_adapter *padapter, union recv_frame *precv_frame);
+unsigned int OnProbeRsp(_adapter *padapter, union recv_frame *precv_frame);
+unsigned int DoReserved(_adapter *padapter, union recv_frame *precv_frame);
+unsigned int OnBeacon(_adapter *padapter, union recv_frame *precv_frame);
+unsigned int OnAtim(_adapter *padapter, union recv_frame *precv_frame);
+unsigned int OnDisassoc(_adapter *padapter, union recv_frame *precv_frame);
+unsigned int OnAuth(_adapter *padapter, union recv_frame *precv_frame);
+unsigned int OnAuthClient(_adapter *padapter, union recv_frame *precv_frame);
+unsigned int OnDeAuth(_adapter *padapter, union recv_frame *precv_frame);
+unsigned int OnAction(_adapter *padapter, union recv_frame *precv_frame);
+
+unsigned int on_action_spct(_adapter *padapter, union recv_frame *precv_frame);
+unsigned int OnAction_qos(_adapter *padapter, union recv_frame *precv_frame);
+unsigned int OnAction_dls(_adapter *padapter, union recv_frame *precv_frame);
+unsigned int OnAction_back(_adapter *padapter, union recv_frame *precv_frame);
+unsigned int on_action_public(_adapter *padapter, union recv_frame *precv_frame);
+unsigned int OnAction_ht(_adapter *padapter, union recv_frame *precv_frame);
+#ifdef CONFIG_IEEE80211W
+unsigned int OnAction_sa_query(_adapter *padapter, union recv_frame *precv_frame);
+#endif //CONFIG_IEEE80211W
+unsigned int OnAction_wmm(_adapter *padapter, union recv_frame *precv_frame);
+unsigned int OnAction_p2p(_adapter *padapter, union recv_frame *precv_frame);
+
+
+void mlmeext_joinbss_event_callback(_adapter *padapter, int join_res);
+void mlmeext_sta_del_event_callback(_adapter *padapter);
+void mlmeext_sta_add_event_callback(_adapter *padapter, struct sta_info *psta);
+
+void linked_status_chk(_adapter *padapter);
+
+void survey_timer_hdl (_adapter *padapter);
+void link_timer_hdl (_adapter *padapter);
+void addba_timer_hdl(struct sta_info *psta);
+#ifdef CONFIG_IEEE80211W
+void sa_query_timer_hdl(_adapter *padapter);
+#endif //CONFIG_IEEE80211W
+//void reauth_timer_hdl(_adapter *padapter);
+//void reassoc_timer_hdl(_adapter *padapter);
+
+#define set_survey_timer(mlmeext, ms) \
+       do { \
+               /*DBG_871X("%s set_survey_timer(%p, %d)\n", __FUNCTION__, (mlmeext), (ms));*/ \
+               _set_timer(&(mlmeext)->survey_timer, (ms)); \
+       } while(0)
+
+#define set_link_timer(mlmeext, ms) \
+       do { \
+               /*DBG_871X("%s set_link_timer(%p, %d)\n", __FUNCTION__, (mlmeext), (ms));*/ \
+               _set_timer(&(mlmeext)->link_timer, (ms)); \
+       } while(0)
+#ifdef CONFIG_IEEE80211W
+#define set_sa_query_timer(mlmeext, ms) \
+       do { \
+               DBG_871X("%s set_sa_query_timer(%p, %d)\n", __FUNCTION__, (mlmeext), (ms)); \
+               _set_timer(&(mlmeext)->sa_query_timer, (ms)); \
+       } while(0)
+#endif //CONFIG_IEEE80211W
+extern int cckrates_included(unsigned char *rate, int ratelen);
+extern int cckratesonly_included(unsigned char *rate, int ratelen);
+
+extern void process_addba_req(_adapter *padapter, u8 *paddba_req, u8 *addr);
+
+extern void update_TSF(struct mlme_ext_priv *pmlmeext, u8 *pframe, uint len);
+extern void correct_TSF(_adapter *padapter, struct mlme_ext_priv *pmlmeext);
+
+
+#ifdef CONFIG_CONCURRENT_MODE
+ sint check_buddy_mlmeinfo_state(_adapter *padapter, u32 state);
+void concurrent_chk_joinbss_done(_adapter *padapter, int join_res);
+#endif //CONFIG_CONCURRENT_MODE
+
+#ifdef CONFIG_DUALMAC_CONCURRENT
+void   dc_SelectChannel(_adapter *padapter, unsigned char channel);
+void   dc_SetBWMode(_adapter *padapter, unsigned short bwmode, unsigned char channel_offset);
+void   dc_set_channel_bwmode_disconnect(_adapter *padapter);
+u8     dc_handle_join_request(_adapter *padapter);
+void   dc_handle_join_done(_adapter *padapter, u8 join_res);
+sint   dc_check_fwstate(_adapter *padapter, sint fw_state);
+u8     dc_handle_site_survey(_adapter *padapter);
+void   dc_report_survey_event(_adapter *padapter, union recv_frame *precv_frame);
+void   dc_set_channel_bwmode_survey_done(_adapter *padapter);
+void   dc_set_ap_channel_bandwidth(_adapter *padapter, u8 channel, u8 channel_offset, u8 bwmode);
+void   dc_resume_xmit(_adapter *padapter);
+u8     dc_check_xmit(_adapter *padapter);
+#endif
+
+int rtw_chk_start_clnt_join(_adapter *padapter);
+int rtw_get_ch_setting_union(_adapter *adapter, u8 *ch, u8 *bw, u8 *offset);
+
+struct cmd_hdl {
+       uint    parmsize;
+       u8 (*h2cfuns)(struct _ADAPTER *padapter, u8 *pbuf);
+};
+
+
+u8 read_macreg_hdl(_adapter *padapter, u8 *pbuf);
+u8 write_macreg_hdl(_adapter *padapter, u8 *pbuf);
+u8 read_bbreg_hdl(_adapter *padapter, u8 *pbuf);
+u8 write_bbreg_hdl(_adapter *padapter, u8 *pbuf);
+u8 read_rfreg_hdl(_adapter *padapter, u8 *pbuf);
+u8 write_rfreg_hdl(_adapter *padapter, u8 *pbuf);
+
+
+u8 NULL_hdl(_adapter *padapter, u8 *pbuf);
+u8 join_cmd_hdl(_adapter *padapter, u8 *pbuf);
+u8 disconnect_hdl(_adapter *padapter, u8 *pbuf);
+u8 createbss_hdl(_adapter *padapter, u8 *pbuf);
+u8 setopmode_hdl(_adapter *padapter, u8 *pbuf);
+u8 sitesurvey_cmd_hdl(_adapter *padapter, u8 *pbuf);
+u8 setauth_hdl(_adapter *padapter, u8 *pbuf);
+u8 setkey_hdl(_adapter *padapter, u8 *pbuf);
+u8 set_stakey_hdl(_adapter *padapter, u8 *pbuf);
+u8 set_assocsta_hdl(_adapter *padapter, u8 *pbuf);
+u8 del_assocsta_hdl(_adapter *padapter, u8 *pbuf);
+u8 add_ba_hdl(_adapter *padapter, unsigned char *pbuf);
+
+u8 mlme_evt_hdl(_adapter *padapter, unsigned char *pbuf);
+u8 h2c_msg_hdl(_adapter *padapter, unsigned char *pbuf);
+u8 tx_beacon_hdl(_adapter *padapter, unsigned char *pbuf);
+u8 set_ch_hdl(_adapter *padapter, u8 *pbuf);
+u8 set_chplan_hdl(_adapter *padapter, unsigned char *pbuf);
+u8 led_blink_hdl(_adapter *padapter, unsigned char *pbuf);
+u8 set_csa_hdl(_adapter *padapter, unsigned char *pbuf);       //Kurt: Handling DFS channel switch announcement ie.
+u8 tdls_hdl(_adapter *padapter, unsigned char *pbuf);
+
+
+#define GEN_DRV_CMD_HANDLER(size, cmd) {size, &cmd ## _hdl},
+#define GEN_MLME_EXT_HANDLER(size, cmd)        {size, cmd},
+
+#ifdef _RTW_CMD_C_
+
+struct cmd_hdl wlancmds[] =
+{
+       GEN_DRV_CMD_HANDLER(0, NULL) /*0*/
+       GEN_DRV_CMD_HANDLER(0, NULL)
+       GEN_DRV_CMD_HANDLER(0, NULL)
+       GEN_DRV_CMD_HANDLER(0, NULL)
+       GEN_DRV_CMD_HANDLER(0, NULL)
+       GEN_DRV_CMD_HANDLER(0, NULL)
+       GEN_MLME_EXT_HANDLER(0, NULL)
+       GEN_MLME_EXT_HANDLER(0, NULL)
+       GEN_MLME_EXT_HANDLER(0, NULL)
+       GEN_MLME_EXT_HANDLER(0, NULL)
+       GEN_MLME_EXT_HANDLER(0, NULL) /*10*/
+       GEN_MLME_EXT_HANDLER(0, NULL)
+       GEN_MLME_EXT_HANDLER(0, NULL)
+       GEN_MLME_EXT_HANDLER(0, NULL)
+       GEN_MLME_EXT_HANDLER(sizeof (struct joinbss_parm), join_cmd_hdl) /*14*/
+       GEN_MLME_EXT_HANDLER(sizeof (struct disconnect_parm), disconnect_hdl)
+       GEN_MLME_EXT_HANDLER(sizeof (struct createbss_parm), createbss_hdl)
+       GEN_MLME_EXT_HANDLER(sizeof (struct setopmode_parm), setopmode_hdl)
+       GEN_MLME_EXT_HANDLER(sizeof (struct sitesurvey_parm), sitesurvey_cmd_hdl) /*18*/
+       GEN_MLME_EXT_HANDLER(sizeof (struct setauth_parm), setauth_hdl)
+       GEN_MLME_EXT_HANDLER(sizeof (struct setkey_parm), setkey_hdl) /*20*/
+       GEN_MLME_EXT_HANDLER(sizeof (struct set_stakey_parm), set_stakey_hdl)
+       GEN_MLME_EXT_HANDLER(sizeof (struct set_assocsta_parm), NULL)
+       GEN_MLME_EXT_HANDLER(sizeof (struct del_assocsta_parm), NULL)
+       GEN_MLME_EXT_HANDLER(sizeof (struct setstapwrstate_parm), NULL)
+       GEN_MLME_EXT_HANDLER(sizeof (struct setbasicrate_parm), NULL)
+       GEN_MLME_EXT_HANDLER(sizeof (struct getbasicrate_parm), NULL)
+       GEN_MLME_EXT_HANDLER(sizeof (struct setdatarate_parm), NULL)
+       GEN_MLME_EXT_HANDLER(sizeof (struct getdatarate_parm), NULL)
+       GEN_MLME_EXT_HANDLER(sizeof (struct setphyinfo_parm), NULL)
+       GEN_MLME_EXT_HANDLER(sizeof (struct getphyinfo_parm), NULL)  /*30*/
+       GEN_MLME_EXT_HANDLER(sizeof (struct setphy_parm), NULL)
+       GEN_MLME_EXT_HANDLER(sizeof (struct getphy_parm), NULL)
+       GEN_MLME_EXT_HANDLER(0, NULL)
+       GEN_MLME_EXT_HANDLER(0, NULL)
+       GEN_MLME_EXT_HANDLER(0, NULL)
+       GEN_MLME_EXT_HANDLER(0, NULL)
+       GEN_MLME_EXT_HANDLER(0, NULL)
+       GEN_MLME_EXT_HANDLER(0, NULL)
+       GEN_MLME_EXT_HANDLER(0, NULL)
+       GEN_MLME_EXT_HANDLER(0, NULL)   /*40*/
+       GEN_MLME_EXT_HANDLER(0, NULL)
+       GEN_MLME_EXT_HANDLER(0, NULL)
+       GEN_MLME_EXT_HANDLER(0, NULL)
+       GEN_MLME_EXT_HANDLER(0, NULL)
+       GEN_MLME_EXT_HANDLER(sizeof(struct addBaReq_parm), add_ba_hdl)
+       GEN_MLME_EXT_HANDLER(sizeof(struct set_ch_parm), set_ch_hdl) /* 46 */
+       GEN_MLME_EXT_HANDLER(0, NULL)
+       GEN_MLME_EXT_HANDLER(0, NULL)
+       GEN_MLME_EXT_HANDLER(0, NULL)
+       GEN_MLME_EXT_HANDLER(0, NULL) /*50*/
+       GEN_MLME_EXT_HANDLER(0, NULL)
+       GEN_MLME_EXT_HANDLER(0, NULL)
+       GEN_MLME_EXT_HANDLER(0, NULL)
+       GEN_MLME_EXT_HANDLER(0, NULL)
+       GEN_MLME_EXT_HANDLER(sizeof(struct Tx_Beacon_param), tx_beacon_hdl) /*55*/
+
+       GEN_MLME_EXT_HANDLER(0, mlme_evt_hdl) /*56*/
+       GEN_MLME_EXT_HANDLER(0, rtw_drvextra_cmd_hdl) /*57*/
+
+       GEN_MLME_EXT_HANDLER(0, h2c_msg_hdl) /*58*/
+       GEN_MLME_EXT_HANDLER(sizeof(struct SetChannelPlan_param), set_chplan_hdl) /*59*/
+       GEN_MLME_EXT_HANDLER(sizeof(struct LedBlink_param), led_blink_hdl) /*60*/
+       GEN_MLME_EXT_HANDLER(sizeof(struct SetChannelSwitch_param), set_csa_hdl) /*61*/
+       GEN_MLME_EXT_HANDLER(sizeof(struct TDLSoption_param), tdls_hdl) /*62*/
+};
+
+#endif
+
+struct C2HEvent_Header
+{
+
+#ifdef CONFIG_LITTLE_ENDIAN
+
+       unsigned int len:16;
+       unsigned int ID:8;
+       unsigned int seq:8;
+
+#elif defined(CONFIG_BIG_ENDIAN)
+
+       unsigned int seq:8;
+       unsigned int ID:8;
+       unsigned int len:16;
+
+#else
+
+#  error "Must be LITTLE or BIG Endian"
+
+#endif
+
+       unsigned int rsvd;
+
+};
+
+void rtw_dummy_event_callback(_adapter *adapter , u8 *pbuf);
+void rtw_fwdbg_event_callback(_adapter *adapter , u8 *pbuf);
+
+enum rtw_c2h_event
+{
+       GEN_EVT_CODE(_Read_MACREG)=0, /*0*/
+       GEN_EVT_CODE(_Read_BBREG),
+       GEN_EVT_CODE(_Read_RFREG),
+       GEN_EVT_CODE(_Read_EEPROM),
+       GEN_EVT_CODE(_Read_EFUSE),
+       GEN_EVT_CODE(_Read_CAM),                        /*5*/
+       GEN_EVT_CODE(_Get_BasicRate),
+       GEN_EVT_CODE(_Get_DataRate),
+       GEN_EVT_CODE(_Survey),   /*8*/
+       GEN_EVT_CODE(_SurveyDone),       /*9*/
+
+       GEN_EVT_CODE(_JoinBss) , /*10*/
+       GEN_EVT_CODE(_AddSTA),
+       GEN_EVT_CODE(_DelSTA),
+       GEN_EVT_CODE(_AtimDone) ,
+       GEN_EVT_CODE(_TX_Report),
+       GEN_EVT_CODE(_CCX_Report),                      /*15*/
+       GEN_EVT_CODE(_DTM_Report),
+       GEN_EVT_CODE(_TX_Rate_Statistics),
+       GEN_EVT_CODE(_C2HLBK),
+       GEN_EVT_CODE(_FWDBG),
+       GEN_EVT_CODE(_C2HFEEDBACK),               /*20*/
+       GEN_EVT_CODE(_ADDBA),
+       GEN_EVT_CODE(_C2HBCN),
+       GEN_EVT_CODE(_ReportPwrState),          //filen: only for PCIE, USB
+       GEN_EVT_CODE(_CloseRF),                         //filen: only for PCIE, work around ASPM
+       MAX_C2HEVT
+};
+
+
+#ifdef _RTW_MLME_EXT_C_
+
+static struct fwevent wlanevents[] =
+{
+       {0, rtw_dummy_event_callback},  /*0*/
+       {0, NULL},
+       {0, NULL},
+       {0, NULL},
+       {0, NULL},
+       {0, NULL},
+       {0, NULL},
+       {0, NULL},
+       {0, &rtw_survey_event_callback},                /*8*/
+       {sizeof (struct surveydone_event), &rtw_surveydone_event_callback},     /*9*/
+
+       {0, &rtw_joinbss_event_callback},               /*10*/
+       {sizeof(struct stassoc_event), &rtw_stassoc_event_callback},
+       {sizeof(struct stadel_event), &rtw_stadel_event_callback},
+       {0, &rtw_atimdone_event_callback},
+       {0, rtw_dummy_event_callback},
+       {0, NULL},      /*15*/
+       {0, NULL},
+       {0, NULL},
+       {0, NULL},
+       {0, rtw_fwdbg_event_callback},
+       {0, NULL},       /*20*/
+       {0, NULL},
+       {0, NULL},
+       {0, &rtw_cpwm_event_callback},
+};
+
+#endif//_RTL8192C_CMD_C_
+
+#endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtw_mp.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtw_mp.h
new file mode 100644 (file)
index 0000000..06d43b5
--- /dev/null
@@ -0,0 +1,711 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef _RTW_MP_H_
+#define _RTW_MP_H_
+
+#ifndef PLATFORM_WINDOWS
+//     00 - Success
+//     11 - Error
+#define STATUS_SUCCESS                         (0x00000000L)
+#define STATUS_PENDING                         (0x00000103L)
+
+#define STATUS_UNSUCCESSFUL                    (0xC0000001L)
+#define STATUS_INSUFFICIENT_RESOURCES          (0xC000009AL)
+#define STATUS_NOT_SUPPORTED                   (0xC00000BBL)
+
+#define NDIS_STATUS_SUCCESS                    ((NDIS_STATUS)STATUS_SUCCESS)
+#define NDIS_STATUS_PENDING                    ((NDIS_STATUS)STATUS_PENDING)
+#define NDIS_STATUS_NOT_RECOGNIZED             ((NDIS_STATUS)0x00010001L)
+#define NDIS_STATUS_NOT_COPIED                 ((NDIS_STATUS)0x00010002L)
+#define NDIS_STATUS_NOT_ACCEPTED               ((NDIS_STATUS)0x00010003L)
+#define NDIS_STATUS_CALL_ACTIVE                        ((NDIS_STATUS)0x00010007L)
+
+#define NDIS_STATUS_FAILURE                    ((NDIS_STATUS)STATUS_UNSUCCESSFUL)
+#define NDIS_STATUS_RESOURCES                  ((NDIS_STATUS)STATUS_INSUFFICIENT_RESOURCES)
+#define NDIS_STATUS_CLOSING                    ((NDIS_STATUS)0xC0010002L)
+#define NDIS_STATUS_BAD_VERSION                        ((NDIS_STATUS)0xC0010004L)
+#define NDIS_STATUS_BAD_CHARACTERISTICS                ((NDIS_STATUS)0xC0010005L)
+#define NDIS_STATUS_ADAPTER_NOT_FOUND          ((NDIS_STATUS)0xC0010006L)
+#define NDIS_STATUS_OPEN_FAILED                        ((NDIS_STATUS)0xC0010007L)
+#define NDIS_STATUS_DEVICE_FAILED              ((NDIS_STATUS)0xC0010008L)
+#define NDIS_STATUS_MULTICAST_FULL             ((NDIS_STATUS)0xC0010009L)
+#define NDIS_STATUS_MULTICAST_EXISTS           ((NDIS_STATUS)0xC001000AL)
+#define NDIS_STATUS_MULTICAST_NOT_FOUND                ((NDIS_STATUS)0xC001000BL)
+#define NDIS_STATUS_REQUEST_ABORTED            ((NDIS_STATUS)0xC001000CL)
+#define NDIS_STATUS_RESET_IN_PROGRESS          ((NDIS_STATUS)0xC001000DL)
+#define NDIS_STATUS_CLOSING_INDICATING         ((NDIS_STATUS)0xC001000EL)
+#define NDIS_STATUS_NOT_SUPPORTED              ((NDIS_STATUS)STATUS_NOT_SUPPORTED)
+#define NDIS_STATUS_INVALID_PACKET             ((NDIS_STATUS)0xC001000FL)
+#define NDIS_STATUS_OPEN_LIST_FULL             ((NDIS_STATUS)0xC0010010L)
+#define NDIS_STATUS_ADAPTER_NOT_READY          ((NDIS_STATUS)0xC0010011L)
+#define NDIS_STATUS_ADAPTER_NOT_OPEN           ((NDIS_STATUS)0xC0010012L)
+#define NDIS_STATUS_NOT_INDICATING             ((NDIS_STATUS)0xC0010013L)
+#define NDIS_STATUS_INVALID_LENGTH             ((NDIS_STATUS)0xC0010014L)
+#define NDIS_STATUS_INVALID_DATA               ((NDIS_STATUS)0xC0010015L)
+#define NDIS_STATUS_BUFFER_TOO_SHORT           ((NDIS_STATUS)0xC0010016L)
+#define NDIS_STATUS_INVALID_OID                        ((NDIS_STATUS)0xC0010017L)
+#define NDIS_STATUS_ADAPTER_REMOVED            ((NDIS_STATUS)0xC0010018L)
+#define NDIS_STATUS_UNSUPPORTED_MEDIA          ((NDIS_STATUS)0xC0010019L)
+#define NDIS_STATUS_GROUP_ADDRESS_IN_USE       ((NDIS_STATUS)0xC001001AL)
+#define NDIS_STATUS_FILE_NOT_FOUND             ((NDIS_STATUS)0xC001001BL)
+#define NDIS_STATUS_ERROR_READING_FILE         ((NDIS_STATUS)0xC001001CL)
+#define NDIS_STATUS_ALREADY_MAPPED             ((NDIS_STATUS)0xC001001DL)
+#define NDIS_STATUS_RESOURCE_CONFLICT          ((NDIS_STATUS)0xC001001EL)
+#define NDIS_STATUS_NO_CABLE                   ((NDIS_STATUS)0xC001001FL)
+
+#define NDIS_STATUS_INVALID_SAP                        ((NDIS_STATUS)0xC0010020L)
+#define NDIS_STATUS_SAP_IN_USE                 ((NDIS_STATUS)0xC0010021L)
+#define NDIS_STATUS_INVALID_ADDRESS            ((NDIS_STATUS)0xC0010022L)
+#define NDIS_STATUS_VC_NOT_ACTIVATED           ((NDIS_STATUS)0xC0010023L)
+#define NDIS_STATUS_DEST_OUT_OF_ORDER          ((NDIS_STATUS)0xC0010024L)  // cause 27
+#define NDIS_STATUS_VC_NOT_AVAILABLE           ((NDIS_STATUS)0xC0010025L)  // cause 35,45
+#define NDIS_STATUS_CELLRATE_NOT_AVAILABLE     ((NDIS_STATUS)0xC0010026L)  // cause 37
+#define NDIS_STATUS_INCOMPATABLE_QOS           ((NDIS_STATUS)0xC0010027L)  // cause 49
+#define NDIS_STATUS_AAL_PARAMS_UNSUPPORTED     ((NDIS_STATUS)0xC0010028L)  // cause 93
+#define NDIS_STATUS_NO_ROUTE_TO_DESTINATION    ((NDIS_STATUS)0xC0010029L)  // cause 3
+#endif /* #ifndef PLATFORM_WINDOWS */
+
+#if 0
+#define MPT_NOOP                       0
+#define MPT_READ_MAC_1BYTE             1
+#define MPT_READ_MAC_2BYTE             2
+#define MPT_READ_MAC_4BYTE             3
+#define MPT_WRITE_MAC_1BYTE            4
+#define MPT_WRITE_MAC_2BYTE            5
+#define MPT_WRITE_MAC_4BYTE            6
+#define MPT_READ_BB_CCK                        7
+#define MPT_WRITE_BB_CCK               8
+#define MPT_READ_BB_OFDM               9
+#define MPT_WRITE_BB_OFDM              10
+#define MPT_READ_RF                    11
+#define MPT_WRITE_RF                   12
+#define MPT_READ_EEPROM_1BYTE          13
+#define MPT_WRITE_EEPROM_1BYTE         14
+#define MPT_READ_EEPROM_2BYTE          15
+#define MPT_WRITE_EEPROM_2BYTE         16
+#define MPT_SET_CSTHRESHOLD            21
+#define MPT_SET_INITGAIN               22
+#define MPT_SWITCH_BAND                        23
+#define MPT_SWITCH_CHANNEL             24
+#define MPT_SET_DATARATE               25
+#define MPT_SWITCH_ANTENNA             26
+#define MPT_SET_TX_POWER               27
+#define MPT_SET_CONT_TX                        28
+#define MPT_SET_SINGLE_CARRIER         29
+#define MPT_SET_CARRIER_SUPPRESSION    30
+#define MPT_GET_RATE_TABLE             31
+#define MPT_READ_TSSI                  32
+#define MPT_GET_THERMAL_METER          33
+#endif
+
+#define MAX_MP_XMITBUF_SZ      2048
+#define NR_MP_XMITFRAME                8
+
+struct mp_xmit_frame
+{
+       _list   list;
+
+       struct pkt_attrib attrib;
+
+       _pkt *pkt;
+
+       int frame_tag;
+
+       _adapter *padapter;
+
+#ifdef CONFIG_USB_HCI
+
+       //insert urb, irp, and irpcnt info below...
+       //max frag_cnt = 8
+
+       u8 *mem_addr;
+       u32 sz[8];
+
+#if defined(PLATFORM_OS_XP) || defined(PLATFORM_LINUX)
+       PURB pxmit_urb[8];
+#endif
+
+#ifdef PLATFORM_OS_XP
+       PIRP pxmit_irp[8];
+#endif
+
+       u8 bpending[8];
+       sint ac_tag[8];
+       sint last[8];
+       uint irpcnt;
+       uint fragcnt;
+#endif /* CONFIG_USB_HCI */
+
+       uint mem[(MAX_MP_XMITBUF_SZ >> 2)];
+};
+
+struct mp_wiparam
+{
+       u32 bcompleted;
+       u32 act_type;
+       u32 io_offset;
+       u32 io_value;
+};
+
+typedef void(*wi_act_func)(void* padapter);
+
+#ifdef PLATFORM_WINDOWS
+struct mp_wi_cntx
+{
+       u8 bmpdrv_unload;
+
+       // Work Item
+       NDIS_WORK_ITEM mp_wi;
+       NDIS_EVENT mp_wi_evt;
+       _lock mp_wi_lock;
+       u8 bmp_wi_progress;
+       wi_act_func curractfunc;
+       // Variable needed in each implementation of CurrActFunc.
+       struct mp_wiparam param;
+};
+#endif
+
+struct mp_tx
+{
+       u8 stop;
+       u32 count, sended;
+       u8 payload;
+       struct pkt_attrib attrib;
+       struct tx_desc desc;
+       u8 *pallocated_buf;
+       u8 *buf;
+       u32 buf_size, write_size;
+       _thread_hdl_  PktTxThread;
+};
+
+//#if (MP_DRIVER == 1)
+#if defined(CONFIG_RTL8192C) || defined(CONFIG_RTL8192D) || defined(CONFIG_RTL8723A) || defined(CONFIG_RTL8188E)
+#ifdef CONFIG_RTL8192C
+#include <Hal8192CPhyCfg.h>
+#endif
+#ifdef CONFIG_RTL8192D
+#include <Hal8192DPhyCfg.h>
+#endif
+#ifdef CONFIG_RTL8723A
+#include <Hal8723APhyCfg.h>
+#endif
+#ifdef CONFIG_RTL8188E
+#include <rtl8188e_hal.h>
+#endif
+#define MP_MAX_LINES           1000
+#define MP_MAX_LINES_BYTES     256
+#define u1Byte u8
+#define s1Byte s8
+#define u4Byte u32
+#define s4Byte s32
+typedef VOID (*MPT_WORK_ITEM_HANDLER)(IN PVOID Adapter);
+typedef struct _MPT_CONTEXT
+{
+       // Indicate if we have started Mass Production Test.
+       BOOLEAN                 bMassProdTest;
+
+       // Indicate if the driver is unloading or unloaded.
+       BOOLEAN                 bMptDrvUnload;
+
+       /* 8190 PCI does not support NDIS_WORK_ITEM. */
+       // Work Item for Mass Production Test.
+       //NDIS_WORK_ITEM        MptWorkItem;
+//     RT_WORK_ITEM            MptWorkItem;
+       // Event used to sync the case unloading driver and MptWorkItem is still in progress.
+//     NDIS_EVENT              MptWorkItemEvent;
+       // To protect the following variables.
+//     NDIS_SPIN_LOCK          MptWorkItemSpinLock;
+       // Indicate a MptWorkItem is scheduled and not yet finished.
+       BOOLEAN                 bMptWorkItemInProgress;
+       // An instance which implements function and context of MptWorkItem.
+       MPT_WORK_ITEM_HANDLER   CurrMptAct;
+
+       // 1=Start, 0=Stop from UI.
+       ULONG                   MptTestStart;
+       // _TEST_MODE, defined in MPT_Req2.h
+       ULONG                   MptTestItem;
+       // Variable needed in each implementation of CurrMptAct.
+       ULONG                   MptActType;     // Type of action performed in CurrMptAct.
+       // The Offset of IO operation is depend of MptActType.
+       ULONG                   MptIoOffset;
+       // The Value of IO operation is depend of MptActType.
+       ULONG                   MptIoValue;
+       // The RfPath of IO operation is depend of MptActType.
+       ULONG                   MptRfPath;
+
+       WIRELESS_MODE           MptWirelessModeToSw;    // Wireless mode to switch.
+       u8                      MptChannelToSw;         // Channel to switch.
+       u8                      MptInitGainToSet;       // Initial gain to set.
+       //ULONG                 bMptAntennaA;           // TRUE if we want to use antenna A.
+       ULONG                   MptBandWidth;           // bandwidth to switch.
+       ULONG                   MptRateIndex;           // rate index.
+       // Register value kept for Single Carrier Tx test.
+       u8                      btMpCckTxPower;
+       // Register value kept for Single Carrier Tx test.
+       u8                      btMpOfdmTxPower;
+       // For MP Tx Power index
+       u8                      TxPwrLevel[2];  // rf-A, rf-B
+
+       // Content of RCR Regsiter for Mass Production Test.
+       ULONG                   MptRCR;
+       // TRUE if we only receive packets with specific pattern.
+       BOOLEAN                 bMptFilterPattern;
+       // Rx OK count, statistics used in Mass Production Test.
+       ULONG                   MptRxOkCnt;
+       // Rx CRC32 error count, statistics used in Mass Production Test.
+       ULONG                   MptRxCrcErrCnt;
+
+       BOOLEAN                 bCckContTx;     // TRUE if we are in CCK Continuous Tx test.
+       BOOLEAN                 bOfdmContTx;    // TRUE if we are in OFDM Continuous Tx test.
+       BOOLEAN                 bStartContTx;   // TRUE if we have start Continuous Tx test.
+       // TRUE if we are in Single Carrier Tx test.
+       BOOLEAN                 bSingleCarrier;
+       // TRUE if we are in Carrier Suppression Tx Test.
+       BOOLEAN                 bCarrierSuppression;
+       //TRUE if we are in Single Tone Tx test.
+       BOOLEAN                 bSingleTone;
+
+       // ACK counter asked by K.Y..
+       BOOLEAN                 bMptEnableAckCounter;
+       ULONG                   MptAckCounter;
+
+       // SD3 Willis For 8192S to save 1T/2T RF table for ACUT Only fro ACUT delete later ~~~!
+       //s1Byte                BufOfLines[2][MAX_LINES_HWCONFIG_TXT][MAX_BYTES_LINE_HWCONFIG_TXT];
+       //s1Byte                        BufOfLines[2][MP_MAX_LINES][MP_MAX_LINES_BYTES];
+       //s4Byte                        RfReadLine[2];
+
+       u8              APK_bound[2];   //for APK       path A/path B
+       BOOLEAN         bMptIndexEven;
+
+       u8              backup0xc50;
+       u8              backup0xc58;
+       u8              backup0xc30;
+}MPT_CONTEXT, *PMPT_CONTEXT;
+#endif
+//#endif
+
+/* E-Fuse */
+#ifdef CONFIG_RTL8192D
+#define EFUSE_MAP_SIZE         255
+#endif
+#ifdef CONFIG_RTL8192C
+#define EFUSE_MAP_SIZE         128
+#endif
+#ifdef CONFIG_RTL8723A
+#define EFUSE_MAP_SIZE         256
+#endif
+#ifdef CONFIG_RTL8188E
+#define EFUSE_MAP_SIZE         256
+#endif
+#define EFUSE_MAX_SIZE         512
+
+/* end of E-Fuse */
+
+//#define RTPRIV_IOCTL_MP                                      ( SIOCIWFIRSTPRIV + 0x17)
+enum {
+       WRITE_REG = 1,
+       READ_REG,
+       WRITE_RF,
+       READ_RF,
+       MP_START,
+       MP_STOP,
+       MP_RATE,
+       MP_CHANNEL,
+       MP_BANDWIDTH,
+       MP_TXPOWER,
+       MP_ANT_TX,
+       MP_ANT_RX,
+       MP_CTX,
+       MP_QUERY,
+       MP_ARX,
+       MP_PSD,
+       MP_PWRTRK,
+       MP_THER,
+       MP_IOCTL,
+       EFUSE_GET,
+       EFUSE_SET,
+       MP_RESET_STATS,
+       MP_DUMP,
+       MP_PHYPARA,
+       MP_NULL,
+};
+
+struct mp_priv
+{
+       _adapter *papdater;
+
+       //Testing Flag
+       u32 mode;//0 for normal type packet, 1 for loopback packet (16bytes TXCMD)
+
+       u32 prev_fw_state;
+
+       //OID cmd handler
+       struct mp_wiparam workparam;
+//     u8 act_in_progress;
+
+       //Tx Section
+       u8 TID;
+       u32 tx_pktcount;
+       struct mp_tx tx;
+
+       //Rx Section
+       u32 rx_pktcount;
+       u32 rx_crcerrpktcount;
+       u32 rx_pktloss;
+
+       struct recv_stat rxstat;
+
+       //RF/BB relative
+       u8 channel;
+       u8 bandwidth;
+       u8 prime_channel_offset;
+       u8 txpoweridx;
+       u8 txpoweridx_b;
+       u8 rateidx;
+       u32 preamble;
+//     u8 modem;
+       u32 CrystalCap;
+//     u32 curr_crystalcap;
+
+       u16 antenna_tx;
+       u16 antenna_rx;
+//     u8 curr_rfpath;
+
+       u8 check_mp_pkt;
+
+//     uint ForcedDataRate;
+
+       struct wlan_network mp_network;
+       NDIS_802_11_MAC_ADDRESS network_macaddr;
+
+#ifdef PLATFORM_WINDOWS
+       u32 rx_testcnt;
+       u32 rx_testcnt1;
+       u32 rx_testcnt2;
+       u32 tx_testcnt;
+       u32 tx_testcnt1;
+
+       struct mp_wi_cntx wi_cntx;
+
+       u8 h2c_result;
+       u8 h2c_seqnum;
+       u16 h2c_cmdcode;
+       u8 h2c_resp_parambuf[512];
+       _lock h2c_lock;
+       _lock wkitm_lock;
+       u32 h2c_cmdcnt;
+       NDIS_EVENT h2c_cmd_evt;
+       NDIS_EVENT c2h_set;
+       NDIS_EVENT h2c_clr;
+       NDIS_EVENT cpwm_int;
+
+       NDIS_EVENT scsir_full_evt;
+       NDIS_EVENT scsiw_empty_evt;
+#endif
+
+       u8 *pallocated_mp_xmitframe_buf;
+       u8 *pmp_xmtframe_buf;
+       _queue free_mp_xmitqueue;
+       u32 free_mp_xmitframe_cnt;
+
+       MPT_CONTEXT MptCtx;
+};
+
+typedef struct _IOCMD_STRUCT_ {
+       u8      cmdclass;
+       u16     value;
+       u8      index;
+}IOCMD_STRUCT;
+
+struct rf_reg_param {
+       u32 path;
+       u32 offset;
+       u32 value;
+};
+
+struct bb_reg_param {
+       u32 offset;
+       u32 value;
+};
+//=======================================================================
+
+#define LOWER  _TRUE
+#define RAISE  _FALSE
+
+/* Hardware Registers */
+#if 0
+#if 0
+#define IOCMD_CTRL_REG                 0x102502C0
+#define IOCMD_DATA_REG                 0x102502C4
+#else
+#define IOCMD_CTRL_REG                 0x10250370
+#define IOCMD_DATA_REG                 0x10250374
+#endif
+
+#define IOCMD_GET_THERMAL_METER                0xFD000028
+
+#define IOCMD_CLASS_BB_RF              0xF0
+#define IOCMD_BB_READ_IDX              0x00
+#define IOCMD_BB_WRITE_IDX             0x01
+#define IOCMD_RF_READ_IDX              0x02
+#define IOCMD_RF_WRIT_IDX              0x03
+#endif
+#define BB_REG_BASE_ADDR               0x800
+
+/* MP variables */
+#if 0
+#define _2MAC_MODE_    0
+#define _LOOPBOOK_MODE_        1
+#endif
+typedef enum _MP_MODE_ {
+       MP_OFF,
+       MP_ON,
+       MP_ERR,
+       MP_CONTINUOUS_TX,
+       MP_SINGLE_CARRIER_TX,
+       MP_CARRIER_SUPPRISSION_TX,
+       MP_SINGLE_TONE_TX,
+       MP_PACKET_TX,
+       MP_PACKET_RX
+} MP_MODE;
+
+#ifdef CONFIG_RTL8192C
+#define RF_PATH_A      RF_PATH_A
+#define RF_PATH_B      RF_PATH_B
+#define RF_PATH_C      RF_PATH_C
+#define RF_PATH_D      RF_PATH_D
+
+#define MAX_RF_PATH_NUMS       RF_PATH_MAX
+#else
+#define RF_PATH_A      0
+#define RF_PATH_B      1
+#define RF_PATH_C      2
+#define RF_PATH_D      3
+
+#define MAX_RF_PATH_NUMS       2
+#endif
+
+extern u8 mpdatarate[NumRates];
+
+/* MP set force data rate base on the definition. */
+typedef enum _MPT_RATE_INDEX
+{
+       /* CCK rate. */
+       MPT_RATE_1M,    /* 0 */
+       MPT_RATE_2M,
+       MPT_RATE_55M,
+       MPT_RATE_11M,   /* 3 */
+
+       /* OFDM rate. */
+       MPT_RATE_6M,    /* 4 */
+       MPT_RATE_9M,
+       MPT_RATE_12M,
+       MPT_RATE_18M,
+       MPT_RATE_24M,
+       MPT_RATE_36M,
+       MPT_RATE_48M,
+       MPT_RATE_54M,   /* 11 */
+
+       /* HT rate. */
+       MPT_RATE_MCS0,  /* 12 */
+       MPT_RATE_MCS1,
+       MPT_RATE_MCS2,
+       MPT_RATE_MCS3,
+       MPT_RATE_MCS4,
+       MPT_RATE_MCS5,
+       MPT_RATE_MCS6,
+       MPT_RATE_MCS7,  /* 19 */
+       MPT_RATE_MCS8,
+       MPT_RATE_MCS9,
+       MPT_RATE_MCS10,
+       MPT_RATE_MCS11,
+       MPT_RATE_MCS12,
+       MPT_RATE_MCS13,
+       MPT_RATE_MCS14,
+       MPT_RATE_MCS15, /* 27 */
+       MPT_RATE_LAST
+}MPT_RATE_E, *PMPT_RATE_E;
+
+#if 0
+// Represent Channel Width in HT Capabilities
+typedef enum _HT_CHANNEL_WIDTH {
+       HT_CHANNEL_WIDTH_20 = 0,
+       HT_CHANNEL_WIDTH_40 = 1,
+}HT_CHANNEL_WIDTH, *PHT_CHANNEL_WIDTH;
+#endif
+
+#define MAX_TX_PWR_INDEX_N_MODE 64     // 0x3F
+
+typedef enum _POWER_MODE_ {
+       POWER_LOW = 0,
+       POWER_NORMAL
+}POWER_MODE;
+
+
+#define RX_PKT_BROADCAST       1
+#define RX_PKT_DEST_ADDR       2
+#define RX_PKT_PHY_MATCH       3
+
+#if 0
+#define RPTMaxCount 0x000FFFFF;
+
+// parameter 1 : BitMask
+//     bit 0  : OFDM PPDU
+//     bit 1  : OFDM False Alarm
+//     bit 2  : OFDM MPDU OK
+//     bit 3  : OFDM MPDU Fail
+//     bit 4  : CCK PPDU
+//     bit 5  : CCK False Alarm
+//     bit 6  : CCK MPDU ok
+//     bit 7  : CCK MPDU fail
+//     bit 8  : HT PPDU counter
+//     bit 9  : HT false alarm
+//     bit 10 : HT MPDU total
+//     bit 11 : HT MPDU OK
+//     bit 12 : HT MPDU fail
+//     bit 15 : RX full drop
+typedef enum _RXPHY_BITMASK_
+{
+       OFDM_PPDU_BIT = 0,
+       OFDM_FALSE_BIT,
+       OFDM_MPDU_OK_BIT,
+       OFDM_MPDU_FAIL_BIT,
+       CCK_PPDU_BIT,
+       CCK_FALSE_BIT,
+       CCK_MPDU_OK_BIT,
+       CCK_MPDU_FAIL_BIT,
+       HT_PPDU_BIT,
+       HT_FALSE_BIT,
+       HT_MPDU_BIT,
+       HT_MPDU_OK_BIT,
+       HT_MPDU_FAIL_BIT,
+} RXPHY_BITMASK;
+#endif
+
+typedef enum _ENCRY_CTRL_STATE_ {
+       HW_CONTROL,             //hw encryption& decryption
+       SW_CONTROL,             //sw encryption& decryption
+       HW_ENCRY_SW_DECRY,      //hw encryption & sw decryption
+       SW_ENCRY_HW_DECRY       //sw encryption & hw decryption
+}ENCRY_CTRL_STATE;
+
+typedef enum _OFDM_TX_MODE {
+       OFDM_ALL_OFF            = 0,
+       OFDM_ContinuousTx       = 1,
+       OFDM_SingleCarrier      = 2,
+       OFDM_SingleTone         = 4,
+} OFDM_TX_MODE;
+
+//=======================================================================
+//extern struct mp_xmit_frame *alloc_mp_xmitframe(struct mp_priv *pmp_priv);
+//extern int free_mp_xmitframe(struct xmit_priv *pxmitpriv, struct mp_xmit_frame *pmp_xmitframe);
+
+extern s32 init_mp_priv(PADAPTER padapter);
+extern void free_mp_priv(struct mp_priv *pmp_priv);
+extern s32 MPT_InitializeAdapter(PADAPTER padapter, u8 Channel);
+extern void MPT_DeInitAdapter(PADAPTER padapter);
+extern s32 mp_start_test(PADAPTER padapter);
+extern void mp_stop_test(PADAPTER padapter);
+
+//=======================================================================
+//extern void  IQCalibrateBcut(PADAPTER pAdapter);
+
+//extern u32   bb_reg_read(PADAPTER Adapter, u16 offset);
+//extern u8    bb_reg_write(PADAPTER Adapter, u16 offset, u32 value);
+//extern u32   rf_reg_read(PADAPTER Adapter, u8 path, u8 offset);
+//extern u8    rf_reg_write(PADAPTER Adapter, u8 path, u8 offset, u32 value);
+
+//extern u32   get_bb_reg(PADAPTER Adapter, u16 offset, u32 bitmask);
+//extern u8    set_bb_reg(PADAPTER Adapter, u16 offset, u32 bitmask, u32 value);
+//extern u32   get_rf_reg(PADAPTER Adapter, u8 path, u8 offset, u32 bitmask);
+//extern u8    set_rf_reg(PADAPTER Adapter, u8 path, u8 offset, u32 bitmask, u32 value);
+
+extern u32 _read_rfreg(PADAPTER padapter, u8 rfpath, u32 addr, u32 bitmask);
+extern void _write_rfreg(PADAPTER padapter, u8 rfpath, u32 addr, u32 bitmask, u32 val);
+
+extern u32 read_macreg(_adapter *padapter, u32 addr, u32 sz);
+extern void write_macreg(_adapter *padapter, u32 addr, u32 val, u32 sz);
+extern u32 read_bbreg(_adapter *padapter, u32 addr, u32 bitmask);
+extern void write_bbreg(_adapter *padapter, u32 addr, u32 bitmask, u32 val);
+extern u32 read_rfreg(PADAPTER padapter, u8 rfpath, u32 addr);
+extern void write_rfreg(PADAPTER padapter, u8 rfpath, u32 addr, u32 val);
+
+extern void    SetChannel(PADAPTER pAdapter);
+extern void    SetBandwidth(PADAPTER pAdapter);
+extern void    SetTxPower(PADAPTER pAdapter);
+extern void    SetAntennaPathPower(PADAPTER pAdapter);
+//extern void  SetTxAGCOffset(PADAPTER pAdapter, u32 ulTxAGCOffset);
+extern void    SetDataRate(PADAPTER pAdapter);
+
+extern void    SetAntenna(PADAPTER pAdapter);
+
+//extern void  SetCrystalCap(PADAPTER pAdapter);
+
+extern s32     SetThermalMeter(PADAPTER pAdapter, u8 target_ther);
+extern void    GetThermalMeter(PADAPTER pAdapter, u8 *value);
+
+extern void    SetContinuousTx(PADAPTER pAdapter, u8 bStart);
+extern void    SetSingleCarrierTx(PADAPTER pAdapter, u8 bStart);
+extern void    SetSingleToneTx(PADAPTER pAdapter, u8 bStart);
+extern void    SetCarrierSuppressionTx(PADAPTER pAdapter, u8 bStart);
+
+extern void    fill_txdesc_for_mp(PADAPTER padapter, struct tx_desc *ptxdesc);
+extern void    SetPacketTx(PADAPTER padapter);
+extern void    SetPacketRx(PADAPTER pAdapter, u8 bStartRx);
+
+extern void    ResetPhyRxPktCount(PADAPTER pAdapter);
+extern u32     GetPhyRxPktReceived(PADAPTER pAdapter);
+extern u32     GetPhyRxPktCRC32Error(PADAPTER pAdapter);
+
+extern s32     SetPowerTracking(PADAPTER padapter, u8 enable);
+extern void    GetPowerTracking(PADAPTER padapter, u8 *enable);
+
+extern u32     mp_query_psd(PADAPTER pAdapter, u8 *data);
+
+
+extern void Hal_SetAntenna(PADAPTER pAdapter);
+extern void Hal_SetBandwidth(PADAPTER pAdapter);
+
+extern void Hal_SetTxPower(PADAPTER pAdapter);
+extern void Hal_SetCarrierSuppressionTx(PADAPTER pAdapter, u8 bStart);
+extern void Hal_SetSingleToneTx ( PADAPTER pAdapter , u8 bStart );
+extern void Hal_SetSingleCarrierTx (PADAPTER pAdapter, u8 bStart);
+extern void Hal_SetContinuousTx (PADAPTER pAdapter, u8 bStart);
+extern void Hal_SetBandwidth(PADAPTER pAdapter);
+
+extern void Hal_SetDataRate(PADAPTER pAdapter);
+extern void Hal_SetChannel(PADAPTER pAdapter);
+extern void Hal_SetAntennaPathPower(PADAPTER pAdapter);
+extern s32 Hal_SetThermalMeter(PADAPTER pAdapter, u8 target_ther);
+extern s32 Hal_SetPowerTracking(PADAPTER padapter, u8 enable);
+extern void Hal_GetPowerTracking(PADAPTER padapter, u8 * enable);
+extern void Hal_GetThermalMeter(PADAPTER pAdapter, u8 *value);
+extern void Hal_mpt_SwitchRfSetting(PADAPTER pAdapter);
+extern void Hal_MPT_CCKTxPowerAdjust(PADAPTER Adapter, BOOLEAN bInCH14);
+extern void Hal_MPT_CCKTxPowerAdjustbyIndex(PADAPTER pAdapter, BOOLEAN beven);
+extern void Hal_SetCCKTxPower(PADAPTER pAdapter, u8 * TxPower);
+extern void Hal_SetOFDMTxPower(PADAPTER pAdapter, u8 * TxPower);
+extern void Hal_TriggerRFThermalMeter(PADAPTER pAdapter);
+extern u8 Hal_ReadRFThermalMeter(PADAPTER pAdapter);
+extern void Hal_SetCCKContinuousTx(PADAPTER pAdapter, u8 bStart);
+extern void Hal_SetOFDMContinuousTx(PADAPTER pAdapter, u8 bStart);
+extern void Hal_ProSetCrystalCap (PADAPTER pAdapter , u32 CrystalCapVal);
+
+#endif //_RTW_MP_H_
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtw_mp_ioctl.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtw_mp_ioctl.h
new file mode 100644 (file)
index 0000000..3016a9c
--- /dev/null
@@ -0,0 +1,595 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef _RTW_MP_IOCTL_H_
+#define _RTW_MP_IOCTL_H_
+
+//#include <drv_conf.h>
+//#include <osdep_service.h>
+#include <drv_types.h>
+#include <mp_custom_oid.h>
+#include <rtw_ioctl.h>
+#include <rtw_ioctl_rtl.h>
+#include <rtw_efuse.h>
+#include <rtw_mp.h>
+
+#if 0
+#define TESTFWCMDNUMBER                        1000000
+#define TEST_H2CINT_WAIT_TIME          500
+#define TEST_C2HINT_WAIT_TIME          500
+#define HCI_TEST_SYSCFG_HWMASK         1
+#define _BUSCLK_40M                    (4 << 2)
+#endif
+//------------------------------------------------------------------------------
+typedef struct CFG_DBG_MSG_STRUCT {
+       u32 DebugLevel;
+       u32 DebugComponent_H32;
+       u32 DebugComponent_L32;
+}CFG_DBG_MSG_STRUCT,*PCFG_DBG_MSG_STRUCT;
+
+typedef struct _RW_REG {
+       u32 offset;
+       u32 width;
+       u32 value;
+}mp_rw_reg,RW_Reg, *pRW_Reg;
+
+//for OID_RT_PRO_READ16_EEPROM & OID_RT_PRO_WRITE16_EEPROM
+typedef struct _EEPROM_RW_PARAM {
+       u32 offset;
+       u16 value;
+}eeprom_rw_param,EEPROM_RWParam, *pEEPROM_RWParam;
+
+typedef struct _EFUSE_ACCESS_STRUCT_ {
+       u16     start_addr;
+       u16     cnts;
+       u8      data[0];
+}EFUSE_ACCESS_STRUCT, *PEFUSE_ACCESS_STRUCT;
+
+typedef struct _BURST_RW_REG {
+       u32 offset;
+       u32 len;
+       u8 Data[256];
+}burst_rw_reg,Burst_RW_Reg, *pBurst_RW_Reg;
+
+typedef struct _USB_VendorReq{
+       u8      bRequest;
+       u16     wValue;
+       u16     wIndex;
+       u16     wLength;
+       u8      u8Dir;//0:OUT, 1:IN
+       u8      u8InData;
+}usb_vendor_req, USB_VendorReq, *pUSB_VendorReq;
+
+typedef struct _DR_VARIABLE_STRUCT_ {
+       u8 offset;
+       u32 variable;
+}DR_VARIABLE_STRUCT;
+
+//int mp_start_joinbss(_adapter *padapter, NDIS_802_11_SSID *pssid);
+
+//void _irqlevel_changed_(_irqL *irqlevel, /*BOOLEAN*/unsigned char bLower);
+#ifdef PLATFORM_OS_XP
+static void _irqlevel_changed_(_irqL *irqlevel, u8 bLower)
+{
+
+       if (bLower == LOWER) {
+               *irqlevel = KeGetCurrentIrql();
+
+               if (*irqlevel > PASSIVE_LEVEL) {
+                       KeLowerIrql(PASSIVE_LEVEL);
+               }
+       } else {
+               if (KeGetCurrentIrql() == PASSIVE_LEVEL) {
+                       KeRaiseIrql(DISPATCH_LEVEL, irqlevel);
+               }
+       }
+
+}
+#else
+#define _irqlevel_changed_(a,b)
+#endif
+
+//oid_rtl_seg_81_80_00
+NDIS_STATUS oid_rt_pro_set_data_rate_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_pro_start_test_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_pro_stop_test_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_pro_set_channel_direct_call_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_pro_set_antenna_bb_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_pro_set_tx_power_control_hdl(struct oid_par_priv* poid_par_priv);
+//oid_rtl_seg_81_80_20
+NDIS_STATUS oid_rt_pro_query_tx_packet_sent_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_pro_query_rx_packet_received_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_pro_query_rx_packet_crc32_error_hdl(struct oid_par_priv* poid_par_priv);
+
+NDIS_STATUS oid_rt_pro_reset_tx_packet_sent_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_pro_reset_rx_packet_received_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_pro_set_modulation_hdl(struct oid_par_priv* poid_par_priv);
+
+NDIS_STATUS oid_rt_pro_set_continuous_tx_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_pro_set_single_carrier_tx_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_pro_set_carrier_suppression_tx_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_pro_set_single_tone_tx_hdl(struct oid_par_priv* poid_par_priv);
+
+
+//oid_rtl_seg_81_87
+NDIS_STATUS oid_rt_pro_write_bb_reg_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_pro_read_bb_reg_hdl(struct oid_par_priv* poid_par_priv);
+
+NDIS_STATUS oid_rt_pro_write_rf_reg_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_pro_read_rf_reg_hdl(struct oid_par_priv* poid_par_priv);
+
+
+//oid_rtl_seg_81_85
+NDIS_STATUS oid_rt_wireless_mode_hdl(struct oid_par_priv* poid_par_priv);
+
+
+// oid_rtl_seg_87_11_00
+NDIS_STATUS oid_rt_pro8711_join_bss_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_pro_read_register_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_pro_write_register_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_pro_burst_read_register_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_pro_burst_write_register_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_pro_write_txcmd_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_pro_read16_eeprom_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_pro_write16_eeprom_hdl (struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_pro8711_wi_poll_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_pro8711_pkt_loss_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_rd_attrib_mem_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_wr_attrib_mem_hdl (struct oid_par_priv* poid_par_priv);
+NDIS_STATUS  oid_rt_pro_set_rf_intfs_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_poll_rx_status_hdl(struct oid_par_priv* poid_par_priv);
+// oid_rtl_seg_87_11_20
+NDIS_STATUS oid_rt_pro_cfg_debug_message_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_pro_set_data_rate_ex_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_pro_set_basic_rate_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_pro_read_tssi_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_pro_set_power_tracking_hdl(struct oid_par_priv* poid_par_priv);
+//oid_rtl_seg_87_11_50
+NDIS_STATUS oid_rt_pro_qry_pwrstate_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_pro_set_pwrstate_hdl(struct oid_par_priv* poid_par_priv);
+//oid_rtl_seg_87_11_F0
+NDIS_STATUS oid_rt_pro_h2c_set_rate_table_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_pro_h2c_get_rate_table_hdl(struct oid_par_priv* poid_par_priv);
+
+
+//oid_rtl_seg_87_12_00
+NDIS_STATUS oid_rt_pro_encryption_ctrl_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_pro_add_sta_info_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_pro_dele_sta_info_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_pro_query_dr_variable_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_pro_rx_packet_type_hdl(struct oid_par_priv* poid_par_priv);
+
+NDIS_STATUS oid_rt_pro_read_efuse_hdl(struct oid_par_priv *poid_par_priv);
+NDIS_STATUS oid_rt_pro_write_efuse_hdl(struct oid_par_priv *poid_par_priv);
+NDIS_STATUS oid_rt_pro_rw_efuse_pgpkt_hdl(struct oid_par_priv *poid_par_priv);
+NDIS_STATUS oid_rt_get_efuse_current_size_hdl(struct oid_par_priv *poid_par_priv);
+NDIS_STATUS oid_rt_pro_efuse_hdl(struct oid_par_priv *poid_par_priv);
+NDIS_STATUS oid_rt_pro_efuse_map_hdl(struct oid_par_priv *poid_par_priv);
+
+NDIS_STATUS oid_rt_set_bandwidth_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_set_crystal_cap_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_set_rx_packet_type_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_get_efuse_max_size_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_pro_set_tx_agc_offset_hdl(struct oid_par_priv* poid_par_priv);
+
+NDIS_STATUS oid_rt_pro_set_pkt_test_mode_hdl(struct oid_par_priv* poid_par_priv);
+
+NDIS_STATUS oid_rt_get_thermal_meter_hdl(struct oid_par_priv* poid_par_priv);
+
+NDIS_STATUS oid_rt_reset_phy_rx_packet_count_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_get_phy_rx_packet_received_hdl(struct oid_par_priv* poid_par_priv);
+NDIS_STATUS oid_rt_get_phy_rx_packet_crc32_error_hdl(struct oid_par_priv* poid_par_priv);
+
+NDIS_STATUS oid_rt_set_power_down_hdl(struct oid_par_priv* poid_par_priv);
+
+NDIS_STATUS oid_rt_get_power_mode_hdl(struct oid_par_priv* poid_par_priv);
+
+NDIS_STATUS oid_rt_pro_trigger_gpio_hdl(struct oid_par_priv *poid_par_priv);
+
+#ifdef _RTW_MP_IOCTL_C_
+
+const struct oid_obj_priv oid_rtl_seg_81_80_00[] =
+{
+       {1, &oid_null_function},                        //0x00  OID_RT_PRO_RESET_DUT
+       {1, &oid_rt_pro_set_data_rate_hdl},             //0x01
+       {1, &oid_rt_pro_start_test_hdl},                //0x02
+       {1, &oid_rt_pro_stop_test_hdl},                 //0x03
+       {1, &oid_null_function},                        //0x04  OID_RT_PRO_SET_PREAMBLE
+       {1, &oid_null_function},                        //0x05  OID_RT_PRO_SET_SCRAMBLER
+       {1, &oid_null_function},                        //0x06  OID_RT_PRO_SET_FILTER_BB
+       {1, &oid_null_function},                        //0x07  OID_RT_PRO_SET_MANUAL_DIVERSITY_BB
+       {1, &oid_rt_pro_set_channel_direct_call_hdl},   //0x08
+       {1, &oid_null_function},                        //0x09  OID_RT_PRO_SET_SLEEP_MODE_DIRECT_CALL
+       {1, &oid_null_function},                        //0x0A  OID_RT_PRO_SET_WAKE_MODE_DIRECT_CALL
+       {1, &oid_rt_pro_set_continuous_tx_hdl},         //0x0B  OID_RT_PRO_SET_TX_CONTINUOUS_DIRECT_CALL
+       {1, &oid_rt_pro_set_single_carrier_tx_hdl},     //0x0C  OID_RT_PRO_SET_SINGLE_CARRIER_TX_CONTINUOUS
+       {1, &oid_null_function},                        //0x0D  OID_RT_PRO_SET_TX_ANTENNA_BB
+       {1, &oid_rt_pro_set_antenna_bb_hdl},            //0x0E
+       {1, &oid_null_function},                        //0x0F  OID_RT_PRO_SET_CR_SCRAMBLER
+       {1, &oid_null_function},                        //0x10  OID_RT_PRO_SET_CR_NEW_FILTER
+       {1, &oid_rt_pro_set_tx_power_control_hdl},      //0x11  OID_RT_PRO_SET_TX_POWER_CONTROL
+       {1, &oid_null_function},                        //0x12  OID_RT_PRO_SET_CR_TX_CONFIG
+       {1, &oid_null_function},                        //0x13  OID_RT_PRO_GET_TX_POWER_CONTROL
+       {1, &oid_null_function},                        //0x14  OID_RT_PRO_GET_CR_SIGNAL_QUALITY
+       {1, &oid_null_function},                        //0x15  OID_RT_PRO_SET_CR_SETPOINT
+       {1, &oid_null_function},                        //0x16  OID_RT_PRO_SET_INTEGRATOR
+       {1, &oid_null_function},                        //0x17  OID_RT_PRO_SET_SIGNAL_QUALITY
+       {1, &oid_null_function},                        //0x18  OID_RT_PRO_GET_INTEGRATOR
+       {1, &oid_null_function},                        //0x19  OID_RT_PRO_GET_SIGNAL_QUALITY
+       {1, &oid_null_function},                        //0x1A  OID_RT_PRO_QUERY_EEPROM_TYPE
+       {1, &oid_null_function},                        //0x1B  OID_RT_PRO_WRITE_MAC_ADDRESS
+       {1, &oid_null_function},                        //0x1C  OID_RT_PRO_READ_MAC_ADDRESS
+       {1, &oid_null_function},                        //0x1D  OID_RT_PRO_WRITE_CIS_DATA
+       {1, &oid_null_function},                        //0x1E  OID_RT_PRO_READ_CIS_DATA
+       {1, &oid_null_function}                         //0x1F  OID_RT_PRO_WRITE_POWER_CONTROL
+
+};
+
+const struct oid_obj_priv oid_rtl_seg_81_80_20[] =
+{
+       {1, &oid_null_function},                        //0x20  OID_RT_PRO_READ_POWER_CONTROL
+       {1, &oid_null_function},                        //0x21  OID_RT_PRO_WRITE_EEPROM
+       {1, &oid_null_function},                        //0x22  OID_RT_PRO_READ_EEPROM
+       {1, &oid_rt_pro_reset_tx_packet_sent_hdl},      //0x23
+       {1, &oid_rt_pro_query_tx_packet_sent_hdl},      //0x24
+       {1, &oid_rt_pro_reset_rx_packet_received_hdl},  //0x25
+       {1, &oid_rt_pro_query_rx_packet_received_hdl},  //0x26
+       {1, &oid_rt_pro_query_rx_packet_crc32_error_hdl},       //0x27
+       {1, &oid_null_function},                        //0x28  OID_RT_PRO_QUERY_CURRENT_ADDRESS
+       {1, &oid_null_function},                        //0x29  OID_RT_PRO_QUERY_PERMANENT_ADDRESS
+       {1, &oid_null_function},                        //0x2A  OID_RT_PRO_SET_PHILIPS_RF_PARAMETERS
+       {1, &oid_rt_pro_set_carrier_suppression_tx_hdl},//0x2B  OID_RT_PRO_SET_CARRIER_SUPPRESSION_TX
+       {1, &oid_null_function},                        //0x2C  OID_RT_PRO_RECEIVE_PACKET
+       {1, &oid_null_function},                        //0x2D  OID_RT_PRO_WRITE_EEPROM_BYTE
+       {1, &oid_null_function},                        //0x2E  OID_RT_PRO_READ_EEPROM_BYTE
+       {1, &oid_rt_pro_set_modulation_hdl}             //0x2F
+
+};
+
+const struct oid_obj_priv oid_rtl_seg_81_80_40[] =
+{
+       {1, &oid_null_function},                        //0x40
+       {1, &oid_null_function},                        //0x41
+       {1, &oid_null_function},                        //0x42
+       {1, &oid_rt_pro_set_single_tone_tx_hdl},        //0x43
+       {1, &oid_null_function},                        //0x44
+       {1, &oid_null_function}                         //0x45
+};
+
+const struct oid_obj_priv oid_rtl_seg_81_80_80[] =
+{
+       {1, &oid_null_function},                        //0x80  OID_RT_DRIVER_OPTION
+       {1, &oid_null_function},                        //0x81  OID_RT_RF_OFF
+       {1, &oid_null_function}                         //0x82  OID_RT_AUTH_STATUS
+
+};
+
+const struct oid_obj_priv oid_rtl_seg_81_85[] =
+{
+       {1, &oid_rt_wireless_mode_hdl}                  //0x00  OID_RT_WIRELESS_MODE
+};
+
+struct oid_obj_priv oid_rtl_seg_81_87[] =
+{
+       {1, &oid_null_function},                        //0x80  OID_RT_PRO8187_WI_POLL
+       {1, &oid_rt_pro_write_bb_reg_hdl},              //0x81
+       {1, &oid_rt_pro_read_bb_reg_hdl},               //0x82
+       {1, &oid_rt_pro_write_rf_reg_hdl},              //0x82
+       {1, &oid_rt_pro_read_rf_reg_hdl}                //0x83
+};
+
+struct oid_obj_priv oid_rtl_seg_87_11_00[] =
+{
+       {1, &oid_rt_pro8711_join_bss_hdl},              //0x00  //S
+       {1, &oid_rt_pro_read_register_hdl},             //0x01
+       {1, &oid_rt_pro_write_register_hdl},            //0x02
+       {1, &oid_rt_pro_burst_read_register_hdl},       //0x03
+       {1, &oid_rt_pro_burst_write_register_hdl},      //0x04
+       {1, &oid_rt_pro_write_txcmd_hdl},               //0x05
+       {1, &oid_rt_pro_read16_eeprom_hdl},             //0x06
+       {1, &oid_rt_pro_write16_eeprom_hdl},            //0x07
+       {1, &oid_null_function},                        //0x08  OID_RT_PRO_H2C_SET_COMMAND
+       {1, &oid_null_function},                        //0x09  OID_RT_PRO_H2C_QUERY_RESULT
+       {1, &oid_rt_pro8711_wi_poll_hdl},               //0x0A
+       {1, &oid_rt_pro8711_pkt_loss_hdl},              //0x0B
+       {1, &oid_rt_rd_attrib_mem_hdl},                 //0x0C
+       {1, &oid_rt_wr_attrib_mem_hdl},                 //0x0D
+       {1, &oid_null_function},                        //0x0E
+       {1, &oid_null_function},                        //0x0F
+       {1, &oid_null_function},                        //0x10  OID_RT_PRO_H2C_CMD_MODE
+       {1, &oid_null_function},                        //0x11  OID_RT_PRO_H2C_CMD_RSP_MODE
+       {1, &oid_null_function},                        //0X12  OID_RT_PRO_WAIT_C2H_EVENT
+       {1, &oid_null_function},                        //0X13  OID_RT_PRO_RW_ACCESS_PROTOCOL_TEST
+       {1, &oid_null_function},                        //0X14  OID_RT_PRO_SCSI_ACCESS_TEST
+       {1, &oid_null_function},                        //0X15  OID_RT_PRO_SCSI_TCPIPOFFLOAD_OUT
+       {1, &oid_null_function},                        //0X16  OID_RT_PRO_SCSI_TCPIPOFFLOAD_IN
+       {1, &oid_null_function},                        //0X17  OID_RT_RRO_RX_PKT_VIA_IOCTRL
+       {1, &oid_null_function},                        //0X18  OID_RT_RRO_RX_PKTARRAY_VIA_IOCTRL
+       {1, &oid_null_function},                        //0X19  OID_RT_RPO_SET_PWRMGT_TEST
+       {1, &oid_null_function},                        //0X1A
+       {1, &oid_null_function},                        //0X1B  OID_RT_PRO_QRY_PWRMGT_TEST
+       {1, &oid_null_function},                        //0X1C  OID_RT_RPO_ASYNC_RWIO_TEST
+       {1, &oid_null_function},                        //0X1D  OID_RT_RPO_ASYNC_RWIO_POLL
+       {1, &oid_rt_pro_set_rf_intfs_hdl},              //0X1E
+       {1, &oid_rt_poll_rx_status_hdl}                 //0X1F
+};
+
+struct oid_obj_priv oid_rtl_seg_87_11_20[] =
+{
+       {1, &oid_rt_pro_cfg_debug_message_hdl},         //0x20
+       {1, &oid_rt_pro_set_data_rate_ex_hdl},          //0x21
+       {1, &oid_rt_pro_set_basic_rate_hdl},            //0x22
+       {1, &oid_rt_pro_read_tssi_hdl},                 //0x23
+       {1, &oid_rt_pro_set_power_tracking_hdl}         //0x24
+};
+
+
+struct oid_obj_priv oid_rtl_seg_87_11_50[] =
+{
+       {1, &oid_rt_pro_qry_pwrstate_hdl},              //0x50
+       {1, &oid_rt_pro_set_pwrstate_hdl}               //0x51
+};
+
+struct oid_obj_priv oid_rtl_seg_87_11_80[] =
+{
+       {1, &oid_null_function}                         //0x80
+};
+
+struct oid_obj_priv oid_rtl_seg_87_11_B0[] =
+{
+       {1, &oid_null_function}                         //0xB0
+};
+
+struct oid_obj_priv oid_rtl_seg_87_11_F0[] =
+{
+       {1, &oid_null_function},                        //0xF0
+       {1, &oid_null_function},                        //0xF1
+       {1, &oid_null_function},                        //0xF2
+       {1, &oid_null_function},                        //0xF3
+       {1, &oid_null_function},                        //0xF4
+       {1, &oid_null_function},                        //0xF5
+       {1, &oid_null_function},                        //0xF6
+       {1, &oid_null_function},                        //0xF7
+       {1, &oid_null_function},                        //0xF8
+       {1, &oid_null_function},                        //0xF9
+       {1, &oid_null_function},                        //0xFA
+       {1, &oid_rt_pro_h2c_set_rate_table_hdl},        //0xFB
+       {1, &oid_rt_pro_h2c_get_rate_table_hdl},        //0xFC
+       {1, &oid_null_function},                        //0xFD
+       {1, &oid_null_function},                        //0xFE  OID_RT_PRO_H2C_C2H_LBK_TEST
+       {1, &oid_null_function}                         //0xFF
+
+};
+
+struct oid_obj_priv oid_rtl_seg_87_12_00[]=
+{
+       {1, &oid_rt_pro_encryption_ctrl_hdl},           //0x00  Q&S
+       {1, &oid_rt_pro_add_sta_info_hdl},              //0x01  S
+       {1, &oid_rt_pro_dele_sta_info_hdl},             //0x02  S
+       {1, &oid_rt_pro_query_dr_variable_hdl},         //0x03  Q
+       {1, &oid_rt_pro_rx_packet_type_hdl},            //0x04  Q,S
+       {1, &oid_rt_pro_read_efuse_hdl},                //0x05  Q       OID_RT_PRO_READ_EFUSE
+       {1, &oid_rt_pro_write_efuse_hdl},               //0x06  S       OID_RT_PRO_WRITE_EFUSE
+       {1, &oid_rt_pro_rw_efuse_pgpkt_hdl},            //0x07  Q,S
+       {1, &oid_rt_get_efuse_current_size_hdl},        //0x08  Q
+       {1, &oid_rt_set_bandwidth_hdl},                 //0x09
+       {1, &oid_rt_set_crystal_cap_hdl},               //0x0a
+       {1, &oid_rt_set_rx_packet_type_hdl},            //0x0b  S
+       {1, &oid_rt_get_efuse_max_size_hdl},            //0x0c
+       {1, &oid_rt_pro_set_tx_agc_offset_hdl},         //0x0d
+       {1, &oid_rt_pro_set_pkt_test_mode_hdl},         //0x0e
+       {1, &oid_null_function},                        //0x0f          OID_RT_PRO_FOR_EVM_TEST_SETTING
+       {1, &oid_rt_get_thermal_meter_hdl},             //0x10  Q       OID_RT_PRO_GET_THERMAL_METER
+       {1, &oid_rt_reset_phy_rx_packet_count_hdl},     //0x11  S       OID_RT_RESET_PHY_RX_PACKET_COUNT
+       {1, &oid_rt_get_phy_rx_packet_received_hdl},    //0x12  Q       OID_RT_GET_PHY_RX_PACKET_RECEIVED
+       {1, &oid_rt_get_phy_rx_packet_crc32_error_hdl}, //0x13  Q       OID_RT_GET_PHY_RX_PACKET_CRC32_ERROR
+       {1, &oid_rt_set_power_down_hdl},                //0x14  Q       OID_RT_SET_POWER_DOWN
+       {1, &oid_rt_get_power_mode_hdl}                 //0x15  Q       OID_RT_GET_POWER_MODE
+};
+
+#else /* _RTL871X_MP_IOCTL_C_ */
+
+extern struct oid_obj_priv oid_rtl_seg_81_80_00[32];
+extern struct oid_obj_priv oid_rtl_seg_81_80_20[16];
+extern struct oid_obj_priv oid_rtl_seg_81_80_40[6];
+extern struct oid_obj_priv oid_rtl_seg_81_80_80[3];
+
+extern struct oid_obj_priv oid_rtl_seg_81_85[1];
+extern struct oid_obj_priv oid_rtl_seg_81_87[5];
+
+extern struct oid_obj_priv oid_rtl_seg_87_11_00[32];
+extern struct oid_obj_priv oid_rtl_seg_87_11_20[5];
+extern struct oid_obj_priv oid_rtl_seg_87_11_50[2];
+extern struct oid_obj_priv oid_rtl_seg_87_11_80[1];
+extern struct oid_obj_priv oid_rtl_seg_87_11_B0[1];
+extern struct oid_obj_priv oid_rtl_seg_87_11_F0[16];
+
+extern struct oid_obj_priv oid_rtl_seg_87_12_00[32];
+
+#endif /* _RTL871X_MP_IOCTL_C_ */
+
+struct rwreg_param{
+       u32 offset;
+       u32 width;
+       u32 value;
+};
+
+struct bbreg_param{
+       u32 offset;
+       u32 phymask;
+       u32 value;
+};
+/*
+struct rfchannel_param{
+       u32 ch;
+       u32 modem;
+};
+*/
+struct txpower_param{
+       u32 pwr_index;
+};
+
+
+struct datarate_param{
+       u32 rate_index;
+};
+
+
+struct rfintfs_parm {
+       u32 rfintfs;
+};
+
+typedef struct _mp_xmit_parm_ {
+       u8 enable;
+       u32 count;
+       u16 length;
+       u8 payload_type;
+       u8 da[ETH_ALEN];
+}MP_XMIT_PARM, *PMP_XMIT_PARM;
+
+struct mp_xmit_packet {
+       u32 len;
+       u32 mem[MAX_MP_XMITBUF_SZ >> 2];
+};
+
+struct psmode_param {
+       u32 ps_mode;
+       u32 smart_ps;
+};
+
+//for OID_RT_PRO_READ16_EEPROM & OID_RT_PRO_WRITE16_EEPROM
+struct eeprom_rw_param {
+       u32 offset;
+       u16 value;
+};
+
+struct mp_ioctl_handler {
+       u32 paramsize;
+       u32 (*handler)(struct oid_par_priv* poid_par_priv);
+       u32 oid;
+};
+
+struct mp_ioctl_param{
+       u32 subcode;
+       u32 len;
+       u8 data[0];
+};
+
+#define GEN_MP_IOCTL_SUBCODE(code) _MP_IOCTL_ ## code ## _CMD_
+
+enum RTL871X_MP_IOCTL_SUBCODE {
+       GEN_MP_IOCTL_SUBCODE(MP_START),                 /*0*/
+       GEN_MP_IOCTL_SUBCODE(MP_STOP),
+       GEN_MP_IOCTL_SUBCODE(READ_REG),
+       GEN_MP_IOCTL_SUBCODE(WRITE_REG),
+       GEN_MP_IOCTL_SUBCODE(READ_BB_REG),
+       GEN_MP_IOCTL_SUBCODE(WRITE_BB_REG),             /*5*/
+       GEN_MP_IOCTL_SUBCODE(READ_RF_REG),
+       GEN_MP_IOCTL_SUBCODE(WRITE_RF_REG),
+       GEN_MP_IOCTL_SUBCODE(SET_CHANNEL),
+       GEN_MP_IOCTL_SUBCODE(SET_TXPOWER),
+       GEN_MP_IOCTL_SUBCODE(SET_DATARATE),             /*10*/
+       GEN_MP_IOCTL_SUBCODE(SET_BANDWIDTH),
+       GEN_MP_IOCTL_SUBCODE(SET_ANTENNA),
+       GEN_MP_IOCTL_SUBCODE(CNTU_TX),
+       GEN_MP_IOCTL_SUBCODE(SC_TX),
+       GEN_MP_IOCTL_SUBCODE(CS_TX),                    /*15*/
+       GEN_MP_IOCTL_SUBCODE(ST_TX),
+       GEN_MP_IOCTL_SUBCODE(IOCTL_XMIT_PACKET),
+       GEN_MP_IOCTL_SUBCODE(SET_RX_PKT_TYPE),
+       GEN_MP_IOCTL_SUBCODE(RESET_PHY_RX_PKT_CNT),
+       GEN_MP_IOCTL_SUBCODE(GET_PHY_RX_PKT_RECV),      /*20*/
+       GEN_MP_IOCTL_SUBCODE(GET_PHY_RX_PKT_ERROR),
+       GEN_MP_IOCTL_SUBCODE(READ16_EEPROM),
+       GEN_MP_IOCTL_SUBCODE(WRITE16_EEPROM),
+       GEN_MP_IOCTL_SUBCODE(EFUSE),
+       GEN_MP_IOCTL_SUBCODE(EFUSE_MAP),                /*25*/
+       GEN_MP_IOCTL_SUBCODE(GET_EFUSE_MAX_SIZE),
+       GEN_MP_IOCTL_SUBCODE(GET_EFUSE_CURRENT_SIZE),
+       GEN_MP_IOCTL_SUBCODE(GET_THERMAL_METER),
+       GEN_MP_IOCTL_SUBCODE(SET_PTM),
+       GEN_MP_IOCTL_SUBCODE(SET_POWER_DOWN),           /*30*/
+       GEN_MP_IOCTL_SUBCODE(TRIGGER_GPIO),
+       GEN_MP_IOCTL_SUBCODE(SET_DM_BT),                /*35*/
+       GEN_MP_IOCTL_SUBCODE(DEL_BA),                   /*36*/
+       GEN_MP_IOCTL_SUBCODE(GET_WIFI_STATUS),  /*37*/
+       MAX_MP_IOCTL_SUBCODE,
+};
+
+u32 mp_ioctl_xmit_packet_hdl(struct oid_par_priv* poid_par_priv);
+
+#ifdef _RTW_MP_IOCTL_C_
+
+#define GEN_MP_IOCTL_HANDLER(sz, hdl, oid) {sz, hdl, oid},
+
+#define EXT_MP_IOCTL_HANDLER(sz, subcode, oid) {sz, mp_ioctl_ ## subcode ## _hdl, oid},
+
+
+struct mp_ioctl_handler mp_ioctl_hdl[] = {
+
+/*0*/  GEN_MP_IOCTL_HANDLER(sizeof(u32), oid_rt_pro_start_test_hdl, OID_RT_PRO_START_TEST)
+       GEN_MP_IOCTL_HANDLER(sizeof(u32), oid_rt_pro_stop_test_hdl, OID_RT_PRO_STOP_TEST)
+
+       GEN_MP_IOCTL_HANDLER(sizeof(struct rwreg_param), oid_rt_pro_read_register_hdl, OID_RT_PRO_READ_REGISTER)
+       GEN_MP_IOCTL_HANDLER(sizeof(struct rwreg_param), oid_rt_pro_write_register_hdl, OID_RT_PRO_WRITE_REGISTER)
+       GEN_MP_IOCTL_HANDLER(sizeof(struct bb_reg_param), oid_rt_pro_read_bb_reg_hdl, OID_RT_PRO_READ_BB_REG)
+/*5*/  GEN_MP_IOCTL_HANDLER(sizeof(struct bb_reg_param), oid_rt_pro_write_bb_reg_hdl, OID_RT_PRO_WRITE_BB_REG)
+       GEN_MP_IOCTL_HANDLER(sizeof(struct rf_reg_param), oid_rt_pro_read_rf_reg_hdl, OID_RT_PRO_RF_READ_REGISTRY)
+       GEN_MP_IOCTL_HANDLER(sizeof(struct rf_reg_param), oid_rt_pro_write_rf_reg_hdl, OID_RT_PRO_RF_WRITE_REGISTRY)
+
+       GEN_MP_IOCTL_HANDLER(sizeof(u32), oid_rt_pro_set_channel_direct_call_hdl, OID_RT_PRO_SET_CHANNEL_DIRECT_CALL)
+       GEN_MP_IOCTL_HANDLER(sizeof(struct txpower_param), oid_rt_pro_set_tx_power_control_hdl, OID_RT_PRO_SET_TX_POWER_CONTROL)
+/*10*/ GEN_MP_IOCTL_HANDLER(sizeof(u32), oid_rt_pro_set_data_rate_hdl, OID_RT_PRO_SET_DATA_RATE)
+       GEN_MP_IOCTL_HANDLER(sizeof(u32), oid_rt_set_bandwidth_hdl, OID_RT_SET_BANDWIDTH)
+       GEN_MP_IOCTL_HANDLER(sizeof(u32), oid_rt_pro_set_antenna_bb_hdl, OID_RT_PRO_SET_ANTENNA_BB)
+
+       GEN_MP_IOCTL_HANDLER(sizeof(u32), oid_rt_pro_set_continuous_tx_hdl, OID_RT_PRO_SET_CONTINUOUS_TX)
+       GEN_MP_IOCTL_HANDLER(sizeof(u32), oid_rt_pro_set_single_carrier_tx_hdl, OID_RT_PRO_SET_SINGLE_CARRIER_TX)
+/*15*/ GEN_MP_IOCTL_HANDLER(sizeof(u32), oid_rt_pro_set_carrier_suppression_tx_hdl, OID_RT_PRO_SET_CARRIER_SUPPRESSION_TX)
+       GEN_MP_IOCTL_HANDLER(sizeof(u32), oid_rt_pro_set_single_tone_tx_hdl, OID_RT_PRO_SET_SINGLE_TONE_TX)
+
+       EXT_MP_IOCTL_HANDLER(0, xmit_packet, 0)
+
+       GEN_MP_IOCTL_HANDLER(sizeof(u32), oid_rt_set_rx_packet_type_hdl, OID_RT_SET_RX_PACKET_TYPE)
+       GEN_MP_IOCTL_HANDLER(0, oid_rt_reset_phy_rx_packet_count_hdl, OID_RT_RESET_PHY_RX_PACKET_COUNT)
+/*20*/ GEN_MP_IOCTL_HANDLER(sizeof(u32), oid_rt_get_phy_rx_packet_received_hdl, OID_RT_GET_PHY_RX_PACKET_RECEIVED)
+       GEN_MP_IOCTL_HANDLER(sizeof(u32), oid_rt_get_phy_rx_packet_crc32_error_hdl, OID_RT_GET_PHY_RX_PACKET_CRC32_ERROR)
+
+       GEN_MP_IOCTL_HANDLER(sizeof(struct eeprom_rw_param), NULL, 0)
+       GEN_MP_IOCTL_HANDLER(sizeof(struct eeprom_rw_param), NULL, 0)
+       GEN_MP_IOCTL_HANDLER(sizeof(EFUSE_ACCESS_STRUCT), oid_rt_pro_efuse_hdl, OID_RT_PRO_EFUSE)
+/*25*/ GEN_MP_IOCTL_HANDLER(0, oid_rt_pro_efuse_map_hdl, OID_RT_PRO_EFUSE_MAP)
+       GEN_MP_IOCTL_HANDLER(sizeof(u32), oid_rt_get_efuse_max_size_hdl, OID_RT_GET_EFUSE_MAX_SIZE)
+       GEN_MP_IOCTL_HANDLER(sizeof(u32), oid_rt_get_efuse_current_size_hdl, OID_RT_GET_EFUSE_CURRENT_SIZE)
+
+       GEN_MP_IOCTL_HANDLER(sizeof(u32), oid_rt_get_thermal_meter_hdl, OID_RT_PRO_GET_THERMAL_METER)
+       GEN_MP_IOCTL_HANDLER(sizeof(u8), oid_rt_pro_set_power_tracking_hdl, OID_RT_PRO_SET_POWER_TRACKING)
+/*30*/ GEN_MP_IOCTL_HANDLER(sizeof(u8), oid_rt_set_power_down_hdl, OID_RT_SET_POWER_DOWN)
+/*31*/ GEN_MP_IOCTL_HANDLER(0, oid_rt_pro_trigger_gpio_hdl, 0)
+
+
+};
+
+#else /* _RTW_MP_IOCTL_C_ */
+
+extern struct mp_ioctl_handler mp_ioctl_hdl[];
+
+#endif /* _RTW_MP_IOCTL_C_ */
+
+#endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtw_mp_phy_regdef.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtw_mp_phy_regdef.h
new file mode 100644 (file)
index 0000000..24e6624
--- /dev/null
@@ -0,0 +1,1096 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+/*****************************************************************************
+ *
+ * Module:     __RTW_MP_PHY_REGDEF_H_
+ *
+ *
+ * Note:       1. Define PMAC/BB register map
+ *                     2. Define RF register map
+ *                     3. PMAC/BB register bit mask.
+ *                     4. RF reg bit mask.
+ *                     5. Other BB/RF relative definition.
+ *
+ *
+ * Export:     Constants, macro, functions(API), global variables(None).
+ *
+ * Abbrev:
+ *
+ * History:
+ *     Data                    Who             Remark
+ *     08/07/2007      MHC             1. Porting from 9x series PHYCFG.h.
+ *                                             2. Reorganize code architecture.
+ *     09/25/2008      MH              1. Add RL6052 register definition
+ *
+ *****************************************************************************/
+#ifndef __RTW_MP_PHY_REGDEF_H_
+#define __RTW_MP_PHY_REGDEF_H_
+
+
+/*--------------------------Define Parameters-------------------------------*/
+
+//============================================================
+//       8192S Regsiter offset definition
+//============================================================
+
+//
+// BB-PHY register PMAC 0x100 PHY 0x800 - 0xEFF
+// 1. PMAC duplicate register due to connection: RF_Mode, TRxRN, NumOf L-STF
+// 2. 0x800/0x900/0xA00/0xC00/0xD00/0xE00
+// 3. RF register 0x00-2E
+// 4. Bit Mask for BB/RF register
+// 5. Other defintion for BB/RF R/W
+//
+
+
+//
+// 1. PMAC duplicate register due to connection: RF_Mode, TRxRN, NumOf L-STF
+// 1. Page1(0x100)
+//
+#define                rPMAC_Reset                                     0x100
+#define                rPMAC_TxStart                                   0x104
+#define                rPMAC_TxLegacySIG                               0x108
+#define                rPMAC_TxHTSIG1                          0x10c
+#define                rPMAC_TxHTSIG2                          0x110
+#define                rPMAC_PHYDebug                          0x114
+#define                rPMAC_TxPacketNum                               0x118
+#define                rPMAC_TxIdle                                    0x11c
+#define                rPMAC_TxMACHeader0                      0x120
+#define                rPMAC_TxMACHeader1                      0x124
+#define                rPMAC_TxMACHeader2                      0x128
+#define                rPMAC_TxMACHeader3                      0x12c
+#define                rPMAC_TxMACHeader4                      0x130
+#define                rPMAC_TxMACHeader5                      0x134
+#define                rPMAC_TxDataType                                0x138
+#define                rPMAC_TxRandomSeed                      0x13c
+#define                rPMAC_CCKPLCPPreamble                   0x140
+#define                rPMAC_CCKPLCPHeader                     0x144
+#define                rPMAC_CCKCRC16                          0x148
+#define                rPMAC_OFDMRxCRC32OK                     0x170
+#define                rPMAC_OFDMRxCRC32Er                     0x174
+#define                rPMAC_OFDMRxParityEr                    0x178
+#define                rPMAC_OFDMRxCRC8Er                      0x17c
+#define                rPMAC_CCKCRxRC16Er                      0x180
+#define                rPMAC_CCKCRxRC32Er                      0x184
+#define                rPMAC_CCKCRxRC32OK                      0x188
+#define                rPMAC_TxStatus                                  0x18c
+
+//
+// 2. Page2(0x200)
+//
+// The following two definition are only used for USB interface.
+//#define              RF_BB_CMD_ADDR                          0x02c0  // RF/BB read/write command address.
+//#define              RF_BB_CMD_DATA                          0x02c4  // RF/BB read/write command data.
+
+//
+// 3. Page8(0x800)
+//
+#define                rFPGA0_RFMOD                            0x800   //RF mode & CCK TxSC // RF BW Setting??
+
+#define                rFPGA0_TxInfo                           0x804   // Status report??
+#define                rFPGA0_PSDFunction                      0x808
+
+#define                rFPGA0_TxGainStage                      0x80c   // Set TX PWR init gain?
+
+#define                rFPGA0_RFTiming1                        0x810   // Useless now
+#define                rFPGA0_RFTiming2                        0x814
+//#define rFPGA0_XC_RFTiming                   0x818
+//#define rFPGA0_XD_RFTiming                   0x81c
+
+#define                rFPGA0_XA_HSSIParameter1                0x820   // RF 3 wire register
+#define                rFPGA0_XA_HSSIParameter2                0x824
+#define                rFPGA0_XB_HSSIParameter1                0x828
+#define                rFPGA0_XB_HSSIParameter2                0x82c
+#define                rFPGA0_XC_HSSIParameter1                0x830
+#define                rFPGA0_XC_HSSIParameter2                0x834
+#define                rFPGA0_XD_HSSIParameter1                0x838
+#define                rFPGA0_XD_HSSIParameter2                0x83c
+#define                rFPGA0_XA_LSSIParameter         0x840
+#define                rFPGA0_XB_LSSIParameter         0x844
+#define                rFPGA0_XC_LSSIParameter         0x848
+#define                rFPGA0_XD_LSSIParameter         0x84c
+
+#define                rFPGA0_RFWakeUpParameter                0x850   // Useless now
+#define                rFPGA0_RFSleepUpParameter               0x854
+
+#define                rFPGA0_XAB_SwitchControl                0x858   // RF Channel switch
+#define                rFPGA0_XCD_SwitchControl                0x85c
+
+#define                rFPGA0_XA_RFInterfaceOE         0x860   // RF Channel switch
+#define                rFPGA0_XB_RFInterfaceOE         0x864
+#define                rFPGA0_XC_RFInterfaceOE         0x868
+#define                rFPGA0_XD_RFInterfaceOE         0x86c
+
+#define                rFPGA0_XAB_RFInterfaceSW                0x870   // RF Interface Software Control
+#define                rFPGA0_XCD_RFInterfaceSW                0x874
+
+#define                rFPGA0_XAB_RFParameter          0x878   // RF Parameter
+#define                rFPGA0_XCD_RFParameter          0x87c
+
+#define                rFPGA0_AnalogParameter1         0x880   // Crystal cap setting RF-R/W protection for parameter4??
+#define                rFPGA0_AnalogParameter2         0x884
+#define                rFPGA0_AnalogParameter3         0x888   // Useless now
+#define                rFPGA0_AnalogParameter4         0x88c
+
+#define                rFPGA0_XA_LSSIReadBack          0x8a0   // Tranceiver LSSI Readback
+#define                rFPGA0_XB_LSSIReadBack          0x8a4
+#define                rFPGA0_XC_LSSIReadBack          0x8a8
+#define                rFPGA0_XD_LSSIReadBack          0x8ac
+
+#define                rFPGA0_PSDReport                                0x8b4   // Useless now
+#define                rFPGA0_XAB_RFInterfaceRB                0x8e0   // Useless now // RF Interface Readback Value
+#define                rFPGA0_XCD_RFInterfaceRB                0x8e4   // Useless now
+
+//
+// 4. Page9(0x900)
+//
+#define                rFPGA1_RFMOD                            0x900   //RF mode & OFDM TxSC // RF BW Setting??
+
+#define                rFPGA1_TxBlock                          0x904   // Useless now
+#define                rFPGA1_DebugSelect                      0x908   // Useless now
+#define                rFPGA1_TxInfo                           0x90c   // Useless now // Status report??
+
+//
+// 5. PageA(0xA00)
+//
+// Set Control channel to upper or lower. These settings are required only for 40MHz
+#define                rCCK0_System                            0xa00
+
+#define                rCCK0_AFESetting                        0xa04   // Disable init gain now // Select RX path by RSSI
+#define                rCCK0_CCA                                       0xa08   // Disable init gain now // Init gain
+
+#define                rCCK0_RxAGC1                            0xa0c   //AGC default value, saturation level // Antenna Diversity, RX AGC, LNA Threshold, RX LNA Threshold useless now. Not the same as 90 series
+#define                rCCK0_RxAGC2                            0xa10   //AGC & DAGC
+
+#define                rCCK0_RxHP                                      0xa14
+
+#define                rCCK0_DSPParameter1             0xa18   //Timing recovery & Channel estimation threshold
+#define                rCCK0_DSPParameter2             0xa1c   //SQ threshold
+
+#define                rCCK0_TxFilter1                         0xa20
+#define                rCCK0_TxFilter2                         0xa24
+#define                rCCK0_DebugPort                 0xa28   //debug port and Tx filter3
+#define                rCCK0_FalseAlarmReport          0xa2c   //0xa2d useless now 0xa30-a4f channel report
+#define                rCCK0_TRSSIReport                       0xa50
+#define                rCCK0_RxReport                          0xa54  //0xa57
+#define                rCCK0_FACounterLower            0xa5c  //0xa5b
+#define                rCCK0_FACounterUpper            0xa58  //0xa5c
+
+//
+// 6. PageC(0xC00)
+//
+#define                rOFDM0_LSTF                             0xc00
+
+#define                rOFDM0_TRxPathEnable            0xc04
+#define                rOFDM0_TRMuxPar                 0xc08
+#define                rOFDM0_TRSWIsolation            0xc0c
+
+#define                rOFDM0_XARxAFE                  0xc10  //RxIQ DC offset, Rx digital filter, DC notch filter
+#define                rOFDM0_XARxIQImbalance          0xc14  //RxIQ imblance matrix
+#define                rOFDM0_XBRxAFE                          0xc18
+#define                rOFDM0_XBRxIQImbalance          0xc1c
+#define                rOFDM0_XCRxAFE                          0xc20
+#define                rOFDM0_XCRxIQImbalance          0xc24
+#define                rOFDM0_XDRxAFE                          0xc28
+#define                rOFDM0_XDRxIQImbalance          0xc2c
+
+#define                rOFDM0_RxDetector1                      0xc30  //PD,BW & SBD    // DM tune init gain
+#define                rOFDM0_RxDetector2                      0xc34  //SBD & Fame Sync.
+#define                rOFDM0_RxDetector3                      0xc38  //Frame Sync.
+#define                rOFDM0_RxDetector4                      0xc3c  //PD, SBD, Frame Sync & Short-GI
+
+#define                rOFDM0_RxDSP                            0xc40  //Rx Sync Path
+#define                rOFDM0_CFOandDAGC               0xc44  //CFO & DAGC
+#define                rOFDM0_CCADropThreshold 0xc48 //CCA Drop threshold
+#define                rOFDM0_ECCAThreshold            0xc4c // energy CCA
+
+#define                rOFDM0_XAAGCCore1                       0xc50   // DIG
+#define                rOFDM0_XAAGCCore2                       0xc54
+#define                rOFDM0_XBAGCCore1                       0xc58
+#define                rOFDM0_XBAGCCore2                       0xc5c
+#define                rOFDM0_XCAGCCore1                       0xc60
+#define                rOFDM0_XCAGCCore2                       0xc64
+#define                rOFDM0_XDAGCCore1                       0xc68
+#define                rOFDM0_XDAGCCore2                       0xc6c
+
+#define                rOFDM0_AGCParameter1                    0xc70
+#define                rOFDM0_AGCParameter2                    0xc74
+#define                rOFDM0_AGCRSSITable                     0xc78
+#define                rOFDM0_HTSTFAGC                         0xc7c
+
+#define                rOFDM0_XATxIQImbalance          0xc80   // TX PWR TRACK and DIG
+#define                rOFDM0_XATxAFE                          0xc84
+#define                rOFDM0_XBTxIQImbalance          0xc88
+#define                rOFDM0_XBTxAFE                          0xc8c
+#define                rOFDM0_XCTxIQImbalance          0xc90
+#define                rOFDM0_XCTxAFE                                  0xc94
+#define                rOFDM0_XDTxIQImbalance          0xc98
+#define                rOFDM0_XDTxAFE                          0xc9c
+#define                rOFDM0_RxIQExtAnta                      0xca0
+
+#define                rOFDM0_RxHPParameter                    0xce0
+#define                rOFDM0_TxPseudoNoiseWgt         0xce4
+#define                rOFDM0_FrameSync                                0xcf0
+#define                rOFDM0_DFSReport                                0xcf4
+#define                rOFDM0_TxCoeff1                         0xca4
+#define                rOFDM0_TxCoeff2                         0xca8
+#define                rOFDM0_TxCoeff3                         0xcac
+#define                rOFDM0_TxCoeff4                         0xcb0
+#define                rOFDM0_TxCoeff5                         0xcb4
+#define                rOFDM0_TxCoeff6                         0xcb8
+
+
+//
+// 7. PageD(0xD00)
+//
+#define                rOFDM1_LSTF                                     0xd00
+#define                rOFDM1_TRxPathEnable                    0xd04
+
+#define                rOFDM1_CFO                                              0xd08   // No setting now
+#define                rOFDM1_CSI1                                     0xd10
+#define                rOFDM1_SBD                                              0xd14
+#define                rOFDM1_CSI2                                     0xd18
+#define                rOFDM1_CFOTracking                      0xd2c
+#define                rOFDM1_TRxMesaure1                      0xd34
+#define                rOFDM1_IntfDet                                  0xd3c
+#define                rOFDM1_PseudoNoiseStateAB               0xd50
+#define                rOFDM1_PseudoNoiseStateCD               0xd54
+#define                rOFDM1_RxPseudoNoiseWgt         0xd58
+
+#define                rOFDM_PHYCounter1                               0xda0  //cca, parity fail
+#define                rOFDM_PHYCounter2                               0xda4  //rate illegal, crc8 fail
+#define                rOFDM_PHYCounter3                               0xda8  //MCS not support
+
+#define                rOFDM_ShortCFOAB                                0xdac   // No setting now
+#define                rOFDM_ShortCFOCD                                0xdb0
+#define                rOFDM_LongCFOAB                         0xdb4
+#define                rOFDM_LongCFOCD                         0xdb8
+#define                rOFDM_TailCFOAB                         0xdbc
+#define                rOFDM_TailCFOCD                         0xdc0
+#define                rOFDM_PWMeasure1                        0xdc4
+#define                rOFDM_PWMeasure2                        0xdc8
+#define                rOFDM_BWReport                          0xdcc
+#define                rOFDM_AGCReport                         0xdd0
+#define                rOFDM_RxSNR                                     0xdd4
+#define                rOFDM_RxEVMCSI                          0xdd8
+#define                rOFDM_SIGReport                         0xddc
+
+
+//
+// 8. PageE(0xE00)
+//
+#define                rTxAGC_Rate18_06                                0xe00
+#define                rTxAGC_Rate54_24                                0xe04
+#define                rTxAGC_CCK_Mcs32                                0xe08
+#define                rTxAGC_Mcs03_Mcs00                      0xe10
+#define                rTxAGC_Mcs07_Mcs04                      0xe14
+#define                rTxAGC_Mcs11_Mcs08                      0xe18
+#define                rTxAGC_Mcs15_Mcs12                      0xe1c
+
+// Analog- control in RX_WAIT_CCA : REG: EE0 [Analog- Power & Control Register]
+#define                rRx_Wait_CCCA                                   0xe70
+#define                rAnapar_Ctrl_BB                                 0xee0
+
+//
+// 7. RF Register 0x00-0x2E (RF 8256)
+//    RF-0222D 0x00-3F
+//
+//Zebra1
+#define RTL92SE_FPGA_VERIFY 0
+#define                rZebra1_HSSIEnable                              0x0     // Useless now
+#define                rZebra1_TRxEnable1                              0x1
+#define                rZebra1_TRxEnable2                              0x2
+#define                rZebra1_AGC                                     0x4
+#define                rZebra1_ChargePump                      0x5
+//#if (RTL92SE_FPGA_VERIFY == 1)
+#define                rZebra1_Channel                         0x7     // RF channel switch
+//#else
+
+//#endif
+#define                rZebra1_TxGain                                  0x8     // Useless now
+#define                rZebra1_TxLPF                                   0x9
+#define                rZebra1_RxLPF                                   0xb
+#define                rZebra1_RxHPFCorner                     0xc
+
+//Zebra4
+#define                rGlobalCtrl                                             0       // Useless now
+#define                rRTL8256_TxLPF                                  19
+#define                rRTL8256_RxLPF                                  11
+
+//RTL8258
+#define                rRTL8258_TxLPF                                  0x11    // Useless now
+#define                rRTL8258_RxLPF                                  0x13
+#define                rRTL8258_RSSILPF                                0xa
+
+//
+// RL6052 Register definition
+//
+#define                RF_AC                                           0x00    //
+
+#define                RF_IQADJ_G1                             0x01    //
+#define                RF_IQADJ_G2                             0x02    //
+#define                RF_POW_TRSW                             0x05    //
+
+#define                RF_GAIN_RX                                      0x06    //
+#define                RF_GAIN_TX                                      0x07    //
+
+#define                RF_TXM_IDAC                             0x08    //
+#define                RF_BS_IQGEN                             0x0F    //
+
+#define                RF_MODE1                                        0x10    //
+#define                RF_MODE2                                        0x11    //
+
+#define                RF_RX_AGC_HP                            0x12    //
+#define                RF_TX_AGC                                       0x13    //
+#define                RF_BIAS                                         0x14    //
+#define                RF_IPA                                          0x15    //
+#define                RF_POW_ABILITY                  0x17    //
+#define                RF_MODE_AG                              0x18    //
+#define                rRfChannel                                      0x18    // RF channel and BW switch
+#define                RF_CHNLBW                                       0x18    // RF channel and BW switch
+#define                RF_TOP                                          0x19    //
+
+#define                RF_RX_G1                                        0x1A    //
+#define                RF_RX_G2                                        0x1B    //
+
+#define                RF_RX_BB2                                       0x1C    //
+#define                RF_RX_BB1                                       0x1D    //
+
+#define                RF_RCK1                                 0x1E    //
+#define                RF_RCK2                                 0x1F    //
+
+#define                RF_TX_G1                                        0x20    //
+#define                RF_TX_G2                                        0x21    //
+#define                RF_TX_G3                                        0x22    //
+
+#define                RF_TX_BB1                                       0x23    //
+
+#define                RF_T_METER                                      0x24    //
+
+#define                RF_SYN_G1                                       0x25    // RF TX Power control
+#define                RF_SYN_G2                                       0x26    // RF TX Power control
+#define                RF_SYN_G3                                       0x27    // RF TX Power control
+#define                RF_SYN_G4                                       0x28    // RF TX Power control
+#define                RF_SYN_G5                                       0x29    // RF TX Power control
+#define                RF_SYN_G6                                       0x2A    // RF TX Power control
+#define                RF_SYN_G7                                       0x2B    // RF TX Power control
+#define                RF_SYN_G8                                       0x2C    // RF TX Power control
+
+#define                RF_RCK_OS                                       0x30    // RF TX PA control
+
+#define                RF_TXPA_G1                                      0x31    // RF TX PA control
+#define                RF_TXPA_G2                                      0x32    // RF TX PA control
+#define                RF_TXPA_G3                                      0x33    // RF TX PA control
+
+//
+//Bit Mask
+//
+// 1. Page1(0x100)
+#define                bBBResetB                                               0x100   // Useless now?
+#define                bGlobalResetB                                   0x200
+#define                bOFDMTxStart                                    0x4
+#define                bCCKTxStart                                             0x8
+#define                bCRC32Debug                                     0x100
+#define                bPMACLoopback                                   0x10
+#define                bTxLSIG                                                 0xffffff
+#define                bOFDMTxRate                                     0xf
+#define                bOFDMTxReserved                         0x10
+#define                bOFDMTxLength                                   0x1ffe0
+#define                bOFDMTxParity                                   0x20000
+#define                bTxHTSIG1                                               0xffffff
+#define                bTxHTMCSRate                                    0x7f
+#define                bTxHTBW                                         0x80
+#define                bTxHTLength                                     0xffff00
+#define                bTxHTSIG2                                               0xffffff
+#define                bTxHTSmoothing                                  0x1
+#define                bTxHTSounding                                   0x2
+#define                bTxHTReserved                                   0x4
+#define                bTxHTAggreation                         0x8
+#define                bTxHTSTBC                                               0x30
+#define                bTxHTAdvanceCoding                      0x40
+#define                bTxHTShortGI                                    0x80
+#define                bTxHTNumberHT_LTF                       0x300
+#define                bTxHTCRC8                                               0x3fc00
+#define                bCounterReset                                   0x10000
+#define                bNumOfOFDMTx                                    0xffff
+#define                bNumOfCCKTx                                     0xffff0000
+#define                bTxIdleInterval                                 0xffff
+#define                bOFDMService                                    0xffff0000
+#define                bTxMACHeader                                    0xffffffff
+#define                bTxDataInit                                             0xff
+#define                bTxHTMode                                               0x100
+#define                bTxDataType                                     0x30000
+#define                bTxRandomSeed                                   0xffffffff
+#define                bCCKTxPreamble                                  0x1
+#define                bCCKTxSFD                                               0xffff0000
+#define                bCCKTxSIG                                               0xff
+#define                bCCKTxService                                   0xff00
+#define                bCCKLengthExt                                   0x8000
+#define                bCCKTxLength                                    0xffff0000
+#define                bCCKTxCRC16                                     0xffff
+#define                bCCKTxStatus                                    0x1
+#define                bOFDMTxStatus                                   0x2
+
+#define                IS_BB_REG_OFFSET_92S(_Offset)           ((_Offset >= 0x800) && (_Offset <= 0xfff))
+
+// 2. Page8(0x800)
+#define                bRFMOD                                                  0x1     // Reg 0x800 rFPGA0_RFMOD
+#define                bJapanMode                                              0x2
+#define                bCCKTxSC                                                0x30
+#define                bCCKEn                                                  0x1000000
+#define                bOFDMEn                                         0x2000000
+
+#define                bOFDMRxADCPhase                         0x10000 // Useless now
+#define                bOFDMTxDACPhase                         0x40000
+#define                bXATxAGC                                        0x3f
+
+#define                bXBTxAGC                                        0xf00   // Reg 80c rFPGA0_TxGainStage
+#define                bXCTxAGC                                        0xf000
+#define                bXDTxAGC                                        0xf0000
+
+#define                bPAStart                                        0xf0000000      // Useless now
+#define                bTRStart                                        0x00f00000
+#define                bRFStart                                        0x0000f000
+#define                bBBStart                                        0x000000f0
+#define                bBBCCKStart                             0x0000000f
+#define                bPAEnd                                          0xf          //Reg0x814
+#define                bTREnd                                          0x0f000000
+#define                bRFEnd                                          0x000f0000
+#define                bCCAMask                                        0x000000f0   //T2R
+#define                bR2RCCAMask                             0x00000f00
+#define                bHSSI_R2TDelay                          0xf8000000
+#define                bHSSI_T2RDelay                          0xf80000
+#define                bContTxHSSI                             0x400     //chane gain at continue Tx
+#define                bIGFromCCK                              0x200
+#define                bAGCAddress                             0x3f
+#define                bRxHPTx                                         0x7000
+#define                bRxHPT2R                                        0x38000
+#define                bRxHPCCKIni                             0xc0000
+#define                bAGCTxCode                              0xc00000
+#define                bAGCRxCode                              0x300000
+
+#define                b3WireDataLength                        0x800   // Reg 0x820~84f rFPGA0_XA_HSSIParameter1
+#define                b3WireAddressLength                     0x400
+
+#define                b3WireRFPowerDown                       0x1     // Useless now
+//#define bHWSISelect                          0x8
+#define                b5GPAPEPolarity                         0x40000000
+#define                b2GPAPEPolarity                         0x80000000
+#define                bRFSW_TxDefaultAnt                      0x3
+#define                bRFSW_TxOptionAnt                       0x30
+#define                bRFSW_RxDefaultAnt                      0x300
+#define                bRFSW_RxOptionAnt                       0x3000
+#define                bRFSI_3WireData                         0x1
+#define                bRFSI_3WireClock                        0x2
+#define                bRFSI_3WireLoad                         0x4
+#define                bRFSI_3WireRW                           0x8
+#define                bRFSI_3Wire                                     0xf
+
+#define                bRFSI_RFENV                             0x10    // Reg 0x870 rFPGA0_XAB_RFInterfaceSW
+
+#define                bRFSI_TRSW                              0x20    // Useless now
+#define                bRFSI_TRSWB                             0x40
+#define                bRFSI_ANTSW                             0x100
+#define                bRFSI_ANTSWB                            0x200
+#define                bRFSI_PAPE                                      0x400
+#define                bRFSI_PAPE5G                            0x800
+#define                bBandSelect                                     0x1
+#define                bHTSIG2_GI                                      0x80
+#define                bHTSIG2_Smoothing                       0x01
+#define                bHTSIG2_Sounding                        0x02
+#define                bHTSIG2_Aggreaton                       0x08
+#define                bHTSIG2_STBC                            0x30
+#define                bHTSIG2_AdvCoding                       0x40
+#define                bHTSIG2_NumOfHTLTF              0x300
+#define                bHTSIG2_CRC8                            0x3fc
+#define                bHTSIG1_MCS                             0x7f
+#define                bHTSIG1_BandWidth                       0x80
+#define                bHTSIG1_HTLength                        0xffff
+#define                bLSIG_Rate                                      0xf
+#define                bLSIG_Reserved                          0x10
+#define                bLSIG_Length                            0x1fffe
+#define                bLSIG_Parity                                    0x20
+#define                bCCKRxPhase                             0x4
+#if (RTL92SE_FPGA_VERIFY == 1)
+#define                bLSSIReadAddress                        0x3f000000   //LSSI "Read" Address      // Reg 0x824 rFPGA0_XA_HSSIParameter2
+#else
+#define                bLSSIReadAddress                        0x7f800000   // T65 RF
+#endif
+#define                bLSSIReadEdge                           0x80000000   //LSSI "Read" edge signal
+#if (RTL92SE_FPGA_VERIFY == 1)
+#define                bLSSIReadBackData                       0xfff           // Reg 0x8a0 rFPGA0_XA_LSSIReadBack
+#else
+#define                bLSSIReadBackData                       0xfffff         // T65 RF
+#endif
+#define                bLSSIReadOKFlag                         0x1000  // Useless now
+#define                bCCKSampleRate                          0x8       //0: 44MHz, 1:88MHz
+#define                bRegulator0Standby                      0x1
+#define                bRegulatorPLLStandby                    0x2
+#define                bRegulator1Standby                      0x4
+#define                bPLLPowerUp                             0x8
+#define                bDPLLPowerUp                            0x10
+#define                bDA10PowerUp                            0x20
+#define                bAD7PowerUp                             0x200
+#define                bDA6PowerUp                             0x2000
+#define                bXtalPowerUp                            0x4000
+#define                b40MDClkPowerUP                         0x8000
+#define                bDA6DebugMode                           0x20000
+#define                bDA6Swing                                       0x380000
+
+#define                bADClkPhase                             0x4000000       // Reg 0x880 rFPGA0_AnalogParameter1 20/40 CCK support switch 40/80 BB MHZ
+
+#define                b80MClkDelay                            0x18000000      // Useless
+#define                bAFEWatchDogEnable                      0x20000000
+
+#define                bXtalCap01                                      0xc0000000      // Reg 0x884 rFPGA0_AnalogParameter2 Crystal cap
+#define                bXtalCap23                                      0x3
+#define                bXtalCap92x                                     0x0f000000
+#define                bXtalCap                                        0x0f000000
+
+#define                bIntDifClkEnable                        0x400   // Useless
+#define                bExtSigClkEnable                        0x800
+#define                bBandgapMbiasPowerUp            0x10000
+#define                bAD11SHGain                             0xc0000
+#define                bAD11InputRange                         0x700000
+#define                bAD11OPCurrent                          0x3800000
+#define                bIPathLoopback                          0x4000000
+#define                bQPathLoopback                          0x8000000
+#define                bAFELoopback                            0x10000000
+#define                bDA10Swing                              0x7e0
+#define                bDA10Reverse                            0x800
+#define                bDAClkSource                            0x1000
+#define                bAD7InputRange                          0x6000
+#define                bAD7Gain                                        0x38000
+#define                bAD7OutputCMMode                        0x40000
+#define                bAD7InputCMMode                         0x380000
+#define                bAD7Current                                     0xc00000
+#define                bRegulatorAdjust                        0x7000000
+#define                bAD11PowerUpAtTx                        0x1
+#define                bDA10PSAtTx                             0x10
+#define                bAD11PowerUpAtRx                        0x100
+#define                bDA10PSAtRx                             0x1000
+#define                bCCKRxAGCFormat                         0x200
+#define                bPSDFFTSamplepPoint                     0xc000
+#define                bPSDAverageNum                          0x3000
+#define                bIQPathControl                          0xc00
+#define                bPSDFreq                                        0x3ff
+#define                bPSDAntennaPath                         0x30
+#define                bPSDIQSwitch                            0x40
+#define                bPSDRxTrigger                           0x400000
+#define                bPSDTxTrigger                           0x80000000
+#define                bPSDSineToneScale                       0x7f000000
+#define                bPSDReport                                      0xffff
+
+// 3. Page9(0x900)
+#define                bOFDMTxSC                               0x30000000      // Useless
+#define                bCCKTxOn                                        0x1
+#define                bOFDMTxOn                               0x2
+#define                bDebugPage                              0xfff  //reset debug page and also HWord, LWord
+#define                bDebugItem                              0xff   //reset debug page and LWord
+#define                bAntL                                   0x10
+#define                bAntNonHT                                       0x100
+#define                bAntHT1                                 0x1000
+#define                bAntHT2                                         0x10000
+#define                bAntHT1S1                                       0x100000
+#define                bAntNonHTS1                             0x1000000
+
+// 4. PageA(0xA00)
+#define                bCCKBBMode                              0x3     // Useless
+#define                bCCKTxPowerSaving                       0x80
+#define                bCCKRxPowerSaving                       0x40
+
+#define                bCCKSideBand                            0x10    // Reg 0xa00 rCCK0_System 20/40 switch
+
+#define                bCCKScramble                            0x8     // Useless
+#define                bCCKAntDiversity                        0x8000
+#define                bCCKCarrierRecovery             0x4000
+#define                bCCKTxRate                              0x3000
+#define                bCCKDCCancel                            0x0800
+#define                bCCKISICancel                           0x0400
+#define                bCCKMatchFilter                         0x0200
+#define                bCCKEqualizer                           0x0100
+#define                bCCKPreambleDetect                      0x800000
+#define                bCCKFastFalseCCA                        0x400000
+#define                bCCKChEstStart                          0x300000
+#define                bCCKCCACount                            0x080000
+#define                bCCKcs_lim                                      0x070000
+#define                bCCKBistMode                            0x80000000
+#define                bCCKCCAMask                             0x40000000
+#define                bCCKTxDACPhase                  0x4
+#define                bCCKRxADCPhase                  0x20000000   //r_rx_clk
+#define                bCCKr_cp_mode0                  0x0100
+#define                bCCKTxDCOffset                          0xf0
+#define                bCCKRxDCOffset                          0xf
+#define                bCCKCCAMode                             0xc000
+#define                bCCKFalseCS_lim                         0x3f00
+#define                bCCKCS_ratio                            0xc00000
+#define                bCCKCorgBit_sel                         0x300000
+#define                bCCKPD_lim                                      0x0f0000
+#define                bCCKNewCCA                              0x80000000
+#define                bCCKRxHPofIG                            0x8000
+#define                bCCKRxIG                                        0x7f00
+#define                bCCKLNAPolarity                         0x800000
+#define                bCCKRx1stGain                           0x7f0000
+#define                bCCKRFExtend                            0x20000000 //CCK Rx Iinital gain polarity
+#define                bCCKRxAGCSatLevel                       0x1f000000
+#define                bCCKRxAGCSatCount                       0xe0
+#define                bCCKRxRFSettle                          0x1f       //AGCsamp_dly
+#define                bCCKFixedRxAGC                          0x8000
+//#define bCCKRxAGCFormat                      0x4000   //remove to HSSI register 0x824
+#define                bCCKAntennaPolarity                     0x2000
+#define                bCCKTxFilterType                        0x0c00
+#define                bCCKRxAGCReportType             0x0300
+#define                bCCKRxDAGCEn                            0x80000000
+#define                bCCKRxDAGCPeriod                        0x20000000
+#define                bCCKRxDAGCSatLevel              0x1f000000
+#define                bCCKTimingRecovery                      0x800000
+#define                bCCKTxC0                                        0x3f0000
+#define                bCCKTxC1                                        0x3f000000
+#define                bCCKTxC2                                        0x3f
+#define                bCCKTxC3                                        0x3f00
+#define                bCCKTxC4                                        0x3f0000
+#define                bCCKTxC5                                        0x3f000000
+#define                bCCKTxC6                                        0x3f
+#define                bCCKTxC7                                        0x3f00
+#define                bCCKDebugPort                           0xff0000
+#define                bCCKDACDebug                            0x0f000000
+#define                bCCKFalseAlarmEnable                    0x8000
+#define                bCCKFalseAlarmRead                      0x4000
+#define                bCCKTRSSI                                       0x7f
+#define                bCCKRxAGCReport                         0xfe
+#define                bCCKRxReport_AntSel                     0x80000000
+#define                bCCKRxReport_MFOff                      0x40000000
+#define                bCCKRxRxReport_SQLoss           0x20000000
+#define                bCCKRxReport_Pktloss                    0x10000000
+#define                bCCKRxReport_Lockedbit          0x08000000
+#define                bCCKRxReport_RateError          0x04000000
+#define                bCCKRxReport_RxRate                     0x03000000
+#define                bCCKRxFACounterLower            0xff
+#define                bCCKRxFACounterUpper            0xff000000
+#define                bCCKRxHPAGCStart                        0xe000
+#define                bCCKRxHPAGCFinal                        0x1c00
+#define                bCCKRxFalseAlarmEnable          0x8000
+#define                bCCKFACounterFreeze                     0x4000
+#define                bCCKTxPathSel                           0x10000000
+#define                bCCKDefaultRxPath                       0xc000000
+#define                bCCKOptionRxPath                        0x3000000
+
+// 5. PageC(0xC00)
+#define                bNumOfSTF                                       0x3     // Useless
+#define                bShift_L                                        0xc0
+#define                bGI_TH                                          0xc
+#define                bRxPathA                                        0x1
+#define                bRxPathB                                        0x2
+#define                bRxPathC                                        0x4
+#define                bRxPathD                                        0x8
+#define                bTxPathA                                        0x1
+#define                bTxPathB                                        0x2
+#define                bTxPathC                                        0x4
+#define                bTxPathD                                        0x8
+#define                bTRSSIFreq                                      0x200
+#define                bADCBackoff                                     0x3000
+#define                bDFIRBackoff                                    0xc000
+#define                bTRSSILatchPhase                        0x10000
+#define                bRxIDCOffset                                    0xff
+#define                bRxQDCOffset                                    0xff00
+#define                bRxDFIRMode                             0x1800000
+#define                bRxDCNFType                             0xe000000
+#define                bRXIQImb_A                                      0x3ff
+#define                bRXIQImb_B                                      0xfc00
+#define                bRXIQImb_C                                      0x3f0000
+#define                bRXIQImb_D                                      0xffc00000
+#define                bDC_dc_Notch                            0x60000
+#define                bRxNBINotch                                     0x1f000000
+#define                bPD_TH                                          0xf
+#define                bPD_TH_Opt2                             0xc000
+#define                bPWED_TH                                        0x700
+#define                bIfMF_Win_L                                     0x800
+#define                bPD_Option                                      0x1000
+#define                bMF_Win_L                                       0xe000
+#define                bBW_Search_L                            0x30000
+#define                bwin_enh_L                                      0xc0000
+#define                bBW_TH                                          0x700000
+#define                bED_TH2                                         0x3800000
+#define                bBW_option                                      0x4000000
+#define                bRatio_TH                                       0x18000000
+#define                bWindow_L                                       0xe0000000
+#define                bSBD_Option                                     0x1
+#define                bFrame_TH                                       0x1c
+#define                bFS_Option                                      0x60
+#define                bDC_Slope_check                         0x80
+#define                bFGuard_Counter_DC_L                    0xe00
+#define                bFrame_Weight_Short                     0x7000
+#define                bSub_Tune                                       0xe00000
+#define                bFrame_DC_Length                        0xe000000
+#define                bSBD_start_offset                       0x30000000
+#define                bFrame_TH_2                             0x7
+#define                bFrame_GI2_TH                           0x38
+#define                bGI2_Sync_en                            0x40
+#define                bSarch_Short_Early                      0x300
+#define                bSarch_Short_Late                       0xc00
+#define                bSarch_GI2_Late                         0x70000
+#define                bCFOAntSum                              0x1
+#define                bCFOAcc                                         0x2
+#define                bCFOStartOffset                         0xc
+#define                bCFOLookBack                            0x70
+#define                bCFOSumWeight                           0x80
+#define                bDAGCEnable                                     0x10000
+#define                bTXIQImb_A                                      0x3ff
+#define                bTXIQImb_B                                      0xfc00
+#define                bTXIQImb_C                                      0x3f0000
+#define                bTXIQImb_D                                      0xffc00000
+#define                bTxIDCOffset                                    0xff
+#define                bTxQDCOffset                                    0xff00
+#define                bTxDFIRMode                             0x10000
+#define                bTxPesudoNoiseOn                        0x4000000
+#define                bTxPesudoNoise_A                        0xff
+#define                bTxPesudoNoise_B                        0xff00
+#define                bTxPesudoNoise_C                        0xff0000
+#define                bTxPesudoNoise_D                        0xff000000
+#define                bCCADropOption                          0x20000
+#define                bCCADropThres                           0xfff00000
+#define                bEDCCA_H                                        0xf
+#define                bEDCCA_L                                        0xf0
+#define                bLambda_ED               0x300
+#define                bRxInitialGain           0x7f
+#define                bRxAntDivEn              0x80
+#define                bRxAGCAddressForLNA      0x7f00
+#define                bRxHighPowerFlow         0x8000
+#define                bRxAGCFreezeThres        0xc0000
+#define                bRxFreezeStep_AGC1       0x300000
+#define                bRxFreezeStep_AGC2       0xc00000
+#define                bRxFreezeStep_AGC3       0x3000000
+#define                bRxFreezeStep_AGC0       0xc000000
+#define                bRxRssi_Cmp_En           0x10000000
+#define                bRxQuickAGCEn            0x20000000
+#define                bRxAGCFreezeThresMode    0x40000000
+#define                bRxOverFlowCheckType     0x80000000
+#define                bRxAGCShift              0x7f
+#define                bTRSW_Tri_Only           0x80
+#define                bPowerThres              0x300
+#define                bRxAGCEn                 0x1
+#define                bRxAGCTogetherEn         0x2
+#define                bRxAGCMin                0x4
+#define                bRxHP_Ini                0x7
+#define                bRxHP_TRLNA              0x70
+#define                bRxHP_RSSI               0x700
+#define                bRxHP_BBP1               0x7000
+#define                bRxHP_BBP2               0x70000
+#define                bRxHP_BBP3               0x700000
+#define                bRSSI_H                  0x7f0000     //the threshold for high power
+#define                bRSSI_Gen                0x7f000000   //the threshold for ant diversity
+#define                bRxSettle_TRSW           0x7
+#define                bRxSettle_LNA            0x38
+#define                bRxSettle_RSSI           0x1c0
+#define                bRxSettle_BBP            0xe00
+#define                bRxSettle_RxHP           0x7000
+#define                bRxSettle_AntSW_RSSI     0x38000
+#define                bRxSettle_AntSW          0xc0000
+#define                bRxProcessTime_DAGC      0x300000
+#define                bRxSettle_HSSI           0x400000
+#define                bRxProcessTime_BBPPW     0x800000
+#define                bRxAntennaPowerShift     0x3000000
+#define                bRSSITableSelect         0xc000000
+#define                bRxHP_Final              0x7000000
+#define                bRxHTSettle_BBP          0x7
+#define                bRxHTSettle_HSSI         0x8
+#define                bRxHTSettle_RxHP         0x70
+#define                bRxHTSettle_BBPPW        0x80
+#define                bRxHTSettle_Idle         0x300
+#define                bRxHTSettle_Reserved     0x1c00
+#define                bRxHTRxHPEn              0x8000
+#define                bRxHTAGCFreezeThres      0x30000
+#define                bRxHTAGCTogetherEn       0x40000
+#define                bRxHTAGCMin              0x80000
+#define                bRxHTAGCEn               0x100000
+#define                bRxHTDAGCEn              0x200000
+#define                bRxHTRxHP_BBP            0x1c00000
+#define                bRxHTRxHP_Final          0xe0000000
+#define                bRxPWRatioTH             0x3
+#define                bRxPWRatioEn             0x4
+#define                bRxMFHold                0x3800
+#define                bRxPD_Delay_TH1          0x38
+#define                bRxPD_Delay_TH2          0x1c0
+#define                bRxPD_DC_COUNT_MAX       0x600
+//#define bRxMF_Hold               0x3800
+#define                bRxPD_Delay_TH           0x8000
+#define                bRxProcess_Delay         0xf0000
+#define                bRxSearchrange_GI2_Early 0x700000
+#define                bRxFrame_Guard_Counter_L 0x3800000
+#define                bRxSGI_Guard_L           0xc000000
+#define                bRxSGI_Search_L          0x30000000
+#define                bRxSGI_TH                0xc0000000
+#define                bDFSCnt0                 0xff
+#define                bDFSCnt1                 0xff00
+#define                bDFSFlag                 0xf0000
+#define                bMFWeightSum             0x300000
+#define                bMinIdxTH                0x7f000000
+#define                bDAFormat                0x40000
+#define                bTxChEmuEnable           0x01000000
+#define                bTRSWIsolation_A         0x7f
+#define                bTRSWIsolation_B         0x7f00
+#define                bTRSWIsolation_C         0x7f0000
+#define                bTRSWIsolation_D         0x7f000000
+#define                bExtLNAGain              0x7c00
+
+// 6. PageE(0xE00)
+#define                bSTBCEn                  0x4    // Useless
+#define                bAntennaMapping          0x10
+#define                bNss                     0x20
+#define                bCFOAntSumD              0x200
+#define                bPHYCounterReset         0x8000000
+#define                bCFOReportGet            0x4000000
+#define                bOFDMContinueTx          0x10000000
+#define                bOFDMSingleCarrier       0x20000000
+#define                bOFDMSingleTone          0x40000000
+//#define bRxPath1                 0x01
+//#define bRxPath2                 0x02
+//#define bRxPath3                 0x04
+//#define bRxPath4                 0x08
+//#define bTxPath1                 0x10
+//#define bTxPath2                 0x20
+#define                bHTDetect                0x100
+#define                bCFOEn                   0x10000
+#define                bCFOValue                0xfff00000
+#define                bSigTone_Re              0x3f
+#define                bSigTone_Im              0x7f00
+#define                bCounter_CCA             0xffff
+#define                bCounter_ParityFail      0xffff0000
+#define                bCounter_RateIllegal     0xffff
+#define                bCounter_CRC8Fail        0xffff0000
+#define                bCounter_MCSNoSupport    0xffff
+#define                bCounter_FastSync        0xffff
+#define                bShortCFO                0xfff
+#define                bShortCFOTLength         12   //total
+#define                bShortCFOFLength         11   //fraction
+#define                bLongCFO                 0x7ff
+#define                bLongCFOTLength          11
+#define                bLongCFOFLength          11
+#define                bTailCFO                 0x1fff
+#define                bTailCFOTLength          13
+#define                bTailCFOFLength          12
+#define                bmax_en_pwdB             0xffff
+#define                bCC_power_dB             0xffff0000
+#define                bnoise_pwdB              0xffff
+#define                bPowerMeasTLength        10
+#define                bPowerMeasFLength        3
+#define                bRx_HT_BW                0x1
+#define                bRxSC                    0x6
+#define                bRx_HT                   0x8
+#define                bNB_intf_det_on          0x1
+#define                bIntf_win_len_cfg        0x30
+#define                bNB_Intf_TH_cfg          0x1c0
+#define                bRFGain                  0x3f
+#define                bTableSel                0x40
+#define                bTRSW                    0x80
+#define                bRxSNR_A                 0xff
+#define                bRxSNR_B                 0xff00
+#define                bRxSNR_C                 0xff0000
+#define                bRxSNR_D                 0xff000000
+#define                bSNREVMTLength           8
+#define                bSNREVMFLength           1
+#define                bCSI1st                  0xff
+#define                bCSI2nd                  0xff00
+#define                bRxEVM1st                0xff0000
+#define                bRxEVM2nd                0xff000000
+#define                bSIGEVM                  0xff
+#define                bPWDB                    0xff00
+#define                bSGIEN                   0x10000
+
+#define                bSFactorQAM1             0xf    // Useless
+#define                bSFactorQAM2             0xf0
+#define                bSFactorQAM3             0xf00
+#define                bSFactorQAM4             0xf000
+#define                bSFactorQAM5             0xf0000
+#define                bSFactorQAM6             0xf0000
+#define                bSFactorQAM7             0xf00000
+#define                bSFactorQAM8             0xf000000
+#define                bSFactorQAM9             0xf0000000
+#define                bCSIScheme               0x100000
+
+#define                bNoiseLvlTopSet          0x3    // Useless
+#define                bChSmooth                0x4
+#define                bChSmoothCfg1            0x38
+#define                bChSmoothCfg2            0x1c0
+#define                bChSmoothCfg3            0xe00
+#define                bChSmoothCfg4            0x7000
+#define                bMRCMode                 0x800000
+#define                bTHEVMCfg                0x7000000
+
+#define                bLoopFitType             0x1    // Useless
+#define                bUpdCFO                  0x40
+#define                bUpdCFOOffData           0x80
+#define                bAdvUpdCFO               0x100
+#define                bAdvTimeCtrl             0x800
+#define                bUpdClko                 0x1000
+#define                bFC                      0x6000
+#define                bTrackingMode            0x8000
+#define                bPhCmpEnable             0x10000
+#define                bUpdClkoLTF              0x20000
+#define                bComChCFO                0x40000
+#define                bCSIEstiMode             0x80000
+#define                bAdvUpdEqz               0x100000
+#define                bUChCfg                  0x7000000
+#define                bUpdEqz                  0x8000000
+
+#define                bTxAGCRate18_06                 0x7f7f7f7f      // Useless
+#define                bTxAGCRate54_24                 0x7f7f7f7f
+#define                bTxAGCRateMCS32                 0x7f
+#define                bTxAGCRateCCK                   0x7f00
+#define                bTxAGCRateMCS3_MCS0             0x7f7f7f7f
+#define                bTxAGCRateMCS7_MCS4             0x7f7f7f7f
+#define                bTxAGCRateMCS11_MCS8    0x7f7f7f7f
+#define                bTxAGCRateMCS15_MCS12   0x7f7f7f7f
+
+//Rx Pseduo noise
+#define                bRxPesudoNoiseOn         0x20000000     // Useless
+#define                bRxPesudoNoise_A         0xff
+#define                bRxPesudoNoise_B         0xff00
+#define                bRxPesudoNoise_C         0xff0000
+#define                bRxPesudoNoise_D         0xff000000
+#define                bPesudoNoiseState_A      0xffff
+#define                bPesudoNoiseState_B      0xffff0000
+#define                bPesudoNoiseState_C      0xffff
+#define                bPesudoNoiseState_D      0xffff0000
+
+//7. RF Register
+//Zebra1
+#define                bZebra1_HSSIEnable        0x8           // Useless
+#define                bZebra1_TRxControl        0xc00
+#define                bZebra1_TRxGainSetting    0x07f
+#define                bZebra1_RxCorner          0xc00
+#define                bZebra1_TxChargePump      0x38
+#define                bZebra1_RxChargePump      0x7
+#define                bZebra1_ChannelNum        0xf80
+#define                bZebra1_TxLPFBW           0x400
+#define                bZebra1_RxLPFBW           0x600
+
+//Zebra4
+#define                bRTL8256RegModeCtrl1      0x100 // Useless
+#define                bRTL8256RegModeCtrl0      0x40
+#define                bRTL8256_TxLPFBW          0x18
+#define                bRTL8256_RxLPFBW          0x600
+
+//RTL8258
+#define                bRTL8258_TxLPFBW          0xc   // Useless
+#define                bRTL8258_RxLPFBW          0xc00
+#define                bRTL8258_RSSILPFBW        0xc0
+
+
+//
+// Other Definition
+//
+
+//byte endable for sb_write
+#define                bByte0                    0x1   // Useless
+#define                bByte1                    0x2
+#define                bByte2                    0x4
+#define                bByte3                    0x8
+#define                bWord0                    0x3
+#define                bWord1                    0xc
+#define                bDWord                    0xf
+
+//for PutRegsetting & GetRegSetting BitMask
+#define                bMaskByte0              0xff    // Reg 0xc50 rOFDM0_XAAGCCore~0xC6f
+#define                bMaskByte1              0xff00
+#define                bMaskByte2              0xff0000
+#define                bMaskByte3              0xff000000
+#define                bMaskHWord              0xffff0000
+#define                bMaskLWord              0x0000ffff
+#define                bMaskDWord              0xffffffff
+#define                bMaskH4Bits             0xf0000000
+#define        bMaskOFDM_D             0xffc00000
+#define                bMaskCCK                0x3f3f3f3f
+#define                bMask12Bits             0xfff
+
+//for PutRFRegsetting & GetRFRegSetting BitMask
+#if (RTL92SE_FPGA_VERIFY == 1)
+//#define              bMask12Bits               0xfff // RF Reg mask bits
+//#define              bMask20Bits               0xfff // RF Reg mask bits T65 RF
+#define                bRFRegOffsetMask        0xfff
+#else
+//#define              bMask12Bits               0xfffff       // RF Reg mask bits
+//#define              bMask20Bits               0xfffff       // RF Reg mask bits T65 RF
+#define                bRFRegOffsetMask        0xfffff
+#endif
+#define                bEnable                   0x1   // Useless
+#define                bDisable                  0x0
+
+#define                LeftAntenna               0x0   // Useless
+#define                RightAntenna              0x1
+
+#define                tCheckTxStatus            500   //500ms // Useless
+#define                tUpdateRxCounter          100   //100ms
+
+#define                rateCCK     0   // Useless
+#define                rateOFDM    1
+#define                rateHT      2
+
+//define Register-End
+#define                bPMAC_End                 0x1ff // Useless
+#define                bFPGAPHY0_End             0x8ff
+#define                bFPGAPHY1_End             0x9ff
+#define                bCCKPHY0_End              0xaff
+#define                bOFDMPHY0_End             0xcff
+#define                bOFDMPHY1_End             0xdff
+
+//define max debug item in each debug page
+//#define bMaxItem_FPGA_PHY0        0x9
+//#define bMaxItem_FPGA_PHY1        0x3
+//#define bMaxItem_PHY_11B          0x16
+//#define bMaxItem_OFDM_PHY0        0x29
+//#define bMaxItem_OFDM_PHY1        0x0
+
+#define                bPMACControl    0x0             // Useless
+#define                bWMACControl    0x1
+#define                bWNICControl    0x2
+
+#if 0
+#define                ANTENNA_A       0x1     // Useless
+#define                ANTENNA_B       0x2
+#define                ANTENNA_AB      0x3     // ANTENNA_A|ANTENNA_B
+
+#define                ANTENNA_C       0x4
+#define                ANTENNA_D       0x8
+#endif
+
+#define RCR_AAP                        BIT(0)                          // accept all physical address
+#define RCR_APM                        BIT(1)                          // accept physical match
+#define RCR_AM                 BIT(2)                          // accept multicast
+#define RCR_AB                 BIT(3)                          // accept broadcast
+#define RCR_ACRC32             BIT(5)                          // accept error packet
+#define RCR_9356SEL            BIT(6)
+#define RCR_AICV               BIT(12)                         // Accept ICV error packet
+#define RCR_RXFTH0             (BIT(13)|BIT(14)|BIT(15))       // Rx FIFO threshold
+#define RCR_ADF                        BIT(18)                         // Accept Data(frame type) frame
+#define RCR_ACF                        BIT(19)                         // Accept control frame
+#define RCR_AMF                        BIT(20)                         // Accept management frame
+#define RCR_ADD3               BIT(21)
+#define RCR_APWRMGT            BIT(22)                         // Accept power management packet
+#define RCR_CBSSID             BIT(23)                         // Accept BSSID match packet
+#define RCR_ENMARP             BIT(28)                         // enable mac auto reset phy
+#define RCR_EnCS1              BIT(29)                         // enable carrier sense method 1
+#define RCR_EnCS2              BIT(30)                         // enable carrier sense method 2
+#define RCR_OnlyErlPkt         BIT(31)                         // Rx Early mode is performed for packet size greater than 1536
+
+/*--------------------------Define Parameters-------------------------------*/
+
+
+#endif //__INC_HAL8192SPHYREG_H
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtw_p2p.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtw_p2p.h
new file mode 100644 (file)
index 0000000..b230faf
--- /dev/null
@@ -0,0 +1,160 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __RTW_P2P_H_
+#define __RTW_P2P_H_
+
+#include <drv_types.h>
+
+u32 build_beacon_p2p_ie(struct wifidirect_info *pwdinfo, u8 *pbuf);
+u32 build_probe_resp_p2p_ie(struct wifidirect_info *pwdinfo, u8 *pbuf);
+u32 build_prov_disc_request_p2p_ie(struct wifidirect_info *pwdinfo, u8 *pbuf, u8* pssid, u8 ussidlen, u8* pdev_raddr );
+u32 build_assoc_resp_p2p_ie(struct wifidirect_info *pwdinfo, u8 *pbuf, u8 status_code);
+u32 build_deauth_p2p_ie(struct wifidirect_info *pwdinfo, u8 *pbuf);
+#ifdef CONFIG_WFD
+u32 build_probe_req_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf);
+u32 build_probe_resp_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf, u8 tunneled);
+u32 build_beacon_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf);
+u32 build_nego_req_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf);
+u32 build_nego_resp_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf);
+u32 build_nego_confirm_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf);
+u32 build_invitation_req_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf);
+u32 build_invitation_resp_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf);
+u32 build_assoc_req_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf);
+u32 build_assoc_resp_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf);
+u32 build_provdisc_req_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf);
+u32 build_provdisc_resp_wfd_ie(struct wifidirect_info *pwdinfo, u8 *pbuf);
+#endif //CONFIG_WFD
+
+u32 process_probe_req_p2p_ie(struct wifidirect_info *pwdinfo, u8 *pframe, uint len);
+u32 process_assoc_req_p2p_ie(struct wifidirect_info *pwdinfo, u8 *pframe, uint len, struct sta_info *psta);
+u32 process_p2p_devdisc_req(struct wifidirect_info *pwdinfo, u8 *pframe, uint len);
+u32 process_p2p_devdisc_resp(struct wifidirect_info *pwdinfo, u8 *pframe, uint len);
+u8 process_p2p_provdisc_req(struct wifidirect_info *pwdinfo,  u8 *pframe, uint len);
+u8 process_p2p_provdisc_resp(struct wifidirect_info *pwdinfo,  u8 *pframe);
+u8 process_p2p_group_negotation_req( struct wifidirect_info *pwdinfo, u8 *pframe, uint len );
+u8 process_p2p_group_negotation_resp( struct wifidirect_info *pwdinfo, u8 *pframe, uint len );
+u8 process_p2p_group_negotation_confirm( struct wifidirect_info *pwdinfo, u8 *pframe, uint len );
+u8 process_p2p_presence_req(struct wifidirect_info *pwdinfo, u8 *pframe, uint len);
+
+void p2p_protocol_wk_hdl(_adapter *padapter, int intCmdType);
+
+#ifdef CONFIG_P2P_PS
+void   process_p2p_ps_ie(PADAPTER padapter, u8 *IEs, u32 IELength);
+void   p2p_ps_wk_hdl(_adapter *padapter, u8 p2p_ps_state);
+u8     p2p_ps_wk_cmd(_adapter*padapter, u8 p2p_ps_state, u8 enqueue);
+#endif // CONFIG_P2P_PS
+
+#ifdef CONFIG_IOCTL_CFG80211
+void rtw_init_cfg80211_wifidirect_info( _adapter*      padapter);
+int rtw_p2p_check_frames(_adapter *padapter, const u8 *buf, u32 len, u8 tx);
+void rtw_append_wfd_ie(_adapter *padapter, u8 *buf, u32 *len);
+#endif //CONFIG_IOCTL_CFG80211
+
+void reset_global_wifidirect_info( _adapter* padapter );
+int rtw_init_wifi_display_info(_adapter* padapter);
+void rtw_init_wifidirect_timers(_adapter* padapter);
+void rtw_init_wifidirect_addrs(_adapter* padapter, u8 *dev_addr, u8 *iface_addr);
+void init_wifidirect_info( _adapter* padapter, enum P2P_ROLE role);
+int rtw_p2p_enable(_adapter *padapter, enum P2P_ROLE role);
+
+static inline void _rtw_p2p_set_state(struct wifidirect_info *wdinfo, enum P2P_STATE state)
+{
+       if(wdinfo->p2p_state != state) {
+               //wdinfo->pre_p2p_state = wdinfo->p2p_state;
+               wdinfo->p2p_state = state;
+       }
+}
+static inline void _rtw_p2p_set_pre_state(struct wifidirect_info *wdinfo, enum P2P_STATE state)
+{
+       if(wdinfo->pre_p2p_state != state) {
+               wdinfo->pre_p2p_state = state;
+       }
+}
+#if 0
+static inline void _rtw_p2p_restore_state(struct wifidirect_info *wdinfo)
+{
+       if(wdinfo->pre_p2p_state != -1) {
+               wdinfo->p2p_state = wdinfo->pre_p2p_state;
+               wdinfo->pre_p2p_state = -1;
+       }
+}
+#endif
+static inline void _rtw_p2p_set_role(struct wifidirect_info *wdinfo, enum P2P_ROLE role)
+{
+       if(wdinfo->role != role) {
+               wdinfo->role = role;
+       }
+}
+static inline int _rtw_p2p_state(struct wifidirect_info *wdinfo)
+{
+       return wdinfo->p2p_state;
+}
+static inline int _rtw_p2p_pre_state(struct wifidirect_info *wdinfo)
+{
+       return wdinfo->pre_p2p_state;
+}
+static inline int _rtw_p2p_role(struct wifidirect_info *wdinfo)
+{
+       return wdinfo->role;
+}
+static inline bool _rtw_p2p_chk_state(struct wifidirect_info *wdinfo, enum P2P_STATE state)
+{
+       return wdinfo->p2p_state == state;
+}
+static inline bool _rtw_p2p_chk_role(struct wifidirect_info *wdinfo, enum P2P_ROLE role)
+{
+       return wdinfo->role == role;
+}
+
+#ifdef CONFIG_DBG_P2P
+void dbg_rtw_p2p_set_state(struct wifidirect_info *wdinfo, enum P2P_STATE state, const char *caller, int line);
+void dbg_rtw_p2p_set_pre_state(struct wifidirect_info *wdinfo, enum P2P_STATE state, const char *caller, int line);
+//void dbg_rtw_p2p_restore_state(struct wifidirect_info *wdinfo, const char *caller, int line);
+void dbg_rtw_p2p_set_role(struct wifidirect_info *wdinfo, enum P2P_ROLE role, const char *caller, int line);
+#define rtw_p2p_set_state(wdinfo, state) dbg_rtw_p2p_set_state(wdinfo, state, __FUNCTION__, __LINE__)
+#define rtw_p2p_set_pre_state(wdinfo, state) dbg_rtw_p2p_set_pre_state(wdinfo, state, __FUNCTION__, __LINE__)
+#define rtw_p2p_set_role(wdinfo, role) dbg_rtw_p2p_set_role(wdinfo, role, __FUNCTION__, __LINE__)
+//#define rtw_p2p_restore_state(wdinfo) dbg_rtw_p2p_restore_state(wdinfo, __FUNCTION__, __LINE__)
+#else //CONFIG_DBG_P2P
+#define rtw_p2p_set_state(wdinfo, state) _rtw_p2p_set_state(wdinfo, state)
+#define rtw_p2p_set_pre_state(wdinfo, state) _rtw_p2p_set_pre_state(wdinfo, state)
+#define rtw_p2p_set_role(wdinfo, role) _rtw_p2p_set_role(wdinfo, role)
+//#define rtw_p2p_restore_state(wdinfo) _rtw_p2p_restore_state(wdinfo)
+#endif //CONFIG_DBG_P2P
+
+#define rtw_p2p_state(wdinfo) _rtw_p2p_state(wdinfo)
+#define rtw_p2p_pre_state(wdinfo) _rtw_p2p_pre_state(wdinfo)
+#define rtw_p2p_role(wdinfo) _rtw_p2p_role(wdinfo)
+#define rtw_p2p_chk_state(wdinfo, state) _rtw_p2p_chk_state(wdinfo, state)
+#define rtw_p2p_chk_role(wdinfo, role) _rtw_p2p_chk_role(wdinfo, role)
+
+#define rtw_p2p_findphase_ex_set(wdinfo, value) \
+       (wdinfo)->find_phase_state_exchange_cnt = (value)
+
+//is this find phase exchange for social channel scan?
+#define rtw_p2p_findphase_ex_is_social(wdinfo)   \
+       (wdinfo)->find_phase_state_exchange_cnt >= P2P_FINDPHASE_EX_SOCIAL_FIRST
+
+//should we need find phase exchange anymore?
+#define rtw_p2p_findphase_ex_is_needed(wdinfo) \
+       ((wdinfo)->find_phase_state_exchange_cnt < P2P_FINDPHASE_EX_MAX && \
+       (wdinfo)->find_phase_state_exchange_cnt != P2P_FINDPHASE_EX_NONE)
+
+#endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtw_pwrctrl.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtw_pwrctrl.h
new file mode 100644 (file)
index 0000000..a867da2
--- /dev/null
@@ -0,0 +1,362 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __RTW_PWRCTRL_H_
+#define __RTW_PWRCTRL_H_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+
+#ifdef CONFIG_HAS_EARLYSUSPEND
+#include <linux/earlysuspend.h>
+#endif //CONFIG_HAS_EARLYSUSPEND
+
+
+#define FW_PWR0        0
+#define FW_PWR1        1
+#define FW_PWR2        2
+#define FW_PWR3        3
+
+
+#define HW_PWR0        7
+#define HW_PWR1        6
+#define HW_PWR2        2
+#define HW_PWR3        0
+#define HW_PWR4        8
+
+#define FW_PWRMSK      0x7
+
+
+#define XMIT_ALIVE     BIT(0)
+#define RECV_ALIVE     BIT(1)
+#define CMD_ALIVE      BIT(2)
+#define EVT_ALIVE      BIT(3)
+
+
+enum Power_Mgnt
+{
+       PS_MODE_ACTIVE  = 0     ,
+       PS_MODE_MIN                     ,
+       PS_MODE_MAX                     ,
+       PS_MODE_DTIM                    ,
+       PS_MODE_VOIP                    ,
+       PS_MODE_UAPSD_WMM       ,
+       PS_MODE_UAPSD                   ,
+       PS_MODE_IBSS                    ,
+       PS_MODE_WWLAN           ,
+       PM_Radio_Off                    ,
+       PM_Card_Disable         ,
+       PS_MODE_NUM
+};
+
+
+/*
+       BIT[2:0] = HW state
+       BIT[3] = Protocol PS state,   0: register active state , 1: register sleep state
+       BIT[4] = sub-state
+*/
+
+#define PS_DPS                         BIT(0)
+#define PS_LCLK                                (PS_DPS)
+#define PS_RF_OFF                      BIT(1)
+#define PS_ALL_ON                      BIT(2)
+#define PS_ST_ACTIVE           BIT(3)
+
+#define PS_ISR_ENABLE          BIT(4)
+#define PS_IMR_ENABLE          BIT(5)
+#define PS_ACK                         BIT(6)
+#define PS_TOGGLE                      BIT(7)
+
+#define PS_STATE_MASK          (0x0F)
+#define PS_STATE_HW_MASK       (0x07)
+#define PS_SEQ_MASK                    (0xc0)
+
+#define PS_STATE(x)            (PS_STATE_MASK & (x))
+#define PS_STATE_HW(x) (PS_STATE_HW_MASK & (x))
+#define PS_SEQ(x)              (PS_SEQ_MASK & (x))
+
+#define PS_STATE_S0            (PS_DPS)
+#define PS_STATE_S1            (PS_LCLK)
+#define PS_STATE_S2            (PS_RF_OFF)
+#define PS_STATE_S3            (PS_ALL_ON)
+#define PS_STATE_S4            ((PS_ST_ACTIVE) | (PS_ALL_ON))
+
+
+#define PS_IS_RF_ON(x) ((x) & (PS_ALL_ON))
+#define PS_IS_ACTIVE(x)        ((x) & (PS_ST_ACTIVE))
+#define CLR_PS_STATE(x)        ((x) = ((x) & (0xF0)))
+
+
+struct reportpwrstate_parm {
+       unsigned char mode;
+       unsigned char state; //the CPWM value
+       unsigned short rsvd;
+};
+
+
+typedef _sema _pwrlock;
+
+
+__inline static void _init_pwrlock(_pwrlock *plock)
+{
+       _rtw_init_sema(plock, 1);
+}
+
+__inline static void _free_pwrlock(_pwrlock *plock)
+{
+       _rtw_free_sema(plock);
+}
+
+
+__inline static void _enter_pwrlock(_pwrlock *plock)
+{
+       _rtw_down_sema(plock);
+}
+
+
+__inline static void _exit_pwrlock(_pwrlock *plock)
+{
+       _rtw_up_sema(plock);
+}
+
+#define LPS_DELAY_TIME 1*HZ // 1 sec
+
+#define EXE_PWR_NONE   0x01
+#define EXE_PWR_IPS            0x02
+#define EXE_PWR_LPS            0x04
+
+// RF state.
+typedef enum _rt_rf_power_state
+{
+       rf_on,          // RF is on after RFSleep or RFOff
+       rf_sleep,       // 802.11 Power Save mode
+       rf_off,         // HW/SW Radio OFF or Inactive Power Save
+       //=====Add the new RF state above this line=====//
+       rf_max
+}rt_rf_power_state;
+
+// RF Off Level for IPS or HW/SW radio off
+#define        RT_RF_OFF_LEVL_ASPM                     BIT(0)  // PCI ASPM
+#define        RT_RF_OFF_LEVL_CLK_REQ          BIT(1)  // PCI clock request
+#define        RT_RF_OFF_LEVL_PCI_D3                   BIT(2)  // PCI D3 mode
+#define        RT_RF_OFF_LEVL_HALT_NIC         BIT(3)  // NIC halt, re-initialize hw parameters
+#define        RT_RF_OFF_LEVL_FREE_FW          BIT(4)  // FW free, re-download the FW
+#define        RT_RF_OFF_LEVL_FW_32K           BIT(5)  // FW in 32k
+#define        RT_RF_PS_LEVEL_ALWAYS_ASPM      BIT(6)  // Always enable ASPM and Clock Req in initialization.
+#define        RT_RF_LPS_DISALBE_2R                    BIT(30) // When LPS is on, disable 2R if no packet is received or transmittd.
+#define        RT_RF_LPS_LEVEL_ASPM                    BIT(31) // LPS with ASPM
+
+#define        RT_IN_PS_LEVEL(ppsc, _PS_FLAG)          ((ppsc->cur_ps_level & _PS_FLAG) ? _TRUE : _FALSE)
+#define        RT_CLEAR_PS_LEVEL(ppsc, _PS_FLAG)       (ppsc->cur_ps_level &= (~(_PS_FLAG)))
+#define        RT_SET_PS_LEVEL(ppsc, _PS_FLAG)         (ppsc->cur_ps_level |= _PS_FLAG)
+
+
+enum _PS_BBRegBackup_ {
+       PSBBREG_RF0 = 0,
+       PSBBREG_RF1,
+       PSBBREG_RF2,
+       PSBBREG_AFE0,
+       PSBBREG_TOTALCNT
+};
+
+enum { // for ips_mode
+       IPS_NONE=0,
+       IPS_NORMAL,
+       IPS_LEVEL_2,
+};
+
+struct pwrctrl_priv
+{
+       _pwrlock        lock;
+       volatile u8 rpwm; // requested power state for fw
+       volatile u8 cpwm; // fw current power state. updated when 1. read from HCPWM 2. driver lowers power level
+       volatile u8 tog; // toggling
+       volatile u8 cpwm_tog; // toggling
+       u8      pwr_mode;
+       u8      smart_ps;
+       u32 alives;
+
+       u8      b_hw_radio_off;
+       u8      reg_rfoff;
+       u8      reg_pdnmode; //powerdown mode
+       u32     rfoff_reason;
+
+       //RF OFF Level
+       u32     cur_ps_level;
+       u32     reg_rfps_level;
+
+
+
+#ifdef CONFIG_PCI_HCI
+       //just for PCIE ASPM
+       u8      b_support_aspm; // If it supports ASPM, Offset[560h] = 0x40, otherwise Offset[560h] = 0x00.
+       u8      b_support_backdoor;
+
+       //just for PCIE ASPM
+       u8      const_amdpci_aspm;
+#endif
+
+       uint    ips_enter_cnts;
+       uint    ips_leave_cnts;
+
+       u8      ips_mode;
+       u8      ips_mode_req; // used to accept the mode setting request, will update to ipsmode later
+       uint bips_processing;
+       u32 ips_deny_time; /* will deny IPS when system time is smaller than this */
+       u8 ps_processing; /* temporarily used to mark whether in rtw_ps_processor */
+
+       u8      bLeisurePs;
+       u8      LpsIdleCount;
+       u8      power_mgnt;
+       u8      bFwCurrentInPSMode;
+       u32     DelayLPSLastTimeStamp;
+
+       s32             pnp_current_pwr_state;
+       u8              pnp_bstop_trx;
+
+
+       u8              bInternalAutoSuspend;
+       u8              bInSuspend;
+       u8              bSupportRemoteWakeup;
+#ifdef CONFIG_WOWLAN
+       u8              wowlan_mode;
+       u8              wowlan_pattern;
+       u8              wowlan_magic;
+       u8              wowlan_unicast;
+       u8              wowlan_pattern_idx;
+       u32             wowlan_pattern_context[8][5];
+#endif // CONFIG_WOWLAN
+       _timer  pwr_state_check_timer;
+       int             pwr_state_check_interval;
+       u8              pwr_state_check_cnts;
+
+       int             ps_flag;
+
+       rt_rf_power_state       rf_pwrstate;//cur power state
+       //rt_rf_power_state     current_rfpwrstate;
+       rt_rf_power_state       change_rfpwrstate;
+
+       u8              bHWPowerdown;//if support hw power down
+       u8              bHWPwrPindetect;
+       u8              bkeepfwalive;
+       u8              brfoffbyhw;
+       unsigned long PS_BBRegBackup[PSBBREG_TOTALCNT];
+
+       #ifdef CONFIG_RESUME_IN_WORKQUEUE
+       struct workqueue_struct *rtw_workqueue;
+       _workitem resume_work;
+       #endif
+
+       #ifdef CONFIG_HAS_EARLYSUSPEND
+       struct early_suspend early_suspend;
+       u8 do_late_resume;
+       #endif //CONFIG_HAS_EARLYSUSPEND
+
+       #ifdef CONFIG_ANDROID_POWER
+       android_early_suspend_t early_suspend;
+       u8 do_late_resume;
+       #endif
+
+};
+
+#define rtw_get_ips_mode_req(pwrctrlpriv) \
+       (pwrctrlpriv)->ips_mode_req
+
+#define rtw_ips_mode_req(pwrctrlpriv, ips_mode) \
+       (pwrctrlpriv)->ips_mode_req = (ips_mode)
+
+#define RTW_PWR_STATE_CHK_INTERVAL 2000
+
+#define _rtw_set_pwr_state_check_timer(pwrctrlpriv, ms) \
+       do { \
+               /*DBG_871X("%s _rtw_set_pwr_state_check_timer(%p, %d)\n", __FUNCTION__, (pwrctrlpriv), (ms));*/ \
+               _set_timer(&(pwrctrlpriv)->pwr_state_check_timer, (ms)); \
+       } while(0)
+
+#define rtw_set_pwr_state_check_timer(pwrctrlpriv) \
+       _rtw_set_pwr_state_check_timer((pwrctrlpriv), (pwrctrlpriv)->pwr_state_check_interval)
+
+extern void rtw_init_pwrctrl_priv(_adapter *adapter);
+extern void rtw_free_pwrctrl_priv(_adapter * adapter);
+
+#ifdef CONFIG_LPS_LCLK
+extern s32 rtw_register_tx_alive(PADAPTER padapter);
+extern void rtw_unregister_tx_alive(PADAPTER padapter);
+extern s32 rtw_register_rx_alive(PADAPTER padapter);
+extern void rtw_unregister_rx_alive(PADAPTER padapter);
+extern s32 rtw_register_cmd_alive(PADAPTER padapter);
+extern void rtw_unregister_cmd_alive(PADAPTER padapter);
+extern s32 rtw_register_evt_alive(PADAPTER padapter);
+extern void rtw_unregister_evt_alive(PADAPTER padapter);
+extern void cpwm_int_hdl(PADAPTER padapter, struct reportpwrstate_parm *preportpwrstate);
+#endif
+
+extern void rtw_set_ps_mode(_adapter * padapter, u8 ps_mode, u8 smart_ps);
+extern void rtw_set_rpwm(_adapter * padapter, u8 val8);
+extern void LeaveAllPowerSaveMode(PADAPTER Adapter);
+#ifdef CONFIG_IPS
+void _ips_enter(_adapter * padapter);
+void ips_enter(_adapter * padapter);
+int _ips_leave(_adapter * padapter);
+int ips_leave(_adapter * padapter);
+#endif
+
+void rtw_ps_processor(_adapter*padapter);
+
+#ifdef CONFIG_AUTOSUSPEND
+int autoresume_enter(_adapter* padapter);
+#endif
+#ifdef SUPPORT_HW_RFOFF_DETECTED
+rt_rf_power_state RfOnOffDetect(IN     PADAPTER pAdapter );
+#endif
+
+
+#ifdef CONFIG_LPS
+void LPS_Enter(PADAPTER padapter);
+void LPS_Leave(PADAPTER padapter);
+#endif
+
+#ifdef CONFIG_RESUME_IN_WORKQUEUE
+void rtw_resume_in_workqueue(struct pwrctrl_priv *pwrpriv);
+#endif //CONFIG_RESUME_IN_WORKQUEUE
+
+#if defined(CONFIG_HAS_EARLYSUSPEND ) || defined(CONFIG_ANDROID_POWER)
+bool rtw_is_earlysuspend_registered(struct pwrctrl_priv *pwrpriv);
+bool rtw_is_do_late_resume(struct pwrctrl_priv *pwrpriv);
+void rtw_set_do_late_resume(struct pwrctrl_priv *pwrpriv, bool enable);
+void rtw_register_early_suspend(struct pwrctrl_priv *pwrpriv);
+void rtw_unregister_early_suspend(struct pwrctrl_priv *pwrpriv);
+#else
+#define rtw_is_earlysuspend_registered(pwrpriv) _FALSE
+#define rtw_is_do_late_resume(pwrpriv) _FALSE
+#define rtw_set_do_late_resume(pwrpriv, enable) do {} while (0)
+#define rtw_register_early_suspend(pwrpriv) do {} while (0)
+#define rtw_unregister_early_suspend(pwrpriv) do {} while (0)
+#endif /* CONFIG_HAS_EARLYSUSPEND || CONFIG_ANDROID_POWER */
+
+u8 rtw_interface_ps_func(_adapter *padapter,HAL_INTF_PS_FUNC efunc_id,u8* val);
+void rtw_set_ips_deny(_adapter *padapter, u32 ms);
+int _rtw_pwr_wakeup(_adapter *padapter, u32 ips_deffer_ms, const char *caller);
+#define rtw_pwr_wakeup(adapter) _rtw_pwr_wakeup(adapter, RTW_PWR_STATE_CHK_INTERVAL, __FUNCTION__)
+#define rtw_pwr_wakeup_ex(adapter, ips_deffer_ms) _rtw_pwr_wakeup(adapter, ips_deffer_ms, __FUNCTION__)
+int rtw_pm_set_ips(_adapter *padapter, u8 mode);
+int rtw_pm_set_lps(_adapter *padapter, u8 mode);
+
+#endif  //__RTL871X_PWRCTRL_H_
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtw_qos.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtw_qos.h
new file mode 100644 (file)
index 0000000..bd15f93
--- /dev/null
@@ -0,0 +1,39 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+
+
+#ifndef _RTW_QOS_H_
+#define _RTW_QOS_H_
+#include <drv_conf.h>
+#include <osdep_service.h>
+
+
+
+
+
+
+struct qos_priv        {
+
+       unsigned int      qos_option;   //bit mask option: u-apsd, s-apsd, ts, block ack...
+
+};
+
+
+#endif //_RTL871X_QOS_H_
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtw_recv.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtw_recv.h
new file mode 100644 (file)
index 0000000..28dca00
--- /dev/null
@@ -0,0 +1,730 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef _RTW_RECV_H_
+#define _RTW_RECV_H_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+
+
+#define NR_RECVFRAME 256
+
+#define RXFRAME_ALIGN  8
+#define RXFRAME_ALIGN_SZ       (1<<RXFRAME_ALIGN)
+
+#define MAX_RXFRAME_CNT        512
+#define MAX_RX_NUMBLKS         (32)
+#define RECVFRAME_HDR_ALIGN 128
+
+#define SNAP_SIZE sizeof(struct ieee80211_snap_hdr)
+
+static u8 SNAP_ETH_TYPE_IPX[2] = {0x81, 0x37};
+
+static u8 SNAP_ETH_TYPE_APPLETALK_AARP[2] = {0x80, 0xf3};
+static u8 SNAP_ETH_TYPE_APPLETALK_DDP[2] = {0x80, 0x9b};
+static u8 SNAP_ETH_TYPE_TDLS[2] = {0x89, 0x0d};
+static u8 SNAP_HDR_APPLETALK_DDP[3] = {0x08, 0x00, 0x07}; // Datagram Delivery Protocol
+
+static u8 oui_8021h[] = {0x00, 0x00, 0xf8};
+static u8 oui_rfc1042[]= {0x00,0x00,0x00};
+
+#define MAX_SUBFRAME_COUNT     64
+static u8 rtw_rfc1042_header[] =
+{ 0xaa, 0xaa, 0x03, 0x00, 0x00, 0x00 };
+/* Bridge-Tunnel header (for EtherTypes ETH_P_AARP and ETH_P_IPX) */
+static u8 rtw_bridge_tunnel_header[] =
+{ 0xaa, 0xaa, 0x03, 0x00, 0x00, 0xf8 };
+
+//for Rx reordering buffer control
+struct recv_reorder_ctrl
+{
+       _adapter        *padapter;
+       u8 enable;
+       u16 indicate_seq;//=wstart_b, init_value=0xffff
+       u16 wend_b;
+       u8 wsize_b;
+       _queue pending_recvframe_queue;
+       _timer reordering_ctrl_timer;
+};
+
+struct stainfo_rxcache {
+       u16     tid_rxseq[16];
+/*
+       unsigned short  tid0_rxseq;
+       unsigned short  tid1_rxseq;
+       unsigned short  tid2_rxseq;
+       unsigned short  tid3_rxseq;
+       unsigned short  tid4_rxseq;
+       unsigned short  tid5_rxseq;
+       unsigned short  tid6_rxseq;
+       unsigned short  tid7_rxseq;
+       unsigned short  tid8_rxseq;
+       unsigned short  tid9_rxseq;
+       unsigned short  tid10_rxseq;
+       unsigned short  tid11_rxseq;
+       unsigned short  tid12_rxseq;
+       unsigned short  tid13_rxseq;
+       unsigned short  tid14_rxseq;
+       unsigned short  tid15_rxseq;
+*/
+};
+
+
+struct smooth_rssi_data {
+       u32     elements[100];  //array to store values
+       u32     index;                  //index to current array to store
+       u32     total_num;              //num of valid elements
+       u32     total_val;              //sum of valid elements
+};
+
+struct signal_stat {
+       u8      update_req;             //used to indicate
+       u8      avg_val;                //avg of valid elements
+       u32     total_num;              //num of valid elements
+       u32     total_val;              //sum of valid elements
+};
+
+struct rx_pkt_attrib
+{
+       u16     pkt_len;
+       u8      physt;
+       u8      drvinfo_sz;
+       u8      shift_sz;
+       u8      hdrlen; //the WLAN Header Len
+       u8      to_fr_ds;
+       u8      amsdu;
+       u8      qos;
+       u8      priority;
+       u8      pw_save;
+       u8      mdata;
+       u16     seq_num;
+       u8      frag_num;
+       u8      mfrag;
+       u8      order;
+       u8      privacy; //in frame_ctrl field
+       u8      bdecrypted;
+       u8      encrypt; //when 0 indicate no encrypt. when non-zero, indicate the encrypt algorith
+       u8      iv_len;
+       u8      icv_len;
+       u8      crc_err;
+       u8      icv_err;
+
+       u16 eth_type;
+
+       u8      dst[ETH_ALEN];
+       u8      src[ETH_ALEN];
+       u8      ta[ETH_ALEN];
+       u8      ra[ETH_ALEN];
+       u8      bssid[ETH_ALEN];
+
+       u8 ack_policy;
+
+//#ifdef CONFIG_TCP_CSUM_OFFLOAD_RX
+       u8      tcpchk_valid; // 0: invalid, 1: valid
+       u8      ip_chkrpt; //0: incorrect, 1: correct
+       u8      tcp_chkrpt; //0: incorrect, 1: correct
+//#endif
+       u8      key_index;
+
+       u8      mcs_rate;
+       u8      rxht;
+       u8      sgi;
+       u8      signal_qual;
+       s8      rx_mimo_signal_qual[2];
+       u8      signal_strength;
+       u8      rx_rssi[2];  //This value is percentage
+       u8      rx_snr[2];
+       u32     RxPWDBAll;
+       s32     RecvSignalPower;
+};
+
+
+//These definition is used for Rx packet reordering.
+#define SN_LESS(a, b)          (((a-b)&0x800)!=0)
+#define SN_EQUAL(a, b) (a == b)
+//#define REORDER_WIN_SIZE     128
+//#define REORDER_ENTRY_NUM    128
+#define REORDER_WAIT_TIME      (50) // (ms)
+
+#define RECVBUFF_ALIGN_SZ 8
+
+#define RXDESC_SIZE    24
+#define RXDESC_OFFSET RXDESC_SIZE
+
+struct recv_stat
+{
+       unsigned int rxdw0;
+
+       unsigned int rxdw1;
+
+       unsigned int rxdw2;
+
+       unsigned int rxdw3;
+
+       unsigned int rxdw4;
+
+       unsigned int rxdw5;
+
+#ifdef CONFIG_PCI_HCI
+       unsigned int rxdw6;
+
+       unsigned int rxdw7;
+#endif
+};
+
+#define EOR BIT(30)
+
+#ifdef CONFIG_PCI_HCI
+#define PCI_MAX_RX_QUEUE               1// MSDU packet queue, Rx Command Queue
+#define PCI_MAX_RX_COUNT               128
+
+struct rtw_rx_ring {
+       struct recv_stat        *desc;
+       dma_addr_t              dma;
+       unsigned int            idx;
+       struct sk_buff  *rx_buf[PCI_MAX_RX_COUNT];
+};
+#endif
+
+/*
+accesser of recv_priv: rtw_recv_entry(dispatch / passive level); recv_thread(passive) ; returnpkt(dispatch)
+; halt(passive) ;
+
+using enter_critical section to protect
+*/
+struct recv_priv
+{
+         _lock lock;
+
+#ifdef CONFIG_RECV_THREAD_MODE
+       _sema   recv_sema;
+       _sema   terminate_recvthread_sema;
+#endif
+
+       //_queue        blk_strms[MAX_RX_NUMBLKS];    // keeping the block ack frame until return ack
+       _queue  free_recv_queue;
+       _queue  recv_pending_queue;
+       _queue  uc_swdec_pending_queue;
+
+
+       u8 *pallocated_frame_buf;
+       u8 *precv_frame_buf;
+
+       uint free_recvframe_cnt;
+
+       _adapter        *adapter;
+
+#ifdef PLATFORM_WINDOWS
+       _nic_hdl  RxPktPoolHdl;
+       _nic_hdl  RxBufPoolHdl;
+
+#ifdef PLATFORM_OS_XP
+       PMDL    pbytecnt_mdl;
+#endif
+       uint    counter; //record the number that up-layer will return to drv; only when counter==0 can we  release recv_priv
+       NDIS_EVENT      recv_resource_evt ;
+#endif
+
+       u32     bIsAnyNonBEPkts;
+       u64     rx_bytes;
+       u64     rx_pkts;
+       u64     rx_drop;
+       u64     last_rx_bytes;
+
+       uint  rx_icv_err;
+       uint  rx_largepacket_crcerr;
+       uint  rx_smallpacket_crcerr;
+       uint  rx_middlepacket_crcerr;
+
+#ifdef CONFIG_USB_HCI
+       //u8 *pallocated_urb_buf;
+       _sema allrxreturnevt;
+       uint    ff_hwaddr;
+       u8      rx_pending_cnt;
+
+#ifdef CONFIG_USB_INTERRUPT_IN_PIPE
+#ifdef PLATFORM_LINUX
+       PURB    int_in_urb;
+#endif
+
+       u8      *int_in_buf;
+#endif
+
+#endif
+#if defined(PLATFORM_LINUX) || defined(PLATFORM_FREEBSD)
+#ifdef PLATFORM_FREEBSD
+       struct task irq_prepare_beacon_tasklet;
+       struct task recv_tasklet;
+#else //PLATFORM_FREEBSD
+       struct tasklet_struct irq_prepare_beacon_tasklet;
+       struct tasklet_struct recv_tasklet;
+#endif //PLATFORM_FREEBSD
+       struct sk_buff_head free_recv_skb_queue;
+       struct sk_buff_head rx_skb_queue;
+#ifdef CONFIG_RX_INDICATE_QUEUE
+       struct task rx_indicate_tasklet;
+       struct ifqueue rx_indicate_queue;
+#endif // CONFIG_RX_INDICATE_QUEUE
+
+#ifdef CONFIG_USE_USB_BUFFER_ALLOC_RX
+       _queue  recv_buf_pending_queue;
+#endif // CONFIG_USE_USB_BUFFER_ALLOC_RX
+#endif //defined(PLATFORM_LINUX) || defined(PLATFORM_FREEBSD)
+
+       u8 *pallocated_recv_buf;
+       u8 *precv_buf;    // 4 alignment
+       _queue  free_recv_buf_queue;
+       u32     free_recv_buf_queue_cnt;
+
+#ifdef CONFIG_SDIO_HCI
+       _queue  recv_buf_pending_queue;
+#endif
+
+#ifdef CONFIG_PCI_HCI
+       // Rx
+       struct rtw_rx_ring      rx_ring[PCI_MAX_RX_QUEUE];
+       int     rxringcount;
+       u16     rxbuffersize;
+#endif
+
+       //For display the phy informatiom
+       u8 is_signal_dbg;       // for debug
+       u8 signal_strength_dbg; // for debug
+       s8 rssi;
+       s8 rxpwdb;
+       u8 signal_strength;
+       u8 signal_qual;
+       u8 noise;
+       int RxSNRdB[2];
+       s8 RxRssi[2];
+       int FalseAlmCnt_all;
+
+#ifdef CONFIG_NEW_SIGNAL_STAT_PROCESS
+       _timer signal_stat_timer;
+       u32 signal_stat_sampling_interval;
+       //u32 signal_stat_converging_constant;
+       struct signal_stat signal_qual_data;
+       struct signal_stat signal_strength_data;
+#else //CONFIG_NEW_SIGNAL_STAT_PROCESS
+       struct smooth_rssi_data signal_qual_data;
+       struct smooth_rssi_data signal_strength_data;
+#endif //CONFIG_NEW_SIGNAL_STAT_PROCESS
+
+       u32 recvbuf_skb_alloc_fail_cnt;
+       u32 recvbuf_null_cnt;
+       u32 read_port_complete_EINPROGRESS_cnt;
+       u32 read_port_complete_other_urb_err_cnt;
+
+
+};
+
+#ifdef CONFIG_NEW_SIGNAL_STAT_PROCESS
+#define rtw_set_signal_stat_timer(recvpriv) _set_timer(&(recvpriv)->signal_stat_timer, (recvpriv)->signal_stat_sampling_interval)
+#endif //CONFIG_NEW_SIGNAL_STAT_PROCESS
+
+struct sta_recv_priv {
+
+       _lock   lock;
+       sint    option;
+
+       //_queue        blk_strms[MAX_RX_NUMBLKS];
+       _queue defrag_q;         //keeping the fragment frame until defrag
+
+       struct  stainfo_rxcache rxcache;
+
+       //uint  sta_rx_bytes;
+       //uint  sta_rx_pkts;
+       //uint  sta_rx_fail;
+
+};
+
+
+struct recv_buf
+{
+       _list list;
+
+       _lock recvbuf_lock;
+
+       u32     ref_cnt;
+
+       PADAPTER adapter;
+
+       u8      *pbuf;
+       u8      *pallocated_buf;
+
+       u32     len;
+       u8      *phead;
+       u8      *pdata;
+       u8      *ptail;
+       u8      *pend;
+
+#ifdef CONFIG_USB_HCI
+
+       #if defined(PLATFORM_OS_XP)||defined(PLATFORM_LINUX)||defined(PLATFORM_FREEBSD)
+       PURB    purb;
+       dma_addr_t dma_transfer_addr;   /* (in) dma addr for transfer_buffer */
+       u32 alloc_sz;
+       #endif
+
+       #ifdef PLATFORM_OS_XP
+       PIRP            pirp;
+       #endif
+
+       #ifdef PLATFORM_OS_CE
+       USB_TRANSFER    usb_transfer_read_port;
+       #endif
+
+       u8  irp_pending;
+       int  transfer_len;
+
+#endif
+
+#ifdef PLATFORM_LINUX
+       _pkt *pskb;
+       u8      reuse;
+#endif
+#ifdef PLATFORM_FREEBSD //skb solution
+       struct sk_buff *pskb;
+       u8      reuse;
+#endif //PLATFORM_FREEBSD //skb solution
+};
+
+
+/*
+       head  ----->
+
+               data  ----->
+
+                       payload
+
+               tail  ----->
+
+
+       end   ----->
+
+       len = (unsigned int )(tail - data);
+
+*/
+struct recv_frame_hdr
+{
+       _list   list;
+#ifndef CONFIG_BSD_RX_USE_MBUF
+       struct sk_buff   *pkt;
+       struct sk_buff   *pkt_newalloc;
+#else // CONFIG_BSD_RX_USE_MBUF
+       _pkt    *pkt;
+       _pkt *pkt_newalloc;
+#endif // CONFIG_BSD_RX_USE_MBUF
+
+       _adapter  *adapter;
+
+       u8 fragcnt;
+
+       int frame_tag;
+
+       struct rx_pkt_attrib attrib;
+
+       uint  len;
+       u8 *rx_head;
+       u8 *rx_data;
+       u8 *rx_tail;
+       u8 *rx_end;
+
+       void *precvbuf;
+
+
+       //
+       struct sta_info *psta;
+
+       //for A-MPDU Rx reordering buffer control
+       struct recv_reorder_ctrl *preorder_ctrl;
+
+};
+
+
+union recv_frame{
+
+       union{
+               _list list;
+               struct recv_frame_hdr hdr;
+               uint mem[RECVFRAME_HDR_ALIGN>>2];
+       }u;
+
+       //uint mem[MAX_RXSZ>>2];
+
+};
+
+
+extern union recv_frame *_rtw_alloc_recvframe (_queue *pfree_recv_queue);  //get a free recv_frame from pfree_recv_queue
+extern union recv_frame *rtw_alloc_recvframe (_queue *pfree_recv_queue);  //get a free recv_frame from pfree_recv_queue
+extern void rtw_init_recvframe(union recv_frame *precvframe ,struct recv_priv *precvpriv);
+extern int      rtw_free_recvframe(union recv_frame *precvframe, _queue *pfree_recv_queue);
+
+#define rtw_dequeue_recvframe(queue) rtw_alloc_recvframe(queue)
+extern int _rtw_enqueue_recvframe(union recv_frame *precvframe, _queue *queue);
+extern int rtw_enqueue_recvframe(union recv_frame *precvframe, _queue *queue);
+
+extern void rtw_free_recvframe_queue(_queue *pframequeue,  _queue *pfree_recv_queue);
+u32 rtw_free_uc_swdec_pending_queue(_adapter *adapter);
+
+sint rtw_enqueue_recvbuf_to_head(struct recv_buf *precvbuf, _queue *queue);
+sint rtw_enqueue_recvbuf(struct recv_buf *precvbuf, _queue *queue);
+struct recv_buf *rtw_dequeue_recvbuf (_queue *queue);
+
+void rtw_reordering_ctrl_timeout_handler(void *pcontext);
+
+__inline static u8 *get_rxmem(union recv_frame *precvframe)
+{
+       //always return rx_head...
+       if(precvframe==NULL)
+               return NULL;
+
+       return precvframe->u.hdr.rx_head;
+}
+
+__inline static u8 *get_rx_status(union recv_frame *precvframe)
+{
+
+       return get_rxmem(precvframe);
+
+}
+
+__inline static u8 *get_recvframe_data(union recv_frame *precvframe)
+{
+
+       //alwasy return rx_data
+       if(precvframe==NULL)
+               return NULL;
+
+       return precvframe->u.hdr.rx_data;
+
+}
+
+__inline static u8 *recvframe_push(union recv_frame *precvframe, sint sz)
+{
+       // append data before rx_data
+
+       /* add data to the start of recv_frame
+ *
+ *      This function extends the used data area of the recv_frame at the buffer
+ *      start. rx_data must be still larger than rx_head, after pushing.
+ */
+
+       if(precvframe==NULL)
+               return NULL;
+
+
+       precvframe->u.hdr.rx_data -= sz ;
+       if( precvframe->u.hdr.rx_data < precvframe->u.hdr.rx_head )
+       {
+               precvframe->u.hdr.rx_data += sz ;
+               return NULL;
+       }
+
+       precvframe->u.hdr.len +=sz;
+
+       return precvframe->u.hdr.rx_data;
+
+}
+
+
+__inline static u8 *recvframe_pull(union recv_frame *precvframe, sint sz)
+{
+       // rx_data += sz; move rx_data sz bytes  hereafter
+
+       //used for extract sz bytes from rx_data, update rx_data and return the updated rx_data to the caller
+
+
+       if(precvframe==NULL)
+               return NULL;
+
+
+       precvframe->u.hdr.rx_data += sz;
+
+       if(precvframe->u.hdr.rx_data > precvframe->u.hdr.rx_tail)
+       {
+               precvframe->u.hdr.rx_data -= sz;
+               return NULL;
+       }
+
+       precvframe->u.hdr.len -=sz;
+
+       return precvframe->u.hdr.rx_data;
+
+}
+
+__inline static u8 *recvframe_put(union recv_frame *precvframe, sint sz)
+{
+       // rx_tai += sz; move rx_tail sz bytes  hereafter
+
+       //used for append sz bytes from ptr to rx_tail, update rx_tail and return the updated rx_tail to the caller
+       //after putting, rx_tail must be still larger than rx_end.
+       unsigned char * prev_rx_tail;
+
+       if(precvframe==NULL)
+               return NULL;
+
+       prev_rx_tail = precvframe->u.hdr.rx_tail;
+
+       precvframe->u.hdr.rx_tail += sz;
+
+       if(precvframe->u.hdr.rx_tail > precvframe->u.hdr.rx_end)
+       {
+               precvframe->u.hdr.rx_tail -= sz;
+               return NULL;
+       }
+
+       precvframe->u.hdr.len +=sz;
+
+       return precvframe->u.hdr.rx_tail;
+
+}
+
+
+
+__inline static u8 *recvframe_pull_tail(union recv_frame *precvframe, sint sz)
+{
+       // rmv data from rx_tail (by yitsen)
+
+       //used for extract sz bytes from rx_end, update rx_end and return the updated rx_end to the caller
+       //after pulling, rx_end must be still larger than rx_data.
+
+       if(precvframe==NULL)
+               return NULL;
+
+       precvframe->u.hdr.rx_tail -= sz;
+
+       if(precvframe->u.hdr.rx_tail < precvframe->u.hdr.rx_data)
+       {
+               precvframe->u.hdr.rx_tail += sz;
+               return NULL;
+       }
+
+       precvframe->u.hdr.len -=sz;
+
+       return precvframe->u.hdr.rx_tail;
+
+}
+
+
+
+__inline static _buffer * get_rxbuf_desc(union recv_frame *precvframe)
+{
+       _buffer * buf_desc;
+
+       if(precvframe==NULL)
+               return NULL;
+#ifdef PLATFORM_WINDOWS
+       NdisQueryPacket(precvframe->u.hdr.pkt, NULL, NULL, &buf_desc, NULL);
+#endif
+
+       return buf_desc;
+}
+
+
+__inline static union recv_frame *rxmem_to_recvframe(u8 *rxmem)
+{
+       //due to the design of 2048 bytes alignment of recv_frame, we can reference the union recv_frame
+       //from any given member of recv_frame.
+       // rxmem indicates the any member/address in recv_frame
+
+       return (union recv_frame*)(((SIZE_PTR)rxmem >> RXFRAME_ALIGN) << RXFRAME_ALIGN);
+
+}
+
+__inline static union recv_frame *pkt_to_recvframe(_pkt *pkt)
+{
+
+       u8 * buf_star;
+       union recv_frame * precv_frame;
+#ifdef PLATFORM_WINDOWS
+       _buffer * buf_desc;
+       uint len;
+
+       NdisQueryPacket(pkt, NULL, NULL, &buf_desc, &len);
+       NdisQueryBufferSafe(buf_desc, &buf_star, &len, HighPagePriority);
+#endif
+       precv_frame = rxmem_to_recvframe((unsigned char*)buf_star);
+
+       return precv_frame;
+}
+
+__inline static u8 *pkt_to_recvmem(_pkt *pkt)
+{
+       // return the rx_head
+
+       union recv_frame * precv_frame = pkt_to_recvframe(pkt);
+
+       return  precv_frame->u.hdr.rx_head;
+
+}
+
+__inline static u8 *pkt_to_recvdata(_pkt *pkt)
+{
+       // return the rx_data
+
+       union recv_frame * precv_frame =pkt_to_recvframe(pkt);
+
+       return  precv_frame->u.hdr.rx_data;
+
+}
+
+
+__inline static sint get_recvframe_len(union recv_frame *precvframe)
+{
+       return precvframe->u.hdr.len;
+}
+
+__inline static u8 query_rx_pwr_percentage(s8 antpower )
+{
+       if ((antpower <= -100) || (antpower >= 20))
+       {
+               return  0;
+       }
+       else if (antpower >= 0)
+       {
+               return  100;
+       }
+       else
+       {
+               return  (100+antpower);
+       }
+}
+
+__inline static s32 translate_percentage_to_dbm(u32 SignalStrengthIndex)
+{
+       s32     SignalPower; // in dBm.
+
+       // Translate to dBm (x=0.5y-95).
+       SignalPower = (s32)((SignalStrengthIndex + 1) >> 1);
+       SignalPower -= 95;
+
+       return SignalPower;
+}
+
+
+struct sta_info;
+
+extern void _rtw_init_sta_recv_priv(struct sta_recv_priv *psta_recvpriv);
+
+extern void  mgt_dispatcher(_adapter *padapter, union recv_frame *precv_frame);
+
+#endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtw_rf.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtw_rf.h
new file mode 100644 (file)
index 0000000..b8acf93
--- /dev/null
@@ -0,0 +1,151 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef        __RTW_RF_H_
+#define __RTW_RF_H_
+
+#include <drv_conf.h>
+#include <rtw_cmd.h>
+
+#define OFDM_PHY               1
+#define MIXED_PHY              2
+#define CCK_PHY                3
+
+#define NumRates       (13)
+
+// slot time for 11g
+#define SHORT_SLOT_TIME                                        9
+#define NON_SHORT_SLOT_TIME                            20
+
+#define RTL8711_RF_MAX_SENS 6
+#define RTL8711_RF_DEF_SENS 4
+
+//
+// We now define the following channels as the max channels in each channel plan.
+// 2G, total 14 chnls
+// {1,2,3,4,5,6,7,8,9,10,11,12,13,14}
+// 5G, total 24 chnls
+// {36,40,44,48,52,56,60,64,100,104,108,112,116,120,124,128,132,136,140,149,153,157,161,165}
+#define        MAX_CHANNEL_NUM_2G                              14
+#define        MAX_CHANNEL_NUM_5G                              24
+#define        MAX_CHANNEL_NUM                                 38//14+24
+
+//#define NUM_REGULATORYS      21
+#define NUM_REGULATORYS        1
+
+//Country codes
+#define USA                                                    0x555320
+#define EUROPE                                         0x1 //temp, should be provided later
+#define JAPAN                                          0x2 //temp, should be provided later
+
+struct regulatory_class {
+       u32     starting_freq;                                  //MHz,
+       u8      channel_set[MAX_CHANNEL_NUM];
+       u8      channel_cck_power[MAX_CHANNEL_NUM];//dbm
+       u8      channel_ofdm_power[MAX_CHANNEL_NUM];//dbm
+       u8      txpower_limit;                                  //dbm
+       u8      channel_spacing;                                //MHz
+       u8      modem;
+};
+
+typedef enum _CAPABILITY{
+       cESS                    = 0x0001,
+       cIBSS                   = 0x0002,
+       cPollable               = 0x0004,
+       cPollReq                        = 0x0008,
+       cPrivacy                = 0x0010,
+       cShortPreamble  = 0x0020,
+       cPBCC                   = 0x0040,
+       cChannelAgility = 0x0080,
+       cSpectrumMgnt   = 0x0100,
+       cQos                    = 0x0200,       // For HCCA, use with CF-Pollable and CF-PollReq
+       cShortSlotTime  = 0x0400,
+       cAPSD                   = 0x0800,
+       cRM                             = 0x1000,       // RRM (Radio Request Measurement)
+       cDSSS_OFDM      = 0x2000,
+       cDelayedBA              = 0x4000,
+       cImmediateBA    = 0x8000,
+}CAPABILITY, *PCAPABILITY;
+
+enum   _REG_PREAMBLE_MODE{
+       PREAMBLE_LONG   = 1,
+       PREAMBLE_AUTO   = 2,
+       PREAMBLE_SHORT  = 3,
+};
+
+
+enum _RTL8712_RF_MIMO_CONFIG_{
+ RTL8712_RFCONFIG_1T=0x10,
+ RTL8712_RFCONFIG_2T=0x20,
+ RTL8712_RFCONFIG_1R=0x01,
+ RTL8712_RFCONFIG_2R=0x02,
+ RTL8712_RFCONFIG_1T1R=0x11,
+ RTL8712_RFCONFIG_1T2R=0x12,
+ RTL8712_RFCONFIG_TURBO=0x92,
+ RTL8712_RFCONFIG_2T2R=0x22
+};
+
+
+// Bandwidth Offset
+#define HAL_PRIME_CHNL_OFFSET_DONT_CARE        0
+#define HAL_PRIME_CHNL_OFFSET_LOWER    1
+#define HAL_PRIME_CHNL_OFFSET_UPPER    2
+
+// Represent Channel Width in HT Capabilities
+//
+typedef enum _HT_CHANNEL_WIDTH {
+       HT_CHANNEL_WIDTH_20 = 0,
+       HT_CHANNEL_WIDTH_40 = 1,
+}HT_CHANNEL_WIDTH, *PHT_CHANNEL_WIDTH;
+
+//
+// Represent Extention Channel Offset in HT Capabilities
+// This is available only in 40Mhz mode.
+//
+typedef enum _HT_EXTCHNL_OFFSET{
+       HT_EXTCHNL_OFFSET_NO_EXT = 0,
+       HT_EXTCHNL_OFFSET_UPPER = 1,
+       HT_EXTCHNL_OFFSET_NO_DEF = 2,
+       HT_EXTCHNL_OFFSET_LOWER = 3,
+}HT_EXTCHNL_OFFSET, *PHT_EXTCHNL_OFFSET;
+
+/* 2007/11/15 MH Define different RF type. */
+typedef        enum _RT_RF_TYPE_DEFINITION
+{
+       RF_1T2R = 0,
+       RF_2T4R = 1,
+       RF_2T2R = 2,
+       RF_1T1R = 3,
+       RF_2T2R_GREEN = 4,
+       RF_819X_MAX_TYPE = 5,
+}RT_RF_TYPE_DEF_E;
+
+typedef enum _RF_RADIO_PATH{
+       RF_PATH_A = 0,                  //Radio Path A
+       RF_PATH_B = 1,                  //Radio Path B
+       RF_PATH_C = 2,                  //Radio Path C
+       RF_PATH_D = 3,                  //Radio Path D
+       //RF_PATH_MAX                           //Max RF number 90 support
+}RF_RADIO_PATH_E, *PRF_RADIO_PATH_E;
+
+u32 rtw_ch2freq(u32 ch);
+u32 rtw_freq2ch(u32 freq);
+
+
+#endif //_RTL8711_RF_H_
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtw_security.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtw_security.h
new file mode 100644 (file)
index 0000000..0d99c9a
--- /dev/null
@@ -0,0 +1,446 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __RTW_SECURITY_H_
+#define __RTW_SECURITY_H_
+
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+
+
+#define _NO_PRIVACY_   0x0
+#define _WEP40_                        0x1
+#define _TKIP_                 0x2
+#define _TKIP_WTMIC_   0x3
+#define _AES_                  0x4
+#define _WEP104_               0x5
+#ifdef CONFIG_IEEE80211W
+#define _BIP_                          0x8
+#endif //CONFIG_IEEE80211W
+#define is_wep_enc(alg) (((alg) == _WEP40_) || ((alg) == _WEP104_))
+
+#define _WPA_IE_ID_    0xdd
+#define _WPA2_IE_ID_   0x30
+
+#define SHA256_MAC_LEN 32
+#define AES_BLOCK_SIZE 16
+#define AES_PRIV_SIZE (4 * 44)
+
+#ifndef Ndis802_11AuthModeWPA2
+#define Ndis802_11AuthModeWPA2 (Ndis802_11AuthModeWPANone + 1)
+#endif
+
+#ifndef Ndis802_11AuthModeWPA2PSK
+#define Ndis802_11AuthModeWPA2PSK (Ndis802_11AuthModeWPANone + 2)
+#endif
+
+union pn48     {
+
+       u64     val;
+
+#ifdef CONFIG_LITTLE_ENDIAN
+
+struct {
+  u8 TSC0;
+  u8 TSC1;
+  u8 TSC2;
+  u8 TSC3;
+  u8 TSC4;
+  u8 TSC5;
+  u8 TSC6;
+  u8 TSC7;
+} _byte_;
+
+#elif defined(CONFIG_BIG_ENDIAN)
+
+struct {
+  u8 TSC7;
+  u8 TSC6;
+  u8 TSC5;
+  u8 TSC4;
+  u8 TSC3;
+  u8 TSC2;
+  u8 TSC1;
+  u8 TSC0;
+} _byte_;
+
+#endif
+
+};
+
+union Keytype {
+        u8   skey[16];
+        u32    lkey[4];
+};
+
+
+typedef struct _RT_PMKID_LIST
+{
+       u8                                              bUsed;
+       u8                                              Bssid[6];
+       u8                                              PMKID[16];
+       u8                                              SsidBuf[33];
+       u8*                                             ssid_octet;
+       u16                                             ssid_length;
+} RT_PMKID_LIST, *PRT_PMKID_LIST;
+
+
+struct security_priv
+{
+       u32       dot11AuthAlgrthm;             // 802.11 auth, could be open, shared, 8021x and authswitch
+       u32       dot11PrivacyAlgrthm;  // This specify the privacy for shared auth. algorithm.
+
+       /* WEP */
+       u32       dot11PrivacyKeyIndex; // this is only valid for legendary wep, 0~3 for key id. (tx key index)
+       union Keytype dot11DefKey[4];                   // this is only valid for def. key
+       u32     dot11DefKeylen[4];
+       u8      key_mask; /* use to restore wep key after hal_init */
+
+       u32 dot118021XGrpPrivacy;       // This specify the privacy algthm. used for Grp key
+       u32     dot118021XGrpKeyid;             // key id used for Grp Key ( tx key index)
+       union Keytype   dot118021XGrpKey[4];    // 802.1x Group Key, for inx0 and inx1
+       union Keytype   dot118021XGrptxmickey[4];
+       union Keytype   dot118021XGrprxmickey[4];
+       union pn48              dot11Grptxpn;                   // PN48 used for Grp Key xmit.
+       union pn48              dot11Grprxpn;                   // PN48 used for Grp Key recv.
+#ifdef CONFIG_IEEE80211W
+       u32     dot11wBIPKeyid;                                         // key id used for BIP Key ( tx key index)
+       union Keytype   dot11wBIPKey[6];                // BIP Key, for index4 and index5
+       union pn48              dot11wBIPtxpn;                  // PN48 used for Grp Key xmit.
+       union pn48              dot11wBIPrxpn;                  // PN48 used for Grp Key recv.
+#endif //CONFIG_IEEE80211W
+#ifdef CONFIG_AP_MODE
+       //extend security capabilities for AP_MODE
+       unsigned int dot8021xalg;//0:disable, 1:psk, 2:802.1x
+       unsigned int wpa_psk;//0:disable, bit(0): WPA, bit(1):WPA2
+       unsigned int wpa_group_cipher;
+       unsigned int wpa2_group_cipher;
+       unsigned int wpa_pairwise_cipher;
+       unsigned int wpa2_pairwise_cipher;
+#endif
+
+       u8 wps_ie[MAX_WPS_IE_LEN];//added in assoc req
+       int wps_ie_len;
+
+
+       u8      binstallGrpkey;
+#ifdef CONFIG_IEEE80211W
+       u8      binstallBIPkey;
+#endif //CONFIG_IEEE80211W
+       u8      busetkipkey;
+       //_timer tkip_timer;
+       u8      bcheck_grpkey;
+       u8      bgrpkey_handshake;
+
+       //u8    packet_cnt;//unused, removed
+
+       s32     sw_encrypt;//from registry_priv
+       s32     sw_decrypt;//from registry_priv
+
+       s32     hw_decrypted;//if the rx packets is hw_decrypted==_FALSE, it means the hw has not been ready.
+
+
+       //keeps the auth_type & enc_status from upper layer ioctl(wpa_supplicant or wzc)
+       u32 ndisauthtype;       // NDIS_802_11_AUTHENTICATION_MODE
+       u32 ndisencryptstatus;  // NDIS_802_11_ENCRYPTION_STATUS
+
+       WLAN_BSSID_EX sec_bss;  //for joinbss (h2c buffer) usage
+
+       NDIS_802_11_WEP ndiswep;
+#ifdef PLATFORM_WINDOWS
+       u8 KeyMaterial[16];// variable length depending on above field.
+#endif
+
+       u8 assoc_info[600];
+       u8 szofcapability[256]; //for wpa2 usage
+       u8 oidassociation[512]; //for wpa/wpa2 usage
+       u8 authenticator_ie[256];  //store ap security information element
+       u8 supplicant_ie[256];  //store sta security information element
+
+
+       //for tkip countermeasure
+       u32 last_mic_err_time;
+       u8      btkip_countermeasure;
+       u8      btkip_wait_report;
+       u32 btkip_countermeasure_time;
+
+       //---------------------------------------------------------------------------
+       // For WPA2 Pre-Authentication.
+       //---------------------------------------------------------------------------
+       //u8                            RegEnablePreAuth;                               // Default value: Pre-Authentication enabled or not, from registry "EnablePreAuth". Added by Annie, 2005-11-01.
+       //u8                            EnablePreAuthentication;                        // Current Value: Pre-Authentication enabled or not.
+       RT_PMKID_LIST           PMKIDList[NUM_PMKID_CACHE];     // Renamed from PreAuthKey[NUM_PRE_AUTH_KEY]. Annie, 2006-10-13.
+       u8                              PMKIDIndex;
+       //u32                           PMKIDCount;                                             // Added by Annie, 2006-10-13.
+       //u8                            szCapability[256];                              // For WPA2-PSK using zero-config, by Annie, 2005-09-20.
+
+       u8 bWepDefaultKeyIdxSet;
+};
+
+struct sha256_state {
+       u64 length;
+       u32 state[8], curlen;
+       u8 buf[64];
+};
+
+#define GET_ENCRY_ALGO(psecuritypriv, psta, encry_algo, bmcst)\
+do{\
+       switch(psecuritypriv->dot11AuthAlgrthm)\
+       {\
+               case dot11AuthAlgrthm_Open:\
+               case dot11AuthAlgrthm_Shared:\
+               case dot11AuthAlgrthm_Auto:\
+                       encry_algo = (u8)psecuritypriv->dot11PrivacyAlgrthm;\
+                       break;\
+               case dot11AuthAlgrthm_8021X:\
+                       if(bmcst)\
+                               encry_algo = (u8)psecuritypriv->dot118021XGrpPrivacy;\
+                       else\
+                               encry_algo =(u8) psta->dot118021XPrivacy;\
+                       break;\
+       }\
+}while(0)
+
+
+#define SET_ICE_IV_LEN( iv_len, icv_len, encrypt)\
+do{\
+       switch(encrypt)\
+       {\
+               case _WEP40_:\
+               case _WEP104_:\
+                       iv_len = 4;\
+                       icv_len = 4;\
+                       break;\
+               case _TKIP_:\
+                       iv_len = 8;\
+                       icv_len = 4;\
+                       break;\
+               case _AES_:\
+                       iv_len = 8;\
+                       icv_len = 8;\
+                       break;\
+               default:\
+                       iv_len = 0;\
+                       icv_len = 0;\
+                       break;\
+       }\
+}while(0)
+
+
+#define GET_TKIP_PN(iv,dot11txpn)\
+do{\
+       dot11txpn._byte_.TSC0=iv[2];\
+       dot11txpn._byte_.TSC1=iv[0];\
+       dot11txpn._byte_.TSC2=iv[4];\
+       dot11txpn._byte_.TSC3=iv[5];\
+       dot11txpn._byte_.TSC4=iv[6];\
+       dot11txpn._byte_.TSC5=iv[7];\
+}while(0)
+
+
+#define ROL32( A, n )  ( ((A) << (n)) | ( ((A)>>(32-(n)))  & ( (1UL << (n)) - 1 ) ) )
+#define ROR32( A, n )  ROL32( (A), 32-(n) )
+
+struct mic_data
+{
+       u32  K0, K1;         // Key
+       u32  L, R;           // Current state
+       u32  M;              // Message accumulator (single word)
+       u32     nBytesInM;      // # bytes in M
+};
+
+extern const u32 Te0[256];
+extern const u32 Te1[256];
+extern const u32 Te2[256];
+extern const u32 Te3[256];
+extern const u32 Te4[256];
+extern const u32 Td0[256];
+extern const u32 Td1[256];
+extern const u32 Td2[256];
+extern const u32 Td3[256];
+extern const u32 Td4[256];
+extern const u32 rcon[10];
+extern const u8 Td4s[256];
+extern const u8 rcons[10];
+
+#define RCON(i) (rcons[(i)] << 24)
+
+static inline u32 rotr(u32 val, int bits)
+{
+       return (val >> bits) | (val << (32 - bits));
+}
+
+#define TE0(i) Te0[((i) >> 24) & 0xff]
+#define TE1(i) rotr(Te0[((i) >> 16) & 0xff], 8)
+#define TE2(i) rotr(Te0[((i) >> 8) & 0xff], 16)
+#define TE3(i) rotr(Te0[(i) & 0xff], 24)
+#define TE41(i) ((Te0[((i) >> 24) & 0xff] << 8) & 0xff000000)
+#define TE42(i) (Te0[((i) >> 16) & 0xff] & 0x00ff0000)
+#define TE43(i) (Te0[((i) >> 8) & 0xff] & 0x0000ff00)
+#define TE44(i) ((Te0[(i) & 0xff] >> 8) & 0x000000ff)
+#define TE421(i) ((Te0[((i) >> 16) & 0xff] << 8) & 0xff000000)
+#define TE432(i) (Te0[((i) >> 8) & 0xff] & 0x00ff0000)
+#define TE443(i) (Te0[(i) & 0xff] & 0x0000ff00)
+#define TE414(i) ((Te0[((i) >> 24) & 0xff] >> 8) & 0x000000ff)
+#define TE4(i) ((Te0[(i)] >> 8) & 0x000000ff)
+
+#define TD0(i) Td0[((i) >> 24) & 0xff]
+#define TD1(i) rotr(Td0[((i) >> 16) & 0xff], 8)
+#define TD2(i) rotr(Td0[((i) >> 8) & 0xff], 16)
+#define TD3(i) rotr(Td0[(i) & 0xff], 24)
+#define TD41(i) (Td4s[((i) >> 24) & 0xff] << 24)
+#define TD42(i) (Td4s[((i) >> 16) & 0xff] << 16)
+#define TD43(i) (Td4s[((i) >> 8) & 0xff] << 8)
+#define TD44(i) (Td4s[(i) & 0xff])
+#define TD0_(i) Td0[(i) & 0xff]
+#define TD1_(i) rotr(Td0[(i) & 0xff], 8)
+#define TD2_(i) rotr(Td0[(i) & 0xff], 16)
+#define TD3_(i) rotr(Td0[(i) & 0xff], 24)
+
+#define GETU32(pt) (((u32)(pt)[0] << 24) ^ ((u32)(pt)[1] << 16) ^ \
+                       ((u32)(pt)[2] <<  8) ^ ((u32)(pt)[3]))
+
+#define PUTU32(ct, st) { \
+(ct)[0] = (u8)((st) >> 24); (ct)[1] = (u8)((st) >> 16); \
+(ct)[2] = (u8)((st) >>  8); (ct)[3] = (u8)(st); }
+
+#define WPA_GET_BE32(a) ((((u32) (a)[0]) << 24) | (((u32) (a)[1]) << 16) | \
+                        (((u32) (a)[2]) << 8) | ((u32) (a)[3]))
+
+#define WPA_PUT_LE16(a, val)                   \
+       do {                                    \
+               (a)[1] = ((u16) (val)) >> 8;    \
+               (a)[0] = ((u16) (val)) & 0xff;  \
+       } while (0)
+
+#define WPA_PUT_BE32(a, val)                                   \
+       do {                                                    \
+               (a)[0] = (u8) ((((u32) (val)) >> 24) & 0xff);   \
+               (a)[1] = (u8) ((((u32) (val)) >> 16) & 0xff);   \
+               (a)[2] = (u8) ((((u32) (val)) >> 8) & 0xff);    \
+               (a)[3] = (u8) (((u32) (val)) & 0xff);           \
+       } while (0)
+
+#define WPA_PUT_BE64(a, val)                           \
+       do {                                            \
+               (a)[0] = (u8) (((u64) (val)) >> 56);    \
+               (a)[1] = (u8) (((u64) (val)) >> 48);    \
+               (a)[2] = (u8) (((u64) (val)) >> 40);    \
+               (a)[3] = (u8) (((u64) (val)) >> 32);    \
+               (a)[4] = (u8) (((u64) (val)) >> 24);    \
+               (a)[5] = (u8) (((u64) (val)) >> 16);    \
+               (a)[6] = (u8) (((u64) (val)) >> 8);     \
+               (a)[7] = (u8) (((u64) (val)) & 0xff);   \
+       } while (0)
+
+/* ===== start - public domain SHA256 implementation ===== */
+
+/* This is based on SHA256 implementation in LibTomCrypt that was released into
+ * public domain by Tom St Denis. */
+
+/* the K array */
+static const unsigned long K[64] = {
+       0x428a2f98UL, 0x71374491UL, 0xb5c0fbcfUL, 0xe9b5dba5UL, 0x3956c25bUL,
+       0x59f111f1UL, 0x923f82a4UL, 0xab1c5ed5UL, 0xd807aa98UL, 0x12835b01UL,
+       0x243185beUL, 0x550c7dc3UL, 0x72be5d74UL, 0x80deb1feUL, 0x9bdc06a7UL,
+       0xc19bf174UL, 0xe49b69c1UL, 0xefbe4786UL, 0x0fc19dc6UL, 0x240ca1ccUL,
+       0x2de92c6fUL, 0x4a7484aaUL, 0x5cb0a9dcUL, 0x76f988daUL, 0x983e5152UL,
+       0xa831c66dUL, 0xb00327c8UL, 0xbf597fc7UL, 0xc6e00bf3UL, 0xd5a79147UL,
+       0x06ca6351UL, 0x14292967UL, 0x27b70a85UL, 0x2e1b2138UL, 0x4d2c6dfcUL,
+       0x53380d13UL, 0x650a7354UL, 0x766a0abbUL, 0x81c2c92eUL, 0x92722c85UL,
+       0xa2bfe8a1UL, 0xa81a664bUL, 0xc24b8b70UL, 0xc76c51a3UL, 0xd192e819UL,
+       0xd6990624UL, 0xf40e3585UL, 0x106aa070UL, 0x19a4c116UL, 0x1e376c08UL,
+       0x2748774cUL, 0x34b0bcb5UL, 0x391c0cb3UL, 0x4ed8aa4aUL, 0x5b9cca4fUL,
+       0x682e6ff3UL, 0x748f82eeUL, 0x78a5636fUL, 0x84c87814UL, 0x8cc70208UL,
+       0x90befffaUL, 0xa4506cebUL, 0xbef9a3f7UL, 0xc67178f2UL
+};
+
+
+/* Various logical functions */
+#define RORc(x, y) \
+( ((((unsigned long) (x) & 0xFFFFFFFFUL) >> (unsigned long) ((y) & 31)) | \
+   ((unsigned long) (x) << (unsigned long) (32 - ((y) & 31)))) & 0xFFFFFFFFUL)
+#define Ch(x,y,z)       (z ^ (x & (y ^ z)))
+#define Maj(x,y,z)      (((x | y) & z) | (x & y))
+#define S(x, n)         RORc((x), (n))
+#define R(x, n)         (((x)&0xFFFFFFFFUL)>>(n))
+#define Sigma0(x)       (S(x, 2) ^ S(x, 13) ^ S(x, 22))
+#define Sigma1(x)       (S(x, 6) ^ S(x, 11) ^ S(x, 25))
+#define Gamma0(x)       (S(x, 7) ^ S(x, 18) ^ R(x, 3))
+#define Gamma1(x)       (S(x, 17) ^ S(x, 19) ^ R(x, 10))
+#ifndef MIN
+#define MIN(x, y) (((x) < (y)) ? (x) : (y))
+#endif
+#ifdef CONFIG_IEEE80211W
+int omac1_aes_128(u8 *key, u8 *data, size_t data_len, u8 *mac);
+#endif //CONFIG_IEEE80211W
+void rtw_secmicsetkey(struct mic_data *pmicdata, u8 * key );
+void rtw_secmicappendbyte(struct mic_data *pmicdata, u8 b );
+void rtw_secmicappend(struct mic_data *pmicdata, u8 * src, u32 nBytes );
+void rtw_secgetmic(struct mic_data *pmicdata, u8 * dst );
+
+void rtw_seccalctkipmic(
+       u8 * key,
+       u8 *header,
+       u8 *data,
+       u32 data_len,
+       u8 *Miccode,
+       u8   priority);
+
+u32 rtw_aes_encrypt(_adapter *padapter, u8 *pxmitframe);
+u32 rtw_tkip_encrypt(_adapter *padapter, u8 *pxmitframe);
+void rtw_wep_encrypt(_adapter *padapter, u8  *pxmitframe);
+
+u32 rtw_aes_decrypt(_adapter *padapter, u8  *precvframe);
+u32 rtw_tkip_decrypt(_adapter *padapter, u8  *precvframe);
+void rtw_wep_decrypt(_adapter *padapter, u8  *precvframe);
+#ifdef CONFIG_IEEE80211W
+u32    rtw_BIP_verify(_adapter *padapter, u8 *precvframe);
+#endif //CONFIG_IEEE80211W
+#ifdef CONFIG_TDLS
+void wpa_tdls_generate_tpk(_adapter *padapter, struct sta_info *psta);
+int wpa_tdls_ftie_mic(u8 *kck, u8 trans_seq,
+                                               u8 *lnkid, u8 *rsnie, u8 *timeoutie, u8 *ftie,
+                                               u8 *mic);
+int tdls_verify_mic(u8 *kck, u8 trans_seq,
+                                               u8 *lnkid, u8 *rsnie, u8 *timeoutie, u8 *ftie);
+#endif //CONFIG_TDLS
+
+#ifdef PLATFORM_WINDOWS
+void rtw_use_tkipkey_handler (
+       IN      PVOID                                   SystemSpecific1,
+       IN      PVOID                                   FunctionContext,
+       IN      PVOID                                   SystemSpecific2,
+       IN      PVOID                                   SystemSpecific3
+       );
+#endif
+#ifdef PLATFORM_LINUX
+void rtw_use_tkipkey_handler(void* FunctionContext);
+#endif
+
+#ifdef PLATFORM_FREEBSD
+void rtw_use_tkipkey_handler(void* FunctionContext);
+#endif //PLATFORM_FREEBSD
+
+void rtw_sec_restore_wep_key(_adapter *adapter);
+u8 rtw_handle_tkip_countermeasure(_adapter* adapter, const char *caller);
+
+#endif //__RTL871X_SECURITY_H_
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtw_sreset.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtw_sreset.h
new file mode 100644 (file)
index 0000000..f2d5dc7
--- /dev/null
@@ -0,0 +1,73 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef _RTW_SRESET_C_
+#define _RTW_SRESET_C_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+
+enum {
+       SRESET_TGP_NULL = 0,
+       SRESET_TGP_XMIT_STATUS = 1,
+       SRESET_TGP_LINK_STATUS = 2,
+};
+
+struct sreset_priv {
+       _mutex  silentreset_mutex;
+       u8      silent_reset_inprogress;
+       u8      Wifi_Error_Status;
+       unsigned long last_tx_time;
+       unsigned long last_tx_complete_time;
+
+       s32 dbg_trigger_point;
+};
+
+#ifdef CONFIG_RTL8192C
+#include <rtl8192c_hal.h>
+#endif
+#ifdef CONFIG_RTL8192D
+#include <rtl8192d_hal.h>
+#endif
+#ifdef CONFIG_RTL8723A
+#include <rtl8723a_hal.h>
+#endif
+#ifdef CONFIG_RTL8188E
+#include <rtl8188e_hal.h>
+#endif
+
+#define        WIFI_STATUS_SUCCESS             0
+#define        USB_VEN_REQ_CMD_FAIL    BIT0
+#define        USB_READ_PORT_FAIL              BIT1
+#define        USB_WRITE_PORT_FAIL             BIT2
+#define        WIFI_MAC_TXDMA_ERROR    BIT3
+#define   WIFI_TX_HANG                         BIT4
+#define        WIFI_RX_HANG                            BIT5
+#define        WIFI_IF_NOT_EXIST                       BIT6
+
+void sreset_init_value(_adapter *padapter);
+void sreset_reset_value(_adapter *padapter);
+u8 sreset_get_wifi_status(_adapter *padapter);
+void sreset_set_wifi_error_status(_adapter *padapter, u32 status);
+void sreset_set_trigger_point(_adapter *padapter, s32 tgp);
+bool sreset_inprogress(_adapter *padapter);
+void sreset_reset(_adapter *padapter);
+
+#endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtw_tdls.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtw_tdls.h
new file mode 100644 (file)
index 0000000..cbf996f
--- /dev/null
@@ -0,0 +1,142 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __RTW_TDLS_H_
+#define __RTW_TDLS_H_
+
+#include <drv_types.h>
+
+#ifdef CONFIG_TDLS
+/* TDLS STA state */
+#define        TDLS_STATE_NONE                         0x00000000      //default state
+#define        TDLS_INITIATOR_STATE                    0x10000000
+#define        TDLS_RESPONDER_STATE                    0x20000000
+#define        TDLS_LINKED_STATE                               0x40000000
+#define        TDLS_CH_SWITCH_ON_STATE         0x01000000
+#define        TDLS_PEER_AT_OFF_STATE          0x02000000      //could send pkt on target ch
+#define        TDLS_AT_OFF_CH_STATE                    0x04000000
+#define        TDLS_CH_SW_INITIATOR_STATE      0x08000000      //avoiding duplicated or unconditional ch. switch rsp.
+#define        TDLS_APSD_CHSW_STATE            0x00100000      //in APSD and want to setup channel switch
+#define        TDLS_PEER_SLEEP_STATE           0x00200000      //peer sta is sleeping
+#define        TDLS_SW_OFF_STATE                       0x00400000      //terminate channel swithcing
+#define        TDLS_ALIVE_STATE                                0x00010000      //Check if peer sta is alived.
+
+#define        TPK_RESEND_COUNT                                301
+#define        CH_SWITCH_TIME                          10
+#define        CH_SWITCH_TIMEOUT                       30
+#define        TDLS_STAY_TIME                          500
+#define        TDLS_SIGNAL_THRESH                      0x20
+#define        TDLS_WATCHDOG_PERIOD            10      //Periodically sending tdls discovery request in TDLS_WATCHDOG_PERIOD * 2 sec
+#define        TDLS_ALIVE_TIMER_PH1                    5000
+#define        TDLS_ALIVE_TIMER_PH2                    2000
+#define        TDLS_STAY_TIME                          500
+#define        TDLS_HANDSHAKE_TIME                     2000
+#define        TDLS_ALIVE_COUNT                                3
+#define        TDLS_INI_MACID_ENTRY                    6
+
+/* TDLS */
+#define TDLS_MIC_LEN 16
+#define WPA_NONCE_LEN 32
+#define TDLS_TIMEOUT_LEN 4
+
+struct wpa_tdls_ftie {
+       u8 ie_type; /* FTIE */
+       u8 ie_len;
+       u8 mic_ctrl[2];
+       u8 mic[TDLS_MIC_LEN];
+       u8 Anonce[WPA_NONCE_LEN]; /* Responder Nonce in TDLS */
+       u8 Snonce[WPA_NONCE_LEN]; /* Initiator Nonce in TDLS */
+       /* followed by optional elements */
+} ;
+
+struct wpa_tdls_lnkid {
+       u8 ie_type; /* Link Identifier IE */
+       u8 ie_len;
+       u8 bssid[ETH_ALEN];
+       u8 init_sta[ETH_ALEN];
+       u8 resp_sta[ETH_ALEN];
+} ;
+
+static u8 TDLS_RSNIE[]={       0x01, 0x00,     //version shall be set to 1
+                                               0x00, 0x0f, 0xac, 0x07, //group sipher suite
+                                               0x01, 0x00,     //pairwise cipher suite count
+                                               0x00, 0x0f, 0xac, 0x04, //pairwise cipher suite list; CCMP only
+                                               0x01, 0x00,     //AKM suite count
+                                               0x00, 0x0f, 0xac, 0x07, //TPK Handshake
+                                               0x00, 0x02,
+                                               //PMKID shall not be present
+                                               };
+
+static u8 TDLS_WMMIE[]={0x00, 0x50, 0xf2, 0x02, 0x00, 0x01, 0x00};     //Qos info all set zero
+
+static u8 TDLS_EXT_CAPIE[] = {0x00, 0x00, 0x00, 0x50, 0x20};   //bit(28), bit(30), bit(37)
+
+//     SRC: Supported Regulatory Classes
+static u8 TDLS_SRC[] = { 0x01, 0x01, 0x02, 0x03, 0x04, 0x0c, 0x16, 0x17, 0x18, 0x19, 0x1b, 0x1c, 0x1d, 0x1e, 0x20, 0x21 };
+
+void rtw_reset_tdls_info(_adapter* padapter);
+int rtw_init_tdls_info(_adapter* padapter);
+void rtw_free_tdls_info(struct tdls_info *ptdlsinfo);
+void issue_nulldata_to_TDLS_peer_STA(_adapter *padapter, struct sta_info *ptdls_sta, unsigned int power_mode);
+void init_TPK_timer(_adapter *padapter, struct sta_info *psta);
+void init_ch_switch_timer(_adapter *padapter, struct sta_info *psta);
+void init_base_ch_timer(_adapter *padapter, struct sta_info *psta);
+void init_off_ch_timer(_adapter *padapter, struct sta_info *psta);
+void init_tdls_alive_timer(_adapter *padapter, struct sta_info *psta);
+void init_handshake_timer(_adapter *padapter, struct sta_info *psta);
+void free_tdls_sta(_adapter *padapter, struct sta_info *ptdls_sta);
+#ifdef CONFIG_WFD
+void issue_tunneled_probe_req(_adapter *padapter);
+void issue_tunneled_probe_rsp(_adapter *padapter, union recv_frame *precv_frame);
+#endif //CONFIG_WFD
+void issue_tdls_dis_req(_adapter *padapter, u8 *mac_addr);
+void issue_tdls_setup_req(_adapter *padapter, u8 *mac_addr);
+void issue_tdls_setup_rsp(_adapter *padapter, union recv_frame *precv_frame);
+void issue_tdls_setup_cfm(_adapter *padapter, union recv_frame *precv_frame);
+void issue_tdls_dis_rsp(_adapter * padapter, union recv_frame * precv_frame, u8 dialog);
+void issue_tdls_teardown(_adapter *padapter, u8 *mac_addr);
+void issue_tdls_peer_traffic_indication(_adapter *padapter, struct sta_info *psta);
+void issue_tdls_ch_switch_req(_adapter *padapter, u8 *mac_addr);
+void issue_tdls_ch_switch_rsp(_adapter *padapter, u8 *mac_addr);
+sint On_TDLS_Dis_Rsp(_adapter *adapter, union recv_frame *precv_frame);
+sint On_TDLS_Setup_Req(_adapter *adapter, union recv_frame *precv_frame);
+sint On_TDLS_Setup_Rsp(_adapter *adapter, union recv_frame *precv_frame);
+sint On_TDLS_Setup_Cfm(_adapter *adapter, union recv_frame *precv_frame);
+sint On_TDLS_Dis_Req(_adapter *adapter, union recv_frame *precv_frame);
+sint On_TDLS_Teardown(_adapter *adapter, union recv_frame *precv_frame);
+sint On_TDLS_Peer_Traffic_Rsp(_adapter *adapter, union recv_frame *precv_frame);
+sint On_TDLS_Ch_Switch_Req(_adapter *adapter, union recv_frame *precv_frame);
+sint On_TDLS_Ch_Switch_Rsp(_adapter *adapter, union recv_frame *precv_frame);
+void rtw_build_tdls_setup_req_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe);
+void rtw_build_tdls_setup_rsp_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe);
+void rtw_build_tdls_setup_cfm_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe);
+void rtw_build_tdls_teardown_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe);
+void rtw_build_tdls_dis_req_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe);
+void rtw_build_tdls_dis_rsp_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe, u8 dialog);
+void rtw_build_tdls_peer_traffic_indication_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe);
+void rtw_build_tdls_ch_switch_req_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe);
+void rtw_build_tdls_ch_switch_rsp_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe);
+void rtw_build_tunneled_probe_req_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe);
+void rtw_build_tunneled_probe_rsp_ies(_adapter * padapter, struct xmit_frame * pxmitframe, u8 *pframe);
+
+int update_sgi_tdls(_adapter *padapter, struct sta_info *psta);
+u32 update_mask_tdls(_adapter *padapter, struct sta_info *psta);
+#endif //CONFIG_TDLS
+
+#endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtw_version.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtw_version.h
new file mode 100644 (file)
index 0000000..4fb9dd4
--- /dev/null
@@ -0,0 +1 @@
+#define DRIVERVERSION  "v4.0.2_9000.20130911"
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/rtw_xmit.h b/drivers/net/wireless/realtek/rtl8192cu/include/rtw_xmit.h
new file mode 100644 (file)
index 0000000..11c67c4
--- /dev/null
@@ -0,0 +1,753 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef _RTW_XMIT_H_
+#define _RTW_XMIT_H_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+#ifdef PLATFORM_FREEBSD
+#include <if_ether.h>
+#endif //PLATFORM_FREEBSD
+
+#ifdef CONFIG_SDIO_HCI
+//#define MAX_XMITBUF_SZ (30720)//     (2048)
+#define MAX_XMITBUF_SZ (12288)
+#define NR_XMITBUFF    (16)
+
+#elif defined (CONFIG_USB_HCI)
+#ifdef CONFIG_USB_TX_AGGREGATION
+       #if defined(CONFIG_PLATFORM_ARM_SUNxI) || defined(CONFIG_PLATFORM_ARM_SUN6I)
+               #define MAX_XMITBUF_SZ (12288)  //12k 1536*8
+       #elif defined (CONFIG_PLATFORM_MSTAR)
+               #define MAX_XMITBUF_SZ  7680    // 7.5k
+       #else
+               #define MAX_XMITBUF_SZ  (20480) // 20k
+       #endif
+#else
+#define MAX_XMITBUF_SZ (2048)
+#endif //CONFIG_USB_TX_AGGREGATION
+#ifdef CONFIG_SINGLE_XMIT_BUF
+#define NR_XMITBUFF    (1)
+#else
+#define NR_XMITBUFF    (4)
+#endif //CONFIG_SINGLE_XMIT_BUF
+
+#elif defined (CONFIG_PCI_HCI)
+#define MAX_XMITBUF_SZ (1664)
+#define NR_XMITBUFF    (128)
+#endif
+
+#ifdef PLATFORM_OS_CE
+#define XMITBUF_ALIGN_SZ 4
+#else
+#ifdef CONFIG_PCI_HCI
+#define XMITBUF_ALIGN_SZ 4
+#else
+#define XMITBUF_ALIGN_SZ 512
+#endif
+#endif
+
+// xmit extension buff defination
+#define MAX_XMIT_EXTBUF_SZ     (1536)
+#ifdef CONFIG_SINGLE_XMIT_BUF
+#define NR_XMIT_EXTBUFF        (1)
+#else
+#define NR_XMIT_EXTBUFF        (32)
+#endif //CONFIG_SINGLE_XMIT_BUF
+
+#define MAX_NUMBLKS            (1)
+
+#define XMIT_VO_QUEUE (0)
+#define XMIT_VI_QUEUE (1)
+#define XMIT_BE_QUEUE (2)
+#define XMIT_BK_QUEUE (3)
+
+#define VO_QUEUE_INX           0
+#define VI_QUEUE_INX           1
+#define BE_QUEUE_INX           2
+#define BK_QUEUE_INX           3
+#define BCN_QUEUE_INX          4
+#define MGT_QUEUE_INX          5
+#define HIGH_QUEUE_INX         6
+#define TXCMD_QUEUE_INX        7
+
+#define HW_QUEUE_ENTRY 8
+
+#ifdef CONFIG_PCI_HCI
+//#define TXDESC_NUM                                           64
+#define TXDESC_NUM                                             128
+#define TXDESC_NUM_BE_QUEUE                    128
+#endif
+
+#define WEP_IV(pattrib_iv, dot11txpn, keyidx)\
+do{\
+       pattrib_iv[0] = dot11txpn._byte_.TSC0;\
+       pattrib_iv[1] = dot11txpn._byte_.TSC1;\
+       pattrib_iv[2] = dot11txpn._byte_.TSC2;\
+       pattrib_iv[3] = ((keyidx & 0x3)<<6);\
+       dot11txpn.val = (dot11txpn.val == 0xffffff) ? 0: (dot11txpn.val+1);\
+}while(0)
+
+
+#define TKIP_IV(pattrib_iv, dot11txpn, keyidx)\
+do{\
+       pattrib_iv[0] = dot11txpn._byte_.TSC1;\
+       pattrib_iv[1] = (dot11txpn._byte_.TSC1 | 0x20) & 0x7f;\
+       pattrib_iv[2] = dot11txpn._byte_.TSC0;\
+       pattrib_iv[3] = BIT(5) | ((keyidx & 0x3)<<6);\
+       pattrib_iv[4] = dot11txpn._byte_.TSC2;\
+       pattrib_iv[5] = dot11txpn._byte_.TSC3;\
+       pattrib_iv[6] = dot11txpn._byte_.TSC4;\
+       pattrib_iv[7] = dot11txpn._byte_.TSC5;\
+       dot11txpn.val = dot11txpn.val == 0xffffffffffffULL ? 0: (dot11txpn.val+1);\
+}while(0)
+
+#define AES_IV(pattrib_iv, dot11txpn, keyidx)\
+do{\
+       pattrib_iv[0] = dot11txpn._byte_.TSC0;\
+       pattrib_iv[1] = dot11txpn._byte_.TSC1;\
+       pattrib_iv[2] = 0;\
+       pattrib_iv[3] = BIT(5) | ((keyidx & 0x3)<<6);\
+       pattrib_iv[4] = dot11txpn._byte_.TSC2;\
+       pattrib_iv[5] = dot11txpn._byte_.TSC3;\
+       pattrib_iv[6] = dot11txpn._byte_.TSC4;\
+       pattrib_iv[7] = dot11txpn._byte_.TSC5;\
+       dot11txpn.val = dot11txpn.val == 0xffffffffffffULL ? 0: (dot11txpn.val+1);\
+}while(0)
+
+
+#define HWXMIT_ENTRY   4
+
+#define TXDESC_SIZE 32
+
+#ifdef CONFIG_SDIO_HCI
+#define TXDESC_OFFSET TXDESC_SIZE
+#endif
+
+#ifdef CONFIG_USB_HCI
+#define PACKET_OFFSET_SZ (8)
+#define TXDESC_OFFSET (TXDESC_SIZE + PACKET_OFFSET_SZ)
+#endif
+
+#ifdef CONFIG_PCI_HCI
+#define TXDESC_OFFSET 0
+#define TX_DESC_NEXT_DESC_OFFSET       40
+#endif
+
+//
+//defined for TX DESC Operation
+//
+
+#define MAX_TID (15)
+
+//OFFSET 0
+#define OFFSET_SZ      0
+#define OFFSET_SHT     16
+#define BMC            BIT(24)
+#define LSG            BIT(26)
+#define FSG            BIT(27)
+#define OWN            BIT(31)
+
+//OFFSET 4
+#define PKT_OFFSET_SZ  0
+#define BK             BIT(6)
+#define QSEL_SHT       8
+#define Rate_ID_SHT    16
+#define NAVUSEHDR      BIT(20)
+#define PKT_OFFSET_SHT 26
+#define HWPC           BIT(31)
+
+//OFFSET 8
+#define AGG_EN         BIT(29)
+
+//OFFSET 12
+#define SEQ_SHT                16
+
+//OFFSET 16
+#define QoS            BIT(6)
+#define HW_SEQ_EN      BIT(7)
+#define USERATE                BIT(8)
+#define DISDATAFB      BIT(10)
+#define DATA_SHORT     BIT(24)
+#define DATA_BW                BIT(25)
+
+//OFFSET 20
+#define SGI            BIT(6)
+
+struct tx_desc{
+
+       //DWORD 0
+       unsigned int txdw0;
+
+       unsigned int txdw1;
+
+       unsigned int txdw2;
+
+       unsigned int txdw3;
+
+       unsigned int txdw4;
+
+       unsigned int txdw5;
+
+       unsigned int txdw6;
+
+       unsigned int txdw7;
+#ifdef CONFIG_PCI_HCI
+       unsigned int txdw8;
+
+       unsigned int txdw9;
+
+       unsigned int txdw10;
+
+       unsigned int txdw11;
+
+       // 2008/05/15 MH Because PCIE HW memory R/W 4K limit. And now,  our descriptor
+       // size is 40 bytes. If you use more than 102 descriptor( 103*40>4096), HW will execute
+       // memoryR/W CRC error. And then all DMA fetch will fail. We must decrease descriptor
+       // number or enlarge descriptor size as 64 bytes.
+       unsigned int txdw12;
+
+       unsigned int txdw13;
+
+       unsigned int txdw14;
+
+       unsigned int txdw15;
+#endif
+};
+
+
+union txdesc {
+       struct tx_desc txdesc;
+       unsigned int value[TXDESC_SIZE>>2];
+};
+
+#ifdef CONFIG_PCI_HCI
+#define PCI_MAX_TX_QUEUE_COUNT 8
+
+struct rtw_tx_ring {
+       struct tx_desc  *desc;
+       dma_addr_t              dma;
+       unsigned int            idx;
+       unsigned int            entries;
+       _queue                  queue;
+       u32                             qlen;
+};
+#endif
+
+struct hw_xmit {
+       //_lock xmit_lock;
+       //_list pending;
+       _queue *sta_queue;
+       //struct hw_txqueue *phwtxqueue;
+       //sint  txcmdcnt;
+       int     accnt;
+};
+
+#if 0
+struct pkt_attrib
+{
+       u8      type;
+       u8      subtype;
+       u8      bswenc;
+       u8      dhcp_pkt;
+       u16     ether_type;
+       int     pktlen;         //the original 802.3 pkt raw_data len (not include ether_hdr data)
+       int     pkt_hdrlen;     //the original 802.3 pkt header len
+       int     hdrlen;         //the WLAN Header Len
+       int     nr_frags;
+       int     last_txcmdsz;
+       int     encrypt;        //when 0 indicate no encrypt. when non-zero, indicate the encrypt algorith
+       u8      iv[8];
+       int     iv_len;
+       u8      icv[8];
+       int     icv_len;
+       int     priority;
+       int     ack_policy;
+       int     mac_id;
+       int     vcs_mode;       //virtual carrier sense method
+
+       u8      dst[ETH_ALEN];
+       u8      src[ETH_ALEN];
+       u8      ta[ETH_ALEN];
+       u8      ra[ETH_ALEN];
+
+       u8      key_idx;
+
+       u8      qos_en;
+       u8      ht_en;
+       u8      raid;//rate adpative id
+       u8      bwmode;
+       u8      ch_offset;//PRIME_CHNL_OFFSET
+       u8      sgi;//short GI
+       u8      ampdu_en;//tx ampdu enable
+       u8      mdata;//more data bit
+       u8      eosp;
+
+       u8      pctrl;//per packet txdesc control enable
+       u8      triggered;//for ap mode handling Power Saving sta
+
+       u32     qsel;
+       u16     seqnum;
+
+       struct sta_info * psta;
+#ifdef CONFIG_TCP_CSUM_OFFLOAD_TX
+       u8      hw_tcp_csum;
+#endif
+};
+#else
+//reduce size
+struct pkt_attrib
+{
+       u8      type;
+       u8      subtype;
+       u8      bswenc;
+       u8      dhcp_pkt;
+       u16     ether_type;
+       u16     seqnum;
+       u16     pkt_hdrlen;     //the original 802.3 pkt header len
+       u16     hdrlen;         //the WLAN Header Len
+       u32     pktlen;         //the original 802.3 pkt raw_data len (not include ether_hdr data)
+       u32     last_txcmdsz;
+       u8      nr_frags;
+       u8      encrypt;        //when 0 indicate no encrypt. when non-zero, indicate the encrypt algorith
+       u8      iv_len;
+       u8      icv_len;
+       u8      iv[8];
+       u8      icv[8];
+       u8      priority;
+       u8      ack_policy;
+       u8      mac_id;
+       u8      vcs_mode;       //virtual carrier sense method
+       u8      dst[ETH_ALEN];
+       u8      src[ETH_ALEN];
+       u8      ta[ETH_ALEN];
+       u8      ra[ETH_ALEN];
+       u8      key_idx;
+       u8      qos_en;
+       u8      ht_en;
+       u8      raid;//rate adpative id
+       u8      bwmode;
+       u8      ch_offset;//PRIME_CHNL_OFFSET
+       u8      sgi;//short GI
+       u8      ampdu_en;//tx ampdu enable
+       u8      mdata;//more data bit
+       u8      pctrl;//per packet txdesc control enable
+       u8      triggered;//for ap mode handling Power Saving sta
+       u8      qsel;
+       u8      eosp;
+       u8      rate;
+       u8      intel_proxim;
+       u8      retry_ctrl;
+       struct sta_info * psta;
+#ifdef CONFIG_TCP_CSUM_OFFLOAD_TX
+       u8      hw_tcp_csum;
+#endif
+       union Keytype   dot11tkiptxmickey;
+       //union Keytype dot11tkiprxmickey;
+       union Keytype   dot118021x_UncstKey;
+};
+#endif
+
+#ifdef PLATFORM_FREEBSD
+#define ETH_ALEN       6               /* Octets in one ethernet addr   */
+#define ETH_HLEN       14              /* Total octets in header.       */
+#define ETH_P_IP       0x0800          /* Internet Protocol packet     */
+
+/*struct rtw_ieee80211_hdr {
+       uint16_t frame_control;
+       uint16_t duration_id;
+       u8 addr1[6];
+       u8 addr2[6];
+       u8 addr3[6];
+       uint16_t seq_ctrl;
+       u8 addr4[6];
+} ;*/
+#endif //PLATFORM_FREEBSD
+
+#define WLANHDR_OFFSET 64
+
+#define NULL_FRAMETAG          (0x0)
+#define DATA_FRAMETAG          0x01
+#define L2_FRAMETAG            0x02
+#define MGNT_FRAMETAG          0x03
+#define AMSDU_FRAMETAG 0x04
+
+#define EII_FRAMETAG           0x05
+#define IEEE8023_FRAMETAG  0x06
+
+#define MP_FRAMETAG            0x07
+
+#define TXAGG_FRAMETAG         0x08
+
+struct  submit_ctx{
+       u32 submit_time; /* */
+       u32 timeout_ms; /* <0: not synchronous, 0: wait forever, >0: up to ms waiting */
+       int status; /* status for operation */
+#ifdef PLATFORM_LINUX
+       struct completion done;
+#endif
+};
+
+enum {
+       RTW_SCTX_SUBMITTED = -1,
+       RTW_SCTX_DONE_SUCCESS = 0,
+       RTW_SCTX_DONE_UNKNOWN,
+       RTW_SCTX_DONE_TIMEOUT,
+       RTW_SCTX_DONE_BUF_ALLOC,
+       RTW_SCTX_DONE_BUF_FREE,
+       RTW_SCTX_DONE_WRITE_PORT_ERR,
+       RTW_SCTX_DONE_TX_DESC_NA,
+       RTW_SCTX_DONE_TX_DENY,
+       RTW_SCTX_DONE_CCX_PKT_FAIL,
+       RTW_SCTX_DONE_DRV_STOP,
+       RTW_SCTX_DONE_DEV_REMOVE,
+};
+
+
+void rtw_sctx_init(struct submit_ctx *sctx, int timeout_ms);
+int rtw_sctx_wait(struct submit_ctx *sctx);
+void rtw_sctx_done_err(struct submit_ctx **sctx, int status);
+void rtw_sctx_done(struct submit_ctx **sctx);
+
+struct xmit_buf
+{
+       _list   list;
+
+       _adapter *padapter;
+
+       u8 *pallocated_buf;
+
+       u8 *pbuf;
+
+       void *priv_data;
+
+       u16 ext_tag; // 0: Normal xmitbuf, 1: extension xmitbuf.
+       u16 flags;
+       u32 alloc_sz;
+
+       struct submit_ctx *sctx;
+
+#ifdef CONFIG_USB_HCI
+
+       u32 sz[8];
+
+#if defined(PLATFORM_OS_XP)||defined(PLATFORM_LINUX) || defined(PLATFORM_FREEBSD)
+       PURB    pxmit_urb[8];
+       dma_addr_t dma_transfer_addr;   /* (in) dma addr for transfer_buffer */
+#endif
+
+#ifdef PLATFORM_OS_XP
+       PIRP            pxmit_irp[8];
+#endif
+
+#ifdef PLATFORM_OS_CE
+       USB_TRANSFER    usb_transfer_write_port;
+#endif
+
+       u8 bpending[8];
+
+       sint last[8];
+
+#endif
+
+#ifdef CONFIG_SDIO_HCI
+       u32  len;
+       u8 *phead;
+       u8 *pdata;
+       u8 *ptail;
+       u8 *pend;
+       u32 ff_hwaddr;
+#ifdef PLATFORM_OS_XP
+       PMDL pxmitbuf_mdl;
+       PIRP  pxmitbuf_irp;
+       PSDBUS_REQUEST_PACKET pxmitbuf_sdrp;
+#endif
+#endif
+
+#ifdef CONFIG_PCI_HCI
+       u32  len;
+#endif
+
+#ifdef DBG_XMIT_BUF
+       u8 no;
+#endif
+
+};
+
+struct xmit_frame
+{
+       _list   list;
+
+       struct pkt_attrib attrib;
+
+       _pkt *pkt;
+
+       int     frame_tag;
+
+       _adapter *padapter;
+
+       u8      *buf_addr;
+
+       struct xmit_buf *pxmitbuf;
+
+#ifdef CONFIG_SDIO_HCI
+       u8      pg_num;
+       u8      agg_num;
+#endif
+
+#ifdef CONFIG_USB_HCI
+#ifdef CONFIG_USB_TX_AGGREGATION
+       u8      agg_num;
+#endif
+       u8      pkt_offset;
+#ifdef CONFIG_RTL8192D
+       u8      EMPktNum;
+       u16     EMPktLen[5];//The max value by HW
+#endif
+#endif
+#ifdef CONFIG_XMIT_ACK
+       u8 ack_report;
+#endif
+
+       u8 *alloc_addr; /* the actual address this xmitframe allocated */
+       u8 ext_tag; /* 0:data, 1:mgmt */
+
+};
+
+struct tx_servq {
+       _list   tx_pending;
+       _queue  sta_pending;
+       int qcnt;
+};
+
+
+
+struct sta_xmit_priv
+{
+       _lock   lock;
+       sint    option;
+       sint    apsd_setting;   //When bit mask is on, the associated edca queue supports APSD.
+
+
+       //struct tx_servq blk_q[MAX_NUMBLKS];
+       struct tx_servq be_q;                   //priority == 0,3
+       struct tx_servq bk_q;                   //priority == 1,2
+       struct tx_servq vi_q;                   //priority == 4,5
+       struct tx_servq vo_q;                   //priority == 6,7
+       _list   legacy_dz;
+       _list  apsd;
+
+       u16 txseq_tid[16];
+
+       //uint  sta_tx_bytes;
+       //u64   sta_tx_pkts;
+       //uint  sta_tx_fail;
+
+};
+
+
+struct hw_txqueue      {
+       volatile sint   head;
+       volatile sint   tail;
+       volatile sint   free_sz;        //in units of 64 bytes
+       volatile sint      free_cmdsz;
+       volatile sint    txsz[8];
+       uint    ff_hwaddr;
+       uint    cmd_hwaddr;
+       sint    ac_tag;
+};
+
+
+struct xmit_priv       {
+
+       _lock   lock;
+
+       _sema   xmit_sema;
+       _sema   terminate_xmitthread_sema;
+
+       //_queue        blk_strms[MAX_NUMBLKS];
+       _queue  be_pending;
+       _queue  bk_pending;
+       _queue  vi_pending;
+       _queue  vo_pending;
+       _queue  bm_pending;
+
+       //_queue        legacy_dz_queue;
+       //_queue        apsd_queue;
+
+       u8 *pallocated_frame_buf;
+       u8 *pxmit_frame_buf;
+       uint free_xmitframe_cnt;
+       _queue  free_xmit_queue;
+
+       //uint mapping_addr;
+       //uint pkt_sz;
+
+       u8 *xframe_ext_alloc_addr;
+       u8 *xframe_ext;
+       uint free_xframe_ext_cnt;
+       _queue free_xframe_ext_queue;
+
+       //struct        hw_txqueue      be_txqueue;
+       //struct        hw_txqueue      bk_txqueue;
+       //struct        hw_txqueue      vi_txqueue;
+       //struct        hw_txqueue      vo_txqueue;
+       //struct        hw_txqueue      bmc_txqueue;
+
+       uint    frag_len;
+
+       _adapter        *adapter;
+
+       u8   vcs_setting;
+       u8      vcs;
+       u8      vcs_type;
+       //u16  rts_thresh;
+
+       u64     tx_bytes;
+       u64     tx_pkts;
+       u64     tx_drop;
+       u64     last_tx_bytes;
+       u64     last_tx_pkts;
+
+       struct hw_xmit *hwxmits;
+       u8      hwxmit_entry;
+
+#ifdef CONFIG_USB_HCI
+       _sema   tx_retevt;//all tx return event;
+       u8              txirp_cnt;//
+
+#ifdef PLATFORM_OS_CE
+       USB_TRANSFER    usb_transfer_write_port;
+//     USB_TRANSFER    usb_transfer_write_mem;
+#endif
+#ifdef PLATFORM_LINUX
+       struct tasklet_struct xmit_tasklet;
+#endif
+#ifdef PLATFORM_FREEBSD
+       struct task xmit_tasklet;
+#endif
+       //per AC pending irp
+       int beq_cnt;
+       int bkq_cnt;
+       int viq_cnt;
+       int voq_cnt;
+
+#endif
+
+#ifdef CONFIG_PCI_HCI
+       // Tx
+       struct rtw_tx_ring      tx_ring[PCI_MAX_TX_QUEUE_COUNT];
+       int     txringcount[PCI_MAX_TX_QUEUE_COUNT];
+#ifdef PLATFORM_LINUX
+       struct tasklet_struct xmit_tasklet;
+#endif
+#endif
+
+       _queue free_xmitbuf_queue;
+       _queue pending_xmitbuf_queue;
+       u8 *pallocated_xmitbuf;
+       u8 *pxmitbuf;
+       uint free_xmitbuf_cnt;
+
+       _queue free_xmit_extbuf_queue;
+       u8 *pallocated_xmit_extbuf;
+       u8 *pxmit_extbuf;
+       uint free_xmit_extbuf_cnt;
+
+       u16     nqos_ssn;
+
+#ifdef CONFIG_XMIT_ACK
+       int     ack_tx;
+       _mutex ack_tx_mutex;
+       struct submit_ctx ack_tx_ops;
+#endif
+       _lock lock_sctx;
+};
+
+extern struct xmit_buf *rtw_alloc_xmitbuf_ext(struct xmit_priv *pxmitpriv);
+extern s32 rtw_free_xmitbuf_ext(struct xmit_priv *pxmitpriv, struct xmit_buf *pxmitbuf);
+
+extern struct xmit_buf *rtw_alloc_xmitbuf(struct xmit_priv *pxmitpriv);
+extern s32 rtw_free_xmitbuf(struct xmit_priv *pxmitpriv, struct xmit_buf *pxmitbuf);
+
+void rtw_count_tx_stats(_adapter *padapter, struct xmit_frame *pxmitframe, int sz);
+extern void rtw_update_protection(_adapter *padapter, u8 *ie, uint ie_len);
+extern s32 rtw_make_wlanhdr(_adapter *padapter, u8 *hdr, struct pkt_attrib *pattrib);
+extern s32 rtw_put_snap(u8 *data, u16 h_proto);
+
+extern struct xmit_frame *rtw_alloc_xmitframe(struct xmit_priv *pxmitpriv);
+struct xmit_frame *rtw_alloc_xmitframe_ext(struct xmit_priv *pxmitpriv);
+struct xmit_frame *rtw_alloc_xmitframe_once(struct xmit_priv *pxmitpriv);
+extern s32 rtw_free_xmitframe(struct xmit_priv *pxmitpriv, struct xmit_frame *pxmitframe);
+extern void rtw_free_xmitframe_queue(struct xmit_priv *pxmitpriv, _queue *pframequeue);
+struct tx_servq *rtw_get_sta_pending(_adapter *padapter, struct sta_info *psta, sint up, u8 *ac);
+extern s32 rtw_xmitframe_enqueue(_adapter *padapter, struct xmit_frame *pxmitframe);
+extern struct xmit_frame* rtw_dequeue_xframe(struct xmit_priv *pxmitpriv, struct hw_xmit *phwxmit_i, sint entry);
+
+extern s32 rtw_xmit_classifier(_adapter *padapter, struct xmit_frame *pxmitframe);
+extern thread_return rtw_xmit_thread(thread_context context);
+extern u32 rtw_calculate_wlan_pkt_size_by_attribue(struct pkt_attrib *pattrib);
+#define rtw_wlan_pkt_size(f) rtw_calculate_wlan_pkt_size_by_attribue(&f->attrib)
+extern s32 rtw_xmitframe_coalesce(_adapter *padapter, _pkt *pkt, struct xmit_frame *pxmitframe);
+#ifdef CONFIG_IEEE80211W
+extern s32 rtw_mgmt_xmitframe_coalesce(_adapter *padapter, _pkt *pkt, struct xmit_frame *pxmitframe);
+#endif //CONFIG_IEEE80211W
+#ifdef CONFIG_TDLS
+s32 rtw_xmit_tdls_coalesce(_adapter *padapter, struct xmit_frame *pxmitframe, u8 action);
+#endif //CONFIG_TDLS
+s32 _rtw_init_hw_txqueue(struct hw_txqueue* phw_txqueue, u8 ac_tag);
+void _rtw_init_sta_xmit_priv(struct sta_xmit_priv *psta_xmitpriv);
+
+
+s32 rtw_txframes_pending(_adapter *padapter);
+s32 rtw_txframes_sta_ac_pending(_adapter *padapter, struct pkt_attrib *pattrib);
+void rtw_init_hwxmits(struct hw_xmit *phwxmit, sint entry);
+
+
+s32 _rtw_init_xmit_priv(struct xmit_priv *pxmitpriv, _adapter *padapter);
+void _rtw_free_xmit_priv (struct xmit_priv *pxmitpriv);
+
+
+void rtw_alloc_hwxmits(_adapter *padapter);
+void rtw_free_hwxmits(_adapter *padapter);
+
+
+s32 rtw_xmit(_adapter *padapter, _pkt **pkt);
+
+#if defined(CONFIG_AP_MODE) || defined(CONFIG_TDLS)
+sint xmitframe_enqueue_for_sleeping_sta(_adapter *padapter, struct xmit_frame *pxmitframe);
+void stop_sta_xmit(_adapter *padapter, struct sta_info *psta);
+void wakeup_sta_to_xmit(_adapter *padapter, struct sta_info *psta);
+void xmit_delivery_enabled_frames(_adapter *padapter, struct sta_info *psta);
+#endif
+
+u8     qos_acm(u8 acm_mask, u8 priority);
+
+#ifdef CONFIG_XMIT_ACK
+int rtw_ack_tx_wait(struct xmit_priv *pxmitpriv, u32 timeout_ms);
+void rtw_ack_tx_done(struct xmit_priv *pxmitpriv, int status);
+#endif //CONFIG_XMIT_ACK
+
+
+//include after declaring struct xmit_buf, in order to avoid warning
+#include <xmit_osdep.h>
+
+#endif //_RTL871X_XMIT_H_
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/sta_info.h b/drivers/net/wireless/realtek/rtl8192cu/include/sta_info.h
new file mode 100644 (file)
index 0000000..e7e3dc4
--- /dev/null
@@ -0,0 +1,431 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __STA_INFO_H_
+#define __STA_INFO_H_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <wifi.h>
+
+#define IBSS_START_MAC_ID      2
+#define NUM_STA 32
+#define NUM_ACL 16
+
+
+//if mode ==0, then the sta is allowed once the addr is hit.
+//if mode ==1, then the sta is rejected once the addr is non-hit.
+struct rtw_wlan_acl_node {
+        _list                  list;
+        u8       addr[ETH_ALEN];
+        u8       valid;
+};
+
+//mode=0, disable
+//mode=1, accept unless in deny list
+//mode=2, deny unless in accept list
+struct wlan_acl_pool {
+       int mode;
+       int num;
+       struct rtw_wlan_acl_node aclnode[NUM_ACL];
+       _queue  acl_node_q;
+};
+
+typedef struct _RSSI_STA{
+       s32     UndecoratedSmoothedPWDB;
+       s32     UndecoratedSmoothedCCK;
+       s32     UndecoratedSmoothedOFDM;
+       u64     PacketMap;
+       u8      ValidBit;
+}RSSI_STA, *PRSSI_STA;
+
+struct stainfo_stats   {
+
+       u64 rx_mgnt_pkts;
+               u64 rx_beacon_pkts;
+               u64 rx_probereq_pkts;
+               u64 rx_probersp_pkts;
+               u64 rx_probersp_bm_pkts;
+               u64 rx_probersp_uo_pkts;
+       u64 rx_ctrl_pkts;
+       u64 rx_data_pkts;
+
+       u64     last_rx_mgnt_pkts;
+               u64 last_rx_beacon_pkts;
+               u64 last_rx_probereq_pkts;
+               u64 last_rx_probersp_pkts;
+               u64 last_rx_probersp_bm_pkts;
+               u64 last_rx_probersp_uo_pkts;
+       u64     last_rx_ctrl_pkts;
+       u64     last_rx_data_pkts;
+
+       u64     rx_bytes;
+       u64     rx_drops;
+
+       u64     tx_pkts;
+       u64     tx_bytes;
+       u64  tx_drops;
+
+};
+
+#ifdef CONFIG_TDLS
+struct TDLS_PeerKey {
+       u8 kck[16]; /* TPK-KCK */
+       u8 tk[16]; /* TPK-TK; only CCMP will be used */
+} ;
+#endif //CONFIG_TDLS
+
+struct sta_info {
+
+       _lock   lock;
+       _list   list; //free_sta_queue
+       _list   hash_list; //sta_hash
+       //_list asoc_list; //20061114
+       //_list sleep_list;//sleep_q
+       //_list wakeup_list;//wakeup_q
+
+       struct sta_xmit_priv sta_xmitpriv;
+       struct sta_recv_priv sta_recvpriv;
+
+       _queue sleep_q;
+       unsigned int sleepq_len;
+
+       uint state;
+       uint aid;
+       uint mac_id;
+       uint qos_option;
+       u8      hwaddr[ETH_ALEN];
+
+       uint    ieee8021x_blocked;      //0: allowed, 1:blocked
+       uint    dot118021XPrivacy; //aes, tkip...
+       union Keytype   dot11tkiptxmickey;
+       union Keytype   dot11tkiprxmickey;
+       union Keytype   dot118021x_UncstKey;
+       union pn48              dot11txpn;                      // PN48 used for Unicast xmit.
+#ifdef CONFIG_IEEE80211W
+       union pn48              dot11wtxpn;                     // PN48 used for Unicast mgmt xmit.
+#endif //CONFIG_IEEE80211W
+       union pn48              dot11rxpn;                      // PN48 used for Unicast recv.
+
+
+       u8      bssrateset[16];
+       u32     bssratelen;
+       s32  rssi;
+       s32     signal_quality;
+
+       u8      cts2self;
+       u8      rtsen;
+
+       u8      raid;
+       u8      init_rate;
+       u32     ra_mask;
+       struct stainfo_stats sta_stats;
+
+#ifdef CONFIG_TDLS
+       u32     tdls_sta_state;
+       u8      dialog;
+       u8      SNonce[32];
+       u8      ANonce[32];
+       u32     TDLS_PeerKey_Lifetime;
+       u16     TPK_count;
+       _timer  TPK_timer;
+       struct TDLS_PeerKey     tpk;
+       _adapter *padapter;
+       u16     stat_code;
+       u8      off_ch;
+       u16     ch_switch_time;
+       u16     ch_switch_timeout;
+       u8      option;
+       _timer  option_timer;
+       _timer  base_ch_timer;
+       _timer  off_ch_timer;
+
+       _timer handshake_timer;
+       _timer alive_timer1;
+       _timer alive_timer2;
+       u8 timer_flag;
+       u8 alive_count;
+#endif //CONFIG_TDLS
+
+       //for A-MPDU TX, ADDBA timeout check
+       _timer addba_retry_timer;
+
+       //for A-MPDU Rx reordering buffer control
+       struct recv_reorder_ctrl recvreorder_ctrl[16];
+
+       //for A-MPDU Tx
+       //unsigned char         ampdu_txen_bitmap;
+       u16     BA_starting_seqctrl[16];
+
+
+#ifdef CONFIG_80211N_HT
+       struct ht_priv  htpriv;
+#endif
+
+       //Notes:
+       //STA_Mode:
+       //curr_network(mlme_priv/security_priv/qos/ht) + sta_info: (STA & AP) CAP/INFO
+       //scan_q: AP CAP/INFO
+
+       //AP_Mode:
+       //curr_network(mlme_priv/security_priv/qos/ht) : AP CAP/INFO
+       //sta_info: (AP & STA) CAP/INFO
+
+#ifdef CONFIG_AP_MODE
+
+       _list asoc_list;
+       _list auth_list;
+
+       unsigned int expire_to;
+       unsigned int auth_seq;
+       unsigned int authalg;
+       unsigned char chg_txt[128];
+
+       u16 capability;
+       int flags;
+
+       int dot8021xalg;//0:disable, 1:psk, 2:802.1x
+       int wpa_psk;//0:disable, bit(0): WPA, bit(1):WPA2
+       int wpa_group_cipher;
+       int wpa2_group_cipher;
+       int wpa_pairwise_cipher;
+       int wpa2_pairwise_cipher;
+
+       u8 bpairwise_key_installed;
+
+#ifdef CONFIG_NATIVEAP_MLME
+       u8 wpa_ie[32];
+
+       u8 nonerp_set;
+       u8 no_short_slot_time_set;
+       u8 no_short_preamble_set;
+       u8 no_ht_gf_set;
+       u8 no_ht_set;
+       u8 ht_20mhz_set;
+#endif // CONFIG_NATIVEAP_MLME
+
+       unsigned int tx_ra_bitmap;
+       u8 qos_info;
+
+       u8 max_sp_len;
+       u8 uapsd_bk;//BIT(0): Delivery enabled, BIT(1): Trigger enabled
+       u8 uapsd_be;
+       u8 uapsd_vi;
+       u8 uapsd_vo;
+
+       u8 has_legacy_ac;
+       unsigned int sleepq_ac_len;
+
+#ifdef CONFIG_P2P
+       //p2p priv data
+       u8 is_p2p_device;
+       u8 p2p_status_code;
+
+       //p2p client info
+       u8 dev_addr[ETH_ALEN];
+       //u8 iface_addr[ETH_ALEN];//= hwaddr[ETH_ALEN]
+       u8 dev_cap;
+       u16 config_methods;
+       u8 primary_dev_type[8];
+       u8 num_of_secdev_type;
+       u8 secdev_types_list[32];// 32/8 == 4;
+       u16 dev_name_len;
+       u8 dev_name[32];
+#endif //CONFIG_P2P
+
+#ifdef CONFIG_TX_MCAST2UNI
+       u8 under_exist_checking;
+#endif // CONFIG_TX_MCAST2UNI
+
+       u8 keep_alive_trycnt;
+
+#endif // CONFIG_AP_MODE
+
+#ifdef CONFIG_IOCTL_CFG80211
+       u8 *passoc_req;
+       u32 assoc_req_len;
+#endif
+
+       //for DM
+       RSSI_STA         rssi_stat;
+
+        /* To store the sequence number of received management frame */
+       u16 RxMgmtFrameSeqNum;
+};
+
+#define sta_rx_pkts(sta) \
+       (sta->sta_stats.rx_mgnt_pkts \
+       + sta->sta_stats.rx_ctrl_pkts \
+       + sta->sta_stats.rx_data_pkts)
+
+#define sta_last_rx_pkts(sta) \
+       (sta->sta_stats.last_rx_mgnt_pkts \
+       + sta->sta_stats.last_rx_ctrl_pkts \
+       + sta->sta_stats.last_rx_data_pkts)
+
+#define sta_rx_data_pkts(sta) \
+       (sta->sta_stats.rx_data_pkts)
+
+#define sta_last_rx_data_pkts(sta) \
+       (sta->sta_stats.last_rx_data_pkts)
+
+#define sta_rx_mgnt_pkts(sta) \
+       (sta->sta_stats.rx_mgnt_pkts)
+
+#define sta_last_rx_mgnt_pkts(sta) \
+       (sta->sta_stats.last_rx_mgnt_pkts)
+
+#define sta_rx_beacon_pkts(sta) \
+       (sta->sta_stats.rx_beacon_pkts)
+
+#define sta_last_rx_beacon_pkts(sta) \
+       (sta->sta_stats.last_rx_beacon_pkts)
+
+#define sta_rx_probereq_pkts(sta) \
+       (sta->sta_stats.rx_probereq_pkts)
+
+#define sta_last_rx_probereq_pkts(sta) \
+       (sta->sta_stats.last_rx_probereq_pkts)
+
+#define sta_rx_probersp_pkts(sta) \
+       (sta->sta_stats.rx_probersp_pkts)
+
+#define sta_last_rx_probersp_pkts(sta) \
+       (sta->sta_stats.last_rx_probersp_pkts)
+
+#define sta_rx_probersp_bm_pkts(sta) \
+       (sta->sta_stats.rx_probersp_bm_pkts)
+
+#define sta_last_rx_probersp_bm_pkts(sta) \
+       (sta->sta_stats.last_rx_probersp_bm_pkts)
+
+#define sta_rx_probersp_uo_pkts(sta) \
+       (sta->sta_stats.rx_probersp_uo_pkts)
+
+#define sta_last_rx_probersp_uo_pkts(sta) \
+       (sta->sta_stats.last_rx_probersp_uo_pkts)
+
+#define sta_update_last_rx_pkts(sta) \
+       do { \
+               sta->sta_stats.last_rx_mgnt_pkts = sta->sta_stats.rx_mgnt_pkts; \
+               sta->sta_stats.last_rx_beacon_pkts = sta->sta_stats.rx_beacon_pkts; \
+               sta->sta_stats.last_rx_probereq_pkts = sta->sta_stats.rx_probereq_pkts; \
+               sta->sta_stats.last_rx_probersp_pkts = sta->sta_stats.rx_probersp_pkts; \
+               sta->sta_stats.last_rx_probersp_bm_pkts = sta->sta_stats.rx_probersp_bm_pkts; \
+               sta->sta_stats.last_rx_probersp_uo_pkts = sta->sta_stats.rx_probersp_uo_pkts; \
+               sta->sta_stats.last_rx_ctrl_pkts = sta->sta_stats.rx_ctrl_pkts; \
+               sta->sta_stats.last_rx_data_pkts = sta->sta_stats.rx_data_pkts; \
+       } while(0)
+
+#define STA_RX_PKTS_ARG(sta) \
+       sta->sta_stats.rx_mgnt_pkts \
+       , sta->sta_stats.rx_ctrl_pkts \
+       , sta->sta_stats.rx_data_pkts
+
+#define STA_LAST_RX_PKTS_ARG(sta) \
+       sta->sta_stats.last_rx_mgnt_pkts \
+       , sta->sta_stats.last_rx_ctrl_pkts \
+       , sta->sta_stats.last_rx_data_pkts
+
+#define STA_RX_PKTS_DIFF_ARG(sta) \
+       sta->sta_stats.rx_mgnt_pkts - sta->sta_stats.last_rx_mgnt_pkts \
+       , sta->sta_stats.rx_ctrl_pkts - sta->sta_stats.last_rx_ctrl_pkts \
+       , sta->sta_stats.rx_data_pkts -sta->sta_stats.last_rx_data_pkts
+
+#define STA_PKTS_FMT "(m:%llu, c:%llu, d:%llu)"
+
+struct sta_priv {
+
+       u8 *pallocated_stainfo_buf;
+       u8 *pstainfo_buf;
+       _queue  free_sta_queue;
+
+       _lock sta_hash_lock;
+       _list   sta_hash[NUM_STA];
+       int asoc_sta_count;
+       _queue sleep_q;
+       _queue wakeup_q;
+
+       _adapter *padapter;
+
+
+#ifdef CONFIG_AP_MODE
+       _list asoc_list;
+       _list auth_list;
+       _lock asoc_list_lock;
+       _lock auth_list_lock;
+       u8 asoc_list_cnt;
+       u8 auth_list_cnt;
+
+       unsigned int auth_to;  //sec, time to expire in authenticating.
+       unsigned int assoc_to; //sec, time to expire before associating.
+       unsigned int expire_to; //sec , time to expire after associated.
+
+       /* pointers to STA info; based on allocated AID or NULL if AID free
+        * AID is in the range 1-2007, so sta_aid[0] corresponders to AID 1
+        * and so on
+        */
+       struct sta_info *sta_aid[NUM_STA];
+
+       u16 sta_dz_bitmap;//only support 15 stations, staion aid bitmap for sleeping sta.
+       u16 tim_bitmap;//only support 15 stations, aid=0~15 mapping bit0~bit15
+
+       u16 max_num_sta;
+
+       struct wlan_acl_pool acl_list;
+#endif
+
+};
+
+
+__inline static u32 wifi_mac_hash(u8 *mac)
+{
+        u32 x;
+
+        x = mac[0];
+        x = (x << 2) ^ mac[1];
+        x = (x << 2) ^ mac[2];
+        x = (x << 2) ^ mac[3];
+        x = (x << 2) ^ mac[4];
+        x = (x << 2) ^ mac[5];
+
+        x ^= x >> 8;
+        x  = x & (NUM_STA - 1);
+
+        return x;
+}
+
+
+extern u32     _rtw_init_sta_priv(struct sta_priv *pstapriv);
+extern u32     _rtw_free_sta_priv(struct sta_priv *pstapriv);
+
+#define stainfo_offset_valid(offset) (offset < NUM_STA && offset >= 0)
+int rtw_stainfo_offset(struct sta_priv *stapriv, struct sta_info *sta);
+struct sta_info *rtw_get_stainfo_by_offset(struct sta_priv *stapriv, int offset);
+
+extern struct sta_info *rtw_alloc_stainfo(struct       sta_priv *pstapriv, u8 *hwaddr);
+extern u32     rtw_free_stainfo(_adapter *padapter , struct sta_info *psta);
+extern void rtw_free_all_stainfo(_adapter *padapter);
+extern struct sta_info *rtw_get_stainfo(struct sta_priv *pstapriv, u8 *hwaddr);
+extern u32 rtw_init_bcmc_stainfo(_adapter* padapter);
+extern struct sta_info* rtw_get_bcmc_stainfo(_adapter* padapter);
+extern u8 rtw_access_ctrl(_adapter *padapter, u8 *mac_addr);
+
+#endif //_STA_INFO_H_
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/usb_hal.h b/drivers/net/wireless/realtek/rtl8192cu/include/usb_hal.h
new file mode 100644 (file)
index 0000000..ff29ea8
--- /dev/null
@@ -0,0 +1,36 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __USB_HAL_H__
+#define __USB_HAL_H__
+
+
+void rtl8192cu_set_hal_ops(_adapter * padapter);
+
+void rtl8192du_set_hal_ops(_adapter * padapter);
+#ifdef CONFIG_INTEL_PROXIM
+extern _adapter  *rtw_usb_get_sw_pointer(void);
+#endif //CONFIG_INTEL_PROXIM
+#ifdef CONFIG_WOWLAN
+#ifdef CONFIG_WOWLAN_MANUAL
+extern int rtw_suspend_toshiba(PADAPTER Adapter);
+extern int rtw_resume_toshiba(PADAPTER Adapter);
+#endif // CONFIG_WOWLAN_MANUAL
+#endif //CONFIG_WOWLAN
+#endif //__USB_HAL_H__
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/usb_ops.h b/drivers/net/wireless/realtek/rtl8192cu/include/usb_ops.h
new file mode 100644 (file)
index 0000000..3160fc9
--- /dev/null
@@ -0,0 +1,109 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __USB_OPS_H_
+#define __USB_OPS_H_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <osdep_intf.h>
+
+#define REALTEK_USB_VENQT_READ         0xC0
+#define REALTEK_USB_VENQT_WRITE                0x40
+#define REALTEK_USB_VENQT_CMD_REQ      0x05
+#define REALTEK_USB_VENQT_CMD_IDX      0x00
+
+enum{
+       VENDOR_WRITE = 0x00,
+       VENDOR_READ = 0x01,
+};
+#define ALIGNMENT_UNIT                         16
+#define MAX_VENDOR_REQ_CMD_SIZE        254             //8188cu SIE Support
+#define MAX_USB_IO_CTL_SIZE            (MAX_VENDOR_REQ_CMD_SIZE +ALIGNMENT_UNIT)
+
+#ifdef PLATFORM_LINUX
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,12))
+#define rtw_usb_control_msg(dev, pipe, request, requesttype, value, index, data, size, timeout_ms) \
+       usb_control_msg((dev), (pipe), (request), (requesttype), (value), (index), (data), (size), (timeout_ms))
+#define rtw_usb_bulk_msg(usb_dev, pipe, data, len, actual_length, timeout_ms) \
+       usb_bulk_msg((usb_dev), (pipe), (data), (len), (actual_length), (timeout_ms))
+#else
+#define rtw_usb_control_msg(dev, pipe, request, requesttype, value, index, data, size,timeout_ms) \
+       usb_control_msg((dev), (pipe), (request), (requesttype), (value), (index), (data), (size), \
+               ((timeout_ms) == 0) ||((timeout_ms)*HZ/1000>0)?((timeout_ms)*HZ/1000):1)
+#define rtw_usb_bulk_msg(usb_dev, pipe, data, len, actual_length, timeout_ms) \
+       usb_bulk_msg((usb_dev), (pipe), (data), (len), (actual_length), \
+               ((timeout_ms) == 0) ||((timeout_ms)*HZ/1000>0)?((timeout_ms)*HZ/1000):1)
+#endif
+#include <usb_ops_linux.h>
+#endif //PLATFORM_LINUX
+
+#ifdef CONFIG_RTL8192C
+void rtl8192cu_set_intf_ops(struct _io_ops *pops);
+#define usb_set_intf_ops       rtl8192cu_set_intf_ops
+
+void rtl8192cu_recv_tasklet(void *priv);
+
+void rtl8192cu_xmit_tasklet(void *priv);
+#endif
+
+#ifdef CONFIG_RTL8192D
+void rtl8192du_set_intf_ops(struct _io_ops *pops);
+#define usb_set_intf_ops       rtl8192du_set_intf_ops
+
+#ifndef PLATFORM_FREEBSD
+void rtl8192du_recv_tasklet(void *priv);
+#else  // PLATFORM_FREEBSD
+void rtl8192du_recv_tasklet(void *priv, int npending);
+#ifdef CONFIG_RX_INDICATE_QUEUE
+void rtw_rx_indicate_tasklet(void *priv, int npending);
+#endif // CONFIG_RX_INDICATE_QUEUE
+#endif // PLATFORM_FREEBSD
+
+void rtl8192du_xmit_tasklet(void *priv);
+#endif
+
+/*
+* Increase and check if the continual_urb_error of this @param dvobjprive is larger than MAX_CONTINUAL_URB_ERR
+* @return _TRUE:
+* @return _FALSE:
+*/
+static inline int rtw_inc_and_chk_continual_urb_error(struct dvobj_priv *dvobj)
+{
+       int ret = _FALSE;
+       int value;
+       if( (value=ATOMIC_INC_RETURN(&dvobj->continual_urb_error)) > MAX_CONTINUAL_URB_ERR) {
+               DBG_871X("[dvobj:%p][ERROR] continual_urb_error:%d > %d\n", dvobj, value, MAX_CONTINUAL_URB_ERR);
+               ret = _TRUE;
+       } else {
+               //DBG_871X("[dvobj:%p] continual_urb_error:%d\n", dvobj, value);
+       }
+       return ret;
+}
+
+/*
+* Set the continual_urb_error of this @param dvobjprive to 0
+*/
+static inline void rtw_reset_continual_urb_error(struct dvobj_priv *dvobj)
+{
+       ATOMIC_SET(&dvobj->continual_urb_error, 0);
+}
+
+#endif //__USB_OPS_H_
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/usb_ops_linux.h b/drivers/net/wireless/realtek/rtl8192cu/include/usb_ops_linux.h
new file mode 100644 (file)
index 0000000..d3a5507
--- /dev/null
@@ -0,0 +1,62 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __USB_OPS_LINUX_H__
+#define __USB_OPS_LINUX_H__
+
+#define VENDOR_CMD_MAX_DATA_LEN        254
+
+#define RTW_USB_CONTROL_MSG_TIMEOUT_TEST       10//ms
+#define RTW_USB_CONTROL_MSG_TIMEOUT    500//ms
+
+#if defined(CONFIG_VENDOR_REQ_RETRY) && defined(CONFIG_USB_VENDOR_REQ_MUTEX)
+/* vendor req retry should be in the situation when each vendor req is atomically submitted from others */
+#define MAX_USBCTRL_VENDORREQ_TIMES    10
+#else
+#define MAX_USBCTRL_VENDORREQ_TIMES    1
+#endif
+
+#define RTW_USB_BULKOUT_TIMEOUT        5000//ms
+
+#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,5,0)) || (LINUX_VERSION_CODE > KERNEL_VERSION(2,6,18))
+#define _usbctrl_vendorreq_async_callback(urb, regs)   _usbctrl_vendorreq_async_callback(urb)
+#define usb_bulkout_zero_complete(purb, regs)  usb_bulkout_zero_complete(purb)
+#define usb_write_mem_complete(purb, regs)     usb_write_mem_complete(purb)
+#define usb_write_port_complete(purb, regs)    usb_write_port_complete(purb)
+#define usb_read_port_complete(purb, regs)     usb_read_port_complete(purb)
+#define usb_read_interrupt_complete(purb, regs)        usb_read_interrupt_complete(purb)
+#endif
+
+#ifdef CONFIG_USB_SUPPORT_ASYNC_VDN_REQ
+int usb_async_write8(struct intf_hdl *pintfhdl, u32 addr, u8 val);
+int usb_async_write16(struct intf_hdl *pintfhdl, u32 addr, u16 val);
+int usb_async_write32(struct intf_hdl *pintfhdl, u32 addr, u32 val);
+#endif /* CONFIG_USB_SUPPORT_ASYNC_VDN_REQ */
+
+unsigned int ffaddr2pipehdl(struct dvobj_priv *pdvobj, u32 addr);
+
+void usb_read_mem(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *rmem);
+void usb_write_mem(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *wmem);
+
+void usb_read_port_cancel(struct intf_hdl *pintfhdl);
+
+u32 usb_write_port(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *wmem);
+void usb_write_port_cancel(struct intf_hdl *pintfhdl);
+
+#endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/usb_osintf.h b/drivers/net/wireless/realtek/rtl8192cu/include/usb_osintf.h
new file mode 100644 (file)
index 0000000..6003ebb
--- /dev/null
@@ -0,0 +1,37 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __USB_OSINTF_H
+#define __USB_OSINTF_H
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <usb_vendor_req.h>
+
+#define USBD_HALTED(Status) ((ULONG)(Status) >> 30 == 3)
+
+
+//uint usb_dvobj_init(_adapter * adapter);
+//void usb_dvobj_deinit(_adapter * adapter);
+
+u8 usbvendorrequest(struct dvobj_priv *pdvobjpriv, RT_USB_BREQUEST brequest, RT_USB_WVALUE wvalue, u8 windex, void* data, u8 datalen, u8 isdirectionin);
+
+
+#endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/usb_vendor_req.h b/drivers/net/wireless/realtek/rtl8192cu/include/usb_vendor_req.h
new file mode 100644 (file)
index 0000000..0f67122
--- /dev/null
@@ -0,0 +1,59 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef _USB_VENDOR_REQUEST_H_
+#define _USB_VENDOR_REQUEST_H_
+
+//4    Set/Get Register related wIndex/Data
+#define        RT_USB_RESET_MASK_OFF           0
+#define        RT_USB_RESET_MASK_ON            1
+#define        RT_USB_SLEEP_MASK_OFF           0
+#define        RT_USB_SLEEP_MASK_ON            1
+#define        RT_USB_LDO_ON                           1
+#define        RT_USB_LDO_OFF                          0
+
+//4    Set/Get SYSCLK related  wValue or Data
+#define        RT_USB_SYSCLK_32KHZ             0
+#define        RT_USB_SYSCLK_40MHZ             1
+#define        RT_USB_SYSCLK_60MHZ             2
+
+
+typedef enum _RT_USB_BREQUEST {
+       RT_USB_SET_REGISTER             = 1,
+       RT_USB_SET_SYSCLK               = 2,
+       RT_USB_GET_SYSCLK               = 3,
+       RT_USB_GET_REGISTER             = 4
+} RT_USB_BREQUEST;
+
+
+typedef enum _RT_USB_WVALUE {
+       RT_USB_RESET_MASK       =       1,
+       RT_USB_SLEEP_MASK       =       2,
+       RT_USB_USB_HRCPWM       =       3,
+       RT_USB_LDO                      =       4,
+       RT_USB_BOOT_TYPE        =       5
+} RT_USB_WVALUE;
+
+
+//BOOLEAN usbvendorrequest(PCE_USB_DEVICE      CEdevice, RT_USB_BREQUEST bRequest, RT_USB_WVALUE wValue, UCHAR wIndex, PVOID Data, UCHAR DataLength, BOOLEAN isDirectionIn);
+//BOOLEAN CEusbGetStatusRequest(PCE_USB_DEVICE CEdevice, IN USHORT Op, IN USHORT Index, PVOID Data);
+//BOOLEAN CEusbFeatureRequest(PCE_USB_DEVICE CEdevice, IN USHORT Op, IN USHORT FeatureSelector, IN USHORT Index);
+//BOOLEAN CEusbGetDescriptorRequest(PCE_USB_DEVICE CEdevice, IN short urbLength, IN UCHAR DescriptorType, IN UCHAR Index, IN USHORT LanguageId, IN PVOID  TransferBuffer, IN ULONG TransferBufferLength);
+
+#endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/wifi.h b/drivers/net/wireless/realtek/rtl8192cu/include/wifi.h
new file mode 100644 (file)
index 0000000..1ff400a
--- /dev/null
@@ -0,0 +1,1245 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef _WIFI_H_
+#define _WIFI_H_
+
+#include <rtw_byteorder.h>
+
+#ifdef BIT
+//#error       "BIT define occurred earlier elsewhere!\n"
+#undef BIT
+#endif
+#define BIT(x) (1 << (x))
+
+
+#define WLAN_ETHHDR_LEN                14
+#define WLAN_ETHADDR_LEN       6
+#define WLAN_IEEE_OUI_LEN      3
+#define WLAN_ADDR_LEN          6
+#define WLAN_CRC_LEN           4
+#define WLAN_BSSID_LEN         6
+#define WLAN_BSS_TS_LEN                8
+#define WLAN_HDR_A3_LEN                24
+#define WLAN_HDR_A4_LEN                30
+#define WLAN_HDR_A3_QOS_LEN    26
+#define WLAN_HDR_A4_QOS_LEN    32
+#define WLAN_SSID_MAXLEN       32
+#define WLAN_DATA_MAXLEN       2312
+
+#define WLAN_A3_PN_OFFSET      24
+#define WLAN_A4_PN_OFFSET      30
+
+#define WLAN_MIN_ETHFRM_LEN    60
+#define WLAN_MAX_ETHFRM_LEN    1514
+#define WLAN_ETHHDR_LEN                14
+
+#define P80211CAPTURE_VERSION  0x80211001
+
+#ifdef GREEN_HILL
+#pragma pack(1)
+#endif
+
+enum WIFI_FRAME_TYPE {
+       WIFI_MGT_TYPE  =        (0),
+       WIFI_CTRL_TYPE =        (BIT(2)),
+       WIFI_DATA_TYPE =        (BIT(3)),
+       WIFI_QOS_DATA_TYPE      = (BIT(7)|BIT(3)),      //!< QoS Data
+};
+
+enum WIFI_FRAME_SUBTYPE {
+
+    // below is for mgt frame
+    WIFI_ASSOCREQ       = (0 | WIFI_MGT_TYPE),
+    WIFI_ASSOCRSP       = (BIT(4) | WIFI_MGT_TYPE),
+    WIFI_REASSOCREQ     = (BIT(5) | WIFI_MGT_TYPE),
+    WIFI_REASSOCRSP     = (BIT(5) | BIT(4) | WIFI_MGT_TYPE),
+    WIFI_PROBEREQ       = (BIT(6) | WIFI_MGT_TYPE),
+    WIFI_PROBERSP       = (BIT(6) | BIT(4) | WIFI_MGT_TYPE),
+    WIFI_BEACON         = (BIT(7) | WIFI_MGT_TYPE),
+    WIFI_ATIM           = (BIT(7) | BIT(4) | WIFI_MGT_TYPE),
+    WIFI_DISASSOC       = (BIT(7) | BIT(5) | WIFI_MGT_TYPE),
+    WIFI_AUTH           = (BIT(7) | BIT(5) | BIT(4) | WIFI_MGT_TYPE),
+    WIFI_DEAUTH         = (BIT(7) | BIT(6) | WIFI_MGT_TYPE),
+    WIFI_ACTION         = (BIT(7) | BIT(6) | BIT(4) | WIFI_MGT_TYPE),
+
+    // below is for control frame
+    WIFI_PSPOLL         = (BIT(7) | BIT(5) | WIFI_CTRL_TYPE),
+    WIFI_RTS            = (BIT(7) | BIT(5) | BIT(4) | WIFI_CTRL_TYPE),
+    WIFI_CTS            = (BIT(7) | BIT(6) | WIFI_CTRL_TYPE),
+    WIFI_ACK            = (BIT(7) | BIT(6) | BIT(4) | WIFI_CTRL_TYPE),
+    WIFI_CFEND          = (BIT(7) | BIT(6) | BIT(5) | WIFI_CTRL_TYPE),
+    WIFI_CFEND_CFACK    = (BIT(7) | BIT(6) | BIT(5) | BIT(4) | WIFI_CTRL_TYPE),
+
+    // below is for data frame
+    WIFI_DATA           = (0 | WIFI_DATA_TYPE),
+    WIFI_DATA_CFACK     = (BIT(4) | WIFI_DATA_TYPE),
+    WIFI_DATA_CFPOLL    = (BIT(5) | WIFI_DATA_TYPE),
+    WIFI_DATA_CFACKPOLL = (BIT(5) | BIT(4) | WIFI_DATA_TYPE),
+    WIFI_DATA_NULL      = (BIT(6) | WIFI_DATA_TYPE),
+    WIFI_CF_ACK         = (BIT(6) | BIT(4) | WIFI_DATA_TYPE),
+    WIFI_CF_POLL        = (BIT(6) | BIT(5) | WIFI_DATA_TYPE),
+    WIFI_CF_ACKPOLL     = (BIT(6) | BIT(5) | BIT(4) | WIFI_DATA_TYPE),
+    WIFI_QOS_DATA_NULL = (BIT(6) | WIFI_QOS_DATA_TYPE),
+};
+
+enum WIFI_REASON_CODE  {
+       _RSON_RESERVED_                                 = 0,
+       _RSON_UNSPECIFIED_                              = 1,
+       _RSON_AUTH_NO_LONGER_VALID_             = 2,
+       _RSON_DEAUTH_STA_LEAVING_               = 3,
+       _RSON_INACTIVITY_                               = 4,
+       _RSON_UNABLE_HANDLE_                    = 5,
+       _RSON_CLS2_                                             = 6,
+       _RSON_CLS3_                                             = 7,
+       _RSON_DISAOC_STA_LEAVING_               = 8,
+       _RSON_ASOC_NOT_AUTH_                    = 9,
+
+       // WPA reason
+       _RSON_INVALID_IE_                               = 13,
+       _RSON_MIC_FAILURE_                              = 14,
+       _RSON_4WAY_HNDSHK_TIMEOUT_              = 15,
+       _RSON_GROUP_KEY_UPDATE_TIMEOUT_ = 16,
+       _RSON_DIFF_IE_                                  = 17,
+       _RSON_MLTCST_CIPHER_NOT_VALID_  = 18,
+       _RSON_UNICST_CIPHER_NOT_VALID_  = 19,
+       _RSON_AKMP_NOT_VALID_                   = 20,
+       _RSON_UNSUPPORT_RSNE_VER_               = 21,
+       _RSON_INVALID_RSNE_CAP_                 = 22,
+       _RSON_IEEE_802DOT1X_AUTH_FAIL_  = 23,
+
+       //belowing are Realtek definition
+       _RSON_PMK_NOT_AVAILABLE_                = 24,
+       _RSON_TDLS_TEAR_TOOFAR_                 = 25,
+       _RSON_TDLS_TEAR_UN_RSN_                 = 26,
+};
+
+/* Reason codes (IEEE 802.11-2007, 7.3.1.7, Table 7-22) */
+#if 0
+#define WLAN_REASON_UNSPECIFIED 1
+#define WLAN_REASON_PREV_AUTH_NOT_VALID 2
+#define WLAN_REASON_DEAUTH_LEAVING 3
+#define WLAN_REASON_DISASSOC_DUE_TO_INACTIVITY 4
+#define WLAN_REASON_DISASSOC_AP_BUSY 5
+#define WLAN_REASON_CLASS2_FRAME_FROM_NONAUTH_STA 6
+#define WLAN_REASON_CLASS3_FRAME_FROM_NONASSOC_STA 7
+#define WLAN_REASON_DISASSOC_STA_HAS_LEFT 8
+#define WLAN_REASON_STA_REQ_ASSOC_WITHOUT_AUTH 9
+#endif
+/* IEEE 802.11h */
+#define WLAN_REASON_PWR_CAPABILITY_NOT_VALID 10
+#define WLAN_REASON_SUPPORTED_CHANNEL_NOT_VALID 11
+#if 0
+/* IEEE 802.11i */
+#define WLAN_REASON_INVALID_IE 13
+#define WLAN_REASON_MICHAEL_MIC_FAILURE 14
+#define WLAN_REASON_4WAY_HANDSHAKE_TIMEOUT 15
+#define WLAN_REASON_GROUP_KEY_UPDATE_TIMEOUT 16
+#define WLAN_REASON_IE_IN_4WAY_DIFFERS 17
+#define WLAN_REASON_GROUP_CIPHER_NOT_VALID 18
+#define WLAN_REASON_PAIRWISE_CIPHER_NOT_VALID 19
+#define WLAN_REASON_AKMP_NOT_VALID 20
+#define WLAN_REASON_UNSUPPORTED_RSN_IE_VERSION 21
+#define WLAN_REASON_INVALID_RSN_IE_CAPAB 22
+#define WLAN_REASON_IEEE_802_1X_AUTH_FAILED 23
+#define WLAN_REASON_CIPHER_SUITE_REJECTED 24
+#endif
+
+enum WIFI_STATUS_CODE {
+       _STATS_SUCCESSFUL_                      = 0,
+       _STATS_FAILURE_                         = 1,
+       _STATS_CAP_FAIL_                        = 10,
+       _STATS_NO_ASOC_                         = 11,
+       _STATS_OTHER_                           = 12,
+       _STATS_NO_SUPP_ALG_                     = 13,
+       _STATS_OUT_OF_AUTH_SEQ_         = 14,
+       _STATS_CHALLENGE_FAIL_          = 15,
+       _STATS_AUTH_TIMEOUT_            = 16,
+       _STATS_UNABLE_HANDLE_STA_       = 17,
+       _STATS_RATE_FAIL_                       = 18,
+};
+
+/* Status codes (IEEE 802.11-2007, 7.3.1.9, Table 7-23) */
+#if 0
+#define WLAN_STATUS_SUCCESS 0
+#define WLAN_STATUS_UNSPECIFIED_FAILURE 1
+#define WLAN_STATUS_CAPS_UNSUPPORTED 10
+#define WLAN_STATUS_REASSOC_NO_ASSOC 11
+#define WLAN_STATUS_ASSOC_DENIED_UNSPEC 12
+#define WLAN_STATUS_NOT_SUPPORTED_AUTH_ALG 13
+#define WLAN_STATUS_UNKNOWN_AUTH_TRANSACTION 14
+#define WLAN_STATUS_CHALLENGE_FAIL 15
+#define WLAN_STATUS_AUTH_TIMEOUT 16
+#define WLAN_STATUS_AP_UNABLE_TO_HANDLE_NEW_STA 17
+#define WLAN_STATUS_ASSOC_DENIED_RATES 18
+#endif
+//entended
+/* IEEE 802.11b */
+#define WLAN_STATUS_ASSOC_DENIED_NOSHORT 19
+#define WLAN_STATUS_ASSOC_DENIED_NOPBCC 20
+#define WLAN_STATUS_ASSOC_DENIED_NOAGILITY 21
+/* IEEE 802.11h */
+#define WLAN_STATUS_SPEC_MGMT_REQUIRED 22
+#define WLAN_STATUS_PWR_CAPABILITY_NOT_VALID 23
+#define WLAN_STATUS_SUPPORTED_CHANNEL_NOT_VALID 24
+/* IEEE 802.11g */
+#define WLAN_STATUS_ASSOC_DENIED_NO_SHORT_SLOT_TIME 25
+#define WLAN_STATUS_ASSOC_DENIED_NO_ER_PBCC 26
+#define WLAN_STATUS_ASSOC_DENIED_NO_DSSS_OFDM 27
+/* IEEE 802.11w */
+#define WLAN_STATUS_ASSOC_REJECTED_TEMPORARILY 30
+#define WLAN_STATUS_ROBUST_MGMT_FRAME_POLICY_VIOLATION 31
+/* IEEE 802.11i */
+#define WLAN_STATUS_INVALID_IE 40
+#define WLAN_STATUS_GROUP_CIPHER_NOT_VALID 41
+#define WLAN_STATUS_PAIRWISE_CIPHER_NOT_VALID 42
+#define WLAN_STATUS_AKMP_NOT_VALID 43
+#define WLAN_STATUS_UNSUPPORTED_RSN_IE_VERSION 44
+#define WLAN_STATUS_INVALID_RSN_IE_CAPAB 45
+#define WLAN_STATUS_CIPHER_REJECTED_PER_POLICY 46
+#define WLAN_STATUS_TS_NOT_CREATED 47
+#define WLAN_STATUS_DIRECT_LINK_NOT_ALLOWED 48
+#define WLAN_STATUS_DEST_STA_NOT_PRESENT 49
+#define WLAN_STATUS_DEST_STA_NOT_QOS_STA 50
+#define WLAN_STATUS_ASSOC_DENIED_LISTEN_INT_TOO_LARGE 51
+/* IEEE 802.11r */
+#define WLAN_STATUS_INVALID_FT_ACTION_FRAME_COUNT 52
+#define WLAN_STATUS_INVALID_PMKID 53
+#define WLAN_STATUS_INVALID_MDIE 54
+#define WLAN_STATUS_INVALID_FTIE 55
+
+
+enum WIFI_REG_DOMAIN {
+       DOMAIN_FCC              = 1,
+       DOMAIN_IC               = 2,
+       DOMAIN_ETSI             = 3,
+       DOMAIN_SPAIN    = 4,
+       DOMAIN_FRANCE   = 5,
+       DOMAIN_MKK              = 6,
+       DOMAIN_ISRAEL   = 7,
+       DOMAIN_MKK1             = 8,
+       DOMAIN_MKK2             = 9,
+       DOMAIN_MKK3             = 10,
+       DOMAIN_MAX
+};
+
+#define _TO_DS_                BIT(8)
+#define _FROM_DS_      BIT(9)
+#define _MORE_FRAG_    BIT(10)
+#define _RETRY_                BIT(11)
+#define _PWRMGT_       BIT(12)
+#define _MORE_DATA_    BIT(13)
+#define _PRIVACY_      BIT(14)
+#define _ORDER_                        BIT(15)
+
+#define SetToDs(pbuf)  \
+       do      {       \
+               *(unsigned short *)(pbuf) |= cpu_to_le16(_TO_DS_); \
+       } while(0)
+
+#define GetToDs(pbuf)  (((*(unsigned short *)(pbuf)) & le16_to_cpu(_TO_DS_)) != 0)
+
+#define ClearToDs(pbuf)        \
+       do      {       \
+               *(unsigned short *)(pbuf) &= (~cpu_to_le16(_TO_DS_)); \
+       } while(0)
+
+#define SetFrDs(pbuf)  \
+       do      {       \
+               *(unsigned short *)(pbuf) |= cpu_to_le16(_FROM_DS_); \
+       } while(0)
+
+#define GetFrDs(pbuf)  (((*(unsigned short *)(pbuf)) & le16_to_cpu(_FROM_DS_)) != 0)
+
+#define ClearFrDs(pbuf)        \
+       do      {       \
+               *(unsigned short *)(pbuf) &= (~cpu_to_le16(_FROM_DS_)); \
+       } while(0)
+
+#define get_tofr_ds(pframe)    ((GetToDs(pframe) << 1) | GetFrDs(pframe))
+
+
+#define SetMFrag(pbuf) \
+       do      {       \
+               *(unsigned short *)(pbuf) |= cpu_to_le16(_MORE_FRAG_); \
+       } while(0)
+
+#define GetMFrag(pbuf) (((*(unsigned short *)(pbuf)) & le16_to_cpu(_MORE_FRAG_)) != 0)
+
+#define ClearMFrag(pbuf)       \
+       do      {       \
+               *(unsigned short *)(pbuf) &= (~cpu_to_le16(_MORE_FRAG_)); \
+       } while(0)
+
+#define SetRetry(pbuf) \
+       do      {       \
+               *(unsigned short *)(pbuf) |= cpu_to_le16(_RETRY_); \
+       } while(0)
+
+#define GetRetry(pbuf) (((*(unsigned short *)(pbuf)) & le16_to_cpu(_RETRY_)) != 0)
+
+#define ClearRetry(pbuf)       \
+       do      {       \
+               *(unsigned short *)(pbuf) &= (~cpu_to_le16(_RETRY_)); \
+       } while(0)
+
+#define SetPwrMgt(pbuf)        \
+       do      {       \
+               *(unsigned short *)(pbuf) |= cpu_to_le16(_PWRMGT_); \
+       } while(0)
+
+#define GetPwrMgt(pbuf)        (((*(unsigned short *)(pbuf)) & le16_to_cpu(_PWRMGT_)) != 0)
+
+#define ClearPwrMgt(pbuf)      \
+       do      {       \
+               *(unsigned short *)(pbuf) &= (~cpu_to_le16(_PWRMGT_)); \
+       } while(0)
+
+#define SetMData(pbuf) \
+       do      {       \
+               *(unsigned short *)(pbuf) |= cpu_to_le16(_MORE_DATA_); \
+       } while(0)
+
+#define GetMData(pbuf) (((*(unsigned short *)(pbuf)) & le16_to_cpu(_MORE_DATA_)) != 0)
+
+#define ClearMData(pbuf)       \
+       do      {       \
+               *(unsigned short *)(pbuf) &= (~cpu_to_le16(_MORE_DATA_)); \
+       } while(0)
+
+#define SetPrivacy(pbuf)       \
+       do      {       \
+               *(unsigned short *)(pbuf) |= cpu_to_le16(_PRIVACY_); \
+       } while(0)
+
+#define GetPrivacy(pbuf)       (((*(unsigned short *)(pbuf)) & le16_to_cpu(_PRIVACY_)) != 0)
+
+#define ClearPrivacy(pbuf)     \
+       do      {       \
+               *(unsigned short *)(pbuf) &= (~cpu_to_le16(_PRIVACY_)); \
+       } while(0)
+
+
+#define GetOrder(pbuf) (((*(unsigned short *)(pbuf)) & le16_to_cpu(_ORDER_)) != 0)
+
+#define GetFrameType(pbuf)     (le16_to_cpu(*(unsigned short *)(pbuf)) & (BIT(3) | BIT(2)))
+
+#define SetFrameType(pbuf,type)        \
+       do {    \
+               *(unsigned short *)(pbuf) &= __constant_cpu_to_le16(~(BIT(3) | BIT(2))); \
+               *(unsigned short *)(pbuf) |= __constant_cpu_to_le16(type); \
+       } while(0)
+
+#define GetFrameSubType(pbuf)  (cpu_to_le16(*(unsigned short *)(pbuf)) & (BIT(7) | BIT(6) | BIT(5) | BIT(4) | BIT(3) | BIT(2)))
+
+#define SetFrameSubType(pbuf,type) \
+       do {    \
+               *(unsigned short *)(pbuf) &= cpu_to_le16(~(BIT(7) | BIT(6) | BIT(5) | BIT(4) | BIT(3) | BIT(2))); \
+               *(unsigned short *)(pbuf) |= cpu_to_le16(type); \
+       } while(0)
+
+#define GetSequence(pbuf)      (cpu_to_le16(*(unsigned short *)((SIZE_PTR)(pbuf) + 22)) >> 4)
+
+#define GetFragNum(pbuf)       (cpu_to_le16(*(unsigned short *)((SIZE_PTR)(pbuf) + 22)) & 0x0f)
+
+#define GetTupleCache(pbuf)    (cpu_to_le16(*(unsigned short *)((SIZE_PTR)(pbuf) + 22)))
+
+#define SetFragNum(pbuf, num) \
+       do {    \
+               *(unsigned short *)((SIZE_PTR)(pbuf) + 22) = \
+                       ((*(unsigned short *)((SIZE_PTR)(pbuf) + 22)) & le16_to_cpu(~(0x000f))) | \
+                       cpu_to_le16(0x0f & (num));     \
+       } while(0)
+
+#define SetSeqNum(pbuf, num) \
+       do {    \
+               *(unsigned short *)((SIZE_PTR)(pbuf) + 22) = \
+                       ((*(unsigned short *)((SIZE_PTR)(pbuf) + 22)) & le16_to_cpu((unsigned short)~0xfff0)) | \
+                       le16_to_cpu((unsigned short)(0xfff0 & (num << 4))); \
+       } while(0)
+
+#define SetDuration(pbuf, dur) \
+       do {    \
+               *(unsigned short *)((SIZE_PTR)(pbuf) + 2) = cpu_to_le16(0xffff & (dur)); \
+       } while(0)
+
+
+#define SetPriority(pbuf, tid) \
+       do      {       \
+               *(unsigned short *)(pbuf) |= cpu_to_le16(tid & 0xf); \
+       } while(0)
+
+#define GetPriority(pbuf)      ((le16_to_cpu(*(unsigned short *)(pbuf))) & 0xf)
+
+#define SetEOSP(pbuf, eosp)    \
+       do      {       \
+               *(unsigned short *)(pbuf) |= cpu_to_le16( (eosp & 1) << 4); \
+       } while(0)
+
+#define SetAckpolicy(pbuf, ack)        \
+       do      {       \
+               *(unsigned short *)(pbuf) |= cpu_to_le16( (ack & 3) << 5); \
+       } while(0)
+
+#define GetAckpolicy(pbuf) (((le16_to_cpu(*(unsigned short *)pbuf)) >> 5) & 0x3)
+
+#define GetAMsdu(pbuf) (((le16_to_cpu(*(unsigned short *)pbuf)) >> 7) & 0x1)
+
+#define SetAMsdu(pbuf, amsdu)  \
+       do      {       \
+               *(unsigned short *)(pbuf) |= cpu_to_le16( (amsdu & 1) << 7); \
+       } while(0)
+
+#define GetAid(pbuf)   (cpu_to_le16(*(unsigned short *)((SIZE_PTR)(pbuf) + 2)) & 0x3fff)
+
+#define GetTid(pbuf)   (cpu_to_le16(*(unsigned short *)((SIZE_PTR)(pbuf) + (((GetToDs(pbuf)<<1)|GetFrDs(pbuf))==3?30:24))) & 0x000f)
+
+#define GetAddr1Ptr(pbuf)      ((unsigned char *)((SIZE_PTR)(pbuf) + 4))
+
+#define GetAddr2Ptr(pbuf)      ((unsigned char *)((SIZE_PTR)(pbuf) + 10))
+
+#define GetAddr3Ptr(pbuf)      ((unsigned char *)((SIZE_PTR)(pbuf) + 16))
+
+#define GetAddr4Ptr(pbuf)      ((unsigned char *)((SIZE_PTR)(pbuf) + 24))
+
+#define MacAddr_isBcst(addr) \
+( \
+       ( (addr[0] == 0xff) && (addr[1] == 0xff) && \
+               (addr[2] == 0xff) && (addr[3] == 0xff) && \
+               (addr[4] == 0xff) && (addr[5] == 0xff) )  ? _TRUE : _FALSE \
+)
+
+__inline static int IS_MCAST(unsigned char *da)
+{
+       if ((*da) & 0x01)
+               return _TRUE;
+       else
+               return _FALSE;
+}
+
+
+__inline static unsigned char * get_da(unsigned char *pframe)
+{
+       unsigned char   *da;
+       unsigned int    to_fr_ds        = (GetToDs(pframe) << 1) | GetFrDs(pframe);
+
+       switch (to_fr_ds) {
+               case 0x00:      // ToDs=0, FromDs=0
+                       da = GetAddr1Ptr(pframe);
+                       break;
+               case 0x01:      // ToDs=0, FromDs=1
+                       da = GetAddr1Ptr(pframe);
+                       break;
+               case 0x02:      // ToDs=1, FromDs=0
+                       da = GetAddr3Ptr(pframe);
+                       break;
+               default:        // ToDs=1, FromDs=1
+                       da = GetAddr3Ptr(pframe);
+                       break;
+       }
+
+       return da;
+}
+
+
+__inline static unsigned char * get_sa(unsigned char *pframe)
+{
+       unsigned char   *sa;
+       unsigned int    to_fr_ds        = (GetToDs(pframe) << 1) | GetFrDs(pframe);
+
+       switch (to_fr_ds) {
+               case 0x00:      // ToDs=0, FromDs=0
+                       sa = GetAddr2Ptr(pframe);
+                       break;
+               case 0x01:      // ToDs=0, FromDs=1
+                       sa = GetAddr3Ptr(pframe);
+                       break;
+               case 0x02:      // ToDs=1, FromDs=0
+                       sa = GetAddr2Ptr(pframe);
+                       break;
+               default:        // ToDs=1, FromDs=1
+                       sa = GetAddr4Ptr(pframe);
+                       break;
+       }
+
+       return sa;
+}
+
+__inline static unsigned char * get_hdr_bssid(unsigned char *pframe)
+{
+       unsigned char   *sa;
+       unsigned int    to_fr_ds        = (GetToDs(pframe) << 1) | GetFrDs(pframe);
+
+       switch (to_fr_ds) {
+               case 0x00:      // ToDs=0, FromDs=0
+                       sa = GetAddr3Ptr(pframe);
+                       break;
+               case 0x01:      // ToDs=0, FromDs=1
+                       sa = GetAddr2Ptr(pframe);
+                       break;
+               case 0x02:      // ToDs=1, FromDs=0
+                       sa = GetAddr1Ptr(pframe);
+                       break;
+               case 0x03:      // ToDs=1, FromDs=1
+                       sa = GetAddr1Ptr(pframe);
+                       break;
+               default:
+                       sa =NULL; //???????
+                       break;
+       }
+
+       return sa;
+}
+
+
+__inline static int IsFrameTypeCtrl(unsigned char *pframe)
+{
+       if(WIFI_CTRL_TYPE == GetFrameType(pframe))
+               return _TRUE;
+       else
+               return _FALSE;
+}
+/*-----------------------------------------------------------------------------
+                       Below is for the security related definition
+------------------------------------------------------------------------------*/
+#define _RESERVED_FRAME_TYPE_  0
+#define _SKB_FRAME_TYPE_               2
+#define _PRE_ALLOCMEM_                 1
+#define _PRE_ALLOCHDR_                 3
+#define _PRE_ALLOCLLCHDR_              4
+#define _PRE_ALLOCICVHDR_              5
+#define _PRE_ALLOCMICHDR_              6
+
+#define _SIFSTIME_                             ((priv->pmib->dot11BssType.net_work_type&WIRELESS_11A)?16:10)
+#define _ACKCTSLNG_                            14      //14 bytes long, including crclng
+#define _CRCLNG_                               4
+
+#define _ASOCREQ_IE_OFFSET_            4       // excluding wlan_hdr
+#define        _ASOCRSP_IE_OFFSET_             6
+#define _REASOCREQ_IE_OFFSET_  10
+#define _REASOCRSP_IE_OFFSET_  6
+#define _PROBEREQ_IE_OFFSET_   0
+#define        _PROBERSP_IE_OFFSET_    12
+#define _AUTH_IE_OFFSET_               6
+#define _DEAUTH_IE_OFFSET_             0
+#define _BEACON_IE_OFFSET_             12
+#define _PUBLIC_ACTION_IE_OFFSET_      8
+
+#define _FIXED_IE_LENGTH_                      _BEACON_IE_OFFSET_
+
+#define _SSID_IE_                              0
+#define _SUPPORTEDRATES_IE_    1
+#define _DSSET_IE_                             3
+#define _TIM_IE_                                       5
+#define _IBSS_PARA_IE_                 6
+#define _COUNTRY_IE_                   7
+#define _CHLGETXT_IE_                  16
+#define _POW_CAP_IE_                   33
+#define _SUPPORTED_CH_IE_              36
+#define _CH_SWTICH_ANNOUNCE_   37      //Secondary Channel Offset
+#define _RSN_IE_2_                             48
+#define _SSN_IE_1_                                     221
+#define _ERPINFO_IE_                   42
+#define _EXT_SUPPORTEDRATES_IE_        50
+
+#define _HT_CAPABILITY_IE_                     45
+#define _FTIE_                                         55
+#define _TIMEOUT_ITVL_IE_                      56
+#define _SRC_IE_                               59
+#define _HT_EXTRA_INFO_IE_                     61
+#define _HT_ADD_INFO_IE_                       61 //_HT_EXTRA_INFO_IE_
+
+#define        EID_BSSCoexistence                      72 // 20/40 BSS Coexistence
+#define        EID_BSSIntolerantChlReport      73
+#define _RIC_Descriptor_IE_                    75
+
+#ifdef CONFIG_IEEE80211W
+#define _MME_IE_                                       76 //802.11w Management MIC element
+#endif //CONFIG_IEEE80211W
+#define _LINK_ID_IE_                                   101
+#define _CH_SWITCH_TIMING_             104
+#define _PTI_BUFFER_STATUS_            106
+#define _EXT_CAP_IE_                           127
+#define _VENDOR_SPECIFIC_IE_           221
+
+#define        _RESERVED47_                            47
+
+/* ---------------------------------------------------------------------------
+                                       Below is the fixed elements...
+-----------------------------------------------------------------------------*/
+#define _AUTH_ALGM_NUM_                        2
+#define _AUTH_SEQ_NUM_                 2
+#define _BEACON_ITERVAL_               2
+#define _CAPABILITY_                   2
+#define _CURRENT_APADDR_               6
+#define _LISTEN_INTERVAL_              2
+#define _RSON_CODE_                            2
+#define _ASOC_ID_                              2
+#define _STATUS_CODE_                  2
+#define _TIMESTAMP_                            8
+
+#define AUTH_ODD_TO                            0
+#define AUTH_EVEN_TO                   1
+
+#define WLAN_ETHCONV_ENCAP             1
+#define WLAN_ETHCONV_RFC1042   2
+#define WLAN_ETHCONV_8021h             3
+
+#define cap_ESS BIT(0)
+#define cap_IBSS BIT(1)
+#define cap_CFPollable BIT(2)
+#define cap_CFRequest BIT(3)
+#define cap_Privacy BIT(4)
+#define cap_ShortPremble BIT(5)
+#define cap_PBCC       BIT(6)
+#define cap_ChAgility  BIT(7)
+#define cap_SpecMgmt   BIT(8)
+#define cap_QoS        BIT(9)
+#define cap_ShortSlot  BIT(10)
+
+/*-----------------------------------------------------------------------------
+                               Below is the definition for 802.11i / 802.1x
+------------------------------------------------------------------------------*/
+#define _IEEE8021X_MGT_                        1               // WPA
+#define _IEEE8021X_PSK_                        2               // WPA with pre-shared key
+
+/*
+#define _NO_PRIVACY_                   0
+#define _WEP_40_PRIVACY_               1
+#define _TKIP_PRIVACY_                 2
+#define _WRAP_PRIVACY_                 3
+#define _CCMP_PRIVACY_                 4
+#define _WEP_104_PRIVACY_              5
+#define _WEP_WPA_MIXED_PRIVACY_ 6      // WEP + WPA
+*/
+
+#ifdef CONFIG_IEEE80211W
+#define _MME_IE_LENGTH_  18
+#endif //CONFIG_IEEE80211W
+/*-----------------------------------------------------------------------------
+                               Below is the definition for WMM
+------------------------------------------------------------------------------*/
+#define _WMM_IE_Length_                                7  // for WMM STA
+#define _WMM_Para_Element_Length_              24
+
+
+/*-----------------------------------------------------------------------------
+                               Below is the definition for 802.11n
+------------------------------------------------------------------------------*/
+
+/* block-ack parameters */
+#define IEEE80211_ADDBA_PARAM_POLICY_MASK 0x0002
+#define IEEE80211_ADDBA_PARAM_TID_MASK 0x003C
+#define RTW_IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK 0xFFA0
+#define IEEE80211_DELBA_PARAM_TID_MASK 0xF000
+#define IEEE80211_DELBA_PARAM_INITIATOR_MASK 0x0800
+
+//#ifdef CONFIG_80211N_HT
+
+#define SetOrderBit(pbuf)      \
+       do      {       \
+               *(unsigned short *)(pbuf) |= cpu_to_le16(_ORDER_); \
+       } while(0)
+
+#define GetOrderBit(pbuf)      (((*(unsigned short *)(pbuf)) & le16_to_cpu(_ORDER_)) != 0)
+
+
+/**
+ * struct rtw_ieee80211_bar - HT Block Ack Request
+ *
+ * This structure refers to "HT BlockAckReq" as
+ * described in 802.11n draft section 7.2.1.7.1
+ */
+ #if defined(PLATFORM_LINUX) || defined(CONFIG_RTL8712FW)
+struct rtw_ieee80211_bar {
+       unsigned short frame_control;
+       unsigned short duration;
+       unsigned char ra[6];
+       unsigned char ta[6];
+       unsigned short control;
+       unsigned short start_seq_num;
+} __attribute__((packed));
+ #endif
+
+/* 802.11 BAR control masks */
+#define IEEE80211_BAR_CTRL_ACK_POLICY_NORMAL     0x0000
+#define IEEE80211_BAR_CTRL_CBMTID_COMPRESSED_BA  0x0004
+
+
+ #if defined(PLATFORM_LINUX) || defined(CONFIG_RTL8712FW) || defined(PLATFORM_FREEBSD)
+
+
+
+ /**
+ * struct rtw_ieee80211_ht_cap - HT capabilities
+ *
+ * This structure refers to "HT capabilities element" as
+ * described in 802.11n draft section 7.3.2.52
+ */
+
+struct rtw_ieee80211_ht_cap {
+       unsigned short  cap_info;
+       unsigned char   ampdu_params_info;
+       unsigned char   supp_mcs_set[16];
+       unsigned short  extended_ht_cap_info;
+       unsigned int            tx_BF_cap_info;
+       unsigned char          antenna_selection_info;
+} __attribute__ ((packed));
+
+/**
+ * struct rtw_ieee80211_ht_cap - HT additional information
+ *
+ * This structure refers to "HT information element" as
+ * described in 802.11n draft section 7.3.2.53
+ */
+struct ieee80211_ht_addt_info {
+       unsigned char   control_chan;
+       unsigned char           ht_param;
+       unsigned short  operation_mode;
+       unsigned short  stbc_param;
+       unsigned char           basic_set[16];
+} __attribute__ ((packed));
+
+
+struct HT_caps_element
+{
+       union
+       {
+               struct
+               {
+                       unsigned short  HT_caps_info;
+                       unsigned char   AMPDU_para;
+                       unsigned char   MCS_rate[16];
+                       unsigned short  HT_ext_caps;
+                       unsigned int    Beamforming_caps;
+                       unsigned char   ASEL_caps;
+               } HT_cap_element;
+               unsigned char HT_cap[26];
+       }u;
+} __attribute__ ((packed));
+
+struct HT_info_element
+{
+       unsigned char   primary_channel;
+       unsigned char   infos[5];
+       unsigned char   MCS_rate[16];
+}  __attribute__ ((packed));
+
+struct AC_param
+{
+       unsigned char           ACI_AIFSN;
+       unsigned char           CW;
+       unsigned short  TXOP_limit;
+}  __attribute__ ((packed));
+
+struct WMM_para_element
+{
+       unsigned char           QoS_info;
+       unsigned char           reserved;
+       struct AC_param ac_param[4];
+}  __attribute__ ((packed));
+
+struct ADDBA_request
+{
+       unsigned char           dialog_token;
+       unsigned short  BA_para_set;
+       unsigned short  BA_timeout_value;
+       unsigned short  BA_starting_seqctrl;
+}  __attribute__ ((packed));
+
+
+
+#endif
+
+
+#ifdef PLATFORM_WINDOWS
+
+#pragma pack(1)
+
+struct rtw_ieee80211_ht_cap {
+       unsigned short  cap_info;
+       unsigned char   ampdu_params_info;
+       unsigned char   supp_mcs_set[16];
+       unsigned short  extended_ht_cap_info;
+       unsigned int            tx_BF_cap_info;
+       unsigned char          antenna_selection_info;
+};
+
+
+struct ieee80211_ht_addt_info {
+       unsigned char   control_chan;
+       unsigned char           ht_param;
+       unsigned short  operation_mode;
+       unsigned short  stbc_param;
+       unsigned char           basic_set[16];
+};
+
+struct HT_caps_element
+{
+       union
+       {
+               struct
+               {
+                       unsigned short  HT_caps_info;
+                       unsigned char   AMPDU_para;
+                       unsigned char   MCS_rate[16];
+                       unsigned short  HT_ext_caps;
+                       unsigned int    Beamforming_caps;
+                       unsigned char   ASEL_caps;
+               } HT_cap_element;
+               unsigned char HT_cap[26];
+       };
+};
+
+struct HT_info_element
+{
+       unsigned char   primary_channel;
+       unsigned char   infos[5];
+       unsigned char   MCS_rate[16];
+};
+
+struct AC_param
+{
+       unsigned char           ACI_AIFSN;
+       unsigned char           CW;
+       unsigned short  TXOP_limit;
+};
+
+struct WMM_para_element
+{
+       unsigned char           QoS_info;
+       unsigned char           reserved;
+       struct AC_param ac_param[4];
+};
+
+struct ADDBA_request
+{
+       unsigned char           dialog_token;
+       unsigned short  BA_para_set;
+       unsigned short  BA_timeout_value;
+       unsigned short  BA_starting_seqctrl;
+};
+
+
+#pragma pack()
+
+#endif
+
+
+/* 802.11n HT capabilities masks */
+#define IEEE80211_HT_CAP_SUP_WIDTH             0x0002
+#define IEEE80211_HT_CAP_SM_PS                 0x000C
+#define IEEE80211_HT_CAP_GRN_FLD               0x0010
+#define IEEE80211_HT_CAP_SGI_20                        0x0020
+#define IEEE80211_HT_CAP_SGI_40                        0x0040
+#define IEEE80211_HT_CAP_TX_STBC                       0x0080
+#define IEEE80211_HT_CAP_RX_STBC               0x0300
+#define IEEE80211_HT_CAP_DELAY_BA              0x0400
+#define IEEE80211_HT_CAP_MAX_AMSDU             0x0800
+#define IEEE80211_HT_CAP_DSSSCCK40             0x1000
+/* 802.11n HT capability AMPDU settings */
+#define IEEE80211_HT_CAP_AMPDU_FACTOR          0x03
+#define IEEE80211_HT_CAP_AMPDU_DENSITY         0x1C
+/* 802.11n HT capability MSC set */
+#define IEEE80211_SUPP_MCS_SET_UEQM            4
+#define IEEE80211_HT_CAP_MAX_STREAMS           4
+#define IEEE80211_SUPP_MCS_SET_LEN             10
+/* maximum streams the spec allows */
+#define IEEE80211_HT_CAP_MCS_TX_DEFINED                0x01
+#define IEEE80211_HT_CAP_MCS_TX_RX_DIFF                0x02
+#define IEEE80211_HT_CAP_MCS_TX_STREAMS                0x0C
+#define IEEE80211_HT_CAP_MCS_TX_UEQM           0x10
+/* 802.11n HT IE masks */
+#define IEEE80211_HT_IE_CHA_SEC_OFFSET         0x03
+#define IEEE80211_HT_IE_CHA_SEC_NONE           0x00
+#define IEEE80211_HT_IE_CHA_SEC_ABOVE          0x01
+#define IEEE80211_HT_IE_CHA_SEC_BELOW          0x03
+#define IEEE80211_HT_IE_CHA_WIDTH              0x04
+#define IEEE80211_HT_IE_HT_PROTECTION          0x0003
+#define IEEE80211_HT_IE_NON_GF_STA_PRSNT       0x0004
+#define IEEE80211_HT_IE_NON_HT_STA_PRSNT       0x0010
+
+/* block-ack parameters */
+#define IEEE80211_ADDBA_PARAM_POLICY_MASK 0x0002
+#define IEEE80211_ADDBA_PARAM_TID_MASK 0x003C
+#define RTW_IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK 0xFFA0
+#define IEEE80211_DELBA_PARAM_TID_MASK 0xF000
+#define IEEE80211_DELBA_PARAM_INITIATOR_MASK 0x0800
+
+/*
+ * A-PMDU buffer sizes
+ * According to IEEE802.11n spec size varies from 8K to 64K (in powers of 2)
+ */
+#define IEEE80211_MIN_AMPDU_BUF 0x8
+#define IEEE80211_MAX_AMPDU_BUF 0x40
+
+
+/* Spatial Multiplexing Power Save Modes */
+#define WLAN_HT_CAP_SM_PS_STATIC               0
+#define WLAN_HT_CAP_SM_PS_DYNAMIC      1
+#define WLAN_HT_CAP_SM_PS_INVALID      2
+#define WLAN_HT_CAP_SM_PS_DISABLED     3
+
+
+#define OP_MODE_PURE                    0
+#define OP_MODE_MAY_BE_LEGACY_STAS      1
+#define OP_MODE_20MHZ_HT_STA_ASSOCED    2
+#define OP_MODE_MIXED                   3
+
+#define HT_INFO_HT_PARAM_SECONDARY_CHNL_OFF_MASK       ((u8) BIT(0) | BIT(1))
+#define HT_INFO_HT_PARAM_SECONDARY_CHNL_ABOVE          ((u8) BIT(0))
+#define HT_INFO_HT_PARAM_SECONDARY_CHNL_BELOW          ((u8) BIT(0) | BIT(1))
+#define HT_INFO_HT_PARAM_REC_TRANS_CHNL_WIDTH          ((u8) BIT(2))
+#define HT_INFO_HT_PARAM_RIFS_MODE                     ((u8) BIT(3))
+#define HT_INFO_HT_PARAM_CTRL_ACCESS_ONLY              ((u8) BIT(4))
+#define HT_INFO_HT_PARAM_SRV_INTERVAL_GRANULARITY      ((u8) BIT(5))
+
+#define HT_INFO_OPERATION_MODE_OP_MODE_MASK    \
+               ((u16) (0x0001 | 0x0002))
+#define HT_INFO_OPERATION_MODE_OP_MODE_OFFSET          0
+#define HT_INFO_OPERATION_MODE_NON_GF_DEVS_PRESENT     ((u8) BIT(2))
+#define HT_INFO_OPERATION_MODE_TRANSMIT_BURST_LIMIT    ((u8) BIT(3))
+#define HT_INFO_OPERATION_MODE_NON_HT_STA_PRESENT      ((u8) BIT(4))
+
+#define HT_INFO_STBC_PARAM_DUAL_BEACON                 ((u16) BIT(6))
+#define HT_INFO_STBC_PARAM_DUAL_STBC_PROTECT           ((u16) BIT(7))
+#define HT_INFO_STBC_PARAM_SECONDARY_BCN               ((u16) BIT(8))
+#define HT_INFO_STBC_PARAM_LSIG_TXOP_PROTECT_ALLOWED   ((u16) BIT(9))
+#define HT_INFO_STBC_PARAM_PCO_ACTIVE                  ((u16) BIT(10))
+#define HT_INFO_STBC_PARAM_PCO_PHASE                   ((u16) BIT(11))
+
+
+
+//#endif
+
+//     ===============WPS Section===============
+//     For WPSv1.0
+#define WPSOUI                                                 0x0050f204
+//     WPS attribute ID
+#define WPS_ATTR_VER1                                  0x104A
+#define WPS_ATTR_SIMPLE_CONF_STATE     0x1044
+#define WPS_ATTR_RESP_TYPE                     0x103B
+#define WPS_ATTR_UUID_E                                0x1047
+#define WPS_ATTR_MANUFACTURER          0x1021
+#define WPS_ATTR_MODEL_NAME                    0x1023
+#define WPS_ATTR_MODEL_NUMBER          0x1024
+#define WPS_ATTR_SERIAL_NUMBER         0x1042
+#define WPS_ATTR_PRIMARY_DEV_TYPE      0x1054
+#define WPS_ATTR_SEC_DEV_TYPE_LIST     0x1055
+#define WPS_ATTR_DEVICE_NAME                   0x1011
+#define WPS_ATTR_CONF_METHOD                   0x1008
+#define WPS_ATTR_RF_BANDS                              0x103C
+#define WPS_ATTR_DEVICE_PWID                   0x1012
+#define WPS_ATTR_REQUEST_TYPE                  0x103A
+#define WPS_ATTR_ASSOCIATION_STATE     0x1002
+#define WPS_ATTR_CONFIG_ERROR                  0x1009
+#define WPS_ATTR_VENDOR_EXT                    0x1049
+#define WPS_ATTR_SELECTED_REGISTRAR    0x1041
+
+//     Value of WPS attribute "WPS_ATTR_DEVICE_NAME
+#define WPS_MAX_DEVICE_NAME_LEN                32
+
+//     Value of WPS Request Type Attribute
+#define WPS_REQ_TYPE_ENROLLEE_INFO_ONLY                        0x00
+#define WPS_REQ_TYPE_ENROLLEE_OPEN_8021X               0x01
+#define WPS_REQ_TYPE_REGISTRAR                                 0x02
+#define WPS_REQ_TYPE_WLAN_MANAGER_REGISTRAR    0x03
+
+//     Value of WPS Response Type Attribute
+#define WPS_RESPONSE_TYPE_INFO_ONLY    0x00
+#define WPS_RESPONSE_TYPE_8021X                0x01
+#define WPS_RESPONSE_TYPE_REGISTRAR    0x02
+#define WPS_RESPONSE_TYPE_AP                   0x03
+
+//     Value of WPS WiFi Simple Configuration State Attribute
+#define WPS_WSC_STATE_NOT_CONFIG       0x01
+#define WPS_WSC_STATE_CONFIG                   0x02
+
+//     Value of WPS Version Attribute
+#define WPS_VERSION_1                                  0x10
+
+//     Value of WPS Configuration Method Attribute
+#define WPS_CONFIG_METHOD_FLASH                0x0001
+#define WPS_CONFIG_METHOD_ETHERNET     0x0002
+#define WPS_CONFIG_METHOD_LABEL                0x0004
+#define WPS_CONFIG_METHOD_DISPLAY      0x0008
+#define WPS_CONFIG_METHOD_E_NFC                0x0010
+#define WPS_CONFIG_METHOD_I_NFC                0x0020
+#define WPS_CONFIG_METHOD_NFC          0x0040
+#define WPS_CONFIG_METHOD_PBC          0x0080
+#define WPS_CONFIG_METHOD_KEYPAD       0x0100
+#define WPS_CONFIG_METHOD_VPBC         0x0280
+#define WPS_CONFIG_METHOD_PPBC         0x0480
+#define WPS_CONFIG_METHOD_VDISPLAY     0x2008
+#define WPS_CONFIG_METHOD_PDISPLAY     0x4008
+
+//     Value of Category ID of WPS Primary Device Type Attribute
+#define WPS_PDT_CID_DISPLAYS                   0x0007
+#define WPS_PDT_CID_MULIT_MEDIA                0x0008
+#define WPS_PDT_CID_RTK_WIDI                   WPS_PDT_CID_MULIT_MEDIA
+
+//     Value of Sub Category ID of WPS Primary Device Type Attribute
+#define WPS_PDT_SCID_MEDIA_SERVER      0x0005
+#define WPS_PDT_SCID_RTK_DMP                   WPS_PDT_SCID_MEDIA_SERVER
+
+//     Value of Device Password ID
+#define WPS_DPID_PIN                                   0x0000
+#define WPS_DPID_USER_SPEC                     0x0001
+#define WPS_DPID_MACHINE_SPEC                  0x0002
+#define WPS_DPID_REKEY                                 0x0003
+#define WPS_DPID_PBC                                   0x0004
+#define WPS_DPID_REGISTRAR_SPEC                0x0005
+
+//     Value of WPS RF Bands Attribute
+#define WPS_RF_BANDS_2_4_GHZ           0x01
+#define WPS_RF_BANDS_5_GHZ             0x02
+
+//     Value of WPS Association State Attribute
+#define WPS_ASSOC_STATE_NOT_ASSOCIATED                 0x00
+#define WPS_ASSOC_STATE_CONNECTION_SUCCESS             0x01
+#define WPS_ASSOC_STATE_CONFIGURATION_FAILURE  0x02
+#define WPS_ASSOC_STATE_ASSOCIATION_FAILURE            0x03
+#define WPS_ASSOC_STATE_IP_FAILURE                             0x04
+
+//     =====================P2P Section=====================
+//     For P2P
+#define        P2POUI                                                  0x506F9A09
+
+//     P2P Attribute ID
+#define        P2P_ATTR_STATUS                                 0x00
+#define        P2P_ATTR_MINOR_REASON_CODE              0x01
+#define        P2P_ATTR_CAPABILITY                             0x02
+#define        P2P_ATTR_DEVICE_ID                              0x03
+#define        P2P_ATTR_GO_INTENT                              0x04
+#define        P2P_ATTR_CONF_TIMEOUT                   0x05
+#define        P2P_ATTR_LISTEN_CH                              0x06
+#define        P2P_ATTR_GROUP_BSSID                            0x07
+#define        P2P_ATTR_EX_LISTEN_TIMING               0x08
+#define        P2P_ATTR_INTENTED_IF_ADDR               0x09
+#define        P2P_ATTR_MANAGEABILITY                  0x0A
+#define        P2P_ATTR_CH_LIST                                        0x0B
+#define        P2P_ATTR_NOA                                            0x0C
+#define        P2P_ATTR_DEVICE_INFO                            0x0D
+#define        P2P_ATTR_GROUP_INFO                             0x0E
+#define        P2P_ATTR_GROUP_ID                                       0x0F
+#define        P2P_ATTR_INTERFACE                              0x10
+#define        P2P_ATTR_OPERATING_CH                   0x11
+#define        P2P_ATTR_INVITATION_FLAGS               0x12
+
+//     Value of Status Attribute
+#define        P2P_STATUS_SUCCESS                                              0x00
+#define        P2P_STATUS_FAIL_INFO_UNAVAILABLE                0x01
+#define        P2P_STATUS_FAIL_INCOMPATIBLE_PARAM              0x02
+#define        P2P_STATUS_FAIL_LIMIT_REACHED                   0x03
+#define        P2P_STATUS_FAIL_INVALID_PARAM                   0x04
+#define        P2P_STATUS_FAIL_REQUEST_UNABLE                  0x05
+#define        P2P_STATUS_FAIL_PREVOUS_PROTO_ERR               0x06
+#define        P2P_STATUS_FAIL_NO_COMMON_CH                    0x07
+#define        P2P_STATUS_FAIL_UNKNOWN_P2PGROUP                0x08
+#define        P2P_STATUS_FAIL_BOTH_GOINTENT_15                0x09
+#define        P2P_STATUS_FAIL_INCOMPATIBLE_PROVSION   0x0A
+#define        P2P_STATUS_FAIL_USER_REJECT                             0x0B
+
+//     Value of Inviation Flags Attribute
+#define        P2P_INVITATION_FLAGS_PERSISTENT                 BIT(0)
+
+#define        DMP_P2P_DEVCAP_SUPPORT  (P2P_DEVCAP_SERVICE_DISCOVERY | \
+                                                                       P2P_DEVCAP_CLIENT_DISCOVERABILITY | \
+                                                                       P2P_DEVCAP_CONCURRENT_OPERATION | \
+                                                                       P2P_DEVCAP_INVITATION_PROC)
+
+#define        DMP_P2P_GRPCAP_SUPPORT  (P2P_GRPCAP_INTRABSS)
+
+//     Value of Device Capability Bitmap
+#define        P2P_DEVCAP_SERVICE_DISCOVERY            BIT(0)
+#define        P2P_DEVCAP_CLIENT_DISCOVERABILITY       BIT(1)
+#define        P2P_DEVCAP_CONCURRENT_OPERATION BIT(2)
+#define        P2P_DEVCAP_INFRA_MANAGED                        BIT(3)
+#define        P2P_DEVCAP_DEVICE_LIMIT                         BIT(4)
+#define        P2P_DEVCAP_INVITATION_PROC                      BIT(5)
+
+//     Value of Group Capability Bitmap
+#define        P2P_GRPCAP_GO                                                   BIT(0)
+#define        P2P_GRPCAP_PERSISTENT_GROUP                     BIT(1)
+#define        P2P_GRPCAP_GROUP_LIMIT                          BIT(2)
+#define        P2P_GRPCAP_INTRABSS                                     BIT(3)
+#define        P2P_GRPCAP_CROSS_CONN                           BIT(4)
+#define        P2P_GRPCAP_PERSISTENT_RECONN            BIT(5)
+#define        P2P_GRPCAP_GROUP_FORMATION                      BIT(6)
+
+//     P2P Public Action Frame ( Management Frame )
+#define        P2P_PUB_ACTION_ACTION                           0x09
+
+//     P2P Public Action Frame Type
+#define        P2P_GO_NEGO_REQ                                         0
+#define        P2P_GO_NEGO_RESP                                                1
+#define        P2P_GO_NEGO_CONF                                                2
+#define        P2P_INVIT_REQ                                                   3
+#define        P2P_INVIT_RESP                                                  4
+#define        P2P_DEVDISC_REQ                                         5
+#define        P2P_DEVDISC_RESP                                                6
+#define        P2P_PROVISION_DISC_REQ                          7
+#define        P2P_PROVISION_DISC_RESP                         8
+
+//     P2P Action Frame Type
+#define        P2P_NOTICE_OF_ABSENCE   0
+#define        P2P_PRESENCE_REQUEST            1
+#define        P2P_PRESENCE_RESPONSE   2
+#define        P2P_GO_DISC_REQUEST             3
+
+
+#define        P2P_MAX_PERSISTENT_GROUP_NUM            10
+
+#define        P2P_PROVISIONING_SCAN_CNT                       3
+
+#define        P2P_WILDCARD_SSID_LEN                           7
+
+#define        P2P_FINDPHASE_EX_NONE                           0       // default value, used when: (1)p2p disabed or (2)p2p enabled but only do 1 scan phase
+#define        P2P_FINDPHASE_EX_FULL                           1       // used when p2p enabled and want to do 1 scan phase and P2P_FINDPHASE_EX_MAX-1 find phase
+#define        P2P_FINDPHASE_EX_SOCIAL_FIRST           (P2P_FINDPHASE_EX_FULL+1)
+#define        P2P_FINDPHASE_EX_MAX                                    4
+#define        P2P_FINDPHASE_EX_SOCIAL_LAST            P2P_FINDPHASE_EX_MAX
+
+#define        P2P_PROVISION_TIMEOUT                           5000    //      5 seconds timeout for sending the provision discovery request
+#define        P2P_CONCURRENT_PROVISION_TIMEOUT        3000    //      3 seconds timeout for sending the provision discovery request under concurrent mode
+#define        P2P_GO_NEGO_TIMEOUT                                     5000    //      5 seconds timeout for receiving the group negotation response
+#define        P2P_CONCURRENT_GO_NEGO_TIMEOUT          3000    //      3 seconds timeout for sending the negotiation request under concurrent mode
+#define        P2P_TX_PRESCAN_TIMEOUT                          100             //      100ms
+#define        P2P_INVITE_TIMEOUT                                      5000    //      5 seconds timeout for sending the invitation request
+#define        P2P_CONCURRENT_INVITE_TIMEOUT           3000    //      3 seconds timeout for sending the invitation request under concurrent mode
+#define        P2P_RESET_SCAN_CH                                               15000   //      15 seconds timeout to reset the scan channel ( based on channel plan )
+#define        P2P_MAX_INTENT                                          15
+
+#define        P2P_MAX_NOA_NUM                                         2
+
+//     WPS Configuration Method
+#define        WPS_CM_NONE                                                     0x0000
+#define        WPS_CM_LABEL                                                    0x0004
+#define        WPS_CM_DISPLYA                                          0x0008
+#define        WPS_CM_EXTERNAL_NFC_TOKEN                       0x0010
+#define        WPS_CM_INTEGRATED_NFC_TOKEN             0x0020
+#define        WPS_CM_NFC_INTERFACE                                    0x0040
+#define        WPS_CM_PUSH_BUTTON                                      0x0080
+#define        WPS_CM_KEYPAD                                           0x0100
+#define        WPS_CM_SW_PUHS_BUTTON                           0x0280
+#define        WPS_CM_HW_PUHS_BUTTON                           0x0480
+#define        WPS_CM_SW_DISPLAY_PIN                           0x2008
+#define        WPS_CM_LCD_DISPLAY_PIN                          0x4008
+
+enum P2P_ROLE {
+       P2P_ROLE_DISABLE = 0,
+       P2P_ROLE_DEVICE = 1,
+       P2P_ROLE_CLIENT = 2,
+       P2P_ROLE_GO = 3
+};
+
+enum P2P_STATE {
+       P2P_STATE_NONE = 0,                                                     //      P2P disable
+       P2P_STATE_IDLE = 1,                                                             //      P2P had enabled and do nothing
+       P2P_STATE_LISTEN = 2,                                                   //      In pure listen state
+       P2P_STATE_SCAN = 3,                                                     //      In scan phase
+       P2P_STATE_FIND_PHASE_LISTEN = 4,                                //      In the listen state of find phase
+       P2P_STATE_FIND_PHASE_SEARCH = 5,                                //      In the search state of find phase
+       P2P_STATE_TX_PROVISION_DIS_REQ = 6,                     //      In P2P provisioning discovery
+       P2P_STATE_RX_PROVISION_DIS_RSP = 7,
+       P2P_STATE_RX_PROVISION_DIS_REQ = 8,
+       P2P_STATE_GONEGO_ING = 9,                                               //      Doing the group owner negoitation handshake
+       P2P_STATE_GONEGO_OK = 10,                                               //      finish the group negoitation handshake with success
+       P2P_STATE_GONEGO_FAIL = 11,                                     //      finish the group negoitation handshake with failure
+       P2P_STATE_RECV_INVITE_REQ_MATCH = 12,           //      receiving the P2P Inviation request and match with the profile.
+       P2P_STATE_PROVISIONING_ING = 13,                                //      Doing the P2P WPS
+       P2P_STATE_PROVISIONING_DONE = 14,                       //      Finish the P2P WPS
+       P2P_STATE_TX_INVITE_REQ = 15,                                   //      Transmit the P2P Invitation request
+       P2P_STATE_RX_INVITE_RESP_OK = 16,                               //      Receiving the P2P Invitation response with sucess
+       P2P_STATE_RECV_INVITE_REQ_DISMATCH = 17,        //      receiving the P2P Inviation request and dismatch with the profile.
+       P2P_STATE_RECV_INVITE_REQ_GO = 18,                      //      receiving the P2P Inviation request and this wifi is GO.
+       P2P_STATE_RECV_INVITE_REQ_JOIN = 19,                    //      receiving the P2P Inviation request to join an existing P2P Group.
+       P2P_STATE_RX_INVITE_RESP_FAIL = 20,                     //      recveing the P2P Inviation response with failure
+       P2P_STATE_RX_INFOR_NOREADY = 21,                        // receiving p2p negoitation response with information is not available
+       P2P_STATE_TX_INFOR_NOREADY = 22,                        // sending p2p negoitation response with information is not available
+};
+
+enum P2P_WPSINFO {
+       P2P_NO_WPSINFO                                          = 0,
+       P2P_GOT_WPSINFO_PEER_DISPLAY_PIN        = 1,
+       P2P_GOT_WPSINFO_SELF_DISPLAY_PIN        = 2,
+       P2P_GOT_WPSINFO_PBC                                     = 3,
+};
+
+#define        P2P_PRIVATE_IOCTL_SET_LEN               64
+
+enum P2P_PROTO_WK_ID
+{
+       P2P_FIND_PHASE_WK = 0,
+       P2P_RESTORE_STATE_WK = 1,
+       P2P_PRE_TX_PROVDISC_PROCESS_WK = 2,
+       P2P_PRE_TX_NEGOREQ_PROCESS_WK = 3,
+       P2P_PRE_TX_INVITEREQ_PROCESS_WK = 4,
+       P2P_AP_P2P_CH_SWITCH_PROCESS_WK =5,
+       P2P_RO_CH_WK = 6,
+};
+
+#ifdef CONFIG_P2P_PS
+enum P2P_PS_STATE
+{
+       P2P_PS_DISABLE = 0,
+       P2P_PS_ENABLE = 1,
+       P2P_PS_SCAN = 2,
+       P2P_PS_SCAN_DONE = 3,
+       P2P_PS_ALLSTASLEEP = 4, // for P2P GO
+};
+
+enum P2P_PS_MODE
+{
+       P2P_PS_NONE = 0,
+       P2P_PS_CTWINDOW = 1,
+       P2P_PS_NOA       = 2,
+       P2P_PS_MIX = 3, // CTWindow and NoA
+};
+#endif // CONFIG_P2P_PS
+
+//     =====================WFD Section=====================
+//     For Wi-Fi Display
+#define        WFD_ATTR_DEVICE_INFO                    0x00
+#define        WFD_ATTR_ASSOC_BSSID                    0x01
+#define        WFD_ATTR_COUPLED_SINK_INFO      0x06
+#define        WFD_ATTR_LOCAL_IP_ADDR          0x08
+#define        WFD_ATTR_SESSION_INFO           0x09
+#define        WFD_ATTR_ALTER_MAC                      0x0a
+
+//     For WFD Device Information Attribute
+#define        WFD_DEVINFO_SOURCE                                      0x0000
+#define        WFD_DEVINFO_PSINK                                       0x0001
+#define        WFD_DEVINFO_SSINK                                       0x0002
+#define        WFD_DEVINFO_DUAL                                        0x0003
+
+#define        WFD_DEVINFO_SESSION_AVAIL                       0x0010
+#define        WFD_DEVINFO_WSD                                         0x0040
+#define        WFD_DEVINFO_PC_TDLS                                     0x0080
+#define        WFD_DEVINFO_HDCP_SUPPORT                        0x0100
+
+
+#ifdef  CONFIG_TX_MCAST2UNI
+#define IP_MCAST_MAC(mac)              ((mac[0]==0x01)&&(mac[1]==0x00)&&(mac[2]==0x5e))
+#define ICMPV6_MCAST_MAC(mac)  ((mac[0]==0x33)&&(mac[1]==0x33)&&(mac[2]!=0xff))
+#endif // CONFIG_TX_MCAST2UNI
+
+
+
+#endif // _WIFI_H_
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/wlan_bssdef.h b/drivers/net/wireless/realtek/rtl8192cu/include/wlan_bssdef.h
new file mode 100644 (file)
index 0000000..641b7e9
--- /dev/null
@@ -0,0 +1,702 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __WLAN_BSSDEF_H__
+#define __WLAN_BSSDEF_H__
+
+
+#define MAX_IE_SZ      768
+
+
+#ifdef PLATFORM_LINUX
+
+#define NDIS_802_11_LENGTH_SSID         32
+#define NDIS_802_11_LENGTH_RATES        8
+#define NDIS_802_11_LENGTH_RATES_EX     16
+
+typedef unsigned char   NDIS_802_11_MAC_ADDRESS[6];
+typedef long                   NDIS_802_11_RSSI;           // in dBm
+typedef unsigned char   NDIS_802_11_RATES[NDIS_802_11_LENGTH_RATES];        // Set of 8 data rates
+typedef unsigned char   NDIS_802_11_RATES_EX[NDIS_802_11_LENGTH_RATES_EX];  // Set of 16 data rates
+
+
+typedef  ULONG  NDIS_802_11_KEY_INDEX;
+typedef unsigned long long NDIS_802_11_KEY_RSC;
+
+
+typedef struct _NDIS_802_11_SSID
+{
+  ULONG  SsidLength;
+  UCHAR  Ssid[32];
+} NDIS_802_11_SSID, *PNDIS_802_11_SSID;
+
+typedef enum _NDIS_802_11_NETWORK_TYPE
+{
+    Ndis802_11FH,
+    Ndis802_11DS,
+    Ndis802_11OFDM5,
+    Ndis802_11OFDM24,
+    Ndis802_11NetworkTypeMax    // not a real type, defined as an upper bound
+} NDIS_802_11_NETWORK_TYPE, *PNDIS_802_11_NETWORK_TYPE;
+
+typedef struct _NDIS_802_11_CONFIGURATION_FH
+{
+    ULONG           Length;             // Length of structure
+    ULONG           HopPattern;         // As defined by 802.11, MSB set
+    ULONG           HopSet;             // to one if non-802.11
+    ULONG           DwellTime;          // units are Kusec
+} NDIS_802_11_CONFIGURATION_FH, *PNDIS_802_11_CONFIGURATION_FH;
+
+
+/*
+       FW will only save the channel number in DSConfig.
+       ODI Handler will convert the channel number to freq. number.
+*/
+typedef struct _NDIS_802_11_CONFIGURATION
+{
+    ULONG           Length;             // Length of structure
+    ULONG           BeaconPeriod;       // units are Kusec
+    ULONG           ATIMWindow;         // units are Kusec
+    ULONG           DSConfig;           // Frequency, units are kHz
+    NDIS_802_11_CONFIGURATION_FH    FHConfig;
+} NDIS_802_11_CONFIGURATION, *PNDIS_802_11_CONFIGURATION;
+
+
+
+typedef enum _NDIS_802_11_NETWORK_INFRASTRUCTURE
+{
+    Ndis802_11IBSS,
+    Ndis802_11Infrastructure,
+    Ndis802_11AutoUnknown,
+    Ndis802_11InfrastructureMax,     // Not a real value, defined as upper bound
+    Ndis802_11APMode
+} NDIS_802_11_NETWORK_INFRASTRUCTURE, *PNDIS_802_11_NETWORK_INFRASTRUCTURE;
+
+
+
+
+
+typedef struct _NDIS_802_11_FIXED_IEs
+{
+  UCHAR  Timestamp[8];
+  USHORT  BeaconInterval;
+  USHORT  Capabilities;
+} NDIS_802_11_FIXED_IEs, *PNDIS_802_11_FIXED_IEs;
+
+
+
+typedef struct _NDIS_802_11_VARIABLE_IEs
+{
+  UCHAR  ElementID;
+  UCHAR  Length;
+  UCHAR  data[1];
+} NDIS_802_11_VARIABLE_IEs, *PNDIS_802_11_VARIABLE_IEs;
+
+
+
+/*
+
+
+
+Length is the 4 bytes multiples of the sume of
+       sizeof (NDIS_802_11_MAC_ADDRESS) + 2 + sizeof (NDIS_802_11_SSID) + sizeof (ULONG)
++   sizeof (NDIS_802_11_RSSI) + sizeof (NDIS_802_11_NETWORK_TYPE) + sizeof (NDIS_802_11_CONFIGURATION)
++   sizeof (NDIS_802_11_RATES_EX) + IELength
+
+Except the IELength, all other fields are fixed length. Therefore, we can define a marco to present the
+partial sum.
+
+*/
+#if 0
+typedef struct _NDIS_WLAN_BSSID_EX
+{
+  ULONG  Length;
+  NDIS_802_11_MAC_ADDRESS  MacAddress;
+  UCHAR  Reserved[2];//[0]: IS beacon frame, [1]:optimum_antenna=>For antenna diversity;
+  NDIS_802_11_SSID  Ssid;
+  ULONG  Privacy;
+  NDIS_802_11_RSSI  Rssi;
+  NDIS_802_11_NETWORK_TYPE  NetworkTypeInUse;
+  NDIS_802_11_CONFIGURATION  Configuration;
+  NDIS_802_11_NETWORK_INFRASTRUCTURE  InfrastructureMode;
+  NDIS_802_11_RATES_EX  SupportedRates;
+  ULONG  IELength;
+  UCHAR  IEs[MAX_IE_SZ];       //(timestamp, beacon interval, and capability information)
+} NDIS_WLAN_BSSID_EX, *PNDIS_WLAN_BSSID_EX;
+
+
+typedef struct _NDIS_802_11_BSSID_LIST_EX
+{
+  ULONG  NumberOfItems;
+  NDIS_WLAN_BSSID_EX  Bssid[1];
+} NDIS_802_11_BSSID_LIST_EX, *PNDIS_802_11_BSSID_LIST_EX;
+#endif
+
+typedef enum _NDIS_802_11_AUTHENTICATION_MODE
+{
+    Ndis802_11AuthModeOpen,
+    Ndis802_11AuthModeShared,
+    Ndis802_11AuthModeAutoSwitch,
+    Ndis802_11AuthModeWPA,
+    Ndis802_11AuthModeWPAPSK,
+    Ndis802_11AuthModeWPANone,
+    Ndis802_11AuthModeMax               // Not a real mode, defined as upper bound
+} NDIS_802_11_AUTHENTICATION_MODE, *PNDIS_802_11_AUTHENTICATION_MODE;
+
+typedef enum _NDIS_802_11_WEP_STATUS
+{
+    Ndis802_11WEPEnabled,
+    Ndis802_11Encryption1Enabled = Ndis802_11WEPEnabled,
+    Ndis802_11WEPDisabled,
+    Ndis802_11EncryptionDisabled = Ndis802_11WEPDisabled,
+    Ndis802_11WEPKeyAbsent,
+    Ndis802_11Encryption1KeyAbsent = Ndis802_11WEPKeyAbsent,
+    Ndis802_11WEPNotSupported,
+    Ndis802_11EncryptionNotSupported = Ndis802_11WEPNotSupported,
+    Ndis802_11Encryption2Enabled,
+    Ndis802_11Encryption2KeyAbsent,
+    Ndis802_11Encryption3Enabled,
+    Ndis802_11Encryption3KeyAbsent
+} NDIS_802_11_WEP_STATUS, *PNDIS_802_11_WEP_STATUS,
+  NDIS_802_11_ENCRYPTION_STATUS, *PNDIS_802_11_ENCRYPTION_STATUS;
+
+
+#define NDIS_802_11_AI_REQFI_CAPABILITIES      1
+#define NDIS_802_11_AI_REQFI_LISTENINTERVAL    2
+#define NDIS_802_11_AI_REQFI_CURRENTAPADDRESS  4
+
+#define NDIS_802_11_AI_RESFI_CAPABILITIES      1
+#define NDIS_802_11_AI_RESFI_STATUSCODE        2
+#define NDIS_802_11_AI_RESFI_ASSOCIATIONID     4
+
+typedef struct _NDIS_802_11_AI_REQFI
+{
+    USHORT Capabilities;
+    USHORT ListenInterval;
+    NDIS_802_11_MAC_ADDRESS  CurrentAPAddress;
+} NDIS_802_11_AI_REQFI, *PNDIS_802_11_AI_REQFI;
+
+typedef struct _NDIS_802_11_AI_RESFI
+{
+    USHORT Capabilities;
+    USHORT StatusCode;
+    USHORT AssociationId;
+} NDIS_802_11_AI_RESFI, *PNDIS_802_11_AI_RESFI;
+
+typedef struct _NDIS_802_11_ASSOCIATION_INFORMATION
+{
+    ULONG                   Length;
+    USHORT                  AvailableRequestFixedIEs;
+    NDIS_802_11_AI_REQFI    RequestFixedIEs;
+    ULONG                   RequestIELength;
+    ULONG                   OffsetRequestIEs;
+    USHORT                  AvailableResponseFixedIEs;
+    NDIS_802_11_AI_RESFI    ResponseFixedIEs;
+    ULONG                   ResponseIELength;
+    ULONG                   OffsetResponseIEs;
+} NDIS_802_11_ASSOCIATION_INFORMATION, *PNDIS_802_11_ASSOCIATION_INFORMATION;
+
+typedef enum _NDIS_802_11_RELOAD_DEFAULTS
+{
+   Ndis802_11ReloadWEPKeys
+} NDIS_802_11_RELOAD_DEFAULTS, *PNDIS_802_11_RELOAD_DEFAULTS;
+
+
+// Key mapping keys require a BSSID
+typedef struct _NDIS_802_11_KEY
+{
+    ULONG           Length;             // Length of this structure
+    ULONG           KeyIndex;
+    ULONG           KeyLength;          // length of key in bytes
+    NDIS_802_11_MAC_ADDRESS BSSID;
+    NDIS_802_11_KEY_RSC KeyRSC;
+    UCHAR           KeyMaterial[32];     // variable length depending on above field
+} NDIS_802_11_KEY, *PNDIS_802_11_KEY;
+
+typedef struct _NDIS_802_11_REMOVE_KEY
+{
+    ULONG                   Length;        // Length of this structure
+    ULONG                   KeyIndex;
+    NDIS_802_11_MAC_ADDRESS BSSID;
+} NDIS_802_11_REMOVE_KEY, *PNDIS_802_11_REMOVE_KEY;
+
+typedef struct _NDIS_802_11_WEP
+{
+    ULONG     Length;        // Length of this structure
+    ULONG     KeyIndex;      // 0 is the per-client key, 1-N are the global keys
+    ULONG     KeyLength;     // length of key in bytes
+    UCHAR     KeyMaterial[16];// variable length depending on above field
+} NDIS_802_11_WEP, *PNDIS_802_11_WEP;
+
+typedef struct _NDIS_802_11_AUTHENTICATION_REQUEST
+{
+    ULONG Length;            // Length of structure
+    NDIS_802_11_MAC_ADDRESS Bssid;
+    ULONG Flags;
+} NDIS_802_11_AUTHENTICATION_REQUEST, *PNDIS_802_11_AUTHENTICATION_REQUEST;
+
+typedef enum _NDIS_802_11_STATUS_TYPE
+{
+       Ndis802_11StatusType_Authentication,
+       Ndis802_11StatusType_MediaStreamMode,
+       Ndis802_11StatusType_PMKID_CandidateList,
+       Ndis802_11StatusTypeMax    // not a real type, defined as an upper bound
+} NDIS_802_11_STATUS_TYPE, *PNDIS_802_11_STATUS_TYPE;
+
+typedef struct _NDIS_802_11_STATUS_INDICATION
+{
+    NDIS_802_11_STATUS_TYPE StatusType;
+} NDIS_802_11_STATUS_INDICATION, *PNDIS_802_11_STATUS_INDICATION;
+
+// mask for authentication/integrity fields
+#define NDIS_802_11_AUTH_REQUEST_AUTH_FIELDS        0x0f
+#define NDIS_802_11_AUTH_REQUEST_REAUTH                        0x01
+#define NDIS_802_11_AUTH_REQUEST_KEYUPDATE             0x02
+#define NDIS_802_11_AUTH_REQUEST_PAIRWISE_ERROR                0x06
+#define NDIS_802_11_AUTH_REQUEST_GROUP_ERROR           0x0E
+
+// MIC check time, 60 seconds.
+#define MIC_CHECK_TIME 60000000
+
+typedef struct _NDIS_802_11_AUTHENTICATION_EVENT
+{
+    NDIS_802_11_STATUS_INDICATION       Status;
+    NDIS_802_11_AUTHENTICATION_REQUEST  Request[1];
+} NDIS_802_11_AUTHENTICATION_EVENT, *PNDIS_802_11_AUTHENTICATION_EVENT;
+
+typedef struct _NDIS_802_11_TEST
+{
+    ULONG Length;
+    ULONG Type;
+    union
+    {
+        NDIS_802_11_AUTHENTICATION_EVENT AuthenticationEvent;
+        NDIS_802_11_RSSI RssiTrigger;
+    }tt;
+} NDIS_802_11_TEST, *PNDIS_802_11_TEST;
+
+
+#endif //end of #ifdef PLATFORM_LINUX
+
+#ifdef PLATFORM_FREEBSD
+
+#define NDIS_802_11_LENGTH_SSID         32
+#define NDIS_802_11_LENGTH_RATES        8
+#define NDIS_802_11_LENGTH_RATES_EX     16
+
+typedef unsigned char   NDIS_802_11_MAC_ADDRESS[6];
+typedef long                   NDIS_802_11_RSSI;           // in dBm
+typedef unsigned char   NDIS_802_11_RATES[NDIS_802_11_LENGTH_RATES];        // Set of 8 data rates
+typedef unsigned char   NDIS_802_11_RATES_EX[NDIS_802_11_LENGTH_RATES_EX];  // Set of 16 data rates
+
+
+typedef  ULONG  NDIS_802_11_KEY_INDEX;
+typedef unsigned long long NDIS_802_11_KEY_RSC;
+
+
+typedef struct _NDIS_802_11_SSID
+{
+  ULONG  SsidLength;
+  UCHAR  Ssid[32];
+} NDIS_802_11_SSID, *PNDIS_802_11_SSID;
+
+typedef enum _NDIS_802_11_NETWORK_TYPE
+{
+    Ndis802_11FH,
+    Ndis802_11DS,
+    Ndis802_11OFDM5,
+    Ndis802_11OFDM24,
+    Ndis802_11NetworkTypeMax    // not a real type, defined as an upper bound
+} NDIS_802_11_NETWORK_TYPE, *PNDIS_802_11_NETWORK_TYPE;
+
+typedef struct _NDIS_802_11_CONFIGURATION_FH
+{
+    ULONG           Length;             // Length of structure
+    ULONG           HopPattern;         // As defined by 802.11, MSB set
+    ULONG           HopSet;             // to one if non-802.11
+    ULONG           DwellTime;          // units are Kusec
+} NDIS_802_11_CONFIGURATION_FH, *PNDIS_802_11_CONFIGURATION_FH;
+
+
+/*
+       FW will only save the channel number in DSConfig.
+       ODI Handler will convert the channel number to freq. number.
+*/
+typedef struct _NDIS_802_11_CONFIGURATION
+{
+    ULONG           Length;             // Length of structure
+    ULONG           BeaconPeriod;       // units are Kusec
+    ULONG           ATIMWindow;         // units are Kusec
+    ULONG           DSConfig;           // Frequency, units are kHz
+    NDIS_802_11_CONFIGURATION_FH    FHConfig;
+} NDIS_802_11_CONFIGURATION, *PNDIS_802_11_CONFIGURATION;
+
+
+
+typedef enum _NDIS_802_11_NETWORK_INFRASTRUCTURE
+{
+    Ndis802_11IBSS,
+    Ndis802_11Infrastructure,
+    Ndis802_11AutoUnknown,
+    Ndis802_11InfrastructureMax,     // Not a real value, defined as upper bound
+    Ndis802_11APMode
+} NDIS_802_11_NETWORK_INFRASTRUCTURE, *PNDIS_802_11_NETWORK_INFRASTRUCTURE;
+
+
+
+
+
+typedef struct _NDIS_802_11_FIXED_IEs
+{
+  UCHAR  Timestamp[8];
+  USHORT  BeaconInterval;
+  USHORT  Capabilities;
+} NDIS_802_11_FIXED_IEs, *PNDIS_802_11_FIXED_IEs;
+
+
+
+typedef struct _NDIS_802_11_VARIABLE_IEs
+{
+  UCHAR  ElementID;
+  UCHAR  Length;
+  UCHAR  data[1];
+} NDIS_802_11_VARIABLE_IEs, *PNDIS_802_11_VARIABLE_IEs;
+
+
+
+/*
+
+
+
+Length is the 4 bytes multiples of the sume of
+       sizeof (NDIS_802_11_MAC_ADDRESS) + 2 + sizeof (NDIS_802_11_SSID) + sizeof (ULONG)
++   sizeof (NDIS_802_11_RSSI) + sizeof (NDIS_802_11_NETWORK_TYPE) + sizeof (NDIS_802_11_CONFIGURATION)
++   sizeof (NDIS_802_11_RATES_EX) + IELength
+
+Except the IELength, all other fields are fixed length. Therefore, we can define a marco to present the
+partial sum.
+
+*/
+#if 0
+typedef struct _NDIS_WLAN_BSSID_EX
+{
+  ULONG  Length;
+  NDIS_802_11_MAC_ADDRESS  MacAddress;
+  UCHAR  Reserved[2];//[0]: IS beacon frame, [1]:optimum_antenna=>For antenna diversity;
+  NDIS_802_11_SSID  Ssid;
+  ULONG  Privacy;
+  NDIS_802_11_RSSI  Rssi;
+  NDIS_802_11_NETWORK_TYPE  NetworkTypeInUse;
+  NDIS_802_11_CONFIGURATION  Configuration;
+  NDIS_802_11_NETWORK_INFRASTRUCTURE  InfrastructureMode;
+  NDIS_802_11_RATES_EX  SupportedRates;
+  ULONG  IELength;
+  UCHAR  IEs[MAX_IE_SZ];       //(timestamp, beacon interval, and capability information)
+} NDIS_WLAN_BSSID_EX, *PNDIS_WLAN_BSSID_EX;
+
+
+typedef struct _NDIS_802_11_BSSID_LIST_EX
+{
+  ULONG  NumberOfItems;
+  NDIS_WLAN_BSSID_EX  Bssid[1];
+} NDIS_802_11_BSSID_LIST_EX, *PNDIS_802_11_BSSID_LIST_EX;
+#endif
+
+typedef enum _NDIS_802_11_AUTHENTICATION_MODE
+{
+    Ndis802_11AuthModeOpen,
+    Ndis802_11AuthModeShared,
+    Ndis802_11AuthModeAutoSwitch,
+    Ndis802_11AuthModeWPA,
+    Ndis802_11AuthModeWPAPSK,
+    Ndis802_11AuthModeWPANone,
+    Ndis802_11AuthModeMax               // Not a real mode, defined as upper bound
+} NDIS_802_11_AUTHENTICATION_MODE, *PNDIS_802_11_AUTHENTICATION_MODE;
+
+typedef enum _NDIS_802_11_WEP_STATUS
+{
+    Ndis802_11WEPEnabled,
+    Ndis802_11Encryption1Enabled = Ndis802_11WEPEnabled,
+    Ndis802_11WEPDisabled,
+    Ndis802_11EncryptionDisabled = Ndis802_11WEPDisabled,
+    Ndis802_11WEPKeyAbsent,
+    Ndis802_11Encryption1KeyAbsent = Ndis802_11WEPKeyAbsent,
+    Ndis802_11WEPNotSupported,
+    Ndis802_11EncryptionNotSupported = Ndis802_11WEPNotSupported,
+    Ndis802_11Encryption2Enabled,
+    Ndis802_11Encryption2KeyAbsent,
+    Ndis802_11Encryption3Enabled,
+    Ndis802_11Encryption3KeyAbsent
+} NDIS_802_11_WEP_STATUS, *PNDIS_802_11_WEP_STATUS,
+  NDIS_802_11_ENCRYPTION_STATUS, *PNDIS_802_11_ENCRYPTION_STATUS;
+
+
+#define NDIS_802_11_AI_REQFI_CAPABILITIES      1
+#define NDIS_802_11_AI_REQFI_LISTENINTERVAL    2
+#define NDIS_802_11_AI_REQFI_CURRENTAPADDRESS  4
+
+#define NDIS_802_11_AI_RESFI_CAPABILITIES      1
+#define NDIS_802_11_AI_RESFI_STATUSCODE        2
+#define NDIS_802_11_AI_RESFI_ASSOCIATIONID     4
+
+typedef struct _NDIS_802_11_AI_REQFI
+{
+    USHORT Capabilities;
+    USHORT ListenInterval;
+    NDIS_802_11_MAC_ADDRESS  CurrentAPAddress;
+} NDIS_802_11_AI_REQFI, *PNDIS_802_11_AI_REQFI;
+
+typedef struct _NDIS_802_11_AI_RESFI
+{
+    USHORT Capabilities;
+    USHORT StatusCode;
+    USHORT AssociationId;
+} NDIS_802_11_AI_RESFI, *PNDIS_802_11_AI_RESFI;
+
+typedef struct _NDIS_802_11_ASSOCIATION_INFORMATION
+{
+    ULONG                   Length;
+    USHORT                  AvailableRequestFixedIEs;
+    NDIS_802_11_AI_REQFI    RequestFixedIEs;
+    ULONG                   RequestIELength;
+    ULONG                   OffsetRequestIEs;
+    USHORT                  AvailableResponseFixedIEs;
+    NDIS_802_11_AI_RESFI    ResponseFixedIEs;
+    ULONG                   ResponseIELength;
+    ULONG                   OffsetResponseIEs;
+} NDIS_802_11_ASSOCIATION_INFORMATION, *PNDIS_802_11_ASSOCIATION_INFORMATION;
+
+typedef enum _NDIS_802_11_RELOAD_DEFAULTS
+{
+   Ndis802_11ReloadWEPKeys
+} NDIS_802_11_RELOAD_DEFAULTS, *PNDIS_802_11_RELOAD_DEFAULTS;
+
+
+// Key mapping keys require a BSSID
+typedef struct _NDIS_802_11_KEY
+{
+    ULONG           Length;             // Length of this structure
+    ULONG           KeyIndex;
+    ULONG           KeyLength;          // length of key in bytes
+    NDIS_802_11_MAC_ADDRESS BSSID;
+    NDIS_802_11_KEY_RSC KeyRSC;
+    UCHAR           KeyMaterial[32];     // variable length depending on above field
+} NDIS_802_11_KEY, *PNDIS_802_11_KEY;
+
+typedef struct _NDIS_802_11_REMOVE_KEY
+{
+    ULONG                   Length;        // Length of this structure
+    ULONG                   KeyIndex;
+    NDIS_802_11_MAC_ADDRESS BSSID;
+} NDIS_802_11_REMOVE_KEY, *PNDIS_802_11_REMOVE_KEY;
+
+typedef struct _NDIS_802_11_WEP
+{
+    ULONG     Length;        // Length of this structure
+    ULONG     KeyIndex;      // 0 is the per-client key, 1-N are the global keys
+    ULONG     KeyLength;     // length of key in bytes
+    UCHAR     KeyMaterial[16];// variable length depending on above field
+} NDIS_802_11_WEP, *PNDIS_802_11_WEP;
+
+typedef struct _NDIS_802_11_AUTHENTICATION_REQUEST
+{
+    ULONG Length;            // Length of structure
+    NDIS_802_11_MAC_ADDRESS Bssid;
+    ULONG Flags;
+} NDIS_802_11_AUTHENTICATION_REQUEST, *PNDIS_802_11_AUTHENTICATION_REQUEST;
+
+typedef enum _NDIS_802_11_STATUS_TYPE
+{
+       Ndis802_11StatusType_Authentication,
+       Ndis802_11StatusType_MediaStreamMode,
+       Ndis802_11StatusType_PMKID_CandidateList,
+       Ndis802_11StatusTypeMax    // not a real type, defined as an upper bound
+} NDIS_802_11_STATUS_TYPE, *PNDIS_802_11_STATUS_TYPE;
+
+typedef struct _NDIS_802_11_STATUS_INDICATION
+{
+    NDIS_802_11_STATUS_TYPE StatusType;
+} NDIS_802_11_STATUS_INDICATION, *PNDIS_802_11_STATUS_INDICATION;
+
+// mask for authentication/integrity fields
+#define NDIS_802_11_AUTH_REQUEST_AUTH_FIELDS        0x0f
+#define NDIS_802_11_AUTH_REQUEST_REAUTH                        0x01
+#define NDIS_802_11_AUTH_REQUEST_KEYUPDATE             0x02
+#define NDIS_802_11_AUTH_REQUEST_PAIRWISE_ERROR                0x06
+#define NDIS_802_11_AUTH_REQUEST_GROUP_ERROR           0x0E
+
+// MIC check time, 60 seconds.
+#define MIC_CHECK_TIME 60000000
+
+typedef struct _NDIS_802_11_AUTHENTICATION_EVENT
+{
+    NDIS_802_11_STATUS_INDICATION       Status;
+    NDIS_802_11_AUTHENTICATION_REQUEST  Request[1];
+} NDIS_802_11_AUTHENTICATION_EVENT, *PNDIS_802_11_AUTHENTICATION_EVENT;
+
+typedef struct _NDIS_802_11_TEST
+{
+    ULONG Length;
+    ULONG Type;
+    union
+    {
+        NDIS_802_11_AUTHENTICATION_EVENT AuthenticationEvent;
+        NDIS_802_11_RSSI RssiTrigger;
+    }tt;
+} NDIS_802_11_TEST, *PNDIS_802_11_TEST;
+
+
+#endif //PLATFORM_FREEBSD
+#ifndef Ndis802_11APMode
+#define Ndis802_11APMode (Ndis802_11InfrastructureMax+1)
+#endif
+
+typedef struct _WLAN_PHY_INFO
+{
+       u8      SignalStrength;//(in percentage)
+       u8      SignalQuality;//(in percentage)
+       u8      Optimum_antenna;  //for Antenna diversity
+       u8      Reserved_0;
+}WLAN_PHY_INFO,*PWLAN_PHY_INFO;
+
+/* temporally add #pragma pack for structure alignment issue of
+*   WLAN_BSSID_EX and get_WLAN_BSSID_EX_sz()
+*/
+#ifdef PLATFORM_WINDOWS
+#pragma pack(push)
+#pragma pack(1)
+#endif
+typedef struct _WLAN_BSSID_EX
+{
+  ULONG  Length;
+  NDIS_802_11_MAC_ADDRESS  MacAddress;
+  UCHAR  Reserved[2];//[0]: IS beacon frame
+  NDIS_802_11_SSID  Ssid;
+  ULONG  Privacy;
+  NDIS_802_11_RSSI  Rssi;//(in dBM,raw data ,get from PHY)
+  NDIS_802_11_NETWORK_TYPE  NetworkTypeInUse;
+  NDIS_802_11_CONFIGURATION  Configuration;
+  NDIS_802_11_NETWORK_INFRASTRUCTURE  InfrastructureMode;
+  NDIS_802_11_RATES_EX  SupportedRates;
+  WLAN_PHY_INFO        PhyInfo;
+  ULONG  IELength;
+  UCHAR  IEs[MAX_IE_SZ];       //(timestamp, beacon interval, and capability information)
+}
+#ifndef PLATFORM_WINDOWS
+__attribute__((packed))
+#endif
+WLAN_BSSID_EX, *PWLAN_BSSID_EX;
+#ifdef PLATFORM_WINDOWS
+#pragma pack(pop)
+#endif
+
+__inline  static uint get_WLAN_BSSID_EX_sz(WLAN_BSSID_EX *bss)
+{
+       return (sizeof(WLAN_BSSID_EX) - MAX_IE_SZ + bss->IELength);
+}
+
+struct wlan_network {
+       _list   list;
+       int     network_type;   //refer to ieee80211.h for WIRELESS_11A/B/G
+       int     fixed;                  // set to fixed when not to be removed as site-surveying
+       unsigned long   last_scanned; //timestamp for the network
+       int     aid;                    //will only be valid when a BSS is joinned.
+       int     join_res;
+       WLAN_BSSID_EX   network; //must be the last item
+#ifdef PLATFORM_WINDOWS
+       unsigned char  iebuf[MAX_IE_SZ];
+#endif
+
+};
+
+enum VRTL_CARRIER_SENSE
+{
+    DISABLE_VCS,
+    ENABLE_VCS,
+    AUTO_VCS
+};
+
+enum VCS_TYPE
+{
+    NONE_VCS,
+    RTS_CTS,
+    CTS_TO_SELF
+};
+
+
+
+
+#define PWR_CAM 0
+#define PWR_MINPS 1
+#define PWR_MAXPS 2
+#define PWR_UAPSD 3
+#define PWR_VOIP 4
+
+
+enum UAPSD_MAX_SP
+{
+       NO_LIMIT,
+       TWO_MSDU,
+       FOUR_MSDU,
+       SIX_MSDU
+};
+
+
+//john
+#define NUM_PRE_AUTH_KEY 16
+#define NUM_PMKID_CACHE NUM_PRE_AUTH_KEY
+
+/*
+*      WPA2
+*/
+
+#ifndef PLATFORM_OS_CE
+typedef struct _PMKID_CANDIDATE {
+    NDIS_802_11_MAC_ADDRESS BSSID;
+    ULONG Flags;
+} PMKID_CANDIDATE, *PPMKID_CANDIDATE;
+
+typedef struct _NDIS_802_11_PMKID_CANDIDATE_LIST
+{
+    ULONG Version;       // Version of the structure
+    ULONG NumCandidates; // No. of pmkid candidates
+    PMKID_CANDIDATE CandidateList[1];
+} NDIS_802_11_PMKID_CANDIDATE_LIST, *PNDIS_802_11_PMKID_CANDIDATE_LIST;
+
+
+typedef struct _NDIS_802_11_AUTHENTICATION_ENCRYPTION
+{
+       NDIS_802_11_AUTHENTICATION_MODE AuthModeSupported;
+       NDIS_802_11_ENCRYPTION_STATUS EncryptStatusSupported;
+
+} NDIS_802_11_AUTHENTICATION_ENCRYPTION, *PNDIS_802_11_AUTHENTICATION_ENCRYPTION;
+
+typedef struct _NDIS_802_11_CAPABILITY
+{
+       ULONG  Length;
+       ULONG  Version;
+       ULONG  NoOfPMKIDs;
+       ULONG  NoOfAuthEncryptPairsSupported;
+       NDIS_802_11_AUTHENTICATION_ENCRYPTION AuthenticationEncryptionSupported[1];
+
+} NDIS_802_11_CAPABILITY, *PNDIS_802_11_CAPABILITY;
+#endif
+
+
+#endif //#ifndef WLAN_BSSDEF_H_
diff --git a/drivers/net/wireless/realtek/rtl8192cu/include/xmit_osdep.h b/drivers/net/wireless/realtek/rtl8192cu/include/xmit_osdep.h
new file mode 100644 (file)
index 0000000..0f6d092
--- /dev/null
@@ -0,0 +1,94 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#ifndef __XMIT_OSDEP_H_
+#define __XMIT_OSDEP_H_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+
+struct pkt_file {
+       _pkt *pkt;
+       SIZE_T pkt_len;  //the remainder length of the open_file
+       _buffer *cur_buffer;
+       u8 *buf_start;
+       u8 *cur_addr;
+       SIZE_T buf_len;
+};
+
+#ifdef PLATFORM_WINDOWS
+
+#ifdef PLATFORM_OS_XP
+#ifdef CONFIG_USB_HCI
+#include <usb.h>
+#include <usbdlib.h>
+#include <usbioctl.h>
+#endif
+#endif
+
+#define NR_XMITFRAME     128
+
+#define ETH_ALEN       6
+
+extern NDIS_STATUS rtw_xmit_entry(
+IN _nic_hdl            cnxt,
+IN NDIS_PACKET         *pkt,
+IN UINT                                flags
+);
+
+#endif
+
+#ifdef PLATFORM_FREEBSD
+#define NR_XMITFRAME   256
+extern int rtw_xmit_entry(_pkt *pkt, _nic_hdl pnetdev);
+extern void rtw_xmit_entry_wrap (struct ifnet * pifp);
+#endif //PLATFORM_FREEBSD
+
+#ifdef PLATFORM_LINUX
+
+#define NR_XMITFRAME   256
+
+struct xmit_priv;
+struct pkt_attrib;
+struct sta_xmit_priv;
+struct xmit_frame;
+struct xmit_buf;
+
+extern int _rtw_xmit_entry(_pkt *pkt, _nic_hdl pnetdev);
+extern int rtw_xmit_entry(_pkt *pkt, _nic_hdl pnetdev);
+
+#endif
+
+void rtw_os_xmit_schedule(_adapter *padapter);
+
+int rtw_os_xmit_resource_alloc(_adapter *padapter, struct xmit_buf *pxmitbuf,u32 alloc_sz);
+void rtw_os_xmit_resource_free(_adapter *padapter, struct xmit_buf *pxmitbuf,u32 free_sz);
+
+extern void rtw_set_tx_chksum_offload(_pkt *pkt, struct pkt_attrib *pattrib);
+
+extern uint rtw_remainder_len(struct pkt_file *pfile);
+extern void _rtw_open_pktfile(_pkt *pkt, struct pkt_file *pfile);
+extern uint _rtw_pktfile_read (struct pkt_file *pfile, u8 *rmem, uint rlen);
+extern sint rtw_endofpktfile (struct pkt_file *pfile);
+
+extern void rtw_os_pkt_complete(_adapter *padapter, _pkt *pkt);
+extern void rtw_os_xmit_complete(_adapter *padapter, struct xmit_frame *pxframe);
+
+#endif //__XMIT_OSDEP_H_
diff --git a/drivers/net/wireless/realtek/rtl8192cu/os_dep/linux/ioctl_cfg80211.c b/drivers/net/wireless/realtek/rtl8192cu/os_dep/linux/ioctl_cfg80211.c
new file mode 100644 (file)
index 0000000..60e92b8
--- /dev/null
@@ -0,0 +1,5488 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#define  _IOCTL_CFG80211_C_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <rtw_ioctl.h>
+#include <rtw_ioctl_set.h>
+#include <rtw_ioctl_query.h>
+#include <xmit_osdep.h>
+
+#ifdef CONFIG_IOCTL_CFG80211
+
+#include "ioctl_cfg80211.h"
+
+#define RTW_MAX_MGMT_TX_CNT (8)
+
+#define RTW_SCAN_IE_LEN_MAX      2304
+#define RTW_MAX_REMAIN_ON_CHANNEL_DURATION 65535 //ms
+#define RTW_MAX_NUM_PMKIDS 4
+
+#define RTW_CH_MAX_2G_CHANNEL               14      /* Max channel in 2G band */
+
+static const u32 rtw_cipher_suites[] = {
+       WLAN_CIPHER_SUITE_WEP40,
+       WLAN_CIPHER_SUITE_WEP104,
+       WLAN_CIPHER_SUITE_TKIP,
+       WLAN_CIPHER_SUITE_CCMP,
+#ifdef CONFIG_IEEE80211W
+       WLAN_CIPHER_SUITE_AES_CMAC,
+#endif //CONFIG_IEEE80211W
+};
+
+#define RATETAB_ENT(_rate, _rateid, _flags) \
+       {                                                               \
+               .bitrate        = (_rate),                              \
+               .hw_value       = (_rateid),                            \
+               .flags          = (_flags),                             \
+       }
+
+#define CHAN2G(_channel, _freq, _flags) {                      \
+       .band                   = IEEE80211_BAND_2GHZ,          \
+       .center_freq            = (_freq),                      \
+       .hw_value               = (_channel),                   \
+       .flags                  = (_flags),                     \
+       .max_antenna_gain       = 0,                            \
+       .max_power              = 30,                           \
+}
+
+#define CHAN5G(_channel, _flags) {                             \
+       .band                   = IEEE80211_BAND_5GHZ,          \
+       .center_freq            = 5000 + (5 * (_channel)),      \
+       .hw_value               = (_channel),                   \
+       .flags                  = (_flags),                     \
+       .max_antenna_gain       = 0,                            \
+       .max_power              = 30,                           \
+}
+
+static struct ieee80211_rate rtw_rates[] = {
+       RATETAB_ENT(10,  0x1,   0),
+       RATETAB_ENT(20,  0x2,   0),
+       RATETAB_ENT(55,  0x4,   0),
+       RATETAB_ENT(110, 0x8,   0),
+       RATETAB_ENT(60,  0x10,  0),
+       RATETAB_ENT(90,  0x20,  0),
+       RATETAB_ENT(120, 0x40,  0),
+       RATETAB_ENT(180, 0x80,  0),
+       RATETAB_ENT(240, 0x100, 0),
+       RATETAB_ENT(360, 0x200, 0),
+       RATETAB_ENT(480, 0x400, 0),
+       RATETAB_ENT(540, 0x800, 0),
+};
+
+#define rtw_a_rates            (rtw_rates + 4)
+#define RTW_A_RATES_NUM        8
+#define rtw_g_rates            (rtw_rates + 0)
+#define RTW_G_RATES_NUM        12
+
+#define RTW_2G_CHANNELS_NUM 14
+#define RTW_5G_CHANNELS_NUM 37
+
+static struct ieee80211_channel rtw_2ghz_channels[] = {
+       CHAN2G(1, 2412, 0),
+       CHAN2G(2, 2417, 0),
+       CHAN2G(3, 2422, 0),
+       CHAN2G(4, 2427, 0),
+       CHAN2G(5, 2432, 0),
+       CHAN2G(6, 2437, 0),
+       CHAN2G(7, 2442, 0),
+       CHAN2G(8, 2447, 0),
+       CHAN2G(9, 2452, 0),
+       CHAN2G(10, 2457, 0),
+       CHAN2G(11, 2462, 0),
+       CHAN2G(12, 2467, 0),
+       CHAN2G(13, 2472, 0),
+       CHAN2G(14, 2484, 0),
+};
+
+static struct ieee80211_channel rtw_5ghz_a_channels[] = {
+       CHAN5G(34, 0),          CHAN5G(36, 0),
+       CHAN5G(38, 0),          CHAN5G(40, 0),
+       CHAN5G(42, 0),          CHAN5G(44, 0),
+       CHAN5G(46, 0),          CHAN5G(48, 0),
+       CHAN5G(52, 0),          CHAN5G(56, 0),
+       CHAN5G(60, 0),          CHAN5G(64, 0),
+       CHAN5G(100, 0),         CHAN5G(104, 0),
+       CHAN5G(108, 0),         CHAN5G(112, 0),
+       CHAN5G(116, 0),         CHAN5G(120, 0),
+       CHAN5G(124, 0),         CHAN5G(128, 0),
+       CHAN5G(132, 0),         CHAN5G(136, 0),
+       CHAN5G(140, 0),         CHAN5G(149, 0),
+       CHAN5G(153, 0),         CHAN5G(157, 0),
+       CHAN5G(161, 0),         CHAN5G(165, 0),
+       CHAN5G(184, 0),         CHAN5G(188, 0),
+       CHAN5G(192, 0),         CHAN5G(196, 0),
+       CHAN5G(200, 0),         CHAN5G(204, 0),
+       CHAN5G(208, 0),         CHAN5G(212, 0),
+       CHAN5G(216, 0),
+};
+
+
+void rtw_2g_channels_init(struct ieee80211_channel *channels)
+{
+       _rtw_memcpy((void*)channels, (void*)rtw_2ghz_channels,
+               sizeof(struct ieee80211_channel)*RTW_2G_CHANNELS_NUM
+       );
+}
+
+void rtw_5g_channels_init(struct ieee80211_channel *channels)
+{
+       _rtw_memcpy((void*)channels, (void*)rtw_5ghz_a_channels,
+               sizeof(struct ieee80211_channel)*RTW_5G_CHANNELS_NUM
+       );
+}
+
+void rtw_2g_rates_init(struct ieee80211_rate *rates)
+{
+       _rtw_memcpy(rates, rtw_g_rates,
+               sizeof(struct ieee80211_rate)*RTW_G_RATES_NUM
+       );
+}
+
+void rtw_5g_rates_init(struct ieee80211_rate *rates)
+{
+       _rtw_memcpy(rates, rtw_a_rates,
+               sizeof(struct ieee80211_rate)*RTW_A_RATES_NUM
+       );
+}
+
+struct ieee80211_supported_band *rtw_spt_band_alloc(
+       enum ieee80211_band band
+       )
+{
+       struct ieee80211_supported_band *spt_band = NULL;
+       int n_channels, n_bitrates;
+
+       if(band == IEEE80211_BAND_2GHZ)
+       {
+               n_channels = RTW_2G_CHANNELS_NUM;
+               n_bitrates = RTW_G_RATES_NUM;
+       }
+       else if(band == IEEE80211_BAND_5GHZ)
+       {
+               n_channels = RTW_5G_CHANNELS_NUM;
+               n_bitrates = RTW_A_RATES_NUM;
+       }
+       else
+       {
+               goto exit;
+       }
+
+       spt_band = (struct ieee80211_supported_band *)rtw_zmalloc(
+               sizeof(struct ieee80211_supported_band)
+               + sizeof(struct ieee80211_channel)*n_channels
+               + sizeof(struct ieee80211_rate)*n_bitrates
+       );
+       if(!spt_band)
+               goto exit;
+
+       spt_band->channels = (struct ieee80211_channel*)(((u8*)spt_band)+sizeof(struct ieee80211_supported_band));
+       spt_band->bitrates= (struct ieee80211_rate*)(((u8*)spt_band->channels)+sizeof(struct ieee80211_channel)*n_channels);
+       spt_band->band = band;
+       spt_band->n_channels = n_channels;
+       spt_band->n_bitrates = n_bitrates;
+
+       if(band == IEEE80211_BAND_2GHZ)
+       {
+               rtw_2g_channels_init(spt_band->channels);
+               rtw_2g_rates_init(spt_band->bitrates);
+       }
+       else if(band == IEEE80211_BAND_5GHZ)
+       {
+               rtw_5g_channels_init(spt_band->channels);
+               rtw_5g_rates_init(spt_band->bitrates);
+       }
+
+       //spt_band.ht_cap
+
+exit:
+
+       return spt_band;
+}
+
+void rtw_spt_band_free(struct ieee80211_supported_band *spt_band)
+{
+       u32 size;
+
+       if(!spt_band)
+               return;
+
+       if(spt_band->band == IEEE80211_BAND_2GHZ)
+       {
+               size = sizeof(struct ieee80211_supported_band)
+                       + sizeof(struct ieee80211_channel)*RTW_2G_CHANNELS_NUM
+                       + sizeof(struct ieee80211_rate)*RTW_G_RATES_NUM;
+       }
+       else if(spt_band->band == IEEE80211_BAND_5GHZ)
+       {
+               size = sizeof(struct ieee80211_supported_band)
+                       + sizeof(struct ieee80211_channel)*RTW_5G_CHANNELS_NUM
+                       + sizeof(struct ieee80211_rate)*RTW_A_RATES_NUM;
+       }
+       else
+       {
+
+       }
+       rtw_mfree((u8*)spt_band, size);
+}
+
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) || defined(COMPAT_KERNEL_RELEASE)
+static const struct ieee80211_txrx_stypes
+rtw_cfg80211_default_mgmt_stypes[NUM_NL80211_IFTYPES] = {
+       [NL80211_IFTYPE_ADHOC] = {
+               .tx = 0xffff,
+               .rx = BIT(IEEE80211_STYPE_ACTION >> 4)
+       },
+       [NL80211_IFTYPE_STATION] = {
+               .tx = 0xffff,
+               .rx = BIT(IEEE80211_STYPE_ACTION >> 4) |
+               BIT(IEEE80211_STYPE_PROBE_REQ >> 4)
+       },
+       [NL80211_IFTYPE_AP] = {
+               .tx = 0xffff,
+               .rx = BIT(IEEE80211_STYPE_ASSOC_REQ >> 4) |
+               BIT(IEEE80211_STYPE_REASSOC_REQ >> 4) |
+               BIT(IEEE80211_STYPE_PROBE_REQ >> 4) |
+               BIT(IEEE80211_STYPE_DISASSOC >> 4) |
+               BIT(IEEE80211_STYPE_AUTH >> 4) |
+               BIT(IEEE80211_STYPE_DEAUTH >> 4) |
+               BIT(IEEE80211_STYPE_ACTION >> 4)
+       },
+       [NL80211_IFTYPE_AP_VLAN] = {
+               /* copy AP */
+               .tx = 0xffff,
+               .rx = BIT(IEEE80211_STYPE_ASSOC_REQ >> 4) |
+               BIT(IEEE80211_STYPE_REASSOC_REQ >> 4) |
+               BIT(IEEE80211_STYPE_PROBE_REQ >> 4) |
+               BIT(IEEE80211_STYPE_DISASSOC >> 4) |
+               BIT(IEEE80211_STYPE_AUTH >> 4) |
+               BIT(IEEE80211_STYPE_DEAUTH >> 4) |
+               BIT(IEEE80211_STYPE_ACTION >> 4)
+       },
+       [NL80211_IFTYPE_P2P_CLIENT] = {
+               .tx = 0xffff,
+               .rx = BIT(IEEE80211_STYPE_ACTION >> 4) |
+               BIT(IEEE80211_STYPE_PROBE_REQ >> 4)
+       },
+       [NL80211_IFTYPE_P2P_GO] = {
+               .tx = 0xffff,
+               .rx = BIT(IEEE80211_STYPE_ASSOC_REQ >> 4) |
+               BIT(IEEE80211_STYPE_REASSOC_REQ >> 4) |
+               BIT(IEEE80211_STYPE_PROBE_REQ >> 4) |
+               BIT(IEEE80211_STYPE_DISASSOC >> 4) |
+               BIT(IEEE80211_STYPE_AUTH >> 4) |
+               BIT(IEEE80211_STYPE_DEAUTH >> 4) |
+               BIT(IEEE80211_STYPE_ACTION >> 4)
+       },
+};
+#endif
+
+static int rtw_ieee80211_channel_to_frequency(int chan, int band)
+{
+       /* see 802.11 17.3.8.3.2 and Annex J
+       * there are overlapping channel numbers in 5GHz and 2GHz bands */
+
+       if (band == IEEE80211_BAND_5GHZ) {
+       if (chan >= 182 && chan <= 196)
+                       return 4000 + chan * 5;
+             else
+                    return 5000 + chan * 5;
+       } else { /* IEEE80211_BAND_2GHZ */
+               if (chan == 14)
+                       return 2484;
+             else if (chan < 14)
+                       return 2407 + chan * 5;
+             else
+                       return 0; /* not supported */
+       }
+}
+
+#define MAX_BSSINFO_LEN 1000
+static int rtw_cfg80211_inform_bss(_adapter *padapter, struct wlan_network *pnetwork)
+{
+       int ret=0;
+       struct ieee80211_channel *notify_channel;
+       struct cfg80211_bss *bss;
+       //struct ieee80211_supported_band *band;
+       u16 channel;
+       u32 freq;
+       u64 notify_timestamp;
+       u16 notify_capability;
+       u16 notify_interval;
+       u8 *notify_ie;
+       size_t notify_ielen;
+       s32 notify_signal;
+       u8 buf[MAX_BSSINFO_LEN], *pbuf;
+       size_t len,bssinf_len=0;
+       struct rtw_ieee80211_hdr *pwlanhdr;
+       unsigned short *fctrl;
+       u8      bc_addr[] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
+
+       struct wireless_dev *wdev = padapter->rtw_wdev;
+       struct wiphy *wiphy = wdev->wiphy;
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+
+
+       //DBG_8192C("%s\n", __func__);
+
+       bssinf_len = pnetwork->network.IELength+sizeof (struct rtw_ieee80211_hdr_3addr);
+       if(bssinf_len > MAX_BSSINFO_LEN){
+               DBG_871X("%s IE Length too long > %d byte \n",__FUNCTION__,MAX_BSSINFO_LEN);
+               goto exit;
+       }
+
+       //To reduce PBC Overlap rate
+       //_enter_critical_bh(&pwdev_priv->scan_req_lock, &irqL);
+       if(wdev_to_priv(wdev)->scan_request != NULL)
+       {
+               u8 *psr=NULL, sr = 0;
+               NDIS_802_11_SSID *pssid = &pnetwork->network.Ssid;
+               struct cfg80211_scan_request *request = wdev_to_priv(wdev)->scan_request;
+               struct cfg80211_ssid *ssids = request->ssids;
+               u32 wpsielen=0;
+               u8 *wpsie=NULL;
+
+               wpsie = rtw_get_wps_ie(pnetwork->network.IEs+_FIXED_IE_LENGTH_, pnetwork->network.IELength-_FIXED_IE_LENGTH_, NULL, &wpsielen);
+
+               if(wpsie && wpsielen>0)
+                       psr = rtw_get_wps_attr_content(wpsie,  wpsielen, WPS_ATTR_SELECTED_REGISTRAR, (u8*)(&sr), NULL);
+
+               if (sr != 0)
+               {
+                       if(request->n_ssids == 1  && request->n_channels == 1) // it means under processing WPS
+                       {
+                               DBG_8192C("ssid=%s, len=%d\n", pssid->Ssid, pssid->SsidLength);
+
+                               if(pssid->SsidLength == ssids[0].ssid_len &&
+                                       _rtw_memcmp(pssid->Ssid, ssids[0].ssid, ssids[0].ssid_len))
+                               {
+                                       DBG_871X("%s, got sr and ssid match!\n", __func__);
+                               }
+                               else
+                               {
+                                       if(psr !=NULL)
+                                               *psr = 0; //clear sr
+
+#if 0
+                                       WLAN_BSSID_EX  *pselect_network = &pnetwork->network;
+                                       struct cfg80211_bss *pselect_bss = NULL;
+                                       struct ieee80211_channel *notify_channel = NULL;
+                                       u32 freq;
+
+                                       DBG_871X("%s, got sr, but ssid mismatch, to remove this bss\n", __func__);
+
+                                       if (pselect_network->Configuration.DSConfig <= RTW_CH_MAX_2G_CHANNEL)
+                                               freq = rtw_ieee80211_channel_to_frequency(pselect_network->Configuration.DSConfig, IEEE80211_BAND_2GHZ);
+                                       else
+                                               freq = rtw_ieee80211_channel_to_frequency(pselect_network->Configuration.DSConfig, IEEE80211_BAND_5GHZ);
+
+                                       notify_channel = ieee80211_get_channel(wiphy, freq);
+                                       pselect_bss = cfg80211_get_bss(wiphy, NULL/*notify_channel*/,
+                                                               pselect_network->MacAddress, pselect_network->Ssid.Ssid,
+                                                               pselect_network->Ssid.SsidLength, 0/*WLAN_CAPABILITY_ESS*/,
+                                                               0/*WLAN_CAPABILITY_ESS*/);
+
+                                       if(pselect_bss)
+                                       {
+                                               DBG_871X("%s, got bss for cfg80211 for unlinking bss\n", __func__);
+
+                                               cfg80211_unlink_bss(wiphy, pselect_bss);
+#if LINUX_VERSION_CODE >= KERNEL_VERSION(3, 9, 0)
+                                               cfg80211_put_bss(wiphy, pselect_bss);
+#else
+                                               cfg80211_put_bss(pselect_bss);
+#endif
+
+                                       }
+
+                                       goto exit;
+#endif
+                               }
+                       }
+               }
+       }
+       //_exit_critical_bh(&pwdev_priv->scan_req_lock, &irqL);
+
+       channel = pnetwork->network.Configuration.DSConfig;
+       if (channel <= RTW_CH_MAX_2G_CHANNEL)
+               freq = rtw_ieee80211_channel_to_frequency(channel, IEEE80211_BAND_2GHZ);
+       else
+               freq = rtw_ieee80211_channel_to_frequency(channel, IEEE80211_BAND_5GHZ);
+
+       notify_channel = ieee80211_get_channel(wiphy, freq);
+
+       //rtw_get_timestampe_from_ie()
+       notify_timestamp = jiffies_to_msecs(jiffies)*1000; /* uSec */
+
+       notify_interval = le16_to_cpu(*(u16*)rtw_get_beacon_interval_from_ie(pnetwork->network.IEs));
+       notify_capability = le16_to_cpu(*(u16*)rtw_get_capability_from_ie(pnetwork->network.IEs));
+
+
+       notify_ie = pnetwork->network.IEs+_FIXED_IE_LENGTH_;
+       notify_ielen = pnetwork->network.IELength-_FIXED_IE_LENGTH_;
+
+       //We've set wiphy's signal_type as CFG80211_SIGNAL_TYPE_MBM: signal strength in mBm (100*dBm)
+       if ( check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE &&
+               is_same_network(&pmlmepriv->cur_network.network, &pnetwork->network)) {
+               notify_signal = 100*translate_percentage_to_dbm(padapter->recvpriv.signal_strength);//dbm
+       } else {
+               notify_signal = 100*translate_percentage_to_dbm(pnetwork->network.PhyInfo.SignalStrength);//dbm
+       }
+
+/*
+       DBG_8192C("bssid: %2.2X:%2.2X:%2.2X:%2.2X:%2.2X:%2.2X\n",
+                        pnetwork->network.MacAddress[0], pnetwork->network.MacAddress[1], pnetwork->network.MacAddress[2],
+                        pnetwork->network.MacAddress[3], pnetwork->network.MacAddress[4], pnetwork->network.MacAddress[5]);
+       DBG_8192C("Channel: %d(%d)\n", channel, freq);
+       DBG_8192C("Capability: %X\n", notify_capability);
+       DBG_8192C("Beacon interval: %d\n", notify_interval);
+       DBG_8192C("Signal: %d\n", notify_signal);
+       DBG_8192C("notify_timestamp: %#018llx\n", notify_timestamp);
+*/
+
+       pbuf = buf;
+
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pbuf;
+       fctrl = &(pwlanhdr->frame_ctl);
+       *(fctrl) = 0;
+
+       SetSeqNum(pwlanhdr, 0/*pmlmeext->mgnt_seq*/);
+       //pmlmeext->mgnt_seq++;
+
+       if (pnetwork->network.Reserved[0] == 1) { // WIFI_BEACON
+               _rtw_memcpy(pwlanhdr->addr1, bc_addr, ETH_ALEN);
+               SetFrameSubType(pbuf, WIFI_BEACON);
+       } else {
+               _rtw_memcpy(pwlanhdr->addr1, myid(&(padapter->eeprompriv)), ETH_ALEN);
+               SetFrameSubType(pbuf, WIFI_PROBERSP);
+       }
+
+       _rtw_memcpy(pwlanhdr->addr2, pnetwork->network.MacAddress, ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr3, pnetwork->network.MacAddress, ETH_ALEN);
+
+
+       pbuf += sizeof(struct rtw_ieee80211_hdr_3addr);
+       len = sizeof (struct rtw_ieee80211_hdr_3addr);
+
+       _rtw_memcpy(pbuf, pnetwork->network.IEs, pnetwork->network.IELength);
+       len += pnetwork->network.IELength;
+
+       //#ifdef CONFIG_P2P
+       //if(rtw_get_p2p_ie(pnetwork->network.IEs+12, pnetwork->network.IELength-12, NULL, NULL))
+       //{
+       //      DBG_8192C("%s, got p2p_ie\n", __func__);
+       //}
+       //#endif
+
+
+#if 1
+       bss = cfg80211_inform_bss_frame(wiphy, notify_channel, (struct ieee80211_mgmt *)buf,
+               len, notify_signal, GFP_ATOMIC);
+#else
+
+       bss = cfg80211_inform_bss(wiphy, notify_channel, (const u8 *)pnetwork->network.MacAddress,
+                notify_timestamp, notify_capability, notify_interval, notify_ie,
+                notify_ielen, notify_signal, GFP_ATOMIC/*GFP_KERNEL*/);
+#endif
+
+       if (unlikely(!bss)) {
+               DBG_8192C("rtw_cfg80211_inform_bss error\n");
+               return -EINVAL;
+       }
+
+#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,38))
+#ifndef COMPAT_KERNEL_RELEASE
+       //patch for cfg80211, update beacon ies to information_elements
+       if (pnetwork->network.Reserved[0] == 1) { // WIFI_BEACON
+
+                if(bss->len_information_elements != bss->len_beacon_ies)
+                {
+                       bss->information_elements = bss->beacon_ies;
+                       bss->len_information_elements =  bss->len_beacon_ies;
+                }
+       }
+#endif //COMPAT_KERNEL_RELEASE
+#endif //LINUX_VERSION_CODE < KERNEL_VERSION(2,6,38)
+
+/*
+       {
+               if( bss->information_elements == bss->proberesp_ies)
+               {
+                       if( bss->len_information_elements !=  bss->len_proberesp_ies)
+                       {
+                               DBG_8192C("error!, len_information_elements !=  bss->len_proberesp_ies\n");
+                       }
+
+               }
+               else if(bss->len_information_elements <  bss->len_beacon_ies)
+               {
+                       bss->information_elements = bss->beacon_ies;
+                       bss->len_information_elements =  bss->len_beacon_ies;
+               }
+       }
+*/
+
+#if LINUX_VERSION_CODE >= KERNEL_VERSION(3, 9, 0)
+       cfg80211_put_bss(wiphy, bss);
+#else
+       cfg80211_put_bss(bss);
+#endif
+
+exit:
+       return ret;
+
+}
+
+/*
+       Check the given bss is valid by kernel API cfg80211_get_bss()
+       @padapter : the given adapter
+
+       return _TRUE if bss is valid,  _FALSE for not found.
+*/
+int rtw_cfg80211_check_bss(_adapter *padapter)
+{
+       WLAN_BSSID_EX  *pnetwork = &(padapter->mlmeextpriv.mlmext_info.network);
+       struct cfg80211_bss *bss = NULL;
+       struct ieee80211_channel *notify_channel = NULL;
+       u32 freq;
+
+       if (!(pnetwork) || !(padapter->rtw_wdev))
+               return _FALSE;
+
+       if (pnetwork->Configuration.DSConfig <= RTW_CH_MAX_2G_CHANNEL)
+               freq = rtw_ieee80211_channel_to_frequency(pnetwork->Configuration.DSConfig, IEEE80211_BAND_2GHZ);
+       else
+               freq = rtw_ieee80211_channel_to_frequency(pnetwork->Configuration.DSConfig, IEEE80211_BAND_5GHZ);
+
+       notify_channel = ieee80211_get_channel(padapter->rtw_wdev->wiphy, freq);
+       bss = cfg80211_get_bss(padapter->rtw_wdev->wiphy, notify_channel,
+                       pnetwork->MacAddress, pnetwork->Ssid.Ssid,
+                       pnetwork->Ssid.SsidLength,
+                       WLAN_CAPABILITY_ESS, WLAN_CAPABILITY_ESS);
+
+       return  (bss!=NULL);
+}
+
+void rtw_cfg80211_indicate_connect(_adapter *padapter)
+{
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+       struct wlan_network  *cur_network = &(pmlmepriv->cur_network);
+       struct wireless_dev *pwdev = padapter->rtw_wdev;
+#ifdef CONFIG_P2P
+       struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
+#endif
+       struct cfg80211_bss *bss = NULL;
+
+       DBG_871X(FUNC_ADPT_FMT"\n", FUNC_ADPT_ARG(padapter));
+       if (pwdev->iftype != NL80211_IFTYPE_STATION
+               #if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) || defined(COMPAT_KERNEL_RELEASE)
+               && pwdev->iftype != NL80211_IFTYPE_P2P_CLIENT
+               #endif
+       ) {
+               return;
+       }
+
+       if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
+               return;
+
+#ifdef CONFIG_P2P
+       if(pwdinfo->driver_interface == DRIVER_CFG80211 )
+       {
+               if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+               {
+                       rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
+                       rtw_p2p_set_role(pwdinfo, P2P_ROLE_CLIENT);
+                       rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_OK);
+                       DBG_8192C("%s, role=%d, p2p_state=%d, pre_p2p_state=%d\n", __func__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo), rtw_p2p_pre_state(pwdinfo));
+               }
+       }
+#endif //CONFIG_P2P
+
+       #ifdef CONFIG_LAYER2_ROAMING
+       if (rtw_to_roaming(padapter) > 0) {
+               #if LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 39) || defined(COMPAT_KERNEL_RELEASE)
+               struct wiphy *wiphy = pwdev->wiphy;
+               struct ieee80211_channel *notify_channel;
+               u32 freq;
+               u16 channel = cur_network->network.Configuration.DSConfig;
+
+               if (channel <= RTW_CH_MAX_2G_CHANNEL)
+                       freq = rtw_ieee80211_channel_to_frequency(channel, IEEE80211_BAND_2GHZ);
+               else
+                       freq = rtw_ieee80211_channel_to_frequency(channel, IEEE80211_BAND_5GHZ);
+
+               notify_channel = ieee80211_get_channel(wiphy, freq);
+               #endif
+
+               DBG_871X("%s call cfg80211_roamed\n", __FUNCTION__);
+               cfg80211_roamed(padapter->pnetdev
+                       #if LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 39) || defined(COMPAT_KERNEL_RELEASE)
+                       , notify_channel
+                       #endif
+                       , cur_network->network.MacAddress
+                       , pmlmepriv->assoc_req+sizeof(struct rtw_ieee80211_hdr_3addr)+2
+                       , pmlmepriv->assoc_req_len-sizeof(struct rtw_ieee80211_hdr_3addr)-2
+                       , pmlmepriv->assoc_rsp+sizeof(struct rtw_ieee80211_hdr_3addr)+6
+                       , pmlmepriv->assoc_rsp_len-sizeof(struct rtw_ieee80211_hdr_3addr)-6
+                       , GFP_ATOMIC);
+       }
+       else
+       #endif
+       {
+               DBG_8192C("pwdev->sme_state(b)=%d\n", pwdev->sme_state);
+               cfg80211_connect_result(padapter->pnetdev, cur_network->network.MacAddress
+                       , pmlmepriv->assoc_req+sizeof(struct rtw_ieee80211_hdr_3addr)+2
+                       , pmlmepriv->assoc_req_len-sizeof(struct rtw_ieee80211_hdr_3addr)-2
+                       , pmlmepriv->assoc_rsp+sizeof(struct rtw_ieee80211_hdr_3addr)+6
+                       , pmlmepriv->assoc_rsp_len-sizeof(struct rtw_ieee80211_hdr_3addr)-6
+                       , WLAN_STATUS_SUCCESS, GFP_ATOMIC);
+               DBG_8192C("pwdev->sme_state(a)=%d\n", pwdev->sme_state);
+       }
+}
+
+void rtw_cfg80211_indicate_disconnect(_adapter *padapter)
+{
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+       struct wireless_dev *pwdev = padapter->rtw_wdev;
+#ifdef CONFIG_P2P
+       struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
+#endif
+
+       DBG_871X(FUNC_ADPT_FMT"\n", FUNC_ADPT_ARG(padapter));
+
+       if (pwdev->iftype != NL80211_IFTYPE_STATION
+               #if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) || defined(COMPAT_KERNEL_RELEASE)
+               && pwdev->iftype != NL80211_IFTYPE_P2P_CLIENT
+               #endif
+       ) {
+               return;
+       }
+
+       if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
+               return;
+
+#ifdef CONFIG_P2P
+       if( pwdinfo->driver_interface == DRIVER_CFG80211 )
+       {
+               if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+               {
+                       _cancel_timer_ex( &pwdinfo->find_phase_timer );
+                       _cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
+                       _cancel_timer_ex( &pwdinfo->pre_tx_scan_timer);
+
+                       rtw_p2p_set_state(pwdinfo, rtw_p2p_pre_state(pwdinfo));
+                       rtw_p2p_set_role(pwdinfo, P2P_ROLE_DEVICE);
+
+                       DBG_8192C("%s, role=%d, p2p_state=%d, pre_p2p_state=%d\n", __func__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo), rtw_p2p_pre_state(pwdinfo));
+               }
+       }
+#endif //CONFIG_P2P
+
+       if (!padapter->mlmepriv.not_indic_disco) {
+               DBG_8192C("pwdev->sme_state(b)=%d\n", pwdev->sme_state);
+
+               if(pwdev->sme_state==CFG80211_SME_CONNECTING)
+                       cfg80211_connect_result(padapter->pnetdev, NULL, NULL, 0, NULL, 0,
+                               WLAN_STATUS_UNSPECIFIED_FAILURE, GFP_ATOMIC/*GFP_KERNEL*/);
+               else if(pwdev->sme_state==CFG80211_SME_CONNECTED)
+                       cfg80211_disconnected(padapter->pnetdev, 0, NULL, 0, GFP_ATOMIC);
+               //else
+                       //DBG_8192C("pwdev->sme_state=%d\n", pwdev->sme_state);
+
+               DBG_8192C("pwdev->sme_state(a)=%d\n", pwdev->sme_state);
+       }
+}
+
+
+#ifdef CONFIG_AP_MODE
+static u8 set_pairwise_key(_adapter *padapter, struct sta_info *psta)
+{
+       struct cmd_obj*                 ph2c;
+       struct set_stakey_parm  *psetstakey_para;
+       struct cmd_priv                         *pcmdpriv=&padapter->cmdpriv;
+       u8      res=_SUCCESS;
+
+       ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
+       if ( ph2c == NULL){
+               res= _FAIL;
+               goto exit;
+       }
+
+       psetstakey_para = (struct set_stakey_parm*)rtw_zmalloc(sizeof(struct set_stakey_parm));
+       if(psetstakey_para==NULL){
+               rtw_mfree((u8 *) ph2c, sizeof(struct cmd_obj));
+               res=_FAIL;
+               goto exit;
+       }
+
+       init_h2fwcmd_w_parm_no_rsp(ph2c, psetstakey_para, _SetStaKey_CMD_);
+
+
+       psetstakey_para->algorithm = (u8)psta->dot118021XPrivacy;
+
+       _rtw_memcpy(psetstakey_para->addr, psta->hwaddr, ETH_ALEN);
+
+       _rtw_memcpy(psetstakey_para->key, &psta->dot118021x_UncstKey, 16);
+
+
+       res = rtw_enqueue_cmd(pcmdpriv, ph2c);
+
+exit:
+
+       return res;
+
+}
+
+static int set_group_key(_adapter *padapter, u8 *key, u8 alg, int keyid)
+{
+       u8 keylen;
+       struct cmd_obj* pcmd;
+       struct setkey_parm *psetkeyparm;
+       struct cmd_priv *pcmdpriv=&(padapter->cmdpriv);
+       int res=_SUCCESS;
+
+       DBG_8192C("%s\n", __FUNCTION__);
+
+       pcmd = (struct cmd_obj*)rtw_zmalloc(sizeof(struct       cmd_obj));
+       if(pcmd==NULL){
+               res= _FAIL;
+               goto exit;
+       }
+       psetkeyparm=(struct setkey_parm*)rtw_zmalloc(sizeof(struct setkey_parm));
+       if(psetkeyparm==NULL){
+               rtw_mfree((unsigned char *)pcmd, sizeof(struct cmd_obj));
+               res= _FAIL;
+               goto exit;
+       }
+
+       _rtw_memset(psetkeyparm, 0, sizeof(struct setkey_parm));
+
+       psetkeyparm->keyid=(u8)keyid;
+       if (is_wep_enc(alg))
+               padapter->securitypriv.key_mask |= BIT(psetkeyparm->keyid);
+
+       psetkeyparm->algorithm = alg;
+
+       psetkeyparm->set_tx = 1;
+
+       switch(alg)
+       {
+               case _WEP40_:
+                       keylen = 5;
+                       break;
+               case _WEP104_:
+                       keylen = 13;
+                       break;
+               case _TKIP_:
+               case _TKIP_WTMIC_:
+               case _AES_:
+                       keylen = 16;
+               default:
+                       keylen = 16;
+       }
+
+       _rtw_memcpy(&(psetkeyparm->key[0]), key, keylen);
+
+       pcmd->cmdcode = _SetKey_CMD_;
+       pcmd->parmbuf = (u8 *)psetkeyparm;
+       pcmd->cmdsz =  (sizeof(struct setkey_parm));
+       pcmd->rsp = NULL;
+       pcmd->rspsz = 0;
+
+
+       _rtw_init_listhead(&pcmd->list);
+
+       res = rtw_enqueue_cmd(pcmdpriv, pcmd);
+
+exit:
+
+       return res;
+
+
+}
+
+static int set_wep_key(_adapter *padapter, u8 *key, u8 keylen, int keyid)
+{
+       u8 alg;
+
+       switch(keylen)
+       {
+               case 5:
+                       alg =_WEP40_;
+                       break;
+               case 13:
+                       alg =_WEP104_;
+                       break;
+               default:
+                       alg =_NO_PRIVACY_;
+       }
+
+       return set_group_key(padapter, key, alg, keyid);
+
+}
+
+static int rtw_cfg80211_ap_set_encryption(struct net_device *dev, struct ieee_param *param, u32 param_len)
+{
+       int ret = 0;
+       u32 wep_key_idx, wep_key_len,wep_total_len;
+       struct sta_info *psta = NULL, *pbcmc_sta = NULL;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
+       struct security_priv* psecuritypriv=&(padapter->securitypriv);
+       struct sta_priv *pstapriv = &padapter->stapriv;
+
+       DBG_8192C("%s\n", __FUNCTION__);
+
+       param->u.crypt.err = 0;
+       param->u.crypt.alg[IEEE_CRYPT_ALG_NAME_LEN - 1] = '\0';
+
+       //sizeof(struct ieee_param) = 64 bytes;
+       //if (param_len !=  (u32) ((u8 *) param->u.crypt.key - (u8 *) param) + param->u.crypt.key_len)
+       if (param_len !=  sizeof(struct ieee_param) + param->u.crypt.key_len)
+       {
+               ret =  -EINVAL;
+               goto exit;
+       }
+
+       if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
+           param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
+           param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
+       {
+               if (param->u.crypt.idx >= WEP_KEYS)
+               {
+                       ret = -EINVAL;
+                       goto exit;
+               }
+       }
+       else
+       {
+               psta = rtw_get_stainfo(pstapriv, param->sta_addr);
+               if(!psta)
+               {
+                       //ret = -EINVAL;
+                       DBG_8192C("rtw_set_encryption(), sta has already been removed or never been added\n");
+                       goto exit;
+               }
+       }
+
+       if (strcmp(param->u.crypt.alg, "none") == 0 && (psta==NULL))
+       {
+               //todo:clear default encryption keys
+
+               DBG_8192C("clear default encryption keys, keyid=%d\n", param->u.crypt.idx);
+
+               goto exit;
+       }
+
+
+       if (strcmp(param->u.crypt.alg, "WEP") == 0 && (psta==NULL))
+       {
+               DBG_8192C("r871x_set_encryption, crypt.alg = WEP\n");
+
+               wep_key_idx = param->u.crypt.idx;
+               wep_key_len = param->u.crypt.key_len;
+
+               DBG_8192C("r871x_set_encryption, wep_key_idx=%d, len=%d\n", wep_key_idx, wep_key_len);
+
+               if((wep_key_idx >= WEP_KEYS) || (wep_key_len<=0))
+               {
+                       ret = -EINVAL;
+                       goto exit;
+               }
+
+               if (wep_key_len > 0)
+               {
+                       wep_key_len = wep_key_len <= 5 ? 5 : 13;
+               }
+
+               if (psecuritypriv->bWepDefaultKeyIdxSet == 0)
+               {
+                       //wep default key has not been set, so use this key index as default key.
+
+                       psecuritypriv->ndisencryptstatus = Ndis802_11Encryption1Enabled;
+                       psecuritypriv->dot11PrivacyAlgrthm=_WEP40_;
+                       psecuritypriv->dot118021XGrpPrivacy=_WEP40_;
+
+                       if(wep_key_len == 13)
+                       {
+                               psecuritypriv->dot11PrivacyAlgrthm=_WEP104_;
+                               psecuritypriv->dot118021XGrpPrivacy=_WEP104_;
+                       }
+
+                       psecuritypriv->dot11PrivacyKeyIndex = wep_key_idx;
+               }
+
+               _rtw_memcpy(&(psecuritypriv->dot11DefKey[wep_key_idx].skey[0]), param->u.crypt.key, wep_key_len);
+
+               psecuritypriv->dot11DefKeylen[wep_key_idx] = wep_key_len;
+
+               set_wep_key(padapter, param->u.crypt.key, wep_key_len, wep_key_idx);
+
+               goto exit;
+
+       }
+
+
+       if(!psta && check_fwstate(pmlmepriv, WIFI_AP_STATE)) // //group key
+       {
+               if(param->u.crypt.set_tx == 0) //group key
+               {
+                       if(strcmp(param->u.crypt.alg, "WEP") == 0)
+                       {
+                               DBG_8192C("%s, set group_key, WEP\n", __FUNCTION__);
+
+                               _rtw_memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
+
+                               psecuritypriv->dot118021XGrpPrivacy = _WEP40_;
+                               if(param->u.crypt.key_len==13)
+                               {
+                                               psecuritypriv->dot118021XGrpPrivacy = _WEP104_;
+                               }
+
+                       }
+                       else if(strcmp(param->u.crypt.alg, "TKIP") == 0)
+                       {
+                               DBG_8192C("%s, set group_key, TKIP\n", __FUNCTION__);
+
+                               psecuritypriv->dot118021XGrpPrivacy = _TKIP_;
+
+                               _rtw_memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
+
+                               //DEBUG_ERR("set key length :param->u.crypt.key_len=%d\n", param->u.crypt.key_len);
+                               //set mic key
+                               _rtw_memcpy(psecuritypriv->dot118021XGrptxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[16]), 8);
+                               _rtw_memcpy(psecuritypriv->dot118021XGrprxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[24]), 8);
+
+                               psecuritypriv->busetkipkey = _TRUE;
+
+                       }
+                       else if(strcmp(param->u.crypt.alg, "CCMP") == 0)
+                       {
+                               DBG_8192C("%s, set group_key, CCMP\n", __FUNCTION__);
+
+                               psecuritypriv->dot118021XGrpPrivacy = _AES_;
+
+                               _rtw_memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
+                       }
+                       else
+                       {
+                               DBG_8192C("%s, set group_key, none\n", __FUNCTION__);
+
+                               psecuritypriv->dot118021XGrpPrivacy = _NO_PRIVACY_;
+                       }
+
+                       psecuritypriv->dot118021XGrpKeyid = param->u.crypt.idx;
+
+                       psecuritypriv->binstallGrpkey = _TRUE;
+
+                       psecuritypriv->dot11PrivacyAlgrthm = psecuritypriv->dot118021XGrpPrivacy;//!!!
+
+                       set_group_key(padapter, param->u.crypt.key, psecuritypriv->dot118021XGrpPrivacy, param->u.crypt.idx);
+
+                       pbcmc_sta=rtw_get_bcmc_stainfo(padapter);
+                       if(pbcmc_sta)
+                       {
+                               pbcmc_sta->ieee8021x_blocked = _FALSE;
+                               pbcmc_sta->dot118021XPrivacy= psecuritypriv->dot118021XGrpPrivacy;//rx will use bmc_sta's dot118021XPrivacy
+                       }
+
+               }
+
+               goto exit;
+
+       }
+
+       if(psecuritypriv->dot11AuthAlgrthm == dot11AuthAlgrthm_8021X && psta) // psk/802_1x
+       {
+               if(check_fwstate(pmlmepriv, WIFI_AP_STATE))
+               {
+                       if(param->u.crypt.set_tx ==1) //pairwise key
+                       {
+                               _rtw_memcpy(psta->dot118021x_UncstKey.skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
+
+                               if(strcmp(param->u.crypt.alg, "WEP") == 0)
+                               {
+                                       DBG_8192C("%s, set pairwise key, WEP\n", __FUNCTION__);
+
+                                       psta->dot118021XPrivacy = _WEP40_;
+                                       if(param->u.crypt.key_len==13)
+                                       {
+                                               psta->dot118021XPrivacy = _WEP104_;
+                                       }
+                               }
+                               else if(strcmp(param->u.crypt.alg, "TKIP") == 0)
+                               {
+                                       DBG_8192C("%s, set pairwise key, TKIP\n", __FUNCTION__);
+
+                                       psta->dot118021XPrivacy = _TKIP_;
+
+                                       //DEBUG_ERR("set key length :param->u.crypt.key_len=%d\n", param->u.crypt.key_len);
+                                       //set mic key
+                                       _rtw_memcpy(psta->dot11tkiptxmickey.skey, &(param->u.crypt.key[16]), 8);
+                                       _rtw_memcpy(psta->dot11tkiprxmickey.skey, &(param->u.crypt.key[24]), 8);
+
+                                       psecuritypriv->busetkipkey = _TRUE;
+
+                               }
+                               else if(strcmp(param->u.crypt.alg, "CCMP") == 0)
+                               {
+
+                                       DBG_8192C("%s, set pairwise key, CCMP\n", __FUNCTION__);
+
+                                       psta->dot118021XPrivacy = _AES_;
+                               }
+                               else
+                               {
+                                       DBG_8192C("%s, set pairwise key, none\n", __FUNCTION__);
+
+                                       psta->dot118021XPrivacy = _NO_PRIVACY_;
+                               }
+
+                               set_pairwise_key(padapter, psta);
+
+                               psta->ieee8021x_blocked = _FALSE;
+
+                               psta->bpairwise_key_installed = _TRUE;
+
+                       }
+                       else//group key???
+                       {
+                               if(strcmp(param->u.crypt.alg, "WEP") == 0)
+                               {
+                                       _rtw_memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
+
+                                       psecuritypriv->dot118021XGrpPrivacy = _WEP40_;
+                                       if(param->u.crypt.key_len==13)
+                                       {
+                                               psecuritypriv->dot118021XGrpPrivacy = _WEP104_;
+                                       }
+                               }
+                               else if(strcmp(param->u.crypt.alg, "TKIP") == 0)
+                               {
+                                       psecuritypriv->dot118021XGrpPrivacy = _TKIP_;
+
+                                       _rtw_memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
+
+                                       //DEBUG_ERR("set key length :param->u.crypt.key_len=%d\n", param->u.crypt.key_len);
+                                       //set mic key
+                                       _rtw_memcpy(psecuritypriv->dot118021XGrptxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[16]), 8);
+                                       _rtw_memcpy(psecuritypriv->dot118021XGrprxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[24]), 8);
+
+                                       psecuritypriv->busetkipkey = _TRUE;
+
+                               }
+                               else if(strcmp(param->u.crypt.alg, "CCMP") == 0)
+                               {
+                                       psecuritypriv->dot118021XGrpPrivacy = _AES_;
+
+                                       _rtw_memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
+                               }
+                               else
+                               {
+                                       psecuritypriv->dot118021XGrpPrivacy = _NO_PRIVACY_;
+                               }
+
+                               psecuritypriv->dot118021XGrpKeyid = param->u.crypt.idx;
+
+                               psecuritypriv->binstallGrpkey = _TRUE;
+
+                               psecuritypriv->dot11PrivacyAlgrthm = psecuritypriv->dot118021XGrpPrivacy;//!!!
+
+                               set_group_key(padapter, param->u.crypt.key, psecuritypriv->dot118021XGrpPrivacy, param->u.crypt.idx);
+
+                               pbcmc_sta=rtw_get_bcmc_stainfo(padapter);
+                               if(pbcmc_sta)
+                               {
+                                       pbcmc_sta->ieee8021x_blocked = _FALSE;
+                                       pbcmc_sta->dot118021XPrivacy= psecuritypriv->dot118021XGrpPrivacy;//rx will use bmc_sta's dot118021XPrivacy
+                               }
+
+                       }
+
+               }
+
+       }
+
+exit:
+
+       return ret;
+
+}
+#endif
+
+static int rtw_cfg80211_set_encryption(struct net_device *dev, struct ieee_param *param, u32 param_len)
+{
+       int ret = 0;
+       u32 wep_key_idx, wep_key_len,wep_total_len;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
+       struct security_priv *psecuritypriv = &padapter->securitypriv;
+#ifdef CONFIG_P2P
+       struct wifidirect_info* pwdinfo = &padapter->wdinfo;
+#endif //CONFIG_P2P
+
+_func_enter_;
+
+       DBG_8192C("%s\n", __func__);
+
+       param->u.crypt.err = 0;
+       param->u.crypt.alg[IEEE_CRYPT_ALG_NAME_LEN - 1] = '\0';
+
+       if (param_len < (u32) ((u8 *) param->u.crypt.key - (u8 *) param) + param->u.crypt.key_len)
+       {
+               ret =  -EINVAL;
+               goto exit;
+       }
+
+       if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
+           param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
+           param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
+       {
+               if (param->u.crypt.idx >= WEP_KEYS
+#ifdef CONFIG_IEEE80211W
+                       && param->u.crypt.idx > BIP_MAX_KEYID
+#endif //CONFIG_IEEE80211W
+               )
+               {
+                       ret = -EINVAL;
+                       goto exit;
+               }
+       } else {
+               ret = -EINVAL;
+               goto exit;
+       }
+
+       if (strcmp(param->u.crypt.alg, "WEP") == 0)
+       {
+               RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,("wpa_set_encryption, crypt.alg = WEP\n"));
+               DBG_8192C("wpa_set_encryption, crypt.alg = WEP\n");
+
+               wep_key_idx = param->u.crypt.idx;
+               wep_key_len = param->u.crypt.key_len;
+
+               if ((wep_key_idx > WEP_KEYS) || (wep_key_len <= 0))
+               {
+                       ret = -EINVAL;
+                       goto exit;
+               }
+
+               if (psecuritypriv->bWepDefaultKeyIdxSet == 0)
+               {
+                       //wep default key has not been set, so use this key index as default key.
+
+                       wep_key_len = wep_key_len <= 5 ? 5 : 13;
+
+               psecuritypriv->ndisencryptstatus = Ndis802_11Encryption1Enabled;
+                       psecuritypriv->dot11PrivacyAlgrthm = _WEP40_;
+                       psecuritypriv->dot118021XGrpPrivacy = _WEP40_;
+
+                       if(wep_key_len==13)
+                       {
+                               psecuritypriv->dot11PrivacyAlgrthm = _WEP104_;
+                               psecuritypriv->dot118021XGrpPrivacy = _WEP104_;
+                       }
+
+                       psecuritypriv->dot11PrivacyKeyIndex = wep_key_idx;
+               }
+
+               _rtw_memcpy(&(psecuritypriv->dot11DefKey[wep_key_idx].skey[0]), param->u.crypt.key, wep_key_len);
+
+               psecuritypriv->dot11DefKeylen[wep_key_idx] = wep_key_len;
+
+               rtw_set_key(padapter, psecuritypriv, wep_key_idx, 0);
+
+               goto exit;
+       }
+
+       if(padapter->securitypriv.dot11AuthAlgrthm == dot11AuthAlgrthm_8021X) // 802_1x
+       {
+               struct sta_info * psta,*pbcmc_sta;
+               struct sta_priv * pstapriv = &padapter->stapriv;
+
+               //DBG_8192C("%s, : dot11AuthAlgrthm == dot11AuthAlgrthm_8021X \n", __func__);
+
+               if (check_fwstate(pmlmepriv, WIFI_STATION_STATE | WIFI_MP_STATE) == _TRUE) //sta mode
+               {
+                       psta = rtw_get_stainfo(pstapriv, get_bssid(pmlmepriv));
+                       if (psta == NULL) {
+                               //DEBUG_ERR( ("Set wpa_set_encryption: Obtain Sta_info fail \n"));
+                               DBG_8192C("%s, : Obtain Sta_info fail \n", __func__);
+                       }
+                       else
+                       {
+                               //Jeff: don't disable ieee8021x_blocked while clearing key
+                               if (strcmp(param->u.crypt.alg, "none") != 0)
+                                       psta->ieee8021x_blocked = _FALSE;
+
+
+                               if((padapter->securitypriv.ndisencryptstatus == Ndis802_11Encryption2Enabled)||
+                                               (padapter->securitypriv.ndisencryptstatus ==  Ndis802_11Encryption3Enabled))
+                               {
+                                       psta->dot118021XPrivacy = padapter->securitypriv.dot11PrivacyAlgrthm;
+                               }
+
+                               if(param->u.crypt.set_tx ==1)//pairwise key
+                               {
+
+                                       DBG_8192C("%s, : param->u.crypt.set_tx ==1 \n", __func__);
+
+                                       _rtw_memcpy(psta->dot118021x_UncstKey.skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
+
+                                       if(strcmp(param->u.crypt.alg, "TKIP") == 0)//set mic key
+                                       {
+                                               //DEBUG_ERR(("\nset key length :param->u.crypt.key_len=%d\n", param->u.crypt.key_len));
+                                               _rtw_memcpy(psta->dot11tkiptxmickey.skey, &(param->u.crypt.key[16]), 8);
+                                               _rtw_memcpy(psta->dot11tkiprxmickey.skey, &(param->u.crypt.key[24]), 8);
+
+                                               padapter->securitypriv.busetkipkey=_FALSE;
+                                               //_set_timer(&padapter->securitypriv.tkip_timer, 50);
+                                       }
+
+                                       //DEBUG_ERR((" param->u.crypt.key_len=%d\n",param->u.crypt.key_len));
+                                       DBG_871X(" ~~~~set sta key:unicastkey\n");
+
+                                       rtw_setstakey_cmd(padapter, (unsigned char *)psta, _TRUE);
+                               }
+                               else//group key
+                               {
+                                       if(strcmp(param->u.crypt.alg, "TKIP") == 0 || strcmp(param->u.crypt.alg, "CCMP") == 0)
+                                       {
+                                               _rtw_memcpy(padapter->securitypriv.dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key,(param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
+                                               _rtw_memcpy(padapter->securitypriv.dot118021XGrptxmickey[param->u.crypt.idx].skey,&(param->u.crypt.key[16]),8);
+                                               _rtw_memcpy(padapter->securitypriv.dot118021XGrprxmickey[param->u.crypt.idx].skey,&(param->u.crypt.key[24]),8);
+                                               padapter->securitypriv.binstallGrpkey = _TRUE;
+                                               //DEBUG_ERR((" param->u.crypt.key_len=%d\n", param->u.crypt.key_len));
+                                               DBG_871X(" ~~~~set sta key:groupkey\n");
+
+                                               padapter->securitypriv.dot118021XGrpKeyid = param->u.crypt.idx;
+
+                                               rtw_set_key(padapter,&padapter->securitypriv,param->u.crypt.idx, 1);
+                                       }
+#ifdef CONFIG_IEEE80211W
+                                       else if(strcmp(param->u.crypt.alg, "BIP") == 0)
+                                       {
+                                               int no;
+                                               //DBG_871X("BIP key_len=%d , index=%d @@@@@@@@@@@@@@@@@@\n", param->u.crypt.key_len, param->u.crypt.idx);
+                                               //save the IGTK key, length 16 bytes
+                                               _rtw_memcpy(padapter->securitypriv.dot11wBIPKey[param->u.crypt.idx].skey,  param->u.crypt.key,(param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
+                                               /*DBG_871X("IGTK key below:\n");
+                                               for(no=0;no<16;no++)
+                                                       printk(" %02x ", padapter->securitypriv.dot11wBIPKey[param->u.crypt.idx].skey[no]);
+                                               DBG_871X("\n");*/
+                                               padapter->securitypriv.dot11wBIPKeyid = param->u.crypt.idx;
+                                               padapter->securitypriv.binstallBIPkey = _TRUE;
+                                               DBG_871X(" ~~~~set sta key:IGKT\n");
+                                       }
+#endif //CONFIG_IEEE80211W
+
+#ifdef CONFIG_P2P
+                                       if(pwdinfo->driver_interface == DRIVER_CFG80211 )
+                                       {
+                                               if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_PROVISIONING_ING))
+                                               {
+                                                       rtw_p2p_set_state(pwdinfo, P2P_STATE_PROVISIONING_DONE);
+                                               }
+                                       }
+#endif //CONFIG_P2P
+
+                               }
+                       }
+
+                       pbcmc_sta=rtw_get_bcmc_stainfo(padapter);
+                       if(pbcmc_sta==NULL)
+                       {
+                               //DEBUG_ERR( ("Set OID_802_11_ADD_KEY: bcmc stainfo is null \n"));
+                       }
+                       else
+                       {
+                               //Jeff: don't disable ieee8021x_blocked while clearing key
+                               if (strcmp(param->u.crypt.alg, "none") != 0)
+                                       pbcmc_sta->ieee8021x_blocked = _FALSE;
+
+                               if((padapter->securitypriv.ndisencryptstatus == Ndis802_11Encryption2Enabled)||
+                                               (padapter->securitypriv.ndisencryptstatus ==  Ndis802_11Encryption3Enabled))
+                               {
+                                       pbcmc_sta->dot118021XPrivacy = padapter->securitypriv.dot11PrivacyAlgrthm;
+                               }
+                       }
+               }
+               else if(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)) //adhoc mode
+               {
+               }
+       }
+
+exit:
+
+       DBG_8192C("%s, ret=%d\n", __func__, ret);
+
+       _func_exit_;
+
+       return ret;
+}
+
+static int cfg80211_rtw_add_key(struct wiphy *wiphy, struct net_device *ndev,
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) || defined(COMPAT_KERNEL_RELEASE)
+                               u8 key_index, bool pairwise, const u8 *mac_addr,
+#else  // (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
+                               u8 key_index, const u8 *mac_addr,
+#endif // (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
+                               struct key_params *params)
+{
+       char *alg_name;
+       u32 param_len;
+       struct ieee_param *param = NULL;
+       int ret=0;
+       struct wireless_dev *rtw_wdev = wiphy_to_wdev(wiphy);
+       _adapter *padapter = wiphy_to_adapter(wiphy);
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+
+       DBG_871X(FUNC_NDEV_FMT" adding key for %pM\n", FUNC_NDEV_ARG(ndev), mac_addr);
+       DBG_871X("cipher=0x%x\n", params->cipher);
+       DBG_871X("key_len=0x%x\n", params->key_len);
+       DBG_871X("seq_len=0x%x\n", params->seq_len);
+       DBG_871X("key_index=%d\n", key_index);
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) || defined(COMPAT_KERNEL_RELEASE)
+       DBG_871X("pairwise=%d\n", pairwise);
+#endif // (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
+
+       param_len = sizeof(struct ieee_param) + params->key_len;
+       param = (struct ieee_param *)rtw_malloc(param_len);
+       if (param == NULL)
+               return -1;
+
+       _rtw_memset(param, 0, param_len);
+
+       param->cmd = IEEE_CMD_SET_ENCRYPTION;
+       _rtw_memset(param->sta_addr, 0xff, ETH_ALEN);
+
+       switch (params->cipher) {
+       case IW_AUTH_CIPHER_NONE:
+               //todo: remove key
+               //remove = 1;
+               alg_name = "none";
+               break;
+       case WLAN_CIPHER_SUITE_WEP40:
+       case WLAN_CIPHER_SUITE_WEP104:
+               alg_name = "WEP";
+               break;
+       case WLAN_CIPHER_SUITE_TKIP:
+               alg_name = "TKIP";
+               break;
+       case WLAN_CIPHER_SUITE_CCMP:
+               alg_name = "CCMP";
+               break;
+#ifdef CONFIG_IEEE80211W
+       case WLAN_CIPHER_SUITE_AES_CMAC:
+               alg_name = "BIP";
+               break;
+#endif //CONFIG_IEEE80211W
+       default:
+               return -ENOTSUPP;
+       }
+
+       strncpy((char *)param->u.crypt.alg, alg_name, IEEE_CRYPT_ALG_NAME_LEN);
+
+
+       if (!mac_addr || is_broadcast_ether_addr(mac_addr))
+       {
+               param->u.crypt.set_tx = 0; //for wpa/wpa2 group key
+       } else {
+               param->u.crypt.set_tx = 1; //for wpa/wpa2 pairwise key
+       }
+
+
+       //param->u.crypt.idx = key_index - 1;
+       param->u.crypt.idx = key_index;
+
+       if (params->seq_len && params->seq)
+       {
+               _rtw_memcpy(param->u.crypt.seq, params->seq, params->seq_len);
+       }
+
+       if(params->key_len && params->key)
+       {
+               param->u.crypt.key_len = params->key_len;
+               _rtw_memcpy(param->u.crypt.key, params->key, params->key_len);
+       }
+
+       if(check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _TRUE)
+       {
+               ret =  rtw_cfg80211_set_encryption(ndev, param, param_len);
+       }
+       else if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
+       {
+#ifdef CONFIG_AP_MODE
+               if(mac_addr)
+                       _rtw_memcpy(param->sta_addr, (void*)mac_addr, ETH_ALEN);
+
+               ret = rtw_cfg80211_ap_set_encryption(ndev, param, param_len);
+#endif
+       }
+       else
+       {
+               DBG_8192C("error! fw_state=0x%x, iftype=%d\n", pmlmepriv->fw_state, rtw_wdev->iftype);
+
+       }
+
+       if(param)
+       {
+               rtw_mfree((u8*)param, param_len);
+       }
+
+       return ret;
+
+}
+
+static int cfg80211_rtw_get_key(struct wiphy *wiphy, struct net_device *ndev,
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) || defined(COMPAT_KERNEL_RELEASE)
+                               u8 key_index, bool pairwise, const u8 *mac_addr,
+#else  // (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
+                               u8 key_index, const u8 *mac_addr,
+#endif // (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
+                               void *cookie,
+                               void (*callback)(void *cookie,
+                                                struct key_params*))
+{
+#if 0
+       struct iwm_priv *iwm = ndev_to_iwm(ndev);
+       struct iwm_key *key = &iwm->keys[key_index];
+       struct key_params params;
+
+       IWM_DBG_WEXT(iwm, DBG, "Getting key %d\n", key_index);
+
+       memset(&params, 0, sizeof(params));
+
+       params.cipher = key->cipher;
+       params.key_len = key->key_len;
+       params.seq_len = key->seq_len;
+       params.seq = key->seq;
+       params.key = key->key;
+
+       callback(cookie, &params);
+
+       return key->key_len ? 0 : -ENOENT;
+#endif
+       DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(ndev));
+       return 0;
+}
+
+static int cfg80211_rtw_del_key(struct wiphy *wiphy, struct net_device *ndev,
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) || defined(COMPAT_KERNEL_RELEASE)
+                               u8 key_index, bool pairwise, const u8 *mac_addr)
+#else  // (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
+                               u8 key_index, const u8 *mac_addr)
+#endif // (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
+{
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(ndev);
+       struct security_priv *psecuritypriv = &padapter->securitypriv;
+
+       DBG_871X(FUNC_NDEV_FMT" key_index=%d\n", FUNC_NDEV_ARG(ndev), key_index);
+
+       if (key_index == psecuritypriv->dot11PrivacyKeyIndex)
+       {
+               //clear the flag of wep default key set.
+               psecuritypriv->bWepDefaultKeyIdxSet = 0;
+       }
+
+       return 0;
+}
+
+static int cfg80211_rtw_set_default_key(struct wiphy *wiphy,
+       struct net_device *ndev, u8 key_index
+       #if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,38)) || defined(COMPAT_KERNEL_RELEASE)
+       , bool unicast, bool multicast
+       #endif
+       )
+{
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(ndev);
+       struct security_priv *psecuritypriv = &padapter->securitypriv;
+
+               DBG_871X(FUNC_NDEV_FMT" key_index=%d"
+               #if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,38)) || defined(COMPAT_KERNEL_RELEASE)
+               ", unicast=%d, multicast=%d"
+               #endif
+               ".\n", FUNC_NDEV_ARG(ndev), key_index
+               #if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,38)) || defined(COMPAT_KERNEL_RELEASE)
+               , unicast, multicast
+               #endif
+               );
+
+       if ((key_index < WEP_KEYS) && ((psecuritypriv->dot11PrivacyAlgrthm == _WEP40_) || (psecuritypriv->dot11PrivacyAlgrthm == _WEP104_))) //set wep default key
+       {
+               psecuritypriv->ndisencryptstatus = Ndis802_11Encryption1Enabled;
+
+               psecuritypriv->dot11PrivacyKeyIndex = key_index;
+
+               psecuritypriv->dot11PrivacyAlgrthm = _WEP40_;
+               psecuritypriv->dot118021XGrpPrivacy = _WEP40_;
+               if (psecuritypriv->dot11DefKeylen[key_index] == 13)
+               {
+                       psecuritypriv->dot11PrivacyAlgrthm = _WEP104_;
+                       psecuritypriv->dot118021XGrpPrivacy = _WEP104_;
+               }
+
+               psecuritypriv->bWepDefaultKeyIdxSet = 1; //set the flag to represent that wep default key has been set
+       }
+
+       return 0;
+
+}
+
+static int cfg80211_rtw_get_station(struct wiphy *wiphy,
+                                   struct net_device *ndev,
+                                   u8 *mac, struct station_info *sinfo)
+{
+       int ret = 0;
+       _adapter *padapter = wiphy_to_adapter(wiphy);
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+       struct sta_info *psta = NULL;
+       struct sta_priv *pstapriv = &padapter->stapriv;
+
+       sinfo->filled = 0;
+
+       if (!mac) {
+               DBG_871X(FUNC_NDEV_FMT" mac==%p\n", FUNC_NDEV_ARG(ndev), mac);
+               ret = -ENOENT;
+               goto exit;
+       }
+
+       psta = rtw_get_stainfo(pstapriv, mac);
+       if (psta == NULL) {
+               DBG_8192C("%s, sta_info is null\n", __func__);
+               ret = -ENOENT;
+               goto exit;
+       }
+
+#ifdef CONFIG_DEBUG_CFG80211
+       DBG_871X(FUNC_NDEV_FMT" mac="MAC_FMT"\n", FUNC_NDEV_ARG(ndev), MAC_ARG(mac));
+#endif
+
+       //for infra./P2PClient mode
+       if(     check_fwstate(pmlmepriv, WIFI_STATION_STATE)
+               && check_fwstate(pmlmepriv, _FW_LINKED)
+       )
+       {
+               struct wlan_network  *cur_network = &(pmlmepriv->cur_network);
+
+               if (_rtw_memcmp(mac, cur_network->network.MacAddress, ETH_ALEN) == _FALSE) {
+                       DBG_871X("%s, mismatch bssid="MAC_FMT"\n", __func__, MAC_ARG(cur_network->network.MacAddress));
+                       ret = -ENOENT;
+                       goto exit;
+               }
+
+               sinfo->filled |= STATION_INFO_SIGNAL;
+               sinfo->signal = translate_percentage_to_dbm(padapter->recvpriv.signal_strength);
+
+               sinfo->filled |= STATION_INFO_TX_BITRATE;
+               sinfo->txrate.legacy = rtw_get_cur_max_rate(padapter);
+
+               sinfo->filled |= STATION_INFO_RX_PACKETS;
+               sinfo->rx_packets = sta_rx_data_pkts(psta);
+
+               sinfo->filled |= STATION_INFO_TX_PACKETS;
+               sinfo->tx_packets = psta->sta_stats.tx_pkts;
+
+       }
+
+       //for Ad-Hoc/AP mode
+       if ((check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)
+                       ||check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)
+                       ||check_fwstate(pmlmepriv, WIFI_AP_STATE))
+               && check_fwstate(pmlmepriv, _FW_LINKED)
+       )
+       {
+               //TODO: should acquire station info...
+       }
+
+exit:
+       return ret;
+}
+
+extern int netdev_open(struct net_device *pnetdev);
+#ifdef CONFIG_CONCURRENT_MODE
+extern int netdev_if2_open(struct net_device *pnetdev);
+#endif
+
+/*
+enum nl80211_iftype {
+       NL80211_IFTYPE_UNSPECIFIED,
+       NL80211_IFTYPE_ADHOC, //1
+       NL80211_IFTYPE_STATION, //2
+       NL80211_IFTYPE_AP, //3
+       NL80211_IFTYPE_AP_VLAN,
+       NL80211_IFTYPE_WDS,
+       NL80211_IFTYPE_MONITOR, //6
+       NL80211_IFTYPE_MESH_POINT,
+       NL80211_IFTYPE_P2P_CLIENT, //8
+       NL80211_IFTYPE_P2P_GO, //9
+       //keep last
+       NUM_NL80211_IFTYPES,
+       NL80211_IFTYPE_MAX = NUM_NL80211_IFTYPES - 1
+};
+*/
+static int cfg80211_rtw_change_iface(struct wiphy *wiphy,
+                                    struct net_device *ndev,
+                                    enum nl80211_iftype type, u32 *flags,
+                                    struct vif_params *params)
+{
+       enum nl80211_iftype old_type;
+       NDIS_802_11_NETWORK_INFRASTRUCTURE networkType ;
+       _adapter *padapter = wiphy_to_adapter(wiphy);
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct wireless_dev *rtw_wdev = wiphy_to_wdev(wiphy);
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+       _irqL irqL;
+       _queue *queue = &pmlmepriv->scanned_queue;
+#ifdef CONFIG_P2P
+       struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
+#endif
+       int ret = 0;
+       u8 change = _FALSE;
+
+       if (adapter_to_dvobj(padapter)->processing_dev_remove == _TRUE) {
+               ret= -EPERM;
+               goto exit;
+       }
+
+#ifdef CONFIG_CONCURRENT_MODE
+       if(padapter->adapter_type == SECONDARY_ADAPTER)
+       {
+               DBG_871X(FUNC_NDEV_FMT" call netdev_if2_open\n", FUNC_NDEV_ARG(ndev));
+               if(netdev_if2_open(ndev) != 0) {
+                       ret= -EPERM;
+                       goto exit;
+               }
+       }
+       else if(padapter->adapter_type == PRIMARY_ADAPTER)
+#endif //CONFIG_CONCURRENT_MODE
+       {
+               DBG_871X(FUNC_NDEV_FMT" call netdev_open\n", FUNC_NDEV_ARG(ndev));
+               if(netdev_open(ndev) != 0) {
+                       ret= -EPERM;
+                       goto exit;
+               }
+       }
+
+       if(_FAIL == rtw_pwr_wakeup(padapter)) {
+               ret= -EPERM;
+               goto exit;
+       }
+
+       old_type = rtw_wdev->iftype;
+       DBG_871X(FUNC_NDEV_FMT" old_iftype=%d, new_iftype=%d\n",
+               FUNC_NDEV_ARG(ndev), old_type, type);
+
+       if(old_type != type)
+       {
+               change = _TRUE;
+               pmlmeext->action_public_rxseq = 0xffff;
+               pmlmeext->action_public_dialog_token = 0xff;
+       }
+
+       switch (type) {
+       case NL80211_IFTYPE_ADHOC:
+               networkType = Ndis802_11IBSS;
+               break;
+#if defined(CONFIG_P2P) && ((LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) || defined(COMPAT_KERNEL_RELEASE))
+       case NL80211_IFTYPE_P2P_CLIENT:
+#endif
+       case NL80211_IFTYPE_STATION:
+               networkType = Ndis802_11Infrastructure;
+               #ifdef CONFIG_P2P
+               if(pwdinfo->driver_interface == DRIVER_CFG80211 )
+               {
+                       if(change && rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
+                       {
+                               _cancel_timer_ex( &pwdinfo->find_phase_timer );
+                               _cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
+                               _cancel_timer_ex( &pwdinfo->pre_tx_scan_timer);
+
+                               //it means remove GO and change mode from AP(GO) to station(P2P DEVICE)
+                               rtw_p2p_set_role(pwdinfo, P2P_ROLE_DEVICE);
+                               rtw_p2p_set_state(pwdinfo, rtw_p2p_pre_state(pwdinfo));
+
+                               DBG_8192C("%s, role=%d, p2p_state=%d, pre_p2p_state=%d\n", __func__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo), rtw_p2p_pre_state(pwdinfo));
+                       }
+               }
+               #endif //CONFIG_P2P
+               break;
+#if defined(CONFIG_P2P) && ((LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) || defined(COMPAT_KERNEL_RELEASE))
+       case NL80211_IFTYPE_P2P_GO:
+#endif
+       case NL80211_IFTYPE_AP:
+               networkType = Ndis802_11APMode;
+               #ifdef CONFIG_P2P
+               if(pwdinfo->driver_interface == DRIVER_CFG80211 )
+               {
+                       if(change && !rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+                       {
+                               //it means P2P Group created, we will be GO and change mode from  P2P DEVICE to AP(GO)
+                               rtw_p2p_set_role(pwdinfo, P2P_ROLE_GO);
+                       }
+               }
+               #endif //CONFIG_P2P
+               break;
+       default:
+               return -EOPNOTSUPP;
+       }
+
+       rtw_wdev->iftype = type;
+
+       _enter_critical_bh(&pmlmepriv->lock, &irqL);
+       _enter_critical_bh(&queue->lock, &irqL);
+
+       if (rtw_set_802_11_infrastructure_mode(padapter, networkType) ==_FALSE)
+       {
+               rtw_wdev->iftype = old_type;
+               ret = -EPERM;
+               _exit_critical_bh(&queue->lock, &irqL);
+               _exit_critical_bh(&pmlmepriv->lock, &irqL);
+               goto exit;
+       }
+       _exit_critical_bh(&queue->lock, &irqL);
+       _exit_critical_bh(&pmlmepriv->lock, &irqL);
+
+       rtw_setopmode_cmd(padapter, networkType);
+
+exit:
+
+       return ret;
+}
+
+void rtw_cfg80211_indicate_scan_done(struct rtw_wdev_priv *pwdev_priv, bool aborted)
+{
+       _irqL   irqL;
+
+       _enter_critical_bh(&pwdev_priv->scan_req_lock, &irqL);
+       if(pwdev_priv->scan_request != NULL)
+       {
+               //struct cfg80211_scan_request *scan_request = pwdev_priv->scan_request;
+
+               #ifdef CONFIG_DEBUG_CFG80211
+               DBG_871X("%s with scan req\n", __FUNCTION__);
+               #endif
+
+               //avoid WARN_ON(request != wiphy_to_dev(request->wiphy)->scan_req);
+               //if(scan_request == wiphy_to_dev(scan_request->wiphy)->scan_req)
+               if(pwdev_priv->scan_request->wiphy != pwdev_priv->rtw_wdev->wiphy)
+               {
+                       DBG_8192C("error wiphy compare\n");
+               }
+               else
+               {
+                       cfg80211_scan_done(pwdev_priv->scan_request, aborted);
+               }
+
+               pwdev_priv->scan_request = NULL;
+
+       } else {
+               #ifdef CONFIG_DEBUG_CFG80211
+               DBG_871X("%s without scan req\n", __FUNCTION__);
+               #endif
+       }
+       _exit_critical_bh(&pwdev_priv->scan_req_lock, &irqL);
+}
+
+void rtw_cfg80211_surveydone_event_callback(_adapter *padapter)
+{
+       _irqL   irqL;
+       _list                                   *plist, *phead;
+       struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
+       _queue                          *queue  = &(pmlmepriv->scanned_queue);
+       struct  wlan_network    *pnetwork = NULL;
+       u32 cnt=0;
+       u32 wait_for_surveydone;
+       sint wait_status;
+#ifdef CONFIG_P2P
+       struct  wifidirect_info*        pwdinfo = &padapter->wdinfo;
+#endif //CONFIG_P2P
+       struct rtw_wdev_priv *pwdev_priv = wdev_to_priv(padapter->rtw_wdev);
+       struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
+
+#ifdef CONFIG_DEBUG_CFG80211
+       DBG_8192C("%s\n", __func__);
+#endif
+
+       _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+
+       phead = get_list_head(queue);
+       plist = get_next(phead);
+
+       while(1)
+       {
+               if (rtw_end_of_queue_search(phead,plist)== _TRUE)
+                       break;
+
+               pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
+
+               //report network only if the current channel set contains the channel to which this network belongs
+               if(rtw_ch_set_search_ch(padapter->mlmeextpriv.channel_set, pnetwork->network.Configuration.DSConfig) >= 0
+                       && rtw_mlme_band_check(padapter, pnetwork->network.Configuration.DSConfig) == _TRUE
+                       && _TRUE == rtw_validate_ssid(&(pnetwork->network.Ssid))
+               )
+               {
+                       //ev=translate_scan(padapter, a, pnetwork, ev, stop);
+                       rtw_cfg80211_inform_bss(padapter, pnetwork);
+               }
+
+               plist = get_next(plist);
+
+       }
+
+       _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+
+       //call this after other things have been done
+       rtw_cfg80211_indicate_scan_done(wdev_to_priv(padapter->rtw_wdev), _FALSE);
+}
+
+static int rtw_cfg80211_set_probe_req_wpsp2pie(_adapter *padapter, char *buf, int len)
+{
+       int ret = 0;
+       uint wps_ielen = 0;
+       u8 *wps_ie;
+       u32     p2p_ielen = 0;
+       u8 *p2p_ie;
+       u32     wfd_ielen = 0;
+       u8 *wfd_ie;
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+
+#ifdef CONFIG_DEBUG_CFG80211
+       DBG_8192C("%s, ielen=%d\n", __func__, len);
+#endif
+
+       if(len>0)
+       {
+               if((wps_ie = rtw_get_wps_ie(buf, len, NULL, &wps_ielen)))
+               {
+                       #ifdef CONFIG_DEBUG_CFG80211
+                       DBG_8192C("probe_req_wps_ielen=%d\n", wps_ielen);
+                       #endif
+
+                       if(pmlmepriv->wps_probe_req_ie)
+                       {
+                               u32 free_len = pmlmepriv->wps_probe_req_ie_len;
+                               pmlmepriv->wps_probe_req_ie_len = 0;
+                               rtw_mfree(pmlmepriv->wps_probe_req_ie, free_len);
+                               pmlmepriv->wps_probe_req_ie = NULL;
+                       }
+
+                       pmlmepriv->wps_probe_req_ie = rtw_malloc(wps_ielen);
+                       if ( pmlmepriv->wps_probe_req_ie == NULL) {
+                               DBG_8192C("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
+                               return -EINVAL;
+
+                       }
+                       _rtw_memcpy(pmlmepriv->wps_probe_req_ie, wps_ie, wps_ielen);
+                       pmlmepriv->wps_probe_req_ie_len = wps_ielen;
+               }
+
+               //buf += wps_ielen;
+               //len -= wps_ielen;
+
+               #ifdef CONFIG_P2P
+               if((p2p_ie=rtw_get_p2p_ie(buf, len, NULL, &p2p_ielen)))
+               {
+                       struct wifidirect_info *wdinfo = &padapter->wdinfo;
+                       u32 attr_contentlen = 0;
+                       u8 listen_ch_attr[5];
+
+                       #ifdef CONFIG_DEBUG_CFG80211
+                       DBG_8192C("probe_req_p2p_ielen=%d\n", p2p_ielen);
+                       #endif
+
+                       if(pmlmepriv->p2p_probe_req_ie)
+                       {
+                               u32 free_len = pmlmepriv->p2p_probe_req_ie_len;
+                               pmlmepriv->p2p_probe_req_ie_len = 0;
+                               rtw_mfree(pmlmepriv->p2p_probe_req_ie, free_len);
+                               pmlmepriv->p2p_probe_req_ie = NULL;
+                       }
+
+                       pmlmepriv->p2p_probe_req_ie = rtw_malloc(p2p_ielen);
+                       if ( pmlmepriv->p2p_probe_req_ie == NULL) {
+                               DBG_8192C("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
+                               return -EINVAL;
+
+                       }
+                       _rtw_memcpy(pmlmepriv->p2p_probe_req_ie, p2p_ie, p2p_ielen);
+                       pmlmepriv->p2p_probe_req_ie_len = p2p_ielen;
+
+                       if(rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_LISTEN_CH, (u8*)listen_ch_attr, (uint*) &attr_contentlen)
+                               && attr_contentlen == 5)
+                       {
+                               if (wdinfo->listen_channel !=  listen_ch_attr[4]) {
+                                       DBG_871X(FUNC_ADPT_FMT" listen channel - country:%c%c%c, class:%u, ch:%u\n",
+                                               FUNC_ADPT_ARG(padapter), listen_ch_attr[0], listen_ch_attr[1], listen_ch_attr[2],
+                                               listen_ch_attr[3], listen_ch_attr[4]);
+                                       wdinfo->listen_channel = listen_ch_attr[4];
+                               }
+                       }
+               }
+               #endif //CONFIG_P2P
+
+               //buf += p2p_ielen;
+               //len -= p2p_ielen;
+
+               #ifdef CONFIG_WFD
+               if(rtw_get_wfd_ie(buf, len, NULL, &wfd_ielen))
+               {
+                       #ifdef CONFIG_DEBUG_CFG80211
+                       DBG_8192C("probe_req_wfd_ielen=%d\n", wfd_ielen);
+                       #endif
+
+                       if(pmlmepriv->wfd_probe_req_ie)
+                       {
+                               u32 free_len = pmlmepriv->wfd_probe_req_ie_len;
+                               pmlmepriv->wfd_probe_req_ie_len = 0;
+                               rtw_mfree(pmlmepriv->wfd_probe_req_ie, free_len);
+                               pmlmepriv->wfd_probe_req_ie = NULL;
+                       }
+
+                       pmlmepriv->wfd_probe_req_ie = rtw_malloc(wfd_ielen);
+                       if ( pmlmepriv->wfd_probe_req_ie == NULL) {
+                               DBG_8192C("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
+                               return -EINVAL;
+
+                       }
+                       rtw_get_wfd_ie(buf, len, pmlmepriv->wfd_probe_req_ie, &pmlmepriv->wfd_probe_req_ie_len);
+               }
+               #endif //CONFIG_WFD
+
+       }
+
+       return ret;
+
+}
+
+static int cfg80211_rtw_scan(struct wiphy *wiphy
+       #if (LINUX_VERSION_CODE < KERNEL_VERSION(3, 6, 0))
+       , struct net_device *ndev
+       #endif
+       , struct cfg80211_scan_request *request)
+{
+       int i;
+       u8 _status = _FALSE;
+       int ret = 0;
+       _adapter *padapter = wiphy_to_adapter(wiphy);
+       struct mlme_priv *pmlmepriv= &padapter->mlmepriv;
+       NDIS_802_11_SSID ssid[RTW_SSID_SCAN_AMOUNT];
+       struct rtw_ieee80211_channel ch[RTW_CHANNEL_SCAN_AMOUNT];
+       _irqL   irqL;
+       u8 *wps_ie=NULL;
+       uint wps_ielen=0;
+       u8 *p2p_ie=NULL;
+       uint p2p_ielen=0;
+       u8 survey_times=3;
+       u8 survey_times_for_one_ch=6;
+#ifdef CONFIG_P2P
+       struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
+#endif //CONFIG_P2P
+       struct rtw_wdev_priv *pwdev_priv = wdev_to_priv(padapter->rtw_wdev);
+       struct cfg80211_ssid *ssids = request->ssids;
+       int social_channel = 0, j = 0;
+       bool need_indicate_scan_done = _FALSE;
+#ifdef CONFIG_CONCURRENT_MODE
+       PADAPTER pbuddy_adapter = NULL;
+       struct mlme_priv *pbuddy_mlmepriv = NULL;
+#endif //CONFIG_CONCURRENT_MODE
+
+//#ifdef CONFIG_DEBUG_CFG80211
+       DBG_871X(FUNC_ADPT_FMT"\n", FUNC_ADPT_ARG(padapter));
+//#endif
+
+#ifdef CONFIG_CONCURRENT_MODE
+       if (padapter->pbuddy_adapter) {
+               pbuddy_adapter = padapter->pbuddy_adapter;
+               pbuddy_mlmepriv = &(pbuddy_adapter->mlmepriv);
+       }
+#endif //CONFIG_CONCURRENT_MODE
+
+#ifdef CONFIG_MP_INCLUDED
+       if (check_fwstate(pmlmepriv, WIFI_MP_STATE) == _TRUE)
+       {
+               ret = -EPERM;
+               goto exit;
+       }
+#endif
+
+       _enter_critical_bh(&pwdev_priv->scan_req_lock, &irqL);
+       pwdev_priv->scan_request = request;
+       _exit_critical_bh(&pwdev_priv->scan_req_lock, &irqL);
+
+       if (check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
+       {
+#ifdef CONFIG_DEBUG_CFG80211
+               DBG_871X("%s under WIFI_AP_STATE\n", __FUNCTION__);
+#endif
+
+               if (check_fwstate(pmlmepriv, WIFI_UNDER_WPS|_FW_UNDER_SURVEY|_FW_UNDER_LINKING) == _TRUE)
+               {
+                       DBG_8192C("%s, fwstate=0x%x\n", __func__, pmlmepriv->fw_state);
+
+                       if(check_fwstate(pmlmepriv, WIFI_UNDER_WPS))
+                       {
+                               DBG_8192C("AP mode process WPS \n");
+                       }
+
+                       need_indicate_scan_done = _TRUE;
+                       goto check_need_indicate_scan_done;
+               }
+       }
+
+       if(_FAIL == rtw_pwr_wakeup(padapter)) {
+               need_indicate_scan_done = _TRUE;
+               goto check_need_indicate_scan_done;
+       }
+
+       #ifdef CONFIG_P2P
+       if( pwdinfo->driver_interface == DRIVER_CFG80211 )
+       {
+               if(ssids->ssid != NULL
+                       && _rtw_memcmp(ssids->ssid, "DIRECT-", 7)
+                       && rtw_get_p2p_ie((u8 *)request->ie, request->ie_len, NULL, NULL)
+               )
+               {
+                       if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+                       {
+                               u32 initialgain = 0x30;
+                               rtw_p2p_enable(padapter, P2P_ROLE_DEVICE);
+                               wdev_to_priv(padapter->rtw_wdev)->p2p_enabled = _TRUE;
+                               padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_INITIAL_GAIN, (u8 *)&(initialgain));
+                               padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_INITIAL_GAIN, (u8 *)&(initialgain));
+                       }
+                       else
+                       {
+                               rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
+                               #ifdef CONFIG_DEBUG_CFG80211
+                               DBG_8192C("%s, role=%d, p2p_state=%d\n", __func__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo));
+                               #endif
+                       }
+                       rtw_p2p_set_state(pwdinfo, P2P_STATE_LISTEN);
+
+                       if(request->n_channels == 3 &&
+                               request->channels[0]->hw_value == 1 &&
+                               request->channels[1]->hw_value == 6 &&
+                               request->channels[2]->hw_value == 11
+                       )
+                       {
+                               social_channel = 1;
+                       }
+               }
+       }
+       #endif //CONFIG_P2P
+
+       if(request->ie && request->ie_len>0)
+       {
+               rtw_cfg80211_set_probe_req_wpsp2pie(padapter, (u8 *)request->ie, request->ie_len );
+       }
+
+       if (pmlmepriv->LinkDetectInfo.bBusyTraffic == _TRUE)
+       {
+               DBG_8192C("%s, bBusyTraffic == _TRUE\n", __func__);
+               need_indicate_scan_done = _TRUE;
+               goto check_need_indicate_scan_done;
+       }
+       if (rtw_is_scan_deny(padapter)){
+               DBG_871X(FUNC_ADPT_FMT  ": scan deny\n", FUNC_ADPT_ARG(padapter));
+               need_indicate_scan_done = _TRUE;
+               goto check_need_indicate_scan_done;
+       }
+
+#ifdef CONFIG_CONCURRENT_MODE
+       if(pbuddy_mlmepriv && (pbuddy_mlmepriv->LinkDetectInfo.bBusyTraffic == _TRUE))
+       {
+               DBG_8192C("%s, bBusyTraffic == _TRUE at buddy_intf\n", __func__);
+               need_indicate_scan_done = _TRUE;
+               goto check_need_indicate_scan_done;
+       }
+#endif //CONFIG_CONCURRENT_MODE
+
+       if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY|_FW_UNDER_LINKING) == _TRUE)
+       {
+               DBG_8192C("%s, fwstate=0x%x\n", __func__, pmlmepriv->fw_state);
+               need_indicate_scan_done = _TRUE;
+               goto check_need_indicate_scan_done;
+       }
+
+#ifdef CONFIG_CONCURRENT_MODE
+       if (check_buddy_fwstate(padapter,
+               _FW_UNDER_SURVEY|_FW_UNDER_LINKING|WIFI_UNDER_WPS) == _TRUE)
+       {
+               if(check_buddy_fwstate(padapter, _FW_UNDER_SURVEY))
+               {
+                       DBG_8192C("scanning_via_buddy_intf\n");
+                       pmlmepriv->scanning_via_buddy_intf = _TRUE;
+               }
+
+               DBG_8192C("buddy_intf's mlme state:0x%x\n", pbuddy_mlmepriv->fw_state);
+
+               need_indicate_scan_done = _TRUE;
+               goto check_need_indicate_scan_done;
+       }
+#endif
+
+
+#ifdef CONFIG_P2P
+       if( pwdinfo->driver_interface == DRIVER_CFG80211 )
+       {
+               if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE) && !rtw_p2p_chk_state(pwdinfo, P2P_STATE_IDLE))
+               {
+                       rtw_p2p_set_state(pwdinfo, P2P_STATE_FIND_PHASE_SEARCH);
+                       rtw_free_network_queue(padapter, _TRUE);
+
+                       if(social_channel == 0)
+                               rtw_p2p_findphase_ex_set(pwdinfo, P2P_FINDPHASE_EX_NONE);
+                       else
+                               rtw_p2p_findphase_ex_set(pwdinfo, P2P_FINDPHASE_EX_SOCIAL_LAST);
+               }
+       }
+#endif //CONFIG_P2P
+
+
+       _rtw_memset(ssid, 0, sizeof(NDIS_802_11_SSID)*RTW_SSID_SCAN_AMOUNT);
+       //parsing request ssids, n_ssids
+       for (i = 0; i < request->n_ssids && i < RTW_SSID_SCAN_AMOUNT; i++) {
+               #ifdef CONFIG_DEBUG_CFG80211
+               DBG_8192C("ssid=%s, len=%d\n", ssids[i].ssid, ssids[i].ssid_len);
+               #endif
+               _rtw_memcpy(ssid[i].Ssid, ssids[i].ssid, ssids[i].ssid_len);
+               ssid[i].SsidLength = ssids[i].ssid_len;
+       }
+
+
+       /* parsing channels, n_channels */
+       _rtw_memset(ch, 0, sizeof(struct rtw_ieee80211_channel)*RTW_CHANNEL_SCAN_AMOUNT);
+       for (i=0;i<request->n_channels && i<RTW_CHANNEL_SCAN_AMOUNT;i++) {
+               #ifdef CONFIG_DEBUG_CFG80211
+               DBG_871X(FUNC_ADPT_FMT CHAN_FMT"\n", FUNC_ADPT_ARG(padapter), CHAN_ARG(request->channels[i]));
+               #endif
+               ch[i].hw_value = request->channels[i]->hw_value;
+               ch[i].flags = request->channels[i]->flags;
+       }
+
+       _enter_critical_bh(&pmlmepriv->lock, &irqL);
+       if (request->n_channels == 1) {
+               for(i=1;i<survey_times_for_one_ch;i++)
+                       _rtw_memcpy(&ch[i], &ch[0], sizeof(struct rtw_ieee80211_channel));
+               _status = rtw_sitesurvey_cmd(padapter, ssid, RTW_SSID_SCAN_AMOUNT, ch, survey_times_for_one_ch);
+       } else if (request->n_channels == 2) {
+               _rtw_memcpy(&ch[3], &ch[1], sizeof(struct rtw_ieee80211_channel));
+               for(i=1;i<survey_times;i++) {
+                       _rtw_memcpy(&ch[i], &ch[0], sizeof(struct rtw_ieee80211_channel));
+                       _rtw_memcpy(&ch[i+3], &ch[3], sizeof(struct rtw_ieee80211_channel));
+               }
+               _status = rtw_sitesurvey_cmd(padapter, ssid, RTW_SSID_SCAN_AMOUNT, ch, survey_times * 2);
+       } else {
+               _status = rtw_sitesurvey_cmd(padapter, ssid, RTW_SSID_SCAN_AMOUNT, NULL, 0);
+       }
+       _exit_critical_bh(&pmlmepriv->lock, &irqL);
+
+
+       if(_status == _FALSE)
+       {
+               ret = -1;
+       }
+
+check_need_indicate_scan_done:
+       if(need_indicate_scan_done)
+               rtw_cfg80211_surveydone_event_callback(padapter);
+
+exit:
+
+       return ret;
+
+}
+
+static int cfg80211_rtw_set_wiphy_params(struct wiphy *wiphy, u32 changed)
+{
+#if 0
+       struct iwm_priv *iwm = wiphy_to_iwm(wiphy);
+
+       if (changed & WIPHY_PARAM_RTS_THRESHOLD &&
+           (iwm->conf.rts_threshold != wiphy->rts_threshold)) {
+               int ret;
+
+               iwm->conf.rts_threshold = wiphy->rts_threshold;
+
+               ret = iwm_umac_set_config_fix(iwm, UMAC_PARAM_TBL_CFG_FIX,
+                                            CFG_RTS_THRESHOLD,
+                                            iwm->conf.rts_threshold);
+               if (ret < 0)
+                       return ret;
+       }
+
+       if (changed & WIPHY_PARAM_FRAG_THRESHOLD &&
+           (iwm->conf.frag_threshold != wiphy->frag_threshold)) {
+               int ret;
+
+               iwm->conf.frag_threshold = wiphy->frag_threshold;
+
+               ret = iwm_umac_set_config_fix(iwm, UMAC_PARAM_TBL_FA_CFG_FIX,
+                                            CFG_FRAG_THRESHOLD,
+                                            iwm->conf.frag_threshold);
+               if (ret < 0)
+                       return ret;
+       }
+#endif
+       DBG_8192C("%s\n", __func__);
+       return 0;
+}
+
+static int cfg80211_rtw_join_ibss(struct wiphy *wiphy, struct net_device *ndev,
+                                 struct cfg80211_ibss_params *params)
+{
+#if 0
+       struct iwm_priv *iwm = wiphy_to_iwm(wiphy);
+       struct ieee80211_channel *chan = params->channel;
+
+       if (!test_bit(IWM_STATUS_READY, &iwm->status))
+               return -EIO;
+
+       /* UMAC doesn't support creating or joining an IBSS network
+        * with specified bssid. */
+       if (params->bssid)
+               return -EOPNOTSUPP;
+
+       iwm->channel = ieee80211_frequency_to_channel(chan->center_freq);
+       iwm->umac_profile->ibss.band = chan->band;
+       iwm->umac_profile->ibss.channel = iwm->channel;
+       iwm->umac_profile->ssid.ssid_len = params->ssid_len;
+       memcpy(iwm->umac_profile->ssid.ssid, params->ssid, params->ssid_len);
+
+       return iwm_send_mlme_profile(iwm);
+#endif
+       DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(ndev));
+       return 0;
+}
+
+static int cfg80211_rtw_leave_ibss(struct wiphy *wiphy, struct net_device *ndev)
+{
+#if 0
+       struct iwm_priv *iwm = wiphy_to_iwm(wiphy);
+
+       if (iwm->umac_profile_active)
+               return iwm_invalidate_mlme_profile(iwm);
+#endif
+       DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(ndev));
+       return 0;
+}
+
+static int rtw_cfg80211_set_wpa_version(struct security_priv *psecuritypriv, u32 wpa_version)
+{
+       DBG_8192C("%s, wpa_version=%d\n", __func__, wpa_version);
+
+       if (!wpa_version) {
+               psecuritypriv->ndisauthtype = Ndis802_11AuthModeOpen;
+               return 0;
+       }
+
+
+       if (wpa_version & (NL80211_WPA_VERSION_1 | NL80211_WPA_VERSION_2))
+       {
+               psecuritypriv->ndisauthtype = Ndis802_11AuthModeWPAPSK;
+       }
+
+/*
+       if (wpa_version & NL80211_WPA_VERSION_2)
+       {
+               psecuritypriv->ndisauthtype = Ndis802_11AuthModeWPA2PSK;
+       }
+*/
+
+       return 0;
+
+}
+
+static int rtw_cfg80211_set_auth_type(struct security_priv *psecuritypriv,
+                            enum nl80211_auth_type sme_auth_type)
+{
+       DBG_8192C("%s, nl80211_auth_type=%d\n", __func__, sme_auth_type);
+
+
+       switch (sme_auth_type) {
+       case NL80211_AUTHTYPE_AUTOMATIC:
+
+               psecuritypriv->dot11AuthAlgrthm = dot11AuthAlgrthm_Auto;
+
+               break;
+       case NL80211_AUTHTYPE_OPEN_SYSTEM:
+
+               psecuritypriv->dot11AuthAlgrthm = dot11AuthAlgrthm_Open;
+
+               if(psecuritypriv->ndisauthtype>Ndis802_11AuthModeWPA)
+                       psecuritypriv->dot11AuthAlgrthm = dot11AuthAlgrthm_8021X;
+
+               break;
+       case NL80211_AUTHTYPE_SHARED_KEY:
+
+               psecuritypriv->dot11AuthAlgrthm = dot11AuthAlgrthm_Shared;
+
+               psecuritypriv->ndisencryptstatus = Ndis802_11Encryption1Enabled;
+
+
+               break;
+       default:
+               psecuritypriv->dot11AuthAlgrthm = dot11AuthAlgrthm_Open;
+               //return -ENOTSUPP;
+       }
+
+       return 0;
+
+}
+
+static int rtw_cfg80211_set_cipher(struct security_priv *psecuritypriv, u32 cipher, bool ucast)
+{
+       u32 ndisencryptstatus = Ndis802_11EncryptionDisabled;
+
+       u32 *profile_cipher = ucast ? &psecuritypriv->dot11PrivacyAlgrthm :
+               &psecuritypriv->dot118021XGrpPrivacy;
+
+       DBG_8192C("%s, ucast=%d, cipher=0x%x\n", __func__, ucast, cipher);
+
+
+       if (!cipher) {
+               *profile_cipher = _NO_PRIVACY_;
+               psecuritypriv->ndisencryptstatus = ndisencryptstatus;
+               return 0;
+       }
+
+       switch (cipher) {
+       case IW_AUTH_CIPHER_NONE:
+               *profile_cipher = _NO_PRIVACY_;
+               ndisencryptstatus = Ndis802_11EncryptionDisabled;
+               break;
+       case WLAN_CIPHER_SUITE_WEP40:
+               *profile_cipher = _WEP40_;
+               ndisencryptstatus = Ndis802_11Encryption1Enabled;
+               break;
+       case WLAN_CIPHER_SUITE_WEP104:
+               *profile_cipher = _WEP104_;
+               ndisencryptstatus = Ndis802_11Encryption1Enabled;
+               break;
+       case WLAN_CIPHER_SUITE_TKIP:
+               *profile_cipher = _TKIP_;
+               ndisencryptstatus = Ndis802_11Encryption2Enabled;
+               break;
+       case WLAN_CIPHER_SUITE_CCMP:
+               *profile_cipher = _AES_;
+               ndisencryptstatus = Ndis802_11Encryption3Enabled;
+               break;
+       default:
+               DBG_8192C("Unsupported cipher: 0x%x\n", cipher);
+               return -ENOTSUPP;
+       }
+
+       if(ucast)
+       {
+               psecuritypriv->ndisencryptstatus = ndisencryptstatus;
+
+               //if(psecuritypriv->dot11PrivacyAlgrthm >= _AES_)
+               //      psecuritypriv->ndisauthtype = Ndis802_11AuthModeWPA2PSK;
+       }
+
+       return 0;
+}
+
+static int rtw_cfg80211_set_key_mgt(struct security_priv *psecuritypriv, u32 key_mgt)
+{
+       DBG_8192C("%s, key_mgt=0x%x\n", __func__, key_mgt);
+
+       if (key_mgt == WLAN_AKM_SUITE_8021X)
+               //*auth_type = UMAC_AUTH_TYPE_8021X;
+               psecuritypriv->dot11AuthAlgrthm = dot11AuthAlgrthm_8021X;
+       else if (key_mgt == WLAN_AKM_SUITE_PSK) {
+               psecuritypriv->dot11AuthAlgrthm = dot11AuthAlgrthm_8021X;
+       } else {
+               DBG_8192C("Invalid key mgt: 0x%x\n", key_mgt);
+               //return -EINVAL;
+       }
+
+       return 0;
+}
+
+static int rtw_cfg80211_set_wpa_ie(_adapter *padapter, u8 *pie, size_t ielen)
+{
+       u8 *buf=NULL, *pos=NULL;
+       u32 left;
+       int group_cipher = 0, pairwise_cipher = 0;
+       int ret = 0;
+       int wpa_ielen=0;
+       int wpa2_ielen=0;
+       u8 *pwpa, *pwpa2;
+       u8 null_addr[]= {0,0,0,0,0,0};
+
+       if (pie == NULL || !ielen) {
+               /* Treat this as normal case, but need to clear WIFI_UNDER_WPS */
+               _clr_fwstate_(&padapter->mlmepriv, WIFI_UNDER_WPS);
+               goto exit;
+       }
+
+       if (ielen > MAX_WPA_IE_LEN+MAX_WPS_IE_LEN+MAX_P2P_IE_LEN) {
+               ret = -EINVAL;
+               goto exit;
+       }
+
+       buf = rtw_zmalloc(ielen);
+       if (buf == NULL){
+               ret =  -ENOMEM;
+               goto exit;
+       }
+
+       _rtw_memcpy(buf, pie , ielen);
+
+       //dump
+       {
+               int i;
+               DBG_8192C("set wpa_ie(length:%zu):\n", ielen);
+               for(i=0;i<ielen;i=i+8)
+                       DBG_8192C("0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x \n",buf[i],buf[i+1],buf[i+2],buf[i+3],buf[i+4],buf[i+5],buf[i+6],buf[i+7]);
+       }
+
+       pos = buf;
+       if(ielen < RSN_HEADER_LEN){
+               RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,("Ie len too short %d\n", ielen));
+               ret  = -1;
+               goto exit;
+       }
+
+       pwpa = rtw_get_wpa_ie(buf, &wpa_ielen, ielen);
+       if(pwpa && wpa_ielen>0)
+       {
+               if(rtw_parse_wpa_ie(pwpa, wpa_ielen+2, &group_cipher, &pairwise_cipher) == _SUCCESS)
+               {
+                       padapter->securitypriv.dot11AuthAlgrthm= dot11AuthAlgrthm_8021X;
+                       padapter->securitypriv.ndisauthtype=Ndis802_11AuthModeWPAPSK;
+                       _rtw_memcpy(padapter->securitypriv.supplicant_ie, &pwpa[0], wpa_ielen+2);
+
+                       DBG_8192C("got wpa_ie, wpa_ielen:%u\n", wpa_ielen);
+               }
+       }
+
+       pwpa2 = rtw_get_wpa2_ie(buf, &wpa2_ielen, ielen);
+       if(pwpa2 && wpa2_ielen>0)
+       {
+               if(rtw_parse_wpa2_ie(pwpa2, wpa2_ielen+2, &group_cipher, &pairwise_cipher) == _SUCCESS)
+               {
+                       padapter->securitypriv.dot11AuthAlgrthm= dot11AuthAlgrthm_8021X;
+                       padapter->securitypriv.ndisauthtype=Ndis802_11AuthModeWPA2PSK;
+                       _rtw_memcpy(padapter->securitypriv.supplicant_ie, &pwpa2[0], wpa2_ielen+2);
+
+                       DBG_8192C("got wpa2_ie, wpa2_ielen:%u\n", wpa2_ielen);
+               }
+       }
+
+       if (group_cipher == 0)
+       {
+               group_cipher = WPA_CIPHER_NONE;
+       }
+       if (pairwise_cipher == 0)
+       {
+               pairwise_cipher = WPA_CIPHER_NONE;
+       }
+
+       switch(group_cipher)
+       {
+               case WPA_CIPHER_NONE:
+                       padapter->securitypriv.dot118021XGrpPrivacy=_NO_PRIVACY_;
+                       padapter->securitypriv.ndisencryptstatus=Ndis802_11EncryptionDisabled;
+                       break;
+               case WPA_CIPHER_WEP40:
+                       padapter->securitypriv.dot118021XGrpPrivacy=_WEP40_;
+                       padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
+                       break;
+               case WPA_CIPHER_TKIP:
+                       padapter->securitypriv.dot118021XGrpPrivacy=_TKIP_;
+                       padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption2Enabled;
+                       break;
+               case WPA_CIPHER_CCMP:
+                       padapter->securitypriv.dot118021XGrpPrivacy=_AES_;
+                       padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption3Enabled;
+                       break;
+               case WPA_CIPHER_WEP104:
+                       padapter->securitypriv.dot118021XGrpPrivacy=_WEP104_;
+                       padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
+                       break;
+       }
+
+       switch(pairwise_cipher)
+       {
+               case WPA_CIPHER_NONE:
+                       padapter->securitypriv.dot11PrivacyAlgrthm=_NO_PRIVACY_;
+                       padapter->securitypriv.ndisencryptstatus=Ndis802_11EncryptionDisabled;
+                       break;
+               case WPA_CIPHER_WEP40:
+                       padapter->securitypriv.dot11PrivacyAlgrthm=_WEP40_;
+                       padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
+                       break;
+               case WPA_CIPHER_TKIP:
+                       padapter->securitypriv.dot11PrivacyAlgrthm=_TKIP_;
+                       padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption2Enabled;
+                       break;
+               case WPA_CIPHER_CCMP:
+                       padapter->securitypriv.dot11PrivacyAlgrthm=_AES_;
+                       padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption3Enabled;
+                       break;
+               case WPA_CIPHER_WEP104:
+                       padapter->securitypriv.dot11PrivacyAlgrthm=_WEP104_;
+                       padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
+                       break;
+       }
+
+       {/* handle wps_ie */
+               uint wps_ielen;
+               u8 *wps_ie;
+
+               wps_ie = rtw_get_wps_ie(buf, ielen, NULL, &wps_ielen);
+               if (wps_ie && wps_ielen > 0) {
+                       DBG_8192C("got wps_ie, wps_ielen:%u\n", wps_ielen);
+                       padapter->securitypriv.wps_ie_len = wps_ielen<MAX_WPS_IE_LEN?wps_ielen:MAX_WPS_IE_LEN;
+                       _rtw_memcpy(padapter->securitypriv.wps_ie, wps_ie, padapter->securitypriv.wps_ie_len);
+                       set_fwstate(&padapter->mlmepriv, WIFI_UNDER_WPS);
+               } else {
+                       _clr_fwstate_(&padapter->mlmepriv, WIFI_UNDER_WPS);
+               }
+       }
+
+       #ifdef CONFIG_P2P
+       {//check p2p_ie for assoc req;
+               uint p2p_ielen=0;
+               u8 *p2p_ie;
+               struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+
+               if((p2p_ie=rtw_get_p2p_ie(buf, ielen, NULL, &p2p_ielen)))
+               {
+                       #ifdef CONFIG_DEBUG_CFG80211
+                       DBG_8192C("%s p2p_assoc_req_ielen=%d\n", __FUNCTION__, p2p_ielen);
+                       #endif
+
+                       if(pmlmepriv->p2p_assoc_req_ie)
+                       {
+                               u32 free_len = pmlmepriv->p2p_assoc_req_ie_len;
+                               pmlmepriv->p2p_assoc_req_ie_len = 0;
+                               rtw_mfree(pmlmepriv->p2p_assoc_req_ie, free_len);
+                               pmlmepriv->p2p_assoc_req_ie = NULL;
+                       }
+
+                       pmlmepriv->p2p_assoc_req_ie = rtw_malloc(p2p_ielen);
+                       if ( pmlmepriv->p2p_assoc_req_ie == NULL) {
+                               DBG_8192C("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
+                               goto exit;
+                       }
+                       _rtw_memcpy(pmlmepriv->p2p_assoc_req_ie, p2p_ie, p2p_ielen);
+                       pmlmepriv->p2p_assoc_req_ie_len = p2p_ielen;
+               }
+       }
+       #endif //CONFIG_P2P
+
+       #ifdef CONFIG_WFD
+       {//check wfd_ie for assoc req;
+               uint wfd_ielen=0;
+               u8 *wfd_ie;
+               struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+
+               if(rtw_get_wfd_ie(buf, ielen, NULL, &wfd_ielen))
+               {
+                       #ifdef CONFIG_DEBUG_CFG80211
+                       DBG_8192C("%s wfd_assoc_req_ielen=%d\n", __FUNCTION__, wfd_ielen);
+                       #endif
+
+                       if(pmlmepriv->wfd_assoc_req_ie)
+                       {
+                               u32 free_len = pmlmepriv->wfd_assoc_req_ie_len;
+                               pmlmepriv->wfd_assoc_req_ie_len = 0;
+                               rtw_mfree(pmlmepriv->wfd_assoc_req_ie, free_len);
+                               pmlmepriv->wfd_assoc_req_ie = NULL;
+                       }
+
+                       pmlmepriv->wfd_assoc_req_ie = rtw_malloc(wfd_ielen);
+                       if ( pmlmepriv->wfd_assoc_req_ie == NULL) {
+                               DBG_8192C("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
+                               goto exit;
+                       }
+                       rtw_get_wfd_ie(buf, ielen, pmlmepriv->wfd_assoc_req_ie, &pmlmepriv->wfd_assoc_req_ie_len);
+               }
+       }
+       #endif //CONFIG_WFD
+
+       //TKIP and AES disallow multicast packets until installing group key
+       if(padapter->securitypriv.dot11PrivacyAlgrthm == _TKIP_
+               || padapter->securitypriv.dot11PrivacyAlgrthm == _TKIP_WTMIC_
+               || padapter->securitypriv.dot11PrivacyAlgrthm == _AES_)
+               //WPS open need to enable multicast
+               //|| check_fwstate(&padapter->mlmepriv, WIFI_UNDER_WPS) == _TRUE)
+               rtw_hal_set_hwreg(padapter, HW_VAR_OFF_RCR_AM, null_addr);
+
+       RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
+               ("rtw_set_wpa_ie: pairwise_cipher=0x%08x padapter->securitypriv.ndisencryptstatus=%d padapter->securitypriv.ndisauthtype=%d\n",
+               pairwise_cipher, padapter->securitypriv.ndisencryptstatus, padapter->securitypriv.ndisauthtype));
+
+exit:
+       if (buf)
+               rtw_mfree(buf, ielen);
+       if (ret)
+               _clr_fwstate_(&padapter->mlmepriv, WIFI_UNDER_WPS);
+       return ret;
+}
+
+static int cfg80211_rtw_connect(struct wiphy *wiphy, struct net_device *ndev,
+                                struct cfg80211_connect_params *sme)
+{
+       int ret=0;
+       _irqL irqL;
+       _list *phead;
+       struct wlan_network *pnetwork = NULL;
+       NDIS_802_11_AUTHENTICATION_MODE authmode;
+       NDIS_802_11_SSID ndis_ssid;
+       u8 *dst_ssid, *src_ssid;
+       u8 *dst_bssid, *src_bssid;
+       //u8 matched_by_bssid=_FALSE;
+       //u8 matched_by_ssid=_FALSE;
+       u8 matched=_FALSE;
+       _adapter *padapter = wiphy_to_adapter(wiphy);
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+       struct security_priv *psecuritypriv = &padapter->securitypriv;
+       _queue *queue = &pmlmepriv->scanned_queue;
+
+       DBG_871X("=>"FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(ndev));
+       DBG_871X("privacy=%d, key=%p, key_len=%d, key_idx=%d\n",
+               sme->privacy, sme->key, sme->key_len, sme->key_idx);
+
+
+       if(wdev_to_priv(padapter->rtw_wdev)->block == _TRUE)
+       {
+               ret = -EBUSY;
+               DBG_871X("%s wdev_priv.block is set\n", __FUNCTION__);
+               goto exit;
+       }
+
+#ifdef CONFIG_PLATFORM_MSTAR
+       printk("MStar Android!\n");
+       if((wdev_to_priv(padapter->rtw_wdev))->bandroid_scan == _FALSE)
+       {
+#ifdef CONFIG_P2P
+               struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
+               if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+#endif //CONFIG_P2P
+               {
+                       ret = -EBUSY;
+                       printk("Android hasn't attached yet!\n");
+                       goto exit;
+               }
+       }
+#endif
+
+       if(_FAIL == rtw_pwr_wakeup(padapter)) {
+               ret= -EPERM;
+               goto exit;
+       }
+
+       if(check_fwstate(pmlmepriv, WIFI_AP_STATE)) {
+               ret = -EPERM;
+               goto exit;
+       }
+
+#ifdef CONFIG_CONCURRENT_MODE
+       if (check_buddy_fwstate(padapter, _FW_UNDER_LINKING) == _TRUE) {
+               DBG_8192C("%s, but buddy_intf is under linking\n", __FUNCTION__);
+               ret = -EINVAL;
+               goto exit;
+       }
+       if (check_buddy_fwstate(padapter, _FW_UNDER_SURVEY) == _TRUE) {
+               rtw_scan_abort(padapter->pbuddy_adapter);
+       }
+#endif
+
+       if (!sme->ssid || !sme->ssid_len)
+       {
+               ret = -EINVAL;
+               goto exit;
+       }
+
+       if (sme->ssid_len > IW_ESSID_MAX_SIZE){
+
+               ret= -E2BIG;
+               goto exit;
+       }
+
+       _rtw_memset(&ndis_ssid, 0, sizeof(NDIS_802_11_SSID));
+       ndis_ssid.SsidLength = sme->ssid_len;
+       _rtw_memcpy(ndis_ssid.Ssid, sme->ssid, sme->ssid_len);
+
+       DBG_8192C("ssid=%s, len=%zu\n", ndis_ssid.Ssid, sme->ssid_len);
+
+
+       if (sme->bssid)
+               DBG_8192C("bssid="MAC_FMT"\n", MAC_ARG(sme->bssid));
+
+
+       if (check_fwstate(pmlmepriv, _FW_UNDER_LINKING) == _TRUE) {
+               ret = -EBUSY;
+               DBG_8192C("%s, fw_state=0x%x, goto exit\n", __FUNCTION__, pmlmepriv->fw_state);
+               goto exit;
+       }
+       if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY) == _TRUE) {
+               rtw_scan_abort(padapter);
+       }
+
+       psecuritypriv->ndisencryptstatus = Ndis802_11EncryptionDisabled;
+       psecuritypriv->dot11PrivacyAlgrthm = _NO_PRIVACY_;
+       psecuritypriv->dot118021XGrpPrivacy = _NO_PRIVACY_;
+       psecuritypriv->dot11AuthAlgrthm = dot11AuthAlgrthm_Open; //open system
+       psecuritypriv->ndisauthtype = Ndis802_11AuthModeOpen;
+
+
+       ret = rtw_cfg80211_set_wpa_version(psecuritypriv, sme->crypto.wpa_versions);
+       if (ret < 0)
+               goto exit;
+
+       ret = rtw_cfg80211_set_auth_type(psecuritypriv, sme->auth_type);
+       if (ret < 0)
+               goto exit;
+
+       DBG_8192C("%s, ie_len=%zu\n", __func__, sme->ie_len);
+
+       ret = rtw_cfg80211_set_wpa_ie(padapter, sme->ie, sme->ie_len);
+       if (ret < 0)
+               goto exit;
+
+       if (sme->crypto.n_ciphers_pairwise) {
+               ret = rtw_cfg80211_set_cipher(psecuritypriv, sme->crypto.ciphers_pairwise[0], _TRUE);
+               if (ret < 0)
+                       goto exit;
+       }
+
+       //For WEP Shared auth
+       if((psecuritypriv->dot11AuthAlgrthm == dot11AuthAlgrthm_Shared
+               || psecuritypriv->dot11AuthAlgrthm == dot11AuthAlgrthm_Auto) && sme->key
+       )
+       {
+               u32 wep_key_idx, wep_key_len,wep_total_len;
+               NDIS_802_11_WEP  *pwep = NULL;
+               DBG_871X("%s(): Shared/Auto WEP\n",__FUNCTION__);
+
+               wep_key_idx = sme->key_idx;
+               wep_key_len = sme->key_len;
+
+               if (sme->key_idx > WEP_KEYS) {
+                       ret = -EINVAL;
+                       goto exit;
+               }
+
+               if (wep_key_len > 0)
+               {
+                       wep_key_len = wep_key_len <= 5 ? 5 : 13;
+                       wep_total_len = wep_key_len + FIELD_OFFSET(NDIS_802_11_WEP, KeyMaterial);
+                       pwep =(NDIS_802_11_WEP   *) rtw_malloc(wep_total_len);
+                       if(pwep == NULL){
+                               DBG_871X(" wpa_set_encryption: pwep allocate fail !!!\n");
+                               ret = -ENOMEM;
+                               goto exit;
+                       }
+
+                       _rtw_memset(pwep, 0, wep_total_len);
+
+                       pwep->KeyLength = wep_key_len;
+                       pwep->Length = wep_total_len;
+
+                       if(wep_key_len==13)
+                       {
+                               padapter->securitypriv.dot11PrivacyAlgrthm=_WEP104_;
+                               padapter->securitypriv.dot118021XGrpPrivacy=_WEP104_;
+                       }
+               }
+               else {
+                       ret = -EINVAL;
+                       goto exit;
+               }
+
+               pwep->KeyIndex = wep_key_idx;
+               pwep->KeyIndex |= 0x80000000;
+
+               _rtw_memcpy(pwep->KeyMaterial,  (void *)sme->key, pwep->KeyLength);
+
+               if(rtw_set_802_11_add_wep(padapter, pwep) == (u8)_FAIL)
+               {
+                       ret = -EOPNOTSUPP ;
+               }
+
+               if (pwep) {
+                       rtw_mfree((u8 *)pwep,wep_total_len);
+               }
+
+               if(ret < 0)
+                       goto exit;
+       }
+
+       ret = rtw_cfg80211_set_cipher(psecuritypriv, sme->crypto.cipher_group, _FALSE);
+       if (ret < 0)
+               return ret;
+
+       if (sme->crypto.n_akm_suites) {
+               ret = rtw_cfg80211_set_key_mgt(psecuritypriv, sme->crypto.akm_suites[0]);
+               if (ret < 0)
+                       goto exit;
+       }
+
+       authmode = psecuritypriv->ndisauthtype;
+       rtw_set_802_11_authentication_mode(padapter, authmode);
+
+       //rtw_set_802_11_encryption_mode(padapter, padapter->securitypriv.ndisencryptstatus);
+
+       if (rtw_set_802_11_connect(padapter, sme->bssid, &ndis_ssid) == _FALSE) {
+               ret = -1;
+               goto exit;
+       }
+
+       DBG_8192C("set ssid:dot11AuthAlgrthm=%d, dot11PrivacyAlgrthm=%d, dot118021XGrpPrivacy=%d\n", psecuritypriv->dot11AuthAlgrthm, psecuritypriv->dot11PrivacyAlgrthm, psecuritypriv->dot118021XGrpPrivacy);
+
+exit:
+
+       DBG_8192C("<=%s, ret %d\n",__FUNCTION__, ret);
+
+       return ret;
+}
+
+static int cfg80211_rtw_disconnect(struct wiphy *wiphy, struct net_device *ndev,
+                                  u16 reason_code)
+{
+       _adapter *padapter = wiphy_to_adapter(wiphy);
+
+       DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(ndev));
+
+       rtw_set_roaming(padapter, 0);
+
+       if(check_fwstate(&padapter->mlmepriv, _FW_LINKED))
+       {
+               rtw_scan_abort(padapter);
+               LeaveAllPowerSaveMode(padapter);
+               rtw_disassoc_cmd(padapter, 500, _FALSE);
+
+               DBG_871X("%s...call rtw_indicate_disconnect\n", __FUNCTION__);
+
+               padapter->mlmepriv.not_indic_disco = _TRUE;
+               rtw_indicate_disconnect(padapter);
+               padapter->mlmepriv.not_indic_disco = _FALSE;
+
+               rtw_free_assoc_resources(padapter, 1);
+       }
+
+       return 0;
+}
+
+static int cfg80211_rtw_set_txpower(struct wiphy *wiphy,
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3,8,0))
+       struct wireless_dev *wdev,
+#endif
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,36)) || defined(COMPAT_KERNEL_RELEASE)
+       enum nl80211_tx_power_setting type, int mbm)
+#else
+       enum tx_power_setting type, int dbm)
+#endif
+{
+#if 0
+       struct iwm_priv *iwm = wiphy_to_iwm(wiphy);
+       int ret;
+
+       switch (type) {
+       case NL80211_TX_POWER_AUTOMATIC:
+               return 0;
+       case NL80211_TX_POWER_FIXED:
+               if (mbm < 0 || (mbm % 100))
+                       return -EOPNOTSUPP;
+
+               if (!test_bit(IWM_STATUS_READY, &iwm->status))
+                       return 0;
+
+               ret = iwm_umac_set_config_fix(iwm, UMAC_PARAM_TBL_CFG_FIX,
+                                             CFG_TX_PWR_LIMIT_USR,
+                                             MBM_TO_DBM(mbm) * 2);
+               if (ret < 0)
+                       return ret;
+
+               return iwm_tx_power_trigger(iwm);
+       default:
+               IWM_ERR(iwm, "Unsupported power type: %d\n", type);
+               return -EOPNOTSUPP;
+       }
+#endif
+       DBG_8192C("%s\n", __func__);
+       return 0;
+}
+
+static int cfg80211_rtw_get_txpower(struct wiphy *wiphy,
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3,8,0))
+       struct wireless_dev *wdev,
+#endif
+       int *dbm)
+{
+       //_adapter *padapter = wiphy_to_adapter(wiphy);
+
+       DBG_8192C("%s\n", __func__);
+
+       *dbm = (12);
+
+       return 0;
+}
+
+inline bool rtw_cfg80211_pwr_mgmt(_adapter *adapter)
+{
+       struct rtw_wdev_priv *rtw_wdev_priv = wdev_to_priv(adapter->rtw_wdev);
+       return rtw_wdev_priv->power_mgmt;
+}
+
+static int cfg80211_rtw_set_power_mgmt(struct wiphy *wiphy,
+                                      struct net_device *ndev,
+                                      bool enabled, int timeout)
+{
+       _adapter *padapter = wiphy_to_adapter(wiphy);
+       struct rtw_wdev_priv *rtw_wdev_priv = wdev_to_priv(padapter->rtw_wdev);
+
+       DBG_871X(FUNC_NDEV_FMT" enabled:%u, timeout:%d\n", FUNC_NDEV_ARG(ndev),
+               enabled, timeout);
+
+       rtw_wdev_priv->power_mgmt = enabled;
+
+       #ifdef CONFIG_LPS
+       if (!enabled)
+               LPS_Leave(padapter);
+       #endif
+
+       return 0;
+}
+
+static int cfg80211_rtw_set_pmksa(struct wiphy *wiphy,
+                                 struct net_device *netdev,
+                                 struct cfg80211_pmksa *pmksa)
+{
+       u8      index,blInserted = _FALSE;
+       _adapter        *padapter = wiphy_to_adapter(wiphy);
+       struct security_priv    *psecuritypriv = &padapter->securitypriv;
+       u8      strZeroMacAddress[ ETH_ALEN ] = { 0x00 };
+
+       DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(netdev));
+
+       if ( _rtw_memcmp( pmksa->bssid, strZeroMacAddress, ETH_ALEN ) == _TRUE )
+       {
+               return -EINVAL;
+       }
+
+       blInserted = _FALSE;
+
+       //overwrite PMKID
+       for(index=0 ; index<NUM_PMKID_CACHE; index++)
+       {
+               if( _rtw_memcmp( psecuritypriv->PMKIDList[index].Bssid, pmksa->bssid, ETH_ALEN) ==_TRUE )
+               { // BSSID is matched, the same AP => rewrite with new PMKID.
+                       DBG_871X(FUNC_NDEV_FMT" BSSID exists in the PMKList.\n", FUNC_NDEV_ARG(netdev));
+
+                       _rtw_memcpy( psecuritypriv->PMKIDList[index].PMKID, pmksa->pmkid, WLAN_PMKID_LEN);
+                       psecuritypriv->PMKIDList[index].bUsed = _TRUE;
+                       psecuritypriv->PMKIDIndex = index+1;
+                       blInserted = _TRUE;
+                       break;
+               }
+       }
+
+       if(!blInserted)
+       {
+               // Find a new entry
+               DBG_871X(FUNC_NDEV_FMT" Use the new entry index = %d for this PMKID.\n",
+                       FUNC_NDEV_ARG(netdev), psecuritypriv->PMKIDIndex );
+
+               _rtw_memcpy(psecuritypriv->PMKIDList[psecuritypriv->PMKIDIndex].Bssid, pmksa->bssid, ETH_ALEN);
+               _rtw_memcpy(psecuritypriv->PMKIDList[psecuritypriv->PMKIDIndex].PMKID, pmksa->pmkid, WLAN_PMKID_LEN);
+
+               psecuritypriv->PMKIDList[psecuritypriv->PMKIDIndex].bUsed = _TRUE;
+               psecuritypriv->PMKIDIndex++ ;
+               if(psecuritypriv->PMKIDIndex==16)
+               {
+                       psecuritypriv->PMKIDIndex =0;
+               }
+       }
+
+       return 0;
+}
+
+static int cfg80211_rtw_del_pmksa(struct wiphy *wiphy,
+                                 struct net_device *netdev,
+                                 struct cfg80211_pmksa *pmksa)
+{
+       u8      index, bMatched = _FALSE;
+       _adapter        *padapter = wiphy_to_adapter(wiphy);
+       struct security_priv    *psecuritypriv = &padapter->securitypriv;
+
+       DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(netdev));
+
+       for(index=0 ; index<NUM_PMKID_CACHE; index++)
+       {
+               if( _rtw_memcmp( psecuritypriv->PMKIDList[index].Bssid, pmksa->bssid, ETH_ALEN) ==_TRUE )
+               { // BSSID is matched, the same AP => Remove this PMKID information and reset it.
+                       _rtw_memset( psecuritypriv->PMKIDList[index].Bssid, 0x00, ETH_ALEN );
+                       _rtw_memset( psecuritypriv->PMKIDList[index].PMKID, 0x00, WLAN_PMKID_LEN );
+                       psecuritypriv->PMKIDList[index].bUsed = _FALSE;
+                       bMatched = _TRUE;
+                       break;
+               }
+       }
+
+       if(_FALSE == bMatched)
+       {
+               DBG_871X(FUNC_NDEV_FMT" do not have matched BSSID\n"
+                       , FUNC_NDEV_ARG(netdev));
+               return -EINVAL;
+       }
+
+       return 0;
+}
+
+static int cfg80211_rtw_flush_pmksa(struct wiphy *wiphy,
+                                   struct net_device *netdev)
+{
+       _adapter        *padapter = wiphy_to_adapter(wiphy);
+       struct security_priv    *psecuritypriv = &padapter->securitypriv;
+
+       DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(netdev));
+
+       _rtw_memset( &psecuritypriv->PMKIDList[ 0 ], 0x00, sizeof( RT_PMKID_LIST ) * NUM_PMKID_CACHE );
+       psecuritypriv->PMKIDIndex = 0;
+
+       return 0;
+}
+
+#ifdef CONFIG_AP_MODE
+void rtw_cfg80211_indicate_sta_assoc(_adapter *padapter, u8 *pmgmt_frame, uint frame_len)
+{
+       s32 freq;
+       int channel;
+       struct wireless_dev *pwdev = padapter->rtw_wdev;
+       struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
+       struct net_device *ndev = padapter->pnetdev;
+
+       DBG_871X(FUNC_ADPT_FMT"\n", FUNC_ADPT_ARG(padapter));
+
+#if defined(RTW_USE_CFG80211_STA_EVENT) || defined(COMPAT_KERNEL_RELEASE)
+       {
+               struct station_info sinfo;
+               u8 ie_offset;
+               if (GetFrameSubType(pmgmt_frame) == WIFI_ASSOCREQ)
+                       ie_offset = _ASOCREQ_IE_OFFSET_;
+               else // WIFI_REASSOCREQ
+                       ie_offset = _REASOCREQ_IE_OFFSET_;
+
+               sinfo.filled = 0;
+               sinfo.filled = STATION_INFO_ASSOC_REQ_IES;
+               sinfo.assoc_req_ies = pmgmt_frame + WLAN_HDR_A3_LEN + ie_offset;
+               sinfo.assoc_req_ies_len = frame_len - WLAN_HDR_A3_LEN - ie_offset;
+               cfg80211_new_sta(ndev, GetAddr2Ptr(pmgmt_frame), &sinfo, GFP_ATOMIC);
+       }
+#else /* defined(RTW_USE_CFG80211_STA_EVENT) */
+       channel = pmlmeext->cur_channel;
+       if (channel <= RTW_CH_MAX_2G_CHANNEL)
+               freq = rtw_ieee80211_channel_to_frequency(channel, IEEE80211_BAND_2GHZ);
+       else
+               freq = rtw_ieee80211_channel_to_frequency(channel, IEEE80211_BAND_5GHZ);
+
+       #ifdef COMPAT_KERNEL_RELEASE
+       rtw_cfg80211_rx_mgmt(padapter, freq, 0, pmgmt_frame, frame_len, GFP_ATOMIC);
+       #elif (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) && !defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
+       rtw_cfg80211_rx_mgmt(padapter, freq, 0, pmgmt_frame, frame_len, GFP_ATOMIC);
+       #else //COMPAT_KERNEL_RELEASE
+       {
+               //to avoid WARN_ON(wdev->iftype != NL80211_IFTYPE_STATION)  when calling cfg80211_send_rx_assoc()
+               #ifndef CONFIG_PLATFORM_MSTAR
+               pwdev->iftype = NL80211_IFTYPE_STATION;
+               #endif //CONFIG_PLATFORM_MSTAR
+               DBG_8192C("iftype=%d before call cfg80211_send_rx_assoc()\n", pwdev->iftype);
+               rtw_cfg80211_send_rx_assoc(padapter, NULL, pmgmt_frame, frame_len);
+               DBG_8192C("iftype=%d after call cfg80211_send_rx_assoc()\n", pwdev->iftype);
+               pwdev->iftype = NL80211_IFTYPE_AP;
+               //cfg80211_rx_action(padapter->pnetdev, freq, pmgmt_frame, frame_len, GFP_ATOMIC);
+       }
+       #endif //COMPAT_KERNEL_RELEASE
+#endif /* defined(RTW_USE_CFG80211_STA_EVENT) */
+
+}
+
+void rtw_cfg80211_indicate_sta_disassoc(_adapter *padapter, unsigned char *da, unsigned short reason)
+{
+       s32 freq;
+       int channel;
+       u8 *pmgmt_frame;
+       uint frame_len;
+       struct rtw_ieee80211_hdr *pwlanhdr;
+       unsigned short *fctrl;
+       u8 mgmt_buf[128] = {0};
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       struct net_device *ndev = padapter->pnetdev;
+
+       DBG_871X(FUNC_ADPT_FMT"\n", FUNC_ADPT_ARG(padapter));
+
+#if defined(RTW_USE_CFG80211_STA_EVENT) || defined(COMPAT_KERNEL_RELEASE)
+       cfg80211_del_sta(ndev, da, GFP_ATOMIC);
+#else /* defined(RTW_USE_CFG80211_STA_EVENT) */
+       channel = pmlmeext->cur_channel;
+       if (channel <= RTW_CH_MAX_2G_CHANNEL)
+               freq = rtw_ieee80211_channel_to_frequency(channel, IEEE80211_BAND_2GHZ);
+       else
+               freq = rtw_ieee80211_channel_to_frequency(channel, IEEE80211_BAND_5GHZ);
+
+       pmgmt_frame = mgmt_buf;
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pmgmt_frame;
+
+       fctrl = &(pwlanhdr->frame_ctl);
+       *(fctrl) = 0;
+
+       //_rtw_memcpy(pwlanhdr->addr1, da, ETH_ALEN);
+       //_rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr1, myid(&(padapter->eeprompriv)), ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr2, da, ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr3, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
+
+       SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
+       pmlmeext->mgnt_seq++;
+       SetFrameSubType(pmgmt_frame, WIFI_DEAUTH);
+
+       pmgmt_frame += sizeof(struct rtw_ieee80211_hdr_3addr);
+       frame_len = sizeof(struct rtw_ieee80211_hdr_3addr);
+
+       reason = cpu_to_le16(reason);
+       pmgmt_frame = rtw_set_fixed_ie(pmgmt_frame, _RSON_CODE_ , (unsigned char *)&reason, &frame_len);
+
+       #ifdef COMPAT_KERNEL_RELEASE
+       rtw_cfg80211_rx_mgmt(padapter, freq, 0, mgmt_buf, frame_len, GFP_ATOMIC);
+       #elif (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) && !defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
+       rtw_cfg80211_rx_mgmt(padapter, freq, 0, mgmt_buf, frame_len, GFP_ATOMIC);
+       #else //COMPAT_KERNEL_RELEASE
+       cfg80211_send_disassoc(padapter->pnetdev, mgmt_buf, frame_len);
+       //cfg80211_rx_action(padapter->pnetdev, freq, mgmt_buf, frame_len, GFP_ATOMIC);
+       #endif //COMPAT_KERNEL_RELEASE
+#endif /* defined(RTW_USE_CFG80211_STA_EVENT) */
+}
+
+static int rtw_cfg80211_monitor_if_open(struct net_device *ndev)
+{
+       int ret = 0;
+
+       DBG_8192C("%s\n", __func__);
+
+       return ret;
+}
+
+static int rtw_cfg80211_monitor_if_close(struct net_device *ndev)
+{
+       int ret = 0;
+
+       DBG_8192C("%s\n", __func__);
+
+       return ret;
+}
+
+static int rtw_cfg80211_monitor_if_xmit_entry(struct sk_buff *skb, struct net_device *ndev)
+{
+       int ret = 0;
+       int rtap_len;
+       int qos_len = 0;
+       int dot11_hdr_len = 24;
+       int snap_len = 6;
+       unsigned char *pdata;
+       u16 frame_ctl;
+       unsigned char src_mac_addr[6];
+       unsigned char dst_mac_addr[6];
+       struct ieee80211_hdr *dot11_hdr;
+       struct ieee80211_radiotap_header *rtap_hdr;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(ndev);
+
+       DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(ndev));
+
+       if (skb)
+               rtw_mstat_update(MSTAT_TYPE_SKB, MSTAT_ALLOC_SUCCESS, skb->truesize);
+
+       if (unlikely(skb->len < sizeof(struct ieee80211_radiotap_header)))
+               goto fail;
+
+       rtap_hdr = (struct ieee80211_radiotap_header *)skb->data;
+       if (unlikely(rtap_hdr->it_version))
+               goto fail;
+
+       rtap_len = ieee80211_get_radiotap_len(skb->data);
+       if (unlikely(skb->len < rtap_len))
+               goto fail;
+
+       if(rtap_len != 14)
+       {
+               DBG_8192C("radiotap len (should be 14): %d\n", rtap_len);
+               goto fail;
+       }
+
+       /* Skip the ratio tap header */
+       skb_pull(skb, rtap_len);
+
+       dot11_hdr = (struct ieee80211_hdr *)skb->data;
+       frame_ctl = le16_to_cpu(dot11_hdr->frame_control);
+       /* Check if the QoS bit is set */
+       if ((frame_ctl & RTW_IEEE80211_FCTL_FTYPE) == RTW_IEEE80211_FTYPE_DATA) {
+               /* Check if this ia a Wireless Distribution System (WDS) frame
+                * which has 4 MAC addresses
+                */
+               if (dot11_hdr->frame_control & 0x0080)
+                       qos_len = 2;
+               if ((dot11_hdr->frame_control & 0x0300) == 0x0300)
+                       dot11_hdr_len += 6;
+
+               memcpy(dst_mac_addr, dot11_hdr->addr1, sizeof(dst_mac_addr));
+               memcpy(src_mac_addr, dot11_hdr->addr2, sizeof(src_mac_addr));
+
+               /* Skip the 802.11 header, QoS (if any) and SNAP, but leave spaces for
+                * for two MAC addresses
+                */
+               skb_pull(skb, dot11_hdr_len + qos_len + snap_len - sizeof(src_mac_addr) * 2);
+               pdata = (unsigned char*)skb->data;
+               memcpy(pdata, dst_mac_addr, sizeof(dst_mac_addr));
+               memcpy(pdata + sizeof(dst_mac_addr), src_mac_addr, sizeof(src_mac_addr));
+
+               DBG_8192C("should be eapol packet\n");
+
+               /* Use the real net device to transmit the packet */
+               ret = _rtw_xmit_entry(skb, padapter->pnetdev);
+
+               return ret;
+
+       }
+       else if ((frame_ctl & (RTW_IEEE80211_FCTL_FTYPE|RTW_IEEE80211_FCTL_STYPE))
+               == (RTW_IEEE80211_FTYPE_MGMT|RTW_IEEE80211_STYPE_ACTION)
+       )
+       {
+               //only for action frames
+               struct xmit_frame               *pmgntframe;
+               struct pkt_attrib       *pattrib;
+               unsigned char   *pframe;
+               //u8 category, action, OUI_Subtype, dialogToken=0;
+               //unsigned char *frame_body;
+               struct rtw_ieee80211_hdr *pwlanhdr;
+               struct xmit_priv        *pxmitpriv = &(padapter->xmitpriv);
+               struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+               u8 *buf = skb->data;
+               u32 len = skb->len;
+               u8 category, action;
+               int type = -1;
+
+               if (rtw_action_frame_parse(buf, len, &category, &action) == _FALSE) {
+                       DBG_8192C(FUNC_NDEV_FMT" frame_control:0x%x\n", FUNC_NDEV_ARG(ndev),
+                               le16_to_cpu(((struct rtw_ieee80211_hdr_3addr *)buf)->frame_ctl));
+                       goto fail;
+               }
+
+               DBG_8192C("RTW_Tx:da="MAC_FMT" via "FUNC_NDEV_FMT"\n",
+                       MAC_ARG(GetAddr1Ptr(buf)), FUNC_NDEV_ARG(ndev));
+               #ifdef CONFIG_P2P
+               if((type = rtw_p2p_check_frames(padapter, buf, len, _TRUE)) >= 0)
+                       goto dump;
+               #endif
+               if (category == RTW_WLAN_CATEGORY_PUBLIC)
+                       DBG_871X("RTW_Tx:%s\n", action_public_str(action));
+               else
+                       DBG_871X("RTW_Tx:category(%u), action(%u)\n", category, action);
+
+dump:
+               //starting alloc mgmt frame to dump it
+               if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+               {
+                       goto fail;
+               }
+
+               //update attribute
+               pattrib = &pmgntframe->attrib;
+               update_mgntframe_attrib(padapter, pattrib);
+               pattrib->retry_ctrl = _FALSE;
+
+               _rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
+
+               pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
+
+               _rtw_memcpy(pframe, (void*)buf, len);
+               #ifdef CONFIG_WFD
+               if (type >= 0)
+               {
+                       struct wifi_display_info                *pwfd_info;
+
+                       pwfd_info = padapter->wdinfo.wfd_info;
+
+                       if ( _TRUE == pwfd_info->wfd_enable )
+                       {
+                               rtw_append_wfd_ie( padapter, pframe, &len );
+                       }
+               }
+               #endif // CONFIG_WFD
+               pattrib->pktlen = len;
+
+               pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+               //update seq number
+               pmlmeext->mgnt_seq = GetSequence(pwlanhdr);
+               pattrib->seqnum = pmlmeext->mgnt_seq;
+               pmlmeext->mgnt_seq++;
+
+
+               pattrib->last_txcmdsz = pattrib->pktlen;
+
+               dump_mgntframe(padapter, pmgntframe);
+
+       }
+       else
+       {
+               DBG_8192C("frame_ctl=0x%x\n", frame_ctl & (RTW_IEEE80211_FCTL_FTYPE|RTW_IEEE80211_FCTL_STYPE));
+       }
+
+
+fail:
+
+       dev_kfree_skb(skb);
+
+       return 0;
+
+}
+
+static void rtw_cfg80211_monitor_if_set_multicast_list(struct net_device *ndev)
+{
+       DBG_8192C("%s\n", __func__);
+}
+
+static int rtw_cfg80211_monitor_if_set_mac_address(struct net_device *ndev, void *addr)
+{
+       int ret = 0;
+
+       DBG_8192C("%s\n", __func__);
+
+       return ret;
+}
+
+#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,29))
+static const struct net_device_ops rtw_cfg80211_monitor_if_ops = {
+       .ndo_open = rtw_cfg80211_monitor_if_open,
+       .ndo_stop = rtw_cfg80211_monitor_if_close,
+       .ndo_start_xmit = rtw_cfg80211_monitor_if_xmit_entry,
+       #if (LINUX_VERSION_CODE < KERNEL_VERSION(3,2,0))
+       .ndo_set_multicast_list = rtw_cfg80211_monitor_if_set_multicast_list,
+       #endif
+       .ndo_set_mac_address = rtw_cfg80211_monitor_if_set_mac_address,
+};
+#endif
+
+static int rtw_cfg80211_add_monitor_if(_adapter *padapter, char *name, struct net_device **ndev)
+{
+       int ret = 0;
+       struct net_device* mon_ndev = NULL;
+       struct wireless_dev* mon_wdev = NULL;
+       struct rtw_netdev_priv_indicator *pnpi;
+       struct rtw_wdev_priv *pwdev_priv = wdev_to_priv(padapter->rtw_wdev);
+
+       if (!name ) {
+               DBG_871X(FUNC_ADPT_FMT" without specific name\n", FUNC_ADPT_ARG(padapter));
+               ret = -EINVAL;
+               goto out;
+       }
+
+       if (pwdev_priv->pmon_ndev) {
+               DBG_871X(FUNC_ADPT_FMT" monitor interface exist: "NDEV_FMT"\n",
+                       FUNC_ADPT_ARG(padapter), NDEV_ARG(pwdev_priv->pmon_ndev));
+               ret = -EBUSY;
+               goto out;
+       }
+
+       mon_ndev = alloc_etherdev(sizeof(struct rtw_netdev_priv_indicator));
+       if (!mon_ndev) {
+               DBG_871X(FUNC_ADPT_FMT" allocate ndev fail\n", FUNC_ADPT_ARG(padapter));
+               ret = -ENOMEM;
+               goto out;
+       }
+
+       mon_ndev->type = ARPHRD_IEEE80211_RADIOTAP;
+       strncpy(mon_ndev->name, name, IFNAMSIZ);
+       mon_ndev->name[IFNAMSIZ - 1] = 0;
+       mon_ndev->destructor = rtw_ndev_destructor;
+
+#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,29))
+       mon_ndev->netdev_ops = &rtw_cfg80211_monitor_if_ops;
+#else
+       mon_ndev->open = rtw_cfg80211_monitor_if_open;
+       mon_ndev->stop = rtw_cfg80211_monitor_if_close;
+       mon_ndev->hard_start_xmit = rtw_cfg80211_monitor_if_xmit_entry;
+       mon_ndev->set_mac_address = rtw_cfg80211_monitor_if_set_mac_address;
+#endif
+
+       pnpi = netdev_priv(mon_ndev);
+       pnpi->priv = padapter;
+       pnpi->sizeof_priv = sizeof(_adapter);
+
+       /*  wdev */
+       mon_wdev = (struct wireless_dev *)rtw_zmalloc(sizeof(struct wireless_dev));
+       if (!mon_wdev) {
+               DBG_871X(FUNC_ADPT_FMT" allocate mon_wdev fail\n", FUNC_ADPT_ARG(padapter));
+               ret = -ENOMEM;
+               goto out;
+       }
+
+       mon_wdev->wiphy = padapter->rtw_wdev->wiphy;
+       mon_wdev->netdev = mon_ndev;
+       mon_wdev->iftype = NL80211_IFTYPE_MONITOR;
+       mon_ndev->ieee80211_ptr = mon_wdev;
+
+       ret = register_netdevice(mon_ndev);
+       if (ret) {
+               goto out;
+       }
+
+       *ndev = pwdev_priv->pmon_ndev = mon_ndev;
+       _rtw_memcpy(pwdev_priv->ifname_mon, name, IFNAMSIZ+1);
+
+out:
+       if (ret && mon_wdev) {
+               rtw_mfree((u8*)mon_wdev, sizeof(struct wireless_dev));
+               mon_wdev = NULL;
+       }
+
+       if (ret && mon_ndev) {
+               free_netdev(mon_ndev);
+               *ndev = mon_ndev = NULL;
+       }
+
+       return ret;
+}
+
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3,6,0))
+static struct wireless_dev *
+#elif (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,38)) || defined(COMPAT_KERNEL_RELEASE)
+static struct net_device *
+#else
+static int
+#endif
+       cfg80211_rtw_add_virtual_intf(
+               struct wiphy *wiphy,
+       #if (LINUX_VERSION_CODE >= KERNEL_VERSION(3,7,0))
+               const char *name,
+       #else
+               char *name,
+       #endif
+               enum nl80211_iftype type, u32 *flags, struct vif_params *params)
+{
+       int ret = 0;
+       struct net_device* ndev = NULL;
+       _adapter *padapter = wiphy_to_adapter(wiphy);
+
+       DBG_871X(FUNC_ADPT_FMT " wiphy:%s, name:%s, type:%d\n",
+               FUNC_ADPT_ARG(padapter), wiphy_name(wiphy), name, type);
+
+       switch (type) {
+       case NL80211_IFTYPE_ADHOC:
+       case NL80211_IFTYPE_AP_VLAN:
+       case NL80211_IFTYPE_WDS:
+       case NL80211_IFTYPE_MESH_POINT:
+               ret = -ENODEV;
+               break;
+       case NL80211_IFTYPE_MONITOR:
+               ret = rtw_cfg80211_add_monitor_if(padapter, (char *)name, &ndev);
+               break;
+
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) || defined(COMPAT_KERNEL_RELEASE)
+       case NL80211_IFTYPE_P2P_CLIENT:
+#endif
+       case NL80211_IFTYPE_STATION:
+               ret = -ENODEV;
+               break;
+
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) || defined(COMPAT_KERNEL_RELEASE)
+       case NL80211_IFTYPE_P2P_GO:
+#endif
+       case NL80211_IFTYPE_AP:
+               ret = -ENODEV;
+               break;
+       default:
+               ret = -ENODEV;
+               DBG_871X("Unsupported interface type\n");
+               break;
+       }
+
+       DBG_871X(FUNC_ADPT_FMT" ndev:%p, ret:%d\n", FUNC_ADPT_ARG(padapter), ndev, ret);
+
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3,6,0))
+       return ndev ? ndev->ieee80211_ptr : ERR_PTR(ret);
+#elif (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,38)) || defined(COMPAT_KERNEL_RELEASE)
+       return ndev ? ndev : ERR_PTR(ret);
+#else
+       return ret;
+#endif
+}
+
+static int cfg80211_rtw_del_virtual_intf(struct wiphy *wiphy,
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3,6,0))
+       struct wireless_dev *wdev
+#else
+       struct net_device *ndev
+#endif
+)
+{
+       struct rtw_wdev_priv *pwdev_priv = (struct rtw_wdev_priv *)wiphy_priv(wiphy);
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3,6,0))
+       struct net_device *ndev;
+       ndev = wdev ? wdev->netdev : NULL;
+#endif
+
+       if (!ndev)
+               goto exit;
+
+       unregister_netdevice(ndev);
+
+       if (ndev == pwdev_priv->pmon_ndev) {
+               pwdev_priv->pmon_ndev = NULL;
+               pwdev_priv->ifname_mon[0] = '\0';
+               DBG_871X(FUNC_NDEV_FMT" remove monitor interface\n", FUNC_NDEV_ARG(ndev));
+       }
+
+exit:
+       return 0;
+}
+
+static int rtw_add_beacon(_adapter *adapter, const u8 *head, size_t head_len, const u8 *tail, size_t tail_len)
+{
+       int ret=0;
+       u8 *pbuf = NULL;
+       uint len, wps_ielen=0;
+       uint p2p_ielen=0;
+       u8 *p2p_ie;
+       u8 got_p2p_ie = _FALSE;
+       struct mlme_priv *pmlmepriv = &(adapter->mlmepriv);
+       //struct sta_priv *pstapriv = &padapter->stapriv;
+
+
+       DBG_8192C("%s beacon_head_len=%zu, beacon_tail_len=%zu\n", __FUNCTION__, head_len, tail_len);
+
+
+       if(check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
+               return -EINVAL;
+
+       if(head_len<24)
+               return -EINVAL;
+
+
+       pbuf = rtw_zmalloc(head_len+tail_len);
+       if(!pbuf)
+               return -ENOMEM;
+
+
+       //_rtw_memcpy(&pstapriv->max_num_sta, param->u.bcn_ie.reserved, 2);
+
+       //if((pstapriv->max_num_sta>NUM_STA) || (pstapriv->max_num_sta<=0))
+       //      pstapriv->max_num_sta = NUM_STA;
+
+
+       _rtw_memcpy(pbuf, (void *)head+24, head_len-24);// 24=beacon header len.
+       _rtw_memcpy(pbuf+head_len-24, (void *)tail, tail_len);
+
+       len = head_len+tail_len-24;
+
+       //check wps ie if inclued
+       if(rtw_get_wps_ie(pbuf+_FIXED_IE_LENGTH_, len-_FIXED_IE_LENGTH_, NULL, &wps_ielen))
+               DBG_8192C("add bcn, wps_ielen=%d\n", wps_ielen);
+
+#ifdef CONFIG_P2P
+       //check p2p ie if inclued
+       if( adapter->wdinfo.driver_interface == DRIVER_CFG80211 )
+       {
+               //check p2p if enable
+               if(rtw_get_p2p_ie(pbuf+_FIXED_IE_LENGTH_, len-_FIXED_IE_LENGTH_, NULL, &p2p_ielen))
+               {
+                       struct mlme_ext_priv *pmlmeext = &adapter->mlmeextpriv;
+                       struct wifidirect_info *pwdinfo= &(adapter->wdinfo);
+
+                       DBG_8192C("got p2p_ie, len=%d\n", p2p_ielen);
+                       got_p2p_ie = _TRUE;
+
+                       if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+                       {
+                               DBG_8192C("Enable P2P function for the first time\n");
+                               rtw_p2p_enable(adapter, P2P_ROLE_GO);
+                               wdev_to_priv(adapter->rtw_wdev)->p2p_enabled = _TRUE;
+                       }
+                       else
+                       {
+                               _cancel_timer_ex( &pwdinfo->find_phase_timer );
+                               _cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
+                               _cancel_timer_ex( &pwdinfo->pre_tx_scan_timer);
+
+                               DBG_8192C("enter GO Mode, p2p_ielen=%d\n", p2p_ielen);
+
+                               rtw_p2p_set_role(pwdinfo, P2P_ROLE_GO);
+                               rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_OK);
+                               pwdinfo->intent = 15;
+                       }
+               }
+       }
+#endif // CONFIG_P2P
+
+       /* pbss_network->IEs will not include p2p_ie, wfd ie */
+       rtw_ies_remove_ie(pbuf, &len, _BEACON_IE_OFFSET_, _VENDOR_SPECIFIC_IE_, P2P_OUI, 4);
+       rtw_ies_remove_ie(pbuf, &len, _BEACON_IE_OFFSET_, _VENDOR_SPECIFIC_IE_, WFD_OUI, 4);
+
+       if (rtw_check_beacon_data(adapter, pbuf,  len) == _SUCCESS)
+       {
+#ifdef  CONFIG_P2P
+               //check p2p if enable
+               if(got_p2p_ie == _TRUE)
+               {
+                       struct mlme_ext_priv *pmlmeext = &adapter->mlmeextpriv;
+                       struct wifidirect_info *pwdinfo= &(adapter->wdinfo);
+                       pwdinfo->operating_channel = pmlmeext->cur_channel;
+               }
+#endif //CONFIG_P2P
+               ret = 0;
+       }
+       else
+       {
+               ret = -EINVAL;
+       }
+
+
+       rtw_mfree(pbuf, head_len+tail_len);
+
+       return ret;
+}
+
+#if (LINUX_VERSION_CODE < KERNEL_VERSION(3,4,0)) && !defined(COMPAT_KERNEL_RELEASE)
+static int     cfg80211_rtw_add_beacon(struct wiphy *wiphy, struct net_device *ndev,
+                             struct beacon_parameters *info)
+{
+       int ret=0;
+       _adapter *adapter = wiphy_to_adapter(wiphy);
+
+       DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(ndev));
+       ret = rtw_add_beacon(adapter, info->head, info->head_len, info->tail, info->tail_len);
+
+       return ret;
+}
+
+static int     cfg80211_rtw_set_beacon(struct wiphy *wiphy, struct net_device *ndev,
+                             struct beacon_parameters *info)
+{
+       _adapter *padapter = wiphy_to_adapter(wiphy);
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+
+       DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(ndev));
+
+       pmlmeext->bstart_bss = _TRUE;
+
+       cfg80211_rtw_add_beacon(wiphy, ndev, info);
+
+       return 0;
+}
+
+static int     cfg80211_rtw_del_beacon(struct wiphy *wiphy, struct net_device *ndev)
+{
+       DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(ndev));
+
+       return 0;
+}
+#else
+static int cfg80211_rtw_start_ap(struct wiphy *wiphy, struct net_device *ndev,
+                                                               struct cfg80211_ap_settings *settings)
+{
+       int ret = 0;
+       _adapter *adapter = wiphy_to_adapter(wiphy);
+
+       DBG_871X(FUNC_NDEV_FMT" hidden_ssid:%d, auth_type:%d\n", FUNC_NDEV_ARG(ndev),
+               settings->hidden_ssid, settings->auth_type);
+
+       ret = rtw_add_beacon(adapter, settings->beacon.head, settings->beacon.head_len,
+               settings->beacon.tail, settings->beacon.tail_len);
+
+       adapter->mlmeextpriv.mlmext_info.hidden_ssid_mode = settings->hidden_ssid;
+
+       if (settings->ssid && settings->ssid_len) {
+               WLAN_BSSID_EX *pbss_network = &adapter->mlmepriv.cur_network.network;
+               WLAN_BSSID_EX *pbss_network_ext = &adapter->mlmeextpriv.mlmext_info.network;
+
+               if(0)
+               DBG_871X(FUNC_ADPT_FMT" ssid:(%s,%d), from ie:(%s,%d)\n", FUNC_ADPT_ARG(adapter),
+                       settings->ssid, settings->ssid_len,
+                       pbss_network->Ssid.Ssid, pbss_network->Ssid.SsidLength);
+
+               _rtw_memcpy(pbss_network->Ssid.Ssid, (void *)settings->ssid, settings->ssid_len);
+               pbss_network->Ssid.SsidLength = settings->ssid_len;
+               _rtw_memcpy(pbss_network_ext->Ssid.Ssid, (void *)settings->ssid, settings->ssid_len);
+               pbss_network_ext->Ssid.SsidLength = settings->ssid_len;
+
+               if(0)
+               DBG_871X(FUNC_ADPT_FMT" after ssid:(%s,%d), (%s,%d)\n", FUNC_ADPT_ARG(adapter),
+                       pbss_network->Ssid.Ssid, pbss_network->Ssid.SsidLength,
+                       pbss_network_ext->Ssid.Ssid, pbss_network_ext->Ssid.SsidLength);
+       }
+
+       return ret;
+}
+
+static int cfg80211_rtw_change_beacon(struct wiphy *wiphy, struct net_device *ndev,
+                                struct cfg80211_beacon_data *info)
+{
+       int ret = 0;
+       _adapter *adapter = wiphy_to_adapter(wiphy);
+
+       DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(ndev));
+
+       ret = rtw_add_beacon(adapter, info->head, info->head_len, info->tail, info->tail_len);
+
+       return ret;
+}
+
+static int cfg80211_rtw_stop_ap(struct wiphy *wiphy, struct net_device *ndev)
+{
+       DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(ndev));
+       return 0;
+}
+
+#endif //(LINUX_VERSION_CODE < KERNEL_VERSION(3,4,0))
+
+static int     cfg80211_rtw_add_station(struct wiphy *wiphy, struct net_device *ndev,
+                              u8 *mac, struct station_parameters *params)
+{
+       DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(ndev));
+
+       return 0;
+}
+
+static int     cfg80211_rtw_del_station(struct wiphy *wiphy, struct net_device *ndev,
+                              u8 *mac)
+{
+       int ret=0;
+       _irqL irqL;
+       _list   *phead, *plist;
+       u8 updated;
+       struct sta_info *psta = NULL;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(ndev);
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+       struct sta_priv *pstapriv = &padapter->stapriv;
+
+       DBG_871X("+"FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(ndev));
+
+       if(check_fwstate(pmlmepriv, (_FW_LINKED|WIFI_AP_STATE)) != _TRUE)
+       {
+               DBG_8192C("%s, fw_state != FW_LINKED|WIFI_AP_STATE\n", __func__);
+               return -EINVAL;
+       }
+
+
+       if(!mac)
+       {
+               DBG_8192C("flush all sta, and cam_entry\n");
+
+               flush_all_cam_entry(padapter);  //clear CAM
+
+               ret = rtw_sta_flush(padapter);
+
+               return ret;
+       }
+
+
+       DBG_8192C("free sta macaddr =" MAC_FMT "\n", MAC_ARG(mac));
+
+       if (mac[0] == 0xff && mac[1] == 0xff &&
+           mac[2] == 0xff && mac[3] == 0xff &&
+           mac[4] == 0xff && mac[5] == 0xff)
+       {
+               return -EINVAL;
+       }
+
+
+       _enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+
+       phead = &pstapriv->asoc_list;
+       plist = get_next(phead);
+
+       //check asoc_queue
+       while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
+       {
+               psta = LIST_CONTAINOR(plist, struct sta_info, asoc_list);
+
+               plist = get_next(plist);
+
+               if(_rtw_memcmp(mac, psta->hwaddr, ETH_ALEN))
+               {
+                       if(psta->dot8021xalg == 1 && psta->bpairwise_key_installed == _FALSE)
+                       {
+                               DBG_8192C("%s, sta's dot8021xalg = 1 and key_installed = _FALSE\n", __func__);
+                       }
+                       else
+                       {
+                               DBG_8192C("free psta=%p, aid=%d\n", psta, psta->aid);
+
+                               rtw_list_delete(&psta->asoc_list);
+                               pstapriv->asoc_list_cnt--;
+
+                               //_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+                               updated = ap_free_sta(padapter, psta, _TRUE, WLAN_REASON_DEAUTH_LEAVING);
+                               //_enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+
+                               psta = NULL;
+
+                               break;
+                       }
+
+               }
+
+       }
+
+       _exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+
+       associated_clients_update(padapter, updated);
+
+       DBG_871X("-"FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(ndev));
+
+       return ret;
+
+}
+
+static int     cfg80211_rtw_change_station(struct wiphy *wiphy, struct net_device *ndev,
+                                 u8 *mac, struct station_parameters *params)
+{
+       DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(ndev));
+
+       return 0;
+}
+
+static int     cfg80211_rtw_dump_station(struct wiphy *wiphy, struct net_device *ndev,
+                              int idx, u8 *mac, struct station_info *sinfo)
+{
+       DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(ndev));
+
+       //TODO: dump scanned queue
+
+       return -ENOENT;
+}
+
+static int     cfg80211_rtw_change_bss(struct wiphy *wiphy, struct net_device *ndev,
+                             struct bss_parameters *params)
+{
+       u8 i;
+
+       DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(ndev));
+/*
+       DBG_8192C("use_cts_prot=%d\n", params->use_cts_prot);
+       DBG_8192C("use_short_preamble=%d\n", params->use_short_preamble);
+       DBG_8192C("use_short_slot_time=%d\n", params->use_short_slot_time);
+       DBG_8192C("ap_isolate=%d\n", params->ap_isolate);
+
+       DBG_8192C("basic_rates_len=%d\n", params->basic_rates_len);
+       for(i=0; i<params->basic_rates_len; i++)
+       {
+               DBG_8192C("basic_rates=%d\n", params->basic_rates[i]);
+
+       }
+*/
+       return 0;
+
+}
+
+static int     cfg80211_rtw_set_channel(struct wiphy *wiphy
+       #if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,35))
+       , struct net_device *ndev
+       #endif
+       , struct ieee80211_channel *chan, enum nl80211_channel_type channel_type)
+{
+       #if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,35))
+       DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(ndev));
+       #endif
+
+       return 0;
+}
+
+static int     cfg80211_rtw_auth(struct wiphy *wiphy, struct net_device *ndev,
+                       struct cfg80211_auth_request *req)
+{
+       DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(ndev));
+
+       return 0;
+}
+
+static int     cfg80211_rtw_assoc(struct wiphy *wiphy, struct net_device *ndev,
+                        struct cfg80211_assoc_request *req)
+{
+       DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(ndev));
+
+       return 0;
+}
+#endif //CONFIG_AP_MODE
+
+void rtw_cfg80211_rx_action_p2p(_adapter *padapter, u8 *pmgmt_frame, uint frame_len)
+{
+       int type;
+       s32 freq;
+       int channel;
+       struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
+       u8 category, action;
+
+       channel = rtw_get_oper_ch(padapter);
+
+       DBG_8192C("RTW_Rx:cur_ch=%d\n", channel);
+       #ifdef CONFIG_P2P
+       type = rtw_p2p_check_frames(padapter, pmgmt_frame, frame_len, _FALSE);
+       if (type >= 0)
+               goto indicate;
+       #endif
+       rtw_action_frame_parse(pmgmt_frame, frame_len, &category, &action);
+       DBG_871X("RTW_Rx:category(%u), action(%u)\n", category, action);
+
+indicate:
+       if (channel <= RTW_CH_MAX_2G_CHANNEL)
+               freq = rtw_ieee80211_channel_to_frequency(channel, IEEE80211_BAND_2GHZ);
+       else
+               freq = rtw_ieee80211_channel_to_frequency(channel, IEEE80211_BAND_5GHZ);
+
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) || defined(COMPAT_KERNEL_RELEASE)
+       rtw_cfg80211_rx_mgmt(padapter, freq, 0, pmgmt_frame, frame_len, GFP_ATOMIC);
+#else
+       cfg80211_rx_action(padapter->pnetdev, freq, pmgmt_frame, frame_len, GFP_ATOMIC);
+#endif
+}
+
+void rtw_cfg80211_rx_p2p_action_public(_adapter *padapter, u8 *pmgmt_frame, uint frame_len)
+{
+       int type;
+       s32 freq;
+       int channel;
+       struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
+       u8 category, action;
+
+       channel = rtw_get_oper_ch(padapter);
+
+       DBG_8192C("RTW_Rx:cur_ch=%d\n", channel);
+       #ifdef CONFIG_P2P
+       type = rtw_p2p_check_frames(padapter, pmgmt_frame, frame_len, _FALSE);
+       if (type >= 0) {
+               switch (type) {
+               case P2P_GO_NEGO_CONF:
+               case P2P_PROVISION_DISC_RESP:
+               case P2P_INVIT_RESP:
+                       rtw_set_scan_deny(padapter, 2000);
+                       rtw_clear_scan_deny(padapter);
+               }
+               goto indicate;
+       }
+       #endif
+       rtw_action_frame_parse(pmgmt_frame, frame_len, &category, &action);
+       DBG_871X("RTW_Rx:category(%u), action(%u)\n", category, action);
+
+indicate:
+       if (channel <= RTW_CH_MAX_2G_CHANNEL)
+               freq = rtw_ieee80211_channel_to_frequency(channel, IEEE80211_BAND_2GHZ);
+       else
+               freq = rtw_ieee80211_channel_to_frequency(channel, IEEE80211_BAND_5GHZ);
+
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) || defined(COMPAT_KERNEL_RELEASE)
+       rtw_cfg80211_rx_mgmt(padapter, freq, 0, pmgmt_frame, frame_len, GFP_ATOMIC);
+#else
+       cfg80211_rx_action(padapter->pnetdev, freq, pmgmt_frame, frame_len, GFP_ATOMIC);
+#endif
+}
+
+void rtw_cfg80211_rx_action(_adapter *adapter, u8 *frame, uint frame_len, const char*msg)
+{
+       s32 freq;
+       int channel;
+       struct mlme_ext_priv *pmlmeext = &(adapter->mlmeextpriv);
+       struct rtw_wdev_priv *pwdev_priv = wdev_to_priv(adapter->rtw_wdev);
+       u8 category, action;
+
+       channel = rtw_get_oper_ch(adapter);
+
+       rtw_action_frame_parse(frame, frame_len, &category, &action);
+
+       DBG_8192C("RTW_Rx:cur_ch=%d\n", channel);
+       if (msg)
+               DBG_871X("RTW_Rx:%s\n", msg);
+       else
+               DBG_871X("RTW_Rx:category(%u), action(%u)\n", category, action);
+
+       if (channel <= RTW_CH_MAX_2G_CHANNEL)
+               freq = rtw_ieee80211_channel_to_frequency(channel, IEEE80211_BAND_2GHZ);
+       else
+               freq = rtw_ieee80211_channel_to_frequency(channel, IEEE80211_BAND_5GHZ);
+
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) || defined(COMPAT_KERNEL_RELEASE)
+       rtw_cfg80211_rx_mgmt(adapter, freq, 0, frame, frame_len, GFP_ATOMIC);
+#else
+       cfg80211_rx_action(adapter->pnetdev, freq, frame, frame_len, GFP_ATOMIC);
+#endif
+
+}
+
+#ifdef CONFIG_P2P
+void rtw_cfg80211_issue_p2p_provision_request(_adapter *padapter, const u8 *buf, size_t len)
+{
+       u16     wps_devicepassword_id = 0x0000;
+       uint    wps_devicepassword_id_len = 0;
+       u8                      wpsie[ 255 ] = { 0x00 }, p2p_ie[ 255 ] = { 0x00 };
+       uint                    p2p_ielen = 0;
+       uint                    wpsielen = 0;
+       u32     devinfo_contentlen = 0;
+       u8      devinfo_content[64] = { 0x00 };
+       u16     capability = 0;
+       uint capability_len = 0;
+
+       unsigned char category = RTW_WLAN_CATEGORY_PUBLIC;
+       u8                      action = P2P_PUB_ACTION_ACTION;
+       u8                      dialogToken = 1;
+       u32                     p2poui = cpu_to_be32(P2POUI);
+       u8                      oui_subtype = P2P_PROVISION_DISC_REQ;
+       u32                     p2pielen = 0;
+#ifdef CONFIG_WFD
+       u32                                     wfdielen = 0;
+#endif //CONFIG_WFD
+
+       struct xmit_frame                       *pmgntframe;
+       struct pkt_attrib                       *pattrib;
+       unsigned char                                   *pframe;
+       struct rtw_ieee80211_hdr        *pwlanhdr;
+       unsigned short                          *fctrl;
+       struct xmit_priv                        *pxmitpriv = &(padapter->xmitpriv);
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
+       u8 *frame_body = (unsigned char *)(buf + sizeof(struct rtw_ieee80211_hdr_3addr));
+       size_t frame_body_len = len - sizeof(struct rtw_ieee80211_hdr_3addr);
+
+
+       DBG_871X( "[%s] In\n", __FUNCTION__ );
+
+       //prepare for building provision_request frame
+       _rtw_memcpy(pwdinfo->tx_prov_disc_info.peerIFAddr, GetAddr1Ptr(buf), ETH_ALEN);
+       _rtw_memcpy(pwdinfo->tx_prov_disc_info.peerDevAddr, GetAddr1Ptr(buf), ETH_ALEN);
+
+       pwdinfo->tx_prov_disc_info.wps_config_method_request = WPS_CM_PUSH_BUTTON;
+
+       rtw_get_wps_ie( frame_body + _PUBLIC_ACTION_IE_OFFSET_, frame_body_len - _PUBLIC_ACTION_IE_OFFSET_, wpsie, &wpsielen);
+       rtw_get_wps_attr_content( wpsie, wpsielen, WPS_ATTR_DEVICE_PWID, (u8*) &wps_devicepassword_id, &wps_devicepassword_id_len);
+       wps_devicepassword_id = be16_to_cpu( wps_devicepassword_id );
+
+       switch(wps_devicepassword_id)
+       {
+               case WPS_DPID_PIN:
+                       pwdinfo->tx_prov_disc_info.wps_config_method_request = WPS_CM_LABEL;
+                       break;
+               case WPS_DPID_USER_SPEC:
+                       pwdinfo->tx_prov_disc_info.wps_config_method_request = WPS_CM_DISPLYA;
+                       break;
+               case WPS_DPID_MACHINE_SPEC:
+                       break;
+               case WPS_DPID_REKEY:
+                       break;
+               case WPS_DPID_PBC:
+                       pwdinfo->tx_prov_disc_info.wps_config_method_request = WPS_CM_PUSH_BUTTON;
+                       break;
+               case WPS_DPID_REGISTRAR_SPEC:
+                       pwdinfo->tx_prov_disc_info.wps_config_method_request = WPS_CM_KEYPAD;
+                       break;
+               default:
+                       break;
+       }
+
+
+       if ( rtw_get_p2p_ie( frame_body + _PUBLIC_ACTION_IE_OFFSET_, frame_body_len - _PUBLIC_ACTION_IE_OFFSET_, p2p_ie, &p2p_ielen ) )
+       {
+
+               rtw_get_p2p_attr_content( p2p_ie, p2p_ielen, P2P_ATTR_DEVICE_INFO, devinfo_content, &devinfo_contentlen);
+               rtw_get_p2p_attr_content( p2p_ie, p2p_ielen, P2P_ATTR_CAPABILITY, (u8*)&capability, &capability_len);
+
+       }
+
+
+       //start to build provision_request frame
+       _rtw_memset(wpsie, 0, sizeof(wpsie));
+       _rtw_memset(p2p_ie, 0, sizeof(p2p_ie));
+       p2p_ielen = 0;
+
+       if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+       {
+               return;
+       }
+
+
+       //update attribute
+       pattrib = &pmgntframe->attrib;
+       update_mgntframe_attrib(padapter, pattrib);
+
+       _rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
+
+       pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+
+       fctrl = &(pwlanhdr->frame_ctl);
+       *(fctrl) = 0;
+
+       _rtw_memcpy(pwlanhdr->addr1, pwdinfo->tx_prov_disc_info.peerDevAddr, ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr2, myid(&(padapter->eeprompriv)), ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr3, pwdinfo->tx_prov_disc_info.peerDevAddr, ETH_ALEN);
+
+       SetSeqNum(pwlanhdr, pmlmeext->mgnt_seq);
+       pmlmeext->mgnt_seq++;
+       SetFrameSubType(pframe, WIFI_ACTION);
+
+       pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
+       pattrib->pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
+
+       pframe = rtw_set_fixed_ie(pframe, 1, &(category), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(action), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 4, (unsigned char *) &(p2poui), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(oui_subtype), &(pattrib->pktlen));
+       pframe = rtw_set_fixed_ie(pframe, 1, &(dialogToken), &(pattrib->pktlen));
+
+
+       //build_prov_disc_request_p2p_ie
+       //      P2P OUI
+       p2pielen = 0;
+       p2p_ie[ p2pielen++ ] = 0x50;
+       p2p_ie[ p2pielen++ ] = 0x6F;
+       p2p_ie[ p2pielen++ ] = 0x9A;
+       p2p_ie[ p2pielen++ ] = 0x09;    //      WFA P2P v1.0
+
+       //      Commented by Albert 20110301
+       //      According to the P2P Specification, the provision discovery request frame should contain 3 P2P attributes
+       //      1. P2P Capability
+       //      2. Device Info
+       //      3. Group ID ( When joining an operating P2P Group )
+
+       //      P2P Capability ATTR
+       //      Type:
+       p2p_ie[ p2pielen++ ] = P2P_ATTR_CAPABILITY;
+
+       //      Length:
+       //*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 0x0002 );
+       RTW_PUT_LE16(p2p_ie + p2pielen, 0x0002);
+       p2pielen += 2;
+
+       //      Value:
+       //      Device Capability Bitmap, 1 byte
+       //      Group Capability Bitmap, 1 byte
+       _rtw_memcpy(p2p_ie + p2pielen, &capability, 2);
+       p2pielen += 2;
+
+
+       //      Device Info ATTR
+       //      Type:
+       p2p_ie[ p2pielen++ ] = P2P_ATTR_DEVICE_INFO;
+
+       //      Length:
+       //      21 -> P2P Device Address (6bytes) + Config Methods (2bytes) + Primary Device Type (8bytes)
+       //      + NumofSecondDevType (1byte) + WPS Device Name ID field (2bytes) + WPS Device Name Len field (2bytes)
+       //*(u16*) ( p2pie + p2pielen ) = cpu_to_le16( 21 + pwdinfo->device_name_len );
+       RTW_PUT_LE16(p2p_ie + p2pielen, devinfo_contentlen);
+       p2pielen += 2;
+
+       //      Value:
+       _rtw_memcpy(p2p_ie + p2pielen, devinfo_content, devinfo_contentlen);
+       p2pielen += devinfo_contentlen;
+
+
+       pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, p2pielen, (unsigned char *) p2p_ie, &p2p_ielen);
+       //p2pielen = build_prov_disc_request_p2p_ie( pwdinfo, pframe, NULL, 0, pwdinfo->tx_prov_disc_info.peerDevAddr);
+       //pframe += p2pielen;
+       pattrib->pktlen += p2p_ielen;
+
+       wpsielen = 0;
+       //      WPS OUI
+       *(u32*) ( wpsie ) = cpu_to_be32( WPSOUI );
+       wpsielen += 4;
+
+       //      WPS version
+       //      Type:
+       *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_VER1 );
+       wpsielen += 2;
+
+       //      Length:
+       *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0001 );
+       wpsielen += 2;
+
+       //      Value:
+       wpsie[wpsielen++] = WPS_VERSION_1;      //      Version 1.0
+
+       //      Config Method
+       //      Type:
+       *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( WPS_ATTR_CONF_METHOD );
+       wpsielen += 2;
+
+       //      Length:
+       *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( 0x0002 );
+       wpsielen += 2;
+
+       //      Value:
+       *(u16*) ( wpsie + wpsielen ) = cpu_to_be16( pwdinfo->tx_prov_disc_info.wps_config_method_request );
+       wpsielen += 2;
+
+       pframe = rtw_set_ie(pframe, _VENDOR_SPECIFIC_IE_, wpsielen, (unsigned char *) wpsie, &pattrib->pktlen );
+
+
+#ifdef CONFIG_WFD
+       wfdielen = build_provdisc_req_wfd_ie(pwdinfo, pframe);
+       pframe += wfdielen;
+       pattrib->pktlen += wfdielen;
+#endif //CONFIG_WFD
+
+       pattrib->last_txcmdsz = pattrib->pktlen;
+
+       //dump_mgntframe(padapter, pmgntframe);
+       if (dump_mgntframe_and_wait_ack(padapter, pmgntframe) != _SUCCESS)
+               DBG_8192C("%s, ack to\n", __func__);
+
+       //if(wps_devicepassword_id == WPS_DPID_REGISTRAR_SPEC)
+       //{
+       //      DBG_8192C("waiting for p2p peer key-in PIN CODE\n");
+       //      rtw_msleep_os(15000); // 15 sec for key in PIN CODE, workaround for GS2 before issuing Nego Req.
+       //}
+
+}
+
+static s32 cfg80211_rtw_remain_on_channel(struct wiphy *wiphy,
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3,6,0))
+       struct wireless_dev *wdev,
+#else
+       struct net_device *ndev,
+#endif
+       struct ieee80211_channel * channel,
+#if (LINUX_VERSION_CODE < KERNEL_VERSION(3,8,0))
+       enum nl80211_channel_type channel_type,
+#endif
+       unsigned int duration, u64 *cookie)
+{
+       s32 err = 0;
+       _adapter *padapter = wiphy_to_adapter(wiphy);
+       struct rtw_wdev_priv *pwdev_priv = wdev_to_priv(padapter->rtw_wdev);
+       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
+       struct wifidirect_info *pwdinfo = &padapter->wdinfo;
+       struct cfg80211_wifidirect_info *pcfg80211_wdinfo = &padapter->cfg80211_wdinfo;
+       u8 remain_ch = (u8) ieee80211_frequency_to_channel(channel->center_freq);
+       u8 ready_on_channel = _FALSE;
+
+       DBG_871X(FUNC_ADPT_FMT" ch:%u duration:%d\n", FUNC_ADPT_ARG(padapter), remain_ch, duration);
+
+       if(pcfg80211_wdinfo->is_ro_ch == _TRUE)
+       {
+               DBG_8192C("%s, cancel ro ch timer\n", __func__);
+
+               _cancel_timer_ex(&padapter->cfg80211_wdinfo.remain_on_ch_timer);
+
+#ifdef CONFIG_CONCURRENT_MODE
+                ATOMIC_SET(&pwdev_priv->ro_ch_to, 1);
+#endif //CONFIG_CONCURRENT_MODE
+
+               p2p_protocol_wk_hdl(padapter, P2P_RO_CH_WK);
+       }
+
+       pcfg80211_wdinfo->is_ro_ch = _TRUE;
+
+       if(_FAIL == rtw_pwr_wakeup(padapter)) {
+               err = -EFAULT;
+               goto exit;
+       }
+
+       _rtw_memcpy(&pcfg80211_wdinfo->remain_on_ch_channel, channel, sizeof(struct ieee80211_channel));
+       #if (LINUX_VERSION_CODE < KERNEL_VERSION(3,8,0))
+       pcfg80211_wdinfo->remain_on_ch_type= channel_type;
+       #endif
+       pcfg80211_wdinfo->remain_on_ch_cookie= *cookie;
+
+       rtw_scan_abort(padapter);
+#ifdef CONFIG_CONCURRENT_MODE
+       if(rtw_buddy_adapter_up(padapter))
+               rtw_scan_abort(padapter->pbuddy_adapter);
+#endif //CONFIG_CONCURRENT_MODE
+
+       //if(!rtw_p2p_chk_role(pwdinfo, P2P_ROLE_CLIENT) && !rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
+       if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+       {
+               rtw_p2p_enable(padapter, P2P_ROLE_DEVICE);
+               wdev_to_priv(padapter->rtw_wdev)->p2p_enabled = _TRUE;
+       }
+       else
+       {
+               rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
+#ifdef CONFIG_DEBUG_CFG80211
+               DBG_8192C("%s, role=%d, p2p_state=%d\n", __func__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo));
+#endif
+       }
+
+
+       rtw_p2p_set_state(pwdinfo, P2P_STATE_LISTEN);
+
+
+       if(duration < 400)
+               duration = duration*3;//extend from exper.
+
+
+#ifdef CONFIG_CONCURRENT_MODE
+       if(check_buddy_fwstate(padapter, _FW_LINKED) &&
+               (duration<pwdinfo->ext_listen_interval))
+       {
+               duration = duration +   pwdinfo->ext_listen_interval;
+       }
+#endif
+
+       pcfg80211_wdinfo->restore_channel = rtw_get_oper_ch(padapter);
+
+       if(rtw_ch_set_search_ch(pmlmeext->channel_set, remain_ch) >= 0) {
+#ifdef CONFIG_CONCURRENT_MODE
+               if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
+               {
+                       PADAPTER pbuddy_adapter = padapter->pbuddy_adapter;
+                       struct mlme_ext_priv *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
+
+                       if(remain_ch != pbuddy_mlmeext->cur_channel)
+                       {
+                               if(ATOMIC_READ(&pwdev_priv->switch_ch_to)==1 ||
+                                       (remain_ch != pmlmeext->cur_channel))
+                               {
+                                       DBG_8192C("%s, issue nulldata pwrbit=1\n", __func__);
+                                       issue_nulldata(padapter->pbuddy_adapter, NULL, 1, 3, 500);
+
+                                       ATOMIC_SET(&pwdev_priv->switch_ch_to, 0);
+
+                                       DBG_8192C("%s, set switch ch timer, duration=%d\n", __func__, duration-pwdinfo->ext_listen_interval);
+                                       _set_timer(&pwdinfo->ap_p2p_switch_timer, duration-pwdinfo->ext_listen_interval);
+                               }
+                       }
+
+                       ready_on_channel = _TRUE;
+                       //pmlmeext->cur_channel = remain_ch;
+                       //set_channel_bwmode(padapter, remain_ch, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
+               }else
+#endif //CONFIG_CONCURRENT_MODE
+               if(remain_ch != pmlmeext->cur_channel )
+               {
+                       ready_on_channel = _TRUE;
+                       //pmlmeext->cur_channel = remain_ch;
+                       //set_channel_bwmode(padapter, remain_ch, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
+               }
+       } else {
+               DBG_871X("%s remain_ch:%u not in channel plan!!!!\n", __FUNCTION__, remain_ch);
+       }
+
+
+       //call this after other things have been done
+#ifdef CONFIG_CONCURRENT_MODE
+       if(ATOMIC_READ(&pwdev_priv->ro_ch_to)==1 ||
+               (remain_ch != pmlmeext->cur_channel))
+       {
+               u8 co_channel = 0xff;
+               ATOMIC_SET(&pwdev_priv->ro_ch_to, 0);
+#endif
+
+               if(ready_on_channel == _TRUE)
+               {
+                       if ( !check_fwstate(&padapter->mlmepriv, _FW_LINKED ) )
+                               pmlmeext->cur_channel = remain_ch;
+
+#ifdef CONFIG_CONCURRENT_MODE
+                       co_channel = rtw_get_oper_ch(padapter);
+
+                       if(co_channel !=remain_ch)
+#endif
+                       {
+                               if (!padapter->mlmepriv.LinkDetectInfo.bBusyTraffic)
+                                       set_channel_bwmode(padapter, remain_ch, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
+                       }
+               }
+               DBG_8192C("%s, set ro ch timer, duration=%d\n", __func__, duration);
+               _set_timer( &pcfg80211_wdinfo->remain_on_ch_timer, duration);
+
+#ifdef CONFIG_CONCURRENT_MODE
+       }
+#endif
+
+       rtw_cfg80211_ready_on_channel(padapter, *cookie, channel, channel_type, duration, GFP_KERNEL);
+
+exit:
+       if (err)
+               pcfg80211_wdinfo->is_ro_ch = _FALSE;
+
+       return err;
+}
+
+static s32 cfg80211_rtw_cancel_remain_on_channel(struct wiphy *wiphy,
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3,6,0))
+       struct wireless_dev *wdev,
+#else
+       struct net_device *ndev,
+#endif
+       u64 cookie)
+{
+       s32 err = 0;
+       _adapter *padapter = wiphy_to_adapter(wiphy);
+       struct rtw_wdev_priv *pwdev_priv = wdev_to_priv(padapter->rtw_wdev);
+       struct wifidirect_info *pwdinfo = &padapter->wdinfo;
+       struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
+       struct cfg80211_wifidirect_info *pcfg80211_wdinfo = &padapter->cfg80211_wdinfo;
+
+       DBG_871X(FUNC_ADPT_FMT"\n", FUNC_ADPT_ARG(padapter));
+
+       if (pcfg80211_wdinfo->is_ro_ch == _TRUE) {
+               DBG_8192C("%s, cancel ro ch timer\n", __func__);
+               _cancel_timer_ex(&padapter->cfg80211_wdinfo.remain_on_ch_timer);
+               #ifdef CONFIG_CONCURRENT_MODE
+               ATOMIC_SET(&pwdev_priv->ro_ch_to, 1);
+               #endif
+               p2p_protocol_wk_hdl(padapter, P2P_RO_CH_WK);
+       }
+
+       #if 0
+       //      Disable P2P Listen State
+       if(!rtw_p2p_chk_role(pwdinfo, P2P_ROLE_CLIENT) && !rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
+       {
+               if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+               {
+                       _cancel_timer_ex( &pwdinfo->find_phase_timer );
+                       _cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
+                       _cancel_timer_ex( &pwdinfo->pre_tx_scan_timer);
+
+                       rtw_p2p_set_state(pwdinfo, P2P_STATE_NONE);
+                       _rtw_memset(pwdinfo, 0x00, sizeof(struct wifidirect_info));
+               }
+       }
+       else
+       #endif
+       {
+                rtw_p2p_set_state(pwdinfo, rtw_p2p_pre_state(pwdinfo));
+#ifdef CONFIG_DEBUG_CFG80211
+                DBG_8192C("%s, role=%d, p2p_state=%d\n", __func__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo));
+#endif
+       }
+       pcfg80211_wdinfo->is_ro_ch = _FALSE;
+
+       return err;
+}
+
+#endif //CONFIG_P2P
+
+static int _cfg80211_rtw_mgmt_tx(_adapter *padapter, u8 tx_ch, const u8 *buf, size_t len)
+{
+       struct xmit_frame       *pmgntframe;
+       struct pkt_attrib       *pattrib;
+       unsigned char   *pframe;
+       int ret = _FAIL;
+       bool ack = _TRUE;
+       struct rtw_ieee80211_hdr *pwlanhdr;
+       struct rtw_wdev_priv *pwdev_priv = wdev_to_priv(padapter->rtw_wdev);
+       struct xmit_priv        *pxmitpriv = &(padapter->xmitpriv);
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct wifidirect_info *pwdinfo = &padapter->wdinfo;
+       //struct cfg80211_wifidirect_info *pcfg80211_wdinfo = &padapter->cfg80211_wdinfo;
+
+       if(_FAIL == rtw_pwr_wakeup(padapter)) {
+               ret = -EFAULT;
+               goto exit;
+       }
+
+       rtw_set_scan_deny(padapter, 1000);
+
+       rtw_scan_abort(padapter);
+       #ifdef CONFIG_CONCURRENT_MODE
+       if(rtw_buddy_adapter_up(padapter))
+               rtw_scan_abort(padapter->pbuddy_adapter);
+       #endif /* CONFIG_CONCURRENT_MODE */
+
+       if (padapter->cfg80211_wdinfo.is_ro_ch == _TRUE) {
+               //DBG_8192C("%s, cancel ro ch timer\n", __func__);
+               //_cancel_timer_ex(&padapter->cfg80211_wdinfo.remain_on_ch_timer);
+               //padapter->cfg80211_wdinfo.is_ro_ch = _FALSE;
+               #ifdef CONFIG_CONCURRENT_MODE
+               if (!check_fwstate(&padapter->mlmepriv, _FW_LINKED ))
+               {
+                       DBG_8192C("%s, extend ro ch time\n", __func__);
+                       _set_timer( &padapter->cfg80211_wdinfo.remain_on_ch_timer, pwdinfo->ext_listen_period);
+               }
+               #endif //CONFIG_CONCURRENT_MODE
+       }
+
+#ifdef CONFIG_CONCURRENT_MODE
+       if (check_buddy_fwstate(padapter, _FW_LINKED )) {
+               u8 co_channel=0xff;
+               PADAPTER pbuddy_adapter = padapter->pbuddy_adapter;
+               struct mlme_ext_priv *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
+
+               co_channel = rtw_get_oper_ch(padapter);
+
+               if (tx_ch != pbuddy_mlmeext->cur_channel) {
+
+                       u16 ext_listen_period;
+
+                       if (ATOMIC_READ(&pwdev_priv->switch_ch_to)==1) {
+                               DBG_8192C("%s, issue nulldata pwrbit=1\n", __func__);
+                               issue_nulldata(padapter->pbuddy_adapter, NULL, 1, 3, 500);
+
+                               ATOMIC_SET(&pwdev_priv->switch_ch_to, 0);
+
+                               //DBG_8192C("%s, set switch ch timer, period=%d\n", __func__, pwdinfo->ext_listen_period);
+                               //_set_timer(&pwdinfo->ap_p2p_switch_timer, pwdinfo->ext_listen_period);
+                       }
+
+                       if (check_fwstate(&padapter->mlmepriv, _FW_LINKED ))
+                       {
+                               ext_listen_period = 500;// 500ms
+                       }
+                       else
+                       {
+                               ext_listen_period = pwdinfo->ext_listen_period;
+                       }
+
+                       DBG_8192C("%s, set switch ch timer, period=%d\n", __func__, ext_listen_period);
+                       _set_timer(&pwdinfo->ap_p2p_switch_timer, ext_listen_period);
+
+               }
+
+               if (!check_fwstate(&padapter->mlmepriv, _FW_LINKED ))
+                       pmlmeext->cur_channel = tx_ch;
+
+               if (tx_ch != co_channel)
+                       set_channel_bwmode(padapter, tx_ch, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
+       }else
+#endif //CONFIG_CONCURRENT_MODE
+       //if (tx_ch != pmlmeext->cur_channel) {
+       if(tx_ch != rtw_get_oper_ch(padapter)) {
+               if (!check_fwstate(&padapter->mlmepriv, _FW_LINKED ))
+                       pmlmeext->cur_channel = tx_ch;
+               set_channel_bwmode(padapter, tx_ch, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
+       }
+
+       //starting alloc mgmt frame to dump it
+       if ((pmgntframe = alloc_mgtxmitframe(pxmitpriv)) == NULL)
+       {
+               //ret = -ENOMEM;
+               ret = _FAIL;
+               goto exit;
+       }
+
+       //update attribute
+       pattrib = &pmgntframe->attrib;
+       update_mgntframe_attrib(padapter, pattrib);
+       pattrib->retry_ctrl = _FALSE;
+
+       _rtw_memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
+
+       pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
+
+       _rtw_memcpy(pframe, (void*)buf, len);
+       pattrib->pktlen = len;
+
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+       //update seq number
+       pmlmeext->mgnt_seq = GetSequence(pwlanhdr);
+       pattrib->seqnum = pmlmeext->mgnt_seq;
+       pmlmeext->mgnt_seq++;
+
+#ifdef CONFIG_WFD
+       {
+               struct wifi_display_info        *pwfd_info;
+
+               pwfd_info = padapter->wdinfo.wfd_info;
+
+               if ( _TRUE == pwfd_info->wfd_enable )
+               {
+                       rtw_append_wfd_ie( padapter, pframe, &pattrib->pktlen );
+               }
+       }
+#endif // CONFIG_WFD
+
+       pattrib->last_txcmdsz = pattrib->pktlen;
+
+       if (dump_mgntframe_and_wait_ack(padapter, pmgntframe) != _SUCCESS)
+       {
+               ack = _FALSE;
+               ret = _FAIL;
+
+               #ifdef CONFIG_DEBUG_CFG80211
+               DBG_8192C("%s, ack == _FAIL\n", __func__);
+               #endif
+       }
+       else
+       {
+               #ifdef CONFIG_DEBUG_CFG80211
+               DBG_8192C("%s, ack=%d, ok!\n", __func__, ack);
+               #endif
+               ret = _SUCCESS;
+       }
+
+exit:
+
+       #ifdef CONFIG_DEBUG_CFG80211
+       DBG_8192C("%s, ret=%d\n", __func__, ret);
+       #endif
+
+       return ret;
+
+}
+
+static int cfg80211_rtw_mgmt_tx(struct wiphy *wiphy,
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3,6,0))
+       struct wireless_dev *wdev,
+#else
+       struct net_device *ndev,
+#endif
+       struct ieee80211_channel *chan,
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,38)) || defined(COMPAT_KERNEL_RELEASE)
+       bool offchan,
+#endif
+#if (LINUX_VERSION_CODE < KERNEL_VERSION(3,8,0))
+       enum nl80211_channel_type channel_type,
+       #if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) || defined(COMPAT_KERNEL_RELEASE)
+       bool channel_type_valid,
+       #endif
+#endif
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,38)) || defined(COMPAT_KERNEL_RELEASE)
+       unsigned int wait,
+#endif
+       const u8 *buf, size_t len,
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3,2,0))
+       bool no_cck,
+#endif
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3,3,0))
+       bool dont_wait_for_ack,
+#endif
+       u64 *cookie)
+{
+       _adapter *padapter = (_adapter *)wiphy_to_adapter(wiphy);
+       struct rtw_wdev_priv *pwdev_priv = wdev_to_priv(padapter->rtw_wdev);
+       int ret = 0;
+       int tx_ret;
+       u32 dump_limit = RTW_MAX_MGMT_TX_CNT;
+       u32 dump_cnt = 0;
+       bool ack = _TRUE;
+       u8 tx_ch = (u8)ieee80211_frequency_to_channel(chan->center_freq);
+       u8 category, action;
+       int type = (-1);
+       u32 start = rtw_get_current_time();
+
+       /* cookie generation */
+       *cookie = (unsigned long) buf;
+
+#ifdef CONFIG_DEBUG_CFG80211
+       DBG_871X(FUNC_ADPT_FMT" len=%zu, ch=%d"
+       #if (LINUX_VERSION_CODE < KERNEL_VERSION(3,8,0))
+               ", ch_type=%d"
+               #if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) || defined(COMPAT_KERNEL_RELEASE)
+               ", channel_type_valid=%d"
+               #endif
+       #endif
+               "\n", FUNC_ADPT_ARG(padapter),
+               len, tx_ch
+       #if (LINUX_VERSION_CODE < KERNEL_VERSION(3,8,0))
+               , channel_type
+               #if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) || defined(COMPAT_KERNEL_RELEASE)
+               , channel_type_valid
+               #endif
+       #endif
+       );
+#endif /* CONFIG_DEBUG_CFG80211 */
+
+       /* indicate ack before issue frame to avoid racing with rsp frame */
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) || defined(COMPAT_KERNEL_RELEASE)
+       rtw_cfg80211_mgmt_tx_status(padapter, *cookie, buf, len, ack, GFP_KERNEL);
+#elif  (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,34) && LINUX_VERSION_CODE<=KERNEL_VERSION(2,6,35))
+       cfg80211_action_tx_status(ndev, *cookie, buf, len, ack, GFP_KERNEL);
+#endif
+
+       if (rtw_action_frame_parse(buf, len, &category, &action) == _FALSE) {
+               DBG_8192C(FUNC_ADPT_FMT" frame_control:0x%x\n", FUNC_ADPT_ARG(padapter),
+                       le16_to_cpu(((struct rtw_ieee80211_hdr_3addr *)buf)->frame_ctl));
+               goto exit;
+       }
+
+       DBG_8192C("RTW_Tx:tx_ch=%d, da="MAC_FMT"\n", tx_ch, MAC_ARG(GetAddr1Ptr(buf)));
+       #ifdef CONFIG_P2P
+       if((type = rtw_p2p_check_frames(padapter, buf, len, _TRUE)) >= 0) {
+               goto dump;
+       }
+       #endif
+       if (category == RTW_WLAN_CATEGORY_PUBLIC)
+               DBG_871X("RTW_Tx:%s\n", action_public_str(action));
+       else
+               DBG_871X("RTW_Tx:category(%u), action(%u)\n", category, action);
+
+dump:
+       do {
+               dump_cnt++;
+               tx_ret = _cfg80211_rtw_mgmt_tx(padapter, tx_ch, buf, len);
+       } while (dump_cnt < dump_limit && tx_ret != _SUCCESS);
+
+       if (tx_ret != _SUCCESS || dump_cnt > 1) {
+               DBG_871X(FUNC_ADPT_FMT" %s (%d/%d) in %d ms\n", FUNC_ADPT_ARG(padapter),
+                       tx_ret==_SUCCESS?"OK":"FAIL", dump_cnt, dump_limit, rtw_get_passing_time_ms(start));
+       }
+
+       switch (type) {
+       case P2P_GO_NEGO_CONF:
+               rtw_clear_scan_deny(padapter);
+               break;
+       case P2P_INVIT_RESP:
+               if (pwdev_priv->invit_info.flags & BIT(0)
+                       && pwdev_priv->invit_info.status == 0)
+               {
+                       DBG_871X(FUNC_ADPT_FMT" agree with invitation of persistent group\n",
+                               FUNC_ADPT_ARG(padapter));
+                       rtw_set_scan_deny(padapter, 5000);
+                       rtw_pwr_wakeup_ex(padapter, 5000);
+                       rtw_clear_scan_deny(padapter);
+               }
+               break;
+       }
+
+exit:
+       return ret;
+}
+
+static void cfg80211_rtw_mgmt_frame_register(struct wiphy *wiphy,
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 6, 0))
+       struct wireless_dev *wdev,
+#else
+       struct net_device *ndev,
+#endif
+       u16 frame_type, bool reg)
+{
+       _adapter *adapter = wiphy_to_adapter(wiphy);
+
+#ifdef CONFIG_DEBUG_CFG80211
+       DBG_871X(FUNC_ADPT_FMT" frame_type:%x, reg:%d\n", FUNC_ADPT_ARG(adapter),
+               frame_type, reg);
+#endif
+
+       if (frame_type != (IEEE80211_FTYPE_MGMT | IEEE80211_STYPE_PROBE_REQ))
+               return;
+
+       return;
+}
+
+static int rtw_cfg80211_set_beacon_wpsp2pie(struct net_device *ndev, char *buf, int len)
+{
+       int ret = 0;
+       uint wps_ielen = 0;
+       u8 *wps_ie;
+       u32     p2p_ielen = 0;
+       u8 wps_oui[8]={0x0,0x50,0xf2,0x04};
+       u8 *p2p_ie;
+       u32     wfd_ielen = 0;
+       u8 *wfd_ie;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(ndev);
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+       struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
+
+       DBG_871X(FUNC_NDEV_FMT" ielen=%d\n", FUNC_NDEV_ARG(ndev), len);
+
+       if(len>0)
+       {
+               if((wps_ie = rtw_get_wps_ie(buf, len, NULL, &wps_ielen)))
+               {
+                       #ifdef CONFIG_DEBUG_CFG80211
+                       DBG_8192C("bcn_wps_ielen=%d\n", wps_ielen);
+                       #endif
+
+                       if(pmlmepriv->wps_beacon_ie)
+                       {
+                               u32 free_len = pmlmepriv->wps_beacon_ie_len;
+                               pmlmepriv->wps_beacon_ie_len = 0;
+                               rtw_mfree(pmlmepriv->wps_beacon_ie, free_len);
+                               pmlmepriv->wps_beacon_ie = NULL;
+                       }
+
+                       pmlmepriv->wps_beacon_ie = rtw_malloc(wps_ielen);
+                       if ( pmlmepriv->wps_beacon_ie == NULL) {
+                               DBG_8192C("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
+                               return -EINVAL;
+
+                       }
+
+                       _rtw_memcpy(pmlmepriv->wps_beacon_ie, wps_ie, wps_ielen);
+                       pmlmepriv->wps_beacon_ie_len = wps_ielen;
+
+                       update_beacon(padapter, _VENDOR_SPECIFIC_IE_, wps_oui, _TRUE);
+
+               }
+
+               //buf += wps_ielen;
+               //len -= wps_ielen;
+
+               #ifdef CONFIG_P2P
+               if((p2p_ie=rtw_get_p2p_ie(buf, len, NULL, &p2p_ielen)))
+               {
+                       #ifdef CONFIG_DEBUG_CFG80211
+                       DBG_8192C("bcn_p2p_ielen=%d\n", p2p_ielen);
+                       #endif
+
+                       if(pmlmepriv->p2p_beacon_ie)
+                       {
+                               u32 free_len = pmlmepriv->p2p_beacon_ie_len;
+                               pmlmepriv->p2p_beacon_ie_len = 0;
+                               rtw_mfree(pmlmepriv->p2p_beacon_ie, free_len);
+                               pmlmepriv->p2p_beacon_ie = NULL;
+                       }
+
+                       pmlmepriv->p2p_beacon_ie = rtw_malloc(p2p_ielen);
+                       if ( pmlmepriv->p2p_beacon_ie == NULL) {
+                               DBG_8192C("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
+                               return -EINVAL;
+
+                       }
+
+                       _rtw_memcpy(pmlmepriv->p2p_beacon_ie, p2p_ie, p2p_ielen);
+                       pmlmepriv->p2p_beacon_ie_len = p2p_ielen;
+
+               }
+               #endif //CONFIG_P2P
+
+               //buf += p2p_ielen;
+               //len -= p2p_ielen;
+
+               #ifdef CONFIG_WFD
+               if(rtw_get_wfd_ie(buf, len, NULL, &wfd_ielen))
+               {
+                       #ifdef CONFIG_DEBUG_CFG80211
+                       DBG_8192C("bcn_wfd_ielen=%d\n", wfd_ielen);
+                       #endif
+
+                       if(pmlmepriv->wfd_beacon_ie)
+                       {
+                               u32 free_len = pmlmepriv->wfd_beacon_ie_len;
+                               pmlmepriv->wfd_beacon_ie_len = 0;
+                               rtw_mfree(pmlmepriv->wfd_beacon_ie, free_len);
+                               pmlmepriv->wfd_beacon_ie = NULL;
+                       }
+
+                       pmlmepriv->wfd_beacon_ie = rtw_malloc(wfd_ielen);
+                       if ( pmlmepriv->wfd_beacon_ie == NULL) {
+                               DBG_8192C("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
+                               return -EINVAL;
+
+                       }
+                       rtw_get_wfd_ie(buf, len, pmlmepriv->wfd_beacon_ie, &pmlmepriv->wfd_beacon_ie_len);
+               }
+               #endif //CONFIG_WFD
+
+               pmlmeext->bstart_bss = _TRUE;
+
+       }
+
+       return ret;
+
+}
+
+static int rtw_cfg80211_set_probe_resp_wpsp2pie(struct net_device *net, char *buf, int len)
+{
+       int ret = 0;
+       uint wps_ielen = 0;
+       u8 *wps_ie;
+       u32     p2p_ielen = 0;
+       u8 *p2p_ie;
+       u32     wfd_ielen = 0;
+       u8 *wfd_ie;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(net);
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+
+#ifdef CONFIG_DEBUG_CFG80211
+       DBG_8192C("%s, ielen=%d\n", __func__, len);
+#endif
+
+       if(len>0)
+       {
+               if((wps_ie = rtw_get_wps_ie(buf, len, NULL, &wps_ielen)))
+               {
+                       uint    attr_contentlen = 0;
+                       u16     uconfig_method, *puconfig_method = NULL;
+
+                       #ifdef CONFIG_DEBUG_CFG80211
+                       DBG_8192C("probe_resp_wps_ielen=%d\n", wps_ielen);
+                       #endif
+
+                       if(check_fwstate(pmlmepriv, WIFI_UNDER_WPS))
+                       {
+                               u8 sr = 0;
+                               rtw_get_wps_attr_content(wps_ie,  wps_ielen, WPS_ATTR_SELECTED_REGISTRAR, (u8*)(&sr), NULL);
+
+                               if (sr != 0)
+                               {
+                                       DBG_871X("%s, got sr\n", __func__);
+                               }
+                               else
+                               {
+                                       DBG_8192C("GO mode process WPS under site-survey,  sr no set\n");
+                                       return ret;
+                               }
+                       }
+
+                       if(pmlmepriv->wps_probe_resp_ie)
+                       {
+                               u32 free_len = pmlmepriv->wps_probe_resp_ie_len;
+                               pmlmepriv->wps_probe_resp_ie_len = 0;
+                               rtw_mfree(pmlmepriv->wps_probe_resp_ie, free_len);
+                               pmlmepriv->wps_probe_resp_ie = NULL;
+                       }
+
+                       pmlmepriv->wps_probe_resp_ie = rtw_malloc(wps_ielen);
+                       if ( pmlmepriv->wps_probe_resp_ie == NULL) {
+                               DBG_8192C("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
+                               return -EINVAL;
+
+                       }
+
+                       //add PUSH_BUTTON config_method by driver self in wpsie of probe_resp at GO Mode
+                       if ( (puconfig_method = (u16*)rtw_get_wps_attr_content( wps_ie, wps_ielen, WPS_ATTR_CONF_METHOD , NULL, &attr_contentlen)) != NULL )
+                       {
+                               #ifdef CONFIG_DEBUG_CFG80211
+                               //printk("config_method in wpsie of probe_resp = 0x%x\n", be16_to_cpu(*puconfig_method));
+                               #endif
+
+                               uconfig_method = WPS_CM_PUSH_BUTTON;
+                               uconfig_method = cpu_to_be16( uconfig_method );
+
+                               *puconfig_method |= uconfig_method;
+                       }
+
+                       _rtw_memcpy(pmlmepriv->wps_probe_resp_ie, wps_ie, wps_ielen);
+                       pmlmepriv->wps_probe_resp_ie_len = wps_ielen;
+
+               }
+
+               //buf += wps_ielen;
+               //len -= wps_ielen;
+
+               #ifdef CONFIG_P2P
+               if((p2p_ie=rtw_get_p2p_ie(buf, len, NULL, &p2p_ielen)))
+               {
+                       u8 is_GO = _FALSE;
+                       u32 attr_contentlen = 0;
+                       u16 cap_attr=0;
+
+                       #ifdef CONFIG_DEBUG_CFG80211
+                       DBG_8192C("probe_resp_p2p_ielen=%d\n", p2p_ielen);
+                       #endif
+
+                       //Check P2P Capability ATTR
+                       if( rtw_get_p2p_attr_content( p2p_ie, p2p_ielen, P2P_ATTR_CAPABILITY, (u8*)&cap_attr, (uint*) &attr_contentlen) )
+                       {
+                               u8 grp_cap=0;
+                               //DBG_8192C( "[%s] Got P2P Capability Attr!!\n", __FUNCTION__ );
+                               cap_attr = le16_to_cpu(cap_attr);
+                               grp_cap = (u8)((cap_attr >> 8)&0xff);
+
+                               is_GO = (grp_cap&BIT(0)) ? _TRUE:_FALSE;
+
+                               if(is_GO)
+                                       DBG_8192C("Got P2P Capability Attr, grp_cap=0x%x, is_GO\n", grp_cap);
+                       }
+
+
+                       if(is_GO == _FALSE)
+                       {
+                               if(pmlmepriv->p2p_probe_resp_ie)
+                               {
+                                       u32 free_len = pmlmepriv->p2p_probe_resp_ie_len;
+                                       pmlmepriv->p2p_probe_resp_ie_len = 0;
+                                       rtw_mfree(pmlmepriv->p2p_probe_resp_ie, free_len);
+                                       pmlmepriv->p2p_probe_resp_ie = NULL;
+                               }
+
+                               pmlmepriv->p2p_probe_resp_ie = rtw_malloc(p2p_ielen);
+                               if ( pmlmepriv->p2p_probe_resp_ie == NULL) {
+                                       DBG_8192C("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
+                                       return -EINVAL;
+
+                               }
+                               _rtw_memcpy(pmlmepriv->p2p_probe_resp_ie, p2p_ie, p2p_ielen);
+                               pmlmepriv->p2p_probe_resp_ie_len = p2p_ielen;
+                       }
+                       else
+                       {
+                               if(pmlmepriv->p2p_go_probe_resp_ie)
+                               {
+                                       u32 free_len = pmlmepriv->p2p_go_probe_resp_ie_len;
+                                       pmlmepriv->p2p_go_probe_resp_ie_len = 0;
+                                       rtw_mfree(pmlmepriv->p2p_go_probe_resp_ie, free_len);
+                                       pmlmepriv->p2p_go_probe_resp_ie = NULL;
+                               }
+
+                               pmlmepriv->p2p_go_probe_resp_ie = rtw_malloc(p2p_ielen);
+                               if ( pmlmepriv->p2p_go_probe_resp_ie == NULL) {
+                                       DBG_8192C("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
+                                       return -EINVAL;
+
+                               }
+                               _rtw_memcpy(pmlmepriv->p2p_go_probe_resp_ie, p2p_ie, p2p_ielen);
+                               pmlmepriv->p2p_go_probe_resp_ie_len = p2p_ielen;
+                       }
+
+               }
+               #endif //CONFIG_P2P
+
+               //buf += p2p_ielen;
+               //len -= p2p_ielen;
+
+               #ifdef CONFIG_WFD
+               if(rtw_get_wfd_ie(buf, len, NULL, &wfd_ielen))
+               {
+                       #ifdef CONFIG_DEBUG_CFG80211
+                       DBG_8192C("probe_resp_wfd_ielen=%d\n", wfd_ielen);
+                       #endif
+
+                       if(pmlmepriv->wfd_probe_resp_ie)
+                       {
+                               u32 free_len = pmlmepriv->wfd_probe_resp_ie_len;
+                               pmlmepriv->wfd_probe_resp_ie_len = 0;
+                               rtw_mfree(pmlmepriv->wfd_probe_resp_ie, free_len);
+                               pmlmepriv->wfd_probe_resp_ie = NULL;
+                       }
+
+                       pmlmepriv->wfd_probe_resp_ie = rtw_malloc(wfd_ielen);
+                       if ( pmlmepriv->wfd_probe_resp_ie == NULL) {
+                               DBG_8192C("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
+                               return -EINVAL;
+
+                       }
+                       rtw_get_wfd_ie(buf, len, pmlmepriv->wfd_probe_resp_ie, &pmlmepriv->wfd_probe_resp_ie_len);
+               }
+               #endif //CONFIG_WFD
+
+       }
+
+       return ret;
+
+}
+
+static int rtw_cfg80211_set_assoc_resp_wpsp2pie(struct net_device *net, char *buf, int len)
+{
+       int ret = 0;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(net);
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+
+       DBG_8192C("%s, ielen=%d\n", __func__, len);
+
+       if(len>0)
+       {
+               if(pmlmepriv->wps_assoc_resp_ie)
+               {
+                       u32 free_len = pmlmepriv->wps_assoc_resp_ie_len;
+                       pmlmepriv->wps_assoc_resp_ie_len = 0;
+                       rtw_mfree(pmlmepriv->wps_assoc_resp_ie, free_len);
+                       pmlmepriv->wps_assoc_resp_ie = NULL;
+               }
+
+               pmlmepriv->wps_assoc_resp_ie = rtw_malloc(len);
+               if ( pmlmepriv->wps_assoc_resp_ie == NULL) {
+                       DBG_8192C("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
+                       return -EINVAL;
+
+               }
+               _rtw_memcpy(pmlmepriv->wps_assoc_resp_ie, buf, len);
+               pmlmepriv->wps_assoc_resp_ie_len = len;
+       }
+
+       return ret;
+
+}
+
+int rtw_cfg80211_set_mgnt_wpsp2pie(struct net_device *net, char *buf, int len,
+       int type)
+{
+       int ret = 0;
+       uint wps_ielen = 0;
+       u32     p2p_ielen = 0;
+
+#ifdef CONFIG_DEBUG_CFG80211
+       DBG_8192C("%s, ielen=%d\n", __func__, len);
+#endif
+
+       if(     (rtw_get_wps_ie(buf, len, NULL, &wps_ielen) && (wps_ielen>0))
+               #ifdef CONFIG_P2P
+               || (rtw_get_p2p_ie(buf, len, NULL, &p2p_ielen) && (p2p_ielen>0))
+               #endif
+       )
+       {
+               if (net != NULL)
+               {
+                       switch (type)
+                       {
+                               case 0x1: //BEACON
+                               ret = rtw_cfg80211_set_beacon_wpsp2pie(net, buf, len);
+                               break;
+                               case 0x2: //PROBE_RESP
+                               ret = rtw_cfg80211_set_probe_resp_wpsp2pie(net, buf, len);
+                               break;
+                               case 0x4: //ASSOC_RESP
+                               ret = rtw_cfg80211_set_assoc_resp_wpsp2pie(net, buf, len);
+                               break;
+                       }
+               }
+       }
+
+       return ret;
+
+}
+
+static struct cfg80211_ops rtw_cfg80211_ops = {
+       .change_virtual_intf = cfg80211_rtw_change_iface,
+       .add_key = cfg80211_rtw_add_key,
+       .get_key = cfg80211_rtw_get_key,
+       .del_key = cfg80211_rtw_del_key,
+       .set_default_key = cfg80211_rtw_set_default_key,
+       .get_station = cfg80211_rtw_get_station,
+       .scan = cfg80211_rtw_scan,
+       .set_wiphy_params = cfg80211_rtw_set_wiphy_params,
+       .connect = cfg80211_rtw_connect,
+       .disconnect = cfg80211_rtw_disconnect,
+       .join_ibss = cfg80211_rtw_join_ibss,
+       .leave_ibss = cfg80211_rtw_leave_ibss,
+       .set_tx_power = cfg80211_rtw_set_txpower,
+       .get_tx_power = cfg80211_rtw_get_txpower,
+       .set_power_mgmt = cfg80211_rtw_set_power_mgmt,
+       .set_pmksa = cfg80211_rtw_set_pmksa,
+       .del_pmksa = cfg80211_rtw_del_pmksa,
+       .flush_pmksa = cfg80211_rtw_flush_pmksa,
+
+#ifdef CONFIG_AP_MODE
+       .add_virtual_intf = cfg80211_rtw_add_virtual_intf,
+       .del_virtual_intf = cfg80211_rtw_del_virtual_intf,
+
+       #if (LINUX_VERSION_CODE < KERNEL_VERSION(3, 4, 0)) && !defined(COMPAT_KERNEL_RELEASE)
+       .add_beacon = cfg80211_rtw_add_beacon,
+       .set_beacon = cfg80211_rtw_set_beacon,
+       .del_beacon = cfg80211_rtw_del_beacon,
+       #else
+       .start_ap = cfg80211_rtw_start_ap,
+       .change_beacon = cfg80211_rtw_change_beacon,
+       .stop_ap = cfg80211_rtw_stop_ap,
+       #endif
+
+       .add_station = cfg80211_rtw_add_station,
+       .del_station = cfg80211_rtw_del_station,
+       .change_station = cfg80211_rtw_change_station,
+       .dump_station = cfg80211_rtw_dump_station,
+       .change_bss = cfg80211_rtw_change_bss,
+       #if (LINUX_VERSION_CODE < KERNEL_VERSION(3, 6, 0))
+       .set_channel = cfg80211_rtw_set_channel,
+       #endif
+       //.auth = cfg80211_rtw_auth,
+       //.assoc = cfg80211_rtw_assoc,
+#endif //CONFIG_AP_MODE
+
+#ifdef CONFIG_P2P
+       .remain_on_channel = cfg80211_rtw_remain_on_channel,
+       .cancel_remain_on_channel = cfg80211_rtw_cancel_remain_on_channel,
+#endif
+
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) || defined(COMPAT_KERNEL_RELEASE)
+       .mgmt_tx = cfg80211_rtw_mgmt_tx,
+       .mgmt_frame_register = cfg80211_rtw_mgmt_frame_register,
+#elif  (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,34) && LINUX_VERSION_CODE<=KERNEL_VERSION(2,6,35))
+       .action = cfg80211_rtw_mgmt_tx,
+#endif
+};
+
+static void rtw_cfg80211_init_ht_capab(struct ieee80211_sta_ht_cap *ht_cap, enum ieee80211_band band, u8 rf_type)
+{
+
+#define MAX_BIT_RATE_40MHZ_MCS15       300     /* Mbps */
+#define MAX_BIT_RATE_40MHZ_MCS7        150     /* Mbps */
+
+       ht_cap->ht_supported = _TRUE;
+
+       ht_cap->cap = IEEE80211_HT_CAP_SUP_WIDTH_20_40 |
+                                       IEEE80211_HT_CAP_SGI_40 | IEEE80211_HT_CAP_SGI_20 |
+                                       IEEE80211_HT_CAP_DSSSCCK40 | IEEE80211_HT_CAP_MAX_AMSDU;
+
+       /*
+        *Maximum length of AMPDU that the STA can receive.
+        *Length = 2 ^ (13 + max_ampdu_length_exp) - 1 (octets)
+        */
+       ht_cap->ampdu_factor = IEEE80211_HT_MAX_AMPDU_64K;
+
+       /*Minimum MPDU start spacing , */
+       ht_cap->ampdu_density = IEEE80211_HT_MPDU_DENSITY_16;
+
+       ht_cap->mcs.tx_params = IEEE80211_HT_MCS_TX_DEFINED;
+
+       /*
+        *hw->wiphy->bands[IEEE80211_BAND_2GHZ]
+        *base on ant_num
+        *rx_mask: RX mask
+        *if rx_ant =1 rx_mask[0]=0xff;==>MCS0-MCS7
+        *if rx_ant =2 rx_mask[1]=0xff;==>MCS8-MCS15
+        *if rx_ant >=3 rx_mask[2]=0xff;
+        *if BW_40 rx_mask[4]=0x01;
+        *highest supported RX rate
+        */
+       if(rf_type == RF_1T1R)
+       {
+               ht_cap->mcs.rx_mask[0] = 0xFF;
+               ht_cap->mcs.rx_mask[1] = 0x00;
+               ht_cap->mcs.rx_mask[4] = 0x01;
+
+               ht_cap->mcs.rx_highest = MAX_BIT_RATE_40MHZ_MCS7;
+       }
+       else if((rf_type == RF_1T2R) || (rf_type==RF_2T2R))
+       {
+               ht_cap->mcs.rx_mask[0] = 0xFF;
+               ht_cap->mcs.rx_mask[1] = 0xFF;
+               ht_cap->mcs.rx_mask[4] = 0x01;
+
+               ht_cap->mcs.rx_highest = MAX_BIT_RATE_40MHZ_MCS15;
+       }
+       else
+       {
+               DBG_8192C("%s, error rf_type=%d\n", __func__, rf_type);
+       }
+
+}
+
+void rtw_cfg80211_init_wiphy(_adapter *padapter)
+{
+       u8 rf_type;
+       struct ieee80211_supported_band *bands;
+       struct wireless_dev *pwdev = padapter->rtw_wdev;
+       struct wiphy *wiphy = pwdev->wiphy;
+
+       rtw_hal_get_hwreg(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
+
+       DBG_8192C("%s:rf_type=%d\n", __func__, rf_type);
+
+       /* if (padapter->registrypriv.wireless_mode & WIRELESS_11G) */
+       {
+               bands = wiphy->bands[IEEE80211_BAND_2GHZ];
+               if(bands)
+                       rtw_cfg80211_init_ht_capab(&bands->ht_cap, IEEE80211_BAND_2GHZ, rf_type);
+       }
+
+       /* if (padapter->registrypriv.wireless_mode & WIRELESS_11A) */
+       {
+               bands = wiphy->bands[IEEE80211_BAND_5GHZ];
+               if(bands)
+                       rtw_cfg80211_init_ht_capab(&bands->ht_cap, IEEE80211_BAND_5GHZ, rf_type);
+       }
+}
+
+/*
+struct ieee80211_iface_limit rtw_limits[] = {
+       { .max = 1, .types = BIT(NL80211_IFTYPE_STATION)
+                                       | BIT(NL80211_IFTYPE_ADHOC)
+#ifdef CONFIG_AP_MODE
+                                       | BIT(NL80211_IFTYPE_AP)
+#endif
+#if defined(CONFIG_P2P) && ((LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) || defined(COMPAT_KERNEL_RELEASE))
+                                       | BIT(NL80211_IFTYPE_P2P_CLIENT)
+                                       | BIT(NL80211_IFTYPE_P2P_GO)
+#endif
+       },
+       {.max = 1, .types = BIT(NL80211_IFTYPE_MONITOR)},
+};
+
+struct ieee80211_iface_combination rtw_combinations = {
+       .limits = rtw_limits,
+       .n_limits = ARRAY_SIZE(rtw_limits),
+       .max_interfaces = 2,
+       .num_different_channels = 1,
+};
+*/
+
+static void rtw_cfg80211_preinit_wiphy(_adapter *padapter, struct wiphy *wiphy)
+{
+
+       wiphy->signal_type = CFG80211_SIGNAL_TYPE_MBM;
+
+       wiphy->max_scan_ssids = RTW_SSID_SCAN_AMOUNT;
+       wiphy->max_scan_ie_len = RTW_SCAN_IE_LEN_MAX;
+       wiphy->max_num_pmkids = RTW_MAX_NUM_PMKIDS;
+
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,38)) || defined(COMPAT_KERNEL_RELEASE)
+       wiphy->max_remain_on_channel_duration = RTW_MAX_REMAIN_ON_CHANNEL_DURATION;
+#endif
+
+       wiphy->interface_modes =        BIT(NL80211_IFTYPE_STATION)
+                                                               | BIT(NL80211_IFTYPE_ADHOC)
+#ifdef CONFIG_AP_MODE
+                                                               | BIT(NL80211_IFTYPE_AP)
+                                                               | BIT(NL80211_IFTYPE_MONITOR)
+#endif
+#if defined(CONFIG_P2P) && ((LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) || defined(COMPAT_KERNEL_RELEASE))
+                                                               | BIT(NL80211_IFTYPE_P2P_CLIENT)
+                                                               | BIT(NL80211_IFTYPE_P2P_GO)
+#endif
+                                                               ;
+
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) || defined(COMPAT_KERNEL_RELEASE)
+#ifdef CONFIG_AP_MODE
+       wiphy->mgmt_stypes = rtw_cfg80211_default_mgmt_stypes;
+#endif //CONFIG_AP_MODE
+#endif
+
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3,0,0))
+       wiphy->software_iftypes |= BIT(NL80211_IFTYPE_MONITOR);
+#endif
+
+       /*
+       wiphy->iface_combinations = &rtw_combinations;
+       wiphy->n_iface_combinations = 1;
+       */
+
+       wiphy->cipher_suites = rtw_cipher_suites;
+       wiphy->n_cipher_suites = ARRAY_SIZE(rtw_cipher_suites);
+
+       /* if (padapter->registrypriv.wireless_mode & WIRELESS_11G) */
+               wiphy->bands[IEEE80211_BAND_2GHZ] = rtw_spt_band_alloc(IEEE80211_BAND_2GHZ);
+       /* if (padapter->registrypriv.wireless_mode & WIRELESS_11A) */
+               wiphy->bands[IEEE80211_BAND_5GHZ] = rtw_spt_band_alloc(IEEE80211_BAND_5GHZ);
+
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,38) && LINUX_VERSION_CODE < KERNEL_VERSION(3,0,0))
+       wiphy->flags |= WIPHY_FLAG_SUPPORTS_SEPARATE_DEFAULT_KEYS;
+#endif
+
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3,3,0))
+       wiphy->flags |= WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL;
+       wiphy->flags |= WIPHY_FLAG_OFFCHAN_TX | WIPHY_FLAG_HAVE_AP_SME;
+#endif
+
+       if(padapter->registrypriv.power_mgnt != PS_MODE_ACTIVE)
+               wiphy->flags |= WIPHY_FLAG_PS_ON_BY_DEFAULT;
+       else
+               wiphy->flags &= ~WIPHY_FLAG_PS_ON_BY_DEFAULT;
+}
+
+int rtw_wdev_alloc(_adapter *padapter, struct device *dev)
+{
+       int ret = 0;
+       struct wiphy *wiphy;
+       struct wireless_dev *wdev;
+       struct rtw_wdev_priv *pwdev_priv;
+       struct net_device *pnetdev = padapter->pnetdev;
+
+       DBG_8192C("%s(padapter=%p)\n", __func__, padapter);
+
+       /* wiphy */
+       wiphy = wiphy_new(&rtw_cfg80211_ops, sizeof(struct rtw_wdev_priv));
+       if (!wiphy) {
+               DBG_8192C("Couldn't allocate wiphy device\n");
+               ret = -ENOMEM;
+               goto exit;
+       }
+       set_wiphy_dev(wiphy, dev);
+       rtw_cfg80211_preinit_wiphy(padapter, wiphy);
+
+       ret = wiphy_register(wiphy);
+       if (ret < 0) {
+               DBG_8192C("Couldn't register wiphy device\n");
+               goto free_wiphy;
+       }
+
+       /*  wdev */
+       wdev = (struct wireless_dev *)rtw_zmalloc(sizeof(struct wireless_dev));
+       if (!wdev) {
+               DBG_8192C("Couldn't allocate wireless device\n");
+               ret = -ENOMEM;
+               goto unregister_wiphy;
+       }
+       wdev->wiphy = wiphy;
+       wdev->netdev = pnetdev;
+       //wdev->iftype = NL80211_IFTYPE_STATION;
+       wdev->iftype = NL80211_IFTYPE_MONITOR; // for rtw_setopmode_cmd() in cfg80211_rtw_change_iface()
+       padapter->rtw_wdev = wdev;
+       pnetdev->ieee80211_ptr = wdev;
+
+       //init pwdev_priv
+       pwdev_priv = wdev_to_priv(wdev);
+       pwdev_priv->rtw_wdev = wdev;
+       pwdev_priv->pmon_ndev = NULL;
+       pwdev_priv->ifname_mon[0] = '\0';
+       pwdev_priv->padapter = padapter;
+       pwdev_priv->scan_request = NULL;
+       _rtw_spinlock_init(&pwdev_priv->scan_req_lock);
+
+       pwdev_priv->p2p_enabled = _FALSE;
+       pwdev_priv->provdisc_req_issued = _FALSE;
+       rtw_wdev_invit_info_init(&pwdev_priv->invit_info);
+       rtw_wdev_nego_info_init(&pwdev_priv->nego_info);
+
+       pwdev_priv->bandroid_scan = _FALSE;
+
+       if(padapter->registrypriv.power_mgnt != PS_MODE_ACTIVE)
+               pwdev_priv->power_mgmt = _TRUE;
+       else
+               pwdev_priv->power_mgmt = _FALSE;
+
+#ifdef CONFIG_CONCURRENT_MODE
+       ATOMIC_SET(&pwdev_priv->switch_ch_to, 1);
+       ATOMIC_SET(&pwdev_priv->ro_ch_to, 1);
+#endif
+
+       return ret;
+
+       rtw_mfree((u8*)wdev, sizeof(struct wireless_dev));
+unregister_wiphy:
+       wiphy_unregister(wiphy);
+ free_wiphy:
+       wiphy_free(wiphy);
+exit:
+       return ret;
+
+}
+
+void rtw_wdev_free(struct wireless_dev *wdev)
+{
+       struct rtw_wdev_priv *pwdev_priv;
+
+       DBG_8192C("%s(wdev=%p)\n", __func__, wdev);
+
+       if (!wdev)
+               return;
+
+       pwdev_priv = wdev_to_priv(wdev);
+
+       rtw_spt_band_free(wdev->wiphy->bands[IEEE80211_BAND_2GHZ]);
+       rtw_spt_band_free(wdev->wiphy->bands[IEEE80211_BAND_5GHZ]);
+
+       wiphy_free(wdev->wiphy);
+
+       rtw_mfree((u8*)wdev, sizeof(struct wireless_dev));
+}
+
+void rtw_wdev_unregister(struct wireless_dev *wdev)
+{
+       struct rtw_wdev_priv *pwdev_priv;
+
+       DBG_8192C("%s(wdev=%p)\n", __func__, wdev);
+
+       if (!wdev)
+               return;
+
+       pwdev_priv = wdev_to_priv(wdev);
+
+       rtw_cfg80211_indicate_scan_done(pwdev_priv, _TRUE);
+
+       if (pwdev_priv->pmon_ndev) {
+               DBG_8192C("%s, unregister monitor interface\n", __func__);
+               unregister_netdev(pwdev_priv->pmon_ndev);
+       }
+
+       wiphy_unregister(wdev->wiphy);
+}
+
+#endif //CONFIG_IOCTL_CFG80211
diff --git a/drivers/net/wireless/realtek/rtl8192cu/os_dep/linux/ioctl_linux.c b/drivers/net/wireless/realtek/rtl8192cu/os_dep/linux/ioctl_linux.c
new file mode 100644 (file)
index 0000000..865f57f
--- /dev/null
@@ -0,0 +1,11908 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#define  _IOCTL_LINUX_C_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <wlan_bssdef.h>
+#include <rtw_debug.h>
+#include <wifi.h>
+#include <rtw_mlme.h>
+#include <rtw_mlme_ext.h>
+#include <rtw_ioctl.h>
+#include <rtw_ioctl_set.h>
+#include <rtw_ioctl_query.h>
+
+//#ifdef CONFIG_MP_INCLUDED
+#include <rtw_mp_ioctl.h>
+//#endif
+
+#ifdef CONFIG_USB_HCI
+#include <usb_ops.h>
+#endif //CONFIG_USB_HCI
+#include <rtw_version.h>
+
+#ifdef CONFIG_MP_INCLUDED
+#include <rtw_mp.h>
+#endif
+
+#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,27))
+#define  iwe_stream_add_event(a, b, c, d, e)  iwe_stream_add_event(b, c, d, e)
+#define  iwe_stream_add_point(a, b, c, d, e)  iwe_stream_add_point(b, c, d, e)
+#endif
+
+
+#define RTL_IOCTL_WPA_SUPPLICANT       SIOCIWFIRSTPRIV+30
+
+#define SCAN_ITEM_SIZE 768
+#define MAX_CUSTOM_LEN 64
+#define RATE_COUNT 4
+
+#ifdef CONFIG_GLOBAL_UI_PID
+extern int ui_pid[3];
+#endif
+
+// combo scan
+#define WEXT_CSCAN_AMOUNT 9
+#define WEXT_CSCAN_BUF_LEN             360
+#define WEXT_CSCAN_HEADER              "CSCAN S\x01\x00\x00S\x00"
+#define WEXT_CSCAN_HEADER_SIZE         12
+#define WEXT_CSCAN_SSID_SECTION                'S'
+#define WEXT_CSCAN_CHANNEL_SECTION     'C'
+#define WEXT_CSCAN_NPROBE_SECTION      'N'
+#define WEXT_CSCAN_ACTV_DWELL_SECTION  'A'
+#define WEXT_CSCAN_PASV_DWELL_SECTION  'P'
+#define WEXT_CSCAN_HOME_DWELL_SECTION  'H'
+#define WEXT_CSCAN_TYPE_SECTION                'T'
+
+
+extern u8 key_2char2num(u8 hch, u8 lch);
+extern u8 str_2char2num(u8 hch, u8 lch);
+extern u8 convert_ip_addr(u8 hch, u8 mch, u8 lch);
+
+u32 rtw_rates[] = {1000000,2000000,5500000,11000000,
+       6000000,9000000,12000000,18000000,24000000,36000000,48000000,54000000};
+
+static const char * const iw_operation_mode[] =
+{
+       "Auto", "Ad-Hoc", "Managed",  "Master", "Repeater", "Secondary", "Monitor"
+};
+
+static int hex2num_i(char c)
+{
+       if (c >= '0' && c <= '9')
+               return c - '0';
+       if (c >= 'a' && c <= 'f')
+               return c - 'a' + 10;
+       if (c >= 'A' && c <= 'F')
+               return c - 'A' + 10;
+       return -1;
+}
+
+static int hex2byte_i(const char *hex)
+{
+       int a, b;
+       a = hex2num_i(*hex++);
+       if (a < 0)
+               return -1;
+       b = hex2num_i(*hex++);
+       if (b < 0)
+               return -1;
+       return (a << 4) | b;
+}
+
+/**
+ * hwaddr_aton - Convert ASCII string to MAC address
+ * @txt: MAC address as a string (e.g., "00:11:22:33:44:55")
+ * @addr: Buffer for the MAC address (ETH_ALEN = 6 bytes)
+ * Returns: 0 on success, -1 on failure (e.g., string not a MAC address)
+ */
+static int hwaddr_aton_i(const char *txt, u8 *addr)
+{
+       int i;
+
+       for (i = 0; i < 6; i++) {
+               int a, b;
+
+               a = hex2num_i(*txt++);
+               if (a < 0)
+                       return -1;
+               b = hex2num_i(*txt++);
+               if (b < 0)
+                       return -1;
+               *addr++ = (a << 4) | b;
+               if (i < 5 && *txt++ != ':')
+                       return -1;
+       }
+
+       return 0;
+}
+
+static void indicate_wx_custom_event(_adapter *padapter, char *msg)
+{
+#ifndef CONFIG_IOCTL_CFG80211
+       u8 *buff, *p;
+       union iwreq_data wrqu;
+
+       if ((u32)strlen(msg) > IW_CUSTOM_MAX) {
+               DBG_871X("%s strlen(msg):%u > IW_CUSTOM_MAX:%u\n", __FUNCTION__ ,(u32)strlen(msg), IW_CUSTOM_MAX);
+               return;
+       }
+
+       buff = rtw_zmalloc(IW_CUSTOM_MAX+1);
+       if(!buff)
+               return;
+
+       _rtw_memcpy(buff, msg, strlen(msg));
+
+       _rtw_memset(&wrqu,0,sizeof(wrqu));
+       wrqu.data.length = strlen(msg);
+
+       DBG_871X("%s %s\n", __FUNCTION__, buff);
+       wireless_send_event(padapter->pnetdev, IWEVCUSTOM, &wrqu, buff);
+
+       rtw_mfree(buff, IW_CUSTOM_MAX+1);
+#endif
+}
+
+
+static void request_wps_pbc_event(_adapter *padapter)
+{
+#ifndef CONFIG_IOCTL_CFG80211
+       u8 *buff, *p;
+       union iwreq_data wrqu;
+
+       buff = rtw_malloc(IW_CUSTOM_MAX);
+       if(!buff)
+               return;
+
+       _rtw_memset(buff, 0, IW_CUSTOM_MAX);
+
+       p=buff;
+
+       p+=sprintf(p, "WPS_PBC_START.request=TRUE");
+
+       _rtw_memset(&wrqu,0,sizeof(wrqu));
+
+       wrqu.data.length = p-buff;
+
+       wrqu.data.length = (wrqu.data.length<IW_CUSTOM_MAX) ? wrqu.data.length:IW_CUSTOM_MAX;
+
+       DBG_871X("%s\n", __FUNCTION__);
+
+       wireless_send_event(padapter->pnetdev, IWEVCUSTOM, &wrqu, buff);
+
+       if(buff)
+       {
+               rtw_mfree(buff, IW_CUSTOM_MAX);
+       }
+#endif
+}
+
+
+void indicate_wx_scan_complete_event(_adapter *padapter)
+{
+#ifndef CONFIG_IOCTL_CFG80211
+       union iwreq_data wrqu;
+       struct  mlme_priv *pmlmepriv = &padapter->mlmepriv;
+
+       _rtw_memset(&wrqu, 0, sizeof(union iwreq_data));
+
+       //DBG_871X("+rtw_indicate_wx_scan_complete_event\n");
+       wireless_send_event(padapter->pnetdev, SIOCGIWSCAN, &wrqu, NULL);
+#endif
+}
+
+
+void rtw_indicate_wx_assoc_event(_adapter *padapter)
+{
+#ifndef CONFIG_IOCTL_CFG80211
+       union iwreq_data wrqu;
+       struct  mlme_priv *pmlmepriv = &padapter->mlmepriv;
+
+       _rtw_memset(&wrqu, 0, sizeof(union iwreq_data));
+
+       wrqu.ap_addr.sa_family = ARPHRD_ETHER;
+
+       _rtw_memcpy(wrqu.ap_addr.sa_data, pmlmepriv->cur_network.network.MacAddress, ETH_ALEN);
+
+       //DBG_871X("+rtw_indicate_wx_assoc_event\n");
+       wireless_send_event(padapter->pnetdev, SIOCGIWAP, &wrqu, NULL);
+#endif
+}
+
+void rtw_indicate_wx_disassoc_event(_adapter *padapter)
+{
+#ifndef CONFIG_IOCTL_CFG80211
+       union iwreq_data wrqu;
+
+       _rtw_memset(&wrqu, 0, sizeof(union iwreq_data));
+
+       wrqu.ap_addr.sa_family = ARPHRD_ETHER;
+       _rtw_memset(wrqu.ap_addr.sa_data, 0, ETH_ALEN);
+
+       //DBG_871X("+rtw_indicate_wx_disassoc_event\n");
+       wireless_send_event(padapter->pnetdev, SIOCGIWAP, &wrqu, NULL);
+#endif
+}
+
+/*
+uint   rtw_is_cckrates_included(u8 *rate)
+{
+               u32     i = 0;
+
+               while(rate[i]!=0)
+               {
+                       if  (  (((rate[i]) & 0x7f) == 2)        || (((rate[i]) & 0x7f) == 4) ||
+                       (((rate[i]) & 0x7f) == 11)  || (((rate[i]) & 0x7f) == 22) )
+                       return _TRUE;
+                       i++;
+               }
+
+               return _FALSE;
+}
+
+uint   rtw_is_cckratesonly_included(u8 *rate)
+{
+       u32 i = 0;
+
+       while(rate[i]!=0)
+       {
+                       if  (  (((rate[i]) & 0x7f) != 2) && (((rate[i]) & 0x7f) != 4) &&
+                               (((rate[i]) & 0x7f) != 11)  && (((rate[i]) & 0x7f) != 22) )
+                       return _FALSE;
+                       i++;
+       }
+
+       return _TRUE;
+}
+*/
+
+static char *translate_scan(_adapter *padapter,
+                               struct iw_request_info* info, struct wlan_network *pnetwork,
+                               char *start, char *stop)
+{
+       struct iw_event iwe;
+       u16 cap;
+       u32 ht_ielen = 0;
+       char custom[MAX_CUSTOM_LEN];
+       char *p;
+       u16 max_rate=0, rate, ht_cap=_FALSE;
+       u32 i = 0;
+       char    *current_val;
+       long rssi;
+       u8 bw_40MHz=0, short_GI=0;
+       u16 mcs_rate=0;
+       struct registry_priv *pregpriv = &padapter->registrypriv;
+#ifdef CONFIG_P2P
+       struct wifidirect_info  *pwdinfo = &padapter->wdinfo;
+#endif //CONFIG_P2P
+
+#ifdef CONFIG_P2P
+#ifdef CONFIG_WFD
+       if ( SCAN_RESULT_ALL == pwdinfo->wfd_info->scan_result_type )
+       {
+
+       }
+       else if ( ( SCAN_RESULT_P2P_ONLY == pwdinfo->wfd_info->scan_result_type ) ||
+                     ( SCAN_RESULT_WFD_TYPE == pwdinfo->wfd_info->scan_result_type ) )
+#endif // CONFIG_WFD
+       {
+               if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+               {
+                       u32     blnGotP2PIE = _FALSE;
+
+                       //      User is doing the P2P device discovery
+                       //      The prefix of SSID should be "DIRECT-" and the IE should contains the P2P IE.
+                       //      If not, the driver should ignore this AP and go to the next AP.
+
+                       //      Verifying the SSID
+                       if ( _rtw_memcmp( pnetwork->network.Ssid.Ssid, pwdinfo->p2p_wildcard_ssid, P2P_WILDCARD_SSID_LEN ) )
+                       {
+                               u32     p2pielen = 0;
+
+                               //      Verifying the P2P IE
+                               if ( rtw_get_p2p_ie( &pnetwork->network.IEs[12], pnetwork->network.IELength - 12, NULL, &p2pielen) )
+                               {
+                                       blnGotP2PIE = _TRUE;
+                               }
+                       }
+
+                       if ( blnGotP2PIE == _FALSE )
+                       {
+                               return start;
+                       }
+
+               }
+       }
+
+#ifdef CONFIG_WFD
+       if ( SCAN_RESULT_WFD_TYPE == pwdinfo->wfd_info->scan_result_type )
+       {
+               u32     blnGotWFD = _FALSE;
+               u8      wfd_ie[ 128 ] = { 0x00 };
+               uint    wfd_ielen = 0;
+
+               if ( rtw_get_wfd_ie( &pnetwork->network.IEs[12], pnetwork->network.IELength - 12,  wfd_ie, &wfd_ielen ) )
+               {
+                       u8      wfd_devinfo[ 6 ] = { 0x00 };
+                       uint    wfd_devlen = 6;
+
+                       if ( rtw_get_wfd_attr_content( wfd_ie, wfd_ielen, WFD_ATTR_DEVICE_INFO, wfd_devinfo, &wfd_devlen) )
+                       {
+                               if ( pwdinfo->wfd_info->wfd_device_type == WFD_DEVINFO_PSINK )
+                               {
+                                       //      the first two bits will indicate the WFD device type
+                                       if ( ( wfd_devinfo[ 1 ] & 0x03 ) == WFD_DEVINFO_SOURCE )
+                                       {
+                                               //      If this device is Miracast PSink device, the scan reuslt should just provide the Miracast source.
+                                               blnGotWFD = _TRUE;
+                                       }
+                               }
+                               else if ( pwdinfo->wfd_info->wfd_device_type == WFD_DEVINFO_SOURCE )
+                               {
+                                       //      the first two bits will indicate the WFD device type
+                                       if ( ( wfd_devinfo[ 1 ] & 0x03 ) == WFD_DEVINFO_PSINK )
+                                       {
+                                               //      If this device is Miracast source device, the scan reuslt should just provide the Miracast PSink.
+                                               //      Todo: How about the SSink?!
+                                               blnGotWFD = _TRUE;
+                                       }
+                               }
+                       }
+               }
+
+               if ( blnGotWFD == _FALSE )
+               {
+                       return start;
+               }
+       }
+#endif // CONFIG_WFD
+
+#endif //CONFIG_P2P
+       /*  AP MAC address  */
+       iwe.cmd = SIOCGIWAP;
+       iwe.u.ap_addr.sa_family = ARPHRD_ETHER;
+
+       _rtw_memcpy(iwe.u.ap_addr.sa_data, pnetwork->network.MacAddress, ETH_ALEN);
+       start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_ADDR_LEN);
+
+       /* Add the ESSID */
+       iwe.cmd = SIOCGIWESSID;
+       iwe.u.data.flags = 1;
+       iwe.u.data.length = min((u16)pnetwork->network.Ssid.SsidLength, (u16)32);
+       start = iwe_stream_add_point(info, start, stop, &iwe, pnetwork->network.Ssid.Ssid);
+
+       //parsing HT_CAP_IE
+               p = rtw_get_ie(&pnetwork->network.IEs[12], _HT_CAPABILITY_IE_, &ht_ielen, pnetwork->network.IELength-12);
+
+       if(p && ht_ielen>0)
+       {
+               struct rtw_ieee80211_ht_cap *pht_capie;
+               ht_cap = _TRUE;
+               pht_capie = (struct rtw_ieee80211_ht_cap *)(p+2);
+               _rtw_memcpy(&mcs_rate , pht_capie->supp_mcs_set, 2);
+               bw_40MHz = (pht_capie->cap_info&IEEE80211_HT_CAP_SUP_WIDTH) ? 1:0;
+               short_GI = (pht_capie->cap_info&(IEEE80211_HT_CAP_SGI_20|IEEE80211_HT_CAP_SGI_40)) ? 1:0;
+       }
+
+       /* Add the protocol name */
+       iwe.cmd = SIOCGIWNAME;
+       if ((rtw_is_cckratesonly_included((u8*)&pnetwork->network.SupportedRates)) == _TRUE)
+       {
+               if(ht_cap == _TRUE)
+                       snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11bn");
+               else
+               snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11b");
+       }
+       else if ((rtw_is_cckrates_included((u8*)&pnetwork->network.SupportedRates)) == _TRUE)
+       {
+               if(ht_cap == _TRUE)
+                       snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11bgn");
+               else
+               snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11bg");
+       }
+       else
+       {
+               if(pnetwork->network.Configuration.DSConfig > 14)
+               {
+                       if(ht_cap == _TRUE)
+                               snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11an");
+                       else
+                               snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11a");
+               }
+               else
+               {
+                       if(ht_cap == _TRUE)
+                               snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11gn");
+                       else
+                               snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11g");
+               }
+       }
+
+       start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_CHAR_LEN);
+
+         /* Add mode */
+        iwe.cmd = SIOCGIWMODE;
+       _rtw_memcpy((u8 *)&cap, rtw_get_capability_from_ie(pnetwork->network.IEs), 2);
+
+
+       cap = le16_to_cpu(cap);
+
+       if(cap & (WLAN_CAPABILITY_IBSS |WLAN_CAPABILITY_BSS)){
+               if (cap & WLAN_CAPABILITY_BSS)
+                       iwe.u.mode = IW_MODE_MASTER;
+               else
+                       iwe.u.mode = IW_MODE_ADHOC;
+
+               start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_UINT_LEN);
+       }
+
+       if(pnetwork->network.Configuration.DSConfig<1 /*|| pnetwork->network.Configuration.DSConfig>14*/)
+               pnetwork->network.Configuration.DSConfig = 1;
+
+        /* Add frequency/channel */
+       iwe.cmd = SIOCGIWFREQ;
+       iwe.u.freq.m = rtw_ch2freq(pnetwork->network.Configuration.DSConfig) * 100000;
+       iwe.u.freq.e = 1;
+       iwe.u.freq.i = pnetwork->network.Configuration.DSConfig;
+       start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_FREQ_LEN);
+
+       /* Add encryption capability */
+       iwe.cmd = SIOCGIWENCODE;
+       if (cap & WLAN_CAPABILITY_PRIVACY)
+               iwe.u.data.flags = IW_ENCODE_ENABLED | IW_ENCODE_NOKEY;
+       else
+               iwe.u.data.flags = IW_ENCODE_DISABLED;
+       iwe.u.data.length = 0;
+       start = iwe_stream_add_point(info, start, stop, &iwe, pnetwork->network.Ssid.Ssid);
+
+       /*Add basic and extended rates */
+       max_rate = 0;
+       p = custom;
+       p += snprintf(p, MAX_CUSTOM_LEN - (p - custom), " Rates (Mb/s): ");
+       while(pnetwork->network.SupportedRates[i]!=0)
+       {
+               rate = pnetwork->network.SupportedRates[i]&0x7F;
+               if (rate > max_rate)
+                       max_rate = rate;
+               p += snprintf(p, MAX_CUSTOM_LEN - (p - custom),
+                             "%d%s ", rate >> 1, (rate & 1) ? ".5" : "");
+               i++;
+       }
+
+       if(ht_cap == _TRUE)
+       {
+               if(mcs_rate&0x8000)//MCS15
+               {
+                       max_rate = (bw_40MHz) ? ((short_GI)?300:270):((short_GI)?144:130);
+
+               }
+               else if(mcs_rate&0x0080)//MCS7
+               {
+                       max_rate = (bw_40MHz) ? ((short_GI)?150:135):((short_GI)?72:65);
+               }
+               else//default MCS7
+               {
+                       DBG_871X("wx_get_scan, mcs_rate_bitmap=0x%x\n", mcs_rate);
+                       max_rate = (bw_40MHz) ? ((short_GI)?150:135):((short_GI)?72:65);
+               }
+
+               max_rate = max_rate*2;//Mbps/2;
+       }
+
+       iwe.cmd = SIOCGIWRATE;
+       iwe.u.bitrate.fixed = iwe.u.bitrate.disabled = 0;
+       iwe.u.bitrate.value = max_rate * 500000;
+       start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_PARAM_LEN);
+
+       //parsing WPA/WPA2 IE
+       {
+               u8 buf[MAX_WPA_IE_LEN];
+               u8 wpa_ie[255],rsn_ie[255];
+               u16 wpa_len=0,rsn_len=0;
+               u8 *p;
+               sint out_len=0;
+               out_len=rtw_get_sec_ie(pnetwork->network.IEs ,pnetwork->network.IELength,rsn_ie,&rsn_len,wpa_ie,&wpa_len);
+               RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("rtw_wx_get_scan: ssid=%s\n",pnetwork->network.Ssid.Ssid));
+               RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("rtw_wx_get_scan: wpa_len=%d rsn_len=%d\n",wpa_len,rsn_len));
+
+               if (wpa_len > 0)
+               {
+                       p=buf;
+                       _rtw_memset(buf, 0, MAX_WPA_IE_LEN);
+                       p += sprintf(p, "wpa_ie=");
+                       for (i = 0; i < wpa_len; i++) {
+                               p += sprintf(p, "%02x", wpa_ie[i]);
+                       }
+
+                       _rtw_memset(&iwe, 0, sizeof(iwe));
+                       iwe.cmd = IWEVCUSTOM;
+                       iwe.u.data.length = strlen(buf);
+                       start = iwe_stream_add_point(info, start, stop, &iwe,buf);
+
+                       _rtw_memset(&iwe, 0, sizeof(iwe));
+                       iwe.cmd =IWEVGENIE;
+                       iwe.u.data.length = wpa_len;
+                       start = iwe_stream_add_point(info, start, stop, &iwe, wpa_ie);
+               }
+               if (rsn_len > 0)
+               {
+                       p = buf;
+                       _rtw_memset(buf, 0, MAX_WPA_IE_LEN);
+                       p += sprintf(p, "rsn_ie=");
+                       for (i = 0; i < rsn_len; i++) {
+                               p += sprintf(p, "%02x", rsn_ie[i]);
+                       }
+                       _rtw_memset(&iwe, 0, sizeof(iwe));
+                       iwe.cmd = IWEVCUSTOM;
+                       iwe.u.data.length = strlen(buf);
+                       start = iwe_stream_add_point(info, start, stop, &iwe,buf);
+
+                       _rtw_memset(&iwe, 0, sizeof(iwe));
+                       iwe.cmd =IWEVGENIE;
+                       iwe.u.data.length = rsn_len;
+                       start = iwe_stream_add_point(info, start, stop, &iwe, rsn_ie);
+               }
+       }
+
+       { //parsing WPS IE
+               uint cnt = 0,total_ielen;
+               u8 *wpsie_ptr=NULL;
+               uint wps_ielen = 0;
+
+               u8 *ie_ptr = pnetwork->network.IEs +_FIXED_IE_LENGTH_;
+               total_ielen= pnetwork->network.IELength - _FIXED_IE_LENGTH_;
+
+               while(cnt < total_ielen)
+               {
+                       if(rtw_is_wps_ie(&ie_ptr[cnt], &wps_ielen) && (wps_ielen>2))
+                       {
+                               wpsie_ptr = &ie_ptr[cnt];
+                               iwe.cmd =IWEVGENIE;
+                               iwe.u.data.length = (u16)wps_ielen;
+                               start = iwe_stream_add_point(info, start, stop, &iwe, wpsie_ptr);
+                       }
+                       cnt+=ie_ptr[cnt+1]+2; //goto next
+               }
+       }
+
+
+{
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+       u8 ss, sq;
+
+       /* Add quality statistics */
+       iwe.cmd = IWEVQUAL;
+       iwe.u.qual.updated = IW_QUAL_QUAL_UPDATED | IW_QUAL_LEVEL_UPDATED | IW_QUAL_NOISE_INVALID
+       #ifdef CONFIG_SIGNAL_DISPLAY_DBM
+               | IW_QUAL_DBM
+       #endif
+       ;
+
+       if ( check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE &&
+               is_same_network(&pmlmepriv->cur_network.network, &pnetwork->network)) {
+               ss = padapter->recvpriv.signal_strength;
+               sq = padapter->recvpriv.signal_qual;
+       } else {
+               ss = pnetwork->network.PhyInfo.SignalStrength;
+               sq = pnetwork->network.PhyInfo.SignalQuality;
+       }
+
+
+       #ifdef CONFIG_SIGNAL_DISPLAY_DBM
+       iwe.u.qual.level = (u8) translate_percentage_to_dbm(ss);//dbm
+       #else
+       iwe.u.qual.level = (u8)ss;//%
+       #endif
+
+       iwe.u.qual.qual = (u8)sq;   // signal quality
+
+       #ifdef CONFIG_PLATFORM_ROCKCHIPS
+       iwe.u.qual.noise = -100; // noise level suggest by zhf@rockchips
+       #else
+       iwe.u.qual.noise = 0; // noise level
+       #endif //CONFIG_PLATFORM_ROCKCHIPS
+
+       //DBG_871X("iqual=%d, ilevel=%d, inoise=%d, iupdated=%d\n", iwe.u.qual.qual, iwe.u.qual.level , iwe.u.qual.noise, iwe.u.qual.updated);
+
+       start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_QUAL_LEN);
+}
+
+       return start;
+}
+
+static int wpa_set_auth_algs(struct net_device *dev, u32 value)
+{
+       _adapter *padapter = (_adapter *) rtw_netdev_priv(dev);
+       int ret = 0;
+
+       if ((value & AUTH_ALG_SHARED_KEY)&&(value & AUTH_ALG_OPEN_SYSTEM))
+       {
+               DBG_871X("wpa_set_auth_algs, AUTH_ALG_SHARED_KEY and  AUTH_ALG_OPEN_SYSTEM [value:0x%x]\n",value);
+               padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
+               padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeAutoSwitch;
+               padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Auto;
+       }
+       else if (value & AUTH_ALG_SHARED_KEY)
+       {
+               DBG_871X("wpa_set_auth_algs, AUTH_ALG_SHARED_KEY  [value:0x%x]\n",value);
+               padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
+
+#ifdef CONFIG_PLATFORM_MT53XX
+               padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeAutoSwitch;
+               padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Auto;
+#else
+               padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeShared;
+               padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Shared;
+#endif
+       }
+       else if(value & AUTH_ALG_OPEN_SYSTEM)
+       {
+               DBG_871X("wpa_set_auth_algs, AUTH_ALG_OPEN_SYSTEM\n");
+               //padapter->securitypriv.ndisencryptstatus = Ndis802_11EncryptionDisabled;
+               if(padapter->securitypriv.ndisauthtype < Ndis802_11AuthModeWPAPSK)
+               {
+#ifdef CONFIG_PLATFORM_MT53XX
+                       padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeAutoSwitch;
+                       padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Auto;
+#else
+                       padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeOpen;
+                       padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open;
+#endif
+               }
+
+       }
+       else if(value & AUTH_ALG_LEAP)
+       {
+               DBG_871X("wpa_set_auth_algs, AUTH_ALG_LEAP\n");
+       }
+       else
+       {
+               DBG_871X("wpa_set_auth_algs, error!\n");
+               ret = -EINVAL;
+       }
+
+       return ret;
+
+}
+
+static int wpa_set_encryption(struct net_device *dev, struct ieee_param *param, u32 param_len)
+{
+       int ret = 0;
+       u32 wep_key_idx, wep_key_len,wep_total_len;
+       NDIS_802_11_WEP  *pwep = NULL;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
+       struct security_priv *psecuritypriv = &padapter->securitypriv;
+#ifdef CONFIG_P2P
+       struct wifidirect_info* pwdinfo = &padapter->wdinfo;
+#endif //CONFIG_P2P
+
+_func_enter_;
+
+       param->u.crypt.err = 0;
+       param->u.crypt.alg[IEEE_CRYPT_ALG_NAME_LEN - 1] = '\0';
+
+       if (param_len < (u32) ((u8 *) param->u.crypt.key - (u8 *) param) + param->u.crypt.key_len)
+       {
+               ret =  -EINVAL;
+               goto exit;
+       }
+
+       if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
+           param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
+           param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
+       {
+
+               if (param->u.crypt.idx >= WEP_KEYS
+#ifdef CONFIG_IEEE80211W
+                       && param->u.crypt.idx > BIP_MAX_KEYID
+#endif //CONFIG_IEEE80211W
+                       )
+               {
+                       ret = -EINVAL;
+                       goto exit;
+               }
+       }
+       else
+       {
+
+               {
+                       ret = -EINVAL;
+                       goto exit;
+               }
+       }
+
+       if (strcmp(param->u.crypt.alg, "WEP") == 0)
+       {
+               RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,("wpa_set_encryption, crypt.alg = WEP\n"));
+               DBG_871X("wpa_set_encryption, crypt.alg = WEP\n");
+
+               padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
+               padapter->securitypriv.dot11PrivacyAlgrthm=_WEP40_;
+               padapter->securitypriv.dot118021XGrpPrivacy=_WEP40_;
+
+               wep_key_idx = param->u.crypt.idx;
+               wep_key_len = param->u.crypt.key_len;
+
+               RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_info_,("(1)wep_key_idx=%d\n", wep_key_idx));
+               DBG_871X("(1)wep_key_idx=%d\n", wep_key_idx);
+
+               if (wep_key_idx > WEP_KEYS)
+                       return -EINVAL;
+
+               RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_info_,("(2)wep_key_idx=%d\n", wep_key_idx));
+
+               if (wep_key_len > 0)
+               {
+                       wep_key_len = wep_key_len <= 5 ? 5 : 13;
+                       wep_total_len = wep_key_len + FIELD_OFFSET(NDIS_802_11_WEP, KeyMaterial);
+                       pwep =(NDIS_802_11_WEP   *) rtw_malloc(wep_total_len);
+                       if(pwep == NULL){
+                               RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,(" wpa_set_encryption: pwep allocate fail !!!\n"));
+                               goto exit;
+                       }
+
+                       _rtw_memset(pwep, 0, wep_total_len);
+
+                       pwep->KeyLength = wep_key_len;
+                       pwep->Length = wep_total_len;
+
+                       if(wep_key_len==13)
+                       {
+                               padapter->securitypriv.dot11PrivacyAlgrthm=_WEP104_;
+                               padapter->securitypriv.dot118021XGrpPrivacy=_WEP104_;
+                       }
+               }
+               else {
+                       ret = -EINVAL;
+                       goto exit;
+               }
+
+               pwep->KeyIndex = wep_key_idx;
+               pwep->KeyIndex |= 0x80000000;
+
+               _rtw_memcpy(pwep->KeyMaterial,  param->u.crypt.key, pwep->KeyLength);
+
+               if(param->u.crypt.set_tx)
+               {
+                       DBG_871X("wep, set_tx=1\n");
+
+                       if(rtw_set_802_11_add_wep(padapter, pwep) == (u8)_FAIL)
+                       {
+                               ret = -EOPNOTSUPP ;
+                       }
+               }
+               else
+               {
+                       DBG_871X("wep, set_tx=0\n");
+
+                       //don't update "psecuritypriv->dot11PrivacyAlgrthm" and
+                       //"psecuritypriv->dot11PrivacyKeyIndex=keyid", but can rtw_set_key to fw/cam
+
+                       if (wep_key_idx >= WEP_KEYS) {
+                               ret = -EOPNOTSUPP ;
+                               goto exit;
+                       }
+
+                     _rtw_memcpy(&(psecuritypriv->dot11DefKey[wep_key_idx].skey[0]), pwep->KeyMaterial, pwep->KeyLength);
+                       psecuritypriv->dot11DefKeylen[wep_key_idx]=pwep->KeyLength;
+                       rtw_set_key(padapter, psecuritypriv, wep_key_idx, 0);
+               }
+
+               goto exit;
+       }
+
+       if(padapter->securitypriv.dot11AuthAlgrthm == dot11AuthAlgrthm_8021X) // 802_1x
+       {
+               struct sta_info * psta,*pbcmc_sta;
+               struct sta_priv * pstapriv = &padapter->stapriv;
+
+               if (check_fwstate(pmlmepriv, WIFI_STATION_STATE | WIFI_MP_STATE) == _TRUE) //sta mode
+               {
+                       psta = rtw_get_stainfo(pstapriv, get_bssid(pmlmepriv));
+                       if (psta == NULL) {
+                               //DEBUG_ERR( ("Set wpa_set_encryption: Obtain Sta_info fail \n"));
+                       }
+                       else
+                       {
+                               //Jeff: don't disable ieee8021x_blocked while clearing key
+                               if (strcmp(param->u.crypt.alg, "none") != 0)
+                                       psta->ieee8021x_blocked = _FALSE;
+
+                               if((padapter->securitypriv.ndisencryptstatus == Ndis802_11Encryption2Enabled)||
+                                               (padapter->securitypriv.ndisencryptstatus ==  Ndis802_11Encryption3Enabled))
+                               {
+                                       psta->dot118021XPrivacy = padapter->securitypriv.dot11PrivacyAlgrthm;
+                               }
+
+                               if(param->u.crypt.set_tx ==1)//pairwise key
+                               {
+                                       _rtw_memcpy(psta->dot118021x_UncstKey.skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
+
+                                       if(strcmp(param->u.crypt.alg, "TKIP") == 0)//set mic key
+                                       {
+                                               //DEBUG_ERR(("\nset key length :param->u.crypt.key_len=%d\n", param->u.crypt.key_len));
+                                               _rtw_memcpy(psta->dot11tkiptxmickey.skey, &(param->u.crypt.key[16]), 8);
+                                               _rtw_memcpy(psta->dot11tkiprxmickey.skey, &(param->u.crypt.key[24]), 8);
+
+                                               padapter->securitypriv.busetkipkey=_FALSE;
+                                               //_set_timer(&padapter->securitypriv.tkip_timer, 50);
+                                       }
+
+                                       //DEBUG_ERR(("\n param->u.crypt.key_len=%d\n",param->u.crypt.key_len));
+                                       //DEBUG_ERR(("\n ~~~~stastakey:unicastkey\n"));
+                                       DBG_871X("\n ~~~~stastakey:unicastkey\n");
+
+                                       rtw_setstakey_cmd(padapter, (unsigned char *)psta, _TRUE);
+                               }
+                               else//group key
+                               {
+                                       if(strcmp(param->u.crypt.alg, "TKIP") == 0 || strcmp(param->u.crypt.alg, "CCMP") == 0)
+                                       {
+                                               _rtw_memcpy(padapter->securitypriv.dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key,(param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
+                                               //only TKIP group key need to install this
+                                               if(param->u.crypt.key_len > 16)
+                                               {
+                                                       _rtw_memcpy(padapter->securitypriv.dot118021XGrptxmickey[param->u.crypt.idx].skey,&(param->u.crypt.key[16]),8);
+                                                       _rtw_memcpy(padapter->securitypriv.dot118021XGrprxmickey[param->u.crypt.idx].skey,&(param->u.crypt.key[24]),8);
+                                               }
+                                               padapter->securitypriv.binstallGrpkey = _TRUE;
+                                               //DEBUG_ERR((" param->u.crypt.key_len=%d\n", param->u.crypt.key_len));
+                                               DBG_871X(" ~~~~set sta key:groupkey\n");
+
+                                               padapter->securitypriv.dot118021XGrpKeyid = param->u.crypt.idx;
+
+                                               rtw_set_key(padapter,&padapter->securitypriv,param->u.crypt.idx, 1);
+                                       }
+#ifdef CONFIG_IEEE80211W
+                                       else if(strcmp(param->u.crypt.alg, "BIP") == 0)
+                                       {
+                                               int no;
+                                               //printk("BIP key_len=%d , index=%d @@@@@@@@@@@@@@@@@@\n", param->u.crypt.key_len, param->u.crypt.idx);
+                                               //save the IGTK key, length 16 bytes
+                                               _rtw_memcpy(padapter->securitypriv.dot11wBIPKey[param->u.crypt.idx].skey,  param->u.crypt.key,(param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
+                                               /*printk("IGTK key below:\n");
+                                               for(no=0;no<16;no++)
+                                                       printk(" %02x ", padapter->securitypriv.dot11wBIPKey[param->u.crypt.idx].skey[no]);
+                                               printk("\n");*/
+                                               padapter->securitypriv.dot11wBIPKeyid = param->u.crypt.idx;
+                                               padapter->securitypriv.binstallBIPkey = _TRUE;
+                                               DBG_871X(" ~~~~set sta key:IGKT\n");
+                                       }
+#endif //CONFIG_IEEE80211W
+
+#ifdef CONFIG_P2P
+                                       if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_PROVISIONING_ING))
+                                       {
+                                               rtw_p2p_set_state(pwdinfo, P2P_STATE_PROVISIONING_DONE);
+                                       }
+#endif //CONFIG_P2P
+
+                               }
+                       }
+
+                       pbcmc_sta=rtw_get_bcmc_stainfo(padapter);
+                       if(pbcmc_sta==NULL)
+                       {
+                               //DEBUG_ERR( ("Set OID_802_11_ADD_KEY: bcmc stainfo is null \n"));
+                       }
+                       else
+                       {
+                               //Jeff: don't disable ieee8021x_blocked while clearing key
+                               if (strcmp(param->u.crypt.alg, "none") != 0)
+                                       pbcmc_sta->ieee8021x_blocked = _FALSE;
+
+                               if((padapter->securitypriv.ndisencryptstatus == Ndis802_11Encryption2Enabled)||
+                                               (padapter->securitypriv.ndisencryptstatus ==  Ndis802_11Encryption3Enabled))
+                               {
+                                       pbcmc_sta->dot118021XPrivacy = padapter->securitypriv.dot11PrivacyAlgrthm;
+                               }
+                       }
+               }
+               else if(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)) //adhoc mode
+               {
+               }
+       }
+
+exit:
+
+       if (pwep) {
+               rtw_mfree((u8 *)pwep, wep_total_len);
+       }
+
+       _func_exit_;
+
+       return ret;
+}
+
+static int rtw_set_wpa_ie(_adapter *padapter, char *pie, unsigned short ielen)
+{
+       u8 *buf=NULL, *pos=NULL;
+       u32 left;
+       int group_cipher = 0, pairwise_cipher = 0;
+       int ret = 0;
+       u8      null_addr[]= {0,0,0,0,0,0};
+#ifdef CONFIG_P2P
+       struct wifidirect_info* pwdinfo = &padapter->wdinfo;
+#endif //CONFIG_P2P
+
+       if((ielen > MAX_WPA_IE_LEN) || (pie == NULL)){
+               _clr_fwstate_(&padapter->mlmepriv, WIFI_UNDER_WPS);
+               if(pie == NULL)
+                       return ret;
+               else
+                       return -EINVAL;
+       }
+
+       if(ielen)
+       {
+               buf = rtw_zmalloc(ielen);
+               if (buf == NULL){
+                       ret =  -ENOMEM;
+                       goto exit;
+               }
+
+               _rtw_memcpy(buf, pie , ielen);
+
+               //dump
+               {
+                       int i;
+                       DBG_871X("\n wpa_ie(length:%d):\n", ielen);
+                       for(i=0;i<ielen;i=i+8)
+                               DBG_871X("0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x \n",buf[i],buf[i+1],buf[i+2],buf[i+3],buf[i+4],buf[i+5],buf[i+6],buf[i+7]);
+               }
+
+               pos = buf;
+               if(ielen < RSN_HEADER_LEN){
+                       RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,("Ie len too short %d\n", ielen));
+                       ret  = -1;
+                       goto exit;
+               }
+
+#if 0
+               pos += RSN_HEADER_LEN;
+               left  = ielen - RSN_HEADER_LEN;
+
+               if (left >= RSN_SELECTOR_LEN){
+                       pos += RSN_SELECTOR_LEN;
+                       left -= RSN_SELECTOR_LEN;
+               }
+               else if (left > 0){
+                       RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,("Ie length mismatch, %u too much \n", left));
+                       ret =-1;
+                       goto exit;
+               }
+#endif
+
+               if(rtw_parse_wpa_ie(buf, ielen, &group_cipher, &pairwise_cipher) == _SUCCESS)
+               {
+                       padapter->securitypriv.dot11AuthAlgrthm= dot11AuthAlgrthm_8021X;
+                       padapter->securitypriv.ndisauthtype=Ndis802_11AuthModeWPAPSK;
+                       _rtw_memcpy(padapter->securitypriv.supplicant_ie, &buf[0], ielen);
+               }
+
+               if(rtw_parse_wpa2_ie(buf, ielen, &group_cipher, &pairwise_cipher) == _SUCCESS)
+               {
+                       padapter->securitypriv.dot11AuthAlgrthm= dot11AuthAlgrthm_8021X;
+                       padapter->securitypriv.ndisauthtype=Ndis802_11AuthModeWPA2PSK;
+                       _rtw_memcpy(padapter->securitypriv.supplicant_ie, &buf[0], ielen);
+               }
+
+               if (group_cipher == 0)
+               {
+                       group_cipher = WPA_CIPHER_NONE;
+               }
+               if (pairwise_cipher == 0)
+               {
+                       pairwise_cipher = WPA_CIPHER_NONE;
+               }
+
+               switch(group_cipher)
+               {
+                       case WPA_CIPHER_NONE:
+                               padapter->securitypriv.dot118021XGrpPrivacy=_NO_PRIVACY_;
+                               padapter->securitypriv.ndisencryptstatus=Ndis802_11EncryptionDisabled;
+                               break;
+                       case WPA_CIPHER_WEP40:
+                               padapter->securitypriv.dot118021XGrpPrivacy=_WEP40_;
+                               padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
+                               break;
+                       case WPA_CIPHER_TKIP:
+                               padapter->securitypriv.dot118021XGrpPrivacy=_TKIP_;
+                               padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption2Enabled;
+                               break;
+                       case WPA_CIPHER_CCMP:
+                               padapter->securitypriv.dot118021XGrpPrivacy=_AES_;
+                               padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption3Enabled;
+                               break;
+                       case WPA_CIPHER_WEP104:
+                               padapter->securitypriv.dot118021XGrpPrivacy=_WEP104_;
+                               padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
+                               break;
+               }
+
+               switch(pairwise_cipher)
+               {
+                       case WPA_CIPHER_NONE:
+                               padapter->securitypriv.dot11PrivacyAlgrthm=_NO_PRIVACY_;
+                               padapter->securitypriv.ndisencryptstatus=Ndis802_11EncryptionDisabled;
+                               break;
+                       case WPA_CIPHER_WEP40:
+                               padapter->securitypriv.dot11PrivacyAlgrthm=_WEP40_;
+                               padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
+                               break;
+                       case WPA_CIPHER_TKIP:
+                               padapter->securitypriv.dot11PrivacyAlgrthm=_TKIP_;
+                               padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption2Enabled;
+                               break;
+                       case WPA_CIPHER_CCMP:
+                               padapter->securitypriv.dot11PrivacyAlgrthm=_AES_;
+                               padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption3Enabled;
+                               break;
+                       case WPA_CIPHER_WEP104:
+                               padapter->securitypriv.dot11PrivacyAlgrthm=_WEP104_;
+                               padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
+                               break;
+               }
+
+               _clr_fwstate_(&padapter->mlmepriv, WIFI_UNDER_WPS);
+               {//set wps_ie
+                       u16 cnt = 0;
+                       u8 eid, wps_oui[4]={0x0,0x50,0xf2,0x04};
+
+                       while( cnt < ielen )
+                       {
+                               eid = buf[cnt];
+
+                               if((eid==_VENDOR_SPECIFIC_IE_)&&(_rtw_memcmp(&buf[cnt+2], wps_oui, 4)==_TRUE))
+                               {
+                                       DBG_871X("SET WPS_IE\n");
+
+                                       padapter->securitypriv.wps_ie_len = ( (buf[cnt+1]+2) < (MAX_WPA_IE_LEN<<2)) ? (buf[cnt+1]+2):(MAX_WPA_IE_LEN<<2);
+
+                                       _rtw_memcpy(padapter->securitypriv.wps_ie, &buf[cnt], padapter->securitypriv.wps_ie_len);
+
+                                       set_fwstate(&padapter->mlmepriv, WIFI_UNDER_WPS);
+
+#ifdef CONFIG_P2P
+                                       if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_OK))
+                                       {
+                                               rtw_p2p_set_state(pwdinfo, P2P_STATE_PROVISIONING_ING);
+                                       }
+#endif //CONFIG_P2P
+                                       cnt += buf[cnt+1]+2;
+
+                                       break;
+                               } else {
+                                       cnt += buf[cnt+1]+2; //goto next
+                               }
+                       }
+               }
+       }
+
+       //TKIP and AES disallow multicast packets until installing group key
+       if(padapter->securitypriv.dot11PrivacyAlgrthm == _TKIP_
+               || padapter->securitypriv.dot11PrivacyAlgrthm == _TKIP_WTMIC_
+               || padapter->securitypriv.dot11PrivacyAlgrthm == _AES_)
+               //WPS open need to enable multicast
+               //|| check_fwstate(&padapter->mlmepriv, WIFI_UNDER_WPS) == _TRUE)
+               rtw_hal_set_hwreg(padapter, HW_VAR_OFF_RCR_AM, null_addr);
+
+       RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
+                ("rtw_set_wpa_ie: pairwise_cipher=0x%08x padapter->securitypriv.ndisencryptstatus=%d padapter->securitypriv.ndisauthtype=%d\n",
+                 pairwise_cipher, padapter->securitypriv.ndisencryptstatus, padapter->securitypriv.ndisauthtype));
+
+exit:
+
+       if (buf) rtw_mfree(buf, ielen);
+
+       return ret;
+}
+
+static int rtw_wx_get_name(struct net_device *dev,
+                            struct iw_request_info *info,
+                            union iwreq_data *wrqu, char *extra)
+{
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       u16 cap;
+       u32 ht_ielen = 0;
+       char *p;
+       u8 ht_cap=_FALSE;
+       struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
+       WLAN_BSSID_EX  *pcur_bss = &pmlmepriv->cur_network.network;
+       NDIS_802_11_RATES_EX* prates = NULL;
+
+       RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("cmd_code=%x\n", info->cmd));
+
+       _func_enter_;
+
+       if (check_fwstate(pmlmepriv, _FW_LINKED|WIFI_ADHOC_MASTER_STATE) == _TRUE)
+       {
+               //parsing HT_CAP_IE
+               p = rtw_get_ie(&pcur_bss->IEs[12], _HT_CAPABILITY_IE_, &ht_ielen, pcur_bss->IELength-12);
+               if(p && ht_ielen>0)
+               {
+                       ht_cap = _TRUE;
+               }
+
+               prates = &pcur_bss->SupportedRates;
+
+               if (rtw_is_cckratesonly_included((u8*)prates) == _TRUE)
+               {
+                       if(ht_cap == _TRUE)
+                               snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11bn");
+                       else
+                               snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11b");
+               }
+               else if ((rtw_is_cckrates_included((u8*)prates)) == _TRUE)
+               {
+                       if(ht_cap == _TRUE)
+                               snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11bgn");
+                       else
+                               snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11bg");
+               }
+               else
+               {
+                       if(pcur_bss->Configuration.DSConfig > 14)
+                       {
+                               if(ht_cap == _TRUE)
+                                       snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11an");
+                               else
+                                       snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11a");
+                       }
+                       else
+                       {
+                               if(ht_cap == _TRUE)
+                                       snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11gn");
+                               else
+                                       snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11g");
+                       }
+               }
+       }
+       else
+       {
+               //prates = &padapter->registrypriv.dev_network.SupportedRates;
+               //snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11g");
+               snprintf(wrqu->name, IFNAMSIZ, "unassociated");
+       }
+
+       _func_exit_;
+
+       return 0;
+}
+
+static int rtw_wx_set_freq(struct net_device *dev,
+                            struct iw_request_info *info,
+                            union iwreq_data *wrqu, char *extra)
+{
+       _func_enter_;
+
+       RT_TRACE(_module_rtl871x_mlme_c_, _drv_notice_, ("+rtw_wx_set_freq\n"));
+
+       _func_exit_;
+
+       return 0;
+}
+
+static int rtw_wx_get_freq(struct net_device *dev,
+                            struct iw_request_info *info,
+                            union iwreq_data *wrqu, char *extra)
+{
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
+       WLAN_BSSID_EX  *pcur_bss = &pmlmepriv->cur_network.network;
+
+       if(check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)
+       {
+               //wrqu->freq.m = ieee80211_wlan_frequencies[pcur_bss->Configuration.DSConfig-1] * 100000;
+               wrqu->freq.m = rtw_ch2freq(pcur_bss->Configuration.DSConfig) * 100000;
+               wrqu->freq.e = 1;
+               wrqu->freq.i = pcur_bss->Configuration.DSConfig;
+
+       }
+       else{
+               wrqu->freq.m = rtw_ch2freq(padapter->mlmeextpriv.cur_channel) * 100000;
+               wrqu->freq.e = 1;
+               wrqu->freq.i = padapter->mlmeextpriv.cur_channel;
+       }
+
+       return 0;
+}
+
+static int rtw_wx_set_mode(struct net_device *dev, struct iw_request_info *a,
+                            union iwreq_data *wrqu, char *b)
+{
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       NDIS_802_11_NETWORK_INFRASTRUCTURE networkType ;
+       int ret = 0;
+       _irqL irqL;
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+       _queue *queue = &pmlmepriv->scanned_queue;
+       _func_enter_;
+
+       if(_FAIL == rtw_pwr_wakeup(padapter)) {
+               ret= -EPERM;
+               goto exit;
+       }
+
+       if (padapter->hw_init_completed==_FALSE){
+               ret = -EPERM;
+               goto exit;
+       }
+
+       switch(wrqu->mode)
+       {
+               case IW_MODE_AUTO:
+                       networkType = Ndis802_11AutoUnknown;
+                       DBG_871X("set_mode = IW_MODE_AUTO\n");
+                       break;
+               case IW_MODE_ADHOC:
+                       networkType = Ndis802_11IBSS;
+                       DBG_871X("set_mode = IW_MODE_ADHOC\n");
+                       break;
+               case IW_MODE_MASTER:
+                       networkType = Ndis802_11APMode;
+                       DBG_871X("set_mode = IW_MODE_MASTER\n");
+                        //rtw_setopmode_cmd(padapter, networkType);
+                       break;
+               case IW_MODE_INFRA:
+                       networkType = Ndis802_11Infrastructure;
+                       DBG_871X("set_mode = IW_MODE_INFRA\n");
+                       break;
+
+               default :
+                       ret = -EINVAL;;
+                       RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,("\n Mode: %s is not supported  \n", iw_operation_mode[wrqu->mode]));
+                       goto exit;
+       }
+
+/*
+       if(Ndis802_11APMode == networkType)
+       {
+               rtw_setopmode_cmd(padapter, networkType);
+       }
+       else
+       {
+               rtw_setopmode_cmd(padapter, Ndis802_11AutoUnknown);
+       }
+*/
+       _enter_critical_bh(&pmlmepriv->lock, &irqL);
+       _enter_critical_bh(&queue->lock, &irqL);
+       if (rtw_set_802_11_infrastructure_mode(padapter, networkType) ==_FALSE){
+
+               ret = -EPERM;
+               _exit_critical_bh(&queue->lock, &irqL);
+               _exit_critical_bh(&pmlmepriv->lock, &irqL);
+               goto exit;
+
+       }
+       _exit_critical_bh(&queue->lock, &irqL);
+       _exit_critical_bh(&pmlmepriv->lock, &irqL);
+       rtw_setopmode_cmd(padapter, networkType);
+
+exit:
+
+       _func_exit_;
+
+       return ret;
+
+}
+
+static int rtw_wx_get_mode(struct net_device *dev, struct iw_request_info *a,
+                            union iwreq_data *wrqu, char *b)
+{
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
+
+       RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,(" rtw_wx_get_mode \n"));
+
+       _func_enter_;
+
+       if (check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _TRUE)
+       {
+               wrqu->mode = IW_MODE_INFRA;
+       }
+       else if  ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE) ||
+                      (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE))
+
+       {
+               wrqu->mode = IW_MODE_ADHOC;
+       }
+       else if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
+       {
+               wrqu->mode = IW_MODE_MASTER;
+       }
+       else
+       {
+               wrqu->mode = IW_MODE_AUTO;
+       }
+
+       _func_exit_;
+
+       return 0;
+
+}
+
+
+static int rtw_wx_set_pmkid(struct net_device *dev,
+                            struct iw_request_info *a,
+                            union iwreq_data *wrqu, char *extra)
+{
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       u8          j,blInserted = _FALSE;
+       int         intReturn = _FALSE;
+       struct mlme_priv  *pmlmepriv = &padapter->mlmepriv;
+       struct security_priv *psecuritypriv = &padapter->securitypriv;
+        struct iw_pmksa*  pPMK = ( struct iw_pmksa* ) extra;
+        u8     strZeroMacAddress[ ETH_ALEN ] = { 0x00 };
+        u8     strIssueBssid[ ETH_ALEN ] = { 0x00 };
+
+/*
+        struct iw_pmksa
+        {
+            __u32   cmd;
+            struct sockaddr bssid;
+            __u8    pmkid[IW_PMKID_LEN];   //IW_PMKID_LEN=16
+        }
+        There are the BSSID information in the bssid.sa_data array.
+        If cmd is IW_PMKSA_FLUSH, it means the wpa_suppplicant wants to clear all the PMKID information.
+        If cmd is IW_PMKSA_ADD, it means the wpa_supplicant wants to add a PMKID/BSSID to driver.
+        If cmd is IW_PMKSA_REMOVE, it means the wpa_supplicant wants to remove a PMKID/BSSID from driver.
+        */
+
+       _rtw_memcpy( strIssueBssid, pPMK->bssid.sa_data, ETH_ALEN);
+        if ( pPMK->cmd == IW_PMKSA_ADD )
+        {
+                DBG_871X( "[rtw_wx_set_pmkid] IW_PMKSA_ADD!\n" );
+                if ( _rtw_memcmp( strIssueBssid, strZeroMacAddress, ETH_ALEN ) == _TRUE )
+                {
+                    return( intReturn );
+                }
+                else
+                {
+                    intReturn = _TRUE;
+                }
+               blInserted = _FALSE;
+
+               //overwrite PMKID
+               for(j=0 ; j<NUM_PMKID_CACHE; j++)
+               {
+                       if( _rtw_memcmp( psecuritypriv->PMKIDList[j].Bssid, strIssueBssid, ETH_ALEN) ==_TRUE )
+                       { // BSSID is matched, the same AP => rewrite with new PMKID.
+
+                                DBG_871X( "[rtw_wx_set_pmkid] BSSID exists in the PMKList.\n" );
+
+                               _rtw_memcpy( psecuritypriv->PMKIDList[j].PMKID, pPMK->pmkid, IW_PMKID_LEN);
+                                psecuritypriv->PMKIDList[ j ].bUsed = _TRUE;
+                               psecuritypriv->PMKIDIndex = j+1;
+                               blInserted = _TRUE;
+                               break;
+                       }
+               }
+
+               if(!blInserted)
+                {
+                   // Find a new entry
+                    DBG_871X( "[rtw_wx_set_pmkid] Use the new entry index = %d for this PMKID.\n",
+                            psecuritypriv->PMKIDIndex );
+
+                   _rtw_memcpy(psecuritypriv->PMKIDList[psecuritypriv->PMKIDIndex].Bssid, strIssueBssid, ETH_ALEN);
+                   _rtw_memcpy(psecuritypriv->PMKIDList[psecuritypriv->PMKIDIndex].PMKID, pPMK->pmkid, IW_PMKID_LEN);
+
+                    psecuritypriv->PMKIDList[ psecuritypriv->PMKIDIndex ].bUsed = _TRUE;
+                   psecuritypriv->PMKIDIndex++ ;
+                   if(psecuritypriv->PMKIDIndex==16)
+                    {
+                       psecuritypriv->PMKIDIndex =0;
+                    }
+               }
+        }
+        else if ( pPMK->cmd == IW_PMKSA_REMOVE )
+        {
+                DBG_871X( "[rtw_wx_set_pmkid] IW_PMKSA_REMOVE!\n" );
+                intReturn = _TRUE;
+               for(j=0 ; j<NUM_PMKID_CACHE; j++)
+               {
+                       if( _rtw_memcmp( psecuritypriv->PMKIDList[j].Bssid, strIssueBssid, ETH_ALEN) ==_TRUE )
+                       { // BSSID is matched, the same AP => Remove this PMKID information and reset it.
+                                _rtw_memset( psecuritypriv->PMKIDList[ j ].Bssid, 0x00, ETH_ALEN );
+                                psecuritypriv->PMKIDList[ j ].bUsed = _FALSE;
+                               break;
+                       }
+               }
+        }
+        else if ( pPMK->cmd == IW_PMKSA_FLUSH )
+        {
+            DBG_871X( "[rtw_wx_set_pmkid] IW_PMKSA_FLUSH!\n" );
+            _rtw_memset( &psecuritypriv->PMKIDList[ 0 ], 0x00, sizeof( RT_PMKID_LIST ) * NUM_PMKID_CACHE );
+            psecuritypriv->PMKIDIndex = 0;
+            intReturn = _TRUE;
+        }
+    return( intReturn );
+}
+
+static int rtw_wx_get_sens(struct net_device *dev,
+                            struct iw_request_info *info,
+                            union iwreq_data *wrqu, char *extra)
+{
+       #ifdef CONFIG_PLATFORM_ROCKCHIPS
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+
+       /*
+       *  20110311 Commented by Jeff
+       *  For rockchip platform's wpa_driver_wext_get_rssi
+       */
+       if(check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE) {
+               //wrqu->sens.value=-padapter->recvpriv.signal_strength;
+               wrqu->sens.value=-padapter->recvpriv.rssi;
+               //DBG_871X("%s: %d\n", __FUNCTION__, wrqu->sens.value);
+               wrqu->sens.fixed = 0; /* no auto select */
+       } else
+       #endif
+       {
+               wrqu->sens.value = 0;
+               wrqu->sens.fixed = 0;   /* no auto select */
+               wrqu->sens.disabled = 1;
+       }
+       return 0;
+}
+
+static int rtw_wx_get_range(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+       struct iw_range *range = (struct iw_range *)extra;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+
+       u16 val;
+       int i;
+
+       _func_enter_;
+
+       RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("rtw_wx_get_range. cmd_code=%x\n", info->cmd));
+
+       wrqu->data.length = sizeof(*range);
+       _rtw_memset(range, 0, sizeof(*range));
+
+       /* Let's try to keep this struct in the same order as in
+        * linux/include/wireless.h
+        */
+
+       /* TODO: See what values we can set, and remove the ones we can't
+        * set, or fill them with some default data.
+        */
+
+       /* ~5 Mb/s real (802.11b) */
+       range->throughput = 5 * 1000 * 1000;
+
+       // TODO: Not used in 802.11b?
+//     range->min_nwid;        /* Minimal NWID we are able to set */
+       // TODO: Not used in 802.11b?
+//     range->max_nwid;        /* Maximal NWID we are able to set */
+
+        /* Old Frequency (backward compat - moved lower ) */
+//     range->old_num_channels;
+//     range->old_num_frequency;
+//     range->old_freq[6]; /* Filler to keep "version" at the same offset */
+
+       /* signal level threshold range */
+
+       //percent values between 0 and 100.
+       range->max_qual.qual = 100;
+       range->max_qual.level = 100;
+       range->max_qual.noise = 100;
+       range->max_qual.updated = 7; /* Updated all three */
+
+
+       range->avg_qual.qual = 92; /* > 8% missed beacons is 'bad' */
+       /* TODO: Find real 'good' to 'bad' threshol value for RSSI */
+       range->avg_qual.level = 20 + -98;
+       range->avg_qual.noise = 0;
+       range->avg_qual.updated = 7; /* Updated all three */
+
+       range->num_bitrates = RATE_COUNT;
+
+       for (i = 0; i < RATE_COUNT && i < IW_MAX_BITRATES; i++) {
+               range->bitrate[i] = rtw_rates[i];
+       }
+
+       range->min_frag = MIN_FRAG_THRESHOLD;
+       range->max_frag = MAX_FRAG_THRESHOLD;
+
+       range->pm_capa = 0;
+
+       range->we_version_compiled = WIRELESS_EXT;
+       range->we_version_source = 16;
+
+//     range->retry_capa;      /* What retry options are supported */
+//     range->retry_flags;     /* How to decode max/min retry limit */
+//     range->r_time_flags;    /* How to decode max/min retry life */
+//     range->min_retry;       /* Minimal number of retries */
+//     range->max_retry;       /* Maximal number of retries */
+//     range->min_r_time;      /* Minimal retry lifetime */
+//     range->max_r_time;      /* Maximal retry lifetime */
+
+       for (i = 0, val = 0; i < MAX_CHANNEL_NUM; i++) {
+
+               // Include only legal frequencies for some countries
+               if(pmlmeext->channel_set[i].ChannelNum != 0)
+               {
+                       range->freq[val].i = pmlmeext->channel_set[i].ChannelNum;
+                       range->freq[val].m = rtw_ch2freq(pmlmeext->channel_set[i].ChannelNum) * 100000;
+                       range->freq[val].e = 1;
+                       val++;
+               }
+
+               if (val == IW_MAX_FREQUENCIES)
+                       break;
+       }
+
+       range->num_channels = val;
+       range->num_frequency = val;
+
+// Commented by Albert 2009/10/13
+// The following code will proivde the security capability to network manager.
+// If the driver doesn't provide this capability to network manager,
+// the WPA/WPA2 routers can't be choosen in the network manager.
+
+/*
+#define IW_SCAN_CAPA_NONE              0x00
+#define IW_SCAN_CAPA_ESSID             0x01
+#define IW_SCAN_CAPA_BSSID             0x02
+#define IW_SCAN_CAPA_CHANNEL   0x04
+#define IW_SCAN_CAPA_MODE              0x08
+#define IW_SCAN_CAPA_RATE              0x10
+#define IW_SCAN_CAPA_TYPE              0x20
+#define IW_SCAN_CAPA_TIME              0x40
+*/
+
+#if WIRELESS_EXT > 17
+       range->enc_capa = IW_ENC_CAPA_WPA|IW_ENC_CAPA_WPA2|
+                         IW_ENC_CAPA_CIPHER_TKIP|IW_ENC_CAPA_CIPHER_CCMP;
+#endif
+
+#ifdef IW_SCAN_CAPA_ESSID //WIRELESS_EXT > 21
+       range->scan_capa = IW_SCAN_CAPA_ESSID | IW_SCAN_CAPA_TYPE |IW_SCAN_CAPA_BSSID|
+                                       IW_SCAN_CAPA_CHANNEL|IW_SCAN_CAPA_MODE|IW_SCAN_CAPA_RATE;
+#endif
+
+
+       _func_exit_;
+
+       return 0;
+
+}
+
+//set bssid flow
+//s1. rtw_set_802_11_infrastructure_mode()
+//s2. rtw_set_802_11_authentication_mode()
+//s3. set_802_11_encryption_mode()
+//s4. rtw_set_802_11_bssid()
+static int rtw_wx_set_wap(struct net_device *dev,
+                        struct iw_request_info *info,
+                        union iwreq_data *awrq,
+                        char *extra)
+{
+       _irqL   irqL;
+       uint ret = 0;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct sockaddr *temp = (struct sockaddr *)awrq;
+       struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
+       _list   *phead;
+       u8 *dst_bssid, *src_bssid;
+       _queue  *queue  = &(pmlmepriv->scanned_queue);
+       struct  wlan_network    *pnetwork = NULL;
+       NDIS_802_11_AUTHENTICATION_MODE authmode;
+
+       _func_enter_;
+/*
+#ifdef CONFIG_CONCURRENT_MODE
+       if(padapter->iface_type > PRIMARY_IFACE)
+       {
+               ret = -EINVAL;
+               goto exit;
+       }
+#endif
+*/
+
+#ifdef CONFIG_CONCURRENT_MODE
+       if (check_buddy_fwstate(padapter, _FW_UNDER_SURVEY|_FW_UNDER_LINKING) == _TRUE)
+       {
+               printk("set bssid, but buddy_intf is under scanning or linking\n");
+
+               ret = -EINVAL;
+
+               goto exit;
+       }
+#endif
+
+#ifdef CONFIG_DUALMAC_CONCURRENT
+       if (dc_check_fwstate(padapter, _FW_UNDER_SURVEY|_FW_UNDER_LINKING)== _TRUE)
+       {
+               printk("set bssid, but buddy_intf is under scanning or linking\n");
+               ret = -EINVAL;
+               goto exit;
+       }
+#endif
+
+       if(_FAIL == rtw_pwr_wakeup(padapter))
+       {
+               ret= -1;
+               goto exit;
+       }
+
+       if(!padapter->bup){
+               ret = -1;
+               goto exit;
+       }
+
+
+       if (temp->sa_family != ARPHRD_ETHER){
+               ret = -EINVAL;
+               goto exit;
+       }
+
+       authmode = padapter->securitypriv.ndisauthtype;
+       _enter_critical_bh(&pmlmepriv->lock, &irqL);
+       _enter_critical_bh(&queue->lock, &irqL);
+       phead = get_list_head(queue);
+       pmlmepriv->pscanned = get_next(phead);
+
+       while (1)
+        {
+
+               if ((rtw_end_of_queue_search(phead, pmlmepriv->pscanned)) == _TRUE)
+               {
+#if 0
+                       ret = -EINVAL;
+                       goto exit;
+
+                       if(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE)
+                       {
+                               rtw_set_802_11_bssid(padapter, temp->sa_data);
+                               goto exit;
+                       }
+                       else
+                       {
+                               ret = -EINVAL;
+                               goto exit;
+                       }
+#endif
+
+                       break;
+               }
+
+               pnetwork = LIST_CONTAINOR(pmlmepriv->pscanned, struct wlan_network, list);
+
+               pmlmepriv->pscanned = get_next(pmlmepriv->pscanned);
+
+               dst_bssid = pnetwork->network.MacAddress;
+
+               src_bssid = temp->sa_data;
+
+               if ((_rtw_memcmp(dst_bssid, src_bssid, ETH_ALEN)) == _TRUE)
+               {
+                       if(!rtw_set_802_11_infrastructure_mode(padapter, pnetwork->network.InfrastructureMode))
+                       {
+                               ret = -1;
+                               _exit_critical_bh(&queue->lock, &irqL);
+                               _exit_critical_bh(&pmlmepriv->lock, &irqL);
+                               goto exit;
+                       }
+
+                               break;
+               }
+
+       }
+       _exit_critical_bh(&queue->lock, &irqL);
+       _exit_critical_bh(&pmlmepriv->lock, &irqL);
+       rtw_set_802_11_authentication_mode(padapter, authmode);
+       //set_802_11_encryption_mode(padapter, padapter->securitypriv.ndisencryptstatus);
+       if (rtw_set_802_11_bssid(padapter, temp->sa_data) == _FALSE) {
+               ret = -1;
+               goto exit;
+       }
+
+exit:
+
+       _func_exit_;
+
+       return ret;
+}
+
+static int rtw_wx_get_wap(struct net_device *dev,
+                           struct iw_request_info *info,
+                           union iwreq_data *wrqu, char *extra)
+{
+
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
+       WLAN_BSSID_EX  *pcur_bss = &pmlmepriv->cur_network.network;
+
+       wrqu->ap_addr.sa_family = ARPHRD_ETHER;
+
+       _rtw_memset(wrqu->ap_addr.sa_data, 0, ETH_ALEN);
+
+       RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("rtw_wx_get_wap\n"));
+
+       _func_enter_;
+
+       if  ( ((check_fwstate(pmlmepriv, _FW_LINKED)) == _TRUE) ||
+                       ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)) == _TRUE) ||
+                       ((check_fwstate(pmlmepriv, WIFI_AP_STATE)) == _TRUE) )
+       {
+
+               _rtw_memcpy(wrqu->ap_addr.sa_data, pcur_bss->MacAddress, ETH_ALEN);
+       }
+       else
+       {
+               _rtw_memset(wrqu->ap_addr.sa_data, 0, ETH_ALEN);
+       }
+
+       _func_exit_;
+
+       return 0;
+
+}
+
+static int rtw_wx_set_mlme(struct net_device *dev,
+                            struct iw_request_info *info,
+                            union iwreq_data *wrqu, char *extra)
+{
+#if 0
+/* SIOCSIWMLME data */
+struct iw_mlme
+{
+       __u16           cmd; /* IW_MLME_* */
+       __u16           reason_code;
+       struct sockaddr addr;
+};
+#endif
+
+       int ret=0;
+       u16 reason;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct iw_mlme *mlme = (struct iw_mlme *) extra;
+
+
+       if(mlme==NULL)
+               return -1;
+
+       printk("%s\n", __FUNCTION__);
+
+       reason = cpu_to_le16(mlme->reason_code);
+
+
+       printk("%s, cmd=%d, reason=%d\n", __FUNCTION__, mlme->cmd, reason);
+
+       switch (mlme->cmd)
+       {
+               case IW_MLME_DEAUTH:
+                               if(!rtw_set_802_11_disassociate(padapter))
+                               ret = -1;
+                               break;
+
+               case IW_MLME_DISASSOC:
+                               if(!rtw_set_802_11_disassociate(padapter))
+                                               ret = -1;
+
+                               break;
+
+               default:
+                       return -EOPNOTSUPP;
+       }
+
+       return ret;
+
+}
+
+static int rtw_wx_set_scan(struct net_device *dev, struct iw_request_info *a,
+                            union iwreq_data *wrqu, char *extra)
+{
+       u8 _status = _FALSE;
+       int ret = 0;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct mlme_priv *pmlmepriv= &padapter->mlmepriv;
+       NDIS_802_11_SSID ssid[RTW_SSID_SCAN_AMOUNT];
+       _irqL   irqL;
+#ifdef CONFIG_P2P
+       struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
+#endif //CONFIG_P2P
+       RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("rtw_wx_set_scan\n"));
+
+_func_enter_;
+
+       #ifdef DBG_IOCTL
+       DBG_871X("DBG_IOCTL %s:%d\n",__FUNCTION__, __LINE__);
+       #endif
+/*
+#ifdef CONFIG_CONCURRENT_MODE
+       if(padapter->iface_type > PRIMARY_IFACE)
+       {
+               ret = -1;
+               goto exit;
+       }
+#endif
+*/
+
+#ifdef CONFIG_MP_INCLUDED
+       if (check_fwstate(pmlmepriv, WIFI_MP_STATE) == _TRUE)
+       {
+               ret = -1;
+               goto exit;
+       }
+#endif
+
+       if(_FAIL == rtw_pwr_wakeup(padapter))
+       {
+               ret= -1;
+               goto exit;
+       }
+
+       if(padapter->bDriverStopped){
+           DBG_871X("bDriverStopped=%d\n", padapter->bDriverStopped);
+               ret= -1;
+               goto exit;
+       }
+
+       if(!padapter->bup){
+               ret = -1;
+               goto exit;
+       }
+
+       if (padapter->hw_init_completed==_FALSE){
+               ret = -1;
+               goto exit;
+       }
+
+       // When Busy Traffic, driver do not site survey. So driver return success.
+       // wpa_supplicant will not issue SIOCSIWSCAN cmd again after scan timeout.
+       // modify by thomas 2011-02-22.
+       if (pmlmepriv->LinkDetectInfo.bBusyTraffic == _TRUE)
+       {
+               indicate_wx_scan_complete_event(padapter);
+               goto exit;
+       }
+
+       if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY|_FW_UNDER_LINKING) == _TRUE)
+       {
+               indicate_wx_scan_complete_event(padapter);
+               goto exit;
+       }
+
+#ifdef CONFIG_CONCURRENT_MODE
+       if (check_buddy_fwstate(padapter,
+               _FW_UNDER_SURVEY|_FW_UNDER_LINKING|WIFI_UNDER_WPS) == _TRUE)
+       {
+               if(check_buddy_fwstate(padapter, _FW_UNDER_SURVEY))
+               {
+                       printk("scanning_via_buddy_intf\n");
+                       pmlmepriv->scanning_via_buddy_intf = _TRUE;
+               }
+
+               indicate_wx_scan_complete_event(padapter);
+
+               goto exit;
+       }
+#endif
+
+#ifdef CONFIG_DUALMAC_CONCURRENT
+       if (dc_check_fwstate(padapter, _FW_UNDER_SURVEY|_FW_UNDER_LINKING)== _TRUE)
+       {
+               indicate_wx_scan_complete_event(padapter);
+               goto exit;
+       }
+#endif
+
+//     Mareded by Albert 20101103
+//     For the DMP WiFi Display project, the driver won't to scan because
+//     the pmlmepriv->scan_interval is always equal to 3.
+//     So, the wpa_supplicant won't find out the WPS SoftAP.
+
+/*
+       if(pmlmepriv->scan_interval>10)
+               pmlmepriv->scan_interval = 0;
+
+       if(pmlmepriv->scan_interval > 0)
+       {
+               DBG_871X("scan done\n");
+               ret = 0;
+               goto exit;
+       }
+
+*/
+#ifdef CONFIG_P2P
+       if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+       {
+               rtw_p2p_set_pre_state( pwdinfo, rtw_p2p_state( pwdinfo ) );
+               rtw_p2p_set_state(pwdinfo, P2P_STATE_FIND_PHASE_SEARCH);
+               rtw_p2p_findphase_ex_set(pwdinfo, P2P_FINDPHASE_EX_FULL);
+               rtw_free_network_queue(padapter, _TRUE);
+       }
+#endif //CONFIG_P2P
+
+       _rtw_memset(ssid, 0, sizeof(NDIS_802_11_SSID)*RTW_SSID_SCAN_AMOUNT);
+
+#if WIRELESS_EXT >= 17
+       if (wrqu->data.length == sizeof(struct iw_scan_req))
+       {
+               struct iw_scan_req *req = (struct iw_scan_req *)extra;
+
+               if (wrqu->data.flags & IW_SCAN_THIS_ESSID)
+               {
+                       int len = min((int)req->essid_len, IW_ESSID_MAX_SIZE);
+
+                       _rtw_memcpy(ssid[0].Ssid, req->essid, len);
+                       ssid[0].SsidLength = len;
+
+                       DBG_871X("IW_SCAN_THIS_ESSID, ssid=%s, len=%d\n", req->essid, req->essid_len);
+
+                       _enter_critical_bh(&pmlmepriv->lock, &irqL);
+
+                       _status = rtw_sitesurvey_cmd(padapter, ssid, 1, NULL, 0);
+
+                       _exit_critical_bh(&pmlmepriv->lock, &irqL);
+
+               }
+               else if (req->scan_type == IW_SCAN_TYPE_PASSIVE)
+               {
+                       DBG_871X("rtw_wx_set_scan, req->scan_type == IW_SCAN_TYPE_PASSIVE\n");
+               }
+
+       }
+       else
+#endif
+
+       if(     wrqu->data.length >= WEXT_CSCAN_HEADER_SIZE
+               && _rtw_memcmp(extra, WEXT_CSCAN_HEADER, WEXT_CSCAN_HEADER_SIZE) == _TRUE
+       )
+       {
+               int len = wrqu->data.length -WEXT_CSCAN_HEADER_SIZE;
+               char *pos = extra+WEXT_CSCAN_HEADER_SIZE;
+               char section;
+               char sec_len;
+               int ssid_index = 0;
+
+               //DBG_871X("%s COMBO_SCAN header is recognized\n", __FUNCTION__);
+
+               while(len >= 1) {
+                       section = *(pos++); len-=1;
+
+                       switch(section) {
+                               case WEXT_CSCAN_SSID_SECTION:
+                                       //DBG_871X("WEXT_CSCAN_SSID_SECTION\n");
+                                       if(len < 1) {
+                                               len = 0;
+                                               break;
+                                       }
+
+                                       sec_len = *(pos++); len-=1;
+
+                                       if(sec_len>0 && sec_len<=len) {
+                                               ssid[ssid_index].SsidLength = sec_len;
+                                               _rtw_memcpy(ssid[ssid_index].Ssid, pos, ssid[ssid_index].SsidLength);
+                                               //DBG_871X("%s COMBO_SCAN with specific ssid:%s, %d\n", __FUNCTION__
+                                               //      , ssid[ssid_index].Ssid, ssid[ssid_index].SsidLength);
+                                               ssid_index++;
+                                       }
+
+                                       pos+=sec_len; len-=sec_len;
+                                       break;
+
+
+                               case WEXT_CSCAN_CHANNEL_SECTION:
+                                       //DBG_871X("WEXT_CSCAN_CHANNEL_SECTION\n");
+                                       pos+=1; len-=1;
+                                       break;
+                               case WEXT_CSCAN_ACTV_DWELL_SECTION:
+                                       //DBG_871X("WEXT_CSCAN_ACTV_DWELL_SECTION\n");
+                                       pos+=2; len-=2;
+                                       break;
+                               case WEXT_CSCAN_PASV_DWELL_SECTION:
+                                       //DBG_871X("WEXT_CSCAN_PASV_DWELL_SECTION\n");
+                                       pos+=2; len-=2;
+                                       break;
+                               case WEXT_CSCAN_HOME_DWELL_SECTION:
+                                       //DBG_871X("WEXT_CSCAN_HOME_DWELL_SECTION\n");
+                                       pos+=2; len-=2;
+                                       break;
+                               case WEXT_CSCAN_TYPE_SECTION:
+                                       //DBG_871X("WEXT_CSCAN_TYPE_SECTION\n");
+                                       pos+=1; len-=1;
+                                       break;
+                               #if 0
+                               case WEXT_CSCAN_NPROBE_SECTION:
+                                       DBG_871X("WEXT_CSCAN_NPROBE_SECTION\n");
+                                       break;
+                               #endif
+
+                               default:
+                                       //DBG_871X("Unknown CSCAN section %c\n", section);
+                                       len = 0; // stop parsing
+                       }
+                       //DBG_871X("len:%d\n", len);
+
+               }
+
+               //jeff: it has still some scan paramater to parse, we only do this now...
+               _status = rtw_set_802_11_bssid_list_scan(padapter, ssid, RTW_SSID_SCAN_AMOUNT);
+
+       } else
+
+       {
+               _status = rtw_set_802_11_bssid_list_scan(padapter, NULL, 0);
+       }
+
+       if(_status == _FALSE)
+               ret = -1;
+
+exit:
+       #ifdef DBG_IOCTL
+       DBG_871X("DBG_IOCTL %s:%d return %d\n",__FUNCTION__, __LINE__, ret);
+       #endif
+
+_func_exit_;
+
+       return ret;
+}
+
+static int rtw_wx_get_scan(struct net_device *dev, struct iw_request_info *a,
+                            union iwreq_data *wrqu, char *extra)
+{
+       _irqL   irqL;
+       _list                                   *plist, *phead;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
+       _queue                          *queue  = &(pmlmepriv->scanned_queue);
+       struct  wlan_network    *pnetwork = NULL;
+       char *ev = extra;
+       char *stop = ev + wrqu->data.length;
+       u32 ret = 0;
+       u32 cnt=0;
+       u32 wait_for_surveydone;
+       sint wait_status;
+#ifdef CONFIG_CONCURRENT_MODE
+       //PADAPTER pbuddy_adapter = padapter->pbuddy_adapter;
+       //struct mlme_priv *pbuddy_mlmepriv = &(pbuddy_adapter->mlmepriv);
+#endif
+#ifdef CONFIG_P2P
+       struct  wifidirect_info*        pwdinfo = &padapter->wdinfo;
+#endif //CONFIG_P2P
+       RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("rtw_wx_get_scan\n"));
+       RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_info_, (" Start of Query SIOCGIWSCAN .\n"));
+
+       _func_enter_;
+
+       #ifdef DBG_IOCTL
+       DBG_871X("DBG_IOCTL %s:%d\n",__FUNCTION__, __LINE__);
+       #endif
+
+/*
+#ifdef CONFIG_CONCURRENT_MODE
+       if(padapter->iface_type > PRIMARY_IFACE)
+       {
+               ret = -EINVAL;
+               goto exit;
+       }
+#endif
+*/
+       if(padapter->pwrctrlpriv.brfoffbyhw && padapter->bDriverStopped)
+       {
+               ret = -EINVAL;
+               goto exit;
+       }
+
+#ifdef CONFIG_P2P
+       if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+       {
+               //      P2P is enabled
+               if ( padapter->chip_type == RTL8192D )
+                       wait_for_surveydone = 300;      //      Because the 8192du supports more channels.
+               else
+                       wait_for_surveydone = 200;
+       }
+       else
+       {
+               //      P2P is disabled
+               wait_for_surveydone = 100;
+       }
+#else
+       {
+               wait_for_surveydone = 100;
+       }
+#endif //CONFIG_P2P
+
+/*
+#ifdef CONFIG_CONCURRENT_MODE
+       if(pmlmepriv->scanning_via_buddy_intf == _TRUE)
+       {
+               pmlmepriv->scanning_via_buddy_intf = _FALSE;//reset
+
+               // change pointers to buddy interface
+               padapter = pbuddy_adapter;
+               pmlmepriv = pbuddy_mlmepriv;
+               queue = &(pbuddy_mlmepriv->scanned_queue);
+
+       }
+#endif // CONFIG_CONCURRENT_MODE
+*/
+
+       wait_status = _FW_UNDER_SURVEY
+               #ifndef CONFIG_ANDROID
+               |_FW_UNDER_LINKING
+               #endif
+       ;
+
+#ifdef CONFIG_DUALMAC_CONCURRENT
+       while(dc_check_fwstate(padapter, wait_status)== _TRUE)
+       {
+               rtw_msleep_os(30);
+               cnt++;
+               if(cnt > wait_for_surveydone )
+                       break;
+       }
+#endif // CONFIG_DUALMAC_CONCURRENT
+
+       while(check_fwstate(pmlmepriv, wait_status) == _TRUE)
+       {
+               rtw_msleep_os(30);
+               cnt++;
+               if(cnt > wait_for_surveydone )
+                       break;
+       }
+
+       _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+
+       phead = get_list_head(queue);
+       plist = get_next(phead);
+
+       while(1)
+       {
+               if (rtw_end_of_queue_search(phead,plist)== _TRUE)
+                       break;
+
+               if((stop - ev) < SCAN_ITEM_SIZE) {
+                       ret = -E2BIG;
+                       break;
+               }
+
+               pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
+
+               //report network only if the current channel set contains the channel to which this network belongs
+               if(rtw_ch_set_search_ch(padapter->mlmeextpriv.channel_set, pnetwork->network.Configuration.DSConfig) >= 0
+                       && rtw_mlme_band_check(padapter, pnetwork->network.Configuration.DSConfig) == _TRUE
+                       && _TRUE == rtw_validate_ssid(&(pnetwork->network.Ssid))
+               )
+               {
+                       ev=translate_scan(padapter, a, pnetwork, ev, stop);
+               }
+
+               plist = get_next(plist);
+
+       }
+
+       _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+
+       wrqu->data.length = ev-extra;
+       wrqu->data.flags = 0;
+
+exit:
+
+       _func_exit_;
+
+       #ifdef DBG_IOCTL
+       DBG_871X("DBG_IOCTL %s:%d return %d\n",__FUNCTION__, __LINE__, ret);
+       #endif
+
+       return ret ;
+
+}
+
+//set ssid flow
+//s1. rtw_set_802_11_infrastructure_mode()
+//s2. set_802_11_authenticaion_mode()
+//s3. set_802_11_encryption_mode()
+//s4. rtw_set_802_11_ssid()
+static int rtw_wx_set_essid(struct net_device *dev,
+                             struct iw_request_info *a,
+                             union iwreq_data *wrqu, char *extra)
+{
+       _irqL irqL;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+       _queue *queue = &pmlmepriv->scanned_queue;
+       struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
+       _list *phead;
+       s8 status = _TRUE;
+       struct wlan_network *pnetwork = NULL;
+       NDIS_802_11_AUTHENTICATION_MODE authmode;
+       NDIS_802_11_SSID ndis_ssid;
+       u8 *dst_ssid, *src_ssid;
+
+       uint ret = 0, len;
+
+       _func_enter_;
+
+       #ifdef DBG_IOCTL
+       DBG_871X("DBG_IOCTL %s:%d\n",__FUNCTION__, __LINE__);
+       #endif
+
+/*
+#ifdef CONFIG_CONCURRENT_MODE
+       if(padapter->iface_type > PRIMARY_IFACE)
+       {
+               ret = -EINVAL;
+               goto exit;
+       }
+#endif
+*/
+
+#ifdef CONFIG_CONCURRENT_MODE
+       if (check_buddy_fwstate(padapter, _FW_UNDER_SURVEY|_FW_UNDER_LINKING) == _TRUE)
+       {
+               printk("set ssid, but buddy_intf is under scanning or linking\n");
+
+               ret = -EINVAL;
+
+               goto exit;
+       }
+#endif
+
+#ifdef CONFIG_DUALMAC_CONCURRENT
+       if (dc_check_fwstate(padapter, _FW_UNDER_SURVEY|_FW_UNDER_LINKING)== _TRUE)
+       {
+               printk("set bssid, but buddy_intf is under scanning or linking\n");
+               ret = -EINVAL;
+               goto exit;
+       }
+#endif
+
+       RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
+                ("+rtw_wx_set_essid: fw_state=0x%08x\n", get_fwstate(pmlmepriv)));
+       if(_FAIL == rtw_pwr_wakeup(padapter))
+       {
+               ret = -1;
+               goto exit;
+       }
+
+       if(!padapter->bup){
+               ret = -1;
+               goto exit;
+       }
+
+#if WIRELESS_EXT <= 20
+       if ((wrqu->essid.length-1) > IW_ESSID_MAX_SIZE){
+#else
+       if (wrqu->essid.length > IW_ESSID_MAX_SIZE){
+#endif
+               ret= -E2BIG;
+               goto exit;
+       }
+
+       if(check_fwstate(pmlmepriv, WIFI_AP_STATE)) {
+               ret = -1;
+               goto exit;
+       }
+
+       authmode = padapter->securitypriv.ndisauthtype;
+       DBG_871X("=>%s\n",__FUNCTION__);
+       if (wrqu->essid.flags && wrqu->essid.length)
+       {
+               // Commented by Albert 20100519
+               // We got the codes in "set_info" function of iwconfig source code.
+               //      =========================================
+               //      wrq.u.essid.length = strlen(essid) + 1;
+               //      if(we_kernel_version > 20)
+               //              wrq.u.essid.length--;
+               //      =========================================
+               //      That means, if the WIRELESS_EXT less than or equal to 20, the correct ssid len should subtract 1.
+#if WIRELESS_EXT <= 20
+               len = ((wrqu->essid.length-1) < IW_ESSID_MAX_SIZE) ? (wrqu->essid.length-1) : IW_ESSID_MAX_SIZE;
+#else
+               len = (wrqu->essid.length < IW_ESSID_MAX_SIZE) ? wrqu->essid.length : IW_ESSID_MAX_SIZE;
+#endif
+
+               if( wrqu->essid.length != 33 )
+                       DBG_871X("ssid=%s, len=%d\n", extra, wrqu->essid.length);
+
+               _rtw_memset(&ndis_ssid, 0, sizeof(NDIS_802_11_SSID));
+               ndis_ssid.SsidLength = len;
+               _rtw_memcpy(ndis_ssid.Ssid, extra, len);
+               src_ssid = ndis_ssid.Ssid;
+
+               RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_, ("rtw_wx_set_essid: ssid=[%s]\n", src_ssid));
+               _enter_critical_bh(&pmlmepriv->lock, &irqL);
+               _enter_critical_bh(&queue->lock, &irqL);
+              phead = get_list_head(queue);
+              pmlmepriv->pscanned = get_next(phead);
+
+               while (1)
+               {
+                       if (rtw_end_of_queue_search(phead, pmlmepriv->pscanned) == _TRUE)
+                       {
+#if 0
+                               if(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE)
+                               {
+                                       rtw_set_802_11_ssid(padapter, &ndis_ssid);
+
+                                       goto exit;
+                               }
+                               else
+                               {
+                                       RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_info_,("rtw_wx_set_ssid(): scanned_queue is empty\n"));
+                                       ret = -EINVAL;
+                                       goto exit;
+                               }
+#endif
+                               RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_warning_,
+                                        ("rtw_wx_set_essid: scan_q is empty, set ssid to check if scanning again!\n"));
+
+                               break;
+                       }
+
+                       pnetwork = LIST_CONTAINOR(pmlmepriv->pscanned, struct wlan_network, list);
+
+                       pmlmepriv->pscanned = get_next(pmlmepriv->pscanned);
+
+                       dst_ssid = pnetwork->network.Ssid.Ssid;
+
+                       RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
+                                ("rtw_wx_set_essid: dst_ssid=%s\n",
+                                 pnetwork->network.Ssid.Ssid));
+
+                       if ((_rtw_memcmp(dst_ssid, src_ssid, ndis_ssid.SsidLength) == _TRUE) &&
+                               (pnetwork->network.Ssid.SsidLength==ndis_ssid.SsidLength))
+                       {
+                               RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
+                                        ("rtw_wx_set_essid: find match, set infra mode\n"));
+
+                               if(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE)
+                               {
+                                       if(pnetwork->network.InfrastructureMode != pmlmepriv->cur_network.network.InfrastructureMode)
+                                               continue;
+                               }
+
+                               if (rtw_set_802_11_infrastructure_mode(padapter, pnetwork->network.InfrastructureMode) == _FALSE)
+                               {
+                                       ret = -1;
+                                       _exit_critical_bh(&queue->lock, &irqL);
+                                       _exit_critical_bh(&pmlmepriv->lock, &irqL);
+                                       goto exit;
+                               }
+
+                               break;
+                       }
+               }
+               _exit_critical_bh(&queue->lock, &irqL);
+               _exit_critical_bh(&pmlmepriv->lock, &irqL);
+               RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
+                        ("set ssid: set_802_11_auth. mode=%d\n", authmode));
+               rtw_set_802_11_authentication_mode(padapter, authmode);
+               //set_802_11_encryption_mode(padapter, padapter->securitypriv.ndisencryptstatus);
+               if (rtw_set_802_11_ssid(padapter, &ndis_ssid) == _FALSE) {
+                       ret = -1;
+                       goto exit;
+               }
+       }
+
+exit:
+
+       DBG_871X("<=%s, ret %d\n",__FUNCTION__, ret);
+
+       #ifdef DBG_IOCTL
+       DBG_871X("DBG_IOCTL %s:%d return %d\n",__FUNCTION__, __LINE__, ret);
+       #endif
+
+       _func_exit_;
+
+       return ret;
+}
+
+static int rtw_wx_get_essid(struct net_device *dev,
+                             struct iw_request_info *a,
+                             union iwreq_data *wrqu, char *extra)
+{
+       u32 len,ret = 0;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
+       WLAN_BSSID_EX  *pcur_bss = &pmlmepriv->cur_network.network;
+
+       RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("rtw_wx_get_essid\n"));
+
+       _func_enter_;
+
+       if ( (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE) ||
+             (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE))
+       {
+               len = pcur_bss->Ssid.SsidLength;
+
+               wrqu->essid.length = len;
+
+               _rtw_memcpy(extra, pcur_bss->Ssid.Ssid, len);
+
+               wrqu->essid.flags = 1;
+       }
+       else
+       {
+               ret = -1;
+               goto exit;
+       }
+
+exit:
+
+       _func_exit_;
+
+       return ret;
+
+}
+
+static int rtw_wx_set_rate(struct net_device *dev,
+                             struct iw_request_info *a,
+                             union iwreq_data *wrqu, char *extra)
+{
+       int     i, ret = 0;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       u8      datarates[NumRates];
+       u32     target_rate = wrqu->bitrate.value;
+       u32     fixed = wrqu->bitrate.fixed;
+       u32     ratevalue = 0;
+        u8 mpdatarate[NumRates]={11, 10, 9, 8, 7, 6, 5, 4, 3, 2, 1, 0, 0xff};
+
+_func_enter_;
+
+       RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,(" rtw_wx_set_rate \n"));
+       RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_info_,("target_rate = %d, fixed = %d\n",target_rate,fixed));
+
+       if(target_rate == -1){
+               ratevalue = 11;
+               goto set_rate;
+       }
+       target_rate = target_rate/100000;
+
+       switch(target_rate){
+               case 10:
+                       ratevalue = 0;
+                       break;
+               case 20:
+                       ratevalue = 1;
+                       break;
+               case 55:
+                       ratevalue = 2;
+                       break;
+               case 60:
+                       ratevalue = 3;
+                       break;
+               case 90:
+                       ratevalue = 4;
+                       break;
+               case 110:
+                       ratevalue = 5;
+                       break;
+               case 120:
+                       ratevalue = 6;
+                       break;
+               case 180:
+                       ratevalue = 7;
+                       break;
+               case 240:
+                       ratevalue = 8;
+                       break;
+               case 360:
+                       ratevalue = 9;
+                       break;
+               case 480:
+                       ratevalue = 10;
+                       break;
+               case 540:
+                       ratevalue = 11;
+                       break;
+               default:
+                       ratevalue = 11;
+                       break;
+       }
+
+set_rate:
+
+       for(i=0; i<NumRates; i++)
+       {
+               if(ratevalue==mpdatarate[i])
+               {
+                       datarates[i] = mpdatarate[i];
+                       if(fixed == 0)
+                               break;
+               }
+               else{
+                       datarates[i] = 0xff;
+               }
+
+               RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_info_,("datarate_inx=%d\n",datarates[i]));
+       }
+
+       if( rtw_setdatarate_cmd(padapter, datarates) !=_SUCCESS){
+               RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,("rtw_wx_set_rate Fail!!!\n"));
+               ret = -1;
+       }
+
+_func_exit_;
+
+       return ret;
+}
+
+static int rtw_wx_get_rate(struct net_device *dev,
+                            struct iw_request_info *info,
+                            union iwreq_data *wrqu, char *extra)
+{
+       u16 max_rate = 0;
+
+       max_rate = rtw_get_cur_max_rate((_adapter *)rtw_netdev_priv(dev));
+
+       if(max_rate == 0)
+               return -EPERM;
+
+       wrqu->bitrate.fixed = 0;        /* no auto select */
+       wrqu->bitrate.value = max_rate * 100000;
+
+       return 0;
+}
+
+static int rtw_wx_set_rts(struct net_device *dev,
+                            struct iw_request_info *info,
+                            union iwreq_data *wrqu, char *extra)
+{
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+
+       _func_enter_;
+
+       if (wrqu->rts.disabled)
+               padapter->registrypriv.rts_thresh = 2347;
+       else {
+               if (wrqu->rts.value < 0 ||
+                   wrqu->rts.value > 2347)
+                       return -EINVAL;
+
+               padapter->registrypriv.rts_thresh = wrqu->rts.value;
+       }
+
+       DBG_871X("%s, rts_thresh=%d\n", __func__, padapter->registrypriv.rts_thresh);
+
+       _func_exit_;
+
+       return 0;
+
+}
+
+static int rtw_wx_get_rts(struct net_device *dev,
+                            struct iw_request_info *info,
+                            union iwreq_data *wrqu, char *extra)
+{
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+
+       _func_enter_;
+
+       DBG_871X("%s, rts_thresh=%d\n", __func__, padapter->registrypriv.rts_thresh);
+
+       wrqu->rts.value = padapter->registrypriv.rts_thresh;
+       wrqu->rts.fixed = 0;    /* no auto select */
+       //wrqu->rts.disabled = (wrqu->rts.value == DEFAULT_RTS_THRESHOLD);
+
+       _func_exit_;
+
+       return 0;
+}
+
+static int rtw_wx_set_frag(struct net_device *dev,
+                            struct iw_request_info *info,
+                            union iwreq_data *wrqu, char *extra)
+{
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+
+       _func_enter_;
+
+       if (wrqu->frag.disabled)
+               padapter->xmitpriv.frag_len = MAX_FRAG_THRESHOLD;
+       else {
+               if (wrqu->frag.value < MIN_FRAG_THRESHOLD ||
+                   wrqu->frag.value > MAX_FRAG_THRESHOLD)
+                       return -EINVAL;
+
+               padapter->xmitpriv.frag_len = wrqu->frag.value & ~0x1;
+       }
+
+       DBG_871X("%s, frag_len=%d\n", __func__, padapter->xmitpriv.frag_len);
+
+       _func_exit_;
+
+       return 0;
+
+}
+
+static int rtw_wx_get_frag(struct net_device *dev,
+                            struct iw_request_info *info,
+                            union iwreq_data *wrqu, char *extra)
+{
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+
+       _func_enter_;
+
+       DBG_871X("%s, frag_len=%d\n", __func__, padapter->xmitpriv.frag_len);
+
+       wrqu->frag.value = padapter->xmitpriv.frag_len;
+       wrqu->frag.fixed = 0;   /* no auto select */
+       //wrqu->frag.disabled = (wrqu->frag.value == DEFAULT_FRAG_THRESHOLD);
+
+       _func_exit_;
+
+       return 0;
+}
+
+static int rtw_wx_get_retry(struct net_device *dev,
+                            struct iw_request_info *info,
+                            union iwreq_data *wrqu, char *extra)
+{
+       //_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+
+
+       wrqu->retry.value = 7;
+       wrqu->retry.fixed = 0;  /* no auto select */
+       wrqu->retry.disabled = 1;
+
+       return 0;
+
+}
+
+#if 0
+#define IW_ENCODE_INDEX                0x00FF  /* Token index (if needed) */
+#define IW_ENCODE_FLAGS                0xFF00  /* Flags defined below */
+#define IW_ENCODE_MODE         0xF000  /* Modes defined below */
+#define IW_ENCODE_DISABLED     0x8000  /* Encoding disabled */
+#define IW_ENCODE_ENABLED      0x0000  /* Encoding enabled */
+#define IW_ENCODE_RESTRICTED   0x4000  /* Refuse non-encoded packets */
+#define IW_ENCODE_OPEN         0x2000  /* Accept non-encoded packets */
+#define IW_ENCODE_NOKEY                0x0800  /* Key is write only, so not present */
+#define IW_ENCODE_TEMP         0x0400  /* Temporary key */
+/*
+iwconfig wlan0 key on -> flags = 0x6001 -> maybe it means auto
+iwconfig wlan0 key off -> flags = 0x8800
+iwconfig wlan0 key open -> flags = 0x2800
+iwconfig wlan0 key open 1234567890 -> flags = 0x2000
+iwconfig wlan0 key restricted -> flags = 0x4800
+iwconfig wlan0 key open [3] 1234567890 -> flags = 0x2003
+iwconfig wlan0 key restricted [2] 1234567890 -> flags = 0x4002
+iwconfig wlan0 key open [3] -> flags = 0x2803
+iwconfig wlan0 key restricted [2] -> flags = 0x4802
+*/
+#endif
+
+static int rtw_wx_set_enc(struct net_device *dev,
+                           struct iw_request_info *info,
+                           union iwreq_data *wrqu, char *keybuf)
+{
+       u32 key, ret = 0;
+       u32 keyindex_provided;
+       NDIS_802_11_WEP  wep;
+       NDIS_802_11_AUTHENTICATION_MODE authmode;
+
+       struct iw_point *erq = &(wrqu->encoding);
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
+       DBG_871X("+rtw_wx_set_enc, flags=0x%x\n", erq->flags);
+
+       _rtw_memset(&wep, 0, sizeof(NDIS_802_11_WEP));
+
+       key = erq->flags & IW_ENCODE_INDEX;
+
+       _func_enter_;
+
+       if (erq->flags & IW_ENCODE_DISABLED)
+       {
+               DBG_871X("EncryptionDisabled\n");
+               padapter->securitypriv.ndisencryptstatus = Ndis802_11EncryptionDisabled;
+               padapter->securitypriv.dot11PrivacyAlgrthm=_NO_PRIVACY_;
+               padapter->securitypriv.dot118021XGrpPrivacy=_NO_PRIVACY_;
+               padapter->securitypriv.dot11AuthAlgrthm= dot11AuthAlgrthm_Open; //open system
+               authmode = Ndis802_11AuthModeOpen;
+               padapter->securitypriv.ndisauthtype=authmode;
+
+               goto exit;
+       }
+
+       if (key) {
+               if (key > WEP_KEYS)
+                       return -EINVAL;
+               key--;
+               keyindex_provided = 1;
+       }
+       else
+       {
+               keyindex_provided = 0;
+               key = padapter->securitypriv.dot11PrivacyKeyIndex;
+               DBG_871X("rtw_wx_set_enc, key=%d\n", key);
+       }
+
+       //set authentication mode
+       if(erq->flags & IW_ENCODE_OPEN)
+       {
+               DBG_871X("rtw_wx_set_enc():IW_ENCODE_OPEN\n");
+               padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;//Ndis802_11EncryptionDisabled;
+
+#ifdef CONFIG_PLATFORM_MT53XX
+               padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Auto;
+#else
+               padapter->securitypriv.dot11AuthAlgrthm= dot11AuthAlgrthm_Open;
+#endif
+
+               padapter->securitypriv.dot11PrivacyAlgrthm=_NO_PRIVACY_;
+               padapter->securitypriv.dot118021XGrpPrivacy=_NO_PRIVACY_;
+               authmode = Ndis802_11AuthModeOpen;
+               padapter->securitypriv.ndisauthtype=authmode;
+       }
+       else if(erq->flags & IW_ENCODE_RESTRICTED)
+       {
+               DBG_871X("rtw_wx_set_enc():IW_ENCODE_RESTRICTED\n");
+               padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
+
+#ifdef CONFIG_PLATFORM_MT53XX
+               padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Auto;
+#else
+               padapter->securitypriv.dot11AuthAlgrthm= dot11AuthAlgrthm_Shared;
+#endif
+
+               padapter->securitypriv.dot11PrivacyAlgrthm=_WEP40_;
+               padapter->securitypriv.dot118021XGrpPrivacy=_WEP40_;
+               authmode = Ndis802_11AuthModeShared;
+               padapter->securitypriv.ndisauthtype=authmode;
+       }
+       else
+       {
+               DBG_871X("rtw_wx_set_enc():erq->flags=0x%x\n", erq->flags);
+
+               padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;//Ndis802_11EncryptionDisabled;
+               padapter->securitypriv.dot11AuthAlgrthm= dot11AuthAlgrthm_Open; //open system
+               padapter->securitypriv.dot11PrivacyAlgrthm=_NO_PRIVACY_;
+               padapter->securitypriv.dot118021XGrpPrivacy=_NO_PRIVACY_;
+               authmode = Ndis802_11AuthModeOpen;
+               padapter->securitypriv.ndisauthtype=authmode;
+       }
+
+       wep.KeyIndex = key;
+       if (erq->length > 0)
+       {
+               wep.KeyLength = erq->length <= 5 ? 5 : 13;
+
+               wep.Length = wep.KeyLength + FIELD_OFFSET(NDIS_802_11_WEP, KeyMaterial);
+       }
+       else
+       {
+               wep.KeyLength = 0 ;
+
+               if(keyindex_provided == 1)// set key_id only, no given KeyMaterial(erq->length==0).
+               {
+                       padapter->securitypriv.dot11PrivacyKeyIndex = key;
+
+                       DBG_871X("(keyindex_provided == 1), keyid=%d, key_len=%d\n", key, padapter->securitypriv.dot11DefKeylen[key]);
+
+                       switch(padapter->securitypriv.dot11DefKeylen[key])
+                       {
+                               case 5:
+                                       padapter->securitypriv.dot11PrivacyAlgrthm=_WEP40_;
+                                       break;
+                               case 13:
+                                       padapter->securitypriv.dot11PrivacyAlgrthm=_WEP104_;
+                                       break;
+                               default:
+                                       padapter->securitypriv.dot11PrivacyAlgrthm=_NO_PRIVACY_;
+                                       break;
+                       }
+
+                       goto exit;
+
+               }
+
+       }
+
+       wep.KeyIndex |= 0x80000000;
+
+       _rtw_memcpy(wep.KeyMaterial, keybuf, wep.KeyLength);
+
+       if (rtw_set_802_11_add_wep(padapter, &wep) == _FALSE) {
+               if(rf_on == pwrpriv->rf_pwrstate )
+                       ret = -EOPNOTSUPP;
+               goto exit;
+       }
+
+exit:
+
+       _func_exit_;
+
+       return ret;
+
+}
+
+static int rtw_wx_get_enc(struct net_device *dev,
+                           struct iw_request_info *info,
+                           union iwreq_data *wrqu, char *keybuf)
+{
+       uint key, ret =0;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct iw_point *erq = &(wrqu->encoding);
+       struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
+
+       _func_enter_;
+
+       if(check_fwstate(pmlmepriv, _FW_LINKED) != _TRUE)
+       {
+                if(check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) != _TRUE)
+                {
+               erq->length = 0;
+               erq->flags |= IW_ENCODE_DISABLED;
+               return 0;
+       }
+       }
+
+
+       key = erq->flags & IW_ENCODE_INDEX;
+
+       if (key) {
+               if (key > WEP_KEYS)
+                       return -EINVAL;
+               key--;
+       } else
+       {
+               key = padapter->securitypriv.dot11PrivacyKeyIndex;
+       }
+
+       erq->flags = key + 1;
+
+       //if(padapter->securitypriv.ndisauthtype == Ndis802_11AuthModeOpen)
+       //{
+       //      erq->flags |= IW_ENCODE_OPEN;
+       //}
+
+       switch(padapter->securitypriv.ndisencryptstatus)
+       {
+               case Ndis802_11EncryptionNotSupported:
+               case Ndis802_11EncryptionDisabled:
+
+               erq->length = 0;
+               erq->flags |= IW_ENCODE_DISABLED;
+
+               break;
+
+               case Ndis802_11Encryption1Enabled:
+
+               erq->length = padapter->securitypriv.dot11DefKeylen[key];
+
+               if(erq->length)
+               {
+                       _rtw_memcpy(keybuf, padapter->securitypriv.dot11DefKey[key].skey, padapter->securitypriv.dot11DefKeylen[key]);
+
+               erq->flags |= IW_ENCODE_ENABLED;
+
+                       if(padapter->securitypriv.ndisauthtype == Ndis802_11AuthModeOpen)
+                       {
+                               erq->flags |= IW_ENCODE_OPEN;
+                       }
+                       else if(padapter->securitypriv.ndisauthtype == Ndis802_11AuthModeShared)
+                       {
+               erq->flags |= IW_ENCODE_RESTRICTED;
+                       }
+               }
+               else
+               {
+                       erq->length = 0;
+                       erq->flags |= IW_ENCODE_DISABLED;
+               }
+
+               break;
+
+               case Ndis802_11Encryption2Enabled:
+               case Ndis802_11Encryption3Enabled:
+
+               erq->length = 16;
+               erq->flags |= (IW_ENCODE_ENABLED | IW_ENCODE_OPEN | IW_ENCODE_NOKEY);
+
+               break;
+
+               default:
+               erq->length = 0;
+               erq->flags |= IW_ENCODE_DISABLED;
+
+               break;
+
+       }
+
+       _func_exit_;
+
+       return ret;
+
+}
+
+static int rtw_wx_get_power(struct net_device *dev,
+                            struct iw_request_info *info,
+                            union iwreq_data *wrqu, char *extra)
+{
+       //_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+
+       wrqu->power.value = 0;
+       wrqu->power.fixed = 0;  /* no auto select */
+       wrqu->power.disabled = 1;
+
+       return 0;
+
+}
+
+static int rtw_wx_set_gen_ie(struct net_device *dev,
+                            struct iw_request_info *info,
+                            union iwreq_data *wrqu, char *extra)
+{
+       int ret;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+
+       ret = rtw_set_wpa_ie(padapter, extra, wrqu->data.length);
+
+       return ret;
+}
+
+static int rtw_wx_set_auth(struct net_device *dev,
+                            struct iw_request_info *info,
+                            union iwreq_data *wrqu, char *extra)
+{
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct iw_param *param = (struct iw_param*)&(wrqu->param);
+       int ret = 0;
+
+       switch (param->flags & IW_AUTH_INDEX) {
+       case IW_AUTH_WPA_VERSION:
+               break;
+       case IW_AUTH_CIPHER_PAIRWISE:
+
+               break;
+       case IW_AUTH_CIPHER_GROUP:
+
+               break;
+       case IW_AUTH_KEY_MGMT:
+               /*
+                *  ??? does not use these parameters
+                */
+               break;
+
+       case IW_AUTH_TKIP_COUNTERMEASURES:
+        {
+           if ( param->value )
+            {  // wpa_supplicant is enabling the tkip countermeasure.
+               padapter->securitypriv.btkip_countermeasure = _TRUE;
+            }
+            else
+            {  // wpa_supplicant is disabling the tkip countermeasure.
+               padapter->securitypriv.btkip_countermeasure = _FALSE;
+            }
+               break;
+        }
+       case IW_AUTH_DROP_UNENCRYPTED:
+               {
+                       /* HACK:
+                        *
+                        * wpa_supplicant calls set_wpa_enabled when the driver
+                        * is loaded and unloaded, regardless of if WPA is being
+                        * used.  No other calls are made which can be used to
+                        * determine if encryption will be used or not prior to
+                        * association being expected.  If encryption is not being
+                        * used, drop_unencrypted is set to false, else true -- we
+                        * can use this to determine if the CAP_PRIVACY_ON bit should
+                        * be set.
+                        */
+
+                       if(padapter->securitypriv.ndisencryptstatus == Ndis802_11Encryption1Enabled)
+                       {
+                               break;//it means init value, or using wep, ndisencryptstatus = Ndis802_11Encryption1Enabled,
+                                               // then it needn't reset it;
+                       }
+
+                       if(param->value){
+                               padapter->securitypriv.ndisencryptstatus = Ndis802_11EncryptionDisabled;
+                               padapter->securitypriv.dot11PrivacyAlgrthm=_NO_PRIVACY_;
+                               padapter->securitypriv.dot118021XGrpPrivacy=_NO_PRIVACY_;
+                               padapter->securitypriv.dot11AuthAlgrthm= dot11AuthAlgrthm_Open; //open system
+                               padapter->securitypriv.ndisauthtype=Ndis802_11AuthModeOpen;
+                       }
+
+                       break;
+               }
+
+       case IW_AUTH_80211_AUTH_ALG:
+
+               #if defined(CONFIG_ANDROID) || 1
+               /*
+                *  It's the starting point of a link layer connection using wpa_supplicant
+               */
+               if(check_fwstate(&padapter->mlmepriv, _FW_LINKED)) {
+                       LeaveAllPowerSaveMode(padapter);
+                       rtw_disassoc_cmd(padapter, 500, _FALSE);
+                       DBG_871X("%s...call rtw_indicate_disconnect\n ",__FUNCTION__);
+                       rtw_indicate_disconnect(padapter);
+                       rtw_free_assoc_resources(padapter, 1);
+               }
+               #endif
+
+
+               ret = wpa_set_auth_algs(dev, (u32)param->value);
+
+               break;
+
+       case IW_AUTH_WPA_ENABLED:
+
+               //if(param->value)
+               //      padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_8021X; //802.1x
+               //else
+               //      padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open;//open system
+
+               //_disassociate(priv);
+
+               break;
+
+       case IW_AUTH_RX_UNENCRYPTED_EAPOL:
+               //ieee->ieee802_1x = param->value;
+               break;
+
+       case IW_AUTH_PRIVACY_INVOKED:
+               //ieee->privacy_invoked = param->value;
+               break;
+
+       default:
+               return -EOPNOTSUPP;
+
+       }
+
+       return ret;
+
+}
+
+static int rtw_wx_set_enc_ext(struct net_device *dev,
+                            struct iw_request_info *info,
+                            union iwreq_data *wrqu, char *extra)
+{
+       char *alg_name;
+       u32 param_len;
+       struct ieee_param *param = NULL;
+       struct iw_point *pencoding = &wrqu->encoding;
+       struct iw_encode_ext *pext = (struct iw_encode_ext *)extra;
+       int ret=0;
+
+       param_len = sizeof(struct ieee_param) + pext->key_len;
+       param = (struct ieee_param *)rtw_malloc(param_len);
+       if (param == NULL)
+               return -1;
+
+       _rtw_memset(param, 0, param_len);
+
+       param->cmd = IEEE_CMD_SET_ENCRYPTION;
+       _rtw_memset(param->sta_addr, 0xff, ETH_ALEN);
+
+
+       switch (pext->alg) {
+       case IW_ENCODE_ALG_NONE:
+               //todo: remove key
+               //remove = 1;
+               alg_name = "none";
+               break;
+       case IW_ENCODE_ALG_WEP:
+               alg_name = "WEP";
+               break;
+       case IW_ENCODE_ALG_TKIP:
+               alg_name = "TKIP";
+               break;
+       case IW_ENCODE_ALG_CCMP:
+               alg_name = "CCMP";
+               break;
+#ifdef CONFIG_IEEE80211W
+       case IW_ENCODE_ALG_AES_CMAC:
+               alg_name = "BIP";
+               break;
+#endif //CONFIG_IEEE80211W
+       default:
+               return -1;
+       }
+
+       strncpy((char *)param->u.crypt.alg, alg_name, IEEE_CRYPT_ALG_NAME_LEN);
+
+
+       if((pext->ext_flags & IW_ENCODE_EXT_GROUP_KEY)//?
+#ifdef CONFIG_IEEE80211W
+               || (pext->ext_flags & IW_ENCODE_ALG_AES_CMAC)
+#endif //CONFIG_IEEE80211W
+       )
+       {
+               param->u.crypt.set_tx = 0;
+       }
+
+       if (pext->ext_flags & IW_ENCODE_EXT_SET_TX_KEY)//?
+       {
+               param->u.crypt.set_tx = 1;
+       }
+
+       param->u.crypt.idx = (pencoding->flags&0x00FF) -1 ;
+
+       if (pext->ext_flags & IW_ENCODE_EXT_RX_SEQ_VALID)
+       {
+               _rtw_memcpy(param->u.crypt.seq, pext->rx_seq, 8);
+       }
+
+       if(pext->key_len)
+       {
+               param->u.crypt.key_len = pext->key_len;
+               //_rtw_memcpy(param + 1, pext + 1, pext->key_len);
+               _rtw_memcpy(param->u.crypt.key, pext + 1, pext->key_len);
+       }
+
+
+       if (pencoding->flags & IW_ENCODE_DISABLED)
+       {
+               //todo: remove key
+               //remove = 1;
+       }
+
+       ret =  wpa_set_encryption(dev, param, param_len);
+
+
+       if(param)
+       {
+               rtw_mfree((u8*)param, param_len);
+       }
+
+
+       return ret;
+
+}
+
+
+static int rtw_wx_get_nick(struct net_device *dev,
+                            struct iw_request_info *info,
+                            union iwreq_data *wrqu, char *extra)
+{
+       //_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+        //struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+        //struct security_priv *psecuritypriv = &padapter->securitypriv;
+
+       if(extra)
+       {
+               wrqu->data.length = 14;
+               wrqu->data.flags = 1;
+               _rtw_memcpy(extra, "<WIFI@REALTEK>", 14);
+       }
+
+       //rtw_signal_process(pid, SIGUSR1); //for test
+
+       //dump debug info here
+/*
+       u32 dot11AuthAlgrthm;           // 802.11 auth, could be open, shared, and 8021x
+       u32 dot11PrivacyAlgrthm;        // This specify the privacy for shared auth. algorithm.
+       u32 dot118021XGrpPrivacy;       // This specify the privacy algthm. used for Grp key
+       u32 ndisauthtype;
+       u32 ndisencryptstatus;
+*/
+
+       //DBG_871X("auth_alg=0x%x, enc_alg=0x%x, auth_type=0x%x, enc_type=0x%x\n",
+       //              psecuritypriv->dot11AuthAlgrthm, psecuritypriv->dot11PrivacyAlgrthm,
+       //              psecuritypriv->ndisauthtype, psecuritypriv->ndisencryptstatus);
+
+       //DBG_871X("enc_alg=0x%x\n", psecuritypriv->dot11PrivacyAlgrthm);
+       //DBG_871X("auth_type=0x%x\n", psecuritypriv->ndisauthtype);
+       //DBG_871X("enc_type=0x%x\n", psecuritypriv->ndisencryptstatus);
+
+#if 0
+       DBG_871X("dbg(0x210)=0x%x\n", rtw_read32(padapter, 0x210));
+       DBG_871X("dbg(0x608)=0x%x\n", rtw_read32(padapter, 0x608));
+       DBG_871X("dbg(0x280)=0x%x\n", rtw_read32(padapter, 0x280));
+       DBG_871X("dbg(0x284)=0x%x\n", rtw_read32(padapter, 0x284));
+       DBG_871X("dbg(0x288)=0x%x\n", rtw_read32(padapter, 0x288));
+
+       DBG_871X("dbg(0x664)=0x%x\n", rtw_read32(padapter, 0x664));
+
+
+       DBG_871X("\n");
+
+       DBG_871X("dbg(0x430)=0x%x\n", rtw_read32(padapter, 0x430));
+       DBG_871X("dbg(0x438)=0x%x\n", rtw_read32(padapter, 0x438));
+
+       DBG_871X("dbg(0x440)=0x%x\n", rtw_read32(padapter, 0x440));
+
+       DBG_871X("dbg(0x458)=0x%x\n", rtw_read32(padapter, 0x458));
+
+       DBG_871X("dbg(0x484)=0x%x\n", rtw_read32(padapter, 0x484));
+       DBG_871X("dbg(0x488)=0x%x\n", rtw_read32(padapter, 0x488));
+
+       DBG_871X("dbg(0x444)=0x%x\n", rtw_read32(padapter, 0x444));
+       DBG_871X("dbg(0x448)=0x%x\n", rtw_read32(padapter, 0x448));
+       DBG_871X("dbg(0x44c)=0x%x\n", rtw_read32(padapter, 0x44c));
+       DBG_871X("dbg(0x450)=0x%x\n", rtw_read32(padapter, 0x450));
+#endif
+
+       return 0;
+
+}
+
+static int rtw_wx_read32(struct net_device *dev,
+                            struct iw_request_info *info,
+                            union iwreq_data *wrqu, char *extra)
+{
+       PADAPTER padapter;
+       struct iw_point *p;
+       u16 len;
+       u32 addr;
+       u32 data32;
+       u32 bytes;
+       u8 *ptmp;
+
+
+       padapter = (PADAPTER)rtw_netdev_priv(dev);
+       p = &wrqu->data;
+       len = p->length;
+       ptmp = (u8*)rtw_malloc(len);
+       if (NULL == ptmp)
+               return -ENOMEM;
+
+       if (copy_from_user(ptmp, p->pointer, len)) {
+               rtw_mfree(ptmp, len);
+               return -EFAULT;
+       }
+
+       bytes = 0;
+       addr = 0;
+       sscanf(ptmp, "%d,%x", &bytes, &addr);
+
+       switch (bytes) {
+               case 1:
+                       data32 = rtw_read8(padapter, addr);
+                       sprintf(extra, "0x%02X", data32);
+                       break;
+               case 2:
+                       data32 = rtw_read16(padapter, addr);
+                       sprintf(extra, "0x%04X", data32);
+                       break;
+               case 4:
+                       data32 = rtw_read32(padapter, addr);
+                       sprintf(extra, "0x%08X", data32);
+                       break;
+               default:
+                       printk(KERN_INFO "%s: usage> read [bytes],[address(hex)]\n", __func__);
+                       return -EINVAL;
+       }
+       printk(KERN_INFO "%s: addr=0x%08X data=%s\n", __func__, addr, extra);
+
+       rtw_mfree(ptmp, len);
+
+       return 0;
+}
+
+static int rtw_wx_write32(struct net_device *dev,
+                            struct iw_request_info *info,
+                            union iwreq_data *wrqu, char *extra)
+{
+       PADAPTER padapter = (PADAPTER)rtw_netdev_priv(dev);
+
+       u32 addr;
+       u32 data32;
+       u32 bytes;
+
+
+       bytes = 0;
+       addr = 0;
+       data32 = 0;
+       sscanf(extra, "%d,%x,%x", &bytes, &addr, &data32);
+
+       switch (bytes) {
+               case 1:
+                       rtw_write8(padapter, addr, (u8)data32);
+                       printk(KERN_INFO "%s: addr=0x%08X data=0x%02X\n", __func__, addr, (u8)data32);
+                       break;
+               case 2:
+                       rtw_write16(padapter, addr, (u16)data32);
+                       printk(KERN_INFO "%s: addr=0x%08X data=0x%04X\n", __func__, addr, (u16)data32);
+                       break;
+               case 4:
+                       rtw_write32(padapter, addr, data32);
+                       printk(KERN_INFO "%s: addr=0x%08X data=0x%08X\n", __func__, addr, data32);
+                       break;
+               default:
+                       printk(KERN_INFO "%s: usage> write [bytes],[address(hex)],[data(hex)]\n", __func__);
+                       return -EINVAL;
+       }
+
+       return 0;
+}
+
+static int rtw_wx_read_rf(struct net_device *dev,
+                            struct iw_request_info *info,
+                            union iwreq_data *wrqu, char *extra)
+{
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       u32 path, addr, data32;
+
+
+       path = *(u32*)extra;
+       addr = *((u32*)extra + 1);
+       data32 = rtw_hal_read_rfreg(padapter, path, addr, 0xFFFFF);
+//     DBG_871X("%s: path=%d addr=0x%02x data=0x%05x\n", __func__, path, addr, data32);
+       /*
+        * IMPORTANT!!
+        * Only when wireless private ioctl is at odd order,
+        * "extra" would be copied to user space.
+        */
+       sprintf(extra, "0x%05x", data32);
+
+       return 0;
+}
+
+static int rtw_wx_write_rf(struct net_device *dev,
+                            struct iw_request_info *info,
+                            union iwreq_data *wrqu, char *extra)
+{
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       u32 path, addr, data32;
+
+
+       path = *(u32*)extra;
+       addr = *((u32*)extra + 1);
+       data32 = *((u32*)extra + 2);
+//     DBG_871X("%s: path=%d addr=0x%02x data=0x%05x\n", __func__, path, addr, data32);
+       rtw_hal_write_rfreg(padapter, path, addr, 0xFFFFF, data32);
+
+       return 0;
+}
+
+static int rtw_wx_priv_null(struct net_device *dev, struct iw_request_info *a,
+                union iwreq_data *wrqu, char *b)
+{
+       return -1;
+}
+
+static int dummy(struct net_device *dev, struct iw_request_info *a,
+                union iwreq_data *wrqu, char *b)
+{
+       //_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       //struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+
+       //DBG_871X("cmd_code=%x, fwstate=0x%x\n", a->cmd, get_fwstate(pmlmepriv));
+
+       return -1;
+
+}
+
+static int rtw_wx_set_channel_plan(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct registry_priv *pregistrypriv = &padapter->registrypriv;
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+       extern int rtw_channel_plan;
+       u8 channel_plan_req = (u8) (*((int *)wrqu));
+
+       #if 0
+       rtw_channel_plan = (int)wrqu->data.pointer;
+       pregistrypriv->channel_plan = rtw_channel_plan;
+       pmlmepriv->ChannelPlan = pregistrypriv->channel_plan;
+       #endif
+
+       if( _SUCCESS == rtw_set_chplan_cmd(padapter, channel_plan_req, 1) ) {
+               DBG_871X("%s set channel_plan = 0x%02X\n", __func__, pmlmepriv->ChannelPlan);
+       } else
+               return -EPERM;
+
+       return 0;
+}
+
+static int rtw_wx_set_mtk_wps_probe_ie(struct net_device *dev,
+               struct iw_request_info *a,
+               union iwreq_data *wrqu, char *b)
+{
+#ifdef CONFIG_PLATFORM_MT53XX
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+
+       RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_notice_,
+                ("WLAN IOCTL: cmd_code=%x, fwstate=0x%x\n",
+                 a->cmd, get_fwstate(pmlmepriv)));
+#endif
+       return 0;
+}
+
+static int rtw_wx_get_sensitivity(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *buf)
+{
+#ifdef CONFIG_PLATFORM_MT53XX
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+
+       //      Modified by Albert 20110914
+       //      This is in dbm format for MTK platform.
+       wrqu->qual.level = padapter->recvpriv.rssi;
+       DBG_871X(" level = %u\n",  wrqu->qual.level );
+#endif
+       return 0;
+}
+
+static int rtw_wx_set_mtk_wps_ie(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+#ifdef CONFIG_PLATFORM_MT53XX
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+
+       return rtw_set_wpa_ie(padapter, wrqu->data.pointer, wrqu->data.length);
+#else
+       return 0;
+#endif
+}
+
+/*
+typedef int (*iw_handler)(struct net_device *dev, struct iw_request_info *info,
+                         union iwreq_data *wrqu, char *extra);
+*/
+/*
+ *     For all data larger than 16 octets, we need to use a
+ *     pointer to memory allocated in user space.
+ */
+static  int rtw_drvext_hdl(struct net_device *dev, struct iw_request_info *info,
+                                               union iwreq_data *wrqu, char *extra)
+{
+
+ #if 0
+struct iw_point
+{
+  void __user  *pointer;       /* Pointer to the data  (in user space) */
+  __u16                length;         /* number of fields or size in bytes */
+  __u16                flags;          /* Optional params */
+};
+ #endif
+
+#ifdef CONFIG_DRVEXT_MODULE
+       u8 res;
+       struct drvext_handler *phandler;
+       struct drvext_oidparam *poidparam;
+       int ret;
+       u16 len;
+       u8 *pparmbuf, bset;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct iw_point *p = &wrqu->data;
+
+       if( (!p->length) || (!p->pointer)){
+               ret = -EINVAL;
+               goto _rtw_drvext_hdl_exit;
+       }
+
+
+       bset = (u8)(p->flags&0xFFFF);
+       len = p->length;
+       pparmbuf = (u8*)rtw_malloc(len);
+       if (pparmbuf == NULL){
+               ret = -ENOMEM;
+               goto _rtw_drvext_hdl_exit;
+       }
+
+       if(bset)//set info
+       {
+               if (copy_from_user(pparmbuf, p->pointer,len)) {
+                       rtw_mfree(pparmbuf, len);
+                       ret = -EFAULT;
+                       goto _rtw_drvext_hdl_exit;
+               }
+       }
+       else//query info
+       {
+
+       }
+
+
+       //
+       poidparam = (struct drvext_oidparam *)pparmbuf;
+
+       RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_info_,("drvext set oid subcode [%d], len[%d], InformationBufferLength[%d]\r\n",
+                                                poidparam->subcode, poidparam->len, len));
+
+
+       //check subcode
+       if ( poidparam->subcode >= MAX_DRVEXT_HANDLERS)
+       {
+               RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,("no matching drvext handlers\r\n"));
+               ret = -EINVAL;
+               goto _rtw_drvext_hdl_exit;
+       }
+
+
+       if ( poidparam->subcode >= MAX_DRVEXT_OID_SUBCODES)
+       {
+               RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,("no matching drvext subcodes\r\n"));
+               ret = -EINVAL;
+               goto _rtw_drvext_hdl_exit;
+       }
+
+
+       phandler = drvextoidhandlers + poidparam->subcode;
+
+       if (poidparam->len != phandler->parmsize)
+       {
+               RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,("no matching drvext param size %d vs %d\r\n",
+                                               poidparam->len , phandler->parmsize));
+               ret = -EINVAL;
+               goto _rtw_drvext_hdl_exit;
+       }
+
+
+       res = phandler->handler(&padapter->drvextpriv, bset, poidparam->data);
+
+       if(res==0)
+       {
+               ret = 0;
+
+               if (bset == 0x00) {//query info
+                       //_rtw_memcpy(p->pointer, pparmbuf, len);
+                       if (copy_to_user(p->pointer, pparmbuf, len))
+                               ret = -EFAULT;
+               }
+       }
+       else
+               ret = -EFAULT;
+
+
+_rtw_drvext_hdl_exit:
+
+       return ret;
+
+#endif
+
+       return 0;
+
+}
+
+static void rtw_dbg_mode_hdl(_adapter *padapter, u32 id, u8 *pdata, u32 len)
+{
+       pRW_Reg         RegRWStruct;
+       struct rf_reg_param *prfreg;
+       u8 path;
+       u8 offset;
+       u32 value;
+
+       DBG_871X("%s\n", __FUNCTION__);
+
+       switch(id)
+       {
+               case GEN_MP_IOCTL_SUBCODE(MP_START):
+                       DBG_871X("871x_driver is only for normal mode, can't enter mp mode\n");
+                       break;
+               case GEN_MP_IOCTL_SUBCODE(READ_REG):
+                       RegRWStruct = (pRW_Reg)pdata;
+                       switch (RegRWStruct->width)
+                       {
+                               case 1:
+                                       RegRWStruct->value = rtw_read8(padapter, RegRWStruct->offset);
+                                       break;
+                               case 2:
+                                       RegRWStruct->value = rtw_read16(padapter, RegRWStruct->offset);
+                                       break;
+                               case 4:
+                                       RegRWStruct->value = rtw_read32(padapter, RegRWStruct->offset);
+                                       break;
+                               default:
+                                       break;
+                       }
+
+                       break;
+               case GEN_MP_IOCTL_SUBCODE(WRITE_REG):
+                       RegRWStruct = (pRW_Reg)pdata;
+                       switch (RegRWStruct->width)
+                       {
+                               case 1:
+                                       rtw_write8(padapter, RegRWStruct->offset, (u8)RegRWStruct->value);
+                                       break;
+                               case 2:
+                                       rtw_write16(padapter, RegRWStruct->offset, (u16)RegRWStruct->value);
+                                       break;
+                               case 4:
+                                       rtw_write32(padapter, RegRWStruct->offset, (u32)RegRWStruct->value);
+                                       break;
+                               default:
+                               break;
+                       }
+
+                       break;
+               case GEN_MP_IOCTL_SUBCODE(READ_RF_REG):
+
+                       prfreg = (struct rf_reg_param *)pdata;
+
+                       path = (u8)prfreg->path;
+                       offset = (u8)prfreg->offset;
+
+                       value = rtw_hal_read_rfreg(padapter, path, offset, 0xffffffff);
+
+                       prfreg->value = value;
+
+                       break;
+               case GEN_MP_IOCTL_SUBCODE(WRITE_RF_REG):
+
+                       prfreg = (struct rf_reg_param *)pdata;
+
+                       path = (u8)prfreg->path;
+                       offset = (u8)prfreg->offset;
+                       value = prfreg->value;
+
+                       rtw_hal_write_rfreg(padapter, path, offset, 0xffffffff, value);
+
+                       break;
+                case GEN_MP_IOCTL_SUBCODE(TRIGGER_GPIO):
+                       DBG_871X("==> trigger gpio 0\n");
+                       rtw_hal_set_hwreg(padapter, HW_VAR_TRIGGER_GPIO_0, 0);
+                       break;
+#ifdef CONFIG_BT_COEXIST
+               case GEN_MP_IOCTL_SUBCODE(SET_DM_BT):
+                       DBG_871X("==> set dm_bt_coexist:%x\n",*(u8 *)pdata);
+                       rtw_hal_set_hwreg(padapter, HW_VAR_BT_SET_COEXIST, pdata);
+                       break;
+               case GEN_MP_IOCTL_SUBCODE(DEL_BA):
+                       DBG_871X("==> delete ba:%x\n",*(u8 *)pdata);
+                       rtw_hal_set_hwreg(padapter, HW_VAR_BT_ISSUE_DELBA, pdata);
+                       break;
+#endif
+#ifdef DBG_CONFIG_ERROR_DETECT
+               case GEN_MP_IOCTL_SUBCODE(GET_WIFI_STATUS):
+                       *pdata = rtw_hal_sreset_get_wifi_status(padapter);
+                       break;
+#endif
+
+               default:
+                       break;
+       }
+
+}
+
+static int rtw_mp_ioctl_hdl(struct net_device *dev, struct iw_request_info *info,
+                                               union iwreq_data *wrqu, char *extra)
+{
+       int ret = 0;
+       u32 BytesRead, BytesWritten, BytesNeeded;
+       struct oid_par_priv     oid_par;
+       struct mp_ioctl_handler *phandler;
+       struct mp_ioctl_param   *poidparam;
+       uint status=0;
+       u16 len;
+       u8 *pparmbuf = NULL, bset;
+       PADAPTER padapter = (PADAPTER)rtw_netdev_priv(dev);
+       struct iw_point *p = &wrqu->data;
+
+       //DBG_871X("+rtw_mp_ioctl_hdl\n");
+
+       //mutex_lock(&ioctl_mutex);
+
+       if ((!p->length) || (!p->pointer)) {
+               ret = -EINVAL;
+               goto _rtw_mp_ioctl_hdl_exit;
+       }
+
+       pparmbuf = NULL;
+       bset = (u8)(p->flags & 0xFFFF);
+       len = p->length;
+       pparmbuf = (u8*)rtw_malloc(len);
+       if (pparmbuf == NULL){
+               ret = -ENOMEM;
+               goto _rtw_mp_ioctl_hdl_exit;
+       }
+
+       if (copy_from_user(pparmbuf, p->pointer, len)) {
+               ret = -EFAULT;
+               goto _rtw_mp_ioctl_hdl_exit;
+       }
+
+       poidparam = (struct mp_ioctl_param *)pparmbuf;
+       RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
+                ("rtw_mp_ioctl_hdl: subcode [%d], len[%d], buffer_len[%d]\r\n",
+                 poidparam->subcode, poidparam->len, len));
+
+       if (poidparam->subcode >= MAX_MP_IOCTL_SUBCODE) {
+               RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_err_, ("no matching drvext subcodes\r\n"));
+               ret = -EINVAL;
+               goto _rtw_mp_ioctl_hdl_exit;
+       }
+
+       //DBG_871X("%s: %d\n", __func__, poidparam->subcode);
+
+#ifdef CONFIG_MP_INCLUDED
+       phandler = mp_ioctl_hdl + poidparam->subcode;
+
+       if ((phandler->paramsize != 0) && (poidparam->len < phandler->paramsize))
+       {
+               RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_err_,
+                        ("no matching drvext param size %d vs %d\r\n",
+                         poidparam->len, phandler->paramsize));
+               ret = -EINVAL;
+               goto _rtw_mp_ioctl_hdl_exit;
+       }
+
+       if (phandler->handler)
+       {
+               oid_par.adapter_context = padapter;
+               oid_par.oid = phandler->oid;
+               oid_par.information_buf = poidparam->data;
+               oid_par.information_buf_len = poidparam->len;
+               oid_par.dbg = 0;
+
+               BytesWritten = 0;
+               BytesNeeded = 0;
+
+               if (bset) {
+                       oid_par.bytes_rw = &BytesRead;
+                       oid_par.bytes_needed = &BytesNeeded;
+                       oid_par.type_of_oid = SET_OID;
+               } else {
+                       oid_par.bytes_rw = &BytesWritten;
+                       oid_par.bytes_needed = &BytesNeeded;
+                       oid_par.type_of_oid = QUERY_OID;
+               }
+
+               status = phandler->handler(&oid_par);
+
+               //todo:check status, BytesNeeded, etc.
+       }
+       else {
+               DBG_871X("rtw_mp_ioctl_hdl(): err!, subcode=%d, oid=%d, handler=%p\n",
+                       poidparam->subcode, phandler->oid, phandler->handler);
+               ret = -EFAULT;
+               goto _rtw_mp_ioctl_hdl_exit;
+       }
+#else
+
+       rtw_dbg_mode_hdl(padapter, poidparam->subcode, poidparam->data, poidparam->len);
+
+#endif
+
+       if (bset == 0x00) {//query info
+               if (copy_to_user(p->pointer, pparmbuf, len))
+                       ret = -EFAULT;
+       }
+
+       if (status) {
+               ret = -EFAULT;
+               goto _rtw_mp_ioctl_hdl_exit;
+       }
+
+_rtw_mp_ioctl_hdl_exit:
+
+       if (pparmbuf)
+               rtw_mfree(pparmbuf, len);
+
+       //mutex_unlock(&ioctl_mutex);
+
+       return ret;
+}
+
+static int rtw_get_ap_info(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+       int bssid_match, ret = 0;
+       u32 cnt=0, wpa_ielen;
+       _irqL   irqL;
+       _list   *plist, *phead;
+       unsigned char *pbuf;
+       u8 bssid[ETH_ALEN];
+       char data[32];
+       struct wlan_network *pnetwork = NULL;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+       _queue *queue = &(pmlmepriv->scanned_queue);
+       struct iw_point *pdata = &wrqu->data;
+
+       DBG_871X("+rtw_get_aplist_info\n");
+
+       if((padapter->bDriverStopped) || (pdata==NULL))
+       {
+               ret= -EINVAL;
+               goto exit;
+       }
+
+       while((check_fwstate(pmlmepriv, (_FW_UNDER_SURVEY|_FW_UNDER_LINKING))) == _TRUE)
+       {
+               rtw_msleep_os(30);
+               cnt++;
+               if(cnt > 100)
+                       break;
+       }
+
+
+       //pdata->length = 0;//?
+       pdata->flags = 0;
+       if(pdata->length>=32)
+       {
+               if(copy_from_user(data, pdata->pointer, 32))
+               {
+                       ret= -EINVAL;
+                       goto exit;
+               }
+       }
+       else
+       {
+               ret= -EINVAL;
+               goto exit;
+       }
+
+       _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+
+       phead = get_list_head(queue);
+       plist = get_next(phead);
+
+       while(1)
+       {
+               if (rtw_end_of_queue_search(phead,plist)== _TRUE)
+                       break;
+
+
+               pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
+
+               //if(hwaddr_aton_i(pdata->pointer, bssid))
+               if(hwaddr_aton_i(data, bssid))
+               {
+                       DBG_871X("Invalid BSSID '%s'.\n", (u8*)data);
+                       _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+                       return -EINVAL;
+               }
+
+
+               if(_rtw_memcmp(bssid, pnetwork->network.MacAddress, ETH_ALEN) == _TRUE)//BSSID match, then check if supporting wpa/wpa2
+               {
+                       DBG_871X("BSSID:" MAC_FMT "\n", MAC_ARG(bssid));
+
+                       pbuf = rtw_get_wpa_ie(&pnetwork->network.IEs[12], &wpa_ielen, pnetwork->network.IELength-12);
+                       if(pbuf && (wpa_ielen>0))
+                       {
+                               pdata->flags = 1;
+                               break;
+                       }
+
+                       pbuf = rtw_get_wpa2_ie(&pnetwork->network.IEs[12], &wpa_ielen, pnetwork->network.IELength-12);
+                       if(pbuf && (wpa_ielen>0))
+                       {
+                               pdata->flags = 2;
+                               break;
+                       }
+
+               }
+
+               plist = get_next(plist);
+
+       }
+
+       _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+
+       if(pdata->length>=34)
+       {
+               if(copy_to_user((u8*)pdata->pointer+32, (u8*)&pdata->flags, 1))
+               {
+                       ret= -EINVAL;
+                       goto exit;
+               }
+       }
+
+exit:
+
+       return ret;
+
+}
+
+static int rtw_set_pid(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+
+       int ret = 0;
+       _adapter *padapter = rtw_netdev_priv(dev);
+       int *pdata = (int *)wrqu;
+       int selector;
+
+       if((padapter->bDriverStopped) || (pdata==NULL))
+       {
+               ret= -EINVAL;
+               goto exit;
+       }
+
+       selector = *pdata;
+       if(selector < 3 && selector >=0) {
+               padapter->pid[selector] = *(pdata+1);
+               #ifdef CONFIG_GLOBAL_UI_PID
+               ui_pid[selector] = *(pdata+1);
+               #endif
+               DBG_871X("%s set pid[%d]=%d\n", __FUNCTION__, selector ,padapter->pid[selector]);
+       }
+       else
+               DBG_871X("%s selector %d error\n", __FUNCTION__, selector);
+
+exit:
+
+       return ret;
+
+}
+
+static int rtw_wps_start(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+
+       int ret = 0;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct iw_point *pdata = &wrqu->data;
+       u32   u32wps_start = 0;
+        unsigned int uintRet = 0;
+
+        uintRet = copy_from_user( ( void* ) &u32wps_start, pdata->pointer, 4 );
+
+       if((padapter->bDriverStopped) || (pdata==NULL))
+       {
+               ret= -EINVAL;
+               goto exit;
+       }
+
+       if ( u32wps_start == 0 )
+       {
+               u32wps_start = *extra;
+       }
+
+       DBG_871X( "[%s] wps_start = %d\n", __FUNCTION__, u32wps_start );
+
+       if ( u32wps_start == 1 ) // WPS Start
+       {
+               rtw_led_control(padapter, LED_CTL_START_WPS);
+       }
+       else if ( u32wps_start == 2 ) // WPS Stop because of wps success
+       {
+               rtw_led_control(padapter, LED_CTL_STOP_WPS);
+       }
+       else if ( u32wps_start == 3 ) // WPS Stop because of wps fail
+       {
+               rtw_led_control(padapter, LED_CTL_STOP_WPS_FAIL);
+       }
+
+#ifdef CONFIG_INTEL_WIDI
+       process_intel_widi_wps_status(padapter, u32wps_start);
+#endif //CONFIG_INTEL_WIDI
+
+exit:
+
+       return ret;
+
+}
+
+#ifdef CONFIG_P2P
+static int rtw_wext_p2p_enable(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+
+       int ret = 0;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+       struct iw_point *pdata = &wrqu->data;
+       struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
+       enum P2P_ROLE init_role = P2P_ROLE_DISABLE;
+
+       if(*extra == '0' )
+               init_role = P2P_ROLE_DISABLE;
+       else if(*extra == '1')
+               init_role = P2P_ROLE_DEVICE;
+       else if(*extra == '2')
+               init_role = P2P_ROLE_CLIENT;
+       else if(*extra == '3')
+               init_role = P2P_ROLE_GO;
+
+       if(_FAIL == rtw_p2p_enable(padapter, init_role))
+       {
+               ret = -EFAULT;
+               goto exit;
+       }
+
+       //set channel/bandwidth
+       if(init_role != P2P_ROLE_DISABLE)
+       {
+               u8 channel, ch_offset;
+               u16 bwmode;
+
+               if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_LISTEN))
+               {
+                       //      Stay at the listen state and wait for discovery.
+                       channel = pwdinfo->listen_channel;
+                       pwdinfo->operating_channel = pwdinfo->listen_channel;
+                       ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+                       bwmode = HT_CHANNEL_WIDTH_20;
+               }
+#ifdef CONFIG_CONCURRENT_MODE
+               else if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_IDLE))
+               {
+                       _adapter                                *pbuddy_adapter = padapter->pbuddy_adapter;
+                       //struct wifidirect_info        *pbuddy_wdinfo = &pbuddy_adapter->wdinfo;
+                       struct mlme_priv                *pbuddy_mlmepriv = &pbuddy_adapter->mlmepriv;
+                       struct mlme_ext_priv    *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
+
+                       _set_timer( &pwdinfo->ap_p2p_switch_timer, pwdinfo->ext_listen_interval );
+                       if ( check_fwstate( pbuddy_mlmepriv, _FW_LINKED ) )
+                       {
+                               pwdinfo->operating_channel = pbuddy_mlmeext->cur_channel;
+                               //      How about the ch_offset and bwmode ??
+                       }
+                       else
+                       {
+                               pwdinfo->operating_channel = pwdinfo->listen_channel;
+                       }
+
+                       channel = pbuddy_mlmeext->cur_channel;
+                       ch_offset = pbuddy_mlmeext->cur_ch_offset;
+                       bwmode = pbuddy_mlmeext->cur_bwmode;
+               }
+#endif
+               else
+               {
+                       pwdinfo->operating_channel = pmlmeext->cur_channel;
+
+                       channel = pwdinfo->operating_channel;
+                       ch_offset = pmlmeext->cur_ch_offset;
+                       bwmode = pmlmeext->cur_bwmode;
+               }
+
+               set_channel_bwmode(padapter, channel, ch_offset, bwmode);
+       }
+
+exit:
+       return ret;
+
+}
+
+static int rtw_p2p_set_go_nego_ssid(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+
+       int ret = 0;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+       struct iw_point *pdata = &wrqu->data;
+       struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
+
+       DBG_871X( "[%s] ssid = %s, len = %d\n", __FUNCTION__, extra, (u32)strlen( extra ) );
+       _rtw_memcpy( pwdinfo->nego_ssid, extra, strlen( extra ) );
+       pwdinfo->nego_ssidlen = strlen( extra );
+
+       return ret;
+
+}
+
+
+static int rtw_p2p_set_intent(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+       int                                                     ret = 0;
+       _adapter                                                *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct wifidirect_info                  *pwdinfo= &(padapter->wdinfo);
+       u8                                                      intent = pwdinfo->intent;
+
+       extra[ wrqu->data.length ] = 0x00;
+
+       intent = rtw_atoi( extra );
+
+       if ( intent <= 15 )
+       {
+               pwdinfo->intent= intent;
+       }
+       else
+       {
+               ret = -1;
+       }
+
+       DBG_871X( "[%s] intent = %d\n", __FUNCTION__, intent);
+
+       return ret;
+
+}
+
+static int rtw_p2p_set_listen_ch(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+
+       int ret = 0;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
+       u8      listen_ch = pwdinfo->listen_channel;    //      Listen channel number
+
+       extra[ wrqu->data.length ] = 0x00;
+       listen_ch = rtw_atoi( extra );
+
+       if ( ( listen_ch == 1 ) || ( listen_ch == 6 ) || ( listen_ch == 11 ) )
+       {
+               pwdinfo->listen_channel = listen_ch;
+               set_channel_bwmode(padapter, pwdinfo->listen_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
+       }
+       else
+       {
+               ret = -1;
+       }
+
+       DBG_871X( "[%s] listen_ch = %d\n", __FUNCTION__, pwdinfo->listen_channel );
+
+       return ret;
+
+}
+
+static int rtw_p2p_set_op_ch(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+//     Commented by Albert 20110524
+//     This function is used to set the operating channel if the driver will become the group owner
+
+       int ret = 0;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
+       u8      op_ch = pwdinfo->operating_channel;     //      Operating channel number
+
+       extra[ wrqu->data.length ] = 0x00;
+
+       op_ch = ( u8 ) rtw_atoi( extra );
+       if ( op_ch > 0 )
+       {
+               pwdinfo->operating_channel = op_ch;
+       }
+       else
+       {
+               ret = -1;
+       }
+
+       DBG_871X( "[%s] op_ch = %d\n", __FUNCTION__, pwdinfo->operating_channel );
+
+       return ret;
+
+}
+
+
+static int rtw_p2p_profilefound(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+
+       int ret = 0;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
+
+       //      Comment by Albert 2010/10/13
+       //      Input data format:
+       //      Ex:  0
+       //      Ex:  1XX:XX:XX:XX:XX:XXYYSSID
+       //      0 => Reflush the profile record list.
+       //      1 => Add the profile list
+       //      XX:XX:XX:XX:XX:XX => peer's MAC Address ( ex: 00:E0:4C:00:00:01 )
+       //      YY => SSID Length
+       //      SSID => SSID for persistence group
+
+       DBG_871X( "[%s] In value = %s, len = %d \n", __FUNCTION__, extra, wrqu->data.length -1);
+
+
+       //      The upper application should pass the SSID to driver by using this rtw_p2p_profilefound function.
+       if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+       {
+               if ( extra[ 0 ] == '0' )
+               {
+                       //      Remove all the profile information of wifidirect_info structure.
+                       _rtw_memset( &pwdinfo->profileinfo[ 0 ], 0x00, sizeof( struct profile_info ) * P2P_MAX_PERSISTENT_GROUP_NUM );
+                       pwdinfo->profileindex = 0;
+               }
+               else
+               {
+                       if ( pwdinfo->profileindex >= P2P_MAX_PERSISTENT_GROUP_NUM )
+               {
+                               ret = -1;
+               }
+               else
+               {
+                               int jj, kk;
+
+                               //      Add this profile information into pwdinfo->profileinfo
+                               //      Ex:  1XX:XX:XX:XX:XX:XXYYSSID
+                               for( jj = 0, kk = 1; jj < ETH_ALEN; jj++, kk += 3 )
+                               {
+                                       pwdinfo->profileinfo[ pwdinfo->profileindex ].peermac[ jj ] = key_2char2num(extra[ kk ], extra[ kk+ 1 ]);
+                               }
+
+                               //pwdinfo->profileinfo[ pwdinfo->profileindex ].ssidlen = ( extra[18] - '0' ) * 10 + ( extra[ 19 ] - '0' );
+                               //_rtw_memcpy( pwdinfo->profileinfo[ pwdinfo->profileindex ].ssid, &extra[ 20 ], pwdinfo->profileinfo[ pwdinfo->profileindex ].ssidlen );
+                               pwdinfo->profileindex++;
+                       }
+               }
+       }
+
+       return ret;
+
+}
+
+static int rtw_p2p_setDN(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+
+       int ret = 0;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
+
+
+       DBG_871X( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
+
+       _rtw_memset( pwdinfo->device_name, 0x00, WPS_MAX_DEVICE_NAME_LEN );
+       _rtw_memcpy( pwdinfo->device_name, extra, wrqu->data.length - 1 );
+       pwdinfo->device_name_len = wrqu->data.length - 1;
+       return ret;
+
+}
+
+
+static int rtw_p2p_get_status(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+
+       int ret = 0;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct iw_point *pdata = &wrqu->data;
+       struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
+
+
+       if ( padapter->bShowGetP2PState )
+       {
+               DBG_871X( "[%s] Role = %d, Status = %d, peer addr = %.2X:%.2X:%.2X:%.2X:%.2X:%.2X\n", __FUNCTION__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
+                               pwdinfo->p2p_peer_interface_addr[ 0 ], pwdinfo->p2p_peer_interface_addr[ 1 ], pwdinfo->p2p_peer_interface_addr[ 2 ],
+                               pwdinfo->p2p_peer_interface_addr[ 3 ], pwdinfo->p2p_peer_interface_addr[ 4 ], pwdinfo->p2p_peer_interface_addr[ 5 ]);
+       }
+
+       //      Commented by Albert 2010/10/12
+       //      Because of the output size limitation, I had removed the "Role" information.
+       //      About the "Role" information, we will use the new private IOCTL to get the "Role" information.
+       sprintf( extra, "\n\nStatus=%.2d\n", rtw_p2p_state(pwdinfo) );
+       wrqu->data.length = strlen( extra );
+
+       return ret;
+
+}
+
+//     Commented by Albert 20110520
+//     This function will return the config method description
+//     This config method description will show us which config method the remote P2P device is intented to use
+//     by sending the provisioning discovery request frame.
+
+static int rtw_p2p_get_req_cm(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+
+       int ret = 0;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct iw_point *pdata = &wrqu->data;
+       struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
+
+       sprintf( extra, "\n\nCM=%s\n", pwdinfo->rx_prov_disc_info.strconfig_method_desc_of_prov_disc_req );
+       wrqu->data.length = strlen( extra );
+       return ret;
+
+}
+
+
+static int rtw_p2p_get_role(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+
+       int ret = 0;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct iw_point *pdata = &wrqu->data;
+       struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
+
+
+       DBG_871X( "[%s] Role = %d, Status = %d, peer addr = %.2X:%.2X:%.2X:%.2X:%.2X:%.2X\n", __FUNCTION__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
+                       pwdinfo->p2p_peer_interface_addr[ 0 ], pwdinfo->p2p_peer_interface_addr[ 1 ], pwdinfo->p2p_peer_interface_addr[ 2 ],
+                       pwdinfo->p2p_peer_interface_addr[ 3 ], pwdinfo->p2p_peer_interface_addr[ 4 ], pwdinfo->p2p_peer_interface_addr[ 5 ]);
+
+       sprintf( extra, "\n\nRole=%.2d\n", rtw_p2p_role(pwdinfo) );
+       wrqu->data.length = strlen( extra );
+       return ret;
+
+}
+
+
+static int rtw_p2p_get_peer_ifaddr(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+
+       int ret = 0;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct iw_point *pdata = &wrqu->data;
+       struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
+
+
+       DBG_871X( "[%s] Role = %d, Status = %d, peer addr = %.2X:%.2X:%.2X:%.2X:%.2X:%.2X\n", __FUNCTION__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
+                       pwdinfo->p2p_peer_interface_addr[ 0 ], pwdinfo->p2p_peer_interface_addr[ 1 ], pwdinfo->p2p_peer_interface_addr[ 2 ],
+                       pwdinfo->p2p_peer_interface_addr[ 3 ], pwdinfo->p2p_peer_interface_addr[ 4 ], pwdinfo->p2p_peer_interface_addr[ 5 ]);
+
+       sprintf( extra, "\nMAC %.2X:%.2X:%.2X:%.2X:%.2X:%.2X",
+                       pwdinfo->p2p_peer_interface_addr[ 0 ], pwdinfo->p2p_peer_interface_addr[ 1 ], pwdinfo->p2p_peer_interface_addr[ 2 ],
+                       pwdinfo->p2p_peer_interface_addr[ 3 ], pwdinfo->p2p_peer_interface_addr[ 4 ], pwdinfo->p2p_peer_interface_addr[ 5 ]);
+       wrqu->data.length = strlen( extra );
+       return ret;
+
+}
+
+static int rtw_p2p_get_peer_devaddr(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+
+{
+
+       int ret = 0;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct iw_point *pdata = &wrqu->data;
+       struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
+
+       DBG_871X( "[%s] Role = %d, Status = %d, peer addr = %.2X:%.2X:%.2X:%.2X:%.2X:%.2X\n", __FUNCTION__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
+                       pwdinfo->rx_prov_disc_info.peerDevAddr[ 0 ], pwdinfo->rx_prov_disc_info.peerDevAddr[ 1 ],
+                       pwdinfo->rx_prov_disc_info.peerDevAddr[ 2 ], pwdinfo->rx_prov_disc_info.peerDevAddr[ 3 ],
+                       pwdinfo->rx_prov_disc_info.peerDevAddr[ 4 ], pwdinfo->rx_prov_disc_info.peerDevAddr[ 5 ]);
+       sprintf( extra, "\n%.2X%.2X%.2X%.2X%.2X%.2X",
+                       pwdinfo->rx_prov_disc_info.peerDevAddr[ 0 ], pwdinfo->rx_prov_disc_info.peerDevAddr[ 1 ],
+                       pwdinfo->rx_prov_disc_info.peerDevAddr[ 2 ], pwdinfo->rx_prov_disc_info.peerDevAddr[ 3 ],
+                       pwdinfo->rx_prov_disc_info.peerDevAddr[ 4 ], pwdinfo->rx_prov_disc_info.peerDevAddr[ 5 ]);
+       wrqu->data.length = strlen( extra );
+       return ret;
+
+}
+
+static int rtw_p2p_get_peer_devaddr_by_invitation(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+
+{
+
+       int ret = 0;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct iw_point *pdata = &wrqu->data;
+       struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
+
+       DBG_871X( "[%s] Role = %d, Status = %d, peer addr = %.2X:%.2X:%.2X:%.2X:%.2X:%.2X\n", __FUNCTION__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
+                       pwdinfo->p2p_peer_device_addr[ 0 ], pwdinfo->p2p_peer_device_addr[ 1 ],
+                       pwdinfo->p2p_peer_device_addr[ 2 ], pwdinfo->p2p_peer_device_addr[ 3 ],
+                       pwdinfo->p2p_peer_device_addr[ 4 ], pwdinfo->p2p_peer_device_addr[ 5 ]);
+       sprintf( extra, "\nMAC %.2X:%.2X:%.2X:%.2X:%.2X:%.2X",
+                       pwdinfo->p2p_peer_device_addr[ 0 ], pwdinfo->p2p_peer_device_addr[ 1 ],
+                       pwdinfo->p2p_peer_device_addr[ 2 ], pwdinfo->p2p_peer_device_addr[ 3 ],
+                       pwdinfo->p2p_peer_device_addr[ 4 ], pwdinfo->p2p_peer_device_addr[ 5 ]);
+       wrqu->data.length = strlen( extra );
+       return ret;
+
+}
+
+static int rtw_p2p_get_groupid(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+
+{
+
+       int ret = 0;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct iw_point *pdata = &wrqu->data;
+       struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
+
+       sprintf( extra, "\n%.2X:%.2X:%.2X:%.2X:%.2X:%.2X %s",
+                       pwdinfo->groupid_info.go_device_addr[ 0 ], pwdinfo->groupid_info.go_device_addr[ 1 ],
+                       pwdinfo->groupid_info.go_device_addr[ 2 ], pwdinfo->groupid_info.go_device_addr[ 3 ],
+                       pwdinfo->groupid_info.go_device_addr[ 4 ], pwdinfo->groupid_info.go_device_addr[ 5 ],
+                       pwdinfo->groupid_info.ssid);
+       wrqu->data.length = strlen( extra );
+       return ret;
+
+}
+
+static int rtw_p2p_get_op_ch(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+
+{
+
+       int ret = 0;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct iw_point *pdata = &wrqu->data;
+       struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
+
+
+       DBG_871X( "[%s] Op_ch = %02x\n", __FUNCTION__, pwdinfo->operating_channel);
+
+       sprintf( extra, "\n\nOp_ch=%.2d\n", pwdinfo->operating_channel );
+       wrqu->data.length = strlen( extra );
+       return ret;
+
+}
+
+inline static void macstr2num(u8 *dst, u8 *src)
+{
+       int     jj, kk;
+       for (jj = 0, kk = 0; jj < ETH_ALEN; jj++, kk += 3)
+       {
+               dst[jj] = key_2char2num(src[kk], src[kk + 1]);
+       }
+}
+
+static int rtw_p2p_get_wps_configmethod(struct net_device *dev,
+                                                                               struct iw_request_info *info,
+                                                                               union iwreq_data *wrqu, char *extra, char *subcmd)
+{
+
+       int ret = 0;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       u8 peerMAC[ETH_ALEN] = { 0x00 };
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+       _irqL irqL;
+       _list * plist,*phead;
+       _queue *queue = &(pmlmepriv->scanned_queue);
+       struct wlan_network *pnetwork = NULL;
+       u8 blnMatch = 0;
+       u16     attr_content = 0;
+       uint attr_contentlen = 0;
+       u8      attr_content_str[P2P_PRIVATE_IOCTL_SET_LEN] = { 0x00 };
+
+       //      Commented by Albert 20110727
+       //      The input data is the MAC address which the application wants to know its WPS config method.
+       //      After knowing its WPS config method, the application can decide the config method for provisioning discovery.
+       //      Format: iwpriv wlanx p2p_get_wpsCM 00:E0:4C:00:00:05
+
+       DBG_871X("[%s] data = %s\n", __FUNCTION__, subcmd);
+
+       macstr2num(peerMAC, subcmd);
+
+       _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+
+       phead = get_list_head(queue);
+       plist = get_next(phead);
+
+       while (1)
+       {
+               if (rtw_end_of_queue_search(phead, plist) == _TRUE) break;
+
+               pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
+               if (_rtw_memcmp(pnetwork->network.MacAddress, peerMAC, ETH_ALEN))
+               {
+                       u8 *wpsie;
+                       uint    wpsie_len = 0;
+
+                       //      The mac address is matched.
+
+                       if ((wpsie = rtw_get_wps_ie(&pnetwork->network.IEs[12], pnetwork->network.IELength - 12, NULL, &wpsie_len)))
+                       {
+                               rtw_get_wps_attr_content(wpsie, wpsie_len, WPS_ATTR_CONF_METHOD, (u8 *)&attr_content, &attr_contentlen);
+                               if (attr_contentlen)
+                               {
+                                       attr_content = be16_to_cpu(attr_content);
+                                       sprintf(attr_content_str, "\n\nM=%.4d", attr_content);
+                                       blnMatch = 1;
+                               }
+                       }
+
+                       break;
+               }
+
+               plist = get_next(plist);
+
+       }
+
+       _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+
+       if (!blnMatch)
+       {
+               sprintf(attr_content_str, "\n\nM=0000");
+       }
+
+       wrqu->data.length = strlen(attr_content_str);
+       _rtw_memcpy(extra, attr_content_str, wrqu->data.length);
+
+       return ret;
+
+}
+
+#ifdef CONFIG_WFD
+static int rtw_p2p_get_peer_wfd_port(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+
+       int ret = 0;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct iw_point *pdata = &wrqu->data;
+       struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
+
+       DBG_871X( "[%s] p2p_state = %d\n", __FUNCTION__, rtw_p2p_state(pwdinfo) );
+
+       sprintf( extra, "\n\nPort=%d\n", pwdinfo->wfd_info->peer_rtsp_ctrlport );
+       DBG_871X( "[%s] remote port = %d\n", __FUNCTION__, pwdinfo->wfd_info->peer_rtsp_ctrlport );
+
+       wrqu->data.length = strlen( extra );
+       return ret;
+
+}
+
+static int rtw_p2p_get_peer_wfd_preferred_connection(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+
+       int ret = 0;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct iw_point *pdata = &wrqu->data;
+       struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
+
+       sprintf( extra, "\n\nwfd_pc=%d\n", pwdinfo->wfd_info->wfd_pc );
+       DBG_871X( "[%s] wfd_pc = %d\n", __FUNCTION__, pwdinfo->wfd_info->wfd_pc );
+
+       wrqu->data.length = strlen( extra );
+       pwdinfo->wfd_info->wfd_pc = _FALSE;     //      Reset the WFD preferred connection to P2P
+       return ret;
+
+}
+
+static int rtw_p2p_get_peer_wfd_session_available(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+
+       int ret = 0;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct iw_point *pdata = &wrqu->data;
+       struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
+
+       sprintf( extra, "\n\nwfd_sa=%d\n", pwdinfo->wfd_info->peer_session_avail );
+       DBG_871X( "[%s] wfd_sa = %d\n", __FUNCTION__, pwdinfo->wfd_info->peer_session_avail );
+
+       wrqu->data.length = strlen( extra );
+       pwdinfo->wfd_info->peer_session_avail = _TRUE;  //      Reset the WFD session available
+       return ret;
+
+}
+
+#endif // CONFIG_WFD
+
+static int rtw_p2p_get_go_device_address(struct net_device *dev,
+                                                                                struct iw_request_info *info,
+                                                                                union iwreq_data *wrqu, char *extra, char *subcmd)
+{
+
+       int ret = 0;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       u8 peerMAC[ETH_ALEN] = { 0x00 };
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+       _irqL irqL;
+       _list *plist, *phead;
+       _queue *queue   = &(pmlmepriv->scanned_queue);
+       struct wlan_network *pnetwork = NULL;
+       u8 blnMatch = 0;
+       u8 *p2pie;
+       uint p2pielen = 0, attr_contentlen = 0;
+       u8 attr_content[100] = { 0x00 };
+       u8 go_devadd_str[P2P_PRIVATE_IOCTL_SET_LEN] = { 0x00 };
+
+       //      Commented by Albert 20121209
+       //      The input data is the GO's interface address which the application wants to know its device address.
+       //      Format: iwpriv wlanx p2p_get2 go_devadd=00:E0:4C:00:00:05
+
+       DBG_871X("[%s] data = %s\n", __FUNCTION__, subcmd);
+
+       macstr2num(peerMAC, subcmd);
+
+       _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+
+       phead = get_list_head(queue);
+       plist = get_next(phead);
+
+       while (1)
+       {
+               if (rtw_end_of_queue_search(phead, plist) == _TRUE) break;
+
+               pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
+               if (_rtw_memcmp(pnetwork->network.MacAddress, peerMAC, ETH_ALEN))
+               {
+                       //      Commented by Albert 2011/05/18
+                       //      Match the device address located in the P2P IE
+                       //      This is for the case that the P2P device address is not the same as the P2P interface address.
+
+                       if ((p2pie = rtw_get_p2p_ie(&pnetwork->network.IEs[12], pnetwork->network.IELength - 12, NULL, &p2pielen)))
+                       {
+                               while (p2pie)
+                               {
+                                       //      The P2P Device ID attribute is included in the Beacon frame.
+                                       //      The P2P Device Info attribute is included in the probe response frame.
+
+                                       _rtw_memset(attr_content, 0x00, 100);
+                                       if (rtw_get_p2p_attr_content(p2pie, p2pielen, P2P_ATTR_DEVICE_ID, attr_content, &attr_contentlen))
+                                       {
+                                               //      Handle the P2P Device ID attribute of Beacon first
+                                               blnMatch = 1;
+                                               break;
+
+                                       } else if (rtw_get_p2p_attr_content(p2pie, p2pielen, P2P_ATTR_DEVICE_INFO, attr_content, &attr_contentlen))
+                                       {
+                                               //      Handle the P2P Device Info attribute of probe response
+                                               blnMatch = 1;
+                                               break;
+                                       }
+
+                                       //Get the next P2P IE
+                                       p2pie = rtw_get_p2p_ie(p2pie + p2pielen, pnetwork->network.IELength - 12 - (p2pie - &pnetwork->network.IEs[12] + p2pielen), NULL, &p2pielen);
+                               }
+                       }
+               }
+
+               plist = get_next(plist);
+
+       }
+
+       _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+
+       if (!blnMatch)
+       {
+               sprintf(go_devadd_str, "\n\ndev_add=NULL");
+       } else
+       {
+               sprintf(go_devadd_str, "\n\ndev_add=%.2X:%.2X:%.2X:%.2X:%.2X:%.2X",
+                               attr_content[0], attr_content[1], attr_content[2], attr_content[3], attr_content[4], attr_content[5]);
+       }
+
+       wrqu->data.length = strlen(go_devadd_str);
+       _rtw_memcpy(extra, go_devadd_str, wrqu->data.length);
+
+       return ret;
+
+}
+
+static int rtw_p2p_get_device_type(struct net_device *dev,
+                                                                  struct iw_request_info *info,
+                                                                  union iwreq_data *wrqu, char *extra, char *subcmd)
+{
+
+       int ret = 0;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       u8 peerMAC[ETH_ALEN] = { 0x00 };
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+       _irqL irqL;
+       _list *plist, *phead;
+       _queue *queue = &(pmlmepriv->scanned_queue);
+       struct wlan_network *pnetwork = NULL;
+       u8 blnMatch = 0;
+       u8 dev_type[8] = { 0x00 };
+       uint dev_type_len = 0;
+       u8 dev_type_str[P2P_PRIVATE_IOCTL_SET_LEN] = { 0x00 };    // +9 is for the str "dev_type=", we have to clear it at wrqu->data.pointer
+
+       //      Commented by Albert 20121209
+       //      The input data is the MAC address which the application wants to know its device type.
+       //      Such user interface could know the device type.
+       //      Format: iwpriv wlanx p2p_get2 dev_type=00:E0:4C:00:00:05
+
+       DBG_871X("[%s] data = %s\n", __FUNCTION__, subcmd);
+
+       macstr2num(peerMAC, subcmd);
+
+       _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+
+       phead = get_list_head(queue);
+       plist = get_next(phead);
+
+       while (1)
+       {
+               if (rtw_end_of_queue_search(phead, plist) == _TRUE) break;
+
+               pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
+               if (_rtw_memcmp(pnetwork->network.MacAddress, peerMAC, ETH_ALEN))
+               {
+                       u8 *wpsie;
+                       uint    wpsie_len = 0;
+
+                       //      The mac address is matched.
+
+                       if ((wpsie = rtw_get_wps_ie(&pnetwork->network.IEs[12], pnetwork->network.IELength - 12, NULL, &wpsie_len)))
+                       {
+                               rtw_get_wps_attr_content(wpsie, wpsie_len, WPS_ATTR_PRIMARY_DEV_TYPE, dev_type, &dev_type_len);
+                               if (dev_type_len)
+                               {
+                                       u16     type = 0;
+
+                                       _rtw_memcpy(&type, dev_type, 2);
+                                       type = be16_to_cpu(type);
+                                       sprintf(dev_type_str, "\n\nN=%.2d", type);
+                                       blnMatch = 1;
+                               }
+                       }
+                       break;
+               }
+
+               plist = get_next(plist);
+
+       }
+
+       _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+
+       if (!blnMatch)
+       {
+               sprintf(dev_type_str, "\n\nN=00");
+       }
+
+       wrqu->data.length = strlen(dev_type_str);
+       _rtw_memcpy(extra, dev_type_str, wrqu->data.length);
+
+       return ret;
+
+}
+
+static int rtw_p2p_get_device_name(struct net_device *dev,
+                                                                  struct iw_request_info *info,
+                                                                  union iwreq_data *wrqu, char *extra, char *subcmd)
+{
+
+       int ret = 0;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       u8 peerMAC[ETH_ALEN] = { 0x00 };
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+       _irqL irqL;
+       _list *plist, *phead;
+       _queue *queue = &(pmlmepriv->scanned_queue);
+       struct wlan_network *pnetwork = NULL;
+       u8 blnMatch = 0;
+       u8 dev_name[WPS_MAX_DEVICE_NAME_LEN] = { 0x00 };
+       uint dev_len = 0;
+       u8 dev_name_str[P2P_PRIVATE_IOCTL_SET_LEN] = { 0x00 };
+
+       //      Commented by Albert 20121225
+       //      The input data is the MAC address which the application wants to know its device name.
+       //      Such user interface could show peer device's device name instead of ssid.
+       //      Format: iwpriv wlanx p2p_get2 devN=00:E0:4C:00:00:05
+
+       DBG_871X("[%s] data = %s\n", __FUNCTION__, subcmd);
+
+       macstr2num(peerMAC, subcmd);
+
+       _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+
+       phead = get_list_head(queue);
+       plist = get_next(phead);
+
+       while (1)
+       {
+               if (rtw_end_of_queue_search(phead, plist) == _TRUE) break;
+
+               pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
+               if (_rtw_memcmp(pnetwork->network.MacAddress, peerMAC, ETH_ALEN))
+               {
+                       u8 *wpsie;
+                       uint    wpsie_len = 0;
+
+                       //      The mac address is matched.
+
+                       if ((wpsie = rtw_get_wps_ie(&pnetwork->network.IEs[12], pnetwork->network.IELength - 12, NULL, &wpsie_len)))
+                       {
+                               rtw_get_wps_attr_content(wpsie, wpsie_len, WPS_ATTR_DEVICE_NAME, dev_name, &dev_len);
+                               if (dev_len)
+                               {
+                                       sprintf(dev_name_str, "\n\nN=%s", dev_name);
+                                       blnMatch = 1;
+                               }
+                       }
+                       break;
+               }
+
+               plist = get_next(plist);
+
+       }
+
+       _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+
+       if (!blnMatch)
+       {
+               sprintf(dev_name_str, "\n\nN=0000");
+       }
+
+       wrqu->data.length = strlen(dev_name_str);
+       _rtw_memcpy(extra, dev_name_str, wrqu->data.length);
+
+       return ret;
+
+}
+
+static int rtw_p2p_get_invitation_procedure(struct net_device *dev,
+                                                                                       struct iw_request_info *info,
+                                                                                       union iwreq_data *wrqu, char *extra, char *subcmd)
+{
+
+       int ret = 0;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       u8 peerMAC[ETH_ALEN] = { 0x00 };
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+       _irqL irqL;
+       _list *plist, *phead;
+       _queue *queue   = &(pmlmepriv->scanned_queue);
+       struct wlan_network *pnetwork = NULL;
+       u8 blnMatch = 0;
+       u8 *p2pie;
+       uint p2pielen = 0, attr_contentlen = 0;
+       u8 attr_content[2] = { 0x00 };
+       u8 inv_proc_str[P2P_PRIVATE_IOCTL_SET_LEN] = { 0x00 };
+
+       //      Commented by Ouden 20121226
+       //      The application wants to know P2P initation procedure is support or not.
+       //      Format: iwpriv wlanx p2p_get2 InvProc=00:E0:4C:00:00:05
+
+       DBG_871X("[%s] data = %s\n", __FUNCTION__, subcmd);
+
+       macstr2num(peerMAC, subcmd);
+
+       _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+
+       phead = get_list_head(queue);
+       plist = get_next(phead);
+
+       while (1)
+       {
+               if (rtw_end_of_queue_search(phead, plist) == _TRUE) break;
+
+               pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
+               if (_rtw_memcmp(pnetwork->network.MacAddress, peerMAC, ETH_ALEN))
+               {
+                       //      Commented by Albert 20121226
+                       //      Match the device address located in the P2P IE
+                       //      This is for the case that the P2P device address is not the same as the P2P interface address.
+
+                       if ((p2pie = rtw_get_p2p_ie(&pnetwork->network.IEs[12], pnetwork->network.IELength - 12, NULL, &p2pielen)))
+                       {
+                               while (p2pie)
+                               {
+                                       //_rtw_memset( attr_content, 0x00, 2);
+                                       if (rtw_get_p2p_attr_content(p2pie, p2pielen, P2P_ATTR_CAPABILITY, attr_content, &attr_contentlen))
+                                       {
+                                               //      Handle the P2P capability attribute
+                                               blnMatch = 1;
+                                               break;
+
+                                       }
+
+                                       //Get the next P2P IE
+                                       p2pie = rtw_get_p2p_ie(p2pie + p2pielen, pnetwork->network.IELength - 12 - (p2pie - &pnetwork->network.IEs[12] + p2pielen), NULL, &p2pielen);
+                               }
+                       }
+               }
+
+               plist = get_next(plist);
+
+       }
+
+       _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+
+       if (!blnMatch)
+       {
+               sprintf(inv_proc_str, "\nIP=-1");
+       } else
+       {
+               if (attr_content[0] && 0x20)
+               {
+                       sprintf(inv_proc_str, "\nIP=1");
+               } else
+               {
+                       sprintf(inv_proc_str, "\nIP=0");
+               }
+       }
+
+       wrqu->data.length = strlen(inv_proc_str);
+       _rtw_memcpy(extra, inv_proc_str, wrqu->data.length);
+
+       return ret;
+
+}
+
+static int rtw_p2p_connect(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+
+       int ret = 0;
+       _adapter                                *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
+       u8                                      peerMAC[ ETH_ALEN ] = { 0x00 };
+       int                                     jj,kk;
+       u8                                      peerMACStr[ ETH_ALEN * 2 ] = { 0x00 };
+       struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
+       _irqL                           irqL;
+       _list                                   *plist, *phead;
+       _queue                          *queue  = &(pmlmepriv->scanned_queue);
+       struct  wlan_network    *pnetwork = NULL;
+       uint                                    uintPeerChannel = 0;
+#ifdef CONFIG_CONCURRENT_MODE
+       _adapter                                *pbuddy_adapter = padapter->pbuddy_adapter;
+       struct mlme_ext_priv    *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
+#endif // CONFIG_CONCURRENT_MODE
+
+
+       //      Commented by Albert 20110304
+       //      The input data contains two informations.
+       //      1. First information is the MAC address which wants to formate with
+       //      2. Second information is the WPS PINCode or "pbc" string for push button method
+       //      Format: 00:E0:4C:00:00:05
+       //      Format: 00:E0:4C:00:00:05
+
+       DBG_871X( "[%s] data = %s\n", __FUNCTION__, extra );
+
+       if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+       {
+               DBG_871X( "[%s] WiFi Direct is disable!\n", __FUNCTION__ );
+               return ret;
+       }
+
+       if ( pwdinfo->ui_got_wps_info == P2P_NO_WPSINFO )
+       {
+               return -1;
+       }
+
+       for( jj = 0, kk = 0; jj < ETH_ALEN; jj++, kk += 3 )
+       {
+               peerMAC[ jj ] = key_2char2num( extra[kk], extra[kk+ 1] );
+       }
+
+       _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+
+       phead = get_list_head(queue);
+       plist = get_next(phead);
+
+       while(1)
+       {
+               if (rtw_end_of_queue_search(phead,plist)== _TRUE)
+                       break;
+
+               pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
+               if ( _rtw_memcmp( pnetwork->network.MacAddress, peerMAC, ETH_ALEN ) )
+               {
+                       uintPeerChannel = pnetwork->network.Configuration.DSConfig;
+                       break;
+              }
+
+               plist = get_next(plist);
+
+       }
+
+       _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+
+       if ( uintPeerChannel )
+       {
+#ifdef CONFIG_CONCURRENT_MODE
+               if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
+               {
+                       _cancel_timer_ex( &pwdinfo->ap_p2p_switch_timer );
+               }
+#endif // CONFIG_CONCURRENT_MODE
+
+               _rtw_memset( &pwdinfo->nego_req_info, 0x00, sizeof( struct tx_nego_req_info ) );
+               _rtw_memset( &pwdinfo->groupid_info, 0x00, sizeof( struct group_id_info ) );
+
+               pwdinfo->nego_req_info.peer_channel_num[ 0 ] = uintPeerChannel;
+               _rtw_memcpy( pwdinfo->nego_req_info.peerDevAddr, pnetwork->network.MacAddress, ETH_ALEN );
+               pwdinfo->nego_req_info.benable = _TRUE;
+
+               _cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
+               if ( rtw_p2p_state(pwdinfo) != P2P_STATE_GONEGO_OK )
+               {
+                       //      Restore to the listen state if the current p2p state is not nego OK
+                       rtw_p2p_set_state(pwdinfo, P2P_STATE_LISTEN );
+               }
+
+               rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
+               rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_ING);
+
+#ifdef CONFIG_CONCURRENT_MODE
+               if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
+               {
+                       //      Have to enter the power saving with the AP
+                       set_channel_bwmode(padapter, pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_ch_offset, pbuddy_mlmeext->cur_bwmode);
+
+                       issue_nulldata(pbuddy_adapter, NULL, 1, 3, 500);
+               }
+#endif // CONFIG_CONCURRENT_MODE
+
+               DBG_871X( "[%s] Start PreTx Procedure!\n", __FUNCTION__ );
+               _set_timer( &pwdinfo->pre_tx_scan_timer, P2P_TX_PRESCAN_TIMEOUT );
+
+#ifdef CONFIG_CONCURRENT_MODE
+               if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
+               {
+                       _set_timer( &pwdinfo->restore_p2p_state_timer, P2P_CONCURRENT_GO_NEGO_TIMEOUT );
+               }
+               else
+               {
+                       _set_timer( &pwdinfo->restore_p2p_state_timer, P2P_GO_NEGO_TIMEOUT );
+               }
+#else
+               _set_timer( &pwdinfo->restore_p2p_state_timer, P2P_GO_NEGO_TIMEOUT );
+#endif // CONFIG_CONCURRENT_MODE
+
+       }
+       else
+       {
+               DBG_871X( "[%s] Not Found in Scanning Queue~\n", __FUNCTION__ );
+               ret = -1;
+       }
+exit:
+       return ret;
+}
+
+static int rtw_p2p_invite_req(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+
+       int ret = 0;
+       _adapter                                        *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct iw_point                         *pdata = &wrqu->data;
+       struct wifidirect_info          *pwdinfo = &( padapter->wdinfo );
+       int                                             jj,kk;
+       u8                                              peerMACStr[ ETH_ALEN * 2 ] = { 0x00 };
+       struct mlme_priv                        *pmlmepriv = &padapter->mlmepriv;
+       _list                                           *plist, *phead;
+       _queue                                  *queue  = &(pmlmepriv->scanned_queue);
+       struct  wlan_network            *pnetwork = NULL;
+       uint                                            uintPeerChannel = 0;
+       u8                                              attr_content[50] = { 0x00 }, _status = 0;
+       u8                                              *p2pie;
+       uint                                            p2pielen = 0, attr_contentlen = 0;
+       _irqL                                   irqL;
+       struct tx_invite_req_info*      pinvite_req_info = &pwdinfo->invitereq_info;
+#ifdef CONFIG_CONCURRENT_MODE
+       _adapter                                        *pbuddy_adapter = padapter->pbuddy_adapter;
+       struct mlme_priv                        *pbuddy_mlmepriv = &pbuddy_adapter->mlmepriv;
+       struct mlme_ext_priv            *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
+#endif // CONFIG_CONCURRENT_MODE
+
+#ifdef CONFIG_WFD
+       struct wifi_display_info*       pwfd_info = pwdinfo->wfd_info;
+#endif // CONFIG_WFD
+
+       //      Commented by Albert 20120321
+       //      The input data contains two informations.
+       //      1. First information is the P2P device address which you want to send to.
+       //      2. Second information is the group id which combines with GO's mac address, space and GO's ssid.
+       //      Command line sample: iwpriv wlan0 p2p_set invite="00:11:22:33:44:55 00:E0:4C:00:00:05 DIRECT-xy"
+       //      Format: 00:11:22:33:44:55 00:E0:4C:00:00:05 DIRECT-xy
+
+       DBG_871X( "[%s] data = %s\n", __FUNCTION__, extra );
+
+       if ( wrqu->data.length <=  37 )
+       {
+               DBG_871X( "[%s] Wrong format!\n", __FUNCTION__ );
+               return ret;
+       }
+
+       if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+       {
+               DBG_871X( "[%s] WiFi Direct is disable!\n", __FUNCTION__ );
+               return ret;
+       }
+       else
+       {
+               //      Reset the content of struct tx_invite_req_info
+               pinvite_req_info->benable = _FALSE;
+               _rtw_memset( pinvite_req_info->go_bssid, 0x00, ETH_ALEN );
+               _rtw_memset( pinvite_req_info->go_ssid, 0x00, WLAN_SSID_MAXLEN );
+               pinvite_req_info->ssidlen = 0x00;
+               pinvite_req_info->operating_ch = pwdinfo->operating_channel;
+               _rtw_memset( pinvite_req_info->peer_macaddr, 0x00, ETH_ALEN );
+               pinvite_req_info->token = 3;
+       }
+
+       for( jj = 0, kk = 0; jj < ETH_ALEN; jj++, kk += 3 )
+       {
+               pinvite_req_info->peer_macaddr[ jj ] = key_2char2num( extra[kk], extra[kk+ 1] );
+       }
+
+       _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+
+       phead = get_list_head(queue);
+       plist = get_next(phead);
+
+       while(1)
+       {
+               if (rtw_end_of_queue_search(phead,plist)== _TRUE)
+                       break;
+
+               pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
+
+               //      Commented by Albert 2011/05/18
+               //      Match the device address located in the P2P IE
+               //      This is for the case that the P2P device address is not the same as the P2P interface address.
+
+               if ( (p2pie=rtw_get_p2p_ie( &pnetwork->network.IEs[12], pnetwork->network.IELength - 12, NULL, &p2pielen)) )
+               {
+                       //      The P2P Device ID attribute is included in the Beacon frame.
+                       //      The P2P Device Info attribute is included in the probe response frame.
+
+                       if ( rtw_get_p2p_attr_content( p2pie, p2pielen, P2P_ATTR_DEVICE_ID, attr_content, &attr_contentlen) )
+                       {
+                               //      Handle the P2P Device ID attribute of Beacon first
+                               if ( _rtw_memcmp( attr_content, pinvite_req_info->peer_macaddr, ETH_ALEN ) )
+                               {
+                                       uintPeerChannel = pnetwork->network.Configuration.DSConfig;
+                                       break;
+                               }
+                       }
+                       else if ( rtw_get_p2p_attr_content( p2pie, p2pielen, P2P_ATTR_DEVICE_INFO, attr_content, &attr_contentlen) )
+                       {
+                               //      Handle the P2P Device Info attribute of probe response
+                               if ( _rtw_memcmp( attr_content, pinvite_req_info->peer_macaddr, ETH_ALEN ) )
+                               {
+                                       uintPeerChannel = pnetwork->network.Configuration.DSConfig;
+                                       break;
+                               }
+                       }
+
+               }
+
+               plist = get_next(plist);
+
+       }
+
+       _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+
+#ifdef CONFIG_WFD
+       if ( uintPeerChannel )
+       {
+               u8      wfd_ie[ 128 ] = { 0x00 };
+               uint    wfd_ielen = 0;
+
+               if ( rtw_get_wfd_ie( &pnetwork->network.IEs[12], pnetwork->network.IELength - 12,  wfd_ie, &wfd_ielen ) )
+               {
+                       u8      wfd_devinfo[ 6 ] = { 0x00 };
+                       uint    wfd_devlen = 6;
+
+                       DBG_871X( "[%s] Found WFD IE!\n", __FUNCTION__ );
+                       if ( rtw_get_wfd_attr_content( wfd_ie, wfd_ielen, WFD_ATTR_DEVICE_INFO, wfd_devinfo, &wfd_devlen ) )
+                       {
+                               u16     wfd_devinfo_field = 0;
+
+                               //      Commented by Albert 20120319
+                               //      The first two bytes are the WFD device information field of WFD device information subelement.
+                               //      In big endian format.
+                               wfd_devinfo_field = RTW_GET_BE16(wfd_devinfo);
+                               if ( wfd_devinfo_field & WFD_DEVINFO_SESSION_AVAIL )
+                               {
+                                       pwfd_info->peer_session_avail = _TRUE;
+                               }
+                               else
+                               {
+                                       pwfd_info->peer_session_avail = _FALSE;
+                               }
+                       }
+               }
+
+               if ( _FALSE == pwfd_info->peer_session_avail )
+               {
+                       DBG_871X( "[%s] WFD Session not avaiable!\n", __FUNCTION__ );
+                       goto exit;
+               }
+       }
+#endif // CONFIG_WFD
+
+       if ( uintPeerChannel )
+       {
+#ifdef CONFIG_CONCURRENT_MODE
+               if ( check_fwstate( pbuddy_mlmepriv, _FW_LINKED ) )
+               {
+                       _cancel_timer_ex( &pwdinfo->ap_p2p_switch_timer );
+               }
+#endif // CONFIG_CONCURRENT_MODE
+
+               //      Store the GO's bssid
+               for( jj = 0, kk = 18; jj < ETH_ALEN; jj++, kk += 3 )
+               {
+                       pinvite_req_info->go_bssid[ jj ] = key_2char2num( extra[kk], extra[kk+ 1] );
+               }
+
+               //      Store the GO's ssid
+               pinvite_req_info->ssidlen = wrqu->data.length - 36;
+               _rtw_memcpy( pinvite_req_info->go_ssid, &extra[ 36 ], (u32) pinvite_req_info->ssidlen );
+               pinvite_req_info->benable = _TRUE;
+               pinvite_req_info->peer_ch = uintPeerChannel;
+
+               rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
+               rtw_p2p_set_state(pwdinfo, P2P_STATE_TX_INVITE_REQ);
+
+#ifdef CONFIG_CONCURRENT_MODE
+               if ( check_fwstate( pbuddy_mlmepriv, _FW_LINKED ) )
+               {
+                       //      Have to enter the power saving with the AP
+                       set_channel_bwmode(padapter, pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_ch_offset, pbuddy_mlmeext->cur_bwmode);
+
+                       issue_nulldata(pbuddy_adapter, NULL, 1, 3, 500);
+               }
+               else
+               {
+                       set_channel_bwmode(padapter, uintPeerChannel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
+               }
+#else
+               set_channel_bwmode(padapter, uintPeerChannel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
+#endif
+
+               _set_timer( &pwdinfo->pre_tx_scan_timer, P2P_TX_PRESCAN_TIMEOUT );
+
+#ifdef CONFIG_CONCURRENT_MODE
+               if ( check_fwstate( pbuddy_mlmepriv, _FW_LINKED ) )
+               {
+                       _set_timer( &pwdinfo->restore_p2p_state_timer, P2P_CONCURRENT_INVITE_TIMEOUT );
+               }
+               else
+               {
+                       _set_timer( &pwdinfo->restore_p2p_state_timer, P2P_INVITE_TIMEOUT );
+               }
+#else
+               _set_timer( &pwdinfo->restore_p2p_state_timer, P2P_INVITE_TIMEOUT );
+#endif // CONFIG_CONCURRENT_MODE
+
+
+       }
+       else
+       {
+               DBG_871X( "[%s] NOT Found in the Scanning Queue!\n", __FUNCTION__ );
+       }
+exit:
+
+       return ret;
+
+}
+
+static int rtw_p2p_set_persistent(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+
+       int ret = 0;
+       _adapter                                        *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct iw_point                         *pdata = &wrqu->data;
+       struct wifidirect_info          *pwdinfo = &( padapter->wdinfo );
+       int                                             jj,kk;
+       u8                                              peerMACStr[ ETH_ALEN * 2 ] = { 0x00 };
+       struct mlme_priv                        *pmlmepriv = &padapter->mlmepriv;
+       _list                                           *plist, *phead;
+       _queue                                  *queue  = &(pmlmepriv->scanned_queue);
+       struct  wlan_network            *pnetwork = NULL;
+       uint                                            uintPeerChannel = 0;
+       u8                                              attr_content[50] = { 0x00 }, _status = 0;
+       u8                                              *p2pie;
+       uint                                            p2pielen = 0, attr_contentlen = 0;
+       _irqL                                   irqL;
+       struct tx_invite_req_info*      pinvite_req_info = &pwdinfo->invitereq_info;
+#ifdef CONFIG_CONCURRENT_MODE
+       _adapter                                        *pbuddy_adapter = padapter->pbuddy_adapter;
+       struct mlme_priv                        *pbuddy_mlmepriv = &pbuddy_adapter->mlmepriv;
+       struct mlme_ext_priv            *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
+#endif // CONFIG_CONCURRENT_MODE
+
+#ifdef CONFIG_WFD
+       struct wifi_display_info*       pwfd_info = pwdinfo->wfd_info;
+#endif // CONFIG_WFD
+
+       //      Commented by Albert 20120328
+       //      The input data is 0 or 1
+       //      0: disable persistent group functionality
+       //      1: enable persistent group founctionality
+
+       DBG_871X( "[%s] data = %s\n", __FUNCTION__, extra );
+
+       if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+       {
+               DBG_871X( "[%s] WiFi Direct is disable!\n", __FUNCTION__ );
+               return ret;
+       }
+       else
+       {
+               if ( extra[ 0 ] == '0' )        //      Disable the persistent group function.
+               {
+                       pwdinfo->persistent_supported = _FALSE;
+               }
+               else if ( extra[ 0 ] == '1' )   //      Enable the persistent group function.
+               {
+                       pwdinfo->persistent_supported = _TRUE;
+               }
+               else
+               {
+                       pwdinfo->persistent_supported = _FALSE;
+               }
+       }
+       printk( "[%s] persistent_supported = %d\n", __FUNCTION__, pwdinfo->persistent_supported );
+
+exit:
+
+       return ret;
+
+}
+
+static int hexstr2bin(const char *hex, u8 *buf, size_t len)
+{
+       size_t i;
+       int a;
+       const char *ipos = hex;
+       u8 *opos = buf;
+
+       for (i = 0; i < len; i++) {
+               a = hex2byte_i(ipos);
+               if (a < 0)
+                       return -1;
+               *opos++ = a;
+               ipos += 2;
+       }
+       return 0;
+}
+
+static int uuid_str2bin(const char *str, u8 *bin)
+{
+       const char *pos;
+       u8 *opos;
+
+       pos = str;
+       opos = bin;
+
+       if (hexstr2bin(pos, opos, 4))
+               return -1;
+       pos += 8;
+       opos += 4;
+
+       if (*pos++ != '-' || hexstr2bin(pos, opos, 2))
+               return -1;
+       pos += 4;
+       opos += 2;
+
+       if (*pos++ != '-' || hexstr2bin(pos, opos, 2))
+               return -1;
+       pos += 4;
+       opos += 2;
+
+       if (*pos++ != '-' || hexstr2bin(pos, opos, 2))
+               return -1;
+       pos += 4;
+       opos += 2;
+
+       if (*pos++ != '-' || hexstr2bin(pos, opos, 6))
+               return -1;
+
+       return 0;
+}
+
+static int rtw_p2p_set_wps_uuid(struct net_device *dev,
+       struct iw_request_info *info,
+       union iwreq_data *wrqu, char *extra)
+{
+
+       int ret = 0;
+       _adapter                                *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct wifidirect_info                  *pwdinfo = &(padapter->wdinfo);
+
+       DBG_871X("[%s] data = %s\n", __FUNCTION__, extra);
+
+       if ((36 == strlen(extra)) && (uuid_str2bin(extra, pwdinfo->uuid) == 0))
+       {
+               pwdinfo->external_uuid = 1;
+       } else {
+               pwdinfo->external_uuid = 0;
+               ret = -EINVAL;
+       }
+
+       return ret;
+
+}
+#ifdef CONFIG_WFD
+static int rtw_p2p_set_pc(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+
+       int ret = 0;
+       _adapter                                *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct iw_point                 *pdata = &wrqu->data;
+       struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
+       u8                                      peerMAC[ ETH_ALEN ] = { 0x00 };
+       int                                     jj,kk;
+       u8                                      peerMACStr[ ETH_ALEN * 2 ] = { 0x00 };
+       struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
+       _list                                   *plist, *phead;
+       _queue                          *queue  = &(pmlmepriv->scanned_queue);
+       struct  wlan_network    *pnetwork = NULL;
+       u8                                      attr_content[50] = { 0x00 }, _status = 0;
+       u8 *p2pie;
+       uint                                    p2pielen = 0, attr_contentlen = 0;
+       _irqL                           irqL;
+       uint                                    uintPeerChannel = 0;
+#ifdef CONFIG_CONCURRENT_MODE
+       _adapter                                *pbuddy_adapter = padapter->pbuddy_adapter;
+       struct mlme_ext_priv    *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
+#endif // CONFIG_CONCURRENT_MODE
+       struct wifi_display_info*       pwfd_info = pwdinfo->wfd_info;
+
+       //      Commented by Albert 20120512
+       //      1. Input information is the MAC address which wants to know the Preferred Connection bit (PC bit)
+       //      Format: 00:E0:4C:00:00:05
+
+       DBG_871X( "[%s] data = %s\n", __FUNCTION__, extra );
+
+       if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+       {
+               DBG_871X( "[%s] WiFi Direct is disable!\n", __FUNCTION__ );
+               return ret;
+       }
+
+       for( jj = 0, kk = 0; jj < ETH_ALEN; jj++, kk += 3 )
+       {
+               peerMAC[ jj ] = key_2char2num( extra[kk], extra[kk+ 1] );
+       }
+
+       _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+
+       phead = get_list_head(queue);
+       plist = get_next(phead);
+
+       while(1)
+       {
+               if (rtw_end_of_queue_search(phead,plist)== _TRUE)
+                       break;
+
+               pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
+
+               //      Commented by Albert 2011/05/18
+               //      Match the device address located in the P2P IE
+               //      This is for the case that the P2P device address is not the same as the P2P interface address.
+
+               if ( (p2pie=rtw_get_p2p_ie( &pnetwork->network.IEs[12], pnetwork->network.IELength - 12, NULL, &p2pielen)) )
+               {
+                       //      The P2P Device ID attribute is included in the Beacon frame.
+                       //      The P2P Device Info attribute is included in the probe response frame.
+                       printk( "[%s] Got P2P IE\n", __FUNCTION__ );
+                       if ( rtw_get_p2p_attr_content( p2pie, p2pielen, P2P_ATTR_DEVICE_ID, attr_content, &attr_contentlen) )
+                       {
+                               //      Handle the P2P Device ID attribute of Beacon first
+                               printk( "[%s] P2P_ATTR_DEVICE_ID \n", __FUNCTION__ );
+                               if ( _rtw_memcmp( attr_content, peerMAC, ETH_ALEN ) )
+                               {
+                                       uintPeerChannel = pnetwork->network.Configuration.DSConfig;
+                                       break;
+                               }
+                       }
+                       else if ( rtw_get_p2p_attr_content( p2pie, p2pielen, P2P_ATTR_DEVICE_INFO, attr_content, &attr_contentlen) )
+                       {
+                               //      Handle the P2P Device Info attribute of probe response
+                               printk( "[%s] P2P_ATTR_DEVICE_INFO \n", __FUNCTION__ );
+                               if ( _rtw_memcmp( attr_content, peerMAC, ETH_ALEN ) )
+                               {
+                                       uintPeerChannel = pnetwork->network.Configuration.DSConfig;
+                                       break;
+                               }
+                       }
+
+               }
+
+               plist = get_next(plist);
+
+       }
+
+       _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+       printk( "[%s] channel = %d\n", __FUNCTION__, uintPeerChannel );
+
+       if ( uintPeerChannel )
+       {
+               u8      wfd_ie[ 128 ] = { 0x00 };
+               uint    wfd_ielen = 0;
+
+               if ( rtw_get_wfd_ie( &pnetwork->network.IEs[12], pnetwork->network.IELength - 12,  wfd_ie, &wfd_ielen ) )
+               {
+                       u8      wfd_devinfo[ 6 ] = { 0x00 };
+                       uint    wfd_devlen = 6;
+
+                       DBG_871X( "[%s] Found WFD IE!\n", __FUNCTION__ );
+                       if ( rtw_get_wfd_attr_content( wfd_ie, wfd_ielen, WFD_ATTR_DEVICE_INFO, wfd_devinfo, &wfd_devlen ) )
+                       {
+                               u16     wfd_devinfo_field = 0;
+
+                               //      Commented by Albert 20120319
+                               //      The first two bytes are the WFD device information field of WFD device information subelement.
+                               //      In big endian format.
+                               wfd_devinfo_field = RTW_GET_BE16(wfd_devinfo);
+                               if ( wfd_devinfo_field & WFD_DEVINFO_PC_TDLS )
+                               {
+                                       pwfd_info->wfd_pc = _TRUE;
+                               }
+                               else
+                               {
+                                       pwfd_info->wfd_pc = _FALSE;
+                               }
+                       }
+               }
+       }
+       else
+       {
+               DBG_871X( "[%s] NOT Found in the Scanning Queue!\n", __FUNCTION__ );
+       }
+
+exit:
+
+       return ret;
+
+}
+
+static int rtw_p2p_set_wfd_device_type(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+
+       int ret = 0;
+       _adapter                                        *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct iw_point                         *pdata = &wrqu->data;
+       struct wifidirect_info          *pwdinfo = &( padapter->wdinfo );
+       struct wifi_display_info                *pwfd_info = pwdinfo->wfd_info;
+
+       //      Commented by Albert 20120328
+       //      The input data is 0 or 1
+       //      0: specify to Miracast source device
+       //      1 or others: specify to Miracast sink device (display device)
+
+       DBG_871X( "[%s] data = %s\n", __FUNCTION__, extra );
+
+       if ( extra[ 0 ] == '0' )        //      Set to Miracast source device.
+       {
+               pwfd_info->wfd_device_type = WFD_DEVINFO_SOURCE;
+       }
+       else                                    //      Set to Miracast sink device.
+       {
+               pwfd_info->wfd_device_type = WFD_DEVINFO_PSINK;
+       }
+
+exit:
+
+       return ret;
+
+}
+
+static int rtw_p2p_set_scan_result_type(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+
+       int ret = 0;
+       _adapter                                        *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct iw_point                         *pdata = &wrqu->data;
+       struct wifidirect_info          *pwdinfo = &( padapter->wdinfo );
+       struct wifi_display_info                *pwfd_info = pwdinfo->wfd_info;
+
+       //      Commented by Albert 20120328
+       //      The input data is 0 , 1 , 2
+       //      0: when the P2P is enabled, the scan result will return all the found P2P device.
+       //      1: when the P2P is enabled, the scan result will return all the found P2P device and AP.
+       //      2: when the P2P is enabled, the scan result will show up the found Miracast devices base on...
+       //      It will show up all the Miracast source device if this device is sink.
+       //      It will show up all the Miracast sink device if this device is source.
+
+       DBG_871X( "[%s] data = %s\n", __FUNCTION__, extra );
+
+       if ( extra[ 0 ] == '0' )
+       {
+               pwfd_info->scan_result_type = SCAN_RESULT_P2P_ONLY;
+       }
+       else if ( extra[ 0 ] == '1' )
+       {
+               pwfd_info->scan_result_type = SCAN_RESULT_ALL;
+       }
+       else if ( extra[ 0 ] == '2' )
+       {
+               pwfd_info->scan_result_type = SCAN_RESULT_WFD_TYPE;
+       }
+       else
+       {
+               pwfd_info->scan_result_type = SCAN_RESULT_P2P_ONLY;
+       }
+
+exit:
+
+       return ret;
+
+}
+
+static int rtw_p2p_set_wfd_enable(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+//     Commented by Kurt 20121206
+//     This function is used to set wfd enabled
+
+       int ret = 0;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
+
+       if(*extra == '0' )
+               pwdinfo->wfd_info->wfd_enable = _FALSE;
+       else if(*extra == '1')
+               pwdinfo->wfd_info->wfd_enable = _TRUE;
+
+       DBG_871X( "[%s] wfd_enable = %d\n", __FUNCTION__, pwdinfo->wfd_info->wfd_enable );
+
+       return ret;
+
+}
+
+static int rtw_p2p_set_driver_iface(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+//     Commented by Kurt 20121206
+//     This function is used to set driver iface is WEXT or CFG80211
+       int ret = 0;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
+
+       if(*extra == '1' )
+       {
+               pwdinfo->driver_interface = DRIVER_WEXT;
+               DBG_871X( "[%s] driver_interface = WEXT\n", __FUNCTION__);
+       }
+       else if(*extra == '2')
+       {
+               pwdinfo->driver_interface = DRIVER_CFG80211;
+               DBG_871X( "[%s] driver_interface = CFG80211\n", __FUNCTION__);
+       }
+
+       return ret;
+
+}
+
+//     To set the WFD session available to enable or disable
+static int rtw_p2p_set_sa(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+
+       int ret = 0;
+       _adapter                                        *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct iw_point                         *pdata = &wrqu->data;
+       struct wifidirect_info          *pwdinfo = &( padapter->wdinfo );
+       struct wifi_display_info                *pwfd_info = pwdinfo->wfd_info;
+
+       DBG_871X( "[%s] data = %s\n", __FUNCTION__, extra );
+
+       if( 0 )
+       {
+               DBG_871X( "[%s] WiFi Direct is disable!\n", __FUNCTION__ );
+               return ret;
+       }
+       else
+       {
+               if ( extra[ 0 ] == '0' )        //      Disable the session available.
+               {
+                       pwdinfo->session_available = _FALSE;
+               }
+               else if ( extra[ 0 ] == '1' )   //      Enable the session available.
+               {
+                       pwdinfo->session_available = _TRUE;
+               }
+               else
+               {
+                       pwdinfo->session_available = _FALSE;
+               }
+       }
+       printk( "[%s] session available = %d\n", __FUNCTION__, pwdinfo->session_available );
+
+exit:
+
+       return ret;
+
+}
+#endif //CONFIG_WFD
+
+static int rtw_p2p_prov_disc(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+       int ret = 0;
+       _adapter                                *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
+       u8                                      peerMAC[ ETH_ALEN ] = { 0x00 };
+       int                                     jj,kk;
+       u8                                      peerMACStr[ ETH_ALEN * 2 ] = { 0x00 };
+       struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
+       _list                                   *plist, *phead;
+       _queue                          *queue  = &(pmlmepriv->scanned_queue);
+       struct  wlan_network    *pnetwork = NULL;
+       uint                                    uintPeerChannel = 0;
+       u8                                      attr_content[100] = { 0x00 }, _status = 0;
+       u8 *p2pie;
+       uint                                    p2pielen = 0, attr_contentlen = 0;
+       _irqL                           irqL;
+       u8                                      ie_offset;
+#ifdef CONFIG_CONCURRENT_MODE
+       _adapter                                *pbuddy_adapter = padapter->pbuddy_adapter;
+       struct mlme_ext_priv    *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
+#endif // CONFIG_CONCURRENT_MODE
+
+#ifdef CONFIG_WFD
+       struct wifi_display_info*       pwfd_info = pwdinfo->wfd_info;
+#endif // CONFIG_WFD
+
+       //      Commented by Albert 20110301
+       //      The input data contains two informations.
+       //      1. First information is the MAC address which wants to issue the provisioning discovery request frame.
+       //      2. Second information is the WPS configuration method which wants to discovery
+       //      Format: 00:E0:4C:00:00:05_display
+       //      Format: 00:E0:4C:00:00:05_keypad
+       //      Format: 00:E0:4C:00:00:05_pbc
+       //      Format: 00:E0:4C:00:00:05_label
+
+       DBG_871X( "[%s] data = %s\n", __FUNCTION__, extra );
+
+       if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+       {
+               DBG_871X( "[%s] WiFi Direct is disable!\n", __FUNCTION__ );
+               return ret;
+       }
+       else
+       {
+#ifdef CONFIG_INTEL_WIDI
+               if(check_fwstate(pmlmepriv, _FW_UNDER_SURVEY) == _TRUE){
+                       DBG_871X( "[%s] WiFi is under survey!\n", __FUNCTION__ );
+                       return ret;
+               }
+#endif //CONFIG_INTEL_WIDI
+
+               //      Reset the content of struct tx_provdisc_req_info excluded the wps_config_method_request.
+               _rtw_memset( pwdinfo->tx_prov_disc_info.peerDevAddr, 0x00, ETH_ALEN );
+               _rtw_memset( pwdinfo->tx_prov_disc_info.peerIFAddr, 0x00, ETH_ALEN );
+               _rtw_memset( &pwdinfo->tx_prov_disc_info.ssid, 0x00, sizeof( NDIS_802_11_SSID ) );
+               pwdinfo->tx_prov_disc_info.peer_channel_num[ 0 ] = 0;
+               pwdinfo->tx_prov_disc_info.peer_channel_num[ 1 ] = 0;
+               pwdinfo->tx_prov_disc_info.benable = _FALSE;
+       }
+
+       for( jj = 0, kk = 0; jj < ETH_ALEN; jj++, kk += 3 )
+       {
+               peerMAC[ jj ] = key_2char2num( extra[kk], extra[kk+ 1] );
+       }
+
+       if ( _rtw_memcmp( &extra[ 18 ], "display", 7 ) )
+       {
+               pwdinfo->tx_prov_disc_info.wps_config_method_request = WPS_CM_DISPLYA;
+       }
+       else if ( _rtw_memcmp( &extra[ 18 ], "keypad", 7 ) )
+       {
+               pwdinfo->tx_prov_disc_info.wps_config_method_request = WPS_CM_KEYPAD;
+       }
+       else if ( _rtw_memcmp( &extra[ 18 ], "pbc", 3 ) )
+       {
+               pwdinfo->tx_prov_disc_info.wps_config_method_request = WPS_CM_PUSH_BUTTON;
+       }
+       else if ( _rtw_memcmp( &extra[ 18 ], "label", 5 ) )
+       {
+               pwdinfo->tx_prov_disc_info.wps_config_method_request = WPS_CM_LABEL;
+       }
+       else
+       {
+               DBG_871X( "[%s] Unknown WPS config methodn", __FUNCTION__ );
+               return( ret );
+       }
+
+
+       _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+
+       phead = get_list_head(queue);
+       plist = get_next(phead);
+
+       while(1)
+       {
+               if (rtw_end_of_queue_search(phead,plist)== _TRUE)
+                       break;
+
+               if( uintPeerChannel != 0 )
+                       break;
+
+               pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
+
+               //      Commented by Albert 2011/05/18
+               //      Match the device address located in the P2P IE
+               //      This is for the case that the P2P device address is not the same as the P2P interface address.
+
+               if (pnetwork->network.Reserved[0] == 2) { // Probe Request
+                       ie_offset = 0;
+               } else { // Beacon or Probe Respones
+                       ie_offset = 12;
+               }
+               if ( (p2pie=rtw_get_p2p_ie( &pnetwork->network.IEs[ie_offset], pnetwork->network.IELength - ie_offset, NULL, &p2pielen)) )
+               {
+                       while ( p2pie )
+                       {
+                               //      The P2P Device ID attribute is included in the Beacon frame.
+                               //      The P2P Device Info attribute is included in the probe response frame.
+
+                               if ( rtw_get_p2p_attr_content( p2pie, p2pielen, P2P_ATTR_DEVICE_ID, attr_content, &attr_contentlen) )
+                               {
+                                       //      Handle the P2P Device ID attribute of Beacon first
+                                       if ( _rtw_memcmp( attr_content, peerMAC, ETH_ALEN ) )
+                                       {
+                                               uintPeerChannel = pnetwork->network.Configuration.DSConfig;
+                                               break;
+                                       }
+                               }
+                               else if ( rtw_get_p2p_attr_content( p2pie, p2pielen, P2P_ATTR_DEVICE_INFO, attr_content, &attr_contentlen) )
+                               {
+                                       //      Handle the P2P Device Info attribute of probe response
+                                       if ( _rtw_memcmp( attr_content, peerMAC, ETH_ALEN ) )
+                                       {
+                                               uintPeerChannel = pnetwork->network.Configuration.DSConfig;
+                                               break;
+                                       }
+                               }
+
+                               //Get the next P2P IE
+                               p2pie = rtw_get_p2p_ie(p2pie+p2pielen, pnetwork->network.IELength - ie_offset -(p2pie -&pnetwork->network.IEs[ie_offset] + p2pielen), NULL, &p2pielen);
+                       }
+               }
+
+#ifdef CONFIG_INTEL_WIDI
+                       // Some Intel WiDi source may not provide P2P IE,
+                       // so we could only compare mac addr by 802.11 Source Address
+                       if( pmlmepriv->widi_state == INTEL_WIDI_STATE_WFD_CONNECTION
+                               && uintPeerChannel == 0 )
+                       {
+                               if ( _rtw_memcmp( pnetwork->network.MacAddress, peerMAC, ETH_ALEN ) )
+                               {
+                                       uintPeerChannel = pnetwork->network.Configuration.DSConfig;
+                                       break;
+                               }
+                       }
+#endif //CONFIG_INTEL_WIDI
+
+               plist = get_next(plist);
+
+       }
+
+       _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
+
+       if ( uintPeerChannel )
+       {
+#ifdef CONFIG_WFD
+       {
+               u8      wfd_ie[ 128 ] = { 0x00 };
+               uint    wfd_ielen = 0;
+
+               if ( rtw_get_wfd_ie( &pnetwork->network.IEs[12], pnetwork->network.IELength - 12,  wfd_ie, &wfd_ielen ) )
+               {
+                       u8      wfd_devinfo[ 6 ] = { 0x00 };
+                       uint    wfd_devlen = 6;
+
+                       DBG_871X( "[%s] Found WFD IE!\n", __FUNCTION__ );
+                       if ( rtw_get_wfd_attr_content( wfd_ie, wfd_ielen, WFD_ATTR_DEVICE_INFO, wfd_devinfo, &wfd_devlen ) )
+                       {
+                               u16     wfd_devinfo_field = 0;
+
+                               //      Commented by Albert 20120319
+                               //      The first two bytes are the WFD device information field of WFD device information subelement.
+                               //      In big endian format.
+                               wfd_devinfo_field = RTW_GET_BE16(wfd_devinfo);
+                               if ( wfd_devinfo_field & WFD_DEVINFO_SESSION_AVAIL )
+                               {
+                                       pwfd_info->peer_session_avail = _TRUE;
+                               }
+                               else
+                               {
+                                       pwfd_info->peer_session_avail = _FALSE;
+                               }
+                       }
+               }
+
+               if ( _FALSE == pwfd_info->peer_session_avail )
+               {
+                       DBG_871X( "[%s] WFD Session not avaiable!\n", __FUNCTION__ );
+                       goto exit;
+               }
+       }
+#endif // CONFIG_WFD
+
+               DBG_871X( "[%s] peer channel: %d!\n", __FUNCTION__, uintPeerChannel );
+#ifdef CONFIG_CONCURRENT_MODE
+               if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
+               {
+                       _cancel_timer_ex( &pwdinfo->ap_p2p_switch_timer );
+               }
+#endif // CONFIG_CONCURRENT_MODE
+               _rtw_memcpy( pwdinfo->tx_prov_disc_info.peerIFAddr, pnetwork->network.MacAddress, ETH_ALEN );
+               _rtw_memcpy( pwdinfo->tx_prov_disc_info.peerDevAddr, peerMAC, ETH_ALEN );
+               pwdinfo->tx_prov_disc_info.peer_channel_num[0] = ( u16 ) uintPeerChannel;
+               pwdinfo->tx_prov_disc_info.benable = _TRUE;
+               rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
+               rtw_p2p_set_state(pwdinfo, P2P_STATE_TX_PROVISION_DIS_REQ);
+
+               if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_CLIENT))
+               {
+                       _rtw_memcpy( &pwdinfo->tx_prov_disc_info.ssid, &pnetwork->network.Ssid, sizeof( NDIS_802_11_SSID ) );
+               }
+               else if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_DEVICE) || rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
+               {
+                       _rtw_memcpy( pwdinfo->tx_prov_disc_info.ssid.Ssid, pwdinfo->p2p_wildcard_ssid, P2P_WILDCARD_SSID_LEN );
+                       pwdinfo->tx_prov_disc_info.ssid.SsidLength= P2P_WILDCARD_SSID_LEN;
+               }
+
+#ifdef CONFIG_CONCURRENT_MODE
+               if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
+               {
+                       //      Have to enter the power saving with the AP
+                       set_channel_bwmode(padapter, pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_ch_offset, pbuddy_mlmeext->cur_bwmode);
+
+                       issue_nulldata(pbuddy_adapter, NULL, 1, 3, 500);
+               }
+               else
+               {
+                       set_channel_bwmode(padapter, uintPeerChannel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
+               }
+#else
+               set_channel_bwmode(padapter, uintPeerChannel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
+#endif
+
+               _set_timer( &pwdinfo->pre_tx_scan_timer, P2P_TX_PRESCAN_TIMEOUT );
+
+#ifdef CONFIG_CONCURRENT_MODE
+               if ( check_buddy_fwstate(padapter, _FW_LINKED ) )
+               {
+                       _set_timer( &pwdinfo->restore_p2p_state_timer, P2P_CONCURRENT_PROVISION_TIMEOUT );
+               }
+               else
+               {
+                       _set_timer( &pwdinfo->restore_p2p_state_timer, P2P_PROVISION_TIMEOUT );
+               }
+#else
+               _set_timer( &pwdinfo->restore_p2p_state_timer, P2P_PROVISION_TIMEOUT );
+#endif // CONFIG_CONCURRENT_MODE
+
+
+       }
+       else
+       {
+               DBG_871X( "[%s] NOT Found in the Scanning Queue!\n", __FUNCTION__ );
+#ifdef CONFIG_INTEL_WIDI
+               rtw_p2p_set_state(pwdinfo, P2P_STATE_FIND_PHASE_SEARCH);
+               rtw_p2p_findphase_ex_set(pwdinfo, P2P_FINDPHASE_EX_NONE);
+               rtw_free_network_queue(padapter, _TRUE);
+               _enter_critical_bh(&pmlmepriv->lock, &irqL);
+               rtw_sitesurvey_cmd(padapter, NULL, 0, NULL, 0);
+               _exit_critical_bh(&pmlmepriv->lock, &irqL);
+#endif //CONFIG_INTEL_WIDI
+       }
+exit:
+
+       return ret;
+
+}
+
+//     Added by Albert 20110328
+//     This function is used to inform the driver the user had specified the pin code value or pbc
+//     to application.
+
+static int rtw_p2p_got_wpsinfo(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+
+       int ret = 0;
+       _adapter                                *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
+
+
+       DBG_871X( "[%s] data = %s\n", __FUNCTION__, extra );
+       //      Added by Albert 20110328
+       //      if the input data is P2P_NO_WPSINFO -> reset the wpsinfo
+       //      if the input data is P2P_GOT_WPSINFO_PEER_DISPLAY_PIN -> the utility just input the PIN code got from the peer P2P device.
+       //      if the input data is P2P_GOT_WPSINFO_SELF_DISPLAY_PIN -> the utility just got the PIN code from itself.
+       //      if the input data is P2P_GOT_WPSINFO_PBC -> the utility just determine to use the PBC
+
+       if ( *extra == '0' )
+       {
+               pwdinfo->ui_got_wps_info = P2P_NO_WPSINFO;
+       }
+       else if ( *extra == '1' )
+       {
+               pwdinfo->ui_got_wps_info = P2P_GOT_WPSINFO_PEER_DISPLAY_PIN;
+       }
+       else if ( *extra == '2' )
+       {
+               pwdinfo->ui_got_wps_info = P2P_GOT_WPSINFO_SELF_DISPLAY_PIN;
+       }
+       else if ( *extra == '3' )
+       {
+               pwdinfo->ui_got_wps_info = P2P_GOT_WPSINFO_PBC;
+       }
+       else
+       {
+               pwdinfo->ui_got_wps_info = P2P_NO_WPSINFO;
+       }
+
+       return ret;
+
+}
+
+#endif //CONFIG_P2P
+
+static int rtw_p2p_set(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+
+       int ret = 0;
+#ifdef CONFIG_P2P
+
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+       struct iw_point *pdata = &wrqu->data;
+       struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+
+       DBG_871X( "[%s] extra = %s\n", __FUNCTION__, extra );
+
+       if ( _rtw_memcmp( extra, "enable=", 7 ) )
+       {
+               rtw_wext_p2p_enable( dev, info, wrqu, &extra[7] );
+       }
+       else if ( _rtw_memcmp( extra, "setDN=", 6 ) )
+       {
+               wrqu->data.length -= 6;
+               rtw_p2p_setDN( dev, info, wrqu, &extra[6] );
+       }
+       else if ( _rtw_memcmp( extra, "profilefound=", 13 ) )
+       {
+               wrqu->data.length -= 13;
+               rtw_p2p_profilefound( dev, info, wrqu, &extra[13] );
+       }
+       else if ( _rtw_memcmp( extra, "prov_disc=", 10 ) )
+       {
+               wrqu->data.length -= 10;
+               rtw_p2p_prov_disc( dev, info, wrqu, &extra[10] );
+       }
+       else if ( _rtw_memcmp( extra, "nego=", 5 ) )
+       {
+               wrqu->data.length -= 5;
+               rtw_p2p_connect( dev, info, wrqu, &extra[5] );
+       }
+       else if ( _rtw_memcmp( extra, "intent=", 7 ) )
+       {
+               //      Commented by Albert 2011/03/23
+               //      The wrqu->data.length will include the null character
+               //      So, we will decrease 7 + 1
+               wrqu->data.length -= 8;
+               rtw_p2p_set_intent( dev, info, wrqu, &extra[7] );
+       }
+       else if ( _rtw_memcmp( extra, "ssid=", 5 ) )
+       {
+               wrqu->data.length -= 5;
+               rtw_p2p_set_go_nego_ssid( dev, info, wrqu, &extra[5] );
+       }
+       else if ( _rtw_memcmp( extra, "got_wpsinfo=", 12 ) )
+       {
+               wrqu->data.length -= 12;
+               rtw_p2p_got_wpsinfo( dev, info, wrqu, &extra[12] );
+       }
+       else if ( _rtw_memcmp( extra, "listen_ch=", 10 ) )
+       {
+               //      Commented by Albert 2011/05/24
+               //      The wrqu->data.length will include the null character
+               //      So, we will decrease (10 + 1)
+               wrqu->data.length -= 11;
+               rtw_p2p_set_listen_ch( dev, info, wrqu, &extra[10] );
+       }
+       else if ( _rtw_memcmp( extra, "op_ch=", 6 ) )
+       {
+               //      Commented by Albert 2011/05/24
+               //      The wrqu->data.length will include the null character
+               //      So, we will decrease (6 + 1)
+               wrqu->data.length -= 7;
+               rtw_p2p_set_op_ch( dev, info, wrqu, &extra[6] );
+       }
+       else if ( _rtw_memcmp( extra, "invite=", 7 ) )
+       {
+               wrqu->data.length -= 8;
+               rtw_p2p_invite_req( dev, info, wrqu, &extra[7] );
+       }
+       else if ( _rtw_memcmp( extra, "persistent=", 11 ) )
+       {
+               wrqu->data.length -= 11;
+               rtw_p2p_set_persistent( dev, info, wrqu, &extra[11] );
+       }
+       else if ( _rtw_memcmp ( extra, "uuid=", 5) )
+       {
+               wrqu->data.length -= 5;
+               ret = rtw_p2p_set_wps_uuid( dev, info, wrqu, &extra[5] );
+       }
+#ifdef CONFIG_WFD
+       else if ( _rtw_memcmp( extra, "sa=", 3 ) )
+       {
+               //      sa: WFD Session Available information
+               wrqu->data.length -= 3;
+               rtw_p2p_set_sa( dev, info, wrqu, &extra[3] );
+       }
+       else if ( _rtw_memcmp( extra, "pc=", 3 ) )
+       {
+               //      pc: WFD Preferred Connection
+               wrqu->data.length -= 3;
+               rtw_p2p_set_pc( dev, info, wrqu, &extra[3] );
+       }
+       else if ( _rtw_memcmp( extra, "wfd_type=", 9 ) )
+       {
+               //      Specify this device is Mircast source or sink
+               wrqu->data.length -= 9;
+               rtw_p2p_set_wfd_device_type( dev, info, wrqu, &extra[9] );
+       }
+       else if ( _rtw_memcmp( extra, "scan_type=", 10 ) )
+       {
+               wrqu->data.length -= 10;
+               rtw_p2p_set_scan_result_type( dev, info, wrqu, &extra[10] );
+       }
+       else if ( _rtw_memcmp( extra, "wfd_enable=", 11 ) )
+       {
+               wrqu->data.length -= 11;
+               rtw_p2p_set_wfd_enable( dev, info, wrqu, &extra[11] );
+       }
+       else if ( _rtw_memcmp( extra, "driver_iface=", 13 ) )
+       {
+               wrqu->data.length -= 13;
+               rtw_p2p_set_driver_iface( dev, info, wrqu, &extra[13] );
+       }
+#endif //CONFIG_WFD
+#endif //CONFIG_P2P
+
+       return ret;
+
+}
+
+static int rtw_p2p_get(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+
+       int ret = 0;
+
+#ifdef CONFIG_P2P
+
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+       struct iw_point *pdata = &wrqu->data;
+       struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+
+       if ( padapter->bShowGetP2PState )
+       {
+               DBG_871X( "[%s] extra = %s\n", __FUNCTION__, (char*) wrqu->data.pointer );
+       }
+
+       if ( _rtw_memcmp( wrqu->data.pointer, "status", 6 ) )
+       {
+               rtw_p2p_get_status( dev, info, wrqu, extra );
+       }
+       else if ( _rtw_memcmp( wrqu->data.pointer, "role", 4 ) )
+       {
+               rtw_p2p_get_role( dev, info, wrqu, extra);
+       }
+       else if ( _rtw_memcmp( wrqu->data.pointer, "peer_ifa", 8 ) )
+       {
+               rtw_p2p_get_peer_ifaddr( dev, info, wrqu, extra);
+       }
+       else if ( _rtw_memcmp( wrqu->data.pointer, "req_cm", 6 ) )
+       {
+               rtw_p2p_get_req_cm( dev, info, wrqu, extra);
+       }
+       else if ( _rtw_memcmp( wrqu->data.pointer, "peer_deva", 9 ) )
+       {
+               //      Get the P2P device address when receiving the provision discovery request frame.
+               rtw_p2p_get_peer_devaddr( dev, info, wrqu, extra);
+       }
+       else if ( _rtw_memcmp( wrqu->data.pointer, "group_id", 8 ) )
+       {
+               rtw_p2p_get_groupid( dev, info, wrqu, extra);
+       }
+       else if ( _rtw_memcmp( wrqu->data.pointer, "inv_peer_deva", 13 ) )
+       {
+               //      Get the P2P device address when receiving the P2P Invitation request frame.
+               rtw_p2p_get_peer_devaddr_by_invitation( dev, info, wrqu, extra);
+       }
+       else if ( _rtw_memcmp( wrqu->data.pointer, "op_ch", 5 ) )
+       {
+               rtw_p2p_get_op_ch( dev, info, wrqu, extra);
+       }
+#ifdef CONFIG_WFD
+       else if ( _rtw_memcmp( wrqu->data.pointer, "peer_port", 9 ) )
+       {
+               rtw_p2p_get_peer_wfd_port( dev, info, wrqu, extra );
+       }
+       else if ( _rtw_memcmp( wrqu->data.pointer, "wfd_sa", 6 ) )
+       {
+               rtw_p2p_get_peer_wfd_session_available( dev, info, wrqu, extra );
+       }
+       else if ( _rtw_memcmp( wrqu->data.pointer, "wfd_pc", 6 ) )
+       {
+               rtw_p2p_get_peer_wfd_preferred_connection( dev, info, wrqu, extra );
+       }
+#endif // CONFIG_WFD
+
+#endif //CONFIG_P2P
+
+       return ret;
+
+}
+
+static int rtw_p2p_get2(struct net_device *dev,
+                                               struct iw_request_info *info,
+                                               union iwreq_data *wrqu, char *extra)
+{
+
+       int ret = 0;
+
+#ifdef CONFIG_P2P
+
+       int length = wrqu->data.length;
+       char *buffer = (u8 *)rtw_malloc(length);
+
+       if (buffer == NULL)
+       {
+               ret = -ENOMEM;
+               goto bad;
+       }
+
+       if (copy_from_user(buffer, wrqu->data.pointer, wrqu->data.length))
+       {
+               ret - EFAULT;
+               goto bad;
+       }
+
+       DBG_871X("[%s] buffer = %s\n", __FUNCTION__, buffer);
+
+       if (_rtw_memcmp(buffer, "wpsCM=", 6))
+       {
+               ret = rtw_p2p_get_wps_configmethod(dev, info, wrqu, extra, &buffer[6]);
+       } else if (_rtw_memcmp(buffer, "devN=", 5))
+       {
+               ret = rtw_p2p_get_device_name(dev, info, wrqu, extra, &buffer[5]);
+       } else if (_rtw_memcmp(buffer, "dev_type=", 9))
+       {
+               ret = rtw_p2p_get_device_type(dev, info, wrqu, extra, &buffer[9]);
+       } else if (_rtw_memcmp(buffer, "go_devadd=", 10))
+       {
+               ret = rtw_p2p_get_go_device_address(dev, info, wrqu, extra, &buffer[10]);
+       } else if (_rtw_memcmp(buffer, "InvProc=", 8))
+       {
+               ret = rtw_p2p_get_invitation_procedure(dev, info, wrqu, extra, &buffer[8]);
+       } else
+       {
+               snprintf(extra, sizeof("Command not found."), "Command not found.");
+               wrqu->data.length = strlen(extra);
+       }
+
+bad:
+       if (buffer)
+       {
+               rtw_mfree(buffer, length);
+       }
+
+#endif //CONFIG_P2P
+
+       return ret;
+
+}
+
+extern int rtw_change_ifname(_adapter *padapter, const char *ifname);
+static int rtw_rereg_nd_name(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+       int ret = 0;
+       _adapter *padapter = rtw_netdev_priv(dev);
+       struct rereg_nd_name_data *rereg_priv = &padapter->rereg_nd_name_priv;
+       char new_ifname[IFNAMSIZ];
+
+       if(rereg_priv->old_ifname[0] == 0) {
+               char *reg_ifname;
+#ifdef CONFIG_CONCURRENT_MODE
+               if (padapter->isprimary)
+                       reg_ifname = padapter->registrypriv.ifname;
+               else
+#endif
+               reg_ifname = padapter->registrypriv.if2name;
+
+               strncpy(rereg_priv->old_ifname, reg_ifname, IFNAMSIZ);
+               rereg_priv->old_ifname[IFNAMSIZ-1] = 0;
+       }
+
+       //DBG_871X("%s wrqu->data.length:%d\n", __FUNCTION__, wrqu->data.length);
+       if(wrqu->data.length > IFNAMSIZ)
+               return -EFAULT;
+
+       if ( copy_from_user(new_ifname, wrqu->data.pointer, IFNAMSIZ) ) {
+               return -EFAULT;
+       }
+
+       if( 0 == strcmp(rereg_priv->old_ifname, new_ifname) ) {
+               return ret;
+       }
+
+       DBG_871X("%s new_ifname:%s\n", __FUNCTION__, new_ifname);
+       if( 0 != (ret = rtw_change_ifname(padapter, new_ifname)) ) {
+               goto exit;
+       }
+
+       if(_rtw_memcmp(rereg_priv->old_ifname, "disable%d", 9) == _TRUE) {
+               padapter->ledpriv.bRegUseLed= rereg_priv->old_bRegUseLed;
+               rtw_hal_sw_led_init(padapter);
+               rtw_ips_mode_req(&padapter->pwrctrlpriv, rereg_priv->old_ips_mode);
+       }
+
+       strncpy(rereg_priv->old_ifname, new_ifname, IFNAMSIZ);
+       rereg_priv->old_ifname[IFNAMSIZ-1] = 0;
+
+       if(_rtw_memcmp(new_ifname, "disable%d", 9) == _TRUE) {
+
+               DBG_871X("%s disable\n", __FUNCTION__);
+               // free network queue for Android's timming issue
+               rtw_free_network_queue(padapter, _TRUE);
+
+               // close led
+               rtw_led_control(padapter, LED_CTL_POWER_OFF);
+               rereg_priv->old_bRegUseLed = padapter->ledpriv.bRegUseLed;
+               padapter->ledpriv.bRegUseLed= _FALSE;
+               rtw_hal_sw_led_deinit(padapter);
+
+               // the interface is being "disabled", we can do deeper IPS
+               rereg_priv->old_ips_mode = rtw_get_ips_mode_req(&padapter->pwrctrlpriv);
+               rtw_ips_mode_req(&padapter->pwrctrlpriv, IPS_NORMAL);
+       }
+exit:
+       return ret;
+
+}
+
+#if 0
+void mac_reg_dump(_adapter *padapter)
+{
+       int i,j=1;
+       DBG_871X("\n======= MAC REG =======\n");
+       for(i=0x0;i<0x300;i+=4)
+       {
+               if(j%4==1)      DBG_871X("0x%02x",i);
+               DBG_871X(" 0x%08x ",rtw_read32(padapter,i));
+               if((j++)%4 == 0)        DBG_871X("\n");
+       }
+       for(i=0x400;i<0x800;i+=4)
+       {
+               if(j%4==1)      DBG_871X("0x%02x",i);
+               DBG_871X(" 0x%08x ",rtw_read32(padapter,i));
+               if((j++)%4 == 0)        DBG_871X("\n");
+       }
+}
+void bb_reg_dump(_adapter *padapter)
+{
+       int i,j=1;
+       DBG_871X("\n======= BB REG =======\n");
+       for(i=0x800;i<0x1000;i+=4)
+       {
+               if(j%4==1) DBG_871X("0x%02x",i);
+
+               DBG_871X(" 0x%08x ",rtw_read32(padapter,i));
+               if((j++)%4 == 0)        DBG_871X("\n");
+       }
+}
+void rf_reg_dump(_adapter *padapter)
+{
+       int i,j=1,path;
+       u32 value;
+       DBG_871X("\n======= RF REG =======\n");
+       for(path=0;path<2;path++)
+       {
+               DBG_871X("\nRF_Path(%x)\n",path);
+               for(i=0;i<0x100;i++)
+               {
+                       value = PHY_QueryRFReg(padapter, (RF90_RADIO_PATH_E)path,i, bMaskDWord);
+                       if(j%4==1)      DBG_871X("0x%02x ",i);
+                       DBG_871X(" 0x%08x ",value);
+                       if((j++)%4==0)  DBG_871X("\n");
+               }
+       }
+}
+
+#endif
+
+void mac_reg_dump(_adapter *padapter)
+{
+       int i,j=1;
+       DBG_871X("\n======= MAC REG =======\n");
+       for(i=0x0;i<0x300;i+=4)
+       {
+               if(j%4==1)      DBG_871X("0x%02x",i);
+               DBG_871X(" 0x%08x ",rtw_read32(padapter,i));
+               if((j++)%4 == 0)        DBG_871X("\n");
+       }
+       for(i=0x400;i<0x800;i+=4)
+       {
+               if(j%4==1)      DBG_871X("0x%02x",i);
+               DBG_871X(" 0x%08x ",rtw_read32(padapter,i));
+               if((j++)%4 == 0)        DBG_871X("\n");
+       }
+}
+void bb_reg_dump(_adapter *padapter)
+{
+       int i,j=1;
+       DBG_871X("\n======= BB REG =======\n");
+       for(i=0x800;i<0x1000;i+=4)
+       {
+               if(j%4==1) DBG_871X("0x%02x",i);
+
+               DBG_871X(" 0x%08x ",rtw_read32(padapter,i));
+               if((j++)%4 == 0)        DBG_871X("\n");
+       }
+}
+void rf_reg_dump(_adapter *padapter)
+{
+       int i,j=1,path;
+       u32 value;
+       u8 rf_type,path_nums = 0;
+       rtw_hal_get_hwreg(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
+
+       DBG_871X("\n======= RF REG =======\n");
+       if((RF_1T2R == rf_type) ||(RF_1T1R ==rf_type ))
+               path_nums = 1;
+       else
+               path_nums = 2;
+
+       for(path=0;path<path_nums;path++)
+       {
+               DBG_871X("\nRF_Path(%x)\n",path);
+               for(i=0;i<0x100;i++)
+               {
+                       //value = PHY_QueryRFReg(padapter, (RF90_RADIO_PATH_E)path,i, bMaskDWord);
+                       value =rtw_hal_read_rfreg(padapter, path, i, 0xffffffff);
+                       if(j%4==1)      DBG_871X("0x%02x ",i);
+                       DBG_871X(" 0x%08x ",value);
+                       if((j++)%4==0)  DBG_871X("\n");
+               }
+       }
+}
+
+#ifdef CONFIG_IOL
+#include <rtw_iol.h>
+#endif
+#ifdef DBG_CONFIG_ERROR_DETECT
+#include <rtw_sreset.h>
+#endif
+static int rtw_dbg_port(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+       _irqL irqL;
+       int ret = 0;
+       u8 major_cmd, minor_cmd;
+       u16 arg;
+       u32 extra_arg, *pdata, val32;
+       struct sta_info *psta;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       struct security_priv *psecuritypriv = &padapter->securitypriv;
+       struct wlan_network *cur_network = &(pmlmepriv->cur_network);
+       struct sta_priv *pstapriv = &padapter->stapriv;
+
+
+       pdata = (u32*)&wrqu->data;
+
+       val32 = *pdata;
+       arg = (u16)(val32&0x0000ffff);
+       major_cmd = (u8)(val32>>24);
+       minor_cmd = (u8)((val32>>16)&0x00ff);
+
+       extra_arg = *(pdata+1);
+
+       switch(major_cmd)
+       {
+               case 0x70://read_reg
+                       switch(minor_cmd)
+                       {
+                               case 1:
+                                       DBG_871X("rtw_read8(0x%x)=0x%02x\n", arg, rtw_read8(padapter, arg));
+                                       break;
+                               case 2:
+                                       DBG_871X("rtw_read16(0x%x)=0x%04x\n", arg, rtw_read16(padapter, arg));
+                                       break;
+                               case 4:
+                                       DBG_871X("rtw_read32(0x%x)=0x%08x\n", arg, rtw_read32(padapter, arg));
+                                       break;
+                       }
+                       break;
+               case 0x71://write_reg
+                       switch(minor_cmd)
+                       {
+                               case 1:
+                                       rtw_write8(padapter, arg, extra_arg);
+                                       DBG_871X("rtw_write8(0x%x)=0x%02x\n", arg, rtw_read8(padapter, arg));
+                                       break;
+                               case 2:
+                                       rtw_write16(padapter, arg, extra_arg);
+                                       DBG_871X("rtw_write16(0x%x)=0x%04x\n", arg, rtw_read16(padapter, arg));
+                                       break;
+                               case 4:
+                                       rtw_write32(padapter, arg, extra_arg);
+                                       DBG_871X("rtw_write32(0x%x)=0x%08x\n", arg, rtw_read32(padapter, arg));
+                                       break;
+                       }
+                       break;
+               case 0x72://read_bb
+                       DBG_871X("read_bbreg(0x%x)=0x%x\n", arg, rtw_hal_read_bbreg(padapter, arg, 0xffffffff));
+                       break;
+               case 0x73://write_bb
+                       rtw_hal_write_bbreg(padapter, arg, 0xffffffff, extra_arg);
+                       DBG_871X("write_bbreg(0x%x)=0x%x\n", arg, rtw_hal_read_bbreg(padapter, arg, 0xffffffff));
+                       break;
+               case 0x74://read_rf
+                       DBG_871X("read RF_reg path(0x%02x),offset(0x%x),value(0x%08x)\n",minor_cmd,arg,rtw_hal_read_rfreg(padapter, minor_cmd, arg, 0xffffffff));
+                       break;
+               case 0x75://write_rf
+                       rtw_hal_write_rfreg(padapter, minor_cmd, arg, 0xffffffff, extra_arg);
+                       DBG_871X("write RF_reg path(0x%02x),offset(0x%x),value(0x%08x)\n",minor_cmd,arg, rtw_hal_read_rfreg(padapter, minor_cmd, arg, 0xffffffff));
+                       break;
+
+               case 0x76:
+                       switch(minor_cmd)
+                       {
+                               case 0x00: //normal mode,
+                                       padapter->recvpriv.is_signal_dbg = 0;
+                                       break;
+                               case 0x01: //dbg mode
+                                       padapter->recvpriv.is_signal_dbg = 1;
+                                       extra_arg = extra_arg>100?100:extra_arg;
+                                       extra_arg = extra_arg<0?0:extra_arg;
+                                       padapter->recvpriv.signal_strength_dbg=extra_arg;
+                                       break;
+                       }
+                       break;
+               case 0x78: //IOL test
+                       switch(minor_cmd)
+                       {
+                               #ifdef CONFIG_IOL
+                               case 0x04: //LLT table initialization test
+                               {
+                                       u8 page_boundary = 0xf9;
+                                       {
+                                               struct xmit_frame       *xmit_frame;
+
+                                               if((xmit_frame=rtw_IOL_accquire_xmit_frame(padapter)) == NULL) {
+                                                       ret = -ENOMEM;
+                                                       break;
+                                               }
+
+                                               rtw_IOL_append_LLT_cmd(xmit_frame, page_boundary);
+
+
+                                               if(_SUCCESS != rtw_IOL_exec_cmds_sync(padapter, xmit_frame, 500) )
+                                                       ret = -EPERM;
+                                       }
+                               }
+                                       break;
+                               case 0x05: //blink LED test
+                               {
+                                       u16 reg = 0x4c;
+                                       u32 blink_num = 50;
+                                       u32 blink_delay_ms = 200;
+                                       int i;
+
+                                       {
+                                               struct xmit_frame       *xmit_frame;
+
+                                               if((xmit_frame=rtw_IOL_accquire_xmit_frame(padapter)) == NULL) {
+                                                       ret = -ENOMEM;
+                                                       break;
+                                               }
+
+                                               for(i=0;i<blink_num;i++){
+                                                       rtw_IOL_append_WB_cmd(xmit_frame, reg, 0x00);
+                                                       rtw_IOL_append_DELAY_MS_cmd(xmit_frame, blink_delay_ms);
+                                                       rtw_IOL_append_WB_cmd(xmit_frame, reg, 0x08);
+                                                       rtw_IOL_append_DELAY_MS_cmd(xmit_frame, blink_delay_ms);
+                                               }
+                                               if(_SUCCESS != rtw_IOL_exec_cmds_sync(padapter, xmit_frame, (blink_delay_ms*blink_num*2)+200) )
+                                                       ret = -EPERM;
+                                       }
+                               }
+                                       break;
+
+                               case 0x06: //continuous wirte byte test
+                               {
+                                       u16 reg = arg;
+                                       u16 start_value = 0;
+                                       u32 write_num = extra_arg;
+                                       int i;
+                                       u8 final;
+
+                                       {
+                                               struct xmit_frame       *xmit_frame;
+
+                                               if((xmit_frame=rtw_IOL_accquire_xmit_frame(padapter)) == NULL) {
+                                                       ret = -ENOMEM;
+                                                       break;
+                                               }
+
+                                               for(i=0;i<write_num;i++){
+                                                       rtw_IOL_append_WB_cmd(xmit_frame, reg, i+start_value);
+                                               }
+                                               if(_SUCCESS != rtw_IOL_exec_cmds_sync(padapter, xmit_frame, 5000))
+                                                       ret = -EPERM;
+                                       }
+
+                                       if(start_value+write_num-1 == (final=rtw_read8(padapter, reg)) ) {
+                                               DBG_871X("continuous IOL_CMD_WB_REG to 0x%x %u times Success, start:%u, final:%u\n", reg, write_num, start_value, final);
+                                       } else {
+                                               DBG_871X("continuous IOL_CMD_WB_REG to 0x%x %u times Fail, start:%u, final:%u\n", reg, write_num, start_value, final);
+                                       }
+                               }
+                                       break;
+
+                               case 0x07: //continuous wirte word test
+                               {
+                                       u16 reg = arg;
+                                       u16 start_value = 200;
+                                       u32 write_num = extra_arg;
+
+                                       int i;
+                                       u16 final;
+
+                                       {
+                                               struct xmit_frame       *xmit_frame;
+
+                                               if((xmit_frame=rtw_IOL_accquire_xmit_frame(padapter)) == NULL) {
+                                                       ret = -ENOMEM;
+                                                       break;
+                                               }
+
+                                               for(i=0;i<write_num;i++){
+                                                       rtw_IOL_append_WW_cmd(xmit_frame, reg, i+start_value);
+                                               }
+                                               if(_SUCCESS !=rtw_IOL_exec_cmds_sync(padapter, xmit_frame, 5000))
+                                                       ret = -EPERM;
+                                       }
+
+                                       if(start_value+write_num-1 == (final=rtw_read16(padapter, reg)) ) {
+                                               DBG_871X("continuous IOL_CMD_WW_REG to 0x%x %u times Success, start:%u, final:%u\n", reg, write_num, start_value, final);
+                                       } else {
+                                               DBG_871X("continuous IOL_CMD_WW_REG to 0x%x %u times Fail, start:%u, final:%u\n", reg, write_num, start_value, final);
+                                       }
+                               }
+                                       break;
+
+                               case 0x08: //continuous wirte dword test
+                               {
+                                       u16 reg = arg;
+                                       u32 start_value = 0x110000c7;
+                                       u32 write_num = extra_arg;
+
+                                       int i;
+                                       u32 final;
+
+                                       {
+                                               struct xmit_frame       *xmit_frame;
+
+                                               if((xmit_frame=rtw_IOL_accquire_xmit_frame(padapter)) == NULL) {
+                                                       ret = -ENOMEM;
+                                                       break;
+                                               }
+
+                                               for(i=0;i<write_num;i++){
+                                                       rtw_IOL_append_WD_cmd(xmit_frame, reg, i+start_value);
+                                               }
+                                               if(_SUCCESS !=rtw_IOL_exec_cmds_sync(padapter, xmit_frame, 5000))
+                                                       ret = -EPERM;
+
+                                       }
+
+                                       if(start_value+write_num-1 == (final=rtw_read32(padapter, reg)) ) {
+                                               DBG_871X("continuous IOL_CMD_WD_REG to 0x%x %u times Success, start:%u, final:%u\n", reg, write_num, start_value, final);
+                                       } else {
+                                               DBG_871X("continuous IOL_CMD_WD_REG to 0x%x %u times Fail, start:%u, final:%u\n", reg, write_num, start_value, final);
+                                       }
+                               }
+                                       break;
+                               #endif //CONFIG_IOL
+                       }
+                       break;
+               case 0x7a:
+                       receive_disconnect(padapter, pmlmeinfo->network.MacAddress
+                               , WLAN_REASON_EXPIRATION_CHK);
+                       break;
+
+               case 0x7F:
+                       switch(minor_cmd)
+                       {
+                               case 0x0:
+                                       DBG_871X("fwstate=0x%x\n", get_fwstate(pmlmepriv));
+                                       break;
+                               case 0x01:
+                                       DBG_871X("auth_alg=0x%x, enc_alg=0x%x, auth_type=0x%x, enc_type=0x%x\n",
+                                               psecuritypriv->dot11AuthAlgrthm, psecuritypriv->dot11PrivacyAlgrthm,
+                                               psecuritypriv->ndisauthtype, psecuritypriv->ndisencryptstatus);
+                                       break;
+                               case 0x02:
+                                       DBG_871X("pmlmeinfo->state=0x%x\n", pmlmeinfo->state);
+                                       break;
+                               case 0x03:
+                                       DBG_871X("qos_option=%d\n", pmlmepriv->qospriv.qos_option);
+                                       DBG_871X("ht_option=%d\n", pmlmepriv->htpriv.ht_option);
+                                       break;
+                               case 0x04:
+                                       DBG_871X("cur_ch=%d\n", pmlmeext->cur_channel);
+                                       DBG_871X("cur_bw=%d\n", pmlmeext->cur_bwmode);
+                                       DBG_871X("cur_ch_off=%d\n", pmlmeext->cur_ch_offset);
+                                       break;
+                               case 0x05:
+                                       psta = rtw_get_stainfo(pstapriv, cur_network->network.MacAddress);
+                                       if(psta)
+                                       {
+                                               int i;
+                                               struct recv_reorder_ctrl *preorder_ctrl;
+
+                                               DBG_871X("SSID=%s\n", cur_network->network.Ssid.Ssid);
+                                               DBG_871X("sta's macaddr:" MAC_FMT "\n", MAC_ARG(psta->hwaddr));
+                                               DBG_871X("cur_channel=%d, cur_bwmode=%d, cur_ch_offset=%d\n", pmlmeext->cur_channel, pmlmeext->cur_bwmode, pmlmeext->cur_ch_offset);
+                                               DBG_871X("rtsen=%d, cts2slef=%d\n", psta->rtsen, psta->cts2self);
+                                               DBG_871X("qos_en=%d, ht_en=%d, init_rate=%d\n", psta->qos_option, psta->htpriv.ht_option, psta->init_rate);
+                                               DBG_871X("state=0x%x, aid=%d, macid=%d, raid=%d\n", psta->state, psta->aid, psta->mac_id, psta->raid);
+                                               DBG_871X("bwmode=%d, ch_offset=%d, sgi=%d\n", psta->htpriv.bwmode, psta->htpriv.ch_offset, psta->htpriv.sgi);
+                                               DBG_871X("ampdu_enable = %d\n", psta->htpriv.ampdu_enable);
+                                               DBG_871X("agg_enable_bitmap=%x, candidate_tid_bitmap=%x\n", psta->htpriv.agg_enable_bitmap, psta->htpriv.candidate_tid_bitmap);
+
+                                               for(i=0;i<16;i++)
+                                               {
+                                                       preorder_ctrl = &psta->recvreorder_ctrl[i];
+                                                       if(preorder_ctrl->enable)
+                                                       {
+                                                               DBG_871X("tid=%d, indicate_seq=%d\n", i, preorder_ctrl->indicate_seq);
+                                                       }
+                                               }
+
+                                       }
+                                       else
+                                       {
+                                               DBG_871X("can't get sta's macaddr, cur_network's macaddr:" MAC_FMT "\n", MAC_ARG(cur_network->network.MacAddress));
+                                       }
+                                       break;
+                               case 0x06:
+                                       {
+                                               u8      DMFlag;
+                                               rtw_hal_get_hwreg(padapter, HW_VAR_DM_FLAG, (u8 *)(&DMFlag));
+                                               DBG_871X("(B)DMFlag=0x%x, arg=0x%x\n", DMFlag, arg);
+                                               DMFlag = (u8)(0x0f&arg);
+                                               DBG_871X("(A)DMFlag=0x%x\n", DMFlag);
+                                               rtw_hal_set_hwreg(padapter, HW_VAR_DM_FLAG, (u8 *)(&DMFlag));
+                                       }
+                                       break;
+                               case 0x07:
+                                       DBG_871X("bSurpriseRemoved=%d, bDriverStopped=%d\n",
+                                               padapter->bSurpriseRemoved, padapter->bDriverStopped);
+                                       break;
+                                case 0x08:
+                                       {
+                                               struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
+                                               struct recv_priv  *precvpriv = &padapter->recvpriv;
+
+                                               DBG_871X("free_xmitbuf_cnt=%d, free_xmitframe_cnt=%d"
+                                                       ", free_xmit_extbuf_cnt=%d, free_xframe_ext_cnt=%d"
+                                                       ", free_recvframe_cnt=%d\n",
+                                                       pxmitpriv->free_xmitbuf_cnt, pxmitpriv->free_xmitframe_cnt,
+                                                       pxmitpriv->free_xmit_extbuf_cnt, pxmitpriv->free_xframe_ext_cnt,
+                                                       precvpriv->free_recvframe_cnt);
+                                               #ifdef CONFIG_USB_HCI
+                                               DBG_871X("rx_urb_pending_cn=%d\n", precvpriv->rx_pending_cnt);
+                                               #endif
+                                       }
+                                       break;
+                               case 0x09:
+                                       {
+                                               int i, j;
+                                               _list   *plist, *phead;
+                                               struct recv_reorder_ctrl *preorder_ctrl;
+
+#ifdef CONFIG_AP_MODE
+                                               DBG_871X("sta_dz_bitmap=0x%x, tim_bitmap=0x%x\n", pstapriv->sta_dz_bitmap, pstapriv->tim_bitmap);
+#endif
+                                               _enter_critical_bh(&pstapriv->sta_hash_lock, &irqL);
+
+                                               for(i=0; i< NUM_STA; i++)
+                                               {
+                                                       phead = &(pstapriv->sta_hash[i]);
+                                                       plist = get_next(phead);
+
+                                                       while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
+                                                       {
+                                                               psta = LIST_CONTAINOR(plist, struct sta_info, hash_list);
+
+                                                               plist = get_next(plist);
+
+                                                               if(extra_arg == psta->aid)
+                                                               {
+                                                                       DBG_871X("sta's macaddr:" MAC_FMT "\n", MAC_ARG(psta->hwaddr));
+                                                                       DBG_871X("rtsen=%d, cts2slef=%d\n", psta->rtsen, psta->cts2self);
+                                                                       DBG_871X("qos_en=%d, ht_en=%d, init_rate=%d\n", psta->qos_option, psta->htpriv.ht_option, psta->init_rate);
+                                                                       DBG_871X("state=0x%x, aid=%d, macid=%d, raid=%d\n", psta->state, psta->aid, psta->mac_id, psta->raid);
+                                                                       DBG_871X("bwmode=%d, ch_offset=%d, sgi=%d\n", psta->htpriv.bwmode, psta->htpriv.ch_offset, psta->htpriv.sgi);
+                                                                       DBG_871X("ampdu_enable = %d\n", psta->htpriv.ampdu_enable);
+                                                                       DBG_871X("agg_enable_bitmap=%x, candidate_tid_bitmap=%x\n", psta->htpriv.agg_enable_bitmap, psta->htpriv.candidate_tid_bitmap);
+#ifdef CONFIG_AP_MODE
+                                                                       DBG_871X("capability=0x%x\n", psta->capability);
+                                                                       DBG_871X("flags=0x%x\n", psta->flags);
+                                                                       DBG_871X("wpa_psk=0x%x\n", psta->wpa_psk);
+                                                                       DBG_871X("wpa2_group_cipher=0x%x\n", psta->wpa2_group_cipher);
+                                                                       DBG_871X("wpa2_pairwise_cipher=0x%x\n", psta->wpa2_pairwise_cipher);
+                                                                       DBG_871X("qos_info=0x%x\n", psta->qos_info);
+#endif
+                                                                       DBG_871X("dot118021XPrivacy=0x%x\n", psta->dot118021XPrivacy);
+
+
+
+                                                                       for(j=0;j<16;j++)
+                                                                       {
+                                                                               preorder_ctrl = &psta->recvreorder_ctrl[j];
+                                                                               if(preorder_ctrl->enable)
+                                                                               {
+                                                                                       DBG_871X("tid=%d, indicate_seq=%d\n", j, preorder_ctrl->indicate_seq);
+                                                                               }
+                                                                       }
+
+                                                               }
+
+                                                       }
+                                               }
+
+                                               _exit_critical_bh(&pstapriv->sta_hash_lock, &irqL);
+
+                                       }
+                                       break;
+
+                                case 0x0c://dump rx packet
+                                       {
+                                               DBG_871X("dump rx packet (%d)\n",extra_arg);
+                                               //pHalData->bDumpRxPkt =extra_arg;
+                                               rtw_hal_set_def_var(padapter, HAL_DEF_DBG_DUMP_RXPKT, &(extra_arg));
+                                       }
+                                       break;
+#if 0
+                                       case 0x0d://dump cam
+                                       {
+                                               //u8 entry = (u8) extra_arg;
+                                               u8 entry=0;
+                                               //dump cam
+                                               for(entry=0;entry<32;entry++)
+                                                       read_cam(padapter,entry);
+                                       }
+                                       break;
+#endif
+               #ifdef DBG_CONFIG_ERROR_DETECT
+                               case 0x0f:
+                                               {
+                                                       if(extra_arg == 0){
+                                                               DBG_871X("###### silent reset test.......#####\n");
+                                                               rtw_hal_sreset_reset(padapter);
+                                                       } else {
+                                                               sreset_set_trigger_point(padapter, extra_arg);
+                                                       }
+
+                                               }
+                               break;
+                               case 0x15:
+                                       {
+                                               struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
+                                               DBG_871X("==>silent resete cnts:%d\n",pwrpriv->ips_enter_cnts);
+                                       }
+                                       break;
+
+               #endif
+
+                               case 0x10:// driver version display
+                                       DBG_871X("rtw driver version=%s\n", DRIVERVERSION);
+                                       break;
+                               case 0x11:
+                                       {
+                                               DBG_871X("turn %s Rx RSSI display function\n",(extra_arg==1)?"on":"off");
+                                               padapter->bRxRSSIDisplay = extra_arg ;
+                                       }
+                                       break;
+                               case 0x12: //set rx_stbc
+                               {
+                                       struct registry_priv    *pregpriv = &padapter->registrypriv;
+                                       // 0: disable, bit(0):enable 2.4g, bit(1):enable 5g, 0x3: enable both 2.4g and 5g
+                                       //default is set to enable 2.4GHZ for IOT issue with bufflao's AP at 5GHZ
+                                       if( pregpriv && (extra_arg == 0 || extra_arg == 1|| extra_arg == 2 || extra_arg == 3))
+                                       {
+                                               pregpriv->rx_stbc= extra_arg;
+                                               DBG_871X("set rx_stbc=%d\n",pregpriv->rx_stbc);
+                                       }
+                                       else
+                                               DBG_871X("get rx_stbc=%d\n",pregpriv->rx_stbc);
+
+                               }
+                               break;
+                               case 0x13: //set ampdu_enable
+                               {
+                                       struct registry_priv    *pregpriv = &padapter->registrypriv;
+                                       // 0: disable, 0x1:enable (but wifi_spec should be 0), 0x2: force enable (don't care wifi_spec)
+                                       if( pregpriv && extra_arg >= 0 && extra_arg < 3 )
+                                       {
+                                               pregpriv->ampdu_enable= extra_arg;
+                                               DBG_871X("set ampdu_enable=%d\n",pregpriv->ampdu_enable);
+                                       }
+                                       else
+                                               DBG_871X("get ampdu_enable=%d\n",pregpriv->ampdu_enable);
+
+                               }
+                               break;
+                               case 0x14: //get wifi_spec
+                               {
+                                       struct registry_priv    *pregpriv = &padapter->registrypriv;
+                                       DBG_871X("get wifi_spec=%d\n",pregpriv->wifi_spec);
+
+                               }
+                               break;
+                               case 0x22:
+                                       {
+                                               DBG_871X("turn %s the ForceWriteInitGain Variable\n",(extra_arg==1)?"on":"off");
+                                               padapter->bForceWriteInitGain = extra_arg;
+                                               break;
+                                       }
+                               case 0x23:
+                                       {
+                                               DBG_871X("turn %s the bNotifyChannelChange Variable\n",(extra_arg==1)?"on":"off");
+                                               padapter->bNotifyChannelChange = extra_arg;
+                                               break;
+                                       }
+                               case 0x24:
+                                       {
+#ifdef CONFIG_P2P
+                                               DBG_871X("turn %s the bShowGetP2PState Variable\n",(extra_arg==1)?"on":"off");
+                                               padapter->bShowGetP2PState = extra_arg;
+#endif // CONFIG_P2P
+                                               break;
+                                       }
+#if 1
+                               case 0xdd://registers dump , 0 for mac reg,1 for bb reg, 2 for rf reg
+                                       {
+                                               if(extra_arg==0){
+                                                       mac_reg_dump(padapter);
+                                               }
+                                               else if(extra_arg==1){
+                                                       bb_reg_dump(padapter);
+                                               }
+                                               else if(extra_arg==2){
+                                                       rf_reg_dump(padapter);
+                                               }
+
+                                       }
+                                       break;
+#endif
+                               case 0xee://turn on/off dynamic funcs
+                                       {
+                                               u8 dm_flag;
+
+                                               if(0xf==extra_arg){
+                                                       rtw_hal_get_def_var(padapter, HAL_DEF_DBG_DM_FUNC,&dm_flag);
+                                                       DBG_871X(" === DMFlag(0x%02x) === \n",dm_flag);
+                                                       DBG_871X("extra_arg = 0  - disable all dynamic func \n");
+                                                       DBG_871X("extra_arg = 1  - disable DIG- BIT(0)\n");
+                                                       DBG_871X("extra_arg = 2  - disable High power - BIT(1)\n");
+                                                       DBG_871X("extra_arg = 3  - disable tx power tracking - BIT(2)\n");
+                                                       DBG_871X("extra_arg = 4  - disable BT coexistence - BIT(3)\n");
+                                                       DBG_871X("extra_arg = 5  - disable antenna diversity - BIT(4)\n");
+                                                       DBG_871X("extra_arg = 6  - enable all dynamic func \n");
+                                               }
+                                               else{
+                                                       /*      extra_arg = 0  - disable all dynamic func
+                                                               extra_arg = 1  - disable DIG
+                                                               extra_arg = 2  - disable tx power tracking
+                                                               extra_arg = 3  - turn on all dynamic func
+                                                       */
+                                                       rtw_hal_set_def_var(padapter, HAL_DEF_DBG_DM_FUNC, &(extra_arg));
+                                                       rtw_hal_get_def_var(padapter, HAL_DEF_DBG_DM_FUNC,&dm_flag);
+                                                       DBG_871X(" === DMFlag(0x%02x) === \n",dm_flag);
+                                               }
+                                       }
+                                       break;
+
+                               case 0xfd:
+                                       rtw_write8(padapter, 0xc50, arg);
+                                       DBG_871X("wr(0xc50)=0x%x\n", rtw_read8(padapter, 0xc50));
+                                       rtw_write8(padapter, 0xc58, arg);
+                                       DBG_871X("wr(0xc58)=0x%x\n", rtw_read8(padapter, 0xc58));
+                                       break;
+                               case 0xfe:
+                                       DBG_871X("rd(0xc50)=0x%x\n", rtw_read8(padapter, 0xc50));
+                                       DBG_871X("rd(0xc58)=0x%x\n", rtw_read8(padapter, 0xc58));
+                                       break;
+                               case 0xff:
+                                       {
+                                               DBG_871X("dbg(0x210)=0x%x\n", rtw_read32(padapter, 0x210));
+                                               DBG_871X("dbg(0x608)=0x%x\n", rtw_read32(padapter, 0x608));
+                                               DBG_871X("dbg(0x280)=0x%x\n", rtw_read32(padapter, 0x280));
+                                               DBG_871X("dbg(0x284)=0x%x\n", rtw_read32(padapter, 0x284));
+                                               DBG_871X("dbg(0x288)=0x%x\n", rtw_read32(padapter, 0x288));
+
+                                               DBG_871X("dbg(0x664)=0x%x\n", rtw_read32(padapter, 0x664));
+
+
+                                               DBG_871X("\n");
+
+                                               DBG_871X("dbg(0x430)=0x%x\n", rtw_read32(padapter, 0x430));
+                                               DBG_871X("dbg(0x438)=0x%x\n", rtw_read32(padapter, 0x438));
+
+                                               DBG_871X("dbg(0x440)=0x%x\n", rtw_read32(padapter, 0x440));
+
+                                               DBG_871X("dbg(0x458)=0x%x\n", rtw_read32(padapter, 0x458));
+
+                                               DBG_871X("dbg(0x484)=0x%x\n", rtw_read32(padapter, 0x484));
+                                               DBG_871X("dbg(0x488)=0x%x\n", rtw_read32(padapter, 0x488));
+
+                                               DBG_871X("dbg(0x444)=0x%x\n", rtw_read32(padapter, 0x444));
+                                               DBG_871X("dbg(0x448)=0x%x\n", rtw_read32(padapter, 0x448));
+                                               DBG_871X("dbg(0x44c)=0x%x\n", rtw_read32(padapter, 0x44c));
+                                               DBG_871X("dbg(0x450)=0x%x\n", rtw_read32(padapter, 0x450));
+                                       }
+                                       break;
+                       }
+                       break;
+               default:
+                       DBG_871X("error dbg cmd!\n");
+                       break;
+       }
+
+
+       return ret;
+
+}
+
+static int wpa_set_param(struct net_device *dev, u8 name, u32 value)
+{
+       uint ret=0;
+       u32 flags;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+
+       switch (name){
+       case IEEE_PARAM_WPA_ENABLED:
+
+               padapter->securitypriv.dot11AuthAlgrthm= dot11AuthAlgrthm_8021X; //802.1x
+
+               //ret = ieee80211_wpa_enable(ieee, value);
+
+               switch((value)&0xff)
+               {
+                       case 1 : //WPA
+                       padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeWPAPSK; //WPA_PSK
+                       padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption2Enabled;
+                               break;
+                       case 2: //WPA2
+                       padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeWPA2PSK; //WPA2_PSK
+                       padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption3Enabled;
+                               break;
+               }
+
+               RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_info_,("wpa_set_param:padapter->securitypriv.ndisauthtype=%d\n", padapter->securitypriv.ndisauthtype));
+
+               break;
+
+       case IEEE_PARAM_TKIP_COUNTERMEASURES:
+               //ieee->tkip_countermeasures=value;
+               break;
+
+       case IEEE_PARAM_DROP_UNENCRYPTED:
+       {
+               /* HACK:
+                *
+                * wpa_supplicant calls set_wpa_enabled when the driver
+                * is loaded and unloaded, regardless of if WPA is being
+                * used.  No other calls are made which can be used to
+                * determine if encryption will be used or not prior to
+                * association being expected.  If encryption is not being
+                * used, drop_unencrypted is set to false, else true -- we
+                * can use this to determine if the CAP_PRIVACY_ON bit should
+                * be set.
+                */
+
+#if 0
+               struct ieee80211_security sec = {
+                       .flags = SEC_ENABLED,
+                       .enabled = value,
+               };
+               ieee->drop_unencrypted = value;
+               /* We only change SEC_LEVEL for open mode. Others
+                * are set by ipw_wpa_set_encryption.
+                */
+               if (!value) {
+                       sec.flags |= SEC_LEVEL;
+                       sec.level = SEC_LEVEL_0;
+               }
+               else {
+                       sec.flags |= SEC_LEVEL;
+                       sec.level = SEC_LEVEL_1;
+               }
+               if (ieee->set_security)
+                       ieee->set_security(ieee->dev, &sec);
+#endif
+               break;
+
+       }
+       case IEEE_PARAM_PRIVACY_INVOKED:
+
+               //ieee->privacy_invoked=value;
+
+               break;
+
+       case IEEE_PARAM_AUTH_ALGS:
+
+               ret = wpa_set_auth_algs(dev, value);
+
+               break;
+
+       case IEEE_PARAM_IEEE_802_1X:
+
+               //ieee->ieee802_1x=value;
+
+               break;
+
+       case IEEE_PARAM_WPAX_SELECT:
+
+               // added for WPA2 mixed mode
+               //DBG_871X(KERN_WARNING "------------------------>wpax value = %x\n", value);
+               /*
+               spin_lock_irqsave(&ieee->wpax_suitlist_lock,flags);
+               ieee->wpax_type_set = 1;
+               ieee->wpax_type_notify = value;
+               spin_unlock_irqrestore(&ieee->wpax_suitlist_lock,flags);
+               */
+
+               break;
+
+       default:
+
+
+
+               ret = -EOPNOTSUPP;
+
+
+               break;
+
+       }
+
+       return ret;
+
+}
+
+static int wpa_mlme(struct net_device *dev, u32 command, u32 reason)
+{
+       int ret = 0;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+
+       switch (command)
+       {
+               case IEEE_MLME_STA_DEAUTH:
+
+                       if(!rtw_set_802_11_disassociate(padapter))
+                               ret = -1;
+
+                       break;
+
+               case IEEE_MLME_STA_DISASSOC:
+
+                       if(!rtw_set_802_11_disassociate(padapter))
+                               ret = -1;
+
+                       break;
+
+               default:
+                       ret = -EOPNOTSUPP;
+                       break;
+       }
+
+       return ret;
+
+}
+
+static int wpa_supplicant_ioctl(struct net_device *dev, struct iw_point *p)
+{
+       struct ieee_param *param;
+       uint ret=0;
+
+       //down(&ieee->wx_sem);
+
+       if (p->length < sizeof(struct ieee_param) || !p->pointer){
+               ret = -EINVAL;
+               goto out;
+       }
+
+       param = (struct ieee_param *)rtw_malloc(p->length);
+       if (param == NULL)
+       {
+               ret = -ENOMEM;
+               goto out;
+       }
+
+       if (copy_from_user(param, p->pointer, p->length))
+       {
+               rtw_mfree((u8*)param, p->length);
+               ret = -EFAULT;
+               goto out;
+       }
+
+       switch (param->cmd) {
+
+       case IEEE_CMD_SET_WPA_PARAM:
+               ret = wpa_set_param(dev, param->u.wpa_param.name, param->u.wpa_param.value);
+               break;
+
+       case IEEE_CMD_SET_WPA_IE:
+               //ret = wpa_set_wpa_ie(dev, param, p->length);
+               ret =  rtw_set_wpa_ie((_adapter *)rtw_netdev_priv(dev), (char*)param->u.wpa_ie.data, (u16)param->u.wpa_ie.len);
+               break;
+
+       case IEEE_CMD_SET_ENCRYPTION:
+               ret = wpa_set_encryption(dev, param, p->length);
+               break;
+
+       case IEEE_CMD_MLME:
+               ret = wpa_mlme(dev, param->u.mlme.command, param->u.mlme.reason_code);
+               break;
+
+       default:
+               DBG_871X("Unknown WPA supplicant request: %d\n", param->cmd);
+               ret = -EOPNOTSUPP;
+               break;
+
+       }
+
+       if (ret == 0 && copy_to_user(p->pointer, param, p->length))
+               ret = -EFAULT;
+
+       rtw_mfree((u8 *)param, p->length);
+
+out:
+
+       //up(&ieee->wx_sem);
+
+       return ret;
+
+}
+
+#ifdef CONFIG_AP_MODE
+static u8 set_pairwise_key(_adapter *padapter, struct sta_info *psta)
+{
+       struct cmd_obj*                 ph2c;
+       struct set_stakey_parm  *psetstakey_para;
+       struct cmd_priv                         *pcmdpriv=&padapter->cmdpriv;
+       u8      res=_SUCCESS;
+
+       ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
+       if ( ph2c == NULL){
+               res= _FAIL;
+               goto exit;
+       }
+
+       psetstakey_para = (struct set_stakey_parm*)rtw_zmalloc(sizeof(struct set_stakey_parm));
+       if(psetstakey_para==NULL){
+               rtw_mfree((u8 *) ph2c, sizeof(struct cmd_obj));
+               res=_FAIL;
+               goto exit;
+       }
+
+       init_h2fwcmd_w_parm_no_rsp(ph2c, psetstakey_para, _SetStaKey_CMD_);
+
+
+       psetstakey_para->algorithm = (u8)psta->dot118021XPrivacy;
+
+       _rtw_memcpy(psetstakey_para->addr, psta->hwaddr, ETH_ALEN);
+
+       _rtw_memcpy(psetstakey_para->key, &psta->dot118021x_UncstKey, 16);
+
+
+       res = rtw_enqueue_cmd(pcmdpriv, ph2c);
+
+exit:
+
+       return res;
+
+}
+
+static int set_group_key(_adapter *padapter, u8 *key, u8 alg, int keyid)
+{
+       u8 keylen;
+       struct cmd_obj* pcmd;
+       struct setkey_parm *psetkeyparm;
+       struct cmd_priv *pcmdpriv=&(padapter->cmdpriv);
+       int res=_SUCCESS;
+
+       DBG_871X("%s\n", __FUNCTION__);
+
+       pcmd = (struct cmd_obj*)rtw_zmalloc(sizeof(struct       cmd_obj));
+       if(pcmd==NULL){
+               res= _FAIL;
+               goto exit;
+       }
+       psetkeyparm=(struct setkey_parm*)rtw_zmalloc(sizeof(struct setkey_parm));
+       if(psetkeyparm==NULL){
+               rtw_mfree((unsigned char *)pcmd, sizeof(struct cmd_obj));
+               res= _FAIL;
+               goto exit;
+       }
+
+       _rtw_memset(psetkeyparm, 0, sizeof(struct setkey_parm));
+
+       psetkeyparm->keyid=(u8)keyid;
+       if (is_wep_enc(alg))
+               padapter->securitypriv.key_mask |= BIT(psetkeyparm->keyid);
+
+       psetkeyparm->algorithm = alg;
+
+       psetkeyparm->set_tx = 1;
+
+       switch(alg)
+       {
+               case _WEP40_:
+                       keylen = 5;
+                       break;
+               case _WEP104_:
+                       keylen = 13;
+                       break;
+               case _TKIP_:
+               case _TKIP_WTMIC_:
+               case _AES_:
+                       keylen = 16;
+               default:
+                       keylen = 16;
+       }
+
+       _rtw_memcpy(&(psetkeyparm->key[0]), key, keylen);
+
+       pcmd->cmdcode = _SetKey_CMD_;
+       pcmd->parmbuf = (u8 *)psetkeyparm;
+       pcmd->cmdsz =  (sizeof(struct setkey_parm));
+       pcmd->rsp = NULL;
+       pcmd->rspsz = 0;
+
+
+       _rtw_init_listhead(&pcmd->list);
+
+       res = rtw_enqueue_cmd(pcmdpriv, pcmd);
+
+exit:
+
+       return res;
+
+
+}
+
+static int set_wep_key(_adapter *padapter, u8 *key, u8 keylen, int keyid)
+{
+       u8 alg;
+
+       switch(keylen)
+       {
+               case 5:
+                       alg =_WEP40_;
+                       break;
+               case 13:
+                       alg =_WEP104_;
+                       break;
+               default:
+                       alg =_NO_PRIVACY_;
+       }
+
+       return set_group_key(padapter, key, alg, keyid);
+
+}
+
+
+static int rtw_set_encryption(struct net_device *dev, struct ieee_param *param, u32 param_len)
+{
+       int ret = 0;
+       u32 wep_key_idx, wep_key_len,wep_total_len;
+       NDIS_802_11_WEP  *pwep = NULL;
+       struct sta_info *psta = NULL, *pbcmc_sta = NULL;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
+       struct security_priv* psecuritypriv=&(padapter->securitypriv);
+       struct sta_priv *pstapriv = &padapter->stapriv;
+
+       DBG_871X("%s\n", __FUNCTION__);
+
+       param->u.crypt.err = 0;
+       param->u.crypt.alg[IEEE_CRYPT_ALG_NAME_LEN - 1] = '\0';
+
+       //sizeof(struct ieee_param) = 64 bytes;
+       //if (param_len !=  (u32) ((u8 *) param->u.crypt.key - (u8 *) param) + param->u.crypt.key_len)
+       if (param_len !=  sizeof(struct ieee_param) + param->u.crypt.key_len)
+       {
+               ret =  -EINVAL;
+               goto exit;
+       }
+
+       if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
+           param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
+           param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
+       {
+               if (param->u.crypt.idx >= WEP_KEYS)
+               {
+                       ret = -EINVAL;
+                       goto exit;
+               }
+       }
+       else
+       {
+               psta = rtw_get_stainfo(pstapriv, param->sta_addr);
+               if(!psta)
+               {
+                       //ret = -EINVAL;
+                       DBG_871X("rtw_set_encryption(), sta has already been removed or never been added\n");
+                       goto exit;
+               }
+       }
+
+       if (strcmp(param->u.crypt.alg, "none") == 0 && (psta==NULL))
+       {
+               //todo:clear default encryption keys
+
+               DBG_871X("clear default encryption keys, keyid=%d\n", param->u.crypt.idx);
+
+               goto exit;
+       }
+
+
+       if (strcmp(param->u.crypt.alg, "WEP") == 0 && (psta==NULL))
+       {
+               DBG_871X("r871x_set_encryption, crypt.alg = WEP\n");
+
+               wep_key_idx = param->u.crypt.idx;
+               wep_key_len = param->u.crypt.key_len;
+
+               DBG_871X("r871x_set_encryption, wep_key_idx=%d, len=%d\n", wep_key_idx, wep_key_len);
+
+               if((wep_key_idx >= WEP_KEYS) || (wep_key_len<=0))
+               {
+                       ret = -EINVAL;
+                       goto exit;
+               }
+
+
+               if (wep_key_len > 0)
+               {
+                       wep_key_len = wep_key_len <= 5 ? 5 : 13;
+                       wep_total_len = wep_key_len + FIELD_OFFSET(NDIS_802_11_WEP, KeyMaterial);
+                       pwep =(NDIS_802_11_WEP *)rtw_malloc(wep_total_len);
+                       if(pwep == NULL){
+                               DBG_871X(" r871x_set_encryption: pwep allocate fail !!!\n");
+                               goto exit;
+                       }
+
+                       _rtw_memset(pwep, 0, wep_total_len);
+
+                       pwep->KeyLength = wep_key_len;
+                       pwep->Length = wep_total_len;
+
+               }
+
+               pwep->KeyIndex = wep_key_idx;
+
+               _rtw_memcpy(pwep->KeyMaterial,  param->u.crypt.key, pwep->KeyLength);
+
+               if(param->u.crypt.set_tx)
+               {
+                       DBG_871X("wep, set_tx=1\n");
+
+                       psecuritypriv->ndisencryptstatus = Ndis802_11Encryption1Enabled;
+                       psecuritypriv->dot11PrivacyAlgrthm=_WEP40_;
+                       psecuritypriv->dot118021XGrpPrivacy=_WEP40_;
+
+                       if(pwep->KeyLength==13)
+                       {
+                               psecuritypriv->dot11PrivacyAlgrthm=_WEP104_;
+                               psecuritypriv->dot118021XGrpPrivacy=_WEP104_;
+                       }
+
+
+                       psecuritypriv->dot11PrivacyKeyIndex = wep_key_idx;
+
+                       _rtw_memcpy(&(psecuritypriv->dot11DefKey[wep_key_idx].skey[0]), pwep->KeyMaterial, pwep->KeyLength);
+
+                       psecuritypriv->dot11DefKeylen[wep_key_idx]=pwep->KeyLength;
+
+                       set_wep_key(padapter, pwep->KeyMaterial, pwep->KeyLength, wep_key_idx);
+
+
+               }
+               else
+               {
+                       DBG_871X("wep, set_tx=0\n");
+
+                       //don't update "psecuritypriv->dot11PrivacyAlgrthm" and
+                       //"psecuritypriv->dot11PrivacyKeyIndex=keyid", but can rtw_set_key to cam
+
+                     _rtw_memcpy(&(psecuritypriv->dot11DefKey[wep_key_idx].skey[0]), pwep->KeyMaterial, pwep->KeyLength);
+
+                       psecuritypriv->dot11DefKeylen[wep_key_idx] = pwep->KeyLength;
+
+                       set_wep_key(padapter, pwep->KeyMaterial, pwep->KeyLength, wep_key_idx);
+
+               }
+
+               goto exit;
+
+       }
+
+
+       if(!psta && check_fwstate(pmlmepriv, WIFI_AP_STATE)) // //group key
+       {
+               if(param->u.crypt.set_tx ==1)
+               {
+                       if(strcmp(param->u.crypt.alg, "WEP") == 0)
+                       {
+                               DBG_871X("%s, set group_key, WEP\n", __FUNCTION__);
+
+                               _rtw_memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
+
+                               psecuritypriv->dot118021XGrpPrivacy = _WEP40_;
+                               if(param->u.crypt.key_len==13)
+                               {
+                                               psecuritypriv->dot118021XGrpPrivacy = _WEP104_;
+                               }
+
+                       }
+                       else if(strcmp(param->u.crypt.alg, "TKIP") == 0)
+                       {
+                               DBG_871X("%s, set group_key, TKIP\n", __FUNCTION__);
+
+                               psecuritypriv->dot118021XGrpPrivacy = _TKIP_;
+
+                               _rtw_memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
+
+                               //DEBUG_ERR("set key length :param->u.crypt.key_len=%d\n", param->u.crypt.key_len);
+                               //set mic key
+                               _rtw_memcpy(psecuritypriv->dot118021XGrptxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[16]), 8);
+                               _rtw_memcpy(psecuritypriv->dot118021XGrprxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[24]), 8);
+
+                               psecuritypriv->busetkipkey = _TRUE;
+
+                       }
+                       else if(strcmp(param->u.crypt.alg, "CCMP") == 0)
+                       {
+                               DBG_871X("%s, set group_key, CCMP\n", __FUNCTION__);
+
+                               psecuritypriv->dot118021XGrpPrivacy = _AES_;
+
+                               _rtw_memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
+                       }
+                       else
+                       {
+                               DBG_871X("%s, set group_key, none\n", __FUNCTION__);
+
+                               psecuritypriv->dot118021XGrpPrivacy = _NO_PRIVACY_;
+                       }
+
+                       psecuritypriv->dot118021XGrpKeyid = param->u.crypt.idx;
+
+                       psecuritypriv->binstallGrpkey = _TRUE;
+
+                       psecuritypriv->dot11PrivacyAlgrthm = psecuritypriv->dot118021XGrpPrivacy;//!!!
+
+                       set_group_key(padapter, param->u.crypt.key, psecuritypriv->dot118021XGrpPrivacy, param->u.crypt.idx);
+
+                       pbcmc_sta=rtw_get_bcmc_stainfo(padapter);
+                       if(pbcmc_sta)
+                       {
+                               pbcmc_sta->ieee8021x_blocked = _FALSE;
+                               pbcmc_sta->dot118021XPrivacy= psecuritypriv->dot118021XGrpPrivacy;//rx will use bmc_sta's dot118021XPrivacy
+                       }
+
+               }
+
+               goto exit;
+
+       }
+
+       if(psecuritypriv->dot11AuthAlgrthm == dot11AuthAlgrthm_8021X && psta) // psk/802_1x
+       {
+               if(check_fwstate(pmlmepriv, WIFI_AP_STATE))
+               {
+                       if(param->u.crypt.set_tx ==1)
+                       {
+                               _rtw_memcpy(psta->dot118021x_UncstKey.skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
+
+                               if(strcmp(param->u.crypt.alg, "WEP") == 0)
+                               {
+                                       DBG_871X("%s, set pairwise key, WEP\n", __FUNCTION__);
+
+                                       psta->dot118021XPrivacy = _WEP40_;
+                                       if(param->u.crypt.key_len==13)
+                                       {
+                                               psta->dot118021XPrivacy = _WEP104_;
+                                       }
+                               }
+                               else if(strcmp(param->u.crypt.alg, "TKIP") == 0)
+                               {
+                                       DBG_871X("%s, set pairwise key, TKIP\n", __FUNCTION__);
+
+                                       psta->dot118021XPrivacy = _TKIP_;
+
+                                       //DEBUG_ERR("set key length :param->u.crypt.key_len=%d\n", param->u.crypt.key_len);
+                                       //set mic key
+                                       _rtw_memcpy(psta->dot11tkiptxmickey.skey, &(param->u.crypt.key[16]), 8);
+                                       _rtw_memcpy(psta->dot11tkiprxmickey.skey, &(param->u.crypt.key[24]), 8);
+
+                                       psecuritypriv->busetkipkey = _TRUE;
+
+                               }
+                               else if(strcmp(param->u.crypt.alg, "CCMP") == 0)
+                               {
+
+                                       DBG_871X("%s, set pairwise key, CCMP\n", __FUNCTION__);
+
+                                       psta->dot118021XPrivacy = _AES_;
+                               }
+                               else
+                               {
+                                       DBG_871X("%s, set pairwise key, none\n", __FUNCTION__);
+
+                                       psta->dot118021XPrivacy = _NO_PRIVACY_;
+                               }
+
+                               set_pairwise_key(padapter, psta);
+
+                               psta->ieee8021x_blocked = _FALSE;
+
+                       }
+                       else//group key???
+                       {
+                               if(strcmp(param->u.crypt.alg, "WEP") == 0)
+                               {
+                                       _rtw_memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
+
+                                       psecuritypriv->dot118021XGrpPrivacy = _WEP40_;
+                                       if(param->u.crypt.key_len==13)
+                                       {
+                                               psecuritypriv->dot118021XGrpPrivacy = _WEP104_;
+                                       }
+                               }
+                               else if(strcmp(param->u.crypt.alg, "TKIP") == 0)
+                               {
+                                       psecuritypriv->dot118021XGrpPrivacy = _TKIP_;
+
+                                       _rtw_memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
+
+                                       //DEBUG_ERR("set key length :param->u.crypt.key_len=%d\n", param->u.crypt.key_len);
+                                       //set mic key
+                                       _rtw_memcpy(psecuritypriv->dot118021XGrptxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[16]), 8);
+                                       _rtw_memcpy(psecuritypriv->dot118021XGrprxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[24]), 8);
+
+                                       psecuritypriv->busetkipkey = _TRUE;
+
+                               }
+                               else if(strcmp(param->u.crypt.alg, "CCMP") == 0)
+                               {
+                                       psecuritypriv->dot118021XGrpPrivacy = _AES_;
+
+                                       _rtw_memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
+                               }
+                               else
+                               {
+                                       psecuritypriv->dot118021XGrpPrivacy = _NO_PRIVACY_;
+                               }
+
+                               psecuritypriv->dot118021XGrpKeyid = param->u.crypt.idx;
+
+                               psecuritypriv->binstallGrpkey = _TRUE;
+
+                               psecuritypriv->dot11PrivacyAlgrthm = psecuritypriv->dot118021XGrpPrivacy;//!!!
+
+                               set_group_key(padapter, param->u.crypt.key, psecuritypriv->dot118021XGrpPrivacy, param->u.crypt.idx);
+
+                               pbcmc_sta=rtw_get_bcmc_stainfo(padapter);
+                               if(pbcmc_sta)
+                               {
+                                       pbcmc_sta->ieee8021x_blocked = _FALSE;
+                                       pbcmc_sta->dot118021XPrivacy= psecuritypriv->dot118021XGrpPrivacy;//rx will use bmc_sta's dot118021XPrivacy
+                               }
+
+                       }
+
+               }
+
+       }
+
+exit:
+
+       if(pwep)
+       {
+               rtw_mfree((u8 *)pwep,wep_total_len);
+       }
+
+       return ret;
+
+}
+
+static int rtw_set_beacon(struct net_device *dev, struct ieee_param *param, int len)
+{
+       int ret=0;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+       struct sta_priv *pstapriv = &padapter->stapriv;
+       unsigned char *pbuf = param->u.bcn_ie.buf;
+
+
+       DBG_871X("%s, len=%d\n", __FUNCTION__, len);
+
+       if(check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
+               return -EINVAL;
+
+       _rtw_memcpy(&pstapriv->max_num_sta, param->u.bcn_ie.reserved, 2);
+
+       if((pstapriv->max_num_sta>NUM_STA) || (pstapriv->max_num_sta<=0))
+               pstapriv->max_num_sta = NUM_STA;
+
+
+       if(rtw_check_beacon_data(padapter, pbuf,  (len-12-2)) == _SUCCESS)// 12 = param header, 2:no packed
+               ret = 0;
+       else
+               ret = -EINVAL;
+
+
+       return ret;
+
+}
+
+static int rtw_hostapd_sta_flush(struct net_device *dev)
+{
+       //_irqL irqL;
+       //_list *phead, *plist;
+       int ret=0;
+       //struct sta_info *psta = NULL;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       //struct sta_priv *pstapriv = &padapter->stapriv;
+
+       DBG_871X("%s\n", __FUNCTION__);
+
+       flush_all_cam_entry(padapter);  //clear CAM
+
+       ret = rtw_sta_flush(padapter);
+
+       return ret;
+
+}
+
+static int rtw_add_sta(struct net_device *dev, struct ieee_param *param)
+{
+       _irqL irqL;
+       int ret=0;
+       struct sta_info *psta = NULL;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+       struct sta_priv *pstapriv = &padapter->stapriv;
+
+       DBG_871X("rtw_add_sta(aid=%d)=" MAC_FMT "\n", param->u.add_sta.aid, MAC_ARG(param->sta_addr));
+
+       if(check_fwstate(pmlmepriv, (_FW_LINKED|WIFI_AP_STATE)) != _TRUE)
+       {
+               return -EINVAL;
+       }
+
+       if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
+           param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
+           param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
+       {
+               return -EINVAL;
+       }
+
+/*
+       psta = rtw_get_stainfo(pstapriv, param->sta_addr);
+       if(psta)
+       {
+               DBG_871X("rtw_add_sta(), free has been added psta=%p\n", psta);
+               _enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
+               rtw_free_stainfo(padapter,  psta);
+               _exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
+
+               psta = NULL;
+       }
+*/
+       //psta = rtw_alloc_stainfo(pstapriv, param->sta_addr);
+       psta = rtw_get_stainfo(pstapriv, param->sta_addr);
+       if(psta)
+       {
+               int flags = param->u.add_sta.flags;
+
+               //DBG_871X("rtw_add_sta(), init sta's variables, psta=%p\n", psta);
+
+               psta->aid = param->u.add_sta.aid;//aid=1~2007
+
+               _rtw_memcpy(psta->bssrateset, param->u.add_sta.tx_supp_rates, 16);
+
+
+               //check wmm cap.
+               if(WLAN_STA_WME&flags)
+                       psta->qos_option = 1;
+               else
+                       psta->qos_option = 0;
+
+               if(pmlmepriv->qospriv.qos_option == 0)
+                       psta->qos_option = 0;
+
+
+#ifdef CONFIG_80211N_HT
+               //chec 802.11n ht cap.
+               if(WLAN_STA_HT&flags)
+               {
+                       psta->htpriv.ht_option = _TRUE;
+                       psta->qos_option = 1;
+                       _rtw_memcpy((void*)&psta->htpriv.ht_cap, (void*)&param->u.add_sta.ht_cap, sizeof(struct rtw_ieee80211_ht_cap));
+               }
+               else
+               {
+                       psta->htpriv.ht_option = _FALSE;
+               }
+
+               if(pmlmepriv->htpriv.ht_option == _FALSE)
+                       psta->htpriv.ht_option = _FALSE;
+#endif
+
+
+               update_sta_info_apmode(padapter, psta);
+
+
+       }
+       else
+       {
+               ret = -ENOMEM;
+       }
+
+       return ret;
+
+}
+
+static int rtw_del_sta(struct net_device *dev, struct ieee_param *param)
+{
+       _irqL irqL;
+       int ret=0;
+       struct sta_info *psta = NULL;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+       struct sta_priv *pstapriv = &padapter->stapriv;
+
+       DBG_871X("rtw_del_sta=" MAC_FMT "\n", MAC_ARG(param->sta_addr));
+
+       if(check_fwstate(pmlmepriv, (_FW_LINKED|WIFI_AP_STATE)) != _TRUE)
+       {
+               return -EINVAL;
+       }
+
+       if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
+           param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
+           param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
+       {
+               return -EINVAL;
+       }
+
+       psta = rtw_get_stainfo(pstapriv, param->sta_addr);
+       if(psta)
+       {
+               u8 updated=_FALSE;
+
+               //DBG_871X("free psta=%p, aid=%d\n", psta, psta->aid);
+
+               _enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+               if(rtw_is_list_empty(&psta->asoc_list)==_FALSE)
+               {
+                       rtw_list_delete(&psta->asoc_list);
+                       pstapriv->asoc_list_cnt--;
+                       updated = ap_free_sta(padapter, psta, _TRUE, WLAN_REASON_DEAUTH_LEAVING);
+
+               }
+               _exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+
+               associated_clients_update(padapter, updated);
+
+               psta = NULL;
+
+       }
+       else
+       {
+               DBG_871X("rtw_del_sta(), sta has already been removed or never been added\n");
+
+               //ret = -1;
+       }
+
+
+       return ret;
+
+}
+
+static int rtw_ioctl_get_sta_data(struct net_device *dev, struct ieee_param *param, int len)
+{
+       int ret=0;
+       struct sta_info *psta = NULL;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+       struct sta_priv *pstapriv = &padapter->stapriv;
+       struct ieee_param_ex *param_ex = (struct ieee_param_ex *)param;
+       struct sta_data *psta_data = (struct sta_data *)param_ex->data;
+
+       DBG_871X("rtw_ioctl_get_sta_info, sta_addr: " MAC_FMT "\n", MAC_ARG(param_ex->sta_addr));
+
+       if(check_fwstate(pmlmepriv, (_FW_LINKED|WIFI_AP_STATE)) != _TRUE)
+       {
+               return -EINVAL;
+       }
+
+       if (param_ex->sta_addr[0] == 0xff && param_ex->sta_addr[1] == 0xff &&
+           param_ex->sta_addr[2] == 0xff && param_ex->sta_addr[3] == 0xff &&
+           param_ex->sta_addr[4] == 0xff && param_ex->sta_addr[5] == 0xff)
+       {
+               return -EINVAL;
+       }
+
+       psta = rtw_get_stainfo(pstapriv, param_ex->sta_addr);
+       if(psta)
+       {
+#if 0
+               struct {
+                       u16 aid;
+                       u16 capability;
+                       int flags;
+                       u32 sta_set;
+                       u8 tx_supp_rates[16];
+                       u32 tx_supp_rates_len;
+                       struct rtw_ieee80211_ht_cap ht_cap;
+                       u64     rx_pkts;
+                       u64     rx_bytes;
+                       u64     rx_drops;
+                       u64     tx_pkts;
+                       u64     tx_bytes;
+                       u64     tx_drops;
+               } get_sta;
+#endif
+               psta_data->aid = (u16)psta->aid;
+               psta_data->capability = psta->capability;
+               psta_data->flags = psta->flags;
+
+/*
+               nonerp_set : BIT(0)
+               no_short_slot_time_set : BIT(1)
+               no_short_preamble_set : BIT(2)
+               no_ht_gf_set : BIT(3)
+               no_ht_set : BIT(4)
+               ht_20mhz_set : BIT(5)
+*/
+
+               psta_data->sta_set =((psta->nonerp_set) |
+                                                       (psta->no_short_slot_time_set <<1) |
+                                                       (psta->no_short_preamble_set <<2) |
+                                                       (psta->no_ht_gf_set <<3) |
+                                                       (psta->no_ht_set <<4) |
+                                                       (psta->ht_20mhz_set <<5));
+
+               psta_data->tx_supp_rates_len =  psta->bssratelen;
+               _rtw_memcpy(psta_data->tx_supp_rates, psta->bssrateset, psta->bssratelen);
+
+               _rtw_memcpy(&psta_data->ht_cap, &psta->htpriv.ht_cap, sizeof(struct rtw_ieee80211_ht_cap));
+
+               psta_data->rx_pkts = psta->sta_stats.rx_data_pkts;
+               psta_data->rx_bytes = psta->sta_stats.rx_bytes;
+               psta_data->rx_drops = psta->sta_stats.rx_drops;
+
+               psta_data->tx_pkts = psta->sta_stats.tx_pkts;
+               psta_data->tx_bytes = psta->sta_stats.tx_bytes;
+               psta_data->tx_drops = psta->sta_stats.tx_drops;
+
+
+       }
+       else
+       {
+               ret = -1;
+       }
+
+       return ret;
+
+}
+
+static int rtw_get_sta_wpaie(struct net_device *dev, struct ieee_param *param)
+{
+       int ret=0;
+       struct sta_info *psta = NULL;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+       struct sta_priv *pstapriv = &padapter->stapriv;
+
+       DBG_871X("rtw_get_sta_wpaie, sta_addr: " MAC_FMT "\n", MAC_ARG(param->sta_addr));
+
+       if(check_fwstate(pmlmepriv, (_FW_LINKED|WIFI_AP_STATE)) != _TRUE)
+       {
+               return -EINVAL;
+       }
+
+       if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
+           param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
+           param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
+       {
+               return -EINVAL;
+       }
+
+       psta = rtw_get_stainfo(pstapriv, param->sta_addr);
+       if(psta)
+       {
+               if((psta->wpa_ie[0] == WLAN_EID_RSN) || (psta->wpa_ie[0] == WLAN_EID_GENERIC))
+               {
+                       int wpa_ie_len;
+                       int copy_len;
+
+                       wpa_ie_len = psta->wpa_ie[1];
+
+                       copy_len = ((wpa_ie_len+2) > sizeof(psta->wpa_ie)) ? (sizeof(psta->wpa_ie)):(wpa_ie_len+2);
+
+                       param->u.wpa_ie.len = copy_len;
+
+                       _rtw_memcpy(param->u.wpa_ie.reserved, psta->wpa_ie, copy_len);
+               }
+               else
+               {
+                       //ret = -1;
+                       DBG_871X("sta's wpa_ie is NONE\n");
+               }
+       }
+       else
+       {
+               ret = -1;
+       }
+
+       return ret;
+
+}
+
+static int rtw_set_wps_beacon(struct net_device *dev, struct ieee_param *param, int len)
+{
+       int ret=0;
+       unsigned char wps_oui[4]={0x0,0x50,0xf2,0x04};
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       int ie_len;
+
+       DBG_871X("%s, len=%d\n", __FUNCTION__, len);
+
+       if(check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
+               return -EINVAL;
+
+       ie_len = len-12-2;// 12 = param header, 2:no packed
+
+
+       if(pmlmepriv->wps_beacon_ie)
+       {
+               rtw_mfree(pmlmepriv->wps_beacon_ie, pmlmepriv->wps_beacon_ie_len);
+               pmlmepriv->wps_beacon_ie = NULL;
+       }
+
+       if(ie_len>0)
+       {
+               pmlmepriv->wps_beacon_ie = rtw_malloc(ie_len);
+               pmlmepriv->wps_beacon_ie_len = ie_len;
+               if ( pmlmepriv->wps_beacon_ie == NULL) {
+                       DBG_871X("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
+                       return -EINVAL;
+               }
+
+               _rtw_memcpy(pmlmepriv->wps_beacon_ie, param->u.bcn_ie.buf, ie_len);
+
+               update_beacon(padapter, _VENDOR_SPECIFIC_IE_, wps_oui, _TRUE);
+
+               pmlmeext->bstart_bss = _TRUE;
+
+       }
+
+
+       return ret;
+
+}
+
+static int rtw_set_wps_probe_resp(struct net_device *dev, struct ieee_param *param, int len)
+{
+       int ret=0;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+       int ie_len;
+
+       DBG_871X("%s, len=%d\n", __FUNCTION__, len);
+
+       if(check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
+               return -EINVAL;
+
+       ie_len = len-12-2;// 12 = param header, 2:no packed
+
+
+       if(pmlmepriv->wps_probe_resp_ie)
+       {
+               rtw_mfree(pmlmepriv->wps_probe_resp_ie, pmlmepriv->wps_probe_resp_ie_len);
+               pmlmepriv->wps_probe_resp_ie = NULL;
+       }
+
+       if(ie_len>0)
+       {
+               pmlmepriv->wps_probe_resp_ie = rtw_malloc(ie_len);
+               pmlmepriv->wps_probe_resp_ie_len = ie_len;
+               if ( pmlmepriv->wps_probe_resp_ie == NULL) {
+                       DBG_871X("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
+                       return -EINVAL;
+               }
+               _rtw_memcpy(pmlmepriv->wps_probe_resp_ie, param->u.bcn_ie.buf, ie_len);
+       }
+
+
+       return ret;
+
+}
+
+static int rtw_set_wps_assoc_resp(struct net_device *dev, struct ieee_param *param, int len)
+{
+       int ret=0;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+       int ie_len;
+
+       DBG_871X("%s, len=%d\n", __FUNCTION__, len);
+
+       if(check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
+               return -EINVAL;
+
+       ie_len = len-12-2;// 12 = param header, 2:no packed
+
+
+       if(pmlmepriv->wps_assoc_resp_ie)
+       {
+               rtw_mfree(pmlmepriv->wps_assoc_resp_ie, pmlmepriv->wps_assoc_resp_ie_len);
+               pmlmepriv->wps_assoc_resp_ie = NULL;
+       }
+
+       if(ie_len>0)
+       {
+               pmlmepriv->wps_assoc_resp_ie = rtw_malloc(ie_len);
+               pmlmepriv->wps_assoc_resp_ie_len = ie_len;
+               if ( pmlmepriv->wps_assoc_resp_ie == NULL) {
+                       DBG_871X("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
+                       return -EINVAL;
+               }
+
+               _rtw_memcpy(pmlmepriv->wps_assoc_resp_ie, param->u.bcn_ie.buf, ie_len);
+       }
+
+
+       return ret;
+
+}
+
+static int rtw_set_hidden_ssid(struct net_device *dev, struct ieee_param *param, int len)
+{
+       int ret=0;
+       _adapter *adapter = (_adapter *)rtw_netdev_priv(dev);
+       struct mlme_priv *mlmepriv = &(adapter->mlmepriv);
+       struct mlme_ext_priv    *mlmeext = &(adapter->mlmeextpriv);
+       struct mlme_ext_info    *mlmeinfo = &(mlmeext->mlmext_info);
+       int ie_len;
+       u8 *ssid_ie;
+       char ssid[NDIS_802_11_LENGTH_SSID + 1];
+       sint ssid_len;
+       u8 ignore_broadcast_ssid;
+
+       if(check_fwstate(mlmepriv, WIFI_AP_STATE) != _TRUE)
+               return -EPERM;
+
+       if (param->u.bcn_ie.reserved[0] != 0xea)
+               return -EINVAL;
+
+       mlmeinfo->hidden_ssid_mode = ignore_broadcast_ssid = param->u.bcn_ie.reserved[1];
+
+       ie_len = len-12-2;// 12 = param header, 2:no packed
+       ssid_ie = rtw_get_ie(param->u.bcn_ie.buf,  WLAN_EID_SSID, &ssid_len, ie_len);
+
+       if (ssid_ie && ssid_len) {
+               WLAN_BSSID_EX *pbss_network = &mlmepriv->cur_network.network;
+               WLAN_BSSID_EX *pbss_network_ext = &mlmeinfo->network;
+
+               _rtw_memcpy(ssid, ssid_ie+2, ssid_len);
+               ssid[ssid_len>NDIS_802_11_LENGTH_SSID?NDIS_802_11_LENGTH_SSID:ssid_len] = 0x0;
+
+               if(0)
+               DBG_871X(FUNC_ADPT_FMT" ssid:(%s,%d), from ie:(%s,%d), (%s,%d)\n", FUNC_ADPT_ARG(adapter),
+                       ssid, ssid_len,
+                       pbss_network->Ssid.Ssid, pbss_network->Ssid.SsidLength,
+                       pbss_network_ext->Ssid.Ssid, pbss_network_ext->Ssid.SsidLength);
+
+               _rtw_memcpy(pbss_network->Ssid.Ssid, (void *)ssid, ssid_len);
+               pbss_network->Ssid.SsidLength = ssid_len;
+               _rtw_memcpy(pbss_network_ext->Ssid.Ssid, (void *)ssid, ssid_len);
+               pbss_network_ext->Ssid.SsidLength = ssid_len;
+
+               if(0)
+               DBG_871X(FUNC_ADPT_FMT" after ssid:(%s,%d), (%s,%d)\n", FUNC_ADPT_ARG(adapter),
+                       pbss_network->Ssid.Ssid, pbss_network->Ssid.SsidLength,
+                       pbss_network_ext->Ssid.Ssid, pbss_network_ext->Ssid.SsidLength);
+       }
+
+       DBG_871X(FUNC_ADPT_FMT" ignore_broadcast_ssid:%d, %s,%d\n", FUNC_ADPT_ARG(adapter),
+               ignore_broadcast_ssid, ssid, ssid_len);
+
+       return ret;
+}
+
+static int rtw_ioctl_acl_remove_sta(struct net_device *dev, struct ieee_param *param, int len)
+{
+       int ret=0;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+
+       if(check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
+               return -EINVAL;
+
+       if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
+           param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
+           param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
+       {
+               return -EINVAL;
+       }
+
+       ret = rtw_acl_remove_sta(padapter, param->sta_addr);
+
+       return ret;
+
+}
+
+static int rtw_ioctl_acl_add_sta(struct net_device *dev, struct ieee_param *param, int len)
+{
+       int ret=0;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+
+       if(check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
+               return -EINVAL;
+
+       if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
+           param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
+           param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
+       {
+               return -EINVAL;
+       }
+
+       ret = rtw_acl_add_sta(padapter, param->sta_addr);
+
+       return ret;
+
+}
+
+static int rtw_ioctl_set_macaddr_acl(struct net_device *dev, struct ieee_param *param, int len)
+{
+       int ret=0;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+
+       if(check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
+               return -EINVAL;
+
+       rtw_set_macaddr_acl(padapter, param->u.mlme.command);
+
+       return ret;
+}
+
+static int rtw_hostapd_ioctl(struct net_device *dev, struct iw_point *p)
+{
+       struct ieee_param *param;
+       int ret=0;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+
+       //DBG_871X("%s\n", __FUNCTION__);
+
+       /*
+       * this function is expect to call in master mode, which allows no power saving
+       * so, we just check hw_init_completed instead of call rfpwrstate_check()
+       */
+
+       if (padapter->hw_init_completed==_FALSE){
+               ret = -EPERM;
+               goto out;
+       }
+
+
+       //if (p->length < sizeof(struct ieee_param) || !p->pointer){
+       if(!p->pointer){
+               ret = -EINVAL;
+               goto out;
+       }
+
+       param = (struct ieee_param *)rtw_malloc(p->length);
+       if (param == NULL)
+       {
+               ret = -ENOMEM;
+               goto out;
+       }
+
+       if (copy_from_user(param, p->pointer, p->length))
+       {
+               rtw_mfree((u8*)param, p->length);
+               ret = -EFAULT;
+               goto out;
+       }
+
+       //DBG_871X("%s, cmd=%d\n", __FUNCTION__, param->cmd);
+
+       switch (param->cmd)
+       {
+               case RTL871X_HOSTAPD_FLUSH:
+
+                       ret = rtw_hostapd_sta_flush(dev);
+
+                       break;
+
+               case RTL871X_HOSTAPD_ADD_STA:
+
+                       ret = rtw_add_sta(dev, param);
+
+                       break;
+
+               case RTL871X_HOSTAPD_REMOVE_STA:
+
+                       ret = rtw_del_sta(dev, param);
+
+                       break;
+
+               case RTL871X_HOSTAPD_SET_BEACON:
+
+                       ret = rtw_set_beacon(dev, param, p->length);
+
+                       break;
+
+               case RTL871X_SET_ENCRYPTION:
+
+                       ret = rtw_set_encryption(dev, param, p->length);
+
+                       break;
+
+               case RTL871X_HOSTAPD_GET_WPAIE_STA:
+
+                       ret = rtw_get_sta_wpaie(dev, param);
+
+                       break;
+
+               case RTL871X_HOSTAPD_SET_WPS_BEACON:
+
+                       ret = rtw_set_wps_beacon(dev, param, p->length);
+
+                       break;
+
+               case RTL871X_HOSTAPD_SET_WPS_PROBE_RESP:
+
+                       ret = rtw_set_wps_probe_resp(dev, param, p->length);
+
+                       break;
+
+               case RTL871X_HOSTAPD_SET_WPS_ASSOC_RESP:
+
+                       ret = rtw_set_wps_assoc_resp(dev, param, p->length);
+
+                       break;
+
+               case RTL871X_HOSTAPD_SET_HIDDEN_SSID:
+
+                       ret = rtw_set_hidden_ssid(dev, param, p->length);
+
+                       break;
+
+               case RTL871X_HOSTAPD_GET_INFO_STA:
+
+                       ret = rtw_ioctl_get_sta_data(dev, param, p->length);
+
+                       break;
+
+               case RTL871X_HOSTAPD_SET_MACADDR_ACL:
+
+                       ret = rtw_ioctl_set_macaddr_acl(dev, param, p->length);
+
+                       break;
+
+               case RTL871X_HOSTAPD_ACL_ADD_STA:
+
+                       ret = rtw_ioctl_acl_add_sta(dev, param, p->length);
+
+                       break;
+
+               case RTL871X_HOSTAPD_ACL_REMOVE_STA:
+
+                       ret = rtw_ioctl_acl_remove_sta(dev, param, p->length);
+
+                       break;
+
+               default:
+                       DBG_871X("Unknown hostapd request: %d\n", param->cmd);
+                       ret = -EOPNOTSUPP;
+                       break;
+
+       }
+
+       if (ret == 0 && copy_to_user(p->pointer, param, p->length))
+               ret = -EFAULT;
+
+
+       rtw_mfree((u8 *)param, p->length);
+
+out:
+
+       return ret;
+
+}
+#endif
+
+#include <rtw_android.h>
+static int rtw_wx_set_priv(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *awrq,
+                               char *extra)
+{
+
+#ifdef CONFIG_DEBUG_RTW_WX_SET_PRIV
+       char *ext_dbg;
+#endif
+
+       int ret = 0;
+       int len = 0;
+       char *ext;
+       int i;
+
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct iw_point *dwrq = (struct iw_point*)awrq;
+
+       //RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_notice_, ("+rtw_wx_set_priv\n"));
+       if(dwrq->length == 0)
+               return -EFAULT;
+       len = dwrq->length;
+       if (!(ext = rtw_vmalloc(len)))
+               return -ENOMEM;
+
+       if (copy_from_user(ext, dwrq->pointer, len)) {
+               rtw_vmfree(ext, len);
+               return -EFAULT;
+       }
+
+
+       //RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_notice_,
+       //       ("rtw_wx_set_priv: %s req=%s\n",
+       //        dev->name, ext));
+
+       #ifdef CONFIG_DEBUG_RTW_WX_SET_PRIV
+       if (!(ext_dbg = rtw_vmalloc(len)))
+       {
+               rtw_vmfree(ext, len);
+               return -ENOMEM;
+       }
+
+       _rtw_memcpy(ext_dbg, ext, len);
+       #endif
+
+       //added for wps2.0 @20110524
+       if(dwrq->flags == 0x8766 && len > 8)
+       {
+               u32 cp_sz;
+               struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
+               u8 *probereq_wpsie = ext;
+               int probereq_wpsie_len = len;
+               u8 wps_oui[4]={0x0,0x50,0xf2,0x04};
+
+               if((_VENDOR_SPECIFIC_IE_ == probereq_wpsie[0]) &&
+                       (_rtw_memcmp(&probereq_wpsie[2], wps_oui, 4) ==_TRUE))
+               {
+                       cp_sz = probereq_wpsie_len>MAX_WPS_IE_LEN ? MAX_WPS_IE_LEN:probereq_wpsie_len;
+
+                       //_rtw_memcpy(pmlmepriv->probereq_wpsie, probereq_wpsie, cp_sz);
+                       //pmlmepriv->probereq_wpsie_len = cp_sz;
+
+                       printk("probe_req_wps_ielen=%d\n", cp_sz);
+
+                       if(pmlmepriv->wps_probe_req_ie)
+                       {
+                               u32 free_len = pmlmepriv->wps_probe_req_ie_len;
+                               pmlmepriv->wps_probe_req_ie_len = 0;
+                               rtw_mfree(pmlmepriv->wps_probe_req_ie, free_len);
+                               pmlmepriv->wps_probe_req_ie = NULL;
+                       }
+
+                       pmlmepriv->wps_probe_req_ie = rtw_malloc(cp_sz);
+                       if ( pmlmepriv->wps_probe_req_ie == NULL) {
+                               printk("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
+                               ret =  -EINVAL;
+                               goto FREE_EXT;
+
+                       }
+
+                       _rtw_memcpy(pmlmepriv->wps_probe_req_ie, probereq_wpsie, cp_sz);
+                       pmlmepriv->wps_probe_req_ie_len = cp_sz;
+
+               }
+
+               goto FREE_EXT;
+
+       }
+
+       if(     len >= WEXT_CSCAN_HEADER_SIZE
+               && _rtw_memcmp(ext, WEXT_CSCAN_HEADER, WEXT_CSCAN_HEADER_SIZE) == _TRUE
+       ){
+               ret = rtw_wx_set_scan(dev, info, awrq, ext);
+               goto FREE_EXT;
+       }
+
+#ifdef CONFIG_ANDROID
+       //DBG_871X("rtw_wx_set_priv: %s req=%s\n", dev->name, ext);
+
+       i = rtw_android_cmdstr_to_num(ext);
+
+       switch(i) {
+               case ANDROID_WIFI_CMD_START :
+                       indicate_wx_custom_event(padapter, "START");
+                       break;
+               case ANDROID_WIFI_CMD_STOP :
+                       indicate_wx_custom_event(padapter, "STOP");
+                       break;
+               case ANDROID_WIFI_CMD_RSSI :
+                       {
+                               struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
+                               struct  wlan_network    *pcur_network = &pmlmepriv->cur_network;
+
+                               if(check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE) {
+                                       sprintf(ext, "%s rssi %d", pcur_network->network.Ssid.Ssid, padapter->recvpriv.rssi);
+                               } else {
+                                       sprintf(ext, "OK");
+                               }
+                       }
+                       break;
+               case ANDROID_WIFI_CMD_LINKSPEED :
+                       {
+                               u16 mbps = rtw_get_cur_max_rate(padapter)/10;
+                               sprintf(ext, "LINKSPEED %d", mbps);
+                       }
+                       break;
+               case ANDROID_WIFI_CMD_MACADDR :
+                       sprintf(ext, "MACADDR = " MAC_FMT, MAC_ARG(dev->dev_addr));
+                       break;
+               case ANDROID_WIFI_CMD_SCAN_ACTIVE :
+                       {
+                               //rtw_set_scan_mode(padapter, SCAN_ACTIVE);
+                               sprintf(ext, "OK");
+                       }
+                       break;
+               case ANDROID_WIFI_CMD_SCAN_PASSIVE :
+                       {
+                               //rtw_set_scan_mode(padapter, SCAN_PASSIVE);
+                               sprintf(ext, "OK");
+                       }
+                       break;
+
+               case ANDROID_WIFI_CMD_COUNTRY :
+                       {
+                               char country_code[10];
+                               sscanf(ext, "%*s %s", country_code);
+                               rtw_set_country(padapter, country_code);
+                               sprintf(ext, "OK");
+                       }
+                       break;
+               default :
+                       #ifdef  CONFIG_DEBUG_RTW_WX_SET_PRIV
+                       DBG_871X("%s: %s unknowned req=%s\n", __FUNCTION__,
+                               dev->name, ext_dbg);
+                       #endif
+
+                       sprintf(ext, "OK");
+
+       }
+
+       if (copy_to_user(dwrq->pointer, ext, min(dwrq->length, (u16)(strlen(ext)+1)) ) )
+               ret = -EFAULT;
+
+       #ifdef CONFIG_DEBUG_RTW_WX_SET_PRIV
+       DBG_871X("%s: %s req=%s rep=%s dwrq->length=%d, strlen(ext)+1=%d\n", __FUNCTION__,
+               dev->name, ext_dbg ,ext, dwrq->length, (u16)(strlen(ext)+1));
+       #endif
+#endif //end of CONFIG_ANDROID
+
+
+FREE_EXT:
+
+       rtw_vmfree(ext, len);
+       #ifdef CONFIG_DEBUG_RTW_WX_SET_PRIV
+       rtw_vmfree(ext_dbg, len);
+       #endif
+
+       //DBG_871X("rtw_wx_set_priv: (SIOCSIWPRIV) %s ret=%d\n",
+       //              dev->name, ret);
+
+       return ret;
+
+}
+
+static int rtw_mp_efuse_get(struct net_device *dev,
+                       struct iw_request_info *info,
+                       union iwreq_data *wdata, char *extra)
+{
+       struct iw_point *wrqu = (struct iw_point *)wdata;
+       PADAPTER padapter = rtw_netdev_priv(dev);
+       struct mp_priv *pmp_priv;
+
+       int i,j =0;
+       u8 data[EFUSE_MAP_SIZE];
+       u8 rawdata[EFUSE_MAX_SIZE];
+       u16 mapLen=0;
+       char *pch, *ptmp, *token, *tmp[3]={0x00,0x00,0x00};
+       u16 addr = 0, cnts = 0, max_available_size = 0,raw_cursize = 0 ,raw_maxsize = 0;
+
+       _rtw_memset(data, '\0', sizeof(data));
+       _rtw_memset(rawdata, '\0', sizeof(rawdata));
+
+       if (copy_from_user(extra, wrqu->pointer, wrqu->length))
+               return -EFAULT;
+
+       pch = extra;
+       DBG_871X("%s: in=%s\n", __func__, extra);
+
+       i=0;
+       //mac 16 "00e04c871200" rmap,00,2
+       while ( (token = strsep (&pch,",") )!=NULL )
+       {
+                       if(i>2) break;
+                       tmp[i] = token;
+                       i++;
+       }
+
+       if ( strcmp(tmp[0],"realmap") == 0 ) {
+
+               DBG_871X("strcmp OK =   %s \n" ,tmp[0]);
+
+               mapLen = EFUSE_MAP_SIZE;
+
+               if (rtw_efuse_map_read(padapter, 0, mapLen, data) == _SUCCESS){
+                       DBG_871X("\t  rtw_efuse_map_read \n");
+               }else {
+                       DBG_871X("\t  rtw_efuse_map_read : Fail \n");
+                       return -EFAULT;
+               }
+               _rtw_memset(extra, '\0', sizeof(extra));
+               DBG_871X("\tOFFSET\tVALUE(hex)\n");
+               sprintf(extra, "%s \n", extra);
+               for ( i = 0; i < EFUSE_MAP_SIZE; i += 16 )
+               {
+                       DBG_871X("\t0x%02x\t", i);
+                       sprintf(extra, "%s \t0x%02x\t", extra,i);
+                       for (j = 0; j < 8; j++)
+                       {
+                               DBG_871X("%02X ", data[i+j]);
+                               sprintf(extra, "%s %02X", extra, data[i+j]);
+                       }
+                       DBG_871X("\t");
+                       sprintf(extra,"%s\t",extra);
+                       for (; j < 16; j++){
+                               DBG_871X("%02X ", data[i+j]);
+                               sprintf(extra, "%s %02X", extra, data[i+j]);
+                       }
+                       DBG_871X("\n");
+                       sprintf(extra,"%s\n",extra);
+               }
+               DBG_871X("\n");
+               wrqu->length = strlen(extra);
+
+               return 0;
+       }
+       else if ( strcmp(tmp[0],"rmap") == 0 ) {
+               if ( tmp[1]==NULL || tmp[2]==NULL ) return      -EINVAL;
+               // rmap addr cnts
+               addr = simple_strtoul(tmp[1], &ptmp, 16);
+
+               DBG_871X("addr = %x \n" ,addr);
+
+               cnts=simple_strtoul(tmp[2], &ptmp,10);
+               if(cnts==0) return -EINVAL;
+
+               DBG_871X("cnts = %d \n" ,cnts);
+               //_rtw_memset(extra, '\0', wrqu->data.length);
+
+               EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, (PVOID)&max_available_size, _FALSE);
+               if ((addr + cnts) > max_available_size) {
+                       DBG_871X("(addr + cnts parameter error \n");
+                       return -EFAULT;
+               }
+
+               if (rtw_efuse_map_read(padapter, addr, cnts, data) == _FAIL)
+               {
+                       DBG_871X("rtw_efuse_access error \n");
+               }
+               else{
+                       DBG_871X("rtw_efuse_access ok \n");
+               }
+
+               _rtw_memset(extra, '\0', sizeof(extra));
+               for ( i = 0; i < cnts; i ++) {
+                       DBG_871X("0x%02x", data[i]);
+                       sprintf(extra, "%s 0x%02X", extra, data[i]);
+                       DBG_871X(" ");
+                       sprintf(extra,"%s ",extra);
+               }
+
+               wrqu->length = strlen(extra)+1;
+
+               DBG_871X("extra = %s ", extra);
+
+               return 0;
+       }
+       else if ( strcmp(tmp[0],"realraw") == 0 ) {
+               addr=0;
+               mapLen = EFUSE_MAX_SIZE;
+
+               if (rtw_efuse_access(padapter, _FALSE, addr, mapLen, rawdata) == _FAIL)
+               {
+                       DBG_871X("\t  rtw_efuse_map_read : Fail \n");
+                       return -EFAULT;
+               } else
+               {
+                       DBG_871X("\t  rtw_efuse_access raw ok \n");
+               }
+
+               _rtw_memset(extra, '\0', sizeof(extra));
+               for ( i=0; i<mapLen; i++ ) {
+                       DBG_871X(" %02x", rawdata[i]);
+                       sprintf(extra, "%s %02x", extra, rawdata[i] );
+
+                       if ((i & 0xF) == 0xF){
+                               DBG_871X("\n\t");
+                               sprintf(extra, "%s\n\t", extra);
+                       }
+                       else if ((i & 0x7) == 0x7){
+                               DBG_871X("\t");
+                               sprintf(extra, "%s\t", extra);
+                       }
+               }
+               wrqu->length = strlen(extra);
+               return 0;
+       }
+       else if ( strcmp(tmp[0],"mac") == 0 ) {
+               if ( tmp[1]==NULL || tmp[2]==NULL ) return      -EINVAL;
+               #ifdef CONFIG_RTL8192C
+               addr = 0x16;
+               cnts = 6;
+               #endif
+               #ifdef CONFIG_RTL8192D
+               addr = 0x19;
+               cnts = 6;
+               #endif
+               EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, (PVOID)&max_available_size, _FALSE);
+               if ((addr + mapLen) > max_available_size) {
+                       DBG_871X("(addr + cnts parameter error \n");
+                       return -EFAULT;
+               }
+               if (rtw_efuse_map_read(padapter, addr, cnts, data) == _FAIL)
+               {
+                       DBG_871X("rtw_efuse_access error \n");
+               }
+               else{
+                       DBG_871X("rtw_efuse_access ok \n");
+               }
+               _rtw_memset(extra, '\0', sizeof(extra));
+               for ( i = 0; i < cnts; i ++) {
+                       DBG_871X("0x%02x", data[i]);
+                       sprintf(extra, "%s 0x%02X", extra, data[i+j]);
+                       DBG_871X(" ");
+                       sprintf(extra,"%s ",extra);
+               }
+               wrqu->length = strlen(extra);
+               return 0;
+       }
+       else if ( strcmp(tmp[0],"vidpid") == 0 ) {
+               if ( tmp[1]==NULL || tmp[2]==NULL ) return      -EINVAL;
+               #ifdef CONFIG_RTL8192C
+               addr=0x0a;
+               #endif
+               #ifdef CONFIG_RTL8192D
+               addr = 0x0c;
+               #endif
+               cnts = 4;
+               EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, (PVOID)&max_available_size, _FALSE);
+               if ((addr + mapLen) > max_available_size) {
+                       DBG_871X("(addr + cnts parameter error \n");
+                       return -EFAULT;
+               }
+               if (rtw_efuse_map_read(padapter, addr, cnts, data) == _FAIL)
+               {
+                       DBG_871X("rtw_efuse_access error \n");
+               }
+               else{
+                       DBG_871X("rtw_efuse_access ok \n");
+               }
+               _rtw_memset(extra, '\0', sizeof(extra));
+               for ( i = 0; i < cnts; i ++) {
+                       DBG_871X("0x%02x", data[i]);
+                       sprintf(extra, "%s 0x%02X", extra, data[i+j]);
+                       DBG_871X(" ");
+                       sprintf(extra,"%s ",extra);
+               }
+               wrqu->length = strlen(extra);
+               return 0;
+       }
+       else if ( strcmp(tmp[0],"ableraw") == 0 ) {
+               efuse_GetCurrentSize(padapter,&raw_cursize);
+               raw_maxsize = efuse_GetMaxSize(padapter);
+               sprintf(extra, "%s : [ available raw size] = %d",extra,raw_maxsize-raw_cursize);
+               wrqu->length = strlen(extra);
+
+               return 0;
+       }else
+       {
+                sprintf(extra, "%s : Command not found\n",extra);
+                 wrqu->length = strlen(extra);
+                 return 0;
+       }
+
+       return 0;
+}
+
+static int rtw_mp_efuse_set(struct net_device *dev,
+                       struct iw_request_info *info,
+                       union iwreq_data *wdata, char *extra)
+{
+       struct iw_point *wrqu = (struct iw_point *)wdata;
+       PADAPTER padapter = rtw_netdev_priv(dev);
+
+       u8 buffer[40];
+       u32 i,jj,kk;
+       u8 setdata[EFUSE_MAP_SIZE];
+       u8 setrawdata[EFUSE_MAX_SIZE];
+       char *pch, *ptmp, *token, *edata,*tmp[3]={0x00,0x00,0x00};
+
+       u16 addr = 0, max_available_size = 0;
+       u32  cnts = 0;
+
+       pch = extra;
+       DBG_871X("%s: in=%s\n", __func__, extra);
+
+       i=0;
+       while ( (token = strsep (&pch,",") )!=NULL )
+       {
+               if(i>2) break;
+               tmp[i] = token;
+               i++;
+       }
+
+       // tmp[0],[1],[2]
+       // wmap,addr,00e04c871200
+       if ( strcmp(tmp[0],"wmap") == 0 ) {
+                if ( tmp[1]==NULL || tmp[2]==NULL ) return     -EINVAL;
+                       if ( ! strlen( tmp[2] )/2 > 1 ) return -EFAULT;
+
+                       addr = simple_strtoul( tmp[1], &ptmp, 16 );
+                       addr = addr & 0xFF;
+                       DBG_871X("addr = %x \n" ,addr);
+
+                       cnts = strlen( tmp[2] )/2;
+                       if ( cnts == 0) return -EFAULT;
+
+                       DBG_871X("cnts = %d \n" ,cnts);
+                       DBG_871X("target data = %s \n" ,tmp[2]);
+
+                       for( jj = 0, kk = 0; jj < cnts; jj++, kk += 2 )
+                       {
+                               setdata[jj] = key_2char2num( tmp[2][kk], tmp[2][kk+ 1] );
+                       }
+
+                       EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, (PVOID)&max_available_size, _FALSE);
+
+                       if ((addr + cnts) > max_available_size) {
+                                               DBG_871X("parameter error \n");
+                                               return -EFAULT;
+                       }
+                       if (rtw_efuse_map_write(padapter, addr, cnts, setdata) == _FAIL) {
+                                       DBG_871X("rtw_efuse_map_write error \n");
+                                       return -EFAULT;
+                       } else
+                          DBG_871X("rtw_efuse_map_write ok \n");
+
+               return 0;
+       }
+       else if ( strcmp(tmp[0],"wraw") == 0 ) {
+                        if ( tmp[1]==NULL || tmp[2]==NULL ) return     -EINVAL;
+                        if ( ! strlen( tmp[2] )/2 > 1 ) return -EFAULT;
+                       addr = simple_strtoul( tmp[1], &ptmp, 16 );
+                       addr = addr & 0xFF;
+                       DBG_871X("addr = %x \n" ,addr);
+
+                       cnts=strlen( tmp[2] )/2;
+                       if ( cnts == 0) return -EFAULT;
+
+                       DBG_871X(" cnts = %d \n" ,cnts );
+                       DBG_871X("target data = %s \n" ,tmp[2] );
+
+                       for( jj = 0, kk = 0; jj < cnts; jj++, kk += 2 )
+                       {
+                                       setrawdata[jj] = key_2char2num( tmp[2][kk], tmp[2][kk+ 1] );
+                       }
+
+                       if ( rtw_efuse_access( padapter, _TRUE, addr, cnts, setrawdata ) == _FAIL ){
+                                       DBG_871X("\t  rtw_efuse_map_read : Fail \n");
+                                               return -EFAULT;
+                       } else
+                         DBG_871X("\t  rtw_efuse_access raw ok \n");
+
+                                       return 0;
+               }
+       else if ( strcmp(tmp[0],"mac") == 0 ) {
+                        if ( tmp[1]==NULL || tmp[2]==NULL ) return     -EINVAL;
+                       //mac,00e04c871200
+                       #ifdef CONFIG_RTL8192C
+                               addr = 0x16;
+                       #endif
+                       #ifdef CONFIG_RTL8192D
+                               addr = 0x19;
+                       #endif
+                               cnts = strlen( tmp[1] )/2;
+                               if ( cnts == 0) return -EFAULT;
+                               if ( cnts > 6 ){
+                                               DBG_871X("error data for mac addr = %s \n" ,tmp[1]);
+                                               return -EFAULT;
+                               }
+
+                               DBG_871X("target data = %s \n" ,tmp[1]);
+
+                               for( jj = 0, kk = 0; jj < cnts; jj++, kk += 2 )
+                               {
+                                       setdata[jj] = key_2char2num(tmp[1][kk], tmp[1][kk+ 1]);
+                               }
+
+                               EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, (PVOID)&max_available_size, _FALSE);
+
+                               if ((addr + cnts) > max_available_size) {
+                                               DBG_871X("parameter error \n");
+                                               return -EFAULT;
+                                       }
+                               if ( rtw_efuse_map_write(padapter, addr, cnts, setdata) == _FAIL ) {
+                                       DBG_871X("rtw_efuse_map_write error \n");
+                                       return -EFAULT;
+                               } else
+                                       DBG_871X("rtw_efuse_map_write ok \n");
+
+                       return 0;
+               }
+               else if ( strcmp(tmp[0],"vidpid") == 0 ) {
+                        if ( tmp[1]==NULL || tmp[2]==NULL ) return     -EINVAL;
+                               // pidvid,da0b7881
+                               #ifdef CONFIG_RTL8192C
+                                          addr=0x0a;
+                               #endif
+                               #ifdef CONFIG_RTL8192D
+                                       addr = 0x0c;
+                               #endif
+
+                               cnts=strlen( tmp[1] )/2;
+                               if ( cnts == 0) return -EFAULT;
+                               DBG_871X("target data = %s \n" ,tmp[1]);
+
+                               for( jj = 0, kk = 0; jj < cnts; jj++, kk += 2 )
+                               {
+                                       setdata[jj] = key_2char2num(tmp[1][kk], tmp[1][kk+ 1]);
+                               }
+
+                               EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, (PVOID)&max_available_size, _FALSE);
+
+                               if ((addr + cnts) > max_available_size) {
+                                               DBG_871X("parameter error \n");
+                                               return -EFAULT;
+                                       }
+
+                               if ( rtw_efuse_map_write(padapter, addr, cnts, setdata) == _FAIL ) {
+                                       DBG_871X("rtw_efuse_map_write error \n");
+                                       return -EFAULT;
+                               } else
+                                       DBG_871X("rtw_efuse_map_write ok \n");
+
+                               return 0;
+               }
+               else{
+                                DBG_871X("Command not found\n");
+                          return 0;
+               }
+
+         return 0;
+}
+
+
+
+#if defined(CONFIG_MP_INCLUDED) && defined(CONFIG_MP_IWPRIV_SUPPORT)
+
+/*
+ * Input Format: %s,%d,%d
+ *     %s is width, could be
+ *             "b" for 1 byte
+ *             "w" for WORD (2 bytes)
+ *             "dw" for DWORD (4 bytes)
+ *     1st %d is address(offset)
+ *     2st %d is data to write
+ */
+static int rtw_mp_write_reg(struct net_device *dev,
+                       struct iw_request_info *info,
+                       struct iw_point *wrqu, char *extra)
+{
+       char *pch, *pnext, *ptmp;
+       char *width_str;
+       char width;
+       u32 addr, data;
+       int ret;
+       PADAPTER padapter = rtw_netdev_priv(dev);
+
+
+       pch = extra;
+       pnext = strpbrk(pch, " ,.-");
+       if (pnext == NULL) return -EINVAL;
+       *pnext = 0;
+       width_str = pch;
+
+       pch = pnext + 1;
+       pnext = strpbrk(pch, " ,.-");
+       if (pnext == NULL) return -EINVAL;
+       *pnext = 0;
+       addr = simple_strtoul(pch, &ptmp, 16);
+       if (addr > 0x3FFF) return -EINVAL;
+
+       pch = pnext + 1;
+       if ((pch - extra) >= wrqu->length) return -EINVAL;
+       data = simple_strtoul(pch, &ptmp, 16);
+
+       ret = 0;
+       width = width_str[0];
+       switch (width) {
+               case 'b':
+                       // 1 byte
+                       if (data > 0xFF) {
+                               ret = -EINVAL;
+                               break;
+                       }
+                       rtw_write8(padapter, addr, data);
+                       break;
+               case 'w':
+                       // 2 bytes
+                       if (data > 0xFFFF) {
+                               ret = -EINVAL;
+                               break;
+                       }
+                       rtw_write16(padapter, addr, data);
+                       break;
+               case 'd':
+                       // 4 bytes
+                       rtw_write32(padapter, addr, data);
+                       break;
+               default:
+                       ret = -EINVAL;
+                       break;
+       }
+
+       return ret;
+}
+
+/*
+ * Input Format: %s,%d
+ *     %s is width, could be
+ *             "b" for 1 byte
+ *             "w" for WORD (2 bytes)
+ *             "dw" for DWORD (4 bytes)
+ *     %d is address(offset)
+ *
+ * Return:
+ *     %d for data readed
+ */
+static int rtw_mp_read_reg(struct net_device *dev,
+                       struct iw_request_info *info,
+                       struct iw_point *wrqu, char *extra)
+{
+       char input[wrqu->length];
+       char *pch, *pnext, *ptmp;
+       char *width_str;
+       char width;
+       char data[20],tmp[20];
+       u32 addr;
+       //u32 *data = (u32*)extra;
+       u32 ret, i=0, j=0, strtout=0;
+       PADAPTER padapter = rtw_netdev_priv(dev);
+
+       if (wrqu->length > 128) return -EFAULT;
+
+       if (copy_from_user(input, wrqu->pointer, wrqu->length))
+               return -EFAULT;
+
+       _rtw_memset(data, 0, 20);
+       _rtw_memset(tmp, 0, 20);
+       _rtw_memset(extra, 0, wrqu->length);
+
+       pch = input;
+       pnext = strpbrk(pch, " ,.-");
+       if (pnext == NULL) return -EINVAL;
+       *pnext = 0;
+       width_str = pch;
+
+       pch = pnext + 1;
+       if ((pch - input) >= wrqu->length) return -EINVAL;
+
+       addr = simple_strtoul(pch, &ptmp, 16);
+       if (addr > 0x3FFF) return -EINVAL;
+
+       ret = 0;
+       width = width_str[0];
+       switch (width) {
+               case 'b':
+                       // 1 byte
+                       // *(u8*)data = rtw_read8(padapter, addr);
+                       sprintf(extra, "%d\n",  rtw_read8(padapter, addr));
+                       wrqu->length = strlen(extra);
+                       break;
+               case 'w':
+                       // 2 bytes
+                       //*(u16*)data = rtw_read16(padapter, addr);
+                       sprintf(data, "%04d\n", rtw_read16(padapter, addr));
+                       for( i=0 ; i <= strlen(data) ; i++)
+                               {
+                                         if( i%2==0 )
+                                         {
+                                                  tmp[j]=' ';
+                                                  j++;
+                                         }
+                                         if ( data[i] != '\0' )
+                                                tmp[j] = data[i];
+
+                                                j++;
+                               }
+                               pch = tmp;
+                               DBG_871X("pch=%s",pch);
+
+                               while( *pch != '\0' )
+                               {
+                                       pnext = strpbrk(pch, " ");
+                                       pnext++;
+                                       if ( *pnext != '\0' )
+                                       {
+                                                 strtout = simple_strtoul (pnext , &ptmp, 16);
+                                                 sprintf( extra, "%s %d" ,extra ,strtout );
+                                       }
+                                       else{
+                                                 break;
+                                       }
+                                       pch = pnext;
+                               }
+                       wrqu->length = 6;
+                       break;
+               case 'd':
+                       // 4 bytes
+                       //*data = rtw_read32(padapter, addr);
+                       sprintf(data, "%08x", rtw_read32(padapter, addr));
+                               //add read data format blank
+                               for( i=0 ; i <= strlen(data) ; i++)
+                               {
+                                         if( i%2==0 )
+                                         {
+                                                  tmp[j]=' ';
+                                                  j++;
+                                         }
+                                         tmp[j] = data[i];
+                                         j++;
+                               }
+                               pch = tmp;
+                               DBG_871X("pch=%s",pch);
+
+                               while( *pch != '\0' )
+                               {
+                                       pnext = strpbrk(pch, " ");
+                                       pnext++;
+                                       if ( *pnext != '\0' )
+                                       {
+                                                 strtout = simple_strtoul (pnext , &ptmp, 16);
+                                                 sprintf( extra, "%s %d" ,extra ,strtout );
+                                       }
+                                       else{
+                       break;
+                                       }
+                                       pch = pnext;
+                               }
+                       wrqu->length = strlen(extra);
+                       break;
+
+               default:
+                       wrqu->length = 0;
+                       ret = -EINVAL;
+                       break;
+
+       }
+
+       return ret;
+}
+
+/*
+ * Input Format: %d,%x,%x
+ *     %d is RF path, should be smaller than MAX_RF_PATH_NUMS
+ *     1st %x is address(offset)
+ *     2st %x is data to write
+ */
+ static int rtw_mp_write_rf(struct net_device *dev,
+                       struct iw_request_info *info,
+                       struct iw_point *wrqu, char *extra)
+{
+/*static int rtw_mp_write_rf(struct net_device *dev,
+                       struct iw_request_info *info,
+                       union iwreq_data *wrqu, char *extra)
+*/
+       u32 path, addr, data;
+       int ret;
+       PADAPTER padapter = rtw_netdev_priv(dev);
+
+
+       ret = sscanf(extra, "%d,%x,%x", &path, &addr, &data);
+       if (ret < 3) return -EINVAL;
+
+       if (path >= MAX_RF_PATH_NUMS) return -EINVAL;
+       if (addr > 0xFF) return -EINVAL;
+       if (data > 0xFFFFF) return -EINVAL;
+       _rtw_memset(extra, 0, wrqu->length);
+
+       write_rfreg(padapter, path, addr, data);
+
+       sprintf(extra, "write_rf completed \n");
+
+       return 0;
+}
+
+/*
+ * Input Format: %d,%x
+ *     %d is RF path, should be smaller than MAX_RF_PATH_NUMS
+ *     %x is address(offset)
+ *
+ * Return:
+ *     %d for data readed
+ */
+static int rtw_mp_read_rf(struct net_device *dev,
+                       struct iw_request_info *info,
+                       struct iw_point *wrqu, char *extra)
+{
+       char input[wrqu->length];
+       char *pch, *pnext, *ptmp;
+       char data[20],tmp[20];
+       //u32 *data = (u32*)extra;
+       u32 path, addr;
+       u32 ret,i=0 ,j=0,strtou=0;
+       PADAPTER padapter = rtw_netdev_priv(dev);
+
+
+       if (wrqu->length > 128) return -EFAULT;
+       if (copy_from_user(input, wrqu->pointer, wrqu->length))
+               return -EFAULT;
+
+       ret = sscanf(input, "%d,%x", &path, &addr);
+       if (ret < 2) return -EINVAL;
+
+       if (path >= MAX_RF_PATH_NUMS) return -EINVAL;
+       if (addr > 0xFF) return -EINVAL;
+
+       _rtw_memset(extra, 0, wrqu->length);
+
+       //*data = read_rfreg(padapter, path, addr);
+       sprintf(data, "%08x", read_rfreg(padapter, path, addr));
+                               //add read data format blank
+                               for( i=0 ; i <= strlen(data) ; i++)
+                               {
+                                         if( i%2==0 )
+                                         {
+                                                  tmp[j]=' ';
+                                                  j++;
+                                         }
+                                         tmp[j] = data[i];
+                                         j++;
+                               }
+                               pch = tmp;
+                               DBG_871X("pch=%s",pch);
+
+                               while( *pch != '\0' )
+                               {
+                                       pnext = strpbrk(pch, " ");
+                                       pnext++;
+                                       if ( *pnext != '\0' )
+                                       {
+                                                 strtou = simple_strtoul (pnext , &ptmp, 16);
+                                                 sprintf( extra, "%s %d" ,extra ,strtou );
+                                       }
+                                       else{
+                                                 break;
+                                       }
+                                       pch = pnext;
+                               }
+                       wrqu->length = strlen(extra);
+
+       return 0;
+}
+
+static int rtw_mp_start(struct net_device *dev,
+                       struct iw_request_info *info,
+                       struct iw_point *wrqu, char *extra)
+{
+       u8 val8;
+       PADAPTER padapter = rtw_netdev_priv(dev);
+
+
+       if (padapter->registrypriv.mp_mode == 0)
+               return -EPERM;
+
+       if (padapter->mppriv.mode == MP_OFF) {
+               if (mp_start_test(padapter) == _FAIL)
+                       return -EPERM;
+               padapter->mppriv.mode = MP_ON;
+       }
+
+       return 0;
+}
+
+static int rtw_mp_stop(struct net_device *dev,
+                       struct iw_request_info *info,
+                       struct iw_point *wrqu, char *extra)
+{
+       PADAPTER padapter = rtw_netdev_priv(dev);
+
+
+       if (padapter->mppriv.mode != MP_OFF) {
+               mp_stop_test(padapter);
+               padapter->mppriv.mode = MP_OFF;
+       }
+
+       return 0;
+}
+
+extern int wifirate2_ratetbl_inx(unsigned char rate);
+
+static int rtw_mp_rate(struct net_device *dev,
+                       struct iw_request_info *info,
+                       struct iw_point *wrqu, char *extra)
+{
+       u32 rate = MPT_RATE_1M;
+       u8              input[wrqu->length];
+       PADAPTER padapter = rtw_netdev_priv(dev);
+
+       if (copy_from_user(input, wrqu->pointer, wrqu->length))
+                       return -EFAULT;
+
+       rate = rtw_atoi(input);
+       sprintf( extra, "Set data rate to %d" , rate );
+
+       if(rate <= 0x7f)
+               rate = wifirate2_ratetbl_inx( (u8)rate);
+       else
+               rate =(rate-0x80+MPT_RATE_MCS0);
+
+       //DBG_871X("%s: rate=%d\n", __func__, rate);
+
+       if (rate >= MPT_RATE_LAST )
+       return -EINVAL;
+
+       padapter->mppriv.rateidx = rate;
+       Hal_SetDataRate(padapter);
+
+       wrqu->length = strlen(extra) + 1;
+       return 0;
+}
+
+static int rtw_mp_channel(struct net_device *dev,
+                       struct iw_request_info *info,
+                       struct iw_point *wrqu, char *extra)
+{
+
+       PADAPTER padapter = rtw_netdev_priv(dev);
+       u8              input[wrqu->length];
+       u32     channel = 1;
+
+       if (copy_from_user(input, wrqu->pointer, wrqu->length))
+                       return -EFAULT;
+
+       channel = rtw_atoi(input);
+       //DBG_871X("%s: channel=%d\n", __func__, channel);
+       sprintf( extra, "Change channel %d to channel %d", padapter->mppriv.channel , channel );
+
+       padapter->mppriv.channel = channel;
+       Hal_SetChannel(padapter);
+
+       wrqu->length = strlen(extra) + 1;
+       return 0;
+}
+
+static int rtw_mp_bandwidth(struct net_device *dev,
+                       struct iw_request_info *info,
+                       struct iw_point *wrqu, char *extra)
+{
+       u32 bandwidth=0, sg=0;
+       //u8 buffer[40];
+       PADAPTER padapter = rtw_netdev_priv(dev);
+       //if (copy_from_user(buffer, (void*)wrqu->data.pointer, wrqu->data.length))
+    //            return -EFAULT;
+
+       //DBG_871X("%s:iwpriv in=%s\n", __func__, extra);
+
+       sscanf(extra, "40M=%d,shortGI=%d", &bandwidth, &sg);
+
+       if (bandwidth != HT_CHANNEL_WIDTH_40)
+               bandwidth = HT_CHANNEL_WIDTH_20;
+
+       //DBG_871X("%s: bw=%d sg=%d \n", __func__, bandwidth , sg);
+
+       padapter->mppriv.bandwidth = (u8)bandwidth;
+       padapter->mppriv.preamble = sg;
+
+       SetBandwidth(padapter);
+
+       return 0;
+}
+
+static int rtw_mp_txpower(struct net_device *dev,
+                       struct iw_request_info *info,
+                       struct iw_point *wrqu, char *extra)
+{
+       u32             idx_a=0,idx_b=0;
+       u8              input[wrqu->length];
+
+       PADAPTER padapter = rtw_netdev_priv(dev);
+
+       if (copy_from_user(input, wrqu->pointer, wrqu->length))
+                       return -EFAULT;
+
+       sscanf(input,"patha=%d,pathb=%d",&idx_a,&idx_b);
+       //DBG_871X("%s: tx_pwr_idx_a=%x b=%x\n", __func__, idx_a, idx_b);
+
+       sprintf( extra, "Set power level path_A:%d path_B:%d", idx_a , idx_b );
+       padapter->mppriv.txpoweridx = (u8)idx_a;
+       padapter->mppriv.txpoweridx_b = (u8)idx_b;
+
+       Hal_SetAntennaPathPower(padapter);
+
+       wrqu->length = strlen(extra) + 1;
+       return 0;
+}
+
+static int rtw_mp_ant_tx(struct net_device *dev,
+                       struct iw_request_info *info,
+                       struct iw_point *wrqu, char *extra)
+{
+       u8 i;
+       u8              input[wrqu->length];
+       u16 antenna = 0;
+       PADAPTER padapter = rtw_netdev_priv(dev);
+
+       if (copy_from_user(input, wrqu->pointer, wrqu->length))
+                       return -EFAULT;
+
+       //DBG_871X("%s: input=%s\n", __func__, input);
+
+       sprintf( extra, "switch Tx antenna to %s", input );
+
+       for (i=0; i < strlen(input); i++)
+       {
+               switch(input[i])
+                       {
+                               case 'a' :
+                                                               antenna|=ANTENNA_A;
+                                                               break;
+                               case 'b':
+                                                               antenna|=ANTENNA_B;
+                                                               break;
+                       }
+       }
+       //antenna |= BIT(extra[i]-'a');
+       //DBG_871X("%s: antenna=0x%x\n", __func__, antenna);
+       padapter->mppriv.antenna_tx = antenna;
+       //DBG_871X("%s:mppriv.antenna_rx=%d\n", __func__, padapter->mppriv.antenna_tx);
+
+       Hal_SetAntenna(padapter);
+
+       wrqu->length = strlen(extra) + 1;
+       return 0;
+}
+
+static int rtw_mp_ant_rx(struct net_device *dev,
+                       struct iw_request_info *info,
+                       struct iw_point *wrqu, char *extra)
+{
+       u8 i;
+       u16 antenna = 0;
+       u8              input[wrqu->length];
+       PADAPTER padapter = rtw_netdev_priv(dev);
+
+       if (copy_from_user(input, wrqu->pointer, wrqu->length))
+                       return -EFAULT;
+       //DBG_871X("%s: input=%s\n", __func__, input);
+       _rtw_memset(extra, 0, wrqu->length);
+
+       sprintf( extra, "switch Rx antenna to %s", input );
+
+       for (i=0; i < strlen(input); i++) {
+
+       switch( input[i] )
+                       {
+                               case 'a' :
+                                                               antenna|=ANTENNA_A;
+                                                               break;
+                               case 'b':
+                                                               antenna|=ANTENNA_B;
+                                                               break;
+                       }
+       }
+
+       //DBG_871X("%s: antenna=0x%x\n", __func__, antenna);
+       padapter->mppriv.antenna_rx = antenna;
+       //DBG_871X("%s:mppriv.antenna_rx=%d\n", __func__, padapter->mppriv.antenna_rx);
+       Hal_SetAntenna(padapter);
+       wrqu->length = strlen(extra);
+
+       return 0;
+}
+
+static int rtw_mp_ctx(struct net_device *dev,
+                       struct iw_request_info *info,
+                       struct iw_point *wrqu, char *extra)
+{
+       u32 pkTx = 1, countPkTx = 1, cotuTx = 1, CarrSprTx = 1, scTx = 1, sgleTx = 1, stop = 1;
+       u32 bStartTest = 1;
+       u32 count = 0;
+       struct mp_priv *pmp_priv;
+       struct pkt_attrib *pattrib;
+
+       PADAPTER padapter = rtw_netdev_priv(dev);
+
+
+       pmp_priv = &padapter->mppriv;
+
+       if (copy_from_user(extra, wrqu->pointer, wrqu->length))
+                       return -EFAULT;
+
+       DBG_871X("%s: in=%s\n", __func__, extra);
+
+       countPkTx = strncmp(extra, "count=", 5); // strncmp TRUE is 0
+       cotuTx = strncmp(extra, "background", 20);
+       CarrSprTx = strncmp(extra, "background,cs", 20);
+       scTx = strncmp(extra, "background,sc", 20);
+       sgleTx = strncmp(extra, "background,stone", 20);
+       pkTx = strncmp(extra, "background,pkt", 20);
+       stop = strncmp(extra, "stop", 5);
+       sscanf(extra, "count=%d,pkt", &count);
+
+       //DBG_871X("%s: count=%d countPkTx=%d cotuTx=%d CarrSprTx=%d scTx=%d sgleTx=%d pkTx=%d stop=%d\n", __func__, count, countPkTx, cotuTx, CarrSprTx, pkTx, sgleTx, scTx, stop);
+       _rtw_memset(extra, '\0', sizeof(extra));
+
+       if (stop == 0) {
+               bStartTest = 0; // To set Stop
+               pmp_priv->tx.stop = 1;
+               sprintf( extra, "Stop continuous Tx");
+       } else {
+               bStartTest = 1;
+               if (pmp_priv->mode != MP_ON) {
+                       if (pmp_priv->tx.stop != 1) {
+                               DBG_871X("%s: MP_MODE != ON %d\n", __func__, pmp_priv->mode);
+                               return  -EFAULT;
+                       }
+               }
+       }
+
+       if (pkTx == 0 || countPkTx == 0)
+               pmp_priv->mode = MP_PACKET_TX;
+       if (sgleTx == 0)
+               pmp_priv->mode = MP_SINGLE_TONE_TX;
+       if (cotuTx == 0)
+               pmp_priv->mode = MP_CONTINUOUS_TX;
+       if (CarrSprTx == 0)
+               pmp_priv->mode = MP_CARRIER_SUPPRISSION_TX;
+       if (scTx == 0)
+               pmp_priv->mode = MP_SINGLE_CARRIER_TX;
+
+       switch (pmp_priv->mode)
+       {
+               case MP_PACKET_TX:
+
+                       //DBG_871X("%s:pkTx %d\n", __func__,bStartTest);
+                       if (bStartTest == 0)
+                       {
+                               pmp_priv->tx.stop = 1;
+                               pmp_priv->mode = MP_ON;
+                               sprintf( extra, "Stop continuous Tx");
+                       }
+                       else if (pmp_priv->tx.stop == 1)
+                       {
+                               sprintf( extra, "Start continuous DA=ffffffffffff len=1500 count=%u,\n",count);
+                               //DBG_871X("%s:countPkTx %d\n", __func__,count);
+                               pmp_priv->tx.stop = 0;
+                               pmp_priv->tx.count = count;
+                               pmp_priv->tx.payload = 2;
+                               pattrib = &pmp_priv->tx.attrib;
+                               pattrib->pktlen = 1460;
+                               _rtw_memset(pattrib->dst, 0xFF, ETH_ALEN);
+                               SetPacketTx(padapter);
+                       }
+                       else {
+                               //DBG_871X("%s: pkTx not stop\n", __func__);
+                               return -EFAULT;
+                       }
+                               wrqu->length = strlen(extra);
+                               return 0;
+
+               case MP_SINGLE_TONE_TX:
+                       //DBG_871X("%s: sgleTx %d \n", __func__, bStartTest);
+                       if (bStartTest != 0){
+                               sprintf( extra, "Start continuous DA=ffffffffffff len=1500 \n infinite=yes.");
+
+                        }
+                       Hal_SetSingleToneTx(padapter, (u8)bStartTest);
+                       break;
+
+               case MP_CONTINUOUS_TX:
+                       DBG_871X("%s: cotuTx %d\n", __func__, bStartTest);
+                       if (bStartTest != 0){
+                               sprintf( extra, "Start continuous DA=ffffffffffff len=1500 \n infinite=yes.");
+                        }
+                        Hal_SetContinuousTx(padapter, (u8)bStartTest);
+                       break;
+
+               case MP_CARRIER_SUPPRISSION_TX:
+                       //DBG_871X("%s: CarrSprTx %d\n", __func__, bStartTest);
+                       if (bStartTest != 0){
+                               if( pmp_priv->rateidx <= MPT_RATE_11M )
+                               {
+                                       sprintf( extra, "Start continuous DA=ffffffffffff len=1500 \n infinite=yes.");
+                               }else
+                                       sprintf( extra, "Specify carrier suppression but not CCK rate");
+                       }
+                       Hal_SetCarrierSuppressionTx(padapter, (u8)bStartTest);
+                       break;
+
+               case MP_SINGLE_CARRIER_TX:
+                       //DBG_871X("%s: scTx %d\n", __func__, bStartTest);
+                       if (bStartTest != 0){
+                               sprintf( extra, "Start continuous DA=ffffffffffff len=1500 \n infinite=yes.");
+                       }
+                       Hal_SetSingleCarrierTx(padapter, (u8)bStartTest);
+                       break;
+
+               default:
+                       //DBG_871X("%s:No Match MP_MODE\n", __func__);
+                       sprintf( extra, "Error! Continuous-Tx is not on-going.");
+                       return -EFAULT;
+       }
+
+       if (bStartTest) {
+               struct mp_priv *pmp_priv = &padapter->mppriv;
+               if (pmp_priv->tx.stop == 0) {
+                       pmp_priv->tx.stop = 1;
+                       //DBG_871X("%s: pkt tx is running...\n", __func__);
+                       rtw_msleep_os(5);
+               }
+               pmp_priv->tx.stop = 0;
+               pmp_priv->tx.count = 1;
+               SetPacketTx(padapter);
+       } else {
+               pmp_priv->mode = MP_ON;
+       }
+
+       wrqu->length = strlen(extra);
+       return 0;
+}
+
+static int rtw_mp_arx(struct net_device *dev,
+                       struct iw_request_info *info,
+                       struct iw_point *wrqu, char *extra)
+{
+       u8 bStartRx=0,bStopRx=0;
+       PADAPTER padapter = rtw_netdev_priv(dev);
+       u8              input[wrqu->length];
+
+       if (copy_from_user(input, wrqu->pointer, wrqu->length))
+                       return -EFAULT;
+
+       DBG_871X("%s: %s\n", __func__, input);
+
+       bStartRx = (strncmp(input, "start", 5)==0)?1:0; // strncmp TRUE is 0
+       bStopRx = (strncmp(input, "stop", 5)==0)?1:0; // strncmp TRUE is 0
+       SetPacketRx(padapter, bStartRx);
+
+       if(bStartRx)
+       {
+               sprintf( extra, "start");
+               wrqu->length = strlen(extra) + 1;
+       }
+       else if(bStopRx)
+       {
+               sprintf( extra, "Received packet OK:%d CRC error:%d",padapter->mppriv.rx_pktcount,
+                                                                                                               padapter->mppriv.rx_crcerrpktcount);
+               wrqu->length = strlen(extra) + 1;
+       }
+
+
+       return 0;
+}
+
+static int rtw_mp_trx_query(struct net_device *dev,
+                       struct iw_request_info *info,
+                       struct iw_point *wrqu, char *extra)
+{
+       u32 txok,txfail,rxok,rxfail;
+       PADAPTER padapter = rtw_netdev_priv(dev);
+       //if (copy_from_user(extra, wrqu->data.pointer, wrqu->data.length))
+       //      return -EFAULT;
+
+       txok=padapter->mppriv.tx.sended;
+       txfail=0;
+       rxok = padapter->mppriv.rx_pktcount;
+       rxfail = padapter->mppriv.rx_crcerrpktcount;
+
+       _rtw_memset(extra, '\0', 128);
+
+       sprintf(extra, "Tx OK:%d, Tx Fail:%d, Rx OK:%d, CRC error:%d ", txok, txfail,rxok,rxfail);
+
+       wrqu->length=strlen(extra)+1;
+
+       return 0;
+}
+
+static int rtw_mp_pwrtrk(struct net_device *dev,
+                       struct iw_request_info *info,
+                       struct iw_point *wrqu, char *extra)
+{
+       u8 enable;
+       u32 thermal;
+       s32 ret;
+       PADAPTER padapter = rtw_netdev_priv(dev);
+       u8              input[wrqu->length];
+
+       if (copy_from_user(input, wrqu->pointer, wrqu->length))
+                       return -EFAULT;
+
+       _rtw_memset(extra, 0, wrqu->length);
+
+       enable = 1;
+       if (wrqu->length > 1) { // not empty string
+               if (strncmp(input, "stop", 4) == 0)
+               {
+                       enable = 0;
+                       sprintf(extra, "mp tx power tracking stop");
+               }
+               else if (sscanf(input, "ther=%d", &thermal)) {
+                               ret = Hal_SetThermalMeter(padapter, (u8)thermal);
+                               if (ret == _FAIL) return -EPERM;
+                               sprintf(extra, "mp tx power tracking start,target value=%d ok ",thermal);
+               }else   {
+                       return -EINVAL;
+               }
+       }
+
+       ret = Hal_SetPowerTracking(padapter, enable);
+       if (ret == _FAIL) return -EPERM;
+
+       wrqu->length = strlen(extra);
+
+       return 0;
+}
+
+static int rtw_mp_psd(struct net_device *dev,
+                       struct iw_request_info *info,
+                       struct iw_point *wrqu, char *extra)
+{
+       PADAPTER padapter = rtw_netdev_priv(dev);
+       u8              input[wrqu->length];
+
+       if (copy_from_user(input, wrqu->pointer, wrqu->length))
+               return -EFAULT;
+
+       strcpy(extra,input);
+
+       wrqu->length = mp_query_psd(padapter, extra);
+
+       return 0;
+}
+
+static int rtw_mp_thermal(struct net_device *dev,
+                       struct iw_request_info *info,
+                       struct iw_point *wrqu, char *extra)
+{
+       u8 val;
+       u16 bwrite=1;
+       #ifdef CONFIG_RTL8192C
+               u16 addr=0x78;
+       #endif
+       #ifdef CONFIG_RTL8192D
+               u16 addr=0xc3;
+       #endif
+       u16 cnt=1;
+       u16 max_available_size=0;
+       PADAPTER padapter = rtw_netdev_priv(dev);
+
+       if (copy_from_user(extra, wrqu->pointer, wrqu->length))
+               return -EFAULT;
+
+       //DBG_871X("print extra %s \n",extra);
+
+        bwrite = strncmp(extra, "write", 6); // strncmp TRUE is 0
+
+        Hal_GetThermalMeter(padapter, &val);
+
+        if( bwrite == 0 )
+        {
+                //DBG_871X("to write val:%d",val);
+                       EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, (PVOID)&max_available_size, _FALSE);
+                       if( 2 > max_available_size )
+                       {
+                               DBG_871X("no available efuse!\n");
+                               return -EFAULT;
+                       }
+                       if ( rtw_efuse_map_write(padapter, addr, cnt, &val) == _FAIL )
+                       {
+                               DBG_871X("rtw_efuse_map_write error \n");
+                               return -EFAULT;
+                       }
+                       else
+                       {
+                                sprintf(extra, " efuse write ok :%d", val);
+                       }
+         }
+         else
+         {
+                        sprintf(extra, "%d", val);
+         }
+       wrqu->length = strlen(extra);
+
+       return 0;
+}
+
+static int rtw_mp_reset_stats(struct net_device *dev,
+                       struct iw_request_info *info,
+                       struct iw_point *wrqu, char *extra)
+{
+       struct mp_priv *pmp_priv;
+       struct pkt_attrib *pattrib;
+       PADAPTER padapter = rtw_netdev_priv(dev);
+
+       pmp_priv = &padapter->mppriv;
+
+       pmp_priv->tx.sended = 0;
+       padapter->mppriv.rx_pktcount = 0;
+       padapter->mppriv.rx_crcerrpktcount = 0;
+
+       return 0;
+}
+
+static int rtw_mp_dump(struct net_device *dev,
+                       struct iw_request_info *info,
+                       struct iw_point *wrqu, char *extra)
+{
+       struct mp_priv *pmp_priv;
+       struct pkt_attrib *pattrib;
+        u32 value;
+       u8 rf_type,path_nums = 0;
+       u32 i,j=1,path;
+       PADAPTER padapter = rtw_netdev_priv(dev);
+
+       pmp_priv = &padapter->mppriv;
+
+
+       //if (copy_from_user(extra, wrqu->data.pointer, wrqu->data.length))
+       //      return -EFAULT;
+
+       if ( strncmp(extra, "all", 4)==0 )
+       {
+                       DBG_871X("\n======= MAC REG =======\n");
+                       for ( i=0x0;i<0x300;i+=4 )
+                       {
+                               if(j%4==1)      DBG_871X("0x%02x",i);
+                               DBG_871X(" 0x%08x ",rtw_read32(padapter,i));
+                               if((j++)%4 == 0)        DBG_871X("\n");
+                       }
+                       for( i=0x400;i<0x800;i+=4 )
+                       {
+                               if(j%4==1)      DBG_871X("0x%02x",i);
+                               DBG_871X(" 0x%08x ",rtw_read32(padapter,i));
+                               if((j++)%4 == 0)        DBG_871X("\n");
+                       }
+
+                       i,j=1;
+                       rtw_hal_get_hwreg(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
+
+                       DBG_871X("\n======= RF REG =======\n");
+                       if(( RF_1T2R == rf_type ) ||( RF_1T1R ==rf_type ))
+                               path_nums = 1;
+                       else
+                               path_nums = 2;
+
+                       for(path=0;path<path_nums;path++)
+                       {
+#ifdef CONFIG_RTL8192D
+                         for (i = 0; i < 0x50; i++)
+#else
+                        for (i = 0; i < 0x34; i++)
+#endif
+                               {
+                                       //value = PHY_QueryRFReg(padapter, (RF90_RADIO_PATH_E)path,i, bMaskDWord);
+                                       value =rtw_hal_read_rfreg(padapter, path, i, 0xffffffff);
+                                       if(j%4==1)      DBG_871X("0x%02x ",i);
+                                       DBG_871X(" 0x%08x ",value);
+                                       if((j++)%4==0)  DBG_871X("\n");
+                               }
+                       }
+       }
+       return 0;
+}
+
+static int rtw_mp_phypara(struct net_device *dev,
+                       struct iw_request_info *info,
+                       struct iw_point *wrqu, char *extra)
+{
+
+       PADAPTER padapter = rtw_netdev_priv(dev);
+       char    input[wrqu->length];
+       u32             valxcap;
+
+       if (copy_from_user(input, wrqu->pointer, wrqu->length))
+                       return -EFAULT;
+
+       DBG_871X("%s:iwpriv in=%s\n", __func__, input);
+
+       sscanf(input, "xcap=%d", &valxcap);
+
+       if (!IS_HARDWARE_TYPE_8192D(padapter))
+                       return 0;
+#ifdef CONFIG_RTL8192D
+       Hal_ProSetCrystalCap( padapter , valxcap );
+#endif
+
+       sprintf( extra, "Set xcap=%d",valxcap );
+       wrqu->length = strlen(extra) + 1;
+
+return 0;
+
+}
+
+
+/* update Tx AGC offset */
+static int rtw_mp_antBdiff(struct net_device *dev,
+                       struct iw_request_info *info,
+                       struct iw_point *wrqu, char *extra)
+{
+
+
+       // MPT_ProSetTxAGCOffset
+       return 0;
+}
+
+
+static int rtw_mp_set(struct net_device *dev,
+                       struct iw_request_info *info,
+                       union iwreq_data *wdata, char *extra)
+{
+       struct iw_point *wrqu = (struct iw_point *)wdata;
+       u32 subcmd = wrqu->flags;
+       PADAPTER padapter = rtw_netdev_priv(dev);
+
+       if (padapter == NULL)
+       {
+               return -ENETDOWN;
+       }
+
+       //_rtw_memset(extra, 0x00, IW_PRIV_SIZE_MASK);
+
+       if (extra == NULL)
+       {
+               wrqu->length = 0;
+               return -EIO;
+       }
+
+       switch(subcmd)
+       {
+       case WRITE_REG :
+                       rtw_mp_write_reg (dev,info,wrqu,extra);
+                        break;
+
+       case WRITE_RF:
+                       rtw_mp_write_rf (dev,info,wrqu,extra);
+                        break;
+
+       case MP_START:
+                       DBG_871X("set case mp_start \n");
+                       rtw_mp_start (dev,info,wrqu,extra);
+                        break;
+
+       case MP_STOP:
+                       DBG_871X("set case mp_stop \n");
+                       rtw_mp_stop (dev,info,wrqu,extra);
+                        break;
+
+       case MP_BANDWIDTH:
+                       DBG_871X("set case mp_bandwidth \n");
+                       rtw_mp_bandwidth (dev,info,wrqu,extra);
+                       break;
+
+       case MP_RESET_STATS:
+                       DBG_871X("set case MP_RESET_STATS \n");
+                       rtw_mp_reset_stats      (dev,info,wrqu,extra);
+                       break;
+
+       case EFUSE_SET:
+                       DBG_871X("efuse set \n");
+                       rtw_mp_efuse_set (dev,info,wdata,extra);
+                       break;
+
+       }
+
+
+       return 0;
+}
+
+
+static int rtw_mp_get(struct net_device *dev,
+                       struct iw_request_info *info,
+                       union iwreq_data *wdata, char *extra)
+{
+       struct iw_point *wrqu = (struct iw_point *)wdata;
+       u32 subcmd = wrqu->flags;
+       PADAPTER padapter = rtw_netdev_priv(dev);
+
+       //DBG_871X("in mp_get extra= %s \n",extra);
+
+       if (padapter == NULL)
+       {
+               return -ENETDOWN;
+       }
+       if (extra == NULL)
+       {
+               wrqu->length = 0;
+               return -EIO;
+       }
+
+       switch(subcmd)
+       {
+       case MP_PHYPARA:
+                       DBG_871X("mp_get  MP_PHYPARA \n");
+                       rtw_mp_phypara(dev,info,wrqu,extra);
+                       break;
+
+       case MP_CHANNEL:
+                       DBG_871X("set case mp_channel \n");
+                       rtw_mp_channel (dev,info,wrqu,extra);
+                       break;
+
+       case READ_REG:
+                       DBG_871X("mp_get  READ_REG \n");
+                       rtw_mp_read_reg (dev,info,wrqu,extra);
+                        break;
+       case READ_RF:
+                       DBG_871X("mp_get  READ_RF \n");
+                       rtw_mp_read_rf (dev,info,wrqu,extra);
+                       break;
+
+       case MP_RATE:
+                       DBG_871X("set case mp_rate \n");
+                       rtw_mp_rate (dev,info,wrqu,extra);
+                       break;
+
+       case MP_TXPOWER:
+                       DBG_871X("set case MP_TXPOWER \n");
+                       rtw_mp_txpower (dev,info,wrqu,extra);
+                       break;
+
+       case MP_ANT_TX:
+                       DBG_871X("set case MP_ANT_TX \n");
+                       rtw_mp_ant_tx (dev,info,wrqu,extra);
+                       break;
+
+       case MP_ANT_RX:
+                       DBG_871X("set case MP_ANT_RX \n");
+                       rtw_mp_ant_rx (dev,info,wrqu,extra);
+                       break;
+
+       case MP_QUERY:
+                       DBG_871X("mp_get mp_query MP_QUERY \n");
+                       rtw_mp_trx_query(dev,info,wrqu,extra);
+                       break;
+
+       case MP_CTX:
+                       DBG_871X("set case MP_CTX \n");
+                       rtw_mp_ctx (dev,info,wrqu,extra);
+                       break;
+
+       case MP_ARX:
+                       DBG_871X("set case MP_ARX \n");
+                       rtw_mp_arx (dev,info,wrqu,extra);
+                       break;
+
+       case EFUSE_GET:
+                       DBG_871X("efuse get EFUSE_GET \n");
+                       rtw_mp_efuse_get(dev,info,wdata,extra);
+                break;
+
+       case MP_DUMP:
+                       DBG_871X("set case MP_DUMP \n");
+                       rtw_mp_dump (dev,info,wrqu,extra);
+                break;
+       case MP_PSD:
+                       DBG_871X("set case MP_PSD \n");
+                       rtw_mp_psd (dev,info,wrqu,extra);
+                break;
+
+       case MP_THER:
+                       DBG_871X("set case MP_THER \n");
+                       rtw_mp_thermal (dev,info,wrqu,extra);
+               break;
+
+       case MP_PWRTRK:
+                       DBG_871X("set case MP_PWRTRK \n");
+                       rtw_mp_pwrtrk (dev,info,wrqu,extra);
+                       break;
+       }
+
+return 0;
+}
+
+#endif //#if defined(CONFIG_MP_INCLUDED) && defined(CONFIG_MP_IWPRIV_SUPPORT)
+
+static int rtw_wfd_tdls_enable(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+       int ret = 0;
+
+#ifdef CONFIG_TDLS
+#ifdef CONFIG_WFD
+
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+
+       printk( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
+
+       if ( extra[ 0 ] == '0' )
+       {
+               padapter->wdinfo.wfd_tdls_enable = 0;
+       }
+       else
+       {
+               padapter->wdinfo.wfd_tdls_enable = 1;
+       }
+
+#endif //CONFIG_WFD
+#endif //CONFIG_TDLS
+
+       return ret;
+}
+
+static int rtw_tdls_weaksec(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+       int ret = 0;
+
+#ifdef CONFIG_TDLS
+
+       u8 i, j;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+
+       DBG_871X( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
+
+       if ( extra[ 0 ] == '0' )
+       {
+               padapter->wdinfo.wfd_tdls_weaksec = 0;
+       }
+       else
+       {
+               padapter->wdinfo.wfd_tdls_weaksec = 1;
+       }
+#endif
+
+       return ret;
+}
+
+
+static int rtw_tdls_enable(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+       int ret = 0;
+
+#ifdef CONFIG_TDLS
+
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct tdls_info        *ptdlsinfo = &padapter->tdlsinfo;
+       _irqL    irqL;
+       _list   *plist, *phead;
+       s32     index;
+       struct sta_info *psta = NULL;
+       struct  sta_priv *pstapriv = &padapter->stapriv;
+       u8 tdls_sta[NUM_STA][ETH_ALEN];
+       u8 empty_hwaddr[ETH_ALEN] = { 0x00 };
+
+       printk( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
+
+       _rtw_memset(tdls_sta, 0x00, sizeof(tdls_sta));
+
+       if ( extra[ 0 ] == '0' )
+       {
+               ptdlsinfo->enable = 0;
+
+               if(pstapriv->asoc_sta_count==1)
+                       return ret;
+
+               _enter_critical_bh(&pstapriv->sta_hash_lock, &irqL);
+               for(index=0; index< NUM_STA; index++)
+               {
+                       phead = &(pstapriv->sta_hash[index]);
+                       plist = get_next(phead);
+
+                       while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
+                       {
+                               psta = LIST_CONTAINOR(plist, struct sta_info ,hash_list);
+
+                               plist = get_next(plist);
+
+                               if(psta->tdls_sta_state != TDLS_STATE_NONE)
+                               {
+                                       _rtw_memcpy(tdls_sta[index], psta->hwaddr, ETH_ALEN);
+                               }
+                       }
+               }
+               _exit_critical_bh(&pstapriv->sta_hash_lock, &irqL);
+
+               for(index=0; index< NUM_STA; index++)
+               {
+                       if( !_rtw_memcmp(tdls_sta[index], empty_hwaddr, ETH_ALEN) )
+                       {
+                               printk("issue tear down to "MAC_FMT"\n", MAC_ARG(tdls_sta[index]));
+                               issue_tdls_teardown(padapter, tdls_sta[index]);
+                       }
+               }
+               rtw_tdls_cmd(padapter, myid(&(padapter->eeprompriv)), TDLS_RS_RCR);
+               rtw_reset_tdls_info(padapter);
+       }
+       else if ( extra[ 0 ] == '1' )
+       {
+               ptdlsinfo->enable = 1;
+       }
+#endif //CONFIG_TDLS
+
+       return ret;
+}
+
+static int rtw_tdls_setup(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+       int ret = 0;
+
+#ifdef CONFIG_TDLS
+
+       u8 i, j;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       u8 mac_addr[ETH_ALEN];
+
+#ifdef CONFIG_WFD
+       struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
+#endif // CONFIG_WFD
+
+       printk( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
+
+       for( i=0, j=0 ; i < ETH_ALEN; i++, j+=3 ){
+               mac_addr[i]=key_2char2num(*(extra+j), *(extra+j+1));
+       }
+
+#ifdef CONFIG_WFD
+       if ( _AES_ != padapter->securitypriv.dot11PrivacyAlgrthm )
+       {
+               //      Weak Security situation with AP.
+               if ( 0 == pwdinfo->wfd_tdls_weaksec )
+               {
+                       //      Can't send the tdls setup request out!!
+                       DBG_871X( "[%s] Current link is not AES, SKIP sending the tdls setup request!!\n", __FUNCTION__ );
+               }
+               else
+               {
+                       issue_tdls_setup_req(padapter, mac_addr);
+               }
+       }
+       else
+#endif // CONFIG_WFD
+       {
+               issue_tdls_setup_req(padapter, mac_addr);
+       }
+#endif
+
+       return ret;
+}
+
+static int rtw_tdls_teardown(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+       int ret = 0;
+
+#ifdef CONFIG_TDLS
+
+       u8 i,j;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct sta_info *ptdls_sta = NULL;
+       u8 mac_addr[ETH_ALEN];
+
+       printk( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
+
+       for( i=0, j=0 ; i < ETH_ALEN; i++, j+=3 ){
+               mac_addr[i]=key_2char2num(*(extra+j), *(extra+j+1));
+       }
+
+       ptdls_sta = rtw_get_stainfo( &(padapter->stapriv), mac_addr);
+
+       if(ptdls_sta != NULL)
+       {
+               ptdls_sta->stat_code = _RSON_TDLS_TEAR_UN_RSN_;
+               issue_tdls_teardown(padapter, mac_addr);
+       }
+
+#endif //CONFIG_TDLS
+
+       return ret;
+}
+
+static int rtw_tdls_discovery(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+       int ret = 0;
+
+#ifdef CONFIG_TDLS
+
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       printk( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
+
+       issue_tdls_dis_req(padapter, NULL);
+
+#endif //CONFIG_TDLS
+
+       return ret;
+}
+
+static int rtw_tdls_ch_switch(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+       int ret = 0;
+
+#ifdef CONFIG_TDLS
+
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct tdls_info        *ptdlsinfo = &padapter->tdlsinfo;
+       u8 i, j, mac_addr[ETH_ALEN];
+       struct sta_info *ptdls_sta = NULL;
+
+       printk( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
+
+       for( i=0, j=0 ; i < ETH_ALEN; i++, j+=3 ){
+               mac_addr[i]=key_2char2num(*(extra+j), *(extra+j+1));
+       }
+
+       ptdls_sta = rtw_get_stainfo(&padapter->stapriv, mac_addr);
+       if( ptdls_sta == NULL )
+               return ret;
+       ptdlsinfo->ch_sensing=1;
+
+       rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_INIT_CH_SEN);
+
+#endif //CONFIG_TDLS
+
+               return ret;
+}
+
+static int rtw_tdls_pson(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+       int ret = 0;
+
+#ifdef CONFIG_TDLS
+
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       u8 i, j, mac_addr[ETH_ALEN];
+       struct sta_info *ptdls_sta = NULL;
+
+       printk( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
+
+       for( i=0, j=0 ; i < ETH_ALEN; i++, j+=3 ){
+               mac_addr[i]=key_2char2num(*(extra+j), *(extra+j+1));
+       }
+
+       ptdls_sta = rtw_get_stainfo(&padapter->stapriv, mac_addr);
+
+       issue_nulldata_to_TDLS_peer_STA(padapter, ptdls_sta, 1);
+
+#endif //CONFIG_TDLS
+
+               return ret;
+}
+
+static int rtw_tdls_psoff(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+       int ret = 0;
+
+#ifdef CONFIG_TDLS
+
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       u8 i, j, mac_addr[ETH_ALEN];
+       struct sta_info *ptdls_sta = NULL;
+
+       printk( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
+
+       for( i=0, j=0 ; i < ETH_ALEN; i++, j+=3 ){
+               mac_addr[i]=key_2char2num(*(extra+j), *(extra+j+1));
+       }
+
+       ptdls_sta = rtw_get_stainfo(&padapter->stapriv, mac_addr);
+
+       issue_nulldata_to_TDLS_peer_STA(padapter, ptdls_sta, 0);
+
+#endif //CONFIG_TDLS
+
+       return ret;
+}
+
+static int rtw_tdls_setip(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+       int ret = 0;
+
+#ifdef CONFIG_TDLS
+#ifdef CONFIG_WFD
+
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
+       struct wifi_display_info *pwfd_info = ptdlsinfo->wfd_info;
+       u8 i=0, j=0, k=0, tag=0, ip[3] = { 0xff }, *ptr = extra;
+
+       printk( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length - 1  );
+
+
+       while( i < 4 )
+       {
+               for( j=0; j < 4; j++)
+               {
+                       if( *( extra + j + tag ) == '.' || *( extra + j + tag ) == '\0' )
+                       {
+                               if( j == 1 )
+                                       pwfd_info->ip_address[i]=convert_ip_addr( '0', '0', *(extra+(j-1)+tag));
+                               if( j == 2 )
+                                       pwfd_info->ip_address[i]=convert_ip_addr( '0', *(extra+(j-2)+tag), *(extra+(j-1)+tag));
+                               if( j == 3 )
+                                       pwfd_info->ip_address[i]=convert_ip_addr( *(extra+(j-3)+tag), *(extra+(j-2)+tag), *(extra+(j-1)+tag));
+
+                               tag += j + 1;
+                               break;
+                       }
+               }
+               i++;
+       }
+
+       printk( "[%s] Set IP = %u.%u.%u.%u \n", __FUNCTION__,
+               ptdlsinfo->wfd_info->ip_address[0], ptdlsinfo->wfd_info->ip_address[1],
+               ptdlsinfo->wfd_info->ip_address[2], ptdlsinfo->wfd_info->ip_address[3]
+       );
+
+#endif //CONFIG_WFD
+#endif //CONFIG_TDLS
+
+       return ret;
+}
+
+static int rtw_tdls_getip(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+       int ret = 0;
+
+#ifdef CONFIG_TDLS
+#ifdef CONFIG_WFD
+
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
+       struct wifi_display_info *pwfd_info = ptdlsinfo->wfd_info;
+
+       printk( "[%s]\n", __FUNCTION__);
+
+       sprintf( extra, "\n\n%u.%u.%u.%u\n",
+               pwfd_info->peer_ip_address[0], pwfd_info->peer_ip_address[1],
+               pwfd_info->peer_ip_address[2], pwfd_info->peer_ip_address[3]
+               );
+
+       printk( "[%s] IP=%u.%u.%u.%u\n", __FUNCTION__,
+               pwfd_info->peer_ip_address[0], pwfd_info->peer_ip_address[1],
+               pwfd_info->peer_ip_address[2], pwfd_info->peer_ip_address[3]
+               );
+
+       wrqu->data.length = strlen( extra );
+
+#endif //CONFIG_WFD
+#endif //CONFIG_TDLS
+
+       return ret;
+}
+
+static int rtw_tdls_getport(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+
+       int ret = 0;
+
+#ifdef CONFIG_TDLS
+#ifdef CONFIG_WFD
+
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
+       struct wifi_display_info *pwfd_info = ptdlsinfo->wfd_info;
+
+       printk( "[%s]\n", __FUNCTION__);
+
+       sprintf( extra, "\n\n%d\n", pwfd_info->peer_rtsp_ctrlport );
+       printk( "[%s] remote port = %d\n", __FUNCTION__, pwfd_info->peer_rtsp_ctrlport );
+
+       wrqu->data.length = strlen( extra );
+
+#endif //CONFIG_WFD
+#endif //CONFIG_TDLS
+
+       return ret;
+
+}
+
+//WFDTDLS, for sigma test
+static int rtw_tdls_dis_result(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+
+       int ret = 0;
+
+#ifdef CONFIG_TDLS
+#ifdef CONFIG_WFD
+
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
+       struct wifi_display_info *pwfd_info = ptdlsinfo->wfd_info;
+
+       printk( "[%s]\n", __FUNCTION__);
+
+       if(ptdlsinfo->dev_discovered == 1 )
+       {
+               sprintf( extra, "\n\nDis=1\n" );
+               ptdlsinfo->dev_discovered = 0;
+       }
+
+       wrqu->data.length = strlen( extra );
+
+#endif //CONFIG_WFD
+#endif //CONFIG_TDLS
+
+       return ret;
+
+}
+
+//WFDTDLS, for sigma test
+static int rtw_wfd_tdls_status(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+
+       int ret = 0;
+
+#ifdef CONFIG_TDLS
+#ifdef CONFIG_WFD
+
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
+       struct wifi_display_info *pwfd_info = ptdlsinfo->wfd_info;
+
+       printk( "[%s]\n", __FUNCTION__);
+
+       if(ptdlsinfo->setup_state == TDLS_LINKED_STATE )
+       {
+               sprintf( extra, "\n\nStatus=1\n" );
+       }
+       else
+       {
+               sprintf( extra, "\n\nStatus=0\n" );
+       }
+
+       wrqu->data.length = strlen( extra );
+
+#endif //CONFIG_WFD
+#endif //CONFIG_TDLS
+
+       return ret;
+
+}
+
+static int rtw_tdls_ch_switch_off(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+       int ret = 0;
+
+#ifdef CONFIG_TDLS
+
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+       u8 i, j, mac_addr[ETH_ALEN];
+       struct sta_info *ptdls_sta = NULL;
+
+       printk( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
+
+       for( i=0, j=0 ; i < ETH_ALEN; i++, j+=3 ){
+               mac_addr[i]=key_2char2num(*(extra+j), *(extra+j+1));
+       }
+
+       ptdls_sta = rtw_get_stainfo(&padapter->stapriv, mac_addr);
+
+       ptdls_sta->tdls_sta_state |= TDLS_SW_OFF_STATE;
+/*
+       if((ptdls_sta->tdls_sta_state & TDLS_AT_OFF_CH_STATE) && (ptdls_sta->tdls_sta_state & TDLS_PEER_AT_OFF_STATE)){
+               pmlmeinfo->tdls_candidate_ch= pmlmeext->cur_channel;
+               issue_tdls_ch_switch_req(padapter, mac_addr);
+               DBG_871X("issue tdls ch switch req back to base channel\n");
+       }
+*/
+
+#endif //CONFIG_TDLS
+
+       return ret;
+}
+
+static int rtw_tdls(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+       int ret = 0;
+
+#ifdef CONFIG_TDLS
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+
+       printk( "[%s] extra = %s\n", __FUNCTION__, extra );
+       //      WFD Sigma will use the tdls enable command to let the driver know we want to test the tdls now!
+       if ( _rtw_memcmp( extra, "wfdenable=", 10 ) )
+       {
+               wrqu->data.length -=10;
+               rtw_wfd_tdls_enable( dev, info, wrqu, &extra[10] );
+               return ret;
+       }
+       else if ( _rtw_memcmp( extra, "weaksec=", 8 ) )
+       {
+               wrqu->data.length -=8;
+               rtw_tdls_weaksec( dev, info, wrqu, &extra[8] );
+               return ret;
+       }
+       else if ( _rtw_memcmp( extra, "tdlsenable=", 11 ) )
+       {
+               wrqu->data.length -=11;
+               rtw_tdls_enable( dev, info, wrqu, &extra[11] );
+               return ret;
+       }
+
+       if( padapter->tdlsinfo.enable == 0 )
+       {
+               printk("tdls haven't enabled\n");
+               return 0;
+       }
+
+       if ( _rtw_memcmp( extra, "setup=", 6 ) )
+       {
+               wrqu->data.length -=6;
+               rtw_tdls_setup( dev, info, wrqu, &extra[6] );
+       }
+       else if (_rtw_memcmp( extra, "tear=", 5 ) )
+       {
+               wrqu->data.length -= 5;
+               rtw_tdls_teardown( dev, info, wrqu, &extra[5] );
+       }
+       else if (_rtw_memcmp( extra, "dis=", 4 ) )
+       {
+               wrqu->data.length -= 4;
+               rtw_tdls_discovery( dev, info, wrqu, &extra[4] );
+       }
+       else if (_rtw_memcmp( extra, "sw=", 3 ) )
+       {
+               wrqu->data.length -= 3;
+               rtw_tdls_ch_switch( dev, info, wrqu, &extra[3] );
+       }
+       else if (_rtw_memcmp( extra, "swoff=", 6 ) )
+       {
+               wrqu->data.length -= 6;
+               rtw_tdls_ch_switch_off( dev, info, wrqu, &extra[6] );
+       }
+       else if (_rtw_memcmp( extra, "pson=", 5 ) )
+       {
+               wrqu->data.length -= 5;
+               rtw_tdls_pson( dev, info, wrqu, &extra[5] );
+       }
+       else if (_rtw_memcmp( extra, "psoff=", 6 ) )
+       {
+               wrqu->data.length -= 6;
+               rtw_tdls_psoff( dev, info, wrqu, &extra[6] );
+       }
+#ifdef CONFIG_WFD
+       else if (_rtw_memcmp( extra, "setip=", 6 ) )
+       {
+               wrqu->data.length -= 6;
+               rtw_tdls_setip( dev, info, wrqu, &extra[6] );
+       }
+       else if (_rtw_memcmp( extra, "tprobe=", 6 ) )
+       {
+               issue_tunneled_probe_req((_adapter *)rtw_netdev_priv(dev));
+       }
+#endif //CONFIG_WFD
+
+#endif //CONFIG_TDLS
+
+       return ret;
+}
+
+
+static int rtw_tdls_get(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+       int ret = 0;
+
+#ifdef CONFIG_WFD
+
+       DBG_871X( "[%s] extra = %s\n", __FUNCTION__, (char*) wrqu->data.pointer );
+
+       if ( _rtw_memcmp( wrqu->data.pointer, "ip", 2 ) )
+       {
+               rtw_tdls_getip( dev, info, wrqu, extra );
+       }
+       if ( _rtw_memcmp( wrqu->data.pointer, "port", 4 ) )
+       {
+               rtw_tdls_getport( dev, info, wrqu, extra );
+       }
+
+       //WFDTDLS, for sigma test
+       if ( _rtw_memcmp( wrqu->data.pointer, "dis", 3 ) )
+       {
+               rtw_tdls_dis_result( dev, info, wrqu, extra );
+       }
+       if ( _rtw_memcmp( wrqu->data.pointer, "status", 6 ) )
+       {
+               rtw_wfd_tdls_status( dev, info, wrqu, extra );
+       }
+
+#endif //CONFIG_WFD
+
+       return ret;
+}
+
+static int rtw_pm_set(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+       int ret = 0;
+       unsigned        mode = 0;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+
+       DBG_871X( "[%s] extra = %s\n", __FUNCTION__, extra );
+
+       if ( _rtw_memcmp( extra, "lps=", 4 ) )
+       {
+               sscanf(extra+4, "%u", &mode);
+               ret = rtw_pm_set_lps(padapter,mode);
+       }
+       else if ( _rtw_memcmp( extra, "ips=", 4 ) )
+       {
+               sscanf(extra+4, "%u", &mode);
+               ret = rtw_pm_set_ips(padapter,mode);
+       }
+       else{
+               ret = -EINVAL;
+       }
+
+       return ret;
+}
+
+#ifdef CONFIG_WOWLAN
+static int rtw_wowlan_ctrl(struct net_device *dev,
+       struct iw_request_info *info,
+       union iwreq_data *wrqu, char *extra)
+{
+       int ret = 0;
+       struct oid_par_priv     oid_par;
+       struct wowlan_ioctl_param *poidparam;
+       uint status=0;
+       u16 len;
+       u8 *pparmbuf = NULL, bset;
+       _adapter *padapter =  (_adapter *)rtw_netdev_priv(dev);
+
+       struct iw_point *p = &wrqu->data;
+
+       //DBG_871X("+rtw_wowlan_ctrl\n");
+
+       //mutex_lock(&ioctl_mutex);
+
+       if ((!p->length) || (!p->pointer)) {
+               ret = -EINVAL;
+               goto _rtw_wowlan_ctrl_exit;
+       }
+
+       pparmbuf = NULL;
+       bset = (u8)(p->flags & 0xFFFF);
+       len = p->length;
+       pparmbuf = (u8*)rtw_malloc(len);
+       if (pparmbuf == NULL){
+               ret = -ENOMEM;
+               goto _rtw_wowlan_ctrl_exit;
+       }
+
+       if (copy_from_user(pparmbuf, p->pointer, len)) {
+               ret = -EFAULT;
+               goto _rtw_wowlan_ctrl_exit_free;
+       }
+       poidparam = (struct wowlan_ioctl_param *)pparmbuf;
+
+       if(padapter->pwrctrlpriv.bSupportRemoteWakeup==_FALSE){
+               ret = -EPERM;
+               DBG_871X("+rtw_wowlan_ctrl: Device didn't support the remote wakeup!!\n");
+               goto _rtw_wowlan_ctrl_exit_free;
+       }
+       rtw_hal_set_hwreg(padapter,HW_VAR_WOWLAN,(u8 *)poidparam);
+
+       DBG_871X("rtw_wowlan_ctrl: subcode [%d], len[%d], buffer_len[%d]\r\n",
+                 poidparam->subcode, poidparam->len, len);
+
+       if (copy_to_user(p->pointer, pparmbuf, len)) {
+               ret = -EFAULT;
+       }
+
+
+_rtw_wowlan_ctrl_exit_free:
+       //DBG_871X("-rtw_wowlan_ctrl( subcode = %d)\n", poidparam->subcode);
+       rtw_mfree(pparmbuf, len);
+_rtw_wowlan_ctrl_exit:
+
+
+       return ret;
+}
+#endif //CONFIG_WOWLAN
+
+#ifdef CONFIG_INTEL_WIDI
+static int rtw_widi_set(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+       int ret = 0;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+
+       process_intel_widi_cmd(padapter, extra);
+
+       return ret;
+}
+
+static int rtw_widi_set_probe_request(struct net_device *dev,
+                               struct iw_request_info *info,
+                               union iwreq_data *wrqu, char *extra)
+{
+       int     ret = 0;
+       u8      *pbuf = NULL;
+       _adapter        *padapter = (_adapter *)rtw_netdev_priv(dev);
+
+       pbuf = rtw_malloc(sizeof(l2_msg_t));
+       if(pbuf)
+       {
+               copy_from_user(pbuf, wrqu->data.pointer, wrqu->data.length);
+               //_rtw_memcpy(pbuf, wrqu->data.pointer, wrqu->data.length);
+
+               if( wrqu->data.flags == 0 )
+               intel_widi_wk_cmd(padapter, INTEL_WIDI_ISSUE_PROB_WK, pbuf);
+               else if( wrqu->data.flags == 1 )
+                       rtw_set_wfd_rds_sink_info( padapter, (l2_msg_t *)pbuf );
+       }
+       return ret;
+}
+
+#endif // CONFIG_INTEL_WIDI
+
+#ifdef RTL8723A_SDIO_LOOPBACK
+#include <rtl8723a_hal.h>
+
+static s32 initLoopback(PADAPTER padapter)
+{
+       PLOOPBACKDATA ploopback;
+
+
+       if (padapter->ploopback == NULL) {
+               ploopback = (PLOOPBACKDATA)rtw_zmalloc(sizeof(LOOPBACKDATA));
+               if (ploopback == NULL) return -ENOMEM;
+
+               _rtw_init_sema(&ploopback->sema, 0);
+
+               ploopback->bstop = _TRUE;
+               ploopback->cnt = 0;
+               ploopback->size = 300;
+               _rtw_memset(ploopback->msg, 0, sizeof(ploopback->msg));
+
+               padapter->ploopback = ploopback;
+       }
+
+       return 0;
+}
+
+static void freeLoopback(PADAPTER padapter)
+{
+       PLOOPBACKDATA ploopback;
+
+
+       ploopback = padapter->ploopback;
+       if (ploopback) {
+               rtw_mfree((u8*)ploopback, sizeof(LOOPBACKDATA));
+               padapter->ploopback = NULL;
+       }
+}
+
+static s32 initpseudoadhoc(PADAPTER padapter)
+{
+       NDIS_802_11_NETWORK_INFRASTRUCTURE networkType;
+       s32 err;
+       _irqL irqL;
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+       _queue *queue = &pmlmepriv->scanned_queue;
+
+       networkType = Ndis802_11IBSS;
+       _enter_critical_bh(&pmlmepriv->lock, &irqL);
+       _enter_critical_bh(&queue->lock, &irqL);
+       err = rtw_set_802_11_infrastructure_mode(padapter, networkType);
+       _exit_critical_bh(&queue->lock, &irqL);
+       _exit_critical_bh(&pmlmepriv->lock, &irqL);
+       if (err == _FALSE) return _FAIL;
+
+       err = rtw_setopmode_cmd(padapter, networkType);
+       if (err == _FAIL) return _FAIL;
+
+       return _SUCCESS;
+}
+
+static s32 createpseudoadhoc(PADAPTER padapter)
+{
+       NDIS_802_11_AUTHENTICATION_MODE authmode;
+       struct mlme_priv *pmlmepriv;
+       NDIS_802_11_SSID *passoc_ssid;
+       WLAN_BSSID_EX *pdev_network;
+       u8 *pibss;
+       u8 ssid[] = "pseduo_ad-hoc";
+       s32 err;
+       _irqL irqL;
+
+
+       pmlmepriv = &padapter->mlmepriv;
+
+       authmode = Ndis802_11AuthModeOpen;
+       err = rtw_set_802_11_authentication_mode(padapter, authmode);
+       if (err == _FALSE) return _FAIL;
+
+       passoc_ssid = &pmlmepriv->assoc_ssid;
+       _rtw_memset(passoc_ssid, 0, sizeof(NDIS_802_11_SSID));
+       passoc_ssid->SsidLength = sizeof(ssid) - 1;
+       _rtw_memcpy(passoc_ssid->Ssid, ssid, passoc_ssid->SsidLength);
+
+       pdev_network = &padapter->registrypriv.dev_network;
+       pibss = padapter->registrypriv.dev_network.MacAddress;
+       _rtw_memcpy(&pdev_network->Ssid, passoc_ssid, sizeof(NDIS_802_11_SSID));
+
+       rtw_update_registrypriv_dev_network(padapter);
+       rtw_generate_random_ibss(pibss);
+
+       _enter_critical_bh(&pmlmepriv->lock, &irqL);
+       pmlmepriv->fw_state = WIFI_ADHOC_MASTER_STATE;
+       _exit_critical_bh(&pmlmepriv->lock, &irqL);
+
+#if 0
+       err = rtw_createbss_cmd(padapter);
+       if (err == _FAIL) return _FAIL;
+#else
+{
+       struct wlan_network *pcur_network;
+       struct sta_info *psta;
+
+       //3  create a new psta
+       pcur_network = &pmlmepriv->cur_network;
+
+       //clear psta in the cur_network, if any
+       psta = rtw_get_stainfo(&padapter->stapriv, pcur_network->network.MacAddress);
+       if (psta) rtw_free_stainfo(padapter, psta);
+
+       psta = rtw_alloc_stainfo(&padapter->stapriv, pibss);
+       if (psta == NULL) return _FAIL;
+
+       //3  join psudo AdHoc
+       pcur_network->join_res = 1;
+       pcur_network->aid = psta->aid = 1;
+       _rtw_memcpy(&pcur_network->network, pdev_network, get_WLAN_BSSID_EX_sz(pdev_network));
+
+       // set msr to WIFI_FW_ADHOC_STATE
+#if 0
+       Set_NETYPE0_MSR(padapter, WIFI_FW_ADHOC_STATE);
+#else
+       {
+               u8 val8;
+
+               val8 = rtw_read8(padapter, MSR);
+               val8 &= 0xFC; // clear NETYPE0
+               val8 |= WIFI_FW_ADHOC_STATE & 0x3;
+               rtw_write8(padapter, MSR, val8);
+       }
+#endif
+}
+#endif
+
+       return _SUCCESS;
+}
+
+extern void rtl8723a_cal_txdesc_chksum(struct tx_desc *ptxdesc);
+extern void rtl8723a_fill_default_txdesc(struct xmit_frame *pxmitframe, u8 *pbuf);
+
+static struct xmit_frame* createloopbackpkt(PADAPTER padapter, u32 size)
+{
+       struct xmit_priv *pxmitpriv;
+       struct xmit_frame *pframe;
+       struct xmit_buf *pxmitbuf;
+       struct pkt_attrib *pattrib;
+       struct tx_desc *desc;
+       u8 *pkt_start, *pkt_end, *ptr;
+       struct rtw_ieee80211_hdr *hdr;
+       s32 bmcast;
+       _irqL irqL;
+
+
+       if ((TXDESC_SIZE + WLANHDR_OFFSET + size) > MAX_XMITBUF_SZ) return NULL;
+
+       pxmitpriv = &padapter->xmitpriv;
+       pframe = NULL;
+
+       //2 1. allocate xmit frame
+       pframe = rtw_alloc_xmitframe(pxmitpriv);
+       if (pframe == NULL) return NULL;
+       pframe->padapter = padapter;
+
+       //2 2. allocate xmit buffer
+       _enter_critical_bh(&pxmitpriv->lock, &irqL);
+       pxmitbuf = rtw_alloc_xmitbuf(pxmitpriv);
+       _exit_critical_bh(&pxmitpriv->lock, &irqL);
+       if (pxmitbuf == NULL) {
+               rtw_free_xmitframe(pxmitpriv, pframe);
+               return NULL;
+       }
+
+       pframe->pxmitbuf = pxmitbuf;
+       pframe->buf_addr = pxmitbuf->pbuf;
+       pxmitbuf->priv_data = pframe;
+
+       //2 3. update_attrib()
+       pattrib = &pframe->attrib;
+
+       // init xmitframe attribute
+       _rtw_memset(pattrib, 0, sizeof(struct pkt_attrib));
+
+       pattrib->ether_type = 0x8723;
+       _rtw_memcpy(pattrib->src, padapter->eeprompriv.mac_addr, ETH_ALEN);
+       _rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
+       _rtw_memset(pattrib->dst, 0xFF, ETH_ALEN);
+       _rtw_memcpy(pattrib->ra, pattrib->dst, ETH_ALEN);
+//     pattrib->pctrl = 0;
+//     pattrib->dhcp_pkt = 0;
+//     pattrib->pktlen = 0;
+       pattrib->ack_policy = 0;
+//     pattrib->pkt_hdrlen = ETH_HLEN;
+       pattrib->hdrlen = WLAN_HDR_A3_LEN;
+       pattrib->subtype = WIFI_DATA;
+       pattrib->priority = 0;
+       pattrib->qsel = pattrib->priority;
+//     do_queue_select(padapter, pattrib);
+       pattrib->nr_frags = 1;
+       pattrib->encrypt = 0;
+       pattrib->bswenc = _FALSE;
+       pattrib->qos_en = _FALSE;
+
+       bmcast = IS_MCAST(pattrib->ra);
+       if (bmcast) {
+               pattrib->mac_id = 1;
+               pattrib->psta = rtw_get_bcmc_stainfo(padapter);
+       } else {
+               pattrib->mac_id = 0;
+               pattrib->psta = rtw_get_stainfo(&padapter->stapriv, get_bssid(&padapter->mlmepriv));
+       }
+
+       pattrib->pktlen = size;
+       pattrib->last_txcmdsz = pattrib->hdrlen + pattrib->pktlen;
+
+       //2 4. fill TX descriptor
+       desc = (struct tx_desc*)pframe->buf_addr;
+       _rtw_memset(desc, 0, TXDESC_SIZE);
+
+       rtl8723a_fill_default_txdesc(pframe, (u8*)desc);
+
+       // Hw set sequence number
+       ((PTXDESC)desc)->hwseq_en = 0; // HWSEQ_EN, 0:disable, 1:enable
+//     ((PTXDESC)desc)->hwseq_sel = 0; // HWSEQ_SEL
+
+       ((PTXDESC)desc)->disdatafb = 1;
+
+       // convert to little endian
+       desc->txdw0 = cpu_to_le32(desc->txdw0);
+       desc->txdw1 = cpu_to_le32(desc->txdw1);
+       desc->txdw2 = cpu_to_le32(desc->txdw2);
+       desc->txdw3 = cpu_to_le32(desc->txdw3);
+       desc->txdw4 = cpu_to_le32(desc->txdw4);
+       desc->txdw5 = cpu_to_le32(desc->txdw5);
+       desc->txdw6 = cpu_to_le32(desc->txdw6);
+       desc->txdw7 = cpu_to_le32(desc->txdw7);
+#ifdef CONFIG_PCI_HCI
+       desc->txdw8 = cpu_to_le32(desc->txdw8);
+       desc->txdw9 = cpu_to_le32(desc->txdw9);
+       desc->txdw10 = cpu_to_le32(desc->txdw10);
+       desc->txdw11 = cpu_to_le32(desc->txdw11);
+       desc->txdw12 = cpu_to_le32(desc->txdw12);
+       desc->txdw13 = cpu_to_le32(desc->txdw13);
+       desc->txdw14 = cpu_to_le32(desc->txdw14);
+       desc->txdw15 = cpu_to_le32(desc->txdw15);
+#endif
+
+       rtl8723a_cal_txdesc_chksum(desc);
+
+       //2 5. coalesce
+       pkt_start = pframe->buf_addr + TXDESC_SIZE;
+       pkt_end = pkt_start + pattrib->last_txcmdsz;
+
+       //3 5.1. make wlan header, make_wlanhdr()
+       hdr = (struct rtw_ieee80211_hdr *)pkt_start;
+       SetFrameSubType(&hdr->frame_ctl, pattrib->subtype);
+       _rtw_memcpy(hdr->addr1, pattrib->dst, ETH_ALEN); // DA
+       _rtw_memcpy(hdr->addr2, pattrib->src, ETH_ALEN); // SA
+       _rtw_memcpy(hdr->addr3, get_bssid(&padapter->mlmepriv), ETH_ALEN); // RA, BSSID
+
+       //3 5.2. make payload
+       ptr = pkt_start + pattrib->hdrlen;
+       get_random_bytes(ptr, pkt_end - ptr);
+
+       pxmitbuf->len = TXDESC_SIZE + pattrib->last_txcmdsz;
+       pxmitbuf->ptail += pxmitbuf->len;
+
+       return pframe;
+}
+
+static void freeloopbackpkt(PADAPTER padapter, struct xmit_frame *pframe)
+{
+       struct xmit_priv *pxmitpriv;
+       struct xmit_buf *pxmitbuf;
+
+
+       pxmitpriv = &padapter->xmitpriv;
+       pxmitbuf = pframe->pxmitbuf;
+
+       rtw_free_xmitframe(pxmitpriv, pframe);
+       rtw_free_xmitbuf(pxmitpriv, pxmitbuf);
+}
+
+extern u32 get_txfifo_hwaddr(struct xmit_frame *pxmitframe);
+
+thread_return lbk_thread(thread_context context)
+{
+       s32 err;
+       PADAPTER padapter;
+       PLOOPBACKDATA ploopback;
+       struct xmit_frame *pxmitframe;
+       u32 cnt, ok, fail, i, headerlen;
+       u32 pktsize;
+       u32 ff_hwaddr;
+
+
+       padapter = (PADAPTER)context;
+       ploopback = padapter->ploopback;
+       if (ploopback == NULL) return -1;
+       cnt = 0;
+       ok = 0;
+       fail = 0;
+
+       daemonize("%s", "RTW_LBK_THREAD");
+       allow_signal(SIGTERM);
+
+       do {
+               if (ploopback->size == 0) {
+                       get_random_bytes(&pktsize, 4);
+                       pktsize = (pktsize % 1535) + 1; // 1~1535
+               } else
+                       pktsize = ploopback->size;
+
+               pxmitframe = createloopbackpkt(padapter, pktsize);
+               if (pxmitframe == NULL) {
+                       sprintf(ploopback->msg, "loopback FAIL! 3. create Packet FAIL!");
+                       break;
+               }
+
+               ploopback->txsize = TXDESC_SIZE + pxmitframe->attrib.last_txcmdsz;
+               _rtw_memcpy(ploopback->txbuf, pxmitframe->buf_addr, ploopback->txsize);
+
+               ff_hwaddr = get_txfifo_hwaddr(pxmitframe);
+               rtw_write_port(padapter, ff_hwaddr, ploopback->txsize, ploopback->txbuf);
+               cnt++;
+
+               _rtw_down_sema(&ploopback->sema);
+
+{
+               PHAL_DATA_TYPE phal;
+               struct recv_stat *prxstat;
+               struct recv_stat report;
+               PRXREPORT prxreport;
+               u32 drvinfosize;
+               u32 rxpktsize;
+               u8 fcssize;
+
+               prxstat = (struct recv_stat*)ploopback->rxbuf;
+               report.rxdw0 = le32_to_cpu(prxstat->rxdw0);
+               report.rxdw1 = le32_to_cpu(prxstat->rxdw1);
+               report.rxdw2 = le32_to_cpu(prxstat->rxdw2);
+               report.rxdw3 = le32_to_cpu(prxstat->rxdw3);
+               report.rxdw4 = le32_to_cpu(prxstat->rxdw4);
+               report.rxdw5 = le32_to_cpu(prxstat->rxdw5);
+
+               prxreport = (PRXREPORT)&report;
+               drvinfosize = prxreport->drvinfosize << 3;
+               rxpktsize = prxreport->pktlen;
+
+               phal = GET_HAL_DATA(padapter);
+               if (phal->ReceiveConfig & RCR_APPFCS) fcssize = IEEE80211_FCS_LEN;
+               else fcssize = 0;
+
+               if ((ploopback->txsize - TXDESC_SIZE) != (rxpktsize - fcssize)) {
+                       printk("%s: cnt=%d, size not match! tx=%d rx=%d\n",
+                               __func__, i, ploopback->txsize - TXDESC_SIZE,
+                               rxpktsize - fcssize);
+                       err = _FALSE;
+               } else {
+                       err = _rtw_memcmp(ploopback->txbuf + TXDESC_SIZE,\
+                                                         ploopback->rxbuf + RXDESC_SIZE + drvinfosize,\
+                                                         ploopback->txsize - TXDESC_SIZE);
+               }
+}
+
+               if (err == _TRUE)
+                       ok++;
+               else
+                       fail++;
+
+               ploopback->txsize = 0;
+               _rtw_memset(ploopback->txbuf, 0, 0x8000);
+               ploopback->rxsize = 0;
+               _rtw_memset(ploopback->rxbuf, 0, 0x8000);
+
+               freeloopbackpkt(padapter, pxmitframe);
+               pxmitframe = NULL;
+
+               if (signal_pending(current)) {
+                       flush_signals(current);
+               }
+
+               if ((ploopback->bstop == _TRUE) ||
+                       ((ploopback->cnt != 0) && (ploopback->cnt == cnt)))
+               {
+                       u32 ok_rate, fail_rate;
+                       ok_rate = (ok*100)/cnt;
+                       fail_rate = (fail*100)/cnt;
+                       sprintf(ploopback->msg, "loopback result: ok=%d%%(%d/%d),error=%d%%(%d/%d)", ok_rate, ok, cnt, fail_rate, fail, cnt);
+                       break;
+               }
+       } while (1);
+
+       ploopback->bstop = _TRUE;
+
+       thread_exit();
+}
+
+static void loopbackTest(PADAPTER padapter, u32 cnt, u32 size, u8* pmsg)
+{
+       PLOOPBACKDATA ploopback;
+       u32 len;
+       s32 err;
+
+
+       ploopback = padapter->ploopback;
+
+       if (ploopback)
+       {
+               ploopback->bstop = _TRUE;
+               len = 0;
+               do {
+                       len = strlen(ploopback->msg);
+                       if (len) break;
+                       rtw_msleep_os(1);
+               } while (1);
+               _rtw_memcpy(pmsg, ploopback->msg, len+1);
+               freeLoopback(padapter);
+               return;
+       }
+
+       // create pseudo ad-hoc connection
+       err = initpseudoadhoc(padapter);
+       if (err == _FAIL) {
+               sprintf(pmsg, "loopback FAIL! 1.1 init ad-hoc FAIL!");
+               return;
+       }
+
+       err = createpseudoadhoc(padapter);
+       if (err == _FAIL) {
+               sprintf(pmsg, "loopback FAIL! 1.2 create ad-hoc master FAIL!");
+               return;
+       }
+
+       err = initLoopback(padapter);
+       if (err) {
+               sprintf(pmsg, "loopback FAIL! 2. init FAIL! error code=%d", err);
+               return;
+       }
+
+       ploopback = padapter->ploopback;
+
+       ploopback->bstop = _FALSE;
+       ploopback->cnt = cnt;
+       ploopback->size = size;
+       ploopback->lbkthread = kthread_run(lbk_thread, padapter, "RTW_LBK_THREAD");
+       if (IS_ERR(padapter->lbkthread))
+       {
+               freeLoopback(padapter);
+               sprintf(pmsg, "loopback start FAIL! cnt=%d", cnt);
+               return;
+       }
+
+       sprintf(pmsg, "loopback start! cnt=%d", cnt);
+}
+
+extern u8 _InitPowerOn(PADAPTER padapter);
+extern s32 rtl8723a_FirmwareDownload(PADAPTER padapter);
+
+static int rtw_test(
+       struct net_device *dev,
+       struct iw_request_info *info,
+       union iwreq_data *wrqu, char *extra)
+{
+       u32 len;
+       u8 *pbuf, *pch;
+       char *ptmp;
+       u8 *delim = ",";
+       PADAPTER padapter = rtw_netdev_priv(dev);
+
+
+       printk("+%s\n", __func__);
+       len = wrqu->data.length;
+
+       pbuf = (u8*)rtw_zmalloc(len);
+       if (pbuf == NULL) {
+               printk("%s: no memory!\n", __func__);
+               return -ENOMEM;
+       }
+
+       if (copy_from_user(pbuf, wrqu->data.pointer, len)) {
+               rtw_mfree(pbuf, len);
+               printk("%s: copy from user fail!\n", __func__);
+               return -EFAULT;
+       }
+       printk("%s: string=\"%s\"\n", __func__, pbuf);
+
+       ptmp = (char*)pbuf;
+       pch = strsep(&ptmp, delim);
+       if ((pch == NULL) || (strlen(pch) == 0)) {
+               rtw_mfree(pbuf, len);
+               printk("%s: parameter error(level 1)!\n", __func__);
+               return -EFAULT;
+       }
+
+#ifdef RTL8723A_SDIO_LOOPBACK
+       if (strcmp(pch, "loopback") == 0)
+       {
+               s32 cnt = 0;
+               u32 size = 64;
+
+               pch = strsep(&ptmp, delim);
+               if ((pch == NULL) || (strlen(pch) == 0)) {
+                       rtw_mfree(pbuf, len);
+                       printk("%s: parameter error(level 2)!\n", __func__);
+                       return -EFAULT;
+               }
+
+               sscanf(pch, "%d", &cnt);
+               printk("%s: loopback cnt=%d\n", __func__, cnt);
+
+               pch = strsep(&ptmp, delim);
+               if ((pch == NULL) || (strlen(pch) == 0)) {
+                       rtw_mfree(pbuf, len);
+                       printk("%s: parameter error(level 2)!\n", __func__);
+                       return -EFAULT;
+               }
+
+               sscanf(pch, "%d", &size);
+               printk("%s: loopback size=%d\n", __func__, size);
+
+               loopbackTest(padapter, cnt, size, extra);
+               wrqu->data.length = strlen(extra) + 1;
+
+               rtw_mfree(pbuf, len);
+               return 0;
+       }
+#endif
+
+       if (strcmp(pch, "poweron") == 0)
+       {
+               s32 ret;
+
+               ret = _InitPowerOn(padapter);
+               if (_FAIL == ret)
+                       printk("%s: power on FAIL!\n", __func__);
+               else
+                       printk("%s: power on OK.\n", __func__);
+
+               rtw_mfree(pbuf, len);
+               return 0;
+       }
+
+       if (strcmp(pch, "dlfw") == 0)
+       {
+               s32 ret;
+
+               ret = rtl8723a_FirmwareDownload(padapter);
+               if (_FAIL == ret)
+                       printk("%s: download FW FAIL!\n", __func__);
+               else
+                       printk("%s: download FW OK.\n", __func__);
+
+               rtw_mfree(pbuf, len);
+               return 0;
+       }
+
+       rtw_mfree(pbuf, len);
+       return 0;
+}
+#else
+static int rtw_test(
+       struct net_device *dev,
+       struct iw_request_info *info,
+       union iwreq_data *wrqu, char *extra)
+{
+       printk("%s\n", __func__);
+       return 0;
+}
+#endif //RTL8723A_SDIO_LOOPBACK
+
+#include <rtw_android.h>
+int rtw_ioctl(struct net_device *dev, struct ifreq *rq, int cmd)
+{
+       struct iwreq *wrq = (struct iwreq *)rq;
+       int ret=0;
+
+       switch (cmd)
+       {
+           case RTL_IOCTL_WPA_SUPPLICANT:
+                       ret = wpa_supplicant_ioctl(dev, &wrq->u.data);
+                       break;
+#ifdef CONFIG_AP_MODE
+               case RTL_IOCTL_HOSTAPD:
+                       ret = rtw_hostapd_ioctl(dev, &wrq->u.data);
+                       break;
+#ifdef CONFIG_NO_WIRELESS_HANDLERS
+               case SIOCSIWMODE:
+                       ret = rtw_wx_set_mode(dev, NULL, &wrq->u, NULL);
+                       break;
+#endif
+#endif
+               case (SIOCDEVPRIVATE+1):
+                       ret = rtw_android_priv_cmd(dev, rq, cmd);
+                       break;
+           default:
+                       ret = -EOPNOTSUPP;
+                       break;
+       }
+
+       return ret;
+}
+
+static iw_handler rtw_handlers[] =
+{
+       NULL,                                   /* SIOCSIWCOMMIT */
+       rtw_wx_get_name,                /* SIOCGIWNAME */
+       dummy,                                  /* SIOCSIWNWID */
+       dummy,                                  /* SIOCGIWNWID */
+       rtw_wx_set_freq,                /* SIOCSIWFREQ */
+       rtw_wx_get_freq,                /* SIOCGIWFREQ */
+       rtw_wx_set_mode,                /* SIOCSIWMODE */
+       rtw_wx_get_mode,                /* SIOCGIWMODE */
+       dummy,                                  /* SIOCSIWSENS */
+       rtw_wx_get_sens,                /* SIOCGIWSENS */
+       NULL,                                   /* SIOCSIWRANGE */
+       rtw_wx_get_range,               /* SIOCGIWRANGE */
+       rtw_wx_set_priv,                /* SIOCSIWPRIV */
+       NULL,                                   /* SIOCGIWPRIV */
+       NULL,                                   /* SIOCSIWSTATS */
+       NULL,                                   /* SIOCGIWSTATS */
+       dummy,                                  /* SIOCSIWSPY */
+       dummy,                                  /* SIOCGIWSPY */
+       NULL,                                   /* SIOCGIWTHRSPY */
+       NULL,                                   /* SIOCWIWTHRSPY */
+       rtw_wx_set_wap,         /* SIOCSIWAP */
+       rtw_wx_get_wap,         /* SIOCGIWAP */
+       rtw_wx_set_mlme,                /* request MLME operation; uses struct iw_mlme */
+       dummy,                                  /* SIOCGIWAPLIST -- depricated */
+       rtw_wx_set_scan,                /* SIOCSIWSCAN */
+       rtw_wx_get_scan,                /* SIOCGIWSCAN */
+       rtw_wx_set_essid,               /* SIOCSIWESSID */
+       rtw_wx_get_essid,               /* SIOCGIWESSID */
+       dummy,                                  /* SIOCSIWNICKN */
+       rtw_wx_get_nick,                /* SIOCGIWNICKN */
+       NULL,                                   /* -- hole -- */
+       NULL,                                   /* -- hole -- */
+       rtw_wx_set_rate,                /* SIOCSIWRATE */
+       rtw_wx_get_rate,                /* SIOCGIWRATE */
+       rtw_wx_set_rts,                 /* SIOCSIWRTS */
+       rtw_wx_get_rts,                 /* SIOCGIWRTS */
+       rtw_wx_set_frag,                /* SIOCSIWFRAG */
+       rtw_wx_get_frag,                /* SIOCGIWFRAG */
+       dummy,                                  /* SIOCSIWTXPOW */
+       dummy,                                  /* SIOCGIWTXPOW */
+       dummy,                                  /* SIOCSIWRETRY */
+       rtw_wx_get_retry,               /* SIOCGIWRETRY */
+       rtw_wx_set_enc,                 /* SIOCSIWENCODE */
+       rtw_wx_get_enc,                 /* SIOCGIWENCODE */
+       dummy,                                  /* SIOCSIWPOWER */
+       rtw_wx_get_power,               /* SIOCGIWPOWER */
+       NULL,                                   /*---hole---*/
+       NULL,                                   /*---hole---*/
+       rtw_wx_set_gen_ie,              /* SIOCSIWGENIE */
+       NULL,                                   /* SIOCGWGENIE */
+       rtw_wx_set_auth,                /* SIOCSIWAUTH */
+       NULL,                                   /* SIOCGIWAUTH */
+       rtw_wx_set_enc_ext,             /* SIOCSIWENCODEEXT */
+       NULL,                                   /* SIOCGIWENCODEEXT */
+       rtw_wx_set_pmkid,               /* SIOCSIWPMKSA */
+       NULL,                                   /*---hole---*/
+};
+
+#if defined(CONFIG_MP_INCLUDED) && defined(CONFIG_MP_IWPRIV_SUPPORT)
+
+static const struct iw_priv_args rtw_private_args[] =
+{
+       { SIOCIWFIRSTPRIV + 0x00, IW_PRIV_TYPE_CHAR | 1024, 0 , ""},  //set
+       { SIOCIWFIRSTPRIV + 0x01, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK , ""},//get
+/* --- sub-ioctls definitions --- */
+               { MP_START , IW_PRIV_TYPE_CHAR | 1024, 0, "mp_start" }, //set
+               { MP_PHYPARA, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_phypara" },//get
+               { MP_STOP , IW_PRIV_TYPE_CHAR | 1024, 0, "mp_stop" }, //set
+               { MP_CHANNEL , IW_PRIV_TYPE_CHAR | 1024 , IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_channel" },//get
+               { MP_BANDWIDTH , IW_PRIV_TYPE_CHAR | 1024, 0, "mp_bandwidth"}, //set
+               { MP_RATE , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_rate" },//get
+               { MP_RESET_STATS , IW_PRIV_TYPE_CHAR | 1024, 0, "mp_reset_stats"},
+               { MP_QUERY , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK , "mp_query"}, //get
+               { MP_NULL, IW_PRIV_TYPE_CHAR | 128, 0,"NULL"},//set
+               { READ_REG , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "read_reg" },
+               { MP_NULL, IW_PRIV_TYPE_CHAR | 128, 0,"NULL"},//set
+               { MP_RATE , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_rate" },
+               { MP_NULL, IW_PRIV_TYPE_CHAR | 128, 0,"NULL"},//set
+               { READ_RF , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "read_rf" },
+               { MP_NULL, IW_PRIV_TYPE_CHAR | 128, 0,"NULL"},//set
+               { MP_PSD , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_psd"},
+               { MP_NULL, IW_PRIV_TYPE_CHAR | 128, 0,"NULL"},//set
+               { MP_DUMP, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_dump" },
+               { MP_NULL, IW_PRIV_TYPE_CHAR | 128, 0,"NULL"},//set
+               { MP_TXPOWER , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_txpower"},
+               { MP_NULL, IW_PRIV_TYPE_CHAR | 128, 0,"NULL"},//set
+               { MP_ANT_TX , IW_PRIV_TYPE_CHAR | 1024,  IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_ant_tx"},
+               { MP_NULL, IW_PRIV_TYPE_CHAR | 128, 0,"NULL"},//set
+               { MP_ANT_RX , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_ant_rx"},
+               { MP_NULL, IW_PRIV_TYPE_CHAR | 128, 0,"NULL"},//set
+               { WRITE_REG , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "write_reg" },
+               { MP_NULL, IW_PRIV_TYPE_CHAR | 128, 0,"NULL"},//set
+               { WRITE_RF , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "write_rf" },
+               { MP_NULL, IW_PRIV_TYPE_CHAR | 128, 0,"NULL"},//set
+               { MP_CTX , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_ctx"},
+               { MP_NULL, IW_PRIV_TYPE_CHAR | 128, 0,"NULL"},//set
+               { MP_ARX , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_arx"},
+               { MP_ANT_RX , IW_PRIV_TYPE_CHAR | 1024, 0, "mp_ant_rx"},
+               { MP_THER , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_ther"},
+               { EFUSE_SET, IW_PRIV_TYPE_CHAR | 1024, 0, "efuse_set" },
+               { EFUSE_GET, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "efuse_get" },
+               { MP_NULL , IW_PRIV_TYPE_CHAR | 1024, 0, "NULL"},
+               { MP_PWRTRK, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_pwrtrk" },
+               { MP_IOCTL, IW_PRIV_TYPE_CHAR | 1024, 0, "mp_ioctl"}, // mp_ioctl
+
+
+       { SIOCIWFIRSTPRIV + 0x02, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK , "test"},//set
+};
+
+
+static iw_handler rtw_private_handler[] =
+{
+       rtw_mp_set,
+       rtw_mp_get,
+};
+
+#else // not inlucde MP
+
+static const struct iw_priv_args rtw_private_args[] = {
+       {
+               SIOCIWFIRSTPRIV + 0x0,
+               IW_PRIV_TYPE_CHAR | 0x7FF, 0, "write"
+       },
+       {
+               SIOCIWFIRSTPRIV + 0x1,
+               IW_PRIV_TYPE_CHAR | 0x7FF,
+               IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | IFNAMSIZ, "read"
+       },
+       {
+               SIOCIWFIRSTPRIV + 0x2, 0, 0, "driver_ext"
+       },
+       {
+               SIOCIWFIRSTPRIV + 0x3, 0, 0, "mp_ioctl"
+       },
+       {
+               SIOCIWFIRSTPRIV + 0x4,
+               IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "apinfo"
+       },
+       {
+               SIOCIWFIRSTPRIV + 0x5,
+               IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 2, 0, "setpid"
+       },
+       {
+               SIOCIWFIRSTPRIV + 0x6,
+               IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "wps_start"
+       },
+//for PLATFORM_MT53XX
+       {
+               SIOCIWFIRSTPRIV + 0x7,
+               IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "get_sensitivity"
+       },
+       {
+               SIOCIWFIRSTPRIV + 0x8,
+               IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "wps_prob_req_ie"
+       },
+       {
+               SIOCIWFIRSTPRIV + 0x9,
+               IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "wps_assoc_req_ie"
+       },
+
+//for RTK_DMP_PLATFORM
+       {
+               SIOCIWFIRSTPRIV + 0xA,
+               IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "channel_plan"
+       },
+
+       {
+               SIOCIWFIRSTPRIV + 0xB,
+               IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 2, 0, "dbg"
+       },
+       {
+               SIOCIWFIRSTPRIV + 0xC,
+               IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 3, 0, "rfw"
+       },
+       {
+               SIOCIWFIRSTPRIV + 0xD,
+               IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 2, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | IFNAMSIZ, "rfr"
+       },
+#ifdef CONFIG_WOWLAN
+       {
+               SIOCIWFIRSTPRIV + 0xE,0,0, "wowlan_ctrl"
+       },
+#endif // CONFIG_WOWLAN
+       {
+               SIOCIWFIRSTPRIV + 0x10,
+               IW_PRIV_TYPE_CHAR | 1024, 0, "p2p_set"
+       },
+       {
+               SIOCIWFIRSTPRIV + 0x11,
+               IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK , "p2p_get"
+       },
+       {
+               SIOCIWFIRSTPRIV + 0x12, 0, 0, "NULL"
+       },
+       {
+               SIOCIWFIRSTPRIV + 0x13,
+               IW_PRIV_TYPE_CHAR | 64, IW_PRIV_TYPE_CHAR | 64 , "p2p_get2"
+       },
+       {
+               SIOCIWFIRSTPRIV + 0x14,
+               IW_PRIV_TYPE_CHAR  | 64, 0, "tdls"
+       },
+       {
+               SIOCIWFIRSTPRIV + 0x15,
+               IW_PRIV_TYPE_CHAR | P2P_PRIVATE_IOCTL_SET_LEN, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | P2P_PRIVATE_IOCTL_SET_LEN , "tdls_get"
+       },
+       {
+               SIOCIWFIRSTPRIV + 0x16,
+               IW_PRIV_TYPE_CHAR | 64, 0, "pm_set"
+       },
+
+       {SIOCIWFIRSTPRIV + 0x18, IW_PRIV_TYPE_CHAR | IFNAMSIZ , 0 , "rereg_nd_name"},
+
+       {SIOCIWFIRSTPRIV + 0x1A, IW_PRIV_TYPE_CHAR | 128, 0, "efuse_set"},
+       {SIOCIWFIRSTPRIV + 0x1B, IW_PRIV_TYPE_CHAR | 128, IW_PRIV_TYPE_CHAR |IW_PRIV_SIZE_FIXED |0x700 ,"efuse_get"},
+       {
+               SIOCIWFIRSTPRIV + 0x1D,
+               IW_PRIV_TYPE_CHAR | 40, IW_PRIV_TYPE_CHAR | 0x7FF, "test"
+       },
+#ifdef CONFIG_INTEL_WIDI
+       {
+               SIOCIWFIRSTPRIV + 0x1E,
+               IW_PRIV_TYPE_CHAR | 1024, 0, "widi_set"
+       },
+       {
+               SIOCIWFIRSTPRIV + 0x1F,
+               IW_PRIV_TYPE_CHAR | 128, 0, "widi_prob_req"
+       },
+#endif // CONFIG_INTEL_WIDI
+};
+
+static iw_handler rtw_private_handler[] =
+{
+       rtw_wx_write32,                                 //0x00
+       rtw_wx_read32,                                  //0x01
+       rtw_drvext_hdl,                                 //0x02
+       rtw_mp_ioctl_hdl,                               //0x03
+
+// for MM DTV platform
+       rtw_get_ap_info,                                        //0x04
+
+       rtw_set_pid,                                            //0x05
+       rtw_wps_start,                                  //0x06
+
+// for PLATFORM_MT53XX
+       rtw_wx_get_sensitivity,                 //0x07
+       rtw_wx_set_mtk_wps_probe_ie,    //0x08
+       rtw_wx_set_mtk_wps_ie,                  //0x09
+
+// for RTK_DMP_PLATFORM
+// Set Channel depend on the country code
+       rtw_wx_set_channel_plan,                //0x0A
+
+       rtw_dbg_port,                                   //0x0B
+       rtw_wx_write_rf,                                        //0x0C
+       rtw_wx_read_rf,                                 //0x0D
+
+#ifdef CONFIG_WOWLAN
+       rtw_wowlan_ctrl,                                        //0x0E
+#else
+       rtw_wx_priv_null,                               //0x0E
+#endif //CONFIG_WOWLAN
+       rtw_wx_priv_null,                               //0x0F
+
+       rtw_p2p_set,                                    //0x10
+       rtw_p2p_get,                                    //0x11
+       NULL,                                                   //0x12
+       rtw_p2p_get2,                                   //0x13
+
+       rtw_tdls,                                               //0x14
+       rtw_tdls_get,                                   //0x15
+
+       rtw_pm_set,                                             //0x16
+       rtw_wx_priv_null,                               //0x17
+       rtw_rereg_nd_name,                              //0x18
+       rtw_wx_priv_null,                               //0x19
+
+       rtw_mp_efuse_set,                               //0x1A
+       rtw_mp_efuse_get,                               //0x1B
+       NULL,                                                   // 0x1C is reserved for hostapd
+       rtw_test        ,                                               // 0x1D
+#ifdef CONFIG_INTEL_WIDI
+       rtw_widi_set,                                   //0x1E
+       rtw_widi_set_probe_request,             //0x1F
+#endif // CONFIG_INTEL_WIDI
+};
+
+#endif // #if defined(CONFIG_MP_INCLUDED) && defined(CONFIG_MP_IWPRIV_SUPPORT)
+
+#if WIRELESS_EXT >= 17
+static struct iw_statistics *rtw_get_wireless_stats(struct net_device *dev)
+{
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
+          struct iw_statistics *piwstats=&padapter->iwstats;
+       int tmp_level = 0;
+       int tmp_qual = 0;
+       int tmp_noise = 0;
+
+       if (check_fwstate(&padapter->mlmepriv, _FW_LINKED) != _TRUE)
+       {
+               piwstats->qual.qual = 0;
+               piwstats->qual.level = 0;
+               piwstats->qual.noise = 0;
+               //DBG_871X("No link  level:%d, qual:%d, noise:%d\n", tmp_level, tmp_qual, tmp_noise);
+       }
+       else{
+               #ifdef CONFIG_SIGNAL_DISPLAY_DBM
+               tmp_level = translate_percentage_to_dbm(padapter->recvpriv.signal_strength);
+               #else
+               tmp_level = padapter->recvpriv.signal_strength;
+               #endif
+
+               tmp_qual = padapter->recvpriv.signal_qual;
+               tmp_noise =padapter->recvpriv.noise;
+               //DBG_871X("level:%d, qual:%d, noise:%d, rssi (%d)\n", tmp_level, tmp_qual, tmp_noise,padapter->recvpriv.rssi);
+
+               piwstats->qual.level = tmp_level;
+               piwstats->qual.qual = tmp_qual;
+               piwstats->qual.noise = tmp_noise;
+       }
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,14))
+       piwstats->qual.updated = IW_QUAL_ALL_UPDATED ;//|IW_QUAL_DBM;
+#else
+#ifdef RTK_DMP_PLATFORM
+       //IW_QUAL_DBM= 0x8, if driver use this flag, wireless extension will show value of dbm.
+       //remove this flag for show percentage 0~100
+       piwstats->qual.updated = 0x07;
+#else
+       piwstats->qual.updated = 0x0f;
+#endif
+#endif
+
+       #ifdef CONFIG_SIGNAL_DISPLAY_DBM
+       piwstats->qual.updated = piwstats->qual.updated | IW_QUAL_DBM;
+       #endif
+
+       return &padapter->iwstats;
+}
+#endif
+
+#ifdef CONFIG_WIRELESS_EXT
+struct iw_handler_def rtw_handlers_def =
+{
+       .standard = rtw_handlers,
+       .num_standard = sizeof(rtw_handlers) / sizeof(iw_handler),
+#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,33)) || defined(CONFIG_WEXT_PRIV)
+       .private = rtw_private_handler,
+       .private_args = (struct iw_priv_args *)rtw_private_args,
+       .num_private = sizeof(rtw_private_handler) / sizeof(iw_handler),
+       .num_private_args = sizeof(rtw_private_args) / sizeof(struct iw_priv_args),
+#endif
+#if WIRELESS_EXT >= 17
+       .get_wireless_stats = rtw_get_wireless_stats,
+#endif
+};
+#endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/os_dep/linux/mlme_linux.c b/drivers/net/wireless/realtek/rtl8192cu/os_dep/linux/mlme_linux.c
new file mode 100644 (file)
index 0000000..d518395
--- /dev/null
@@ -0,0 +1,585 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+
+
+#define _MLME_OSDEP_C_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <mlme_osdep.h>
+
+
+#ifdef RTK_DMP_PLATFORM
+void Linkup_workitem_callback(struct work_struct *work)
+{
+       struct mlme_priv *pmlmepriv = container_of(work, struct mlme_priv, Linkup_workitem);
+       _adapter *padapter = container_of(pmlmepriv, _adapter, mlmepriv);
+
+_func_enter_;
+
+       RT_TRACE(_module_mlme_osdep_c_,_drv_info_,("+ Linkup_workitem_callback\n"));
+
+#if (LINUX_VERSION_CODE > KERNEL_VERSION(2,6,12))
+       kobject_uevent(&padapter->pnetdev->dev.kobj, KOBJ_LINKUP);
+#else
+       kobject_hotplug(&padapter->pnetdev->class_dev.kobj, KOBJ_LINKUP);
+#endif
+
+_func_exit_;
+}
+
+void Linkdown_workitem_callback(struct work_struct *work)
+{
+       struct mlme_priv *pmlmepriv = container_of(work, struct mlme_priv, Linkdown_workitem);
+       _adapter *padapter = container_of(pmlmepriv, _adapter, mlmepriv);
+
+_func_enter_;
+
+       RT_TRACE(_module_mlme_osdep_c_,_drv_info_,("+ Linkdown_workitem_callback\n"));
+
+#if (LINUX_VERSION_CODE > KERNEL_VERSION(2,6,12))
+       kobject_uevent(&padapter->pnetdev->dev.kobj, KOBJ_LINKDOWN);
+#else
+       kobject_hotplug(&padapter->pnetdev->class_dev.kobj, KOBJ_LINKDOWN);
+#endif
+
+_func_exit_;
+}
+#endif
+
+
+/*
+void sitesurvey_ctrl_handler(void *FunctionContext)
+{
+       _adapter *adapter = (_adapter *)FunctionContext;
+
+       _sitesurvey_ctrl_handler(adapter);
+
+       _set_timer(&adapter->mlmepriv.sitesurveyctrl.sitesurvey_ctrl_timer, 3000);
+}
+*/
+
+void rtw_join_timeout_handler (void *FunctionContext)
+{
+       _adapter *adapter = (_adapter *)FunctionContext;
+       _rtw_join_timeout_handler(adapter);
+}
+
+
+void _rtw_scan_timeout_handler (void *FunctionContext)
+{
+       _adapter *adapter = (_adapter *)FunctionContext;
+       rtw_scan_timeout_handler(adapter);
+}
+
+
+void _dynamic_check_timer_handlder (void *FunctionContext)
+{
+       _adapter *adapter = (_adapter *)FunctionContext;
+
+       rtw_dynamic_check_timer_handlder(adapter);
+
+       _set_timer(&adapter->mlmepriv.dynamic_chk_timer, 2000);
+}
+
+#ifdef CONFIG_SET_SCAN_DENY_TIMER
+void _rtw_set_scan_deny_timer_hdl(void *FunctionContext)
+{
+       _adapter *adapter = (_adapter *)FunctionContext;
+       rtw_set_scan_deny_timer_hdl(adapter);
+}
+#endif
+
+
+void rtw_init_mlme_timer(_adapter *padapter)
+{
+       struct  mlme_priv *pmlmepriv = &padapter->mlmepriv;
+
+       _init_timer(&(pmlmepriv->assoc_timer), padapter->pnetdev, rtw_join_timeout_handler, padapter);
+       //_init_timer(&(pmlmepriv->sitesurveyctrl.sitesurvey_ctrl_timer), padapter->pnetdev, sitesurvey_ctrl_handler, padapter);
+       _init_timer(&(pmlmepriv->scan_to_timer), padapter->pnetdev, _rtw_scan_timeout_handler, padapter);
+
+       _init_timer(&(pmlmepriv->dynamic_chk_timer), padapter->pnetdev, _dynamic_check_timer_handlder, padapter);
+
+       #ifdef CONFIG_SET_SCAN_DENY_TIMER
+       _init_timer(&(pmlmepriv->set_scan_deny_timer), padapter->pnetdev, _rtw_set_scan_deny_timer_hdl, padapter);
+       #endif
+
+#ifdef RTK_DMP_PLATFORM
+       _init_workitem(&(pmlmepriv->Linkup_workitem), Linkup_workitem_callback, padapter);
+       _init_workitem(&(pmlmepriv->Linkdown_workitem), Linkdown_workitem_callback, padapter);
+#endif
+
+}
+
+extern void rtw_indicate_wx_assoc_event(_adapter *padapter);
+extern void rtw_indicate_wx_disassoc_event(_adapter *padapter);
+
+void rtw_os_indicate_connect(_adapter *adapter)
+{
+
+_func_enter_;
+
+#ifdef CONFIG_IOCTL_CFG80211
+       rtw_cfg80211_indicate_connect(adapter);
+#endif //CONFIG_IOCTL_CFG80211
+
+       rtw_indicate_wx_assoc_event(adapter);
+       netif_carrier_on(adapter->pnetdev);
+
+       if(adapter->pid[2] !=0)
+               rtw_signal_process(adapter->pid[2], SIGALRM);
+
+#ifdef RTK_DMP_PLATFORM
+       _set_workitem(&adapter->mlmepriv.Linkup_workitem);
+#endif
+
+_func_exit_;
+
+}
+
+extern void indicate_wx_scan_complete_event(_adapter *padapter);
+void rtw_os_indicate_scan_done( _adapter *padapter, bool aborted)
+{
+#ifdef CONFIG_IOCTL_CFG80211
+       rtw_cfg80211_indicate_scan_done(wdev_to_priv(padapter->rtw_wdev), aborted);
+#endif
+       indicate_wx_scan_complete_event(padapter);
+}
+
+static RT_PMKID_LIST   backupPMKIDList[ NUM_PMKID_CACHE ];
+void rtw_reset_securitypriv( _adapter *adapter )
+{
+       u8      backupPMKIDIndex = 0;
+       u8      backupTKIPCountermeasure = 0x00;
+       u32     backupTKIPcountermeasure_time = 0;
+       // add for CONFIG_IEEE80211W, none 11w also can use
+       _irqL irqL;
+       struct mlme_ext_priv    *pmlmeext = &adapter->mlmeextpriv;
+
+       _enter_critical_bh(&adapter->security_key_mutex, &irqL);
+
+       if(adapter->securitypriv.dot11AuthAlgrthm == dot11AuthAlgrthm_8021X)//802.1x
+       {
+               // Added by Albert 2009/02/18
+               // We have to backup the PMK information for WiFi PMK Caching test item.
+               //
+               // Backup the btkip_countermeasure information.
+               // When the countermeasure is trigger, the driver have to disconnect with AP for 60 seconds.
+
+               _rtw_memset( &backupPMKIDList[ 0 ], 0x00, sizeof( RT_PMKID_LIST ) * NUM_PMKID_CACHE );
+
+               _rtw_memcpy( &backupPMKIDList[ 0 ], &adapter->securitypriv.PMKIDList[ 0 ], sizeof( RT_PMKID_LIST ) * NUM_PMKID_CACHE );
+               backupPMKIDIndex = adapter->securitypriv.PMKIDIndex;
+               backupTKIPCountermeasure = adapter->securitypriv.btkip_countermeasure;
+               backupTKIPcountermeasure_time = adapter->securitypriv.btkip_countermeasure_time;
+#ifdef CONFIG_IEEE80211W
+               //reset RX BIP packet number
+               pmlmeext->mgnt_80211w_IPN_rx = 0;
+#endif //CONFIG_IEEE80211W
+               _rtw_memset((unsigned char *)&adapter->securitypriv, 0, sizeof (struct security_priv));
+               //_init_timer(&(adapter->securitypriv.tkip_timer),adapter->pnetdev, rtw_use_tkipkey_handler, adapter);
+
+               // Added by Albert 2009/02/18
+               // Restore the PMK information to securitypriv structure for the following connection.
+               _rtw_memcpy( &adapter->securitypriv.PMKIDList[ 0 ], &backupPMKIDList[ 0 ], sizeof( RT_PMKID_LIST ) * NUM_PMKID_CACHE );
+               adapter->securitypriv.PMKIDIndex = backupPMKIDIndex;
+               adapter->securitypriv.btkip_countermeasure = backupTKIPCountermeasure;
+               adapter->securitypriv.btkip_countermeasure_time = backupTKIPcountermeasure_time;
+
+               adapter->securitypriv.ndisauthtype = Ndis802_11AuthModeOpen;
+               adapter->securitypriv.ndisencryptstatus = Ndis802_11WEPDisabled;
+
+       }
+       else //reset values in securitypriv
+       {
+               //if(adapter->mlmepriv.fw_state & WIFI_STATION_STATE)
+               //{
+               struct security_priv *psec_priv=&adapter->securitypriv;
+
+               psec_priv->dot11AuthAlgrthm =dot11AuthAlgrthm_Open;  //open system
+               psec_priv->dot11PrivacyAlgrthm = _NO_PRIVACY_;
+               psec_priv->dot11PrivacyKeyIndex = 0;
+
+               psec_priv->dot118021XGrpPrivacy = _NO_PRIVACY_;
+               psec_priv->dot118021XGrpKeyid = 1;
+
+               psec_priv->ndisauthtype = Ndis802_11AuthModeOpen;
+               psec_priv->ndisencryptstatus = Ndis802_11WEPDisabled;
+               //}
+       }
+       // add for CONFIG_IEEE80211W, none 11w also can use
+       _exit_critical_bh(&adapter->security_key_mutex, &irqL);
+}
+
+void rtw_os_indicate_disconnect( _adapter *adapter )
+{
+   //RT_PMKID_LIST   backupPMKIDList[ NUM_PMKID_CACHE ];
+
+_func_enter_;
+
+       netif_carrier_off(adapter->pnetdev); // Do it first for tx broadcast pkt after disconnection issue!
+
+#ifdef CONFIG_IOCTL_CFG80211
+       rtw_cfg80211_indicate_disconnect(adapter);
+#endif //CONFIG_IOCTL_CFG80211
+
+       rtw_indicate_wx_disassoc_event(adapter);
+
+#ifdef RTK_DMP_PLATFORM
+       _set_workitem(&adapter->mlmepriv.Linkdown_workitem);
+#endif
+        //modify for CONFIG_IEEE80211W, none 11w also can use the same command
+        rtw_reset_securitypriv_cmd(adapter);
+
+_func_exit_;
+
+}
+
+void rtw_report_sec_ie(_adapter *adapter,u8 authmode,u8 *sec_ie)
+{
+       uint    len;
+       u8      *buff,*p,i;
+       union iwreq_data wrqu;
+
+_func_enter_;
+
+       RT_TRACE(_module_mlme_osdep_c_,_drv_info_,("+rtw_report_sec_ie, authmode=%d\n", authmode));
+
+       buff = NULL;
+       if(authmode==_WPA_IE_ID_)
+       {
+               RT_TRACE(_module_mlme_osdep_c_,_drv_info_,("rtw_report_sec_ie, authmode=%d\n", authmode));
+
+               buff = rtw_malloc(IW_CUSTOM_MAX);
+
+               _rtw_memset(buff,0,IW_CUSTOM_MAX);
+
+               p=buff;
+
+               p+=sprintf(p,"ASSOCINFO(ReqIEs=");
+
+               len = sec_ie[1]+2;
+               len =  (len < IW_CUSTOM_MAX) ? len:IW_CUSTOM_MAX;
+
+               for(i=0;i<len;i++){
+                       p+=sprintf(p,"%02x",sec_ie[i]);
+               }
+
+               p+=sprintf(p,")");
+
+               _rtw_memset(&wrqu,0,sizeof(wrqu));
+
+               wrqu.data.length=p-buff;
+
+               wrqu.data.length = (wrqu.data.length<IW_CUSTOM_MAX) ? wrqu.data.length:IW_CUSTOM_MAX;
+
+               wireless_send_event(adapter->pnetdev,IWEVCUSTOM,&wrqu,buff);
+
+               if(buff)
+                   rtw_mfree(buff, IW_CUSTOM_MAX);
+
+       }
+
+_func_exit_;
+
+}
+
+void _survey_timer_hdl (void *FunctionContext)
+{
+       _adapter *padapter = (_adapter *)FunctionContext;
+
+       survey_timer_hdl(padapter);
+}
+
+void _link_timer_hdl (void *FunctionContext)
+{
+       _adapter *padapter = (_adapter *)FunctionContext;
+       link_timer_hdl(padapter);
+}
+
+void _addba_timer_hdl(void *FunctionContext)
+{
+       struct sta_info *psta = (struct sta_info *)FunctionContext;
+       addba_timer_hdl(psta);
+}
+
+#ifdef CONFIG_IEEE80211W
+void _sa_query_timer_hdl (void *FunctionContext)
+{
+       _adapter *padapter = (_adapter *)FunctionContext;
+       sa_query_timer_hdl(padapter);
+}
+#endif //CONFIG_IEEE80211W
+
+void init_addba_retry_timer(_adapter *padapter, struct sta_info *psta)
+{
+
+       _init_timer(&psta->addba_retry_timer, padapter->pnetdev, _addba_timer_hdl, psta);
+}
+
+/*
+void _reauth_timer_hdl(void *FunctionContext)
+{
+       _adapter *padapter = (_adapter *)FunctionContext;
+       reauth_timer_hdl(padapter);
+}
+
+void _reassoc_timer_hdl(void *FunctionContext)
+{
+       _adapter *padapter = (_adapter *)FunctionContext;
+       reassoc_timer_hdl(padapter);
+}
+*/
+
+void init_mlme_ext_timer(_adapter *padapter)
+{
+       struct  mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
+
+       _init_timer(&pmlmeext->survey_timer, padapter->pnetdev, _survey_timer_hdl, padapter);
+       _init_timer(&pmlmeext->link_timer, padapter->pnetdev, _link_timer_hdl, padapter);
+#ifdef CONFIG_IEEE80211W
+       _init_timer(&pmlmeext->sa_query_timer, padapter->pnetdev, _sa_query_timer_hdl, padapter);
+#endif //CONFIG_IEEE80211W
+       //_init_timer(&pmlmeext->ADDBA_timer, padapter->pnetdev, _addba_timer_hdl, padapter);
+
+       //_init_timer(&pmlmeext->reauth_timer, padapter->pnetdev, _reauth_timer_hdl, padapter);
+       //_init_timer(&pmlmeext->reassoc_timer, padapter->pnetdev, _reassoc_timer_hdl, padapter);
+}
+
+#ifdef CONFIG_AP_MODE
+
+void rtw_indicate_sta_assoc_event(_adapter *padapter, struct sta_info *psta)
+{
+       union iwreq_data wrqu;
+       struct sta_priv *pstapriv = &padapter->stapriv;
+
+       if(psta==NULL)
+               return;
+
+       if(psta->aid > NUM_STA)
+               return;
+
+       if(pstapriv->sta_aid[psta->aid - 1] != psta)
+               return;
+
+
+       wrqu.addr.sa_family = ARPHRD_ETHER;
+
+       _rtw_memcpy(wrqu.addr.sa_data, psta->hwaddr, ETH_ALEN);
+
+       DBG_871X("+rtw_indicate_sta_assoc_event\n");
+
+       wireless_send_event(padapter->pnetdev, IWEVREGISTERED, &wrqu, NULL);
+
+}
+
+void rtw_indicate_sta_disassoc_event(_adapter *padapter, struct sta_info *psta)
+{
+       union iwreq_data wrqu;
+       struct sta_priv *pstapriv = &padapter->stapriv;
+
+       if(psta==NULL)
+               return;
+
+       if(psta->aid > NUM_STA)
+               return;
+
+       if(pstapriv->sta_aid[psta->aid - 1] != psta)
+               return;
+
+
+       wrqu.addr.sa_family = ARPHRD_ETHER;
+
+       _rtw_memcpy(wrqu.addr.sa_data, psta->hwaddr, ETH_ALEN);
+
+       DBG_871X("+rtw_indicate_sta_disassoc_event\n");
+
+       wireless_send_event(padapter->pnetdev, IWEVEXPIRED, &wrqu, NULL);
+
+}
+
+
+#ifdef CONFIG_HOSTAPD_MLME
+
+static int mgnt_xmit_entry(struct sk_buff *skb, struct net_device *pnetdev)
+{
+       struct hostapd_priv *phostapdpriv = rtw_netdev_priv(pnetdev);
+       _adapter *padapter = (_adapter *)phostapdpriv->padapter;
+
+       //DBG_871X("%s\n", __FUNCTION__);
+
+       return rtw_hal_hostap_mgnt_xmit_entry(padapter, skb);
+}
+
+static int mgnt_netdev_open(struct net_device *pnetdev)
+{
+       struct hostapd_priv *phostapdpriv = rtw_netdev_priv(pnetdev);
+
+       DBG_871X("mgnt_netdev_open: MAC Address:" MAC_FMT "\n", MAC_ARG(pnetdev->dev_addr));
+
+
+       init_usb_anchor(&phostapdpriv->anchored);
+
+       if(!rtw_netif_queue_stopped(pnetdev))
+               rtw_netif_start_queue(pnetdev);
+       else
+               rtw_netif_wake_queue(pnetdev);
+
+
+       netif_carrier_on(pnetdev);
+
+       //rtw_write16(phostapdpriv->padapter, 0x0116, 0x0100);//only excluding beacon
+
+       return 0;
+}
+static int mgnt_netdev_close(struct net_device *pnetdev)
+{
+       struct hostapd_priv *phostapdpriv = rtw_netdev_priv(pnetdev);
+
+       DBG_871X("%s\n", __FUNCTION__);
+
+       usb_kill_anchored_urbs(&phostapdpriv->anchored);
+
+       netif_carrier_off(pnetdev);
+
+       if (!rtw_netif_queue_stopped(pnetdev))
+               rtw_netif_stop_queue(pnetdev);
+
+       //rtw_write16(phostapdpriv->padapter, 0x0116, 0x3f3f);
+
+       return 0;
+}
+
+#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,29))
+static const struct net_device_ops rtl871x_mgnt_netdev_ops = {
+       .ndo_open = mgnt_netdev_open,
+       .ndo_stop = mgnt_netdev_close,
+       .ndo_start_xmit = mgnt_xmit_entry,
+       //.ndo_set_mac_address = r871x_net_set_mac_address,
+       //.ndo_get_stats = r871x_net_get_stats,
+       //.ndo_do_ioctl = r871x_mp_ioctl,
+};
+#endif
+
+int hostapd_mode_init(_adapter *padapter)
+{
+       unsigned char mac[ETH_ALEN];
+       struct hostapd_priv *phostapdpriv;
+       struct net_device *pnetdev;
+
+       pnetdev = rtw_alloc_etherdev(sizeof(struct hostapd_priv));
+       if (!pnetdev)
+          return -ENOMEM;
+
+       //SET_MODULE_OWNER(pnetdev);
+       ether_setup(pnetdev);
+
+       //pnetdev->type = ARPHRD_IEEE80211;
+
+       phostapdpriv = rtw_netdev_priv(pnetdev);
+       phostapdpriv->pmgnt_netdev = pnetdev;
+       phostapdpriv->padapter= padapter;
+       padapter->phostapdpriv = phostapdpriv;
+
+       //pnetdev->init = NULL;
+
+#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,29))
+
+       DBG_871X("register rtl871x_mgnt_netdev_ops to netdev_ops\n");
+
+       pnetdev->netdev_ops = &rtl871x_mgnt_netdev_ops;
+
+#else
+
+       pnetdev->open = mgnt_netdev_open;
+
+       pnetdev->stop = mgnt_netdev_close;
+
+       pnetdev->hard_start_xmit = mgnt_xmit_entry;
+
+       //pnetdev->set_mac_address = r871x_net_set_mac_address;
+
+       //pnetdev->get_stats = r871x_net_get_stats;
+
+       //pnetdev->do_ioctl = r871x_mp_ioctl;
+
+#endif
+
+       pnetdev->watchdog_timeo = HZ; /* 1 second timeout */
+
+       //pnetdev->wireless_handlers = NULL;
+
+#ifdef CONFIG_TCP_CSUM_OFFLOAD_TX
+       pnetdev->features |= NETIF_F_IP_CSUM;
+#endif
+
+
+
+       if(dev_alloc_name(pnetdev,"mgnt.wlan%d") < 0)
+       {
+               DBG_871X("hostapd_mode_init(): dev_alloc_name, fail! \n");
+       }
+
+
+       //SET_NETDEV_DEV(pnetdev, pintfpriv->udev);
+
+
+       mac[0]=0x00;
+       mac[1]=0xe0;
+       mac[2]=0x4c;
+       mac[3]=0x87;
+       mac[4]=0x11;
+       mac[5]=0x12;
+
+       _rtw_memcpy(pnetdev->dev_addr, mac, ETH_ALEN);
+
+
+       netif_carrier_off(pnetdev);
+
+
+       /* Tell the network stack we exist */
+       if (register_netdev(pnetdev) != 0)
+       {
+               DBG_871X("hostapd_mode_init(): register_netdev fail!\n");
+
+               if(pnetdev)
+               {
+                       rtw_free_netdev(pnetdev);
+               }
+       }
+
+       return 0;
+
+}
+
+void hostapd_mode_unload(_adapter *padapter)
+{
+       struct hostapd_priv *phostapdpriv = padapter->phostapdpriv;
+       struct net_device *pnetdev = phostapdpriv->pmgnt_netdev;
+
+       unregister_netdev(pnetdev);
+       rtw_free_netdev(pnetdev);
+
+}
+
+#endif
+#endif
diff --git a/drivers/net/wireless/realtek/rtl8192cu/os_dep/linux/os_intfs.c b/drivers/net/wireless/realtek/rtl8192cu/os_dep/linux/os_intfs.c
new file mode 100644 (file)
index 0000000..3854f27
--- /dev/null
@@ -0,0 +1,2749 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#define _OS_INTFS_C_
+
+#include <drv_conf.h>
+
+#if defined (PLATFORM_LINUX) && defined (PLATFORM_WINDOWS)
+
+#error "Shall be Linux or Windows, but not both!\n"
+
+#endif
+
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <xmit_osdep.h>
+#include <recv_osdep.h>
+#include <hal_intf.h>
+#include <rtw_ioctl.h>
+#include <rtw_version.h>
+
+#ifdef CONFIG_USB_HCI
+#include <usb_osintf.h>
+#endif
+
+#ifdef CONFIG_PCI_HCI
+#include <pci_osintf.h>
+#endif
+
+#ifdef CONFIG_BR_EXT
+#include <rtw_br_ext.h>
+#endif //CONFIG_BR_EXT
+
+MODULE_LICENSE("GPL");
+MODULE_DESCRIPTION("Realtek Wireless Lan Driver");
+MODULE_AUTHOR("Realtek Semiconductor Corp.");
+MODULE_VERSION(DRIVERVERSION);
+
+/* module param defaults */
+int rtw_chip_version = 0x00;
+int rtw_rfintfs = HWPI;
+int rtw_lbkmode = 0;//RTL8712_AIR_TRX;
+
+
+int rtw_network_mode = Ndis802_11IBSS;//Ndis802_11Infrastructure;//infra, ad-hoc, auto
+//NDIS_802_11_SSID     ssid;
+int rtw_channel = 1;//ad-hoc support requirement
+int rtw_wireless_mode = WIRELESS_11BG_24N;
+int rtw_vrtl_carrier_sense = AUTO_VCS;
+int rtw_vcs_type = RTS_CTS;//*
+int rtw_rts_thresh = 2347;//*
+int rtw_frag_thresh = 2346;//*
+int rtw_preamble = PREAMBLE_LONG;//long, short, auto
+int rtw_scan_mode = 1;//active, passive
+int rtw_adhoc_tx_pwr = 1;
+int rtw_soft_ap = 0;
+//int smart_ps = 1;
+#ifdef CONFIG_POWER_SAVING
+int rtw_power_mgnt = 1;
+#ifdef CONFIG_IPS_LEVEL_2
+int rtw_ips_mode = IPS_LEVEL_2;
+#else
+int rtw_ips_mode = IPS_NORMAL;
+#endif
+#else
+int rtw_power_mgnt = PS_MODE_ACTIVE;
+int rtw_ips_mode = IPS_NONE;
+#endif
+module_param(rtw_ips_mode, int, 0644);
+MODULE_PARM_DESC(rtw_ips_mode,"The default IPS mode");
+
+int rtw_radio_enable = 1;
+int rtw_long_retry_lmt = 7;
+int rtw_short_retry_lmt = 7;
+int rtw_busy_thresh = 40;
+//int qos_enable = 0; //*
+int rtw_ack_policy = NORMAL_ACK;
+#ifdef CONFIG_MP_INCLUDED
+int rtw_mp_mode = 1;
+#else
+int rtw_mp_mode = 0;
+#endif
+int rtw_software_encrypt = 0;
+int rtw_software_decrypt = 0;
+
+int rtw_acm_method = 0;// 0:By SW 1:By HW.
+
+int rtw_wmm_enable = 1;// default is set to enable the wmm.
+int rtw_uapsd_enable = 0;
+int rtw_uapsd_max_sp = NO_LIMIT;
+int rtw_uapsd_acbk_en = 0;
+int rtw_uapsd_acbe_en = 0;
+int rtw_uapsd_acvi_en = 0;
+int rtw_uapsd_acvo_en = 0;
+
+#ifdef CONFIG_80211N_HT
+int rtw_ht_enable = 1;
+int rtw_cbw40_enable = 3; // 0 :diable, bit(0): enable 2.4g, bit(1): enable 5g
+int rtw_ampdu_enable = 1;//for enable tx_ampdu
+int rtw_rx_stbc = 1;// 0: disable, bit(0):enable 2.4g, bit(1):enable 5g, default is set to enable 2.4GHZ for IOT issue with bufflao's AP at 5GHZ
+int rtw_ampdu_amsdu = 0;// 0: disabled, 1:enabled, 2:auto
+#endif
+
+int rtw_lowrate_two_xmit = 1;//Use 2 path Tx to transmit MCS0~7 and legacy mode
+
+//int rf_config = RF_1T2R;  // 1T2R
+int rtw_rf_config = RF_819X_MAX_TYPE;  //auto
+int rtw_low_power = 0;
+#ifdef CONFIG_WIFI_TEST
+int rtw_wifi_spec = 1;//for wifi test
+#else
+int rtw_wifi_spec = 0;
+#endif
+
+int rtw_special_rf_path = 0; //0: 2T2R ,1: only turn on path A 1T1R, 2: only turn on path B 1T1R
+
+int rtw_channel_plan = RT_CHANNEL_DOMAIN_MAX;
+
+#ifdef CONFIG_BT_COEXIST
+int rtw_bt_iso = 2;// 0:Low, 1:High, 2:From Efuse
+int rtw_bt_sco = 3;// 0:Idle, 1:None-SCO, 2:SCO, 3:From Counter, 4.Busy, 5.OtherBusy
+int rtw_bt_ampdu =1 ;// 0:Disable BT control A-MPDU, 1:Enable BT control A-MPDU.
+#endif
+int rtw_AcceptAddbaReq = _TRUE;// 0:Reject AP's Add BA req, 1:Accept AP's Add BA req.
+
+int  rtw_antdiv_cfg = 2; // 0:OFF , 1:ON, 2:decide by Efuse config
+
+#ifdef CONFIG_USB_AUTOSUSPEND
+int rtw_enusbss = 1;//0:disable,1:enable
+#else
+int rtw_enusbss = 0;//0:disable,1:enable
+#endif
+
+int rtw_hwpdn_mode=2;//0:disable,1:enable,2: by EFUSE config
+
+#ifdef CONFIG_HW_PWRP_DETECTION
+int rtw_hwpwrp_detect = 1;
+#else
+int rtw_hwpwrp_detect = 0; //HW power  ping detect 0:disable , 1:enable
+#endif
+
+#ifdef CONFIG_USB_HCI
+int rtw_hw_wps_pbc = 1;
+#else
+int rtw_hw_wps_pbc = 0;
+#endif
+
+#ifdef CONFIG_TX_MCAST2UNI
+int rtw_mc2u_disable = 0;
+#endif // CONFIG_TX_MCAST2UNI
+
+int rtw_mac_phy_mode = 0; //0:by efuse, 1:smsp, 2:dmdp, 3:dmsp.
+
+#ifdef CONFIG_80211D
+int rtw_80211d = 0;
+#endif
+
+char* ifname = "wlan%d";
+module_param(ifname, charp, 0644);
+MODULE_PARM_DESC(ifname, "The default name to allocate for first interface");
+
+char* if2name = "wlan%d";
+module_param(if2name, charp, 0644);
+MODULE_PARM_DESC(if2name, "The default name to allocate for second interface");
+
+char* rtw_initmac = 0;  // temp mac address if users want to use instead of the mac address in Efuse
+
+#ifdef CONFIG_MULTI_VIR_IFACES
+int rtw_ext_iface_num  = 1;//primary/secondary iface is excluded
+module_param(rtw_ext_iface_num, int, 0644);
+#endif //CONFIG_MULTI_VIR_IFACES
+
+module_param(rtw_initmac, charp, 0644);
+module_param(rtw_channel_plan, int, 0644);
+module_param(rtw_chip_version, int, 0644);
+module_param(rtw_rfintfs, int, 0644);
+module_param(rtw_lbkmode, int, 0644);
+module_param(rtw_network_mode, int, 0644);
+module_param(rtw_channel, int, 0644);
+module_param(rtw_mp_mode, int, 0644);
+module_param(rtw_wmm_enable, int, 0644);
+module_param(rtw_vrtl_carrier_sense, int, 0644);
+module_param(rtw_vcs_type, int, 0644);
+module_param(rtw_busy_thresh, int, 0644);
+#ifdef CONFIG_80211N_HT
+module_param(rtw_ht_enable, int, 0644);
+module_param(rtw_cbw40_enable, int, 0644);
+module_param(rtw_ampdu_enable, int, 0644);
+module_param(rtw_rx_stbc, int, 0644);
+module_param(rtw_ampdu_amsdu, int, 0644);
+#endif
+
+module_param(rtw_lowrate_two_xmit, int, 0644);
+
+module_param(rtw_rf_config, int, 0644);
+module_param(rtw_power_mgnt, int, 0644);
+module_param(rtw_low_power, int, 0644);
+module_param(rtw_wifi_spec, int, 0644);
+
+module_param(rtw_special_rf_path, int, 0644);
+
+module_param(rtw_antdiv_cfg, int, 0644);
+
+
+module_param(rtw_enusbss, int, 0644);
+module_param(rtw_hwpdn_mode, int, 0644);
+module_param(rtw_hwpwrp_detect, int, 0644);
+
+module_param(rtw_hw_wps_pbc, int, 0644);
+
+#ifdef CONFIG_ADAPTOR_INFO_CACHING_FILE
+char *rtw_adaptor_info_caching_file_path= "/data/misc/wifi/rtw_cache";
+module_param(rtw_adaptor_info_caching_file_path, charp, 0644);
+MODULE_PARM_DESC(rtw_adaptor_info_caching_file_path, "The path of adapter info cache file");
+#endif //CONFIG_ADAPTOR_INFO_CACHING_FILE
+
+#ifdef CONFIG_LAYER2_ROAMING
+uint rtw_max_roaming_times=2;
+module_param(rtw_max_roaming_times, uint, 0644);
+MODULE_PARM_DESC(rtw_max_roaming_times,"The max roaming times to try");
+#endif //CONFIG_LAYER2_ROAMING
+
+#ifdef CONFIG_IOL
+bool rtw_force_iol=_FALSE;
+module_param(rtw_force_iol, bool, 0644);
+MODULE_PARM_DESC(rtw_force_iol,"Force to enable IOL");
+#endif //CONFIG_IOL
+
+#ifdef CONFIG_FILE_FWIMG
+char *rtw_fw_file_path= "";
+module_param(rtw_fw_file_path, charp, 0644);
+MODULE_PARM_DESC(rtw_fw_file_path, "The path of fw image");
+#endif //CONFIG_FILE_FWIMG
+
+#ifdef CONFIG_TX_MCAST2UNI
+module_param(rtw_mc2u_disable, int, 0644);
+#endif // CONFIG_TX_MCAST2UNI
+
+module_param(rtw_mac_phy_mode, int, 0644);
+
+#ifdef CONFIG_80211D
+module_param(rtw_80211d, int, 0644);
+#endif
+
+uint rtw_notch_filter = RTW_NOTCH_FILTER;
+module_param(rtw_notch_filter, uint, 0644);
+MODULE_PARM_DESC(rtw_notch_filter, "0:Disable, 1:Enable, 2:Enable only for P2P");
+
+static uint loadparam( _adapter *padapter,  _nic_hdl   pnetdev);
+int _netdev_open(struct net_device *pnetdev);
+int netdev_open (struct net_device *pnetdev);
+static int netdev_close (struct net_device *pnetdev);
+
+//#ifdef RTK_DMP_PLATFORM
+#ifdef CONFIG_PROC_DEBUG
+#define RTL8192C_PROC_NAME "rtl819xC"
+#define RTL8192D_PROC_NAME "rtl819xD"
+static char rtw_proc_name[IFNAMSIZ];
+static struct proc_dir_entry *rtw_proc = NULL;
+static int     rtw_proc_cnt = 0;
+
+#define RTW_PROC_NAME DRV_NAME
+
+void rtw_proc_init_one(struct net_device *dev)
+{
+       struct proc_dir_entry *dir_dev = NULL;
+       struct proc_dir_entry *entry=NULL;
+       _adapter        *padapter = rtw_netdev_priv(dev);
+       u8 rf_type;
+
+       if(rtw_proc == NULL)
+       {
+               if(padapter->chip_type == RTL8188C_8192C)
+               {
+                       _rtw_memcpy(rtw_proc_name, RTL8192C_PROC_NAME, sizeof(RTL8192C_PROC_NAME));
+               }
+               else if(padapter->chip_type == RTL8192D)
+               {
+                       _rtw_memcpy(rtw_proc_name, RTL8192D_PROC_NAME, sizeof(RTL8192D_PROC_NAME));
+               }
+               else if(padapter->chip_type == RTL8723A)
+               {
+                       _rtw_memcpy(rtw_proc_name, RTW_PROC_NAME, sizeof(RTW_PROC_NAME));
+               }
+               else if(padapter->chip_type == RTL8188E)
+               {
+                       _rtw_memcpy(rtw_proc_name, RTW_PROC_NAME, sizeof(RTW_PROC_NAME));
+               }
+               else
+               {
+                       _rtw_memcpy(rtw_proc_name, RTW_PROC_NAME, sizeof(RTW_PROC_NAME));
+               }
+
+#if(LINUX_VERSION_CODE < KERNEL_VERSION(2,6,24))
+               rtw_proc=create_proc_entry(rtw_proc_name, S_IFDIR, proc_net);
+#else
+               rtw_proc=create_proc_entry(rtw_proc_name, S_IFDIR, init_net.proc_net);
+#endif
+               if (rtw_proc == NULL) {
+                       DBG_871X(KERN_ERR "Unable to create rtw_proc directory\n");
+                       return;
+               }
+
+               entry = create_proc_read_entry("ver_info", S_IFREG | S_IRUGO, rtw_proc, proc_get_drv_version, dev);
+               if (!entry) {
+                       DBG_871X("Unable to create_proc_read_entry!\n");
+                       return;
+               }
+
+               entry = create_proc_read_entry("log_level", S_IFREG | S_IRUGO,
+                                  rtw_proc, proc_get_log_level, dev);
+               if (!entry) {
+                       DBG_871X("Unable to create_proc_read_entry!\n");
+                       return;
+               }
+               entry->write_proc = proc_set_log_level;
+
+#ifdef DBG_MEM_ALLOC
+               entry = create_proc_read_entry("mstat", S_IFREG | S_IRUGO,
+                                  rtw_proc, proc_get_mstat, dev);
+               if (!entry) {
+                       DBG_871X("Unable to create_proc_read_entry!\n");
+                       return;
+               }
+#endif /* DBG_MEM_ALLOC */
+       }
+
+
+
+       if(padapter->dir_dev == NULL)
+       {
+               padapter->dir_dev = create_proc_entry(dev->name,
+                                         S_IFDIR | S_IRUGO | S_IXUGO,
+                                         rtw_proc);
+
+               dir_dev = padapter->dir_dev;
+
+               if(dir_dev==NULL)
+               {
+                       if(rtw_proc_cnt == 0)
+                       {
+                               if(rtw_proc){
+#if(LINUX_VERSION_CODE < KERNEL_VERSION(2,6,24))
+                                       remove_proc_entry(rtw_proc_name, proc_net);
+#else
+                                       remove_proc_entry(rtw_proc_name, init_net.proc_net);
+#endif
+                                       rtw_proc = NULL;
+                               }
+                       }
+
+                       DBG_871X("Unable to create dir_dev directory\n");
+                       return;
+               }
+       }
+       else
+       {
+               return;
+       }
+
+       rtw_proc_cnt++;
+
+       entry = create_proc_read_entry("write_reg", S_IFREG | S_IRUGO,
+                                  dir_dev, proc_get_write_reg, dev);
+       if (!entry) {
+               DBG_871X("Unable to create_proc_read_entry!\n");
+               return;
+       }
+       entry->write_proc = proc_set_write_reg;
+
+       entry = create_proc_read_entry("read_reg", S_IFREG | S_IRUGO,
+                                  dir_dev, proc_get_read_reg, dev);
+       if (!entry) {
+               DBG_871X("Unable to create_proc_read_entry!\n");
+               return;
+       }
+       entry->write_proc = proc_set_read_reg;
+
+
+       entry = create_proc_read_entry("fwstate", S_IFREG | S_IRUGO,
+                                  dir_dev, proc_get_fwstate, dev);
+       if (!entry) {
+               DBG_871X("Unable to create_proc_read_entry!\n");
+               return;
+       }
+
+
+       entry = create_proc_read_entry("sec_info", S_IFREG | S_IRUGO,
+                                  dir_dev, proc_get_sec_info, dev);
+       if (!entry) {
+               DBG_871X("Unable to create_proc_read_entry!\n");
+               return;
+       }
+
+
+       entry = create_proc_read_entry("mlmext_state", S_IFREG | S_IRUGO,
+                                  dir_dev, proc_get_mlmext_state, dev);
+       if (!entry) {
+               DBG_871X("Unable to create_proc_read_entry!\n");
+               return;
+       }
+
+
+       entry = create_proc_read_entry("qos_option", S_IFREG | S_IRUGO,
+                                  dir_dev, proc_get_qos_option, dev);
+       if (!entry) {
+               DBG_871X("Unable to create_proc_read_entry!\n");
+               return;
+       }
+
+       entry = create_proc_read_entry("ht_option", S_IFREG | S_IRUGO,
+                                  dir_dev, proc_get_ht_option, dev);
+       if (!entry) {
+               DBG_871X("Unable to create_proc_read_entry!\n");
+               return;
+       }
+
+       entry = create_proc_read_entry("rf_info", S_IFREG | S_IRUGO,
+                                  dir_dev, proc_get_rf_info, dev);
+       if (!entry) {
+               DBG_871X("Unable to create_proc_read_entry!\n");
+               return;
+       }
+
+       entry = create_proc_read_entry("ap_info", S_IFREG | S_IRUGO,
+                                  dir_dev, proc_get_ap_info, dev);
+       if (!entry) {
+               DBG_871X("Unable to create_proc_read_entry!\n");
+               return;
+       }
+
+       entry = create_proc_read_entry("adapter_state", S_IFREG | S_IRUGO,
+                                  dir_dev, proc_get_adapter_state, dev);
+       if (!entry) {
+               DBG_871X("Unable to create_proc_read_entry!\n");
+               return;
+       }
+
+       entry = create_proc_read_entry("trx_info", S_IFREG | S_IRUGO,
+                                  dir_dev, proc_get_trx_info, dev);
+       if (!entry) {
+               DBG_871X("Unable to create_proc_read_entry!\n");
+               return;
+       }
+
+       entry = create_proc_read_entry("mac_reg_dump1", S_IFREG | S_IRUGO,
+                                  dir_dev, proc_get_mac_reg_dump1, dev);
+       if (!entry) {
+               DBG_871X("Unable to create_proc_read_entry!\n");
+               return;
+       }
+
+       entry = create_proc_read_entry("mac_reg_dump2", S_IFREG | S_IRUGO,
+                                  dir_dev, proc_get_mac_reg_dump2, dev);
+       if (!entry) {
+               DBG_871X("Unable to create_proc_read_entry!\n");
+               return;
+       }
+
+       entry = create_proc_read_entry("mac_reg_dump3", S_IFREG | S_IRUGO,
+                                  dir_dev, proc_get_mac_reg_dump3, dev);
+       if (!entry) {
+               DBG_871X("Unable to create_proc_read_entry!\n");
+               return;
+       }
+
+       entry = create_proc_read_entry("bb_reg_dump1", S_IFREG | S_IRUGO,
+                                  dir_dev, proc_get_bb_reg_dump1, dev);
+       if (!entry) {
+               DBG_871X("Unable to create_proc_read_entry!\n");
+               return;
+       }
+
+       entry = create_proc_read_entry("bb_reg_dump2", S_IFREG | S_IRUGO,
+                                  dir_dev, proc_get_bb_reg_dump2, dev);
+       if (!entry) {
+               DBG_871X("Unable to create_proc_read_entry!\n");
+               return;
+       }
+
+       entry = create_proc_read_entry("bb_reg_dump3", S_IFREG | S_IRUGO,
+                                  dir_dev, proc_get_bb_reg_dump3, dev);
+       if (!entry) {
+               DBG_871X("Unable to create_proc_read_entry!\n");
+               return;
+       }
+
+       entry = create_proc_read_entry("rf_reg_dump1", S_IFREG | S_IRUGO,
+                                  dir_dev, proc_get_rf_reg_dump1, dev);
+       if (!entry) {
+               DBG_871X("Unable to create_proc_read_entry!\n");
+               return;
+       }
+
+       entry = create_proc_read_entry("rf_reg_dump2", S_IFREG | S_IRUGO,
+                                  dir_dev, proc_get_rf_reg_dump2, dev);
+       if (!entry) {
+               DBG_871X("Unable to create_proc_read_entry!\n");
+               return;
+       }
+
+       rtw_hal_get_hwreg(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
+       if((RF_1T2R == rf_type) ||(RF_1T1R ==rf_type )) {
+               entry = create_proc_read_entry("rf_reg_dump3", S_IFREG | S_IRUGO,
+                                          dir_dev, proc_get_rf_reg_dump3, dev);
+               if (!entry) {
+                       DBG_871X("Unable to create_proc_read_entry!\n");
+                       return;
+               }
+
+               entry = create_proc_read_entry("rf_reg_dump4", S_IFREG | S_IRUGO,
+                                          dir_dev, proc_get_rf_reg_dump4, dev);
+               if (!entry) {
+                       DBG_871X("Unable to create_proc_read_entry!\n");
+                       return;
+               }
+       }
+
+#ifdef CONFIG_AP_MODE
+
+       entry = create_proc_read_entry("all_sta_info", S_IFREG | S_IRUGO,
+                                  dir_dev, proc_get_all_sta_info, dev);
+       if (!entry) {
+               DBG_871X("Unable to create_proc_read_entry!\n");
+               return;
+       }
+#endif
+
+#ifdef DBG_MEMORY_LEAK
+       entry = create_proc_read_entry("_malloc_cnt", S_IFREG | S_IRUGO,
+                                  dir_dev, proc_get_malloc_cnt, dev);
+       if (!entry) {
+               DBG_871X("Unable to create_proc_read_entry!\n");
+               return;
+       }
+#endif
+
+#ifdef CONFIG_FIND_BEST_CHANNEL
+       entry = create_proc_read_entry("best_channel", S_IFREG | S_IRUGO,
+                                  dir_dev, proc_get_best_channel, dev);
+       if (!entry) {
+               DBG_871X("Unable to create_proc_read_entry!\n");
+               return;
+       }
+       entry->write_proc = proc_set_best_channel;
+#endif
+
+       entry = create_proc_read_entry("rx_signal", S_IFREG | S_IRUGO,
+                                  dir_dev, proc_get_rx_signal, dev);
+       if (!entry) {
+               DBG_871X("Unable to create_proc_read_entry!\n");
+               return;
+       }
+       entry->write_proc = proc_set_rx_signal;
+
+       entry = create_proc_read_entry("ht_enable", S_IFREG | S_IRUGO,
+                                  dir_dev, proc_get_ht_enable, dev);
+       if (!entry) {
+               DBG_871X("Unable to create_proc_read_entry!\n");
+               return;
+       }
+       entry->write_proc = proc_set_ht_enable;
+
+       entry = create_proc_read_entry("cbw40_enable", S_IFREG | S_IRUGO,
+                                  dir_dev, proc_get_cbw40_enable, dev);
+       if (!entry) {
+               DBG_871X("Unable to create_proc_read_entry!\n");
+               return;
+       }
+       entry->write_proc = proc_set_cbw40_enable;
+
+       entry = create_proc_read_entry("ampdu_enable", S_IFREG | S_IRUGO,
+                                  dir_dev, proc_get_ampdu_enable, dev);
+       if (!entry) {
+               DBG_871X("Unable to create_proc_read_entry!\n");
+               return;
+       }
+       entry->write_proc = proc_set_ampdu_enable;
+
+       entry = create_proc_read_entry("rx_stbc", S_IFREG | S_IRUGO,
+                                  dir_dev, proc_get_rx_stbc, dev);
+       if (!entry) {
+               DBG_871X("Unable to create_proc_read_entry!\n");
+               return;
+       }
+       entry->write_proc = proc_set_rx_stbc;
+
+
+       entry = create_proc_read_entry("path_rssi", S_IFREG | S_IRUGO,
+                                       dir_dev, proc_get_two_path_rssi, dev);
+
+       entry = create_proc_read_entry("vid", S_IFREG | S_IRUGO,
+                                  dir_dev, proc_get_vid, dev);
+       if (!entry) {
+               DBG_871X("Unable to create_proc_read_entry!\n");
+               return;
+       }
+
+       entry = create_proc_read_entry("pid", S_IFREG | S_IRUGO,
+                                  dir_dev, proc_get_pid, dev);
+       if (!entry) {
+               DBG_871X("Unable to create_proc_read_entry!\n");
+               return;
+       }
+
+       entry = create_proc_read_entry("rssi_disp", S_IFREG | S_IRUGO,
+                                  dir_dev, proc_get_rssi_disp, dev);
+       if (!entry) {
+               DBG_871X("Unable to create_proc_read_entry!\n");
+               return;
+       }
+       entry->write_proc = proc_set_rssi_disp;
+
+#if defined(DBG_CONFIG_ERROR_DETECT)
+       entry = create_proc_read_entry("sreset", S_IFREG | S_IRUGO,
+                                  dir_dev, proc_get_sreset, dev);
+       if (!entry) {
+               DBG_871X("Unable to create_proc_read_entry!\n");
+               return;
+       }
+       entry->write_proc = proc_set_sreset;
+#endif /* DBG_CONFIG_ERROR_DETECT */
+
+#ifdef CONFIG_DM_ADAPTIVITY
+       entry = create_proc_read_entry("dm_adaptivity", S_IFREG | S_IRUGO,
+                                  dir_dev, proc_get_dm_adaptivity, dev);
+       if (!entry) {
+               DBG_871X("Unable to create_proc_read_entry!\n");
+               return;
+       }
+       entry->write_proc = proc_set_dm_adaptivity;
+#endif /* CONFIG_DM_ADAPTIVITY */
+
+}
+
+void rtw_proc_remove_one(struct net_device *dev)
+{
+       struct proc_dir_entry *dir_dev = NULL;
+       _adapter        *padapter = rtw_netdev_priv(dev);
+       u8 rf_type;
+
+       dir_dev = padapter->dir_dev;
+       padapter->dir_dev = NULL;
+
+       if (dir_dev) {
+
+               remove_proc_entry("write_reg", dir_dev);
+               remove_proc_entry("read_reg", dir_dev);
+               remove_proc_entry("fwstate", dir_dev);
+               remove_proc_entry("sec_info", dir_dev);
+               remove_proc_entry("mlmext_state", dir_dev);
+               remove_proc_entry("qos_option", dir_dev);
+               remove_proc_entry("ht_option", dir_dev);
+               remove_proc_entry("rf_info", dir_dev);
+               remove_proc_entry("ap_info", dir_dev);
+               remove_proc_entry("adapter_state", dir_dev);
+               remove_proc_entry("trx_info", dir_dev);
+
+               remove_proc_entry("mac_reg_dump1", dir_dev);
+               remove_proc_entry("mac_reg_dump2", dir_dev);
+               remove_proc_entry("mac_reg_dump3", dir_dev);
+               remove_proc_entry("bb_reg_dump1", dir_dev);
+               remove_proc_entry("bb_reg_dump2", dir_dev);
+               remove_proc_entry("bb_reg_dump3", dir_dev);
+               remove_proc_entry("rf_reg_dump1", dir_dev);
+               remove_proc_entry("rf_reg_dump2", dir_dev);
+               rtw_hal_get_hwreg(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
+               if((RF_1T2R == rf_type) ||(RF_1T1R ==rf_type )) {
+                       remove_proc_entry("rf_reg_dump3", dir_dev);
+                       remove_proc_entry("rf_reg_dump4", dir_dev);
+               }
+#ifdef CONFIG_AP_MODE
+               remove_proc_entry("all_sta_info", dir_dev);
+#endif
+
+#ifdef DBG_MEMORY_LEAK
+               remove_proc_entry("_malloc_cnt", dir_dev);
+#endif
+
+#ifdef CONFIG_FIND_BEST_CHANNEL
+               remove_proc_entry("best_channel", dir_dev);
+#endif
+               remove_proc_entry("rx_signal", dir_dev);
+
+               remove_proc_entry("cbw40_enable", dir_dev);
+
+               remove_proc_entry("ht_enable", dir_dev);
+
+               remove_proc_entry("ampdu_enable", dir_dev);
+
+               remove_proc_entry("rx_stbc", dir_dev);
+
+               remove_proc_entry("path_rssi", dir_dev);
+
+               remove_proc_entry("vid", dir_dev);
+
+               remove_proc_entry("pid", dir_dev);
+
+               remove_proc_entry("rssi_disp", dir_dev);
+
+#if defined(DBG_CONFIG_ERROR_DETECT)
+               remove_proc_entry("sreset", dir_dev);
+#endif /* DBG_CONFIG_ERROR_DETECT */
+
+#ifdef CONFIG_DM_ADAPTIVITY
+               remove_proc_entry("dm_adaptivity", dir_dev);
+#endif
+
+               remove_proc_entry(dev->name, rtw_proc);
+               dir_dev = NULL;
+
+       }
+       else
+       {
+               return;
+       }
+
+       rtw_proc_cnt--;
+
+       if(rtw_proc_cnt == 0)
+       {
+               if(rtw_proc){
+                       remove_proc_entry("ver_info", rtw_proc);
+
+                       remove_proc_entry("log_level", rtw_proc);
+                       #ifdef DBG_MEM_ALLOC
+                       remove_proc_entry("mstat", rtw_proc);
+                       #endif /* DBG_MEM_ALLOC */
+#if(LINUX_VERSION_CODE < KERNEL_VERSION(2,6,24))
+                       remove_proc_entry(rtw_proc_name, proc_net);
+#else
+                       remove_proc_entry(rtw_proc_name, init_net.proc_net);
+#endif
+                       rtw_proc = NULL;
+               }
+       }
+}
+#endif
+
+uint loadparam( _adapter *padapter,  _nic_hdl  pnetdev);
+uint loadparam( _adapter *padapter,  _nic_hdl  pnetdev)
+{
+
+       uint status = _SUCCESS;
+       struct registry_priv  *registry_par = &padapter->registrypriv;
+
+_func_enter_;
+
+       registry_par->chip_version = (u8)rtw_chip_version;
+       registry_par->rfintfs = (u8)rtw_rfintfs;
+       registry_par->lbkmode = (u8)rtw_lbkmode;
+       //registry_par->hci = (u8)hci;
+       registry_par->network_mode  = (u8)rtw_network_mode;
+
+       _rtw_memcpy(registry_par->ssid.Ssid, "ANY", 3);
+       registry_par->ssid.SsidLength = 3;
+
+       registry_par->channel = (u8)rtw_channel;
+       registry_par->wireless_mode = (u8)rtw_wireless_mode;
+       registry_par->vrtl_carrier_sense = (u8)rtw_vrtl_carrier_sense ;
+       registry_par->vcs_type = (u8)rtw_vcs_type;
+       registry_par->rts_thresh=(u16)rtw_rts_thresh;
+       registry_par->frag_thresh=(u16)rtw_frag_thresh;
+       registry_par->preamble = (u8)rtw_preamble;
+       registry_par->scan_mode = (u8)rtw_scan_mode;
+       registry_par->adhoc_tx_pwr = (u8)rtw_adhoc_tx_pwr;
+       registry_par->soft_ap=  (u8)rtw_soft_ap;
+       //registry_par->smart_ps =  (u8)rtw_smart_ps;
+       registry_par->power_mgnt = (u8)rtw_power_mgnt;
+       registry_par->ips_mode = (u8)rtw_ips_mode;
+       registry_par->radio_enable = (u8)rtw_radio_enable;
+       registry_par->long_retry_lmt = (u8)rtw_long_retry_lmt;
+       registry_par->short_retry_lmt = (u8)rtw_short_retry_lmt;
+       registry_par->busy_thresh = (u16)rtw_busy_thresh;
+       //registry_par->qos_enable = (u8)rtw_qos_enable;
+       registry_par->ack_policy = (u8)rtw_ack_policy;
+       registry_par->mp_mode = (u8)rtw_mp_mode;
+       registry_par->software_encrypt = (u8)rtw_software_encrypt;
+       registry_par->software_decrypt = (u8)rtw_software_decrypt;
+
+       registry_par->acm_method = (u8)rtw_acm_method;
+
+        //UAPSD
+       registry_par->wmm_enable = (u8)rtw_wmm_enable;
+       registry_par->uapsd_enable = (u8)rtw_uapsd_enable;
+       registry_par->uapsd_max_sp = (u8)rtw_uapsd_max_sp;
+       registry_par->uapsd_acbk_en = (u8)rtw_uapsd_acbk_en;
+       registry_par->uapsd_acbe_en = (u8)rtw_uapsd_acbe_en;
+       registry_par->uapsd_acvi_en = (u8)rtw_uapsd_acvi_en;
+       registry_par->uapsd_acvo_en = (u8)rtw_uapsd_acvo_en;
+
+#ifdef CONFIG_80211N_HT
+       registry_par->ht_enable = (u8)rtw_ht_enable;
+       registry_par->cbw40_enable = (u8)rtw_cbw40_enable;
+       registry_par->ampdu_enable = (u8)rtw_ampdu_enable;
+       registry_par->rx_stbc = (u8)rtw_rx_stbc;
+       registry_par->ampdu_amsdu = (u8)rtw_ampdu_amsdu;
+#endif
+
+       registry_par->lowrate_two_xmit = (u8)rtw_lowrate_two_xmit;
+       registry_par->rf_config = (u8)rtw_rf_config;
+       registry_par->low_power = (u8)rtw_low_power;
+
+
+       registry_par->wifi_spec = (u8)rtw_wifi_spec;
+       registry_par->special_rf_path = (u8)rtw_special_rf_path;
+       registry_par->channel_plan = (u8)rtw_channel_plan;
+
+#ifdef CONFIG_BT_COEXIST
+       registry_par->bt_iso = (u8)rtw_bt_iso;
+       registry_par->bt_sco = (u8)rtw_bt_sco;
+       registry_par->bt_ampdu = (u8)rtw_bt_ampdu;
+#endif
+       registry_par->bAcceptAddbaReq = (u8)rtw_AcceptAddbaReq;
+
+       registry_par->antdiv_cfg = (u8)rtw_antdiv_cfg;
+
+#ifdef CONFIG_AUTOSUSPEND
+       registry_par->usbss_enable = (u8)rtw_enusbss;//0:disable,1:enable
+#endif
+#ifdef SUPPORT_HW_RFOFF_DETECTED
+       registry_par->hwpdn_mode = (u8)rtw_hwpdn_mode;//0:disable,1:enable,2:by EFUSE config
+       registry_par->hwpwrp_detect = (u8)rtw_hwpwrp_detect;//0:disable,1:enable
+#endif
+
+       registry_par->hw_wps_pbc = (u8)rtw_hw_wps_pbc;
+
+#ifdef CONFIG_ADAPTOR_INFO_CACHING_FILE
+       snprintf(registry_par->adaptor_info_caching_file_path, PATH_LENGTH_MAX, "%s", rtw_adaptor_info_caching_file_path);
+       registry_par->adaptor_info_caching_file_path[PATH_LENGTH_MAX-1]=0;
+#endif
+
+#ifdef CONFIG_LAYER2_ROAMING
+       registry_par->max_roaming_times = (u8)rtw_max_roaming_times;
+#ifdef CONFIG_INTEL_WIDI
+       registry_par->max_roaming_times = (u8)rtw_max_roaming_times + 2;
+#endif // CONFIG_INTEL_WIDI
+#endif
+
+#ifdef CONFIG_IOL
+       registry_par->force_iol = rtw_force_iol;
+#endif
+
+       registry_par->mac_phy_mode = rtw_mac_phy_mode;
+
+#ifdef CONFIG_80211D
+       registry_par->enable80211d = (u8)rtw_80211d;
+#endif
+
+       snprintf(registry_par->ifname, 16, "%s", ifname);
+       snprintf(registry_par->if2name, 16, "%s", if2name);
+
+       registry_par->notch_filter = (u8)rtw_notch_filter;
+
+#ifdef CONFIG_MULTI_VIR_IFACES
+       registry_par->ext_iface_num = (u8)rtw_ext_iface_num;
+#endif //CONFIG_MULTI_VIR_IFACES
+
+_func_exit_;
+
+       return status;
+}
+
+static int rtw_net_set_mac_address(struct net_device *pnetdev, void *p)
+{
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(pnetdev);
+       struct sockaddr *addr = p;
+
+       if(padapter->bup == _FALSE)
+       {
+               //DBG_871X("r8711_net_set_mac_address(), MAC=%x:%x:%x:%x:%x:%x\n", addr->sa_data[0], addr->sa_data[1], addr->sa_data[2], addr->sa_data[3],
+               //addr->sa_data[4], addr->sa_data[5]);
+               _rtw_memcpy(padapter->eeprompriv.mac_addr, addr->sa_data, ETH_ALEN);
+               //_rtw_memcpy(pnetdev->dev_addr, addr->sa_data, ETH_ALEN);
+               //padapter->bset_hwaddr = _TRUE;
+       }
+
+       return 0;
+}
+
+static struct net_device_stats *rtw_net_get_stats(struct net_device *pnetdev)
+{
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(pnetdev);
+       struct xmit_priv *pxmitpriv = &(padapter->xmitpriv);
+       struct recv_priv *precvpriv = &(padapter->recvpriv);
+
+       padapter->stats.tx_packets = pxmitpriv->tx_pkts;//pxmitpriv->tx_pkts++;
+       padapter->stats.rx_packets = precvpriv->rx_pkts;//precvpriv->rx_pkts++;
+       padapter->stats.tx_dropped = pxmitpriv->tx_drop;
+       padapter->stats.rx_dropped = precvpriv->rx_drop;
+       padapter->stats.tx_bytes = pxmitpriv->tx_bytes;
+       padapter->stats.rx_bytes = precvpriv->rx_bytes;
+
+       return &padapter->stats;
+}
+
+#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,35))
+/*
+ * AC to queue mapping
+ *
+ * AC_VO -> queue 0
+ * AC_VI -> queue 1
+ * AC_BE -> queue 2
+ * AC_BK -> queue 3
+ */
+static const u16 rtw_1d_to_queue[8] = { 2, 3, 3, 2, 1, 1, 0, 0 };
+
+/* Given a data frame determine the 802.1p/1d tag to use. */
+unsigned int rtw_classify8021d(struct sk_buff *skb)
+{
+       unsigned int dscp;
+
+       /* skb->priority values from 256->263 are magic values to
+        * directly indicate a specific 802.1d priority.  This is used
+        * to allow 802.1d priority to be passed directly in from VLAN
+        * tags, etc.
+        */
+       if (skb->priority >= 256 && skb->priority <= 263)
+               return skb->priority - 256;
+
+       switch (skb->protocol) {
+       case htons(ETH_P_IP):
+               dscp = ip_hdr(skb)->tos & 0xfc;
+               break;
+       default:
+               return 0;
+       }
+
+       return dscp >> 5;
+}
+
+static u16 rtw_select_queue(struct net_device *dev, struct sk_buff *skb,
+                           void  *accel_priv, select_queue_fallback_t fallback)
+{
+       _adapter        *padapter = rtw_netdev_priv(dev);
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+
+       skb->priority = rtw_classify8021d(skb);
+
+       if(pmlmepriv->acm_mask != 0)
+       {
+               skb->priority = qos_acm(pmlmepriv->acm_mask, skb->priority);
+       }
+
+       return rtw_1d_to_queue[skb->priority];
+}
+
+u16 rtw_recv_select_queue(struct sk_buff *skb)
+{
+       struct iphdr *piphdr;
+       unsigned int dscp;
+       u16     eth_type;
+       u32 priority;
+       u8 *pdata = skb->data;
+
+       _rtw_memcpy(&eth_type, pdata+(ETH_ALEN<<1), 2);
+
+       switch (eth_type) {
+               case htons(ETH_P_IP):
+
+                       piphdr = (struct iphdr *)(pdata+ETH_HLEN);
+
+                       dscp = piphdr->tos & 0xfc;
+
+                       priority = dscp >> 5;
+
+                       break;
+               default:
+                       priority = 0;
+       }
+
+       return rtw_1d_to_queue[priority];
+
+}
+
+#endif
+
+#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,29))
+static const struct net_device_ops rtw_netdev_ops = {
+       .ndo_open = netdev_open,
+       .ndo_stop = netdev_close,
+       .ndo_start_xmit = rtw_xmit_entry,
+#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,35))
+       .ndo_select_queue       = rtw_select_queue,
+#endif
+       .ndo_set_mac_address = rtw_net_set_mac_address,
+       .ndo_get_stats = rtw_net_get_stats,
+       .ndo_do_ioctl = rtw_ioctl,
+};
+#endif
+
+int rtw_init_netdev_name(struct net_device *pnetdev, const char *ifname)
+{
+       _adapter *padapter = rtw_netdev_priv(pnetdev);
+
+#ifdef CONFIG_EASY_REPLACEMENT
+       struct net_device       *TargetNetdev = NULL;
+       _adapter                        *TargetAdapter = NULL;
+       struct net              *devnet = NULL;
+
+       if(padapter->bDongle == 1)
+       {
+#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,24))
+               TargetNetdev = dev_get_by_name("wlan0");
+#else
+       #if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,26))
+               devnet = pnetdev->nd_net;
+       #else
+               devnet = dev_net(pnetdev);
+       #endif
+               TargetNetdev = dev_get_by_name(devnet, "wlan0");
+#endif
+               if(TargetNetdev) {
+                       DBG_871X("Force onboard module driver disappear !!!\n");
+                       TargetAdapter = rtw_netdev_priv(TargetNetdev);
+                       TargetAdapter->DriverState = DRIVER_DISAPPEAR;
+
+                       padapter->pid[0] = TargetAdapter->pid[0];
+                       padapter->pid[1] = TargetAdapter->pid[1];
+                       padapter->pid[2] = TargetAdapter->pid[2];
+
+                       dev_put(TargetNetdev);
+                       unregister_netdev(TargetNetdev);
+
+                       if(TargetAdapter->chip_type == padapter->chip_type)
+                               rtw_proc_remove_one(TargetNetdev);
+
+                       padapter->DriverState = DRIVER_REPLACE_DONGLE;
+               }
+       }
+#endif //CONFIG_EASY_REPLACEMENT
+
+       if(dev_alloc_name(pnetdev, ifname) < 0)
+       {
+               RT_TRACE(_module_os_intfs_c_,_drv_err_,("dev_alloc_name, fail! \n"));
+       }
+
+       netif_carrier_off(pnetdev);
+       //rtw_netif_stop_queue(pnetdev);
+
+       return 0;
+}
+
+struct net_device *rtw_init_netdev(_adapter *old_padapter)
+{
+       _adapter *padapter;
+       struct net_device *pnetdev;
+
+       RT_TRACE(_module_os_intfs_c_,_drv_info_,("+init_net_dev\n"));
+
+       if(old_padapter != NULL)
+               pnetdev = rtw_alloc_etherdev_with_old_priv(sizeof(_adapter), (void *)old_padapter);
+       else
+               pnetdev = rtw_alloc_etherdev(sizeof(_adapter));
+
+       if (!pnetdev)
+               return NULL;
+
+       padapter = rtw_netdev_priv(pnetdev);
+       padapter->pnetdev = pnetdev;
+
+#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,24)
+       SET_MODULE_OWNER(pnetdev);
+#endif
+
+       //pnetdev->init = NULL;
+
+#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,29))
+       DBG_871X("register rtw_netdev_ops to netdev_ops\n");
+       pnetdev->netdev_ops = &rtw_netdev_ops;
+#else
+       pnetdev->open = netdev_open;
+       pnetdev->stop = netdev_close;
+       pnetdev->hard_start_xmit = rtw_xmit_entry;
+       pnetdev->set_mac_address = rtw_net_set_mac_address;
+       pnetdev->get_stats = rtw_net_get_stats;
+       pnetdev->do_ioctl = rtw_ioctl;
+#endif
+
+
+#ifdef CONFIG_TCP_CSUM_OFFLOAD_TX
+       pnetdev->features |= NETIF_F_IP_CSUM;
+#endif
+       //pnetdev->tx_timeout = NULL;
+       pnetdev->watchdog_timeo = HZ*3; /* 3 second timeout */
+#ifdef CONFIG_WIRELESS_EXT
+       pnetdev->wireless_handlers = (struct iw_handler_def *)&rtw_handlers_def;
+#endif
+
+#ifdef WIRELESS_SPY
+       //priv->wireless_data.spy_data = &priv->spy_data;
+       //pnetdev->wireless_data = &priv->wireless_data;
+#endif
+
+       //step 2.
+       loadparam(padapter, pnetdev);
+
+       return pnetdev;
+
+}
+
+void rtw_unregister_netdevs(struct dvobj_priv *dvobj)
+{
+       int i;
+       _adapter *padapter = NULL;
+
+       for (i=0;i<dvobj->iface_nums;i++) {
+               struct net_device *pnetdev = NULL;
+
+               padapter = dvobj->padapters[i];
+
+               if (padapter == NULL)
+                       continue;
+
+               pnetdev = padapter->pnetdev;
+
+               if((padapter->DriverState != DRIVER_DISAPPEAR) && pnetdev) {
+                       unregister_netdev(pnetdev); //will call netdev_close()
+                       rtw_proc_remove_one(pnetdev);
+               }
+
+               #ifdef CONFIG_IOCTL_CFG80211
+               rtw_wdev_unregister(padapter->rtw_wdev);
+               #endif
+       }
+
+}
+
+u32 rtw_start_drv_threads(_adapter *padapter)
+{
+
+       u32 _status = _SUCCESS;
+
+       RT_TRACE(_module_os_intfs_c_,_drv_info_,("+rtw_start_drv_threads\n"));
+#ifdef CONFIG_XMIT_THREAD_MODE
+       padapter->xmitThread = kthread_run(rtw_xmit_thread, padapter, "RTW_XMIT_THREAD");
+       if(IS_ERR(padapter->xmitThread))
+               _status = _FAIL;
+#endif
+
+#ifdef CONFIG_RECV_THREAD_MODE
+       padapter->recvThread = kthread_run(rtw_recv_thread, padapter, "RTW_RECV_THREAD");
+       if(IS_ERR(padapter->recvThread))
+               _status = _FAIL;
+#endif
+
+#ifdef CONFIG_CONCURRENT_MODE
+       if(padapter->isprimary == _TRUE)
+#endif //CONFIG_CONCURRENT_MODE
+       {
+               padapter->cmdThread = kthread_run(rtw_cmd_thread, padapter, "RTW_CMD_THREAD");
+               if(IS_ERR(padapter->cmdThread))
+                       _status = _FAIL;
+               else
+                       _rtw_down_sema(&padapter->cmdpriv.terminate_cmdthread_sema); //wait for cmd_thread to run
+       }
+
+
+#ifdef CONFIG_EVENT_THREAD_MODE
+       padapter->evtThread = kthread_run(event_thread, padapter, "RTW_EVENT_THREAD");
+       if(IS_ERR(padapter->evtThread))
+               _status = _FAIL;
+#endif
+
+       return _status;
+
+}
+
+void rtw_stop_drv_threads (_adapter *padapter)
+{
+       RT_TRACE(_module_os_intfs_c_,_drv_info_,("+rtw_stop_drv_threads\n"));
+
+#ifdef CONFIG_CONCURRENT_MODE
+       if(padapter->isprimary == _TRUE)
+#endif //CONFIG_CONCURRENT_MODE
+       {
+               rtw_stop_cmd_thread(padapter);
+       }
+
+#ifdef CONFIG_EVENT_THREAD_MODE
+        _rtw_up_sema(&padapter->evtpriv.evt_notify);
+       if(padapter->evtThread){
+               _rtw_down_sema(&padapter->evtpriv.terminate_evtthread_sema);
+       }
+#endif
+
+#ifdef CONFIG_XMIT_THREAD_MODE
+       // Below is to termindate tx_thread...
+       _rtw_up_sema(&padapter->xmitpriv.xmit_sema);
+       _rtw_down_sema(&padapter->xmitpriv.terminate_xmitthread_sema);
+       RT_TRACE(_module_os_intfs_c_,_drv_info_,("\n drv_halt: rtw_xmit_thread can be terminated ! \n"));
+#endif
+
+#ifdef CONFIG_RECV_THREAD_MODE
+       // Below is to termindate rx_thread...
+       _rtw_up_sema(&padapter->recvpriv.recv_sema);
+       _rtw_down_sema(&padapter->recvpriv.terminate_recvthread_sema);
+       RT_TRACE(_module_os_intfs_c_,_drv_info_,("\n drv_halt:recv_thread can be terminated! \n"));
+#endif
+
+
+}
+
+u8 rtw_init_default_value(_adapter *padapter);
+u8 rtw_init_default_value(_adapter *padapter)
+{
+       u8 ret  = _SUCCESS;
+       struct registry_priv* pregistrypriv = &padapter->registrypriv;
+       struct xmit_priv        *pxmitpriv = &padapter->xmitpriv;
+       struct mlme_priv *pmlmepriv= &padapter->mlmepriv;
+       struct security_priv *psecuritypriv = &padapter->securitypriv;
+
+       //xmit_priv
+       pxmitpriv->vcs_setting = pregistrypriv->vrtl_carrier_sense;
+       pxmitpriv->vcs = pregistrypriv->vcs_type;
+       pxmitpriv->vcs_type = pregistrypriv->vcs_type;
+       //pxmitpriv->rts_thresh = pregistrypriv->rts_thresh;
+       pxmitpriv->frag_len = pregistrypriv->frag_thresh;
+
+
+
+       //recv_priv
+
+
+       //mlme_priv
+       pmlmepriv->scan_interval = SCAN_INTERVAL;// 30*2 sec = 60sec
+       pmlmepriv->scan_mode = SCAN_ACTIVE;
+
+       //qos_priv
+       //pmlmepriv->qospriv.qos_option = pregistrypriv->wmm_enable;
+
+       //ht_priv
+#ifdef CONFIG_80211N_HT
+       pmlmepriv->htpriv.ampdu_enable = _FALSE;//set to disabled
+#endif
+
+       //security_priv
+       //rtw_get_encrypt_decrypt_from_registrypriv(padapter);
+       psecuritypriv->binstallGrpkey = _FAIL;
+       psecuritypriv->sw_encrypt=pregistrypriv->software_encrypt;
+       psecuritypriv->sw_decrypt=pregistrypriv->software_decrypt;
+
+       psecuritypriv->dot11AuthAlgrthm = dot11AuthAlgrthm_Open; //open system
+       psecuritypriv->dot11PrivacyAlgrthm = _NO_PRIVACY_;
+
+       psecuritypriv->dot11PrivacyKeyIndex = 0;
+
+       psecuritypriv->dot118021XGrpPrivacy = _NO_PRIVACY_;
+       psecuritypriv->dot118021XGrpKeyid = 1;
+
+       psecuritypriv->ndisauthtype = Ndis802_11AuthModeOpen;
+       psecuritypriv->ndisencryptstatus = Ndis802_11WEPDisabled;
+
+
+       //pwrctrl_priv
+
+
+       //registry_priv
+       rtw_init_registrypriv_dev_network(padapter);
+       rtw_update_registrypriv_dev_network(padapter);
+
+
+       //hal_priv
+       rtw_hal_def_value_init(padapter);
+
+       //misc.
+       padapter->bReadPortCancel = _FALSE;
+       padapter->bWritePortCancel = _FALSE;
+       padapter->bRxRSSIDisplay = 0;
+       padapter->bForceWriteInitGain = 1;
+       padapter->bNotifyChannelChange = 0;
+#ifdef CONFIG_P2P
+       padapter->bShowGetP2PState = 1;
+#endif
+       return ret;
+}
+
+struct dvobj_priv *devobj_init(void)
+{
+       struct dvobj_priv *pdvobj = NULL;
+
+       if ((pdvobj = (struct dvobj_priv*)rtw_zmalloc(sizeof(*pdvobj))) == NULL)
+               return NULL;
+
+       _rtw_mutex_init(&pdvobj->hw_init_mutex);
+       _rtw_mutex_init(&pdvobj->h2c_fwcmd_mutex);
+       _rtw_mutex_init(&pdvobj->setch_mutex);
+       _rtw_mutex_init(&pdvobj->setbw_mutex);
+
+       pdvobj->processing_dev_remove = _FALSE;
+
+       return pdvobj;
+}
+
+void devobj_deinit(struct dvobj_priv *pdvobj)
+{
+       if(!pdvobj)
+               return;
+
+       _rtw_mutex_free(&pdvobj->hw_init_mutex);
+       _rtw_mutex_free(&pdvobj->h2c_fwcmd_mutex);
+       _rtw_mutex_free(&pdvobj->setch_mutex);
+       _rtw_mutex_free(&pdvobj->setbw_mutex);
+
+       rtw_mfree((u8*)pdvobj, sizeof(*pdvobj));
+}
+
+u8 rtw_reset_drv_sw(_adapter *padapter)
+{
+       u8      ret8=_SUCCESS;
+       struct mlme_priv *pmlmepriv= &padapter->mlmepriv;
+       struct pwrctrl_priv *pwrctrlpriv = &padapter->pwrctrlpriv;
+
+       //hal_priv
+       rtw_hal_def_value_init(padapter);
+       padapter->bReadPortCancel = _FALSE;
+       padapter->bWritePortCancel = _FALSE;
+       padapter->bRxRSSIDisplay = 0;
+       pmlmepriv->scan_interval = SCAN_INTERVAL;// 30*2 sec = 60sec
+
+       pwrctrlpriv->bips_processing = _FALSE;
+       pwrctrlpriv->rf_pwrstate = rf_on;
+
+       padapter->xmitpriv.tx_pkts = 0;
+       padapter->recvpriv.rx_pkts = 0;
+
+       pmlmepriv->LinkDetectInfo.bBusyTraffic = _FALSE;
+
+       _clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY |_FW_UNDER_LINKING);
+
+#ifdef CONFIG_AUTOSUSPEND
+       #if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,22) && LINUX_VERSION_CODE<=KERNEL_VERSION(2,6,34))
+               adapter_to_dvobj(padapter)->pusbdev->autosuspend_disabled = 1;//autosuspend disabled by the user
+       #endif
+#endif
+
+#ifdef DBG_CONFIG_ERROR_DETECT
+       rtw_hal_sreset_reset_value(padapter);
+#endif
+       pwrctrlpriv->pwr_state_check_cnts = 0;
+
+       //mlmeextpriv
+       padapter->mlmeextpriv.sitesurvey_res.state= SCAN_DISABLE;
+
+#ifdef CONFIG_NEW_SIGNAL_STAT_PROCESS
+       rtw_set_signal_stat_timer(&padapter->recvpriv);
+#endif
+
+       return ret8;
+}
+
+
+u8 rtw_init_drv_sw(_adapter *padapter)
+{
+
+       u8      ret8=_SUCCESS;
+
+_func_enter_;
+
+       RT_TRACE(_module_os_intfs_c_,_drv_info_,("+rtw_init_drv_sw\n"));
+
+       if ((rtw_init_cmd_priv(&padapter->cmdpriv)) == _FAIL)
+       {
+               RT_TRACE(_module_os_intfs_c_,_drv_err_,("\n Can't init cmd_priv\n"));
+               ret8=_FAIL;
+               goto exit;
+       }
+
+       padapter->cmdpriv.padapter=padapter;
+
+       if ((rtw_init_evt_priv(&padapter->evtpriv)) == _FAIL)
+       {
+               RT_TRACE(_module_os_intfs_c_,_drv_err_,("\n Can't init evt_priv\n"));
+               ret8=_FAIL;
+               goto exit;
+       }
+
+
+       if (rtw_init_mlme_priv(padapter) == _FAIL)
+       {
+               RT_TRACE(_module_os_intfs_c_,_drv_err_,("\n Can't init mlme_priv\n"));
+               ret8=_FAIL;
+               goto exit;
+       }
+
+#ifdef CONFIG_P2P
+       rtw_init_wifidirect_timers(padapter);
+       init_wifidirect_info(padapter, P2P_ROLE_DISABLE);
+       reset_global_wifidirect_info(padapter);
+       #ifdef CONFIG_IOCTL_CFG80211
+       rtw_init_cfg80211_wifidirect_info(padapter);
+       #endif
+#ifdef CONFIG_WFD
+       if(rtw_init_wifi_display_info(padapter) == _FAIL)
+               RT_TRACE(_module_os_intfs_c_,_drv_err_,("\n Can't init init_wifi_display_info\n"));
+#endif
+#endif /* CONFIG_P2P */
+
+       if(init_mlme_ext_priv(padapter) == _FAIL)
+       {
+               RT_TRACE(_module_os_intfs_c_,_drv_err_,("\n Can't init mlme_ext_priv\n"));
+               ret8=_FAIL;
+               goto exit;
+       }
+
+#ifdef CONFIG_TDLS
+       if(rtw_init_tdls_info(padapter) == _FAIL)
+       {
+               DBG_871X("Can't rtw_init_tdls_info\n");
+               ret8=_FAIL;
+               goto exit;
+       }
+#endif //CONFIG_TDLS
+
+       if(_rtw_init_xmit_priv(&padapter->xmitpriv, padapter) == _FAIL)
+       {
+               DBG_871X("Can't _rtw_init_xmit_priv\n");
+               ret8=_FAIL;
+               goto exit;
+       }
+
+       if(_rtw_init_recv_priv(&padapter->recvpriv, padapter) == _FAIL)
+       {
+               DBG_871X("Can't _rtw_init_recv_priv\n");
+               ret8=_FAIL;
+               goto exit;
+       }
+       // add for CONFIG_IEEE80211W, none 11w also can use
+       _rtw_spinlock_init(&padapter->security_key_mutex);
+
+       // We don't need to memset padapter->XXX to zero, because adapter is allocated by rtw_zvmalloc().
+       //_rtw_memset((unsigned char *)&padapter->securitypriv, 0, sizeof (struct security_priv));
+
+       //_init_timer(&(padapter->securitypriv.tkip_timer), padapter->pifp, rtw_use_tkipkey_handler, padapter);
+
+       if(_rtw_init_sta_priv(&padapter->stapriv) == _FAIL)
+       {
+               DBG_871X("Can't _rtw_init_sta_priv\n");
+               ret8=_FAIL;
+               goto exit;
+       }
+
+       padapter->stapriv.padapter = padapter;
+       padapter->setband = GHZ24_50;
+       rtw_init_bcmc_stainfo(padapter);
+
+       rtw_init_pwrctrl_priv(padapter);
+
+       //_rtw_memset((u8 *)&padapter->qospriv, 0, sizeof (struct qos_priv));//move to mlme_priv
+
+#ifdef CONFIG_MP_INCLUDED
+       if (init_mp_priv(padapter) == _FAIL) {
+               DBG_871X("%s: initialize MP private data Fail!\n", __func__);
+       }
+#endif
+
+       ret8 = rtw_init_default_value(padapter);
+
+       rtw_hal_dm_init(padapter);
+       rtw_hal_sw_led_init(padapter);
+
+#ifdef DBG_CONFIG_ERROR_DETECT
+       rtw_hal_sreset_init(padapter);
+#endif
+
+#ifdef CONFIG_INTEL_WIDI
+       if(rtw_init_intel_widi(padapter) == _FAIL)
+       {
+               DBG_871X("Can't rtw_init_intel_widi\n");
+               ret8=_FAIL;
+               goto exit;
+       }
+#endif //CONFIG_INTEL_WIDI
+
+#ifdef CONFIG_BR_EXT
+       _rtw_spinlock_init(&padapter->br_ext_lock);
+#endif // CONFIG_BR_EXT
+
+exit:
+
+       RT_TRACE(_module_os_intfs_c_,_drv_info_,("-rtw_init_drv_sw\n"));
+
+       _func_exit_;
+
+       return ret8;
+
+}
+
+void rtw_cancel_all_timer(_adapter *padapter)
+{
+       RT_TRACE(_module_os_intfs_c_,_drv_info_,("+rtw_cancel_all_timer\n"));
+
+       _cancel_timer_ex(&padapter->mlmepriv.assoc_timer);
+       RT_TRACE(_module_os_intfs_c_,_drv_info_,("rtw_cancel_all_timer:cancel association timer complete! \n"));
+
+       //_cancel_timer_ex(&padapter->securitypriv.tkip_timer);
+       //RT_TRACE(_module_os_intfs_c_,_drv_info_,("rtw_cancel_all_timer:cancel tkip_timer! \n"));
+
+       _cancel_timer_ex(&padapter->mlmepriv.scan_to_timer);
+       RT_TRACE(_module_os_intfs_c_,_drv_info_,("rtw_cancel_all_timer:cancel scan_to_timer! \n"));
+
+       _cancel_timer_ex(&padapter->mlmepriv.dynamic_chk_timer);
+       RT_TRACE(_module_os_intfs_c_,_drv_info_,("rtw_cancel_all_timer:cancel dynamic_chk_timer! \n"));
+
+       // cancel sw led timer
+       rtw_hal_sw_led_deinit(padapter);
+       RT_TRACE(_module_os_intfs_c_,_drv_info_,("rtw_cancel_all_timer:cancel DeInitSwLeds! \n"));
+
+       _cancel_timer_ex(&padapter->pwrctrlpriv.pwr_state_check_timer);
+
+#ifdef CONFIG_IOCTL_CFG80211
+#ifdef CONFIG_P2P
+       _cancel_timer_ex(&padapter->cfg80211_wdinfo.remain_on_ch_timer);
+#endif //CONFIG_P2P
+#endif //CONFIG_IOCTL_CFG80211
+
+#ifdef CONFIG_SET_SCAN_DENY_TIMER
+       _cancel_timer_ex(&padapter->mlmepriv.set_scan_deny_timer);
+       rtw_clear_scan_deny(padapter);
+       RT_TRACE(_module_os_intfs_c_,_drv_info_,("rtw_cancel_all_timer:cancel set_scan_deny_timer! \n"));
+#endif
+
+#ifdef CONFIG_NEW_SIGNAL_STAT_PROCESS
+       _cancel_timer_ex(&padapter->recvpriv.signal_stat_timer);
+#endif
+
+       // cancel dm  timer
+       rtw_hal_dm_deinit(padapter);
+
+#ifdef CONFIG_PLATFORM_FS_MX61
+       msleep(50);
+#endif
+}
+
+u8 rtw_free_drv_sw(_adapter *padapter)
+{
+       RT_TRACE(_module_os_intfs_c_,_drv_info_,("==>rtw_free_drv_sw"));
+
+
+       //we can call rtw_p2p_enable here, but:
+       // 1. rtw_p2p_enable may have IO operation
+       // 2. rtw_p2p_enable is bundled with wext interface
+       #ifdef CONFIG_P2P
+       {
+               struct wifidirect_info *pwdinfo = &padapter->wdinfo;
+               if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+               {
+                       _cancel_timer_ex( &pwdinfo->find_phase_timer );
+                       _cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
+                       _cancel_timer_ex( &pwdinfo->pre_tx_scan_timer);
+#ifdef CONFIG_CONCURRENT_MODE
+                       _cancel_timer_ex( &pwdinfo->ap_p2p_switch_timer );
+#endif // CONFIG_CONCURRENT_MODE
+                       rtw_p2p_set_state(pwdinfo, P2P_STATE_NONE);
+               }
+       }
+       #endif
+       // add for CONFIG_IEEE80211W, none 11w also can use
+       _rtw_spinlock_free(&padapter->security_key_mutex);
+
+#ifdef CONFIG_BR_EXT
+       _rtw_spinlock_free(&padapter->br_ext_lock);
+#endif // CONFIG_BR_EXT
+
+#ifdef CONFIG_INTEL_WIDI
+       rtw_free_intel_widi(padapter);
+#endif //CONFIG_INTEL_WIDI
+
+       free_mlme_ext_priv(&padapter->mlmeextpriv);
+
+#ifdef CONFIG_TDLS
+       //rtw_free_tdls_info(&padapter->tdlsinfo);
+#endif //CONFIG_TDLS
+
+       rtw_free_cmd_priv(&padapter->cmdpriv);
+
+       rtw_free_evt_priv(&padapter->evtpriv);
+
+       rtw_free_mlme_priv(&padapter->mlmepriv);
+
+       //free_io_queue(padapter);
+
+       _rtw_free_xmit_priv(&padapter->xmitpriv);
+
+       _rtw_free_sta_priv(&padapter->stapriv); //will free bcmc_stainfo here
+
+       _rtw_free_recv_priv(&padapter->recvpriv);
+
+       rtw_free_pwrctrl_priv(padapter);
+
+       //rtw_mfree((void *)padapter, sizeof (padapter));
+
+#ifdef CONFIG_DRVEXT_MODULE
+       free_drvext(&padapter->drvextpriv);
+#endif
+
+       rtw_hal_free_data(padapter);
+
+       RT_TRACE(_module_os_intfs_c_,_drv_info_,("<==rtw_free_drv_sw\n"));
+
+       //free the old_pnetdev
+       if(padapter->rereg_nd_name_priv.old_pnetdev) {
+               free_netdev(padapter->rereg_nd_name_priv.old_pnetdev);
+               padapter->rereg_nd_name_priv.old_pnetdev = NULL;
+       }
+
+       // clear pbuddy_adapter to avoid access wrong pointer.
+       if(padapter->pbuddy_adapter != NULL)
+       {
+               padapter->pbuddy_adapter->pbuddy_adapter = NULL;
+       }
+
+       RT_TRACE(_module_os_intfs_c_,_drv_info_,("-rtw_free_drv_sw\n"));
+
+       return _SUCCESS;
+
+}
+
+#ifdef CONFIG_CONCURRENT_MODE
+
+#ifdef CONFIG_USB_HCI
+       #include <usb_hal.h>
+#endif
+
+#ifdef CONFIG_MULTI_VIR_IFACES
+int _netdev_vir_if_open(struct net_device *pnetdev)
+{
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(pnetdev);
+       _adapter *primary_padapter = GET_PRIMARY_ADAPTER(padapter);
+
+       DBG_871X(FUNC_NDEV_FMT" enter\n", FUNC_NDEV_ARG(pnetdev));
+
+       if(!primary_padapter)
+               goto _netdev_virtual_iface_open_error;
+
+       if(primary_padapter->bup == _FALSE || primary_padapter->hw_init_completed == _FALSE)
+       {
+               _netdev_open(primary_padapter->pnetdev);
+       }
+
+       if(padapter->bup == _FALSE && primary_padapter->bup == _TRUE &&
+               primary_padapter->hw_init_completed == _TRUE)
+       {
+               int i;
+
+               padapter->bDriverStopped = _FALSE;
+               padapter->bSurpriseRemoved = _FALSE;
+               padapter->bCardDisableWOHSM = _FALSE;
+
+               _rtw_memcpy(padapter->HalData, primary_padapter->HalData, padapter->hal_data_sz);
+
+               padapter->bFWReady = primary_padapter->bFWReady;
+
+               if(rtw_start_drv_threads(padapter) == _FAIL)
+               {
+                       goto _netdev_virtual_iface_open_error;
+               }
+
+               padapter->dir_dev = NULL;
+               rtw_proc_init_one(pnetdev);
+
+#ifdef CONFIG_IOCTL_CFG80211
+               rtw_cfg80211_init_wiphy(padapter);
+#endif
+
+               padapter->bup = _TRUE;
+               padapter->hw_init_completed = _TRUE;
+
+               rtw_start_mbssid_cam(padapter);//start mbssid_cam after bup = _TRUE & hw_init_completed = _TRUE
+
+       }
+
+       padapter->net_closed = _FALSE;
+
+       _set_timer(&padapter->mlmepriv.dynamic_chk_timer, 2000);
+
+       if(!rtw_netif_queue_stopped(pnetdev))
+               rtw_netif_start_queue(pnetdev);
+       else
+               rtw_netif_wake_queue(pnetdev);
+
+
+       DBG_871X(FUNC_NDEV_FMT" exit\n", FUNC_NDEV_ARG(pnetdev));
+       return 0;
+
+_netdev_virtual_iface_open_error:
+
+       padapter->bup = _FALSE;
+
+       netif_carrier_off(pnetdev);
+       rtw_netif_stop_queue(pnetdev);
+
+       return (-1);
+
+}
+
+int netdev_vir_if_open(struct net_device *pnetdev)
+{
+       int ret;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(pnetdev);
+
+       _enter_critical_mutex(&(adapter_to_dvobj(padapter)->hw_init_mutex), NULL);
+       ret = _netdev_vir_if_open(pnetdev);
+       _exit_critical_mutex(&(adapter_to_dvobj(padapter)->hw_init_mutex), NULL);
+       return ret;
+}
+
+static int netdev_vir_if_close(struct net_device *pnetdev)
+{
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(pnetdev);
+
+       padapter->net_closed = _TRUE;
+
+       if(pnetdev)
+       {
+               if (!rtw_netif_queue_stopped(pnetdev))
+                       rtw_netif_stop_queue(pnetdev);
+       }
+
+#ifdef CONFIG_IOCTL_CFG80211
+       rtw_scan_abort(padapter);
+       wdev_to_priv(padapter->rtw_wdev)->bandroid_scan = _FALSE;
+#endif
+
+       return 0;
+}
+
+#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,29))
+static const struct net_device_ops rtw_netdev_vir_if_ops = {
+        .ndo_open = netdev_vir_if_open,
+        .ndo_stop = netdev_vir_if_close,
+        .ndo_start_xmit = rtw_xmit_entry,
+        .ndo_set_mac_address = rtw_net_set_mac_address,
+        .ndo_get_stats = rtw_net_get_stats,
+        .ndo_do_ioctl = rtw_ioctl,
+#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,35))
+       .ndo_select_queue       = rtw_select_queue,
+#endif
+};
+#endif
+
+_adapter *rtw_drv_add_vir_if(_adapter *primary_padapter, void (*set_intf_ops)(struct _io_ops *pops))
+{
+
+       int res = _FAIL;
+       struct net_device *pnetdev=NULL;
+       _adapter *padapter = NULL;
+       struct dvobj_priv *pdvobjpriv;
+       u8 mac[ETH_ALEN];
+
+/*
+       if((primary_padapter->bup == _FALSE) ||
+               (rtw_buddy_adapter_up(primary_padapter) == _FALSE))
+       {
+               goto error_rtw_drv_add_iface;
+       }
+
+*/
+       /****** init netdev ******/
+       pnetdev = rtw_init_netdev(NULL);
+       if (!pnetdev)
+               goto error_rtw_drv_add_iface;
+
+#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,29))
+       DBG_871X("register rtw_netdev_virtual_iface_ops to netdev_ops\n");
+       pnetdev->netdev_ops = &rtw_netdev_vir_if_ops;
+#else
+       pnetdev->open = netdev_vir_if_open;
+       pnetdev->stop = netdev_vir_if_close;
+#endif
+
+#ifdef CONFIG_NO_WIRELESS_HANDLERS
+       pnetdev->wireless_handlers = NULL;
+#endif
+
+       /****** init adapter ******/
+       padapter = rtw_netdev_priv(pnetdev);
+       _rtw_memcpy(padapter, primary_padapter, sizeof(_adapter));
+
+       //
+       padapter->bup = _FALSE;
+       padapter->net_closed = _TRUE;
+       padapter->hw_init_completed = _FALSE;
+
+
+       //set adapter_type/iface type
+       padapter->isprimary = _FALSE;
+       padapter->adapter_type = MAX_ADAPTER;
+       padapter->pbuddy_adapter = primary_padapter;
+#if 0
+#ifndef CONFIG_HWPORT_SWAP     //Port0 -> Pri , Port1 -> Sec
+       padapter->iface_type = IFACE_PORT1;
+#else
+       padapter->iface_type = IFACE_PORT0;
+#endif  //CONFIG_HWPORT_SWAP
+#else
+       //extended virtual interfaces always are set to port0
+       padapter->iface_type = IFACE_PORT0;
+#endif
+       //
+       padapter->pnetdev = pnetdev;
+
+       /****** setup dvobj ******/
+       pdvobjpriv = adapter_to_dvobj(padapter);
+       padapter->iface_id = pdvobjpriv->iface_nums;
+       pdvobjpriv->padapters[pdvobjpriv->iface_nums++] = padapter;
+
+       SET_NETDEV_DEV(pnetdev, dvobj_to_dev(pdvobjpriv));
+#ifdef CONFIG_IOCTL_CFG80211
+       rtw_wdev_alloc(padapter, dvobj_to_dev(pdvobjpriv));
+#endif //CONFIG_IOCTL_CFG80211
+
+       //set interface_type/chip_type/HardwareType
+       padapter->interface_type = primary_padapter->interface_type;
+       padapter->chip_type = primary_padapter->chip_type;
+       padapter->HardwareType = primary_padapter->HardwareType;
+
+       //set hal data & hal ops
+#if defined(CONFIG_RTL8192C)
+       #if defined(CONFIG_PCI_HCI)
+               rtl8192ce_set_hal_ops(padapter);
+       #elif defined(CONFIG_USB_HCI)
+               rtl8192cu_set_hal_ops(padapter);
+       #endif
+#elif defined(CONFIG_RTL8192D)
+       #if defined(CONFIG_PCI_HCI)
+               rtl8192de_set_hal_ops(padapter);
+       #elif defined(CONFIG_USB_HCI)
+               rtl8192du_set_hal_ops(padapter);
+       #endif
+#endif
+
+       padapter->HalFunc.inirp_init = NULL;
+       padapter->HalFunc.inirp_deinit = NULL;
+       padapter->intf_start = NULL;
+       padapter->intf_stop = NULL;
+
+       //step init_io_priv
+       if ((rtw_init_io_priv(padapter, set_intf_ops)) == _FAIL) {
+               RT_TRACE(_module_hci_intfs_c_,_drv_err_,(" \n Can't init io_reqs\n"));
+       }
+
+       //step read_chip_version
+       rtw_hal_read_chip_version(padapter);
+
+       //step usb endpoint mapping
+       rtw_hal_chip_configure(padapter);
+
+
+       //init drv data
+       if(rtw_init_drv_sw(padapter)!= _SUCCESS)
+               goto error_rtw_drv_add_iface;
+
+
+       //get mac address from primary_padapter
+       _rtw_memcpy(mac, primary_padapter->eeprompriv.mac_addr, ETH_ALEN);
+
+       if (((mac[0]==0xff) &&(mac[1]==0xff) && (mac[2]==0xff) &&
+            (mac[3]==0xff) && (mac[4]==0xff) &&(mac[5]==0xff)) ||
+           ((mac[0]==0x0) && (mac[1]==0x0) && (mac[2]==0x0) &&
+            (mac[3]==0x0) && (mac[4]==0x0) &&(mac[5]==0x0)))
+       {
+               mac[0] = 0x00;
+               mac[1] = 0xe0;
+               mac[2] = 0x4c;
+               mac[3] = 0x87;
+               mac[4] = 0x11;
+               mac[5] = 0x22;
+       }
+       else
+       {
+               //If the BIT1 is 0, the address is universally administered.
+               //If it is 1, the address is locally administered
+#if 1 //needs enable MBSSID CAM
+               mac[0] |= BIT(1); // locally administered
+               mac[0] |= (padapter->iface_id-1)<<4;
+#endif
+       }
+
+       _rtw_memcpy(padapter->eeprompriv.mac_addr, mac, ETH_ALEN);
+
+       padapter->dir_dev = NULL;
+
+       res = _SUCCESS;
+
+       return padapter;
+
+
+error_rtw_drv_add_iface:
+
+       if(padapter)
+               rtw_free_drv_sw(padapter);
+
+       if (pnetdev)
+               rtw_free_netdev(pnetdev);
+
+       return NULL;
+
+}
+
+void rtw_drv_stop_vir_if(_adapter *padapter)
+{
+       struct net_device *pnetdev=NULL;
+
+       if (padapter == NULL)
+               return;
+
+       pnetdev = padapter->pnetdev;
+
+       rtw_cancel_all_timer(padapter);
+
+       if(padapter->bup == _TRUE)
+       {
+               padapter->bDriverStopped = _TRUE;
+
+               #ifdef CONFIG_XMIT_ACK
+               if (padapter->xmitpriv.ack_tx)
+                       rtw_ack_tx_done(&padapter->xmitpriv, RTW_SCTX_DONE_DRV_STOP);
+               #endif
+
+               if(padapter->intf_stop)
+               {
+                       padapter->intf_stop(padapter);
+               }
+
+               rtw_stop_drv_threads(padapter);
+
+               padapter->bup = _FALSE;
+       }
+}
+
+void rtw_drv_free_vir_if(_adapter *padapter)
+{
+       struct net_device *pnetdev=NULL;
+
+       if (padapter == NULL)
+               return;
+
+       padapter->pbuddy_adapter = NULL;
+
+       pnetdev = padapter->pnetdev;
+
+#ifdef CONFIG_IOCTL_CFG80211
+       rtw_wdev_free(padapter->rtw_wdev);
+#endif //CONFIG_IOCTL_CFG80211
+
+       rtw_free_drv_sw(padapter);
+
+       rtw_free_netdev(pnetdev);
+}
+
+void rtw_drv_stop_vir_ifaces(struct dvobj_priv *dvobj)
+{
+       int i;
+       //struct dvobj_priv *dvobj = primary_padapter->dvobj;
+
+       for(i=2;i<dvobj->iface_nums;i++)
+       {
+               rtw_drv_stop_vir_if(dvobj->padapters[i]);
+       }
+}
+
+void rtw_drv_free_vir_ifaces(struct dvobj_priv *dvobj)
+{
+       int i;
+       //struct dvobj_priv *dvobj = primary_padapter->dvobj;
+
+       for(i=2;i<dvobj->iface_nums;i++)
+       {
+               rtw_drv_free_vir_if(dvobj->padapters[i]);
+       }
+}
+
+void rtw_drv_del_vir_if(_adapter *padapter)
+{
+       rtw_drv_stop_vir_if(padapter);
+       rtw_drv_free_vir_if(padapter);
+}
+
+void rtw_drv_del_vir_ifaces(_adapter *primary_padapter)
+{
+       int i;
+       struct dvobj_priv *dvobj = primary_padapter->dvobj;
+
+       for(i=2;i<dvobj->iface_nums;i++)
+       {
+               rtw_drv_del_vir_if(dvobj->padapters[i]);
+       }
+}
+#endif //CONFIG_MULTI_VIR_IFACES
+
+int _netdev_if2_open(struct net_device *pnetdev)
+{
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(pnetdev);
+       _adapter *primary_padapter = padapter->pbuddy_adapter;
+
+       DBG_871X("+871x_drv - if2_open, bup=%d\n", padapter->bup);
+
+       if(primary_padapter->bup == _FALSE || primary_padapter->hw_init_completed == _FALSE)
+       {
+               _netdev_open(primary_padapter->pnetdev);
+       }
+
+       if(padapter->bup == _FALSE && primary_padapter->bup == _TRUE &&
+               primary_padapter->hw_init_completed == _TRUE)
+       {
+               int i;
+
+               padapter->bDriverStopped = _FALSE;
+               padapter->bSurpriseRemoved = _FALSE;
+               padapter->bCardDisableWOHSM = _FALSE;
+
+               _rtw_memcpy(padapter->HalData, primary_padapter->HalData, padapter->hal_data_sz);
+
+               padapter->bFWReady = primary_padapter->bFWReady;
+
+               rtw_hal_set_hwreg(padapter, HW_VAR_DM_INIT_PWDB, NULL);
+
+               //if (init_mlme_ext_priv(padapter) == _FAIL)
+               //      goto netdev_if2_open_error;
+
+
+               if(rtw_start_drv_threads(padapter) == _FAIL)
+               {
+                       goto netdev_if2_open_error;
+               }
+
+
+               if(padapter->intf_start)
+               {
+                       padapter->intf_start(padapter);
+               }
+
+
+               padapter->hw_init_completed = _TRUE;
+
+               padapter->dir_dev = NULL;
+               rtw_proc_init_one(pnetdev);
+
+
+#ifdef CONFIG_IOCTL_CFG80211
+               rtw_cfg80211_init_wiphy(padapter);
+#endif
+
+               padapter->bup = _TRUE;
+
+       }
+
+       padapter->net_closed = _FALSE;
+
+       _set_timer(&padapter->mlmepriv.dynamic_chk_timer, 2000);
+
+       if(!rtw_netif_queue_stopped(pnetdev))
+               rtw_netif_start_queue(pnetdev);
+       else
+               rtw_netif_wake_queue(pnetdev);
+
+       DBG_871X("-871x_drv - if2_open, bup=%d\n", padapter->bup);
+       return 0;
+
+netdev_if2_open_error:
+
+       padapter->bup = _FALSE;
+
+       netif_carrier_off(pnetdev);
+       rtw_netif_stop_queue(pnetdev);
+
+       return (-1);
+
+}
+
+int netdev_if2_open(struct net_device *pnetdev)
+{
+       int ret;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(pnetdev);
+
+       _enter_critical_mutex(&(adapter_to_dvobj(padapter)->hw_init_mutex), NULL);
+       ret = _netdev_if2_open(pnetdev);
+       _exit_critical_mutex(&(adapter_to_dvobj(padapter)->hw_init_mutex), NULL);
+       return ret;
+}
+
+static int netdev_if2_close(struct net_device *pnetdev)
+{
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(pnetdev);
+
+       padapter->net_closed = _TRUE;
+
+       if(pnetdev)
+       {
+               if (!rtw_netif_queue_stopped(pnetdev))
+                       rtw_netif_stop_queue(pnetdev);
+       }
+
+#ifdef CONFIG_IOCTL_CFG80211
+       rtw_scan_abort(padapter);
+       wdev_to_priv(padapter->rtw_wdev)->bandroid_scan = _FALSE;
+#endif
+
+       return 0;
+}
+
+#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,29))
+static const struct net_device_ops rtw_netdev_if2_ops = {
+       .ndo_open = netdev_if2_open,
+        .ndo_stop = netdev_if2_close,
+        .ndo_start_xmit = rtw_xmit_entry,
+        .ndo_set_mac_address = rtw_net_set_mac_address,
+        .ndo_get_stats = rtw_net_get_stats,
+        .ndo_do_ioctl = rtw_ioctl,
+#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,35))
+       .ndo_select_queue       = rtw_select_queue,
+#endif
+};
+#endif
+
+_adapter *rtw_drv_if2_init(_adapter *primary_padapter, void (*set_intf_ops)(struct _io_ops *pops))
+{
+       int res = _FAIL;
+       struct net_device *pnetdev =  NULL;
+       _adapter *padapter = NULL;
+       struct dvobj_priv *pdvobjpriv;
+       u8 mac[ETH_ALEN];
+
+       /****** init netdev ******/
+       pnetdev = rtw_init_netdev(NULL);
+       if (!pnetdev)
+               goto error_rtw_drv_if2_init;
+
+#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,29))
+       DBG_871X("register rtw_netdev_if2_ops to netdev_ops\n");
+       pnetdev->netdev_ops = &rtw_netdev_if2_ops;
+#else
+       pnetdev->open = netdev_if2_open;
+       pnetdev->stop = netdev_if2_close;
+#endif
+
+#ifdef CONFIG_NO_WIRELESS_HANDLERS
+       pnetdev->wireless_handlers = NULL;
+#endif
+
+       /****** init adapter ******/
+       padapter = rtw_netdev_priv(pnetdev);
+       _rtw_memcpy(padapter, primary_padapter, sizeof(_adapter));
+
+       //
+       padapter->bup = _FALSE;
+       padapter->net_closed = _TRUE;
+       padapter->hw_init_completed = _FALSE;
+
+       //set adapter_type/iface type
+       padapter->isprimary = _FALSE;
+       padapter->adapter_type = SECONDARY_ADAPTER;
+       padapter->pbuddy_adapter = primary_padapter;
+        padapter->iface_id = IFACE_ID1;
+#ifndef CONFIG_HWPORT_SWAP                     //Port0 -> Pri , Port1 -> Sec
+       padapter->iface_type = IFACE_PORT1;
+#else
+       padapter->iface_type = IFACE_PORT0;
+#endif  //CONFIG_HWPORT_SWAP
+       //
+       padapter->pnetdev = pnetdev;
+
+       /****** setup dvobj ******/
+       pdvobjpriv = adapter_to_dvobj(padapter);
+       pdvobjpriv->if2 = padapter;
+       pdvobjpriv->padapters[pdvobjpriv->iface_nums++] = padapter;
+
+       SET_NETDEV_DEV(pnetdev, dvobj_to_dev(pdvobjpriv));
+       #ifdef CONFIG_IOCTL_CFG80211
+       rtw_wdev_alloc(padapter, dvobj_to_dev(pdvobjpriv));
+       #endif //CONFIG_IOCTL_CFG80211
+
+       //set interface_type/chip_type/HardwareType
+       padapter->interface_type = primary_padapter->interface_type;
+       padapter->chip_type = primary_padapter->chip_type;
+       padapter->HardwareType = primary_padapter->HardwareType;
+
+       //set hal data & hal ops
+#if defined(CONFIG_RTL8192C)
+       #if defined(CONFIG_PCI_HCI)
+               rtl8192ce_set_hal_ops(padapter);
+       #elif defined(CONFIG_USB_HCI)
+               rtl8192cu_set_hal_ops(padapter);
+       #endif
+#elif defined(CONFIG_RTL8192D)
+       #if defined(CONFIG_PCI_HCI)
+               rtl8192de_set_hal_ops(padapter);
+       #elif defined(CONFIG_USB_HCI)
+               rtl8192du_set_hal_ops(padapter);
+       #endif
+#endif
+
+       padapter->HalFunc.inirp_init = NULL;
+       padapter->HalFunc.inirp_deinit = NULL;
+
+       //
+       padapter->intf_start = primary_padapter->intf_start;
+       padapter->intf_stop = primary_padapter->intf_stop;
+
+       //step init_io_priv
+       if ((rtw_init_io_priv(padapter, set_intf_ops)) == _FAIL) {
+               RT_TRACE(_module_hci_intfs_c_,_drv_err_,(" \n Can't init io_reqs\n"));
+       }
+
+       //step read_chip_version
+       rtw_hal_read_chip_version(padapter);
+
+       //step usb endpoint mapping
+       rtw_hal_chip_configure(padapter);
+
+
+       //init drv data
+       if(rtw_init_drv_sw(padapter)!= _SUCCESS)
+               goto error_rtw_drv_if2_init;
+
+       //get mac address from primary_padapter
+       _rtw_memcpy(mac, primary_padapter->eeprompriv.mac_addr, ETH_ALEN);
+
+       if (((mac[0]==0xff) &&(mac[1]==0xff) && (mac[2]==0xff) &&
+            (mac[3]==0xff) && (mac[4]==0xff) &&(mac[5]==0xff)) ||
+           ((mac[0]==0x0) && (mac[1]==0x0) && (mac[2]==0x0) &&
+            (mac[3]==0x0) && (mac[4]==0x0) &&(mac[5]==0x0)))
+       {
+               mac[0] = 0x00;
+               mac[1] = 0xe0;
+               mac[2] = 0x4c;
+               mac[3] = 0x87;
+               mac[4] = 0x11;
+               mac[5] = 0x22;
+       }
+       else
+       {
+               //If the BIT1 is 0, the address is universally administered.
+               //If it is 1, the address is locally administered
+               mac[0] |= BIT(1); // locally administered
+
+       }
+
+       _rtw_memcpy(padapter->eeprompriv.mac_addr, mac, ETH_ALEN);
+       rtw_init_wifidirect_addrs(padapter, padapter->eeprompriv.mac_addr, padapter->eeprompriv.mac_addr);
+
+       primary_padapter->pbuddy_adapter = padapter;
+
+       padapter->dir_dev = NULL;
+
+       res = _SUCCESS;
+
+       return padapter;
+
+
+error_rtw_drv_if2_init:
+
+       if(padapter)
+               rtw_free_drv_sw(padapter);
+
+       if (pnetdev)
+               rtw_free_netdev(pnetdev);
+
+       return NULL;
+
+}
+
+void rtw_drv_if2_free(_adapter *if2)
+{
+       _adapter *padapter = if2;
+       struct net_device *pnetdev = NULL;
+
+       if (padapter == NULL)
+               return;
+
+       pnetdev = padapter->pnetdev;
+
+#ifdef CONFIG_IOCTL_CFG80211
+       rtw_wdev_free(padapter->rtw_wdev);
+#endif /* CONFIG_IOCTL_CFG80211 */
+
+
+       rtw_free_drv_sw(padapter);
+
+       rtw_free_netdev(pnetdev);
+
+}
+
+void rtw_drv_if2_stop(_adapter *if2)
+{
+       _adapter *padapter = if2;
+
+       if (padapter == NULL)
+               return;
+
+       rtw_cancel_all_timer(padapter);
+
+       if (padapter->bup == _TRUE) {
+               padapter->bDriverStopped = _TRUE;
+               #ifdef CONFIG_XMIT_ACK
+               if (padapter->xmitpriv.ack_tx)
+                       rtw_ack_tx_done(&padapter->xmitpriv, RTW_SCTX_DONE_DRV_STOP);
+               #endif
+
+               if(padapter->intf_stop)
+               {
+                       padapter->intf_stop(padapter);
+               }
+
+               rtw_stop_drv_threads(padapter);
+
+               padapter->bup = _FALSE;
+       }
+}
+#endif //end of CONFIG_CONCURRENT_MODE
+
+#ifdef CONFIG_BR_EXT
+void netdev_br_init(struct net_device *netdev)
+{
+       _adapter *adapter = (_adapter *)rtw_netdev_priv(netdev);
+
+#if (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 35))
+       rcu_read_lock();
+#endif // (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 35))
+
+       //if(check_fwstate(pmlmepriv, WIFI_STATION_STATE|WIFI_ADHOC_STATE) == _TRUE)
+       {
+               //struct net_bridge     *br = netdev->br_port->br;//->dev->dev_addr;
+#if (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
+               if (netdev->br_port)
+#else   // (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
+               if (rcu_dereference(adapter->pnetdev->rx_handler_data))
+#endif  // (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
+               {
+                       struct net_device *br_netdev;
+#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,24))
+                       br_netdev = dev_get_by_name(CONFIG_BR_EXT_BRNAME);
+#else  // (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,24))
+                       struct net *devnet = NULL;
+
+#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,26))
+                       devnet = netdev->nd_net;
+#else  // (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,26))
+                       devnet = dev_net(netdev);
+#endif // (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,26))
+
+                       br_netdev = dev_get_by_name(devnet, CONFIG_BR_EXT_BRNAME);
+#endif // (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,24))
+
+                       if (br_netdev) {
+                               memcpy(adapter->br_mac, br_netdev->dev_addr, ETH_ALEN);
+                               dev_put(br_netdev);
+                       } else
+                               printk("%s()-%d: dev_get_by_name(%s) failed!", __FUNCTION__, __LINE__, CONFIG_BR_EXT_BRNAME);
+               }
+
+               adapter->ethBrExtInfo.addPPPoETag = 1;
+       }
+
+#if (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 35))
+       rcu_read_unlock();
+#endif // (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 35))
+}
+#endif //CONFIG_BR_EXT
+
+static int _rtw_drv_register_netdev(_adapter *padapter, char *name)
+{
+       int ret = _SUCCESS;
+       struct net_device *pnetdev = padapter->pnetdev;
+
+       /* alloc netdev name */
+       rtw_init_netdev_name(pnetdev, name);
+
+       _rtw_memcpy(pnetdev->dev_addr, padapter->eeprompriv.mac_addr, ETH_ALEN);
+
+       /* Tell the network stack we exist */
+       if (register_netdev(pnetdev) != 0) {
+               DBG_871X(FUNC_NDEV_FMT "Failed!\n", FUNC_NDEV_ARG(pnetdev));
+               ret = _FAIL;
+               goto error_register_netdev;
+       }
+
+       DBG_871X("%s, MAC Address (if%d) = " MAC_FMT "\n", __FUNCTION__, (padapter->iface_id+1), MAC_ARG(pnetdev->dev_addr));
+
+       return ret;
+
+error_register_netdev:
+
+       if(padapter->iface_id > IFACE_ID0)
+       {
+               rtw_free_drv_sw(padapter);
+
+               rtw_free_netdev(pnetdev);
+       }
+
+       return ret;
+}
+
+int rtw_drv_register_netdev(_adapter *if1)
+{
+       int i, status = _SUCCESS;
+       struct dvobj_priv *dvobj = if1->dvobj;
+
+       if(dvobj->iface_nums < IFACE_ID_MAX)
+       {
+               for(i=0; i<dvobj->iface_nums; i++)
+               {
+                       _adapter *padapter = dvobj->padapters[i];
+
+                       if(padapter)
+                       {
+                               char *name;
+
+                               if(padapter->iface_id == IFACE_ID0)
+                                       name = if1->registrypriv.ifname;
+                               else if(padapter->iface_id == IFACE_ID1)
+                                       name = if1->registrypriv.if2name;
+                               else
+                                       name = "wlan%d";
+
+                               if((status = _rtw_drv_register_netdev(padapter, name)) != _SUCCESS) {
+                                       break;
+                               }
+                       }
+               }
+       }
+
+       return status;
+}
+
+int _netdev_open(struct net_device *pnetdev)
+{
+       uint status;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(pnetdev);
+       struct pwrctrl_priv *pwrctrlpriv = &padapter->pwrctrlpriv;
+
+       RT_TRACE(_module_os_intfs_c_,_drv_info_,("+871x_drv - dev_open\n"));
+       DBG_871X("+871x_drv - drv_open, bup=%d\n", padapter->bup);
+
+       if(pwrctrlpriv->ps_flag == _TRUE){
+               padapter->net_closed = _FALSE;
+               goto netdev_open_normal_process;
+       }
+
+       if(padapter->bup == _FALSE)
+       {
+               padapter->bDriverStopped = _FALSE;
+               padapter->bSurpriseRemoved = _FALSE;
+               padapter->bCardDisableWOHSM = _FALSE;
+
+               status = rtw_hal_init(padapter);
+               if (status ==_FAIL)
+               {
+                       RT_TRACE(_module_os_intfs_c_,_drv_err_,("rtl871x_hal_init(): Can't init h/w!\n"));
+                       goto netdev_open_error;
+               }
+
+               DBG_871X("MAC Address = "MAC_FMT"\n", MAC_ARG(pnetdev->dev_addr));
+
+
+               status=rtw_start_drv_threads(padapter);
+               if(status ==_FAIL)
+               {
+                       RT_TRACE(_module_os_intfs_c_,_drv_err_,("Initialize driver software resource Failed!\n"));
+                       goto netdev_open_error;
+               }
+
+#ifdef CONFIG_DRVEXT_MODULE
+               init_drvext(padapter);
+#endif
+
+               if(padapter->intf_start)
+               {
+                       padapter->intf_start(padapter);
+               }
+
+#ifndef RTK_DMP_PLATFORM
+               rtw_proc_init_one(pnetdev);
+#endif
+
+#ifdef CONFIG_IOCTL_CFG80211
+               rtw_cfg80211_init_wiphy(padapter);
+#endif
+
+               rtw_led_control(padapter, LED_CTL_NO_LINK);
+
+               padapter->bup = _TRUE;
+       }
+       padapter->net_closed = _FALSE;
+
+       _set_timer(&padapter->mlmepriv.dynamic_chk_timer, 2000);
+
+       padapter->pwrctrlpriv.bips_processing = _FALSE;
+       rtw_set_pwr_state_check_timer(&padapter->pwrctrlpriv);
+
+       //netif_carrier_on(pnetdev);//call this func when rtw_joinbss_event_callback return success
+       if(!rtw_netif_queue_stopped(pnetdev))
+               rtw_netif_start_queue(pnetdev);
+       else
+               rtw_netif_wake_queue(pnetdev);
+
+#ifdef CONFIG_BR_EXT
+       netdev_br_init(pnetdev);
+#endif // CONFIG_BR_EXT
+
+netdev_open_normal_process:
+
+       #ifdef CONFIG_CONCURRENT_MODE
+       {
+               _adapter *sec_adapter = padapter->pbuddy_adapter;
+               if(sec_adapter && (sec_adapter->bup == _FALSE || sec_adapter->hw_init_completed == _FALSE))
+                       _netdev_if2_open(sec_adapter->pnetdev);
+       }
+       #endif
+
+       RT_TRACE(_module_os_intfs_c_,_drv_info_,("-871x_drv - dev_open\n"));
+       DBG_871X("-871x_drv - drv_open, bup=%d\n", padapter->bup);
+
+       return 0;
+
+netdev_open_error:
+
+       padapter->bup = _FALSE;
+
+       netif_carrier_off(pnetdev);
+       rtw_netif_stop_queue(pnetdev);
+
+       RT_TRACE(_module_os_intfs_c_,_drv_err_,("-871x_drv - dev_open, fail!\n"));
+       DBG_871X("-871x_drv - drv_open fail, bup=%d\n", padapter->bup);
+
+       return (-1);
+
+}
+
+int netdev_open(struct net_device *pnetdev)
+{
+       int ret;
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(pnetdev);
+
+       _enter_critical_mutex(&(adapter_to_dvobj(padapter)->hw_init_mutex), NULL);
+       ret = _netdev_open(pnetdev);
+       _exit_critical_mutex(&(adapter_to_dvobj(padapter)->hw_init_mutex), NULL);
+
+       return ret;
+}
+
+#ifdef CONFIG_IPS
+int  ips_netdrv_open(_adapter *padapter)
+{
+       int status = _SUCCESS;
+       padapter->net_closed = _FALSE;
+       DBG_871X("===> %s.........\n",__FUNCTION__);
+
+
+       padapter->bDriverStopped = _FALSE;
+       padapter->bCardDisableWOHSM = _FALSE;
+       //padapter->bup = _TRUE;
+
+       status = rtw_hal_init(padapter);
+       if (status ==_FAIL)
+       {
+               RT_TRACE(_module_os_intfs_c_,_drv_err_,("ips_netdrv_open(): Can't init h/w!\n"));
+               goto netdev_open_error;
+       }
+
+       if(padapter->intf_start)
+       {
+               padapter->intf_start(padapter);
+       }
+
+       rtw_set_pwr_state_check_timer(&padapter->pwrctrlpriv);
+       _set_timer(&padapter->mlmepriv.dynamic_chk_timer,5000);
+
+        return _SUCCESS;
+
+netdev_open_error:
+       //padapter->bup = _FALSE;
+       DBG_871X("-ips_netdrv_open - drv_open failure, bup=%d\n", padapter->bup);
+
+       return _FAIL;
+}
+
+
+int rtw_ips_pwr_up(_adapter *padapter)
+{
+       int result;
+       u32 start_time = rtw_get_current_time();
+       DBG_871X("===>  rtw_ips_pwr_up..............\n");
+       rtw_reset_drv_sw(padapter);
+
+       result = ips_netdrv_open(padapter);
+
+       rtw_led_control(padapter, LED_CTL_NO_LINK);
+
+       DBG_871X("<===  rtw_ips_pwr_up.............. in %dms\n", rtw_get_passing_time_ms(start_time));
+       return result;
+
+}
+
+void rtw_ips_pwr_down(_adapter *padapter)
+{
+       u32 start_time = rtw_get_current_time();
+       DBG_871X("===> rtw_ips_pwr_down...................\n");
+
+       padapter->bCardDisableWOHSM = _TRUE;
+       padapter->net_closed = _TRUE;
+
+       rtw_led_control(padapter, LED_CTL_POWER_OFF);
+
+       rtw_ips_dev_unload(padapter);
+       padapter->bCardDisableWOHSM = _FALSE;
+       DBG_871X("<=== rtw_ips_pwr_down..................... in %dms\n", rtw_get_passing_time_ms(start_time));
+}
+#endif
+void rtw_ips_dev_unload(_adapter *padapter)
+{
+       struct net_device *pnetdev= (struct net_device*)padapter->pnetdev;
+       struct xmit_priv        *pxmitpriv = &(padapter->xmitpriv);
+       DBG_871X("====> %s...\n",__FUNCTION__);
+
+       rtw_hal_set_hwreg(padapter, HW_VAR_FIFO_CLEARN_UP, 0);
+
+       if(padapter->intf_stop)
+       {
+               padapter->intf_stop(padapter);
+       }
+
+       //s5.
+       if(padapter->bSurpriseRemoved == _FALSE)
+       {
+               rtw_hal_deinit(padapter);
+       }
+
+}
+
+int pm_netdev_open(struct net_device *pnetdev,u8 bnormal)
+{
+       int status;
+       if(bnormal)
+               status = netdev_open(pnetdev);
+#ifdef CONFIG_IPS
+       else
+               status =  (_SUCCESS == ips_netdrv_open((_adapter *)rtw_netdev_priv(pnetdev)))?(0):(-1);
+#endif
+
+       return status;
+}
+
+static int netdev_close(struct net_device *pnetdev)
+{
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(pnetdev);
+
+       RT_TRACE(_module_os_intfs_c_,_drv_info_,("+871x_drv - drv_close\n"));
+
+       if(padapter->pwrctrlpriv.bInternalAutoSuspend == _TRUE)
+       {
+               //rtw_pwr_wakeup(padapter);
+               if(padapter->pwrctrlpriv.rf_pwrstate == rf_off)
+                       padapter->pwrctrlpriv.ps_flag = _TRUE;
+       }
+       padapter->net_closed = _TRUE;
+
+/*     if(!padapter->hw_init_completed)
+       {
+               DBG_871X("(1)871x_drv - drv_close, bup=%d, hw_init_completed=%d\n", padapter->bup, padapter->hw_init_completed);
+
+               padapter->bDriverStopped = _TRUE;
+
+               rtw_dev_unload(padapter);
+       }
+       else*/
+       if(padapter->pwrctrlpriv.rf_pwrstate == rf_on){
+               DBG_871X("(2)871x_drv - drv_close, bup=%d, hw_init_completed=%d\n", padapter->bup, padapter->hw_init_completed);
+
+               //s1.
+               if(pnetdev)
+               {
+                       if (!rtw_netif_queue_stopped(pnetdev))
+                               rtw_netif_stop_queue(pnetdev);
+               }
+
+#ifndef CONFIG_ANDROID
+               //s2.
+               LeaveAllPowerSaveMode(padapter);
+               rtw_disassoc_cmd(padapter, 500, _FALSE);
+               //s2-2.  indicate disconnect to os
+               rtw_indicate_disconnect(padapter);
+               //s2-3.
+               rtw_free_assoc_resources(padapter, 1);
+               //s2-4.
+               rtw_free_network_queue(padapter,_TRUE);
+#endif
+               // Close LED
+               rtw_led_control(padapter, LED_CTL_POWER_OFF);
+       }
+
+#ifdef CONFIG_BR_EXT
+       //if (OPMODE & (WIFI_STATION_STATE | WIFI_ADHOC_STATE))
+       {
+               //void nat25_db_cleanup(_adapter *priv);
+               nat25_db_cleanup(padapter);
+       }
+#endif // CONFIG_BR_EXT
+
+#ifdef CONFIG_P2P
+#ifdef CONFIG_IOCTL_CFG80211
+       if( padapter->wdinfo.driver_interface == DRIVER_CFG80211 )
+       {
+               if(wdev_to_priv(padapter->rtw_wdev)->p2p_enabled == _TRUE)
+                       wdev_to_priv(padapter->rtw_wdev)->p2p_enabled = _FALSE;
+       }
+#endif //CONFIG_IOCTL_CFG80211
+       rtw_p2p_enable(padapter, P2P_ROLE_DISABLE);
+#endif //CONFIG_P2P
+
+#ifdef CONFIG_IOCTL_CFG80211
+       rtw_scan_abort(padapter);
+       wdev_to_priv(padapter->rtw_wdev)->bandroid_scan = _FALSE;
+       padapter->rtw_wdev->iftype = NL80211_IFTYPE_MONITOR; //set this at the end
+#endif //CONFIG_IOCTL_CFG80211
+
+       RT_TRACE(_module_os_intfs_c_,_drv_info_,("-871x_drv - drv_close\n"));
+       DBG_871X("-871x_drv - drv_close, bup=%d\n", padapter->bup);
+
+       return 0;
+}
+
+void rtw_ndev_destructor(struct net_device *ndev)
+{
+       DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(ndev));
+
+#ifdef CONFIG_IOCTL_CFG80211
+       if (ndev->ieee80211_ptr)
+               rtw_mfree((u8 *)ndev->ieee80211_ptr, sizeof(struct wireless_dev));
+#endif
+       free_netdev(ndev);
+}
diff --git a/drivers/net/wireless/realtek/rtl8192cu/os_dep/linux/pci_intf.c b/drivers/net/wireless/realtek/rtl8192cu/os_dep/linux/pci_intf.c
new file mode 100644 (file)
index 0000000..15f5d9b
--- /dev/null
@@ -0,0 +1,1996 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#define _HCI_INTF_C_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <recv_osdep.h>
+#include <xmit_osdep.h>
+#include <hal_intf.h>
+#include <rtw_version.h>
+
+#ifndef CONFIG_PCI_HCI
+
+#error "CONFIG_PCI_HCI shall be on!\n"
+
+#endif
+
+#include <pci_ops.h>
+#include <pci_osintf.h>
+#include <pci_hal.h>
+
+#if defined (PLATFORM_LINUX) && defined (PLATFORM_WINDOWS)
+
+#error "Shall be Linux or Windows, but not both!\n"
+
+#endif
+
+#ifdef CONFIG_80211N_HT
+extern int rtw_ht_enable;
+extern int rtw_cbw40_enable;
+extern int rtw_ampdu_enable;//for enable tx_ampdu
+#endif
+
+#ifdef CONFIG_PM
+extern int pm_netdev_open(struct net_device *pnetdev);
+static int rtw_suspend(struct pci_dev *pdev, pm_message_t state);
+static int rtw_resume(struct pci_dev *pdev);
+#endif
+
+
+static int rtw_drv_init(struct pci_dev *pdev, const struct pci_device_id *pdid);
+static void rtw_dev_remove(struct pci_dev *pdev);
+
+static struct specific_device_id specific_device_id_tbl[] = {
+       {.idVendor=0x0b05, .idProduct=0x1791, .flags=SPEC_DEV_ID_DISABLE_HT},
+       {.idVendor=0x13D3, .idProduct=0x3311, .flags=SPEC_DEV_ID_DISABLE_HT},
+       {}
+};
+
+struct pci_device_id rtw_pci_id_tbl[] = {
+#ifdef CONFIG_RTL8192C
+       {PCI_DEVICE(PCI_VENDER_ID_REALTEK, 0x8191)},
+       {PCI_DEVICE(PCI_VENDER_ID_REALTEK, 0x8178)},
+       {PCI_DEVICE(PCI_VENDER_ID_REALTEK, 0x8177)},
+       {PCI_DEVICE(PCI_VENDER_ID_REALTEK, 0x8176)},
+#endif
+#ifdef CONFIG_RTL8192D
+       {PCI_DEVICE(PCI_VENDER_ID_REALTEK, 0x8193)},
+       {PCI_DEVICE(PCI_VENDER_ID_REALTEK, 0x002B)},
+#endif
+       {},
+};
+
+struct pci_drv_priv {
+       struct pci_driver rtw_pci_drv;
+       int drv_registered;
+};
+
+
+static struct pci_drv_priv pci_drvpriv = {
+       .rtw_pci_drv.name = (char*)DRV_NAME,
+       .rtw_pci_drv.probe = rtw_drv_init,
+       .rtw_pci_drv.remove = rtw_dev_remove,
+       .rtw_pci_drv.id_table = rtw_pci_id_tbl,
+#ifdef CONFIG_PM
+       .rtw_pci_drv.suspend = rtw_suspend,
+       .rtw_pci_drv.resume = rtw_resume,
+#else
+       .rtw_pci_drv.suspend = NULL,
+       .rtw_pci_drv.resume = NULL,
+#endif
+};
+
+
+MODULE_DEVICE_TABLE(pci, rtw_pci_id_tbl);
+
+
+static u16 pcibridge_vendors[PCI_BRIDGE_VENDOR_MAX] = {
+       INTEL_VENDOR_ID,
+       ATI_VENDOR_ID,
+       AMD_VENDOR_ID,
+       SIS_VENDOR_ID
+};
+
+static u8 rtw_pci_platform_switch_device_pci_aspm(_adapter *padapter, u8 value)
+{
+       struct dvobj_priv       *pdvobjpriv = adapter_to_dvobj(padapter);
+       u8      bresult = _SUCCESS;
+       int     error;
+
+       value |= 0x40;
+
+       error = pci_write_config_byte(pdvobjpriv->ppcidev, 0x80, value);
+
+       if(error != 0)
+       {
+               bresult = _FALSE;
+               DBG_871X("rtw_pci_platform_switch_device_pci_aspm error (%d)\n",error);
+       }
+
+       return bresult;
+}
+
+//
+// When we set 0x01 to enable clk request. Set 0x0 to disable clk req.
+//
+static u8 rtw_pci_switch_clk_req(_adapter *padapter, u8 value)
+{
+       struct dvobj_priv       *pdvobjpriv = adapter_to_dvobj(padapter);
+       u8      buffer, bresult = _SUCCESS;
+       int     error;
+
+       buffer = value;
+
+       if(!padapter->hw_init_completed)
+               return bresult;
+
+       error = pci_write_config_byte(pdvobjpriv->ppcidev, 0x81, value);
+
+       if(error != 0)
+       {
+               bresult = _FALSE;
+               DBG_871X("rtw_pci_switch_clk_req error (%d)\n",error);
+       }
+
+       return bresult;
+}
+
+#if 0
+//Description:
+//Disable RTL8192SE ASPM & Disable Pci Bridge ASPM
+void rtw_pci_disable_aspm(_adapter *padapter)
+{
+       struct dvobj_priv       *pdvobjpriv = adapter_to_dvobj(padapter);
+       struct pwrctrl_priv     *pwrpriv = &padapter->pwrctrlpriv;
+       struct pci_priv *pcipriv = &(pdvobjpriv->pcipriv);
+       u32     pcicfg_addrport = 0;
+       u8      num4bytes;
+       u8      linkctrl_reg;
+       u16     pcibridge_linkctrlreg, aspmlevel = 0;
+
+       // When there exists anyone's busnum, devnum, and funcnum that are set to 0xff,
+       // we do not execute any action and return.
+       // if it is not intel bus then don't enable ASPM.
+       if ((pcipriv->busnumber == 0xff
+               && pcipriv->devnumber == 0xff
+               && pcipriv->funcnumber == 0xff)
+               || (pcipriv->pcibridge_busnum == 0xff
+               && pcipriv->pcibridge_devnum == 0xff
+               && pcipriv->pcibridge_funcnum == 0xff))
+       {
+               DBG_871X("PlatformEnableASPM(): Fail to enable ASPM. Cannot find the Bus of PCI(Bridge).\n");
+               return;
+       }
+
+       if (pcipriv->pcibridge_vendor == PCI_BRIDGE_VENDOR_UNKNOWN) {
+               DBG_871X("%s(): Disable ASPM. Recognize the Bus of PCI(Bridge) as UNKNOWN.\n", __func__);
+       }
+
+       if (pwrpriv->reg_rfps_level & RT_RF_OFF_LEVL_CLK_REQ) {
+               RT_CLEAR_PS_LEVEL(pwrpriv, RT_RF_OFF_LEVL_CLK_REQ);
+               rtw_pci_switch_clk_req(padapter, 0x0);
+       }
+
+       {
+               // Suggested by SD1 for promising device will in L0 state after an I/O.
+               u8 tmp_u1b;
+
+               pci_read_config_byte(pdvobjpriv->ppcidev, 0x80, &tmp_u1b);
+       }
+
+       // Retrieve original configuration settings.
+       linkctrl_reg = pcipriv->linkctrl_reg;
+       pcibridge_linkctrlreg = pcipriv->pcibridge_linkctrlreg;
+
+       // Set corresponding value.
+       aspmlevel |= BIT(0) | BIT(1);
+       linkctrl_reg &= ~aspmlevel;
+       pcibridge_linkctrlreg &= ~(BIT(0) | BIT(1));
+
+       rtw_pci_platform_switch_device_pci_aspm(padapter, linkctrl_reg);
+       rtw_udelay_os(50);
+
+       //When there exists anyone's busnum, devnum, and funcnum that are set to 0xff,
+       // we do not execute any action and return.
+       if ((pcipriv->busnumber == 0xff &&
+               pcipriv->devnumber == 0xff &&
+               pcipriv->funcnumber == 0xff) ||
+               (pcipriv->pcibridge_busnum == 0xff &&
+               pcipriv->pcibridge_devnum == 0xff
+               && pcipriv->pcibridge_funcnum == 0xff))
+       {
+               //Do Nothing!!
+       }
+       else
+       {
+               //4 //Disable Pci Bridge ASPM
+               pcicfg_addrport = (pcipriv->pcibridge_busnum << 16) |
+                                               (pcipriv->pcibridge_devnum << 11) |
+                                               (pcipriv->pcibridge_funcnum << 8) | (1 << 31);
+               num4bytes = (pcipriv->pcibridge_pciehdr_offset + 0x10) / 4;
+
+               // set up address port at 0xCF8 offset field= 0 (dev|vend)
+               NdisRawWritePortUlong(PCI_CONF_ADDRESS, pcicfg_addrport + (num4bytes << 2));
+
+               // now grab data port with device|vendor 4 byte dword
+               NdisRawWritePortUchar(PCI_CONF_DATA, pcibridge_linkctrlreg);
+
+               DBG_871X("rtw_pci_disable_aspm():PciBridge busnumber[%x], DevNumbe[%x], funcnumber[%x], Write reg[%x] = %x\n",
+                       pcipriv->pcibridge_busnum, pcipriv->pcibridge_devnum,
+                       pcipriv->pcibridge_funcnum,
+                       (pcipriv->pcibridge_pciehdr_offset+0x10), pcibridge_linkctrlreg);
+
+               rtw_udelay_os(50);
+       }
+}
+
+//[ASPM]
+//Description:
+//              Enable RTL8192SE ASPM & Enable Pci Bridge ASPM for power saving
+//              We should follow the sequence to enable RTL8192SE first then enable Pci Bridge ASPM
+//              or the system will show bluescreen.
+void rtw_pci_enable_aspm(_adapter *padapter)
+{
+       struct dvobj_priv       *pdvobjpriv = adapter_to_dvobj(padapter);
+       struct pwrctrl_priv     *pwrpriv = &padapter->pwrctrlpriv;
+       struct pci_priv *pcipriv = &(pdvobjpriv->pcipriv);
+       u16     aspmlevel = 0;
+       u32     pcicfg_addrport = 0;
+       u8      num4bytes;
+       u8      u_pcibridge_aspmsetting = 0;
+       u8      u_device_aspmsetting = 0;
+
+       // When there exists anyone's busnum, devnum, and funcnum that are set to 0xff,
+       // we do not execute any action and return.
+       // if it is not intel bus then don't enable ASPM.
+
+       if ((pcipriv->busnumber == 0xff
+               && pcipriv->devnumber == 0xff
+               && pcipriv->funcnumber == 0xff)
+               || (pcipriv->pcibridge_busnum == 0xff
+               && pcipriv->pcibridge_devnum == 0xff
+               && pcipriv->pcibridge_funcnum == 0xff))
+       {
+               DBG_871X("PlatformEnableASPM(): Fail to enable ASPM. Cannot find the Bus of PCI(Bridge).\n");
+               return;
+       }
+
+       //4 Enable Pci Bridge ASPM
+       pcicfg_addrport = (pcipriv->pcibridge_busnum << 16)
+                                       | (pcipriv->pcibridge_devnum << 11)
+                                       | (pcipriv->pcibridge_funcnum << 8) | (1 << 31);
+       num4bytes = (pcipriv->pcibridge_pciehdr_offset + 0x10) / 4;
+       // set up address port at 0xCF8 offset field= 0 (dev|vend)
+       NdisRawWritePortUlong(PCI_CONF_ADDRESS, pcicfg_addrport + (num4bytes << 2));
+       // now grab data port with device|vendor 4 byte dword
+
+       u_pcibridge_aspmsetting = pcipriv->pcibridge_linkctrlreg | pdvobjpriv->const_hostpci_aspm_setting;
+
+       if (pcipriv->pcibridge_vendor == PCI_BRIDGE_VENDOR_INTEL ||
+               pcipriv->pcibridge_vendor == PCI_BRIDGE_VENDOR_SIS)
+               u_pcibridge_aspmsetting &= ~BIT(0);
+
+       NdisRawWritePortUchar(PCI_CONF_DATA, u_pcibridge_aspmsetting);
+
+       DBG_871X("PlatformEnableASPM():PciBridge busnumber[%x], DevNumbe[%x], funcnumber[%x], Write reg[%x] = %x\n",
+               pcipriv->pcibridge_busnum,
+               pcipriv->pcibridge_devnum,
+               pcipriv->pcibridge_funcnum,
+               (pcipriv->pcibridge_pciehdr_offset+0x10),
+               u_pcibridge_aspmsetting);
+
+       rtw_udelay_os(50);
+
+       // Get ASPM level (with/without Clock Req)
+       aspmlevel |= pdvobjpriv->const_devicepci_aspm_setting;
+       u_device_aspmsetting = pcipriv->linkctrl_reg;
+       u_device_aspmsetting |= aspmlevel;
+
+       rtw_pci_platform_switch_device_pci_aspm(padapter, u_device_aspmsetting);        //(priv->linkctrl_reg | ASPMLevel));
+
+       if (pwrpriv->reg_rfps_level & RT_RF_OFF_LEVL_CLK_REQ) {
+               rtw_pci_switch_clk_req(padapter, (pwrpriv->reg_rfps_level & RT_RF_OFF_LEVL_CLK_REQ) ? 1 : 0);
+               RT_SET_PS_LEVEL(pwrpriv, RT_RF_OFF_LEVL_CLK_REQ);
+       }
+
+       rtw_udelay_os(50);
+}
+
+//
+//Description:
+//To get link control field by searching from PCIe capability lists.
+//
+static u8
+rtw_get_link_control_field(_adapter *padapter, u8 busnum, u8 devnum,
+                               u8 funcnum)
+{
+       struct dvobj_priv       *pdvobjpriv = adapter_to_dvobj(padapter);
+       struct pci_priv *pcipriv = &(pdvobjpriv->pcipriv);
+       struct rt_pci_capabilities_header capability_hdr;
+       u8      capability_offset, num4bytes;
+       u32     pcicfg_addrport = 0;
+       u8      linkctrl_reg;
+       u8      status = _FALSE;
+
+       //If busnum, devnum, funcnum are set to 0xff.
+       if (busnum == 0xff && devnum == 0xff && funcnum == 0xff) {
+               DBG_871X("GetLinkControlField(): Fail to find PCIe Capability\n");
+               return _FALSE;
+       }
+
+       pcicfg_addrport = (busnum << 16) | (devnum << 11) | (funcnum << 8) | (1 << 31);
+
+       //2PCIeCap
+
+       // The device supports capability lists. Find the capabilities.
+       num4bytes = 0x34 / 4;
+       //get capability_offset
+       // set up address port at 0xCF8 offset field= 0 (dev|vend)
+       NdisRawWritePortUlong(PCI_CONF_ADDRESS, pcicfg_addrport + (num4bytes << 2));
+       // now grab data port with device|vendor 4 byte dword
+       NdisRawReadPortUchar(PCI_CONF_DATA, &capability_offset);
+
+       // Loop through the capabilities in search of the power management capability.
+       // The list is NULL-terminated, so the last offset will always be zero.
+
+       while (capability_offset != 0) {
+               // First find the number of 4 Byte.
+               num4bytes = capability_offset / 4;
+
+               // Read the header of the capability at  this offset. If the retrieved capability is not
+               // the power management capability that we are looking for, follow the link to the
+               // next capability and continue looping.
+
+               //4 get capability_hdr
+               // set up address port at 0xCF8 offset field= 0 (dev|vend)
+               NdisRawWritePortUlong(PCI_CONF_ADDRESS, pcicfg_addrport + (num4bytes << 2));
+               // now grab data port with device|vendor 4 byte dword
+               NdisRawReadPortUshort(PCI_CONF_DATA, (u16 *) & capability_hdr);
+
+               // Found the PCI express capability
+               if (capability_hdr.capability_id == PCI_CAPABILITY_ID_PCI_EXPRESS)
+               {
+                       break;
+               }
+               else
+               {
+                       // This is some other capability. Keep looking for the PCI express capability.
+                       capability_offset = capability_hdr.next;
+               }
+       }
+
+       if (capability_hdr.capability_id == PCI_CAPABILITY_ID_PCI_EXPRESS)      //
+       {
+               num4bytes = (capability_offset + 0x10) / 4;
+
+               //4 Read  Link Control Register
+               // set up address port at 0xCF8 offset field= 0 (dev|vend)
+               NdisRawWritePortUlong(PCI_CONF_ADDRESS, pcicfg_addrport + (num4bytes << 2));
+               // now grab data port with device|vendor 4 byte dword
+               NdisRawReadPortUchar(PCI_CONF_DATA, &linkctrl_reg);
+
+               pcipriv->pcibridge_pciehdr_offset = capability_offset;
+               pcipriv->pcibridge_linkctrlreg = linkctrl_reg;
+
+               status = _TRUE;
+       }
+       else
+       {
+               // We didn't find a PCIe capability.
+               DBG_871X("GetLinkControlField(): Cannot Find PCIe Capability\n");
+       }
+
+       return status;
+}
+
+//
+//Description:
+//To get PCI bus infomation and return busnum, devnum, and funcnum about
+//the bus(bridge) which the device binds.
+//
+static u8
+rtw_get_pci_bus_info(_adapter *padapter,
+                         u16 vendorid,
+                         u16 deviceid,
+                         u8 irql, u8 basecode, u8 subclass, u8 filed19val,
+                         u8 * busnum, u8 * devnum, u8 * funcnum)
+{
+       struct dvobj_priv       *pdvobjpriv = adapter_to_dvobj(padapter);
+       struct pci_dev  *pdev = pdvobjpriv->ppcidev;
+       u8      busnum_idx, devicenum_idx, functionnum_idx;
+       u32     pcicfg_addrport = 0;
+       u32     dev_venid = 0, classcode, field19, headertype;
+       u16     venId, devId;
+       u8      basec, subc, irqline;
+       u16     regoffset;
+       u8      b_singlefunc = _FALSE;
+       u8      b_bridgechk = _FALSE;
+
+       *busnum = 0xFF;
+       *devnum = 0xFF;
+       *funcnum = 0xFF;
+
+       //DBG_871X("==============>vendorid:%x,deviceid:%x,irql:%x\n", vendorid,deviceid,irql);
+       if ((basecode == PCI_CLASS_BRIDGE_DEV) &&
+               (subclass == PCI_SUBCLASS_BR_PCI_TO_PCI)
+               && (filed19val == U1DONTCARE))
+               b_bridgechk = _TRUE;
+
+       // perform a complete pci bus scan operation
+       for (busnum_idx = 0; busnum_idx < PCI_MAX_BRIDGE_NUMBER; busnum_idx++)  //255
+       {
+               for (devicenum_idx = 0; devicenum_idx < PCI_MAX_DEVICES; devicenum_idx++)       //32
+               {
+                       b_singlefunc = _FALSE;
+                       for (functionnum_idx = 0; functionnum_idx < PCI_MAX_FUNCTION; functionnum_idx++)        //8
+                       {
+                               //
+                               // <Roger_Notes> We have to skip redundant Bus scan to prevent unexpected system hang
+                               // if single function is present in this device.
+                               // 2009.02.26.
+                               //
+                               if (functionnum_idx == 0) {
+                                       //4 get header type (DWORD #3)
+                                       pcicfg_addrport = (busnum_idx << 16) | (devicenum_idx << 11) | (functionnum_idx << 8) | (1 << 31);
+                                       NdisRawWritePortUlong(PCI_CONF_ADDRESS, pcicfg_addrport + (3 << 2));
+                                       NdisRawReadPortUlong(PCI_CONF_DATA, &headertype);
+                                       headertype = ((headertype >> 16) & 0x0080) >> 7;        // address 0x0e[7].
+                                       if (headertype == 0)    //Single function
+                                               b_singlefunc = _TRUE;
+                               }
+                               else
+                               {//By pass the following scan process.
+                                       if (b_singlefunc == _TRUE)
+                                               break;
+                               }
+
+                               // Set access enable control.
+                               pcicfg_addrport = (busnum_idx << 16) | (devicenum_idx << 11) | (functionnum_idx << 8) | (1 << 31);
+
+                               //4 // Get vendorid/ deviceid
+                               // set up address port at 0xCF8 offset field= 0 (dev|vend)
+                               NdisRawWritePortUlong(PCI_CONF_ADDRESS, pcicfg_addrport);
+                               // now grab data port with device|vendor 4 byte dword
+                               NdisRawReadPortUlong(PCI_CONF_DATA, &dev_venid);
+
+                               // if data port is full of 1s, no device is present
+                               // some broken boards return 0 if a slot is empty:
+                               if (dev_venid == 0xFFFFFFFF || dev_venid == 0)
+                                       continue;       //PCI_INVALID_VENDORID
+
+                               // 4 // Get irql
+                               regoffset = 0x3C;
+                               pcicfg_addrport = (busnum_idx << 16) | (devicenum_idx << 11) | (functionnum_idx << 8) | (1 << 31) | (regoffset & 0xFFFFFFFC);
+                               NdisRawWritePortUlong(PCI_CONF_ADDRESS, pcicfg_addrport);
+                               NdisRawReadPortUchar((PCI_CONF_DATA +(regoffset & 0x3)), &irqline);
+
+                               venId = (u16) (dev_venid >> 0) & 0xFFFF;
+                               devId = (u16) (dev_venid >> 16) & 0xFFFF;
+
+                               // Check Vendor ID
+                               if (!b_bridgechk && (venId != vendorid) && (vendorid != U2DONTCARE))
+                                       continue;
+
+                               // Check Device ID
+                               if (!b_bridgechk && (devId != deviceid) && (deviceid != U2DONTCARE))
+                                       continue;
+
+                               // Check irql
+                               if (!b_bridgechk && (irqline != irql) && (irql != U1DONTCARE))
+                                       continue;
+
+                               //4 get Class Code
+                               pcicfg_addrport = (busnum_idx << 16) | (devicenum_idx << 11) | (functionnum_idx << 8) | (1 << 31);
+                               NdisRawWritePortUlong(PCI_CONF_ADDRESS, pcicfg_addrport + (2 << 2));
+                               NdisRawReadPortUlong(PCI_CONF_DATA, &classcode);
+                               classcode = classcode >> 8;
+
+                               basec = (u8) (classcode >> 16) & 0xFF;
+                               subc = (u8) (classcode >> 8) & 0xFF;
+                               if (b_bridgechk && (venId != vendorid) && (basec == basecode) && (subc == subclass))
+                                       return _TRUE;
+
+                               // Check Vendor ID
+                               if (b_bridgechk && (venId != vendorid) && (vendorid != U2DONTCARE))
+                                       continue;
+
+                               // Check Device ID
+                               if (b_bridgechk && (devId != deviceid) && (deviceid != U2DONTCARE))
+                                       continue;
+
+                               // Check irql
+                               if (b_bridgechk && (irqline != irql) && (irql != U1DONTCARE))
+                                       continue;
+
+                               //4 get field 0x19 value  (DWORD #6)
+                               NdisRawWritePortUlong(PCI_CONF_ADDRESS, pcicfg_addrport + (6 << 2));
+                               NdisRawReadPortUlong(PCI_CONF_DATA, &field19);
+                               field19 = (field19 >> 8) & 0xFF;
+
+                               //4 Matching Class Code and filed19.
+                               if ((basec == basecode) && (subc == subclass) && ((field19 == filed19val) || (filed19val == U1DONTCARE))) {
+                                       *busnum = busnum_idx;
+                                       *devnum = devicenum_idx;
+                                       *funcnum = functionnum_idx;
+
+                                       DBG_871X("GetPciBusInfo(): Find Device(%X:%X)  bus=%d dev=%d, func=%d\n",
+                                               vendorid, deviceid, busnum_idx, devicenum_idx, functionnum_idx);
+                                       return _TRUE;
+                               }
+                       }
+               }
+       }
+
+       DBG_871X("GetPciBusInfo(): Cannot Find Device(%X:%X:%X)\n", vendorid, deviceid, dev_venid);
+
+       return _FALSE;
+}
+
+static u8
+rtw_get_pci_brideg_info(_adapter *padapter,
+                            u8 basecode,
+                            u8 subclass,
+                            u8 filed19val, u8 * busnum, u8 * devnum,
+                            u8 * funcnum, u16 * vendorid, u16 * deviceid)
+{
+       u8      busnum_idx, devicenum_idx, functionnum_idx;
+       u32     pcicfg_addrport = 0;
+       u32     dev_venid, classcode, field19, headertype;
+       u16     venId, devId;
+       u8      basec, subc, irqline;
+       u16     regoffset;
+       u8      b_singlefunc = _FALSE;
+
+       *busnum = 0xFF;
+       *devnum = 0xFF;
+       *funcnum = 0xFF;
+
+       // perform a complete pci bus scan operation
+       for (busnum_idx = 0; busnum_idx < PCI_MAX_BRIDGE_NUMBER; busnum_idx++)  //255
+       {
+               for (devicenum_idx = 0; devicenum_idx < PCI_MAX_DEVICES; devicenum_idx++)       //32
+               {
+                       b_singlefunc = _FALSE;
+                       for (functionnum_idx = 0; functionnum_idx < PCI_MAX_FUNCTION; functionnum_idx++)        //8
+                       {
+                               //
+                               // <Roger_Notes> We have to skip redundant Bus scan to prevent unexpected system hang
+                               // if single function is present in this device.
+                               // 2009.02.26.
+                               //
+                               if (functionnum_idx == 0)
+                               {
+                                       //4 get header type (DWORD #3)
+                                       pcicfg_addrport = (busnum_idx << 16) | (devicenum_idx << 11) | (functionnum_idx << 8) | (1 << 31);
+                                       //NdisRawWritePortUlong((ULONG_PTR)PCI_CONF_ADDRESS ,  pcicfg_addrport + (3 << 2));
+                                       //NdisRawReadPortUlong((ULONG_PTR)PCI_CONF_DATA, &headertype);
+                                       NdisRawWritePortUlong(PCI_CONF_ADDRESS, pcicfg_addrport + (3 << 2));
+                                       NdisRawReadPortUlong(PCI_CONF_DATA, &headertype);
+                                       headertype = ((headertype >> 16) & 0x0080) >> 7;        // address 0x0e[7].
+                                       if (headertype == 0)    //Single function
+                                               b_singlefunc = _TRUE;
+                               }
+                               else
+                               {//By pass the following scan process.
+                                       if (b_singlefunc == _TRUE)
+                                               break;
+                               }
+
+                               pcicfg_addrport = (busnum_idx << 16) | (devicenum_idx << 11) | (functionnum_idx << 8) | (1 << 31);
+
+                               //4 // Get vendorid/ deviceid
+                               // set up address port at 0xCF8 offset field= 0 (dev|vend)
+                               NdisRawWritePortUlong(PCI_CONF_ADDRESS, pcicfg_addrport);
+                               // now grab data port with device|vendor 4 byte dword
+                               NdisRawReadPortUlong(PCI_CONF_DATA, &dev_venid);
+
+                               //4 Get irql
+                               regoffset = 0x3C;
+                               pcicfg_addrport = (busnum_idx << 16) | (devicenum_idx << 11) | (functionnum_idx << 8) | (1 << 31) | (regoffset & 0xFFFFFFFC);
+                               NdisRawWritePortUlong(PCI_CONF_ADDRESS, pcicfg_addrport);
+                               NdisRawReadPortUchar((PCI_CONF_DATA + (regoffset & 0x3)), &irqline);
+
+                               venId = (u16) (dev_venid >> 0) & 0xFFFF;
+                               devId = (u16) (dev_venid >> 16) & 0xFFFF;
+
+                               //4 get Class Code
+                               pcicfg_addrport = (busnum_idx << 16) | (devicenum_idx << 11) | (functionnum_idx << 8) | (1 << 31);
+                               NdisRawWritePortUlong(PCI_CONF_ADDRESS, pcicfg_addrport + (2 << 2));
+                               NdisRawReadPortUlong(PCI_CONF_DATA, &classcode);
+                               classcode = classcode >> 8;
+
+                               basec = (u8) (classcode >> 16) & 0xFF;
+                               subc = (u8) (classcode >> 8) & 0xFF;
+
+                               //4 get field 0x19 value  (DWORD #6)
+                               NdisRawWritePortUlong(PCI_CONF_ADDRESS, pcicfg_addrport + (6 << 2));
+                               NdisRawReadPortUlong(PCI_CONF_DATA, &field19);
+                               field19 = (field19 >> 8) & 0xFF;
+
+                               //4 Matching Class Code and filed19.
+                               if ((basec == basecode) && (subc == subclass) && ((field19 == filed19val) || (filed19val == U1DONTCARE))) {
+                                       *busnum = busnum_idx;
+                                       *devnum = devicenum_idx;
+                                       *funcnum = functionnum_idx;
+                                       *vendorid = venId;
+                                       *deviceid = devId;
+
+                                       DBG_871X("GetPciBridegInfo : Find Device(%X:%X)  bus=%d dev=%d, func=%d\n",
+                                               venId, devId, busnum_idx, devicenum_idx, functionnum_idx);
+
+                                       return _TRUE;
+                               }
+                       }
+               }
+       }
+
+       DBG_871X("GetPciBridegInfo(): Cannot Find PciBridge for Device\n");
+
+       return _FALSE;
+}                              // end of GetPciBridegInfo
+
+//
+//Description:
+//To find specific bridge information.
+//
+static void rtw_find_bridge_info(_adapter *padapter)
+{
+       struct dvobj_priv       *pdvobjpriv = adapter_to_dvobj(padapter);
+       struct pci_priv *pcipriv = &(pdvobjpriv->pcipriv);
+       u8      pcibridge_busnum = 0xff;
+       u8      pcibridge_devnum = 0xff;
+       u8      pcibridge_funcnum = 0xff;
+       u16     pcibridge_vendorid = 0xff;
+       u16     pcibridge_deviceid = 0xff;
+       u8      tmp = 0;
+
+       rtw_get_pci_brideg_info(padapter,
+                                    PCI_CLASS_BRIDGE_DEV,
+                                    PCI_SUBCLASS_BR_PCI_TO_PCI,
+                                    pcipriv->busnumber,
+                                    &pcibridge_busnum,
+                                    &pcibridge_devnum, &pcibridge_funcnum,
+                                    &pcibridge_vendorid, &pcibridge_deviceid);
+
+       // match the array of vendor id and regonize which chipset is used.
+       pcipriv->pcibridge_vendor = PCI_BRIDGE_VENDOR_UNKNOWN;
+
+       for (tmp = 0; tmp < PCI_BRIDGE_VENDOR_MAX; tmp++) {
+               if (pcibridge_vendorid == pcibridge_vendors[tmp]) {
+                       pcipriv->pcibridge_vendor = tmp;
+                       DBG_871X("Pci Bridge Vendor is found index: %d\n", tmp);
+                       break;
+               }
+       }
+       DBG_871X("Pci Bridge Vendor is %x\n", pcibridge_vendors[tmp]);
+
+       // Update corresponding PCI bus info.
+       pcipriv->pcibridge_busnum = pcibridge_busnum;
+       pcipriv->pcibridge_devnum = pcibridge_devnum;
+       pcipriv->pcibridge_funcnum = pcibridge_funcnum;
+       pcipriv->pcibridge_vendorid = pcibridge_vendorid;
+       pcipriv->pcibridge_deviceid = pcibridge_deviceid;
+
+}
+
+static u8
+rtw_get_amd_l1_patch(_adapter *padapter, u8 busnum, u8 devnum,
+                         u8 funcnum)
+{
+       u8      status = _FALSE;
+       u8      offset_e0;
+       unsigned        offset_e4;
+       u32     pcicfg_addrport = 0;
+
+       pcicfg_addrport = (busnum << 16) | (devnum << 11) | (funcnum << 8) | (1 << 31);
+
+       NdisRawWritePortUlong(PCI_CONF_ADDRESS, pcicfg_addrport + 0xE0);
+       NdisRawWritePortUchar(PCI_CONF_DATA, 0xA0);
+
+       NdisRawWritePortUlong(PCI_CONF_ADDRESS, pcicfg_addrport + 0xE0);
+       NdisRawReadPortUchar(PCI_CONF_DATA, &offset_e0);
+
+       if (offset_e0 == 0xA0)
+       {
+               NdisRawWritePortUlong(PCI_CONF_ADDRESS, pcicfg_addrport + 0xE4);
+               NdisRawReadPortUlong(PCI_CONF_DATA, &offset_e4);
+               //DbgPrint("Offset E4 %x\n", offset_e4);
+               if (offset_e4 & BIT(23))
+                       status = _TRUE;
+       }
+
+       return status;
+}
+#else
+/*Disable RTL8192SE ASPM & Disable Pci Bridge ASPM*/
+void rtw_pci_disable_aspm(_adapter *padapter)
+{
+       struct dvobj_priv       *pdvobjpriv = adapter_to_dvobj(padapter);
+       struct pwrctrl_priv     *pwrpriv = &padapter->pwrctrlpriv;
+       struct pci_dev  *pdev = pdvobjpriv->ppcidev;
+       struct pci_dev  *bridge_pdev = pdev->bus->self;
+       struct pci_priv *pcipriv = &(pdvobjpriv->pcipriv);
+       u8      linkctrl_reg;
+       u16     pcibridge_linkctrlreg;
+       u16     aspmlevel = 0;
+
+       // We do not diable/enable ASPM by driver, in the future, the BIOS will enable host and NIC ASPM.
+       // Advertised by SD1 victorh. Added by tynli. 2009.11.23.
+       if(pdvobjpriv->const_pci_aspm == 0)
+               return;
+
+       if(!padapter->hw_init_completed)
+               return;
+
+       if (pcipriv->pcibridge_vendor == PCI_BRIDGE_VENDOR_UNKNOWN) {
+               RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("%s(): PCI(Bridge) UNKNOWN.\n", __FUNCTION__));
+               return;
+       }
+
+       linkctrl_reg = pcipriv->linkctrl_reg;
+       pcibridge_linkctrlreg = pcipriv->pcibridge_linkctrlreg;
+
+       // Set corresponding value.
+       aspmlevel |= BIT(0) | BIT(1);
+       linkctrl_reg &=~aspmlevel;
+       pcibridge_linkctrlreg &=~aspmlevel;
+
+       if (pwrpriv->reg_rfps_level & RT_RF_OFF_LEVL_CLK_REQ) {
+               RT_CLEAR_PS_LEVEL(pwrpriv, RT_RF_OFF_LEVL_CLK_REQ);
+               rtw_pci_switch_clk_req(padapter, 0x0);
+       }
+
+       {
+               /*for promising device will in L0 state after an I/O.*/
+               u8 tmp_u1b;
+               pci_read_config_byte(pdev, 0x80, &tmp_u1b);
+       }
+
+       rtw_pci_platform_switch_device_pci_aspm(padapter, linkctrl_reg);
+       rtw_udelay_os(50);
+
+       //When there exists anyone's BusNum, DevNum, and FuncNum that are set to 0xff,
+       // we do not execute any action and return. Added by tynli.
+       if( (pcipriv->busnumber == 0xff && pcipriv->devnumber == 0xff && pcipriv->funcnumber == 0xff) ||
+               (pcipriv->pcibridge_busnum == 0xff && pcipriv->pcibridge_devnum == 0xff && pcipriv->pcibridge_funcnum == 0xff) )
+       {
+               // Do Nothing!!
+       }
+       else
+       {
+               /*Disable Pci Bridge ASPM*/
+               //NdisRawWritePortUlong(PCI_CONF_ADDRESS, pcicfg_addrport + (num4bytes << 2));
+               //NdisRawWritePortUchar(PCI_CONF_DATA, pcibridge_linkctrlreg);
+               pci_write_config_byte(bridge_pdev, pcipriv->pcibridge_pciehdr_offset + 0x10, pcibridge_linkctrlreg);
+
+               DBG_871X("rtw_pci_disable_aspm():PciBridge busnumber[%x], DevNumbe[%x], funcnumber[%x], Write reg[%x] = %x\n",
+                       pcipriv->pcibridge_busnum, pcipriv->pcibridge_devnum,
+                       pcipriv->pcibridge_funcnum,
+                       (pcipriv->pcibridge_pciehdr_offset+0x10), pcibridge_linkctrlreg);
+
+               rtw_udelay_os(50);
+       }
+
+}
+
+/*Enable RTL8192SE ASPM & Enable Pci Bridge ASPM for
+power saving We should follow the sequence to enable
+RTL8192SE first then enable Pci Bridge ASPM
+or the system will show bluescreen.*/
+void rtw_pci_enable_aspm(_adapter *padapter)
+{
+       struct dvobj_priv       *pdvobjpriv = adapter_to_dvobj(padapter);
+       struct pwrctrl_priv     *pwrpriv = &padapter->pwrctrlpriv;
+       struct pci_dev  *pdev = pdvobjpriv->ppcidev;
+       struct pci_dev  *bridge_pdev = pdev->bus->self;
+       struct pci_priv *pcipriv = &(pdvobjpriv->pcipriv);
+       u16     aspmlevel = 0;
+       u8      u_pcibridge_aspmsetting = 0;
+       u8      u_device_aspmsetting = 0;
+       u32     u_device_aspmsupportsetting = 0;
+
+       // We do not diable/enable ASPM by driver, in the future, the BIOS will enable host and NIC ASPM.
+       // Advertised by SD1 victorh. Added by tynli. 2009.11.23.
+       if(pdvobjpriv->const_pci_aspm == 0)
+               return;
+
+       //When there exists anyone's BusNum, DevNum, and FuncNum that are set to 0xff,
+       // we do not execute any action and return. Added by tynli.
+       if( (pcipriv->busnumber == 0xff && pcipriv->devnumber == 0xff && pcipriv->funcnumber == 0xff) ||
+               (pcipriv->pcibridge_busnum == 0xff && pcipriv->pcibridge_devnum == 0xff && pcipriv->pcibridge_funcnum == 0xff) )
+       {
+               DBG_871X("rtw_pci_enable_aspm(): Fail to enable ASPM. Cannot find the Bus of PCI(Bridge).\n");
+               return;
+       }
+
+//Get Bridge ASPM Support
+//not to enable bridge aspm if bridge does not support
+//Added by sherry 20100803
+       if (IS_HARDWARE_TYPE_8192DE(padapter))
+       {
+               //PciCfgAddrPort = (pcipriv->pcibridge_busnum << 16)|(pcipriv->pcibridge_devnum<< 11)|(pcipriv->pcibridge_funcnum <<  8)|(1 << 31);
+               //Num4Bytes = (pcipriv->pcibridge_pciehdr_offset+0x0C)/4;
+               //NdisRawWritePortUlong((ULONG_PTR)PCI_CONF_ADDRESS , PciCfgAddrPort+(Num4Bytes << 2));
+               //NdisRawReadPortUlong((ULONG_PTR)PCI_CONF_DATA,&uDeviceASPMSupportSetting);
+               pci_read_config_dword(bridge_pdev, (pcipriv->pcibridge_pciehdr_offset+0x0C), &u_device_aspmsupportsetting);
+               DBG_871X("rtw_pci_enable_aspm(): Bridge ASPM support %x \n",u_device_aspmsupportsetting);
+               if(((u_device_aspmsupportsetting & BIT(11)) != BIT(11)) || ((u_device_aspmsupportsetting & BIT(10)) != BIT(10)))
+               {
+                       if(pdvobjpriv->const_devicepci_aspm_setting == 3)
+                       {
+                               DBG_871X("rtw_pci_enable_aspm(): Bridge not support L0S or L1\n");
+                               return;
+                       }
+                       else if(pdvobjpriv->const_devicepci_aspm_setting == 2)
+                       {
+                               if((u_device_aspmsupportsetting & BIT(11)) != BIT(11))
+                               {
+                                       DBG_871X("rtw_pci_enable_aspm(): Bridge not support L1 \n");
+                                       return;
+                               }
+                       }
+                       else if(pdvobjpriv->const_devicepci_aspm_setting == 1)
+                       {
+                               if((u_device_aspmsupportsetting & BIT(10)) != BIT(10))
+                               {
+                                       DBG_871X("rtw_pci_enable_aspm(): Bridge not support L0s \n");
+                                       return;
+                               }
+
+                       }
+               }
+               else
+               {
+                       DBG_871X("rtw_pci_enable_aspm(): Bridge support L0s and L1 \n");
+               }
+       }
+
+
+       /*Enable Pci Bridge ASPM*/
+       //PciCfgAddrPort = (pcipriv->pcibridge_busnum << 16)|(pcipriv->pcibridge_devnum<< 11) |(pcipriv->pcibridge_funcnum <<  8)|(1 << 31);
+       //Num4Bytes = (pcipriv->pcibridge_pciehdr_offset+0x10)/4;
+       // set up address port at 0xCF8 offset field= 0 (dev|vend)
+       //NdisRawWritePortUlong(PCI_CONF_ADDRESS, PciCfgAddrPort + (Num4Bytes << 2));
+       // now grab data port with device|vendor 4 byte dword
+
+       u_pcibridge_aspmsetting = pcipriv->pcibridge_linkctrlreg;
+       u_pcibridge_aspmsetting |= pdvobjpriv->const_hostpci_aspm_setting;
+
+       if (pcipriv->pcibridge_vendor == PCI_BRIDGE_VENDOR_INTEL ||
+               pcipriv->pcibridge_vendor == PCI_BRIDGE_VENDOR_SIS )
+               u_pcibridge_aspmsetting &= ~BIT(0); // for intel host 42 device 43
+
+       //NdisRawWritePortUchar(PCI_CONF_DATA, u_pcibridge_aspmsetting);
+       pci_write_config_byte(bridge_pdev, (pcipriv->pcibridge_pciehdr_offset+0x10), u_pcibridge_aspmsetting);
+
+       DBG_871X("PlatformEnableASPM():PciBridge busnumber[%x], DevNumbe[%x], funcnumber[%x], Write reg[%x] = %x\n",
+               pcipriv->pcibridge_busnum, pcipriv->pcibridge_devnum, pcipriv->pcibridge_funcnum,
+               (pcipriv->pcibridge_pciehdr_offset+0x10),
+               u_pcibridge_aspmsetting);
+
+       rtw_udelay_os(50);
+
+       /*Get ASPM level (with/without Clock Req)*/
+       aspmlevel |= pdvobjpriv->const_devicepci_aspm_setting;
+       u_device_aspmsetting = pcipriv->linkctrl_reg;
+       u_device_aspmsetting |= aspmlevel; // device 43
+
+       rtw_pci_platform_switch_device_pci_aspm(padapter, u_device_aspmsetting);
+
+       if (pwrpriv->reg_rfps_level & RT_RF_OFF_LEVL_CLK_REQ) {
+               rtw_pci_switch_clk_req(padapter, (pwrpriv->reg_rfps_level & RT_RF_OFF_LEVL_CLK_REQ) ? 1 : 0);
+               RT_SET_PS_LEVEL(pwrpriv, RT_RF_OFF_LEVL_CLK_REQ);
+       }
+
+       rtw_udelay_os(50);
+}
+
+static u8 rtw_pci_get_amd_l1_patch(struct dvobj_priv *dvobj)
+{
+       struct pci_dev  *pdev = dvobj->ppcidev;
+       struct pci_dev  *bridge_pdev = pdev->bus->self;
+       u8      status = _FALSE;
+       u8      offset_e0;
+       u32     offset_e4;
+
+       //NdisRawWritePortUlong(PCI_CONF_ADDRESS,pcicfg_addrport + 0xE0);
+       //NdisRawWritePortUchar(PCI_CONF_DATA, 0xA0);
+       pci_write_config_byte(bridge_pdev, 0xE0, 0xA0);
+
+       //NdisRawWritePortUlong(PCI_CONF_ADDRESS,pcicfg_addrport + 0xE0);
+       //NdisRawReadPortUchar(PCI_CONF_DATA, &offset_e0);
+       pci_read_config_byte(bridge_pdev, 0xE0, &offset_e0);
+
+       if (offset_e0 == 0xA0) {
+               //NdisRawWritePortUlong(PCI_CONF_ADDRESS, pcicfg_addrport + 0xE4);
+               //NdisRawReadPortUlong(PCI_CONF_DATA, &offset_e4);
+               pci_read_config_dword(bridge_pdev, 0xE4, &offset_e4);
+               if (offset_e4 & BIT(23))
+                       status = _TRUE;
+       }
+
+       return status;
+}
+
+static void rtw_pci_get_linkcontrol_field(struct dvobj_priv *dvobj)
+{
+       struct pci_priv *pcipriv = &(dvobj->pcipriv);
+       struct pci_dev  *pdev = dvobj->ppcidev;
+       struct pci_dev  *bridge_pdev = pdev->bus->self;
+       u8      capabilityoffset = pcipriv->pcibridge_pciehdr_offset;
+       u8      linkctrl_reg;
+
+       /*Read  Link Control Register*/
+       pci_read_config_byte(bridge_pdev, capabilityoffset + PCI_EXP_LNKCTL, &linkctrl_reg);
+
+       pcipriv->pcibridge_linkctrlreg = linkctrl_reg;
+}
+#endif
+
+static void rtw_pci_parse_configuration(struct dvobj_priv *dvobj)
+{
+       struct pci_dev  *pdev = dvobj->ppcidev;
+       struct pci_priv *pcipriv = &(dvobj->pcipriv);
+       u8 tmp;
+       int pos;
+       u8 linkctrl_reg;
+
+       //Link Control Register
+       pos = pci_find_capability(pdev, PCI_CAP_ID_EXP);
+       pci_read_config_byte(pdev, pos + PCI_EXP_LNKCTL, &linkctrl_reg);
+       pcipriv->linkctrl_reg = linkctrl_reg;
+
+       //DBG_871X("Link Control Register = %x\n", pcipriv->linkctrl_reg);
+
+       pci_read_config_byte(pdev, 0x98, &tmp);
+       tmp |= BIT(4);
+       pci_write_config_byte(pdev, 0x98, tmp);
+
+       //tmp = 0x17;
+       //pci_write_config_byte(pdev, 0x70f, tmp);
+}
+
+//
+// Update PCI dependent default settings.
+//
+static void rtw_pci_update_default_setting(_adapter *padapter)
+{
+       struct dvobj_priv       *pdvobjpriv = adapter_to_dvobj(padapter);
+       struct pci_priv *pcipriv = &(pdvobjpriv->pcipriv);
+       struct pwrctrl_priv     *pwrpriv = &padapter->pwrctrlpriv;
+
+       //reset pPSC->reg_rfps_level & priv->b_support_aspm
+       pwrpriv->reg_rfps_level = 0;
+       pwrpriv->b_support_aspm = 0;
+
+       // Dynamic Mechanism,
+       //rtw_hal_set_def_var(pAdapter, HAL_DEF_INIT_GAIN, &(pDevice->InitGainState));
+
+       // Update PCI ASPM setting
+       pwrpriv->const_amdpci_aspm = pdvobjpriv->const_amdpci_aspm;
+       switch (pdvobjpriv->const_pci_aspm) {
+               case 0:         // No ASPM
+                       break;
+
+               case 1:         // ASPM dynamically enabled/disable.
+                       pwrpriv->reg_rfps_level |= RT_RF_LPS_LEVEL_ASPM;
+                       break;
+
+               case 2:         // ASPM with Clock Req dynamically enabled/disable.
+                       pwrpriv->reg_rfps_level |= (RT_RF_LPS_LEVEL_ASPM | RT_RF_OFF_LEVL_CLK_REQ);
+                       break;
+
+               case 3:         // Always enable ASPM and Clock Req from initialization to halt.
+                       pwrpriv->reg_rfps_level &= ~(RT_RF_LPS_LEVEL_ASPM);
+                       pwrpriv->reg_rfps_level |= (RT_RF_PS_LEVEL_ALWAYS_ASPM | RT_RF_OFF_LEVL_CLK_REQ);
+                       break;
+
+               case 4:         // Always enable ASPM without Clock Req from initialization to halt.
+                       pwrpriv->reg_rfps_level &= ~(RT_RF_LPS_LEVEL_ASPM | RT_RF_OFF_LEVL_CLK_REQ);
+                       pwrpriv->reg_rfps_level |= RT_RF_PS_LEVEL_ALWAYS_ASPM;
+                       break;
+       }
+
+       pwrpriv->reg_rfps_level |= RT_RF_OFF_LEVL_HALT_NIC;
+
+       // Update Radio OFF setting
+       switch (pdvobjpriv->const_hwsw_rfoff_d3) {
+               case 1:
+                       if (pwrpriv->reg_rfps_level & RT_RF_LPS_LEVEL_ASPM)
+                               pwrpriv->reg_rfps_level |= RT_RF_OFF_LEVL_ASPM;
+                       break;
+
+               case 2:
+                       if (pwrpriv->reg_rfps_level & RT_RF_LPS_LEVEL_ASPM)
+                               pwrpriv->reg_rfps_level |= RT_RF_OFF_LEVL_ASPM;
+                       pwrpriv->reg_rfps_level |= RT_RF_OFF_LEVL_HALT_NIC;
+                       break;
+
+               case 3:
+                       pwrpriv->reg_rfps_level |= RT_RF_OFF_LEVL_PCI_D3;
+                       break;
+       }
+
+       // Update Rx 2R setting
+       //pPSC->reg_rfps_level |= ((pDevice->RegLPS2RDisable) ? RT_RF_LPS_DISALBE_2R : 0);
+
+       //
+       // Set HW definition to determine if it supports ASPM.
+       //
+       switch (pdvobjpriv->const_support_pciaspm) {
+               case 0: // Not support ASPM.
+                       {
+                               u8      b_support_aspm = _FALSE;
+                               pwrpriv->b_support_aspm = b_support_aspm;
+                       }
+                       break;
+
+               case 1: // Support ASPM.
+                       {
+                               u8      b_support_aspm = _TRUE;
+                               u8      b_support_backdoor = _TRUE;
+
+                               pwrpriv->b_support_aspm = b_support_aspm;
+
+                               /*if(pAdapter->MgntInfo.CustomerID == RT_CID_TOSHIBA &&
+                                       pcipriv->pcibridge_vendor == PCI_BRIDGE_VENDOR_AMD &&
+                                       !pcipriv->amd_l1_patch)
+                                       b_support_backdoor = _FALSE;*/
+
+                               pwrpriv->b_support_backdoor = b_support_backdoor;
+                       }
+                       break;
+
+               case 2: // Set by Chipset.
+                       // ASPM value set by chipset.
+                       if (pcipriv->pcibridge_vendor == PCI_BRIDGE_VENDOR_INTEL) {
+                               u8      b_support_aspm = _TRUE;
+                               pwrpriv->b_support_aspm = b_support_aspm;
+                       }
+                       break;
+
+               default:
+                       // Do nothing. Set when finding the chipset.
+                       break;
+       }
+}
+
+static void rtw_pci_initialize_adapter_common(_adapter *padapter)
+{
+       struct pwrctrl_priv     *pwrpriv = &padapter->pwrctrlpriv;
+
+       rtw_pci_update_default_setting(padapter);
+
+       if (pwrpriv->reg_rfps_level & RT_RF_PS_LEVEL_ALWAYS_ASPM) {
+               // Always enable ASPM & Clock Req.
+               rtw_pci_enable_aspm(padapter);
+               RT_SET_PS_LEVEL(pwrpriv, RT_RF_PS_LEVEL_ALWAYS_ASPM);
+       }
+
+}
+
+#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,5,0)) || (LINUX_VERSION_CODE > KERNEL_VERSION(2,6,18))
+#define rtw_pci_interrupt(x,y,z) rtw_pci_interrupt(x,y)
+#endif
+
+static irqreturn_t rtw_pci_interrupt(int irq, void *priv, struct pt_regs *regs)
+{
+       struct dvobj_priv *dvobj = (struct dvobj_priv *)priv;
+       _adapter *adapter = dvobj->if1;
+
+       if (dvobj->irq_enabled == 0) {
+               return IRQ_HANDLED;
+       }
+
+       if(rtw_hal_interrupt_handler(adapter) == _FAIL)
+               return IRQ_HANDLED;
+               //return IRQ_NONE;
+
+       return IRQ_HANDLED;
+}
+
+#ifdef RTK_DMP_PLATFORM
+#define pci_iounmap(x,y) iounmap(y)
+#endif
+
+int pci_alloc_irq(struct dvobj_priv *dvobj)
+{
+       int err;
+       struct pci_dev *pdev = dvobj->ppcidev;
+
+#if defined(IRQF_SHARED)
+       err = request_irq(pdev->irq, &rtw_pci_interrupt, IRQF_SHARED, DRV_NAME, dvobj);
+#else
+       err = request_irq(pdev->irq, &rtw_pci_interrupt, SA_SHIRQ, DRV_NAME, dvobj);
+#endif
+       if (err) {
+               DBG_871X("Error allocating IRQ %d",pdev->irq);
+       } else {
+               dvobj->irq_alloc = 1;
+               DBG_871X("Request_irq OK, IRQ %d\n",pdev->irq);
+       }
+
+       return err?_FAIL:_SUCCESS;
+}
+
+static struct dvobj_priv *pci_dvobj_init(struct pci_dev *pdev)
+{
+       int err;
+       u32     status = _FAIL;
+       struct dvobj_priv *dvobj = NULL;
+       struct pci_priv *pcipriv = NULL;
+       struct pci_dev *bridge_pdev = pdev->bus->self;
+       unsigned long pmem_start, pmem_len, pmem_flags;
+       u8      tmp;
+
+_func_enter_;
+
+       if ((dvobj = devobj_init()) == NULL) {
+               goto exit;
+       }
+       dvobj->ppcidev = pdev;
+       pcipriv = &(dvobj->pcipriv);
+       pci_set_drvdata(pdev, dvobj);
+
+       if ( (err = pci_enable_device(pdev)) != 0) {
+               DBG_871X(KERN_ERR "%s : Cannot enable new PCI device\n", pci_name(pdev));
+               goto free_dvobj;
+       }
+
+#ifdef CONFIG_64BIT_DMA
+       if (!pci_set_dma_mask(pdev, DMA_BIT_MASK(64))) {
+               DBG_871X("RTL819xCE: Using 64bit DMA\n");
+               if ((err = pci_set_consistent_dma_mask(pdev, DMA_BIT_MASK(64))) != 0) {
+                       DBG_871X(KERN_ERR "Unable to obtain 64bit DMA for consistent allocations\n");
+                       goto disable_picdev;
+               }
+               dvobj->bdma64 = _TRUE;
+       } else
+#endif
+       {
+               if (!pci_set_dma_mask(pdev, DMA_BIT_MASK(32))) {
+                       if ((err = pci_set_consistent_dma_mask(pdev, DMA_BIT_MASK(32))) != 0) {
+                               DBG_871X(KERN_ERR "Unable to obtain 32bit DMA for consistent allocations\n");
+                               goto disable_picdev;
+                       }
+               }
+       }
+
+       pci_set_master(pdev);
+
+       if ((err = pci_request_regions(pdev, DRV_NAME)) != 0) {
+               DBG_871X(KERN_ERR "Can't obtain PCI resources\n");
+               goto disable_picdev;
+       }
+       //MEM map
+       pmem_start = pci_resource_start(pdev, 2);
+       pmem_len = pci_resource_len(pdev, 2);
+       pmem_flags = pci_resource_flags(pdev, 2);
+
+#ifdef RTK_DMP_PLATFORM
+       dvobj->pci_mem_start = (unsigned long)ioremap_nocache(pmem_start, pmem_len);
+#else
+       dvobj->pci_mem_start = (unsigned long)pci_iomap(pdev, 2, pmem_len); /* shared mem start */
+#endif
+       if (dvobj->pci_mem_start == 0) {
+               DBG_871X(KERN_ERR "Can't map PCI mem\n");
+               goto release_regions;
+       }
+
+       DBG_871X("Memory mapped space start: 0x%08lx len:%08lx flags:%08lx, after map:0x%08lx\n",
+               pmem_start, pmem_len, pmem_flags, dvobj->pci_mem_start);
+
+       // Disable Clk Request */
+       pci_write_config_byte(pdev, 0x81, 0);
+       // leave D3 mode */
+       pci_write_config_byte(pdev, 0x44, 0);
+       pci_write_config_byte(pdev, 0x04, 0x06);
+       pci_write_config_byte(pdev, 0x04, 0x07);
+
+
+#if 1
+       /*find bus info*/
+       pcipriv->busnumber = pdev->bus->number;
+       pcipriv->devnumber = PCI_SLOT(pdev->devfn);
+       pcipriv->funcnumber = PCI_FUNC(pdev->devfn);
+
+       /*find bridge info*/
+       pcipriv->pcibridge_vendor = PCI_BRIDGE_VENDOR_UNKNOWN;
+       if(bridge_pdev){
+               pcipriv->pcibridge_vendorid = bridge_pdev->vendor;
+               for (tmp = 0; tmp < PCI_BRIDGE_VENDOR_MAX; tmp++) {
+                       if (bridge_pdev->vendor == pcibridge_vendors[tmp]) {
+                               pcipriv->pcibridge_vendor = tmp;
+                               DBG_871X("Pci Bridge Vendor is found index: %d, %x\n", tmp, pcibridge_vendors[tmp]);
+                               break;
+                       }
+               }
+       }
+
+       //if (pcipriv->pcibridge_vendor != PCI_BRIDGE_VENDOR_UNKNOWN) {
+       if(bridge_pdev){
+               pcipriv->pcibridge_busnum = bridge_pdev->bus->number;
+               pcipriv->pcibridge_devnum = PCI_SLOT(bridge_pdev->devfn);
+               pcipriv->pcibridge_funcnum = PCI_FUNC(bridge_pdev->devfn);
+
+#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,34))
+               pcipriv->pcibridge_pciehdr_offset = pci_find_capability(bridge_pdev, PCI_CAP_ID_EXP);
+#else
+               pcipriv->pcibridge_pciehdr_offset = bridge_pdev->pcie_cap;
+#endif
+
+               rtw_pci_get_linkcontrol_field(dvobj);
+
+               if (pcipriv->pcibridge_vendor == PCI_BRIDGE_VENDOR_AMD) {
+                       pcipriv->amd_l1_patch = rtw_pci_get_amd_l1_patch(dvobj);
+               }
+       }
+#else
+       //
+       // Find bridge related info.
+       //
+       rtw_get_pci_bus_info(padapter,
+                                 pdev->vendor,
+                                 pdev->device,
+                                 (u8) pdvobjpriv->irqline,
+                                 0x02, 0x80, U1DONTCARE,
+                                 &pcipriv->busnumber,
+                                 &pcipriv->devnumber,
+                                 &pcipriv->funcnumber);
+
+       rtw_find_bridge_info(padapter);
+
+       if (pcipriv->pcibridge_vendor != PCI_BRIDGE_VENDOR_UNKNOWN) {
+               rtw_get_link_control_field(padapter,
+                                               pcipriv->pcibridge_busnum,
+                                               pcipriv->pcibridge_devnum,
+                                               pcipriv->pcibridge_funcnum);
+
+               if (pcipriv->pcibridge_vendor == PCI_BRIDGE_VENDOR_AMD) {
+                       pcipriv->amd_l1_patch =
+                               rtw_get_amd_l1_patch(padapter,
+                                                       pcipriv->pcibridge_busnum,
+                                                       pcipriv->pcibridge_devnum,
+                                                       pcipriv->pcibridge_funcnum);
+               }
+       }
+#endif
+
+       //
+       // Allow the hardware to look at PCI config information.
+       //
+       rtw_pci_parse_configuration(dvobj);
+
+       DBG_871X("pcidev busnumber:devnumber:funcnumber:"
+               "vendor:link_ctl %d:%d:%d:%x:%x\n",
+               pcipriv->busnumber,
+               pcipriv->devnumber,
+               pcipriv->funcnumber,
+               pdev->vendor,
+               pcipriv->linkctrl_reg);
+
+       DBG_871X("pci_bridge busnumber:devnumber:funcnumber:vendor:"
+               "pcie_cap:link_ctl_reg: %d:%d:%d:%x:%x:%x:%x\n",
+               pcipriv->pcibridge_busnum,
+               pcipriv->pcibridge_devnum,
+               pcipriv->pcibridge_funcnum,
+               pcibridge_vendors[pcipriv->pcibridge_vendor],
+               pcipriv->pcibridge_pciehdr_offset,
+               pcipriv->pcibridge_linkctrlreg,
+               pcipriv->amd_l1_patch);
+
+       status = _SUCCESS;
+
+iounmap:
+       if (status != _SUCCESS && dvobj->pci_mem_start != 0) {
+               pci_iounmap(pdev, (void *)dvobj->pci_mem_start);
+               dvobj->pci_mem_start = 0;
+       }
+release_regions:
+       if (status != _SUCCESS)
+               pci_release_regions(pdev);
+disable_picdev:
+       if (status != _SUCCESS)
+               pci_disable_device(pdev);
+free_dvobj:
+       if (status != _SUCCESS && dvobj) {
+               pci_set_drvdata(pdev, NULL);
+               devobj_deinit(dvobj);
+               dvobj = NULL;
+       }
+exit:
+_func_exit_;
+       return dvobj;
+}
+
+static void pci_dvobj_deinit(struct pci_dev *pdev)
+{
+       struct dvobj_priv *dvobj = pci_get_drvdata(pdev);
+_func_enter_;
+
+       pci_set_drvdata(pdev, NULL);
+       if (dvobj) {
+               if (dvobj->irq_alloc) {
+                       free_irq(pdev->irq, dvobj);
+                       dvobj->irq_alloc = 0;
+               }
+
+               if (dvobj->pci_mem_start != 0) {
+                       pci_iounmap(pdev, (void *)dvobj->pci_mem_start);
+                       dvobj->pci_mem_start = 0;
+               }
+
+               devobj_deinit(dvobj);
+       }
+
+       pci_release_regions(pdev);
+       pci_disable_device(pdev);
+
+_func_exit_;
+}
+
+static void decide_chip_type_by_pci_device_id(_adapter *padapter, struct pci_dev *pdev)
+{
+       u16     venderid, deviceid, irqline;
+       u8      revisionid;
+       struct dvobj_priv       *pdvobjpriv = adapter_to_dvobj(padapter);
+
+
+       venderid = pdev->vendor;
+       deviceid = pdev->device;
+#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,23))
+       pci_read_config_byte(pdev, PCI_REVISION_ID, &revisionid); // PCI_REVISION_ID 0x08
+#else
+       revisionid = pdev->revision;
+#endif
+       pci_read_config_word(pdev, PCI_INTERRUPT_LINE, &irqline); // PCI_INTERRUPT_LINE 0x3c
+       pdvobjpriv->irqline = irqline;
+
+
+       //
+       // Decide hardware type here.
+       //
+       if( deviceid == HAL_HW_PCI_8185_DEVICE_ID ||
+           deviceid == HAL_HW_PCI_8188_DEVICE_ID ||
+           deviceid == HAL_HW_PCI_8198_DEVICE_ID)
+       {
+               DBG_871X("Adapter (8185/8185B) is found- VendorID/DeviceID=%x/%x\n", venderid, deviceid);
+               padapter->HardwareType=HARDWARE_TYPE_RTL8185;
+       }
+       else if (deviceid == HAL_HW_PCI_8190_DEVICE_ID ||
+               deviceid == HAL_HW_PCI_0045_DEVICE_ID ||
+               deviceid == HAL_HW_PCI_0046_DEVICE_ID ||
+               deviceid == HAL_HW_PCI_DLINK_DEVICE_ID)
+       {
+               DBG_871X("Adapter(8190 PCI) is found - vendorid/deviceid=%x/%x\n", venderid, deviceid);
+               padapter->HardwareType = HARDWARE_TYPE_RTL8190P;
+       }
+       else if (deviceid == HAL_HW_PCI_8192_DEVICE_ID ||
+               deviceid == HAL_HW_PCI_0044_DEVICE_ID ||
+               deviceid == HAL_HW_PCI_0047_DEVICE_ID ||
+               deviceid == HAL_HW_PCI_8192SE_DEVICE_ID ||
+               deviceid == HAL_HW_PCI_8174_DEVICE_ID ||
+               deviceid == HAL_HW_PCI_8173_DEVICE_ID ||
+               deviceid == HAL_HW_PCI_8172_DEVICE_ID ||
+               deviceid == HAL_HW_PCI_8171_DEVICE_ID)
+       {
+               // 8192e and and 8192se may have the same device ID 8192. However, their Revision
+               // ID is different
+               // Added for 92DE. We deferentiate it from SVID,SDID.
+               if( pdev->subsystem_vendor == 0x10EC && pdev->subsystem_device == 0xE020){
+                       padapter->HardwareType = HARDWARE_TYPE_RTL8192DE;
+                       DBG_871X("Adapter(8192DE) is found - VendorID/DeviceID/RID=%X/%X/%X\n", venderid, deviceid, revisionid);
+               }else{
+                       switch (revisionid) {
+                               case HAL_HW_PCI_REVISION_ID_8192PCIE:
+                                       DBG_871X("Adapter(8192 PCI-E) is found - vendorid/deviceid=%x/%x\n", venderid, deviceid);
+                                       padapter->HardwareType = HARDWARE_TYPE_RTL8192E;
+                                       break;
+                               case HAL_HW_PCI_REVISION_ID_8192SE:
+                                       DBG_871X("Adapter(8192SE) is found - vendorid/deviceid=%x/%x\n", venderid, deviceid);
+                                       padapter->HardwareType = HARDWARE_TYPE_RTL8192SE;
+                                       break;
+                               default:
+                                       DBG_871X("Err: Unknown device - vendorid/deviceid=%x/%x\n", venderid, deviceid);
+                                       padapter->HardwareType = HARDWARE_TYPE_RTL8192SE;
+                                       break;
+                       }
+               }
+       }
+       else if(deviceid==HAL_HW_PCI_8723E_DEVICE_ID )
+       {//RTL8723E may have the same device ID with RTL8192CET
+               padapter->HardwareType = HARDWARE_TYPE_RTL8723AE;
+               DBG_871X("Adapter(8723 PCI-E) is found - VendorID/DeviceID=%x/%x\n", venderid, deviceid);
+       }
+       else if (deviceid == HAL_HW_PCI_8192CET_DEVICE_ID ||
+               deviceid == HAL_HW_PCI_8192CE_DEVICE_ID ||
+               deviceid == HAL_HW_PCI_8191CE_DEVICE_ID ||
+               deviceid == HAL_HW_PCI_8188CE_DEVICE_ID)
+       {
+               DBG_871X("Adapter(8192C PCI-E) is found - vendorid/deviceid=%x/%x\n", venderid, deviceid);
+               padapter->HardwareType = HARDWARE_TYPE_RTL8192CE;
+       }
+       else if (deviceid == HAL_HW_PCI_8192DE_DEVICE_ID ||
+               deviceid == HAL_HW_PCI_002B_DEVICE_ID ){
+               padapter->HardwareType = HARDWARE_TYPE_RTL8192DE;
+               DBG_871X("Adapter(8192DE) is found - VendorID/DeviceID/RID=%X/%X/%X\n", venderid, deviceid, revisionid);
+       }
+       else
+       {
+               DBG_871X("Err: Unknown device - vendorid/deviceid=%x/%x\n", venderid, deviceid);
+               //padapter->HardwareType = HAL_DEFAULT_HARDWARE_TYPE;
+       }
+
+
+       padapter->chip_type = NULL_CHIP_TYPE;
+
+       //TODO:
+#ifdef CONFIG_RTL8192C
+       padapter->chip_type = RTL8188C_8192C;
+       padapter->HardwareType = HARDWARE_TYPE_RTL8192CE;
+#endif
+#ifdef CONFIG_RTL8192D
+       pdvobjpriv->InterfaceNumber = revisionid;
+
+       padapter->chip_type = RTL8192D;
+       padapter->HardwareType = HARDWARE_TYPE_RTL8192DE;
+#endif
+
+}
+
+static void pci_intf_start(_adapter *padapter)
+{
+
+       RT_TRACE(_module_hci_intfs_c_,_drv_err_,("+pci_intf_start\n"));
+       DBG_871X("+pci_intf_start\n");
+
+#ifdef CONFIG_PCILED_BLINK
+       rtw_led_control(padapter, LED_CTL_NO_LINK);
+#endif
+       //Enable hw interrupt
+       rtw_hal_enable_interrupt(padapter);
+
+       RT_TRACE(_module_hci_intfs_c_,_drv_err_,("-pci_intf_start\n"));
+       DBG_871X("-pci_intf_start\n");
+}
+
+static void pci_intf_stop(_adapter *padapter)
+{
+
+       RT_TRACE(_module_hci_intfs_c_,_drv_err_,("+pci_intf_stop\n"));
+
+       //Disable hw interrupt
+       if(padapter->bSurpriseRemoved == _FALSE)
+       {
+               //device still exists, so driver can do i/o operation
+               rtw_hal_disable_interrupt(padapter);
+               tasklet_disable(&(padapter->recvpriv.recv_tasklet));
+               tasklet_disable(&(padapter->recvpriv.irq_prepare_beacon_tasklet));
+               tasklet_disable(&(padapter->xmitpriv.xmit_tasklet));
+
+#ifdef CONFIG_CONCURRENT_MODE
+               /*      This function only be called at driver removing. disable buddy_adapter too
+                       don't disable interrupt of buddy_adapter because it is same as primary.
+               */
+               if (padapter->pbuddy_adapter){
+                       tasklet_disable(&(padapter->pbuddy_adapter->recvpriv.recv_tasklet));
+                       tasklet_disable(&(padapter->pbuddy_adapter->recvpriv.irq_prepare_beacon_tasklet));
+                       tasklet_disable(&(padapter->pbuddy_adapter->xmitpriv.xmit_tasklet));
+               }
+#endif
+               RT_TRACE(_module_hci_intfs_c_,_drv_err_,("pci_intf_stop: SurpriseRemoved==_FALSE\n"));
+       }
+       else
+       {
+               // Clear irq_enabled to prevent handle interrupt function.
+               adapter_to_dvobj(padapter)->irq_enabled = 0;
+       }
+
+       RT_TRACE(_module_hci_intfs_c_,_drv_err_,("-pci_intf_stop\n"));
+
+}
+
+
+static void rtw_dev_unload(_adapter *padapter)
+{
+       struct net_device *pnetdev= (struct net_device*)padapter->pnetdev;
+
+       RT_TRACE(_module_hci_intfs_c_,_drv_err_,("+rtw_dev_unload\n"));
+
+       if(padapter->bup == _TRUE)
+       {
+               DBG_871X("+rtw_dev_unload\n");
+
+               padapter->bDriverStopped = _TRUE;
+               #ifdef CONFIG_XMIT_ACK
+               if (padapter->xmitpriv.ack_tx)
+                       rtw_ack_tx_done(&padapter->xmitpriv, RTW_SCTX_DONE_DRV_STOP);
+               #endif
+
+               //s3.
+               if(padapter->intf_stop)
+               {
+                       padapter->intf_stop(padapter);
+               }
+
+               //s4.
+               rtw_stop_drv_threads(padapter);
+
+
+               //s5.
+               if(padapter->bSurpriseRemoved == _FALSE)
+               {
+                       DBG_871X("r871x_dev_unload()->rtl871x_hal_deinit()\n");
+                       rtw_hal_deinit(padapter);
+
+                       padapter->bSurpriseRemoved = _TRUE;
+               }
+
+               padapter->bup = _FALSE;
+
+       }
+       else
+       {
+               RT_TRACE(_module_hci_intfs_c_,_drv_err_,("r871x_dev_unload():padapter->bup == _FALSE\n" ));
+       }
+
+       DBG_871X("-rtw_dev_unload\n");
+
+       RT_TRACE(_module_hci_intfs_c_,_drv_err_,("-rtw_dev_unload\n"));
+
+}
+
+static void disable_ht_for_spec_devid(const struct pci_device_id *pdid)
+{
+#ifdef CONFIG_80211N_HT
+       u16 vid, pid;
+       u32 flags;
+       int i;
+       int num = sizeof(specific_device_id_tbl)/sizeof(struct specific_device_id);
+
+       for(i=0; i<num; i++)
+       {
+               vid = specific_device_id_tbl[i].idVendor;
+               pid = specific_device_id_tbl[i].idProduct;
+               flags = specific_device_id_tbl[i].flags;
+
+               if((pdid->vendor==vid) && (pdid->device==pid) && (flags&SPEC_DEV_ID_DISABLE_HT))
+               {
+                        rtw_ht_enable = 0;
+                        rtw_cbw40_enable = 0;
+                        rtw_ampdu_enable = 0;
+               }
+
+       }
+#endif
+}
+
+#ifdef CONFIG_PM
+static int rtw_suspend(struct pci_dev *pdev, pm_message_t state)
+{
+       _func_enter_;
+
+
+       _func_exit_;
+       return 0;
+}
+
+static int rtw_resume(struct pci_dev *pdev)
+{
+       _func_enter_;
+
+
+       _func_exit_;
+
+       return 0;
+}
+#endif
+
+_adapter *rtw_pci_if1_init(struct dvobj_priv * dvobj, struct pci_dev *pdev,
+       const struct pci_device_id *pdid)
+{
+       _adapter *padapter = NULL;
+       struct net_device *pnetdev = NULL;
+       int status = _FAIL;
+
+       if ((padapter = (_adapter *)rtw_zvmalloc(sizeof(*padapter))) == NULL) {
+               goto exit;
+       }
+       padapter->dvobj = dvobj;
+       dvobj->if1 = padapter;
+
+       padapter->bDriverStopped=_TRUE;
+
+       dvobj->padapters[dvobj->iface_nums++] = padapter;
+       padapter->iface_id = IFACE_ID0;
+
+#if defined(CONFIG_CONCURRENT_MODE) || defined(CONFIG_DUALMAC_CONCURRENT)
+       //set adapter_type/iface type for primary padapter
+       padapter->isprimary = _TRUE;
+       padapter->adapter_type = PRIMARY_ADAPTER;
+       #ifndef CONFIG_HWPORT_SWAP
+       padapter->iface_type = IFACE_PORT0;
+       #else
+       padapter->iface_type = IFACE_PORT1;
+       #endif
+#endif
+
+       //step 1-1., decide the chip_type via vid/pid
+       padapter->interface_type = RTW_PCIE;
+       decide_chip_type_by_pci_device_id(padapter, pdev);
+
+       if((pnetdev = rtw_init_netdev(padapter)) == NULL) {
+               goto free_adapter;
+       }
+       if (dvobj->bdma64)
+               pnetdev->features |= NETIF_F_HIGHDMA;
+       pnetdev->irq = pdev->irq;
+       SET_NETDEV_DEV(pnetdev, dvobj_to_dev(dvobj));
+       padapter = rtw_netdev_priv(pnetdev);
+
+       //step 2. hook HalFunc, allocate HalData
+       if (padapter->chip_type == RTL8188C_8192C) {
+               #ifdef CONFIG_RTL8192C
+               rtl8192ce_set_hal_ops(padapter);
+               #endif
+       } else if (padapter->chip_type == RTL8192D) {
+               #ifdef CONFIG_RTL8192D
+               rtl8192de_set_hal_ops(padapter);
+               #endif
+       } else {
+               DBG_871X("Detect NULL_CHIP_TYPE\n");
+               goto free_hal_data;
+       }
+
+       //step 3.       initialize the dvobj_priv
+       padapter->intf_start=&pci_intf_start;
+       padapter->intf_stop=&pci_intf_stop;
+
+
+       //.2
+       if ((rtw_init_io_priv(padapter, pci_set_intf_ops)) == _FAIL) {
+               RT_TRACE(_module_hci_intfs_c_,_drv_err_,(" \n Can't init io_reqs\n"));
+               goto free_hal_data;
+       }
+
+       //.3
+       rtw_hal_read_chip_version(padapter);
+
+       //.4
+       rtw_hal_chip_configure(padapter);
+
+       //step 4. read efuse/eeprom data and get mac_addr
+       rtw_hal_read_chip_info(padapter);
+
+       if (rtw_handle_dualmac(padapter, 1) != _SUCCESS)
+               goto free_hal_data;
+
+#ifdef CONFIG_IOCTL_CFG80211
+       if(rtw_wdev_alloc(padapter, dvobj_to_dev(dvobj)) != 0) {
+               goto handle_dualmac;
+       }
+#endif
+
+       //step 5.
+       if (rtw_init_drv_sw(padapter) == _FAIL) {
+               RT_TRACE(_module_hci_intfs_c_,_drv_err_,("Initialize driver software resource Failed!\n"));
+               goto free_wdev;
+       }
+
+       status = rtw_hal_inirp_init(padapter);
+       if(status ==_FAIL){
+               RT_TRACE(_module_hci_intfs_c_,_drv_err_,("Initialize PCI desc ring Failed!\n"));
+               goto free_drv_sw;
+       }
+
+       rtw_macaddr_cfg(padapter->eeprompriv.mac_addr);
+       rtw_init_wifidirect_addrs(padapter, padapter->eeprompriv.mac_addr, padapter->eeprompriv.mac_addr);
+
+
+       rtw_hal_disable_interrupt(padapter);
+
+       //step 6. Init pci related configuration
+       rtw_pci_initialize_adapter_common(padapter);
+
+       DBG_871X("bDriverStopped:%d, bSurpriseRemoved:%d, bup:%d, hw_init_completed:%d\n"
+               ,padapter->bDriverStopped
+               ,padapter->bSurpriseRemoved
+               ,padapter->bup
+               ,padapter->hw_init_completed
+       );
+
+       status = _SUCCESS;
+
+inirp_deinit:
+       if (status != _SUCCESS)
+               rtw_hal_inirp_deinit(padapter);
+free_drv_sw:
+       if (status != _SUCCESS)
+               rtw_free_drv_sw(padapter);
+free_wdev:
+       if (status != _SUCCESS) {
+               #ifdef CONFIG_IOCTL_CFG80211
+               rtw_wdev_unregister(padapter->rtw_wdev);
+               rtw_wdev_free(padapter->rtw_wdev);
+               #endif
+       }
+handle_dualmac:
+       if (status != _SUCCESS)
+               rtw_handle_dualmac(padapter, 0);
+free_hal_data:
+       if (status != _SUCCESS && padapter->HalData)
+               rtw_mfree(padapter->HalData, sizeof(*(padapter->HalData)));
+free_adapter:
+       if (status != _SUCCESS) {
+               if (pnetdev)
+                       rtw_free_netdev(pnetdev);
+               else if (padapter)
+                       rtw_vmfree((u8*)padapter, sizeof(*padapter));
+               padapter = NULL;
+       }
+exit:
+       return padapter;
+}
+
+static void rtw_pci_if1_deinit(_adapter *if1)
+{
+       struct net_device *pnetdev = if1->pnetdev;
+       struct mlme_priv *pmlmepriv= &if1->mlmepriv;
+
+       //      padapter->intf_stop(padapter);
+
+       if(check_fwstate(pmlmepriv, _FW_LINKED))
+               rtw_disassoc_cmd(if1, 0, _FALSE);
+
+#ifdef CONFIG_AP_MODE
+       free_mlme_ap_info(if1);
+       #ifdef CONFIG_HOSTAPD_MLME
+       hostapd_mode_unload(if1);
+       #endif
+#endif
+
+       rtw_cancel_all_timer(if1);
+#ifdef CONFIG_WOWLAN
+       if1->pwrctrlpriv.wowlan_mode=_FALSE;
+#endif //CONFIG_WOWLAN
+       rtw_dev_unload(if1);
+
+       DBG_871X("%s, hw_init_completed=%d\n", __func__, if1->hw_init_completed);
+
+       //s6.
+       rtw_handle_dualmac(if1, 0);
+
+#ifdef CONFIG_IOCTL_CFG80211
+       if (if1->rtw_wdev)
+               rtw_wdev_free(if1->rtw_wdev);
+#endif //CONFIG_IOCTL_CFG80211
+
+       rtw_hal_inirp_deinit(if1);
+       rtw_free_drv_sw(if1);
+
+       if(pnetdev)
+               rtw_free_netdev(pnetdev);
+
+#ifdef CONFIG_PLATFORM_RTD2880B
+       DBG_871X("wlan link down\n");
+       rtd2885_wlan_netlink_sendMsg("linkdown", "8712");
+#endif
+}
+
+/*
+ * drv_init() - a device potentially for us
+ *
+ * notes: drv_init() is called when the bus driver has located a card for us to support.
+ *        We accept the new device by returning 0.
+*/
+static int rtw_drv_init(struct pci_dev *pdev, const struct pci_device_id *did)
+{
+       int i, err = -ENODEV;
+
+       int status;
+       _adapter *if1 = NULL, *if2 = NULL;
+       struct dvobj_priv *dvobj;
+
+       RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("+rtw_drv_init\n"));
+
+       //step 0.
+       disable_ht_for_spec_devid(did);
+
+       /* Initialize dvobj_priv */
+       if ((dvobj = pci_dvobj_init(pdev)) == NULL) {
+               RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("initialize device object priv Failed!\n"));
+               goto exit;
+       }
+
+       /* Initialize if1 */
+       if ((if1 = rtw_pci_if1_init(dvobj, pdev, did)) == NULL) {
+               DBG_871X("rtw_pci_if1_init Failed!\n");
+               goto free_dvobj;
+       }
+
+       /* Initialize if2 */
+#ifdef CONFIG_CONCURRENT_MODE
+       if((if2 = rtw_drv_if2_init(if1, pci_set_intf_ops)) == NULL) {
+               goto free_if1;
+       }
+#endif
+
+#ifdef CONFIG_GLOBAL_UI_PID
+       if (ui_pid[1]!=0) {
+               DBG_871X("ui_pid[1]:%d\n",ui_pid[1]);
+               rtw_signal_process(ui_pid[1], SIGUSR2);
+       }
+#endif
+
+       //dev_alloc_name && register_netdev
+       if((status = rtw_drv_register_netdev(if1)) != _SUCCESS) {
+               goto free_if1;
+       }
+
+#ifdef CONFIG_HOSTAPD_MLME
+       hostapd_mode_init(if1);
+#endif
+
+#ifdef CONFIG_PLATFORM_RTD2880B
+       DBG_871X("wlan link up\n");
+       rtd2885_wlan_netlink_sendMsg("linkup", "8712");
+#endif
+
+#ifdef RTK_DMP_PLATFORM
+       rtw_proc_init_one(if1->pnetdev);
+#endif
+
+
+       /* alloc irq */
+       if (pci_alloc_irq(dvobj) != _SUCCESS)
+               goto free_if2;
+
+       RT_TRACE(_module_hci_intfs_c_,_drv_err_,("-871x_drv - drv_init, success!\n"));
+       //DBG_871X("-871x_drv - drv_init, success!\n");
+
+       status = _SUCCESS;
+
+free_if2:
+       if(status != _SUCCESS && if2) {
+               #ifdef CONFIG_CONCURRENT_MODE
+               rtw_drv_if2_stop(if2);
+               rtw_drv_if2_free(if2);
+               #endif
+       }
+free_if1:
+       if (status != _SUCCESS && if1) {
+               rtw_pci_if1_deinit(if1);
+       }
+free_dvobj:
+       if (status != _SUCCESS)
+               pci_dvobj_deinit(pdev);
+exit:
+       return status == _SUCCESS?0:-ENODEV;
+}
+
+/*
+ * dev_remove() - our device is being removed
+*/
+//rmmod module & unplug(SurpriseRemoved) will call r871xu_dev_remove() => how to recognize both
+static void rtw_dev_remove(struct pci_dev *pdev)
+{
+       struct dvobj_priv *pdvobjpriv = pci_get_drvdata(pdev);
+       _adapter *padapter = pdvobjpriv->if1;
+       struct net_device *pnetdev = padapter->pnetdev;
+
+_func_exit_;
+
+       DBG_871X("+rtw_dev_remove\n");
+
+       pdvobjpriv->processing_dev_remove = _TRUE;
+
+       if (unlikely(!padapter)) {
+               return;
+       }
+
+       rtw_unregister_netdevs(pdvobjpriv);
+
+       #if 0
+#ifdef RTK_DMP_PLATFORM
+       padapter->bSurpriseRemoved = _FALSE;    // always trate as device exists
+                                                                                       // this will let the driver to disable it's interrupt
+#else
+       if(pci_drvpriv.drv_registered == _TRUE)
+       {
+               //DBG_871X("r871xu_dev_remove():padapter->bSurpriseRemoved == _TRUE\n");
+               padapter->bSurpriseRemoved = _TRUE;
+       }
+       /*else
+       {
+               //DBG_871X("r871xu_dev_remove():module removed\n");
+               padapter->hw_init_completed = _FALSE;
+       }*/
+#endif
+       #endif
+
+#if defined(CONFIG_HAS_EARLYSUSPEND) || defined(CONFIG_ANDROID_POWER)
+       rtw_unregister_early_suspend(&padapter->pwrctrlpriv);
+#endif
+
+       rtw_pm_set_ips(padapter, IPS_NONE);
+       rtw_pm_set_lps(padapter, PS_MODE_ACTIVE);
+
+       LeaveAllPowerSaveMode(padapter);
+
+       rtw_hal_disable_interrupt(padapter);
+
+#ifdef CONFIG_CONCURRENT_MODE
+       rtw_drv_if2_stop(pdvobjpriv->if2);
+#endif //CONFIG_CONCURRENT_MODE
+
+       rtw_pci_if1_deinit(padapter);
+
+#ifdef CONFIG_CONCURRENT_MODE
+       rtw_drv_if2_free(pdvobjpriv->if2);
+#endif
+
+       pci_dvobj_deinit(pdev);
+
+       DBG_871X("-r871xu_dev_remove, done\n");
+
+_func_exit_;
+       return;
+}
+
+
+static int __init rtw_drv_entry(void)
+{
+       int ret = 0;
+
+       RT_TRACE(_module_hci_intfs_c_,_drv_err_,("+rtw_drv_entry\n"));
+       DBG_871X("rtw driver version=%s\n", DRIVERVERSION);
+       DBG_871X("Build at: %s %s\n", __DATE__, __TIME__);
+       pci_drvpriv.drv_registered = _TRUE;
+
+       rtw_suspend_lock_init();
+
+       ret = pci_register_driver(&pci_drvpriv.rtw_pci_drv);
+       if (ret) {
+               RT_TRACE(_module_hci_intfs_c_, _drv_err_, (": No device found\n"));
+       }
+
+       return ret;
+}
+
+static void __exit rtw_drv_halt(void)
+{
+       RT_TRACE(_module_hci_intfs_c_,_drv_err_,("+rtw_drv_halt\n"));
+       DBG_871X("+rtw_drv_halt\n");
+
+       pci_drvpriv.drv_registered = _FALSE;
+
+       pci_unregister_driver(&pci_drvpriv.rtw_pci_drv);
+
+       rtw_suspend_lock_uninit();
+       DBG_871X("-rtw_drv_halt\n");
+
+       rtw_mstat_dump();
+}
+
+
+module_init(rtw_drv_entry);
+module_exit(rtw_drv_halt);
diff --git a/drivers/net/wireless/realtek/rtl8192cu/os_dep/linux/pci_ops_linux.c b/drivers/net/wireless/realtek/rtl8192cu/os_dep/linux/pci_ops_linux.c
new file mode 100644 (file)
index 0000000..5eed11a
--- /dev/null
@@ -0,0 +1,21 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *******************************************************************************/
+#define _PCI_OPS_LINUX_C_
+
+#include <drv_types.h>
diff --git a/drivers/net/wireless/realtek/rtl8192cu/os_dep/linux/recv_linux.c b/drivers/net/wireless/realtek/rtl8192cu/os_dep/linux/recv_linux.c
new file mode 100644 (file)
index 0000000..ba82c4d
--- /dev/null
@@ -0,0 +1,447 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#define _RECV_OSDEP_C_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+
+#include <wifi.h>
+#include <recv_osdep.h>
+
+#include <osdep_intf.h>
+#include <ethernet.h>
+
+#ifdef CONFIG_USB_HCI
+#include <usb_ops.h>
+#endif
+
+//init os related resource in struct recv_priv
+int rtw_os_recv_resource_init(struct recv_priv *precvpriv, _adapter *padapter)
+{
+       int     res=_SUCCESS;
+
+       return res;
+}
+
+//alloc os related resource in union recv_frame
+int rtw_os_recv_resource_alloc(_adapter *padapter, union recv_frame *precvframe)
+{
+       int     res=_SUCCESS;
+
+       precvframe->u.hdr.pkt_newalloc = precvframe->u.hdr.pkt = NULL;
+
+       return res;
+
+}
+
+//free os related resource in union recv_frame
+void rtw_os_recv_resource_free(struct recv_priv *precvpriv)
+{
+
+}
+
+
+//alloc os related resource in struct recv_buf
+int rtw_os_recvbuf_resource_alloc(_adapter *padapter, struct recv_buf *precvbuf)
+{
+       int res=_SUCCESS;
+
+#ifdef CONFIG_USB_HCI
+       struct dvobj_priv       *pdvobjpriv = adapter_to_dvobj(padapter);
+       struct usb_device       *pusbd = pdvobjpriv->pusbdev;
+
+       precvbuf->irp_pending = _FALSE;
+       precvbuf->purb = usb_alloc_urb(0, GFP_KERNEL);
+       if(precvbuf->purb == NULL){
+               res = _FAIL;
+       }
+
+       precvbuf->pskb = NULL;
+
+       precvbuf->reuse = _FALSE;
+
+       precvbuf->pallocated_buf  = precvbuf->pbuf = NULL;
+
+       precvbuf->pdata = precvbuf->phead = precvbuf->ptail = precvbuf->pend = NULL;
+
+       precvbuf->transfer_len = 0;
+
+       precvbuf->len = 0;
+
+       #ifdef CONFIG_USE_USB_BUFFER_ALLOC_RX
+       precvbuf->pallocated_buf = rtw_usb_buffer_alloc(pusbd, (size_t)precvbuf->alloc_sz, &precvbuf->dma_transfer_addr);
+       precvbuf->pbuf = precvbuf->pallocated_buf;
+       if(precvbuf->pallocated_buf == NULL)
+               return _FAIL;
+       #endif //CONFIG_USE_USB_BUFFER_ALLOC_RX
+
+#endif //CONFIG_USB_HCI
+
+       return res;
+}
+
+//free os related resource in struct recv_buf
+int rtw_os_recvbuf_resource_free(_adapter *padapter, struct recv_buf *precvbuf)
+{
+       int ret = _SUCCESS;
+
+#ifdef CONFIG_USB_HCI
+
+#ifdef CONFIG_USE_USB_BUFFER_ALLOC_RX
+
+       struct dvobj_priv       *pdvobjpriv = adapter_to_dvobj(padapter);
+       struct usb_device       *pusbd = pdvobjpriv->pusbdev;
+
+       rtw_usb_buffer_free(pusbd, (size_t)precvbuf->alloc_sz, precvbuf->pallocated_buf, precvbuf->dma_transfer_addr);
+       precvbuf->pallocated_buf =  NULL;
+       precvbuf->dma_transfer_addr = 0;
+
+#endif //CONFIG_USE_USB_BUFFER_ALLOC_RX
+
+       if(precvbuf->purb)
+       {
+               //usb_kill_urb(precvbuf->purb);
+               usb_free_urb(precvbuf->purb);
+       }
+
+#endif //CONFIG_USB_HCI
+
+
+       if(precvbuf->pskb)
+               rtw_skb_free(precvbuf->pskb);
+
+
+       return ret;
+
+}
+
+void rtw_handle_tkip_mic_err(_adapter *padapter,u8 bgroup)
+{
+#ifdef CONFIG_IOCTL_CFG80211
+       enum nl80211_key_type key_type;
+#endif
+       union iwreq_data wrqu;
+       struct iw_michaelmicfailure    ev;
+       struct mlme_priv*              pmlmepriv  = &padapter->mlmepriv;
+       struct security_priv    *psecuritypriv = &padapter->securitypriv;
+       u32 cur_time = 0;
+
+       if( psecuritypriv->last_mic_err_time == 0 )
+       {
+               psecuritypriv->last_mic_err_time = rtw_get_current_time();
+       }
+       else
+       {
+               cur_time = rtw_get_current_time();
+
+               if( cur_time - psecuritypriv->last_mic_err_time < 60*HZ )
+               {
+                       psecuritypriv->btkip_countermeasure = _TRUE;
+                       psecuritypriv->last_mic_err_time = 0;
+                       psecuritypriv->btkip_countermeasure_time = cur_time;
+               }
+               else
+               {
+                       psecuritypriv->last_mic_err_time = rtw_get_current_time();
+               }
+       }
+
+#ifdef CONFIG_IOCTL_CFG80211
+       if ( bgroup )
+       {
+               key_type |= NL80211_KEYTYPE_GROUP;
+       }
+       else
+       {
+               key_type |= NL80211_KEYTYPE_PAIRWISE;
+       }
+
+       cfg80211_michael_mic_failure(padapter->pnetdev, (u8 *)&pmlmepriv->assoc_bssid[ 0 ], key_type, -1,
+               NULL, GFP_ATOMIC);
+#endif
+
+       _rtw_memset( &ev, 0x00, sizeof( ev ) );
+       if ( bgroup )
+       {
+           ev.flags |= IW_MICFAILURE_GROUP;
+       }
+       else
+       {
+           ev.flags |= IW_MICFAILURE_PAIRWISE;
+       }
+
+       ev.src_addr.sa_family = ARPHRD_ETHER;
+       _rtw_memcpy( ev.src_addr.sa_data, &pmlmepriv->assoc_bssid[ 0 ], ETH_ALEN );
+
+       _rtw_memset( &wrqu, 0x00, sizeof( wrqu ) );
+       wrqu.data.length = sizeof( ev );
+
+       wireless_send_event( padapter->pnetdev, IWEVMICHAELMICFAILURE, &wrqu, (char*) &ev );
+}
+
+void rtw_hostapd_mlme_rx(_adapter *padapter, union recv_frame *precv_frame)
+{
+#ifdef CONFIG_HOSTAPD_MLME
+       _pkt *skb;
+       struct hostapd_priv *phostapdpriv  = padapter->phostapdpriv;
+       struct net_device *pmgnt_netdev = phostapdpriv->pmgnt_netdev;
+
+       RT_TRACE(_module_recv_osdep_c_, _drv_info_, ("+rtw_hostapd_mlme_rx\n"));
+
+       skb = precv_frame->u.hdr.pkt;
+
+       if (skb == NULL)
+               return;
+
+       skb->data = precv_frame->u.hdr.rx_data;
+       skb->tail = precv_frame->u.hdr.rx_tail;
+       skb->len = precv_frame->u.hdr.len;
+
+       //pskb_copy = rtw_skb_copy(skb);
+//     if(skb == NULL) goto _exit;
+
+       skb->dev = pmgnt_netdev;
+       skb->ip_summed = CHECKSUM_NONE;
+       skb->pkt_type = PACKET_OTHERHOST;
+       //skb->protocol = __constant_htons(0x0019); /*ETH_P_80211_RAW*/
+       skb->protocol = __constant_htons(0x0003); /*ETH_P_80211_RAW*/
+
+       //DBG_871X("(1)data=0x%x, head=0x%x, tail=0x%x, mac_header=0x%x, len=%d\n", skb->data, skb->head, skb->tail, skb->mac_header, skb->len);
+
+       //skb->mac.raw = skb->data;
+       skb_reset_mac_header(skb);
+
+       //skb_pull(skb, 24);
+       _rtw_memset(skb->cb, 0, sizeof(skb->cb));
+
+       rtw_netif_rx(pmgnt_netdev, skb);
+
+       precv_frame->u.hdr.pkt = NULL; // set pointer to NULL before rtw_free_recvframe() if call rtw_netif_rx()
+#endif
+}
+
+int rtw_recv_indicatepkt(_adapter *padapter, union recv_frame *precv_frame)
+{
+       struct recv_priv *precvpriv;
+       _queue  *pfree_recv_queue;
+       _pkt *skb;
+       struct mlme_priv*pmlmepriv = &padapter->mlmepriv;
+#ifdef CONFIG_TCP_CSUM_OFFLOAD_RX
+       struct rx_pkt_attrib *pattrib = &precv_frame->u.hdr.attrib;
+#endif
+
+#ifdef CONFIG_BR_EXT
+       void *br_port = NULL;
+#endif
+
+_func_enter_;
+
+       precvpriv = &(padapter->recvpriv);
+       pfree_recv_queue = &(precvpriv->free_recv_queue);
+
+#ifdef CONFIG_DRVEXT_MODULE
+       if (drvext_rx_handler(padapter, precv_frame->u.hdr.rx_data, precv_frame->u.hdr.len) == _SUCCESS)
+       {
+               goto _recv_indicatepkt_drop;
+       }
+#endif
+
+       skb = precv_frame->u.hdr.pkt;
+       if(skb == NULL)
+       {
+               RT_TRACE(_module_recv_osdep_c_,_drv_err_,("rtw_recv_indicatepkt():skb==NULL something wrong!!!!\n"));
+               goto _recv_indicatepkt_drop;
+       }
+
+       RT_TRACE(_module_recv_osdep_c_,_drv_info_,("rtw_recv_indicatepkt():skb != NULL !!!\n"));
+       RT_TRACE(_module_recv_osdep_c_,_drv_info_,("rtw_recv_indicatepkt():precv_frame->u.hdr.rx_head=%p  precv_frame->hdr.rx_data=%p\n", precv_frame->u.hdr.rx_head, precv_frame->u.hdr.rx_data));
+       RT_TRACE(_module_recv_osdep_c_,_drv_info_,("precv_frame->hdr.rx_tail=%p precv_frame->u.hdr.rx_end=%p precv_frame->hdr.len=%d \n", precv_frame->u.hdr.rx_tail, precv_frame->u.hdr.rx_end, precv_frame->u.hdr.len));
+
+       skb->data = precv_frame->u.hdr.rx_data;
+
+       skb_set_tail_pointer(skb, precv_frame->u.hdr.len);
+
+       skb->len = precv_frame->u.hdr.len;
+
+       RT_TRACE(_module_recv_osdep_c_,_drv_info_,("\n skb->head=%p skb->data=%p skb->tail=%p skb->end=%p skb->len=%d\n", skb->head, skb->data, skb->tail, skb->end, skb->len));
+
+       if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
+       {
+               _pkt *pskb2=NULL;
+               struct sta_info *psta = NULL;
+               struct sta_priv *pstapriv = &padapter->stapriv;
+               struct rx_pkt_attrib *pattrib = &precv_frame->u.hdr.attrib;
+               int bmcast = IS_MCAST(pattrib->dst);
+
+               //DBG_871X("bmcast=%d\n", bmcast);
+
+               if(_rtw_memcmp(pattrib->dst, myid(&padapter->eeprompriv), ETH_ALEN)==_FALSE)
+               {
+                       //DBG_871X("not ap psta=%p, addr=%pM\n", psta, pattrib->dst);
+
+                       if(bmcast)
+                       {
+                               psta = rtw_get_bcmc_stainfo(padapter);
+                               pskb2 = rtw_skb_clone(skb);
+                       } else {
+                               psta = rtw_get_stainfo(pstapriv, pattrib->dst);
+                       }
+
+                       if(psta)
+                       {
+                               struct net_device *pnetdev= (struct net_device*)padapter->pnetdev;
+
+                               //DBG_871X("directly forwarding to the rtw_xmit_entry\n");
+
+                               //skb->ip_summed = CHECKSUM_NONE;
+                               skb->dev = pnetdev;
+#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,35))
+                               skb_set_queue_mapping(skb, rtw_recv_select_queue(skb));
+#endif //LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,35)
+
+                               _rtw_xmit_entry(skb, pnetdev);
+
+                               if(bmcast)
+                                       skb = pskb2;
+                               else
+                                       goto _recv_indicatepkt_end;
+                       }
+
+
+               }
+               else// to APself
+               {
+                       //DBG_871X("to APSelf\n");
+               }
+       }
+
+
+#ifdef CONFIG_BR_EXT
+
+#if (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
+       br_port = padapter->pnetdev->br_port;
+#else   // (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
+       rcu_read_lock();
+       br_port = rcu_dereference(padapter->pnetdev->rx_handler_data);
+       rcu_read_unlock();
+#endif  // (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
+
+       if( br_port     && (check_fwstate(pmlmepriv, WIFI_STATION_STATE|WIFI_ADHOC_STATE) == _TRUE) )
+       {
+               int nat25_handle_frame(_adapter *priv, struct sk_buff *skb);
+               if (nat25_handle_frame(padapter, skb) == -1) {
+                       //priv->ext_stats.rx_data_drops++;
+                       //DEBUG_ERR("RX DROP: nat25_handle_frame fail!\n");
+                       //return FAIL;
+#if 1
+                       // bypass this frame to upper layer!!
+#else
+                       goto _recv_indicatepkt_drop;
+#endif
+               }
+       }
+
+#endif // CONFIG_BR_EXT
+
+
+#ifdef CONFIG_TCP_CSUM_OFFLOAD_RX
+       if ( (pattrib->tcpchk_valid == 1) && (pattrib->tcp_chkrpt == 1) ) {
+               skb->ip_summed = CHECKSUM_UNNECESSARY;
+               //DBG_871X("CHECKSUM_UNNECESSARY \n");
+       } else {
+               skb->ip_summed = CHECKSUM_NONE;
+               //DBG_871X("CHECKSUM_NONE(%d, %d) \n", pattrib->tcpchk_valid, pattrib->tcp_chkrpt);
+       }
+#else /* !CONFIG_TCP_CSUM_OFFLOAD_RX */
+
+       skb->ip_summed = CHECKSUM_NONE;
+
+#endif
+
+       skb->dev = padapter->pnetdev;
+       skb->protocol = eth_type_trans(skb, padapter->pnetdev);
+
+       rtw_netif_rx(padapter->pnetdev, skb);
+
+_recv_indicatepkt_end:
+
+       precv_frame->u.hdr.pkt = NULL; // pointers to NULL before rtw_free_recvframe()
+
+       rtw_free_recvframe(precv_frame, pfree_recv_queue);
+
+       RT_TRACE(_module_recv_osdep_c_,_drv_info_,("\n rtw_recv_indicatepkt :after rtw_netif_rx!!!!\n"));
+
+_func_exit_;
+
+        return _SUCCESS;
+
+_recv_indicatepkt_drop:
+
+        //enqueue back to free_recv_queue
+        if(precv_frame)
+                rtw_free_recvframe(precv_frame, pfree_recv_queue);
+
+        return _FAIL;
+
+_func_exit_;
+
+}
+
+void rtw_os_read_port(_adapter *padapter, struct recv_buf *precvbuf)
+{
+       struct recv_priv *precvpriv = &padapter->recvpriv;
+
+#ifdef CONFIG_USB_HCI
+
+       precvbuf->ref_cnt--;
+
+       //free skb in recv_buf
+       rtw_skb_free(precvbuf->pskb);
+
+       precvbuf->pskb = NULL;
+       precvbuf->reuse = _FALSE;
+
+       if(precvbuf->irp_pending == _FALSE)
+       {
+               rtw_read_port(padapter, precvpriv->ff_hwaddr, 0, (unsigned char *)precvbuf);
+       }
+
+
+#endif
+#ifdef CONFIG_SDIO_HCI
+               precvbuf->pskb = NULL;
+#endif
+
+}
+void _rtw_reordering_ctrl_timeout_handler (void *FunctionContext);
+void _rtw_reordering_ctrl_timeout_handler (void *FunctionContext)
+{
+       struct recv_reorder_ctrl *preorder_ctrl = (struct recv_reorder_ctrl *)FunctionContext;
+       rtw_reordering_ctrl_timeout_handler(preorder_ctrl);
+}
+
+void rtw_init_recv_timer(struct recv_reorder_ctrl *preorder_ctrl)
+{
+       _adapter *padapter = preorder_ctrl->padapter;
+
+       _init_timer(&(preorder_ctrl->reordering_ctrl_timer), padapter->pnetdev, _rtw_reordering_ctrl_timeout_handler, preorder_ctrl);
+
+}
diff --git a/drivers/net/wireless/realtek/rtl8192cu/os_dep/linux/rtw_android.c b/drivers/net/wireless/realtek/rtl8192cu/os_dep/linux/rtw_android.c
new file mode 100644 (file)
index 0000000..aed1a6d
--- /dev/null
@@ -0,0 +1,838 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+
+#include <linux/module.h>
+#include <linux/netdevice.h>
+
+#include <rtw_android.h>
+#include <osdep_service.h>
+#include <rtw_debug.h>
+#include <ioctl_cfg80211.h>
+#include <rtw_ioctl_set.h>
+
+#if defined(RTW_ENABLE_WIFI_CONTROL_FUNC)
+#include <linux/platform_device.h>
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 35))
+#include <linux/wlan_plat.h>
+#else
+#include <linux/wifi_tiwlan.h>
+#endif
+#endif /* defined(RTW_ENABLE_WIFI_CONTROL_FUNC) */
+
+const char *android_wifi_cmd_str[ANDROID_WIFI_CMD_MAX] = {
+       "START",
+       "STOP",
+       "SCAN-ACTIVE",
+       "SCAN-PASSIVE",
+       "RSSI",
+       "LINKSPEED",
+       "RXFILTER-START",
+       "RXFILTER-STOP",
+       "RXFILTER-ADD",
+       "RXFILTER-REMOVE",
+       "BTCOEXSCAN-START",
+       "BTCOEXSCAN-STOP",
+       "BTCOEXMODE",
+       "SETSUSPENDOPT",
+       "P2P_DEV_ADDR",
+       "SETFWPATH",
+       "SETBAND",
+       "GETBAND",
+       "COUNTRY",
+       "P2P_SET_NOA",
+       "P2P_GET_NOA",
+       "P2P_SET_PS",
+       "SET_AP_WPS_P2P_IE",
+#ifdef PNO_SUPPORT
+       "PNOSSIDCLR",
+       "PNOSETUP ",
+       "PNOFORCE",
+       "PNODEBUG",
+#endif
+
+       "MACADDR",
+
+       "BLOCK",
+       "WFD-ENABLE",
+       "WFD-DISABLE",
+       "WFD-SET-TCPPORT",
+       "WFD-SET-MAXTPUT",
+       "WFD-SET-DEVTYPE",
+};
+
+#ifdef PNO_SUPPORT
+#define PNO_TLV_PREFIX                 'S'
+#define PNO_TLV_VERSION                        '1'
+#define PNO_TLV_SUBVERSION             '2'
+#define PNO_TLV_RESERVED               '0'
+#define PNO_TLV_TYPE_SSID_IE           'S'
+#define PNO_TLV_TYPE_TIME              'T'
+#define PNO_TLV_FREQ_REPEAT            'R'
+#define PNO_TLV_FREQ_EXPO_MAX          'M'
+
+typedef struct cmd_tlv {
+       char prefix;
+       char version;
+       char subver;
+       char reserved;
+} cmd_tlv_t;
+#endif /* PNO_SUPPORT */
+
+typedef struct android_wifi_priv_cmd {
+
+#ifdef CONFIG_COMPAT
+       compat_uptr_t buf;
+#else
+       char *buf;
+#endif
+
+       int used_len;
+       int total_len;
+} android_wifi_priv_cmd;
+
+/**
+ * Local (static) functions and variables
+ */
+
+/* Initialize g_wifi_on to 1 so dhd_bus_start will be called for the first
+ * time (only) in dhd_open, subsequential wifi on will be handled by
+ * wl_android_wifi_on
+ */
+static int g_wifi_on = _TRUE;
+
+
+#ifdef PNO_SUPPORT
+static int wl_android_set_pno_setup(struct net_device *dev, char *command, int total_len)
+{
+       wlc_ssid_t ssids_local[MAX_PFN_LIST_COUNT];
+       int res = -1;
+       int nssid = 0;
+       cmd_tlv_t *cmd_tlv_temp;
+       char *str_ptr;
+       int tlv_size_left;
+       int pno_time = 0;
+       int pno_repeat = 0;
+       int pno_freq_expo_max = 0;
+
+#ifdef PNO_SET_DEBUG
+       int i;
+       char pno_in_example[] = {
+               'P', 'N', 'O', 'S', 'E', 'T', 'U', 'P', ' ',
+               'S', '1', '2', '0',
+               'S',
+               0x05,
+               'd', 'l', 'i', 'n', 'k',
+               'S',
+               0x04,
+               'G', 'O', 'O', 'G',
+               'T',
+               '0', 'B',
+               'R',
+               '2',
+               'M',
+               '2',
+               0x00
+               };
+#endif /* PNO_SET_DEBUG */
+
+       DHD_INFO(("%s: command=%s, len=%d\n", __FUNCTION__, command, total_len));
+
+       if (total_len < (strlen(CMD_PNOSETUP_SET) + sizeof(cmd_tlv_t))) {
+               DBG_871X("%s argument=%d less min size\n", __FUNCTION__, total_len);
+               goto exit_proc;
+       }
+
+#ifdef PNO_SET_DEBUG
+       memcpy(command, pno_in_example, sizeof(pno_in_example));
+       for (i = 0; i < sizeof(pno_in_example); i++)
+               printf("%02X ", command[i]);
+       printf("\n");
+       total_len = sizeof(pno_in_example);
+#endif
+
+       str_ptr = command + strlen(CMD_PNOSETUP_SET);
+       tlv_size_left = total_len - strlen(CMD_PNOSETUP_SET);
+
+       cmd_tlv_temp = (cmd_tlv_t *)str_ptr;
+       memset(ssids_local, 0, sizeof(ssids_local));
+
+       if ((cmd_tlv_temp->prefix == PNO_TLV_PREFIX) &&
+               (cmd_tlv_temp->version == PNO_TLV_VERSION) &&
+               (cmd_tlv_temp->subver == PNO_TLV_SUBVERSION)) {
+
+               str_ptr += sizeof(cmd_tlv_t);
+               tlv_size_left -= sizeof(cmd_tlv_t);
+
+               if ((nssid = wl_iw_parse_ssid_list_tlv(&str_ptr, ssids_local,
+                       MAX_PFN_LIST_COUNT, &tlv_size_left)) <= 0) {
+                       DBG_871X("SSID is not presented or corrupted ret=%d\n", nssid);
+                       goto exit_proc;
+               } else {
+                       if ((str_ptr[0] != PNO_TLV_TYPE_TIME) || (tlv_size_left <= 1)) {
+                               DBG_871X("%s scan duration corrupted field size %d\n",
+                                       __FUNCTION__, tlv_size_left);
+                               goto exit_proc;
+                       }
+                       str_ptr++;
+                       pno_time = simple_strtoul(str_ptr, &str_ptr, 16);
+                       DHD_INFO(("%s: pno_time=%d\n", __FUNCTION__, pno_time));
+
+                       if (str_ptr[0] != 0) {
+                               if ((str_ptr[0] != PNO_TLV_FREQ_REPEAT)) {
+                                       DBG_871X("%s pno repeat : corrupted field\n",
+                                               __FUNCTION__);
+                                       goto exit_proc;
+                               }
+                               str_ptr++;
+                               pno_repeat = simple_strtoul(str_ptr, &str_ptr, 16);
+                               DHD_INFO(("%s :got pno_repeat=%d\n", __FUNCTION__, pno_repeat));
+                               if (str_ptr[0] != PNO_TLV_FREQ_EXPO_MAX) {
+                                       DBG_871X("%s FREQ_EXPO_MAX corrupted field size\n",
+                                               __FUNCTION__);
+                                       goto exit_proc;
+                               }
+                               str_ptr++;
+                               pno_freq_expo_max = simple_strtoul(str_ptr, &str_ptr, 16);
+                               DHD_INFO(("%s: pno_freq_expo_max=%d\n",
+                                       __FUNCTION__, pno_freq_expo_max));
+                       }
+               }
+       } else {
+               DBG_871X("%s get wrong TLV command\n", __FUNCTION__);
+               goto exit_proc;
+       }
+
+       res = dhd_dev_pno_set(dev, ssids_local, nssid, pno_time, pno_repeat, pno_freq_expo_max);
+
+exit_proc:
+       return res;
+}
+#endif /* PNO_SUPPORT */
+
+int rtw_android_cmdstr_to_num(char *cmdstr)
+{
+       int cmd_num;
+       for(cmd_num=0 ; cmd_num<ANDROID_WIFI_CMD_MAX; cmd_num++)
+               if(0 == strncasecmp(cmdstr , android_wifi_cmd_str[cmd_num], strlen(android_wifi_cmd_str[cmd_num])) )
+                       break;
+
+       return cmd_num;
+}
+
+int rtw_android_get_rssi(struct net_device *net, char *command, int total_len)
+{
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(net);
+       struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
+       struct  wlan_network    *pcur_network = &pmlmepriv->cur_network;
+       int bytes_written = 0;
+
+       if(check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE) {
+               bytes_written += snprintf(&command[bytes_written], total_len, "%s rssi %d",
+                       pcur_network->network.Ssid.Ssid, padapter->recvpriv.rssi);
+       }
+
+       return bytes_written;
+}
+
+int rtw_android_get_link_speed(struct net_device *net, char *command, int total_len)
+{
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(net);
+       struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
+       struct  wlan_network    *pcur_network = &pmlmepriv->cur_network;
+       int bytes_written = 0;
+       u16 link_speed = 0;
+
+       link_speed = rtw_get_cur_max_rate(padapter)/10;
+       bytes_written = snprintf(command, total_len, "LinkSpeed %d", link_speed);
+
+       return bytes_written;
+}
+
+int rtw_android_get_macaddr(struct net_device *net, char *command, int total_len)
+{
+       _adapter *adapter = (_adapter *)rtw_netdev_priv(net);
+       int bytes_written = 0;
+
+       bytes_written = snprintf(command, total_len, "Macaddr = "MAC_FMT, MAC_ARG(net->dev_addr));
+       return bytes_written;
+}
+
+int rtw_android_set_country(struct net_device *net, char *command, int total_len)
+{
+       _adapter *adapter = (_adapter *)rtw_netdev_priv(net);
+       char *country_code = command + strlen(android_wifi_cmd_str[ANDROID_WIFI_CMD_COUNTRY]) + 1;
+       int ret = _FAIL;
+
+       ret = rtw_set_country(adapter, country_code);
+
+       return (ret==_SUCCESS)?0:-1;
+}
+
+int rtw_android_get_p2p_dev_addr(struct net_device *net, char *command, int total_len)
+{
+       int bytes_written = 0;
+
+       //We use the same address as our HW MAC address
+       _rtw_memcpy(command, net->dev_addr, ETH_ALEN);
+
+       bytes_written = ETH_ALEN;
+       return bytes_written;
+}
+
+int rtw_android_set_block(struct net_device *net, char *command, int total_len)
+{
+       _adapter *adapter = (_adapter *)rtw_netdev_priv(net);
+       char *block_value = command + strlen(android_wifi_cmd_str[ANDROID_WIFI_CMD_BLOCK]) + 1;
+
+       #ifdef CONFIG_IOCTL_CFG80211
+       wdev_to_priv(adapter->rtw_wdev)->block = (*block_value=='0')?_FALSE:_TRUE;
+       #endif
+
+       return 0;
+}
+
+int rtw_android_setband(struct net_device *net, char *command, int total_len)
+{
+       _adapter *adapter = (_adapter *)rtw_netdev_priv(net);
+       char *arg = command + strlen(android_wifi_cmd_str[ANDROID_WIFI_CMD_SETBAND]) + 1;
+       u32 band = GHZ_MAX;
+       int ret = _FAIL;
+
+       sscanf(arg, "%u", &band);
+       ret = rtw_set_band(adapter, band);
+
+       return (ret==_SUCCESS)?0:-1;
+}
+
+int rtw_android_getband(struct net_device *net, char *command, int total_len)
+{
+       _adapter *adapter = (_adapter *)rtw_netdev_priv(net);
+       int bytes_written = 0;
+
+       bytes_written = snprintf(command, total_len, "%u", adapter->setband);
+
+       return bytes_written;
+}
+
+int get_int_from_command( char* pcmd )
+{
+       int i = 0;
+
+       for( i = 0; i < strlen( pcmd ); i++ )
+       {
+               if ( pcmd[ i ] == '=' )
+               {
+                       //      Skip the '=' and space characters.
+                       i += 2;
+                       break;
+               }
+       }
+       return ( rtw_atoi( pcmd + i ) );
+}
+
+int rtw_android_priv_cmd(struct net_device *net, struct ifreq *ifr, int cmd)
+{
+       int ret = 0;
+       char *command = NULL;
+       int cmd_num;
+       int bytes_written = 0;
+       android_wifi_priv_cmd priv_cmd;
+
+       rtw_lock_suspend();
+
+       if (!ifr->ifr_data) {
+               ret = -EINVAL;
+               goto exit;
+       }
+       if (copy_from_user(&priv_cmd, ifr->ifr_data, sizeof(android_wifi_priv_cmd))) {
+               ret = -EFAULT;
+               goto exit;
+       }
+
+       command = rtw_zmalloc(priv_cmd.total_len);
+       if (!command)
+       {
+               DBG_871X("%s: failed to allocate memory\n", __FUNCTION__);
+               ret = -ENOMEM;
+               goto exit;
+       }
+
+       if (!access_ok(VERIFY_READ, priv_cmd.buf, priv_cmd.total_len)){
+               DBG_871X("%s: failed to access memory\n", __FUNCTION__);
+               ret = -EFAULT;
+               goto exit;
+        }
+       if (copy_from_user(command, (void *)priv_cmd.buf, priv_cmd.total_len)) {
+               ret = -EFAULT;
+               goto exit;
+       }
+
+       DBG_871X("%s: Android private cmd \"%s\" on %s\n"
+               , __FUNCTION__, command, ifr->ifr_name);
+
+       cmd_num = rtw_android_cmdstr_to_num(command);
+
+       switch(cmd_num) {
+       case ANDROID_WIFI_CMD_START:
+               //bytes_written = wl_android_wifi_on(net);
+               goto response;
+       case ANDROID_WIFI_CMD_SETFWPATH:
+               goto response;
+       }
+
+       if (!g_wifi_on) {
+               DBG_871X("%s: Ignore private cmd \"%s\" - iface %s is down\n"
+                       ,__FUNCTION__, command, ifr->ifr_name);
+               ret = 0;
+               goto exit;
+       }
+
+       switch(cmd_num) {
+
+       case ANDROID_WIFI_CMD_STOP:
+               //bytes_written = wl_android_wifi_off(net);
+               break;
+
+       case ANDROID_WIFI_CMD_SCAN_ACTIVE:
+               //rtw_set_scan_mode((_adapter *)rtw_netdev_priv(net), SCAN_ACTIVE);
+#ifdef CONFIG_PLATFORM_MSTAR
+#ifdef CONFIG_IOCTL_CFG80211
+               (wdev_to_priv(net->ieee80211_ptr))->bandroid_scan = _TRUE;
+#endif //CONFIG_IOCTL_CFG80211
+#endif //CONFIG_PLATFORM_MSTAR
+               break;
+       case ANDROID_WIFI_CMD_SCAN_PASSIVE:
+               //rtw_set_scan_mode((_adapter *)rtw_netdev_priv(net), SCAN_PASSIVE);
+               break;
+
+       case ANDROID_WIFI_CMD_RSSI:
+               bytes_written = rtw_android_get_rssi(net, command, priv_cmd.total_len);
+               break;
+       case ANDROID_WIFI_CMD_LINKSPEED:
+               bytes_written = rtw_android_get_link_speed(net, command, priv_cmd.total_len);
+               break;
+
+       case ANDROID_WIFI_CMD_MACADDR:
+               bytes_written = rtw_android_get_macaddr(net, command, priv_cmd.total_len);
+               break;
+
+       case ANDROID_WIFI_CMD_BLOCK:
+               bytes_written = rtw_android_set_block(net, command, priv_cmd.total_len);
+               break;
+
+       case ANDROID_WIFI_CMD_RXFILTER_START:
+               //bytes_written = net_os_set_packet_filter(net, 1);
+               break;
+       case ANDROID_WIFI_CMD_RXFILTER_STOP:
+               //bytes_written = net_os_set_packet_filter(net, 0);
+               break;
+       case ANDROID_WIFI_CMD_RXFILTER_ADD:
+               //int filter_num = *(command + strlen(CMD_RXFILTER_ADD) + 1) - '0';
+               //bytes_written = net_os_rxfilter_add_remove(net, TRUE, filter_num);
+               break;
+       case ANDROID_WIFI_CMD_RXFILTER_REMOVE:
+               //int filter_num = *(command + strlen(CMD_RXFILTER_REMOVE) + 1) - '0';
+               //bytes_written = net_os_rxfilter_add_remove(net, FALSE, filter_num);
+               break;
+
+       case ANDROID_WIFI_CMD_BTCOEXSCAN_START:
+               /* TBD: BTCOEXSCAN-START */
+               break;
+       case ANDROID_WIFI_CMD_BTCOEXSCAN_STOP:
+               /* TBD: BTCOEXSCAN-STOP */
+               break;
+       case ANDROID_WIFI_CMD_BTCOEXMODE:
+               #if 0
+               uint mode = *(command + strlen(CMD_BTCOEXMODE) + 1) - '0';
+               if (mode == 1)
+                       net_os_set_packet_filter(net, 0); /* DHCP starts */
+               else
+                       net_os_set_packet_filter(net, 1); /* DHCP ends */
+#ifdef WL_CFG80211
+               bytes_written = wl_cfg80211_set_btcoex_dhcp(net, command);
+#endif
+               #endif
+               break;
+
+       case ANDROID_WIFI_CMD_SETSUSPENDOPT:
+               //bytes_written = wl_android_set_suspendopt(net, command, priv_cmd.total_len);
+               break;
+
+       case ANDROID_WIFI_CMD_SETBAND:
+               bytes_written = rtw_android_setband(net, command, priv_cmd.total_len);
+               break;
+
+       case ANDROID_WIFI_CMD_GETBAND:
+               bytes_written = rtw_android_getband(net, command, priv_cmd.total_len);
+               break;
+
+       case ANDROID_WIFI_CMD_COUNTRY:
+               bytes_written = rtw_android_set_country(net, command, priv_cmd.total_len);
+               break;
+
+#ifdef PNO_SUPPORT
+       case ANDROID_WIFI_CMD_PNOSSIDCLR_SET:
+               //bytes_written = dhd_dev_pno_reset(net);
+               break;
+       case ANDROID_WIFI_CMD_PNOSETUP_SET:
+               //bytes_written = wl_android_set_pno_setup(net, command, priv_cmd.total_len);
+               break;
+       case ANDROID_WIFI_CMD_PNOENABLE_SET:
+               //uint pfn_enabled = *(command + strlen(CMD_PNOENABLE_SET) + 1) - '0';
+               //bytes_written = dhd_dev_pno_enable(net, pfn_enabled);
+               break;
+#endif
+
+       case ANDROID_WIFI_CMD_P2P_DEV_ADDR:
+               bytes_written = rtw_android_get_p2p_dev_addr(net, command, priv_cmd.total_len);
+               break;
+       case ANDROID_WIFI_CMD_P2P_SET_NOA:
+               //int skip = strlen(CMD_P2P_SET_NOA) + 1;
+               //bytes_written = wl_cfg80211_set_p2p_noa(net, command + skip, priv_cmd.total_len - skip);
+               break;
+       case ANDROID_WIFI_CMD_P2P_GET_NOA:
+               //bytes_written = wl_cfg80211_get_p2p_noa(net, command, priv_cmd.total_len);
+               break;
+       case ANDROID_WIFI_CMD_P2P_SET_PS:
+               //int skip = strlen(CMD_P2P_SET_PS) + 1;
+               //bytes_written = wl_cfg80211_set_p2p_ps(net, command + skip, priv_cmd.total_len - skip);
+               break;
+
+#ifdef CONFIG_IOCTL_CFG80211
+       case ANDROID_WIFI_CMD_SET_AP_WPS_P2P_IE:
+       {
+               int skip = strlen(android_wifi_cmd_str[ANDROID_WIFI_CMD_SET_AP_WPS_P2P_IE]) + 3;
+               bytes_written = rtw_cfg80211_set_mgnt_wpsp2pie(net, command + skip, priv_cmd.total_len - skip, *(command + skip - 2) - '0');
+               break;
+       }
+#endif //CONFIG_IOCTL_CFG80211
+
+#ifdef CONFIG_WFD
+       case ANDROID_WIFI_CMD_WFD_ENABLE:
+       {
+               //      Commented by Albert 2012/07/24
+               //      We can enable the WFD function by using the following command:
+               //      wpa_cli driver wfd-enable
+
+               struct wifi_display_info                *pwfd_info;
+               _adapter*       padapter = ( _adapter * ) rtw_netdev_priv(net);
+
+               pwfd_info = &padapter->wfd_info;
+               if( padapter->wdinfo.driver_interface == DRIVER_CFG80211 )
+                       pwfd_info->wfd_enable = _TRUE;
+               break;
+       }
+
+       case ANDROID_WIFI_CMD_WFD_DISABLE:
+       {
+               //      Commented by Albert 2012/07/24
+               //      We can disable the WFD function by using the following command:
+               //      wpa_cli driver wfd-disable
+
+               struct wifi_display_info                *pwfd_info;
+               _adapter*       padapter = ( _adapter * ) rtw_netdev_priv(net);
+
+               pwfd_info = &padapter->wfd_info;
+               if( padapter->wdinfo.driver_interface == DRIVER_CFG80211 )
+                       pwfd_info->wfd_enable = _FALSE;
+               break;
+       }
+       case ANDROID_WIFI_CMD_WFD_SET_TCPPORT:
+       {
+               //      Commented by Albert 2012/07/24
+               //      We can set the tcp port number by using the following command:
+               //      wpa_cli driver wfd-set-tcpport = 554
+
+               struct wifi_display_info                *pwfd_info;
+               _adapter*       padapter = ( _adapter * ) rtw_netdev_priv(net);
+
+               pwfd_info = &padapter->wfd_info;
+               if( padapter->wdinfo.driver_interface == DRIVER_CFG80211 )
+                       pwfd_info->rtsp_ctrlport = ( u16 ) get_int_from_command( priv_cmd.buf );
+               break;
+       }
+       case ANDROID_WIFI_CMD_WFD_SET_MAX_TPUT:
+       {
+
+
+               break;
+       }
+       case ANDROID_WIFI_CMD_WFD_SET_DEVTYPE:
+       {
+               //      Commented by Albert 2012/08/28
+               //      Specify the WFD device type ( WFD source/primary sink )
+
+               struct wifi_display_info                *pwfd_info;
+               _adapter*       padapter = ( _adapter * ) rtw_netdev_priv(net);
+
+               pwfd_info = &padapter->wfd_info;
+               if( padapter->wdinfo.driver_interface == DRIVER_CFG80211 )
+               {
+                       pwfd_info->wfd_device_type = ( u8 ) get_int_from_command( priv_cmd.buf );
+
+                       pwfd_info->wfd_device_type &= WFD_DEVINFO_DUAL;
+               }
+               break;
+       }
+#endif
+       default:
+               DBG_871X("Unknown PRIVATE command %s - ignored\n", command);
+               snprintf(command, 3, "OK");
+               bytes_written = strlen("OK");
+       }
+
+response:
+       if (bytes_written >= 0) {
+               if ((bytes_written == 0) && (priv_cmd.total_len > 0))
+                       command[0] = '\0';
+               if (bytes_written >= priv_cmd.total_len) {
+                       DBG_871X("%s: bytes_written = %d\n", __FUNCTION__, bytes_written);
+                       bytes_written = priv_cmd.total_len;
+               } else {
+                       bytes_written++;
+               }
+               priv_cmd.used_len = bytes_written;
+               if (copy_to_user((void *)priv_cmd.buf, command, bytes_written)) {
+                       DBG_871X("%s: failed to copy data to user buffer\n", __FUNCTION__);
+                       ret = -EFAULT;
+               }
+       }
+       else {
+               ret = bytes_written;
+       }
+
+exit:
+       rtw_unlock_suspend();
+       if (command) {
+               rtw_mfree(command, priv_cmd.total_len);
+       }
+
+       return ret;
+}
+
+
+/**
+ * Functions for Android WiFi card detection
+ */
+#if defined(RTW_ENABLE_WIFI_CONTROL_FUNC)
+
+static int g_wifidev_registered = 0;
+static struct semaphore wifi_control_sem;
+static struct wifi_platform_data *wifi_control_data = NULL;
+static struct resource *wifi_irqres = NULL;
+
+static int wifi_add_dev(void);
+static void wifi_del_dev(void);
+
+int rtw_android_wifictrl_func_add(void)
+{
+       int ret = 0;
+       sema_init(&wifi_control_sem, 0);
+
+       ret = wifi_add_dev();
+       if (ret) {
+               DBG_871X("%s: platform_driver_register failed\n", __FUNCTION__);
+               return ret;
+       }
+       g_wifidev_registered = 1;
+
+       /* Waiting callback after platform_driver_register is done or exit with error */
+       if (down_timeout(&wifi_control_sem,  msecs_to_jiffies(1000)) != 0) {
+               ret = -EINVAL;
+               DBG_871X("%s: platform_driver_register timeout\n", __FUNCTION__);
+       }
+
+       return ret;
+}
+
+void rtw_android_wifictrl_func_del(void)
+{
+       if (g_wifidev_registered)
+       {
+               wifi_del_dev();
+               g_wifidev_registered = 0;
+       }
+}
+
+void *wl_android_prealloc(int section, unsigned long size)
+{
+       void *alloc_ptr = NULL;
+       if (wifi_control_data && wifi_control_data->mem_prealloc) {
+               alloc_ptr = wifi_control_data->mem_prealloc(section, size);
+               if (alloc_ptr) {
+                       DBG_871X("success alloc section %d\n", section);
+                       if (size != 0L)
+                               memset(alloc_ptr, 0, size);
+                       return alloc_ptr;
+               }
+       }
+
+       DBG_871X("can't alloc section %d\n", section);
+       return NULL;
+}
+
+int wifi_get_irq_number(unsigned long *irq_flags_ptr)
+{
+       if (wifi_irqres) {
+               *irq_flags_ptr = wifi_irqres->flags & IRQF_TRIGGER_MASK;
+               return (int)wifi_irqres->start;
+       }
+#ifdef CUSTOM_OOB_GPIO_NUM
+       return CUSTOM_OOB_GPIO_NUM;
+#else
+       return -1;
+#endif
+}
+
+int wifi_set_power(int on, unsigned long msec)
+{
+       DBG_871X("%s = %d\n", __FUNCTION__, on);
+       if (wifi_control_data && wifi_control_data->set_power) {
+               wifi_control_data->set_power(on);
+       }
+       if (msec)
+               msleep(msec);
+       return 0;
+}
+
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 35))
+int wifi_get_mac_addr(unsigned char *buf)
+{
+       DBG_871X("%s\n", __FUNCTION__);
+       if (!buf)
+               return -EINVAL;
+       if (wifi_control_data && wifi_control_data->get_mac_addr) {
+               return wifi_control_data->get_mac_addr(buf);
+       }
+       return -EOPNOTSUPP;
+}
+#endif /* (LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 35)) */
+
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 39)) || defined(COMPAT_KERNEL_RELEASE)
+void *wifi_get_country_code(char *ccode)
+{
+       DBG_871X("%s\n", __FUNCTION__);
+       if (!ccode)
+               return NULL;
+       if (wifi_control_data && wifi_control_data->get_country_code) {
+               return wifi_control_data->get_country_code(ccode);
+       }
+       return NULL;
+}
+#endif /* (LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 39)) */
+
+static int wifi_set_carddetect(int on)
+{
+       DBG_871X("%s = %d\n", __FUNCTION__, on);
+       if (wifi_control_data && wifi_control_data->set_carddetect) {
+               wifi_control_data->set_carddetect(on);
+       }
+       return 0;
+}
+
+static int wifi_probe(struct platform_device *pdev)
+{
+       struct wifi_platform_data *wifi_ctrl =
+               (struct wifi_platform_data *)(pdev->dev.platform_data);
+
+       DBG_871X("## %s\n", __FUNCTION__);
+       wifi_irqres = platform_get_resource_byname(pdev, IORESOURCE_IRQ, "bcmdhd_wlan_irq");
+       if (wifi_irqres == NULL)
+               wifi_irqres = platform_get_resource_byname(pdev,
+                       IORESOURCE_IRQ, "bcm4329_wlan_irq");
+       wifi_control_data = wifi_ctrl;
+
+       wifi_set_power(1, 0);   /* Power On */
+       wifi_set_carddetect(1); /* CardDetect (0->1) */
+
+       up(&wifi_control_sem);
+       return 0;
+}
+
+static int wifi_remove(struct platform_device *pdev)
+{
+       struct wifi_platform_data *wifi_ctrl =
+               (struct wifi_platform_data *)(pdev->dev.platform_data);
+
+       DBG_871X("## %s\n", __FUNCTION__);
+       wifi_control_data = wifi_ctrl;
+
+       wifi_set_power(0, 0);   /* Power Off */
+       wifi_set_carddetect(0); /* CardDetect (1->0) */
+
+       up(&wifi_control_sem);
+       return 0;
+}
+
+static int wifi_suspend(struct platform_device *pdev, pm_message_t state)
+{
+       DBG_871X("##> %s\n", __FUNCTION__);
+#if (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 39)) && defined(OOB_INTR_ONLY)
+       bcmsdh_oob_intr_set(0);
+#endif
+       return 0;
+}
+
+static int wifi_resume(struct platform_device *pdev)
+{
+       DBG_871X("##> %s\n", __FUNCTION__);
+#if (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 39)) && defined(OOB_INTR_ONLY)
+       if (dhd_os_check_if_up(bcmsdh_get_drvdata()))
+               bcmsdh_oob_intr_set(1);
+#endif
+       return 0;
+}
+
+/* temporarily use these two */
+static struct platform_driver wifi_device = {
+       .probe          = wifi_probe,
+       .remove         = wifi_remove,
+       .suspend        = wifi_suspend,
+       .resume         = wifi_resume,
+       .driver         = {
+       .name   = "bcmdhd_wlan",
+       }
+};
+
+static struct platform_driver wifi_device_legacy = {
+       .probe          = wifi_probe,
+       .remove         = wifi_remove,
+       .suspend        = wifi_suspend,
+       .resume         = wifi_resume,
+       .driver         = {
+       .name   = "bcm4329_wlan",
+       }
+};
+
+static int wifi_add_dev(void)
+{
+       DBG_871X("## Calling platform_driver_register\n");
+       platform_driver_register(&wifi_device);
+       platform_driver_register(&wifi_device_legacy);
+       return 0;
+}
+
+static void wifi_del_dev(void)
+{
+       DBG_871X("## Unregister platform_driver_register\n");
+       platform_driver_unregister(&wifi_device);
+       platform_driver_unregister(&wifi_device_legacy);
+}
+#endif /* defined(RTW_ENABLE_WIFI_CONTROL_FUNC) */
diff --git a/drivers/net/wireless/realtek/rtl8192cu/os_dep/linux/usb_intf.c b/drivers/net/wireless/realtek/rtl8192cu/os_dep/linux/usb_intf.c
new file mode 100644 (file)
index 0000000..09a5238
--- /dev/null
@@ -0,0 +1,1655 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#define _HCI_INTF_C_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <recv_osdep.h>
+#include <xmit_osdep.h>
+#include <hal_intf.h>
+#include <rtw_version.h>
+
+#ifndef CONFIG_USB_HCI
+
+#error "CONFIG_USB_HCI shall be on!\n"
+
+#endif
+
+#include <usb_vendor_req.h>
+#include <usb_ops.h>
+#include <usb_osintf.h>
+#include <usb_hal.h>
+#ifdef CONFIG_PLATFORM_RTK_DMP
+#include <asm/io.h>
+#endif
+
+#if defined (PLATFORM_LINUX) && defined (PLATFORM_WINDOWS)
+
+#error "Shall be Linux or Windows, but not both!\n"
+
+#endif
+
+#ifdef CONFIG_80211N_HT
+extern int rtw_ht_enable;
+extern int rtw_cbw40_enable;
+extern int rtw_ampdu_enable;//for enable tx_ampdu
+#endif
+
+#ifdef CONFIG_GLOBAL_UI_PID
+int ui_pid[3] = {0, 0, 0};
+#endif
+
+
+extern int pm_netdev_open(struct net_device *pnetdev,u8 bnormal);
+static int rtw_suspend(struct usb_interface *intf, pm_message_t message);
+static int rtw_resume(struct usb_interface *intf);
+int rtw_resume_process(_adapter *padapter);
+
+
+static int rtw_drv_init(struct usb_interface *pusb_intf,const struct usb_device_id *pdid);
+static void rtw_dev_remove(struct usb_interface *pusb_intf);
+
+#define USB_VENDER_ID_REALTEK          0x0BDA
+
+/* DID_USB_v915_20121224 */
+#define RTL8192C_USB_IDS \
+       /*=== Realtek demoboard ===*/ \
+       {USB_DEVICE(USB_VENDER_ID_REALTEK, 0x8191)},/* Default ID */ \
+       /****** 8188CUS ********/ \
+       {USB_DEVICE(USB_VENDER_ID_REALTEK, 0x8176)},/* 8188cu 1*1 dongole */ \
+       {USB_DEVICE(USB_VENDER_ID_REALTEK, 0x8170)},/* 8188CE-VAU USB minCard */ \
+       {USB_DEVICE(USB_VENDER_ID_REALTEK, 0x817E)},/* 8188CE-VAU USB minCard */ \
+       {USB_DEVICE(USB_VENDER_ID_REALTEK, 0x817A)},/* 8188cu Slim Solo */ \
+       {USB_DEVICE(USB_VENDER_ID_REALTEK, 0x817B)},/* 8188cu Slim Combo */ \
+       {USB_DEVICE(USB_VENDER_ID_REALTEK, 0x817D)},/* 8188RU High-power USB Dongle */ \
+       {USB_DEVICE(USB_VENDER_ID_REALTEK, 0x8754)},/* 8188 Combo for BC4 */ \
+       {USB_DEVICE(USB_VENDER_ID_REALTEK, 0x817F)},/* 8188RU */ \
+       {USB_DEVICE(USB_VENDER_ID_REALTEK, 0x818A)},/* RTL8188CUS-VL */ \
+       {USB_DEVICE(USB_VENDER_ID_REALTEK, 0x018A)},/* RTL8188CTV */ \
+       {USB_DEVICE(USB_VENDER_ID_REALTEK, 0x17C0)}, /* RTK demoboard - USB-N10E */ \
+       /****** 8192CUS ********/ \
+       {USB_DEVICE(USB_VENDER_ID_REALTEK, 0x8177)},/* 8191cu 1*2 */ \
+       {USB_DEVICE(USB_VENDER_ID_REALTEK, 0x8178)},/* 8192cu 2*2 */ \
+       {USB_DEVICE(USB_VENDER_ID_REALTEK, 0x817C)},/* 8192CE-VAU USB minCard */ \
+       {USB_DEVICE(USB_VENDER_ID_REALTEK, 0x8191)},/* 8192CU 2*2 */ \
+       {USB_DEVICE(0x1058, 0x0631)},/* Alpha, 8192CU */ \
+       /*=== Customer ID ===*/  \
+       /****** 8188CUS Dongle ********/ \
+       {USB_DEVICE(0x2019, 0xED17)},/* PCI - Edimax */ \
+       {USB_DEVICE(0x0DF6, 0x0052)},/* Sitecom - Edimax */ \
+       {USB_DEVICE(0x7392, 0x7811)},/* Edimax - Edimax */ \
+       {USB_DEVICE(0x07B8, 0x8189)},/* Abocom - Abocom */ \
+       {USB_DEVICE(0x0EB0, 0x9071)},/* NO Brand - Etop */ \
+       {USB_DEVICE(0x06F8, 0xE033)},/* Hercules - Edimax */ \
+       {USB_DEVICE(0x103C, 0x1629)},/* HP - Lite-On ,8188CUS Slim Combo */ \
+       {USB_DEVICE(0x2001, 0x3308)},/* D-Link - Alpha */ \
+       {USB_DEVICE(0x050D, 0x1102)},/* Belkin - Edimax */ \
+       {USB_DEVICE(0x2019, 0xAB2A)},/* Planex - Abocom */ \
+       {USB_DEVICE(0x20F4, 0x648B)},/* TRENDnet - Cameo */ \
+       {USB_DEVICE(0x4855, 0x0090)},/*  - Feixun */ \
+       {USB_DEVICE(0x13D3, 0x3357)},/*  - AzureWave */ \
+       {USB_DEVICE(0x0DF6, 0x005C)},/* Sitecom - Edimax */ \
+       {USB_DEVICE(0x0BDA, 0x5088)},/* Thinkware - CC&C */ \
+       {USB_DEVICE(0x4856, 0x0091)},/* NetweeN - Feixun */ \
+       {USB_DEVICE(0x0846, 0x9041)}, /* Netgear - Cameo */ \
+       {USB_DEVICE(0x2019, 0x4902)},/* Planex - Etop */ \
+       {USB_DEVICE(0x2019, 0xAB2E)},/* SW-WF02-AD15 -Abocom */ \
+       {USB_DEVICE(0x2001, 0x330B)}, /* D-LINK - T&W */ \
+       {USB_DEVICE(0xCDAB, 0x8010)}, /* - - compare */ \
+       {USB_DEVICE(0x0B05, 0x17BA)}, /* ASUS - Edimax */ \
+       {USB_DEVICE(0x0BDA, 0x1E1E)}, /* Intel - - */ \
+       {USB_DEVICE(0x04BB, 0x094c)}, /* I-O DATA - Edimax */ \
+       /****** 8188CTV ********/ \
+       {USB_DEVICE(0xCDAB, 0x8011)}, /* - - compare */ \
+       {USB_DEVICE(0x0BDA, 0x0A8A)}, /* Sony - Foxconn */ \
+       /****** 8188 RU ********/ \
+       {USB_DEVICE(0x0BDA, 0x317F)},/* Netcore,Netcore */ \
+       /****** 8188CE-VAU ********/ \
+       {USB_DEVICE(0x13D3, 0x3359)},/*  - Azwave */ \
+       {USB_DEVICE(0x13D3, 0x3358)},/*  - Azwave */ \
+       /****** 8188CUS Slim Solo********/ \
+       {USB_DEVICE(0x04F2, 0xAFF7)},/* XAVI - XAVI */ \
+       {USB_DEVICE(0x04F2, 0xAFF9)},/* XAVI - XAVI */ \
+       {USB_DEVICE(0x04F2, 0xAFFA)},/* XAVI - XAVI */ \
+       /****** 8188CUS Slim Combo ********/ \
+       {USB_DEVICE(0x04F2, 0xAFF8)},/* XAVI - XAVI */ \
+       {USB_DEVICE(0x04F2, 0xAFFB)},/* XAVI - XAVI */ \
+       {USB_DEVICE(0x04F2, 0xAFFC)},/* XAVI - XAVI */ \
+       {USB_DEVICE(0x2019, 0x1201)},/* Planex - Vencer */ \
+       /****** 8192CUS Dongle ********/ \
+       {USB_DEVICE(0x2001, 0x3307)},/* D-Link - Cameo */ \
+       {USB_DEVICE(0x2001, 0x330A)},/* D-Link - Alpha */ \
+       {USB_DEVICE(0x2001, 0x3309)},/* D-Link - Alpha */ \
+       {USB_DEVICE(0x2001, 0x330D)},/* D-Link - DWA 131 */ \
+       {USB_DEVICE(0x0586, 0x341F)},/* Zyxel - Abocom */ \
+       {USB_DEVICE(0x7392, 0x7822)},/* Edimax - Edimax */ \
+       {USB_DEVICE(0x2019, 0xAB2B)},/* Planex - Abocom */ \
+       {USB_DEVICE(0x07B8, 0x8178)},/* Abocom - Abocom */ \
+       {USB_DEVICE(0x07AA, 0x0056)},/* ATKK - Gemtek */ \
+       {USB_DEVICE(0x4855, 0x0091)},/*  - Feixun */ \
+       {USB_DEVICE(0x050D, 0x2102)},/* Belkin - Sercomm */ \
+       {USB_DEVICE(0x050D, 0x2103)},/* Belkin - Edimax */ \
+       {USB_DEVICE(0x20F4, 0x624D)},/* TRENDnet */ \
+       {USB_DEVICE(0x0DF6, 0x0061)},/* Sitecom - Edimax */ \
+       {USB_DEVICE(0x0B05, 0x17AB)},/* ASUS - Edimax */ \
+       {USB_DEVICE(0x0846, 0x9021)},/* Netgear - Sercomm */ \
+       {USB_DEVICE(0x0846, 0xF001)}, /* Netgear - Sercomm */ \
+       {USB_DEVICE(0x0E66, 0x0019)},/* Hawking,Edimax */ \
+       {USB_DEVICE(0x0E66, 0x0020)}, /* Hawking  - Edimax */ \
+       {USB_DEVICE(0x050D, 0x1004)}, /* Belkin - Edimax */ \
+       {USB_DEVICE(0x0BDA, 0x2E2E)}, /* Intel - - */ \
+       {USB_DEVICE(0x2357, 0x0100)}, /* TP-Link - TP-Link */ \
+       {USB_DEVICE(0x06F8, 0xE035)}, /* Hercules - Edimax */ \
+       {USB_DEVICE(0x04BB, 0x0950)}, /* IO-DATA - Edimax */ \
+       {USB_DEVICE(0x0DF6, 0x0070)}, /* Sitecom - Edimax */ \
+       {USB_DEVICE(0x0789, 0x016D)}, /* LOGITEC - Edimax */ \
+       /****** 8192CE-VAU  ********/ \
+       {USB_DEVICE(USB_VENDER_ID_REALTEK, 0x8186)},/* Intel-Xavi( Azwave) */
+
+#define RTL8192D_USB_IDS \
+       /*=== Realtek demoboard ===*/ \
+       /****** 8192DU ********/ \
+       {USB_DEVICE(USB_VENDER_ID_REALTEK, 0x8193)},/* 8192DU-VC */ \
+       {USB_DEVICE(USB_VENDER_ID_REALTEK, 0x8194)},/* 8192DU-VS */ \
+       {USB_DEVICE(USB_VENDER_ID_REALTEK, 0x8111)},/* Realtek 5G dongle for WiFi Display */ \
+       {USB_DEVICE(USB_VENDER_ID_REALTEK, 0x0193)},/* 8192DE-VAU */ \
+       {USB_DEVICE(USB_VENDER_ID_REALTEK, 0x8171)},/* 8192DU-VC */ \
+       /*=== Customer ID ===*/ \
+       /****** 8192DU-VC ********/ \
+       {USB_DEVICE(0x2019, 0xAB2C)},/* PCI - Abocm */ \
+       {USB_DEVICE(0x2019, 0x4903)},/* PCI - ETOP */ \
+       {USB_DEVICE(0x2019, 0x4904)},/* PCI - ETOP */ \
+       {USB_DEVICE(0x07B8, 0x8193)},/* Abocom - Abocom */ \
+       /****** 8192DU-VS ********/ \
+       {USB_DEVICE(0x20F4, 0x664B)}, /* TRENDnet - Cameo */ \
+       {USB_DEVICE(0x04DD, 0x954F)},  /* Sharp */ \
+       {USB_DEVICE(0x04DD, 0x96A6)},  /* Sharp */ \
+       {USB_DEVICE(0x050D, 0x110A)}, /* Belkin - Edimax */ \
+       {USB_DEVICE(0x050D, 0x1105)}, /* Belkin - Edimax */ \
+       {USB_DEVICE(0x050D, 0x120A)}, /* Belkin - Edimax */ \
+       {USB_DEVICE(0x1668, 0x8102)}, /*  -  */ \
+       {USB_DEVICE(0x0BDA, 0xE194)}, /*  - Edimax */ \
+       /****** 8192DU-WiFi Display Dongle ********/ \
+       {USB_DEVICE(0x2019, 0xAB2D)},/* Planex - Abocom ,5G dongle for WiFi Display */
+
+#ifndef CONFIG_RTL8192C
+       #undef RTL8192C_USB_IDS
+       #define RTL8192C_USB_IDS
+#endif
+#ifndef CONFIG_RTL8192D
+       #undef RTL8192D_USB_IDS
+       #define RTL8192D_USB_IDS
+#endif
+
+
+static struct usb_device_id rtw_usb_id_tbl[] ={
+       RTL8192C_USB_IDS
+       RTL8192D_USB_IDS
+       {}      /* Terminating entry */
+};
+MODULE_DEVICE_TABLE(usb, rtw_usb_id_tbl);
+
+int const rtw_usb_id_len = sizeof(rtw_usb_id_tbl) / sizeof(struct usb_device_id);
+
+static struct specific_device_id specific_device_id_tbl[] = {
+       {.idVendor=USB_VENDER_ID_REALTEK, .idProduct=0x8177, .flags=SPEC_DEV_ID_DISABLE_HT},//8188cu 1*1 dongole, (b/g mode only)
+       {.idVendor=USB_VENDER_ID_REALTEK, .idProduct=0x817E, .flags=SPEC_DEV_ID_DISABLE_HT},//8188CE-VAU USB minCard (b/g mode only)
+       {.idVendor=0x0b05, .idProduct=0x1791, .flags=SPEC_DEV_ID_DISABLE_HT},
+       {.idVendor=0x13D3, .idProduct=0x3311, .flags=SPEC_DEV_ID_DISABLE_HT},
+       {.idVendor=0x13D3, .idProduct=0x3359, .flags=SPEC_DEV_ID_DISABLE_HT},//Russian customer -Azwave (8188CE-VAU  g mode)
+#ifdef RTK_DMP_PLATFORM
+       {.idVendor=USB_VENDER_ID_REALTEK, .idProduct=0x8111, .flags=SPEC_DEV_ID_ASSIGN_IFNAME}, // Realtek 5G dongle for WiFi Display
+       {.idVendor=0x2019, .idProduct=0xAB2D, .flags=SPEC_DEV_ID_ASSIGN_IFNAME}, // PCI-Abocom 5G dongle for WiFi Display
+#endif /* RTK_DMP_PLATFORM */
+       {}
+};
+
+struct rtw_usb_drv {
+       struct usb_driver usbdrv;
+       int drv_registered;
+};
+
+static void rtw_dev_shutdown(struct device *dev)
+{
+       struct usb_interface *usb_intf = container_of(dev, struct usb_interface, dev);
+       struct dvobj_priv *dvobj = usb_get_intfdata(usb_intf);
+       _adapter *adapter = dvobj->if1;
+       int i;
+
+       DBG_871X("%s\n", __func__);
+
+       for (i = 0; i<dvobj->iface_nums; i++) {
+               adapter = dvobj->padapters[i];
+               adapter->bSurpriseRemoved = _TRUE;
+       }
+
+       ATOMIC_SET(&dvobj->continual_urb_error, MAX_CONTINUAL_URB_ERR+1);
+}
+
+#ifdef CONFIG_RTL8192C
+static struct usb_device_id rtl8192c_usb_id_tbl[] ={
+       RTL8192C_USB_IDS
+       {}      /* Terminating entry */
+};
+
+struct rtw_usb_drv rtl8192c_usb_drv = {
+       .usbdrv.name = (char*)"rtl8192cu",
+       .usbdrv.probe = rtw_drv_init,
+       .usbdrv.disconnect = rtw_dev_remove,
+       .usbdrv.id_table = rtl8192c_usb_id_tbl,
+       .usbdrv.suspend =  rtw_suspend,
+       .usbdrv.resume = rtw_resume,
+       #if (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 22))
+       .usbdrv.reset_resume   = rtw_resume,
+       #endif
+       #ifdef CONFIG_AUTOSUSPEND
+       .usbdrv.supports_autosuspend = 1,
+       #endif
+
+       #if (LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 19))
+       .usbdrv.drvwrap.driver.shutdown = rtw_dev_shutdown,
+       #else
+       .usbdrv.driver.shutdown = rtw_dev_shutdown,
+       #endif
+};
+
+static struct rtw_usb_drv *usb_drv = &rtl8192c_usb_drv;
+#endif /* CONFIG_RTL8192C */
+
+#ifdef CONFIG_RTL8192D
+static struct usb_device_id rtl8192d_usb_id_tbl[] ={
+       RTL8192D_USB_IDS
+       {}      /* Terminating entry */
+};
+
+struct rtw_usb_drv rtl8192d_usb_drv = {
+       .usbdrv.name = (char*)"rtl8192du",
+       .usbdrv.probe = rtw_drv_init,
+       .usbdrv.disconnect = rtw_dev_remove,
+       .usbdrv.id_table = rtl8192d_usb_id_tbl,
+       .usbdrv.suspend =  rtw_suspend,
+       .usbdrv.resume = rtw_resume,
+       #if (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 22))
+       .usbdrv.reset_resume   = rtw_resume,
+       #endif
+       #ifdef CONFIG_AUTOSUSPEND
+       .usbdrv.supports_autosuspend = 1,
+       #endif
+
+       #if (LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 19))
+       .usbdrv.drvwrap.driver.shutdown = rtw_dev_shutdown,
+       #else
+       .usbdrv.driver.shutdown = rtw_dev_shutdown,
+       #endif
+};
+static struct rtw_usb_drv *usb_drv = &rtl8192d_usb_drv;
+#endif /* CONFIG_RTL8192D */
+
+static inline int RT_usb_endpoint_dir_in(const struct usb_endpoint_descriptor *epd)
+{
+       return ((epd->bEndpointAddress & USB_ENDPOINT_DIR_MASK) == USB_DIR_IN);
+}
+
+static inline int RT_usb_endpoint_dir_out(const struct usb_endpoint_descriptor *epd)
+{
+       return ((epd->bEndpointAddress & USB_ENDPOINT_DIR_MASK) == USB_DIR_OUT);
+}
+
+static inline int RT_usb_endpoint_xfer_int(const struct usb_endpoint_descriptor *epd)
+{
+       return ((epd->bmAttributes & USB_ENDPOINT_XFERTYPE_MASK) == USB_ENDPOINT_XFER_INT);
+}
+
+static inline int RT_usb_endpoint_xfer_bulk(const struct usb_endpoint_descriptor *epd)
+{
+       return ((epd->bmAttributes & USB_ENDPOINT_XFERTYPE_MASK) == USB_ENDPOINT_XFER_BULK);
+}
+
+static inline int RT_usb_endpoint_is_bulk_in(const struct usb_endpoint_descriptor *epd)
+{
+       return (RT_usb_endpoint_xfer_bulk(epd) && RT_usb_endpoint_dir_in(epd));
+}
+
+static inline int RT_usb_endpoint_is_bulk_out(const struct usb_endpoint_descriptor *epd)
+{
+       return (RT_usb_endpoint_xfer_bulk(epd) && RT_usb_endpoint_dir_out(epd));
+}
+
+static inline int RT_usb_endpoint_is_int_in(const struct usb_endpoint_descriptor *epd)
+{
+       return (RT_usb_endpoint_xfer_int(epd) && RT_usb_endpoint_dir_in(epd));
+}
+
+static inline int RT_usb_endpoint_num(const struct usb_endpoint_descriptor *epd)
+{
+       return epd->bEndpointAddress & USB_ENDPOINT_NUMBER_MASK;
+}
+
+static u8 rtw_init_intf_priv(struct dvobj_priv *dvobj)
+{
+       u8 rst = _SUCCESS;
+
+       #ifdef CONFIG_USB_VENDOR_REQ_MUTEX
+       _rtw_mutex_init(&dvobj->usb_vendor_req_mutex);
+       #endif
+
+
+       #ifdef CONFIG_USB_VENDOR_REQ_BUFFER_PREALLOC
+       dvobj->usb_alloc_vendor_req_buf = rtw_zmalloc(MAX_USB_IO_CTL_SIZE);
+       if (dvobj->usb_alloc_vendor_req_buf == NULL) {
+               DBG_871X("alloc usb_vendor_req_buf failed... /n");
+               rst = _FAIL;
+               goto exit;
+       }
+       dvobj->usb_vendor_req_buf  =
+               (u8 *)N_BYTE_ALIGMENT((SIZE_PTR)(dvobj->usb_alloc_vendor_req_buf ), ALIGNMENT_UNIT);
+exit:
+       #endif
+
+       return rst;
+
+}
+
+static u8 rtw_deinit_intf_priv(struct dvobj_priv *dvobj)
+{
+       u8 rst = _SUCCESS;
+
+       #ifdef CONFIG_USB_VENDOR_REQ_BUFFER_PREALLOC
+       if(dvobj->usb_vendor_req_buf)
+               rtw_mfree(dvobj->usb_alloc_vendor_req_buf, MAX_USB_IO_CTL_SIZE);
+       #endif
+
+       #ifdef CONFIG_USB_VENDOR_REQ_MUTEX
+       _rtw_mutex_free(&dvobj->usb_vendor_req_mutex);
+       #endif
+
+       return rst;
+}
+
+static struct dvobj_priv *usb_dvobj_init(struct usb_interface *usb_intf)
+{
+       int     i;
+       u8      val8;
+       int     status = _FAIL;
+       struct dvobj_priv *pdvobjpriv = NULL;
+       struct usb_device                               *pusbd;
+       struct usb_device_descriptor    *pdev_desc;
+       struct usb_host_config                  *phost_conf;
+       struct usb_config_descriptor            *pconf_desc;
+       struct usb_host_interface               *phost_iface;
+       struct usb_interface_descriptor *piface_desc;
+       struct usb_host_endpoint                *phost_endp;
+       struct usb_endpoint_descriptor  *pendp_desc;
+
+_func_enter_;
+
+       if((pdvobjpriv = devobj_init()) == NULL) {
+               goto exit;
+       }
+
+       pdvobjpriv->pusbintf = usb_intf ;
+       pusbd = pdvobjpriv->pusbdev = interface_to_usbdev(usb_intf);
+       usb_set_intfdata(usb_intf, pdvobjpriv);
+
+       pdvobjpriv->RtNumInPipes = 0;
+       pdvobjpriv->RtNumOutPipes = 0;
+
+
+       pdev_desc = &pusbd->descriptor;
+#if 0
+       DBG_871X("\n8712_usb_device_descriptor:\n");
+       DBG_871X("bLength=%x\n", pdev_desc->bLength);
+       DBG_871X("bDescriptorType=%x\n", pdev_desc->bDescriptorType);
+       DBG_871X("bcdUSB=%x\n", pdev_desc->bcdUSB);
+       DBG_871X("bDeviceClass=%x\n", pdev_desc->bDeviceClass);
+       DBG_871X("bDeviceSubClass=%x\n", pdev_desc->bDeviceSubClass);
+       DBG_871X("bDeviceProtocol=%x\n", pdev_desc->bDeviceProtocol);
+       DBG_871X("bMaxPacketSize0=%x\n", pdev_desc->bMaxPacketSize0);
+       DBG_871X("idVendor=%x\n", pdev_desc->idVendor);
+       DBG_871X("idProduct=%x\n", pdev_desc->idProduct);
+       DBG_871X("bcdDevice=%x\n", pdev_desc->bcdDevice);
+       DBG_871X("iManufacturer=%x\n", pdev_desc->iManufacturer);
+       DBG_871X("iProduct=%x\n", pdev_desc->iProduct);
+       DBG_871X("iSerialNumber=%x\n", pdev_desc->iSerialNumber);
+       DBG_871X("bNumConfigurations=%x\n", pdev_desc->bNumConfigurations);
+#endif
+
+       phost_conf = pusbd->actconfig;
+       pconf_desc = &phost_conf->desc;
+
+#if 0
+       DBG_871X("\n8712_usb_configuration_descriptor:\n");
+       DBG_871X("bLength=%x\n", pconf_desc->bLength);
+       DBG_871X("bDescriptorType=%x\n", pconf_desc->bDescriptorType);
+       DBG_871X("wTotalLength=%x\n", pconf_desc->wTotalLength);
+       DBG_871X("bNumInterfaces=%x\n", pconf_desc->bNumInterfaces);
+       DBG_871X("bConfigurationValue=%x\n", pconf_desc->bConfigurationValue);
+       DBG_871X("iConfiguration=%x\n", pconf_desc->iConfiguration);
+       DBG_871X("bmAttributes=%x\n", pconf_desc->bmAttributes);
+       DBG_871X("bMaxPower=%x\n", pconf_desc->bMaxPower);
+#endif
+
+       //DBG_871X("\n/****** num of altsetting = (%d) ******/\n", usb_intf->num_altsetting);
+
+       phost_iface = &usb_intf->altsetting[0];
+       piface_desc = &phost_iface->desc;
+
+#if 0
+       DBG_871X("\n8712_usb_interface_descriptor:\n");
+       DBG_871X("bLength=%x\n", piface_desc->bLength);
+       DBG_871X("bDescriptorType=%x\n", piface_desc->bDescriptorType);
+       DBG_871X("bInterfaceNumber=%x\n", piface_desc->bInterfaceNumber);
+       DBG_871X("bAlternateSetting=%x\n", piface_desc->bAlternateSetting);
+       DBG_871X("bNumEndpoints=%x\n", piface_desc->bNumEndpoints);
+       DBG_871X("bInterfaceClass=%x\n", piface_desc->bInterfaceClass);
+       DBG_871X("bInterfaceSubClass=%x\n", piface_desc->bInterfaceSubClass);
+       DBG_871X("bInterfaceProtocol=%x\n", piface_desc->bInterfaceProtocol);
+       DBG_871X("iInterface=%x\n", piface_desc->iInterface);
+#endif
+
+       pdvobjpriv->NumInterfaces = pconf_desc->bNumInterfaces;
+       pdvobjpriv->InterfaceNumber = piface_desc->bInterfaceNumber;
+       pdvobjpriv->nr_endpoint = piface_desc->bNumEndpoints;
+
+       //DBG_871X("\ndump usb_endpoint_descriptor:\n");
+
+       for (i = 0; i < pdvobjpriv->nr_endpoint; i++)
+       {
+               phost_endp = phost_iface->endpoint + i;
+               if (phost_endp)
+               {
+                       pendp_desc = &phost_endp->desc;
+
+                       DBG_871X("\nusb_endpoint_descriptor(%d):\n", i);
+                       DBG_871X("bLength=%x\n",pendp_desc->bLength);
+                       DBG_871X("bDescriptorType=%x\n",pendp_desc->bDescriptorType);
+                       DBG_871X("bEndpointAddress=%x\n",pendp_desc->bEndpointAddress);
+                       //DBG_871X("bmAttributes=%x\n",pendp_desc->bmAttributes);
+                       //DBG_871X("wMaxPacketSize=%x\n",pendp_desc->wMaxPacketSize);
+                       DBG_871X("wMaxPacketSize=%x\n",le16_to_cpu(pendp_desc->wMaxPacketSize));
+                       DBG_871X("bInterval=%x\n",pendp_desc->bInterval);
+                       //DBG_871X("bRefresh=%x\n",pendp_desc->bRefresh);
+                       //DBG_871X("bSynchAddress=%x\n",pendp_desc->bSynchAddress);
+
+                       if (RT_usb_endpoint_is_bulk_in(pendp_desc))
+                       {
+                               DBG_871X("RT_usb_endpoint_is_bulk_in = %x\n", RT_usb_endpoint_num(pendp_desc));
+                               pdvobjpriv->RtNumInPipes++;
+                       }
+                       else if (RT_usb_endpoint_is_int_in(pendp_desc))
+                       {
+                               DBG_871X("RT_usb_endpoint_is_int_in = %x, Interval = %x\n", RT_usb_endpoint_num(pendp_desc),pendp_desc->bInterval);
+                               pdvobjpriv->RtNumInPipes++;
+                       }
+                       else if (RT_usb_endpoint_is_bulk_out(pendp_desc))
+                       {
+                               DBG_871X("RT_usb_endpoint_is_bulk_out = %x\n", RT_usb_endpoint_num(pendp_desc));
+                               pdvobjpriv->RtNumOutPipes++;
+                       }
+                       pdvobjpriv->ep_num[i] = RT_usb_endpoint_num(pendp_desc);
+               }
+       }
+
+       DBG_871X("nr_endpoint=%d, in_num=%d, out_num=%d\n\n", pdvobjpriv->nr_endpoint, pdvobjpriv->RtNumInPipes, pdvobjpriv->RtNumOutPipes);
+
+       if (pusbd->speed == USB_SPEED_HIGH) {
+               pdvobjpriv->ishighspeed = _TRUE;
+               DBG_871X("USB_SPEED_HIGH\n");
+       } else {
+               pdvobjpriv->ishighspeed = _FALSE;
+               DBG_871X("NON USB_SPEED_HIGH\n");
+       }
+
+       if (rtw_init_intf_priv(pdvobjpriv) == _FAIL) {
+               RT_TRACE(_module_os_intfs_c_,_drv_err_,("\n Can't INIT rtw_init_intf_priv\n"));
+               goto free_dvobj;
+       }
+
+       //.3 misc
+       _rtw_init_sema(&(pdvobjpriv->usb_suspend_sema), 0);
+
+       rtw_reset_continual_urb_error(pdvobjpriv);
+
+       usb_get_dev(pusbd);
+
+       //DBG_871X("%s %d\n", __func__, ATOMIC_READ(&usb_intf->dev.kobj.kref.refcount));
+
+       status = _SUCCESS;
+
+free_dvobj:
+       if (status != _SUCCESS && pdvobjpriv) {
+               usb_set_intfdata(usb_intf, NULL);
+               devobj_deinit(pdvobjpriv);
+               pdvobjpriv = NULL;
+       }
+exit:
+_func_exit_;
+       return pdvobjpriv;
+}
+
+static void usb_dvobj_deinit(struct usb_interface *usb_intf)
+{
+       struct dvobj_priv *dvobj = usb_get_intfdata(usb_intf);
+
+_func_enter_;
+
+       usb_set_intfdata(usb_intf, NULL);
+       if (dvobj) {
+               //Modify condition for 92DU DMDP 2010.11.18, by Thomas
+               /*if ((dvobj->NumInterfaces == 1)
+                       || ((dvobj->InterfaceNumber == 1) && (dvobj->DualMacMode == _TRUE))) {
+                       if (interface_to_usbdev(usb_intf)->state != USB_STATE_NOTATTACHED) {
+                               //If we didn't unplug usb dongle and remove/insert modlue, driver fails on sitesurvey for the first time when device is up .
+                               //Reset usb port for sitesurvey fail issue. 2009.8.13, by Thomas
+                               DBG_871X("usb attached..., try to reset usb device\n");
+                               usb_reset_device(interface_to_usbdev(usb_intf));
+                       }
+               }*/
+               rtw_deinit_intf_priv(dvobj);
+               devobj_deinit(dvobj);
+       }
+
+       //DBG_871X("%s %d\n", __func__, ATOMIC_READ(&usb_intf->dev.kobj.kref.refcount));
+       usb_put_dev(interface_to_usbdev(usb_intf));
+
+_func_exit_;
+}
+
+static void decide_chip_type_by_usb_device_id(_adapter *padapter, const struct usb_device_id *pdid)
+{
+       padapter->chip_type = NULL_CHIP_TYPE;
+#ifdef CONFIG_RTL8192C
+       padapter->chip_type = RTL8188C_8192C;
+       padapter->HardwareType = HARDWARE_TYPE_RTL8192CU;
+       DBG_871X("CHIP TYPE: RTL8188C_8192C\n");
+#endif
+
+#ifdef CONFIG_RTL8192D
+       padapter->chip_type = RTL8192D;
+       padapter->HardwareType = HARDWARE_TYPE_RTL8192DU;
+       DBG_871X("CHIP TYPE: RTL8192D\n");
+#endif
+}
+
+static void usb_intf_start(_adapter *padapter)
+{
+       RT_TRACE(_module_hci_intfs_c_,_drv_err_,("+usb_intf_start\n"));
+       rtw_hal_inirp_init(padapter);
+       RT_TRACE(_module_hci_intfs_c_,_drv_err_,("-usb_intf_start\n"));
+}
+
+static void usb_intf_stop(_adapter *padapter)
+{
+
+       RT_TRACE(_module_hci_intfs_c_,_drv_err_,("+usb_intf_stop\n"));
+
+       //disabel_hw_interrupt
+       if(padapter->bSurpriseRemoved == _FALSE)
+       {
+               //device still exists, so driver can do i/o operation
+               //TODO:
+               RT_TRACE(_module_hci_intfs_c_,_drv_err_,("SurpriseRemoved==_FALSE\n"));
+       }
+
+       //cancel in irp
+       rtw_hal_inirp_deinit(padapter);
+
+       //cancel out irp
+       rtw_write_port_cancel(padapter);
+
+       //todo:cancel other irps
+
+       RT_TRACE(_module_hci_intfs_c_,_drv_err_,("-usb_intf_stop\n"));
+
+}
+
+static void rtw_dev_unload(_adapter *padapter)
+{
+       struct net_device *pnetdev= (struct net_device*)padapter->pnetdev;
+       u8 val8;
+       RT_TRACE(_module_hci_intfs_c_,_drv_err_,("+rtw_dev_unload\n"));
+
+       if(padapter->bup == _TRUE)
+       {
+               DBG_871X("===> rtw_dev_unload\n");
+
+               padapter->bDriverStopped = _TRUE;
+               #ifdef CONFIG_XMIT_ACK
+               if (padapter->xmitpriv.ack_tx)
+                       rtw_ack_tx_done(&padapter->xmitpriv, RTW_SCTX_DONE_DRV_STOP);
+               #endif
+
+               //s3.
+               if(padapter->intf_stop)
+               {
+                       padapter->intf_stop(padapter);
+               }
+
+               //s4.
+               if(!padapter->pwrctrlpriv.bInternalAutoSuspend )
+               rtw_stop_drv_threads(padapter);
+
+
+               //s5.
+               if(padapter->bSurpriseRemoved == _FALSE)
+               {
+                       //DBG_871X("r871x_dev_unload()->rtl871x_hal_deinit()\n");
+#ifdef CONFIG_WOWLAN
+                       if((padapter->pwrctrlpriv.bSupportRemoteWakeup==_TRUE)&&(padapter->pwrctrlpriv.wowlan_mode==_TRUE)){
+                               DBG_871X("%s bSupportWakeOnWlan==_TRUE  do not run rtw_hal_deinit()\n",__FUNCTION__);
+                       }
+                       else
+#endif //CONFIG_WOWLAN
+                       {
+                               rtw_hal_deinit(padapter);
+                       }
+                       padapter->bSurpriseRemoved = _TRUE;
+               }
+
+               padapter->bup = _FALSE;
+#ifdef CONFIG_WOWLAN
+               padapter->hw_init_completed=_FALSE;
+#endif //CONFIG_WOWLAN
+       }
+       else
+       {
+               RT_TRACE(_module_hci_intfs_c_,_drv_err_,("r871x_dev_unload():padapter->bup == _FALSE\n" ));
+       }
+
+       DBG_871X("<=== rtw_dev_unload\n");
+
+       RT_TRACE(_module_hci_intfs_c_,_drv_err_,("-rtw_dev_unload\n"));
+
+}
+
+static void process_spec_devid(const struct usb_device_id *pdid)
+{
+       u16 vid, pid;
+       u32 flags;
+       int i;
+       int num = sizeof(specific_device_id_tbl)/sizeof(struct specific_device_id);
+
+       for(i=0; i<num; i++)
+       {
+               vid = specific_device_id_tbl[i].idVendor;
+               pid = specific_device_id_tbl[i].idProduct;
+               flags = specific_device_id_tbl[i].flags;
+
+#ifdef CONFIG_80211N_HT
+               if((pdid->idVendor==vid) && (pdid->idProduct==pid) && (flags&SPEC_DEV_ID_DISABLE_HT))
+               {
+                        rtw_ht_enable = 0;
+                        rtw_cbw40_enable = 0;
+                        rtw_ampdu_enable = 0;
+               }
+#endif
+
+#ifdef RTK_DMP_PLATFORM
+               // Change the ifname to wlan10 when PC side WFD dongle plugin on DMP platform.
+               // It is used to distinguish between normal and PC-side wifi dongle/module.
+               if((pdid->idVendor==vid) && (pdid->idProduct==pid) && (flags&SPEC_DEV_ID_ASSIGN_IFNAME))
+               {
+                       extern char* ifname;
+                       strncpy(ifname, "wlan10", 6);
+                       //DBG_871X("%s()-%d: ifname=%s, vid=%04X, pid=%04X\n", __FUNCTION__, __LINE__, ifname, vid, pid);
+               }
+#endif /* RTK_DMP_PLATFORM */
+
+       }
+}
+
+#ifdef SUPPORT_HW_RFOFF_DETECTED
+int rtw_hw_suspend(_adapter *padapter )
+{
+       struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
+       struct usb_interface *pusb_intf = adapter_to_dvobj(padapter)->pusbintf;
+       struct net_device *pnetdev = padapter->pnetdev;
+
+       _func_enter_;
+
+       if((!padapter->bup) || (padapter->bDriverStopped)||(padapter->bSurpriseRemoved))
+       {
+               DBG_871X("padapter->bup=%d bDriverStopped=%d bSurpriseRemoved = %d\n",
+                       padapter->bup, padapter->bDriverStopped,padapter->bSurpriseRemoved);
+               goto error_exit;
+       }
+
+       if(padapter)//system suspend
+       {
+               LeaveAllPowerSaveMode(padapter);
+
+               DBG_871X("==> rtw_hw_suspend\n");
+               _enter_pwrlock(&pwrpriv->lock);
+               pwrpriv->bips_processing = _TRUE;
+               //padapter->net_closed = _TRUE;
+               //s1.
+               if(pnetdev)
+               {
+                       netif_carrier_off(pnetdev);
+                       rtw_netif_stop_queue(pnetdev);
+               }
+
+               //s2.
+               rtw_disassoc_cmd(padapter, 500, _FALSE);
+
+               //s2-2.  indicate disconnect to os
+               //rtw_indicate_disconnect(padapter);
+               {
+                       struct  mlme_priv *pmlmepriv = &padapter->mlmepriv;
+
+                       if(check_fwstate(pmlmepriv, _FW_LINKED))
+                       {
+                               _clr_fwstate_(pmlmepriv, _FW_LINKED);
+
+                               rtw_led_control(padapter, LED_CTL_NO_LINK);
+
+                               rtw_os_indicate_disconnect(padapter);
+
+                               #ifdef CONFIG_LPS
+                               //donnot enqueue cmd
+                               rtw_lps_ctrl_wk_cmd(padapter, LPS_CTRL_DISCONNECT, 0);
+                               #endif
+                       }
+
+               }
+               //s2-3.
+               rtw_free_assoc_resources(padapter, 1);
+
+               //s2-4.
+               rtw_free_network_queue(padapter,_TRUE);
+               #ifdef CONFIG_IPS
+               rtw_ips_dev_unload(padapter);
+               #endif
+               pwrpriv->rf_pwrstate = rf_off;
+               pwrpriv->bips_processing = _FALSE;
+
+               _exit_pwrlock(&pwrpriv->lock);
+       }
+       else
+               goto error_exit;
+
+       _func_exit_;
+       return 0;
+
+error_exit:
+       DBG_871X("%s, failed \n",__FUNCTION__);
+       return (-1);
+
+}
+
+int rtw_hw_resume(_adapter *padapter)
+{
+       struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
+       struct usb_interface *pusb_intf = adapter_to_dvobj(padapter)->pusbintf;
+       struct net_device *pnetdev = padapter->pnetdev;
+
+       _func_enter_;
+
+       if(padapter)//system resume
+       {
+               DBG_871X("==> rtw_hw_resume\n");
+               _enter_pwrlock(&pwrpriv->lock);
+               pwrpriv->bips_processing = _TRUE;
+               rtw_reset_drv_sw(padapter);
+
+               if(pm_netdev_open(pnetdev,_FALSE) != 0)
+               {
+                       _exit_pwrlock(&pwrpriv->lock);
+                       goto error_exit;
+               }
+
+               netif_device_attach(pnetdev);
+               netif_carrier_on(pnetdev);
+
+               if(!rtw_netif_queue_stopped(pnetdev))
+                       rtw_netif_start_queue(pnetdev);
+               else
+                       rtw_netif_wake_queue(pnetdev);
+
+               pwrpriv->bkeepfwalive = _FALSE;
+               pwrpriv->brfoffbyhw = _FALSE;
+
+               pwrpriv->rf_pwrstate = rf_on;
+               pwrpriv->bips_processing = _FALSE;
+
+               _exit_pwrlock(&pwrpriv->lock);
+       }
+       else
+       {
+               goto error_exit;
+       }
+
+       _func_exit_;
+
+       return 0;
+error_exit:
+       DBG_871X("%s, Open net dev failed \n",__FUNCTION__);
+       return (-1);
+}
+#endif
+
+static int rtw_suspend(struct usb_interface *pusb_intf, pm_message_t message)
+{
+       struct dvobj_priv *dvobj = usb_get_intfdata(pusb_intf);
+       _adapter *padapter = dvobj->if1;
+       struct net_device *pnetdev = padapter->pnetdev;
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+       struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
+       struct usb_device *usb_dev = interface_to_usbdev(pusb_intf);
+#ifdef CONFIG_WOWLAN
+       struct wowlan_ioctl_param poidparam;
+#endif // CONFIG_WOWLAN
+       int ret = 0;
+       u32 start_time = rtw_get_current_time();
+       _func_enter_;
+
+       DBG_871X("==> %s (%s:%d)\n",__FUNCTION__, current->comm, current->pid);
+
+       if((!padapter->bup) || (padapter->bDriverStopped)||(padapter->bSurpriseRemoved))
+       {
+               DBG_871X("padapter->bup=%d bDriverStopped=%d bSurpriseRemoved = %d\n",
+                       padapter->bup, padapter->bDriverStopped,padapter->bSurpriseRemoved);
+               goto exit;
+       }
+
+       if(pwrpriv->bInternalAutoSuspend )
+       {
+       #ifdef CONFIG_AUTOSUSPEND
+       #ifdef SUPPORT_HW_RFOFF_DETECTED
+               // The FW command register update must after MAC and FW init ready.
+               if((padapter->bFWReady) && ( padapter->pwrctrlpriv.bHWPwrPindetect ) && (padapter->registrypriv.usbss_enable ))
+               {
+                       u8 bOpen = _TRUE;
+                       rtw_interface_ps_func(padapter,HAL_USB_SELECT_SUSPEND,&bOpen);
+                       //rtl8192c_set_FwSelectSuspend_cmd(padapter,_TRUE ,500);//note fw to support hw power down ping detect
+               }
+       #endif
+       #endif
+       }
+       pwrpriv->bInSuspend = _TRUE;
+       rtw_cancel_all_timer(padapter);
+       LeaveAllPowerSaveMode(padapter);
+
+       rtw_stop_cmd_thread(padapter);
+
+       _enter_pwrlock(&pwrpriv->lock);
+       //padapter->net_closed = _TRUE;
+       //s1.
+       if(pnetdev)
+       {
+               netif_carrier_off(pnetdev);
+               rtw_netif_stop_queue(pnetdev);
+       }
+#ifdef CONFIG_WOWLAN
+       if(padapter->pwrctrlpriv.bSupportRemoteWakeup==_TRUE&&padapter->pwrctrlpriv.wowlan_mode==_TRUE){
+               u8 ps_mode=PS_MODE_MIN;
+               //set H2C command
+               poidparam.subcode=WOWLAN_ENABLE;
+               rtw_hal_set_hwreg(padapter,HW_VAR_WOWLAN,(u8 *)&poidparam);
+               //rtw_hal_set_hwreg(padapter, HW_VAR_H2C_FW_PWRMODE, &ps_mode);
+               //rtw_set_rpwm(padapter, PS_STATE_S2);
+       }
+       else
+#endif //CONFIG_WOWLAN
+       {
+               //s2.
+               rtw_disassoc_cmd(padapter, 0, _FALSE);
+       }
+
+#ifdef CONFIG_LAYER2_ROAMING_RESUME
+       if(check_fwstate(pmlmepriv, WIFI_STATION_STATE) && check_fwstate(pmlmepriv, _FW_LINKED) )
+       {
+               //printk("%s:%d assoc_ssid:%s\n", __FUNCTION__, __LINE__, pmlmepriv->assoc_ssid.Ssid);
+               DBG_871X("%s:%d %s(" MAC_FMT "), length:%d assoc_ssid.length:%d\n",__FUNCTION__, __LINE__,
+                               pmlmepriv->cur_network.network.Ssid.Ssid,
+                               MAC_ARG(pmlmepriv->cur_network.network.MacAddress),
+                               pmlmepriv->cur_network.network.Ssid.SsidLength,
+                               pmlmepriv->assoc_ssid.SsidLength);
+               rtw_set_roaming(padapter, 1);
+               }
+#endif
+       //s2-2.  indicate disconnect to os
+       rtw_indicate_disconnect(padapter);
+       //s2-3.
+       rtw_free_assoc_resources(padapter, 1);
+#ifdef CONFIG_AUTOSUSPEND
+       if(!pwrpriv->bInternalAutoSuspend )
+#endif
+       //s2-4.
+       rtw_free_network_queue(padapter, _TRUE);
+
+       rtw_dev_unload(padapter);
+#ifdef CONFIG_AUTOSUSPEND
+       pwrpriv->rf_pwrstate = rf_off;
+       pwrpriv->bips_processing = _FALSE;
+#endif
+       _exit_pwrlock(&pwrpriv->lock);
+
+       if(check_fwstate(pmlmepriv, _FW_UNDER_SURVEY))
+               rtw_indicate_scan_done(padapter, 1);
+
+       if(check_fwstate(pmlmepriv, _FW_UNDER_LINKING))
+               rtw_indicate_disconnect(padapter);
+
+exit:
+       DBG_871X("<===  %s return %d.............. in %dms\n", __FUNCTION__
+               , ret, rtw_get_passing_time_ms(start_time));
+
+       _func_exit_;
+       return ret;
+}
+
+static int rtw_resume(struct usb_interface *pusb_intf)
+{
+       struct dvobj_priv *dvobj = usb_get_intfdata(pusb_intf);
+       _adapter *padapter = dvobj->if1;
+       struct net_device *pnetdev = padapter->pnetdev;
+       struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
+        int ret = 0;
+
+       if(pwrpriv->bInternalAutoSuspend ){
+               ret = rtw_resume_process(padapter);
+       } else {
+#ifdef CONFIG_RESUME_IN_WORKQUEUE
+               rtw_resume_in_workqueue(pwrpriv);
+#else
+               if (rtw_is_earlysuspend_registered(pwrpriv)
+                       #ifdef CONFIG_WOWLAN
+                       && !padapter->pwrctrlpriv.wowlan_mode
+                       #endif /* CONFIG_WOWLAN */
+               ) {
+                       /* jeff: bypass resume here, do in late_resume */
+                       rtw_set_do_late_resume(pwrpriv, _TRUE);
+               } else {
+                       ret = rtw_resume_process(padapter);
+               }
+#endif /* CONFIG_RESUME_IN_WORKQUEUE */
+       }
+
+       return ret;
+
+}
+
+int rtw_resume_process(_adapter *padapter)
+{
+       struct net_device *pnetdev;
+       struct pwrctrl_priv *pwrpriv;
+       int ret = -1;
+       u32 start_time = rtw_get_current_time();
+       _func_enter_;
+
+       DBG_871X("==> %s (%s:%d)\n",__FUNCTION__, current->comm, current->pid);
+
+       if(padapter) {
+               pnetdev= padapter->pnetdev;
+               pwrpriv = &padapter->pwrctrlpriv;
+       } else {
+               goto exit;
+       }
+
+       _enter_pwrlock(&pwrpriv->lock);
+       rtw_reset_drv_sw(padapter);
+       pwrpriv->bkeepfwalive = _FALSE;
+
+       DBG_871X("bkeepfwalive(%x)\n",pwrpriv->bkeepfwalive);
+       if(pm_netdev_open(pnetdev,_TRUE) != 0) {
+               _exit_pwrlock(&pwrpriv->lock);
+               goto exit;
+       }
+
+       netif_device_attach(pnetdev);
+       netif_carrier_on(pnetdev);
+
+#ifdef CONFIG_AUTOSUSPEND
+       if(pwrpriv->bInternalAutoSuspend )
+       {
+               #ifdef CONFIG_AUTOSUSPEND
+               #ifdef SUPPORT_HW_RFOFF_DETECTED
+                       // The FW command register update must after MAC and FW init ready.
+               if((padapter->bFWReady) && ( padapter->pwrctrlpriv.bHWPwrPindetect ) && (padapter->registrypriv.usbss_enable ))
+               {
+                       //rtl8192c_set_FwSelectSuspend_cmd(padapter,_FALSE ,500);//note fw to support hw power down ping detect
+                       u8 bOpen = _FALSE;
+                       rtw_interface_ps_func(padapter,HAL_USB_SELECT_SUSPEND,&bOpen);
+               }
+               #endif
+               #endif
+
+               pwrpriv->bInternalAutoSuspend = _FALSE;
+               pwrpriv->brfoffbyhw = _FALSE;
+       }
+#endif
+       _exit_pwrlock(&pwrpriv->lock);
+
+       if( padapter->pid[1]!=0) {
+               DBG_871X("pid[1]:%d\n",padapter->pid[1]);
+               rtw_signal_process(padapter->pid[1], SIGUSR2);
+       }
+
+       #ifdef CONFIG_LAYER2_ROAMING_RESUME
+       rtw_roaming(padapter, NULL);
+       #endif
+
+       ret = 0;
+exit:
+       #ifdef CONFIG_RESUME_IN_WORKQUEUE
+       rtw_unlock_suspend();
+       #endif //CONFIG_RESUME_IN_WORKQUEUE
+
+       pwrpriv->bInSuspend = _FALSE;
+       DBG_871X("<===  %s return %d.............. in %dms\n", __FUNCTION__
+               , ret, rtw_get_passing_time_ms(start_time));
+
+       _func_exit_;
+
+       return ret;
+}
+
+#ifdef CONFIG_AUTOSUSPEND
+void autosuspend_enter(_adapter* padapter)
+{
+       struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
+       struct dvobj_priv *dvobj = adapter_to_dvobj(padapter);
+
+       pwrpriv->bInternalAutoSuspend = _TRUE;
+       pwrpriv->bips_processing = _TRUE;
+
+       DBG_871X("==>autosuspend_enter...........\n");
+
+       if(rf_off == pwrpriv->change_rfpwrstate )
+       {
+               #if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,35))
+               usb_enable_autosuspend(dvobj->pusbdev);
+               #else
+               dvobj->pusbdev->autosuspend_disabled = 0;//autosuspend disabled by the user
+               #endif
+
+               #if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,33))
+                       usb_autopm_put_interface(dvobj->pusbintf);
+               #elif (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,20))
+                       usb_autopm_enable(dvobj->pusbintf);
+               #else
+                       usb_autosuspend_device(dvobj->pusbdev, 1);
+               #endif
+       }
+       #if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,32))
+       DBG_871X("...pm_usage_cnt(%d).....\n", atomic_read(&(dvobj->pusbintf->pm_usage_cnt)));
+       #else
+       DBG_871X("...pm_usage_cnt(%d).....\n", dvobj->pusbintf->pm_usage_cnt);
+       #endif
+
+}
+int autoresume_enter(_adapter* padapter)
+{
+       int result = _SUCCESS;
+       struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
+       struct security_priv* psecuritypriv=&(padapter->securitypriv);
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       struct dvobj_priv *dvobj = adapter_to_dvobj(padapter);
+
+
+       DBG_871X("====> autoresume_enter \n");
+
+       if(rf_off == pwrpriv->rf_pwrstate )
+       {
+               pwrpriv->ps_flag = _FALSE;
+               #if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,33))
+                       if (usb_autopm_get_interface(dvobj->pusbintf) < 0)
+                       {
+                               DBG_871X( "can't get autopm: %d\n", result);
+                               result = _FAIL;
+                               goto error_exit;
+                       }
+               #elif (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,20))
+                       usb_autopm_disable(dvobj->pusbintf);
+               #else
+                       usb_autoresume_device(dvobj->pusbdev, 1);
+               #endif
+
+               #if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,32))
+               DBG_871X("...pm_usage_cnt(%d).....\n", atomic_read(&(dvobj->pusbintf->pm_usage_cnt)));
+               #else
+               DBG_871X("...pm_usage_cnt(%d).....\n", dvobj->pusbintf->pm_usage_cnt);
+               #endif
+       }
+       DBG_871X("<==== autoresume_enter \n");
+error_exit:
+
+       return result;
+}
+#endif
+
+#ifdef CONFIG_PLATFORM_RTD2880B
+extern void rtd2885_wlan_netlink_sendMsg(char *action_string, char *name);
+#endif
+
+#ifdef CONFIG_PLATFORM_ARM_SUNxI
+#include <mach/sys_config.h>
+extern int sw_usb_disable_hcd(__u32 usbc_no);
+extern int sw_usb_enable_hcd(__u32 usbc_no);
+static int usb_wifi_host = 2;
+#endif
+
+#ifdef CONFIG_PLATFORM_ARM_SUN6I
+#include <mach/sys_config.h>
+extern int sw_usb_disable_hcd(__u32 usbc_no);
+extern int sw_usb_enable_hcd(__u32 usbc_no);
+extern void wifi_pm_power(int on);
+static script_item_u item;
+#endif
+
+_adapter *rtw_usb_if1_init(struct dvobj_priv *dvobj,
+       struct usb_interface *pusb_intf, const struct usb_device_id *pdid)
+{
+       _adapter *padapter = NULL;
+       struct net_device *pnetdev = NULL;
+       int status = _FAIL;
+
+       if ((padapter = (_adapter *)rtw_zvmalloc(sizeof(*padapter))) == NULL) {
+               goto exit;
+       }
+       padapter->dvobj = dvobj;
+       dvobj->if1 = padapter;
+
+       padapter->bDriverStopped=_TRUE;
+
+       dvobj->padapters[dvobj->iface_nums++] = padapter;
+       padapter->iface_id = IFACE_ID0;
+
+#if defined(CONFIG_CONCURRENT_MODE) || defined(CONFIG_DUALMAC_CONCURRENT)
+       //set adapter_type/iface type for primary padapter
+       padapter->isprimary = _TRUE;
+       padapter->adapter_type = PRIMARY_ADAPTER;
+       #ifndef CONFIG_HWPORT_SWAP
+       padapter->iface_type = IFACE_PORT0;
+       #else
+       padapter->iface_type = IFACE_PORT1;
+       #endif
+#endif
+
+       #ifndef RTW_DVOBJ_CHIP_HW_TYPE
+       //step 1-1., decide the chip_type via vid/pid
+       padapter->interface_type = RTW_USB;
+       decide_chip_type_by_usb_device_id(padapter, pdid);
+       #endif
+
+       if((pnetdev = rtw_init_netdev(padapter)) == NULL) {
+               goto free_adapter;
+       }
+       SET_NETDEV_DEV(pnetdev, dvobj_to_dev(dvobj));
+       padapter = rtw_netdev_priv(pnetdev);
+
+       //step 2. hook HalFunc, allocate HalData
+       if(padapter->chip_type == RTL8188C_8192C) {
+               #ifdef CONFIG_RTL8192C
+               rtl8192cu_set_hal_ops(padapter);
+               #endif
+       } else if(padapter->chip_type == RTL8192D) {
+               #ifdef CONFIG_RTL8192D
+               rtl8192du_set_hal_ops(padapter);
+               #endif
+       } else {
+               DBG_871X("Detect NULL_CHIP_TYPE\n");
+               goto free_hal_data;
+       }
+
+       //step 3.
+       padapter->intf_start=&usb_intf_start;
+       padapter->intf_stop=&usb_intf_stop;
+
+       //.2
+       if ((rtw_init_io_priv(padapter, usb_set_intf_ops)) == _FAIL) {
+               RT_TRACE(_module_hci_intfs_c_,_drv_err_,(" \n Can't init io_reqs\n"));
+               goto free_hal_data;
+       }
+
+       rtw_hal_read_chip_version(padapter);
+
+       //.4 usb endpoint mapping
+       rtw_hal_chip_configure(padapter);
+
+       //step 4. read efuse/eeprom data and get mac_addr
+       rtw_hal_read_chip_info(padapter);
+
+       if (rtw_handle_dualmac(padapter, 1) != _SUCCESS)
+               goto free_hal_data;
+
+#ifdef CONFIG_IOCTL_CFG80211
+       if(rtw_wdev_alloc(padapter, dvobj_to_dev(dvobj)) != 0) {
+               goto handle_dualmac;
+       }
+#endif
+
+       //step 5.
+       if (rtw_init_drv_sw(padapter) == _FAIL) {
+               RT_TRACE(_module_hci_intfs_c_,_drv_err_,("Initialize driver software resource Failed!\n"));
+               goto free_wdev;
+       }
+
+#ifdef CONFIG_PM
+#if (LINUX_VERSION_CODE > KERNEL_VERSION(2,6,18))
+       if(padapter->pwrctrlpriv.bSupportRemoteWakeup)
+       {
+               dvobj->pusbdev->do_remote_wakeup=1;
+               pusb_intf->needs_remote_wakeup = 1;
+               device_init_wakeup(&pusb_intf->dev, 1);
+               DBG_871X("\n  padapter->pwrctrlpriv.bSupportRemoteWakeup~~~~~~\n");
+               DBG_871X("\n  padapter->pwrctrlpriv.bSupportRemoteWakeup~~~[%d]~~~\n",device_may_wakeup(&pusb_intf->dev));
+       }
+#endif
+#endif
+
+#ifdef CONFIG_AUTOSUSPEND
+       if( padapter->registrypriv.power_mgnt != PS_MODE_ACTIVE )
+       {
+               if(padapter->registrypriv.usbss_enable ){       /* autosuspend (2s delay) */
+                       #if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,38))
+                       dvobj->pusbdev->dev.power.autosuspend_delay = 0 * HZ;//15 * HZ; idle-delay time
+                       #else
+                       dvobj->pusbdev->autosuspend_delay = 0 * HZ;//15 * HZ; idle-delay time
+                       #endif
+
+                       #if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,35))
+                       usb_enable_autosuspend(dvobj->pusbdev);
+                       #elif  (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,22) && LINUX_VERSION_CODE<=KERNEL_VERSION(2,6,34))
+                       padapter->bDisableAutosuspend = dvobj->pusbdev->autosuspend_disabled ;
+                       dvobj->pusbdev->autosuspend_disabled = 0;//autosuspend disabled by the user
+                       #endif
+
+                       usb_autopm_get_interface(dvobj->pusbintf );//init pm_usage_cnt ,let it start from 1
+
+                       #if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,32))
+                       DBG_871X("%s...pm_usage_cnt(%d).....\n",__FUNCTION__, atomic_read(&(dvobj->pusbintf ->pm_usage_cnt)));
+                       #else
+                       DBG_871X("%s...pm_usage_cnt(%d).....\n",__FUNCTION__, dvobj->pusbintf ->pm_usage_cnt);
+                       #endif
+               }
+       }
+#endif
+
+       // set mac addr
+       rtw_macaddr_cfg(padapter->eeprompriv.mac_addr);
+       rtw_init_wifidirect_addrs(padapter, padapter->eeprompriv.mac_addr, padapter->eeprompriv.mac_addr);
+
+       DBG_871X("bDriverStopped:%d, bSurpriseRemoved:%d, bup:%d, hw_init_completed:%d\n"
+               ,padapter->bDriverStopped
+               ,padapter->bSurpriseRemoved
+               ,padapter->bup
+               ,padapter->hw_init_completed
+       );
+
+       status = _SUCCESS;
+
+free_wdev:
+       if(status != _SUCCESS) {
+               #ifdef CONFIG_IOCTL_CFG80211
+               rtw_wdev_unregister(padapter->rtw_wdev);
+               rtw_wdev_free(padapter->rtw_wdev);
+               #endif
+       }
+handle_dualmac:
+       if (status != _SUCCESS)
+               rtw_handle_dualmac(padapter, 0);
+free_hal_data:
+       if(status != _SUCCESS && padapter->HalData)
+               rtw_mfree(padapter->HalData, sizeof(*(padapter->HalData)));
+free_adapter:
+       if (status != _SUCCESS) {
+               if (pnetdev)
+                       rtw_free_netdev(pnetdev);
+               else if (padapter)
+                       rtw_vmfree((u8*)padapter, sizeof(*padapter));
+               padapter = NULL;
+       }
+exit:
+       return padapter;
+}
+
+static void rtw_usb_if1_deinit(_adapter *if1)
+{
+       struct net_device *pnetdev = if1->pnetdev;
+       struct mlme_priv *pmlmepriv= &if1->mlmepriv;
+
+       if(check_fwstate(pmlmepriv, _FW_LINKED))
+               rtw_disassoc_cmd(if1, 0, _FALSE);
+
+#ifdef CONFIG_AP_MODE
+       free_mlme_ap_info(if1);
+       #ifdef CONFIG_HOSTAPD_MLME
+       hostapd_mode_unload(if1);
+       #endif
+#endif
+
+       rtw_cancel_all_timer(if1);
+#ifdef CONFIG_WOWLAN
+       if1->pwrctrlpriv.wowlan_mode=_FALSE;
+#endif //CONFIG_WOWLAN
+       rtw_dev_unload(if1);
+
+       DBG_871X("%s, hw_init_completed=%d\n", __func__, if1->hw_init_completed);
+
+       //s6.
+       rtw_handle_dualmac(if1, 0);
+
+#ifdef CONFIG_IOCTL_CFG80211
+       if (if1->rtw_wdev)
+               rtw_wdev_free(if1->rtw_wdev);
+#endif //CONFIG_IOCTL_CFG80211
+
+       rtw_free_drv_sw(if1);
+
+       if(pnetdev)
+               rtw_free_netdev(pnetdev);
+
+#ifdef CONFIG_PLATFORM_RTD2880B
+       DBG_871X("wlan link down\n");
+       rtd2885_wlan_netlink_sendMsg("linkdown", "8712");
+#endif
+
+}
+
+/*
+ * drv_init() - a device potentially for us
+ *
+ * notes: drv_init() is called when the bus driver has located a card for us to support.
+ *        We accept the new device by returning 0.
+*/
+
+_adapter  *rtw_sw_export = NULL;
+
+static int rtw_drv_init(struct usb_interface *pusb_intf, const struct usb_device_id *did)
+{
+       int i;
+       uint status = _FAIL;
+       _adapter *if1 = NULL, *if2 = NULL;
+       struct dvobj_priv *dvobj = NULL;
+
+
+       RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("+rtw_drv_init\n"));
+
+
+       //step 0.
+       process_spec_devid(did);
+
+       /* Initialize dvobj_priv */
+       if ((dvobj = usb_dvobj_init(pusb_intf)) == NULL) {
+               RT_TRACE(_module_hci_intfs_c_, _drv_err_, ("initialize device object priv Failed!\n"));
+               goto exit;
+       }
+
+       /* Initialize if1 */
+       if ((if1 = rtw_usb_if1_init(dvobj, pusb_intf, did)) == NULL) {
+               DBG_871X("rtw_usb_if1_init Failed!\n");
+               goto free_dvobj;
+       }
+
+       /* Initialize if2 */
+#ifdef CONFIG_CONCURRENT_MODE
+       if((if2 = rtw_drv_if2_init(if1, usb_set_intf_ops)) == NULL) {
+               goto free_if1;
+       }
+#ifdef CONFIG_MULTI_VIR_IFACES
+       for(i=0; i<if1->registrypriv.ext_iface_num;i++)
+       {
+               if(rtw_drv_add_vir_if(if1, usb_set_intf_ops) == NULL)
+               {
+                       DBG_871X("rtw_drv_add_iface failed! (%d)\n", i);
+                       goto free_if1;
+               }
+       }
+#endif //CONFIG_MULTI_VIR_IFACES
+#endif
+
+#ifdef CONFIG_INTEL_PROXIM
+       rtw_sw_export=if1;
+#endif
+
+#ifdef CONFIG_GLOBAL_UI_PID
+       if (ui_pid[1]!=0) {
+               DBG_871X("ui_pid[1]:%d\n",ui_pid[1]);
+               rtw_signal_process(ui_pid[1], SIGUSR2);
+       }
+#endif
+
+       //dev_alloc_name && register_netdev
+       if((status = rtw_drv_register_netdev(if1)) != _SUCCESS) {
+               goto free_if1;
+       }
+
+#ifdef CONFIG_HOSTAPD_MLME
+       hostapd_mode_init(if1);
+#endif
+
+#ifdef CONFIG_PLATFORM_RTD2880B
+       DBG_871X("wlan link up\n");
+       rtd2885_wlan_netlink_sendMsg("linkup", "8712");
+#endif
+
+#ifdef RTK_DMP_PLATFORM
+       rtw_proc_init_one(if1->pnetdev);
+#endif
+
+       RT_TRACE(_module_hci_intfs_c_,_drv_err_,("-871x_drv - drv_init, success!\n"));
+
+       status = _SUCCESS;
+
+free_if1:
+       if (status != _SUCCESS && if1) {
+               rtw_usb_if1_deinit(if1);
+       }
+free_dvobj:
+       if (status != _SUCCESS)
+               usb_dvobj_deinit(pusb_intf);
+exit:
+       return status == _SUCCESS?0:-ENODEV;
+}
+
+/*
+ * dev_remove() - our device is being removed
+*/
+//rmmod module & unplug(SurpriseRemoved) will call r871xu_dev_remove() => how to recognize both
+static void rtw_dev_remove(struct usb_interface *pusb_intf)
+{
+       struct dvobj_priv *dvobj = usb_get_intfdata(pusb_intf);
+       _adapter *padapter = dvobj->if1;
+
+_func_exit_;
+
+       DBG_871X("+rtw_dev_remove\n");
+       RT_TRACE(_module_hci_intfs_c_,_drv_err_,("+dev_remove()\n"));
+
+       dvobj->processing_dev_remove = _TRUE;
+
+       rtw_unregister_netdevs(dvobj);
+
+       if(usb_drv->drv_registered == _TRUE)
+       {
+               //DBG_871X("r871xu_dev_remove():padapter->bSurpriseRemoved == _TRUE\n");
+               padapter->bSurpriseRemoved = _TRUE;
+       }
+       /*else
+       {
+               //DBG_871X("r871xu_dev_remove():module removed\n");
+               padapter->hw_init_completed = _FALSE;
+       }*/
+
+#if defined(CONFIG_HAS_EARLYSUSPEND) || defined(CONFIG_ANDROID_POWER)
+       rtw_unregister_early_suspend(&padapter->pwrctrlpriv);
+#endif
+
+       rtw_pm_set_ips(padapter, IPS_NONE);
+       rtw_pm_set_lps(padapter, PS_MODE_ACTIVE);
+
+       LeaveAllPowerSaveMode(padapter);
+
+#ifdef CONFIG_CONCURRENT_MODE
+#ifdef CONFIG_MULTI_VIR_IFACES
+       rtw_drv_stop_vir_ifaces(dvobj);
+#endif //CONFIG_MULTI_VIR_IFACES
+       rtw_drv_if2_stop(dvobj->if2);
+#endif //CONFIG_CONCURRENT_MODE
+
+       rtw_usb_if1_deinit(padapter);
+
+#ifdef CONFIG_CONCURRENT_MODE
+#ifdef CONFIG_MULTI_VIR_IFACES
+       rtw_drv_free_vir_ifaces(dvobj);
+#endif //CONFIG_MULTI_VIR_IFACES
+       rtw_drv_if2_free(dvobj->if2);
+#endif //CONFIG_CONCURRENT_MODE
+
+       usb_dvobj_deinit(pusb_intf);
+
+       RT_TRACE(_module_hci_intfs_c_,_drv_err_,("-dev_remove()\n"));
+       DBG_871X("-r871xu_dev_remove, done\n");
+
+
+#ifdef CONFIG_INTEL_PROXIM
+       rtw_sw_export=NULL;
+#endif
+
+_func_exit_;
+
+       return;
+
+}
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,24))
+extern int console_suspend_enabled;
+#endif
+
+static int __init rtw_drv_entry(void)
+{
+#ifdef CONFIG_PLATFORM_RTK_DMP
+       u32 tmp;
+       tmp=readl((volatile unsigned int*)0xb801a608);
+       tmp &= 0xffffff00;
+       tmp |= 0x55;
+       writel(tmp,(volatile unsigned int*)0xb801a608);//write dummy register for 1055
+#endif
+#ifdef CONFIG_PLATFORM_ARM_SUNxI
+#ifndef CONFIG_RTL8723A
+       int ret = 0;
+       /* ----------get usb_wifi_usbc_num------------- */
+       ret = script_parser_fetch("usb_wifi_para", "usb_wifi_usbc_num", (int *)&usb_wifi_host, 64);
+       if(ret != 0){
+               printk("ERR: script_parser_fetch usb_wifi_usbc_num failed\n");
+               ret = -ENOMEM;
+               return ret;
+       }
+       printk("sw_usb_enable_hcd: usbc_num = %d\n", usb_wifi_host);
+       sw_usb_enable_hcd(usb_wifi_host);
+#endif //CONFIG_RTL8723A
+#endif //CONFIG_PLATFORM_ARM_SUNxI
+
+#ifdef CONFIG_PLATFORM_ARM_SUN6I
+       script_item_value_type_e type;
+
+       type = script_get_item("wifi_para", "wifi_usbc_id", &item);
+       if(SCIRPT_ITEM_VALUE_TYPE_INT != type){
+               printk("ERR: script_get_item wifi_usbc_id failed\n");
+               return -ENOMEM;
+       }
+
+       printk("sw_usb_enable_hcd: usbc_num = %d\n", item.val);
+       wifi_pm_power(1);
+       mdelay(10);
+       sw_usb_enable_hcd(item.val);
+#endif //CONFIG_PLATFORM_ARM_SUN6I
+
+       RT_TRACE(_module_hci_intfs_c_,_drv_err_,("+rtw_drv_entry\n"));
+
+       DBG_871X(DRV_NAME " driver version=%s\n", DRIVERVERSION);
+       DBG_871X("build time: %s %s\n", __DATE__, __TIME__);
+
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,24))
+       //console_suspend_enabled=0;
+#endif
+
+       rtw_suspend_lock_init();
+
+       usb_drv->drv_registered = _TRUE;
+       return usb_register(&usb_drv->usbdrv);
+}
+
+static void __exit rtw_drv_halt(void)
+{
+       RT_TRACE(_module_hci_intfs_c_,_drv_err_,("+rtw_drv_halt\n"));
+       DBG_871X("+rtw_drv_halt\n");
+
+       usb_drv->drv_registered = _FALSE;
+       usb_deregister(&usb_drv->usbdrv);
+
+#ifdef CONFIG_PLATFORM_ARM_SUNxI
+#ifndef CONFIG_RTL8723A
+       printk("sw_usb_disable_hcd: usbc_num = %d\n", usb_wifi_host);
+       sw_usb_disable_hcd(usb_wifi_host);
+#endif //ifndef CONFIG_RTL8723A
+#endif //CONFIG_PLATFORM_ARM_SUNxI
+#ifdef CONFIG_PLATFORM_ARM_SUN6I
+       sw_usb_disable_hcd(item.val);
+       wifi_pm_power(0);
+#endif
+
+       rtw_suspend_lock_uninit();
+       DBG_871X("-rtw_drv_halt\n");
+
+       rtw_mstat_dump();
+}
+
+
+module_init(rtw_drv_entry);
+module_exit(rtw_drv_halt);
+
+#ifdef CONFIG_WOWLAN
+#ifdef CONFIG_WOWLAN_MANUAL
+
+int rtw_resume_toshiba(PADAPTER Adapter)
+{
+       struct dvobj_priv *pdvobjpriv;
+       pdvobjpriv = adapter_to_dvobj(Adapter);
+
+       rtw_resume(pdvobjpriv->pusbintf);
+       return 0;
+}
+
+int rtw_suspend_toshiba(PADAPTER Adapter)
+{
+       pm_message_t msg;
+       struct dvobj_priv *pdvobjpriv;
+       pdvobjpriv = adapter_to_dvobj(Adapter);
+       msg.event=0;
+       //for Toshiba only, they should call rtw_suspend before suspend
+       rtw_suspend(pdvobjpriv->pusbintf, msg);
+       return 0;
+}
+EXPORT_SYMBOL(rtw_suspend_toshiba);
+EXPORT_SYMBOL(rtw_resume_toshiba);
+#endif //CONFIG_WOWLAN_MANUAL
+#endif //CONFIG_WOWLAN
+
+#ifdef CONFIG_INTEL_PROXIM
+_adapter  *rtw_usb_get_sw_pointer(void)
+{
+       return rtw_sw_export;
+}
+EXPORT_SYMBOL(rtw_usb_get_sw_pointer);
+#endif //CONFIG_INTEL_PROXIM
diff --git a/drivers/net/wireless/realtek/rtl8192cu/os_dep/linux/usb_ops_linux.c b/drivers/net/wireless/realtek/rtl8192cu/os_dep/linux/usb_ops_linux.c
new file mode 100644 (file)
index 0000000..acb58ef
--- /dev/null
@@ -0,0 +1,648 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *******************************************************************************/
+#define _USB_OPS_LINUX_C_
+
+#include <drv_types.h>
+#include <usb_ops_linux.h>
+#include <rtw_sreset.h>
+
+#ifdef CONFIG_USB_SUPPORT_ASYNC_VDN_REQ
+static void _usbctrl_vendorreq_async_callback(struct urb *urb, struct pt_regs *regs)
+{
+       if (urb) {
+               if (urb->context) {
+                       rtw_mfree(urb->context);
+               }
+               usb_free_urb(urb);
+       }
+}
+
+static int _usbctrl_vendorreq_async_write(struct usb_device *udev, u8 request,
+       u16 value, u16 index, void *pdata, u16 len, u8 requesttype)
+{
+       int rc;
+       unsigned int pipe;
+       u8 reqtype;
+       struct usb_ctrlrequest *dr;
+       struct urb *urb;
+       struct rtl819x_async_write_data {
+               u8 data[VENDOR_CMD_MAX_DATA_LEN];
+               struct usb_ctrlrequest dr;
+       } *buf;
+
+
+       if (requesttype == VENDOR_READ) {
+               pipe = usb_rcvctrlpipe(udev, 0);//read_in
+               reqtype =  REALTEK_USB_VENQT_READ;
+       }
+       else {
+               pipe = usb_sndctrlpipe(udev, 0);//write_out
+               reqtype =  REALTEK_USB_VENQT_WRITE;
+       }
+
+       buf = (struct rtl819x_async_write_data *)rtw_zmalloc(sizeof(*buf));
+       if (!buf) {
+               rc = -ENOMEM;
+               goto exit;
+       }
+
+       urb = usb_alloc_urb(0, GFP_ATOMIC);
+       if (!urb) {
+               rtw_mfree((u8*)buf, sizeof(*buf));
+               rc = -ENOMEM;
+               goto exit;
+       }
+
+       dr = &buf->dr;
+
+       dr->bRequestType = reqtype;
+       dr->bRequest = request;
+       dr->wValue = cpu_to_le16(value);
+       dr->wIndex = cpu_to_le16(index);
+       dr->wLength = cpu_to_le16(len);
+
+       _rtw_memcpy(buf, pdata, len);
+
+       usb_fill_control_urb(urb, udev, pipe, (unsigned char *)dr, buf, len,
+               _usbctrl_vendorreq_async_callback, buf);
+
+       rc = usb_submit_urb(urb, GFP_ATOMIC);
+       if (rc < 0) {
+               rtw_mfree((u8*)buf, sizeof(*buf));
+               usb_free_urb(urb);
+       }
+
+exit:
+       return rc;
+}
+
+int usb_write_async(struct usb_device *udev, u32 addr, void *pdata, u16 len)
+{
+       u8 request;
+       u8 requesttype;
+       u16 wvalue;
+       u16 index;
+
+       int ret;
+
+       requesttype = VENDOR_WRITE;//write_out
+       request = REALTEK_USB_VENQT_CMD_REQ;
+       index = REALTEK_USB_VENQT_CMD_IDX;//n/a
+
+       wvalue = (u16)(addr&0x0000ffff);
+
+       ret = _usbctrl_vendorreq_async_write(udev, request, wvalue, index, pdata, len, requesttype);
+
+       return ret;
+}
+
+int usb_async_write8(struct intf_hdl *pintfhdl, u32 addr, u8 val)
+{
+       u8 data;
+       int ret;
+       struct dvobj_priv  *pdvobjpriv = (struct dvobj_priv  *)pintfhdl->pintf_dev;
+       struct usb_device *udev=pdvobjpriv->pusbdev;
+
+       _func_enter_;
+       data = val;
+       ret = usb_write_async(udev, addr, &data, 1);
+       _func_exit_;
+
+       return ret;
+}
+
+int usb_async_write16(struct intf_hdl *pintfhdl, u32 addr, u16 val)
+{
+       u16 data;
+       int ret;
+       struct dvobj_priv  *pdvobjpriv = (struct dvobj_priv  *)pintfhdl->pintf_dev;
+       struct usb_device *udev=pdvobjpriv->pusbdev;
+
+       _func_enter_;
+       data = val;
+       ret = usb_write_async(udev, addr, &data, 2);
+       _func_exit_;
+
+       return ret;
+}
+
+int usb_async_write32(struct intf_hdl *pintfhdl, u32 addr, u32 val)
+{
+       u32 data;
+       int ret;
+       struct dvobj_priv  *pdvobjpriv = (struct dvobj_priv  *)pintfhdl->pintf_dev;
+       struct usb_device *udev=pdvobjpriv->pusbdev;
+
+       _func_enter_;
+       data = val;
+       ret = usb_write_async(udev, addr, &data, 4);
+       _func_exit_;
+
+       return ret;
+}
+#endif /* CONFIG_USB_SUPPORT_ASYNC_VDN_REQ */
+
+unsigned int ffaddr2pipehdl(struct dvobj_priv *pdvobj, u32 addr)
+{
+       unsigned int pipe=0;
+       int ep_num=0;
+       _adapter *padapter = pdvobj->if1;
+       struct usb_device *pusbd = pdvobj->pusbdev;
+       HAL_DATA_TYPE *pHalData = GET_HAL_DATA(padapter);
+
+       if (addr == RECV_BULK_IN_ADDR) {
+               pipe=usb_rcvbulkpipe(pusbd, pHalData->RtBulkInPipe);
+
+       } else if (addr == RECV_INT_IN_ADDR) {
+               pipe=usb_rcvbulkpipe(pusbd, pHalData->RtIntInPipe);
+
+       } else if (addr < HW_QUEUE_ENTRY) {
+               ep_num = pHalData->Queue2EPNum[addr];
+               pipe = usb_sndbulkpipe(pusbd, ep_num);
+       }
+
+       return pipe;
+}
+
+struct zero_bulkout_context{
+       void *pbuf;
+       void *purb;
+       void *pirp;
+       void *padapter;
+};
+
+static void usb_bulkout_zero_complete(struct urb *purb, struct pt_regs *regs)
+{
+       struct zero_bulkout_context *pcontext = (struct zero_bulkout_context *)purb->context;
+
+       //DBG_8192C("+usb_bulkout_zero_complete\n");
+
+       if(pcontext)
+       {
+               if(pcontext->pbuf)
+               {
+                       rtw_mfree(pcontext->pbuf, sizeof(int));
+               }
+
+               if(pcontext->purb && (pcontext->purb==purb))
+               {
+                       usb_free_urb(pcontext->purb);
+               }
+
+
+               rtw_mfree((u8*)pcontext, sizeof(struct zero_bulkout_context));
+       }
+
+
+}
+
+static u32 usb_bulkout_zero(struct intf_hdl *pintfhdl, u32 addr)
+{
+       int pipe, status, len;
+       u32 ret;
+       unsigned char *pbuf;
+       struct zero_bulkout_context *pcontext;
+       PURB    purb = NULL;
+       _adapter *padapter = (_adapter *)pintfhdl->padapter;
+       struct dvobj_priv *pdvobj = adapter_to_dvobj(padapter);
+       struct usb_device *pusbd = pdvobj->pusbdev;
+
+       //DBG_871X("%s\n", __func__);
+
+
+       if((padapter->bDriverStopped) || (padapter->bSurpriseRemoved) ||(padapter->pwrctrlpriv.pnp_bstop_trx))
+       {
+               return _FAIL;
+       }
+
+
+       pcontext = (struct zero_bulkout_context *)rtw_zmalloc(sizeof(struct zero_bulkout_context));
+
+       pbuf = (unsigned char *)rtw_zmalloc(sizeof(int));
+       purb = usb_alloc_urb(0, GFP_ATOMIC);
+
+       len = 0;
+       pcontext->pbuf = pbuf;
+       pcontext->purb = purb;
+       pcontext->pirp = NULL;
+       pcontext->padapter = padapter;
+
+
+       //translate DMA FIFO addr to pipehandle
+       //pipe = ffaddr2pipehdl(pdvobj, addr);
+
+       usb_fill_bulk_urb(purb, pusbd, pipe,
+                               pbuf,
+                               len,
+                               usb_bulkout_zero_complete,
+                               pcontext);//context is pcontext
+
+       status = usb_submit_urb(purb, GFP_ATOMIC);
+
+       if (!status)
+       {
+               ret= _SUCCESS;
+       }
+       else
+       {
+               ret= _FAIL;
+       }
+
+
+       return _SUCCESS;
+
+}
+
+void usb_read_mem(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *rmem)
+{
+
+}
+
+void usb_write_mem(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *wmem)
+{
+
+}
+
+
+void usb_read_port_cancel(struct intf_hdl *pintfhdl)
+{
+       int i;
+       struct recv_buf *precvbuf;
+       _adapter        *padapter = pintfhdl->padapter;
+       precvbuf = (struct recv_buf *)padapter->recvpriv.precv_buf;
+
+       DBG_871X("%s\n", __func__);
+
+       padapter->bReadPortCancel = _TRUE;
+
+       for (i=0; i < NR_RECVBUFF ; i++) {
+
+               precvbuf->reuse = _TRUE;
+               if (precvbuf->purb)      {
+                       //DBG_8192C("usb_read_port_cancel : usb_kill_urb \n");
+                       usb_kill_urb(precvbuf->purb);
+               }
+               precvbuf++;
+       }
+
+#ifdef CONFIG_USB_INTERRUPT_IN_PIPE
+       usb_kill_urb(padapter->recvpriv.int_in_urb);
+#endif
+}
+
+static void usb_write_port_complete(struct urb *purb, struct pt_regs *regs)
+{
+       _irqL irqL;
+       int i;
+       struct xmit_buf *pxmitbuf = (struct xmit_buf *)purb->context;
+       //struct xmit_frame *pxmitframe = (struct xmit_frame *)pxmitbuf->priv_data;
+       //_adapter                      *padapter = pxmitframe->padapter;
+       _adapter        *padapter = pxmitbuf->padapter;
+       struct xmit_priv        *pxmitpriv = &padapter->xmitpriv;
+       //struct pkt_attrib *pattrib = &pxmitframe->attrib;
+
+_func_enter_;
+
+       switch(pxmitbuf->flags)
+       {
+               case VO_QUEUE_INX:
+                       pxmitpriv->voq_cnt--;
+                       break;
+               case VI_QUEUE_INX:
+                       pxmitpriv->viq_cnt--;
+                       break;
+               case BE_QUEUE_INX:
+                       pxmitpriv->beq_cnt--;
+                       break;
+               case BK_QUEUE_INX:
+                       pxmitpriv->bkq_cnt--;
+                       break;
+               case HIGH_QUEUE_INX:
+#ifdef CONFIG_AP_MODE
+                       rtw_chk_hi_queue_cmd(padapter);
+#endif
+                       break;
+               default:
+                       break;
+       }
+
+
+/*
+       _enter_critical(&pxmitpriv->lock, &irqL);
+
+       pxmitpriv->txirp_cnt--;
+
+       switch(pattrib->priority)
+       {
+               case 1:
+               case 2:
+                       pxmitpriv->bkq_cnt--;
+                       //DBG_8192C("pxmitpriv->bkq_cnt=%d\n", pxmitpriv->bkq_cnt);
+                       break;
+               case 4:
+               case 5:
+                       pxmitpriv->viq_cnt--;
+                       //DBG_8192C("pxmitpriv->viq_cnt=%d\n", pxmitpriv->viq_cnt);
+                       break;
+               case 6:
+               case 7:
+                       pxmitpriv->voq_cnt--;
+                       //DBG_8192C("pxmitpriv->voq_cnt=%d\n", pxmitpriv->voq_cnt);
+                       break;
+               case 0:
+               case 3:
+               default:
+                       pxmitpriv->beq_cnt--;
+                       //DBG_8192C("pxmitpriv->beq_cnt=%d\n", pxmitpriv->beq_cnt);
+                       break;
+
+       }
+
+       _exit_critical(&pxmitpriv->lock, &irqL);
+
+
+       if(pxmitpriv->txirp_cnt==0)
+       {
+               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port_complete: txirp_cnt== 0, set allrxreturnevt!\n"));
+               _rtw_up_sema(&(pxmitpriv->tx_retevt));
+       }
+*/
+        //rtw_free_xmitframe(pxmitpriv, pxmitframe);
+
+       if(padapter->bSurpriseRemoved || padapter->bDriverStopped ||padapter->bWritePortCancel)
+       {
+               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port_complete:bDriverStopped(%d) OR bSurpriseRemoved(%d)", padapter->bDriverStopped, padapter->bSurpriseRemoved));
+               DBG_8192C("%s(): TX Warning! bDriverStopped(%d) OR bSurpriseRemoved(%d) bWritePortCancel(%d) pxmitbuf->ext_tag(%x) \n",
+               __FUNCTION__,padapter->bDriverStopped, padapter->bSurpriseRemoved,padapter->bReadPortCancel,pxmitbuf->ext_tag);
+
+               goto check_completion;
+       }
+
+
+       if (purb->status==0) {
+
+       } else {
+               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port_complete : purb->status(%d) != 0 \n", purb->status));
+               DBG_871X("###=> urb_write_port_complete status(%d)\n",purb->status);
+               if((purb->status==-EPIPE)||(purb->status==-EPROTO))
+               {
+                       //usb_clear_halt(pusbdev, purb->pipe);
+                       //msleep(10);
+                       sreset_set_wifi_error_status(padapter, USB_WRITE_PORT_FAIL);
+               } else if (purb->status == -EINPROGRESS) {
+                       RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port_complete: EINPROGESS\n"));
+                       goto check_completion;
+
+               } else if (purb->status == -ENOENT) {
+                       DBG_871X("%s: -ENOENT\n", __func__);
+                       goto check_completion;
+
+               } else if (purb->status == -ECONNRESET) {
+                       DBG_871X("%s: -ECONNRESET\n", __func__);
+                       goto check_completion;
+
+               } else if (purb->status == -ESHUTDOWN) {
+                       RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port_complete: ESHUTDOWN\n"));
+                       padapter->bDriverStopped=_TRUE;
+                       RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port_complete:bDriverStopped=TRUE\n"));
+
+                       goto check_completion;
+               }
+               else
+               {
+                       padapter->bSurpriseRemoved=_TRUE;
+                       DBG_8192C("bSurpriseRemoved=TRUE\n");
+                       //rtl8192cu_trigger_gpio_0(padapter);
+                       RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port_complete:bSurpriseRemoved=TRUE\n"));
+
+                       goto check_completion;
+               }
+       }
+
+       #ifdef DBG_CONFIG_ERROR_DETECT
+       {
+               HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
+               pHalData->srestpriv.last_tx_complete_time = rtw_get_current_time();
+       }
+       #endif
+
+check_completion:
+       _enter_critical(&pxmitpriv->lock_sctx, &irqL);
+       rtw_sctx_done_err(&pxmitbuf->sctx,
+               purb->status ? RTW_SCTX_DONE_WRITE_PORT_ERR : RTW_SCTX_DONE_SUCCESS);
+       _exit_critical(&pxmitpriv->lock_sctx, &irqL);
+
+       rtw_free_xmitbuf(pxmitpriv, pxmitbuf);
+
+       //if(rtw_txframes_pending(padapter))
+       {
+               tasklet_hi_schedule(&pxmitpriv->xmit_tasklet);
+       }
+
+_func_exit_;
+
+}
+
+u32 usb_write_port(struct intf_hdl *pintfhdl, u32 addr, u32 cnt, u8 *wmem)
+{
+       _irqL irqL;
+       unsigned int pipe;
+       int status;
+       u32 ret = _FAIL, bwritezero = _FALSE;
+       PURB    purb = NULL;
+       _adapter *padapter = (_adapter *)pintfhdl->padapter;
+       struct dvobj_priv       *pdvobj = adapter_to_dvobj(padapter);
+       struct xmit_priv        *pxmitpriv = &padapter->xmitpriv;
+       struct xmit_buf *pxmitbuf = (struct xmit_buf *)wmem;
+       struct xmit_frame *pxmitframe = (struct xmit_frame *)pxmitbuf->priv_data;
+       struct usb_device *pusbd = pdvobj->pusbdev;
+       struct pkt_attrib *pattrib = &pxmitframe->attrib;
+
+_func_enter_;
+
+       RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("+usb_write_port\n"));
+
+       if ((padapter->bDriverStopped) || (padapter->bSurpriseRemoved) ||(padapter->pwrctrlpriv.pnp_bstop_trx)) {
+               #ifdef DBG_TX
+               DBG_871X(" DBG_TX %s:%d bDriverStopped%d, bSurpriseRemoved:%d, pnp_bstop_trx:%d\n",__FUNCTION__, __LINE__
+                       ,padapter->bDriverStopped, padapter->bSurpriseRemoved, padapter->pwrctrlpriv.pnp_bstop_trx );
+               #endif
+               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port:( padapter->bDriverStopped ||padapter->bSurpriseRemoved ||adapter->pwrctrlpriv.pnp_bstop_trx)!!!\n"));
+               rtw_sctx_done_err(&pxmitbuf->sctx, RTW_SCTX_DONE_TX_DENY);
+               goto exit;
+       }
+
+       _enter_critical(&pxmitpriv->lock, &irqL);
+
+       switch(addr)
+       {
+               case VO_QUEUE_INX:
+                       pxmitpriv->voq_cnt++;
+                       pxmitbuf->flags = VO_QUEUE_INX;
+                       break;
+               case VI_QUEUE_INX:
+                       pxmitpriv->viq_cnt++;
+                       pxmitbuf->flags = VI_QUEUE_INX;
+                       break;
+               case BE_QUEUE_INX:
+                       pxmitpriv->beq_cnt++;
+                       pxmitbuf->flags = BE_QUEUE_INX;
+                       break;
+               case BK_QUEUE_INX:
+                       pxmitpriv->bkq_cnt++;
+                       pxmitbuf->flags = BK_QUEUE_INX;
+                       break;
+               case HIGH_QUEUE_INX:
+                       pxmitbuf->flags = HIGH_QUEUE_INX;
+                       break;
+               default:
+                       pxmitbuf->flags = MGT_QUEUE_INX;
+                       break;
+       }
+
+       _exit_critical(&pxmitpriv->lock, &irqL);
+
+       purb    = pxmitbuf->pxmit_urb[0];
+
+#if 0
+       if(pdvobj->ishighspeed)
+       {
+               if(cnt> 0 && cnt%512 == 0)
+               {
+                       //DBG_8192C("ishighspeed, cnt=%d\n", cnt);
+                       bwritezero = _TRUE;
+               }
+       }
+       else
+       {
+               if(cnt > 0 && cnt%64 == 0)
+               {
+                       //DBG_8192C("cnt=%d\n", cnt);
+                       bwritezero = _TRUE;
+               }
+       }
+#endif
+
+       //translate DMA FIFO addr to pipehandle
+       pipe = ffaddr2pipehdl(pdvobj, addr);
+
+#ifdef CONFIG_REDUCE_USB_TX_INT
+       if ( (pxmitpriv->free_xmitbuf_cnt%NR_XMITBUFF == 0)
+               || (pxmitbuf->ext_tag == _TRUE) )
+       {
+               purb->transfer_flags  &=  (~URB_NO_INTERRUPT);
+       } else {
+               purb->transfer_flags  |=  URB_NO_INTERRUPT;
+               //DBG_8192C("URB_NO_INTERRUPT ");
+       }
+#endif
+
+
+       usb_fill_bulk_urb(purb, pusbd, pipe,
+                               pxmitframe->buf_addr, //= pxmitbuf->pbuf
+                               cnt,
+                               usb_write_port_complete,
+                               pxmitbuf);//context is pxmitbuf
+
+#ifdef CONFIG_USE_USB_BUFFER_ALLOC_TX
+       purb->transfer_dma = pxmitbuf->dma_transfer_addr;
+       purb->transfer_flags |= URB_NO_TRANSFER_DMA_MAP;
+       purb->transfer_flags |= URB_ZERO_PACKET;
+#endif // CONFIG_USE_USB_BUFFER_ALLOC_TX
+
+#if 0
+       if (bwritezero)
+        {
+            purb->transfer_flags |= URB_ZERO_PACKET;
+        }
+#endif
+
+       status = usb_submit_urb(purb, GFP_ATOMIC);
+       if (!status) {
+               #ifdef DBG_CONFIG_ERROR_DETECT
+               {
+                       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
+                       pHalData->srestpriv.last_tx_time = rtw_get_current_time();
+               }
+               #endif
+       } else {
+               rtw_sctx_done_err(&pxmitbuf->sctx, RTW_SCTX_DONE_WRITE_PORT_ERR);
+               DBG_871X("usb_write_port, status=%d\n", status);
+               RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("usb_write_port(): usb_submit_urb, status=%x\n", status));
+
+               switch (status) {
+               case -ENODEV:
+                       padapter->bDriverStopped=_TRUE;
+                       break;
+               default:
+                       break;
+               }
+               goto exit;
+       }
+
+       ret= _SUCCESS;
+
+//   Commented by Albert 2009/10/13
+//   We add the URB_ZERO_PACKET flag to urb so that the host will send the zero packet automatically.
+/*
+       if(bwritezero == _TRUE)
+       {
+               usb_bulkout_zero(pintfhdl, addr);
+       }
+*/
+
+       RT_TRACE(_module_hci_ops_os_c_,_drv_err_,("-usb_write_port\n"));
+
+exit:
+       if (ret != _SUCCESS)
+               rtw_free_xmitbuf(pxmitpriv, pxmitbuf);
+_func_exit_;
+       return ret;
+
+}
+
+void usb_write_port_cancel(struct intf_hdl *pintfhdl)
+{
+       int i, j;
+       _adapter        *padapter = pintfhdl->padapter;
+       struct xmit_buf *pxmitbuf = (struct xmit_buf *)padapter->xmitpriv.pxmitbuf;
+
+       DBG_871X("%s \n", __func__);
+
+       padapter->bWritePortCancel = _TRUE;
+
+       for (i=0; i<NR_XMITBUFF; i++) {
+               for (j=0; j<8; j++) {
+                       if (pxmitbuf->pxmit_urb[j]) {
+                               usb_kill_urb(pxmitbuf->pxmit_urb[j]);
+                       }
+               }
+               pxmitbuf++;
+       }
+
+       pxmitbuf = (struct xmit_buf*)padapter->xmitpriv.pxmit_extbuf;
+       for (i = 0; i < NR_XMIT_EXTBUFF; i++) {
+               for (j=0; j<8; j++) {
+                       if(pxmitbuf->pxmit_urb[j]) {
+                               usb_kill_urb(pxmitbuf->pxmit_urb[j]);
+                       }
+               }
+               pxmitbuf++;
+       }
+}
diff --git a/drivers/net/wireless/realtek/rtl8192cu/os_dep/linux/xmit_linux.c b/drivers/net/wireless/realtek/rtl8192cu/os_dep/linux/xmit_linux.c
new file mode 100644 (file)
index 0000000..13dc446
--- /dev/null
@@ -0,0 +1,420 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#define _XMIT_OSDEP_C_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+
+#include <if_ether.h>
+#include <ip.h>
+#include <rtw_byteorder.h>
+#include <wifi.h>
+#include <mlme_osdep.h>
+#include <xmit_osdep.h>
+#include <osdep_intf.h>
+#include <circ_buf.h>
+
+
+uint rtw_remainder_len(struct pkt_file *pfile)
+{
+       return (pfile->buf_len - ((SIZE_PTR)(pfile->cur_addr) - (SIZE_PTR)(pfile->buf_start)));
+}
+
+void _rtw_open_pktfile (_pkt *pktptr, struct pkt_file *pfile)
+{
+_func_enter_;
+
+       pfile->pkt = pktptr;
+       pfile->cur_addr = pfile->buf_start = pktptr->data;
+       pfile->pkt_len = pfile->buf_len = pktptr->len;
+
+       pfile->cur_buffer = pfile->buf_start ;
+
+_func_exit_;
+}
+
+uint _rtw_pktfile_read (struct pkt_file *pfile, u8 *rmem, uint rlen)
+{
+       uint    len = 0;
+
+_func_enter_;
+
+       len =  rtw_remainder_len(pfile);
+       len = (rlen > len)? len: rlen;
+
+       if(rmem)
+         skb_copy_bits(pfile->pkt, pfile->buf_len-pfile->pkt_len, rmem, len);
+
+       pfile->cur_addr += len;
+       pfile->pkt_len -= len;
+
+_func_exit_;
+
+       return len;
+}
+
+sint rtw_endofpktfile(struct pkt_file *pfile)
+{
+_func_enter_;
+
+       if (pfile->pkt_len == 0) {
+_func_exit_;
+               return _TRUE;
+       }
+
+_func_exit_;
+
+       return _FALSE;
+}
+
+void rtw_set_tx_chksum_offload(_pkt *pkt, struct pkt_attrib *pattrib)
+{
+
+#ifdef CONFIG_TCP_CSUM_OFFLOAD_TX
+       struct sk_buff *skb = (struct sk_buff *)pkt;
+       pattrib->hw_tcp_csum = 0;
+
+       if (skb->ip_summed == CHECKSUM_PARTIAL) {
+               if (skb_shinfo(skb)->nr_frags == 0)
+               {
+                        const struct iphdr *ip = ip_hdr(skb);
+                        if (ip->protocol == IPPROTO_TCP) {
+                                // TCP checksum offload by HW
+                                DBG_871X("CHECKSUM_PARTIAL TCP\n");
+                                pattrib->hw_tcp_csum = 1;
+                                //skb_checksum_help(skb);
+                        } else if (ip->protocol == IPPROTO_UDP) {
+                                //DBG_871X("CHECKSUM_PARTIAL UDP\n");
+#if 1
+                                skb_checksum_help(skb);
+#else
+                                // Set UDP checksum = 0 to skip checksum check
+                                struct udphdr *udp = skb_transport_header(skb);
+                                udp->check = 0;
+#endif
+                        } else {
+                               DBG_871X("%s-%d TCP CSUM offload Error!!\n", __FUNCTION__, __LINE__);
+                                WARN_ON(1);     /* we need a WARN() */
+                           }
+               }
+               else { // IP fragmentation case
+                       DBG_871X("%s-%d nr_frags != 0, using skb_checksum_help(skb);!!\n", __FUNCTION__, __LINE__);
+                       skb_checksum_help(skb);
+               }
+       }
+#endif
+
+}
+
+int rtw_os_xmit_resource_alloc(_adapter *padapter, struct xmit_buf *pxmitbuf,u32 alloc_sz)
+{
+#ifdef CONFIG_USB_HCI
+       int i;
+       struct dvobj_priv       *pdvobjpriv = adapter_to_dvobj(padapter);
+       struct usb_device       *pusbd = pdvobjpriv->pusbdev;
+
+#ifdef CONFIG_USE_USB_BUFFER_ALLOC_TX
+       pxmitbuf->pallocated_buf = rtw_usb_buffer_alloc(pusbd, (size_t)alloc_sz, &pxmitbuf->dma_transfer_addr);
+       pxmitbuf->pbuf = pxmitbuf->pallocated_buf;
+       if(pxmitbuf->pallocated_buf == NULL)
+               return _FAIL;
+#else // CONFIG_USE_USB_BUFFER_ALLOC_TX
+
+       pxmitbuf->pallocated_buf = rtw_zmalloc(alloc_sz);
+       if (pxmitbuf->pallocated_buf == NULL)
+       {
+               return _FAIL;
+       }
+
+       pxmitbuf->pbuf = (u8 *)N_BYTE_ALIGMENT((SIZE_PTR)(pxmitbuf->pallocated_buf), XMITBUF_ALIGN_SZ);
+       pxmitbuf->dma_transfer_addr = 0;
+
+#endif // CONFIG_USE_USB_BUFFER_ALLOC_TX
+
+       for(i=0; i<8; i++)
+       {
+               pxmitbuf->pxmit_urb[i] = usb_alloc_urb(0, GFP_KERNEL);
+               if(pxmitbuf->pxmit_urb[i] == NULL)
+               {
+                       DBG_871X("pxmitbuf->pxmit_urb[i]==NULL");
+                       return _FAIL;
+               }
+
+       }
+#endif
+#if defined(CONFIG_PCI_HCI) || defined(CONFIG_SDIO_HCI)
+       pxmitbuf->pallocated_buf = rtw_zmalloc(alloc_sz);
+       if (pxmitbuf->pallocated_buf == NULL)
+       {
+               return _FAIL;
+       }
+
+       pxmitbuf->pbuf = (u8 *)N_BYTE_ALIGMENT((SIZE_PTR)(pxmitbuf->pallocated_buf), XMITBUF_ALIGN_SZ);
+#endif
+
+       return _SUCCESS;
+}
+
+void rtw_os_xmit_resource_free(_adapter *padapter, struct xmit_buf *pxmitbuf,u32 free_sz)
+{
+#ifdef CONFIG_USB_HCI
+       int i;
+       struct dvobj_priv       *pdvobjpriv = adapter_to_dvobj(padapter);
+       struct usb_device       *pusbd = pdvobjpriv->pusbdev;
+
+
+       for(i=0; i<8; i++)
+       {
+               if(pxmitbuf->pxmit_urb[i])
+               {
+                       //usb_kill_urb(pxmitbuf->pxmit_urb[i]);
+                       usb_free_urb(pxmitbuf->pxmit_urb[i]);
+               }
+       }
+
+#ifdef CONFIG_USE_USB_BUFFER_ALLOC_TX
+       rtw_usb_buffer_free(pusbd, (size_t)free_sz, pxmitbuf->pallocated_buf, pxmitbuf->dma_transfer_addr);
+       pxmitbuf->pallocated_buf =  NULL;
+       pxmitbuf->dma_transfer_addr = 0;
+#else  // CONFIG_USE_USB_BUFFER_ALLOC_TX
+       if(pxmitbuf->pallocated_buf)
+               rtw_mfree(pxmitbuf->pallocated_buf, free_sz);
+#endif // CONFIG_USE_USB_BUFFER_ALLOC_TX
+
+#endif
+#if defined(CONFIG_PCI_HCI) || defined(CONFIG_SDIO_HCI)
+       if(pxmitbuf->pallocated_buf)
+               rtw_mfree(pxmitbuf->pallocated_buf, free_sz);
+#endif
+}
+
+void rtw_os_pkt_complete(_adapter *padapter, _pkt *pkt)
+{
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,35))
+       u16     queue;
+       struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
+
+       queue = skb_get_queue_mapping(pkt);
+       if(__netif_subqueue_stopped(padapter->pnetdev, queue) &&
+               (pxmitpriv->hwxmits[queue].accnt < NR_XMITFRAME/2))
+       {
+               netif_wake_subqueue(padapter->pnetdev, queue);
+       }
+#else
+       if (netif_queue_stopped(padapter->pnetdev))
+               netif_wake_queue(padapter->pnetdev);
+#endif
+
+       rtw_skb_free(pkt);
+}
+
+void rtw_os_xmit_complete(_adapter *padapter, struct xmit_frame *pxframe)
+{
+       if(pxframe->pkt)
+               rtw_os_pkt_complete(padapter, pxframe->pkt);
+
+       pxframe->pkt = NULL;
+}
+
+void rtw_os_xmit_schedule(_adapter *padapter)
+{
+#ifdef CONFIG_SDIO_HCI
+       if(!padapter)
+               return;
+
+       if (rtw_txframes_pending(padapter))
+               _rtw_up_sema(&padapter->xmitpriv.xmit_sema);
+#else
+       _irqL  irqL;
+       struct xmit_priv *pxmitpriv;
+
+       if(!padapter)
+               return;
+
+       pxmitpriv = &padapter->xmitpriv;
+
+       _enter_critical_bh(&pxmitpriv->lock, &irqL);
+
+       if(rtw_txframes_pending(padapter))
+       {
+               tasklet_hi_schedule(&pxmitpriv->xmit_tasklet);
+       }
+
+       _exit_critical_bh(&pxmitpriv->lock, &irqL);
+#endif
+}
+
+
+
+#ifdef CONFIG_TX_MCAST2UNI
+int rtw_mlcst2unicst(_adapter *padapter, struct sk_buff *skb)
+{
+       struct  sta_priv *pstapriv = &padapter->stapriv;
+       struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
+       _irqL   irqL;
+       _list   *phead, *plist;
+       struct sk_buff *newskb;
+       struct sta_info *psta = NULL;
+       u8 chk_alive_num = 0;
+       char chk_alive_list[NUM_STA];
+       u8 bc_addr[6]={0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
+       u8 null_addr[6]={0x00, 0x00, 0x00, 0x00, 0x00, 0x00};
+
+       int i;
+       s32     res;
+
+       _enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+       phead = &pstapriv->asoc_list;
+       plist = get_next(phead);
+
+       //free sta asoc_queue
+       while ((rtw_end_of_queue_search(phead, plist)) == _FALSE) {
+               int stainfo_offset;
+               psta = LIST_CONTAINOR(plist, struct sta_info, asoc_list);
+               plist = get_next(plist);
+
+               stainfo_offset = rtw_stainfo_offset(pstapriv, psta);
+               if (stainfo_offset_valid(stainfo_offset)) {
+                       chk_alive_list[chk_alive_num++] = stainfo_offset;
+               }
+       }
+       _exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
+
+       for (i = 0; i < chk_alive_num; i++) {
+               psta = rtw_get_stainfo_by_offset(pstapriv, chk_alive_list[i]);
+
+               /* avoid come from STA1 and send back STA1 */
+               if (_rtw_memcmp(psta->hwaddr, &skb->data[6], 6) == _TRUE
+                       || _rtw_memcmp(psta->hwaddr, null_addr, 6) == _TRUE
+                       || _rtw_memcmp(psta->hwaddr, bc_addr, 6) == _TRUE
+               )
+                       continue;
+
+               newskb = rtw_skb_copy(skb);
+
+               if (newskb) {
+                       _rtw_memcpy(newskb->data, psta->hwaddr, 6);
+                       res = rtw_xmit(padapter, &newskb);
+                       if (res < 0) {
+                               DBG_871X("%s()-%d: rtw_xmit() return error!\n", __FUNCTION__, __LINE__);
+                               pxmitpriv->tx_drop++;
+                               rtw_skb_free(newskb);
+                       } else
+                               pxmitpriv->tx_pkts++;
+               } else {
+                       DBG_871X("%s-%d: rtw_skb_copy() failed!\n", __FUNCTION__, __LINE__);
+                       pxmitpriv->tx_drop++;
+                       //rtw_skb_free(skb);
+                       return _FALSE;  // Caller shall tx this multicast frame via normal way.
+               }
+       }
+
+       rtw_skb_free(skb);
+       return _TRUE;
+}
+#endif // CONFIG_TX_MCAST2UNI
+
+
+int _rtw_xmit_entry(_pkt *pkt, _nic_hdl pnetdev)
+{
+       _adapter *padapter = (_adapter *)rtw_netdev_priv(pnetdev);
+       struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
+#ifdef CONFIG_TX_MCAST2UNI
+       struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
+       extern int rtw_mc2u_disable;
+#endif // CONFIG_TX_MCAST2UNI
+       s32 res = 0;
+#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,35))
+       u16 queue;
+#endif
+
+_func_enter_;
+
+       RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("+xmit_enry\n"));
+
+       if (rtw_if_up(padapter) == _FALSE) {
+               RT_TRACE(_module_xmit_osdep_c_, _drv_err_, ("rtw_xmit_entry: rtw_if_up fail\n"));
+               #ifdef DBG_TX_DROP_FRAME
+               DBG_871X("DBG_TX_DROP_FRAME %s if_up fail\n", __FUNCTION__);
+               #endif
+               goto drop_packet;
+       }
+
+#if (LINUX_VERSION_CODE>=KERNEL_VERSION(2,6,35))
+       queue = skb_get_queue_mapping(pkt);
+       /* No free space for Tx, tx_worker is too slow */
+       if (pxmitpriv->hwxmits[queue].accnt > NR_XMITFRAME/2) {
+               //DBG_871X("%s(): stop netif_subqueue[%d]\n", __FUNCTION__, queue);
+               netif_stop_subqueue(padapter->pnetdev, queue);
+               return NETDEV_TX_BUSY;
+       }
+#endif
+
+#ifdef CONFIG_TX_MCAST2UNI
+       if ( !rtw_mc2u_disable
+               && check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE
+               && ( IP_MCAST_MAC(pkt->data)
+                       || ICMPV6_MCAST_MAC(pkt->data) )
+               && (padapter->registrypriv.wifi_spec == 0)
+               )
+       {
+               if ( pxmitpriv->free_xmitframe_cnt > (NR_XMITFRAME/4) ) {
+                       res = rtw_mlcst2unicst(padapter, pkt);
+                       if (res == _TRUE) {
+                               goto exit;
+                       }
+               } else {
+                       //DBG_871X("Stop M2U(%d, %d)! ", pxmitpriv->free_xmitframe_cnt, pxmitpriv->free_xmitbuf_cnt);
+                       //DBG_871X("!m2u );
+               }
+       }
+#endif // CONFIG_TX_MCAST2UNI
+
+       res = rtw_xmit(padapter, &pkt);
+       if (res < 0) {
+               #ifdef DBG_TX_DROP_FRAME
+               DBG_871X("DBG_TX_DROP_FRAME %s rtw_xmit fail\n", __FUNCTION__);
+               #endif
+               goto drop_packet;
+       }
+
+       pxmitpriv->tx_pkts++;
+       RT_TRACE(_module_xmit_osdep_c_, _drv_info_, ("rtw_xmit_entry: tx_pkts=%d\n", (u32)pxmitpriv->tx_pkts));
+       goto exit;
+
+drop_packet:
+       pxmitpriv->tx_drop++;
+       rtw_skb_free(pkt);
+       RT_TRACE(_module_xmit_osdep_c_, _drv_notice_, ("rtw_xmit_entry: drop, tx_drop=%d\n", (u32)pxmitpriv->tx_drop));
+
+exit:
+
+_func_exit_;
+
+       return 0;
+}
+
+int rtw_xmit_entry(_pkt *pkt, _nic_hdl pnetdev)
+{
+       if (pkt)
+               rtw_mstat_update(MSTAT_TYPE_SKB, MSTAT_ALLOC_SUCCESS, pkt->truesize);
+       return _rtw_xmit_entry(pkt, pnetdev);
+}
diff --git a/drivers/net/wireless/realtek/rtl8192cu/os_dep/osdep_service.c b/drivers/net/wireless/realtek/rtl8192cu/os_dep/osdep_service.c
new file mode 100644 (file)
index 0000000..b4a7523
--- /dev/null
@@ -0,0 +1,2299 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+
+
+#define _OSDEP_SERVICE_C_
+
+#include <drv_conf.h>
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <recv_osdep.h>
+#ifdef PLATFORM_LINUX
+#include <linux/vmalloc.h>
+#endif
+#ifdef PLATFORM_FREEBSD
+#include <sys/malloc.h>
+#include <sys/time.h>
+#endif /* PLATFORM_FREEBSD */
+#ifdef RTK_DMP_PLATFORM
+#if (LINUX_VERSION_CODE > KERNEL_VERSION(2,6,12))
+#include <linux/pageremap.h>
+#endif
+#endif
+
+#define RT_TAG '1178'
+
+#ifdef DBG_MEMORY_LEAK
+#ifdef PLATFORM_LINUX
+#include <asm/atomic.h>
+atomic_t _malloc_cnt = ATOMIC_INIT(0);
+atomic_t _malloc_size = ATOMIC_INIT(0);
+#endif
+#endif /* DBG_MEMORY_LEAK */
+
+
+#if defined(PLATFORM_LINUX)
+/*
+* Translate the OS dependent @param error_code to OS independent RTW_STATUS_CODE
+* @return: one of RTW_STATUS_CODE
+*/
+inline int RTW_STATUS_CODE(int error_code){
+       if(error_code >=0)
+               return _SUCCESS;
+
+       switch(error_code) {
+               //case -ETIMEDOUT:
+               //      return RTW_STATUS_TIMEDOUT;
+               default:
+                       return _FAIL;
+       }
+}
+#else
+inline int RTW_STATUS_CODE(int error_code){
+       return error_code;
+}
+#endif
+
+u32 rtw_atoi(u8* s)
+{
+
+       int num=0,flag=0;
+       int i;
+       for(i=0;i<=strlen(s);i++)
+       {
+         if(s[i] >= '0' && s[i] <= '9')
+                num = num * 10 + s[i] -'0';
+         else if(s[0] == '-' && i==0)
+                flag =1;
+         else
+                 break;
+        }
+
+       if(flag == 1)
+          num = num * -1;
+
+        return(num);
+
+}
+
+inline u8* _rtw_vmalloc(u32 sz)
+{
+       u8      *pbuf;
+#ifdef PLATFORM_LINUX
+       pbuf = vmalloc(sz);
+#endif
+#ifdef PLATFORM_FREEBSD
+       pbuf = malloc(sz,M_DEVBUF,M_NOWAIT);
+#endif
+
+#ifdef PLATFORM_WINDOWS
+       NdisAllocateMemoryWithTag(&pbuf,sz, RT_TAG);
+#endif
+
+#ifdef DBG_MEMORY_LEAK
+#ifdef PLATFORM_LINUX
+       if ( pbuf != NULL) {
+               atomic_inc(&_malloc_cnt);
+               atomic_add(sz, &_malloc_size);
+       }
+#endif
+#endif /* DBG_MEMORY_LEAK */
+
+       return pbuf;
+}
+
+inline u8* _rtw_zvmalloc(u32 sz)
+{
+       u8      *pbuf;
+#ifdef PLATFORM_LINUX
+       pbuf = _rtw_vmalloc(sz);
+       if (pbuf != NULL)
+               memset(pbuf, 0, sz);
+#endif
+#ifdef PLATFORM_FREEBSD
+       pbuf = malloc(sz,M_DEVBUF,M_ZERO|M_NOWAIT);
+#endif
+#ifdef PLATFORM_WINDOWS
+       NdisAllocateMemoryWithTag(&pbuf,sz, RT_TAG);
+       if (pbuf != NULL)
+               NdisFillMemory(pbuf, sz, 0);
+#endif
+
+       return pbuf;
+}
+
+inline void _rtw_vmfree(u8 *pbuf, u32 sz)
+{
+#ifdef PLATFORM_LINUX
+       vfree(pbuf);
+#endif
+#ifdef PLATFORM_FREEBSD
+       free(pbuf,M_DEVBUF);
+#endif
+#ifdef PLATFORM_WINDOWS
+       NdisFreeMemory(pbuf,sz, 0);
+#endif
+
+#ifdef DBG_MEMORY_LEAK
+#ifdef PLATFORM_LINUX
+       atomic_dec(&_malloc_cnt);
+       atomic_sub(sz, &_malloc_size);
+#endif
+#endif /* DBG_MEMORY_LEAK */
+}
+
+u8* _rtw_malloc(u32 sz)
+{
+
+       u8      *pbuf=NULL;
+
+#ifdef PLATFORM_LINUX
+#ifdef RTK_DMP_PLATFORM
+       if(sz > 0x4000)
+               pbuf = (u8 *)dvr_malloc(sz);
+       else
+#endif
+               pbuf = kmalloc(sz,in_interrupt() ? GFP_ATOMIC : GFP_KERNEL);
+
+#endif
+#ifdef PLATFORM_FREEBSD
+       pbuf = malloc(sz,M_DEVBUF,M_NOWAIT);
+#endif
+#ifdef PLATFORM_WINDOWS
+
+       NdisAllocateMemoryWithTag(&pbuf,sz, RT_TAG);
+
+#endif
+
+#ifdef DBG_MEMORY_LEAK
+#ifdef PLATFORM_LINUX
+       if ( pbuf != NULL) {
+               atomic_inc(&_malloc_cnt);
+               atomic_add(sz, &_malloc_size);
+       }
+#endif
+#endif /* DBG_MEMORY_LEAK */
+
+       return pbuf;
+
+}
+
+
+u8* _rtw_zmalloc(u32 sz)
+{
+#ifdef PLATFORM_FREEBSD
+       return malloc(sz,M_DEVBUF,M_ZERO|M_NOWAIT);
+#else // PLATFORM_FREEBSD
+       u8      *pbuf = _rtw_malloc(sz);
+
+       if (pbuf != NULL) {
+
+#ifdef PLATFORM_LINUX
+               memset(pbuf, 0, sz);
+#endif
+
+#ifdef PLATFORM_WINDOWS
+               NdisFillMemory(pbuf, sz, 0);
+#endif
+
+       }
+
+       return pbuf;
+#endif // PLATFORM_FREEBSD
+}
+
+void   _rtw_mfree(u8 *pbuf, u32 sz)
+{
+
+#ifdef PLATFORM_LINUX
+#ifdef RTK_DMP_PLATFORM
+       if(sz > 0x4000)
+               dvr_free(pbuf);
+       else
+#endif
+               kfree(pbuf);
+
+#endif
+#ifdef PLATFORM_FREEBSD
+       free(pbuf,M_DEVBUF);
+#endif
+#ifdef PLATFORM_WINDOWS
+
+       NdisFreeMemory(pbuf,sz, 0);
+
+#endif
+
+#ifdef DBG_MEMORY_LEAK
+#ifdef PLATFORM_LINUX
+       atomic_dec(&_malloc_cnt);
+       atomic_sub(sz, &_malloc_size);
+#endif
+#endif /* DBG_MEMORY_LEAK */
+
+}
+
+#ifdef PLATFORM_FREEBSD
+//review again
+struct sk_buff * dev_alloc_skb(unsigned int size)
+{
+       struct sk_buff *skb=NULL;
+       u8 *data=NULL;
+
+       //skb = (struct sk_buff *)_rtw_zmalloc(sizeof(struct sk_buff)); // for skb->len, etc.
+       skb = (struct sk_buff *)_rtw_malloc(sizeof(struct sk_buff));
+       if(!skb)
+               goto out;
+       data = _rtw_malloc(size);
+       if(!data)
+               goto nodata;
+
+       skb->head = (unsigned char*)data;
+       skb->data = (unsigned char*)data;
+       skb->tail = (unsigned char*)data;
+       skb->end = (unsigned char*)data + size;
+       skb->len = 0;
+       //printf("%s()-%d: skb=%p, skb->head = %p\n", __FUNCTION__, __LINE__, skb, skb->head);
+
+out:
+       return skb;
+nodata:
+       _rtw_mfree((u8 *)skb, sizeof(struct sk_buff));
+       skb = NULL;
+goto out;
+
+}
+
+void dev_kfree_skb_any(struct sk_buff *skb)
+{
+       //printf("%s()-%d: skb->head = %p\n", __FUNCTION__, __LINE__, skb->head);
+       if(skb->head)
+               _rtw_mfree(skb->head, 0);
+       //printf("%s()-%d: skb = %p\n", __FUNCTION__, __LINE__, skb);
+       if(skb)
+               _rtw_mfree((u8 *)skb, 0);
+}
+struct sk_buff *skb_clone(const struct sk_buff *skb)
+{
+       return NULL;
+}
+
+#endif /* PLATFORM_FREEBSD */
+
+inline struct sk_buff *_rtw_skb_alloc(u32 sz)
+{
+#ifdef PLATFORM_LINUX
+       return __dev_alloc_skb(sz, in_interrupt() ? GFP_ATOMIC : GFP_KERNEL);
+#endif /* PLATFORM_LINUX */
+
+#ifdef PLATFORM_FREEBSD
+       return dev_alloc_skb(sz);
+#endif /* PLATFORM_FREEBSD */
+}
+
+inline void _rtw_skb_free(struct sk_buff *skb)
+{
+       dev_kfree_skb_any(skb);
+}
+
+inline struct sk_buff *_rtw_skb_copy(const struct sk_buff *skb)
+{
+#ifdef PLATFORM_LINUX
+       return skb_copy(skb, in_interrupt() ? GFP_ATOMIC : GFP_KERNEL);
+#endif /* PLATFORM_LINUX */
+
+#ifdef PLATFORM_FREEBSD
+       return NULL;
+#endif /* PLATFORM_FREEBSD */
+}
+
+inline struct sk_buff *_rtw_skb_clone(struct sk_buff *skb)
+{
+#ifdef PLATFORM_LINUX
+       return skb_clone(skb, in_interrupt() ? GFP_ATOMIC : GFP_KERNEL);
+#endif /* PLATFORM_LINUX */
+
+#ifdef PLATFORM_FREEBSD
+       return skb_clone(skb);
+#endif /* PLATFORM_FREEBSD */
+}
+
+inline int _rtw_netif_rx(_nic_hdl ndev, struct sk_buff *skb)
+{
+#ifdef PLATFORM_LINUX
+       skb->dev = ndev;
+       return netif_rx(skb);
+#endif /* PLATFORM_LINUX */
+
+#ifdef PLATFORM_FREEBSD
+       return (*ndev->if_input)(ndev, skb);
+#endif /* PLATFORM_FREEBSD */
+}
+
+void _rtw_skb_queue_purge(struct sk_buff_head *list)
+{
+       struct sk_buff *skb;
+
+       while ((skb = skb_dequeue(list)) != NULL)
+               _rtw_skb_free(skb);
+}
+
+#ifdef CONFIG_USB_HCI
+inline void *_rtw_usb_buffer_alloc(struct usb_device *dev, size_t size, dma_addr_t *dma)
+{
+#ifdef PLATFORM_LINUX
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,35))
+       return usb_alloc_coherent(dev, size, (in_interrupt() ? GFP_ATOMIC : GFP_KERNEL), dma);
+#else
+       return usb_buffer_alloc(dev, size, (in_interrupt() ? GFP_ATOMIC : GFP_KERNEL), dma);
+#endif
+#endif /* PLATFORM_LINUX */
+
+#ifdef PLATFORM_FREEBSD
+       return (malloc(size, M_USBDEV, M_NOWAIT | M_ZERO));
+#endif /* PLATFORM_FREEBSD */
+}
+inline void _rtw_usb_buffer_free(struct usb_device *dev, size_t size, void *addr, dma_addr_t dma)
+{
+#ifdef PLATFORM_LINUX
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,35))
+       usb_free_coherent(dev, size, addr, dma);
+#else
+       usb_buffer_free(dev, size, addr, dma);
+#endif
+#endif /* PLATFORM_LINUX */
+
+#ifdef PLATFORM_FREEBSD
+       free(addr, M_USBDEV);
+#endif /* PLATFORM_FREEBSD */
+}
+#endif /* CONFIG_USB_HCI */
+
+#ifdef DBG_MEM_ALLOC
+
+struct rtw_mem_stat {
+       ATOMIC_T alloc; // the memory bytes we allocate currently
+       ATOMIC_T peak; // the peak memory bytes we allocate
+       ATOMIC_T alloc_cnt; // the alloc count for alloc currently
+       ATOMIC_T alloc_err_cnt; // the error times we fail to allocate memory
+};
+
+struct rtw_mem_stat rtw_mem_type_stat[mstat_tf_idx(MSTAT_TYPE_MAX)];
+struct rtw_mem_stat rtw_mem_func_stat[mstat_ff_idx(MSTAT_FUNC_MAX)];
+
+char *MSTAT_TYPE_str[] = {
+       "VIR",
+       "PHY",
+       "SKB",
+       "USB",
+};
+
+char *MSTAT_FUNC_str[] = {
+       "UNSP",
+       "IO",
+       "TXIO",
+       "RXIO",
+       "TX",
+       "RX",
+};
+
+int _rtw_mstat_dump(char *buf, int len)
+{
+       int cnt = 0;
+       int i;
+       int value_t[4][mstat_tf_idx(MSTAT_TYPE_MAX)];
+       int value_f[4][mstat_ff_idx(MSTAT_FUNC_MAX)];
+
+       int vir_alloc, vir_peak, vir_alloc_err, phy_alloc, phy_peak, phy_alloc_err;
+       int tx_alloc, tx_peak, tx_alloc_err, rx_alloc, rx_peak, rx_alloc_err;
+
+       for(i=0;i<mstat_tf_idx(MSTAT_TYPE_MAX);i++) {
+               value_t[0][i] = ATOMIC_READ(&(rtw_mem_type_stat[i].alloc));
+               value_t[1][i] = ATOMIC_READ(&(rtw_mem_type_stat[i].peak));
+               value_t[2][i] = ATOMIC_READ(&(rtw_mem_type_stat[i].alloc_cnt));
+               value_t[3][i] = ATOMIC_READ(&(rtw_mem_type_stat[i].alloc_err_cnt));
+       }
+
+       #if 0
+       for(i=0;i<mstat_ff_idx(MSTAT_FUNC_MAX);i++) {
+               value_f[0][i] = ATOMIC_READ(&(rtw_mem_func_stat[i].alloc));
+               value_f[1][i] = ATOMIC_READ(&(rtw_mem_func_stat[i].peak));
+               value_f[2][i] = ATOMIC_READ(&(rtw_mem_func_stat[i].alloc_cnt));
+               value_f[3][i] = ATOMIC_READ(&(rtw_mem_func_stat[i].alloc_err_cnt));
+       }
+       #endif
+
+       cnt += snprintf(buf+cnt, len-cnt, "===================== MSTAT =====================\n");
+       cnt += snprintf(buf+cnt, len-cnt, "%4s %10s %10s %10s %10s\n", "TAG", "alloc", "peak", "aloc_cnt", "err_cnt");
+       cnt += snprintf(buf+cnt, len-cnt, "-------------------------------------------------\n");
+       for(i=0;i<mstat_tf_idx(MSTAT_TYPE_MAX);i++) {
+               cnt += snprintf(buf+cnt, len-cnt, "%4s %10d %10d %10d %10d\n", MSTAT_TYPE_str[i], value_t[0][i], value_t[1][i], value_t[2][i], value_t[3][i]);
+       }
+       #if 0
+       cnt += snprintf(buf+cnt, len-cnt, "-------------------------------------------------\n");
+       for(i=0;i<mstat_ff_idx(MSTAT_FUNC_MAX);i++) {
+               cnt += snprintf(buf+cnt, len-cnt, "%4s %10d %10d %10d %10d\n", MSTAT_FUNC_str[i], value_f[0][i], value_f[1][i], value_f[2][i], value_f[3][i]);
+       }
+       #endif
+
+       return cnt;
+}
+
+void rtw_mstat_dump(void)
+{
+       char buf[768] = {0};
+
+       _rtw_mstat_dump(buf, 768);
+       DBG_871X("\n%s", buf);
+}
+
+void rtw_mstat_update(const enum mstat_f flags, const MSTAT_STATUS status, u32 sz)
+{
+       static u32 update_time = 0;
+       int peak, alloc;
+       int i;
+
+       /* initialization */
+       if(!update_time) {
+               for(i=0;i<mstat_tf_idx(MSTAT_TYPE_MAX);i++) {
+                       ATOMIC_SET(&(rtw_mem_type_stat[i].alloc), 0);
+                       ATOMIC_SET(&(rtw_mem_type_stat[i].peak), 0);
+                       ATOMIC_SET(&(rtw_mem_type_stat[i].alloc_cnt), 0);
+                       ATOMIC_SET(&(rtw_mem_type_stat[i].alloc_err_cnt), 0);
+               }
+               for(i=0;i<mstat_ff_idx(MSTAT_FUNC_MAX);i++) {
+                       ATOMIC_SET(&(rtw_mem_func_stat[i].alloc), 0);
+                       ATOMIC_SET(&(rtw_mem_func_stat[i].peak), 0);
+                       ATOMIC_SET(&(rtw_mem_func_stat[i].alloc_cnt), 0);
+                       ATOMIC_SET(&(rtw_mem_func_stat[i].alloc_err_cnt), 0);
+               }
+       }
+
+       switch(status) {
+               case MSTAT_ALLOC_SUCCESS:
+                       ATOMIC_INC(&(rtw_mem_type_stat[mstat_tf_idx(flags)].alloc_cnt));
+                       alloc = ATOMIC_ADD_RETURN(&(rtw_mem_type_stat[mstat_tf_idx(flags)].alloc), sz);
+                       peak=ATOMIC_READ(&(rtw_mem_type_stat[mstat_tf_idx(flags)].peak));
+                       if (peak<alloc)
+                               ATOMIC_SET(&(rtw_mem_type_stat[mstat_tf_idx(flags)].peak), alloc);
+
+                       ATOMIC_INC(&(rtw_mem_func_stat[mstat_ff_idx(flags)].alloc_cnt));
+                       alloc = ATOMIC_ADD_RETURN(&(rtw_mem_func_stat[mstat_ff_idx(flags)].alloc), sz);
+                       peak=ATOMIC_READ(&(rtw_mem_func_stat[mstat_ff_idx(flags)].peak));
+                       if (peak<alloc)
+                               ATOMIC_SET(&(rtw_mem_func_stat[mstat_ff_idx(flags)].peak), alloc);
+                       break;
+
+               case MSTAT_ALLOC_FAIL:
+                       ATOMIC_INC(&(rtw_mem_type_stat[mstat_tf_idx(flags)].alloc_err_cnt));
+
+                       ATOMIC_INC(&(rtw_mem_func_stat[mstat_ff_idx(flags)].alloc_err_cnt));
+                       break;
+
+               case MSTAT_FREE:
+                       ATOMIC_DEC(&(rtw_mem_type_stat[mstat_tf_idx(flags)].alloc_cnt));
+                       ATOMIC_SUB(&(rtw_mem_type_stat[mstat_tf_idx(flags)].alloc), sz);
+
+                       ATOMIC_DEC(&(rtw_mem_func_stat[mstat_ff_idx(flags)].alloc_cnt));
+                       ATOMIC_SUB(&(rtw_mem_func_stat[mstat_ff_idx(flags)].alloc), sz);
+                       break;
+       };
+
+       //if (rtw_get_passing_time_ms(update_time) > 5000) {
+       //      rtw_mstat_dump();
+               update_time=rtw_get_current_time();
+       //}
+}
+
+
+
+inline u8* dbg_rtw_vmalloc(u32 sz, const enum mstat_f flags, const char *func, const int line)
+{
+       u8  *p;
+       //DBG_871X("DBG_MEM_ALLOC %s:%d %s(%d)\n", func,  line, __FUNCTION__, (sz));
+
+       p=_rtw_vmalloc((sz));
+
+       rtw_mstat_update(
+               flags
+               , p ? MSTAT_ALLOC_SUCCESS : MSTAT_ALLOC_FAIL
+               , sz
+       );
+
+       return p;
+}
+
+inline u8* dbg_rtw_zvmalloc(u32 sz, const enum mstat_f flags, const char *func, const int line)
+{
+       u8 *p;
+       //DBG_871X("DBG_MEM_ALLOC %s:%d %s(%d)\n", func, line, __FUNCTION__, (sz));
+
+       p=_rtw_zvmalloc((sz));
+
+       rtw_mstat_update(
+               flags
+               , p ? MSTAT_ALLOC_SUCCESS : MSTAT_ALLOC_FAIL
+               , sz
+       );
+
+       return p;
+}
+
+inline void dbg_rtw_vmfree(u8 *pbuf, u32 sz, const enum mstat_f flags, const char *func, const int line)
+{
+       //DBG_871X("DBG_MEM_ALLOC %s:%d %s(%p,%d)\n",  func, line, __FUNCTION__, (pbuf), (sz));
+
+       _rtw_vmfree((pbuf), (sz));
+
+       rtw_mstat_update(
+               flags
+               , MSTAT_FREE
+               , sz
+       );
+}
+
+inline u8* dbg_rtw_malloc(u32 sz, const enum mstat_f flags, const char *func, const int line)
+{
+       u8 *p;
+
+       //if(sz>=153 && sz<=306)
+       //      DBG_871X("DBG_MEM_ALLOC %s:%d %s(%d)\n", func, line, __FUNCTION__, (sz));
+
+       //if((sz)>4096)
+       //      DBG_871X("DBG_MEM_ALLOC %s:%d %s(%d)\n", func, line, __FUNCTION__, (sz));
+
+       p=_rtw_malloc((sz));
+
+       rtw_mstat_update(
+               flags
+               , p ? MSTAT_ALLOC_SUCCESS : MSTAT_ALLOC_FAIL
+               , sz
+       );
+
+       return p;
+}
+
+inline u8* dbg_rtw_zmalloc(u32 sz, const enum mstat_f flags, const char *func, const int line)
+{
+       u8 *p;
+
+       //if(sz>=153 && sz<=306)
+       //      DBG_871X("DBG_MEM_ALLOC %s:%d %s(%d)\n", func, line, __FUNCTION__, (sz));
+
+       //if((sz)>4096)
+       //      DBG_871X("DBG_MEM_ALLOC %s:%d %s(%d)\n", func, line, __FUNCTION__, (sz));
+
+       p = _rtw_zmalloc((sz));
+
+       rtw_mstat_update(
+               flags
+               , p ? MSTAT_ALLOC_SUCCESS : MSTAT_ALLOC_FAIL
+               , sz
+       );
+
+       return p;
+}
+
+inline void dbg_rtw_mfree(u8 *pbuf, u32 sz, const enum mstat_f flags, const char *func, const int line)
+{
+       //if(sz>=153 && sz<=306)
+       //      DBG_871X("DBG_MEM_ALLOC %s:%d %s(%d)\n", func, line, __FUNCTION__, (sz));
+
+       //if((sz)>4096)
+       //      DBG_871X("DBG_MEM_ALLOC %s:%d %s(%p,%d)\n", func, line, __FUNCTION__, (pbuf), (sz));
+
+       _rtw_mfree((pbuf), (sz));
+
+       rtw_mstat_update(
+               flags
+               , MSTAT_FREE
+               , sz
+       );
+}
+
+inline struct sk_buff * dbg_rtw_skb_alloc(unsigned int size, const enum mstat_f flags, const char *func, int line)
+{
+       struct sk_buff *skb;
+       unsigned int truesize = 0;
+
+       skb = _rtw_skb_alloc(size);
+
+       if(skb)
+               truesize = skb->truesize;
+
+       if(!skb || truesize < size /*|| size > 4096*/)
+               DBG_871X("DBG_MEM_ALLOC %s:%d %s(%d), skb:%p, truesize=%u\n", func, line, __FUNCTION__, size, skb, truesize);
+
+       rtw_mstat_update(
+               flags
+               , skb ? MSTAT_ALLOC_SUCCESS : MSTAT_ALLOC_FAIL
+               , truesize
+       );
+
+       return skb;
+}
+
+inline void dbg_rtw_skb_free(struct sk_buff *skb, const enum mstat_f flags, const char *func, int line)
+{
+       unsigned int truesize = skb->truesize;
+
+       //if(truesize > 4096)
+       //      DBG_871X("DBG_MEM_ALLOC %s:%d %s, truesize=%u\n", func, line, __FUNCTION__, truesize);
+
+       _rtw_skb_free(skb);
+
+       rtw_mstat_update(
+               flags
+               , MSTAT_FREE
+               , truesize
+       );
+}
+
+inline struct sk_buff *dbg_rtw_skb_copy(const struct sk_buff *skb, const enum mstat_f flags, const char *func, const int line)
+{
+       struct sk_buff *skb_cp;
+       unsigned int truesize = skb->truesize;
+       unsigned int cp_truesize = 0;
+
+       skb_cp = _rtw_skb_copy(skb);
+       if(skb_cp)
+               cp_truesize = skb_cp->truesize;
+
+       if(!skb_cp || cp_truesize != truesize /*||cp_truesize > 4096*/)
+               DBG_871X("DBG_MEM_ALLOC %s:%d %s(%u), skb_cp:%p, cp_truesize=%u\n", func, line, __FUNCTION__, truesize, skb_cp, cp_truesize);
+
+       rtw_mstat_update(
+               flags
+               , skb_cp ? MSTAT_ALLOC_SUCCESS : MSTAT_ALLOC_FAIL
+               , truesize
+       );
+
+       return skb_cp;
+}
+
+inline struct sk_buff *dbg_rtw_skb_clone(struct sk_buff *skb, const enum mstat_f flags, const char *func, const int line)
+{
+       struct sk_buff *skb_cl;
+       unsigned int truesize = skb->truesize;
+       unsigned int cl_truesize = 0;
+
+       skb_cl = _rtw_skb_clone(skb);
+       if(skb_cl)
+               cl_truesize = skb_cl->truesize;
+
+       if(!skb_cl || cl_truesize != truesize /*|| cl_truesize > 4096*/)
+               DBG_871X("DBG_MEM_ALLOC %s:%d %s(%u), skb_cl:%p, cl_truesize=%u\n", func, line, __FUNCTION__, truesize, skb_cl, cl_truesize);
+
+       rtw_mstat_update(
+               flags
+               , skb_cl ? MSTAT_ALLOC_SUCCESS : MSTAT_ALLOC_FAIL
+               , truesize
+       );
+
+       return skb_cl;
+}
+
+inline int dbg_rtw_netif_rx(_nic_hdl ndev, struct sk_buff *skb, const enum mstat_f flags, const char *func, int line)
+{
+       int ret;
+       unsigned int truesize = skb->truesize;
+
+       //if(truesize > 4096)
+       //      DBG_871X("DBG_MEM_ALLOC %s:%d %s, truesize=%u\n", func, line, __FUNCTION__, truesize);
+
+       ret = _rtw_netif_rx(ndev, skb);
+
+       rtw_mstat_update(
+               flags
+               , MSTAT_FREE
+               , truesize
+       );
+
+       return ret;
+}
+
+inline void dbg_rtw_skb_queue_purge(struct sk_buff_head *list, enum mstat_f flags, const char *func, int line)
+{
+       struct sk_buff *skb;
+
+       while ((skb = skb_dequeue(list)) != NULL)
+               dbg_rtw_skb_free(skb, flags, func, line);
+}
+
+#ifdef CONFIG_USB_HCI
+inline void *dbg_rtw_usb_buffer_alloc(struct usb_device *dev, size_t size, dma_addr_t *dma, const enum mstat_f flags, const char *func, int line)
+{
+       void *p;
+       //DBG_871X("DBG_MEM_ALLOC %s:%d %s(%d)\n", func, line, __FUNCTION__, size);
+
+       p = _rtw_usb_buffer_alloc(dev, size, dma);
+
+       rtw_mstat_update(
+               flags
+               , p ? MSTAT_ALLOC_SUCCESS : MSTAT_ALLOC_FAIL
+               , size
+       );
+
+       return p;
+}
+
+inline void dbg_rtw_usb_buffer_free(struct usb_device *dev, size_t size, void *addr, dma_addr_t dma, const enum mstat_f flags, const char *func, int line)
+{
+       //DBG_871X("DBG_MEM_ALLOC %s:%d %s(%d)\n", func, line, __FUNCTION__, size);
+
+       _rtw_usb_buffer_free(dev, size, addr, dma);
+
+       rtw_mstat_update(
+               flags
+               , MSTAT_FREE
+               , size
+       );
+}
+#endif /* CONFIG_USB_HCI */
+#endif /* DBG_MEM_ALLOC */
+
+void* rtw_malloc2d(int h, int w, int size)
+{
+       int j;
+
+       void **a = (void **) rtw_zmalloc( h*sizeof(void *) + h*w*size );
+       if(a == NULL)
+       {
+               DBG_871X("%s: alloc memory fail!\n", __FUNCTION__);
+               return NULL;
+       }
+
+       for( j=0; j<h; j++ )
+               a[j] = ((char *)(a+h)) + j*w*size;
+
+       return a;
+}
+
+void rtw_mfree2d(void *pbuf, int h, int w, int size)
+{
+       rtw_mfree((u8 *)pbuf, h*sizeof(void*) + w*h*size);
+}
+
+void _rtw_memcpy(void* dst, void* src, u32 sz)
+{
+
+#if defined (PLATFORM_LINUX)|| defined (PLATFORM_FREEBSD)
+
+       memcpy(dst, src, sz);
+
+#endif
+
+#ifdef PLATFORM_WINDOWS
+
+       NdisMoveMemory(dst, src, sz);
+
+#endif
+
+}
+
+int    _rtw_memcmp(void *dst, void *src, u32 sz)
+{
+
+#if defined (PLATFORM_LINUX)|| defined (PLATFORM_FREEBSD)
+//under Linux/GNU/GLibc, the return value of memcmp for two same mem. chunk is 0
+
+       if (!(memcmp(dst, src, sz)))
+               return _TRUE;
+       else
+               return _FALSE;
+#endif
+
+
+#ifdef PLATFORM_WINDOWS
+//under Windows, the return value of NdisEqualMemory for two same mem. chunk is 1
+
+       if (NdisEqualMemory (dst, src, sz))
+               return _TRUE;
+       else
+               return _FALSE;
+
+#endif
+
+
+
+}
+
+void _rtw_memset(void *pbuf, int c, u32 sz)
+{
+
+#if defined (PLATFORM_LINUX)|| defined (PLATFORM_FREEBSD)
+
+        memset(pbuf, c, sz);
+
+#endif
+
+#ifdef PLATFORM_WINDOWS
+#if 0
+       NdisZeroMemory(pbuf, sz);
+       if (c != 0) memset(pbuf, c, sz);
+#else
+       NdisFillMemory(pbuf, sz, c);
+#endif
+#endif
+
+}
+
+#ifdef PLATFORM_FREEBSD
+static inline void __list_add(_list *pnew, _list *pprev, _list *pnext)
+ {
+         pnext->prev = pnew;
+         pnew->next = pnext;
+         pnew->prev = pprev;
+         pprev->next = pnew;
+}
+#endif /* PLATFORM_FREEBSD */
+
+void _rtw_init_listhead(_list *list)
+{
+
+#ifdef PLATFORM_LINUX
+
+        INIT_LIST_HEAD(list);
+
+#endif
+
+#ifdef PLATFORM_FREEBSD
+         list->next = list;
+         list->prev = list;
+#endif
+#ifdef PLATFORM_WINDOWS
+
+        NdisInitializeListHead(list);
+
+#endif
+
+}
+
+
+/*
+For the following list_xxx operations,
+caller must guarantee the atomic context.
+Otherwise, there will be racing condition.
+*/
+u32    rtw_is_list_empty(_list *phead)
+{
+
+#ifdef PLATFORM_LINUX
+
+       if (list_empty(phead))
+               return _TRUE;
+       else
+               return _FALSE;
+
+#endif
+#ifdef PLATFORM_FREEBSD
+
+       if (phead->next == phead)
+               return _TRUE;
+       else
+               return _FALSE;
+
+#endif
+
+
+#ifdef PLATFORM_WINDOWS
+
+       if (IsListEmpty(phead))
+               return _TRUE;
+       else
+               return _FALSE;
+
+#endif
+
+
+}
+
+void rtw_list_insert_head(_list *plist, _list *phead)
+{
+
+#ifdef PLATFORM_LINUX
+       list_add(plist, phead);
+#endif
+
+#ifdef PLATFORM_FREEBSD
+       __list_add(plist, phead, phead->next);
+#endif
+
+#ifdef PLATFORM_WINDOWS
+       InsertHeadList(phead, plist);
+#endif
+}
+
+void rtw_list_insert_tail(_list *plist, _list *phead)
+{
+
+#ifdef PLATFORM_LINUX
+
+       list_add_tail(plist, phead);
+
+#endif
+#ifdef PLATFORM_FREEBSD
+
+       __list_add(plist, phead->prev, phead);
+
+#endif
+#ifdef PLATFORM_WINDOWS
+
+  InsertTailList(phead, plist);
+
+#endif
+
+}
+
+
+/*
+
+Caller must check if the list is empty before calling rtw_list_delete
+
+*/
+
+
+void _rtw_init_sema(_sema      *sema, int init_val)
+{
+
+#ifdef PLATFORM_LINUX
+
+       sema_init(sema, init_val);
+
+#endif
+#ifdef PLATFORM_FREEBSD
+       sema_init(sema, init_val, "rtw_drv");
+#endif
+#ifdef PLATFORM_OS_XP
+
+       KeInitializeSemaphore(sema, init_val,  SEMA_UPBND); // count=0;
+
+#endif
+
+#ifdef PLATFORM_OS_CE
+       if(*sema == NULL)
+               *sema = CreateSemaphore(NULL, init_val, SEMA_UPBND, NULL);
+#endif
+
+}
+
+void _rtw_free_sema(_sema      *sema)
+{
+#ifdef PLATFORM_FREEBSD
+       sema_destroy(sema);
+#endif
+#ifdef PLATFORM_OS_CE
+       CloseHandle(*sema);
+#endif
+
+}
+
+void _rtw_up_sema(_sema        *sema)
+{
+
+#ifdef PLATFORM_LINUX
+
+       up(sema);
+
+#endif
+#ifdef PLATFORM_FREEBSD
+       sema_post(sema);
+#endif
+#ifdef PLATFORM_OS_XP
+
+       KeReleaseSemaphore(sema, IO_NETWORK_INCREMENT, 1,  FALSE );
+
+#endif
+
+#ifdef PLATFORM_OS_CE
+       ReleaseSemaphore(*sema,  1,  NULL );
+#endif
+}
+
+u32 _rtw_down_sema(_sema *sema)
+{
+
+#ifdef PLATFORM_LINUX
+
+       if (down_interruptible(sema))
+               return _FAIL;
+       else
+               return _SUCCESS;
+
+#endif
+#ifdef PLATFORM_FREEBSD
+       sema_wait(sema);
+       return  _SUCCESS;
+#endif
+#ifdef PLATFORM_OS_XP
+
+       if(STATUS_SUCCESS == KeWaitForSingleObject(sema, Executive, KernelMode, TRUE, NULL))
+               return  _SUCCESS;
+       else
+               return _FAIL;
+#endif
+
+#ifdef PLATFORM_OS_CE
+       if(WAIT_OBJECT_0 == WaitForSingleObject(*sema, INFINITE ))
+               return _SUCCESS;
+       else
+               return _FAIL;
+#endif
+}
+
+
+
+void   _rtw_mutex_init(_mutex *pmutex)
+{
+#ifdef PLATFORM_LINUX
+
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
+       mutex_init(pmutex);
+#else
+       init_MUTEX(pmutex);
+#endif
+
+#endif
+#ifdef PLATFORM_FREEBSD
+       mtx_init(pmutex, "", NULL, MTX_DEF|MTX_RECURSE);
+#endif
+#ifdef PLATFORM_OS_XP
+
+       KeInitializeMutex(pmutex, 0);
+
+#endif
+
+#ifdef PLATFORM_OS_CE
+       *pmutex =  CreateMutex( NULL, _FALSE, NULL);
+#endif
+}
+
+void   _rtw_mutex_free(_mutex *pmutex);
+void   _rtw_mutex_free(_mutex *pmutex)
+{
+#ifdef PLATFORM_LINUX
+
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37))
+       mutex_destroy(pmutex);
+#else
+#endif
+
+#ifdef PLATFORM_FREEBSD
+       sema_destroy(pmutex);
+#endif
+
+#endif
+
+#ifdef PLATFORM_OS_XP
+
+#endif
+
+#ifdef PLATFORM_OS_CE
+
+#endif
+}
+
+void   _rtw_spinlock_init(_lock *plock)
+{
+
+#ifdef PLATFORM_LINUX
+
+       spin_lock_init(plock);
+
+#endif
+#ifdef PLATFORM_FREEBSD
+               mtx_init(plock, "", NULL, MTX_DEF|MTX_RECURSE);
+#endif
+#ifdef PLATFORM_WINDOWS
+
+       NdisAllocateSpinLock(plock);
+
+#endif
+
+}
+
+void   _rtw_spinlock_free(_lock *plock)
+{
+#ifdef PLATFORM_FREEBSD
+        mtx_destroy(plock);
+#endif
+
+#ifdef PLATFORM_WINDOWS
+
+       NdisFreeSpinLock(plock);
+
+#endif
+
+}
+#ifdef PLATFORM_FREEBSD
+extern PADAPTER prtw_lock;
+
+void rtw_mtx_lock(_lock *plock){
+       if(prtw_lock){
+               mtx_lock(&prtw_lock->glock);
+       }
+       else{
+               printf("%s prtw_lock==NULL",__FUNCTION__);
+       }
+}
+void rtw_mtx_unlock(_lock *plock){
+       if(prtw_lock){
+               mtx_unlock(&prtw_lock->glock);
+       }
+       else{
+               printf("%s prtw_lock==NULL",__FUNCTION__);
+       }
+
+}
+#endif //PLATFORM_FREEBSD
+
+
+void   _rtw_spinlock(_lock     *plock)
+{
+
+#ifdef PLATFORM_LINUX
+
+       spin_lock(plock);
+
+#endif
+#ifdef PLATFORM_FREEBSD
+       mtx_lock(plock);
+#endif
+#ifdef PLATFORM_WINDOWS
+
+       NdisAcquireSpinLock(plock);
+
+#endif
+
+}
+
+void   _rtw_spinunlock(_lock *plock)
+{
+
+#ifdef PLATFORM_LINUX
+
+       spin_unlock(plock);
+
+#endif
+#ifdef PLATFORM_FREEBSD
+       mtx_unlock(plock);
+#endif
+#ifdef PLATFORM_WINDOWS
+
+       NdisReleaseSpinLock(plock);
+
+#endif
+}
+
+
+void   _rtw_spinlock_ex(_lock  *plock)
+{
+
+#ifdef PLATFORM_LINUX
+
+       spin_lock(plock);
+
+#endif
+#ifdef PLATFORM_FREEBSD
+       mtx_lock(plock);
+#endif
+#ifdef PLATFORM_WINDOWS
+
+       NdisDprAcquireSpinLock(plock);
+
+#endif
+
+}
+
+void   _rtw_spinunlock_ex(_lock *plock)
+{
+
+#ifdef PLATFORM_LINUX
+
+       spin_unlock(plock);
+
+#endif
+#ifdef PLATFORM_FREEBSD
+       mtx_unlock(plock);
+#endif
+#ifdef PLATFORM_WINDOWS
+
+       NdisDprReleaseSpinLock(plock);
+
+#endif
+}
+
+
+
+void   _rtw_init_queue(_queue  *pqueue)
+{
+
+       _rtw_init_listhead(&(pqueue->queue));
+
+       _rtw_spinlock_init(&(pqueue->lock));
+
+}
+
+u32      _rtw_queue_empty(_queue       *pqueue)
+{
+       return (rtw_is_list_empty(&(pqueue->queue)));
+}
+
+
+u32 rtw_end_of_queue_search(_list *head, _list *plist)
+{
+       if (head == plist)
+               return _TRUE;
+       else
+               return _FALSE;
+}
+
+
+u32    rtw_get_current_time(void)
+{
+
+#ifdef PLATFORM_LINUX
+       return jiffies;
+#endif
+#ifdef PLATFORM_FREEBSD
+       struct timeval tvp;
+       getmicrotime(&tvp);
+       return tvp.tv_sec;
+#endif
+#ifdef PLATFORM_WINDOWS
+       LARGE_INTEGER   SystemTime;
+       NdisGetCurrentSystemTime(&SystemTime);
+       return (u32)(SystemTime.LowPart);// count of 100-nanosecond intervals
+#endif
+}
+
+inline u32 rtw_systime_to_ms(u32 systime)
+{
+#ifdef PLATFORM_LINUX
+       return systime * 1000 / HZ;
+#endif
+#ifdef PLATFORM_FREEBSD
+       return systime * 1000;
+#endif
+#ifdef PLATFORM_WINDOWS
+       return systime / 10000 ;
+#endif
+}
+
+inline u32 rtw_ms_to_systime(u32 ms)
+{
+#ifdef PLATFORM_LINUX
+       return ms * HZ / 1000;
+#endif
+#ifdef PLATFORM_FREEBSD
+       return ms /1000;
+#endif
+#ifdef PLATFORM_WINDOWS
+       return ms * 10000 ;
+#endif
+}
+
+// the input parameter start use the same unit as returned by rtw_get_current_time
+inline s32 rtw_get_passing_time_ms(u32 start)
+{
+#ifdef PLATFORM_LINUX
+       return rtw_systime_to_ms(jiffies-start);
+#endif
+#ifdef PLATFORM_FREEBSD
+       return rtw_systime_to_ms(rtw_get_current_time());
+#endif
+#ifdef PLATFORM_WINDOWS
+       LARGE_INTEGER   SystemTime;
+       NdisGetCurrentSystemTime(&SystemTime);
+       return rtw_systime_to_ms((u32)(SystemTime.LowPart) - start) ;
+#endif
+}
+
+inline s32 rtw_get_time_interval_ms(u32 start, u32 end)
+{
+#ifdef PLATFORM_LINUX
+       return rtw_systime_to_ms(end-start);
+#endif
+#ifdef PLATFORM_FREEBSD
+       return rtw_systime_to_ms(rtw_get_current_time());
+#endif
+#ifdef PLATFORM_WINDOWS
+       return rtw_systime_to_ms(end-start);
+#endif
+}
+
+
+void rtw_sleep_schedulable(int ms)
+{
+
+#ifdef PLATFORM_LINUX
+
+    u32 delta;
+
+    delta = (ms * HZ)/1000;//(ms)
+    if (delta == 0) {
+        delta = 1;// 1 ms
+    }
+    set_current_state(TASK_INTERRUPTIBLE);
+    if (schedule_timeout(delta) != 0) {
+        return ;
+    }
+    return;
+
+#endif
+#ifdef PLATFORM_FREEBSD
+       DELAY(ms*1000);
+       return ;
+#endif
+
+#ifdef PLATFORM_WINDOWS
+
+       NdisMSleep(ms*1000); //(us)*1000=(ms)
+
+#endif
+
+}
+
+
+void rtw_msleep_os(int ms)
+{
+
+#ifdef PLATFORM_LINUX
+
+       msleep((unsigned int)ms);
+
+#endif
+#ifdef PLATFORM_FREEBSD
+       //Delay for delay microseconds
+       DELAY(ms*1000);
+       return ;
+#endif
+#ifdef PLATFORM_WINDOWS
+
+       NdisMSleep(ms*1000); //(us)*1000=(ms)
+
+#endif
+
+
+}
+void rtw_usleep_os(int us)
+{
+
+#ifdef PLATFORM_LINUX
+
+      // msleep((unsigned int)us);
+      if ( 1 < (us/1000) )
+                msleep(1);
+      else
+               msleep( (us/1000) + 1);
+
+#endif
+#ifdef PLATFORM_FREEBSD
+       //Delay for delay microseconds
+       DELAY(us);
+
+       return ;
+#endif
+#ifdef PLATFORM_WINDOWS
+
+       NdisMSleep(us); //(us)
+
+#endif
+
+
+}
+
+
+#ifdef DBG_DELAY_OS
+void _rtw_mdelay_os(int ms, const char *func, const int line)
+{
+       #if 0
+       if(ms>10)
+               DBG_871X("%s:%d %s(%d)\n", func, line, __FUNCTION__, ms);
+               rtw_msleep_os(ms);
+       return;
+       #endif
+
+
+       DBG_871X("%s:%d %s(%d)\n", func, line, __FUNCTION__, ms);
+
+#if defined(PLATFORM_LINUX)
+
+       mdelay((unsigned long)ms);
+
+#elif defined(PLATFORM_WINDOWS)
+
+       NdisStallExecution(ms*1000); //(us)*1000=(ms)
+
+#endif
+
+
+}
+void _rtw_udelay_os(int us, const char *func, const int line)
+{
+
+       #if 0
+       if(us > 1000) {
+       DBG_871X("%s:%d %s(%d)\n", func, line, __FUNCTION__, us);
+               rtw_usleep_os(us);
+               return;
+       }
+       #endif
+
+
+       DBG_871X("%s:%d %s(%d)\n", func, line, __FUNCTION__, us);
+
+
+#if defined(PLATFORM_LINUX)
+
+      udelay((unsigned long)us);
+
+#elif defined(PLATFORM_WINDOWS)
+
+       NdisStallExecution(us); //(us)
+
+#endif
+
+}
+#else
+void rtw_mdelay_os(int ms)
+{
+
+#ifdef PLATFORM_LINUX
+
+       mdelay((unsigned long)ms);
+
+#endif
+#ifdef PLATFORM_FREEBSD
+       DELAY(ms*1000);
+       return ;
+#endif
+#ifdef PLATFORM_WINDOWS
+
+       NdisStallExecution(ms*1000); //(us)*1000=(ms)
+
+#endif
+
+
+}
+void rtw_udelay_os(int us)
+{
+
+#ifdef PLATFORM_LINUX
+
+      udelay((unsigned long)us);
+
+#endif
+#ifdef PLATFORM_FREEBSD
+       //Delay for delay microseconds
+       DELAY(us);
+       return ;
+#endif
+#ifdef PLATFORM_WINDOWS
+
+       NdisStallExecution(us); //(us)
+
+#endif
+
+}
+#endif
+
+void rtw_yield_os()
+{
+#ifdef PLATFORM_LINUX
+       yield();
+#endif
+#ifdef PLATFORM_FREEBSD
+       yield();
+#endif
+#ifdef PLATFORM_WINDOWS
+       SwitchToThread();
+#endif
+}
+
+#define RTW_SUSPEND_LOCK_NAME "rtw_wifi"
+
+#ifdef CONFIG_WAKELOCK
+static struct wake_lock rtw_suspend_lock;
+#elif defined(CONFIG_ANDROID_POWER)
+static android_suspend_lock_t rtw_suspend_lock ={
+       .name = RTW_SUSPEND_LOCK_NAME
+};
+#endif
+
+inline void rtw_suspend_lock_init()
+{
+       #ifdef CONFIG_WAKELOCK
+       wake_lock_init(&rtw_suspend_lock, WAKE_LOCK_SUSPEND, RTW_SUSPEND_LOCK_NAME);
+       #elif defined(CONFIG_ANDROID_POWER)
+       android_init_suspend_lock(&rtw_suspend_lock);
+       #endif
+}
+
+inline void rtw_suspend_lock_uninit()
+{
+       #ifdef CONFIG_WAKELOCK
+       wake_lock_destroy(&rtw_suspend_lock);
+       #elif defined(CONFIG_ANDROID_POWER)
+       android_uninit_suspend_lock(&rtw_suspend_lock);
+       #endif
+}
+
+inline void rtw_lock_suspend()
+{
+       #ifdef CONFIG_WAKELOCK
+       wake_lock(&rtw_suspend_lock);
+       #elif defined(CONFIG_ANDROID_POWER)
+       android_lock_suspend(&rtw_suspend_lock);
+       #endif
+}
+
+inline void rtw_unlock_suspend()
+{
+       #ifdef CONFIG_WAKELOCK
+       wake_unlock(&rtw_suspend_lock);
+       #elif defined(CONFIG_ANDROID_POWER)
+       android_unlock_suspend(&rtw_suspend_lock);
+       #endif
+}
+
+inline void rtw_lock_suspend_timeout(u32 timeout_ms)
+{
+       #ifdef CONFIG_WAKELOCK
+       wake_lock_timeout(&rtw_suspend_lock, rtw_ms_to_systime(timeout_ms));
+       #elif defined(CONFIG_ANDROID_POWER)
+       android_lock_suspend_auto_expire(&rtw_suspend_lock, rtw_ms_to_systime(timeout_ms));
+       #endif
+}
+
+inline void ATOMIC_SET(ATOMIC_T *v, int i)
+{
+       #ifdef PLATFORM_LINUX
+       atomic_set(v,i);
+       #elif defined(PLATFORM_WINDOWS)
+       *v=i;// other choice????
+       #elif defined(PLATFORM_FREEBSD)
+       atomic_set_int(v,i);
+       #endif
+}
+
+inline int ATOMIC_READ(ATOMIC_T *v)
+{
+       #ifdef PLATFORM_LINUX
+       return atomic_read(v);
+       #elif defined(PLATFORM_WINDOWS)
+       return *v; // other choice????
+       #elif defined(PLATFORM_FREEBSD)
+       return atomic_load_acq_32(v);
+       #endif
+}
+
+inline void ATOMIC_ADD(ATOMIC_T *v, int i)
+{
+       #ifdef PLATFORM_LINUX
+       atomic_add(i,v);
+       #elif defined(PLATFORM_WINDOWS)
+       InterlockedAdd(v,i);
+       #elif defined(PLATFORM_FREEBSD)
+       atomic_add_int(v,i);
+       #endif
+}
+inline void ATOMIC_SUB(ATOMIC_T *v, int i)
+{
+       #ifdef PLATFORM_LINUX
+       atomic_sub(i,v);
+       #elif defined(PLATFORM_WINDOWS)
+       InterlockedAdd(v,-i);
+       #elif defined(PLATFORM_FREEBSD)
+       atomic_subtract_int(v,i);
+       #endif
+}
+
+inline void ATOMIC_INC(ATOMIC_T *v)
+{
+       #ifdef PLATFORM_LINUX
+       atomic_inc(v);
+       #elif defined(PLATFORM_WINDOWS)
+       InterlockedIncrement(v);
+       #elif defined(PLATFORM_FREEBSD)
+       atomic_add_int(v,1);
+       #endif
+}
+
+inline void ATOMIC_DEC(ATOMIC_T *v)
+{
+       #ifdef PLATFORM_LINUX
+       atomic_dec(v);
+       #elif defined(PLATFORM_WINDOWS)
+       InterlockedDecrement(v);
+       #elif defined(PLATFORM_FREEBSD)
+       atomic_subtract_int(v,1);
+       #endif
+}
+
+inline int ATOMIC_ADD_RETURN(ATOMIC_T *v, int i)
+{
+       #ifdef PLATFORM_LINUX
+       return atomic_add_return(i,v);
+       #elif defined(PLATFORM_WINDOWS)
+       return InterlockedAdd(v,i);
+       #elif defined(PLATFORM_FREEBSD)
+       atomic_add_int(v,i);
+       return atomic_load_acq_32(v);
+       #endif
+}
+
+inline int ATOMIC_SUB_RETURN(ATOMIC_T *v, int i)
+{
+       #ifdef PLATFORM_LINUX
+       return atomic_sub_return(i,v);
+       #elif defined(PLATFORM_WINDOWS)
+       return InterlockedAdd(v,-i);
+       #elif defined(PLATFORM_FREEBSD)
+       atomic_subtract_int(v,i);
+       return atomic_load_acq_32(v);
+       #endif
+}
+
+inline int ATOMIC_INC_RETURN(ATOMIC_T *v)
+{
+       #ifdef PLATFORM_LINUX
+       return atomic_inc_return(v);
+       #elif defined(PLATFORM_WINDOWS)
+       return InterlockedIncrement(v);
+       #elif defined(PLATFORM_FREEBSD)
+       atomic_add_int(v,1);
+       return atomic_load_acq_32(v);
+       #endif
+}
+
+inline int ATOMIC_DEC_RETURN(ATOMIC_T *v)
+{
+       #ifdef PLATFORM_LINUX
+       return atomic_dec_return(v);
+       #elif defined(PLATFORM_WINDOWS)
+       return InterlockedDecrement(v);
+       #elif defined(PLATFORM_FREEBSD)
+       atomic_subtract_int(v,1);
+       return atomic_load_acq_32(v);
+       #endif
+}
+
+
+#ifdef PLATFORM_LINUX
+/*
+* Open a file with the specific @param path, @param flag, @param mode
+* @param fpp the pointer of struct file pointer to get struct file pointer while file opening is success
+* @param path the path of the file to open
+* @param flag file operation flags, please refer to linux document
+* @param mode please refer to linux document
+* @return Linux specific error code
+*/
+static int openFile(struct file **fpp, char *path, int flag, int mode)
+{
+       struct file *fp;
+
+       fp=filp_open(path, flag, mode);
+       if(IS_ERR(fp)) {
+               *fpp=NULL;
+               return PTR_ERR(fp);
+       }
+       else {
+               *fpp=fp;
+               return 0;
+       }
+}
+
+/*
+* Close the file with the specific @param fp
+* @param fp the pointer of struct file to close
+* @return always 0
+*/
+static int closeFile(struct file *fp)
+{
+       filp_close(fp,NULL);
+       return 0;
+}
+
+static int readFile(struct file *fp,char *buf,int len)
+{
+       int rlen=0, sum=0;
+
+       if (!fp->f_op || !fp->f_op->read)
+               return -EPERM;
+
+       while(sum<len) {
+               rlen=fp->f_op->read(fp,buf+sum,len-sum, &fp->f_pos);
+               if(rlen>0)
+                       sum+=rlen;
+               else if(0 != rlen)
+                       return rlen;
+               else
+                       break;
+       }
+
+       return  sum;
+
+}
+
+static int writeFile(struct file *fp,char *buf,int len)
+{
+       int wlen=0, sum=0;
+
+       if (!fp->f_op || !fp->f_op->write)
+               return -EPERM;
+
+       while(sum<len) {
+               wlen=fp->f_op->write(fp,buf+sum,len-sum, &fp->f_pos);
+               if(wlen>0)
+                       sum+=wlen;
+               else if(0 != wlen)
+                       return wlen;
+               else
+                       break;
+       }
+
+       return sum;
+
+}
+
+/*
+* Test if the specifi @param path is a file and readable
+* @param path the path of the file to test
+* @return Linux specific error code
+*/
+static int isFileReadable(char *path)
+{
+       struct file *fp;
+       int ret = 0;
+       mm_segment_t oldfs;
+       char buf;
+
+       fp=filp_open(path, O_RDONLY, 0);
+       if(IS_ERR(fp)) {
+               ret = PTR_ERR(fp);
+       }
+       else {
+               oldfs = get_fs(); set_fs(get_ds());
+
+               if(1!=readFile(fp, &buf, 1))
+                       ret = PTR_ERR(fp);
+
+               set_fs(oldfs);
+               filp_close(fp,NULL);
+       }
+       return ret;
+}
+
+/*
+* Open the file with @param path and retrive the file content into memory starting from @param buf for @param sz at most
+* @param path the path of the file to open and read
+* @param buf the starting address of the buffer to store file content
+* @param sz how many bytes to read at most
+* @return the byte we've read, or Linux specific error code
+*/
+static int retriveFromFile(char *path, u8* buf, u32 sz)
+{
+       int ret =-1;
+       mm_segment_t oldfs;
+       struct file *fp;
+
+       if(path && buf) {
+               if( 0 == (ret=openFile(&fp,path, O_RDONLY, 0)) ){
+                       DBG_871X("%s openFile path:%s fp=%p\n",__FUNCTION__, path ,fp);
+
+                       oldfs = get_fs(); set_fs(get_ds());
+                       ret=readFile(fp, buf, sz);
+                       set_fs(oldfs);
+                       closeFile(fp);
+
+                       DBG_871X("%s readFile, ret:%d\n",__FUNCTION__, ret);
+
+               } else {
+                       DBG_871X("%s openFile path:%s Fail, ret:%d\n",__FUNCTION__, path, ret);
+               }
+       } else {
+               DBG_871X("%s NULL pointer\n",__FUNCTION__);
+               ret =  -EINVAL;
+       }
+       return ret;
+}
+
+/*
+* Open the file with @param path and wirte @param sz byte of data starting from @param buf into the file
+* @param path the path of the file to open and write
+* @param buf the starting address of the data to write into file
+* @param sz how many bytes to write at most
+* @return the byte we've written, or Linux specific error code
+*/
+static int storeToFile(char *path, u8* buf, u32 sz)
+{
+       int ret =0;
+       mm_segment_t oldfs;
+       struct file *fp;
+
+       if(path && buf) {
+               if( 0 == (ret=openFile(&fp, path, O_CREAT|O_WRONLY, 0666)) ) {
+                       DBG_871X("%s openFile path:%s fp=%p\n",__FUNCTION__, path ,fp);
+
+                       oldfs = get_fs(); set_fs(get_ds());
+                       ret=writeFile(fp, buf, sz);
+                       set_fs(oldfs);
+                       closeFile(fp);
+
+                       DBG_871X("%s writeFile, ret:%d\n",__FUNCTION__, ret);
+
+               } else {
+                       DBG_871X("%s openFile path:%s Fail, ret:%d\n",__FUNCTION__, path, ret);
+               }
+       } else {
+               DBG_871X("%s NULL pointer\n",__FUNCTION__);
+               ret =  -EINVAL;
+       }
+       return ret;
+}
+#endif //PLATFORM_LINUX
+
+/*
+* Test if the specifi @param path is a file and readable
+* @param path the path of the file to test
+* @return _TRUE or _FALSE
+*/
+int rtw_is_file_readable(char *path)
+{
+#ifdef PLATFORM_LINUX
+       if(isFileReadable(path) == 0)
+               return _TRUE;
+       else
+               return _FALSE;
+#else
+       //Todo...
+       return _FALSE;
+#endif
+}
+
+/*
+* Open the file with @param path and retrive the file content into memory starting from @param buf for @param sz at most
+* @param path the path of the file to open and read
+* @param buf the starting address of the buffer to store file content
+* @param sz how many bytes to read at most
+* @return the byte we've read
+*/
+int rtw_retrive_from_file(char *path, u8* buf, u32 sz)
+{
+#ifdef PLATFORM_LINUX
+       int ret =retriveFromFile(path, buf, sz);
+       return ret>=0?ret:0;
+#else
+       //Todo...
+       return 0;
+#endif
+}
+
+/*
+* Open the file with @param path and wirte @param sz byte of data starting from @param buf into the file
+* @param path the path of the file to open and write
+* @param buf the starting address of the data to write into file
+* @param sz how many bytes to write at most
+* @return the byte we've written
+*/
+int rtw_store_to_file(char *path, u8* buf, u32 sz)
+{
+#ifdef PLATFORM_LINUX
+       int ret =storeToFile(path, buf, sz);
+       return ret>=0?ret:0;
+#else
+       //Todo...
+       return 0;
+#endif
+}
+
+#if 1 //#ifdef MEM_ALLOC_REFINE_ADAPTOR
+#ifdef PLATFORM_LINUX
+struct net_device *rtw_alloc_etherdev_with_old_priv(int sizeof_priv, void *old_priv)
+{
+       struct net_device *pnetdev;
+       struct rtw_netdev_priv_indicator *pnpi;
+
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,35))
+       pnetdev = alloc_etherdev_mq(sizeof(struct rtw_netdev_priv_indicator), 4);
+#else
+       pnetdev = alloc_etherdev(sizeof(struct rtw_netdev_priv_indicator));
+#endif
+       if (!pnetdev)
+               goto RETURN;
+
+       pnpi = netdev_priv(pnetdev);
+       pnpi->priv=old_priv;
+       pnpi->sizeof_priv=sizeof_priv;
+
+RETURN:
+       return pnetdev;
+}
+
+struct net_device *rtw_alloc_etherdev(int sizeof_priv)
+{
+       struct net_device *pnetdev;
+       struct rtw_netdev_priv_indicator *pnpi;
+
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,35))
+       pnetdev = alloc_etherdev_mq(sizeof(struct rtw_netdev_priv_indicator), 4);
+#else
+       pnetdev = alloc_etherdev(sizeof(struct rtw_netdev_priv_indicator));
+#endif
+       if (!pnetdev)
+               goto RETURN;
+
+       pnpi = netdev_priv(pnetdev);
+
+       pnpi->priv = rtw_zvmalloc(sizeof_priv);
+       if (!pnpi->priv) {
+               free_netdev(pnetdev);
+               pnetdev = NULL;
+               goto RETURN;
+       }
+
+       pnpi->sizeof_priv=sizeof_priv;
+RETURN:
+       return pnetdev;
+}
+
+void rtw_free_netdev(struct net_device * netdev)
+{
+       struct rtw_netdev_priv_indicator *pnpi;
+
+       if(!netdev)
+               goto RETURN;
+
+       pnpi = netdev_priv(netdev);
+
+       if(!pnpi->priv)
+               goto RETURN;
+
+       rtw_vmfree(pnpi->priv, pnpi->sizeof_priv);
+       free_netdev(netdev);
+
+RETURN:
+       return;
+}
+
+/*
+* Jeff: this function should be called under ioctl (rtnl_lock is accquired) while
+* LINUX_VERSION_CODE < KERNEL_VERSION(2,6,26)
+*/
+int rtw_change_ifname(_adapter *padapter, const char *ifname)
+{
+       struct net_device *pnetdev;
+       struct net_device *cur_pnetdev = padapter->pnetdev;
+       struct rereg_nd_name_data *rereg_priv;
+       int ret;
+
+       if(!padapter)
+               goto error;
+
+       rereg_priv = &padapter->rereg_nd_name_priv;
+
+       //free the old_pnetdev
+       if(rereg_priv->old_pnetdev) {
+               free_netdev(rereg_priv->old_pnetdev);
+               rereg_priv->old_pnetdev = NULL;
+       }
+
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,26))
+       if(!rtnl_is_locked())
+               unregister_netdev(cur_pnetdev);
+       else
+#endif
+               unregister_netdevice(cur_pnetdev);
+
+       rtw_proc_remove_one(cur_pnetdev);
+
+       rereg_priv->old_pnetdev=cur_pnetdev;
+
+       pnetdev = rtw_init_netdev(padapter);
+       if (!pnetdev)  {
+               ret = -1;
+               goto error;
+       }
+
+       SET_NETDEV_DEV(pnetdev, dvobj_to_dev(adapter_to_dvobj(padapter)));
+
+       rtw_init_netdev_name(pnetdev, ifname);
+
+       _rtw_memcpy(pnetdev->dev_addr, padapter->eeprompriv.mac_addr, ETH_ALEN);
+
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,26))
+       if(!rtnl_is_locked())
+               ret = register_netdev(pnetdev);
+       else
+#endif
+               ret = register_netdevice(pnetdev);
+
+       if ( ret != 0) {
+               RT_TRACE(_module_hci_intfs_c_,_drv_err_,("register_netdev() failed\n"));
+               goto error;
+       }
+
+       rtw_proc_init_one(pnetdev);
+
+       return 0;
+
+error:
+
+       return -1;
+
+}
+#endif
+#endif //MEM_ALLOC_REFINE_ADAPTOR
+
+#ifdef PLATFORM_FREEBSD
+/*
+ * Copy a buffer from userspace and write into kernel address
+ * space.
+ *
+ * This emulation just calls the FreeBSD copyin function (to
+ * copy data from user space buffer into a kernel space buffer)
+ * and is designed to be used with the above io_write_wrapper.
+ *
+ * This function should return the number of bytes not copied.
+ * I.e. success results in a zero value.
+ * Negative error values are not returned.
+ */
+unsigned long
+copy_from_user(void *to, const void *from, unsigned long n)
+{
+        if ( copyin(from, to, n) != 0 ) {
+                /* Any errors will be treated as a failure
+                   to copy any of the requested bytes */
+                return n;
+        }
+
+        return 0;
+}
+
+unsigned long
+copy_to_user(void *to, const void *from, unsigned long n)
+{
+       if ( copyout(from, to, n) != 0 ) {
+               /* Any errors will be treated as a failure
+                  to copy any of the requested bytes */
+               return n;
+       }
+
+       return 0;
+}
+
+
+/*
+ * The usb_register and usb_deregister functions are used to register
+ * usb drivers with the usb subsystem. In this compatibility layer
+ * emulation a list of drivers (struct usb_driver) is maintained
+ * and is used for probing/attaching etc.
+ *
+ * usb_register and usb_deregister simply call these functions.
+ */
+int
+usb_register(struct usb_driver *driver)
+{
+        rtw_usb_linux_register(driver);
+        return 0;
+}
+
+
+int
+usb_deregister(struct usb_driver *driver)
+{
+        rtw_usb_linux_deregister(driver);
+        return 0;
+}
+
+void module_init_exit_wrapper(void *arg)
+{
+        int (*func)(void) = arg;
+        func();
+        return;
+}
+
+#endif //PLATFORM_FREEBSD
+u64 rtw_modular64(u64 x, u64 y)
+{
+#ifdef PLATFORM_LINUX
+       return do_div(x, y);
+#elif defined(PLATFORM_WINDOWS)
+       return (x % y);
+#elif defined(PLATFORM_FREEBSD)
+       return (x %y);
+#endif
+}
+
+u64 rtw_division64(u64 x, u64 y)
+{
+#ifdef PLATFORM_LINUX
+       do_div(x, y);
+       return x;
+#elif defined(PLATFORM_WINDOWS)
+       return (x / y);
+#elif defined(PLATFORM_FREEBSD)
+       return (x / y);
+#endif
+}
+
+void rtw_buf_free(u8 **buf, u32 *buf_len)
+{
+       u32 ori_len;
+
+       if (!buf || !buf_len)
+               return;
+
+       ori_len = *buf_len;
+
+       if (*buf) {
+               u32 tmp_buf_len = *buf_len;
+               *buf_len = 0;
+               rtw_mfree(*buf, tmp_buf_len);
+               *buf = NULL;
+       }
+}
+
+void rtw_buf_update(u8 **buf, u32 *buf_len, u8 *src, u32 src_len)
+{
+       u32 ori_len = 0, dup_len = 0;
+       u8 *ori = NULL;
+       u8 *dup = NULL;
+
+       if (!buf || !buf_len)
+               return;
+
+       if (!src || !src_len)
+               goto keep_ori;
+
+       /* duplicate src */
+       dup = rtw_malloc(src_len);
+       if (dup) {
+               dup_len = src_len;
+               _rtw_memcpy(dup, src, dup_len);
+       }
+
+keep_ori:
+       ori = *buf;
+       ori_len = *buf_len;
+
+       /* replace buf with dup */
+       *buf_len = 0;
+       *buf = dup;
+       *buf_len = dup_len;
+
+       /* free ori */
+       if (ori && ori_len > 0)
+               rtw_mfree(ori, ori_len);
+}
+
+
+/**
+ * rtw_cbuf_full - test if cbuf is full
+ * @cbuf: pointer of struct rtw_cbuf
+ *
+ * Returns: _TRUE if cbuf is full
+ */
+inline bool rtw_cbuf_full(struct rtw_cbuf *cbuf)
+{
+       return (cbuf->write == cbuf->read-1)? _TRUE : _FALSE;
+}
+
+/**
+ * rtw_cbuf_empty - test if cbuf is empty
+ * @cbuf: pointer of struct rtw_cbuf
+ *
+ * Returns: _TRUE if cbuf is empty
+ */
+inline bool rtw_cbuf_empty(struct rtw_cbuf *cbuf)
+{
+       return (cbuf->write == cbuf->read)? _TRUE : _FALSE;
+}
+
+/**
+ * rtw_cbuf_push - push a pointer into cbuf
+ * @cbuf: pointer of struct rtw_cbuf
+ * @buf: pointer to push in
+ *
+ * Lock free operation, be careful of the use scheme
+ * Returns: _TRUE push success
+ */
+bool rtw_cbuf_push(struct rtw_cbuf *cbuf, void *buf)
+{
+       if (rtw_cbuf_full(cbuf))
+               return _FAIL;
+
+       if (0)
+               DBG_871X("%s on %u\n", __func__, cbuf->write);
+       cbuf->bufs[cbuf->write] = buf;
+       cbuf->write = (cbuf->write+1)%cbuf->size;
+
+       return _SUCCESS;
+}
+
+/**
+ * rtw_cbuf_pop - pop a pointer from cbuf
+ * @cbuf: pointer of struct rtw_cbuf
+ *
+ * Lock free operation, be careful of the use scheme
+ * Returns: pointer popped out
+ */
+void *rtw_cbuf_pop(struct rtw_cbuf *cbuf)
+{
+       void *buf;
+       if (rtw_cbuf_empty(cbuf))
+               return NULL;
+
+       if (0)
+               DBG_871X("%s on %u\n", __func__, cbuf->read);
+       buf = cbuf->bufs[cbuf->read];
+       cbuf->read = (cbuf->read+1)%cbuf->size;
+
+       return buf;
+}
+
+/**
+ * rtw_cbuf_alloc - allocte a rtw_cbuf with given size and do initialization
+ * @size: size of pointer
+ *
+ * Returns: pointer of srtuct rtw_cbuf, NULL for allocation failure
+ */
+struct rtw_cbuf *rtw_cbuf_alloc(u32 size)
+{
+       struct rtw_cbuf *cbuf;
+
+       cbuf = (struct rtw_cbuf *)rtw_malloc(sizeof(*cbuf) + sizeof(void*)*size);
+
+       if (cbuf) {
+               cbuf->write = cbuf->read = 0;
+               cbuf->size = size;
+       }
+
+       return cbuf;
+}
+
+/**
+ * rtw_cbuf_free - free the given rtw_cbuf
+ * @cbuf: pointer of struct rtw_cbuf to free
+ */
+void rtw_cbuf_free(struct rtw_cbuf *cbuf)
+{
+       rtw_mfree((u8*)cbuf, sizeof(*cbuf) + sizeof(void*)*cbuf->size);
+}
diff --git a/drivers/net/wireless/realtek/rtl8192cu/runwpa b/drivers/net/wireless/realtek/rtl8192cu/runwpa
new file mode 100755 (executable)
index 0000000..17616d8
--- /dev/null
@@ -0,0 +1,18 @@
+#!/bin/bash
+
+if [ "`which iwconfig`" = "" ] ; then
+       echo "WARNING:Wireless tool not exist!"
+       echo "        Please install it!"
+       exit
+else
+       if [ `uname -r | cut -d. -f2` -eq 4 ]; then
+               wpa_supplicant -D ipw -c wpa1.conf -i wlan0
+       else
+       if [ `iwconfig -v |awk '{print $4}' | head -n 1` -lt  18 ] ; then
+               wpa_supplicant -D ipw -c wpa1.conf -i wlan0
+       else
+               wpa_supplicant -D wext -c wpa1.conf -i wlan0
+       fi
+
+       fi
+fi
diff --git a/drivers/net/wireless/realtek/rtl8192cu/wlan0dhcp b/drivers/net/wireless/realtek/rtl8192cu/wlan0dhcp
new file mode 100755 (executable)
index 0000000..24ab372
--- /dev/null
@@ -0,0 +1,15 @@
+#!/bin/bash
+
+var0=`ps aux|awk '/dhclient wlan0/'|awk '$11!="awk"{print $2}'`
+
+kill $var0
+cp ifcfg-wlan0 /etc/sysconfig/network-scripts/
+
+dhclient wlan0
+
+var1=`ifconfig wlan0 |awk '/inet/{print $2}'|awk -F: '{print $2}'`
+
+
+rm -f /etc/sysconfig/network-scripts/ifcfg-wlan0
+
+echo "get ip: $var1"